Play interactive tour

Edit tour

Analysis Report mAGs0IsoB7.exe

Overview

General Information

Sample Name:	mAGs0IsoB7.exe
Analysis ID:	433863
MD5:	bc7522c569863c07247effeed6adda85
SHA1:	c24981fe4acd02e6adf1c5127dc9a6ddf8334ed9
SHA256:	1704f37b457e8947b989c130dc603c67d5d1d1166e2a3138698610d3f2d0bbfc
Tags:	32exe
Infos:
Most interesting Screenshot:

Detection

Score:	45
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Compliance

Score:	20
Range:	0 - 100

Signatures

Multi AV Scanner detection for submitted file

Contains functionality to detect sleep reduction / modifications

Machine Learning detection for dropped file

Machine Learning detection for sample

Allocates memory with a write watch (potentially for evading sandboxes)

Contains capabilities to detect virtual machines

Contains functionality to check if a debugger is running (IsDebuggerPresent)

Contains functionality to check if a debugger is running (OutputDebugString,GetLastError)

Contains functionality to check if a window is minimized (may be used to check if an application is visible)

Contains functionality to check the parent process ID (often done to detect debuggers and analysis systems)

Contains functionality to dynamically determine API calls

Contains functionality to query CPU information (cpuid)

Contains functionality to query locales information (e.g. system language)

Contains functionality to read the PEB

Contains functionality which may be used to detect a debugger (GetProcessHeap)

Creates a process in suspended mode (likely to inject code)

DLL planting / hijacking vulnerabilities found

Detected potential crypto function

Downloads executable code via HTTP

Drops PE files

EXE planting / hijacking vulnerabilities found

Extensive use of GetProcAddress (often used to hide API calls)

Found dropped PE file which has not been started or loaded

Found potential string decryption / allocating functions

IP address seen in connection with other malware

JA3 SSL client fingerprint seen in connection with other malware

Monitors certain registry keys / values for changes (often done to protect autostart functionality)

PE file contains an invalid checksum

PE file contains executable resources (Code or Archives)

PE file contains strange resources

Potential key logger detected (key state polling based)

Queries disk information (often used to detect virtual machines)

Queries the volume information (name, serial number etc) of a device

Sample file is different than original file name gathered from version info

Stores files to the Windows start menu directory

Uses 32bit PE files

Uses Microsoft's Enhanced Cryptographic Provider

Uses a known web browser user agent for HTTP communication

Uses code obfuscation techniques (call, push, ret)

Classification

Process Tree

System is w10x64

mAGs0IsoB7.exe (PID: 5960 cmdline: 'C:\Users\user\Desktop\mAGs0IsoB7.exe' MD5: BC7522C569863C07247EFFEED6ADDA85)

sdly.exe (PID: 1956 cmdline: 'C:\Users\user\AppData\Roaming\WdGame\sdly\sdly.exe' MD5: BC7522C569863C07247EFFEED6ADDA85)

cleanup

Malware Configuration

No configs have been found

Yara Overview

No yara matches

Sigma Overview

No Sigma rule has matched

Signature Overview

Click to jump to signature section

Show All Signature Results

AV Detection:

Multi AV Scanner detection for submitted file

Show sources

Source: mAGs0IsoB7.exe	Virustotal: Detection: 30%			Perma Link
Source: mAGs0IsoB7.exe	ReversingLabs: Detection: 41%

Machine Learning detection for dropped file

Show sources

Source: C:\Users\user\AppData\Roaming\WdGame\sdly\sdly.exe

Joe Sandbox ML: detected

Machine Learning detection for sample

Show sources

Source: mAGs0IsoB7.exe

Joe Sandbox ML: detected

Cryptography:

Source: C:\Users\user\Desktop\mAGs0IsoB7.exe	Code function: 1_2_00B166B0 CryptStringToBinaryW,MultiByteToWideChar,MultiByteToWideChar,	1_2_00B166B0
Source: C:\Users\user\Desktop\mAGs0IsoB7.exe	Code function: 1_2_00B168D0 CryptBinaryToStringW,WideCharToMultiByte,WideCharToMultiByte,	1_2_00B168D0
Source: C:\Users\user\AppData\Roaming\WdGame\sdly\sdly.exe	Code function: 19_2_002466B0 CryptStringToBinaryW,MultiByteToWideChar,MultiByteToWideChar,	19_2_002466B0
Source: C:\Users\user\AppData\Roaming\WdGame\sdly\sdly.exe	Code function: 19_2_002468D0 CryptBinaryToStringW,WideCharToMultiByte,WideCharToMultiByte,	19_2_002468D0

Privilege Escalation:

Source: C:\Users\user\Desktop\mAGs0IsoB7.exe	DLL: LINKINFO.dll	Jump to behavior
Source: C:\Users\user\Desktop\mAGs0IsoB7.exe	DLL: C:\Users\user\AppData\Roaming\WdGame\Utils\cef\pepflashplayer.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\WdGame\sdly\sdly.exe	DLL: WINMM.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\WdGame\sdly\sdly.exe	DLL: bcrypt.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\WdGame\sdly\sdly.exe	DLL: Secur32.dll	Jump to behavior
Source: C:\Users\user\Desktop\mAGs0IsoB7.exe	DLL: C:\Users\user\AppData\Roaming\WdGame\Utils\cef\libcef.dll	Jump to behavior
Source: C:\Users\user\Desktop\mAGs0IsoB7.exe	DLL: C:\Users\user\AppData\Roaming\WdGame\NetBridge.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\WdGame\sdly\sdly.exe	DLL: WININET.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\WdGame\sdly\sdly.exe	DLL: CRYPTSP.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\WdGame\sdly\sdly.exe	DLL: msIso.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\WdGame\sdly\sdly.exe	DLL: MSHTML.dll	Jump to behavior
Source: C:\Users\user\Desktop\mAGs0IsoB7.exe	DLL: C:\Users\user\AppData\Roaming\WdGame\Utils\7z.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\WdGame\sdly\sdly.exe	DLL: d3d11.dll	Jump to behavior
Source: C:\Users\user\Desktop\mAGs0IsoB7.exe	DLL: C:\Users\user\AppData\Roaming\WdGame\Utils\CefHelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\WdGame\sdly\sdly.exe	DLL: urlmon.dll	Jump to behavior
Source: C:\Users\user\Desktop\mAGs0IsoB7.exe	DLL: C:\Users\user\AppData\Roaming\WdGame\Utils\CefRes.dll	Jump to behavior
Source: C:\Users\user\Desktop\mAGs0IsoB7.exe	DLL: C:\Users\user\AppData\Roaming\WdGame\Utils\cef\d3dcompiler_43.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\WdGame\sdly\sdly.exe	DLL: TextInputFramework.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\WdGame\sdly\sdly.exe	DLL: d3d10warp.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\WdGame\sdly\sdly.exe	DLL: WINMMBASE.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\WdGame\sdly\sdly.exe	DLL: dbghelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\WdGame\sdly\sdly.exe	DLL: MSIMG32.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\WdGame\sdly\sdly.exe	DLL: PROPSYS.dll	Jump to behavior
Source: C:\Users\user\Desktop\mAGs0IsoB7.exe	DLL: srvcli.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\WdGame\sdly\sdly.exe	DLL: srpapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\WdGame\sdly\sdly.exe	DLL: d2d1.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\WdGame\sdly\sdly.exe	DLL: VERSION.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\WdGame\sdly\sdly.exe	DLL: MLANG.dll	Jump to behavior
Source: C:\Users\user\Desktop\mAGs0IsoB7.exe	DLL: ntshrui.dll	Jump to behavior
Source: C:\Users\user\Desktop\mAGs0IsoB7.exe	DLL: cscapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\mAGs0IsoB7.exe	DLL: C:\Users\user\AppData\Roaming\WdGame\Utils\WebView.dll	Jump to behavior
Source: C:\Users\user\Desktop\mAGs0IsoB7.exe	DLL: Cabinet.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\WdGame\sdly\sdly.exe	DLL: DPAPI.DLL	Jump to behavior
Source: C:\Users\user\AppData\Roaming\WdGame\sdly\sdly.exe	DLL: CoreUIComponents.dll	Jump to behavior
Source: C:\Users\user\Desktop\mAGs0IsoB7.exe	DLL: DEVRTL.dll	Jump to behavior
Source: C:\Users\user\Desktop\mAGs0IsoB7.exe	DLL: netutils.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\WdGame\sdly\sdly.exe	DLL: IPHLPAPI.DLL	Jump to behavior
Source: C:\Users\user\Desktop\mAGs0IsoB7.exe	DLL: C:\Users\user\AppData\Roaming\WdGame\Utils\cef\libGLESv2.dll	Jump to behavior
Source: C:\Users\user\Desktop\mAGs0IsoB7.exe	DLL: edputil.dll	Jump to behavior
Source: C:\Users\user\Desktop\mAGs0IsoB7.exe	DLL: C:\Users\user\AppData\Roaming\WdGame\Utils\cef\d3dcompiler_47.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\WdGame\sdly\sdly.exe	DLL: iertutil.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\WdGame\sdly\sdly.exe	DLL: ImgUtil.dll	Jump to behavior
Source: C:\Users\user\Desktop\mAGs0IsoB7.exe	DLL: C:\Users\user\AppData\Roaming\WdGame\Utils\cef\widevinecdmadapter.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\WdGame\sdly\sdly.exe	DLL: dxgi.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\WdGame\sdly\sdly.exe	DLL: CoreMessaging.dll	Jump to behavior
Source: C:\Users\user\Desktop\mAGs0IsoB7.exe	DLL: CLDAPI.dll	Jump to behavior
Source: C:\Users\user\Desktop\mAGs0IsoB7.exe	DLL: C:\Users\user\AppData\Roaming\WdGame\Utils\cef\libEGL.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\WdGame\sdly\sdly.exe	DLL: DWrite.dll	Jump to behavior

Source: C:\Users\user\Desktop\mAGs0IsoB7.exe	EXE: C:\Users\user\AppData\Roaming\WdGame\Utils\cef\wow_helper.exe	Jump to behavior
Source: C:\Users\user\Desktop\mAGs0IsoB7.exe	EXE: C:\Users\user\AppData\Roaming\WdGame\Utils\Uninst.exe	Jump to behavior
Source: C:\Users\user\Desktop\mAGs0IsoB7.exe	EXE: C:\Users\user\AppData\Roaming\WdGame\Utils\cef\CefView.exe	Jump to behavior
Source: C:\Users\user\Desktop\mAGs0IsoB7.exe	EXE: C:\Users\user\AppData\Roaming\WdGame\sdly\sdly.exe	Jump to behavior

Bitcoin Miner:

Source: C:\Users\user\Desktop\mAGs0IsoB7.exe	Registry value created: HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BROWSER_EMULATION mAGs0IsoB7.exe			Jump to behavior
Source: C:\Users\user\AppData\Roaming\WdGame\sdly\sdly.exe	Registry value created: HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BROWSER_EMULATION sdly.exe			Jump to behavior

Compliance:

DLL planting / hijacking vulnerabilities found

Show sources

Source: C:\Users\user\Desktop\mAGs0IsoB7.exe	DLL: LINKINFO.dll	Jump to behavior
Source: C:\Users\user\Desktop\mAGs0IsoB7.exe	DLL: C:\Users\user\AppData\Roaming\WdGame\Utils\cef\pepflashplayer.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\WdGame\sdly\sdly.exe	DLL: WINMM.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\WdGame\sdly\sdly.exe	DLL: bcrypt.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\WdGame\sdly\sdly.exe	DLL: Secur32.dll	Jump to behavior
Source: C:\Users\user\Desktop\mAGs0IsoB7.exe	DLL: C:\Users\user\AppData\Roaming\WdGame\Utils\cef\libcef.dll	Jump to behavior
Source: C:\Users\user\Desktop\mAGs0IsoB7.exe	DLL: C:\Users\user\AppData\Roaming\WdGame\NetBridge.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\WdGame\sdly\sdly.exe	DLL: WININET.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\WdGame\sdly\sdly.exe	DLL: CRYPTSP.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\WdGame\sdly\sdly.exe	DLL: msIso.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\WdGame\sdly\sdly.exe	DLL: MSHTML.dll	Jump to behavior
Source: C:\Users\user\Desktop\mAGs0IsoB7.exe	DLL: C:\Users\user\AppData\Roaming\WdGame\Utils\7z.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\WdGame\sdly\sdly.exe	DLL: d3d11.dll	Jump to behavior
Source: C:\Users\user\Desktop\mAGs0IsoB7.exe	DLL: C:\Users\user\AppData\Roaming\WdGame\Utils\CefHelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\WdGame\sdly\sdly.exe	DLL: urlmon.dll	Jump to behavior
Source: C:\Users\user\Desktop\mAGs0IsoB7.exe	DLL: C:\Users\user\AppData\Roaming\WdGame\Utils\CefRes.dll	Jump to behavior
Source: C:\Users\user\Desktop\mAGs0IsoB7.exe	DLL: C:\Users\user\AppData\Roaming\WdGame\Utils\cef\d3dcompiler_43.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\WdGame\sdly\sdly.exe	DLL: TextInputFramework.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\WdGame\sdly\sdly.exe	DLL: d3d10warp.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\WdGame\sdly\sdly.exe	DLL: WINMMBASE.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\WdGame\sdly\sdly.exe	DLL: dbghelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\WdGame\sdly\sdly.exe	DLL: MSIMG32.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\WdGame\sdly\sdly.exe	DLL: PROPSYS.dll	Jump to behavior
Source: C:\Users\user\Desktop\mAGs0IsoB7.exe	DLL: srvcli.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\WdGame\sdly\sdly.exe	DLL: srpapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\WdGame\sdly\sdly.exe	DLL: d2d1.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\WdGame\sdly\sdly.exe	DLL: VERSION.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\WdGame\sdly\sdly.exe	DLL: MLANG.dll	Jump to behavior
Source: C:\Users\user\Desktop\mAGs0IsoB7.exe	DLL: ntshrui.dll	Jump to behavior
Source: C:\Users\user\Desktop\mAGs0IsoB7.exe	DLL: cscapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\mAGs0IsoB7.exe	DLL: C:\Users\user\AppData\Roaming\WdGame\Utils\WebView.dll	Jump to behavior
Source: C:\Users\user\Desktop\mAGs0IsoB7.exe	DLL: Cabinet.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\WdGame\sdly\sdly.exe	DLL: DPAPI.DLL	Jump to behavior
Source: C:\Users\user\AppData\Roaming\WdGame\sdly\sdly.exe	DLL: CoreUIComponents.dll	Jump to behavior
Source: C:\Users\user\Desktop\mAGs0IsoB7.exe	DLL: DEVRTL.dll	Jump to behavior
Source: C:\Users\user\Desktop\mAGs0IsoB7.exe	DLL: netutils.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\WdGame\sdly\sdly.exe	DLL: IPHLPAPI.DLL	Jump to behavior
Source: C:\Users\user\Desktop\mAGs0IsoB7.exe	DLL: C:\Users\user\AppData\Roaming\WdGame\Utils\cef\libGLESv2.dll	Jump to behavior
Source: C:\Users\user\Desktop\mAGs0IsoB7.exe	DLL: edputil.dll	Jump to behavior
Source: C:\Users\user\Desktop\mAGs0IsoB7.exe	DLL: C:\Users\user\AppData\Roaming\WdGame\Utils\cef\d3dcompiler_47.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\WdGame\sdly\sdly.exe	DLL: iertutil.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\WdGame\sdly\sdly.exe	DLL: ImgUtil.dll	Jump to behavior
Source: C:\Users\user\Desktop\mAGs0IsoB7.exe	DLL: C:\Users\user\AppData\Roaming\WdGame\Utils\cef\widevinecdmadapter.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\WdGame\sdly\sdly.exe	DLL: dxgi.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\WdGame\sdly\sdly.exe	DLL: CoreMessaging.dll	Jump to behavior
Source: C:\Users\user\Desktop\mAGs0IsoB7.exe	DLL: CLDAPI.dll	Jump to behavior
Source: C:\Users\user\Desktop\mAGs0IsoB7.exe	DLL: C:\Users\user\AppData\Roaming\WdGame\Utils\cef\libEGL.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\WdGame\sdly\sdly.exe	DLL: DWrite.dll	Jump to behavior

EXE planting / hijacking vulnerabilities found

Show sources

Source: C:\Users\user\Desktop\mAGs0IsoB7.exe	EXE: C:\Users\user\AppData\Roaming\WdGame\Utils\cef\wow_helper.exe	Jump to behavior
Source: C:\Users\user\Desktop\mAGs0IsoB7.exe	EXE: C:\Users\user\AppData\Roaming\WdGame\Utils\Uninst.exe	Jump to behavior
Source: C:\Users\user\Desktop\mAGs0IsoB7.exe	EXE: C:\Users\user\AppData\Roaming\WdGame\Utils\cef\CefView.exe	Jump to behavior
Source: C:\Users\user\Desktop\mAGs0IsoB7.exe	EXE: C:\Users\user\AppData\Roaming\WdGame\sdly\sdly.exe	Jump to behavior

Uses 32bit PE files

Show sources

Source: mAGs0IsoB7.exe

Static PE information: 32BIT_MACHINE, EXECUTABLE_IMAGE

Creates a software uninstall entry

Show sources

Source: C:\Users\user\Desktop\mAGs0IsoB7.exe

Registry value created: HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Uninstall\WdGame_sdly

Jump to behavior

Creates license or readme file

Show sources

Source: C:\Users\user\Desktop\mAGs0IsoB7.exe

File created: C:\Users\user\AppData\Roaming\WdGame\Utils\cef\LICENSE.txt

Jump to behavior

PE / OLE file has a valid certificate

Show sources

Source: mAGs0IsoB7.exe

Static PE information: certificate valid

Uses secure TLS version for HTTPS connections

Show sources

Source: unknown

HTTPS traffic detected: 115.238.192.242:443 -> 192.168.2.3:49754 version: TLS 1.2

Contains modern PE file flags such as dynamic base (ASLR) or NX

Show sources

Source: mAGs0IsoB7.exe

Static PE information: TERMINAL_SERVER_AWARE, DYNAMIC_BASE, NX_COMPAT

Binary contains paths to debug symbols

Show sources

Source:	Binary string: D:\box\WdGameBox\Release\LiteGameBox2.pdb source: mAGs0IsoB7.exe
Source:	Binary string: D:\build\lib_common\webview\Release\CefView.pdb source: CefView.exe
Source:	Binary string: h:\ch1\src\sandbox\wow_helper\wow_helper.pdbp source: mAGs0IsoB7.exe, 00000001.00000003.375959176.00000000011A0000.00000004.00000001.sdmp, wow_helper.exe.1.dr
Source:	Binary string: C:\vmagent_new\bin\joblist\369595\out\Release\ResHelper.pdb source: mAGs0IsoB7.exe, 00000001.00000002.425472962.000000006C2C3000.00000002.00020000.sdmp
Source:	Binary string: \|D:\box\WdGameBox\Release\LiteGameBox2.pdb source: mAGs0IsoB7.exe
Source:	Binary string: d:\build\360cloud_build\360NetUL_base1031\bin\360NetUL.pdb source: mAGs0IsoB7.exe
Source:	Binary string: E:\open_source\cef\source\chromium\src\out\Release\widevinecdmadapter.dll.pdb source: mAGs0IsoB7.exe, 00000001.00000003.375959176.00000000011A0000.00000004.00000001.sdmp, widevinecdmadapter.dll.1.dr
Source:	Binary string: E:\open_source\cef\source\chromium\src\out\Release\widevinecdmadapter.dll.pdbGCTL source: mAGs0IsoB7.exe, 00000001.00000003.375959176.00000000011A0000.00000004.00000001.sdmp, widevinecdmadapter.dll.1.dr
Source:	Binary string: h:\ch1\src\sandbox\wow_helper\wow_helper.pdb source: mAGs0IsoB7.exe, 00000001.00000003.375959176.00000000011A0000.00000004.00000001.sdmp, wow_helper.exe.1.dr

Spreading:

Source: C:\Users\user\Desktop\mAGs0IsoB7.exe	Code function: 1_2_00A842B3 SetFileAttributesW,lstrlenW,FindClose,FindFirstFileW,FindClose,		1_2_00A842B3
Source: C:\Users\user\AppData\Roaming\WdGame\sdly\sdly.exe	Code function: 19_2_001B42B3 SetFileAttributesW,lstrlenW,FindClose,FindFirstFileW,FindClose,		19_2_001B42B3

Source: C:\Users\user\Desktop\mAGs0IsoB7.exe	File opened: C:\Users\user	Jump to behavior
Source: C:\Users\user\Desktop\mAGs0IsoB7.exe	File opened: C:\Users\user\AppData\Roaming\WdGame	Jump to behavior
Source: C:\Users\user\Desktop\mAGs0IsoB7.exe	File opened: C:\Users\user\AppData	Jump to behavior
Source: C:\Users\user\Desktop\mAGs0IsoB7.exe	File opened: C:\Users\user\AppData\Roaming\WdGame\sdly	Jump to behavior
Source: C:\Users\user\Desktop\mAGs0IsoB7.exe	File opened: C:\Users\user\AppData\Roaming	Jump to behavior
Source: C:\Users\user\Desktop\mAGs0IsoB7.exe	File opened: C:\Users\user\AppData\Roaming\WdGame\sdly\sdly.exe	Jump to behavior

Networking:

Source: global traffic

HTTP traffic detected: HTTP/1.1 200 OKServer: TengineContent-Type: application/octet-streamContent-Length: 1113400Connection: keep-aliveDate: Mon, 14 Jun 2021 01:43:23 GMTx-oss-request-id: 60C6B43BBD5C4D3233D87E21x-oss-cdn-auth: successAccept-Ranges: bytesETag: "C4AA6D9E72A1721B3F65646E04E702CF"Last-Modified: Thu, 17 Dec 2020 05:40:22 GMTx-oss-object-type: Normalx-oss-hash-crc64ecma: 3096456683339413985x-oss-storage-class: StandardContent-MD5: xKptnnKhchs/ZWRuBOcCzw==x-oss-server-time: 27Via: cache29.l2cn2628[0,0,304-0,H], cache42.l2cn2628[0,0], vcache4.cn3284[0,0,200-0,H], vcache1.cn3284[4,0]Ali-Swift-Global-Savetime: 1611736566Age: 9497X-Cache: HIT TCP_MEM_HIT dirn:0:513005844X-Swift-SaveTime: Mon, 14 Jun 2021 02:32:59 GMTX-Swift-CacheTime: 10800Access-Control-Allow-Origin: *Timing-Allow-Origin: *EagleId: 73e7989516236445005388172eData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e8 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 b9 f8 f1 69 fd 99 9f 3a fd 99 9f 3a fd 99 9f 3a f4 e1 0a 3a e9 99 9f 3a da 5f f2 3a fc 99 9f 3a da 5f e4 3a fa 99 9f 3a fd 99 9e 3a 61 99 9f 3a f4 e1 1c 3a 90 99 9f 3a f4 e1 1b 3a 09 99 9f 3a f4 e1 0d 3a fc 99 9f 3a e3 cb 0b 3a fc 99 9f 3a f4 e1 0e 3a fc 99 9f 3a 52 69 63 68 fd 99 9f 3a 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 05 00 f6 ce 69 54 00 00 00 00 00 00 00 00 e0 00 02 21 0b 01 09 00 00 c4 0b 00 00 f6 04 00 00 00 00 00 33 d1 09 00 00 10 00 00 00 e0 0b 00 00 00 00 10 00 10 00 00 00 02 00 00 05 00 00 00 00 00 00 00 05 00 00 00 00 00 00 00 00 50 11 00 00 04 00 00 9b 0d 11 00 02 00 00 00 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 80 38 0e 00 f2 00 00 00 74 2a 0e 00 50 00 00 00 00 20 0f 00 bc 7d 01 00 00 00 00 00 00 00 00 00 98 c0 10 00 a0 3c 00 00 00 a0 10 00 b4 a4 00 00 e0 e3 0b 00 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 90 7b 0c 00 40 00 00 00 00 00 00 00 00 00 00 00 00 e0 0b 00 7c 02 00 00 00 00 00 00 00 00 00 00 Data Ascii: MZ@!L!This program cannot be run in DOS mode.$i:::::_::_:::a:::::::::::Rich:PELiT!3P8t*P }<{@|

Source: Joe Sandbox View	IP Address: 120.27.82.56 120.27.82.56
Source: Joe Sandbox View	IP Address: 139.129.105.182 139.129.105.182

Source: Joe Sandbox View

JA3 fingerprint: 37f463bf4616ecd445d4a1937da06e19

Source: global traffic	HTTP traffic detected: GET /wan?type=weiduan&action=install&channel=taskpop&mid=b8a4400180ee20f44982cb4d73d6fcd7&mid2=3b2907f96b378f57275538e3aa2275c022a86ca52985&uid=d&appver=&modver=3.2.5.61&sign=ed62ccbaa79a95c345b484e11080c4db&from=taskpop_sdly&forcetick=6867625 HTTP/1.1Accept: /Accept-Encoding: gzip, deflateUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoHost: s.ludashi.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wan/wan/7z.dll HTTP/1.1Accept: /User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; .NET CLR 2.0.50727)Accept-Encoding: gzipHost: cdn-file-ssl-wan.ludashi.comConnection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /wan?type=weiduan&action=7z_noexist&channel=taskpop&mid=b8a4400180ee20f44982cb4d73d6fcd7&mid2=3b2907f96b378f57275538e3aa2275c022a86ca52985&uid=d&appver=&modver=3.2.5.61&sign=3bc1bffb6c4712a112e8ecce47d6fa79&from=taskpop_sdly&forcetick=6868015 HTTP/1.1Accept: /Accept-Encoding: gzip, deflateUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoHost: s.ludashi.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wan?type=weiduan&action=7z_download_start&channel=taskpop&mid=b8a4400180ee20f44982cb4d73d6fcd7&mid2=3b2907f96b378f57275538e3aa2275c022a86ca52985&uid=d&appver=&modver=3.2.5.61&sign=2b53c48f838a76f468aefa60e63f791e&from=taskpop_sdly&forcetick=6868015 HTTP/1.1Accept: /Accept-Encoding: gzip, deflateUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoHost: s.ludashi.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wan?type=weiduan&action=7z_download_success&channel=taskpop&mid=b8a4400180ee20f44982cb4d73d6fcd7&mid2=3b2907f96b378f57275538e3aa2275c022a86ca52985&uid=d&appver=&modver=3.2.5.61&sign=557423491fe0521caf2ffd61b7905912&from=taskpop_sdly&forcetick=6871468 HTTP/1.1Accept: /Accept-Encoding: gzip, deflateUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoHost: s.ludashi.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /pc/cef/CefRes.dll?t=202106140621 HTTP/1.1Accept: /User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; .NET CLR 2.0.50727)Host: cdn-file-ssl-pc.ludashi.comConnection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /wan?type=weiduan&action=res_down_success&channel=taskpop&mid=b8a4400180ee20f44982cb4d73d6fcd7&mid2=3b2907f96b378f57275538e3aa2275c022a86ca52985&uid=d&appver=&modver=3.2.5.61&sign=9d53b4bca7b82f1474611b4f23e776a3&from=taskpop_sdly&forcetick=6936562 HTTP/1.1Accept: /Accept-Encoding: gzip, deflateUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoHost: s.ludashi.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /pc/game/flash/pepflashplayer.7z?t=202106140622 HTTP/1.1Accept: /User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; .NET CLR 2.0.50727)Host: cdn-file-ssl-wan.ludashi.comConnection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /wan?type=weiduan&action=pepflash_down_success&channel=taskpop&mid=b8a4400180ee20f44982cb4d73d6fcd7&mid2=3b2907f96b378f57275538e3aa2275c022a86ca52985&uid=d&appver=&modver=3.2.5.61&sign=c7d5ce77d59cfd2f2c593107334b846d&from=taskpop_sdly&forcetick=6953968 HTTP/1.1Accept: /Accept-Encoding: gzip, deflateUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoHost: s.ludashi.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wan?type=weiduan&action=add_uninst_item&channel=taskpop&mid=b8a4400180ee20f44982cb4d73d6fcd7&mid2=3b2907f96b378f57275538e3aa2275c022a86ca52985&uid=d&appver=&modver=3.2.5.61&sign=79ea5434ed60d529ca960c4c6957a02e&from=taskpop_sdly&forcetick=6954625 HTTP/1.1Accept: /Accept-Encoding: gzip, deflateUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoHost: s.ludashi.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wan?type=weiduan&action=add_desk_icon&channel=taskpop&mid=b8a4400180ee20f44982cb4d73d6fcd7&mid2=3b2907f96b378f57275538e3aa2275c022a86ca52985&uid=d&appver=&modver=3.2.5.61&sign=8a2e3612028fb75ddba64e37e6586529&from=taskpop_sdly&forcetick=6954671 HTTP/1.1Accept: /Accept-Encoding: gzip, deflateUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoHost: s.ludashi.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wan?type=weiduan&action=install_extra&channel=taskpop&mid=b8a4400180ee20f44982cb4d73d6fcd7&mid2=3b2907f96b378f57275538e3aa2275c022a86ca52985&uid=d&appver=&modver=3.2.5.61&sign=09a4c8a590c5800dbff510f4906e940d&from=taskpop_sdly&forcetick=6955062 HTTP/1.1Accept: /Accept-Encoding: gzip, deflateUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoHost: s.ludashi.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wan?type=weiduan&action=inst_open&channel=taskpop&mid=b8a4400180ee20f44982cb4d73d6fcd7&mid2=3b2907f96b378f57275538e3aa2275c022a86ca52985&uid=d&appver=&modver=3.2.5.61&sign=3b595d8bfcd6810e98729b23f48e7af0&from=taskpop_sdly&forcetick=6955062 HTTP/1.1Accept: /Accept-Encoding: gzip, deflateUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoHost: s.ludashi.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wan?type=weiduan&action=wd_install_success&channel=taskpop&mid=b8a4400180ee20f44982cb4d73d6fcd7&mid2=3b2907f96b378f57275538e3aa2275c022a86ca52985&uid=d&appver=&modver=3.2.5.61&sign=07818d5b9bbeec4cafaa21c8cc30eeda&from=taskpop_sdly&forcetick=6956562 HTTP/1.1Accept: /Accept-Encoding: gzip, deflateUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoHost: s.ludashi.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wan?type=weiduan&action=inst_succ&channel=taskpop&mid=b8a4400180ee20f44982cb4d73d6fcd7&mid2=3b2907f96b378f57275538e3aa2275c022a86ca52985&uid=d&appver=&modver=3.2.5.61&sign=f8babb12d5d2a03a7112bf30077df139&from=taskpop_sdly&forcetick=6956562 HTTP/1.1Accept: /Accept-Encoding: gzip, deflateUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoHost: s.ludashi.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wan?type=weiduan&action=inst_succ&channel=taskpop&mid=b8a4400180ee20f44982cb4d73d6fcd7&mid2=3b2907f96b378f57275538e3aa2275c022a86ca52985&uid=d&appver=&modver=3.2.5.61&sign=f8babb12d5d2a03a7112bf30077df139&from=taskpop_sdly&forcetick=6956562 HTTP/1.1Accept: /Accept-Encoding: gzip, deflateUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoHost: s.ludashi.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /micro/sdly/index_lds.html?channel=taskpop&from=taskpop_wd_sdly HTTP/1.1Accept: /Accept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoHost: wan.ludashi.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wan/micro/sdly/assets_lds/v1/upload.jpg HTTP/1.1Accept: /Referer: http://wan.ludashi.com/micro/sdly/index_lds.html?channel=taskpop&from=taskpop_wd_sdlyAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoHost: cdn-file.ludashi.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wan?type=weiduan&action=run&channel=taskpop&mid=b8a4400180ee20f44982cb4d73d6fcd7&mid2=3b2907f96b378f57275538e3aa2275c022a86ca52985&uid=d&appver=&modver=3.2.5.61&sign=9b84d8656243359058d483a8a31c82eb&from=taskpop_sdly&forcetick=6957500 HTTP/1.1Accept: /Accept-Encoding: gzip, deflateUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoHost: s.ludashi.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wan?type=weiduan&action=wd_show_success&channel=taskpop&mid=b8a4400180ee20f44982cb4d73d6fcd7&mid2=3b2907f96b378f57275538e3aa2275c022a86ca52985&uid=d&appver=&modver=3.2.5.61&sign=0c260a9ae17b7453efff76d7d8c99e6d&from=taskpop_sdly&forcetick=6958046 HTTP/1.1Accept: /Accept-Encoding: gzip, deflateUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoHost: s.ludashi.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wan?type=weiduan&action=main_show&channel=taskpop&mid=b8a4400180ee20f44982cb4d73d6fcd7&mid2=3b2907f96b378f57275538e3aa2275c022a86ca52985&uid=d&appver=&modver=3.2.5.61&sign=6d694a10fe2d248192a639be8c390083&from=taskpop_sdly&forcetick=6958046 HTTP/1.1Accept: /Accept-Encoding: gzip, deflateUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoHost: s.ludashi.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wan/micro/sdly/assets_lds/v1/main.css HTTP/1.1Accept: /Referer: http://wan.ludashi.com/micro/sdly/index_lds.html?channel=taskpop&from=taskpop_wd_sdlyAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoHost: cdn-file.ludashi.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wan/micro/sdly/assets_lds/v1/bg.jpg HTTP/1.1Accept: /Referer: http://wan.ludashi.com/micro/sdly/index_lds.html?channel=taskpop&from=taskpop_wd_sdlyAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoHost: cdn-file.ludashi.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wan/micro/sdly/assets_lds/v1/log_btn.png HTTP/1.1Accept: /Referer: http://wan.ludashi.com/micro/sdly/index_lds.html?channel=taskpop&from=taskpop_wd_sdlyAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoHost: cdn-file.ludashi.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /assets/jquery/jquery183.js HTTP/1.1Accept: /Referer: http://wan.ludashi.com/micro/sdly/index_lds.html?channel=taskpop&from=taskpop_wd_sdlyAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoHost: cdn-file.ludashi.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wan/micro/sdly/assets_lds/v1/reg.jpg?t=20200105 HTTP/1.1Accept: /Referer: http://wan.ludashi.com/micro/sdly/index_lds.html?channel=taskpop&from=taskpop_wd_sdlyAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoHost: cdn-file.ludashi.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wan/micro/sdly/assets_lds/v1/nav.png HTTP/1.1Accept: /Referer: http://wan.ludashi.com/micro/sdly/index_lds.html?channel=taskpop&from=taskpop_wd_sdlyAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoHost: cdn-file.ludashi.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /assets/sea/sea.js HTTP/1.1Accept: /Referer: http://wan.ludashi.com/micro/sdly/index_lds.html?channel=taskpop&from=taskpop_wd_sdlyAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoHost: cdn-file.ludashi.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wan/micro/sdly/assets_lds/v1/news-bg.png HTTP/1.1Accept: /Referer: http://wan.ludashi.com/micro/sdly/index_lds.html?channel=taskpop&from=taskpop_wd_sdlyAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoHost: cdn-file.ludashi.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wan/micro/sdly/assets_lds/v1/input_reg_act.png?t=20191021 HTTP/1.1Accept: /Referer: http://wan.ludashi.com/micro/sdly/index_lds.html?channel=taskpop&from=taskpop_wd_sdlyAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoHost: cdn-file.ludashi.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wan/micro/sdly/assets_lds/v1/input_reg_pwd.png?t=20191021 HTTP/1.1Accept: /Referer: http://wan.ludashi.com/micro/sdly/index_lds.html?channel=taskpop&from=taskpop_wd_sdlyAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoHost: cdn-file.ludashi.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wan/micro/sdly/assets_lds/v1/input_reg_code.png?t=20191021 HTTP/1.1Accept: /Referer: http://wan.ludashi.com/micro/sdly/index_lds.html?channel=taskpop&from=taskpop_wd_sdlyAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoHost: cdn-file.ludashi.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /assets/superjs/config.js?v=20210527 HTTP/1.1Accept: /Referer: http://wan.ludashi.com/micro/sdly/index_lds.html?channel=taskpop&from=taskpop_wd_sdlyAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoHost: cdn-wan.ludashi.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wan/micro/sdly/assets_lds/v1/checkbox.png HTTP/1.1Accept: /Referer: http://wan.ludashi.com/micro/sdly/index_lds.html?channel=taskpop&from=taskpop_wd_sdlyAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoHost: cdn-file.ludashi.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wan/micro/sdly/assets_lds/v1/third_qq.png HTTP/1.1Accept: /Referer: http://wan.ludashi.com/micro/sdly/index_lds.html?channel=taskpop&from=taskpop_wd_sdlyAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoHost: cdn-file.ludashi.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wan/micro/sdly/assets_lds/v1/third_weixin.png HTTP/1.1Accept: /Referer: http://wan.ludashi.com/micro/sdly/index_lds.html?channel=taskpop&from=taskpop_wd_sdlyAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoHost: cdn-file.ludashi.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wan/micro/sdly/assets_lds/v1/input_log_code.png?t=20191021 HTTP/1.1Accept: /Referer: http://wan.ludashi.com/micro/sdly/index_lds.html?channel=taskpop&from=taskpop_wd_sdlyAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoHost: cdn-file.ludashi.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wan/micro/sdly/assets_lds/v1/third_weixin.png HTTP/1.1Accept: /Referer: http://wan.ludashi.com/micro/sdly/index_lds.html?channel=taskpop&from=taskpop_wd_sdlyAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoHost: cdn-file.ludashi.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: POST /api/CheckGameStatus?callback=jQuery183022485800102059378_1623676997348 HTTP/1.1Content-Type: application/x-www-form-urlencoded; charset=UTF-8Accept: text/javascript, application/javascript, application/ecmascript, application/x-ecmascript, /; q=0.01X-Requested-With: XMLHttpRequestReferer: http://wan.ludashi.com/micro/sdly/index_lds.html?channel=taskpop&from=taskpop_wd_sdlyAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoHost: wan.ludashi.comContent-Length: 12Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /announce/list?callback=jQuery183022485800102059378_1623676997349&type=2&gid=sdly&skip=0&num=5&_=1623677002719 HTTP/1.1Accept: text/javascript, application/javascript, application/ecmascript, application/x-ecmascript, /; q=0.01X-Requested-With: XMLHttpRequestReferer: http://wan.ludashi.com/micro/sdly/index_lds.html?channel=taskpop&from=taskpop_wd_sdlyAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoHost: wan.ludashi.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wan?type=accurate&action=t0&channel=taskpop&from=taskpop_wd_sdly&mid=b8a4400180ee20f44982cb4d73d6fcd7&appver=3.2.5.61&uid=0&game=sdly&timestamp=1623677002764&ex_ary[guid]= HTTP/1.1Accept: /Referer: http://wan.ludashi.com/micro/sdly/index_lds.html?channel=taskpop&from=taskpop_wd_sdlyAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoHost: s.ludashi.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wan/micro/sdly/assets_lds/v1/cir.png HTTP/1.1Accept: /Referer: http://wan.ludashi.com/micro/sdly/index_lds.html?channel=taskpop&from=taskpop_wd_sdlyAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoHost: cdn-file.ludashi.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /ajax/gettoken?user_from=youxi&callback=jQuery183022485800102059378_1623676997348&_=1623677003159 HTTP/1.1Accept: /Referer: http://wan.ludashi.com/micro/sdly/index_lds.html?channel=taskpop&from=taskpop_wd_sdlyAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoHost: i.ludashi.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wan/micro/sdly/assets_lds/v1/cir.png HTTP/1.1Accept: /Referer: http://wan.ludashi.com/micro/sdly/index_lds.html?channel=taskpop&from=taskpop_wd_sdlyAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoHost: cdn-file.ludashi.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wan?type=accurate&action=t1&channel=taskpop&from=taskpop_wd_sdly&mid=b8a4400180ee20f44982cb4d73d6fcd7&appver=3.2.5.61&uid=0&game=sdly&timestamp=1623677012779&ex_ary[guid]= HTTP/1.1Accept: /Referer: http://wan.ludashi.com/micro/sdly/index_lds.html?channel=taskpop&from=taskpop_wd_sdlyAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoHost: s.ludashi.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wan?type=accurate&action=t2&channel=taskpop&from=taskpop_wd_sdly&mid=b8a4400180ee20f44982cb4d73d6fcd7&appver=3.2.5.61&uid=0&game=sdly&timestamp=1623677032782&ex_ary[guid]= HTTP/1.1Accept: /Referer: http://wan.ludashi.com/micro/sdly/index_lds.html?channel=taskpop&from=taskpop_wd_sdlyAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoHost: s.ludashi.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wan?type=accurate&action=t3&channel=taskpop&from=taskpop_wd_sdly&mid=b8a4400180ee20f44982cb4d73d6fcd7&appver=3.2.5.61&uid=0&game=sdly&timestamp=1623677062786&ex_ary[guid]= HTTP/1.1Accept: /Referer: http://wan.ludashi.com/micro/sdly/index_lds.html?channel=taskpop&from=taskpop_wd_sdlyAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoHost: s.ludashi.comConnection: Keep-Alive

Source: C:\Users\user\AppData\Roaming\WdGame\sdly\sdly.exe

Code function: 19_2_001E47E0 PeekMessageW,SetEvent,GetMessageW,GetMessageW,DeleteFileA,URLDownloadToCacheFileA,DeleteFileA,GetMessageW,

19_2_001E47E0

Source: global traffic

HTTP traffic detected: HTTP/1.1 200 OKServer: TengineContent-Type: text/cssContent-Length: 2424Connection: keep-aliveDate: Mon, 14 Jun 2021 04:23:15 GMTx-oss-request-id: 60C6D9B377D4573037D8BE7Dx-oss-cdn-auth: successAccept-Ranges: bytesETag: "D738E1514919958964D42D7EFBE4430D"Last-Modified: Wed, 02 Jun 2021 07:37:19 GMTx-oss-object-type: Normalx-oss-hash-crc64ecma: 12941369958915049998x-oss-storage-class: StandardVary: Accept-EncodingContent-MD5: 1zjhUUkZlYlk1C1+++RDDQ==x-oss-server-time: 1Via: cache33.l2cn1823[47,47,304-0,M], cache44.l2cn1823[48,0], cache3.cn1995[56,65,200-0,H], cache9.cn1995[67,0]Content-Encoding: gzipAli-Swift-Global-Savetime: 1623643678Age: 0X-Cache: HIT TCP_REFRESH_HIT dirn:9:53908181X-Swift-SaveTime: Mon, 14 Jun 2021 04:23:15 GMTX-Swift-CacheTime: 599Timing-Allow-Origin: *EagleId: 65e3191d16236445953545668eData Raw: 1f 8b 08 00 00 00 00 00 00 03 d5 5a 59 8f e3 b8 11 fe 2b c2 0c 16 9b 5d ac dc 3a 2c f9 42 10 4c 67 93 a7 3c 04 79 c9 a3 41 49 b4 cd b4 2c 6a 24 b9 dd 3d 46 ff f7 14 4f f1 90 dd 3d bb de 00 81 31 d3 b6 4c 16 eb f8 f8 55 91 e5 9f 2f 2d aa 2a d2 ec d7 d1 e6 88 ba 3d 69 d6 d1 5b 41 ab d7 0b 7d c6 dd ae a6 e7 f5 81 54 15 6e de 6a 72 a9 49 3f 84 fd f0 5a e3 75 43 1b fc 86 2e 03 7e 19 c2 0a 97 b4 43 03 a1 8d 78 4c 8e fb 4b 41 bb 0a 77 20 6b b6 ab 2f 20 06 0d eb 1a ef 06 f8 d8 c9 8f 1d d9 1f e0 73 59 17 97 b2 c6 a8 5b 17 74 38 bc cd 98 84 4b 45 fa b6 46 af 42 dc 8c 9e 06 dc 5d ce a4 1a 0e eb e5 7c d9 be 6c 0e 98 4d 5e cf 97 11 7c 68 69 4f f8 e2 1d ae 41 8b 67 bc 29 50 f9 b4 ef e8 a9 a9 d6 a7 ae fe d3 a7 87 87 b2 6a c2 1d a9 f1 ac 3e 55 a8 3f 90 59 49 8f 0f 67 d4 3c 1c 49 d9 d1 87 be aa 5f 1f 50 df e3 a1 df d6 55 ff f0 1c 3f 14 fb d9 7f da fd a7 9f 82 08 5e 0d 0d 3b dc 62 04 fa 36 e8 59 aa 92 65 f1 a8 4a 92 9b 9a a0 a2 a7 35 68 bd 61 36 af 93 05 1b 38 d0 76 3d 87 bf f7 50 0e 94 98 b5 8d d0 ae c4 0d b8 c7 51 31 38 d5 5e 00 f9 73 88 a2 19 0d f6 08 69 77 17 35 2d 9f 36 d2 d1 d1 bb c6 31 8b 22 21 83 fd b7 8d 2f dc 5c f3 51 22 1e c5 11 48 33 1e a7 17 1e 7d 78 9e 5b cf e7 f2 39 88 a8 29 60 31 e4 48 14 0a e5 b1 a1 51 ba 88 6e f8 3b 5d 48 7f e7 2b 78 e3 f9 41 8a c6 3b da 61 03 fe 52 34 e8 fa c3 a6 a0 2f 61 4f be b1 2f 04 92 41 13 50 b4 af 49 85 c3 06 9f 7b a9 54 3a 8f 27 11 68 fa 98 4f 92 e3 Data Ascii: ZY+]:,BLg<yAI,j$=FO=1LU/-*=i[A}TnjrI?ZuC.~CxLKAw k/ sY[t8KEFB]|lM^|hiOAg)Pj>U?YIg<I_PU?^;b6YeJ5ha68v=PQ18^siw5-61"!/\Q"H3}x[9)`1HQn;]H+xA;aR4/aO/API{T:'hO

Source: global traffic	HTTP traffic detected: GET /wan?type=weiduan&action=install&channel=taskpop&mid=b8a4400180ee20f44982cb4d73d6fcd7&mid2=3b2907f96b378f57275538e3aa2275c022a86ca52985&uid=d&appver=&modver=3.2.5.61&sign=ed62ccbaa79a95c345b484e11080c4db&from=taskpop_sdly&forcetick=6867625 HTTP/1.1Accept: /Accept-Encoding: gzip, deflateUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoHost: s.ludashi.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wan/wan/7z.dll HTTP/1.1Accept: /User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; .NET CLR 2.0.50727)Accept-Encoding: gzipHost: cdn-file-ssl-wan.ludashi.comConnection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /wan?type=weiduan&action=7z_noexist&channel=taskpop&mid=b8a4400180ee20f44982cb4d73d6fcd7&mid2=3b2907f96b378f57275538e3aa2275c022a86ca52985&uid=d&appver=&modver=3.2.5.61&sign=3bc1bffb6c4712a112e8ecce47d6fa79&from=taskpop_sdly&forcetick=6868015 HTTP/1.1Accept: /Accept-Encoding: gzip, deflateUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoHost: s.ludashi.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wan?type=weiduan&action=7z_download_start&channel=taskpop&mid=b8a4400180ee20f44982cb4d73d6fcd7&mid2=3b2907f96b378f57275538e3aa2275c022a86ca52985&uid=d&appver=&modver=3.2.5.61&sign=2b53c48f838a76f468aefa60e63f791e&from=taskpop_sdly&forcetick=6868015 HTTP/1.1Accept: /Accept-Encoding: gzip, deflateUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoHost: s.ludashi.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wan?type=weiduan&action=7z_download_success&channel=taskpop&mid=b8a4400180ee20f44982cb4d73d6fcd7&mid2=3b2907f96b378f57275538e3aa2275c022a86ca52985&uid=d&appver=&modver=3.2.5.61&sign=557423491fe0521caf2ffd61b7905912&from=taskpop_sdly&forcetick=6871468 HTTP/1.1Accept: /Accept-Encoding: gzip, deflateUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoHost: s.ludashi.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /pc/cef/CefRes.dll?t=202106140621 HTTP/1.1Accept: /User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; .NET CLR 2.0.50727)Host: cdn-file-ssl-pc.ludashi.comConnection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /wan?type=weiduan&action=res_down_success&channel=taskpop&mid=b8a4400180ee20f44982cb4d73d6fcd7&mid2=3b2907f96b378f57275538e3aa2275c022a86ca52985&uid=d&appver=&modver=3.2.5.61&sign=9d53b4bca7b82f1474611b4f23e776a3&from=taskpop_sdly&forcetick=6936562 HTTP/1.1Accept: /Accept-Encoding: gzip, deflateUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoHost: s.ludashi.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /pc/game/flash/pepflashplayer.7z?t=202106140622 HTTP/1.1Accept: /User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; .NET CLR 2.0.50727)Host: cdn-file-ssl-wan.ludashi.comConnection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /wan?type=weiduan&action=pepflash_down_success&channel=taskpop&mid=b8a4400180ee20f44982cb4d73d6fcd7&mid2=3b2907f96b378f57275538e3aa2275c022a86ca52985&uid=d&appver=&modver=3.2.5.61&sign=c7d5ce77d59cfd2f2c593107334b846d&from=taskpop_sdly&forcetick=6953968 HTTP/1.1Accept: /Accept-Encoding: gzip, deflateUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoHost: s.ludashi.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wan?type=weiduan&action=add_uninst_item&channel=taskpop&mid=b8a4400180ee20f44982cb4d73d6fcd7&mid2=3b2907f96b378f57275538e3aa2275c022a86ca52985&uid=d&appver=&modver=3.2.5.61&sign=79ea5434ed60d529ca960c4c6957a02e&from=taskpop_sdly&forcetick=6954625 HTTP/1.1Accept: /Accept-Encoding: gzip, deflateUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoHost: s.ludashi.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wan?type=weiduan&action=add_desk_icon&channel=taskpop&mid=b8a4400180ee20f44982cb4d73d6fcd7&mid2=3b2907f96b378f57275538e3aa2275c022a86ca52985&uid=d&appver=&modver=3.2.5.61&sign=8a2e3612028fb75ddba64e37e6586529&from=taskpop_sdly&forcetick=6954671 HTTP/1.1Accept: /Accept-Encoding: gzip, deflateUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoHost: s.ludashi.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wan?type=weiduan&action=install_extra&channel=taskpop&mid=b8a4400180ee20f44982cb4d73d6fcd7&mid2=3b2907f96b378f57275538e3aa2275c022a86ca52985&uid=d&appver=&modver=3.2.5.61&sign=09a4c8a590c5800dbff510f4906e940d&from=taskpop_sdly&forcetick=6955062 HTTP/1.1Accept: /Accept-Encoding: gzip, deflateUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoHost: s.ludashi.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wan?type=weiduan&action=inst_open&channel=taskpop&mid=b8a4400180ee20f44982cb4d73d6fcd7&mid2=3b2907f96b378f57275538e3aa2275c022a86ca52985&uid=d&appver=&modver=3.2.5.61&sign=3b595d8bfcd6810e98729b23f48e7af0&from=taskpop_sdly&forcetick=6955062 HTTP/1.1Accept: /Accept-Encoding: gzip, deflateUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoHost: s.ludashi.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wan?type=weiduan&action=wd_install_success&channel=taskpop&mid=b8a4400180ee20f44982cb4d73d6fcd7&mid2=3b2907f96b378f57275538e3aa2275c022a86ca52985&uid=d&appver=&modver=3.2.5.61&sign=07818d5b9bbeec4cafaa21c8cc30eeda&from=taskpop_sdly&forcetick=6956562 HTTP/1.1Accept: /Accept-Encoding: gzip, deflateUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoHost: s.ludashi.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wan?type=weiduan&action=inst_succ&channel=taskpop&mid=b8a4400180ee20f44982cb4d73d6fcd7&mid2=3b2907f96b378f57275538e3aa2275c022a86ca52985&uid=d&appver=&modver=3.2.5.61&sign=f8babb12d5d2a03a7112bf30077df139&from=taskpop_sdly&forcetick=6956562 HTTP/1.1Accept: /Accept-Encoding: gzip, deflateUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoHost: s.ludashi.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wan?type=weiduan&action=inst_succ&channel=taskpop&mid=b8a4400180ee20f44982cb4d73d6fcd7&mid2=3b2907f96b378f57275538e3aa2275c022a86ca52985&uid=d&appver=&modver=3.2.5.61&sign=f8babb12d5d2a03a7112bf30077df139&from=taskpop_sdly&forcetick=6956562 HTTP/1.1Accept: /Accept-Encoding: gzip, deflateUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoHost: s.ludashi.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /micro/sdly/index_lds.html?channel=taskpop&from=taskpop_wd_sdly HTTP/1.1Accept: /Accept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoHost: wan.ludashi.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wan/micro/sdly/assets_lds/v1/upload.jpg HTTP/1.1Accept: /Referer: http://wan.ludashi.com/micro/sdly/index_lds.html?channel=taskpop&from=taskpop_wd_sdlyAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoHost: cdn-file.ludashi.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wan?type=weiduan&action=run&channel=taskpop&mid=b8a4400180ee20f44982cb4d73d6fcd7&mid2=3b2907f96b378f57275538e3aa2275c022a86ca52985&uid=d&appver=&modver=3.2.5.61&sign=9b84d8656243359058d483a8a31c82eb&from=taskpop_sdly&forcetick=6957500 HTTP/1.1Accept: /Accept-Encoding: gzip, deflateUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoHost: s.ludashi.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wan?type=weiduan&action=wd_show_success&channel=taskpop&mid=b8a4400180ee20f44982cb4d73d6fcd7&mid2=3b2907f96b378f57275538e3aa2275c022a86ca52985&uid=d&appver=&modver=3.2.5.61&sign=0c260a9ae17b7453efff76d7d8c99e6d&from=taskpop_sdly&forcetick=6958046 HTTP/1.1Accept: /Accept-Encoding: gzip, deflateUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoHost: s.ludashi.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wan?type=weiduan&action=main_show&channel=taskpop&mid=b8a4400180ee20f44982cb4d73d6fcd7&mid2=3b2907f96b378f57275538e3aa2275c022a86ca52985&uid=d&appver=&modver=3.2.5.61&sign=6d694a10fe2d248192a639be8c390083&from=taskpop_sdly&forcetick=6958046 HTTP/1.1Accept: /Accept-Encoding: gzip, deflateUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoHost: s.ludashi.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wan/micro/sdly/assets_lds/v1/main.css HTTP/1.1Accept: /Referer: http://wan.ludashi.com/micro/sdly/index_lds.html?channel=taskpop&from=taskpop_wd_sdlyAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoHost: cdn-file.ludashi.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wan/micro/sdly/assets_lds/v1/bg.jpg HTTP/1.1Accept: /Referer: http://wan.ludashi.com/micro/sdly/index_lds.html?channel=taskpop&from=taskpop_wd_sdlyAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoHost: cdn-file.ludashi.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wan/micro/sdly/assets_lds/v1/log_btn.png HTTP/1.1Accept: /Referer: http://wan.ludashi.com/micro/sdly/index_lds.html?channel=taskpop&from=taskpop_wd_sdlyAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoHost: cdn-file.ludashi.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /assets/jquery/jquery183.js HTTP/1.1Accept: /Referer: http://wan.ludashi.com/micro/sdly/index_lds.html?channel=taskpop&from=taskpop_wd_sdlyAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoHost: cdn-file.ludashi.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wan/micro/sdly/assets_lds/v1/reg.jpg?t=20200105 HTTP/1.1Accept: /Referer: http://wan.ludashi.com/micro/sdly/index_lds.html?channel=taskpop&from=taskpop_wd_sdlyAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoHost: cdn-file.ludashi.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wan/micro/sdly/assets_lds/v1/nav.png HTTP/1.1Accept: /Referer: http://wan.ludashi.com/micro/sdly/index_lds.html?channel=taskpop&from=taskpop_wd_sdlyAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoHost: cdn-file.ludashi.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /assets/sea/sea.js HTTP/1.1Accept: /Referer: http://wan.ludashi.com/micro/sdly/index_lds.html?channel=taskpop&from=taskpop_wd_sdlyAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoHost: cdn-file.ludashi.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wan/micro/sdly/assets_lds/v1/news-bg.png HTTP/1.1Accept: /Referer: http://wan.ludashi.com/micro/sdly/index_lds.html?channel=taskpop&from=taskpop_wd_sdlyAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoHost: cdn-file.ludashi.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wan/micro/sdly/assets_lds/v1/input_reg_act.png?t=20191021 HTTP/1.1Accept: /Referer: http://wan.ludashi.com/micro/sdly/index_lds.html?channel=taskpop&from=taskpop_wd_sdlyAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoHost: cdn-file.ludashi.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wan/micro/sdly/assets_lds/v1/input_reg_pwd.png?t=20191021 HTTP/1.1Accept: /Referer: http://wan.ludashi.com/micro/sdly/index_lds.html?channel=taskpop&from=taskpop_wd_sdlyAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoHost: cdn-file.ludashi.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wan/micro/sdly/assets_lds/v1/input_reg_code.png?t=20191021 HTTP/1.1Accept: /Referer: http://wan.ludashi.com/micro/sdly/index_lds.html?channel=taskpop&from=taskpop_wd_sdlyAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoHost: cdn-file.ludashi.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /assets/superjs/config.js?v=20210527 HTTP/1.1Accept: /Referer: http://wan.ludashi.com/micro/sdly/index_lds.html?channel=taskpop&from=taskpop_wd_sdlyAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoHost: cdn-wan.ludashi.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wan/micro/sdly/assets_lds/v1/checkbox.png HTTP/1.1Accept: /Referer: http://wan.ludashi.com/micro/sdly/index_lds.html?channel=taskpop&from=taskpop_wd_sdlyAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoHost: cdn-file.ludashi.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wan/micro/sdly/assets_lds/v1/third_qq.png HTTP/1.1Accept: /Referer: http://wan.ludashi.com/micro/sdly/index_lds.html?channel=taskpop&from=taskpop_wd_sdlyAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoHost: cdn-file.ludashi.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wan/micro/sdly/assets_lds/v1/third_weixin.png HTTP/1.1Accept: /Referer: http://wan.ludashi.com/micro/sdly/index_lds.html?channel=taskpop&from=taskpop_wd_sdlyAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoHost: cdn-file.ludashi.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wan/micro/sdly/assets_lds/v1/input_log_code.png?t=20191021 HTTP/1.1Accept: /Referer: http://wan.ludashi.com/micro/sdly/index_lds.html?channel=taskpop&from=taskpop_wd_sdlyAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoHost: cdn-file.ludashi.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wan/micro/sdly/assets_lds/v1/third_weixin.png HTTP/1.1Accept: /Referer: http://wan.ludashi.com/micro/sdly/index_lds.html?channel=taskpop&from=taskpop_wd_sdlyAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoHost: cdn-file.ludashi.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /announce/list?callback=jQuery183022485800102059378_1623676997349&type=2&gid=sdly&skip=0&num=5&_=1623677002719 HTTP/1.1Accept: text/javascript, application/javascript, application/ecmascript, application/x-ecmascript, /; q=0.01X-Requested-With: XMLHttpRequestReferer: http://wan.ludashi.com/micro/sdly/index_lds.html?channel=taskpop&from=taskpop_wd_sdlyAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoHost: wan.ludashi.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wan?type=accurate&action=t0&channel=taskpop&from=taskpop_wd_sdly&mid=b8a4400180ee20f44982cb4d73d6fcd7&appver=3.2.5.61&uid=0&game=sdly&timestamp=1623677002764&ex_ary[guid]= HTTP/1.1Accept: /Referer: http://wan.ludashi.com/micro/sdly/index_lds.html?channel=taskpop&from=taskpop_wd_sdlyAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoHost: s.ludashi.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wan/micro/sdly/assets_lds/v1/cir.png HTTP/1.1Accept: /Referer: http://wan.ludashi.com/micro/sdly/index_lds.html?channel=taskpop&from=taskpop_wd_sdlyAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoHost: cdn-file.ludashi.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /ajax/gettoken?user_from=youxi&callback=jQuery183022485800102059378_1623676997348&_=1623677003159 HTTP/1.1Accept: /Referer: http://wan.ludashi.com/micro/sdly/index_lds.html?channel=taskpop&from=taskpop_wd_sdlyAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoHost: i.ludashi.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wan/micro/sdly/assets_lds/v1/cir.png HTTP/1.1Accept: /Referer: http://wan.ludashi.com/micro/sdly/index_lds.html?channel=taskpop&from=taskpop_wd_sdlyAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoHost: cdn-file.ludashi.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wan?type=accurate&action=t1&channel=taskpop&from=taskpop_wd_sdly&mid=b8a4400180ee20f44982cb4d73d6fcd7&appver=3.2.5.61&uid=0&game=sdly&timestamp=1623677012779&ex_ary[guid]= HTTP/1.1Accept: /Referer: http://wan.ludashi.com/micro/sdly/index_lds.html?channel=taskpop&from=taskpop_wd_sdlyAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoHost: s.ludashi.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wan?type=accurate&action=t2&channel=taskpop&from=taskpop_wd_sdly&mid=b8a4400180ee20f44982cb4d73d6fcd7&appver=3.2.5.61&uid=0&game=sdly&timestamp=1623677032782&ex_ary[guid]= HTTP/1.1Accept: /Referer: http://wan.ludashi.com/micro/sdly/index_lds.html?channel=taskpop&from=taskpop_wd_sdlyAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoHost: s.ludashi.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wan?type=accurate&action=t3&channel=taskpop&from=taskpop_wd_sdly&mid=b8a4400180ee20f44982cb4d73d6fcd7&appver=3.2.5.61&uid=0&game=sdly&timestamp=1623677062786&ex_ary[guid]= HTTP/1.1Accept: /Referer: http://wan.ludashi.com/micro/sdly/index_lds.html?channel=taskpop&from=taskpop_wd_sdlyAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoHost: s.ludashi.comConnection: Keep-Alive

Source: sdly.exe, 00000013.00000002.627244852.0000000003D53000.00000002.00000001.sdmp	String found in binary or memory: <FavoriteIcon>http://www.facebook.com/favicon.ico</FavoriteIcon> equals www.facebook.com (Facebook)
Source: sdly.exe, 00000013.00000002.627244852.0000000003D53000.00000002.00000001.sdmp	String found in binary or memory: <FavoriteIcon>http://www.myspace.com/favicon.ico</FavoriteIcon> equals www.myspace.com (Myspace)
Source: sdly.exe, 00000013.00000002.627244852.0000000003D53000.00000002.00000001.sdmp	String found in binary or memory: <FavoriteIcon>http://www.rambler.ru/favicon.ico</FavoriteIcon> equals www.rambler.ru (Rambler)
Source: sdly.exe, 00000013.00000002.627244852.0000000003D53000.00000002.00000001.sdmp	String found in binary or memory: <URL>http://www.facebook.com/</URL> equals www.facebook.com (Facebook)
Source: sdly.exe, 00000013.00000002.627244852.0000000003D53000.00000002.00000001.sdmp	String found in binary or memory: <URL>http://www.rambler.ru/</URL> equals www.rambler.ru (Rambler)

Source: unknown

DNS traffic detected: queries for: cdn-file-ssl-wan.ludashi.com

Source: unknown

HTTP traffic detected: POST /api/CheckGameStatus?callback=jQuery183022485800102059378_1623676997348 HTTP/1.1Content-Type: application/x-www-form-urlencoded; charset=UTF-8Accept: text/javascript, application/javascript, application/ecmascript, application/x-ecmascript, */*; q=0.01X-Requested-With: XMLHttpRequestReferer: http://wan.ludashi.com/micro/sdly/index_lds.html?channel=taskpop&from=taskpop_wd_sdlyAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoHost: wan.ludashi.comContent-Length: 12Connection: Keep-AliveCache-Control: no-cache

Source: sdly.exe, 00000013.00000002.626948880.0000000003C60000.00000002.00000001.sdmp	String found in binary or memory: http://%s.com
Source: sdly.exe, 00000013.00000002.627244852.0000000003D53000.00000002.00000001.sdmp	String found in binary or memory: http://amazon.fr/
Source: sdly.exe, 00000013.00000002.627244852.0000000003D53000.00000002.00000001.sdmp	String found in binary or memory: http://ariadna.elmundo.es/
Source: sdly.exe, 00000013.00000002.627244852.0000000003D53000.00000002.00000001.sdmp	String found in binary or memory: http://ariadna.elmundo.es/favicon.ico
Source: sdly.exe, 00000013.00000002.627244852.0000000003D53000.00000002.00000001.sdmp	String found in binary or memory: http://arianna.libero.it/
Source: sdly.exe, 00000013.00000002.627244852.0000000003D53000.00000002.00000001.sdmp	String found in binary or memory: http://arianna.libero.it/favicon.ico
Source: sdly.exe, 00000013.00000002.627244852.0000000003D53000.00000002.00000001.sdmp	String found in binary or memory: http://asp.usatoday.com/
Source: sdly.exe, 00000013.00000002.627244852.0000000003D53000.00000002.00000001.sdmp	String found in binary or memory: http://asp.usatoday.com/favicon.ico
Source: sdly.exe, 00000013.00000002.627244852.0000000003D53000.00000002.00000001.sdmp	String found in binary or memory: http://auone.jp/favicon.ico
Source: sdly.exe, 00000013.00000002.626948880.0000000003C60000.00000002.00000001.sdmp	String found in binary or memory: http://auto.search.msn.com/response.asp?MT=
Source: sdly.exe, 00000013.00000002.627244852.0000000003D53000.00000002.00000001.sdmp	String found in binary or memory: http://br.search.yahoo.com/
Source: sdly.exe, 00000013.00000002.627244852.0000000003D53000.00000002.00000001.sdmp	String found in binary or memory: http://browse.guardian.co.uk/
Source: sdly.exe, 00000013.00000002.627244852.0000000003D53000.00000002.00000001.sdmp	String found in binary or memory: http://browse.guardian.co.uk/favicon.ico
Source: sdly.exe, 00000013.00000002.627244852.0000000003D53000.00000002.00000001.sdmp	String found in binary or memory: http://busca.buscape.com.br/
Source: sdly.exe, 00000013.00000002.627244852.0000000003D53000.00000002.00000001.sdmp	String found in binary or memory: http://busca.buscape.com.br/favicon.ico
Source: sdly.exe, 00000013.00000002.627244852.0000000003D53000.00000002.00000001.sdmp	String found in binary or memory: http://busca.estadao.com.br/favicon.ico
Source: sdly.exe, 00000013.00000002.627244852.0000000003D53000.00000002.00000001.sdmp	String found in binary or memory: http://busca.igbusca.com.br/
Source: sdly.exe, 00000013.00000002.627244852.0000000003D53000.00000002.00000001.sdmp	String found in binary or memory: http://busca.igbusca.com.br//app/static/images/favicon.ico
Source: sdly.exe, 00000013.00000002.627244852.0000000003D53000.00000002.00000001.sdmp	String found in binary or memory: http://busca.orange.es/
Source: sdly.exe, 00000013.00000002.627244852.0000000003D53000.00000002.00000001.sdmp	String found in binary or memory: http://busca.uol.com.br/
Source: sdly.exe, 00000013.00000002.627244852.0000000003D53000.00000002.00000001.sdmp	String found in binary or memory: http://busca.uol.com.br/favicon.ico
Source: sdly.exe, 00000013.00000002.627244852.0000000003D53000.00000002.00000001.sdmp	String found in binary or memory: http://buscador.lycos.es/
Source: sdly.exe, 00000013.00000002.627244852.0000000003D53000.00000002.00000001.sdmp	String found in binary or memory: http://buscador.terra.com.br/
Source: sdly.exe, 00000013.00000002.627244852.0000000003D53000.00000002.00000001.sdmp	String found in binary or memory: http://buscador.terra.com/
Source: sdly.exe, 00000013.00000002.627244852.0000000003D53000.00000002.00000001.sdmp	String found in binary or memory: http://buscador.terra.com/favicon.ico
Source: sdly.exe, 00000013.00000002.627244852.0000000003D53000.00000002.00000001.sdmp	String found in binary or memory: http://buscador.terra.es/
Source: sdly.exe, 00000013.00000002.627244852.0000000003D53000.00000002.00000001.sdmp	String found in binary or memory: http://buscar.ozu.es/
Source: sdly.exe, 00000013.00000002.627244852.0000000003D53000.00000002.00000001.sdmp	String found in binary or memory: http://buscar.ya.com/
Source: sdly.exe, 00000013.00000002.627244852.0000000003D53000.00000002.00000001.sdmp	String found in binary or memory: http://busqueda.aol.com.mx/
Source: mAGs0IsoB7.exe	String found in binary or memory: http://cacerts.digicert.com/DigiCertAssuredIDCodeSigningCA-1.crt0
Source: mAGs0IsoB7.exe	String found in binary or memory: http://cacerts.digicert.com/DigiCertAssuredIDRootCA.crt0
Source: mAGs0IsoB7.exe	String found in binary or memory: http://cacerts.digicert.com/DigiCertSHA2AssuredIDCodeSigningCA.crt0
Source: mAGs0IsoB7.exe	String found in binary or memory: http://cacerts.digicert.com/DigiCertSHA2AssuredIDTimestampingCA.crt0
Source: sdly.exe, 00000013.00000002.630965679.00000000055AC000.00000004.00000001.sdmp	String found in binary or memory: http://cacerts.rapidssl.com/RapidSSLRSACA2018.crt0
Source: mAGs0IsoB7.exe, 00000001.00000002.425010549.0000000003B34000.00000004.00000001.sdmp	String found in binary or memory: http://cdn-file-ssl-wan.ludashi.com/pc/game/flash/pepflashplayer.7z?t=202106140622
Source: mAGs0IsoB7.exe, 00000001.00000002.425010549.0000000003B34000.00000004.00000001.sdmp	String found in binary or memory: http://cdn-file-ssl-wan.ludashi.com/pc/game/flash/pepflashplayer.7z?t=202106140622C:
Source: mAGs0IsoB7.exe, sdly.exe	String found in binary or memory: http://cdn-file-ssl-wan.ludashi.com/wan/wan/7z.dll
Source: mAGs0IsoB7.exe	String found in binary or memory: http://cdn-file-ssl-wan.ludashi.com/wan/wan/7z.dll7z_download_success7z_download_failStartEx3.2623.1
Source: mAGs0IsoB7.exe, 00000001.00000002.424885665.00000000038D4000.00000004.00000001.sdmp	String found in binary or memory: http://cdn-file-ssl-wan.ludashi.com/wan/wan/7z.dllC:
Source: sdly.exe, 00000013.00000002.627542984.00000000041F0000.00000004.00000001.sdmp	String found in binary or memory: http://cdn-file.ludashi.com/
Source: sdly.exe, 00000013.00000002.623731501.0000000000E4A000.00000004.00000020.sdmp, sdly.exe, 00000013.00000002.627707442.0000000004282000.00000004.00000001.sdmp	String found in binary or memory: http://cdn-file.ludashi.com/assets/jquery/jquery183.js
Source: sdly.exe, 00000013.00000002.627601801.0000000004225000.00000004.00000001.sdmp	String found in binary or memory: http://cdn-file.ludashi.com/assets/jquery/jquery183.js$
Source: sdly.exe, 00000013.00000002.627707442.0000000004282000.00000004.00000001.sdmp	String found in binary or memory: http://cdn-file.ludashi.com/assets/jquery/jquery183.js.html?channel=taskpop&from=taskpop_wd_sdly...3
Source: sdly.exe, 00000013.00000002.627651205.0000000004256000.00000004.00000001.sdmp	String found in binary or memory: http://cdn-file.ludashi.com/assets/jquery/jquery183.jsE
Source: sdly.exe, 00000013.00000002.627707442.0000000004282000.00000004.00000001.sdmp	String found in binary or memory: http://cdn-file.ludashi.com/assets/jquery/jquery183.jsl=taskpop&from=taskpop_wd_sdlypop_wd_sdly...
Source: sdly.exe, 00000013.00000003.439816215.000000000563F000.00000004.00000001.sdmp, sdly.exe, 00000013.00000002.623731501.0000000000E4A000.00000004.00000020.sdmp	String found in binary or memory: http://cdn-file.ludashi.com/assets/sea/sea.js
Source: sdly.exe, 00000013.00000002.627707442.0000000004282000.00000004.00000001.sdmp	String found in binary or memory: http://cdn-file.ludashi.com/assets/sea/sea.js/
Source: sdly.exe, 00000013.00000002.627707442.0000000004282000.00000004.00000001.sdmp	String found in binary or memory: http://cdn-file.ludashi.com/assets/sea/sea.jsK1
Source: sdly.exe, 00000013.00000002.623731501.0000000000E4A000.00000004.00000020.sdmp	String found in binary or memory: http://cdn-file.ludashi.com/assets/sea/sea.jsN
Source: sdly.exe, 00000013.00000002.623731501.0000000000E4A000.00000004.00000020.sdmp	String found in binary or memory: http://cdn-file.ludashi.com/assets/sea/sea.jsg
Source: sdly.exe, 00000013.00000003.439816215.000000000563F000.00000004.00000001.sdmp	String found in binary or memory: http://cdn-file.ludashi.com/assets/sea/sea.jsp
Source: sdly.exe, 00000013.00000002.627601801.0000000004225000.00000004.00000001.sdmp	String found in binary or memory: http://cdn-file.ludashi.com/assets/sea/sea.jsry183.jsl=taskpop&from=taskpop_wd_sdlyxw
Source: sdly.exe, 00000013.00000002.627707442.0000000004282000.00000004.00000001.sdmp	String found in binary or memory: http://cdn-file.ludashi.com/assets/sea/sea.jsv
Source: CefView.exe	String found in binary or memory: http://cdn-file.ludashi.com/cms/project_16/cfg_center/mod_list.jshttp://cdn-file.ludashi.com/cms/pro
Source: sdly.exe, 00000013.00000002.627707442.0000000004282000.00000004.00000001.sdmp	String found in binary or memory: http://cdn-file.ludashi.com/wan/micro/sdly/assets_lds/v1
Source: sdly.exe, 00000013.00000002.627601801.0000000004225000.00000004.00000001.sdmp	String found in binary or memory: http://cdn-file.ludashi.com/wan/micro/sdly/assets_lds/v1/bg.jpg
Source: sdly.exe, 00000013.00000002.623474504.0000000000E25000.00000004.00000020.sdmp	String found in binary or memory: http://cdn-file.ludashi.com/wan/micro/sdly/assets_lds/v1/bg.jpg&from=taskpop_wd_sdly
Source: sdly.exe, 00000013.00000002.627601801.0000000004225000.00000004.00000001.sdmp	String found in binary or memory: http://cdn-file.ludashi.com/wan/micro/sdly/assets_lds/v1/bg.jpg~A
Source: sdly.exe, 00000013.00000002.627566811.0000000004209000.00000004.00000001.sdmp	String found in binary or memory: http://cdn-file.ludashi.com/wan/micro/sdly/assets_lds/v1/checkbox.png
Source: sdly.exe, 00000013.00000002.627566811.0000000004209000.00000004.00000001.sdmp	String found in binary or memory: http://cdn-file.ludashi.com/wan/micro/sdly/assets_lds/v1/checkbox.png-6
Source: sdly.exe, 00000013.00000002.627601801.0000000004225000.00000004.00000001.sdmp	String found in binary or memory: http://cdn-file.ludashi.com/wan/micro/sdly/assets_lds/v1/checkbox.pnge.png?t=20191021cD5
Source: sdly.exe, 00000013.00000002.623474504.0000000000E25000.00000004.00000020.sdmp	String found in binary or memory: http://cdn-file.ludashi.com/wan/micro/sdly/assets_lds/v1/checkbox.pngiR
Source: sdly.exe, 00000013.00000002.627707442.0000000004282000.00000004.00000001.sdmp	String found in binary or memory: http://cdn-file.ludashi.com/wan/micro/sdly/assets_lds/v1/cir.png
Source: sdly.exe, 00000013.00000002.627707442.0000000004282000.00000004.00000001.sdmp	String found in binary or memory: http://cdn-file.ludashi.com/wan/micro/sdly/assets_lds/v1/cir.png%
Source: sdly.exe, 00000013.00000002.627707442.0000000004282000.00000004.00000001.sdmp	String found in binary or memory: http://cdn-file.ludashi.com/wan/micro/sdly/assets_lds/v1/cir.png...
Source: sdly.exe, 00000013.00000002.627707442.0000000004282000.00000004.00000001.sdmp	String found in binary or memory: http://cdn-file.ludashi.com/wan/micro/sdly/assets_lds/v1/cir.png....4b0
Source: sdly.exe, 00000013.00000002.627707442.0000000004282000.00000004.00000001.sdmp	String found in binary or memory: http://cdn-file.ludashi.com/wan/micro/sdly/assets_lds/v1/cir.png=
Source: sdly.exe, 00000013.00000002.627707442.0000000004282000.00000004.00000001.sdmp	String found in binary or memory: http://cdn-file.ludashi.com/wan/micro/sdly/assets_lds/v1/cir.pngRe_
Source: sdly.exe, 00000013.00000002.627707442.0000000004282000.00000004.00000001.sdmp	String found in binary or memory: http://cdn-file.ludashi.com/wan/micro/sdly/assets_lds/v1/cir.pngar
Source: sdly.exe, 00000013.00000002.627707442.0000000004282000.00000004.00000001.sdmp	String found in binary or memory: http://cdn-file.ludashi.com/wan/micro/sdly/assets_lds/v1/cir.pngdv
Source: sdly.exe, 00000013.00000002.631203443.000000000568F000.00000004.00000001.sdmp	String found in binary or memory: http://cdn-file.ludashi.com/wan/micro/sdly/assets_lds/v1/cir.pngecko
Source: sdly.exe, 00000013.00000002.627707442.0000000004282000.00000004.00000001.sdmp	String found in binary or memory: http://cdn-file.ludashi.com/wan/micro/sdly/assets_lds/v1/cir.pngl1
Source: sdly.exe, 00000013.00000002.627707442.0000000004282000.00000004.00000001.sdmp	String found in binary or memory: http://cdn-file.ludashi.com/wan/micro/sdly/assets_lds/v1/cir.pngw
Source: sdly.exe, 00000013.00000002.627601801.0000000004225000.00000004.00000001.sdmp	String found in binary or memory: http://cdn-file.ludashi.com/wan/micro/sdly/assets_lds/v1/input_log_act.png?t=20191021
Source: sdly.exe, 00000013.00000002.627601801.0000000004225000.00000004.00000001.sdmp, sdly.exe, 00000013.00000002.630965679.00000000055AC000.00000004.00000001.sdmp	String found in binary or memory: http://cdn-file.ludashi.com/wan/micro/sdly/assets_lds/v1/input_log_code.png?t=20191021
Source: sdly.exe, 00000013.00000002.627707442.0000000004282000.00000004.00000001.sdmp	String found in binary or memory: http://cdn-file.ludashi.com/wan/micro/sdly/assets_lds/v1/input_log_code.png?t=201910214i
Source: sdly.exe, 00000013.00000002.627566811.0000000004209000.00000004.00000001.sdmp	String found in binary or memory: http://cdn-file.ludashi.com/wan/micro/sdly/assets_lds/v1/input_log_code.png?t=20191021er
Source: sdly.exe, 00000013.00000002.627601801.0000000004225000.00000004.00000001.sdmp	String found in binary or memory: http://cdn-file.ludashi.com/wan/micro/sdly/assets_lds/v1/input_log_pwd.png?t=20191021
Source: sdly.exe, 00000013.00000002.627601801.0000000004225000.00000004.00000001.sdmp	String found in binary or memory: http://cdn-file.ludashi.com/wan/micro/sdly/assets_lds/v1/input_log_pwd.png?t=201910210t
Source: sdly.exe, 00000013.00000002.627601801.0000000004225000.00000004.00000001.sdmp	String found in binary or memory: http://cdn-file.ludashi.com/wan/micro/sdly/assets_lds/v1/input_log_pwd.png?t=201910211
Source: sdly.exe, 00000013.00000002.627601801.0000000004225000.00000004.00000001.sdmp	String found in binary or memory: http://cdn-file.ludashi.com/wan/micro/sdly/assets_lds/v1/input_reg_act.png?t=20191021
Source: sdly.exe, 00000013.00000002.627707442.0000000004282000.00000004.00000001.sdmp	String found in binary or memory: http://cdn-file.ludashi.com/wan/micro/sdly/assets_lds/v1/input_reg_act.png?t=20191021Rkc
Source: sdly.exe, 00000013.00000002.627601801.0000000004225000.00000004.00000001.sdmp	String found in binary or memory: http://cdn-file.ludashi.com/wan/micro/sdly/assets_lds/v1/input_reg_act.png?t=20191021iu
Source: sdly.exe, 00000013.00000002.627601801.0000000004225000.00000004.00000001.sdmp	String found in binary or memory: http://cdn-file.ludashi.com/wan/micro/sdly/assets_lds/v1/input_reg_act.png?t=20191021sr
Source: sdly.exe, 00000013.00000002.627601801.0000000004225000.00000004.00000001.sdmp	String found in binary or memory: http://cdn-file.ludashi.com/wan/micro/sdly/assets_lds/v1/input_reg_code.png?t=20191021
Source: sdly.exe, 00000013.00000002.627601801.0000000004225000.00000004.00000001.sdmp	String found in binary or memory: http://cdn-file.ludashi.com/wan/micro/sdly/assets_lds/v1/input_reg_code.png?t=20191021?w
Source: sdly.exe, 00000013.00000002.627601801.0000000004225000.00000004.00000001.sdmp	String found in binary or memory: http://cdn-file.ludashi.com/wan/micro/sdly/assets_lds/v1/input_reg_code.png?t=20191021X
Source: sdly.exe, 00000013.00000002.627542984.00000000041F0000.00000004.00000001.sdmp	String found in binary or memory: http://cdn-file.ludashi.com/wan/micro/sdly/assets_lds/v1/input_reg_pwd.png?t=20191021
Source: sdly.exe, 00000013.00000002.627707442.0000000004282000.00000004.00000001.sdmp	String found in binary or memory: http://cdn-file.ludashi.com/wan/micro/sdly/assets_lds/v1/input_reg_pwd.png?t=20191021CiR
Source: sdly.exe, 00000013.00000002.627601801.0000000004225000.00000004.00000001.sdmp	String found in binary or memory: http://cdn-file.ludashi.com/wan/micro/sdly/assets_lds/v1/input_reg_pwd.png?t=20191021~u
Source: sdly.exe, 00000013.00000002.627566811.0000000004209000.00000004.00000001.sdmp	String found in binary or memory: http://cdn-file.ludashi.com/wan/micro/sdly/assets_lds/v1/log_btn.png
Source: sdly.exe, 00000013.00000002.627566811.0000000004209000.00000004.00000001.sdmp	String found in binary or memory: http://cdn-file.ludashi.com/wan/micro/sdly/assets_lds/v1/log_btn.png$7
Source: sdly.exe, 00000013.00000002.623474504.0000000000E25000.00000004.00000020.sdmp	String found in binary or memory: http://cdn-file.ludashi.com/wan/micro/sdly/assets_lds/v1/log_btn.png=taskpop_wd_sdly
Source: sdly.exe, 00000013.00000002.627566811.0000000004209000.00000004.00000001.sdmp	String found in binary or memory: http://cdn-file.ludashi.com/wan/micro/sdly/assets_lds/v1/main.css
Source: sdly.exe, 00000013.00000002.627707442.0000000004282000.00000004.00000001.sdmp	String found in binary or memory: http://cdn-file.ludashi.com/wan/micro/sdly/assets_lds/v1/nav.png
Source: sdly.exe, 00000013.00000002.627566811.0000000004209000.00000004.00000001.sdmp	String found in binary or memory: http://cdn-file.ludashi.com/wan/micro/sdly/assets_lds/v1/news-bg.png
Source: sdly.exe, 00000013.00000002.627566811.0000000004209000.00000004.00000001.sdmp	String found in binary or memory: http://cdn-file.ludashi.com/wan/micro/sdly/assets_lds/v1/news-bg.pngF
Source: sdly.exe, 00000013.00000002.627566811.0000000004209000.00000004.00000001.sdmp	String found in binary or memory: http://cdn-file.ludashi.com/wan/micro/sdly/assets_lds/v1/news-bg.pngw6m
Source: sdly.exe, 00000013.00000002.623369231.0000000000DE2000.00000004.00000020.sdmp	String found in binary or memory: http://cdn-file.ludashi.com/wan/micro/sdly/assets_lds/v1/reg.jpg?t=20200105
Source: sdly.exe, 00000013.00000002.623369231.0000000000DE2000.00000004.00000020.sdmp	String found in binary or memory: http://cdn-file.ludashi.com/wan/micro/sdly/assets_lds/v1/reg.jpg?t=20200105I
Source: sdly.exe, 00000013.00000002.623369231.0000000000DE2000.00000004.00000020.sdmp	String found in binary or memory: http://cdn-file.ludashi.com/wan/micro/sdly/assets_lds/v1/reg.jpg?t=20200105m
Source: sdly.exe, 00000013.00000002.627542984.00000000041F0000.00000004.00000001.sdmp	String found in binary or memory: http://cdn-file.ludashi.com/wan/micro/sdly/assets_lds/v1/reg.jpg?t=20200105p_wd_sdlytaskpop&from=tas
Source: sdly.exe, 00000013.00000002.623474504.0000000000E25000.00000004.00000020.sdmp	String found in binary or memory: http://cdn-file.ludashi.com/wan/micro/sdly/assets_lds/v1/third_qq.png
Source: sdly.exe, 00000013.00000002.627707442.0000000004282000.00000004.00000001.sdmp	String found in binary or memory: http://cdn-file.ludashi.com/wan/micro/sdly/assets_lds/v1/third_qq.png.
Source: sdly.exe, 00000013.00000002.623369231.0000000000DE2000.00000004.00000020.sdmp	String found in binary or memory: http://cdn-file.ludashi.com/wan/micro/sdly/assets_lds/v1/third_weixin.png
Source: sdly.exe, 00000013.00000002.623369231.0000000000DE2000.00000004.00000020.sdmp	String found in binary or memory: http://cdn-file.ludashi.com/wan/micro/sdly/assets_lds/v1/third_weixin.pngj
Source: sdly.exe, 00000013.00000002.623369231.0000000000DE2000.00000004.00000020.sdmp	String found in binary or memory: http://cdn-file.ludashi.com/wan/micro/sdly/assets_lds/v1/third_weixin.pngnt-t
Source: sdly.exe, 00000013.00000002.623369231.0000000000DE2000.00000004.00000020.sdmp	String found in binary or memory: http://cdn-file.ludashi.com/wan/micro/sdly/assets_lds/v1/third_weixin.pngu
Source: sdly.exe, 00000013.00000003.429113446.0000000004249000.00000004.00000001.sdmp	String found in binary or memory: http://cdn-file.ludashi.com/wan/micro/sdly/assets_lds/v1/upload.jpg
Source: sdly.exe, 00000013.00000002.627601801.0000000004225000.00000004.00000001.sdmp	String found in binary or memory: http://cdn-file.ludashi.com/wan/micro/sdly/assets_lds/v1/upload.jpgm=taskpop_wd_sdly
Source: sdly.exe, 00000013.00000002.629348555.00000000049C3000.00000004.00000001.sdmp	String found in binary or memory: http://cdn-file.ludashi.comhttp:
Source: sdly.exe, 00000013.00000002.629348555.00000000049C3000.00000004.00000001.sdmp	String found in binary or memory: http://cdn-wan.ludashi.com
Source: sdly.exe, 00000013.00000002.627601801.0000000004225000.00000004.00000001.sdmp, sdly.exe, 00000013.00000002.627566811.0000000004209000.00000004.00000001.sdmp	String found in binary or memory: http://cdn-wan.ludashi.com/
Source: sdly.exe, 00000013.00000002.627651205.0000000004256000.00000004.00000001.sdmp	String found in binary or memory: http://cdn-wan.ludashi.com/A
Source: sdly.exe, 00000013.00000002.641664499.000000000BA10000.00000004.00000001.sdmp, sdly.exe, 00000013.00000002.627707442.0000000004282000.00000004.00000001.sdmp, sdly.exe, 00000013.00000003.440280617.00000000042A8000.00000004.00000001.sdmp	String found in binary or memory: http://cdn-wan.ludashi.com/assets/superjs/config.js?v=20210527
Source: sdly.exe, 00000013.00000003.440280617.00000000042A8000.00000004.00000001.sdmp	String found in binary or memory: http://cdn-wan.ludashi.com/assets/superjs/config.js?v=20210527(
Source: sdly.exe, 00000013.00000003.440280617.00000000042A8000.00000004.00000001.sdmp	String found in binary or memory: http://cdn-wan.ludashi.com/assets/superjs/config.js?v=20210527N
Source: sdly.exe, 00000013.00000002.627707442.0000000004282000.00000004.00000001.sdmp	String found in binary or memory: http://cdn-wan.ludashi.com/assets/superjs/config.js?v=20210527X2
Source: sdly.exe, 00000013.00000002.627707442.0000000004282000.00000004.00000001.sdmp, sdly.exe, 00000013.00000002.631203443.000000000568F000.00000004.00000001.sdmp	String found in binary or memory: http://cdn-wan.ludashi.com/assets/superjs/config.js?v=20210527Z
Source: sdly.exe, 00000013.00000002.627601801.0000000004225000.00000004.00000001.sdmp	String found in binary or memory: http://cdn-wan.ludashi.com/assets/superjs/config.js?v=20210527p&from=taskpop_wd_sdly(
Source: sdly.exe, 00000013.00000002.627601801.0000000004225000.00000004.00000001.sdmp	String found in binary or memory: http://cdn-wan.ludashi.com/ss=
Source: sdly.exe, 00000013.00000003.446760410.000000000BAF7000.00000004.00000001.sdmp	String found in binary or memory: http://cdn-wan.ludashi.compageRegister.js?v=20210429pageThirdInfo.js?v=20200716modules/commonSms.js?
Source: sdly.exe, 00000013.00000002.630965679.00000000055AC000.00000004.00000001.sdmp	String found in binary or memory: http://cdp.rapidssl.com/RapidSSLRSACA2018.crl0L
Source: sdly.exe, 00000013.00000002.627244852.0000000003D53000.00000002.00000001.sdmp	String found in binary or memory: http://cerca.lycos.it/
Source: sdly.exe, 00000013.00000002.627244852.0000000003D53000.00000002.00000001.sdmp	String found in binary or memory: http://cgi.search.biglobe.ne.jp/
Source: sdly.exe, 00000013.00000002.627244852.0000000003D53000.00000002.00000001.sdmp	String found in binary or memory: http://cgi.search.biglobe.ne.jp/favicon.ico
Source: sdly.exe, 00000013.00000002.627244852.0000000003D53000.00000002.00000001.sdmp	String found in binary or memory: http://clients5.google.com/complete/search?hl=
Source: sdly.exe, 00000013.00000002.627244852.0000000003D53000.00000002.00000001.sdmp	String found in binary or memory: http://cnet.search.com/
Source: sdly.exe, 00000013.00000002.627244852.0000000003D53000.00000002.00000001.sdmp	String found in binary or memory: http://cnweb.search.live.com/results.aspx?q=
Source: sdly.exe, 00000013.00000002.627244852.0000000003D53000.00000002.00000001.sdmp	String found in binary or memory: http://corp.naukri.com/
Source: sdly.exe, 00000013.00000002.627244852.0000000003D53000.00000002.00000001.sdmp	String found in binary or memory: http://corp.naukri.com/favicon.ico
Source: mAGs0IsoB7.exe, 00000001.00000003.375959176.00000000011A0000.00000004.00000001.sdmp, wow_helper.exe.1.dr	String found in binary or memory: http://crl.globalsign.com/gs/gstimestampingg2.crl0T
Source: mAGs0IsoB7.exe, 00000001.00000003.356429891.00000000037DB000.00000004.00000001.sdmp, wow_helper.exe.1.dr	String found in binary or memory: http://crl.globalsign.com/gs/gstimestampingsha2g2.crl0
Source: mAGs0IsoB7.exe, 00000001.00000003.356429891.00000000037DB000.00000004.00000001.sdmp, wow_helper.exe.1.dr	String found in binary or memory: http://crl.globalsign.net/root-r3.crl0
Source: mAGs0IsoB7.exe, 00000001.00000003.375959176.00000000011A0000.00000004.00000001.sdmp, wow_helper.exe.1.dr	String found in binary or memory: http://crl.globalsign.net/root.crl0
Source: mAGs0IsoB7.exe, 00000001.00000003.413214896.00000000011E0000.00000004.00000040.sdmp	String found in binary or memory: http://crl.sectigo.com/SectigoRSATimeStampingCA.crl0t
Source: mAGs0IsoB7.exe	String found in binary or memory: http://crl3.digicert.com/DigiCertAssuredIDRootCA.crl0:
Source: mAGs0IsoB7.exe	String found in binary or memory: http://crl3.digicert.com/DigiCertAssuredIDRootCA.crl0O
Source: mAGs0IsoB7.exe	String found in binary or memory: http://crl3.digicert.com/DigiCertAssuredIDRootCA.crl0P
Source: sdly.exe, 00000013.00000002.630990163.00000000055D2000.00000004.00000001.sdmp	String found in binary or memory: http://crl3.digicert.com/DigiCertGlobalRootCA.crl0c
Source: mAGs0IsoB7.exe	String found in binary or memory: http://crl3.digicert.com/assured-cs-g1.crl00
Source: mAGs0IsoB7.exe	String found in binary or memory: http://crl3.digicert.com/sha2-assured-cs-g1.crl05
Source: mAGs0IsoB7.exe	String found in binary or memory: http://crl3.digicert.com/sha2-assured-ts.crl02
Source: mAGs0IsoB7.exe, 00000001.00000002.424455611.00000000037CA000.00000004.00000001.sdmp	String found in binary or memory: http://crl4.digicert.com/DigiCertAss
Source: mAGs0IsoB7.exe, 00000001.00000002.424455611.00000000037CA000.00000004.00000001.sdmp	String found in binary or memory: http://crl4.digicert.com/DigiCertAssuredIDRootCA.crl
Source: mAGs0IsoB7.exe	String found in binary or memory: http://crl4.digicert.com/DigiCertAssuredIDRootCA.crl0
Source: mAGs0IsoB7.exe	String found in binary or memory: http://crl4.digicert.com/DigiCertAssuredIDRootCA.crl0:
Source: mAGs0IsoB7.exe, 00000001.00000002.424455611.00000000037CA000.00000004.00000001.sdmp	String found in binary or memory: http://crl4.digicert.com/DigiCertAssuredIDRootCA.crl=
Source: mAGs0IsoB7.exe	String found in binary or memory: http://crl4.digicert.com/assured-cs-g1.crl0L
Source: mAGs0IsoB7.exe	String found in binary or memory: http://crl4.digicert.com/sha2-assured-cs-g1.crl0L
Source: mAGs0IsoB7.exe	String found in binary or memory: http://crl4.digicert.com/sha2-assured-ts.crl0
Source: mAGs0IsoB7.exe, 00000001.00000002.424455611.00000000037CA000.00000004.00000001.sdmp	String found in binary or memory: http://crl4.digicert.comQ
Source: mAGs0IsoB7.exe, 00000001.00000003.413214896.00000000011E0000.00000004.00000040.sdmp	String found in binary or memory: http://crt.sectigo.com/SectigoRSATimeStampingCA.crt0#
Source: sdly.exe, 00000013.00000002.627244852.0000000003D53000.00000002.00000001.sdmp	String found in binary or memory: http://de.search.yahoo.com/
Source: sdly.exe, 00000013.00000003.435065815.00000000046C0000.00000004.00000001.sdmp	String found in binary or memory: http://en.w=
Source: sdly.exe, 00000013.00000002.627244852.0000000003D53000.00000002.00000001.sdmp	String found in binary or memory: http://es.ask.com/
Source: sdly.exe, 00000013.00000002.627244852.0000000003D53000.00000002.00000001.sdmp	String found in binary or memory: http://es.search.yahoo.com/
Source: sdly.exe, 00000013.00000002.627244852.0000000003D53000.00000002.00000001.sdmp	String found in binary or memory: http://esearch.rakuten.co.jp/
Source: sdly.exe, 00000013.00000002.627244852.0000000003D53000.00000002.00000001.sdmp	String found in binary or memory: http://espanol.search.yahoo.com/
Source: sdly.exe, 00000013.00000002.627244852.0000000003D53000.00000002.00000001.sdmp	String found in binary or memory: http://espn.go.com/favicon.ico
Source: sdly.exe, 00000013.00000002.627244852.0000000003D53000.00000002.00000001.sdmp	String found in binary or memory: http://find.joins.com/
Source: sdly.exe, 00000013.00000002.631954364.00000000079A6000.00000002.00000001.sdmp	String found in binary or memory: http://fontfabrik.com
Source: sdly.exe, 00000013.00000002.627244852.0000000003D53000.00000002.00000001.sdmp	String found in binary or memory: http://fr.search.yahoo.com/
Source: sdly.exe, 00000013.00000002.627244852.0000000003D53000.00000002.00000001.sdmp	String found in binary or memory: http://google.pchome.com.tw/
Source: sdly.exe, 00000013.00000002.627244852.0000000003D53000.00000002.00000001.sdmp	String found in binary or memory: http://home.altervista.org/
Source: sdly.exe, 00000013.00000002.627244852.0000000003D53000.00000002.00000001.sdmp	String found in binary or memory: http://home.altervista.org/favicon.ico
Source: mAGs0IsoB7.exe	String found in binary or memory: http://https://file:///res://ieframe.dll/unloadonunload
Source: sdly.exe, 00000013.00000002.631017458.00000000055DC000.00000004.00000001.sdmp	String found in binary or memory: http://i.ludashi.com/
Source: sdly.exe, 00000013.00000002.627707442.0000000004282000.00000004.00000001.sdmp	String found in binary or memory: http://i.ludashi.com/ajax/Weixinlogin?extend=wd_youxisite&gamefrom=sdly&channel=taskpop&from=taskpop
Source: sdly.exe, 00000013.00000002.627707442.0000000004282000.00000004.00000001.sdmp	String found in binary or memory: http://i.ludashi.com/ajax/gettoken?user_from=youxi&callback=jQuery183022485800102059378_162367699734
Source: sdly.exe, 00000013.00000002.627707442.0000000004282000.00000004.00000001.sdmp	String found in binary or memory: http://i.ludashi.com/ajax/qqlogin?extend=wd_youxisite&gamefrom=sdly&channel=taskpop&from=taskpop_wd_
Source: sdly.exe, 00000013.00000002.627244852.0000000003D53000.00000002.00000001.sdmp	String found in binary or memory: http://ie.search.yahoo.com/os?command=
Source: sdly.exe, 00000013.00000002.627244852.0000000003D53000.00000002.00000001.sdmp	String found in binary or memory: http://ie8.ebay.com/open-search/output-xml.php?q=
Source: sdly.exe, 00000013.00000002.627244852.0000000003D53000.00000002.00000001.sdmp	String found in binary or memory: http://image.excite.co.jp/jp/favicon/lep.ico
Source: sdly.exe, 00000013.00000002.627244852.0000000003D53000.00000002.00000001.sdmp	String found in binary or memory: http://images.joins.com/ui_c/fvc_joins.ico
Source: sdly.exe, 00000013.00000002.627244852.0000000003D53000.00000002.00000001.sdmp	String found in binary or memory: http://images.monster.com/favicon.ico
Source: sdly.exe, 00000013.00000002.627244852.0000000003D53000.00000002.00000001.sdmp	String found in binary or memory: http://img.atlas.cz/favicon.ico
Source: sdly.exe, 00000013.00000002.627244852.0000000003D53000.00000002.00000001.sdmp	String found in binary or memory: http://img.shopzilla.com/shopzilla/shopzilla.ico
Source: sdly.exe, 00000013.00000002.627244852.0000000003D53000.00000002.00000001.sdmp	String found in binary or memory: http://in.search.yahoo.com/
Source: sdly.exe, 00000013.00000002.627244852.0000000003D53000.00000002.00000001.sdmp	String found in binary or memory: http://it.search.dada.net/
Source: sdly.exe, 00000013.00000002.627244852.0000000003D53000.00000002.00000001.sdmp	String found in binary or memory: http://it.search.dada.net/favicon.ico
Source: sdly.exe, 00000013.00000002.627244852.0000000003D53000.00000002.00000001.sdmp	String found in binary or memory: http://it.search.yahoo.com/
Source: sdly.exe, 00000013.00000002.627244852.0000000003D53000.00000002.00000001.sdmp	String found in binary or memory: http://jobsearch.monster.com/
Source: sdly.exe, 00000013.00000002.627244852.0000000003D53000.00000002.00000001.sdmp	String found in binary or memory: http://kr.search.yahoo.com/
Source: sdly.exe	String found in binary or memory: http://l.public.ludashi.com/pc/Updata/Usuallog
Source: mAGs0IsoB7.exe	String found in binary or memory: http://l.public.ludashi.com/pc/Updata/UsuallogCStatistic::Thread_SendPingback
Source: sdly.exe, 00000013.00000002.627244852.0000000003D53000.00000002.00000001.sdmp	String found in binary or memory: http://list.taobao.com/
Source: sdly.exe, 00000013.00000002.627244852.0000000003D53000.00000002.00000001.sdmp	String found in binary or memory: http://list.taobao.com/browse/search_visual.htm?n=15&q=
Source: sdly.exe, 00000013.00000002.627244852.0000000003D53000.00000002.00000001.sdmp	String found in binary or memory: http://mail.live.com/
Source: sdly.exe, 00000013.00000002.627244852.0000000003D53000.00000002.00000001.sdmp	String found in binary or memory: http://mail.live.com/?rru=compose%3Fsubject%3D
Source: sdly.exe, 00000013.00000002.627244852.0000000003D53000.00000002.00000001.sdmp	String found in binary or memory: http://msk.afisha.ru/
Source: sdly.exe, 00000013.00000002.627244852.0000000003D53000.00000002.00000001.sdmp	String found in binary or memory: http://ocnsearch.goo.ne.jp/
Source: sdly.exe, 00000013.00000002.630990163.00000000055D2000.00000004.00000001.sdmp	String found in binary or memory: http://ocsp.digicert.com0B
Source: mAGs0IsoB7.exe	String found in binary or memory: http://ocsp.digicert.com0C
Source: mAGs0IsoB7.exe	String found in binary or memory: http://ocsp.digicert.com0L
Source: mAGs0IsoB7.exe	String found in binary or memory: http://ocsp.digicert.com0N
Source: mAGs0IsoB7.exe	String found in binary or memory: http://ocsp.digicert.com0O
Source: mAGs0IsoB7.exe, 00000001.00000002.424455611.00000000037CA000.00000004.00000001.sdmp	String found in binary or memory: http://ocsp.digicert.comhttp://crl3.digicert.com/assured-cs-g1.crlhttp://crl4.digicert.com/assured-c
Source: mAGs0IsoB7.exe, 00000001.00000003.413214896.00000000011E0000.00000004.00000040.sdmp	String found in binary or memory: http://ocsp.sectigo.com0
Source: mAGs0IsoB7.exe, 00000001.00000003.356429891.00000000037DB000.00000004.00000001.sdmp, wow_helper.exe.1.dr	String found in binary or memory: http://ocsp2.globalsign.com/gstimestampingsha2g20
Source: sdly.exe, 00000013.00000002.627244852.0000000003D53000.00000002.00000001.sdmp	String found in binary or memory: http://openimage.interpark.com/interpark.ico
Source: sdly.exe, 00000013.00000002.627244852.0000000003D53000.00000002.00000001.sdmp	String found in binary or memory: http://p.zhongsou.com/
Source: sdly.exe, 00000013.00000002.627244852.0000000003D53000.00000002.00000001.sdmp	String found in binary or memory: http://p.zhongsou.com/favicon.ico
Source: sdly.exe, 00000013.00000002.627244852.0000000003D53000.00000002.00000001.sdmp	String found in binary or memory: http://price.ru/
Source: sdly.exe, 00000013.00000002.627244852.0000000003D53000.00000002.00000001.sdmp	String found in binary or memory: http://price.ru/favicon.ico
Source: sdly.exe, 00000013.00000002.627244852.0000000003D53000.00000002.00000001.sdmp	String found in binary or memory: http://recherche.linternaute.com/
Source: sdly.exe, 00000013.00000002.627244852.0000000003D53000.00000002.00000001.sdmp	String found in binary or memory: http://recherche.tf1.fr/
Source: sdly.exe, 00000013.00000002.627244852.0000000003D53000.00000002.00000001.sdmp	String found in binary or memory: http://recherche.tf1.fr/favicon.ico
Source: sdly.exe, 00000013.00000002.627244852.0000000003D53000.00000002.00000001.sdmp	String found in binary or memory: http://rover.ebay.com
Source: sdly.exe, 00000013.00000002.627244852.0000000003D53000.00000002.00000001.sdmp	String found in binary or memory: http://ru.search.yahoo.com
Source: CefView.exe	String found in binary or memory: http://s.birdpaper.cn/bizhi?pid=
Source: CefView.exe	String found in binary or memory: http://s.conchdesktop.com/desktop?pid=
Source: CefView.exe	String found in binary or memory: http://s.coupon996.com/couponmaster?pid=
Source: CefView.exe	String found in binary or memory: http://s.fireemulator.com/apkmagicemu?pid=
Source: sdly.exe, 00000013.00000002.631017458.00000000055DC000.00000004.00000001.sdmp	String found in binary or memory: http://s.ludashi.com/
Source: CefView.exe	String found in binary or memory: http://s.ludashi.com/mgame?pid=
Source: CefView.exe	String found in binary or memory: http://s.ludashi.com/url2?pid=
Source: CefView.exe	String found in binary or memory: http://s.ludashi.com/url3?pid=
Source: CefView.exe	String found in binary or memory: http://s.ludashi.com/url4?pid=
Source: mAGs0IsoB7.exe	String found in binary or memory: http://s.ludashi.com/wan
Source: mAGs0IsoB7.exe, 00000001.00000002.424455611.00000000037CA000.00000004.00000001.sdmp	String found in binary or memory: http://s.ludashi.com/wan?
Source: mAGs0IsoB7.exe, 00000001.00000002.424455611.00000000037CA000.00000004.00000001.sdmp	String found in binary or memory: http://s.ludashi.com/wan?k
Source: sdly.exe, 00000013.00000002.627707442.0000000004282000.00000004.00000001.sdmp	String found in binary or memory: http://s.ludashi.com/wan?type=accurate&action=t0&channel=taskpop&from=taskpop_wd_sdly&mid=b8a4400180
Source: sdly.exe, 00000013.00000002.627707442.0000000004282000.00000004.00000001.sdmp, sdly.exe, 00000013.00000002.631203443.000000000568F000.00000004.00000001.sdmp	String found in binary or memory: http://s.ludashi.com/wan?type=accurate&action=t1&channel=taskpop&from=taskpop_wd_sdly&mid=b8a4400180
Source: sdly.exe, 00000013.00000002.627707442.0000000004282000.00000004.00000001.sdmp	String found in binary or memory: http://s.ludashi.com/wan?type=accurate&action=t2&channel=taskpop&from=taskpop_wd_sdly&mid=b8a4400180
Source: sdly.exe, 00000013.00000002.627707442.0000000004282000.00000004.00000001.sdmp	String found in binary or memory: http://s.ludashi.com/wan?type=accurate&action=t3&channel=taskpop&from=taskpop_wd_sdly&mid=b8a4400180
Source: mAGs0IsoB7.exe, 00000001.00000002.424455611.00000000037CA000.00000004.00000001.sdmp	String found in binary or memory: http://s.ludashi.com/wan?type=weiduan&action=add_desk_icon&channel=taskpop&mid=b8a4400180ee20f44982c
Source: mAGs0IsoB7.exe, 00000001.00000002.424455611.00000000037CA000.00000004.00000001.sdmp	String found in binary or memory: http://s.ludashi.com/wan?type=weiduan&action=add_uninst_item&channel=taskpop&mid=b8a4400180ee20f4498
Source: mAGs0IsoB7.exe, 00000001.00000002.424455611.00000000037CA000.00000004.00000001.sdmp	String found in binary or memory: http://s.ludashi.com/wan?type=weiduan&action=inst_open&channel=taskpop&mid=b8a4400180ee20f44982cb4d7
Source: mAGs0IsoB7.exe, 00000001.00000002.424455611.00000000037CA000.00000004.00000001.sdmp	String found in binary or memory: http://s.ludashi.com/wan?type=weiduan&action=inst_succ&channel=taskpop&mid=b8a4400180ee20f44982cb4d7
Source: mAGs0IsoB7.exe, 00000001.00000002.424455611.00000000037CA000.00000004.00000001.sdmp	String found in binary or memory: http://s.ludashi.com/wan?type=weiduan&action=install_extra&channel=taskpop&mid=b8a4400180ee20f44982c
Source: mAGs0IsoB7.exe, 00000001.00000002.424455611.00000000037CA000.00000004.00000001.sdmp	String found in binary or memory: http://s.ludashi.com/wan?type=weiduan&action=pepflash_down_success&channel=taskpop&mid=b8a4400180ee2
Source: mAGs0IsoB7.exe, 00000001.00000003.413420797.00000000037F4000.00000004.00000001.sdmp	String found in binary or memory: http://s.ludashi.com/wan?type=weiduan&action=res_down_success&channel=taskpop&mid=b8a4400180ee20f449
Source: sdly.exe, 00000013.00000002.623369231.0000000000DE2000.00000004.00000020.sdmp	String found in binary or memory: http://s.ludashi.com/wan?type=weiduan&action=run&channel=taskpop&mid=b8a4400180ee20f44982cb4d73d6fcd
Source: mAGs0IsoB7.exe, 00000001.00000002.424455611.00000000037CA000.00000004.00000001.sdmp	String found in binary or memory: http://s.ludashi.com/wan?type=weiduan&action=wd_install_success&channel=taskpop&mid=b8a4400180ee20f4
Source: sdly.exe, 00000013.00000002.627651205.0000000004256000.00000004.00000001.sdmp	String found in binary or memory: http://s.ludashi.com/wan?type=weiduan&action=wd_show_success&channel=taskpop&mid=b8a4400180ee20f4498
Source: CefView.exe	String found in binary or memory: http://s.mikannovel.com/mikan?pid=
Source: CefView.exe	String found in binary or memory: http://s.pdfxd.com/pdf?pid=
Source: CefView.exe	String found in binary or memory: http://s.qiyujiasu.com/nssgame?pid=
Source: mAGs0IsoB7.exe, 00000001.00000002.424885665.00000000038D4000.00000004.00000001.sdmp	String found in binary or memory: http://s.symcb.com/universal-root.crl0
Source: mAGs0IsoB7.exe, 00000001.00000002.424885665.00000000038D4000.00000004.00000001.sdmp	String found in binary or memory: http://s.symcd.com06
Source: CefView.exe	String found in binary or memory: http://s.taojike.com.cn/jikewan?pid=
Source: mAGs0IsoB7.exe, 00000001.00000003.356429891.00000000037DB000.00000004.00000001.sdmp, wow_helper.exe.1.dr	String found in binary or memory: http://s1.symcb.com/pca3-g5.crl0
Source: mAGs0IsoB7.exe, 00000001.00000003.356429891.00000000037DB000.00000004.00000001.sdmp, wow_helper.exe.1.dr	String found in binary or memory: http://s2.symcb.com0
Source: sdly.exe, 00000013.00000002.627244852.0000000003D53000.00000002.00000001.sdmp	String found in binary or memory: http://sads.myspace.com/
Source: sdly.exe, 00000013.00000002.627244852.0000000003D53000.00000002.00000001.sdmp	String found in binary or memory: http://search-dyn.tiscali.it/
Source: sdly.exe, 00000013.00000002.627244852.0000000003D53000.00000002.00000001.sdmp	String found in binary or memory: http://search.about.com/
Source: sdly.exe, 00000013.00000002.627244852.0000000003D53000.00000002.00000001.sdmp	String found in binary or memory: http://search.alice.it/
Source: sdly.exe, 00000013.00000002.627244852.0000000003D53000.00000002.00000001.sdmp	String found in binary or memory: http://search.alice.it/favicon.ico
Source: sdly.exe, 00000013.00000002.627244852.0000000003D53000.00000002.00000001.sdmp	String found in binary or memory: http://search.aol.co.uk/
Source: sdly.exe, 00000013.00000002.627244852.0000000003D53000.00000002.00000001.sdmp	String found in binary or memory: http://search.aol.com/
Source: sdly.exe, 00000013.00000002.627244852.0000000003D53000.00000002.00000001.sdmp	String found in binary or memory: http://search.aol.in/
Source: sdly.exe, 00000013.00000002.627244852.0000000003D53000.00000002.00000001.sdmp	String found in binary or memory: http://search.atlas.cz/
Source: sdly.exe, 00000013.00000002.627244852.0000000003D53000.00000002.00000001.sdmp	String found in binary or memory: http://search.auction.co.kr/
Source: sdly.exe, 00000013.00000002.627244852.0000000003D53000.00000002.00000001.sdmp	String found in binary or memory: http://search.auone.jp/
Source: sdly.exe, 00000013.00000002.627244852.0000000003D53000.00000002.00000001.sdmp	String found in binary or memory: http://search.books.com.tw/
Source: sdly.exe, 00000013.00000002.627244852.0000000003D53000.00000002.00000001.sdmp	String found in binary or memory: http://search.books.com.tw/favicon.ico
Source: sdly.exe, 00000013.00000002.627244852.0000000003D53000.00000002.00000001.sdmp	String found in binary or memory: http://search.centrum.cz/
Source: sdly.exe, 00000013.00000002.627244852.0000000003D53000.00000002.00000001.sdmp	String found in binary or memory: http://search.centrum.cz/favicon.ico
Source: sdly.exe, 00000013.00000002.627244852.0000000003D53000.00000002.00000001.sdmp	String found in binary or memory: http://search.chol.com/
Source: sdly.exe, 00000013.00000002.627244852.0000000003D53000.00000002.00000001.sdmp	String found in binary or memory: http://search.chol.com/favicon.ico
Source: sdly.exe, 00000013.00000002.627244852.0000000003D53000.00000002.00000001.sdmp	String found in binary or memory: http://search.cn.yahoo.com/
Source: sdly.exe, 00000013.00000002.627244852.0000000003D53000.00000002.00000001.sdmp	String found in binary or memory: http://search.daum.net/
Source: sdly.exe, 00000013.00000002.627244852.0000000003D53000.00000002.00000001.sdmp	String found in binary or memory: http://search.daum.net/favicon.ico
Source: sdly.exe, 00000013.00000002.627244852.0000000003D53000.00000002.00000001.sdmp	String found in binary or memory: http://search.dreamwiz.com/
Source: sdly.exe, 00000013.00000002.627244852.0000000003D53000.00000002.00000001.sdmp	String found in binary or memory: http://search.dreamwiz.com/favicon.ico
Source: sdly.exe, 00000013.00000002.627244852.0000000003D53000.00000002.00000001.sdmp	String found in binary or memory: http://search.ebay.co.uk/
Source: sdly.exe, 00000013.00000002.627244852.0000000003D53000.00000002.00000001.sdmp	String found in binary or memory: http://search.ebay.com/
Source: sdly.exe, 00000013.00000002.627244852.0000000003D53000.00000002.00000001.sdmp	String found in binary or memory: http://search.ebay.com/favicon.ico
Source: sdly.exe, 00000013.00000002.627244852.0000000003D53000.00000002.00000001.sdmp	String found in binary or memory: http://search.ebay.de/
Source: sdly.exe, 00000013.00000002.627244852.0000000003D53000.00000002.00000001.sdmp	String found in binary or memory: http://search.ebay.es/
Source: sdly.exe, 00000013.00000002.627244852.0000000003D53000.00000002.00000001.sdmp	String found in binary or memory: http://search.ebay.fr/
Source: sdly.exe, 00000013.00000002.627244852.0000000003D53000.00000002.00000001.sdmp	String found in binary or memory: http://search.ebay.in/
Source: sdly.exe, 00000013.00000002.627244852.0000000003D53000.00000002.00000001.sdmp	String found in binary or memory: http://search.ebay.it/
Source: sdly.exe, 00000013.00000002.627244852.0000000003D53000.00000002.00000001.sdmp	String found in binary or memory: http://search.empas.com/
Source: sdly.exe, 00000013.00000002.627244852.0000000003D53000.00000002.00000001.sdmp	String found in binary or memory: http://search.empas.com/favicon.ico
Source: sdly.exe, 00000013.00000002.627244852.0000000003D53000.00000002.00000001.sdmp	String found in binary or memory: http://search.espn.go.com/
Source: sdly.exe, 00000013.00000002.627244852.0000000003D53000.00000002.00000001.sdmp	String found in binary or memory: http://search.gamer.com.tw/
Source: sdly.exe, 00000013.00000002.627244852.0000000003D53000.00000002.00000001.sdmp	String found in binary or memory: http://search.gamer.com.tw/favicon.ico
Source: sdly.exe, 00000013.00000002.627244852.0000000003D53000.00000002.00000001.sdmp	String found in binary or memory: http://search.gismeteo.ru/
Source: sdly.exe, 00000013.00000002.627244852.0000000003D53000.00000002.00000001.sdmp	String found in binary or memory: http://search.goo.ne.jp/
Source: sdly.exe, 00000013.00000002.627244852.0000000003D53000.00000002.00000001.sdmp	String found in binary or memory: http://search.goo.ne.jp/favicon.ico
Source: sdly.exe, 00000013.00000002.627244852.0000000003D53000.00000002.00000001.sdmp	String found in binary or memory: http://search.hanafos.com/
Source: sdly.exe, 00000013.00000002.627244852.0000000003D53000.00000002.00000001.sdmp	String found in binary or memory: http://search.hanafos.com/favicon.ico
Source: sdly.exe, 00000013.00000002.627244852.0000000003D53000.00000002.00000001.sdmp	String found in binary or memory: http://search.interpark.com/
Source: sdly.exe, 00000013.00000002.627244852.0000000003D53000.00000002.00000001.sdmp	String found in binary or memory: http://search.ipop.co.kr/
Source: sdly.exe, 00000013.00000002.627244852.0000000003D53000.00000002.00000001.sdmp	String found in binary or memory: http://search.ipop.co.kr/favicon.ico
Source: sdly.exe, 00000013.00000002.627244852.0000000003D53000.00000002.00000001.sdmp	String found in binary or memory: http://search.live.com/results.aspx?FORM=IEFM1&q=
Source: sdly.exe, 00000013.00000002.627244852.0000000003D53000.00000002.00000001.sdmp	String found in binary or memory: http://search.live.com/results.aspx?FORM=SO2TDF&q=
Source: sdly.exe, 00000013.00000002.627244852.0000000003D53000.00000002.00000001.sdmp	String found in binary or memory: http://search.live.com/results.aspx?FORM=SOLTDF&q=
Source: sdly.exe, 00000013.00000002.627244852.0000000003D53000.00000002.00000001.sdmp	String found in binary or memory: http://search.live.com/results.aspx?q=
Source: sdly.exe, 00000013.00000002.627244852.0000000003D53000.00000002.00000001.sdmp	String found in binary or memory: http://search.livedoor.com/
Source: sdly.exe, 00000013.00000002.627244852.0000000003D53000.00000002.00000001.sdmp	String found in binary or memory: http://search.livedoor.com/favicon.ico
Source: sdly.exe, 00000013.00000002.627244852.0000000003D53000.00000002.00000001.sdmp	String found in binary or memory: http://search.lycos.co.uk/
Source: sdly.exe, 00000013.00000002.627244852.0000000003D53000.00000002.00000001.sdmp	String found in binary or memory: http://search.lycos.com/
Source: sdly.exe, 00000013.00000002.627244852.0000000003D53000.00000002.00000001.sdmp	String found in binary or memory: http://search.lycos.com/favicon.ico
Source: sdly.exe, 00000013.00000002.627244852.0000000003D53000.00000002.00000001.sdmp	String found in binary or memory: http://search.msn.co.jp/results.aspx?q=
Source: sdly.exe, 00000013.00000002.627244852.0000000003D53000.00000002.00000001.sdmp	String found in binary or memory: http://search.msn.co.uk/results.aspx?q=
Source: sdly.exe, 00000013.00000002.627244852.0000000003D53000.00000002.00000001.sdmp	String found in binary or memory: http://search.msn.com.cn/results.aspx?q=
Source: sdly.exe, 00000013.00000002.627244852.0000000003D53000.00000002.00000001.sdmp	String found in binary or memory: http://search.msn.com/results.aspx?q=
Source: sdly.exe, 00000013.00000002.627244852.0000000003D53000.00000002.00000001.sdmp	String found in binary or memory: http://search.nate.com/
Source: sdly.exe, 00000013.00000002.627244852.0000000003D53000.00000002.00000001.sdmp	String found in binary or memory: http://search.naver.com/
Source: sdly.exe, 00000013.00000002.627244852.0000000003D53000.00000002.00000001.sdmp	String found in binary or memory: http://search.naver.com/favicon.ico
Source: sdly.exe, 00000013.00000002.627244852.0000000003D53000.00000002.00000001.sdmp	String found in binary or memory: http://search.nifty.com/
Source: sdly.exe, 00000013.00000002.627244852.0000000003D53000.00000002.00000001.sdmp	String found in binary or memory: http://search.orange.co.uk/
Source: sdly.exe, 00000013.00000002.627244852.0000000003D53000.00000002.00000001.sdmp	String found in binary or memory: http://search.orange.co.uk/favicon.ico
Source: sdly.exe, 00000013.00000002.627244852.0000000003D53000.00000002.00000001.sdmp	String found in binary or memory: http://search.rediff.com/
Source: sdly.exe, 00000013.00000002.627244852.0000000003D53000.00000002.00000001.sdmp	String found in binary or memory: http://search.rediff.com/favicon.ico
Source: sdly.exe, 00000013.00000002.627244852.0000000003D53000.00000002.00000001.sdmp	String found in binary or memory: http://search.seznam.cz/
Source: sdly.exe, 00000013.00000002.627244852.0000000003D53000.00000002.00000001.sdmp	String found in binary or memory: http://search.seznam.cz/favicon.ico
Source: sdly.exe, 00000013.00000002.627244852.0000000003D53000.00000002.00000001.sdmp	String found in binary or memory: http://search.sify.com/
Source: sdly.exe, 00000013.00000002.627244852.0000000003D53000.00000002.00000001.sdmp	String found in binary or memory: http://search.yahoo.co.jp
Source: sdly.exe, 00000013.00000002.627244852.0000000003D53000.00000002.00000001.sdmp	String found in binary or memory: http://search.yahoo.co.jp/favicon.ico
Source: sdly.exe, 00000013.00000002.627244852.0000000003D53000.00000002.00000001.sdmp	String found in binary or memory: http://search.yahoo.com/
Source: sdly.exe, 00000013.00000002.627244852.0000000003D53000.00000002.00000001.sdmp	String found in binary or memory: http://search.yahoo.com/favicon.ico
Source: sdly.exe, 00000013.00000002.627244852.0000000003D53000.00000002.00000001.sdmp	String found in binary or memory: http://search.yahooapis.jp/AssistSearchService/V2/webassistSearch?output=iejson&p=
Source: sdly.exe, 00000013.00000002.627244852.0000000003D53000.00000002.00000001.sdmp	String found in binary or memory: http://search.yam.com/
Source: sdly.exe, 00000013.00000002.627244852.0000000003D53000.00000002.00000001.sdmp	String found in binary or memory: http://search1.taobao.com/
Source: sdly.exe, 00000013.00000002.627244852.0000000003D53000.00000002.00000001.sdmp	String found in binary or memory: http://search2.estadao.com.br/
Source: sdly.exe, 00000013.00000002.627244852.0000000003D53000.00000002.00000001.sdmp	String found in binary or memory: http://searchresults.news.com.au/
Source: mAGs0IsoB7.exe, 00000001.00000003.375959176.00000000011A0000.00000004.00000001.sdmp, wow_helper.exe.1.dr	String found in binary or memory: http://secure.globalsign.com/cacert/gstimestampingg2.crt0
Source: mAGs0IsoB7.exe, 00000001.00000003.356429891.00000000037DB000.00000004.00000001.sdmp, wow_helper.exe.1.dr	String found in binary or memory: http://secure.globalsign.com/cacert/gstimestampingsha2g2.crt0
Source: sdly.exe, 00000013.00000002.627244852.0000000003D53000.00000002.00000001.sdmp	String found in binary or memory: http://service2.bfast.com/
Source: mAGs0IsoB7.exe, 00000001.00000002.424455611.00000000037CA000.00000004.00000001.sdmp, wow_helper.exe.1.dr	String found in binary or memory: http://sf.symcb.com/sf.crl0a
Source: mAGs0IsoB7.exe, 00000001.00000002.424455611.00000000037CA000.00000004.00000001.sdmp, wow_helper.exe.1.dr	String found in binary or memory: http://sf.symcb.com/sf.crt0
Source: mAGs0IsoB7.exe, 00000001.00000002.424455611.00000000037CA000.00000004.00000001.sdmp, wow_helper.exe.1.dr	String found in binary or memory: http://sf.symcd.com0&
Source: sdly.exe, 00000013.00000002.627244852.0000000003D53000.00000002.00000001.sdmp	String found in binary or memory: http://sitesearch.timesonline.co.uk/
Source: sdly.exe, 00000013.00000002.627244852.0000000003D53000.00000002.00000001.sdmp	String found in binary or memory: http://so-net.search.goo.ne.jp/
Source: sdly.exe, 00000013.00000002.630965679.00000000055AC000.00000004.00000001.sdmp	String found in binary or memory: http://status.rapidssl.com0=
Source: sdly.exe, 00000013.00000002.627244852.0000000003D53000.00000002.00000001.sdmp	String found in binary or memory: http://suche.aol.de/
Source: sdly.exe, 00000013.00000002.627244852.0000000003D53000.00000002.00000001.sdmp	String found in binary or memory: http://suche.freenet.de/
Source: sdly.exe, 00000013.00000002.627244852.0000000003D53000.00000002.00000001.sdmp	String found in binary or memory: http://suche.freenet.de/favicon.ico
Source: sdly.exe, 00000013.00000002.627244852.0000000003D53000.00000002.00000001.sdmp	String found in binary or memory: http://suche.lycos.de/
Source: sdly.exe, 00000013.00000002.627244852.0000000003D53000.00000002.00000001.sdmp	String found in binary or memory: http://suche.t-online.de/
Source: sdly.exe, 00000013.00000002.627244852.0000000003D53000.00000002.00000001.sdmp	String found in binary or memory: http://suche.web.de/
Source: sdly.exe, 00000013.00000002.627244852.0000000003D53000.00000002.00000001.sdmp	String found in binary or memory: http://suche.web.de/favicon.ico
Source: mAGs0IsoB7.exe, 00000001.00000003.375959176.00000000011A0000.00000004.00000001.sdmp, wow_helper.exe.1.dr	String found in binary or memory: http://sv.symcb.com/sv.crl0a
Source: mAGs0IsoB7.exe, 00000001.00000003.375959176.00000000011A0000.00000004.00000001.sdmp, wow_helper.exe.1.dr	String found in binary or memory: http://sv.symcb.com/sv.crt0
Source: mAGs0IsoB7.exe, 00000001.00000003.375959176.00000000011A0000.00000004.00000001.sdmp, wow_helper.exe.1.dr	String found in binary or memory: http://sv.symcd.com0&
Source: CefView.exe	String found in binary or memory: http://tests/windowWindowTest.PositionWindowTest.MinimizeWindowTest.MaximizeWindowTest.Restore
Source: mAGs0IsoB7.exe	String found in binary or memory: http://tg.taojike.com.cn/login/dispense?channel=wd_uninstall_OpenUninstallPage_OpenUninstallPage
Source: sdly.exe, 00000013.00000002.626948880.0000000003C60000.00000002.00000001.sdmp	String found in binary or memory: http://treyresearch.net
Source: mAGs0IsoB7.exe, 00000001.00000002.424885665.00000000038D4000.00000004.00000001.sdmp	String found in binary or memory: http://ts-aia.ws.symantec.com/sha256-tss-ca.cer0(
Source: mAGs0IsoB7.exe, 00000001.00000002.424885665.00000000038D4000.00000004.00000001.sdmp	String found in binary or memory: http://ts-crl.ws.symantec.com/sha256-tss-ca.crl0
Source: mAGs0IsoB7.exe, 00000001.00000002.424885665.00000000038D4000.00000004.00000001.sdmp	String found in binary or memory: http://ts-ocsp.ws.symantec.com0;
Source: sdly.exe, 00000013.00000002.627244852.0000000003D53000.00000002.00000001.sdmp	String found in binary or memory: http://tw.search.yahoo.com/
Source: sdly.exe, 00000013.00000002.627244852.0000000003D53000.00000002.00000001.sdmp	String found in binary or memory: http://udn.com/
Source: sdly.exe, 00000013.00000002.627244852.0000000003D53000.00000002.00000001.sdmp	String found in binary or memory: http://udn.com/favicon.ico
Source: sdly.exe, 00000013.00000002.627244852.0000000003D53000.00000002.00000001.sdmp	String found in binary or memory: http://uk.ask.com/
Source: sdly.exe, 00000013.00000002.627244852.0000000003D53000.00000002.00000001.sdmp	String found in binary or memory: http://uk.ask.com/favicon.ico
Source: sdly.exe, 00000013.00000002.627244852.0000000003D53000.00000002.00000001.sdmp	String found in binary or memory: http://uk.search.yahoo.com/
Source: sdly.exe, 00000013.00000002.627244852.0000000003D53000.00000002.00000001.sdmp	String found in binary or memory: http://vachercher.lycos.fr/
Source: sdly.exe, 00000013.00000002.627244852.0000000003D53000.00000002.00000001.sdmp	String found in binary or memory: http://video.globo.com/
Source: sdly.exe, 00000013.00000002.627244852.0000000003D53000.00000002.00000001.sdmp	String found in binary or memory: http://video.globo.com/favicon.ico
Source: sdly.exe, 00000013.00000002.627542984.00000000041F0000.00000004.00000001.sdmp	String found in binary or memory: http://wan.ludashi.com/
Source: mAGs0IsoB7.exe	String found in binary or memory: http://wan.ludashi.com/(?:(?:web/game)
Source: sdly.exe, 00000013.00000002.627542984.00000000041F0000.00000004.00000001.sdmp	String found in binary or memory: http://wan.ludashi.com/=.0
Source: sdly.exe, 00000013.00000002.627651205.0000000004256000.00000004.00000001.sdmp	String found in binary or memory: http://wan.ludashi.com/account/protocol?type=registerb
Source: sdly.exe, 00000013.00000002.631080140.0000000005624000.00000004.00000001.sdmp, sdly.exe, 00000013.00000002.627566811.0000000004209000.00000004.00000001.sdmp, sdly.exe, 00000013.00000002.627707442.0000000004282000.00000004.00000001.sdmp	String found in binary or memory: http://wan.ludashi.com/announce/list?callback=jQuery183022485800102059378_1623676997349&type=2&gid=s
Source: sdly.exe, 00000013.00000002.627601801.0000000004225000.00000004.00000001.sdmp	String found in binary or memory: http://wan.ludashi.com/api/CheckGameStatus?callback=jQuery183022485800102059378_1623676997348
Source: sdly.exe, 00000013.00000002.627601801.0000000004225000.00000004.00000001.sdmp	String found in binary or memory: http://wan.ludashi.com/api/CheckGameStatus?callback=jQuery183022485800102059378_16236769973484b
Source: sdly.exe, 00000013.00000002.627601801.0000000004225000.00000004.00000001.sdmp	String found in binary or memory: http://wan.ludashi.com/api/CheckGameStatus?callback=jQuery183022485800102059378_1623676997348Ddd
Source: sdly.exe, 00000013.00000002.627601801.0000000004225000.00000004.00000001.sdmp	String found in binary or memory: http://wan.ludashi.com/api/CheckGameStatus?callback=jQuery183022485800102059378_1623676997348Ze~
Source: sdly.exe, 00000013.00000002.627601801.0000000004225000.00000004.00000001.sdmp	String found in binary or memory: http://wan.ludashi.com/api/CheckGameStatus?callback=jQuery183022485800102059378_1623676997348ee
Source: sdly.exe, 00000013.00000002.627601801.0000000004225000.00000004.00000001.sdmp	String found in binary or memory: http://wan.ludashi.com/api/CheckGameStatus?callback=jQuery183022485800102059378_1623676997348vd
Source: sdly.exe, 00000013.00000002.631335343.00000000056F5000.00000004.00000001.sdmp	String found in binary or memory: http://wan.ludashi.com/client/play/
Source: mAGs0IsoB7.exe	String found in binary or memory: http://wan.ludashi.com/cms/newbuy/microend.php?game_id=%s&channel=%s&pid=%s&subpid=%s
Source: sdly.exe, 00000013.00000002.631335343.00000000056F5000.00000004.00000001.sdmp	String found in binary or memory: http://wan.ludashi.com/h5/game/
Source: sdly.exe, 00000013.00000002.630949222.00000000055A1000.00000004.00000001.sdmp	String found in binary or memory: http://wan.ludashi.com/micro/sdly/
Source: sdly.exe, 00000013.00000002.629546631.0000000004A74000.00000004.00000001.sdmp, sdly.exe, 00000013.00000002.639042379.000000000AD00000.00000004.00000001.sdmp	String found in binary or memory: http://wan.ludashi.com/micro/sdly/_use_0
Source: sdly.exe, 00000013.00000002.627707442.0000000004282000.00000004.00000001.sdmp, mAGs0IsoB7.exe	String found in binary or memory: http://wan.ludashi.com/micro/sdly/index_lds.html?channel=taskpop&from=taskpop_wd_sdly
Source: sdly.exe, 00000013.00000002.622907464.0000000000B34000.00000004.00000001.sdmp	String found in binary or memory: http://wan.ludashi.com/micro/sdly/index_lds.html?channel=taskpop&from=taskpop_wd_sdly$
Source: sdly.exe, 00000013.00000002.650620079.000000000CF1A000.00000004.00000001.sdmp	String found in binary or memory: http://wan.ludashi.com/micro/sdly/index_lds.html?channel=taskpop&from=taskpop_wd_sdly&
Source: sdly.exe, 00000013.00000003.465125377.000000000BA77000.00000004.00000001.sdmp	String found in binary or memory: http://wan.ludashi.com/micro/sdly/index_lds.html?channel=taskpop&from=taskpop_wd_sdly//wan.ludashi.c
Source: sdly.exe, 00000013.00000002.623474504.0000000000E25000.00000004.00000020.sdmp	String found in binary or memory: http://wan.ludashi.com/micro/sdly/index_lds.html?channel=taskpop&from=taskpop_wd_sdly0A
Source: sdly.exe, 00000013.00000002.623401836.0000000000E03000.00000004.00000020.sdmp	String found in binary or memory: http://wan.ludashi.com/micro/sdly/index_lds.html?channel=taskpop&from=taskpop_wd_sdly2&
Source: sdly.exe, 00000013.00000002.627707442.0000000004282000.00000004.00000001.sdmp	String found in binary or memory: http://wan.ludashi.com/micro/sdly/index_lds.html?channel=taskpop&from=taskpop_wd_sdly8_1623676997348
Source: sdly.exe, 00000013.00000002.627707442.0000000004282000.00000004.00000001.sdmp	String found in binary or memory: http://wan.ludashi.com/micro/sdly/index_lds.html?channel=taskpop&from=taskpop_wd_sdly=j
Source: sdly.exe, 00000013.00000003.429098466.000000000423C000.00000004.00000001.sdmp, sdly.exe, 00000013.00000002.623474504.0000000000E25000.00000004.00000020.sdmp	String found in binary or memory: http://wan.ludashi.com/micro/sdly/index_lds.html?channel=taskpop&from=taskpop_wd_sdlyJ
Source: sdly.exe, 00000013.00000002.623474504.0000000000E25000.00000004.00000020.sdmp	String found in binary or memory: http://wan.ludashi.com/micro/sdly/index_lds.html?channel=taskpop&from=taskpop_wd_sdlyL
Source: sdly.exe, 00000013.00000002.627707442.0000000004282000.00000004.00000001.sdmp	String found in binary or memory: http://wan.ludashi.com/micro/sdly/index_lds.html?channel=taskpop&from=taskpop_wd_sdlyLMEM
Source: sdly.exe, 00000013.00000002.623474504.0000000000E25000.00000004.00000020.sdmp	String found in binary or memory: http://wan.ludashi.com/micro/sdly/index_lds.html?channel=taskpop&from=taskpop_wd_sdlyM
Source: sdly.exe, 00000013.00000002.627707442.0000000004282000.00000004.00000001.sdmp	String found in binary or memory: http://wan.ludashi.com/micro/sdly/index_lds.html?channel=taskpop&from=taskpop_wd_sdlyMkX
Source: sdly.exe, 00000013.00000002.627707442.0000000004282000.00000004.00000001.sdmp	String found in binary or memory: http://wan.ludashi.com/micro/sdly/index_lds.html?channel=taskpop&from=taskpop_wd_sdlyNhW
Source: sdly.exe, 00000013.00000002.623474504.0000000000E25000.00000004.00000020.sdmp	String found in binary or memory: http://wan.ludashi.com/micro/sdly/index_lds.html?channel=taskpop&from=taskpop_wd_sdlyP4
Source: sdly.exe, 00000013.00000002.630949222.00000000055A1000.00000004.00000001.sdmp	String found in binary or memory: http://wan.ludashi.com/micro/sdly/index_lds.html?channel=taskpop&from=taskpop_wd_sdlyPgO
Source: sdly.exe, 00000013.00000002.627601801.0000000004225000.00000004.00000001.sdmp	String found in binary or memory: http://wan.ludashi.com/micro/sdly/index_lds.html?channel=taskpop&from=taskpop_wd_sdlySw
Source: sdly.exe, 00000013.00000002.623401836.0000000000E03000.00000004.00000020.sdmp	String found in binary or memory: http://wan.ludashi.com/micro/sdly/index_lds.html?channel=taskpop&from=taskpop_wd_sdlyT9
Source: sdly.exe, 00000013.00000002.627707442.0000000004282000.00000004.00000001.sdmp	String found in binary or memory: http://wan.ludashi.com/micro/sdly/index_lds.html?channel=taskpop&from=taskpop_wd_sdlyWh~
Source: sdly.exe, 00000013.00000002.623474504.0000000000E25000.00000004.00000020.sdmp	String found in binary or memory: http://wan.ludashi.com/micro/sdly/index_lds.html?channel=taskpop&from=taskpop_wd_sdlyca
Source: sdly.exe, 00000013.00000002.627707442.0000000004282000.00000004.00000001.sdmp	String found in binary or memory: http://wan.ludashi.com/micro/sdly/index_lds.html?channel=taskpop&from=taskpop_wd_sdlyfj
Source: sdly.exe, 00000013.00000002.627707442.0000000004282000.00000004.00000001.sdmp	String found in binary or memory: http://wan.ludashi.com/micro/sdly/index_lds.html?channel=taskpop&from=taskpop_wd_sdlyhi
Source: sdly.exe, 00000013.00000003.443444828.000000000BA72000.00000004.00000001.sdmp, sdly.exe, 00000013.00000002.629348555.00000000049C3000.00000004.00000001.sdmp, sdly.exe, 00000013.00000002.639042379.000000000AD00000.00000004.00000001.sdmp	String found in binary or memory: http://wan.ludashi.com/micro/sdly/index_lds.html?channel=taskpop&from=taskpop_wd_sdlyhttp://wan.luda
Source: sdly.exe, 00000013.00000002.627707442.0000000004282000.00000004.00000001.sdmp	String found in binary or memory: http://wan.ludashi.com/micro/sdly/index_lds.html?channel=taskpop&from=taskpop_wd_sdlyl
Source: sdly.exe, 00000013.00000002.627601801.0000000004225000.00000004.00000001.sdmp	String found in binary or memory: http://wan.ludashi.com/micro/sdly/index_lds.html?channel=taskpop&from=taskpop_wd_sdlyowLMEM
Source: sdly.exe, 00000013.00000002.627707442.0000000004282000.00000004.00000001.sdmp	String found in binary or memory: http://wan.ludashi.com/micro/sdly/index_lds.html?channel=taskpop&from=taskpop_wd_sdlyowser=0s/v1/cir
Source: sdly.exe, 00000013.00000002.623474504.0000000000E25000.00000004.00000020.sdmp	String found in binary or memory: http://wan.ludashi.com/micro/sdly/index_lds.html?channel=taskpop&from=taskpop_wd_sdlyx
Source: sdly.exe, 00000013.00000002.627601801.0000000004225000.00000004.00000001.sdmp	String found in binary or memory: http://wan.ludashi.com/micro/sdly/index_lds.html?channel=taskpop&from=taskpop_wd_sdlyy
Source: sdly.exe, 00000013.00000002.627707442.0000000004282000.00000004.00000001.sdmp	String found in binary or memory: http://wan.ludashi.com/micro/sdly/index_lds.html?channel=taskpop&from=taskpop_wd_sdlyy)k
Source: sdly.exe, 00000013.00000002.627601801.0000000004225000.00000004.00000001.sdmp	String found in binary or memory: http://wan.ludashi.com/micro/sdly/index_lds.html?channel=taskpop&from=taskpop_wd_sdlyyJw
Source: mAGs0IsoB7.exe, sdly.exe	String found in binary or memory: http://wan.ludashi.com/pageV2/alone
Source: mAGs0IsoB7.exe	String found in binary or memory: http://wan.ludashi.com/pageV2/aloneembedversion=embedversionembedinsttime=embedinsttimeembedchannel=
Source: mAGs0IsoB7.exe	String found in binary or memory: http://wan.ludashi.com/pageV2/protocol?type=register
Source: mAGs0IsoB7.exe	String found in binary or memory: http://wan.ludashi.com/pay/index?game=sdly
Source: mAGs0IsoB7.exe	String found in binary or memory: http://wan.ludashi.com/site/
Source: sdly.exe, 00000013.00000003.464843711.000000000BA34000.00000004.00000001.sdmp, sdly.exe, 00000013.00000002.641802551.000000000BA2E000.00000004.00000001.sdmp, sdly.exe, 00000013.00000003.465125377.000000000BA77000.00000004.00000001.sdmp, sdly.exe, 00000013.00000002.623369231.0000000000DE2000.00000004.00000020.sdmp, sdly.exe, 00000013.00000002.644087909.000000000C06A000.00000004.00000001.sdmp	String found in binary or memory: http://wan.ludashi.com/site/sdly?id=10599
Source: sdly.exe, 00000013.00000002.627601801.0000000004225000.00000004.00000001.sdmp	String found in binary or memory: http://wan.ludashi.com/site/sdly?id=105991%FR
Source: sdly.exe, 00000013.00000002.627601801.0000000004225000.00000004.00000001.sdmp, sdly.exe, 00000013.00000002.641802551.000000000BA2E000.00000004.00000001.sdmp, sdly.exe, 00000013.00000003.465125377.000000000BA77000.00000004.00000001.sdmp, sdly.exe, 00000013.00000002.644087909.000000000C06A000.00000004.00000001.sdmp	String found in binary or memory: http://wan.ludashi.com/site/sdly?id=10805
Source: sdly.exe, 00000013.00000002.623369231.0000000000DE2000.00000004.00000020.sdmp	String found in binary or memory: http://wan.ludashi.com/site/sdly?id=10805D
Source: sdly.exe, 00000013.00000002.627601801.0000000004225000.00000004.00000001.sdmp, sdly.exe, 00000013.00000002.641802551.000000000BA2E000.00000004.00000001.sdmp, sdly.exe, 00000013.00000003.465125377.000000000BA77000.00000004.00000001.sdmp, sdly.exe, 00000013.00000002.644087909.000000000C06A000.00000004.00000001.sdmp	String found in binary or memory: http://wan.ludashi.com/site/sdly?id=11058
Source: sdly.exe, 00000013.00000002.627601801.0000000004225000.00000004.00000001.sdmp	String found in binary or memory: http://wan.ludashi.com/site/sdly?id=1105821
Source: sdly.exe, 00000013.00000003.465125377.000000000BA77000.00000004.00000001.sdmp, sdly.exe, 00000013.00000002.644087909.000000000C06A000.00000004.00000001.sdmp	String found in binary or memory: http://wan.ludashi.com/site/sdly?id=9162
Source: sdly.exe, 00000013.00000002.627601801.0000000004225000.00000004.00000001.sdmp	String found in binary or memory: http://wan.ludashi.com/site/sdly?id=9162921
Source: sdly.exe, 00000013.00000002.627601801.0000000004225000.00000004.00000001.sdmp	String found in binary or memory: http://wan.ludashi.com/site/sdly?id=9162b
Source: sdly.exe, 00000013.00000002.627601801.0000000004225000.00000004.00000001.sdmp	String found in binary or memory: http://wan.ludashi.com/site/sdly?id=9162e
Source: sdly.exe, 00000013.00000002.644848502.000000000C5CA000.00000004.00000001.sdmp	String found in binary or memory: http://wan.ludashi.com/site/sdly?id=9162v
Source: sdly.exe, 00000013.00000003.465125377.000000000BA77000.00000004.00000001.sdmp, sdly.exe, 00000013.00000002.644087909.000000000C06A000.00000004.00000001.sdmp	String found in binary or memory: http://wan.ludashi.com/site/sdly?id=9384
Source: sdly.exe, 00000013.00000002.627601801.0000000004225000.00000004.00000001.sdmp	String found in binary or memory: http://wan.ludashi.com/site/sdly?id=93841021
Source: mAGs0IsoB7.exe, sdly.exe	String found in binary or memory: http://wan.ludashi.com/web
Source: mAGs0IsoB7.exe, sdly.exe	String found in binary or memory: http://wan.ludashi.com/web/service
Source: mAGs0IsoB7.exe	String found in binary or memory: http://wan.ludashi.com/web/servicekefu_page_urlhttp://wan.ludashi.com/webindex_page_urldeskicon_name
Source: mAGs0IsoB7.exe	String found in binary or memory: http://wan.ludashi.com/web/wpay?game=
Source: sdly.exe, 00000013.00000002.631335343.00000000056F5000.00000004.00000001.sdmp	String found in binary or memory: http://wan.ludashi.com/yeyou/
Source: sdly.exe, 00000013.00000002.627244852.0000000003D53000.00000002.00000001.sdmp	String found in binary or memory: http://web.ask.com/
Source: sdly.exe, 00000013.00000002.626948880.0000000003C60000.00000002.00000001.sdmp	String found in binary or memory: http://www.%s.com
Source: mAGs0IsoB7.exe, 00000001.00000003.356429891.00000000037DB000.00000004.00000001.sdmp, wow_helper.exe.1.dr	String found in binary or memory: http://www.360.cn
Source: sdly.exe, 00000013.00000002.627244852.0000000003D53000.00000002.00000001.sdmp	String found in binary or memory: http://www.abril.com.br/
Source: sdly.exe, 00000013.00000002.627244852.0000000003D53000.00000002.00000001.sdmp	String found in binary or memory: http://www.abril.com.br/favicon.ico
Source: sdly.exe, 00000013.00000002.627244852.0000000003D53000.00000002.00000001.sdmp	String found in binary or memory: http://www.afisha.ru/App_Themes/Default/images/favicon.ico
Source: sdly.exe, 00000013.00000002.627244852.0000000003D53000.00000002.00000001.sdmp	String found in binary or memory: http://www.alarabiya.net/
Source: sdly.exe, 00000013.00000002.627244852.0000000003D53000.00000002.00000001.sdmp	String found in binary or memory: http://www.alarabiya.net/favicon.ico
Source: sdly.exe, 00000013.00000002.627244852.0000000003D53000.00000002.00000001.sdmp	String found in binary or memory: http://www.amazon.co.jp/
Source: sdly.exe, 00000013.00000002.627244852.0000000003D53000.00000002.00000001.sdmp	String found in binary or memory: http://www.amazon.co.uk/
Source: sdly.exe, 00000013.00000002.627244852.0000000003D53000.00000002.00000001.sdmp	String found in binary or memory: http://www.amazon.com/exec/obidos/external-search/104-2981279-3455918?index=blended&keyword=
Source: sdly.exe, 00000013.00000002.627244852.0000000003D53000.00000002.00000001.sdmp	String found in binary or memory: http://www.amazon.com/favicon.ico
Source: sdly.exe, 00000013.00000002.627244852.0000000003D53000.00000002.00000001.sdmp	String found in binary or memory: http://www.amazon.com/gp/search?ie=UTF8&tag=ie8search-20&index=blended&linkCode=qs&c
Source: sdly.exe, 00000013.00000002.627244852.0000000003D53000.00000002.00000001.sdmp	String found in binary or memory: http://www.amazon.de/
Source: sdly.exe, 00000013.00000002.627244852.0000000003D53000.00000002.00000001.sdmp	String found in binary or memory: http://www.aol.com/favicon.ico
Source: sdly.exe, 00000013.00000002.631954364.00000000079A6000.00000002.00000001.sdmp	String found in binary or memory: http://www.apache.org/licenses/LICENSE-2.0
Source: sdly.exe, 00000013.00000002.627244852.0000000003D53000.00000002.00000001.sdmp	String found in binary or memory: http://www.arrakis.com/
Source: sdly.exe, 00000013.00000002.627244852.0000000003D53000.00000002.00000001.sdmp	String found in binary or memory: http://www.arrakis.com/favicon.ico
Source: sdly.exe, 00000013.00000002.627244852.0000000003D53000.00000002.00000001.sdmp	String found in binary or memory: http://www.asharqalawsat.com/
Source: sdly.exe, 00000013.00000002.627244852.0000000003D53000.00000002.00000001.sdmp	String found in binary or memory: http://www.asharqalawsat.com/favicon.ico
Source: sdly.exe, 00000013.00000002.627244852.0000000003D53000.00000002.00000001.sdmp	String found in binary or memory: http://www.ask.com/
Source: sdly.exe, 00000013.00000002.627244852.0000000003D53000.00000002.00000001.sdmp	String found in binary or memory: http://www.auction.co.kr/auction.ico
Source: sdly.exe, 00000013.00000002.627244852.0000000003D53000.00000002.00000001.sdmp	String found in binary or memory: http://www.baidu.com/
Source: sdly.exe, 00000013.00000002.627244852.0000000003D53000.00000002.00000001.sdmp	String found in binary or memory: http://www.baidu.com/favicon.ico
Source: sdly.exe, 00000013.00000002.631954364.00000000079A6000.00000002.00000001.sdmp	String found in binary or memory: http://www.carterandcone.coml
Source: sdly.exe, 00000013.00000002.627244852.0000000003D53000.00000002.00000001.sdmp	String found in binary or memory: http://www.cdiscount.com/
Source: sdly.exe, 00000013.00000002.627244852.0000000003D53000.00000002.00000001.sdmp	String found in binary or memory: http://www.cdiscount.com/favicon.ico
Source: sdly.exe, 00000013.00000002.627244852.0000000003D53000.00000002.00000001.sdmp	String found in binary or memory: http://www.ceneo.pl/
Source: sdly.exe, 00000013.00000002.627244852.0000000003D53000.00000002.00000001.sdmp	String found in binary or memory: http://www.ceneo.pl/favicon.ico
Source: sdly.exe, 00000013.00000002.627244852.0000000003D53000.00000002.00000001.sdmp	String found in binary or memory: http://www.chennaionline.com/ncommon/images/collogo.ico
Source: sdly.exe, 00000013.00000002.627244852.0000000003D53000.00000002.00000001.sdmp	String found in binary or memory: http://www.cjmall.com/
Source: sdly.exe, 00000013.00000002.627244852.0000000003D53000.00000002.00000001.sdmp	String found in binary or memory: http://www.cjmall.com/favicon.ico
Source: sdly.exe, 00000013.00000002.627244852.0000000003D53000.00000002.00000001.sdmp	String found in binary or memory: http://www.clarin.com/favicon.ico
Source: sdly.exe, 00000013.00000002.627244852.0000000003D53000.00000002.00000001.sdmp	String found in binary or memory: http://www.cnet.co.uk/
Source: sdly.exe, 00000013.00000002.627244852.0000000003D53000.00000002.00000001.sdmp	String found in binary or memory: http://www.cnet.com/favicon.ico
Source: sdly.exe, 00000013.00000002.627244852.0000000003D53000.00000002.00000001.sdmp	String found in binary or memory: http://www.dailymail.co.uk/
Source: sdly.exe, 00000013.00000002.627244852.0000000003D53000.00000002.00000001.sdmp	String found in binary or memory: http://www.dailymail.co.uk/favicon.ico
Source: mAGs0IsoB7.exe	String found in binary or memory: http://www.digicert.com/CPS0
Source: mAGs0IsoB7.exe	String found in binary or memory: http://www.digicert.com/ssl-cps-repository.htm0
Source: sdly.exe, 00000013.00000002.627244852.0000000003D53000.00000002.00000001.sdmp	String found in binary or memory: http://www.docUrl.com/bar.htm
Source: sdly.exe, 00000013.00000002.627244852.0000000003D53000.00000002.00000001.sdmp	String found in binary or memory: http://www.etmall.com.tw/
Source: sdly.exe, 00000013.00000002.627244852.0000000003D53000.00000002.00000001.sdmp	String found in binary or memory: http://www.etmall.com.tw/favicon.ico
Source: sdly.exe, 00000013.00000002.627244852.0000000003D53000.00000002.00000001.sdmp	String found in binary or memory: http://www.excite.co.jp/
Source: sdly.exe, 00000013.00000002.627244852.0000000003D53000.00000002.00000001.sdmp	String found in binary or memory: http://www.expedia.com/
Source: sdly.exe, 00000013.00000002.627244852.0000000003D53000.00000002.00000001.sdmp	String found in binary or memory: http://www.expedia.com/favicon.ico
Source: sdly.exe, 00000013.00000002.631954364.00000000079A6000.00000002.00000001.sdmp	String found in binary or memory: http://www.fontbureau.com
Source: sdly.exe, 00000013.00000002.631954364.00000000079A6000.00000002.00000001.sdmp	String found in binary or memory: http://www.fontbureau.com/designers
Source: sdly.exe, 00000013.00000002.631954364.00000000079A6000.00000002.00000001.sdmp	String found in binary or memory: http://www.fontbureau.com/designers/?
Source: sdly.exe, 00000013.00000002.631954364.00000000079A6000.00000002.00000001.sdmp	String found in binary or memory: http://www.fontbureau.com/designers/cabarga.htmlN
Source: sdly.exe, 00000013.00000002.631954364.00000000079A6000.00000002.00000001.sdmp	String found in binary or memory: http://www.fontbureau.com/designers/frere-jones.html
Source: sdly.exe, 00000013.00000002.631954364.00000000079A6000.00000002.00000001.sdmp	String found in binary or memory: http://www.fontbureau.com/designers8
Source: sdly.exe, 00000013.00000002.631954364.00000000079A6000.00000002.00000001.sdmp	String found in binary or memory: http://www.fontbureau.com/designers?
Source: sdly.exe, 00000013.00000002.631954364.00000000079A6000.00000002.00000001.sdmp	String found in binary or memory: http://www.fontbureau.com/designersG
Source: sdly.exe, 00000013.00000002.631954364.00000000079A6000.00000002.00000001.sdmp	String found in binary or memory: http://www.fonts.com
Source: sdly.exe, 00000013.00000002.631954364.00000000079A6000.00000002.00000001.sdmp	String found in binary or memory: http://www.founder.com.cn/cn
Source: sdly.exe, 00000013.00000002.631954364.00000000079A6000.00000002.00000001.sdmp	String found in binary or memory: http://www.founder.com.cn/cn/bThe
Source: sdly.exe, 00000013.00000002.631954364.00000000079A6000.00000002.00000001.sdmp	String found in binary or memory: http://www.founder.com.cn/cn/cThe
Source: sdly.exe, 00000013.00000002.631954364.00000000079A6000.00000002.00000001.sdmp	String found in binary or memory: http://www.galapagosdesign.com/DPlease
Source: sdly.exe, 00000013.00000002.631954364.00000000079A6000.00000002.00000001.sdmp	String found in binary or memory: http://www.galapagosdesign.com/staff/dennis.htm
Source: sdly.exe, 00000013.00000002.627244852.0000000003D53000.00000002.00000001.sdmp	String found in binary or memory: http://www.gismeteo.ru/favicon.ico
Source: sdly.exe, 00000013.00000002.627244852.0000000003D53000.00000002.00000001.sdmp	String found in binary or memory: http://www.gmarket.co.kr/
Source: sdly.exe, 00000013.00000002.627244852.0000000003D53000.00000002.00000001.sdmp	String found in binary or memory: http://www.gmarket.co.kr/favicon.ico
Source: sdly.exe, 00000013.00000002.631954364.00000000079A6000.00000002.00000001.sdmp	String found in binary or memory: http://www.goodfont.co.kr
Source: sdly.exe, 00000013.00000002.627244852.0000000003D53000.00000002.00000001.sdmp	String found in binary or memory: http://www.google.co.in/
Source: sdly.exe, 00000013.00000002.627244852.0000000003D53000.00000002.00000001.sdmp	String found in binary or memory: http://www.google.co.jp/
Source: sdly.exe, 00000013.00000002.627244852.0000000003D53000.00000002.00000001.sdmp	String found in binary or memory: http://www.google.co.uk/
Source: sdly.exe, 00000013.00000002.627244852.0000000003D53000.00000002.00000001.sdmp	String found in binary or memory: http://www.google.com.br/
Source: sdly.exe, 00000013.00000002.627244852.0000000003D53000.00000002.00000001.sdmp	String found in binary or memory: http://www.google.com.sa/
Source: sdly.exe, 00000013.00000002.627244852.0000000003D53000.00000002.00000001.sdmp	String found in binary or memory: http://www.google.com.tw/
Source: sdly.exe, 00000013.00000002.627244852.0000000003D53000.00000002.00000001.sdmp	String found in binary or memory: http://www.google.com/
Source: sdly.exe, 00000013.00000002.627244852.0000000003D53000.00000002.00000001.sdmp	String found in binary or memory: http://www.google.com/favicon.ico
Source: sdly.exe, 00000013.00000002.627244852.0000000003D53000.00000002.00000001.sdmp	String found in binary or memory: http://www.google.cz/
Source: sdly.exe, 00000013.00000002.627244852.0000000003D53000.00000002.00000001.sdmp	String found in binary or memory: http://www.google.de/
Source: sdly.exe, 00000013.00000002.627244852.0000000003D53000.00000002.00000001.sdmp	String found in binary or memory: http://www.google.es/
Source: sdly.exe, 00000013.00000002.627244852.0000000003D53000.00000002.00000001.sdmp	String found in binary or memory: http://www.google.fr/
Source: sdly.exe, 00000013.00000002.627244852.0000000003D53000.00000002.00000001.sdmp	String found in binary or memory: http://www.google.it/
Source: sdly.exe, 00000013.00000002.627244852.0000000003D53000.00000002.00000001.sdmp	String found in binary or memory: http://www.google.pl/
Source: sdly.exe, 00000013.00000002.627244852.0000000003D53000.00000002.00000001.sdmp	String found in binary or memory: http://www.google.ru/
Source: sdly.exe, 00000013.00000002.627244852.0000000003D53000.00000002.00000001.sdmp	String found in binary or memory: http://www.google.si/
Source: sdly.exe, 00000013.00000002.627244852.0000000003D53000.00000002.00000001.sdmp	String found in binary or memory: http://www.iask.com/
Source: sdly.exe, 00000013.00000002.627244852.0000000003D53000.00000002.00000001.sdmp	String found in binary or memory: http://www.iask.com/favicon.ico
Source: sdly.exe, 00000013.00000002.631954364.00000000079A6000.00000002.00000001.sdmp	String found in binary or memory: http://www.jiyu-kobo.co.jp/
Source: sdly.exe, 00000013.00000002.627244852.0000000003D53000.00000002.00000001.sdmp	String found in binary or memory: http://www.kkbox.com.tw/
Source: sdly.exe, 00000013.00000002.627244852.0000000003D53000.00000002.00000001.sdmp	String found in binary or memory: http://www.kkbox.com.tw/favicon.ico
Source: sdly.exe, 00000013.00000002.627244852.0000000003D53000.00000002.00000001.sdmp	String found in binary or memory: http://www.linternaute.com/favicon.ico
Source: CefView.exe	String found in binary or memory: http://www.ludashi.com/api/service/cfg.php?from=%s&appver=%s&pid=%s&modver=%s&mid=%s&mid2=%s&hash=%s
Source: sdly.exe, 00000013.00000002.627244852.0000000003D53000.00000002.00000001.sdmp	String found in binary or memory: http://www.maktoob.com/favicon.ico
Source: sdly.exe, 00000013.00000002.627244852.0000000003D53000.00000002.00000001.sdmp	String found in binary or memory: http://www.mercadolibre.com.mx/
Source: sdly.exe, 00000013.00000002.627244852.0000000003D53000.00000002.00000001.sdmp	String found in binary or memory: http://www.mercadolibre.com.mx/favicon.ico
Source: sdly.exe, 00000013.00000002.627244852.0000000003D53000.00000002.00000001.sdmp	String found in binary or memory: http://www.mercadolivre.com.br/
Source: sdly.exe, 00000013.00000002.627244852.0000000003D53000.00000002.00000001.sdmp	String found in binary or memory: http://www.mercadolivre.com.br/favicon.ico
Source: sdly.exe, 00000013.00000002.627244852.0000000003D53000.00000002.00000001.sdmp	String found in binary or memory: http://www.merlin.com.pl/
Source: sdly.exe, 00000013.00000002.627244852.0000000003D53000.00000002.00000001.sdmp	String found in binary or memory: http://www.merlin.com.pl/favicon.ico
Source: sdly.exe, 00000013.00000002.627244852.0000000003D53000.00000002.00000001.sdmp	String found in binary or memory: http://www.microsofttranslator.com/?ref=IE8Activity
Source: sdly.exe, 00000013.00000002.627244852.0000000003D53000.00000002.00000001.sdmp	String found in binary or memory: http://www.microsofttranslator.com/BV.aspx?ref=IE8Activity&a=
Source: sdly.exe, 00000013.00000002.627244852.0000000003D53000.00000002.00000001.sdmp	String found in binary or memory: http://www.microsofttranslator.com/BVPrev.aspx?ref=IE8Activity
Source: sdly.exe, 00000013.00000002.627244852.0000000003D53000.00000002.00000001.sdmp	String found in binary or memory: http://www.microsofttranslator.com/Default.aspx?ref=IE8Activity
Source: sdly.exe, 00000013.00000002.627244852.0000000003D53000.00000002.00000001.sdmp	String found in binary or memory: http://www.microsofttranslator.com/DefaultPrev.aspx?ref=IE8Activity
Source: sdly.exe, 00000013.00000002.627707442.0000000004282000.00000004.00000001.sdmp	String found in binary or memory: http://www.msn.com/?ocid=iehp
Source: sdly.exe, 00000013.00000002.627651205.0000000004256000.00000004.00000001.sdmp	String found in binary or memory: http://www.msn.com/?ocid=iehps
Source: sdly.exe, 00000013.00000002.648931007.000000000CCD7000.00000004.00000001.sdmp, sdly.exe, 00000013.00000002.631203443.000000000568F000.00000004.00000001.sdmp	String found in binary or memory: http://www.msn.com/de-ch/?ocid=iehp
Source: sdly.exe, 00000013.00000002.627244852.0000000003D53000.00000002.00000001.sdmp	String found in binary or memory: http://www.mtv.com/
Source: sdly.exe, 00000013.00000002.627244852.0000000003D53000.00000002.00000001.sdmp	String found in binary or memory: http://www.mtv.com/favicon.ico
Source: sdly.exe, 00000013.00000002.627244852.0000000003D53000.00000002.00000001.sdmp	String found in binary or memory: http://www.myspace.com/favicon.ico
Source: sdly.exe, 00000013.00000002.627244852.0000000003D53000.00000002.00000001.sdmp	String found in binary or memory: http://www.najdi.si/
Source: sdly.exe, 00000013.00000002.627244852.0000000003D53000.00000002.00000001.sdmp	String found in binary or memory: http://www.najdi.si/favicon.ico
Source: sdly.exe, 00000013.00000002.627244852.0000000003D53000.00000002.00000001.sdmp	String found in binary or memory: http://www.nate.com/favicon.ico
Source: sdly.exe, 00000013.00000002.627244852.0000000003D53000.00000002.00000001.sdmp	String found in binary or memory: http://www.neckermann.de/
Source: sdly.exe, 00000013.00000002.627244852.0000000003D53000.00000002.00000001.sdmp	String found in binary or memory: http://www.neckermann.de/favicon.ico
Source: sdly.exe, 00000013.00000002.627244852.0000000003D53000.00000002.00000001.sdmp	String found in binary or memory: http://www.news.com.au/favicon.ico
Source: sdly.exe, 00000013.00000002.627244852.0000000003D53000.00000002.00000001.sdmp	String found in binary or memory: http://www.nifty.com/favicon.ico
Source: sdly.exe, 00000013.00000002.627244852.0000000003D53000.00000002.00000001.sdmp	String found in binary or memory: http://www.ocn.ne.jp/favicon.ico
Source: sdly.exe, 00000013.00000002.627244852.0000000003D53000.00000002.00000001.sdmp	String found in binary or memory: http://www.orange.fr/
Source: sdly.exe, 00000013.00000002.627244852.0000000003D53000.00000002.00000001.sdmp	String found in binary or memory: http://www.otto.de/favicon.ico
Source: sdly.exe, 00000013.00000002.627244852.0000000003D53000.00000002.00000001.sdmp	String found in binary or memory: http://www.ozon.ru/
Source: sdly.exe, 00000013.00000002.627244852.0000000003D53000.00000002.00000001.sdmp	String found in binary or memory: http://www.ozon.ru/favicon.ico
Source: sdly.exe, 00000013.00000002.627244852.0000000003D53000.00000002.00000001.sdmp	String found in binary or memory: http://www.ozu.es/favicon.ico
Source: sdly.exe, 00000013.00000002.627244852.0000000003D53000.00000002.00000001.sdmp	String found in binary or memory: http://www.paginasamarillas.es/
Source: sdly.exe, 00000013.00000002.627244852.0000000003D53000.00000002.00000001.sdmp	String found in binary or memory: http://www.paginasamarillas.es/favicon.ico
Source: sdly.exe, 00000013.00000002.627244852.0000000003D53000.00000002.00000001.sdmp	String found in binary or memory: http://www.pchome.com.tw/favicon.ico
Source: sdly.exe, 00000013.00000002.627244852.0000000003D53000.00000002.00000001.sdmp	String found in binary or memory: http://www.priceminister.com/
Source: sdly.exe, 00000013.00000002.627244852.0000000003D53000.00000002.00000001.sdmp	String found in binary or memory: http://www.priceminister.com/favicon.ico
Source: sdly.exe, 00000013.00000002.627244852.0000000003D53000.00000002.00000001.sdmp	String found in binary or memory: http://www.rakuten.co.jp/favicon.ico
Source: sdly.exe, 00000013.00000002.627244852.0000000003D53000.00000002.00000001.sdmp	String found in binary or memory: http://www.rambler.ru/
Source: sdly.exe, 00000013.00000002.627244852.0000000003D53000.00000002.00000001.sdmp	String found in binary or memory: http://www.rambler.ru/favicon.ico
Source: sdly.exe, 00000013.00000002.627244852.0000000003D53000.00000002.00000001.sdmp	String found in binary or memory: http://www.recherche.aol.fr/
Source: sdly.exe, 00000013.00000002.627244852.0000000003D53000.00000002.00000001.sdmp	String found in binary or memory: http://www.rtl.de/
Source: sdly.exe, 00000013.00000002.627244852.0000000003D53000.00000002.00000001.sdmp	String found in binary or memory: http://www.rtl.de/favicon.ico
Source: sdly.exe, 00000013.00000002.631954364.00000000079A6000.00000002.00000001.sdmp	String found in binary or memory: http://www.sajatypeworks.com
Source: sdly.exe, 00000013.00000002.631954364.00000000079A6000.00000002.00000001.sdmp	String found in binary or memory: http://www.sakkal.com
Source: sdly.exe, 00000013.00000002.631954364.00000000079A6000.00000002.00000001.sdmp	String found in binary or memory: http://www.sandoll.co.kr
Source: sdly.exe, 00000013.00000002.627244852.0000000003D53000.00000002.00000001.sdmp	String found in binary or memory: http://www.servicios.clarin.com/
Source: sdly.exe, 00000013.00000002.627244852.0000000003D53000.00000002.00000001.sdmp	String found in binary or memory: http://www.shopzilla.com/
Source: sdly.exe, 00000013.00000002.627244852.0000000003D53000.00000002.00000001.sdmp	String found in binary or memory: http://www.sify.com/favicon.ico
Source: sdly.exe, 00000013.00000002.627244852.0000000003D53000.00000002.00000001.sdmp	String found in binary or memory: http://www.so-net.ne.jp/share/favicon.ico
Source: sdly.exe, 00000013.00000002.627244852.0000000003D53000.00000002.00000001.sdmp	String found in binary or memory: http://www.sogou.com/
Source: sdly.exe, 00000013.00000002.627244852.0000000003D53000.00000002.00000001.sdmp	String found in binary or memory: http://www.sogou.com/favicon.ico
Source: sdly.exe, 00000013.00000002.627244852.0000000003D53000.00000002.00000001.sdmp	String found in binary or memory: http://www.soso.com/
Source: sdly.exe, 00000013.00000002.627244852.0000000003D53000.00000002.00000001.sdmp	String found in binary or memory: http://www.soso.com/favicon.ico
Source: mAGs0IsoB7.exe, 00000001.00000003.356429891.00000000037DB000.00000004.00000001.sdmp, wow_helper.exe.1.dr	String found in binary or memory: http://www.symauth.com/cps0(
Source: mAGs0IsoB7.exe, 00000001.00000003.356429891.00000000037DB000.00000004.00000001.sdmp, wow_helper.exe.1.dr	String found in binary or memory: http://www.symauth.com/rpa00
Source: sdly.exe, 00000013.00000002.627244852.0000000003D53000.00000002.00000001.sdmp	String found in binary or memory: http://www.t-online.de/favicon.ico
Source: sdly.exe, 00000013.00000002.627244852.0000000003D53000.00000002.00000001.sdmp	String found in binary or memory: http://www.taobao.com/
Source: sdly.exe, 00000013.00000002.627244852.0000000003D53000.00000002.00000001.sdmp	String found in binary or memory: http://www.taobao.com/favicon.ico
Source: mAGs0IsoB7.exe, sdly.exe	String found in binary or memory: http://www.taojike.com.cn
Source: mAGs0IsoB7.exe	String found in binary or memory: http://www.taojike.com.cnURLInfoAboutInstallLocation_AddUninstallItem
Source: sdly.exe, 00000013.00000002.627244852.0000000003D53000.00000002.00000001.sdmp	String found in binary or memory: http://www.target.com/
Source: sdly.exe, 00000013.00000002.627244852.0000000003D53000.00000002.00000001.sdmp	String found in binary or memory: http://www.target.com/favicon.ico
Source: sdly.exe, 00000013.00000002.627244852.0000000003D53000.00000002.00000001.sdmp	String found in binary or memory: http://www.tchibo.de/
Source: sdly.exe, 00000013.00000002.627244852.0000000003D53000.00000002.00000001.sdmp	String found in binary or memory: http://www.tchibo.de/favicon.ico
Source: sdly.exe, 00000013.00000002.627244852.0000000003D53000.00000002.00000001.sdmp	String found in binary or memory: http://www.tesco.com/
Source: sdly.exe, 00000013.00000002.627244852.0000000003D53000.00000002.00000001.sdmp	String found in binary or memory: http://www.tesco.com/favicon.ico
Source: sdly.exe, 00000013.00000002.627244852.0000000003D53000.00000002.00000001.sdmp	String found in binary or memory: http://www.timesonline.co.uk/img/favicon.ico
Source: sdly.exe, 00000013.00000002.631954364.00000000079A6000.00000002.00000001.sdmp	String found in binary or memory: http://www.tiro.com
Source: sdly.exe, 00000013.00000002.627244852.0000000003D53000.00000002.00000001.sdmp	String found in binary or memory: http://www.tiscali.it/favicon.ico
Source: sdly.exe, 00000013.00000002.631954364.00000000079A6000.00000002.00000001.sdmp	String found in binary or memory: http://www.typography.netD
Source: sdly.exe, 00000013.00000002.627244852.0000000003D53000.00000002.00000001.sdmp	String found in binary or memory: http://www.univision.com/
Source: sdly.exe, 00000013.00000002.627244852.0000000003D53000.00000002.00000001.sdmp	String found in binary or memory: http://www.univision.com/favicon.ico
Source: sdly.exe, 00000013.00000002.631954364.00000000079A6000.00000002.00000001.sdmp	String found in binary or memory: http://www.urwpp.deDPlease
Source: sdly.exe, 00000013.00000002.627244852.0000000003D53000.00000002.00000001.sdmp	String found in binary or memory: http://www.walmart.com/
Source: sdly.exe, 00000013.00000002.627244852.0000000003D53000.00000002.00000001.sdmp	String found in binary or memory: http://www.walmart.com/favicon.ico
Source: sdly.exe, 00000013.00000002.627244852.0000000003D53000.00000002.00000001.sdmp	String found in binary or memory: http://www.ya.com/favicon.ico
Source: sdly.exe, 00000013.00000002.627244852.0000000003D53000.00000002.00000001.sdmp	String found in binary or memory: http://www.yam.com/favicon.ico
Source: sdly.exe, 00000013.00000003.436075199.00000000046B9000.00000004.00000001.sdmp, sdly.exe, 00000013.00000002.636472180.000000000A560000.00000002.00000001.sdmp	String found in binary or memory: http://www.zhongyicts.com.cn
Source: sdly.exe, 00000013.00000003.436075199.00000000046B9000.00000004.00000001.sdmp	String found in binary or memory: http://www.zhongyicts.com.cnC
Source: sdly.exe, 00000013.00000002.627244852.0000000003D53000.00000002.00000001.sdmp	String found in binary or memory: http://www3.fnac.com/
Source: sdly.exe, 00000013.00000002.627244852.0000000003D53000.00000002.00000001.sdmp	String found in binary or memory: http://www3.fnac.com/favicon.ico
Source: sdly.exe, 00000013.00000002.627244852.0000000003D53000.00000002.00000001.sdmp	String found in binary or memory: http://xml-us.amznxslt.com/onca/xml?Service=AWSECommerceService&Version=2008-06-26&Operation
Source: mAGs0IsoB7.exe	String found in binary or memory: http://yxtg.taojike.com.cn/login/uninst?channel=wd_uninstall
Source: sdly.exe, 00000013.00000002.627244852.0000000003D53000.00000002.00000001.sdmp	String found in binary or memory: http://z.about.com/m/a08.ico
Source: sdly.exe, 00000013.00000002.627601801.0000000004225000.00000004.00000001.sdmp, sdly.exe, 00000013.00000002.639042379.000000000AD00000.00000004.00000001.sdmp, sdly.exe, 00000013.00000002.629382480.00000000049CF000.00000004.00000001.sdmp, index_lds[1].htm.19.dr	String found in binary or memory: https://cdn-file-ssl.ludashi.com
Source: sdly.exe, 00000013.00000002.627542984.00000000041F0000.00000004.00000001.sdmp	String found in binary or memory: https://cdn-ssl-wan.lu
Source: sdly.exe, 00000013.00000002.627601801.0000000004225000.00000004.00000001.sdmp, sdly.exe, 00000013.00000002.629348555.00000000049C3000.00000004.00000001.sdmp, index_lds[1].htm.19.dr	String found in binary or memory: https://cdn-ssl-wan.ludashi.com
Source: sdly.exe, 00000013.00000002.630949222.00000000055A1000.00000004.00000001.sdmp	String found in binary or memory: https://cdn-ssl-wan.ludashi.com/
Source: sdly.exe, 00000013.00000002.630949222.00000000055A1000.00000004.00000001.sdmp	String found in binary or memory: https://cdn-ssl-wan.ludashi.com/Hny
Source: sdly.exe, 00000013.00000002.639042379.000000000AD00000.00000004.00000001.sdmp	String found in binary or memory: https://cdn-ssl-wan.ludashi.com/assets/superjs/
Source: sdly.exe, 00000013.00000002.627707442.0000000004282000.00000004.00000001.sdmp	String found in binary or memory: https://cdn-ssl-wan.ludashi.com/assets/superjs/modules/commonLoginA
Source: sdly.exe, 00000013.00000003.465076337.000000000BB08000.00000004.00000001.sdmp, sdly.exe, 00000013.00000003.460013558.000000000BEF1000.00000004.00000001.sdmp, sdly.exe, 00000013.00000002.627542984.00000000041F0000.00000004.00000001.sdmp	String found in binary or memory: https://cdn-ssl-wan.ludashi.com/assets/superjs/modules/commonLoginApi.js?v=20200810
Source: sdly.exe, 00000013.00000002.631203443.000000000568F000.00000004.00000001.sdmp	String found in binary or memory: https://cdn-ssl-wan.ludashi.com/assets/superjs/modules/commonLoginApi.js?v=20200810LMEM
Source: sdly.exe, 00000013.00000002.627707442.0000000004282000.00000004.00000001.sdmp	String found in binary or memory: https://cdn-ssl-wan.ludashi.com/assets/superjs/modules/commonLoginApi.js?v=20200810cript
Source: sdly.exe, 00000013.00000003.465125377.000000000BA77000.00000004.00000001.sdmp	String found in binary or memory: https://cdn-ssl-wan.ludashi.com/assets/superjs/modules/commonLoginApi.js?v=20200810y
Source: sdly.exe, 00000013.00000002.627707442.0000000004282000.00000004.00000001.sdmp	String found in binary or memory: https://cdn-ssl-wan.ludashi.com/assets/superjs/modules/commonLoginApi.js?v=20200810y/i6
Source: sdly.exe, 00000013.00000002.627707442.0000000004282000.00000004.00000001.sdmp	String found in binary or memory: https://cdn-ssl-wan.ludashi.com/assets/superjs/modules/commonTool.js?v=20210527
Source: sdly.exe, 00000013.00000002.630949222.00000000055A1000.00000004.00000001.sdmp	String found in binary or memory: https://cdn-ssl-wan.ludashi.com/assets/superjs/modules/commonTool.js?v=20210527...Z
Source: sdly.exe, 00000013.00000002.642592365.000000000BAF0000.00000004.00000001.sdmp	String found in binary or memory: https://cdn-ssl-wan.ludashi.com/assets/superjs/modules/commonTool.js?v=20210527D
Source: sdly.exe, 00000013.00000002.627707442.0000000004282000.00000004.00000001.sdmp	String found in binary or memory: https://cdn-ssl-wan.ludashi.com/assets/superjs/modules/commonTool.js?v=20210527dlyy
Source: sdly.exe, 00000013.00000003.460013558.000000000BEF1000.00000004.00000001.sdmp	String found in binary or memory: https://cdn-ssl-wan.ludashi.com/assets/superjs/modules/commonTool.js?v=20210527p
Source: sdly.exe, 00000013.00000002.627566811.0000000004209000.00000004.00000001.sdmp	String found in binary or memory: https://cdn-ssl-wan.ludashi.com/assets/superjs/modules/commonTool.js?v=20210527t=
Source: sdly.exe, 00000013.00000002.642640489.000000000BAF6000.00000004.00000001.sdmp	String found in binary or memory: https://cdn-ssl-wan.ludashi.com/assets/superjs/modules/commonTool.js?v=20210527w
Source: sdly.exe, 00000013.00000002.642035458.000000000BA58000.00000004.00000001.sdmp	String found in binary or memory: https://cdn-ssl-wan.ludashi.com/assets/superjs/pageMicro.js?v=20210527
Source: sdly.exe, 00000013.00000002.631203443.000000000568F000.00000004.00000001.sdmp	String found in binary or memory: https://cdn-ssl-wan.ludashi.com/assets/superjs/pageMicro.js?v=20210527...
Source: sdly.exe, 00000013.00000002.642592365.000000000BAF0000.00000004.00000001.sdmp	String found in binary or memory: https://cdn-ssl-wan.ludashi.com/assets/superjs/pageMicro.js?v=20210527_async_1
Source: sdly.exe, 00000013.00000003.460013558.000000000BEF1000.00000004.00000001.sdmp	String found in binary or memory: https://cdn-ssl-wan.ludashi.com/assets/superjs/pageMicro.js?v=20210527_async_1p
Source: sdly.exe, 00000013.00000002.627566811.0000000004209000.00000004.00000001.sdmp	String found in binary or memory: https://cdn-ssl-wan.ludashi.com/assets/superjs/pageMicro.js?v=20210527t
Source: sdly.exe, 00000013.00000002.627566811.0000000004209000.00000004.00000001.sdmp	String found in binary or memory: https://cdn-ssl-wan.ludashi.com/assets/superjs/pageMicro.js?v=20210527ta=p
Source: sdly.exe, 00000013.00000002.631203443.000000000568F000.00000004.00000001.sdmp	String found in binary or memory: https://cdn-ssl-wan.ludashi.com/assets/superjs/pageMicro.js?v=20210527~
Source: sdly.exe, 00000013.00000002.642677469.000000000BAFF000.00000004.00000001.sdmp	String found in binary or memory: https://cdn-ssl-wan.ludashi.compageSiteDd.js?v=20200528pagePlusPay.js?v=20190807commonTool.showNoCap
Source: mAGs0IsoB7.exe, 00000001.00000002.424455611.00000000037CA000.00000004.00000001.sdmp, wow_helper.exe.1.dr	String found in binary or memory: https://d.symcb.com/cps0%
Source: mAGs0IsoB7.exe, 00000001.00000002.424455611.00000000037CA000.00000004.00000001.sdmp, mAGs0IsoB7.exe, 00000001.00000002.424885665.00000000038D4000.00000004.00000001.sdmp, wow_helper.exe.1.dr	String found in binary or memory: https://d.symcb.com/rpa0
Source: mAGs0IsoB7.exe, 00000001.00000002.424885665.00000000038D4000.00000004.00000001.sdmp	String found in binary or memory: https://d.symcb.com/rpa0.
Source: mAGs0IsoB7.exe	String found in binary or memory: https://getfirebug.com/firebug-lite.js#startOpened=true
Source: sdly.exe, 00000013.00000002.627542984.00000000041F0000.00000004.00000001.sdmp	String found in binary or memory: https://login.live.com
Source: mAGs0IsoB7.exe, 00000001.00000003.413214896.00000000011E0000.00000004.00000040.sdmp	String found in binary or memory: https://sectigo.com/CPS0D
Source: am.pak.1.dr	String found in binary or memory: https://support.google.com/chrome/?p=sync_history&hl=am
Source: bg.pak.1.dr	String found in binary or memory: https://support.google.com/chrome/?p=sync_history&hl=bg
Source: ca.pak.1.dr	String found in binary or memory: https://support.google.com/chrome/?p=sync_history&hl=ca
Source: fa.pak.1.dr	String found in binary or memory: https://support.google.com/chrome/?p=sync_history&hl=fa
Source: fr.pak.1.dr	String found in binary or memory: https://support.google.com/chrome/?p=sync_history&hl=fr
Source: it.pak.1.dr	String found in binary or memory: https://support.google.com/chrome/?p=sync_history&hl=it
Source: ja.pak.1.dr	String found in binary or memory: https://support.google.com/chrome/?p=sync_history&hl=ja
Source: kn.pak.1.dr	String found in binary or memory: https://support.google.com/chrome/?p=sync_history&hl=kn
Source: ms.pak.1.dr	String found in binary or memory: https://support.google.com/chrome/?p=sync_history&hl=ms
Source: pt-PT.pak.1.dr	String found in binary or memory: https://support.google.com/chrome/?p=sync_history&hl=pt-PT
Source: vi.pak.1.dr	String found in binary or memory: https://support.google.com/chrome/?p=sync_history&hl=vi
Source: mAGs0IsoB7.exe	String found in binary or memory: https://wan.ludashi.com
Source: sdly.exe, 00000013.00000003.465125377.000000000BA77000.00000004.00000001.sdmp, sdly.exe, 00000013.00000002.631335343.00000000056F5000.00000004.00000001.sdmp	String found in binary or memory: https://wan.ludashi.com/micro/bind.html
Source: mAGs0IsoB7.exe	String found in binary or memory: https://wan.ludashi.com/service
Source: mAGs0IsoB7.exe	String found in binary or memory: https://wan.ludashi.com/site/sdly
Source: mAGs0IsoB7.exe	String found in binary or memory: https://www.digicert.com/CPS0
Source: mAGs0IsoB7.exe, 00000001.00000003.356429891.00000000037DB000.00000004.00000001.sdmp, wow_helper.exe.1.dr	String found in binary or memory: https://www.globalsign.com/repository/0
Source: mAGs0IsoB7.exe, 00000001.00000003.375959176.00000000011A0000.00000004.00000001.sdmp, wow_helper.exe.1.dr	String found in binary or memory: https://www.globalsign.com/repository/03
Source: mAGs0IsoB7.exe, 00000001.00000003.356429891.00000000037DB000.00000004.00000001.sdmp, wow_helper.exe.1.dr	String found in binary or memory: https://www.globalsign.com/repository/06
Source: sdly.exe, 00000013.00000002.627651205.0000000004256000.00000004.00000001.sdmp	String found in binary or memory: https://www.google.com/chrome/
Source: sdly.exe, 00000013.00000002.627707442.0000000004282000.00000004.00000001.sdmp	String found in binary or memory: https://www.google.com/chrome//
Source: sdly.exe, 00000013.00000002.627707442.0000000004282000.00000004.00000001.sdmp	String found in binary or memory: https://www.google.com/chrome/?/R
Source: fa.pak.1.dr, ja.pak.1.dr	String found in binary or memory: https://www.google.com/chrome/browser/privacy/whitepaper.html#malware
Source: fr.pak.1.dr	String found in binary or memory: https://www.google.com/chrome/browser/privacy/whitepaper.html#malwareErreur
Source: pt-PT.pak.1.dr	String found in binary or memory: https://www.google.com/chrome/browser/privacy/whitepaper.html#malwareErro
Source: ca.pak.1.dr	String found in binary or memory: https://www.google.com/chrome/browser/privacy/whitepaper.html#malwareError
Source: it.pak.1.dr	String found in binary or memory: https://www.google.com/chrome/browser/privacy/whitepaper.html#malwareErrore
Source: vi.pak.1.dr	String found in binary or memory: https://www.google.com/chrome/browser/privacy/whitepaper.html#malwareL
Source: sdly.exe, 00000013.00000002.645361662.000000000C685000.00000004.00000001.sdmp	String found in binary or memory: https://www.google.com/chrome/static/images/favicons/favicon-16x16.pngS
Source: sdly.exe, 00000013.00000002.627601801.0000000004225000.00000004.00000001.sdmp, sdly.exe, 00000013.00000002.645627046.000000000C733000.00000004.00000001.sdmp	String found in binary or memory: https://www.google.com/chrome/thank-you.html?statcb=0&installdataindex=empty&defaultbrowser=0
Source: sdly.exe, 00000013.00000002.629417140.00000000049DC000.00000004.00000001.sdmp, sdly.exe, 00000013.00000002.631335343.00000000056F5000.00000004.00000001.sdmp	String found in binary or memory: https://yxtg.taojike.com.cn/exitpage/client.html
Source: sdly.exe, 00000013.00000002.629417140.00000000049DC000.00000004.00000001.sdmp, sdly.exe, 00000013.00000002.631335343.00000000056F5000.00000004.00000001.sdmp	String found in binary or memory: https://yxtg.taojike.com.cn/exitpage/client_h5.html
Source: sdly.exe, 00000013.00000003.465125377.000000000BA77000.00000004.00000001.sdmp, sdly.exe, 00000013.00000002.631335343.00000000056F5000.00000004.00000001.sdmp	String found in binary or memory: https://yxtg.taojike.com.cn/exitpage/client_new.html

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443

Source: unknown

HTTPS traffic detected: 115.238.192.242:443 -> 192.168.2.3:49754 version: TLS 1.2

Key, Mouse, Clipboard, Microphone and Screen Capturing:

Source: C:\Users\user\Desktop\mAGs0IsoB7.exe	Code function: 1_2_00ABC890 GetKeyState,GetKeyState,GetKeyState,GetKeyState,GetKeyState,GetKeyState,		1_2_00ABC890
Source: C:\Users\user\AppData\Roaming\WdGame\sdly\sdly.exe	Code function: 19_2_001EC890 GetKeyState,GetKeyState,GetKeyState,GetKeyState,GetKeyState,GetKeyState,		19_2_001EC890

System Summary:

Source: C:\Users\user\Desktop\mAGs0IsoB7.exe	Code function: 1_2_00B170E0	1_2_00B170E0
Source: C:\Users\user\Desktop\mAGs0IsoB7.exe	Code function: 1_2_00B1A0D0	1_2_00B1A0D0
Source: C:\Users\user\Desktop\mAGs0IsoB7.exe	Code function: 1_2_00A73310	1_2_00A73310
Source: C:\Users\user\Desktop\mAGs0IsoB7.exe	Code function: 1_2_00B19340	1_2_00B19340
Source: C:\Users\user\Desktop\mAGs0IsoB7.exe	Code function: 1_2_00B174A0	1_2_00B174A0
Source: C:\Users\user\Desktop\mAGs0IsoB7.exe	Code function: 1_2_00A9259D	1_2_00A9259D
Source: C:\Users\user\Desktop\mAGs0IsoB7.exe	Code function: 1_2_00B17610	1_2_00B17610
Source: C:\Users\user\Desktop\mAGs0IsoB7.exe	Code function: 1_2_00A887C0	1_2_00A887C0
Source: C:\Users\user\Desktop\mAGs0IsoB7.exe	Code function: 1_2_00ABC8E0	1_2_00ABC8E0
Source: C:\Users\user\Desktop\mAGs0IsoB7.exe	Code function: 1_2_00B18BE0	1_2_00B18BE0
Source: C:\Users\user\Desktop\mAGs0IsoB7.exe	Code function: 1_2_00AAAB30	1_2_00AAAB30
Source: C:\Users\user\Desktop\mAGs0IsoB7.exe	Code function: 1_2_00B17C30	1_2_00B17C30
Source: C:\Users\user\Desktop\mAGs0IsoB7.exe	Code function: 1_2_00B1AC10	1_2_00B1AC10
Source: C:\Users\user\Desktop\mAGs0IsoB7.exe	Code function: 1_2_00AACDE0	1_2_00AACDE0
Source: C:\Users\user\Desktop\mAGs0IsoB7.exe	Code function: 1_2_00B16D20	1_2_00B16D20
Source: C:\Users\user\Desktop\mAGs0IsoB7.exe	Code function: 1_2_00B19E90	1_2_00B19E90
Source: C:\Users\user\Desktop\mAGs0IsoB7.exe	Code function: 1_2_6C2B69A8	1_2_6C2B69A8
Source: C:\Users\user\Desktop\mAGs0IsoB7.exe	Code function: 1_2_6C2BCB9E	1_2_6C2BCB9E
Source: C:\Users\user\Desktop\mAGs0IsoB7.exe	Code function: 1_2_6C2BC6F0	1_2_6C2BC6F0
Source: C:\Users\user\Desktop\mAGs0IsoB7.exe	Code function: 1_2_6C2C17B8	1_2_6C2C17B8
Source: C:\Users\user\AppData\Roaming\WdGame\sdly\sdly.exe	Code function: 19_2_00249340	19_2_00249340
Source: C:\Users\user\AppData\Roaming\WdGame\sdly\sdly.exe	Code function: 19_2_0020C570	19_2_0020C570
Source: C:\Users\user\AppData\Roaming\WdGame\sdly\sdly.exe	Code function: 19_2_0020A680	19_2_0020A680
Source: C:\Users\user\AppData\Roaming\WdGame\sdly\sdly.exe	Code function: 19_2_001FF9A0	19_2_001FF9A0
Source: C:\Users\user\AppData\Roaming\WdGame\sdly\sdly.exe	Code function: 19_2_0024AC10	19_2_0024AC10
Source: C:\Users\user\AppData\Roaming\WdGame\sdly\sdly.exe	Code function: 19_2_002470E0	19_2_002470E0
Source: C:\Users\user\AppData\Roaming\WdGame\sdly\sdly.exe	Code function: 19_2_0024A0D0	19_2_0024A0D0
Source: C:\Users\user\AppData\Roaming\WdGame\sdly\sdly.exe	Code function: 19_2_001A3310	19_2_001A3310
Source: C:\Users\user\AppData\Roaming\WdGame\sdly\sdly.exe	Code function: 19_2_001E842E	19_2_001E842E
Source: C:\Users\user\AppData\Roaming\WdGame\sdly\sdly.exe	Code function: 19_2_002474A0	19_2_002474A0
Source: C:\Users\user\AppData\Roaming\WdGame\sdly\sdly.exe	Code function: 19_2_001C259D	19_2_001C259D
Source: C:\Users\user\AppData\Roaming\WdGame\sdly\sdly.exe	Code function: 19_2_00206580	19_2_00206580
Source: C:\Users\user\AppData\Roaming\WdGame\sdly\sdly.exe	Code function: 19_2_00247610	19_2_00247610
Source: C:\Users\user\AppData\Roaming\WdGame\sdly\sdly.exe	Code function: 19_2_001B87C0	19_2_001B87C0
Source: C:\Users\user\AppData\Roaming\WdGame\sdly\sdly.exe	Code function: 19_2_001EC8E0	19_2_001EC8E0
Source: C:\Users\user\AppData\Roaming\WdGame\sdly\sdly.exe	Code function: 19_2_001DAB30	19_2_001DAB30
Source: C:\Users\user\AppData\Roaming\WdGame\sdly\sdly.exe	Code function: 19_2_00248BE0	19_2_00248BE0
Source: C:\Users\user\AppData\Roaming\WdGame\sdly\sdly.exe	Code function: 19_2_00247C30	19_2_00247C30
Source: C:\Users\user\AppData\Roaming\WdGame\sdly\sdly.exe	Code function: 19_2_00246D20	19_2_00246D20
Source: C:\Users\user\AppData\Roaming\WdGame\sdly\sdly.exe	Code function: 19_2_001DCDE0	19_2_001DCDE0
Source: C:\Users\user\AppData\Roaming\WdGame\sdly\sdly.exe	Code function: 19_2_00205EA0	19_2_00205EA0
Source: C:\Users\user\AppData\Roaming\WdGame\sdly\sdly.exe	Code function: 19_2_00249E90	19_2_00249E90
Source: C:\Users\user\AppData\Roaming\WdGame\sdly\sdly.exe	Code function: 19_2_00259F34	19_2_00259F34

Source: C:\Users\user\Desktop\mAGs0IsoB7.exe	Code function: String function: 00A74EA0 appears 36 times
Source: C:\Users\user\Desktop\mAGs0IsoB7.exe	Code function: String function: 00A7ECA0 appears 46 times
Source: C:\Users\user\Desktop\mAGs0IsoB7.exe	Code function: String function: 00ABBFC0 appears 37 times
Source: C:\Users\user\Desktop\mAGs0IsoB7.exe	Code function: String function: 00AA5DD0 appears 62 times
Source: C:\Users\user\Desktop\mAGs0IsoB7.exe	Code function: String function: 00A77D90 appears 42 times
Source: C:\Users\user\Desktop\mAGs0IsoB7.exe	Code function: String function: 00AA5DB0 appears 55 times
Source: C:\Users\user\AppData\Roaming\WdGame\sdly\sdly.exe	Code function: String function: 001A4EA0 appears 39 times
Source: C:\Users\user\AppData\Roaming\WdGame\sdly\sdly.exe	Code function: String function: 001A7D90 appears 43 times
Source: C:\Users\user\AppData\Roaming\WdGame\sdly\sdly.exe	Code function: String function: 001D5DD0 appears 62 times
Source: C:\Users\user\AppData\Roaming\WdGame\sdly\sdly.exe	Code function: String function: 001D5DB0 appears 56 times
Source: C:\Users\user\AppData\Roaming\WdGame\sdly\sdly.exe	Code function: String function: 001EBFC0 appears 39 times
Source: C:\Users\user\AppData\Roaming\WdGame\sdly\sdly.exe	Code function: String function: 002457F0 appears 38 times
Source: C:\Users\user\AppData\Roaming\WdGame\sdly\sdly.exe	Code function: String function: 001AECA0 appears 46 times

Source: mAGs0IsoB7.exe	Static PE information: Resource name: FILERES type: PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Source: mAGs0IsoB7.exe	Static PE information: Resource name: ZIPRES type: Zip archive data, at least v2.0 to extract
Source: mAGs0IsoB7.exe	Static PE information: Resource name: ZIPRES type: Zip archive data, at least v2.0 to extract
Source: mAGs0IsoB7.exe	Static PE information: Resource name: ZIPRES type: Zip archive data, at least v2.0 to extract
Source: mAGs0IsoB7.exe	Static PE information: Resource name: ZIPRES type: Zip archive data, at least v2.0 to extract
Source: mAGs0IsoB7.exe	Static PE information: Resource name: ZIPRES type: Zip archive data, at least v2.0 to extract
Source: sdly.exe.1.dr	Static PE information: Resource name: FILERES type: PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Source: sdly.exe.1.dr	Static PE information: Resource name: ZIPRES type: Zip archive data, at least v2.0 to extract
Source: sdly.exe.1.dr	Static PE information: Resource name: ZIPRES type: Zip archive data, at least v2.0 to extract
Source: sdly.exe.1.dr	Static PE information: Resource name: ZIPRES type: Zip archive data, at least v2.0 to extract
Source: sdly.exe.1.dr	Static PE information: Resource name: ZIPRES type: Zip archive data, at least v2.0 to extract
Source: sdly.exe.1.dr	Static PE information: Resource name: ZIPRES type: Zip archive data, at least v2.0 to extract

Source: mAGs0IsoB7.exe	Static PE information: Resource name: RT_ICON type: GLS_BINARY_LSB_FIRST
Source: sdly.exe.1.dr	Static PE information: Resource name: RT_ICON type: GLS_BINARY_LSB_FIRST

Source: mAGs0IsoB7.exe, 00000001.00000002.423262454.0000000001250000.00000002.00000001.sdmp	Binary or memory string: originalfilename vs mAGs0IsoB7.exe
Source: mAGs0IsoB7.exe, 00000001.00000002.423262454.0000000001250000.00000002.00000001.sdmp	Binary or memory string: OriginalFilenamepropsys.dll.mui@ vs mAGs0IsoB7.exe
Source: mAGs0IsoB7.exe, 00000001.00000003.228987621.00000000037C1000.00000004.00000001.sdmp	Binary or memory string: OriginalFilenameNetBridge.dll8 vs mAGs0IsoB7.exe
Source: mAGs0IsoB7.exe, 00000001.00000002.425097130.0000000003DB0000.00000002.00000001.sdmp	Binary or memory string: OriginalFilenamemswsock.dll.muij% vs mAGs0IsoB7.exe
Source: mAGs0IsoB7.exe, 00000001.00000002.423196455.00000000011F0000.00000002.00000001.sdmp	Binary or memory string: System.OriginalFileName vs mAGs0IsoB7.exe
Source: mAGs0IsoB7.exe, 00000001.00000002.423334659.0000000002B50000.00000002.00000001.sdmp	Binary or memory string: OriginalFilenameCRYPT32.DLL.MUIj% vs mAGs0IsoB7.exe
Source: mAGs0IsoB7.exe, 00000001.00000003.375959176.00000000011A0000.00000004.00000001.sdmp	Binary or memory string: OriginalFilenamewidevinecdmadapter.dllv+ vs mAGs0IsoB7.exe
Source: mAGs0IsoB7.exe	Binary or memory string: OriginalFilenameNetBridge.dll8 vs mAGs0IsoB7.exe

Source: mAGs0IsoB7.exe

Static PE information: 32BIT_MACHINE, EXECUTABLE_IMAGE

Source: classification engine

Classification label: mal45.evad.winEXE@3/128@9/9

Source: C:\Users\user\Desktop\mAGs0IsoB7.exe	Code function: 1_2_00AAC770 LoadLibraryW,GetProcAddress,GetCurrentProcess,GetCurrentProcess,OpenProcessToken,LookupPrivilegeValueW,AdjustTokenPrivileges,CloseHandle,GetLastError,GetCurrentProcess,OpenProcessToken,DuplicateTokenEx,LocalAlloc,CreateWellKnownSid,GetLengthSid,SetTokenInformation,CloseHandle,LocalFree,CloseHandle,FreeLibrary,	1_2_00AAC770
Source: C:\Users\user\Desktop\mAGs0IsoB7.exe	Code function: 1_2_00AA0F50 GetCurrentProcess,OpenProcessToken,LookupPrivilegeValueW,AdjustTokenPrivileges,CloseHandle,	1_2_00AA0F50
Source: C:\Users\user\AppData\Roaming\WdGame\sdly\sdly.exe	Code function: 19_2_001DC770 LoadLibraryW,GetProcAddress,GetCurrentProcess,GetCurrentProcess,OpenProcessToken,LookupPrivilegeValueW,AdjustTokenPrivileges,CloseHandle,GetLastError,GetCurrentProcess,OpenProcessToken,DuplicateTokenEx,LocalAlloc,CreateWellKnownSid,GetLengthSid,SetTokenInformation,CloseHandle,LocalFree,CloseHandle,FreeLibrary,	19_2_001DC770
Source: C:\Users\user\AppData\Roaming\WdGame\sdly\sdly.exe	Code function: 19_2_001D0F50 GetCurrentProcess,OpenProcessToken,LookupPrivilegeValueW,AdjustTokenPrivileges,CloseHandle,	19_2_001D0F50

Source: C:\Users\user\Desktop\mAGs0IsoB7.exe

Code function: 1_2_00A9E030 CreateToolhelp32Snapshot,Thread32First,GetCurrentProcessId,GetCurrentProcessId,GetCurrentThreadId,HeapAlloc,HeapReAlloc,Thread32Next,CloseHandle,OpenThread,SuspendThread,CloseHandle,

1_2_00A9E030

Source: C:\Users\user\Desktop\mAGs0IsoB7.exe

Code function: 1_2_00A80CF0 PathFileExistsW,CoCreateInstance,PathRemoveFileSpecW,GetShortPathNameW,

1_2_00A80CF0

Source: C:\Users\user\Desktop\mAGs0IsoB7.exe

Code function: 1_2_00AA2180 FindResourceW,SizeofResource,LoadResource,LockResource,

1_2_00AA2180

Source: C:\Users\user\Desktop\mAGs0IsoB7.exe

File created: C:\Users\user\AppData\Roaming\LDSGameCenter

Jump to behavior

Source: C:\Users\user\Desktop\mAGs0IsoB7.exe

Mutant created: \Sessions\1\BaseNamedObjects\CUSERSuserAPPDATAROAMINGWDGAMELOGCEFHELPERLOG

Source: C:\Users\user\Desktop\mAGs0IsoB7.exe

File created: C:\Users\user\AppData\Local\Temp\WdGame_sdly

Jump to behavior

Source: mAGs0IsoB7.exe

Static PE information: Section: .text IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_READ

Source: C:\Users\user\Desktop\mAGs0IsoB7.exe

File read: C:\Users\desktop.ini

Jump to behavior

Source: C:\Users\user\Desktop\mAGs0IsoB7.exe

Key opened: HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers

Jump to behavior

Source: C:\Users\user\Desktop\mAGs0IsoB7.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Users\user\Desktop\mAGs0IsoB7.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Users\user\AppData\Roaming\WdGame\sdly\sdly.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Users\user\AppData\Roaming\WdGame\sdly\sdly.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Users\user\AppData\Roaming\WdGame\sdly\sdly.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior

Source: mAGs0IsoB7.exe	Virustotal: Detection: 30%
Source: mAGs0IsoB7.exe	ReversingLabs: Detection: 41%

Source: mAGs0IsoB7.exe	String found in binary or memory: -install
Source: sdly.exe	String found in binary or memory: -install
Source: mAGs0IsoB7.exe	String found in binary or memory: F_CreateShortcut, create '%s' success_AddStartMenu, Delete %s--from=start_menu_AddStartMenu, successadd_start_menu--from=desk_icon_AddDesktopIcon, successadd_desk_icon_AddToInstallList_AddToInstallList regPath: %s;%s;InstalledGameIds%s;_RemoveFromInstallList_RemoveFromInstallList regPath: %s;\WdGameTray_LaunchTrayInstall, create install dir failed.\WdGameTray\Utils_LaunchTrayInstall, create install Utils dir failed.\WdGameTray\DrvMgr_LaunchTrayInstall, create install DrvMgr dir failed.\WdGameTray.exeWdGameTray.exe_LaunchTrayInstall, _TrayUnzipFile WdGameTray.exe failed._LaunchTrayInstall, _TrayUnzipFile NetBridge.dll failed.\RunDll.exe_LaunchTrayInstall, _TrayUnzipFile RunDll.exe failed.\LitePopEx.dll_LaunchTrayInstall, _TrayUnzipFile LitePopEx.dll failed._LaunchTrayInstall, WdGameTray.exe not valid exe.-install -gameid=%s -pid=%s -gameid=%s -pid=%s -subpid=%s_LaunchTrayInstall, run '%s' %s failed_LaunchTrayUninstall, install dir not found._LaunchTrayUninstall, WdGameTray.exe not valid exe.-uninstall\Fancy3D_TryInstallFancy3D, create appdata dir failedfancygame.ocxDllRegisterServerFANCY3DOCX.Fancy3DOCXCtrl.%d{B2E8D85E-C0C5-48DF-8DBC-1359B339AE32}_GetStartMenuDir, Create directory : %snotempdiruninstall__WdGameTemp___EnsureIsRunningTempExe, copy to temp path failed.target_dir --target_dir="%s"_KillRelatedProcess, kill '%s'_RemoveDesktopIcon, delete '%s'_RemoveDesktopIcon, failed delete '%s'_RemoveStartMenu, delete '%s'_RemoveStartMenu, failed delete '%s'_RemoveInstalledDir, delete '%s'_RemoveInstalledDir, failed delete '%s'_RemoveUninstItem*%s\%s.%s%s\%s-%d.%suidown_skin_fail
Source: mAGs0IsoB7.exe	String found in binary or memory: BrowserDlg/loading.gif
Source: mAGs0IsoB7.exe	String found in binary or memory: ChangeGameWindow/loading_bg.jpg
Source: mAGs0IsoB7.exe	String found in binary or memory: FuncDlgs/add_clock.png
Source: mAGs0IsoB7.exe	String found in binary or memory: InstallWindow/install_click.png}U
Source: mAGs0IsoB7.exe	String found in binary or memory: InstallWindow/install_disabled.png}T8
Source: mAGs0IsoB7.exe	String found in binary or memory: "InstallWindow/install_disabled.png}T8
Source: mAGs0IsoB7.exe	String found in binary or memory: InstallWindow/install_hover.png}U
Source: mAGs0IsoB7.exe	String found in binary or memory: InstallWindow/install_normal.png}U8Tk
Source: mAGs0IsoB7.exe	String found in binary or memory: InstallWindow/install_normal.png}U8Tk
Source: mAGs0IsoB7.exe	String found in binary or memory: InstallWindow/install_click.png
Source: mAGs0IsoB7.exe	String found in binary or memory: InstallWindow/install_disabled.png
Source: mAGs0IsoB7.exe	String found in binary or memory: InstallWindow/install_hover.png
Source: mAGs0IsoB7.exe	String found in binary or memory: InstallWindow/install_normal.png
Source: CefView.exe	String found in binary or memory: <!--StartFragment-->
Source: CefView.exe	String found in binary or memory: <!--StartFragment
Source: CefView.exe	String found in binary or memory: <!--StartFragment--><!--EndFragment-->
Source: CefView.exe	String found in binary or memory: <html<!--StartFragmentStartFragment:EndFragment:<!--EndFragment

Source: C:\Users\user\Desktop\mAGs0IsoB7.exe

File read: C:\Users\user\Desktop\mAGs0IsoB7.exe

Jump to behavior

Source: unknown	Process created: C:\Users\user\Desktop\mAGs0IsoB7.exe 'C:\Users\user\Desktop\mAGs0IsoB7.exe'
Source: C:\Users\user\Desktop\mAGs0IsoB7.exe	Process created: C:\Users\user\AppData\Roaming\WdGame\sdly\sdly.exe 'C:\Users\user\AppData\Roaming\WdGame\sdly\sdly.exe'
Source: C:\Users\user\Desktop\mAGs0IsoB7.exe	Process created: C:\Users\user\AppData\Roaming\WdGame\sdly\sdly.exe 'C:\Users\user\AppData\Roaming\WdGame\sdly\sdly.exe'	Jump to behavior

Source: C:\Users\user\Desktop\mAGs0IsoB7.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{289AF617-1CC3-42A6-926C-E6A863F0E3BA}\InProcServer32

Jump to behavior

Source: C:\Users\user\Desktop\mAGs0IsoB7.exe

Registry value created: HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Uninstall\WdGame_sdly

Jump to behavior

Source: mAGs0IsoB7.exe

Static PE information: certificate valid

Source: mAGs0IsoB7.exe

Static file information: File size 3643816 > 1048576

Source: mAGs0IsoB7.exe

Static PE information: Raw size of .rsrc is bigger than: 0x100000 < 0x239000

Source: mAGs0IsoB7.exe	Static PE information: data directory type: IMAGE_DIRECTORY_ENTRY_IMPORT
Source: mAGs0IsoB7.exe	Static PE information: data directory type: IMAGE_DIRECTORY_ENTRY_RESOURCE
Source: mAGs0IsoB7.exe	Static PE information: data directory type: IMAGE_DIRECTORY_ENTRY_BASERELOC
Source: mAGs0IsoB7.exe	Static PE information: data directory type: IMAGE_DIRECTORY_ENTRY_DEBUG
Source: mAGs0IsoB7.exe	Static PE information: data directory type: IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG
Source: mAGs0IsoB7.exe	Static PE information: data directory type: IMAGE_DIRECTORY_ENTRY_IAT

Source: mAGs0IsoB7.exe

Static PE information: TERMINAL_SERVER_AWARE, DYNAMIC_BASE, NX_COMPAT

Source: mAGs0IsoB7.exe

Static PE information: data directory type: IMAGE_DIRECTORY_ENTRY_DEBUG

Source:	Binary string: D:\box\WdGameBox\Release\LiteGameBox2.pdb source: mAGs0IsoB7.exe
Source:	Binary string: D:\build\lib_common\webview\Release\CefView.pdb source: CefView.exe
Source:	Binary string: h:\ch1\src\sandbox\wow_helper\wow_helper.pdbp source: mAGs0IsoB7.exe, 00000001.00000003.375959176.00000000011A0000.00000004.00000001.sdmp, wow_helper.exe.1.dr
Source:	Binary string: C:\vmagent_new\bin\joblist\369595\out\Release\ResHelper.pdb source: mAGs0IsoB7.exe, 00000001.00000002.425472962.000000006C2C3000.00000002.00020000.sdmp
Source:	Binary string: \|D:\box\WdGameBox\Release\LiteGameBox2.pdb source: mAGs0IsoB7.exe
Source:	Binary string: d:\build\360cloud_build\360NetUL_base1031\bin\360NetUL.pdb source: mAGs0IsoB7.exe
Source:	Binary string: E:\open_source\cef\source\chromium\src\out\Release\widevinecdmadapter.dll.pdb source: mAGs0IsoB7.exe, 00000001.00000003.375959176.00000000011A0000.00000004.00000001.sdmp, widevinecdmadapter.dll.1.dr
Source:	Binary string: E:\open_source\cef\source\chromium\src\out\Release\widevinecdmadapter.dll.pdbGCTL source: mAGs0IsoB7.exe, 00000001.00000003.375959176.00000000011A0000.00000004.00000001.sdmp, widevinecdmadapter.dll.1.dr
Source:	Binary string: h:\ch1\src\sandbox\wow_helper\wow_helper.pdb source: mAGs0IsoB7.exe, 00000001.00000003.375959176.00000000011A0000.00000004.00000001.sdmp, wow_helper.exe.1.dr

Source: mAGs0IsoB7.exe	Static PE information: Data directory: IMAGE_DIRECTORY_ENTRY_IMPORT is in: .rdata
Source: mAGs0IsoB7.exe	Static PE information: Data directory: IMAGE_DIRECTORY_ENTRY_RESOURCE is in: .rsrc
Source: mAGs0IsoB7.exe	Static PE information: Data directory: IMAGE_DIRECTORY_ENTRY_BASERELOC is in: .reloc
Source: mAGs0IsoB7.exe	Static PE information: Data directory: IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG is in: .rdata
Source: mAGs0IsoB7.exe	Static PE information: Data directory: IMAGE_DIRECTORY_ENTRY_IAT is in: .rdata

Data Obfuscation:

Source: C:\Users\user\Desktop\mAGs0IsoB7.exe

Code function: 1_2_00A825F5 SHCreateDirectoryExW,PathFileExistsW,LoadLibraryW,GetProcAddress,FreeLibrary,PathFileExistsW,LoadLibraryW,GetProcAddress,FreeLibrary,PathFileExistsW,DeleteFileW,

1_2_00A825F5

Source: sdly.exe.1.dr	Static PE information: real checksum: 0x3839d1 should be: 0x37a760
Source: mAGs0IsoB7.exe	Static PE information: real checksum: 0x3839d1 should be: 0x37a760

Source: C:\Users\user\Desktop\mAGs0IsoB7.exe	Code function: 1_2_00B15437 push ecx; ret	1_2_00B1544A
Source: C:\Users\user\Desktop\mAGs0IsoB7.exe	Code function: 1_2_00B15836 push ecx; ret	1_2_00B15849
Source: C:\Users\user\Desktop\mAGs0IsoB7.exe	Code function: 1_2_6C2B2BC6 push ecx; ret	1_2_6C2B2BD9
Source: C:\Users\user\AppData\Roaming\WdGame\sdly\sdly.exe	Code function: 19_2_00245437 push ecx; ret	19_2_0024544A
Source: C:\Users\user\AppData\Roaming\WdGame\sdly\sdly.exe	Code function: 19_2_00245836 push ecx; ret	19_2_00245849

Persistence and Installation Behavior:

Source: C:\Users\user\Desktop\mAGs0IsoB7.exe	File created: C:\Users\user\AppData\Roaming\WdGame\Utils\cef\pepflashplayer.dll	Jump to dropped file
Source: C:\Users\user\Desktop\mAGs0IsoB7.exe	File created: C:\Users\user\AppData\Roaming\WdGame\Utils\cef\libGLESv2.dll	Jump to dropped file
Source: C:\Users\user\Desktop\mAGs0IsoB7.exe	File created: C:\Users\user\AppData\Roaming\WdGame\Utils\cef\wow_helper.exe	Jump to dropped file
Source: C:\Users\user\Desktop\mAGs0IsoB7.exe	File created: C:\Users\user\AppData\Roaming\WdGame\Utils\7z.dll	Jump to dropped file
Source: C:\Users\user\Desktop\mAGs0IsoB7.exe	File created: C:\Users\user\AppData\Local\Temp\WdGame_sdly\NetBridge.dll	Jump to dropped file
Source: C:\Users\user\Desktop\mAGs0IsoB7.exe	File created: C:\Users\user\AppData\Roaming\WdGame\Utils\cef\d3dcompiler_47.dll	Jump to dropped file
Source: C:\Users\user\Desktop\mAGs0IsoB7.exe	File created: C:\Users\user\AppData\Roaming\WdGame\Utils\cef\libcef.dll	Jump to dropped file
Source: C:\Users\user\Desktop\mAGs0IsoB7.exe	File created: C:\Users\user\AppData\Roaming\WdGame\Utils\cef\widevinecdmadapter.dll	Jump to dropped file
Source: C:\Users\user\Desktop\mAGs0IsoB7.exe	File created: C:\Users\user\AppData\Roaming\WdGame\NetBridge.dll	Jump to dropped file
Source: C:\Users\user\Desktop\mAGs0IsoB7.exe	File created: C:\Users\user\AppData\Roaming\WdGame\Utils\CefRes.dll	Jump to dropped file
Source: C:\Users\user\Desktop\mAGs0IsoB7.exe	File created: C:\Users\user\AppData\Roaming\WdGame\Utils\cef\d3dcompiler_43.dll	Jump to dropped file
Source: C:\Users\user\Desktop\mAGs0IsoB7.exe	File created: C:\Users\user\AppData\Roaming\WdGame\Utils\cef\libEGL.dll	Jump to dropped file
Source: C:\Users\user\Desktop\mAGs0IsoB7.exe	File created: C:\Users\user\AppData\Roaming\WdGame\sdly\sdly.exe	Jump to dropped file
Source: C:\Users\user\Desktop\mAGs0IsoB7.exe	File created: C:\Users\user\AppData\Local\Temp\{A9E2EC10-0FDD-4dca-8860-E90690C0157A}.tmp\CefRes.dll	Jump to dropped file

Source: C:\Users\user\Desktop\mAGs0IsoB7.exe

File created: C:\Users\user\AppData\Roaming\WdGame\Utils\cef\LICENSE.txt

Jump to behavior

Boot Survival:

Source: C:\Users\user\Desktop\mAGs0IsoB7.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\????			Jump to behavior
Source: C:\Users\user\Desktop\mAGs0IsoB7.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\????\????.lnk			Jump to behavior

Hooking and other Techniques for Hiding and Protection:

Source: C:\Users\user\AppData\Roaming\WdGame\sdly\sdly.exe	Code function: 19_2_001F8D70 IsIconic,GetWindowRect,CreateRoundRectRgn,SetWindowRgn,DeleteObject,	19_2_001F8D70
Source: C:\Users\user\AppData\Roaming\WdGame\sdly\sdly.exe	Code function: 19_2_001F7E60 IsIconic,	19_2_001F7E60
Source: C:\Users\user\AppData\Roaming\WdGame\sdly\sdly.exe	Code function: 19_2_001F7F80 IsIconic,GetWindowRect,CreateRoundRectRgn,SetWindowRgn,DeleteObject,	19_2_001F7F80

Source: C:\Users\user\AppData\Roaming\WdGame\sdly\sdly.exe

Code function: 19_2_001E842E GetModuleHandleW,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,

19_2_001E842E

Source: C:\Users\user\Desktop\mAGs0IsoB7.exe

Registry key monitored for changes: HKEY_CURRENT_USER_Classes

Jump to behavior

Source: C:\Users\user\Desktop\mAGs0IsoB7.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\mAGs0IsoB7.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\mAGs0IsoB7.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\mAGs0IsoB7.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\mAGs0IsoB7.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\mAGs0IsoB7.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\mAGs0IsoB7.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\mAGs0IsoB7.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\mAGs0IsoB7.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\mAGs0IsoB7.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\mAGs0IsoB7.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\mAGs0IsoB7.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\mAGs0IsoB7.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\mAGs0IsoB7.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\mAGs0IsoB7.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\mAGs0IsoB7.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\mAGs0IsoB7.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\mAGs0IsoB7.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\mAGs0IsoB7.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\mAGs0IsoB7.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\mAGs0IsoB7.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\mAGs0IsoB7.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\mAGs0IsoB7.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\mAGs0IsoB7.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\mAGs0IsoB7.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\mAGs0IsoB7.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\mAGs0IsoB7.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\mAGs0IsoB7.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\mAGs0IsoB7.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\mAGs0IsoB7.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\mAGs0IsoB7.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\mAGs0IsoB7.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\mAGs0IsoB7.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\mAGs0IsoB7.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\mAGs0IsoB7.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\mAGs0IsoB7.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\mAGs0IsoB7.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\mAGs0IsoB7.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\mAGs0IsoB7.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\mAGs0IsoB7.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\mAGs0IsoB7.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\mAGs0IsoB7.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\mAGs0IsoB7.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\mAGs0IsoB7.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\mAGs0IsoB7.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\mAGs0IsoB7.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\mAGs0IsoB7.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\mAGs0IsoB7.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\mAGs0IsoB7.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\mAGs0IsoB7.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\mAGs0IsoB7.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\mAGs0IsoB7.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\mAGs0IsoB7.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\mAGs0IsoB7.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\mAGs0IsoB7.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\mAGs0IsoB7.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\mAGs0IsoB7.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\mAGs0IsoB7.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\mAGs0IsoB7.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\mAGs0IsoB7.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\mAGs0IsoB7.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\mAGs0IsoB7.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\mAGs0IsoB7.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\mAGs0IsoB7.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\mAGs0IsoB7.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\mAGs0IsoB7.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\mAGs0IsoB7.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\mAGs0IsoB7.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\mAGs0IsoB7.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\mAGs0IsoB7.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\mAGs0IsoB7.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\mAGs0IsoB7.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\mAGs0IsoB7.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\mAGs0IsoB7.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\mAGs0IsoB7.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\mAGs0IsoB7.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\mAGs0IsoB7.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\mAGs0IsoB7.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\mAGs0IsoB7.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\mAGs0IsoB7.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\mAGs0IsoB7.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\mAGs0IsoB7.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\mAGs0IsoB7.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\mAGs0IsoB7.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\mAGs0IsoB7.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\mAGs0IsoB7.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\mAGs0IsoB7.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\mAGs0IsoB7.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\mAGs0IsoB7.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\mAGs0IsoB7.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\mAGs0IsoB7.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\mAGs0IsoB7.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\mAGs0IsoB7.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\mAGs0IsoB7.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\mAGs0IsoB7.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\mAGs0IsoB7.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\mAGs0IsoB7.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\mAGs0IsoB7.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\mAGs0IsoB7.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\mAGs0IsoB7.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\mAGs0IsoB7.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\mAGs0IsoB7.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\mAGs0IsoB7.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\mAGs0IsoB7.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\mAGs0IsoB7.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\mAGs0IsoB7.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\mAGs0IsoB7.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\mAGs0IsoB7.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\mAGs0IsoB7.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\mAGs0IsoB7.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\mAGs0IsoB7.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\mAGs0IsoB7.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\mAGs0IsoB7.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\mAGs0IsoB7.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\mAGs0IsoB7.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\mAGs0IsoB7.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\mAGs0IsoB7.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\mAGs0IsoB7.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\WdGame\sdly\sdly.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\WdGame\sdly\sdly.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\WdGame\sdly\sdly.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\WdGame\sdly\sdly.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\WdGame\sdly\sdly.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\WdGame\sdly\sdly.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\WdGame\sdly\sdly.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\WdGame\sdly\sdly.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\WdGame\sdly\sdly.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\WdGame\sdly\sdly.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\WdGame\sdly\sdly.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\WdGame\sdly\sdly.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\WdGame\sdly\sdly.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\WdGame\sdly\sdly.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\WdGame\sdly\sdly.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\WdGame\sdly\sdly.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\WdGame\sdly\sdly.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\WdGame\sdly\sdly.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\WdGame\sdly\sdly.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\WdGame\sdly\sdly.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\WdGame\sdly\sdly.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\WdGame\sdly\sdly.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\WdGame\sdly\sdly.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\WdGame\sdly\sdly.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\WdGame\sdly\sdly.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\WdGame\sdly\sdly.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\WdGame\sdly\sdly.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\WdGame\sdly\sdly.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\WdGame\sdly\sdly.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\WdGame\sdly\sdly.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\WdGame\sdly\sdly.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\WdGame\sdly\sdly.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior

Malware Analysis System Evasion:

Contains functionality to detect sleep reduction / modifications

Show sources

Source: C:\Users\user\Desktop\mAGs0IsoB7.exe	Code function: 1_2_00AA5040	1_2_00AA5040
Source: C:\Users\user\Desktop\mAGs0IsoB7.exe	Code function: 1_2_00AA4A00	1_2_00AA4A00
Source: C:\Users\user\Desktop\mAGs0IsoB7.exe	Code function: 1_2_00AA4B40	1_2_00AA4B40
Source: C:\Users\user\Desktop\mAGs0IsoB7.exe	Code function: 1_2_00AA4EE0	1_2_00AA4EE0
Source: C:\Users\user\AppData\Roaming\WdGame\sdly\sdly.exe	Code function: 19_2_001D5040	19_2_001D5040
Source: C:\Users\user\AppData\Roaming\WdGame\sdly\sdly.exe	Code function: 19_2_001D4A00	19_2_001D4A00
Source: C:\Users\user\AppData\Roaming\WdGame\sdly\sdly.exe	Code function: 19_2_001D4B40	19_2_001D4B40
Source: C:\Users\user\AppData\Roaming\WdGame\sdly\sdly.exe	Code function: 19_2_001D4EE0	19_2_001D4EE0

Source: C:\Users\user\AppData\Roaming\WdGame\sdly\sdly.exe	Memory allocated: 4510000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Users\user\AppData\Roaming\WdGame\sdly\sdly.exe	Memory allocated: 4A70000 memory commit \| memory reserve \| memory write watch	Jump to behavior
Source: C:\Users\user\AppData\Roaming\WdGame\sdly\sdly.exe	Memory allocated: 4BF0000 memory commit \| memory reserve \| memory write watch	Jump to behavior
Source: C:\Users\user\AppData\Roaming\WdGame\sdly\sdly.exe	Memory allocated: 4C10000 memory commit \| memory reserve \| memory write watch	Jump to behavior
Source: C:\Users\user\AppData\Roaming\WdGame\sdly\sdly.exe	Memory allocated: ACC0000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Users\user\AppData\Roaming\WdGame\sdly\sdly.exe	Memory allocated: AD20000 memory commit \| memory reserve \| memory write watch	Jump to behavior
Source: C:\Users\user\AppData\Roaming\WdGame\sdly\sdly.exe	Memory allocated: BA50000 memory commit \| memory reserve \| memory write watch	Jump to behavior
Source: C:\Users\user\AppData\Roaming\WdGame\sdly\sdly.exe	Memory allocated: BAD0000 memory commit \| memory reserve \| memory write watch	Jump to behavior
Source: C:\Users\user\AppData\Roaming\WdGame\sdly\sdly.exe	Memory allocated: BB10000 memory commit \| memory reserve \| memory write watch	Jump to behavior
Source: C:\Users\user\AppData\Roaming\WdGame\sdly\sdly.exe	Memory allocated: BB30000 memory commit \| memory reserve \| memory write watch	Jump to behavior
Source: C:\Users\user\AppData\Roaming\WdGame\sdly\sdly.exe	Memory allocated: BB50000 memory commit \| memory reserve \| memory write watch	Jump to behavior
Source: C:\Users\user\AppData\Roaming\WdGame\sdly\sdly.exe	Memory allocated: BBD0000 memory commit \| memory reserve \| memory write watch	Jump to behavior
Source: C:\Users\user\AppData\Roaming\WdGame\sdly\sdly.exe	Memory allocated: BBF0000 memory commit \| memory reserve \| memory write watch	Jump to behavior
Source: C:\Users\user\AppData\Roaming\WdGame\sdly\sdly.exe	Memory allocated: BC10000 memory commit \| memory reserve \| memory write watch	Jump to behavior
Source: C:\Users\user\AppData\Roaming\WdGame\sdly\sdly.exe	Memory allocated: BDE0000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Users\user\AppData\Roaming\WdGame\sdly\sdly.exe	Memory allocated: B940000 memory commit \| memory reserve \| memory write watch	Jump to behavior

Source: C:\Users\user\AppData\Roaming\WdGame\sdly\sdly.exe	Registry key queried: HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4d36e972-e325-11ce-bfc1-08002be10318}\0001 name: DriverDesc			Jump to behavior
Source: C:\Users\user\AppData\Roaming\WdGame\sdly\sdly.exe	File opened / queried: SCSI#CdRom&Ven_NECVMWar&Prod_VMware_SATA_CD00#5&280b647&0&000000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}			Jump to behavior

Source: C:\Users\user\Desktop\mAGs0IsoB7.exe

1_2_00A9E030

Source: C:\Users\user\Desktop\mAGs0IsoB7.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Roaming\WdGame\Utils\cef\pepflashplayer.dll	Jump to dropped file
Source: C:\Users\user\Desktop\mAGs0IsoB7.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Roaming\WdGame\Utils\cef\wow_helper.exe	Jump to dropped file
Source: C:\Users\user\Desktop\mAGs0IsoB7.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Roaming\WdGame\Utils\cef\libGLESv2.dll	Jump to dropped file
Source: C:\Users\user\Desktop\mAGs0IsoB7.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Roaming\WdGame\Utils\cef\libcef.dll	Jump to dropped file
Source: C:\Users\user\Desktop\mAGs0IsoB7.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Roaming\WdGame\Utils\cef\d3dcompiler_47.dll	Jump to dropped file
Source: C:\Users\user\Desktop\mAGs0IsoB7.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Roaming\WdGame\Utils\cef\widevinecdmadapter.dll	Jump to dropped file
Source: C:\Users\user\Desktop\mAGs0IsoB7.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Roaming\WdGame\Utils\cef\d3dcompiler_43.dll	Jump to dropped file
Source: C:\Users\user\Desktop\mAGs0IsoB7.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Roaming\WdGame\Utils\cef\libEGL.dll	Jump to dropped file

Source: C:\Users\user\Desktop\mAGs0IsoB7.exe

File opened: PhysicalDrive0

Jump to behavior

Source: C:\Users\user\Desktop\mAGs0IsoB7.exe	Code function: 1_2_00A842B3 SetFileAttributesW,lstrlenW,FindClose,FindFirstFileW,FindClose,		1_2_00A842B3
Source: C:\Users\user\AppData\Roaming\WdGame\sdly\sdly.exe	Code function: 19_2_001B42B3 SetFileAttributesW,lstrlenW,FindClose,FindFirstFileW,FindClose,		19_2_001B42B3

Source: C:\Users\user\Desktop\mAGs0IsoB7.exe	File opened: C:\Users\user	Jump to behavior
Source: C:\Users\user\Desktop\mAGs0IsoB7.exe	File opened: C:\Users\user\AppData\Roaming\WdGame	Jump to behavior
Source: C:\Users\user\Desktop\mAGs0IsoB7.exe	File opened: C:\Users\user\AppData	Jump to behavior
Source: C:\Users\user\Desktop\mAGs0IsoB7.exe	File opened: C:\Users\user\AppData\Roaming\WdGame\sdly	Jump to behavior
Source: C:\Users\user\Desktop\mAGs0IsoB7.exe	File opened: C:\Users\user\AppData\Roaming	Jump to behavior
Source: C:\Users\user\Desktop\mAGs0IsoB7.exe	File opened: C:\Users\user\AppData\Roaming\WdGame\sdly\sdly.exe	Jump to behavior

Source: sdly.exe, 00000013.00000002.627566811.0000000004209000.00000004.00000001.sdmp	Binary or memory string: Hyper-V RAWayer LightWeight Filter-0000
Source: mAGs0IsoB7.exe	Binary or memory string: :khGfS
Source: mAGs0IsoB7.exe, 00000001.00000002.424455611.00000000037CA000.00000004.00000001.sdmp, sdly.exe, 00000013.00000002.623401836.0000000000E03000.00000004.00000020.sdmp	Binary or memory string: Hyper-V RAW
Source: sdly.exe, 00000013.00000002.627707442.0000000004282000.00000004.00000001.sdmp	Binary or memory string: \??\SCSI#CdRom&Ven_NECVMWar&Prod_VMware_SATA_CD00#5&280b647&0&000000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}

Anti Debugging:

Source: C:\Users\user\Desktop\mAGs0IsoB7.exe

Code function: 1_2_00B279BF IsDebuggerPresent,SetUnhandledExceptionFilter,UnhandledExceptionFilter,

1_2_00B279BF

Source: C:\Users\user\AppData\Roaming\WdGame\sdly\sdly.exe

Code function: 19_2_001D5928 MultiByteToWideChar,GetLastError,MultiByteToWideChar,MultiByteToWideChar,MultiByteToWideChar,OutputDebugStringA,

19_2_001D5928

Source: C:\Users\user\Desktop\mAGs0IsoB7.exe

1_2_00A9E030

Source: C:\Users\user\Desktop\mAGs0IsoB7.exe

Code function: 1_2_00A825F5 SHCreateDirectoryExW,PathFileExistsW,LoadLibraryW,GetProcAddress,FreeLibrary,PathFileExistsW,LoadLibraryW,GetProcAddress,FreeLibrary,PathFileExistsW,DeleteFileW,

1_2_00A825F5

Source: C:\Users\user\Desktop\mAGs0IsoB7.exe	Code function: 1_2_00B3CA70 mov eax, dword ptr fs:[00000030h]	1_2_00B3CA70
Source: C:\Users\user\Desktop\mAGs0IsoB7.exe	Code function: 1_2_6C2B76A5 mov eax, dword ptr fs:[00000030h]	1_2_6C2B76A5
Source: C:\Users\user\AppData\Roaming\WdGame\sdly\sdly.exe	Code function: 19_2_0026CA70 mov eax, dword ptr fs:[00000030h]	19_2_0026CA70

Source: C:\Users\user\Desktop\mAGs0IsoB7.exe

Code function: 1_2_00A745F0 GetProcessHeap,

1_2_00A745F0

Source: C:\Users\user\Desktop\mAGs0IsoB7.exe	Code function: 1_2_00B279BF IsDebuggerPresent,SetUnhandledExceptionFilter,UnhandledExceptionFilter,	1_2_00B279BF
Source: C:\Users\user\Desktop\mAGs0IsoB7.exe	Code function: 1_2_00B14C62 SetUnhandledExceptionFilter,UnhandledExceptionFilter,GetCurrentProcess,TerminateProcess,	1_2_00B14C62
Source: C:\Users\user\Desktop\mAGs0IsoB7.exe	Code function: 1_2_6C2B5B0F IsDebuggerPresent,SetUnhandledExceptionFilter,UnhandledExceptionFilter,	1_2_6C2B5B0F
Source: C:\Users\user\Desktop\mAGs0IsoB7.exe	Code function: 1_2_6C2B2BDB SetUnhandledExceptionFilter,UnhandledExceptionFilter,GetCurrentProcess,TerminateProcess,	1_2_6C2B2BDB
Source: C:\Users\user\AppData\Roaming\WdGame\sdly\sdly.exe	Code function: 19_2_002579BF IsDebuggerPresent,SetUnhandledExceptionFilter,UnhandledExceptionFilter,	19_2_002579BF
Source: C:\Users\user\AppData\Roaming\WdGame\sdly\sdly.exe	Code function: 19_2_00244C62 SetUnhandledExceptionFilter,UnhandledExceptionFilter,GetCurrentProcess,TerminateProcess,	19_2_00244C62

Source: C:\Users\user\AppData\Roaming\WdGame\sdly\sdly.exe

Memory allocated: page read and write | page guard

Jump to behavior

HIPS / PFW / Operating System Protection Evasion:

Source: C:\Users\user\Desktop\mAGs0IsoB7.exe

Process created: C:\Users\user\AppData\Roaming\WdGame\sdly\sdly.exe 'C:\Users\user\AppData\Roaming\WdGame\sdly\sdly.exe'

Jump to behavior

Source: C:\Users\user\Desktop\mAGs0IsoB7.exe

Code function: 1_2_00A7C890 GetCurrentThread,OpenThreadToken,GetLastError,GetLastError,GetLastError,GetCurrentProcess,OpenProcessToken,GetTokenInformation,GetTokenInformation,GetLastError,GetTokenInformation,AllocateAndInitializeSid,EqualSid,

1_2_00A7C890

Source: sdly.exe, 00000013.00000002.624166854.0000000001550000.00000002.00000001.sdmp	Binary or memory string: Program Manager
Source: sdly.exe, 00000013.00000002.624166854.0000000001550000.00000002.00000001.sdmp	Binary or memory string: Shell_TrayWnd
Source: sdly.exe, 00000013.00000002.624166854.0000000001550000.00000002.00000001.sdmp	Binary or memory string: Progman
Source: sdly.exe, 00000013.00000002.624166854.0000000001550000.00000002.00000001.sdmp	Binary or memory string: Progmanlock

Language, Device and Operating System Detection:

Source: C:\Users\user\AppData\Roaming\WdGame\sdly\sdly.exe

Code function: 19_2_0023F2B0 cpuid

19_2_0023F2B0

Source: C:\Users\user\Desktop\mAGs0IsoB7.exe	Code function: GetLocaleInfoW,		1_2_00B4176C
Source: C:\Users\user\AppData\Roaming\WdGame\sdly\sdly.exe	Code function: GetLocaleInfoW,		19_2_0027176C

Source: C:\Users\user\Desktop\mAGs0IsoB7.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\mAGs0IsoB7.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\mAGs0IsoB7.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Roaming\WdGame\sdly\sdly.exe	Queries volume information: C:\Windows\Fonts\timesi.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Roaming\WdGame\sdly\sdly.exe	Queries volume information: C:\Windows\Fonts\timesbd.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Roaming\WdGame\sdly\sdly.exe	Queries volume information: C:\Windows\Fonts\timesbi.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Roaming\WdGame\sdly\sdly.exe	Queries volume information: C:\Windows\Fonts\arial.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Roaming\WdGame\sdly\sdly.exe	Queries volume information: C:\Windows\Fonts\ARIALN.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Roaming\WdGame\sdly\sdly.exe	Queries volume information: C:\Windows\Fonts\ariali.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Roaming\WdGame\sdly\sdly.exe	Queries volume information: C:\Windows\Fonts\ARIALNI.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Roaming\WdGame\sdly\sdly.exe	Queries volume information: C:\Windows\Fonts\arialbd.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Roaming\WdGame\sdly\sdly.exe	Queries volume information: C:\Windows\Fonts\ARIALNB.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Roaming\WdGame\sdly\sdly.exe	Queries volume information: C:\Windows\Fonts\arialbi.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Roaming\WdGame\sdly\sdly.exe	Queries volume information: C:\Windows\Fonts\ARIALNBI.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Roaming\WdGame\sdly\sdly.exe	Queries volume information: C:\Windows\Fonts\ariblk.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Roaming\WdGame\sdly\sdly.exe	Queries volume information: C:\Windows\Fonts\arial.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Roaming\WdGame\sdly\sdly.exe	Queries volume information: C:\Windows\Fonts\tahoma.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Roaming\WdGame\sdly\sdly.exe	Queries volume information: C:\Windows\Fonts\tahomabd.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Roaming\WdGame\sdly\sdly.exe	Queries volume information: C:\Windows\Fonts\tahoma.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Roaming\WdGame\sdly\sdly.exe	Queries volume information: C:\Windows\Fonts\times.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Roaming\WdGame\sdly\sdly.exe	Queries volume information: C:\Windows\Fonts\simsun.ttc VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Roaming\WdGame\sdly\sdly.exe	Queries volume information: C:\Windows\Fonts\simsun.ttc VolumeInformation	Jump to behavior

Source: C:\Users\user\Desktop\mAGs0IsoB7.exe

Code function: 1_2_00B417D6 GetSystemTimeAsFileTime,

1_2_00B417D6

Source: C:\Users\user\Desktop\mAGs0IsoB7.exe

Code function: 1_2_00AAAB30 CoInitialize,CoInitializeSecurity,CoCreateInstance,VariantInit,VariantInit,VariantInit,VariantInit,VariantInit,VariantClear,VariantClear,VariantClear,VariantClear,VariantClear,SysAllocString,SysFreeString,SysFreeString,SysAllocString,SysAllocString,SysAllocString,SysAllocString,SysAllocString,SysFreeString,SysFreeString,SysFreeString,SysFreeString,SysFreeString,SysFreeString,SysFreeString,SysFreeString,SysFreeString,SysFreeString,SysFreeString,SysFreeString,SysFreeString,SysAllocString,SysFreeString,SysAllocString,SysAllocString,SysFreeString,SysAllocString,SysFreeString,GetUserNameExW,SysFreeString,SysAllocString,SysAllocString,SysAllocString,SysFreeString,SysFreeString,SysFreeString,SysAllocString,SysAllocString,SysFreeString,SysAllocString,SysFreeString,SysFreeString,SysAllocString,SysAllocString,SysFreeString,SysAllocString,SysFreeString,VariantInit,VariantInit,VariantInit,VariantClear,VariantInit,SysAllocString,SysAllocString,SysAllocString,SysFreeString,VariantClear,VariantClear,VariantClear,VariantClear,CoUninitialize,

1_2_00AAAB30

Source: C:\Users\user\Desktop\mAGs0IsoB7.exe

Code function: 1_2_00B42954 _free,_free,_free,GetTimeZoneInformation,WideCharToMultiByte,WideCharToMultiByte,_free,

1_2_00B42954

Source: C:\Users\user\Desktop\mAGs0IsoB7.exe

Code function: 1_2_00AB8B50 PathFileExistsW,GetVersionExW,WinVerifyTrust,WTHelperProvDataFromStateData,CertGetNameStringW,WinVerifyTrust,

1_2_00AB8B50

Source: C:\Users\user\AppData\Roaming\WdGame\sdly\sdly.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography MachineGuid

Jump to behavior

Lowering of HIPS / PFW / Operating System Security Settings:

Source: C:\Users\user\Desktop\mAGs0IsoB7.exe	Registry value created: HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BROWSER_EMULATION	Jump to behavior
Source: C:\Users\user\AppData\Roaming\WdGame\sdly\sdly.exe	Registry value created: HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BROWSER_EMULATION	Jump to behavior
Source: C:\Users\user\AppData\Roaming\WdGame\sdly\sdly.exe	Registry value created: HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BLOCK_LMZ_OBJECT	Jump to behavior
Source: C:\Users\user\AppData\Roaming\WdGame\sdly\sdly.exe	Registry value created: HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BLOCK_LMZ_SCRIPT	Jump to behavior

Mitre Att&ck Matrix

Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Exfiltration	Command and Control	Network Effects	Remote Service Effects	Impact
Valid Accounts	Scripting1	DLL Search Order Hijacking2	DLL Search Order Hijacking2	Disable or Modify Tools1	Input Capture1	System Time Discovery2	Remote Services	Archive Collected Data1	Exfiltration Over Other Network Medium	Ingress Tool Transfer13	Eavesdrop on Insecure Network Communication	Remotely Track Device Without Authorization	Modify System Partition
Default Accounts	Native API1	Application Shimming1	Application Shimming1	Deobfuscate/Decode Files or Information1	LSASS Memory	Account Discovery1	Remote Desktop Protocol	Input Capture1	Exfiltration Over Bluetooth	Encrypted Channel22	Exploit SS7 to Redirect Phone Calls/SMS	Remotely Wipe Data Without Authorization	Device Lockout
Domain Accounts	Command and Scripting Interpreter2	Windows Service1	Access Token Manipulation1	Scripting1	Security Account Manager	File and Directory Discovery3	SMB/Windows Admin Shares	Data from Network Shared Drive	Automated Exfiltration	Non-Application Layer Protocol4	Exploit SS7 to Track Device Location	Obtain Device Cloud Backups	Delete Device Data
Local Accounts	At (Windows)	Registry Run Keys / Startup Folder1	Windows Service1	Obfuscated Files or Information2	NTDS	System Information Discovery44	Distributed Component Object Model	Input Capture	Scheduled Transfer	Application Layer Protocol25	SIM Card Swap		Carrier Billing Fraud
Cloud Accounts	Cron	Network Logon Script	Process Injection12	DLL Search Order Hijacking2	LSA Secrets	Query Registry1	SSH	Keylogging	Data Transfer Size Limits	Fallback Channels	Manipulate Device Communication		Manipulate App Store Rankings or Ratings
Replication Through Removable Media	Launchd	Rc.common	Registry Run Keys / Startup Folder1	Masquerading1	Cached Domain Credentials	Security Software Discovery161	VNC	GUI Input Capture	Exfiltration Over C2 Channel	Multiband Communication	Jamming or Denial of Service		Abuse Accessibility Features
External Remote Services	Scheduled Task	Startup Items	Startup Items	Virtualization/Sandbox Evasion3	DCSync	Virtualization/Sandbox Evasion3	Windows Remote Management	Web Portal Capture	Exfiltration Over Alternative Protocol	Commonly Used Port	Rogue Wi-Fi Access Points		Data Encrypted for Impact
Drive-by Compromise	Command and Scripting Interpreter	Scheduled Task/Job	Scheduled Task/Job	Modify Registry1	Proc Filesystem	Process Discovery2	Shared Webroot	Credential API Hooking	Exfiltration Over Symmetric Encrypted Non-C2 Protocol	Application Layer Protocol	Downgrade to Insecure Protocols		Generate Fraudulent Advertising Revenue
Exploit Public-Facing Application	PowerShell	At (Linux)	At (Linux)	Access Token Manipulation1	/etc/passwd and /etc/shadow	Application Window Discovery1	Software Deployment Tools	Data Staged	Exfiltration Over Asymmetric Encrypted Non-C2 Protocol	Web Protocols	Rogue Cellular Base Station		Data Destruction
Supply Chain Compromise	AppleScript	At (Windows)	At (Windows)	Process Injection12	Network Sniffing	System Owner/User Discovery1	Taint Shared Content	Local Data Staging	Exfiltration Over Unencrypted/Obfuscated Non-C2 Protocol	File Transfer Protocols			Data Encrypted for Impact
Compromise Software Dependencies and Development Tools	Windows Command Shell	Cron	Cron	Right-to-Left Override	Input Capture	Remote System Discovery1	Replication Through Removable Media	Remote Data Staging	Exfiltration Over Physical Medium	Mail Protocols			Service Stop

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Screenshots

Thumbnails

This section contains all screenshots as thumbnails, including those not shown in the slideshow.

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Source	Detection	Scanner	Label	Link
mAGs0IsoB7.exe	30%	Virustotal		Browse
mAGs0IsoB7.exe	11%	Metadefender		Browse
mAGs0IsoB7.exe	41%	ReversingLabs	Win32.Trojan.Doina
mAGs0IsoB7.exe	100%	Joe Sandbox ML

Dropped Files

Source	Detection	Scanner	Link
C:\Users\user\AppData\Roaming\WdGame\sdly\sdly.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\WdGame_sdly\NetBridge.dll	0%	Metadefender	Browse
C:\Users\user\AppData\Local\Temp\WdGame_sdly\NetBridge.dll	3%	ReversingLabs
C:\Users\user\AppData\Local\Temp\{A9E2EC10-0FDD-4dca-8860-E90690C0157A}.tmp\CefRes.dll	0%	Metadefender	Browse
C:\Users\user\AppData\Local\Temp\{A9E2EC10-0FDD-4dca-8860-E90690C0157A}.tmp\CefRes.dll	0%	ReversingLabs
C:\Users\user\AppData\Roaming\WdGame\NetBridge.dll	0%	Metadefender	Browse
C:\Users\user\AppData\Roaming\WdGame\NetBridge.dll	3%	ReversingLabs
C:\Users\user\AppData\Roaming\WdGame\Utils\7z.dll	0%	Metadefender	Browse
C:\Users\user\AppData\Roaming\WdGame\Utils\7z.dll	4%	ReversingLabs
C:\Users\user\AppData\Roaming\WdGame\Utils\CefRes.dll	0%	Metadefender	Browse
C:\Users\user\AppData\Roaming\WdGame\Utils\CefRes.dll	0%	ReversingLabs
C:\Users\user\AppData\Roaming\WdGame\Utils\cef\d3dcompiler_43.dll	0%	Metadefender	Browse
C:\Users\user\AppData\Roaming\WdGame\Utils\cef\d3dcompiler_43.dll	0%	ReversingLabs
C:\Users\user\AppData\Roaming\WdGame\Utils\cef\d3dcompiler_47.dll	0%	Metadefender	Browse
C:\Users\user\AppData\Roaming\WdGame\Utils\cef\d3dcompiler_47.dll	0%	ReversingLabs
C:\Users\user\AppData\Roaming\WdGame\Utils\cef\libEGL.dll	0%	Metadefender	Browse
C:\Users\user\AppData\Roaming\WdGame\Utils\cef\libEGL.dll	0%	ReversingLabs

Unpacked PE Files

No Antivirus matches

Domains

Source	Detection	Scanner	Link
cdn-wan.ludashi.com.w.kunlunle.com	0%	Virustotal	Browse
cdn-file.ludashi.com.m.alikunlun.net	0%	Virustotal	Browse
cdn-ssl-wan.ludashi.com.m.alikunlun.com	0%	Virustotal	Browse
cdn-file-ssl-wan.ludashi.com.m.alikunlun.com	1%	Virustotal	Browse

URLs

Source	Detection	Scanner	Label
http://www.mercadolivre.com.br/	0%	URL Reputation	safe
http://www.mercadolivre.com.br/	0%	URL Reputation	safe
http://www.mercadolivre.com.br/	0%	URL Reputation	safe
http://www.merlin.com.pl/favicon.ico	0%	URL Reputation	safe
http://www.merlin.com.pl/favicon.ico	0%	URL Reputation	safe
http://www.merlin.com.pl/favicon.ico	0%	URL Reputation	safe
http://www.dailymail.co.uk/	0%	URL Reputation	safe
http://www.dailymail.co.uk/	0%	URL Reputation	safe
http://www.dailymail.co.uk/	0%	URL Reputation	safe
http://www.galapagosdesign.com/DPlease	0%	URL Reputation	safe
http://www.galapagosdesign.com/DPlease	0%	URL Reputation	safe
http://www.galapagosdesign.com/DPlease	0%	URL Reputation	safe
http://busca.igbusca.com.br//app/static/images/favicon.ico	0%	URL Reputation	safe
http://busca.igbusca.com.br//app/static/images/favicon.ico	0%	URL Reputation	safe
http://busca.igbusca.com.br//app/static/images/favicon.ico	0%	URL Reputation	safe
http://www.etmall.com.tw/favicon.ico	0%	URL Reputation	safe
http://www.etmall.com.tw/favicon.ico	0%	URL Reputation	safe
http://www.etmall.com.tw/favicon.ico	0%	URL Reputation	safe
http://it.search.dada.net/favicon.ico	0%	URL Reputation	safe
http://it.search.dada.net/favicon.ico	0%	URL Reputation	safe
http://it.search.dada.net/favicon.ico	0%	URL Reputation	safe
https://yxtg.taojike.com.cn/exitpage/client_new.html	0%	Avira URL Cloud	safe
http://search.hanafos.com/favicon.ico	0%	URL Reputation	safe
http://search.hanafos.com/favicon.ico	0%	URL Reputation	safe
http://search.hanafos.com/favicon.ico	0%	URL Reputation	safe
http://cgi.search.biglobe.ne.jp/favicon.ico	0%	Avira URL Cloud	safe
http://search.msn.co.jp/results.aspx?q=	0%	URL Reputation	safe
http://search.msn.co.jp/results.aspx?q=	0%	URL Reputation	safe
http://search.msn.co.jp/results.aspx?q=	0%	URL Reputation	safe
http://buscar.ozu.es/	0%	URL Reputation	safe
http://buscar.ozu.es/	0%	URL Reputation	safe
http://buscar.ozu.es/	0%	URL Reputation	safe
http://search.auction.co.kr/	0%	URL Reputation	safe
http://search.auction.co.kr/	0%	URL Reputation	safe
http://search.auction.co.kr/	0%	URL Reputation	safe
http://s.conchdesktop.com/desktop?pid=	0%	Avira URL Cloud	safe
http://www.pchome.com.tw/favicon.ico	0%	URL Reputation	safe
http://www.pchome.com.tw/favicon.ico	0%	URL Reputation	safe
http://www.pchome.com.tw/favicon.ico	0%	URL Reputation	safe
http://browse.guardian.co.uk/favicon.ico	0%	URL Reputation	safe
http://browse.guardian.co.uk/favicon.ico	0%	URL Reputation	safe
http://browse.guardian.co.uk/favicon.ico	0%	URL Reputation	safe
http://google.pchome.com.tw/	0%	URL Reputation	safe
http://google.pchome.com.tw/	0%	URL Reputation	safe
http://google.pchome.com.tw/	0%	URL Reputation	safe
http://www.ozu.es/favicon.ico	0%	URL Reputation	safe
http://www.ozu.es/favicon.ico	0%	URL Reputation	safe
http://www.ozu.es/favicon.ico	0%	URL Reputation	safe
http://search.yahoo.co.jp/favicon.ico	0%	URL Reputation	safe
http://search.yahoo.co.jp/favicon.ico	0%	URL Reputation	safe
http://search.yahoo.co.jp/favicon.ico	0%	URL Reputation	safe
http://www.gmarket.co.kr/	0%	URL Reputation	safe
http://www.gmarket.co.kr/	0%	URL Reputation	safe
http://www.gmarket.co.kr/	0%	URL Reputation	safe
http://www.founder.com.cn/cn/bThe	0%	URL Reputation	safe
http://www.founder.com.cn/cn/bThe	0%	URL Reputation	safe
http://www.founder.com.cn/cn/bThe	0%	URL Reputation	safe
http://cdn-wan.ludashi.compageRegister.js?v=20210429pageThirdInfo.js?v=20200716modules/commonSms.js?	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Antivirus Detection	Reputation
cdn-wan.ludashi.com.w.kunlunle.com	122.225.67.170	true	false	0%, Virustotal, Browse	unknown
s.ludashi.com	47.117.76.6	true	false		high
cdn-file.ludashi.com.m.alikunlun.net	101.227.25.228	true	false	0%, Virustotal, Browse	unknown
cdn-ssl-wan.ludashi.com.m.alikunlun.com	115.238.192.242	true	false	0%, Virustotal, Browse	unknown
cdn-file-ssl-wan.ludashi.com.m.alikunlun.com	115.231.152.248	true	false	1%, Virustotal, Browse	unknown
i.ludashi.com	120.27.82.56	true	false		high
wan.ludashi.com	139.129.105.182	true	false		high
cdn-file-ssl-pc.ludashi.com.m.alikunlun.com	220.189.197.2	true	false		unknown
cdn-ssl-wan.ludashi.com	unknown	unknown	false		high
cdn-file.ludashi.com	unknown	unknown	false		high
cdn-wan.ludashi.com	unknown	unknown	false		high
cdn-file-ssl-wan.ludashi.com	unknown	unknown	false		high
cdn-file-ssl-pc.ludashi.com	unknown	unknown	false		high

Contacted URLs

Name	Malicious	Reputation
http://cdn-file.ludashi.com/assets/sea/sea.js	false	high
http://s.ludashi.com/wan?type=weiduan&action=run&channel=taskpop&mid=b8a4400180ee20f44982cb4d73d6fcd7&mid2=3b2907f96b378f57275538e3aa2275c022a86ca52985&uid=d&appver=&modver=3.2.5.61&sign=9b84d8656243359058d483a8a31c82eb&from=taskpop_sdly&forcetick=6957500	false	high
http://cdn-file.ludashi.com/wan/micro/sdly/assets_lds/v1/news-bg.png	false	high
http://cdn-file.ludashi.com/wan/micro/sdly/assets_lds/v1/input_reg_act.png?t=20191021	false	high
http://cdn-wan.ludashi.com/assets/superjs/config.js?v=20210527	false	high
http://s.ludashi.com/wan?type=weiduan&action=install_extra&channel=taskpop&mid=b8a4400180ee20f44982cb4d73d6fcd7&mid2=3b2907f96b378f57275538e3aa2275c022a86ca52985&uid=d&appver=&modver=3.2.5.61&sign=09a4c8a590c5800dbff510f4906e940d&from=taskpop_sdly&forcetick=6955062	false	high

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
http://cdn-file.ludashi.com/wan/micro/sdly/assets_lds/v1/third_weixin.pngu	sdly.exe, 00000013.00000002.623369231.0000000000DE2000.00000004.00000020.sdmp	false		high
http://wan.ludashi.com/micro/sdly/index_lds.html?channel=taskpop&from=taskpop_wd_sdly$	sdly.exe, 00000013.00000002.622907464.0000000000B34000.00000004.00000001.sdmp	false		high
http://search.chol.com/favicon.ico	sdly.exe, 00000013.00000002.627244852.0000000003D53000.00000002.00000001.sdmp	false		high
http://www.mercadolivre.com.br/	sdly.exe, 00000013.00000002.627244852.0000000003D53000.00000002.00000001.sdmp	false	URL Reputation: safe URL Reputation: safe URL Reputation: safe	unknown
http://cdp.rapidssl.com/RapidSSLRSACA2018.crl0L	sdly.exe, 00000013.00000002.630965679.00000000055AC000.00000004.00000001.sdmp	false		high
http://www.merlin.com.pl/favicon.ico	sdly.exe, 00000013.00000002.627244852.0000000003D53000.00000002.00000001.sdmp	false	URL Reputation: safe URL Reputation: safe URL Reputation: safe	unknown
http://www.dailymail.co.uk/	sdly.exe, 00000013.00000002.627244852.0000000003D53000.00000002.00000001.sdmp	false	URL Reputation: safe URL Reputation: safe URL Reputation: safe	unknown
http://cdn-file.ludashi.com/wan/micro/sdly/assets_lds/v1/third_weixin.pngj	sdly.exe, 00000013.00000002.623369231.0000000000DE2000.00000004.00000020.sdmp	false		high
http://wan.ludashi.com/micro/sdly/	sdly.exe, 00000013.00000002.630949222.00000000055A1000.00000004.00000001.sdmp	false		high
https://cdn-ssl-wan.ludashi.com/assets/superjs/pageMicro.js?v=20210527...	sdly.exe, 00000013.00000002.631203443.000000000568F000.00000004.00000001.sdmp	false		high
http://cdn-file-ssl-wan.ludashi.com/wan/wan/7z.dll7z_download_success7z_download_failStartEx3.2623.1	mAGs0IsoB7.exe	false		high
http://cdn-file.ludashi.com/wan/micro/sdly/assets_lds/v1/cir.png%	sdly.exe, 00000013.00000002.627707442.0000000004282000.00000004.00000001.sdmp	false		high
http://www.fontbureau.com/designers	sdly.exe, 00000013.00000002.631954364.00000000079A6000.00000002.00000001.sdmp	false		high
http://fr.search.yahoo.com/	sdly.exe, 00000013.00000002.627244852.0000000003D53000.00000002.00000001.sdmp	false		high
http://wan.ludashi.com/site/sdly?id=9384	sdly.exe, 00000013.00000003.465125377.000000000BA77000.00000004.00000001.sdmp, sdly.exe, 00000013.00000002.644087909.000000000C06A000.00000004.00000001.sdmp	false		high
http://cdn-file.ludashi.com/wan/micro/sdly/assets_lds/v1/cir.png....4b0	sdly.exe, 00000013.00000002.627707442.0000000004282000.00000004.00000001.sdmp	false		high
http://wan.ludashi.com/micro/sdly/index_lds.html?channel=taskpop&from=taskpop_wd_sdly&	sdly.exe, 00000013.00000002.650620079.000000000CF1A000.00000004.00000001.sdmp	false		high
https://cdn-ssl-wan.ludashi.com/assets/superjs/modules/commonLoginApi.js?v=20200810y/i6	sdly.exe, 00000013.00000002.627707442.0000000004282000.00000004.00000001.sdmp	false		high
http://in.search.yahoo.com/	sdly.exe, 00000013.00000002.627244852.0000000003D53000.00000002.00000001.sdmp	false		high
http://img.shopzilla.com/shopzilla/shopzilla.ico	sdly.exe, 00000013.00000002.627244852.0000000003D53000.00000002.00000001.sdmp	false		high
http://www.galapagosdesign.com/DPlease	sdly.exe, 00000013.00000002.631954364.00000000079A6000.00000002.00000001.sdmp	false	URL Reputation: safe URL Reputation: safe URL Reputation: safe	unknown
http://msk.afisha.ru/	sdly.exe, 00000013.00000002.627244852.0000000003D53000.00000002.00000001.sdmp	false		high
http://www.msn.com/?ocid=iehps	sdly.exe, 00000013.00000002.627651205.0000000004256000.00000004.00000001.sdmp	false		high
http://wan.ludashi.com/micro/sdly/index_lds.html?channel=taskpop&from=taskpop_wd_sdlyM	sdly.exe, 00000013.00000002.623474504.0000000000E25000.00000004.00000020.sdmp	false		high
https://cdn-ssl-wan.ludashi.com/assets/superjs/pageMicro.js?v=20210527t	sdly.exe, 00000013.00000002.627566811.0000000004209000.00000004.00000001.sdmp	false		high
http://cdn-file.ludashi.com/wan/micro/sdly/assets_lds/v1/log_btn.png=taskpop_wd_sdly	sdly.exe, 00000013.00000002.623474504.0000000000E25000.00000004.00000020.sdmp	false		high
http://wan.ludashi.com/micro/sdly/index_lds.html?channel=taskpop&from=taskpop_wd_sdlyL	sdly.exe, 00000013.00000002.623474504.0000000000E25000.00000004.00000020.sdmp	false		high
http://busca.igbusca.com.br//app/static/images/favicon.ico	sdly.exe, 00000013.00000002.627244852.0000000003D53000.00000002.00000001.sdmp	false	URL Reputation: safe URL Reputation: safe URL Reputation: safe	unknown
https://cdn-ssl-wan.ludashi.com/assets/superjs/modules/commonLoginApi.js?v=20200810LMEM	sdly.exe, 00000013.00000002.631203443.000000000568F000.00000004.00000001.sdmp	false		high
http://cdn-file.ludashi.com/wan/micro/sdly/assets_lds/v1/bg.jpg&from=taskpop_wd_sdly	sdly.exe, 00000013.00000002.623474504.0000000000E25000.00000004.00000020.sdmp	false		high
http://wan.ludashi.com/micro/sdly/index_lds.html?channel=taskpop&from=taskpop_wd_sdlyJ	sdly.exe, 00000013.00000003.429098466.000000000423C000.00000004.00000001.sdmp, sdly.exe, 00000013.00000002.623474504.0000000000E25000.00000004.00000020.sdmp	false		high
http://cdn-file.ludashi.com/wan/micro/sdly/assets_lds/v1/cir.png=	sdly.exe, 00000013.00000002.627707442.0000000004282000.00000004.00000001.sdmp	false		high
http://www.ya.com/favicon.ico	sdly.exe, 00000013.00000002.627244852.0000000003D53000.00000002.00000001.sdmp	false		high
http://cdn-file.ludashi.com/wan/micro/sdly/assets_lds/v1/input_reg_act.png?t=20191021iu	sdly.exe, 00000013.00000002.627601801.0000000004225000.00000004.00000001.sdmp	false		high
https://cdn-ssl-wan.ludashi.com/assets/superjs/pageMicro.js?v=20210527~	sdly.exe, 00000013.00000002.631203443.000000000568F000.00000004.00000001.sdmp	false		high
http://www.etmall.com.tw/favicon.ico	sdly.exe, 00000013.00000002.627244852.0000000003D53000.00000002.00000001.sdmp	false	URL Reputation: safe URL Reputation: safe URL Reputation: safe	unknown
http://it.search.dada.net/favicon.ico	sdly.exe, 00000013.00000002.627244852.0000000003D53000.00000002.00000001.sdmp	false	URL Reputation: safe URL Reputation: safe URL Reputation: safe	unknown
https://yxtg.taojike.com.cn/exitpage/client_new.html	sdly.exe, 00000013.00000003.465125377.000000000BA77000.00000004.00000001.sdmp, sdly.exe, 00000013.00000002.631335343.00000000056F5000.00000004.00000001.sdmp	false	Avira URL Cloud: safe	unknown
http://cdn-file.ludashi.com/wan/micro/sdly/assets_lds/v1/input_log_pwd.png?t=201910210t	sdly.exe, 00000013.00000002.627601801.0000000004225000.00000004.00000001.sdmp	false		high
http://cdn-wan.ludashi.com/assets/superjs/config.js?v=20210527(	sdly.exe, 00000013.00000003.440280617.00000000042A8000.00000004.00000001.sdmp	false		high
http://search.hanafos.com/favicon.ico	sdly.exe, 00000013.00000002.627244852.0000000003D53000.00000002.00000001.sdmp	false	URL Reputation: safe URL Reputation: safe URL Reputation: safe	unknown
http://cgi.search.biglobe.ne.jp/favicon.ico	sdly.exe, 00000013.00000002.627244852.0000000003D53000.00000002.00000001.sdmp	false	Avira URL Cloud: safe	unknown
http://search.msn.co.jp/results.aspx?q=	sdly.exe, 00000013.00000002.627244852.0000000003D53000.00000002.00000001.sdmp	false	URL Reputation: safe URL Reputation: safe URL Reputation: safe	unknown
https://cdn-ssl-wan.ludashi.com/assets/superjs/modules/commonTool.js?v=20210527p	sdly.exe, 00000013.00000003.460013558.000000000BEF1000.00000004.00000001.sdmp	false		high
http://buscar.ozu.es/	sdly.exe, 00000013.00000002.627244852.0000000003D53000.00000002.00000001.sdmp	false	URL Reputation: safe URL Reputation: safe URL Reputation: safe	unknown
https://cdn-ssl-wan.ludashi.com/assets/superjs/modules/commonTool.js?v=20210527w	sdly.exe, 00000013.00000002.642640489.000000000BAF6000.00000004.00000001.sdmp	false		high
http://wan.ludashi.com/api/CheckGameStatus?callback=jQuery183022485800102059378_1623676997348ee	sdly.exe, 00000013.00000002.627601801.0000000004225000.00000004.00000001.sdmp	false		high
http://cdn-file.ludashi.com/wan/micro/sdly/assets_lds/v1/input_reg_pwd.png?t=20191021~u	sdly.exe, 00000013.00000002.627601801.0000000004225000.00000004.00000001.sdmp	false		high
http://s.ludashi.com/	sdly.exe, 00000013.00000002.631017458.00000000055DC000.00000004.00000001.sdmp	false		high
http://www.microsofttranslator.com/BVPrev.aspx?ref=IE8Activity	sdly.exe, 00000013.00000002.627244852.0000000003D53000.00000002.00000001.sdmp	false		high
http://www.symauth.com/cps0(	mAGs0IsoB7.exe, 00000001.00000003.356429891.00000000037DB000.00000004.00000001.sdmp, wow_helper.exe.1.dr	false		high
http://cdn-file.ludashi.com/wan/micro/sdly/assets_lds/v1/input_log_act.png?t=20191021	sdly.exe, 00000013.00000002.627601801.0000000004225000.00000004.00000001.sdmp	false		high
http://www.ask.com/	sdly.exe, 00000013.00000002.627244852.0000000003D53000.00000002.00000001.sdmp	false		high
http://wan.ludashi.com/site/sdly?id=9162	sdly.exe, 00000013.00000003.465125377.000000000BA77000.00000004.00000001.sdmp, sdly.exe, 00000013.00000002.644087909.000000000C06A000.00000004.00000001.sdmp	false		high
http://s.ludashi.com/wan?type=weiduan&action=install_extra&channel=taskpop&mid=b8a4400180ee20f44982c	mAGs0IsoB7.exe, 00000001.00000002.424455611.00000000037CA000.00000004.00000001.sdmp	false		high
http://www.google.it/	sdly.exe, 00000013.00000002.627244852.0000000003D53000.00000002.00000001.sdmp	false		high
http://search.auction.co.kr/	sdly.exe, 00000013.00000002.627244852.0000000003D53000.00000002.00000001.sdmp	false	URL Reputation: safe URL Reputation: safe URL Reputation: safe	unknown
http://cdn-file.ludashi.com/assets/sea/sea.jsK1	sdly.exe, 00000013.00000002.627707442.0000000004282000.00000004.00000001.sdmp	false		high
http://www.amazon.de/	sdly.exe, 00000013.00000002.627244852.0000000003D53000.00000002.00000001.sdmp	false		high
http://sads.myspace.com/	sdly.exe, 00000013.00000002.627244852.0000000003D53000.00000002.00000001.sdmp	false		high
http://www.symauth.com/rpa00	mAGs0IsoB7.exe, 00000001.00000003.356429891.00000000037DB000.00000004.00000001.sdmp, wow_helper.exe.1.dr	false		high
https://cdn-ssl-wan.ludashi.com/assets/superjs/modules/commonLoginApi.js?v=20200810cript	sdly.exe, 00000013.00000002.627707442.0000000004282000.00000004.00000001.sdmp	false		high
http://s.conchdesktop.com/desktop?pid=	CefView.exe	false	Avira URL Cloud: safe	unknown
http://l.public.ludashi.com/pc/Updata/Usuallog	sdly.exe	false		high
http://www.pchome.com.tw/favicon.ico	sdly.exe, 00000013.00000002.627244852.0000000003D53000.00000002.00000001.sdmp	false	URL Reputation: safe URL Reputation: safe URL Reputation: safe	unknown
http://browse.guardian.co.uk/favicon.ico	sdly.exe, 00000013.00000002.627244852.0000000003D53000.00000002.00000001.sdmp	false	URL Reputation: safe URL Reputation: safe URL Reputation: safe	unknown
http://google.pchome.com.tw/	sdly.exe, 00000013.00000002.627244852.0000000003D53000.00000002.00000001.sdmp	false	URL Reputation: safe URL Reputation: safe URL Reputation: safe	unknown
http://list.taobao.com/browse/search_visual.htm?n=15&q=	sdly.exe, 00000013.00000002.627244852.0000000003D53000.00000002.00000001.sdmp	false		high
http://www.360.cn	mAGs0IsoB7.exe, 00000001.00000003.356429891.00000000037DB000.00000004.00000001.sdmp, wow_helper.exe.1.dr	false		high
http://www.rambler.ru/favicon.ico	sdly.exe, 00000013.00000002.627244852.0000000003D53000.00000002.00000001.sdmp	false		high
http://wan.ludashi.com/micro/sdly/index_lds.html?channel=taskpop&from=taskpop_wd_sdlyfj	sdly.exe, 00000013.00000002.627707442.0000000004282000.00000004.00000001.sdmp	false		high
http://cdn-file.ludashi.com/wan/micro/sdly/assets_lds/v1/cir.pngw	sdly.exe, 00000013.00000002.627707442.0000000004282000.00000004.00000001.sdmp	false		high
http://uk.search.yahoo.com/	sdly.exe, 00000013.00000002.627244852.0000000003D53000.00000002.00000001.sdmp	false		high
http://wan.ludashi.com/=.0	sdly.exe, 00000013.00000002.627542984.00000000041F0000.00000004.00000001.sdmp	false		high
http://wan.ludashi.com/site/sdly?id=10805	sdly.exe, 00000013.00000002.627601801.0000000004225000.00000004.00000001.sdmp, sdly.exe, 00000013.00000002.641802551.000000000BA2E000.00000004.00000001.sdmp, sdly.exe, 00000013.00000003.465125377.000000000BA77000.00000004.00000001.sdmp, sdly.exe, 00000013.00000002.644087909.000000000C06A000.00000004.00000001.sdmp	false		high
http://s.ludashi.com/url2?pid=	CefView.exe	false		high
http://www.ozu.es/favicon.ico	sdly.exe, 00000013.00000002.627244852.0000000003D53000.00000002.00000001.sdmp	false	URL Reputation: safe URL Reputation: safe URL Reputation: safe	unknown
http://search.sify.com/	sdly.exe, 00000013.00000002.627244852.0000000003D53000.00000002.00000001.sdmp	false		high
http://openimage.interpark.com/interpark.ico	sdly.exe, 00000013.00000002.627244852.0000000003D53000.00000002.00000001.sdmp	false		high
http://search.yahoo.co.jp/favicon.ico	sdly.exe, 00000013.00000002.627244852.0000000003D53000.00000002.00000001.sdmp	false	URL Reputation: safe URL Reputation: safe URL Reputation: safe	unknown
http://www.gmarket.co.kr/	sdly.exe, 00000013.00000002.627244852.0000000003D53000.00000002.00000001.sdmp	false	URL Reputation: safe URL Reputation: safe URL Reputation: safe	unknown
http://www.founder.com.cn/cn/bThe	sdly.exe, 00000013.00000002.631954364.00000000079A6000.00000002.00000001.sdmp	false	URL Reputation: safe URL Reputation: safe URL Reputation: safe	unknown
http://cdn-wan.ludashi.compageRegister.js?v=20210429pageThirdInfo.js?v=20200716modules/commonSms.js?	sdly.exe, 00000013.00000003.446760410.000000000BAF7000.00000004.00000001.sdmp	false	Avira URL Cloud: safe	unknown
http://search.nifty.com/	sdly.exe, 00000013.00000002.627244852.0000000003D53000.00000002.00000001.sdmp	false		high
https://cdn-ssl-wan.ludashi.com/assets/superjs/modules/commonTool.js?v=20210527D	sdly.exe, 00000013.00000002.642592365.000000000BAF0000.00000004.00000001.sdmp	false		high
https://cdn-file-ssl.ludashi.com	sdly.exe, 00000013.00000002.627601801.0000000004225000.00000004.00000001.sdmp, sdly.exe, 00000013.00000002.639042379.000000000AD00000.00000004.00000001.sdmp, sdly.exe, 00000013.00000002.629382480.00000000049CF000.00000004.00000001.sdmp, index_lds[1].htm.19.dr	false		high
http://wan.ludashi.com/	sdly.exe, 00000013.00000002.627542984.00000000041F0000.00000004.00000001.sdmp	false		high
http://www.google.si/	sdly.exe, 00000013.00000002.627244852.0000000003D53000.00000002.00000001.sdmp	false		high
http://wan.ludashi.com/site/sdly?id=10805D	sdly.exe, 00000013.00000002.623369231.0000000000DE2000.00000004.00000020.sdmp	false		high
http://www.soso.com/	sdly.exe, 00000013.00000002.627244852.0000000003D53000.00000002.00000001.sdmp	false		high
http://cdn-file.ludashi.com/wan/micro/sdly/assets_lds/v1/third_qq.png.	sdly.exe, 00000013.00000002.627707442.0000000004282000.00000004.00000001.sdmp	false		high
http://busca.orange.es/	sdly.exe, 00000013.00000002.627244852.0000000003D53000.00000002.00000001.sdmp	false		high
http://cnweb.search.live.com/results.aspx?q=	sdly.exe, 00000013.00000002.627244852.0000000003D53000.00000002.00000001.sdmp	false		high
http://auto.search.msn.com/response.asp?MT=	sdly.exe, 00000013.00000002.626948880.0000000003C60000.00000002.00000001.sdmp	false		high

Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public

IP	Domain	Country	ASN	ASN Name	Malicious
120.27.82.56	i.ludashi.com	China	37963	CNNIC-ALIBABA-CN-NET-APHangzhouAlibabaAdvertisingCoLtd	false
139.129.105.182	wan.ludashi.com	China	37963	CNNIC-ALIBABA-CN-NET-APHangzhouAlibabaAdvertisingCoLtd	false
101.227.25.228	cdn-file.ludashi.com.m.alikunlun.net	China	4812	CHINANET-SH-APChinaTelecomGroupCN	false
47.117.76.6	s.ludashi.com	China	37963	CNNIC-ALIBABA-CN-NET-APHangzhouAlibabaAdvertisingCoLtd	false
122.225.67.170	cdn-wan.ludashi.com.w.kunlunle.com	China	58461	CT-HANGZHOU-IDCNo288Fu-chunRoadCN	false
115.238.192.242	cdn-ssl-wan.ludashi.com.m.alikunlun.com	China	136190	CHINATELECOM-ZHEJIANG-JINHUA-IDCJINHUAZHEJIANGProvince	false
115.231.152.248	cdn-file-ssl-wan.ludashi.com.m.alikunlun.com	China	136190	CHINATELECOM-ZHEJIANG-JINHUA-IDCJINHUAZHEJIANGProvince	false
47.117.70.170	unknown	China	37963	CNNIC-ALIBABA-CN-NET-APHangzhouAlibabaAdvertisingCoLtd	false
220.189.197.2	cdn-file-ssl-pc.ludashi.com.m.alikunlun.com	China	4134	CHINANET-BACKBONENo31Jin-rongStreetCN	false

General Information

Joe Sandbox Version:	32.0.0 Black Diamond
Analysis ID:	433863
Start date:	14.06.2021
Start time:	06:20:38
Joe Sandbox Product:	CloudBasic
Overall analysis duration:	0h 12m 56s
Hypervisor based Inspection enabled:	false
Report type:	full
Sample file name:	mAGs0IsoB7.exe
Cookbook file name:	default.jbs
Analysis system description:	Windows 10 64 bit v1803 with Office Professional Plus 2016, Chrome 85, IE 11, Adobe Reader DC 19, Java 8 Update 211
Run name:	Run with higher sleep bypass
Number of analysed new started processes analysed:	33
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled HDC enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal45.evad.winEXE@3/128@9/9
EGA Information:	Failed
HDC Information:	Successful, ratio: 0.5% (good quality ratio 0.5%) Quality average: 75.7% Quality standard deviation: 24.1%
HCA Information:	Successful, ratio: 75% Number of executed functions: 154 Number of non-executed functions: 176
Cookbook Comments:	Adjust boot time Enable AMSI Sleeps bigger than 120000ms are automatically reduced to 1000ms Found application associated with file extension: .exe
Warnings:	Show All Exclude process from analysis (whitelisted): taskhostw.exe, MpCmdRun.exe, SearchUI.exe, RuntimeBroker.exe, backgroundTaskHost.exe, audiodg.exe, BackgroundTransferHost.exe, WMIADAP.exe, SgrmBroker.exe, conhost.exe, svchost.exe, wuapihost.exe Excluded IPs from analysis (whitelisted): 104.43.139.144, 13.64.90.137, 2.20.84.85, 20.50.102.62, 8.241.79.126, 8.241.83.126, 67.26.137.254, 8.241.89.254, 8.238.28.254, 20.54.26.129, 20.82.209.183, 92.122.213.194, 92.122.213.247, 20.190.160.2, 20.190.160.67, 20.190.160.73, 20.190.160.129, 20.190.160.6, 20.190.160.132, 20.190.160.4, 20.190.160.69, 20.54.104.15 Excluded domains from analysis (whitelisted): www.tm.lg.prod.aadmsa.akadns.net, fs-wildcard.microsoft.com.edgekey.net, fs-wildcard.microsoft.com.edgekey.net.globalredir.akadns.net, a1449.dscg2.akamai.net, arc.msn.com, consumerrp-displaycatalog-aks2eap-europe.md.mp.microsoft.com.akadns.net, login.live.com, audownload.windowsupdate.nsatc.net, arc.trafficmanager.net, displaycatalog.mp.microsoft.com, watson.telemetry.microsoft.com, auto.au.download.windowsupdate.com.c.footprint.net, img-prod-cms-rt-microsoft-com.akamaized.net, prod.fs.microsoft.com.akadns.net, au-bg-shim.trafficmanager.net, skypedataprdcolwus17.cloudapp.net, iris-de-prod-azsc-neu.northeurope.cloudapp.azure.com, fs.microsoft.com, displaycatalog-rp-europe.md.mp.microsoft.com.akadns.net, ris-prod.trafficmanager.net, e1723.g.akamaiedge.net, ctldl.windowsupdate.com, skypedataprdcolcus16.cloudapp.net, www.tm.a.prd.aadg.akadns.net, consumerrp-displaycatalog-aks2aks-europe.md.mp.microsoft.com.akadns.net, iris-de-prod-azsc-uks.uksouth.cloudapp.azure.com, login.msa.msidentity.com, ris.api.iris.microsoft.com, blobcollector.events.data.trafficmanager.net, displaycatalog-rp.md.mp.microsoft.com.akadns.net, neu-consumerrp-displaycatalog-aks2aks-europe.md.mp.microsoft.com.akadns.net Not all processes where analyzed, report is missing behavior information Report size exceeded maximum capacity and may have missing disassembly code. Report size exceeded maximum capacity and may have missing network information. Report size getting too big, too many NtAllocateVirtualMemory calls found. Report size getting too big, too many NtDeviceIoControlFile calls found. Report size getting too big, too many NtEnumerateKey calls found. Report size getting too big, too many NtOpenKeyEx calls found. Report size getting too big, too many NtProtectVirtualMemory calls found. Report size getting too big, too many NtQueryValueKey calls found.

Simulations

Behavior and APIs

Time	Type	Description
06:24:22	API Interceptor	19x Sleep call for process: sdly.exe modified

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Link	Context
120.27.82.56	icgAiUeVGv.exe	Get hash	malicious	Browse	i.ludashi.com/ajax/gettoken?user_from=youxi&callback=jQuery183012363156929511493_1597829271039&_=1597829275628
120.27.82.56	oWaVUlA05C.exe	Get hash	malicious	Browse	i.ludashi.com/ajax/gettoken?user_from=youxi&callback=jQuery183027719053962145756_1597825781402&_=1597825785410
139.129.105.182	icgAiUeVGv.exe	Get hash	malicious	Browse	wan.ludashi.com/announce/list?callback=jQuery183012363156929511493_1597829271038&type=2&gid=cjzg&skip=0&num=5&_=1597829275038
139.129.105.182	oWaVUlA05C.exe	Get hash	malicious	Browse	wan.ludashi.com/announce/list?callback=jQuery183027719053962145756_1597825781401&type=2&gid=cjzg&skip=0&num=5&_=1597825785093
47.117.76.6	KuMTnLOuSZ.exe	Get hash	malicious	Browse
	KuMTnLOuSZ.exe	Get hash	malicious	Browse
	o5ZGIQwDed.exe	Get hash	malicious	Browse
	17mqa66sU6.exe	Get hash	malicious	Browse
122.225.67.170	o5ZGIQwDed.exe	Get hash	malicious	Browse
	UM6rAJhKEq.exe	Get hash	malicious	Browse
	IJ9cCBb4Tv.exe	Get hash	malicious	Browse

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Link	Context
cdn-wan.ludashi.com.w.kunlunle.com	KuMTnLOuSZ.exe	Get hash	malicious	Browse	122.225.67.190
	o5ZGIQwDed.exe	Get hash	malicious	Browse	122.225.67.170
	UM6rAJhKEq.exe	Get hash	malicious	Browse	122.225.67.170
	mAGs0IsoB7.exe	Get hash	malicious	Browse	122.225.67.180
	IJ9cCBb4Tv.exe	Get hash	malicious	Browse	122.225.67.170
	KuMTnLOuSZ.exe	Get hash	malicious	Browse	122.225.67.189
	o5ZGIQwDed.exe	Get hash	malicious	Browse	122.225.67.189
	17mqa66sU6.exe	Get hash	malicious	Browse	58.216.17.182
	FjzWYXTUop.exe	Get hash	malicious	Browse	122.225.67.193
	icgAiUeVGv.exe	Get hash	malicious	Browse	114.80.24.207
	oWaVUlA05C.exe	Get hash	malicious	Browse	114.80.24.213
cdn-file.ludashi.com.m.alikunlun.net	KuMTnLOuSZ.exe	Get hash	malicious	Browse	101.227.25.212
	o5ZGIQwDed.exe	Get hash	malicious	Browse	101.227.25.212
	UM6rAJhKEq.exe	Get hash	malicious	Browse	101.227.25.229
	mAGs0IsoB7.exe	Get hash	malicious	Browse	101.227.25.229
	IJ9cCBb4Tv.exe	Get hash	malicious	Browse	125.77.169.238
	KuMTnLOuSZ.exe	Get hash	malicious	Browse	125.77.169.248
	o5ZGIQwDed.exe	Get hash	malicious	Browse	125.77.169.248
	17mqa66sU6.exe	Get hash	malicious	Browse	101.227.25.210
	FjzWYXTUop.exe	Get hash	malicious	Browse	221.231.83.238
	icgAiUeVGv.exe	Get hash	malicious	Browse	218.91.221.116
	oWaVUlA05C.exe	Get hash	malicious	Browse	218.91.221.117
cdn-ssl-wan.ludashi.com.m.alikunlun.com	KuMTnLOuSZ.exe	Get hash	malicious	Browse	115.231.152.242
	o5ZGIQwDed.exe	Get hash	malicious	Browse	115.231.152.242
	UM6rAJhKEq.exe	Get hash	malicious	Browse	115.238.192.241
	IJ9cCBb4Tv.exe	Get hash	malicious	Browse	115.238.192.238
	KuMTnLOuSZ.exe	Get hash	malicious	Browse	117.21.230.240
	o5ZGIQwDed.exe	Get hash	malicious	Browse	115.238.192.240
	17mqa66sU6.exe	Get hash	malicious	Browse	115.231.152.248
	FjzWYXTUop.exe	Get hash	malicious	Browse	119.96.78.242
	icgAiUeVGv.exe	Get hash	malicious	Browse	114.80.24.229
	oWaVUlA05C.exe	Get hash	malicious	Browse	180.163.149.239
s.ludashi.com	KuMTnLOuSZ.exe	Get hash	malicious	Browse	47.117.70.170
	o5ZGIQwDed.exe	Get hash	malicious	Browse	47.117.70.170
	UM6rAJhKEq.exe	Get hash	malicious	Browse	106.15.48.27
	mAGs0IsoB7.exe	Get hash	malicious	Browse	106.15.48.27
	IJ9cCBb4Tv.exe	Get hash	malicious	Browse	106.15.48.27
	KuMTnLOuSZ.exe	Get hash	malicious	Browse	106.15.48.27
	o5ZGIQwDed.exe	Get hash	malicious	Browse	106.15.48.27
	17mqa66sU6.exe	Get hash	malicious	Browse	47.117.76.6
	FjzWYXTUop.exe	Get hash	malicious	Browse	139.224.193.172
	S38G0o4jF9.exe	Get hash	malicious	Browse	182.92.34.21

ASN

Match	Associated Sample Name / URL	SHA 256	Detection	Link	Context
CNNIC-ALIBABA-CN-NET-APHangzhouAlibabaAdvertisingCoLtd	KuMTnLOuSZ.exe	Get hash	malicious	Browse	47.117.70.170
	o5ZGIQwDed.exe	Get hash	malicious	Browse	47.117.70.170
	UM6rAJhKEq.exe	Get hash	malicious	Browse	106.15.48.27
	mAGs0IsoB7.exe	Get hash	malicious	Browse	106.15.48.27
	IJ9cCBb4Tv.exe	Get hash	malicious	Browse	106.15.48.27
	KuMTnLOuSZ.exe	Get hash	malicious	Browse	106.15.48.27
	o5ZGIQwDed.exe	Get hash	malicious	Browse	106.15.48.27
	17mqa66sU6.exe	Get hash	malicious	Browse	47.117.76.6
	FjzWYXTUop.exe	Get hash	malicious	Browse	139.224.193.172
	czmPR2gmQI.exe	Get hash	malicious	Browse	121.40.19.56
	6K6EBFC653	Get hash	malicious	Browse	101.201.199.196
	MedMooc.exe	Get hash	malicious	Browse	120.27.25.246
	#U8c37#U6b4c#U97e9#U6587#U8f93#U5165#U6cd5(Google Korean Input)_011589485.exe	Get hash	malicious	Browse	60.205.177.239
	tgb4.exe	Get hash	malicious	Browse	39.98.88.43
	testtotesnotrealname.exe	Get hash	malicious	Browse	47.102.143.195
	xiaoan_3.0.apk	Get hash	malicious	Browse	203.119.214.123
	h5plugin_1.1.apk	Get hash	malicious	Browse	47.104.217.248
	98b537971f7b5b5331c4b1ce0079633c.apk	Get hash	malicious	Browse	115.29.160.1
	6883966fd8f918a4aa29be29d2c386fb-1 (1).apk	Get hash	malicious	Browse	47.96.37.170
	Makbuz kopyas#U0131 onayland#U0131 5.26.21.exe	Get hash	malicious	Browse	39.102.59.240
CNNIC-ALIBABA-CN-NET-APHangzhouAlibabaAdvertisingCoLtd	KuMTnLOuSZ.exe	Get hash	malicious	Browse	47.117.70.170
	o5ZGIQwDed.exe	Get hash	malicious	Browse	47.117.70.170
	UM6rAJhKEq.exe	Get hash	malicious	Browse	106.15.48.27
	mAGs0IsoB7.exe	Get hash	malicious	Browse	106.15.48.27
	IJ9cCBb4Tv.exe	Get hash	malicious	Browse	106.15.48.27
	KuMTnLOuSZ.exe	Get hash	malicious	Browse	106.15.48.27
	o5ZGIQwDed.exe	Get hash	malicious	Browse	106.15.48.27
	17mqa66sU6.exe	Get hash	malicious	Browse	47.117.76.6
	FjzWYXTUop.exe	Get hash	malicious	Browse	139.224.193.172
	czmPR2gmQI.exe	Get hash	malicious	Browse	121.40.19.56
	6K6EBFC653	Get hash	malicious	Browse	101.201.199.196
	MedMooc.exe	Get hash	malicious	Browse	120.27.25.246
	#U8c37#U6b4c#U97e9#U6587#U8f93#U5165#U6cd5(Google Korean Input)_011589485.exe	Get hash	malicious	Browse	60.205.177.239
	tgb4.exe	Get hash	malicious	Browse	39.98.88.43
	testtotesnotrealname.exe	Get hash	malicious	Browse	47.102.143.195
	xiaoan_3.0.apk	Get hash	malicious	Browse	203.119.214.123
	h5plugin_1.1.apk	Get hash	malicious	Browse	47.104.217.248
	98b537971f7b5b5331c4b1ce0079633c.apk	Get hash	malicious	Browse	115.29.160.1
	6883966fd8f918a4aa29be29d2c386fb-1 (1).apk	Get hash	malicious	Browse	47.96.37.170
	Makbuz kopyas#U0131 onayland#U0131 5.26.21.exe	Get hash	malicious	Browse	39.102.59.240

JA3 Fingerprints

Match	Associated Sample Name / URL	SHA 256	Detection	Link	Context
37f463bf4616ecd445d4a1937da06e19	lc3of5dOat.exe	Get hash	malicious	Browse	115.238.192.242
	zYIgBtTNii.exe	Get hash	malicious	Browse	115.238.192.242
	v5BF2xbrST.exe	Get hash	malicious	Browse	115.238.192.242
	zXgPNPqubH.exe	Get hash	malicious	Browse	115.238.192.242
	cyIabcIBpj.exe	Get hash	malicious	Browse	115.238.192.242
	pVs9Vm0z1O.exe	Get hash	malicious	Browse	115.238.192.242
	Q7wxFhc4yZ.exe	Get hash	malicious	Browse	115.238.192.242
	FK1RtVDPVt.exe	Get hash	malicious	Browse	115.238.192.242
	mid5ag333h.exe	Get hash	malicious	Browse	115.238.192.242
	3HvqVSJrRe.exe	Get hash	malicious	Browse	115.238.192.242
	research-1234799369.xlsb	Get hash	malicious	Browse	115.238.192.242
	DHL_2761228.exe	Get hash	malicious	Browse	115.238.192.242
	comprobante de pago.exe	Get hash	malicious	Browse	115.238.192.242
	Facturas__Electronicas__Pdf__2021__4SDJFK34JKSHASL456LKSDFJ2DFKYJAS23346IKHHDFJ.vbs	Get hash	malicious	Browse	115.238.192.242
	audit-528010081.xlsb	Get hash	malicious	Browse	115.238.192.242
	b9f5bca9a22f08aad48674bc42e4eaf72ab8aa3d652ba.exe	Get hash	malicious	Browse	115.238.192.242
	3.exe	Get hash	malicious	Browse	115.238.192.242
	audit-1133808478.xlsb	Get hash	malicious	Browse	115.238.192.242
	tXkin8g4sy.exe	Get hash	malicious	Browse	115.238.192.242
	xGrfj8RvYg.exe	Get hash	malicious	Browse	115.238.192.242

Dropped Files

Match	Associated Sample Name / URL	SHA 256	Detection	Link
C:\Users\user\AppData\Local\Temp\{A9E2EC10-0FDD-4dca-8860-E90690C0157A}.tmp\CefRes.dll	KuMTnLOuSZ.exe	Get hash	malicious	Browse
	o5ZGIQwDed.exe	Get hash	malicious	Browse
	UM6rAJhKEq.exe	Get hash	malicious	Browse
	mAGs0IsoB7.exe	Get hash	malicious	Browse
	IJ9cCBb4Tv.exe	Get hash	malicious	Browse
	KuMTnLOuSZ.exe	Get hash	malicious	Browse
	o5ZGIQwDed.exe	Get hash	malicious	Browse
	17mqa66sU6.exe	Get hash	malicious	Browse
	FjzWYXTUop.exe	Get hash	malicious	Browse
C:\Users\user\AppData\Local\Temp\WdGame_sdly\NetBridge.dll	KuMTnLOuSZ.exe	Get hash	malicious	Browse
	o5ZGIQwDed.exe	Get hash	malicious	Browse
	UM6rAJhKEq.exe	Get hash	malicious	Browse
	mAGs0IsoB7.exe	Get hash	malicious	Browse
	IJ9cCBb4Tv.exe	Get hash	malicious	Browse
	KuMTnLOuSZ.exe	Get hash	malicious	Browse
	o5ZGIQwDed.exe	Get hash	malicious	Browse
	17mqa66sU6.exe	Get hash	malicious	Browse
	FjzWYXTUop.exe	Get hash	malicious	Browse

Created / dropped Files

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\commonTool[1].js Download File
Process:	C:\Users\user\AppData\Roaming\WdGame\sdly\sdly.exe
File Type:	UTF-8 Unicode text, with very long lines, with CRLF line terminators
Category:	downloaded
Size (bytes):	28191
Entropy (8bit):	4.765319479982372
Encrypted:	false
SSDEEP:	384:QCV2SvA+ExnO/L33rGV/G70ErU+1IcI7coAQXlcG+U0rEA0rEbaZcYMvR1MjMqIP:QpSvA+qnOjLw/m1zc/VKUyccR1MjMhP
MD5:	62FBEB7AB3A48B20EF33600FC8EA5465
SHA1:	6BE30ECCAE4FD34A7D83CCE1EFF2F57C048E7A20
SHA-256:	84757406545E7C19676BC7F3660602502A86E63C4A3022705967EED9C33CBA11
SHA-512:	ADC685D9EC4929CC75407240FE17E77DB878FCBE9342FE06DF4BE659857942A42BD226ECD5AD57B6DF0713928453FCBB58749390C8BD6D35E5D5EFDD4BCD77C3
Malicious:	false
Reputation:	low
IE Cache URL:	https://cdn-ssl-wan.ludashi.com/assets/superjs/modules/commonTool.js?v=20210527
Preview:	/*.. ......... @author zhanghengpu.. /....define(function(require, exports, module) {.... var commonTool = {};.... commonTool = {.. getSiteUrl:function(urlPath){.. var urlBase = location.protocol+'//'+location.host;.. if (typeof urlPath != 'undefined') {.. if (urlPath.search('http://') < 0 && urlPath.search('//') < 0 && urlPath.search('https://') < 0 ) {.. return urlBase + urlPath; .. }else{.. return urlPath;.. }.. }.... return urlBase;.. },.. getAjaxData:function(type, url, params, _callback){.. $.ajax({.. type: type,.. url: url,.. data: params,.. dataType:'jsonp',.. jsonp:'callback',.. success: _callback.. });.. },.. jsonToStr: function(obj) {.. var _this = this;.. va

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\gettoken[1].json Download File
Process:	C:\Users\user\AppData\Roaming\WdGame\sdly\sdly.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	176
Entropy (8bit):	4.80275815206873
Encrypted:	false
SSDEEP:	3:RAVdSXXRSXpcV4KEQ6G9pQHOu5xVLVuCV1QZDJcOgFiRqzjEM7cvB3MAMGe:LEZcV4/GLl2TLVfzOgkRqXEN8Aa
MD5:	1E583C072A69D8DC0DEC17F2CD55636F
SHA1:	54207EE063B334BAF944152A5598139F4FB6FAD5
SHA-256:	54F0F021B7D6ABBA2BC07458E73E9CE6F206640CFFCB326CF715A58814FAF929
SHA-512:	411063EA5556760062F9016537B9027335A09BA2BA2CE428BFAA385C15E44BDC0756396C0086A75C1915E17B751B25329245564E5E831AAB81F704ED478DFBFA
Malicious:	false
Reputation:	low
IE Cache URL:	http://i.ludashi.com/ajax/gettoken?user_from=youxi&callback=jQuery183022485800102059378_1623676997348&_=1623677003159
Preview:	jQuery183022485800102059378_1623676997348({"errno":0,"msg":"\u83b7\u53d6token\u6210\u529f\uff0c5\u5206\u949f\u6709\u6548","data":{"token":"f18100f09d650abb8dde778fed340dd6"}});

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\input_log_code[1].png Download File
Process:	C:\Users\user\AppData\Roaming\WdGame\sdly\sdly.exe
File Type:	PNG image data, 158 x 30, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	1603
Entropy (8bit):	7.826727394337073
Encrypted:	false
SSDEEP:	48:UkBD+pzTbGRRdVG+JZW1XhFR1V+5xl2sHdop5HaiAN:fBDeTKRpchhFRn+5xHumN
MD5:	2ECBC1453276E9BD508A61D4D8C233F5
SHA1:	FF9BAFAD409B73DFD402D060C5B4474167B1F4D2
SHA-256:	44560FA96F769689BAF512003FD75323E6E6E9DB9A5CD7522A013DFDECF0CD1E
SHA-512:	099EDBD006157AEAC6FB740DEAE3729D245A232448AB27660F1EA3110D5BDDAC92943252B4BE903EB97DE2E3269493DF50D687C88DCCF736ACCDAE7EF3769611
Malicious:	false
Reputation:	low
IE Cache URL:	http://cdn-file.ludashi.com/wan/micro/sdly/assets_lds/v1/input_log_code.png?t=20191021
Preview:	.PNG........IHDR..............5......IDATx^..lSU.....4.td.@..?&{....!.-j...h...!b$...H[.k. QC4.%....0...0...M1B.2.$....-...+m.;.>x....=.&.....{.=.{?......s...\F.-.RI{.s...6..lV....?..\..MS4....<..J.3P@.7......H.k(-.@....D.C.+ .s...0.....h2.C...>:m....ATTV......>D.Sf]..'4..Nm.V....GP.5Y...V..j...A-..._&.~..-...\|.d..I.................Z\|.v..A.7..f...^GG..a^v....(..J...X@<.........x.B.....k.[.9..&.Ss...7{.=..R^..z.5.........9..:.N.\..Y&%-.U`9.....Nt..9Q..c.v$...B....t....1.H2..1..u...D.Q.F'...j....5,.E.0.wA..v.F... N.j.;..q....Ot.{.55..D..o..Vh./n?...1..6..l...:.1.^&..E.E.q...u.x.<...#.6L....$w.e6.....~.^....{..98..g...o$.}Ca^..b.[.G....\|....1.K...[....k..e...#..o:j=..w.KE.....>f....&ZG..P...>...7.h.h.h#`c@.....=..FS`...}.KD.Dh.......8...i0..p]k.u...l[~d..3.{...f:.H...k?.:......Xa...5...Pn+).7...t_..#K....Q.....2.l.......d..:..G....c...........f....+..,?D6-.......M....N...b.L4.. ........r7.e.s...^g.?R.....KS...`0..!..\n@..{......%.."...^..

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\input_reg_act[1].png Download File
Process:	C:\Users\user\AppData\Roaming\WdGame\sdly\sdly.exe
File Type:	PNG image data, 345 x 35, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	2056
Entropy (8bit):	7.84403178184536
Encrypted:	false
SSDEEP:	48:Uqjj+6OqtTlID+6q967V6UwmIdYOAemzw5NlLCbh:UqjjjO6TlID+qVImMYjemzwzlL6
MD5:	438B1D52C1D19F3E3829D9ABAA3E91FD
SHA1:	34CAC5CEF055DC1ECDFC7DF74E6736B5055CF96B
SHA-256:	24DD3C96B0E95FDD836D7ABAE2127519A864C2BCED711DD04136AB1DDC79CC34
SHA-512:	830778BD95A22DD6ED9DAD6C46BA19BF3523DDAC6F6DE77870E9C3AD56ED44E0E88BD371C47D8ECA8B833BDBA802116420644114058DFED1DBC56610194DA448
Malicious:	false
Reputation:	low
IE Cache URL:	http://cdn-file.ludashi.com/wan/micro/sdly/assets_lds/v1/input_reg_act.png?t=20191021
Preview:	.PNG........IHDR...Y...#.....><y.....IDATx^.]L.....gv..`9..`..&`...A.&.k&n$..R.(i+.ZPT..j.@.Bv0.\|.ch..,.U..V.PU%..............%MhD.Rv.T..S...Y.n....{..\.t....\|..<.-....&X......J..?.N.m..v.xq...5kc.mk..! .....]N.;]..H...dO......u.X.YJ...h#...s.U.E.w.V$.mG].#."C@$;.w.ld.......HV$.mgZ.#.V....HvE.HIF.D....H6...G..(."Y..:.....6.......>%f.\...F..]891.bgf=n...r.N.1K....".(.P.e`8...~...r.k..d.......J.......>.....y.....z.C..$;...`.W..........X.b.8..... .N"....B-..9CD..%'.....6...cff.. Z..f.oI..q;....E_J.f..g.....M......#.+aJ..r(...2...N..w.xx.CE".)K..... ...z..m...Y%......Y%......N....=f.XO.R..x...\|.D..6...5M..u....\...q~B...J......p.b..R.C...B $....Ro3....JU..uo.3%l--..J.......+..Nv....__].@.@..>..@8.k.0..(..........D.K.Z*.]..\|/..@X..J.u.f.zbv.z.U.lbvY...Q6...+.7\..N.`...4;...e...r.U....l...97d..dC`&.B@.,=....jl.....P.\5~.&eW.......Z.d_.?]..p..]z..../}Z..Qn\|E.............'=bW....W.F.......0.).." .>.I;..^7....SO.&n..iL....e"...J....A....

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\log_btn[1].png Download File
Process:	C:\Users\user\AppData\Roaming\WdGame\sdly\sdly.exe
File Type:	PNG image data, 223 x 78, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	35047
Entropy (8bit):	7.9911312569730395
Encrypted:	true
SSDEEP:	768:ydn6D9CVLZP8D8xqhg5GWPiL8LfKWpo9USsF7tINFIJT4k:EnQ9uLZUDrSgIiL8LfKNUrGeEk
MD5:	EC910F7E6A65D4362B8776E7B3AD1A52
SHA1:	91F5F0FC4BC2123959325C0E85F410C8DF1B552B
SHA-256:	774B93B8E931522D896855793CE6B19F87A26348A0860BF67F38824CEEE80FCA
SHA-512:	9F62861CA0D46CD3870C1CAA2E5E0FE6FBDDECDE875DA346D22BB3EF6290BDE930880C2CCA1BE50FD594C4D2C996D113C15A4EC5E4C269C8B055045EE65779CE
Malicious:	false
Reputation:	low
IE Cache URL:	http://cdn-file.ludashi.com/wan/micro/sdly/assets_lds/v1/log_btn.png
Preview:	.PNG........IHDR.......N........... .IDATx^...\U.>...}...}I...'@H"...A@q.@q...3....AEA.%..@.iB..:kwz....}...9..V*.g...{..NW...s....}..P..}(..in.=..={.....V..A...y.0.l.....]>..]....+..t....d.f.....9...:.....-ii.D"..pt.@1.....7<\.K......=.2.....lT.....8Ss6.....gY#u.-......=AQ.j_o..s.N...C..O......cg.\,I8.`.....s....B...z..Sy.........w<.@ ....9v.....+,....W`.n.......W.t..O..$.N.5....g......jZ....8.{...}....&.E..._I+r.P.Gx.~>/.Cz.~......g?..5.._.......nr.#.5..:.....!W.m6....=V...o....6n$6...?3...w..9.e.9...67E..O...<k......G..o.n........da....iaa..P...}.jkW.....5V.u..]W....[.......vm^}../..+..z..2+.Y1=81...P.....{k.........v.6T...\|....+W....93.../...V..W..(J}...P.H.?.6.._.....Zd..._Y.f.}..../d.Pk}....K...WV..........#.z.j..O.6.Ty.&Ss.3..Xn......."...K.?...i..r.......LC!..}...uvv.\|..DT....#./G3.QV..RN....Y..</.i....%)..ht`..........k.....h.<_............7.H.o.\|..k.....g..../>.y...t....Tssum8..O..D..7..KO.....b.B^.....c

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\news-bg[1].png Download File
Process:	C:\Users\user\AppData\Roaming\WdGame\sdly\sdly.exe
File Type:	PNG image data, 65 x 17, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	3915
Entropy (8bit):	7.812392088353486
Encrypted:	false
SSDEEP:	96:PQkcUU3zxhORbN/dWBgBivMik/m3zpHBmQbLbTk:PruyHdWBgcIKzSQbXTk
MD5:	F54CE52FABBA9384351CF92C9516C383
SHA1:	8EC1A674E77443B5FCF41DCBB961E2F12E0AB97E
SHA-256:	6FE9AD228F3CD89F9F3BE596D456F64E56B62746A02530F18F393F4CA62F2E61
SHA-512:	A1D604278EFED639CBD3EF3836B80DCEFC5C45DD2788433AC5EFC245DDBB0142E79589A032CFD7095D331D7E3DAC5BCB4C49F3690016AA38D82AAB0D1A2BED17
Malicious:	false
IE Cache URL:	http://cdn-file.ludashi.com/wan/micro/sdly/assets_lds/v1/news-bg.png
Preview:	.PNG........IHDR...A..........y......tEXtSoftware.Adobe ImageReadyq.e<...fiTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:2F9B575C5295E811B5479A177797EF55" xmpMM:DocumentID="xmp.did:ACB8DF0395F811E89B1FA07D18E58C81" xmpMM:InstanceID="xmp.iid:ACB8DF0295F811E89B1FA07D18E58C81" xmp:CreatorTool="Adobe Photoshop CS6 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:76F72BA45B95E811A92ABB565D057B64" stRef:documentID="xmp.did:2F9B575C5295E811B5479A177797EF55"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>...a...{IDATx.X{XT..?...................[_r...R

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\wan[1].txt Download File
Process:	C:\Users\user\AppData\Roaming\WdGame\sdly\sdly.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	4
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:Ln:Ln
MD5:	B73FDAA1FB7669DA760B49600C45D9BE
SHA1:	39D0D38B6B9A01E2894DB59A9985BA2DF6C895D9
SHA-256:	3A5088295708D3304F06DE0499B9243BFBD68D14878615C531F0E346F47B389D
SHA-512:	57E58B658F9E042986714D82919B526E69414F04B10EEC62B2734BB9374549F3CFE447D48E81236617A928789FA3ABB9E35F0DD58A326AAC155CB246BCEAF348
Malicious:	false
IE Cache URL:	http://s.ludashi.com/wan?type=weiduan&action=add_uninst_item&channel=taskpop&mid=b8a4400180ee20f44982cb4d73d6fcd7&mid2=3b2907f96b378f57275538e3aa2275c022a86ca52985&uid=d&appver=&modver=3.2.5.61&sign=79ea5434ed60d529ca960c4c6957a02e&from=taskpop_sdly&forcetick=6954625
Preview:	okok

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\input_reg_code[1].png Download File
Process:	C:\Users\user\AppData\Roaming\WdGame\sdly\sdly.exe
File Type:	PNG image data, 197 x 35, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	2733
Entropy (8bit):	7.900463179390043
Encrypted:	false
SSDEEP:	48:CuR3OhzYhT9zg0EYqlCXk+cm0RXqqiutuNg8gFGn2Izqe5kLnf3NT:CxtYfYlb+cvaqvuNg8f2IOL/Z
MD5:	F45C1EB97F2EC7C8770B98CE9EE07871
SHA1:	A278730D3A7942CCAAFA21F7290543683583D309
SHA-256:	5EEFD1CEDB3906FEC615B2FF653B506CB65998477EDCEA8220A79A19DC3B9A51
SHA-512:	986EA3D3DD9A5775DF15D1BE1F3B52604B1A39096BD2BAF4FDBFD23E77AA68E0A55E9574D692CD24F5D354E4DA5C42510689C0414E8F782CD75B784F22C5BE64
Malicious:	false
IE Cache URL:	http://cdn-file.ludashi.com/wan/micro/sdly/assets_lds/v1/input_reg_code.png?t=20191021
Preview:	.PNG........IHDR.......#.....$%.o...tIDATx^..pT.....%...I01.IV.$.......u....Q[:u.8..cmY ....H K...C.8.#3...v..E.A...H......S....{O.=..lb6....+.{.......`~".x8w....FS....S.M#.....E..._z}\|..1.4#L.......7.....P.e...o.7.B.t..._.`.N....`B1r.0..`.M(L(..\|........f.0a..A.#..&p...?...g-.D.vC.M..-?D.....q..?c.e..O....~..{.O^.....?.8G...p....x......;$#_.b.I..-..l.1.a_........G....e.J&....f`...;c...b8..G....k..f[....=B....%....kZ7VI@3.:...@Crv....G6k.^~.2..$[H..I.L#...."..\|.Q.Y.Q.&.H!7.x .T...JJ...1..2...j.Q'bOq...".d.d.....I.Q^..@sSrJ....i..q?..b....a.Nd.o....K.....e.........R5.d.?.q........@.v~.v#3.O.)K..1.L.J.)../...v..EJvi.p..b8..G.H(..y..R............._..I.3&.U".e.s'd...K..q.B)e.......UUO "h?...J:....#.d..5.E....@....{..\|.r.>.ns.#o....S.#`9wxM3.[Sr..e..L...PT.O..(.6..p.-y..m...E...q90.....A......"..w!KYG./({.K..i..\..+]..&.T..VD....W......'9..].m.cf...e9..V.'..y..e....b(.M......yN.[..C..w2..D.......G.#..W...s...DMz....l.%o.?{.?{......^..

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\input_reg_pwd[1].png Download File
Process:	C:\Users\user\AppData\Roaming\WdGame\sdly\sdly.exe
File Type:	PNG image data, 345 x 35, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	2305
Entropy (8bit):	7.88690011416867
Encrypted:	false
SSDEEP:	48:nxMTVT1ASvAWjQHSh7W0+fGXzc4To6PDyP1Q8:nkVT1VvrM/TeXzNTo6PDyN1
MD5:	2D5F1696F6C245DC0E283727F99BA80D
SHA1:	5FF33DAE5633FFA68AE05EA93DAE16BAF9264413
SHA-256:	19136CDCF4C802B3D2099CF90EAE31A88076BE9C49178F8FFD643B6525F3B9BE
SHA-512:	1ACC443EE9144053FE230EA56F130AFFB56F8DD336CA9C82AB131A29019936D2D0F0DBD58139E26B5AB90BE7B6A79E97DDAD49506770352438535D03CEE36810
Malicious:	false
IE Cache URL:	http://cdn-file.ludashi.com/wan/micro/sdly/assets_lds/v1/input_reg_pwd.png?t=20191021
Preview:	.PNG........IHDR...Y...#.....><y.....IDATx^..PT......ht....e..Z.`......d.cb&v......N3.6.."bvQ........Np&.f.L.Nc.......Z.J..}k@.)..M"..w:o..E..uEfs.........\...A>B.......Q.E...!p...8Dw;H...1{..;.%.....\|....@.g.4.....l7.d....i.w...rH(! .........v_X.l.mu....?.D.a..d....B ...dE..e>B`P...d...d.@....d.mO.\|...".o.~Y.5..]D\5f..lP...$#w.....).....-Y...s;..F......^..a...BU..o3h.F.r.......{.D..H6.j.G.....B${..l../.........!...b..jm......R..)...{z..<...2W.G..H6.j.G...^%...o.c!)T...."....&{.p %k..c.Z..9...<.M...=n.l.>W.o6...}.tv..p%)k.....~...)L/%M].z4..d..&}....]..(}...q.........h...x...kOu<o:.y....>o.).P.2. &..q.liv ......5.w......})......k6e..!..R.). .e..FCM...!.d/Wo~..JV...g.K...c.:d..x...5..5.Cf.1.i.....c.:....t\N..M5.}.M.2~Za.2../Wo..P.Zn...>...73.....{m...$.....3&>Zt2..D..P.>B@..Y....#mg..i..M.l.9...3.W.j..Q.gT2.F@.M@..J.Z.$.P..r=.'...*..o.6...iE......`.}.B^.=....Kr..h7...L.h...FCM...!.d.N.{.(..#F..[..`K....t$........e...../.l.d.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\main[1].css Download File
Process:	C:\Users\user\AppData\Roaming\WdGame\sdly\sdly.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	downloaded
Size (bytes):	10338
Entropy (8bit):	5.170553242847006
Encrypted:	false
SSDEEP:	192:AD6U6GN9Bct5rCi5zrX2X2bp4eMwXDj3a6/JUbEue:Q6UH9BvkT4ZwXDj3aq3L
MD5:	D738E1514919958964D42D7EFBE4430D
SHA1:	1BF7D348A6E80EECD5B55C22EB1DE98689EE8E5E
SHA-256:	63472DACE0E0138C4B4C013ADF0A9B649C1BEADBBC7463BFA7A57C64B8B03C7A
SHA-512:	6C9B97305DD28FE0EB74CAAAD90B4402697504C85F5E13438AF59C5EA28956327356065CFA790DE2DBC8D198DF2CB9C0768F6652DB070C3EE56CF262146266A9
Malicious:	false
IE Cache URL:	http://cdn-file.ludashi.com/wan/micro/sdly/assets_lds/v1/main.css
Preview:	*{padding:0;margin:0}body{overflow:hidden}li{list-style:none}a{text-decoration:none}img{border:0}.fl{float:left}.fr{float:right}.clb{clear:both}.none{display:none}.outer{width:848px;height:480px;position:relative;background:url("//cdn-file.ludashi.com/wan/micro/sdly/assets_lds/v1/bg.jpg") 0 0 no-repeat}.nav{width:551px;height:26px;position:absolute;left:271px;top:4px;background:url("//cdn-file.ludashi.com/wan/micro/sdly/assets_lds/v1/nav.png") 0 center no-repeat}.nav ul{overflow:hidden}.nav li{float:left}.nav a{display:block;width:80px;height:26px;position:absolute;top:0}.nav .nav_1{left:0}.nav .nav_2{left:100px}.nav .nav_3{right:106px}.nav .nav_4{right:0}.login-body{width:610px;height:370px;position:absolute;left:237px;top:69px;overflow:hidden}.login-before{padding:0;height:100%;box-sizing:border-box}.slide-news{width:341px;position:relative;float:left}.slide{width:100%;height:186px}.slide img{width:100%;height:100%}.slide-cir{position:absolute;bottom:10px;left:0;z-index:2}.slide-cir

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\pageMicro[1].js Download File
Process:	C:\Users\user\AppData\Roaming\WdGame\sdly\sdly.exe
File Type:	UTF-8 Unicode text, with CRLF line terminators
Category:	downloaded
Size (bytes):	34425
Entropy (8bit):	4.813784803155087
Encrypted:	false
SSDEEP:	384:M3Lv2V/Y62LzYyvJy9MQoa+AWBKVOdmLDf3Ni1jb6HQom5:MIuY8Q9MqDfVQ
MD5:	53637DDCA6C502FB53378D56CB33EEDB
SHA1:	AEFA8DD4086F96E7744FC5EA7EAAAB44DB353D98
SHA-256:	F9B8DE7FE6FB2A6DDB9C9678D43844A282A436CECE126A040139B8FD1A40F91E
SHA-512:	2786213D6778ACA3C51D46B2F2043B30EE3099DC65459ECB6122018DC6DE37B49010BF70714BA961509D8C41DC605230E9FDF3B144A8C680DE2215487D158BF0
Malicious:	false
IE Cache URL:	https://cdn-ssl-wan.ludashi.com/assets/superjs/pageMicro.js?v=20210527
Preview:	/*.. ...--........ @author zhanghengpu.. /....define(function(require, exports, module) {.... var commonTool = require('commonTool');.... var pageMicro = {.. debug:false,.. game_id:'',.. extend:'',.. channel:'',.. isChannelApk:false,.. from:'',.. pageFrom:"outside",.. clickCountType:"outside_login_wd",.. new_server_id:0,.. init_notices:false,.. init_servers:false,.. init_hotgame:true,.. init_channel_from:true,.. checkFirst:true,.. jumpNewServer:false,.. userHistoryKey:"localcachekey_",.. noticePageKey:'0',.. noticeWrap:"#newsWrap",.. noticeDisplay:5,.. noticeListUrl:"//wan.ludashi.com/announce/list",.. hotGameWrap:"#hotGameWrap",.. hotGameCache:{},.. hotGameUrl:"//wan.ludashi.com/cms/microclient/hot.php",.. serverTabNum:6,.. serverRecentWrap:"#serverRecentWrap",.. serverTabWrap:"

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\sea[1].js Download File
Process:	C:\Users\user\AppData\Roaming\WdGame\sdly\sdly.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	8504
Entropy (8bit):	5.463830962615999
Encrypted:	false
SSDEEP:	192:hLTnM7vkOBpTf4L5pAPa6aF3a81MdgicdNKiHrD8YRDyQ:hT4kOBpTf4L5aaF3akMdXcvzHHlt/
MD5:	26A812EDE84886A75880D9A2E723A00F
SHA1:	A601CEF80A60A99200950123AC9821E1B26C5581
SHA-256:	A930A3AEF9A72482C88962BB979CE88D3628ABC918DB3C0A0F9491A8BA0C1F5D
SHA-512:	CE28F673B09B7DCA2ED07BBF05A3B764998A9D6055099F4974D1219AB9B569A6FE4AFA7FA96796E0F398B6DB8ADE8ED127982FDA2C6B428ED258ACDB22B8C0AB
Malicious:	false
IE Cache URL:	http://cdn-file.ludashi.com/assets/sea/sea.js
Preview:	/! Sea.js 3.0.0 \| seajs.org/LICENSE.md /.!function(a,b){function c(a){return function(b){return{}.toString.call(b)=="[object "+a+"]"}}function d(){return A++}function e(a){return a.match(D)[0]}function f(a){for(a=a.replace(E,"/"),a=a.replace(G,"$1/");a.match(F);)a=a.replace(F,"/");return a}function g(a){var b=a.length-1,c=a.charCodeAt(b);return 35===c?a.substring(0,b):".js"===a.substring(b-2)\|\|a.indexOf("?")>0\|\|47===c?a:a+".js"}function h(a){var b=v.alias;return b&&x(b[a])?b[a]:a}function i(a){var b=v.paths,c;return b&&(c=a.match(H))&&x(b[c[1]])&&(a=b[c[1]]+c[2]),a}function j(a){var b=v.vars;return b&&a.indexOf("{")>-1&&(a=a.replace(I,function(a,c){return x(b[c])?b[c]:a})),a}function k(a){var b=v.map,c=a;if(b)for(var d=0,e=b.length;e>d;d++){var f=b[d];if(c=z(f)?f(a)\|\|a:a.replace(f[0],f[1]),c!==a)break}return c}function l(a,b){var c,d=a.charCodeAt(0);if(J.test(a))c=a;else if(46===d)c=(b?e(b):v.cwd)+a;else if(47===d){var g=v.cwd.match(K);c=g?g[0]+a.substring(1):a}else c=v.base+a;return

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\upload[1].jpg Download File
Process:	C:\Users\user\AppData\Roaming\WdGame\sdly\sdly.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 341x186, frames 3
Category:	downloaded
Size (bytes):	45983
Entropy (8bit):	7.9889658763369
Encrypted:	false
SSDEEP:	768:PbCwwCFqec1gatgPRM6FzC7ooP2k41Ngezk/U0c0WZFLMm2UBe1OpaJ06nZ:PbhFrhamPXddNtw8C6SWosaJ3
MD5:	998F964E86AC83E15FC400AEB2AF0563
SHA1:	E6AA095FC12741E900C0515873CF19251F73FAE3
SHA-256:	E3E69D0475B159982753607C61ACBF1EB7E97BCF5B09DABDEB1BF77614ED70FC
SHA-512:	326DCB0209B37DC568A674DE8678257F4B016DD295C1FF14BF041034F13F204EFEB4532463BC7837027ABD07978EA21CB43C9A1E7A46BD11C6EEAC24888D3B27
Malicious:	false
IE Cache URL:	http://cdn-file.ludashi.com/wan/micro/sdly/assets_lds/v1/upload.jpg
Preview:	......JFIF.............C....................................................................C.........................................................................U........................................................................................\W@......A.w...)..."r;}..Tix-r?.....!.;..\|..~H...H.FC.77.=^."...........{......&...+...'...D6..-.T......y...FegmB..........j.....w.....W;..8zX..3..`.1~.E.;(T._}:.Q".(...c.i^&.f.9:^.g.1.............A{.s0g...E.oe...=.........Nz.._s\|.U....g.U..h.L....w....R..h...m9[3.\|.q.} .iE.<......b.W.Kr...%.C.)...2.._...}.F.f.q...A'+OOZ..$..gs.....]F..y.........\....W..A.-.5.J.,..............O....2..G.).>.Rv...N.....p.....ZY.1.[nq..........-T.......-4K6...\|._.6....Z.5o\v.N.........>..Oa..+.......vi.~#.o.R.?V%^?.i.z.R.7H.._..:,..q............v.d.4.[.m-W....6..n.S.........-y.Z..=.x.gW........5.>.[....6.w.......c......KxD>..A...I6X...."..=.. \|S...p......".A.{....ed~l@.m..~.x.%/.....%..-....3....]6.j.E..

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\wan[1].txt Download File
Process:	C:\Users\user\Desktop\mAGs0IsoB7.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	6
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:LKO:LKO
MD5:	ADF4661FE6715ED47954193E68B63036
SHA1:	CD0C42419AD0A66AAADB9CE4E70A1B8F1F8ACF91
SHA-256:	0C8D68A94B0DD7EFD522233A6A13D4F381C2F7EB6D536DF43CF6D3F090A02256
SHA-512:	E381CE0D812A96ADD78C7CEBC00CE0A31D539E4318B12F0599D01E304021AF0669D4F735E99FFD2543BB43C6B5D29DF553B12076042AFACB3826E35D5A1EF336
Malicious:	false
IE Cache URL:	http://s.ludashi.com/wan?type=weiduan&action=7z_noexist&channel=taskpop&mid=b8a4400180ee20f44982cb4d73d6fcd7&mid2=3b2907f96b378f57275538e3aa2275c022a86ca52985&uid=d&appver=&modver=3.2.5.61&sign=3bc1bffb6c4712a112e8ecce47d6fa79&from=taskpop_sdly&forcetick=6868015
Preview:	okokok

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\wan[2].txt Download File
Process:	C:\Users\user\AppData\Roaming\WdGame\sdly\sdly.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:V:V
MD5:	444BCB3A3FCF8389296C49467F27E1D6
SHA1:	7A85F4764BBD6DAF1C3545EFBBF0F279A6DC0BEB
SHA-256:	2689367B205C16CE32ED4200942B8B8B1E262DFC70D9BC9FBC77C49699A4F1DF
SHA-512:	9FBBBB5A0F329F9782E2356FA41D89CF9B3694327C1A934D6AF2A9DF2D7F936CE83717FB513196A4CE5548471708CD7134C2AE99B3C357BCABB2EAFC7B9B7570
Malicious:	false
IE Cache URL:	http://s.ludashi.com/wan?type=accurate&action=t0&channel=taskpop&from=taskpop_wd_sdly&mid=b8a4400180ee20f44982cb4d73d6fcd7&appver=3.2.5.61&uid=0&game=sdly&timestamp=1623677002764&ex_ary[guid]=
Preview:	ok

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\wan[3].txt Download File
Process:	C:\Users\user\AppData\Roaming\WdGame\sdly\sdly.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:V:V
MD5:	444BCB3A3FCF8389296C49467F27E1D6
SHA1:	7A85F4764BBD6DAF1C3545EFBBF0F279A6DC0BEB
SHA-256:	2689367B205C16CE32ED4200942B8B8B1E262DFC70D9BC9FBC77C49699A4F1DF
SHA-512:	9FBBBB5A0F329F9782E2356FA41D89CF9B3694327C1A934D6AF2A9DF2D7F936CE83717FB513196A4CE5548471708CD7134C2AE99B3C357BCABB2EAFC7B9B7570
Malicious:	false
IE Cache URL:	http://s.ludashi.com/wan?type=accurate&action=t2&channel=taskpop&from=taskpop_wd_sdly&mid=b8a4400180ee20f44982cb4d73d6fcd7&appver=3.2.5.61&uid=0&game=sdly&timestamp=1623677032782&ex_ary[guid]=
Preview:	ok

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\bg[1].jpg Download File
Process:	C:\Users\user\AppData\Roaming\WdGame\sdly\sdly.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 848x480, frames 3
Category:	downloaded
Size (bytes):	150597
Entropy (8bit):	7.989004946954709
Encrypted:	false
SSDEEP:	3072:50/k0OnBNSZtt3kQpEiiXPTuOGc1ItT+ijsVXiUKDIaes:28ZmZnkQmRbu3vHEi9DIc
MD5:	452F85F8C564269CE178F025A90C1483
SHA1:	11B699BD5D8F899578B4A519EBDE62FD1789AEE5
SHA-256:	1EA5F5C61D9EF4FC66BEF252649F9EF4910E8741C94AE992CBC0F04CFEFFD763
SHA-512:	DBF8B9E3891E489C6FFE21E534A52864D237C00F57AD8E9924C76B3955F31607731DA71B85809BCDBA82BA7D12ACABC682EAFFA295F86D40DD50B40257B8B990
Malicious:	false
IE Cache URL:	http://cdn-file.ludashi.com/wan/micro/sdly/assets_lds/v1/bg.jpg
Preview:	......JFIF.............C....................................................................C.........................................................................P..............................................................................................?........t.X}5.....^l..\.~<7o..='c.c..G..........n............9[g..v.y.5....o..........'g.k.G.ta.'W....<}.>a...k....k.Z.!.]...K.,%s"..w..V9tM^.WB...m...U.....,_;.n.q...?r'.<...........z.o..oC.....o....^ul.;...x.f.?R.,.._A\|=..2=.C.t~......"1....W.U.kj....5M..XD6$mPj.z!z..F.Gv..p.\|.s.g.>+.c7..=..=C..u........I.w........}'d.o.u.'B.y...:..{....:....w.O.z~a....S,.`}O..m.s...............~A5....1.0CC......g.L...kQ2[y,......i.......... ....o"....o.t>n...z...~....y.I.%....{..{..x...S......og.....@...g.........fki[ .....[.7....#z.z.V'......kr.!z6F...n....d\|.._K>q.....K.... ..1.u..v...W.....].N.....g..e.....v..>...v..wk...?..._..\.oN...[g..r...l....-.M8..g.... ...R....[ .....".5z. ......6..=....

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\cir[1].png Download File
Process:	C:\Users\user\AppData\Roaming\WdGame\sdly\sdly.exe
File Type:	PNG image data, 4 x 7, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	1020
Entropy (8bit):	5.9443874518469375
Encrypted:	false
SSDEEP:	24:bl1he91Wwh82lYSKwUc1FyqViT3ouyJ3VRUc1KGp8T:bLqQvnL9cKq0IJ3EcItT
MD5:	9E43DD74317164DA84B254D22A4BAB53
SHA1:	A76374D07F5ADAA68408D8D7856A30BA55814AD7
SHA-256:	21E523CCB626993544479E7DA691D30CF99880118194C16D868BE70258081EF6
SHA-512:	E5C1F5630A2B2B020A42245C9C217BC7C9D09A5F2C9C405A51B835AB43090942B71690625CD0FE76CA29B384BFA078C6BD1A0C1919F381F75DEA4A06374B3FB5
Malicious:	false
IE Cache URL:	http://cdn-file.ludashi.com/wan/micro/sdly/assets_lds/v1/cir.png
Preview:	.PNG........IHDR............./e......tEXtSoftware.Adobe ImageReadyq.e<...fiTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:2F9B575C5295E811B5479A177797EF55" xmpMM:DocumentID="xmp.did:E6379550960411E896B580B88E28446E" xmpMM:InstanceID="xmp.iid:E637954F960411E896B580B88E28446E" xmp:CreatorTool="Adobe Photoshop CS6 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:700E78ABFB95E811BD1BCCEA04786753" stRef:documentID="xmp.did:2F9B575C5295E811B5479A177797EF55"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?> z._...,IDATx.b..Y..........t.. ..X.]..Y..Y.......

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\commonLoginApi[1].js Download File
Process:	C:\Users\user\AppData\Roaming\WdGame\sdly\sdly.exe
File Type:	UTF-8 Unicode text, with CRLF line terminators
Category:	downloaded
Size (bytes):	32322
Entropy (8bit):	4.750299526098472
Encrypted:	false
SSDEEP:	384:+dOjuaI96CSeH2CgpJyLVWQd3WjApd0BBd1H43dLRR7Z4vKR:+XLNW/gnQKR
MD5:	8C15896CABA628CD9EFE42116C7A3DFB
SHA1:	2DC419A3889AA0118E022D06F1E172BFE5D118EB
SHA-256:	1AE405DA05B26908C54B675BE64DB6D6BEC894C230F902E7E6897B7C694897C9
SHA-512:	681BA9235CF64A37C107D7E0B30AC72E39402B8A37F6EC460BC47AF2589FDE4E020CC295EECD1DE9817008E731200EAE52FB3DD07B81D6DF37E308FB5EA25D6A
Malicious:	false
IE Cache URL:	https://cdn-ssl-wan.ludashi.com/assets/superjs/modules/commonLoginApi.js?v=20200810
Preview:	/*.. ...-........ @author zhanghengpu.. /....define(function(require, exports, module) {.... var commonTool = require('commonTool');//.... .. var commonLoginApi = {.. game_id:'',.. extend:'',.. channel:'',.. from:'',.. prevUrl:'',.. isPop:0,.. pageFrom:"inside",.. clickCountType:"inside_login_",.. captchaWidth:70,.. captchaHeight:30,.. captchaFontSize:16,.. captchaShow:false,.. autoSetThirdLink:true,.. tipsWrap:".error_notice",.. loginFormId:"#loginForm",.. loginButton:"#loginSubmit",.. loginCallback:null,.. loginStatus:false,.. registerFormId:"#registerForm",.. registerButton:"#registerSubmit",.. registerCallback:null,.. registerStatus:false,.. smscodeShow:false,.. tokenCount:0,.. useNewThemes:false,.. showErrorMsgCallback:null,.. isPhoneRegister:false,.. lo

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\config[1].js Download File
Process:	C:\Users\user\AppData\Roaming\WdGame\sdly\sdly.exe
File Type:	UTF-8 Unicode text, with CRLF line terminators
Category:	downloaded
Size (bytes):	2992
Entropy (8bit):	5.433630078169903
Encrypted:	false
SSDEEP:	48:391aCe0zwglWSpXjuMV5m9BQiloFYKkCrDSaZH+2Qz7JzdPaepqjOkBnqf:3WMjlnpTuMVOBQiloFOCrDSO+PJzdPag
MD5:	9680DAF7C9D9E06F41550EE8D56A19E9
SHA1:	5FA542BAAB09FD10D48ECE740D2240ABEF444EA2
SHA-256:	C730345485D4B8191F055A96DA4E13CFB5D1B5DE5F22EFDEF22BA033C92FFE08
SHA-512:	B267678E0604733063B03906845AAF0FAECA17DDF5E7DEAD6C4D965B4F3CAC866F2B7A6DB65660239E150A721827ED11492DBD59F6CB2D496E6837546087A65B
Malicious:	false
IE Cache URL:	http://cdn-wan.ludashi.com/assets/superjs/config.js?v=20210527
Preview:	/*.. ...seajs...... */..if(typeof use_https === 'undefined'){.. var use_https = false;..}....// ie9.....https..if(navigator.userAgent.indexOf("compatible") > -1 && navigator.userAgent.indexOf("MSIE") > -1){.. var regIE = new RegExp("MSIE (\\d+\\.\\d+);");.. regIE.test(navigator.userAgent);.. var ieVER = parseFloat(RegExp["$1"]);.. if(ieVER<9){.. use_https = false;.. }..}....// ......https,.....https..if (location.protocol && location.protocol == 'https:') {.. use_https = true;..}....var __urlBase = "https://cdn-ssl-wan.ludashi.com";..var __urlPath = "https://cdn-file-ssl.ludashi.com";..if(!use_https){.. __urlBase = 'http://cdn-wan.ludashi.com';.. __urlPath = "http://cdn-file.ludashi.com";..}..seajs.config({.. base: __urlBase+"/assets/superjs/",.. alias: {.. "jquery": "cdnAssets/jquery/jquery183.js",.. "qrcode": "cdnAssets/qrcode/qrcode.min.js",.. 'qrcodeJquery': "cdnAssets/qrcod

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\jquery183[1].js Download File
Process:	C:\Users\user\AppData\Roaming\WdGame\sdly\sdly.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	downloaded
Size (bytes):	93565
Entropy (8bit):	5.312490777554991
Encrypted:	false
SSDEEP:	1536:8hIGG4EYrbSkPAQWSaKTlf5g42M4O5b7DuKM7G0i33Ky4J6iVM+tEKo+zt5mKhUP:wOpWR/2NK+21NGZ1gSa
MD5:	4D30FCEB0A9DA287C6F802EA05B69E3B
SHA1:	BF4CE064F2EA3D6F9AB4BE257EBD897A4078E4E3
SHA-256:	D3A9CAA7EEBC914C861DD7FB50145903D27AC6F52B18320EBA2F3D313867A577
SHA-512:	82A34EE7307CC826B0793BC9C06E3916FD42214BD52D0950E07AA71CC63C7A8D4042A8478873FD2C2EB83A23B8D4FDF6FDC02C3C312D4CB5466480EA0E36782E
Malicious:	false
IE Cache URL:	http://cdn-file.ludashi.com/assets/jquery/jquery183.js
Preview:	/! jQuery v1.8.3 jquery.com \| jquery.org/license /(function(e,t){function n(e){var t=dt[e]={};return Y.each(e.split(tt),function(e,n){t[n]=!0}),t}function r(e,n,r){if(r===t&&e.nodeType===1){var i="data-"+n.replace(mt,"-$1").toLowerCase();r=e.getAttribute(i);if(typeof r=="string"){try{r=r==="true"?!0:r==="false"?!1:r==="null"?null:+r+""===r?+r:vt.test(r)?Y.parseJSON(r):r}catch(s){}Y.data(e,n,r)}else r=t}return r}function i(e){var t;for(t in e){if(t==="data"&&Y.isEmptyObject(e[t]))continue;if(t!=="toJSON")return!1}return!0}function s(){return!1}function o(){return!0}function u(e){return!e\|\|!e.parentNode\|\|e.parentNode.nodeType===11}function a(e,t){do e=e[t];while(e&&e.nodeType!==1);return e}function f(e,t,n){t=t\|\|0;if(Y.isFunction(t))return Y.grep(e,function(e,r){var i=!!t.call(e,r,e);return i===n});if(t.nodeType)return Y.grep(e,function(e,r){return e===t===n});if(typeof t=="string"){var r=Y.grep(e,function(e){return e.nodeType===1});if(Bt.test(t))return Y.filter(t,r,!n);t=Y.filter(t,r)

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\third_weixin[1].png Download File
Process:	C:\Users\user\AppData\Roaming\WdGame\sdly\sdly.exe
File Type:	PNG image data, 76 x 38, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	4927
Entropy (8bit):	7.949006162054865
Encrypted:	false
SSDEEP:	96:mMLdR5ceT+DYGYs7dNiSO1XDZGzjTf400CWPIzvyIYLwyIFNYsrpH6vwfgFTFn1:mUdR5bmdNXOdDZob0CWPqvyIk9IFiDhR
MD5:	3783F1E3ACC2F223129173D034A30920
SHA1:	75ECE47349995085CE0E4ED0972EA8BFC57E3523
SHA-256:	E9C9B9A56FBD98C444CC5CDCFDC597FA5D4DD3D6DD1DB4B3B655B84BB344208C
SHA-512:	6A3437F3A8EF69B1573C3E5182E5F35DFE76A72562EBA6A7FBA4079BC0EFCF6BE7A8BF5F830D37CBC4F67B243985061E0140167CA9B33750119D3425D9D4E368
Malicious:	false
IE Cache URL:	http://cdn-file.ludashi.com/wan/micro/sdly/assets_lds/v1/third_weixin.png
Preview:	.PNG........IHDR...L...&.....n.}.....IDAThC..y\|TU.....^..$!.B.\| .@.!....-.....n(\|.>..5.#..8...:.b.B.mqA...."...T...d!K.U...[U!!.Ih.....w...s.=..+h..&XL.(..&.BC...3.,.".[#..4>.QtU.:O.y.\W0M..H.0...iI.CIA.0K...YC-.:E..8.W.E...r..IQ~.R...P61F0a..F0+A0../1.p.......p..}....9{.`>.I.FE.-)`..0...`.....!...1.K.J..5.A......;t..\..X....L..q..@...........^.....\D...&.....h.,zzf......0N!...4......x.&........4..v.....\..X.\..}i.C.).. .zz...gx.\..F..n2...Z..r.......=..;....q.=...h..~.p....\|t...rw....)..#.D.+y.N}.. .....xj../...l.b...x..L.....N....Ji..^...K...v.,...2...`..(`..Vc.@8..JS../.8{3t..YV.F..@]e..\.Y&.t).I...:..-.&.p....4...!....Y~.....:w._.>.\......a.D....v%\.\F..a..N\....e..(.W.J......R...US......:E... .).}...x...x.=.....C.8v.-..U.....i.B.\b.X.J.%....1.i..l..C...........+....$.q[.S+.k~.....[.@...Q..a.a$3...z..u.g.c0.._...{O.@............B....i>x57\~.\P!0.a.aRL0(..$W.........9GN.......b`...B.'.Z%>..:.y....hI@jX:,.09.[u..4..U.4..g

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\wan[1].txt Download File
Process:	C:\Users\user\AppData\Roaming\WdGame\sdly\sdly.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:V:V
MD5:	444BCB3A3FCF8389296C49467F27E1D6
SHA1:	7A85F4764BBD6DAF1C3545EFBBF0F279A6DC0BEB
SHA-256:	2689367B205C16CE32ED4200942B8B8B1E262DFC70D9BC9FBC77C49699A4F1DF
SHA-512:	9FBBBB5A0F329F9782E2356FA41D89CF9B3694327C1A934D6AF2A9DF2D7F936CE83717FB513196A4CE5548471708CD7134C2AE99B3C357BCABB2EAFC7B9B7570
Malicious:	false
IE Cache URL:	http://s.ludashi.com/wan?type=weiduan&action=7z_download_success&channel=taskpop&mid=b8a4400180ee20f44982cb4d73d6fcd7&mid2=3b2907f96b378f57275538e3aa2275c022a86ca52985&uid=d&appver=&modver=3.2.5.61&sign=557423491fe0521caf2ffd61b7905912&from=taskpop_sdly&forcetick=6871468
Preview:	ok

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\checkbox[1].png Download File
Process:	C:\Users\user\AppData\Roaming\WdGame\sdly\sdly.exe
File Type:	PNG image data, 17 x 16, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	867
Entropy (8bit):	7.72857074798045
Encrypted:	false
SSDEEP:	24:ABncg1wQB0zelKiKH6Ft+tHZvXjKdJh0pXi1:5JHycXgwy1
MD5:	A2D3BEAF27DDCDF29BAF47D299640813
SHA1:	1F728AF69A9C4D39C59CD618EBA7F45EC1CD39D6
SHA-256:	C54D294E04EF0542BFEB3F4528C9CD0563DF19E33FEFD80200896F06C6AC4CB4
SHA-512:	618503765E8E49B432DB8C06D0D41A5768940BC1ACFDF46D7511A966C0BAF19CD162B20AB5E704E7174BD8D10296E1CB06E3653BEF7EB56C09D4E719D9FC42FC
Malicious:	false
IE Cache URL:	http://cdn-file.ludashi.com/wan/micro/sdly/assets_lds/v1/checkbox.png
Preview:	.PNG........IHDR..............1._...IDAT8OU..o.E...Zz.mbbO..v2.c.8qF`...DB"..'p...$...p..H..'...8DB..S.....)!l.P.b.b..Y.....K.n...V.UUz..{..x..D.V..aA+...H.{.ad..ePR.?....{y...)...?<]..O....q..........P.......8.(......$../.-q..E.....w.....@L......X..#..R...R..l..v...93]...,7.......%.a...R...J.....r"...7...>>..g.<..Kn.../.\|3.G....u/.v.U.......Q..VHi........$".p..../?6.qx../V....{.g^y.;..G_,..9....&..u9.z......X.q....+6.......7..r.q.9.....3....?.x2..4...0..P....+M....U\.........5..w<..h..rz.Of.x.s.T9..Y.=u..&.^.\|...#..up..\| J}......S..-..j..O..W\|u...q.P+......U..t ...U........_Y].r6dj0.AK.......Mk3..\..7...r.]\%.S^....rR..W.^+.X.q...r.^.h...a..CUx(.q..C&.p......?...........%T.p.....u.).65..(.m....?.R.R.....0...R.............1..V....qx.h.M.Z..Y..v....$.{.m.0aHN+...xxl...$.uk..].@.}.^V....s`..4QkY.%;.....IEND.B`.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\index_lds[1].htm Download File
Process:	C:\Users\user\AppData\Roaming\WdGame\sdly\sdly.exe
File Type:	HTML document, UTF-8 Unicode text, with CRLF line terminators
Category:	downloaded
Size (bytes):	11466
Entropy (8bit):	4.519689848756784
Encrypted:	false
SSDEEP:	192:Sb+pA/Pv5HQNLf5AZlTrOI6NfUxI7CtVVOK+hoLPS:I/PxHQjQl3iNcxImLVOKod
MD5:	4960B09475E50DC0103021D458416639
SHA1:	82D3D9A2B68A1B1D1745A28A0AD4F84D7A684AA5
SHA-256:	0FC6C6B3646FD1D54B46211A05D864EC57DB9DE6F44197C60D10E12AE633136D
SHA-512:	22D78E4C8C2362CB07D90C7E260A9A80FDCB53749211CC60832DDB797CC53F1A9148ABE26D6B6C8350515AB573C90A48AEEA0D4EB4A7041947A8BA1F424B4CCB
Malicious:	false
IE Cache URL:	http://wan.ludashi.com/micro/sdly/index_lds.html?channel=taskpop&from=taskpop_wd_sdly
Preview:	<!doctype html>..<html lang="zh">....<head>.. <meta charset="UTF-8" />.. <title>..</title>.. <link rel="stylesheet" href="//cdn-wan.ludashi.com/micro/sdly/assets_lds/main.css" /> -->.. <link rel="stylesheet" href="//cdn-file.ludashi.com/wan/micro/sdly/assets_lds/v1/main.css" />.. <style type="text/css">.. .nav{display: none;}.. .check-box {.. height: 19px;.. overflow: hidden;.. padding-left: 70px;.. }.. </style>..</head>....<body>.. <div class="outer">.. <div class="nav">.. <ul>.. <li><a class="nav_1" href="/site/sdly" target="_blank"></a></li>.. <li><a class="nav_2" href="/pay?game=sdly&server=1" target="_blank"></a></li>.. <li><a class="nav_3" href="/download/jump?game_id=sdly" target="_blank"></a></li>.. <li><a class="nav_4" href="/service?type=1" target="_blank"></a></li>.. </ul>.. </div>.. <div cl

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\list[1].json Download File
Process:	C:\Users\user\AppData\Roaming\WdGame\sdly\sdly.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	downloaded
Size (bytes):	834
Entropy (8bit):	4.738236466418353
Encrypted:	false
SSDEEP:	24:LtGtBD0iNsh0i10FwCZ0iSJ0d6E2HE60iLnYWn0i6:Ltmrsp0Fl+JCbgEmn9A
MD5:	BB43944CA017E808FF67114EC20AF142
SHA1:	8CE74D2CF5F8DC4C90BBD409E33F500156F440F0
SHA-256:	E08F12B014E3E313F93AB17ADF69A21C2748FA32513642350D221E550023B3D4
SHA-512:	A71A56782E447C0BA960C159CE520D87A9120406F25CB2EA75DB118A65D6FE46CDF387ADB38400F36F2B0228D8E9CE4D472F0FA5432DF9170414EB26C4079271
Malicious:	false
IE Cache URL:	http://wan.ludashi.com/announce/list?callback=jQuery183022485800102059378_1623676997349&type=2&gid=sdly&skip=0&num=5&_=1623677002719
Preview:	jQuery183022485800102059378_1623676997349({"errno":0,"msg":"success","data":{"list":[{"title":"\u9c81\u5927\u5e08\u6e38\u620f\u6e05\u660e\u6d3b\u52a8","type":2,"id":11058,"stick":0,"timestamp":"2021-03-31 00:00:00"},{"title":"\u9c81\u5927\u5e08\u6e38\u620f315\u6743\u76ca\u65e5\u6d3b\u52a8","type":2,"id":10805,"stick":0,"timestamp":"2021-03-12 00:00:00"},{"title":"\u9c81\u5927\u5e08\u6e38\u620f\u5143\u5bb5\u798f\u5229\u6d3b\u52a8","type":2,"id":10599,"stick":0,"timestamp":"2021-02-24 00:00:00"},{"title":"\u9c81\u5927\u5e08\u6e38\u620f\u6708\u672b\u8fd4\u5229\uff0c\u611f\u6069\u6709\u60a8","type":2,"id":9384,"stick":0,"timestamp":"2020-10-29 00:00:00"},{"title":"\u9c81\u5927\u5e08\u6e38\u620f-\u4e2d\u79cb\u56fd\u5e86\u53cc\u8282\u5e86\u6d3b\u52a8","type":2,"id":9162,"stick":0,"timestamp":"2020-09-30 00:00:00"}],"size":25}});

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\nav[1].png Download File
Process:	C:\Users\user\AppData\Roaming\WdGame\sdly\sdly.exe
File Type:	PNG image data, 551 x 26, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	5146
Entropy (8bit):	7.9249137751195065
Encrypted:	false
SSDEEP:	96:lqmBsXYPar9B2EBZMkiOVgQMJCeEH4+PQ1fBJ+Ye3Ssl9OYfkH80SVqZ3gfe6ocl:lqiP0j2EBZBdgHJAnIVb+Yfsz6H80SK2
MD5:	68A22DA1EB2BCE91D55280A47FADB583
SHA1:	E90B2A27C2933C80B7A973E72A5946F75B5F8D0B
SHA-256:	7846611E01C7AAEADA1FFC4AC1A8517FFA2114729D1BBC44188B989FBAE9D2C6
SHA-512:	40116ACD6C82CAB45975F33847CC0D3EEDD4FC884693A12D56264BE43B5D3759764790E53B195C597238960D55413086E2B1782C1CDBF55CBFA12EF4E3B3E297
Malicious:	false
IE Cache URL:	http://cdn-file.ludashi.com/wan/micro/sdly/assets_lds/v1/nav.png
Preview:	.PNG........IHDR...'.........[.......PLTE........................................................................................................................#...../"................................................................%..............0&!.....t.h..}...[.e&.t1....>..@2.q_7...L....n[3WG(9...^..P.sDUE&=.....d..K< qB..T.bI#.]...vN1..sG.\|=dQ-J7..m..Z6&.3".2....}q_<[B.V9.F1.$..w[.WH-P@$R?.[5.,....N.yG.p@.n@J+.9....r.p..V.~J.k<.w;wd9.z8jV//....{..v..r.l.i..d.a..H\L+U0.?#.....\|ne_..V..L..H.l3.i+.Z!b:.<&.I(....]..D}jA.i-`O,.])kN%}N.{G.k?....u.i.h..W.i5\|c5.[#.Q.?1.D6.vH.C+..........n.c..^..V.tV.t?.n/wP!dB..M...........y..v.j.a..Z.YcZT..P..H.\|C.p6.f0.a$.\!......f.d..`.R..M.q/.b)8.).....v..q..R.JC:4.c(.......yr..Y..@..........owngOF@..;QD2jQ'.....k\C{~.....FtRNS......_......%..<4..9,.Dp........c .).0..tN.T.h.}?..mY#x.....H......G....IDATh...OO.`.........L.!v..V..<.E....a{.o;y.I..x7&...x.n.Jv.........F..l.....p2!...>..y....d2.LO...

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\reg[1].jpg Download File
Process:	C:\Users\user\AppData\Roaming\WdGame\sdly\sdly.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 848x480, frames 3
Category:	downloaded
Size (bytes):	174076
Entropy (8bit):	7.992366621314791
Encrypted:	true
SSDEEP:	3072:yGLvH4uaSYx45C+/kwiMVobmgBrqX7uHc0EZwUARGc9tsZGGGyTq:yC4BpL8kj8gZBWKHsZwU8Gc0kgTq
MD5:	BAC4A047BC15D810D4F842EDE9906B7F
SHA1:	F130207D56F84BB89FCDB44124CD172992865FAA
SHA-256:	7244ECDB90048589B7783EAACADF3C7678D53A42B4E661AF92090293CDB91DF5
SHA-512:	58BDFFA325BE9A34254EE0AF7C35D1BA496BD62FFB9D2DDD24C47FC030564017817C70B95FC3F3B912A6DAD59905254A7165ED7B69541357BFDB8649DB9EA9F2
Malicious:	false
IE Cache URL:	http://cdn-file.ludashi.com/wan/micro/sdly/assets_lds/v1/reg.jpg?t=20200105
Preview:	......JFIF.............C....................................................................C.........................................................................P..........................................................................................}.....k.f.........]?.._......f..u...wg...Q..v..=<?\|.s7..\|.......}.9Yg..6.y.5.....n.........'g.c.G.:0.'W....<}~\|..qV.R...k.-.....u)c...Qs.."......@<5]f.%J.V8.w...\|.v....c.D.g4.(...S....bz.oM...7....\|}u}.U.V....~.7M.h..).C.._.....:?NiTK..kz.F2B..j.....j..cT...CbF........TmTw`....._.;../\|..C.8S.x...<.B...a..E......>..y.7.:.at..^..K.F...ba.u[{.yM;...z\|.O...S,.X}O..m.k...............}.5...1.,CC......g.L...kQ2[\.T..n.uJ.g.B..p..z...+H.vw.-.Uzo..M.n...f.....>..n.{..I.%.....0a.dU.k........<..w.+.;.'3.=_.......ps3U.l.7......lH.k(.F...0.OS.!z.Jkr.!z2F..n........,...=.../..c\|....\|....e^f...".t.t....Z..l.B.e....`...v.].......jg......+Qm...L5...3+x.f..Y.r..n[Y..pq.Z...Ly....l.....\...2-.W....m .\..>a.>..1

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\third_qq[1].png Download File
Process:	C:\Users\user\AppData\Roaming\WdGame\sdly\sdly.exe
File Type:	PNG image data, 76 x 38, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	4184
Entropy (8bit):	7.943562745166503
Encrypted:	false
SSDEEP:	96:mZXMt283zwASN5E5ag1Y0ElrSlNJuNHI9AiPQYF6O1pMfF4vCqU:mZn8j3SN5kagREeNJMJiPQYFPiN4vCqU
MD5:	664EBBEEA5E330A5ADC8D729070DD213
SHA1:	6A929D0CED20C7D75FAFF558776FBBA597703209
SHA-256:	D19534767DE432AFB00CB0C0658458F0E6ED380BE08D4A0A36F5AB94E8277D2F
SHA-512:	40B96965AA7AD85BD579328A12BF3DA74C5B7CD259D0EF586054E429B48E9C16137490C6A847951730A5FD6A7D41B401CDE92955C4118161A93C50275B5A873C
Malicious:	false
IE Cache URL:	http://cdn-file.ludashi.com/wan/micro/sdly/assets_lds/v1/third_qq.png
Preview:	.PNG........IHDR...L...&.....n.}.....IDAThC.........~......dD.VKM....DFPW#...E..F]...5....f.Q.Bd@.D........5.b0)0..."..=...g...............{...{.%..]......Z.<.+.Xc... 3]......}..q,]...E...F....m.[.@-....u...D....E..h'.....f?v.../.<"..j....P(4F...0..N&.:.~...T._..Y0...!.?..Ao'....f.M...R.....XD.i&.'.r\.....bfM.,.4."`...[..=..d.a.6...S.2Vep."5...Q...H.4....s.z...Hv...MMv)/.=3...S~....^A.......%.q..k..>........s.5........a....T~.A.8.`33Z..}kmS}...o..p...."..-\....[b...q.;....EkY..'.........n.;.....W..<.TSE.H....Z.l..Lt.._+..{.y%..G....U.`......[A.._...........3...s3F.....s.S....m.K..v.....T.&l.rl........%.._.....K.r.1.e....=..H.B....HZV3..p.../..E.0...O7+Z..c..0k\W1..\|~oMH.nc...v.2X.8y..:...E.I.Lf7..J..}.....d..m.H....O.4...2S.....5z..f.&....O...-.i2.V..k.....(U..m...F.'.8.............P..B..... .sakg..XU.#.....`.4oC.lE......(b...F"..Z..z/.......o..bK..r/...!..M...........?.Ls^.............F.f\|..o..C}H..p0n......EX..b....Y.;4.W...p.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\wan[1].txt Download File
Process:	C:\Users\user\Desktop\mAGs0IsoB7.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	4
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:Ln:Ln
MD5:	B73FDAA1FB7669DA760B49600C45D9BE
SHA1:	39D0D38B6B9A01E2894DB59A9985BA2DF6C895D9
SHA-256:	3A5088295708D3304F06DE0499B9243BFBD68D14878615C531F0E346F47B389D
SHA-512:	57E58B658F9E042986714D82919B526E69414F04B10EEC62B2734BB9374549F3CFE447D48E81236617A928789FA3ABB9E35F0DD58A326AAC155CB246BCEAF348
Malicious:	false
IE Cache URL:	http://s.ludashi.com/wan?type=weiduan&action=install&channel=taskpop&mid=b8a4400180ee20f44982cb4d73d6fcd7&mid2=3b2907f96b378f57275538e3aa2275c022a86ca52985&uid=d&appver=&modver=3.2.5.61&sign=ed62ccbaa79a95c345b484e11080c4db&from=taskpop_sdly&forcetick=6867625
Preview:	okok

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\wan[2].txt Download File
Process:	C:\Users\user\AppData\Roaming\WdGame\sdly\sdly.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	4
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:Ln:Ln
MD5:	B73FDAA1FB7669DA760B49600C45D9BE
SHA1:	39D0D38B6B9A01E2894DB59A9985BA2DF6C895D9
SHA-256:	3A5088295708D3304F06DE0499B9243BFBD68D14878615C531F0E346F47B389D
SHA-512:	57E58B658F9E042986714D82919B526E69414F04B10EEC62B2734BB9374549F3CFE447D48E81236617A928789FA3ABB9E35F0DD58A326AAC155CB246BCEAF348
Malicious:	false
IE Cache URL:	http://s.ludashi.com/wan?type=accurate&action=t1&channel=taskpop&from=taskpop_wd_sdly&mid=b8a4400180ee20f44982cb4d73d6fcd7&appver=3.2.5.61&uid=0&game=sdly&timestamp=1623677012779&ex_ary[guid]=
Preview:	okok

C:\Users\user\AppData\Local\Temp\WdGame2Run_sdly\sdly.ui Download File
Process:	C:\Users\user\AppData\Roaming\WdGame\sdly\sdly.exe
File Type:	Zip archive data, at least v2.0 to extract
Category:	dropped
Size (bytes):	642005
Entropy (8bit):	7.990483347402209
Encrypted:	true
SSDEEP:	12288:HScXXP55vP5PxUtQw9YBMK5hOG9+xELF7J2lC3ZFmUAyt7w5J2Hn3ZZbQauO6j:yOXP55n5PURwSGaELOqFnAySJ2HLQaud
MD5:	E04294852554E7C92CA128437FCF3D03
SHA1:	A278D063431977A979140064C1D771220FD82D50
SHA-256:	C8C5D6A4909BE6E49EE6CF0E4B32F8E9578815B72BF0C40F9833F4B1185885E0
SHA-512:	665B18C4891731D68CD41FC6F2B3A27ACE5A0F0E126E1A7CBC6A89FE864822A4ED32C898756FE10018729A1F24466CF9EF86DAFE383E75BE36B65F8DBD228307
Malicious:	false
Preview:	PK........8..R................BrowserDlg/PK........3.,R.(W.....^.......BrowserDlg.xml.V..0.]..?Df.Mh..AA. ...,.,+'q[.....Vl......!X !.....KC._.e.+~..8....(..hj.{\|\|.+?..v.MF.D...Ev....=.S>.X.....I.}..']t.D.8.q`.......blD..l4...F..=....f.O......E....}...7...x.)#..,....=....A..D.I.4L.l...1..Z.1..4......;.S.K..]..r<...W;......[.QJ....``..,"..3........b...r~.....e..9OBI=....".)"K~..EO0....S...}.3".W...G7.5I.T2....CB.C.E...[...{'. .<.s..{Q.-.q..v..... V.hD]p..5."....O.Z(.m....i.L 0...q2^i./.$...O.!+.=.]..n..I&........;....7..\|.M.....qs......-..\|0U...u.sK.....Zzo...../\kf;K...z...q%...`...;.....U.ng..J..\.#.J4J.{v{..cg.U.Z.S.d C!.AP7...@.GC.Qo.H..A..9.{.&.X!l...A.\KsW........~..1.._.]... R...(.z.....Z....}..i..#.{...........M.w,h.dR...~.q.....2..'.0..`I....c...]V..S..i?Q(.c3.TBh.TR.,V.V..~V.{.^.ld....X....h.".....I.........F.....\|.7k.....'.R......K}.........vom..8X....c...M.,..@K.[.C..I.e..9o..j&e.[..n4M..dJ......[......u.$...ET.e...;.?.xt....\|.....

C:\Users\user\AppData\Local\Temp\WdGame_sdly\NetBridge.dll Download File
Process:	C:\Users\user\Desktop\mAGs0IsoB7.exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	243776
Entropy (8bit):	6.739922320894202
Encrypted:	false
SSDEEP:	6144:yJlU7zM4nGH4Ye1XBINNN8YCh2Jo9TB7PTkRc3/:y/SMH4YUXBIfPdo9T1V3/
MD5:	1618C56FD42A483782F863555B2EEF12
SHA1:	130DEA21A6AA501AB63277FE429571442C520193
SHA-256:	F4ACB8DE7EE4C64E9BA4A0004CBDE9282FD3ED5F0CEE7633CD3EFA197EEDA196
SHA-512:	4B401316B8C7243C09D28D9E95DFD163FC991C64CC37E1EE46483446FE7B6AC7B2F7476764E25CC2B34871E4823123BF3CB71E8ECAAEA00A284B07EB48304996
Malicious:	false
Antivirus:	Antivirus: Metadefender, Detection: 0%, Browse Antivirus: ReversingLabs, Detection: 3%
Joe Sandbox View:	Filename: KuMTnLOuSZ.exe, Detection: malicious, Browse Filename: o5ZGIQwDed.exe, Detection: malicious, Browse Filename: UM6rAJhKEq.exe, Detection: malicious, Browse Filename: mAGs0IsoB7.exe, Detection: malicious, Browse Filename: IJ9cCBb4Tv.exe, Detection: malicious, Browse Filename: KuMTnLOuSZ.exe, Detection: malicious, Browse Filename: o5ZGIQwDed.exe, Detection: malicious, Browse Filename: 17mqa66sU6.exe, Detection: malicious, Browse Filename: FjzWYXTUop.exe, Detection: malicious, Browse
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........."..sL..sL..sL.....sL....{sL..7..sL..sM.UsL.....sL.....sL..!..sL.....sL.Rich.sL.................PE..L...=.LS...........!.................T...............................................k....@......................... E.......6...........................5.........................................`...@...............t............................text............................... ..`.rdata.............................@..@.data....1...P.......8..............@....rsrc................N..............@..@.reloc...(.......*...V..............@..B................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\WdGame_sdly\sdly.ico Download File
Process:	C:\Users\user\Desktop\mAGs0IsoB7.exe
File Type:	data
Category:	dropped
Size (bytes):	393646
Entropy (8bit):	7.039317792660025
Encrypted:	false
SSDEEP:	6144:aBO9o00Ra48BonXwNgdld7ChUn8ZKjcn1XYTpTwQHcBoABw88Oo1bwrtmIvR3Mj1:afP8BoXvao6RmXQ/hmkudYJeCe
MD5:	75889EBA8CA2B89FDF44C7C5DAF3C4FE
SHA1:	4E875FD8B24108F2A29FEC6101EA50F231D0F95B
SHA-256:	555946DF7958B4B8AA8B14E70EF6F44A9D46D1383DF65CC36A250BBE7E870998
SHA-512:	EA21D7511A1AAE505E497B30489438C0FCAB9C5B80CB29D5BFC36D3C146095D21F17B28F101B17E84A305EE0CA844C23D13E27CFCD1E7BAFAC21FE59F5975CB0
Malicious:	false
Preview:	......(....... ..... ................................(......................................(.......(....f..c..c...T..~O.....{...Z..uA..s<...O..vJ...n...(....g..i..xP.qY3.......}...j...\|.................s.zI(.....t.~=...E...y...b..hU....vhN..........................t..t..[..Y...W....}...........~jQ............\|hG........hB2...m..^.k....B...zl...........u`@...y...g..._...R...j.c@%.l1...e..k.[2.._:".pUE......s....aG...........s...S.lV;..S ..6....`..s...\|.....dH......w......qM.............{J...I..r;..V!..e..g.R/...]I...........}^8...u........tL...d...g.{Ue..v5..k..f.u6...O....l.............iQ*..g?...l.....yN.h]..\|...zTf..e..d.r5...I..}bH.............wR...............]]......R9..._..e.X ..rD#...y...........x.vU/.........zdH.MG..9C..rv..M@..._..r.l?)..._.h='.x`D...\|.....sA".............ba..Ye..mr..HK...`..`..xV..iK.l>$.Q7,.........j?#...........r.q]x.........CE....R..~<(.}K.s...g..[=.xW<.i8..\|@...`E.}C...M...Y!.nX..ly..[C

C:\Users\user\AppData\Local\Temp\WdGame_sdly\sdly.ui Download File
Process:	C:\Users\user\Desktop\mAGs0IsoB7.exe
File Type:	Zip archive data, at least v2.0 to extract
Category:	dropped
Size (bytes):	642005
Entropy (8bit):	7.990483347402209
Encrypted:	true
SSDEEP:	12288:HScXXP55vP5PxUtQw9YBMK5hOG9+xELF7J2lC3ZFmUAyt7w5J2Hn3ZZbQauO6j:yOXP55n5PURwSGaELOqFnAySJ2HLQaud
MD5:	E04294852554E7C92CA128437FCF3D03
SHA1:	A278D063431977A979140064C1D771220FD82D50
SHA-256:	C8C5D6A4909BE6E49EE6CF0E4B32F8E9578815B72BF0C40F9833F4B1185885E0
SHA-512:	665B18C4891731D68CD41FC6F2B3A27ACE5A0F0E126E1A7CBC6A89FE864822A4ED32C898756FE10018729A1F24466CF9EF86DAFE383E75BE36B65F8DBD228307
Malicious:	false
Preview:	PK........8..R................BrowserDlg/PK........3.,R.(W.....^.......BrowserDlg.xml.V..0.]..?Df.Mh..AA. ...,.,+'q[.....Vl......!X !.....KC._.e.+~..8....(..hj.{\|\|.+?..v.MF.D...Ev....=.S>.X.....I.}..']t.D.8.q`.......blD..l4...F..=....f.O......E....}...7...x.)#..,....=....A..D.I.4L.l...1..Z.1..4......;.S.K..]..r<...W;......[.QJ....``..,"..3........b...r~.....e..9OBI=....".)"K~..EO0....S...}.3".W...G7.5I.T2....CB.C.E...[...{'. .<.s..{Q.-.q..v..... V.hD]p..5."....O.Z(.m....i.L 0...q2^i./.$...O.!+.=.]..n..I&........;....7..\|.M.....qs......-..\|0U...u.sK.....Zzo...../\kf;K...z...q%...`...;.....U.ng..J..\.#.J4J.{v{..cg.U.Z.S.d C!.AP7...@.GC.Qo.H..A..9.{.&.X!l...A.\KsW........~..1.._.]... R...(.z.....Z....}..i..#.{...........M.w,h.dR...~.q.....2..'.0..`I....c...]V..S..i?Q(.c3.TBh.TR.,V.V..~V.{.^.ld....X....h.".....I.........F.....\|.7k.....'.R......K}.........vom..8X....c...M.,..@K.[.C..I.e..9o..j&e.[..n4M..dJ......[......u.$...ET.e...;.?.xt....\|.....

C:\Users\user\AppData\Local\Temp\{1CE5D9EC-64E5-47ba-8A88-27F063783FBE}.tmp\pepflashplayer.7z Download File
Process:	C:\Users\user\Desktop\mAGs0IsoB7.exe
File Type:	7-zip archive data, version 0.4
Category:	dropped
Size (bytes):	7086750
Entropy (8bit):	7.9999693736939
Encrypted:	true
SSDEEP:	196608:98mpL8l6iIUt3Lh3LOnk/86nZ1/VH1j3BF84D:9LY6Zs13LOk/8GbH84D
MD5:	F541D00B14B9C08873D92077566FF63D
SHA1:	3E5610A7547FA6F852EC5959C9234BF1363A8877
SHA-256:	B8AB60859626690078BFC50645C33AE57E8CFDD597E5BF6BE33CC869452EB83A
SHA-512:	4B27AA7ADC65D2439F1C8F56D122BC91AC8929D59C9688B4578404D6F07CC6915833C932C43A18FB3BA1C089DA1E31D9F230637CC42CAB994B887FBB45D18541
Malicious:	false
Preview:	7z..'.......!l..................V..].&..p.........../D.N...'.J.u..a.s'..N/:.lz..........q.+.....S..U.^dq..~@..9en...@...~.}.6..)...{.....q..[u.N...v\.....3c....R.b_.\|wi...^=.Y0.../>.......D.\|UvQAnk.]....>......)G?............v.v..F.!.....b..9...IB..wg....q...LX.#.).S. .../.".pZ.......KSjM.L.(..{Ue.kF....BI.%O..$........Z.b,K...V....v3!:..p.#..G4.'...{.......4..aE1...s.0n.7...1N..........mc..3..y<...-......y...$.J,."...{<R.!...Z.`........<.8z13.&..jg............&..l.@.).c.N.:B.F...cJ....+.K..>.l.]..G1.u:....D3.e..N..>.S...h!e..].S..<..7)....H...Eb/......`=......E.....=3C...q$a....=..0..\|F.D...s...u....C.....K...^.w....4.c.>r..'ds..!.{].T...?>...?I..V..c8.V2....lf.V(....S.e..k]A........b.\..<.U.z.&....L......j....4...5.'`..K....108]........s8g..M.w/......8..../s..C..<...Uy@.{8.@.<.W..v....y.h...X...........Y>(..R..kT..U...t.,H.../..p..;.II.5El+..........)..z...2. ....<.L..T.7....V.Mj.....\|%szE........u.o......^...Cz...YH...g..6.Q.....%.s

C:\Users\user\AppData\Local\Temp\{9751F26D-C023-4d9c-9E8D-FD5C2F52BFFB}.tmp\cef.7z Download File
Process:	C:\Users\user\Desktop\mAGs0IsoB7.exe
File Type:	7-zip archive data, version 0.4
Category:	dropped
Size (bytes):	25267431
Entropy (8bit):	7.999992683412103
Encrypted:	true
SSDEEP:	786432:8p93h/NbHXz9qvayto6pHTH5sTFDwN8CmanQm1/Si:8pV7j9qIETH5sTK2aQu/Si
MD5:	B4397BC61FC3CC1FF3E3A82C50C964C8
SHA1:	447CFA5A3A6574E0F3A01EEB34F7F7E713184C52
SHA-256:	557236CA4930C9B9964313DE8F055F7264C534AB00738D80512FD3C196E05879
SHA-512:	7A5FFE067DAB4476087F3E48DB483919F96CC0174D63927414A2413A60CC926F0C965BA4EADF8513A6C3A2FB5956E6A40170F8D6D7DC0CE9961E353782EC699C
Malicious:	false
Preview:	7z..'....(..........%........ mJ.v...]...6.;.OI.......4. .Fj...-.1../.....{..9`.....@.]...9{..Sw......n..z$.JP...7v.....=.7.I....U...+h.k.....%.\|...-.~.....AfT.sG.R..;...r.....9.9?..C.QOo...lyv........D..z.....1r&E.....C.S..b.q.........5y.#....+j....a.[..O...p....<..,.k^C.`V2S..D\`...P...8w....<.1.^M....y....B.N..4p.G.........q..........x5...3.&ME.T....L.....z..2..p...v.x.....S...9..!1.>(d..ZA.........1...D.I..e....nJ.7.....H...m4#.. .o(.x%......N..u..f.....&....h!.d.I)-..A. .d.\|.!F..M+.t.U...?m..j.\|.a.6........~."?R..{=..7..?....(.......'...p..,...{K....r....iy].R.q..9...N.6.v.c.au.gy..y...VW...+...2RCO'..<.xp/....H.$. ..P.{KJ....r.....w..<.;.* ..s..k3-.4?.9]O.......AJ...G........H...6-8&(.._..Ro..r.u.(.X.6.m...'.$.9z.D...".....x.b..`..>\Jq...?.8EW...fk...Yd.Yo.#...1...M.Mn{....&,..fEq.M...q...."...q..4....U..]..~.mA....;.....}..=_-.jD.g..1w.Iq.............f.......~..}.l........==q..g4...dX.>g.]..+.u5.TY..mn..wV...Al..`......hYOc.a...

C:\Users\user\AppData\Local\Temp\{A9E2EC10-0FDD-4dca-8860-E90690C0157A}.tmp\CefRes.dll Download File
Process:	C:\Users\user\Desktop\mAGs0IsoB7.exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	25402696
Entropy (8bit):	7.999831197194621
Encrypted:	true
SSDEEP:	786432:GnyHxH6qXvrx3BWUwStoAw4y+Ekdhjt8El0GdU1Ww:GnOlTx3XLw4y+ESllLy1Ww
MD5:	6EBC597BCFD7267FE42045005BB796DB
SHA1:	7313C8B9D34E92E12CA8F614B8A5F2913DEDAE6F
SHA-256:	D82C1A849C963054E41704D49258EA634DE816F0B596DE1AE97FD9266DE3A5A3
SHA-512:	EA5E4586643C5A611840633410814A6C3593EC664955A5953794641E6255EA6A8D03D1087B6FEE7040824A03AF1562112D265A1DF6F21E517515083E781C2F86
Malicious:	false
Antivirus:	Antivirus: Metadefender, Detection: 0%, Browse Antivirus: ReversingLabs, Detection: 0%
Joe Sandbox View:	Filename: KuMTnLOuSZ.exe, Detection: malicious, Browse Filename: o5ZGIQwDed.exe, Detection: malicious, Browse Filename: UM6rAJhKEq.exe, Detection: malicious, Browse Filename: mAGs0IsoB7.exe, Detection: malicious, Browse Filename: IJ9cCBb4Tv.exe, Detection: malicious, Browse Filename: KuMTnLOuSZ.exe, Detection: malicious, Browse Filename: o5ZGIQwDed.exe, Detection: malicious, Browse Filename: 17mqa66sU6.exe, Detection: malicious, Browse Filename: FjzWYXTUop.exe, Detection: malicious, Browse
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......*>..n_.Pn_.Pn_.P..nPd_.P..lP._.P..mPv_.P<7.Q~_.P<7.Q\|_.P<7.Qp_.Pg'.Pc_.Pn_.P._.P.6.Qk_.P.6.Qo_.P.6`Po_.Pn_.Po_.P.6.Qo_.PRichn_.P........................PE..L.....C]...........!.........J.......(.......0............................................@......................... ...H...h...x....................f...6..............T..............................@............0..\............................text............................... ..`.rdata..>m...0...n..................@..@.data...............................@....rsrc...............................@..@.reloc...............R..............@..B................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\{CFD5C9EE-7748-4683-A8FF-B6B6FF273FE3}.tmp Download File
Process:	C:\Users\user\Desktop\mAGs0IsoB7.exe
File Type:	Microsoft Cabinet archive data, 25278986 bytes, 1 file
Category:	dropped
Size (bytes):	25278986
Entropy (8bit):	7.999988082497275
Encrypted:	true
SSDEEP:	786432:2nyHxH6qXvrx3BWUwStoAw4y+Ekdhjt8El0GdU1WS:2nOlTx3XLw4y+ESllLy1WS
MD5:	09FDA8864BA82B306EEED8959BAE888C
SHA1:	B5004C3BE7592F3B0B74C89346511E1C0D6C27E7
SHA-256:	B6794C2CC0870411E9ACE6C17E4D3094C8E4386F66ACEE7DCDE391ECC573E116
SHA-512:	9C8318F9D9C5A792EA5A828A38C1D7DDF3131A29F93AD113C68F7FF145F463C0689D79AD5D78FC0E130C5AE61C23058139B26911DD9C5CDD4C90A920C11B29B9
Malicious:	false
Preview:	MSCF............,...................C................O. .cef.7z.~!......CK.....7z..'....(..........%........ mJ.v...]...6.;.OI.......4. .Fj...-.1../.....{..9`.....@.]...9{..Sw......n..z$.JP...7v.....=.7.I....U...+h.k.....%.\|...-.~.....AfT.sG.R..;...r.....9.9?..C.QOo...lyv........D..z.....1r&E.....C.S..b.q.........5y.#....+j....a.[..O...p....<..,.k^C.`V2S..D\`...P...8w....<.1.^M....y....B.N..4p.G.........q..........x5...3.&ME.T....L.....z..2..p...v.x.....S...9..!1.>(d..ZA.........1...D.I..e....nJ.7.....H...m4#.. .o(.x%......N..u..f.....&....h!.d.I)-..A. .d.\|.!F..M+.t.U...?m..j.\|.a.6........~."?R..{=..7..?....(.......'...p..,...{K....r....iy].R.q..9...N.6.v.c.au.gy..y...VW...+...2RCO'..<.xp/....H.$. ..P.{KJ....r.....w..<.;.* ..s..k3-.4?.9]O.......AJ...G........H...6-8&(.._..Ro..r.u.(.X.6.m...'.$.9z.D...".....x.b..`..>\Jq...?.8EW...fk...Yd.Yo.#...1...M.Mn{....&,..fEq.M...q...."...q..4....U..]..~.mA....;.....}..=_-.jD.g..1w.Iq.............f..*...

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\????\????.lnk Download File
Process:	C:\Users\user\Desktop\mAGs0IsoB7.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Mon Jun 14 12:21:39 2021, mtime=Mon Jun 14 12:21:39 2021, atime=Mon Jun 14 12:21:36 2021, length=3643816, window=hideshowminimized
Category:	dropped
Size (bytes):	1959
Entropy (8bit):	3.4378709929679077
Encrypted:	false
SSDEEP:	24:8bzHgzMPokBVngKPv792AA/4AvYyYbPtZYRstZYyYHWw4eiYyYm1m:8brgYPtBV0/4AvhejKsjhSWw4jh31
MD5:	0A83593FBE3529CBC8AB80FD223482E4
SHA1:	72C53ABB7D52DB4223BE48F6937FCCDA3E9EE3C8
SHA-256:	C09EBB185E6A8BE76B75CD956F732F882179EEBDA6A2D831853941CDB45CCED3
SHA-512:	D7BFEAF0E44FCCB9A7055CA9DB07EF6371F9F6AB8F5A1FA24D7BEF0BAC8453E039B092A3C206D3A3D954D7B88D28ADFCD53BBF667FF1AD64C41B683A37FDC77C
Malicious:	false
Preview:	L..................F.@.. ....5 a....5 a..&u.3 a....7.......................:..DG..Yr?.D..U..k0.&...&...........-......:......i a......t...CFSF..1......Nz...AppData...t.Y^...H.g.3..(.....gVA.G..k...@.......Ny..R.j.....Y....................f.(.A.p.p.D.a.t.a...B.V.1......R.j..Roaming.@.......Ny..R.j.....Y.....................I=.R.o.a.m.i.n.g.....T.1......R.j..WdGame..>.......R.j.R.j....l\........................W.d.G.a.m.e.....N.1......R.j..sdly..:.......R.j.R.j....m\......................:.s.d.l.y.....Z.2...7..R.j .sdly.exe..B.......R.j.R.j....n\.....................g..s.d.l.y...e.x.e.......b...............-.......a............J1......C:\Users\user\AppData\Roaming\WdGame\sdly\sdly.exe..#.....\.....\.....\.....\.....\.W.d.G.a.m.e.\.s.d.l.y.\.s.d.l.y...e.x.e.*.C.:.\.U.s.e.r.s.\.h.a.r.d.z.\.A.p.p.D.a.t.a.\.R.o.a.m.i.n.g.\.W.d.G.a.m.e.\.s.d.l.y...-.-.f.r.o.m.=.s.t.a.r.t._.m.e.n.u.3.C.:.\.U.s.e.r.s.\.h.a.r.d.z.\.A.p.p.D.a.t.a.\.R.o.a.m.i.n.g.\.W.d.G.a.m.e.\.s.d.l.y.\.s.d.l.y...i.c.

C:\Users\user\AppData\Roaming\WdGame\NetBridge.dll Download File
Process:	C:\Users\user\Desktop\mAGs0IsoB7.exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	243776
Entropy (8bit):	6.739922320894202
Encrypted:	false
SSDEEP:	6144:yJlU7zM4nGH4Ye1XBINNN8YCh2Jo9TB7PTkRc3/:y/SMH4YUXBIfPdo9T1V3/
MD5:	1618C56FD42A483782F863555B2EEF12
SHA1:	130DEA21A6AA501AB63277FE429571442C520193
SHA-256:	F4ACB8DE7EE4C64E9BA4A0004CBDE9282FD3ED5F0CEE7633CD3EFA197EEDA196
SHA-512:	4B401316B8C7243C09D28D9E95DFD163FC991C64CC37E1EE46483446FE7B6AC7B2F7476764E25CC2B34871E4823123BF3CB71E8ECAAEA00A284B07EB48304996
Malicious:	false
Antivirus:	Antivirus: Metadefender, Detection: 0%, Browse Antivirus: ReversingLabs, Detection: 3%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........."..sL..sL..sL.....sL....{sL..7..sL..sM.UsL.....sL.....sL..!..sL.....sL.Rich.sL.................PE..L...=.LS...........!.................T...............................................k....@......................... E.......6...........................5.........................................`...@...............t............................text............................... ..`.rdata.............................@..@.data....1...P.......8..............@....rsrc................N..............@..@.reloc...(.......*...V..............@..B................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Roaming\WdGame\Utils\7z.dll Download File
Process:	C:\Users\user\Desktop\mAGs0IsoB7.exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	1113400
Entropy (8bit):	6.584133168551355
Encrypted:	false
SSDEEP:	24576:SZ+lCPq8bgPqPRzWu+sjvNfEz0z/JiJXosc3:FlCPnbgiPRzWFsjvNffJtsg
MD5:	C4AA6D9E72A1721B3F65646E04E702CF
SHA1:	6A41028AB246CE033E19DA5C54E066E0752CB616
SHA-256:	D4298C89FC52459842E7658EBF3AA34A9F6E061A97B8984790239609B492F696
SHA-512:	D2DE0B47EC3A5564592797468F02944FE911C66034C08FBEB5EF4592B1CCE7561E6ED36E4433D6520F2927B66DBDBE68424939CAC286B325EB7E83F09AB65843
Malicious:	false
Antivirus:	Antivirus: Metadefender, Detection: 0%, Browse Antivirus: ReversingLabs, Detection: 4%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$..........i...:...:...:...:.:._.:...:._.:...:...:a..:...:...:...:...:...:...:...:...:...:...:Rich...:........PE..L.....iT...........!................3........................................P.......................................8......t*..P.... ...}...............<...........................................{..@...............\|............................text............................... ..`.rdata..rY.......Z..................@..@.data...(....@...v..."..............@....rsrc....}... ...~..................@..@.reloc.............................@..B................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Roaming\WdGame\Utils\CefRes.dll Download File
Process:	C:\Users\user\Desktop\mAGs0IsoB7.exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	25402696
Entropy (8bit):	7.999831197194621
Encrypted:	true
SSDEEP:	786432:GnyHxH6qXvrx3BWUwStoAw4y+Ekdhjt8El0GdU1Ww:GnOlTx3XLw4y+ESllLy1Ww
MD5:	6EBC597BCFD7267FE42045005BB796DB
SHA1:	7313C8B9D34E92E12CA8F614B8A5F2913DEDAE6F
SHA-256:	D82C1A849C963054E41704D49258EA634DE816F0B596DE1AE97FD9266DE3A5A3
SHA-512:	EA5E4586643C5A611840633410814A6C3593EC664955A5953794641E6255EA6A8D03D1087B6FEE7040824A03AF1562112D265A1DF6F21E517515083E781C2F86
Malicious:	false
Antivirus:	Antivirus: Metadefender, Detection: 0%, Browse Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......*>..n_.Pn_.Pn_.P..nPd_.P..lP._.P..mPv_.P<7.Q~_.P<7.Q\|_.P<7.Qp_.Pg'.Pc_.Pn_.P._.P.6.Qk_.P.6.Qo_.P.6`Po_.Pn_.Po_.P.6.Qo_.PRichn_.P........................PE..L.....C]...........!.........J.......(.......0............................................@......................... ...H...h...x....................f...6..............T..............................@............0..\............................text............................... ..`.rdata..>m...0...n..................@..@.data...............................@....rsrc...............................@..@.reloc...............R..............@..B................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Roaming\WdGame\Utils\cef\CefView.zip Download File
Process:	C:\Users\user\Desktop\mAGs0IsoB7.exe
File Type:	Zip archive data, at least v2.0 to extract
Category:	dropped
Size (bytes):	651641
Entropy (8bit):	7.998055134531002
Encrypted:	true
SSDEEP:	12288:FdSGsVxJKsOf9WCeQnpURUH9+otLl6sfRdBwaS9LjimkPp1Kb1:FIlVSdf9JBwUHZ10T9LuFgb1
MD5:	51E723B78C3559A3E4AB4C291F221D2B
SHA1:	FE86535BC14A49B9045C40D86B1511E5E3C3E7F8
SHA-256:	4493B8D2ECE172C617D8EB10B41E83B757588C68EED8C8FDC7D64EB53FFFFD45
SHA-512:	70583A92356DE492C7936D092211107A66B6C24C2A21309EA33E6D582430879DC912770631E3D786B8F0C0962BAF673804A80606D343C4625BE1E5E43EF39235
Malicious:	false
Preview:	PK..........RS..............CefView.exe.RI..Q...;.5j.H"D.w.a.i2....DOq.b..Q.#hFb.WpC\|<......<x.z...`.q.. q...:ft......p...?......W_...S..~.....+.).....1....sz(..hk.H...+....%..ruQ&....;.....4...R.w-....2.~.8.{....7....ec..%.N..J.A..f<A.v.f..{...l.+.1b~.s..5..}do.#..>6.....FCb.8...."..X.~,qc....M?~/.j.].;....k..{.!p..EY._}v2. A...c~.....&C}.z..v7..sq....v......7.\|....%..g.(,O.Dy.B..bg&.Y..!.n....qB/.o.7.#!.}c....D....o@.Lz...t.) .,........`A8.8S...R......!6.D...pt- 9...4...w6._._....Q..f..^.sY..qv....;....Y....Q?/. .......?y..4.7........;<<..vy.aW.]e.e............A.......9~.....STnP...S.M..9.9-.i.S".h...<.k.D...v..X....W.T...e.Y.....cT{`]s.....k..%u........T..Y.]...8R..........8.......!.\a..+Q.H..^.u.[fq.,.........qZ.u..0.nY....&.H.W...[W\.'.8N.Kh.....h..y....:;oqv...<....y......y..n.....Y......:y.l...(v...Iz....8....T.1......Uq,...-"...#.....+.[.*.X..^!....2.....D....J....[.R4F.t..bu..!C...$?I}(T.&iP/a..U.J....=..R.r.=.....pA

C:\Users\user\AppData\Roaming\WdGame\Utils\cef\LICENSE.txt Download File
Process:	C:\Users\user\Desktop\mAGs0IsoB7.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	1662
Entropy (8bit):	5.176453607410173
Encrypted:	false
SSDEEP:	48:VcbD7BOCrYJ4rYJVwUCazPXy43HV713XEyMmZ3teTHv:VoDYCrYJ4rYJVwUCaDZ3Z13XtdUTP
MD5:	FD74AE632A39D7DC6B1A4E3BF81DEF7D
SHA1:	3655FF8A1A94273610FA4B9861453D52F0E5B21E
SHA-256:	072A6488C6B0763259987B586F2A6EA00E351AA3F5025090B4C14F04508720F2
SHA-512:	7C7E71411860AED1CB9750AA7D36000D6BA39191A3AF123EFFC6B159894281282EF466599AFC7B8459D189A124E63704C4FB9B3E9EF2888934D4E3AFFDA53F61
Malicious:	false
Preview:	// Copyright (c) 2008-2014 Marshall A. Greenblatt. Portions Copyright (c).// 2006-2009 Google Inc. All rights reserved..//.// Redistribution and use in source and binary forms, with or without.// modification, are permitted provided that the following conditions are.// met:.//.// * Redistributions of source code must retain the above copyright.// notice, this list of conditions and the following disclaimer..// * Redistributions in binary form must reproduce the above.// copyright notice, this list of conditions and the following disclaimer.// in the documentation and/or other materials provided with the.// distribution..// * Neither the name of Google Inc. nor the name Chromium Embedded.// Framework nor the names of its contributors may be used to endorse.// or promote products derived from this software without specific prior.// written permission..//.// THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS.// "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLU

C:\Users\user\AppData\Roaming\WdGame\Utils\cef\cef.pak Download File
Process:	C:\Users\user\Desktop\mAGs0IsoB7.exe
File Type:	data
Category:	dropped
Size (bytes):	2322682
Entropy (8bit):	5.626974295837984
Encrypted:	false
SSDEEP:	49152:m+jA+bQaVNVtw5uwB2UKO0GGxsbMFsEMtggb7xqk2UQfVGGG2pLTux:FDGGG2pLTux
MD5:	4D991B6DB94E823AAC8CEF6EB1959662
SHA1:	84856F2EBA08C5AD2DF6A946E0EB7519BC9FB6CC
SHA-256:	2E07DC909EFB9D9316E15452F168581966BDC7AD8FB607D3D3A339AAA8DC0266
SHA-512:	9842BF88339EAED96F81E82B1F1B15F6FE259449097E44F5D7738CD0AA79786DA5E0B777D84B9A6A1C08BF3D0EDFCF71C9CB396BD6C78145C5DFD171B8384F1F
Malicious:	false
Preview:	...........9...V^}...W^....X^.!..Y^.A..Z^.W..[^....\^....]^....^^g..._^u...`^y...a^....b^....c^....d^B...e^.!..f^9>..g^....h^k...i^....j^....k^5...l^.?..m^.B..n^.K..t^'W..u^.h..v^.}..w^t...x^....y^....z^....{^....lk.T..mk~Z..nk.`..ok.k..pk8n..qkwq..rk{...sk.....u.....ud;...u.?...u.J...u.Y...u.....u.....u.....u.....u.....uS....uU....u.....ux....uV....u.....uF....u.....u~....u9....u.5...u.E...u_H...uH[...u`h...u.x...u.....u....u?....u.....u.....u\|....vI....vT....vM....v.....vN....v.....vn....vJ....v*....vi....v.....v "...vS'...vf#...v.h...voj...v.w...v....v^....v.....v.....v.....v.....v.....v.....vm....v.....vW"...v.(...v.....v.....v.....v....v.....vg....v.....v.....vN....v.+...v.1...v.8...v{?...v.....v.....v._...vR`...v.d...vk....v.....v.....vj....v]....v.-...v.....v.....v.....v.D...vKM...vWh...vMi...v......p#.<!DOCTYPE html>..<html i18n-values="dir:textdirection;lang:language">..<head>.<meta charset="utf-8">.<meta name="google" value="notranslate">..<script>.function addRow(name, u

C:\Users\user\AppData\Roaming\WdGame\Utils\cef\cef_100_percent.pak Download File
Process:	C:\Users\user\Desktop\mAGs0IsoB7.exe
File Type:	data
Category:	dropped
Size (bytes):	144747
Entropy (8bit):	7.724721097992957
Encrypted:	false
SSDEEP:	3072:Z7qrTpJroFYgI1epIMIZOgl95h4vjWX6pCa8+1pq0YAhstEtTUuS/po:Z74JrEXjIZJlHavSqT1YZYstATJ1
MD5:	AD2DDFC39C78EEDC734AF6506A579A8C
SHA1:	64E66D48AB3A98503948202DEC3FF2F35470CD5B
SHA-256:	58F7CE00D589AAAEBFAF3D0BADAC45924545E49F2D1531156F282EAC7ABB11B5
SHA-512:	7482B0C4C51BF4D3C3389A6CCF9C59307911BA793116BAC04077594D9B3D6F54A07E6187764201FBA8BB31EDE88B9FF65AB6867A2526E0F8E7B16136F7978367
Malicious:	false
Preview:	....c......a.....!.....O.............................. .....%.........p......2.....8.....=.....L.....O.....^.....a.....k....@u....yx....E......................w..........t..........b.................~.....<.............................A.....Q...........D.......................y...........s...........Q.................t...........n...........Z......................._.....D.....7........... .................s.....H...................................d.....9..................:....e;....,<.....<....X>.....?....>@.....@.....A.....B.....C....YD.....E.....E....>F.....F....MG.....G....rH....RI....0J....cK.....L.....N....qP....+Q.....Q.....R.....T...._U.....U....AV.....V....'W.....W.....W....X....{X.....Y.....Z.....[....._....,a....1c.....h....eh.....h.....i....ai.....j.....j.....k.....k.....l.....l.....m.....m....jn.....n....zo.....o.....p.....q....nr....#s.....s....pt....>u....,v.....v.....w.....x....Yy.....z.....z.....{....O\|....2}....J~.....~...................../.....$...............

C:\Users\user\AppData\Roaming\WdGame\Utils\cef\cef_200_percent.pak Download File
Process:	C:\Users\user\Desktop\mAGs0IsoB7.exe
File Type:	data
Category:	dropped
Size (bytes):	233072
Entropy (8bit):	7.845701811235802
Encrypted:	false
SSDEEP:	6144:HJW/jBysmlC9BzMklLwozV1oJoRc5QXfHgs4jTlnG:pW/lDmYmqh1qggs4jTM
MD5:	66FA52C0523AE2EC18C37960E4EB3E6A
SHA1:	61AC3E8E84A7F84790A835998873431C4A086BD9
SHA-256:	25006F654D50E7E63F4557357437EFF5F6BDA3DC6E8BF86CF0BD5B02FDBF2A28
SHA-512:	E8CFDC0937982245E9D31D2D62ED39E7E3B86C9FEE41482597CB6C77CD54EA4EFF6E35362D81A32DBE54BAFFEFEECA31A4259CE9EA7C06E65904F3816DC65D58
Malicious:	false
Preview:	....c......a.................-.......................T"....}'....x,....F0....m4.....:.....?.....N.....R.....`.....c.....m.....w.....z................e.....}...................................Q.....e.....\.....&.............................g.......................[.................n...........$$.....$....=%.....%.....'....0)....4....i+.....+.....,....i-..........o0.....1....t3....,5.....5....T6....77.....8.....9....Q;.....<.....>....k?....3C.... G.....J....EL.....M.....O.........5.....................J...........~.................F.....[.....p...........M.................,.................[.................9.....T.................:.....=...........X.....!.......................v...........5.................k.....@.....-.................-.................Q.....Z.....[.................k.................R.......................R...................................y.....x .....!....$#....>$.....%.....&.....'.....(........./,..../......0.....0.....1.....4.....7....s:.....;.....<.....=...

C:\Users\user\AppData\Roaming\WdGame\Utils\cef\cef_extensions.pak Download File
Process:	C:\Users\user\Desktop\mAGs0IsoB7.exe
File Type:	data
Category:	dropped
Size (bytes):	4282175
Entropy (8bit):	6.227966188441409
Encrypted:	false
SSDEEP:	49152:a297+EfG5u8mWexScqKTtUtxT6z/t/G1hoLwpbeuR2oSKolWZHqYNYzv2v3zjKNL:keuKZULT6k1hq
MD5:	6E727928EBEEEB5847C65C15C41802ED
SHA1:	D22BA6F8E3160484DD40FD5F4EB685182F404D88
SHA-256:	221A97DAF8263321CEB9CE244452FC97B865B561E399B23D42682FEF4785EA7F
SHA-512:	D39E98D8D2E9AFC84F8188E27E412079667DF2174DA14F93F451396EA1A27FD5ABF9FB8218FF02C94B56C60E7E5E59A5819D50D2463EF6F6AD71D29CF1F155A8
Malicious:	false
Preview:	..................1.....4.....7...........6....W\....R.....<.................i...........{......4....r4....-:....Cz....h.....".....e.....N.....)...................................N............:.....`.....i.....{....O\|....]~....:...................................... ...........I...........:...........Q.....f......... .....!.b..."..L..#.....$.....%.Q...&.....'.^2..(..M..)..v..*.....+.....,.....-.&.........5....6.....7.3...8....M.....N.....O.....P.....Q.....R.c=..S.y\..T.1...U....V.....W.....X.....Y.....Z.....[../..\..1..].^6..^..:.._.CC..`..D..a..E..b..F..c.DJ..d..M..e..P..f..Q..g.lW..h..Z..i..^..j..d..k.gj..l..n..m..u..n.....o.{...p.y...q....r.....s.t...t.8...u.....v.V...w.....x.....y.....z.....{.!...\|.o...}.u...~........ .....Z..........^.....F......0.....2.....9...._=.....E.....I......................l.....K[................?............................. ...........E......#.....,....%/.....4.....7.....:.....?.....B....aU.....[.....g.....j.....p....sw.........................

C:\Users\user\AppData\Roaming\WdGame\Utils\cef\cef_resources.pak Download File
Process:	C:\Users\user\Desktop\mAGs0IsoB7.exe
File Type:	data
Category:	dropped
Size (bytes):	34381
Entropy (8bit):	5.703073846966971
Encrypted:	false
SSDEEP:	768:xNwNU5pqbjUFhDoH8TOLgHqSnhZOLPcIyoejomm1396i0ebbF:xC4p6UvDocSnShgTduy3
MD5:	91DCD33EA77CF56FA39F3C3B0628141F
SHA1:	092DE5A70119BD7675B5C81DC2546D685696E281
SHA-256:	84478E9E8EDF2980B5D214AB6019885FF762DB832EE8A12E6216D4439BA56B63
SHA-512:	748B752FE801C2E254B16B824B1BD45C32AFA9BF9A9A8DCC62D4480E18350E5750E32A92F9DBE1359FACA330CF7F2242305F9E2A5164269F76308320F22DE427
Malicious:	false
Preview:	.........lk?...mk....nk....okF...pk....qk....rk.9..sk.V....M...<html>.<head>.<title>CEF remote debugging</title>.<style>.</style>..<script>.function onLoad() {. var tabs_list_request = new XMLHttpRequest();. tabs_list_request.open("GET", "/json/list?t=" + new Date().getTime(), true);. tabs_list_request.onreadystatechange = onReady;. tabs_list_request.send();.}..function onReady() {. if(this.readyState == 4 && this.status == 200) {. if(this.response != null). var responseJSON = JSON.parse(this.response);. for (var i = 0; i < responseJSON.length; ++i). appendItem(responseJSON[i]);. }.}..function appendItem(item_object) {. var frontend_ref;. if (item_object.devtoolsFrontendUrl) {. frontend_ref = document.createElement("a");. frontend_ref.href = item_object.devtoolsFrontendUrl;. frontend_ref.title = item_object.title;. } else {. frontend_ref = document.createElement("div");. frontend_ref.title = "The tab already has active debugging session";. }

C:\Users\user\AppData\Roaming\WdGame\Utils\cef\d3dcompiler_43.dll Download File
Process:	C:\Users\user\Desktop\mAGs0IsoB7.exe
File Type:	PE32 executable (DLL) (console) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	2114408
Entropy (8bit):	6.464490838050645
Encrypted:	false
SSDEEP:	49152:vpX9JVeE9HP6Zpy9KyhMI50Du8LljslNsHSHFUq9OiapbbO5Ak6:73P9HP6Zpy9KyhMI50Du8LljslNsyHiX
MD5:	6E053D67B6073261F96F2C547D776676
SHA1:	5FE7337ABB09C1BE286C14EC81A7755522197AEA
SHA-256:	EA463D97EB088CAFC5CD7574682BE42EFC791C46428B8DB15C62DE09649CCE32
SHA-512:	EDCEC5D29B57FD9112C9CD6B30EB01CD414DD47822DBCF0DADFF5B0DEABF6533FB93B1BD025B04D9DFB8D7F982D497008115F288947B1473616C759B6AAEE936
Malicious:	false
Antivirus:	Antivirus: Metadefender, Detection: 0%, Browse Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......\.h...;...;...;..];...;...;...;.._;...;..h;0..;..i;'..;..X;...;..l;D..;?M.;...;..Y;...;..^;...;Rich...;........PE..L...92.K...........!.........d...............................................p .....tl ...@.........................@.......@...P..................... .h7...........................................i..@............................................text...S........................... ..`.data....~.......B..................@....rsrc................(..............@..@.reloc..D............,..............@..B................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Roaming\WdGame\Utils\cef\d3dcompiler_47.dll Download File
Process:	C:\Users\user\Desktop\mAGs0IsoB7.exe
File Type:	PE32 executable (DLL) (console) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	3707752
Entropy (8bit):	6.560134391465009
Encrypted:	false
SSDEEP:	49152:6XxztRVg63VCssRWQnP73DPFeYjLpZyLpsRug4TJz07+GM:6BzrVgoVCbLxTpkpsRugYiM
MD5:	BF435F59C5A079919AE75EB3964D796F
SHA1:	175BE2807DA8AC9CBCDAD7E3B22C519353C308A7
SHA-256:	6D13CD7546E4C99799CD030DCA8D13F0D1D350F084A53E92BD885821B4AB8F41
SHA-512:	94C93BDF5FA8332A19774C6D6A5D4949DD8D92330D6C88F646A50199E1FF1FD57FE7CEE08DE60769AA4D0EFEB423A59C9D9385949BB490C2AF0193AF90C4102F
Malicious:	false
Antivirus:	Antivirus: Metadefender, Detection: 0%, Browse Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......................Ds......Ds..........=...Ds......Ds......Ds......Ds..\|...Ds......Ds......Rich....................PE..L...X.NV...........!......5..........6+.......6...............................9.......9...@A........................p.6.u.....7.d.... 7.H............\8.h7...07.........8...........................8...@.............7..............................text.....5.......5................. ..`.data.........6..d....6.............@....idata........7......d6.............@..@.rsrc...H.... 7......v6.............@..@.reloc.......07......\|6.............@..B........................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Roaming\WdGame\Utils\cef\icudtl.dat Download File
Process:	C:\Users\user\Desktop\mAGs0IsoB7.exe
File Type:	lif file
Category:	dropped
Size (bytes):	10207936
Entropy (8bit):	6.147523774437582
Encrypted:	false
SSDEEP:	196608:L+7mOUgAjk3MVMP7mxl2b+2WYZjU15obkTQ89kxgc3bbHo4QY7iUT0ep:evWjk3mMP7mxl2b+2WYZjU15obkTQ89a
MD5:	D03AD9A1189D190119209072D048E428
SHA1:	AA954098E3AE4C00F67BACE45B39A7B4A8242C6A
SHA-256:	2857FBE46D007307B1E204C6EB1B7E4988973B958EC8EDB07445988F332C1AB5
SHA-512:	4F73A2C0CEEF525E5947DC6EEB7608DB40E535EEADB37D83842BDD638EB4D9114F3654D8094C0B72C66AE4BB0214B0947CD4FE2B56426F778C07F3CAC5FAEA21
Malicious:	false
Preview:	...'........CmnD........ Copyright (C) 2014, International Business Machines Corporation and others. All Rights Reserved. ...............\.......^......._..................$... ...4.......E.......U...`...l..../..\|....Z.......\......p>................&...... &......!&.'....(&.A....)&.X....1&.o...p2&.....P7&..... :&.....0.'......u(......C.....p",.%....+,.C...@,,.\...`.,.s..../,.......,.....P/-......./.....0\/.......0.......0......A0....`C0.@....g0.U...0.0.j.....0......51..... Z1......1.....@ 2......r2.....Pr2......r2......t2.3...Pu2.K....u2.`...@.2.v.....2.......2.......3...... 3.......3.......3.....`.3.....P.3./.....3.D...` 4.\.... 4.q....:4.......4.......4.......4.....P.4.......4.......4.......4.......4.7...@.4.L...P.6.a.....7.v.....;.....@8;......\;......x;......x;......;.....@.;.. ..0.<.! ....<.6 ..pn<.K ...n<.c ..0o<.x ...<.. ....<.. ....<.. ...<.. ....=.. ..p0=..!...0=..!..@1=.2!...1=.J!.. 2=._!.. .=.t!...=..!....=..!....=..!..@.=..!....=..!....=.."..0.=.,"...">.I"..@#>.f"..

C:\Users\user\AppData\Roaming\WdGame\Utils\cef\libEGL.dll Download File
Process:	C:\Users\user\Desktop\mAGs0IsoB7.exe
File Type:	PE32 executable (DLL) (console) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	103424
Entropy (8bit):	6.645987301672349
Encrypted:	false
SSDEEP:	1536:M2uK+kq7jnqf7l2UYMUkTSq+/0pFCQB4uPTLZVsWKJcd59/07LsunLRQE/+188FO:M2pl2UYd6+/8vP3L59c3suLRZ/+y8FO
MD5:	222FAE9BB84A4EF4A5198BDA24C2E4B2
SHA1:	99AA8FEC03EFB23E622B55F7271F99888AEF63F4
SHA-256:	A060999854C47E2D481DC526C7ECB3694CB764C4130A26B19BE06313AC438C38
SHA-512:	5A29F35AE9FD084FE68EBBF662DA9823C043E1AC9B48B1269D5A21CBA41A382510B8B38BA52C5FF6F00358B8AD00169396F958F636E16DFB8298DF561C177C18
Malicious:	false
Antivirus:	Antivirus: Metadefender, Detection: 0%, Browse Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........[.C.:\|..:\|..:\|..^...:\|..^y..:\|..^x..:\|..d...:\|..dy..:\|..dx..:\|..^}..:\|.0d}..:\|..:}..:\|.0dy..:\|.0d\|..:\|.0d...:\|..:...:\|.0d~..:\|.Rich.:\|.................PE..L.....l\.........."!.................................................................8....@..........................4..0....:..<....................\..h7.............8..............................@............................................text............................... ..`.rdata..pi.......j..................@..@.data........P.......8..............@....gfids.......p.......@..............@..@.rsrc................B..............@..@.reloc...............J..............@..B........................................................................................................................................................................................................................................

C:\Users\user\AppData\Roaming\WdGame\Utils\cef\libGLESv2.dll Download File
Process:	C:\Users\user\Desktop\mAGs0IsoB7.exe
File Type:	PE32 executable (DLL) (console) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	1655296
Entropy (8bit):	6.7830233529490345
Encrypted:	false
SSDEEP:	24576:83G/W8s2nTwA0yFQ+d/v5990lQI0FvE0F5eNCL0/UeZRQ67G:Q32ZFZd/vj+lQrsS5wCLSS67G
MD5:	887811E68328733DA8129F171707F8A4
SHA1:	C3386E67582046967202E5DB86A31691BDCF145C
SHA-256:	EB27E13405F6B89BEF0E3D9970719849B82FA849197B7639C52E14CD0B584E01
SHA-512:	483E0F439696D6B50FF620C1EDFE3548CA6DA720C16AB84D916FAA11F7B61D8D758D370CD9AB16D04915FF491863581168DB0F7DAE24596217521BF57388CD2A
Malicious:	false
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........=..Q\x.Q\x.Q\x.>8{.`\x.>8}..\x.>8\|.x\x.j.{.K\x.j.}.c\x.j.\|.q\x.>8y.X\x.Q\y.)\x...}..\x...x.P\x.....P\x.Q\.P\x...z.P\x.RichQ\x.................PE..L.....l\.........."!.....T..........-........p............................................@.........................`....[......d.......................h7..........P...8..............................@............p...............................text...WR.......T.................. ..`.rdata.......p.......X..............@..@.data...tY...0...*..................@....gfids..p............:..............@..@.tls.................>..............@....rsrc................@..............@..@.reloc...............H..............@..B........................................................................................................................................................................................................

C:\Users\user\AppData\Roaming\WdGame\Utils\cef\libcef.dll Download File
Process:	C:\Users\user\Desktop\mAGs0IsoB7.exe
File Type:	PE32 executable (DLL) (console) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	49763840
Entropy (8bit):	6.990951437117866
Encrypted:	false
SSDEEP:	786432:6Gef2UiBDMxVI07lf0gtuPaa94GqEdxzVxNeZrp6PajHylGVQaiSNlyIvsln4rhl:AkBX07lf0gtuia94GqGxBxodgPajyGVr
MD5:	FE5219BE2DDA0FB7352BCEE497556E75
SHA1:	FE9EE85DF3932826FAC6A0AC6204C13F5860642A
SHA-256:	2ADDAACCEC335C662CAFDB5B36735C108E235FB03D2597EDBF85C09B52AAFF04
SHA-512:	6ED683A16C39382B2FA8F6A7AB8425D8093C4C9E972CD8E98C2F174A33F77A06E4F7820990E8FDFB92FDD461E6025C9766A32D1351095D877F4230D9C7196144
Malicious:	false
Preview:	MZ......................@...................................8...........!..L.!This program cannot be run in DOS mode....$.........^k..08..08..08..39..08B].8..08.39..08.49..08.59..08..08..08v.49..08v.99{.08..79..08..69..08..59<.08..49..08..19..08..18#.08v.59..08v.09..08v..8..08...8..08v.29..08Rich..08........PE..L...#.l\.........."!......K..........7........K...........................................@.............................................................h7...P...d...?..8...................(@......P...@.............K..............................text.....K.......K................. ..`.rdata........K.......K.............@..@.data........P.......0..............@....gfids.......0......................@..@.tls.........@......................@..._RDATA..0....P......................@..@.rodata.P....`......................@..@.rsrc...............................@..@.reloc...d...P...f..................@..B................................................................................

C:\Users\user\AppData\Roaming\WdGame\Utils\cef\locales\am.pak Download File
Process:	C:\Users\user\Desktop\mAGs0IsoB7.exe
File Type:	data
Category:	dropped
Size (bytes):	67979
Entropy (8bit):	4.928324470758982
Encrypted:	false
SSDEEP:	1536:6gwdwi4Y8YShhyO5nVZOWBARfJ7wmmrYfQrgE43/AXNX2dLaYKJn/kUZZbCKeQcU:6gji4Y8YShhyO5nVJBARfJ7wmmrYfQrV
MD5:	C8E9074FAA1D9428089FE39A6340C43D
SHA1:	3D345AA7462EF82E000057E49DFE7D48F6F049EB
SHA-256:	3ABF4B49EC48EA46D97C7DEF4C4DBCE5D24D452710E8BD113CD7CFCF6280F95E
SHA-512:	F32201FFA1CE3B1DB75193C4F737FF7973F6E449C7482B3871B8AF612B2D25453FEA0000A7B47026E44C91F627E9F56CE5278DA14C34467F77F005653CC95889
Malicious:	false
Preview:	.........(#9...)#:...#A...+#O...,#R...-#U....#s.../#....0#.....).....).....).....).....).....).....).....).....).....).....).....).....).....).....)$....)3....)>....)M....)R....)X....)a....)k....)q....)~....).....).....).....).... )....!)....")....#)....$)....%)....&)....')....()....))....)..........G..............:..............?....+.....+.....+,....+i....+.....+:....+.....+,....+.....+. ...+} ...+. ...+Z!...+.!...+."...+ "...+,"...+4"...+U"...+k"...+\|"...+."...+."...+."...+."...+."...+.#...+.#...+.#...+%#.. +1#..!+:#.."+V#..#+s#..$+.#..%+.#..&+.#..'+.#..(+.#..)+.#..*+.$..++.$..,+4$..-+N$...+[$../+e$..0+l$..1+v$..2+.$..3+.$..4+.$..5+.$..6+.$..7+ %..8+@%..9+]%..:+v%..;+.%..<+.%..=+.%..>+.&..?+&&..@+_&..A+}&..B+.&..C+.&..D+1'..E+^'..F+.'..G+.'..H+.'..I+.'..J+.'..K+.'..L+.'..M+.'..N+.'..O+.'..P+.'..Q+.'..R+.(..S+.(..T+.(..U+((..V+;(..W+Q(..X+](..Y+j(..Z+l(..[+o(..\+x(..]+~(..^+.(.._+.(..`+.(..a+.(..b+.)..c+.)..d+.)..e+#)..f+-)..g+9)..h+?)..i+H)..j+Q)..k+Z)..l+c)..m+l)..n+v)..o

C:\Users\user\AppData\Roaming\WdGame\Utils\cef\locales\ar.pak Download File
Process:	C:\Users\user\Desktop\mAGs0IsoB7.exe
File Type:	data
Category:	dropped
Size (bytes):	67998
Entropy (8bit):	4.988919258802474
Encrypted:	false
SSDEEP:	1536:FxYq7fOD2NWAPPtivQoFKyZhAIptPQIBXiHSIccZo4s6qyJ+8N3l8O+oo7:FxPXivQodZhAFSIccZqyBY
MD5:	3E0F34E58AF836DE6B1FFA787E0653B2
SHA1:	BDD143EB4ABD1ADF116FF7F6FB15381157CA0630
SHA-256:	1804CAB9FA42D7735689E9CDD7A17ECC1660AA70FE0FFD4EB634F5C3B5A1C9BF
SHA-512:	875138895E23944B5A67C06F4519114067ECF2B0EF7D8365171D542F7DF66ED8F9AC9EF2E0A20F74F3446BC7CF11C7D8C7C6E6840C3E9339F73AA78084A386D6
Malicious:	false
Preview:	.........(#9...)#;...#B...+#I...,#L...-#O....#m.../#....0#.....).....).....).....).....).....).....).....).....).....).....).....).....).....).....).....)-....)8....)G....)L....)R....)[....)e....)k....)x....).....).....).....).... )....!)....")....#)....$)....%)....&)....')....()....))....).............../.........g..............S....+.....+.....++ ...+. ...+U!...+3"...+.#...+.#...+.$...+.%...+k&...+3'...+.'...+.(...+h)...+r)...+x)...+.)...+.)...+.)...+.)...+.)...+....+....+"...+7...+R...+\...+d...+n.. +x..!+..."+...#+...$+...%+...&+...'+...(+.+..)+ +..*+B+..++d+..,+.+..-+.+...+.+../+.+..0+.+..1+.+..2+.+..3+.+..4+.+..5+.+..6+",..7+E,..8+_,..9+{,..:+.,..;+.,..<+.,..=+.,..>+.-..?+B-..@+.-..A+.-..B+.-..C+....D+b...E+....F+....G+....H+....I+./..J+./..K+./..L+./..M+-/..N+>/..O+[/..P+u/..Q+./..R+./..S+./..T+.0..U++0..V+L0..W+n0..X+s0..Y+}0..Z+.0..[+.0..\+.0..]+.0..^+.0.._+.0..`+.0..a+/1..b+H1..c+O1..d+U1..e+]1..f+y1..g+.1..h+.1..i+.1..j+.1..k+.1..l+.1..m+.1..n+.2..o

C:\Users\user\AppData\Roaming\WdGame\Utils\cef\locales\bg.pak Download File
Process:	C:\Users\user\Desktop\mAGs0IsoB7.exe
File Type:	data
Category:	dropped
Size (bytes):	75625
Entropy (8bit):	4.7469052795391375
Encrypted:	false
SSDEEP:	1536:xyebb4grW76g2rzMkGSlEdXneom1Ktj8uADDViwfj3a+mqtIaU:Ye/VrW76g2rzMkG1dXneom1Ktj8uADDW
MD5:	5DB5F8E5B0B52076AA0462D382C15C4D
SHA1:	BC240E4B1C1697B86FCF916947A48393A3A1A6B1
SHA-256:	4FBA49DCA07E767405AB42A07B9273554A9DED4FF48ED0AF64C5E11296317610
SHA-512:	93E9E56AE2F25406F52CD8C3271B54CF32095EF080B746695824FCB658B493337F4E5EF6F3D450EB36F13A79D4C546C9BE00F6B4EB1D09F89C9BD793D4304D4D
Malicious:	false
Preview:	.........(#9...)#:...#A...+#H...,#K...-#N....#l.../#~...0#.....).....).....).....).....).....).....).....).....).....).....).....).....).....).....).....),....)7....)F....)K....)Q....)Z....)d....)j....)w....).....).....).....).... )....!)....")....#)....$)....%)....&)....')....()....))....)..............g...................K.........+.....+.....+.....+=....+o....+.....+.....+Z....+.....+.....+>....+.....+.....+.....+G....+O....+Y....+g....+.....+.....+.....+.....+. ...+1 ...+O ...+s ...+. ...+. ...+. ...+. .. +. ..!+. .."+.!..#+&!..$+5!..%+F!..&+U!..'+d!..(+.!..)+.!..+.!..++.!..,+."..-+$"...+1"../+D"..0+U"..1+h"..2+{"..3+."..4+."..5+."..6+.#..7+>#..8+r#..9+.#..:+.#..;+.#..<+;$..=+`$..>+.$..?+.$..@+I%..A+.%..B+.%..C+!&..D+.&..E+.&..F+.'..G+6'..H+R'..I+T'..J+^'..K+p'..L+s'..M+.'..N+.'..O+.'..P+.'..Q+.'..R+.'..S+.'..T+.'..U+.'..V+.(..W+.(..X+#(..Y+3(..Z+5(..[+8(..\+A(..]+O(..^+[(.._+.(..`+.(..a+.(..b+.)..c+.)..d+.)..e+')..f+3)..g+D)..h+I)..i+O)..j+V)..k+])..l+d)..m+k)..n+w)..o

C:\Users\user\AppData\Roaming\WdGame\Utils\cef\locales\bn.pak Download File
Process:	C:\Users\user\Desktop\mAGs0IsoB7.exe
File Type:	data
Category:	dropped
Size (bytes):	100062
Entropy (8bit):	4.334214135800687
Encrypted:	false
SSDEEP:	768:3Wcv/ZImKtO2AUIXYReB00WxIenYW+K/tsg1wVjk+1NbTr19s1VBgSlgp75vedYB:3WJsBzTr1fZ5zcEu6
MD5:	1442225A0A7FD12CA7ED34F6ED37FF22
SHA1:	80E86CE712326D37A30EEF8725C6A07A26EAE577
SHA-256:	5328BFD92B9C1AC61CA43591574118D970AE7B158ABBD9D331668E94583E5B14
SHA-512:	CEF1294CBC46EDC4D13F3EA4E2639BEF62795393222BBC6CED75D7FFD4FBAC78CB304FDEA10484BFBF75DDFC64BF89BF66946F4F9995B981AC9BEF4B350E0834
Malicious:	false
Preview:	.........(#9...)#:...#@...+#F...,#I...-#L....#R.../#X...0#[....)_....)n....)y....).....).....).....).....).....).....).....).....).....).....).....).....).....).....)"....)'....)-....)6....)@....)F....)S....)[....)a....)n....)u... )....!)....")....#)....$)....%)....&)....')....()....))....)..........B..............k.........:.........+.....+\....+.....+.....+V....+.....+v....+.....+r ...+. ...+W!...+.!...+."...+.#...+.#...+.#...+.#...+.#...+.#...+.$...+.$...+.$...+.$...+.$...+.%...+.%...+4%...+C%...+R%...+^%.. +t%..!+.%.."+.%..#+.%..$+.&..%+5&..&+D&..'+P&..(+o&..)+.&..+.&..++.'..,+/'..-+^'...+.'../+.'..0+.'..1+.'..2+.'..3+.(..4+A(..5+p(..6+.(..7+.)..8+S)..9+.)..:+.)..;+.)..<+8..=+Z..>+...?+...@+x+..A+.+..B+%,..C+g,..D+.,..E+1-..F+.-..G+.-..H+.-..I+.-..J+.-..K+....L+....M+....N+....O+'...P+...Q+-...R+1...S+6...T+@...U+K...V+S...W+]...X+b...Y+w...Z+y...[+\|...\+....]+....^+...._+....`+&/..a+m/..b+./..c+./..d+./..e+./..f+./..g+./..h+./..i+./..j+./..k+./..l+./..m+./..n+./..o

C:\Users\user\AppData\Roaming\WdGame\Utils\cef\locales\ca.pak Download File
Process:	C:\Users\user\Desktop\mAGs0IsoB7.exe
File Type:	data
Category:	dropped
Size (bytes):	49278
Entropy (8bit):	5.287029435704102
Encrypted:	false
SSDEEP:	1536:THxARU+AKn1h911Rx/TlRKgq5qmHg0uec38CtY+H1LjclR4+LXZY:iOQh91/x/5Mgq5qmHTueO8iH1LjW4+Lq
MD5:	63F9363AA965E0B6835B1B84C48B1AE8
SHA1:	8DCCB0F28805885A34ABB183A3C74E8D9F017774
SHA-256:	132F24640EF6E7BEB6BD5E7A8E556ADC2C8B209576D9A92B4D2CFFAF162958EF
SHA-512:	A81DB236F338CF33E58F102E2BB1AA2C7E625038F251DAB3081076CA3AA7A1671D857332DA397C780A05C1AEF2C63BA5FF22F8A5311B2C5DAE2B2FA5C1A8B009
Malicious:	false
Preview:	.........(#9...)#:...#A...+#H...,#K...-#N....#l.../#~...0#.....).....).....).....).....).....).....).....).....).....).....).....).....).....).....).....),....)7....)F....)K....)Q....)Z....)d....)j....)w....).....).....).....).... )....!)....")....#)....$)....%)....&)....')....()....))....).......... ....L....x...................)....+Q....+.....+.....+.....+.....++....+h....+.....+.....+.....+L....+u....+.....+.....+.....+.....+.....+.....+!....+1....+@....+b....+y....+.....+.....+.....+.....+.....+.....+.... +....!+...."+....#+....$+....%+....&+....'+ ...(+'...)+....*+H...++`...,+s...-+.....+..../+....0+....1+....2+....3+....4+....5+....6+. ..7+9 ..8+X ..9+y ..:+. ..;+. ..<+. ..=+. ..>+. ..?+.!..@+@!..A+Y!..B+.!..C+.!..D+.!..E+.!..F+,"..G+9"..H+?"..I+F"..J+P"..K+U"..L+X"..M+`"..N+c"..O+r"..P+v"..Q+x"..R+."..S+."..T+."..U+."..V+."..W+."..X+."..Y+."..Z+."..[+."..\+."..]+."..^+.".._+."..`+(#..a+J#..b+c#..c+j#..d+p#..e+v#..f+~#..g+.#..h+.#..i+.#..j+.#..k+.#..l+.#..m+.#..n+.#..o

C:\Users\user\AppData\Roaming\WdGame\Utils\cef\locales\cs.pak Download File
Process:	C:\Users\user\Desktop\mAGs0IsoB7.exe
File Type:	data
Category:	dropped
Size (bytes):	49160
Entropy (8bit):	5.70308885471918
Encrypted:	false
SSDEEP:	768:szl8FnAQG35P5Iq8Qb6ySisHKYjyAfJYhEyN12o9ZuxafeYhPLs9qVqriVqTxuI7:seFg8Q3s9RYhN119Hh8AsRx
MD5:	4D08959D93C5F8F665EF2824856F5E64
SHA1:	56D19A6DA933186467ADFAD896D58E78A4C12E65
SHA-256:	220AA7EE2524FF663FF866A589A99BDCD8238FE2F5F1676896E881ED713A4ECE
SHA-512:	AFE2624A566BE5DC22B47EDF25D22E5286120B6F6E4856584AE5512B43C83491C41BAB82CE0DE318A84AE1D828B8C9EF60C131D7C35769E3162028A2C6751A0C
Malicious:	false
Preview:	.........(#9...)#:...#A...+#H...,#K...-#N....#l.../#~...0#.....).....).....).....).....).....).....).....).....).....).....).....).....).....).....).....),....)7....)F....)K....)Q....)Z....)d....)j....)w....).....).....).....).... )....!)....")....#)....$)....%)....&)....')....()....))....)..........5...................R..............+5....+.....+.....+.....+S....+.....+.....+x....+.....+I....+.....+.....+I ...+. ...+. ...+.!...+.!...+.!...+2!...+B!...+Q!...+q!...+.!...+.!...+.!...+.!...+.!...+.!...+.!...+.!.. +.!..!+.!.."+.!..#+.!..$+."..%+."..&+."..'+$"..(+3"..)+D"..*+P"..++]"..,+i"..-+t"...+z"../+."..0+."..1+."..2+."..3+."..4+."..5+."..6+."..7+."..8+.#..9+.#..:+$#..;+5#..<+X#..=+j#..>+.#..?+.#..@+.#..A+.#..B+.$..C+/$..D+`$..E+{$..F+.$..G+.$..H+.$..I+.$..J+.$..K+.$..L+.$..M+.$..N+.$..O+.%..P+.%..Q+.%..R+&%..S+4%..T+I%..U+_%..V+u%..W+.%..X+.%..Y+.%..Z+.%..[+.%..\+.%..]+.%..^+.%.._+.%..`+.%..a+.&..b+.&..c+"&..d+(&..e+0&..f+=&..g+F&..h+J&..i+O&..j+T&..k+Y&..l+^&..m+c&..n+i&..o

C:\Users\user\AppData\Roaming\WdGame\Utils\cef\locales\da.pak Download File
Process:	C:\Users\user\Desktop\mAGs0IsoB7.exe
File Type:	data
Category:	dropped
Size (bytes):	44996
Entropy (8bit):	5.292668439694716
Encrypted:	false
SSDEEP:	768:+hW1usun9x6J7siMZ3XCX+K6ek4w7Oybg+y6TWNK5BomXbuDNveGGgEAZOnU4:+U1ux9xQuCX+zTLbXy6omCUAj4
MD5:	B99E86C8F7B181322ECE052E1A57A2BE
SHA1:	6CBC6A960F9E071F23AEE5D75F362CA5092924C6
SHA-256:	98214079C6D17EB7D878E23CFB3A87B6191D40BACCFA4895BCCF13324C1C29F4
SHA-512:	B03841B14868BBC1D9A65E23F86C3801EC8DC118D13EFB267239F795B2ADDDBDD94907FDEC7B558EC2767FAC83EE82417CD283418A0756F9A55821479D9C888B
Malicious:	false
Preview:	.........(#9...)#:...#A...+#H...,#K...-#N....#l.../#~...0#.....).....).....).....).....).....).....).....).....).....).....).....).....).....).....).....),....)7....)F....)K....)Q....)Z....)d....)j....)w....).....).....).....).... )....!)....")....#)....$)....%)....&)....')....()....))....)..........1....o...................g.........+.....+.....+L....+\|....+.....+.....+Z....+.....+.....+G....+.....+.....+3....+.....+.....+.....+.....+.....+.....+. ...+. ...+1 ...+< ...+C ...+K ...+U ...+_ ...+e ...+i ...+l .. +s ..!+\| .."+. ..#+. ..$+. ..%+. ..&+. ..'+. ..(+. ..)+. ..*+. ..++. ..,+. ..-+. ...+. ../+. ..0+.!..1+.!..2+.!..3+.!..4+"!..5+-!..6+K!..7+h!..8+.!..9+.!..:+.!..;+.!..<+.!..=+.!..>+."..?+#"..@+M"..A+h"..B+."..C+."..D+."..E+.#..F+A#..G+H#..H+U#..I+W#..J+_#..K+b#..L+e#..M+i#..N+l#..O+q#..P+t#..Q+w#..R+{#..S+.#..T+.#..U+.#..V+.#..W+.#..X+.#..Y+.#..Z+.#..[+.#..\+.#..]+.#..^+.#.._+.#..`+.#..a+.$..b+.$..c+.$..d+ $..e+($..f+3$..g+?$..h+C$..i+H$..j+M$..k+R$..l+W$..m+\$..n+e$..o

C:\Users\user\AppData\Roaming\WdGame\Utils\cef\locales\de.pak Download File
Process:	C:\Users\user\Desktop\mAGs0IsoB7.exe
File Type:	data
Category:	dropped
Size (bytes):	48672
Entropy (8bit):	5.329461064013263
Encrypted:	false
SSDEEP:	768:JwDgump1xwsJXusqGvl8TR16f49VX658lK9iXryiSolAsjvCs8RElXZxUM2i5G36:J4guQosF9L8TR1a5R9iXry5YX4Mx8XL4
MD5:	6A2B3005805A7500570E442251EFEBE8
SHA1:	DA2127683F6FB31D5E065DB13CE39AD4651C5DFB
SHA-256:	D84DDDA26F4F6122F05C2BF06924097D374FB6F339693A0F5F0A30A52B2FCE8F
SHA-512:	D30A8E10E9BC5A8A3FBCEDFA8D16CBFB8DE9C449CB48C81F2696E399BBEEB5B55529BF12B297C1248BE4432669C1D3C7D4219F8F8C57C50236547FF7CF79C019
Malicious:	false
Preview:	.........(#9...)#:...#A...+#H...,#K...-#N....#l.../#~...0#.....).....).....).....).....).....).....).....).....).....).....).....).....).....).....).....),....)7....)F....)K....)Q....)Z....)d....)j....)w....).....).....).....).... )....!)....")....#)....$)....%)....&)....')....()....))....)..........&....V........................E....+q....+.....+.....+.....++....+b....+.....+.....+.....+M....+.....+.....+.....+.....+C....+H....+O....+U....+h....+t....+.....+.....+.....+.....+.....+.....+.....+.....+.....+.... +....!+...."+...#+;...$+F...%+R...&+V...'+[...(+d...)+n...+....++....,+....-+.....+..../+....0+....1+....2+....3+. ..4+. ..5+7 ..6+T ..7+o ..8+. ..9+. ..:+. ..;+. ..<+. ..=+. ..>+. ..?+.!..@+1!..A+E!..B+m!..C+}!..D+.!..E+.!..F+.!..G+.!..H+.!..I+.!..J+.!..K+.!..L+.!..M+."..N+."..O+."..P+."..Q+."..R+."..S+ "..T+*"..U+5"..V+C"..W+P"..X+U"..Y+`"..Z+b"..[+e"..\+o"..]+t"..^+\|".._+."..`+."..a+."..b+."..c+."..d+."..e+."..f+.#..g+.#..h+.#..i+.#..j+.#..k+.#..l+"#..m+'#..n+0#..o

C:\Users\user\AppData\Roaming\WdGame\Utils\cef\locales\el.pak Download File
Process:	C:\Users\user\Desktop\mAGs0IsoB7.exe
File Type:	data
Category:	dropped
Size (bytes):	84473
Entropy (8bit):	4.80600665541308
Encrypted:	false
SSDEEP:	1536:CEI+xVsjrqyKKDrzUlXIgTlv0pod/Ayc6jKpKxGh5LSdKnwrhdGN:CXKGzUlX9lv0pod/AycKKpuE9SdKnwrC
MD5:	9CA20DA58E84E6F426DEAF7821530EC6
SHA1:	8D3B3EE5A2A3EB977AC6E88F4D3A448DE89A87A6
SHA-256:	9A7BBBA149721C583A42A74EC6A6579EED9999A8EA4B25D37315C5CC5A14B0BD
SHA-512:	F26A7B6CEEFB96D37AD0818A22A35DF5717331CB74835E7010CE8E1430A49C2A2467B7078B75068B7C8A422D40E89CE17E03C2DE82086FE66E3CC7349B3B39B0
Malicious:	false
Preview:	.........(#9...)#:...#A...+#H...,#K...-#N....#l.../#~...0#.....).....).....).....).....).....).....).....).....).....).....).....).....).....).....).....),....)7....)F....)K....)Q....)Z....)d....)j....)w....).....).....).....).... )....!)....")....#)....$)....%)....&)....')....()....))....)..........0...................<..............+.....+ ....+M....+.....+.....+:....+.....+.....+a....+.....+.....+{....+.....+. ...+q ...+} ...+. ...+. ...+. ...+. ...+. ...+!!...+>!...+a!...+~!...+.!...+.!...+.!...+.!...+.!.. +."..!+.".."+-"..#+@"..$+Y"..%+l"..&+x"..'+."..(+."..)+."..+."..++."..,+.#..-+.#...+/#../+>#..0+Q#..1+f#..2+w#..3+.#..4+.#..5+.#..6+.$..7+[$..8+.$..9+.$..:+.$..;+.%..<+j%..=+.%..>+.%..?+3&..@+.&..A+.&..B+m'..C+.'..D+.(..E+P(..F+.(..G+.(..H+.(..I+.)..J+.)..K+.)..L+")..M+0)..N+3)..O+L)..P+O)..Q+R)..R+V)..S+[)..T+v)..U+.)..V+.)..W+.)..X+.)..Y+.)..Z+.)..[+.)..\+.)..]+.)..^+..._+4..`+h..a+...b+...c+...d+...e+...f+...g+...h+...i+.+..j+.+..k+.+..l+.+..m+.+..n+.+..o

C:\Users\user\AppData\Roaming\WdGame\Utils\cef\locales\en-GB.pak Download File
Process:	C:\Users\user\Desktop\mAGs0IsoB7.exe
File Type:	data
Category:	dropped
Size (bytes):	40510
Entropy (8bit):	5.329180273047909
Encrypted:	false
SSDEEP:	768:9YKjUTS5rq2bJg2fmgglS7d0+VEIFEpJQFAxSMW80Blnz1SI/QBoRYSc3:LjU2pfmgglS7dZEpqABUBvS2eoRYS4
MD5:	3A0A0F6B73F7F7E8A021EE435F494139
SHA1:	D63B91C0923872B2BA2CABF5BD8B00B6437B3B3F
SHA-256:	0150CCA64343E7C4E29DDBB1E266A77FDED9DBE42A09D4ADEEDB1DCA61F07FA8
SHA-512:	5B895F8D1DA1C5C1F7A6C29B06D8816FAFDB518140D648B0A7B0747CD0349DA25148999EED37DA1BAD44B1D48BE92110AC8B35E8BC21B5B50C4DE9D535DB5766
Malicious:	false
Preview:	.........(#9...)#:...#A...+#H...,#K...-#N....#l.../#~...0#.....).....).....).....).....).....).....).....).....).....).....).....).....).....).....).....),....)7....)F....)K....)Q....)Z....)d....)j....)w....).....).....).....).... )....!)....")....#)....$)....%)....&)....')....()....))....)..........%....S........................=....+e....+.....+.....+.....+.....+E....+}....+.....+.....+.....+H....+x....+.....+.....+.....+.....+.....+.....++....+4....+A....+X....+e....+n....+w....+.....+.....+.....+.....+.... +....!+...."+....#+....$+....%+....&+....'+....(+....)+....+....++....,+....-+.....+..../+....0+$...1+...2+1...3+<...4+K...5+Y...6+t...7+....8+....9+....:+....;+....<+....=+....>+. ..?+. ..@+: ..A+I ..B+m ..C+. ..D+. ..E+. ..F+. ..G+. ..H+. ..I+. ..J+.!..K+.!..L+.!..M+.!..N+.!..O+.!..P+.!..Q+.!..R+.!..S+#!..T+-!..U+8!..V+@!..W+J!..X+O!..Y+T!..Z+V!..[+Y!..\+b!..]+g!..^+m!.._+}!..`+.!..a+.!..b+.!..c+.!..d+.!..e+.!..f+.!..g+.!..h+.!..i+.!..j+.!..k+.!..l+.!..m+.!..n+.!..o

C:\Users\user\AppData\Roaming\WdGame\Utils\cef\locales\en-US.pak Download File
Process:	C:\Users\user\Desktop\mAGs0IsoB7.exe
File Type:	data
Category:	dropped
Size (bytes):	40614
Entropy (8bit):	5.311820890684837
Encrypted:	false
SSDEEP:	768:obq1iD/eqv9gNfDggl+dON+VcCwEpgmA1EmW+BlnkVSI/SBURkSNl:obq1iIfDggl+dO/EpVAppBAS2MURkSD
MD5:	EA20F7EF299CA680A72E9163C8ED0093
SHA1:	F9EF3B9CC76F34F83142E1FCB67BF5C3F9031953
SHA-256:	A76263A6B5C969A0B0A2CC90BDB86D35F3ADADDEF41884FA84832C24B0940192
SHA-512:	C0D217475E81A629ABCE4CC3557F1AE3422EEFCB27C71A36CDBA607036977492EB5C28F31F3B9E9724FBDA78661D29F27DB816D18B86EFC845B015298A6FE53D
Malicious:	false
Preview:	.........(#9...)#:...#A...+#H...,#K...-#N....#l.../#~...0#.....).....).....).....).....).....).....).....).....).....).....).....).....).....).....).....),....)7....)F....)K....)Q....)Z....)d....)j....)w....).....).....).....).... )....!)....")....#)....$)....%)....&)....')....()....))....)..........)....[...................'....Y....+.....+.....+.....+.....+C....+y....+.....+.....+'....+]....+.....+.....+.....+,....+]....+b....+k....+r....+.....+.....+.....+.....+.....+.....+.....+.....+.....+.....+.....+.... +....!+...."+....#+....$+....%+)...&+,...'+2...(+9...)+B...+M...++Y...,+b...-+m....+r.../+v...0+{...1+....2+....3+....4+....5+....6+....7+....8+....9+. ..:+. ..;+. ..<+7 ..=+A ..>+` ..?+n ..@+. ..A+. ..B+. ..C+. ..D+.!..E+.!..F+F!..G+M!..H+Q!..I+S!..J+Y!..K+^!..L+a!..M+d!..N+g!..O+k!..P+n!..Q+q!..R+u!..S+z!..T+.!..U+.!..V+.!..W+.!..X+.!..Y+.!..Z+.!..[+.!..\+.!..]+.!..^+.!.._+.!..`+.!..a+.!..b+."..c+."..d+."..e+."..f+!"..g+"..h+."..i+3"..j+8"..k+="..l+B"..m+G"..n+M"..o

C:\Users\user\AppData\Roaming\WdGame\Utils\cef\locales\es-419.pak Download File
Process:	C:\Users\user\Desktop\mAGs0IsoB7.exe
File Type:	data
Category:	dropped
Size (bytes):	47850
Entropy (8bit):	5.247501831724061
Encrypted:	false
SSDEEP:	768:hbRytj/884TLyoKmP2sbBgHTMNh6S/z28/RfArKgBCAIQUuY8BKRJFX11V0:+jDwLyePzm06S7DdAUuY8BKRJFXvV0
MD5:	4E39E879E5A53DF3D78DB05328BFE87E
SHA1:	80B1ABC10C0917A99E1F76F946A8F39471DB83AA
SHA-256:	F56A343F0AA70ACE3BD982D8DBDDD59CD297CFFD2BA2CF7A49E664A752C70606
SHA-512:	FE865F4F4CBABCCD115AD926C2AFEC84FA8ABF34DC4E32D17D4B593A5A29F436F5EBD2F7D461905F76620DCF4E7E5841F7B47A33A08E74F367585DBB034889F0
Malicious:	false
Preview:	.........(#9...)#:...#A...+#H...,#K...-#N....#l.../#~...0#.....).....).....).....).....).....).....).....).....).....).....).....).....).....).....).....),....)7....)F....)K....)Q....)Z....)d....)j....)w....).....).....).....).... )....!)....")....#)....$)....%)....&)....')....()....))....).........."....T........................E....+o....+.....+.....+.....+!....+U....+.....+.....+.....+F....+~....+.....+.....+.....+O....+R....+V....+^....+u....+.....+.....+.....+.....+.....+.....+.....+.....+.....+.....+.... +$...!+-..."+6...#+M...$+\...%+i...&+q...'+y...(+....)+....*+....++....,+....-+.....+. ../+. ..0+. ..1+. ..2+. ..3+. ..4+? ..5+Q ..6+y ..7+. ..8+. ..9+. ..:+. ..;+. ..<+.!..=+2!..>+_!..?+.!..@+.!..A+.!..B+."..C+2"..D+n"..E+."..F+."..G+."..H+."..I+."..J+."..K+."..L+."..M+."..N+."..O+.#..P+.#..Q+.#..R+.#..S+.#..T+-#..U+;#..V+H#..W+T#..X+Y#..Y+e#..Z+g#..[+j#..\+\|#..]+.#..^+.#.._+.#..`+.#..a+.#..b+.#..c+.$..d+.$..e+.$..f+.$..g+($..h+,$..i+1$..j+6$..k+;$..l+@$..m+E$..n+K$..o

C:\Users\user\AppData\Roaming\WdGame\Utils\cef\locales\es.pak Download File
Process:	C:\Users\user\Desktop\mAGs0IsoB7.exe
File Type:	data
Category:	dropped
Size (bytes):	49520
Entropy (8bit):	5.204767746678177
Encrypted:	false
SSDEEP:	768:isK3WDRLeNearNkrBvcqflXDwS5pN8IBCEfIQgRCPJRvX6wTTgsgWJ49zdgK3:4hFroB0qtwSrWlhchRvXPTEsgq49zKK3
MD5:	3A7434E0EDE68CD976502CF490C6B8E2
SHA1:	0590CEE58D9E6B435B8B26E5F52BC919AC9F4F34
SHA-256:	D2DF093E94AEB5ABB31F1482BEBCD1302AE699B98271072386EBBC803496DCD2
SHA-512:	C8F21D4BA907F68DC68CDD458A0C150DF0CFEC4337646D58365BE1626569CFEA8D27CEF8BBEF49D77AEB034B4DF94123F894CF2F3CA5876D33F8F861A5DEC447
Malicious:	false
Preview:	.........(#9...)#:...#A...+#H...,#K...-#N....#l.../#~...0#.....).....).....).....).....).....).....).....).....).....).....).....).....).....).....).....),....)7....)F....)K....)Q....)Z....)d....)j....)w....).....).....).....).... )....!)....")....#)....$)....%)....&)....')....()....))....).......... ....P........................7....+_....+.....+.....+.....+.....+9....+v....+.....+.....+.....+N....+{....+.....+.....+.....+.....+.....+.....+5....+G....+W....+{....+.....+.....+.....+.....+.....+.....+.....+.... +....!+...."+....#+....$+....%+)...&+1...'+9...(+K...)+Z...*+v...++....,+....-+.....+..../+....0+....1+....2+....3+....4+....5+. ..6+6 ..7+Z ..8+s ..9+. ..:+. ..;+. ..<+. ..=+. ..>+(!..?+H!..@+.!..A+.!..B+.!..C+.!..D+-"..E+N"..F+."..G+."..H+."..I+."..J+."..K+."..L+."..M+."..N+."..O+."..P+."..Q+."..R+."..S+."..T+."..U+.#..V+.#..W+ #..X+%#..Y+,#..Z+.#..[+1#..\+C#..]+G#..^+N#.._+h#..`+.#..a+.#..b+.#..c+.#..d+.#..e+.#..f+.#..g+.#..h+.#..i+.#..j+.#..k+.#..l+.$..m+.$..n+.$..o

C:\Users\user\AppData\Roaming\WdGame\Utils\cef\locales\et.pak Download File
Process:	C:\Users\user\Desktop\mAGs0IsoB7.exe
File Type:	data
Category:	dropped
Size (bytes):	42620
Entropy (8bit):	5.372101421577419
Encrypted:	false
SSDEEP:	768:+Cqf8JNsulBv3Lr5igUAMAOfB0ZUJo+RF7vg63Uoy1psCR:2WOB0ZUJHBlFCR
MD5:	EFDE79DD01A9A54343213E92E0F0FD17
SHA1:	5E7E14AA6BE07871797A5DD6D322717DF7E1DD5E
SHA-256:	556BEF8CE02FDB594DAF3BECAFAA474EF0DC12B127289E63B3D8D8F34325802B
SHA-512:	AED31BC8AA639C246ED0CFE4495EABBD1D3F214CDCEC52F51A8E26994554CC6E994F6F82DBB8DA57D792F118638F83E8D4D1BD3C20E8C1286B31AE4AA0EFC981
Malicious:	false
Preview:	.........(#9...)#:...#A...+#H...,#K...-#N....#l.../#~...0#.....).....).....).....).....).....).....).....).....).....).....).....).....).....).....).....),....)7....)F....)K....)Q....)Z....)d....)j....)w....).....).....).....).... )....!)....")....#)....$)....%)....&)....')....()....))....).......... ....O....~...................4....+\....+.....+.....+.....+.....+I....+.....+.....+.....+T....+.....+.....+.....+1....+h....+m....+q....+x....+.....+.....+.....+.....+.....+.....+.....+.....+.....+.....+.....+.... +(...!+2..."+8...#+A...$+K...%+U...&+Z...'+a...(+q...)+....*+....++....,+....-+.....+..../+....0+....1+....2+....3+....4+....5+. ..6+ ..7+3 ..8+M ..9+f ..:+w ..;+. ..<+. ..=+. ..>+. ..?+. ..@+$!..A+A!..B+o!..C+.!..D+.!..E+.!..F+.!..G+.!..H+.!..I+.!..J+."..K+."..L+."..M+."..N+."..O+."..P+."..Q+."..R+ "..S+%"..T+."..U+7"..V+@"..W+H"..X+U"..Y+["..Z+]"..[+`"..\+q"..]+u"..^+\|".._+."..`+."..a+."..b+."..c+."..d+."..e+."..f+."..g+.#..h+.#..i+.#..j+.#..k+.#..l+.#..m+##..n+)#..o

C:\Users\user\AppData\Roaming\WdGame\Utils\cef\locales\fa.pak Download File
Process:	C:\Users\user\Desktop\mAGs0IsoB7.exe
File Type:	data
Category:	dropped
Size (bytes):	66307
Entropy (8bit):	5.0918261334420105
Encrypted:	false
SSDEEP:	1536:HFHhwLeXFkTEwhw+Y+smpAVlg+EkhPK/ofjHw9BVRlWaXZl0pPxeAkriLijiti4z:lmLeX6TEwGssmpulg+rP8Uw3/lthipLP
MD5:	8B70D5FD5CD6756F1741BF06BC45440C
SHA1:	31D7407B576777420E8EE921988E54181AC82839
SHA-256:	1C0AF7FA747D3C5906191FE47C1D17F7FEA3984C42F0432927E5E52D02DBC64E
SHA-512:	8DDC4ECC9E520F31B609E5BE1E58A6E439AD1AEE0955204189E77BF67445443526BC6763088E2833D7104DC9BE7960C2B9552D54B400AC2C5FB5BFAA974B073E
Malicious:	false
Preview:	.........(#9...)#;...#B...+#I...,#L...-#O....#m.../#....0#.....).....).....).....).....).....).....).....).....).....).....).....).....).....).....).....)-....)8....)G....)L....)R....)[....)e....)k....)x....).....).....).....).... )....!)....")....#)....$)....%)....&)....')....()....))....)..........G...................c..............+<....+.....+.....+.....+B....+.....+r....+.....+.....+2 ...+. ...+.!...+s!...+.!...+."...+."...+("...+2"...+U"...+k"...+\|"...+."...+."...+."...+."...+.#...+##...+-#...+>#...+F#.. +W#..!+h#.."+v#..#+.#..$+.#..%+.#..&+.#..'+.#..(+.#..)+.#..*+.$..++.$..,+4$..-+P$...+[$../+b$..0+i$..1+x$..2+.$..3+.$..4+.$..5+.$..6+.$..7+.$..8+.%..9+-%..:+E%..;+W%..<+.%..=+.%..>+.%..?+.%..@+.&..A+;&..B+u&..C+.&..D+.&..E+.&..F+''..G+='..H+P'..I+Z'..J+`'..K+h'..L+k'..M+n'..N+q'..O+y'..P+.'..Q+.'..R+.'..S+.'..T+.'..U+.'..V+.'..W+.'..X+.'..Y+.'..Z+.'..[+.'..\+.'..]+.(..^+.(.._+/(..`+G(..a+c(..b+v(..c+}(..d+.(..e+.(..f+.(..g+.(..h+.(..i+.(..j+.(..k+.(..l+.(..m+.)..n+.)..o

C:\Users\user\AppData\Roaming\WdGame\Utils\cef\locales\fi.pak Download File
Process:	C:\Users\user\Desktop\mAGs0IsoB7.exe
File Type:	data
Category:	dropped
Size (bytes):	44516
Entropy (8bit):	5.287952317607699
Encrypted:	false
SSDEEP:	768:zUZLzZ0LdAyHXHhKDfTtxZGSC16ZrC0xH6zxStVA9X99nZDAYW6I4:LLHXHhKDfTtHC8VtxH6tStmbZDAWI4
MD5:	D4A7BA8027CFCA09CAF1A7296EB3E7EC
SHA1:	7FAE130235012413DD7C2049BF790AF0EF89F219
SHA-256:	84F9FF560F3DF29722E75F47E29E978E4D963F36109A28D432DDBBA8737F977F
SHA-512:	488B282D83EF3BCF1BC058CC383B8FFFB3767B8AF51D93E7D37C866BCF84827ACFCAE7AD766B454DE08CFA9AC9C0FEDD9B65FF455B16CB857DEC4ED42B8F034D
Malicious:	false
Preview:	.........(#9...)#:...#A...+#H...,#K...-#N....#l.../#~...0#.....).....).....).....).....).....).....).....).....).....).....).....).....).....).....).....),....)7....)F....)K....)Q....)Z....)d....)j....)w....).....).....).....).... )....!)....")....#)....$)....%)....&)....')....()....))....).......... ....P........................E....+o....+.....+.....+.....+/....+h....+.....+.....+3....+s....+.....+.....+.....+U....+.....+.....+.....+.....+.....+.....+.....+.....+.....+.....+$....+2....+B....+J....+O....+T... +]...!+e..."+l...#+\|...$+....%+....&+....'+....(+....)+....*+....++....,+....-+.....+..../+....0+. ..1+. ..2+. ..3+# ..4+5 ..5+F ..6+^ ..7+w ..8+. ..9+. ..:+. ..;+. ..<+. ..=+. ..>+.!..?+9!..@+n!..A+.!..B+.!..C+.!..D+.!..E+."..F+:"..G+G"..H+T"..I+V"..J+]"..K+b"..L+e"..M+o"..N+r"..O+y"..P+\|"..Q+."..R+."..S+."..T+."..U+."..V+."..W+."..X+."..Y+."..Z+."..[+."..\+."..]+."..^+.".._+."..`+.#..a+&#..b+6#..c+=#..d+C#..e+K#..f+W#..g+^#..h+b#..i+g#..j+l#..k+q#..l+v#..m+{#..n+.#..o

C:\Users\user\AppData\Roaming\WdGame\Utils\cef\locales\fil.pak Download File
Process:	C:\Users\user\Desktop\mAGs0IsoB7.exe
File Type:	data
Category:	dropped
Size (bytes):	49907
Entropy (8bit):	5.085365081063145
Encrypted:	false
SSDEEP:	768:qxu3ggT0vzpJLWm6RSdoOHJrkOo3SmqucTkef7VdMOz8k+eD4My31YpB:F5RSdo8YOodqucTkefx3/a31o
MD5:	BA30C440E34A828C656B3057A6EF50D2
SHA1:	CB223B3CC624A316CE4AF12D0505C000A6820ADD
SHA-256:	C9AC272850E1DA405981EC9C22C04280190988C69F20D8FA9D4EC35CF179D0A2
SHA-512:	3AF89E096D1ED5C6814A331A00925FBFEC6A971122BDA17BF21402FE1A81A04C143744723106D0B7B5DFED55FCDACBC187E34BEFF5C51C22A18FDF2ED17E79AF
Malicious:	false
Preview:	.........(#9...)#:...#A...+#H...,#K...-#N....#l.../#~...0#.....).....).....).....).....).....).....).....).....).....).....).....).....).....).....).....),....)7....)F....)K....)Q....)Z....)d....)j....)w....).....).....).....).... )....!)....")....#)....$)....%)....&)....')....()....))....)..........=....}..............7..............+.....+3....+h....+.....+.....+[....+.....+V....+.....+F....+.....+# ...+. ...+. ...+G!...+M!...+T!...+b!...+{!...+.!...+.!...+.!...+.!...+.!...+.!...+.!...+."...+."...+."...+.".. +'"..!+/".."+:"..#+I"..$+U"..%+b"..&+h"..'+q"..(+w"..)+."..*+."..++."..,+."..-+."...+."../+."..0+."..1+."..2+."..3+.#..4+"#..5+C#..6+g#..7+.#..8+.#..9+.#..:+.#..;+.#..<+.$..=+.$..>+>$..?+Y$..@+.$..A+.$..B+.$..C+.$..D+.%..E+6%..F+l%..G+z%..H+~%..I+.%..J+.%..K+.%..L+.%..M+.%..N+.%..O+.%..P+.%..Q+.%..R+.%..S+.%..T+.%..U+.%..V+.%..W+.%..X+.%..Y+.%..Z+.%..[+.%..\+.%..]+.%..^+.%.._+.&..`+0&..a+H&..b+T&..c+[&..d+a&..e+i&..f+s&..g+\|&..h+.&..i+.&..j+.&..k+.&..l+.&..m+.&..n+.&..o

C:\Users\user\AppData\Roaming\WdGame\Utils\cef\locales\fr.pak Download File
Process:	C:\Users\user\Desktop\mAGs0IsoB7.exe
File Type:	data
Category:	dropped
Size (bytes):	51933
Entropy (8bit):	5.273343864129208
Encrypted:	false
SSDEEP:	768:+N0Y7nP9CqzpfliN+XdG0m0skOc/N4SUG7cCmHL5n32YY0gyroFpwu:A0m8qHiNMOc/OcYCmGtyroFGu
MD5:	62EF4AB8C2884194759A32A45F4FC260
SHA1:	BA939B19B995B7A4438C86902377A1C22594B3E3
SHA-256:	DE82F49719BA9B941DFC9A2141043A9C78A6F54B8933FEE5C1BFC3A5175AE500
SHA-512:	D2AF98D51E77930A617D5F060D9ABE94DDA5E8F54BF1B79B76F16BEC5CFB4837A72C3C0BA37E004A3448D92402E884FA98C977AAD97061C5E0045B7F92C6323F
Malicious:	false
Preview:	.........(#9...)#:...#A...+#H...,#K...-#N....#l.../#~...0#.....).....).....).....).....).....).....).....).....).....).....).....).....).....).....).....),....)7....)F....)K....)Q....)Z....)d....)j....)w....).....).....).....).... )....!)....")....#)....$)....%)....&)....')....()....))....)..........+....l...................l.........+.....++....+d....+.....+.....+'....+.....+.....+.....+.....+.....+.....+]....+.....+.....+. ...+. ...+. ...+. ...+. ...+> ...+d ...+\| ...+. ...+. ...+. ...+. ...+. ...+. ...+. .. +. ..!+. .."+. ..#+.!..$+.!..%+#!..&+!..'+-!..(+>!..)+K!..+e!..++.!..,+.!..-+.!...+.!../+.!..0+.!..1+.!..2+.!..3+.!..4+.!..5+."..6+8"..7+]"..8+y"..9+."..:+."..;+."..<+."..=+.#..>+?#..?+o#..@+.#..A+.#..B+-$..C+Q$..D+.$..E+.$..F+.$..G+.$..H+.%..I+.%..J+.%..K+.%..L+.%..M+.%..N+#%..O+*%..P+/%..Q+2%..R+9%..S+?%..T+E%..U+K%..V+O%..W+R%..X+Y%..Y+_%..Z+a%..[+d%..\+j%..]+q%..^+y%.._+.%..`+.%..a+.%..b+.&..c+.&..d+.&..e+.&..f+&&..g+6&..h+;&..i+A&..j+G&..k+M&..l+S&..m+Y&..n+`&..o

C:\Users\user\AppData\Roaming\WdGame\Utils\cef\locales\gu.pak Download File
Process:	C:\Users\user\Desktop\mAGs0IsoB7.exe
File Type:	data
Category:	dropped
Size (bytes):	94190
Entropy (8bit):	4.423866245013474
Encrypted:	false
SSDEEP:	1536:z2sgszl3/NifmzduKOeEozoVtG2BCXyQIXnSAcfU4RXtwAdjbXOgJBC4uKBBxj7F:Nzl3/NifGduKOeEozo7j4i9XnSAcs4RJ
MD5:	470244ADC1084B9411B6BD8F0A028EA7
SHA1:	589C30309FC65E546A740A5D6EF04DD41919C2FC
SHA-256:	5A64CB26F7E95C44B9D400D8B30BEFE53C09096FB0385856F4B5B9E9006F9FD5
SHA-512:	D094F52F4F39D7DCE640102B5CA09A65CE360620A9B259FBCB5BCD14366F07E90C2A0641B15766D73C5FE6559C9FE56CFBF611A168871A28EC3225CFB30A4203
Malicious:	false
Preview:	.........(#9...)#;...#B...+#I...,#L...-#O....#m.../#....0#.....).....).....).....).....).....).....).....).....).....).....).....).....).....).....).....)-....)8....)G....)L....)R....)[....)e....)k....)x....).....).....).....).... )....!)....")....#)....$)....%)....&)....')....()....))....)..........8..............I..............i....+.....+.....+h....+.....+.....+\|....+.....+b....+.....+O ...+. ...+2!...+.!...+%"...+."...+."...+."...+."...+.#...+)#...+>#...+.#...+.#...+.#...+.#...+.$...+$$...+=$...+L$...+_$.. +x$..!+.$.."+.$..#+.$..$+.%..%+3%..&+<%..'+N%..(+g%..)+.%..+.%..++.%..,+.&..-+0&...+S&../+`&..0+w&..1+.&..2+.&..3+.&..4+.&..5+&'..6+x'..7+.'..8+.(..9+E(..:+a(..;+}(..<+.(..=+.)..>+k)..?+.)..@+&..A+e..B+...C+.+..D+.+..E+.+..F+;,..G+T,..H+g,..I+p,..J+.,..K+.,..L+.,..M+.,..N+.,..O+.,..P+.,..Q+.,..R+.,..S+.,..T+.,..U+.,..V+.-..W+!-..X+&-..Y+5-..Z+7-..[+:-..\+C-..]+^-..^+s-.._+.-..`+.-..a+....b+7...c+>...d+D...e+L...f+a...g+m...h+y...i+~...j+....k+....l+....m+....n+....o

C:\Users\user\AppData\Roaming\WdGame\Utils\cef\locales\he.pak Download File
Process:	C:\Users\user\Desktop\mAGs0IsoB7.exe
File Type:	data
Category:	dropped
Size (bytes):	56107
Entropy (8bit):	4.747702256805146
Encrypted:	false
SSDEEP:	1536:2mLx1igXzDXq8AUfGEBgVE/DXDTRx9DVUZoUTKPYmOCjMUy+xxXhvJCpXTed2scz:NxX/r1MUy+D1JCpXTiVcI/0N
MD5:	A322FE105DF1A8FF7BBB5411B2DDF744
SHA1:	B546989536C7FDF2EA7852CEF72D4690ED6F52DF
SHA-256:	3525F253E1E2C575C22FDD87385D631FF848BE6D065CAFD2710E5CB00DD6E27B
SHA-512:	77112989A0E8391E991F5E30901BBA9EC3FDC7E6C49955236C1856F7B74B64B1688FABC15B759ECFC7646FD1C573B1CCC0E8AE8E8A374FAD18606B58CDE0AD06
Malicious:	false
Preview:	.........(#9...)#:...#A...+#H...,#K...-#N....#l.../#~...0#.....).....).....).....).....).....).....).....).....).....).....).....).....).....).....).....),....)7....)F....)K....)Q....)Z....)d....)j....)w....).....).....).....).... )....!)....")....#)....$)....%)....&)....')....()....))....)..........N..............Y..............b....+.....+.....+k....+.....+.....+.....+%....+.....+! ...+. ...+.!...+.!...+."...+}"...+."...+."...+.#...+.#...+2#...+C#...+U#...+w#...+.#...+.#...+.#...+.#...+.#...+.#...+.#...+.#.. +.#..!+.#.."+.#..#+.$..$+.$..%+-$..&+7$..'+A$..(+P$..)+]$..*+p$..++.$..,+.$..-+.$...+.$../+.$..0+.$..1+.$..2+.$..3+.$..4+.$..5+.%..6+%%..7+B%..8+c%..9+.%..:+.%..;+.%..<+.%..=+.%..>+.&..?+1&..@+j&..A+.&..B+.&..C+.&..D+.'..E+8'..F+o'..G+.'..H+.'..I+.'..J+.'..K+.'..L+.'..M+.'..N+.'..O+.'..P+.'..Q+.'..R+.'..S+.'..T+.'..U+.'..V+.'..W+.(..X+.(..Y+.(..Z+.(..[+.(..\+&(..]+.(..^+8(.._+X(..`+}(..a+.(..b+.(..c+.(..d+.(..e+.(..f+.(..g+.(..h+.(..i+.(..j+.(..k+.(..l+.(..m+.)..n+.)..o

C:\Users\user\AppData\Roaming\WdGame\Utils\cef\locales\hi.pak Download File
Process:	C:\Users\user\Desktop\mAGs0IsoB7.exe
File Type:	data
Category:	dropped
Size (bytes):	96483
Entropy (8bit):	4.39980282382201
Encrypted:	false
SSDEEP:	1536:SrFi05kT4PSLfgx4JtqT386/TOfFT3mcp:4i/gx4JtqT3TTOfFrmC
MD5:	A8DBE08E837AF7350D12B0C6797E8F26
SHA1:	C9142ED1D8A1B3A5BDC2DDD04F803A4A82C6ABE0
SHA-256:	7607F601E7F7BC4A7DEB1F68CF3D5791EC4D2811F37FAC0EFC658EB1CA1D9B04
SHA-512:	594A9E18AC99148418C866BE74385249A44CD0C8B98065C0F0CA852DCC4532AB1DBFAC884635E173BE11348B42527ABCD8F8DD238FECB0231B167072ED94A616
Malicious:	false
Preview:	.........(#9...)#;...#B...+#I...,#L...-#O....#m.../#....0#.....).....).....).....).....).....).....).....).....).....).....).....).....).....).....).....)-....)8....)G....)L....)R....)[....)e....)k....)x....).....).....).....).... )....!)....")....#)....$)....%)....&)....')....()....))....)..........S..............I..............E....+.....+.....+;....+{....+.....+F....+.....+#....+.....+.....+S ...+. ...+B!...+.!...+."...+ "...+3"...+A"...+y"...+."...+."...+.#...+2#...+Q#...+p#...+.#...+.#...+.#...+.#...+.#.. +.$..!+'$.."+X$..#+.$..$+.$..%+.$..&+.$..'+.$..(+.$..)+.%..+2%..++a%..,+.%..-+.%...+.%../+.%..0+.&..1+4&..2+D&..3+e&..4+.&..5+.&..6+.'..7+G'..8+.'..9+.'..:+.'..;+.(..<+O(..=+v(..>+.(..?+.(..@+U)..A+.)..B+.)..C+9..D+...E+...F+J+..G+g+..H+~+..I+.+..J+.+..K+.+..L+.+..M+.+..N+.+..O+.+..P+.+..Q+.+..R+.+..S+.+..T+.,..U+0,..V+C,..W+Y,..X+^,..Y+c,..Z+e,..[+h,..\+q,..]+.,..^+.,.._+.,..`+.,..a++-..b+M-..c+T-..d+Z-..e+b-..f+q-..g+z-..h+.-..i+.-..j+.-..k+.-..l+.-..m+.-..n+.-..o

C:\Users\user\AppData\Roaming\WdGame\Utils\cef\locales\hr.pak Download File
Process:	C:\Users\user\Desktop\mAGs0IsoB7.exe
File Type:	data
Category:	dropped
Size (bytes):	46251
Entropy (8bit):	5.4078672775850105
Encrypted:	false
SSDEEP:	768:u0UUzsAu0EnGmYIp0YwpyZs9XtS6DgBx/KlsoPYVWS/ok/yR+RPj:um5uNq/9yOXtS6DgrCCzVDVFPj
MD5:	D88949FD915BCB7A18AD44474EF74DA7
SHA1:	D1FA82BB1D7DD27FBD95CF08CADBEF7A874B5333
SHA-256:	1ED331FBBA49E120E97ECDB00E95EF6907DFBD060A061381FB5B12D712E32E58
SHA-512:	8AC613F86DD25ED77D7296313292272F8532D13E2DA0111256F771311D95D715AD7235036E48CC8AF46DE387C6A65B1696482148F7218EF147AF301FA488D756
Malicious:	false
Preview:	.........(#9...)#:...#A...+#H...,#K...-#N....#l.../#~...0#.....).....).....).....).....).....).....).....).....).....).....).....).....).....).....).....),....)7....)F....)K....)Q....)Z....)d....)j....)w....).....).....).....).... )....!)....")....#)....$)....%)....&)....')....()....))....)..........0....{..............H..............+.....+d....+.....+.....+.....+f....+.....+.....+o....+.....+.....+W....+.....+.....+O ...+T ...+Y ...+a ...+y ...+. ...+. ...+. ...+. ...+. ...+. ...+. ...+. ...+. ...+.!...+.!.. +.!..!+ !.."+%!..#+2!..$+<!..%+E!..&+K!..'+P!..(+c!..)+w!..*+.!..++.!..,+.!..-+.!...+.!../+.!..0+.!..1+.!..2+.!..3+.!..4+.!..5+."..6+."..7+E"..8+^"..9+w"..:+."..;+."..<+."..=+."..>+."..?+.#..@+.#..A+E#..B+n#..C+.#..D+.#..E+.#..F+.#..G+.$..H+.$..I+.$..J+.$..K+#$..L+&$..M+-$..N+0$..O+A$..P+D$..Q+G$..R+K$..S+P$..T+_$..U+m$..V+.$..W+.$..X+.$..Y+.$..Z+.$..[+.$..\+.$..]+.$..^+.$.._+.$..`+.$..a+.$..b+.%..c+.%..d+.%..e+!%..f+-%..g+@%..h+D%..i+I%..j+N%..k+S%..l+X%..m+]%..n+c%..o

C:\Users\user\AppData\Roaming\WdGame\Utils\cef\locales\hu.pak Download File
Process:	C:\Users\user\Desktop\mAGs0IsoB7.exe
File Type:	data
Category:	dropped
Size (bytes):	49509
Entropy (8bit):	5.575236094710869
Encrypted:	false
SSDEEP:	1536:1dpEpE9r2tuVdD+DlK6Tk+wudBmFZfRRm0b+ZwUo:1dpEpE9ri+dD+Y6Tk+wudBmFZfHlv
MD5:	C81DF0315DB423D0C318D46E8FCE8E39
SHA1:	CB5E676E5CEBF20AE94C3062321DAB37520D2689
SHA-256:	6D7620CA3059FCF4FB2DCD935BFAA45968EF4851CD8DCE9F435A6D5B129B2399
SHA-512:	A5E39C53F0D66CA4B8356C05D6F3AD6F4F1F8F3559B9B9F5DFA8716E5C256EA3649B8D53E6BFF6C593D9F2D1207D4BA7BF6785A443D56D446A6252B98DA45CB4
Malicious:	false
Preview:	.........(#9...)#:...#A...+#H...,#K...-#N....#l.../#~...0#.....).....).....).....).....).....).....).....).....).....).....).....).....).....).....).....),....)7....)F....)K....)Q....)Z....)d....)j....)w....).....).....).....).... )....!)....")....#)....$)....%)....&)....')....()....))....).........."....W........................:....+a....+.....+.....+.....+.....+F....+.....+.....+.....+L....+.....+.....+.....+.....+=....+?....+E....+L....+^....+j....+x....+.....+.....+.....+.....+.....+.....+.....+.....+.... +....!+!..."+1...#+?...$+H...%+R...&+Z...'+^...(+g...)+p...*+....++....,+....-+.....+..../+....0+....1+....2+....3+. ..4+. ..5+, ..6+C ..7+Z ..8+t ..9+. ..:+. ..;+. ..<+. ..=+. ..>+. ..?+. ..@+&!..A+8!..B+h!..C+t!..D+.!..E+.!..F+.!..G+.!..H+.!..I+.!..J+.!..K+.!..L+.!..M+.!..N+.!..O+.!..P+."..Q+."..R+."..S+."..T+."..U+'"..V+5"..W+B"..X+G"..Y+O"..Z+Q"..[+T"..\+]"..]+d"..^+l".._+}"..`+."..a+."..b+."..c+."..d+."..e+."..f+."..g+."..h+."..i+."..j+."..k+."..l+."..m+."..n+.#..o

C:\Users\user\AppData\Roaming\WdGame\Utils\cef\locales\id.pak Download File
Process:	C:\Users\user\Desktop\mAGs0IsoB7.exe
File Type:	data
Category:	dropped
Size (bytes):	43040
Entropy (8bit):	5.2296544658108175
Encrypted:	false
SSDEEP:	768:ErwdHrJ9PIYvAQhXOcCu3QXVsPajTunJc9StA3hMLcpSYIcfbmsYYL8L:8WJccCLqajTa7tARMLWL8L
MD5:	07428CA91EEAD354D60DC8FD68738F54
SHA1:	D227C7023F9A28BD5D9DFB9CB95246470E7EA6FB
SHA-256:	C8744256F22CA0D32F22B2D7A5CBEC9D0BFE86C112632718DFA53452298833A7
SHA-512:	3EDB476603234B4D336FA6AC88C25BC0475AAEA7792AC514BFE77DB220779D73A1510D0A5C48D526322FCC799B742A90311B7380ED0281A2CD6952790F367C07
Malicious:	false
Preview:	.........(#9...)#:...#A...+#H...,#K...-#N....#l.../#~...0#.....).....).....).....).....).....).....).....).....).....).....).....).....).....).....).....),....)7....)F....)K....)Q....)Z....)d....)j....)w....).....).....).....).... )....!)....")....#)....$)....%)....&)....')....()....))....)..........$....O....z...................,....+Q....+.....+.....+.....+.....+,....+a....+.....+.....+.....+&....+a....+.....+.....+.....+.....+.....+&....+;....+K....+X....+s....+.....+.....+.....+.....+.....+.....+.....+.... +....!+...."+....#+....$+....%+....&+....'+....(+....)+....*+....++(...,+5...-+C....+I.../+P...0+V...1+]...2+c...3+o...4+....5+....6+....7+....8+....9+....:+....;+. ..<++ ..=+: ..>+Z ..?+m ..@+. ..A+. ..B+. ..C+. ..D+.!..E+.!..F+A!..G+O!..H+W!..I+Z!..J+_!..K+d!..L+g!..M+j!..N+m!..O+t!..P+w!..Q+.!..R+.!..S+.!..T+.!..U+.!..V+.!..W+.!..X+.!..Y+.!..Z+.!..[+.!..\+.!..]+.!..^+.!.._+.!..`+.!..a+."..b+."..c+&"..d+,"..e+4"..f+>"..g+I"..h+M"..i+R"..j+W"..k+\"..l+a"..m+f"..n+n"..o

C:\Users\user\AppData\Roaming\WdGame\Utils\cef\locales\it.pak Download File
Process:	C:\Users\user\Desktop\mAGs0IsoB7.exe
File Type:	data
Category:	dropped
Size (bytes):	47456
Entropy (8bit):	5.162207971428432
Encrypted:	false
SSDEEP:	768:Bv3IHSRg2ITUO9aGM884d1FxDpKnf1SsY25tea7REbaSz:V3CWOkw8Kwnf1bhhaeSz
MD5:	23F243B5399FBCF3D3A96A5219A1F80D
SHA1:	C6945745B5A0A84E64149E53101ABCDA8CFAA992
SHA-256:	2D9EFA8A626D16E8AD571813A3901E8FA0532ECF0DA34760B8C725492C418244
SHA-512:	215F72DCC9B505EF6B413CE14CDE69C0857F08DA5B7EC44E80105B63514EE7F0B183652CEF4B7268712C06056FB8C8B2B7176FFDD154F07480B356FCCCB18AD9
Malicious:	false
Preview:	.........(#9...)#:...#A...+#H...,#K...-#N....#l.../#~...0#.....).....).....).....).....).....).....).....).....).....).....).....).....).....).....).....),....)7....)F....)K....)Q....)Z....)d....)j....)w....).....).....).....).... )....!)....")....#)....$)....%)....&)....')....()....))....)..........$....S........................6....+[....+.....+.....+.....+.....+@....+.....+.....+.....+8....+v....+.....+.....+.....++....+/....+3....+:....+Q....+]....+j....+.....+.....+.....+.....+.....+.....+.....+.....+.... +....!+...."+....#+....$+....%+(...&+/...'+7...(+@...)+K...*+\...++k...,+~...-+.....+..../+....0+....1+....2+....3+....4+....5+....6+. ..7+. ..8+3 ..9+L ..:+W ..;+h ..<+. ..=+. ..>+. ..?+. ..@+.!..A+1!..B+c!..C+\|!..D+.!..E+.!..F+.!..G+.!..H+.!..I+.!..J+."..K+."..L+."..M+."..N+."..O+."..P+!"..Q+%"..R+)"..S+/"..T+?"..U+M"..V+W"..W+c"..X+h"..Y+n"..Z+p"..[+s"..\+\|"..]+."..^+.".._+."..`+."..a+."..b+.#..c+%#..d++#..e+4#..f+>#..g+H#..h+L#..i+Q#..j+V#..k+[#..l+`#..m+e#..n+k#..o

C:\Users\user\AppData\Roaming\WdGame\Utils\cef\locales\ja.pak Download File
Process:	C:\Users\user\Desktop\mAGs0IsoB7.exe
File Type:	data
Category:	dropped
Size (bytes):	57827
Entropy (8bit):	5.750079208972845
Encrypted:	false
SSDEEP:	768:OSdNz1aIICoinJec52H9HgHO4lHNkg3c94NXm75iiq1Y0o86FH++O4E:OmNz1aIICznJealHNNc9F7DRRH+p4E
MD5:	B44747CE81C6936D62D52E7CE33107E7
SHA1:	5B0D1943B3173D7F2D3BE74602100F2D2F685594
SHA-256:	AE8AF09FDEE6C385BAE57D2D72562C3457DB1194D3492A9ECCA71219C6E6FDBD
SHA-512:	057958E47FD9407EE15BDD965F454CF65871F907219D1CB47893AF70E0C11C0969279A860CF3E7919EFE296CE4B32CFE05C4E68172808D52D73BD0FEDEB91328
Malicious:	false
Preview:	.........(#9...)#;...#B...+#I...,#L...-#O....#q.../#....0#.....).....).....).....).....).....).....).....).....).....).....).....).....).....)(....)-....)<....)G....)V....)[....)a....)j....)t....)z....).....).....).....).....).... )....!)....")....#)....$)....%)....&)....')....()....))....)..........6....]........................"....+M....+z....+.....+.....+.....+....+_....+.....+.....+.....+4....+a....+.....+.....+.....+.....+.....+.....+.....+0....+E....+r....+.....+.....+.....+.....+.....+.....+.....+.... +....!+...."+....#+2...$+8...%+>...&+G...'+J...(+\...)+n...+....++....,+....-+.....+..../+....0+....1+....2+. ..3+. ..4+" ..5+. ..6+@ ..7+R ..8+j ..9+. ..:+. ..;+. ..<+. ..=+. ..>+. ..?+.!..@+9!..A+N!..B+~!..C+.!..D+.!..E+.!..F+.!..G+.!..H+."..I+."..J+."..K+""..L+%"..M+("..N+."..O+7"..P+="..Q+@"..R+F"..S+N"..T+]"..U+l"..V+{"..W+."..X+."..Y+."..Z+."..[+."..\+."..]+."..^+.".._+."..`+."..a+.#..b+1#..c+8#..d+>#..e+F#..f+P#..g+Y#..h+]#..i+b#..j+g#..k+l#..l+q#..m+v#..n+~#..o

C:\Users\user\AppData\Roaming\WdGame\Utils\cef\locales\kn.pak Download File
Process:	C:\Users\user\Desktop\mAGs0IsoB7.exe
File Type:	data
Category:	dropped
Size (bytes):	108050
Entropy (8bit):	4.276667415098973
Encrypted:	false
SSDEEP:	1536:cTEYbFkXhQRLD39o0zOiqU+3HnLgf6a6bnFSZxF84sjG9gNu3L5iFr9wavU01C3s:cclaU7l113J3AaiAoqpXxX
MD5:	3A02551FEE49F1FDF1D6F334E1F9C3C9
SHA1:	7CA83006A0B550704048236719F9F1948901E7C7
SHA-256:	58C0EDB1598CF8404699E532F2C4D6421958BC575D2F55E2F351C464440E3288
SHA-512:	CB7368D84C25ACB56DCAE9BE26C7CA539E4B62A9991264D71114740093FF1E52E6956E88A035A5F028CE29DFD46D7C80053CC6CA5212A752721D733F97E99F63
Malicious:	false
Preview:	.........(#9...)#;...#B...+#I...,#L...-#O....#m.../#....0#.....).....).....).....).....).....).....).....).....).....).....).....).....).....).....).....)-....)8....)G....)L....)R....)[....)e....)k....)x....).....).....).....).... )....!)....")....#)....$)....%)....&)....')....()....))....)..........w.........i.........4.........5....+.....+ ....+\|....+.....+S....+5 ...+.!...+.!...+."...+U#...+.$...+.$...+;%...+.%...+@&...+L&...+^&...+l&...+.&...+.&...+.&...+='...+n'...+.'...+.'...+.'...+.(...+&(...+;(...+M(.. +e(..!+.(.."+.(..#+.(..$+.(..%+.)..&+.)..'+ )..(+6)..)+O)..+.)..++.)..,+.)..-+&...+B../+[..0+n..1+...2+...3+...4+.*..5+.+..6+[+..7+.+..8+.+..9+.,..:+.,..;+P,..<+.,..=+.,..>+L-..?+.-..@+....A+?...B+....C+./..D+./..E+./..F+P0..G+u0..H+.0..I+.0..J+.0..K+.0..L+.0..M+.0..N+.0..O+.0..P+.0..Q+.1..R+.1..S+.1..T+11..U+W1..V+.1..W+.1..X+.1..Y+.1..Z+.1..[+.1..\+.1..]+.1..^+.2.._+H2..`+}2..a+.2..b+.2..c+.2..d+.2..e+.2..f+.3..g+-3..h+13..i+63..j+;3..k+@3..l+E3..m+J3..n+P3..o

C:\Users\user\AppData\Roaming\WdGame\Utils\cef\locales\ko.pak Download File
Process:	C:\Users\user\Desktop\mAGs0IsoB7.exe
File Type:	data
Category:	dropped
Size (bytes):	48903
Entropy (8bit):	6.037908064798389
Encrypted:	false
SSDEEP:	768:hqTznhlG8IKZ3Y347TS1zzQmtJuJ0JYJb+4sI6MjKf2y15aHPYfOiJpNzNbV7ZpO:oLHj7TS1zHGwkbAKjKf2uaHwfOM9bA40
MD5:	5B3A3241D2B048074CF841CEDFA48AB9
SHA1:	49EAAD312F6E1A84621BB3678E6477368DA455F7
SHA-256:	BEE7D8571D43883A5E90D06F59C6E60D63D354EFAAE6DA93446841A961E1D881
SHA-512:	565513E0A6F476C3712CEC30314D66D5D1FAAA023D58C5A193D52FC9DB6A2EDB660275D97865E5A71845477CF9090BDFCB09B05B3224BF30D571396E0A9ED614
Malicious:	false
Preview:	.........(#9...)#;...#B...+#I...,#L...-#O....#..../#....0#.....).....).....).....).....).....).....).....).....).....).....).....).....)%....)4....)9....)H....)S....)b....)g....)m....)v....).....).....).....).....).....).....).... )....!)....")....#)....$)....%)....&)....')....()....))....)..........@....e........................ ....+I....+t....+.....+.....+.....+.....+I....+\|....+.....+.....+.....+C....+p....+.....+.....+.....+.....+.....+.....+.....+.....+4....+A....+N....+[....+h....+u....+~....+.....+.... +....!+...."+....#+....$+....%+....&+....'+....(+....)+....*+%...++8...,+H...-+[....+l.../+\|...0+....1+....2+....3+....4+....5+....6+....7+....8+. ..9+! ..:+1 ..;+D ..<+o ..=+. ..>+. ..?+. ..@+. ..A+.!..B+J!..C+[!..D+.!..E+.!..F+.!..G+.!..H+.!..I+.!..J+.!..K+.!..L+.!..M+.!..N+."..O+."..P+."..Q+."..R+."..S+."..T+("..U+;"..V+K"..W+["..X+`"..Y+f"..Z+h"..[+k"..\+t"..]+z"..^+.".._+."..`+."..a+."..b+."..c+."..d+."..e+."..f+."..g+.#..h+.#..i+.#..j+.#..k+.#..l+.#..m+.#..n+.#..o

C:\Users\user\AppData\Roaming\WdGame\Utils\cef\locales\lt.pak Download File
Process:	C:\Users\user\Desktop\mAGs0IsoB7.exe
File Type:	data
Category:	dropped
Size (bytes):	49505
Entropy (8bit):	5.487157635151958
Encrypted:	false
SSDEEP:	768:BEmzv5Kl+p/mF69qTqAxUdE4eB2Y8+DwUaxJ9B/K7yEINv55zOTbUbdgBHaewf9D:BEmzF/T6NQxJ3BIqM+yi+6
MD5:	3638ECB7E65F15945EF8F4D88C1F55FF
SHA1:	6935747E844B561B28B3CF12C86F274D1DDB1C33
SHA-256:	E94E8CF76B9E7CE944F58E7A518CD34ED8D9B0FEF0E9393181A885E6F36C8539
SHA-512:	B396C1EC13C194685DF4EA2CBBB9BD25052C26295879E7414D08D6ED21CA52EAF432FA431EA321816BC1AAF2E977E693B7BAB6BB42AE2BC3993B09D590529F73
Malicious:	false
Preview:	.........(#9...)#:...#A...+#H...,#K...-#N....#l.../#~...0#.....).....).....).....).....).....).....).....).....).....).....).....).....).....).....).....),....)7....)F....)K....)Q....)Z....)d....)j....)w....).....).....).....).... )....!)....")....#)....$)....%)....&)....')....()....))....)..........H..............[.........+.........+.....+S....+.....+.....+b....+.....+C....+.....+. ...+. ...+. ...+i!...+.!...+W"...+."...+."...+."...+."...+."...+.#...+.#...+<#...+O#...+`#...+p#...+.#...+.#...+.#...+.#...+.#.. +.#..!+.#.."+.#..#+.#..$+.#..%+.#..&+.$..'+.$..(+.$..)+)$..*+:$..++M$..,+_$..-+m$...+w$../+.$..0+.$..1+.$..2+.$..3+.$..4+.$..5+.$..6+.$..7+.%..8+.%..9+,%..:+;%..;+M%..<+.%..=+.%..>+.%..?+.%..@+/&..A+U&..B+.&..C+.&..D+.&..E+.'..F+Q'..G+d'..H+n'..I+s'..J+\|'..K+.'..L+.'..M+.'..N+.'..O+.'..P+.'..Q+.'..R+.'..S+.'..T+.'..U+.'..V+.(..W+.(..X+.(..Y+#(..Z+%(..[+((..\+<(..]+D(..^+O(.._+d(..`+.(..a+.(..b+.(..c+.(..d+.(..e+.(..f+.(..g+.(..h+.(..i+.(..j+.(..k+.(..l+.(..m+.)..n+.)..o

C:\Users\user\AppData\Roaming\WdGame\Utils\cef\locales\lv.pak Download File
Process:	C:\Users\user\Desktop\mAGs0IsoB7.exe
File Type:	data
Category:	dropped
Size (bytes):	50527
Entropy (8bit):	5.5056618885657365
Encrypted:	false
SSDEEP:	768:Qjh52P2d7B1TWSMJ8JUP9MEQxPp8ykGOfsWMZHuIkpI0pDou:Qj2PwbWSAZQ78ykcYPpI0pt
MD5:	4F3DB8BACDDF08035ED01EA66CC72D84
SHA1:	36B03BE97BDC2ABAE90D191BB2F6F3EACE7EE463
SHA-256:	9495C58645DF64DA9F12AF60276420145C47CD032465EE52B216B243CEC9022E
SHA-512:	EBD937084341926DC660972F13235C327514F9BAF33824ADFEDEA4F2FF04E57E3FE7243D2249271E75379EE98E6842562939B2D706A86C9E59D68904B7E18E58
Malicious:	false
Preview:	.........(#9...)#:...#A...+#H...,#K...-#N....#l.../#~...0#.....).....).....).....).....).....).....).....).....).....).....).....).....).....).....).....),....)7....)F....)K....)Q....)Z....)d....)j....)w....).....).....).....).... )....!)....")....#)....$)....%)....&)....')....()....))....)..........5...................k..............+k....+.....+.....+Z....+.....+.....+.....+.....+m....+.....+P ...+. ...+. ...+`!...+.!...+.!...+.!...+.!...+.!...+.!...+."...+-"...+:"...+I"...+V"...+d"...+n"...+~"...+."...+.".. +."..!+.".."+."..#+."..$+."..%+."..&+."..'+."..(+."..)+."..*+."..++.#..,+.#..-++#...+3#../+<#..0+C#..1+M#..2+S#..3+e#..4+y#..5+.#..6+.#..7+.#..8+.#..9+.#..:+.$..;+.$..<+>$..=+P$..>+t$..?+.$..@+.$..A+.$..B+(%..C+G%..D+x%..E+.%..F+.%..G+.%..H+.%..I+.%..J+.%..K+.%..L+.&..M+.&..N+.&..O+.&..P+#&..Q+)&..R+0&..S+5&..T+B&..U+M&..V+Z&..W+e&..X+m&..Y+u&..Z+.&..[+.&..\+.&..]+.&..^+.&.._+.&..`+.&..a+.'..b+('..c+/'..d+6'..e+>'..f+H'..g+f'..h+k'..i+p'..j+v'..k+\|'..l+.'..m+.'..n+.'..o

C:\Users\user\AppData\Roaming\WdGame\Utils\cef\locales\ml.pak Download File
Process:	C:\Users\user\Desktop\mAGs0IsoB7.exe
File Type:	data
Category:	dropped
Size (bytes):	117720
Entropy (8bit):	4.319709211164435
Encrypted:	false
SSDEEP:	384:zAV1wQGrB1Bq1k+eyU2cKcZcx9bQIkukjERHbwPI2QLOguzQFG/IYKrNpcAn8QHf:zAM9dWmIZxNnYrtr0ptrMfFcKS
MD5:	E53A7A75C56A080EAF70864602FDEEF0
SHA1:	88A2EB541037EA5C87568C7D9C7A8932F8E8C407
SHA-256:	76483B86B529D070DD5ACD32FBF217CBC97F32B1C8878B238162323535B0EAFF
SHA-512:	40606C964E95C51C348B32AA082425972F6A126174281E4E24115897782D148B135037C7E1F528A98B6EA20B3D0D75F3BD723D2EF465E619C25BC60022BE20B6
Malicious:	false
Preview:	.........(#9...)#;...#B...+#I...,#L...-#O....#}.../#....0#.....).....).....).....).....).....).....).....).....).....).....).....)#....)+....):....)?....)N....)Y....)h....)m....)s....)\|....).....).....).....).....).....).....).... )....!)....")....#)....$)....%)....&)....')....()....))....)..........x.........6..............I.........+.....+^....+.....+.....+K....+.....+.....+4 ...+. ...+x!...+."...+."...+.#...+.#...+.#...+.$...+.$...+&$...+l$...+.$...+.$...+&%...+l%...+.%...+.%...+.%...+'&...+T&...+r&...+.&.. +.&..!+.&.."+.&..#+='..$+Y'..%+u'..&+.'..'+.'..(+.'..)+.(..+Z(..++.(..,+.(..-+@)...+.)../+.)..0+.)..1+.)..2+.)..3+4..4+z..5+...6+.+..7+u+..8+.+..9+.,..:+F,..;+.,..<+ -..=+`-..>+.-..?+[...@+./..A+u/..B+00..C+.0..D+A1..E+.1..F+L2..G+.2..H+.2..I+.2..J+.2..K+.2..L+.2..M+.2..N+.2..O+.3..P+.3..Q+.3..R+ 3..S+%3..T+N3..U+.3..V+.3..W+.4..X+.4..Y+,4..Z+.4..[+14..\+a4..]+j4..^+.4.._+.4..`+05..a+t5..b+.5..c+.5..d+.5..e+.5..f+.5..g+.5..h+.5..i+.5..j+.5..k+.5..l+.5..m+.5..n+.6..o

C:\Users\user\AppData\Roaming\WdGame\Utils\cef\locales\mr.pak Download File
Process:	C:\Users\user\Desktop\mAGs0IsoB7.exe
File Type:	data
Category:	dropped
Size (bytes):	96994
Entropy (8bit):	4.362697457438771
Encrypted:	false
SSDEEP:	1536:biDkYC7WyrzGknqixCiAqHSinMhTfMlHFSv:b4xCqyrzG4qiRAqHSUMhTeFSv
MD5:	BC943169D21BBFD16DD412AE477B3DC0
SHA1:	D7BEFE9DDE62FF36E586F9D15C3719FBFBA618F7
SHA-256:	F35537E623A4B0E1D335FD38D69E1D1DF443F22AEA206D0E151733A577771973
SHA-512:	25892F8E63CC7B3C35929FC729A620C761DB5E528A30BBF00AD0471EFFD56B07D32768A0202E25F714414AF8DE92D6D775305329475E0119DE93B2C099298B37
Malicious:	false
Preview:	.........(#9...)#;...#B...+#I...,#L...-#O....#m.../#....0#.....).....).....).....).....).....).....).....).....).....).....).....).....).....).....).....)-....)8....)G....)L....)R....)[....)e....)k....)x....).....).....).....).... )....!)....")....#)....$)....%)....&)....')....()....))....)..........8..............:..............c....+.....+.....+G....+.....+.....+.....+.....+.....+8 ...+. ...+4!...+.!...+b"...+."...+p#...+v#...+.#...+.#...+.#...+.#...+.#...+O$...+q$...+.$...+.$...+.$...+.$...+.$...+.%...+.%.. +-%..!+<%.."+g%..#+.%..$+.%..%+.%..&+.%..'+.%..(+.%..)+.&..+J&..++v&..,+.&..-+.&...+.&../+.&..0+.'..1+'..2+7'..3+T'..4+p'..5+.'..6+.'..7+#(..8+L(..9+u(..:+.(..;+.(..<+.)..=++)..>+.)..?+.)..@+...A+H..B+...C+...D+d+..E+.+..F+.,..G+*,..H+F,..I+Y,..J+o,..K+.,..L+.,..M+.,..N+.,..O+.,..P+.,..Q+.,..R+.,..S+.,..T+.,..U+.,..V+.,..W+.,..X+.,..Y+.-..Z+.-..[+.-..\+.-..]+4-..^+R-.._+.-..`+.-..a+.-..b+!...c+(...d+....e+6...f+E...g+Q...h+U...i+Z...j+_...k+d...l+i...m+n...n+t...o

C:\Users\user\AppData\Roaming\WdGame\Utils\cef\locales\ms.pak Download File
Process:	C:\Users\user\Desktop\mAGs0IsoB7.exe
File Type:	data
Category:	dropped
Size (bytes):	43817
Entropy (8bit):	5.1794635593027705
Encrypted:	false
SSDEEP:	768:llKJK/a9RRwiz8uUrTduWWzE9n9k8rpvwfvNSeaiZi3tUev5Q:lwD5z8usbWzE99X6oem5Q
MD5:	6CFD5B74D08C8A5D5596B4712647FEEF
SHA1:	7FD304A4CCCCE04A610F7C17E36B34C2B74BFECB
SHA-256:	D396545288768E70239190854577B1DF2AB8E6A935B0B839D651116EEB7B195B
SHA-512:	BAE13E8DF222E7E71888C896D8A2553F15346BDE966D6D700BC049677F847C194A55498DD5C7675604A6419562A0EB56B88561DE76B9B2F4B963C2010231C3B4
Malicious:	false
Preview:	.........(#9...)#:...#A...+#H...,#K...-#N....#l.../#~...0#.....).....).....).....).....).....).....).....).....).....).....).....).....).....).....).....),....)7....)F....)K....)Q....)Z....)d....)j....)w....).....).....).....).... )....!)....")....#)....$)....%)....&)....')....()....))....)..........&....O....x.......................+O....+~....+.....+.....+.....+,....+_....+.....+.....+.....+(....+e....+.....+.....+.....+.....+"....+....+B....+L....+Y....+w....+.....+.....+.....+.....+.....+.....+.....+.... +....!+...."+....#+....$+....%+....&+....'+....(+....)+"...*+/...++=...,+J...-+X....+b.../+i...0+o...1+v...2+\|...3+....4+....5+....6+....7+....8+. ..9+% ..:+5 ..;+D ..<+i ..=+y ..>+. ..?+. ..@+. ..A+.!..B+1!..C+K!..D+{!..E+.!..F+.!..G+.!..H+.!..I+.!..J+.!..K+.!..L+.!..M+.!..N+.!..O+.!..P+.!..Q+.!..R+."..S+."..T+."..U+,"..V+;"..W+K"..X+P"..Y+U"..Z+W"..[+Z"..\+e"..]+i"..^+o".._+."..`+."..a+."..b+."..c+."..d+."..e+."..f+."..g+."..h+."..i+."..j+."..k+."..l+."..m+."..n+.#..o

C:\Users\user\AppData\Roaming\WdGame\Utils\cef\locales\nb.pak Download File
Process:	C:\Users\user\Desktop\mAGs0IsoB7.exe
File Type:	data
Category:	dropped
Size (bytes):	44056
Entropy (8bit):	5.272211712399811
Encrypted:	false
SSDEEP:	768:So8MysOlF2nsYhoX6xqggR80Ny9vKXiLoNmb4d3INsfg8/MXcrzXnspc1EW33Pw:SoppToX6edN/NmMd4OI
MD5:	134CB79B07D6BFA385CDD0F93CEC84E0
SHA1:	ACBD382820AFFAD858BF37A2A4DC36A5C9EF05FC
SHA-256:	651883DCAC3E615CCA3F9759EFA4F96672C788FD3E2524F1D7236A48FA8DC54B
SHA-512:	7C8187D8BC536879039D7810CD56D6B9FEF0CC30C1C3D9F92FEE86193C709A6744973D6BCCA5C7A73ED891C038730876C37A900360FA3C65526CAB45E3C46269
Malicious:	false
Preview:	.........(#9...)#:...#A...+#H...,#K...-#N....#l.../#~...0#.....).....).....).....).....).....).....).....).....).....).....).....).....).....).....).....),....)7....)F....)K....)Q....)Z....)d....)j....)w....).....).....).....).... )....!)....")....#)....$)....%)....&)....')....()....))....)..........$....S........................>....+f....+.....+.....+.....+.....+E....+.....+.....+.....+"....+T....+.....+.....+.....+H....+M....+S....+X....+l....+v....+.....+.....+.....+.....+.....+.....+.....+.....+.....+.... +....!+...."+....#+....$+....%+....&+....'+#...(++...)+3...*+C...++R...,+Z...-+b....+h.../+q...0+x...1+....2+....3+....4+....5+....6+....7+....8+....9+. ..:+. ..;++ ..<+O ..=+_ ..>+. ..?+. ..@+. ..A+. ..B+.!..C+)!..D+[!..E+v!..F+.!..G+.!..H+.!..I+.!..J+.!..K+.!..L+.!..M+.!..N+.!..O+.!..P+.!..Q+.!..R+.!..S+.!..T+.!..U+.!..V+.!..W+."..X+."..Y+."..Z+."..[+."..\+""..]+'"..^+.".._+B"..`+\"..a+r"..b+."..c+."..d+."..e+."..f+."..g+."..h+."..i+."..j+."..k+."..l+."..m+."..n+."..o

C:\Users\user\AppData\Roaming\WdGame\Utils\cef\locales\nl.pak Download File
Process:	C:\Users\user\Desktop\mAGs0IsoB7.exe
File Type:	data
Category:	dropped
Size (bytes):	46022
Entropy (8bit):	5.210990346825689
Encrypted:	false
SSDEEP:	768:+JpaVkrA8LVnuQtnHyG0LLv8wEDRlp6q5qR2D2GqRk5zJEZnsrJydE/:+zaFQtnHFwE1lp6q5ZZdidE/
MD5:	264FFE560B523D126C51DCEB311373CC
SHA1:	3EA124ACB4D1D5D76FD706279A0BEDECE200F08A
SHA-256:	2E50152C5F6215AC24DCE2A3DC233A220869183034948F0356232C57514CBEE0
SHA-512:	EF73EA8C1B7F486349BD39994561F4E303AC6600C7B5BE512D23E3A06CCD6CDAC1573D4FD328B0049E3AD20CF76E5CAE3B6BDD2164B996B82986E143961B3DDB
Malicious:	false
Preview:	.........(#9...)#:...#A...+#H...,#K...-#N....#l.../#~...0#.....).....).....).....).....).....).....).....).....).....).....).....).....).....).....).....),....)7....)F....)K....)Q....)Z....)d....)j....)w....).....).....).....).... )....!)....")....#)....$)....%)....&)....')....()....))....)..........&....V........................A....+f....+.....+.....+.....+.....+I....+.....+.....+.....+B....+\|....+.....+.....+#....+Y....+`....+h....+n....+.....+.....+.....+.....+.....+.....+.....+.....+.....+.....+.....+.... +&...!+3..."+=...#+Q...$+\...%+h...&+m...'+u...(+....)+....+....++....,+....-+.....+..../+....0+....1+....2+. ..3+. ..4+2 ..5+H ..6+g ..7+. ..8+. ..9+. ..:+. ..;+. ..<+.!..=+)!..>+V!..?+w!..@+.!..A+.!..B+.!..C+."..D+R"..E+r"..F+."..G+."..H+."..I+."..J+."..K+."..L+."..M+."..N+."..O+."..P+."..Q+."..R+."..S+."..T+."..U+.#..V+.#..W+.#..X+"#..Y+(#..Z+#..[+-#..\+6#..]+;#..^+B#.._+[#..`+u#..a+.#..b+.#..c+.#..d+.#..e+.#..f+.#..g+.#..h+.#..i+.#..j+.#..k+.#..l+.#..m+.#..n+.#..o

C:\Users\user\AppData\Roaming\WdGame\Utils\cef\locales\pl.pak Download File
Process:	C:\Users\user\Desktop\mAGs0IsoB7.exe
File Type:	data
Category:	dropped
Size (bytes):	48480
Entropy (8bit):	5.608976810740617
Encrypted:	false
SSDEEP:	768:pBXySF1eIYFvW/ELwMbQyeZ1uRi0NUmLHA+ba7XCoe1nRTLchC+eVj2ho/k8ah:pBXyOWeUi0xH7+7XCogTLchU2x8m
MD5:	854A4765CB37D769A8B108B3B6335860
SHA1:	390F2289F120337E5D9D29DE757BAAFD452FB04F
SHA-256:	C4B00E4C223B241DC643F91531F0D503216D58D7DAB4EE79AB64D63123661290
SHA-512:	046923875D42304AF4C7A668B20887D48623C4418F1A6705A31671AD7EABF097509413A330333B2964FE872AB9B3EF3F72A39E62F1EF6AA6430070F87EF9A91E
Malicious:	false
Preview:	.........(#9...)#:...#A...+#H...,#K...-#N....#l.../#~...0#.....).....).....).....).....).....).....).....).....).....).....).....).....).....).....).....),....)7....)F....)K....)Q....)Z....)d....)j....)w....).....).....).....).... )....!)....")....#)....$)....%)....&)....')....()....))....)..........1....\|..............J..............+-....+.....+.....+.....+Q....+.....+(....+.....+.....+x....+.....+( ...+x ...+. ...+'!...+.!...+5!...+<!...+Z!...+i!...+v!...+.!...+.!...+.!...+.!...+.!...+.!...+.!...+.!...+.!.. +.!..!+.".."+."..#+."..$+,"..%+?"..&+G"..'+O"..(+^"..)+l"..*+{"..++."..,+."..-+."...+."../+."..0+."..1+."..2+."..3+."..4+."..5+.#..6+.#..7+4#..8+O#..9+g#..:+w#..;+.#..<+.#..=+.#..>+.#..?+.#..@+0$..A+I$..B+{$..C+.$..D+.$..E+.$..F+.%..G+,%..H+2%..I+4%..J+:%..K+A%..L+D%..M+G%..N+J%..O+Y%..P+\%..Q+_%..R+c%..S+h%..T+x%..U+.%..V+.%..W+.%..X+.%..Y+.%..Z+.%..[+.%..\+.%..]+.%..^+.%.._+.%..`+.&..a+,&..b+@&..c+G&..d+M&..e+U&..f+_&..g+v&..h+z&..i+.&..j+.&..k+.&..l+.&..m+.&..n+.&..o

C:\Users\user\AppData\Roaming\WdGame\Utils\cef\locales\pt-BR.pak Download File
Process:	C:\Users\user\Desktop\mAGs0IsoB7.exe
File Type:	data
Category:	dropped
Size (bytes):	47944
Entropy (8bit):	5.297599494469311
Encrypted:	false
SSDEEP:	768:On84KgfbimUYaQTBQeb79OZiyXStLSoMX6B7yAJtOeIc6xQxGel2:On8zm7TBKXXStOoMqEPc6xQxGe8
MD5:	D0FA28DB4EE6AEFF783C79B94EC50E80
SHA1:	DA7BE8E7C2CF79679EBCDB562AE44E2525D3243B
SHA-256:	88C6AB714BA328DE98C1B59CACC1BA2F2229F8262A57B5BA0D7BE6FAE0BCB2DB
SHA-512:	D3668EEEDF1560F5B3E293639AD154D8892B733160BF59C16F0922DDE1629C469CEC7D784C8E4B0A316AF33F137ABBC04F3E9E6E81C700BB0A48777A245E7B8B
Malicious:	false
Preview:	.........(#9...)#:...#A...+#H...,#K...-#N....#l.../#~...0#.....).....).....).....).....).....).....).....).....).....).....).....).....).....).....).....),....)7....)F....)K....)Q....)Z....)d....)j....)w....).....).....).....).... )....!)....")....#)....$)....%)....&)....')....()....))....)..........(....h.............. ....f.........+.....+.....+M....+~....+.....+.....+q....+.....+%....+x....+.....+.....+m....+.....+.....+. ...+. ...+. ...+( ...+9 ...+I ...+e ...+u ...+. ...+. ...+. ...+. ...+. ...+. ...+. .. +. ..!+. .."+. ..#+. ..$+.!..%+.!..&+.!..'+-!..(+>!..)+P!..*+e!..++y!..,+.!..-+.!...+.!../+.!..0+.!..1+.!..2+.!..3+.!..4+.!..5+.!..6+."..7+6"..8+N"..9+g"..:+w"..;+."..<+."..=+."..>+."..?+.#..@+G#..A+d#..B+.#..C+.#..D+.#..E+.$..F+/$..G+>$..H+E$..I+G$..J+O$..K+U$..L+X$..M+\$..N+_$..O+f$..P+i$..Q+l$..R+p$..S+u$..T+.$..U+.$..V+.$..W+.$..X+.$..Y+.$..Z+.$..[+.$..\+.$..]+.$..^+.$.._+.$..`+.%..a+,%..b+8%..c+?%..d+E%..e+M%..f+W%..g+c%..h+k%..i+p%..j+u%..k+z%..l+.%..m+.%..n+.%..o

C:\Users\user\AppData\Roaming\WdGame\Utils\cef\locales\pt-PT.pak Download File
Process:	C:\Users\user\Desktop\mAGs0IsoB7.exe
File Type:	data
Category:	dropped
Size (bytes):	47585
Entropy (8bit):	5.293974455203231
Encrypted:	false
SSDEEP:	768:KPPFK1teDzBz1dDBS4/oT0vfC+7LUyZPEDBQ0/DRFl+y6MN7qxzyqKDBN:KPk1ezLToT0vFEDBQ0/DqMNmxzyqKDX
MD5:	3CD4193D8640C6139982F884F1E5322E
SHA1:	1951B71A2F5BC8C8C42512003CA102F8826967CE
SHA-256:	861D4BC7876B968FFA5736127DA462A1B09D9DDD5534668F4A871D569033A962
SHA-512:	89017A859E1B50E8BF4B0899EFC7B251E18110C8F20C47DD8513B8659642C1B3EAFCF9A98EC210245B5C272E4FDC7921D6AB6F1834180F6A02903E9FF06A35BB
Malicious:	false
Preview:	.........(#9...)#:...#A...+#H...,#K...-#N....#l.../#~...0#.....).....).....).....).....).....).....).....).....).....).....).....).....).....).....).....),....)7....)F....)K....)Q....)Z....)d....)j....)w....).....).....).....).... )....!)....")....#)....$)....%)....&)....')....()....))....)..........$....T........................=....+e....+.....+.....+.....+.....+?....+\|....+.....+.....+ ....+R....+.....+.....+.....+.....+.....+.....+.....+1....+C....+T....+o....+.....+.....+.....+.....+.....+.....+.....+.... +....!+...."+....#+....$+....%+ ...&+....'+<...(+M...)+_...*+z...++....,+....-+.....+..../+....0+....1+....2+....3+....4+. ..5+. ..6+= ..7+Y ..8+x ..9+. ..:+. ..;+. ..<+. ..=+. ..>+(!..?+E!..@+x!..A+.!..B+.!..C+.!..D+."..E+/"..F+^"..G+m"..H+t"..I+v"..J+~"..K+."..L+."..M+."..N+."..O+."..P+."..Q+."..R+."..S+."..T+."..U+."..V+."..W+."..X+."..Y+."..Z+."..[+.#..\+.#..]+.#..^+.#.._+7#..`+Y#..a+v#..b+.#..c+.#..d+.#..e+.#..f+.#..g+.#..h+.#..i+.#..j+.#..k+.#..l+.#..m+.#..n+.#..o

C:\Users\user\AppData\Roaming\WdGame\Utils\cef\locales\ro.pak Download File
Process:	C:\Users\user\Desktop\mAGs0IsoB7.exe
File Type:	data
Category:	dropped
Size (bytes):	49212
Entropy (8bit):	5.3419494890376535
Encrypted:	false
SSDEEP:	768:QGTSWhCoRxMcBQpBikEoqwTMU9cLUkh8cS7l8aTTZDtGY8LSg3de60BnsUejNv2Q:B4oRxABpEoqa9cgI8HyaTZtGSke6Wp6B
MD5:	228C2DC6DE89CC5889A556B04625277D
SHA1:	F2D4BB245ABF2AD71F9EA4FD67A82B826D9371B5
SHA-256:	EFE550DC85AB44038178BB99AFC10BCCCF8DCD7D0563FB6B4C31708407ECAB79
SHA-512:	3E8173244666F9BC3A8D3E79E895944970FBC725149196CE16DD1DBB548EE589E5D786B7FEBC7AE769F0D567BE583B3D54A9D5B9B9495D506B6DEDEF2A4C8717
Malicious:	false
Preview:	.........(#9...)#:...#A...+#H...,#K...-#N....#l.../#~...0#.....).....).....).....).....).....).....).....).....).....).....).....).....).....).....).....),....)7....)F....)K....)Q....)Z....)d....)j....)w....).....).....).....).... )....!)....")....#)....$)....%)....&)....')....()....))....)..........1....r..............%....t.........+.....+)....+\....+.....+.....+.....+y....+.....+.....+e....+.....+.....+5....+w....+.....+.....+.....+.....+.....+.....+. ...+! ...+4 ...+G ...+Y ...+l ...+\| ...+. ...+. ...+. .. +. ..!+. .."+. ..#+. ..$+. ..%+. ..&+. ..'+. ..(+.!..)+.!..*+2!..++I!..,+[!..-+m!...+w!../+\|!..0+.!..1+.!..2+.!..3+.!..4+.!..5+.!..6+.!..7+ "..8+="..9+["..:+j"..;+~"..<+."..=+."..>+."..?+.#..@+B#..A+_#..B+.#..C+.#..D+.#..E+.$..F+H$..G+W$..H+^$..I+`$..J+i$..K+q$..L+t$..M+y$..N+\|$..O+.$..P+.$..Q+.$..R+.$..S+.$..T+.$..U+.$..V+.$..W+.$..X+.$..Y+.$..Z+.$..[+.$..\+.%..]+.%..^+.%.._+:%..`+a%..a+.%..b+.%..c+.%..d+.%..e+.%..f+.%..g+.%..h+.%..i+.%..j+.%..k+.%..l+.%..m+.%..n+.%..o

C:\Users\user\AppData\Roaming\WdGame\Utils\cef\locales\ru.pak Download File
Process:	C:\Users\user\Desktop\mAGs0IsoB7.exe
File Type:	data
Category:	dropped
Size (bytes):	74285
Entropy (8bit):	4.902693906443642
Encrypted:	false
SSDEEP:	1536:UqgKW7SujESvL7dM7JOEo0tJotLVn0UItiy:UqgKWuujESvL7dM7JOEo0t6tLVn0UIp
MD5:	6CC147FF2E74EB4640A65E42F45459E1
SHA1:	11EAA5D4229173CFC621533F04FF11AC5AD31B59
SHA-256:	2A78C7B704CD403D488D7163BF13BE9C0CC61B7647A0F8FC832111807748756B
SHA-512:	9EB211149B22328194854680E2B7ED59CE3F440138A063E75AFB9C259B5223657625FCD644A76ABD0ADB4752C1738330488DF2F7291CCBE9EE620FAFEF275E6B
Malicious:	false
Preview:	.........(#9...)#:...#A...+#H...,#K...-#N....#l.../#~...0#.....).....).....).....).....).....).....).....).....).....).....).....).....).....).....).....),....)7....)F....)K....)Q....)Z....)d....)j....)w....).....).....).....).... )....!)....")....#)....$)....%)....&)....')....()....))....)..........\.........\.........1........."....+.....+.....+G....+.....+.....+.....+. ...+C!...+."...+."...+m#...+.$...+.$...+0%...+.%...+.%...+.%...+.%...+.&...+!&...+2&...+e&...+z&...+.&...+.&...+.&...+.&...+.&...+.&...+.'.. +.'..!+.'.."+F'..#+u'..$+.'..%+.'..&+.'..'+.'..(+.'..)+.'..+.'..++.(..,+1(..-+L(...+](../+n(..0+.(..1+.(..2+.(..3+.(..4+.(..5+.)..6+Q)..7+.)..8+.)..9+.)..:+.)..;+...<+Q..=+l..>+...?+...@+M+..A+.+..B+.+..C+.,..D+m,..E+.,..F+.,..G+.,..H+.-..I+.-..J+!-..K+/-..L+2-..M+@-..N+C-..O+b-..P+e-..Q+w-..R+{-..S+.-..T+.-..U+.-..V+.-..W+.-..X+.-..Y+.-..Z+.-..[+.-..\+(...]+6...^+B..._+]...`+....a+....b+....c+....d+....e+....f+....g+....h+....i+....j+....k+./..l+./..m+./..n+./..o

C:\Users\user\AppData\Roaming\WdGame\Utils\cef\locales\sk.pak Download File
Process:	C:\Users\user\Desktop\mAGs0IsoB7.exe
File Type:	data
Category:	dropped
Size (bytes):	49566
Entropy (8bit):	5.649480060868657
Encrypted:	false
SSDEEP:	1536:W1hK+CGWCIvmsBTYpPnQnKQYwoqcHCY9O:WfK+CGv5sBT/KBwoqcHCY9O
MD5:	BD272AA038831BDA0CDFAB443849ABBD
SHA1:	176EED55B1668CA157E122941424C69017191C04
SHA-256:	AE2E05D6D0EA5A4BB798B550CB19FFEB6A940CBD9FC791F73DDAABBEE80F1423
SHA-512:	B352DCD8D926FAE34BEC5F014B4E1CBB4378F8FFC742C423F00C032F19DD8188F503989D6AB065E01125D31434A30B8FBF39809B321666B721F0A9D9439D19D5
Malicious:	false
Preview:	.........(#9...)#:...#A...+#H...,#K...-#N....#l.../#~...0#.....).....).....).....).....).....).....).....).....).....).....).....).....).....).....).....),....)7....)F....)K....)Q....)Z....)d....)j....)w....).....).....).....).... )....!)....")....#)....$)....%)....&)....')....()....))....)..........1....}..............P..............+8....+.....+.....+&....+n....+.....+<....+.....+.....+~....+.....+) ...+y ...+. ...+!...+.!...+4!...+>!...+\!...+k!...+z!...+.!...+.!...+.!...+.!...+.!...+.!...+.!...+.!...+.!.. +."..!+.".."+#"..#+:"..$+F"..%+R"..&+V"..'+\"..(+c"..)+u"..+."..++."..,+."..-+."...+."../+."..0+."..1+."..2+."..3+."..4+.#..5+6#..6+U#..7+q#..8+.#..9+.#..:+.#..;+.#..<+.#..=+.$..>+-$..?+E$..@+o$..A+.$..B+.$..C+.$..D+.$..E+.%..F+G%..G+W%..H+\%..I+^%..J+f%..K+o%..L+r%..M+u%..N+x%..O+}%..P+.%..Q+.%..R+.%..S+.%..T+.%..U+.%..V+.%..W+.%..X+.%..Y+.%..Z+.%..[+.%..\+.%..]+.%..^+.%.._+.&..`+$&..a+E&..b+Z&..c+a&..d+g&..e+o&..f+{&..g+.&..h+.&..i+.&..j+.&..k+.&..l+.&..m+.&..n+.&..o

C:\Users\user\AppData\Roaming\WdGame\Utils\cef\locales\sl.pak Download File
Process:	C:\Users\user\Desktop\mAGs0IsoB7.exe
File Type:	data
Category:	dropped
Size (bytes):	46447
Entropy (8bit):	5.387229306576715
Encrypted:	false
SSDEEP:	768:RJQzdRo71JjG1S6nIDOtop30QqJ2BQdPyGTTXwlTN:RJt7/KnIDOGZ0QrMPyGTTX2Z
MD5:	A163522503DEE64ED9165D7810FC2ECC
SHA1:	BF0E8E185139D56B97812B2696267474EA5DB540
SHA-256:	51CDE2E6665ACEF0AB30C165006A6105B0F41235D050A4F1B6C5EE7395959ADB
SHA-512:	CB2C2C3B2A8D8ED9121ADEB57C223E87AFA21A79F519C8BBA20FFE7F98BA57E66D3A226E971A96E9484130F0835D037F068E871AA8069F920AE9B90A9E696613
Malicious:	false
Preview:	.........(#9...)#:...#A...+#H...,#K...-#N....#l.../#~...0#.....).....).....).....).....).....).....).....).....).....).....).....).....).....).....).....),....)7....)F....)K....)Q....)Z....)d....)j....)w....).....).....).....).... )....!)....")....#)....$)....%)....&)....')....()....))....)..........8....s..............8..............+.....+\....+.....+.....+1....+.....+.....+(....+.....+.....+&....+z....+.....+6 ...+. ...+. ...+. ...+. ...+. ...+. ...+. ...+.!...+.!...++!...+9!...+G!...+S!...+Z!...+d!...+i!.. +s!..!+{!.."+.!..#+.!..$+.!..%+.!..&+.!..'+.!..(+.!..)+.!..*+.!..++.!..,+.!..-+.!...+.!../+.!..0+.!..1+."..2+."..3+."..4+("..5+7"..6+S"..7+l"..8+."..9+."..:+."..;+."..<+."..=+."..>+."..?+.#..@+/#..A+B#..B+i#..C+.#..D+.#..E+.#..F+.#..G+.#..H+.$..I+.$..J+.$..K+.$..L+.$..M+%$..N+($..O+-$..P+0$..Q+3$..R+7$..S+<$..T+J$..U+Y$..V+f$..W+s$..X+x$..Y+.$..Z+.$..[+.$..\+.$..]+.$..^+.$.._+.$..`+.$..a+.$..b+.$..c+.$..d+.$..e+.$..f+.%..g+.%..h+.%..i+"%..j+'%..k+,%..l+1%..m+6%..n+<%..o

C:\Users\user\AppData\Roaming\WdGame\Utils\cef\locales\sr.pak Download File
Process:	C:\Users\user\Desktop\mAGs0IsoB7.exe
File Type:	data
Category:	dropped
Size (bytes):	72828
Entropy (8bit):	4.8298098798354605
Encrypted:	false
SSDEEP:	1536:rBbH88/1k1JVNLHCWk2p8kFmSmndpyDP+fwws1NW780Q+gtksaYI:FbH88tk1JVNHNk2p8kFhmdpyDP+fwwse
MD5:	00B884AEFAC9F3D2FF05F910491081B0
SHA1:	C74034C271D347A9A9F58058311ADEEEED8C7953
SHA-256:	A8BCBB49CF933F2BB74BB6536EB2EA38F5082C8558C7BBED6F2F5FA89B6D536B
SHA-512:	5A61A9DAC4DCCE176CF31E690DA5DD899A4C74920F46BB7FC9C378508811FE8FC8C1E94E7F36A401EE7ED1FEA03BF49868B23E7302E27FAFB86AAA83DA2C3188
Malicious:	false
Preview:	.........(#9...)#:...#A...+#H...,#K...-#N....#l.../#~...0#.....).....).....).....).....).....).....).....).....).....).....).....).....).....).....).....),....)7....)F....)K....)Q....)Z....)d....)j....)w....).....).....).....).... )....!)....")....#)....$)....%)....&)....')....()....))....)..........D..............Y..............z....+.....+.....+e....+.....+.....+h....+.....+N....+.....+* ...+. ...+. ...+T!...+.!...+."...+'"...+/"...+="...+j"...+."...+."...+."...+."...+.#...+:#...+[#...+r#...+.#...+.#...+.#.. +.#..!+.#.."+.#..#+.#..$+.#..%+.$..&+.$..'+.$..(+<$..)+Y$..+r$..++.$..,+.$..-+.$...+.$../+.$..0+.$..1+.$..2+.%..3+.%..4+5%..5+R%..6+}%..7+.%..8+.%..9+.%..:+.&..;+.&..<+L&..=+e&..>+.&..?+.&..@+.&..A+.'..B+_'..C+.'..D+.'..E+.'..F+1(..G+J(..H+V(..I+d(..J+p(..K+~(..L+.(..M+.(..N+.(..O+.(..P+.(..Q+.(..R+.(..S+.(..T+.(..U+.(..V+.)..W+!)..X+&)..Y+2)..Z+4)..[+7)..\+@)..]+J)..^+T).._+z)..`+.)..a+.)..b+.)..c+.)..d+...e+...f+...g+=..h+A..i+F..j+K..k+P..l+U..m+Z..n+`..o

C:\Users\user\AppData\Roaming\WdGame\Utils\cef\locales\sv.pak Download File
Process:	C:\Users\user\Desktop\mAGs0IsoB7.exe
File Type:	data
Category:	dropped
Size (bytes):	43700
Entropy (8bit):	5.368395226799122
Encrypted:	false
SSDEEP:	768:uBpgKmbIB5nC1XIvIb4COmX/wrJxiEnlG2qmznRMX1tTTbCp:uMVIvIb4C9I9xi+lflnRMX1trCp
MD5:	F7E36957C30DFE2BD84D0E4CAEB38665
SHA1:	8DEF0BBC31904575C554C6197331213D4F206B89
SHA-256:	7A5E440B0A92D28BE0F09A506011904C7869D3525EA9B401DCBD74926B20BFA6
SHA-512:	00FF87994062B22B7F5CB16925237D5AF48160D999F23200398F07608C0045C540A8C59715CEC3373A23668816F091D1C99ABDAD0A9AC2F85743CAB14D5EE7B5
Malicious:	false
Preview:	.........(#9...)#:...#A...+#H...,#K...-#N....#l.../#~...0#.....).....).....).....).....).....).....).....).....).....).....).....).....).....).....).....),....)7....)F....)K....)Q....)Z....)d....)j....)w....).....).....).....).... )....!)....")....#)....$)....%)....&)....')....()....))....)..........$....S........................:....+d....+.....+.....+.....+.....+I....+.....+.....+.....+.....+N....+.....+.....+.....+D....+H....+M....+R....+c....+m....+y....+.....+.....+.....+.....+.....+.....+.....+.....+.... +....!+...."+....#+....$+....%+....&+!...'+(...(+/...)+8...+J...++Z...,+f...-+r....+y.../+....0+....1+....2+....3+....4+....5+....6+....7+....8+. ..9+# ..:+- ..;+@ ..<+j ..=+{ ..>+. ..?+. ..@+. ..A+.!..B+9!..C+S!..D+.!..E+.!..F+.!..G+.!..H+.!..I+.!..J+.!..K+.!..L+.!..M+.!..N+.!..O+."..P+."..Q+."..R+."..S+."..T+!"..U+"..V+/"..W+5"..X+:"..Y+C"..Z+E"..[+H"..\+P"..]+U"..^+[".._+g"..`+v"..a+."..b+."..c+."..d+."..e+."..f+."..g+."..h+."..i+."..j+."..k+."..l+."..m+."..n+."..o

C:\Users\user\AppData\Roaming\WdGame\Utils\cef\locales\sw.pak Download File
Process:	C:\Users\user\Desktop\mAGs0IsoB7.exe
File Type:	data
Category:	dropped
Size (bytes):	43959
Entropy (8bit):	5.250369747283921
Encrypted:	false
SSDEEP:	768:QF0e4sBkyjRCWl9BiIMjuVilk/ceTphWz+sAjPhOTmLfn7oeyRad6FvRjVHygWT:dvxyjoWlHxhOT8mPVHyH
MD5:	3349962C8302CCF02250964B9E16DFD9
SHA1:	890073D6DBDAE60FAAE25913DFF3689BB3E63A98
SHA-256:	D76D7BCE5CE4CC34C94A496C1CD25851036BB3E2236AEE8B2D7DE2942F41F93A
SHA-512:	7A6E25CC8244E803465506818083AC072AF623210FFA779FEC986195BF6087BF15C9A17410C91395A47484F9A50DD946EDFBA57B6D6CD836279C3168886AC7B7
Malicious:	false
Preview:	.........(#9...)#:...#A...+#H...,#K...-#N....#l.../#~...0#.....).....).....).....).....).....).....).....).....).....).....).....).....).....).....).....),....)7....)F....)K....)Q....)Z....)d....)j....)w....).....).....).....).... )....!)....")....#)....$)....%)....&)....')....()....))....)..........,....[........................F....+k....+.....+.....+.....+.....+S....+.....+.....+.....+N....+.....+.....+.....+G....+.....+.....+.....+.....+.....+.....+.....+.....+.....+.....+.....+.....+.....+#....+(....+-... +4...!+9..."+@...#+P...$+_...%+l...&+r...'+w...(+....)+....*+....++....,+....-+.....+..../+....0+....1+....2+....3+....4+. ..5+( ..6+B ..7+\ ..8+x ..9+. ..:+. ..;+. ..<+. ..=+. ..>+.!..?+#!..@+V!..A+t!..B+.!..C+.!..D+.!..E+."..F+<"..G+F"..H+K"..I+O"..J+U"..K+Z"..L+]"..M+d"..N+g"..O+m"..P+q"..Q+w"..R+{"..S+."..T+."..U+."..V+."..W+."..X+."..Y+."..Z+."..[+."..\+."..]+."..^+.".._+."..`+.#..a+.#..b+&#..c+-#..d+3#..e+;#..f+C#..g+O#..h+S#..i+X#..j+]#..k+b#..l+g#..m+l#..n+r#..o

C:\Users\user\AppData\Roaming\WdGame\Utils\cef\locales\ta.pak Download File
Process:	C:\Users\user\Desktop\mAGs0IsoB7.exe
File Type:	data
Category:	dropped
Size (bytes):	111763
Entropy (8bit):	4.119643067690597
Encrypted:	false
SSDEEP:	1536:3B2Q1UOIPUN9HGX2S3e6SpeiMC5ydLtZW0wQbQX5QNQKogKW+XbWsyWtjWYnpJYj:3TgX24
MD5:	CEE22DD06699F093804E4CC822403392
SHA1:	60B06291D29BC1588D83159058CCA44A352D5D6A
SHA-256:	80B46F4E73ECFF553FF815A0D406C9ED2C3D002909F1C1B2B57CDE95D3FE3E2F
SHA-512:	5291234C2534C2B256AD13B8F0C6B978A45A0886848B52D300F9D3988B1ADC5B2A26015D9C3729D55F880B744856128C35605D64D3366D0B6F28F4FF48644297
Malicious:	false
Preview:	.........(#9...)#:...#A...+#H...,#K...-#N....#l.../#~...0#.....).....).....).....).....).....).....).....).....).....).....).....).....).....).....).....),....)7....)F....)K....)Q....)Z....)d....)j....)w....).....).....).....).... )....!)....")....#)....$)....%)....&)....')....()....))....)..........?...................k..............+f....+.....+.....+G....+.....+.....+f....+.....+l....+.....+C ...+. ...+7!...+.!...+."...+."...+/"...+="...+}"...+."...+."...+D#...+.#...+.#...+.#...+.#...+0$...+K$...+`$...+l$.. +.$..!+.$.."+.$..#+.$..$+.%..%+)%..&+5%..'+A%..(+l%..)+.%..+.%..++.%..,+.&..-+=&...+\&../+o&..0+.&..1+.&..2+.&..3+.&..4+.'..5+H'..6+.'..7+.'..8+)(..9+y(..:+.(..;+.(..<+2)..=+i)..>+.)..?+...@+...A+...B+v+..C+.+..D+N,..E+.,..F+.-..G+--..H+R-..I+[-..J+w-..K+.-..L+.-..M+.-..N+.-..O+.-..P+.-..Q+.-..R+.-..S+.-..T+.-..U+.-..V+....W+J...X+O...Y+d...Z+f...[+i...\+r...]+{...^+...._+....`+./..a+Y/..b+./..c+./..d+./..e+./..f+./..g+./..h+./..i+./..j+./..k+./..l+./..m+.0..n+.0..o

C:\Users\user\AppData\Roaming\WdGame\Utils\cef\locales\te.pak Download File
Process:	C:\Users\user\Desktop\mAGs0IsoB7.exe
File Type:	data
Category:	dropped
Size (bytes):	102971
Entropy (8bit):	4.308998063644209
Encrypted:	false
SSDEEP:	768:F8YlwYAnHfqlWCKeK8Agjf+9PzqeNWa+MfxYvYu5L/TMPNiqy9jcIq9ZVYSQ+d7w:dqjn6BAJ+KPNi+p9hq7HrwhIB
MD5:	B0C9B3CA840CADB88394128A2270A648
SHA1:	D242F4690DA8DFCD05D2620273848406E8F4A4D4
SHA-256:	0D3D78DD76F894242FEFD80D239F0F4B3052E2895AADDAA7E7E9AD640D6BF5D8
SHA-512:	F959B0592C701BD7DA7BF7A286FA11F07990566066D9A5A679A696F306E3DEC699DDE07880F5685DA0B45C02A714B681884209F7265CCE2B8F4E844CC33FFC35
Malicious:	false
Preview:	.........(#9...)#;...#B...+#I...,#L...-#O....#m.../#....0#.....).....).....).....).....).....).....).....).....).....).....).....).....).....).....).....)-....)8....)G....)L....)R....)[....)e....)k....)x....).....).....).....).... )....!)....")....#)....$)....%)....&)....')....()....))....)..........3....x..............C..............+2....+.....+.....+.....+\....+.....+h....+.....+.....+. ...+. ...+. ...+A!...+.!...+.!...+."...+."...+'"...+d"...+."...+."...+.#...+>#...+m#...+.#...+.#...+.#...+.$...+.$...+1$.. +X$..!+.$.."+.$..#+.$..$+.%..%+%%..&+.%..'+=%..(+V%..)+~%..+.%..++.%..,+)&..-+k&...+{&../+.&..0+.&..1+.&..2+.&..3+.'..4+9'..5+m'..6+.'..7+.'..8+U(..9+.(..:+.(..;+.)..<+{)..=+.)..>+...?+Q..@+...A+.+..B+t+..C+.+..D+),..E+m,..F+.,..G+.-..H+.-..I+7-..J+Y-..K+q-..L+t-..M+.-..N+.-..O+.-..P+.-..Q+.-..R+.-..S+.-..T+.-..U+.-..V+.-..W+....X+....Y++...Z+-...[+0...\+9...]+E...^+W..._+....`+....a+....b+./..c+%/..d++/..e+3/..f+=/..g+F/..h+J/..i+O/..j+T/..k+Y/..l+^/..m+c/..n+i/..o

C:\Users\user\AppData\Roaming\WdGame\Utils\cef\locales\th.pak Download File
Process:	C:\Users\user\Desktop\mAGs0IsoB7.exe
File Type:	data
Category:	dropped
Size (bytes):	91898
Entropy (8bit):	4.375847425968603
Encrypted:	false
SSDEEP:	1536:FjhWt3hRbKDWhOyF7IqfrmMp8iReeyiPIiSztED:F6RbKDW3F7DfrmMp8iRee7UtED
MD5:	F836E6CC433D1144620B7774F3230EFE
SHA1:	1FE000B10EB44DF261FB346DFBF4E294EB0BEC8A
SHA-256:	75D3BD312D2CEF6A0F24A57DDAED316E34BA38B791E14B25B173E896A5431D4F
SHA-512:	856C1807E1F64B6B0985734C7C2AD09EF7D956766A64C9148DEECB66F40E52BC5386ABED325CCB1D69282F209BA0C8408A972B48E9B30AB46545616815D39360
Malicious:	false
Preview:	.........(#9...)#;...#B...+#I...,#L...-#O....#`.../#q...0#t....)w....).....).....).....).....).....).....).....).....).....).....).....).....).....).....).....).....),....)1....)7....)@....)J....)P....)]....)e....)k....)x....).... )....!)....")....#)....$)....%)....&)....')....()....))....)..............o..............&..............+.....+v....+.....+.....+E....+.....+.....+h....+.....+....+z....+.....+d ...+. ...+I!...+[!...+\|!...+.!...+.!...+.!...+."...+V"...+}"...+."...+."...+."...+."...+.#...+.#...+.#.. +.#..!+"#.."+4#..#+^#..$+s#..%+.#..&+.#..'+.#..(+.#..)+.#..+$$..++H$..,+f$..-+~$...+.$../+.$..0+.$..1+.$..2+.$..3+.$..4+.%..5+&%..6+n%..7+.%..8+.%..9+.%..:+.%..;+(&..<+.&..=+.&..>+.'..?+B'..@+.'..A+.'..B+S(..C+.(..D+.)..E+R)..F+.)..G+.)..H+.)..I+.)..J+.)..K+...L+...M+...N+...O+-..P+0..Q+3..R+7..S+<..T+W..U+o..V+...W+...X+...Y+...Z+...[+...\+...]+...^+.*.._+'+..`+d+..a+.+..b+.+..c+.+..d+.+..e+.+..f+.+..g+.+..h+.+..i+.+..j+.,..k+.,..l+.,..m+.,..n+(,..o

C:\Users\user\AppData\Roaming\WdGame\Utils\cef\locales\tr.pak Download File
Process:	C:\Users\user\Desktop\mAGs0IsoB7.exe
File Type:	data
Category:	dropped
Size (bytes):	46294
Entropy (8bit):	5.523819991958526
Encrypted:	false
SSDEEP:	768:hjF0h4hQOnNYV6AlIOdIsLpLj3cLhMVinZNHzupDshvrgapqSWO0r2he4GKHWotX:TrCvV6AiOdIs8W4NHzsDs+SNDhJGK2ol
MD5:	034CBCB6D790B30C617E3A895D7B06EB
SHA1:	63DF99CD38FC2BE9BDFD7FAA32EE00C0C857F190
SHA-256:	ADAF6A166E9A0DDCBC244A7E3AA61D5CD8D305F974AC24C1350914220D9D67D9
SHA-512:	F6FC957CA4D8B742384EDA31B65E2BBB286ECFAB8A8F6375FB5DD4388B74D5D44C6BCFD51E9C30E01EC442E27F06C281D85495105ABA0625ABA436C433ED067F
Malicious:	false
Preview:	.........(#9...)#:...#A...+#H...,#K...-#N....#l.../#~...0#.....).....).....).....).....).....).....).....).....).....).....).....).....).....).....).....),....)7....)F....)K....)Q....)Z....)d....)j....)w....).....).....).....).... )....!)....")....#)....$)....%)....&)....')....()....))....)..........$....Q....~...................4....+[....+.....+.....+.....+.....+7....+r....+.....+.....+.....+K....+~....+.....+.....+.....+.....+ ....+&....+?....+L....+]....+y....+.....+.....+.....+.....+.....+.....+.....+.... +....!+...."+....#+....$+....%+....&+....'+....(+!...)+...+6...++C...,+R...-+b....+j.../+n...0+v...1+....2+....3+....4+....5+....6+....7+....8+. ..9+) ..:+5 ..;+= ..<+[ ..=+d ..>+. ..?+. ..@+. ..A+. ..B+. ..C+.!..D+?!..E+S!..F+}!..G+.!..H+.!..I+.!..J+.!..K+.!..L+.!..M+.!..N+.!..O+.!..P+.!..Q+.!..R+.!..S+.!..T+.!..U+.!..V+.!..W+.!..X+.!..Y+.!..Z+.!..[+.!..\+."..]+."..^+.".._+'"..`+>"..a+R"..b+a"..c+h"..d+n"..e+y"..f+."..g+."..h+."..i+."..j+."..k+."..l+."..m+."..n+."..o

C:\Users\user\AppData\Roaming\WdGame\Utils\cef\locales\uk.pak Download File
Process:	C:\Users\user\Desktop\mAGs0IsoB7.exe
File Type:	data
Category:	dropped
Size (bytes):	77049
Entropy (8bit):	4.908643870405628
Encrypted:	false
SSDEEP:	1536:+fPORoE+KZ9FfrBmohrMVkSpqMaDDDvobCaftDQIMVUMTEb4USI:+fWR7BmoZMVkSpPaDDDvobCaVQIMVUMC
MD5:	879BCA053BA87F9A8BF03CB46438188F
SHA1:	9F8A48A8C0BB6DC40A579888F664DD9060B9BB4B
SHA-256:	6B12D2D25AA996DBEFD4AF3D02B12EED86ECD8B75B8E8CADC317C13CFCBF5144
SHA-512:	DCAD289D91C8B05A3C8C5307BB63EFCFF973944CAB9DE98ED961CAEA44B1AA816A73F20F710FF9BA7F48C28FBF3F9A60FD049F227B59EC3B1A031DCD5E8898F1
Malicious:	false
Preview:	.........(#9...)#:...#A...+#H...,#K...-#N....#l.../#~...0#.....).....).....).....).....).....).....).....).....).....).....).....).....).....).....).....),....)7....)F....)K....)Q....)Z....)d....)j....)w....).....).....).....).... )....!)....")....#)....$)....%)....&)....')....()....))....)..........>.........4........................+{....+.....+u....+.....+=....+.....+. ...+.!...+c"...+;#...+.#...+f$...+.$...+z%...+.%...+.&...+.&...+%&...+N&...+_&...+p&...+.&...+.&...+.&...+.&...+.'...+.'...+4'...+F'...+T'.. +d'..!+v'.."+.'..#+.'..$+.'..%+.'..&+.'..'+.'..(+.(..)+.(..+<(..++[(..,+x(..-+.(...+.(../+.(..0+.(..1+.(..2+.(..3+.)..4+=)..5+v)..6+.)..7+.)..8+%..9+Z..:+...;+.*..<+ +..=+T+..>+.+..?+.,..@+.,..A+.,..B+Z-..C+.-..D+....E+T...F+....G+....H+./..I+./..J+ /..K+./..L+1/..M+?/..N+B/..O+a/..P+d/..Q+g/..R+k/..S+p/..T+./..U+./..V+./..W+./..X+./..Y+./..Z+./..[+./..\+./..]+./..^+.0.._+,0..`+\0..a+.0..b+.0..c+.0..d+.0..e+.0..f+.0..g+.0..h+.0..i+.0..j+.0..k+.0..l+.0..m+.0..n+.1..o

C:\Users\user\AppData\Roaming\WdGame\Utils\cef\locales\vi.pak Download File
Process:	C:\Users\user\Desktop\mAGs0IsoB7.exe
File Type:	data
Category:	dropped
Size (bytes):	53252
Entropy (8bit):	5.738733398382373
Encrypted:	false
SSDEEP:	1536:d7mibcX2/NbqGNUlBTi99me8PNqM8NJYBCjlndx4C5se:d7mibcmd5CBO99OlqM8NJYB4tdX5z
MD5:	A2A7153A8B15820D1CA5BE492B4D9600
SHA1:	0FC2FA180C5785CE1432D19C0DB1ED56B2CE25E9
SHA-256:	6016D121F8A5A6286C54CC27509AF0B4DE0C4C229E8D69CEE6AF437F6ADEE2EF
SHA-512:	47B7B5E35859AE2CEF31711DEECCA342F31DD806C6730BF5B951B50E98EFD5F49481502B5D71F43C7A2B6B8C9D76E1A51D28B5C29EE47CA12439031577712353
Malicious:	false
Preview:	.........(#9...)#:...#A...+#H...,#K...-#N....#l.../#~...0#.....).....).....).....).....).....).....).....).....).....).....).....).....).....).....).....),....)7....)F....)K....)Q....)Z....)d....)j....)w....).....).....).....).... )....!)....")....#)....$)....%)....&)....')....()....))....)..........(....S....~...................4....+]....+.....+.....+.....+.....+H....+}....+.....+.....+.....+L....+.....+.....+.....+;....+C....+K....+T....+t....+.....+.....+.....+.....+.....+.....+.....+.....+.....+.....+.... +!...!+..."+6...#+H...$+Y...%+k...&+w...'+....(+....)+....+....++....,+....-+.....+..../+....0+....1+....2+....3+. ..4+. ..5+. ..6+4 ..7+L ..8+Z ..9+j ..:+} ..;+. ..<+. ..=+. ..>+.!..?+3!..@+q!..A+.!..B+.!..C+.!..D++"..E+J"..F+."..G+."..H+."..I+."..J+."..K+."..L+."..M+."..N+."..O+."..P+."..Q+."..R+."..S+."..T+."..U+.#..V+.#..W+-#..X+2#..Y+=#..Z+?#..[+B#..\+K#..]+W#..^+k#.._+.#..`+.#..a+.$..b+0$..c+7$..d+=$..e+E$..f+O$..g+]$..h+a$..i+f$..j+k$..k+p$..l+u$..m+z$..n+.$..o

C:\Users\user\AppData\Roaming\WdGame\Utils\cef\locales\zh-CN.pak Download File
Process:	C:\Users\user\Desktop\mAGs0IsoB7.exe
File Type:	data
Category:	dropped
Size (bytes):	39499
Entropy (8bit):	6.625621251903422
Encrypted:	false
SSDEEP:	768:ijLnM3CfIIEafX6IWAepsuTaEa/g1rlW9HJFlzukK1TPAaIXoaRz:KOoIIEaSupf/g1eTZ
MD5:	C3FD82EC2CDDCF7192E9DE8D9834DBC5
SHA1:	F4CDB9879DEEF57D188B859744E4B1BADFCA7EDC
SHA-256:	77650516087C2A6C43E7B775BEB8148D8F9E6906DBE6BBCF5C3678FCBC02FA9A
SHA-512:	0542ACD610C055FCF68E5C94A616DF4B1FB0A0684B9C168F158E2AC97F1ED830FE68753C215D2837BE0C5553CB5CF0F3522AA7990E6C91995A7F85293FADFE8E
Malicious:	false
Preview:	.........(#9...)#;...#B...+#I...,#L...-#O....#\|.../#....0#.....).....).....).....).....).....).....).....).....).....).....).....).....).....)....)/....)>....)I....)X....)]....)c....)l....)v....)\|....).....).....).....).....).... )....!)....")....#)....$)....%)....&)....')....()....))....)..........8...._........................<....+g....+.....+.....+.....+.....+>....+s....+.....+.....+"....+T....+.....+.....+.....+.....+.....+.....+$....+3....+?....+N....+i....+x....+.....+.....+.....+.....+.....+.....+.... +....!+...."+....#+....$+....%+....&+....'+....(+....)+....+ ...++,...,+8...-+D....+N.../+X...0+b...1+l...2+v...3+....4+....5+....6+....7+....8+....9+....:+....;+....<+. ..=+. ..>+( ..?+7 ..@+[ ..A+j ..B+. ..C+. ..D+. ..E+. ..F+. ..G+. ..H+. ..I+. ..J+.!..K+.!..L+.!..M+.!..N+.!..O+.!..P+.!..Q+.!..R+.!..S+$!..T+0!..U+<!..V+H!..W+T!..X+Y!..Y+_!..Z+a!..[+d!..\+j!..]+p!..^+v!.._+.!..`+.!..a+.!..b+.!..c+.!..d+.!..e+.!..f+.!..g+.!..h+.!..i+.!..j+.!..k+.!..l+.!..m+."..n+."..o

C:\Users\user\AppData\Roaming\WdGame\Utils\cef\locales\zh-TW.pak Download File
Process:	C:\Users\user\Desktop\mAGs0IsoB7.exe
File Type:	data
Category:	dropped
Size (bytes):	40229
Entropy (8bit):	6.614771767564868
Encrypted:	false
SSDEEP:	768:wolbXBdh4+Jt8IIqIhGa1bfe0wvRtMDZ8KtZPqdjryEfv11JxzdXcHKh1COQPLsj:worAI8IIqIcATwvRtMDVIjB1LxzdX+K9
MD5:	1A09C6B7412B2A5D7F1B379DD4FCBA1B
SHA1:	58AC3377BCBC8FDA31A0F77809128C9F0ECD82C5
SHA-256:	1F4B6A83D0E2CCEBB596D010F5146FE3A45FCADCEF786D696479E33BE8C9C905
SHA-512:	A444B9AD2F7F9F7C3FA20537B6385D2C31D9674E1B9BD02A5F018BED6877145EC1CF8497A51E48C77DEA64441EA5190BCB45DAD87ACC91CDAAB7525F463FD9E9
Malicious:	false
Preview:	.........(#9...)#;...#B...+#I...,#L...-#O....#..../#....0#.....).....).....).....).....).....).....).....).....).....).....)%....)0....)8....)G....)L....)[....)f....)u....)z....).....).....).....).....).....).....).....).....).... )....!)....")....#)....$)....%)....&)....')&...()(...))...),.........U....\|...................,....Y....+.....+.....+.....+.....+&....+[....+.....+.....+.....+?....+q....+.....+.....+.....+,....+2....+8....+@....+O....+[....+j....+.....+.....+.....+.....+.....+.....+.....+.....+.... +....!+...."+....#+....$+....%+....&+....'+....(+...)+6...*+B...++N...,+Z...-+f....+p.../+z...0+....1+....2+....3+....4+....5+....6+....7+....8+....9+. ..:+. ..;+. ..<+) ..=+/ ..>+J ..?+_ ..@+. ..A+. ..B+. ..C+. ..D+. ..E+.!..F+"!..G+(!..H+.!..I+4!..J+:!..K+@!..L+C!..M+F!..N+I!..O+O!..P+R!..Q+X!..R+\!..S+a!..T+j!..U+s!..V+\|!..W+.!..X+.!..Y+.!..Z+.!..[+.!..\+.!..]+.!..^+.!.._+.!..`+.!..a+.!..b+."..c+."..d+."..e+."..f+&"..g+8"..h+<"..i+A"..j+F"..k+K"..l+P"..m+U"..n+]"..o

C:\Users\user\AppData\Roaming\WdGame\Utils\cef\natives_blob.bin Download File
Process:	C:\Users\user\Desktop\mAGs0IsoB7.exe
File Type:	data
Category:	dropped
Size (bytes):	412130
Entropy (8bit):	5.59191728172975
Encrypted:	false
SSDEEP:	12288:ln3Cj7CQaMiyMzQ77Ua7Zm6ap4avfyM3G:lnk7CQWfy9
MD5:	8F4D6515F4D321313A39A659C3C5FF01
SHA1:	F4C95F1ABD24C715A3DD4B3E4C9CFF5DECDA7250
SHA-256:	7D9C0C4D88618BDD16BB0681FDEC1DD736E2ED1141AE527A27B22FB93F27848F
SHA-512:	3C00EB9A8CA8D076140DF0071CFA702E1C032EDBC20481BB7F7B7A88C1A82C959B8AC901182C2F9D235F55B4528C8E12B1E765119F1E784645C61F66C1C2B007
Malicious:	false
Preview:	..mirrors.t..(function(a,b){."use strict";.var c;.var d=a.Array;.var e=a.isNaN;.var f=a.JSON.stringify;.var g;.var h;.var i;.var j=a.Math.min;.var k=b.ImportNow("promise_status_symbol");.var l=b.ImportNow("promise_value_symbol");.var m;.var n;.var o;.b.Import(function(p){.c=p.ErrorToString;.g=p.MakeError;.h=p.MapEntries;.i=p.MapIteratorNext;.m=p.SetIteratorNext;.n=p.SetValues;.o=p.SymbolToString;.});.var q={.UNDEFINED_TYPE:'undefined',.NULL_TYPE:'null',.BOOLEAN_TYPE:'boolean',.NUMBER_TYPE:'number',.STRING_TYPE:'string',.SYMBOL_TYPE:'symbol',.OBJECT_TYPE:'object',.FUNCTION_TYPE:'function',.REGEXP_TYPE:'regexp',.ERROR_TYPE:'error',.PROPERTY_TYPE:'property',.INTERNAL_PROPERTY_TYPE:'internalProperty',.FRAME_TYPE:'frame',.SCRIPT_TYPE:'script',.CONTEXT_TYPE:'context',.SCOPE_TYPE:'scope',.PROMISE_TYPE:'promise',.MAP_TYPE:'map',.SET_TYPE:'set',.ITERATOR_TYPE:'iterator',.GENERATOR_TYPE:'generator',.}.var r=0;.var s=-1;.var t=[];.var u=true;.function MirrorCacheIsEmpty(){.return r==0&&t.length==

C:\Users\user\AppData\Roaming\WdGame\Utils\cef\pepflashplayer.7z Download File
Process:	C:\Users\user\Desktop\mAGs0IsoB7.exe
File Type:	7-zip archive data, version 0.4
Category:	dropped
Size (bytes):	7086750
Entropy (8bit):	7.9999693736939
Encrypted:	true
SSDEEP:	196608:98mpL8l6iIUt3Lh3LOnk/86nZ1/VH1j3BF84D:9LY6Zs13LOk/8GbH84D
MD5:	F541D00B14B9C08873D92077566FF63D
SHA1:	3E5610A7547FA6F852EC5959C9234BF1363A8877
SHA-256:	B8AB60859626690078BFC50645C33AE57E8CFDD597E5BF6BE33CC869452EB83A
SHA-512:	4B27AA7ADC65D2439F1C8F56D122BC91AC8929D59C9688B4578404D6F07CC6915833C932C43A18FB3BA1C089DA1E31D9F230637CC42CAB994B887FBB45D18541
Malicious:	false
Preview:	7z..'.......!l..................V..].&..p.........../D.N...'.J.u..a.s'..N/:.lz..........q.+.....S..U.^dq..~@..9en...@...~.}.6..)...{.....q..[u.N...v\.....3c....R.b_.\|wi...^=.Y0.../>.......D.\|UvQAnk.]....>......)G?............v.v..F.!.....b..9...IB..wg....q...LX.#.).S. .../.".pZ.......KSjM.L.(..{Ue.kF....BI.%O..$........Z.b,K...V....v3!:..p.#..G4.'...{.......4..aE1...s.0n.7...1N..........mc..3..y<...-......y...$.J,."...{<R.!...Z.`........<.8z13.&..jg............&..l.@.).c.N.:B.F...cJ....+.K..>.l.]..G1.u:....D3.e..N..>.S...h!e..].S..<..7)....H...Eb/......`=......E.....=3C...q$a....=..0..\|F.D...s...u....C.....K...^.w....4.c.>r..'ds..!.{].T...?>...?I..V..c8.V2....lf.V(....S.e..k]A........b.\..<.U.z.&....L......j....4...5.'`..K....108]........s8g..M.w/......8..../s..C..<...Uy@.{8.@.<.W..v....y.h...X...........Y>(..R..kT..U...t.,H.../..p..;.II.5El+..........)..z...2. ....<.L..T.7....V.Mj.....\|%szE........u.o......^...Cz...YH...g..6.Q.....%.s

C:\Users\user\AppData\Roaming\WdGame\Utils\cef\pepflashplayer.dll Download File
Process:	C:\Users\user\Desktop\mAGs0IsoB7.exe
File Type:	PE32 executable (DLL) (console) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	17848280
Entropy (8bit):	7.104578280343441
Encrypted:	false
SSDEEP:	393216:CzvAuAbPuXsTsaf7YQhvfod1zLH/mjxzSjj4rZUoZNH:Czv7AbPVfjed1zrAFJ+I
MD5:	6329CBE4B7487A6A4DFC000260F43219
SHA1:	2D33F64AFD22E5C7FF75B4361BE9D4B2EA9B64E6
SHA-256:	F6C41358472AE14914ECCF3E3CBD4688330E7F3E7A741C3CC71C4E3FC4BABAB4
SHA-512:	6346DDF3AFA8E905B7FED04A669D1A080C596D6ADA3ED0C49080A2E267CFBC341A81AF415AA680A7A40966D827DF30B4A665AE7DB9EAE85586BBB4DBAEEBA97F
Malicious:	false
Preview:	MZ......................@...................................X...........!..L.!This program cannot be run in DOS mode....$..........v.hq%.hq%.hq%..%.hq%..%ahq%..%.hq%@3t$.hq%y..%.hq%:.%.hq%.3r$.hq%.3t$.hq%.3u$.hq%.hq%.hq%v3u$.kq%V1u$.hq%.5u$.hq%y..%.hq%V1t$.hq%...%.hq%y..%.hq%.hp%.iq%v3t$.mq%v3q$.hq%v3.%.hq%.h.%.hq%v3s$.hq%Rich.hq%........PE..L......X...........!..........Z.....H........................................P............@.........................`...E.......,........................;...... ....$..T....................$......h$..@............................................text...\........................... ..`.rodata............................. ..`.rdata..0.6.......6.................@..@.data....R.......t..................@....tls.........`.......L..............@....gfids.......p.......N..............@..@.rsrc................R..............@..@.reloc.. ............\..............@..B........................................................................................

C:\Users\user\AppData\Roaming\WdGame\Utils\cef\snapshot_blob.bin Download File
Process:	C:\Users\user\Desktop\mAGs0IsoB7.exe
File Type:	data
Category:	dropped
Size (bytes):	486072
Entropy (8bit):	5.837702590012418
Encrypted:	false
SSDEEP:	6144:h5a2x1hJCulzMq2+ok7G6RzkkR1Kjg2zE7TGrG2:/a2XfMq2+93zk41Cg2zE7R2
MD5:	594F4B02C26E84837108E2B9CC894D39
SHA1:	BEE0E10F6547D76BF91520F689429D87BC5B6431
SHA-256:	8DBD2F8C3708611755D103C3776B31C8A9F62E2408D0CB9F670BD79CF2F5A7D4
SHA-512:	BB9F472501658E2D6E61720627E79D543D4C982B512F4806070587D78060B97E79D199995FBC8DF39BCE5DE553A0F08023D40127876AA9CDBB6069DF0179D194
Malicious:	false
Preview:	....P....s..L.............f.............."...s...............:....\|...................,.,.,....,...... ....,........... ............,............ .........................................,...`........ .................rR......null..........."......object................................ .................,............ .................,............ .................,............ .....................,........... .....................5.H....undefined...~...,...D........ ..........................\........,........... ....................J.Z.....hole...............,........... ..........................true.........VR).....boolean................t.....false...................>5....................,.,....*...... ...................."M.8....uninitialized...............,.....-...... .................,............ .................,.....1...... .....................,............ ..................,............ .................,...&........ .................,...j........ ..............

C:\Users\user\AppData\Roaming\WdGame\Utils\cef\version.txt Download File
Process:	C:\Users\user\Desktop\mAGs0IsoB7.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	15
Entropy (8bit):	2.606238928653389
Encrypted:	false
SSDEEP:	3:SQkVVUrT:SQk/UrT
MD5:	CCDFF7DCE4B97B49AB39ED7B1AB98A13
SHA1:	38F8C5DE77ACD49C21F085ABDA7DA47D4B1CC28B
SHA-256:	07313E6077FF97BFF7503339EC15F737B8E54170FAFBD83CCB482074495E8CC1
SHA-512:	A79026C47F65D25F52AF796FF0C2419F7C1AFD2F95003EB093B40F46AB3F8461ED2535A4206955DBEBDA3ED0DA32A10A7A1470FA5F3E329F2F9A3AFE383FD3A0
Malicious:	false
Preview:	1.5019.1001.226

C:\Users\user\AppData\Roaming\WdGame\Utils\cef\widevinecdmadapter.dll Download File
Process:	C:\Users\user\Desktop\mAGs0IsoB7.exe
File Type:	PE32 executable (DLL) (console) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	232960
Entropy (8bit):	6.6918460017971
Encrypted:	false
SSDEEP:	3072:WneZIFk4WA3BiLvZT0lxJqFpd7YIRf6uIvTsPVd6Ag0Fujbkmf7WuJmbIrF0:We6dEcJqFpSIJMLAOjgbJ
MD5:	1775B40455C7F12D9261EAE9D9A2D2D7
SHA1:	68A4C8D424C6ADD253A161037CDF178D0BFCCCBB
SHA-256:	9CAFD68D4E23AE8FCB2E766175B3E5B5EA6519295365D4D8A0937D6063FAD378
SHA-512:	80CEB96F1AD6F1A2AF362CAF40AE64CB13671DB77783800E18D5AEB3A93C3696A5AC642C59B64EFB2A1ED427BE5DDACB82D3884FEA3B147805AD1A5388A2FB60
Malicious:	false
Preview:	MZ......................@................................... ...........!..L.!This program cannot be run in DOS mode....$.......%.&.a.H.a.H.a.H...K.m.H...M...H...L.w.H.Z.K.w.H.Z.M.R.H.Z.L.A.H...I.c.H..I.b.H.a.I.;.H..M.z.H..H.`.H....`.H.a...`.H..J.`.H.Richa.H.........................PE..L.....l\.........."!........."...............@.......................................[....@.....................................<....`...............V..h7...p..l#..@...8...........................x...@............@..@............................text....,.......................... ..`.rdata.......@.......2..............@..@.data...\.... ......................@....gfids.......@....... ..............@..@.tls.........P.......$..............@....rsrc........`.......&..............@..@.reloc..l#...p...$...0..............@..B........................................................................................................................................................................................

C:\Users\user\AppData\Roaming\WdGame\Utils\cef\wow_helper.exe Download File
Process:	C:\Users\user\Desktop\mAGs0IsoB7.exe
File Type:	PE32+ executable (GUI) x86-64, for MS Windows
Category:	dropped
Size (bytes):	81920
Entropy (8bit):	6.403817477915499
Encrypted:	false
SSDEEP:	1536:9f77+031ru/qpap4qUqm+rIqRqEp+85LQyiL1LOFfv5:VWo1/op4qUqfrIkb+aLQPFOFp
MD5:	36029141D8CFEA329C99C319989A05B9
SHA1:	4AC51C1EE3C9E005053B2A628EE4A056ED4AAE53
SHA-256:	16100CE36243801D03F6E1B9D6B1C6924C7C71E928B8F9E7EB8EED2D8D2447E1
SHA-512:	C391A170B182F875E0FB04867FB3311CFD1AB65B71E812AC28A928DCEB9746870D9C9182B147DBB69E34334DE22FE3EA72D4C060263C511B5FE6A7131935DAB1
Malicious:	false
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........V...............................A.........................Rich...................PE..d...+..I..........#..........Z......0$.........@.............................P.......r..........................................................(....@..x....0..........h7..............................................................8............................text............................... ..`.rdata...8.......:..................@..@.data....#..........................@....pdata.......0......................@..@.rsrc...x....@......................@..@........................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Roaming\WdGame\Utils\helper.zip Download File
Process:	C:\Users\user\Desktop\mAGs0IsoB7.exe
File Type:	Zip archive data, at least v2.0 to extract
Category:	dropped
Size (bytes):	565188
Entropy (8bit):	7.997954290127298
Encrypted:	true
SSDEEP:	12288:VXJtf4lfb8XhxLW3y44OzAOYSCPjaemeDTNJSQ:VZtf4lfbixLW3y44AQPjamSQ
MD5:	7BBF919AC238FE6AA103A8D70BFD278B
SHA1:	BE007E073C298327AD47A27BA4CB6741602F1819
SHA-256:	A63541E0913C172C717B0B897BC033585B0B5F1561CBD391AA856224C783A421
SHA-512:	47E34A7850A4CAEC144E7C34D752638C3B3537CAFDE790B9697944EABC688279D088CA58041D579DA34591F100C154F07F1486E45141ED9D23685478224EB0F3
Malicious:	false
Preview:	PK..........R.O..L\..........CefHelper.dll.]{\|T.?..$.,.........j4...&.M.........1.....%.]..0..z.-m.`K[.5mQ........,.......).....f.n.>.......({...1...o~3...:.(....AE.W._....)&E.2..!....^\o....,..IZE.C.....{......}...J.....^..i.>t.}W..<p.^F.Q.%.]1:..@.h.x....x..c..,{8e..9.W....U).....<.}..h.x~4z.(k...x>.te.U<W.....HG.......9..SF..`....S.r..._...P...d..P.c.M"..l<..8.._.(....S.l.H.....,....=...-.bC..Z.V..hQ.-..o.([...<y...[.;.A.y.7..iI.?......-. .D.Z".)..+..w7..$.w.i1G....W.d.K.S...x.[..5\]......V....g.%.....x....u...syL...........Zk..F3S.c.48.<.....,.>..2..,1K.....e...#8b...(.C:~.H..QJ..R.L.i24e.B..@h.....I.g'..c...\|...?.(r..A..R...m...Q....w.A..2&.W.F...s...{7m@.3...{5wo.{..I-.C.{...f....k-......-..S...f._u....v....W\|.L._...kw..j. ..'......U\|..._G......ul...=..M\|uY+.{...I...9..U.d-.&....v[2_....!.......6..6..L.[!.. aJ[.`2K.j..n...K\|.O.0yV...%L...U....IB..........m...G..t.`.&.>....+%L..O...O.<..3.....E.#<..#<.....Xc.gQ.....#<...(

C:\Users\user\AppData\Roaming\WdGame\Utils\uninst.zip Download File
Process:	C:\Users\user\Desktop\mAGs0IsoB7.exe
File Type:	Zip archive data, at least v2.0 to extract
Category:	dropped
Size (bytes):	206387
Entropy (8bit):	7.997072984150373
Encrypted:	true
SSDEEP:	3072:fR2pzs2baNkoXroAbeush1720hq/elCKLmxM8QTFTc+5ZEPDvlgpbhZw4aaVctvg:Z2pA2bEzbv4EvelCwwQTuiOWlwD7o
MD5:	6ADAB4FFBC921966D0700953265D653B
SHA1:	57E72408CA98B39B7656B93F5E3FC3EE6ECC3170
SHA-256:	6B9461BD8D2EB0B8A2CDDC69E053CDD6C2D0959C332456B1750C173B09326FE0
SHA-512:	728C171DB7465416C20F1FD7A5B2DFE15D34E4DDF2B538A64FF903A6DB3BDD1D55998E2B5D1E05202EC86D83B800A61F4A4D91EB18EF30B170DB50216B95C7E9
Malicious:	false
Preview:	PK........Tp.RC..-.%..........Uninst.exe..\|T..?~w.IVX..7.5j.Uc.j0Q..0.l.......$j5.V1.......\.[i.O.?m.R...HP.... A.A..i;.T.F\$p.....&..{...........3...[r..)A.$..WUI..._.t.y:I.x.....g.Z..q...?Y.............~.=.z..+..{O.O.I/ZP...{......<^....?O../..%...rR...'.......-......N...................H....Nz.N.....cI...H.../..:...J...Y.....T.W'..$.WP....u.....u.R.w..-..#.u.u.-.......u.#. PF.^..%..zK.I.)gBQz.`-E..w.E...K....#Q..E..L.R...$JK...w....J........P.C..i.2.]+<...o......I../...v..t.v.h......Pn.e".....(I..616^.e..j......JO..WpY.]w....j.Hy....x.Go..........6+..RY.-...ccO.n@...Y....l..cI.......dn3.5.6..6.V.A..f.o..X..UZ..T.J.G).Y ...B.4V..ml~.seE.I.86...q.Xq6..e..+?N6..8y.'_...d..U.X..-2...]......;..mS?n.....y..<x......s.=.{..d3L.4...P6.P...I...?..c.._5..O.@.<.....?..F.G.V.i........(x.\|\>.._.v.....6..O.Z.H....r...u....m......+)x.T....:v...y..5..].k.5v..y..5......k..l.#.[m....3}.{...l........r..R+O%P.".A.'..Sd3M?.O..}...l.~B

C:\Users\user\AppData\Roaming\WdGame\sdly\????.lnk Download File
Process:	C:\Users\user\Desktop\mAGs0IsoB7.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Mon Jun 14 12:21:39 2021, mtime=Mon Jun 14 12:21:39 2021, atime=Mon Jun 14 12:21:36 2021, length=3643816, window=hideshowminimized
Category:	dropped
Size (bytes):	1933
Entropy (8bit):	3.4409030042371276
Encrypted:	false
SSDEEP:	24:8bzHgzMPonDngKPv792AA/4wBYbPtZY/d9stZYyYHWw4eiYyYm1m:8brgYPcD0/4wBejqd9sjhSWw4jh31
MD5:	15433EA69CBAE2E8994AD9B45185E7AF
SHA1:	BCE2B84ABACFDA8792172DF22A4C09F95A5AC177
SHA-256:	20546E482F61ECEB6B50FFEAE0D1CC47F4B6D0D659FC06CA4F40F5C279DA2590
SHA-512:	EBAAC739F90E04EA1BDECF0490F20DCC5BF336F1C5917B5A6336B1D3DD6963D6C341310D01D351D0B354866F8315F5EC0229DD43CAAB542B2894EB0A82ABB033
Malicious:	false
Preview:	L..................F.@.. ....5 a....5 a..&u.3 a....7.......................:..DG..Yr?.D..U..k0.&...&...........-......:......i a......t...CFSF..1......Nz...AppData...t.Y^...H.g.3..(.....gVA.G..k...@.......Ny..R.j.....Y....................f.(.A.p.p.D.a.t.a...B.V.1......Nz...Roaming.@.......Ny..R.j.....Y....................D1,.R.o.a.m.i.n.g.....T.1......R.j..WdGame..>.......R.j.R.j....l\......................?.W.d.G.a.m.e.....N.1......R.j..sdly..:.......R.j.R.j....m\......................:.s.d.l.y.....Z.2...7..R.j .sdly.exe..B.......R.j.R.j....n\.....................g..s.d.l.y...e.x.e.......b...............-.......a............J1......C:\Users\user\AppData\Roaming\WdGame\sdly\sdly.exe......\.s.d.l.y...e.x.e.*.C.:.\.U.s.e.r.s.\.h.a.r.d.z.\.A.p.p.D.a.t.a.\.R.o.a.m.i.n.g.\.W.d.G.a.m.e.\.s.d.l.y...-.-.u.n.i.n.s.t.a.l.l. .-.-.f.r.o.m.=.s.t.a.r.t._.m.e.n.u.3.C.:.\.U.s.e.r.s.\.h.a.r.d.z.\.A.p.p.D.a.t.a.\.R.o.a.m.i.n.g.\.W.d.G.a.m.e.\.s.d.l.y.\.s.d.l.y...i.c.o.........%APPDATA%\WdGame

C:\Users\user\AppData\Roaming\WdGame\sdly\sdly.exe Download File
Process:	C:\Users\user\Desktop\mAGs0IsoB7.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	3643816
Entropy (8bit):	7.634682180862908
Encrypted:	false
SSDEEP:	98304:l1wpL+zIIQn5PEdqRj0auF2QzjumyCzEpqS:Tw4d85PEuj0GQuZQzS
MD5:	BC7522C569863C07247EFFEED6ADDA85
SHA1:	C24981FE4ACD02E6ADF1C5127DC9A6DDF8334ED9
SHA-256:	1704F37B457E8947B989C130DC603C67D5D1D1166E2A3138698610D3F2D0BBFC
SHA-512:	D447161DC5A4D3CFB8842D5E467C63D082DACA77D5C21BE3D34EE59285820823E43C212942B881820C9A1FD379E85EA2ED1151ED7EC5914D7F2D2879C051C54E
Malicious:	true
Antivirus:	Antivirus: Joe Sandbox ML, Detection: 100%
Preview:	MZ......................@...................................X...........!..L.!This program cannot be run in DOS mode....$........V.u.7.&.7.&.7.&$..&.7.&$..&"7.&$..&.7.&5^.'.7.&.7.&.7.&.P.'.7.&.^.'.7.&..&&.7.&._.'.7.&.^.'.7.&._.'.7.&._.'.7.&.Oe&.7.&.Ob&.7.&.Or&.7.&.7.&.5.&5^.'.7.&._.'.7.&5^.'.7.&5^.&.7.&.7v&.7.&5^.'.7.&Rich.7.&................PE..L...\|..`......................(......P............@...........................7......98...@.................................\l.......@..$.#..........\7..=....6......c..T....................d.......c..@............................................text...+........................... ..`.rdata..V...........................@..@.data...,........d..................@....rsrc...$.#..@....#.................@..@.reloc........6......t6.............@..B................................................................................................................................................................................................................

C:\Users\user\AppData\Roaming\WdGame\sdly\sdly.exe:Zone.Identifier Download File
Process:	C:\Users\user\Desktop\mAGs0IsoB7.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	true
Preview:	[ZoneTransfer]....ZoneId=0

C:\Users\user\AppData\Roaming\WdGame\sdly\sdly.ico Download File
Process:	C:\Users\user\Desktop\mAGs0IsoB7.exe
File Type:	MS Windows icon resource - 7 icons, 16x16, 32 bits/pixel, 24x24, 32 bits/pixel
Category:	dropped
Size (bytes):	393646
Entropy (8bit):	7.039317792660025
Encrypted:	false
SSDEEP:	6144:01O9o00Ra48BCnXwNgdld7ChUn8ZKvcn1XYTpTwQHcBoABw88Oo1bwrtmIvR3MjZ:07P8BCXvao6RmXQ/hmkudYJeCm
MD5:	9950280FDA99F61DD258E11A256CE80D
SHA1:	44E56E846A1A5527036F877D2413E64B986A3F3F
SHA-256:	0676BF7553DEF6454BF1144BA75514C0649193F6A5FF4F3C865B6A1ABA611235
SHA-512:	EFBB3129F1285D810CB94221D778E0F33BA9B60C041301B746309A9B7F6C0B05F5960E1E6D79BA9E52E319AD179D7C94CB9B5CDE95BF1A65FAA924F49E08B5D4
Malicious:	false
Preview:	............ .h...v......... ......... .... .....f...00.... ..%......``.... ......D........ .(...^......... .( ......(....... ..... ................................(......................................(.......(....f..c..c...T..~O.....{...Z..uA..s<...O..vJ...n...(....g..i..xP.qY3.......}...j...\|.................s.zI(.....t.~=...E...y...b..hU....vhN..........................t..t..[..Y...W....}...........~jQ............\|hG........hB2...m..^.k....B...zl...........u`@...y...g..._...R...j.c@%.l1...e..k.[2.._:".pUE......s....aG...........s...S.lV;..S ..6....`..s...\|.....dH......w......qM.............{J...I..r;..V!..e..g.R/...]I...........}^8...u........tL...d...g.{Ue..v5..k..f.u6...O....l.............iQ*..g?...l.....yN.h]..\|...zTf..e..d.r5...I..}bH.............wR...............]]......R9..._..e.X ..rD#...y...........x.vU/.........zdH.MG..9C..rv..M@..._..r.l?)..._.h='.x`D...\|.....sA".............ba..Ye..mr..HK...`..`..xV..i

C:\Users\user\AppData\Roaming\WdGame\sdly\sdly.json Download File
Process:	C:\Users\user\Desktop\mAGs0IsoB7.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	dropped
Size (bytes):	1596
Entropy (8bit):	5.902260460226551
Encrypted:	false
SSDEEP:	48:uUTuLdF5Van0RDad1M+MSOG3UI85g8/iFoJn:huBFvan0phxFI8+8men
MD5:	269F5F90E115BD3D9B10A9E191E5DDFE
SHA1:	F05CB5919EF30475ADF738652D31F3C4294022C1
SHA-256:	FF7F926CD5C02F638541EA57CC8E596A458C759DE6C8BD7F64006953A74158E4
SHA-512:	EB0EB7C292390AB73B1D04153DEC8F3848142A265F426F0CAF25B6B7F69D2658208D2AB5B43DEF680415E9E349C976F64182876A9170C7DFC9E1B88D4F223A36
Malicious:	false
Preview:	G7x3XgTFor5Fruvy8WE3x9ohoRMbUUfBFX2TkfF%2BaOZZ%2BlJT212t7OOiGgg3JVjj4CZZ%2BhOCtIUPqkAzle0M9oMNmoANidV%2F5ji4%2BJ%2BDCy%2Bl%2BtN3DvYQbaORdCF371p844krP05513zIKEQYBkWWQsdpaOHx4Ikqvp68gJhxVPH6UXDdOlrdQiRqr6MmaY98GBhTP%2FBCtRl1ap6WyP%2F5CGQZQeu38PKFii5aEPKOfn0WICLikKmF8uuc59zvhPMznFu8KGFNa%2BZc0Vsfg0Icpb658XdTNzK7gSydbNgN06KbQK19CpiooeUhaFg8wtZcVZRxIp7b11VvT%2BpoecJYDoDTr4MosWj%2B%2BlkE1XVY1OK6ApFnTBRSzVS0eXXhkhVWtDmpYH5bLx8H%2FGfVKTLqwzr2noYXmRlh5ji4%2BJ%2BDCy9%2BzfnmFPbFMtpGInVBhE4Coddgv8M7%2BMyhhfUcuKVZQZi3Ksem5Rr1abesVyGPObPUsEco3cBOA8r4HV0mHAM7wQ7dxaZ0wsvkr0bs5U4oC603XTfe4FmragjlOOOJMs81oxwsBAWyG8a6ojcHUuhY46IaCDclWOPgJln6E4K0hXBPqfin9WdLq2RwiU0B60IWKndaOq7%2Fvq0PwCWU9tBoMCrtkbvIpK%2B1DQrWN6syFDCS6R7OWBgaLVfsgDtyXvhz3jrU5QnNqL4pOGU8fBINMz0qbuYvmHDUBPPlysE93qUokqWsZ9I1zxFonJLHKWTgJln6E4K0hZvOA1Gtoex3MBDJ8K0EgFf14S0Wq4kiU741qqa%2BP4RkA6rqip8MTeS6nwxL3g98JODftp4FGj%2BiLjcjYNnAQU5IOoNDC35Hn6I1VIUXaGv1SBFVF9MXjY7vaPsSazrIAmcgJHab%2FbGojT8hOlSb%2FdgZ5Ey6vKH4G6hMbglM%2BCymSeMEsdWvmuRWKLqAEVgk

C:\Users\user\AppData\Roaming\WdGame\sdly\sdly.ui Download File
Process:	C:\Users\user\Desktop\mAGs0IsoB7.exe
File Type:	Zip archive data, at least v2.0 to extract
Category:	dropped
Size (bytes):	642005
Entropy (8bit):	7.990483347402209
Encrypted:	true
SSDEEP:	12288:HScXXP55vP5PxUtQw9YBMK5hOG9+xELF7J2lC3ZFmUAyt7w5J2Hn3ZZbQauO6j:yOXP55n5PURwSGaELOqFnAySJ2HLQaud
MD5:	E04294852554E7C92CA128437FCF3D03
SHA1:	A278D063431977A979140064C1D771220FD82D50
SHA-256:	C8C5D6A4909BE6E49EE6CF0E4B32F8E9578815B72BF0C40F9833F4B1185885E0
SHA-512:	665B18C4891731D68CD41FC6F2B3A27ACE5A0F0E126E1A7CBC6A89FE864822A4ED32C898756FE10018729A1F24466CF9EF86DAFE383E75BE36B65F8DBD228307
Malicious:	false
Preview:	PK........8..R................BrowserDlg/PK........3.,R.(W.....^.......BrowserDlg.xml.V..0.]..?Df.Mh..AA. ...,.,+'q[.....Vl......!X !.....KC._.e.+~..8....(..hj.{\|\|.+?..v.MF.D...Ev....=.S>.X.....I.}..']t.D.8.q`.......blD..l4...F..=....f.O......E....}...7...x.)#..,....=....A..D.I.4L.l...1..Z.1..4......;.S.K..]..r<...W;......[.QJ....``..,"..3........b...r~.....e..9OBI=....".)"K~..EO0....S...}.3".W...G7.5I.T2....CB.C.E...[...{'. .<.s..{Q.-.q..v..... V.hD]p..5."....O.Z(.m....i.L 0...q2^i./.$...O.!+.=.]..n..I&........;....7..\|.M.....qs......-..\|0U...u.sK.....Zzo...../\kf;K...z...q%...`...;.....U.ng..J..\.#.J4J.{v{..cg.U.Z.S.d C!.AP7...@.GC.Qo.H..A..9.{.&.X!l...A.\KsW........~..1.._.]... R...(.z.....Z....}..i..#.{...........M.w,h.dR...~.q.....2..'.0..`I....c...]V..S..i?Q(.c3.TBh.TR.,V.V..~V.{.^.ld....X....h.".....I.........F.....\|.7k.....'.R......K}.........vom..8X....c...M.,..@K.[.C..I.e..9o..j&e.[..n4M..dJ......[......u.$...ET.e...;.?.xt....\|.....

C:\Users\user\Desktop\????.lnk Download File
Process:	C:\Users\user\Desktop\mAGs0IsoB7.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Mon Jun 14 12:21:39 2021, mtime=Mon Jun 14 12:21:39 2021, atime=Mon Jun 14 12:21:36 2021, length=3643816, window=hideshowminimized
Category:	dropped
Size (bytes):	1965
Entropy (8bit):	3.4462385086755
Encrypted:	false
SSDEEP:	24:8bzHgzMPokBV3gKf3792AA/4+VZYyYbPtZYqtZYyYHWw4eiYyYm1m:8brgYPtBVs/4+LhejnjhSWw4jh31
MD5:	2622C36334463AE70F56485F13620116
SHA1:	A8F3B382E4F1CF850577B7494D74657652429DA6
SHA-256:	63C83EA78229AB09B8625F91F85456252FDC4D847C6EEFA535F894DEB3DB1D73
SHA-512:	BFF79FC7475AB18F773C65C85EE886316DF5145779A2A57173F2E244E58205EE8AA8004195DD92075FDA9F6BA134926E7E84140AD4D1A911CC326D2A9143C310
Malicious:	false
Preview:	L..................F.@.. ....5 a....5 a..&u.3 a....7.......................:..DG..Yr?.D..U..k0.&...&...........-......:......i a......t...CFSF..1......Nz...AppData...t.Y^...H.g.3..(.....gVA.G..k...@.......Ny..R.j.....Y....................f.(.A.p.p.D.a.t.a...B.V.1......R.j..Roaming.@.......Ny..R.j.....Y.....................I=.R.o.a.m.i.n.g.....T.1......R.j..WdGame..>.......R.j.R.j....l\........................W.d.G.a.m.e.....N.1......R.j..sdly..:.......R.j.R.j....m\........................s.d.l.y.....Z.2...7..R.j .sdly.exe..B.......R.j.R.j....n\.....................g..s.d.l.y...e.x.e.......b...............-.......a............J1......C:\Users\user\AppData\Roaming\WdGame\sdly\sdly.exe..'.....\.A.p.p.D.a.t.a.\.R.o.a.m.i.n.g.\.W.d.G.a.m.e.\.s.d.l.y.\.s.d.l.y...e.x.e.*.C.:.\.U.s.e.r.s.\.h.a.r.d.z.\.A.p.p.D.a.t.a.\.R.o.a.m.i.n.g.\.W.d.G.a.m.e.\.s.d.l.y...-.-.f.r.o.m.=.d.e.s.k._.i.c.o.n.3.C.:.\.U.s.e.r.s.\.h.a.r.d.z.\.A.p.p.D.a.t.a.\.R.o.a.m.i.n.g.\.W.d.G.a.m.e.\.s.d.l.y.\.s.d.l.y.

Static File Info

General
File type:	PE32 executable (GUI) Intel 80386, for MS Windows
Entropy (8bit):	7.634682180862908
TrID:	Win32 Executable (generic) a (10002005/4) 98.81% Windows ActiveX control (116523/4) 1.15% Generic Win/DOS Executable (2004/3) 0.02% DOS Executable Generic (2002/1) 0.02% Autodesk FLIC Image File (extensions: flc, fli, cel) (7/3) 0.00%
File name:	mAGs0IsoB7.exe
File size:	3643816
MD5:	bc7522c569863c07247effeed6adda85
SHA1:	c24981fe4acd02e6adf1c5127dc9a6ddf8334ed9
SHA256:	1704f37b457e8947b989c130dc603c67d5d1d1166e2a3138698610d3f2d0bbfc
SHA512:	d447161dc5a4d3cfb8842d5e467c63d082daca77d5c21be3d34ee59285820823e43c212942b881820c9a1fd379e85ea2ed1151ed7ec5914d7f2d2879c051c54e
SSDEEP:	98304:l1wpL+zIIQn5PEdqRj0auF2QzjumyCzEpqS:Tw4d85PEuj0GQuZQzS
File Content Preview:	MZ......................@...................................X...........!..L.!This program cannot be run in DOS mode....$........V.u.7.&.7.&.7.&$..&.7.&$..&"7.&$..&.7.&5^.'.7.&.7.&.7.&.P.'.7.&.^.'.7.&..&&.7.&._.'.7.&.^.'.7.&._.'.7.&._.'.7.&.Oe&.7.&.Ob&.7.

File Icon


Icon Hash:	96a96d6565a5e3f2

Static PE Info

General
Entrypoint:	0x4a50b0
Entrypoint Section:	.text
Digitally signed:	true
Imagebase:	0x400000
Subsystem:	windows gui
Image File Characteristics:	32BIT_MACHINE, EXECUTABLE_IMAGE
DLL Characteristics:	TERMINAL_SERVER_AWARE, DYNAMIC_BASE, NX_COMPAT
Time Stamp:	0x60AB967C [Mon May 24 12:05:16 2021 UTC]
TLS Callbacks:
CLR (.Net) Version:
OS Version Major:	5
OS Version Minor:	1
File Version Major:	5
File Version Minor:	1
Subsystem Version Major:	5
Subsystem Version Minor:	1
Import Hash:	d9c9b2207194e3b00f67e3fec7ad5f3e

Authenticode Signature

Signature Valid:	true
Signature Issuer:	CN=DigiCert Assured ID Code Signing CA-1, OU=www.digicert.com, O=DigiCert Inc, C=US
Signature Validation Error:	The operation completed successfully
Error Number:	0
Not Before, Not After	8/29/2019 5:00:00 PM 11/12/2021 4:00:00 AM
Subject Chain	CN=å¤©æ´¥ååæ¸¸ç§ææéå¬å¸, OU=ææ¯é¨, O=å¤©æ´¥ååæ¸¸ç§ææéå¬å¸, L=å¤©æ´¥å¸, S=å¤©æ´¥å¸, C=CN
Version:	3
Thumbprint MD5:	7CE285D7ABC2DCD919E121EA107F1B90
Thumbprint SHA-1:	280B78AC066D43DD734936D20A130EE98604EC47
Thumbprint SHA-256:	9A3163D601CC35DDA09842BFE42ADCD2471B7BCBF8D80CE918D5016DADB4A320
Serial:	0B82ABA67F8BC674DF9FB3ECA591BDCE

Entrypoint Preview

Instruction
call 00007FF448AFBC58h
jmp 00007FF448AFB03Fh
int3
int3
int3
int3
int3
int3
mov ecx, 00000001h
movsd xmm5, qword ptr [005051E8h]
jmp 00007FF448AFB1DEh
mov ecx, 00000002h
movsd xmm5, qword ptr [005051F0h]
jmp 00007FF448AFB1CFh
mov ecx, 00000003h
movsd xmm5, qword ptr [005051E8h]
movd eax, xmm0
and eax, 7FFFFFFFh
cmp eax, 7F800000h
jnc 00007FF448AFB312h
cvtss2sd xmm0, xmm0
cmp ecx, 02h
jne 00007FF448AFB1DAh
movsd xmm2, qword ptr [00505208h]
comisd xmm0, xmm2
jbe 00007FF448AFB1CCh
mov edx, 00000010h
call 00007FF448AFB302h
comisd xmm0, xmm5
jnc 00007FF448AFB2E7h
movsd xmm6, qword ptr [005051E0h]
comisd xmm0, xmm6
jc 00007FF448AFB2D5h
movdqa xmm1, xmm0
psllq xmm1, 01h
psrlq xmm1, 01h
cmp ecx, 01h
je 00007FF448AFB1FCh
movsd xmm2, qword ptr [00505200h]
comisd xmm1, xmm2
jnbe 00007FF448AFB1EEh
xorpd xmm2, xmm2
comisd xmm1, xmm2
je 00007FF448AFB1E4h
push eax
wait
fstcw word ptr [esp]
mov ax, word ptr [esp]
test ax, 00000010h
pop eax
jne 00007FF448AFB1D4h

Rich Headers

Programming Language:

[C++] VS2008 SP1 build 30729
[ C ] VS2008 SP1 build 30729

Data Directories

Name	Virtual Address	Virtual Size	Is in Section
IMAGE_DIRECTORY_ENTRY_EXPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IMPORT	0x126c5c	0x1cc	.rdata
IMAGE_DIRECTORY_ENTRY_RESOURCE	0x134000	0x238f24	.rsrc
IMAGE_DIRECTORY_ENTRY_EXCEPTION	0x0	0x0
IMAGE_DIRECTORY_ENTRY_SECURITY	0x375c00	0x3da8	.reloc
IMAGE_DIRECTORY_ENTRY_BASERELOC	0x36d000	0xe700	.reloc
IMAGE_DIRECTORY_ENTRY_DEBUG	0x1163a0	0x54	.rdata
IMAGE_DIRECTORY_ENTRY_COPYRIGHT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_GLOBALPTR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_TLS	0x116498	0x18	.rdata
IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG	0x1163f8	0x40	.rdata
IMAGE_DIRECTORY_ENTRY_BOUND_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IAT	0xed000	0x78c	.rdata
IMAGE_DIRECTORY_ENTRY_DELAY_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_RESERVED	0x0	0x0

Sections

Name	Virtual Address	Virtual Size	Raw Size	Xored PE	ZLIB Complexity	File Type	Entropy	Characteristics
.text	0x1000	0xeb22b	0xeb400	False	0.476157761026	data	6.57063920103	IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_READ
.rdata	0xed000	0x3c656	0x3c800	False	0.365924425362	data	5.15456491706	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ
.data	0x12a000	0x952c	0x6400	False	0.3468359375	data	5.7571675628	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_WRITE, IMAGE_SCN_MEM_READ
.rsrc	0x134000	0x238f24	0x239000	unknown	unknown	unknown	unknown	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ
.reloc	0x36d000	0xe700	0xe800	False	0.522225215517	data	6.55671650359	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_DISCARDABLE, IMAGE_SCN_MEM_READ

Resources

Name	RVA	Size	Type	Language	Country
FILERES	0x134408	0x3b840	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows	Chinese	China
FILERES	0x16fc48	0x4d2	ASCII text	Chinese	China
ZIPRES	0x17011c	0x9cbd5	Zip archive data, at least v2.0 to extract	Chinese	China
ZIPRES	0x20ccf4	0x92	Zip archive data, at least v2.0 to extract	Chinese	China
ZIPRES	0x20cd88	0x89fc4	Zip archive data, at least v2.0 to extract	Chinese	China
ZIPRES	0x296d4c	0x9f179	Zip archive data, at least v2.0 to extract	Chinese	China
ZIPRES	0x335ec8	0x32633	Zip archive data, at least v2.0 to extract	Chinese	China
RT_ICON	0x3684fc	0x25a8	data	Chinese	China
RT_ICON	0x36aaa4	0x10a8	data	Chinese	China
RT_ICON	0x36bb4c	0x988	data	Chinese	China
RT_ICON	0x36c4d4	0x468	GLS_BINARY_LSB_FIRST	Chinese	China
RT_STRING	0x36c93c	0x3e	data	Chinese	China
RT_STRING	0x36c97c	0x28	data	Chinese	China
RT_STRING	0x36c9a4	0x22	data	Chinese	China
RT_GROUP_ICON	0x36c9c8	0x3e	data	Chinese	China
RT_VERSION	0x36ca08	0x1e4	data	Chinese	China
RT_MANIFEST	0x36cbec	0x336	XML 1.0 document, UTF-8 Unicode (with BOM) text, with very long lines, with CRLF line terminators	English	United States

Imports

DLL	Import
SHELL32.dll	SHCreateDirectoryExW, SHBrowseForFolderW, SHGetPathFromIDListW, ShellExecuteExW, SHFileOperationW, ShellExecuteW, SHChangeNotify, SHGetSpecialFolderPathW, Shell_NotifyIconW
WININET.dll	InternetGetCookieExW, InternetCrackUrlW
IPHLPAPI.DLL	GetAdaptersInfo
KERNEL32.dll	GetSystemDirectoryW, GetTempPathW, GetTempFileNameW, CreateFileW, Process32FirstW, Process32NextW, SleepEx, OutputDebugStringA, LocalAlloc, LocalFree, WaitForMultipleObjects, GetStartupInfoW, Module32FirstW, Module32NextW, MapViewOfFile, UnmapViewOfFile, CreateFileMappingW, lstrcmpW, GetLocalTime, CreateThread, GetSystemWindowsDirectoryW, SetEvent, CreateEventW, DeleteFileA, GetFileSize, GetLogicalDrives, GetExitCodeThread, WriteConsoleW, SetEnvironmentVariableA, FreeEnvironmentStringsW, GetEnvironmentStringsW, GetCommandLineW, GetCommandLineA, GetOEMCP, IsValidCodePage, FindFirstFileExW, SetFilePointerEx, OutputDebugStringW, GetConsoleMode, GetConsoleCP, GetTimeZoneInformation, EnumSystemLocalesW, GetUserDefaultLCID, VirtualFree, GetFileType, SetStdHandle, GetModuleHandleExW, FreeLibraryAndExitThread, ExitThread, RtlUnwind, CreateFileA, lstrcmpiA, lstrcmpA, DeviceIoControl, DosDateTimeToFileTime, VirtualAlloc, Thread32Next, Thread32First, CreateToolhelp32Snapshot, FlushInstructionCache, ReadFile, SetThreadContext, GetThreadContext, ResumeThread, SuspendThread, OpenThread, Sleep, HeapCreate, CompareStringW, FreeResource, DebugBreak, VirtualQuery, MultiByteToWideChar, IsBadReadPtr, GetModuleFileNameW, LoadLibraryExW, lstrcmpiW, GetTickCount, WaitForSingleObject, SetErrorMode, SetUnhandledExceptionFilter, VirtualProtect, InterlockedDecrement, InterlockedIncrement, GetVersionExW, MoveFileExW, FindNextFileW, FindFirstFileW, DeleteFileW, GetFileAttributesW, SetFileAttributesW, GetFullPathNameW, RemoveDirectoryW, GetModuleHandleW, LoadLibraryW, GetStringTypeW, FlushFileBuffers, LocalFileTimeToFileTime, SetFilePointer, WriteFile, ReadConsoleW, GetStdHandle, DecodePointer, LockResource, HeapDestroy, lstrlenW, lstrcpynW, HeapAlloc, HeapReAlloc, HeapFree, HeapSize, GetProcessHeap, RaiseException, GetLastError, InitializeCriticalSectionAndSpinCount, DeleteCriticalSection, SetFileTime, LoadResource, InitializeSListHead, QueryPerformanceCounter, IsProcessorFeaturePresent, UnhandledExceptionFilter, SetEndOfFile, GlobalFree, GetVersion, ResetEvent, InterlockedCompareExchange, InterlockedExchange, MulDiv, GlobalUnlock, GlobalLock, ExitProcess, GlobalAlloc, CloseHandle, FindClose, SizeofResource, FindResourceW, FindResourceExW, GetCurrentThreadId, GetACP, IsDebuggerPresent, GetCPInfo, GetLocaleInfoW, LCMapStringW, GetSystemTimeAsFileTime, TlsFree, TlsSetValue, TlsGetValue, TlsAlloc, SwitchToThread, InitializeCriticalSection, EnterCriticalSection, EncodePointer, LeaveCriticalSection, CopyFileW, WideCharToMultiByte, FreeLibrary, GetProcAddress, GetShortPathNameW, OpenProcess, SetLastError, GetProcessId, GetCurrentThread, TerminateProcess, GetCurrentProcessId, GetCurrentProcess, IsValidLocale
USER32.dll	EnableWindow, KillTimer, SetTimer, IsZoomed, MoveWindow, DestroyWindow, GetMessageW, PostThreadMessageW, PeekMessageW, GetIconInfo, GetWindow, ReleaseDC, GetDC, RegisterWindowMessageW, SetForegroundWindow, SetWindowTextW, UpdateWindow, GetSystemMetrics, SetFocus, IsWindowVisible, ShowWindow, SendMessageW, SetWindowsHookExW, MessageBoxW, CharNextW, DefWindowProcW, PostQuitMessage, LoadImageW, DestroyIcon, PostMessageW, MapWindowPoints, SetWindowPos, IsWindow, SystemParametersInfoW, FindWindowExW, GetParent, PtInRect, IsRectEmpty, GetCursorPos, GetWindowRect, SwitchToThisWindow, wvsprintfW, SetCursor, InflateRect, OffsetRect, LoadCursorW, TranslateMessage, DispatchMessageW, CreateWindowExW, IsChild, UpdateLayeredWindow, GetFocus, GetKeyState, SetCapture, ReleaseCapture, BeginPaint, EndPaint, GetUpdateRect, InvalidateRect, GetClientRect, ScreenToClient, GetWindowLongW, SetWindowLongW, GetClassNameW, CallWindowProcW, RegisterClassW, RegisterClassExW, GetClassInfoExW, GetMenu, SetPropW, GetPropW, AdjustWindowRectEx, IntersectRect, RemovePropW, IsIconic, SetWindowRgn, MonitorFromWindow, GetMonitorInfoW, CopyRect, CharPrevW, DrawTextW, SetRect, DrawIconEx, CreateCaret, HideCaret, ShowCaret, SetCaretPos, GetCaretPos, ClientToScreen, GetSysColor, CreateAcceleratorTableW, InvalidateRgn, FillRect, SetLayeredWindowAttributes, RedrawWindow, GetWindowTextW, GetWindowTextLengthW, GetWindowDC
GDI32.dll	CreateDCW, CreateSolidBrush, GetDeviceCaps, ExtTextOutW, TextOutW, MoveToEx, CreateDIBSection, SetTextColor, SetStretchBltMode, SetBkMode, SetBkColor, ExtSelectClipRgn, SelectClipRgn, RestoreDC, RoundRect, SaveDC, GetTextMetricsW, GetObjectW, LineTo, GetClipBox, GetCharABCWidthsW, CreateRectRgnIndirect, CombineRgn, CreateRoundRectRgn, SetDIBitsToDevice, StretchBlt, SelectObject, GetTextExtentPoint32W, GetStockObject, GetDIBits, DeleteObject, SetWindowOrgEx, BitBlt, CreateCompatibleBitmap, CreateCompatibleDC, CreateFontIndirectW, CreatePen, DeleteDC, Rectangle
ADVAPI32.dll	OpenThreadToken, GetTokenInformation, EqualSid, AllocateAndInitializeSid, FreeSid, RegCloseKey, RegOpenKeyExW, RegQueryValueExW, CloseServiceHandle, OpenSCManagerW, OpenServiceW, QueryServiceStatus, RegCreateKeyExW, RegDeleteKeyW, RegDeleteValueW, RegEnumKeyExW, RegQueryInfoKeyW, RegSetValueExW, AdjustTokenPrivileges, LookupPrivilegeValueW, RegCreateKeyW, GetUserNameW, SetTokenInformation, CreateWellKnownSid, GetLengthSid, DuplicateTokenEx, RegQueryValueExA, RegOpenKeyExA, RegEnumKeyExA, OpenProcessToken
ole32.dll	OleLockRunning, CreateStreamOnHGlobal, CoCreateInstance, CLSIDFromString, CLSIDFromProgID, CoInitialize, CoInitializeSecurity, CoCreateGuid, CoTaskMemFree, CoTaskMemRealloc, CoTaskMemAlloc, CoUninitialize
OLEAUT32.dll	SafeArrayPutElement, SysAllocString, SysFreeString, VariantChangeType, SysAllocStringLen, VariantInit, VarUI4FromStr, VariantClear, SafeArrayCreate
SHLWAPI.dll	PathFileExistsW, StrStrIW, wnsprintfW, PathCombineW, PathIsDirectoryW, PathRemoveFileSpecW, SHDeleteKeyW, PathFindExtensionW, PathFindFileNameW, PathAppendW, PathCanonicalizeW, SHGetValueW, StrStrIA, SHGetValueA, SHSetValueA, StrCmpNIW, StrTrimA, SHSetValueW, StrCmpIW, AssocQueryStringW
COMCTL32.dll	InitCommonControlsEx, _TrackMouseEvent
PSAPI.DLL	EnumProcessModules, GetModuleFileNameExW, EnumProcesses
VERSION.dll	VerQueryValueW, GetFileVersionInfoW, GetFileVersionInfoSizeW
gdiplus.dll	GdipDrawPath, GdiplusStartup, GdiplusShutdown, GdipAlloc, GdipFree, GdipGetImageEncoders, GdipGetImageEncodersSize, GdipDrawImageRectRectI, GdipDrawImagePointsI, GdipFillPath, GdipGraphicsClear, GdipSetInterpolationMode, GdipBitmapUnlockBits, GdipBitmapLockBits, GdipCloneBitmapAreaI, GdipCreateHBITMAPFromBitmap, GdipCreateBitmapFromScan0, GdipCreateBitmapFromFile, GdipCreateBitmapFromStream, GdipGetImageGraphicsContext, GdipSaveImageToFile, GdipCreateTexture, GdipAddPathArcI, GdipClosePathFigure, GdipDrawImageRectI, GdipGetPropertyItem, GdipGetPropertyItemSize, GdipImageSelectActiveFrame, GdipImageGetFrameCount, GdipImageGetFrameDimensionsList, GdipImageGetFrameDimensionsCount, GdipGetImageHeight, GdipGetImageWidth, GdipDrawEllipseI, GdipCloneImage, GdipDeletePen, GdipCreatePen1, GdipCloneBrush, GdipDeleteBrush, GdipCreateSolidFill, GdipLoadImageFromStream, GdipDeletePath, GdipCreatePath, GdipFillEllipseI, GdipSetSmoothingMode, GdipDeleteGraphics, GdipCreateFromHDC, GdipDisposeImage, GdipLoadImageFromStreamICM
urlmon.dll	URLDownloadToCacheFileA
Secur32.dll	GetUserNameExW
WINMM.dll	timeGetTime
CRYPT32.dll	CryptBinaryToStringW, CryptStringToBinaryW, CertGetNameStringW
WINTRUST.dll	WTHelperProvDataFromStateData, WinVerifyTrust
MSIMG32.dll	GradientFill, AlphaBlend
IMM32.dll	ImmSetCompositionWindow, ImmGetContext, ImmReleaseContext
dbghelp.dll	MakeSureDirectoryPathExists

Version Infos

Description	Data
LegalCopyright	91
ProductVersion	4.2.3.61
ProductName
FileVersion	3.2.5.61
FileDescription
Translation	0x0804 0x04b0

Possible Origin

Language of compilation system	Country where language is spoken	Map
Chinese	China
English	United States

Network Behavior

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Jun 14, 2021 06:21:40.086110115 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:40.086622953 CEST	49715	80	192.168.2.3	47.117.76.6
Jun 14, 2021 06:21:40.373049974 CEST	80	49715	47.117.76.6	192.168.2.3
Jun 14, 2021 06:21:40.373152018 CEST	49715	80	192.168.2.3	47.117.76.6
Jun 14, 2021 06:21:40.373724937 CEST	49715	80	192.168.2.3	47.117.76.6
Jun 14, 2021 06:21:40.410375118 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:40.410473108 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:40.411578894 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:40.660367966 CEST	80	49715	47.117.76.6	192.168.2.3
Jun 14, 2021 06:21:40.662631989 CEST	80	49715	47.117.76.6	192.168.2.3
Jun 14, 2021 06:21:40.662764072 CEST	49715	80	192.168.2.3	47.117.76.6
Jun 14, 2021 06:21:40.674451113 CEST	49715	80	192.168.2.3	47.117.76.6
Jun 14, 2021 06:21:40.737313032 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:40.741758108 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:40.741807938 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:40.741847992 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:40.741899967 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:40.741905928 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:40.741990089 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:40.741990089 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:40.742064953 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:40.742069006 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:40.742130995 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:40.742141008 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:40.742199898 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:40.742208004 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:40.742273092 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:40.742278099 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:40.742351055 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:40.742362976 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:40.742424965 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:40.742425919 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:40.742480993 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:40.963579893 CEST	80	49715	47.117.76.6	192.168.2.3
Jun 14, 2021 06:21:40.963665962 CEST	49715	80	192.168.2.3	47.117.76.6
Jun 14, 2021 06:21:40.969733000 CEST	49715	80	192.168.2.3	47.117.76.6
Jun 14, 2021 06:21:41.066678047 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:41.066708088 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:41.066730022 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:41.066775084 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:41.066792965 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:41.066829920 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:41.066840887 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:41.066920042 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:41.066972971 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:41.066978931 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:41.067035913 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:41.067039967 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:41.067081928 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:41.067086935 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:41.067101955 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:41.067131996 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:41.067152977 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:41.067172050 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:41.067209959 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:41.067222118 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:41.067274094 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:41.067281008 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:41.067331076 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:41.067369938 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:41.067414045 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:41.067435980 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:41.067447901 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:41.067472935 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:41.067476034 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:41.067496061 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:41.067524910 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:41.067527056 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:41.067591906 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:41.067594051 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:41.067706108 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:41.258352995 CEST	80	49715	47.117.76.6	192.168.2.3
Jun 14, 2021 06:21:41.258536100 CEST	49715	80	192.168.2.3	47.117.76.6
Jun 14, 2021 06:21:41.392863035 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:41.392887115 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:41.392901897 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:41.392919064 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:41.392931938 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:41.392936945 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:41.392954111 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:41.392956018 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:41.392975092 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:41.392993927 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:41.393008947 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:41.393016100 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:41.393034935 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:41.393035889 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:41.393038034 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:41.393052101 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:41.393064022 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:41.393069029 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:41.393096924 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:41.393120050 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:41.393254042 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:41.393290043 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:41.393301010 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:41.393317938 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:41.393336058 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:41.393341064 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:41.393362999 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:41.393364906 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:41.393383980 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:41.393384933 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:41.393404007 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:41.393407106 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:41.393420935 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:41.393428087 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:41.393440008 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:41.393455029 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:41.393459082 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:41.393476009 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:41.393484116 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:41.393493891 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:41.393511057 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:41.393513918 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:41.393526077 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:41.393544912 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:41.393548012 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:41.393560886 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:41.393582106 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:41.393582106 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:41.393599033 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:41.393605947 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:41.393615007 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:41.393626928 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:41.393630981 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:41.393647909 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:41.393662930 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:41.393663883 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:41.393681049 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:41.393697023 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:41.393697977 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:41.393724918 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:41.393749952 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:41.717281103 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:41.717304945 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:41.717320919 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:41.717336893 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:41.717356920 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:41.717375040 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:41.717391968 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:41.717391014 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:41.717407942 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:41.717425108 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:41.717437029 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:41.717448950 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:41.717461109 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:41.717468977 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:41.717473984 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:41.717487097 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:41.717504025 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:41.717514992 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:41.717519999 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:41.717529058 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:41.717536926 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:41.717551947 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:41.717569113 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:41.717586040 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:41.717592955 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:41.717602015 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:41.717622995 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:41.717639923 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:41.717653990 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:41.717655897 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:41.717674017 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:41.717689991 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:41.717695951 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:41.717739105 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:41.717755079 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:41.717756987 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:41.717767954 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:41.717784882 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:41.717793941 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:41.717803001 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:41.717822075 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:41.717839003 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:41.717855930 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:41.717864037 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:41.717874050 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:41.717890978 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:41.717907906 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:41.717924118 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:41.717924118 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:41.717946053 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:41.717964888 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:41.717967033 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:41.717982054 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:41.717998028 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:41.718017101 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:41.718033075 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:41.718044996 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:41.718048096 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:41.718064070 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:41.718084097 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:41.718101978 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:41.718107939 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:41.718117952 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:41.718135118 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:41.718149900 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:41.718158960 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:41.718167067 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:41.718184948 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:41.718202114 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:41.718215942 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:41.718229055 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:41.718240976 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:41.718244076 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:41.718247890 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:41.718264103 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:41.718281984 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:41.718292952 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:41.718296051 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:41.718312025 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:41.718327999 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:41.718344927 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:41.718350887 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:41.718367100 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:41.718383074 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:41.718390942 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:41.718396902 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:41.718416929 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:41.718434095 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:41.718450069 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:41.718457937 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:41.718466997 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:41.718483925 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:41.718499899 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:41.718516111 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:41.718544960 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:41.718811989 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:42.041749001 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.041785955 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.041809082 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.041831017 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.041862011 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:42.041892052 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:42.042392969 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.042418003 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.042453051 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.042454004 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:42.042479038 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.042480946 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:42.042504072 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.042509079 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:42.042526960 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.042540073 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:42.042548895 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:42.042550087 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.042572975 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.042588949 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:42.042597055 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.042617083 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:42.042620897 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.042644024 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.042654037 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:42.042669058 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.042685032 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:42.042692900 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.042715073 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.042722940 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:42.042737961 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.042747974 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:42.042761087 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.042782068 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:42.042783022 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.042805910 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.042814970 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:42.042830944 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.042844057 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:42.042857885 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.042881012 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.042882919 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:42.042903900 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.042911053 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:42.042927980 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.042948961 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:42.042952061 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.042972088 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:42.042973995 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.042998075 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.043001890 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:42.043020964 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.043030024 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:42.043047905 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.043056965 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:42.043072939 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.043093920 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:42.043096066 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.043129921 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:42.043138027 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.043165922 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.043176889 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:42.043189049 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.043210983 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:42.043211937 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.043232918 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:42.043236017 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.043255091 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:42.043260098 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.043282986 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:42.043283939 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.043304920 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:42.043307066 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.043328047 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:42.043329954 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.043354988 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:42.043364048 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.043385983 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:42.043387890 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.043409109 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:42.043411016 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.043431997 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:42.043433905 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.043453932 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:42.043456078 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.043478012 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:42.043479919 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.043504000 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:42.043505907 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.043529034 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.043530941 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:42.043550968 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.043551922 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:42.043572903 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.043580055 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:42.043595076 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.043602943 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:42.043617964 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.043639898 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:42.043639898 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.043663025 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.043683052 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:42.043688059 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.043709993 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:42.043710947 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.043732882 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.043744087 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:42.043756008 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.043778896 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.043778896 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:42.043800116 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.043808937 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:42.043823957 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.043844938 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.043845892 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:42.043869972 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.043889999 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:42.043894053 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.043914080 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:42.043916941 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.043939114 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.043942928 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:42.043970108 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:42.043972969 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.043994904 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:42.043996096 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.044018984 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:42.044018984 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.044042110 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.044044971 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:42.044066906 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.044070959 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:42.044090986 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.044092894 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:42.044112921 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.044121027 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:42.044137001 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.044145107 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:42.044159889 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.044167995 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:42.044182062 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.044203997 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.044207096 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:42.044226885 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.044245958 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:42.044251919 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.044275999 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.044284105 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:42.044297934 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.044317007 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:42.044321060 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.044342041 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:42.044343948 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.044365883 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.044373035 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:42.044389963 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.044390917 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:42.044411898 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.044419050 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:42.044439077 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.044440985 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:42.044461966 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.044469118 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:42.044483900 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.044488907 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:42.044507980 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.044524908 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:42.044531107 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.044532061 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:42.044553995 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.044564009 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:42.044576883 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.044595957 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:42.044600964 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.044625044 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:42.044625998 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.044648886 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.044651031 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:42.044671059 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.044680119 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:42.044693947 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.044704914 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:42.044717073 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.044738054 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.044740915 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:42.044759989 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.044779062 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:42.044780970 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.044785976 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:42.044806004 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.044823885 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:42.044828892 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.044848919 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.044850111 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:42.044872046 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.044889927 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:42.044893026 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.044914961 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.044925928 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:42.044936895 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.044955969 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:42.044958115 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.044982910 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.044994116 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:42.045003891 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.045025110 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.045033932 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:42.045047998 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.045067072 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:42.045068979 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.045089960 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.045111895 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.045133114 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.045140028 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:42.045152903 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:42.045156956 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.045180082 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.045186996 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:42.045201063 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.045222044 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:42.045222044 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.045239925 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.045257092 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.045274019 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.045293093 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.045305967 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:42.045315027 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.045336008 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.045341969 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:42.045356989 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.045377970 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.045380116 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:42.045402050 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.045413971 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:42.045424938 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.045447111 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.045469046 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.045484066 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:42.045490026 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.045511007 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.045517921 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:42.045532942 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.045551062 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:42.045555115 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.045578957 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.045587063 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:42.045600891 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.045622110 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:42.045623064 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.045665026 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:42.257858992 CEST	80	49715	47.117.76.6	192.168.2.3
Jun 14, 2021 06:21:42.257929087 CEST	49715	80	192.168.2.3	47.117.76.6
Jun 14, 2021 06:21:42.365937948 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.365967035 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.365983009 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.365994930 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.366007090 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.366019011 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.366030931 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.366043091 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.366067886 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:42.366106987 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:42.369540930 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.369565964 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.369592905 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.369616985 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.369617939 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:42.369638920 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.369662046 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.369667053 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:42.369684935 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.369707108 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.369709969 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:42.369729996 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.369735003 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:42.369752884 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.369774103 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:42.369779110 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.369802952 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.369807005 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:42.369826078 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.369848013 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.369859934 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:42.369870901 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.369893074 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.369894028 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:42.369915962 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.369919062 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:42.369939089 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.369956970 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:42.369965076 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.369988918 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.369998932 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:42.370012045 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.370035887 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.370039940 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:42.370054960 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:42.370059013 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.370081902 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.370084047 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:42.370105028 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.370110035 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:42.370126963 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.370147943 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:42.370152950 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.370176077 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.370182037 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:42.370198011 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.370215893 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:42.370220900 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.370244980 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.370255947 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:42.370266914 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.370289087 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.370291948 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:42.370311975 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.370332003 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:42.370341063 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.370356083 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:42.370363951 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.370384932 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.370393038 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:42.370408058 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.370424032 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:42.370430946 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.370452881 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.370457888 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:42.370476007 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.370495081 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:42.370498896 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.370523930 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.370532036 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:42.370548010 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.370568991 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.370569944 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:42.370590925 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.370604992 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:42.370613098 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.370630980 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:42.370635033 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.370659113 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.370667934 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:42.370681047 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.370691061 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:42.370706081 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.370729923 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.370729923 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:42.370750904 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.370767117 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:42.370773077 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.370795965 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.370803118 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:42.370817900 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.370841980 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.370842934 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:42.370856047 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:42.370863914 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.370887995 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.370893002 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:42.370910883 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:42.370912075 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.370934010 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.370959044 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.370960951 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:42.370980978 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.370987892 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:42.371004105 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.371023893 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:42.371026039 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.371048927 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.371071100 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:42.371079922 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.371090889 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:42.371103048 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.371129990 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:42.371145010 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.371148109 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:42.371167898 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.371191025 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.371197939 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:42.371212959 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.371233940 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:42.371236086 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.371262074 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.371273994 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:42.371287107 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.371298075 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:42.371309042 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.371331930 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.371340990 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:42.371354103 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.371359110 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:42.371376038 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.371383905 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:42.371398926 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.371418953 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:42.371421099 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.371445894 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.371457100 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:42.371469021 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.371491909 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.371495008 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:42.371515036 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.371536016 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:42.371536970 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.371560097 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.371570110 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:42.371582985 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.371599913 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:42.371604919 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.371629000 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.371637106 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:42.371651888 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.371653080 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:42.371674061 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.371678114 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:42.371696949 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.371701002 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:42.371721029 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.371725082 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:42.371745110 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.371748924 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:42.371767044 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.371774912 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:42.371788979 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.371798992 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:42.371814966 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.371838093 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.371838093 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:42.371859074 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.371872902 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:42.371881008 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.371901989 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.371903896 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:42.371922970 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.371944904 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.371944904 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:42.371967077 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.371988058 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:42.371992111 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.372010946 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:42.372014999 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.372035980 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.372051954 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:42.372056961 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.372080088 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.372083902 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:42.372101068 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.372121096 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:42.372123003 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.372144938 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.372158051 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:42.372169971 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.372181892 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:42.372191906 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.372212887 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.372220039 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:42.372234106 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.372245073 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:42.372256041 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.372281075 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.372282028 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:42.372303009 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.372319937 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:42.372324944 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.372349024 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.372356892 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:42.372370958 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.372381926 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:42.372392893 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.372414112 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:42.372415066 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.372436047 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.372440100 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:42.372457027 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.372462988 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:42.372478962 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.372490883 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:42.372499943 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.372524023 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.372544050 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:42.372545958 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.372565031 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:42.372565985 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.372587919 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.372598886 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:42.372611046 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.372622967 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:42.372632980 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.372654915 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.372662067 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:42.372675896 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.372689962 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:42.372697115 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:42.372700930 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.372723103 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.372741938 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:42.372745037 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.372762918 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:42.372766018 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.372786999 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.372802973 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:42.372807980 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.372829914 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.372838974 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:42.372850895 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.372869015 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:42.372874975 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.372898102 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.372900963 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:42.372917891 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.372921944 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:42.372940063 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.372950077 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:42.372963905 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.372967005 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:42.372984886 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.372988939 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:42.373007059 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.373013973 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:42.373028040 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.373037100 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:42.373053074 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.373073101 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:42.373076916 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.373099089 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.373114109 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:42.373121977 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:42.373130083 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.373152018 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.373157978 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:42.373173952 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.373195887 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.373203993 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:42.373209953 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:42.373218060 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.373239994 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.373249054 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:42.373260975 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.373280048 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:42.373281956 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.373306990 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.373308897 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:42.373328924 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.373351097 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.373352051 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:42.373373985 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.373390913 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:42.373395920 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.373416901 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.373416901 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:42.373439074 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.373460054 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.373461008 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:42.373485088 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.373501062 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:42.373526096 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:42.690165997 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.690201998 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.690247059 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:42.690268040 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:42.690427065 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.690457106 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.690483093 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.690485001 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:42.690495968 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:42.690505981 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.690527916 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.690530062 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:42.690548897 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:42.690550089 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.690574884 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:42.690589905 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:42.697448015 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.697480917 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.697505951 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.697523117 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:42.697527885 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.697540045 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:42.697552919 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.697565079 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:42.697577953 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.697588921 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:42.697603941 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:42.697607040 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.697629929 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.697657108 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:42.697666883 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:42.697684050 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.697707891 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.697731972 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.697751999 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.697767019 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:42.697772026 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:42.697772980 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.697793007 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:42.697796106 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.697813034 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.697833061 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:42.697834015 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.697835922 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:42.697853088 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.697865009 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:42.697875023 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.697890043 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:42.697895050 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:42.697896957 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.697918892 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.697921991 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:42.697942019 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.697959900 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.697977066 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.697998047 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.698009968 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:42.698020935 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.698029995 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:42.698035002 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:42.698044062 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.698072910 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.698081970 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:42.698095083 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:42.698096991 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.698122025 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.698141098 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.698144913 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:42.698149920 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:42.698165894 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.698185921 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.698190928 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:42.698211908 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.698230982 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.698240995 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:42.698246002 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:42.698252916 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.698276043 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.698278904 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:42.698301077 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.698308945 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:42.698323965 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.698327065 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:42.698364973 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.698368073 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:42.698385000 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.698389053 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:42.698407888 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.698409081 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:42.698426962 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:42.698431015 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.698450089 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:42.698455095 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.698466063 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:42.698477983 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.698488951 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:42.698502064 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.698512077 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:42.698524952 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.698549986 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:42.698553085 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.698573112 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:42.698577881 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.698597908 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:42.698601007 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.698623896 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.698631048 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:42.698647022 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.698657990 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:42.698669910 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.698693037 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.698709965 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:42.698713064 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.698733091 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:42.698736906 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:42.698738098 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.698753119 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:42.698759079 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.698774099 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:42.698781013 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.698796034 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:42.698805094 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.698817015 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:42.698826075 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.698837042 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:42.698848009 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.698857069 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:42.698870897 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.698890924 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:42.698892117 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.698904037 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:42.698916912 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.698925972 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:42.698939085 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.698955059 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:42.698959112 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.698978901 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.698987007 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:42.699002028 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.699023008 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.699023008 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:42.699028015 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:42.699045897 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.699048042 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:42.699063063 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:42.699069023 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.699095011 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.699099064 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:42.699130058 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:42.699148893 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.699157000 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:42.699174881 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.699196100 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:42.699197054 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.699218035 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:42.699222088 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.699239016 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:42.699244022 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.699266911 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.699269056 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:42.699285984 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:42.699290037 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.699312925 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.699332952 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:42.699337959 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:42.699340105 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.699362040 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:42.699364901 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.699388027 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.699407101 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:42.699410915 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.699412107 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:42.699431896 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:42.699435949 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.699454069 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:42.699457884 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.699466944 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:42.699481010 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.699502945 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:42.699503899 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.699527025 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:42.699531078 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.699548006 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:42.699553967 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.699575901 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:42.699579000 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.699599028 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:42.699603081 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.699620962 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:42.699625015 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.699649096 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.699661016 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:42.699671984 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.699671984 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:42.699687958 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:42.699693918 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.699717999 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:42.699721098 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.699732065 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:42.699744940 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.699749947 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:42.699769020 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.699779987 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:42.699790001 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.699800014 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:42.699814081 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.699820995 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:42.699836969 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.699847937 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:42.699860096 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.699868917 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:42.699882984 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.699892044 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:42.699908018 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.699918985 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:42.699930906 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.699939966 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:42.699954987 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.699959993 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:42.699979067 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.699999094 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:42.699999094 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.700020075 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.700030088 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:42.700042009 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.700062990 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.700062990 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:42.700086117 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.700094938 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:42.700110912 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.700124025 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:42.700133085 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.700151920 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:42.700154066 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.700175047 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:42.700176001 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.700192928 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:42.700197935 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.700215101 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:42.700221062 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.700232983 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:42.700242996 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.700258017 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:42.700267076 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.700273991 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:42.700290918 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.700298071 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:42.700314999 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.700316906 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:42.700339079 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.700355053 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:42.700361967 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.700386047 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.700387001 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:42.700407028 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:42.700409889 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.700426102 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:42.700431108 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.700448990 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:42.700455904 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.700467110 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:42.700479984 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.700491905 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:42.700503111 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.700511932 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:42.700525045 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.700537920 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:42.700546980 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:42.700558901 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:42.700578928 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:43.014319897 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:43.014352083 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:43.014369965 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:43.014386892 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:43.014409065 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:43.014435053 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:43.014460087 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:43.014484882 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:43.014508009 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:43.014532089 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:43.014559031 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:43.014585018 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:43.014581919 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:43.014610052 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:43.014625072 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:43.014631987 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:43.014635086 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:43.014659882 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:43.014672041 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:43.014683962 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:43.014697075 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:43.014708996 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:43.014724970 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:43.014734030 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:43.014760971 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:43.014786005 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:43.014811039 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:43.014849901 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:43.014862061 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:43.015069008 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:43.015089035 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:43.015218019 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:43.021625042 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:43.021703005 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:43.024527073 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:43.024554968 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:43.024579048 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:43.024585009 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:43.024602890 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:43.024604082 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:43.024629116 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:43.024638891 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:43.024656057 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:43.024682045 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:43.024683952 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:43.024704933 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:43.024708033 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:43.024728060 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:43.024732113 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:43.024754047 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:43.024756908 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:43.024780989 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:43.024781942 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:43.024805069 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:43.024805069 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:43.024827957 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:43.024830103 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:43.024853945 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:43.024854898 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:43.024874926 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:43.024882078 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:43.024903059 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:43.024908066 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:43.024929047 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:43.024930954 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:43.024950981 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:43.024955988 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:43.024976969 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:43.024980068 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:43.025000095 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:43.025005102 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:43.025026083 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:43.025028944 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:43.025048971 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:43.025079012 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:43.025082111 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:43.025137901 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:43.025330067 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:43.025355101 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:43.025376081 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:43.025397062 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:43.025460958 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:43.025490999 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:43.025516033 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:43.025520086 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:43.025536060 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:43.025541067 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:43.025566101 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:43.025576115 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:43.025613070 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:43.338922977 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:43.338977098 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:43.338994980 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:43.339010000 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:43.339025021 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:43.339046955 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:43.339061975 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:43.339083910 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:43.339106083 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:43.339144945 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:43.339170933 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:43.339184999 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:43.339191914 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:43.339216948 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:43.339221954 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:43.339231014 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:43.339236021 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:43.339240074 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:43.339241982 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:43.339265108 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:43.339274883 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:43.339288950 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:43.339312077 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:43.339329004 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:43.339346886 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:43.339366913 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:43.339385033 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:43.339407921 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:43.339428902 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:43.339452028 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:43.339468002 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:43.339485884 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:43.339510918 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:43.339512110 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:43.339535952 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:43.339559078 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:43.339584112 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:43.339587927 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:43.339603901 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:43.339607954 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:43.339610100 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:43.339615107 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:43.339617968 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:43.339622021 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:43.339626074 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:43.339632034 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:43.339643002 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:43.339654922 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:43.339678049 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:43.339693069 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:43.339704037 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:43.339721918 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:43.339729071 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:43.339751959 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:43.339761972 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:43.339775085 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:43.339797974 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:43.339808941 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:43.339821100 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:43.339835882 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:43.339845896 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:43.339869022 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:43.339879990 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:43.339889050 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:43.339911938 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:43.339922905 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:43.339935064 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:43.339940071 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:43.339958906 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:43.339979887 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:43.339984894 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:43.339997053 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:43.340009928 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:43.340033054 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:43.340044975 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:43.340054989 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:43.340063095 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:43.340080976 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:43.340104103 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:43.340126038 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:43.340137005 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:43.340147972 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:43.340153933 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:43.340173006 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:43.340188980 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:43.340197086 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:43.340221882 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:43.340230942 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:43.340245008 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:43.340255976 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:43.340272903 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:43.340293884 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:43.340296030 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:43.340320110 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:43.340336084 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:43.340343952 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:43.340365887 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:43.340383053 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:43.340388060 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:43.340411901 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:43.340432882 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:43.340444088 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:43.340449095 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:43.340468884 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:43.340492010 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:43.340504885 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:43.340516090 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:43.340527058 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:43.340539932 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:43.340563059 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:43.340573072 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:43.340585947 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:43.340607882 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:43.340617895 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:43.340631008 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:43.340636015 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:43.340658903 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:43.340676069 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:43.340683937 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:43.340696096 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:43.340707064 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:43.340724945 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:43.340730906 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:43.340754032 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:43.340771914 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:43.340786934 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:43.340794086 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:43.340817928 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:43.340817928 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:43.340841055 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:43.340842962 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:43.340867996 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:43.340879917 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:43.340889931 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:43.340907097 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:43.340912104 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:43.340934992 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:43.340941906 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:43.340960979 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:43.340976954 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:43.340985060 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:43.341007948 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:43.341015100 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:43.341031075 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:43.341053009 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:43.341054916 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:43.341073990 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:43.341077089 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:43.341100931 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:43.341114044 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:43.341123104 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:43.341136932 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:43.341154099 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:43.341178894 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:43.341181040 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:43.341202021 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:43.341218948 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:43.341228962 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:43.341252089 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:43.341264963 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:43.341273069 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:43.341291904 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:43.341295958 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:43.341317892 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:43.341325998 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:43.341340065 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:43.341362953 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:43.341365099 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:43.341387987 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:43.341402054 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:43.341413021 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:43.341437101 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:43.341449976 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:43.341459990 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:43.341484070 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:43.341484070 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:43.341506958 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:43.341509104 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:43.341527939 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:43.341551065 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:43.341551065 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:43.341573000 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:43.341589928 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:43.341598034 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:43.341622114 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:43.341628075 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:43.341643095 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:43.341661930 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:43.341665983 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:43.341689110 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:43.341691971 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:43.341712952 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:43.341727972 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:43.341737032 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:43.341758013 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:43.341759920 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:43.341784000 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:43.341794014 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:43.341808081 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:43.341830969 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:43.341837883 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:43.341852903 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:43.341876030 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:43.341877937 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:43.341898918 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:43.341908932 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:43.341922045 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:43.341943026 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:43.341948986 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:43.341968060 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:43.341990948 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:43.341995001 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:43.342014074 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:43.342025995 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:43.342036963 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:43.342061996 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:43.342067003 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:43.342083931 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:43.342102051 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:43.342107058 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:43.342129946 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:43.342139959 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:43.342154026 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:43.342179060 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:43.342179060 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:43.342201948 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:43.342211962 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:43.342222929 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:43.342246056 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:43.342253923 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:43.342267036 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:43.342289925 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:43.342293024 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:43.342314005 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:43.342314005 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:43.342339039 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:43.342355967 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:43.342361927 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:43.342384100 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:43.342392921 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:43.342406034 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:43.342430115 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:43.342437983 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:43.342452049 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:43.342474937 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:43.342478991 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:43.342499018 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:43.342500925 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:43.342524052 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:43.342535019 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:43.342546940 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:43.342564106 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:43.342569113 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:43.342591047 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:43.342592001 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:43.342616081 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:43.342636108 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:43.342637062 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:43.342660904 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:43.342674971 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:43.342681885 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:43.342708111 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:43.342710972 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:43.342730999 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:43.342741966 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:43.342753887 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:43.342786074 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:43.342787981 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:43.342823029 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:43.342864037 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:43.345767021 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:43.345798016 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:43.345815897 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:43.345837116 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:43.345859051 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:43.345868111 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:43.345880985 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:43.345906973 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:43.345917940 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:43.345928907 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:43.345952988 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:43.345954895 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:43.345972061 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:43.345978975 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:43.346003056 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:43.346015930 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:43.346025944 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:43.346040010 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:43.346049070 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:43.346071959 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:43.346074104 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:43.346092939 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:43.346113920 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:43.346113920 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:43.346138954 CEST	80	49714	115.231.152.248	192.168.2.3
Jun 14, 2021 06:21:43.346146107 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:43.346190929 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:43.346201897 CEST	49714	80	192.168.2.3	115.231.152.248
Jun 14, 2021 06:21:43.360215902 CEST	49715	80	192.168.2.3	47.117.76.6
Jun 14, 2021 06:21:43.385236025 CEST	49719	80	192.168.2.3	47.117.76.6
Jun 14, 2021 06:21:43.604692936 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:43.647516012 CEST	80	49715	47.117.76.6	192.168.2.3
Jun 14, 2021 06:21:43.662493944 CEST	80	49719	47.117.76.6	192.168.2.3
Jun 14, 2021 06:21:43.662666082 CEST	49719	80	192.168.2.3	47.117.76.6
Jun 14, 2021 06:21:43.663280964 CEST	49719	80	192.168.2.3	47.117.76.6
Jun 14, 2021 06:21:43.920955896 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:43.921226025 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:43.921932936 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:43.937067032 CEST	80	49719	47.117.76.6	192.168.2.3
Jun 14, 2021 06:21:43.939577103 CEST	80	49719	47.117.76.6	192.168.2.3
Jun 14, 2021 06:21:43.939682961 CEST	49719	80	192.168.2.3	47.117.76.6
Jun 14, 2021 06:21:44.236679077 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:44.340850115 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:44.340913057 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:44.340945005 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:44.340972900 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:44.341011047 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:44.341049910 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:44.341085911 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:44.341124058 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:44.341157913 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:44.341162920 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:44.341208935 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:44.341216087 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:44.341242075 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:44.367290020 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:44.369400978 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:44.655637980 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:44.655703068 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:44.655738115 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:44.655769110 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:44.655774117 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:44.655807018 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:44.655807018 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:44.655838013 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:44.655849934 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:44.655870914 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:44.655894041 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:44.655899048 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:44.655921936 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:44.655926943 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:44.655951023 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:44.655956984 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:44.655992031 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:44.656018972 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:44.656042099 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:44.656053066 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:44.656061888 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:44.656086922 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:44.656112909 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:44.656116009 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:44.656147003 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:44.656147003 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:44.656169891 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:44.656176090 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:44.656199932 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:44.656207085 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:44.656239033 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:44.656244040 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:44.656358957 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:44.656363010 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:44.683989048 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:44.684026003 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:44.684099913 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:44.684119940 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:44.939522982 CEST	80	49719	47.117.76.6	192.168.2.3
Jun 14, 2021 06:21:44.939640045 CEST	49719	80	192.168.2.3	47.117.76.6
Jun 14, 2021 06:21:44.970581055 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:44.970611095 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:44.970628977 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:44.970647097 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:44.970676899 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:44.970690012 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:44.970700026 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:44.970710993 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:44.970721960 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:44.970726967 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:44.970751047 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:44.970771074 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:44.970786095 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:44.970793009 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:44.970813036 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:44.970820904 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:44.970834970 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:44.970846891 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:44.970856905 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:44.970880032 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:44.970880032 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:44.970901012 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:44.970913887 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:44.970926046 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:44.970948935 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:44.970949888 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:44.970969915 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:44.970990896 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:44.970993042 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:44.971014023 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:44.971020937 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:44.971034050 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:44.971055031 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:44.971056938 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:44.971074104 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:44.971096992 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:44.971101999 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:44.971124887 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:44.971144915 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:44.971172094 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:44.971183062 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:44.971195936 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:44.971204042 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:44.971223116 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:44.971239090 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:44.971246004 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:44.971263885 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:44.971286058 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:44.971293926 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:44.971329927 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:44.971330881 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:44.971350908 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:44.971354008 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:44.971370935 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:44.971394062 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:44.971394062 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:44.971416950 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:44.971431017 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:44.971440077 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:44.971467018 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:44.971471071 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:44.971489906 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:44.971504927 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:44.971510887 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:44.971533060 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:44.971534014 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:44.971553087 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:44.971573114 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:44.971580982 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:44.971611977 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:44.999099970 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:44.999176979 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:44.999207020 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:44.999213934 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:44.999233007 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:44.999241114 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:44.999247074 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:44.999275923 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:45.285861969 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:45.285897970 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:45.285917997 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:45.285933971 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:45.285952091 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:45.285969019 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:45.285984993 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:45.286001921 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:45.286010981 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:45.286019087 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:45.286040068 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:45.286057949 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:45.286065102 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:45.286077023 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:45.286087990 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:45.286094904 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:45.286108017 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:45.286111116 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:45.286128044 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:45.286135912 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:45.286145926 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:45.286163092 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:45.286180973 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:45.286183119 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:45.286201954 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:45.286217928 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:45.286230087 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:45.286235094 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:45.286251068 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:45.286252975 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:45.286271095 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:45.286281109 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:45.286288977 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:45.286305904 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:45.286314964 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:45.286326885 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:45.286345005 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:45.286346912 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:45.286361933 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:45.286370993 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:45.286377907 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:45.286395073 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:45.286402941 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:45.286412001 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:45.286427975 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:45.286434889 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:45.286444902 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:45.286459923 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:45.286463976 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:45.286483049 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:45.286489010 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:45.286499977 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:45.286516905 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:45.286525011 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:45.286535025 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:45.286550999 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:45.286556959 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:45.286566973 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:45.286583900 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:45.286587000 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:45.286604881 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:45.286612034 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:45.286623955 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:45.286640882 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:45.286642075 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:45.286657095 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:45.286674023 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:45.286680937 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:45.286689997 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:45.286694050 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:45.286706924 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:45.286715984 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:45.286725044 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:45.286741018 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:45.286745071 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:45.286762953 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:45.286770105 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:45.286780119 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:45.286796093 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:45.286808968 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:45.286812067 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:45.286825895 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:45.286830902 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:45.286848068 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:45.286858082 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:45.286864996 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:45.286885023 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:45.286896944 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:45.286902905 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:45.286916018 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:45.286926031 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:45.286935091 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:45.286952972 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:45.286961079 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:45.286974907 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:45.286993980 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:45.287000895 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:45.287009954 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:45.287025928 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:45.287026882 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:45.287045956 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:45.287055016 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:45.287061930 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:45.287079096 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:45.287095070 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:45.287096024 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:45.287131071 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:45.287133932 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:45.287156105 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:45.287167072 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:45.287173986 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:45.287184000 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:45.287192106 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:45.287210941 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:45.287213087 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:45.287228107 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:45.287237883 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:45.287245989 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:45.287262917 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:45.287270069 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:45.287280083 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:45.287292957 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:45.287300110 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:45.287317991 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:45.287324905 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:45.287334919 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:45.287352085 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:45.287358999 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:45.287369013 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:45.287384987 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:45.287391901 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:45.287403107 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:45.287419081 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:45.287427902 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:45.287439108 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:45.287456989 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:45.287466049 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:45.287472963 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:45.287488937 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:45.287496090 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:45.287506104 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:45.287516117 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:45.287523031 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:45.287540913 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:45.287548065 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:45.287556887 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:45.287576914 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:45.287586927 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:45.287604094 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:45.313690901 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:45.313719988 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:45.313745975 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:45.313772917 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:45.313800097 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:45.313824892 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:45.313858032 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:45.313884020 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:45.313922882 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:45.313954115 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:45.313956976 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:45.313958883 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:45.604794025 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:45.604825974 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:45.604839087 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:45.604850054 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:45.604866028 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:45.604882002 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:45.604893923 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:45.604907036 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:45.604918957 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:45.604934931 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:45.604945898 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:45.604958057 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:45.604971886 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:45.604988098 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:45.604999065 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:45.605010986 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:45.605014086 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:45.605022907 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:45.605035067 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:45.605045080 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:45.605048895 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:45.605051994 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:45.605053902 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:45.605067968 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:45.605081081 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:45.605087996 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:45.605093956 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:45.605103970 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:45.605113029 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:45.605124950 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:45.605127096 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:45.605138063 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:45.605149984 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:45.605166912 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:45.605178118 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:45.605186939 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:45.605192900 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:45.605206966 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:45.605211020 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:45.605225086 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:45.605231047 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:45.605237961 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:45.605248928 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:45.605261087 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:45.605277061 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:45.605282068 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:45.605295897 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:45.605300903 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:45.605309010 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:45.605321884 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:45.605326891 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:45.605344057 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:45.605356932 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:45.605360985 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:45.605369091 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:45.605386019 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:45.605391026 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:45.605400085 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:45.605412960 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:45.605412006 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:45.605426073 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:45.605439901 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:45.605444908 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:45.605459929 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:45.605473042 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:45.605477095 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:45.605494976 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:45.605510950 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:45.605526924 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:45.605530024 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:45.605531931 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:45.605545044 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:45.605557919 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:45.605571985 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:45.605576038 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:45.605577946 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:45.605596066 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:45.605617046 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:45.605618000 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:45.605629921 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:45.605631113 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:45.605643988 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:45.605663061 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:45.605670929 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:45.605681896 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:45.605694056 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:45.605696917 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:45.605709076 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:45.605717897 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:45.605726957 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:45.605742931 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:45.605747938 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:45.605756044 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:45.605770111 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:45.605777979 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:45.605782032 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:45.605799913 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:45.605811119 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:45.605815887 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:45.605834007 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:45.605839968 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:45.605845928 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:45.605856895 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:45.605859041 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:45.605870962 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:45.605882883 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:45.605889082 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:45.605901003 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:45.605912924 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:45.605925083 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:45.605930090 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:45.605943918 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:45.605956078 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:45.605959892 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:45.605977058 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:45.605986118 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:45.605994940 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:45.606010914 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:45.606014013 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:45.606026888 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:45.606033087 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:45.606045008 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:45.606055975 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:45.606060982 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:45.606069088 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:45.606085062 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:45.606093884 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:45.606096029 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:45.606111050 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:45.606122971 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:45.606137991 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:45.606138945 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:45.606157064 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:45.606161118 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:45.606187105 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:45.606204987 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:45.606220961 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:45.606221914 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:45.606240034 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:45.606241941 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:45.606252909 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:45.606266975 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:45.606280088 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:45.606293917 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:45.606297970 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:45.606314898 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:45.606314898 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:45.606332064 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:45.606338024 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:45.606349945 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:45.606363058 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:45.606368065 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:45.606374979 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:45.606381893 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:45.606398106 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:45.606412888 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:45.606415033 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:45.606425047 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:45.606434107 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:45.606446028 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:45.606446028 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:45.606465101 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:45.606472015 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:45.606484890 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:45.606502056 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:45.606503010 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:45.606519938 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:45.606537104 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:45.606542110 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:45.606554031 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:45.606564045 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:45.606573105 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:45.606586933 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:45.606596947 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:45.606615067 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:45.606620073 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:45.606630087 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:45.606647015 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:45.606647015 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:45.606663942 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:45.606679916 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:45.606689930 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:45.606698036 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:45.606714010 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:45.606714964 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:45.606734037 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:45.606745005 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:45.606753111 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:45.606765032 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:45.606769085 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:45.606786966 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:45.606800079 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:45.606802940 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:45.606820107 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:45.606837988 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:45.606837988 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:45.606853962 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:45.606863976 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:45.606875896 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:45.606884956 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:45.606894970 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:45.606910944 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:45.606919050 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:45.606929064 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:45.606940985 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:45.606945992 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:45.606962919 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:45.606972933 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:45.606992960 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:45.606998920 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:45.607033014 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:45.628686905 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:45.628726006 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:45.628751040 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:45.628776073 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:45.628802061 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:45.628834009 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:45.628870010 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:45.628895044 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:45.628907919 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:45.628963947 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:45.628978014 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:45.628983021 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:45.628988028 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:45.628992081 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:45.923135996 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:45.923167944 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:45.923185110 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:45.923290968 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:45.923336029 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:45.923377991 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:45.923387051 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:45.923409939 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:45.923464060 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:45.923544884 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:45.923614025 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:45.923629045 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:45.923698902 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:45.924016953 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:45.924081087 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:45.924088955 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:45.924139023 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:45.924141884 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:45.924199104 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:45.924204111 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:45.924222946 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:45.924293041 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:45.924292088 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:45.924312115 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:45.924359083 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:45.924367905 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:45.924438953 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:45.924510956 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:45.924514055 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:45.924536943 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:45.924586058 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:45.924649954 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:45.924714088 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:45.924715996 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:45.924777985 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:45.924794912 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:45.924839973 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:45.924840927 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:45.924887896 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:45.924896002 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:45.924901962 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:45.924942970 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:45.924973011 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:45.925017118 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:45.925025940 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:45.925035000 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:45.925055027 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:45.925105095 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:45.925168991 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:45.925190926 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:45.925240040 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:45.925268888 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:45.925277948 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:45.925287008 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:45.925337076 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:45.925501108 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:45.925565004 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:45.925590992 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:45.925615072 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:45.925647974 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:45.925647974 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:45.925656080 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:45.925725937 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:45.925733089 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:45.925753117 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:45.925782919 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:45.925801992 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:45.925838947 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:45.925888062 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:45.925895929 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:45.925950050 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:45.925970078 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:45.926009893 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:45.926028013 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:45.926043987 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:45.926064014 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:45.926075935 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:45.926089048 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:45.926146030 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:45.926167011 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:45.926187992 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:45.926220894 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:45.926235914 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:45.926239014 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:45.926276922 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:45.926316977 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:45.926326990 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:45.926340103 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:45.926408052 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:45.926412106 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:45.926443100 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:45.926480055 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:45.926517010 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:45.926531076 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:45.926542997 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:45.926603079 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:45.926661968 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:45.926690102 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:45.926707029 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:45.926748037 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:45.926765919 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:45.926770926 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:45.926822901 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:45.926888943 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:45.926928997 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:45.926943064 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:45.926980019 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:45.926983118 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:45.927038908 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:45.927047968 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:45.927083015 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:45.927105904 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:45.927146912 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:45.927176952 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:45.927206039 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:45.927251101 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:45.927284002 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:45.927331924 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:45.927365065 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:45.927388906 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:45.927411079 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:45.927424908 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:45.927443027 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:45.927474022 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:45.927496910 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:45.927575111 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:45.927607059 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:45.927647114 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:45.927664042 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:45.927690983 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:45.927738905 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:45.927748919 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:45.927791119 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:45.927797079 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:45.927849054 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:45.927855968 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:45.927908897 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:45.927958965 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:45.927978039 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:45.927993059 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:45.928015947 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:45.928040028 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:45.928076982 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:45.928117037 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:45.928129911 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:45.928143978 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:45.928179026 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:45.928196907 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:45.928211927 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:45.928227901 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:45.928256035 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:45.928267956 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:45.928302050 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:45.928334951 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:45.928352118 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:45.928390980 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:45.928411961 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:45.928435087 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:45.928486109 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:45.928575993 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:45.928631067 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:45.928648949 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:45.928733110 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:45.928744078 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:45.928759098 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:45.928766966 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:45.928778887 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:45.928832054 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:45.928888083 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:45.928947926 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:45.928996086 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:45.929049969 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:45.929101944 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:45.929100990 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:45.929145098 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:45.929147005 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:45.929193974 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:45.929220915 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:45.929255009 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:45.929267883 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:45.929294109 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:45.929321051 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:45.929364920 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:45.929388046 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:45.929435968 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:45.929456949 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:45.929486990 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:45.929498911 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:45.929523945 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:45.929568052 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:45.929613113 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:45.929615974 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:45.929662943 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:45.929716110 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:45.929763079 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:45.929790974 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:45.929821968 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:45.929843903 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:45.929866076 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:45.945530891 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:45.945604086 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:45.945617914 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:45.945636988 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:45.945652008 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:45.945668936 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:45.945691109 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:45.945696115 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:45.945708990 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:45.945727110 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:45.945733070 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:45.945744038 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:45.945768118 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:45.945797920 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:46.243432999 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:46.243514061 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:46.243551970 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:46.243582964 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:46.243623018 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:46.243652105 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:46.243681908 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:46.243722916 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:46.243762970 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:46.243767977 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:46.243799925 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:46.243805885 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:46.243809938 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:46.243813992 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:46.243817091 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:46.243819952 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:46.243846893 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:46.243856907 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:46.243891001 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:46.243904114 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:46.243930101 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:46.243942976 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:46.243969917 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:46.243978024 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:46.244009018 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:46.244023085 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:46.244048119 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:46.244061947 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:46.244087934 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:46.244101048 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:46.244127035 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:46.244139910 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:46.244175911 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:46.244178057 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:46.244220018 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:46.244223118 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:46.244256973 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:46.244271040 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:46.244297028 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:46.244301081 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:46.244335890 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:46.244348049 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:46.244374037 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:46.244385958 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:46.244412899 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:46.244426966 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:46.244452953 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:46.244462013 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:46.244501114 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:46.244503975 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:46.244544983 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:46.244550943 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:46.244582891 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:46.244595051 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:46.244621992 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:46.244633913 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:46.244662046 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:46.244674921 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:46.244700909 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:46.244714022 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:46.244740009 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:46.244752884 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:46.244779110 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:46.244791031 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:46.244827032 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:46.244827986 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:46.244870901 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:46.244874954 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:46.244909048 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:46.244924068 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:46.244947910 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:46.244962931 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:46.244988918 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:46.245002985 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:46.245027065 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:46.245049953 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:46.245063066 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:46.245066881 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:46.245105982 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:46.245116949 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:46.245153904 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:46.245155096 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:46.245196104 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:46.245203972 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:46.245237112 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:46.245249033 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:46.245276928 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:46.245285034 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:46.245317936 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:46.245325089 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:46.245356083 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:46.245368004 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:46.245395899 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:46.245404959 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:46.245448112 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:46.245450020 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:46.245496035 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:46.245511055 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:46.245539904 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:46.245546103 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:46.245578051 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:46.245589972 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:46.245618105 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:46.245621920 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:46.245656967 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:46.245670080 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:46.245695114 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:46.245707989 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:46.245734930 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:46.245742083 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:46.245773077 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:46.245779037 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:46.245821953 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:46.245821953 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:46.245865107 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:46.245872974 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:46.245902061 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:46.245914936 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:46.245940924 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:46.245954037 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:46.245980024 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:46.245991945 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:46.246018887 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:46.246030092 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:46.246057987 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:46.246067047 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:46.246095896 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:46.246109009 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:46.246144056 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:46.246145010 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:46.246187925 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:46.246195078 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:46.246226072 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:46.246237993 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:46.246264935 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:46.246278048 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:46.246304989 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:46.246314049 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:46.246342897 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:46.246356010 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:46.246381998 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:46.246390104 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:46.246419907 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:46.246433020 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:46.246469021 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:46.246476889 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:46.246511936 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:46.246517897 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:46.246548891 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:46.246563911 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:46.246587992 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:46.246596098 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:46.246627092 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:46.246639013 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:46.246665955 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:46.246671915 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:46.246705055 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:46.246712923 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:46.246743917 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:46.246757030 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:46.246789932 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:46.246792078 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:46.246835947 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:46.246865034 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:46.246871948 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:46.246900082 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:46.246912003 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:46.246918917 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:46.246949911 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:46.246963024 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:46.246988058 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:46.247006893 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:46.247030973 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:46.247045040 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:46.247070074 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:46.247080088 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:46.247121096 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:46.247139931 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:46.247193098 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:46.247198105 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:46.247240067 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:46.247251987 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:46.247278929 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:46.247291088 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:46.247328997 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:46.262171984 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:46.262201071 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:46.262214899 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:46.262231112 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:46.262248039 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:46.262253046 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:46.262276888 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:46.262311935 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:46.562024117 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:46.562063932 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:46.562082052 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:46.562098980 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:46.562115908 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:46.562134027 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:46.562180996 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:46.562207937 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:46.562232971 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:46.562256098 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:46.562279940 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:46.562304020 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:46.562326908 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:46.562350988 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:46.562372923 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:46.562391043 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:46.562407017 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:46.562424898 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:46.562453032 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:46.562482119 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:46.562508106 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:46.562530994 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:46.562551022 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:46.562575102 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:46.562594891 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:46.562618971 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:46.562638044 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:46.562654972 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:46.562664032 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:46.562679052 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:46.562717915 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:46.562730074 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:46.562741041 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:46.562771082 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:46.562786102 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:46.562798977 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:46.562822104 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:46.562840939 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:46.562844038 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:46.562853098 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:46.562869072 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:46.562890053 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:46.562906981 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:46.562912941 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:46.562937021 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:46.562962055 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:46.563010931 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:46.563023090 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:46.563035011 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:46.563081026 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:46.563102961 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:46.563124895 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:46.563143969 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:46.563167095 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:46.563184023 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:46.563184977 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:46.563203096 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:46.563241005 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:46.563242912 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:46.563267946 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:46.563285112 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:46.563286066 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:46.563303947 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:46.563322067 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:46.563340902 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:46.563344955 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:46.563363075 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:46.563380003 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:46.563397884 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:46.563421011 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:46.563431025 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:46.563438892 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:46.563457012 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:46.563482046 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:46.563499928 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:46.563513994 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:46.563522100 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:46.563544989 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:46.563561916 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:46.563575983 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:46.563585997 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:46.563608885 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:46.563632011 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:46.563641071 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:46.563653946 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:46.563672066 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:46.563689947 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:46.563698053 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:46.563713074 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:46.563735008 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:46.563752890 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:46.563762903 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:46.563805103 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:46.563811064 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:46.563828945 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:46.563858986 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:46.563859940 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:46.563884974 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:46.563909054 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:46.563920021 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:46.563931942 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:46.563956022 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:46.563965082 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:46.563980103 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:46.564003944 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:46.564024925 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:46.564026117 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:46.564075947 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:46.564119101 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:46.576639891 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:46.576669931 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:46.576682091 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:46.576698065 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:46.576714993 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:46.576800108 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:46.576827049 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:46.880059004 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:46.880109072 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:46.880132914 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:46.880158901 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:46.880182028 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:46.880203962 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:46.880227089 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:46.880237103 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:46.880250931 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:46.880274057 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:46.880296946 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:46.880314112 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:46.880321980 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:46.880338907 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:46.880350113 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:46.880367994 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:46.880373955 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:46.880398035 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:46.880409002 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:46.880420923 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:46.880431890 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:46.880448103 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:46.880458117 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:46.880471945 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:46.880481958 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:46.880495071 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:46.880507946 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:46.880517006 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:46.880537987 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:46.880544901 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:46.880570889 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:46.880579948 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:46.880594015 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:46.880613089 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:46.880646944 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:46.880973101 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:46.881005049 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:46.881026030 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:46.881028891 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:46.881047964 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:46.881052971 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:46.881073952 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:46.881078959 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:46.881098032 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:46.881103992 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:46.881129026 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:46.881129026 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:46.881151915 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:46.881156921 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:46.881176949 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:46.881181002 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:46.881201029 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:46.881207943 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:46.881226063 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:46.881232977 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:46.881252050 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:46.881257057 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:46.881273985 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:46.881282091 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:46.881299973 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:46.881306887 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:46.881323099 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:46.881331921 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:46.881350040 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:46.881357908 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:46.881371021 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:46.881381989 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:46.881395102 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:46.881409883 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:46.881419897 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:46.881437063 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:46.881458044 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:46.881465912 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:46.881489992 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:46.881509066 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:46.881522894 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:46.881536007 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:46.881556034 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:46.881560087 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:46.881577969 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:46.881587982 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:46.881604910 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:46.881613016 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:46.881629944 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:46.881638050 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:46.881655931 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:46.881663084 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:46.881679058 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:46.881685972 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:46.881706953 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:46.881712914 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:46.881728888 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:46.881743908 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:46.881758928 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:46.881769896 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:46.881782055 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:46.881794930 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:46.881814003 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:46.881819010 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:46.881839037 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:46.881844044 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:46.881865978 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:46.881869078 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:46.881889105 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:46.881895065 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:46.881915092 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:46.881921053 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:46.881941080 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:46.881946087 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:46.881968975 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:46.881968975 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:46.881992102 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:46.881994963 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:46.882015944 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:46.882018089 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:46.882040024 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:46.882046938 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:46.882066011 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:46.882069111 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:46.882088900 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:46.882097960 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:46.882117033 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:46.882119894 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:46.882143021 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:46.882153988 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:46.882167101 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:46.882184982 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:46.882191896 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:46.882204056 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:46.882215977 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:46.882241011 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:46.882250071 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:46.882266045 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:46.882275105 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:46.882291079 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:46.882313967 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:46.882318974 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:46.882344961 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:46.882354021 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:46.882369041 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:46.882390022 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:46.882392883 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:46.882417917 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:46.882426023 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:46.882442951 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:46.882463932 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:46.882469893 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:46.882496119 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:46.882507086 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:46.882524014 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:46.882540941 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:46.882577896 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:46.893980026 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:46.894021034 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:46.894042969 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:46.894063950 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:46.894085884 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:46.894114017 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:46.894429922 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:46.896924019 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:46.896954060 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:47.195312977 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:47.195389986 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:47.195457935 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:47.195519924 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:47.195576906 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:47.195580959 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:47.195619106 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:47.195626020 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:47.195632935 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:47.195636034 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:47.195648909 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:47.195696115 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:47.195751905 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:47.195811033 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:47.195868015 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:47.195877075 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:47.195904970 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:47.195911884 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:47.195919037 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:47.195929050 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:47.195934057 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:47.195986032 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:47.195987940 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:47.196037054 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:47.196043015 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:47.196093082 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:47.196101904 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:47.196150064 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:47.196158886 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:47.196214914 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:47.196270943 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:47.196329117 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:47.196393013 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:47.196399927 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:47.196420908 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:47.196429968 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:47.196436882 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:47.196455002 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:47.196456909 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:47.196516991 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:47.196520090 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:47.196582079 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:47.196639061 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:47.196692944 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:47.196749926 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:47.196751118 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:47.196764946 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:47.196783066 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:47.196793079 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:47.196806908 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:47.196830034 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:47.196862936 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:47.196921110 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:47.196980953 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:47.197043896 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:47.197046041 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:47.197065115 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:47.197072983 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:47.197081089 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:47.197087049 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:47.197105885 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:47.197165966 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:47.197223902 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:47.197280884 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:47.197283030 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:47.197299004 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:47.197307110 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:47.197335005 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:47.197336912 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:47.197391987 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:47.197393894 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:47.197443962 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:47.197449923 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:47.197499037 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:47.197515011 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:47.197565079 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:47.197576046 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:47.197628975 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:47.197633982 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:47.197690964 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:47.197691917 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:47.197750092 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:47.197757006 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:47.197805882 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:47.197808027 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:47.197865963 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:47.197870016 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:47.197916031 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:47.197921038 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:47.197971106 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:47.197983027 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:47.198039055 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:47.198040962 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:47.198092937 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:47.198101044 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:47.198154926 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:47.198159933 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:47.198215961 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:47.198218107 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:47.198275089 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:47.198282003 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:47.198332071 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:47.198332071 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:47.198384047 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:47.198388100 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:47.198434114 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:47.198451042 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:47.198499918 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:47.198509932 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:47.198563099 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:47.198568106 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:47.198616028 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:47.198625088 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:47.198673010 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:47.198683023 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:47.198729992 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:47.198740005 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:47.198786020 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:47.198797941 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:47.198849916 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:47.198853970 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:47.198900938 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:47.198914051 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:47.198966980 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:47.198973894 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:47.199023962 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:47.199033022 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:47.199084044 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:47.199091911 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:47.199156046 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:47.199184895 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:47.199238062 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:47.199253082 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:47.199306011 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:47.199311972 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:47.199358940 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:47.199368954 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:47.199419975 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:47.199425936 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:47.199481964 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:47.199542046 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:47.199573040 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:47.199592113 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:47.199598074 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:47.199599028 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:47.199656010 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:47.199661016 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:47.199714899 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:47.199723959 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:47.199773073 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:47.199779987 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:47.199830055 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:47.199835062 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:47.199884892 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:47.199892998 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:47.199943066 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:47.199949980 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:47.200001001 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:47.200007915 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:47.200057983 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:47.200064898 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:47.200113058 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:47.200126886 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:47.200177908 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:47.200186014 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:47.200232983 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:47.200242043 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:47.200299978 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:47.200341940 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:47.200356007 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:47.200360060 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:47.200412035 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:47.200412989 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:47.200472116 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:47.200473070 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:47.200522900 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:47.200531006 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:47.200587034 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:47.200594902 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:47.200649023 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:47.200653076 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:47.200715065 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:47.200720072 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:47.200772047 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:47.200779915 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:47.200838089 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:47.200839043 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:47.200890064 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:47.200911999 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:47.200968027 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:47.200970888 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:47.201020002 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:47.201028109 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:47.201077938 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:47.201086044 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:47.201137066 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:47.201143980 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:47.201194048 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:47.201200962 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:47.201258898 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:47.201265097 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:47.201318979 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:47.201324940 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:47.201375008 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:47.201381922 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:47.201432943 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:47.201442003 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:47.201493979 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:47.201508045 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:47.201562881 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:47.201564074 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:47.201617956 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:47.201618910 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:47.201668978 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:47.201675892 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:47.201730013 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:47.201734066 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:47.201782942 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:47.201791048 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:47.201842070 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:47.201848030 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:47.201899052 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:47.201910973 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:47.201961994 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:47.201971054 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:47.202020884 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:47.202028036 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:47.202076912 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:47.202085972 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:47.202131987 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:47.202145100 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:47.202195883 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:47.202203035 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:47.202250004 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:47.202259064 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:47.202310085 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:47.202315092 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:47.202364922 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:47.202375889 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:47.202420950 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:47.202425003 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:47.202450991 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:47.202470064 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:47.202478886 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:47.202488899 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:47.202507973 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:47.202522039 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:47.202536106 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:47.202550888 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:47.202563047 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:47.202572107 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:47.202590942 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:47.202610016 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:47.202620983 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:47.202626944 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:47.202649117 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:47.202666998 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:47.202677011 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:47.202687025 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:47.202703953 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:47.202719927 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:47.202733040 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:47.202750921 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:47.202759027 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:47.202773094 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:47.202788115 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:47.202804089 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:47.202814102 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:47.202824116 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:47.202845097 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:47.202857971 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:47.202874899 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:47.202892065 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:47.202914953 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:47.208837986 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:47.208920956 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:47.211638927 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:47.211658001 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:47.211678028 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:47.211697102 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:47.211709976 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:47.211724043 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:47.211729050 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:47.211750984 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:47.211771965 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:47.211776018 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:47.211801052 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:47.211806059 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:47.211838961 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:47.211872101 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:47.517738104 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:47.517815113 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:47.517837048 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:47.517870903 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:47.517890930 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:47.517926931 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:47.517939091 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:47.517983913 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:47.517986059 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:47.518037081 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:47.518054008 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:47.518105984 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:47.518115044 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:47.518167019 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:47.518168926 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:47.518220901 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:47.518224001 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:47.518274069 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:47.518281937 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:47.518332005 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:47.518337011 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:47.518387079 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:47.518393993 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:47.518451929 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:47.518497944 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:47.518503904 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:47.518517971 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:47.518574953 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:47.518582106 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:47.518635035 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:47.518640041 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:47.518696070 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:47.518697977 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:47.518753052 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:47.518757105 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:47.518814087 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:47.518815041 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:47.518867970 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:47.518872023 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:47.518929958 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:47.518933058 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:47.518980980 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:47.518996000 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:47.519049883 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:47.519056082 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:47.519108057 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:47.519141912 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:47.519203901 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:47.519253016 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:47.519313097 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:47.519314051 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:47.519370079 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:47.519376040 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:47.519422054 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:47.519438028 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:47.519490957 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:47.519500017 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:47.519557953 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:47.519561052 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:47.519612074 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:47.519617081 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:47.519670010 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:47.519674063 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:47.519726038 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:47.519731998 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:47.519792080 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:47.519803047 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:47.519845009 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:47.519850016 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:47.519917011 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:47.519956112 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:47.519978046 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:47.519979954 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:47.520036936 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:47.520036936 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:47.520093918 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:47.520095110 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:47.520153999 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:47.520212889 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:47.520215988 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:47.520248890 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:47.520277023 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:47.520292044 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:47.520335913 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:47.520338058 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:47.520395994 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:47.520405054 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:47.520463943 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:47.520467043 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:47.520520926 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:47.520520926 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:47.520570040 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:47.520582914 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:47.520639896 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:47.520641088 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:47.520688057 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:47.520698071 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:47.520744085 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:47.520751953 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:47.520800114 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:47.520813942 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:47.520857096 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:47.520864964 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:47.520925045 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:47.520926952 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:47.520982981 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:47.520984888 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:47.521040916 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:47.521054983 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:47.521100044 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:47.521121025 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:47.521157026 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:47.521157980 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:47.521212101 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:47.521215916 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:47.521274090 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:47.521275043 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:47.521342039 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:47.521392107 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:47.521425962 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:47.521451950 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:47.521452904 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:47.521513939 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:47.521521091 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:47.521579981 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:47.521625042 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:47.521636009 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:47.521639109 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:47.521699905 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:47.521699905 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:47.521755934 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:47.521755934 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:47.521815062 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:47.521821022 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:47.521883965 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:47.521884918 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:47.521939039 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:47.521941900 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:47.521998882 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:47.522015095 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:47.522057056 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:47.522058964 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:47.522114038 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:47.522116899 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:47.522172928 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:47.522176981 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:47.522232056 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:47.522234917 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:47.522289038 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:47.523390055 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:47.523454905 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:47.523472071 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:47.523514986 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:47.523519039 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:47.523572922 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:47.523577929 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:47.523633957 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:47.523637056 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:47.523694992 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:47.523699999 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:47.523756981 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:47.523761034 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:47.523818016 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:47.523819923 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:47.523880005 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:47.523922920 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:47.523935080 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:47.523957968 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:47.523991108 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:47.523994923 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:47.524044037 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:47.524046898 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:47.524099112 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:47.524099112 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:47.524153948 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:47.524166107 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:47.524223089 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:47.524226904 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:47.524277925 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:47.524286032 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:47.524343014 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:47.524347067 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:47.524403095 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:47.524405956 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:47.524461031 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:47.524462938 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:47.524519920 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:47.524522066 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:47.524580002 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:47.524581909 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:47.524638891 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:47.524642944 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:47.524693966 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:47.524703026 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:47.524717093 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:47.524744034 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:47.524756908 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:47.524769068 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:47.524795055 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:47.524799109 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:47.524821043 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:47.524828911 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:47.524844885 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:47.524858952 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:47.524873018 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:47.524883986 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:47.524899006 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:47.524924040 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:47.524950027 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:47.524976969 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:47.524988890 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:47.525002956 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:47.525028944 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:47.525057077 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:47.525064945 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:47.525085926 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:47.525108099 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:47.525111914 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:47.525137901 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:47.525146961 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:47.525161982 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:47.525182009 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:47.525207043 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:47.525233984 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:47.526217937 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:47.526247978 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:47.526273012 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:47.526283979 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:47.526302099 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:47.526304007 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:47.526325941 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:47.526330948 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:47.526350021 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:47.526370049 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:47.526390076 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:47.526410103 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:47.526431084 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:47.526468039 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:47.526513100 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:47.526840925 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:47.836885929 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:47.836976051 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:47.837018967 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:47.837064028 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:47.837080002 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:47.837097883 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:47.837110996 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:47.837127924 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:47.837131023 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:47.837156057 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:47.837162971 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:47.837174892 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:47.837193966 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:47.837234974 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:47.837244034 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:47.837280989 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:47.837333918 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:47.837335110 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:47.837384939 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:47.837433100 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:47.837454081 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:47.837491035 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:47.837498903 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:47.837553978 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:47.837614059 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:47.837630987 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:47.837671995 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:47.837730885 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:47.837740898 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:47.837788105 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:47.837798119 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:47.837861061 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:47.837915897 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:47.837918043 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:47.837976933 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:47.838035107 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:47.838036060 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:47.838093042 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:47.838093042 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:47.838150978 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:47.838207006 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:47.838211060 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:47.838272095 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:47.838339090 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:47.838402033 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:47.838517904 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:47.839771032 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:47.839843035 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:47.839900970 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:47.839901924 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:47.839920044 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:47.839958906 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:47.839968920 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:47.840056896 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:47.840106010 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:47.840114117 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:47.840117931 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:47.840169907 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:47.840172052 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:47.840228081 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:47.840234995 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:47.840282917 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:47.840295076 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:47.840358019 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:47.840416908 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:47.840420008 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:47.840475082 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:47.840529919 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:47.840533972 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:47.840588093 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:47.840591908 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:47.840648890 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:47.840706110 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:47.840707064 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:47.840773106 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:47.840835094 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:47.840890884 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:47.840909004 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:47.840929985 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:47.840949059 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:47.840965033 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:47.841002941 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:47.841007948 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:47.841064930 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:47.841070890 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:47.841121912 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:47.841126919 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:47.841180086 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:47.841244936 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:47.841273069 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:47.841304064 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:47.841306925 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:47.841361046 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:47.841418982 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:47.841419935 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:47.841478109 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:47.841500044 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:47.841546059 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:47.841602087 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:47.841603994 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:47.841661930 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:47.841662884 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:47.841717958 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:47.841777086 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:47.841777086 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:47.841836929 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:47.841901064 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:47.841905117 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:47.841960907 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:47.842016935 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:47.842032909 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:47.842072964 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:47.842128038 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:47.842184067 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:47.842199087 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:47.842212915 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:47.842238903 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:47.842247963 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:47.842257023 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:47.842293024 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:47.842349052 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:47.842355967 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:47.842415094 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:47.842469931 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:47.842473030 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:47.842525959 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:47.842583895 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:47.842583895 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:47.842638969 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:47.842696905 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:47.842714071 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:47.842751026 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:47.842808008 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:47.842817068 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:47.842873096 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:47.842875957 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:47.842931986 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:47.842989922 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:47.842995882 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:47.843044996 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:47.843101025 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:47.843106985 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:47.843158007 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:47.843205929 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:47.843264103 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:47.843317986 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:47.843319893 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:47.843378067 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:47.843436003 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:47.843444109 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:47.843492031 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:47.843498945 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:47.843549967 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:47.843612909 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:47.843620062 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:47.843676090 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:47.843733072 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:47.843736887 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:47.843797922 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:47.843797922 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:47.843856096 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:47.843913078 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:47.843957901 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:47.844005108 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:47.844007015 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:47.844037056 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:47.844063997 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:47.844080925 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:47.844121933 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:47.844160080 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:47.844180107 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:47.844234943 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:47.844245911 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:47.844306946 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:47.844362974 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:47.844368935 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:47.844422102 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:47.844428062 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:47.844480038 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:47.844535112 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:47.844558001 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:47.844593048 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:47.844594955 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:47.844654083 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:47.844718933 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:47.844721079 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:47.844778061 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:47.844835997 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:47.844839096 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:47.844875097 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:47.844882965 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:47.844892979 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:47.844950914 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:47.845007896 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:47.845010042 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:47.845066071 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:47.845123053 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:47.845124006 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:47.845190048 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:47.845196009 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:47.845248938 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:47.845300913 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:47.845310926 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:47.845336914 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:47.845352888 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:47.845359087 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:47.845417976 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:47.845418930 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:47.845473051 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:47.845474958 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:47.845531940 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:47.845590115 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:47.845592976 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:47.845644951 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:48.153213024 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:48.153245926 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:48.153264046 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:48.153283119 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:48.153306961 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:48.153328896 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:48.153352976 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:48.153376102 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:48.153402090 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:48.153418064 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:48.153424978 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:48.153448105 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:48.153470993 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:48.153491974 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:48.153511047 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:48.153515100 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:48.153533936 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:48.153541088 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:48.153568029 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:48.154948950 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:48.154975891 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:48.155057907 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:48.155087948 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:48.155118942 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:48.155178070 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:48.155597925 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:48.155615091 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:48.155632973 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:48.155648947 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:48.155668020 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:48.155685902 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:48.155697107 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:48.155703068 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:48.155719042 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:48.155735016 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:48.155750990 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:48.155761957 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:48.155772924 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:48.155783892 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:48.155796051 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:48.155817986 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:48.155832052 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:48.155842066 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:48.155853033 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:48.155865908 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:48.155884981 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:48.155903101 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:48.155920029 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:48.155965090 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:48.161063910 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:48.161083937 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:48.161104918 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:48.161124945 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:48.161144972 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:48.161161900 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:48.161170959 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:48.161178112 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:48.161195040 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:48.161211967 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:48.161227942 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:48.161232948 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:48.161243916 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:48.161257982 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:48.161261082 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:48.161278009 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:48.161282063 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:48.161298990 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:48.161307096 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:48.161326885 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:48.161339045 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:48.161350012 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:48.161361933 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:48.161365986 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:48.161381960 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:48.161387920 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:48.161398888 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:48.161417007 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:48.161417961 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:48.161437988 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:48.161443949 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:48.161456108 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:48.161472082 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:48.161474943 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:48.161489010 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:48.161500931 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:48.161514997 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:48.161523104 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:48.161540985 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:48.161550999 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:48.161564112 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:48.161572933 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:48.161583900 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:48.161587000 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:48.161598921 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:48.161611080 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:48.161617041 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:48.161632061 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:48.161639929 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:48.161655903 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:48.161668062 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:48.161676884 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:48.161699057 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:48.161709070 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:48.161716938 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:48.161720991 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:48.161734104 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:48.161744118 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:48.161756992 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:48.161767960 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:48.161778927 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:48.161791086 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:48.161803007 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:48.161814928 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:48.161825895 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:48.161839008 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:48.161855936 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:48.161856890 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:48.161865950 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:48.161873102 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:48.161885977 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:48.161889076 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:48.161905050 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:48.161911011 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:48.161923885 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:48.161936998 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:48.161942005 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:48.161958933 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:48.161974907 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:48.161979914 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:48.161992073 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:48.161992073 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:48.162008047 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:48.162024975 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:48.162025928 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:48.162048101 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:48.162059069 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:48.162072897 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:48.162077904 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:48.162094116 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:48.162112951 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:48.162116051 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:48.162130117 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:48.162137032 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:48.162147999 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:48.162153959 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:48.162175894 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:48.162183046 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:48.162199020 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:48.162201881 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:48.162219048 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:48.162236929 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:48.162255049 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:48.162278891 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:48.162292004 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:48.162317038 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:48.162348032 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:48.162985086 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:48.163079977 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:48.163149118 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:48.163189888 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:48.163211107 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:48.163373947 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:48.163403034 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:48.163428068 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:48.163446903 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:48.163465977 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:48.163476944 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:48.163485050 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:48.163510084 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:48.163518906 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:48.163532972 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:48.163558006 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:48.163559914 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:48.163584948 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:48.163598061 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:48.163608074 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:48.163616896 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:48.163631916 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:48.163639069 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:48.163656950 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:48.163662910 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:48.163681030 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:48.163702965 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:48.163705111 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:48.163721085 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:48.163728952 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:48.163755894 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:48.163755894 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:48.163783073 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:48.163789988 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:48.163803101 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:48.163851976 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:48.163856030 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:48.163880110 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:48.163887978 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:48.163897991 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:48.163917065 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:48.163933992 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:48.163934946 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:48.163954020 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:48.163968086 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:48.163976908 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:48.164000034 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:48.164005041 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:48.164022923 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:48.164042950 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:48.164045095 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:48.164055109 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:48.164072037 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:48.164097071 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:48.164098024 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:48.164122105 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:48.164133072 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:48.164146900 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:48.164161921 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:48.164170027 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:48.164190054 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:48.164191961 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:48.164205074 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:48.164216042 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:48.164238930 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:48.164238930 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:48.164266109 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:48.164272070 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:48.164288998 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:48.164307117 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:48.164311886 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:48.164335012 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:48.164345026 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:48.164383888 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:48.469068050 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:48.469118118 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:48.469155073 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:48.469199896 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:48.469202042 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:48.469238997 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:48.469280958 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:48.469295979 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:48.469362974 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:48.469369888 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:48.469418049 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:48.469435930 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:48.469475031 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:48.469486952 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:48.469532967 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:48.469569921 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:48.469600916 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:48.469623089 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:48.469651937 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:48.469670057 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:48.469681025 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:48.469736099 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:48.469736099 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:48.469786882 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:48.469810009 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:48.469841003 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:48.469882011 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:48.469899893 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:48.469939947 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:48.469940901 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:48.469990015 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:48.470030069 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:48.470048904 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:48.470073938 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:48.470082998 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:48.470134020 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:48.470175028 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:48.470192909 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:48.470217943 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:48.470230103 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:48.470276117 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:48.470314026 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:48.470333099 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:48.470361948 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:48.470367908 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:48.470416069 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:48.470453024 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:48.470474005 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:48.470500946 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:48.470511913 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:48.470557928 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:48.470593929 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:48.470618010 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:48.470640898 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:48.470649958 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:48.470693111 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:48.470710993 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:48.470747948 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:48.470747948 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:48.470796108 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:48.470834017 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:48.470859051 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:48.470875025 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:48.470916033 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:48.476747036 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:48.476802111 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:48.476840019 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:48.476886988 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:48.476890087 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:48.476912975 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:48.476952076 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:48.476953983 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:48.477006912 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:48.477025032 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:48.477063894 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:48.477104902 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:48.477127075 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:48.477161884 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:48.477170944 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:48.477216959 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:48.477257967 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:48.477282047 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:48.477310896 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:48.477325916 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:48.477375984 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:48.477432013 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:48.477458954 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:48.477485895 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:48.477494001 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:48.477540016 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:48.477556944 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:48.477596998 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:48.477607965 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:48.477650881 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:48.477689981 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:48.477720022 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:48.477754116 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:48.477772951 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:48.477813959 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:48.477829933 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:48.477870941 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:48.477890015 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:48.477926970 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:48.477932930 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:48.477982998 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:48.478024960 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:48.478050947 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:48.478077888 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:48.478096962 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:48.478138924 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:48.478140116 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:48.478188992 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:48.478224993 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:48.478264093 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:48.478287935 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:48.478317022 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:48.478390932 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:48.478444099 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:48.478466988 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:48.478498936 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:48.478509903 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:48.478553057 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:48.478569984 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:48.478609085 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:48.478650093 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:48.478698015 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:48.478709936 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:48.478753090 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:48.478756905 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:48.478804111 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:48.478844881 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:48.478869915 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:48.478910923 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:48.478945971 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:48.478984118 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:48.479032993 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:48.479038954 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:48.479055882 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:48.479098082 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:48.479104996 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:48.479190111 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:48.479223013 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:48.479243040 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:48.479254007 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:48.479294062 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:48.479341030 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:48.479358912 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:48.479399920 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:48.479412079 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:48.479454041 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:48.479491949 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:48.479530096 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:48.479552031 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:48.479584932 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:48.479593039 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:48.479640961 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:48.479681969 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:48.479688883 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:48.479732037 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:48.479741096 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:48.479751110 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:48.479795933 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:48.479832888 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:48.479868889 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:48.479888916 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:48.479923964 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:48.479934931 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:48.479976892 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:48.480016947 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:48.480047941 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:48.480070114 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:48.480070114 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:48.480123043 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:48.480164051 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:48.480195045 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:48.480215073 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:48.480232954 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:48.480272055 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:48.480282068 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:48.482285023 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:48.785396099 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:48.785435915 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:48.785573006 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:48.785588026 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:48.785617113 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:48.785650969 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:48.785659075 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:48.785686016 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:48.785702944 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:48.785712957 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:48.785751104 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:48.785769939 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:48.785789013 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:48.785804987 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:48.785826921 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:48.785854101 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:48.785855055 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:48.785887003 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:48.785916090 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:48.785943031 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:48.785947084 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:48.785979986 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:48.785994053 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:48.786009073 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:48.786035061 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:48.786042929 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:48.786123037 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:48.786165953 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:48.786197901 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:48.786236048 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:48.786237001 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:48.786273956 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:48.786288977 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:48.786313057 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:48.786330938 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:48.786349058 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:48.786376953 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:48.786381960 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:48.786408901 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:48.786432981 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:48.786437035 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:48.786437988 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:48.786463976 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:48.786489964 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:48.786516905 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:48.786542892 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:48.786569118 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:48.786581039 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:48.786586046 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:48.786588907 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:48.786596060 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:48.786619902 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:48.786628962 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:48.786652088 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:48.786659956 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:48.786686897 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:48.786714077 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:48.786715984 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:48.786740065 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:48.786780119 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:48.786868095 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:48.793332100 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:48.793489933 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:48.795005083 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:48.795067072 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:48.795123100 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:48.795139074 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:48.795166016 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:48.795197964 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:48.795201063 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:48.795249939 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:48.795252085 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:48.795300961 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:48.795301914 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:48.795348883 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:48.795357943 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:48.795408010 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:48.795408964 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:48.795455933 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:48.795455933 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:48.795506001 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:48.795506001 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:48.795552015 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:48.795555115 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:48.795603991 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:48.795603991 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:48.795653105 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:48.795687914 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:48.795706034 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:48.795708895 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:48.795763969 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:48.795766115 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:48.795814991 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:48.795818090 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:48.795866013 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:48.795866966 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:48.795914888 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:48.795919895 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:48.795965910 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:48.795973063 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:48.796020985 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:48.796021938 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:48.796066999 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:48.796071053 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:48.796118975 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:48.796120882 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:48.796174049 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:48.796175957 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:48.796226025 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:48.796227932 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:48.796277046 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:48.796278000 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:48.796336889 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:48.796338081 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:48.796387911 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:48.796396971 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:48.796441078 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:48.796447039 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:48.796489954 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:48.796499014 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:48.796544075 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:48.796550035 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:48.796591997 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:48.796598911 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:48.796648979 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:48.796649933 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:48.796694994 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:48.796703100 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:48.796749115 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:48.796765089 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:48.796813011 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:48.796819925 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:48.796860933 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:48.796874046 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:48.796917915 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:48.796928883 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:48.796971083 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:48.796982050 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:48.797024012 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:48.797034979 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:48.797080040 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:48.797085047 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:48.797127962 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:48.797135115 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:48.797180891 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:48.797192097 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:48.797238111 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:48.797247887 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:48.797293901 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:48.797302961 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:48.797349930 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:48.797358036 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:48.797401905 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:48.797410011 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:48.797454119 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:48.797462940 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:48.797508955 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:48.797517061 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:48.797564983 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:48.797571898 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:48.797619104 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:48.797631979 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:48.797679901 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:48.797687054 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:48.797735929 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:48.797735929 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:48.797780991 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:48.797796011 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:48.797841072 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:48.797898054 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:48.797947884 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:48.797955036 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:48.798002958 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:48.798007965 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:48.798053980 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:48.798063040 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:48.798108101 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:48.798118114 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:48.798162937 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:48.798171043 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:48.798216105 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:48.798224926 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:48.798269033 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:48.798276901 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:48.798322916 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:48.798340082 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:48.798384905 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:48.798397064 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:48.798444033 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:48.798450947 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:48.798495054 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:49.103034973 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:49.103095055 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:49.103173971 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:49.103188038 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:49.103213072 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:49.103224993 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:49.103230953 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:49.103252888 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:49.103275061 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:49.103319883 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:49.103708982 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:49.103775978 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:49.103806019 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:49.103859901 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:49.103939056 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:49.103981018 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:49.103995085 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:49.104018927 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:49.104038954 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:49.104069948 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:49.104085922 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:49.104132891 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:49.104135990 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:49.104175091 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:49.104183912 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:49.104212046 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:49.104227066 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:49.104250908 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:49.104263067 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:49.104302883 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:49.104316950 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:49.104356050 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:49.104368925 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:49.104408026 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:49.104427099 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:49.104469061 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:49.104475021 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:49.104506016 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:49.104517937 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:49.104545116 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:49.104554892 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:49.104602098 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:49.104635954 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:49.104675055 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:49.104691982 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:49.104718924 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:49.104722023 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:49.104763985 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:49.104783058 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:49.104809999 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:49.104830027 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:49.104902983 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:49.115293980 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:49.115334988 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:49.115365982 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:49.115405083 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:49.115428925 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:49.115452051 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:49.115454912 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:49.115473032 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:49.115494013 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:49.115516901 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:49.115557909 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:49.115566015 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:49.115631104 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:49.115637064 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:49.115729094 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:49.115755081 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:49.115793943 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:49.115833044 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:49.115860939 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:49.115869999 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:49.115906954 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:49.115907907 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:49.115962982 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:49.115968943 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:49.115974903 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:49.116015911 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:49.116084099 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:49.116377115 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:49.116436958 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:49.116445065 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:49.116497040 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:49.116516113 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:49.116566896 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:49.116580009 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:49.116642952 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:49.116652012 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:49.116695881 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:49.116710901 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:49.116733074 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:49.116765022 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:49.116780043 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:49.116822004 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:49.116861105 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:49.116878033 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:49.116910934 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:49.116933107 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:49.116975069 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:49.116991997 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:49.117012024 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:49.117031097 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:49.117057085 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:49.117306948 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:49.117348909 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:49.117384911 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:49.117398024 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:49.117439985 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:49.117444992 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:49.117455006 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:49.117496014 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:49.117521048 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:49.117558002 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:49.117698908 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:49.117762089 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:49.117775917 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:49.117799044 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:49.117832899 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:49.117844105 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:49.117846012 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:49.117907047 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:49.117917061 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:49.117955923 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:49.117993116 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:49.118000031 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:49.118014097 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:49.118029118 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:49.118046999 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:49.118082047 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:49.118122101 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:49.118164062 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:49.118180037 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:49.118201017 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:49.118218899 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:49.118248940 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:49.118287086 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:49.118324041 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:49.118357897 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:49.118361950 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:49.118403912 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:49.118421078 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:49.118448019 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:49.118484974 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:49.118503094 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:49.118588924 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:49.118608952 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:49.118666887 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:49.118674040 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:49.118711948 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:49.118731976 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:49.118747950 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:49.118761063 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:49.118797064 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:49.419467926 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:49.419502020 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:49.419523001 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:49.419543982 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:49.419557095 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:49.419564009 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:49.419589996 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:49.419598103 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:49.419616938 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:49.419622898 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:49.419646025 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:49.419656038 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:49.419728994 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:49.420126915 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:49.420149088 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:49.420181990 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:49.420207024 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:49.420531034 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:49.420552015 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:49.420572996 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:49.420588017 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:49.420604944 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:49.420614004 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:49.420619965 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:49.420635939 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:49.420644045 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:49.420653105 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:49.420674086 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:49.420696020 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:49.420716047 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:49.420723915 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:49.420731068 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:49.420737028 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:49.420758963 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:49.420789003 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:49.431044102 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:49.431092024 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:49.431137085 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:49.431158066 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:49.431164026 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:49.431183100 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:49.431216002 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:49.431216002 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:49.431221008 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:49.431232929 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:49.431246996 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:49.431272030 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:49.431274891 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:49.431298018 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:49.431302071 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:49.431324005 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:49.431328058 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:49.431332111 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:49.431349039 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:49.431375980 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:49.431375980 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:49.431396008 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:49.431401968 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:49.431418896 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:49.431435108 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:49.431457996 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:49.431464911 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:49.431483984 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:49.431492090 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:49.431509018 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:49.431518078 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:49.431538105 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:49.431544065 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:49.431567907 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:49.431569099 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:49.431580067 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:49.431595087 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:49.431621075 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:49.431631088 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:49.431643009 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:49.431653976 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:49.431665897 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:49.431685925 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:49.431713104 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:49.431716919 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:49.431744099 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:49.431745052 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:49.431770086 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:49.431796074 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:49.431796074 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:49.431799889 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:49.431818008 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:49.431844950 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:49.433643103 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:49.433681965 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:49.433705091 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:49.433723927 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:49.433777094 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:49.433789015 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:49.433835030 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:49.433892965 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:49.433979988 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:49.434065104 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:49.434108019 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:49.434139013 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:49.434189081 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:49.434201956 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:49.434392929 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:49.434448004 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:49.434679985 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:49.434709072 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:49.434735060 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:49.434762001 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:49.434763908 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:49.434794903 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:49.434799910 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:49.434804916 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:49.434815884 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:49.434833050 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:49.434848070 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:49.434869051 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:49.434958935 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:49.434987068 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:49.435010910 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:49.435031891 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:49.435158968 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:49.435188055 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:49.435225964 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:49.435236931 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:49.435246944 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:49.435272932 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:49.435300112 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:49.435300112 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:49.435343981 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:49.435348034 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:49.435374975 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:49.435420990 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:49.435550928 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:49.435601950 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:49.435688972 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:49.435718060 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:49.435745955 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:49.435765028 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:49.734289885 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:49.734325886 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:49.734344959 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:49.734363079 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:49.734380007 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:49.734452963 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:49.734494925 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:49.734523058 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:49.734543085 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:49.734560013 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:49.734581947 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:49.734601021 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:49.734622955 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:49.734652042 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:49.734682083 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:49.735157967 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:49.735234976 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:49.735277891 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:49.735416889 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:49.735476017 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:49.735522032 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:49.735560894 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:49.735631943 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:49.735690117 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:49.735718966 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:49.735800028 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:49.735815048 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:49.735842943 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:49.735861063 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:49.735902071 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:49.735996008 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:49.746288061 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:49.746345997 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:49.746373892 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:49.746390104 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:49.746401072 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:49.746418953 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:49.746434927 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:49.746450901 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:49.746454000 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:49.746488094 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:49.746505022 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:49.746521950 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:49.746541023 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:49.746557951 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:49.746587992 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:49.746603012 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:49.746630907 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:49.746645927 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:49.746663094 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:49.746679068 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:49.746721029 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:49.746813059 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:49.746830940 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:49.746845961 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:49.746855021 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:49.746882915 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:49.746896029 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:49.746925116 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:49.746957064 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:49.746965885 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:49.746982098 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:49.746985912 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:49.747031927 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:49.747067928 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:49.747075081 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:49.747087002 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:49.747188091 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:49.747227907 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:49.747303009 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:49.747329950 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:49.747406006 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:49.747433901 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:49.747457027 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:49.747473955 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:49.747505903 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:49.747571945 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:49.748965979 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:49.749042988 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:49.749057055 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:49.749135017 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:49.749147892 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:49.749177933 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:49.749211073 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:49.749248028 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:49.749409914 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:49.749444962 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:49.749475956 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:49.749476910 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:49.749505997 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:49.749540091 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:49.749548912 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:49.749571085 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:49.749608040 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:49.749648094 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:49.749847889 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:49.749937057 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:49.750108004 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:49.750144958 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:49.750173092 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:49.750183105 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:49.750214100 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:49.750233889 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:49.750269890 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:49.750277996 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:49.750308990 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:49.750332117 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:49.750341892 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:49.750363111 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:49.750372887 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:49.750423908 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:49.750722885 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:49.750756979 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:49.750785112 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:49.750787973 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:49.750818014 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:49.750824928 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:49.750849962 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:49.750871897 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:49.750879049 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:49.750909090 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:49.750947952 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:49.750988007 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:50.051611900 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:50.051654100 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:50.051683903 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:50.051697969 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:50.051711082 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:50.051718950 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:50.051742077 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:50.051744938 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:50.051769972 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:50.051773071 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:50.051795959 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:50.051798105 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:50.051820993 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:50.051831961 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:50.051851988 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:50.051865101 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:50.051882029 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:50.051891088 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:50.051913023 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:50.051923037 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:50.051934004 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:50.051951885 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:50.051969051 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:50.051995993 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:50.052133083 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:50.052186012 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:50.052500010 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:50.052568913 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:50.052609921 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:50.052661896 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:50.053045034 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:50.053081989 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:50.053117037 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:50.053162098 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:50.053205967 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:50.053388119 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:50.053426981 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:50.053455114 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:50.053484917 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:50.063628912 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:50.063702106 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:50.063707113 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:50.063766956 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:50.063767910 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:50.063818932 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:50.063824892 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:50.063855886 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:50.063870907 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:50.063893080 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:50.063911915 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:50.063930988 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:50.063951015 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:50.063987017 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:50.064059019 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:50.064097881 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:50.064110994 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:50.064135075 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:50.064160109 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:50.064193964 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:50.064964056 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:50.065013885 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:50.065032005 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:50.065083981 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:50.065356016 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:50.065404892 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:50.065421104 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:50.065447092 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:50.065459967 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:50.065484047 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:50.065499067 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:50.065535069 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:50.065553904 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:50.065592051 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:50.065606117 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:50.065644026 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:50.065713882 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:50.065752983 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:50.065771103 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:50.065804005 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:50.066476107 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:50.066515923 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:50.066546917 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:50.066554070 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:50.066565990 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:50.066606998 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:50.067085028 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:50.067150116 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:50.067150116 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:50.067188978 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:50.067207098 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:50.067254066 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:50.067315102 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:50.067352057 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:50.067369938 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:50.067404985 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:50.067776918 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:50.067833900 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:50.067854881 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:50.067871094 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:50.067888021 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:50.067909002 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:50.067926884 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:50.067946911 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:50.067961931 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:50.067984104 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:50.068001986 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:50.068021059 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:50.068037033 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:50.068077087 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:50.366487980 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:50.366518974 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:50.366534948 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:50.366589069 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:50.366614103 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:50.366655111 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:50.366661072 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:50.366826057 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:50.366844893 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:50.366862059 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:50.366878033 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:50.366895914 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:50.366898060 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:50.366913080 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:50.366915941 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:50.366930962 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:50.366950035 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:50.366966009 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:50.366969109 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:50.366981030 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:50.367007971 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:50.367048979 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:50.367396116 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:50.367419004 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:50.367469072 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:50.367487907 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:50.368118048 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:50.368139982 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:50.368159056 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:50.368175983 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:50.368210077 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:50.368227005 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:50.368236065 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:50.368665934 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:50.368684053 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:50.368736982 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:50.370065928 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:50.380243063 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:50.380275965 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:50.380290985 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:50.380309105 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:50.380323887 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:50.380323887 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:50.380343914 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:50.380357027 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:50.380368948 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:50.380373955 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:50.380390882 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:50.380409956 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:50.380426884 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:50.380464077 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:50.380835056 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:50.380856991 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:50.380872965 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:50.380888939 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:50.380904913 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:50.380922079 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:50.380964041 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:50.381597042 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:50.381623983 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:50.381639957 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:50.381656885 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:50.381664038 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:50.381673098 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:50.381684065 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:50.381690025 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:50.381706953 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:50.381722927 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:50.381726980 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:50.381738901 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:50.381791115 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:50.381957054 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:50.381998062 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:50.382014036 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:50.382688999 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:50.382711887 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:50.382754087 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:50.382771015 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:50.383048058 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:50.383069038 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:50.383110046 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:50.383153915 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:50.383383036 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:50.383402109 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:50.383441925 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:50.383464098 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:50.383543015 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:50.383564949 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:50.383598089 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:50.383626938 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:50.383776903 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:50.383801937 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:50.383819103 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:50.383835077 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:50.383846998 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:50.383846045 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:50.383858919 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:50.383858919 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:50.383865118 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:50.383893967 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:50.383934975 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:50.681472063 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:50.681510925 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:50.681531906 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:50.681549072 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:50.681566000 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:50.681586981 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:50.681668997 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:50.681701899 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:50.681756973 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:50.681788921 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:50.681792021 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:50.681807995 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:50.681817055 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:50.681824923 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:50.681843996 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:50.681863070 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:50.681873083 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:50.681879044 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:50.681889057 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:50.681896925 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:50.681912899 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:50.681946993 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:50.682118893 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:50.682173967 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:50.682890892 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:50.682917118 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:50.682929039 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:50.682950020 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:50.682974100 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:50.682996988 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:50.683482885 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:50.683506966 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:50.683545113 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:50.683568001 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:50.695760012 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:50.695800066 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:50.695821047 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:50.695833921 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:50.695847034 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:50.695858955 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:50.695871115 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:50.695884943 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:50.695900917 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:50.695919037 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:50.695997953 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:50.696053982 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:50.696206093 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:50.696229935 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:50.696249008 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:50.696264982 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:50.696285009 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:50.696291924 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:50.696302891 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:50.696309090 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:50.696336031 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:50.696372986 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:50.696548939 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:50.696582079 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:50.696607113 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:50.696630001 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:50.696635962 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:50.696652889 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:50.696661949 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:50.696676970 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:50.696698904 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:50.696700096 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:50.696717024 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:50.696731091 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:50.696732044 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:50.696748018 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:50.696763992 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:50.696764946 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:50.696779013 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:50.696796894 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:50.696804047 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:50.696811914 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:50.696820974 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:50.696841002 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:50.696862936 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:50.696862936 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:50.696880102 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:50.696916103 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:50.696935892 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:50.697206020 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:50.697226048 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:50.697263956 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:50.697278976 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:50.697424889 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:50.697443008 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:50.697458029 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:50.697493076 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:50.697521925 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:50.697684050 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:50.697705984 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:50.697722912 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:50.697741985 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:50.697755098 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:50.697782993 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:50.697858095 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:50.697912931 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:50.697932959 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:50.697952032 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:50.697973967 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:50.697977066 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:50.697989941 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:50.698021889 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:50.698034048 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:50.698044062 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:50.698055983 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:50.698081017 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:50.698081970 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:50.698101997 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:50.698102951 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:50.698123932 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:50.698126078 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:50.698146105 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:50.698148012 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:50.698168039 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:50.698173046 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:50.698188066 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:50.698203087 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:50.698204994 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:50.698221922 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:50.698231936 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:50.698244095 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:50.698257923 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:50.698263884 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:50.698276997 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:50.698296070 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:50.698298931 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:50.698313951 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:50.698328972 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:50.698359013 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:50.996218920 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:50.996253014 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:50.996268988 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:50.996282101 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:50.996294022 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:50.996309042 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:50.996325970 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:50.996345043 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:50.996362925 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:50.996382952 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:50.996403933 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:50.996411085 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:50.996423006 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:50.996438980 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:50.996454000 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:50.996467113 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:50.996479988 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:50.996486902 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:50.996500015 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:50.996519089 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:50.996522903 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:50.996541023 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:50.996543884 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:50.996562958 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:50.996570110 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:50.996581078 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:50.996598959 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:50.996603012 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:50.996618032 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:50.996634007 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:50.996639013 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:50.996654987 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:50.996675968 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:50.996676922 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:50.996685028 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:50.996730089 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:50.997263908 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:50.997282028 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:50.997298002 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:50.997313976 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:50.997366905 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:50.997427940 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:50.997483969 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:50.997659922 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:50.999903917 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:51.010359049 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:51.010397911 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:51.010420084 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:51.010440111 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:51.010459900 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:51.010487080 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:51.010505915 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:51.010543108 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:51.010544062 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:51.010571003 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:51.010575056 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:51.010612011 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:51.010648966 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:51.010719061 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:51.010740995 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:51.010869026 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:51.010898113 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:51.010920048 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:51.010979891 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:51.011022091 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:51.011043072 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:51.011065960 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:51.011066914 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:51.011090994 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:51.011099100 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:51.011126041 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:51.011141062 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:51.011143923 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:51.011183977 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:51.011192083 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:51.011231899 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:51.011234999 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:51.011262894 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:51.011280060 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:51.011286974 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:51.011307001 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:51.011313915 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:51.011328936 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:51.011359930 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:51.011563063 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:51.011585951 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:51.011670113 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:51.011780977 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:51.011878014 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:51.011992931 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:51.012022018 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:51.012044907 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:51.012126923 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:51.012145042 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:51.012198925 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:51.012269020 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:51.012275934 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:51.012618065 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:51.012655020 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:51.012669086 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:51.012685061 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:51.012716055 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:51.012741089 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:51.012774944 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:51.012801886 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:51.012829065 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:51.012845993 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:51.017900944 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:51.311275959 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:51.311341047 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:51.311391115 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:51.311435938 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:51.311490059 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:51.311491013 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:51.311512947 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:51.311537027 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:51.311544895 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:51.311573982 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:51.311578035 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:51.311599016 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:51.311602116 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:51.311645031 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:51.311650991 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:51.311691046 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:51.311693907 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:51.311733961 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:51.311781883 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:51.311799049 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:51.311841011 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:51.311867952 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:51.311911106 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:51.311960936 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:51.311963081 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:51.312009096 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:51.312047005 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:51.312061071 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:51.312092066 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:51.312097073 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:51.312136889 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:51.312175989 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:51.312186956 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:51.312220097 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:51.312258959 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:51.312294960 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:51.312314034 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:51.312319994 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:51.312365055 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:51.312403917 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:51.312417030 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:51.312452078 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:51.312453985 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:51.312494993 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:51.312530994 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:51.312561989 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:51.312583923 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:51.312587023 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:51.312627077 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:51.312674999 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:51.312680006 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:51.312716961 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:51.312738895 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:51.314274073 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:51.316955090 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:51.324974060 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:51.325025082 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:51.325067997 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:51.325100899 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:51.325141907 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:51.325166941 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:51.325191021 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:51.325205088 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:51.325208902 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:51.325242043 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:51.325264931 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:51.325294018 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:51.325320959 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:51.325334072 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:51.325345993 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:51.325360060 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:51.325371027 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:51.325397968 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:51.325409889 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:51.325424910 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:51.325428963 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:51.325449944 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:51.325454950 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:51.325472116 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:51.325478077 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:51.325499058 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:51.325504065 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:51.325519085 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:51.325544119 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:51.325669050 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:51.325707912 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:51.325731039 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:51.325752020 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:51.325756073 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:51.325779915 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:51.325783968 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:51.325802088 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:51.325809002 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:51.325833082 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:51.325850964 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:51.326307058 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:51.326334000 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:51.326384068 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:51.326425076 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:51.326747894 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:51.326795101 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:51.326904058 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:51.326925993 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:51.326946020 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:51.326970100 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:51.326971054 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:51.326989889 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:51.327019930 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:51.327572107 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:51.327594042 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:51.327620983 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:51.327656031 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:51.327713966 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:51.327734947 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:51.327759981 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:51.327778101 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:51.332603931 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:51.332639933 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:51.332750082 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:51.628158092 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:51.628195047 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:51.628216982 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:51.628237009 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:51.628256083 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:51.628262997 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:51.628276110 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:51.628294945 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:51.628304958 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:51.628319979 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:51.628341913 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:51.628360033 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:51.628386974 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:51.628386974 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:51.628417969 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:51.628422022 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:51.628446102 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:51.628463030 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:51.628473997 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:51.628500938 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:51.628500938 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:51.628531933 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:51.628561974 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:51.628566980 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:51.628585100 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:51.628604889 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:51.628623962 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:51.628633976 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:51.628643036 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:51.628663063 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:51.628678083 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:51.628681898 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:51.628705978 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:51.628715038 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:51.628727913 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:51.628746986 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:51.628751040 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:51.628766060 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:51.628786087 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:51.628806114 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:51.628806114 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:51.628825903 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:51.628844023 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:51.628850937 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:51.628880978 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:51.628885031 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:51.628926039 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:51.628930092 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:51.628950119 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:51.628968954 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:51.628987074 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:51.629057884 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:51.641453028 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:51.641491890 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:51.641520977 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:51.641546965 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:51.641572952 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:51.641625881 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:51.641633034 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:51.641663074 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:51.641696930 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:51.641714096 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:51.641736984 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:51.641758919 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:51.641788006 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:51.641804934 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:51.641834021 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:51.641869068 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:51.641890049 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:51.641901016 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:51.641918898 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:51.641928911 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:51.641956091 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:51.641963959 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:51.641982079 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:51.641994953 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:51.642008066 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:51.642045975 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:51.642061949 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:51.642087936 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:51.642108917 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:51.642112970 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:51.642117977 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:51.642133951 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:51.642164946 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:51.642167091 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:51.642209053 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:51.642210007 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:51.642240047 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:51.642257929 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:51.642266035 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:51.642303944 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:51.642328024 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:51.642353058 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:51.642359018 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:51.642407894 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:51.642446995 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:51.642669916 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:51.642710924 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:51.642736912 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:51.642750978 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:51.642779112 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:51.642812014 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:51.642817020 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:51.642858982 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:51.642868042 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:51.642913103 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:51.642935991 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:51.642980099 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:51.643565893 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:51.643601894 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:51.643644094 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:51.643661022 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:51.643688917 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:51.643718004 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:51.643734932 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:51.643774033 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:51.643774986 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:51.643810034 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:51.643846035 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:51.643883944 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:51.648731947 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:51.648775101 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:51.648859978 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:51.944724083 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:51.944753885 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:51.944772005 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:51.944787979 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:51.944807053 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:51.944822073 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:51.944847107 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:51.944868088 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:51.944881916 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:51.944881916 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:51.944897890 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:51.944920063 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:51.944920063 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:51.944926023 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:51.944931030 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:51.944940090 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:51.944956064 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:51.944960117 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:51.944974899 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:51.944978952 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:51.944998980 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:51.945015907 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:51.945039034 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:51.945164919 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:51.945185900 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:51.945205927 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:51.945219994 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:51.945224047 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:51.945240974 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:51.945245028 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:51.945266008 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:51.945269108 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:51.945276976 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:51.945288897 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:51.945302010 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:51.945308924 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:51.945331097 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:51.945341110 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:51.945350885 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:51.945369959 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:51.945373058 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:51.945393085 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:51.945399046 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:51.945413113 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:51.945426941 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:51.945434093 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:51.945455074 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:51.945465088 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:51.945472956 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:51.945482016 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:51.945492983 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:51.945509911 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:51.945517063 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:51.945538044 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:51.945539951 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:51.945552111 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:51.945559025 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:51.945573092 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:51.945580959 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:51.945602894 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:51.945601940 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:51.945616961 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:51.945624113 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:51.945637941 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:51.945643902 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:51.945657015 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:51.945664883 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:51.945688963 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:51.945692062 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:51.945702076 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:51.945708036 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:51.945719957 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:51.945728064 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:51.945743084 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:51.945749044 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:51.945770025 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:51.945770979 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:51.945781946 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:51.945790052 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:51.945810080 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:51.945811033 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:51.945827961 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:51.945832014 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:51.945856094 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:51.945868015 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:51.945888042 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:51.945909977 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:51.958713055 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:51.958746910 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:51.958761930 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:51.958775043 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:51.958794117 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:51.958811998 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:51.958830118 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:51.958834887 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:51.958848953 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:51.958868027 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:51.958874941 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:51.958889961 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:51.958904982 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:51.958910942 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:51.958930016 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:51.958946943 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:51.958947897 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:51.958966017 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:51.958966970 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:51.958970070 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:51.958985090 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:51.959002972 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:51.959014893 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:51.959022045 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:51.959032059 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:51.959043980 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:51.959048033 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:51.959064960 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:51.959084034 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:51.959101915 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:51.959101915 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:51.959114075 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:51.959147930 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:51.959148884 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:51.959163904 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:51.959175110 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:51.959203959 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:51.959217072 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:51.959230900 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:51.959233999 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:51.959253073 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:51.959264040 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:51.959266901 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:51.959286928 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:51.959307909 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:51.959309101 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:51.959326029 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:51.959327936 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:51.959333897 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:51.959346056 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:51.959364891 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:51.959388018 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:51.959398031 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:51.959405899 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:51.959415913 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:51.959424019 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:51.959443092 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:51.959455967 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:51.959460974 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:51.959479094 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:51.959495068 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:51.959498882 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:51.959522009 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:51.959536076 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:51.959542036 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:51.959561110 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:51.959568024 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:51.959579945 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:51.959597111 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:51.959604979 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:51.959610939 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:51.959614992 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:51.959634066 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:51.959635973 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:51.959652901 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:51.959655046 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:51.959676027 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:51.959681988 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:51.959696054 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:51.959697962 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:51.959714890 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:51.959729910 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:51.959733963 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:51.959753036 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:51.959768057 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:51.959770918 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:51.959780931 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:51.959789991 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:51.959810019 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:51.959825039 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:51.959832907 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:51.959852934 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:51.959861994 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:51.959872007 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:51.959887028 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:51.959889889 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:51.959903002 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:51.959917068 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:51.959920883 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:51.959930897 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:51.959944963 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:51.959956884 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:51.959970951 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:51.959985018 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:51.959997892 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:51.960011005 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:51.960033894 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:51.960038900 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:51.960048914 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:51.960053921 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:51.960053921 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:51.960058928 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:51.960097075 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:51.960114002 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:51.964413881 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:51.964435101 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:51.964525938 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:52.259893894 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:52.259948969 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:52.259993076 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:52.260032892 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:52.260071039 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:52.260119915 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:52.260163069 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:52.260201931 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:52.260240078 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:52.260278940 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:52.260315895 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:52.260356903 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:52.260386944 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:52.260474920 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:52.260535955 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:52.260576010 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:52.260673046 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:52.260679007 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:52.260721922 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:52.260761023 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:52.260763884 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:52.260845900 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:52.260859013 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:52.260886908 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:52.260926962 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:52.260935068 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:52.260968924 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:52.261039972 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:52.261006117 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:52.261059999 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:52.261089087 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:52.261106014 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:52.261137009 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:52.261188030 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:52.261259079 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:52.261348963 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:52.261362076 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:52.261429071 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:52.261466026 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:52.261528969 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:52.261534929 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:52.261617899 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:52.261622906 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:52.261666059 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:52.261703968 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:52.261720896 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:52.261780024 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:52.261831045 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:52.261903048 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:52.261909962 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:52.261975050 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:52.261992931 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:52.262012959 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:52.262051105 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:52.262073040 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:52.262089014 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:52.262140036 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:52.262192011 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:52.262192965 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:52.262232065 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:52.262269974 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:52.262285948 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:52.262334108 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:52.262352943 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:52.262406111 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:52.262422085 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:52.262448072 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:52.262473106 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:52.262485981 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:52.262531042 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:52.262552977 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:52.262572050 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:52.262593031 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:52.262626886 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:52.262634993 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:52.262672901 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:52.262696981 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:52.262708902 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:52.262780905 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:52.262780905 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:52.262845993 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:52.262872934 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:52.262938023 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:52.262938976 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:52.263020992 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:52.274775982 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:52.274830103 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:52.274879932 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:52.274969101 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:52.274982929 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:52.275039911 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:52.275080919 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:52.275105000 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:52.275188923 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:52.275228024 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:52.275257111 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:52.275263071 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:52.275312901 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:52.275352955 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:52.275356054 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:52.275396109 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:52.275410891 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:52.275427103 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:52.275504112 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:52.275614023 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:52.275682926 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:52.275712013 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:52.275770903 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:52.275777102 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:52.275825977 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:52.275826931 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:52.275878906 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:52.275897980 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:52.275939941 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:52.276001930 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:52.276009083 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:52.276046991 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:52.276053905 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:52.276067019 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:52.276125908 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:52.276143074 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:52.276176929 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:52.276197910 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:52.276218891 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:52.276238918 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:52.276257992 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:52.276276112 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:52.276312113 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:52.276313066 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:52.276388884 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:52.276415110 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:52.276443958 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:52.276463032 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:52.276478052 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:52.276500940 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:52.276509047 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:52.276537895 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:52.276566029 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:52.276629925 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:52.276691914 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:52.276698112 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:52.276737928 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:52.276768923 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:52.276798964 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:52.276820898 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:52.276909113 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:52.276943922 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:52.276966095 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:52.276974916 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:52.277021885 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:52.277046919 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:52.277111053 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:52.277139902 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:52.277192116 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:52.277246952 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:52.277267933 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:52.277302027 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:52.277333021 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:52.277360916 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:52.277411938 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:52.277430058 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:52.277467012 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:52.277488947 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:52.277498960 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:52.277530909 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:52.277585983 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:52.277606964 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:52.277658939 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:52.277695894 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:52.277735949 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:52.277757883 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:52.278723955 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:52.577630043 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:52.577791929 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:52.592044115 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:52.592104912 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:52.592164040 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:52.592185020 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:52.592200041 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:52.592212915 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:52.592226982 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:52.592272997 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:52.592325926 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:52.592331886 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:52.592384100 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:52.592386961 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:52.592391968 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:52.592446089 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:52.592449903 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:52.592509985 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:52.592516899 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:52.592567921 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:52.592593908 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:52.592628002 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:52.592647076 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:52.592686892 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:52.592736959 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:52.592772007 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:52.592794895 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:52.592817068 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:52.592852116 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:52.592864037 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:52.592906952 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:52.592916012 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:52.592967987 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:52.592971087 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:52.593024969 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:52.593027115 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:52.593084097 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:52.593091965 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:52.593143940 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:52.593183041 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:52.593199015 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:52.593200922 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:52.593245983 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:52.593251944 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:52.593300104 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:52.593342066 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:52.593350887 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:52.593362093 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:52.593415022 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:52.593421936 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:52.593467951 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:52.593468904 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:52.593519926 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:52.593534946 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:52.593568087 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:52.593580961 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:52.593616009 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:52.593631029 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:52.593664885 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:52.593677998 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:52.593710899 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:52.593728065 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:52.593766928 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:52.593770027 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:52.593816042 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:52.593831062 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:52.593863010 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:52.593875885 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:52.593911886 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:52.593911886 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:52.593959093 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:52.593962908 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:52.594007969 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:52.594012976 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:52.594057083 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:52.594059944 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:52.594103098 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:52.594108105 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:52.594163895 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:52.594166040 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:52.594216108 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:52.594238043 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:52.594261885 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:52.594283104 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:52.594312906 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:52.594343901 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:52.594362974 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:52.594388008 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:52.594410896 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:52.594428062 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:52.594460011 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:52.594475031 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:52.594516039 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:52.594521046 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:52.594569921 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:52.594572067 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:52.594618082 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:52.594649076 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:52.594660044 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:52.594702005 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:52.594708920 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:52.594747066 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:52.594749928 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:52.594764948 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:52.594790936 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:52.594808102 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:52.594830036 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:52.594868898 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:52.594892025 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:52.594898939 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:52.594917059 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:52.594949961 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:52.594960928 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:52.594976902 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:52.595001936 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:52.595025063 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:52.595041037 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:52.595057011 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:52.595079899 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:52.595089912 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:52.595129013 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:52.595143080 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:52.595184088 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:52.595197916 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:52.595222950 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:52.595242977 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:52.595261097 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:52.595271111 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:52.595308065 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:52.595320940 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:52.595350027 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:52.595364094 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:52.595386982 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:52.595402956 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:52.595426083 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:52.595438004 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:52.595463037 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:52.595478058 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:52.595499992 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:52.595510006 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:52.595536947 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:52.595542908 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:52.595573902 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:52.595585108 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:52.595618010 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:52.595621109 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:52.595662117 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:52.595671892 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:52.595698118 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:52.595710993 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:52.595736027 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:52.595746994 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:52.595774889 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:52.595784903 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:52.595810890 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:52.595824003 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:52.595848083 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:52.595864058 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:52.595885992 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:52.595896959 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:52.595932961 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:52.595933914 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:52.595974922 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:52.595988035 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:52.596014023 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:52.596040010 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:52.596051931 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:52.596059084 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:52.596090078 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:52.596101999 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:52.596127033 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:52.596132994 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:52.596163988 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:52.596177101 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:52.596210957 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:52.596219063 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:52.596272945 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:52.894712925 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:52.894813061 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:52.913372040 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:52.913444042 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:52.913470984 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:52.913487911 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:52.913501978 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:52.913553953 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:52.913561106 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:52.913608074 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:52.913623095 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:52.913671017 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:52.913677931 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:52.913722992 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:52.913729906 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:52.913774014 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:52.913785934 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:52.913831949 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:52.913837910 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:52.913886070 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:52.913892031 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:52.913937092 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:52.913944006 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:52.913991928 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:52.913995981 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:52.914041996 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:52.914057016 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:52.914105892 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:52.914113998 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:52.914161921 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:52.914169073 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:52.914220095 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:52.914221048 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:52.914269924 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:52.914272070 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:52.914316893 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:52.914324045 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:52.914366007 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:52.914375067 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:52.914418936 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:52.914427996 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:52.914470911 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:52.914486885 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:52.914535999 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:52.914541960 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:52.914592028 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:52.914647102 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:52.914695024 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:52.914697886 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:52.914741039 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:52.914748907 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:52.914797068 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:52.914800882 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:52.914849043 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:52.914851904 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:52.914916039 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:52.914920092 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:52.914968014 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:52.914973021 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:52.915023088 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:52.915028095 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:52.915082932 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:52.915082932 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:52.915137053 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:52.915167093 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:52.915215969 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:52.915216923 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:52.915271044 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:52.915282965 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:52.915317059 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:52.915328979 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:52.915376902 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:52.915385008 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:52.915432930 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:52.915447950 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:52.915492058 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:52.915494919 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:52.915534973 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:52.915556908 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:52.915585995 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:52.915591002 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:52.915643930 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:52.915646076 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:52.915690899 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:52.915697098 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:52.915740967 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:52.915747881 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:52.915792942 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:52.915802002 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:52.915846109 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:52.915860891 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:52.915909052 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:52.915918112 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:52.915966988 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:52.915971994 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:52.916018963 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:52.916028023 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:52.916073084 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:52.916081905 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:52.916131973 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:52.916136026 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:52.916177988 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:52.916186094 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:52.916230917 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:52.916239023 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:52.916290998 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:52.916301012 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:52.916348934 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:52.916356087 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:52.916402102 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:52.916409969 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:52.916454077 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:52.916462898 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:52.916507006 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:52.916515112 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:52.916558981 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:52.916565895 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:52.916610003 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:52.916618109 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:52.916667938 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:52.916671038 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:52.916718960 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:52.916728020 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:52.916770935 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:52.916783094 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:52.916826010 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:52.916836023 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:52.916882992 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:52.916887999 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:52.916932106 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:52.916943073 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:52.916985989 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:52.916994095 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:52.917049885 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:52.917079926 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:52.917093039 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:52.917099953 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:52.917149067 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:52.917160988 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:52.917203903 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:52.917216063 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:52.917263031 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:52.917267084 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:52.917311907 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:52.917319059 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:52.917370081 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:52.917423010 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:52.917455912 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:52.917463064 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:52.917474031 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:52.917484045 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:52.917525053 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:52.917526960 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:52.917567015 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:52.917587996 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:52.917634964 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:52.917639017 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:52.917681932 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:52.917692900 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:52.917741060 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:52.917747021 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:52.917799950 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:52.917830944 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:52.917841911 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:52.917849064 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:52.917898893 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:52.917902946 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:52.917948008 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:52.917954922 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:52.917998075 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:52.918015957 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:52.918061018 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:52.918071985 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:52.918123960 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:52.918134928 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:52.918165922 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:52.918179035 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:52.918222904 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:52.918231010 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:52.918272018 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:52.918283939 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:52.918327093 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:52.918335915 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:52.918379068 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:52.918390989 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:52.918431997 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:52.918451071 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:52.918495893 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:52.918505907 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:52.918550014 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:52.918557882 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:52.918601036 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:52.918612957 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:52.918653965 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:52.918664932 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:52.918708086 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:53.211690903 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:53.211746931 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:53.211864948 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:53.211920977 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:53.231745958 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:53.231848955 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:53.231877089 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:53.231906891 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:53.236449957 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:53.236476898 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:53.236500025 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:53.236522913 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:53.236572981 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:53.236598969 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:53.236617088 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:53.236618996 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:53.236644983 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:53.236651897 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:53.236666918 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:53.236689091 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:53.236691952 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:53.236711979 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:53.236721039 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:53.236752987 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:53.236805916 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:53.236825943 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:53.236849070 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:53.236854076 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:53.236872911 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:53.236893892 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:53.236896038 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:53.236918926 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:53.236939907 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:53.236958027 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:53.236958981 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:53.236978054 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:53.236994982 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:53.237000942 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:53.237024069 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:53.237030029 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:53.237046003 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:53.237052917 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:53.237087011 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:53.237106085 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:53.237133026 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:53.237133026 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:53.237154961 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:53.237159967 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:53.237164021 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:53.237191916 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:53.237426996 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:53.237446070 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:53.237469912 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:53.237493038 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:53.237499952 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:53.237517118 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:53.237517118 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:53.237540960 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:53.237561941 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:53.237586021 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:53.237607002 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:53.237610102 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:53.237632990 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:53.237657070 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:53.237668037 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:53.237680912 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:53.237699986 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:53.237704992 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:53.237725973 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:53.237736940 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:53.237749100 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:53.237770081 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:53.237773895 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:53.237799883 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:53.237803936 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:53.237838984 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:53.237842083 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:53.237863064 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:53.237880945 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:53.237890005 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:53.237920046 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:53.237924099 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:53.237945080 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:53.237960100 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:53.237965107 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:53.237967968 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:53.237992048 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:53.237996101 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:53.238013983 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:53.238038063 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:53.238039970 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:53.238064051 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:53.238066912 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:53.238085985 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:53.238106966 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:53.238109112 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:53.238131046 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:53.238147974 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:53.238194942 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:53.238301039 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:53.238328934 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:53.238357067 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:53.238383055 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:53.238396883 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:53.238404989 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:53.238428116 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:53.238432884 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:53.238454103 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:53.238476038 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:53.238487959 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:53.238512039 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:53.238517046 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:53.238545895 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:53.238547087 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:53.238569975 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:53.238579035 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:53.238593102 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:53.238609076 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:53.238615990 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:53.238637924 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:53.238641977 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:53.238666058 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:53.238687038 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:53.238702059 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:53.238717079 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:53.238725901 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:53.238749981 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:53.238760948 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:53.238770962 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:53.238791943 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:53.238799095 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:53.238811970 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:53.238825083 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:53.238831997 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:53.238854885 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:53.238861084 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:53.238893986 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:53.238899946 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:53.238919020 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:53.238945007 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:53.238955021 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:53.238972902 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:53.238975048 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:53.238996983 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:53.239022017 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:53.239027023 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:53.239042044 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:53.239056110 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:53.239063978 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:53.239085913 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:53.239094973 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:53.239155054 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:53.239320993 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:53.239336967 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:53.239358902 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:53.239372969 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:53.239379883 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:53.239434958 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:53.239658117 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:53.239675999 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:53.239701986 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:53.239711046 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:53.239722013 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:53.239744902 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:53.239763975 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:53.239764929 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:53.239787102 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:53.239792109 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:53.239808083 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:53.239819050 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:53.239829063 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:53.239850998 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:53.239876032 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:53.239877939 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:53.239896059 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:53.239921093 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:53.239933968 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:53.239943027 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:53.239965916 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:53.239985943 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:53.239995003 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:53.240010977 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:53.240030050 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:53.240037918 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:53.240050077 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:53.240075111 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:53.240082979 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:53.240097046 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:53.240122080 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:53.240123034 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:53.240145922 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:53.240154028 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:53.240164995 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:53.240185022 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:53.240192890 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:53.240206957 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:53.240226984 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:53.240230083 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:53.240248919 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:53.240271091 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:53.240272045 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:53.240297079 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:53.240299940 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:53.240317106 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:53.240338087 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:53.240339041 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:53.240374088 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:53.240408897 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:53.527431965 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:53.527463913 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:53.527481079 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:53.527497053 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:53.527565956 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:53.527611017 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:53.548250914 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:53.548284054 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:53.548302889 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:53.548324108 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:53.548333883 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:53.548366070 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:53.548405886 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:53.553334951 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:53.553381920 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:53.553396940 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:53.553411961 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:53.553431034 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:53.553447008 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:53.553477049 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:53.553498030 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:53.553517103 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:53.553530931 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:53.553539038 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:53.553543091 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:53.553549051 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:53.553559065 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:53.553560972 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:53.553579092 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:53.553601980 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:53.553603888 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:53.553625107 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:53.553636074 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:53.553646088 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:53.553658009 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:53.553667068 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:53.553687096 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:53.553697109 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:53.553704977 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:53.553705931 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:53.553726912 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:53.553735971 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:53.553746939 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:53.553759098 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:53.553771019 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:53.553792000 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:53.553805113 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:53.553812981 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:53.553832054 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:53.553833008 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:53.553853035 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:53.553863049 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:53.553877115 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:53.553895950 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:53.553895950 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:53.553916931 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:53.553934097 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:53.553941011 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:53.553961992 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:53.553982019 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:53.554006100 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:53.554043055 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:53.554224968 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:53.554245949 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:53.554266930 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:53.554286003 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:53.554286003 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:53.554301977 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:53.554306030 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:53.554325104 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:53.554327011 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:53.554347992 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:53.554364920 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:53.554369926 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:53.554389000 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:53.554398060 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:53.554408073 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:53.554428101 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:53.554429054 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:53.554445982 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:53.554466009 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:53.554469109 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:53.554483891 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:53.554507971 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:53.554512024 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:53.554529905 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:53.554541111 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:53.554548979 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:53.554563999 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:53.554569006 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:53.554589033 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:53.554600000 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:53.554606915 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:53.554637909 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:53.554661036 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:53.554661036 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:53.554682016 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:53.554737091 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:53.554768085 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:53.555461884 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:53.555484056 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:53.555507898 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:53.555529118 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:53.555547953 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:53.555567026 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:53.555587053 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:53.555604935 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:53.555605888 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:53.555619955 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:53.555625916 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:53.555645943 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:53.555665016 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:53.555671930 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:53.555689096 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:53.555711985 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:53.555718899 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:53.555744886 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:53.555763006 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:53.555773020 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:53.555779934 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:53.555797100 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:53.555800915 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:53.555826902 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:53.555845976 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:53.555852890 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:53.555875063 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:53.555879116 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:53.555912018 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:53.555923939 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:53.555939913 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:53.555941105 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:53.555954933 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:53.555964947 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:53.555990934 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:53.556005955 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:53.556016922 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:53.556035042 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:53.556041956 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:53.556042910 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:53.556070089 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:53.556082010 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:53.556096077 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:53.556128025 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:53.556157112 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:53.556183100 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:53.556207895 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:53.556235075 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:53.556235075 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:53.556261063 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:53.556314945 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:53.556588888 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:53.556618929 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:53.556643009 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:53.556670904 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:53.556679010 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:53.556696892 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:53.556704044 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:53.556729078 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:53.556730032 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:53.556757927 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:53.556773901 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:53.556786060 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:53.556796074 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:53.556812048 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:53.556824923 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:53.556839943 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:53.556839943 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:53.556863070 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:53.556864977 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:53.556890965 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:53.556891918 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:53.556915998 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:53.556931973 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:53.556947947 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:53.556951046 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:53.556977034 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:53.556988955 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:53.557005882 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:53.557004929 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:53.557028055 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:53.557048082 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:53.557066917 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:53.557092905 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:53.557104111 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:53.557126045 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:53.557142973 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:53.557178020 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:53.557415009 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:53.842107058 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:53.842135906 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:53.842257977 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:53.842294931 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:53.863022089 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:53.863051891 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:53.863068104 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:53.863178968 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:53.868676901 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:53.868705034 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:53.868721962 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:53.868736982 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:53.868752956 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:53.868765116 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:53.868777037 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:53.868792057 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:53.868796110 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:53.868812084 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:53.868849039 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:53.868855000 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:53.868872881 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:53.868884087 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:53.868901968 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:53.868941069 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:53.869497061 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:53.869524956 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:53.869539976 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:53.869555950 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:53.869571924 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:53.869575024 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:53.869587898 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:53.869592905 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:53.869627953 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:53.869638920 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:53.869643927 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:53.869661093 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:53.869680882 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:53.869713068 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:53.870661974 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:53.870733023 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:53.871536970 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:53.871618986 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:53.871675968 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:53.871694088 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:53.871710062 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:53.871725082 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:53.871735096 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:53.871743917 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:53.871763945 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:53.871773958 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:53.871803045 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:53.871818066 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:53.871951103 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:53.871975899 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:53.871993065 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:53.872009993 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:53.872028112 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:53.872050047 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:53.872073889 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:53.872092009 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:53.872107983 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:53.872128963 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:53.872147083 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:53.872160912 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:53.872224092 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:53.872256041 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:53.872272015 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:53.872281075 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:53.872289896 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:53.872304916 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:53.872330904 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:53.872338057 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:53.872348070 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:53.872364998 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:53.872380972 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:53.872383118 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:53.872411966 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:53.872428894 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:53.872428894 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:53.872457027 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:53.872463942 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:53.872473001 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:53.872497082 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:53.872508049 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:53.872514963 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:53.872531891 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:53.872541904 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:53.872559071 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:53.872560024 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:53.872584105 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:53.872594118 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:53.872606993 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:53.872617006 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:53.872633934 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:53.872638941 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:53.872661114 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:53.872673035 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:53.872689962 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:53.872701883 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:53.872706890 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:53.872756958 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:53.872756958 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:53.872781038 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:53.872807980 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:53.872823954 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:53.872848034 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:53.872901917 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:53.872984886 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:53.873011112 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:53.873027086 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:53.873039007 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:53.873051882 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:53.873058081 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:53.873074055 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:53.873099089 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:53.873111963 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:53.873125076 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:53.873152018 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:53.873171091 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:53.873187065 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:53.873205900 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:53.873220921 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:53.873240948 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:53.873240948 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:53.873258114 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:53.873258114 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:53.873282909 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:53.873307943 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:53.873315096 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:53.873323917 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:53.873339891 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:53.873358965 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:53.873359919 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:53.873374939 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:53.873375893 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:53.873404026 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:53.873404980 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:53.873420954 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:53.873441935 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:53.873447895 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:53.873464108 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:53.873480082 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:53.873482943 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:53.873501062 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:53.873521090 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:53.873528957 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:53.873537064 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:53.873545885 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:53.873563051 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:53.873573065 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:53.873579025 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:53.873591900 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:53.873608112 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:53.873626947 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:53.873627901 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:53.873662949 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:53.873667955 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:53.873698950 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:53.873708010 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:53.873720884 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:53.873739004 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:53.873754025 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:53.873778105 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:53.873794079 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:53.873828888 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:53.873830080 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:53.873847961 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:53.873863935 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:53.873899937 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:53.873900890 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:53.873915911 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:53.873929977 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:53.873946905 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:53.873959064 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:53.873989105 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:53.873999119 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:53.874028921 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:53.874046087 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:53.874061108 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:53.874078035 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:53.874093056 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:53.874100924 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:53.874104977 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:53.874114990 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:53.874119997 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:53.874139071 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:53.874149084 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:53.874176025 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:53.874181032 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:53.874191999 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:53.874207973 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:53.874216080 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:53.874227047 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:53.874228001 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:53.874268055 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:53.874305010 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:53.874315977 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:54.156959057 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.156987906 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.157270908 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:54.177562952 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.177589893 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.177601099 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.177613020 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.177838087 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:54.183454037 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.183482885 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.183495998 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.183507919 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.183520079 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.183532000 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.183564901 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.183593988 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.183650970 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.183686018 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:54.183689117 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.183722973 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:54.183756113 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:54.183928013 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.183990955 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.183994055 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:54.184051991 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:54.184108019 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.184124947 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.184166908 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.184169054 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:54.184184074 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.184192896 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:54.184216022 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:54.184242964 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.184259892 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.184261084 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:54.184288025 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.184302092 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:54.184329033 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.184344053 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:54.184360981 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:54.184396982 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:54.186275005 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.186300993 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.186331034 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.186347008 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.186379910 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:54.186398029 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.186403990 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:54.186414957 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.186430931 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.186460972 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:54.186486959 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.186502934 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.186502934 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:54.186547995 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:54.186561108 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.186578035 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.186592102 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:54.186594963 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.186630964 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:54.186639071 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:54.186650038 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.186682940 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.186708927 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:54.186714888 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.186731100 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.186749935 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:54.186758041 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:54.186765909 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.186803102 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:54.186806917 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.186822891 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.186836004 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:54.186841965 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.186857939 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:54.186871052 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.186897993 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:54.186898947 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.186917067 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:54.186928034 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.186944962 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:54.186961889 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.186979055 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:54.187005997 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:54.187016010 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.187042952 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:54.187074900 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:54.187083006 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.187153101 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:54.187159061 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.187176943 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.187207937 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.187216043 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:54.187225103 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.187251091 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.187251091 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:54.187269926 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:54.187294960 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:54.187297106 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.187326908 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.187342882 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:54.187347889 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.187350035 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:54.187366962 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.187377930 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:54.187406063 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.187408924 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:54.187444925 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:54.187474012 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:54.187494040 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.187510967 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.187524080 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.187560081 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:54.187566996 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.187586069 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:54.187627077 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:54.187654018 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.187719107 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:54.187731981 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.187769890 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.187792063 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:54.187808990 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.187827110 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:54.187836885 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.187854052 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.187866926 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:54.187869072 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.187899113 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:54.187912941 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:54.187937021 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.187964916 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.187980890 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.187997103 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.187999964 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:54.188029051 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.188040972 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:54.188057899 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:54.188087940 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.188101053 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:54.188107967 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.188128948 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.188146114 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:54.188147068 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.188173056 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:54.188191891 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:54.188215971 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:54.188215971 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.188232899 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.188276052 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:54.188282013 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.188299894 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.188313007 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:54.188327074 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.188340902 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:54.188344002 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.188380957 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:54.188395977 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.188406944 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:54.188414097 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.188460112 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:54.188465118 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.188493013 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.188498020 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:54.188527107 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:54.188549995 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.188550949 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:54.188568115 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.188604116 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.188606977 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:54.188637972 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:54.188648939 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.188662052 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:54.188667059 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.188687086 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.188709021 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:54.188716888 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.188750029 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:54.188769102 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.188785076 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:54.188786983 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.188803911 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.188827991 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:54.188851118 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:54.188853025 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.188883066 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.188899040 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.188909054 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:54.188947916 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:54.188962936 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:54.188971043 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.189006090 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.189037085 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:54.189060926 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:54.189071894 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.189129114 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:54.189129114 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.189148903 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.189166069 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.189188004 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:54.189208031 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.189212084 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:54.189224005 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.189265013 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:54.189282894 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.189291954 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:54.189299107 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.189326048 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.189340115 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:54.189344883 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.189376116 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:54.189403057 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:54.189404964 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.189421892 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.189436913 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.189464092 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:54.189465046 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.189498901 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:54.189527035 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.189536095 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:54.189546108 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.189563036 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.189594030 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:54.189609051 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.189609051 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:54.189642906 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.189670086 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:54.189680099 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.189696074 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.189707041 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:54.189723015 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.189733982 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:54.189739943 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.189764977 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.189764977 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:54.189794064 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.189794064 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:54.189836025 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:54.189850092 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.189866066 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.189870119 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:54.189882040 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.189915895 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:54.189919949 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.189937115 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:54.189974070 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.189981937 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:54.190010071 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.190026045 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.190035105 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:54.190052032 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:54.190054893 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.190083027 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.190099001 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:54.190114021 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:54.190124035 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.190139055 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:54.190140009 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.190166950 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.190188885 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:54.190208912 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.190223932 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:54.190224886 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.190243006 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.190268040 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.190279961 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:54.190310001 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:54.190330029 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.190355062 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:54.190368891 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.190399885 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:54.190407038 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.190433979 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:54.190438986 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.190463066 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:54.190485001 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.190490007 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:54.190500975 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.190529108 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.190546036 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:54.190567017 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.190582037 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:54.190593004 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.190598965 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:54.190625906 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:54.190649986 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.190668106 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:54.190691948 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.190716028 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:54.190747023 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.190758944 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:54.190766096 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.190783024 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.190810919 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:54.190814972 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.190833092 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.190843105 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:54.190882921 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:54.471803904 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.471831083 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.472101927 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:54.492487907 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.492515087 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.492531061 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.492544889 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.492755890 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:54.498034000 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.498060942 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.498080969 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.498097897 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.498111963 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.498127937 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.498191118 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.498207092 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.498222113 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.498222113 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:54.498238087 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.498255968 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:54.498281956 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:54.498337984 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:54.498409986 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.498429060 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.498503923 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:54.498558044 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.498574972 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.498589993 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.498605967 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.498621941 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.498641014 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:54.498641014 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.498728991 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:54.498939037 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.498966932 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.499037027 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:54.499084949 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:54.500720978 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.500758886 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.500776052 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.500792027 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.500808001 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.500823975 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.500825882 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:54.500871897 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:54.500931025 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.500942945 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:54.500952959 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.500966072 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.500977993 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.501024008 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:54.501086950 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:54.501099110 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.501117945 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.501135111 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.501167059 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.501180887 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:54.501185894 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.501240015 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.501246929 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:54.501277924 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.501298904 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.501311064 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:54.501316071 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.501384974 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:54.501460075 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:54.501471043 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:54.501486063 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.501504898 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.501517057 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.501569986 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:54.501625061 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:54.502717972 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.502742052 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.502754927 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.502767086 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.502779007 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.502789974 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.502811909 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.502810955 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:54.502829075 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.502835989 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:54.502846956 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.502861977 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.502877951 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.502891064 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:54.502892971 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.502911091 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.502927065 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.502947092 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.502959967 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.502971888 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.502984047 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.502993107 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:54.503001928 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.503017902 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.503034115 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.503043890 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:54.503053904 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.503071070 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.503087044 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.503103018 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.503139973 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.503142118 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:54.503155947 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.503173113 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.503175020 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:54.503189087 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.503205061 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.503221035 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.503225088 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:54.503237963 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.503254890 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.503273964 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:54.503273964 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.503292084 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.503293037 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:54.503309011 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.503324986 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.503340960 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.503355980 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:54.503356934 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.503374100 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.503390074 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.503408909 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.503424883 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:54.503426075 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.503442049 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.503453970 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.503468990 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.503482103 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:54.503489971 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.503506899 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.503523111 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.503539085 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.503540039 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:54.503555059 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.503570080 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.503586054 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.503601074 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.503601074 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:54.503621101 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.503638029 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.503649950 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:54.503654003 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.503669977 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.503685951 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.503700972 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.503714085 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:54.503717899 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.503735065 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.503753901 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.503765106 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:54.503772020 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.503787994 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.503804922 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.503819942 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.503820896 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:54.503835917 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.503850937 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.503866911 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.503885031 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:54.503935099 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:54.504235983 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.504254103 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.504270077 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.504286051 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.504302025 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.504317045 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.504326105 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:54.504367113 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:54.504370928 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.504388094 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.504404068 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.504419088 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:54.504420042 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.504501104 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:54.504506111 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.504523993 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.504539967 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.504554987 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.504570007 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.504584074 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:54.504636049 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.504642963 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:54.504652977 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.504668951 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.504686117 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:54.504688025 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.504705906 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.504722118 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.504738092 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.504754066 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.504766941 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:54.504770041 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.504786968 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.504802942 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.504822016 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.504839897 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.504841089 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:54.504853964 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:54.504856110 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.504873037 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.504889011 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.504904032 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.504909039 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:54.504962921 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:54.505009890 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:54.505048990 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.505069971 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.505140066 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:54.505212069 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.505213022 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:54.505229950 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.505245924 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.505261898 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.505278111 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.505296946 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.505314112 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:54.505381107 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:54.505435944 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.505451918 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.505465031 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.505479097 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.505491018 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.505497932 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:54.505502939 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.505530119 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:54.505563021 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:54.787302971 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.787360907 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.787508965 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:54.787549973 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:54.807490110 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.807544947 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.807583094 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.807620049 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.807626009 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:54.807655096 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:54.807735920 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:54.814445972 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.814500093 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.814537048 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.814574957 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.814591885 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:54.814613104 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.814650059 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.814665079 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:54.814687014 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.814726114 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.814740896 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:54.814774036 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.814780951 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:54.814815998 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.814840078 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:54.814898014 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:54.814973116 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.815010071 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.815037966 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:54.815057039 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.815073013 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:54.815099001 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.815171003 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.815176010 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:54.815210104 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.815239906 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:54.815241098 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.815252066 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:54.815278053 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.815315008 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:54.815370083 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:54.815709114 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.815757990 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.815776110 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:54.815831900 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:54.817188025 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.817229986 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.817265987 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:54.817266941 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.817296982 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:54.817312002 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.817332029 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:54.817348957 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.817385912 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:54.817388058 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.817410946 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:54.817424059 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.817460060 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:54.817470074 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.817490101 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:54.817511082 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.817538977 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:54.817548037 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.817584038 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:54.817624092 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:54.820193052 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.820239067 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.820280075 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.820307016 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:54.820317984 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.820347071 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:54.820357084 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.820378065 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:54.820405006 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.820405960 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:54.820447922 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.820461035 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:54.820485115 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.820504904 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:54.820523977 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.820540905 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:54.820561886 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.820576906 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:54.820600033 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.820620060 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:54.820637941 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.820652008 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:54.820674896 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.820688963 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:54.820722103 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.820734024 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:54.820765018 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.820779085 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:54.820801973 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.820816994 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:54.820839882 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.820853949 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:54.820878029 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.820889950 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:54.820914030 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.820928097 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:54.820951939 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.820967913 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:54.820988894 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.821003914 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:54.821037054 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.821041107 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:54.821079016 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.821090937 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:54.821115971 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.821132898 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:54.821154118 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.821171045 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:54.821192026 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.821208000 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:54.821228981 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.821249008 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:54.821266890 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.821285963 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:54.821305037 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.821321011 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:54.821352005 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.821356058 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:54.821393967 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.821410894 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:54.821432114 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.821446896 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:54.821469069 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.821485043 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:54.821507931 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.821520090 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:54.821543932 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.821562052 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:54.821582079 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.821598053 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:54.821619987 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.821636915 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:54.821667910 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.821674109 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:54.821708918 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.821724892 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:54.821746111 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.821762085 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:54.821783066 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.821799040 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:54.821821928 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.821839094 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:54.821857929 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.821873903 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:54.821896076 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.821908951 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:54.821933985 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.821952105 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:54.821980953 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.821985960 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:54.822022915 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.822036982 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:54.822061062 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.822077036 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:54.822098970 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.822114944 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:54.822146893 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.822160006 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:54.822182894 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.822207928 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:54.822221041 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.822238922 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:54.822258949 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.822278023 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:54.822293997 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.822313070 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:54.822331905 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.822345018 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:54.822370052 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.822384119 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:54.822417021 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.822421074 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:54.822458982 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.822473049 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:54.822499037 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.822513103 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:54.822536945 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.822551012 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:54.822576046 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.822590113 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:54.822613001 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.822628021 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:54.822649956 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.822668076 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:54.822686911 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.822702885 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:54.822734118 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.822743893 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:54.822776079 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.822789907 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:54.822813988 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.822827101 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:54.822853088 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.822865009 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:54.822890043 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.822905064 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:54.822926044 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.822946072 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:54.822962999 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.822978973 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:54.822999954 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.823013067 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:54.823046923 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.823051929 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:54.823087931 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.823101044 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:54.823143959 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:54.823158979 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.823199034 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.823214054 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:54.823236942 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.823254108 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:54.823275089 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.823293924 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:54.823311090 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.823328018 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:54.823348045 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.823365927 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:54.823395967 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.823405981 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:54.823435068 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.823450089 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:54.823472023 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.823489904 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:54.823503971 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.823535919 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.823559999 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:54.823566914 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.823590040 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:54.823597908 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.823627949 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:54.823630095 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.823643923 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:54.823661089 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.823699951 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.823709011 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:54.823734999 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.823767900 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.823786974 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:54.823797941 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:54.823800087 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.823816061 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:54.823832989 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.823854923 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:54.823863983 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.823884010 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:54.823895931 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.823926926 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.823952913 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:54.823966026 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.823982000 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:54.824001074 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.824021101 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:54.824033022 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.824060917 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:54.824065924 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.824084044 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:54.824098110 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.824127913 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.824132919 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:54.824155092 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:54.824172020 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.824176073 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:54.824203968 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.824243069 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.824243069 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:54.824259043 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:54.824279070 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.824310064 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.824321985 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:54.824341059 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:54.824342012 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.824369907 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:54.824373007 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.824385881 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:54.824403048 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.824434996 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.824435949 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:54.824465990 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.824465990 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:54.824486017 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:54.824505091 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.824522018 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:54.824539900 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.824552059 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:54.824570894 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.824604034 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.824630976 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:54.824635029 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.824655056 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:54.824665070 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.824688911 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:54.824697018 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:54.824707985 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:54.824783087 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:55.103894949 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:55.103974104 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:55.104185104 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:55.104238033 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:55.123754025 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:55.123815060 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:55.124068022 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:55.124459028 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:55.124501944 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:55.124547005 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:55.124567986 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:55.131542921 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:55.131593943 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:55.131637096 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:55.131658077 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:55.131675005 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:55.131697893 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:55.131706953 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:55.131712914 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:55.131731033 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:55.131752968 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:55.131789923 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:55.131805897 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:55.131828070 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:55.131843090 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:55.131865025 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:55.131872892 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:55.131899118 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:55.131912947 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:55.131944895 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:55.131975889 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:55.132149935 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:55.132211924 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:55.132246017 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:55.132252932 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:55.132280111 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:55.132291079 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:55.132325888 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:55.132328987 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:55.132354975 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:55.132366896 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:55.132390022 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:55.132412910 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:55.132424116 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:55.132456064 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:55.132477999 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:55.132527113 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:55.139147997 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:55.139215946 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:55.139255047 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:55.139257908 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:55.139290094 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:55.139292955 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:55.139311075 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:55.139332056 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:55.139362097 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:55.139370918 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:55.139384985 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:55.139410973 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:55.139437914 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:55.139448881 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:55.139461994 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:55.139497042 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:55.139507055 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:55.139539957 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:55.139559984 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:55.139578104 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:55.139615059 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:55.139627934 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:55.139652967 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:55.139673948 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:55.139688969 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:55.139688969 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:55.139727116 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:55.139730930 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:55.139741898 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:55.139765024 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:55.139786959 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:55.139813900 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:55.139818907 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:55.139856100 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:55.139867067 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:55.139894962 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:55.139914036 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:55.139933109 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:55.139946938 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:55.139971972 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:55.139986038 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:55.140007973 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:55.140016079 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:55.140047073 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:55.140060902 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:55.140084982 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:55.140101910 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:55.140131950 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:55.140135050 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:55.140175104 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:55.140189886 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:55.140213013 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:55.140249014 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:55.140252113 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:55.140270948 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:55.140290976 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:55.140310049 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:55.140327930 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:55.140366077 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:55.140367031 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:55.140379906 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:55.140403986 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:55.140438080 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:55.140450954 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:55.140472889 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:55.140494108 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:55.140511990 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:55.140532017 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:55.140563965 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:55.140571117 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:55.140609026 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:55.140625954 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:55.140645981 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:55.140661001 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:55.140682936 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:55.140691996 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:55.140721083 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:55.140738964 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:55.140769958 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:55.140774965 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:55.140813112 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:55.140822887 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:55.140850067 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:55.140863895 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:55.140887976 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:55.140901089 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:55.140927076 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:55.140934944 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:55.140963078 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:55.140985966 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:55.141000986 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:55.141030073 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:55.141038895 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:55.141069889 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:55.141086102 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:55.141103029 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:55.141129017 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:55.141144037 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:55.141166925 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:55.141184092 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:55.141212940 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:55.141220093 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:55.141251087 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:55.141266108 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:55.141287088 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:55.141303062 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:55.141326904 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:55.141345978 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:55.141362906 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:55.141380072 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:55.141411066 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:55.141426086 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:55.141453981 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:55.141468048 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:55.141495943 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:55.141513109 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:55.141534090 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:55.141558886 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:55.141571999 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:55.141592026 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:55.141608000 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:55.141628027 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:55.141644955 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:55.141660929 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:55.141681910 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:55.141721010 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:55.141730070 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:55.141736984 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:55.141771078 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:55.141784906 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:55.141808987 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:55.141828060 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:55.141845942 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:55.141869068 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:55.141882896 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:55.141908884 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:55.141918898 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:55.141932964 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:55.141957045 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:55.141974926 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:55.141993999 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:55.142008066 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:55.142040968 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:55.142043114 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:55.142082930 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:55.142097950 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:55.142121077 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:55.142158031 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:55.142158985 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:55.142177105 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:55.142210960 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:55.142216921 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:55.142246962 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:55.142263889 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:55.142286062 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:55.142298937 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:55.142323017 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:55.142342091 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:55.142369986 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:55.142386913 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:55.142411947 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:55.142426014 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:55.142448902 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:55.142465115 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:55.142488003 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:55.142505884 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:55.142525911 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:55.142540932 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:55.142561913 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:55.142584085 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:55.142600060 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:55.142617941 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:55.142637014 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:55.142657042 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:55.142683983 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:55.142683983 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:55.142725945 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:55.142739058 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:55.142762899 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:55.142781019 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:55.142802000 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:55.142818928 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:55.142838955 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:55.142852068 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:55.142874956 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:55.142889977 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:55.142914057 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:55.142926931 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:55.142951965 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:55.142966986 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:55.142999887 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:55.143007994 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:55.143040895 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:55.143054008 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:55.143078089 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:55.143093109 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:55.143126011 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:55.143136024 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:55.143194914 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:55.143203974 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:55.143239021 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:55.143249989 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:55.143277884 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:55.143294096 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:55.143315077 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:55.143331051 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:55.143352032 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:55.143366098 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:55.143399954 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:55.143404961 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:55.143441916 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:55.143456936 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:55.143479109 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:55.143495083 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:55.143517017 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:55.143528938 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:55.143568993 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:55.418817043 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:55.418879986 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:55.418915987 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:55.418920040 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:55.418956041 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:55.418961048 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:55.418977022 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:55.419001102 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:55.419020891 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:55.419039965 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:55.419055939 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:55.419089079 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:55.419097900 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:55.419142962 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:55.419172049 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:55.419229031 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:55.419233084 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:55.419272900 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:55.419286013 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:55.419312000 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:55.419326067 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:55.419351101 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:55.419370890 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:55.419399977 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:55.419404984 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:55.419444084 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:55.419457912 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:55.419481993 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:55.419496059 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:55.419522047 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:55.419537067 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:55.419560909 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:55.419579029 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:55.419598103 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:55.419615030 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:55.419636011 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:55.419656038 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:55.419675112 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:55.419698000 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:55.419723988 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:55.419728041 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:55.419765949 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:55.419771910 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:55.419802904 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:55.419817924 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:55.419841051 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:55.419874907 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:55.419878960 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:55.419897079 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:55.419934988 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:55.420819044 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:55.420890093 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:55.438847065 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:55.438904047 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:55.438954115 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:55.438992023 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:55.438997984 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:55.439033985 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:55.439040899 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:55.439064980 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:55.446427107 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:55.446490049 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:55.446533918 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:55.446572065 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:55.446576118 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:55.446598053 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:55.446609974 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:55.446638107 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:55.446647882 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:55.446664095 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:55.446686029 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:55.446702003 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:55.446738005 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:55.446912050 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:55.446953058 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:55.446980000 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:55.446990013 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:55.447005033 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:55.447026968 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:55.447045088 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:55.447074890 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:55.447082996 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:55.447137117 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:55.447181940 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:55.447246075 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:55.458646059 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:55.458700895 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:55.458739042 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:55.458741903 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:55.458759069 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:55.458786964 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:55.458792925 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:55.458828926 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:55.458847046 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:55.458867073 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:55.458883047 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:55.458904982 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:55.458924055 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:55.458944082 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:55.458956957 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:55.458981037 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:55.459150076 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:55.459223986 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:55.459266901 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:55.459320068 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:55.460016012 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:55.460088968 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:55.774939060 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:55.774976015 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:55.774996042 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:55.775065899 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:55.775087118 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:55.775118113 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:55.775162935 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:55.775168896 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:55.775221109 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:55.775224924 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:55.775278091 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:55.775280952 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:55.775324106 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:55.775337934 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:55.775387049 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:55.775486946 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:55.775543928 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:55.775563002 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:55.775610924 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:55.775619984 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:55.775680065 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:55.775691032 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:55.775731087 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:55.775753021 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:55.775762081 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:55.775794983 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:55.775819063 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:55.775846004 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:55.775907993 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:55.775930882 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:55.775983095 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:55.776009083 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:55.776067019 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:55.776086092 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:55.776165009 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:55.776232004 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:55.776251078 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:55.776307106 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:55.776325941 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:55.776381969 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:55.776410103 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:55.776463032 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:55.776525974 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:55.776571035 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:55.776582003 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:55.776618004 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:55.776685953 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:55.776746035 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:55.776899099 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:55.776962042 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:55.777703047 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:55.777723074 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:55.777771950 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:55.777771950 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:55.777825117 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:55.777836084 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:55.777837038 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:55.777867079 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:55.777899027 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:55.777925014 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:55.777936935 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:55.777978897 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:55.778008938 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:55.778038979 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:55.778062105 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:55.778101921 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:55.778131962 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:55.778160095 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:55.778187990 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:55.778209925 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:55.778220892 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:55.778270960 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:55.778285980 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:55.778320074 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:55.778337002 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:55.778397083 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:55.778403044 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:55.778456926 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:55.778512955 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:55.778567076 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:55.778603077 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:55.778650045 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:55.778723955 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:55.778758049 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:55.778776884 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:55.778809071 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:55.778840065 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:55.778872013 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:55.778896093 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:55.778927088 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:55.778929949 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:55.778964996 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:55.778980970 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:55.779014111 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:55.779043913 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:55.779073000 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:55.779097080 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:55.779109001 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:55.779139042 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:55.779149055 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:55.779155016 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:55.779202938 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:55.779239893 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:55.779289007 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:55.779289007 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:55.779329062 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:55.779350996 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:55.779382944 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:55.779445887 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:55.779499054 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:55.779525995 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:55.779555082 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:55.779577017 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:55.779618025 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:55.779654980 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:55.779685020 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:55.779701948 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:55.779723883 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:55.779742956 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:55.779769897 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:55.779819012 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:55.779850006 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:55.779866934 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:55.779894114 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:55.779932976 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:55.779985905 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:55.780131102 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:55.780188084 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:55.780405045 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:55.780464888 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:55.780478954 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:55.780529022 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:55.780560017 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:55.780610085 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:55.780628920 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:55.780675888 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:55.780690908 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:55.780729055 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:55.780739069 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:55.780766010 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:55.780812979 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:55.780848980 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:55.780864000 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:55.780889988 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:55.780905962 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:55.780952930 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:55.780972004 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:55.781021118 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:55.781049967 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:55.781097889 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:55.781128883 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:55.781169891 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:55.781177044 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:55.781219006 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:55.781269073 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:55.781322002 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:55.781330109 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:55.781379938 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:55.781409979 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:55.781461000 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:55.781487942 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:55.781539917 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:55.781574011 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:55.781624079 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:55.781693935 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:55.781719923 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:55.781745911 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:55.781785011 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:55.781816006 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:55.781864882 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:55.781888962 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:55.781936884 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:55.781960964 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:55.782005072 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:55.782008886 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:55.782052994 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:55.782078028 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:55.782149076 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:55.782171011 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:55.782207966 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:55.782233000 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:55.782257080 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:55.782311916 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:55.782365084 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:56.089905024 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:56.089941025 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:56.089965105 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:56.089988947 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:56.089993954 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:56.090018034 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:56.090025902 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:56.090032101 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:56.090040922 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:56.090065002 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:56.090084076 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:56.090089083 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:56.090112925 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:56.090116978 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:56.090138912 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:56.090143919 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:56.090166092 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:56.090183973 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:56.090197086 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:56.090224028 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:56.090230942 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:56.090245008 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:56.090255976 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:56.090274096 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:56.090289116 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:56.090329885 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:56.090432882 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:56.090456009 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:56.090475082 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:56.090487957 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:56.090538025 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:56.090662956 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:56.090683937 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:56.090707064 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:56.090728998 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:56.090737104 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:56.090774059 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:56.090811014 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:56.090863943 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:56.090922117 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:56.090945959 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:56.090967894 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:56.091010094 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:56.091023922 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:56.091033936 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:56.091058969 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:56.091064930 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:56.091065884 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:56.091095924 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:56.091111898 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:56.091392994 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:56.091418982 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:56.091459990 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:56.092411041 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:56.092439890 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:56.092456102 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:56.092463017 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:56.092478991 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:56.092488050 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:56.092513084 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:56.092535973 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:56.092541933 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:56.092554092 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:56.092560053 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:56.092578888 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:56.092617989 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:56.092689037 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:56.092714071 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:56.092741966 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:56.092766047 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:56.092927933 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:56.092967033 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:56.092978954 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:56.092992067 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:56.093017101 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:56.093019962 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:56.093028069 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:56.093040943 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:56.093067884 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:56.093081951 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:56.093086004 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:56.093106985 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:56.093132019 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:56.093147993 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:56.093167067 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:56.093204975 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:56.093215942 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:56.093244076 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:56.093250036 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:56.093267918 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:56.093291044 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:56.093296051 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:56.093317032 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:56.093347073 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:56.093456030 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:56.093480110 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:56.093504906 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:56.093512058 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:56.093528032 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:56.093528032 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:56.093543053 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:56.093550920 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:56.093566895 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:56.093605042 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:56.093605995 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:56.093657970 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:56.093931913 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:56.093957901 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:56.093981981 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:56.093987942 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:56.094006062 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:56.094021082 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:56.094044924 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:56.094053030 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:56.094175100 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:56.094199896 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:56.094230890 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:56.094249964 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:56.094372034 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:56.094434977 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:56.094450951 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:56.094499111 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:56.094520092 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:56.094568968 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:56.094609976 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:56.094636917 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:56.094656944 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:56.094683886 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:56.094728947 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:56.094754934 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:56.094784975 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:56.094795942 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:56.094805956 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:56.094836950 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:56.094847918 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:56.094877005 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:56.094882965 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:56.094903946 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:56.094922066 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:56.094945908 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:56.094953060 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:56.094994068 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:56.095042944 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:56.095091105 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:56.095150948 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:56.095201969 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:56.095289946 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:56.095314980 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:56.095338106 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:56.095343113 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:56.095360994 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:56.095361948 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:56.095385075 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:56.095393896 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:56.095408916 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:56.095433950 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:56.095443964 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:56.095490932 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:56.095571041 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:56.095593929 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:56.095622063 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:56.095640898 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:56.095644951 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:56.095669031 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:56.095695019 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:56.095707893 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:56.095846891 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:56.095870018 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:56.095916033 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:56.096138000 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:56.096163988 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:56.096221924 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:56.096371889 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:56.096398115 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:56.096421957 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:56.096446037 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:56.096452951 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:56.096477032 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:56.096483946 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:56.096487999 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:56.096729994 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:56.096755981 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:56.096781969 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:56.096796036 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:56.096817017 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:56.096821070 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:56.096837997 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:56.096846104 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:56.096858978 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:56.096868992 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:56.096889973 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:56.096893072 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:56.096919060 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:56.096959114 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:56.405600071 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:56.405658960 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:56.405710936 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:56.405728102 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:56.405760050 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:56.405814886 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:56.405858994 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:56.405869007 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:56.405919075 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:56.405926943 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:56.405975103 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:56.405991077 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:56.406032085 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:56.406065941 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:56.406085014 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:56.406126022 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:56.406168938 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:56.406172991 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:56.406229973 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:56.406261921 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:56.406281948 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:56.406320095 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:56.406346083 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:56.406394005 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:56.406395912 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:56.406445026 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:56.406445980 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:56.406491995 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:56.406507969 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:56.406541109 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:56.406582117 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:56.406584978 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:56.406624079 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:56.406660080 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:56.406661034 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:56.406707048 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:56.406732082 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:56.406749010 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:56.406784058 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:56.406785965 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:56.406822920 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:56.406860113 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:56.406863928 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:56.406896114 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:56.406945944 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:56.407000065 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:56.407054901 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:56.407097101 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:56.407150984 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:56.407222986 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:56.407228947 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:56.407283068 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:56.407288074 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:56.407325029 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:56.407354116 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:56.407380104 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:56.407409906 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:56.407424927 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:56.407457113 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:56.407471895 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:56.407516003 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:56.407516956 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:56.407553911 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:56.407574892 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:56.407599926 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:56.407633066 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:56.407716036 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:56.407783985 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:56.407835007 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:56.407857895 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:56.407891035 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:56.407924891 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:56.407934904 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:56.407984018 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:56.407988071 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:56.408036947 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:56.408039093 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:56.408086061 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:56.408102989 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:56.408134937 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:56.408164024 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:56.408174038 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:56.408211946 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:56.408248901 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:56.408257961 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:56.408299923 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:56.408308029 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:56.408350945 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:56.408374071 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:56.408490896 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:56.408545017 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:56.408591032 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:56.408631086 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:56.408646107 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:56.408668995 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:56.408684969 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:56.408705950 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:56.408720016 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:56.408756018 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:56.408817053 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:56.408875942 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:56.408879042 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:56.408929110 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:56.408931017 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:56.408977032 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:56.408981085 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:56.409027100 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:56.409033060 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:56.409076929 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:56.409080982 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:56.409121990 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:56.409135103 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:56.409176111 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:56.409182072 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:56.409221888 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:56.409229040 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:56.409276962 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:56.409282923 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:56.409341097 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:56.409347057 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:56.409393072 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:56.409403086 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:56.409437895 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:56.409455061 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:56.409476995 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:56.409487009 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:56.409514904 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:56.409533978 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:56.409552097 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:56.409565926 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:56.409590006 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:56.409638882 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:56.409643888 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:56.409656048 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:56.409681082 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:56.409703970 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:56.409749031 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:56.409867048 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:56.409920931 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:56.409926891 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:56.409961939 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:56.409976006 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:56.410000086 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:56.410027027 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:56.410068989 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:56.410264969 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:56.410314083 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:56.410327911 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:56.410351038 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:56.410377026 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:56.410388947 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:56.410407066 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:56.410614967 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:56.410672903 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:56.410717964 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:56.410741091 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:56.410762072 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:56.411113024 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:56.411201000 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:56.411216974 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:56.411252022 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:56.411283970 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:56.411346912 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:56.411592960 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:56.411645889 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:56.411662102 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:56.411686897 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:56.411835909 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:56.411880016 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:56.721384048 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:56.721467018 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:56.721489906 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:56.721506119 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:56.721520901 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:56.721534014 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:56.721554995 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:56.721599102 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:56.721626997 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:56.721679926 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:56.721826077 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:56.721858978 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:56.721889019 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:56.721905947 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:56.722063065 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:56.722090960 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:56.722122908 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:56.722125053 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:56.722136021 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:56.722176075 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:56.723161936 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:56.723201036 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:56.723265886 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:56.723288059 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:56.723346949 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:56.723408937 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:56.725776911 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:56.725857019 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:56.727133989 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:56.727159023 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:56.727210045 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:56.727235079 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:56.727300882 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:56.727355957 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:56.727360964 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:56.727406025 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:56.727461100 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:56.727478981 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:56.727494955 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:56.727514982 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:56.727528095 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:56.727530003 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:56.727538109 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:56.727580070 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:56.727591991 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:56.727643013 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:56.727644920 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:56.727693081 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:56.727699041 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:56.727715969 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:56.727751017 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:56.727775097 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:56.727828979 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:56.727849007 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:56.727865934 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:56.727883101 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:56.727890015 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:56.727910042 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:56.727916002 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:56.727921009 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:56.727932930 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:56.727982044 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:56.727989912 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:56.728008032 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:56.728024960 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:56.728040934 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:56.728063107 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:56.728071928 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:56.728086948 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:56.728117943 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:56.728137016 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:56.728142977 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:56.728162050 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:56.728178024 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:56.728178978 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:56.728208065 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:56.728235960 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:56.728251934 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:56.728255033 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:56.728271961 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:56.728286982 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:56.728305101 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:56.728318930 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:56.728321075 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:56.728324890 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:56.728341103 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:56.728368998 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:56.728384972 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:56.728406906 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:56.728426933 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:56.728452921 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:56.728461027 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:56.728481054 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:56.728533983 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:56.728547096 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:56.728600025 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:56.728621960 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:56.728678942 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:56.728697062 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:56.728698969 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:56.728729963 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:56.728748083 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:56.728765965 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:56.728770018 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:56.728775024 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:56.728792906 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:56.728810072 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:56.728833914 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:56.728846073 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:56.728867054 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:56.728868961 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:56.728904009 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:56.728934050 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:56.728955984 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:56.728955984 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:56.728967905 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:56.728971958 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:56.728998899 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:56.729003906 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:56.729036093 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:56.729043961 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:56.729087114 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:56.729101896 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:56.729105949 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:56.729127884 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:56.729145050 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:56.729168892 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:56.729176998 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:56.729212046 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:56.729235888 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:56.729250908 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:56.729269028 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:56.729270935 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:56.729288101 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:56.729300976 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:56.729325056 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:56.729342937 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:56.729355097 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:56.729373932 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:56.729386091 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:56.729403973 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:56.729418993 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:56.729419947 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:56.729441881 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:56.729490995 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:56.730047941 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:56.730067968 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:56.730083942 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:56.730133057 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:56.730149031 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:56.730165005 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:56.730216026 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:56.730261087 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:56.730278015 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:56.730279922 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:56.730297089 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:56.730300903 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:56.730309010 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:56.730331898 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:56.730349064 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:56.730364084 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:56.730408907 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.036866903 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.036896944 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.036912918 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.036925077 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.036936998 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.036948919 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.036973953 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.036978960 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.036990881 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.037003040 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.037015915 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.037106037 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.037177086 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.037189960 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.037611961 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.037637949 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.037698984 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.037715912 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.040585995 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.040678978 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.041827917 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.041851997 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.041863918 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.041908979 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.041932106 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.042258978 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.042280912 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.042295933 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.042311907 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.042319059 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.042324066 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.042359114 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.042361975 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.042367935 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.042382956 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.042399883 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.042406082 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.042417049 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.042433023 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.042448997 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.042464972 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.042495012 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.042550087 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.042571068 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.042588949 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.042603970 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.042604923 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.042622089 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.042628050 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.042638063 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.042654037 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.042661905 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.042674065 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.042687893 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.042694092 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.042710066 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.042718887 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.042726994 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.042733908 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.042745113 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.042761087 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.042764902 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.042778015 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.042788029 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.042794943 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.042814016 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.042829037 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.042830944 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.042848110 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.042850018 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.042870998 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.042908907 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.042912960 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.042937040 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.042953968 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.042968035 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.042984009 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.042988062 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.043004036 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.043023109 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.043036938 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.043040037 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.043056965 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.043064117 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.043103933 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.043118954 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.043251991 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.043271065 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.043299913 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.043328047 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.043442965 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.043459892 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.043487072 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.043495893 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.043502092 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.043517113 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.043548107 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.043751955 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.043768883 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.043785095 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.043801069 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.043801069 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.043816090 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.043828964 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.043833017 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.043848038 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.043859959 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.043867111 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.043878078 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.043884039 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.043912888 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.043929100 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.043941021 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.043946981 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.043962955 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.043977022 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.043978930 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.043991089 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.043999910 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.044008970 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.044017076 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.044033051 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.044035912 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.044049978 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.044064999 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.044066906 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.044097900 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.044123888 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.044936895 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.044954062 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.044967890 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.044986963 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.044994116 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.045003891 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.045018911 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.045033932 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.045034885 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.045051098 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.045062065 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.045066118 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.045080900 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.045082092 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.045098066 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.045113087 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.045115948 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.045140982 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.045167923 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.351545095 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.351607084 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.351645947 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.351685047 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.351722956 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.351746082 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.351758957 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.351766109 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.351769924 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.351798058 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.351808071 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.351835966 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.351845980 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.351883888 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.351886988 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.351926088 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.351928949 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.351962090 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.351973057 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.351998091 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.352000952 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.352040052 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.352050066 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.352086067 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.356347084 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.356398106 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.356486082 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.356522083 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.356612921 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.356683016 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.356695890 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.356731892 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.356753111 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.356753111 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.356771946 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.356795073 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.356795073 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.356820107 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.356832981 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.356843948 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.356864929 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.356873989 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.356904030 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.356911898 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.356930017 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.356954098 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.356956005 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.356993914 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.357014894 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.357038975 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.357069969 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.357112885 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.357183933 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.357208967 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.357232094 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.357237101 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.357256889 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.357266903 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.357278109 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.357289076 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.357305050 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.357321024 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.357341051 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.357348919 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.357372999 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.357398033 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.357423067 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.357446909 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.357470036 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.357475996 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.357487917 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.357512951 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.357522011 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.357537985 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.357553959 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.357558966 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.357577085 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.357594013 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.357599020 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.357624054 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.357633114 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.357645988 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.357657909 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.357670069 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.357693911 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.357702971 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.357717991 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.357737064 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.357741117 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.357763052 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.357769966 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.357785940 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.357805014 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.357810974 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.357835054 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.357844114 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.357858896 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.357881069 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.357882023 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.357903957 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.357918978 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.357925892 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.357949018 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.357964993 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.358005047 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.358047009 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.358072042 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.358093977 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.358094931 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.358117104 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.358138084 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.358174086 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.358252048 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.358275890 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.358298063 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.358309031 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.358320951 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.358344078 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.358351946 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.358367920 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.358376980 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.358392954 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.358402967 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.358416080 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.358417988 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.358442068 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.358449936 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.358465910 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.358474016 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.358489037 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.358511925 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.358515978 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.358534098 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.358555079 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.358556986 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.358567953 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.358594894 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.359680891 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.359755993 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.359766006 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.359790087 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.359812975 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.359827042 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.359836102 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.359850883 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.359857082 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.359878063 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.359878063 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.359904051 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.359915018 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.359925985 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.359947920 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.359957933 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.359968901 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.359989882 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.360002995 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.360033035 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.360069036 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.666517019 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.666572094 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.666620970 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.666640997 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.666663885 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.666663885 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.666685104 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.666702032 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.666713953 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.666740894 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.666745901 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.666779995 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.666779995 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.666816950 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.666826963 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.666853905 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.666856050 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.666892052 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.666896105 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.666933060 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.666938066 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.666980982 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.666997910 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.667018890 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.667031050 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.667057991 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.667063951 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.667094946 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.667140007 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.667145014 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.667160034 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.667196989 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.667201996 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.667233944 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.667236090 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.667270899 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.667282104 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.667314053 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.667318106 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.667361021 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.667361975 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.667398930 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.667402029 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.667443037 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.671252966 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.671293974 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.671333075 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.671345949 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.671364069 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.671370983 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.671391964 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.671408892 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.671415091 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.671449900 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.671449900 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.671488047 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.671489954 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.671525955 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.671535015 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.671577930 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.671577930 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.671614885 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.671621084 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.671653986 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.671655893 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.671690941 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.671694994 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.671727896 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.671732903 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.671766043 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.671767950 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.671803951 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.671804905 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.671858072 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.671897888 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.671938896 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.671941996 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.671977997 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.671978951 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.672015905 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.672018051 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.672054052 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.672055006 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.672090054 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.672092915 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.672127962 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.672130108 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.672166109 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.672167063 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.672209024 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.672211885 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.672255039 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.672257900 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.672291994 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.672293901 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.672329903 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.672333002 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.672368050 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.672388077 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.672414064 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.672431946 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.672449112 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.672451973 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.672489882 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.672492027 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.672525883 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.672529936 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.672564030 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.672566891 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.672602892 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.672604084 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.672642946 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.672648907 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.672689915 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.672691107 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.672728062 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.672730923 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.672765017 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.672766924 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.672802925 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.672805071 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.672840118 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.672842026 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.672877073 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.672883034 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.672915936 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.672919989 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.672955036 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.672971010 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.673012018 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.673012972 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.673049927 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.673052073 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.673089027 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.673089027 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.673126936 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.673132896 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.673165083 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.673166990 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.673202991 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.673204899 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.673240900 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.673243999 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.673280001 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.673288107 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.673330069 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.673336029 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.673367977 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.673369884 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.673404932 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.673405886 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.673444033 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.673444986 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.673480988 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.673482895 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.673518896 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.673523903 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.673556089 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.673561096 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.673595905 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.673604012 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.673643112 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.673645973 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.673681974 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.673685074 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.673719883 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.673722029 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.673758030 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.673758984 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.673795938 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.673799992 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.673836946 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.673837900 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.673875093 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.673876047 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.673911095 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.673921108 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.673960924 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.673963070 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.674000025 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.674002886 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.674036980 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.674037933 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.674076080 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.674076080 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.674110889 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.674113035 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.674149036 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.674149990 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.674186945 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.674189091 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.674226046 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.674233913 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.674273968 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.674276114 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.674314022 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.674314022 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.674352884 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.674355030 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.674391985 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.674392939 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.674431086 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.674432039 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.674468040 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.674468994 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.674504995 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.674506903 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.674546003 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.674551964 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.674592018 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.674592972 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.674629927 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.674635887 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.674668074 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.674669027 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.674705029 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.674706936 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.674741983 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.674742937 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.674778938 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.674782038 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.674817085 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.674818993 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.674854994 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.674863100 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.674901962 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.674905062 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.674942017 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.674942970 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.674979925 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.674983978 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.675017118 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.675018072 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.675054073 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.675055027 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.675091982 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.675092936 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.675132990 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.675173998 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.675214052 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.675215006 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.675255060 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.675261974 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.675302029 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.675302982 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.675339937 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.675343990 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.675379038 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.675380945 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.675421000 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.675427914 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.675457954 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.675468922 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.675496101 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.675502062 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.675533056 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.675543070 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.675573111 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.675580025 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.675621986 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.675622940 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.675658941 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.675661087 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.675697088 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.675699949 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.675734043 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.675736904 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.675771952 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.675776005 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.675808907 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.675812960 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.675846100 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.675851107 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.675890923 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.675892115 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.675934076 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.675934076 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.675971031 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.675975084 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.676008940 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.676014900 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.676047087 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.676052094 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.676083088 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.676094055 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.676121950 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.676127911 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.676158905 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.676165104 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.676202059 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.676206112 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.676246881 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.676250935 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.676284075 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.676294088 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.676321983 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.676335096 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.676367998 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.676371098 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.676404953 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.676435947 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.676445007 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.676454067 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.676481009 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.676485062 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.676522970 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.676527977 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.676569939 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.676569939 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.676606894 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.676616907 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.676645041 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.676655054 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.676695108 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.676696062 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.676732063 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.676742077 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.676770926 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.676781893 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.676809072 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.676814079 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.676868916 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.676872969 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.676913023 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.676913977 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.676949978 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.676955938 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.676991940 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.676997900 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.677038908 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.677042961 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.677076101 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.677087069 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.677115917 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.677118063 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.677159071 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.981579065 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.981615067 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.981650114 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.981672049 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.981692076 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.981714010 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.981769085 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.981872082 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.981894016 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.981914997 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.981918097 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.981942892 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.981959105 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.982031107 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.982038021 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.982079029 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.982101917 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.982150078 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.982218981 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.982224941 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.982228041 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.982275009 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.982399940 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.982471943 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.982563019 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.982675076 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.982764006 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.982816935 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.982912064 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.983052015 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.983155012 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.983176947 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.983201027 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.983237028 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.983303070 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.983324051 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.983345032 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.983366013 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.983377934 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.983381987 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.983383894 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.983391047 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.983412027 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.983433008 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.983433962 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.983531952 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.983536005 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.992290974 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.992321014 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.992342949 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.992364883 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.992386103 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.992405891 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.992408991 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.992429972 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.992454052 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.992475986 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.992475986 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.992500067 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.992503881 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.992547035 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.992547035 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.992568970 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.992588043 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.992589951 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.992610931 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.992626905 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.992630959 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.992655993 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.992666006 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.992676973 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.992696047 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.992697954 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.992718935 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.992738008 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.992739916 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.992760897 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.992775917 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.992782116 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.992799997 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.992804050 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.992829084 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.992837906 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.992873907 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.992944002 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.992965937 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.992985964 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.993005991 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.993020058 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.993027925 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.993046999 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.993072987 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.993343115 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.993381977 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.993390083 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.993405104 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.993424892 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.993434906 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.993467093 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.993604898 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.993649006 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.993674040 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.993696928 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.993715048 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.993717909 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.993741035 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.993756056 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.993761063 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.993782997 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.993792057 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.993803978 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.993828058 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.993829012 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.993850946 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.993870974 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.993871927 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.993892908 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.993896961 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.993915081 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.993935108 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.993936062 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.993957996 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.993973970 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.993980885 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.994005919 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.994007111 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.994029045 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.994045973 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.994049072 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.994070053 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.994081020 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.994115114 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.994221926 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.994266987 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.994359970 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.994404078 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.994524956 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.994546890 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.994568110 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.994568110 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.994589090 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.994612932 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.994615078 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.994636059 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.994651079 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.994657040 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.994678020 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.994678974 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.994699955 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.994710922 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.994719982 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.994741917 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.994756937 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.994761944 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.994785070 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.994786978 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.994808912 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.994821072 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.994828939 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.994851112 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.994870901 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.994873047 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.994891882 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.994894028 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.994936943 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.994961023 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.995002985 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.995085001 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.995142937 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.995342970 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.995389938 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.995393038 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.995414019 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.995439053 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.995445967 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.995462894 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.995488882 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.995488882 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.995501995 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.995511055 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.995541096 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.995553017 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.995563984 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.995584011 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.995585918 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.995604992 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.995628119 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.995635986 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.995647907 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.995675087 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.995676041 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.995699883 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.995734930 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.995776892 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.995804071 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.995816946 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.995825052 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.995846033 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.995853901 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.995866060 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.995877028 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.995887041 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.995899916 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.995935917 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.995954990 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.995982885 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.995996952 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.996006966 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.996027946 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.996032953 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.996048927 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.996061087 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.996069908 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.996089935 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.996098042 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.996118069 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.996129036 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.996145010 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.996165991 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.996166945 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.996187925 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.996211052 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.996222019 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.996238947 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.996265888 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.996275902 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.996287107 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.996303082 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.996310949 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.996329069 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.996330976 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.996352911 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.996352911 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.996371984 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.996380091 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.996393919 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.996412039 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.996414900 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.996438026 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.996450901 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.996459961 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.996475935 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.996484041 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.996506929 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.996509075 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.996527910 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.996536016 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.996547937 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.996561050 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.996568918 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.996589899 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.996593952 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.996612072 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.996627092 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.996634960 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.996666908 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.996694088 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.996706009 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.996718884 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.996732950 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.996742010 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.996761084 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.996762991 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.996784925 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.996790886 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.996805906 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.996814966 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.996828079 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.996843100 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.996850014 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.996871948 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.996877909 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.996896029 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.996918917 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.996922016 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.996939898 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.996961117 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.996965885 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.996983051 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.997004986 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.997010946 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.997031927 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.997033119 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.997085094 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.997174978 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.997222900 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.997296095 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.997342110 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.997395039 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.997417927 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.997437000 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.997473001 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.997478008 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.997499943 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.997520924 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:57.997524023 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:57.997561932 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:58.296375990 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.296397924 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.296412945 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.296442032 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.296458006 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.296473980 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.296477079 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:58.296504974 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.296519995 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:58.296521902 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.296566010 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:58.296875000 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.296901941 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.296947002 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:58.296997070 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:58.298800945 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.298820019 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.298832893 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.298844099 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.298857927 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.298867941 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:58.298870087 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.298882961 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.298894882 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.298907995 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.298913002 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:58.298919916 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.298933029 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.298943996 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.298957109 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.298959970 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:58.298969030 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.299004078 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:58.299012899 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.299048901 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:58.299063921 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.299082994 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:58.299113035 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:58.299148083 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:58.299169064 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.299243927 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:58.299288988 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.299340963 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:58.307903051 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.307925940 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.307944059 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.307972908 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.308001041 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:58.308017969 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.308043003 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:58.308043957 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.308063984 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.308084011 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:58.308089018 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.308109045 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.308126926 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:58.308128119 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.308150053 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.308170080 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.308176041 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:58.308187962 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.308206081 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:58.308208942 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.308213949 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:58.308228970 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.308248997 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:58.308253050 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.308274984 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.308294058 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.308296919 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:58.308309078 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.308327913 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.308330059 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:58.308339119 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:58.308342934 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.308358908 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:58.308362961 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.308382988 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.308402061 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.308402061 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:58.308420897 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.308442116 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:58.308444977 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.308453083 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:58.308461905 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:58.308465958 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:58.308466911 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.308481932 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.308501959 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:58.308501959 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.308521032 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.308532000 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:58.308543921 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.308554888 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:58.308566093 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.308581114 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:58.308635950 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:58.311669111 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.311691046 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.311742067 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:58.311783075 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:58.311835051 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.311860085 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.311881065 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.311899900 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.311918020 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.311940908 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.311961889 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.311975956 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.311995029 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.312007904 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:58.312015057 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.312042952 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.312063932 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.312071085 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:58.312079906 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:58.312086105 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:58.312091112 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.312112093 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:58.312113047 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.312131882 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.312145948 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.312160969 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.312175035 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.312189102 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.312202930 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.312213898 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:58.312222004 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.312246084 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.312253952 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:58.312266111 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.312271118 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:58.312285900 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.312298059 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:58.312304020 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.312334061 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.312340021 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:58.312354088 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.312372923 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.312381029 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:58.312419891 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:58.312588930 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.312613010 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.312668085 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:58.312702894 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.312782049 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.312794924 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:58.312839031 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:58.312936068 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.313034058 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:58.313150883 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.313195944 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.313251019 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:58.313261032 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:58.313266039 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.313354969 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.313359976 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:58.313412905 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.313474894 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:58.313622952 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:58.313911915 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.313932896 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.313951969 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.313971996 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.313990116 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:58.313992023 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.314002037 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:58.314013004 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.314016104 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:58.314037085 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.314053059 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.314062119 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:58.314066887 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.314080954 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.314100981 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.314119101 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.314137936 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.314141035 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:58.314161062 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.314166069 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:58.314177036 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:58.314181089 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.314192057 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:58.314201117 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.314219952 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.314234972 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.314250946 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:58.314258099 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.314279079 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.314300060 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.314299107 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:58.314318895 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.314330101 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:58.314337969 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.314356089 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:58.314357042 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.314376116 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.314393997 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.314399004 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:58.314415932 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.314433098 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:58.314436913 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.314449072 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:58.314455986 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.314483881 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.314485073 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:58.314502954 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.314521074 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.314533949 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:58.314541101 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.314553976 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:58.314559937 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.314583063 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.314599991 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:58.314603090 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.314616919 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:58.314620972 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.314640045 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.314655066 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:58.314659119 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.314677000 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.314694881 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.314698935 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:58.314713001 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:58.314713955 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.314735889 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.314755917 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:58.314758062 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.314775944 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.314784050 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:58.314796925 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.314814091 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:58.314815998 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.314834118 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.314848900 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:58.314852953 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.314871073 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.314883947 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:58.314893961 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.314901114 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:58.314914942 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.314934015 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.314946890 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:58.314951897 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.314970016 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.314982891 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:58.314987898 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.315001965 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:58.315007925 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.315026999 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.315042019 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:58.315049887 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.315069914 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.315079927 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:58.315088987 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.315099001 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:58.315107107 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.315141916 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.315151930 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:58.315160036 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.315177917 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.315180063 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:58.315196991 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.315206051 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:58.315215111 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.315237045 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.315243959 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:58.315263987 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:58.315264940 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.315284014 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.315306902 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:58.315306902 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.315329075 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.315345049 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:58.315377951 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:58.315397978 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.315417051 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.315435886 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.315448046 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:58.315457106 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.315489054 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:58.315496922 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:58.315532923 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:58.610758066 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.610788107 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.610812902 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.610836029 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.610857010 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.610879898 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.610928059 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.610949993 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.611360073 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:58.611376047 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:58.611377954 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:58.611380100 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:58.611382008 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:58.611383915 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:58.612283945 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.612308979 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.614496946 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:58.614507914 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:58.615042925 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.615066051 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.615089893 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.615120888 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.615144968 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.615166903 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:58.615166903 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.615180969 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:58.615184069 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:58.615228891 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.615252018 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.615273952 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.615297079 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.615319967 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.615341902 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.615366936 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.615379095 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:58.615382910 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:58.615385056 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:58.615386963 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:58.615390062 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:58.615391970 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:58.615394115 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.615416050 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.615968943 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:58.615974903 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:58.615977049 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:58.623706102 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.623740911 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.623763084 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.623784065 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.623806000 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.623828888 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.623850107 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.623874903 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.623897076 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.623918056 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.623939991 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.623944044 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:58.623953104 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:58.623955011 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:58.623956919 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:58.623959064 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:58.623960972 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:58.623961926 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.623963118 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:58.623982906 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.624005079 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.624026060 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.624051094 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.624073029 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.624094009 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.624114990 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.624133110 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.624141932 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:58.624145031 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:58.624146938 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:58.624147892 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:58.624150038 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:58.624150991 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:58.624159098 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.624182940 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.624206066 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.624228954 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.624252081 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.624274015 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.624296904 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.624319077 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.624326944 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:58.624330044 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:58.624330997 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:58.624332905 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:58.624334097 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:58.624336004 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.624336004 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:58.624339104 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:58.624357939 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.624380112 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.624401093 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.624423027 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.624447107 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.626158953 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.626182079 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.626219988 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:58.626230001 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:58.626233101 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:58.626235008 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:58.626235962 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:58.626252890 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:58.626255035 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:58.626373053 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.626395941 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.626418114 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.626439095 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.626473904 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:58.626477003 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:58.626477957 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:58.626492977 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.626530886 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.626693010 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.626715899 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.626738071 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.626760006 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.626784086 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.626806021 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.626827002 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.626828909 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:58.626833916 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:58.626836061 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:58.626837969 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:58.626838923 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:58.626841068 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:58.626842022 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:58.626851082 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.626873016 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.626894951 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.626916885 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.626939058 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.626964092 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.626979113 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:58.626981020 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:58.626982927 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:58.626985073 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:58.626986027 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.626986980 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:58.626988888 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:58.626990080 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:58.627007961 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.627029896 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.627052069 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.627072096 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.627094030 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.627124071 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.627141953 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:58.627146006 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:58.627149105 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:58.627150059 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:58.627151966 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:58.627155066 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:58.627156973 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:58.627163887 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.627186060 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.627614021 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.627640963 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.628180981 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.628206015 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.628227949 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:58.628227949 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.628231049 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:58.628247023 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:58.628248930 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:58.628251076 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.628251076 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:58.628253937 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:58.628254890 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:58.629825115 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.629863977 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.629885912 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.629908085 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.629923105 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:58.629928112 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:58.629930019 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.629939079 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:58.629940987 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:58.629944086 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:58.629956007 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.629977942 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.629998922 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.630021095 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.630044937 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.630065918 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.630074978 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:58.630076885 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:58.630079031 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:58.630080938 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:58.630083084 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:58.630084991 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:58.630089998 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.630111933 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.630136013 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.630158901 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.630181074 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.630203962 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.630224943 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.630235910 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:58.630239010 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:58.630240917 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:58.630243063 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:58.630245924 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:58.630245924 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.630248070 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:58.630259991 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:58.630261898 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:58.630268097 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.630290031 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.630314112 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.630336046 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.630357027 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.630378008 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.630399942 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.630409956 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:58.630412102 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:58.630414009 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:58.630415916 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:58.630417109 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:58.630424023 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.630446911 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.630469084 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.630486965 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.630512953 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:58.630516052 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:58.630527020 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.630548000 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.630569935 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.630588055 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.630604982 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.630620956 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.630639076 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.630660057 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.630692005 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:58.630697012 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:58.630698919 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:58.630701065 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:58.630702019 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:58.630703926 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:58.631150961 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:58.631782055 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.631808996 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.631830931 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.631855965 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.631877899 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.631899118 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.631962061 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.631984949 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.632005930 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.632024050 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.632035971 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:58.632040024 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:58.632041931 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:58.632044077 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:58.632046938 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.632069111 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.632070065 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:58.632072926 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:58.632074118 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:58.632076025 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:58.632086992 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.632110119 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.632133007 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.632150888 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.632174969 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.632193089 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.632215023 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.632225990 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:58.632229090 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:58.632230997 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:58.632232904 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:58.632234097 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:58.632239103 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.632261038 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.632283926 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.632308960 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.632329941 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.632354021 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.632375956 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.632397890 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.632421017 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.632422924 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:58.632425070 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:58.632426977 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:58.632428885 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:58.632430077 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:58.632442951 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:58.632445097 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:58.632445097 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.632519960 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:58.632536888 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.632560015 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.632586956 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.632607937 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.632630110 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.632651091 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.632675886 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.632700920 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.632711887 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:58.632715940 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:58.632718086 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:58.632725000 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.632747889 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.632765055 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.632781982 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.632798910 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.638483047 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:58.638498068 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:58.638514996 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:58.925935030 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.925964117 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.925987959 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.926011086 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.926031113 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.926050901 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.926074028 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.926095009 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.926150084 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:58.926165104 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:58.926167011 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:58.926168919 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:58.928833008 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.928855896 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.929721117 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.929744959 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.929768085 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.929790974 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.929812908 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:58.929838896 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:58.929843903 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:58.930057049 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.930080891 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.930103064 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.930140018 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.930161953 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.930182934 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.930197001 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:58.930203915 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.930206060 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:58.930208921 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:58.930211067 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:58.930212975 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:58.930227041 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.930248022 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.930273056 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.930294991 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.930315971 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.930519104 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:58.930524111 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:58.930526972 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:58.930529118 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:58.930531025 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:58.938611984 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.938637972 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.938661098 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.938684940 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.938754082 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.938776016 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.938797951 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.938821077 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.938843012 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.938865900 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.938888073 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.938913107 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.938922882 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:58.938936949 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.938939095 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:58.938941956 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:58.938942909 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:58.938945055 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:58.938946962 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:58.938960075 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.938982010 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.939004898 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.939028025 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.939049959 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.939073086 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.939097881 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.939141035 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.939153910 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:58.939156055 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:58.939157963 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:58.939160109 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:58.939162016 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:58.939165115 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:58.939165115 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.939167023 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:58.939188957 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.939213037 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.939235926 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.939258099 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.939802885 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:58.939810991 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:58.939814091 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:58.939815998 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:58.940581083 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.940606117 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.940628052 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.940650940 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.940673113 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.940694094 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.940715075 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.940731049 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:58.940733910 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:58.940737009 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:58.940737009 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.940758944 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.940781116 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.940918922 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.940943956 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.940960884 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.940982103 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.941049099 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:58.941054106 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:58.941056967 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:58.941059113 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:58.941061020 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:58.941068888 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:58.941422939 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.941446066 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.941467047 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.941492081 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.941514969 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.941535950 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.941556931 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.941561937 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:58.941565037 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:58.941567898 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:58.941577911 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.941600084 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.941621065 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.941643000 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.941668034 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.941689968 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.941710949 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.941740990 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:58.941745043 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:58.941746950 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:58.941747904 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:58.941750050 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:58.941751957 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:58.941833973 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.941868067 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.941890001 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.941911936 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.941934109 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.941955090 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.941973925 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:58.941977024 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.941987991 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:58.941991091 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:58.941992998 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:58.942502975 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:58.942506075 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:58.942528009 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.942552090 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.942573071 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.942662954 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.942684889 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.942708015 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.944966078 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.944991112 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.945013046 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.945038080 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.945060968 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.945080996 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.945101976 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.945115089 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:58.945125103 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.945130110 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:58.945133924 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:58.945136070 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:58.945146084 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.945157051 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:58.945161104 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:58.945163012 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:58.945167065 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:58.945168018 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.945189953 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.945216894 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.945239067 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.945259094 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.945281029 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.945303917 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.945324898 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.945327044 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:58.945332050 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:58.945336103 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:58.945338011 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:58.945339918 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:58.946506023 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:58.946521044 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:58.947874069 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.947896957 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.948074102 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.948098898 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.948121071 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.948142052 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.948163986 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.948184967 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.948205948 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.948215008 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:58.948221922 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:58.948225021 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:58.948225975 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:58.948226929 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.948227882 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:58.948230028 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:58.948247910 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.948272943 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.948295116 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.948317051 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.948338985 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.948360920 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.948383093 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.948399067 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:58.948402882 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:58.948404074 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.948405027 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:58.948407888 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:58.948410034 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:58.948410988 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:58.948425055 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.948448896 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.948472023 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.948493004 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.948514938 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.948538065 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.948558092 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.948580027 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.948596001 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:58.948599100 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:58.948601007 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:58.948601007 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.948602915 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:58.948605061 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:58.948606968 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:58.948625088 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.948642969 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.948659897 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.948677063 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.948698997 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.948720932 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.948740959 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.948765039 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.948786020 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:58.948786974 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.948791027 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:58.948803902 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:58.948807955 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:58.948807955 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.948816061 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:58.948817968 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:58.948828936 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.948849916 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.948870897 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.948892117 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.948913097 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.948936939 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.948954105 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:58.948957920 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:58.948957920 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.948960066 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:58.948967934 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:58.948975086 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:58.948978901 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.949001074 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.949022055 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.949043036 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.949064016 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.949085951 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.949110031 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.949131012 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.949139118 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:58.949142933 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:58.949145079 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:58.949147940 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:58.949151993 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.949158907 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:58.949162006 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:58.949172974 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.949213982 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:58.952722073 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:58.952795982 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.952820063 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.952841043 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.952872038 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.952893019 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.952914000 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.952938080 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.952960014 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.952980995 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.952996969 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:58.953002930 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.953005075 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:58.953007936 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:58.953015089 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:58.953023911 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:58.953025103 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.953046083 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:58.955606937 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:58.955614090 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:58.955619097 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:59.240753889 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:59.240792036 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:59.240817070 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:59.240839958 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:59.240861893 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:59.240884066 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:59.240902901 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:59.240922928 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:59.242428064 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:59.242449999 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:59.242453098 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:59.243921041 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:59.243951082 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:59.243977070 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:59.244002104 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:59.244425058 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:59.244452000 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:59.244474888 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:59.244556904 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:59.244569063 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:59.244570971 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:59.244575977 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:59.244577885 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:59.244636059 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:59.244659901 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:59.244680882 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:59.244704008 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:59.244898081 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:59.244924068 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:59.244946003 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:59.244967937 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:59.244993925 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:59.245019913 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:59.246624947 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:59.246637106 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:59.246639013 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:59.246640921 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:59.246644020 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:59.246645927 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:59.253536940 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:59.253566027 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:59.253587008 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:59.253611088 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:59.253698111 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:59.253720999 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:59.253743887 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:59.253765106 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:59.253787041 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:59.253812075 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:59.253834009 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:59.253854990 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:59.253864050 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:59.253873110 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:59.253875017 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:59.253876925 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:59.253878117 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:59.253879070 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:59.253880978 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:59.253882885 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:59.253900051 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:59.253921032 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:59.253942013 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:59.253963947 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:59.253988028 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:59.254007101 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:59.254028082 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:59.254045010 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:59.254062891 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:59.254125118 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:59.254127979 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:59.254128933 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:59.254131079 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:59.254132986 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:59.254133940 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:59.254134893 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:59.254177094 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:59.254199028 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:59.254224062 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:59.254246950 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:59.254270077 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:59.255280018 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:59.255302906 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:59.255326033 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:59.255347967 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:59.255369902 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:59.255390882 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:59.255392075 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:59.255409002 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:59.255412102 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:59.255415916 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:59.255419016 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:59.255422115 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:59.255439043 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:59.255460024 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:59.255481958 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:59.255503893 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:59.255523920 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:59.255563021 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:59.255584955 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:59.255630016 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:59.255633116 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:59.255635023 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:59.255637884 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:59.255640984 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:59.255641937 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:59.255649090 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:59.256021976 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:59.256045103 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:59.256068945 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:59.256092072 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:59.256113052 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:59.256134033 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:59.256155968 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:59.256176949 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:59.256197929 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:59.256220102 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:59.256243944 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:59.256263971 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:59.256266117 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:59.256267071 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:59.256269932 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:59.256272078 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:59.256288052 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:59.256309986 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:59.256331921 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:59.256352901 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:59.256375074 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:59.256396055 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:59.256486893 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:59.256494999 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:59.256498098 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:59.256500959 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:59.256501913 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:59.256504059 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:59.256625891 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:59.256649017 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:59.259632111 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:59.259658098 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:59.259680033 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:59.259701014 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:59.259721994 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:59.259725094 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:59.259743929 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:59.259752035 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:59.259754896 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:59.259766102 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:59.259790897 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:59.259814024 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:59.259835958 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:59.260080099 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:59.260087967 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:59.260091066 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:59.260093927 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:59.260096073 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:59.263660908 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:59.263690948 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:59.263712883 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:59.263730049 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:59.263746977 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:59.263751030 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:59.263761997 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:59.263777971 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:59.263793945 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:59.263813019 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:59.263813019 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:59.263830900 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:59.263847113 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:59.263849974 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:59.263863087 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:59.263880014 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:59.263881922 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:59.263895988 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:59.263900995 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:59.263909101 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:59.263925076 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:59.263928890 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:59.263942003 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:59.263957024 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:59.263972998 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:59.263977051 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:59.263988972 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:59.264003992 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:59.264004946 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:59.264024019 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:59.264038086 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:59.264041901 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:59.264059067 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:59.264075994 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:59.264092922 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:59.264122963 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:59.264141083 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:59.264142036 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:59.264144897 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:59.264147043 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:59.264148951 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:59.264152050 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:59.264173985 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:59.264189005 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:59.264195919 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:59.264214039 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:59.264233112 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:59.264247894 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:59.264265060 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:59.264276981 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:59.264288902 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:59.264301062 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:59.264312983 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:59.264316082 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:59.264317036 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:59.264319897 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:59.264322042 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:59.264323950 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:59.264334917 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:59.264344931 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:59.264352083 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:59.264369011 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:59.264384031 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:59.264385939 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:59.264405012 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:59.264420986 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:59.264425039 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:59.264441013 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:59.264456034 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:59.264478922 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:59.264489889 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:59.264494896 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:59.264497995 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:59.264513969 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:59.264528990 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:59.264545918 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:59.264547110 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:59.264549971 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:59.264561892 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:59.264579058 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:59.264600039 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:59.264620066 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:59.264622927 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:59.264624119 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:59.264626980 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:59.264642954 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:59.264659882 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:59.264672995 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:59.264688969 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:59.264708042 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:59.264723063 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:59.264728069 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:59.264729977 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:59.264729977 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:59.264760971 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:59.264806032 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:59.264810085 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:59.267323017 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:59.267343998 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:59.267359018 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:59.267378092 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:59.267395973 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:59.267411947 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:59.267424107 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:59.267440081 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:59.267458916 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:59.267460108 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:59.267473936 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:59.267477036 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:59.267508984 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:59.267533064 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:59.269814968 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:59.269844055 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:59.269973040 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:59.269987106 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:59.269989967 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:59.270057917 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:59.557085037 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:59.557116032 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:59.557199955 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:59.557255030 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:59.557284117 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:59.557362080 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:59.557382107 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:59.557435989 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:59.557563066 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:59.557660103 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:59.557673931 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:59.557765961 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:59.558825970 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:59.558862925 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:59.558969975 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:59.559037924 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:59.559144020 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:59.559245110 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:59.559319019 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:59.559367895 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:59.559381962 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:59.559385061 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:59.559396982 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:59.560954094 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:59.561264038 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:59.561286926 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:59.561362028 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:59.561387062 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:59.561402082 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:59.561443090 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:59.561491966 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:59.561543941 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:59.561548948 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:59.561563015 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:59.561599970 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:59.561635971 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:59.561678886 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:59.561738014 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:59.561743975 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:59.561747074 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:59.568602085 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:59.568650007 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:59.568715096 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:59.568769932 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:59.568778992 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:59.568780899 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:59.568783998 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:59.568837881 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:59.568871975 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:59.568922997 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:59.568938971 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:59.568948030 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:59.568949938 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:59.569001913 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:59.569077015 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:59.569113970 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:59.569140911 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:59.569148064 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:59.569237947 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:59.569318056 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:59.569396973 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:59.569421053 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:59.569430113 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:59.569442987 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:59.570138931 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:59.570199966 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:59.570265055 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:59.570276022 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:59.570281029 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:59.570358992 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:59.570436954 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:59.570518970 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:59.570555925 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:59.570583105 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:59.570590973 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:59.570593119 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:59.570635080 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:59.571011066 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:59.571177006 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:59.571316004 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:59.571357012 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:59.571482897 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:59.571536064 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:59.571547031 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:59.571605921 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:59.571639061 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:59.571696997 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:59.571703911 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:59.571718931 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:59.571799994 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:59.571835995 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:59.571882963 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:59.571906090 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:59.571913004 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:59.571938992 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:59.572000027 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:59.572031975 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:59.572051048 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:59.572052002 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:59.572201014 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:59.572277069 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:59.572312117 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:59.572360992 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:59.572379112 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:59.572432041 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:59.572460890 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:59.572468996 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:59.572510004 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:59.572562933 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:59.572566986 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:59.572611094 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:59.572643042 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:59.572648048 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:59.572688103 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:59.572690010 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:59.572721958 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:59.572843075 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:59.572894096 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:59.572906971 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:59.572971106 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:59.573003054 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:59.573038101 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:59.573079109 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:59.573101044 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:59.573163033 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:59.573200941 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:59.573235989 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:59.573239088 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:59.573272943 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:59.573278904 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:59.573317051 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:59.573324919 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:59.573333025 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:59.573393106 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:59.579796076 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:59.579824924 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:59.579885960 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:59.579911947 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:59.579958916 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:59.580010891 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:59.580024958 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:59.580038071 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:59.580075979 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:59.580118895 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:59.580120087 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:59.580125093 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:59.580127001 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:59.580209970 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:59.580241919 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:59.580280066 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:59.580373049 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:59.580382109 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:59.580389977 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:59.580391884 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:59.580415010 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:59.580427885 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:59.580481052 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:59.580516100 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:59.580562115 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:59.580584049 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:59.580615997 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:59.580636024 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:59.580679893 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:59.580705881 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:59.580712080 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:59.580766916 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:59.580801964 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:59.580806017 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:59.580837011 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:59.580879927 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:59.580881119 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:59.580920935 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:59.580964088 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:59.581000090 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:59.581001043 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:59.581032991 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:59.581041098 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:59.581120968 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:59.581156015 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:59.581162930 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:59.581192017 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:59.581222057 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:59.581279993 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:59.581319094 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:59.581402063 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:59.581442118 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:59.581522942 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:59.581526995 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:59.581535101 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:59.581562042 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:59.581562996 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:59.581599951 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:59.581664085 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:59.581684113 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:59.581752062 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:59.581803083 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:59.581866980 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:59.581881046 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:59.581942081 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:59.582000017 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:59.582006931 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:59.582009077 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:59.582043886 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:59.582068920 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:59.582118988 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:59.582125902 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:59.582201004 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:59.582226992 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:59.582256079 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:59.582267046 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:59.582359076 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:59.582365990 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:59.582406044 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:59.582420111 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:59.582439899 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:59.582463026 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:59.582482100 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:59.582566977 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:59.582603931 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:59.582663059 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:59.582681894 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:59.582762957 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:59.582767010 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:59.582807064 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:59.582885027 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:59.582946062 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:59.582951069 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:59.583000898 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:59.583054066 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:59.583084106 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:59.583090067 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:59.583163977 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:59.583201885 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:59.583250999 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:59.583318949 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:59.583327055 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:59.583365917 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:59.583441019 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:59.583527088 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:59.583538055 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:59.583544970 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:59.583558083 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:59.583578110 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:59.583597898 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:59.583678007 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:59.583739996 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:59.583791018 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:59.583797932 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:59.583823919 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:59.583865881 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:59.583918095 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:59.583921909 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:59.583923101 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:59.583924055 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:59.583960056 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:59.584001064 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:59.584043026 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:59.584120989 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:59.584132910 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:59.584142923 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:59.584152937 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:59.584167957 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:59.584259033 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:59.584300995 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:59.584357023 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:59.584398031 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:59.584486961 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:59.584523916 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:59.584563017 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:59.584614992 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:59.584664106 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:59.584681988 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:59.584765911 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:59.584779024 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:59.584785938 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:59.584788084 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:59.584841013 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:59.584867954 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:59.584925890 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:59.584952116 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:59.584961891 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:59.585020065 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:59.585217953 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:59.585277081 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:59.585300922 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:59.585351944 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:59.585360050 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:59.585361004 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:59.585361958 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:59.585444927 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:59.585483074 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:59.585484028 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:59.585501909 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:59.585830927 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:59.872478008 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:59.872541904 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:59.872591019 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:59.872629881 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:59.872667074 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:59.872680902 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:59.872697115 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:59.872699022 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:59.872767925 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:59.873615026 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:59.873667955 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:59.873692036 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:59.873755932 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:59.873966932 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:59.874010086 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:59.874042034 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:59.874053001 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:59.874135971 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:59.874174118 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:59.874192953 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:59.874229908 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:59.875616074 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:59.875700951 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:59.876029968 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:59.876250982 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:59.876311064 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:59.876331091 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:59.876475096 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:59.876523018 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:59.876564980 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:59.876578093 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:59.876581907 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:59.876605034 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:59.876694918 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:59.876879930 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:59.876899004 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:59.880397081 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:59.883865118 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:59.883920908 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:59.883958101 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:59.884016991 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:59.884583950 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:59.887943029 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:59.890624046 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:59.897336960 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:59.897391081 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:59.897435904 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:59.897450924 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:59.897808075 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:59.897857904 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:59.898201942 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:59.899143934 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:21:59.902317047 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:21:59.902595997 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:00.191514015 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:00.191586971 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:00.191638947 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:00.191646099 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:00.191663027 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:00.191705942 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:00.191730976 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:00.191761971 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:00.191812992 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:00.191816092 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:00.191822052 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:00.191873074 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:00.191937923 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:00.191992998 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:00.191998959 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:00.192001104 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:00.192007065 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:00.192056894 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:00.192075014 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:00.192118883 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:00.192164898 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:00.192213058 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:00.192236900 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:00.192313910 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:00.192367077 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:00.192392111 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:00.192400932 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:00.192456961 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:00.192465067 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:00.192521095 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:00.192523956 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:00.192583084 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:00.192640066 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:00.192651987 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:00.192652941 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:00.192709923 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:00.192764044 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:00.192764044 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:00.192770958 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:00.192820072 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:00.192820072 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:00.192878008 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:00.192881107 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:00.192935944 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:00.192987919 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:00.192995071 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:00.192995071 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:00.193036079 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:00.193098068 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:00.193139076 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:00.193173885 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:00.193217039 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:00.193226099 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:00.193232059 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:00.193252087 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:00.193272114 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:00.193293095 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:00.193330050 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:00.193352938 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:00.193361044 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:00.193367958 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:00.193397045 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:00.193406105 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:00.193430901 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:00.193442106 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:00.193479061 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:00.193504095 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:00.193512917 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:00.193521023 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:00.193624973 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:00.193625927 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:00.193660021 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:00.193713903 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:00.193738937 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:00.193761110 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:00.193762064 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:00.193768978 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:00.193804026 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:00.193840027 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:00.193856001 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:00.193861961 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:00.193880081 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:00.193917990 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:00.193943977 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:00.193952084 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:00.193953991 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:00.193978071 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:00.193991899 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:00.194027901 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:00.194041014 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:00.194048882 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:00.194075108 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:00.194116116 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:00.194130898 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:00.194143057 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:00.194153070 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:00.194176912 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:00.194191933 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:00.194228888 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:00.194242954 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:00.194252014 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:00.194264889 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:00.194278955 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:00.194303989 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:00.194315910 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:00.194340944 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:00.194359064 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:00.194387913 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:00.194397926 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:00.194430113 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:00.194466114 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:00.194478035 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:00.194485903 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:00.194504023 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:00.194541931 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:00.194577932 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:00.194581032 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:00.194592953 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:00.194618940 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:00.194638968 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:00.194644928 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:00.194669962 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:00.194716930 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:00.194744110 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:00.194756031 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:00.194758892 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:00.194797039 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:00.194833994 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:00.194852114 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:00.194860935 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:00.194865942 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:00.194871902 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:00.194909096 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:00.194946051 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:00.194964886 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:00.194973946 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:00.194979906 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:00.194983006 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:00.195030928 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:00.195045948 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:00.195070028 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:00.195071936 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:00.195108891 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:00.195113897 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:00.195187092 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:00.195195913 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:00.195208073 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:00.195229053 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:00.195270061 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:00.195307016 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:00.195338011 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:00.195344925 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:00.195347071 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:00.195353031 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:00.195380926 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:00.195419073 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:00.195442915 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:00.195451975 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:00.195455074 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:00.195456982 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:00.195497036 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:00.195504904 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:00.195518970 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:00.195607901 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:00.195648909 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:00.195683956 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:00.195730925 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:00.195763111 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:00.195771933 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:00.195775032 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:00.195781946 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:00.195787907 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:00.195792913 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:00.195808887 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:00.195858955 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:00.195869923 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:00.195946932 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:00.195986986 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:00.196022034 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:00.196068048 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:00.196074963 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:00.196084976 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:00.196089983 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:00.196197033 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:00.196279049 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:00.196285009 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:00.196290970 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:00.196324110 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:00.196352005 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:00.196360111 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:00.196397066 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:00.196434021 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:00.196480989 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:00.196485996 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:00.196497917 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:00.196521997 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:00.196526051 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:00.196559906 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:00.196587086 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:00.196594000 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:00.196597099 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:00.196640015 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:00.196676016 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:00.196712017 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:00.196712971 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:00.196724892 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:00.196732998 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:00.196738958 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:00.196751118 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:00.196796894 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:00.196805000 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:00.196822882 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:00.196837902 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:00.196875095 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:00.196913004 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:00.196938038 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:00.196947098 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:00.196950912 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:00.196953058 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:00.196958065 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:00.196986914 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:00.197005987 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:00.197025061 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:00.197062969 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:00.197109938 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:00.197113991 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:00.197123051 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:00.197132111 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:00.197151899 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:00.198626995 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:00.198640108 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:00.198735952 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:00.198775053 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:00.198837996 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:00.198844910 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:00.205070972 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:00.205171108 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:00.512526035 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:00.512562037 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:00.512584925 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:00.512602091 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:00.512618065 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:00.512669086 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:00.512705088 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:00.512727976 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:00.512790918 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:00.512794018 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:00.512816906 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:00.512823105 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:00.512829065 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:00.512833118 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:00.512836933 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:00.512859106 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:00.512870073 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:00.512927055 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:00.512949944 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:00.512991905 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:00.513024092 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:00.513035059 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:00.513037920 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:00.513041973 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:00.513072968 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:00.513096094 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:00.513123989 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:00.513150930 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:00.513181925 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:00.513209105 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:00.513220072 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:00.513228893 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:00.513233900 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:00.513236046 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:00.513237953 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:00.513243914 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:00.513247967 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:00.513257980 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:00.513283968 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:00.513310909 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:00.513319016 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:00.513328075 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:00.513334036 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:00.513339043 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:00.513431072 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:00.513437986 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:00.513622046 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:00.513674021 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:00.513703108 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:00.513735056 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:00.513763905 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:00.513768911 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:00.513777971 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:00.513783932 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:00.513791084 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:00.513793945 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:00.513816118 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:00.513839006 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:00.513870001 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:00.513875961 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:00.513887882 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:00.513901949 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:00.513931036 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:00.513935089 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:00.513959885 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:00.513959885 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:00.513998032 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:00.514309883 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:00.514611006 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:00.514638901 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:00.514662981 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:00.514691114 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:00.514692068 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:00.514700890 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:00.514705896 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:00.514720917 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:00.514735937 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:00.514745951 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:00.514764071 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:00.514775991 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:00.514807940 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:00.514836073 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:00.514857054 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:00.514883995 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:00.514900923 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:00.514908075 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:00.514913082 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:00.514919043 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:00.514924049 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:00.514933109 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:00.514959097 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:00.514961004 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:00.514966965 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:00.514980078 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:00.515010118 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:00.515033007 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:00.515073061 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:00.515081882 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:00.515083075 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:00.515088081 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:00.515103102 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:00.515161037 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:00.515173912 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:00.515181065 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:00.515186071 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:00.515186071 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:00.515211105 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:00.515230894 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:00.515259027 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:00.515259027 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:00.515285015 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:00.515292883 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:00.515301943 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:00.515311003 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:00.515331984 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:00.515336990 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:00.515357971 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:00.515377998 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:00.515400887 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:00.515414953 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:00.515424013 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:00.515429020 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:00.515454054 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:00.515477896 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:00.515502930 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:00.515525103 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:00.515536070 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:00.515543938 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:00.515547991 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:00.515552044 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:00.515573025 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:00.515619993 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:00.515647888 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:00.515660048 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:00.515671015 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:00.515691996 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:00.515697956 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:00.515718937 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:00.515743971 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:00.515750885 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:00.515758991 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:00.515765905 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:00.515769958 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:00.515769958 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:00.515795946 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:00.515799999 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:00.515820026 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:00.515830040 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:00.515846014 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:00.515866995 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:00.515892982 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:00.515913963 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:00.515925884 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:00.515939951 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:00.515974998 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:00.516000032 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:00.516022921 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:00.516031027 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:00.516032934 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:00.516061068 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:00.516062021 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:00.516067028 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:00.516072035 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:00.516083956 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:00.516100883 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:00.516103983 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:00.516130924 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:00.516151905 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:00.516154051 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:00.516176939 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:00.516197920 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:00.516218901 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:00.516247034 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:00.516273975 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:00.516288996 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:00.516313076 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:00.516314030 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:00.516320944 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:00.516339064 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:00.516354084 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:00.516360044 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:00.516367912 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:00.516376019 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:00.516388893 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:00.516429901 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:00.516442060 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:00.516443014 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:00.516449928 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:00.516475916 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:00.516526937 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:00.516531944 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:00.516541004 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:00.516602039 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:00.516624928 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:00.516666889 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:00.516668081 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:00.516700983 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:00.516709089 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:00.516715050 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:00.516738892 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:00.516762018 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:00.516788006 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:00.516824007 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:00.516832113 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:00.516836882 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:00.516844988 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:00.516910076 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:00.516957045 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:00.516997099 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:00.517003059 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:00.517010927 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:00.517014980 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:00.517024040 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:00.517107010 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:00.517113924 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:00.517123938 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:00.517127991 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:00.517189980 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:00.517215967 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:00.517276049 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:00.517286062 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:00.517291069 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:00.517323017 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:00.517347097 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:00.517373085 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:00.517407894 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:00.517412901 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:00.517420053 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:00.517424107 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:00.517450094 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:00.517455101 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:00.517482996 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:00.517503977 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:00.517530918 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:00.517554998 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:00.517559052 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:00.517565966 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:00.517573118 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:00.517579079 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:00.517580032 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:00.517601013 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:00.519196987 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:00.519618034 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:00.521699905 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:00.830379009 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:00.830421925 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:00.830470085 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:00.830493927 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:00.830512047 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:00.830514908 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:00.830516100 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:00.830579042 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:00.830605030 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:00.830642939 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:00.830652952 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:00.830702066 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:00.830748081 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:00.830749989 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:00.830751896 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:00.830800056 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:00.830893993 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:00.830931902 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:00.830974102 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:00.830977917 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:00.831041098 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:00.831083059 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:00.831129074 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:00.831134081 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:00.831298113 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:00.831336021 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:00.831373930 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:00.831373930 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:00.831378937 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:00.831413031 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:00.831459999 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:00.831501007 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:00.831511021 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:00.831516027 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:00.831537962 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:00.831576109 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:00.831584930 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:00.831588030 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:00.831614017 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:00.831651926 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:00.831667900 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:00.831671000 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:00.831691027 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:00.831701040 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:00.831728935 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:00.831733942 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:00.831778049 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:00.831783056 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:00.831820011 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:00.831856012 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:00.831866026 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:00.831868887 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:00.831893921 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:00.831931114 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:00.831940889 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:00.831943989 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:00.831967115 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:00.832006931 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:00.832020044 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:00.832024097 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:00.832043886 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:00.832053900 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:00.832091093 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:00.832130909 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:00.832134008 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:00.832137108 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:00.832166910 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:00.832176924 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:00.832205057 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:00.832210064 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:00.832242966 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:00.832283974 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:00.832288027 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:00.833326101 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:00.833365917 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:00.833403111 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:00.833432913 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:00.833448887 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:00.833453894 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:00.833926916 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:00.834562063 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:00.834605932 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:00.834646940 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:00.834680080 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:00.834697962 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:00.834889889 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:00.834903002 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:00.835930109 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:00.836014986 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:00.836189985 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:00.836671114 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:01.151279926 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:01.151324987 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:01.151365042 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:01.151403904 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:01.151415110 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:01.151431084 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:01.151453018 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:01.151453018 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:01.151490927 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:01.151529074 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:01.151540995 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:01.151544094 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:01.151566029 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:01.151603937 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:01.151612997 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:01.151617050 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:01.151640892 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:01.151649952 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:01.151678085 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:01.151700020 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:01.151715994 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:01.151730061 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:01.151762962 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:01.151804924 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:01.151808023 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:01.151812077 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:01.151840925 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:01.151885986 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:01.151885986 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:01.151887894 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:01.151926041 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:01.151962996 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:01.151973009 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:01.151976109 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:01.152002096 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:01.152036905 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:01.152039051 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:01.152075052 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:01.152086020 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:01.152090073 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:01.152113914 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:01.152153015 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:01.152157068 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:01.152160883 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:01.152199984 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:01.152204990 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:01.152241945 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:01.152280092 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:01.152290106 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:01.152292967 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:01.152318954 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:01.152357101 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:01.152360916 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:01.152364016 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:01.152391911 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:01.152424097 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:01.152429104 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:01.152435064 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:01.152466059 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:01.152472019 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:01.152513981 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:01.152546883 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:01.152592897 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:01.152650118 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:01.152697086 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:01.152744055 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:01.152750969 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:01.152877092 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:01.152916908 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:01.152941942 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:01.153019905 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:01.153019905 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:01.153080940 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:01.153119087 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:01.153161049 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:01.153198004 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:01.153209925 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:01.153237104 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:01.153243065 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:01.153247118 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:01.153275013 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:01.153301001 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:01.153325081 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:01.153342962 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:01.153367043 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:01.153386116 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:01.153403044 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:01.153441906 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:01.153477907 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:01.153480053 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:01.153484106 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:01.153515100 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:01.153517962 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:01.153552055 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:01.153578043 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:01.153589010 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:01.153625011 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:01.153635979 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:01.153676987 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:01.153681040 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:01.153687954 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:01.153728962 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:01.153748035 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:01.153769016 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:01.153806925 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:01.153810024 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:01.153812885 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:01.153841972 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:01.153851032 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:01.153879881 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:01.153899908 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:01.153917074 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:01.153959990 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:01.153963089 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:01.153963089 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:01.154005051 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:01.154042006 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:01.154045105 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:01.154047966 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:01.154079914 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:01.154084921 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:01.154117107 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:01.154150009 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:01.154153109 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:01.154191017 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:01.154200077 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:01.154203892 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:01.154227972 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:01.154273033 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:01.154275894 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:01.154304028 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:01.154319048 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:01.154320955 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:01.154356003 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:01.154371023 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:01.154393911 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:01.154431105 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:01.154436111 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:01.154438972 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:01.154468060 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:01.154501915 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:01.154505968 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:01.154542923 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:01.154546022 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:01.154548883 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:01.154588938 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:01.154618979 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:01.154629946 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:01.154666901 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:01.154676914 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:01.154681921 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:01.154706001 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:01.154736042 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:01.154750109 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:01.154776096 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:01.154789925 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:01.154828072 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:01.154838085 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:01.154839993 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:01.154869080 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:01.154913902 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:01.154916048 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:01.154918909 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:01.154957056 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:01.154963017 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:01.154993057 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:01.155035019 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:01.155035019 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:01.155039072 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:01.155075073 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:01.155078888 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:01.155111074 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:01.155152082 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:01.155178070 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:01.155189991 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:01.155215979 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:01.155251980 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:01.155261040 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:01.155263901 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:01.155289888 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:01.155292034 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:01.155325890 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:01.155343056 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:01.155363083 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:01.155401945 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:01.155405998 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:01.155409098 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:01.155440092 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:01.155446053 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:01.155487061 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:01.155529976 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:01.155534983 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:01.471791029 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:01.471847057 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:01.471884966 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:01.471934080 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:01.471941948 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:01.471961021 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:01.471987963 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:01.471992016 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:01.472012997 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:01.472064018 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:01.472112894 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:01.472116947 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:01.472121000 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:01.472183943 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:01.472246885 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:01.472323895 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:01.472371101 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:01.472376108 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:01.472498894 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:01.472538948 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:01.472573996 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:01.472594023 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:01.472598076 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:01.472615004 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:01.472619057 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:01.472654104 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:01.472688913 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:01.472706079 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:01.472709894 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:01.472735882 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:01.472774982 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:01.472786903 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:01.472790956 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:01.472812891 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:01.472822905 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:01.472886086 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:01.472908020 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:01.472937107 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:01.472938061 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:01.472978115 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:01.472995043 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:01.473016024 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:01.473026991 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:01.473056078 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:01.473066092 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:01.473093033 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:01.473131895 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:01.473143101 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:01.473146915 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:01.473170042 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:01.473216057 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:01.473217964 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:01.473220110 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:01.473259926 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:01.473295927 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:01.473306894 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:01.473309994 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:01.473335028 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:01.473377943 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:01.473381996 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:01.473402977 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:01.473442078 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:01.473450899 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:01.473479033 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:01.473490953 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:01.473519087 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:01.473556042 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:01.473565102 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:01.473567963 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:01.473592997 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:01.473593950 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:01.473629951 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:01.473642111 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:01.473674059 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:01.473679066 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:01.473721981 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:01.473727942 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:01.473759890 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:01.473799944 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:01.473800898 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:01.473805904 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:01.473838091 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:01.473848104 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:01.473875046 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:01.473921061 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:01.473923922 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:01.473942041 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:01.473980904 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:01.473989964 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:01.474016905 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:01.474030018 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:01.474052906 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:01.474065065 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:01.474091053 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:01.474137068 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:01.474138975 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:01.474140882 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:01.474179983 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:01.474217892 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:01.474226952 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:01.474230051 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:01.474255085 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:01.474314928 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:01.474328041 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:01.474332094 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:01.474351883 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:01.474390030 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:01.474401951 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:01.474406004 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:01.474428892 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:01.474459887 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:01.474484921 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:01.474540949 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:01.474545956 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:01.474550009 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:01.474584103 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:01.474641085 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:01.474646091 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:01.474670887 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:01.474710941 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:01.474750042 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:01.474754095 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:01.474757910 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:01.474805117 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:01.474824905 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:01.474847078 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:01.474883080 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:01.474895000 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:01.474899054 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:01.474920988 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:01.474931002 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:01.474957943 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:01.474993944 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:01.475002050 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:01.475004911 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:01.475055933 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:01.475094080 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:01.475104094 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:01.475106955 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:01.475148916 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:01.475184917 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:01.475225925 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:01.475265026 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:01.475276947 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:01.475280046 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:01.475303888 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:01.475352049 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:01.475358963 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:01.475362062 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:01.475394964 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:01.475431919 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:01.475435972 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:01.475439072 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:01.475471020 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:01.475474119 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:01.475508928 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:01.475513935 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:01.475579023 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:01.475598097 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:01.475625038 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:01.475627899 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:01.475667953 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:01.475673914 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:01.475706100 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:01.475722075 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:01.475744963 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:01.475752115 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:01.475783110 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:01.475794077 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:01.475831985 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:01.475873947 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:01.475883961 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:01.475888968 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:01.475910902 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:01.475949049 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:01.475953102 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:01.475955963 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:01.475986004 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:01.476022959 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:01.476032019 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:01.476035118 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:01.476059914 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:01.476109028 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:01.476114035 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:01.476124048 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:01.476161003 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:01.476197958 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:01.476202965 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:01.476207018 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:01.476236105 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:01.476281881 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:01.476283073 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:01.476285934 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:01.476322889 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:01.476360083 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:01.476367950 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:01.476372004 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:01.476397038 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:01.476439953 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:01.476443052 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:01.788804054 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:01.788856030 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:01.788906097 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:01.788906097 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:01.788929939 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:01.789122105 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:01.789201021 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:01.789289951 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:01.789339066 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:01.789392948 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:01.789453983 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:01.789496899 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:01.789526939 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:01.789539099 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:01.789628029 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:01.790831089 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:01.792378902 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:01.792418003 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:01.792455912 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:01.792495012 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:01.792536020 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:01.792562008 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:01.792855024 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:01.792896986 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:01.792922020 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:01.792937040 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:01.792943001 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:01.792992115 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:01.793287992 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:01.793329000 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:01.793385983 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:01.793390989 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:01.793431044 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:01.793482065 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:01.793529034 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:01.793572903 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:01.793611050 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:01.793636084 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:01.793653011 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:01.793701887 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:01.793749094 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:01.793792009 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:01.793807030 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:01.793832064 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:01.793883085 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:01.794004917 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:01.794045925 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:01.794102907 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:01.794156075 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:01.794193983 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:01.794209003 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:01.794260025 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:01.794308901 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:01.794374943 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:01.794410944 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:01.794464111 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:01.794476986 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:01.794513941 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:01.794564962 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:01.794575930 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:01.794622898 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:01.794672966 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:01.794715881 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:01.794759989 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:01.794799089 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:01.794821978 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:01.794876099 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:01.794914007 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:01.794969082 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:01.794976950 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:01.795106888 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:01.795172930 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:01.795218945 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:01.795274019 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:01.795336008 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:01.795372009 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:01.795422077 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:01.795435905 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:01.795475006 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:01.795511961 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:01.795526028 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:01.795612097 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:01.795661926 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:01.795744896 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:01.795787096 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:01.795794010 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:01.795840025 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:01.795900106 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:01.796051979 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:01.796101093 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:01.796159029 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:01.796226025 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:01.796264887 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:01.796284914 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:01.796353102 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:01.796390057 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:01.796411991 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:01.796427965 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:01.796504021 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:01.796504974 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:01.796515942 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:01.796545982 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:01.796582937 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:01.796595097 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:01.796616077 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:01.796648026 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:01.796685934 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:01.796694994 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:01.796715021 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:01.796753883 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:01.796781063 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:01.796823025 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:01.796859980 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:01.796884060 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:01.796889067 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:01.796931982 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:01.796951056 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:01.796998024 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:01.797003984 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:01.797043085 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:01.797061920 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:01.797102928 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:01.797195911 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:01.797266006 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:01.797389984 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:01.797436953 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:01.797461033 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:01.797518015 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:01.797535896 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:01.797574043 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:01.797594070 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:01.797612906 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:01.797627926 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:01.797652960 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:01.797714949 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:01.797755957 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:01.797796011 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:01.797833920 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:01.797847986 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:01.797872066 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:01.797935009 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:01.797936916 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:01.797993898 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:01.798136950 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:01.798207045 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:01.798276901 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:01.798319101 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:01.798356056 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:01.798393965 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:01.798407078 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:01.798414946 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:01.798432112 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:01.798449993 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:01.798455954 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:01.798583984 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:01.798625946 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:01.798669100 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:01.798685074 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:01.798728943 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:01.798782110 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:01.798804998 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:01.798825026 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:01.798861027 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:01.798887968 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:01.798901081 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:01.798973083 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:01.799050093 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:01.799088955 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:01.799119949 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:01.799190044 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:01.799227953 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:01.799248934 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:01.799292088 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:02.103698015 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:02.103738070 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:02.103806973 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:02.103844881 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:02.103878021 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:02.103892088 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:02.103909016 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:02.103914976 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:02.103919029 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:02.103935003 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:02.103972912 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:02.103992939 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:02.104034901 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:02.104226112 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:02.104326963 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:02.104370117 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:02.104391098 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:02.104408979 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:02.104430914 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:02.104455948 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:02.104474068 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:02.105963945 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:02.106125116 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:02.106194019 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:02.106201887 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:02.106621027 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:02.106919050 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:02.106988907 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:02.107018948 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:02.107042074 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:02.107547998 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:02.107588053 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:02.107615948 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:02.107625008 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:02.107634068 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:02.107664108 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:02.107677937 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:02.108035088 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:02.108076096 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:02.108104944 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:02.108118057 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:02.108144999 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:02.108156919 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:02.108294964 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:02.108335972 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:02.108386993 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:02.108563900 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:02.108601093 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:02.108653069 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:02.108696938 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:02.108737946 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:02.108789921 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:02.109002113 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:02.109042883 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:02.109076977 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:02.109096050 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:02.109114885 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:02.109118938 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:02.109153986 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:02.109189987 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:02.109204054 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:02.109227896 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:02.109245062 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:02.109266996 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:02.109272957 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:02.109313965 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:02.109354973 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:02.109364033 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:02.109392881 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:02.109431982 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:02.109447002 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:02.109471083 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:02.109479904 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:02.109507084 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:02.109544039 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:02.109558105 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:02.109581947 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:02.109627962 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:02.109632015 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:02.109669924 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:02.109707117 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:02.109719992 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:02.109744072 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:02.109781981 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:02.109797955 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:02.109819889 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:02.109874964 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:02.110183001 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:02.110254049 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:02.110315084 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:02.110538960 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:02.110582113 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:02.110635042 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:02.111049891 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:02.111088991 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:02.111090899 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:02.111104965 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:02.111151934 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:02.111236095 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:02.111551046 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:02.111630917 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:02.111743927 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:02.111875057 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:02.111912966 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:02.111938953 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:02.111959934 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:02.111965895 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:02.112077951 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:02.112150908 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:02.112160921 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:02.112231970 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:02.112272978 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:02.112310886 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:02.112312078 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:02.112330914 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:02.112356901 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:02.112364054 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:02.112399101 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:02.112447023 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:02.112447977 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:02.112494946 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:02.112550020 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:02.112560987 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:02.112603903 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:02.112642050 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:02.112657070 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:02.112682104 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:02.112730026 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:02.112818956 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:02.112874031 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:02.112921000 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:02.112921000 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:02.112960100 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:02.113002062 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:02.113008022 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:02.113040924 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:02.113078117 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:02.113095045 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:02.113114119 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:02.113152981 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:02.113169909 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:02.113190889 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:02.113239050 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:02.113241911 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:02.113281965 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:02.113318920 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:02.113332033 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:02.113358021 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:02.113405943 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:02.113426924 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:02.113466978 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:02.113503933 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:02.113517046 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:02.113550901 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:02.113615990 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:02.113641024 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:02.113663912 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:02.113708973 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:02.113712072 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:02.113748074 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:02.113786936 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:02.113797903 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:02.113873959 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:02.113897085 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:02.113919973 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:02.113924980 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:02.113945961 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:02.113980055 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:02.113991022 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:02.114027977 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:02.114065886 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:02.114073992 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:02.114124060 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:02.114151955 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:02.114172935 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:02.114183903 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:02.114236116 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:02.114826918 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:02.421430111 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:02.421504974 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:02.421575069 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:02.421616077 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:02.421621084 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:02.421637058 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:02.421677113 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:02.421678066 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:02.421727896 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:02.421729088 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:02.421775103 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:02.421797991 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:02.421849012 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:02.421897888 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:02.421915054 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:02.421962976 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:02.422010899 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:02.422018051 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:02.422061920 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:02.422068119 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:02.422122002 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:02.423825979 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:02.423872948 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:02.423907995 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:02.423942089 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:02.423953056 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:02.423996925 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:02.425218105 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:02.425260067 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:02.425292969 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:02.425322056 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:02.425337076 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:02.425350904 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:02.425374985 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:02.425390005 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:02.425409079 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:02.425426006 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:02.425450087 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:02.425652981 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:02.425692081 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:02.425704002 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:02.425729990 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:02.425740957 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:02.425769091 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:02.425784111 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:02.425818920 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:02.426081896 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:02.426124096 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:02.426158905 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:02.426172018 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:02.426206112 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:02.426217079 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:02.426248074 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:02.426249027 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:02.426291943 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:02.426974058 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:02.427016020 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:02.427073002 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:02.427200079 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:02.427242994 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:02.427278042 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:02.427294970 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:02.427316904 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:02.427319050 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:02.427354097 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:02.427355051 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:02.427391052 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:02.427400112 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:02.427428961 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:02.427434921 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:02.427467108 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:02.427476883 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:02.427514076 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:02.427516937 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:02.427556992 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:02.427567005 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:02.427593946 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:02.427614927 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:02.427630901 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:02.427665949 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:02.427669048 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:02.427696943 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:02.427705050 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:02.427720070 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:02.427742958 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:02.427742958 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:02.427778959 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:02.427802086 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:02.427825928 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:02.427825928 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:02.427869081 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:02.427871943 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:02.427905083 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:02.427906990 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:02.427942991 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:02.427975893 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:02.427979946 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:02.427999020 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:02.428015947 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:02.428030968 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:02.428054094 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:02.428059101 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:02.428103924 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:02.428332090 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:02.428397894 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:02.428445101 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:02.428689003 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:02.428734064 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:02.428791046 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:02.430058002 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:02.430111885 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:02.430150986 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:02.430187941 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:02.430187941 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:02.430208921 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:02.430226088 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:02.430249929 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:02.430263042 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:02.430273056 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:02.430316925 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:02.430700064 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:02.430740118 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:02.430788040 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:02.430804014 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:02.430833101 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:02.430870056 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:02.430907965 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:02.430939913 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:02.430946112 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:02.430982113 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:02.430984020 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:02.430986881 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:02.431011915 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:02.431020021 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:02.431034088 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:02.431057930 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:02.431070089 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:02.431106091 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:02.431176901 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:02.431221008 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:02.431260109 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:02.431281090 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:02.431298018 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:02.431310892 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:02.431334972 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:02.431346893 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:02.431370974 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:02.431382895 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:02.431408882 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:02.431427956 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:02.431446075 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:02.431461096 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:02.431488037 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:02.431493044 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:02.431535006 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:02.431540012 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:02.431571007 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:02.431608915 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:02.431621075 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:02.431637049 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:02.431646109 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:02.431669950 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:02.431683064 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:02.431704998 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:02.431720018 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:02.431732893 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:02.431756973 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:02.431802988 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:02.431809902 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:02.431845903 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:02.431852102 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:02.431884050 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:02.431885958 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:02.431922913 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:02.431934118 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:02.431962013 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:02.431976080 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:02.431998014 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:02.432012081 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:02.432035923 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:02.432044983 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:02.432071924 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:02.432118893 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:02.432120085 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:02.432161093 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:02.432198048 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:02.432209015 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:02.432236910 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:02.432274103 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:02.432284117 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:02.432447910 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:02.432487011 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:02.432507992 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:02.432523966 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:02.432528973 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:02.432559967 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:02.432574987 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:02.432596922 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:02.432606936 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:02.432635069 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:02.432645082 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:02.434297085 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:02.736646891 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:02.736718893 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:02.736759901 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:02.736795902 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:02.736833096 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:02.736835957 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:02.736860037 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:02.736871958 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:02.736918926 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:02.736918926 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:02.736960888 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:02.736970901 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:02.736998081 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:02.737010956 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:02.737035990 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:02.737037897 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:02.737075090 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:02.737086058 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:02.737112999 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:02.737123966 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:02.737168074 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:02.738548040 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:02.738590002 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:02.738627911 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:02.738629103 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:02.738667011 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:02.738677979 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:02.738703012 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:02.738713980 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:02.738750935 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:02.740685940 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:02.740725994 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:02.740762949 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:02.740797997 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:02.740816116 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:02.740842104 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:02.740874052 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:02.740906000 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:02.740921974 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:02.740946054 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:02.740962982 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:02.740974903 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:02.741000891 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:02.741002083 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:02.741039038 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:02.741045952 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:02.741079092 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:02.741090059 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:02.741132975 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:02.741197109 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:02.741245031 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:02.741245985 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:02.741286039 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:02.741300106 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:02.741334915 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:02.741336107 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:02.741379023 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:02.741812944 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:02.741856098 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:02.741867065 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:02.741909027 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:02.742145061 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:02.742196083 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:02.742222071 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:02.742254972 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:02.742393017 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:02.742444992 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:02.742456913 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:02.742482901 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:02.742496014 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:02.742532969 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:02.742536068 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:02.742593050 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:02.742594004 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:02.742647886 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:02.742652893 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:02.742700100 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:02.742702007 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:02.742754936 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:02.742754936 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:02.742793083 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:02.742809057 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:02.742841005 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:02.742856026 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:02.742877960 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:02.742888927 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:02.742924929 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:02.742932081 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:02.742989063 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:02.742994070 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:02.743047953 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:02.743058920 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:02.743103027 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:02.743108988 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:02.743149042 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:02.743181944 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:02.743235111 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:02.743264914 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:02.743310928 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:02.743311882 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:02.743350983 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:02.743355989 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:02.743391991 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:02.743402958 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:02.743438005 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:02.743438959 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:02.743479967 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:02.743486881 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:02.743524075 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:02.743527889 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:02.743575096 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:02.743577003 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:02.743616104 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:02.743628025 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:02.743652105 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:02.743663073 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:02.743690968 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:02.743709087 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:02.743743896 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:02.744837999 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:02.744879007 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:02.744894981 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:02.744925022 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:02.744935989 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:02.744965076 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:02.744982004 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:02.745011091 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:02.745018005 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:02.745060921 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:02.745486975 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:02.745528936 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:02.745543003 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:02.745577097 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:02.746606112 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:02.746649027 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:02.746659994 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:02.746685982 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:02.746706963 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:02.746725082 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:02.746759892 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:02.746772051 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:02.746793985 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:02.746810913 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:02.746839046 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:02.746865034 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:02.747145891 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:02.747190952 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:02.747201920 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:02.747227907 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:02.747239113 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:02.747278929 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:02.747283936 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:02.747329950 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:02.747387886 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:02.747446060 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:02.747467995 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:02.747472048 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:02.747493982 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:02.747499943 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:02.747541904 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:02.747544050 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:02.747587919 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:02.747592926 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:02.747622013 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:02.747639894 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:02.747648954 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:02.747687101 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:02.747689962 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:02.747720003 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:02.747730017 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:02.747756958 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:02.747771978 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:02.747781038 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:02.747811079 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:02.747812986 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:02.747855902 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:02.747858047 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:02.747898102 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:02.747911930 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:02.747925997 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:02.747953892 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:02.747961998 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:02.747982025 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:02.747997999 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:02.748014927 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:02.748032093 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:02.748050928 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:02.748074055 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:02.748079062 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:02.748097897 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:02.748114109 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:02.748122931 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:02.748143911 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:02.748162031 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:02.748171091 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:02.748198032 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:02.748198986 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:02.748224020 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:02.748225927 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:02.748245001 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:02.748254061 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:02.748272896 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:02.748281956 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:02.748300076 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:02.748307943 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:02.748337984 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:02.748341084 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:02.748372078 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:02.748373985 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:02.748399019 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:02.748410940 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:02.748426914 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:02.748449087 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:02.748455048 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:02.748481989 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:02.748486042 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:02.748508930 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:02.748534918 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:03.054265022 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:03.054321051 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:03.054358959 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:03.054398060 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:03.054435968 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:03.054445028 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:03.054471970 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:03.054474115 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:03.054512024 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:03.054528952 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:03.054549932 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:03.054574013 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:03.054596901 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:03.054613113 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:03.054635048 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:03.054637909 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:03.054676056 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:03.054689884 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:03.054713964 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:03.054717064 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:03.054760933 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:03.055751085 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:03.055789948 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:03.055819988 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:03.055829048 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:03.055856943 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:03.055866003 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:03.055879116 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:03.055903912 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:03.055913925 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:03.055943012 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:03.055953026 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:03.055989027 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:03.057744980 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:03.057796001 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:03.057826996 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:03.057837963 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:03.057853937 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:03.057876110 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:03.057887077 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:03.057940960 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:03.058470011 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:03.058507919 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:03.058521032 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:03.058543921 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:03.058556080 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:03.058582067 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:03.058592081 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:03.058628082 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:03.058870077 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:03.058912992 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:03.058923006 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:03.058948994 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:03.058967113 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:03.058986902 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:03.059001923 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:03.059025049 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:03.059026003 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:03.059068918 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:03.059071064 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:03.059124947 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:03.059148073 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:03.059190035 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:03.059195042 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:03.059226990 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:03.059237003 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:03.059263945 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:03.059273005 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:03.059309006 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:03.060559988 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:03.060611010 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:03.060616970 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:03.060655117 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:03.060659885 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:03.060693979 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:03.060693979 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:03.060729027 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:03.060739994 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:03.060764074 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:03.060774088 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:03.060797930 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:03.060807943 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:03.060831070 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:03.060842037 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:03.060866117 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:03.060877085 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:03.060902119 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:03.060918093 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:03.060944080 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:03.060950041 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:03.060982943 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:03.060993910 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:03.061017990 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:03.061028957 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:03.061052084 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:03.061063051 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:03.061088085 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:03.061096907 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:03.061120987 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:03.061134100 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:03.061167955 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:03.061297894 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:03.061331987 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:03.061346054 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:03.061367035 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:03.061378002 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:03.061400890 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:03.061407089 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:03.061444998 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:03.061444998 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:03.061484098 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:03.061492920 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:03.061517954 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:03.061530113 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:03.061553001 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:03.061564922 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:03.061587095 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:03.061599970 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:03.061619997 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:03.061630964 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:03.061655045 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:03.061666965 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:03.061687946 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:03.061697960 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:03.061733007 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:03.061821938 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:03.061856985 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:03.061871052 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:03.061892033 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:03.061904907 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:03.061925888 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:03.061939001 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:03.061971903 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:03.062298059 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:03.062341928 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:03.062345982 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:03.062386990 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:03.063390970 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:03.063451052 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:03.063457966 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:03.063508034 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:03.064119101 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:03.064157009 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:03.064172983 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:03.064188957 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:03.064198971 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:03.064224005 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:03.064239979 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:03.064273119 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:03.064912081 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:03.064949989 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:03.064969063 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:03.064989090 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:03.065752029 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:03.065788031 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:03.065807104 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:03.065821886 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:03.065826893 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:03.065857887 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:03.065869093 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:03.065896034 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:03.065901995 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:03.065939903 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:03.065952063 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:03.065974951 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:03.065994024 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:03.066009045 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:03.066036940 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:03.066044092 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:03.066057920 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:03.066081047 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:03.066090107 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:03.066116095 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:03.066124916 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:03.066149950 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:03.066159010 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:03.066191912 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:03.066193104 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:03.066229105 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:03.066239119 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:03.066262960 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:03.066273928 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:03.066297054 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:03.066308975 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:03.066330910 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:03.066340923 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:03.066364050 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:03.066376925 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:03.066400051 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:03.066409111 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:03.066432953 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:03.066443920 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:03.066476107 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:03.066477060 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:03.066514969 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:03.066524029 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:03.066548109 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:03.066559076 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:03.066582918 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:03.066596031 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:03.066617012 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:03.066626072 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:03.066649914 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:03.066675901 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:03.066684008 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:03.066703081 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:03.066718102 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:03.066726923 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:03.066760063 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:03.066761017 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:03.066797018 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:03.066807032 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:03.066831112 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:03.066842079 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:03.066867113 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:03.066876888 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:03.066901922 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:03.066921949 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:03.066935062 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:03.066958904 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:03.066970110 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:03.066977978 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:03.067003965 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:03.067025900 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:03.067059040 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:03.369349003 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:03.369374037 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:03.369390965 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:03.369406939 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:03.369417906 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:03.369424105 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:03.369438887 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:03.369447947 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:03.369456053 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:03.369472027 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:03.369484901 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:03.369492054 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:03.369503021 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:03.369510889 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:03.369525909 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:03.369534016 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:03.369543076 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:03.369558096 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:03.369565964 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:03.369575024 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:03.369596004 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:03.369617939 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:03.370441914 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:03.370472908 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:03.370505095 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:03.370520115 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:03.370825052 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:03.370857000 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:03.370867968 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:03.370898008 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:03.370920897 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:03.370948076 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:03.370978117 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:03.372123003 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:03.372140884 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:03.372193098 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:03.372204065 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:03.372214079 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:03.372473001 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:03.372493029 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:03.372539043 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:03.372564077 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:03.373327017 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:03.373364925 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:03.373392105 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:03.373414993 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:03.373440981 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:03.373450994 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:03.373456001 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:03.373487949 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:03.373825073 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:03.373867989 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:03.373872995 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:03.373905897 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:03.374170065 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:03.374186993 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:03.374207020 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:03.374212027 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:03.374226093 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:03.374227047 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:03.374248028 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:03.374255896 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:03.374265909 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:03.374291897 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:03.374295950 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:03.374315977 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:03.374330044 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:03.374332905 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:03.374347925 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:03.374366999 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:03.375540018 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:03.375574112 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:03.375600100 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:03.375617027 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:03.375617981 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:03.375637054 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:03.375654936 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:03.375657082 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:03.375672102 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:03.375673056 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:03.375694036 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:03.375716925 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:03.375971079 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:03.376020908 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:03.376149893 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:03.376192093 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:03.376240015 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:03.376280069 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:03.376323938 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:03.376360893 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:03.376378059 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:03.376430035 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:03.376440048 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:03.376486063 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:03.376488924 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:03.376519918 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:03.376530886 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:03.376560926 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:03.376612902 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:03.376693010 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:03.376810074 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:03.376848936 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:03.376851082 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:03.376872063 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:03.376889944 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:03.376902103 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:03.376909971 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:03.376931906 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:03.376931906 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:03.376970053 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:03.376996994 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:03.376998901 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:03.377043962 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:03.377043962 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:03.377067089 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:03.377098083 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:03.377105951 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:03.377115011 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:03.377141953 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:03.377154112 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:03.377176046 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:03.377192974 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:03.377218962 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:03.377341986 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:03.377393007 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:03.377399921 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:03.377425909 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:03.377439022 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:03.377456903 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:03.377465963 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:03.377489090 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:03.377506018 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:03.377509117 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:03.377523899 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:03.377542019 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:03.377548933 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:03.377589941 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:03.377896070 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:03.377918959 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:03.377943039 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:03.377962112 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:03.379318953 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:03.379365921 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:03.379369974 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:03.379400015 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:03.379407883 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:03.379441977 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:03.379447937 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:03.379481077 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:03.379996061 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:03.380014896 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:03.380038023 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:03.380059958 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:03.381802082 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:03.381823063 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:03.381840944 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:03.381858110 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:03.381874084 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:03.381875992 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:03.381894112 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:03.381911993 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:03.381920099 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:03.381933928 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:03.381939888 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:03.381953001 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:03.381969929 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:03.381969929 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:03.381987095 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:03.381999016 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:03.382018089 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:03.382033110 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:03.382061958 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:03.382075071 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:03.382117987 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:03.382138968 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:03.382178068 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:03.382268906 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:03.382313967 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:03.382404089 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:03.382424116 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:03.382441044 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:03.382447004 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:03.382456064 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:03.382472038 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:03.382479906 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:03.382496119 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:03.382498980 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:03.382514954 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:03.382524967 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:03.382539034 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:03.382558107 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:03.382567883 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:03.382591963 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:03.382594109 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:03.382628918 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:03.382637024 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:03.382669926 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:03.382854939 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:03.382874012 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:03.382894039 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:03.382905960 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:03.382910013 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:03.382925987 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:03.382936954 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:03.382941961 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:03.382973909 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:03.382980108 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:03.382996082 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:03.383009911 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:03.383024931 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:03.383047104 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:03.383052111 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:03.383093119 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:03.383095026 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:03.383126974 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:03.683988094 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:03.684077024 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:03.684112072 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:03.684143066 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:03.684175014 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:03.684199095 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:03.684211016 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:03.684221983 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:03.684245110 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:03.684256077 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:03.684277058 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:03.684308052 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:03.684318066 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:03.684340000 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:03.684354067 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:03.684370995 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:03.684389114 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:03.684408903 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:03.684412003 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:03.684448957 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:03.684451103 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:03.684478998 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:03.684489012 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:03.684511900 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:03.684523106 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:03.684544086 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:03.684552908 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:03.684582949 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:03.684900999 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:03.684940100 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:03.684950113 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:03.685237885 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:03.685271978 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:03.685271978 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:03.685283899 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:03.685321093 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:03.686403036 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:03.686444998 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:03.686476946 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:03.686481953 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:03.686507940 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:03.686515093 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:03.686533928 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:03.686583042 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:03.686932087 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:03.686969042 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:03.686990976 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:03.687027931 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:03.687724113 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:03.687757015 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:03.687779903 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:03.687791109 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:03.687810898 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:03.687823057 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:03.687830925 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:03.687861919 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:03.688168049 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:03.688201904 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:03.688215971 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:03.688231945 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:03.688540936 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:03.688575029 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:03.688585997 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:03.688606024 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:03.688618898 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:03.688638926 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:03.688647032 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:03.688669920 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:03.688676119 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:03.688709974 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:03.688711882 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:03.688745022 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:03.688755035 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:03.688776970 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:03.688786030 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:03.688815117 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:03.690061092 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:03.690097094 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:03.690128088 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:03.690130949 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:03.690160036 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:03.690160990 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:03.690177917 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:03.690191984 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:03.690201044 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:03.690232038 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:03.690232038 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:03.690270901 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:03.690737963 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:03.690783024 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:03.690797091 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:03.690824986 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:03.691153049 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:03.691184998 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:03.691205978 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:03.691231012 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:03.691289902 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:03.691323042 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:03.691334009 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:03.691354990 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:03.691364050 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:03.691386938 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:03.691402912 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:03.691430092 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:03.691606998 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:03.691639900 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:03.691649914 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:03.691688061 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:03.691781998 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:03.691814899 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:03.691827059 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:03.691845894 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:03.691855907 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:03.691876888 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:03.691886902 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:03.691920996 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:03.691924095 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:03.691958904 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:03.691978931 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:03.691991091 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:03.691999912 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:03.692023039 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:03.692037106 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:03.692054033 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:03.692065001 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:03.692084074 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:03.692115068 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:03.692116022 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:03.692142963 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:03.692147970 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:03.692161083 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:03.692178011 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:03.692187071 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:03.692222118 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:03.692225933 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:03.692254066 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:03.692269087 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:03.692285061 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:03.692297935 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:03.692317009 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:03.692317009 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:03.692347050 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:03.692357063 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:03.692383051 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:03.692550898 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:03.692595959 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:03.692610025 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:03.692651033 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:03.693826914 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:03.693861961 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:03.693892002 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:03.693892002 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:03.693919897 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:03.693924904 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:03.693939924 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:03.693969011 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:03.694226027 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:03.694251060 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:03.694268942 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:03.694293022 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:03.696413040 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:03.696438074 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:03.696456909 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:03.696480989 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:03.696496010 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:03.696504116 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:03.696511984 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:03.696527958 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:03.696552038 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:03.696552038 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:03.696571112 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:03.696588993 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:03.696604013 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:03.696614027 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:03.696635962 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:03.696636915 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:03.696665049 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:03.696665049 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:03.696691036 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:03.696693897 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:03.696715117 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:03.696719885 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:03.696732044 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:03.696758032 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:03.696830988 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:03.696854115 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:03.696877003 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:03.696896076 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:03.696903944 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:03.696923971 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:03.696930885 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:03.696935892 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:03.696948051 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:03.696954966 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:03.696968079 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:03.696980953 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:03.697005033 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:03.697005987 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:03.697045088 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:03.697053909 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:03.697324038 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:03.697369099 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:03.697547913 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:03.697572947 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:03.697590113 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:03.697607040 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:03.697618008 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:03.697629929 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:03.697654009 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:03.697654963 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:03.697676897 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:03.697686911 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:03.697695017 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:03.697705984 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:03.697715044 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:03.697731972 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:03.697746038 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:03.697755098 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:03.697774887 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:03.697814941 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:03.697829008 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:03.697869062 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:03.697870016 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:03.697911978 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:03.999195099 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:03.999253988 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:03.999300003 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:03.999304056 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:03.999335051 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:03.999342918 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:03.999351025 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:03.999392033 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:03.999397993 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:03.999443054 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:03.999454021 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:03.999492884 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:03.999496937 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:03.999538898 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:03.999547005 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:03.999574900 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:03.999587059 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:03.999612093 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:03.999627113 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:03.999650002 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:03.999665976 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:03.999686956 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:03.999711990 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:03.999726057 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:03.999747992 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:03.999778032 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:03.999778986 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:03.999831915 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:03.999839067 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:03.999881029 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:03.999897003 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:03.999917030 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:03.999931097 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:03.999954939 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:03.999977112 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:03.999996901 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:04.000006914 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:04.000040054 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:04.000046968 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:04.000077963 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:04.000094891 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:04.000117064 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:04.000142097 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:04.000163078 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:04.000652075 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:04.000703096 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:04.000713110 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:04.000741005 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:04.000771046 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:04.000869036 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:04.000879049 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:04.001209974 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:04.001251936 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:04.001276016 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:04.001303911 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:04.002648115 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:04.002701998 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:04.002732992 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:04.002743006 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:04.002748966 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:04.002780914 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:04.002794981 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:04.002825022 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:04.003038883 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:04.003077984 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:04.003093958 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:04.003119946 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:04.003401995 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:04.003447056 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:04.003463030 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:04.003511906 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:04.003585100 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:04.003633022 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:04.003653049 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:04.003675938 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:04.003681898 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:04.003712893 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:04.003727913 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:04.003751040 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:04.003756046 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:04.003788948 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:04.003799915 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:04.003848076 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:04.005584955 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:04.005645037 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:04.005656004 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:04.005693913 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:04.005697966 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:04.005729914 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:04.005743027 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:04.005769014 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:04.005789995 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:04.005808115 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:04.005821943 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:04.005846977 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:04.005867004 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:04.005884886 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:04.005919933 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:04.005945921 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:04.006263971 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:04.006309032 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:04.006345987 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:04.006355047 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:04.006375074 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:04.006385088 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:04.006402016 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:04.006422997 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:04.006424904 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:04.006467104 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:04.006469011 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:04.006510973 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:04.006513119 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:04.006547928 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:04.006556034 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:04.006597996 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:04.006778002 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:04.006813049 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:04.006829023 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:04.006839991 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:04.006865978 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:04.006865978 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:04.006892920 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:04.006896973 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:04.006918907 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:04.006918907 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:04.006953001 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:04.006958961 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:04.007025957 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:04.007057905 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:04.007076025 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:04.007083893 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:04.007102966 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:04.007110119 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:04.007153034 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:04.007169962 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:04.007184982 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:04.007200956 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:04.007215023 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:04.007246017 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:04.007277012 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:04.007277966 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:04.007298946 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:04.007302999 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:04.007327080 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:04.007329941 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:04.007355928 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:04.007356882 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:04.007371902 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:04.007394075 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:04.008147001 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:04.008177996 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:04.008203030 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:04.008210897 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:04.008229017 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:04.008234024 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:04.008245945 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:04.008274078 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:04.008513927 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:04.008542061 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:04.008565903 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:04.008590937 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:04.011104107 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:04.011177063 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:04.011197090 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:04.011205912 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:04.011224031 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:04.011233091 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:04.011256933 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:04.011259079 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:04.011276007 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:04.011291981 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:04.011296988 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:04.011323929 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:04.011346102 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:04.011359930 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:04.011392117 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:04.011418104 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:04.011430025 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:04.011432886 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:04.011465073 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:04.011466026 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:04.011475086 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:04.011498928 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:04.011522055 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:04.011533976 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:04.011554003 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:04.011559963 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:04.011585951 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:04.011586905 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:04.011605024 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:04.011614084 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:04.011640072 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:04.011665106 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:04.011667967 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:04.011688948 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:04.011691093 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:04.011696100 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:04.011722088 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:04.011735916 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:04.011750937 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:04.011753082 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:04.011766911 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:04.011779070 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:04.011908054 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:04.011934042 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:04.011940956 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:04.011961937 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:04.011995077 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:04.012017012 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:04.012053013 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:04.012072086 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:04.012079954 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:04.012098074 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:04.012106895 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:04.012131929 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:04.012137890 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:04.012156010 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:04.012166977 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:04.012181044 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:04.012192965 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:04.012218952 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:04.012228012 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:04.012245893 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:04.012275934 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:04.012298107 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:04.012326002 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:04.012346983 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:04.012371063 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:04.317101955 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:04.317138910 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:04.317162991 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:04.317218065 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:04.317241907 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:04.317244053 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:04.317275047 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:04.317279100 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:04.317285061 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:04.317289114 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:04.317317963 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:04.317337990 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:04.317387104 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:04.317415953 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:04.317441940 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:04.317465067 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:04.317480087 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:04.317483902 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:04.317524910 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:04.317555904 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:04.317598104 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:04.317603111 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:04.317636013 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:04.317646980 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:04.317679882 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:04.317687035 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:04.317729950 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:04.317774057 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:04.317799091 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:04.317821980 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:04.317838907 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:04.317842960 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:04.317883015 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:04.317931890 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:04.317984104 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:04.318021059 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:04.318044901 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:04.318068027 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:04.318089008 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:04.318130016 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:04.318156004 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:04.318177938 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:04.318191051 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:04.318197966 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:04.318239927 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:04.318284988 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:04.318310022 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:04.318330050 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:04.318352938 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:04.318403006 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:04.318427086 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:04.318473101 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:04.318485975 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:04.318526983 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:04.318562031 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:04.318589926 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:04.318612099 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:04.318633080 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:04.318645954 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:04.318671942 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:04.318686962 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:04.318723917 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:04.318768978 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:04.318795919 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:04.318816900 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:04.318839073 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:04.318849087 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:04.318881035 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:04.318887949 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:04.318918943 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:04.318933010 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:04.318965912 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:04.319011927 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:04.319035053 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:04.319060087 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:04.319077969 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:04.319134951 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:04.319175005 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:04.319186926 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:04.319226980 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:04.319245100 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:04.319278955 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:04.319292068 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:04.319322109 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:04.319343090 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:04.319365978 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:04.319411993 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:04.319422007 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:04.319439888 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:04.319483042 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:04.319485903 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:04.319533110 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:04.319730997 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:04.319756031 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:04.319787025 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:04.319799900 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:04.319808006 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:04.319842100 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:04.319844007 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:04.319883108 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:04.319930077 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:04.319968939 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:04.319982052 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:04.319996119 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:04.320020914 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:04.320044994 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:04.320069075 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:04.320127964 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:04.320132017 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:04.320167065 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:04.320207119 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:04.320230007 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:04.320262909 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:04.320281029 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:04.320282936 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:04.320306063 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:04.320327997 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:04.320357084 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:04.320409060 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:04.320432901 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:04.320451975 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:04.320482016 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:04.320492029 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:04.320516109 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:04.320533037 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:04.320558071 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:04.320564985 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:04.320605993 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:04.320638895 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:04.320678949 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:04.320693016 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:04.320732117 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:04.320733070 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:04.320758104 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:04.320777893 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:04.320816994 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:04.320838928 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:04.320887089 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:04.320930004 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:04.320954084 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:04.320976019 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:04.320993900 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:04.321032047 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:04.321064949 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:04.321074963 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:04.321080923 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:04.321094990 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:04.321158886 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:04.321177006 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:04.321207047 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:04.322966099 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:04.322998047 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:04.323020935 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:04.323041916 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:04.323060036 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:04.323065042 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:04.323071957 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:04.323088884 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:04.323105097 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:04.323128939 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:04.323134899 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:04.323162079 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:04.323184013 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:04.323184967 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:04.323205948 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:04.323213100 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:04.323230028 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:04.323231936 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:04.323254108 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:04.323281050 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:04.323272943 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:04.323321104 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:04.323335886 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:04.323364973 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:04.323383093 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:04.323388100 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:04.323404074 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:04.323410988 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:04.323434114 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:04.323437929 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:04.323447943 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:04.323471069 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:04.323487997 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:04.323512077 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:04.323530912 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:04.323537111 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:04.323559046 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:04.323564053 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:04.323587894 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:04.323596001 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:04.323611021 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:04.323632956 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:04.323652029 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:04.323654890 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:04.323679924 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:04.323684931 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:04.323697090 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:04.323718071 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:04.323734045 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:04.323743105 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:04.323765039 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:04.323770046 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:04.323786974 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:04.323802948 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:04.323843002 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:04.323849916 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:04.323858023 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:04.323868036 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:04.323883057 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:04.323990107 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:04.324042082 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:04.324079990 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:04.324095964 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:04.324120998 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:04.324131966 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:04.324158907 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:04.324181080 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:04.324197054 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:04.324210882 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:04.324234962 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:04.324248075 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:04.324335098 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:04.324398041 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:04.324421883 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:04.324445009 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:04.324471951 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:04.324496984 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:04.324512959 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:04.324520111 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:04.324544907 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:04.324559927 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:04.324594021 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:04.324596882 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:04.324646950 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:04.324670076 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:04.324692965 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:04.324714899 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:04.324743986 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:04.324753046 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:04.324759007 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:04.324764967 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:04.324790001 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:04.324795961 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:04.324819088 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:04.324841976 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:04.324842930 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:04.324867010 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:04.324879885 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:04.324892044 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:04.324903965 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:04.324914932 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:04.324925900 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:04.324949026 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:04.324965954 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:04.324965954 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:04.325005054 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:04.325031042 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:04.325071096 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:04.325082064 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:04.325144053 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:04.325393915 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:04.325422049 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:04.325444937 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:04.325454950 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:04.325480938 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:04.325483084 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:04.325522900 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:04.325525045 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:04.325568914 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:04.325818062 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:04.325871944 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:04.328481913 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:04.328515053 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:04.328540087 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:04.328545094 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:04.328563929 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:04.328572035 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:04.328588963 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:04.328617096 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:04.328619003 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:04.328666925 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:04.329072952 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:04.329099894 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:04.329128981 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:04.329159021 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:04.329576969 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:04.329603910 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:04.329627991 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:04.329632998 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:04.329662085 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:04.329680920 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:04.329685926 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:04.329730988 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:04.329732895 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:04.329777956 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:04.329821110 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:04.329849005 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:04.329866886 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:04.329874039 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:04.329898119 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:04.329901934 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:04.329916000 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:04.329922915 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:04.329936028 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:04.329947948 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:04.329958916 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:04.329972029 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:04.329997063 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:04.329998016 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:04.330020905 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:04.330041885 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:04.330045938 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:04.330085993 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:04.330089092 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:04.330118895 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:04.330149889 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:04.330152988 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:04.330173969 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:04.330183983 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:04.330193996 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:04.330198050 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:04.330210924 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:04.330223083 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:04.330250978 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:04.330250978 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:04.330266953 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:04.330296993 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:04.632697105 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:04.632747889 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:04.632795095 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:04.632848978 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:04.632878065 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:04.633136034 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:04.634776115 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:04.634912968 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:04.637928963 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:04.638031006 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:04.949126959 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:04.949176073 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:04.949193954 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:04.949207067 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:04.949218988 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:04.949237108 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:04.949254036 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:04.949270010 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:04.949285030 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:04.949301958 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:04.949301958 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:04.949318886 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:04.949338913 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:04.949342966 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:04.949350119 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:04.949357986 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:04.949358940 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:04.949374914 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:04.949388981 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:04.949392080 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:04.949409962 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:04.949410915 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:04.949426889 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:04.949429989 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:04.949444056 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:04.949460030 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:04.949460030 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:04.949481010 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:04.949485064 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:04.949493885 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:04.949498892 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:04.949510098 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:04.949522972 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:04.949531078 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:04.949539900 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:04.949549913 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:04.949558020 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:04.949572086 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:04.949574947 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:04.949590921 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:04.949603081 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:04.949606895 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:04.949624062 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:04.949634075 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:04.949645042 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:04.949654102 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:04.949664116 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:04.949676037 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:04.949692011 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:04.949695110 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:04.949707985 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:04.949723959 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:04.949728012 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:04.949740887 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:04.949748039 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:04.949754953 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:04.949757099 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:04.949773073 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:04.949780941 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:04.949789047 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:04.949807882 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:04.949812889 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:04.949826956 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:04.949840069 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:04.949842930 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:04.949860096 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:04.949871063 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:04.949877024 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:04.949892998 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:04.949908972 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:04.949909925 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:04.949918032 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:04.949925900 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:04.949927092 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:04.949934006 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:04.949945927 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:04.949963093 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:04.949979067 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:04.949980021 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:04.949995041 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:04.950006008 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:04.950011015 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:04.950026989 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:04.950033903 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:04.950050116 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:04.950058937 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:04.950066090 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:04.950086117 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:04.950086117 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:04.950103045 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:04.950118065 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:04.950119019 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:04.950134993 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:04.950146914 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:04.950150967 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:04.950160980 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:04.950165987 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:04.950181961 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:04.950191975 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:04.950197935 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:04.950217009 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:04.950223923 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:04.950233936 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:04.950243950 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:04.950248957 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:04.950265884 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:04.950282097 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:04.950283051 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:04.950298071 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:04.950314999 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:04.950325966 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:04.950330019 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:04.950347900 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:04.950350046 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:04.950367928 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:04.950376987 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:04.950382948 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:04.950400114 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:04.950409889 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:04.950416088 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:04.950428963 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:04.950432062 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:04.950448036 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:04.950464010 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:04.950464010 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:04.950484037 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:04.950494051 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:04.950500965 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:04.950516939 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:04.950527906 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:04.950532913 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:04.950548887 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:04.950556040 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:04.950563908 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:04.950579882 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:04.950579882 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:04.950596094 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:04.950613022 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:04.950614929 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:04.950633049 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:04.950639963 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:04.950649023 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:04.950658083 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:04.950664043 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:04.950680017 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:04.950689077 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:04.950695038 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:04.950711012 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:04.950722933 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:04.950726986 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:04.950742960 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:04.950746059 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:04.950763941 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:04.950771093 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:04.950779915 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:04.950794935 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:04.950798988 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:04.950810909 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:04.950824022 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:04.950826883 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:04.950843096 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:04.950855970 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:04.950858116 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:04.950876951 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:04.950886011 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:04.950894117 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:04.950906992 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:04.950910091 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:04.950926065 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:04.950937033 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:04.950942039 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:04.950953007 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:04.950964928 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:04.950964928 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:04.950982094 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:04.950998068 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:04.951013088 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:04.951014996 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:04.951031923 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:04.951036930 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:04.951050043 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:04.951057911 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:04.951066017 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:04.951081991 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:04.951081991 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:04.951097965 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:04.951112986 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:04.951133013 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:04.951144934 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:04.951157093 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:04.951162100 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:04.951163054 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:04.951176882 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:04.951179028 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:04.951208115 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:04.951236963 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:05.265474081 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:05.265503883 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:05.265516996 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:05.265528917 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:05.265543938 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:05.265556097 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:05.265568018 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:05.265585899 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:05.265598059 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:05.265609980 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:05.265630007 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:05.265650034 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:05.265657902 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:05.265666962 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:05.265680075 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:05.265691996 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:05.265701056 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:05.265710115 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:05.265711069 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:05.265728951 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:05.265731096 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:05.265748978 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:05.265749931 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:05.265765905 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:05.265770912 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:05.265779018 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:05.265795946 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:05.265801907 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:05.265806913 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:05.265820026 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:05.265820026 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:05.265827894 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:05.265919924 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:05.265944004 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:05.268131018 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:05.268150091 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:05.268168926 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:05.268186092 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:05.268203020 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:05.268222094 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:05.268234015 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:05.268245935 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:05.268250942 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:05.268260002 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:05.268276930 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:05.268279076 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:05.268289089 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:05.268290043 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:05.268305063 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:05.268310070 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:05.268323898 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:05.268328905 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:05.268347979 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:05.268353939 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:05.268359900 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:05.268378019 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:05.268381119 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:05.268390894 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:05.268409014 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:05.268414974 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:05.268423080 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:05.268435001 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:05.268450975 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:05.268469095 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:05.268471003 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:05.268480062 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:05.268484116 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:05.268503904 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:05.268507957 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:05.268513918 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:05.268521070 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:05.268536091 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:05.268537998 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:05.268553972 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:05.268570900 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:05.268577099 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:05.268585920 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:05.268599987 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:05.268604994 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:05.268616915 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:05.268621922 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:05.268641949 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:05.268657923 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:05.268661976 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:05.268680096 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:05.268680096 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:05.268697023 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:05.268716097 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:05.268717051 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:05.268734932 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:05.268735886 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:05.268748045 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:05.268764019 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:05.268781900 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:05.268783092 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:05.268790960 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:05.268799067 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:05.268815994 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:05.268817902 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:05.268832922 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:05.268850088 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:05.268853903 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:05.268862963 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:05.268874884 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:05.268896103 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:05.268898010 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:05.268913984 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:05.268930912 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:05.268934965 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:05.268949032 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:05.268949986 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:05.268958092 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:05.268961906 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:05.268975019 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:05.268991947 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:05.269001007 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:05.269004107 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:05.269018888 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:05.269021988 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:05.269040108 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:05.269057989 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:05.269064903 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:05.269068956 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:05.269084930 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:05.269088984 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:05.269107103 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:05.269124031 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:05.269126892 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:05.269135952 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:05.269136906 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:05.269154072 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:05.269155025 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:05.269175053 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:05.269196987 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:05.269217968 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:05.269233942 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:05.269244909 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:05.269252062 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:05.269258022 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:05.269268990 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:05.269282103 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:05.269285917 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:05.269301891 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:05.269319057 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:05.269319057 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:05.269339085 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:05.269356966 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:05.269372940 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:05.269373894 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:05.269392014 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:05.269392967 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:05.269402027 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:05.269408941 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:05.269422054 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:05.269426107 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:05.269444942 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:05.269454956 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:05.269455910 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:05.269474030 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:05.269493103 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:05.269493103 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:05.269507885 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:05.269509077 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:05.269520998 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:05.269532919 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:05.269568920 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:05.269582987 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:05.269584894 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:05.269591093 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:05.269598007 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:05.269603014 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:05.269619942 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:05.269637108 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:05.269649029 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:05.269649982 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:05.269661903 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:05.269681931 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:05.269689083 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:05.269695997 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:05.269700050 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:05.269712925 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:05.269720078 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:05.269726038 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:05.269742012 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:05.269743919 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:05.269762039 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:05.269779921 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:05.269785881 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:05.269795895 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:05.269809961 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:05.269814014 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:05.269831896 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:05.269833088 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:05.269870996 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:05.269886017 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:05.580333948 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:05.580411911 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:05.580434084 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:05.580478907 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:05.580527067 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:05.580539942 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:05.580589056 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:05.580632925 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:05.580662012 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:05.580705881 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:05.580741882 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:05.580756903 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:05.580804110 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:05.580817938 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:05.580864906 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:05.580867052 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:05.580915928 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:05.580925941 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:05.580967903 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:05.581015110 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:05.581041098 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:05.581082106 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:05.581125021 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:05.581131935 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:05.581216097 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:05.581259966 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:05.581273079 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:05.581310034 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:05.581346035 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:05.581367970 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:05.581382990 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:05.581393957 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:05.581434965 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:05.581437111 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:05.581490993 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:05.581532001 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:05.581546068 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:05.581557989 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:05.581569910 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:05.581577063 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:05.581609011 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:05.584474087 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:05.584517956 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:05.584553957 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:05.584561110 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:05.584592104 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:05.584605932 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:05.584630966 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:05.584644079 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:05.584666967 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:05.584669113 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:05.584707022 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:05.584712982 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:05.584743977 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:05.584758043 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:05.584789038 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:05.584790945 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:05.584832907 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:05.584836960 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:05.584868908 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:05.584884882 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:05.584907055 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:05.584913969 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:05.584944963 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:05.584980965 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:05.585019112 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:05.585022926 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:05.585031033 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:05.585057020 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:05.585103035 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:05.585104942 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:05.585146904 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:05.585161924 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:05.585184097 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:05.585222006 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:05.585232973 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:05.585244894 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:05.585259914 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:05.585274935 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:05.585298061 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:05.585305929 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:05.585335970 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:05.585345030 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:05.585372925 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:05.585388899 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:05.585418940 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:05.585419893 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:05.585460901 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:05.585465908 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:05.585498095 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:05.585536003 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:05.585572958 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:05.585602045 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:05.585608959 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:05.585618019 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:05.585624933 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:05.585628986 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:05.585647106 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:05.585661888 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:05.585685015 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:05.585730076 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:05.585731983 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:05.585773945 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:05.585809946 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:05.585823059 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:05.585848093 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:05.585885048 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:05.585894108 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:05.585921049 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:05.585959911 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:05.585969925 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:05.585997105 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:05.586042881 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:05.586044073 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:05.586085081 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:05.586122990 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:05.586137056 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:05.586144924 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:05.586154938 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:05.586160898 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:05.586198092 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:05.586210966 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:05.586235046 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:05.586249113 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:05.586272955 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:05.586308956 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:05.586317062 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:05.586354971 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:05.586374998 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:05.586396933 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:05.586432934 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:05.586457968 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:05.586471081 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:05.586472988 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:05.586508036 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:05.586544991 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:05.586554050 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:05.586591959 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:05.586623907 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:05.586637974 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:05.586666107 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:05.586700916 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:05.586711884 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:05.586731911 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:05.586764097 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:05.586766958 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:05.586795092 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:05.586797953 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:05.586824894 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:05.586833000 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:05.586843014 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:05.586857080 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:05.586862087 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:05.586889029 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:05.586904049 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:05.586929083 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:05.586942911 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:05.586962938 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:05.586981058 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:05.586994886 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:05.586999893 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:05.587027073 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:05.587044001 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:05.587059021 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:05.587071896 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:05.587090015 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:05.587110996 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:05.587132931 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:05.587143898 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:05.587176085 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:05.587207079 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:05.587228060 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:05.587238073 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:05.587244987 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:05.587255001 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:05.587280035 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:05.587292910 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:05.587311029 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:05.587330103 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:05.587343931 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:05.587356091 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:05.587379932 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:05.587395906 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:05.587410927 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:05.587425947 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:05.587444067 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:05.587455988 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:05.587475061 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:05.587492943 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:05.587513924 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:05.587532997 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:05.587548971 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:05.587579012 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:05.587598085 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:05.587610960 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:05.587629080 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:05.587642908 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:05.587655067 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:05.587672949 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:05.587693930 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:05.587706089 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:05.587723017 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:05.587737083 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:05.587763071 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:05.587776899 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:05.587779999 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:05.587811947 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:05.587842941 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:05.587861061 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:05.587873936 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:05.587893009 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:05.587904930 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:05.587924957 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:05.587935925 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:05.587941885 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:05.587969065 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:05.587984085 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:05.588001013 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:05.588016987 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:05.588041067 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:05.588056087 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:05.588076115 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:05.588080883 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:05.588109016 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:05.588124990 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:05.588140965 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:05.588156939 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:05.588171959 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:05.588202953 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:05.588219881 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:05.588234901 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:05.588248968 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:05.588265896 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:05.588270903 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:05.588305950 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:05.588314056 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:05.588360071 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:05.896190882 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:05.896249056 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:05.896277905 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:05.896289110 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:05.896302938 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:05.896326065 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:05.896330118 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:05.896363020 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:05.896379948 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:05.896399975 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:05.896421909 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:05.896435976 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:05.896436930 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:05.896481037 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:05.896483898 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:05.896526098 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:05.896528959 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:05.896563053 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:05.896569967 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:05.896600962 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:05.896605968 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:05.896637917 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:05.896644115 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:05.896675110 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:05.896681070 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:05.896712065 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:05.896727085 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:05.896750927 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:05.896750927 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:05.896797895 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:05.896810055 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:05.896840096 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:05.896867037 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:05.896877050 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:05.896887064 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:05.896917105 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:05.896919966 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:05.896962881 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:05.896967888 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:05.896997929 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:05.897010088 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:05.897036076 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:05.897037983 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:05.897073984 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:05.897079945 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:05.897114992 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:05.897120953 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:05.897170067 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:05.897187948 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:05.897233009 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:05.902774096 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:05.902817965 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:05.902853966 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:05.902853012 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:05.902879000 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:05.902900934 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:05.902904987 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:05.902944088 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:05.902956009 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:05.902981997 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:05.903002977 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:05.903019905 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:05.903042078 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:05.903058052 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:05.903078079 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:05.903094053 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:05.903112888 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:05.903177977 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:05.903179884 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:05.903222084 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:05.903245926 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:05.903260946 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:05.903291941 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:05.903306961 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:05.903328896 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:05.903348923 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:05.903352022 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:05.903376102 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:05.903389931 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:05.903418064 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:05.903438091 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:05.903455019 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:05.903476954 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:05.903492928 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:05.903511047 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:05.903529882 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:05.903547049 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:05.903567076 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:05.903584003 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:05.903604984 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:05.903620958 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:05.903642893 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:05.903656960 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:05.903688908 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:05.903697014 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:05.903731108 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:05.903742075 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:05.903768063 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:05.903786898 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:05.903805971 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:05.903820038 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:05.903844118 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:05.903857946 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:05.903882027 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:05.903897047 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:05.903919935 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:05.903942108 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:05.903956890 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:05.903983116 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:05.904004097 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:05.904011965 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:05.904046059 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:05.904057980 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:05.904083967 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:05.904100895 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:05.904120922 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:05.904135942 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:05.904160023 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:05.904179096 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:05.904196024 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:05.904222965 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:05.904232979 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:05.904270887 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:05.904285908 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:05.904313087 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:05.904318094 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:05.904320955 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:05.904359102 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:05.904371023 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:05.904397011 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:05.904409885 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:05.904436111 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:05.904448986 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:05.904474020 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:05.904484987 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:05.904510021 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:05.904524088 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:05.904550076 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:05.904561043 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:05.904587984 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:05.904608011 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:05.904633999 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:05.904648066 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:05.904675961 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:05.904686928 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:05.904712915 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:05.904731989 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:05.904752016 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:05.904767990 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:05.904788971 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:05.904817104 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:05.904825926 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:05.904860973 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:05.904863119 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:05.904891968 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:05.904901028 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:05.904921055 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:05.904947042 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:05.904959917 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:05.904989004 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:05.905025005 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:05.905061960 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:05.905100107 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:05.905157089 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:05.905163050 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:05.905195951 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:05.905235052 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:05.905236959 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:05.905272961 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:05.905282021 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:05.905296087 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:05.905323982 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:05.905337095 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:05.905361891 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:05.905395031 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:05.905399084 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:05.905416012 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:05.905436993 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:05.905455112 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:05.905472994 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:05.905493021 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:05.905510902 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:05.905531883 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:05.905549049 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:05.905563116 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:05.905596018 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:05.905603886 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:05.905637026 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:05.905658960 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:05.905673981 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:05.905689955 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:05.905711889 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:05.905730009 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:05.905750036 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:05.905767918 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:05.905786037 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:05.905801058 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:05.905823946 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:05.905838013 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:05.905860901 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:05.905874968 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:05.905908108 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:05.905915976 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:05.905950069 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:05.905957937 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:05.905987978 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:05.906002998 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:05.906025887 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:05.906043053 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:05.906064034 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:05.906083107 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:05.906100988 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:05.906126976 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:05.906140089 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:05.906168938 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:05.906177044 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:05.906191111 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:05.906224012 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:05.906238079 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:05.906267881 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:05.906286955 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:05.906306028 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:05.906336069 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:05.906368017 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:05.906776905 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:05.907339096 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:06.211711884 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:06.211754084 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:06.211777925 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:06.211803913 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:06.211819887 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:06.211828947 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:06.211854935 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:06.211863041 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:06.211870909 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:06.211884975 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:06.211899042 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:06.211910963 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:06.211935043 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:06.211954117 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:06.211966038 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:06.211971998 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:06.211993933 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:06.212027073 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:06.212404013 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:06.212456942 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:06.212461948 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:06.212487936 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:06.212512016 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:06.212513924 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:06.212538958 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:06.212563992 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:06.212568998 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:06.212575912 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:06.212584972 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:06.212588072 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:06.212611914 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:06.212629080 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:06.220510006 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:06.220535994 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:06.220551968 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:06.220597982 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:06.220627069 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:06.220722914 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:06.220741034 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:06.220757008 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:06.220772982 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:06.220777035 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:06.220788956 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:06.220803022 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:06.220838070 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:06.220947981 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:06.220966101 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:06.220980883 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:06.220999956 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:06.221000910 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:06.221023083 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:06.221060038 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:06.221087933 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:06.221116066 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:06.221134901 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:06.221134901 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:06.221153975 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:06.221170902 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:06.221173048 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:06.221184015 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:06.221189022 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:06.221206903 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:06.221226931 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:06.221313953 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:06.221333981 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:06.221352100 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:06.221365929 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:06.221368074 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:06.221385002 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:06.221406937 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:06.221549988 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:06.221568108 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:06.221582890 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:06.221599102 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:06.221604109 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:06.221616030 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:06.221632004 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:06.221637011 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:06.221647978 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:06.221668005 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:06.221671104 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:06.221679926 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:06.221690893 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:06.221708059 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:06.221719980 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:06.221724033 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:06.221736908 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:06.221740961 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:06.221776009 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:06.221806049 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:06.221817970 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:06.221834898 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:06.221865892 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:06.221882105 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:06.221893072 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:06.221899033 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:06.221915007 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:06.221936941 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:06.221955061 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:06.222074032 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:06.222091913 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:06.222106934 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:06.222138882 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:06.222161055 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:06.222199917 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:06.222217083 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:06.222233057 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:06.222253084 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:06.222278118 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:06.222296953 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:06.222582102 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:06.222599983 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:06.222619057 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:06.222635031 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:06.222636938 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:06.222646952 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:06.222652912 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:06.222667933 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:06.222670078 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:06.222687006 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:06.222702026 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:06.222704887 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:06.222728014 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:06.222759962 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:06.222815037 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:06.222832918 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:06.222867012 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:06.222892046 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:06.222908020 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:06.222938061 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:06.222978115 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:06.222995043 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:06.223067999 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:06.223083973 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:06.223099947 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:06.223119020 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:06.223130941 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:06.223151922 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:06.223159075 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:06.223170996 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:06.223184109 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:06.223197937 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:06.223200083 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:06.223216057 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:06.223229885 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:06.223232031 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:06.223248005 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:06.223262072 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:06.223267078 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:06.223278046 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:06.223284006 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:06.223303080 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:06.223320961 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:06.223320961 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:06.223336935 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:06.223354101 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:06.223361015 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:06.223371029 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:06.223387003 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:06.223388910 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:06.223398924 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:06.223402977 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:06.223421097 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:06.223443031 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:06.223452091 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:06.223455906 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:06.223468065 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:06.223498106 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:06.223541975 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:06.223552942 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:06.529752016 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:06.529784918 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:06.529900074 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:06.530112982 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:06.530137062 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:06.530153036 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:06.530164957 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:06.530175924 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:06.530189991 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:06.530215025 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:06.530225992 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:06.530240059 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:06.530251980 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:06.530263901 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:06.530287027 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:06.530292988 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:06.530314922 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:06.530340910 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:06.530355930 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:06.530364037 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:06.530374050 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:06.530389071 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:06.530399084 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:06.530414104 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:06.530424118 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:06.530437946 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:06.530461073 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:06.530464888 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:06.530483961 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:06.530505896 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:06.530510902 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:06.530524015 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:06.530527115 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:06.530550003 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:06.530555964 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:06.530580044 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:06.530597925 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:06.538302898 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:06.538336039 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:06.538358927 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:06.538383007 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:06.538400888 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:06.538409948 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:06.538430929 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:06.538434982 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:06.538455009 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:06.538465023 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:06.538480043 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:06.538491964 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:06.538505077 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:06.538527966 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:06.538537025 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:06.538553953 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:06.538564920 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:06.538590908 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:06.538592100 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:06.538625956 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:06.538650990 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:06.538652897 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:06.538662910 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:06.538672924 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:06.538683891 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:06.538697958 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:06.538721085 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:06.538723946 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:06.538742065 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:06.538762093 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:06.538764954 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:06.538788080 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:06.538789034 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:06.538811922 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:06.538820982 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:06.538836002 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:06.538845062 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:06.538860083 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:06.538875103 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:06.538886070 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:06.538898945 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:06.538911104 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:06.538918972 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:06.538934946 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:06.538942099 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:06.538958073 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:06.538965940 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:06.538980961 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:06.538986921 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:06.539004087 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:06.539007902 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:06.539026976 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:06.539031029 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:06.539050102 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:06.539052010 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:06.539074898 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:06.539076090 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:06.539097071 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:06.539098978 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:06.539124012 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:06.539139986 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:06.539146900 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:06.539160967 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:06.539177895 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:06.539201021 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:06.539202929 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:06.539228916 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:06.539230108 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:06.539253950 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:06.539271116 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:06.539274931 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:06.539294004 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:06.539299011 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:06.539321899 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:06.539330959 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:06.539344072 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:06.539352894 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:06.539369106 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:06.539376020 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:06.539402008 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:06.539431095 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:06.539769888 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:06.539819956 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:06.539820910 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:06.539868116 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:06.539962053 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:06.540011883 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:06.540050983 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:06.540100098 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:06.540592909 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:06.540648937 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:06.540667057 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:06.540690899 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:06.540713072 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:06.540716887 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:06.540738106 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:06.540750027 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:06.540761948 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:06.540771008 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:06.540798903 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:06.540819883 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:06.540863037 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:06.540890932 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:06.540910959 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:06.540913105 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:06.540935993 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:06.540940046 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:06.540960073 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:06.540965080 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:06.540994883 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:06.541016102 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:06.541142941 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:06.541166067 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:06.541193962 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:06.541204929 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:06.541218042 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:06.541232109 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:06.541243076 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:06.541255951 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:06.541268110 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:06.541281939 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:06.541292906 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:06.541309118 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:06.541316986 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:06.541332960 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:06.541342974 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:06.541358948 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:06.541368008 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:06.541382074 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:06.541395903 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:06.541409016 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:06.541421890 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:06.541433096 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:06.541445971 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:06.541470051 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:06.541472912 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:06.541491985 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:06.541498899 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:06.541515112 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:06.541524887 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:06.541542053 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:06.541563988 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:06.541572094 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:06.541590929 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:06.541599989 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:06.541613102 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:06.541635036 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:06.541647911 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:06.541657925 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:06.541675091 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:06.541681051 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:06.541693926 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:06.541702986 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:06.541743994 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:06.541763067 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:06.846028090 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:06.846079111 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:06.846157074 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:06.846210003 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:06.846718073 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:06.846759081 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:06.846791029 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:06.846800089 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:06.846837997 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:06.846853018 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:06.846870899 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:06.846884966 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:06.846901894 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:06.846927881 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:06.846946955 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:06.846966028 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:06.846978903 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:06.847003937 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:06.847018957 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:06.847042084 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:06.847047091 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:06.847078085 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:06.847103119 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:06.847130060 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:06.847136021 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:06.847189903 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:06.847732067 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:06.847770929 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:06.847795963 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:06.847816944 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:06.847817898 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:06.847858906 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:06.847871065 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:06.847896099 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:06.847913027 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:06.847934961 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:06.847954035 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:06.847973108 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:06.847985983 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:06.848009109 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:06.848021984 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:06.848051071 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:06.855015039 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:06.855067015 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:06.855093956 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:06.855117083 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:06.855346918 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:06.855389118 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:06.855407000 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:06.855426073 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:06.855436087 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:06.855474949 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:06.855475903 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:06.855515957 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:06.855525017 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:06.855552912 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:06.855566978 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:06.855592012 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:06.855603933 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:06.855628967 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:06.855643034 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:06.855664968 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:06.855691910 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:06.855703115 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:06.855710030 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:06.855741024 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:06.855762959 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:06.855796099 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:06.855801105 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:06.855839968 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:06.855848074 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:06.855876923 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:06.855895042 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:06.855916023 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:06.855921984 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:06.855953932 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:06.855966091 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:06.855988979 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:06.856005907 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:06.856025934 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:06.856041908 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:06.856065989 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:06.856089115 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:06.856113911 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:06.856123924 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:06.856158018 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:06.856170893 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:06.856199026 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:06.856220007 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:06.856239080 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:06.856245041 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:06.856277943 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:06.856293917 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:06.856316090 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:06.856332064 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:06.856353998 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:06.856369019 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:06.856389999 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:06.856416941 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:06.856436968 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:06.856439114 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:06.856477976 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:06.856492043 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:06.856514931 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:06.856528997 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:06.856553078 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:06.856573105 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:06.856590986 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:06.856605053 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:06.856627941 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:06.856642962 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:06.856666088 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:06.856678963 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:06.856703997 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:06.856718063 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:06.856751919 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:06.856760979 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:06.856794119 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:06.856805086 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:06.856832027 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:06.856848955 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:06.856870890 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:06.856878996 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:06.856909037 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:06.856920958 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:06.856945038 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:06.856959105 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:06.857002020 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:06.857002020 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:06.857042074 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:06.857054949 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:06.857078075 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:06.857106924 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:06.857124090 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:06.857125044 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:06.857166052 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:06.857180119 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:06.857203007 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:06.857218027 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:06.857243061 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:06.857256889 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:06.857280970 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:06.857295990 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:06.857316971 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:06.857336998 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:06.857356071 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:06.857364893 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:06.857393026 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:06.857407093 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:06.857439995 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:06.857441902 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:06.857482910 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:06.857491016 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:06.857520103 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:06.857536077 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:06.857558966 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:06.857578993 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:06.857597113 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:06.857614040 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:06.857634068 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:06.857647896 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:06.857672930 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:06.857681990 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:06.857712030 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:06.857724905 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:06.857758999 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:06.857763052 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:06.857800961 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:06.857809067 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:06.857837915 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:06.857851028 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:06.857876062 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:06.857886076 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:06.857913971 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:06.857927084 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:06.857949972 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:06.857973099 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:06.857986927 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:06.858000994 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:06.858025074 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:06.858037949 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:06.858071089 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:06.858072042 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:06.858114004 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:06.858119965 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:06.858151913 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:06.858160019 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:06.858190060 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:06.858201981 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:06.858230114 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:06.858243942 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:06.858266115 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:06.858278990 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:06.858304024 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:06.858316898 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:06.858340979 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:06.858354092 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:06.858387947 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:06.858392954 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:06.858429909 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:06.858444929 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:06.858468056 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:06.858481884 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:06.858506918 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:06.858520031 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:06.858546019 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:06.858557940 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:06.858582020 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:06.858604908 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:06.858618975 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:06.858635902 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:06.858654976 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:06.858675957 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:06.858702898 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:06.858717918 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:06.858760118 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.160792112 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.160819054 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.161897898 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.162317038 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.162334919 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.162350893 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.162368059 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.162381887 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.162383080 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.162398100 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.162404060 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.162421942 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.162437916 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.162451982 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.162455082 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.162482977 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.162498951 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.162504911 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.162513971 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.162563086 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.162580013 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.162599087 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.162611008 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.162616014 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.162626028 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.162632942 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.162643909 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.162650108 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.162663937 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.162666082 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.162682056 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.162687063 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.162698030 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.162713051 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.162723064 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.162741899 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.162775993 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.169759989 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.169786930 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.169826984 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.169852972 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.172852993 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.172878027 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.172911882 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.172945976 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.173012018 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.173032999 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.173051119 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.173064947 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.173070908 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.173084021 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.173111916 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.173122883 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.173127890 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.173144102 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.173167944 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.173167944 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.173190117 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.173240900 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.173531055 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.173551083 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.173567057 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.173583984 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.173588037 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.173610926 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.173619032 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.173628092 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.173636913 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.173662901 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.173666000 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.173685074 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.173686028 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.173708916 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.173715115 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.173734903 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.173737049 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.173753023 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.173753977 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.173769951 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.173787117 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.173796892 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.173804998 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.173806906 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.173821926 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.173825026 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.173839092 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.173842907 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.173866034 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.173867941 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.173892021 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.173896074 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.173913956 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.173923969 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.173937082 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.173943043 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.173959970 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.173965931 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.173985958 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.173996925 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.174007893 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.174012899 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.174022913 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.174031973 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.174047947 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.174058914 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.174065113 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.174088001 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.174088001 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.174102068 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.174113989 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.174118996 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.174138069 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.174149990 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.174158096 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.174161911 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.174175978 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.174185991 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.174199104 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.174206972 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.174221992 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.174225092 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.174247026 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.174263000 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.174268961 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.174278021 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.174292088 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.174294949 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.174309969 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.174316883 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.174333096 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.174340010 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.174356937 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.174359083 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.174380064 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.174390078 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.174401045 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.174403906 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.174417019 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.174428940 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.174453020 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.174453020 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.174477100 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.174478054 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.174494028 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.174499989 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.174525976 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.174530983 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.174547911 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.174551010 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.174568892 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.174582958 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.174586058 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.174598932 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.174602032 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.174617052 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.174624920 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.174643040 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.174649000 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.174659967 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.174674988 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.174684048 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.174700975 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.174710989 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.174726963 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.174729109 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.174741030 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.174747944 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.174765110 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.174777985 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.174782991 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.174788952 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.174803972 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.174806118 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.174823999 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.174829006 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.174850941 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.174850941 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.174875021 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.174876928 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.174901009 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.174907923 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.174916029 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.174922943 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.174943924 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.174949884 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.174959898 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.174968004 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.174983978 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.174999952 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.175015926 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.175035954 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.175052881 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.175067902 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.175069094 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.175077915 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.175082922 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.175085068 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.175086975 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.175091982 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.175107956 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.175126076 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.175153971 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.175154924 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.175178051 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.175199986 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.175204992 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.175223112 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.175249100 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.175252914 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.175261021 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.175267935 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.175271034 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.175287008 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.175293922 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.175303936 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.175319910 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.175332069 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.175335884 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.175339937 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.175352097 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.175354958 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.175369024 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.175388098 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.175398111 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.175405025 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.175415039 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.175421000 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.175436020 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.175441980 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.175451994 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.175458908 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.175467968 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.175483942 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.175494909 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.175499916 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.175509930 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.175518990 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.175535917 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.175544977 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.175551891 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.175580025 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.175604105 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.176481009 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.176541090 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.477664948 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.477715015 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.477780104 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.477819920 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.477874994 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.477885008 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.477916002 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.477924109 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.477927923 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.477931976 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.477969885 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.477988005 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.478003979 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.478008032 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.478045940 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.478061914 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.478095055 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.478102922 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.478136063 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.478146076 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.478173971 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.478178024 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.478212118 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.478219032 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.478250027 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.478267908 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.478290081 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.478293896 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.478327036 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.478339911 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.478364944 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.478379011 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.478410959 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.478418112 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.478454113 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.478467941 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.478491068 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.478512049 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.478528976 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.478540897 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.478565931 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.478580952 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.478602886 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.478606939 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.478641033 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.478648901 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.478678942 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.478696108 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.478724957 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.478750944 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.478800058 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.478801966 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.478848934 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.478857994 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.478897095 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.478903055 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.478934050 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.478949070 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.478971958 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.478990078 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.479010105 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.479022026 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.479049921 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.479057074 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.479099035 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.479105949 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.479156971 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.479167938 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.479203939 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.479218960 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.479243040 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.479258060 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.479281902 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.479295969 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.479319096 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.479331017 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.479357004 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.479361057 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.479406118 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.485162973 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.485274076 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.485276937 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.485332012 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.485405922 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.485457897 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.485595942 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.485649109 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.487597942 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.487641096 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.487678051 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.487704992 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.487720013 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.487725019 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.487740993 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.487782955 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.487956047 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.487993956 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.488008022 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.488032103 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.488034010 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.488070011 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.488079071 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.488106966 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.488116026 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.488145113 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.488154888 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.488183022 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.488194942 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.488229990 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.488231897 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.488274097 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.488301992 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.488315105 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.488373995 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.488424063 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.488425016 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.488472939 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.488476992 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.488512993 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.488528967 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.488550901 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.488554955 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.488588095 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.488601923 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.488635063 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.489099979 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.489166021 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.490250111 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.490279913 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.490314007 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.490330935 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.490345001 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.490375042 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.490381956 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.490387917 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.490416050 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.490427971 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.490432978 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.490446091 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.490463018 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.490473986 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.490499020 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.490526915 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.490573883 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.490608931 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.490628004 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.490639925 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.490667105 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.490674973 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.490695953 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.490710974 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.490716934 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.490753889 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.490819931 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.490868092 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.490864992 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.490919113 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.490920067 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.490964890 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.490969896 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.491017103 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.491023064 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.491066933 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.491084099 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.491132021 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.491187096 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.491235018 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.491245985 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.491271973 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.491288900 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.491305113 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.491326094 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.491362095 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.491409063 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.491445065 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.491457939 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.491476059 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.491497040 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.491503954 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.491533995 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.491544008 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.491553068 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.491584063 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.491590977 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.491636992 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.491652966 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.491698027 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.491712093 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.491756916 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.491760015 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.491791010 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.491806030 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.491821051 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.491842031 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.491849899 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.491878033 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.491888046 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.491899967 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.491911888 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.491915941 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.491944075 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.491961002 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.491971970 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.491991997 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.492017984 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.492023945 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.492048025 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.492069006 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.492075920 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.492104053 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.492115974 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.492132902 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.492136955 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.492152929 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.492183924 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.492198944 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.492213964 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.492239952 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.492249012 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.492254972 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.492279053 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.492300034 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.492306948 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.492328882 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.492335081 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.492361069 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.492363930 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.492391109 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.492394924 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.492410898 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.492419004 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.492434978 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.492446899 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.492470026 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.492480993 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.492499113 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.492511988 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.492530107 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.492546082 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.492566109 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.492573023 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.492590904 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.492600918 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.492628098 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.492629051 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.492645979 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.492664099 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.492675066 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.492693901 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.492712975 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.492722034 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.492752075 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.492780924 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.492783070 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.492815971 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.492830038 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.492846012 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.492861032 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.492872953 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.492902040 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.492902040 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.492929935 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.492933989 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.492949009 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.492957115 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.492965937 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.492985964 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.492995977 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.493012905 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.493033886 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.493046045 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.493069887 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.493077040 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.493096113 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.493103981 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.493132114 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.493134022 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.493150949 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.493160009 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.493185997 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.493187904 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.493205070 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.493216991 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.493244886 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.493252993 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.493268013 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.493279934 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.493304014 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.493308067 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.493316889 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.493335962 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.493362904 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.493370056 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.493398905 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.493401051 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.493417025 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.493428946 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.493446112 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.493463993 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.493483067 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.493509054 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.493518114 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.493551016 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.493566036 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.493577957 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.493602037 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.493604898 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.493621111 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.493659019 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.493662119 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.493691921 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.493707895 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.493726969 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.493738890 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.493757963 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.493777990 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.493784904 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.493799925 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.493813992 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.493819952 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.493840933 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.493866920 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.493880987 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.493901968 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.493908882 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.493921995 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.493937016 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.493959904 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.493963957 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.493978977 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.493992090 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.494009972 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.494019985 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.494046926 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.494062901 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.494112015 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.494158983 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.494195938 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.494226933 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.494247913 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.494256020 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.494263887 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.494291067 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.494311094 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.494321108 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.494335890 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.494349003 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.494373083 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.494378090 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.494400978 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.494416952 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.494419098 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.494452000 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.494465113 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.494504929 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.494525909 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.494565010 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.494575024 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.494604111 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.494612932 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.494649887 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.494671106 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.494715929 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.494719028 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.494755983 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.494764090 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.494796991 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.494802952 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.494843960 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.494946957 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.494988918 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.494996071 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.495026112 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.495038986 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.495065928 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.495069981 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.495102882 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.495121002 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.495158911 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.495191097 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.495243073 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.495882988 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.495925903 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.495953083 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.495956898 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.495970964 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.496002913 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.496018887 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.496041059 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.496043921 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.496078014 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.496089935 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.496115923 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.496123075 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.496155977 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.496159077 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.496193886 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.496206999 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.496238947 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.496243000 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.496279955 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.496284008 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.496314049 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.496335983 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.496351957 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.496366978 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.496388912 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.496401072 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.496427059 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.496431112 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.496471882 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.496471882 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.496516943 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.794817924 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.794874907 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.794913054 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.794944048 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.794961929 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.794984102 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.795006037 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.795017958 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.795044899 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.795084000 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.795105934 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.795150042 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.795161009 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.795201063 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.795237064 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.795277119 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.795316935 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.795330048 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.795337915 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.795342922 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.795367002 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.795394897 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.795408010 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.795432091 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.795445919 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.795447111 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.795485973 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.795501947 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.795525074 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.795561075 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.795578003 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.795598984 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.795619965 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.795636892 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.795651913 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.795686007 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.795713902 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.795727015 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.795727968 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.795764923 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.795789003 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.795803070 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.795825005 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.795840979 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.795850039 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.795876980 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.795914888 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.795929909 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.795952082 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.795972109 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.795998096 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.796005011 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.796040058 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.796077013 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.796098948 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.796114922 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.796144962 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.796153069 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.796168089 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.796190977 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.796211958 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.796231031 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.796247959 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.796268940 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.796292067 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.796318054 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.796324968 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.796360970 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.796396971 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.796415091 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.796437025 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.796451092 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.796490908 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.802470922 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.802517891 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.802546978 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.802563906 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.802582026 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.802603006 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.802623987 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.803881884 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.804691076 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.804732084 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.804769039 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.804796934 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.804805994 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.804836035 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.804862976 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.805023909 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.805062056 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.805119038 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.805186033 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.805226088 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.805279970 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.805794954 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.805834055 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.805872917 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.805896997 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.805910110 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.805910110 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.805947065 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.805985928 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.805998087 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.806025028 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.806071043 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.806080103 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.807348013 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.814996958 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.815041065 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.815078974 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.815088034 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.815109968 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.815134048 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.815145969 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.815177917 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.815216064 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.815252066 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.815298080 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.815315962 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.815341949 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.815381050 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.815402031 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.815418005 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.815455914 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.815476894 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.815493107 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.815531969 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.815551043 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.815568924 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.815614939 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.815622091 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.815654993 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.815656900 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.815671921 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.815695047 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.815716028 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.815732956 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.815771103 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.815807104 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.815808058 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.815820932 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.815845013 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.815865040 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.815886021 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.815915108 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.815932989 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.815948009 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.815975904 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.815989017 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.816014051 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.816051960 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.816070080 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.816087961 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.816102982 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.816126108 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.816143990 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.816164970 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.816203117 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.816226006 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.816247940 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.816256046 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.816288948 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.816307068 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.816328049 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.816365957 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.816402912 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.816411972 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.816427946 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.816440105 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.816468954 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.816478014 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.816514969 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.816541910 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.816560030 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.816562891 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.816601992 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.816617966 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.816638947 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.816658020 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.816677094 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.816715002 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.816730022 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.816751003 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.816764116 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.816788912 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.816802025 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.816827059 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.816864014 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.816873074 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.816880941 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.816915035 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.816927910 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.816951990 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.816971064 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.816989899 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.817003965 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.817028046 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.817064047 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.817081928 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.817101955 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.817116976 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.817138910 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.817154884 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.817188025 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.817229986 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.817245960 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.817266941 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.817281008 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.817306995 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.817315102 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.817346096 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.817383051 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.817404032 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.817420959 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.817440033 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.817456961 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.817471981 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.817504883 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.817508936 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.817547083 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.817583084 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.817609072 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.817621946 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.817635059 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.817660093 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.817675114 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.817696095 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.817733049 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.817754984 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.817770004 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.817785025 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.817817926 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.817823887 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.817859888 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.817873955 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.817897081 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.817934990 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.817954063 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.817971945 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.817980051 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.818008900 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.818026066 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.818048000 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.818063974 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.818084955 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.818106890 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.818130970 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.818140030 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.818172932 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.818209887 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.818229914 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.818247080 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.818250895 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.818284988 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.818321943 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.818346024 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.818358898 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.818380117 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.818396091 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.818401098 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.818443060 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.818449020 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.818485022 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.818521976 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:07.818547010 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:07.818567038 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:08.111072063 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:08.111156940 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:08.111192942 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:08.111228943 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:08.111243010 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:08.111277103 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:08.111277103 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:08.111335039 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:08.111380100 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:08.111387014 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:08.111435890 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:08.111475945 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:08.111483097 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:08.111530066 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:08.111569881 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:08.111576080 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:08.111625910 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:08.111670017 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:08.111673117 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:08.111727953 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:08.111771107 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:08.111777067 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:08.111819983 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:08.111854076 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:08.111860037 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:08.111886024 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:08.111916065 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:08.111926079 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:08.111933947 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:08.111948013 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:08.111952066 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:08.111979008 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:08.111989975 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:08.112018108 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:08.112029076 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:08.112052917 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:08.112057924 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:08.112092018 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:08.112098932 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:08.112133980 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:08.112138033 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:08.112168074 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:08.112169027 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:08.112216949 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:08.112257004 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:08.112265110 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:08.112313032 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:08.112351894 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:08.112369061 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:08.112417936 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:08.112459898 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:08.112466097 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:08.112513065 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:08.112552881 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:08.112561941 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:08.112608910 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:08.112649918 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:08.112657070 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:08.112703085 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:08.112742901 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:08.112756968 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:08.112792015 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:08.112823009 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:08.112833023 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:08.112854958 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:08.112885952 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:08.112893105 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:08.112901926 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:08.112915993 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:08.112931967 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:08.112953901 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:08.112968922 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:08.112998962 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:08.113002062 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:08.113035917 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:08.113042116 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:08.113090992 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:08.113128901 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:08.113140106 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:08.113199949 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:08.113234997 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:08.113238096 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:08.113269091 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:08.113312006 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:08.113312006 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:08.113348007 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:08.113383055 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:08.113385916 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:08.113418102 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:08.113452911 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:08.113456011 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:08.113491058 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:08.113523006 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:08.113531113 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:08.113548040 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:08.113558054 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:08.113571882 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:08.113591909 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:08.113594055 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:08.113610029 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:08.113616943 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:08.113629103 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:08.113651037 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:08.133132935 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:08.133169889 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:08.133197069 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:08.133219004 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:08.133243084 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:08.133260965 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:08.133265972 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:08.133285046 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:08.133285046 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:08.133308887 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:08.133327007 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:08.133343935 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:08.133346081 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:08.133368969 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:08.133369923 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:08.133389950 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:08.133608103 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:08.133682013 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:08.133690119 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:08.134573936 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:08.134646893 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:08.428297043 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:08.428350925 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:08.428400040 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:08.428503036 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:08.428560019 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:08.448930979 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:08.448987961 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:08.449029922 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:08.449069977 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:08.449119091 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:08.449125051 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:08.449174881 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:08.449182987 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:08.449187040 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:08.449192047 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:08.449275970 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:08.449315071 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:08.449352980 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:08.449376106 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:08.449389935 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:08.449393034 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:08.449407101 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:08.449436903 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:08.449444056 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:08.449491024 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:08.449495077 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:08.449532986 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:08.449569941 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:08.449584961 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:08.449609041 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:08.449623108 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:08.449645996 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:08.449664116 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:08.449682951 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:08.449702024 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:08.449721098 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:08.449739933 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:08.449759007 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:08.449779987 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:08.449811935 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:08.449814081 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:08.449856997 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:08.449892998 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:08.449908018 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:08.449930906 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:08.449943066 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:08.449968100 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:08.449986935 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:08.450005054 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:08.450012922 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:08.450042963 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:08.450057030 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:08.450081110 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:08.450086117 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:08.450129986 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:08.450175047 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:08.450181007 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:08.450212955 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:08.450251102 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:08.450263023 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:08.450288057 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:08.450324059 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:08.450341940 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:08.450362921 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:08.450400114 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:08.450414896 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:08.450448036 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:08.450470924 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:08.450489998 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:08.450495005 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:08.450536013 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:08.450573921 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:08.450575113 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:08.450611115 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:08.450618982 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:08.450634956 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:08.450647116 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:08.450656891 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:08.450685024 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:08.450699091 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:08.450721979 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:08.450767994 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:08.450773954 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:08.450809956 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:08.450859070 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:08.450867891 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:08.450898886 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:08.450937986 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:08.450954914 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:08.450974941 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:08.451013088 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:08.451025963 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:08.451050043 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:08.451101065 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:08.451108932 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:08.451200962 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:08.451250076 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:08.451286077 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:08.451287985 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:08.451299906 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:08.451323032 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:08.451356888 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:08.451361895 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:08.451374054 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:08.451397896 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:08.451416969 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:08.451436043 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:08.451448917 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:08.451472998 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:08.451488972 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:08.451519012 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:08.451524973 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:08.451561928 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:08.451616049 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:08.451618910 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:08.451668978 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:08.451720953 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:08.451721907 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:08.451767921 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:08.451806068 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:08.451822042 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:08.451843977 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:08.451891899 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:08.451895952 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:08.451934099 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:08.451971054 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:08.451983929 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:08.452009916 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:08.452047110 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:08.452060938 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:08.452084064 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:08.452121973 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:08.452136993 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:08.452158928 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:08.452205896 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:08.452210903 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:08.452248096 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:08.452285051 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:08.452301025 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:08.452322960 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:08.452366114 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:08.452375889 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:08.452402115 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:08.452440023 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:08.452455044 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:08.452476978 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:08.452522993 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:08.452529907 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:08.452564955 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:08.452601910 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:08.452617884 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:08.452641964 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:08.452658892 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:08.452680111 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:08.452692986 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:08.452717066 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:08.452729940 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:08.452754974 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:08.452778101 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:08.452791929 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:08.452820063 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:08.452838898 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:08.452840090 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:08.452881098 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:08.452884912 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:08.452919960 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:08.452933073 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:08.452959061 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:08.452971935 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:08.452996969 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:08.453011990 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:08.453033924 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:08.453072071 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:08.453087091 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:08.453109980 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:08.453126907 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:08.453160048 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:08.453192949 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:08.453229904 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:08.453268051 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:08.453273058 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:08.453290939 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:08.453305960 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:08.453353882 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:08.453361988 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:08.453366041 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:08.453403950 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:08.453440905 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:08.453457117 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:08.453488111 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:08.453530073 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:08.453540087 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:08.453567028 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:08.453587055 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:08.453603983 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:08.453624010 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:08.453641891 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:08.453675985 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:08.453690052 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:08.453691959 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:08.453727007 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:08.453764915 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:08.453785896 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:08.453810930 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:08.453825951 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:08.453854084 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:08.453890085 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:08.453903913 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:08.453929901 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:08.453967094 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:08.453982115 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:08.454004049 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:08.454041958 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:08.454057932 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:08.454080105 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:08.454130888 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:08.454138041 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:08.454195023 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:08.454231977 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:08.454245090 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:08.454262018 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:08.454269886 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:08.454277039 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:08.454307079 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:08.454313040 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:08.454358101 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:08.454399109 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:08.454411983 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:08.454437017 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:08.454444885 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:08.454482079 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:08.454494953 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:08.454525948 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:08.454539061 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:08.454561949 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:08.454580069 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:08.454600096 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:08.454607010 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:08.454638004 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:08.454651117 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:08.454698086 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:08.745909929 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:08.746161938 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:08.763767958 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:08.763952971 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:08.769342899 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:08.769392014 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:08.769428968 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:08.769465923 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:08.769504070 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:08.769524097 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:08.769541025 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:08.769556999 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:08.769562960 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:08.769567966 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:08.769572020 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:08.769591093 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:08.769593000 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:08.769632101 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:08.769654036 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:08.769670010 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:08.769701004 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:08.769707918 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:08.769723892 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:08.769747019 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:08.769766092 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:08.769783974 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:08.769802094 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:08.769828081 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:08.769836903 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:08.769864082 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:08.769879103 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:08.769911051 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:08.769913912 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:08.769962072 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:08.770006895 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:08.770045996 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:08.770061970 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:08.770092964 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:08.770107985 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:08.770134926 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:08.770148993 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:08.770173073 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:08.770190954 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:08.770211935 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:08.770231009 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:08.770248890 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:08.770263910 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:08.770286083 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:08.770304918 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:08.770323992 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:08.770344019 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:08.770361900 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:08.770378113 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:08.770411015 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:08.770418882 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:08.770452976 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:08.770467997 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:08.770490885 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:08.770509005 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:08.770529032 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:08.770549059 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:08.770565987 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:08.770584106 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:08.770602942 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:08.770627022 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:08.770641088 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:08.770653963 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:08.770678043 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:08.770694017 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:08.770725965 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:08.770741940 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:08.770766973 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:08.770781994 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:08.770804882 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:08.770823956 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:08.770843983 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:08.770865917 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:08.770889044 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:08.770906925 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:08.770962000 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:08.770962954 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:08.771002054 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:08.771022081 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:08.771038055 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:08.771056890 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:08.771076918 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:08.771097898 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:08.771128893 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:08.771138906 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:08.771193027 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:08.771202087 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:08.771239996 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:08.771260977 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:08.771276951 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:08.771291018 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:08.771316051 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:08.771330118 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:08.771363974 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:08.771365881 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:08.771406889 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:08.771420956 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:08.771445990 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:08.771464109 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:08.771482944 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:08.771506071 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:08.771522045 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:08.771539927 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:08.771559000 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:08.771599054 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:08.771600008 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:08.771611929 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:08.771636963 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:08.771656036 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:08.771683931 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:08.771692038 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:08.771728039 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:08.771747112 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:08.771764994 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:08.771790028 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:08.771802902 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:08.771816969 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:08.771842003 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:08.771859884 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:08.771879911 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:08.771894932 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:08.771919012 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:08.771939039 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:08.771955967 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:08.771982908 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:08.772001028 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:08.772001982 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:08.772044897 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:08.772080898 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:08.772119045 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:08.772124052 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:08.772130966 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:08.772156954 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:08.772176981 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:08.772192001 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:08.772200108 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:08.772229910 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:08.772245884 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:08.772269011 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:08.772284031 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:08.772322893 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:08.772331953 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:08.772382021 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:08.772459984 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:08.772525072 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:08.772557974 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:08.772622108 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:08.772664070 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:08.772726059 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:08.772737026 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:08.772794008 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:08.772811890 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:08.772865057 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:08.772871017 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:08.772932053 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:08.772979021 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:08.773037910 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:08.773072958 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:08.773128986 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:08.773148060 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:08.773197889 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:08.773202896 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:08.773251057 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:08.773289919 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:08.773375034 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:08.773390055 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:08.773448944 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:08.773463011 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:08.773520947 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:08.773535013 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:08.773593903 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:08.773592949 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:08.773648024 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:08.773663998 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:08.773725033 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:08.773777962 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:08.773840904 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:08.773849010 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:08.773890018 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:08.773904085 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:08.773927927 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:08.773951054 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:08.773966074 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:08.773978949 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:08.774003983 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:08.774019957 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:08.774041891 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:08.774066925 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:08.774087906 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:08.774091959 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:08.774130106 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:08.774142981 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:08.774167061 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:08.774190903 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:08.774204969 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:08.774215937 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:08.774245024 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:08.774260044 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:08.774283886 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:08.774302006 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:08.774322033 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:08.774334908 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:08.774358034 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:08.774375916 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:08.774405003 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:08.774410963 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:08.774446964 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:08.774465084 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:08.774483919 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:08.774509907 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:08.774523020 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:08.774545908 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:08.774559975 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:08.774578094 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:08.774595976 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:08.774614096 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:08.774633884 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:08.774648905 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:08.774672031 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:08.774687052 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:08.774719000 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:08.774723053 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:08.774760008 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:08.774774075 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:08.774796009 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:08.774812937 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:08.774835110 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:08.774852037 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:08.774885893 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:08.774892092 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:08.774930954 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:08.774944067 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:08.774969101 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:08.774987936 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:08.775023937 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:08.775034904 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:08.775093079 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:08.775137901 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:08.775197029 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:08.775289059 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:08.775345087 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:08.775347948 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:08.775388956 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:08.775402069 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:08.775427103 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:08.775441885 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:08.775465012 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:08.775474072 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:08.775502920 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:08.775523901 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:08.775540113 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:08.775557995 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:08.775585890 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:08.775593996 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:08.775628090 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:08.775640965 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:08.775665998 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:08.775681019 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:08.775702953 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:08.775718927 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:08.775743008 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:08.775757074 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:08.775799990 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:09.061058044 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:09.061098099 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:09.061111927 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:09.061135054 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:09.061152935 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:09.061177969 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:09.061193943 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:09.061208963 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:09.061232090 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:09.061264038 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:09.061270952 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:09.061289072 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:09.061327934 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:09.061336040 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:09.061340094 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:09.067338943 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:09.067477942 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:09.078192949 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:09.078362942 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:09.084645033 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:09.084667921 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:09.084753990 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:09.084803104 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:09.090473890 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:09.090498924 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:09.090517044 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:09.090549946 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:09.090574026 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:09.090595961 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:09.090619087 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:09.090672016 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:09.090718031 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:09.090724945 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:09.090728998 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:09.090945005 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:09.090970039 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:09.091022015 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:09.091042995 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:09.091100931 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:09.091156006 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:09.091180086 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:09.091306925 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:09.091332912 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:09.091356039 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:09.091367960 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:09.091383934 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:09.091404915 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:09.091409922 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:09.091428995 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:09.091459036 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:09.091921091 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:09.091986895 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:09.091996908 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:09.092010975 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:09.092035055 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:09.092048883 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:09.092056990 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:09.092070103 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:09.092103958 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:09.092211962 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:09.092236996 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:09.092261076 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:09.092267036 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:09.092283010 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:09.092293978 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:09.092305899 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:09.092313051 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:09.092328072 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:09.092329025 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:09.092355013 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:09.092355013 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:09.092380047 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:09.092386007 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:09.092402935 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:09.092402935 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:09.092439890 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:09.092456102 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:09.092502117 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:09.092663050 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:09.092688084 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:09.092710972 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:09.092726946 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:09.092730999 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:09.092745066 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:09.092762947 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:09.092792988 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:09.092798948 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:09.092817068 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:09.092839003 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:09.092849970 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:09.092855930 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:09.092861891 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:09.092880011 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:09.092890024 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:09.092896938 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:09.092915058 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:09.092932940 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:09.092938900 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:09.092958927 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:09.092986107 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:09.092992067 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:09.093010902 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:09.093024015 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:09.093033075 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:09.093040943 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:09.093055964 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:09.093056917 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:09.093080044 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:09.093092918 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:09.093101025 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:09.093102932 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:09.093123913 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:09.093127966 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:09.093146086 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:09.093147993 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:09.093173027 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:09.093190908 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:09.093198061 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:09.093202114 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:09.093209028 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:09.093239069 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:09.093244076 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:09.093271017 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:09.093297005 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:09.093322992 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:09.093327999 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:09.093406916 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:09.093550920 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:09.093578100 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:09.093600988 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:09.093611002 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:09.093643904 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:09.093657970 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:09.095468044 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:09.096273899 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:09.406052113 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:09.406100988 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:09.406140089 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:09.406188011 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:09.406225920 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:09.406235933 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:09.406264067 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:09.406270981 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:09.406277895 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:09.406281948 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:09.406286001 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:09.406301975 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:09.406343937 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:09.406347990 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:09.406364918 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:09.406393051 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:09.406424046 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:09.406435966 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:09.406450987 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:09.406475067 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:09.406488895 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:09.406514883 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:09.406527042 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:09.406550884 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:09.406563997 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:09.406589985 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:09.406604052 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:09.406627893 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:09.406646967 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:09.406675100 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:09.406704903 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:09.406716108 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:09.406733990 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:09.406753063 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:09.406773090 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:09.406791925 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:09.406810045 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:09.406833887 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:09.406863928 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:09.406869888 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:09.406887054 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:09.406915903 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:09.406950951 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:09.406954050 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:09.406971931 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:09.407002926 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:09.407012939 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:09.407044888 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:09.407080889 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:09.407082081 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:09.407103062 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:09.407140970 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:09.407141924 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:09.407180071 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:09.407207966 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:09.407217979 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:09.407239914 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:09.407255888 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:09.407284975 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:09.407293081 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:09.407315016 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:09.407331944 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:09.407371998 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:09.407377958 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:09.407386065 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:09.407419920 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:09.407444954 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:09.407459021 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:09.407496929 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:09.407500029 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:09.407524109 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:09.407535076 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:09.407550097 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:09.407572031 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:09.407601118 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:09.407609940 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:09.407640934 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:09.407648087 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:09.407661915 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:09.407695055 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:09.407715082 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:09.407737970 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:09.407747030 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:09.407774925 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:09.407793999 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:09.407814026 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:09.407840967 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:09.407851934 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:09.407871962 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:09.407890081 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:09.407906055 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:09.407928944 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:09.407951117 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:09.407965899 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:09.407989025 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:09.408010960 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:09.408011913 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:09.408054113 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:09.408067942 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:09.408090115 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:09.408102989 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:09.408128023 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:09.408152103 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:09.408165932 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:09.408198118 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:09.408201933 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:09.408215046 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:09.408240080 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:09.408257008 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:09.408277035 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:09.408293962 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:09.408323050 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:09.408333063 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:09.408365011 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:09.408377886 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:09.408401966 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:09.408418894 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:09.408442974 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:09.408463001 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:09.408479929 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:09.408505917 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:09.408515930 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:09.408535004 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:09.408554077 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:09.408579111 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:09.408590078 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:09.408617020 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:09.408636093 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:09.408641100 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:09.408677101 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:09.408694029 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:09.408715010 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:09.408735037 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:09.408751965 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:09.408765078 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:09.408788919 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:09.408807993 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:09.408826113 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:09.408847094 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:09.408863068 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:09.408889055 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:09.408900976 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:09.408921957 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:09.408946037 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:09.408951044 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:09.408987999 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:09.409002066 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:09.409024954 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:09.409039974 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:09.409064054 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:09.409079075 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:09.409101963 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:09.409123898 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:09.409137964 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:09.409161091 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:09.409174919 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:09.409178972 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:09.409212112 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:09.409224987 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:09.409260035 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:09.409266949 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:09.409301043 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:09.409315109 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:09.409337997 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:09.409351110 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:09.409375906 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:09.409389019 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:09.409414053 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:09.409451962 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:09.409487009 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:09.409488916 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:09.409526110 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:09.409574032 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:09.409585953 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:09.409590006 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:09.409625053 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:09.409632921 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:09.409672022 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:09.409674883 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:09.409707069 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:09.409712076 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:09.409744024 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:09.409751892 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:09.409769058 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:09.409789085 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:09.409827948 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:09.409842968 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:09.409866095 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:09.409883022 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:09.409913063 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:09.409914970 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:09.409957886 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:09.409992933 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:09.409995079 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:09.410008907 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:09.410039902 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:09.410059929 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:09.410068989 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:09.410124063 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:09.410140991 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:09.410173893 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:09.410190105 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:09.410213947 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:09.410238028 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:09.410253048 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:09.410276890 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:09.410291910 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:09.410330057 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:09.410331964 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:09.410350084 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:09.410378933 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:09.410384893 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:09.410422087 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:09.410443068 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:09.410461903 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:09.410501003 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:09.410501957 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:09.410538912 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:09.410545111 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:09.410557985 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:09.410609961 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:09.725423098 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:09.725488901 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:09.725537062 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:09.725558043 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:09.725579977 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:09.725594997 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:09.725619078 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:09.725637913 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:09.725657940 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:09.725658894 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:09.725697041 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:09.725703001 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:09.725714922 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:09.725733995 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:09.725759029 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:09.725771904 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:09.725780010 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:09.725807905 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:09.725836992 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:09.725855112 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:09.725869894 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:09.725897074 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:09.725914955 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:09.725938082 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:09.725953102 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:09.725975990 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:09.726015091 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:09.726032972 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:09.726052999 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:09.726066113 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:09.726090908 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:09.726110935 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:09.726128101 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:09.726144075 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:09.726175070 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:09.726188898 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:09.726217031 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:09.726232052 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:09.726254940 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:09.726272106 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:09.726294041 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:09.726331949 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:09.726355076 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:09.726367950 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:09.726387024 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:09.726407051 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:09.726418972 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:09.726444006 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:09.726461887 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:09.726491928 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:09.726501942 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:09.726533890 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:09.726556063 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:09.726571083 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:09.726588964 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:09.726609945 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:09.726634026 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:09.726655960 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:09.726670980 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:09.726707935 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:09.726768017 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:09.726769924 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:09.726820946 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:09.726872921 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:09.726882935 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:09.726914883 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:09.726953030 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:09.726973057 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:09.726989985 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:09.727015972 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:09.727027893 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:09.727065086 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:09.727065086 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:09.727080107 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:09.727102041 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:09.727121115 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:09.727169037 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:09.727176905 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:09.727214098 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:09.727237940 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:09.727257013 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:09.727258921 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:09.727318048 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:09.727365017 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:09.727380037 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:09.727405071 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:09.727442026 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:09.727459908 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:09.727483034 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:09.727521896 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:09.727538109 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:09.727559090 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:09.727606058 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:09.727615118 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:09.727648020 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:09.727684975 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:09.727700949 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:09.727722883 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:09.727762938 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:09.727776051 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:09.727798939 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:09.727811098 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:09.727837086 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:09.727850914 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:09.727888107 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:09.727946997 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:09.727955103 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:09.727999926 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:09.728037119 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:09.728053093 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:09.728075027 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:09.728113890 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:09.728127003 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:09.728149891 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:09.728163958 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:09.728188992 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:09.728193998 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:09.728225946 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:09.728272915 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:09.728281021 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:09.728315115 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:09.728351116 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:09.728367090 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:09.728389978 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:09.728427887 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:09.728455067 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:09.728466034 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:09.728466988 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:09.728518963 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:09.728526115 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:09.728575945 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:09.728590012 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:09.728635073 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:09.728643894 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:09.728677034 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:09.728713036 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:09.728729963 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:09.728751898 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:09.728758097 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:09.728789091 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:09.728825092 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:09.728841066 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:09.728863001 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:09.728877068 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:09.728900909 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:09.728948116 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:09.728962898 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:09.728982925 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:09.728990078 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:09.728993893 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:09.729037046 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:09.729039907 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:09.729094982 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:09.729150057 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:09.729150057 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:09.729190111 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:09.729228020 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:09.729243040 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:09.729264021 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:09.729278088 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:09.729310989 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:09.729315042 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:09.729351997 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:09.729388952 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:09.729404926 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:09.729425907 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:09.729440928 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:09.729465008 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:09.729474068 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:09.729501963 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:09.729516983 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:09.729540110 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:09.729547977 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:09.729577065 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:09.729624033 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:09.729629993 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:09.729665995 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:09.729701996 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:09.729721069 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:09.729756117 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:09.729757071 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:09.729813099 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:09.729861975 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:09.729868889 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:09.729899883 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:09.729938030 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:09.729954958 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:09.729984045 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:09.730025053 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:09.730038881 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:09.730062962 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:09.730074883 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:09.730099916 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:09.730138063 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:09.730151892 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:09.730174065 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:09.730187893 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:09.730211973 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:09.730248928 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:09.730263948 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:09.730294943 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:09.730303049 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:09.730336905 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:09.730374098 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:09.730389118 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:09.730412960 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:09.730417967 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:09.730451107 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:09.730489016 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:09.730508089 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:09.730526924 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:09.730546951 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:09.730565071 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:09.730578899 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:09.730612040 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:09.730614901 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:09.730654955 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:09.730691910 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:09.730705976 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:09.730730057 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:09.730743885 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:09.730767965 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:09.730786085 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:09.730808973 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:09.730823994 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:09.730859995 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:09.730897903 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:09.730916023 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:09.730945110 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:09.730946064 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:09.730987072 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:09.730994940 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:09.731024981 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:09.731064081 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:09.731079102 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:09.731101036 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:09.731120110 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:09.731157064 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:09.731163979 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:09.731497049 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:10.045537949 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.045561075 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.045576096 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.045600891 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.045617104 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.045630932 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.045665979 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.045681953 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.045697927 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.045700073 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:10.045711040 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.045727968 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.045728922 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:10.045733929 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:10.045739889 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:10.045744896 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.045763969 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.045773983 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:10.045780897 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.045798063 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.045814991 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.045819044 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:10.045835018 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.045847893 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:10.045854092 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.045870066 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.045876980 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:10.045888901 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.045905113 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.045922995 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.045923948 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:10.045938969 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.045955896 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.045960903 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:10.045974970 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.045993090 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.045994997 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:10.046008110 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:10.046010017 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.046026945 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.046045065 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:10.046046972 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.046066046 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.046087980 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:10.046089888 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.046109915 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.046112061 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:10.046133041 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.046150923 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.046154976 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:10.046168089 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.046185017 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.046194077 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:10.046201944 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.046214104 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:10.046217918 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.046235085 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.046240091 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:10.046250105 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.046269894 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.046278000 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:10.046287060 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.046303988 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.046319962 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:10.046320915 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.046333075 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:10.046336889 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.046354055 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.046354055 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:10.046370029 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.046386003 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.046396017 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:10.046408892 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.046427011 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.046427965 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:10.046439886 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:10.046442986 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.046461105 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.046478033 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.046483994 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:10.046494007 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.046510935 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.046523094 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:10.046526909 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.046538115 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:10.046546936 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.046565056 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.046581030 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.046587944 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:10.046597958 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.046613932 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.046617985 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:10.046629906 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.046647072 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.046648026 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:10.046664000 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.046683073 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:10.046683073 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.046700954 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.046701908 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:10.046715975 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.046734095 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.046747923 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:10.046750069 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.046766043 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.046780109 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:10.046782970 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.046797037 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:10.046799898 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.046819925 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.046824932 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:10.046833038 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:10.046838045 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.046854973 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.046870947 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.046874046 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:10.046883106 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.046892881 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:10.046902895 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.046921015 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.046932936 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:10.046936989 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.046950102 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:10.046953917 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.046968937 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:10.046971083 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.046988010 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.047003984 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.047015905 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.047019958 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:10.047029018 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.047040939 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.047054052 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.047065973 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:10.047070980 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.047091007 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.047106028 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:10.047108889 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.047139883 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.047138929 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:10.047156096 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.047162056 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:10.047173023 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.047188997 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.047203064 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:10.047208071 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.047226906 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.047239065 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:10.047243118 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.047260046 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.047275066 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:10.047276020 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.047291994 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.047306061 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:10.047308922 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.047318935 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:10.047326088 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.047333956 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:10.047344923 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.047363043 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.047377110 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:10.047379017 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.047393084 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:10.047396898 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.047410965 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:10.047413111 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.047430038 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.047446012 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.047456980 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:10.047462940 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.047486067 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.047488928 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:10.047503948 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.047521114 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:10.047522068 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.047538042 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.047543049 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:10.047554016 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.047569990 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.047585964 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.047586918 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:10.047601938 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.047621012 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.047622919 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:10.047637939 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.047653913 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:10.047655106 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.047672033 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.047686100 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:10.047687054 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.047703981 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.047719955 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.047734022 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:10.047736883 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.047755003 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:10.047755957 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.047774076 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.047785044 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:10.047790051 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.047810078 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:10.047854900 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:10.047884941 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.047904015 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.047915936 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.047928095 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.047940016 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.047950029 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:10.047956944 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.047976017 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.047981977 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:10.047993898 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.048011065 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.048022985 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:10.048027039 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.048036098 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:10.048043013 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.048059940 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.048073053 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:10.048075914 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.048093081 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.048105001 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:10.048111916 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.048115969 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:10.048130989 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.048146963 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.048157930 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:10.048163891 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.048178911 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:10.048180103 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.048197031 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.048207998 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:10.048213959 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.048230886 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.048243046 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:10.048252106 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.048269033 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.048276901 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:10.048315048 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:10.048326969 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:10.362138033 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.362251997 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.362282038 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.362282991 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:10.362306118 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.362333059 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.362345934 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:10.362370014 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.362389088 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:10.362397909 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.362417936 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:10.362420082 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.362442970 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.362461090 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:10.362468004 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.362471104 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:10.362492085 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.362493992 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:10.362517118 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.362533092 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:10.362540960 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:10.362540960 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.362567902 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.362581015 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:10.362591982 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.362597942 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:10.362612963 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:10.362617016 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.362641096 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.362668037 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:10.362669945 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.362694025 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.362700939 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:10.362719059 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.362730980 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:10.362741947 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.362746954 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:10.362766981 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.362785101 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:10.362792969 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.362799883 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:10.362807035 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:10.362818003 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.362838984 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.362849951 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:10.362862110 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.362874031 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:10.362890959 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:10.362917900 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:10.362925053 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.362947941 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.362972021 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.362993956 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:10.362997055 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.363018990 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.363029957 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:10.363043070 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.363046885 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:10.363068104 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.363080978 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:10.363089085 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:10.363091946 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.363127947 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.363133907 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:10.363157988 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.363169909 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:10.363181114 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.363207102 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.363210917 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:10.363230944 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.363244057 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:10.363255024 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.363259077 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:10.363277912 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.363284111 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:10.363301992 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.363317013 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:10.363325119 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.363336086 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:10.363348961 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.363353014 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:10.363373041 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.363384962 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:10.363398075 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.363403082 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:10.363423109 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.363435030 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:10.363445997 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.363455057 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:10.363471985 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.363477945 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:10.363502026 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.363503933 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:10.363512039 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:10.363526106 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.363548040 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.363559961 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:10.363574028 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.363579988 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:10.363596916 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.363603115 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:10.363620996 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.363637924 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:10.363645077 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.363651991 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:10.363671064 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.363672018 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:10.363682985 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:10.363696098 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.363715887 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.363739014 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.363750935 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:10.363761902 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.363765955 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:10.363785982 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.363792896 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:10.363810062 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.363816023 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:10.363832951 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.363842964 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:10.363850117 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:10.363858938 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.363883018 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.363893032 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:10.363903999 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.363917112 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:10.363926888 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.363931894 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:10.363940001 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:10.363949060 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.363971949 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.363984108 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:10.363995075 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.364002943 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:10.364018917 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.364026070 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:10.364036083 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:10.364047050 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.364069939 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:10.364073038 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.364094973 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.364115000 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:10.364120007 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.364142895 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.364154100 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:10.364166975 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.364171028 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:10.364190102 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.364204884 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:10.364211082 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:10.364214897 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.364240885 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.364255905 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:10.364265919 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.364267111 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:10.364289045 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.364300966 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:10.364312887 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.364316940 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:10.364336014 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.364351034 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:10.364356041 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:10.364358902 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.364382029 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.364389896 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:10.364404917 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.364409924 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:10.364422083 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:10.364430904 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.364454985 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.364478111 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.364490032 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:10.364501953 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.364506006 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:10.364525080 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.364543915 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:10.364547968 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.364559889 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:10.364573002 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.364577055 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:10.364595890 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.364608049 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:10.364614010 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:10.364623070 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.364645958 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.364666939 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:10.364669085 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.364691973 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.364705086 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:10.364716053 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.364721060 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:10.364739895 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.364743948 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:10.364753008 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:10.364763975 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.364784002 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.364797115 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:10.364810944 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.364830017 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:10.364835978 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.364840984 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:10.364859104 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.364866018 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:10.364882946 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.364886999 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:10.364906073 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.364918947 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:10.364928961 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.364933014 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:10.364952087 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.364957094 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:10.364974976 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.364983082 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:10.365000963 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.365006924 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:10.365015984 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:10.365025997 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.365046978 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.365073919 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.365097046 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.365118027 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.365139961 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:10.365140915 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.365158081 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:10.365164042 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.365165949 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:10.365173101 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:10.365178108 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:10.365183115 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:10.365186930 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:10.365187883 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.365201950 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:10.365210056 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.365231037 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.365235090 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:10.365252018 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.365256071 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:10.365272999 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.365274906 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:10.365293980 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.365312099 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:10.365317106 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.365320921 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:10.365334988 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:10.365339041 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.365360022 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:10.365364075 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.365379095 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:10.365386963 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.365408897 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.365426064 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:10.365431070 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.365437984 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:10.365451097 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:10.365453005 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.365473986 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.365483999 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:10.365495920 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.365504026 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:10.365521908 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.365537882 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:10.365547895 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:10.365547895 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.365571976 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.365573883 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:10.365590096 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:10.365595102 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.365616083 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:10.365617037 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.365636110 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:10.365641117 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.365663052 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.365664005 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:10.365681887 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:10.365684986 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.365704060 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:10.365706921 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.365731001 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.365744114 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:10.365751982 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:10.365752935 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.365773916 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.365773916 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:10.365796089 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.365801096 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:10.365816116 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.365820885 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:10.365835905 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.365863085 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:10.365869999 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.365886927 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:10.365889072 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.365907907 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.365921021 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:10.365930080 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.365931988 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:10.365951061 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.365964890 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:10.365968943 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.365981102 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:10.365989923 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.365999937 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:10.366009951 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.366023064 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:10.366029978 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.366048098 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:10.366050005 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.366070986 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.366084099 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:10.366094112 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.366117001 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:10.366413116 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:10.677119970 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.677160978 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.677305937 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:10.680324078 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.680375099 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.680412054 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:10.680417061 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.680435896 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:10.680454969 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.680470943 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:10.680495977 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.680527925 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:10.680535078 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.680547953 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:10.680573940 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.680602074 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:10.680612087 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.680619955 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:10.680649042 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.680696964 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.680700064 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:10.680708885 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:10.680752993 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.680794954 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.680815935 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:10.680835009 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.680835009 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:10.680874109 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.680890083 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:10.680902004 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:10.680912971 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.680919886 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:10.680953026 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.680989981 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.680999994 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:10.681037903 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.681041956 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:10.681080103 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.681117058 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.681147099 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:10.681155920 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.681164026 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:10.681195021 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.681236029 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:10.681252003 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.681256056 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:10.681292057 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.681329966 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.681344986 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:10.681368113 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.681413889 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.681416035 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:10.681457043 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.681494951 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.681509018 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:10.681534052 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.681572914 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.681581020 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:10.681611061 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.681648970 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.681663036 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:10.681685925 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.681725025 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:10.681731939 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.681773901 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.681802988 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.681812048 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:10.681843042 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.681879997 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.681883097 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:10.681926012 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:10.681927919 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.681943893 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:10.681971073 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.681988001 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:10.682046890 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.682075024 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:10.682096958 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.682135105 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.682140112 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:10.682173014 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.682224035 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:10.682224989 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.682261944 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.682300091 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.682316065 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:10.682341099 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.682391882 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.682403088 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:10.682424068 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:10.682435036 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.682441950 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:10.682473898 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.682512999 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.682516098 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:10.682528019 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:10.682552099 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.682590008 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.682602882 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:10.682627916 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.682666063 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.682679892 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:10.682713985 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.682755947 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.682760954 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:10.682792902 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.682815075 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:10.682832956 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.682842016 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:10.682872057 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.682909012 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.682909966 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:10.682928085 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:10.682946920 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.682950020 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:10.682986021 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.682998896 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:10.683033943 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.683043003 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:10.683075905 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.683130026 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:10.683135986 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.683191061 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.683228970 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.683238983 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:10.683267117 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.683314085 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.683316946 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:10.683356047 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.683393002 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.683393002 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:10.683406115 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:10.683432102 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.683439970 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:10.683470011 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.683485031 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:10.683506966 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.683552980 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.683567047 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:10.683590889 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.683639050 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.683640003 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:10.683680058 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.683717966 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.683731079 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:10.683756113 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.683794022 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.683806896 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:10.683830976 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.683868885 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.683876038 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:10.683906078 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.683953047 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.683959961 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:10.683995008 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.684031963 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.684046030 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:10.684066057 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:10.684071064 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.684072971 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:10.684109926 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.684146881 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.684160948 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:10.684185028 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.684195042 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:10.684222937 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.684269905 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.684272051 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:10.684312105 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.684349060 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.684361935 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:10.684387922 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.684425116 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.684439898 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:10.684462070 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.684499979 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.684513092 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:10.684537888 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.684586048 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.684590101 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:10.684628010 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.684664965 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.684680939 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:10.684704065 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.684741020 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.684755087 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:10.684778929 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.684817076 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.684830904 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:10.684854984 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.684907913 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:10.684933901 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.684966087 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:10.684973955 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.684982061 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:10.685013056 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.685015917 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:10.685050011 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.685097933 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.685100079 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:10.685139894 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.685178041 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.685190916 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:10.685216904 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.685255051 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.685286999 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:10.685292006 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.685303926 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:10.685331106 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.685331106 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:10.685369015 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.685415030 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.685420990 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:10.685456991 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.685493946 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.685503006 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:10.685533047 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.685585022 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.685585976 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:10.685623884 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.685658932 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.685672998 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:10.685692072 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:10.685699940 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.685707092 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:10.685738087 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.685760975 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:10.685786009 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.685802937 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:10.685828924 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.685842991 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:10.685866117 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.685904980 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.685913086 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:10.685942888 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.685978889 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.686000109 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:10.686017990 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.686054945 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.686069012 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:10.686101913 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.686144114 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.686152935 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:10.686182022 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.686220884 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.686233997 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:10.686366081 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:10.992281914 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.992333889 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:10.992453098 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:11.000802040 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.000859022 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.000896931 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.000942945 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.000946045 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:11.000979900 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:11.000986099 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.001024961 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.001043081 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:11.001063108 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.001101971 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.001123905 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:11.001338005 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:11.001398087 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.001472950 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.001481056 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:11.001521111 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.001538038 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:11.001564026 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.001632929 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.001646042 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:11.001698017 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.001737118 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.001744032 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:11.001758099 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:11.001771927 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.001785994 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:11.001818895 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.001861095 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.001885891 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:11.001899004 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.001936913 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.001965046 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:11.001975060 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.001991034 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:11.002012014 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.002032995 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:11.002048969 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.002063990 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:11.002088070 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.002108097 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:11.002135992 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.002145052 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:11.002177954 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.002216101 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.002235889 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:11.002254009 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.002321005 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.002362013 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.002399921 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.002417088 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:11.002437115 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.002475977 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.002485037 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:11.002510071 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:11.002511978 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.002551079 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.002547979 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:11.002566099 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:11.002587080 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.002602100 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:11.002634048 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.002641916 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:11.002676010 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.002722025 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.002732038 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:11.002769947 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.002813101 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.002826929 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:11.002850056 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.002875090 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:11.002888918 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.002926111 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.002943993 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:11.002963066 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.002969027 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:11.003004074 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.003041983 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.003066063 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:11.003087044 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:11.003088951 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.003149986 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:11.003165007 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.003226995 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:11.003317118 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.003357887 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.003422976 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:11.003495932 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.003534079 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.003604889 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.003612995 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:11.003633022 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:11.003669024 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.003707886 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.003731012 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:11.003745079 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.003792048 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.003799915 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:11.003834963 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.003850937 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:11.003875971 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.003897905 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:11.003914118 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.003951073 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:11.003952980 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.003978014 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:11.003990889 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.004028082 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.004049063 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:11.004065990 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.004112959 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.004121065 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:11.004143000 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:11.004154921 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.004172087 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:11.004193068 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.004230976 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.004251957 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:11.004297018 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.004334927 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.004358053 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:11.004371881 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.004431963 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:11.004473925 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.004513979 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.004551888 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.004589081 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.004591942 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:11.004611015 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:11.004631996 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:11.004683018 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.004724979 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.004762888 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.004801989 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.004822016 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:11.004839897 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:11.004841089 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.004849911 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:11.004858971 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:11.004878998 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.004918098 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.004939079 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:11.004955053 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.005002022 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.005012989 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:11.005044937 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.005081892 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.005109072 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:11.005120039 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.005136013 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:11.005156994 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.005182981 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:11.005194902 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.005214930 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:11.005233049 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.005259991 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:11.005270958 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.005294085 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:11.005317926 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.005333900 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:11.005361080 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.005376101 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:11.005398989 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.005436897 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.005465031 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:11.005474091 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.005489111 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:11.005511999 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.005549908 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.005573988 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:11.005589008 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.005635023 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.005645990 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:11.005677938 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.005714893 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.005733967 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:11.005752087 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.005753994 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:11.005764008 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:11.005790949 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.005811930 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:11.005827904 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.005856037 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:11.005866051 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.005903959 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.005908012 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:11.005923986 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:11.005950928 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.005992889 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.006015062 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:11.006031036 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.006068945 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.006088972 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:11.006108046 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.006124020 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:11.006145000 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.006185055 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.006203890 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:11.006222963 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.006269932 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.006278992 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:11.006311893 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.006330967 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:11.006350040 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.006387949 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.006407976 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:11.006426096 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.006462097 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.006488085 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:11.006500006 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.006504059 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:11.006531954 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:11.006541014 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.006591082 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.006613016 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:11.006634951 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.006671906 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.006714106 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.006714106 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:11.006736040 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:11.006757021 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.006772995 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:11.006795883 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.006807089 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:11.006836891 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.006874084 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.006902933 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:11.006934881 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.006937981 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:11.006978989 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.007018089 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.007019997 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:11.007035017 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:11.007059097 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.007112026 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:11.307091951 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.307142973 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.307254076 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:11.307291031 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:11.316642046 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.316667080 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.316775084 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.316803932 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:11.316838026 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:11.316936016 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.317058086 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.317214012 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.317249060 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:11.317287922 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.317305088 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.317321062 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:11.317342043 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:11.317348957 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:11.317538023 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.317900896 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.317970991 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:11.322985888 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.323061943 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.323084116 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:11.323111057 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:11.324094057 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.324136972 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.324153900 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.324177980 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.324193954 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.324210882 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:11.324233055 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:11.324250937 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:11.324500084 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.324527979 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.324542999 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.324573994 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.324592113 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:11.324614048 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:11.324615955 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.324670076 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.324687958 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.324701071 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.324729919 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:11.324747086 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:11.324749947 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.324779987 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.324795008 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.324820042 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.324832916 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:11.324846983 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:11.324857950 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.324883938 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:11.324903965 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:11.324966908 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.324985027 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.325052977 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:11.325066090 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.325093985 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.325139999 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.325149059 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:11.325185061 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.325206041 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.325220108 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.325237989 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.325249910 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:11.325267076 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:11.325278997 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.325284958 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:11.325297117 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.325333118 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:11.325333118 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.325361013 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:11.325367928 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.325397015 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:11.325416088 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:11.325423002 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.325450897 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.325465918 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.325498104 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.325531960 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.325536013 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:11.325551033 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.325570107 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:11.325577021 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:11.325598001 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:11.325619936 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.325664043 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.325699091 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.325717926 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:11.325737000 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.325784922 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:11.325834990 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.325855017 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.325871944 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.325887918 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.325903893 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.325905085 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:11.325931072 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.325947046 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:11.325958014 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:11.325959921 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.325977087 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.325992107 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:11.326013088 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.326031923 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:11.326057911 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.326061010 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:11.326071978 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:11.326105118 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.326105118 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:11.326133966 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.326174974 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.326184988 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:11.326193094 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.326221943 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.326237917 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:11.326246977 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.326263905 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.326291084 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.326292038 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:11.326316118 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:11.326337099 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.326364040 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:11.326375008 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:11.326375961 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.326428890 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.326445103 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.326459885 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.326474905 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.326477051 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:11.326492071 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.326514006 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:11.326529980 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:11.326668978 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.326694965 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.326739073 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.326746941 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:11.326755047 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.326782942 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.326802015 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:11.326817989 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:11.326854944 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.326874971 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.326898098 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.326906919 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:11.326924086 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.326934099 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:11.326939106 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.326956987 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:11.326972961 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.326977015 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:11.327018976 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:11.327018976 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.327059031 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.327070951 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:11.327075958 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.327091932 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.327094078 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:11.327112913 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:11.327145100 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.327146053 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:11.327161074 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.327178001 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.327203989 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.327207088 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:11.327220917 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.327239037 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:11.327264071 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.327276945 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:11.327300072 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:11.327419996 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.327450037 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.327466011 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.327495098 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.327511072 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.327517033 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:11.327538967 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:11.327559948 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:11.327578068 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.327616930 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.327632904 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.327632904 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:11.327655077 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.327666998 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:11.327682972 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:11.327707052 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:11.328993082 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.329019070 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.329056025 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.329078913 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.329088926 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:11.329124928 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:11.329144001 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:11.621727943 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.621779919 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.621920109 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:11.631071091 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.631149054 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.631197929 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.631273031 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:11.631304026 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:11.631345034 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.631382942 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.631419897 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.631438017 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:11.631458044 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.631479025 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:11.631494045 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.631547928 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:11.631788969 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.631835938 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.631894112 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:11.632466078 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.632503986 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.632560015 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:11.632599115 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.632653952 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:11.638634920 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.638683081 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.638719082 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.638757944 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.638788939 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:11.638834000 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:11.638890982 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.638932943 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.638967037 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:11.638972044 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.639003038 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:11.639007092 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.639025927 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:11.639045954 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.639069080 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:11.639081955 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.639100075 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:11.639157057 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:11.639162064 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.639210939 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.639231920 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:11.639251947 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.639270067 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:11.639288902 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.639305115 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:11.639327049 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.639363050 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.639399052 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.639400005 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:11.639436007 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.639440060 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:11.639472961 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.639476061 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:11.639512062 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:11.639520884 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.639552116 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:11.639563084 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.639585972 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:11.639600039 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.639628887 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:11.639638901 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.639658928 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:11.639676094 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.639688969 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:11.639712095 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.639739037 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:11.639750004 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.639756918 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:11.639786959 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.639811993 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:11.639836073 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.639841080 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:11.639877081 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.639894962 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:11.639914036 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.639926910 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:11.639951944 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.639988899 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.640024900 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.640028954 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:11.640062094 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.640075922 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:11.640099049 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.640113115 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:11.640146017 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.640151978 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:11.640187025 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.640224934 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.640250921 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:11.640263081 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.640291929 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.640321970 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.640361071 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.640397072 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.640433073 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.640433073 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:11.640445948 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:11.640470028 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.640481949 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:11.640516996 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.640532970 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:11.640558958 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.640573978 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:11.640595913 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.640621901 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:11.640635014 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.640650988 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:11.640672922 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.640695095 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:11.640708923 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.640723944 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:11.640748024 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.640762091 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:11.640784025 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.640809059 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:11.640830040 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.640844107 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:11.640872002 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.640887976 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:11.640909910 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.640918016 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:11.640947104 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.640985012 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.641011953 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:11.641019106 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.641057014 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:11.641057968 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.641087055 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:11.641097069 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.641117096 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:11.641144991 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.641145945 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:11.641186953 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.641206980 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:11.641223907 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.641244888 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:11.641262054 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.641277075 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:11.641299963 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.641324997 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:11.641335964 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.641345024 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:11.641375065 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.641396999 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:11.641412020 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.641417980 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:11.641458035 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.641499043 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.641520977 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:11.641536951 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.641556978 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:11.641575098 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.641598940 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:11.641612053 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.641630888 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:11.641649008 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.641669989 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:11.641686916 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.641693115 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:11.641724110 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.641771078 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.641788960 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:11.641801119 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:11.641813040 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.641835928 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:11.641849041 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.641875982 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:11.641886950 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.641916037 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:11.641923904 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.641937971 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:11.641959906 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.641973019 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:11.641997099 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.642024994 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:11.642034054 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.642049074 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:11.642081022 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.642085075 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:11.642122030 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.642158985 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.642196894 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.642232895 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.642234087 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:11.642245054 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:11.642270088 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.642283916 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:11.642307997 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.642322063 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:11.642344952 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.642359972 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:11.642395973 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:11.642438889 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.642477036 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.642513990 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.642539978 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:11.642550945 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.642576933 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:11.642596960 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.642615080 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:11.642640114 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.642644882 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:11.642677069 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.642735958 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:11.643415928 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.643454075 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.643501043 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.643521070 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:11.643542051 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.643570900 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:11.643609047 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:11.936559916 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.936629057 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.936670065 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.936717987 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.936769962 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:11.936824083 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:11.946106911 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.946181059 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.946223021 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.946261883 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.946301937 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.946341991 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.946346045 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:11.946378946 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.946381092 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:11.946386099 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:11.946418047 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.946436882 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:11.946460009 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.946510077 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.946528912 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:11.946969986 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.947010994 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.947036028 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:11.947051048 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.947088957 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.947110891 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:11.947138071 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:11.947156906 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:11.957503080 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.957549095 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.957576990 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.957619905 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.957751989 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:11.957778931 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:11.957837105 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.957896948 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.957926989 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.957966089 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:11.957966089 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.957979918 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:11.958004951 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.958051920 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.958055973 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:11.958092928 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.958131075 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.958153009 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:11.958168983 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.958194971 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:11.958206892 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.958244085 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.958261967 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:11.958281994 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.958296061 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:11.958318949 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.958367109 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.958376884 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:11.958409071 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.958431005 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:11.958446980 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.958467007 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:11.958484888 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.958506107 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:11.958523989 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.958538055 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:11.958560944 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.958597898 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:11.958599091 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.958637953 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.958687067 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.958712101 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:11.958724976 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:11.958729029 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.958729982 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:11.958766937 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.958785057 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:11.958805084 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.958823919 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:11.958842993 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.958863020 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:11.958880901 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.958906889 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:11.958926916 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.958930016 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:11.958965063 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.958981991 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:11.959012032 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.959026098 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:11.959053993 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.959090948 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.959110022 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:11.959151030 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:11.959158897 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.959197998 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.959234953 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.959258080 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:11.959273100 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.959290028 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:11.959312916 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.959332943 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:11.959350109 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.959398031 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.959407091 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:11.959439993 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.959477901 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.959498882 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:11.959516048 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.959530115 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:11.959553957 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.959592104 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.959609032 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:11.959630966 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.959650040 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:11.959670067 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.959688902 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:11.959717989 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.959758043 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:11.959772110 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.959789038 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:11.959809065 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.959830046 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:11.959849119 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.959866047 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:11.959886074 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.959898949 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:11.959923029 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.959940910 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:11.959960938 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.959981918 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:11.959997892 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.960007906 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:11.960046053 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.960064888 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:11.960088015 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.960120916 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:11.960125923 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.960135937 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:11.960165024 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.960177898 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:11.960203886 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.960218906 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:11.960239887 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.960278988 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.960294008 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:11.960311890 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:11.960315943 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.960331917 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:11.960365057 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.960407019 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.960411072 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:11.960424900 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:11.960447073 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.960485935 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.960505009 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:11.960526943 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.960547924 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:11.960566044 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.960604906 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.960622072 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:11.960643053 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.960692883 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.960699081 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:11.960736036 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.960773945 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.960788965 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:11.960813999 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.960850954 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.960865974 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:11.960889101 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.960927010 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.960941076 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:11.960964918 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.961010933 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.961019039 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:11.961054087 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.961062908 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:11.961091995 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.961131096 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.961144924 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:11.961163998 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:11.961169958 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.961179972 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:11.961208105 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.961225033 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:11.961247921 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.961261988 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:11.961287022 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.961333990 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.961339951 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:11.961376905 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.961414099 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.961427927 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:11.961452961 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.961492062 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.961493015 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:11.961508989 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:11.961529970 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.961555004 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:11.961570024 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.961591959 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:11.961606979 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.961653948 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.961658001 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:11.961698055 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.961735010 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.961755037 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:11.961774111 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.961812019 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.961827993 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:11.961848974 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.961886883 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:11.961913109 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.961951017 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.961965084 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:11.961998940 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.962003946 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:11.962043047 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.962080002 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.962094069 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:11.962120056 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:11.962135077 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:11.962178946 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:12.251413107 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:12.251486063 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:12.251528978 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:12.251565933 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:12.251637936 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:12.251697063 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:12.260962009 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:12.261012077 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:12.261050940 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:12.261086941 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:12.261136055 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:12.261138916 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:12.261178017 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:12.261178970 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:12.261213064 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:12.261215925 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:12.261233091 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:12.261255026 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:12.261271000 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:12.261291981 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:12.261310101 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:12.261327982 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:12.261378050 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:12.261482000 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:12.261523008 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:12.261560917 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:12.261574984 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:12.261596918 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:12.261615038 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:12.261635065 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:12.261646032 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:12.263709068 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:12.276586056 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:12.276628017 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:12.276657104 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:12.276675940 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:12.276684999 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:12.276699066 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:12.276702881 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:12.276711941 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:12.276735067 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:12.276737928 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:12.276763916 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:12.276765108 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:12.276792049 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:12.276817083 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:12.276818037 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:12.276846886 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:12.276849031 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:12.276879072 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:12.276885033 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:12.276900053 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:12.276910067 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:12.276940107 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:12.276962996 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:12.276966095 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:12.276990891 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:12.276995897 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:12.277017117 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:12.277028084 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:12.277038097 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:12.277041912 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:12.277076006 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:12.277076006 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:12.277095079 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:12.277105093 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:12.277131081 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:12.277154922 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:12.277157068 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:12.277180910 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:12.277183056 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:12.277209044 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:12.277211905 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:12.277235031 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:12.277240038 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:12.277261972 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:12.277282953 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:12.277293921 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:12.277295113 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:12.277307034 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:12.277323008 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:12.277348042 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:12.277355909 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:12.277374983 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:12.277379990 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:12.277400970 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:12.277405977 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:12.277426004 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:12.277440071 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:12.277452946 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:12.277465105 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:12.277478933 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:12.277493954 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:12.277510881 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:12.277512074 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:12.277535915 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:12.277539015 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:12.277565002 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:12.277569056 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:12.277590990 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:12.277601957 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:12.277610064 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:12.277617931 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:12.277642965 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:12.277671099 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:12.277684927 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:12.277692080 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:12.277697086 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:12.277721882 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:12.277729988 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:12.277750969 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:12.277757883 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:12.277793884 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:12.277802944 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:12.277910948 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:12.277942896 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:12.277971983 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:12.277997017 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:12.277998924 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:12.278023005 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:12.278027058 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:12.278048992 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:12.278059959 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:12.278074026 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:12.278080940 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:12.278105974 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:12.278120041 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:12.278132915 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:12.278153896 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:12.278172970 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:12.278175116 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:12.278192997 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:12.278220892 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:12.278247118 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:12.278271914 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:12.278280973 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:12.278297901 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:12.278311014 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:12.278320074 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:12.278326035 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:12.278331041 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:12.278336048 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:12.278358936 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:12.278359890 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:12.278386116 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:12.278389931 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:12.278413057 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:12.278414965 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:12.278439045 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:12.278444052 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:12.278465033 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:12.278467894 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:12.278491020 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:12.278491974 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:12.278517008 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:12.278521061 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:12.278543949 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:12.278548956 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:12.278558969 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:12.278578997 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:12.278604984 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:12.278630972 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:12.278631926 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:12.278642893 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:12.278656960 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:12.278671026 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:12.278695107 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:12.278706074 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:12.278718948 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:12.278722048 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:12.278748035 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:12.278757095 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:12.278769970 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:12.278779984 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:12.278796911 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:12.278808117 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:12.278832912 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:12.278836012 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:12.278866053 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:12.278876066 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:12.278892040 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:12.278901100 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:12.278917074 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:12.278930902 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:12.278944016 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:12.278963089 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:12.278969049 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:12.278980970 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:12.279001951 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:12.279005051 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:12.279015064 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:12.279031038 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:12.279056072 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:12.279056072 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:12.279083014 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:12.279087067 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:12.279109001 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:12.279109001 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:12.279139996 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:12.279155016 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:12.279175043 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:12.279187918 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:12.279218912 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:12.279238939 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:12.279258966 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:12.279278994 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:12.279299974 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:12.279318094 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:12.279339075 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:12.279357910 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:12.279371977 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:12.279378891 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:12.279381037 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:12.279405117 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:12.279405117 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:12.279431105 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:12.279433966 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:12.279447079 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:12.279458046 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:12.279479027 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:12.279483080 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:12.279500008 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:12.279510021 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:12.279532909 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:12.279535055 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:12.279548883 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:12.279567003 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:12.279582024 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:12.279596090 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:12.279620886 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:12.279644012 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:12.279647112 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:12.279674053 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:12.279675961 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:12.279699087 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:12.279702902 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:12.279725075 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:12.279727936 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:12.279741049 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:12.279750109 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:12.279767036 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:12.279782057 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:12.279798031 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:12.279810905 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:12.279835939 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:12.279836893 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:12.279865980 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:12.279886961 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:12.566181898 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:12.566222906 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:12.566365957 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:12.566895008 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:12.566934109 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:12.567007065 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:12.575900078 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:12.575946093 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:12.575984001 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:12.576028109 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:12.576026917 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:12.576056004 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:12.576067924 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:12.576083899 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:12.576106071 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:12.576122046 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:12.576143026 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:12.576181889 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:12.576188087 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:12.576219082 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:12.576220036 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:12.576265097 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:12.576292038 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:12.576308966 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:12.576320887 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:12.576344967 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:12.576384068 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:12.576389074 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:12.576416016 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:12.576421022 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:12.576427937 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:12.576457977 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:12.576467037 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:12.576502085 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:12.594124079 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:12.594158888 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:12.594186068 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:12.594206095 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:12.594225883 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:12.594250917 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:12.594284058 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:12.594286919 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:12.594312906 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:12.594325066 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:12.594341040 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:12.594343901 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:12.594367981 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:12.594372988 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:12.594393969 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:12.594396114 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:12.594419003 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:12.594423056 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:12.594434977 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:12.594449997 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:12.594475985 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:12.594480038 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:12.594505072 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:12.594507933 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:12.594537020 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:12.594541073 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:12.594563007 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:12.594564915 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:12.594577074 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:12.594594002 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:12.594604015 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:12.594620943 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:12.594644070 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:12.594646931 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:12.594671011 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:12.594672918 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:12.594681025 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:12.594701052 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:12.594723940 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:12.594732046 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:12.594758987 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:12.594760895 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:12.594782114 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:12.594789028 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:12.594815016 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:12.594839096 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:12.594841957 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:12.594867945 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:12.594887972 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:12.594894886 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:12.594907045 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:12.594912052 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:12.594921112 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:12.594950914 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:12.594953060 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:12.594981909 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:12.594985962 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:12.595009089 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:12.595012903 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:12.595035076 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:12.595036983 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:12.595046997 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:12.595062971 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:12.595088959 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:12.595093012 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:12.595119953 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:12.595134020 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:12.595144987 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:12.595161915 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:12.595186949 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:12.595218897 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:12.595242023 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:12.595247030 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:12.595247030 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:12.595249891 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:12.595273018 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:12.595273018 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:12.595292091 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:12.595299006 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:12.595312119 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:12.595325947 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:12.595347881 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:12.595350981 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:12.595375061 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:12.595376968 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:12.595393896 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:12.595402956 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:12.595426083 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:12.595434904 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:12.595448017 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:12.595463991 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:12.595489025 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:12.595511913 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:12.595515966 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:12.595515966 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:12.595536947 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:12.595541000 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:12.595555067 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:12.595566034 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:12.595577955 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:12.595592022 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:12.595618010 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:12.595633984 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:12.595649958 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:12.595662117 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:12.595678091 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:12.595690966 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:12.595705032 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:12.595729113 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:12.595731974 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:12.595755100 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:12.595761061 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:12.595772982 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:12.595787048 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:12.595813990 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:12.595833063 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:12.595839024 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:12.595861912 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:12.595870972 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:12.595900059 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:12.595912933 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:12.595917940 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:12.595925093 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:12.595942020 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:12.595951080 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:12.595959902 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:12.595977068 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:12.595995903 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:12.596002102 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:12.596026897 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:12.596029997 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:12.596052885 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:12.596055031 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:12.596061945 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:12.596085072 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:12.596096039 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:12.596112967 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:12.596138000 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:12.596154928 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:12.596163988 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:12.596183062 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:12.596189022 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:12.596211910 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:12.596214056 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:12.596229076 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:12.596240997 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:12.596265078 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:12.596266985 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:12.596293926 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:12.596297026 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:12.596318960 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:12.596324921 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:12.596328020 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:12.596349955 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:12.596368074 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:12.596376896 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:12.596388102 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:12.596402884 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:12.596427917 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:12.596442938 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:12.596453905 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:12.596473932 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:12.596478939 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:12.596499920 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:12.596510887 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:12.596534014 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:12.596559048 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:12.596559048 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:12.596582890 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:12.596585035 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:12.596594095 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:12.596611023 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:12.596623898 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:12.596642017 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:12.596656084 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:12.596671104 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:12.596687078 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:12.596698046 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:12.596723080 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:12.596724033 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:12.596749067 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:12.596774101 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:12.596775055 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:12.596779108 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:12.596788883 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:12.596800089 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:12.596822977 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:12.596826077 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:12.596846104 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:12.596858025 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:12.596870899 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:12.596887112 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:12.596908092 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:12.596914053 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:12.596923113 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:12.596940041 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:12.596966028 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:12.596982956 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:12.597012043 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:12.883996010 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:12.884022951 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:12.884033918 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:12.884052038 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:12.884068012 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:12.884144068 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:12.884206057 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:12.884311914 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:12.884330034 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:12.884349108 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:12.884358883 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:12.884366035 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:12.884382010 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:12.884397030 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:12.884411097 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:12.884413004 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:12.884428978 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:12.884443998 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:12.884450912 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:12.884459972 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:12.884479046 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:12.884485960 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:12.884495974 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:12.884511948 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:12.884512901 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:12.884527922 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:12.884543896 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:12.884558916 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:12.884558916 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:12.884573936 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:12.884602070 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:12.884627104 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:12.891088009 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:12.891107082 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:12.891129971 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:12.891145945 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:12.891161919 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:12.891176939 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:12.891374111 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:12.891391039 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:12.891405106 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:12.891421080 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:12.891436100 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:12.891447067 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:12.891450882 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:12.891468048 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:12.891484022 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:12.891602039 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:12.891668081 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:12.891685963 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:12.891746998 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:12.891872883 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:12.915210962 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:12.915239096 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:12.915251017 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:12.915268898 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:12.915286064 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:12.915297985 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:12.915311098 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:12.915323019 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:12.915334940 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:12.915347099 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:12.915359020 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:12.915370941 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:12.915371895 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:12.915383101 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:12.915395975 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:12.915405035 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:12.915407896 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:12.915421009 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:12.915431976 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:12.915431976 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:12.915445089 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:12.915456057 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:12.915457010 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:12.915473938 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:12.915478945 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:12.915486097 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:12.915498018 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:12.915504932 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:12.915509939 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:12.915523052 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:12.915534019 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:12.915554047 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:12.915559053 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:12.915571928 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:12.915572882 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:12.915585995 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:12.915597916 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:12.915610075 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:12.915617943 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:12.915621996 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:12.915632963 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:12.915646076 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:12.915658951 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:12.915661097 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:12.915672064 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:12.915683031 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:12.915683985 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:12.915695906 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:12.915709019 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:12.915719032 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:12.915720940 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:12.915733099 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:12.915745974 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:12.915756941 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:12.915759087 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:12.915769100 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:12.915781021 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:12.915793896 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:12.915798903 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:12.915815115 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:12.915827990 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:12.915832996 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:12.915841103 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:12.915852070 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:12.915863991 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:12.915867090 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:12.915875912 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:12.915888071 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:12.915890932 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:12.915899992 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:12.915910959 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:12.915919065 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:12.915924072 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:12.915935993 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:12.915949106 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:12.915960073 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:12.915971994 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:12.915971994 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:12.915986061 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:12.915997982 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:12.916009903 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:12.916014910 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:12.916022062 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:12.916033983 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:12.916044950 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:12.916047096 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:12.916059017 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:12.916074038 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:12.916075945 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:12.916088104 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:12.916099072 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:12.916100979 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:12.916111946 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:12.916124105 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:12.916136026 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:12.916146040 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:12.916147947 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:12.916160107 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:12.916177988 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:12.916189909 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:12.916202068 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:12.916203976 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:12.916213989 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:12.916225910 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:12.916239023 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:12.916251898 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:12.916253090 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:12.916264057 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:12.916275978 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:12.916287899 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:12.916290045 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:12.916307926 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:12.916320086 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:12.916321039 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:12.916337967 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:12.916349888 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:12.916362047 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:12.916363955 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:12.916373968 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:12.916382074 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:12.916385889 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:12.916398048 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:12.916410923 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:12.916413069 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:12.916424036 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:12.916435957 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:12.916448116 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:12.916450024 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:12.916460037 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:12.916472912 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:12.916484118 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:12.916488886 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:12.916496038 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:12.916507959 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:12.916520119 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:12.916531086 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:12.916532040 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:12.916543961 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:12.916555882 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:12.916567087 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:12.916596889 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:12.916624069 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:13.198966026 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:13.198987961 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:13.199065924 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:13.199084997 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:13.199100018 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:13.199106932 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:13.199116945 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:13.199163914 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:13.199166059 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:13.199208975 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:13.199218035 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:13.199266911 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:13.199306965 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:13.199352980 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:13.199372053 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:13.199407101 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:13.199414015 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:13.199450016 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:13.199469090 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:13.199506998 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:13.199547052 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:13.199582100 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:13.199587107 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:13.199616909 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:13.199625015 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:13.199661016 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:13.199680090 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:13.199697971 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:13.199719906 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:13.199749947 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:13.199753046 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:13.199789047 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:13.199790955 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:13.199815989 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:13.199837923 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:13.199866056 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:13.199867010 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:13.199906111 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:13.199907064 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:13.199945927 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:13.199953079 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:13.199982882 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:13.199985027 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:13.200015068 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:13.200026035 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:13.200045109 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:13.200057983 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:13.200081110 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:13.200112104 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:13.200150967 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:13.200154066 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:13.200181007 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:13.200191975 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:13.200212002 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:13.200267076 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:13.200306892 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:13.207364082 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:13.207390070 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:13.207401991 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:13.207415104 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:13.207431078 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:13.207446098 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:13.207462072 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:13.207477093 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:13.207495928 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:13.207509995 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:13.207514048 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:13.207530022 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:13.207546949 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:13.207554102 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:13.207561970 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:13.207577944 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:13.207577944 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:13.207593918 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:13.207606077 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:13.207609892 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:13.207643986 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:13.207652092 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:13.231038094 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:13.231070042 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:13.231091976 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:13.231127977 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:13.231183052 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:13.231220961 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:13.231312037 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:13.231333971 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:13.231359005 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:13.231367111 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:13.231380939 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:13.231395960 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:13.231401920 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:13.231421947 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:13.231426001 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:13.231442928 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:13.231455088 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:13.231462002 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:13.231479883 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:13.231482029 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:13.231503010 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:13.231508970 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:13.231528997 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:13.231539965 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:13.231550932 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:13.231570005 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:13.231570959 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:13.231591940 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:13.231601954 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:13.231612921 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:13.231622934 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:13.231632948 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:13.231645107 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:13.231653929 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:13.231663942 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:13.231673956 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:13.231687069 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:13.231698990 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:13.231707096 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:13.231722116 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:13.231729031 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:13.231743097 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:13.231751919 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:13.231765032 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:13.231772900 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:13.231786013 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:13.231791019 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:13.231806040 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:13.231813908 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:13.231827021 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:13.231832027 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:13.231847048 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:13.231859922 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:13.231863022 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:13.231880903 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:13.231884003 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:13.231900930 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:13.231934071 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:13.231935978 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:13.231955051 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:13.231981039 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:13.231983900 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:13.232002974 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:13.232011080 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:13.232023001 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:13.232031107 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:13.232043982 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:13.232049942 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:13.232069969 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:13.232081890 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:13.232091904 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:13.232104063 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:13.232122898 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:13.232126951 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:13.232146025 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:13.232165098 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:13.232173920 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:13.232201099 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:13.232212067 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:13.232235909 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:13.232249022 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:13.232256889 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:13.232276917 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:13.232278109 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:13.232299089 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:13.232326984 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:13.232362032 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:13.232400894 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:13.232410908 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:13.232422113 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:13.232444048 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:13.232450962 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:13.232464075 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:13.232472897 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:13.232489109 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:13.232500076 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:13.232521057 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:13.232539892 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:13.232541084 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:13.232567072 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:13.232587099 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:13.232604027 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:13.232605934 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:13.232650042 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:13.232655048 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:13.232676983 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:13.232696056 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:13.232698917 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:13.232721090 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:13.232722044 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:13.232745886 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:13.232760906 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:13.232772112 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:13.232784033 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:13.232803106 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:13.232804060 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:13.232821941 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:13.232837915 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:13.232846022 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:13.232883930 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:13.232896090 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:13.232917070 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:13.232938051 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:13.232944965 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:13.232958078 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:13.232975960 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:13.233006001 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:13.233009100 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:13.233047962 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:13.233053923 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:13.233069897 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:13.233089924 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:13.233094931 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:13.233109951 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:13.233118057 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:13.233129978 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:13.233134031 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:13.233155966 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:13.233164072 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:13.233180046 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:13.233205080 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:13.233213902 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:13.233227015 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:13.233247042 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:13.233247995 CEST	80	49721	220.189.197.2	192.168.2.3
Jun 14, 2021 06:22:13.233263016 CEST	49721	80	192.168.2.3	220.189.197.2
Jun 14, 2021 06:22:13.233283997 CEST	80	49721	220.189.197.2	192.168.2.3

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class
Jun 14, 2021 06:21:40.011044025 CEST	192.168.2.3	8.8.8.8	0x969	Standard query (0)	cdn-file-ssl-wan.ludashi.com	A (IP address)	IN (0x0001)
Jun 14, 2021 06:21:40.011782885 CEST	192.168.2.3	8.8.8.8	0x1dfb	Standard query (0)	s.ludashi.com	A (IP address)	IN (0x0001)
Jun 14, 2021 06:21:43.543186903 CEST	192.168.2.3	8.8.8.8	0x8920	Standard query (0)	cdn-file-ssl-pc.ludashi.com	A (IP address)	IN (0x0001)
Jun 14, 2021 06:23:10.241323948 CEST	192.168.2.3	8.8.8.8	0xae99	Standard query (0)	wan.ludashi.com	A (IP address)	IN (0x0001)
Jun 14, 2021 06:23:10.261059999 CEST	192.168.2.3	8.8.8.8	0x60b1	Standard query (0)	s.ludashi.com	A (IP address)	IN (0x0001)
Jun 14, 2021 06:23:11.163697004 CEST	192.168.2.3	8.8.8.8	0x6eeb	Standard query (0)	cdn-file.ludashi.com	A (IP address)	IN (0x0001)
Jun 14, 2021 06:23:18.175327063 CEST	192.168.2.3	8.8.8.8	0x6c13	Standard query (0)	cdn-wan.ludashi.com	A (IP address)	IN (0x0001)
Jun 14, 2021 06:23:20.421993017 CEST	192.168.2.3	8.8.8.8	0x8197	Standard query (0)	cdn-ssl-wan.ludashi.com	A (IP address)	IN (0x0001)
Jun 14, 2021 06:23:23.230809927 CEST	192.168.2.3	8.8.8.8	0x90d3	Standard query (0)	i.ludashi.com	A (IP address)	IN (0x0001)

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class
Jun 14, 2021 06:21:40.073642969 CEST	8.8.8.8	192.168.2.3	0x1dfb	No error (0)	s.ludashi.com		47.117.76.6	A (IP address)	IN (0x0001)
Jun 14, 2021 06:21:40.074733019 CEST	8.8.8.8	192.168.2.3	0x969	No error (0)	cdn-file-ssl-wan.ludashi.com	cdn-file-ssl-wan.ludashi.com.m.alikunlun.com		CNAME (Canonical name)	IN (0x0001)
Jun 14, 2021 06:21:40.074733019 CEST	8.8.8.8	192.168.2.3	0x969	No error (0)	cdn-file-ssl-wan.ludashi.com.m.alikunlun.com		115.231.152.248	A (IP address)	IN (0x0001)
Jun 14, 2021 06:21:40.074733019 CEST	8.8.8.8	192.168.2.3	0x969	No error (0)	cdn-file-ssl-wan.ludashi.com.m.alikunlun.com		115.231.152.238	A (IP address)	IN (0x0001)
Jun 14, 2021 06:21:40.074733019 CEST	8.8.8.8	192.168.2.3	0x969	No error (0)	cdn-file-ssl-wan.ludashi.com.m.alikunlun.com		115.231.152.243	A (IP address)	IN (0x0001)
Jun 14, 2021 06:21:40.074733019 CEST	8.8.8.8	192.168.2.3	0x969	No error (0)	cdn-file-ssl-wan.ludashi.com.m.alikunlun.com		115.231.152.242	A (IP address)	IN (0x0001)
Jun 14, 2021 06:21:40.074733019 CEST	8.8.8.8	192.168.2.3	0x969	No error (0)	cdn-file-ssl-wan.ludashi.com.m.alikunlun.com		115.231.152.240	A (IP address)	IN (0x0001)
Jun 14, 2021 06:21:40.074733019 CEST	8.8.8.8	192.168.2.3	0x969	No error (0)	cdn-file-ssl-wan.ludashi.com.m.alikunlun.com		115.231.152.244	A (IP address)	IN (0x0001)
Jun 14, 2021 06:21:40.074733019 CEST	8.8.8.8	192.168.2.3	0x969	No error (0)	cdn-file-ssl-wan.ludashi.com.m.alikunlun.com		115.231.152.241	A (IP address)	IN (0x0001)
Jun 14, 2021 06:21:40.074733019 CEST	8.8.8.8	192.168.2.3	0x969	No error (0)	cdn-file-ssl-wan.ludashi.com.m.alikunlun.com		115.231.152.239	A (IP address)	IN (0x0001)
Jun 14, 2021 06:21:43.603193045 CEST	8.8.8.8	192.168.2.3	0x8920	No error (0)	cdn-file-ssl-pc.ludashi.com	cdn-file-ssl-pc.ludashi.com.m.alikunlun.com		CNAME (Canonical name)	IN (0x0001)
Jun 14, 2021 06:21:43.603193045 CEST	8.8.8.8	192.168.2.3	0x8920	No error (0)	cdn-file-ssl-pc.ludashi.com.m.alikunlun.com		220.189.197.2	A (IP address)	IN (0x0001)
Jun 14, 2021 06:23:10.303808928 CEST	8.8.8.8	192.168.2.3	0xae99	No error (0)	wan.ludashi.com		139.129.105.182	A (IP address)	IN (0x0001)
Jun 14, 2021 06:23:10.321660042 CEST	8.8.8.8	192.168.2.3	0x60b1	No error (0)	s.ludashi.com		47.117.70.170	A (IP address)	IN (0x0001)
Jun 14, 2021 06:23:11.816063881 CEST	8.8.8.8	192.168.2.3	0x6eeb	No error (0)	cdn-file.ludashi.com	cdn-file.ludashi.com.m.alikunlun.net		CNAME (Canonical name)	IN (0x0001)
Jun 14, 2021 06:23:11.816063881 CEST	8.8.8.8	192.168.2.3	0x6eeb	No error (0)	cdn-file.ludashi.com.m.alikunlun.net		101.227.25.228	A (IP address)	IN (0x0001)
Jun 14, 2021 06:23:11.816063881 CEST	8.8.8.8	192.168.2.3	0x6eeb	No error (0)	cdn-file.ludashi.com.m.alikunlun.net		101.227.25.229	A (IP address)	IN (0x0001)
Jun 14, 2021 06:23:11.816063881 CEST	8.8.8.8	192.168.2.3	0x6eeb	No error (0)	cdn-file.ludashi.com.m.alikunlun.net		101.227.25.230	A (IP address)	IN (0x0001)
Jun 14, 2021 06:23:11.816063881 CEST	8.8.8.8	192.168.2.3	0x6eeb	No error (0)	cdn-file.ludashi.com.m.alikunlun.net		101.227.25.231	A (IP address)	IN (0x0001)
Jun 14, 2021 06:23:11.816063881 CEST	8.8.8.8	192.168.2.3	0x6eeb	No error (0)	cdn-file.ludashi.com.m.alikunlun.net		101.227.25.209	A (IP address)	IN (0x0001)
Jun 14, 2021 06:23:11.816063881 CEST	8.8.8.8	192.168.2.3	0x6eeb	No error (0)	cdn-file.ludashi.com.m.alikunlun.net		101.227.25.210	A (IP address)	IN (0x0001)
Jun 14, 2021 06:23:11.816063881 CEST	8.8.8.8	192.168.2.3	0x6eeb	No error (0)	cdn-file.ludashi.com.m.alikunlun.net		101.227.25.211	A (IP address)	IN (0x0001)
Jun 14, 2021 06:23:11.816063881 CEST	8.8.8.8	192.168.2.3	0x6eeb	No error (0)	cdn-file.ludashi.com.m.alikunlun.net		101.227.25.212	A (IP address)	IN (0x0001)
Jun 14, 2021 06:23:15.926578045 CEST	8.8.8.8	192.168.2.3	0xdd1b	No error (0)	prda.aadg.msidentity.com	www.tm.a.prd.aadg.akadns.net		CNAME (Canonical name)	IN (0x0001)
Jun 14, 2021 06:23:18.542498112 CEST	8.8.8.8	192.168.2.3	0x6c13	No error (0)	cdn-wan.ludashi.com	cdn-wan.ludashi.com.w.kunlunle.com		CNAME (Canonical name)	IN (0x0001)
Jun 14, 2021 06:23:18.542498112 CEST	8.8.8.8	192.168.2.3	0x6c13	No error (0)	cdn-wan.ludashi.com.w.kunlunle.com		122.225.67.170	A (IP address)	IN (0x0001)
Jun 14, 2021 06:23:18.542498112 CEST	8.8.8.8	192.168.2.3	0x6c13	No error (0)	cdn-wan.ludashi.com.w.kunlunle.com		122.225.67.180	A (IP address)	IN (0x0001)
Jun 14, 2021 06:23:18.542498112 CEST	8.8.8.8	192.168.2.3	0x6c13	No error (0)	cdn-wan.ludashi.com.w.kunlunle.com		122.225.67.192	A (IP address)	IN (0x0001)
Jun 14, 2021 06:23:18.542498112 CEST	8.8.8.8	192.168.2.3	0x6c13	No error (0)	cdn-wan.ludashi.com.w.kunlunle.com		122.225.67.191	A (IP address)	IN (0x0001)
Jun 14, 2021 06:23:18.542498112 CEST	8.8.8.8	192.168.2.3	0x6c13	No error (0)	cdn-wan.ludashi.com.w.kunlunle.com		122.225.67.193	A (IP address)	IN (0x0001)
Jun 14, 2021 06:23:18.542498112 CEST	8.8.8.8	192.168.2.3	0x6c13	No error (0)	cdn-wan.ludashi.com.w.kunlunle.com		122.225.67.190	A (IP address)	IN (0x0001)
Jun 14, 2021 06:23:18.542498112 CEST	8.8.8.8	192.168.2.3	0x6c13	No error (0)	cdn-wan.ludashi.com.w.kunlunle.com		122.225.67.179	A (IP address)	IN (0x0001)
Jun 14, 2021 06:23:18.542498112 CEST	8.8.8.8	192.168.2.3	0x6c13	No error (0)	cdn-wan.ludashi.com.w.kunlunle.com		122.225.67.189	A (IP address)	IN (0x0001)
Jun 14, 2021 06:23:20.576486111 CEST	8.8.8.8	192.168.2.3	0x8197	No error (0)	cdn-ssl-wan.ludashi.com	cdn-ssl-wan.ludashi.com.m.alikunlun.com		CNAME (Canonical name)	IN (0x0001)
Jun 14, 2021 06:23:20.576486111 CEST	8.8.8.8	192.168.2.3	0x8197	No error (0)	cdn-ssl-wan.ludashi.com.m.alikunlun.com		115.238.192.242	A (IP address)	IN (0x0001)
Jun 14, 2021 06:23:20.576486111 CEST	8.8.8.8	192.168.2.3	0x8197	No error (0)	cdn-ssl-wan.ludashi.com.m.alikunlun.com		115.238.192.238	A (IP address)	IN (0x0001)
Jun 14, 2021 06:23:20.576486111 CEST	8.8.8.8	192.168.2.3	0x8197	No error (0)	cdn-ssl-wan.ludashi.com.m.alikunlun.com		115.238.192.240	A (IP address)	IN (0x0001)
Jun 14, 2021 06:23:20.576486111 CEST	8.8.8.8	192.168.2.3	0x8197	No error (0)	cdn-ssl-wan.ludashi.com.m.alikunlun.com		115.238.192.239	A (IP address)	IN (0x0001)
Jun 14, 2021 06:23:20.576486111 CEST	8.8.8.8	192.168.2.3	0x8197	No error (0)	cdn-ssl-wan.ludashi.com.m.alikunlun.com		115.238.192.244	A (IP address)	IN (0x0001)
Jun 14, 2021 06:23:20.576486111 CEST	8.8.8.8	192.168.2.3	0x8197	No error (0)	cdn-ssl-wan.ludashi.com.m.alikunlun.com		115.238.192.248	A (IP address)	IN (0x0001)
Jun 14, 2021 06:23:20.576486111 CEST	8.8.8.8	192.168.2.3	0x8197	No error (0)	cdn-ssl-wan.ludashi.com.m.alikunlun.com		115.238.192.243	A (IP address)	IN (0x0001)
Jun 14, 2021 06:23:20.576486111 CEST	8.8.8.8	192.168.2.3	0x8197	No error (0)	cdn-ssl-wan.ludashi.com.m.alikunlun.com		115.238.192.241	A (IP address)	IN (0x0001)
Jun 14, 2021 06:23:23.290256977 CEST	8.8.8.8	192.168.2.3	0x90d3	No error (0)	i.ludashi.com		120.27.82.56	A (IP address)	IN (0x0001)

HTTP Request Dependency Graph

s.ludashi.com

cdn-file-ssl-wan.ludashi.com

cdn-file-ssl-pc.ludashi.com

wan.ludashi.com

cdn-file.ludashi.com

cdn-wan.ludashi.com

i.ludashi.com

Code Manipulations

Statistics

CPU Usage

Click to jump to process

Memory Usage

Click to jump to process

High Level Behavior Distribution

Click to dive into process behavior distribution

Behavior

Click to jump to process

System Behavior

Analysis Process: mAGs0IsoB7.exe PID: 5960 Parent PID: 5576

General

Start time:	06:21:37
Start date:	14/06/2021
Path:	C:\Users\user\Desktop\mAGs0IsoB7.exe
Wow64 process (32bit):	true
Commandline:	'C:\Users\user\Desktop\mAGs0IsoB7.exe'
Imagebase:	0xa70000
File size:	3643816 bytes
MD5 hash:	BC7522C569863C07247EFFEED6ADDA85
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low

Chronological Activities

Analysis Process: sdly.exe PID: 1956 Parent PID: 5960

General

Start time:	06:23:07
Start date:	14/06/2021
Path:	C:\Users\user\AppData\Roaming\WdGame\sdly\sdly.exe
Wow64 process (32bit):	true
Commandline:	'C:\Users\user\AppData\Roaming\WdGame\sdly\sdly.exe'
Imagebase:	0x1a0000
File size:	3643816 bytes
MD5 hash:	BC7522C569863C07247EFFEED6ADDA85
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Antivirus matches:	Detection: 100%, Joe Sandbox ML
Reputation:	low

Chronological Activities

Disassembly

Code Analysis

Reset < >

Analysis Process: mAGs0IsoB7.exe PID: 5960 Parent PID: 5576 mAGs0IsoB7.exeCOMMON

Executed Functions

Function 00A825F5, Relevance: 74.1, APIs: 11, Strings: 31, Instructions: 588COMMON

Download Yara Rule

Strings

\Utils\CefHelper.dll, xrefs: 00A82810
pepflash_exist, xrefs: 00A82A74
24.0.0.221, xrefs: 00A82A04
StartFlashEx, xrefs: 00A829B8
StartEx, xrefs: 00A8285F
_InstallFiles, CInstallHelper::download7z() failed, xrefs: 00A82652
cef_exist, xrefs: 00A8291C
\cefhelper.dll, xrefs: 00A8279B
\cefview.exe, xrefs: 00A8267D
%s\%s.lnk, xrefs: 00A82B6F
$, xrefs: 00A82BDF
_InstallFiles, CInstallHelper::path_7z is not exist, xrefs: 00A825F5
--uninstall --from=start_menu, xrefs: 00A82BC3
7z_noexist, xrefs: 00A8261E
3.2623.1401.0, xrefs: 00A828AB
_InstallFiles, _TrayUnzipFile(NetBridge) failed, xrefs: 00A827EB
_InstallFiles, _TrayUnzipFile(cefview.exe) failed, xrefs: 00A8270E
\Utils\helper.zip, xrefs: 00A82757
', xrefs: 00A82C0B
weiduan, xrefs: 00A82623, 00A82955, 00A82AAD, 00A82B16
pepflash_show_overtime, xrefs: 00A82B11
\Utils, xrefs: 00A82769, 00A82897
pepflash_copy_success, xrefs: 00A82A99
_InstallFiles, CInstallHelper::CopyCefFromProduct() 7z failed, xrefs: 00A8263C
pepflash_down_success, xrefs: 00A82AA8
\Utils\cef\CefView.zip, xrefs: 00A826C9
_InstallFiles, failed to create '%s', xrefs: 00A82C22
_InstallFiles, fancy3d not installed, xrefs: 00A82AFA
\Utils\cef, xrefs: 00A826DB, 00A829F0
\cef, xrefs: 00A8266B
_InstallFiles, Delete %s, xrefs: 00A82B93

Memory Dump Source

Source File: 00000001.00000002.422151708.0000000000A71000.00000020.00020000.sdmp, Offset: 00A70000, based on PE: true

Associated: 00000001.00000002.422117330.0000000000A70000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422651142.0000000000B5D000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422716671.0000000000B9A000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422731871.0000000000B9D000.00000008.00020000.sdmp Download File
Associated: 00000001.00000002.422740097.0000000000BA0000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422749600.0000000000BA4000.00000002.00020000.sdmp Download File

Similarity

API ID:
String ID: $$%s\%s.lnk$'$--uninstall --from=start_menu$24.0.0.221$3.2623.1401.0$7z_noexist$StartEx$StartFlashEx$\Utils$\Utils\CefHelper.dll$\Utils\cef$\Utils\cef\CefView.zip$\Utils\helper.zip$\cef$\cefhelper.dll$\cefview.exe$_InstallFiles, failed to create '%s'$_InstallFiles, CInstallHelper::CopyCefFromProduct() 7z failed$_InstallFiles, CInstallHelper::download7z() failed$_InstallFiles, CInstallHelper::path_7z is not exist$_InstallFiles, Delete %s$_InstallFiles, _TrayUnzipFile(NetBridge) failed$_InstallFiles, _TrayUnzipFile(cefview.exe) failed$_InstallFiles, fancy3d not installed$cef_exist$pepflash_copy_success$pepflash_down_success$pepflash_exist$pepflash_show_overtime$weiduan
API String ID: 0-2614844488
Opcode ID: cbe0ec0ebc00dbddc645063f7eeb61cdd90dbb278638123db96fc2102238eaa0
Instruction ID: 711e4b4b041d9de925a099e182ff09b0dfedd804192d8e4a9b3977b6d225ee76
Opcode Fuzzy Hash: cbe0ec0ebc00dbddc645063f7eeb61cdd90dbb278638123db96fc2102238eaa0
Instruction Fuzzy Hash: B632B771D01209DBDF10FBB8CD4ABAEBBF4AF15314F148195E405A72D2EB749A04CBA2

Uniqueness

Uniqueness Score: -1.00%

Function 00B42954, Relevance: 16.1, APIs: 7, Strings: 2, Instructions: 370timeCOMMON

Download Yara Rule

APIs

_free.LIBCMT ref: 00B429D6
_free.LIBCMT ref: 00B429FA
_free.LIBCMT ref: 00B42B81
GetTimeZoneInformation.KERNEL32(?,00000000,00000000,00000000,?,00B7D518), ref: 00B42B93
WideCharToMultiByte.KERNEL32(00000000,00000000,Pacific Standard Time,000000FF,00000000,0000003F,00000000,?,?), ref: 00B42C0B
WideCharToMultiByte.KERNEL32(00000000,00000000,Pacific Daylight Time,000000FF,?,0000003F,00000000,?), ref: 00B42C38
_free.LIBCMT ref: 00B42D4D

Strings

Pacific Daylight Time, xrefs: 00B42C31
Pacific Standard Time, xrefs: 00B42C04

Memory Dump Source

Source File: 00000001.00000002.422151708.0000000000A71000.00000020.00020000.sdmp, Offset: 00A70000, based on PE: true

Associated: 00000001.00000002.422117330.0000000000A70000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422651142.0000000000B5D000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422716671.0000000000B9A000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422731871.0000000000B9D000.00000008.00020000.sdmp Download File
Associated: 00000001.00000002.422740097.0000000000BA0000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422749600.0000000000BA4000.00000002.00020000.sdmp Download File

Similarity

API ID: _free$ByteCharMultiWide$InformationTimeZone
String ID: Pacific Daylight Time$Pacific Standard Time
API String ID: 314583886-1154798116
Opcode ID: c90055750f17c5175f9927c540ddc0c6f60a971f6d9d30137a2dc35e92d97eeb
Instruction ID: 881bbf0c0f37a501692e0ec75478b78dcb0f8e701d9bf1f571423df12873a2cd
Opcode Fuzzy Hash: c90055750f17c5175f9927c540ddc0c6f60a971f6d9d30137a2dc35e92d97eeb
Instruction Fuzzy Hash: 8CC10531A04245AFDB219F789841AAABBF9EF46350F9441EAF88497252EB308F41F750

Uniqueness

Uniqueness Score: -1.00%

Function 00AB8B50, Relevance: 12.4, APIs: 6, Strings: 1, Instructions: 168encryptionCOMMON

Download Yara Rule

APIs

PathFileExistsW.SHLWAPI(?,F084A4B2,FFFFFFFF,00000000,?), ref: 00AB8BA6
GetVersionExW.KERNEL32(0000011C), ref: 00AB8BDB
WinVerifyTrust.WINTRUST(00000000,00AAC56B,00000030), ref: 00AB8CB3
WTHelperProvDataFromStateData.WINTRUST(?,00000000,00AAC56B,00000030), ref: 00AB8CEE
CertGetNameStringW.CRYPT32(FFFFFFFF,00000004,00000000,00000000,?,00000200), ref: 00AB8D71
WinVerifyTrust.WINTRUST(00000000,00AAC56B,00000030,00000000,00AAC56B,00000030), ref: 00AB8DE2

Strings

0, xrefs: 00AB8DB8

Memory Dump Source

Source File: 00000001.00000002.422151708.0000000000A71000.00000020.00020000.sdmp, Offset: 00A70000, based on PE: true

Associated: 00000001.00000002.422117330.0000000000A70000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422651142.0000000000B5D000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422716671.0000000000B9A000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422731871.0000000000B9D000.00000008.00020000.sdmp Download File
Associated: 00000001.00000002.422740097.0000000000BA0000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422749600.0000000000BA4000.00000002.00020000.sdmp Download File

Similarity

API ID: DataTrustVerify$CertExistsFileFromHelperNamePathProvStateStringVersion
String ID: 0
API String ID: 131157933-4108050209
Opcode ID: 4a0593a3f3059a27528d2a277465e2f3338b0c289d536b44c0753530bfde3bb0
Instruction ID: 67f59b922e853ef4e78bb1806fe85f103e558bf3604196d97ff5120cefc1b590
Opcode Fuzzy Hash: 4a0593a3f3059a27528d2a277465e2f3338b0c289d536b44c0753530bfde3bb0
Instruction Fuzzy Hash: 9B614EB1E016289FDB20DF69DC45BDAB7BCAB04711F0040EAA50CE7281EB799A84CF50

Uniqueness

Uniqueness Score: -1.00%

Function 00A80CF0, Relevance: 8.9, APIs: 4, Strings: 1, Instructions: 171comCOMMON

Download Yara Rule

APIs

PathFileExistsW.SHLWAPI(00000000,F084A4B2,?,00000010,00000000), ref: 00A80D31
CoCreateInstance.OLE32(00B67FB8,00000000,00000017,00B625F4,00000000), ref: 00A80D65
PathRemoveFileSpecW.SHLWAPI(?), ref: 00A80DED
GetShortPathNameW.KERNEL32 ref: 00A80E22

Strings

_CreateShortcut, create '%s' success, xrefs: 00A80EA4

Memory Dump Source

Source File: 00000001.00000002.422151708.0000000000A71000.00000020.00020000.sdmp, Offset: 00A70000, based on PE: true

Associated: 00000001.00000002.422117330.0000000000A70000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422651142.0000000000B5D000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422716671.0000000000B9A000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422731871.0000000000B9D000.00000008.00020000.sdmp Download File
Associated: 00000001.00000002.422740097.0000000000BA0000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422749600.0000000000BA4000.00000002.00020000.sdmp Download File

Similarity

API ID: Path$File$CreateExistsInstanceNameRemoveShortSpec
String ID: _CreateShortcut, create '%s' success
API String ID: 1298947727-1074726977
Opcode ID: a2441dde9bc3be1dd26c12f6f7543b1075530ad2da3458bd811e346a6daf078f
Instruction ID: 99f3d7c1781013f6d21a57a98c269a0061327b652a3ee867e41c509b333f3074
Opcode Fuzzy Hash: a2441dde9bc3be1dd26c12f6f7543b1075530ad2da3458bd811e346a6daf078f
Instruction Fuzzy Hash: E1515A71B40318ABDB60DF68CC44FAAB7B8EF0A714F0045E8A909E7690DB34AD45CF91

Uniqueness

Uniqueness Score: -1.00%

Function 00AA2180, Relevance: 6.1, APIs: 4, Instructions: 72COMMON

Download Yara Rule

APIs

FindResourceW.KERNEL32(?,00000000,00A84760,?,00A7D581,?,?,00A84760,00000000,?,?), ref: 00AA2192
SizeofResource.KERNEL32(?,00000000,?,00A7D581,?,?,00A84760,00000000,?,?), ref: 00AA21A0
LoadResource.KERNEL32(?,00000000,?,00A7D581,?,?,00A84760,00000000,?,?), ref: 00AA21AE
LockResource.KERNEL32(00000000,?,00A7D581,?,?,00A84760,00000000,?,?), ref: 00AA21B9

Memory Dump Source

Source File: 00000001.00000002.422151708.0000000000A71000.00000020.00020000.sdmp, Offset: 00A70000, based on PE: true

Associated: 00000001.00000002.422117330.0000000000A70000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422651142.0000000000B5D000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422716671.0000000000B9A000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422731871.0000000000B9D000.00000008.00020000.sdmp Download File
Associated: 00000001.00000002.422740097.0000000000BA0000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422749600.0000000000BA4000.00000002.00020000.sdmp Download File

Similarity

API ID: Resource$FindLoadLockSizeof
String ID:
API String ID: 3473537107-0
Opcode ID: fedeac9501c79d44ff49d3b277a2d56b967b44bb1a422039c71559a2c1981885
Instruction ID: 2cd547080e09bc851958d9a07094786a9eef9a78992dfbf68f6322ac0a8f7a6c
Opcode Fuzzy Hash: fedeac9501c79d44ff49d3b277a2d56b967b44bb1a422039c71559a2c1981885
Instruction Fuzzy Hash: 7411E0723007556BDB241BADAC84FAB77ECEB89711B04052AF909C3280CBA0DC5187B5

Uniqueness

Uniqueness Score: -1.00%

Function 00B3CA70, Relevance: 4.5, APIs: 3, Instructions: 20COMMON

Download Yara Rule

APIs

GetCurrentProcess.KERNEL32(00000003,?,00B3CA46,00000003,00B96660,0000000C,00B3CB9D,00000003,00000002,00000000,?,00B3B8E8,00000003), ref: 00B3CA91
TerminateProcess.KERNEL32(00000000,?,00B3CA46,00000003,00B96660,0000000C,00B3CB9D,00000003,00000002,00000000,?,00B3B8E8,00000003), ref: 00B3CA98
ExitProcess.KERNEL32 ref: 00B3CAAA

Memory Dump Source

Source File: 00000001.00000002.422151708.0000000000A71000.00000020.00020000.sdmp, Offset: 00A70000, based on PE: true

Associated: 00000001.00000002.422117330.0000000000A70000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422651142.0000000000B5D000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422716671.0000000000B9A000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422731871.0000000000B9D000.00000008.00020000.sdmp Download File
Associated: 00000001.00000002.422740097.0000000000BA0000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422749600.0000000000BA4000.00000002.00020000.sdmp Download File

Similarity

API ID: Process$CurrentExitTerminate
String ID:
API String ID: 1703294689-0
Opcode ID: c854b1c69ae1511c61c918d5cedaa85bd798e3230c98b0c502e9de4826e24a29
Instruction ID: f56dab4d5db070a02330121ee2829cfa86c74b22152277df6d1a70cf897717ed
Opcode Fuzzy Hash: c854b1c69ae1511c61c918d5cedaa85bd798e3230c98b0c502e9de4826e24a29
Instruction Fuzzy Hash: FCE0B63140030CABCF21AF94DD5AA583FA9FB44782F140598F805AB176DF35DD82DB95

Uniqueness

Uniqueness Score: -1.00%

Function 00A82280, Relevance: 42.5, APIs: 11, Strings: 13, Instructions: 495COMMON

Download Yara Rule

APIs

PathIsDirectoryW.SHLWAPI(00000010), ref: 00A82305
PathFileExistsW.SHLWAPI(00000010,?,?,?), ref: 00A82340

Strings

\Utils\CefHelper.dll, xrefs: 00A82810
\Utils\helper.zip, xrefs: 00A82757
\Utils\7z.dll, xrefs: 00A825CF
', xrefs: 00A82C0B
\NetBridge.dll, xrefs: 00A8252C
weiduan, xrefs: 00A82955, 00A82C66
\cefhelper.dll, xrefs: 00A8279B
_InstallFiles, CInstallres::download() failed, xrefs: 00A82C7F
\cefview.exe, xrefs: 00A8267D
\Utils, xrefs: 00A825A9, 00A82769
wd_show_overtime, xrefs: 00A82C61
res_down_success, xrefs: 00A82950
\cef, xrefs: 00A8266B

Memory Dump Source

Source File: 00000001.00000002.422151708.0000000000A71000.00000020.00020000.sdmp, Offset: 00A70000, based on PE: true

Associated: 00000001.00000002.422117330.0000000000A70000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422651142.0000000000B5D000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422716671.0000000000B9A000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422731871.0000000000B9D000.00000008.00020000.sdmp Download File
Associated: 00000001.00000002.422740097.0000000000BA0000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422749600.0000000000BA4000.00000002.00020000.sdmp Download File

Similarity

API ID: Path$DirectoryExistsFile
String ID: '$\NetBridge.dll$\Utils$\Utils\7z.dll$\Utils\CefHelper.dll$\Utils\helper.zip$\cef$\cefhelper.dll$\cefview.exe$_InstallFiles, CInstallres::download() failed$res_down_success$wd_show_overtime$weiduan
API String ID: 1302732169-4027753242
Opcode ID: 1058bf36e47d93a5268601326900c9ba049c4916234e0aba2ae472dcd19b909a
Instruction ID: 7129512fb9ce1c02f466b40fcfa1a362049254a7871389ed3023f72f419fcbc1
Opcode Fuzzy Hash: 1058bf36e47d93a5268601326900c9ba049c4916234e0aba2ae472dcd19b909a
Instruction Fuzzy Hash: 5012A571D00249DFDB01EBB8CD49B9EBBF8AF15314F148159E415E7292EB78DA04CBA1

Uniqueness

Uniqueness Score: -1.00%

Function 00AA2260, Relevance: 37.0, APIs: 18, Strings: 3, Instructions: 300filewindowCOMMON

Download Yara Rule

APIs

CreateFileW.KERNEL32(00A81BFD,40000000,00000001,00000000,00000002,00000000,00000000,?), ref: 00AA2290
WriteFile.KERNEL32(00000000,?,00000006,?,00000000,?,?), ref: 00AA22E0
GetIconInfo.USER32(?,?), ref: 00AA2330
GetDC.USER32(00000000), ref: 00AA2340
GetDIBits.GDI32(00000000,?,00000000,00000001,00000000,?,00000000), ref: 00AA238C
SetFilePointer.KERNEL32(00000000,?,00000000,00000000), ref: 00AA2411

Strings

(, xrefs: 00AA2364
(, xrefs: 00AA24DB
(, xrefs: 00AA243B

Memory Dump Source

Source File: 00000001.00000002.422151708.0000000000A71000.00000020.00020000.sdmp, Offset: 00A70000, based on PE: true

Associated: 00000001.00000002.422117330.0000000000A70000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422651142.0000000000B5D000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422716671.0000000000B9A000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422731871.0000000000B9D000.00000008.00020000.sdmp Download File
Associated: 00000001.00000002.422740097.0000000000BA0000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422749600.0000000000BA4000.00000002.00020000.sdmp Download File

Similarity

API ID: File$BitsCreateIconInfoPointerWrite
String ID: ($($(
API String ID: 3469908135-3938514357
Opcode ID: ff5c3ac948408815fb6103d795bd3363ce3b2781652304f8c0699564b1b16761
Instruction ID: e7ec6022c9c0feb1ca7751a0a103be34f6edd67881e045c7c5ca080b40ab72b0
Opcode Fuzzy Hash: ff5c3ac948408815fb6103d795bd3363ce3b2781652304f8c0699564b1b16761
Instruction Fuzzy Hash: 9EC15971D00358ABEF20CBA8CD45BEDB7B9FF5A305F108259E518B7191EB70AA95CB10

Uniqueness

Uniqueness Score: -1.00%

Function 00A7CF90, Relevance: 25.0, APIs: 3, Strings: 11, Instructions: 511COMMON

Download Yara Rule

Strings

PQVS<, xrefs: 00A7D3C5
7z_download_success, xrefs: 00A7D0E6
\Utils\7z.dll, xrefs: 00A7D053
7z_download_fail, xrefs: 00A7D0F5
\NetBridge.dll, xrefs: 00A7D54A
http://cdn-file-ssl-wan.ludashi.com/wan/wan/7z.dll, xrefs: 00A7D029, 00A7D040
weiduan, xrefs: 00A7CFCF, 00A7D0FA
7z_download_start, xrefs: 00A7CFCA
down_skin_fail, xrefs: 00A7D429
ico, xrefs: 00A7D1B0, 00A7D1CA
down_icon_fail, xrefs: 00A7D259

Memory Dump Source

Source File: 00000001.00000002.422151708.0000000000A71000.00000020.00020000.sdmp, Offset: 00A70000, based on PE: true

Associated: 00000001.00000002.422117330.0000000000A70000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422651142.0000000000B5D000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422716671.0000000000B9A000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422731871.0000000000B9D000.00000008.00020000.sdmp Download File
Associated: 00000001.00000002.422740097.0000000000BA0000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422749600.0000000000BA4000.00000002.00020000.sdmp Download File

Similarity

API ID: FindResource$HeapProcess
String ID: 7z_download_fail$7z_download_start$7z_download_success$PQVS<$\NetBridge.dll$\Utils\7z.dll$down_icon_fail$down_skin_fail$http://cdn-file-ssl-wan.ludashi.com/wan/wan/7z.dll$ico$weiduan
API String ID: 377148374-3392298816
Opcode ID: 74db4ad4875a35bf4679feb0fa9038249df64739aee3a42b2efaff87557f160c
Instruction ID: 0a0def6c7a5d72a168fe8694d6591a43ff3d27a6df69d5d4e51264046ab7bac3
Opcode Fuzzy Hash: 74db4ad4875a35bf4679feb0fa9038249df64739aee3a42b2efaff87557f160c
Instruction Fuzzy Hash: 4A02B271A01605DFDB00EFA8CD45BAEBBF4EF45324F14C299E819AB2D2DB749904CB91

Uniqueness

Uniqueness Score: -1.00%

Function 00A808D0, Relevance: 23.1, APIs: 1, Strings: 12, Instructions: 321COMMON

Download Yara Rule

APIs

Part of subcall function 00A745F0: GetProcessHeap.KERNEL32(00AA5638,F084A4B2), ref: 00A74601

SHDeleteKeyW.SHLWAPI(80000001,?,?,?,?,?,?,?,?), ref: 00A809B8

Part of subcall function 00AA2F00: SHSetValueW.SHLWAPI(00000000,00000000,00000000,00000001,00B5DAF8,00B5DAFA,?,00AAE622,80000002,Software\LDSGameCenterExtra,LastRunVer), ref: 00AA2F50

Part of subcall function 00A74130: FindResourceExW.KERNEL32(00000000,00000006,?,00000000,00000000,00B5DAF8,?,?,?,?,00A736E1,00B5DAF8,?,?,?,00B5DAF8), ref: 00A74186
Part of subcall function 00A74130: FindResourceW.KERNEL32(00000000,00B5DAF8,00000006,?,00B5DAF8), ref: 00A741C4

Strings

DisplayName, xrefs: 00A809DF
Publisher, xrefs: 00A80A44
"%s" --uninstall --from=uninst, xrefs: 00A80A7B
DisplayVersion, xrefs: 00A80A30
http://www.taojike.com.cn, xrefs: 00A80AB6, 00A80ACD
_AddUninstallItem, xrefs: 00A808F8
InstallLocation, xrefs: 00A80B12
URLInfoAbout, xrefs: 00A80AE1
SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\WdGame_%s, xrefs: 00A809A1
add_uninst_item, xrefs: 00A80B52
_AddUninstallItem, success, xrefs: 00A80B26
UninstallString, xrefs: 00A80A89

Memory Dump Source

Source File: 00000001.00000002.422151708.0000000000A71000.00000020.00020000.sdmp, Offset: 00A70000, based on PE: true

Associated: 00000001.00000002.422117330.0000000000A70000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422651142.0000000000B5D000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422716671.0000000000B9A000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422731871.0000000000B9D000.00000008.00020000.sdmp Download File
Associated: 00000001.00000002.422740097.0000000000BA0000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422749600.0000000000BA4000.00000002.00020000.sdmp Download File

Similarity

API ID: FindResource$DeleteHeapProcessValue
String ID: "%s" --uninstall --from=uninst$DisplayName$DisplayVersion$InstallLocation$Publisher$SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\WdGame_%s$URLInfoAbout$UninstallString$_AddUninstallItem$_AddUninstallItem, success$add_uninst_item$http://www.taojike.com.cn
API String ID: 3394532870-4184030479
Opcode ID: 2379dd2f2f8f93c86bb20fcd49fc1c348d0c52e91596522d5696cba75e287622
Instruction ID: bf0968de01f41c083776e08dfac9c42c757f1c4ea36336ac6a31ff65af308a3a
Opcode Fuzzy Hash: 2379dd2f2f8f93c86bb20fcd49fc1c348d0c52e91596522d5696cba75e287622
Instruction Fuzzy Hash: A9C15070A01645DFEB00EBACCD49B9EBBF4EF45314F148199E819E72A2DB749D04CBA1

Uniqueness

Uniqueness Score: -1.00%

Function 00B190C0, Relevance: 22.7, APIs: 15, Instructions: 175filetimeCOMMON

Download Yara Rule

APIs

PathRemoveFileSpecW.SHLWAPI(?,?,?,?,00000000,00000001,00A846B7), ref: 00B19170
PathFileExistsW.SHLWAPI(?,?,?,?,00000000,00000001,00A846B7), ref: 00B1917D
SHCreateDirectory.SHELL32(00000000,?,?,?,?,00000000,00000001,00A846B7), ref: 00B1918F
CreateFileW.KERNEL32(00B19049,C0000000,00000000,00000000,00000002,00000080,00000000,?,?,?,00000000,00000001,00A846B7), ref: 00B191A8
SetFilePointer.KERNEL32(00000000,?,00000000,00000000,?,?,?,00000000,00000001,00A846B7), ref: 00B191E6
SetEndOfFile.KERNEL32(00000000,?,?,?,00000000,00000001,00A846B7), ref: 00B191F6
CreateFileMappingW.KERNELBASE(00000000,00000000,00000004,00000000,00000000,00000000,?,?,?,00000000,00000001,00A846B7), ref: 00B1920F
MapViewOfFile.KERNEL32(00000000,00000006,00000000,00000000,00000000,?,?,?,00000000,00000001,00A846B7), ref: 00B1922C
DosDateTimeToFileTime.KERNEL32(?,?,?), ref: 00B1927F
LocalFileTimeToFileTime.KERNEL32(?,?,?,?,?,00000000,00000001,00A846B7), ref: 00B19297
SetFileTime.KERNEL32(00000000,00000000,00000000,?,?,?,?,00000000,00000001,00A846B7), ref: 00B192AD
UnmapViewOfFile.KERNEL32(?,?,00000000,?,?,?,?,00000000,00000001,00A846B7), ref: 00B192BE
CloseHandle.KERNEL32(?,?,?,?,00000000,00000001,00A846B7), ref: 00B192CA
CloseHandle.KERNEL32(00000000,?,?,?,00000000,00000001,00A846B7), ref: 00B192D1
DeleteFileW.KERNEL32(00B19049,00000000,00000001,00A846B7), ref: 00B192DC

Memory Dump Source

Source File: 00000001.00000002.422151708.0000000000A71000.00000020.00020000.sdmp, Offset: 00A70000, based on PE: true

Associated: 00000001.00000002.422117330.0000000000A70000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422651142.0000000000B5D000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422716671.0000000000B9A000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422731871.0000000000B9D000.00000008.00020000.sdmp Download File
Associated: 00000001.00000002.422740097.0000000000BA0000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422749600.0000000000BA4000.00000002.00020000.sdmp Download File

Similarity

API ID: File$Time$Create$CloseHandlePathView$DateDeleteDirectoryExistsLocalMappingPointerRemoveSpecUnmap
String ID:
API String ID: 1846070058-0
Opcode ID: 16d26a4daaeae5a9ded018061913496e0f162cac258a76ffb77ce3514c40c231
Instruction ID: 56a882c59bdfc51599913ef0699f0ecbe570dbc0aefadfa07deff9036daed038
Opcode Fuzzy Hash: 16d26a4daaeae5a9ded018061913496e0f162cac258a76ffb77ce3514c40c231
Instruction Fuzzy Hash: A051AF71A40318ABDB209F64DC98F9977F8EB08701F5041D5F909EB2A1DB70EA85CF54

Uniqueness

Uniqueness Score: -1.00%

Function 00A7DDE6, Relevance: 21.4, APIs: 6, Strings: 6, Instructions: 405COMMON

Download Yara Rule

APIs

GetModuleHandleW.KERNEL32(00000000,0000008D,FILERES,00000000), ref: 00A7E004

Strings

CInstallHelper::_GetConfigInfoFromServer, parse config failed, xrefs: 00A7E189
CInstallHelper::GetGameConfigFromLocal, parse json failed, xrefs: 00A7E107
CInstallHelper::GetGameConfigFromLocal, read resource failed., xrefs: 00A7E01B
get_info_fail, xrefs: 00A7E047, 00A7E12E, 00A7E1B5
CInstallHelper::GetGameConfigFromLocal, xrefs: 00A7DF41
FILERES, xrefs: 00A7DFF8

Memory Dump Source

Source File: 00000001.00000002.422151708.0000000000A71000.00000020.00020000.sdmp, Offset: 00A70000, based on PE: true

Associated: 00000001.00000002.422117330.0000000000A70000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422651142.0000000000B5D000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422716671.0000000000B9A000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422731871.0000000000B9D000.00000008.00020000.sdmp Download File
Associated: 00000001.00000002.422740097.0000000000BA0000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422749600.0000000000BA4000.00000002.00020000.sdmp Download File

Similarity

API ID: HandleModule
String ID: CInstallHelper::GetGameConfigFromLocal$CInstallHelper::GetGameConfigFromLocal, parse json failed$CInstallHelper::GetGameConfigFromLocal, read resource failed.$CInstallHelper::_GetConfigInfoFromServer, parse config failed$FILERES$get_info_fail
API String ID: 4139908857-1668649320
Opcode ID: eeacf9f53c6832d8786978bc8b25a4396054fc29ba284ad42727570f97898c30
Instruction ID: 401e9bd2d3ff1c2622ad8c0e8231285441c6f3b8e0c2a65bedde346109524882
Opcode Fuzzy Hash: eeacf9f53c6832d8786978bc8b25a4396054fc29ba284ad42727570f97898c30
Instruction Fuzzy Hash: EAE1F371A01205DFDB14EFA8CD45BEEBBF5AF49310F14C298F819AB292DB749904CB91

Uniqueness

Uniqueness Score: -1.00%

Function 00AB5E30, Relevance: 21.1, APIs: 6, Strings: 6, Instructions: 77COMMON

Download Yara Rule

Strings

InitByDllPath HasMsSign failed, xrefs: 00AB5E56
HttpInit, xrefs: 00AB5E89
HttpUninit, xrefs: 00AB5E91
zlib_compressBound, xrefs: 00AB5EB8
zlib_uncompress, xrefs: 00AB5E9E
zlib_compress, xrefs: 00AB5EAB

Memory Dump Source

Source File: 00000001.00000002.422151708.0000000000A71000.00000020.00020000.sdmp, Offset: 00A70000, based on PE: true

Associated: 00000001.00000002.422117330.0000000000A70000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422651142.0000000000B5D000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422716671.0000000000B9A000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422731871.0000000000B9D000.00000008.00020000.sdmp Download File
Associated: 00000001.00000002.422740097.0000000000BA0000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422749600.0000000000BA4000.00000002.00020000.sdmp Download File

Similarity

API ID:
String ID: HttpInit$HttpUninit$InitByDllPath HasMsSign failed$zlib_compress$zlib_compressBound$zlib_uncompress
API String ID: 0-2891362972
Opcode ID: 255a5ed08d6744700b6c5e58372d2bb72c3c84b30e9f83d511aae52076c65a64
Instruction ID: a1e5aed18a24df2741c0b28ffaaa58271064b376c8bcffd99e5bce70de249f39
Opcode Fuzzy Hash: 255a5ed08d6744700b6c5e58372d2bb72c3c84b30e9f83d511aae52076c65a64
Instruction Fuzzy Hash: C8217F71A44B06AAD7109F79D804B95FBE8FF54324F008532E408C3691DBB4E9A0CBD0

Uniqueness

Uniqueness Score: -1.00%

Function 00A7AC50, Relevance: 19.6, APIs: 5, Strings: 6, Instructions: 361COMMON

Download Yara Rule

Strings

CGameConfig::GetInstallPath installPath-no_dirre_defaylt:%s, xrefs: 00A7AFC6
CGameConfig::GetInstallPath installPath-default:%s, xrefs: 00A7ACCA
CGameConfig::GetInstallPath installPath-make_sure:%s, xrefs: 00A7AFB7
CGameConfig::GetInstallPath installPath:%s, xrefs: 00A7B031
default, xrefs: 00A7ACB5
CGameConfig::GetInstallPath installPath-driver:%s, xrefs: 00A7AD1B

Memory Dump Source

Source File: 00000001.00000002.422151708.0000000000A71000.00000020.00020000.sdmp, Offset: 00A70000, based on PE: true

Associated: 00000001.00000002.422117330.0000000000A70000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422651142.0000000000B5D000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422716671.0000000000B9A000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422731871.0000000000B9D000.00000008.00020000.sdmp Download File
Associated: 00000001.00000002.422740097.0000000000BA0000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422749600.0000000000BA4000.00000002.00020000.sdmp Download File

Similarity

API ID: Path$CreateDirectoryException@8ExistsFileFolderSpecialThrow
String ID: CGameConfig::GetInstallPath installPath-default:%s$CGameConfig::GetInstallPath installPath-driver:%s$CGameConfig::GetInstallPath installPath-make_sure:%s$CGameConfig::GetInstallPath installPath-no_dirre_defaylt:%s$CGameConfig::GetInstallPath installPath:%s$default
API String ID: 1711007527-1607741555
Opcode ID: 62ec953b1ce37dce5c592564b36d6eda045834a3a538715a8c9bba90ea426839
Instruction ID: e725d6191f6da233a52814a5ce1221ed0add4489a82848478f45eea2cf305019
Opcode Fuzzy Hash: 62ec953b1ce37dce5c592564b36d6eda045834a3a538715a8c9bba90ea426839
Instruction Fuzzy Hash: 9ED1BF71A00215AFDB249F64CC45FAEB7B5EF45310F14C5A9E90DAB291DB30AD44CFA2

Uniqueness

Uniqueness Score: -1.00%

Function 00A7FF00, Relevance: 19.5, APIs: 1, Strings: 10, Instructions: 290COMMON

Download Yara Rule

APIs

SHDeleteKeyW.SHLWAPI(80000001,00000010,00000000), ref: 00A7FF58

Part of subcall function 00AA2F00: SHSetValueW.SHLWAPI(00000000,00000000,00000000,00000001,00B5DAF8,00B5DAFA,?,00AAE622,80000002,Software\LDSGameCenterExtra,LastRunVer), ref: 00AA2F50

Part of subcall function 00AA2EC0: SHSetValueW.SHLWAPI(?,00000010,80000001,00000004,00A8014A,00000004,00000010,?,00A8014A,80000001,00000010,AutoRun,?), ref: 00AA2EE4

Strings

DisplayName, xrefs: 00A80011
SubPID, xrefs: 00A800A7
From, xrefs: 00A80114
AutoRun, xrefs: 00A8013A
ExePath, xrefs: 00A7FFD6
InstallTime, xrefs: 00A7FFA2
Channel, xrefs: 00A800DF
PID, xrefs: 00A8006F
Version, xrefs: 00A8003B
InstallDir, xrefs: 00A7FF7E

Memory Dump Source

Source File: 00000001.00000002.422151708.0000000000A71000.00000020.00020000.sdmp, Offset: 00A70000, based on PE: true

Associated: 00000001.00000002.422117330.0000000000A70000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422651142.0000000000B5D000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422716671.0000000000B9A000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422731871.0000000000B9D000.00000008.00020000.sdmp Download File
Associated: 00000001.00000002.422740097.0000000000BA0000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422749600.0000000000BA4000.00000002.00020000.sdmp Download File

Similarity

API ID: Value$Delete
String ID: AutoRun$Channel$DisplayName$ExePath$From$InstallDir$InstallTime$PID$SubPID$Version
API String ID: 1738766685-1002681406
Opcode ID: 3a6c21beed0b18f461290d08654710e3d6a5da539e9006c271573250d77eabc0
Instruction ID: 4cfa8eb51354c56608d35e0a150b5e09707d49145d64c7e002b6fd00dd3442bd
Opcode Fuzzy Hash: 3a6c21beed0b18f461290d08654710e3d6a5da539e9006c271573250d77eabc0
Instruction Fuzzy Hash: 52B14B70900645EFE700EBADCD49F9EBBB8EF45314F148199E804AB2A2DB759D14CBA1

Uniqueness

Uniqueness Score: -1.00%

Function 00A82939, Relevance: 19.5, APIs: 4, Strings: 7, Instructions: 245libraryfileloaderCOMMON

Download Yara Rule

APIs

PathFileExistsW.SHLWAPI(00000000,?,weiduan,cef_exist,00000000,00000001), ref: 00A8299A
LoadLibraryW.KERNEL32(00000000), ref: 00A829AB
GetProcAddress.KERNEL32(00000000,StartFlashEx), ref: 00A829BE
FreeLibrary.KERNEL32(?), ref: 00A82A31
PathFileExistsW.SHLWAPI(00000000,?,?,?,-00000028), ref: 00A82B81
DeleteFileW.KERNEL32(00000000,?,?,?,-00000028), ref: 00A82B8C

Strings

pepflash_exist, xrefs: 00A82A74
24.0.0.221, xrefs: 00A82A04
StartFlashEx, xrefs: 00A829B8
res_copy_success, xrefs: 00A82941
weiduan, xrefs: 00A82955, 00A82AAD
_InstallFiles, fancy3d not installed, xrefs: 00A82AFA
\Utils\cef, xrefs: 00A829F0

Memory Dump Source

Source File: 00000001.00000002.422151708.0000000000A71000.00000020.00020000.sdmp, Offset: 00A70000, based on PE: true

Associated: 00000001.00000002.422117330.0000000000A70000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422651142.0000000000B5D000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422716671.0000000000B9A000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422731871.0000000000B9D000.00000008.00020000.sdmp Download File
Associated: 00000001.00000002.422740097.0000000000BA0000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422749600.0000000000BA4000.00000002.00020000.sdmp Download File

Similarity

API ID: File$ExistsLibraryPath$AddressDeleteFreeLoadProc
String ID: 24.0.0.221$StartFlashEx$\Utils\cef$_InstallFiles, fancy3d not installed$pepflash_exist$res_copy_success$weiduan
API String ID: 553293797-4051935737
Opcode ID: 6c7681b38407012b15c475711ff42da56d070fd2068a550e448045c7cc443725
Instruction ID: 9dd2a1289305b28cea70c076869d7a9599875359502d62d3e22d6d6945a4ac8b
Opcode Fuzzy Hash: 6c7681b38407012b15c475711ff42da56d070fd2068a550e448045c7cc443725
Instruction Fuzzy Hash: 96A19330A01646DFDB10EB78C949B6DFBF0AF55320F1482A9E415AB2E2EB74DD01CB91

Uniqueness

Uniqueness Score: -1.00%

Function 00A81979, Relevance: 18.0, APIs: 8, Strings: 2, Instructions: 452filewindowCOMMON

Download Yara Rule

APIs

Part of subcall function 00A745F0: GetProcessHeap.KERNEL32(00AA5638,F084A4B2), ref: 00A74601

PathFileExistsW.SHLWAPI(?), ref: 00A81A69
DeleteFileW.KERNEL32(?), ref: 00A81A74
PathFileExistsW.SHLWAPI(?), ref: 00A81A7B
GetModuleHandleW.KERNEL32(00000000), ref: 00A81B36
LoadImageW.USER32 ref: 00A81B5D
DestroyIcon.USER32(?), ref: 00A81E27

Part of subcall function 00A74130: FindResourceExW.KERNEL32(00000000,00000006,?,00000000,00000000,00B5DAF8,?,?,?,?,00A736E1,00B5DAF8,?,?,?,00B5DAF8), ref: 00A74186
Part of subcall function 00A74130: FindResourceW.KERNEL32(00000000,00B5DAF8,00000006,?,00B5DAF8), ref: 00A741C4

Concurrency::cancel_current_task.LIBCPMT ref: 00A81EA1
Concurrency::cancel_current_task.LIBCPMT ref: 00A81EB5

Strings

%s\%s.%s, xrefs: 00A81A57
%s\%s-%d.%s, xrefs: 00A81AA1

Memory Dump Source

Source File: 00000001.00000002.422151708.0000000000A71000.00000020.00020000.sdmp, Offset: 00A70000, based on PE: true

Associated: 00000001.00000002.422117330.0000000000A70000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422651142.0000000000B5D000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422716671.0000000000B9A000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422731871.0000000000B9D000.00000008.00020000.sdmp Download File
Associated: 00000001.00000002.422740097.0000000000BA0000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422749600.0000000000BA4000.00000002.00020000.sdmp Download File

Similarity

API ID: File$Concurrency::cancel_current_taskExistsFindPathResource$DeleteDestroyHandleHeapIconImageLoadModuleProcess
String ID: %s\%s-%d.%s$%s\%s.%s
API String ID: 3863099931-41731780
Opcode ID: d9b064acdf34093705c1f1ef198456d6f01468b6a2817e1b2c28624045f4dd88
Instruction ID: b88ee6798bc6620cad45857473a2a25cadc8507581592fe2e42fe398683177fb
Opcode Fuzzy Hash: d9b064acdf34093705c1f1ef198456d6f01468b6a2817e1b2c28624045f4dd88
Instruction Fuzzy Hash: 78029F71A00245CFDB14DFA8CD84BADBBB9FF45314F188258E819AB296DB70AD46CF50

Uniqueness

Uniqueness Score: -1.00%

Function 00A7F230, Relevance: 17.9, APIs: 4, Strings: 6, Instructions: 381COMMON

Download Yara Rule

APIs

Part of subcall function 00A73FD0: __CxxThrowException@8.LIBVCRUNTIME ref: 00A73FE7

Concurrency::cancel_current_task.LIBCPMT ref: 00A7F6C2

Part of subcall function 00AB607F: __CxxThrowException@8.LIBVCRUNTIME ref: 00AB6096

Concurrency::cancel_current_task.LIBCPMT ref: 00A7F6C7
Concurrency::cancel_current_task.LIBCPMT ref: 00A7F6CC
Concurrency::cancel_current_task.LIBCPMT ref: 00A7F6D1

Strings

weiduan, xrefs: 00A7F5F9
install, xrefs: 00A7F2D4
d, xrefs: 00A7F5A7
wd_install_success, xrefs: 00A7F5F4
inst_fail, xrefs: 00A7F3E8, 00A7F45D, 00A7F4EB
inst_succ, xrefs: 00A7F634

Memory Dump Source

Source File: 00000001.00000002.422151708.0000000000A71000.00000020.00020000.sdmp, Offset: 00A70000, based on PE: true

Associated: 00000001.00000002.422117330.0000000000A70000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422651142.0000000000B5D000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422716671.0000000000B9A000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422731871.0000000000B9D000.00000008.00020000.sdmp Download File
Associated: 00000001.00000002.422740097.0000000000BA0000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422749600.0000000000BA4000.00000002.00020000.sdmp Download File

Similarity

API ID: Concurrency::cancel_current_task$Exception@8Throw
String ID: d$inst_fail$inst_succ$install$wd_install_success$weiduan
API String ID: 3339364867-2755683214
Opcode ID: b1d8ed4e29ae28a27b6d177a665e81acec6e72f9649152d0f694c79ca3c14e8a
Instruction ID: 123fd7052c3160b227f06d586e5cd2203ef196a11256244e6893fd6ae0fa5a11
Opcode Fuzzy Hash: b1d8ed4e29ae28a27b6d177a665e81acec6e72f9649152d0f694c79ca3c14e8a
Instruction Fuzzy Hash: EAE1C670A01649DFDB00EBA8CD49B9DB7F4AF55705F14C1A8F409AB2A2DB749E04CF91

Uniqueness

Uniqueness Score: -1.00%

Function 00A80280, Relevance: 17.8, APIs: 4, Strings: 6, Instructions: 319fileCOMMON

Download Yara Rule

APIs

PathFileExistsW.SHLWAPI(?,?,?,?,?,?,00000010,?,?,?,?,?,?,00000000,00B53380,000000FF), ref: 00A8036D
DeleteFileW.KERNEL32(?,?,?,?,?,?,00000010,?,?,?,?,?,?,00000000,00B53380,000000FF), ref: 00A80378

Part of subcall function 00A73FD0: __CxxThrowException@8.LIBVCRUNTIME ref: 00A73FE7

Strings

--uninstall --from=start_menu, xrefs: 00A804DF
add_start_menu, xrefs: 00A80519
--from=start_menu, xrefs: 00A803CF, 00A803E6
_AddStartMenu, Delete %s, xrefs: 00A8037F, 00A804C3
%s\%s.lnk, xrefs: 00A8035B, 00A8049C
_AddStartMenu, success, xrefs: 00A804ED

Memory Dump Source

Source File: 00000001.00000002.422151708.0000000000A71000.00000020.00020000.sdmp, Offset: 00A70000, based on PE: true

Associated: 00000001.00000002.422117330.0000000000A70000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422651142.0000000000B5D000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422716671.0000000000B9A000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422731871.0000000000B9D000.00000008.00020000.sdmp Download File
Associated: 00000001.00000002.422740097.0000000000BA0000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422749600.0000000000BA4000.00000002.00020000.sdmp Download File

Similarity

API ID: File$DeleteException@8ExistsPathThrow
String ID: %s\%s.lnk$--from=start_menu$--uninstall --from=start_menu$_AddStartMenu, Delete %s$_AddStartMenu, success$add_start_menu
API String ID: 825949922-213476557
Opcode ID: 515ed98d2ce298a0ced9016691b5c09d75097c9ff85729100ef40981e481f101
Instruction ID: acd4ddbca2ac5db3e07191db89b2ad050822e62535bc58f8a1188a0f0347dae1
Opcode Fuzzy Hash: 515ed98d2ce298a0ced9016691b5c09d75097c9ff85729100ef40981e481f101
Instruction Fuzzy Hash: 9CC19071901645DFEB00EBA8CD49B9EBBF4EF45314F1481A8E415AB2A2EB74DD04CF91

Uniqueness

Uniqueness Score: -1.00%

Function 00A8C0E0, Relevance: 17.8, APIs: 3, Strings: 7, Instructions: 284windowCOMMON

Download Yara Rule

APIs

_wcsstr.LIBVCRUNTIME ref: 00A8C119
DebugBreak.KERNEL32(?,?), ref: 00A8C125

Part of subcall function 00A8ADA0: PathFileExistsW.SHLWAPI(-00000010), ref: 00A8ADEF

MessageBoxW.USER32(00000000,00B63218,00000000,00000030), ref: 00A8C4FC

Part of subcall function 00A7D500: PathFileExistsW.SHLWAPI(?,\NetBridge.dll,0000000E), ref: 00A7D562

MessageBoxW.USER32(00000000,00B63248,00000000,00000030), ref: 00A8C485

Strings

showinst, xrefs: 00A8C1C4, 00A8C6A8
uninstall, xrefs: 00A8C2AC
install, xrefs: 00A8C238
CMainControl::_EnsureLoad360Dlls, LoadExeDir360Net failed., xrefs: 00A8C454
install_extra, xrefs: 00A8C320
-debugbreak, xrefs: 00A8C113
\WdGameData_%s, xrefs: 00A8C16D

Memory Dump Source

Source File: 00000001.00000002.422151708.0000000000A71000.00000020.00020000.sdmp, Offset: 00A70000, based on PE: true

Associated: 00000001.00000002.422117330.0000000000A70000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422651142.0000000000B5D000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422716671.0000000000B9A000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422731871.0000000000B9D000.00000008.00020000.sdmp Download File
Associated: 00000001.00000002.422740097.0000000000BA0000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422749600.0000000000BA4000.00000002.00020000.sdmp Download File

Similarity

API ID: ExistsFileMessagePath$BreakDebug_wcsstr
String ID: -debugbreak$CMainControl::_EnsureLoad360Dlls, LoadExeDir360Net failed.$\WdGameData_%s$install$install_extra$showinst$uninstall
API String ID: 1991904086-992619606
Opcode ID: 52eac2523da0912f61883825ec0ed5b2725ab48bac6106f5b6f76dff604870f3
Instruction ID: 859083ee79965a673542741bfed7d18caec2d74877deebd754df1365c20952a5
Opcode Fuzzy Hash: 52eac2523da0912f61883825ec0ed5b2725ab48bac6106f5b6f76dff604870f3
Instruction Fuzzy Hash: 08B12670E002099BDF04EBB4CD89BDEFBB4AF55324F148259E415A72D2EB74AA44CF61

Uniqueness

Uniqueness Score: -1.00%

Function 00A815CF, Relevance: 16.0, APIs: 7, Strings: 2, Instructions: 286fileCOMMON

Download Yara Rule

APIs

PathFileExistsW.SHLWAPI(?), ref: 00A815FA
DeleteFileW.KERNEL32(?), ref: 00A81605
PathFileExistsW.SHLWAPI(?), ref: 00A8160C
GetModuleHandleW.KERNEL32(00000000,?,?,?), ref: 00A816D0
DeleteFileW.KERNEL32(?,?,?,?,?), ref: 00A817E9
Concurrency::cancel_current_task.LIBCPMT ref: 00A818FF

Strings

%s\%s.%s, xrefs: 00A815E8
%s\%s-%d.%s, xrefs: 00A8162F

Memory Dump Source

Source File: 00000001.00000002.422151708.0000000000A71000.00000020.00020000.sdmp, Offset: 00A70000, based on PE: true

Associated: 00000001.00000002.422117330.0000000000A70000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422651142.0000000000B5D000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422716671.0000000000B9A000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422731871.0000000000B9D000.00000008.00020000.sdmp Download File
Associated: 00000001.00000002.422740097.0000000000BA0000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422749600.0000000000BA4000.00000002.00020000.sdmp Download File

Similarity

API ID: File$DeleteExistsPath$Concurrency::cancel_current_taskHandleModule
String ID: %s\%s-%d.%s$%s\%s.%s
API String ID: 933095421-41731780
Opcode ID: 058b68044576f7b3d9794a93f073a1a9c9515043b6f7c9ef00fb342f603a22a4
Instruction ID: 4d6219c25ec0492e78e8c6a2679cb9e500122e626c731fc6d3a062a4c45217f8
Opcode Fuzzy Hash: 058b68044576f7b3d9794a93f073a1a9c9515043b6f7c9ef00fb342f603a22a4
Instruction Fuzzy Hash: ACB1B270A01245DFDB10EFA8CD49B9DB7F5FF45315F188298E819AB2A2DB309D05CB91

Uniqueness

Uniqueness Score: -1.00%

Function 00A89141, Relevance: 15.9, APIs: 6, Strings: 3, Instructions: 157COMMON

Download Yara Rule

APIs

Part of subcall function 00AA0A10: SHGetSpecialFolderPathW.SHELL32(00000000,?,0000001A,00000000), ref: 00AA0A90
Part of subcall function 00AA0A10: SHCreateDirectoryExW.SHELL32(00000000,?,00000000,00000000,?,?,?), ref: 00AA0AE4
Part of subcall function 00AA0A10: PathFileExistsW.SHLWAPI(?), ref: 00AA0AEB

GdiplusStartup.GDIPLUS(?,00000001,00000000,0000000B,?,?,\WdGame\Log), ref: 00A891C6
GdiplusShutdown.GDIPLUS(00000000,00001388,0000000B,?,00000001,00000000), ref: 00A89275
EnterCriticalSection.KERNEL32(00BA0808,00000000,00001388,0000000B,?,00000001,00000000), ref: 00A89284
DestroyWindow.USER32(00000000,?,?,?,?,?,?,?,?,?,?,\WdGame\Log,0000000B), ref: 00A8929E
LeaveCriticalSection.KERNEL32(00BA0808,?,?,?,?,?,?,?,?,?,?,\WdGame\Log,0000000B), ref: 00A892E7
CoUninitialize.OLE32(?,?,?,?,?,?,?,?,?,?,\WdGame\Log,0000000B), ref: 00A8933F

Strings

\WdGame.log, xrefs: 00A89181
r, xrefs: 00A891EB, 00A89202, 00A8922D, 00A89250
\WdGame\Log, xrefs: 00A89143

Memory Dump Source

Source File: 00000001.00000002.422151708.0000000000A71000.00000020.00020000.sdmp, Offset: 00A70000, based on PE: true

Associated: 00000001.00000002.422117330.0000000000A70000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422651142.0000000000B5D000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422716671.0000000000B9A000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422731871.0000000000B9D000.00000008.00020000.sdmp Download File
Associated: 00000001.00000002.422740097.0000000000BA0000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422749600.0000000000BA4000.00000002.00020000.sdmp Download File

Similarity

API ID: CriticalGdiplusPathSection$CreateDestroyDirectoryEnterExistsFileFolderLeaveShutdownSpecialStartupUninitializeWindow
String ID: r$\WdGame.log$\WdGame\Log
API String ID: 3745756869-1418428940
Opcode ID: 831c1eee54a2a8e1aa33017c29b3840b9bb7656bea6d0b1edf41ea8fe2e1cc4d
Instruction ID: 35729cd94f37fa8e0856aefa986a565978e4ef7eb9810876d4446744ef795c21
Opcode Fuzzy Hash: 831c1eee54a2a8e1aa33017c29b3840b9bb7656bea6d0b1edf41ea8fe2e1cc4d
Instruction Fuzzy Hash: 1651C2709102059FEB20FF64DC59BABB7F4FF05701F048569E819AB2A1EF74A904CB95

Uniqueness

Uniqueness Score: -1.00%

Function 00AAD5B0, Relevance: 14.3, APIs: 6, Strings: 2, Instructions: 323COMMON

Download Yara Rule

APIs

InitializeCriticalSection.KERNEL32(?,F084A4B2), ref: 00AAD603

Part of subcall function 00A745F0: GetProcessHeap.KERNEL32(00AA5638,F084A4B2), ref: 00A74601

SHGetSpecialFolderPathW.SHELL32(00000000,?,0000001A,00000000), ref: 00AAD69D
PathAppendW.SHLWAPI(?,LDSGameCenter), ref: 00AAD6AF
PathCombineW.SHLWAPI(?,?,Log\LDSGameCenter.log), ref: 00AAD6C2

Part of subcall function 00A74130: FindResourceExW.KERNEL32(00000000,00000006,?,00000000,00000000,00B5DAF8,?,?,?,?,00A736E1,00B5DAF8,?,?,?,00B5DAF8), ref: 00A74186
Part of subcall function 00A74130: FindResourceW.KERNEL32(00000000,00B5DAF8,00000006,?,00B5DAF8), ref: 00A741C4

PathRemoveFileSpecW.SHLWAPI(00000000,?,?,?,?), ref: 00AAD83F
DeleteCriticalSection.KERNEL32(00000005,F084A4B2,?,?,?,00000000,00B56550,000000FF,?,80004005,80004005,80004005), ref: 00AAD980

Strings

LDSGameCenter, xrefs: 00AAD6A3
Log\LDSGameCenter.log, xrefs: 00AAD6B5

Memory Dump Source

Source File: 00000001.00000002.422151708.0000000000A71000.00000020.00020000.sdmp, Offset: 00A70000, based on PE: true

Associated: 00000001.00000002.422117330.0000000000A70000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422651142.0000000000B5D000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422716671.0000000000B9A000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422731871.0000000000B9D000.00000008.00020000.sdmp Download File
Associated: 00000001.00000002.422740097.0000000000BA0000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422749600.0000000000BA4000.00000002.00020000.sdmp Download File

Similarity

API ID: Path$CriticalFindResourceSection$AppendCombineDeleteFileFolderHeapInitializeProcessRemoveSpecSpecial
String ID: LDSGameCenter$Log\LDSGameCenter.log
API String ID: 3624597452-4075356421
Opcode ID: 8ca958141f784ddefce5271f4c99f7417551c6c4b69825d0a82f0a1f18b2d677
Instruction ID: 11512726f1d5a6118803fdb841fc3a7509cbf77c0ced6a2fcf73c9f40f2c4819
Opcode Fuzzy Hash: 8ca958141f784ddefce5271f4c99f7417551c6c4b69825d0a82f0a1f18b2d677
Instruction Fuzzy Hash: FEC1C171A00605AFCB14DF68DD48BAAB7F4FF49314F14829DE80A9BA91DB34AD45CF90

Uniqueness

Uniqueness Score: -1.00%

Function 00A7FCA0, Relevance: 14.2, APIs: 4, Strings: 4, Instructions: 199filewindowCOMMON

Download Yara Rule

APIs

PathFileExistsW.SHLWAPI(00B53298,?,?,?,00000000,00B53298,000000FF), ref: 00A7FD12
DeleteFileW.KERNEL32(00B53298,?,?,?,00000000,00B53298,000000FF), ref: 00A7FD1F
PostMessageW.USER32(0000FFFF,0000001A,0000002A,00000000), ref: 00A7FE29
SHChangeNotify.SHELL32(08000000,00001000,00000000,00000000), ref: 00A7FE3D

Part of subcall function 00A73FD0: __CxxThrowException@8.LIBVCRUNTIME ref: 00A73FE7

Strings

add_desk_icon, xrefs: 00A7FE03
_AddStartMenu, Delete %s, xrefs: 00A7FD28
_AddDesktopIcon, success, xrefs: 00A7FDD7
--from=desk_icon, xrefs: 00A7FD78, 00A7FD8F

Memory Dump Source

Source File: 00000001.00000002.422151708.0000000000A71000.00000020.00020000.sdmp, Offset: 00A70000, based on PE: true

Associated: 00000001.00000002.422117330.0000000000A70000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422651142.0000000000B5D000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422716671.0000000000B9A000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422731871.0000000000B9D000.00000008.00020000.sdmp Download File
Associated: 00000001.00000002.422740097.0000000000BA0000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422749600.0000000000BA4000.00000002.00020000.sdmp Download File

Similarity

API ID: File$ChangeDeleteException@8ExistsMessageNotifyPathPostThrow
String ID: --from=desk_icon$_AddDesktopIcon, success$_AddStartMenu, Delete %s$add_desk_icon
API String ID: 2158490671-3054063681
Opcode ID: 146ed917a2e6fcc8acc89806dd07834a3b8bb78ba7c4cbc097cbb3ba7a41c260
Instruction ID: 9e0621917ef4c9733542af9e8fa2fd417dd5f3d6c1cd35e8970327be15e37ea8
Opcode Fuzzy Hash: 146ed917a2e6fcc8acc89806dd07834a3b8bb78ba7c4cbc097cbb3ba7a41c260
Instruction Fuzzy Hash: 7371A371A00645DFE700EBA8CD49B5DBBB4EF05715F14C2A8E918AB2E2DB749904CBA1

Uniqueness

Uniqueness Score: -1.00%

Function 00A84590, Relevance: 14.2, APIs: 3, Strings: 5, Instructions: 194COMMON

Download Yara Rule

APIs

PathFileExistsW.SHLWAPI(00000000), ref: 00A846A4
GetModuleHandleW.KERNEL32(00000000,00000083,FILERES,00000000,F084A4B2,?,?), ref: 00A84754
GetModuleHandleW.KERNEL32(00000000,00000000,ZIPRES,00000000,F084A4B2,?,?,00000000), ref: 00A845E8

Part of subcall function 00AA2180: FindResourceW.KERNEL32(?,00000000,00A84760,?,00A7D581,?,?,00A84760,00000000,?,?), ref: 00AA2192
Part of subcall function 00AA2180: SizeofResource.KERNEL32(?,00000000,?,00A7D581,?,?,00A84760,00000000,?,?), ref: 00AA21A0
Part of subcall function 00AA2180: LoadResource.KERNEL32(?,00000000,?,00A7D581,?,?,00A84760,00000000,?,?), ref: 00AA21AE
Part of subcall function 00AA2180: LockResource.KERNEL32(00000000,?,00A7D581,?,?,00A84760,00000000,?,?), ref: 00AA21B9

Strings

ZIPRES, xrefs: 00A845DE
_TrayUnzipFile, save to '%s' failed, error=%d, xrefs: 00A8466B
_TrayUnzipFile2, save to '%s' failed, error=%d, xrefs: 00A846C3
_TrayUnzipFile '%s' failed, read resource failed., xrefs: 00A845FD, 00A84769
FILERES, xrefs: 00A8474A

Memory Dump Source

Source File: 00000001.00000002.422151708.0000000000A71000.00000020.00020000.sdmp, Offset: 00A70000, based on PE: true

Associated: 00000001.00000002.422117330.0000000000A70000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422651142.0000000000B5D000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422716671.0000000000B9A000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422731871.0000000000B9D000.00000008.00020000.sdmp Download File
Associated: 00000001.00000002.422740097.0000000000BA0000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422749600.0000000000BA4000.00000002.00020000.sdmp Download File

Similarity

API ID: Resource$HandleModule$ExistsFileFindLoadLockPathSizeof
String ID: FILERES$ZIPRES$_TrayUnzipFile '%s' failed, read resource failed.$_TrayUnzipFile, save to '%s' failed, error=%d$_TrayUnzipFile2, save to '%s' failed, error=%d
API String ID: 3905432116-3135596165
Opcode ID: 90fc5418b753b596c6081b8b941964c56b2451930c8e5bd452271841aabeeac4
Instruction ID: 1ab2c6de51e31d32dee44694c597be9be4440fb55a02b0e1bb1ae92a184aed5a
Opcode Fuzzy Hash: 90fc5418b753b596c6081b8b941964c56b2451930c8e5bd452271841aabeeac4
Instruction Fuzzy Hash: 6A614672E00219ABDB10EFA4DD45BEEBBB5EF09715F504269FC05A7291EB319900CBA1

Uniqueness

Uniqueness Score: -1.00%

Function 00A8ADA0, Relevance: 14.1, APIs: 3, Strings: 5, Instructions: 110COMMON

Download Yara Rule

APIs

PathFileExistsW.SHLWAPI(-00000010), ref: 00A8ADEF

Strings

CMainControl::_LoadInstalledGameConfig, not found '%s', xrefs: 00A8ADFB
CMainControl::_LoadInstalledGameConfig, skin not found '%s', xrefs: 00A8AE7D
CMainControl::_LoadInstalledGameConfig, NetBridge not found '%s', xrefs: 00A8AE5A
\NetBridge.dll, xrefs: 00A8AE32
CMainControl::_LoadInstalledGameConfig, invalid config '%s', xrefs: 00A8AE21

Memory Dump Source

Source File: 00000001.00000002.422151708.0000000000A71000.00000020.00020000.sdmp, Offset: 00A70000, based on PE: true

Associated: 00000001.00000002.422117330.0000000000A70000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422651142.0000000000B5D000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422716671.0000000000B9A000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422731871.0000000000B9D000.00000008.00020000.sdmp Download File
Associated: 00000001.00000002.422740097.0000000000BA0000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422749600.0000000000BA4000.00000002.00020000.sdmp Download File

Similarity

API ID: ExistsFilePath
String ID: CMainControl::_LoadInstalledGameConfig, NetBridge not found '%s'$CMainControl::_LoadInstalledGameConfig, invalid config '%s'$CMainControl::_LoadInstalledGameConfig, not found '%s'$CMainControl::_LoadInstalledGameConfig, skin not found '%s'$\NetBridge.dll
API String ID: 1174141254-3133116890
Opcode ID: 5ba414c7224dede0d2a8fe1d0a95fc9448a0be07fa960d863da24c20835fb153
Instruction ID: 7467783e1e396b94060acc37a77d48a7384d2ad21b68b17acf1c97df28514e5d
Opcode Fuzzy Hash: 5ba414c7224dede0d2a8fe1d0a95fc9448a0be07fa960d863da24c20835fb153
Instruction Fuzzy Hash: FB3107B6900615ABDB01EBA8DD05B5BB7E8EF54720F148666F818D3291E7719E008B91

Uniqueness

Uniqueness Score: -1.00%

Function 00A8230F, Relevance: 14.1, APIs: 6, Strings: 2, Instructions: 102fileCOMMON

Download Yara Rule

APIs

SHCreateDirectoryExW.SHELL32 ref: 00A82312
PathFileExistsW.SHLWAPI(00000010,?,?,?), ref: 00A82340
DeleteFileW.KERNEL32(00000010), ref: 00A82359
CopyFileW.KERNEL32(?,00000010,00000000,?,?,?,?), ref: 00A82375
PathFileExistsW.SHLWAPI(00000010,?,?,?,?), ref: 00A8237C
GetLastError.KERNEL32 ref: 00A82397

Strings

_InstallFiles, copy exe '%s' -> '%s' failed, xrefs: 00A8238A
_InstallFiles, delete '%s', xrefs: 00A8234B

Memory Dump Source

Source File: 00000001.00000002.422151708.0000000000A71000.00000020.00020000.sdmp, Offset: 00A70000, based on PE: true

Associated: 00000001.00000002.422117330.0000000000A70000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422651142.0000000000B5D000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422716671.0000000000B9A000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422731871.0000000000B9D000.00000008.00020000.sdmp Download File
Associated: 00000001.00000002.422740097.0000000000BA0000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422749600.0000000000BA4000.00000002.00020000.sdmp Download File

Similarity

API ID: File$ExistsPath$CopyCreateDeleteDirectoryErrorLast
String ID: _InstallFiles, copy exe '%s' -> '%s' failed$_InstallFiles, delete '%s'
API String ID: 2238415590-2062991328
Opcode ID: 060230a4a3311dc5202eabe8ab4870c81cc09a2d66746c35717e02f9f7ac2032
Instruction ID: 435b805f5681e065bf9ad5c8e1dfb7cc0daae8e0864786ac8c6d6391067a03b9
Opcode Fuzzy Hash: 060230a4a3311dc5202eabe8ab4870c81cc09a2d66746c35717e02f9f7ac2032
Instruction Fuzzy Hash: D831C3719016059BE710EBA8CD4DB5DBBB4EF42321F148299E819DB2A2DB349904CBA1

Uniqueness

Uniqueness Score: -1.00%

Function 00B4CBF3, Relevance: 13.8, APIs: 9, Instructions: 272COMMON

Download Yara Rule

APIs

Part of subcall function 00B4C932: CreateFileW.KERNEL32(00000000,00000000,?,00B4CC9C,?,?,00000000,?,00B4CC9C,00000000,0000000C), ref: 00B4C94F

GetLastError.KERNEL32(?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?), ref: 00B4CD07
__dosmaperr.LIBCMT ref: 00B4CD0E
GetFileType.KERNEL32(00000000), ref: 00B4CD1A
GetLastError.KERNEL32(?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?), ref: 00B4CD24
__dosmaperr.LIBCMT ref: 00B4CD2D
CloseHandle.KERNEL32(00000000), ref: 00B4CD4D
CloseHandle.KERNEL32(F084A4B2), ref: 00B4CE97
GetLastError.KERNEL32 ref: 00B4CEC9
__dosmaperr.LIBCMT ref: 00B4CED0

Memory Dump Source

Source File: 00000001.00000002.422151708.0000000000A71000.00000020.00020000.sdmp, Offset: 00A70000, based on PE: true

Associated: 00000001.00000002.422117330.0000000000A70000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422651142.0000000000B5D000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422716671.0000000000B9A000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422731871.0000000000B9D000.00000008.00020000.sdmp Download File
Associated: 00000001.00000002.422740097.0000000000BA0000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422749600.0000000000BA4000.00000002.00020000.sdmp Download File

Similarity

API ID: ErrorLast__dosmaperr$CloseFileHandle$CreateType
String ID:
API String ID: 4237864984-0
Opcode ID: 742b71eefa690afa6c4eea2dbc249fd3daa136f56ac5ff9b77675e8bda5eee12
Instruction ID: a493aaae172edd03bfb6bf26496ec32c8ccca9922204a4a147593562bef5c1ca
Opcode Fuzzy Hash: 742b71eefa690afa6c4eea2dbc249fd3daa136f56ac5ff9b77675e8bda5eee12
Instruction Fuzzy Hash: 51A16832A141049FCF199F78D8827AD7FE1EB0A720F140199F815DB392DB348E16DB92

Uniqueness

Uniqueness Score: -1.00%

Function 6C2B1A80, Relevance: 13.7, APIs: 9, Instructions: 192fileCOMMON

Download Yara Rule

APIs

Part of subcall function 6C2B1720: __CxxThrowException@8.LIBVCRUNTIME ref: 6C2B1737

Part of subcall function 6C2B1430: GetProcessHeap.KERNEL32(?,6C2B1AE6,2079FCB2,?,?,?,00000000,6C2C2526,000000FF,?,6C2B1392,00000000), ref: 6C2B1459

Part of subcall function 6C2B1D80: GetTempPathW.KERNEL32(00000400,?,000000FF,?,6C2B1392,00000000), ref: 6C2B1DD8
Part of subcall function 6C2B1D80: CoCreateGuid.OLE32(?,?,?,?,?,?,6C2B1392,00000000), ref: 6C2B1E1C
Part of subcall function 6C2B1D80: PathCombineW.SHLWAPI(?,?,?), ref: 6C2B1EF0

DeleteFileW.KERNEL32(?), ref: 6C2B1B13
DeleteFileW.KERNEL32(?), ref: 6C2B1B1C
CreateFileW.KERNEL32(?,C0000000,00000001,00000000,00000001,00000080,00000000), ref: 6C2B1B31
WriteFile.KERNEL32(00000000,?,00001000,?,00000000), ref: 6C2B1BCB
WriteFile.KERNEL32(00000000,?,?,?,00000000), ref: 6C2B1C16
CloseHandle.KERNEL32(00000000), ref: 6C2B1C20
SHCreateDirectory.SHELL32(00000000,?), ref: 6C2B1C56
SetupIterateCabinetW.SETUPAPI(?,00000000,6C2B1740,?), ref: 6C2B1C79
DeleteFileW.KERNEL32(?,?), ref: 6C2B1C9B

Memory Dump Source

Source File: 00000001.00000002.425332215.000000006C2B1000.00000020.00020000.sdmp, Offset: 6C2B0000, based on PE: true

Associated: 00000001.00000002.425298119.000000006C2B0000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.425472962.000000006C2C3000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.425510904.000000006C2CA000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.425525863.000000006C2CC000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.428429287.000000006CCCC000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.430600185.000000006D6CC000.00000002.00020000.sdmp Download File

Similarity

API ID: File$CreateDelete$PathWrite$CabinetCloseCombineDirectoryException@8GuidHandleHeapIterateProcessSetupTempThrow
String ID:
API String ID: 1062425176-0
Opcode ID: ec8227a6c60ff4cb3735323d2b87f934dc3b3576974c4716d9487696ecd609ae
Instruction ID: 4707d83007712b8b56a0ce2fb0face3663faf03e9318eec38479e96235739d92
Opcode Fuzzy Hash: ec8227a6c60ff4cb3735323d2b87f934dc3b3576974c4716d9487696ecd609ae
Instruction Fuzzy Hash: 60619471A00259ABDB20CB24CC44BD9B7B8BB04398F1041A5F959F7690DBB4EAC49F61

Uniqueness

Uniqueness Score: -1.00%

Function 6C2B1A90, Relevance: 13.7, APIs: 9, Instructions: 181fileCOMMON

Download Yara Rule

APIs

Part of subcall function 6C2B1430: GetProcessHeap.KERNEL32(?,6C2B1AE6,2079FCB2,?,?,?,00000000,6C2C2526,000000FF,?,6C2B1392,00000000), ref: 6C2B1459

Part of subcall function 6C2B1D80: GetTempPathW.KERNEL32(00000400,?,000000FF,?,6C2B1392,00000000), ref: 6C2B1DD8
Part of subcall function 6C2B1D80: CoCreateGuid.OLE32(?,?,?,?,?,?,6C2B1392,00000000), ref: 6C2B1E1C
Part of subcall function 6C2B1D80: PathCombineW.SHLWAPI(?,?,?), ref: 6C2B1EF0

DeleteFileW.KERNEL32(?), ref: 6C2B1B13
DeleteFileW.KERNEL32(?), ref: 6C2B1B1C
CreateFileW.KERNEL32(?,C0000000,00000001,00000000,00000001,00000080,00000000), ref: 6C2B1B31
WriteFile.KERNEL32(00000000,?,00001000,?,00000000), ref: 6C2B1BCB
WriteFile.KERNEL32(00000000,?,?,?,00000000), ref: 6C2B1C16
CloseHandle.KERNEL32(00000000), ref: 6C2B1C20
SHCreateDirectory.SHELL32(00000000,?), ref: 6C2B1C56
SetupIterateCabinetW.SETUPAPI(?,00000000,6C2B1740,?), ref: 6C2B1C79
DeleteFileW.KERNEL32(?,?), ref: 6C2B1C9B

Memory Dump Source

Source File: 00000001.00000002.425332215.000000006C2B1000.00000020.00020000.sdmp, Offset: 6C2B0000, based on PE: true

Associated: 00000001.00000002.425298119.000000006C2B0000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.425472962.000000006C2C3000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.425510904.000000006C2CA000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.425525863.000000006C2CC000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.428429287.000000006CCCC000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.430600185.000000006D6CC000.00000002.00020000.sdmp Download File

Similarity

API ID: File$CreateDelete$PathWrite$CabinetCloseCombineDirectoryGuidHandleHeapIterateProcessSetupTemp
String ID:
API String ID: 2236526306-0
Opcode ID: c850cad3bae327be0c7b35137d709c9649ae3ccc3519bda75e0de27c90268489
Instruction ID: 0e56432a32cf8ca97b66b5fb14db1a8b0baa56fcd767eeae49536c05d76777a4
Opcode Fuzzy Hash: c850cad3bae327be0c7b35137d709c9649ae3ccc3519bda75e0de27c90268489
Instruction Fuzzy Hash: 3C61A671A00259ABDB20CB14CC44BD9B7B8BB04398F1441A5F959F7690DBB4EAC48F51

Uniqueness

Uniqueness Score: -1.00%

Function 00A80660, Relevance: 12.5, APIs: 1, Strings: 6, Instructions: 206COMMON

Download Yara Rule

APIs

Part of subcall function 00A745F0: GetProcessHeap.KERNEL32(00AA5638,F084A4B2), ref: 00A74601

Part of subcall function 00A74130: FindResourceExW.KERNEL32(00000000,00000006,?,00000000,00000000,00B5DAF8,?,?,?,?,00A736E1,00B5DAF8,?,?,?,00B5DAF8), ref: 00A74186
Part of subcall function 00A74130: FindResourceW.KERNEL32(00000000,00B5DAF8,00000006,?,00B5DAF8), ref: 00A741C4

_wcsstr.LIBVCRUNTIME ref: 00A807AC

Part of subcall function 00AA2F00: SHSetValueW.SHLWAPI(00000000,00000000,00000000,00000001,00B5DAF8,00B5DAFA,?,00AAE622,80000002,Software\LDSGameCenterExtra,LastRunVer), ref: 00AA2F50

Strings

%s;, xrefs: 00A807CE
_AddToInstallList, xrefs: 00A80688
Setup Path, xrefs: 00A80813
;%s;, xrefs: 00A80768
_AddToInstallList regPath: %s, xrefs: 00A80739
InstalledGameIds, xrefs: 00A80778, 00A807ED

Memory Dump Source

Source File: 00000001.00000002.422151708.0000000000A71000.00000020.00020000.sdmp, Offset: 00A70000, based on PE: true

Associated: 00000001.00000002.422117330.0000000000A70000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422651142.0000000000B5D000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422716671.0000000000B9A000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422731871.0000000000B9D000.00000008.00020000.sdmp Download File
Associated: 00000001.00000002.422740097.0000000000BA0000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422749600.0000000000BA4000.00000002.00020000.sdmp Download File

Similarity

API ID: FindResource$HeapProcessValue_wcsstr
String ID: %s;$;%s;$InstalledGameIds$Setup Path$_AddToInstallList$_AddToInstallList regPath: %s
API String ID: 216879359-3670494149
Opcode ID: 5e99c46cddb73e816ab3af24cc1c88990c41bb6867362d16da55fe09f8709baf
Instruction ID: e3847643d1026fababbcd5d66b195314a8259d7e0e22fc0107291e93b70eff75
Opcode Fuzzy Hash: 5e99c46cddb73e816ab3af24cc1c88990c41bb6867362d16da55fe09f8709baf
Instruction Fuzzy Hash: 3571E171A00606EFDB00EBA8CD45FAEBBF4EF05315F14859CE815A7292DB74A904CBA1

Uniqueness

Uniqueness Score: -1.00%

Function 00AA2650, Relevance: 12.4, APIs: 4, Strings: 3, Instructions: 177COMMON

Download Yara Rule

APIs

Part of subcall function 00AA1270: RegQueryValueExW.KERNEL32(00000000,svcVersion,00000000,?,?,?,80000002,SOFTWARE\Microsoft\Internet Explorer,00020019,F084A4B2), ref: 00AA1330
Part of subcall function 00AA1270: RegQueryValueExW.ADVAPI32(00000000,Version,00000000,?,?,00000200), ref: 00AA13A2
Part of subcall function 00AA1270: RegCloseKey.KERNEL32(00000000), ref: 00AA13D3

_wcsstr.LIBVCRUNTIME ref: 00AA269D
_wcsstr.LIBVCRUNTIME ref: 00AA2735
_wcsstr.LIBVCRUNTIME ref: 00AA2773

Part of subcall function 00A745F0: GetProcessHeap.KERNEL32(00AA5638,F084A4B2), ref: 00A74601

Part of subcall function 00A74130: FindResourceExW.KERNEL32(00000000,00000006,?,00000000,00000000,00B5DAF8,?,?,?,?,00A736E1,00B5DAF8,?,?,?,00B5DAF8), ref: 00A74186
Part of subcall function 00A74130: FindResourceW.KERNEL32(00000000,00B5DAF8,00000006,?,00B5DAF8), ref: 00A741C4

_wcsstr.LIBVCRUNTIME ref: 00AA27AE

Strings

FEATURE_BROWSER_EMULATION, xrefs: 00AA26CE, 00AA26E5, 00AA274C, 00AA278A, 00AA27C1, 00AA27D4
10., xrefs: 00AA272F
11., xrefs: 00AA2697

Memory Dump Source

Source File: 00000001.00000002.422151708.0000000000A71000.00000020.00020000.sdmp, Offset: 00A70000, based on PE: true

Associated: 00000001.00000002.422117330.0000000000A70000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422651142.0000000000B5D000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422716671.0000000000B9A000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422731871.0000000000B9D000.00000008.00020000.sdmp Download File
Associated: 00000001.00000002.422740097.0000000000BA0000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422749600.0000000000BA4000.00000002.00020000.sdmp Download File

Similarity

API ID: _wcsstr$FindQueryResourceValue$CloseHeapProcess
String ID: 10.$11.$FEATURE_BROWSER_EMULATION
API String ID: 2497407237-2666944024
Opcode ID: ba1f454f38928aef15bee9047b3ad94cf7d3cf2048ff0a7abe5071094b2ea1db
Instruction ID: 58e15b874409aa3d86da3d7b5360e44d55f7fafc2674abde78a14226e78c6141
Opcode Fuzzy Hash: ba1f454f38928aef15bee9047b3ad94cf7d3cf2048ff0a7abe5071094b2ea1db
Instruction Fuzzy Hash: E3513830A00605DBDF14DBBCCE19BAEB7F4AF02325F148269E815A76D1DB789F148B91

Uniqueness

Uniqueness Score: -1.00%

Function 00B42B29, Relevance: 12.4, APIs: 5, Strings: 2, Instructions: 171timeCOMMON

Download Yara Rule

APIs

GetTimeZoneInformation.KERNEL32(?,00000000,00000000,00000000,?,00B7D518), ref: 00B42B93
WideCharToMultiByte.KERNEL32(00000000,00000000,Pacific Standard Time,000000FF,00000000,0000003F,00000000,?,?), ref: 00B42C0B
WideCharToMultiByte.KERNEL32(00000000,00000000,Pacific Daylight Time,000000FF,?,0000003F,00000000,?), ref: 00B42C38
_free.LIBCMT ref: 00B42B81

Part of subcall function 00B40176: RtlFreeHeap.NTDLL(00000000,00000000,?,00B4A4E9,?,00000000,?,00000000,?,00B4A78D,?,00000007,?,?,00B4AAEC,?), ref: 00B4018C
Part of subcall function 00B40176: GetLastError.KERNEL32(?,?,00B4A4E9,?,00000000,?,00000000,?,00B4A78D,?,00000007,?,?,00B4AAEC,?,?), ref: 00B4019E

_free.LIBCMT ref: 00B42D4D

Strings

Pacific Daylight Time, xrefs: 00B42C31
Pacific Standard Time, xrefs: 00B42C04

Memory Dump Source

Source File: 00000001.00000002.422151708.0000000000A71000.00000020.00020000.sdmp, Offset: 00A70000, based on PE: true

Associated: 00000001.00000002.422117330.0000000000A70000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422651142.0000000000B5D000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422716671.0000000000B9A000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422731871.0000000000B9D000.00000008.00020000.sdmp Download File
Associated: 00000001.00000002.422740097.0000000000BA0000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422749600.0000000000BA4000.00000002.00020000.sdmp Download File

Similarity

API ID: ByteCharMultiWide_free$ErrorFreeHeapInformationLastTimeZone
String ID: Pacific Daylight Time$Pacific Standard Time
API String ID: 1286116820-1154798116
Opcode ID: 8dfb3e932eac2d1c01c88e15d5fe2b69f3521eb7e8211b5934d78b353f623f18
Instruction ID: 2ed23d0e830085d98aa34ca8da3a283b41ea30075498d582f81ecfb20b195c59
Opcode Fuzzy Hash: 8dfb3e932eac2d1c01c88e15d5fe2b69f3521eb7e8211b5934d78b353f623f18
Instruction Fuzzy Hash: 0A51D371D04219ABCB10EF689C829AEB7FCEF45750B9042EAF454972A1EF709F41BB50

Uniqueness

Uniqueness Score: -1.00%

Function 00AB8E20, Relevance: 12.4, APIs: 6, Strings: 1, Instructions: 164encryptionCOMMON

Download Yara Rule

APIs

PathFileExistsW.SHLWAPI(-00000080,F084A4B2,000000FF,00000001,00000000), ref: 00AB8E65
GetVersionExW.KERNEL32(0000011C), ref: 00AB8E9A
WinVerifyTrust.WINTRUST(00000000,00AAC56B,00000030), ref: 00AB8F7C
WTHelperProvDataFromStateData.WINTRUST(?,00000000,00AAC56B,00000030), ref: 00AB8FB7
CertGetNameStringW.CRYPT32(00000001,00000004,00000000,00000000,?,00000200), ref: 00AB903A
WinVerifyTrust.WINTRUST(00000000,00AAC56B,00000030,00000000,00AAC56B,00000030), ref: 00AB90AA

Strings

0, xrefs: 00AB9080

Memory Dump Source

Source File: 00000001.00000002.422151708.0000000000A71000.00000020.00020000.sdmp, Offset: 00A70000, based on PE: true

Associated: 00000001.00000002.422117330.0000000000A70000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422651142.0000000000B5D000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422716671.0000000000B9A000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422731871.0000000000B9D000.00000008.00020000.sdmp Download File
Associated: 00000001.00000002.422740097.0000000000BA0000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422749600.0000000000BA4000.00000002.00020000.sdmp Download File

Similarity

API ID: DataTrustVerify$CertExistsFileFromHelperNamePathProvStateStringVersion
String ID: 0
API String ID: 131157933-4108050209
Opcode ID: 7b639ba17330d229d33817d57f5d61b370f90858dd45fc0ecf21d5a5db146816
Instruction ID: 5780cca572713973380c2a0006591e37b58a3a98d0ba7c6aa1e00ae743a51e67
Opcode Fuzzy Hash: 7b639ba17330d229d33817d57f5d61b370f90858dd45fc0ecf21d5a5db146816
Instruction Fuzzy Hash: 3E611BB1E007289EDB60DF68DC45BEAB7FCAB04715F0040E9A609EB291DB759A84CF50

Uniqueness

Uniqueness Score: -1.00%

Function 00AA1270, Relevance: 12.4, APIs: 4, Strings: 3, Instructions: 159registryCOMMON

Download Yara Rule

APIs

Part of subcall function 00A875B0: GetModuleHandleW.KERNEL32(Advapi32.dll,00B53238,LDSGameCenter,00000000,00B53238,?,00AABBD4,80000001,Software\Microsoft\Windows\CurrentVersion\Run,0002001F,00B53238), ref: 00A875D4
Part of subcall function 00A875B0: RegCloseKey.ADVAPI32(00000000,?,00AABBD4,80000001,Software\Microsoft\Windows\CurrentVersion\Run,0002001F,00B53238), ref: 00A87637

RegQueryValueExW.KERNEL32(00000000,svcVersion,00000000,?,?,?,80000002,SOFTWARE\Microsoft\Internet Explorer,00020019,F084A4B2), ref: 00AA1330
RegQueryValueExW.ADVAPI32(00000000,Version,00000000,?,?,00000200), ref: 00AA13A2
RegCloseKey.KERNEL32(00000000), ref: 00AA13D3
RegCloseKey.ADVAPI32(00000000,?), ref: 00AA1443

Strings

svcVersion, xrefs: 00AA132A
SOFTWARE\Microsoft\Internet Explorer, xrefs: 00AA12EC
Version, xrefs: 00AA139C

Memory Dump Source

Source File: 00000001.00000002.422151708.0000000000A71000.00000020.00020000.sdmp, Offset: 00A70000, based on PE: true

Associated: 00000001.00000002.422117330.0000000000A70000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422651142.0000000000B5D000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422716671.0000000000B9A000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422731871.0000000000B9D000.00000008.00020000.sdmp Download File
Associated: 00000001.00000002.422740097.0000000000BA0000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422749600.0000000000BA4000.00000002.00020000.sdmp Download File

Similarity

API ID: Close$QueryValue$HandleModule
String ID: SOFTWARE\Microsoft\Internet Explorer$Version$svcVersion
API String ID: 374096546-99099367
Opcode ID: 2e5684fc46a80a0817bcd1f253ba6f0af29f58ecb26982a447189883f66c8029
Instruction ID: d08cd1314ad68e78c256bfe6fe96aa241b31792aafc7189cd780349e84727198
Opcode Fuzzy Hash: 2e5684fc46a80a0817bcd1f253ba6f0af29f58ecb26982a447189883f66c8029
Instruction Fuzzy Hash: D3519071A4022CABDF30DF54DD89BEEB7F8AF15700F0401D9E819E7680DB749A858BA1

Uniqueness

Uniqueness Score: -1.00%

Function 00A8B040, Relevance: 12.4, APIs: 1, Strings: 6, Instructions: 133COMMON

Download Yara Rule

APIs

ShellExecuteW.SHELL32(00000000,open,00000010,?,00000000,00000005), ref: 00A8B1B8

Strings

open, xrefs: 00A8B1B1
inst_open, xrefs: 00A8B134
run_at_succ, xrefs: 00A8B089
d, xrefs: 00A8B06D
CMainControl::_NotifyProgress, '%s' not valid, xrefs: 00A8B19A
yes, xrefs: 00A8B0CA

Memory Dump Source

Source File: 00000001.00000002.422151708.0000000000A71000.00000020.00020000.sdmp, Offset: 00A70000, based on PE: true

Associated: 00000001.00000002.422117330.0000000000A70000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422651142.0000000000B5D000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422716671.0000000000B9A000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422731871.0000000000B9D000.00000008.00020000.sdmp Download File
Associated: 00000001.00000002.422740097.0000000000BA0000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422749600.0000000000BA4000.00000002.00020000.sdmp Download File

Similarity

API ID: ExecuteShell
String ID: CMainControl::_NotifyProgress, '%s' not valid$d$inst_open$open$run_at_succ$yes
API String ID: 587946157-3061618252
Opcode ID: ccfaddfa4d0863fa38f82b7d1f48bb3b8d77ae0132cebb8ca8ec7ec36542f979
Instruction ID: eb116b8430ed31a54b49394d7ea1faf3e0e82262d1303fa426dabddd5c204fce
Opcode Fuzzy Hash: ccfaddfa4d0863fa38f82b7d1f48bb3b8d77ae0132cebb8ca8ec7ec36542f979
Instruction Fuzzy Hash: DF41F571A10204EBE710EF64CD1ABEA77F4FF18724F148269E815A72D1EB75A904CBA0

Uniqueness

Uniqueness Score: -1.00%

Function 6C2B1240, Relevance: 12.4, APIs: 6, Strings: 1, Instructions: 125fileCOMMON

Download Yara Rule

APIs

DeleteFileW.KERNEL32(?), ref: 6C2B1270

Strings

CAB, xrefs: 6C2B128C

Memory Dump Source

Source File: 00000001.00000002.425332215.000000006C2B1000.00000020.00020000.sdmp, Offset: 6C2B0000, based on PE: true

Associated: 00000001.00000002.425298119.000000006C2B0000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.425472962.000000006C2C3000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.425510904.000000006C2CA000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.425525863.000000006C2CC000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.428429287.000000006CCCC000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.430600185.000000006D6CC000.00000002.00020000.sdmp Download File

Similarity

API ID: DeleteFile
String ID: CAB
API String ID: 4033686569-4230853747
Opcode ID: 5018df5893cfb985a1f8c68acad305433928e9300f7bcf19681683c5532d4e41
Instruction ID: fe7c48b27822b7bd0cabec732836ec072792850b246b2946f34284b55ff063fc
Opcode Fuzzy Hash: 5018df5893cfb985a1f8c68acad305433928e9300f7bcf19681683c5532d4e41
Instruction Fuzzy Hash: 2B4180B2A4020CCBDB90DF65C88D79AB7B4BB16358F144755EC15E76C0EB70DA86CB90

Uniqueness

Uniqueness Score: -1.00%

Function 6C2B1720, Relevance: 12.4, APIs: 6, Strings: 1, Instructions: 103fileCOMMON

Download Yara Rule

APIs

__CxxThrowException@8.LIBVCRUNTIME ref: 6C2B1737

Part of subcall function 6C2B2E2D: RaiseException.KERNEL32(6C2B20A3,80070057,?,?,?,00000000,750D4830,6C2B20A3,80070057,750D8B40,00000000,?,?,6C2B1F47,?), ref: 6C2B2E8D

_wcsstr.LIBVCRUNTIME ref: 6C2B17A9
PathCombineW.SHLWAPI(?,?,2079FCB2,?,00000000), ref: 6C2B17C0
PathIsPrefixW.SHLWAPI(?,?), ref: 6C2B17D2
PathRemoveFileSpecW.SHLWAPI(?), ref: 6C2B17FB
SHCreateDirectory.SHELL32(00000000,?), ref: 6C2B180A

Strings

@Cu, xrefs: 6C2B17D2

Memory Dump Source

Source File: 00000001.00000002.425332215.000000006C2B1000.00000020.00020000.sdmp, Offset: 6C2B0000, based on PE: true

Associated: 00000001.00000002.425298119.000000006C2B0000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.425472962.000000006C2C3000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.425510904.000000006C2CA000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.425525863.000000006C2CC000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.428429287.000000006CCCC000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.430600185.000000006D6CC000.00000002.00020000.sdmp Download File

Similarity

API ID: Path$CombineCreateDirectoryExceptionException@8FilePrefixRaiseRemoveSpecThrow_wcsstr
String ID: @Cu
API String ID: 1553367680-1565347654
Opcode ID: cb2cf66d729b9affab4336f0ec1365048cb204a46af83b85de53d48e887cf4ed
Instruction ID: c01b37c060a9f3be558f9862c90cb5052ed7720d838ca19aa9747fb0c2aeb57e
Opcode Fuzzy Hash: cb2cf66d729b9affab4336f0ec1365048cb204a46af83b85de53d48e887cf4ed
Instruction Fuzzy Hash: B231DCB260010C9BDB14DF69D848EEE73BCEF55259F00055AFD46D7940DB70EA44DB90

Uniqueness

Uniqueness Score: -1.00%

Function 00A875B0, Relevance: 12.3, APIs: 4, Strings: 3, Instructions: 66registrylibraryloaderCOMMON

Download Yara Rule

APIs

GetModuleHandleW.KERNEL32(Advapi32.dll,00B53238,LDSGameCenter,00000000,00B53238,?,00AABBD4,80000001,Software\Microsoft\Windows\CurrentVersion\Run,0002001F,00B53238), ref: 00A875D4
GetProcAddress.KERNEL32(00000000,RegOpenKeyTransactedW), ref: 00A875EB
RegOpenKeyExW.KERNEL32(00B53238,0002001F,00000000,?,00000000,00B53238,LDSGameCenter,00000000,00B53238,?,00AABBD4,80000001,Software\Microsoft\Windows\CurrentVersion\Run,0002001F,00B53238), ref: 00A87624
RegCloseKey.ADVAPI32(00000000,?,00AABBD4,80000001,Software\Microsoft\Windows\CurrentVersion\Run,0002001F,00B53238), ref: 00A87637

Strings

Advapi32.dll, xrefs: 00A875CF
LDSGameCenter, xrefs: 00A875BE
RegOpenKeyTransactedW, xrefs: 00A875E5

Memory Dump Source

Source File: 00000001.00000002.422151708.0000000000A71000.00000020.00020000.sdmp, Offset: 00A70000, based on PE: true

Associated: 00000001.00000002.422117330.0000000000A70000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422651142.0000000000B5D000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422716671.0000000000B9A000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422731871.0000000000B9D000.00000008.00020000.sdmp Download File
Associated: 00000001.00000002.422740097.0000000000BA0000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422749600.0000000000BA4000.00000002.00020000.sdmp Download File

Similarity

API ID: AddressCloseHandleModuleOpenProc
String ID: Advapi32.dll$LDSGameCenter$RegOpenKeyTransactedW
API String ID: 823179699-3740611333
Opcode ID: 0972685a6e6771c5d1ce0134b285231a666f55b28e578311be7b11deb775d9e3
Instruction ID: 086f91282f12aaee0d7435beb0e60af8f15a4661ddfe1e8e1ce9993ff6d101bb
Opcode Fuzzy Hash: 0972685a6e6771c5d1ce0134b285231a666f55b28e578311be7b11deb775d9e3
Instruction Fuzzy Hash: EE118E31608605FBDB209F99CC44FAABBA8EF04711F284065B905D71A0F7B1DD50EB65

Uniqueness

Uniqueness Score: -1.00%

Function 00A896A8, Relevance: 10.8, APIs: 2, Strings: 4, Instructions: 258COMMON

Download Yara Rule

APIs

__CxxThrowException@8.LIBVCRUNTIME ref: 00A896BC

Part of subcall function 00B23827: RaiseException.KERNEL32(?,?,00AB60BB,?,00B9A044,?,00000007,?,?,?,?,00AB60BB,?,00B93034,?), ref: 00B23887

Part of subcall function 00A745F0: GetProcessHeap.KERNEL32(00AA5638,F084A4B2), ref: 00A74601

InitializeCriticalSection.KERNEL32(?), ref: 00A897A8

Part of subcall function 00AA20B0: SHGetValueW.SHLWAPI(?,F084A4B2,?,00000001,?,?), ref: 00AA213F

Strings

LastRunTime, xrefs: 00A8989A
http://wan.ludashi.com/web/wpay?game={game_id}&server={server_id}, xrefs: 00A898F5
http://wan.ludashi.com/site/{game_id}, xrefs: 00A89907
http://wan.ludashi.com/(?:(?:web/game)|yeyou)/(.*?)\?.*?s=(\d+).*, xrefs: 00A89919

Memory Dump Source

Source File: 00000001.00000002.422151708.0000000000A71000.00000020.00020000.sdmp, Offset: 00A70000, based on PE: true

Associated: 00000001.00000002.422117330.0000000000A70000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422651142.0000000000B5D000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422716671.0000000000B9A000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422731871.0000000000B9D000.00000008.00020000.sdmp Download File
Associated: 00000001.00000002.422740097.0000000000BA0000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422749600.0000000000BA4000.00000002.00020000.sdmp Download File

Similarity

API ID: CriticalExceptionException@8HeapInitializeProcessRaiseSectionThrowValue
String ID: LastRunTime$http://wan.ludashi.com/(?:(?:web/game)|yeyou)/(.*?)\?.*?s=(\d+).*$http://wan.ludashi.com/site/{game_id}$http://wan.ludashi.com/web/wpay?game={game_id}&server={server_id}
API String ID: 1114886752-223377683
Opcode ID: 75129a4f27fc6d376be60f244cf5d66677c72fb5899922a67a582fc15d5d82f1
Instruction ID: 0a1b0c452eebf7f378fee5865086d3b41a857eda14d85ced65bbe6129b53920b
Opcode Fuzzy Hash: 75129a4f27fc6d376be60f244cf5d66677c72fb5899922a67a582fc15d5d82f1
Instruction Fuzzy Hash: A191D431601642DFE710EB78CD19BAEB7E4EF05314F08C5ADE45E9B692DB309904CB52

Uniqueness

Uniqueness Score: -1.00%

Function 00A84700, Relevance: 10.7, APIs: 3, Strings: 3, Instructions: 193COMMON

Download Yara Rule

APIs

GetModuleHandleW.KERNEL32(00000000,00000083,FILERES,00000000,F084A4B2,?,?), ref: 00A84754

Part of subcall function 00AA2180: FindResourceW.KERNEL32(?,00000000,00A84760,?,00A7D581,?,?,00A84760,00000000,?,?), ref: 00AA2192
Part of subcall function 00AA2180: SizeofResource.KERNEL32(?,00000000,?,00A7D581,?,?,00A84760,00000000,?,?), ref: 00AA21A0
Part of subcall function 00AA2180: LoadResource.KERNEL32(?,00000000,?,00A7D581,?,?,00A84760,00000000,?,?), ref: 00AA21AE
Part of subcall function 00AA2180: LockResource.KERNEL32(00000000,?,00A7D581,?,?,00A84760,00000000,?,?), ref: 00AA21B9

Strings

fancygame.ocx, xrefs: 00A84930
\Fancy3D, xrefs: 00A848A1
FILERES, xrefs: 00A8474A

Memory Dump Source

Source File: 00000001.00000002.422151708.0000000000A71000.00000020.00020000.sdmp, Offset: 00A70000, based on PE: true

Associated: 00000001.00000002.422117330.0000000000A70000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422651142.0000000000B5D000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422716671.0000000000B9A000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422731871.0000000000B9D000.00000008.00020000.sdmp Download File
Associated: 00000001.00000002.422740097.0000000000BA0000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422749600.0000000000BA4000.00000002.00020000.sdmp Download File

Similarity

API ID: Resource$FindHandleLoadLockModuleSizeof
String ID: FILERES$\Fancy3D$fancygame.ocx
API String ID: 1601749889-1898237636
Opcode ID: 909b4bd1e9acf20d30792948498ae8d4985c67317be5bb82cc491d1c93f1bc82
Instruction ID: c1f9fbe935b94c7924219f35b6138d7fbf39a9bb0bb4f6ff638428d3f366e23c
Opcode Fuzzy Hash: 909b4bd1e9acf20d30792948498ae8d4985c67317be5bb82cc491d1c93f1bc82
Instruction Fuzzy Hash: DA510771D00249EBDB10EFA4CD46BEEBBB8EF08314F148169F915A72D1EB749A04CB61

Uniqueness

Uniqueness Score: -1.00%

Function 00AB56E0, Relevance: 10.7, APIs: 4, Strings: 2, Instructions: 151synchronizationCOMMON

Download Yara Rule

APIs

CreateEventW.KERNEL32(00000000,00000001,00000000,00000000), ref: 00AB5758
GetModuleHandleW.KERNEL32(00000000,00000000), ref: 00AB579B
WaitForMultipleObjects.KERNEL32(00000002,?,00000000,?,?,?,?,?,00AB5852,00000014), ref: 00AB582C

Part of subcall function 00A745F0: GetProcessHeap.KERNEL32(00AA5638,F084A4B2), ref: 00A74601

WaitForSingleObject.KERNEL32(?,?), ref: 00AB5835

Strings

ungzip, xrefs: 00AB57E7
gzip, xrefs: 00AB57D8

Memory Dump Source

Source File: 00000001.00000002.422151708.0000000000A71000.00000020.00020000.sdmp, Offset: 00A70000, based on PE: true

Associated: 00000001.00000002.422117330.0000000000A70000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422651142.0000000000B5D000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422716671.0000000000B9A000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422731871.0000000000B9D000.00000008.00020000.sdmp Download File
Associated: 00000001.00000002.422740097.0000000000BA0000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422749600.0000000000BA4000.00000002.00020000.sdmp Download File

Similarity

API ID: Wait$CreateEventHandleHeapModuleMultipleObjectObjectsProcessSingle
String ID: gzip$ungzip
API String ID: 2218221642-4062267990
Opcode ID: bcc1dd7e597782d8a1d102359aca41e1b602fbfab099588a1e508a49d1f3fafe
Instruction ID: 19a81e68c0a7a0e6abba8bb3080a4a279004a41823bf7b376a9d20a3b77e7413
Opcode Fuzzy Hash: bcc1dd7e597782d8a1d102359aca41e1b602fbfab099588a1e508a49d1f3fafe
Instruction Fuzzy Hash: D7518D71A00B06DFDB10DFA5C944BAABBB8FF08710F104569E916AB6A1DB75EC00CBD0

Uniqueness

Uniqueness Score: -1.00%

Function 6C2B1D80, Relevance: 10.6, APIs: 4, Strings: 2, Instructions: 136COMMON

Download Yara Rule

APIs

GetTempPathW.KERNEL32(00000400,?,000000FF,?,6C2B1392,00000000), ref: 6C2B1DD8
CoCreateGuid.OLE32(?,?,?,?,?,?,6C2B1392,00000000), ref: 6C2B1E1C
PathCombineW.SHLWAPI(?,?,?), ref: 6C2B1EF0
PathFileExistsW.SHLWAPI(?), ref: 6C2B1F12

Strings

.tmp, xrefs: 6C2B1EF2
{%08X-%04X-%04x-%02X%02X-%02X%02X%02X%02X%02X%02X}, xrefs: 6C2B1E91

Memory Dump Source

Source File: 00000001.00000002.425332215.000000006C2B1000.00000020.00020000.sdmp, Offset: 6C2B0000, based on PE: true

Associated: 00000001.00000002.425298119.000000006C2B0000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.425472962.000000006C2C3000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.425510904.000000006C2CA000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.425525863.000000006C2CC000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.428429287.000000006CCCC000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.430600185.000000006D6CC000.00000002.00020000.sdmp Download File

Similarity

API ID: Path$CombineCreateExistsFileGuidTemp
String ID: .tmp${%08X-%04X-%04x-%02X%02X-%02X%02X%02X%02X%02X%02X}
API String ID: 647278745-763569422
Opcode ID: 2b089f1df0da5da43ca0d6db8c2825a62d5adaf75d74fbd7dfeaa9051624d895
Instruction ID: 71591a6fcc7cd6d824555b9c059cb9ab6e35f40947d5e1151454d2df241bc0de
Opcode Fuzzy Hash: 2b089f1df0da5da43ca0d6db8c2825a62d5adaf75d74fbd7dfeaa9051624d895
Instruction Fuzzy Hash: 0C4166B690025C6ACB21CBA4CC55FDAB7FCAB0D305F0004D5FA48E7581D774AB848F60

Uniqueness

Uniqueness Score: -1.00%

Function 00AB55C0, Relevance: 9.0, APIs: 3, Strings: 2, Instructions: 280COMMON

Download Yara Rule

APIs

CreateEventW.KERNEL32(00000000,00000001,00000000,00000000), ref: 00AB5758
GetModuleHandleW.KERNEL32(00000000,00000000), ref: 00AB579B

Strings

ungzip, xrefs: 00AB57E7
gzip, xrefs: 00AB57D8

Memory Dump Source

Source File: 00000001.00000002.422151708.0000000000A71000.00000020.00020000.sdmp, Offset: 00A70000, based on PE: true

Associated: 00000001.00000002.422117330.0000000000A70000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422651142.0000000000B5D000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422716671.0000000000B9A000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422731871.0000000000B9D000.00000008.00020000.sdmp Download File
Associated: 00000001.00000002.422740097.0000000000BA0000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422749600.0000000000BA4000.00000002.00020000.sdmp Download File

Similarity

API ID: CreateEventHandleModule
String ID: gzip$ungzip
API String ID: 381569912-4062267990
Opcode ID: cfe1e5cdaa21bca6c400f4ca85d5d7e2c32c2ab3f3f714562d86c4de594b3d0e
Instruction ID: 714ae39c386446e5f849b5d54c98e6a66dabf3cd6336eb4df1ff1f303f396d2f
Opcode Fuzzy Hash: cfe1e5cdaa21bca6c400f4ca85d5d7e2c32c2ab3f3f714562d86c4de594b3d0e
Instruction Fuzzy Hash: 6E919E71A00A06DFDB10DFA8D998BAAF7B8FF08710F148559E5159B292DB74EC40CB91

Uniqueness

Uniqueness Score: -1.00%

Function 00AB0BC0, Relevance: 9.0, APIs: 1, Strings: 4, Instructions: 206COMMON

Download Yara Rule

APIs

Part of subcall function 00AB09C0: SHGetValueW.SHLWAPI(80000002,Software\LDSGameCenter,Setup Path,00000001,?,?), ref: 00AB0A4D

PathFileExistsW.SHLWAPI( r,00000000), ref: 00AB0D36

Part of subcall function 00A745F0: GetProcessHeap.KERNEL32(00AA5638,F084A4B2), ref: 00A74601

Part of subcall function 00A74130: FindResourceExW.KERNEL32(00000000,00000006,?,00000000,00000000,00B5DAF8,?,?,?,?,00A736E1,00B5DAF8,?,?,?,00B5DAF8), ref: 00A74186
Part of subcall function 00A74130: FindResourceW.KERNEL32(00000000,00B5DAF8,00000006,?,00B5DAF8), ref: 00A741C4

Strings

ludashi, xrefs: 00AB0F99
r, xrefs: 00AB0D08, 00AB0D32, 00AB0CE4, 00AB0D35, 00AB0D43, 00AB0D71, 00AB0DA4
\LDSGameCenter.exe, xrefs: 00AB0CCB
\pgstation.exe, xrefs: 00AB0CEF

Memory Dump Source

Source File: 00000001.00000002.422151708.0000000000A71000.00000020.00020000.sdmp, Offset: 00A70000, based on PE: true

Associated: 00000001.00000002.422117330.0000000000A70000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422651142.0000000000B5D000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422716671.0000000000B9A000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422731871.0000000000B9D000.00000008.00020000.sdmp Download File
Associated: 00000001.00000002.422740097.0000000000BA0000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422749600.0000000000BA4000.00000002.00020000.sdmp Download File

Similarity

API ID: FindResource$ExistsFileHeapPathProcessValue
String ID: r$\LDSGameCenter.exe$\pgstation.exe$ludashi
API String ID: 3695862699-1449066893
Opcode ID: 4c37f7d0c7ab8a8ccd039563fb37205f2df106bbe2a2417f59b6a99ceac6fa8d
Instruction ID: a260921db640f0a0d55bddae81b1bd623096fd8e9b26ec96e2cb2f1cb0f3a4c5
Opcode Fuzzy Hash: 4c37f7d0c7ab8a8ccd039563fb37205f2df106bbe2a2417f59b6a99ceac6fa8d
Instruction Fuzzy Hash: AF61F671A00645DBDB00DBA8CD49B9FBBF8EF05324F1482A9E815D7293DB75AE04CB91

Uniqueness

Uniqueness Score: -1.00%

Function 00AA104D, Relevance: 8.9, APIs: 3, Strings: 2, Instructions: 169COMMON

Download Yara Rule

APIs

Part of subcall function 00A745F0: GetProcessHeap.KERNEL32(00AA5638,F084A4B2), ref: 00A74601

GetFileVersionInfoSizeW.VERSION(?,?,F084A4B2,?,?), ref: 00AA1138
GetFileVersionInfoW.VERSION(?,00000000,00000000,?,?,?,F084A4B2,?,?), ref: 00AA115B
VerQueryValueW.VERSION(?,00B5FD18,?,?,?,00000000,00000000,?,?,?,F084A4B2,?,?), ref: 00AA1182

Part of subcall function 00A74130: FindResourceExW.KERNEL32(00000000,00000006,?,00000000,00000000,00B5DAF8,?,?,?,?,00A736E1,00B5DAF8,?,?,?,00B5DAF8), ref: 00A74186
Part of subcall function 00A74130: FindResourceW.KERNEL32(00000000,00B5DAF8,00000006,?,00B5DAF8), ref: 00A741C4

Strings

%d.%d.%d.%d, xrefs: 00AA11EA
QPj, xrefs: 00AA1156

Memory Dump Source

Source File: 00000001.00000002.422151708.0000000000A71000.00000020.00020000.sdmp, Offset: 00A70000, based on PE: true

Associated: 00000001.00000002.422117330.0000000000A70000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422651142.0000000000B5D000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422716671.0000000000B9A000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422731871.0000000000B9D000.00000008.00020000.sdmp Download File
Associated: 00000001.00000002.422740097.0000000000BA0000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422749600.0000000000BA4000.00000002.00020000.sdmp Download File

Similarity

API ID: FileFindInfoResourceVersion$HeapProcessQuerySizeValue
String ID: %d.%d.%d.%d$QPj
API String ID: 1124126271-3960961324
Opcode ID: ae9ff85ab6058cfa2b16f8d01457e45cf8e2db8d02481c97cf93916cb37197b7
Instruction ID: 6c504a74308570fd20abd1ca581c5606c6746276db501ff36be5980a4f40f939
Opcode Fuzzy Hash: ae9ff85ab6058cfa2b16f8d01457e45cf8e2db8d02481c97cf93916cb37197b7
Instruction Fuzzy Hash: DE518E71A00219ABDB24DF58DD45BFAB3F8EF45700F4441AAE909D7282DB30EE44CBA1

Uniqueness

Uniqueness Score: -1.00%

Function 00B18ED0, Relevance: 8.9, APIs: 4, Strings: 1, Instructions: 148fileCOMMON

Download Yara Rule

APIs

PathFileExistsW.SHLWAPI(00A846B7,80004005,00000000), ref: 00B18F35
SHCreateDirectory.SHELL32(00000000,00A846B7), ref: 00B18F41
PathCombineW.SHLWAPI(?,?,-00000004,?,?,00A846B7), ref: 00B18FBF
SHCreateDirectory.SHELL32(00000000,?,?,?,00A846B7), ref: 00B19029

Part of subcall function 00B190C0: PathRemoveFileSpecW.SHLWAPI(?,?,?,?,00000000,00000001,00A846B7), ref: 00B19170
Part of subcall function 00B190C0: PathFileExistsW.SHLWAPI(?,?,?,?,00000000,00000001,00A846B7), ref: 00B1917D
Part of subcall function 00B190C0: SHCreateDirectory.SHELL32(00000000,?,?,?,?,00000000,00000001,00A846B7), ref: 00B1918F
Part of subcall function 00B190C0: CreateFileW.KERNEL32(00B19049,C0000000,00000000,00000000,00000002,00000080,00000000,?,?,?,00000000,00000001,00A846B7), ref: 00B191A8
Part of subcall function 00B190C0: CloseHandle.KERNEL32(00000000,?,?,?,00000000,00000001,00A846B7), ref: 00B192D1
Part of subcall function 00B190C0: DeleteFileW.KERNEL32(00B19049,00000000,00000001,00A846B7), ref: 00B192DC

Strings

/, xrefs: 00B18FF0

Memory Dump Source

Source File: 00000001.00000002.422151708.0000000000A71000.00000020.00020000.sdmp, Offset: 00A70000, based on PE: true

Associated: 00000001.00000002.422117330.0000000000A70000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422651142.0000000000B5D000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422716671.0000000000B9A000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422731871.0000000000B9D000.00000008.00020000.sdmp Download File
Associated: 00000001.00000002.422740097.0000000000BA0000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422749600.0000000000BA4000.00000002.00020000.sdmp Download File

Similarity

API ID: File$CreatePath$Directory$Exists$CloseCombineDeleteHandleRemoveSpec
String ID: /
API String ID: 1154919873-2043925204
Opcode ID: 49ed00cfdeda4ada350c3c5252d8a9d79378ba246030c27b9cc012eaade4c9ff
Instruction ID: 191842e4fc9f7990fe1bdcf633f7eb1897f05501ba1ce6f0a3752c52a6f35266
Opcode Fuzzy Hash: 49ed00cfdeda4ada350c3c5252d8a9d79378ba246030c27b9cc012eaade4c9ff
Instruction Fuzzy Hash: 1251A171A0021C8BDB24DF54C898BE9B3B9EF59301F5541E9DC099B241DB709E85CB90

Uniqueness

Uniqueness Score: -1.00%

Function 00A7D830, Relevance: 7.2, APIs: 1, Strings: 3, Instructions: 150COMMON

Download Yara Rule

APIs

Part of subcall function 00A745F0: GetProcessHeap.KERNEL32(00AA5638,F084A4B2), ref: 00A74601

Concurrency::cancel_current_task.LIBCPMT ref: 00A7D9ED

Part of subcall function 00A74130: FindResourceExW.KERNEL32(00000000,00000006,?,00000000,00000000,00B5DAF8,?,?,?,?,00A736E1,00B5DAF8,?,?,?,00B5DAF8), ref: 00A74186
Part of subcall function 00A74130: FindResourceW.KERNEL32(00000000,00B5DAF8,00000006,?,00B5DAF8), ref: 00A741C4

Strings

ICORES, xrefs: 00A7D8B8
extract_icon_fail, xrefs: 00A7D92B
ico, xrefs: 00A7D880, 00A7D89A

Memory Dump Source

Source File: 00000001.00000002.422151708.0000000000A71000.00000020.00020000.sdmp, Offset: 00A70000, based on PE: true

Associated: 00000001.00000002.422117330.0000000000A70000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422651142.0000000000B5D000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422716671.0000000000B9A000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422731871.0000000000B9D000.00000008.00020000.sdmp Download File
Associated: 00000001.00000002.422740097.0000000000BA0000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422749600.0000000000BA4000.00000002.00020000.sdmp Download File

Similarity

API ID: FindResource$Concurrency::cancel_current_taskHeapProcess
String ID: ICORES$extract_icon_fail$ico
API String ID: 2284859144-2652564159
Opcode ID: a251b4446f0446eaeee766fa5d00044241ca5240dadce67a9b10428414d2db3e
Instruction ID: b16114cf02376d7663999d93372678d0f1bc0478b02f59fcde4a295f324c606e
Opcode Fuzzy Hash: a251b4446f0446eaeee766fa5d00044241ca5240dadce67a9b10428414d2db3e
Instruction Fuzzy Hash: 59516071A01205EFDB00EFA8CD46BAEB7F4FF05714F14C558E918AB292DB759904CB91

Uniqueness

Uniqueness Score: -1.00%

Function 00AB09C0, Relevance: 7.1, APIs: 1, Strings: 3, Instructions: 144COMMON

Download Yara Rule

APIs

SHGetValueW.SHLWAPI(80000002,Software\LDSGameCenter,Setup Path,00000001,?,?), ref: 00AB0A4D

Part of subcall function 00A73FD0: __CxxThrowException@8.LIBVCRUNTIME ref: 00A73FE7

Part of subcall function 00AA20B0: SHGetValueW.SHLWAPI(?,F084A4B2,?,00000001,?,?), ref: 00AA213F

Strings

Setup Path, xrefs: 00AB0A3E
Software\LDSGameCenter, xrefs: 00AB0A43, 00AB0B7D
InstallDate, xrefs: 00AB0B78

Memory Dump Source

Source File: 00000001.00000002.422151708.0000000000A71000.00000020.00020000.sdmp, Offset: 00A70000, based on PE: true

Associated: 00000001.00000002.422117330.0000000000A70000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422651142.0000000000B5D000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422716671.0000000000B9A000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422731871.0000000000B9D000.00000008.00020000.sdmp Download File
Associated: 00000001.00000002.422740097.0000000000BA0000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422749600.0000000000BA4000.00000002.00020000.sdmp Download File

Similarity

API ID: Value$Exception@8Throw
String ID: InstallDate$Setup Path$Software\LDSGameCenter
API String ID: 977719429-3393887631
Opcode ID: 4014cbcca4138178adc4c9133dd5e514156226652a13815a0502b18fa1c98709
Instruction ID: 9b5b4444d9646a3dce83e16d53044a46bfec7fe8c34548221c3ee4c034931ca8
Opcode Fuzzy Hash: 4014cbcca4138178adc4c9133dd5e514156226652a13815a0502b18fa1c98709
Instruction Fuzzy Hash: 5A51D371A40218ABCB24DF54DC49FEEB7F8EB18704F0046DDE819A7291EBB55A84CF81

Uniqueness

Uniqueness Score: -1.00%

Function 00AA2900, Relevance: 7.1, APIs: 3, Strings: 1, Instructions: 96registryCOMMON

Download Yara Rule

APIs

Part of subcall function 00A745F0: GetProcessHeap.KERNEL32(00AA5638,F084A4B2), ref: 00A74601

Part of subcall function 00A74130: FindResourceExW.KERNEL32(00000000,00000006,?,00000000,00000000,00B5DAF8,?,?,?,?,00A736E1,00B5DAF8,?,?,?,00B5DAF8), ref: 00A74186
Part of subcall function 00A74130: FindResourceW.KERNEL32(00000000,00B5DAF8,00000006,?,00B5DAF8), ref: 00A741C4

RegCreateKeyW.ADVAPI32(00000000,?,?), ref: 00AA2995
RegSetValueExW.KERNEL32(00000004,?,00000000,00000004,00000004,00000004,?,00000000,00000000), ref: 00AA29AF
RegCloseKey.ADVAPI32(?,?,00000000,00000000), ref: 00AA29C7

Strings

Software\Microsoft\Internet Explorer\Main\FeatureControl\, xrefs: 00AA294F, 00AA2965

Memory Dump Source

Source File: 00000001.00000002.422151708.0000000000A71000.00000020.00020000.sdmp, Offset: 00A70000, based on PE: true

Associated: 00000001.00000002.422117330.0000000000A70000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422651142.0000000000B5D000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422716671.0000000000B9A000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422731871.0000000000B9D000.00000008.00020000.sdmp Download File
Associated: 00000001.00000002.422740097.0000000000BA0000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422749600.0000000000BA4000.00000002.00020000.sdmp Download File

Similarity

API ID: FindResource$CloseCreateHeapProcessValue
String ID: Software\Microsoft\Internet Explorer\Main\FeatureControl\
API String ID: 4045034132-2285535824
Opcode ID: cd1257f74f749e855d356e9c1c4a5bbb011ec574bbef988a05977cd392a73d67
Instruction ID: ff338955f3903f18b2812310182085832deb8f25752b1bd6b81423082cab9518
Opcode Fuzzy Hash: cd1257f74f749e855d356e9c1c4a5bbb011ec574bbef988a05977cd392a73d67
Instruction Fuzzy Hash: 2A316B71A00609AFDB20DF68CD05BAFB7B8EF45721F148669F924A72E0DB719910CB60

Uniqueness

Uniqueness Score: -1.00%

Function 00A82192, Relevance: 7.1, APIs: 2, Strings: 2, Instructions: 70COMMON

Download Yara Rule

APIs

PathFileExistsW.SHLWAPI(?), ref: 00A821C7
SHCreateDirectoryExW.SHELL32(00000000,?,00000000), ref: 00A821D9

Strings

%s\%s, xrefs: 00A821B2
_GetStartMenuDir, Create directory : %s, xrefs: 00A821E0

Memory Dump Source

Source File: 00000001.00000002.422151708.0000000000A71000.00000020.00020000.sdmp, Offset: 00A70000, based on PE: true

Associated: 00000001.00000002.422117330.0000000000A70000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422651142.0000000000B5D000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422716671.0000000000B9A000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422731871.0000000000B9D000.00000008.00020000.sdmp Download File
Associated: 00000001.00000002.422740097.0000000000BA0000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422749600.0000000000BA4000.00000002.00020000.sdmp Download File

Similarity

API ID: CreateDirectoryExistsFilePath
String ID: %s\%s$_GetStartMenuDir, Create directory : %s
API String ID: 2624722123-1213183106
Opcode ID: e6c26a4c1a66521bf9aa24d0ebc61daa903386b7d2db20192dd6e7b8fc54119e
Instruction ID: e40562cf7bcc1749df70c5ddd36bc193b1d24c67596691369a99646c6964ea23
Opcode Fuzzy Hash: e6c26a4c1a66521bf9aa24d0ebc61daa903386b7d2db20192dd6e7b8fc54119e
Instruction Fuzzy Hash: 27217F719016189BDB20DF68DC49B9AB7F8FF05321F1482E9E819D7292EB349E44CF91

Uniqueness

Uniqueness Score: -1.00%

Function 00A875AF, Relevance: 7.0, APIs: 2, Strings: 2, Instructions: 40registrylibraryloaderCOMMON

Download Yara Rule

APIs

GetModuleHandleW.KERNEL32(Advapi32.dll,00B53238,LDSGameCenter,00000000,00B53238,?,00AABBD4,80000001,Software\Microsoft\Windows\CurrentVersion\Run,0002001F,00B53238), ref: 00A875D4
GetProcAddress.KERNEL32(00000000,RegOpenKeyTransactedW), ref: 00A875EB
RegOpenKeyExW.KERNEL32(00B53238,0002001F,00000000,?,00000000,00B53238,LDSGameCenter,00000000,00B53238,?,00AABBD4,80000001,Software\Microsoft\Windows\CurrentVersion\Run,0002001F,00B53238), ref: 00A87624
RegCloseKey.ADVAPI32(00000000,?,00AABBD4,80000001,Software\Microsoft\Windows\CurrentVersion\Run,0002001F,00B53238), ref: 00A87637

Strings

Advapi32.dll, xrefs: 00A875CF
LDSGameCenter, xrefs: 00A875BE

Memory Dump Source

Source File: 00000001.00000002.422151708.0000000000A71000.00000020.00020000.sdmp, Offset: 00A70000, based on PE: true

Associated: 00000001.00000002.422117330.0000000000A70000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422651142.0000000000B5D000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422716671.0000000000B9A000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422731871.0000000000B9D000.00000008.00020000.sdmp Download File
Associated: 00000001.00000002.422740097.0000000000BA0000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422749600.0000000000BA4000.00000002.00020000.sdmp Download File

Similarity

API ID: AddressCloseHandleModuleOpenProc
String ID: Advapi32.dll$LDSGameCenter
API String ID: 823179699-2117812903
Opcode ID: a51b76a198d4aea0e8eae0a59693425199f4fbc3db3ff02a0ae518a9c208096c
Instruction ID: 77536c76944d3fac19c597d5d29d7a226b73291755023ba2f0bcaf3dcfe0faf6
Opcode Fuzzy Hash: a51b76a198d4aea0e8eae0a59693425199f4fbc3db3ff02a0ae518a9c208096c
Instruction Fuzzy Hash: B3F06D72B086119BDB249F5DDC84BAEB7E9AB98301F2841B9E805D7254FAB1DC00DB61

Uniqueness

Uniqueness Score: -1.00%

Function 6C2B1950, Relevance: 6.1, APIs: 4, Instructions: 51COMMON

Download Yara Rule

APIs

FindResourceW.KERNEL32(?,?,?,?), ref: 6C2B197A
SizeofResource.KERNEL32(?,00000000), ref: 6C2B199F
LoadResource.KERNEL32(?,?), ref: 6C2B19AB
LockResource.KERNEL32(00000000), ref: 6C2B19B6

Memory Dump Source

Source File: 00000001.00000002.425332215.000000006C2B1000.00000020.00020000.sdmp, Offset: 6C2B0000, based on PE: true

Associated: 00000001.00000002.425298119.000000006C2B0000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.425472962.000000006C2C3000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.425510904.000000006C2CA000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.425525863.000000006C2CC000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.428429287.000000006CCCC000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.430600185.000000006D6CC000.00000002.00020000.sdmp Download File

Similarity

API ID: Resource$FindLoadLockSizeof
String ID:
API String ID: 3473537107-0
Opcode ID: 9bb07d0ba99140a173a523755e36b02f8eeb98e0528c9278e74bb011f5950aea
Instruction ID: 7567d02cc9947fd30df17600eb1a0b616bb8df454fde30a261c63e67141796eb
Opcode Fuzzy Hash: 9bb07d0ba99140a173a523755e36b02f8eeb98e0528c9278e74bb011f5950aea
Instruction Fuzzy Hash: 1F0156B6A0470AABCB409F69D848A9AFBF8FF5D351F104525FD08D3240DB31D560CBA0

Uniqueness

Uniqueness Score: -1.00%

Function 00AA1A00, Relevance: 6.0, APIs: 4, Instructions: 45COMMON

Download Yara Rule

APIs

FindResourceW.KERNEL32(80004005,?,?,00A75483,?,?,?,?,80004005,00000000), ref: 00AA1A1B
SizeofResource.KERNEL32(80004005,00000000,?,?,?,80004005,00000000), ref: 00AA1A29
LoadResource.KERNEL32(80004005,00000000,?,?,?,80004005,00000000), ref: 00AA1A34
LockResource.KERNEL32(00000000,?,?,?,80004005,00000000), ref: 00AA1A3F

Memory Dump Source

Source File: 00000001.00000002.422151708.0000000000A71000.00000020.00020000.sdmp, Offset: 00A70000, based on PE: true

Associated: 00000001.00000002.422117330.0000000000A70000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422651142.0000000000B5D000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422716671.0000000000B9A000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422731871.0000000000B9D000.00000008.00020000.sdmp Download File
Associated: 00000001.00000002.422740097.0000000000BA0000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422749600.0000000000BA4000.00000002.00020000.sdmp Download File

Similarity

API ID: Resource$FindLoadLockSizeof
String ID:
API String ID: 3473537107-0
Opcode ID: 3f32c97503affe6f00e508536877eea98eed0ef279c87e26ab7cc6228e40d289
Instruction ID: 08cfe3015fa04d9e617ca75f9cd052850819c0aa352e040aac63b9844fc475d5
Opcode Fuzzy Hash: 3f32c97503affe6f00e508536877eea98eed0ef279c87e26ab7cc6228e40d289
Instruction Fuzzy Hash: D3F0A975A00309ABDB108FA9EC44AAAB7FCFF45361B10425EF904D3100DB71DD4097A1

Uniqueness

Uniqueness Score: -1.00%

Function 00A7DA00, Relevance: 5.4, APIs: 1, Strings: 2, Instructions: 150COMMON

Download Yara Rule

APIs

Part of subcall function 00A745F0: GetProcessHeap.KERNEL32(00AA5638,F084A4B2), ref: 00A74601

Concurrency::cancel_current_task.LIBCPMT ref: 00A7DBBD

Part of subcall function 00A74130: FindResourceExW.KERNEL32(00000000,00000006,?,00000000,00000000,00B5DAF8,?,?,?,?,00A736E1,00B5DAF8,?,?,?,00B5DAF8), ref: 00A74186
Part of subcall function 00A74130: FindResourceW.KERNEL32(00000000,00B5DAF8,00000006,?,00B5DAF8), ref: 00A741C4

Strings

ZIPRES, xrefs: 00A7DA88
extract_skin_fail, xrefs: 00A7DAFB

Memory Dump Source

Source File: 00000001.00000002.422151708.0000000000A71000.00000020.00020000.sdmp, Offset: 00A70000, based on PE: true

Associated: 00000001.00000002.422117330.0000000000A70000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422651142.0000000000B5D000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422716671.0000000000B9A000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422731871.0000000000B9D000.00000008.00020000.sdmp Download File
Associated: 00000001.00000002.422740097.0000000000BA0000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422749600.0000000000BA4000.00000002.00020000.sdmp Download File

Similarity

API ID: FindResource$Concurrency::cancel_current_taskHeapProcess
String ID: ZIPRES$extract_skin_fail
API String ID: 2284859144-2981486659
Opcode ID: 2956cee385a7ea33778e7ddde57eab4ba33d811d6653b070466988093b136409
Instruction ID: c26b5df39b0673ae91e06e6a743da66e6f6f2d54503b0635b69ed231c70c5884
Opcode Fuzzy Hash: 2956cee385a7ea33778e7ddde57eab4ba33d811d6653b070466988093b136409
Instruction Fuzzy Hash: 58517271A01209DFDB00EFA8CD45BAEBBF4FF44315F14C598E919AB292DB749904CB91

Uniqueness

Uniqueness Score: -1.00%

Function 00AB1060, Relevance: 5.4, APIs: 1, Strings: 2, Instructions: 142COMMON

Download Yara Rule

APIs

SHGetValueW.SHLWAPI(80000002,Software\LDSGameCenter,SubPID,00000001,?,?), ref: 00AB10FB

Strings

SubPID, xrefs: 00AB10EC
Software\LDSGameCenter, xrefs: 00AB10F1

Memory Dump Source

Source File: 00000001.00000002.422151708.0000000000A71000.00000020.00020000.sdmp, Offset: 00A70000, based on PE: true

Associated: 00000001.00000002.422117330.0000000000A70000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422651142.0000000000B5D000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422716671.0000000000B9A000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422731871.0000000000B9D000.00000008.00020000.sdmp Download File
Associated: 00000001.00000002.422740097.0000000000BA0000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422749600.0000000000BA4000.00000002.00020000.sdmp Download File

Similarity

API ID: Value
String ID: Software\LDSGameCenter$SubPID
API String ID: 3702945584-867072385
Opcode ID: ffdde1442be08286b0bc77b1e45aff59a214b1ae0a0ce37aef3198df5424ffba
Instruction ID: fc39b78ac47e50af5f35fb0efeb8c3bb413533141e4eb2acf126e3698eddd646
Opcode Fuzzy Hash: ffdde1442be08286b0bc77b1e45aff59a214b1ae0a0ce37aef3198df5424ffba
Instruction Fuzzy Hash: 3441E771A40218ABDB10DF58DD45BEEB7F8FB04714F1042A9E919A7391DB746A44CF90

Uniqueness

Uniqueness Score: -1.00%

Function 00AB1680, Relevance: 5.4, APIs: 1, Strings: 2, Instructions: 123COMMON

Download Yara Rule

APIs

SHGetValueW.SHLWAPI(80000002,Software\Ludashi,Setup Path,00000001,?,?), ref: 00AB170D

Part of subcall function 00A745F0: GetProcessHeap.KERNEL32(00AA5638,F084A4B2), ref: 00A74601

Part of subcall function 00A74130: FindResourceExW.KERNEL32(00000000,00000006,?,00000000,00000000,00B5DAF8,?,?,?,?,00A736E1,00B5DAF8,?,?,?,00B5DAF8), ref: 00A74186
Part of subcall function 00A74130: FindResourceW.KERNEL32(00000000,00B5DAF8,00000006,?,00B5DAF8), ref: 00A741C4

Strings

Setup Path, xrefs: 00AB16FE
Software\Ludashi, xrefs: 00AB1703

Memory Dump Source

Source File: 00000001.00000002.422151708.0000000000A71000.00000020.00020000.sdmp, Offset: 00A70000, based on PE: true

Associated: 00000001.00000002.422117330.0000000000A70000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422651142.0000000000B5D000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422716671.0000000000B9A000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422731871.0000000000B9D000.00000008.00020000.sdmp Download File
Associated: 00000001.00000002.422740097.0000000000BA0000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422749600.0000000000BA4000.00000002.00020000.sdmp Download File

Similarity

API ID: FindResource$HeapProcessValue
String ID: Setup Path$Software\Ludashi
API String ID: 2870785007-1439348962
Opcode ID: 78ee88806c6d40cf26030c837ff42acbc1fa34f194b682ce815113338eba67cc
Instruction ID: 463749917924b74bc664433bad738979a74d6e408a7ab977bfd5d6b267efc53c
Opcode Fuzzy Hash: 78ee88806c6d40cf26030c837ff42acbc1fa34f194b682ce815113338eba67cc
Instruction Fuzzy Hash: E941D371A402199BCB14EF64DD59BEE77F8EF08704F4081DCE90AA7292EF705A858F81

Uniqueness

Uniqueness Score: -1.00%

Function 00AB19F0, Relevance: 5.4, APIs: 1, Strings: 2, Instructions: 123COMMON

Download Yara Rule

APIs

SHGetValueW.SHLWAPI(80000002,Software\LDSGameMaster,Setup Path,00000001,?,?), ref: 00AB1A7D

Part of subcall function 00A745F0: GetProcessHeap.KERNEL32(00AA5638,F084A4B2), ref: 00A74601

Part of subcall function 00A74130: FindResourceExW.KERNEL32(00000000,00000006,?,00000000,00000000,00B5DAF8,?,?,?,?,00A736E1,00B5DAF8,?,?,?,00B5DAF8), ref: 00A74186
Part of subcall function 00A74130: FindResourceW.KERNEL32(00000000,00B5DAF8,00000006,?,00B5DAF8), ref: 00A741C4

Strings

Setup Path, xrefs: 00AB1A6E
Software\LDSGameMaster, xrefs: 00AB1A73

Memory Dump Source

Source File: 00000001.00000002.422151708.0000000000A71000.00000020.00020000.sdmp, Offset: 00A70000, based on PE: true

Associated: 00000001.00000002.422117330.0000000000A70000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422651142.0000000000B5D000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422716671.0000000000B9A000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422731871.0000000000B9D000.00000008.00020000.sdmp Download File
Associated: 00000001.00000002.422740097.0000000000BA0000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422749600.0000000000BA4000.00000002.00020000.sdmp Download File

Similarity

API ID: FindResource$HeapProcessValue
String ID: Setup Path$Software\LDSGameMaster
API String ID: 2870785007-3824280577
Opcode ID: 975a667404c6ef2a5a787b160dc5ef987332b9653d7f54b90d63613e7f8358d5
Instruction ID: bec0a8ab3dd072f760a1afd57c76e7bc86159d550fc60c6804aed671c8c626a2
Opcode Fuzzy Hash: 975a667404c6ef2a5a787b160dc5ef987332b9653d7f54b90d63613e7f8358d5
Instruction Fuzzy Hash: 1141F4706402199BCB14EF54DD69BEE77F8EF08704F4081DCE90AA7292EB706A85CF81

Uniqueness

Uniqueness Score: -1.00%

Function 00AAEC70, Relevance: 5.4, APIs: 1, Strings: 2, Instructions: 123COMMON

Download Yara Rule

APIs

SHGetValueW.SHLWAPI(80000002,Software\Microsoft\Windows\CurrentVersion\App Paths\360wpapp.exe,Path,00000001,?,?), ref: 00AAECFD

Part of subcall function 00A745F0: GetProcessHeap.KERNEL32(00AA5638,F084A4B2), ref: 00A74601

Part of subcall function 00A74130: FindResourceExW.KERNEL32(00000000,00000006,?,00000000,00000000,00B5DAF8,?,?,?,?,00A736E1,00B5DAF8,?,?,?,00B5DAF8), ref: 00A74186
Part of subcall function 00A74130: FindResourceW.KERNEL32(00000000,00B5DAF8,00000006,?,00B5DAF8), ref: 00A741C4

Strings

Path, xrefs: 00AAECEE
Software\Microsoft\Windows\CurrentVersion\App Paths\360wpapp.exe, xrefs: 00AAECF3

Memory Dump Source

Source File: 00000001.00000002.422151708.0000000000A71000.00000020.00020000.sdmp, Offset: 00A70000, based on PE: true

Associated: 00000001.00000002.422117330.0000000000A70000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422651142.0000000000B5D000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422716671.0000000000B9A000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422731871.0000000000B9D000.00000008.00020000.sdmp Download File
Associated: 00000001.00000002.422740097.0000000000BA0000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422749600.0000000000BA4000.00000002.00020000.sdmp Download File

Similarity

API ID: FindResource$HeapProcessValue
String ID: Path$Software\Microsoft\Windows\CurrentVersion\App Paths\360wpapp.exe
API String ID: 2870785007-4115319160
Opcode ID: a56fe00e7d3ffa08283669c52467ee28d049f33f4e6f142b495a4dfbb5b046be
Instruction ID: ddc671eeca992e7d62e1f24e0a8833969e5befa0eaadf3cf82a4d611288f8e41
Opcode Fuzzy Hash: a56fe00e7d3ffa08283669c52467ee28d049f33f4e6f142b495a4dfbb5b046be
Instruction Fuzzy Hash: B541F4706402199BCB24EF64DD59BEE77F4EF18704F0081DCE909AB291EB709A84CF81

Uniqueness

Uniqueness Score: -1.00%

Function 00B4376E, Relevance: 4.7, APIs: 3, Instructions: 186COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.422151708.0000000000A71000.00000020.00020000.sdmp, Offset: 00A70000, based on PE: true

Associated: 00000001.00000002.422117330.0000000000A70000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422651142.0000000000B5D000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422716671.0000000000B9A000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422731871.0000000000B9D000.00000008.00020000.sdmp Download File
Associated: 00000001.00000002.422740097.0000000000BA0000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422749600.0000000000BA4000.00000002.00020000.sdmp Download File

Similarity

API ID:
String ID:
API String ID:
Opcode ID: a57dc2ce68ff8e77997688e6ec4b6fcd6651dd652aab216ea26e7c9955784d76
Instruction ID: a73009837c4323c556b7e42c5da56dc502058f57786212fb53172ff735496989
Opcode Fuzzy Hash: a57dc2ce68ff8e77997688e6ec4b6fcd6651dd652aab216ea26e7c9955784d76
Instruction Fuzzy Hash: 8D51C271D0421AABDF109FA8C885FAEBBF4EF09B20F1801D9F415A7291DB759B40E761

Uniqueness

Uniqueness Score: -1.00%

Function 00AA1A70, Relevance: 4.6, APIs: 3, Instructions: 141COMMON

Download Yara Rule

APIs

GetTempPathW.KERNEL32(00000104,00000010,F084A4B2,00000010,00000010), ref: 00AA1ACB
SHCreateDirectoryExW.SHELL32(00000000,00000000,00000000,00000000,?,?), ref: 00AA1BAB
PathFileExistsW.SHLWAPI(00000000), ref: 00AA1BB2

Part of subcall function 00A745F0: GetProcessHeap.KERNEL32(00AA5638,F084A4B2), ref: 00A74601

Part of subcall function 00A74130: FindResourceExW.KERNEL32(00000000,00000006,?,00000000,00000000,00B5DAF8,?,?,?,?,00A736E1,00B5DAF8,?,?,?,00B5DAF8), ref: 00A74186
Part of subcall function 00A74130: FindResourceW.KERNEL32(00000000,00B5DAF8,00000006,?,00B5DAF8), ref: 00A741C4

Memory Dump Source

Source File: 00000001.00000002.422151708.0000000000A71000.00000020.00020000.sdmp, Offset: 00A70000, based on PE: true

Associated: 00000001.00000002.422117330.0000000000A70000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422651142.0000000000B5D000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422716671.0000000000B9A000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422731871.0000000000B9D000.00000008.00020000.sdmp Download File
Associated: 00000001.00000002.422740097.0000000000BA0000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422749600.0000000000BA4000.00000002.00020000.sdmp Download File

Similarity

API ID: FindPathResource$CreateDirectoryExistsFileHeapProcessTemp
String ID:
API String ID: 786711630-0
Opcode ID: 5c3362557f94cee6e1dcff5126580dc14955fdd85c7095a120aa54c46ea2be3e
Instruction ID: a1a77521ff35faeaddb0c21b67f660f8fd7e5bf119a66afede12f10789970612
Opcode Fuzzy Hash: 5c3362557f94cee6e1dcff5126580dc14955fdd85c7095a120aa54c46ea2be3e
Instruction Fuzzy Hash: 0541E875A40209ABDB20AF28CD49BEE73B4EF15310F148299E919A72D1EB709E44CF91

Uniqueness

Uniqueness Score: -1.00%

Function 00B42C84, Relevance: 4.6, APIs: 3, Instructions: 80COMMON

Download Yara Rule

APIs

_free.LIBCMT ref: 00B42CF7
_free.LIBCMT ref: 00B42D4D

Part of subcall function 00B42B29: _free.LIBCMT ref: 00B42B81
Part of subcall function 00B42B29: GetTimeZoneInformation.KERNEL32(?,00000000,00000000,00000000,?,00B7D518), ref: 00B42B93
Part of subcall function 00B42B29: WideCharToMultiByte.KERNEL32(00000000,00000000,Pacific Standard Time,000000FF,00000000,0000003F,00000000,?,?), ref: 00B42C0B
Part of subcall function 00B42B29: WideCharToMultiByte.KERNEL32(00000000,00000000,Pacific Daylight Time,000000FF,?,0000003F,00000000,?), ref: 00B42C38

Memory Dump Source

Source File: 00000001.00000002.422151708.0000000000A71000.00000020.00020000.sdmp, Offset: 00A70000, based on PE: true

Associated: 00000001.00000002.422117330.0000000000A70000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422651142.0000000000B5D000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422716671.0000000000B9A000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422731871.0000000000B9D000.00000008.00020000.sdmp Download File
Associated: 00000001.00000002.422740097.0000000000BA0000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422749600.0000000000BA4000.00000002.00020000.sdmp Download File

Similarity

API ID: _free$ByteCharMultiWide$InformationTimeZone
String ID:
API String ID: 314583886-0
Opcode ID: 1f50784a991c639fc0571723099acbe6eb828f6ea1df6e99150abfd0ec09ee7f
Instruction ID: cc959a6681f990fe3cf45d244585c8f1448a042c99802e1267e8bf255a0f2afd
Opcode Fuzzy Hash: 1f50784a991c639fc0571723099acbe6eb828f6ea1df6e99150abfd0ec09ee7f
Instruction Fuzzy Hash: 75210432C0022967DB35A7349D85DEB77F8CB45360FA002E6F998A3191EF704F81B6A1

Uniqueness

Uniqueness Score: -1.00%

Function 00B42F28, Relevance: 4.6, APIs: 3, Instructions: 61COMMON

Download Yara Rule

APIs

FindCloseChangeNotification.KERNEL32(00000000,00000000,?,?,00B42E46,?,00B96868,0000000C), ref: 00B42F7E
GetLastError.KERNEL32(?,00B42E46,?,00B96868,0000000C), ref: 00B42F88
__dosmaperr.LIBCMT ref: 00B42FB3

Memory Dump Source

Source File: 00000001.00000002.422151708.0000000000A71000.00000020.00020000.sdmp, Offset: 00A70000, based on PE: true

Associated: 00000001.00000002.422117330.0000000000A70000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422651142.0000000000B5D000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422716671.0000000000B9A000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422731871.0000000000B9D000.00000008.00020000.sdmp Download File
Associated: 00000001.00000002.422740097.0000000000BA0000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422749600.0000000000BA4000.00000002.00020000.sdmp Download File

Similarity

API ID: ChangeCloseErrorFindLastNotification__dosmaperr
String ID:
API String ID: 490808831-0
Opcode ID: 2df14d2b470ff37da18ad2fc335aa72f4d8c3a8402dab7004a3d8ce47eb4367e
Instruction ID: 52680c89962d03bf4019e7a01d95c4b196349916b0dbf1ceb66ce57d79411fc3
Opcode Fuzzy Hash: 2df14d2b470ff37da18ad2fc335aa72f4d8c3a8402dab7004a3d8ce47eb4367e
Instruction Fuzzy Hash: B3012B32A142201BC6242378A85A77D77E6DF92B34FF502E9F814871D2DE608E89F1D5

Uniqueness

Uniqueness Score: -1.00%

Function 00B2DE50, Relevance: 4.6, APIs: 3, Instructions: 54threadCOMMON

Download Yara Rule

APIs

CreateThread.KERNEL32 ref: 00B2DE99
GetLastError.KERNEL32(?,?,?,?,?,00AA4F47,00000000,00000000,00AA5230,?,00000000,?), ref: 00B2DEA5
__dosmaperr.LIBCMT ref: 00B2DEAC

Memory Dump Source

Source File: 00000001.00000002.422151708.0000000000A71000.00000020.00020000.sdmp, Offset: 00A70000, based on PE: true

Associated: 00000001.00000002.422117330.0000000000A70000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422651142.0000000000B5D000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422716671.0000000000B9A000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422731871.0000000000B9D000.00000008.00020000.sdmp Download File
Associated: 00000001.00000002.422740097.0000000000BA0000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422749600.0000000000BA4000.00000002.00020000.sdmp Download File

Similarity

API ID: CreateErrorLastThread__dosmaperr
String ID:
API String ID: 2744730728-0
Opcode ID: 2aea5e684b8ea55f6dd2abcad49862bab4f67a1dad7afcf7328f63838a9b967e
Instruction ID: a47a8fd5f7015ceef11f000f1a8a9b464a8d581c179a8e43c3178b9b7f1baaef
Opcode Fuzzy Hash: 2aea5e684b8ea55f6dd2abcad49862bab4f67a1dad7afcf7328f63838a9b967e
Instruction Fuzzy Hash: 6B019E3610422AAFDF15BFA1FC459AF3BA9EF94361F0201E8F8089B210DF319851C7A0

Uniqueness

Uniqueness Score: -1.00%

Function 00AB4AC0, Relevance: 4.5, APIs: 3, Instructions: 39threadwindowCOMMON

Download Yara Rule

APIs

SetEvent.KERNEL32(00000000,?,?,00A8A8EC,00001388,?,?,00A891EB,0000000B,?,00000001,00000000), ref: 00AB4AD0
PostThreadMessageW.USER32 ref: 00AB4AE6
CloseHandle.KERNEL32(00000000,?,?,00A8A8EC,00001388,?,?,00A891EB,0000000B,?,00000001,00000000), ref: 00AB4B04

Memory Dump Source

Source File: 00000001.00000002.422151708.0000000000A71000.00000020.00020000.sdmp, Offset: 00A70000, based on PE: true

Associated: 00000001.00000002.422117330.0000000000A70000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422651142.0000000000B5D000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422716671.0000000000B9A000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422731871.0000000000B9D000.00000008.00020000.sdmp Download File
Associated: 00000001.00000002.422740097.0000000000BA0000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422749600.0000000000BA4000.00000002.00020000.sdmp Download File

Similarity

API ID: CloseEventHandleMessagePostThread
String ID:
API String ID: 482264871-0
Opcode ID: a3c7027e62a53434fb371dcc78ea2837ab55f666244cb806628283dd1c98f5b9
Instruction ID: d861d505826a64ebcc34f3c909a44fa34fc7512843b1d783fe704743d8a7abe6
Opcode Fuzzy Hash: a3c7027e62a53434fb371dcc78ea2837ab55f666244cb806628283dd1c98f5b9
Instruction Fuzzy Hash: C00131716503015BE730AFA5DC49F5277ACAB09B41F000425BA41D7292DF70E844CBA4

Uniqueness

Uniqueness Score: -1.00%

Function 00B2DDB0, Relevance: 4.5, APIs: 3, Instructions: 31threadCOMMON

Download Yara Rule

APIs

Part of subcall function 00B400AB: GetLastError.KERNEL32(?,?,?,00B27C6C,00B41228,?,00B40055,00000001,00000364,?,00B2DD21,00B96398,00000010), ref: 00B400B0
Part of subcall function 00B400AB: _free.LIBCMT ref: 00B400E5
Part of subcall function 00B400AB: SetLastError.KERNEL32(00000000), ref: 00B40119

ExitThread.KERNEL32 ref: 00B2DDC2
CloseHandle.KERNEL32(?,?,?,00B2DEE2,?,?,00B2DD59,00000000), ref: 00B2DDEA
FreeLibraryAndExitThread.KERNEL32(?,?,?,?,00B2DEE2,?,?,00B2DD59,00000000), ref: 00B2DE00

Memory Dump Source

Source File: 00000001.00000002.422151708.0000000000A71000.00000020.00020000.sdmp, Offset: 00A70000, based on PE: true

Associated: 00000001.00000002.422117330.0000000000A70000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422651142.0000000000B5D000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422716671.0000000000B9A000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422731871.0000000000B9D000.00000008.00020000.sdmp Download File
Associated: 00000001.00000002.422740097.0000000000BA0000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422749600.0000000000BA4000.00000002.00020000.sdmp Download File

Similarity

API ID: ErrorExitLastThread$CloseFreeHandleLibrary_free
String ID:
API String ID: 1198197534-0
Opcode ID: e4e2279e2af94aaf801f125069c831d23276a7341aef8cae5d2202f88c733abf
Instruction ID: ca1721db365edef29c191ff97e60009a36a14f3100bace642ce0d8da30d726e1
Opcode Fuzzy Hash: e4e2279e2af94aaf801f125069c831d23276a7341aef8cae5d2202f88c733abf
Instruction Fuzzy Hash: 7CF05E30500B246BCB315B75E808B5A3AD8EF013A5F584BA0F83CD31E0DB31DD418651

Uniqueness

Uniqueness Score: -1.00%

Function 00AA2220, Relevance: 4.5, APIs: 3, Instructions: 20fileCOMMON

Download Yara Rule

APIs

PathFileExistsW.SHLWAPI(00A7DCBE,?,?,00A7DCBE,00000000,?,?,?,?,?,?,?,\Utils\uninst.zip,?,F084A4B2,?), ref: 00AA2229
SetFileAttributesW.KERNEL32(00A7DCBE,00000080,?,?,00A7DCBE,00000000,?,?,?,?,?,?,?,\Utils\uninst.zip,?,F084A4B2), ref: 00AA223A
DeleteFileW.KERNEL32(00A7DCBE,?,?,00A7DCBE,00000000,?,?,?,?,?,?,?,\Utils\uninst.zip,?,F084A4B2,?), ref: 00AA2242

Memory Dump Source

Source File: 00000001.00000002.422151708.0000000000A71000.00000020.00020000.sdmp, Offset: 00A70000, based on PE: true

Associated: 00000001.00000002.422117330.0000000000A70000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422651142.0000000000B5D000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422716671.0000000000B9A000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422731871.0000000000B9D000.00000008.00020000.sdmp Download File
Associated: 00000001.00000002.422740097.0000000000BA0000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422749600.0000000000BA4000.00000002.00020000.sdmp Download File

Similarity

API ID: File$AttributesDeleteExistsPath
String ID:
API String ID: 1545722265-0
Opcode ID: 02ba2e2229eb66ef42151a6af77e5a38d17cdf0a008ce974ec32f35bbd0983fe
Instruction ID: a60d7fd5e705d2551fb12621e43a75f12b29c3809a0c29fb48da61a45d6cb69b
Opcode Fuzzy Hash: 02ba2e2229eb66ef42151a6af77e5a38d17cdf0a008ce974ec32f35bbd0983fe
Instruction Fuzzy Hash: 92D01236200214EBEB301F94EC047C47BADEB04392F004569F68DD3170CB63A8109B80

Uniqueness

Uniqueness Score: -1.00%

Function 00A847DF, Relevance: 3.5, APIs: 1, Strings: 1, Instructions: 42COMMON

Download Yara Rule

APIs

PathFileExistsW.SHLWAPI(00A7D581), ref: 00A847F3

Strings

_TrayUnzipFile, save to '%s' failed, error=%d, xrefs: 00A847E4

Memory Dump Source

Source File: 00000001.00000002.422151708.0000000000A71000.00000020.00020000.sdmp, Offset: 00A70000, based on PE: true

Associated: 00000001.00000002.422117330.0000000000A70000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422651142.0000000000B5D000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422716671.0000000000B9A000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422731871.0000000000B9D000.00000008.00020000.sdmp Download File
Associated: 00000001.00000002.422740097.0000000000BA0000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422749600.0000000000BA4000.00000002.00020000.sdmp Download File

Similarity

API ID: ExistsFilePath
String ID: _TrayUnzipFile, save to '%s' failed, error=%d
API String ID: 1174141254-1472872556
Opcode ID: 5f0b1a943635fccfd4e0c80a4c036a4d77e6143add2a60b994c33349d90b8777
Instruction ID: ebaa4057494fe42f0ad69a8f50b8197c173fbd60a2494a42f1ad416343dfce37
Opcode Fuzzy Hash: 5f0b1a943635fccfd4e0c80a4c036a4d77e6143add2a60b994c33349d90b8777
Instruction Fuzzy Hash: 22F04C31F000514BD728EB68ED45B6EFB62DFC9711F50416EE81697291EB325840C740

Uniqueness

Uniqueness Score: -1.00%

Function 00AA2860, Relevance: 3.1, APIs: 2, Instructions: 57COMMON

Download Yara Rule

APIs

GetModuleFileNameW.KERNEL32(00000000,?,00000104), ref: 00AA289C
PathFindFileNameW.SHLWAPI(?), ref: 00AA28A9

Part of subcall function 00AA2900: RegCreateKeyW.ADVAPI32(00000000,?,?), ref: 00AA2995
Part of subcall function 00AA2900: RegSetValueExW.KERNEL32(00000004,?,00000000,00000004,00000004,00000004,?,00000000,00000000), ref: 00AA29AF
Part of subcall function 00AA2900: RegCloseKey.ADVAPI32(?,?,00000000,00000000), ref: 00AA29C7

Memory Dump Source

Source File: 00000001.00000002.422151708.0000000000A71000.00000020.00020000.sdmp, Offset: 00A70000, based on PE: true

Associated: 00000001.00000002.422117330.0000000000A70000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422651142.0000000000B5D000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422716671.0000000000B9A000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422731871.0000000000B9D000.00000008.00020000.sdmp Download File
Associated: 00000001.00000002.422740097.0000000000BA0000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422749600.0000000000BA4000.00000002.00020000.sdmp Download File

Similarity

API ID: FileName$CloseCreateFindModulePathValue
String ID:
API String ID: 1057649116-0
Opcode ID: 3e3f83bdb4615004e18e3301d9b9fc8d029036b333d82eb3f9210ab97f1f3fc5
Instruction ID: 9b4ef611fce9a299f03988a9e2df83d38d205a255005d9dfe3fd7d25ee2397d3
Opcode Fuzzy Hash: 3e3f83bdb4615004e18e3301d9b9fc8d029036b333d82eb3f9210ab97f1f3fc5
Instruction Fuzzy Hash: E301C4B1A0121CABDB10ABA8AC4AFEA77ACDB09354F5041D5FD1DA7182EB319A108790

Uniqueness

Uniqueness Score: -1.00%

Function 00B14920, Relevance: 3.0, APIs: 2, Instructions: 41COMMON

Download Yara Rule

APIs

__CxxThrowException@8.LIBVCRUNTIME ref: 00B15895

Part of subcall function 00B23827: RaiseException.KERNEL32(?,?,00AB60BB,?,00B9A044,?,00000007,?,?,?,?,00AB60BB,?,00B93034,?), ref: 00B23887

__CxxThrowException@8.LIBVCRUNTIME ref: 00B158B2

Memory Dump Source

Source File: 00000001.00000002.422151708.0000000000A71000.00000020.00020000.sdmp, Offset: 00A70000, based on PE: true

Associated: 00000001.00000002.422117330.0000000000A70000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422651142.0000000000B5D000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422716671.0000000000B9A000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422731871.0000000000B9D000.00000008.00020000.sdmp Download File
Associated: 00000001.00000002.422740097.0000000000BA0000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422749600.0000000000BA4000.00000002.00020000.sdmp Download File

Similarity

API ID: Exception@8Throw$ExceptionRaise
String ID:
API String ID: 3476068407-0
Opcode ID: e2e7799177a23d8abd1e8f9c3c0c4aa28f9063edef52dcf4949d84778659c817
Instruction ID: d790ddf5e27de8b4352035f9dfbac0171c358c8d2795c37b00f019435747f297
Opcode Fuzzy Hash: e2e7799177a23d8abd1e8f9c3c0c4aa28f9063edef52dcf4949d84778659c817
Instruction Fuzzy Hash: 9DF0962080460DBACF10BAB5EC469DD77EC9941350B9042F0B915950E6EB70DB95C6D0

Uniqueness

Uniqueness Score: -1.00%

Function 00B2DCFC, Relevance: 3.0, APIs: 2, Instructions: 38threadCOMMON

Download Yara Rule

APIs

GetLastError.KERNEL32(00B96398,00000010), ref: 00B2DD0F
ExitThread.KERNEL32 ref: 00B2DD16

Memory Dump Source

Source File: 00000001.00000002.422151708.0000000000A71000.00000020.00020000.sdmp, Offset: 00A70000, based on PE: true

Associated: 00000001.00000002.422117330.0000000000A70000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422651142.0000000000B5D000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422716671.0000000000B9A000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422731871.0000000000B9D000.00000008.00020000.sdmp Download File
Associated: 00000001.00000002.422740097.0000000000BA0000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422749600.0000000000BA4000.00000002.00020000.sdmp Download File

Similarity

API ID: ErrorExitLastThread
String ID:
API String ID: 1611280651-0
Opcode ID: 41b2b70d307f918a66a32da1a5cf915d134a45d0f008283c4a39912f924c85d9
Instruction ID: b703abd4821964e961712126c03d3634df984020d70a2c24b7831dd0e26fa2c6
Opcode Fuzzy Hash: 41b2b70d307f918a66a32da1a5cf915d134a45d0f008283c4a39912f924c85d9
Instruction Fuzzy Hash: 1DF0AF70940304AFCB11AFB4D80AB6D3BB4EF44751F2405D8F4095B2A2CF31A940DBA5

Uniqueness

Uniqueness Score: -1.00%

Function 00B3D3F3, Relevance: 1.6, APIs: 1, Instructions: 116COMMON

Download Yara Rule

APIs

_free.LIBCMT ref: 00B3D4C9

Memory Dump Source

Source File: 00000001.00000002.422151708.0000000000A71000.00000020.00020000.sdmp, Offset: 00A70000, based on PE: true

Associated: 00000001.00000002.422117330.0000000000A70000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422651142.0000000000B5D000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422716671.0000000000B9A000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422731871.0000000000B9D000.00000008.00020000.sdmp Download File
Associated: 00000001.00000002.422740097.0000000000BA0000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422749600.0000000000BA4000.00000002.00020000.sdmp Download File

Similarity

API ID: _free
String ID:
API String ID: 269201875-0
Opcode ID: 759380a004b77ab79279ff2f82c9eb1182c43eb848ac2de8200071cc968acc5a
Instruction ID: 62762c304787bd28e4d6fda885c658677b0778ca56718e5680091bc99b8c33c4
Opcode Fuzzy Hash: 759380a004b77ab79279ff2f82c9eb1182c43eb848ac2de8200071cc968acc5a
Instruction Fuzzy Hash: 41415272A007148FDB18CF69D9C456EB7F1EF8D310B25859AE515EB3A1DB30AC41CB81

Uniqueness

Uniqueness Score: -1.00%

Function 00AA1760, Relevance: 1.6, APIs: 1, Instructions: 92COMMON

Download Yara Rule

APIs

GetModuleFileNameW.KERNEL32(00A70000,?,00000104,F084A4B2,?,?), ref: 00AA17BD

Part of subcall function 00A745F0: GetProcessHeap.KERNEL32(00AA5638,F084A4B2), ref: 00A74601

Part of subcall function 00A74130: FindResourceExW.KERNEL32(00000000,00000006,?,00000000,00000000,00B5DAF8,?,?,?,?,00A736E1,00B5DAF8,?,?,?,00B5DAF8), ref: 00A74186
Part of subcall function 00A74130: FindResourceW.KERNEL32(00000000,00B5DAF8,00000006,?,00B5DAF8), ref: 00A741C4

Memory Dump Source

Source File: 00000001.00000002.422151708.0000000000A71000.00000020.00020000.sdmp, Offset: 00A70000, based on PE: true

Associated: 00000001.00000002.422117330.0000000000A70000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422651142.0000000000B5D000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422716671.0000000000B9A000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422731871.0000000000B9D000.00000008.00020000.sdmp Download File
Associated: 00000001.00000002.422740097.0000000000BA0000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422749600.0000000000BA4000.00000002.00020000.sdmp Download File

Similarity

API ID: FindResource$FileHeapModuleNameProcess
String ID:
API String ID: 3971721318-0
Opcode ID: ea7440e311d8c9941b1cd7a5a966fcf2a3ac90c92b6ac0a1bcb662e95ba040eb
Instruction ID: 3ce556d90a4cf738449955bba21fbcd8843f834e8e39dd025b24ce018c2cef29
Opcode Fuzzy Hash: ea7440e311d8c9941b1cd7a5a966fcf2a3ac90c92b6ac0a1bcb662e95ba040eb
Instruction Fuzzy Hash: 0D31B675940118ABCB24DF68DD49BEEB7B8FF09310F1482A9E819A72D1DB706E05CF50

Uniqueness

Uniqueness Score: -1.00%

Function 00AA20B0, Relevance: 1.6, APIs: 1, Instructions: 61COMMON

Download Yara Rule

APIs

SHGetValueW.SHLWAPI(?,F084A4B2,?,00000001,?,?), ref: 00AA213F

Memory Dump Source

Source File: 00000001.00000002.422151708.0000000000A71000.00000020.00020000.sdmp, Offset: 00A70000, based on PE: true

Associated: 00000001.00000002.422117330.0000000000A70000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422651142.0000000000B5D000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422716671.0000000000B9A000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422731871.0000000000B9D000.00000008.00020000.sdmp Download File
Associated: 00000001.00000002.422740097.0000000000BA0000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422749600.0000000000BA4000.00000002.00020000.sdmp Download File

Similarity

API ID: Value
String ID:
API String ID: 3702945584-0
Opcode ID: 90240454b1effb7fe544f4b32b39d46293844941b6934745275897cf6e8268a2
Instruction ID: f73b0d7ae116e62ff3d68302191e5c53c4b4b9f5447eb86cca52adac6ac34841
Opcode Fuzzy Hash: 90240454b1effb7fe544f4b32b39d46293844941b6934745275897cf6e8268a2
Instruction Fuzzy Hash: F111CEB5A0021C9BDB10DF59DD85BEAB7BCEB44304F0041EAAB19E3241DB70AE958F95

Uniqueness

Uniqueness Score: -1.00%

Function 00A82090, Relevance: 1.6, APIs: 1, Instructions: 61COMMON

Download Yara Rule

APIs

SHGetSpecialFolderPathW.SHELL32(00000000,?,00000002,00000001,?,?,?,?), ref: 00A8217D

Memory Dump Source

Source File: 00000001.00000002.422151708.0000000000A71000.00000020.00020000.sdmp, Offset: 00A70000, based on PE: true

Associated: 00000001.00000002.422117330.0000000000A70000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422651142.0000000000B5D000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422716671.0000000000B9A000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422731871.0000000000B9D000.00000008.00020000.sdmp Download File
Associated: 00000001.00000002.422740097.0000000000BA0000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422749600.0000000000BA4000.00000002.00020000.sdmp Download File

Similarity

API ID: FolderPathSpecial
String ID:
API String ID: 994120019-0
Opcode ID: 45a11428f05727d9c34a0e53dc502ffd11e3a6f126df45219b0aa0ac4ee4100f
Instruction ID: a29cb88db2159c34ef9e9b35de8c7cc7f2bd63491f99204cdc840755c49ac62b
Opcode Fuzzy Hash: 45a11428f05727d9c34a0e53dc502ffd11e3a6f126df45219b0aa0ac4ee4100f
Instruction Fuzzy Hash: B91184B1940208AFDB10EF64DD49F9A77B8FB04700F4046A9B514E7292DB74AA44CF91

Uniqueness

Uniqueness Score: -1.00%

Function 00B42289, Relevance: 1.6, APIs: 1, Instructions: 59COMMON

Download Yara Rule

APIs

__wsopen_s.LIBCMT ref: 00B42242

Memory Dump Source

Source File: 00000001.00000002.422151708.0000000000A71000.00000020.00020000.sdmp, Offset: 00A70000, based on PE: true

Associated: 00000001.00000002.422117330.0000000000A70000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422651142.0000000000B5D000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422716671.0000000000B9A000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422731871.0000000000B9D000.00000008.00020000.sdmp Download File
Associated: 00000001.00000002.422740097.0000000000BA0000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422749600.0000000000BA4000.00000002.00020000.sdmp Download File

Similarity

API ID: __wsopen_s
String ID:
API String ID: 3347428461-0
Opcode ID: 50eb246048d9696306abcad09467aeffdbdac7531e5151435324779eadd4f387
Instruction ID: 318d2959259c6307956a593cd505719c4ad6c7c30cec1206b2dcb8b81c266b89
Opcode Fuzzy Hash: 50eb246048d9696306abcad09467aeffdbdac7531e5151435324779eadd4f387
Instruction Fuzzy Hash: 93116D7190420AAFCB05DF58E9419AE7BF8EF48310F114099FC08A7301D671DE25EBA5

Uniqueness

Uniqueness Score: -1.00%

Function 00A7A0B0, Relevance: 1.6, APIs: 1, Instructions: 57COMMON

Download Yara Rule

APIs

Part of subcall function 00AB8AC1: EnterCriticalSection.KERNEL32(00BA148C,00B5DAF8,?,?,00A74161,00000000,00B5DAF8,?,?,?,?,00A736E1,00B5DAF8,?,?,?), ref: 00AB8ACC
Part of subcall function 00AB8AC1: LeaveCriticalSection.KERNEL32(00BA148C,?,00A74161,00000000,00B5DAF8,?,?,?,?,00A736E1,00B5DAF8,?,?,?,00B5DAF8,00B51BE8), ref: 00AB8AF8

FindResourceExW.KERNEL32(00000000,00000006,00000000,?,00000000,?,?,00000000,00000000,?,00AAE72B,?,00000000,?,00000000,?), ref: 00A7A0E7

Memory Dump Source

Source File: 00000001.00000002.422151708.0000000000A71000.00000020.00020000.sdmp, Offset: 00A70000, based on PE: true

Associated: 00000001.00000002.422117330.0000000000A70000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422651142.0000000000B5D000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422716671.0000000000B9A000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422731871.0000000000B9D000.00000008.00020000.sdmp Download File
Associated: 00000001.00000002.422740097.0000000000BA0000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422749600.0000000000BA4000.00000002.00020000.sdmp Download File

Similarity

API ID: CriticalSection$EnterFindLeaveResource
String ID:
API String ID: 2190064429-0
Opcode ID: 59a663d2e1717e473a730a9e97d43426442a30ffc5e18c4097fc0337c12def94
Instruction ID: 45da52631bd6dd7e5736ef86ba4219f7dea79ade7272caa8a334244a492e7b87
Opcode Fuzzy Hash: 59a663d2e1717e473a730a9e97d43426442a30ffc5e18c4097fc0337c12def94
Instruction Fuzzy Hash: D701DF32B4512437E7205A59AC01B7BB79CDB957A0F048269FD0AC7341DA118D0046E2

Uniqueness

Uniqueness Score: -1.00%

Function 00A81ED0, Relevance: 1.6, APIs: 1, Instructions: 55COMMON

Download Yara Rule

APIs

SHGetSpecialFolderPathW.SHELL32(00000000,?,00000010,00000001,?,?,?,?), ref: 00A81FBD

Memory Dump Source

Source File: 00000001.00000002.422151708.0000000000A71000.00000020.00020000.sdmp, Offset: 00A70000, based on PE: true

Associated: 00000001.00000002.422117330.0000000000A70000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422651142.0000000000B5D000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422716671.0000000000B9A000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422731871.0000000000B9D000.00000008.00020000.sdmp Download File
Associated: 00000001.00000002.422740097.0000000000BA0000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422749600.0000000000BA4000.00000002.00020000.sdmp Download File

Similarity

API ID: FolderPathSpecial
String ID:
API String ID: 994120019-0
Opcode ID: 901b8caa03e93b0620035710d38336350981cf81b3fee813fb03d44a9e79ae4c
Instruction ID: 3d84dde6a4040cdfbe4d5b657c74b9d1a95f74eb212d11acd9df8c596186883d
Opcode Fuzzy Hash: 901b8caa03e93b0620035710d38336350981cf81b3fee813fb03d44a9e79ae4c
Instruction Fuzzy Hash: 5E1184B1940208AFDB10EF64DD49F9AB7B8EB14710F004565B918E7292DB74AA44CF91

Uniqueness

Uniqueness Score: -1.00%

Function 00B3051F, Relevance: 1.6, APIs: 1, Instructions: 52COMMON

Download Yara Rule

APIs

Part of subcall function 00B411D6: RtlAllocateHeap.NTDLL(00000008,?,00000000,?,00B40055,00000001,00000364,?,00B2DD21,00B96398,00000010), ref: 00B41217

_free.LIBCMT ref: 00B3058B

Memory Dump Source

Source File: 00000001.00000002.422151708.0000000000A71000.00000020.00020000.sdmp, Offset: 00A70000, based on PE: true

Associated: 00000001.00000002.422117330.0000000000A70000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422651142.0000000000B5D000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422716671.0000000000B9A000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422731871.0000000000B9D000.00000008.00020000.sdmp Download File
Associated: 00000001.00000002.422740097.0000000000BA0000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422749600.0000000000BA4000.00000002.00020000.sdmp Download File

Similarity

API ID: AllocateHeap_free
String ID:
API String ID: 614378929-0
Opcode ID: 59e0c0fec9d00c54f82a169408890cebaabb85b639570bbf94aa85f45d0e7034
Instruction ID: 5f7e7d7b5b4cfb539db069396e7a2be85de74008d90c86da8032178500f07724
Opcode Fuzzy Hash: 59e0c0fec9d00c54f82a169408890cebaabb85b639570bbf94aa85f45d0e7034
Instruction Fuzzy Hash: 9D0149722103046BE331DF69C88195AFBE8FF95370F35066DE5C593280EA30A905CB34

Uniqueness

Uniqueness Score: -1.00%

Function 00AA1C50, Relevance: 1.5, APIs: 1, Instructions: 48COMMON

Download Yara Rule

APIs

PathFileExistsW.SHLWAPI(?,F084A4B2,00000000,?,?,00A85E76,F084A4B2,00000000,00B5DAF8), ref: 00AA1C5F

Memory Dump Source

Source File: 00000001.00000002.422151708.0000000000A71000.00000020.00020000.sdmp, Offset: 00A70000, based on PE: true

Associated: 00000001.00000002.422117330.0000000000A70000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422651142.0000000000B5D000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422716671.0000000000B9A000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422731871.0000000000B9D000.00000008.00020000.sdmp Download File
Associated: 00000001.00000002.422740097.0000000000BA0000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422749600.0000000000BA4000.00000002.00020000.sdmp Download File

Similarity

API ID: ExistsFilePath
String ID:
API String ID: 1174141254-0
Opcode ID: 1e8034a09e6c7a0ff9163eac5b3b542acff262efb8c52aa23c743cc2aadf726c
Instruction ID: 6bb0a6f306b25b75ae2b617583ddad22d780f14bf84aed46bc9b76c6fea1d8e1
Opcode Fuzzy Hash: 1e8034a09e6c7a0ff9163eac5b3b542acff262efb8c52aa23c743cc2aadf726c
Instruction Fuzzy Hash: 60F0D1B2B00214ABDB209F99AD806AAF3ADEB45361F1401A6ED0ED7241E732ED0086D0

Uniqueness

Uniqueness Score: -1.00%

Function 00B2E2A2, Relevance: 1.5, APIs: 1, Instructions: 46COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.422151708.0000000000A71000.00000020.00020000.sdmp, Offset: 00A70000, based on PE: true

Associated: 00000001.00000002.422117330.0000000000A70000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422651142.0000000000B5D000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422716671.0000000000B9A000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422731871.0000000000B9D000.00000008.00020000.sdmp Download File
Associated: 00000001.00000002.422740097.0000000000BA0000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422749600.0000000000BA4000.00000002.00020000.sdmp Download File

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b72699ba776d6631641cac9c10a518a4f10016841a410272c12a622893731b13
Instruction ID: 67ebe630d1b8f6df829f6f702a12cbea21aed529354da31a2175d340ba0f006b
Opcode Fuzzy Hash: b72699ba776d6631641cac9c10a518a4f10016841a410272c12a622893731b13
Instruction Fuzzy Hash: 5DF028325046309AD632BB2AEC09A9B33D8CF82331F100BD5F939931D1DB70E901A699

Uniqueness

Uniqueness Score: -1.00%

Function 00B411D6, Relevance: 1.5, APIs: 1, Instructions: 39memoryCOMMON

Download Yara Rule

APIs

RtlAllocateHeap.NTDLL(00000008,?,00000000,?,00B40055,00000001,00000364,?,00B2DD21,00B96398,00000010), ref: 00B41217

Memory Dump Source

Source File: 00000001.00000002.422151708.0000000000A71000.00000020.00020000.sdmp, Offset: 00A70000, based on PE: true

Associated: 00000001.00000002.422117330.0000000000A70000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422651142.0000000000B5D000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422716671.0000000000B9A000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422731871.0000000000B9D000.00000008.00020000.sdmp Download File
Associated: 00000001.00000002.422740097.0000000000BA0000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422749600.0000000000BA4000.00000002.00020000.sdmp Download File

Similarity

API ID: AllocateHeap
String ID:
API String ID: 1279760036-0
Opcode ID: 719cb9ee0b8735710b9a79bee0f937479f6fa2ed62182b897199832ef21bf9ce
Instruction ID: b5a56de5baf5526458d55b5fb4454f9707e0682f90ac46788f793201a3b6e229
Opcode Fuzzy Hash: 719cb9ee0b8735710b9a79bee0f937479f6fa2ed62182b897199832ef21bf9ce
Instruction Fuzzy Hash: F1F0B432E04224669B215F6AAC41A5B7BC8EB45761B1849D2BC18E7190CEA0DE80A6A2

Uniqueness

Uniqueness Score: -1.00%

Function 00AA2F00, Relevance: 1.5, APIs: 1, Instructions: 38COMMON

Download Yara Rule

APIs

SHSetValueW.SHLWAPI(00000000,00000000,00000000,00000001,00B5DAF8,00B5DAFA,?,00AAE622,80000002,Software\LDSGameCenterExtra,LastRunVer), ref: 00AA2F50

Memory Dump Source

Source File: 00000001.00000002.422151708.0000000000A71000.00000020.00020000.sdmp, Offset: 00A70000, based on PE: true

Associated: 00000001.00000002.422117330.0000000000A70000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422651142.0000000000B5D000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422716671.0000000000B9A000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422731871.0000000000B9D000.00000008.00020000.sdmp Download File
Associated: 00000001.00000002.422740097.0000000000BA0000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422749600.0000000000BA4000.00000002.00020000.sdmp Download File

Similarity

API ID: Value
String ID:
API String ID: 3702945584-0
Opcode ID: ac2df9dda122856d3c858dcb7d59949f35b6e8b907dcd378849e968be10700ec
Instruction ID: 41493d031ca93b17b1cfb902944a5e3a388569b707adf51e8f68990e90fa2281
Opcode Fuzzy Hash: ac2df9dda122856d3c858dcb7d59949f35b6e8b907dcd378849e968be10700ec
Instruction Fuzzy Hash: 7AF049351142099FDF249F68D908BBA37F9EB46709F0480ADFC1A876A0D372D9B6CB51

Uniqueness

Uniqueness Score: -1.00%

Function 00AA2050, Relevance: 1.5, APIs: 1, Instructions: 34COMMON

Download Yara Rule

APIs

SHGetValueW.SHLWAPI(?,?,?,00000004,00000000,00000000,00000010), ref: 00AA2090

Memory Dump Source

Source File: 00000001.00000002.422151708.0000000000A71000.00000020.00020000.sdmp, Offset: 00A70000, based on PE: true

Associated: 00000001.00000002.422117330.0000000000A70000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422651142.0000000000B5D000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422716671.0000000000B9A000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422731871.0000000000B9D000.00000008.00020000.sdmp Download File
Associated: 00000001.00000002.422740097.0000000000BA0000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422749600.0000000000BA4000.00000002.00020000.sdmp Download File

Similarity

API ID: Value
String ID:
API String ID: 3702945584-0
Opcode ID: d8b790007af7855395c1bfc9dbb9f5637ee969784927178513495c8859caf6e8
Instruction ID: 8d00d97b903f9db10fdae9c01899cf456bad4041f692dfd250bfff41901f4fd5
Opcode Fuzzy Hash: d8b790007af7855395c1bfc9dbb9f5637ee969784927178513495c8859caf6e8
Instruction Fuzzy Hash: 43F0FFB5A01218ABDF20CF69DC44BEA7BA8EF85715F108048BD09A7244D771EE64CBA0

Uniqueness

Uniqueness Score: -1.00%

Function 00B401B0, Relevance: 1.5, APIs: 1, Instructions: 32memoryCOMMON

Download Yara Rule

APIs

RtlAllocateHeap.NTDLL(00000000,?,00000000,?,00B46929,00000000,?,?,00B2C193,?,00000008,?,00B3B90E,00000000,00000000), ref: 00B401E2

Memory Dump Source

Source File: 00000001.00000002.422151708.0000000000A71000.00000020.00020000.sdmp, Offset: 00A70000, based on PE: true

Associated: 00000001.00000002.422117330.0000000000A70000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422651142.0000000000B5D000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422716671.0000000000B9A000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422731871.0000000000B9D000.00000008.00020000.sdmp Download File
Associated: 00000001.00000002.422740097.0000000000BA0000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422749600.0000000000BA4000.00000002.00020000.sdmp Download File

Similarity

API ID: AllocateHeap
String ID:
API String ID: 1279760036-0
Opcode ID: cb665d64265615c4176cb75daa3c7f81f4d79c9a2dd917b190fca97b5e5a976e
Instruction ID: 26fe5f3efd6bdec566b54f87e06e6860cfb53f577f59c47e1c756b2d3b8b0978
Opcode Fuzzy Hash: cb665d64265615c4176cb75daa3c7f81f4d79c9a2dd917b190fca97b5e5a976e
Instruction Fuzzy Hash: D7E06D311652256BE7213A659C81F5E7AC8DF427A0F1901E1FE16F71D0DF34DE80A2E5

Uniqueness

Uniqueness Score: -1.00%

Function 00AA2EC0, Relevance: 1.5, APIs: 1, Instructions: 29COMMON

Download Yara Rule

APIs

SHSetValueW.SHLWAPI(?,00000010,80000001,00000004,00A8014A,00000004,00000010,?,00A8014A,80000001,00000010,AutoRun,?), ref: 00AA2EE4

Memory Dump Source

Source File: 00000001.00000002.422151708.0000000000A71000.00000020.00020000.sdmp, Offset: 00A70000, based on PE: true

Associated: 00000001.00000002.422117330.0000000000A70000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422651142.0000000000B5D000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422716671.0000000000B9A000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422731871.0000000000B9D000.00000008.00020000.sdmp Download File
Associated: 00000001.00000002.422740097.0000000000BA0000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422749600.0000000000BA4000.00000002.00020000.sdmp Download File

Similarity

API ID: Value
String ID:
API String ID: 3702945584-0
Opcode ID: f0b6d68491deaad71b750d0d60068dc422e769d226d21cb2168976a0d6c04467
Instruction ID: 1764ab384a2563679284a1852bffda489415f8a7397305b4aae42e497c72928e
Opcode Fuzzy Hash: f0b6d68491deaad71b750d0d60068dc422e769d226d21cb2168976a0d6c04467
Instruction Fuzzy Hash: 7AE01A7135431A6AEF24DEAA9C05FA73B5DEB91B21F048118BA49D7580D770EC5096A0

Uniqueness

Uniqueness Score: -1.00%

Function 00AA1CC0, Relevance: 1.5, APIs: 1, Instructions: 19COMMON

Download Yara Rule

APIs

PathFileExistsW.SHLWAPI(-00000080,?,00A7CE91,00000001,00000001,00000001,-00000080,\Utils\7z.dll,?,?,?,00000001), ref: 00AA1CC6

Part of subcall function 00AB8E20: PathFileExistsW.SHLWAPI(-00000080,F084A4B2,000000FF,00000001,00000000), ref: 00AB8E65
Part of subcall function 00AB8E20: GetVersionExW.KERNEL32(0000011C), ref: 00AB8E9A

Memory Dump Source

Source File: 00000001.00000002.422151708.0000000000A71000.00000020.00020000.sdmp, Offset: 00A70000, based on PE: true

Associated: 00000001.00000002.422117330.0000000000A70000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422651142.0000000000B5D000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422716671.0000000000B9A000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422731871.0000000000B9D000.00000008.00020000.sdmp Download File
Associated: 00000001.00000002.422740097.0000000000BA0000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422749600.0000000000BA4000.00000002.00020000.sdmp Download File

Similarity

API ID: ExistsFilePath$Version
String ID:
API String ID: 75566183-0
Opcode ID: 5671f94c793b039a2e037982acb2299a5767be16be824d99f3554a19fe8f2a48
Instruction ID: 09ff44ef2085095115c1779e61408ed0857f5df20a5ea1e6a8a7e2ec65b37146
Opcode Fuzzy Hash: 5671f94c793b039a2e037982acb2299a5767be16be824d99f3554a19fe8f2a48
Instruction Fuzzy Hash: 91D09E3528420877EF211FA5ED05B953B5DAB013A5F044071BC0D861E2EB76E991DA55

Uniqueness

Uniqueness Score: -1.00%

Function 00B4C932, Relevance: 1.5, APIs: 1, Instructions: 15fileCOMMON

Download Yara Rule

APIs

CreateFileW.KERNEL32(00000000,00000000,?,00B4CC9C,?,?,00000000,?,00B4CC9C,00000000,0000000C), ref: 00B4C94F

Memory Dump Source

Source File: 00000001.00000002.422151708.0000000000A71000.00000020.00020000.sdmp, Offset: 00A70000, based on PE: true

Associated: 00000001.00000002.422117330.0000000000A70000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422651142.0000000000B5D000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422716671.0000000000B9A000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422731871.0000000000B9D000.00000008.00020000.sdmp Download File
Associated: 00000001.00000002.422740097.0000000000BA0000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422749600.0000000000BA4000.00000002.00020000.sdmp Download File

Similarity

API ID: CreateFile
String ID:
API String ID: 823142352-0
Opcode ID: 262b55a7ee482e1d67d12a59895e1c2e24d35c3e7a6b92d14dda197e922ddd50
Instruction ID: 64eaddaef57b9bd347a2a585de94518d426fcc24ae3c5fe159e7ca74ca8ebe3c
Opcode Fuzzy Hash: 262b55a7ee482e1d67d12a59895e1c2e24d35c3e7a6b92d14dda197e922ddd50
Instruction Fuzzy Hash: 0DD06C3200020DBBDF128F84DC06EDA3BAAFB48714F014140BA1866020C732E862EB90

Uniqueness

Uniqueness Score: -1.00%

Function 00AA1C30, Relevance: 1.5, APIs: 1, Instructions: 13COMMON

Download Yara Rule

APIs

GetLogicalDrives.KERNEL32 ref: 00AA1C33

Memory Dump Source

Source File: 00000001.00000002.422151708.0000000000A71000.00000020.00020000.sdmp, Offset: 00A70000, based on PE: true

Associated: 00000001.00000002.422117330.0000000000A70000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422651142.0000000000B5D000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422716671.0000000000B9A000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422731871.0000000000B9D000.00000008.00020000.sdmp Download File
Associated: 00000001.00000002.422740097.0000000000BA0000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422749600.0000000000BA4000.00000002.00020000.sdmp Download File

Similarity

API ID: DrivesLogical
String ID:
API String ID: 999431828-0
Opcode ID: 965492391714fd3285794964bc697a366175094aeec8742873aba2631b0e9c77
Instruction ID: abccc660093ab6fd53db93e7d158a4112f8460c027b9763fe36c9b8b5f16ccb8
Opcode Fuzzy Hash: 965492391714fd3285794964bc697a366175094aeec8742873aba2631b0e9c77
Instruction Fuzzy Hash: 7BC08C332A0E0F0BE7444AB8DC01720721AC780B31F8483207A2AC77D0EE7494408640

Uniqueness

Uniqueness Score: -1.00%

Function 00A73F10, Relevance: 1.5, APIs: 1, Instructions: 8memoryCOMMON

Download Yara Rule

APIs

RtlAllocateHeap.NTDLL(?,00000000,?), ref: 00A73F1B

Memory Dump Source

Source File: 00000001.00000002.422151708.0000000000A71000.00000020.00020000.sdmp, Offset: 00A70000, based on PE: true

Associated: 00000001.00000002.422117330.0000000000A70000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422651142.0000000000B5D000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422716671.0000000000B9A000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422731871.0000000000B9D000.00000008.00020000.sdmp Download File
Associated: 00000001.00000002.422740097.0000000000BA0000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422749600.0000000000BA4000.00000002.00020000.sdmp Download File

Similarity

API ID: AllocateHeap
String ID:
API String ID: 1279760036-0
Opcode ID: 7df45322105a4e4d23e994bca070337737545e2590c47b5b53fc05e66b0cf4bc
Instruction ID: 3018b7c9537fe06564dd9ec3e61e2ec6937c714991d23854a932051fc3cc12b4
Opcode Fuzzy Hash: 7df45322105a4e4d23e994bca070337737545e2590c47b5b53fc05e66b0cf4bc
Instruction Fuzzy Hash: E9B09236040208BBCB121B81EC06F85BF29EB15751F1480A1F608090629B73A461AA99

Uniqueness

Uniqueness Score: -1.00%

Non-executed Functions

Function 00AAAB30, Relevance: 116.9, APIs: 60, Strings: 6, Instructions: 1403commemoryCOMMON

Download Yara Rule

APIs

CoInitialize.OLE32(00000000), ref: 00AAAB63
CoInitializeSecurity.OLE32(00000000,000000FF,00000000,00000000,00000006,00000003,00000000,00000000,00000000), ref: 00AAAB92
CoCreateInstance.OLE32(00B78724,00000000,00000001,00B67200,00000000), ref: 00AAABB8
VariantInit.OLEAUT32(?), ref: 00AAABDD
VariantInit.OLEAUT32(?), ref: 00AAABFE
VariantInit.OLEAUT32(?), ref: 00AAAC1F
VariantInit.OLEAUT32(?), ref: 00AAAC40
VariantClear.OLEAUT32(?), ref: 00AAAC9A
VariantClear.OLEAUT32(?), ref: 00AAACA3
VariantClear.OLEAUT32(?), ref: 00AAACAC
VariantClear.OLEAUT32(?), ref: 00AAACB5
SysAllocString.OLEAUT32(00B5FD18), ref: 00AAACCE

Strings

PT%dM%dS, xrefs: 00AAB3AF
Trigger1, xrefs: 00AAB276
PT0S, xrefs: 00AAB72D
LDS-GAMECENTER, xrefs: 00AABA4D
BUILTIN\Administrators, xrefs: 00AAB670
, xrefs: 00AAB998

Memory Dump Source

Source File: 00000001.00000002.422151708.0000000000A71000.00000020.00020000.sdmp, Offset: 00A70000, based on PE: true

Associated: 00000001.00000002.422117330.0000000000A70000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422651142.0000000000B5D000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422716671.0000000000B9A000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422731871.0000000000B9D000.00000008.00020000.sdmp Download File
Associated: 00000001.00000002.422740097.0000000000BA0000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422749600.0000000000BA4000.00000002.00020000.sdmp Download File

Similarity

API ID: Variant$ClearInit$Initialize$AllocCreateInstanceSecurityString
String ID: $BUILTIN\Administrators$LDS-GAMECENTER$PT%dM%dS$PT0S$Trigger1
API String ID: 3792334-1006856600
Opcode ID: d4102263666e152ccfedc6f2876ee9e6b817ab806a74f48699dc0dc241a45024
Instruction ID: b4fc028ef6f594a471c67b3334510b7ae45bb980ae41b42cdac2eda3c6543e16
Opcode Fuzzy Hash: d4102263666e152ccfedc6f2876ee9e6b817ab806a74f48699dc0dc241a45024
Instruction Fuzzy Hash: 2CC28570E01259DFDB10DFA8C948BAEBBF4AF4A304F148198E805EB392DB759D45CB61

Uniqueness

Uniqueness Score: -1.00%

Function 00ABC8E0, Relevance: 99.0, APIs: 49, Strings: 7, Instructions: 1045COMMON

Download Yara Rule

APIs

EnterCriticalSection.KERNEL32(?,F084A4B2,?), ref: 00ABC946
LeaveCriticalSection.KERNEL32(?,00000000,00000000), ref: 00ABC96B

Strings

tooltips_class32, xrefs: 00ABE259
Dwmapi.dll, xrefs: 00ABE497
EditUI, xrefs: 00ABDED8
Internet Explorer_Server, xrefs: 00ABE0F5
setfocus, xrefs: 00ABDF3D
DwmIsCompositionEnabled, xrefs: 00ABE4B2
WebBrowserUI, xrefs: 00ABDEB4

Memory Dump Source

Source File: 00000001.00000002.422151708.0000000000A71000.00000020.00020000.sdmp, Offset: 00A70000, based on PE: true

Associated: 00000001.00000002.422117330.0000000000A70000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422651142.0000000000B5D000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422716671.0000000000B9A000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422731871.0000000000B9D000.00000008.00020000.sdmp Download File
Associated: 00000001.00000002.422740097.0000000000BA0000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422749600.0000000000BA4000.00000002.00020000.sdmp Download File

Similarity

API ID: CriticalSection$EnterLeave
String ID: DwmIsCompositionEnabled$Dwmapi.dll$EditUI$Internet Explorer_Server$WebBrowserUI$setfocus$tooltips_class32
API String ID: 3168844106-1968607855
Opcode ID: 6658db956217b52efe603f948e7e9bae9e1206bd03061bead56b912c8cb86868
Instruction ID: 545d11f46904b4856d4d8788dfe75fc3d77eb23eb49776fb1845c12549a40434
Opcode Fuzzy Hash: 6658db956217b52efe603f948e7e9bae9e1206bd03061bead56b912c8cb86868
Instruction Fuzzy Hash: 40A22870A01729AFDB65CF64D898BE9B7B8FF48704F1042D9E509A7251DB74AE90CF80

Uniqueness

Uniqueness Score: -1.00%

Function 00AAC770, Relevance: 43.9, APIs: 19, Strings: 6, Instructions: 168librarymemoryloaderCOMMON

Download Yara Rule

APIs

LoadLibraryW.KERNEL32(advapi32.dll,00000000,?,?,00AAC6B1,00000000,?,00000000,?,?,?,?,00B6703C,00000001,00B67298,00000000), ref: 00AAC7BD
GetProcAddress.KERNEL32(00000000,CreateProcessAsUserW), ref: 00AAC7D3
GetCurrentProcess.KERNEL32(00000020,?,?,?,?,00AAC6B1,00000000,?,00000000,?,?,?,?,00B6703C,00000001,00B67298), ref: 00AAC7FD
OpenProcessToken.ADVAPI32(00000000,?,?,00AAC6B1,00000000,?,00000000,?,?,?,?,00B6703C,00000001,00B67298,00000000), ref: 00AAC800
LookupPrivilegeValueW.ADVAPI32 ref: 00AAC82F
AdjustTokenPrivileges.ADVAPI32(?,00000000,00000001,00000000,00000000,00000000), ref: 00AAC850
CloseHandle.KERNEL32(?), ref: 00AAC85C
GetLastError.KERNEL32 ref: 00AAC862
GetCurrentProcess.KERNEL32(00000002,?), ref: 00AAC885
OpenProcessToken.ADVAPI32(00000000), ref: 00AAC888
DuplicateTokenEx.ADVAPI32(?,0000018B,00000000,00000002,00000001,?), ref: 00AAC8AD
LocalAlloc.KERNEL32(?,?,00000040,00000044), ref: 00AAC8C9
CreateWellKnownSid.ADVAPI32(00000043,00000000,00000000,00000044,?,?,00000040,00000044), ref: 00AAC8E0
GetLengthSid.ADVAPI32(?,?,?,?,?,?,00000000,?,?,00000040,00000044), ref: 00AAC8FB
SetTokenInformation.ADVAPI32(?,00000019,?,-00000008,?,?,?,?,?,?,00000000,?,?,00000040,00000044), ref: 00AAC914
CloseHandle.KERNEL32(?,?,?,?,?,?,?,00000000,?,?,00000040,00000044), ref: 00AAC929
LocalFree.KERNEL32(00000000,?,?,00000040,00000044), ref: 00AAC936
CloseHandle.KERNEL32(?), ref: 00AAC947
FreeLibrary.KERNEL32(00000000,?,?,00AAC6B1,00000000,?,00000000,?,?,?,?,00B6703C,00000001,00B67298,00000000), ref: 00AAC9CA

Strings

advapi32.dll, xrefs: 00AAC7B2
SeIncreaseQuotaPrivilege, xrefs: 00AAC818
, xrefs: 00AAC8EB
D, xrefs: 00AAC8BF
"%s" %s, xrefs: 00AAC982
CreateProcessAsUserW, xrefs: 00AAC7CD

Memory Dump Source

Source File: 00000001.00000002.422151708.0000000000A71000.00000020.00020000.sdmp, Offset: 00A70000, based on PE: true

Associated: 00000001.00000002.422117330.0000000000A70000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422651142.0000000000B5D000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422716671.0000000000B9A000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422731871.0000000000B9D000.00000008.00020000.sdmp Download File
Associated: 00000001.00000002.422740097.0000000000BA0000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422749600.0000000000BA4000.00000002.00020000.sdmp Download File

Similarity

API ID: Token$Process$CloseHandle$CurrentFreeLibraryLocalOpen$AddressAdjustAllocCreateDuplicateErrorInformationKnownLastLengthLoadLookupPrivilegePrivilegesProcValueWell
String ID: $"%s" %s$CreateProcessAsUserW$D$SeIncreaseQuotaPrivilege$advapi32.dll
API String ID: 3900101338-2132216671
Opcode ID: 1d6be9572d664252056f99c139e1af87c84dc7b1e7f326f37ea3c13a29393252
Instruction ID: 5686c87d297c7d92b414c9c2eb9b9834d3eb371a57515b166322bf745deef7ab
Opcode Fuzzy Hash: 1d6be9572d664252056f99c139e1af87c84dc7b1e7f326f37ea3c13a29393252
Instruction Fuzzy Hash: C6516D71A00358ABEB309F61DD48BDABBB8AF09751F0041D5F648E3290DBB49AC1DF60

Uniqueness

Uniqueness Score: -1.00%

Function 00A887C0, Relevance: 39.2, APIs: 19, Strings: 3, Instructions: 672COMMON

Download Yara Rule

APIs

DeleteCriticalSection.KERNEL32(?,?,00000000,?,?,?,C0000005,00000001,?,?,00A86451), ref: 00A88881
InitializeCriticalSectionAndSpinCount.KERNEL32(?,00000000,?,00B96C58), ref: 00A8891B
GetLastError.KERNEL32(?,00B96C58), ref: 00A88925
EnterCriticalSection.KERNEL32(?,00000000,?,00B96C58), ref: 00A88983
LeaveCriticalSection.KERNEL32(?,?,?,?,00B96C58), ref: 00A889A3
GetModuleFileNameW.KERNEL32(00A70000,?,00000104,?,00B96C58), ref: 00A889F5

Strings

REGISTRY, xrefs: 00A88C5B, 00A89011
Module_Raw, xrefs: 00A88BF5, 00A88FA5
Module, xrefs: 00A88B4F, 00A88EFF

Memory Dump Source

Source File: 00000001.00000002.422151708.0000000000A71000.00000020.00020000.sdmp, Offset: 00A70000, based on PE: true

Associated: 00000001.00000002.422117330.0000000000A70000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422651142.0000000000B5D000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422716671.0000000000B9A000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422731871.0000000000B9D000.00000008.00020000.sdmp Download File
Associated: 00000001.00000002.422740097.0000000000BA0000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422749600.0000000000BA4000.00000002.00020000.sdmp Download File

Similarity

API ID: CriticalSection$CountDeleteEnterErrorFileInitializeLastLeaveModuleNameSpin
String ID: Module$Module_Raw$REGISTRY
API String ID: 2620219444-549000027
Opcode ID: 9db3c5d2337f5bde9596252146d45a0009b22f996d88b51757f767e3bb3747fd
Instruction ID: a4b76f529e4570bf44ec2f231e9a1734444132657d6f499c0903a899f6e79904
Opcode Fuzzy Hash: 9db3c5d2337f5bde9596252146d45a0009b22f996d88b51757f767e3bb3747fd
Instruction Fuzzy Hash: 8332C732A003188BDB24EF54DD51BEEB3B8AF59310F4501E9E909A7651EF35AE84CF91

Uniqueness

Uniqueness Score: -1.00%

Function 00AA4B40, Relevance: 17.6, APIs: 9, Strings: 1, Instructions: 117synchronizationthreadtimeCOMMON

Download Yara Rule

APIs

GetCurrentThreadId.KERNEL32 ref: 00AA4B79
WaitForSingleObject.KERNEL32(?,00000000,?,00AA4E09,00000001,?), ref: 00AA4B9B
PostThreadMessageW.USER32 ref: 00AA4BAC
timeGetTime.WINMM ref: 00AA4BBC
timeGetTime.WINMM ref: 00AA4BD0
Sleep.KERNEL32(0000000A,?,00AA4E09,00000001,?), ref: 00AA4BDE
WaitForSingleObject.KERNEL32(?,00000000,?,00AA4E09,00000001,?), ref: 00AA4BF6
WaitForSingleObject.KERNEL32(?,000000FF,?,00AA4E09,00000001,?), ref: 00AA4C0A
CloseHandle.KERNEL32(?,?,00AA4E09,00000001,?), ref: 00AA4C26

Strings

CWorkThread::Stop, wait thread stop timeout, %d, xrefs: 00AA4C11

Memory Dump Source

Source File: 00000001.00000002.422151708.0000000000A71000.00000020.00020000.sdmp, Offset: 00A70000, based on PE: true

Associated: 00000001.00000002.422117330.0000000000A70000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422651142.0000000000B5D000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422716671.0000000000B9A000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422731871.0000000000B9D000.00000008.00020000.sdmp Download File
Associated: 00000001.00000002.422740097.0000000000BA0000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422749600.0000000000BA4000.00000002.00020000.sdmp Download File

Similarity

API ID: ObjectSingleWait$ThreadTimetime$CloseCurrentHandleMessagePostSleep
String ID: CWorkThread::Stop, wait thread stop timeout, %d
API String ID: 1309449773-1075796771
Opcode ID: d4326ccd6b291fc93f582e66c3550499ca5bae6fabe463a05e5e21ef369e2716
Instruction ID: 2091a3d2986f7256f4e0743540eae4d6b2fe773c6c9a475ad5f80a4db97474ff
Opcode Fuzzy Hash: d4326ccd6b291fc93f582e66c3550499ca5bae6fabe463a05e5e21ef369e2716
Instruction Fuzzy Hash: DC4103306013049FE7208F24CD45B2AB7E8EF8A715F104958F459DBAD1CBB9F840C760

Uniqueness

Uniqueness Score: -1.00%

Function 00AA4A00, Relevance: 17.6, APIs: 9, Strings: 1, Instructions: 108synchronizationthreadtimeCOMMON

Download Yara Rule

APIs

GetCurrentThreadId.KERNEL32 ref: 00AA4A32
WaitForSingleObject.KERNEL32(00000000,00000000), ref: 00AA4A54
PostThreadMessageW.USER32 ref: 00AA4A65
timeGetTime.WINMM ref: 00AA4A75
timeGetTime.WINMM ref: 00AA4A86
Sleep.KERNEL32(0000000A), ref: 00AA4A94
WaitForSingleObject.KERNEL32(00000000,00000000), ref: 00AA4AAC
WaitForSingleObject.KERNEL32(00000000,000000FF), ref: 00AA4AC0
CloseHandle.KERNEL32(00000000), ref: 00AA4ADC

Strings

CWorkThread::Stop, wait thread stop timeout, %d, xrefs: 00AA4AC7

Memory Dump Source

Source File: 00000001.00000002.422151708.0000000000A71000.00000020.00020000.sdmp, Offset: 00A70000, based on PE: true

Associated: 00000001.00000002.422117330.0000000000A70000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422651142.0000000000B5D000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422716671.0000000000B9A000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422731871.0000000000B9D000.00000008.00020000.sdmp Download File
Associated: 00000001.00000002.422740097.0000000000BA0000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422749600.0000000000BA4000.00000002.00020000.sdmp Download File

Similarity

API ID: ObjectSingleWait$ThreadTimetime$CloseCurrentHandleMessagePostSleep
String ID: CWorkThread::Stop, wait thread stop timeout, %d
API String ID: 1309449773-1075796771
Opcode ID: 92bd85110c1c29fd03fc415a8676b3fa2d2b4175a86a77f22a63850be438a2d9
Instruction ID: 5dce3a3f023de1f17ca2dcdb35f8ed197d55aa6be967423b63caa0794d6e66c1
Opcode Fuzzy Hash: 92bd85110c1c29fd03fc415a8676b3fa2d2b4175a86a77f22a63850be438a2d9
Instruction Fuzzy Hash: BB31DE30640701AFEB20CF21DD84B2AB7E8EF89755F208A59F45697AD1DBB9EC40CB54

Uniqueness

Uniqueness Score: -1.00%

Function 00AA5040, Relevance: 17.6, APIs: 9, Strings: 1, Instructions: 81threadCOMMON

Download Yara Rule

APIs

GetCurrentThreadId.KERNEL32 ref: 00AA5056

Strings

CWorkThread::Stop, wait thread stop timeout, %d, xrefs: 00AA50F1

Memory Dump Source

Source File: 00000001.00000002.422151708.0000000000A71000.00000020.00020000.sdmp, Offset: 00A70000, based on PE: true

Associated: 00000001.00000002.422117330.0000000000A70000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422651142.0000000000B5D000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422716671.0000000000B9A000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422731871.0000000000B9D000.00000008.00020000.sdmp Download File
Associated: 00000001.00000002.422740097.0000000000BA0000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422749600.0000000000BA4000.00000002.00020000.sdmp Download File

Similarity

API ID: CurrentThread
String ID: CWorkThread::Stop, wait thread stop timeout, %d
API String ID: 2882836952-1075796771
Opcode ID: 6c7cd5a750d09a87e46759738483fc54efb80d917c5476dc4df412c50c727004
Instruction ID: 1d143f20d02620510b72528a2b65e96e02a2b053a086eed424895ddf7868d1ce
Opcode Fuzzy Hash: 6c7cd5a750d09a87e46759738483fc54efb80d917c5476dc4df412c50c727004
Instruction Fuzzy Hash: CF210471A00B05AFE7309B74DC48B56BBD8AB12721F208529F148D75D0DBB5E881CBA8

Uniqueness

Uniqueness Score: -1.00%

Function 00A9E030, Relevance: 16.6, APIs: 11, Instructions: 112threadmemoryprocessCOMMON

Download Yara Rule

APIs

CreateToolhelp32Snapshot.KERNEL32(00000004,00000000), ref: 00A9E05E
Thread32First.KERNEL32 ref: 00A9E07A
GetCurrentProcessId.KERNEL32(00000000,?,00000004,00000000,00000000,?,00000000), ref: 00A9E096
GetCurrentThreadId.KERNEL32 ref: 00A9E09D
HeapAlloc.KERNEL32(?,00000200), ref: 00A9E0C1
HeapReAlloc.KERNEL32(00000000,?,00000000), ref: 00A9E0E6
Thread32Next.KERNEL32 ref: 00A9E114
CloseHandle.KERNEL32(00000000,00000000,?,00000004,00000000,00000000,?,00000000), ref: 00A9E122
OpenThread.KERNEL32(0000005A,00000000,00000000,00000004,00000000,00000000,?,00000000,?,?,00A9DE7C,?,00000000,00000001,?,7743B7C0), ref: 00A9E13D
SuspendThread.KERNEL32(00000000,?,?,00A9DE7C,?,00000000,00000001,?,7743B7C0), ref: 00A9E14A
CloseHandle.KERNEL32(00000000,?,?,?,?,?,00A9DE7C,?,00000000,00000001,?,7743B7C0), ref: 00A9E160

Memory Dump Source

Source File: 00000001.00000002.422151708.0000000000A71000.00000020.00020000.sdmp, Offset: 00A70000, based on PE: true

Associated: 00000001.00000002.422117330.0000000000A70000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422651142.0000000000B5D000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422716671.0000000000B9A000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422731871.0000000000B9D000.00000008.00020000.sdmp Download File
Associated: 00000001.00000002.422740097.0000000000BA0000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422749600.0000000000BA4000.00000002.00020000.sdmp Download File

Similarity

API ID: Thread$AllocCloseCurrentHandleHeapThread32$CreateFirstNextOpenProcessSnapshotSuspendToolhelp32
String ID:
API String ID: 999149816-0
Opcode ID: a0900abf8ad18eb351dd3f490cfc9fe20cfbdf97e7ff9b363430869a1d3288dd
Instruction ID: 3f7c8aac982e98364336823e651cdf4e87c0e0f2cd33dcd99be79ba93681ce4b
Opcode Fuzzy Hash: a0900abf8ad18eb351dd3f490cfc9fe20cfbdf97e7ff9b363430869a1d3288dd
Instruction Fuzzy Hash: 0F416B70A00305EFDF20DF68DC85B6AB7F5FB89701F20862DE955972A2DB71A841CB15

Uniqueness

Uniqueness Score: -1.00%

Function 00A7C890, Relevance: 15.1, APIs: 10, Instructions: 145threadmemoryCOMMON

Download Yara Rule

APIs

GetCurrentThread.KERNEL32 ref: 00A7C8EC
OpenThreadToken.ADVAPI32(00000000,?,?,00000000,\..\360wpapp.exe,F084A4B2), ref: 00A7C8F3
GetLastError.KERNEL32(?,?,00000000,\..\360wpapp.exe,F084A4B2), ref: 00A7C910
GetCurrentProcess.KERNEL32(00000008,00000000,?,?,00000000,\..\360wpapp.exe,F084A4B2), ref: 00A7C923
OpenProcessToken.ADVAPI32(00000000,?,?,00000000,\..\360wpapp.exe,F084A4B2), ref: 00A7C92A
GetTokenInformation.ADVAPI32(00000000,00000002,00000000,00000000,00000000,?,?,00000000,\..\360wpapp.exe), ref: 00A7C95C
GetLastError.KERNEL32(?,?,00000000,\..\360wpapp.exe), ref: 00A7C96F
GetTokenInformation.ADVAPI32(00000000,00000002,00000000,00000000,00000000,?), ref: 00A7C9A6
AllocateAndInitializeSid.ADVAPI32(00000000,00000002,00000020,00000220,00000000,00000000,00000000,00000000,00000000,00000000,?), ref: 00A7C9DE
EqualSid.ADVAPI32(?,00000000), ref: 00A7CA00

Memory Dump Source

Source File: 00000001.00000002.422151708.0000000000A71000.00000020.00020000.sdmp, Offset: 00A70000, based on PE: true

Associated: 00000001.00000002.422117330.0000000000A70000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422651142.0000000000B5D000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422716671.0000000000B9A000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422731871.0000000000B9D000.00000008.00020000.sdmp Download File
Associated: 00000001.00000002.422740097.0000000000BA0000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422749600.0000000000BA4000.00000002.00020000.sdmp Download File

Similarity

API ID: Token$CurrentErrorInformationLastOpenProcessThread$AllocateEqualInitialize
String ID:
API String ID: 1598435421-0
Opcode ID: 372b1ff5fb1b70989d56dbefc373319a2e7b7c6597c08a7509af5dc429be2fb9
Instruction ID: 49756cbad7e8beb84de31658197f9d810886b141fc32d46b48d6d6f1161feaec
Opcode Fuzzy Hash: 372b1ff5fb1b70989d56dbefc373319a2e7b7c6597c08a7509af5dc429be2fb9
Instruction Fuzzy Hash: EE514A71D00218ABDB21DFA8DC85BEEBBF9FF48761F148129E515A7290EB709840CB64

Uniqueness

Uniqueness Score: -1.00%

Function 00AA4EE0, Relevance: 14.1, APIs: 6, Strings: 2, Instructions: 82timesleepsynchronizationCOMMON

Download Yara Rule

APIs

WaitForSingleObject.KERNEL32(?,00000000,7743D300,?,00AA5011,F084A4B2,00000001,F084A4B2,?,7743D300,?,?,00000000,00B561C8,000000FF), ref: 00AA4EF0
CloseHandle.KERNEL32(?,7743D300,?,00AA5011,F084A4B2,00000001,F084A4B2,?,7743D300,?,?,00000000,00B561C8,000000FF), ref: 00AA4F0F
GetLastError.KERNEL32(00AA5011,F084A4B2,00000001,F084A4B2,?,7743D300,?,?,00000000,00B561C8,000000FF), ref: 00AA4F51
timeGetTime.WINMM ref: 00AA4F70
timeGetTime.WINMM ref: 00AA4F90
Sleep.KERNEL32(0000000A), ref: 00AA4F9F

Strings

CWorkThread::Start, wait thread running timeout, %d, xrefs: 00AA4FAF
CWorkThread::Start, CreateThread failed, errno=%d, xrefs: 00AA4F58

Memory Dump Source

Source File: 00000001.00000002.422151708.0000000000A71000.00000020.00020000.sdmp, Offset: 00A70000, based on PE: true

Associated: 00000001.00000002.422117330.0000000000A70000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422651142.0000000000B5D000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422716671.0000000000B9A000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422731871.0000000000B9D000.00000008.00020000.sdmp Download File
Associated: 00000001.00000002.422740097.0000000000BA0000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422749600.0000000000BA4000.00000002.00020000.sdmp Download File

Similarity

API ID: Timetime$CloseErrorHandleLastObjectSingleSleepWait
String ID: CWorkThread::Start, CreateThread failed, errno=%d$CWorkThread::Start, wait thread running timeout, %d
API String ID: 172980972-363858984
Opcode ID: a7f1ec9933cd810fe1b3996acf859397e49a4c2aa6cf7acccb091cef6dd87c2d
Instruction ID: 965be4fb49daffe94a64ff96bb3c528d9da3a2ad2ca0aaf619ec31d7aa794338
Opcode Fuzzy Hash: a7f1ec9933cd810fe1b3996acf859397e49a4c2aa6cf7acccb091cef6dd87c2d
Instruction Fuzzy Hash: E92137316003006FE330AB64EC44F5ABFD8AB96B22F508469F48DDB1C1D7B5E880C365

Uniqueness

Uniqueness Score: -1.00%

Function 00B18BE0, Relevance: 13.7, APIs: 9, Instructions: 244fileCOMMON

Download Yara Rule

APIs

SetFilePointer.KERNEL32(?,00000000,00000000,00000000,?,?,?,?,?,?,?,?,?,?,?,00B19598), ref: 00B18C08
SetEndOfFile.KERNEL32(?,?,?,?,?,?,?,?,?,00B19598,?,?,?,00ABF882,00000000,?), ref: 00B18C11
WideCharToMultiByte.KERNEL32(00000000,00000000,?,000000FF,?,00000104,00000000,00000000), ref: 00B18CEA
WriteFile.KERNEL32(?,04034B50,0000001E,?,00000000), ref: 00B18D21
WriteFile.KERNEL32(?,?,?,?,00000000), ref: 00B18D4D
WriteFile.KERNEL32(?,?,?,?,00000000), ref: 00B18D7E
WriteFile.KERNEL32(?,00000000,0000002E,?,00000000), ref: 00B18E1E
WriteFile.KERNEL32(?,?,?,?,00000000), ref: 00B18E4B
WriteFile.KERNEL32(?,06054B50,00000016,?,00000000), ref: 00B18E97

Memory Dump Source

Source File: 00000001.00000002.422151708.0000000000A71000.00000020.00020000.sdmp, Offset: 00A70000, based on PE: true

Associated: 00000001.00000002.422117330.0000000000A70000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422651142.0000000000B5D000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422716671.0000000000B9A000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422731871.0000000000B9D000.00000008.00020000.sdmp Download File
Associated: 00000001.00000002.422740097.0000000000BA0000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422749600.0000000000BA4000.00000002.00020000.sdmp Download File

Similarity

API ID: File$Write$ByteCharMultiPointerWide
String ID:
API String ID: 3755117302-0
Opcode ID: f72a4dae28eff42e1e62e7d3bd819ac1a4e1e2453113d768d7b7dfd45841626a
Instruction ID: ef239755f4dbf8cdad9358f51269678d53a0d33b4568328a97f84f71d8b704d4
Opcode Fuzzy Hash: f72a4dae28eff42e1e62e7d3bd819ac1a4e1e2453113d768d7b7dfd45841626a
Instruction Fuzzy Hash: DBA14B71A002089FDB24CF94CC85BAEB7B5FF48701F5442A9E905EB291EB31E986CB54

Uniqueness

Uniqueness Score: -1.00%

Function 6C2BCB9E, Relevance: 13.7, APIs: 3, Strings: 4, Instructions: 1427COMMON

Download Yara Rule

APIs

__floor_pentium4.LIBCMT ref: 6C2BCCE4
DeleteCriticalSection.KERNEL32(?,6C2C9410,00000010,00000000), ref: 6C2BDF9C
_free.LIBCMT ref: 6C2BDFAA

Strings

1#INF, xrefs: 6C2BDEF1
1#IND, xrefs: 6C2BDEDC
1#SNAN, xrefs: 6C2BDEE3
1#QNAN, xrefs: 6C2BDEEA

Memory Dump Source

Source File: 00000001.00000002.425332215.000000006C2B1000.00000020.00020000.sdmp, Offset: 6C2B0000, based on PE: true

Associated: 00000001.00000002.425298119.000000006C2B0000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.425472962.000000006C2C3000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.425510904.000000006C2CA000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.425525863.000000006C2CC000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.428429287.000000006CCCC000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.430600185.000000006D6CC000.00000002.00020000.sdmp Download File

Similarity

API ID: CriticalDeleteSection__floor_pentium4_free
String ID: 1#IND$1#INF$1#QNAN$1#SNAN
API String ID: 3598519632-2761157908
Opcode ID: 568ea8d5068d24dcea3ceffc10df8711592e9f5ac4692c8d3f7bf6d8e261c620
Instruction ID: dfed81deda48730f774db3cf1c16001f7620b6dac97fb39c6fe50e417f674c8e
Opcode Fuzzy Hash: 568ea8d5068d24dcea3ceffc10df8711592e9f5ac4692c8d3f7bf6d8e261c620
Instruction Fuzzy Hash: 0EC27972E0962D8FDB25CE28CD407DAB3B5EB45389F1441EAE81DF7644E774AA818F40

Uniqueness

Uniqueness Score: -1.00%

Function 00AA0F50, Relevance: 10.5, APIs: 5, Strings: 1, Instructions: 48COMMON

Download Yara Rule

APIs

GetCurrentProcess.KERNEL32(00000028,?), ref: 00AA0F66
OpenProcessToken.ADVAPI32(00000000), ref: 00AA0F6D
LookupPrivilegeValueW.ADVAPI32(00000000,SeDebugPrivilege,?), ref: 00AA0F8A
AdjustTokenPrivileges.ADVAPI32(?,00000000,00000001,00000010,00000000,00000000), ref: 00AA0FA6
CloseHandle.KERNEL32(?), ref: 00AA0FB1

Strings

SeDebugPrivilege, xrefs: 00AA0F83

Memory Dump Source

Source File: 00000001.00000002.422151708.0000000000A71000.00000020.00020000.sdmp, Offset: 00A70000, based on PE: true

Associated: 00000001.00000002.422117330.0000000000A70000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422651142.0000000000B5D000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422716671.0000000000B9A000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422731871.0000000000B9D000.00000008.00020000.sdmp Download File
Associated: 00000001.00000002.422740097.0000000000BA0000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422749600.0000000000BA4000.00000002.00020000.sdmp Download File

Similarity

API ID: ProcessToken$AdjustCloseCurrentHandleLookupOpenPrivilegePrivilegesValue
String ID: SeDebugPrivilege
API String ID: 3038321057-2896544425
Opcode ID: ac207cd2d9d02f9b803ab7d7170ac16996fb40f6890ec8a92fd5c91485137e66
Instruction ID: cf6ec29d064e6d9ff3acdadecdc36778a98349ae95ce6e0bf1204397bcb4eeb0
Opcode Fuzzy Hash: ac207cd2d9d02f9b803ab7d7170ac16996fb40f6890ec8a92fd5c91485137e66
Instruction Fuzzy Hash: 8C015E71A40308ABDB20EFA4DD0AFAEBBB8EB08701F400195BA05E71D0DB7499448BA1

Uniqueness

Uniqueness Score: -1.00%

Function 00ABC890, Relevance: 7.5, APIs: 5, Instructions: 33keyboardCOMMON

Download Yara Rule

APIs

GetKeyState.USER32(00000011), ref: 00ABC89C
GetKeyState.USER32(00000002), ref: 00ABC8AB
GetKeyState.USER32(00000001), ref: 00ABC8B7
GetKeyState.USER32(00000010), ref: 00ABC8C3
GetKeyState.USER32(00000012), ref: 00ABC8CF

Memory Dump Source

Source File: 00000001.00000002.422151708.0000000000A71000.00000020.00020000.sdmp, Offset: 00A70000, based on PE: true

Associated: 00000001.00000002.422117330.0000000000A70000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422651142.0000000000B5D000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422716671.0000000000B9A000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422731871.0000000000B9D000.00000008.00020000.sdmp Download File
Associated: 00000001.00000002.422740097.0000000000BA0000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422749600.0000000000BA4000.00000002.00020000.sdmp Download File

Similarity

API ID: State
String ID:
API String ID: 1649606143-0
Opcode ID: cd7957dc6ea67d40be8e2a50b78d9c80bce86102e1e17aab68aca361c7ffe1da
Instruction ID: 460052b6c3c13eae37fe42a301a57f404c49c2ee31a4bcb8634f4e86daaa3976
Opcode Fuzzy Hash: cd7957dc6ea67d40be8e2a50b78d9c80bce86102e1e17aab68aca361c7ffe1da
Instruction Fuzzy Hash: C4E0E56BB8027A10ED6532EC9C02FE68A185FA4BE4F430266EA49F70865DD2694359F0

Uniqueness

Uniqueness Score: -1.00%

Function 00A842B3, Relevance: 6.1, APIs: 4, Instructions: 60filestringCOMMON

Download Yara Rule

APIs

SetFileAttributesW.KERNEL32 ref: 00A842BC
lstrlenW.KERNEL32(?), ref: 00A842F0
FindFirstFileW.KERNEL32(?,?), ref: 00A84336
FindClose.KERNEL32(00000000), ref: 00A8454E

Memory Dump Source

Source File: 00000001.00000002.422151708.0000000000A71000.00000020.00020000.sdmp, Offset: 00A70000, based on PE: true

Associated: 00000001.00000002.422117330.0000000000A70000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422651142.0000000000B5D000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422716671.0000000000B9A000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422731871.0000000000B9D000.00000008.00020000.sdmp Download File
Associated: 00000001.00000002.422740097.0000000000BA0000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422749600.0000000000BA4000.00000002.00020000.sdmp Download File

Similarity

API ID: FileFind$AttributesCloseFirstlstrlen
String ID:
API String ID: 2695905019-0
Opcode ID: 8c19350d26f6c6d49cef873cc1f3f856633d9b9d402f2d21fd461a96f4f98a16
Instruction ID: 2fb36ae80d0b7dfe826143efe261f1c9eb2344a0189fe35971621e9a53258451
Opcode Fuzzy Hash: 8c19350d26f6c6d49cef873cc1f3f856633d9b9d402f2d21fd461a96f4f98a16
Instruction Fuzzy Hash: BC21BBF19002188BDB20DB64DC44BDDB3B8FF08315F4006D6F619E3281DB359A848F58

Uniqueness

Uniqueness Score: -1.00%

Function 00B168D0, Relevance: 4.9, APIs: 3, Instructions: 360encryptionCOMMON

Download Yara Rule

APIs

CryptBinaryToStringW.CRYPT32(?,?,80000001,00000000,00000000), ref: 00B16950

Memory Dump Source

Source File: 00000001.00000002.422151708.0000000000A71000.00000020.00020000.sdmp, Offset: 00A70000, based on PE: true

Associated: 00000001.00000002.422117330.0000000000A70000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422651142.0000000000B5D000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422716671.0000000000B9A000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422731871.0000000000B9D000.00000008.00020000.sdmp Download File
Associated: 00000001.00000002.422740097.0000000000BA0000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422749600.0000000000BA4000.00000002.00020000.sdmp Download File

Similarity

API ID: BinaryCryptString
String ID:
API String ID: 80407269-0
Opcode ID: 28849ce70b12be69b7dcf80b7a9bf37e2fb88eb84e7047e69b79054978ba13d1
Instruction ID: 084d867408bd2009db00ff0d122f0ae668bc66ad122e0454152904b9ab3a560d
Opcode Fuzzy Hash: 28849ce70b12be69b7dcf80b7a9bf37e2fb88eb84e7047e69b79054978ba13d1
Instruction Fuzzy Hash: 63C1F471A002099FDF18DF68CC95BEEB7F5EF48310FA44169E815E7281DB74A981CBA1

Uniqueness

Uniqueness Score: -1.00%

Function 00B166B0, Relevance: 4.7, APIs: 3, Instructions: 168encryptionCOMMON

Download Yara Rule

APIs

CryptStringToBinaryW.CRYPT32(?,00000000,00000001,00000000,?,00000000,00000000), ref: 00B16749
MultiByteToWideChar.KERNEL32(0000FDE9,00000000,00000000,000000FF,00000000,00000000,?,?,F084A4B2), ref: 00B16776
MultiByteToWideChar.KERNEL32(0000FDE9,00000000,00000000,000000FF,?,?,?,?,?,?,?,?,F084A4B2), ref: 00B167F0

Memory Dump Source

Source File: 00000001.00000002.422151708.0000000000A71000.00000020.00020000.sdmp, Offset: 00A70000, based on PE: true

Associated: 00000001.00000002.422117330.0000000000A70000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422651142.0000000000B5D000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422716671.0000000000B9A000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422731871.0000000000B9D000.00000008.00020000.sdmp Download File
Associated: 00000001.00000002.422740097.0000000000BA0000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422749600.0000000000BA4000.00000002.00020000.sdmp Download File

Similarity

API ID: ByteCharMultiWide$BinaryCryptString
String ID:
API String ID: 517361024-0
Opcode ID: db4bf42da870e69c2b0a9e98f8ee34ed6bc0a0cffc635fa6ad68a357ce77d347
Instruction ID: c9381f252d826f0d66af5f7f16f72f324af3cf896a10f11af38e74bdbda5c439
Opcode Fuzzy Hash: db4bf42da870e69c2b0a9e98f8ee34ed6bc0a0cffc635fa6ad68a357ce77d347
Instruction Fuzzy Hash: 6451A0B1E01245ABDF14DFA4DC42BEEBBF4EF04704F5082A9F415AB291EB70A545CB51

Uniqueness

Uniqueness Score: -1.00%

Function 00B279BF, Relevance: 4.6, APIs: 3, Instructions: 78COMMON

Download Yara Rule

APIs

IsDebuggerPresent.KERNEL32(?,?,?,?,?,00000000), ref: 00B27AB7
SetUnhandledExceptionFilter.KERNEL32(00000000,?,?,?,?,?,00000000), ref: 00B27AC1
UnhandledExceptionFilter.KERNEL32(?,?,?,?,?,?,00000000), ref: 00B27ACE

Memory Dump Source

Source File: 00000001.00000002.422151708.0000000000A71000.00000020.00020000.sdmp, Offset: 00A70000, based on PE: true

Associated: 00000001.00000002.422117330.0000000000A70000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422651142.0000000000B5D000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422716671.0000000000B9A000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422731871.0000000000B9D000.00000008.00020000.sdmp Download File
Associated: 00000001.00000002.422740097.0000000000BA0000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422749600.0000000000BA4000.00000002.00020000.sdmp Download File

Similarity

API ID: ExceptionFilterUnhandled$DebuggerPresent
String ID:
API String ID: 3906539128-0
Opcode ID: d91a31a19f06ea3c41fdcb8c98342419d770ff9d3539872b7ec59d230684bdaf
Instruction ID: 1b61f2e70af3876b873cf9af9ef58fd369a069b5c30cbb31e35ee51a1544fab3
Opcode Fuzzy Hash: d91a31a19f06ea3c41fdcb8c98342419d770ff9d3539872b7ec59d230684bdaf
Instruction Fuzzy Hash: 2731B3759512289BCB21DF68D989B9DBBF8EF08310F5042EAE41CA7250EB709F818F45

Uniqueness

Uniqueness Score: -1.00%

Function 6C2B5B0F, Relevance: 4.6, APIs: 3, Instructions: 78COMMON

Download Yara Rule

APIs

IsDebuggerPresent.KERNEL32 ref: 6C2B5C07
SetUnhandledExceptionFilter.KERNEL32(00000000), ref: 6C2B5C11
UnhandledExceptionFilter.KERNEL32(?), ref: 6C2B5C1E

Memory Dump Source

Source File: 00000001.00000002.425332215.000000006C2B1000.00000020.00020000.sdmp, Offset: 6C2B0000, based on PE: true

Associated: 00000001.00000002.425298119.000000006C2B0000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.425472962.000000006C2C3000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.425510904.000000006C2CA000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.425525863.000000006C2CC000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.428429287.000000006CCCC000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.430600185.000000006D6CC000.00000002.00020000.sdmp Download File

Similarity

API ID: ExceptionFilterUnhandled$DebuggerPresent
String ID:
API String ID: 3906539128-0
Opcode ID: b25d254dbe37ddd3f49eaea75f9e87b8dc62fcfce1b60bc27e56490a71a1c898
Instruction ID: d02ea2f28d82168886b3a4875a77567b62b4f2357cd1fc95c76e5dd5c82408e9
Opcode Fuzzy Hash: b25d254dbe37ddd3f49eaea75f9e87b8dc62fcfce1b60bc27e56490a71a1c898
Instruction Fuzzy Hash: 1C31C4B590131D9BCB61DF64D888BCDBBB8BF08354F5041EAE81CA7290EB709B858F44

Uniqueness

Uniqueness Score: -1.00%

Function 6C2B76A5, Relevance: 4.5, APIs: 3, Instructions: 20COMMON

Download Yara Rule

APIs

GetCurrentProcess.KERNEL32(00000003,?,6C2B767B,00000003,6C2C9208,0000000C,6C2B77C3,00000003,00000002,00000000,?,6C2B8399,00000003), ref: 6C2B76C6
TerminateProcess.KERNEL32(00000000,?,6C2B767B,00000003,6C2C9208,0000000C,6C2B77C3,00000003,00000002,00000000,?,6C2B8399,00000003), ref: 6C2B76CD
ExitProcess.KERNEL32 ref: 6C2B76DF

Memory Dump Source

Source File: 00000001.00000002.425332215.000000006C2B1000.00000020.00020000.sdmp, Offset: 6C2B0000, based on PE: true

Associated: 00000001.00000002.425298119.000000006C2B0000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.425472962.000000006C2C3000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.425510904.000000006C2CA000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.425525863.000000006C2CC000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.428429287.000000006CCCC000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.430600185.000000006D6CC000.00000002.00020000.sdmp Download File

Similarity

API ID: Process$CurrentExitTerminate
String ID:
API String ID: 1703294689-0
Opcode ID: 791ae8603e2278dfbc323c09a4368dd5468db523f062b4ab58ca1a86f517baf0
Instruction ID: 0a814fcbc89f81c7b6d3a0d20846ed355c2ffeccb91f4647f53ec8e632075926
Opcode Fuzzy Hash: 791ae8603e2278dfbc323c09a4368dd5468db523f062b4ab58ca1a86f517baf0
Instruction Fuzzy Hash: 9DE04F3211050CEFCF015F15C90CA893B7AFF016C9B000414FD055B561DB35DA45DA50

Uniqueness

Uniqueness Score: -1.00%

Function 00B4176C, Relevance: 3.5, APIs: 1, Strings: 1, Instructions: 37COMMON

Download Yara Rule

APIs

GetLocaleInfoW.KERNEL32(00000000,?,00000000,?,?,?,?,?,?,?), ref: 00B417BF

Strings

GetLocaleInfoEx, xrefs: 00B4177D, 00B41787

Memory Dump Source

Source File: 00000001.00000002.422151708.0000000000A71000.00000020.00020000.sdmp, Offset: 00A70000, based on PE: true

Associated: 00000001.00000002.422117330.0000000000A70000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422651142.0000000000B5D000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422716671.0000000000B9A000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422731871.0000000000B9D000.00000008.00020000.sdmp Download File
Associated: 00000001.00000002.422740097.0000000000BA0000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422749600.0000000000BA4000.00000002.00020000.sdmp Download File

Similarity

API ID: InfoLocale
String ID: GetLocaleInfoEx
API String ID: 2299586839-2904428671
Opcode ID: f5b60bab2531a7e9cb91c6e5a4963a20c53d866ae42128cbcd0f52891fd11a6a
Instruction ID: 78bacdbc5635915c2e9c1231cc7069a28a39a8d34820d802ac20079391fcead6
Opcode Fuzzy Hash: f5b60bab2531a7e9cb91c6e5a4963a20c53d866ae42128cbcd0f52891fd11a6a
Instruction Fuzzy Hash: B1F0F631A40218BBCB116F64DC06F6E7BE4EF04741F0089D5FC1967260DB716E10A691

Uniqueness

Uniqueness Score: -1.00%

Function 00B417D6, Relevance: 3.5, APIs: 1, Strings: 1, Instructions: 30timeCOMMON

Download Yara Rule

APIs

GetSystemTimeAsFileTime.KERNEL32(00000000,00B2BF51), ref: 00B41815

Strings

GetSystemTimePreciseAsFileTime, xrefs: 00B417E7, 00B417F1

Memory Dump Source

Source File: 00000001.00000002.422151708.0000000000A71000.00000020.00020000.sdmp, Offset: 00A70000, based on PE: true

Associated: 00000001.00000002.422117330.0000000000A70000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422651142.0000000000B5D000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422716671.0000000000B9A000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422731871.0000000000B9D000.00000008.00020000.sdmp Download File
Associated: 00000001.00000002.422740097.0000000000BA0000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422749600.0000000000BA4000.00000002.00020000.sdmp Download File

Similarity

API ID: Time$FileSystem
String ID: GetSystemTimePreciseAsFileTime
API String ID: 2086374402-595813830
Opcode ID: 91e8da438746e5c988bc99531f0574f680a06199ccec74f502b678926cace7ba
Instruction ID: 6a6703714b992709db83d467731908f597d02239023d24cffa0682e69ad94918
Opcode Fuzzy Hash: 91e8da438746e5c988bc99531f0574f680a06199ccec74f502b678926cace7ba
Instruction Fuzzy Hash: 5EE0A032E40218A786206F68DC06A7EBBE4CF54B41B4585E9B81967252CE715E00A6D6

Uniqueness

Uniqueness Score: -1.00%

Function 6C2BC6F0, Relevance: 3.5, APIs: 2, Instructions: 464COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.425332215.000000006C2B1000.00000020.00020000.sdmp, Offset: 6C2B0000, based on PE: true

Associated: 00000001.00000002.425298119.000000006C2B0000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.425472962.000000006C2C3000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.425510904.000000006C2CA000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.425525863.000000006C2CC000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.428429287.000000006CCCC000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.430600185.000000006D6CC000.00000002.00020000.sdmp Download File

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 1f5291e9c0ef73f2a0daafde43cddfa27bf2dcebdb736927a26b56a65fddd2fe
Instruction ID: 0a3be0af6ce1d1f76afc17a799abc37d2691058e6fc0d18e02792e5e490cb162
Opcode Fuzzy Hash: 1f5291e9c0ef73f2a0daafde43cddfa27bf2dcebdb736927a26b56a65fddd2fe
Instruction Fuzzy Hash: FC024D71E002199FDB14DFA9C89069DB7F5FF88758F25826AE819F7744D730AA41CB80

Uniqueness

Uniqueness Score: -1.00%

Function 6C2C17B8, Relevance: 1.8, APIs: 1, Instructions: 269COMMON

Download Yara Rule

APIs

RaiseException.KERNEL32(C000000D,00000000,00000001,?,?,00000008,?,?,6C2C17B3,?,?,00000008,?,?,6C2C1453,00000000), ref: 6C2C19E5

Memory Dump Source

Source File: 00000001.00000002.425332215.000000006C2B1000.00000020.00020000.sdmp, Offset: 6C2B0000, based on PE: true

Associated: 00000001.00000002.425298119.000000006C2B0000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.425472962.000000006C2C3000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.425510904.000000006C2CA000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.425525863.000000006C2CC000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.428429287.000000006CCCC000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.430600185.000000006D6CC000.00000002.00020000.sdmp Download File

Similarity

API ID: ExceptionRaise
String ID:
API String ID: 3997070919-0
Opcode ID: 93cd84d052072fcfa0f45811a5aaf29ca00494e8997521327229ef28822a4976
Instruction ID: 8eb42e7201ee8b739662c2c5df6fd42153b8b4b271014141c0eb8a1600aa1018
Opcode Fuzzy Hash: 93cd84d052072fcfa0f45811a5aaf29ca00494e8997521327229ef28822a4976
Instruction Fuzzy Hash: 5FB1493262060A9FD745CF28C486B947BE0FF45369F258798ECA9CF6A1C335E991CB41

Uniqueness

Uniqueness Score: -1.00%

Function 00A9259D, Relevance: 1.8, Strings: 1, Instructions: 517COMMON

Download Yara Rule

Strings

>, xrefs: 00A926F1

Memory Dump Source

Source File: 00000001.00000002.422151708.0000000000A71000.00000020.00020000.sdmp, Offset: 00A70000, based on PE: true

Associated: 00000001.00000002.422117330.0000000000A70000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422651142.0000000000B5D000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422716671.0000000000B9A000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422731871.0000000000B9D000.00000008.00020000.sdmp Download File
Associated: 00000001.00000002.422740097.0000000000BA0000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422749600.0000000000BA4000.00000002.00020000.sdmp Download File

Similarity

API ID:
String ID: >
API String ID: 0-325317158
Opcode ID: 085e895d8c45d718760236e69bc19f2118044f50c41fa60f8f66042c3405c089
Instruction ID: 30d846d11e7c8cbf9b41a60b8ab3df366502d78af8998c76a1b6bdce7c45846b
Opcode Fuzzy Hash: 085e895d8c45d718760236e69bc19f2118044f50c41fa60f8f66042c3405c089
Instruction Fuzzy Hash: C5127D71B006059FDF18DF68C9517BEBBF1BF89304F14816DE85AAB291DB389A41CB90

Uniqueness

Uniqueness Score: -1.00%

Function 00A745F0, Relevance: 1.3, APIs: 1, Instructions: 30memoryCOMMON

Download Yara Rule

APIs

GetProcessHeap.KERNEL32(00AA5638,F084A4B2), ref: 00A74601

Part of subcall function 00B14BE3: __onexit.LIBCMT ref: 00B14BE9

Memory Dump Source

Source File: 00000001.00000002.422151708.0000000000A71000.00000020.00020000.sdmp, Offset: 00A70000, based on PE: true

Associated: 00000001.00000002.422117330.0000000000A70000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422651142.0000000000B5D000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422716671.0000000000B9A000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422731871.0000000000B9D000.00000008.00020000.sdmp Download File
Associated: 00000001.00000002.422740097.0000000000BA0000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422749600.0000000000BA4000.00000002.00020000.sdmp Download File

Similarity

API ID: HeapProcess__onexit
String ID:
API String ID: 2210869276-0
Opcode ID: 75f984dc0b5469dca30dbc90a32b85cad29ef513e378ea3f39a0660fde6c947b
Instruction ID: 7a3f69d340a03d199eee23de091a44d3dfa2a704421357c4f42691aca97e6b3f
Opcode Fuzzy Hash: 75f984dc0b5469dca30dbc90a32b85cad29ef513e378ea3f39a0660fde6c947b
Instruction Fuzzy Hash: 1901ABB19393409FDF40EF64A90B7163AE0B70B709F0040A8E8848B2A0DBB28448EB49

Uniqueness

Uniqueness Score: -1.00%

Function 00B1AC10, Relevance: .9, Instructions: 898COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.422151708.0000000000A71000.00000020.00020000.sdmp, Offset: 00A70000, based on PE: true

Associated: 00000001.00000002.422117330.0000000000A70000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422651142.0000000000B5D000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422716671.0000000000B9A000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422731871.0000000000B9D000.00000008.00020000.sdmp Download File
Associated: 00000001.00000002.422740097.0000000000BA0000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422749600.0000000000BA4000.00000002.00020000.sdmp Download File

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 319ac3ba3e50a9c83dcc351afad879bd1e43991ccfed40db299bf92078186376
Instruction ID: e383eee9ab769ea66c0ec41865085eebc5f4b1655ded9440b3ca54e9794d9e25
Opcode Fuzzy Hash: 319ac3ba3e50a9c83dcc351afad879bd1e43991ccfed40db299bf92078186376
Instruction Fuzzy Hash: D382FDB5A00209DFCB04CF98C990AADBBF1FF58314F658199E819AB351D771DA92CF90

Uniqueness

Uniqueness Score: -1.00%

Function 00AACDE0, Relevance: .7, Instructions: 691COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.422151708.0000000000A71000.00000020.00020000.sdmp, Offset: 00A70000, based on PE: true

Associated: 00000001.00000002.422117330.0000000000A70000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422651142.0000000000B5D000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422716671.0000000000B9A000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422731871.0000000000B9D000.00000008.00020000.sdmp Download File
Associated: 00000001.00000002.422740097.0000000000BA0000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422749600.0000000000BA4000.00000002.00020000.sdmp Download File

Similarity

API ID:
String ID:
API String ID:
Opcode ID: dc0ee1aa6a66f35c29808d5265a33ef696ae6bad8c9c4304acf47ae314acbfdc
Instruction ID: d9d7d9549973822e86ec54a55b5ee7cc902b6bc70112a54cbc3d32144e1a2af0
Opcode Fuzzy Hash: dc0ee1aa6a66f35c29808d5265a33ef696ae6bad8c9c4304acf47ae314acbfdc
Instruction Fuzzy Hash: 572271B7F515144BDB0CCA9DCCA23ECB2E3AFD4218B0E813DA80AE3745EA7DD9158644

Uniqueness

Uniqueness Score: -1.00%

Function 00B1A0D0, Relevance: .4, Instructions: 369COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.422151708.0000000000A71000.00000020.00020000.sdmp, Offset: 00A70000, based on PE: true

Associated: 00000001.00000002.422117330.0000000000A70000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422651142.0000000000B5D000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422716671.0000000000B9A000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422731871.0000000000B9D000.00000008.00020000.sdmp Download File
Associated: 00000001.00000002.422740097.0000000000BA0000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422749600.0000000000BA4000.00000002.00020000.sdmp Download File

Similarity

API ID:
String ID:
API String ID:
Opcode ID: e66a23820e72d2b8f75b997e6248e58299f4d44db423a2301d89109d367275e3
Instruction ID: 604d74595237d850057fff6292b09d7d7e8825146f57e17c3b91f59b52aa14d6
Opcode Fuzzy Hash: e66a23820e72d2b8f75b997e6248e58299f4d44db423a2301d89109d367275e3
Instruction Fuzzy Hash: 5AF1E431A052298FDB24CF28D980BDCB7F2BB99314F5581EAD84DA7351DB30AE858F51

Uniqueness

Uniqueness Score: -1.00%

Function 00B16D20, Relevance: .3, Instructions: 284COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.422151708.0000000000A71000.00000020.00020000.sdmp, Offset: 00A70000, based on PE: true

Associated: 00000001.00000002.422117330.0000000000A70000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422651142.0000000000B5D000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422716671.0000000000B9A000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422731871.0000000000B9D000.00000008.00020000.sdmp Download File
Associated: 00000001.00000002.422740097.0000000000BA0000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422749600.0000000000BA4000.00000002.00020000.sdmp Download File

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 2b40ca831aba2f0c5502d6289d648277c2ced2bc8cda33127ebd29af1ea874f9
Instruction ID: 38c34a97c0cdae996592df85653ac782607f7c0a0ba9f9860d8563cbdc056844
Opcode Fuzzy Hash: 2b40ca831aba2f0c5502d6289d648277c2ced2bc8cda33127ebd29af1ea874f9
Instruction Fuzzy Hash: 95C11A716101209BD719CF5ED884679B3E1FF88309FD7469AE941EB246C638F826DBD0

Uniqueness

Uniqueness Score: -1.00%

Function 00B170E0, Relevance: .3, Instructions: 283COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.422151708.0000000000A71000.00000020.00020000.sdmp, Offset: 00A70000, based on PE: true

Associated: 00000001.00000002.422117330.0000000000A70000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422651142.0000000000B5D000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422716671.0000000000B9A000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422731871.0000000000B9D000.00000008.00020000.sdmp Download File
Associated: 00000001.00000002.422740097.0000000000BA0000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422749600.0000000000BA4000.00000002.00020000.sdmp Download File

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 65365e123b8bcaf013587e567035989ac176c1e388cd298d1ce727c8ac273fc7
Instruction ID: 56534c67c95b8ed87722403bec06b746e155a5245a3e0096eca662feaca4c430
Opcode Fuzzy Hash: 65365e123b8bcaf013587e567035989ac176c1e388cd298d1ce727c8ac273fc7
Instruction Fuzzy Hash: B0C11B716101209BD715CF5ED884679B3E1FF88309FD7469AE981EB246C638F826DBD0

Uniqueness

Uniqueness Score: -1.00%

Function 6C2B69A8, Relevance: .2, Instructions: 237COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.425332215.000000006C2B1000.00000020.00020000.sdmp, Offset: 6C2B0000, based on PE: true

Associated: 00000001.00000002.425298119.000000006C2B0000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.425472962.000000006C2C3000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.425510904.000000006C2CA000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.425525863.000000006C2CC000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.428429287.000000006CCCC000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.430600185.000000006D6CC000.00000002.00020000.sdmp Download File

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 7480de7fbd669018b4dcaa9e63b6e995ed41012d992ab94503554a0b704c085d
Instruction ID: 121f0cf1a887fb105a9322b1c7c4fb7899ec769a757c2f0bddeffca825d4adc5
Opcode Fuzzy Hash: 7480de7fbd669018b4dcaa9e63b6e995ed41012d992ab94503554a0b704c085d
Instruction Fuzzy Hash: 71617B716C070E56DE1C496888D1BAE73A4EB067CDF108529FD82FBE80DB71E94A8355

Uniqueness

Uniqueness Score: -1.00%

Function 00B19340, Relevance: .2, Instructions: 181COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.422151708.0000000000A71000.00000020.00020000.sdmp, Offset: 00A70000, based on PE: true

Associated: 00000001.00000002.422117330.0000000000A70000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422651142.0000000000B5D000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422716671.0000000000B9A000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422731871.0000000000B9D000.00000008.00020000.sdmp Download File
Associated: 00000001.00000002.422740097.0000000000BA0000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422749600.0000000000BA4000.00000002.00020000.sdmp Download File

Similarity

API ID:
String ID:
API String ID:
Opcode ID: cba0567d1c2da59acb352c4ae9915c3bdc51583f9d742acd239d9c8d725640de
Instruction ID: ad6723335a081db528e89a1ab12a09f72cd6d2cb03cdbb98fed70a59e4f1ba71
Opcode Fuzzy Hash: cba0567d1c2da59acb352c4ae9915c3bdc51583f9d742acd239d9c8d725640de
Instruction Fuzzy Hash: 6B5149305102558BCB19CF34E8F06BA7BF1EF95301F8645AEEC469B581EB34E9A1D760

Uniqueness

Uniqueness Score: -1.00%

Function 00B17C30, Relevance: .2, Instructions: 157COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.422151708.0000000000A71000.00000020.00020000.sdmp, Offset: 00A70000, based on PE: true

Associated: 00000001.00000002.422117330.0000000000A70000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422651142.0000000000B5D000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422716671.0000000000B9A000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422731871.0000000000B9D000.00000008.00020000.sdmp Download File
Associated: 00000001.00000002.422740097.0000000000BA0000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422749600.0000000000BA4000.00000002.00020000.sdmp Download File

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 468537240466f8b182a9a5a8f41f207e3cd1c7041631c84be67b15022f88fae3
Instruction ID: 5b37dde37a4cc67ebb6ca26d807f835ef9f38633440cf19fb89dc468dcdce683
Opcode Fuzzy Hash: 468537240466f8b182a9a5a8f41f207e3cd1c7041631c84be67b15022f88fae3
Instruction Fuzzy Hash: D5414B713585494BD718CE1CEC915F973E1FF923207A842ADE48AC77E1CE65E8A2C390

Uniqueness

Uniqueness Score: -1.00%

Function 00B17610, Relevance: .1, Instructions: 137COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.422151708.0000000000A71000.00000020.00020000.sdmp, Offset: 00A70000, based on PE: true

Associated: 00000001.00000002.422117330.0000000000A70000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422651142.0000000000B5D000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422716671.0000000000B9A000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422731871.0000000000B9D000.00000008.00020000.sdmp Download File
Associated: 00000001.00000002.422740097.0000000000BA0000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422749600.0000000000BA4000.00000002.00020000.sdmp Download File

Similarity

API ID:
String ID:
API String ID:
Opcode ID: ad4ebe023d12d3c8c966afef70c020743c65f9719402a4f27e0c0475edd316b5
Instruction ID: 11353bed880dab584751f38dd27422adfb0e6dea0720144f1ccfc2835f660422
Opcode Fuzzy Hash: ad4ebe023d12d3c8c966afef70c020743c65f9719402a4f27e0c0475edd316b5
Instruction Fuzzy Hash: 0A41AE31A05259DBCB14CF2CD8808AEFBE5EFA6200754869EE896DB746D7309944CBE1

Uniqueness

Uniqueness Score: -1.00%

Function 00B174A0, Relevance: .1, Instructions: 134COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.422151708.0000000000A71000.00000020.00020000.sdmp, Offset: 00A70000, based on PE: true

Associated: 00000001.00000002.422117330.0000000000A70000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422651142.0000000000B5D000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422716671.0000000000B9A000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422731871.0000000000B9D000.00000008.00020000.sdmp Download File
Associated: 00000001.00000002.422740097.0000000000BA0000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422749600.0000000000BA4000.00000002.00020000.sdmp Download File

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 653302d36058305ebf0341dafa0eaba91ef65415c17caf869006447e9b784578
Instruction ID: 0343c6fee2f47daa72d15d59af8df69b8f043c344ea347eec13528e0e8c36708
Opcode Fuzzy Hash: 653302d36058305ebf0341dafa0eaba91ef65415c17caf869006447e9b784578
Instruction Fuzzy Hash: 43517F31A05249DFCB14CF6CD8845AEFBF5EFAA200B54859EE845EB302D7319A45CBE1

Uniqueness

Uniqueness Score: -1.00%

Function 00A73310, Relevance: .1, Instructions: 118COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.422151708.0000000000A71000.00000020.00020000.sdmp, Offset: 00A70000, based on PE: true

Associated: 00000001.00000002.422117330.0000000000A70000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422651142.0000000000B5D000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422716671.0000000000B9A000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422731871.0000000000B9D000.00000008.00020000.sdmp Download File
Associated: 00000001.00000002.422740097.0000000000BA0000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422749600.0000000000BA4000.00000002.00020000.sdmp Download File

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 1249693ecfe5b45764503858737c05001bb85494d72878046d7e4013a9724ff7
Instruction ID: a6a0e448e1cfc16467400b70607c2194c34fc878b1f1b239caaa557174edb8ac
Opcode Fuzzy Hash: 1249693ecfe5b45764503858737c05001bb85494d72878046d7e4013a9724ff7
Instruction Fuzzy Hash: 97416F612193C29FC30E8E6D48806AAFF646F66100B4882DEECC4EF787C514D6A9C7F1

Uniqueness

Uniqueness Score: -1.00%

Function 00B19E90, Relevance: .1, Instructions: 80COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.422151708.0000000000A71000.00000020.00020000.sdmp, Offset: 00A70000, based on PE: true

Associated: 00000001.00000002.422117330.0000000000A70000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422651142.0000000000B5D000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422716671.0000000000B9A000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422731871.0000000000B9D000.00000008.00020000.sdmp Download File
Associated: 00000001.00000002.422740097.0000000000BA0000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422749600.0000000000BA4000.00000002.00020000.sdmp Download File

Similarity

API ID:
String ID:
API String ID:
Opcode ID: de108f1c8a122f3e64a83f984c123b3c7a59176c11fcae75ea1591f9b7e058f3
Instruction ID: 809ee6ef08133d15f5249c31aaacc3539214c8f851f592e01c12efada36f4227
Opcode Fuzzy Hash: de108f1c8a122f3e64a83f984c123b3c7a59176c11fcae75ea1591f9b7e058f3
Instruction Fuzzy Hash: 3A2195715340B147CB088B35E8B4436FBE4DA8721239B43FFF89ADA0C1D938D5A597A0

Uniqueness

Uniqueness Score: -1.00%

Function 00A9B010, Relevance: 37.2, APIs: 4, Strings: 17, Instructions: 422COMMON

Download Yara Rule

APIs

ShowWindow.USER32(?,00000006,min), ref: 00A9B111
ShellExecuteW.SHELL32(00000000,open,00000010,00000000,00000000,00000005), ref: 00A9B405
ShellExecuteW.SHELL32(00000000,open,?,00000000,00000000,00000005), ref: 00A9B601

Strings

link, xrefs: 00A9B062
{server_id}, xrefs: 00A9B5E4
close, xrefs: 00A9B091
{game_id}, xrefs: 00A9B5CE
CPlayWindow::_DoCharge, chargeUrlFmt='%s', xrefs: 00A9B4F8
CPlayWindow::_DoSite, siteUrlFmt='%s', xrefs: 00A9B5B5
min, xrefs: 00A9B0E1, 00A9B13F
restore, xrefs: 00A9B206, 00A9B263
max, xrefs: 00A9B174, 00A9B1D1
open, xrefs: 00A9B2F1, 00A9B3F7, 00A9B5FA
charge, xrefs: 00A9B45B, 00A9B4BB
tray, xrefs: 00A9B647
kefu, xrefs: 00A9B298, 00A9B32A
to_tray, xrefs: 00A9B6AA
shouye, xrefs: 00A9B3A2, 00A9B430
click, xrefs: 00A9B04B
site, xrefs: 00A9B514, 00A9B578

Memory Dump Source

Source File: 00000001.00000002.422151708.0000000000A71000.00000020.00020000.sdmp, Offset: 00A70000, based on PE: true

Associated: 00000001.00000002.422117330.0000000000A70000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422651142.0000000000B5D000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422716671.0000000000B9A000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422731871.0000000000B9D000.00000008.00020000.sdmp Download File
Associated: 00000001.00000002.422740097.0000000000BA0000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422749600.0000000000BA4000.00000002.00020000.sdmp Download File

Similarity

API ID: ExecuteShell$ShowWindow
String ID: CPlayWindow::_DoCharge, chargeUrlFmt='%s'$CPlayWindow::_DoSite, siteUrlFmt='%s'$charge$click$close$kefu$link$max$min$open$restore$shouye$site$to_tray$tray${game_id}${server_id}
API String ID: 2421332015-1834362062
Opcode ID: 4080f89fea25a64c768d82255b51233b25f56bb75f12f2842f7c3bb6d490b187
Instruction ID: b7e02bceb2af3c32bf8c7429fb3865d3fbce772d4fea4b0c9cd006280c1e9d0a
Opcode Fuzzy Hash: 4080f89fea25a64c768d82255b51233b25f56bb75f12f2842f7c3bb6d490b187
Instruction Fuzzy Hash: BD02AF70A50204EFDB14EF74CE46FDDB7F1AF49714F108298A2296B2E2DB746A44CB91

Uniqueness

Uniqueness Score: -1.00%

Function 00A87660, Relevance: 35.3, APIs: 17, Strings: 3, Instructions: 296memorystringCOMMON

Download Yara Rule

APIs

CoTaskMemAlloc.OLE32(?,F084A4B2), ref: 00A876EB
_wcsstr.LIBVCRUNTIME ref: 00A87749
CharNextW.USER32 ref: 00A87762
CharNextW.USER32(00000000), ref: 00A87767
CharNextW.USER32(00000000), ref: 00A8776C
CharNextW.USER32(00000000), ref: 00A87771
CharNextW.USER32(00000000,F084A4B2), ref: 00A8782B

Part of subcall function 00A871B0: CharNextW.USER32 ref: 00A871BE

CharNextW.USER32(?,F084A4B2), ref: 00A877C3
EnterCriticalSection.KERNEL32(00000010), ref: 00A87881
lstrcmpiW.KERNEL32(?,?), ref: 00A8789A
LeaveCriticalSection.KERNEL32(00000010), ref: 00A878B0
CharNextW.USER32 ref: 00A878DA
CharNextW.USER32(?,00000000,00000001,F084A4B2), ref: 00A87919

Part of subcall function 00A86E40: CoTaskMemRealloc.OLE32(00000000,00000000,?,?,?,00A8687D,?,?,F084A4B2,?,?,?,00B53E18,000000FF), ref: 00A86E8A

CoTaskMemFree.OLE32(?), ref: 00A8793B
CoTaskMemFree.OLE32(?,F084A4B2), ref: 00A8797D

Strings

HKCR, xrefs: 00A87743
HKCU{Software{Classes, xrefs: 00A87773
}}, xrefs: 00A87805

Memory Dump Source

Source File: 00000001.00000002.422151708.0000000000A71000.00000020.00020000.sdmp, Offset: 00A70000, based on PE: true

Associated: 00000001.00000002.422117330.0000000000A70000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422651142.0000000000B5D000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422716671.0000000000B9A000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422731871.0000000000B9D000.00000008.00020000.sdmp Download File
Associated: 00000001.00000002.422740097.0000000000BA0000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422749600.0000000000BA4000.00000002.00020000.sdmp Download File

Similarity

API ID: CharNext$Task$CriticalFreeSection$AllocEnterLeaveRealloc_wcsstrlstrcmpi
String ID: }}$HKCR$HKCU{Software{Classes
API String ID: 3832614108-1142484189
Opcode ID: a82c1022a03ccba7589cf98028bf97aee423e63fe1947184128c93e6ab280f7f
Instruction ID: 89605ffda284c46c0ae6ef012ee644fb29e28c024415c503829fb0270beca056
Opcode Fuzzy Hash: a82c1022a03ccba7589cf98028bf97aee423e63fe1947184128c93e6ab280f7f
Instruction Fuzzy Hash: 6EA1B1719083559BDF64AFB4C888BAEBBB4EF09300F240569E845EB294EB74DC44CB90

Uniqueness

Uniqueness Score: -1.00%

Function 00A75100, Relevance: 33.7, APIs: 5, Strings: 14, Instructions: 474COMMON

Download Yara Rule

APIs

Part of subcall function 00A745F0: GetProcessHeap.KERNEL32(00AA5638,F084A4B2), ref: 00A74601

GetWindowRect.USER32 ref: 00A7536B
MoveWindow.USER32(?,?,?,00000000,00000000,00000001), ref: 00A75384

Strings

GotoMainTab, xrefs: 00A75643
Unknown, xrefs: 00A75172, 00A751A4
ShowWindow, xrefs: 00A751B7
SetWindowTitle, xrefs: 00A75527
CloseWindow, xrefs: 00A753E5
ResizeWindow, xrefs: 00A752F5
GetVersion, xrefs: 00A75461
ResizeBrowser, xrefs: 00A75205
CloseMainWindow, xrefs: 00A75441
browser_title, xrefs: 00A75575
EnableWindow, xrefs: 00A75397
ShowTitleBar, xrefs: 00A755E3
parent-center, xrefs: 00A752A3
browser_titlebar, xrefs: 00A75618

Memory Dump Source

Source File: 00000001.00000002.422151708.0000000000A71000.00000020.00020000.sdmp, Offset: 00A70000, based on PE: true

Associated: 00000001.00000002.422117330.0000000000A70000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422651142.0000000000B5D000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422716671.0000000000B9A000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422731871.0000000000B9D000.00000008.00020000.sdmp Download File
Associated: 00000001.00000002.422740097.0000000000BA0000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422749600.0000000000BA4000.00000002.00020000.sdmp Download File

Similarity

API ID: Window$HeapMoveProcessRect
String ID: CloseMainWindow$CloseWindow$EnableWindow$GetVersion$GotoMainTab$ResizeBrowser$ResizeWindow$SetWindowTitle$ShowTitleBar$ShowWindow$Unknown$browser_title$browser_titlebar$parent-center
API String ID: 212485854-3548442536
Opcode ID: 9c77a4ba8ec0b3fb9f3358126fe8f925d37ac77c5f14cc55a75bedfd6d710b75
Instruction ID: b88ea2742d1582cc9d33ceeaa2a527109238afdb8e152fa6131c277a99045310
Opcode Fuzzy Hash: 9c77a4ba8ec0b3fb9f3358126fe8f925d37ac77c5f14cc55a75bedfd6d710b75
Instruction Fuzzy Hash: 9D02E331D00208ABEB14DFB4DD45BEEB7B5EF04315F58C169F818A7291EBB09A45CB91

Uniqueness

Uniqueness Score: -1.00%

Function 00A7F6E0, Relevance: 33.6, APIs: 10, Strings: 9, Instructions: 306windowCOMMON

Download Yara Rule

APIs

SHDeleteKeyW.SHLWAPI(80000001,?,?,?,?,?,?,?,?,?,?,?,?,?,?,notempdir), ref: 00A7F8B7
PathFileExistsW.SHLWAPI(00000000,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?), ref: 00A7F91F
PathFileExistsW.SHLWAPI(00000000), ref: 00A7F946
PostMessageW.USER32(0000FFFF,0000001A,0000002A,00000000), ref: 00A7F969
SHChangeNotify.SHELL32(08000000,00001000,00000000,00000000), ref: 00A7F979
PathIsDirectoryW.SHLWAPI(?), ref: 00A7F9B8
PathFileExistsW.SHLWAPI(?), ref: 00A7F9DD
PostMessageW.USER32(0000FFFF,0000001A,0000002A,00000000), ref: 00A7FA00
SHChangeNotify.SHELL32(08000000,00001000,00000000,00000000), ref: 00A7FA10
SHDeleteKeyW.SHLWAPI(80000001,00000010), ref: 00A7FA5D

Strings

_RemoveUninstItem, xrefs: 00A7F8BD
notempdir, xrefs: 00A7F716
uninstall, xrefs: 00A7F7C7
_RemoveStartMenu, delete '%s', xrefs: 00A7F9C5
SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\WdGame_%s, xrefs: 00A7F8A0
_RemoveStartMenu, failed delete '%s', xrefs: 00A7F9E6
_RemoveAutoRun, xrefs: 00A7F7F3
_RemoveDesktopIcon, failed delete '%s', xrefs: 00A7F94F
_RemoveDesktopIcon, delete '%s', xrefs: 00A7F92E

Memory Dump Source

Source File: 00000001.00000002.422151708.0000000000A71000.00000020.00020000.sdmp, Offset: 00A70000, based on PE: true

Associated: 00000001.00000002.422117330.0000000000A70000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422651142.0000000000B5D000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422716671.0000000000B9A000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422731871.0000000000B9D000.00000008.00020000.sdmp Download File
Associated: 00000001.00000002.422740097.0000000000BA0000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422749600.0000000000BA4000.00000002.00020000.sdmp Download File

Similarity

API ID: Path$ExistsFile$ChangeDeleteMessageNotifyPost$Directory
String ID: SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\WdGame_%s$_RemoveAutoRun$_RemoveDesktopIcon, delete '%s'$_RemoveDesktopIcon, failed delete '%s'$_RemoveStartMenu, delete '%s'$_RemoveStartMenu, failed delete '%s'$_RemoveUninstItem$notempdir$uninstall
API String ID: 1313009994-3021475640
Opcode ID: c8abe7ba370b51404e45bf453bfc00aceb0090c67167643dc15fec5a912577f3
Instruction ID: 3b6ffc7b6c5bae9488b9c709416737e5064427c3f176a0318062da31768e02d2
Opcode Fuzzy Hash: c8abe7ba370b51404e45bf453bfc00aceb0090c67167643dc15fec5a912577f3
Instruction Fuzzy Hash: 0BB1C471A00605AFDB10EFB8DD0AF9DB7B4AF05320F14C269F918A72E2DB749904CB91

Uniqueness

Uniqueness Score: -1.00%

Function 00AB5C70, Relevance: 31.6, APIs: 9, Strings: 9, Instructions: 135libraryloaderCOMMON

Download Yara Rule

APIs

GetModuleFileNameW.KERNEL32(00000000,?,00000104,?,?,00000000), ref: 00AB5CB7
PathRemoveFileSpecW.SHLWAPI(?,?,?,00000000), ref: 00AB5CC4
PathAppendW.SHLWAPI(?,360NetUL.dll,?,?,?,?,?,?,?,?,00000000), ref: 00AB5D04

Part of subcall function 00AB8E20: PathFileExistsW.SHLWAPI(-00000080,F084A4B2,000000FF,00000001,00000000), ref: 00AB8E65
Part of subcall function 00AB8E20: GetVersionExW.KERNEL32(0000011C), ref: 00AB8E9A

LoadLibraryW.KERNEL32(?,?,?,?,?,?,?,?,?,?,00000000), ref: 00AB5D58
GetProcAddress.KERNEL32(00000000,HttpInit), ref: 00AB5D71
GetProcAddress.KERNEL32(?,HttpUninit), ref: 00AB5D7E
GetProcAddress.KERNEL32(?,zlib_uncompress), ref: 00AB5D8B
GetProcAddress.KERNEL32(?,zlib_compress), ref: 00AB5D98
GetProcAddress.KERNEL32(?,zlib_compressBound), ref: 00AB5DA5

Strings

ungzip, xrefs: 00AB5DF7
gzip, xrefs: 00AB5E05
InitByDllPath HasMsSign failed, xrefs: 00AB5D26
HttpInit, xrefs: 00AB5D6B
HttpUninit, xrefs: 00AB5D73
zlib_compressBound, xrefs: 00AB5D9A
zlib_uncompress, xrefs: 00AB5D80
360NetUL.dll, xrefs: 00AB5CFE
zlib_compress, xrefs: 00AB5D8D

Memory Dump Source

Source File: 00000001.00000002.422151708.0000000000A71000.00000020.00020000.sdmp, Offset: 00A70000, based on PE: true

Associated: 00000001.00000002.422117330.0000000000A70000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422651142.0000000000B5D000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422716671.0000000000B9A000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422731871.0000000000B9D000.00000008.00020000.sdmp Download File
Associated: 00000001.00000002.422740097.0000000000BA0000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422749600.0000000000BA4000.00000002.00020000.sdmp Download File

Similarity

API ID: AddressProc$FilePath$AppendExistsLibraryLoadModuleNameRemoveSpecVersion
String ID: 360NetUL.dll$HttpInit$HttpUninit$InitByDllPath HasMsSign failed$gzip$ungzip$zlib_compress$zlib_compressBound$zlib_uncompress
API String ID: 645611663-637636299
Opcode ID: ffbd34a23deb2dd0499358437a27aef2e3669e51c36fe35cb41263bdd6b14dfc
Instruction ID: a765aa694aec237b06d28fb7041a1a98034c65c6dfa0cff010ba762833f134d7
Opcode Fuzzy Hash: ffbd34a23deb2dd0499358437a27aef2e3669e51c36fe35cb41263bdd6b14dfc
Instruction Fuzzy Hash: 1E418BB1E40719ABDB20DF74DC09B9AB7B8BB04310F5046A6E518D3692DB74E990CF91

Uniqueness

Uniqueness Score: -1.00%

Function 00A84F80, Relevance: 30.1, APIs: 3, Strings: 14, Instructions: 381COMMON

Download Yara Rule

APIs

SHBrowseForFolderW.SHELL32(?), ref: 00A852CF
SHGetPathFromIDListW.SHELL32(00000000,?), ref: 00A852FD

Part of subcall function 00A745F0: GetProcessHeap.KERNEL32(00AA5638,F084A4B2), ref: 00A74601

Part of subcall function 00A74130: FindResourceExW.KERNEL32(00000000,00000006,?,00000000,00000000,00B5DAF8,?,?,?,?,00A736E1,00B5DAF8,?,?,?,00B5DAF8), ref: 00A74186
Part of subcall function 00A74130: FindResourceW.KERNEL32(00000000,00B5DAF8,00000006,?,00B5DAF8), ref: 00A741C4

DestroyWindow.USER32(FFFFFFFF,?,80004005,?,protocol), ref: 00A85508

Strings

link, xrefs: 00A84FD6
close, xrefs: 00A850E7, 00A85137
finish, xrefs: 00A8540F, 00A85484
target_dir, xrefs: 00A85356
play_at_exit, xrefs: 00A85449
selectchanged, xrefs: 00A84FF3
agree, xrefs: 00A85022, 00A8505D
protocol, xrefs: 00A851A4
install, xrefs: 00A850AA, 00A8515A
play, xrefs: 00A853BE, 00A853F3
http://wan.ludashi.com/pageV2/protocol?type=register, xrefs: 00A851F1, 00A85208
select_dir, xrefs: 00A8523A
\WdGame_%s, xrefs: 00A85330
click, xrefs: 00A84FBB

Memory Dump Source

Source File: 00000001.00000002.422151708.0000000000A71000.00000020.00020000.sdmp, Offset: 00A70000, based on PE: true

Associated: 00000001.00000002.422117330.0000000000A70000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422651142.0000000000B5D000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422716671.0000000000B9A000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422731871.0000000000B9D000.00000008.00020000.sdmp Download File
Associated: 00000001.00000002.422740097.0000000000BA0000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422749600.0000000000BA4000.00000002.00020000.sdmp Download File

Similarity

API ID: FindResource$BrowseDestroyFolderFromHeapListPathProcessWindow
String ID: \WdGame_%s$agree$click$close$finish$http://wan.ludashi.com/pageV2/protocol?type=register$install$link$play$play_at_exit$protocol$select_dir$selectchanged$target_dir
API String ID: 2792984-1282401476
Opcode ID: 7a19fb3fc8ae07bf574db7a2add2933739787e9ff3d572b23e182e27dd239213
Instruction ID: 7c80d280761b547dff97b5d8edd959d3ef3bc48bba6aca67249a5c49ef58e3d3
Opcode Fuzzy Hash: 7a19fb3fc8ae07bf574db7a2add2933739787e9ff3d572b23e182e27dd239213
Instruction Fuzzy Hash: 3BE1F170E407049BDB14FB74CD15FAEB3F5AF45314F004198A91AAB2D2EF749A88CB55

Uniqueness

Uniqueness Score: -1.00%

Function 00AC86F0, Relevance: 30.0, APIs: 13, Strings: 4, Instructions: 288windowCOMMON

Download Yara Rule

APIs

GetWindowLongW.USER32(00000000,000000F0), ref: 00AC8728
SetWindowLongW.USER32 ref: 00AC8743
GetClientRect.USER32 ref: 00AC8755
SetWindowPos.USER32(00000000,00000000,00A7828E,?,?,?,00000020), ref: 00AC877B

Part of subcall function 00ABC700: GetDC.USER32(?), ref: 00ABC70D
Part of subcall function 00ABC700: LoadLibraryW.KERNEL32(Dwmapi.dll,?,?,00000000,?,00AC7C82,?,?,?,?), ref: 00ABC732
Part of subcall function 00ABC700: GetProcAddress.KERNEL32(00000000,DwmIsCompositionEnabled), ref: 00ABC744
Part of subcall function 00ABC700: FreeLibrary.KERNEL32(00000000,?,00000000,?,00AC7C82,?,?,?,?), ref: 00ABC752

FindResourceW.KERNEL32(00000000,00000000,?,?), ref: 00AC87DF
LoadResource.KERNEL32(00000000,00000000,?,?), ref: 00AC87F6
FreeResource.KERNEL32(00000000,?,?), ref: 00AC8807
SizeofResource.KERNEL32(00000000,00000000,?,?), ref: 00AC8818
LockResource.KERNEL32(?,00000000), ref: 00AC8841
FreeResource.KERNEL32(00000000), ref: 00AC8857
MessageBoxW.USER32(00000000,00B64160,Duilib,00000010), ref: 00AC8959
ExitProcess.KERNEL32 ref: 00AC8961
GetParent.USER32(?), ref: 00AC8A22

Strings

Duilib, xrefs: 00AC894E
ZIPRES, xrefs: 00AC87D0
file='share/shadow.png' corner='4,2,4,6' hole='true', xrefs: 00AC89FB, 00AC8A02
xml, xrefs: 00AC88F3

Memory Dump Source

Source File: 00000001.00000002.422151708.0000000000A71000.00000020.00020000.sdmp, Offset: 00A70000, based on PE: true

Associated: 00000001.00000002.422117330.0000000000A70000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422651142.0000000000B5D000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422716671.0000000000B9A000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422731871.0000000000B9D000.00000008.00020000.sdmp Download File
Associated: 00000001.00000002.422740097.0000000000BA0000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422749600.0000000000BA4000.00000002.00020000.sdmp Download File

Similarity

API ID: Resource$FreeWindow$LibraryLoadLong$AddressClientExitFindLockMessageParentProcProcessRectSizeof
String ID: Duilib$ZIPRES$file='share/shadow.png' corner='4,2,4,6' hole='true'$xml
API String ID: 4224122098-4050673474
Opcode ID: 216c7f426e37cfb87b2fc0340fdaa8cf03a2d4a198f68a139f2b238284d9784b
Instruction ID: 6f40c81d379bcf2fed75b0d0af1fd81ff046303274e276ad45c893db4129af8c
Opcode Fuzzy Hash: 216c7f426e37cfb87b2fc0340fdaa8cf03a2d4a198f68a139f2b238284d9784b
Instruction Fuzzy Hash: 15A18371A00245AFDB19EB74DD56FBE77A9AF55301F0402ACF506E3292EF389A04CB61

Uniqueness

Uniqueness Score: -1.00%

Function 00AABC10, Relevance: 30.0, APIs: 16, Strings: 1, Instructions: 206commemoryCOMMON

Download Yara Rule

APIs

CoInitialize.OLE32(00000000), ref: 00AABC43
CoInitializeSecurity.OLE32(00000000,000000FF,00000000,00000000,00000006,00000003,00000000,00000000,00000000), ref: 00AABC72
CoCreateInstance.OLE32(00B78724,00000000,00000001,00B67200,00000000), ref: 00AABC98
VariantInit.OLEAUT32(?), ref: 00AABCB7
VariantInit.OLEAUT32(?), ref: 00AABCCC
VariantInit.OLEAUT32(?), ref: 00AABCE1
VariantInit.OLEAUT32(?), ref: 00AABCF9
VariantClear.OLEAUT32(?), ref: 00AABD47
VariantClear.OLEAUT32(?), ref: 00AABD4D
VariantClear.OLEAUT32(?), ref: 00AABD53
VariantClear.OLEAUT32(?), ref: 00AABD59
SysAllocString.OLEAUT32(00B5FD18), ref: 00AABD72

Strings

LDSGameCenter, xrefs: 00AABC27

Memory Dump Source

Source File: 00000001.00000002.422151708.0000000000A71000.00000020.00020000.sdmp, Offset: 00A70000, based on PE: true

Associated: 00000001.00000002.422117330.0000000000A70000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422651142.0000000000B5D000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422716671.0000000000B9A000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422731871.0000000000B9D000.00000008.00020000.sdmp Download File
Associated: 00000001.00000002.422740097.0000000000BA0000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422749600.0000000000BA4000.00000002.00020000.sdmp Download File

Similarity

API ID: Variant$ClearInit$Initialize$AllocCreateInstanceSecurityString
String ID: LDSGameCenter
API String ID: 3792334-2851752415
Opcode ID: 7cd301c53deaddd7f4ace24b2f1c7313b847f6ad1bbab840c99c9ecb26feecb0
Instruction ID: 76a00046980660ff1875842bd8ccdd7eb911d0c10794a72bad254dd8fcd5a8ad
Opcode Fuzzy Hash: 7cd301c53deaddd7f4ace24b2f1c7313b847f6ad1bbab840c99c9ecb26feecb0
Instruction Fuzzy Hash: 1971A331D04349DBDB11DBB8CD45BEEBBB8EF59314F108259E914B7291EB706A81CBA0

Uniqueness

Uniqueness Score: -1.00%

Function 00AE45A0, Relevance: 28.1, APIs: 10, Strings: 6, Instructions: 137stringCOMMON

Download Yara Rule

APIs

IsWindow.USER32(?), ref: 00AE45CA
CopyRect.USER32 ref: 00AE45FD
GetWindowRect.USER32 ref: 00AE460A
SetWindowLongW.USER32 ref: 00AE4659
SetPropW.USER32(?,{9A3F714D-4222-434a-B135-B2193DF9E5F7},00000000), ref: 00AE466E
SetPropW.USER32(?,{B429CC21-67FB-4b0b-A990-0E6207AACDD7},?), ref: 00AE467B
SetPropW.USER32(?,{4FB0E392-291F-4b72-85F3-76A46E203D87},?), ref: 00AE46A3
lstrcpynW.KERNEL32(00000000,00000000,?), ref: 00AE46EE
SetPropW.USER32(?,{A46357D6-233E-4a16-A174-C1BA5DEF1894},00000000), ref: 00AE46FD
SetPropW.USER32(?,{B6171802-2F45-49d2-B98F-EAC800C3CD37},?), ref: 00AE470D

Strings

ShadowWindow, xrefs: 00AE4641
{B6171802-2F45-49d2-B98F-EAC800C3CD37}, xrefs: 00AE4705
{A46357D6-233E-4a16-A174-C1BA5DEF1894}, xrefs: 00AE46F5
{4FB0E392-291F-4b72-85F3-76A46E203D87}, xrefs: 00AE469B
{B429CC21-67FB-4b0b-A990-0E6207AACDD7}, xrefs: 00AE4673
{9A3F714D-4222-434a-B135-B2193DF9E5F7}, xrefs: 00AE4666

Memory Dump Source

Source File: 00000001.00000002.422151708.0000000000A71000.00000020.00020000.sdmp, Offset: 00A70000, based on PE: true

Associated: 00000001.00000002.422117330.0000000000A70000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422651142.0000000000B5D000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422716671.0000000000B9A000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422731871.0000000000B9D000.00000008.00020000.sdmp Download File
Associated: 00000001.00000002.422740097.0000000000BA0000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422749600.0000000000BA4000.00000002.00020000.sdmp Download File

Similarity

API ID: Prop$Window$Rect$CopyLonglstrcpyn
String ID: ShadowWindow${4FB0E392-291F-4b72-85F3-76A46E203D87}${9A3F714D-4222-434a-B135-B2193DF9E5F7}${A46357D6-233E-4a16-A174-C1BA5DEF1894}${B429CC21-67FB-4b0b-A990-0E6207AACDD7}${B6171802-2F45-49d2-B98F-EAC800C3CD37}
API String ID: 1725082330-1964474075
Opcode ID: 5f1304d0f1dc6f639c9f4c0af3c8c2d2c32315106203d6fadec3fffd09f94aef
Instruction ID: 6408642fd4f3fd1423e93c07fce58b85136228602306b147a938a1c1854ef812
Opcode Fuzzy Hash: 5f1304d0f1dc6f639c9f4c0af3c8c2d2c32315106203d6fadec3fffd09f94aef
Instruction Fuzzy Hash: 62416E31A00206BFDB00DF69DD82FAEB7B4FF59301F104259F905A71A1DB71A961CB95

Uniqueness

Uniqueness Score: -1.00%

Function 00A87E90, Relevance: 26.7, APIs: 11, Strings: 4, Instructions: 473stringregistryCOMMON

Download Yara Rule

APIs

Part of subcall function 00A873F0: CharNextW.USER32(?,?,?,?), ref: 00A8742E
Part of subcall function 00A873F0: CharNextW.USER32(00000000,?,?), ref: 00A8745B
Part of subcall function 00A873F0: CharNextW.USER32(7742EEF0,?,?), ref: 00A87474
Part of subcall function 00A873F0: CharNextW.USER32(7742EEF0,?,?), ref: 00A8747F
Part of subcall function 00A873F0: CharNextW.USER32(?,?,?), ref: 00A874EE

lstrcmpiW.KERNEL32(?,Delete,?), ref: 00A87F30
lstrcmpiW.KERNEL32(?,ForceRemove), ref: 00A87F41
CharNextW.USER32(?,?,?,?,?), ref: 00A87FA7
lstrcmpiW.KERNEL32(?,00B62BA8,?,?,?,?), ref: 00A87FC9
lstrcmpiW.KERNEL32(?,NoRemove,?), ref: 00A88075
lstrcmpiW.KERNEL32(?,Val), ref: 00A880A3
RegDeleteValueW.ADVAPI32(00000000,?,?,?,?,?,?,?,?,00000000,00020006,?,?), ref: 00A881BF
RegCloseKey.ADVAPI32(00000000,?,?,?,?,?,?,?,00000000,00020006,?,?), ref: 00A881D7

Part of subcall function 00A87240: RegQueryInfoKeyW.ADVAPI32(?,00000000,00000000,00000000,?,00000000,00000000,00000000,00000000,00000000,00000000,00000000), ref: 00A87266

CharNextW.USER32(?), ref: 00A8821B

Part of subcall function 00A875B0: GetModuleHandleW.KERNEL32(Advapi32.dll,00B53238,LDSGameCenter,00000000,00B53238,?,00AABBD4,80000001,Software\Microsoft\Windows\CurrentVersion\Run,0002001F,00B53238), ref: 00A875D4
Part of subcall function 00A875B0: RegCloseKey.ADVAPI32(00000000,?,00AABBD4,80000001,Software\Microsoft\Windows\CurrentVersion\Run,0002001F,00B53238), ref: 00A87637

RegCloseKey.ADVAPI32(?,?,?), ref: 00A88497
RegCloseKey.ADVAPI32(00000000,?), ref: 00A88580

Strings

ForceRemove, xrefs: 00A87F38
NoRemove, xrefs: 00A8806F
Delete, xrefs: 00A87F20
Val, xrefs: 00A8809D

Memory Dump Source

Source File: 00000001.00000002.422151708.0000000000A71000.00000020.00020000.sdmp, Offset: 00A70000, based on PE: true

Associated: 00000001.00000002.422117330.0000000000A70000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422651142.0000000000B5D000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422716671.0000000000B9A000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422731871.0000000000B9D000.00000008.00020000.sdmp Download File
Associated: 00000001.00000002.422740097.0000000000BA0000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422749600.0000000000BA4000.00000002.00020000.sdmp Download File

Similarity

API ID: CharNext$lstrcmpi$Close$DeleteHandleInfoModuleQueryValue
String ID: Delete$ForceRemove$NoRemove$Val
API String ID: 3072072224-1781481701
Opcode ID: 6589550471db5335aa3fe61ffee8b40c57039f324946cd4386163eed11219d3d
Instruction ID: 0805bb2799ebf3ee019390bae14eb6183055775d083272f437413156338260a8
Opcode Fuzzy Hash: 6589550471db5335aa3fe61ffee8b40c57039f324946cd4386163eed11219d3d
Instruction Fuzzy Hash: D702C571D01225ABDB35BF64CD58BAEB6B4EF14700F5001E9E905A7290EF78DE84CB91

Uniqueness

Uniqueness Score: -1.00%

Function 00A7E34B, Relevance: 26.7, APIs: 5, Strings: 10, Instructions: 431COMMON

Download Yara Rule

APIs

Part of subcall function 00A745F0: GetProcessHeap.KERNEL32(00AA5638,F084A4B2), ref: 00A74601

Concurrency::cancel_current_task.LIBCPMT ref: 00A7E89E
Concurrency::cancel_current_task.LIBCPMT ref: 00A7E8B7
Concurrency::cancel_current_task.LIBCPMT ref: 00A7E8BC
Concurrency::cancel_current_task.LIBCPMT ref: 00A7E8CB
Concurrency::cancel_current_task.LIBCPMT ref: 00A7E8D0

Part of subcall function 00A74130: FindResourceExW.KERNEL32(00000000,00000006,?,00000000,00000000,00B5DAF8,?,?,?,?,00A736E1,00B5DAF8,?,?,?,00B5DAF8), ref: 00A74186
Part of subcall function 00A74130: FindResourceW.KERNEL32(00000000,00B5DAF8,00000006,?,00B5DAF8), ref: 00A741C4

Strings

CInstallHelper::_GetConfigInfoFromServer, get '%s' failed, xrefs: 00A7E443
http://wan.ludashi.com/cms/newbuy/microend.php?game_id=%s&channel=%s&pid=%s&subpid=%s, xrefs: 00A7E36F
msg, xrefs: 00A7E5CD
data, xrefs: 00A7E6CD
CInstallHelper::_GetConfigInfoFromServer, parse config failed, '%s', xrefs: 00A7E793
CInstallHelper::_GetConfigInfoFromServer, error=%s, msg=%s, xrefs: 00A7E5E6
CInstallHelper::_GetConfigInfoFromServer, parse json failed, '%s', xrefs: 00A7E52F
get_info_fail, xrefs: 00A7E46F, 00A7E556, 00A7E612, 00A7E70F, 00A7E7BF
errno, xrefs: 00A7E5AF
CInstallHelper::_GetConfigInfoFromServer, no data, xrefs: 00A7E6E3

Memory Dump Source

Source File: 00000001.00000002.422151708.0000000000A71000.00000020.00020000.sdmp, Offset: 00A70000, based on PE: true

Associated: 00000001.00000002.422117330.0000000000A70000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422651142.0000000000B5D000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422716671.0000000000B9A000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422731871.0000000000B9D000.00000008.00020000.sdmp Download File
Associated: 00000001.00000002.422740097.0000000000BA0000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422749600.0000000000BA4000.00000002.00020000.sdmp Download File

Similarity

API ID: Concurrency::cancel_current_task$FindResource$HeapProcess
String ID: CInstallHelper::_GetConfigInfoFromServer, error=%s, msg=%s$CInstallHelper::_GetConfigInfoFromServer, get '%s' failed$CInstallHelper::_GetConfigInfoFromServer, no data$CInstallHelper::_GetConfigInfoFromServer, parse config failed, '%s'$CInstallHelper::_GetConfigInfoFromServer, parse json failed, '%s'$data$errno$get_info_fail$http://wan.ludashi.com/cms/newbuy/microend.php?game_id=%s&channel=%s&pid=%s&subpid=%s$msg
API String ID: 1353333805-2550322094
Opcode ID: 9c144016cae5dd13e3c91fe960c1cc685300426ef6fbf44557700890f4f3a956
Instruction ID: 817290bd7fab358c14c3eca17daab02d740b0f6d330321a736b72f7739fa1e75
Opcode Fuzzy Hash: 9c144016cae5dd13e3c91fe960c1cc685300426ef6fbf44557700890f4f3a956
Instruction Fuzzy Hash: 20F1BA71A01205DFDB00EBB8CD45BAEB7F5AF49314F14C198F519AB2A2DB749D04CB62

Uniqueness

Uniqueness Score: -1.00%

Function 00A989C0, Relevance: 24.2, APIs: 16, Instructions: 174synchronizationthreadCOMMON

Download Yara Rule

APIs

InitializeCriticalSection.KERNEL32(F084A4B2,F084A4B2), ref: 00A989EB

Part of subcall function 00A8EB40: EnterCriticalSection.KERNEL32(?,F084A4B2), ref: 00A8EB72

EnterCriticalSection.KERNEL32(?), ref: 00A98AA6
GetCurrentThreadId.KERNEL32 ref: 00A98AA8
LeaveCriticalSection.KERNEL32(?), ref: 00A98ABD
WaitForSingleObject.KERNEL32(00000000,00FFFFFF), ref: 00A98AC7
EnterCriticalSection.KERNEL32(?), ref: 00A98AD8
LeaveCriticalSection.KERNEL32(?), ref: 00A98AEC
EnterCriticalSection.KERNEL32(?), ref: 00A98AF9
LeaveCriticalSection.KERNEL32(?), ref: 00A98BA7
EnterCriticalSection.KERNEL32(?), ref: 00A98BAD
GetCurrentThreadId.KERNEL32 ref: 00A98BAF
LeaveCriticalSection.KERNEL32(?), ref: 00A98BBE
WaitForSingleObject.KERNEL32(00000000,00FFFFFF), ref: 00A98BC8
EnterCriticalSection.KERNEL32(?), ref: 00A98BD9
LeaveCriticalSection.KERNEL32(?), ref: 00A98BED
DeleteCriticalSection.KERNEL32(?), ref: 00A98BFB

Memory Dump Source

Source File: 00000001.00000002.422151708.0000000000A71000.00000020.00020000.sdmp, Offset: 00A70000, based on PE: true

Associated: 00000001.00000002.422117330.0000000000A70000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422651142.0000000000B5D000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422716671.0000000000B9A000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422731871.0000000000B9D000.00000008.00020000.sdmp Download File
Associated: 00000001.00000002.422740097.0000000000BA0000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422749600.0000000000BA4000.00000002.00020000.sdmp Download File

Similarity

API ID: CriticalSection$Enter$Leave$CurrentObjectSingleThreadWait$DeleteInitialize
String ID:
API String ID: 1139718219-0
Opcode ID: dcbe410e7d1aa2a46636f467ac4f42f2cdab02644c6b99c570a6c5cb8abf3a9d
Instruction ID: e786a8a76421adaf8468f59bc35b9391d84079f9dedb62abef037a0ae27b3e85
Opcode Fuzzy Hash: dcbe410e7d1aa2a46636f467ac4f42f2cdab02644c6b99c570a6c5cb8abf3a9d
Instruction Fuzzy Hash: 7971C1B1D0121C9FDB10DFA4D898BDEBBB9FF09314F14816AE415A7290DB799909CF90

Uniqueness

Uniqueness Score: -1.00%

Function 00A759F0, Relevance: 21.4, APIs: 4, Strings: 8, Instructions: 384COMMON

Download Yara Rule

Strings

max, xrefs: 00A75C5E
?max, xrefs: 00A75D5E
hide, xrefs: 00A75AD0
min, xrefs: 00A75CB1
modal, xrefs: 00A75B1A
LITE_GAME_BOX_MAIN_WINDOW, xrefs: 00A75B72
restore, xrefs: 00A75D04
show, xrefs: 00A75A85

Memory Dump Source

Source File: 00000001.00000002.422151708.0000000000A71000.00000020.00020000.sdmp, Offset: 00A70000, based on PE: true

Associated: 00000001.00000002.422117330.0000000000A70000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422651142.0000000000B5D000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422716671.0000000000B9A000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422731871.0000000000B9D000.00000008.00020000.sdmp Download File
Associated: 00000001.00000002.422740097.0000000000BA0000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422749600.0000000000BA4000.00000002.00020000.sdmp Download File

Similarity

API ID: Window$Show
String ID: ?max$LITE_GAME_BOX_MAIN_WINDOW$hide$max$min$modal$restore$show
API String ID: 990937876-3165377647
Opcode ID: 88a46a50be38a51d9e1e5cfdf55d135875878c7215a57bd962f8b647951693a5
Instruction ID: 97f13e973c69543f12f3e43db5cf5688038e8192fa4bebcd965df0e30ec2974f
Opcode Fuzzy Hash: 88a46a50be38a51d9e1e5cfdf55d135875878c7215a57bd962f8b647951693a5
Instruction Fuzzy Hash: 24D11432E006059BEB24AF74CC45BBA72B6EF24754F55C179E90AAB281E7B2DD40C790

Uniqueness

Uniqueness Score: -1.00%

Function 00AC6CC0, Relevance: 21.2, APIs: 8, Strings: 4, Instructions: 183memoryCOMMON

Download Yara Rule

APIs

SysAllocString.OLEAUT32(00B5D980), ref: 00AC72E2
SysFreeString.OLEAUT32(00000000), ref: 00AC7300
IsWindow.USER32(?), ref: 00AC732E
FindWindowExW.USER32(?,00000000,Shell Embedding,00000000), ref: 00AC734D
FindWindowExW.USER32(00000000,00000000,Shell DocObject View,00000000), ref: 00AC735D
FindWindowExW.USER32(00000000,00000000,Internet Explorer_Server,00000000), ref: 00AC736D
GetWindowLongW.USER32(00000000,000000EC), ref: 00AC7378
SetWindowLongW.USER32 ref: 00AC7382

Strings

Shell DocObject View, xrefs: 00AC7355
Shell Embedding, xrefs: 00AC733A
Internet Explorer_Server, xrefs: 00AC7365
auto, xrefs: 00AC726E

Memory Dump Source

Source File: 00000001.00000002.422151708.0000000000A71000.00000020.00020000.sdmp, Offset: 00A70000, based on PE: true

Associated: 00000001.00000002.422117330.0000000000A70000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422651142.0000000000B5D000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422716671.0000000000B9A000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422731871.0000000000B9D000.00000008.00020000.sdmp Download File
Associated: 00000001.00000002.422740097.0000000000BA0000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422749600.0000000000BA4000.00000002.00020000.sdmp Download File

Similarity

API ID: Window$Find$LongString$AllocFree
String ID: Internet Explorer_Server$Shell DocObject View$Shell Embedding$auto
API String ID: 3549157430-2163142597
Opcode ID: 0f73b43009c2805c215fdd919cad069a36cf6f63eea651ed3af3ef137e079574
Instruction ID: 342a6d301414b5b1f29e9228cf6c857732c76c0c183b50e775df7bba9856cfdc
Opcode Fuzzy Hash: 0f73b43009c2805c215fdd919cad069a36cf6f63eea651ed3af3ef137e079574
Instruction Fuzzy Hash: 90516171A04315AFDB10DFA4C948FAEBBF8AF48711F158599F805EB290DB74A901CFA1

Uniqueness

Uniqueness Score: -1.00%

Function 00A7C170, Relevance: 21.2, APIs: 8, Strings: 4, Instructions: 176libraryloaderCOMMON

Download Yara Rule

APIs

Part of subcall function 00A7C890: GetCurrentThread.KERNEL32 ref: 00A7C8EC
Part of subcall function 00A7C890: OpenThreadToken.ADVAPI32(00000000,?,?,00000000,\..\360wpapp.exe,F084A4B2), ref: 00A7C8F3
Part of subcall function 00A7C890: GetTokenInformation.ADVAPI32(00000000,00000002,00000000,00000000,00000000,?,?,00000000,\..\360wpapp.exe), ref: 00A7C95C
Part of subcall function 00A7C890: GetLastError.KERNEL32(?,?,00000000,\..\360wpapp.exe), ref: 00A7C96F
Part of subcall function 00A7C890: GetTokenInformation.ADVAPI32(00000000,00000002,00000000,00000000,00000000,?), ref: 00A7C9A6
Part of subcall function 00A7C890: AllocateAndInitializeSid.ADVAPI32(00000000,00000002,00000020,00000220,00000000,00000000,00000000,00000000,00000000,00000000,?), ref: 00A7C9DE

LoadLibraryW.KERNEL32(?,00B62604,?,00000107), ref: 00A7C2C1
GetProcAddress.KERNEL32(00000000,00B6266C), ref: 00A7C2D9
LoadLibraryW.KERNEL32(kernel32.dll,?,?,F084A4B2), ref: 00A7C369
GetProcAddress.KERNEL32(00000000,Wow64DisableWow64FsRedirection), ref: 00A7C387
GetProcAddress.KERNEL32(00000000,Wow64RevertWow64FsRedirection), ref: 00A7C391
ShellExecuteExW.SHELL32(0000003C), ref: 00A7C41C
GetProcessId.KERNEL32(?), ref: 00A7C434
CloseHandle.KERNEL32(?), ref: 00A7C448

Part of subcall function 00A7F120: OpenSCManagerW.ADVAPI32(00000000,00000000,80000000,F084A4B2,00000000), ref: 00A7F17A
Part of subcall function 00A7F120: OpenServiceW.ADVAPI32(00000000,?,80000000), ref: 00A7F192
Part of subcall function 00A7F120: QueryServiceStatus.ADVAPI32(00000000,?), ref: 00A7F1B9

Strings

kernel32.dll, xrefs: 00A7C364
Wow64DisableWow64FsRedirection, xrefs: 00A7C37B
Wow64RevertWow64FsRedirection, xrefs: 00A7C38B
<, xrefs: 00A7C3C1

Memory Dump Source

Source File: 00000001.00000002.422151708.0000000000A71000.00000020.00020000.sdmp, Offset: 00A70000, based on PE: true

Associated: 00000001.00000002.422117330.0000000000A70000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422651142.0000000000B5D000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422716671.0000000000B9A000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422731871.0000000000B9D000.00000008.00020000.sdmp Download File
Associated: 00000001.00000002.422740097.0000000000BA0000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422749600.0000000000BA4000.00000002.00020000.sdmp Download File

Similarity

API ID: AddressOpenProcToken$InformationLibraryLoadServiceThread$AllocateCloseCurrentErrorExecuteHandleInitializeLastManagerProcessQueryShellStatus
String ID: <$Wow64DisableWow64FsRedirection$Wow64RevertWow64FsRedirection$kernel32.dll
API String ID: 797284464-3213996804
Opcode ID: 6bab895b10aa8b5442578a717486ee46442186ae494f93eeb6ac2416113ac12f
Instruction ID: 270071a01f38d76e49ef4fd4ee7b56c4a130b46468a068f1aae955711c342f4f
Opcode Fuzzy Hash: 6bab895b10aa8b5442578a717486ee46442186ae494f93eeb6ac2416113ac12f
Instruction Fuzzy Hash: BB7118B29017299BDB20DF64CD88B9EFBB4EB44710F1082EAE80DA7250DB754A84CF54

Uniqueness

Uniqueness Score: -1.00%

Function 00AAC350, Relevance: 21.1, APIs: 14, Instructions: 121processsleepsynchronizationCOMMON

Download Yara Rule

APIs

CreateToolhelp32Snapshot.KERNEL32(00000002,00000000), ref: 00AAC386
Process32FirstW.KERNEL32(00000000,?), ref: 00AAC3AC
CreateToolhelp32Snapshot.KERNEL32(00000008,?), ref: 00AAC3E7
Module32FirstW.KERNEL32 ref: 00AAC405
Module32NextW.KERNEL32 ref: 00AAC42C
CloseHandle.KERNEL32(00000000,00000000,?,00000008,?), ref: 00AAC43A
OpenProcess.KERNEL32(00000001,00000000,?), ref: 00AAC44E
TerminateProcess.KERNEL32(00000000,00000001), ref: 00AAC45F
Process32NextW.KERNEL32(?,0000022C), ref: 00AAC480
CloseHandle.KERNEL32(?), ref: 00AAC493
Sleep.KERNEL32(00000064), ref: 00AAC49F
WaitForSingleObject.KERNEL32(00000000,000003E8), ref: 00AAC4C5
GetLastError.KERNEL32 ref: 00AAC4CB
CloseHandle.KERNEL32(00000000), ref: 00AAC4D2

Memory Dump Source

Source File: 00000001.00000002.422151708.0000000000A71000.00000020.00020000.sdmp, Offset: 00A70000, based on PE: true

Associated: 00000001.00000002.422117330.0000000000A70000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422651142.0000000000B5D000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422716671.0000000000B9A000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422731871.0000000000B9D000.00000008.00020000.sdmp Download File
Associated: 00000001.00000002.422740097.0000000000BA0000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422749600.0000000000BA4000.00000002.00020000.sdmp Download File

Similarity

API ID: CloseHandle$CreateFirstModule32NextProcessProcess32SnapshotToolhelp32$ErrorLastObjectOpenSingleSleepTerminateWait
String ID:
API String ID: 2944208615-0
Opcode ID: ff2d6da59ad387bbd1d7740e8651595116c591baf8190e2036c09e14ac2fb12f
Instruction ID: c9ec4ce6387a4d5373099d0bb14c2c10e6186c24aa607f82262f3fac865a2150
Opcode Fuzzy Hash: ff2d6da59ad387bbd1d7740e8651595116c591baf8190e2036c09e14ac2fb12f
Instruction Fuzzy Hash: 3341A170901728AFEB209F709C08FAEB7B9AF4A711F0401D5F808A7191DB328E54CF55

Uniqueness

Uniqueness Score: -1.00%

Function 00B4A954, Relevance: 19.6, APIs: 13, Instructions: 114COMMON

Download Yara Rule

APIs

___free_lconv_mon.LIBCMT ref: 00B4A998

Part of subcall function 00B49D7C: _free.LIBCMT ref: 00B49D99
Part of subcall function 00B49D7C: _free.LIBCMT ref: 00B49DAB
Part of subcall function 00B49D7C: _free.LIBCMT ref: 00B49DBD
Part of subcall function 00B49D7C: _free.LIBCMT ref: 00B49DCF
Part of subcall function 00B49D7C: _free.LIBCMT ref: 00B49DE1
Part of subcall function 00B49D7C: _free.LIBCMT ref: 00B49DF3
Part of subcall function 00B49D7C: _free.LIBCMT ref: 00B49E05
Part of subcall function 00B49D7C: _free.LIBCMT ref: 00B49E17
Part of subcall function 00B49D7C: _free.LIBCMT ref: 00B49E29
Part of subcall function 00B49D7C: _free.LIBCMT ref: 00B49E3B
Part of subcall function 00B49D7C: _free.LIBCMT ref: 00B49E4D
Part of subcall function 00B49D7C: _free.LIBCMT ref: 00B49E5F
Part of subcall function 00B49D7C: _free.LIBCMT ref: 00B49E71

_free.LIBCMT ref: 00B4A98D

Part of subcall function 00B40176: RtlFreeHeap.NTDLL(00000000,00000000,?,00B4A4E9,?,00000000,?,00000000,?,00B4A78D,?,00000007,?,?,00B4AAEC,?), ref: 00B4018C
Part of subcall function 00B40176: GetLastError.KERNEL32(?,?,00B4A4E9,?,00000000,?,00000000,?,00B4A78D,?,00000007,?,?,00B4AAEC,?,?), ref: 00B4019E

_free.LIBCMT ref: 00B4A9AF
_free.LIBCMT ref: 00B4A9C4
_free.LIBCMT ref: 00B4A9CF
_free.LIBCMT ref: 00B4A9F1
_free.LIBCMT ref: 00B4AA04
_free.LIBCMT ref: 00B4AA12
_free.LIBCMT ref: 00B4AA1D
_free.LIBCMT ref: 00B4AA55
_free.LIBCMT ref: 00B4AA5C
_free.LIBCMT ref: 00B4AA79
_free.LIBCMT ref: 00B4AA91

Memory Dump Source

Source File: 00000001.00000002.422151708.0000000000A71000.00000020.00020000.sdmp, Offset: 00A70000, based on PE: true

Associated: 00000001.00000002.422117330.0000000000A70000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422651142.0000000000B5D000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422716671.0000000000B9A000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422731871.0000000000B9D000.00000008.00020000.sdmp Download File
Associated: 00000001.00000002.422740097.0000000000BA0000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422749600.0000000000BA4000.00000002.00020000.sdmp Download File

Similarity

API ID: _free$ErrorFreeHeapLast___free_lconv_mon
String ID:
API String ID: 161543041-0
Opcode ID: db5a47468ca0ff1529e665802e9d0b4e31ff429eb030a1f9097d097bfc146fbf
Instruction ID: a6ea030dae64effdfb2b73366af3bafb31e1cf2978147622c3bf5361f93719a4
Opcode Fuzzy Hash: db5a47468ca0ff1529e665802e9d0b4e31ff429eb030a1f9097d097bfc146fbf
Instruction Fuzzy Hash: 90314E325506049FEB31BA39D945B57B3E8EF00350F1484A9F298D72A1DF31AF80EB11

Uniqueness

Uniqueness Score: -1.00%

Function 6C2BC026, Relevance: 19.6, APIs: 13, Instructions: 114COMMON

Download Yara Rule

APIs

___free_lconv_mon.LIBCMT ref: 6C2BC06A

Part of subcall function 6C2BE1FC: _free.LIBCMT ref: 6C2BE219
Part of subcall function 6C2BE1FC: _free.LIBCMT ref: 6C2BE22B
Part of subcall function 6C2BE1FC: _free.LIBCMT ref: 6C2BE23D
Part of subcall function 6C2BE1FC: _free.LIBCMT ref: 6C2BE24F
Part of subcall function 6C2BE1FC: _free.LIBCMT ref: 6C2BE261
Part of subcall function 6C2BE1FC: _free.LIBCMT ref: 6C2BE273
Part of subcall function 6C2BE1FC: _free.LIBCMT ref: 6C2BE285
Part of subcall function 6C2BE1FC: _free.LIBCMT ref: 6C2BE297
Part of subcall function 6C2BE1FC: _free.LIBCMT ref: 6C2BE2A9
Part of subcall function 6C2BE1FC: _free.LIBCMT ref: 6C2BE2BB
Part of subcall function 6C2BE1FC: _free.LIBCMT ref: 6C2BE2CD
Part of subcall function 6C2BE1FC: _free.LIBCMT ref: 6C2BE2DF
Part of subcall function 6C2BE1FC: _free.LIBCMT ref: 6C2BE2F1

_free.LIBCMT ref: 6C2BC05F

Part of subcall function 6C2B90E5: HeapFree.KERNEL32(00000000,00000000,?,6C2BE391,?,00000000,?,00000000,?,6C2BE3B8,?,00000007,?,?,6C2BC1BE,?), ref: 6C2B90FB
Part of subcall function 6C2B90E5: GetLastError.KERNEL32(?,?,6C2BE391,?,00000000,?,00000000,?,6C2BE3B8,?,00000007,?,?,6C2BC1BE,?,?), ref: 6C2B910D

_free.LIBCMT ref: 6C2BC081
_free.LIBCMT ref: 6C2BC096
_free.LIBCMT ref: 6C2BC0A1
_free.LIBCMT ref: 6C2BC0C3
_free.LIBCMT ref: 6C2BC0D6
_free.LIBCMT ref: 6C2BC0E4
_free.LIBCMT ref: 6C2BC0EF
_free.LIBCMT ref: 6C2BC127
_free.LIBCMT ref: 6C2BC12E
_free.LIBCMT ref: 6C2BC14B
_free.LIBCMT ref: 6C2BC163

Memory Dump Source

Source File: 00000001.00000002.425332215.000000006C2B1000.00000020.00020000.sdmp, Offset: 6C2B0000, based on PE: true

Associated: 00000001.00000002.425298119.000000006C2B0000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.425472962.000000006C2C3000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.425510904.000000006C2CA000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.425525863.000000006C2CC000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.428429287.000000006CCCC000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.430600185.000000006D6CC000.00000002.00020000.sdmp Download File

Similarity

API ID: _free$ErrorFreeHeapLast___free_lconv_mon
String ID:
API String ID: 161543041-0
Opcode ID: 0b7791fc10c444117114ad706bc7bd6c2cedaa8a4596d7ee80d51dceaa082331
Instruction ID: 1b55575ad081194bc5fe1dffafaa5f568f8e9d568fc5bc3df60b6645010e2cd3
Opcode Fuzzy Hash: 0b7791fc10c444117114ad706bc7bd6c2cedaa8a4596d7ee80d51dceaa082331
Instruction Fuzzy Hash: 8A31433161470A9FEB21AA39D844B8A73F8AF4079DF208D19F85CF6A50DF31A894C710

Uniqueness

Uniqueness Score: -1.00%

Function 00AC09F0, Relevance: 19.6, APIs: 13, Instructions: 87windowCOMMON

Download Yara Rule

APIs

GetWindow.USER32(?,00000004), ref: 00AC0A0A
ShowWindow.USER32(?,00000001,?,?,?,?,?,00A7504D), ref: 00AC0A17
EnableWindow.USER32(00000000,00000000), ref: 00AC0A20
IsWindow.USER32(?), ref: 00AC0A3F
GetMessageW.USER32(?,00000000,00000000,00000000), ref: 00AC0A5A
EnableWindow.USER32(00000000,00000001), ref: 00AC0A78
SetFocus.USER32(00000000), ref: 00AC0A7F
TranslateMessage.USER32(?), ref: 00AC0AA1
DispatchMessageW.USER32 ref: 00AC0AAB
IsWindow.USER32(?), ref: 00AC0ABC
EnableWindow.USER32(00000000,00000001), ref: 00AC0AC9
SetFocus.USER32(00000000,?,?,?,?,?,00A7504D), ref: 00AC0AD0
PostQuitMessage.USER32(?), ref: 00AC0AE2

Memory Dump Source

Source File: 00000001.00000002.422151708.0000000000A71000.00000020.00020000.sdmp, Offset: 00A70000, based on PE: true

Associated: 00000001.00000002.422117330.0000000000A70000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422651142.0000000000B5D000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422716671.0000000000B9A000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422731871.0000000000B9D000.00000008.00020000.sdmp Download File
Associated: 00000001.00000002.422740097.0000000000BA0000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422749600.0000000000BA4000.00000002.00020000.sdmp Download File

Similarity

API ID: Window$Message$Enable$Focus$DispatchPostQuitShowTranslate
String ID:
API String ID: 200552106-0
Opcode ID: c9a41eaf9687e2b560b2ba30bde729c931392b092706fff2e20d536dd2b71660
Instruction ID: 1eaaa56f6243d4d1ebac604b34fa4e63a6d5dc08970c6bbdb55952986d8ade8c
Opcode Fuzzy Hash: c9a41eaf9687e2b560b2ba30bde729c931392b092706fff2e20d536dd2b71660
Instruction Fuzzy Hash: 91312F71900308EBDB20DBA4DD48FEEBBB8FF19346F154299F501A3160EB75A980CB61

Uniqueness

Uniqueness Score: -1.00%

Function 00A9CE50, Relevance: 19.6, APIs: 4, Strings: 7, Instructions: 311COMMON

Download Yara Rule

Strings

CWebBrowserLogic::_InvokeGetLocalData, invalid parameters, arg1=%d, xrefs: 00A9D1DD
CWebBrowserLogic::_InvokeGetLocalData, file not exists, xrefs: 00A9CF30
CWebBrowserLogic::_InvokeGetLocalData, parse file fail, json=%s, xrefs: 00A9CFD0
CWebBrowserLogic::_InvokeGetLocalData, empty key, xrefs: 00A9CED7
CWebBrowserLogic::_InvokeGetLocalData, read file fail, error=%d, xrefs: 00A9CF9A
CWebBrowserLogic::_InvokeGetLocalData, no parameter!, xrefs: 00A9CE90
\LocalStorage.json, xrefs: 00A9CF11

Memory Dump Source

Source File: 00000001.00000002.422151708.0000000000A71000.00000020.00020000.sdmp, Offset: 00A70000, based on PE: true

Associated: 00000001.00000002.422117330.0000000000A70000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422651142.0000000000B5D000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422716671.0000000000B9A000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422731871.0000000000B9D000.00000008.00020000.sdmp Download File
Associated: 00000001.00000002.422740097.0000000000BA0000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422749600.0000000000BA4000.00000002.00020000.sdmp Download File

Similarity

API ID: Exception@8Throw
String ID: CWebBrowserLogic::_InvokeGetLocalData, empty key$CWebBrowserLogic::_InvokeGetLocalData, file not exists$CWebBrowserLogic::_InvokeGetLocalData, invalid parameters, arg1=%d$CWebBrowserLogic::_InvokeGetLocalData, no parameter!$CWebBrowserLogic::_InvokeGetLocalData, parse file fail, json=%s$CWebBrowserLogic::_InvokeGetLocalData, read file fail, error=%d$\LocalStorage.json
API String ID: 2005118841-200553214
Opcode ID: 5c984507692695aec14fe94c6b6044edb8de61f1cbf6e65ca8ed9eda309040c4
Instruction ID: 3d3c34242cff99783a65382564334b150e6bad5ce388f79d2c4539d282890236
Opcode Fuzzy Hash: 5c984507692695aec14fe94c6b6044edb8de61f1cbf6e65ca8ed9eda309040c4
Instruction Fuzzy Hash: 37C1B172A00208DFDF10DFA4CD85BDEBBF4BF15310F648159E506AB292DB74AA45CB62

Uniqueness

Uniqueness Score: -1.00%

Function 00A83D90, Relevance: 17.9, APIs: 6, Strings: 4, Instructions: 368COMMON

Download Yara Rule

APIs

PathIsDirectoryW.SHLWAPI(00000010), ref: 00A83DE5
PathIsDirectoryW.SHLWAPI(00000010), ref: 00A83E35
GetFileAttributesW.KERNEL32(00000010,?,?,?,?), ref: 00A83E52
SetFileAttributesW.KERNEL32(00000010,00000000,?,?,?,?), ref: 00A83E65
RemoveDirectoryW.KERNEL32(00000010), ref: 00A83FE3
PathFileExistsW.SHLWAPI(00000010), ref: 00A83FEA

Strings

_RemoveInstalledDir, failed delete '%s', xrefs: 00A83FF9
_RemoveInstalledDir, delete '%s', xrefs: 00A83DF0, 00A83E44
%s\%s.lnk, xrefs: 00A83FAC
\Utils, xrefs: 00A83F30

Memory Dump Source

Source File: 00000001.00000002.422151708.0000000000A71000.00000020.00020000.sdmp, Offset: 00A70000, based on PE: true

Associated: 00000001.00000002.422117330.0000000000A70000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422651142.0000000000B5D000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422716671.0000000000B9A000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422731871.0000000000B9D000.00000008.00020000.sdmp Download File
Associated: 00000001.00000002.422740097.0000000000BA0000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422749600.0000000000BA4000.00000002.00020000.sdmp Download File

Similarity

API ID: DirectoryFilePath$Attributes$ExistsRemove
String ID: %s\%s.lnk$\Utils$_RemoveInstalledDir, delete '%s'$_RemoveInstalledDir, failed delete '%s'
API String ID: 1849506558-2155032775
Opcode ID: f3637b6a8ab73fdc31064a0f87eb794e807316eaaafdeaf2a0defef8206c19da
Instruction ID: b863aeed84db5e80296ccec37d1baf51157733dc59c2bdc47c8abf2171b6c905
Opcode Fuzzy Hash: f3637b6a8ab73fdc31064a0f87eb794e807316eaaafdeaf2a0defef8206c19da
Instruction Fuzzy Hash: 84D17D70900646DFE700EBBCCD49A5EBBF4AF55325F1482A9E414DB2A2EB74DD40CBA1

Uniqueness

Uniqueness Score: -1.00%

Function 00A788C1, Relevance: 17.7, APIs: 4, Strings: 6, Instructions: 203fileCOMMON

Download Yara Rule

APIs

CopyFileW.KERNEL32(?,?,00000000), ref: 00A78980
CopyFileW.KERNEL32(?,?,00000000), ref: 00A789AF

Strings

CChangeGameWindow::_SaveAllInfoAndFiles, save json to '%s' failed., xrefs: 00A789F3
CChangeGameWindow::_SaveAllInfoAndFiles, copy icon '%s' -> '%s' failed., xrefs: 00A789C3
d, xrefs: 00A78A4B
CChangeGameWindow::_SaveAllInfoAndFiles, copy skin '%s' -> '%s' failed., xrefs: 00A78994
F, xrefs: 00A78937
PxH, xrefs: 00A788E2

Memory Dump Source

Source File: 00000001.00000002.422151708.0000000000A71000.00000020.00020000.sdmp, Offset: 00A70000, based on PE: true

Associated: 00000001.00000002.422117330.0000000000A70000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422651142.0000000000B5D000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422716671.0000000000B9A000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422731871.0000000000B9D000.00000008.00020000.sdmp Download File
Associated: 00000001.00000002.422740097.0000000000BA0000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422749600.0000000000BA4000.00000002.00020000.sdmp Download File

Similarity

API ID: CopyFile
String ID: CChangeGameWindow::_SaveAllInfoAndFiles, copy icon '%s' -> '%s' failed.$CChangeGameWindow::_SaveAllInfoAndFiles, copy skin '%s' -> '%s' failed.$CChangeGameWindow::_SaveAllInfoAndFiles, save json to '%s' failed.$F$PxH$d
API String ID: 1304948518-2074318848
Opcode ID: 860455b77e95946a5b1e40c9c78f9c30f55c7b5e871034dd0bd18d63f16f13f3
Instruction ID: b74fc547f06d5ad45a902778b6bb2bbd1f2c006a33c0a3e18d5864e2456aae24
Opcode Fuzzy Hash: 860455b77e95946a5b1e40c9c78f9c30f55c7b5e871034dd0bd18d63f16f13f3
Instruction Fuzzy Hash: 07719271A01605DFDB05DBA8CC88BAEB7B4FF45311F19C1A9E4099B2A2EB349D05CF91

Uniqueness

Uniqueness Score: -1.00%

Function 00A8E510, Relevance: 17.7, APIs: 7, Strings: 3, Instructions: 177windowCOMMON

Download Yara Rule

APIs

FindResourceW.KERNEL32(00000000,00000000), ref: 00A8E56A
LoadResource.KERNEL32(00000000,00000000), ref: 00A8E57D
FreeResource.KERNEL32(00000000), ref: 00A8E58E
SizeofResource.KERNEL32(00000000,00000000), ref: 00A8E5A1
LockResource.KERNEL32(?,00000000), ref: 00A8E5C6
FreeResource.KERNEL32(00000000), ref: 00A8E5DC
MessageBoxW.USER32(00000000,00B64160,Duilib,00000010), ref: 00A8E6FE

Strings

Duilib, xrefs: 00A8E6F3
ZIPRES, xrefs: 00A8E55B
xml, xrefs: 00A8E694

Memory Dump Source

Source File: 00000001.00000002.422151708.0000000000A71000.00000020.00020000.sdmp, Offset: 00A70000, based on PE: true

Associated: 00000001.00000002.422117330.0000000000A70000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422651142.0000000000B5D000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422716671.0000000000B9A000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422731871.0000000000B9D000.00000008.00020000.sdmp Download File
Associated: 00000001.00000002.422740097.0000000000BA0000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422749600.0000000000BA4000.00000002.00020000.sdmp Download File

Similarity

API ID: Resource$Free$FindLoadLockMessageSizeof
String ID: Duilib$ZIPRES$xml
API String ID: 881160665-1461252140
Opcode ID: b4e3e54d77c129d6e6505553ce9a26264cd65817b5d9219863e6712c9a69e502
Instruction ID: 02d0280c62e865df464281ae603b59a3ca117abd2c8b7334e9de58ece32b8a6a
Opcode Fuzzy Hash: b4e3e54d77c129d6e6505553ce9a26264cd65817b5d9219863e6712c9a69e502
Instruction Fuzzy Hash: 3851C471A00215ABCB14EB74DD4AFEE7BA9AF55301F0401A8F40A93291EF74AE44CBA5

Uniqueness

Uniqueness Score: -1.00%

Function 00A86890, Relevance: 16.8, APIs: 11, Instructions: 338stringCOMMON

Download Yara Rule

APIs

Part of subcall function 00A873F0: CharNextW.USER32(?,?,?,?), ref: 00A8742E
Part of subcall function 00A873F0: CharNextW.USER32(00000000,?,?), ref: 00A8745B
Part of subcall function 00A873F0: CharNextW.USER32(7742EEF0,?,?), ref: 00A87474
Part of subcall function 00A873F0: CharNextW.USER32(7742EEF0,?,?), ref: 00A8747F
Part of subcall function 00A873F0: CharNextW.USER32(?,?,?), ref: 00A874EE

lstrcmpiW.KERNEL32(?,00B5DD48,?,F084A4B2,?,?,?,?,?,00B53E56,000000FF), ref: 00A86913
lstrcmpiW.KERNEL32(?,00B5DD64,?,?,?,?,?,00B53E56,000000FF), ref: 00A8692A

Memory Dump Source

Source File: 00000001.00000002.422151708.0000000000A71000.00000020.00020000.sdmp, Offset: 00A70000, based on PE: true

Associated: 00000001.00000002.422117330.0000000000A70000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422651142.0000000000B5D000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422716671.0000000000B9A000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422731871.0000000000B9D000.00000008.00020000.sdmp Download File
Associated: 00000001.00000002.422740097.0000000000BA0000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422749600.0000000000BA4000.00000002.00020000.sdmp Download File

Similarity

API ID: CharNext$lstrcmpi
String ID:
API String ID: 3586774192-0
Opcode ID: c5d4fd5b4794c6314fe3fc837ef2ed7e9f9104d5887358b2ec303b0126ca0248
Instruction ID: 0b7a62b43fc62bd172b18a746855a9624b5e32d1cac88952cbca6c9d84645d61
Opcode Fuzzy Hash: c5d4fd5b4794c6314fe3fc837ef2ed7e9f9104d5887358b2ec303b0126ca0248
Instruction Fuzzy Hash: 77D1C571A00219CBEB34EF14CD49BE9B7B4EF14300F1540E9EB49A7291DB709E95CB91

Uniqueness

Uniqueness Score: -1.00%

Function 00A8E1B0, Relevance: 16.6, APIs: 11, Instructions: 89windowCOMMON

Download Yara Rule

APIs

Part of subcall function 00AC86F0: GetWindowLongW.USER32(00000000,000000F0), ref: 00AC8728
Part of subcall function 00AC86F0: SetWindowLongW.USER32 ref: 00AC8743
Part of subcall function 00AC86F0: GetClientRect.USER32 ref: 00AC8755
Part of subcall function 00AC86F0: SetWindowPos.USER32(00000000,00000000,00A7828E,?,?,?,00000020), ref: 00AC877B
Part of subcall function 00AC86F0: FindResourceW.KERNEL32(00000000,00000000,?,?), ref: 00AC87DF
Part of subcall function 00AC86F0: LoadResource.KERNEL32(00000000,00000000,?,?), ref: 00AC87F6
Part of subcall function 00AC86F0: FreeResource.KERNEL32(00000000,?,?), ref: 00AC8807

Part of subcall function 00A8E360: DestroyWindow.USER32(00000000), ref: 00A8E41F

SetWindowTextW.USER32(?,?), ref: 00A8E1E5
DestroyIcon.USER32(?), ref: 00A8E210
DestroyIcon.USER32(?), ref: 00A8E227
GetSystemMetrics.USER32 ref: 00A8E23F
GetSystemMetrics.USER32 ref: 00A8E244
LoadImageW.USER32 ref: 00A8E252
GetSystemMetrics.USER32 ref: 00A8E266
GetSystemMetrics.USER32 ref: 00A8E26B
LoadImageW.USER32 ref: 00A8E273
SendMessageW.USER32(?,00000080,00000001,?), ref: 00A8E296
SendMessageW.USER32(?,00000080,00000000,00000000), ref: 00A8E2A3

Memory Dump Source

Source File: 00000001.00000002.422151708.0000000000A71000.00000020.00020000.sdmp, Offset: 00A70000, based on PE: true

Associated: 00000001.00000002.422117330.0000000000A70000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422651142.0000000000B5D000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422716671.0000000000B9A000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422731871.0000000000B9D000.00000008.00020000.sdmp Download File
Associated: 00000001.00000002.422740097.0000000000BA0000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422749600.0000000000BA4000.00000002.00020000.sdmp Download File

Similarity

API ID: Window$MetricsSystem$DestroyLoadResource$IconImageLongMessageSend$ClientFindFreeRectText
String ID:
API String ID: 3527752567-0
Opcode ID: 251540fa87dc5aec75ceca991bd2785dcfa8b3e034fbb0849dd53cb1eb407d67
Instruction ID: 9658222ad42c0ba6e58974d75ff6118a5e670560343b97396eb3ffe455e90058
Opcode Fuzzy Hash: 251540fa87dc5aec75ceca991bd2785dcfa8b3e034fbb0849dd53cb1eb407d67
Instruction Fuzzy Hash: DF314135610304BFEF11AF61DC85FAA7BA9FF48750F044165F9446F292CAB2AD10CBA0

Uniqueness

Uniqueness Score: -1.00%

Function 00ACEF00, Relevance: 16.1, APIs: 3, Strings: 6, Instructions: 365COMMON

Download Yara Rule

APIs

CharNextW.USER32(7742EEF0,?,?,?), ref: 00ACEFE7
CharNextW.USER32(?,?,?,?,?,00ACF37C,00ACE290,00000000,?,?,00ACE290,?,?,?,?), ref: 00ACF1E3
CharNextW.USER32(?,?,?,?,?,00ACF37C,00ACE290,00000000,?,?,00ACE290,?,?,?,?), ref: 00ACF22E

Strings

Unmatched closing tag, xrefs: 00ACF248, 00ACF25E
Error parsing element name, xrefs: 00ACF2AA
gfff, xrefs: 00ACF021
Expected start-tag closing, xrefs: 00ACF290
Expected start tag, xrefs: 00ACF2D4
Expected end-tag start, xrefs: 00ACF27A

Memory Dump Source

Source File: 00000001.00000002.422151708.0000000000A71000.00000020.00020000.sdmp, Offset: 00A70000, based on PE: true

Associated: 00000001.00000002.422117330.0000000000A70000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422651142.0000000000B5D000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422716671.0000000000B9A000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422731871.0000000000B9D000.00000008.00020000.sdmp Download File
Associated: 00000001.00000002.422740097.0000000000BA0000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422749600.0000000000BA4000.00000002.00020000.sdmp Download File

Similarity

API ID: CharNext
String ID: Error parsing element name$Expected end-tag start$Expected start tag$Expected start-tag closing$Unmatched closing tag$gfff
API String ID: 3213498283-2742108210
Opcode ID: 6d3215dccf1af4d33d8ad73c2f2775a3983fb6ec7866ab9e972c9bd9b29207dd
Instruction ID: a31f14dfdbcea6b02e49d49fd46eaa6f7617926b4b220fef28586c0c401fb486
Opcode Fuzzy Hash: 6d3215dccf1af4d33d8ad73c2f2775a3983fb6ec7866ab9e972c9bd9b29207dd
Instruction Fuzzy Hash: B9C1B2356002059FCB24EF18C890EB9B3F6EF99350B16447EE985CB391EB719D85CB90

Uniqueness

Uniqueness Score: -1.00%

Function 00A83E00, Relevance: 16.0, APIs: 5, Strings: 4, Instructions: 253COMMON

Download Yara Rule

APIs

PathIsDirectoryW.SHLWAPI(00000010), ref: 00A83E35
GetFileAttributesW.KERNEL32(00000010,?,?,?,?), ref: 00A83E52
SetFileAttributesW.KERNEL32(00000010,00000000,?,?,?,?), ref: 00A83E65
RemoveDirectoryW.KERNEL32(00000010), ref: 00A83FE3
PathFileExistsW.SHLWAPI(00000010), ref: 00A83FEA

Strings

_RemoveInstalledDir, failed delete '%s', xrefs: 00A83FF9
_RemoveInstalledDir, delete '%s', xrefs: 00A83E44
%s\%s.lnk, xrefs: 00A83FAC
\Utils, xrefs: 00A83F30

Memory Dump Source

Source File: 00000001.00000002.422151708.0000000000A71000.00000020.00020000.sdmp, Offset: 00A70000, based on PE: true

Associated: 00000001.00000002.422117330.0000000000A70000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422651142.0000000000B5D000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422716671.0000000000B9A000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422731871.0000000000B9D000.00000008.00020000.sdmp Download File
Associated: 00000001.00000002.422740097.0000000000BA0000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422749600.0000000000BA4000.00000002.00020000.sdmp Download File

Similarity

API ID: File$AttributesDirectoryPath$ExistsRemove
String ID: %s\%s.lnk$\Utils$_RemoveInstalledDir, delete '%s'$_RemoveInstalledDir, failed delete '%s'
API String ID: 3609344044-2155032775
Opcode ID: 43aa7cb8e03f23d30904d75f184a3c105a52078068f27b384af2433665992e38
Instruction ID: 699c855ad06080da4fdc2f79f73e21fbfd9bca242baddb7ee0830f4c7e4ac82e
Opcode Fuzzy Hash: 43aa7cb8e03f23d30904d75f184a3c105a52078068f27b384af2433665992e38
Instruction Fuzzy Hash: B1A19271900606DFE700EBBCCD49A5EBBF4AF55325F1482A9E418D72A2DB74DD40CBA1

Uniqueness

Uniqueness Score: -1.00%

Function 00A8C830, Relevance: 16.0, APIs: 3, Strings: 6, Instructions: 219COMMON

Download Yara Rule

APIs

GetTickCount.KERNEL32 ref: 00A8C85A
GetModuleHandleW.KERNEL32(00000000), ref: 00A8C968
GetTickCount.KERNEL32 ref: 00A8C9C6

Strings

exit, xrefs: 00A8CA1E
run, xrefs: 00A8C883
LastRunTime, xrefs: 00A8C922
HookInitialize, MH_Initialize failed, ret=%d, xrefs: 00A8C8CE
%lu, xrefs: 00A8C9FD
_sec, xrefs: 00A8CA48

Memory Dump Source

Source File: 00000001.00000002.422151708.0000000000A71000.00000020.00020000.sdmp, Offset: 00A70000, based on PE: true

Associated: 00000001.00000002.422117330.0000000000A70000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422651142.0000000000B5D000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422716671.0000000000B9A000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422731871.0000000000B9D000.00000008.00020000.sdmp Download File
Associated: 00000001.00000002.422740097.0000000000BA0000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422749600.0000000000BA4000.00000002.00020000.sdmp Download File

Similarity

API ID: CountTick$HandleModule
String ID: %lu$HookInitialize, MH_Initialize failed, ret=%d$LastRunTime$_sec$exit$run
API String ID: 503989783-2451729631
Opcode ID: 1ca916956ba446bed860840c2eb2e1fe6400d49215d413054a900d06b33e6e6f
Instruction ID: f50edcc5d9d0a2cd1bf213f48a5976a30a582823877a40d6d2ce93dfcf12d341
Opcode Fuzzy Hash: 1ca916956ba446bed860840c2eb2e1fe6400d49215d413054a900d06b33e6e6f
Instruction Fuzzy Hash: 8381D771A00605EFDB00EB78CE06B9EBBF4EF45714F1482A9F514A72D2EB749904CBA1

Uniqueness

Uniqueness Score: -1.00%

Function 00A75E60, Relevance: 15.9, APIs: 5, Strings: 4, Instructions: 160COMMON

Download Yara Rule

APIs

IsRectEmpty.USER32(?), ref: 00A75E99
IsRectEmpty.USER32(?), ref: 00A75ED7
IsRectEmpty.USER32(?), ref: 00A75F15
GetWindowRect.USER32 ref: 00A75FA1
MoveWindow.USER32(?,?,?,00000000,00000000,00000001,00A752D8,00000000,00000000,?,?), ref: 00A76008

Strings

failed_page, xrefs: 00A75F1B
browser_titlebar, xrefs: 00A75F57
loading_page, xrefs: 00A75EDD
browser_page, xrefs: 00A75E9F

Memory Dump Source

Source File: 00000001.00000002.422151708.0000000000A71000.00000020.00020000.sdmp, Offset: 00A70000, based on PE: true

Associated: 00000001.00000002.422117330.0000000000A70000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422651142.0000000000B5D000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422716671.0000000000B9A000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422731871.0000000000B9D000.00000008.00020000.sdmp Download File
Associated: 00000001.00000002.422740097.0000000000BA0000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422749600.0000000000BA4000.00000002.00020000.sdmp Download File

Similarity

API ID: Rect$Empty$Window$Move
String ID: browser_page$browser_titlebar$failed_page$loading_page
API String ID: 2342677217-2817872075
Opcode ID: a71870931e76c445e285a6601c643ee96a9f8558482b616907dab82a54cb5c46
Instruction ID: 75540f75bd86023c1e71c5481867386af3b53a97d67ee93b6ea6b4f8001a4dcf
Opcode Fuzzy Hash: a71870931e76c445e285a6601c643ee96a9f8558482b616907dab82a54cb5c46
Instruction Fuzzy Hash: 66516031E00A0A9FCB15DFB8C990AEEB7B5AF58304F14C269E945B7251DB70AD85CB90

Uniqueness

Uniqueness Score: -1.00%

Function 00AC01F0, Relevance: 15.9, APIs: 8, Strings: 1, Instructions: 118registryCOMMON

Download Yara Rule

APIs

GetClassInfoExW.USER32 ref: 00AC022B
GetClassInfoExW.USER32 ref: 00AC0247
RegisterClassExW.USER32 ref: 00AC0278
GetLastError.KERNEL32 ref: 00AC0283
LoadCursorW.USER32(00000000,00007F00), ref: 00AC02E8
RegisterClassW.USER32 ref: 00AC030D
GetLastError.KERNEL32(?,?,00A77D4E), ref: 00AC0318
CreateWindowExW.USER32 ref: 00AC0358

Strings

0, xrefs: 00AC0216

Memory Dump Source

Source File: 00000001.00000002.422151708.0000000000A71000.00000020.00020000.sdmp, Offset: 00A70000, based on PE: true

Associated: 00000001.00000002.422117330.0000000000A70000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422651142.0000000000B5D000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422716671.0000000000B9A000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422731871.0000000000B9D000.00000008.00020000.sdmp Download File
Associated: 00000001.00000002.422740097.0000000000BA0000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422749600.0000000000BA4000.00000002.00020000.sdmp Download File

Similarity

API ID: Class$ErrorInfoLastRegister$CreateCursorLoadWindow
String ID: 0
API String ID: 1185170849-4108050209
Opcode ID: e2a84b1f39e8c7edd3800318dbd13cd31a55f2312f68370a9d3d4af0689ce0ec
Instruction ID: 9ab5a0457401957c2fbfbc1e82989535d41435c0f9247197dfbeb52dab49ef92
Opcode Fuzzy Hash: e2a84b1f39e8c7edd3800318dbd13cd31a55f2312f68370a9d3d4af0689ce0ec
Instruction Fuzzy Hash: 5A412475A10208EFDB20DFA4D848FAEBBF8AF08305F144559F905E7261EB7599408BA0

Uniqueness

Uniqueness Score: -1.00%

Function 00A870D0, Relevance: 15.8, APIs: 6, Strings: 3, Instructions: 79registrylibraryloaderCOMMON

Download Yara Rule

APIs

GetModuleHandleW.KERNEL32(Advapi32.dll), ref: 00A870EA
GetProcAddress.KERNEL32(00000000,RegDeleteKeyTransactedW), ref: 00A870FA
RegDeleteKeyW.ADVAPI32(?,?), ref: 00A87122
GetModuleHandleW.KERNEL32(Advapi32.dll), ref: 00A87147
GetProcAddress.KERNEL32(00000000,RegDeleteKeyExW), ref: 00A87157
RegDeleteKeyW.ADVAPI32(?,?), ref: 00A87199

Strings

Advapi32.dll, xrefs: 00A870E5, 00A87142
RegDeleteKeyTransactedW, xrefs: 00A870F4
RegDeleteKeyExW, xrefs: 00A87151

Memory Dump Source

Source File: 00000001.00000002.422151708.0000000000A71000.00000020.00020000.sdmp, Offset: 00A70000, based on PE: true

Associated: 00000001.00000002.422117330.0000000000A70000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422651142.0000000000B5D000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422716671.0000000000B9A000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422731871.0000000000B9D000.00000008.00020000.sdmp Download File
Associated: 00000001.00000002.422740097.0000000000BA0000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422749600.0000000000BA4000.00000002.00020000.sdmp Download File

Similarity

API ID: AddressDeleteHandleModuleProc
String ID: Advapi32.dll$RegDeleteKeyExW$RegDeleteKeyTransactedW
API String ID: 588496660-1053001802
Opcode ID: 61b350735e7b6b2c67a0930ba2eae8e7b973d78644f24574fe7904f59f099d8e
Instruction ID: a07d7a2bb9d4d22d6788ee662ac2e33f13d28323757a8d295065c636e0f7f808
Opcode Fuzzy Hash: 61b350735e7b6b2c67a0930ba2eae8e7b973d78644f24574fe7904f59f099d8e
Instruction Fuzzy Hash: D521F636344300ABDB316F98EC09F89BBE4DB50792F24016AF204D34B0DBB9E894D7A5

Uniqueness

Uniqueness Score: -1.00%

Function 00AC6CF0, Relevance: 15.8, APIs: 6, Strings: 3, Instructions: 54COMMON

Download Yara Rule

APIs

IsWindow.USER32(?), ref: 00AC732E
FindWindowExW.USER32(?,00000000,Shell Embedding,00000000), ref: 00AC734D
FindWindowExW.USER32(00000000,00000000,Shell DocObject View,00000000), ref: 00AC735D
FindWindowExW.USER32(00000000,00000000,Internet Explorer_Server,00000000), ref: 00AC736D
GetWindowLongW.USER32(00000000,000000EC), ref: 00AC7378
SetWindowLongW.USER32 ref: 00AC7382

Strings

Shell DocObject View, xrefs: 00AC7355
Shell Embedding, xrefs: 00AC733A
Internet Explorer_Server, xrefs: 00AC7365

Memory Dump Source

Source File: 00000001.00000002.422151708.0000000000A71000.00000020.00020000.sdmp, Offset: 00A70000, based on PE: true

Associated: 00000001.00000002.422117330.0000000000A70000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422651142.0000000000B5D000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422716671.0000000000B9A000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422731871.0000000000B9D000.00000008.00020000.sdmp Download File
Associated: 00000001.00000002.422740097.0000000000BA0000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422749600.0000000000BA4000.00000002.00020000.sdmp Download File

Similarity

API ID: Window$Find$Long
String ID: Internet Explorer_Server$Shell DocObject View$Shell Embedding
API String ID: 189972333-2040739340
Opcode ID: 24f09542512d46683df95b27eba79719c1d3072a6528c775bf04c7b70822c9ea
Instruction ID: a82d3af5edf1b4e863e810628d2e5eec6c04e3a6297c2cfafd8c17f646201908
Opcode Fuzzy Hash: 24f09542512d46683df95b27eba79719c1d3072a6528c775bf04c7b70822c9ea
Instruction Fuzzy Hash: 7101D430684712A7EB205B255C05F9B3ADC6F24B12F15426AFD00FB2D0DF74E8019DA4

Uniqueness

Uniqueness Score: -1.00%

Function 00A9ABD0, Relevance: 14.2, APIs: 3, Strings: 5, Instructions: 224windowCOMMON

Download Yara Rule

APIs

Shell_NotifyIconW.SHELL32(00000002,?), ref: 00A9ACEC
DestroyWindow.USER32(?,F084A4B2), ref: 00A9ACF5

Strings

max, xrefs: 00A9AD6D, 00A9AD74
tray_click, xrefs: 00A9AE5B
restore, xrefs: 00A9AD53, 00A9AD8E
CPlayWindow::OnTrayIconMsg, tray clicked, xrefs: 00A9AE79
from_tray, xrefs: 00A9AEB9

Memory Dump Source

Source File: 00000001.00000002.422151708.0000000000A71000.00000020.00020000.sdmp, Offset: 00A70000, based on PE: true

Associated: 00000001.00000002.422117330.0000000000A70000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422651142.0000000000B5D000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422716671.0000000000B9A000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422731871.0000000000B9D000.00000008.00020000.sdmp Download File
Associated: 00000001.00000002.422740097.0000000000BA0000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422749600.0000000000BA4000.00000002.00020000.sdmp Download File

Similarity

API ID: DestroyIconNotifyShell_Window
String ID: CPlayWindow::OnTrayIconMsg, tray clicked$from_tray$max$restore$tray_click
API String ID: 3629275613-1597539003
Opcode ID: abc052c51d09c7a5f1c8831f2654ee89d1b868917efe0674ff2f64a51dcacc96
Instruction ID: 075ec32720cfd54460a19fdf2efe680428db6d4eb32f3543ec0d36747dd4e1ae
Opcode Fuzzy Hash: abc052c51d09c7a5f1c8831f2654ee89d1b868917efe0674ff2f64a51dcacc96
Instruction Fuzzy Hash: 7591AF707102149FEF28EF64C949BAA77F8FB54705F00419AE51A9B6D1DB70AE80CF92

Uniqueness

Uniqueness Score: -1.00%

Function 00A8DD6D, Relevance: 14.2, APIs: 2, Strings: 6, Instructions: 220COMMON

Download Yara Rule

APIs

DestroyWindow.USER32(00000000,close), ref: 00A8DEE7
ShowWindow.USER32(?,00000006,min), ref: 00A8DFC5

Strings

link, xrefs: 00A8DE62
close, xrefs: 00A8DE91
main_close, xrefs: 00A8DF39
min, xrefs: 00A8DF95
click, xrefs: 00A8DE4B
main_min, xrefs: 00A8DFF3

Memory Dump Source

Source File: 00000001.00000002.422151708.0000000000A71000.00000020.00020000.sdmp, Offset: 00A70000, based on PE: true

Associated: 00000001.00000002.422117330.0000000000A70000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422651142.0000000000B5D000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422716671.0000000000B9A000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422731871.0000000000B9D000.00000008.00020000.sdmp Download File
Associated: 00000001.00000002.422740097.0000000000BA0000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422749600.0000000000BA4000.00000002.00020000.sdmp Download File

Similarity

API ID: Window$DestroyShow
String ID: click$close$link$main_close$main_min$min
API String ID: 2729726617-933255069
Opcode ID: 932e85d0847aa72b0df65d1a724737bb631f55f995f645d5a0afc48da51c2d7f
Instruction ID: 1ce130229ef39c6ad537fc5f86ed17ae0b48cee497728e717716f1b1ce30e256
Opcode Fuzzy Hash: 932e85d0847aa72b0df65d1a724737bb631f55f995f645d5a0afc48da51c2d7f
Instruction Fuzzy Hash: 4951DF30A01304ABEB18EF74CE46FDABBF4AF05710F10419CB51AAB2E1DB746A44CB94

Uniqueness

Uniqueness Score: -1.00%

Function 00ABAE40, Relevance: 14.2, APIs: 7, Strings: 1, Instructions: 214libraryCOMMON

Download Yara Rule

APIs

GetStockObject.GDI32(00000011), ref: 00ABB0A2
GetObjectW.GDI32(00000000), ref: 00ABB0A9
CreateFontIndirectW.GDI32(?), ref: 00ABB0DE
CreatePen.GDI32(00000000,00000001,000000DC), ref: 00ABB14F
#17.COMCTL32(?,?,?), ref: 00ABB15A
LoadLibraryW.KERNEL32(msimg32.dll,?,?,?), ref: 00ABB165
InitializeCriticalSection.KERNEL32(?), ref: 00ABB1EC

Strings

msimg32.dll, xrefs: 00ABB160

Memory Dump Source

Source File: 00000001.00000002.422151708.0000000000A71000.00000020.00020000.sdmp, Offset: 00A70000, based on PE: true

Associated: 00000001.00000002.422117330.0000000000A70000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422651142.0000000000B5D000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422716671.0000000000B9A000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422731871.0000000000B9D000.00000008.00020000.sdmp Download File
Associated: 00000001.00000002.422740097.0000000000BA0000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422749600.0000000000BA4000.00000002.00020000.sdmp Download File

Similarity

API ID: CreateObject$CriticalFontIndirectInitializeLibraryLoadSectionStock
String ID: msimg32.dll
API String ID: 730405823-3287713914
Opcode ID: 109d33264aeedbe9500a86c4db68bd86163212246304764ffaba2425dc2b674e
Instruction ID: c378e1cef0e9d4c6e2c1cc593702518f8ef7e4d2a9595e8cbd7d4dd7243d70cf
Opcode Fuzzy Hash: 109d33264aeedbe9500a86c4db68bd86163212246304764ffaba2425dc2b674e
Instruction Fuzzy Hash: 37B15F70404B85DEE721DF74C959BDBBBF4AF15308F00894DE5AA5B2C2DBB52208CB61

Uniqueness

Uniqueness Score: -1.00%

Function 00A75810, Relevance: 14.2, APIs: 4, Strings: 4, Instructions: 178COMMON

Download Yara Rule

APIs

SystemParametersInfoW.USER32 ref: 00A75877
SystemParametersInfoW.USER32 ref: 00A758DF
GetWindowRect.USER32 ref: 00A75950
GetWindowRect.USER32 ref: 00A759C1

Strings

screen-center, xrefs: 00A75896
parent-rightbottom, xrefs: 00A7597C
parent-center, xrefs: 00A75902
screen-rightbottom, xrefs: 00A7582A

Memory Dump Source

Source File: 00000001.00000002.422151708.0000000000A71000.00000020.00020000.sdmp, Offset: 00A70000, based on PE: true

Associated: 00000001.00000002.422117330.0000000000A70000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422651142.0000000000B5D000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422716671.0000000000B9A000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422731871.0000000000B9D000.00000008.00020000.sdmp Download File
Associated: 00000001.00000002.422740097.0000000000BA0000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422749600.0000000000BA4000.00000002.00020000.sdmp Download File

Similarity

API ID: InfoParametersRectSystemWindow
String ID: parent-center$parent-rightbottom$screen-center$screen-rightbottom
API String ID: 85510744-4139651395
Opcode ID: 4820fe7a9494a6789df238e212a0b82a423b12d5618156150a2543a1f134811a
Instruction ID: ff68329bff61c4f396f7ab26f47bb06afa2a180f92807a914785e6cc544854a1
Opcode Fuzzy Hash: 4820fe7a9494a6789df238e212a0b82a423b12d5618156150a2543a1f134811a
Instruction Fuzzy Hash: 51514936E0060ADBDB10CF78CD45AAEB7B5EF25720B95C265E90AE7250E770EA40CB51

Uniqueness

Uniqueness Score: -1.00%

Function 00B446A4, Relevance: 13.8, APIs: 9, Instructions: 300COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.422151708.0000000000A71000.00000020.00020000.sdmp, Offset: 00A70000, based on PE: true

Associated: 00000001.00000002.422117330.0000000000A70000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422651142.0000000000B5D000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422716671.0000000000B9A000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422731871.0000000000B9D000.00000008.00020000.sdmp Download File
Associated: 00000001.00000002.422740097.0000000000BA0000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422749600.0000000000BA4000.00000002.00020000.sdmp Download File

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 673b0a17898b0e3f334a8d098da18a1ecbba29131712cbb2e8dacf02dc1b8fef
Instruction ID: 15583315b88c3ba8d383cb4061b029a792e433893b13c1a3eb92cd5821547d1d
Opcode Fuzzy Hash: 673b0a17898b0e3f334a8d098da18a1ecbba29131712cbb2e8dacf02dc1b8fef
Instruction Fuzzy Hash: A3C1E170A04259AFDF11DFA8D881BAEBBF0EF4A310F1441C8E554A7392CB349B51EB65

Uniqueness

Uniqueness Score: -1.00%

Function 6C2B9779, Relevance: 12.6, APIs: 4, Strings: 3, Instructions: 305COMMON

Download Yara Rule

APIs

_strrchr.LIBCMT ref: 6C2B9804
__alldvrm.LIBCMT ref: 6C2B9A05
__alldvrm.LIBCMT ref: 6C2B9A27

Strings

~j+l, xrefs: 6C2B99C6
~j+l, xrefs: 6C2B9783
~j+l, xrefs: 6C2B978F, 6C2B97EA, 6C2B9803, 6C2B9989

Memory Dump Source

Source File: 00000001.00000002.425332215.000000006C2B1000.00000020.00020000.sdmp, Offset: 6C2B0000, based on PE: true

Associated: 00000001.00000002.425298119.000000006C2B0000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.425472962.000000006C2C3000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.425510904.000000006C2CA000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.425525863.000000006C2CC000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.428429287.000000006CCCC000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.430600185.000000006D6CC000.00000002.00020000.sdmp Download File

Similarity

API ID: __alldvrm$_strrchr
String ID: ~j+l$~j+l$~j+l
API String ID: 1036877536-2993372461
Opcode ID: 7ed1815fc3b4b0a76c1443ec804e2c6429126901ff09b2b98cbac66725e481ae
Instruction ID: c005a07e536cf712397bb7bafbb0ab2dbb3a8c3c70af4613db7f7008415099be
Opcode Fuzzy Hash: 7ed1815fc3b4b0a76c1443ec804e2c6429126901ff09b2b98cbac66725e481ae
Instruction Fuzzy Hash: F4A17871A0478A9FE701EF28C8907AABBF4EF6239CF18426DEC84AB741C7349951C750

Uniqueness

Uniqueness Score: -1.00%

Function 00AA0350, Relevance: 12.5, APIs: 5, Strings: 2, Instructions: 249fileCOMMON

Download Yara Rule

APIs

Part of subcall function 00AA1A70: GetTempPathW.KERNEL32(00000104,00000010,F084A4B2,00000010,00000010), ref: 00AA1ACB

Part of subcall function 00A745F0: GetProcessHeap.KERNEL32(00AA5638,F084A4B2), ref: 00A74601

PathFindFileNameW.SHLWAPI(?), ref: 00AA0484
PathFileExistsW.SHLWAPI(?,00000000), ref: 00AA0523
DeleteFileW.KERNEL32(?), ref: 00AA052E
CopyFileW.KERNEL32(?,00000010,00000000), ref: 00AA056E
GetTempFileNameW.KERNEL32(?,~tm,00000000,?), ref: 00AA05B3

Strings

~tm, xrefs: 00AA05A8
%s\%s-%d, xrefs: 00AA0551

Memory Dump Source

Source File: 00000001.00000002.422151708.0000000000A71000.00000020.00020000.sdmp, Offset: 00A70000, based on PE: true

Associated: 00000001.00000002.422117330.0000000000A70000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422651142.0000000000B5D000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422716671.0000000000B9A000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422731871.0000000000B9D000.00000008.00020000.sdmp Download File
Associated: 00000001.00000002.422740097.0000000000BA0000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422749600.0000000000BA4000.00000002.00020000.sdmp Download File

Similarity

API ID: File$Path$NameTemp$CopyDeleteExistsFindHeapProcess
String ID: %s\%s-%d$~tm
API String ID: 934832287-1237362780
Opcode ID: 0805ecad4143f1550b6a85626e635b1a0af4b400d21d0b32e8f57acaa998a59a
Instruction ID: 06920e999e43c14f8fd6d0d8ed9132d8609660fec39c6918c258354164c8e126
Opcode Fuzzy Hash: 0805ecad4143f1550b6a85626e635b1a0af4b400d21d0b32e8f57acaa998a59a
Instruction Fuzzy Hash: 76919071A01605ABDB20DF68DD49B9EB7F4AF49321F1482E8A819E72D2DB349E40CF51

Uniqueness

Uniqueness Score: -1.00%

Function 00A81094, Relevance: 12.5, APIs: 4, Strings: 3, Instructions: 213fileCOMMON

Download Yara Rule

APIs

PathFileExistsW.SHLWAPI(?), ref: 00A810BF
DeleteFileW.KERNEL32(?), ref: 00A810CA
PathFileExistsW.SHLWAPI(?), ref: 00A810D1

Strings

%s\%s.%s, xrefs: 00A810AD
%s\%s-%d.%s, xrefs: 00A810F4
__WdGameTemp__, xrefs: 00A81290

Memory Dump Source

Source File: 00000001.00000002.422151708.0000000000A71000.00000020.00020000.sdmp, Offset: 00A70000, based on PE: true

Associated: 00000001.00000002.422117330.0000000000A70000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422651142.0000000000B5D000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422716671.0000000000B9A000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422731871.0000000000B9D000.00000008.00020000.sdmp Download File
Associated: 00000001.00000002.422740097.0000000000BA0000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422749600.0000000000BA4000.00000002.00020000.sdmp Download File

Similarity

API ID: File$ExistsPath$Delete
String ID: %s\%s-%d.%s$%s\%s.%s$__WdGameTemp__
API String ID: 3881821482-3792032342
Opcode ID: 8c038e63ecc7f4bfb57014fd92adbb30bead4cd6815d09eded5796c7020628c4
Instruction ID: 3a513bd861b1e42bcd9e888d5e3d0fbeede5357b8195539434194ee38bf5fc4d
Opcode Fuzzy Hash: 8c038e63ecc7f4bfb57014fd92adbb30bead4cd6815d09eded5796c7020628c4
Instruction Fuzzy Hash: 2271C1716002459FDB10EF68CD49BAEB7E8EF45325F0482A9E919DB291EB30DD05CB91

Uniqueness

Uniqueness Score: -1.00%

Function 00ACF390, Relevance: 12.4, APIs: 4, Strings: 3, Instructions: 194COMMON

Download Yara Rule

APIs

Part of subcall function 00ACF830: CharNextW.USER32(?,7742EEF0,00ACE28C,?,00ACF018,00ACE28C), ref: 00ACF857

CharNextW.USER32(00ACE28A,00ACE28A,00000000,00ACE28C,00000000,00ACE28C,00ACE28C), ref: 00ACF40C
CharNextW.USER32(?,00ACE28A,00000000,00ACE28C,00000000,00ACE28C,00ACE28C), ref: 00ACF441
CharNextW.USER32(?,00ACE28A,00000000,00ACE28C,00000000,00ACE28C,00ACE28C), ref: 00ACF492
CharNextW.USER32(00000002,00ACE288,00ACE28C,00000022,00ACE28A,00000000,00ACE28C,00000000,00ACE28C,00ACE28C), ref: 00ACF50B

Strings

Error while parsing attribute string, xrefs: 00ACF531
Error while parsing attributes, xrefs: 00ACF56C
Expected attribute value, xrefs: 00ACF555

Memory Dump Source

Source File: 00000001.00000002.422151708.0000000000A71000.00000020.00020000.sdmp, Offset: 00A70000, based on PE: true

Associated: 00000001.00000002.422117330.0000000000A70000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422651142.0000000000B5D000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422716671.0000000000B9A000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422731871.0000000000B9D000.00000008.00020000.sdmp Download File
Associated: 00000001.00000002.422740097.0000000000BA0000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422749600.0000000000BA4000.00000002.00020000.sdmp Download File

Similarity

API ID: CharNext
String ID: Error while parsing attribute string$Error while parsing attributes$Expected attribute value
API String ID: 3213498283-2127762582
Opcode ID: b23e78996fa83e22b77b73405c4e54612cf2ce5ee57012f56c95df9fc2d8a92a
Instruction ID: ef9b31210bc1b92b43fdfd648db2c6f4345f00e96568cb42c569cfb89407452e
Opcode Fuzzy Hash: b23e78996fa83e22b77b73405c4e54612cf2ce5ee57012f56c95df9fc2d8a92a
Instruction Fuzzy Hash: F851B1756002059FCB24DF1DE440A7AB3E6EFA8351B66447EE985CB390EA358C81C7A0

Uniqueness

Uniqueness Score: -1.00%

Function 00AAC4F0, Relevance: 12.4, APIs: 4, Strings: 3, Instructions: 181COMMON

Download Yara Rule

APIs

AssocQueryStringW.SHLWAPI(00000000,00000001,http,open,?,?), ref: 00AAC573
CloseHandle.KERNEL32(?,00B67298,00000000), ref: 00AAC6C4
CloseHandle.KERNEL32(?), ref: 00AAC6CC

Strings

open, xrefs: 00AAC565, 00AAC6F2
http, xrefs: 00AAC56A
D, xrefs: 00AAC68F

Memory Dump Source

Source File: 00000001.00000002.422151708.0000000000A71000.00000020.00020000.sdmp, Offset: 00A70000, based on PE: true

Associated: 00000001.00000002.422117330.0000000000A70000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422651142.0000000000B5D000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422716671.0000000000B9A000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422731871.0000000000B9D000.00000008.00020000.sdmp Download File
Associated: 00000001.00000002.422740097.0000000000BA0000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422749600.0000000000BA4000.00000002.00020000.sdmp Download File

Similarity

API ID: CloseHandle$AssocQueryString
String ID: D$http$open
API String ID: 3786467014-644999288
Opcode ID: e625f4207e50cb4706d9280154e876abe9d149b476cfc19f8c4631952b9dc942
Instruction ID: bfedc6899315d5d951cdd29994a7d08db8eff162a54bff43f6d217c5a094dbe9
Opcode Fuzzy Hash: e625f4207e50cb4706d9280154e876abe9d149b476cfc19f8c4631952b9dc942
Instruction Fuzzy Hash: AA61E231940219DBDB24DB24CD59BEEB7B8EF05710F0542E9E81AA72E1DB746E84CF50

Uniqueness

Uniqueness Score: -1.00%

Function 00AC5880, Relevance: 12.4, APIs: 4, Strings: 3, Instructions: 178memoryCOMMON

Download Yara Rule

APIs

VariantInit.OLEAUT32(F084A4B2), ref: 00AC5994
SysAllocString.OLEAUT32(00000000), ref: 00AC5A63
SysFreeString.OLEAUT32(00000000), ref: 00AC5A8C
VariantClear.OLEAUT32(F084A4B2), ref: 00AC5AB5

Strings

about:noop, xrefs: 00AC58F2
%lld, xrefs: 00AC5961
%s: %s, xrefs: 00AC59F1

Memory Dump Source

Source File: 00000001.00000002.422151708.0000000000A71000.00000020.00020000.sdmp, Offset: 00A70000, based on PE: true

Associated: 00000001.00000002.422117330.0000000000A70000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422651142.0000000000B5D000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422716671.0000000000B9A000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422731871.0000000000B9D000.00000008.00020000.sdmp Download File
Associated: 00000001.00000002.422740097.0000000000BA0000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422749600.0000000000BA4000.00000002.00020000.sdmp Download File

Similarity

API ID: StringVariant$AllocClearFreeInit
String ID: %lld$%s: %s$about:noop
API String ID: 760788290-1016184914
Opcode ID: ce5b8e276f55f6ee4da2bd0fbe1ce49c73574ef38d1935722d768722226a03e7
Instruction ID: c0ddb892f381f26d659a952eff5e449aa3031e6806e136d1918fa3e98d32d1f7
Opcode Fuzzy Hash: ce5b8e276f55f6ee4da2bd0fbe1ce49c73574ef38d1935722d768722226a03e7
Instruction Fuzzy Hash: A2618C319002189BDB20EB64CD45FEAB7F8BF05310F0886E9F559A7691DF70AA84CF90

Uniqueness

Uniqueness Score: -1.00%

Function 00AAA960, Relevance: 12.4, APIs: 3, Strings: 4, Instructions: 142registryCOMMON

Download Yara Rule

APIs

Part of subcall function 00A875B0: GetModuleHandleW.KERNEL32(Advapi32.dll,00B53238,LDSGameCenter,00000000,00B53238,?,00AABBD4,80000001,Software\Microsoft\Windows\CurrentVersion\Run,0002001F,00B53238), ref: 00A875D4
Part of subcall function 00A875B0: RegCloseKey.ADVAPI32(00000000,?,00AABBD4,80000001,Software\Microsoft\Windows\CurrentVersion\Run,0002001F,00B53238), ref: 00A87637

RegCloseKey.ADVAPI32(00000000,80000001,Software\Microsoft\Windows\CurrentVersion\Run,0002001F,F084A4B2), ref: 00AAAAFB

Part of subcall function 00A745F0: GetProcessHeap.KERNEL32(00AA5638,F084A4B2), ref: 00A74601

RegQueryValueExW.ADVAPI32(00000000,?,00000000,?,?,00000208), ref: 00AAAA51
RegSetValueExW.ADVAPI32(00000000,?,00000000,00000001,?,00000000), ref: 00AAAABE

Strings

LDSGameCenter, xrefs: 00AAA981
LDS-GAMECENTER, xrefs: 00AAAAC4
Software\Microsoft\Windows\CurrentVersion\Run, xrefs: 00AAA9B7
%s %s, xrefs: 00AAAA0D

Memory Dump Source

Source File: 00000001.00000002.422151708.0000000000A71000.00000020.00020000.sdmp, Offset: 00A70000, based on PE: true

Associated: 00000001.00000002.422117330.0000000000A70000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422651142.0000000000B5D000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422716671.0000000000B9A000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422731871.0000000000B9D000.00000008.00020000.sdmp Download File
Associated: 00000001.00000002.422740097.0000000000BA0000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422749600.0000000000BA4000.00000002.00020000.sdmp Download File

Similarity

API ID: CloseValue$HandleHeapModuleProcessQuery
String ID: %s %s$LDS-GAMECENTER$LDSGameCenter$Software\Microsoft\Windows\CurrentVersion\Run
API String ID: 4265173546-1638401296
Opcode ID: 8477a23c73147515620813a9ada8963f122ad93d86cfb11bb8f89cc670a4aeae
Instruction ID: 086ea28cf5c7b0dd6f1affc199bc9419ff395146ab97dd8d210c69922e616e51
Opcode Fuzzy Hash: 8477a23c73147515620813a9ada8963f122ad93d86cfb11bb8f89cc670a4aeae
Instruction Fuzzy Hash: 8C41FF31A00218ABDB20DB64DD89BAEB7F8EF15710F144199E819E72D1EB349E40CFA1

Uniqueness

Uniqueness Score: -1.00%

Function 00A9F380, Relevance: 12.4, APIs: 6, Strings: 1, Instructions: 116COMMON

Download Yara Rule

APIs

std::_Lockit::_Lockit.LIBCPMT ref: 00A9F3B3
std::_Lockit::_Lockit.LIBCPMT ref: 00A9F3D5
std::_Lockit::~_Lockit.LIBCPMT ref: 00A9F3F5
__Getctype.LIBCPMT ref: 00A9F49C
std::_Facet_Register.LIBCPMT ref: 00A9F4C5
std::_Lockit::~_Lockit.LIBCPMT ref: 00A9F4DD

Strings

ht, xrefs: 00A9F3BE, 00A9F4D4

Memory Dump Source

Source File: 00000001.00000002.422151708.0000000000A71000.00000020.00020000.sdmp, Offset: 00A70000, based on PE: true

Associated: 00000001.00000002.422117330.0000000000A70000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422651142.0000000000B5D000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422716671.0000000000B9A000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422731871.0000000000B9D000.00000008.00020000.sdmp Download File
Associated: 00000001.00000002.422740097.0000000000BA0000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422749600.0000000000BA4000.00000002.00020000.sdmp Download File

Similarity

API ID: std::_$Lockit$Lockit::_Lockit::~_$Facet_GetctypeRegister
String ID: ht
API String ID: 1102183713-4279113345
Opcode ID: 9236519b2d6b9217180fce59055bbc9a33b95ad818b496f4c2ae1d521cfc1111
Instruction ID: eb8720bd0ee5cf14226239ebe132dd237f06218989e63e79bc63b8493cde0be4
Opcode Fuzzy Hash: 9236519b2d6b9217180fce59055bbc9a33b95ad818b496f4c2ae1d521cfc1111
Instruction Fuzzy Hash: A241E071A00254CFDF21DF58D981BAFB7F8EF44710F148169E806AB252DB75A941CBC1

Uniqueness

Uniqueness Score: -1.00%

Function 00A82E33, Relevance: 12.3, APIs: 5, Strings: 2, Instructions: 94comCOMMON

Download Yara Rule

APIs

CLSIDFromProgID.OLE32(?,?), ref: 00A82E6A
CLSIDFromString.OLE32({B2E8D85E-C0C5-48DF-8DBC-1359B339AE32},?), ref: 00A82E83
CoUninitialize.OLE32 ref: 00A82EC4
CoCreateInstance.OLE32(?,00000000,00000001,00B5FD1C,?), ref: 00A82F13
CoUninitialize.OLE32 ref: 00A82F2E

Strings

{B2E8D85E-C0C5-48DF-8DBC-1359B339AE32}, xrefs: 00A82E7E
FANCY3DOCX.Fancy3DOCXCtrl.%d, xrefs: 00A82E54

Memory Dump Source

Source File: 00000001.00000002.422151708.0000000000A71000.00000020.00020000.sdmp, Offset: 00A70000, based on PE: true

Associated: 00000001.00000002.422117330.0000000000A70000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422651142.0000000000B5D000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422716671.0000000000B9A000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422731871.0000000000B9D000.00000008.00020000.sdmp Download File
Associated: 00000001.00000002.422740097.0000000000BA0000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422749600.0000000000BA4000.00000002.00020000.sdmp Download File

Similarity

API ID: FromUninitialize$CreateInstanceProgString
String ID: FANCY3DOCX.Fancy3DOCXCtrl.%d${B2E8D85E-C0C5-48DF-8DBC-1359B339AE32}
API String ID: 62597748-3779117095
Opcode ID: 4918ab9f9200882a16509d5b99d3f4da212113747597612a95c6ea266ae96814
Instruction ID: 922f25a02824d27af6f6072d8ca7dd3d339808832dd0992490dad609dc3b68df
Opcode Fuzzy Hash: 4918ab9f9200882a16509d5b99d3f4da212113747597612a95c6ea266ae96814
Instruction Fuzzy Hash: 48318131D04258DBEB10EBA8D845BFDBBB4FF15324F148169E815A7291EB34A985CB50

Uniqueness

Uniqueness Score: -1.00%

Function 00A7EFC0, Relevance: 12.3, APIs: 5, Strings: 2, Instructions: 91registrystringCOMMON

Download Yara Rule

APIs

wnsprintfW.SHLWAPI ref: 00A7F038
RegOpenKeyExW.ADVAPI32(80000002,?,00000000,00020219,?), ref: 00A7F05B
RegQueryValueExW.ADVAPI32(?,ServiceDll,00000000,?,?,00000210), ref: 00A7F0AC
lstrlenW.KERNEL32(?), ref: 00A7F0BD
lstrcpynW.KERNEL32(00B62604,?,00A7C2BA), ref: 00A7F0D3

Strings

ServiceDll, xrefs: 00A7F0A1
SYSTEM\CurrentControlSet\Services\%s\Parameters, xrefs: 00A7F027

Memory Dump Source

Source File: 00000001.00000002.422151708.0000000000A71000.00000020.00020000.sdmp, Offset: 00A70000, based on PE: true

Associated: 00000001.00000002.422117330.0000000000A70000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422651142.0000000000B5D000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422716671.0000000000B9A000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422731871.0000000000B9D000.00000008.00020000.sdmp Download File
Associated: 00000001.00000002.422740097.0000000000BA0000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422749600.0000000000BA4000.00000002.00020000.sdmp Download File

Similarity

API ID: OpenQueryValuelstrcpynlstrlenwnsprintf
String ID: SYSTEM\CurrentControlSet\Services\%s\Parameters$ServiceDll
API String ID: 3459261947-2144606380
Opcode ID: d564b0a12d1e28bc7b41bc8cebfd52f36a68fb0a5bf98234cdb96269ecd1d161
Instruction ID: b5937ede3f48d09aa093fe4eefeb5afa7f13c750ac9a7442a8d24f3315751242
Opcode Fuzzy Hash: d564b0a12d1e28bc7b41bc8cebfd52f36a68fb0a5bf98234cdb96269ecd1d161
Instruction Fuzzy Hash: 61314FB1940218ABDB20DFA4DC89FEEB7BCEB04710F4041A6F619E3281D770AA44CF54

Uniqueness

Uniqueness Score: -1.00%

Function 00B24051, Relevance: 12.3, APIs: 6, Strings: 1, Instructions: 87COMMON

Download Yara Rule

APIs

FindSITargetTypeInstance.LIBVCRUNTIME ref: 00B240A4
FindMITargetTypeInstance.LIBVCRUNTIME ref: 00B240BD
FindVITargetTypeInstance.LIBVCRUNTIME ref: 00B240C4
PMDtoOffset.LIBCMT ref: 00B240E3

Strings

Bad dynamic_cast!, xrefs: 00B24125

Memory Dump Source

Source File: 00000001.00000002.422151708.0000000000A71000.00000020.00020000.sdmp, Offset: 00A70000, based on PE: true

Associated: 00000001.00000002.422117330.0000000000A70000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422651142.0000000000B5D000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422716671.0000000000B9A000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422731871.0000000000B9D000.00000008.00020000.sdmp Download File
Associated: 00000001.00000002.422740097.0000000000BA0000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422749600.0000000000BA4000.00000002.00020000.sdmp Download File

Similarity

API ID: FindInstanceTargetType$Offset
String ID: Bad dynamic_cast!
API String ID: 1467055271-2956939130
Opcode ID: 6528e473a7524570c5421e375955d6286c30526cfdb55fcf735a64b7a5b19c8d
Instruction ID: 960b4fa43bfddbb7453c7bac06c44e9bca19dae19b651e68e3c82998e1ef66f8
Opcode Fuzzy Hash: 6528e473a7524570c5421e375955d6286c30526cfdb55fcf735a64b7a5b19c8d
Instruction Fuzzy Hash: E021F632A00225DFCF14DF64ED46AAF77F4EB84B20F1083D9EA19A7690D734EA408791

Uniqueness

Uniqueness Score: -1.00%

Function 00AC0080, Relevance: 12.1, APIs: 8, Instructions: 124COMMON

Download Yara Rule

APIs

GetWindowRect.USER32 ref: 00AC00A9
GetWindowLongW.USER32(00000000,000000F0), ref: 00AC00BB
GetParent.USER32(00000000), ref: 00AC00CC
GetWindow.USER32(00000000,00000004), ref: 00AC00D7
GetWindowLongW.USER32(00000000,000000F0), ref: 00AC00E6
SystemParametersInfoW.USER32 ref: 00AC0105
GetWindowRect.USER32 ref: 00AC011E
SetWindowPos.USER32(00000000,00000000,?,?,000000FF,000000FF,00000015), ref: 00AC019E

Memory Dump Source

Source File: 00000001.00000002.422151708.0000000000A71000.00000020.00020000.sdmp, Offset: 00A70000, based on PE: true

Associated: 00000001.00000002.422117330.0000000000A70000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422651142.0000000000B5D000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422716671.0000000000B9A000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422731871.0000000000B9D000.00000008.00020000.sdmp Download File
Associated: 00000001.00000002.422740097.0000000000BA0000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422749600.0000000000BA4000.00000002.00020000.sdmp Download File

Similarity

API ID: Window$LongRect$InfoParametersParentSystem
String ID:
API String ID: 1649471469-0
Opcode ID: 6ba938f5f1e6c96d311836a0acb90f76a6ea072cd93f9ca42999867f9fa15292
Instruction ID: 0f50c5fee0c229b28cb9f5886740adad8b5931030e9d3bcd4927d2a3ada25cc8
Opcode Fuzzy Hash: 6ba938f5f1e6c96d311836a0acb90f76a6ea072cd93f9ca42999867f9fa15292
Instruction Fuzzy Hash: 80416031E01619EBCB24CF78DE85FADB7B5EB49314F254359E915F7290EB20AD408750

Uniqueness

Uniqueness Score: -1.00%

Function 00AC0960, Relevance: 12.1, APIs: 8, Instructions: 51windowCOMMON

Download Yara Rule

APIs

GetSystemMetrics.USER32 ref: 00AC0977
GetSystemMetrics.USER32 ref: 00AC097C
LoadImageW.USER32 ref: 00AC0988
SendMessageW.USER32(?,00000080,00000001,00000000), ref: 00AC09A2
GetSystemMetrics.USER32 ref: 00AC09A8
GetSystemMetrics.USER32 ref: 00AC09AD
LoadImageW.USER32 ref: 00AC09BD
SendMessageW.USER32(?,00000080,00000000,00000000), ref: 00AC09D1

Memory Dump Source

Source File: 00000001.00000002.422151708.0000000000A71000.00000020.00020000.sdmp, Offset: 00A70000, based on PE: true

Associated: 00000001.00000002.422117330.0000000000A70000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422651142.0000000000B5D000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422716671.0000000000B9A000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422731871.0000000000B9D000.00000008.00020000.sdmp Download File
Associated: 00000001.00000002.422740097.0000000000BA0000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422749600.0000000000BA4000.00000002.00020000.sdmp Download File

Similarity

API ID: MetricsSystem$ImageLoadMessageSend
String ID:
API String ID: 530543073-0
Opcode ID: 01a6753b4c0ad784a1bcc15ef2ed41917577a428278f0601acb91fe2c109dedf
Instruction ID: 686285f67ec88d0996f8e0d800eb0ada70c62c3afa8c380657cb21674a233ed4
Opcode Fuzzy Hash: 01a6753b4c0ad784a1bcc15ef2ed41917577a428278f0601acb91fe2c109dedf
Instruction Fuzzy Hash: 1C016271680318BEE6209BA49D46FAA775CEB0CB51F004141B744EB1D1DAB5ED0087B8

Uniqueness

Uniqueness Score: -1.00%

Function 00AB58B0, Relevance: 10.8, APIs: 4, Strings: 2, Instructions: 267synchronizationCOMMON

Download Yara Rule

APIs

CreateEventW.KERNEL32(00000000,00000001,00000000,00000000), ref: 00AB5928
GetModuleHandleW.KERNEL32(00000000,00000000,?,?,?,?,?,?,?,?,?,?,?,00AB5852,00000014), ref: 00AB596B
WaitForMultipleObjects.KERNEL32(00000002,00000000,00000000,?,?,?,?,?,?,?,?,?,?,?,?,00AB5852), ref: 00AB5A41

Part of subcall function 00A745F0: GetProcessHeap.KERNEL32(00AA5638,F084A4B2), ref: 00A74601

WaitForSingleObject.KERNEL32(?,?,?,?,?,?,?,?,?,?,?,?,?,00AB5852,00000014), ref: 00AB5A4A

Strings

ungzip, xrefs: 00AB59B6
gzip, xrefs: 00AB59A8

Memory Dump Source

Source File: 00000001.00000002.422151708.0000000000A71000.00000020.00020000.sdmp, Offset: 00A70000, based on PE: true

Associated: 00000001.00000002.422117330.0000000000A70000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422651142.0000000000B5D000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422716671.0000000000B9A000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422731871.0000000000B9D000.00000008.00020000.sdmp Download File
Associated: 00000001.00000002.422740097.0000000000BA0000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422749600.0000000000BA4000.00000002.00020000.sdmp Download File

Similarity

API ID: Wait$CreateEventHandleHeapModuleMultipleObjectObjectsProcessSingle
String ID: gzip$ungzip
API String ID: 2218221642-4062267990
Opcode ID: 79bcb8ad198d5ff9fee74d630b3c24c08d1f973e4ddcc989c6a29bd57e1267c0
Instruction ID: 64f0b3bdcca79e7fd61afd98966007b1c19aa7145fea1779093e7475caf3fab0
Opcode Fuzzy Hash: 79bcb8ad198d5ff9fee74d630b3c24c08d1f973e4ddcc989c6a29bd57e1267c0
Instruction Fuzzy Hash: D3A18B71A00605DFDB10DF64C985BAEBBB9FF08750F104699E915AB3A2DB31ED04CB90

Uniqueness

Uniqueness Score: -1.00%

Function 00A98E30, Relevance: 10.7, APIs: 7, Instructions: 235COMMON

Download Yara Rule

APIs

_wcsstr.LIBVCRUNTIME ref: 00A98EB5
_wcsstr.LIBVCRUNTIME ref: 00A98EC9
_wcsstr.LIBVCRUNTIME ref: 00A98F6B

Memory Dump Source

Source File: 00000001.00000002.422151708.0000000000A71000.00000020.00020000.sdmp, Offset: 00A70000, based on PE: true

Associated: 00000001.00000002.422117330.0000000000A70000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422651142.0000000000B5D000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422716671.0000000000B9A000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422731871.0000000000B9D000.00000008.00020000.sdmp Download File
Associated: 00000001.00000002.422740097.0000000000BA0000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422749600.0000000000BA4000.00000002.00020000.sdmp Download File

Similarity

API ID: _wcsstr
String ID:
API String ID: 1512112989-0
Opcode ID: 0579406faeac06625b489be574c487955aa602b9fefad8c6d0c0c70111d35998
Instruction ID: b4fb875d9a3c23701ba1fec5efc4fe38e593eca920d4ea232012b0fda23d1302
Opcode Fuzzy Hash: 0579406faeac06625b489be574c487955aa602b9fefad8c6d0c0c70111d35998
Instruction Fuzzy Hash: 5E81B036E002169FCF24DFA8D981AAEB7F5FF89300B154559ED05AB214EB35AE01CB90

Uniqueness

Uniqueness Score: -1.00%

Function 00AC8B60, Relevance: 10.7, APIs: 3, Strings: 3, Instructions: 184COMMON

Download Yara Rule

APIs

ScreenToClient.USER32 ref: 00AC8B8F
GetClientRect.USER32 ref: 00AC8BA1
IsZoomed.USER32(00000000), ref: 00AC8BAF

Strings

ButtonUI, xrefs: 00AC8D05
TextUI, xrefs: 00AC8D37
OptionUI, xrefs: 00AC8D1E

Memory Dump Source

Source File: 00000001.00000002.422151708.0000000000A71000.00000020.00020000.sdmp, Offset: 00A70000, based on PE: true

Associated: 00000001.00000002.422117330.0000000000A70000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422651142.0000000000B5D000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422716671.0000000000B9A000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422731871.0000000000B9D000.00000008.00020000.sdmp Download File
Associated: 00000001.00000002.422740097.0000000000BA0000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422749600.0000000000BA4000.00000002.00020000.sdmp Download File

Similarity

API ID: Client$RectScreenZoomed
String ID: ButtonUI$OptionUI$TextUI
API String ID: 1298762932-513331901
Opcode ID: 630546ba47d48058a2daede88dca1e1c312c754a708c0b5cdfaaa7018be37df8
Instruction ID: 736cde9ed12afc4176f67830de98ec2e3e4178282ba4c355589c49e92e59c7ba
Opcode Fuzzy Hash: 630546ba47d48058a2daede88dca1e1c312c754a708c0b5cdfaaa7018be37df8
Instruction Fuzzy Hash: EA515D71E001199BCF14DBA8DA95FBEB3F5AF58300F51455AE806E7281EF39AD50CBA0

Uniqueness

Uniqueness Score: -1.00%

Function 00A9F500, Relevance: 10.7, APIs: 3, Strings: 3, Instructions: 155COMMON

Download Yara Rule

APIs

std::locale::_Init.LIBCPMT ref: 00A9F5E3
std::ios_base::_Addstd.LIBCPMT ref: 00A9F686
__CxxThrowException@8.LIBVCRUNTIME ref: 00A9F6E1

Strings

ios_base::badbit set, xrefs: 00A9F6A9, 00A9F6D2
ios_base::eofbit set, xrefs: 00A9F6B8
ios_base::failbit set, xrefs: 00A9F6B3

Memory Dump Source

Source File: 00000001.00000002.422151708.0000000000A71000.00000020.00020000.sdmp, Offset: 00A70000, based on PE: true

Associated: 00000001.00000002.422117330.0000000000A70000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422651142.0000000000B5D000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422716671.0000000000B9A000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422731871.0000000000B9D000.00000008.00020000.sdmp Download File
Associated: 00000001.00000002.422740097.0000000000BA0000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422749600.0000000000BA4000.00000002.00020000.sdmp Download File

Similarity

API ID: AddstdException@8InitThrowstd::ios_base::_std::locale::_
String ID: ios_base::badbit set$ios_base::eofbit set$ios_base::failbit set
API String ID: 3446850132-1866435925
Opcode ID: 0229c9cf64c802893d786219df46c43f34120bbf6324449741d880f15f50e618
Instruction ID: 59ace0324283ebda6111bf5fcf1e2bd233306716a6a9462319499038fca6ee85
Opcode Fuzzy Hash: 0229c9cf64c802893d786219df46c43f34120bbf6324449741d880f15f50e618
Instruction Fuzzy Hash: 90517AB1A007459FDB20CF58C589B9ABBF4FF04304F10856DE95A9B791D7BAEA14CB80

Uniqueness

Uniqueness Score: -1.00%

Function 00AA9410, Relevance: 10.7, APIs: 3, Strings: 3, Instructions: 154COMMON

Download Yara Rule

APIs

std::locale::_Init.LIBCPMT ref: 00AA94F3
std::ios_base::_Addstd.LIBCPMT ref: 00AA9596
__CxxThrowException@8.LIBVCRUNTIME ref: 00AA95F1

Strings

ios_base::badbit set, xrefs: 00AA95B9, 00AA95E2
ios_base::eofbit set, xrefs: 00AA95C8
ios_base::failbit set, xrefs: 00AA95C3

Memory Dump Source

Source File: 00000001.00000002.422151708.0000000000A71000.00000020.00020000.sdmp, Offset: 00A70000, based on PE: true

Associated: 00000001.00000002.422117330.0000000000A70000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422651142.0000000000B5D000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422716671.0000000000B9A000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422731871.0000000000B9D000.00000008.00020000.sdmp Download File
Associated: 00000001.00000002.422740097.0000000000BA0000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422749600.0000000000BA4000.00000002.00020000.sdmp Download File

Similarity

API ID: AddstdException@8InitThrowstd::ios_base::_std::locale::_
String ID: ios_base::badbit set$ios_base::eofbit set$ios_base::failbit set
API String ID: 3446850132-1866435925
Opcode ID: 903e84f090ce8386863a58eccab509284f377ac7153068e84c0f0f93b37af470
Instruction ID: b92b4bf8e3f4f2cadd9f84530dd8bfba2d21929b214eaa776a43cf641cd9867c
Opcode Fuzzy Hash: 903e84f090ce8386863a58eccab509284f377ac7153068e84c0f0f93b37af470
Instruction Fuzzy Hash: 135156B19007069FDB20CF55C589B9BBBF4FF04304F10856DE91A9B681D7BAEA18CB80

Uniqueness

Uniqueness Score: -1.00%

Function 00B430F3, Relevance: 10.7, APIs: 7, Instructions: 152fileCOMMON

Download Yara Rule

APIs

GetConsoleCP.KERNEL32(?,?,?,?,?,?,?,?,?,00B43868,?,?,?,?,?,?), ref: 00B43135
__fassign.LIBCMT ref: 00B431B0
__fassign.LIBCMT ref: 00B431CB
WideCharToMultiByte.KERNEL32(?,00000000,?,00000001,?,00000005,00000000,00000000), ref: 00B431F1
WriteFile.KERNEL32(?,?,00000000,00B43868,00000000,?,?,?,?,?,?,?,?,?,00B43868,?), ref: 00B43210
WriteFile.KERNEL32(?,?,00000001,00B43868,00000000,?,?,?,?,?,?,?,?,?,00B43868,?), ref: 00B43249

Memory Dump Source

Source File: 00000001.00000002.422151708.0000000000A71000.00000020.00020000.sdmp, Offset: 00A70000, based on PE: true

Associated: 00000001.00000002.422117330.0000000000A70000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422651142.0000000000B5D000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422716671.0000000000B9A000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422731871.0000000000B9D000.00000008.00020000.sdmp Download File
Associated: 00000001.00000002.422740097.0000000000BA0000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422749600.0000000000BA4000.00000002.00020000.sdmp Download File

Similarity

API ID: FileWrite__fassign$ByteCharConsoleMultiWide
String ID:
API String ID: 1324828854-0
Opcode ID: a644834c3198cc8525db6690f63348e22797959eab0980e959a67f6564caac6e
Instruction ID: 393c99c40ea7b8a977d9b9ddc0cac331d9e298b7a91468cced7e666c222961aa
Opcode Fuzzy Hash: a644834c3198cc8525db6690f63348e22797959eab0980e959a67f6564caac6e
Instruction Fuzzy Hash: C251A371E002499FDB10CFA8D885BEEBBF4EF09710F18419AE955E7291E7709B41CBA1

Uniqueness

Uniqueness Score: -1.00%

Function 00A85750, Relevance: 10.7, APIs: 7, Instructions: 152windowCOMMON

Download Yara Rule

APIs

GetMessageW.USER32(?,00000000,00000000,00000000), ref: 00ABE743
GetWindowLongW.USER32(?,000000F0), ref: 00ABE765
GetParent.USER32(?), ref: 00ABE779
GetParent.USER32(00000000), ref: 00ABE7CE
TranslateMessage.USER32(?), ref: 00ABE8C6
DispatchMessageW.USER32 ref: 00ABE8D0
GetMessageW.USER32(?,00000000,00000000,00000000), ref: 00ABE8E0

Memory Dump Source

Source File: 00000001.00000002.422151708.0000000000A71000.00000020.00020000.sdmp, Offset: 00A70000, based on PE: true

Associated: 00000001.00000002.422117330.0000000000A70000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422651142.0000000000B5D000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422716671.0000000000B9A000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422731871.0000000000B9D000.00000008.00020000.sdmp Download File
Associated: 00000001.00000002.422740097.0000000000BA0000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422749600.0000000000BA4000.00000002.00020000.sdmp Download File

Similarity

API ID: Message$Parent$DispatchLongTranslateWindow
String ID:
API String ID: 65550478-0
Opcode ID: 5b67480b40659176e3b7dbf503525dd1479a05a88993cfea44d71f6563774244
Instruction ID: 4dc2c62929b2ab24598029d368a3e179bc1ae9a7e210f6dda9ec1b10c7ac589e
Opcode Fuzzy Hash: 5b67480b40659176e3b7dbf503525dd1479a05a88993cfea44d71f6563774244
Instruction Fuzzy Hash: CC51A632A106199BDB24EBB4DD85BFEB3EDBF49340F140168EA06E7253EF249941C761

Uniqueness

Uniqueness Score: -1.00%

Function 6C2BF28D, Relevance: 10.7, APIs: 7, Instructions: 152fileCOMMON

Download Yara Rule

APIs

GetConsoleCP.KERNEL32(00000000,00000000,?,?,?,?,?,?,?,6C2BFA02,00000000,00000000,00000000,00000000,00000000,?), ref: 6C2BF2CF
__fassign.LIBCMT ref: 6C2BF34A
__fassign.LIBCMT ref: 6C2BF365
WideCharToMultiByte.KERNEL32(?,00000000,00000000,00000001,00000000,00000005,00000000,00000000), ref: 6C2BF38B
WriteFile.KERNEL32(?,00000000,00000000,6C2BFA02,00000000,?,?,?,?,?,?,?,?,?,6C2BFA02,00000000), ref: 6C2BF3AA
WriteFile.KERNEL32(?,00000000,00000001,6C2BFA02,00000000,?,?,?,?,?,?,?,?,?,6C2BFA02,00000000), ref: 6C2BF3E3

Memory Dump Source

Source File: 00000001.00000002.425332215.000000006C2B1000.00000020.00020000.sdmp, Offset: 6C2B0000, based on PE: true

Associated: 00000001.00000002.425298119.000000006C2B0000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.425472962.000000006C2C3000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.425510904.000000006C2CA000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.425525863.000000006C2CC000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.428429287.000000006CCCC000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.430600185.000000006D6CC000.00000002.00020000.sdmp Download File

Similarity

API ID: FileWrite__fassign$ByteCharConsoleMultiWide
String ID:
API String ID: 1324828854-0
Opcode ID: 1b91094e8ad7ff60ea59b97f227f028b9cd128a98635ab223b97e7e8e9bacf03
Instruction ID: 58570cc4390355ed535382ad8defb5c4b5e71485d011121426a6b07732b7ef8d
Opcode Fuzzy Hash: 1b91094e8ad7ff60ea59b97f227f028b9cd128a98635ab223b97e7e8e9bacf03
Instruction Fuzzy Hash: 0351A2B9A002499FDB00CFA8D885AEEFBF8FF09354F14412AE955F7691D7709944CB60

Uniqueness

Uniqueness Score: -1.00%

Function 00A82FC7, Relevance: 10.6, APIs: 5, Strings: 1, Instructions: 146COMMON

Download Yara Rule

APIs

EnumProcesses.PSAPI(?,00001000,?), ref: 00A8305F
GetCurrentProcessId.KERNEL32(?,00001000,?), ref: 00A8306C
OpenProcess.KERNEL32(00000001,00000000,?), ref: 00A830E8
TerminateProcess.KERNEL32(00000000,00000000), ref: 00A8310A
CloseHandle.KERNEL32(00000000), ref: 00A83111

Part of subcall function 00A73FD0: __CxxThrowException@8.LIBVCRUNTIME ref: 00A73FE7

Strings

_KillRelatedProcess, kill '%s', xrefs: 00A830FA

Memory Dump Source

Source File: 00000001.00000002.422151708.0000000000A71000.00000020.00020000.sdmp, Offset: 00A70000, based on PE: true

Associated: 00000001.00000002.422117330.0000000000A70000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422651142.0000000000B5D000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422716671.0000000000B9A000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422731871.0000000000B9D000.00000008.00020000.sdmp Download File
Associated: 00000001.00000002.422740097.0000000000BA0000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422749600.0000000000BA4000.00000002.00020000.sdmp Download File

Similarity

API ID: Process$CloseCurrentEnumException@8HandleOpenProcessesTerminateThrow
String ID: _KillRelatedProcess, kill '%s'
API String ID: 3799496226-4125648355
Opcode ID: 73e1c319f8d733df6743a5627b3182839e779a937ca9e140f1ee24002433fa83
Instruction ID: 2f259216cbe0b35ec7607e547f5a7ded441be7f5d1fb63456d5c907e0cd9d6c9
Opcode Fuzzy Hash: 73e1c319f8d733df6743a5627b3182839e779a937ca9e140f1ee24002433fa83
Instruction Fuzzy Hash: B351D2B2A002149BDF20EB64DD49B9DB3B4EF08711F1446A9EB19A32A1DB709E80CF55

Uniqueness

Uniqueness Score: -1.00%

Function 6C2B4310, Relevance: 10.6, APIs: 5, Strings: 1, Instructions: 145COMMON

Download Yara Rule

APIs

_ValidateLocalCookies.LIBCMT ref: 6C2B433B
___except_validate_context_record.LIBVCRUNTIME ref: 6C2B4343
_ValidateLocalCookies.LIBCMT ref: 6C2B43D1
__IsNonwritableInCurrentImage.LIBCMT ref: 6C2B43FC
_ValidateLocalCookies.LIBCMT ref: 6C2B4451

Strings

csm, xrefs: 6C2B43E6

Memory Dump Source

Source File: 00000001.00000002.425332215.000000006C2B1000.00000020.00020000.sdmp, Offset: 6C2B0000, based on PE: true

Associated: 00000001.00000002.425298119.000000006C2B0000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.425472962.000000006C2C3000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.425510904.000000006C2CA000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.425525863.000000006C2CC000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.428429287.000000006CCCC000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.430600185.000000006D6CC000.00000002.00020000.sdmp Download File

Similarity

API ID: CookiesLocalValidate$CurrentImageNonwritable___except_validate_context_record
String ID: csm
API String ID: 1170836740-1018135373
Opcode ID: 9056274df7d3221b17486d1e4a2039b59ad7da52ff53d339b1f3bd9b1ba742a5
Instruction ID: 42f5b8fda7c217dd0fd2bc2f404730f88172b390dd12773c19a4c9333e907944
Opcode Fuzzy Hash: 9056274df7d3221b17486d1e4a2039b59ad7da52ff53d339b1f3bd9b1ba742a5
Instruction Fuzzy Hash: 0451D630A0020D9BCB00CF68C8C4ADEBBB5BF453ADF288555EC54ABB51D772DA59CB91

Uniqueness

Uniqueness Score: -1.00%

Function 00AA9260, Relevance: 10.6, APIs: 7, Instructions: 127COMMON

Download Yara Rule

APIs

std::_Lockit::_Lockit.LIBCPMT ref: 00AA9296
std::_Lockit::_Lockit.LIBCPMT ref: 00AA92B8
std::_Lockit::~_Lockit.LIBCPMT ref: 00AA92D8
__Getctype.LIBCPMT ref: 00AA9382
__Getcvt.LIBCPMT ref: 00AA9392
std::_Facet_Register.LIBCPMT ref: 00AA93D6
std::_Lockit::~_Lockit.LIBCPMT ref: 00AA93EE

Memory Dump Source

Source File: 00000001.00000002.422151708.0000000000A71000.00000020.00020000.sdmp, Offset: 00A70000, based on PE: true

Associated: 00000001.00000002.422117330.0000000000A70000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422651142.0000000000B5D000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422716671.0000000000B9A000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422731871.0000000000B9D000.00000008.00020000.sdmp Download File
Associated: 00000001.00000002.422740097.0000000000BA0000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422749600.0000000000BA4000.00000002.00020000.sdmp Download File

Similarity

API ID: std::_$Lockit$Lockit::_Lockit::~_$Facet_GetctypeGetcvtRegister
String ID:
API String ID: 2755674607-0
Opcode ID: 1ff7b5377736d6a90eab74722c8117e3ad2d82f147d338ec023220eb1292a44f
Instruction ID: 0bbe1cb26355f61c508b4b8eba85e5c5f2b2cfa786233ce5d38071441cd4ca80
Opcode Fuzzy Hash: 1ff7b5377736d6a90eab74722c8117e3ad2d82f147d338ec023220eb1292a44f
Instruction Fuzzy Hash: D251F071D042548FDF21DF58D981BAEBBF4EF09700F14825DE809AB292DB70A984CBA0

Uniqueness

Uniqueness Score: -1.00%

Function 00A838A8, Relevance: 10.6, APIs: 2, Strings: 4, Instructions: 127COMMON

Download Yara Rule

APIs

_wcsstr.LIBVCRUNTIME ref: 00A83991
ShellExecuteW.SHELL32(00000000,open,?,00000000,00000000,00000005), ref: 00A839ED

Strings

open, xrefs: 00A839E6
random, xrefs: 00A838C5
&from=%s, xrefs: 00A839CE
_OpenUninstallPage, randomNum = %d, xrefs: 00A8390A

Memory Dump Source

Source File: 00000001.00000002.422151708.0000000000A71000.00000020.00020000.sdmp, Offset: 00A70000, based on PE: true

Associated: 00000001.00000002.422117330.0000000000A70000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422651142.0000000000B5D000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422716671.0000000000B9A000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422731871.0000000000B9D000.00000008.00020000.sdmp Download File
Associated: 00000001.00000002.422740097.0000000000BA0000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422749600.0000000000BA4000.00000002.00020000.sdmp Download File

Similarity

API ID: ExecuteShell_wcsstr
String ID: &from=%s$_OpenUninstallPage, randomNum = %d$open$random
API String ID: 1507265192-932373424
Opcode ID: 02daaf1fa3cefc998c07af25c10f090ae9424a248fd00e75d7bae114f8d94eac
Instruction ID: 9046eae96505e03c7bfa180147ad446166815d9e2bca0c2fd14ceb9e0b243c46
Opcode Fuzzy Hash: 02daaf1fa3cefc998c07af25c10f090ae9424a248fd00e75d7bae114f8d94eac
Instruction Fuzzy Hash: 5141F532A10211DBDB14BB64CD17BBB73A1FF15B14F044669E806A72E1EBB5AE00CB81

Uniqueness

Uniqueness Score: -1.00%

Function 00A7CE00, Relevance: 10.6, APIs: 3, Strings: 3, Instructions: 114COMMON

Download Yara Rule

APIs

PathFileExistsW.SHLWAPI(00000001,?,?,?,?,?,?,?,?,00000001), ref: 00A7CEA5

Strings

\Utils\7z.dll, xrefs: 00A7CE4D, 00A7CE68
weiduan, xrefs: 00A7CF04
7z_copy_success, xrefs: 00A7CEFF

Memory Dump Source

Source File: 00000001.00000002.422151708.0000000000A71000.00000020.00020000.sdmp, Offset: 00A70000, based on PE: true

Associated: 00000001.00000002.422117330.0000000000A70000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422651142.0000000000B5D000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422716671.0000000000B9A000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422731871.0000000000B9D000.00000008.00020000.sdmp Download File
Associated: 00000001.00000002.422740097.0000000000BA0000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422749600.0000000000BA4000.00000002.00020000.sdmp Download File

Similarity

API ID: ExistsFilePath
String ID: 7z_copy_success$\Utils\7z.dll$weiduan
API String ID: 1174141254-684477725
Opcode ID: d0b37bb1888b43490e44c54523a9e7244386359031807c70ab029a98ccf58ee7
Instruction ID: f8595beb3268dea7b007a680b2f675bc832654acbe39304be56adb464b5044dd
Opcode Fuzzy Hash: d0b37bb1888b43490e44c54523a9e7244386359031807c70ab029a98ccf58ee7
Instruction Fuzzy Hash: C841B271900609AFDB01DBA8CD05B9EFBF9AF45720F14C2A9F418E72E2DB759900CB91

Uniqueness

Uniqueness Score: -1.00%

Function 00ABBE90, Relevance: 10.6, APIs: 5, Strings: 1, Instructions: 94windowCOMMON

Download Yara Rule

APIs

IsWindowVisible.USER32 ref: 00ABBE9C
GetFocus.USER32(?,00000000,?,00AC896F,00000000,?,00000000,?,?,00000000), ref: 00ABBEA6
GetTickCount.KERNEL32 ref: 00ABBED2

Part of subcall function 00ABEFC0: GetTickCount.KERNEL32 ref: 00ABF050

PostMessageW.USER32(?,00008001,00000000,00000000), ref: 00ABBF52
GetWindowLongW.USER32(?,000000EC), ref: 00ABBF6B

Strings

killfocus, xrefs: 00ABBEF0

Memory Dump Source

Source File: 00000001.00000002.422151708.0000000000A71000.00000020.00020000.sdmp, Offset: 00A70000, based on PE: true

Associated: 00000001.00000002.422117330.0000000000A70000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422651142.0000000000B5D000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422716671.0000000000B9A000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422731871.0000000000B9D000.00000008.00020000.sdmp Download File
Associated: 00000001.00000002.422740097.0000000000BA0000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422749600.0000000000BA4000.00000002.00020000.sdmp Download File

Similarity

API ID: CountTickWindow$FocusLongMessagePostVisible
String ID: killfocus
API String ID: 1163015642-1616503811
Opcode ID: 5a633ce33529ef2927380ce360e772a434af697ff450474f061ecec3234fe1a1
Instruction ID: 9331fc6e0c08e5ab0196cfe85c222d265cad6a41fa839a84c600f3e1b576e1af
Opcode Fuzzy Hash: 5a633ce33529ef2927380ce360e772a434af697ff450474f061ecec3234fe1a1
Instruction Fuzzy Hash: 3931CE30600305ABEB209F65CC49BEABBB9FF98715F100249F505572A1CBB5A854CFD0

Uniqueness

Uniqueness Score: -1.00%

Function 00AA9DE0, Relevance: 10.6, APIs: 3, Strings: 3, Instructions: 93COMMON

Download Yara Rule

APIs

__CxxThrowException@8.LIBVCRUNTIME ref: 00AA9E0A

Part of subcall function 00B23827: RaiseException.KERNEL32(?,?,00AB60BB,?,00B9A044,?,00000007,?,?,?,?,00AB60BB,?,00B93034,?), ref: 00B23887

__CxxThrowException@8.LIBVCRUNTIME ref: 00AA9E4C
__Getwctypes.LIBCPMT ref: 00AA9EB0

Part of subcall function 00AB8086: GetStringTypeW.KERNEL32(00000001,?,?,?,?,00AA9EB5,?,00B91164,?,?,?,?,?,00B91164,ios_base::failbit set,00000000), ref: 00AB809A

Strings

ios_base::badbit set, xrefs: 00AA9E14, 00AA9E3D
ios_base::eofbit set, xrefs: 00AA9E23
ios_base::failbit set, xrefs: 00AA9E1E

Memory Dump Source

Source File: 00000001.00000002.422151708.0000000000A71000.00000020.00020000.sdmp, Offset: 00A70000, based on PE: true

Associated: 00000001.00000002.422117330.0000000000A70000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422651142.0000000000B5D000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422716671.0000000000B9A000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422731871.0000000000B9D000.00000008.00020000.sdmp Download File
Associated: 00000001.00000002.422740097.0000000000BA0000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422749600.0000000000BA4000.00000002.00020000.sdmp Download File

Similarity

API ID: Exception@8Throw$ExceptionGetwctypesRaiseStringType
String ID: ios_base::badbit set$ios_base::eofbit set$ios_base::failbit set
API String ID: 3507211915-1866435925
Opcode ID: d5eecdec1527f2c8e48a199158755ef36d54bf5d6c1670612b40d16377f1d3f5
Instruction ID: 698a97ead32c40c549705b3309b3e5cf316cb035e72c465098040529d87460a2
Opcode Fuzzy Hash: d5eecdec1527f2c8e48a199158755ef36d54bf5d6c1670612b40d16377f1d3f5
Instruction Fuzzy Hash: FA21D57390020C6BDB24EA98DC46FEE739C9B05350F148565FA188F583EB39AA658792

Uniqueness

Uniqueness Score: -1.00%

Function 00A84DD0, Relevance: 10.6, APIs: 4, Strings: 2, Instructions: 93threadCOMMON

Download Yara Rule

APIs

GetCurrentThreadId.KERNEL32 ref: 00A84DF8

Part of subcall function 00AC01F0: GetClassInfoExW.USER32 ref: 00AC022B
Part of subcall function 00AC01F0: GetClassInfoExW.USER32 ref: 00AC0247
Part of subcall function 00AC01F0: RegisterClassExW.USER32 ref: 00AC0278
Part of subcall function 00AC01F0: GetLastError.KERNEL32 ref: 00AC0283
Part of subcall function 00AC01F0: LoadCursorW.USER32(00000000,00007F00), ref: 00AC02E8
Part of subcall function 00AC01F0: RegisterClassW.USER32 ref: 00AC030D
Part of subcall function 00AC01F0: GetLastError.KERNEL32(?,?,00A77D4E), ref: 00AC0318

SetWindowPos.USER32(00000000,000000FF,00000000,00000000,00000000,00000000,00000083), ref: 00A84E7E
SetWindowPos.USER32(00000000,000000FE,00000000,00000000,00000000,00000000,00000083), ref: 00A84E92
SwitchToThisWindow.USER32(00000000,00000001), ref: 00A84E99

Strings

CInstallWindow::_ShowWindow, xrefs: 00A84E59
CInstallWindow::CreateAndShow failed, CWindowWnd::Create failed., xrefs: 00A84E48

Memory Dump Source

Source File: 00000001.00000002.422151708.0000000000A71000.00000020.00020000.sdmp, Offset: 00A70000, based on PE: true

Associated: 00000001.00000002.422117330.0000000000A70000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422651142.0000000000B5D000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422716671.0000000000B9A000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422731871.0000000000B9D000.00000008.00020000.sdmp Download File
Associated: 00000001.00000002.422740097.0000000000BA0000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422749600.0000000000BA4000.00000002.00020000.sdmp Download File

Similarity

API ID: Class$Window$ErrorInfoLastRegister$CurrentCursorLoadSwitchThisThread
String ID: CInstallWindow::CreateAndShow failed, CWindowWnd::Create failed.$CInstallWindow::_ShowWindow
API String ID: 745073061-2910839404
Opcode ID: 66372bb5792c8a9ed4d06a40fd01c045e87788989ecc578eeaea3f68582e5fec
Instruction ID: d457e8a583e8ac9d248fc2d887652477bf7f0c2a8a7331305ee878d0749c925d
Opcode Fuzzy Hash: 66372bb5792c8a9ed4d06a40fd01c045e87788989ecc578eeaea3f68582e5fec
Instruction Fuzzy Hash: B3310A31740704FBEB20AF24DD46F56B7A5FB45B30F248369F9256B2E1DBB568008B50

Uniqueness

Uniqueness Score: -1.00%

Function 00ABF3F0, Relevance: 10.6, APIs: 4, Strings: 2, Instructions: 83windowCOMMON

Download Yara Rule

APIs

IsWindowVisible.USER32 ref: 00ABF3FB
GetFocus.USER32(00000000,?,?,?,?,?,?,00000000,00000000), ref: 00ABF40A
GetTickCount.KERNEL32 ref: 00ABF43E

Part of subcall function 00ABEFC0: GetTickCount.KERNEL32 ref: 00ABF050

GetTickCount.KERNEL32 ref: 00ABF4C0

Strings

setfocus, xrefs: 00ABF4DE
killfocus, xrefs: 00ABF45C

Memory Dump Source

Source File: 00000001.00000002.422151708.0000000000A71000.00000020.00020000.sdmp, Offset: 00A70000, based on PE: true

Associated: 00000001.00000002.422117330.0000000000A70000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422651142.0000000000B5D000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422716671.0000000000B9A000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422731871.0000000000B9D000.00000008.00020000.sdmp Download File
Associated: 00000001.00000002.422740097.0000000000BA0000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422749600.0000000000BA4000.00000002.00020000.sdmp Download File

Similarity

API ID: CountTick$FocusVisibleWindow
String ID: killfocus$setfocus
API String ID: 2565274150-1991930995
Opcode ID: a3b508c39d281351ba8f6ce5282fb2b4234b2dab0a17a57cb50dc9e29c001d04
Instruction ID: fcb629316b7bed1c155fbcdc5dcc304608b6d486f5de9c881cc278bd2718317f
Opcode Fuzzy Hash: a3b508c39d281351ba8f6ce5282fb2b4234b2dab0a17a57cb50dc9e29c001d04
Instruction Fuzzy Hash: F4315E30A0071A9BCB11DF55CC45BFEB7B5BF98704F140259E500A72A5DBB5A981CFC4

Uniqueness

Uniqueness Score: -1.00%

Function 00A87000, Relevance: 10.6, APIs: 4, Strings: 2, Instructions: 81registrylibraryloaderCOMMON

Download Yara Rule

APIs

GetModuleHandleW.KERNEL32(Advapi32.dll,?,00000000,?,?,?,C000008C,00000001,?,?,00A863FA), ref: 00A87024
GetProcAddress.KERNEL32(00000000,RegCreateKeyTransactedW), ref: 00A8703B
RegCreateKeyExW.ADVAPI32(?,?,00000000,?,?,?,?,00000000,?,?,00000000,?,?,?,C000008C,00000001), ref: 00A8708E
RegCloseKey.ADVAPI32(00000000,?,?,?,C000008C,00000001,?,?,00A863FA), ref: 00A870AD

Strings

Advapi32.dll, xrefs: 00A8701F
RegCreateKeyTransactedW, xrefs: 00A87035

Memory Dump Source

Source File: 00000001.00000002.422151708.0000000000A71000.00000020.00020000.sdmp, Offset: 00A70000, based on PE: true

Associated: 00000001.00000002.422117330.0000000000A70000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422651142.0000000000B5D000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422716671.0000000000B9A000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422731871.0000000000B9D000.00000008.00020000.sdmp Download File
Associated: 00000001.00000002.422740097.0000000000BA0000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422749600.0000000000BA4000.00000002.00020000.sdmp Download File

Similarity

API ID: AddressCloseCreateHandleModuleProc
String ID: Advapi32.dll$RegCreateKeyTransactedW
API String ID: 1765684683-2994018265
Opcode ID: d4f08b43444c5a731733f27d1378b37cc92ecb7bf5896cfe9d2d14ab7c4ec82f
Instruction ID: 7771934aea2b6d9477176104c6dc03308a3ca7e55a563dab6bc883cb8fd27a50
Opcode Fuzzy Hash: d4f08b43444c5a731733f27d1378b37cc92ecb7bf5896cfe9d2d14ab7c4ec82f
Instruction Fuzzy Hash: 05219A32604209EBDF219F94CC44FAF7BB9EF48740F2440A8FA059B160D772D960DB60

Uniqueness

Uniqueness Score: -1.00%

Function 00AC0870, Relevance: 10.6, APIs: 7, Instructions: 74windowCOMMON

Download Yara Rule

APIs

GetClientRect.USER32 ref: 00AC0891
GetWindowLongW.USER32(00000000,000000F0), ref: 00AC08C8
GetMenu.USER32(00000000), ref: 00AC08D4
GetWindowLongW.USER32(00000000,000000EC), ref: 00AC08EC
GetWindowLongW.USER32(00000000,000000F0), ref: 00AC08F5
AdjustWindowRectEx.USER32(?,00000000), ref: 00AC08FC
SetWindowPos.USER32(00000000,00000000,00000000,00000000,00000016,?,00000016), ref: 00AC0921

Memory Dump Source

Source File: 00000001.00000002.422151708.0000000000A71000.00000020.00020000.sdmp, Offset: 00A70000, based on PE: true

Associated: 00000001.00000002.422117330.0000000000A70000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422651142.0000000000B5D000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422716671.0000000000B9A000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422731871.0000000000B9D000.00000008.00020000.sdmp Download File
Associated: 00000001.00000002.422740097.0000000000BA0000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422749600.0000000000BA4000.00000002.00020000.sdmp Download File

Similarity

API ID: Window$Long$Rect$AdjustClientMenu
String ID:
API String ID: 1765799542-0
Opcode ID: 4f0fd04be8ebbaee2e1053c3ee587320c1b6d05aeb02919fc1135f1a0f4e6b9b
Instruction ID: 6f6ad77d6bc07a886d41f35c4205785a0142c8aabcf04e2092912d861c284e52
Opcode Fuzzy Hash: 4f0fd04be8ebbaee2e1053c3ee587320c1b6d05aeb02919fc1135f1a0f4e6b9b
Instruction Fuzzy Hash: FD212C31A00209EFDB20DFA9DD44FAEB7B9EF44711F108259B426A61A0DB30EE40CB50

Uniqueness

Uniqueness Score: -1.00%

Function 00B4A774, Relevance: 10.6, APIs: 7, Instructions: 65COMMON

Download Yara Rule

APIs

Part of subcall function 00B4A4BB: _free.LIBCMT ref: 00B4A4E4

_free.LIBCMT ref: 00B4A7C2

Part of subcall function 00B40176: RtlFreeHeap.NTDLL(00000000,00000000,?,00B4A4E9,?,00000000,?,00000000,?,00B4A78D,?,00000007,?,?,00B4AAEC,?), ref: 00B4018C
Part of subcall function 00B40176: GetLastError.KERNEL32(?,?,00B4A4E9,?,00000000,?,00000000,?,00B4A78D,?,00000007,?,?,00B4AAEC,?,?), ref: 00B4019E

_free.LIBCMT ref: 00B4A7CD
_free.LIBCMT ref: 00B4A7D8
_free.LIBCMT ref: 00B4A82C
_free.LIBCMT ref: 00B4A837
_free.LIBCMT ref: 00B4A842
_free.LIBCMT ref: 00B4A84D

Memory Dump Source

Source File: 00000001.00000002.422151708.0000000000A71000.00000020.00020000.sdmp, Offset: 00A70000, based on PE: true

Associated: 00000001.00000002.422117330.0000000000A70000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422651142.0000000000B5D000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422716671.0000000000B9A000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422731871.0000000000B9D000.00000008.00020000.sdmp Download File
Associated: 00000001.00000002.422740097.0000000000BA0000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422749600.0000000000BA4000.00000002.00020000.sdmp Download File

Similarity

API ID: _free$ErrorFreeHeapLast
String ID:
API String ID: 776569668-0
Opcode ID: b9808e11546ccfa4a05328b635b0cf1fd2c4361a9da80a34f8da99dfa69f6cac
Instruction ID: 5463832e34377b4e4079561b8ea0c3f79571c19e1879cf7ea5ef2b4ca715268e
Opcode Fuzzy Hash: b9808e11546ccfa4a05328b635b0cf1fd2c4361a9da80a34f8da99dfa69f6cac
Instruction Fuzzy Hash: E8111F71980B04AAD631FBB0CC0BFCB77EC9F14700F804855B399661D2DAB9B705A651

Uniqueness

Uniqueness Score: -1.00%

Function 6C2BE39F, Relevance: 10.6, APIs: 7, Instructions: 65COMMON

Download Yara Rule

APIs

Part of subcall function 6C2BE363: _free.LIBCMT ref: 6C2BE38C

_free.LIBCMT ref: 6C2BE3ED

Part of subcall function 6C2B90E5: HeapFree.KERNEL32(00000000,00000000,?,6C2BE391,?,00000000,?,00000000,?,6C2BE3B8,?,00000007,?,?,6C2BC1BE,?), ref: 6C2B90FB
Part of subcall function 6C2B90E5: GetLastError.KERNEL32(?,?,6C2BE391,?,00000000,?,00000000,?,6C2BE3B8,?,00000007,?,?,6C2BC1BE,?,?), ref: 6C2B910D

_free.LIBCMT ref: 6C2BE3F8
_free.LIBCMT ref: 6C2BE403
_free.LIBCMT ref: 6C2BE457
_free.LIBCMT ref: 6C2BE462
_free.LIBCMT ref: 6C2BE46D
_free.LIBCMT ref: 6C2BE478

Memory Dump Source

Source File: 00000001.00000002.425332215.000000006C2B1000.00000020.00020000.sdmp, Offset: 6C2B0000, based on PE: true

Associated: 00000001.00000002.425298119.000000006C2B0000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.425472962.000000006C2C3000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.425510904.000000006C2CA000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.425525863.000000006C2CC000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.428429287.000000006CCCC000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.430600185.000000006D6CC000.00000002.00020000.sdmp Download File

Similarity

API ID: _free$ErrorFreeHeapLast
String ID:
API String ID: 776569668-0
Opcode ID: bbeb1dae612b7170b406d7441e9f74e7deb0b3581e31486021cf89aebb5d9a5f
Instruction ID: 9fe1b6a4411929483b21d6db122a9b1f96351664649ea46651204e65568da3b0
Opcode Fuzzy Hash: bbeb1dae612b7170b406d7441e9f74e7deb0b3581e31486021cf89aebb5d9a5f
Instruction Fuzzy Hash: 7A115CB1944B0CAADA20A7B0CC49FDB77AC6F4078DF404C15BA9D76B50DB75B5188690

Uniqueness

Uniqueness Score: -1.00%

Function 00A7E300, Relevance: 10.5, APIs: 5, Strings: 1, Instructions: 49COMMON

Download Yara Rule

APIs

Part of subcall function 00A745F0: GetProcessHeap.KERNEL32(00AA5638,F084A4B2), ref: 00A74601

Concurrency::cancel_current_task.LIBCPMT ref: 00A7E89E
Concurrency::cancel_current_task.LIBCPMT ref: 00A7E8B7
Concurrency::cancel_current_task.LIBCPMT ref: 00A7E8BC
Concurrency::cancel_current_task.LIBCPMT ref: 00A7E8CB
Concurrency::cancel_current_task.LIBCPMT ref: 00A7E8D0

Strings

CInstallHelper::_GetConfigInfoFromServer, xrefs: 00A7E328

Memory Dump Source

Source File: 00000001.00000002.422151708.0000000000A71000.00000020.00020000.sdmp, Offset: 00A70000, based on PE: true

Associated: 00000001.00000002.422117330.0000000000A70000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422651142.0000000000B5D000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422716671.0000000000B9A000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422731871.0000000000B9D000.00000008.00020000.sdmp Download File
Associated: 00000001.00000002.422740097.0000000000BA0000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422749600.0000000000BA4000.00000002.00020000.sdmp Download File

Similarity

API ID: Concurrency::cancel_current_task$HeapProcess
String ID: CInstallHelper::_GetConfigInfoFromServer
API String ID: 570625627-18946813
Opcode ID: e265f1da0eaca9c569b8597ed42bf0306969751e2f8a2b7a605b1b8bd718653f
Instruction ID: 787e9867202a4403e4915bb2bce166699df84115f96ef2dade1c44548bb47424
Opcode Fuzzy Hash: e265f1da0eaca9c569b8597ed42bf0306969751e2f8a2b7a605b1b8bd718653f
Instruction Fuzzy Hash: 59F06DA2A10185B6DA00B7B54F2ABAE75BCDF14741F02C128FA2C7A587DA285500C577

Uniqueness

Uniqueness Score: -1.00%

Function 00A7DF10, Relevance: 10.5, APIs: 5, Strings: 1, Instructions: 39COMMON

Download Yara Rule

APIs

Part of subcall function 00A745F0: GetProcessHeap.KERNEL32(00AA5638,F084A4B2), ref: 00A74601

Concurrency::cancel_current_task.LIBCPMT ref: 00A7E2D5
Concurrency::cancel_current_task.LIBCPMT ref: 00A7E2E4
Concurrency::cancel_current_task.LIBCPMT ref: 00A7E2E9
Concurrency::cancel_current_task.LIBCPMT ref: 00A7E2EE
Concurrency::cancel_current_task.LIBCPMT ref: 00A7E2F3

Strings

CInstallHelper::GetGameConfigFromLocal, xrefs: 00A7DF41

Memory Dump Source

Source File: 00000001.00000002.422151708.0000000000A71000.00000020.00020000.sdmp, Offset: 00A70000, based on PE: true

Associated: 00000001.00000002.422117330.0000000000A70000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422651142.0000000000B5D000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422716671.0000000000B9A000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422731871.0000000000B9D000.00000008.00020000.sdmp Download File
Associated: 00000001.00000002.422740097.0000000000BA0000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422749600.0000000000BA4000.00000002.00020000.sdmp Download File

Similarity

API ID: Concurrency::cancel_current_task$HeapProcess
String ID: CInstallHelper::GetGameConfigFromLocal
API String ID: 570625627-1977090591
Opcode ID: 9ada4ea5483495c536f81abf8fe03c60f2515a5ca1f0e5f2ec152817201679a6
Instruction ID: 7ca3eae9740ac239a103ba74041f7405bea7a2a1232b9b289fc84073fd1f0603
Opcode Fuzzy Hash: 9ada4ea5483495c536f81abf8fe03c60f2515a5ca1f0e5f2ec152817201679a6
Instruction Fuzzy Hash: C8F0F675950249ABDB00FBF58E56AEE77BCDF04710F00C519BA2CAB643DE389400C6A3

Uniqueness

Uniqueness Score: -1.00%

Function 00A961E0, Relevance: 10.5, APIs: 7, Instructions: 33synchronizationthreadCOMMON

Download Yara Rule

APIs

EnterCriticalSection.KERNEL32(?,?,?,00A8FEE9,00FFFFFF), ref: 00A961EB
GetCurrentThreadId.KERNEL32 ref: 00A961F1
LeaveCriticalSection.KERNEL32(?,?,?,00A8FEE9,00FFFFFF), ref: 00A961FD
LeaveCriticalSection.KERNEL32(?,?,?,00A8FEE9,00FFFFFF), ref: 00A9620A
WaitForSingleObject.KERNEL32(00000000,00FFFFFF,?,?,?,00A8FEE9,00FFFFFF), ref: 00A96216
EnterCriticalSection.KERNEL32(?,?,?,?,00A8FEE9,00FFFFFF), ref: 00A96224
LeaveCriticalSection.KERNEL32(?,?,?,?,?,00A8FEE9,00FFFFFF), ref: 00A96239

Memory Dump Source

Source File: 00000001.00000002.422151708.0000000000A71000.00000020.00020000.sdmp, Offset: 00A70000, based on PE: true

Associated: 00000001.00000002.422117330.0000000000A70000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422651142.0000000000B5D000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422716671.0000000000B9A000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422731871.0000000000B9D000.00000008.00020000.sdmp Download File
Associated: 00000001.00000002.422740097.0000000000BA0000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422749600.0000000000BA4000.00000002.00020000.sdmp Download File

Similarity

API ID: CriticalSection$Leave$Enter$CurrentObjectSingleThreadWait
String ID:
API String ID: 2447718595-0
Opcode ID: 459ca900d667fdbcd29dfed50c755e4f314be94f78e4f93942eea17c1b7e6415
Instruction ID: e3b4282ce9de54a6c91da56f69caf5b7be2b688ee7d28edf60137b6820a9b25c
Opcode Fuzzy Hash: 459ca900d667fdbcd29dfed50c755e4f314be94f78e4f93942eea17c1b7e6415
Instruction Fuzzy Hash: EBF030325017209BD7301F90E8087CA7BA8AF1A313F004365F20182521CF7155859BE6

Uniqueness

Uniqueness Score: -1.00%

Function 00ABC700, Relevance: 10.5, APIs: 4, Strings: 2, Instructions: 33libraryloaderCOMMON

Download Yara Rule

APIs

GetDC.USER32(?), ref: 00ABC70D
LoadLibraryW.KERNEL32(Dwmapi.dll,?,?,00000000,?,00AC7C82,?,?,?,?), ref: 00ABC732
GetProcAddress.KERNEL32(00000000,DwmIsCompositionEnabled), ref: 00ABC744
FreeLibrary.KERNEL32(00000000,?,00000000,?,00AC7C82,?,?,?,?), ref: 00ABC752

Strings

Dwmapi.dll, xrefs: 00ABC72D
DwmIsCompositionEnabled, xrefs: 00ABC73E

Memory Dump Source

Source File: 00000001.00000002.422151708.0000000000A71000.00000020.00020000.sdmp, Offset: 00A70000, based on PE: true

Associated: 00000001.00000002.422117330.0000000000A70000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422651142.0000000000B5D000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422716671.0000000000B9A000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422731871.0000000000B9D000.00000008.00020000.sdmp Download File
Associated: 00000001.00000002.422740097.0000000000BA0000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422749600.0000000000BA4000.00000002.00020000.sdmp Download File

Similarity

API ID: Library$AddressFreeLoadProc
String ID: DwmIsCompositionEnabled$Dwmapi.dll
API String ID: 145871493-137364670
Opcode ID: 258f2d8502981ec754205c2951cb5d4042f64f411bbbc242c1867d6c95a2e810
Instruction ID: 494a8c5db435eb67834455dbca46ae28e8253f8bf7ba7062866494169c8827ab
Opcode Fuzzy Hash: 258f2d8502981ec754205c2951cb5d4042f64f411bbbc242c1867d6c95a2e810
Instruction Fuzzy Hash: F1F082325413116BC7215BA8DC48FEA77ECEF85712B0045A9F905E3261DF74A9408BE5

Uniqueness

Uniqueness Score: -1.00%

Function 6C2BC373, Relevance: 9.2, APIs: 6, Instructions: 216COMMON

Download Yara Rule

APIs

MultiByteToWideChar.KERNEL32(00000001,00000000,?,?,00000000,00000000,?,6C2B6DF2,6C2B6DF2,?,?,?,6C2BC5C4,00000001,00000001,94E85006), ref: 6C2BC3CD
MultiByteToWideChar.KERNEL32(00000001,00000001,?,?,00000000,?,?,?,?,6C2BC5C4,00000001,00000001,94E85006,?,?,?), ref: 6C2BC453
WideCharToMultiByte.KERNEL32(00000001,00000000,00000000,00000000,?,94E85006,00000000,00000000,?,00000400,00000000,?,00000000,00000000,00000000,00000000), ref: 6C2BC54D
__freea.LIBCMT ref: 6C2BC55A

Part of subcall function 6C2B9335: HeapAlloc.KERNEL32(00000000,?,00000004,?,6C2BA50E,?,00000000,?,6C2B73C2,?,00000004,?,?,?,?,6C2B7F90), ref: 6C2B9367

__freea.LIBCMT ref: 6C2BC563
__freea.LIBCMT ref: 6C2BC588

Memory Dump Source

Source File: 00000001.00000002.425332215.000000006C2B1000.00000020.00020000.sdmp, Offset: 6C2B0000, based on PE: true

Associated: 00000001.00000002.425298119.000000006C2B0000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.425472962.000000006C2C3000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.425510904.000000006C2CA000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.425525863.000000006C2CC000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.428429287.000000006CCCC000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.430600185.000000006D6CC000.00000002.00020000.sdmp Download File

Similarity

API ID: ByteCharMultiWide__freea$AllocHeap
String ID:
API String ID: 3147120248-0
Opcode ID: 473db5f9ca02ffa908074ad6d610e1f3b2d7140a2b78de0d16a8c61de20887a4
Instruction ID: 2272e45d6852bc6f4bf9ab4dcfac54f6c74428430949cd9ca0ebc3eec03bcdca
Opcode Fuzzy Hash: 473db5f9ca02ffa908074ad6d610e1f3b2d7140a2b78de0d16a8c61de20887a4
Instruction Fuzzy Hash: BA51E47261020EABEB15AE64CD40EAB7BA9EF44F9CF144628FC14F6940EB74DD44C7A0

Uniqueness

Uniqueness Score: -1.00%

Function 00A90A72, Relevance: 9.2, APIs: 1, Strings: 4, Instructions: 461COMMON

Download Yara Rule

APIs

_wcsstr.LIBVCRUNTIME ref: 00A90D6B

Strings

opengame=1, xrefs: 00A90D65
CMainWindowWebWindow::BeforeNavigate2, url=%s, status=%s, game=%s, server=%s, xrefs: 00A90DF4
CMainWindowWebWindow::BeforeNavigate2, url='%s', gameUrlPattern='%s', xrefs: 00A90B8B
opengame, xrefs: 00A90DC4, 00A90DDB

Memory Dump Source

Source File: 00000001.00000002.422151708.0000000000A71000.00000020.00020000.sdmp, Offset: 00A70000, based on PE: true

Associated: 00000001.00000002.422117330.0000000000A70000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422651142.0000000000B5D000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422716671.0000000000B9A000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422731871.0000000000B9D000.00000008.00020000.sdmp Download File
Associated: 00000001.00000002.422740097.0000000000BA0000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422749600.0000000000BA4000.00000002.00020000.sdmp Download File

Similarity

API ID: _wcsstr
String ID: CMainWindowWebWindow::BeforeNavigate2, url=%s, status=%s, game=%s, server=%s$CMainWindowWebWindow::BeforeNavigate2, url='%s', gameUrlPattern='%s'$opengame$opengame=1
API String ID: 1512112989-65777213
Opcode ID: 46fb2a7eb61e714210bfe026038a8d80caf95b0d1dfa5e850ff36967ea249c23
Instruction ID: 1dbed78f62f214131ab09fb3d27f7d76553ffaa6b91c21d08b526bbde577a95a
Opcode Fuzzy Hash: 46fb2a7eb61e714210bfe026038a8d80caf95b0d1dfa5e850ff36967ea249c23
Instruction Fuzzy Hash: FF02CE71A00649DFDF14DFA8C944BAEBBF4FF15314F148269E415AB292EB70AE44CB90

Uniqueness

Uniqueness Score: -1.00%

Function 00B39B52, Relevance: 9.2, APIs: 6, Instructions: 200COMMON

Download Yara Rule

APIs

__cftoe.LIBCMT ref: 00B39B7E
__cftoe.LIBCMT ref: 00B39BB0

Memory Dump Source

Source File: 00000001.00000002.422151708.0000000000A71000.00000020.00020000.sdmp, Offset: 00A70000, based on PE: true

Associated: 00000001.00000002.422117330.0000000000A70000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422651142.0000000000B5D000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422716671.0000000000B9A000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422731871.0000000000B9D000.00000008.00020000.sdmp Download File
Associated: 00000001.00000002.422740097.0000000000BA0000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422749600.0000000000BA4000.00000002.00020000.sdmp Download File

Similarity

API ID: __cftoe
String ID:
API String ID: 4189289331-0
Opcode ID: ff8e02e749f674b6a0ad5bd72ce06939566bed756f145f0f7d7977deff14422b
Instruction ID: 8bf5b0d7e08823eecbea6e9697bb1b09475132519fc36ac9bee6e34970669b72
Opcode Fuzzy Hash: ff8e02e749f674b6a0ad5bd72ce06939566bed756f145f0f7d7977deff14422b
Instruction Fuzzy Hash: CE513D32900205ABDF24AB6DDC42EAEB7F9EF49320F7041DAF914D6282EB71DD40D664

Uniqueness

Uniqueness Score: -1.00%

Function 00A873F0, Relevance: 9.1, APIs: 6, Instructions: 147COMMON

Download Yara Rule

APIs

CharNextW.USER32(?,?,?,?), ref: 00A8742E
CharNextW.USER32(00000000,?,?), ref: 00A8745B
CharNextW.USER32(7742EEF0,?,?), ref: 00A87474
CharNextW.USER32(7742EEF0,?,?), ref: 00A8747F
CharNextW.USER32(?,?,?), ref: 00A874EE

Memory Dump Source

Source File: 00000001.00000002.422151708.0000000000A71000.00000020.00020000.sdmp, Offset: 00A70000, based on PE: true

Associated: 00000001.00000002.422117330.0000000000A70000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422651142.0000000000B5D000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422716671.0000000000B9A000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422731871.0000000000B9D000.00000008.00020000.sdmp Download File
Associated: 00000001.00000002.422740097.0000000000BA0000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422749600.0000000000BA4000.00000002.00020000.sdmp Download File

Similarity

API ID: CharNext
String ID:
API String ID: 3213498283-0
Opcode ID: b767bf413c68525c7d8286791dc00b6d2c1ee474f8595277dbac41dcd6f764df
Instruction ID: 68198a1eff4ab47297113a5ce44397e9ee64bf253d41adedf2877b7e1cdd80a2
Opcode Fuzzy Hash: b767bf413c68525c7d8286791dc00b6d2c1ee474f8595277dbac41dcd6f764df
Instruction Fuzzy Hash: FB41A236A04215DFCB14EF69D88067DBBF2EF99311B6441A6D845C7354EB34DD82CB90

Uniqueness

Uniqueness Score: -1.00%

Function 00B40027, Relevance: 9.0, APIs: 6, Instructions: 50COMMON

Download Yara Rule

APIs

GetLastError.KERNEL32(?,?,00B2DD21,00B96398,00000010), ref: 00B4002B
_free.LIBCMT ref: 00B4005E
_free.LIBCMT ref: 00B40086
SetLastError.KERNEL32(00000000), ref: 00B40093
SetLastError.KERNEL32(00000000), ref: 00B4009F
_abort.LIBCMT ref: 00B400A5

Memory Dump Source

Source File: 00000001.00000002.422151708.0000000000A71000.00000020.00020000.sdmp, Offset: 00A70000, based on PE: true

Associated: 00000001.00000002.422117330.0000000000A70000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422651142.0000000000B5D000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422716671.0000000000B9A000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422731871.0000000000B9D000.00000008.00020000.sdmp Download File
Associated: 00000001.00000002.422740097.0000000000BA0000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422749600.0000000000BA4000.00000002.00020000.sdmp Download File

Similarity

API ID: ErrorLast$_free$_abort
String ID:
API String ID: 3160817290-0
Opcode ID: 70be53c6b016c16f7f449ed4330620ff8d41f8bfa90baf8664d9ed20da145c80
Instruction ID: 5e4f74aae9ea5eac3bf852e4451c5030e150af2ef88a6de89a8cff369c0b60b5
Opcode Fuzzy Hash: 70be53c6b016c16f7f449ed4330620ff8d41f8bfa90baf8664d9ed20da145c80
Instruction Fuzzy Hash: 66F0A43691071826C23237796D06F1B26FADBC1BB2B2501E4F718A73A1EF748E41A261

Uniqueness

Uniqueness Score: -1.00%

Function 6C2B8F96, Relevance: 9.0, APIs: 6, Instructions: 50COMMON

Download Yara Rule

APIs

GetLastError.KERNEL32(?,?,6C2B6491,?,750D8B40,?,6C2B5FB6,?,750D8B40,?,750D4830), ref: 6C2B8F9A
_free.LIBCMT ref: 6C2B8FCD
_free.LIBCMT ref: 6C2B8FF5
SetLastError.KERNEL32(00000000), ref: 6C2B9002
SetLastError.KERNEL32(00000000), ref: 6C2B900E
_abort.LIBCMT ref: 6C2B9014

Memory Dump Source

Source File: 00000001.00000002.425332215.000000006C2B1000.00000020.00020000.sdmp, Offset: 6C2B0000, based on PE: true

Associated: 00000001.00000002.425298119.000000006C2B0000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.425472962.000000006C2C3000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.425510904.000000006C2CA000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.425525863.000000006C2CC000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.428429287.000000006CCCC000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.430600185.000000006D6CC000.00000002.00020000.sdmp Download File

Similarity

API ID: ErrorLast$_free$_abort
String ID:
API String ID: 3160817290-0
Opcode ID: b994d95b0dc823d75cbaaf016bff3907af67eef1fff598693305060b3bb8655c
Instruction ID: aa59166b90eec95e3fadce7c27b413217082f3ce0edd3578a49ed70d53b21e58
Opcode Fuzzy Hash: b994d95b0dc823d75cbaaf016bff3907af67eef1fff598693305060b3bb8655c
Instruction Fuzzy Hash: 0EF0A43625890BAACB4226255C0CF8F267AABD27EEF250915FD18B3EC0EF3185068161

Uniqueness

Uniqueness Score: -1.00%

Function 00A78CB0, Relevance: 8.9, APIs: 2, Strings: 3, Instructions: 187threadCOMMON

Download Yara Rule

APIs

GetCurrentThreadId.KERNEL32 ref: 00A78CE3
IsWindow.USER32(FFFFFFFF), ref: 00A78D6C

Strings

failed_page, xrefs: 00A78E93
close, xrefs: 00A78DFD, 00A78ECB
loading_page, xrefs: 00A78EAF

Memory Dump Source

Source File: 00000001.00000002.422151708.0000000000A71000.00000020.00020000.sdmp, Offset: 00A70000, based on PE: true

Associated: 00000001.00000002.422117330.0000000000A70000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422651142.0000000000B5D000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422716671.0000000000B9A000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422731871.0000000000B9D000.00000008.00020000.sdmp Download File
Associated: 00000001.00000002.422740097.0000000000BA0000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422749600.0000000000BA4000.00000002.00020000.sdmp Download File

Similarity

API ID: CurrentThreadWindow
String ID: close$failed_page$loading_page
API String ID: 3525884807-777670984
Opcode ID: 16c2221b21684afc8a2cf7fa95e7c009c3fde170434d3b58e71de1738af2fae3
Instruction ID: 10e7ab5e40829f5c7a8b05ce01db9a3a3b735162997fb8ffd5de002e9988161f
Opcode Fuzzy Hash: 16c2221b21684afc8a2cf7fa95e7c009c3fde170434d3b58e71de1738af2fae3
Instruction Fuzzy Hash: 4A619E70A406099FDB14DFA4CD49BAEBBF5AF44700F148169E80AAB2C1DF789E44CB91

Uniqueness

Uniqueness Score: -1.00%

Function 00AB5370, Relevance: 8.9, APIs: 3, Strings: 2, Instructions: 124synchronizationCOMMON

Download Yara Rule

APIs

GetModuleHandleW.KERNEL32(00000000,00000000,00000000,?), ref: 00AB538A

Part of subcall function 00A7EBE0: MappingData::MappingData.MSPDB140-MSVCRT ref: 00A7EC52

Part of subcall function 00AB5C70: GetModuleFileNameW.KERNEL32(00000000,?,00000104,?,?,00000000), ref: 00AB5CB7
Part of subcall function 00AB5C70: PathRemoveFileSpecW.SHLWAPI(?,?,?,00000000), ref: 00AB5CC4
Part of subcall function 00AB5C70: PathAppendW.SHLWAPI(?,360NetUL.dll,?,?,?,?,?,?,?,?,00000000), ref: 00AB5D04

WaitForMultipleObjects.KERNEL32(00000002,?,00000000,00000000), ref: 00AB5469
WaitForSingleObject.KERNEL32(?,00000000), ref: 00AB547F

Strings

ungzip, xrefs: 00AB53D3
gzip, xrefs: 00AB53C5

Memory Dump Source

Source File: 00000001.00000002.422151708.0000000000A71000.00000020.00020000.sdmp, Offset: 00A70000, based on PE: true

Associated: 00000001.00000002.422117330.0000000000A70000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422651142.0000000000B5D000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422716671.0000000000B9A000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422731871.0000000000B9D000.00000008.00020000.sdmp Download File
Associated: 00000001.00000002.422740097.0000000000BA0000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422749600.0000000000BA4000.00000002.00020000.sdmp Download File

Similarity

API ID: FileMappingModulePathWait$AppendDataData::HandleMultipleNameObjectObjectsRemoveSingleSpec
String ID: gzip$ungzip
API String ID: 1170771217-4062267990
Opcode ID: 9b78c15cc36aaf6ebd650ab1ce171aa42430b511323f0a1e763330e3af2e12ff
Instruction ID: 52160912787ab47c79ae1bfef062e6d81e7bba26b0058e2aeb878ce2a64550ca
Opcode Fuzzy Hash: 9b78c15cc36aaf6ebd650ab1ce171aa42430b511323f0a1e763330e3af2e12ff
Instruction Fuzzy Hash: FA414A35A00205EFDB10DF65C885E9AB7BAFF49311F508499E905DF262EB71ED90CBA0

Uniqueness

Uniqueness Score: -1.00%

Function 00A843CB, Relevance: 8.9, APIs: 4, Strings: 1, Instructions: 123fileCOMMON

Download Yara Rule

APIs

FindNextFileW.KERNEL32(?,?), ref: 00A8444F
FindNextFileW.KERNEL32(?,?), ref: 00A844CB
FindClose.KERNEL32(00000000), ref: 00A8451F
FindClose.KERNEL32(00000000), ref: 00A8454E

Strings

., xrefs: 00A84413

Memory Dump Source

Source File: 00000001.00000002.422151708.0000000000A71000.00000020.00020000.sdmp, Offset: 00A70000, based on PE: true

Associated: 00000001.00000002.422117330.0000000000A70000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422651142.0000000000B5D000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422716671.0000000000B9A000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422731871.0000000000B9D000.00000008.00020000.sdmp Download File
Associated: 00000001.00000002.422740097.0000000000BA0000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422749600.0000000000BA4000.00000002.00020000.sdmp Download File

Similarity

API ID: Find$CloseFileNext
String ID: .
API String ID: 2066263336-248832578
Opcode ID: 142851c2369433947c0be530d9fd32628e55449ad8482cd068e84af518f3d47e
Instruction ID: 0ba2cb492dc9cf131329db3a5511d76e8abc6113dc299d608f0ff7d0c3c1a4f2
Opcode Fuzzy Hash: 142851c2369433947c0be530d9fd32628e55449ad8482cd068e84af518f3d47e
Instruction Fuzzy Hash: 9341C271A0162A8BDF34EB18CD007A9B3F8EF48324F5441D9E919A3281DF749E84CF94

Uniqueness

Uniqueness Score: -1.00%

Function 00A8E750, Relevance: 8.8, APIs: 4, Strings: 1, Instructions: 100windowCOMMON

Download Yara Rule

APIs

IsWindow.USER32(00000000), ref: 00A8E777
GetWindowRect.USER32 ref: 00A8E7E7

Part of subcall function 00A98480: MoveWindow.USER32(00000000,?,?,?,00A8E818,00000001,?,00A8E818,?,?,?,00000000), ref: 00A98494

Part of subcall function 00AC0AF0: IsWindow.USER32(00000000), ref: 00AC0AF9
Part of subcall function 00AC0AF0: ShowWindow.USER32(00000000,-00000004,?,00A8D59E,00000000,00000000), ref: 00AC0B14

UpdateWindow.USER32(00000000), ref: 00A8E833
SetFocus.USER32(00000000), ref: 00A8E845

Strings

browser_page, xrefs: 00A8E786

Memory Dump Source

Source File: 00000001.00000002.422151708.0000000000A71000.00000020.00020000.sdmp, Offset: 00A70000, based on PE: true

Associated: 00000001.00000002.422117330.0000000000A70000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422651142.0000000000B5D000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422716671.0000000000B9A000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422731871.0000000000B9D000.00000008.00020000.sdmp Download File
Associated: 00000001.00000002.422740097.0000000000BA0000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422749600.0000000000BA4000.00000002.00020000.sdmp Download File

Similarity

API ID: Window$FocusMoveRectShowUpdate
String ID: browser_page
API String ID: 2144488523-2674542326
Opcode ID: fe0b243a99cd36bfdf787a797e6aacb9b249067fe3cf0f5a86fd71694aa39021
Instruction ID: cdd2eec6c1d29200b19e9ce76487ba2041b1af05ed6db993841ff10c20723d1b
Opcode Fuzzy Hash: fe0b243a99cd36bfdf787a797e6aacb9b249067fe3cf0f5a86fd71694aa39021
Instruction Fuzzy Hash: 94316931A002089FCB14EFB8DD85BAEB7E9AF98305F148159E416A72A1DF70AD40CB60

Uniqueness

Uniqueness Score: -1.00%

Function 00AA4580, Relevance: 8.8, APIs: 3, Strings: 2, Instructions: 88COMMON

Download Yara Rule

APIs

VariantInit.OLEAUT32(F084A4B2), ref: 00AA45F2
VariantChangeType.OLEAUT32(0000000B,0000000B,00000000,0000000B), ref: 00AA4610
VariantClear.OLEAUT32(?), ref: 00AA4650

Strings

%s, failed get %d parameter, not enough parameters, xrefs: 00AA45BF
%s, failed get %d parameter, change type %d to VT_BOOL failed., xrefs: 00AA4627

Memory Dump Source

Source File: 00000001.00000002.422151708.0000000000A71000.00000020.00020000.sdmp, Offset: 00A70000, based on PE: true

Associated: 00000001.00000002.422117330.0000000000A70000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422651142.0000000000B5D000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422716671.0000000000B9A000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422731871.0000000000B9D000.00000008.00020000.sdmp Download File
Associated: 00000001.00000002.422740097.0000000000BA0000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422749600.0000000000BA4000.00000002.00020000.sdmp Download File

Similarity

API ID: Variant$ChangeClearInitType
String ID: %s, failed get %d parameter, change type %d to VT_BOOL failed.$%s, failed get %d parameter, not enough parameters
API String ID: 3357537223-2392694051
Opcode ID: 643181c6fa8222063742f9b058d23953206ae98aa2d6fdf02756d76aecf25360
Instruction ID: 5c97bc2cf7f404f706008b86eac572dc16433b26338b9a259105e8d454d15898
Opcode Fuzzy Hash: 643181c6fa8222063742f9b058d23953206ae98aa2d6fdf02756d76aecf25360
Instruction Fuzzy Hash: DD21A573E002589BDB21DF69DD45BAAB7B8EB49710F05426AFC15E7280E774AD00CB90

Uniqueness

Uniqueness Score: -1.00%

Function 00AA4670, Relevance: 8.8, APIs: 3, Strings: 2, Instructions: 86COMMON

Download Yara Rule

APIs

VariantInit.OLEAUT32(F084A4B2), ref: 00AA46E2
VariantChangeType.OLEAUT32(00000016,00000016,00000000,00000016), ref: 00AA4700
VariantClear.OLEAUT32(?), ref: 00AA4739

Strings

%s, failed get %d parameter, not enough parameters, xrefs: 00AA46AF
%s, failed get %d parameter, change type %d to VT_INT failed., xrefs: 00AA4717

Memory Dump Source

Source File: 00000001.00000002.422151708.0000000000A71000.00000020.00020000.sdmp, Offset: 00A70000, based on PE: true

Associated: 00000001.00000002.422117330.0000000000A70000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422651142.0000000000B5D000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422716671.0000000000B9A000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422731871.0000000000B9D000.00000008.00020000.sdmp Download File
Associated: 00000001.00000002.422740097.0000000000BA0000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422749600.0000000000BA4000.00000002.00020000.sdmp Download File

Similarity

API ID: Variant$ChangeClearInitType
String ID: %s, failed get %d parameter, change type %d to VT_INT failed.$%s, failed get %d parameter, not enough parameters
API String ID: 3357537223-3980957764
Opcode ID: 93d05c1f462ea4cb65b595723262b42e554dadaacd0cd3e445a98241012e51b1
Instruction ID: 20960e4be7b9872b555618a1d06be08ff7b819149d54502b259812891b1564f8
Opcode Fuzzy Hash: 93d05c1f462ea4cb65b595723262b42e554dadaacd0cd3e445a98241012e51b1
Instruction Fuzzy Hash: 10219476E002589BDB21DF65DD45BAAB7FCEB49710F10426AFC15E7380E775A900CBA0

Uniqueness

Uniqueness Score: -1.00%

Function 00A9B910, Relevance: 8.8, APIs: 3, Strings: 2, Instructions: 84windowregistryCOMMON

Download Yara Rule

APIs

RegisterWindowMessageW.USER32(WdGame_TrayMessage,00000000), ref: 00A9B945
RegisterWindowMessageW.USER32(TaskbarCreated,00000000), ref: 00A9B95B
Shell_NotifyIconW.SHELL32(00000000,000003B8), ref: 00A9BA19

Strings

TaskbarCreated, xrefs: 00A9B956
WdGame_TrayMessage, xrefs: 00A9B940

Memory Dump Source

Source File: 00000001.00000002.422151708.0000000000A71000.00000020.00020000.sdmp, Offset: 00A70000, based on PE: true

Associated: 00000001.00000002.422117330.0000000000A70000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422651142.0000000000B5D000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422716671.0000000000B9A000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422731871.0000000000B9D000.00000008.00020000.sdmp Download File
Associated: 00000001.00000002.422740097.0000000000BA0000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422749600.0000000000BA4000.00000002.00020000.sdmp Download File

Similarity

API ID: MessageRegisterWindow$IconNotifyShell_
String ID: TaskbarCreated$WdGame_TrayMessage
API String ID: 1080925745-1974913428
Opcode ID: 390e1a37fe06de4dae8be900d532eba7c6da7b5ba6e28935389bff2822543aad
Instruction ID: ccfe5b6c0e7ad8f25fe691eee30b15ed7ee2ee11c79554124a355518eb66edb7
Opcode Fuzzy Hash: 390e1a37fe06de4dae8be900d532eba7c6da7b5ba6e28935389bff2822543aad
Instruction Fuzzy Hash: F0319A70A107148FDB21EF38D905BAAB3F8AF45314F0045AEE59997391DB74AA44CF91

Uniqueness

Uniqueness Score: -1.00%

Function 00B3CAF5, Relevance: 8.8, APIs: 3, Strings: 2, Instructions: 38libraryloaderCOMMON

Download Yara Rule

APIs

GetModuleHandleExW.KERNEL32(00000000,mscoree.dll,00000000,?,?,?,00B3CAA6,00000003,?,00B3CA46,00000003,00B96660,0000000C,00B3CB9D,00000003,00000002), ref: 00B3CB15
GetProcAddress.KERNEL32(00000000,CorExitProcess), ref: 00B3CB28
FreeLibrary.KERNEL32(00000000,?,?,?,00B3CAA6,00000003,?,00B3CA46,00000003,00B96660,0000000C,00B3CB9D,00000003,00000002,00000000), ref: 00B3CB4B

Strings

mscoree.dll, xrefs: 00B3CB0E
CorExitProcess, xrefs: 00B3CB20

Memory Dump Source

Source File: 00000001.00000002.422151708.0000000000A71000.00000020.00020000.sdmp, Offset: 00A70000, based on PE: true

Associated: 00000001.00000002.422117330.0000000000A70000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422651142.0000000000B5D000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422716671.0000000000B9A000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422731871.0000000000B9D000.00000008.00020000.sdmp Download File
Associated: 00000001.00000002.422740097.0000000000BA0000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422749600.0000000000BA4000.00000002.00020000.sdmp Download File

Similarity

API ID: AddressFreeHandleLibraryModuleProc
String ID: CorExitProcess$mscoree.dll
API String ID: 4061214504-1276376045
Opcode ID: ab1124741533fa8ed13c2719f6ccbcbe59e5a915ea6cff7c56d0ef38d58f55ba
Instruction ID: bed3f590200c35b6258e0a4d40b2f23c68d3807e5e8d6b84e67a21217602ec4e
Opcode Fuzzy Hash: ab1124741533fa8ed13c2719f6ccbcbe59e5a915ea6cff7c56d0ef38d58f55ba
Instruction Fuzzy Hash: C9F03C31A04218ABCB119FA5DC0AB9EBFF4EF04712F5041E8E809A31A0DF31AE40CB91

Uniqueness

Uniqueness Score: -1.00%

Function 00A9DCC0, Relevance: 8.8, APIs: 3, Strings: 2, Instructions: 38registryCOMMON

Download Yara Rule

APIs

RegOpenKeyExW.ADVAPI32(80000001,Software\LDSGameMininews\Debug,00000000,00020019,?), ref: 00A9DCE4
RegQueryValueExW.ADVAPI32(00000000,CtxMenu,00000000,00000000,?,?), ref: 00A9DD0A
RegCloseKey.ADVAPI32(00000000), ref: 00A9DD23

Strings

CtxMenu, xrefs: 00A9DD02
Software\LDSGameMininews\Debug, xrefs: 00A9DCDA

Memory Dump Source

Source File: 00000001.00000002.422151708.0000000000A71000.00000020.00020000.sdmp, Offset: 00A70000, based on PE: true

Associated: 00000001.00000002.422117330.0000000000A70000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422651142.0000000000B5D000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422716671.0000000000B9A000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422731871.0000000000B9D000.00000008.00020000.sdmp Download File
Associated: 00000001.00000002.422740097.0000000000BA0000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422749600.0000000000BA4000.00000002.00020000.sdmp Download File

Similarity

API ID: CloseOpenQueryValue
String ID: CtxMenu$Software\LDSGameMininews\Debug
API String ID: 3677997916-289118624
Opcode ID: 8546e456119ba3661687053da1ef8d94fdc2c2c072d402ac6fbd7c74cf9cb9ac
Instruction ID: 069f5efab7fff3eefe2203c6acc89500b43d940e9abfff07a891d33fd83dcd85
Opcode Fuzzy Hash: 8546e456119ba3661687053da1ef8d94fdc2c2c072d402ac6fbd7c74cf9cb9ac
Instruction Fuzzy Hash: D6F03C71A0121CBADB30DFA19C49FDEBFBCEB00755F104195ED04A2250D6709A54EAE0

Uniqueness

Uniqueness Score: -1.00%

Function 6C2B772A, Relevance: 8.8, APIs: 3, Strings: 2, Instructions: 38libraryloaderCOMMON

Download Yara Rule

APIs

GetModuleHandleExW.KERNEL32(00000000,mscoree.dll,00000000,?,?,?,6C2B76DB,00000003,?,6C2B767B,00000003,6C2C9208,0000000C,6C2B77C3,00000003,00000002), ref: 6C2B774A
GetProcAddress.KERNEL32(00000000,CorExitProcess), ref: 6C2B775D
FreeLibrary.KERNEL32(00000000,?,?,?,6C2B76DB,00000003,?,6C2B767B,00000003,6C2C9208,0000000C,6C2B77C3,00000003,00000002,00000000), ref: 6C2B7780

Strings

mscoree.dll, xrefs: 6C2B7743
CorExitProcess, xrefs: 6C2B7755

Memory Dump Source

Source File: 00000001.00000002.425332215.000000006C2B1000.00000020.00020000.sdmp, Offset: 6C2B0000, based on PE: true

Associated: 00000001.00000002.425298119.000000006C2B0000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.425472962.000000006C2C3000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.425510904.000000006C2CA000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.425525863.000000006C2CC000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.428429287.000000006CCCC000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.430600185.000000006D6CC000.00000002.00020000.sdmp Download File

Similarity

API ID: AddressFreeHandleLibraryModuleProc
String ID: CorExitProcess$mscoree.dll
API String ID: 4061214504-1276376045
Opcode ID: bf9aa42c64a014e27c56136953c586c0152bd396ff14a92617e268fdd05a8891
Instruction ID: a9d804dc1df594ada29b89897ec14812bdc903530d51ce06654db2deda48b3d6
Opcode Fuzzy Hash: bf9aa42c64a014e27c56136953c586c0152bd396ff14a92617e268fdd05a8891
Instruction Fuzzy Hash: F5F01D71A0150CABCB419F65C848BEEBBB8FF0569AF104555FC06A2680DF719A44DA90

Uniqueness

Uniqueness Score: -1.00%

Function 00A991E0, Relevance: 7.7, APIs: 5, Instructions: 165COMMON

Download Yara Rule

APIs

EnterCriticalSection.KERNEL32(?,F084A4B2), ref: 00A99224
LeaveCriticalSection.KERNEL32(?,F084A4B2), ref: 00A992F1
CloseHandle.KERNEL32(?,F084A4B2), ref: 00A9932C
LeaveCriticalSection.KERNEL32(?,F084A4B2), ref: 00A99341
Concurrency::cancel_current_task.LIBCPMT ref: 00A9937E

Part of subcall function 00AB607F: __CxxThrowException@8.LIBVCRUNTIME ref: 00AB6096

Part of subcall function 00AC0850: PostMessageW.USER32(00000005,?,00AAD76B,?), ref: 00AC085F

Memory Dump Source

Source File: 00000001.00000002.422151708.0000000000A71000.00000020.00020000.sdmp, Offset: 00A70000, based on PE: true

Associated: 00000001.00000002.422117330.0000000000A70000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422651142.0000000000B5D000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422716671.0000000000B9A000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422731871.0000000000B9D000.00000008.00020000.sdmp Download File
Associated: 00000001.00000002.422740097.0000000000BA0000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422749600.0000000000BA4000.00000002.00020000.sdmp Download File

Similarity

API ID: CriticalSection$Leave$CloseConcurrency::cancel_current_taskEnterException@8HandleMessagePostThrow
String ID:
API String ID: 3088635052-0
Opcode ID: e16e73dc6e384d929c78a71f20f960c58870f10a8b69d7af1233d0ed35c32175
Instruction ID: ae74f97c072ea431df907d9866e68c60f37b7f6cf31b394bf0445b2cebccada9
Opcode Fuzzy Hash: e16e73dc6e384d929c78a71f20f960c58870f10a8b69d7af1233d0ed35c32175
Instruction Fuzzy Hash: C0514671B01605AFDF28CF69C494BAEB7F9BF48301F24465DE8069B691CB34E940CB90

Uniqueness

Uniqueness Score: -1.00%

Function 00A8DB40, Relevance: 7.7, APIs: 5, Instructions: 153windowthreadCOMMON

Download Yara Rule

APIs

IsWindowVisible.USER32 ref: 00A8DBBB
GetCurrentThreadId.KERNEL32 ref: 00A8DC43
SystemParametersInfoW.USER32 ref: 00A8DC7F
SystemParametersInfoW.USER32 ref: 00A8DC96
SystemParametersInfoW.USER32 ref: 00A8DCC9

Memory Dump Source

Source File: 00000001.00000002.422151708.0000000000A71000.00000020.00020000.sdmp, Offset: 00A70000, based on PE: true

Associated: 00000001.00000002.422117330.0000000000A70000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422651142.0000000000B5D000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422716671.0000000000B9A000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422731871.0000000000B9D000.00000008.00020000.sdmp Download File
Associated: 00000001.00000002.422740097.0000000000BA0000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422749600.0000000000BA4000.00000002.00020000.sdmp Download File

Similarity

API ID: InfoParametersSystem$CurrentThreadVisibleWindow
String ID:
API String ID: 1902183068-0
Opcode ID: 930cbfe7c7af0e666617e8b662d6050bd648b35dee99423cc8f18af570072b30
Instruction ID: 26e1030cd90bad8a56dcb24d7e8781a09efaca2140e2e3969bb2cda5a7fd1c31
Opcode Fuzzy Hash: 930cbfe7c7af0e666617e8b662d6050bd648b35dee99423cc8f18af570072b30
Instruction Fuzzy Hash: CB51BD74602205EFEF24AF60D988BAEBBB8FF04316F204158F8059B2D0D770AE54DB90

Uniqueness

Uniqueness Score: -1.00%

Function 00B3D513, Relevance: 7.6, APIs: 5, Instructions: 129COMMON

Download Yara Rule

APIs

_free.LIBCMT ref: 00B3D585
_free.LIBCMT ref: 00B3D5A5

Memory Dump Source

Source File: 00000001.00000002.422151708.0000000000A71000.00000020.00020000.sdmp, Offset: 00A70000, based on PE: true

Associated: 00000001.00000002.422117330.0000000000A70000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422651142.0000000000B5D000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422716671.0000000000B9A000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422731871.0000000000B9D000.00000008.00020000.sdmp Download File
Associated: 00000001.00000002.422740097.0000000000BA0000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422749600.0000000000BA4000.00000002.00020000.sdmp Download File

Similarity

API ID: _free
String ID:
API String ID: 269201875-0
Opcode ID: f9f58c115d6bbae7f6c03c0b4951b614692c39f96dda484d2cd02954e8b4af1d
Instruction ID: 674dfdd0a502f460eb7387bfbbc065398b2e6021f275d363f22177b38f4c3d64
Opcode Fuzzy Hash: f9f58c115d6bbae7f6c03c0b4951b614692c39f96dda484d2cd02954e8b4af1d
Instruction Fuzzy Hash: 8C41D332E002109FCB20DF78D981A5EB7F5EF89714F2685A9E925EB351DB31AD01CB80

Uniqueness

Uniqueness Score: -1.00%

Function 6C2B7F03, Relevance: 7.6, APIs: 5, Instructions: 129COMMON

Download Yara Rule

APIs

_free.LIBCMT ref: 6C2B7F75
_free.LIBCMT ref: 6C2B7F95

Memory Dump Source

Source File: 00000001.00000002.425332215.000000006C2B1000.00000020.00020000.sdmp, Offset: 6C2B0000, based on PE: true

Associated: 00000001.00000002.425298119.000000006C2B0000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.425472962.000000006C2C3000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.425510904.000000006C2CA000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.425525863.000000006C2CC000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.428429287.000000006CCCC000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.430600185.000000006D6CC000.00000002.00020000.sdmp Download File

Similarity

API ID: _free
String ID:
API String ID: 269201875-0
Opcode ID: 388acc085736136b8a69f2fa8c275fc5fdd274b50c36ac7effa3fe7c72a49ff4
Instruction ID: 76a79e1ca68cac03b8797b58ab6a3bb196ca02188223a958a7881c5c0f825c3c
Opcode Fuzzy Hash: 388acc085736136b8a69f2fa8c275fc5fdd274b50c36ac7effa3fe7c72a49ff4
Instruction Fuzzy Hash: 4341A332A002089FCB14DF78C884A9DB7B5FF8579CF1545A9E915FB781DB31A905CB90

Uniqueness

Uniqueness Score: -1.00%

Function 00A9F220, Relevance: 7.6, APIs: 5, Instructions: 113COMMON

Download Yara Rule

APIs

std::_Lockit::_Lockit.LIBCPMT ref: 00A9F251
std::_Lockit::_Lockit.LIBCPMT ref: 00A9F26F
std::_Lockit::~_Lockit.LIBCPMT ref: 00A9F28F
std::_Facet_Register.LIBCPMT ref: 00A9F346
std::_Lockit::~_Lockit.LIBCPMT ref: 00A9F35E

Memory Dump Source

Source File: 00000001.00000002.422151708.0000000000A71000.00000020.00020000.sdmp, Offset: 00A70000, based on PE: true

Associated: 00000001.00000002.422117330.0000000000A70000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422651142.0000000000B5D000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422716671.0000000000B9A000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422731871.0000000000B9D000.00000008.00020000.sdmp Download File
Associated: 00000001.00000002.422740097.0000000000BA0000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422749600.0000000000BA4000.00000002.00020000.sdmp Download File

Similarity

API ID: std::_$Lockit$Lockit::_Lockit::~_$Facet_Register
String ID:
API String ID: 459529453-0
Opcode ID: 07f85da230edad8bb3f572e5ded72e655b72fc11ea101d9d4c18c384d9ceebec
Instruction ID: 875fb7afe34a7e309190dd13809a1035780078047b8707f60d8d712b7782bfd6
Opcode Fuzzy Hash: 07f85da230edad8bb3f572e5ded72e655b72fc11ea101d9d4c18c384d9ceebec
Instruction Fuzzy Hash: 36419E76A002148FCF21DF58D981BEABBF4EB04710F154169E856DB352DB39AD41CBC1

Uniqueness

Uniqueness Score: -1.00%

Function 00B400AB, Relevance: 7.6, APIs: 5, Instructions: 53COMMON

Download Yara Rule

APIs

GetLastError.KERNEL32(?,?,?,00B27C6C,00B41228,?,00B40055,00000001,00000364,?,00B2DD21,00B96398,00000010), ref: 00B400B0
_free.LIBCMT ref: 00B400E5
_free.LIBCMT ref: 00B4010C
SetLastError.KERNEL32(00000000), ref: 00B40119
SetLastError.KERNEL32(00000000), ref: 00B40122

Memory Dump Source

Source File: 00000001.00000002.422151708.0000000000A71000.00000020.00020000.sdmp, Offset: 00A70000, based on PE: true

Associated: 00000001.00000002.422117330.0000000000A70000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422651142.0000000000B5D000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422716671.0000000000B9A000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422731871.0000000000B9D000.00000008.00020000.sdmp Download File
Associated: 00000001.00000002.422740097.0000000000BA0000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422749600.0000000000BA4000.00000002.00020000.sdmp Download File

Similarity

API ID: ErrorLast$_free
String ID:
API String ID: 3170660625-0
Opcode ID: ade6a9d1ae685f4a210a302008946b20c012a9ee06520af72c4c4031dc8c47c1
Instruction ID: fc06bfc5bc3e7c5c41c06feadb187cf0dab5dbd7e4e2e0aa0406b39efa0ef44d
Opcode Fuzzy Hash: ade6a9d1ae685f4a210a302008946b20c012a9ee06520af72c4c4031dc8c47c1
Instruction Fuzzy Hash: B001F43261071037C23277756D85F2B21E9DBD17B2B2105E9F605B3291EF748B01B262

Uniqueness

Uniqueness Score: -1.00%

Function 6C2B901A, Relevance: 7.6, APIs: 5, Instructions: 53COMMON

Download Yara Rule

APIs

GetLastError.KERNEL32(?,?,?,6C2B5D9A,6C2BA52C,?,6C2B73C2,?,00000004,?,?,?,?,6C2B7F90,?,?), ref: 6C2B901F
_free.LIBCMT ref: 6C2B9054
_free.LIBCMT ref: 6C2B907B
SetLastError.KERNEL32(00000000,?,?,?,00000000,00000000,?,00000000), ref: 6C2B9088
SetLastError.KERNEL32(00000000,?,?,?,00000000,00000000,?,00000000), ref: 6C2B9091

Memory Dump Source

Source File: 00000001.00000002.425332215.000000006C2B1000.00000020.00020000.sdmp, Offset: 6C2B0000, based on PE: true

Associated: 00000001.00000002.425298119.000000006C2B0000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.425472962.000000006C2C3000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.425510904.000000006C2CA000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.425525863.000000006C2CC000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.428429287.000000006CCCC000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.430600185.000000006D6CC000.00000002.00020000.sdmp Download File

Similarity

API ID: ErrorLast$_free
String ID:
API String ID: 3170660625-0
Opcode ID: 60266728c8e5702bbc6ff4e7dbcadf7dadc8e794f66cd9b83d6e9536e6aad53c
Instruction ID: 8a0e1d901ededa217c2b658236447b0ebbb13e37bc5b0f1e0ea5bf1527dabe92
Opcode Fuzzy Hash: 60266728c8e5702bbc6ff4e7dbcadf7dadc8e794f66cd9b83d6e9536e6aad53c
Instruction Fuzzy Hash: 9F01DB36244A096AD71275350C88E8B367DABE27ED7240D14FE15B3AC1EF3285158111

Uniqueness

Uniqueness Score: -1.00%

Function 00B4A236, Relevance: 7.5, APIs: 5, Instructions: 40COMMON

Download Yara Rule

APIs

_free.LIBCMT ref: 00B4A24E

Part of subcall function 00B40176: RtlFreeHeap.NTDLL(00000000,00000000,?,00B4A4E9,?,00000000,?,00000000,?,00B4A78D,?,00000007,?,?,00B4AAEC,?), ref: 00B4018C
Part of subcall function 00B40176: GetLastError.KERNEL32(?,?,00B4A4E9,?,00000000,?,00000000,?,00B4A78D,?,00000007,?,?,00B4AAEC,?,?), ref: 00B4019E

_free.LIBCMT ref: 00B4A260
_free.LIBCMT ref: 00B4A272
_free.LIBCMT ref: 00B4A284
_free.LIBCMT ref: 00B4A296

Memory Dump Source

Source File: 00000001.00000002.422151708.0000000000A71000.00000020.00020000.sdmp, Offset: 00A70000, based on PE: true

Associated: 00000001.00000002.422117330.0000000000A70000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422651142.0000000000B5D000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422716671.0000000000B9A000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422731871.0000000000B9D000.00000008.00020000.sdmp Download File
Associated: 00000001.00000002.422740097.0000000000BA0000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422749600.0000000000BA4000.00000002.00020000.sdmp Download File

Similarity

API ID: _free$ErrorFreeHeapLast
String ID:
API String ID: 776569668-0
Opcode ID: 98d9a9848b7802aab90447b452212e70b7545e62d1dd1f0f5519fed758042865
Instruction ID: 34bfd1b7760748df10fbcfad5e12353a6e71d8daa006b9c9b22265603719734a
Opcode Fuzzy Hash: 98d9a9848b7802aab90447b452212e70b7545e62d1dd1f0f5519fed758042865
Instruction Fuzzy Hash: 16F01272554214AB8635FB68F6C1C1B77F9EB00710754488AF244E7621CF71FE80EA55

Uniqueness

Uniqueness Score: -1.00%

Function 6C2BE2FA, Relevance: 7.5, APIs: 5, Instructions: 40COMMON

Download Yara Rule

APIs

_free.LIBCMT ref: 6C2BE312

Part of subcall function 6C2B90E5: HeapFree.KERNEL32(00000000,00000000,?,6C2BE391,?,00000000,?,00000000,?,6C2BE3B8,?,00000007,?,?,6C2BC1BE,?), ref: 6C2B90FB
Part of subcall function 6C2B90E5: GetLastError.KERNEL32(?,?,6C2BE391,?,00000000,?,00000000,?,6C2BE3B8,?,00000007,?,?,6C2BC1BE,?,?), ref: 6C2B910D

_free.LIBCMT ref: 6C2BE324
_free.LIBCMT ref: 6C2BE336
_free.LIBCMT ref: 6C2BE348
_free.LIBCMT ref: 6C2BE35A

Memory Dump Source

Source File: 00000001.00000002.425332215.000000006C2B1000.00000020.00020000.sdmp, Offset: 6C2B0000, based on PE: true

Associated: 00000001.00000002.425298119.000000006C2B0000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.425472962.000000006C2C3000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.425510904.000000006C2CA000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.425525863.000000006C2CC000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.428429287.000000006CCCC000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.430600185.000000006D6CC000.00000002.00020000.sdmp Download File

Similarity

API ID: _free$ErrorFreeHeapLast
String ID:
API String ID: 776569668-0
Opcode ID: a14d097f14da9e8f462accba0e1d60441add1c4e755da93638bd406babfb9abe
Instruction ID: f1fa92a164b6d995f7fbcc1048718139a53c6f0ab66f3912917ee5603962111e
Opcode Fuzzy Hash: a14d097f14da9e8f462accba0e1d60441add1c4e755da93638bd406babfb9abe
Instruction Fuzzy Hash: BCF06931A0560D9BCE20AA24D489C6A33F9BF5039D3604C44F819E7B40CB31F8908AE0

Uniqueness

Uniqueness Score: -1.00%

Function 00A841D0, Relevance: 7.5, APIs: 5, Instructions: 33fileCOMMON

Download Yara Rule

APIs

DeleteFileW.KERNEL32(00000010,00000010,?,00A83E97,00000010,?,?,?,?,?), ref: 00A841D8
PathFileExistsW.SHLWAPI(00000010,?,00A83E97,00000010,?,?,?,?,?), ref: 00A841E3
SetFileAttributesW.KERNEL32(00000010,00000080,?,00A83E97,00000010,?,?,?,?,?), ref: 00A841F3
DeleteFileW.KERNEL32(00000010,?,00A83E97,00000010,?,?,?,?,?), ref: 00A841FE
MoveFileExW.KERNEL32(00000010,00000000,00000004,?,00A83E97,00000010,?,?,?,?,?), ref: 00A8420D

Memory Dump Source

Source File: 00000001.00000002.422151708.0000000000A71000.00000020.00020000.sdmp, Offset: 00A70000, based on PE: true

Associated: 00000001.00000002.422117330.0000000000A70000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422651142.0000000000B5D000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422716671.0000000000B9A000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422731871.0000000000B9D000.00000008.00020000.sdmp Download File
Associated: 00000001.00000002.422740097.0000000000BA0000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422749600.0000000000BA4000.00000002.00020000.sdmp Download File

Similarity

API ID: File$Delete$AttributesExistsMovePath
String ID:
API String ID: 3704743691-0
Opcode ID: b36e6afb136455f686e1e9bc6f35490052a634606472468facf79782b5b6b519
Instruction ID: a0c2e96eaf6c52d7920f06872eccc08b86b50095dc2c612b0920b17a4aa7123c
Opcode Fuzzy Hash: b36e6afb136455f686e1e9bc6f35490052a634606472468facf79782b5b6b519
Instruction Fuzzy Hash: 46E06D3138532267EA302B71AC48BDA369C9F15797F010364F609E6090EFA5E50287E9

Uniqueness

Uniqueness Score: -1.00%

Function 00A89D90, Relevance: 7.3, APIs: 3, Strings: 1, Instructions: 265COMMON

Download Yara Rule

APIs

PathFileExistsW.SHLWAPI(?), ref: 00A89F12
PathFileExistsW.SHLWAPI(?,?,?,?), ref: 00A89F51
PathFileExistsW.SHLWAPI(?), ref: 00A89F5D

Strings

%s\%s.json, xrefs: 00A89EFB

Memory Dump Source

Source File: 00000001.00000002.422151708.0000000000A71000.00000020.00020000.sdmp, Offset: 00A70000, based on PE: true

Associated: 00000001.00000002.422117330.0000000000A70000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422651142.0000000000B5D000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422716671.0000000000B9A000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422731871.0000000000B9D000.00000008.00020000.sdmp Download File
Associated: 00000001.00000002.422740097.0000000000BA0000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422749600.0000000000BA4000.00000002.00020000.sdmp Download File

Similarity

API ID: ExistsFilePath
String ID: %s\%s.json
API String ID: 1174141254-2782444307
Opcode ID: 29d5ecbce42f51d819b70148ed5d41394009a4a32ef741a4909293a7bc382c27
Instruction ID: be7c26e021c85a716658224477af8997bfba5d7b875dc6cd7d62dc0917929d05
Opcode Fuzzy Hash: 29d5ecbce42f51d819b70148ed5d41394009a4a32ef741a4909293a7bc382c27
Instruction Fuzzy Hash: 6DA18F70A0120ADBDB14EF64CD45BEEB7B8EF14314F1481A9E509E7292EB319E44CFA1

Uniqueness

Uniqueness Score: -1.00%

Function 00A83AB9, Relevance: 7.2, APIs: 1, Strings: 3, Instructions: 241COMMON

Download Yara Rule

APIs

Part of subcall function 00A74130: FindResourceExW.KERNEL32(00000000,00000006,?,00000000,00000000,00B5DAF8,?,?,?,?,00A736E1,00B5DAF8,?,?,?,00B5DAF8), ref: 00A74186
Part of subcall function 00A74130: FindResourceW.KERNEL32(00000000,00B5DAF8,00000006,?,00B5DAF8), ref: 00A741C4

_wcsstr.LIBVCRUNTIME ref: 00A83BA1

Strings

;%s;, xrefs: 00A83B51
InstalledGameIds, xrefs: 00A83B61, 00A83CBF
_RemoveFromInstallList regPath: %s, xrefs: 00A83B22

Memory Dump Source

Source File: 00000001.00000002.422151708.0000000000A71000.00000020.00020000.sdmp, Offset: 00A70000, based on PE: true

Associated: 00000001.00000002.422117330.0000000000A70000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422651142.0000000000B5D000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422716671.0000000000B9A000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422731871.0000000000B9D000.00000008.00020000.sdmp Download File
Associated: 00000001.00000002.422740097.0000000000BA0000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422749600.0000000000BA4000.00000002.00020000.sdmp Download File

Similarity

API ID: FindResource$_wcsstr
String ID: ;%s;$InstalledGameIds$_RemoveFromInstallList regPath: %s
API String ID: 4176827116-958958514
Opcode ID: 6b4bfa6cc0dfcfbe0b61116e83940b37059affddcc4e3887f6c97e8e0028829e
Instruction ID: 9ebdd04ff5e271fcb47d18234f1fd2eeb24e8b8919a4326df67642ef49850329
Opcode Fuzzy Hash: 6b4bfa6cc0dfcfbe0b61116e83940b37059affddcc4e3887f6c97e8e0028829e
Instruction Fuzzy Hash: C491B3B1A0120A9FDF14EFACC995AAEB7F1BF44714F1481ACE815A7392DB349E04CB51

Uniqueness

Uniqueness Score: -1.00%

Function 00A8CD10, Relevance: 7.2, APIs: 1, Strings: 3, Instructions: 183COMMON

Download Yara Rule

APIs

Part of subcall function 00A745F0: GetProcessHeap.KERNEL32(00AA5638,F084A4B2), ref: 00A74601

PathFindFileNameW.SHLWAPI(00B546F0,00000000,?,?,?,?,?,00000010,00000000,00B546F0,000000FF), ref: 00A8CDCC

Strings

CMainControl::_SwitchSkinFile, use skin %s, xrefs: 00A8CE85
.ui, xrefs: 00A8CE31
WdGame2Run_%s, xrefs: 00A8CD64

Memory Dump Source

Source File: 00000001.00000002.422151708.0000000000A71000.00000020.00020000.sdmp, Offset: 00A70000, based on PE: true

Associated: 00000001.00000002.422117330.0000000000A70000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422651142.0000000000B5D000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422716671.0000000000B9A000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422731871.0000000000B9D000.00000008.00020000.sdmp Download File
Associated: 00000001.00000002.422740097.0000000000BA0000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422749600.0000000000BA4000.00000002.00020000.sdmp Download File

Similarity

API ID: FileFindHeapNamePathProcess
String ID: .ui$CMainControl::_SwitchSkinFile, use skin %s$WdGame2Run_%s
API String ID: 1531794109-3340133399
Opcode ID: 6ef731b21ebe0d1169feb21075713f07927bf44035ba943796e4a43cbaf7e6b7
Instruction ID: 5cbe059a8a2b89f18a78d0c8e7ddcf14205424b67e2c0b45f5748df15e69aa64
Opcode Fuzzy Hash: 6ef731b21ebe0d1169feb21075713f07927bf44035ba943796e4a43cbaf7e6b7
Instruction Fuzzy Hash: DC51A671A0050AEFDB04EB68CD45BAEF7B8FF05324F14C269E41597292EB35A914CFA1

Uniqueness

Uniqueness Score: -1.00%

Function 00A85B70, Relevance: 7.2, APIs: 2, Strings: 2, Instructions: 173threadCOMMON

Download Yara Rule

APIs

GetCurrentThreadId.KERNEL32 ref: 00A85BA0
IsWindow.USER32(FFFFFFFF), ref: 00A85C21

Strings

progress_desc, xrefs: 00A85CB8
close, xrefs: 00A85D3D

Memory Dump Source

Source File: 00000001.00000002.422151708.0000000000A71000.00000020.00020000.sdmp, Offset: 00A70000, based on PE: true

Associated: 00000001.00000002.422117330.0000000000A70000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422651142.0000000000B5D000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422716671.0000000000B9A000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422731871.0000000000B9D000.00000008.00020000.sdmp Download File
Associated: 00000001.00000002.422740097.0000000000BA0000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422749600.0000000000BA4000.00000002.00020000.sdmp Download File

Similarity

API ID: CurrentThreadWindow
String ID: close$progress_desc
API String ID: 3525884807-185650724
Opcode ID: ea1dd4e27ab26d8f62e524a1ac41a533c0150601afa8b1536e65e330bf524c4c
Instruction ID: eba7f03ae5eb085fb4d3ec9a530adbca1dc1786e44639dcae1ed3f442a2227d9
Opcode Fuzzy Hash: ea1dd4e27ab26d8f62e524a1ac41a533c0150601afa8b1536e65e330bf524c4c
Instruction Fuzzy Hash: 3B51F170E00B05DBDB10EFA4C989BAEBBF9AF44720F148268E8159B3D1DB749D05CB91

Uniqueness

Uniqueness Score: -1.00%

Function 00A81344, Relevance: 7.2, APIs: 1, Strings: 3, Instructions: 167COMMON

Download Yara Rule

APIs

ShellExecuteW.SHELL32(00000000,open,?,?,00000000), ref: 00A8146F

Strings

open, xrefs: 00A81468
target_dir, xrefs: 00A81365
--target_dir="%s", xrefs: 00A81425

Memory Dump Source

Source File: 00000001.00000002.422151708.0000000000A71000.00000020.00020000.sdmp, Offset: 00A70000, based on PE: true

Associated: 00000001.00000002.422117330.0000000000A70000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422651142.0000000000B5D000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422716671.0000000000B9A000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422731871.0000000000B9D000.00000008.00020000.sdmp Download File
Associated: 00000001.00000002.422740097.0000000000BA0000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422749600.0000000000BA4000.00000002.00020000.sdmp Download File

Similarity

API ID: ExecuteShell
String ID: --target_dir="%s"$open$target_dir
API String ID: 587946157-111038580
Opcode ID: 2bc7725dff6702a336d329b593dd6b5abd700b70e50ccda9ab6e9a38a6e38028
Instruction ID: 378ad12caf0ae5d8b97c9b61c1d88118ea43b7e656d37d13e298c812ef1aa5c7
Opcode Fuzzy Hash: 2bc7725dff6702a336d329b593dd6b5abd700b70e50ccda9ab6e9a38a6e38028
Instruction Fuzzy Hash: 6C618F71900649DFDB00DFA8CC49B9DBBF4FF15325F188269E419E7292EB349905CB91

Uniqueness

Uniqueness Score: -1.00%

Function 00A9D430, Relevance: 7.1, APIs: 1, Strings: 3, Instructions: 146COMMON

Download Yara Rule

APIs

SimpleUString::operator=.MSOBJ140-MSVCRT ref: 00A9D4E8

Strings

r, xrefs: 00A9D525, 00A9D556, 00A9D58C, 00A9D5AC
CWebBrowserLogic::_InvokeSendStatData, not enough parameter!, xrefs: 00A9D468
CWebBrowserLogic::_InvokeSendStatData, invalid parameters, arg1=%d, arg2=%d, xrefs: 00A9D5EE

Memory Dump Source

Source File: 00000001.00000002.422151708.0000000000A71000.00000020.00020000.sdmp, Offset: 00A70000, based on PE: true

Associated: 00000001.00000002.422117330.0000000000A70000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422651142.0000000000B5D000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422716671.0000000000B9A000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422731871.0000000000B9D000.00000008.00020000.sdmp Download File
Associated: 00000001.00000002.422740097.0000000000BA0000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422749600.0000000000BA4000.00000002.00020000.sdmp Download File

Similarity

API ID: SimpleString::operator=
String ID: r$CWebBrowserLogic::_InvokeSendStatData, invalid parameters, arg1=%d, arg2=%d$CWebBrowserLogic::_InvokeSendStatData, not enough parameter!
API String ID: 356670603-2000989156
Opcode ID: ce0dc2509f89062c8c267a2119c6a2f049310582e2b0333e2ec372ffd5318320
Instruction ID: f78bfc56565670ea8ffd352533eb734ce20a3083ba28c48f2b791f3201f36b0d
Opcode Fuzzy Hash: ce0dc2509f89062c8c267a2119c6a2f049310582e2b0333e2ec372ffd5318320
Instruction Fuzzy Hash: 8351B071A00258DFDF10DFA8C946BAEBBF4FF19304F514469E406B7291DB746A84CBA1

Uniqueness

Uniqueness Score: -1.00%

Function 00ABE910, Relevance: 7.1, APIs: 3, Strings: 1, Instructions: 141keyboardCOMMON

Download Yara Rule

APIs

GetTickCount.KERNEL32 ref: 00ABEA0E
_wcsstr.LIBVCRUNTIME ref: 00ABEA6B
GetKeyState.USER32(00000010), ref: 00ABEA85

Strings

RichEditUI, xrefs: 00ABEA60

Memory Dump Source

Source File: 00000001.00000002.422151708.0000000000A71000.00000020.00020000.sdmp, Offset: 00A70000, based on PE: true

Associated: 00000001.00000002.422117330.0000000000A70000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422651142.0000000000B5D000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422716671.0000000000B9A000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422731871.0000000000B9D000.00000008.00020000.sdmp Download File
Associated: 00000001.00000002.422740097.0000000000BA0000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422749600.0000000000BA4000.00000002.00020000.sdmp Download File

Similarity

API ID: CountStateTick_wcsstr
String ID: RichEditUI
API String ID: 1310091763-2796277332
Opcode ID: e6b8268af39fac23ec77138c4456d907445b61a9fe3dc93f5b3883a8037b3750
Instruction ID: fe47c4bf73d5ad8d577e31d59465f2f4d25b3548af6ea33be1f4063e16c6ea81
Opcode Fuzzy Hash: e6b8268af39fac23ec77138c4456d907445b61a9fe3dc93f5b3883a8037b3750
Instruction Fuzzy Hash: 1241A035A002089FCF14DF68D884AEE77B9FF99311F0481A9EC099B356DB719945CB91

Uniqueness

Uniqueness Score: -1.00%

Function 00A85D90, Relevance: 7.1, APIs: 1, Strings: 3, Instructions: 118COMMON

Download Yara Rule

APIs

Part of subcall function 00A745F0: GetProcessHeap.KERNEL32(00AA5638,F084A4B2), ref: 00A74601

Part of subcall function 00A74130: FindResourceExW.KERNEL32(00000000,00000006,?,00000000,00000000,00B5DAF8,?,?,?,?,00A736E1,00B5DAF8,?,?,?,00B5DAF8), ref: 00A74186
Part of subcall function 00A74130: FindResourceW.KERNEL32(00000000,00B5DAF8,00000006,?,00B5DAF8), ref: 00A741C4

ShellExecuteW.SHELL32(00000000,open,F084A4B2,?,00000000,00000005), ref: 00A85E9D

Strings

open, xrefs: 00A85E96
inst_open, xrefs: 00A85DDC
CInstallWindow::_RunPlayGame, '%s' not valid, xrefs: 00A85E81

Memory Dump Source

Source File: 00000001.00000002.422151708.0000000000A71000.00000020.00020000.sdmp, Offset: 00A70000, based on PE: true

Associated: 00000001.00000002.422117330.0000000000A70000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422651142.0000000000B5D000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422716671.0000000000B9A000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422731871.0000000000B9D000.00000008.00020000.sdmp Download File
Associated: 00000001.00000002.422740097.0000000000BA0000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422749600.0000000000BA4000.00000002.00020000.sdmp Download File

Similarity

API ID: FindResource$ExecuteHeapProcessShell
String ID: CInstallWindow::_RunPlayGame, '%s' not valid$inst_open$open
API String ID: 4222810426-845131917
Opcode ID: df9a214afa738849536ff322565d3a8c44928a9a070da45d644ef16896074f38
Instruction ID: 445c3b9ea627192145957976b91d4c4b0282b000bfd55eb25466ef71a9083790
Opcode Fuzzy Hash: df9a214afa738849536ff322565d3a8c44928a9a070da45d644ef16896074f38
Instruction Fuzzy Hash: B141C771A00605EBDB10FF78CD0AB5EB7B4EF45724F148699F824A72D2DB745A04CB91

Uniqueness

Uniqueness Score: -1.00%

Function 00A74F90, Relevance: 7.1, APIs: 3, Strings: 1, Instructions: 118COMMON

Download Yara Rule

APIs

FindWindowExW.USER32(00000000,00000000,LITE_GAME_BOX_MAIN_WINDOW,00000000), ref: 00A74FE1
EnableWindow.USER32(00000000,00000000), ref: 00A75034
EnableWindow.USER32(00000000,00000001), ref: 00A75064

Strings

LITE_GAME_BOX_MAIN_WINDOW, xrefs: 00A74FD9

Memory Dump Source

Source File: 00000001.00000002.422151708.0000000000A71000.00000020.00020000.sdmp, Offset: 00A70000, based on PE: true

Associated: 00000001.00000002.422117330.0000000000A70000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422651142.0000000000B5D000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422716671.0000000000B9A000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422731871.0000000000B9D000.00000008.00020000.sdmp Download File
Associated: 00000001.00000002.422740097.0000000000BA0000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422749600.0000000000BA4000.00000002.00020000.sdmp Download File

Similarity

API ID: Window$Enable$Find
String ID: LITE_GAME_BOX_MAIN_WINDOW
API String ID: 241260159-995087692
Opcode ID: 78f4b1d57faca5eec76a80a28dd1f91e3f2fe0a204a1f5f132427c87b25587f4
Instruction ID: 127f0ce7fbab9f3960d80659b621ba12d6eba12a7ffaeaac07c250e7811eac48
Opcode Fuzzy Hash: 78f4b1d57faca5eec76a80a28dd1f91e3f2fe0a204a1f5f132427c87b25587f4
Instruction Fuzzy Hash: 6B419172E006159FDB24DFA8CC91BAEB7F5FB48710F11856AE815A7280CB71AD018B90

Uniqueness

Uniqueness Score: -1.00%

Function 00A9A9B0, Relevance: 7.1, APIs: 1, Strings: 3, Instructions: 95COMMON

Download Yara Rule

APIs

Part of subcall function 00AC01F0: GetClassInfoExW.USER32 ref: 00AC022B
Part of subcall function 00AC01F0: GetClassInfoExW.USER32 ref: 00AC0247
Part of subcall function 00AC01F0: RegisterClassExW.USER32 ref: 00AC0278
Part of subcall function 00AC01F0: GetLastError.KERNEL32 ref: 00AC0283
Part of subcall function 00AC01F0: LoadCursorW.USER32(00000000,00007F00), ref: 00AC02E8
Part of subcall function 00AC01F0: RegisterClassW.USER32 ref: 00AC030D
Part of subcall function 00AC01F0: GetLastError.KERNEL32(?,?,00A77D4E), ref: 00AC0318

Part of subcall function 00AC0080: GetWindowRect.USER32 ref: 00AC00A9
Part of subcall function 00AC0080: GetWindowLongW.USER32(00000000,000000F0), ref: 00AC00BB
Part of subcall function 00AC0080: GetParent.USER32(00000000), ref: 00AC00CC
Part of subcall function 00AC0080: GetWindowLongW.USER32(00000000,000000F0), ref: 00AC00E6
Part of subcall function 00AC0080: SystemParametersInfoW.USER32 ref: 00AC0105
Part of subcall function 00AC0080: SetWindowPos.USER32(00000000,00000000,?,?,000000FF,000000FF,00000015), ref: 00AC019E

Part of subcall function 00AC0960: GetSystemMetrics.USER32 ref: 00AC0977
Part of subcall function 00AC0960: GetSystemMetrics.USER32 ref: 00AC097C
Part of subcall function 00AC0960: LoadImageW.USER32 ref: 00AC0988
Part of subcall function 00AC0960: SendMessageW.USER32(?,00000080,00000001,00000000), ref: 00AC09A2
Part of subcall function 00AC0960: GetSystemMetrics.USER32 ref: 00AC09A8
Part of subcall function 00AC0960: GetSystemMetrics.USER32 ref: 00AC09AD
Part of subcall function 00AC0960: LoadImageW.USER32 ref: 00AC09BD
Part of subcall function 00AC0960: SendMessageW.USER32(?,00000080,00000000,00000000), ref: 00AC09D1

IsZoomed.USER32(?), ref: 00A9AA53

Strings

max, xrefs: 00A9AA76
restore, xrefs: 00A9AA59
show, xrefs: 00A9AAD2

Memory Dump Source

Source File: 00000001.00000002.422151708.0000000000A71000.00000020.00020000.sdmp, Offset: 00A70000, based on PE: true

Associated: 00000001.00000002.422117330.0000000000A70000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422651142.0000000000B5D000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422716671.0000000000B9A000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422731871.0000000000B9D000.00000008.00020000.sdmp Download File
Associated: 00000001.00000002.422740097.0000000000BA0000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422749600.0000000000BA4000.00000002.00020000.sdmp Download File

Similarity

API ID: System$ClassMetricsWindow$InfoLoad$ErrorImageLastLongMessageRegisterSend$CursorParametersParentRectZoomed
String ID: max$restore$show
API String ID: 2328457674-3645472230
Opcode ID: 9aebc3d867df06f5a7a2ff1ae1cd59faf9a9310911f2ac320d7829cc282c849b
Instruction ID: 7b07e51676ec44ec84b9a70dd1689a9bc6ecec59bf3066101476fb349219f201
Opcode Fuzzy Hash: 9aebc3d867df06f5a7a2ff1ae1cd59faf9a9310911f2ac320d7829cc282c849b
Instruction Fuzzy Hash: A731B031350205BFEB19AB20CE43FA9B7A5FF44B40F008269F5155B2E2DBB1A910DB85

Uniqueness

Uniqueness Score: -1.00%

Function 00A78250, Relevance: 7.1, APIs: 3, Strings: 1, Instructions: 92COMMON

Download Yara Rule

APIs

Part of subcall function 00AC86F0: GetWindowLongW.USER32(00000000,000000F0), ref: 00AC8728
Part of subcall function 00AC86F0: SetWindowLongW.USER32 ref: 00AC8743
Part of subcall function 00AC86F0: GetClientRect.USER32 ref: 00AC8755
Part of subcall function 00AC86F0: SetWindowPos.USER32(00000000,00000000,00A7828E,?,?,?,00000020), ref: 00AC877B
Part of subcall function 00AC86F0: FindResourceW.KERNEL32(00000000,00000000,?,?), ref: 00AC87DF
Part of subcall function 00AC86F0: LoadResource.KERNEL32(00000000,00000000,?,?), ref: 00AC87F6
Part of subcall function 00AC86F0: FreeResource.KERNEL32(00000000,?,?), ref: 00AC8807

Part of subcall function 00AC0080: GetWindowRect.USER32 ref: 00AC00A9
Part of subcall function 00AC0080: GetWindowLongW.USER32(00000000,000000F0), ref: 00AC00BB
Part of subcall function 00AC0080: GetParent.USER32(00000000), ref: 00AC00CC
Part of subcall function 00AC0080: GetWindowLongW.USER32(00000000,000000F0), ref: 00AC00E6
Part of subcall function 00AC0080: SystemParametersInfoW.USER32 ref: 00AC0105
Part of subcall function 00AC0080: SetWindowPos.USER32(00000000,00000000,?,?,000000FF,000000FF,00000015), ref: 00AC019E

SetWindowPos.USER32(?,000000FF,00000000,00000000,00000000,00000000,00000083), ref: 00A782C3
SetWindowPos.USER32(?,000000FE,00000000,00000000,00000000,00000000,00000083), ref: 00A782D7
SwitchToThisWindow.USER32(?,00000001), ref: 00A782DE

Part of subcall function 00AC0AF0: IsWindow.USER32(00000000), ref: 00AC0AF9
Part of subcall function 00AC0AF0: ShowWindow.USER32(00000000,-00000004,?,00A8D59E,00000000,00000000), ref: 00AC0B14

Part of subcall function 00AA4CA0: PostThreadMessageW.USER32 ref: 00AA4D0C

Strings

CChangeGameWindow::_ShowWindow, xrefs: 00A7829E

Memory Dump Source

Source File: 00000001.00000002.422151708.0000000000A71000.00000020.00020000.sdmp, Offset: 00A70000, based on PE: true

Associated: 00000001.00000002.422117330.0000000000A70000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422651142.0000000000B5D000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422716671.0000000000B9A000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422731871.0000000000B9D000.00000008.00020000.sdmp Download File
Associated: 00000001.00000002.422740097.0000000000BA0000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422749600.0000000000BA4000.00000002.00020000.sdmp Download File

Similarity

API ID: Window$Long$Resource$Rect$ClientFindFreeInfoLoadMessageParametersParentPostShowSwitchSystemThisThread
String ID: CChangeGameWindow::_ShowWindow
API String ID: 3604550518-1501245210
Opcode ID: 96a5afaaf7bc37b175da26b010f3ef65e47b9374c64efe77d18ea005592627c0
Instruction ID: b1f64812c989f922eaebdd0decf8713facc4e5e24065fe1984415e4248e60a10
Opcode Fuzzy Hash: 96a5afaaf7bc37b175da26b010f3ef65e47b9374c64efe77d18ea005592627c0
Instruction Fuzzy Hash: 4D318D30A80209BBDB14DF64DD46FAEBBA5FF44B20F108229F515AB2D0DBB56910CB84

Uniqueness

Uniqueness Score: -1.00%

Function 00A8AF50, Relevance: 7.1, APIs: 3, Strings: 1, Instructions: 74COMMON

Download Yara Rule

APIs

VirtualQuery.KERNEL32(?,?,0000001C), ref: 00A8AFA7
GetModuleFileNameW.KERNEL32(?,?,00000104), ref: 00A8AFD9
PathFindExtensionW.SHLWAPI(?), ref: 00A8AFE6

Strings

.fob, xrefs: 00A8AFF2

Memory Dump Source

Source File: 00000001.00000002.422151708.0000000000A71000.00000020.00020000.sdmp, Offset: 00A70000, based on PE: true

Associated: 00000001.00000002.422117330.0000000000A70000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422651142.0000000000B5D000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422716671.0000000000B9A000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422731871.0000000000B9D000.00000008.00020000.sdmp Download File
Associated: 00000001.00000002.422740097.0000000000BA0000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422749600.0000000000BA4000.00000002.00020000.sdmp Download File

Similarity

API ID: ExtensionFileFindModuleNamePathQueryVirtual
String ID: .fob
API String ID: 3932928622-1814742943
Opcode ID: 2ed28fab74a8335ce927216141f5ac4e7130c1f6a3cb782132480830617c9518
Instruction ID: ffd8534b40fa5c0a0c779501cba5739ff2c60da5086f855f0f4a7f714b1279a5
Opcode Fuzzy Hash: 2ed28fab74a8335ce927216141f5ac4e7130c1f6a3cb782132480830617c9518
Instruction Fuzzy Hash: 31218372E4021CABDB20DF65EC89BEEB3B8EB19310F404195F918E7151DB709E848BA0

Uniqueness

Uniqueness Score: -1.00%

Function 00A9F6F0, Relevance: 7.1, APIs: 3, Strings: 1, Instructions: 67COMMON

Download Yara Rule

APIs

std::_Lockit::_Lockit.LIBCPMT ref: 00A9F71D
std::_Locinfo::_Locinfo_ctor.LIBCPMT ref: 00A9F76C
__CxxThrowException@8.LIBVCRUNTIME ref: 00A9F79E

Strings

bad locale name, xrefs: 00A9F788

Memory Dump Source

Source File: 00000001.00000002.422151708.0000000000A71000.00000020.00020000.sdmp, Offset: 00A70000, based on PE: true

Associated: 00000001.00000002.422117330.0000000000A70000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422651142.0000000000B5D000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422716671.0000000000B9A000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422731871.0000000000B9D000.00000008.00020000.sdmp Download File
Associated: 00000001.00000002.422740097.0000000000BA0000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422749600.0000000000BA4000.00000002.00020000.sdmp Download File

Similarity

API ID: std::_$Exception@8Locinfo::_Locinfo_ctorLockitLockit::_Throw
String ID: bad locale name
API String ID: 3707412701-1405518554
Opcode ID: c6f11df7d393049ccdf8ca8db4f3ec2c4169aadd69da9b753a04c074a5cf2872
Instruction ID: 242ffa9e9a66786d02c78fe0b2f647d17ddd206bbf9f9f22afb9273b9b07801a
Opcode Fuzzy Hash: c6f11df7d393049ccdf8ca8db4f3ec2c4169aadd69da9b753a04c074a5cf2872
Instruction Fuzzy Hash: 5811E271904B449FC720CF68C905B8BBBF8EF18700F008A6EE459D7B81D779A108CB91

Uniqueness

Uniqueness Score: -1.00%

Function 00A8E880, Relevance: 7.0, APIs: 3, Strings: 1, Instructions: 36COMMON

Download Yara Rule

APIs

SetWindowPos.USER32(?,000000FF,00000000,00000000,00000000,00000000,00000083,00000000,00000010), ref: 00A8E8A2
SetWindowPos.USER32(?,000000FE,00000000,00000000,00000000,00000000,00000083), ref: 00A8E8BA
SwitchToThisWindow.USER32(?,00000001), ref: 00A8E8C5

Part of subcall function 00AC0AF0: IsWindow.USER32(00000000), ref: 00AC0AF9
Part of subcall function 00AC0AF0: ShowWindow.USER32(00000000,-00000004,?,00A8D59E,00000000,00000000), ref: 00AC0B14

Part of subcall function 00A8E750: IsWindow.USER32(00000000), ref: 00A8E777
Part of subcall function 00A8E750: GetWindowRect.USER32 ref: 00A8E7E7
Part of subcall function 00A8E750: UpdateWindow.USER32(00000000), ref: 00A8E833
Part of subcall function 00A8E750: SetFocus.USER32(00000000), ref: 00A8E845

Strings

CMainWindow::_ShowWindow, xrefs: 00A8E881

Memory Dump Source

Source File: 00000001.00000002.422151708.0000000000A71000.00000020.00020000.sdmp, Offset: 00A70000, based on PE: true

Associated: 00000001.00000002.422117330.0000000000A70000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422651142.0000000000B5D000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422716671.0000000000B9A000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422731871.0000000000B9D000.00000008.00020000.sdmp Download File
Associated: 00000001.00000002.422740097.0000000000BA0000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422749600.0000000000BA4000.00000002.00020000.sdmp Download File

Similarity

API ID: Window$FocusRectShowSwitchThisUpdate
String ID: CMainWindow::_ShowWindow
API String ID: 1945637956-875174567
Opcode ID: dc1e37180a4db9a38d98fddedfcf6cb01db3d072ca3cf5f6d27b5f9baece4bde
Instruction ID: e82269aabcc090625778e1e146cf67bfe1f026534ac4b9fa7aeab2d7e0a58af0
Opcode Fuzzy Hash: dc1e37180a4db9a38d98fddedfcf6cb01db3d072ca3cf5f6d27b5f9baece4bde
Instruction Fuzzy Hash: BCF058303C4701B7FA326720AD0BF68B9126B92F29F248354B3253E1E1DFE265908748

Uniqueness

Uniqueness Score: -1.00%

Function 00AABBA0, Relevance: 7.0, APIs: 2, Strings: 2, Instructions: 32registryCOMMON

Download Yara Rule

APIs

Part of subcall function 00A875B0: GetModuleHandleW.KERNEL32(Advapi32.dll,00B53238,LDSGameCenter,00000000,00B53238,?,00AABBD4,80000001,Software\Microsoft\Windows\CurrentVersion\Run,0002001F,00B53238), ref: 00A875D4
Part of subcall function 00A875B0: RegCloseKey.ADVAPI32(00000000,?,00AABBD4,80000001,Software\Microsoft\Windows\CurrentVersion\Run,0002001F,00B53238), ref: 00A87637

RegDeleteValueW.ADVAPI32(00000000,00000000,80000001,Software\Microsoft\Windows\CurrentVersion\Run,0002001F,00B53238,LDSGameCenter), ref: 00AABBDF
RegCloseKey.ADVAPI32(00000000,80000001,Software\Microsoft\Windows\CurrentVersion\Run,0002001F,00B53238,LDSGameCenter), ref: 00AABBF3

Strings

LDSGameCenter, xrefs: 00AABBA6
Software\Microsoft\Windows\CurrentVersion\Run, xrefs: 00AABBAD

Memory Dump Source

Source File: 00000001.00000002.422151708.0000000000A71000.00000020.00020000.sdmp, Offset: 00A70000, based on PE: true

Associated: 00000001.00000002.422117330.0000000000A70000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422651142.0000000000B5D000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422716671.0000000000B9A000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422731871.0000000000B9D000.00000008.00020000.sdmp Download File
Associated: 00000001.00000002.422740097.0000000000BA0000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422749600.0000000000BA4000.00000002.00020000.sdmp Download File

Similarity

API ID: Close$DeleteHandleModuleValue
String ID: LDSGameCenter$Software\Microsoft\Windows\CurrentVersion\Run
API String ID: 2099108398-3432818289
Opcode ID: 271206f7c9ebc4ede210d8bf632debc640e004778a042ecd234964f3cfa2f53c
Instruction ID: 297809541535c04f4d98ca768026e5652e332516804100370d68a72b91080f51
Opcode Fuzzy Hash: 271206f7c9ebc4ede210d8bf632debc640e004778a042ecd234964f3cfa2f53c
Instruction Fuzzy Hash: DBF0A031904318BBD7206B95DC09BAFBF78DB42B11F104199ED08B3296DBB589059BF2

Uniqueness

Uniqueness Score: -1.00%

Function 00B4EE02, Relevance: 6.2, APIs: 4, Instructions: 152COMMON

Download Yara Rule

APIs

_free.LIBCMT ref: 00B4EF31

Memory Dump Source

Source File: 00000001.00000002.422151708.0000000000A71000.00000020.00020000.sdmp, Offset: 00A70000, based on PE: true

Associated: 00000001.00000002.422117330.0000000000A70000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422651142.0000000000B5D000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422716671.0000000000B9A000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422731871.0000000000B9D000.00000008.00020000.sdmp Download File
Associated: 00000001.00000002.422740097.0000000000BA0000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422749600.0000000000BA4000.00000002.00020000.sdmp Download File

Similarity

API ID: _free
String ID:
API String ID: 269201875-0
Opcode ID: 7ab9ea8635d4daaae93f010f663b78a443c325164f5d53e01179181c11589776
Instruction ID: e599d99d111b282caacb6a616474843a7e8d81a8e88b356f882c23751fd55e87
Opcode Fuzzy Hash: 7ab9ea8635d4daaae93f010f663b78a443c325164f5d53e01179181c11589776
Instruction Fuzzy Hash: 01410831A40111ABDB20AABC9C86BAE3BE4FF45730F1406E5F538D7291DB35CF44A662

Uniqueness

Uniqueness Score: -1.00%

Function 00A731B0, Relevance: 6.1, APIs: 4, Instructions: 140COMMON

Download Yara Rule

APIs

InitializeCriticalSectionAndSpinCount.KERNEL32(00BA22A8,00000000), ref: 00A731B7
GetLastError.KERNEL32 ref: 00A731C1
InitializeCriticalSectionAndSpinCount.KERNEL32(00BA2A18,00000000,00000000), ref: 00A731F7
GetLastError.KERNEL32 ref: 00A73201

Part of subcall function 00A73FD0: __CxxThrowException@8.LIBVCRUNTIME ref: 00A73FE7

Memory Dump Source

Source File: 00000001.00000002.422151708.0000000000A71000.00000020.00020000.sdmp, Offset: 00A70000, based on PE: true

Associated: 00000001.00000002.422117330.0000000000A70000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422651142.0000000000B5D000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422716671.0000000000B9A000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422731871.0000000000B9D000.00000008.00020000.sdmp Download File
Associated: 00000001.00000002.422740097.0000000000BA0000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422749600.0000000000BA4000.00000002.00020000.sdmp Download File

Similarity

API ID: CountCriticalErrorInitializeLastSectionSpin$Exception@8Throw
String ID:
API String ID: 3390831176-0
Opcode ID: 0a0346567277d0512436ac3fa04b959042262e53734881f3a98d3f26f501f1aa
Instruction ID: 65629befd95c2d96cad4753c31c51aa90d147ac0c6067e3b885c9298183abde3
Opcode Fuzzy Hash: 0a0346567277d0512436ac3fa04b959042262e53734881f3a98d3f26f501f1aa
Instruction Fuzzy Hash: A23137B36003011BDB149F6AEC85B9B7BDCAF90741F12C1A9FD09DA246EB34DA4086E5

Uniqueness

Uniqueness Score: -1.00%

Function 00A7961E, Relevance: 6.1, APIs: 4, Instructions: 125COMMON

Download Yara Rule

APIs

__CxxThrowException@8.LIBVCRUNTIME ref: 00A7963E

Part of subcall function 00B23827: RaiseException.KERNEL32(?,?,00AB60BB,?,00B9A044,?,00000007,?,?,?,?,00AB60BB,?,00B93034,?), ref: 00B23887

Part of subcall function 00A745F0: GetProcessHeap.KERNEL32(00AA5638,F084A4B2), ref: 00A74601

Part of subcall function 00A7A0B0: FindResourceExW.KERNEL32(00000000,00000006,00000000,?,00000000,?,?,00000000,00000000,?,00AAE72B,?,00000000,?,00000000,?), ref: 00A7A0E7

FindResourceW.KERNEL32(00000000,?,00000006), ref: 00A796D6

Part of subcall function 00A756F0: LoadResource.KERNEL32(00B5DAF8,?,00000000,?,00A74198,00000000,00000000,?,?,00A736E1,00B5DAF8,?,?,?,00B5DAF8,00B51BE8), ref: 00A756FA
Part of subcall function 00A756F0: LockResource.KERNEL32(00000000,?,00A74198,00000000,00000000,?,?,00A736E1,00B5DAF8,?,?,?,00B5DAF8,00B51BE8,000000FF), ref: 00A75705
Part of subcall function 00A756F0: SizeofResource.KERNEL32(00B5DAF8,?,?,00A74198,00000000,00000000,?,?,00A736E1,00B5DAF8,?,?,?,00B5DAF8,00B51BE8,000000FF), ref: 00A75717

WideCharToMultiByte.KERNEL32(00000003,00000000,00000002,?,00000000,00000000,00000000,00000000,?,?,00000006), ref: 00A7970D
WideCharToMultiByte.KERNEL32(00000003,00000000,00000002,?,?,00000000,00000000,00000000,?,00000000,00000000,00000000,00000000,?,?,00000006), ref: 00A7974B

Memory Dump Source

Source File: 00000001.00000002.422151708.0000000000A71000.00000020.00020000.sdmp, Offset: 00A70000, based on PE: true

Associated: 00000001.00000002.422117330.0000000000A70000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422651142.0000000000B5D000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422716671.0000000000B9A000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422731871.0000000000B9D000.00000008.00020000.sdmp Download File
Associated: 00000001.00000002.422740097.0000000000BA0000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422749600.0000000000BA4000.00000002.00020000.sdmp Download File

Similarity

API ID: Resource$ByteCharFindMultiWide$ExceptionException@8HeapLoadLockProcessRaiseSizeofThrow
String ID:
API String ID: 1650236646-0
Opcode ID: 513736bcaa7378f80d1f201d77966b7df46959447d8e699b0b46c9a3e7d05bb0
Instruction ID: e8ab7c4f993f9733582dfe052affe7851ed51df34a63d2cc1a978e9a42a20fde
Opcode Fuzzy Hash: 513736bcaa7378f80d1f201d77966b7df46959447d8e699b0b46c9a3e7d05bb0
Instruction Fuzzy Hash: 4041F671600215ABEB149FA5CD86F6BB7E9EF04700F10C16AFA09AF2D1DB70AD00C766

Uniqueness

Uniqueness Score: -1.00%

Function 00B46885, Relevance: 6.1, APIs: 4, Instructions: 110COMMON

Download Yara Rule

APIs

MultiByteToWideChar.KERNEL32(00000000,00000000,?,00000000,00000000,00000000,00B3B90E,?,00000000,00000000,00000001,00000000,?,00000001,00B3B90E), ref: 00B468D2
MultiByteToWideChar.KERNEL32(?,00000001,?,?,00000000,?), ref: 00B4695B
GetStringTypeW.KERNEL32(?,00000000,00000000,?,?,?,?,?,?,?,?,?,?,?,00B2C193,?), ref: 00B4696D
__freea.LIBCMT ref: 00B46976

Part of subcall function 00B401B0: RtlAllocateHeap.NTDLL(00000000,?,00000000,?,00B46929,00000000,?,?,00B2C193,?,00000008,?,00B3B90E,00000000,00000000), ref: 00B401E2

Memory Dump Source

Source File: 00000001.00000002.422151708.0000000000A71000.00000020.00020000.sdmp, Offset: 00A70000, based on PE: true

Associated: 00000001.00000002.422117330.0000000000A70000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422651142.0000000000B5D000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422716671.0000000000B9A000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422731871.0000000000B9D000.00000008.00020000.sdmp Download File
Associated: 00000001.00000002.422740097.0000000000BA0000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422749600.0000000000BA4000.00000002.00020000.sdmp Download File

Similarity

API ID: ByteCharMultiWide$AllocateHeapStringType__freea
String ID:
API String ID: 2652629310-0
Opcode ID: 35239a47ccea5b5938c4251c81c7bdbf4d8598bd3319eae4631eb09f0cccaef7
Instruction ID: bb4195e2d9d7d6b39b61a522f914ff22df8a4908ca21762f5c355986cd6823a7
Opcode Fuzzy Hash: 35239a47ccea5b5938c4251c81c7bdbf4d8598bd3319eae4631eb09f0cccaef7
Instruction Fuzzy Hash: 2B31E172A0021AABDF249F65DC45EEE7BE5EB49710F4402A8FC04D7150EB75CE90DB91

Uniqueness

Uniqueness Score: -1.00%

Function 6C2BE483, Relevance: 6.1, APIs: 4, Instructions: 110COMMON

Download Yara Rule

APIs

MultiByteToWideChar.KERNEL32(?,00000000,94E85006,6C2B65B4,00000000,00000000,6C2B6DF2,?,6C2B6DF2,?,00000001,6C2B65B4,94E85006,00000001,6C2B6DF2,6C2B6DF2), ref: 6C2BE4D0
MultiByteToWideChar.KERNEL32(?,00000001,?,?,00000000,?), ref: 6C2BE559
GetStringTypeW.KERNEL32(?,00000000,00000000,?), ref: 6C2BE56B
__freea.LIBCMT ref: 6C2BE574

Part of subcall function 6C2B9335: HeapAlloc.KERNEL32(00000000,?,00000004,?,6C2BA50E,?,00000000,?,6C2B73C2,?,00000004,?,?,?,?,6C2B7F90), ref: 6C2B9367

Memory Dump Source

Source File: 00000001.00000002.425332215.000000006C2B1000.00000020.00020000.sdmp, Offset: 6C2B0000, based on PE: true

Associated: 00000001.00000002.425298119.000000006C2B0000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.425472962.000000006C2C3000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.425510904.000000006C2CA000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.425525863.000000006C2CC000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.428429287.000000006CCCC000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.430600185.000000006D6CC000.00000002.00020000.sdmp Download File

Similarity

API ID: ByteCharMultiWide$AllocHeapStringType__freea
String ID:
API String ID: 573072132-0
Opcode ID: f2993fa76bb42197f9d5c1cc5c0065001db0e6bb88bd402c1bea217e84062042
Instruction ID: c6ed7c0fd02fb04356a239319d09a6f5d14f8017803670737c9c6bb41cb3ea75
Opcode Fuzzy Hash: f2993fa76bb42197f9d5c1cc5c0065001db0e6bb88bd402c1bea217e84062042
Instruction Fuzzy Hash: 4B31D072A0120AABDF24CF64CC45EEE7BB5EB41799B104168FC14E7690EB35D954CBD0

Uniqueness

Uniqueness Score: -1.00%

Function 00A8FE00, Relevance: 6.1, APIs: 4, Instructions: 88COMMON

Download Yara Rule

APIs

EnterCriticalSection.KERNEL32(?,F084A4B2), ref: 00A8FE2E
LeaveCriticalSection.KERNEL32(?,F084A4B2), ref: 00A8FE3B
LeaveCriticalSection.KERNEL32 ref: 00A8FED7
DeleteCriticalSection.KERNEL32(?,00FFFFFF), ref: 00A8FEF1

Memory Dump Source

Source File: 00000001.00000002.422151708.0000000000A71000.00000020.00020000.sdmp, Offset: 00A70000, based on PE: true

Associated: 00000001.00000002.422117330.0000000000A70000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422651142.0000000000B5D000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422716671.0000000000B9A000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422731871.0000000000B9D000.00000008.00020000.sdmp Download File
Associated: 00000001.00000002.422740097.0000000000BA0000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422749600.0000000000BA4000.00000002.00020000.sdmp Download File

Similarity

API ID: CriticalSection$Leave$DeleteEnter
String ID:
API String ID: 122283594-0
Opcode ID: cde93a77ba98d240e902bd033296ba106a9d8001067f3707f2b2594696c6b9e9
Instruction ID: 5263ebb3b5892a892806a97e6680cf5a318054dba60194ed10c38ed0ed7924f3
Opcode Fuzzy Hash: cde93a77ba98d240e902bd033296ba106a9d8001067f3707f2b2594696c6b9e9
Instruction Fuzzy Hash: 63310A75A0071A8FCB25DF68D840AAEBBF4FF49710F00466EE406A7750DB34A944CBA5

Uniqueness

Uniqueness Score: -1.00%

Function 00A9DEC0, Relevance: 6.1, APIs: 4, Instructions: 82memoryCOMMON

Download Yara Rule

APIs

VirtualProtect.KERNEL32(-00000005,00000000,00000040,?,00000000,?,?,?,00A9DE83,00000000,?,?,00000000,00000001,?,7743B7C0), ref: 00A9DEF3
VirtualProtect.KERNEL32(-00000005,7743B7C0,?,?,00000000,?,?,00A9DE83,00000000,?,?,00000000,00000001,?,7743B7C0), ref: 00A9DF59
GetCurrentProcess.KERNEL32(-00000005,7743B7C0,?,?,00A9DE83,00000000,?,?,00000000,00000001,?,7743B7C0), ref: 00A9DF63
FlushInstructionCache.KERNEL32(00000000,?,?,00A9DE83,00000000,?,?,00000000,00000001,?,7743B7C0), ref: 00A9DF6A

Memory Dump Source

Source File: 00000001.00000002.422151708.0000000000A71000.00000020.00020000.sdmp, Offset: 00A70000, based on PE: true

Associated: 00000001.00000002.422117330.0000000000A70000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422651142.0000000000B5D000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422716671.0000000000B9A000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422731871.0000000000B9D000.00000008.00020000.sdmp Download File
Associated: 00000001.00000002.422740097.0000000000BA0000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422749600.0000000000BA4000.00000002.00020000.sdmp Download File

Similarity

API ID: ProtectVirtual$CacheCurrentFlushInstructionProcess
String ID:
API String ID: 4115577372-0
Opcode ID: 28dba5a5a6e4f18e3c5494f89247aa854e75c7d61efeadded14a50d912dcecf6
Instruction ID: b9628f72a10dab7c238e386eaa4dc0f86f2e8459a44cc6dc62757d0ff9637773
Opcode Fuzzy Hash: 28dba5a5a6e4f18e3c5494f89247aa854e75c7d61efeadded14a50d912dcecf6
Instruction Fuzzy Hash: 7321F331204745AFDB218F68D846BE6FFF8EF46700F048689F9958B651D731E544CBA1

Uniqueness

Uniqueness Score: -1.00%

Function 00A9BEE0, Relevance: 6.1, APIs: 4, Instructions: 58memoryCOMMON

Download Yara Rule

APIs

MultiByteToWideChar.KERNEL32(00000003,00000000,?,000000FF,00000000,00000000), ref: 00A9BF02
SysAllocStringLen.OLEAUT32(00000000,-00000001), ref: 00A9BF11
MultiByteToWideChar.KERNEL32(00000003,00000000,?,000000FF,00000000,?), ref: 00A9BF28
SysFreeString.OLEAUT32(00000000), ref: 00A9BF34

Memory Dump Source

Source File: 00000001.00000002.422151708.0000000000A71000.00000020.00020000.sdmp, Offset: 00A70000, based on PE: true

Associated: 00000001.00000002.422117330.0000000000A70000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422651142.0000000000B5D000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422716671.0000000000B9A000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422731871.0000000000B9D000.00000008.00020000.sdmp Download File
Associated: 00000001.00000002.422740097.0000000000BA0000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422749600.0000000000BA4000.00000002.00020000.sdmp Download File

Similarity

API ID: ByteCharMultiStringWide$AllocFree
String ID:
API String ID: 447844807-0
Opcode ID: 7c472a0869cb64761a9d211745bcf24d809486f108572578d601bb70b8ce0b93
Instruction ID: eab5382c0e125dbdd3fd55ead3ca76931e01ab092e3b930ce7b30ea005ea1a0c
Opcode Fuzzy Hash: 7c472a0869cb64761a9d211745bcf24d809486f108572578d601bb70b8ce0b93
Instruction Fuzzy Hash: 6311C47620430ABBEB205F88DD89F69B7A8EB40751F204359F6145B2D0DBB1AD408B71

Uniqueness

Uniqueness Score: -1.00%

Function 00B414B5, Relevance: 6.1, APIs: 4, Instructions: 52libraryCOMMON

Download Yara Rule

APIs

LoadLibraryExW.KERNEL32(00000000,00000000,00000800,?,00000000,00000000,?,00B4145C,?,00000000,00000000,00000000,?,00B4173A,00000006,FlsSetValue), ref: 00B414E7
GetLastError.KERNEL32(?,00B4145C,?,00000000,00000000,00000000,?,00B4173A,00000006,FlsSetValue,00B7D3D0,FlsSetValue,00000000,00000364,?,00B400F9), ref: 00B414F3
LoadLibraryExW.KERNEL32(00000000,00000000,00000000,?,00B4145C,?,00000000,00000000,00000000,?,00B4173A,00000006,FlsSetValue,00B7D3D0,FlsSetValue,00000000), ref: 00B41501

Memory Dump Source

Source File: 00000001.00000002.422151708.0000000000A71000.00000020.00020000.sdmp, Offset: 00A70000, based on PE: true

Associated: 00000001.00000002.422117330.0000000000A70000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422651142.0000000000B5D000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422716671.0000000000B9A000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422731871.0000000000B9D000.00000008.00020000.sdmp Download File
Associated: 00000001.00000002.422740097.0000000000BA0000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422749600.0000000000BA4000.00000002.00020000.sdmp Download File

Similarity

API ID: LibraryLoad$ErrorLast
String ID:
API String ID: 3177248105-0
Opcode ID: bfca443b34c6b3c4ddbaa7d4a740d094f8e9ea8cae926f250a885d68991565e9
Instruction ID: 7252ce6c7110baa56b3ad999f99a566fc9f6dd063e8541959101ccd216cb669a
Opcode Fuzzy Hash: bfca443b34c6b3c4ddbaa7d4a740d094f8e9ea8cae926f250a885d68991565e9
Instruction Fuzzy Hash: 1901AC36B113226BC7324A6DDC84A967BD8EF55B617100BA4F907D7180DB20DA809AE5

Uniqueness

Uniqueness Score: -1.00%

Function 6C2BA69E, Relevance: 6.1, APIs: 4, Instructions: 52libraryCOMMON

Download Yara Rule

APIs

LoadLibraryExW.KERNEL32(00000000,00000000,00000800,?,00000000,00000000,?,6C2BA645,?,00000000,00000000,00000000,?,6C2BA842,00000006,FlsSetValue), ref: 6C2BA6D0
GetLastError.KERNEL32(?,6C2BA645,?,00000000,00000000,00000000,?,6C2BA842,00000006,FlsSetValue,6C2C49D8,FlsSetValue,00000000,00000364,?,6C2B9068), ref: 6C2BA6DC
LoadLibraryExW.KERNEL32(00000000,00000000,00000000,?,6C2BA645,?,00000000,00000000,00000000,?,6C2BA842,00000006,FlsSetValue,6C2C49D8,FlsSetValue,00000000), ref: 6C2BA6EA

Memory Dump Source

Source File: 00000001.00000002.425332215.000000006C2B1000.00000020.00020000.sdmp, Offset: 6C2B0000, based on PE: true

Associated: 00000001.00000002.425298119.000000006C2B0000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.425472962.000000006C2C3000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.425510904.000000006C2CA000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.425525863.000000006C2CC000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.428429287.000000006CCCC000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.430600185.000000006D6CC000.00000002.00020000.sdmp Download File

Similarity

API ID: LibraryLoad$ErrorLast
String ID:
API String ID: 3177248105-0
Opcode ID: e2a36636038f710f841cef71a54d73ab5f6e9fa21c7b85c825222f40f2bb5525
Instruction ID: 0e7e5c7375cede5c35d89fff83a047c1a68dfbd9f353c84e7d6708abf580b667
Opcode Fuzzy Hash: e2a36636038f710f841cef71a54d73ab5f6e9fa21c7b85c825222f40f2bb5525
Instruction Fuzzy Hash: D701FC36759527DBCB21496D8C48D8B77F8AF067E97104620FD15E3580DB31D900C6E0

Uniqueness

Uniqueness Score: -1.00%

Function 00A9E560, Relevance: 6.0, APIs: 4, Instructions: 37threadmemoryCOMMON

Download Yara Rule

APIs

OpenThread.KERNEL32(0000005A,00000000,?,00000000,00000000,00000000,?,00A9DE8E,?,00000000,?,?,00000000,00000001,?,7743B7C0), ref: 00A9E57F
ResumeThread.KERNEL32(00000000,?,00A9DE8E,?,00000000,?,?,00000000,00000001,?,7743B7C0), ref: 00A9E58C
CloseHandle.KERNEL32(00000000,?,00A9DE8E,?,00000000,?,?,00000000,00000001,?,7743B7C0), ref: 00A9E593
HeapFree.KERNEL32(00000000,?,00000000,00000000,?,00A9DE8E,?,00000000,?,?,00000000,00000001,?,7743B7C0), ref: 00A9E5AB

Memory Dump Source

Source File: 00000001.00000002.422151708.0000000000A71000.00000020.00020000.sdmp, Offset: 00A70000, based on PE: true

Associated: 00000001.00000002.422117330.0000000000A70000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422651142.0000000000B5D000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422716671.0000000000B9A000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422731871.0000000000B9D000.00000008.00020000.sdmp Download File
Associated: 00000001.00000002.422740097.0000000000BA0000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422749600.0000000000BA4000.00000002.00020000.sdmp Download File

Similarity

API ID: Thread$CloseFreeHandleHeapOpenResume
String ID:
API String ID: 993137029-0
Opcode ID: 72e57f64760d1f329cd7be7d502a6474fedd1d26cefbc9575f2feadacbed3204
Instruction ID: 3a85a89600bf6066245e5cbb2c54a2f2a7c92f78fba85ae270e61cf5b931a87c
Opcode Fuzzy Hash: 72e57f64760d1f329cd7be7d502a6474fedd1d26cefbc9575f2feadacbed3204
Instruction Fuzzy Hash: 6DF09035200310ABCB21EF45EC84F6AB7A8FB49B52F154154F8059B165DB31DC41CBA2

Uniqueness

Uniqueness Score: -1.00%

Function 00AA1F00, Relevance: 5.4, APIs: 2, Strings: 1, Instructions: 137COMMON

Download Yara Rule

APIs

__fread_nolock.LIBCMT ref: 00AA1F7C

Strings

r+b, xrefs: 00AA1F0F

Memory Dump Source

Source File: 00000001.00000002.422151708.0000000000A71000.00000020.00020000.sdmp, Offset: 00A70000, based on PE: true

Associated: 00000001.00000002.422117330.0000000000A70000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422651142.0000000000B5D000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422716671.0000000000B9A000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422731871.0000000000B9D000.00000008.00020000.sdmp Download File
Associated: 00000001.00000002.422740097.0000000000BA0000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422749600.0000000000BA4000.00000002.00020000.sdmp Download File

Similarity

API ID: __fread_nolock
String ID: r+b
API String ID: 2638373210-2113443889
Opcode ID: 0e489ec6dee27a0d08ca7727b8caf237befccdaa8449f485ac4b9004dc1aad94
Instruction ID: 18211e92bb48ff2bb70b54ee8e4f134862e57468198e4285023064e100308d91
Opcode Fuzzy Hash: 0e489ec6dee27a0d08ca7727b8caf237befccdaa8449f485ac4b9004dc1aad94
Instruction Fuzzy Hash: AA4117716043507EEB219F78EC85B6EB7A8EF42710F14467EF4598B2C2D771E9408395

Uniqueness

Uniqueness Score: -1.00%

Function 00A9BD00, Relevance: 5.3, APIs: 1, Strings: 2, Instructions: 70COMMON

Download Yara Rule

APIs

IsZoomed.USER32(?), ref: 00A9BD0A

Strings

max, xrefs: 00A9BD3E, 00A9BD78
restore, xrefs: 00A9BD21, 00A9BD95

Memory Dump Source

Source File: 00000001.00000002.422151708.0000000000A71000.00000020.00020000.sdmp, Offset: 00A70000, based on PE: true

Associated: 00000001.00000002.422117330.0000000000A70000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422651142.0000000000B5D000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422716671.0000000000B9A000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422731871.0000000000B9D000.00000008.00020000.sdmp Download File
Associated: 00000001.00000002.422740097.0000000000BA0000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422749600.0000000000BA4000.00000002.00020000.sdmp Download File

Similarity

API ID: Zoomed
String ID: max$restore
API String ID: 1990913835-3793680509
Opcode ID: 2f838ec3a9156df3dc93851989fc155d36f070a7383718bad13887419c4f48d1
Instruction ID: 48921d4547347f013ddcb84d6e7cebad214b08698a01340b1e0f4ce1e42d93e6
Opcode Fuzzy Hash: 2f838ec3a9156df3dc93851989fc155d36f070a7383718bad13887419c4f48d1
Instruction Fuzzy Hash: 221175313607046FEF289770DE56FB97395AF55701F004278FB168A9E1DBA0E8418AA0

Uniqueness

Uniqueness Score: -1.00%

Function 00A787A4, Relevance: 5.3, APIs: 1, Strings: 2, Instructions: 68COMMON

Download Yara Rule

APIs

Concurrency::cancel_current_task.LIBCPMT ref: 00A78B23

Strings

d, xrefs: 00A78A4B
CChangeGameWindow::_DownloadProc, skip download '%s' >= '%s', xrefs: 00A787A7

Memory Dump Source

Source File: 00000001.00000002.422151708.0000000000A71000.00000020.00020000.sdmp, Offset: 00A70000, based on PE: true

Associated: 00000001.00000002.422117330.0000000000A70000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422651142.0000000000B5D000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422716671.0000000000B9A000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422731871.0000000000B9D000.00000008.00020000.sdmp Download File
Associated: 00000001.00000002.422740097.0000000000BA0000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422749600.0000000000BA4000.00000002.00020000.sdmp Download File

Similarity

API ID: Concurrency::cancel_current_task
String ID: CChangeGameWindow::_DownloadProc, skip download '%s' >= '%s'$d
API String ID: 118556049-1967475019
Opcode ID: fca6b1ac8e31b1b7c1c315f4fa74a9cbeada4745ebd987ffd2493cbad710f13e
Instruction ID: bf75ee5b3a9b24ee981bfa4fc5a8d0f4e83cafb6d742980ded5def583d13248e
Opcode Fuzzy Hash: fca6b1ac8e31b1b7c1c315f4fa74a9cbeada4745ebd987ffd2493cbad710f13e
Instruction Fuzzy Hash: A711D331A00109DFDB04DB64D948ABEB7B5EF80305F15C1ADE80A5B292DB349904CB90

Uniqueness

Uniqueness Score: -1.00%

Function 00AB87D8, Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 58COMMON

Download Yara Rule

APIs

SetLastError.KERNEL32(0000000D,?,00AB6A08,?,00000000,?,00000000,?,00AA3847,00BA08BC,00A9F200,00BA08C0,?,00A9F6CB,00000000,00000001), ref: 00AB885C

Strings

ios_base::failbit set, xrefs: 00AB87DB

Memory Dump Source

Source File: 00000001.00000002.422151708.0000000000A71000.00000020.00020000.sdmp, Offset: 00A70000, based on PE: true

Associated: 00000001.00000002.422117330.0000000000A70000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422651142.0000000000B5D000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422716671.0000000000B9A000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422731871.0000000000B9D000.00000008.00020000.sdmp Download File
Associated: 00000001.00000002.422740097.0000000000BA0000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422749600.0000000000BA4000.00000002.00020000.sdmp Download File

Similarity

API ID: ErrorLast
String ID: ios_base::failbit set
API String ID: 1452528299-3924258884
Opcode ID: 937ccaec395eb06c2fc759ef5b0b4256da1f031f71e1c6291073e322aad337e9
Instruction ID: 6bcf53e32bd662d0397603ff2ba7f4f7ee947627a5567cc458af1def9a4f7721
Opcode Fuzzy Hash: 937ccaec395eb06c2fc759ef5b0b4256da1f031f71e1c6291073e322aad337e9
Instruction Fuzzy Hash: 89113036200215AFDF125FA8DC449AAB76DFF18795B508439F90597221DF749C10DBD1

Uniqueness

Uniqueness Score: -1.00%

Function 00A8E2C0, Relevance: 5.3, APIs: 1, Strings: 2, Instructions: 44windowCOMMON

Download Yara Rule

APIs

Part of subcall function 00AC8B60: ScreenToClient.USER32 ref: 00AC8B8F
Part of subcall function 00AC8B60: GetClientRect.USER32 ref: 00AC8BA1
Part of subcall function 00AC8B60: IsZoomed.USER32(00000000), ref: 00AC8BAF

Part of subcall function 00A78B40: GetCursorPos.USER32(?), ref: 00A78B92
Part of subcall function 00A78B40: MapWindowPoints.USER32 ref: 00A78BBD
Part of subcall function 00A78B40: PtInRect.USER32(?,?,?), ref: 00A78BCD

SetFocus.USER32(00000000,close,min,?,?,?,?), ref: 00A8E311

Strings

close, xrefs: 00A8E2F1
min, xrefs: 00A8E2E1

Memory Dump Source

Source File: 00000001.00000002.422151708.0000000000A71000.00000020.00020000.sdmp, Offset: 00A70000, based on PE: true

Associated: 00000001.00000002.422117330.0000000000A70000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422651142.0000000000B5D000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422716671.0000000000B9A000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422731871.0000000000B9D000.00000008.00020000.sdmp Download File
Associated: 00000001.00000002.422740097.0000000000BA0000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422749600.0000000000BA4000.00000002.00020000.sdmp Download File

Similarity

API ID: ClientRect$CursorFocusPointsScreenWindowZoomed
String ID: close$min
API String ID: 2110861363-3562232782
Opcode ID: 0c6b345322c922c2f6682a2e61b49edfa8dbe2d9359d542f38c0800fbf9aada5
Instruction ID: 55427afca9ccf782c2b3b87fe39534599e9e22d1a18884c35b4df830e5b10533
Opcode Fuzzy Hash: 0c6b345322c922c2f6682a2e61b49edfa8dbe2d9359d542f38c0800fbf9aada5
Instruction Fuzzy Hash: 97F0F676300218ABDF15BB66EC45FAF374DEB84726F004466F919CB141DA61DC1183A0

Uniqueness

Uniqueness Score: -1.00%

Function 00A84979, Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 34libraryloaderCOMMON

Download Yara Rule

APIs

GetProcAddress.KERNEL32(00000000,DllRegisterServer), ref: 00A84987

Part of subcall function 00AAC330: FreeLibrary.KERNEL32(00000000,?,00A849A2), ref: 00AAC33A

CoUninitialize.OLE32 ref: 00A849A5

Strings

DllRegisterServer, xrefs: 00A84979

Memory Dump Source

Source File: 00000001.00000002.422151708.0000000000A71000.00000020.00020000.sdmp, Offset: 00A70000, based on PE: true

Associated: 00000001.00000002.422117330.0000000000A70000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422651142.0000000000B5D000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422716671.0000000000B9A000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422731871.0000000000B9D000.00000008.00020000.sdmp Download File
Associated: 00000001.00000002.422740097.0000000000BA0000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422749600.0000000000BA4000.00000002.00020000.sdmp Download File

Similarity

API ID: AddressFreeLibraryProcUninitialize
String ID: DllRegisterServer
API String ID: 2730562217-1663957109
Opcode ID: 07f4d610e6d25a6868fcea043a2afa64a0a7b1a5d7827ed0c5cc29519b9a5b84
Instruction ID: ebb1d30842200682de7c8b07f04f9971ac134fba3cc5e86c49e7ba0bf7e44692
Opcode Fuzzy Hash: 07f4d610e6d25a6868fcea043a2afa64a0a7b1a5d7827ed0c5cc29519b9a5b84
Instruction Fuzzy Hash: D6F0F631D002058BDB20EFA8D945A5DF3B4EF54720B1883AAE825973D0EF349D01CBA0

Uniqueness

Uniqueness Score: -1.00%

Function 00AB8A10, Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 22COMMON

Download Yara Rule

APIs

Part of subcall function 00AB8B06: GetLastError.KERNEL32 ref: 00AB8B18

IsDebuggerPresent.KERNEL32(?,?,?,00A72E7D), ref: 00AB8A43
OutputDebugStringW.KERNEL32(ERROR : Unable to initialize critical section in CAtlBaseModule,?,?,?,00A72E7D), ref: 00AB8A52

Strings

ERROR : Unable to initialize critical section in CAtlBaseModule, xrefs: 00AB8A4D

Memory Dump Source

Source File: 00000001.00000002.422151708.0000000000A71000.00000020.00020000.sdmp, Offset: 00A70000, based on PE: true

Associated: 00000001.00000002.422117330.0000000000A70000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422651142.0000000000B5D000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422716671.0000000000B9A000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422731871.0000000000B9D000.00000008.00020000.sdmp Download File
Associated: 00000001.00000002.422740097.0000000000BA0000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422749600.0000000000BA4000.00000002.00020000.sdmp Download File

Similarity

API ID: DebugDebuggerErrorLastOutputPresentString
String ID: ERROR : Unable to initialize critical section in CAtlBaseModule
API String ID: 389471666-631824599
Opcode ID: c0eb5027e30c8d1470b9758decd7073f84c3dbb57af7ce98093650b46455e20d
Instruction ID: cf3849e060e790fb833d7601cf7783cd97ff3c7e1bba5be2f600856d000793f6
Opcode Fuzzy Hash: c0eb5027e30c8d1470b9758decd7073f84c3dbb57af7ce98093650b46455e20d
Instruction Fuzzy Hash: C0E06DB02007408FD370AF68D9043867AECAF04741F00895EE446C3642DFB9D488CB91

Uniqueness

Uniqueness Score: -1.00%

Function 00AB60BC, Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 13COMMON

Download Yara Rule

APIs

std::invalid_argument::invalid_argument.LIBCONCRT ref: 00AB60C8

Part of subcall function 00AB6033: std::exception::exception.LIBCONCRT ref: 00AB6040

__CxxThrowException@8.LIBVCRUNTIME ref: 00AB60D6

Part of subcall function 00B23827: RaiseException.KERNEL32(?,?,00AB60BB,?,00B9A044,?,00000007,?,?,?,?,00AB60BB,?,00B93034,?), ref: 00B23887

Strings

bad function call, xrefs: 00AB60DC

Memory Dump Source

Source File: 00000001.00000002.422151708.0000000000A71000.00000020.00020000.sdmp, Offset: 00A70000, based on PE: true

Associated: 00000001.00000002.422117330.0000000000A70000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422651142.0000000000B5D000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422716671.0000000000B9A000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422731871.0000000000B9D000.00000008.00020000.sdmp Download File
Associated: 00000001.00000002.422740097.0000000000BA0000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422749600.0000000000BA4000.00000002.00020000.sdmp Download File

Similarity

API ID: ExceptionException@8RaiseThrowstd::exception::exceptionstd::invalid_argument::invalid_argument
String ID: bad function call
API String ID: 1586462112-3612616537
Opcode ID: 1ad7188370c87d560048a6a80193f3546feb9548ed123aaa17bc1e9a47abbe1e
Instruction ID: c568e59dd5f87e0d5e8d81b96ba918cbfeb7af7b0a00f1f4e34388ee4b9b5e03
Opcode Fuzzy Hash: 1ad7188370c87d560048a6a80193f3546feb9548ed123aaa17bc1e9a47abbe1e
Instruction Fuzzy Hash: 46C01269C0010C77CF08BAA5DD469CC77EC6E04700F8085E0761096052DA78972886D1

Uniqueness

Uniqueness Score: -1.00%

Function 00ACEC00, Relevance: 5.2, APIs: 4, Instructions: 157COMMON

Download Yara Rule

APIs

MultiByteToWideChar.KERNEL32(0000FDE9,00000000,?,?,00000000,00000000,00000000,?,?,?,?,00AD1280,00000000,?,00000000,?), ref: 00ACEC4E
MultiByteToWideChar.KERNEL32(0000FDE9,00000000,?,00000000,00000000,00000000,?), ref: 00ACEC74
MultiByteToWideChar.KERNEL32(00000000,00000000,?,?,00000000,00000000,00000000,?,?,?,?,00AD1280,00000000,?,00000000,?), ref: 00ACECA0
MultiByteToWideChar.KERNEL32(00000000,00000000,?,00000000,00000000,00000000,?), ref: 00ACECC3

Memory Dump Source

Source File: 00000001.00000002.422151708.0000000000A71000.00000020.00020000.sdmp, Offset: 00A70000, based on PE: true

Associated: 00000001.00000002.422117330.0000000000A70000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422651142.0000000000B5D000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422716671.0000000000B9A000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422731871.0000000000B9D000.00000008.00020000.sdmp Download File
Associated: 00000001.00000002.422740097.0000000000BA0000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422749600.0000000000BA4000.00000002.00020000.sdmp Download File

Similarity

API ID: ByteCharMultiWide
String ID:
API String ID: 626452242-0
Opcode ID: 7d33ce7c6cac298571df2b48517bb22f2194887a9b7e3a9665bb876cb4283e6a
Instruction ID: a4770da68df0da548b3442f6f9c350f3c06c100000fce774a968a71975f585d0
Opcode Fuzzy Hash: 7d33ce7c6cac298571df2b48517bb22f2194887a9b7e3a9665bb876cb4283e6a
Instruction Fuzzy Hash: 1B512671A04308ABEF32DF289C41FAA7BA5EF16320F554298F9599F285D730ED008791

Uniqueness

Uniqueness Score: -1.00%

Function 00B15C60, Relevance: 5.1, APIs: 4, Instructions: 106COMMON

Download Yara Rule

APIs

MultiByteToWideChar.KERNEL32(00B1645C,00000000,00000000,00000002,?,00000002,?,00B1645C,00000000,0000FDE9,?,?,0000FDE9), ref: 00B15CAF
GetLastError.KERNEL32(?,00B1645C,00000000,0000FDE9,?,?,0000FDE9), ref: 00B15CC0
MultiByteToWideChar.KERNEL32(00B1645C,00000000,00000000,0000FDE9,00000000,00000000,?,00B1645C,00000000,0000FDE9,?,?,0000FDE9), ref: 00B15CD9
MultiByteToWideChar.KERNEL32(00B1645C,00000000,00000000,0000FDE9,?,00000000,?,?,?,?,?,00B1645C,00000000,0000FDE9,?,?), ref: 00B15D00

Memory Dump Source

Source File: 00000001.00000002.422151708.0000000000A71000.00000020.00020000.sdmp, Offset: 00A70000, based on PE: true

Associated: 00000001.00000002.422117330.0000000000A70000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422651142.0000000000B5D000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422716671.0000000000B9A000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422731871.0000000000B9D000.00000008.00020000.sdmp Download File
Associated: 00000001.00000002.422740097.0000000000BA0000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422749600.0000000000BA4000.00000002.00020000.sdmp Download File

Similarity

API ID: ByteCharMultiWide$ErrorLast
String ID:
API String ID: 1717984340-0
Opcode ID: 3915cfcdbbad7705dbdc22f291f340a074ea07e836b43dbc1a2ffe6d91b8964d
Instruction ID: fa224a89cac7ad3fecfc5204cd5cd25bc2383d6064e34f4fe5d2ca29e8a86ec6
Opcode Fuzzy Hash: 3915cfcdbbad7705dbdc22f291f340a074ea07e836b43dbc1a2ffe6d91b8964d
Instruction Fuzzy Hash: 4A310BB6200306BBDB205F55DC85FAABBADEF55350F508265F90487151EB72AD148BA0

Uniqueness

Uniqueness Score: -1.00%

Function 00B4F610, Relevance: 5.1, APIs: 4, Instructions: 91COMMON

Download Yara Rule

APIs

MultiByteToWideChar.KERNEL32(00000003,00000000,00B4FCB4,00B4FCB6,?,00B4FCB6,?,?,00B4FCB4,?,?,?,?,?,?), ref: 00B4F65E
GetLastError.KERNEL32(?,00B4FCB4,?,?,?,?,?,?,?,?,?,?,00000000,00000000), ref: 00B4F66F
MultiByteToWideChar.KERNEL32(00000003,00000000,00B4FCB4,?,00000000,00000000,?,00B4FCB4,?,?,?,?,?,?), ref: 00B4F687
MultiByteToWideChar.KERNEL32(00000003,00000000,00B4FCB4,?,?,00000000,?,?,?,?,?,?,00B4FCB4,?), ref: 00B4F6AD

Memory Dump Source

Source File: 00000001.00000002.422151708.0000000000A71000.00000020.00020000.sdmp, Offset: 00A70000, based on PE: true

Associated: 00000001.00000002.422117330.0000000000A70000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422651142.0000000000B5D000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.422716671.0000000000B9A000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422731871.0000000000B9D000.00000008.00020000.sdmp Download File
Associated: 00000001.00000002.422740097.0000000000BA0000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.422749600.0000000000BA4000.00000002.00020000.sdmp Download File

Similarity

API ID: ByteCharMultiWide$ErrorLast
String ID:
API String ID: 1717984340-0
Opcode ID: 81c68c101623df2ec345080428888604130e455cef1eae7cba2dd4300ed5a2c6
Instruction ID: cf222d8df58a25e928476bd39946c4ae46644c4d2fef1fced5caaf2af81eead7
Opcode Fuzzy Hash: 81c68c101623df2ec345080428888604130e455cef1eae7cba2dd4300ed5a2c6
Instruction Fuzzy Hash: CB2149B6640317BBEB205FA4CC85F7A7BACEF15744F104265FA0447181EBB25D15C7A0

Uniqueness

Uniqueness Score: -1.00%

Analysis Process: sdly.exe PID: 1956 Parent PID: 5960 sdly.exeCOMMON

Executed Functions

Function 0020C570, Relevance: 48.0, APIs: 25, Strings: 2, Instructions: 745filewindowCOMMON

Download Yara Rule

APIs

LoadImageW.USER32 ref: 0020C753
LoadImageW.USER32 ref: 0020C7B8
GetIconInfo.USER32(00000000,?), ref: 0020C7F9
GetDC.USER32(00000000), ref: 0020C83E
CreateCompatibleDC.GDI32(00000000), ref: 0020C84B
CreateCompatibleBitmap.GDI32(?,?,?), ref: 0020C864
SelectObject.GDI32(?,00000000), ref: 0020C877
DrawIconEx.USER32 ref: 0020C89A
DeleteDC.GDI32(?), ref: 0020C8A6
ReleaseDC.USER32 ref: 0020C8B4
DestroyIcon.USER32(00000000), ref: 0020C8BB
CreateFileW.KERNEL32(00000000,80000000,00000001,00000000,00000003,00000080,00000000,?,?,00000000,00000000,?,?), ref: 0020C98B
GetFileSize.KERNEL32(?,00000000,?,00000084,00000002,Function_000354A0,?,00000000,00000000,?,?), ref: 0020C9E8
ReadFile.KERNEL32(?,00000000,00000000,00000000,00000000,00000000,?,?), ref: 0020CA26
CloseHandle.KERNEL32(?,?,00000000,00000000,00000000,00000000,00000000,?,?), ref: 0020CA33
FindResourceW.KERNEL32(00000000,?,?,?,?), ref: 0020CCD5
LoadResource.KERNEL32(00000000,00000000), ref: 0020CCEC
SizeofResource.KERNEL32(00000000,00000000), ref: 0020CCFF
LockResource.KERNEL32(00000000,00000000), ref: 0020CD25
FreeResource.KERNEL32(00000000), ref: 0020CD3B
CreateFileW.KERNEL32(?,80000000,00000001,00000000,00000003,00000080,00000000), ref: 0020CD76
GetFileSize.KERNEL32(00000000,00000000), ref: 0020CD86
ReadFile.KERNEL32(00000000,00000000,00000000,00000000,00000000), ref: 0020CDC0
CloseHandle.KERNEL32(00000000), ref: 0020CDC7
CreateDIBSection.GDI32(00000000,?,00000000,?,00000000,00000000), ref: 0020CEDD

Strings

.ico, xrefs: 0020C5DE, 0020C67E
(, xrefs: 0020CEAF

Memory Dump Source

Source File: 00000013.00000002.619891084.00000000001A1000.00000020.00020000.sdmp, Offset: 001A0000, based on PE: true

Associated: 00000013.00000002.619849404.00000000001A0000.00000002.00020000.sdmp Download File
Associated: 00000013.00000002.620617605.000000000028D000.00000002.00020000.sdmp Download File
Associated: 00000013.00000002.620703918.00000000002CA000.00000004.00020000.sdmp Download File
Associated: 00000013.00000002.620737014.00000000002CD000.00000008.00020000.sdmp Download File
Associated: 00000013.00000002.620761206.00000000002D0000.00000004.00020000.sdmp Download File
Associated: 00000013.00000002.620779970.00000000002D4000.00000002.00020000.sdmp Download File

Similarity

API ID: File$CreateResource$IconLoad$CloseCompatibleHandleImageReadSize$BitmapDeleteDestroyDrawFindFreeInfoLockObjectReleaseSectionSelectSizeof
String ID: ($.ico
API String ID: 176542572-4199203635
Opcode ID: 6d128a961f4764932bc786a611de9f1b35fb389c49b2dc070e97c624af1b52c7
Instruction ID: f5d873ee939ab955c512ea6c3d3f1018b44b9ee5311d87edaa6cae7bcb3e16ca
Opcode Fuzzy Hash: 6d128a961f4764932bc786a611de9f1b35fb389c49b2dc070e97c624af1b52c7
Instruction Fuzzy Hash: 0B52D0B19102599BDB24EF64CC45BAEB7B8BF14300F5481D9E989A72C2DF309E94CF91

Uniqueness

Uniqueness Score: -1.00%

Function 0020A680, Relevance: 32.1, APIs: 5, Strings: 13, Instructions: 643COMMON

Download Yara Rule

APIs

CharNextW.USER32(?,001F916C,000000FF,BA24D7A6,?), ref: 0020A7FC
CharNextW.USER32(?,001F916C,000000FF,BA24D7A6,?), ref: 0020A833
CharNextW.USER32(?,001F916C,000000FF,BA24D7A6,?), ref: 0020A88F
CharNextW.USER32(?,001F916C,000000FF,BA24D7A6,?), ref: 0020A8CA
CharNextW.USER32(?,001F916C,000000FF,BA24D7A6,?), ref: 0020A901

Strings

resample, xrefs: 0020AE65
file, xrefs: 0020A968, 0020AF40
xtiled, xrefs: 0020AD85
hole, xrefs: 0020AD19
res, xrefs: 0020A980
fade, xrefs: 0020ACDD
dest, xrefs: 0020AA54
restype, xrefs: 0020A998
ytiled, xrefs: 0020ADF5
true, xrefs: 0020AD33, 0020AD9F, 0020AE0F
source, xrefs: 0020AB22
corner, xrefs: 0020ABCA
mask, xrefs: 0020AC72

Memory Dump Source

Source File: 00000013.00000002.619891084.00000000001A1000.00000020.00020000.sdmp, Offset: 001A0000, based on PE: true

Associated: 00000013.00000002.619849404.00000000001A0000.00000002.00020000.sdmp Download File
Associated: 00000013.00000002.620617605.000000000028D000.00000002.00020000.sdmp Download File
Associated: 00000013.00000002.620703918.00000000002CA000.00000004.00020000.sdmp Download File
Associated: 00000013.00000002.620737014.00000000002CD000.00000008.00020000.sdmp Download File
Associated: 00000013.00000002.620761206.00000000002D0000.00000004.00020000.sdmp Download File
Associated: 00000013.00000002.620779970.00000000002D4000.00000002.00020000.sdmp Download File

Similarity

API ID: CharNext
String ID: corner$dest$fade$file$hole$mask$res$resample$restype$source$true$xtiled$ytiled
API String ID: 3213498283-500689389
Opcode ID: 95aba95fa5914c7b720499472d9de0656db3c5207e77accb6d9578ab342b25e8
Instruction ID: 0b69724d26917170b7b9e073ee9ed6f329a8fd857244405479b02314f62bae06
Opcode Fuzzy Hash: 95aba95fa5914c7b720499472d9de0656db3c5207e77accb6d9578ab342b25e8
Instruction Fuzzy Hash: D3428D71D2032A9ADF21AF24CD59BE9B3B5EF28300F4441D5E94DA6192EB309EE4CF51

Uniqueness

Uniqueness Score: -1.00%

Function 001E47E0, Relevance: 14.2, APIs: 6, Strings: 2, Instructions: 207windowfilenetworkCOMMON

Download Yara Rule

APIs

PeekMessageW.USER32 ref: 001E482C
SetEvent.KERNEL32 ref: 001E4838

Part of subcall function 001A45F0: GetProcessHeap.KERNEL32(001D5638,BA24D7A6), ref: 001A4601

Part of subcall function 001A4130: FindResourceExW.KERNEL32(00000000,00000006,?,00000000,00000000,0028DAF8,?,?,?,?,001A36E1,0028DAF8,?,?,?,0028DAF8), ref: 001A4186
Part of subcall function 001A4130: FindResourceW.KERNEL32(00000000,0028DAF8,00000006,?,0028DAF8), ref: 001A41C4

GetMessageW.USER32(?,00000000,00000000,00000000), ref: 001E4851
URLDownloadToCacheFileA.URLMON(00000000,?,?,00000104,00000000,00000000), ref: 001E48AD
DeleteFileA.KERNEL32(00000000), ref: 001E48D3
GetMessageW.USER32(?,00000000,00000000,00000000), ref: 001E4A7C

Strings

CStatistic::Thread_SendPingback, URLDownloadToCacheFileA failed., xrefs: 001E48B6
http://l.public.ludashi.com/pc/Updata/Usuallog, xrefs: 001E493C, 001E494C

Memory Dump Source

Source File: 00000013.00000002.619891084.00000000001A1000.00000020.00020000.sdmp, Offset: 001A0000, based on PE: true

Associated: 00000013.00000002.619849404.00000000001A0000.00000002.00020000.sdmp Download File
Associated: 00000013.00000002.620617605.000000000028D000.00000002.00020000.sdmp Download File
Associated: 00000013.00000002.620703918.00000000002CA000.00000004.00020000.sdmp Download File
Associated: 00000013.00000002.620737014.00000000002CD000.00000008.00020000.sdmp Download File
Associated: 00000013.00000002.620761206.00000000002D0000.00000004.00020000.sdmp Download File
Associated: 00000013.00000002.620779970.00000000002D4000.00000002.00020000.sdmp Download File

Similarity

API ID: Message$FileFindResource$CacheDeleteDownloadEventHeapPeekProcess
String ID: CStatistic::Thread_SendPingback, URLDownloadToCacheFileA failed.$http://l.public.ludashi.com/pc/Updata/Usuallog
API String ID: 2365722304-76294699
Opcode ID: 07bf6280eaad36096f18f46e298a2770b87c0efc6a1539723158d43f2e356d07
Instruction ID: dd93c7509fefaf731521613051aa687f87b1241fc765b96c4eeb79a56d9751a2
Opcode Fuzzy Hash: 07bf6280eaad36096f18f46e298a2770b87c0efc6a1539723158d43f2e356d07
Instruction Fuzzy Hash: 73712431941658ABEB20EB68CC4DF9DB7B8AF85314F1042E4E119A72D1DB74AF84CF94

Uniqueness

Uniqueness Score: -1.00%

Function 002091E0, Relevance: 82.8, APIs: 54, Instructions: 1820windowCOMMON

Download Yara Rule

APIs

CreateCompatibleDC.GDI32(?), ref: 00209235

Part of subcall function 00230D20: GetVersion.KERNEL32(?,?,?,00209258), ref: 00230D2D

SelectObject.GDI32(?,?), ref: 00209295
SetStretchBltMode.GDI32(?,00000004), ref: 002092A6
IntersectRect.USER32 ref: 0020930C
BitBlt.GDI32(?,?,?,?,?,?,00000000,00000000,00CC0020), ref: 0020934C
IntersectRect.USER32 ref: 00209390
StretchBlt.GDI32(?,?,0028995E,000000FF,?,?,?,?,?,?,00CC0020), ref: 0020940E
IntersectRect.USER32 ref: 0020944A
StretchBlt.GDI32(?,?,0028995E,?,?,?,?,?,?,?,00CC0020), ref: 00209487
IntersectRect.USER32 ref: 002094C2
StretchBlt.GDI32(?,?,0028995E,000000FF,0028995E,?,?,?,?,?,00CC0020), ref: 00209516
IntersectRect.USER32 ref: 00209553
StretchBlt.GDI32(?,?,0028995E,?,?,?,00000000,?,00000000,?,00CC0020), ref: 00209598
IntersectRect.USER32 ref: 002095D6
StretchBlt.GDI32(?,?,0028995E,000000FF,0028995E,?,?,?,?,?,00CC0020), ref: 0020962C
IntersectRect.USER32 ref: 0020966D
StretchBlt.GDI32(?,?,0028995E,000000FF,?,?,00000000,?,00000000,?,00CC0020), ref: 002096C9
IntersectRect.USER32 ref: 00209706
StretchBlt.GDI32(?,?,0028995E,?,?,?,?,00000000,?,00000000,00CC0020), ref: 0020974C
IntersectRect.USER32 ref: 0020978B
StretchBlt.GDI32(?,?,0028995E,000000FF,?,?,?,?,00000000,?,00CC0020), ref: 002097E5
IntersectRect.USER32 ref: 00209828
StretchBlt.GDI32(?,?,0028995E,000000FF,?,?,00000000,?,00000000,?,00CC0020), ref: 00209873
SelectObject.GDI32(?,00000000), ref: 0020A61D
DeleteDC.GDI32(?), ref: 0020A626
DeleteObject.GDI32(?), ref: 0020A633

Memory Dump Source

Source File: 00000013.00000002.619891084.00000000001A1000.00000020.00020000.sdmp, Offset: 001A0000, based on PE: true

Associated: 00000013.00000002.619849404.00000000001A0000.00000002.00020000.sdmp Download File
Associated: 00000013.00000002.620617605.000000000028D000.00000002.00020000.sdmp Download File
Associated: 00000013.00000002.620703918.00000000002CA000.00000004.00020000.sdmp Download File
Associated: 00000013.00000002.620737014.00000000002CD000.00000008.00020000.sdmp Download File
Associated: 00000013.00000002.620761206.00000000002D0000.00000004.00020000.sdmp Download File
Associated: 00000013.00000002.620779970.00000000002D4000.00000002.00020000.sdmp Download File

Similarity

API ID: IntersectRectStretch$Object$DeleteSelect$CompatibleCreateModeVersion
String ID:
API String ID: 2820791957-0
Opcode ID: 79a0deb4101e103ce0bc25aee1fd57da3d4abd8d24daade09b5167fdaa70b435
Instruction ID: 6ffd5451aa0118c4c73de9fbf780ada951f3b1d98a1d08ca05735ccc321205f1
Opcode Fuzzy Hash: 79a0deb4101e103ce0bc25aee1fd57da3d4abd8d24daade09b5167fdaa70b435
Instruction Fuzzy Hash: 4903BE75A1020AEFDF14CFE8D988EADBBB5FF48310F148159E519A7265DB30A991CF40

Uniqueness

Uniqueness Score: -1.00%

Function 001F86F0, Relevance: 30.0, APIs: 13, Strings: 4, Instructions: 288windowCOMMON

Download Yara Rule

APIs

GetWindowLongW.USER32(00000000,000000F0), ref: 001F8728
SetWindowLongW.USER32 ref: 001F8743
GetClientRect.USER32 ref: 001F8755
SetWindowPos.USER32(00000000,00000000,001A828E,?,?,?,00000020), ref: 001F877B

Part of subcall function 001EC700: GetDC.USER32(?), ref: 001EC70D
Part of subcall function 001EC700: LoadLibraryW.KERNEL32(Dwmapi.dll,?,?,00000000,?,001F7C82,?,?,?,?), ref: 001EC732
Part of subcall function 001EC700: GetProcAddress.KERNEL32(00000000,DwmIsCompositionEnabled), ref: 001EC744
Part of subcall function 001EC700: FreeLibrary.KERNEL32(00000000,?,00000000,?,001F7C82,?,?,?,?), ref: 001EC752

FindResourceW.KERNEL32(00000000,00000000,?,?), ref: 001F87DF
LoadResource.KERNEL32(00000000,00000000,?,?), ref: 001F87F6
FreeResource.KERNEL32(00000000,?,?), ref: 001F8807
SizeofResource.KERNEL32(00000000,00000000,?,?), ref: 001F8818
LockResource.KERNEL32(?,00000000), ref: 001F8841
FreeResource.KERNEL32(00000000), ref: 001F8857
MessageBoxW.USER32(00000000,00294160,Duilib,00000010), ref: 001F8959
ExitProcess.KERNEL32 ref: 001F8961
GetParent.USER32(?), ref: 001F8A22

Strings

Duilib, xrefs: 001F894E
file='share/shadow.png' corner='4,2,4,6' hole='true', xrefs: 001F89FB, 001F8A02
xml, xrefs: 001F88F3
ZIPRES, xrefs: 001F87D0

Memory Dump Source

Source File: 00000013.00000002.619891084.00000000001A1000.00000020.00020000.sdmp, Offset: 001A0000, based on PE: true

Associated: 00000013.00000002.619849404.00000000001A0000.00000002.00020000.sdmp Download File
Associated: 00000013.00000002.620617605.000000000028D000.00000002.00020000.sdmp Download File
Associated: 00000013.00000002.620703918.00000000002CA000.00000004.00020000.sdmp Download File
Associated: 00000013.00000002.620737014.00000000002CD000.00000008.00020000.sdmp Download File
Associated: 00000013.00000002.620761206.00000000002D0000.00000004.00020000.sdmp Download File
Associated: 00000013.00000002.620779970.00000000002D4000.00000002.00020000.sdmp Download File

Similarity

API ID: Resource$FreeWindow$LibraryLoadLong$AddressClientExitFindLockMessageParentProcProcessRectSizeof
String ID: Duilib$ZIPRES$file='share/shadow.png' corner='4,2,4,6' hole='true'$xml
API String ID: 4224122098-4050673474
Opcode ID: 40f08f0dbe1a69ce9bb35c7b19e4b9c7759d534309c42b2788773dbe964f8562
Instruction ID: ad79c5359235a596d995b58cf97e4e5d9787b2391343db372771be5c76175793
Opcode Fuzzy Hash: 40f08f0dbe1a69ce9bb35c7b19e4b9c7759d534309c42b2788773dbe964f8562
Instruction Fuzzy Hash: 53A1BFB1A00649AFDB18EB74DC5AFBE77A9AF54304F040168F506D3292EF34AE14CB61

Uniqueness

Uniqueness Score: -1.00%

Function 001DE3C6, Relevance: 19.5, APIs: 2, Strings: 9, Instructions: 246COMMON

Download Yara Rule

APIs

WideCharToMultiByte.KERNEL32(00000003,00000000,?,000000FF,00000000,00000000,00000000,00000000), ref: 001DE3DD
WideCharToMultiByte.KERNEL32(00000003,00000000,?,000000FF,?,-00000001,00000000,00000000,?,000000FF,00000000,00000000,00000000,00000000), ref: 001DE413

Strings

\-, xrefs: 001DE4C4
LDSGameCenter.exe, xrefs: 001DE5C5
Software\LDSGameCenter, xrefs: 001DE4FD, 001DE62A
pgstation.exe, xrefs: 001DE5E2
ubj, xrefs: 001DE5F6
LastRunVer, xrefs: 001DE4A2, 001DE4F8, 001DE60E, 001DE625
X-, xrefs: 001DE51A
Software\LDSGameCenterExtra, xrefs: 001DE4A7, 001DE613
0Hu, xrefs: 001DE48E

Memory Dump Source

Source File: 00000013.00000002.619891084.00000000001A1000.00000020.00020000.sdmp, Offset: 001A0000, based on PE: true

Associated: 00000013.00000002.619849404.00000000001A0000.00000002.00020000.sdmp Download File
Associated: 00000013.00000002.620617605.000000000028D000.00000002.00020000.sdmp Download File
Associated: 00000013.00000002.620703918.00000000002CA000.00000004.00020000.sdmp Download File
Associated: 00000013.00000002.620737014.00000000002CD000.00000008.00020000.sdmp Download File
Associated: 00000013.00000002.620761206.00000000002D0000.00000004.00020000.sdmp Download File
Associated: 00000013.00000002.620779970.00000000002D4000.00000002.00020000.sdmp Download File

Similarity

API ID: ByteCharMultiWide
String ID: 0Hu$LDSGameCenter.exe$LastRunVer$Software\LDSGameCenter$Software\LDSGameCenterExtra$X-$\-$pgstation.exe$ubj
API String ID: 626452242-2440141933
Opcode ID: e6156f62840693a6dd663453437391c559bb763fcd0c67361b61d71196f157e9
Instruction ID: 2cd7e02357c28141d83787eea14c70947b866af965395cbb8b9786d2d7f6f221
Opcode Fuzzy Hash: e6156f62840693a6dd663453437391c559bb763fcd0c67361b61d71196f157e9
Instruction Fuzzy Hash: 2F81B371A006089BDB10EFA8CC49B9EF7B4EF55715F24825AF514AB2C1DB74AE05CB90

Uniqueness

Uniqueness Score: -1.00%

Function 001D5642, Relevance: 19.4, APIs: 6, Strings: 5, Instructions: 153COMMON

Download Yara Rule

APIs

Part of subcall function 001A4130: FindResourceExW.KERNEL32(00000000,00000006,?,00000000,00000000,0028DAF8,?,?,?,?,001A36E1,0028DAF8,?,?,?,0028DAF8), ref: 001A4186
Part of subcall function 001A4130: FindResourceW.KERNEL32(00000000,0028DAF8,00000006,?,0028DAF8), ref: 001A41C4

SHGetSpecialFolderPathW.SHELL32(00000000,?,0000001A,00000000), ref: 001D56AD
PathAppendW.SHLWAPI(?,LDSGameCenter), ref: 001D56C5
PathAppendW.SHLWAPI(?,Log), ref: 001D56D3
SHCreateDirectoryExW.SHELL32(00000000,?,00000000), ref: 001D56E0
GetModuleFileNameW.KERNEL32(001A0000,?,00000104), ref: 001D570D
PathFileExistsW.SHLWAPI(?), ref: 001D57F1

Part of subcall function 001DE140: PathRemoveFileSpecW.SHLWAPI(00000000,?,?,?,?), ref: 001DE221

Strings

LDSGameCenter, xrefs: 001D56BF
%s\%s.log, xrefs: 001D57AF
Log, xrefs: 001D56C7
.on, xrefs: 001D57CC
pJu, xrefs: 001D56B3

Memory Dump Source

Source File: 00000013.00000002.619891084.00000000001A1000.00000020.00020000.sdmp, Offset: 001A0000, based on PE: true

Associated: 00000013.00000002.619849404.00000000001A0000.00000002.00020000.sdmp Download File
Associated: 00000013.00000002.620617605.000000000028D000.00000002.00020000.sdmp Download File
Associated: 00000013.00000002.620703918.00000000002CA000.00000004.00020000.sdmp Download File
Associated: 00000013.00000002.620737014.00000000002CD000.00000008.00020000.sdmp Download File
Associated: 00000013.00000002.620761206.00000000002D0000.00000004.00020000.sdmp Download File
Associated: 00000013.00000002.620779970.00000000002D4000.00000002.00020000.sdmp Download File

Similarity

API ID: Path$File$AppendFindResource$CreateDirectoryExistsFolderModuleNameRemoveSpecSpecial
String ID: %s\%s.log$.on$LDSGameCenter$Log$pJu
API String ID: 2581096778-1054193705
Opcode ID: 9203bd506d9c7ae049ff0c37874f4a0e45891cd709a994fd608f0b4851fe4a4e
Instruction ID: 3691c5f9ca0d508372e37b1a28450cf2305d908c6b03375267c07e261cb7ce66
Opcode Fuzzy Hash: 9203bd506d9c7ae049ff0c37874f4a0e45891cd709a994fd608f0b4851fe4a4e
Instruction Fuzzy Hash: 2B51B0B59006189FDB10DB64DC89BDDB7B8EF14315F4041DAAA09A7292DB306E88CFA4

Uniqueness

Uniqueness Score: -1.00%

Function 001E412C, Relevance: 17.9, APIs: 3, Strings: 7, Instructions: 379threadwindowCOMMON

Download Yara Rule

APIs

Part of subcall function 001E37B0: MultiByteToWideChar.KERNEL32(00000003,00000000,?,000000FF,00000000,00000000,?,?,?,?,?,00000000,00286A28,000000FF,?,80004005), ref: 001E3889
Part of subcall function 001E37B0: MultiByteToWideChar.KERNEL32(00000003,00000000,?,000000FF,?,-00000001,?,?,?,?,00000000,00286A28,000000FF,?,80004005,BA24D7A6), ref: 001E38BB

_wcsstr.LIBVCRUNTIME ref: 001E43DC
GetTickCount.KERNEL32 ref: 001E4411
PostThreadMessageW.USER32 ref: 001E452A

Strings

&from=, xrefs: 001E4287
&sign=, xrefs: 001E424F
action=, xrefs: 001E4301
&lds_game_secret, xrefs: 001E4155
&forcetick=%d, xrefs: 001E441E
action=, xrefs: 001E4397
http://s.ludashi.com/wan, xrefs: 001E448E

Memory Dump Source

Source File: 00000013.00000002.619891084.00000000001A1000.00000020.00020000.sdmp, Offset: 001A0000, based on PE: true

Associated: 00000013.00000002.619849404.00000000001A0000.00000002.00020000.sdmp Download File
Associated: 00000013.00000002.620617605.000000000028D000.00000002.00020000.sdmp Download File
Associated: 00000013.00000002.620703918.00000000002CA000.00000004.00020000.sdmp Download File
Associated: 00000013.00000002.620737014.00000000002CD000.00000008.00020000.sdmp Download File
Associated: 00000013.00000002.620761206.00000000002D0000.00000004.00020000.sdmp Download File
Associated: 00000013.00000002.620779970.00000000002D4000.00000002.00020000.sdmp Download File

Similarity

API ID: ByteCharMultiWide$CountMessagePostThreadTick_wcsstr
String ID: &forcetick=%d$&from=$&lds_game_secret$&sign=$action=$action=$http://s.ludashi.com/wan
API String ID: 3799094310-3821931251
Opcode ID: 74fc1aa56adde337fdc2262d8fbd6e4d9d4403b1c17dc285e50a5a3d602d7aa4
Instruction ID: 718540f383dbd8532a0923504c885d58d7fee82a107a573a284549d879604955
Opcode Fuzzy Hash: 74fc1aa56adde337fdc2262d8fbd6e4d9d4403b1c17dc285e50a5a3d602d7aa4
Instruction Fuzzy Hash: 1DF15930A00559DBDB10DBA9CC89B9DF7B5BF55304F1481D9E049EB292EB74AE88CF60

Uniqueness

Uniqueness Score: -1.00%

Function 001FE6B0, Relevance: 17.9, APIs: 4, Strings: 6, Instructions: 360fileCOMMON

Download Yara Rule

APIs

CreateFileW.KERNEL32(00000000,80000000,00000001,00000000,00000003,00000080,00000000,?,?,00000000,00000000,BA24D7A6), ref: 001FE7B0
GetFileSize.KERNEL32(?,00000000,?,00000084,00000002,Function_000354A0,?,00000000,00000000,BA24D7A6), ref: 001FE83D
ReadFile.KERNEL32(?,?,?,00000000,00000000,BA24D7A6), ref: 001FE8A2
CloseHandle.KERNEL32(?,?,?,?,00000000,00000000,BA24D7A6), ref: 001FE8A9

Strings

Could not read file, xrefs: 001FE8F3
Error opening zip file, xrefs: 001FEA5F
Could not unzip file, xrefs: 001FEAB4
File is empty, xrefs: 001FE84F
Error opening file, xrefs: 001FE80F
File too large, xrefs: 001FE85F

Memory Dump Source

Source File: 00000013.00000002.619891084.00000000001A1000.00000020.00020000.sdmp, Offset: 001A0000, based on PE: true

Associated: 00000013.00000002.619849404.00000000001A0000.00000002.00020000.sdmp Download File
Associated: 00000013.00000002.620617605.000000000028D000.00000002.00020000.sdmp Download File
Associated: 00000013.00000002.620703918.00000000002CA000.00000004.00020000.sdmp Download File
Associated: 00000013.00000002.620737014.00000000002CD000.00000008.00020000.sdmp Download File
Associated: 00000013.00000002.620761206.00000000002D0000.00000004.00020000.sdmp Download File
Associated: 00000013.00000002.620779970.00000000002D4000.00000002.00020000.sdmp Download File

Similarity

API ID: File$CloseCreateHandleReadSize
String ID: Could not read file$Could not unzip file$Error opening file$Error opening zip file$File is empty$File too large
API String ID: 3919263394-637979653
Opcode ID: 7664465cc828636f2e0e08e3ee2312e36b297b1f6760a201af560b59346eea7d
Instruction ID: 7a46a7803db44864dfc2f071a509d4a5253b684f798defcd5f3beba98d877b46
Opcode Fuzzy Hash: 7664465cc828636f2e0e08e3ee2312e36b297b1f6760a201af560b59346eea7d
Instruction Fuzzy Hash: 4DD1B1709002599BDF25EB60DC46BEEB3B9AF14744F004195FA19B32D2EB709B94CF51

Uniqueness

Uniqueness Score: -1.00%

Function 001DD5B0, Relevance: 17.8, APIs: 6, Strings: 4, Instructions: 323COMMON

Download Yara Rule

APIs

InitializeCriticalSection.KERNEL32(?,BA24D7A6), ref: 001DD603

Part of subcall function 001A45F0: GetProcessHeap.KERNEL32(001D5638,BA24D7A6), ref: 001A4601

SHGetSpecialFolderPathW.SHELL32(00000000,?,0000001A,00000000), ref: 001DD69D
PathAppendW.SHLWAPI(?,LDSGameCenter), ref: 001DD6AF
PathCombineW.SHLWAPI(?,?,Log\LDSGameCenter.log), ref: 001DD6C2

Part of subcall function 001A4130: FindResourceExW.KERNEL32(00000000,00000006,?,00000000,00000000,0028DAF8,?,?,?,?,001A36E1,0028DAF8,?,?,?,0028DAF8), ref: 001A4186
Part of subcall function 001A4130: FindResourceW.KERNEL32(00000000,0028DAF8,00000006,?,0028DAF8), ref: 001A41C4

PathRemoveFileSpecW.SHLWAPI(00000000,?,?,?,?), ref: 001DD83F
DeleteCriticalSection.KERNEL32(00000005,BA24D7A6,?,?,?,00000000,00286550,000000FF,?,80004005,80004005,80004005), ref: 001DD980

Strings

Log\LDSGameCenter.log, xrefs: 001DD6B5
LDSGameCenter, xrefs: 001DD6A3
@0), xrefs: 001DD5FC
pJu, xrefs: 001DD6AF

Memory Dump Source

Source File: 00000013.00000002.619891084.00000000001A1000.00000020.00020000.sdmp, Offset: 001A0000, based on PE: true

Associated: 00000013.00000002.619849404.00000000001A0000.00000002.00020000.sdmp Download File
Associated: 00000013.00000002.620617605.000000000028D000.00000002.00020000.sdmp Download File
Associated: 00000013.00000002.620703918.00000000002CA000.00000004.00020000.sdmp Download File
Associated: 00000013.00000002.620737014.00000000002CD000.00000008.00020000.sdmp Download File
Associated: 00000013.00000002.620761206.00000000002D0000.00000004.00020000.sdmp Download File
Associated: 00000013.00000002.620779970.00000000002D4000.00000002.00020000.sdmp Download File

Similarity

API ID: Path$CriticalFindResourceSection$AppendCombineDeleteFileFolderHeapInitializeProcessRemoveSpecSpecial
String ID: @0)$LDSGameCenter$Log\LDSGameCenter.log$pJu
API String ID: 3624597452-1775705507
Opcode ID: 421b1330f903d59a0a064a3d0b364fcacd51f0fec7d7b556af9767adca7d1a35
Instruction ID: a2995c8bfc235d7bb7fb5934dcac84ce65ec689e768bb54e6ceae40516c80efd
Opcode Fuzzy Hash: 421b1330f903d59a0a064a3d0b364fcacd51f0fec7d7b556af9767adca7d1a35
Instruction Fuzzy Hash: 2CC1D375A01605AFCB14DF68D889BAAF7B4FF45314F1482ADE80997791DB30AD05CF90

Uniqueness

Uniqueness Score: -1.00%

Function 001BC0E0, Relevance: 17.8, APIs: 3, Strings: 7, Instructions: 284windowCOMMON

Download Yara Rule

APIs

_wcsstr.LIBVCRUNTIME ref: 001BC119
DebugBreak.KERNEL32(?,?), ref: 001BC125

Part of subcall function 001BADA0: PathFileExistsW.SHLWAPI(-00000010), ref: 001BADEF

MessageBoxW.USER32(00000000,00293218,00000000,00000030), ref: 001BC4FC

Part of subcall function 001AD500: PathFileExistsW.SHLWAPI(?,\NetBridge.dll,0000000E), ref: 001AD562

MessageBoxW.USER32(00000000,00293248,00000000,00000030), ref: 001BC485

Strings

-debugbreak, xrefs: 001BC113
showinst, xrefs: 001BC1C4, 001BC6A8
\WdGameData_%s, xrefs: 001BC16D
CMainControl::_EnsureLoad360Dlls, LoadExeDir360Net failed., xrefs: 001BC454
uninstall, xrefs: 001BC2AC
install_extra, xrefs: 001BC320
install, xrefs: 001BC238

Memory Dump Source

Source File: 00000013.00000002.619891084.00000000001A1000.00000020.00020000.sdmp, Offset: 001A0000, based on PE: true

Associated: 00000013.00000002.619849404.00000000001A0000.00000002.00020000.sdmp Download File
Associated: 00000013.00000002.620617605.000000000028D000.00000002.00020000.sdmp Download File
Associated: 00000013.00000002.620703918.00000000002CA000.00000004.00020000.sdmp Download File
Associated: 00000013.00000002.620737014.00000000002CD000.00000008.00020000.sdmp Download File
Associated: 00000013.00000002.620761206.00000000002D0000.00000004.00020000.sdmp Download File
Associated: 00000013.00000002.620779970.00000000002D4000.00000002.00020000.sdmp Download File

Similarity

API ID: ExistsFileMessagePath$BreakDebug_wcsstr
String ID: -debugbreak$CMainControl::_EnsureLoad360Dlls, LoadExeDir360Net failed.$\WdGameData_%s$install$install_extra$showinst$uninstall
API String ID: 1991904086-992619606
Opcode ID: d362ade106a610878adde366f18a7eefe5f3497cb4089a31bb162c5aded17698
Instruction ID: f441a17f6590e3dbed3774ebca71e7133bf7e67c22fb30b8822736ce6b448997
Opcode Fuzzy Hash: d362ade106a610878adde366f18a7eefe5f3497cb4089a31bb162c5aded17698
Instruction Fuzzy Hash: 02B14530E00209DBDF04EBA4CC95BEEFBB5AF55314F148169E415E32D2EB74AA44CBA1

Uniqueness

Uniqueness Score: -1.00%

Function 001BE1B0, Relevance: 16.6, APIs: 11, Instructions: 89windowCOMMON

Download Yara Rule

APIs

Part of subcall function 001F86F0: GetWindowLongW.USER32(00000000,000000F0), ref: 001F8728
Part of subcall function 001F86F0: SetWindowLongW.USER32 ref: 001F8743
Part of subcall function 001F86F0: GetClientRect.USER32 ref: 001F8755
Part of subcall function 001F86F0: SetWindowPos.USER32(00000000,00000000,001A828E,?,?,?,00000020), ref: 001F877B
Part of subcall function 001F86F0: FindResourceW.KERNEL32(00000000,00000000,?,?), ref: 001F87DF
Part of subcall function 001F86F0: LoadResource.KERNEL32(00000000,00000000,?,?), ref: 001F87F6
Part of subcall function 001F86F0: FreeResource.KERNEL32(00000000,?,?), ref: 001F8807

Part of subcall function 001BE360: DestroyWindow.USER32(00000000), ref: 001BE41F

SetWindowTextW.USER32(?,?), ref: 001BE1E5
DestroyIcon.USER32(?), ref: 001BE210
DestroyIcon.USER32(?), ref: 001BE227
GetSystemMetrics.USER32 ref: 001BE23F
GetSystemMetrics.USER32 ref: 001BE244
LoadImageW.USER32 ref: 001BE252
GetSystemMetrics.USER32 ref: 001BE266
GetSystemMetrics.USER32 ref: 001BE26B
LoadImageW.USER32 ref: 001BE273
SendMessageW.USER32(?,00000080,00000001,?), ref: 001BE296
SendMessageW.USER32(?,00000080,00000000,00000000), ref: 001BE2A3

Memory Dump Source

Source File: 00000013.00000002.619891084.00000000001A1000.00000020.00020000.sdmp, Offset: 001A0000, based on PE: true

Associated: 00000013.00000002.619849404.00000000001A0000.00000002.00020000.sdmp Download File
Associated: 00000013.00000002.620617605.000000000028D000.00000002.00020000.sdmp Download File
Associated: 00000013.00000002.620703918.00000000002CA000.00000004.00020000.sdmp Download File
Associated: 00000013.00000002.620737014.00000000002CD000.00000008.00020000.sdmp Download File
Associated: 00000013.00000002.620761206.00000000002D0000.00000004.00020000.sdmp Download File
Associated: 00000013.00000002.620779970.00000000002D4000.00000002.00020000.sdmp Download File

Similarity

API ID: Window$MetricsSystem$DestroyLoadResource$IconImageLongMessageSend$ClientFindFreeRectText
String ID:
API String ID: 3527752567-0
Opcode ID: 23ec95f393a1d04b3c3db7b2edec2163c7b3df44abcadb9fc9e3b28e0ef663ed
Instruction ID: a858b97636d368cd9e699b05dbe848638fc9b86a2a21c7a000bb12bf8f68e910
Opcode Fuzzy Hash: 23ec95f393a1d04b3c3db7b2edec2163c7b3df44abcadb9fc9e3b28e0ef663ed
Instruction Fuzzy Hash: C5312375640208BFEB119F51DC85FAA7BA9FF48750F044065F9445B292CBB2AD10DFA0

Uniqueness

Uniqueness Score: -1.00%

Function 001BC830, Relevance: 16.0, APIs: 3, Strings: 6, Instructions: 219COMMON

Download Yara Rule

APIs

GetTickCount.KERNEL32 ref: 001BC85A
GetModuleHandleW.KERNEL32(00000000), ref: 001BC968
GetTickCount.KERNEL32 ref: 001BC9C6

Strings

%lu, xrefs: 001BC9FD
HookInitialize, MH_Initialize failed, ret=%d, xrefs: 001BC8CE
LastRunTime, xrefs: 001BC922
exit, xrefs: 001BCA1E
_sec, xrefs: 001BCA48
run, xrefs: 001BC883

Memory Dump Source

Source File: 00000013.00000002.619891084.00000000001A1000.00000020.00020000.sdmp, Offset: 001A0000, based on PE: true

Associated: 00000013.00000002.619849404.00000000001A0000.00000002.00020000.sdmp Download File
Associated: 00000013.00000002.620617605.000000000028D000.00000002.00020000.sdmp Download File
Associated: 00000013.00000002.620703918.00000000002CA000.00000004.00020000.sdmp Download File
Associated: 00000013.00000002.620737014.00000000002CD000.00000008.00020000.sdmp Download File
Associated: 00000013.00000002.620761206.00000000002D0000.00000004.00020000.sdmp Download File
Associated: 00000013.00000002.620779970.00000000002D4000.00000002.00020000.sdmp Download File

Similarity

API ID: CountTick$HandleModule
String ID: %lu$HookInitialize, MH_Initialize failed, ret=%d$LastRunTime$_sec$exit$run
API String ID: 503989783-2451729631
Opcode ID: 3cfed40b7a68d5cb71635b7de13a57be951dfa98d23ac71626fc51a1d6eefc1a
Instruction ID: f30dd816e1cc9a728f4287ec844e3a23760378c006f187083da773b8dfa8fc79
Opcode Fuzzy Hash: 3cfed40b7a68d5cb71635b7de13a57be951dfa98d23ac71626fc51a1d6eefc1a
Instruction Fuzzy Hash: DE81F370A01645AFEB00EBB8CD0AB9EBBF4EF55314F144268F514A72D2EB749A04CBD1

Uniqueness

Uniqueness Score: -1.00%

Function 001F01F0, Relevance: 15.9, APIs: 8, Strings: 1, Instructions: 118registryCOMMON

Download Yara Rule

APIs

GetClassInfoExW.USER32 ref: 001F022B
GetClassInfoExW.USER32 ref: 001F0247
RegisterClassExW.USER32 ref: 001F0278
GetLastError.KERNEL32 ref: 001F0283
LoadCursorW.USER32(00000000,00007F00), ref: 001F02E8
RegisterClassW.USER32 ref: 001F030D
GetLastError.KERNEL32(?,?,001A7D4E), ref: 001F0318
CreateWindowExW.USER32 ref: 001F0358

Strings

0, xrefs: 001F0216

Memory Dump Source

Source File: 00000013.00000002.619891084.00000000001A1000.00000020.00020000.sdmp, Offset: 001A0000, based on PE: true

Associated: 00000013.00000002.619849404.00000000001A0000.00000002.00020000.sdmp Download File
Associated: 00000013.00000002.620617605.000000000028D000.00000002.00020000.sdmp Download File
Associated: 00000013.00000002.620703918.00000000002CA000.00000004.00020000.sdmp Download File
Associated: 00000013.00000002.620737014.00000000002CD000.00000008.00020000.sdmp Download File
Associated: 00000013.00000002.620761206.00000000002D0000.00000004.00020000.sdmp Download File
Associated: 00000013.00000002.620779970.00000000002D4000.00000002.00020000.sdmp Download File

Similarity

API ID: Class$ErrorInfoLastRegister$CreateCursorLoadWindow
String ID: 0
API String ID: 1185170849-4108050209
Opcode ID: 4a9d5f5a7fad3271f57505e9c146afb0f875c7b18a18104ea533d96261e080c2
Instruction ID: 2d27b5f3c6664cdaf8732e58cefc58106c0ab72f66393eeabbbf24cfb552f6c5
Opcode Fuzzy Hash: 4a9d5f5a7fad3271f57505e9c146afb0f875c7b18a18104ea533d96261e080c2
Instruction Fuzzy Hash: 69412679A10209AFDB11DFA4D848BAEBBF8FF4C304F14455AF945E32A1DB359950CB90

Uniqueness

Uniqueness Score: -1.00%

Function 001F7320, Relevance: 15.8, APIs: 6, Strings: 3, Instructions: 41COMMON

Download Yara Rule

APIs

IsWindow.USER32(?), ref: 001F732E
FindWindowExW.USER32(?,00000000,Shell Embedding,00000000), ref: 001F734D
FindWindowExW.USER32(00000000,00000000,Shell DocObject View,00000000), ref: 001F735D
FindWindowExW.USER32(00000000,00000000,Internet Explorer_Server,00000000), ref: 001F736D
GetWindowLongW.USER32(00000000,000000EC), ref: 001F7378
SetWindowLongW.USER32 ref: 001F7382

Strings

Internet Explorer_Server, xrefs: 001F7365
Shell DocObject View, xrefs: 001F7355
Shell Embedding, xrefs: 001F733A

Memory Dump Source

Source File: 00000013.00000002.619891084.00000000001A1000.00000020.00020000.sdmp, Offset: 001A0000, based on PE: true

Associated: 00000013.00000002.619849404.00000000001A0000.00000002.00020000.sdmp Download File
Associated: 00000013.00000002.620617605.000000000028D000.00000002.00020000.sdmp Download File
Associated: 00000013.00000002.620703918.00000000002CA000.00000004.00020000.sdmp Download File
Associated: 00000013.00000002.620737014.00000000002CD000.00000008.00020000.sdmp Download File
Associated: 00000013.00000002.620761206.00000000002D0000.00000004.00020000.sdmp Download File
Associated: 00000013.00000002.620779970.00000000002D4000.00000002.00020000.sdmp Download File

Similarity

API ID: Window$Find$Long
String ID: Internet Explorer_Server$Shell DocObject View$Shell Embedding
API String ID: 189972333-2040739340
Opcode ID: 72288390914d97f0bb7696d2420ec46a4de640a5e4a7211fbd9e9cfbd00ae002
Instruction ID: 3c1d6879350a12950cb9be669ad4083781f4cedae4a2539dcc60a263b712c34d
Opcode Fuzzy Hash: 72288390914d97f0bb7696d2420ec46a4de640a5e4a7211fbd9e9cfbd00ae002
Instruction Fuzzy Hash: 54F0547269572677DB3057345C09FA72E5C6B25B55F1402227E11F61D0CBA8E8108AA9

Uniqueness

Uniqueness Score: -1.00%

Function 001B96A8, Relevance: 14.3, APIs: 2, Strings: 6, Instructions: 258COMMON

Download Yara Rule

APIs

__CxxThrowException@8.LIBVCRUNTIME ref: 001B96BC

Part of subcall function 00253827: RaiseException.KERNEL32(?,?,001E60BB,?,002CA044,?,0000000F,?,?,?,?,001E60BB,?,002C3034,?), ref: 00253887

Part of subcall function 001A45F0: GetProcessHeap.KERNEL32(001D5638,BA24D7A6), ref: 001A4601

InitializeCriticalSection.KERNEL32(?), ref: 001B97A8

Part of subcall function 001D20B0: SHGetValueW.SHLWAPI(?,BA24D7A6,?,00000001,?,?), ref: 001D213F

Strings

http://wan.ludashi.com/site/{game_id}, xrefs: 001B9907
hp%(, xrefs: 001B99B5
http://wan.ludashi.com/web/wpay?game={game_id}&server={server_id}, xrefs: 001B98F5
@0), xrefs: 001B979D
LastRunTime, xrefs: 001B989A
http://wan.ludashi.com/(?:(?:web/game)|yeyou)/(.*?)\?.*?s=(\d+).*, xrefs: 001B9919

Memory Dump Source

Source File: 00000013.00000002.619891084.00000000001A1000.00000020.00020000.sdmp, Offset: 001A0000, based on PE: true

Associated: 00000013.00000002.619849404.00000000001A0000.00000002.00020000.sdmp Download File
Associated: 00000013.00000002.620617605.000000000028D000.00000002.00020000.sdmp Download File
Associated: 00000013.00000002.620703918.00000000002CA000.00000004.00020000.sdmp Download File
Associated: 00000013.00000002.620737014.00000000002CD000.00000008.00020000.sdmp Download File
Associated: 00000013.00000002.620761206.00000000002D0000.00000004.00020000.sdmp Download File
Associated: 00000013.00000002.620779970.00000000002D4000.00000002.00020000.sdmp Download File

Similarity

API ID: CriticalExceptionException@8HeapInitializeProcessRaiseSectionThrowValue
String ID: @0)$LastRunTime$hp%($http://wan.ludashi.com/(?:(?:web/game)|yeyou)/(.*?)\?.*?s=(\d+).*$http://wan.ludashi.com/site/{game_id}$http://wan.ludashi.com/web/wpay?game={game_id}&server={server_id}
API String ID: 1114886752-25837149
Opcode ID: e654cd6b74696fea90053bcb5adc944cf5c94d00558a4756318478c9557e890f
Instruction ID: ad557871cb6d5be11d05791bf004e3e942d40918382cad5a587e10ce67aadfcc
Opcode Fuzzy Hash: e654cd6b74696fea90053bcb5adc944cf5c94d00558a4756318478c9557e890f
Instruction Fuzzy Hash: B191F434A01642DFE710EB78C809B9EB7E4EF12318F04456DF56ADB692DB70E904CB92

Uniqueness

Uniqueness Score: -1.00%

Function 001B9141, Relevance: 14.2, APIs: 6, Strings: 2, Instructions: 157COMMON

Download Yara Rule

APIs

Part of subcall function 001D0A10: SHGetSpecialFolderPathW.SHELL32(00000000,?,0000001A,00000000), ref: 001D0A90
Part of subcall function 001D0A10: SHCreateDirectoryExW.SHELL32(00000000,?,00000000,00000000,?,?,?), ref: 001D0AE4
Part of subcall function 001D0A10: PathFileExistsW.SHLWAPI(?), ref: 001D0AEB

GdiplusStartup.GDIPLUS(?,00000001,00000000,0000000B,?,?,\WdGame\Log), ref: 001B91C6
GdiplusShutdown.GDIPLUS(00000000,00001388,0000000B,?,00000001,00000000), ref: 001B9275
EnterCriticalSection.KERNEL32(002D0808,00000000,00001388,0000000B,?,00000001,00000000), ref: 001B9284
DestroyWindow.USER32(00000000,?,?,?,?,?,?,?,?,?,?,\WdGame\Log,0000000B), ref: 001B929E
LeaveCriticalSection.KERNEL32(002D0808,?,?,?,?,?,?,?,?,?,?,\WdGame\Log,0000000B), ref: 001B92E7
CoUninitialize.OLE32(?,?,?,?,?,?,?,?,?,?,\WdGame\Log,0000000B), ref: 001B933F

Strings

\WdGame.log, xrefs: 001B9181
\WdGame\Log, xrefs: 001B9143

Memory Dump Source

Source File: 00000013.00000002.619891084.00000000001A1000.00000020.00020000.sdmp, Offset: 001A0000, based on PE: true

Associated: 00000013.00000002.619849404.00000000001A0000.00000002.00020000.sdmp Download File
Associated: 00000013.00000002.620617605.000000000028D000.00000002.00020000.sdmp Download File
Associated: 00000013.00000002.620703918.00000000002CA000.00000004.00020000.sdmp Download File
Associated: 00000013.00000002.620737014.00000000002CD000.00000008.00020000.sdmp Download File
Associated: 00000013.00000002.620761206.00000000002D0000.00000004.00020000.sdmp Download File
Associated: 00000013.00000002.620779970.00000000002D4000.00000002.00020000.sdmp Download File

Similarity

API ID: CriticalGdiplusPathSection$CreateDestroyDirectoryEnterExistsFileFolderLeaveShutdownSpecialStartupUninitializeWindow
String ID: \WdGame.log$\WdGame\Log
API String ID: 3745756869-1914079685
Opcode ID: 0777826befafd252d5616d56aebf0018963e6866f483a61da6074277834defae
Instruction ID: 4668dffd8d8d87fb7a8a129552d8ae5da48714af91e84cb96fc198aec603d65b
Opcode Fuzzy Hash: 0777826befafd252d5616d56aebf0018963e6866f483a61da6074277834defae
Instruction Fuzzy Hash: 4F51BEB09112059FDB20EF68EC89B9EB7E4FF04701F048569E819A73E1DB74A904CFA1

Uniqueness

Uniqueness Score: -1.00%

Function 001B75B0, Relevance: 14.1, APIs: 4, Strings: 4, Instructions: 66registrylibraryloaderCOMMON

Download Yara Rule

APIs

GetModuleHandleW.KERNEL32(Advapi32.dll,00283238,LDSGameCenter,00000000,00283238,?,001DBBD4,80000001,Software\Microsoft\Windows\CurrentVersion\Run,0002001F,00283238), ref: 001B75D4
GetProcAddress.KERNEL32(00000000,RegOpenKeyTransactedW), ref: 001B75EB
RegOpenKeyExW.KERNEL32(82(,0002001F,00000000,?,00000000,00283238,LDSGameCenter,00000000,00283238,?,001DBBD4,80000001,Software\Microsoft\Windows\CurrentVersion\Run,0002001F,00283238), ref: 001B7624
RegCloseKey.ADVAPI32(00000000,?,001DBBD4,80000001,Software\Microsoft\Windows\CurrentVersion\Run,0002001F,00283238), ref: 001B7637

Strings

LDSGameCenter, xrefs: 001B75BE
RegOpenKeyTransactedW, xrefs: 001B75E5
Advapi32.dll, xrefs: 001B75CF
82(, xrefs: 001B7621, 001B7603

Memory Dump Source

Source File: 00000013.00000002.619891084.00000000001A1000.00000020.00020000.sdmp, Offset: 001A0000, based on PE: true

Associated: 00000013.00000002.619849404.00000000001A0000.00000002.00020000.sdmp Download File
Associated: 00000013.00000002.620617605.000000000028D000.00000002.00020000.sdmp Download File
Associated: 00000013.00000002.620703918.00000000002CA000.00000004.00020000.sdmp Download File
Associated: 00000013.00000002.620737014.00000000002CD000.00000008.00020000.sdmp Download File
Associated: 00000013.00000002.620761206.00000000002D0000.00000004.00020000.sdmp Download File
Associated: 00000013.00000002.620779970.00000000002D4000.00000002.00020000.sdmp Download File

Similarity

API ID: AddressCloseHandleModuleOpenProc
String ID: 82($Advapi32.dll$LDSGameCenter$RegOpenKeyTransactedW
API String ID: 823179699-189159071
Opcode ID: f7ad7ecd44de127a517653cef70230b3d5a7daf51457ed0aeecd6b928b36ea7c
Instruction ID: de155479997b68dfacef31d49a1ce57b33b8c1b1059c24511569392bfac9a8fd
Opcode Fuzzy Hash: f7ad7ecd44de127a517653cef70230b3d5a7daf51457ed0aeecd6b928b36ea7c
Instruction Fuzzy Hash: 73118B31608605FBEF248F59DC48FAABBA9EB84710F148029F909D61D0E7B1DD50EB60

Uniqueness

Uniqueness Score: -1.00%

Function 001F1430, Relevance: 13.8, APIs: 9, Instructions: 328COMMON

Download Yara Rule

APIs

IntersectRect.USER32 ref: 001F1480

Part of subcall function 0020BBD0: GetClipBox.GDI32(001F14AB,?), ref: 0020BBFC
Part of subcall function 0020BBD0: CreateRectRgnIndirect.GDI32(?), ref: 0020BC06
Part of subcall function 0020BBD0: CreateRectRgnIndirect.GDI32(?), ref: 0020BC13
Part of subcall function 0020BBD0: ExtSelectClipRgn.GDI32(001F14AB,00000000,00000001), ref: 0020BC20

Part of subcall function 001F9C50: IntersectRect.USER32 ref: 001F9C91
Part of subcall function 001F9C50: CreateCompatibleDC.GDI32(?), ref: 001F9CB3
Part of subcall function 001F9C50: CreateCompatibleBitmap.GDI32(?,?,?), ref: 001F9CD0
Part of subcall function 001F9C50: DeleteDC.GDI32(?), ref: 001F9CE6
Part of subcall function 001F9C50: AlphaBlend.MSIMG32(?,00000000,00000000,?,?,?,00000000,00000000,?,?,00000000), ref: 001F9E19
Part of subcall function 001F9C50: SelectObject.GDI32(?,?), ref: 001F9E30
Part of subcall function 001F9C50: DeleteDC.GDI32(?), ref: 001F9E3C

IntersectRect.USER32 ref: 001F1567
IntersectRect.USER32 ref: 001F15C2
IntersectRect.USER32 ref: 001F15ED
IntersectRect.USER32 ref: 001F1655
IntersectRect.USER32 ref: 001F16A3
IntersectRect.USER32 ref: 001F1754
IntersectRect.USER32 ref: 001F177F
IntersectRect.USER32 ref: 001F17C2

Memory Dump Source

Source File: 00000013.00000002.619891084.00000000001A1000.00000020.00020000.sdmp, Offset: 001A0000, based on PE: true

Associated: 00000013.00000002.619849404.00000000001A0000.00000002.00020000.sdmp Download File
Associated: 00000013.00000002.620617605.000000000028D000.00000002.00020000.sdmp Download File
Associated: 00000013.00000002.620703918.00000000002CA000.00000004.00020000.sdmp Download File
Associated: 00000013.00000002.620737014.00000000002CD000.00000008.00020000.sdmp Download File
Associated: 00000013.00000002.620761206.00000000002D0000.00000004.00020000.sdmp Download File
Associated: 00000013.00000002.620779970.00000000002D4000.00000002.00020000.sdmp Download File

Similarity

API ID: Rect$Intersect$Create$ClipCompatibleDeleteIndirectSelect$AlphaBitmapBlendObject
String ID:
API String ID: 3145874863-0
Opcode ID: 276f20a9db40ba4fb2def784c75c366d47bc5bd573fe761b49236aa2308f8a7d
Instruction ID: 961f34d422b8febd82c3fafba00124ee259e1529e8c0bfb1fd71ced85ca5e836
Opcode Fuzzy Hash: 276f20a9db40ba4fb2def784c75c366d47bc5bd573fe761b49236aa2308f8a7d
Instruction Fuzzy Hash: ACD11735A006199FCB10EFA9DC94EEEB7B9FF49304F184169E905EB262DB31A905CF50

Uniqueness

Uniqueness Score: -1.00%

Function 002746A4, Relevance: 13.8, APIs: 9, Instructions: 300COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000013.00000002.619891084.00000000001A1000.00000020.00020000.sdmp, Offset: 001A0000, based on PE: true

Associated: 00000013.00000002.619849404.00000000001A0000.00000002.00020000.sdmp Download File
Associated: 00000013.00000002.620617605.000000000028D000.00000002.00020000.sdmp Download File
Associated: 00000013.00000002.620703918.00000000002CA000.00000004.00020000.sdmp Download File
Associated: 00000013.00000002.620737014.00000000002CD000.00000008.00020000.sdmp Download File
Associated: 00000013.00000002.620761206.00000000002D0000.00000004.00020000.sdmp Download File
Associated: 00000013.00000002.620779970.00000000002D4000.00000002.00020000.sdmp Download File

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b24a57e01c8345885d1d2137230d9d5f2fd7abe8d78568eb1501f824808376e7
Instruction ID: 79a8f99efa14e4e3186a84e0962c74369f11326de9265ffa5c6a3184292df4d3
Opcode Fuzzy Hash: b24a57e01c8345885d1d2137230d9d5f2fd7abe8d78568eb1501f824808376e7
Instruction Fuzzy Hash: 76C11670D2424ADFCF11EFA8D845BAEBBB4AF09311F148185E918A7392D3309D55CF65

Uniqueness

Uniqueness Score: -1.00%

Function 001E37B0, Relevance: 12.6, APIs: 5, Strings: 2, Instructions: 358COMMON

Download Yara Rule

APIs

Part of subcall function 001A45F0: GetProcessHeap.KERNEL32(001D5638,BA24D7A6), ref: 001A4601

MultiByteToWideChar.KERNEL32(00000003,00000000,?,000000FF,00000000,00000000,?,?,?,?,?,00000000,00286A28,000000FF,?,80004005), ref: 001E3889
MultiByteToWideChar.KERNEL32(00000003,00000000,?,000000FF,?,-00000001,?,?,?,?,00000000,00286A28,000000FF,?,80004005,BA24D7A6), ref: 001E38BB

Strings

h(j(, xrefs: 001E3825
SendData, xrefs: 001E3B4B

Memory Dump Source

Source File: 00000013.00000002.619891084.00000000001A1000.00000020.00020000.sdmp, Offset: 001A0000, based on PE: true

Associated: 00000013.00000002.619849404.00000000001A0000.00000002.00020000.sdmp Download File
Associated: 00000013.00000002.620617605.000000000028D000.00000002.00020000.sdmp Download File
Associated: 00000013.00000002.620703918.00000000002CA000.00000004.00020000.sdmp Download File
Associated: 00000013.00000002.620737014.00000000002CD000.00000008.00020000.sdmp Download File
Associated: 00000013.00000002.620761206.00000000002D0000.00000004.00020000.sdmp Download File
Associated: 00000013.00000002.620779970.00000000002D4000.00000002.00020000.sdmp Download File

Similarity

API ID: ByteCharMultiWide$HeapProcess
String ID: SendData$h(j(
API String ID: 2590121937-3287396191
Opcode ID: fb07e71d7e95b569532e5dac52e7c1097bb28fbdf8493db883f52a15928d7dcb
Instruction ID: b26ddc23aa142221b75110ea33bd3c5bb6a33f2ee9546662107bdde5a93546d1
Opcode Fuzzy Hash: fb07e71d7e95b569532e5dac52e7c1097bb28fbdf8493db883f52a15928d7dcb
Instruction Fuzzy Hash: 82D1CE70A00689DFDB10DFA9C848B5EBBF4EF55324F14866DE425DB292DB70AA04CB91

Uniqueness

Uniqueness Score: -1.00%

Function 001D0350, Relevance: 12.5, APIs: 5, Strings: 2, Instructions: 249fileCOMMON

Download Yara Rule

APIs

Part of subcall function 001D1A70: GetTempPathW.KERNEL32(00000104,00000010,BA24D7A6,00000010,00000010), ref: 001D1ACB

Part of subcall function 001A45F0: GetProcessHeap.KERNEL32(001D5638,BA24D7A6), ref: 001A4601

PathFindFileNameW.SHLWAPI(?), ref: 001D0484
PathFileExistsW.SHLWAPI(?,00000000), ref: 001D0523
DeleteFileW.KERNEL32(?), ref: 001D052E
CopyFileW.KERNEL32(?,00000010,00000000), ref: 001D056E
GetTempFileNameW.KERNEL32(?,~tm,00000000,?), ref: 001D05B3

Strings

~tm, xrefs: 001D05A8
%s\%s-%d, xrefs: 001D0551

Memory Dump Source

Source File: 00000013.00000002.619891084.00000000001A1000.00000020.00020000.sdmp, Offset: 001A0000, based on PE: true

Associated: 00000013.00000002.619849404.00000000001A0000.00000002.00020000.sdmp Download File
Associated: 00000013.00000002.620617605.000000000028D000.00000002.00020000.sdmp Download File
Associated: 00000013.00000002.620703918.00000000002CA000.00000004.00020000.sdmp Download File
Associated: 00000013.00000002.620737014.00000000002CD000.00000008.00020000.sdmp Download File
Associated: 00000013.00000002.620761206.00000000002D0000.00000004.00020000.sdmp Download File
Associated: 00000013.00000002.620779970.00000000002D4000.00000002.00020000.sdmp Download File

Similarity

API ID: File$Path$NameTemp$CopyDeleteExistsFindHeapProcess
String ID: %s\%s-%d$~tm
API String ID: 934832287-1237362780
Opcode ID: ca8b6edf144e7dccf2f4c774f6ef54c5e467d1264dd649bafc02d8f9f51ab3db
Instruction ID: 3fe38a233dbf6c322d6b94788e77e712893e99fa950ae6b350537d7dddd0752f
Opcode Fuzzy Hash: ca8b6edf144e7dccf2f4c774f6ef54c5e467d1264dd649bafc02d8f9f51ab3db
Instruction Fuzzy Hash: 6C91C075A01209ABDB11DF68DC4CB9DB7B4AF59320F1442A9B819E7392DB34DE44CF50

Uniqueness

Uniqueness Score: -1.00%

Function 001D2650, Relevance: 12.4, APIs: 4, Strings: 3, Instructions: 177COMMON

Download Yara Rule

APIs

Part of subcall function 001D1270: RegQueryValueExW.KERNEL32(00000000,svcVersion,00000000,?,?,?,80000002,SOFTWARE\Microsoft\Internet Explorer,00020019,BA24D7A6), ref: 001D1330
Part of subcall function 001D1270: RegQueryValueExW.ADVAPI32(00000000,Version,00000000,?,?,00000200), ref: 001D13A2
Part of subcall function 001D1270: RegCloseKey.KERNEL32(00000000), ref: 001D13D3

_wcsstr.LIBVCRUNTIME ref: 001D269D
_wcsstr.LIBVCRUNTIME ref: 001D2735
_wcsstr.LIBVCRUNTIME ref: 001D2773

Part of subcall function 001A45F0: GetProcessHeap.KERNEL32(001D5638,BA24D7A6), ref: 001A4601

Part of subcall function 001A4130: FindResourceExW.KERNEL32(00000000,00000006,?,00000000,00000000,0028DAF8,?,?,?,?,001A36E1,0028DAF8,?,?,?,0028DAF8), ref: 001A4186
Part of subcall function 001A4130: FindResourceW.KERNEL32(00000000,0028DAF8,00000006,?,0028DAF8), ref: 001A41C4

_wcsstr.LIBVCRUNTIME ref: 001D27AE

Strings

10., xrefs: 001D272F
FEATURE_BROWSER_EMULATION, xrefs: 001D26CE, 001D26E5, 001D274C, 001D278A, 001D27C1, 001D27D4
11., xrefs: 001D2697

Memory Dump Source

Source File: 00000013.00000002.619891084.00000000001A1000.00000020.00020000.sdmp, Offset: 001A0000, based on PE: true

Associated: 00000013.00000002.619849404.00000000001A0000.00000002.00020000.sdmp Download File
Associated: 00000013.00000002.620617605.000000000028D000.00000002.00020000.sdmp Download File
Associated: 00000013.00000002.620703918.00000000002CA000.00000004.00020000.sdmp Download File
Associated: 00000013.00000002.620737014.00000000002CD000.00000008.00020000.sdmp Download File
Associated: 00000013.00000002.620761206.00000000002D0000.00000004.00020000.sdmp Download File
Associated: 00000013.00000002.620779970.00000000002D4000.00000002.00020000.sdmp Download File

Similarity

API ID: _wcsstr$FindQueryResourceValue$CloseHeapProcess
String ID: 10.$11.$FEATURE_BROWSER_EMULATION
API String ID: 2497407237-2666944024
Opcode ID: 377289ae6f6e71e6e80fd1dbaee8d4076e47ed26c634ab1d778a83f804567486
Instruction ID: 71b1ed6b728fd2ca4ee1606d94403aaba311ca96a711e79825d52dd9ebf975de
Opcode Fuzzy Hash: 377289ae6f6e71e6e80fd1dbaee8d4076e47ed26c634ab1d778a83f804567486
Instruction Fuzzy Hash: 52514831B00645DBCF14DBB8CC1AB6EB3E4AF32325F144269E825A77C1DBB48E048B51

Uniqueness

Uniqueness Score: -1.00%

Function 001D1270, Relevance: 12.4, APIs: 4, Strings: 3, Instructions: 159registryCOMMON

Download Yara Rule

APIs

Part of subcall function 001B75B0: GetModuleHandleW.KERNEL32(Advapi32.dll,00283238,LDSGameCenter,00000000,00283238,?,001DBBD4,80000001,Software\Microsoft\Windows\CurrentVersion\Run,0002001F,00283238), ref: 001B75D4
Part of subcall function 001B75B0: RegCloseKey.ADVAPI32(00000000,?,001DBBD4,80000001,Software\Microsoft\Windows\CurrentVersion\Run,0002001F,00283238), ref: 001B7637

RegQueryValueExW.KERNEL32(00000000,svcVersion,00000000,?,?,?,80000002,SOFTWARE\Microsoft\Internet Explorer,00020019,BA24D7A6), ref: 001D1330
RegQueryValueExW.ADVAPI32(00000000,Version,00000000,?,?,00000200), ref: 001D13A2
RegCloseKey.KERNEL32(00000000), ref: 001D13D3
RegCloseKey.ADVAPI32(00000000,?), ref: 001D1443

Strings

Version, xrefs: 001D139C
SOFTWARE\Microsoft\Internet Explorer, xrefs: 001D12EC
svcVersion, xrefs: 001D132A

Memory Dump Source

Source File: 00000013.00000002.619891084.00000000001A1000.00000020.00020000.sdmp, Offset: 001A0000, based on PE: true

Associated: 00000013.00000002.619849404.00000000001A0000.00000002.00020000.sdmp Download File
Associated: 00000013.00000002.620617605.000000000028D000.00000002.00020000.sdmp Download File
Associated: 00000013.00000002.620703918.00000000002CA000.00000004.00020000.sdmp Download File
Associated: 00000013.00000002.620737014.00000000002CD000.00000008.00020000.sdmp Download File
Associated: 00000013.00000002.620761206.00000000002D0000.00000004.00020000.sdmp Download File
Associated: 00000013.00000002.620779970.00000000002D4000.00000002.00020000.sdmp Download File

Similarity

API ID: Close$QueryValue$HandleModule
String ID: SOFTWARE\Microsoft\Internet Explorer$Version$svcVersion
API String ID: 374096546-99099367
Opcode ID: 9e89db888846a8e418a7b9eee16b4bdb819cbe6506858872676b2fc9e91075a2
Instruction ID: b4376f15a1b2db7af4aa1aa236d05ab2b758e1c4aed4e98c072b2e1c788ebf1a
Opcode Fuzzy Hash: 9e89db888846a8e418a7b9eee16b4bdb819cbe6506858872676b2fc9e91075a2
Instruction Fuzzy Hash: 81518075A4022CBBDB20DF54DD8DBEEB7B8BB14714F00059AE809E6680DB709E84CF95

Uniqueness

Uniqueness Score: -1.00%

Function 002125C0, Relevance: 10.8, APIs: 3, Strings: 3, Instructions: 332librarycomloaderCOMMON

Download Yara Rule

APIs

LoadLibraryW.KERNEL32(00000000), ref: 00212629
GetProcAddress.KERNEL32(00000000,DllGetClassObject), ref: 00212644
CoCreateInstance.OLE32(?,00000000,00000017,002B6240,00000000), ref: 002126BF

Strings

showactivex, xrefs: 0021289F
DllGetClassObject, xrefs: 0021263A
UIActiveX, xrefs: 00212887

Memory Dump Source

Source File: 00000013.00000002.619891084.00000000001A1000.00000020.00020000.sdmp, Offset: 001A0000, based on PE: true

Associated: 00000013.00000002.619849404.00000000001A0000.00000002.00020000.sdmp Download File
Associated: 00000013.00000002.620617605.000000000028D000.00000002.00020000.sdmp Download File
Associated: 00000013.00000002.620703918.00000000002CA000.00000004.00020000.sdmp Download File
Associated: 00000013.00000002.620737014.00000000002CD000.00000008.00020000.sdmp Download File
Associated: 00000013.00000002.620761206.00000000002D0000.00000004.00020000.sdmp Download File
Associated: 00000013.00000002.620779970.00000000002D4000.00000002.00020000.sdmp Download File

Similarity

API ID: AddressCreateInstanceLibraryLoadProc
String ID: DllGetClassObject$UIActiveX$showactivex
API String ID: 3919134875-1617538497
Opcode ID: b25678c02e3781aa9a74064d5754e2c8f8dea54b3a54cc40e12d04bd1e8fece1
Instruction ID: e6828eb68190dbb74d8cf3af314edc448c9130f135f0c9391f8998480fb9dd3e
Opcode Fuzzy Hash: b25678c02e3781aa9a74064d5754e2c8f8dea54b3a54cc40e12d04bd1e8fece1
Instruction Fuzzy Hash: C2D14B70A10206DFDB14CFA8C898BAEBBF8FF49704F144468E905EB291D775A955CF60

Uniqueness

Uniqueness Score: -1.00%

Function 001B5750, Relevance: 10.7, APIs: 7, Instructions: 152windowCOMMON

Download Yara Rule

APIs

GetMessageW.USER32(?,00000000,00000000,00000000), ref: 001EE743
GetWindowLongW.USER32(?,000000F0), ref: 001EE765
GetParent.USER32(?), ref: 001EE779
GetParent.USER32(00000000), ref: 001EE7CE
TranslateMessage.USER32(?), ref: 001EE8C6
DispatchMessageW.USER32 ref: 001EE8D0
KiUserCallbackDispatcher.NTDLL(?,00000000,00000000,00000000), ref: 001EE8E0

Memory Dump Source

Source File: 00000013.00000002.619891084.00000000001A1000.00000020.00020000.sdmp, Offset: 001A0000, based on PE: true

Associated: 00000013.00000002.619849404.00000000001A0000.00000002.00020000.sdmp Download File
Associated: 00000013.00000002.620617605.000000000028D000.00000002.00020000.sdmp Download File
Associated: 00000013.00000002.620703918.00000000002CA000.00000004.00020000.sdmp Download File
Associated: 00000013.00000002.620737014.00000000002CD000.00000008.00020000.sdmp Download File
Associated: 00000013.00000002.620761206.00000000002D0000.00000004.00020000.sdmp Download File
Associated: 00000013.00000002.620779970.00000000002D4000.00000002.00020000.sdmp Download File

Similarity

API ID: Message$Parent$CallbackDispatchDispatcherLongTranslateUserWindow
String ID:
API String ID: 1380769572-0
Opcode ID: 845ed8a5c7e2d328c13739e9f1178309fc6dc23228a9c3e4e3a67b8a3ed1373e
Instruction ID: 417b2ef76eaca979002e2b2e80e1ba75c02678546c962a421e55fac1d85ccbbe
Opcode Fuzzy Hash: 845ed8a5c7e2d328c13739e9f1178309fc6dc23228a9c3e4e3a67b8a3ed1373e
Instruction Fuzzy Hash: D7511731A109559BDB18ABA6DC84FFDB3E9BF9C340F540139E902E7291EF349905CBA1

Uniqueness

Uniqueness Score: -1.00%

Function 001F7490, Relevance: 10.5, APIs: 5, Strings: 1, Instructions: 47COMMON

Download Yara Rule

APIs

GetPropW.USER32 ref: 001F749F
IsBadReadPtr.KERNEL32(00000000,00000004), ref: 001F74AE
SetWindowLongW.USER32 ref: 001F74D9
RemovePropW.USER32 ref: 001F74E5
CallWindowProcW.USER32(77E6D1D0,?,?,?,?), ref: 001F74F4

Strings

{74F07C83-AB7B-4909-BF77-BE87C7273F6B}, xrefs: 001F7499, 001F74DF

Memory Dump Source

Source File: 00000013.00000002.619891084.00000000001A1000.00000020.00020000.sdmp, Offset: 001A0000, based on PE: true

Associated: 00000013.00000002.619849404.00000000001A0000.00000002.00020000.sdmp Download File
Associated: 00000013.00000002.620617605.000000000028D000.00000002.00020000.sdmp Download File
Associated: 00000013.00000002.620703918.00000000002CA000.00000004.00020000.sdmp Download File
Associated: 00000013.00000002.620737014.00000000002CD000.00000008.00020000.sdmp Download File
Associated: 00000013.00000002.620761206.00000000002D0000.00000004.00020000.sdmp Download File
Associated: 00000013.00000002.620779970.00000000002D4000.00000002.00020000.sdmp Download File

Similarity

API ID: PropWindow$CallLongProcReadRemove
String ID: {74F07C83-AB7B-4909-BF77-BE87C7273F6B}
API String ID: 1019334623-3545287619
Opcode ID: 3548c31912419a6b5812483569e15c6c35ff0be11c4c65bb26dcf6e754be8db5
Instruction ID: 98117b77b09cba12698c3966b50b9610173bfd23aa2fe24a835c2b2048ece37f
Opcode Fuzzy Hash: 3548c31912419a6b5812483569e15c6c35ff0be11c4c65bb26dcf6e754be8db5
Instruction Fuzzy Hash: 42F0AF37106228BBDB215B59FC8CDBF7F2CEB96B76B140112FA01A21D087259D15D7B1

Uniqueness

Uniqueness Score: -1.00%

Function 001F7510, Relevance: 10.5, APIs: 5, Strings: 1, Instructions: 47COMMON

Download Yara Rule

APIs

GetPropW.USER32 ref: 001F751F
IsBadReadPtr.KERNEL32(00000000,00000004), ref: 001F752E
SetWindowLongW.USER32 ref: 001F7559
RemovePropW.USER32 ref: 001F7565
CallWindowProcW.USER32(77E6D1D0,?,?,?,?), ref: 001F7574

Strings

{22CEB27E-D1AA-4b4b-A1EA-96945DE5B3E2}, xrefs: 001F7519, 001F755F

Memory Dump Source

Source File: 00000013.00000002.619891084.00000000001A1000.00000020.00020000.sdmp, Offset: 001A0000, based on PE: true

Associated: 00000013.00000002.619849404.00000000001A0000.00000002.00020000.sdmp Download File
Associated: 00000013.00000002.620617605.000000000028D000.00000002.00020000.sdmp Download File
Associated: 00000013.00000002.620703918.00000000002CA000.00000004.00020000.sdmp Download File
Associated: 00000013.00000002.620737014.00000000002CD000.00000008.00020000.sdmp Download File
Associated: 00000013.00000002.620761206.00000000002D0000.00000004.00020000.sdmp Download File
Associated: 00000013.00000002.620779970.00000000002D4000.00000002.00020000.sdmp Download File

Similarity

API ID: PropWindow$CallLongProcReadRemove
String ID: {22CEB27E-D1AA-4b4b-A1EA-96945DE5B3E2}
API String ID: 1019334623-1471426345
Opcode ID: ac5ddb4b130e7a4bfe624ae498ae2341f053e1b77ed36a72419d0235c218d157
Instruction ID: d51f0b3bd5a32f72944c1689bf0c89cb341d8b2aed380b3746d8a20d5b3fca8b
Opcode Fuzzy Hash: ac5ddb4b130e7a4bfe624ae498ae2341f053e1b77ed36a72419d0235c218d157
Instruction Fuzzy Hash: 03F0FF37102228BBCB215B14FC8CCBF7B2CEB96B3AB100112FA01A21E087259915D7B1

Uniqueness

Uniqueness Score: -1.00%

Function 001F7590, Relevance: 10.5, APIs: 5, Strings: 1, Instructions: 47COMMON

Download Yara Rule

APIs

GetPropW.USER32 ref: 001F759F
IsBadReadPtr.KERNEL32(00000000,00000004), ref: 001F75AE
SetWindowLongW.USER32 ref: 001F75D9
RemovePropW.USER32 ref: 001F75E5
CallWindowProcW.USER32(77E6D1D0,?,?,?,?), ref: 001F75F4

Strings

{0034D9EE-60D5-4ebb-9C17-0E237DF4F656}, xrefs: 001F7599, 001F75DF

Memory Dump Source

Source File: 00000013.00000002.619891084.00000000001A1000.00000020.00020000.sdmp, Offset: 001A0000, based on PE: true

Associated: 00000013.00000002.619849404.00000000001A0000.00000002.00020000.sdmp Download File
Associated: 00000013.00000002.620617605.000000000028D000.00000002.00020000.sdmp Download File
Associated: 00000013.00000002.620703918.00000000002CA000.00000004.00020000.sdmp Download File
Associated: 00000013.00000002.620737014.00000000002CD000.00000008.00020000.sdmp Download File
Associated: 00000013.00000002.620761206.00000000002D0000.00000004.00020000.sdmp Download File
Associated: 00000013.00000002.620779970.00000000002D4000.00000002.00020000.sdmp Download File

Similarity

API ID: PropWindow$CallLongProcReadRemove
String ID: {0034D9EE-60D5-4ebb-9C17-0E237DF4F656}
API String ID: 1019334623-3848682194
Opcode ID: e21c48f1da259dc9ae0beff7fd238c305c9860429a313a8ab5ee8fcf0522a869
Instruction ID: c153e9c1b81c03c12fe5bb9fad4272615c9e30abe7f31306e4bc9e3a65121ff7
Opcode Fuzzy Hash: e21c48f1da259dc9ae0beff7fd238c305c9860429a313a8ab5ee8fcf0522a869
Instruction Fuzzy Hash: 26F0FF37106228BBCB215B18FC8CCBF7B2CEB96B35B140113FA01A61E087259D15DBB1

Uniqueness

Uniqueness Score: -1.00%

Function 00270027, Relevance: 9.0, APIs: 6, Instructions: 50COMMON

Download Yara Rule

APIs

GetLastError.KERNEL32(?,?,0025DD21,002C6398,00000010), ref: 0027002B
_free.LIBCMT ref: 0027005E
_free.LIBCMT ref: 00270086
SetLastError.KERNEL32(00000000), ref: 00270093
SetLastError.KERNEL32(00000000), ref: 0027009F
_abort.LIBCMT ref: 002700A5

Memory Dump Source

Source File: 00000013.00000002.619891084.00000000001A1000.00000020.00020000.sdmp, Offset: 001A0000, based on PE: true

Associated: 00000013.00000002.619849404.00000000001A0000.00000002.00020000.sdmp Download File
Associated: 00000013.00000002.620617605.000000000028D000.00000002.00020000.sdmp Download File
Associated: 00000013.00000002.620703918.00000000002CA000.00000004.00020000.sdmp Download File
Associated: 00000013.00000002.620737014.00000000002CD000.00000008.00020000.sdmp Download File
Associated: 00000013.00000002.620761206.00000000002D0000.00000004.00020000.sdmp Download File
Associated: 00000013.00000002.620779970.00000000002D4000.00000002.00020000.sdmp Download File

Similarity

API ID: ErrorLast$_free$_abort
String ID:
API String ID: 3160817290-0
Opcode ID: c04a7ea4b4e0cdd3e63f0ae5580a93cbb41b74fb57880e6419ea0e0282dc996e
Instruction ID: 1023715c2214f67136b2c23feac3358c4847303a323c75956212033a18d43516
Opcode Fuzzy Hash: c04a7ea4b4e0cdd3e63f0ae5580a93cbb41b74fb57880e6419ea0e0282dc996e
Instruction Fuzzy Hash: 34F0CD35534712BAC6323B387D4AF1F162A5FD1771B258015F51CD21D1EF708D794A61

Uniqueness

Uniqueness Score: -1.00%

Function 001D104D, Relevance: 8.9, APIs: 3, Strings: 2, Instructions: 169COMMON

Download Yara Rule

APIs

Part of subcall function 001A45F0: GetProcessHeap.KERNEL32(001D5638,BA24D7A6), ref: 001A4601

GetFileVersionInfoSizeW.VERSION(?,?,BA24D7A6,?,?), ref: 001D1138
GetFileVersionInfoW.VERSION(?,00000000,00000000,?,?,?,BA24D7A6,?,?), ref: 001D115B
VerQueryValueW.VERSION(?,0028FD18,?,?,?,00000000,00000000,?,?,?,BA24D7A6,?,?), ref: 001D1182

Part of subcall function 001A4130: FindResourceExW.KERNEL32(00000000,00000006,?,00000000,00000000,0028DAF8,?,?,?,?,001A36E1,0028DAF8,?,?,?,0028DAF8), ref: 001A4186
Part of subcall function 001A4130: FindResourceW.KERNEL32(00000000,0028DAF8,00000006,?,0028DAF8), ref: 001A41C4

Strings

%d.%d.%d.%d, xrefs: 001D11EA
QPj, xrefs: 001D1156

Memory Dump Source

Source File: 00000013.00000002.619891084.00000000001A1000.00000020.00020000.sdmp, Offset: 001A0000, based on PE: true

Associated: 00000013.00000002.619849404.00000000001A0000.00000002.00020000.sdmp Download File
Associated: 00000013.00000002.620617605.000000000028D000.00000002.00020000.sdmp Download File
Associated: 00000013.00000002.620703918.00000000002CA000.00000004.00020000.sdmp Download File
Associated: 00000013.00000002.620737014.00000000002CD000.00000008.00020000.sdmp Download File
Associated: 00000013.00000002.620761206.00000000002D0000.00000004.00020000.sdmp Download File
Associated: 00000013.00000002.620779970.00000000002D4000.00000002.00020000.sdmp Download File

Similarity

API ID: FileFindInfoResourceVersion$HeapProcessQuerySizeValue
String ID: %d.%d.%d.%d$QPj
API String ID: 1124126271-3960961324
Opcode ID: c228967c7a77048d1f174a8cbab1f304f53900dddea49900ce6d3f175e8ef0ac
Instruction ID: ebec8b885ba8d95bac5c453887e69908d8508d09dfeaf13a7707dc50225e2b00
Opcode Fuzzy Hash: c228967c7a77048d1f174a8cbab1f304f53900dddea49900ce6d3f175e8ef0ac
Instruction Fuzzy Hash: 7C51C275A00219ABDB28DF58CC45BBEB3F8EF54300F1401AAE909D7281DB31AE54CB60

Uniqueness

Uniqueness Score: -1.00%

Function 001BE750, Relevance: 8.8, APIs: 4, Strings: 1, Instructions: 100windowCOMMON

Download Yara Rule

APIs

IsWindow.USER32(00000000), ref: 001BE777
GetWindowRect.USER32 ref: 001BE7E7

Part of subcall function 001C8480: MoveWindow.USER32(00000000,?,?,?,001BE818,00000001,?,001BE818,?,?,?,00000000), ref: 001C8494

Part of subcall function 001F0AF0: IsWindow.USER32(0007006C), ref: 001F0AF9
Part of subcall function 001F0AF0: ShowWindow.USER32(0007006C,-00000004,?,001BD59E,00000000,00000000), ref: 001F0B14

KiUserCallbackDispatcher.NTDLL(00000000), ref: 001BE833
SetFocus.USER32(00000000), ref: 001BE845

Strings

browser_page, xrefs: 001BE786

Memory Dump Source

Source File: 00000013.00000002.619891084.00000000001A1000.00000020.00020000.sdmp, Offset: 001A0000, based on PE: true

Associated: 00000013.00000002.619849404.00000000001A0000.00000002.00020000.sdmp Download File
Associated: 00000013.00000002.620617605.000000000028D000.00000002.00020000.sdmp Download File
Associated: 00000013.00000002.620703918.00000000002CA000.00000004.00020000.sdmp Download File
Associated: 00000013.00000002.620737014.00000000002CD000.00000008.00020000.sdmp Download File
Associated: 00000013.00000002.620761206.00000000002D0000.00000004.00020000.sdmp Download File
Associated: 00000013.00000002.620779970.00000000002D4000.00000002.00020000.sdmp Download File

Similarity

API ID: Window$CallbackDispatcherFocusMoveRectShowUser
String ID: browser_page
API String ID: 3001243290-2674542326
Opcode ID: 00c9b00c26a617e1a9ddd00f2ec10b166acbb93d3a98fc8f1f01cacde1f4627b
Instruction ID: 2ba949f7204e57d1641f5706c9c9cb9f83365c05017be7cde2837ba73123fbc6
Opcode Fuzzy Hash: 00c9b00c26a617e1a9ddd00f2ec10b166acbb93d3a98fc8f1f01cacde1f4627b
Instruction Fuzzy Hash: 0D316931A00A089FCB14EBA9DC89BEEB7F9EF98305F148519E416A7291CB30AD50CB50

Uniqueness

Uniqueness Score: -1.00%

Function 002495F0, Relevance: 7.6, APIs: 5, Instructions: 111fileCOMMON

Download Yara Rule

APIs

PathFileExistsW.SHLWAPI(?), ref: 00249664
CreateFileW.KERNEL32(?,80000000,00000001,00000000,00000003,00000080,00000000), ref: 00249685
GetFileSize.KERNEL32(00000000,00000000), ref: 00249696
CreateFileMappingW.KERNELBASE(?,00000000,00000002,00000000,00000000,00000000), ref: 002496B1
MapViewOfFile.KERNEL32(00000000,00000004,00000000,00000000,00000000), ref: 002496C9

Part of subcall function 00248680: UnmapViewOfFile.KERNEL32(?,BA24D7A6,?,00000000,?,00000000,00000000,00286120,000000FF,?,00249703), ref: 002486C2
Part of subcall function 00248680: CloseHandle.KERNEL32(?,BA24D7A6,?,00000000,?,00000000,00000000,00286120,000000FF,?,00249703), ref: 002486E5
Part of subcall function 00248680: CloseHandle.KERNEL32(?,BA24D7A6,?,00000000,?,00000000,00000000,00286120,000000FF,?,00249703), ref: 00248792

Memory Dump Source

Source File: 00000013.00000002.619891084.00000000001A1000.00000020.00020000.sdmp, Offset: 001A0000, based on PE: true

Associated: 00000013.00000002.619849404.00000000001A0000.00000002.00020000.sdmp Download File
Associated: 00000013.00000002.620617605.000000000028D000.00000002.00020000.sdmp Download File
Associated: 00000013.00000002.620703918.00000000002CA000.00000004.00020000.sdmp Download File
Associated: 00000013.00000002.620737014.00000000002CD000.00000008.00020000.sdmp Download File
Associated: 00000013.00000002.620761206.00000000002D0000.00000004.00020000.sdmp Download File
Associated: 00000013.00000002.620779970.00000000002D4000.00000002.00020000.sdmp Download File

Similarity

API ID: File$CloseCreateHandleView$ExistsMappingPathSizeUnmap
String ID:
API String ID: 3940366622-0
Opcode ID: e44e87c9adbb57dcee8d9477cbe12f18e120ee59bf54a73bad91ccb5604dc79b
Instruction ID: 92fd639021913b29ae12103aa8fed5f9662ca237cf26ee4ee9b9cfaecf0c6356
Opcode Fuzzy Hash: e44e87c9adbb57dcee8d9477cbe12f18e120ee59bf54a73bad91ccb5604dc79b
Instruction Fuzzy Hash: EF310C357A1711BBE7345F14AC0AF5B77ACDB00F11F114619F91AB72C0DBB0A8148B98

Uniqueness

Uniqueness Score: -1.00%

Function 001B75AF, Relevance: 7.0, APIs: 2, Strings: 2, Instructions: 40registrylibraryloaderCOMMON

Download Yara Rule

APIs

GetModuleHandleW.KERNEL32(Advapi32.dll,00283238,LDSGameCenter,00000000,00283238,?,001DBBD4,80000001,Software\Microsoft\Windows\CurrentVersion\Run,0002001F,00283238), ref: 001B75D4
GetProcAddress.KERNEL32(00000000,RegOpenKeyTransactedW), ref: 001B75EB
RegOpenKeyExW.KERNEL32(82(,0002001F,00000000,?,00000000,00283238,LDSGameCenter,00000000,00283238,?,001DBBD4,80000001,Software\Microsoft\Windows\CurrentVersion\Run,0002001F,00283238), ref: 001B7624
RegCloseKey.ADVAPI32(00000000,?,001DBBD4,80000001,Software\Microsoft\Windows\CurrentVersion\Run,0002001F,00283238), ref: 001B7637

Strings

LDSGameCenter, xrefs: 001B75BE
Advapi32.dll, xrefs: 001B75CF

Memory Dump Source

Source File: 00000013.00000002.619891084.00000000001A1000.00000020.00020000.sdmp, Offset: 001A0000, based on PE: true

Associated: 00000013.00000002.619849404.00000000001A0000.00000002.00020000.sdmp Download File
Associated: 00000013.00000002.620617605.000000000028D000.00000002.00020000.sdmp Download File
Associated: 00000013.00000002.620703918.00000000002CA000.00000004.00020000.sdmp Download File
Associated: 00000013.00000002.620737014.00000000002CD000.00000008.00020000.sdmp Download File
Associated: 00000013.00000002.620761206.00000000002D0000.00000004.00020000.sdmp Download File
Associated: 00000013.00000002.620779970.00000000002D4000.00000002.00020000.sdmp Download File

Similarity

API ID: AddressCloseHandleModuleOpenProc
String ID: Advapi32.dll$LDSGameCenter
API String ID: 823179699-2117812903
Opcode ID: ac4289dfa5e21fe403175b62794440a63d6b19ca5eb959651b071bd4178d7c15
Instruction ID: 10c017af9a157bfd3b89418176f3b7f818cb062bf2b91f6314dbe2bfa0ef2da7
Opcode Fuzzy Hash: ac4289dfa5e21fe403175b62794440a63d6b19ca5eb959651b071bd4178d7c15
Instruction Fuzzy Hash: E1F062717096019BEB158F5DEC84BAAB7A9ABD8301F184069E805D7294E771DC10CB61

Uniqueness

Uniqueness Score: -1.00%

Function 001BE880, Relevance: 7.0, APIs: 3, Strings: 1, Instructions: 36COMMON

Download Yara Rule

APIs

SetWindowPos.USER32(?,000000FF,00000000,00000000,00000000,00000000,00000083,00000000,00000010), ref: 001BE8A2
SetWindowPos.USER32(?,000000FE,00000000,00000000,00000000,00000000,00000083), ref: 001BE8BA
SwitchToThisWindow.USER32(?,00000001), ref: 001BE8C5

Part of subcall function 001F0AF0: IsWindow.USER32(0007006C), ref: 001F0AF9
Part of subcall function 001F0AF0: ShowWindow.USER32(0007006C,-00000004,?,001BD59E,00000000,00000000), ref: 001F0B14

Part of subcall function 001BE750: IsWindow.USER32(00000000), ref: 001BE777
Part of subcall function 001BE750: GetWindowRect.USER32 ref: 001BE7E7
Part of subcall function 001BE750: KiUserCallbackDispatcher.NTDLL(00000000), ref: 001BE833
Part of subcall function 001BE750: SetFocus.USER32(00000000), ref: 001BE845

Strings

CMainWindow::_ShowWindow, xrefs: 001BE881

Memory Dump Source

Source File: 00000013.00000002.619891084.00000000001A1000.00000020.00020000.sdmp, Offset: 001A0000, based on PE: true

Associated: 00000013.00000002.619849404.00000000001A0000.00000002.00020000.sdmp Download File
Associated: 00000013.00000002.620617605.000000000028D000.00000002.00020000.sdmp Download File
Associated: 00000013.00000002.620703918.00000000002CA000.00000004.00020000.sdmp Download File
Associated: 00000013.00000002.620737014.00000000002CD000.00000008.00020000.sdmp Download File
Associated: 00000013.00000002.620761206.00000000002D0000.00000004.00020000.sdmp Download File
Associated: 00000013.00000002.620779970.00000000002D4000.00000002.00020000.sdmp Download File

Similarity

API ID: Window$CallbackDispatcherFocusRectShowSwitchThisUser
String ID: CMainWindow::_ShowWindow
API String ID: 4044173373-875174567
Opcode ID: 9f3b74ce5faeec7c4927fd4f3b8236506bef9e11431f0d4fbe249c0d6542d3c8
Instruction ID: 6fa8ccc8aa1cf4d3bf05b770ae5fa71424f1150873c62200b93d12c19448dce8
Opcode Fuzzy Hash: 9f3b74ce5faeec7c4927fd4f3b8236506bef9e11431f0d4fbe249c0d6542d3c8
Instruction Fuzzy Hash: F7F058303C474177FA362320BC0BFA9BA526B92F24F284315F3252D1E2CBE665618748

Uniqueness

Uniqueness Score: -1.00%

Function 001E1060, Relevance: 5.4, APIs: 1, Strings: 2, Instructions: 142COMMON

Download Yara Rule

APIs

SHGetValueW.SHLWAPI(80000002,Software\LDSGameCenter,SubPID,00000001,?,?), ref: 001E10FB

Strings

Software\LDSGameCenter, xrefs: 001E10F1
SubPID, xrefs: 001E10EC

Memory Dump Source

Source File: 00000013.00000002.619891084.00000000001A1000.00000020.00020000.sdmp, Offset: 001A0000, based on PE: true

Associated: 00000013.00000002.619849404.00000000001A0000.00000002.00020000.sdmp Download File
Associated: 00000013.00000002.620617605.000000000028D000.00000002.00020000.sdmp Download File
Associated: 00000013.00000002.620703918.00000000002CA000.00000004.00020000.sdmp Download File
Associated: 00000013.00000002.620737014.00000000002CD000.00000008.00020000.sdmp Download File
Associated: 00000013.00000002.620761206.00000000002D0000.00000004.00020000.sdmp Download File
Associated: 00000013.00000002.620779970.00000000002D4000.00000002.00020000.sdmp Download File

Similarity

API ID: Value
String ID: Software\LDSGameCenter$SubPID
API String ID: 3702945584-867072385
Opcode ID: d972f00eebd36fd083c18cf18bf6afdb1a12f354d637f328d693d64e842e65a5
Instruction ID: f6261f284083f01741922dcd235d6cb4b93a59a1568912cedf4f1a46e7d4cca9
Opcode Fuzzy Hash: d972f00eebd36fd083c18cf18bf6afdb1a12f354d637f328d693d64e842e65a5
Instruction Fuzzy Hash: B541F475A40658AFDB10DFA8DC49BEEB7B8FB04714F104299E814A73C1DBB4AA448B90

Uniqueness

Uniqueness Score: -1.00%

Function 001E1680, Relevance: 5.4, APIs: 1, Strings: 2, Instructions: 123COMMON

Download Yara Rule

APIs

SHGetValueW.SHLWAPI(80000002,Software\Ludashi,Setup Path,00000001,?,?), ref: 001E170D

Part of subcall function 001A45F0: GetProcessHeap.KERNEL32(001D5638,BA24D7A6), ref: 001A4601

Part of subcall function 001A4130: FindResourceExW.KERNEL32(00000000,00000006,?,00000000,00000000,0028DAF8,?,?,?,?,001A36E1,0028DAF8,?,?,?,0028DAF8), ref: 001A4186
Part of subcall function 001A4130: FindResourceW.KERNEL32(00000000,0028DAF8,00000006,?,0028DAF8), ref: 001A41C4

Strings

Setup Path, xrefs: 001E16FE
Software\Ludashi, xrefs: 001E1703

Memory Dump Source

Source File: 00000013.00000002.619891084.00000000001A1000.00000020.00020000.sdmp, Offset: 001A0000, based on PE: true

Associated: 00000013.00000002.619849404.00000000001A0000.00000002.00020000.sdmp Download File
Associated: 00000013.00000002.620617605.000000000028D000.00000002.00020000.sdmp Download File
Associated: 00000013.00000002.620703918.00000000002CA000.00000004.00020000.sdmp Download File
Associated: 00000013.00000002.620737014.00000000002CD000.00000008.00020000.sdmp Download File
Associated: 00000013.00000002.620761206.00000000002D0000.00000004.00020000.sdmp Download File
Associated: 00000013.00000002.620779970.00000000002D4000.00000002.00020000.sdmp Download File

Similarity

API ID: FindResource$HeapProcessValue
String ID: Setup Path$Software\Ludashi
API String ID: 2870785007-1439348962
Opcode ID: cda32b9be0190e0ef667339b0a3fd08960623fa8d432bb6b28f3afcfb5d76335
Instruction ID: a7dace4bf8f97c0404221d3a899398c138357a8c021cf9a05b7abe44a802f9fb
Opcode Fuzzy Hash: cda32b9be0190e0ef667339b0a3fd08960623fa8d432bb6b28f3afcfb5d76335
Instruction Fuzzy Hash: D8410674A40248ABCB14EF54DC59BEEB7B4EF15704F10019DE90AA7281EB70AA89CF81

Uniqueness

Uniqueness Score: -1.00%

Function 001CC3DC, Relevance: 3.6, APIs: 1, Strings: 1, Instructions: 57COMMON

Download Yara Rule

APIs

Part of subcall function 001CBDF0: VariantClear.OLEAUT32(?), ref: 001CBE34
Part of subcall function 001CBDF0: VariantClear.OLEAUT32(?), ref: 001CBE59

VariantClear.OLEAUT32(?), ref: 001CCC3D

Strings

PqS, xrefs: 001CC3E8

Memory Dump Source

Source File: 00000013.00000002.619891084.00000000001A1000.00000020.00020000.sdmp, Offset: 001A0000, based on PE: true

Associated: 00000013.00000002.619849404.00000000001A0000.00000002.00020000.sdmp Download File
Associated: 00000013.00000002.620617605.000000000028D000.00000002.00020000.sdmp Download File
Associated: 00000013.00000002.620703918.00000000002CA000.00000004.00020000.sdmp Download File
Associated: 00000013.00000002.620737014.00000000002CD000.00000008.00020000.sdmp Download File
Associated: 00000013.00000002.620761206.00000000002D0000.00000004.00020000.sdmp Download File
Associated: 00000013.00000002.620779970.00000000002D4000.00000002.00020000.sdmp Download File

Similarity

API ID: ClearVariant
String ID: PqS
API String ID: 1473721057-1528398380
Opcode ID: 213d2b7e2753054a4a97ca412158156c88b7db1346973cd48aad3ad01cefb1a3
Instruction ID: 31d53ec7bef79f2e2ff5c129899e0e88d1e00fc44592bd005eb4824750a147c4
Opcode Fuzzy Hash: 213d2b7e2753054a4a97ca412158156c88b7db1346973cd48aad3ad01cefb1a3
Instruction Fuzzy Hash: BC119D71A046498BC704DB68C809B5DB7B4EF51320F15826AE82AD72D1DB34ED018B90

Uniqueness

Uniqueness Score: -1.00%

Function 001CC427, Relevance: 3.6, APIs: 1, Strings: 1, Instructions: 57COMMON

Download Yara Rule

APIs

Part of subcall function 001CBDF0: VariantClear.OLEAUT32(?), ref: 001CBE34
Part of subcall function 001CBDF0: VariantClear.OLEAUT32(?), ref: 001CBE59

VariantClear.OLEAUT32(?), ref: 001CCC3D

Strings

Pf*, xrefs: 001CC433

Memory Dump Source

Source File: 00000013.00000002.619891084.00000000001A1000.00000020.00020000.sdmp, Offset: 001A0000, based on PE: true

Associated: 00000013.00000002.619849404.00000000001A0000.00000002.00020000.sdmp Download File
Associated: 00000013.00000002.620617605.000000000028D000.00000002.00020000.sdmp Download File
Associated: 00000013.00000002.620703918.00000000002CA000.00000004.00020000.sdmp Download File
Associated: 00000013.00000002.620737014.00000000002CD000.00000008.00020000.sdmp Download File
Associated: 00000013.00000002.620761206.00000000002D0000.00000004.00020000.sdmp Download File
Associated: 00000013.00000002.620779970.00000000002D4000.00000002.00020000.sdmp Download File

Similarity

API ID: ClearVariant
String ID: Pf*
API String ID: 1473721057-2000932642
Opcode ID: 71069d4cdf52a03eae3d6f4bbfe5f81c8106794224e15eaeb45a70bf1dc6a272
Instruction ID: 074791ee6c13acb55b5f5a5ddd61ad1cc2aaeddfb9add0b0fbb4698db71d8187
Opcode Fuzzy Hash: 71069d4cdf52a03eae3d6f4bbfe5f81c8106794224e15eaeb45a70bf1dc6a272
Instruction Fuzzy Hash: C8116D71A006498BC704DB68D849B9DB7B4EF55331F15826DE82AD72D1EB34ED018B90

Uniqueness

Uniqueness Score: -1.00%

Function 00201058, Relevance: 3.6, APIs: 1, Strings: 1, Instructions: 52COMMON

Download Yara Rule

APIs

CharNextW.USER32 ref: 00201086

Strings

P, xrefs: 002011C0

Memory Dump Source

Source File: 00000013.00000002.619891084.00000000001A1000.00000020.00020000.sdmp, Offset: 001A0000, based on PE: true

Associated: 00000013.00000002.619849404.00000000001A0000.00000002.00020000.sdmp Download File
Associated: 00000013.00000002.620617605.000000000028D000.00000002.00020000.sdmp Download File
Associated: 00000013.00000002.620703918.00000000002CA000.00000004.00020000.sdmp Download File
Associated: 00000013.00000002.620737014.00000000002CD000.00000008.00020000.sdmp Download File
Associated: 00000013.00000002.620761206.00000000002D0000.00000004.00020000.sdmp Download File
Associated: 00000013.00000002.620779970.00000000002D4000.00000002.00020000.sdmp Download File

Similarity

API ID: CharNext
String ID: P
API String ID: 3213498283-1343716551
Opcode ID: 44e3b18a0f882f332a5d9db9bbdd6fc4c472606b94bad68aad50cd93548ec80b
Instruction ID: bb515c8d62454b723369924582ad3def9e2f6fba88b385ae3f1c7c91042aef24
Opcode Fuzzy Hash: 44e3b18a0f882f332a5d9db9bbdd6fc4c472606b94bad68aad50cd93548ec80b
Instruction Fuzzy Hash: 2A01CE769212159AEF385B308855BAEB336EF50718F100189E94AA3182DB325DB48B60

Uniqueness

Uniqueness Score: -1.00%

Function 002010CA, Relevance: 3.6, APIs: 1, Strings: 1, Instructions: 52COMMON

Download Yara Rule

APIs

CharNextW.USER32 ref: 002010F8

Strings

P, xrefs: 002011C0

Memory Dump Source

Source File: 00000013.00000002.619891084.00000000001A1000.00000020.00020000.sdmp, Offset: 001A0000, based on PE: true

Associated: 00000013.00000002.619849404.00000000001A0000.00000002.00020000.sdmp Download File
Associated: 00000013.00000002.620617605.000000000028D000.00000002.00020000.sdmp Download File
Associated: 00000013.00000002.620703918.00000000002CA000.00000004.00020000.sdmp Download File
Associated: 00000013.00000002.620737014.00000000002CD000.00000008.00020000.sdmp Download File
Associated: 00000013.00000002.620761206.00000000002D0000.00000004.00020000.sdmp Download File
Associated: 00000013.00000002.620779970.00000000002D4000.00000002.00020000.sdmp Download File

Similarity

API ID: CharNext
String ID: P
API String ID: 3213498283-1343716551
Opcode ID: 70bf53281d3d3081d36977d0efe607a6915fa3e323f8d5cf152fb35aaf4c8dc7
Instruction ID: 0ab173f3d3d4e7fc7e09fc6a31e47f28ff1b5108c4ae0839bc6eb4955132fec6
Opcode Fuzzy Hash: 70bf53281d3d3081d36977d0efe607a6915fa3e323f8d5cf152fb35aaf4c8dc7
Instruction Fuzzy Hash: 3301ED76A212159ADF389FB0C855BAEB336FB50B18F10418DE90AA31C2DB324DB4CB50

Uniqueness

Uniqueness Score: -1.00%

Function 0020113A, Relevance: 3.6, APIs: 1, Strings: 1, Instructions: 52COMMON

Download Yara Rule

APIs

CharNextW.USER32 ref: 00201168

Strings

P, xrefs: 002011C0

Memory Dump Source

Source File: 00000013.00000002.619891084.00000000001A1000.00000020.00020000.sdmp, Offset: 001A0000, based on PE: true

Associated: 00000013.00000002.619849404.00000000001A0000.00000002.00020000.sdmp Download File
Associated: 00000013.00000002.620617605.000000000028D000.00000002.00020000.sdmp Download File
Associated: 00000013.00000002.620703918.00000000002CA000.00000004.00020000.sdmp Download File
Associated: 00000013.00000002.620737014.00000000002CD000.00000008.00020000.sdmp Download File
Associated: 00000013.00000002.620761206.00000000002D0000.00000004.00020000.sdmp Download File
Associated: 00000013.00000002.620779970.00000000002D4000.00000002.00020000.sdmp Download File

Similarity

API ID: CharNext
String ID: P
API String ID: 3213498283-1343716551
Opcode ID: c93fbedee3f814e2bafa5dd7cf27decaabe7e75c661fe34c742c39b9325db49e
Instruction ID: 25482efd3d89e9388ad9557d796ffeb26a8334ccfadaf797507587404bb31c3d
Opcode Fuzzy Hash: c93fbedee3f814e2bafa5dd7cf27decaabe7e75c661fe34c742c39b9325db49e
Instruction Fuzzy Hash: 42016171A21216D6DF28AF60C895BBEB336EF64358F500199E60E57282EB3359B4CB50

Uniqueness

Uniqueness Score: -1.00%

Function 001AD500, Relevance: 3.5, APIs: 1, Strings: 1, Instructions: 37COMMON

Download Yara Rule

APIs

PathFileExistsW.SHLWAPI(?,\NetBridge.dll,0000000E), ref: 001AD562

Strings

\NetBridge.dll, xrefs: 001AD54A

Memory Dump Source

Source File: 00000013.00000002.619891084.00000000001A1000.00000020.00020000.sdmp, Offset: 001A0000, based on PE: true

Associated: 00000013.00000002.619849404.00000000001A0000.00000002.00020000.sdmp Download File
Associated: 00000013.00000002.620617605.000000000028D000.00000002.00020000.sdmp Download File
Associated: 00000013.00000002.620703918.00000000002CA000.00000004.00020000.sdmp Download File
Associated: 00000013.00000002.620737014.00000000002CD000.00000008.00020000.sdmp Download File
Associated: 00000013.00000002.620761206.00000000002D0000.00000004.00020000.sdmp Download File
Associated: 00000013.00000002.620779970.00000000002D4000.00000002.00020000.sdmp Download File

Similarity

API ID: ExistsFilePath
String ID: \NetBridge.dll
API String ID: 1174141254-1463754331
Opcode ID: 8923213262c9fefb16f18c087ef32325a4f1a3e8f1f5bd84377037fbacce9a9b
Instruction ID: efe35a8a0f03afda9d3cf1ebd90abef06b52dbc41996609379bb830730159087
Opcode Fuzzy Hash: 8923213262c9fefb16f18c087ef32325a4f1a3e8f1f5bd84377037fbacce9a9b
Instruction Fuzzy Hash: 91F06DB6900148AFEB00DBA4EC45FAF77ACFB16710F040529F411E3282DB70A904C791

Uniqueness

Uniqueness Score: -1.00%

Function 00209090, Relevance: 3.1, APIs: 2, Instructions: 124COMMON

Download Yara Rule

APIs

IntersectRect.USER32 ref: 0020916A
IntersectRect.USER32 ref: 00209179

Memory Dump Source

Source File: 00000013.00000002.619891084.00000000001A1000.00000020.00020000.sdmp, Offset: 001A0000, based on PE: true

Associated: 00000013.00000002.619849404.00000000001A0000.00000002.00020000.sdmp Download File
Associated: 00000013.00000002.620617605.000000000028D000.00000002.00020000.sdmp Download File
Associated: 00000013.00000002.620703918.00000000002CA000.00000004.00020000.sdmp Download File
Associated: 00000013.00000002.620737014.00000000002CD000.00000008.00020000.sdmp Download File
Associated: 00000013.00000002.620761206.00000000002D0000.00000004.00020000.sdmp Download File
Associated: 00000013.00000002.620779970.00000000002D4000.00000002.00020000.sdmp Download File

Similarity

API ID: IntersectRect
String ID:
API String ID: 481094312-0
Opcode ID: 7f9d8564a03a5fd8416fbd99e216ab369be85e14eed20d1aa8e2908e10473ad1
Instruction ID: 0cfa5772759bd62c02ab48d982f6b39487cd1ca2055691a0c2f840cfad55d277
Opcode Fuzzy Hash: 7f9d8564a03a5fd8416fbd99e216ab369be85e14eed20d1aa8e2908e10473ad1
Instruction Fuzzy Hash: 49414F76E0024E9BCF11DF94C9409EEB7BAFF5C300B144559F95AA7242EB31AE91CB90

Uniqueness

Uniqueness Score: -1.00%

Function 001D8030, Relevance: 3.1, APIs: 2, Instructions: 103COMMON

Download Yara Rule

APIs

WideCharToMultiByte.KERNEL32(0000FDE9,00000000,?,?,00000000,00000000,00000000,00000000,BA24D7A6,?,?), ref: 001D80B0
WideCharToMultiByte.KERNEL32(0000FDE9,00000000,?,?,00000000,?,00000000,00000000), ref: 001D8102

Memory Dump Source

Source File: 00000013.00000002.619891084.00000000001A1000.00000020.00020000.sdmp, Offset: 001A0000, based on PE: true

Associated: 00000013.00000002.619849404.00000000001A0000.00000002.00020000.sdmp Download File
Associated: 00000013.00000002.620617605.000000000028D000.00000002.00020000.sdmp Download File
Associated: 00000013.00000002.620703918.00000000002CA000.00000004.00020000.sdmp Download File
Associated: 00000013.00000002.620737014.00000000002CD000.00000008.00020000.sdmp Download File
Associated: 00000013.00000002.620761206.00000000002D0000.00000004.00020000.sdmp Download File
Associated: 00000013.00000002.620779970.00000000002D4000.00000002.00020000.sdmp Download File

Similarity

API ID: ByteCharMultiWide
String ID:
API String ID: 626452242-0
Opcode ID: 84f2e5f6db05aba417e2693533a751aee24ec38b278a3f0c88b142d91ce84034
Instruction ID: 2c4baf06eab2a1f067733d0b5f891d45d30798e29d7185b6cba0ef2cc09ddf8d
Opcode Fuzzy Hash: 84f2e5f6db05aba417e2693533a751aee24ec38b278a3f0c88b142d91ce84034
Instruction Fuzzy Hash: 71310474200300BFEB249F64DC56BBB77A8EB41B04F14466DFD129B7C0DBB669098A60

Uniqueness

Uniqueness Score: -1.00%

Function 001C97C0, Relevance: 3.1, APIs: 2, Instructions: 83COMMON

Download Yara Rule

APIs

VariantInit.OLEAUT32(?), ref: 001C9853
VariantClear.OLEAUT32(00000008), ref: 001C9898

Part of subcall function 001A45F0: GetProcessHeap.KERNEL32(001D5638,BA24D7A6), ref: 001A4601

Part of subcall function 001A4130: FindResourceExW.KERNEL32(00000000,00000006,?,00000000,00000000,0028DAF8,?,?,?,?,001A36E1,0028DAF8,?,?,?,0028DAF8), ref: 001A4186
Part of subcall function 001A4130: FindResourceW.KERNEL32(00000000,0028DAF8,00000006,?,0028DAF8), ref: 001A41C4

Memory Dump Source

Source File: 00000013.00000002.619891084.00000000001A1000.00000020.00020000.sdmp, Offset: 001A0000, based on PE: true

Associated: 00000013.00000002.619849404.00000000001A0000.00000002.00020000.sdmp Download File
Associated: 00000013.00000002.620617605.000000000028D000.00000002.00020000.sdmp Download File
Associated: 00000013.00000002.620703918.00000000002CA000.00000004.00020000.sdmp Download File
Associated: 00000013.00000002.620737014.00000000002CD000.00000008.00020000.sdmp Download File
Associated: 00000013.00000002.620761206.00000000002D0000.00000004.00020000.sdmp Download File
Associated: 00000013.00000002.620779970.00000000002D4000.00000002.00020000.sdmp Download File

Similarity

API ID: FindResourceVariant$ClearHeapInitProcess
String ID:
API String ID: 4166881454-0
Opcode ID: 5f4784496c632f55cb550a18bfda38c545fd414bce90c477b97e75ff21875f63
Instruction ID: b26cadb6cd9fbc842f183aff3dbaabb4a0f47f9eb52987c4edbcba2f337b450d
Opcode Fuzzy Hash: 5f4784496c632f55cb550a18bfda38c545fd414bce90c477b97e75ff21875f63
Instruction Fuzzy Hash: 7621A235A042089FDB14EFA8D805FAEB3E8EB16710F00816EB815A7680DB74A914CB91

Uniqueness

Uniqueness Score: -1.00%

Function 001D2860, Relevance: 3.1, APIs: 2, Instructions: 57COMMON

Download Yara Rule

APIs

GetModuleFileNameW.KERNEL32(00000000,?,00000104), ref: 001D289C
PathFindFileNameW.SHLWAPI(?), ref: 001D28A9

Part of subcall function 001D2900: RegCreateKeyW.ADVAPI32(00000000,?,?), ref: 001D2995
Part of subcall function 001D2900: RegSetValueExW.KERNEL32(00000004,?,00000000,00000004,00000004,00000004,?,00000000,00000000), ref: 001D29AF
Part of subcall function 001D2900: RegCloseKey.ADVAPI32(?,?,00000000,00000000), ref: 001D29C7

Memory Dump Source

Source File: 00000013.00000002.619891084.00000000001A1000.00000020.00020000.sdmp, Offset: 001A0000, based on PE: true

Associated: 00000013.00000002.619849404.00000000001A0000.00000002.00020000.sdmp Download File
Associated: 00000013.00000002.620617605.000000000028D000.00000002.00020000.sdmp Download File
Associated: 00000013.00000002.620703918.00000000002CA000.00000004.00020000.sdmp Download File
Associated: 00000013.00000002.620737014.00000000002CD000.00000008.00020000.sdmp Download File
Associated: 00000013.00000002.620761206.00000000002D0000.00000004.00020000.sdmp Download File
Associated: 00000013.00000002.620779970.00000000002D4000.00000002.00020000.sdmp Download File

Similarity

API ID: FileName$CloseCreateFindModulePathValue
String ID:
API String ID: 1057649116-0
Opcode ID: 61d5ab6f15ca365d9093f6063dde606de53463408526354cc20d3da918209eb3
Instruction ID: 93881657d1bd7d8472164aab45155a0cd75791e879a943c2444b356972ad5fbe
Opcode Fuzzy Hash: 61d5ab6f15ca365d9093f6063dde606de53463408526354cc20d3da918209eb3
Instruction Fuzzy Hash: 9601FEB5A0121CBBDB10AF64EC4AFAE77ACDB14354F504195FD2DD6243E6319D148790

Uniqueness

Uniqueness Score: -1.00%

Function 00271266, Relevance: 3.0, APIs: 2, Instructions: 44memoryCOMMON

Download Yara Rule

APIs

_free.LIBCMT ref: 00271287

Part of subcall function 002701B0: RtlAllocateHeap.NTDLL(00000000,?,00000000,?,00276929,00000000,?,?,0025C193,?,00000008,?,0026B90E,00000000,00000000), ref: 002701E2

RtlReAllocateHeap.NTDLL(00000000,?,?,00000004,00000000,?,0025B70F,?,00000004,00000000,?,?,?,0026D5A0,?,00000000), ref: 002712C3

Memory Dump Source

Source File: 00000013.00000002.619891084.00000000001A1000.00000020.00020000.sdmp, Offset: 001A0000, based on PE: true

Associated: 00000013.00000002.619849404.00000000001A0000.00000002.00020000.sdmp Download File
Associated: 00000013.00000002.620617605.000000000028D000.00000002.00020000.sdmp Download File
Associated: 00000013.00000002.620703918.00000000002CA000.00000004.00020000.sdmp Download File
Associated: 00000013.00000002.620737014.00000000002CD000.00000008.00020000.sdmp Download File
Associated: 00000013.00000002.620761206.00000000002D0000.00000004.00020000.sdmp Download File
Associated: 00000013.00000002.620779970.00000000002D4000.00000002.00020000.sdmp Download File

Similarity

API ID: AllocateHeap$_free
String ID:
API String ID: 1482568997-0
Opcode ID: 2f421ba4e242c710cea812d93cafa1976dc6b14e432433c053067f934bca9771
Instruction ID: f1feda70718990b19c1151e2f1a90816981a4e92d39b1af5bfd1cbd58ce0b998
Opcode Fuzzy Hash: 2f421ba4e242c710cea812d93cafa1976dc6b14e432433c053067f934bca9771
Instruction Fuzzy Hash: CBF0C231631226AADB222E2DAC05BAB37288F81B71B24C116FC1CE6192DB348C308965

Uniqueness

Uniqueness Score: -1.00%

Function 00244920, Relevance: 3.0, APIs: 2, Instructions: 41COMMON

Download Yara Rule

APIs

__CxxThrowException@8.LIBVCRUNTIME ref: 00245895

Part of subcall function 00253827: RaiseException.KERNEL32(?,?,001E60BB,?,002CA044,?,0000000F,?,?,?,?,001E60BB,?,002C3034,?), ref: 00253887

__CxxThrowException@8.LIBVCRUNTIME ref: 002458B2

Memory Dump Source

Source File: 00000013.00000002.619891084.00000000001A1000.00000020.00020000.sdmp, Offset: 001A0000, based on PE: true

Associated: 00000013.00000002.619849404.00000000001A0000.00000002.00020000.sdmp Download File
Associated: 00000013.00000002.620617605.000000000028D000.00000002.00020000.sdmp Download File
Associated: 00000013.00000002.620703918.00000000002CA000.00000004.00020000.sdmp Download File
Associated: 00000013.00000002.620737014.00000000002CD000.00000008.00020000.sdmp Download File
Associated: 00000013.00000002.620761206.00000000002D0000.00000004.00020000.sdmp Download File
Associated: 00000013.00000002.620779970.00000000002D4000.00000002.00020000.sdmp Download File

Similarity

API ID: Exception@8Throw$ExceptionRaise
String ID:
API String ID: 3476068407-0
Opcode ID: 7f1e8b976770c2690c9091ed44a024144e5fb2d5840c1d690530a936564af80f
Instruction ID: a96708daf7a96db4223cb7b5029d1e4dfbeaf372be4ca94e82548f458272e6b2
Opcode Fuzzy Hash: 7f1e8b976770c2690c9091ed44a024144e5fb2d5840c1d690530a936564af80f
Instruction Fuzzy Hash: CDF09030834A0E76CB08BAB5EC4A99E776C5E01352B504234BD6496496EFB0DAB9D9D0

Uniqueness

Uniqueness Score: -1.00%

Function 001F46F0, Relevance: 1.7, APIs: 1, Instructions: 180COMMON

Download Yara Rule

APIs

_com_issue_error.COMSUPP ref: 001F48D9

Memory Dump Source

Source File: 00000013.00000002.619891084.00000000001A1000.00000020.00020000.sdmp, Offset: 001A0000, based on PE: true

Associated: 00000013.00000002.619849404.00000000001A0000.00000002.00020000.sdmp Download File
Associated: 00000013.00000002.620617605.000000000028D000.00000002.00020000.sdmp Download File
Associated: 00000013.00000002.620703918.00000000002CA000.00000004.00020000.sdmp Download File
Associated: 00000013.00000002.620737014.00000000002CD000.00000008.00020000.sdmp Download File
Associated: 00000013.00000002.620761206.00000000002D0000.00000004.00020000.sdmp Download File
Associated: 00000013.00000002.620779970.00000000002D4000.00000002.00020000.sdmp Download File

Similarity

API ID: _com_issue_error
String ID:
API String ID: 2162355165-0
Opcode ID: faaf5c920905828a36248b063bffcae1eef4fd78266fd8148fcfb513e32dc935
Instruction ID: 1d3d71de55a1d8f783f688515e49bde353c3f155d55d124ebf105954df551f53
Opcode Fuzzy Hash: faaf5c920905828a36248b063bffcae1eef4fd78266fd8148fcfb513e32dc935
Instruction Fuzzy Hash: 91518075E04249EFDB10CF98C944BBEB7B8EF89714F148159E905AB380D775AD41CBA0

Uniqueness

Uniqueness Score: -1.00%

Function 001BE360, Relevance: 1.6, APIs: 1, Instructions: 140COMMON

Download Yara Rule

APIs

DestroyWindow.USER32(00000000), ref: 001BE41F

Memory Dump Source

Source File: 00000013.00000002.619891084.00000000001A1000.00000020.00020000.sdmp, Offset: 001A0000, based on PE: true

Associated: 00000013.00000002.619849404.00000000001A0000.00000002.00020000.sdmp Download File
Associated: 00000013.00000002.620617605.000000000028D000.00000002.00020000.sdmp Download File
Associated: 00000013.00000002.620703918.00000000002CA000.00000004.00020000.sdmp Download File
Associated: 00000013.00000002.620737014.00000000002CD000.00000008.00020000.sdmp Download File
Associated: 00000013.00000002.620761206.00000000002D0000.00000004.00020000.sdmp Download File
Associated: 00000013.00000002.620779970.00000000002D4000.00000002.00020000.sdmp Download File

Similarity

API ID: DestroyWindow
String ID:
API String ID: 3375834691-0
Opcode ID: 91c0a6921748ecd98e6b489e4cd958c372484ffb03028bd21a76d154f3fcd78d
Instruction ID: 38ba0801790671594a6e22681c614df73e32279f274bc06c8eb8696e6f4d27c6
Opcode Fuzzy Hash: 91c0a6921748ecd98e6b489e4cd958c372484ffb03028bd21a76d154f3fcd78d
Instruction Fuzzy Hash: 0A519C71A00705AFDB14EF68CC49BAAB7E8FF51324F148A2DE436972D1DB71A904CB50

Uniqueness

Uniqueness Score: -1.00%

Function 001D1760, Relevance: 1.6, APIs: 1, Instructions: 92COMMON

Download Yara Rule

APIs

GetModuleFileNameW.KERNEL32(001A0000,?,00000104,BA24D7A6,?,?), ref: 001D17BD

Part of subcall function 001A45F0: GetProcessHeap.KERNEL32(001D5638,BA24D7A6), ref: 001A4601

Part of subcall function 001A4130: FindResourceExW.KERNEL32(00000000,00000006,?,00000000,00000000,0028DAF8,?,?,?,?,001A36E1,0028DAF8,?,?,?,0028DAF8), ref: 001A4186
Part of subcall function 001A4130: FindResourceW.KERNEL32(00000000,0028DAF8,00000006,?,0028DAF8), ref: 001A41C4

Memory Dump Source

Source File: 00000013.00000002.619891084.00000000001A1000.00000020.00020000.sdmp, Offset: 001A0000, based on PE: true

Associated: 00000013.00000002.619849404.00000000001A0000.00000002.00020000.sdmp Download File
Associated: 00000013.00000002.620617605.000000000028D000.00000002.00020000.sdmp Download File
Associated: 00000013.00000002.620703918.00000000002CA000.00000004.00020000.sdmp Download File
Associated: 00000013.00000002.620737014.00000000002CD000.00000008.00020000.sdmp Download File
Associated: 00000013.00000002.620761206.00000000002D0000.00000004.00020000.sdmp Download File
Associated: 00000013.00000002.620779970.00000000002D4000.00000002.00020000.sdmp Download File

Similarity

API ID: FindResource$FileHeapModuleNameProcess
String ID:
API String ID: 3971721318-0
Opcode ID: 4910a0a419e16b45e8e08a50a96c061ca66406f65eea303ce5c526d153ac602b
Instruction ID: 09cc5a917dd1df5fa20cf16be3309836feba8a673f83ce252861643cd992699c
Opcode Fuzzy Hash: 4910a0a419e16b45e8e08a50a96c061ca66406f65eea303ce5c526d153ac602b
Instruction Fuzzy Hash: 8A31C67594010CABCB24DF68DC49BEEB7B8EF55714F1442AAE816A7281EB706E05CF90

Uniqueness

Uniqueness Score: -1.00%

Function 001EC4A0, Relevance: 1.6, APIs: 1, Instructions: 88COMMON

Download Yara Rule

APIs

DeleteObject.GDI32(00000000), ref: 001EC543

Memory Dump Source

Source File: 00000013.00000002.619891084.00000000001A1000.00000020.00020000.sdmp, Offset: 001A0000, based on PE: true

Associated: 00000013.00000002.619849404.00000000001A0000.00000002.00020000.sdmp Download File
Associated: 00000013.00000002.620617605.000000000028D000.00000002.00020000.sdmp Download File
Associated: 00000013.00000002.620703918.00000000002CA000.00000004.00020000.sdmp Download File
Associated: 00000013.00000002.620737014.00000000002CD000.00000008.00020000.sdmp Download File
Associated: 00000013.00000002.620761206.00000000002D0000.00000004.00020000.sdmp Download File
Associated: 00000013.00000002.620779970.00000000002D4000.00000002.00020000.sdmp Download File

Similarity

API ID: DeleteObject
String ID:
API String ID: 1531683806-0
Opcode ID: bfed29d7d80127451092cb92059176fa718567194d2fc3d4b420c05dad57e8f5
Instruction ID: 45fb083cdc221f1057dcad85399a9e8a1452f2449e0789dd931a94be9692c7a9
Opcode Fuzzy Hash: bfed29d7d80127451092cb92059176fa718567194d2fc3d4b420c05dad57e8f5
Instruction Fuzzy Hash: AB21D1B2A00654A7CB20AF26DC42EAF7BA8AF55350F000029F909DB241EB31EA15C7E1

Uniqueness

Uniqueness Score: -1.00%

Function 001D20B0, Relevance: 1.6, APIs: 1, Instructions: 61COMMON

Download Yara Rule

APIs

SHGetValueW.SHLWAPI(?,BA24D7A6,?,00000001,?,?), ref: 001D213F

Memory Dump Source

Source File: 00000013.00000002.619891084.00000000001A1000.00000020.00020000.sdmp, Offset: 001A0000, based on PE: true

Associated: 00000013.00000002.619849404.00000000001A0000.00000002.00020000.sdmp Download File
Associated: 00000013.00000002.620617605.000000000028D000.00000002.00020000.sdmp Download File
Associated: 00000013.00000002.620703918.00000000002CA000.00000004.00020000.sdmp Download File
Associated: 00000013.00000002.620737014.00000000002CD000.00000008.00020000.sdmp Download File
Associated: 00000013.00000002.620761206.00000000002D0000.00000004.00020000.sdmp Download File
Associated: 00000013.00000002.620779970.00000000002D4000.00000002.00020000.sdmp Download File

Similarity

API ID: Value
String ID:
API String ID: 3702945584-0
Opcode ID: 0e7790cd316a46aa58cbb75d265d93912a8fd14916fa1e3202a0260ad1c91e85
Instruction ID: fd472d756cc59bfbcdf773c8725b93d3ecb2a67be438dc2e2b6150a6d3a9da2f
Opcode Fuzzy Hash: 0e7790cd316a46aa58cbb75d265d93912a8fd14916fa1e3202a0260ad1c91e85
Instruction Fuzzy Hash: 8511DBB5A0021C9BDB10DE55DD45BDAB7BCAB94304F0440AAAB19E3341D770AE958F94

Uniqueness

Uniqueness Score: -1.00%

Function 00272289, Relevance: 1.6, APIs: 1, Instructions: 59COMMON

Download Yara Rule

APIs

__wsopen_s.LIBCMT ref: 00272242

Memory Dump Source

Source File: 00000013.00000002.619891084.00000000001A1000.00000020.00020000.sdmp, Offset: 001A0000, based on PE: true

Associated: 00000013.00000002.619849404.00000000001A0000.00000002.00020000.sdmp Download File
Associated: 00000013.00000002.620617605.000000000028D000.00000002.00020000.sdmp Download File
Associated: 00000013.00000002.620703918.00000000002CA000.00000004.00020000.sdmp Download File
Associated: 00000013.00000002.620737014.00000000002CD000.00000008.00020000.sdmp Download File
Associated: 00000013.00000002.620761206.00000000002D0000.00000004.00020000.sdmp Download File
Associated: 00000013.00000002.620779970.00000000002D4000.00000002.00020000.sdmp Download File

Similarity

API ID: __wsopen_s
String ID:
API String ID: 3347428461-0
Opcode ID: c7acd32f3e5520995f317b1346bd9d15de75c1ded172c93635a5e1ad811986e6
Instruction ID: 9911c38fd8dd4aff6c6882eba4cedb8cbf9f59347625aee35b0e74b0aa014845
Opcode Fuzzy Hash: c7acd32f3e5520995f317b1346bd9d15de75c1ded172c93635a5e1ad811986e6
Instruction Fuzzy Hash: 95112B7191420AEFCB15DF58E9459AE7BF9EB48310F11409AFC08A7312D631DD25CBA5

Uniqueness

Uniqueness Score: -1.00%

Function 001AA0B0, Relevance: 1.6, APIs: 1, Instructions: 57COMMON

Download Yara Rule

APIs

Part of subcall function 001E8AC1: EnterCriticalSection.KERNEL32(002D148C,0028DAF8,?,?,001A4161,00000000,0028DAF8,?,?,?,?,001A36E1,0028DAF8,?,?,?), ref: 001E8ACC
Part of subcall function 001E8AC1: LeaveCriticalSection.KERNEL32(002D148C,?,001A4161,00000000,0028DAF8,?,?,?,?,001A36E1,0028DAF8,?,?,?,0028DAF8,00281BE8), ref: 001E8AF8

FindResourceExW.KERNEL32(00000000,00000006,00000000,?,00000000,?,?,00000000,00000000,?,001DE72B,?,00000000,?,00000000,?), ref: 001AA0E7

Memory Dump Source

Source File: 00000013.00000002.619891084.00000000001A1000.00000020.00020000.sdmp, Offset: 001A0000, based on PE: true

Associated: 00000013.00000002.619849404.00000000001A0000.00000002.00020000.sdmp Download File
Associated: 00000013.00000002.620617605.000000000028D000.00000002.00020000.sdmp Download File
Associated: 00000013.00000002.620703918.00000000002CA000.00000004.00020000.sdmp Download File
Associated: 00000013.00000002.620737014.00000000002CD000.00000008.00020000.sdmp Download File
Associated: 00000013.00000002.620761206.00000000002D0000.00000004.00020000.sdmp Download File
Associated: 00000013.00000002.620779970.00000000002D4000.00000002.00020000.sdmp Download File

Similarity

API ID: CriticalSection$EnterFindLeaveResource
String ID:
API String ID: 2190064429-0
Opcode ID: a8e16f40c12c62d71277a090141f421ead9a8d313251c08a9ba89ceacde715b3
Instruction ID: b503c11fe0a675604d0735b31e926a686e8df629f239aa03e23194409eb74ca7
Opcode Fuzzy Hash: a8e16f40c12c62d71277a090141f421ead9a8d313251c08a9ba89ceacde715b3
Instruction Fuzzy Hash: E2012176B412143BEB205A5ABC01B7BB79CDF827A1F44017AFD0AC7340E7218C1082E2

Uniqueness

Uniqueness Score: -1.00%

Function 001BD4D0, Relevance: 1.6, APIs: 1, Instructions: 53COMMON

Download Yara Rule

APIs

IsWindow.USER32(0007006C), ref: 001BD4FA

Memory Dump Source

Source File: 00000013.00000002.619891084.00000000001A1000.00000020.00020000.sdmp, Offset: 001A0000, based on PE: true

Associated: 00000013.00000002.619849404.00000000001A0000.00000002.00020000.sdmp Download File
Associated: 00000013.00000002.620617605.000000000028D000.00000002.00020000.sdmp Download File
Associated: 00000013.00000002.620703918.00000000002CA000.00000004.00020000.sdmp Download File
Associated: 00000013.00000002.620737014.00000000002CD000.00000008.00020000.sdmp Download File
Associated: 00000013.00000002.620761206.00000000002D0000.00000004.00020000.sdmp Download File
Associated: 00000013.00000002.620779970.00000000002D4000.00000002.00020000.sdmp Download File

Similarity

API ID: Window
String ID:
API String ID: 2353593579-0
Opcode ID: 88c8439b2fa90fd04a39dfb31bcabc249a10d380bba03acb3b3687f6f21c0cd5
Instruction ID: 5735e816c0aad58e11fdca4cdf58ebe48c1e0c4f29473c2896d044cc5e100636
Opcode Fuzzy Hash: 88c8439b2fa90fd04a39dfb31bcabc249a10d380bba03acb3b3687f6f21c0cd5
Instruction Fuzzy Hash: 0D11C671A01614AFD724CF55DD05B9BBBB8EB09B24F00426AE81597680DB75A900CB90

Uniqueness

Uniqueness Score: -1.00%

Function 0026051F, Relevance: 1.6, APIs: 1, Instructions: 52COMMON

Download Yara Rule

APIs

Part of subcall function 002711D6: RtlAllocateHeap.NTDLL(00000008,?,00000000,?,00270055,00000001,00000364,?,0025DD21,002C6398,00000010), ref: 00271217

_free.LIBCMT ref: 0026058B

Memory Dump Source

Source File: 00000013.00000002.619891084.00000000001A1000.00000020.00020000.sdmp, Offset: 001A0000, based on PE: true

Associated: 00000013.00000002.619849404.00000000001A0000.00000002.00020000.sdmp Download File
Associated: 00000013.00000002.620617605.000000000028D000.00000002.00020000.sdmp Download File
Associated: 00000013.00000002.620703918.00000000002CA000.00000004.00020000.sdmp Download File
Associated: 00000013.00000002.620737014.00000000002CD000.00000008.00020000.sdmp Download File
Associated: 00000013.00000002.620761206.00000000002D0000.00000004.00020000.sdmp Download File
Associated: 00000013.00000002.620779970.00000000002D4000.00000002.00020000.sdmp Download File

Similarity

API ID: AllocateHeap_free
String ID:
API String ID: 614378929-0
Opcode ID: 71678bdf4bc59695956b8fe9d5390f767739d129254a7f2e095f9f245ef36cf3
Instruction ID: 69a5154b02e0f8c2d511506a9746cdbb1a0e545b41f305e7132a69067237515a
Opcode Fuzzy Hash: 71678bdf4bc59695956b8fe9d5390f767739d129254a7f2e095f9f245ef36cf3
Instruction Fuzzy Hash: 370126722103056BE3218E69C88195AFBE8FB85370F65062DE589832C0EA30A855CF24

Uniqueness

Uniqueness Score: -1.00%

Function 0025E2A2, Relevance: 1.5, APIs: 1, Instructions: 46COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000013.00000002.619891084.00000000001A1000.00000020.00020000.sdmp, Offset: 001A0000, based on PE: true

Associated: 00000013.00000002.619849404.00000000001A0000.00000002.00020000.sdmp Download File
Associated: 00000013.00000002.620617605.000000000028D000.00000002.00020000.sdmp Download File
Associated: 00000013.00000002.620703918.00000000002CA000.00000004.00020000.sdmp Download File
Associated: 00000013.00000002.620737014.00000000002CD000.00000008.00020000.sdmp Download File
Associated: 00000013.00000002.620761206.00000000002D0000.00000004.00020000.sdmp Download File
Associated: 00000013.00000002.620779970.00000000002D4000.00000002.00020000.sdmp Download File

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b4e2a4191501faa05ba5fbe44928932b585b3ee39623e02d1807a582e04eb67d
Instruction ID: 857d1a21670566432ac3540ec46832f187b8015aa11f9b1c7715659910349f5b
Opcode Fuzzy Hash: b4e2a4191501faa05ba5fbe44928932b585b3ee39623e02d1807a582e04eb67d
Instruction Fuzzy Hash: C7F02D32934610A7DE353B29DC05A7B33989F41336F114755FC28931D1CB70DA2D8A99

Uniqueness

Uniqueness Score: -1.00%

Function 002711D6, Relevance: 1.5, APIs: 1, Instructions: 39memoryCOMMON

Download Yara Rule

APIs

RtlAllocateHeap.NTDLL(00000008,?,00000000,?,00270055,00000001,00000364,?,0025DD21,002C6398,00000010), ref: 00271217

Memory Dump Source

Source File: 00000013.00000002.619891084.00000000001A1000.00000020.00020000.sdmp, Offset: 001A0000, based on PE: true

Associated: 00000013.00000002.619849404.00000000001A0000.00000002.00020000.sdmp Download File
Associated: 00000013.00000002.620617605.000000000028D000.00000002.00020000.sdmp Download File
Associated: 00000013.00000002.620703918.00000000002CA000.00000004.00020000.sdmp Download File
Associated: 00000013.00000002.620737014.00000000002CD000.00000008.00020000.sdmp Download File
Associated: 00000013.00000002.620761206.00000000002D0000.00000004.00020000.sdmp Download File
Associated: 00000013.00000002.620779970.00000000002D4000.00000002.00020000.sdmp Download File

Similarity

API ID: AllocateHeap
String ID:
API String ID: 1279760036-0
Opcode ID: e6b8da802824d2ef5fcc171a6bc386f1238c43cc962fced45031911281e81997
Instruction ID: 61a5633f2f037e4d7f6e4886973010f242e113bd29d57b8501a6da70c2a35f75
Opcode Fuzzy Hash: e6b8da802824d2ef5fcc171a6bc386f1238c43cc962fced45031911281e81997
Instruction Fuzzy Hash: 9BF0B432A39135669B216E6AEC05A5B7748AF45761B19C112AC1CEA195CA70DD308AA0

Uniqueness

Uniqueness Score: -1.00%

Function 001C60C0, Relevance: 1.5, APIs: 1, Instructions: 36COMMON

Download Yara Rule

APIs

Part of subcall function 001F01F0: GetClassInfoExW.USER32 ref: 001F022B
Part of subcall function 001F01F0: GetClassInfoExW.USER32 ref: 001F0247
Part of subcall function 001F01F0: RegisterClassExW.USER32 ref: 001F0278
Part of subcall function 001F01F0: GetLastError.KERNEL32 ref: 001F0283
Part of subcall function 001F01F0: LoadCursorW.USER32(00000000,00007F00), ref: 001F02E8
Part of subcall function 001F01F0: RegisterClassW.USER32 ref: 001F030D
Part of subcall function 001F01F0: GetLastError.KERNEL32(?,?,001A7D4E), ref: 001F0318

SetWindowPos.USER32(?,?,00000000,00000000,00000000,00000000,00000003,00000000,0028DAF8,90000000,08000000,FFFFD8F1,FFFFD8F1,00000000,00000000,00000000), ref: 001C611D

Part of subcall function 001F0870: GetClientRect.USER32 ref: 001F0891
Part of subcall function 001F0870: GetWindowLongW.USER32(00000000,000000F0), ref: 001F08C8
Part of subcall function 001F0870: GetMenu.USER32(00000000), ref: 001F08D4
Part of subcall function 001F0870: GetWindowLongW.USER32(00000000,000000EC), ref: 001F08EC
Part of subcall function 001F0870: GetWindowLongW.USER32(00000000,000000F0), ref: 001F08F5
Part of subcall function 001F0870: AdjustWindowRectEx.USER32(?,00000000), ref: 001F08FC
Part of subcall function 001F0870: SetWindowPos.USER32(00000000,00000000,00000000,00000000,00000016,?,00000016), ref: 001F0921

Memory Dump Source

Source File: 00000013.00000002.619891084.00000000001A1000.00000020.00020000.sdmp, Offset: 001A0000, based on PE: true

Associated: 00000013.00000002.619849404.00000000001A0000.00000002.00020000.sdmp Download File
Associated: 00000013.00000002.620617605.000000000028D000.00000002.00020000.sdmp Download File
Associated: 00000013.00000002.620703918.00000000002CA000.00000004.00020000.sdmp Download File
Associated: 00000013.00000002.620737014.00000000002CD000.00000008.00020000.sdmp Download File
Associated: 00000013.00000002.620761206.00000000002D0000.00000004.00020000.sdmp Download File
Associated: 00000013.00000002.620779970.00000000002D4000.00000002.00020000.sdmp Download File

Similarity

API ID: Window$Class$Long$ErrorInfoLastRectRegister$AdjustClientCursorLoadMenu
String ID:
API String ID: 2036137914-0
Opcode ID: 83f07e737c797e2e6dd59a24f9a1060f0dda041b1358ddc071edf656135430a0
Instruction ID: bc0fb3b685925ab4352631b3da133f00cd403a87cfd4c5274aa0a34ea298564f
Opcode Fuzzy Hash: 83f07e737c797e2e6dd59a24f9a1060f0dda041b1358ddc071edf656135430a0
Instruction Fuzzy Hash: 71F030353803157BDA266A109C13F9A7B55AB11B50F200014B696391E18BA175209A98

Uniqueness

Uniqueness Score: -1.00%

Function 002701B0, Relevance: 1.5, APIs: 1, Instructions: 32memoryCOMMON

Download Yara Rule

APIs

RtlAllocateHeap.NTDLL(00000000,?,00000000,?,00276929,00000000,?,?,0025C193,?,00000008,?,0026B90E,00000000,00000000), ref: 002701E2

Memory Dump Source

Source File: 00000013.00000002.619891084.00000000001A1000.00000020.00020000.sdmp, Offset: 001A0000, based on PE: true

Associated: 00000013.00000002.619849404.00000000001A0000.00000002.00020000.sdmp Download File
Associated: 00000013.00000002.620617605.000000000028D000.00000002.00020000.sdmp Download File
Associated: 00000013.00000002.620703918.00000000002CA000.00000004.00020000.sdmp Download File
Associated: 00000013.00000002.620737014.00000000002CD000.00000008.00020000.sdmp Download File
Associated: 00000013.00000002.620761206.00000000002D0000.00000004.00020000.sdmp Download File
Associated: 00000013.00000002.620779970.00000000002D4000.00000002.00020000.sdmp Download File

Similarity

API ID: AllocateHeap
String ID:
API String ID: 1279760036-0
Opcode ID: 53197e2e7995fa11924d71ee3d422114cb21332dd9916e289ea9660479badc4d
Instruction ID: 8561485a785fdd82477e320994d43f3f9181234228b2971af2b796aaa996f6e2
Opcode Fuzzy Hash: 53197e2e7995fa11924d71ee3d422114cb21332dd9916e289ea9660479badc4d
Instruction Fuzzy Hash: 28E0E531532116DBD7212F659C84F5F3A889B017A2F998121EC0DE21D0CBB0CCA885A1

Uniqueness

Uniqueness Score: -1.00%

Function 001F03B0, Relevance: 1.5, APIs: 1, Instructions: 16COMMON

Download Yara Rule

APIs

CallWindowProcW.USER32(00000000,00000000,?,?,00000000), ref: 001F03D1

Memory Dump Source

Source File: 00000013.00000002.619891084.00000000001A1000.00000020.00020000.sdmp, Offset: 001A0000, based on PE: true

Associated: 00000013.00000002.619849404.00000000001A0000.00000002.00020000.sdmp Download File
Associated: 00000013.00000002.620617605.000000000028D000.00000002.00020000.sdmp Download File
Associated: 00000013.00000002.620703918.00000000002CA000.00000004.00020000.sdmp Download File
Associated: 00000013.00000002.620737014.00000000002CD000.00000008.00020000.sdmp Download File
Associated: 00000013.00000002.620761206.00000000002D0000.00000004.00020000.sdmp Download File
Associated: 00000013.00000002.620779970.00000000002D4000.00000002.00020000.sdmp Download File

Similarity

API ID: CallProcWindow
String ID:
API String ID: 2714655100-0
Opcode ID: 1cda5c88c50ee9118c5c9099afba8e7afa6abba696ce5ad058af75fbcecaa521
Instruction ID: 8e1e2c32ddb796be7dac005f2c0f21d61eeea160e5b0cca6bbf7e77c92ae7c1b
Opcode Fuzzy Hash: 1cda5c88c50ee9118c5c9099afba8e7afa6abba696ce5ad058af75fbcecaa521
Instruction Fuzzy Hash: 0CD06736105108FF9B02DF88EC44C6A7BA9FB18315754841AF508C5561D333E871EB60

Uniqueness

Uniqueness Score: -1.00%

Function 001F0850, Relevance: 1.5, APIs: 1, Instructions: 9windowCOMMON

Download Yara Rule

APIs

PostMessageW.USER32(00000005,?,001DD76B,?), ref: 001F085F

Memory Dump Source

Source File: 00000013.00000002.619891084.00000000001A1000.00000020.00020000.sdmp, Offset: 001A0000, based on PE: true

Associated: 00000013.00000002.619849404.00000000001A0000.00000002.00020000.sdmp Download File
Associated: 00000013.00000002.620617605.000000000028D000.00000002.00020000.sdmp Download File
Associated: 00000013.00000002.620703918.00000000002CA000.00000004.00020000.sdmp Download File
Associated: 00000013.00000002.620737014.00000000002CD000.00000008.00020000.sdmp Download File
Associated: 00000013.00000002.620761206.00000000002D0000.00000004.00020000.sdmp Download File
Associated: 00000013.00000002.620779970.00000000002D4000.00000002.00020000.sdmp Download File

Similarity

API ID: MessagePost
String ID:
API String ID: 410705778-0
Opcode ID: e1047bb1c9b34b29814d3c781f7e13ff242fcd2bd7b87aac4cafb04d30c36fc3
Instruction ID: e1cffa9a933528a09f066a85ecd17e73d0c9fcc673e422ab7ecd99b7496160b3
Opcode Fuzzy Hash: e1047bb1c9b34b29814d3c781f7e13ff242fcd2bd7b87aac4cafb04d30c36fc3
Instruction Fuzzy Hash: F0C0013A001208FB8F026F81ED09C9ABF2AEB1A264B48801AFA180802187339531AB90

Uniqueness

Uniqueness Score: -1.00%

Non-executed Functions

Description:	This technique has been deprecated. Please use Command and Scripting Interpreter where appropriate.
Tactics:	Defense Evasion, Execution
Data Sources:	File monitoring, Process command-line parameters, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may directly interact with the native OS application programming interface (API) to execute behaviors. Native APIs provide a controlled means of calling low-level OS services within the kernel, such as those involving hardware/devices, memory, and processes.These native APIs are leveraged by the OS during system boot (when other system components are not yet initialized) as well as carrying out tasks and requests during routine operations.
Tactics:	Execution
Data Sources:	API monitoring, Loaded DLLs, Process monitoring, System calls
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse command and script interpreters to execute commands, scripts, or binaries. These interfaces and languages provide ways of interacting with computer systems and are a common feature across many different platforms. Most systems come with some built-in command-line interface and scripting capabilities, for example, macOS and Linux distributions include some flavor of Unix Shell while Windows installations include the Windows Command Shell and PowerShell .
Tactics:	Execution
Data Sources:	PowerShell logs, Process command-line parameters, Process monitoring, Windows event logs
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may execute their own malicious payloads by hijacking the search order used to load DLLs. Windows systems use a common method to look for required DLLs to load into a program. Hijacking DLL loads may be for the purpose of establishing persistence as well as elevating privileges and/or evading restrictions on file execution.
Tactics:	Defense Evasion, Persistence, Privilege Escalation
Data Sources:	DLL monitoring, File monitoring, Process command-line parameters, Process monitoring
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may establish persistence and/or elevate privileges by executing malicious content triggered by application shims. The Microsoft Windows Application Compatibility Infrastructure/Framework (Application Shim) was created to allow for backward compatibility of software as the operating system codebase changes over time. For example, the application shimming feature allows developers to apply fixes to applications (without rewriting code) that were created for Windows XP so that it will work with Windows 10.
Tactics:	Persistence, Privilege Escalation
Data Sources:	Process command-line parameters, Process monitoring, Windows Registry
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may create or modify Windows services to repeatedly execute malicious payloads as part of persistence. When Windows boots up, it starts programs or applications called services that perform background system functions.Windows service configuration information, including the file path to the service's executable or recovery programs/commands, is stored in the Windows Registry. Service configurations can be modified using utilities such as sc.exe and Reg .
Tactics:	Persistence, Privilege Escalation
Data Sources:	API monitoring, File monitoring, Process command-line parameters, Process monitoring, Windows Registry, Windows event logs
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may achieve persistence by adding a program to a startup folder or referencing it with a Registry run key. Adding an entry to the "run keys" in the Registry or startup folder will cause the program referenced to be executed when a user logs in. These programs will be executed under the context of the user and will have the account's associated permissions level.
Tactics:	Persistence, Privilege Escalation
Data Sources:	File monitoring, Windows Registry
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may modify access tokens to operate under a different user or system security context to perform actions and bypass access controls. Windows uses access tokens to determine the ownership of a running process. A user can manipulate access tokens to make a running process appear as though it is the child of a different process or belongs to someone other than the user that started the process. When this occurs, the process also takes on the security context associated with the new token.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	API monitoring, Access tokens, Authentication logs, Process command-line parameters, Process monitoring, Windows event logs
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	API monitoring, DLL monitoring, File monitoring, Named Pipes, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may disable security tools to avoid possible detection of their tools and activities. This can take the form of killing security software or event logging processes, deleting Registry keys so that tools do not start at run time, or other methods to interfere with security tools scanning or reporting information.
Tactics:	Defense Evasion
Data Sources:	File monitoring, Process command-line parameters, Services, Windows Registry
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use Obfuscated Files or Information to hide artifacts of an intrusion from analysis. They may require separate mechanisms to decode or deobfuscate that information depending on how they intend to use it. Methods for doing that include built-in functionality of malware or by using utilities present on the system.
Tactics:	Defense Evasion
Data Sources:	File monitoring, Process command-line parameters, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to make an executable or file difficult to discover or analyze by encrypting, encoding, or otherwise obfuscating its contents on the system or in transit. This is common behavior that can be used across different platforms and the network to evade defenses.
Tactics:	Defense Evasion
Data Sources:	Binary file metadata, Email gateway, Environment variable, File monitoring, Malware reverse engineering, Network intrusion detection system, Network protocol analysis, Process command-line parameters, Process monitoring, Process use of network, SSL/TLS inspection, Windows event logs
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Binary file metadata, File monitoring, Process command-line parameters, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ various means to detect and avoid virtualization and analysis environments. This may include changing behaviors based on the results of checks for the presence of artifacts indicative of a virtual machine environment (VME) or sandbox. If the adversary detects a VME, they may alter their malware to disengage from the victim or conceal the core functions of the implant. They may also search for VME artifacts before dropping secondary or additional payloads. Adversaries may use the information learned from [Virtualization/Sandbox Evasion](https://attack.mitre.org/techniques/T1497) during automated discovery to shape follow-on behaviors.
Tactics:	Defense Evasion, Discovery
Data Sources:	Process command-line parameters, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may interact with the Windows Registry to hide configuration information within Registry keys, remove information as part of cleaning up, or as part of other techniques to aid in persistence and execution.
Tactics:	Defense Evasion
Data Sources:	File monitoring, Process command-line parameters, Process monitoring, Windows Registry, Windows event logs
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use methods of capturing user input to obtain credentials or collect information. During normal system usage, users often provide credentials to various different locations, such as login pages/portals or system dialog boxes. Input capture mechanisms may be transparent to the user (e.g. Credential API Hooking ) or rely on deceiving the user into providing input into what they believe to be a genuine service (e.g. Web Portal Capture ).
Tactics:	Collection, Credential Access
Data Sources:	API monitoring, Binary file metadata, DLL monitoring, Kernel drivers, Loaded DLLs, PowerShell logs, Process command-line parameters, Process monitoring, User interface, Windows Registry, Windows event logs
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may gather the system time and/or time zone from a local or remote system. The system time is set and stored by the Windows Time Service within a domain to maintain time synchronization between systems and services in an enterprise network.
Tactics:	Discovery
Data Sources:	API monitoring, Process command-line parameters, Process monitoring
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of accounts on a system or within an environment. This information can help adversaries determine which accounts exist to aid in follow-on behavior.
Tactics:	Discovery
Data Sources:	API monitoring, Azure activity logs, Office 365 account logs, Process command-line parameters, Process monitoring
Platforms:	AWS, Azure, Azure AD, GCP, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may enumerate files and directories or may search in specific locations of a host or network share for certain information within a file system. Adversaries may use the information from File and Directory Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	File monitoring, Process command-line parameters, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture. Adversaries may use the information from System Information Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	AWS CloudTrail logs, Azure activity logs, Process command-line parameters, Process monitoring, Stackdriver logs
Platforms:	AWS, Azure, GCP, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading ...

Warning!

Analysis Report mAGs0IsoB7.exe

Overview

General Information

Detection

Compliance

Signatures

Classification

Process Tree

Malware Configuration

Yara Overview

Sigma Overview

Signature Overview

AV Detection:

Cryptography:

Privilege Escalation:

Bitcoin Miner:

Compliance:

Spreading:

Networking:

Key, Mouse, Clipboard, Microphone and Screen Capturing:

System Summary:

Data Obfuscation:

Persistence and Installation Behavior:

Boot Survival:

Hooking and other Techniques for Hiding and Protection:

Malware Analysis System Evasion:

Anti Debugging:

HIPS / PFW / Operating System Protection Evasion:

Language, Device and Operating System Detection:

Lowering of HIPS / PFW / Operating System Security Settings:

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

Contacted IPs

Public

General Information

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASN

JA3 Fingerprints

Dropped Files

Created / dropped Files

Static File Info

General

File Icon

Static PE Info

General

Authenticode Signature

Entrypoint Preview

Rich Headers

Data Directories

Sections

Resources

Imports

Version Infos

Possible Origin

Network Behavior

Network Port Distribution

TCP Packets

Description:	Adversaries may attempt to get information about running processes on a system. Information obtained could be used to gain an understanding of common software/applications running on systems within the network. Adversaries may use the information from Process Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	API monitoring, Process command-line parameters, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to identify the primary user, currently logged in user, set of users that commonly uses a system, or whether a user is actively using the system. They may do this, for example, by retrieving account usernames or by using OS Credential Dumping . The information may be collected in a number of different ways using other Discovery techniques, because user and username details are prevalent throughout a system and include running process ownership, file/directory ownership, session information, and system logs. Adversaries may use the information from [System Owner/User Discovery](https://attack.mitre.org/techniques/T1033) during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	File monitoring, Process command-line parameters, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may compress and/or encrypt data that is collected prior to exfiltration. Compressing the data can help to obfuscate the collected data and minimize the amount of data sent over the network. Encryption can be used to hide information that is being exfiltrated from detection or make exfiltration less conspicuous upon inspection by a defender.
Tactics:	Collection
Data Sources:	Binary file metadata, File monitoring, Process command-line parameters, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Files may be copied from an external adversary controlled system through the command and control channel to bring tools into the victim network or through alternate protocols with another tool such as FTP. Files can also be copied over on Mac and Linux with native tools like scp, rsync, and sftp.
Tactics:	Command and Control
Data Sources:	File monitoring, Netflow/Enclave netflow, Network protocol analysis, Packet capture, Process command-line parameters, Process monitoring, Process use of network
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Malware reverse engineering, Netflow/Enclave netflow, Packet capture, Process monitoring, Process use of network, SSL/TLS inspection
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use a non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Host network interface, Netflow/Enclave netflow, Network intrusion detection system, Network protocol analysis, Packet capture, Process use of network
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	DNS records, Netflow/Enclave netflow, Network protocol analysis, Packet capture, Process monitoring, Process use of network
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre